<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="3661">
<package pkgid="3de93430127e84c75d7c5880d81b84d826459bf5fd8384ed606eea134f6ef07e" name="Mesa" arch="aarch64">
  <version epoch="0" ver="22.3.5" rel="150500.77.2.1"/>
  <changelog author="sndirsch@suse.com" date="1667908800">- third bugfix release
  * some regressions in CI worked out
  * a bit of everything, and nothing too crazy
- supersedes u_0001-gallivm-Fix-LLVM-optimization-with-the-new-pass-mana.patch
- supersedes u_nouveau-corrupted-colors-boo1203949.patch
- get rid of Mesa-libVulkan-devel(-32bit) package, which is no
  longer needed at all by providing/obsoleting it by
  libvulkan_intel</changelog>
  <changelog author="sndirsch@suse.com" date="1668513600">- try to fix build on ppc64le due to running OOM (boo#1205441)
  * let's request 20G of physical memory via _constraints file</changelog>
  <changelog author="dmueller@suse.com" date="1668686400">- update to 22.2.4:
  * clover: windows:  library filename has \`-1` suffix and a \`lib` prefix
    when built with mingw
  * radv, dxvk: Rendering errors in World of Tanks after "Switch to dynamic
    rendering only"
  * gen9 gt3e/gt4e skus fail dEQP-VK.pipeline.multisample.sample_locations_ext.*
  * v3d: Wrong colors (pink) in videos in Firefox (likely YUV-&gt;RGB shader issue)
  * panfrost t860 glmark-es2 regression
  * radv: Flickering in Spider-Man Remastered (Regression) (Bisected)
  * radv: Hitman 2 using Direct3D 12 has discolored squares on RDNA2 with DCC
    enabled
  * panfrost/midgard -  on Duckstation PSX emulator: segfault on GLES 3.0 and
    bad shader compilations on 3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1670068800">- spefile: removed Release lines from libxatracker2,
  libxatracker-devel packages in the hope to have reproducibly
  builds also on Tumbleweed (boo#1205998)</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1672315200">- Update to version 22.3.0:
  * See https://docs.mesa3d.org/relnotes/22.3.0.html
- Update to version 22.3.1:
  * See https://docs.mesa3d.org/relnotes/22.3.1.html
- Update to version 22.3.2:
  * See https://docs.mesa3d.org/relnotes/22.3.2.html
- Remove the libXvMC_nouveau and libXvMC_r600 packages as XVMC
  support was removed.
- Add libvdpau_virtio_gpu package for VirtIO GPU.
- Rebase n_drirc-disable-rgb10-for-chromium-on-amd.patch.
- Rebase u_dep_xcb.patch.
- Rebase U_fix-mpeg1_2-decode-mesa-20.2.patch.
- Drop n_buildfix-21.3.0.patch: fixed upstream.</changelog>
  <changelog author="sndirsch@suse.com" date="1672488000">- don't try to generate libvdpau_virtio_gpu package on ppc64le; for
  some reason this driver doesn't get built on this platform</changelog>
  <changelog author="schwab@suse.de" date="1672660800">- Update list of gallium-drivers to match default list</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1673438400">- Update to version 22.3.3:
  * See https://docs.mesa3d.org/relnotes/22.3.3.html</changelog>
  <changelog author="mardnh@gmx.de" date="1673784000">- Fix some deprecation warnings
  * WARNING: option "false" deprecated, please use "disabled" instead.
  * WARNING: option "true" deprecated, please use "enabled" instead.</changelog>
  <changelog author="hp@urpla.net" date="1673870400">- Compile with gcc12 on Leaps: building drivers fails with:
  /usr/include/dxguids/dxguids.h:70:1: internal compiler error:
  in cxx_eval_bit_field_ref, at cp/constexpr.c:2578</changelog>
  <changelog author="mardnh@gmx.de" date="1673870401">- Add support for Rusticl - Mesa's new OpenCL implementation.
  * See https://docs.mesa3d.org/rusticl
  You will need to set your environment to use it
  * See https://docs.mesa3d.org/envvars#rusticl-environment-variables</changelog>
  <changelog author="sndirsch@suse.com" date="1674475200">- re-enable build on Leap, but only for 15.5; there is no gcc12
  on Leap 15.4, which is now officially required by Mesa 22.3</changelog>
  <changelog author="manfred.h@gmx.net" date="1674561600">- Add BuildRequires for x264 and x265 in case video_codecs should
  be built.</changelog>
  <changelog author="sndirsch@suse.com" date="1674561601">- force usage of gcc 12 only on Leap 15.5; there is no gcc12 on
  Leap 15.4</changelog>
  <changelog author="sndirsch@suse.com" date="1674820800">- using gcc 12 now also on Leap 15.4; after changing build project
  to openSUSE:Leap:15.4:Update gcc 12 packages are found now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1674820801">- removing again BuildRequires for x264 and x265 in case
  video_codecs should be built (these were never needed nor used
  for build)</changelog>
  <changelog author="sndirsch@suse.com" date="1674820802">- Update to version 22.3.4
  * bug fix release which fixes bugs found since Mesa 22.3.3
  * see https://docs.mesa3d.org/relnotes/22.3.4.html for more
    details</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- Don't enable rusticl without opencl</changelog>
  <changelog author="sndirsch@suse.com" date="1675944000">- Update to version 22.3.5
  * bug fix release which fixes bugs found since Mesa 22.3.4
  * see https://docs.mesa3d.org/relnotes/22.3.5.html for more
    details
- refreshed u_dep_xcb.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1676030400">- U_ReturnME.patch
  * fixes blackscreen in Return To Monkey Island on Intel graphics
    (boo#1208145)</changelog>
</package>
<package pkgid="26ce30a6122daaa71a603fd8f171ee6f189d32cdafc42662e70149a9cc30710b" name="Mesa" arch="s390x">
  <version epoch="0" ver="22.3.5" rel="150500.77.2.1"/>
  <changelog author="sndirsch@suse.com" date="1667908800">- third bugfix release
  * some regressions in CI worked out
  * a bit of everything, and nothing too crazy
- supersedes u_0001-gallivm-Fix-LLVM-optimization-with-the-new-pass-mana.patch
- supersedes u_nouveau-corrupted-colors-boo1203949.patch
- get rid of Mesa-libVulkan-devel(-32bit) package, which is no
  longer needed at all by providing/obsoleting it by
  libvulkan_intel</changelog>
  <changelog author="sndirsch@suse.com" date="1668513600">- try to fix build on ppc64le due to running OOM (boo#1205441)
  * let's request 20G of physical memory via _constraints file</changelog>
  <changelog author="dmueller@suse.com" date="1668686400">- update to 22.2.4:
  * clover: windows:  library filename has \`-1` suffix and a \`lib` prefix
    when built with mingw
  * radv, dxvk: Rendering errors in World of Tanks after "Switch to dynamic
    rendering only"
  * gen9 gt3e/gt4e skus fail dEQP-VK.pipeline.multisample.sample_locations_ext.*
  * v3d: Wrong colors (pink) in videos in Firefox (likely YUV-&gt;RGB shader issue)
  * panfrost t860 glmark-es2 regression
  * radv: Flickering in Spider-Man Remastered (Regression) (Bisected)
  * radv: Hitman 2 using Direct3D 12 has discolored squares on RDNA2 with DCC
    enabled
  * panfrost/midgard -  on Duckstation PSX emulator: segfault on GLES 3.0 and
    bad shader compilations on 3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1670068800">- spefile: removed Release lines from libxatracker2,
  libxatracker-devel packages in the hope to have reproducibly
  builds also on Tumbleweed (boo#1205998)</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1672315200">- Update to version 22.3.0:
  * See https://docs.mesa3d.org/relnotes/22.3.0.html
- Update to version 22.3.1:
  * See https://docs.mesa3d.org/relnotes/22.3.1.html
- Update to version 22.3.2:
  * See https://docs.mesa3d.org/relnotes/22.3.2.html
- Remove the libXvMC_nouveau and libXvMC_r600 packages as XVMC
  support was removed.
- Add libvdpau_virtio_gpu package for VirtIO GPU.
- Rebase n_drirc-disable-rgb10-for-chromium-on-amd.patch.
- Rebase u_dep_xcb.patch.
- Rebase U_fix-mpeg1_2-decode-mesa-20.2.patch.
- Drop n_buildfix-21.3.0.patch: fixed upstream.</changelog>
  <changelog author="sndirsch@suse.com" date="1672488000">- don't try to generate libvdpau_virtio_gpu package on ppc64le; for
  some reason this driver doesn't get built on this platform</changelog>
  <changelog author="schwab@suse.de" date="1672660800">- Update list of gallium-drivers to match default list</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1673438400">- Update to version 22.3.3:
  * See https://docs.mesa3d.org/relnotes/22.3.3.html</changelog>
  <changelog author="mardnh@gmx.de" date="1673784000">- Fix some deprecation warnings
  * WARNING: option "false" deprecated, please use "disabled" instead.
  * WARNING: option "true" deprecated, please use "enabled" instead.</changelog>
  <changelog author="hp@urpla.net" date="1673870400">- Compile with gcc12 on Leaps: building drivers fails with:
  /usr/include/dxguids/dxguids.h:70:1: internal compiler error:
  in cxx_eval_bit_field_ref, at cp/constexpr.c:2578</changelog>
  <changelog author="mardnh@gmx.de" date="1673870401">- Add support for Rusticl - Mesa's new OpenCL implementation.
  * See https://docs.mesa3d.org/rusticl
  You will need to set your environment to use it
  * See https://docs.mesa3d.org/envvars#rusticl-environment-variables</changelog>
  <changelog author="sndirsch@suse.com" date="1674475200">- re-enable build on Leap, but only for 15.5; there is no gcc12
  on Leap 15.4, which is now officially required by Mesa 22.3</changelog>
  <changelog author="manfred.h@gmx.net" date="1674561600">- Add BuildRequires for x264 and x265 in case video_codecs should
  be built.</changelog>
  <changelog author="sndirsch@suse.com" date="1674561601">- force usage of gcc 12 only on Leap 15.5; there is no gcc12 on
  Leap 15.4</changelog>
  <changelog author="sndirsch@suse.com" date="1674820800">- using gcc 12 now also on Leap 15.4; after changing build project
  to openSUSE:Leap:15.4:Update gcc 12 packages are found now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1674820801">- removing again BuildRequires for x264 and x265 in case
  video_codecs should be built (these were never needed nor used
  for build)</changelog>
  <changelog author="sndirsch@suse.com" date="1674820802">- Update to version 22.3.4
  * bug fix release which fixes bugs found since Mesa 22.3.3
  * see https://docs.mesa3d.org/relnotes/22.3.4.html for more
    details</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- Don't enable rusticl without opencl</changelog>
  <changelog author="sndirsch@suse.com" date="1675944000">- Update to version 22.3.5
  * bug fix release which fixes bugs found since Mesa 22.3.4
  * see https://docs.mesa3d.org/relnotes/22.3.5.html for more
    details
- refreshed u_dep_xcb.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1676030400">- U_ReturnME.patch
  * fixes blackscreen in Return To Monkey Island on Intel graphics
    (boo#1208145)</changelog>
</package>
<package pkgid="35c467b4e350e5cc93456e572bb22856d5577e30f6e58c8669e2bf2ec80fccb0" name="Mesa" arch="src">
  <version epoch="0" ver="22.3.5" rel="150500.77.2.1"/>
  <changelog author="sndirsch@suse.com" date="1667908800">- third bugfix release
  * some regressions in CI worked out
  * a bit of everything, and nothing too crazy
- supersedes u_0001-gallivm-Fix-LLVM-optimization-with-the-new-pass-mana.patch
- supersedes u_nouveau-corrupted-colors-boo1203949.patch
- get rid of Mesa-libVulkan-devel(-32bit) package, which is no
  longer needed at all by providing/obsoleting it by
  libvulkan_intel</changelog>
  <changelog author="sndirsch@suse.com" date="1668513600">- try to fix build on ppc64le due to running OOM (boo#1205441)
  * let's request 20G of physical memory via _constraints file</changelog>
  <changelog author="dmueller@suse.com" date="1668686400">- update to 22.2.4:
  * clover: windows:  library filename has \`-1` suffix and a \`lib` prefix
    when built with mingw
  * radv, dxvk: Rendering errors in World of Tanks after "Switch to dynamic
    rendering only"
  * gen9 gt3e/gt4e skus fail dEQP-VK.pipeline.multisample.sample_locations_ext.*
  * v3d: Wrong colors (pink) in videos in Firefox (likely YUV-&gt;RGB shader issue)
  * panfrost t860 glmark-es2 regression
  * radv: Flickering in Spider-Man Remastered (Regression) (Bisected)
  * radv: Hitman 2 using Direct3D 12 has discolored squares on RDNA2 with DCC
    enabled
  * panfrost/midgard -  on Duckstation PSX emulator: segfault on GLES 3.0 and
    bad shader compilations on 3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1670068800">- spefile: removed Release lines from libxatracker2,
  libxatracker-devel packages in the hope to have reproducibly
  builds also on Tumbleweed (boo#1205998)</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1672315200">- Update to version 22.3.0:
  * See https://docs.mesa3d.org/relnotes/22.3.0.html
- Update to version 22.3.1:
  * See https://docs.mesa3d.org/relnotes/22.3.1.html
- Update to version 22.3.2:
  * See https://docs.mesa3d.org/relnotes/22.3.2.html
- Remove the libXvMC_nouveau and libXvMC_r600 packages as XVMC
  support was removed.
- Add libvdpau_virtio_gpu package for VirtIO GPU.
- Rebase n_drirc-disable-rgb10-for-chromium-on-amd.patch.
- Rebase u_dep_xcb.patch.
- Rebase U_fix-mpeg1_2-decode-mesa-20.2.patch.
- Drop n_buildfix-21.3.0.patch: fixed upstream.</changelog>
  <changelog author="sndirsch@suse.com" date="1672488000">- don't try to generate libvdpau_virtio_gpu package on ppc64le; for
  some reason this driver doesn't get built on this platform</changelog>
  <changelog author="schwab@suse.de" date="1672660800">- Update list of gallium-drivers to match default list</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1673438400">- Update to version 22.3.3:
  * See https://docs.mesa3d.org/relnotes/22.3.3.html</changelog>
  <changelog author="mardnh@gmx.de" date="1673784000">- Fix some deprecation warnings
  * WARNING: option "false" deprecated, please use "disabled" instead.
  * WARNING: option "true" deprecated, please use "enabled" instead.</changelog>
  <changelog author="hp@urpla.net" date="1673870400">- Compile with gcc12 on Leaps: building drivers fails with:
  /usr/include/dxguids/dxguids.h:70:1: internal compiler error:
  in cxx_eval_bit_field_ref, at cp/constexpr.c:2578</changelog>
  <changelog author="mardnh@gmx.de" date="1673870401">- Add support for Rusticl - Mesa's new OpenCL implementation.
  * See https://docs.mesa3d.org/rusticl
  You will need to set your environment to use it
  * See https://docs.mesa3d.org/envvars#rusticl-environment-variables</changelog>
  <changelog author="sndirsch@suse.com" date="1674475200">- re-enable build on Leap, but only for 15.5; there is no gcc12
  on Leap 15.4, which is now officially required by Mesa 22.3</changelog>
  <changelog author="manfred.h@gmx.net" date="1674561600">- Add BuildRequires for x264 and x265 in case video_codecs should
  be built.</changelog>
  <changelog author="sndirsch@suse.com" date="1674561601">- force usage of gcc 12 only on Leap 15.5; there is no gcc12 on
  Leap 15.4</changelog>
  <changelog author="sndirsch@suse.com" date="1674820800">- using gcc 12 now also on Leap 15.4; after changing build project
  to openSUSE:Leap:15.4:Update gcc 12 packages are found now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1674820801">- removing again BuildRequires for x264 and x265 in case
  video_codecs should be built (these were never needed nor used
  for build)</changelog>
  <changelog author="sndirsch@suse.com" date="1674820802">- Update to version 22.3.4
  * bug fix release which fixes bugs found since Mesa 22.3.3
  * see https://docs.mesa3d.org/relnotes/22.3.4.html for more
    details</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- Don't enable rusticl without opencl</changelog>
  <changelog author="sndirsch@suse.com" date="1675944000">- Update to version 22.3.5
  * bug fix release which fixes bugs found since Mesa 22.3.4
  * see https://docs.mesa3d.org/relnotes/22.3.5.html for more
    details
- refreshed u_dep_xcb.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1676030400">- U_ReturnME.patch
  * fixes blackscreen in Return To Monkey Island on Intel graphics
    (boo#1208145)</changelog>
</package>
<package pkgid="dd9f2de1d1d69c237ab1ec8a428995fa44fea5053bf63191114fcd170e66e5d6" name="Mesa" arch="x86_64">
  <version epoch="0" ver="22.3.5" rel="150500.77.2.1"/>
  <changelog author="sndirsch@suse.com" date="1667908800">- third bugfix release
  * some regressions in CI worked out
  * a bit of everything, and nothing too crazy
- supersedes u_0001-gallivm-Fix-LLVM-optimization-with-the-new-pass-mana.patch
- supersedes u_nouveau-corrupted-colors-boo1203949.patch
- get rid of Mesa-libVulkan-devel(-32bit) package, which is no
  longer needed at all by providing/obsoleting it by
  libvulkan_intel</changelog>
  <changelog author="sndirsch@suse.com" date="1668513600">- try to fix build on ppc64le due to running OOM (boo#1205441)
  * let's request 20G of physical memory via _constraints file</changelog>
  <changelog author="dmueller@suse.com" date="1668686400">- update to 22.2.4:
  * clover: windows:  library filename has \`-1` suffix and a \`lib` prefix
    when built with mingw
  * radv, dxvk: Rendering errors in World of Tanks after "Switch to dynamic
    rendering only"
  * gen9 gt3e/gt4e skus fail dEQP-VK.pipeline.multisample.sample_locations_ext.*
  * v3d: Wrong colors (pink) in videos in Firefox (likely YUV-&gt;RGB shader issue)
  * panfrost t860 glmark-es2 regression
  * radv: Flickering in Spider-Man Remastered (Regression) (Bisected)
  * radv: Hitman 2 using Direct3D 12 has discolored squares on RDNA2 with DCC
    enabled
  * panfrost/midgard -  on Duckstation PSX emulator: segfault on GLES 3.0 and
    bad shader compilations on 3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1670068800">- spefile: removed Release lines from libxatracker2,
  libxatracker-devel packages in the hope to have reproducibly
  builds also on Tumbleweed (boo#1205998)</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1672315200">- Update to version 22.3.0:
  * See https://docs.mesa3d.org/relnotes/22.3.0.html
- Update to version 22.3.1:
  * See https://docs.mesa3d.org/relnotes/22.3.1.html
- Update to version 22.3.2:
  * See https://docs.mesa3d.org/relnotes/22.3.2.html
- Remove the libXvMC_nouveau and libXvMC_r600 packages as XVMC
  support was removed.
- Add libvdpau_virtio_gpu package for VirtIO GPU.
- Rebase n_drirc-disable-rgb10-for-chromium-on-amd.patch.
- Rebase u_dep_xcb.patch.
- Rebase U_fix-mpeg1_2-decode-mesa-20.2.patch.
- Drop n_buildfix-21.3.0.patch: fixed upstream.</changelog>
  <changelog author="sndirsch@suse.com" date="1672488000">- don't try to generate libvdpau_virtio_gpu package on ppc64le; for
  some reason this driver doesn't get built on this platform</changelog>
  <changelog author="schwab@suse.de" date="1672660800">- Update list of gallium-drivers to match default list</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1673438400">- Update to version 22.3.3:
  * See https://docs.mesa3d.org/relnotes/22.3.3.html</changelog>
  <changelog author="mardnh@gmx.de" date="1673784000">- Fix some deprecation warnings
  * WARNING: option "false" deprecated, please use "disabled" instead.
  * WARNING: option "true" deprecated, please use "enabled" instead.</changelog>
  <changelog author="hp@urpla.net" date="1673870400">- Compile with gcc12 on Leaps: building drivers fails with:
  /usr/include/dxguids/dxguids.h:70:1: internal compiler error:
  in cxx_eval_bit_field_ref, at cp/constexpr.c:2578</changelog>
  <changelog author="mardnh@gmx.de" date="1673870401">- Add support for Rusticl - Mesa's new OpenCL implementation.
  * See https://docs.mesa3d.org/rusticl
  You will need to set your environment to use it
  * See https://docs.mesa3d.org/envvars#rusticl-environment-variables</changelog>
  <changelog author="sndirsch@suse.com" date="1674475200">- re-enable build on Leap, but only for 15.5; there is no gcc12
  on Leap 15.4, which is now officially required by Mesa 22.3</changelog>
  <changelog author="manfred.h@gmx.net" date="1674561600">- Add BuildRequires for x264 and x265 in case video_codecs should
  be built.</changelog>
  <changelog author="sndirsch@suse.com" date="1674561601">- force usage of gcc 12 only on Leap 15.5; there is no gcc12 on
  Leap 15.4</changelog>
  <changelog author="sndirsch@suse.com" date="1674820800">- using gcc 12 now also on Leap 15.4; after changing build project
  to openSUSE:Leap:15.4:Update gcc 12 packages are found now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1674820801">- removing again BuildRequires for x264 and x265 in case
  video_codecs should be built (these were never needed nor used
  for build)</changelog>
  <changelog author="sndirsch@suse.com" date="1674820802">- Update to version 22.3.4
  * bug fix release which fixes bugs found since Mesa 22.3.3
  * see https://docs.mesa3d.org/relnotes/22.3.4.html for more
    details</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- Don't enable rusticl without opencl</changelog>
  <changelog author="sndirsch@suse.com" date="1675944000">- Update to version 22.3.5
  * bug fix release which fixes bugs found since Mesa 22.3.4
  * see https://docs.mesa3d.org/relnotes/22.3.5.html for more
    details
- refreshed u_dep_xcb.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1676030400">- U_ReturnME.patch
  * fixes blackscreen in Return To Monkey Island on Intel graphics
    (boo#1208145)</changelog>
</package>
<package pkgid="03ce0ee207c110957a41952e8b31d4f45db56ee8d0a9a6d6377efbccc3dea050" name="Mesa-dri" arch="aarch64">
  <version epoch="0" ver="22.3.5" rel="150500.77.2.1"/>
  <changelog author="sndirsch@suse.com" date="1667908800">- third bugfix release
  * some regressions in CI worked out
  * a bit of everything, and nothing too crazy
- supersedes u_0001-gallivm-Fix-LLVM-optimization-with-the-new-pass-mana.patch
- supersedes u_nouveau-corrupted-colors-boo1203949.patch
- get rid of Mesa-libVulkan-devel(-32bit) package, which is no
  longer needed at all by providing/obsoleting it by
  libvulkan_intel</changelog>
  <changelog author="sndirsch@suse.com" date="1668513600">- try to fix build on ppc64le due to running OOM (boo#1205441)
  * let's request 20G of physical memory via _constraints file</changelog>
  <changelog author="dmueller@suse.com" date="1668686400">- update to 22.2.4:
  * clover: windows:  library filename has \`-1` suffix and a \`lib` prefix
    when built with mingw
  * radv, dxvk: Rendering errors in World of Tanks after "Switch to dynamic
    rendering only"
  * gen9 gt3e/gt4e skus fail dEQP-VK.pipeline.multisample.sample_locations_ext.*
  * v3d: Wrong colors (pink) in videos in Firefox (likely YUV-&gt;RGB shader issue)
  * panfrost t860 glmark-es2 regression
  * radv: Flickering in Spider-Man Remastered (Regression) (Bisected)
  * radv: Hitman 2 using Direct3D 12 has discolored squares on RDNA2 with DCC
    enabled
  * panfrost/midgard -  on Duckstation PSX emulator: segfault on GLES 3.0 and
    bad shader compilations on 3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1670068800">- spefile: removed Release lines from libxatracker2,
  libxatracker-devel packages in the hope to have reproducibly
  builds also on Tumbleweed (boo#1205998)</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1672315200">- Update to version 22.3.0:
  * See https://docs.mesa3d.org/relnotes/22.3.0.html
- Update to version 22.3.1:
  * See https://docs.mesa3d.org/relnotes/22.3.1.html
- Update to version 22.3.2:
  * See https://docs.mesa3d.org/relnotes/22.3.2.html
- Remove the libXvMC_nouveau and libXvMC_r600 packages as XVMC
  support was removed.
- Add libvdpau_virtio_gpu package for VirtIO GPU.
- Rebase n_drirc-disable-rgb10-for-chromium-on-amd.patch.
- Rebase u_dep_xcb.patch.
- Rebase U_fix-mpeg1_2-decode-mesa-20.2.patch.
- Drop n_buildfix-21.3.0.patch: fixed upstream.</changelog>
  <changelog author="sndirsch@suse.com" date="1672488000">- don't try to generate libvdpau_virtio_gpu package on ppc64le; for
  some reason this driver doesn't get built on this platform</changelog>
  <changelog author="schwab@suse.de" date="1672660800">- Update list of gallium-drivers to match default list</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1673438400">- Update to version 22.3.3:
  * See https://docs.mesa3d.org/relnotes/22.3.3.html</changelog>
  <changelog author="mardnh@gmx.de" date="1673784000">- Fix some deprecation warnings
  * WARNING: option "false" deprecated, please use "disabled" instead.
  * WARNING: option "true" deprecated, please use "enabled" instead.</changelog>
  <changelog author="hp@urpla.net" date="1673870400">- Compile with gcc12 on Leaps: building drivers fails with:
  /usr/include/dxguids/dxguids.h:70:1: internal compiler error:
  in cxx_eval_bit_field_ref, at cp/constexpr.c:2578</changelog>
  <changelog author="mardnh@gmx.de" date="1673870401">- Add support for Rusticl - Mesa's new OpenCL implementation.
  * See https://docs.mesa3d.org/rusticl
  You will need to set your environment to use it
  * See https://docs.mesa3d.org/envvars#rusticl-environment-variables</changelog>
  <changelog author="sndirsch@suse.com" date="1674475200">- re-enable build on Leap, but only for 15.5; there is no gcc12
  on Leap 15.4, which is now officially required by Mesa 22.3</changelog>
  <changelog author="manfred.h@gmx.net" date="1674561600">- Add BuildRequires for x264 and x265 in case video_codecs should
  be built.</changelog>
  <changelog author="sndirsch@suse.com" date="1674561601">- force usage of gcc 12 only on Leap 15.5; there is no gcc12 on
  Leap 15.4</changelog>
  <changelog author="sndirsch@suse.com" date="1674820800">- using gcc 12 now also on Leap 15.4; after changing build project
  to openSUSE:Leap:15.4:Update gcc 12 packages are found now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1674820801">- removing again BuildRequires for x264 and x265 in case
  video_codecs should be built (these were never needed nor used
  for build)</changelog>
  <changelog author="sndirsch@suse.com" date="1674820802">- Update to version 22.3.4
  * bug fix release which fixes bugs found since Mesa 22.3.3
  * see https://docs.mesa3d.org/relnotes/22.3.4.html for more
    details</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- Don't enable rusticl without opencl</changelog>
  <changelog author="sndirsch@suse.com" date="1675944000">- Update to version 22.3.5
  * bug fix release which fixes bugs found since Mesa 22.3.4
  * see https://docs.mesa3d.org/relnotes/22.3.5.html for more
    details
- refreshed u_dep_xcb.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1676030400">- U_ReturnME.patch
  * fixes blackscreen in Return To Monkey Island on Intel graphics
    (boo#1208145)</changelog>
</package>
<package pkgid="3134a599d61b4405e27b0c71669a0ea88bfd09294c5fb4d40baf5cafe8c891ac" name="Mesa-dri" arch="s390x">
  <version epoch="0" ver="22.3.5" rel="150500.77.2.1"/>
  <changelog author="sndirsch@suse.com" date="1667908800">- third bugfix release
  * some regressions in CI worked out
  * a bit of everything, and nothing too crazy
- supersedes u_0001-gallivm-Fix-LLVM-optimization-with-the-new-pass-mana.patch
- supersedes u_nouveau-corrupted-colors-boo1203949.patch
- get rid of Mesa-libVulkan-devel(-32bit) package, which is no
  longer needed at all by providing/obsoleting it by
  libvulkan_intel</changelog>
  <changelog author="sndirsch@suse.com" date="1668513600">- try to fix build on ppc64le due to running OOM (boo#1205441)
  * let's request 20G of physical memory via _constraints file</changelog>
  <changelog author="dmueller@suse.com" date="1668686400">- update to 22.2.4:
  * clover: windows:  library filename has \`-1` suffix and a \`lib` prefix
    when built with mingw
  * radv, dxvk: Rendering errors in World of Tanks after "Switch to dynamic
    rendering only"
  * gen9 gt3e/gt4e skus fail dEQP-VK.pipeline.multisample.sample_locations_ext.*
  * v3d: Wrong colors (pink) in videos in Firefox (likely YUV-&gt;RGB shader issue)
  * panfrost t860 glmark-es2 regression
  * radv: Flickering in Spider-Man Remastered (Regression) (Bisected)
  * radv: Hitman 2 using Direct3D 12 has discolored squares on RDNA2 with DCC
    enabled
  * panfrost/midgard -  on Duckstation PSX emulator: segfault on GLES 3.0 and
    bad shader compilations on 3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1670068800">- spefile: removed Release lines from libxatracker2,
  libxatracker-devel packages in the hope to have reproducibly
  builds also on Tumbleweed (boo#1205998)</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1672315200">- Update to version 22.3.0:
  * See https://docs.mesa3d.org/relnotes/22.3.0.html
- Update to version 22.3.1:
  * See https://docs.mesa3d.org/relnotes/22.3.1.html
- Update to version 22.3.2:
  * See https://docs.mesa3d.org/relnotes/22.3.2.html
- Remove the libXvMC_nouveau and libXvMC_r600 packages as XVMC
  support was removed.
- Add libvdpau_virtio_gpu package for VirtIO GPU.
- Rebase n_drirc-disable-rgb10-for-chromium-on-amd.patch.
- Rebase u_dep_xcb.patch.
- Rebase U_fix-mpeg1_2-decode-mesa-20.2.patch.
- Drop n_buildfix-21.3.0.patch: fixed upstream.</changelog>
  <changelog author="sndirsch@suse.com" date="1672488000">- don't try to generate libvdpau_virtio_gpu package on ppc64le; for
  some reason this driver doesn't get built on this platform</changelog>
  <changelog author="schwab@suse.de" date="1672660800">- Update list of gallium-drivers to match default list</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1673438400">- Update to version 22.3.3:
  * See https://docs.mesa3d.org/relnotes/22.3.3.html</changelog>
  <changelog author="mardnh@gmx.de" date="1673784000">- Fix some deprecation warnings
  * WARNING: option "false" deprecated, please use "disabled" instead.
  * WARNING: option "true" deprecated, please use "enabled" instead.</changelog>
  <changelog author="hp@urpla.net" date="1673870400">- Compile with gcc12 on Leaps: building drivers fails with:
  /usr/include/dxguids/dxguids.h:70:1: internal compiler error:
  in cxx_eval_bit_field_ref, at cp/constexpr.c:2578</changelog>
  <changelog author="mardnh@gmx.de" date="1673870401">- Add support for Rusticl - Mesa's new OpenCL implementation.
  * See https://docs.mesa3d.org/rusticl
  You will need to set your environment to use it
  * See https://docs.mesa3d.org/envvars#rusticl-environment-variables</changelog>
  <changelog author="sndirsch@suse.com" date="1674475200">- re-enable build on Leap, but only for 15.5; there is no gcc12
  on Leap 15.4, which is now officially required by Mesa 22.3</changelog>
  <changelog author="manfred.h@gmx.net" date="1674561600">- Add BuildRequires for x264 and x265 in case video_codecs should
  be built.</changelog>
  <changelog author="sndirsch@suse.com" date="1674561601">- force usage of gcc 12 only on Leap 15.5; there is no gcc12 on
  Leap 15.4</changelog>
  <changelog author="sndirsch@suse.com" date="1674820800">- using gcc 12 now also on Leap 15.4; after changing build project
  to openSUSE:Leap:15.4:Update gcc 12 packages are found now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1674820801">- removing again BuildRequires for x264 and x265 in case
  video_codecs should be built (these were never needed nor used
  for build)</changelog>
  <changelog author="sndirsch@suse.com" date="1674820802">- Update to version 22.3.4
  * bug fix release which fixes bugs found since Mesa 22.3.3
  * see https://docs.mesa3d.org/relnotes/22.3.4.html for more
    details</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- Don't enable rusticl without opencl</changelog>
  <changelog author="sndirsch@suse.com" date="1675944000">- Update to version 22.3.5
  * bug fix release which fixes bugs found since Mesa 22.3.4
  * see https://docs.mesa3d.org/relnotes/22.3.5.html for more
    details
- refreshed u_dep_xcb.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1676030400">- U_ReturnME.patch
  * fixes blackscreen in Return To Monkey Island on Intel graphics
    (boo#1208145)</changelog>
</package>
<package pkgid="9e5cb256ee4526e25b60834eb2a3f3f7294386971796eb54df61fcefb4314c00" name="Mesa-dri" arch="x86_64">
  <version epoch="0" ver="22.3.5" rel="150500.77.2.1"/>
  <changelog author="sndirsch@suse.com" date="1667908800">- third bugfix release
  * some regressions in CI worked out
  * a bit of everything, and nothing too crazy
- supersedes u_0001-gallivm-Fix-LLVM-optimization-with-the-new-pass-mana.patch
- supersedes u_nouveau-corrupted-colors-boo1203949.patch
- get rid of Mesa-libVulkan-devel(-32bit) package, which is no
  longer needed at all by providing/obsoleting it by
  libvulkan_intel</changelog>
  <changelog author="sndirsch@suse.com" date="1668513600">- try to fix build on ppc64le due to running OOM (boo#1205441)
  * let's request 20G of physical memory via _constraints file</changelog>
  <changelog author="dmueller@suse.com" date="1668686400">- update to 22.2.4:
  * clover: windows:  library filename has \`-1` suffix and a \`lib` prefix
    when built with mingw
  * radv, dxvk: Rendering errors in World of Tanks after "Switch to dynamic
    rendering only"
  * gen9 gt3e/gt4e skus fail dEQP-VK.pipeline.multisample.sample_locations_ext.*
  * v3d: Wrong colors (pink) in videos in Firefox (likely YUV-&gt;RGB shader issue)
  * panfrost t860 glmark-es2 regression
  * radv: Flickering in Spider-Man Remastered (Regression) (Bisected)
  * radv: Hitman 2 using Direct3D 12 has discolored squares on RDNA2 with DCC
    enabled
  * panfrost/midgard -  on Duckstation PSX emulator: segfault on GLES 3.0 and
    bad shader compilations on 3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1670068800">- spefile: removed Release lines from libxatracker2,
  libxatracker-devel packages in the hope to have reproducibly
  builds also on Tumbleweed (boo#1205998)</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1672315200">- Update to version 22.3.0:
  * See https://docs.mesa3d.org/relnotes/22.3.0.html
- Update to version 22.3.1:
  * See https://docs.mesa3d.org/relnotes/22.3.1.html
- Update to version 22.3.2:
  * See https://docs.mesa3d.org/relnotes/22.3.2.html
- Remove the libXvMC_nouveau and libXvMC_r600 packages as XVMC
  support was removed.
- Add libvdpau_virtio_gpu package for VirtIO GPU.
- Rebase n_drirc-disable-rgb10-for-chromium-on-amd.patch.
- Rebase u_dep_xcb.patch.
- Rebase U_fix-mpeg1_2-decode-mesa-20.2.patch.
- Drop n_buildfix-21.3.0.patch: fixed upstream.</changelog>
  <changelog author="sndirsch@suse.com" date="1672488000">- don't try to generate libvdpau_virtio_gpu package on ppc64le; for
  some reason this driver doesn't get built on this platform</changelog>
  <changelog author="schwab@suse.de" date="1672660800">- Update list of gallium-drivers to match default list</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1673438400">- Update to version 22.3.3:
  * See https://docs.mesa3d.org/relnotes/22.3.3.html</changelog>
  <changelog author="mardnh@gmx.de" date="1673784000">- Fix some deprecation warnings
  * WARNING: option "false" deprecated, please use "disabled" instead.
  * WARNING: option "true" deprecated, please use "enabled" instead.</changelog>
  <changelog author="hp@urpla.net" date="1673870400">- Compile with gcc12 on Leaps: building drivers fails with:
  /usr/include/dxguids/dxguids.h:70:1: internal compiler error:
  in cxx_eval_bit_field_ref, at cp/constexpr.c:2578</changelog>
  <changelog author="mardnh@gmx.de" date="1673870401">- Add support for Rusticl - Mesa's new OpenCL implementation.
  * See https://docs.mesa3d.org/rusticl
  You will need to set your environment to use it
  * See https://docs.mesa3d.org/envvars#rusticl-environment-variables</changelog>
  <changelog author="sndirsch@suse.com" date="1674475200">- re-enable build on Leap, but only for 15.5; there is no gcc12
  on Leap 15.4, which is now officially required by Mesa 22.3</changelog>
  <changelog author="manfred.h@gmx.net" date="1674561600">- Add BuildRequires for x264 and x265 in case video_codecs should
  be built.</changelog>
  <changelog author="sndirsch@suse.com" date="1674561601">- force usage of gcc 12 only on Leap 15.5; there is no gcc12 on
  Leap 15.4</changelog>
  <changelog author="sndirsch@suse.com" date="1674820800">- using gcc 12 now also on Leap 15.4; after changing build project
  to openSUSE:Leap:15.4:Update gcc 12 packages are found now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1674820801">- removing again BuildRequires for x264 and x265 in case
  video_codecs should be built (these were never needed nor used
  for build)</changelog>
  <changelog author="sndirsch@suse.com" date="1674820802">- Update to version 22.3.4
  * bug fix release which fixes bugs found since Mesa 22.3.3
  * see https://docs.mesa3d.org/relnotes/22.3.4.html for more
    details</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- Don't enable rusticl without opencl</changelog>
  <changelog author="sndirsch@suse.com" date="1675944000">- Update to version 22.3.5
  * bug fix release which fixes bugs found since Mesa 22.3.4
  * see https://docs.mesa3d.org/relnotes/22.3.5.html for more
    details
- refreshed u_dep_xcb.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1676030400">- U_ReturnME.patch
  * fixes blackscreen in Return To Monkey Island on Intel graphics
    (boo#1208145)</changelog>
</package>
<package pkgid="8c545465b91fb00f1626c9dc4fbba109d54eea738c2382e67f62d897989858eb" name="Mesa-drivers" arch="src">
  <version epoch="0" ver="22.3.5" rel="150500.77.2.1"/>
  <changelog author="sndirsch@suse.com" date="1667908800">- third bugfix release
  * some regressions in CI worked out
  * a bit of everything, and nothing too crazy
- supersedes u_0001-gallivm-Fix-LLVM-optimization-with-the-new-pass-mana.patch
- supersedes u_nouveau-corrupted-colors-boo1203949.patch
- get rid of Mesa-libVulkan-devel(-32bit) package, which is no
  longer needed at all by providing/obsoleting it by
  libvulkan_intel</changelog>
  <changelog author="sndirsch@suse.com" date="1668513600">- try to fix build on ppc64le due to running OOM (boo#1205441)
  * let's request 20G of physical memory via _constraints file</changelog>
  <changelog author="dmueller@suse.com" date="1668686400">- update to 22.2.4:
  * clover: windows:  library filename has \`-1` suffix and a \`lib` prefix
    when built with mingw
  * radv, dxvk: Rendering errors in World of Tanks after "Switch to dynamic
    rendering only"
  * gen9 gt3e/gt4e skus fail dEQP-VK.pipeline.multisample.sample_locations_ext.*
  * v3d: Wrong colors (pink) in videos in Firefox (likely YUV-&gt;RGB shader issue)
  * panfrost t860 glmark-es2 regression
  * radv: Flickering in Spider-Man Remastered (Regression) (Bisected)
  * radv: Hitman 2 using Direct3D 12 has discolored squares on RDNA2 with DCC
    enabled
  * panfrost/midgard -  on Duckstation PSX emulator: segfault on GLES 3.0 and
    bad shader compilations on 3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1670068800">- spefile: removed Release lines from libxatracker2,
  libxatracker-devel packages in the hope to have reproducibly
  builds also on Tumbleweed (boo#1205998)</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1672315200">- Update to version 22.3.0:
  * See https://docs.mesa3d.org/relnotes/22.3.0.html
- Update to version 22.3.1:
  * See https://docs.mesa3d.org/relnotes/22.3.1.html
- Update to version 22.3.2:
  * See https://docs.mesa3d.org/relnotes/22.3.2.html
- Remove the libXvMC_nouveau and libXvMC_r600 packages as XVMC
  support was removed.
- Add libvdpau_virtio_gpu package for VirtIO GPU.
- Rebase n_drirc-disable-rgb10-for-chromium-on-amd.patch.
- Rebase u_dep_xcb.patch.
- Rebase U_fix-mpeg1_2-decode-mesa-20.2.patch.
- Drop n_buildfix-21.3.0.patch: fixed upstream.</changelog>
  <changelog author="sndirsch@suse.com" date="1672488000">- don't try to generate libvdpau_virtio_gpu package on ppc64le; for
  some reason this driver doesn't get built on this platform</changelog>
  <changelog author="schwab@suse.de" date="1672660800">- Update list of gallium-drivers to match default list</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1673438400">- Update to version 22.3.3:
  * See https://docs.mesa3d.org/relnotes/22.3.3.html</changelog>
  <changelog author="mardnh@gmx.de" date="1673784000">- Fix some deprecation warnings
  * WARNING: option "false" deprecated, please use "disabled" instead.
  * WARNING: option "true" deprecated, please use "enabled" instead.</changelog>
  <changelog author="hp@urpla.net" date="1673870400">- Compile with gcc12 on Leaps: building drivers fails with:
  /usr/include/dxguids/dxguids.h:70:1: internal compiler error:
  in cxx_eval_bit_field_ref, at cp/constexpr.c:2578</changelog>
  <changelog author="mardnh@gmx.de" date="1673870401">- Add support for Rusticl - Mesa's new OpenCL implementation.
  * See https://docs.mesa3d.org/rusticl
  You will need to set your environment to use it
  * See https://docs.mesa3d.org/envvars#rusticl-environment-variables</changelog>
  <changelog author="sndirsch@suse.com" date="1674475200">- re-enable build on Leap, but only for 15.5; there is no gcc12
  on Leap 15.4, which is now officially required by Mesa 22.3</changelog>
  <changelog author="manfred.h@gmx.net" date="1674561600">- Add BuildRequires for x264 and x265 in case video_codecs should
  be built.</changelog>
  <changelog author="sndirsch@suse.com" date="1674561601">- force usage of gcc 12 only on Leap 15.5; there is no gcc12 on
  Leap 15.4</changelog>
  <changelog author="sndirsch@suse.com" date="1674820800">- using gcc 12 now also on Leap 15.4; after changing build project
  to openSUSE:Leap:15.4:Update gcc 12 packages are found now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1674820801">- removing again BuildRequires for x264 and x265 in case
  video_codecs should be built (these were never needed nor used
  for build)</changelog>
  <changelog author="sndirsch@suse.com" date="1674820802">- Update to version 22.3.4
  * bug fix release which fixes bugs found since Mesa 22.3.3
  * see https://docs.mesa3d.org/relnotes/22.3.4.html for more
    details</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- Don't enable rusticl without opencl</changelog>
  <changelog author="sndirsch@suse.com" date="1675944000">- Update to version 22.3.5
  * bug fix release which fixes bugs found since Mesa 22.3.4
  * see https://docs.mesa3d.org/relnotes/22.3.5.html for more
    details
- refreshed u_dep_xcb.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1676030400">- U_ReturnME.patch
  * fixes blackscreen in Return To Monkey Island on Intel graphics
    (boo#1208145)</changelog>
</package>
<package pkgid="aa2090904eec1103154e1b07219c4d65ef61e690c6d906e0db3f2c7c8f4106ce" name="Mesa-gallium" arch="aarch64">
  <version epoch="0" ver="22.3.5" rel="150500.77.2.1"/>
  <changelog author="sndirsch@suse.com" date="1667908800">- third bugfix release
  * some regressions in CI worked out
  * a bit of everything, and nothing too crazy
- supersedes u_0001-gallivm-Fix-LLVM-optimization-with-the-new-pass-mana.patch
- supersedes u_nouveau-corrupted-colors-boo1203949.patch
- get rid of Mesa-libVulkan-devel(-32bit) package, which is no
  longer needed at all by providing/obsoleting it by
  libvulkan_intel</changelog>
  <changelog author="sndirsch@suse.com" date="1668513600">- try to fix build on ppc64le due to running OOM (boo#1205441)
  * let's request 20G of physical memory via _constraints file</changelog>
  <changelog author="dmueller@suse.com" date="1668686400">- update to 22.2.4:
  * clover: windows:  library filename has \`-1` suffix and a \`lib` prefix
    when built with mingw
  * radv, dxvk: Rendering errors in World of Tanks after "Switch to dynamic
    rendering only"
  * gen9 gt3e/gt4e skus fail dEQP-VK.pipeline.multisample.sample_locations_ext.*
  * v3d: Wrong colors (pink) in videos in Firefox (likely YUV-&gt;RGB shader issue)
  * panfrost t860 glmark-es2 regression
  * radv: Flickering in Spider-Man Remastered (Regression) (Bisected)
  * radv: Hitman 2 using Direct3D 12 has discolored squares on RDNA2 with DCC
    enabled
  * panfrost/midgard -  on Duckstation PSX emulator: segfault on GLES 3.0 and
    bad shader compilations on 3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1670068800">- spefile: removed Release lines from libxatracker2,
  libxatracker-devel packages in the hope to have reproducibly
  builds also on Tumbleweed (boo#1205998)</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1672315200">- Update to version 22.3.0:
  * See https://docs.mesa3d.org/relnotes/22.3.0.html
- Update to version 22.3.1:
  * See https://docs.mesa3d.org/relnotes/22.3.1.html
- Update to version 22.3.2:
  * See https://docs.mesa3d.org/relnotes/22.3.2.html
- Remove the libXvMC_nouveau and libXvMC_r600 packages as XVMC
  support was removed.
- Add libvdpau_virtio_gpu package for VirtIO GPU.
- Rebase n_drirc-disable-rgb10-for-chromium-on-amd.patch.
- Rebase u_dep_xcb.patch.
- Rebase U_fix-mpeg1_2-decode-mesa-20.2.patch.
- Drop n_buildfix-21.3.0.patch: fixed upstream.</changelog>
  <changelog author="sndirsch@suse.com" date="1672488000">- don't try to generate libvdpau_virtio_gpu package on ppc64le; for
  some reason this driver doesn't get built on this platform</changelog>
  <changelog author="schwab@suse.de" date="1672660800">- Update list of gallium-drivers to match default list</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1673438400">- Update to version 22.3.3:
  * See https://docs.mesa3d.org/relnotes/22.3.3.html</changelog>
  <changelog author="mardnh@gmx.de" date="1673784000">- Fix some deprecation warnings
  * WARNING: option "false" deprecated, please use "disabled" instead.
  * WARNING: option "true" deprecated, please use "enabled" instead.</changelog>
  <changelog author="hp@urpla.net" date="1673870400">- Compile with gcc12 on Leaps: building drivers fails with:
  /usr/include/dxguids/dxguids.h:70:1: internal compiler error:
  in cxx_eval_bit_field_ref, at cp/constexpr.c:2578</changelog>
  <changelog author="mardnh@gmx.de" date="1673870401">- Add support for Rusticl - Mesa's new OpenCL implementation.
  * See https://docs.mesa3d.org/rusticl
  You will need to set your environment to use it
  * See https://docs.mesa3d.org/envvars#rusticl-environment-variables</changelog>
  <changelog author="sndirsch@suse.com" date="1674475200">- re-enable build on Leap, but only for 15.5; there is no gcc12
  on Leap 15.4, which is now officially required by Mesa 22.3</changelog>
  <changelog author="manfred.h@gmx.net" date="1674561600">- Add BuildRequires for x264 and x265 in case video_codecs should
  be built.</changelog>
  <changelog author="sndirsch@suse.com" date="1674561601">- force usage of gcc 12 only on Leap 15.5; there is no gcc12 on
  Leap 15.4</changelog>
  <changelog author="sndirsch@suse.com" date="1674820800">- using gcc 12 now also on Leap 15.4; after changing build project
  to openSUSE:Leap:15.4:Update gcc 12 packages are found now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1674820801">- removing again BuildRequires for x264 and x265 in case
  video_codecs should be built (these were never needed nor used
  for build)</changelog>
  <changelog author="sndirsch@suse.com" date="1674820802">- Update to version 22.3.4
  * bug fix release which fixes bugs found since Mesa 22.3.3
  * see https://docs.mesa3d.org/relnotes/22.3.4.html for more
    details</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- Don't enable rusticl without opencl</changelog>
  <changelog author="sndirsch@suse.com" date="1675944000">- Update to version 22.3.5
  * bug fix release which fixes bugs found since Mesa 22.3.4
  * see https://docs.mesa3d.org/relnotes/22.3.5.html for more
    details
- refreshed u_dep_xcb.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1676030400">- U_ReturnME.patch
  * fixes blackscreen in Return To Monkey Island on Intel graphics
    (boo#1208145)</changelog>
</package>
<package pkgid="3ac0d0ab5c12adfd6ac487a1efe808fd712395d8e094754b9a5f723850a80487" name="Mesa-gallium" arch="x86_64">
  <version epoch="0" ver="22.3.5" rel="150500.77.2.1"/>
  <changelog author="sndirsch@suse.com" date="1667908800">- third bugfix release
  * some regressions in CI worked out
  * a bit of everything, and nothing too crazy
- supersedes u_0001-gallivm-Fix-LLVM-optimization-with-the-new-pass-mana.patch
- supersedes u_nouveau-corrupted-colors-boo1203949.patch
- get rid of Mesa-libVulkan-devel(-32bit) package, which is no
  longer needed at all by providing/obsoleting it by
  libvulkan_intel</changelog>
  <changelog author="sndirsch@suse.com" date="1668513600">- try to fix build on ppc64le due to running OOM (boo#1205441)
  * let's request 20G of physical memory via _constraints file</changelog>
  <changelog author="dmueller@suse.com" date="1668686400">- update to 22.2.4:
  * clover: windows:  library filename has \`-1` suffix and a \`lib` prefix
    when built with mingw
  * radv, dxvk: Rendering errors in World of Tanks after "Switch to dynamic
    rendering only"
  * gen9 gt3e/gt4e skus fail dEQP-VK.pipeline.multisample.sample_locations_ext.*
  * v3d: Wrong colors (pink) in videos in Firefox (likely YUV-&gt;RGB shader issue)
  * panfrost t860 glmark-es2 regression
  * radv: Flickering in Spider-Man Remastered (Regression) (Bisected)
  * radv: Hitman 2 using Direct3D 12 has discolored squares on RDNA2 with DCC
    enabled
  * panfrost/midgard -  on Duckstation PSX emulator: segfault on GLES 3.0 and
    bad shader compilations on 3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1670068800">- spefile: removed Release lines from libxatracker2,
  libxatracker-devel packages in the hope to have reproducibly
  builds also on Tumbleweed (boo#1205998)</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1672315200">- Update to version 22.3.0:
  * See https://docs.mesa3d.org/relnotes/22.3.0.html
- Update to version 22.3.1:
  * See https://docs.mesa3d.org/relnotes/22.3.1.html
- Update to version 22.3.2:
  * See https://docs.mesa3d.org/relnotes/22.3.2.html
- Remove the libXvMC_nouveau and libXvMC_r600 packages as XVMC
  support was removed.
- Add libvdpau_virtio_gpu package for VirtIO GPU.
- Rebase n_drirc-disable-rgb10-for-chromium-on-amd.patch.
- Rebase u_dep_xcb.patch.
- Rebase U_fix-mpeg1_2-decode-mesa-20.2.patch.
- Drop n_buildfix-21.3.0.patch: fixed upstream.</changelog>
  <changelog author="sndirsch@suse.com" date="1672488000">- don't try to generate libvdpau_virtio_gpu package on ppc64le; for
  some reason this driver doesn't get built on this platform</changelog>
  <changelog author="schwab@suse.de" date="1672660800">- Update list of gallium-drivers to match default list</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1673438400">- Update to version 22.3.3:
  * See https://docs.mesa3d.org/relnotes/22.3.3.html</changelog>
  <changelog author="mardnh@gmx.de" date="1673784000">- Fix some deprecation warnings
  * WARNING: option "false" deprecated, please use "disabled" instead.
  * WARNING: option "true" deprecated, please use "enabled" instead.</changelog>
  <changelog author="hp@urpla.net" date="1673870400">- Compile with gcc12 on Leaps: building drivers fails with:
  /usr/include/dxguids/dxguids.h:70:1: internal compiler error:
  in cxx_eval_bit_field_ref, at cp/constexpr.c:2578</changelog>
  <changelog author="mardnh@gmx.de" date="1673870401">- Add support for Rusticl - Mesa's new OpenCL implementation.
  * See https://docs.mesa3d.org/rusticl
  You will need to set your environment to use it
  * See https://docs.mesa3d.org/envvars#rusticl-environment-variables</changelog>
  <changelog author="sndirsch@suse.com" date="1674475200">- re-enable build on Leap, but only for 15.5; there is no gcc12
  on Leap 15.4, which is now officially required by Mesa 22.3</changelog>
  <changelog author="manfred.h@gmx.net" date="1674561600">- Add BuildRequires for x264 and x265 in case video_codecs should
  be built.</changelog>
  <changelog author="sndirsch@suse.com" date="1674561601">- force usage of gcc 12 only on Leap 15.5; there is no gcc12 on
  Leap 15.4</changelog>
  <changelog author="sndirsch@suse.com" date="1674820800">- using gcc 12 now also on Leap 15.4; after changing build project
  to openSUSE:Leap:15.4:Update gcc 12 packages are found now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1674820801">- removing again BuildRequires for x264 and x265 in case
  video_codecs should be built (these were never needed nor used
  for build)</changelog>
  <changelog author="sndirsch@suse.com" date="1674820802">- Update to version 22.3.4
  * bug fix release which fixes bugs found since Mesa 22.3.3
  * see https://docs.mesa3d.org/relnotes/22.3.4.html for more
    details</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- Don't enable rusticl without opencl</changelog>
  <changelog author="sndirsch@suse.com" date="1675944000">- Update to version 22.3.5
  * bug fix release which fixes bugs found since Mesa 22.3.4
  * see https://docs.mesa3d.org/relnotes/22.3.5.html for more
    details
- refreshed u_dep_xcb.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1676030400">- U_ReturnME.patch
  * fixes blackscreen in Return To Monkey Island on Intel graphics
    (boo#1208145)</changelog>
</package>
<package pkgid="fa0eaf4ed49844f5c3fd640b9cd14f657ce3beb8c371094a51810fe801303090" name="Mesa-libEGL1" arch="aarch64">
  <version epoch="0" ver="22.3.5" rel="150500.77.2.1"/>
  <changelog author="sndirsch@suse.com" date="1667908800">- third bugfix release
  * some regressions in CI worked out
  * a bit of everything, and nothing too crazy
- supersedes u_0001-gallivm-Fix-LLVM-optimization-with-the-new-pass-mana.patch
- supersedes u_nouveau-corrupted-colors-boo1203949.patch
- get rid of Mesa-libVulkan-devel(-32bit) package, which is no
  longer needed at all by providing/obsoleting it by
  libvulkan_intel</changelog>
  <changelog author="sndirsch@suse.com" date="1668513600">- try to fix build on ppc64le due to running OOM (boo#1205441)
  * let's request 20G of physical memory via _constraints file</changelog>
  <changelog author="dmueller@suse.com" date="1668686400">- update to 22.2.4:
  * clover: windows:  library filename has \`-1` suffix and a \`lib` prefix
    when built with mingw
  * radv, dxvk: Rendering errors in World of Tanks after "Switch to dynamic
    rendering only"
  * gen9 gt3e/gt4e skus fail dEQP-VK.pipeline.multisample.sample_locations_ext.*
  * v3d: Wrong colors (pink) in videos in Firefox (likely YUV-&gt;RGB shader issue)
  * panfrost t860 glmark-es2 regression
  * radv: Flickering in Spider-Man Remastered (Regression) (Bisected)
  * radv: Hitman 2 using Direct3D 12 has discolored squares on RDNA2 with DCC
    enabled
  * panfrost/midgard -  on Duckstation PSX emulator: segfault on GLES 3.0 and
    bad shader compilations on 3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1670068800">- spefile: removed Release lines from libxatracker2,
  libxatracker-devel packages in the hope to have reproducibly
  builds also on Tumbleweed (boo#1205998)</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1672315200">- Update to version 22.3.0:
  * See https://docs.mesa3d.org/relnotes/22.3.0.html
- Update to version 22.3.1:
  * See https://docs.mesa3d.org/relnotes/22.3.1.html
- Update to version 22.3.2:
  * See https://docs.mesa3d.org/relnotes/22.3.2.html
- Remove the libXvMC_nouveau and libXvMC_r600 packages as XVMC
  support was removed.
- Add libvdpau_virtio_gpu package for VirtIO GPU.
- Rebase n_drirc-disable-rgb10-for-chromium-on-amd.patch.
- Rebase u_dep_xcb.patch.
- Rebase U_fix-mpeg1_2-decode-mesa-20.2.patch.
- Drop n_buildfix-21.3.0.patch: fixed upstream.</changelog>
  <changelog author="sndirsch@suse.com" date="1672488000">- don't try to generate libvdpau_virtio_gpu package on ppc64le; for
  some reason this driver doesn't get built on this platform</changelog>
  <changelog author="schwab@suse.de" date="1672660800">- Update list of gallium-drivers to match default list</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1673438400">- Update to version 22.3.3:
  * See https://docs.mesa3d.org/relnotes/22.3.3.html</changelog>
  <changelog author="mardnh@gmx.de" date="1673784000">- Fix some deprecation warnings
  * WARNING: option "false" deprecated, please use "disabled" instead.
  * WARNING: option "true" deprecated, please use "enabled" instead.</changelog>
  <changelog author="hp@urpla.net" date="1673870400">- Compile with gcc12 on Leaps: building drivers fails with:
  /usr/include/dxguids/dxguids.h:70:1: internal compiler error:
  in cxx_eval_bit_field_ref, at cp/constexpr.c:2578</changelog>
  <changelog author="mardnh@gmx.de" date="1673870401">- Add support for Rusticl - Mesa's new OpenCL implementation.
  * See https://docs.mesa3d.org/rusticl
  You will need to set your environment to use it
  * See https://docs.mesa3d.org/envvars#rusticl-environment-variables</changelog>
  <changelog author="sndirsch@suse.com" date="1674475200">- re-enable build on Leap, but only for 15.5; there is no gcc12
  on Leap 15.4, which is now officially required by Mesa 22.3</changelog>
  <changelog author="manfred.h@gmx.net" date="1674561600">- Add BuildRequires for x264 and x265 in case video_codecs should
  be built.</changelog>
  <changelog author="sndirsch@suse.com" date="1674561601">- force usage of gcc 12 only on Leap 15.5; there is no gcc12 on
  Leap 15.4</changelog>
  <changelog author="sndirsch@suse.com" date="1674820800">- using gcc 12 now also on Leap 15.4; after changing build project
  to openSUSE:Leap:15.4:Update gcc 12 packages are found now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1674820801">- removing again BuildRequires for x264 and x265 in case
  video_codecs should be built (these were never needed nor used
  for build)</changelog>
  <changelog author="sndirsch@suse.com" date="1674820802">- Update to version 22.3.4
  * bug fix release which fixes bugs found since Mesa 22.3.3
  * see https://docs.mesa3d.org/relnotes/22.3.4.html for more
    details</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- Don't enable rusticl without opencl</changelog>
  <changelog author="sndirsch@suse.com" date="1675944000">- Update to version 22.3.5
  * bug fix release which fixes bugs found since Mesa 22.3.4
  * see https://docs.mesa3d.org/relnotes/22.3.5.html for more
    details
- refreshed u_dep_xcb.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1676030400">- U_ReturnME.patch
  * fixes blackscreen in Return To Monkey Island on Intel graphics
    (boo#1208145)</changelog>
</package>
<package pkgid="5785d4400cfd85667def80fa7a444e0151994c027ad19a12b18a50d4f42ed96b" name="Mesa-libEGL1" arch="s390x">
  <version epoch="0" ver="22.3.5" rel="150500.77.2.1"/>
  <changelog author="sndirsch@suse.com" date="1667908800">- third bugfix release
  * some regressions in CI worked out
  * a bit of everything, and nothing too crazy
- supersedes u_0001-gallivm-Fix-LLVM-optimization-with-the-new-pass-mana.patch
- supersedes u_nouveau-corrupted-colors-boo1203949.patch
- get rid of Mesa-libVulkan-devel(-32bit) package, which is no
  longer needed at all by providing/obsoleting it by
  libvulkan_intel</changelog>
  <changelog author="sndirsch@suse.com" date="1668513600">- try to fix build on ppc64le due to running OOM (boo#1205441)
  * let's request 20G of physical memory via _constraints file</changelog>
  <changelog author="dmueller@suse.com" date="1668686400">- update to 22.2.4:
  * clover: windows:  library filename has \`-1` suffix and a \`lib` prefix
    when built with mingw
  * radv, dxvk: Rendering errors in World of Tanks after "Switch to dynamic
    rendering only"
  * gen9 gt3e/gt4e skus fail dEQP-VK.pipeline.multisample.sample_locations_ext.*
  * v3d: Wrong colors (pink) in videos in Firefox (likely YUV-&gt;RGB shader issue)
  * panfrost t860 glmark-es2 regression
  * radv: Flickering in Spider-Man Remastered (Regression) (Bisected)
  * radv: Hitman 2 using Direct3D 12 has discolored squares on RDNA2 with DCC
    enabled
  * panfrost/midgard -  on Duckstation PSX emulator: segfault on GLES 3.0 and
    bad shader compilations on 3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1670068800">- spefile: removed Release lines from libxatracker2,
  libxatracker-devel packages in the hope to have reproducibly
  builds also on Tumbleweed (boo#1205998)</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1672315200">- Update to version 22.3.0:
  * See https://docs.mesa3d.org/relnotes/22.3.0.html
- Update to version 22.3.1:
  * See https://docs.mesa3d.org/relnotes/22.3.1.html
- Update to version 22.3.2:
  * See https://docs.mesa3d.org/relnotes/22.3.2.html
- Remove the libXvMC_nouveau and libXvMC_r600 packages as XVMC
  support was removed.
- Add libvdpau_virtio_gpu package for VirtIO GPU.
- Rebase n_drirc-disable-rgb10-for-chromium-on-amd.patch.
- Rebase u_dep_xcb.patch.
- Rebase U_fix-mpeg1_2-decode-mesa-20.2.patch.
- Drop n_buildfix-21.3.0.patch: fixed upstream.</changelog>
  <changelog author="sndirsch@suse.com" date="1672488000">- don't try to generate libvdpau_virtio_gpu package on ppc64le; for
  some reason this driver doesn't get built on this platform</changelog>
  <changelog author="schwab@suse.de" date="1672660800">- Update list of gallium-drivers to match default list</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1673438400">- Update to version 22.3.3:
  * See https://docs.mesa3d.org/relnotes/22.3.3.html</changelog>
  <changelog author="mardnh@gmx.de" date="1673784000">- Fix some deprecation warnings
  * WARNING: option "false" deprecated, please use "disabled" instead.
  * WARNING: option "true" deprecated, please use "enabled" instead.</changelog>
  <changelog author="hp@urpla.net" date="1673870400">- Compile with gcc12 on Leaps: building drivers fails with:
  /usr/include/dxguids/dxguids.h:70:1: internal compiler error:
  in cxx_eval_bit_field_ref, at cp/constexpr.c:2578</changelog>
  <changelog author="mardnh@gmx.de" date="1673870401">- Add support for Rusticl - Mesa's new OpenCL implementation.
  * See https://docs.mesa3d.org/rusticl
  You will need to set your environment to use it
  * See https://docs.mesa3d.org/envvars#rusticl-environment-variables</changelog>
  <changelog author="sndirsch@suse.com" date="1674475200">- re-enable build on Leap, but only for 15.5; there is no gcc12
  on Leap 15.4, which is now officially required by Mesa 22.3</changelog>
  <changelog author="manfred.h@gmx.net" date="1674561600">- Add BuildRequires for x264 and x265 in case video_codecs should
  be built.</changelog>
  <changelog author="sndirsch@suse.com" date="1674561601">- force usage of gcc 12 only on Leap 15.5; there is no gcc12 on
  Leap 15.4</changelog>
  <changelog author="sndirsch@suse.com" date="1674820800">- using gcc 12 now also on Leap 15.4; after changing build project
  to openSUSE:Leap:15.4:Update gcc 12 packages are found now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1674820801">- removing again BuildRequires for x264 and x265 in case
  video_codecs should be built (these were never needed nor used
  for build)</changelog>
  <changelog author="sndirsch@suse.com" date="1674820802">- Update to version 22.3.4
  * bug fix release which fixes bugs found since Mesa 22.3.3
  * see https://docs.mesa3d.org/relnotes/22.3.4.html for more
    details</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- Don't enable rusticl without opencl</changelog>
  <changelog author="sndirsch@suse.com" date="1675944000">- Update to version 22.3.5
  * bug fix release which fixes bugs found since Mesa 22.3.4
  * see https://docs.mesa3d.org/relnotes/22.3.5.html for more
    details
- refreshed u_dep_xcb.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1676030400">- U_ReturnME.patch
  * fixes blackscreen in Return To Monkey Island on Intel graphics
    (boo#1208145)</changelog>
</package>
<package pkgid="2fa13080bca7838a6d72c439fd01d7a47dc50c989cd849afcab0a70092dba1c1" name="Mesa-libEGL1" arch="x86_64">
  <version epoch="0" ver="22.3.5" rel="150500.77.2.1"/>
  <changelog author="sndirsch@suse.com" date="1667908800">- third bugfix release
  * some regressions in CI worked out
  * a bit of everything, and nothing too crazy
- supersedes u_0001-gallivm-Fix-LLVM-optimization-with-the-new-pass-mana.patch
- supersedes u_nouveau-corrupted-colors-boo1203949.patch
- get rid of Mesa-libVulkan-devel(-32bit) package, which is no
  longer needed at all by providing/obsoleting it by
  libvulkan_intel</changelog>
  <changelog author="sndirsch@suse.com" date="1668513600">- try to fix build on ppc64le due to running OOM (boo#1205441)
  * let's request 20G of physical memory via _constraints file</changelog>
  <changelog author="dmueller@suse.com" date="1668686400">- update to 22.2.4:
  * clover: windows:  library filename has \`-1` suffix and a \`lib` prefix
    when built with mingw
  * radv, dxvk: Rendering errors in World of Tanks after "Switch to dynamic
    rendering only"
  * gen9 gt3e/gt4e skus fail dEQP-VK.pipeline.multisample.sample_locations_ext.*
  * v3d: Wrong colors (pink) in videos in Firefox (likely YUV-&gt;RGB shader issue)
  * panfrost t860 glmark-es2 regression
  * radv: Flickering in Spider-Man Remastered (Regression) (Bisected)
  * radv: Hitman 2 using Direct3D 12 has discolored squares on RDNA2 with DCC
    enabled
  * panfrost/midgard -  on Duckstation PSX emulator: segfault on GLES 3.0 and
    bad shader compilations on 3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1670068800">- spefile: removed Release lines from libxatracker2,
  libxatracker-devel packages in the hope to have reproducibly
  builds also on Tumbleweed (boo#1205998)</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1672315200">- Update to version 22.3.0:
  * See https://docs.mesa3d.org/relnotes/22.3.0.html
- Update to version 22.3.1:
  * See https://docs.mesa3d.org/relnotes/22.3.1.html
- Update to version 22.3.2:
  * See https://docs.mesa3d.org/relnotes/22.3.2.html
- Remove the libXvMC_nouveau and libXvMC_r600 packages as XVMC
  support was removed.
- Add libvdpau_virtio_gpu package for VirtIO GPU.
- Rebase n_drirc-disable-rgb10-for-chromium-on-amd.patch.
- Rebase u_dep_xcb.patch.
- Rebase U_fix-mpeg1_2-decode-mesa-20.2.patch.
- Drop n_buildfix-21.3.0.patch: fixed upstream.</changelog>
  <changelog author="sndirsch@suse.com" date="1672488000">- don't try to generate libvdpau_virtio_gpu package on ppc64le; for
  some reason this driver doesn't get built on this platform</changelog>
  <changelog author="schwab@suse.de" date="1672660800">- Update list of gallium-drivers to match default list</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1673438400">- Update to version 22.3.3:
  * See https://docs.mesa3d.org/relnotes/22.3.3.html</changelog>
  <changelog author="mardnh@gmx.de" date="1673784000">- Fix some deprecation warnings
  * WARNING: option "false" deprecated, please use "disabled" instead.
  * WARNING: option "true" deprecated, please use "enabled" instead.</changelog>
  <changelog author="hp@urpla.net" date="1673870400">- Compile with gcc12 on Leaps: building drivers fails with:
  /usr/include/dxguids/dxguids.h:70:1: internal compiler error:
  in cxx_eval_bit_field_ref, at cp/constexpr.c:2578</changelog>
  <changelog author="mardnh@gmx.de" date="1673870401">- Add support for Rusticl - Mesa's new OpenCL implementation.
  * See https://docs.mesa3d.org/rusticl
  You will need to set your environment to use it
  * See https://docs.mesa3d.org/envvars#rusticl-environment-variables</changelog>
  <changelog author="sndirsch@suse.com" date="1674475200">- re-enable build on Leap, but only for 15.5; there is no gcc12
  on Leap 15.4, which is now officially required by Mesa 22.3</changelog>
  <changelog author="manfred.h@gmx.net" date="1674561600">- Add BuildRequires for x264 and x265 in case video_codecs should
  be built.</changelog>
  <changelog author="sndirsch@suse.com" date="1674561601">- force usage of gcc 12 only on Leap 15.5; there is no gcc12 on
  Leap 15.4</changelog>
  <changelog author="sndirsch@suse.com" date="1674820800">- using gcc 12 now also on Leap 15.4; after changing build project
  to openSUSE:Leap:15.4:Update gcc 12 packages are found now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1674820801">- removing again BuildRequires for x264 and x265 in case
  video_codecs should be built (these were never needed nor used
  for build)</changelog>
  <changelog author="sndirsch@suse.com" date="1674820802">- Update to version 22.3.4
  * bug fix release which fixes bugs found since Mesa 22.3.3
  * see https://docs.mesa3d.org/relnotes/22.3.4.html for more
    details</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- Don't enable rusticl without opencl</changelog>
  <changelog author="sndirsch@suse.com" date="1675944000">- Update to version 22.3.5
  * bug fix release which fixes bugs found since Mesa 22.3.4
  * see https://docs.mesa3d.org/relnotes/22.3.5.html for more
    details
- refreshed u_dep_xcb.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1676030400">- U_ReturnME.patch
  * fixes blackscreen in Return To Monkey Island on Intel graphics
    (boo#1208145)</changelog>
</package>
<package pkgid="231ea8d63bd9c8a1b6d6a25a9d2ccc0446261c7a3e6098e1d3cfe2db5f32f153" name="Mesa-libGL1" arch="aarch64">
  <version epoch="0" ver="22.3.5" rel="150500.77.2.1"/>
  <changelog author="sndirsch@suse.com" date="1667908800">- third bugfix release
  * some regressions in CI worked out
  * a bit of everything, and nothing too crazy
- supersedes u_0001-gallivm-Fix-LLVM-optimization-with-the-new-pass-mana.patch
- supersedes u_nouveau-corrupted-colors-boo1203949.patch
- get rid of Mesa-libVulkan-devel(-32bit) package, which is no
  longer needed at all by providing/obsoleting it by
  libvulkan_intel</changelog>
  <changelog author="sndirsch@suse.com" date="1668513600">- try to fix build on ppc64le due to running OOM (boo#1205441)
  * let's request 20G of physical memory via _constraints file</changelog>
  <changelog author="dmueller@suse.com" date="1668686400">- update to 22.2.4:
  * clover: windows:  library filename has \`-1` suffix and a \`lib` prefix
    when built with mingw
  * radv, dxvk: Rendering errors in World of Tanks after "Switch to dynamic
    rendering only"
  * gen9 gt3e/gt4e skus fail dEQP-VK.pipeline.multisample.sample_locations_ext.*
  * v3d: Wrong colors (pink) in videos in Firefox (likely YUV-&gt;RGB shader issue)
  * panfrost t860 glmark-es2 regression
  * radv: Flickering in Spider-Man Remastered (Regression) (Bisected)
  * radv: Hitman 2 using Direct3D 12 has discolored squares on RDNA2 with DCC
    enabled
  * panfrost/midgard -  on Duckstation PSX emulator: segfault on GLES 3.0 and
    bad shader compilations on 3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1670068800">- spefile: removed Release lines from libxatracker2,
  libxatracker-devel packages in the hope to have reproducibly
  builds also on Tumbleweed (boo#1205998)</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1672315200">- Update to version 22.3.0:
  * See https://docs.mesa3d.org/relnotes/22.3.0.html
- Update to version 22.3.1:
  * See https://docs.mesa3d.org/relnotes/22.3.1.html
- Update to version 22.3.2:
  * See https://docs.mesa3d.org/relnotes/22.3.2.html
- Remove the libXvMC_nouveau and libXvMC_r600 packages as XVMC
  support was removed.
- Add libvdpau_virtio_gpu package for VirtIO GPU.
- Rebase n_drirc-disable-rgb10-for-chromium-on-amd.patch.
- Rebase u_dep_xcb.patch.
- Rebase U_fix-mpeg1_2-decode-mesa-20.2.patch.
- Drop n_buildfix-21.3.0.patch: fixed upstream.</changelog>
  <changelog author="sndirsch@suse.com" date="1672488000">- don't try to generate libvdpau_virtio_gpu package on ppc64le; for
  some reason this driver doesn't get built on this platform</changelog>
  <changelog author="schwab@suse.de" date="1672660800">- Update list of gallium-drivers to match default list</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1673438400">- Update to version 22.3.3:
  * See https://docs.mesa3d.org/relnotes/22.3.3.html</changelog>
  <changelog author="mardnh@gmx.de" date="1673784000">- Fix some deprecation warnings
  * WARNING: option "false" deprecated, please use "disabled" instead.
  * WARNING: option "true" deprecated, please use "enabled" instead.</changelog>
  <changelog author="hp@urpla.net" date="1673870400">- Compile with gcc12 on Leaps: building drivers fails with:
  /usr/include/dxguids/dxguids.h:70:1: internal compiler error:
  in cxx_eval_bit_field_ref, at cp/constexpr.c:2578</changelog>
  <changelog author="mardnh@gmx.de" date="1673870401">- Add support for Rusticl - Mesa's new OpenCL implementation.
  * See https://docs.mesa3d.org/rusticl
  You will need to set your environment to use it
  * See https://docs.mesa3d.org/envvars#rusticl-environment-variables</changelog>
  <changelog author="sndirsch@suse.com" date="1674475200">- re-enable build on Leap, but only for 15.5; there is no gcc12
  on Leap 15.4, which is now officially required by Mesa 22.3</changelog>
  <changelog author="manfred.h@gmx.net" date="1674561600">- Add BuildRequires for x264 and x265 in case video_codecs should
  be built.</changelog>
  <changelog author="sndirsch@suse.com" date="1674561601">- force usage of gcc 12 only on Leap 15.5; there is no gcc12 on
  Leap 15.4</changelog>
  <changelog author="sndirsch@suse.com" date="1674820800">- using gcc 12 now also on Leap 15.4; after changing build project
  to openSUSE:Leap:15.4:Update gcc 12 packages are found now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1674820801">- removing again BuildRequires for x264 and x265 in case
  video_codecs should be built (these were never needed nor used
  for build)</changelog>
  <changelog author="sndirsch@suse.com" date="1674820802">- Update to version 22.3.4
  * bug fix release which fixes bugs found since Mesa 22.3.3
  * see https://docs.mesa3d.org/relnotes/22.3.4.html for more
    details</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- Don't enable rusticl without opencl</changelog>
  <changelog author="sndirsch@suse.com" date="1675944000">- Update to version 22.3.5
  * bug fix release which fixes bugs found since Mesa 22.3.4
  * see https://docs.mesa3d.org/relnotes/22.3.5.html for more
    details
- refreshed u_dep_xcb.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1676030400">- U_ReturnME.patch
  * fixes blackscreen in Return To Monkey Island on Intel graphics
    (boo#1208145)</changelog>
</package>
<package pkgid="16042a55a6d463b8cd40670c61a9c2145e036f8a28b6622ec4ad66ca775816cd" name="Mesa-libGL1" arch="s390x">
  <version epoch="0" ver="22.3.5" rel="150500.77.2.1"/>
  <changelog author="sndirsch@suse.com" date="1667908800">- third bugfix release
  * some regressions in CI worked out
  * a bit of everything, and nothing too crazy
- supersedes u_0001-gallivm-Fix-LLVM-optimization-with-the-new-pass-mana.patch
- supersedes u_nouveau-corrupted-colors-boo1203949.patch
- get rid of Mesa-libVulkan-devel(-32bit) package, which is no
  longer needed at all by providing/obsoleting it by
  libvulkan_intel</changelog>
  <changelog author="sndirsch@suse.com" date="1668513600">- try to fix build on ppc64le due to running OOM (boo#1205441)
  * let's request 20G of physical memory via _constraints file</changelog>
  <changelog author="dmueller@suse.com" date="1668686400">- update to 22.2.4:
  * clover: windows:  library filename has \`-1` suffix and a \`lib` prefix
    when built with mingw
  * radv, dxvk: Rendering errors in World of Tanks after "Switch to dynamic
    rendering only"
  * gen9 gt3e/gt4e skus fail dEQP-VK.pipeline.multisample.sample_locations_ext.*
  * v3d: Wrong colors (pink) in videos in Firefox (likely YUV-&gt;RGB shader issue)
  * panfrost t860 glmark-es2 regression
  * radv: Flickering in Spider-Man Remastered (Regression) (Bisected)
  * radv: Hitman 2 using Direct3D 12 has discolored squares on RDNA2 with DCC
    enabled
  * panfrost/midgard -  on Duckstation PSX emulator: segfault on GLES 3.0 and
    bad shader compilations on 3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1670068800">- spefile: removed Release lines from libxatracker2,
  libxatracker-devel packages in the hope to have reproducibly
  builds also on Tumbleweed (boo#1205998)</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1672315200">- Update to version 22.3.0:
  * See https://docs.mesa3d.org/relnotes/22.3.0.html
- Update to version 22.3.1:
  * See https://docs.mesa3d.org/relnotes/22.3.1.html
- Update to version 22.3.2:
  * See https://docs.mesa3d.org/relnotes/22.3.2.html
- Remove the libXvMC_nouveau and libXvMC_r600 packages as XVMC
  support was removed.
- Add libvdpau_virtio_gpu package for VirtIO GPU.
- Rebase n_drirc-disable-rgb10-for-chromium-on-amd.patch.
- Rebase u_dep_xcb.patch.
- Rebase U_fix-mpeg1_2-decode-mesa-20.2.patch.
- Drop n_buildfix-21.3.0.patch: fixed upstream.</changelog>
  <changelog author="sndirsch@suse.com" date="1672488000">- don't try to generate libvdpau_virtio_gpu package on ppc64le; for
  some reason this driver doesn't get built on this platform</changelog>
  <changelog author="schwab@suse.de" date="1672660800">- Update list of gallium-drivers to match default list</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1673438400">- Update to version 22.3.3:
  * See https://docs.mesa3d.org/relnotes/22.3.3.html</changelog>
  <changelog author="mardnh@gmx.de" date="1673784000">- Fix some deprecation warnings
  * WARNING: option "false" deprecated, please use "disabled" instead.
  * WARNING: option "true" deprecated, please use "enabled" instead.</changelog>
  <changelog author="hp@urpla.net" date="1673870400">- Compile with gcc12 on Leaps: building drivers fails with:
  /usr/include/dxguids/dxguids.h:70:1: internal compiler error:
  in cxx_eval_bit_field_ref, at cp/constexpr.c:2578</changelog>
  <changelog author="mardnh@gmx.de" date="1673870401">- Add support for Rusticl - Mesa's new OpenCL implementation.
  * See https://docs.mesa3d.org/rusticl
  You will need to set your environment to use it
  * See https://docs.mesa3d.org/envvars#rusticl-environment-variables</changelog>
  <changelog author="sndirsch@suse.com" date="1674475200">- re-enable build on Leap, but only for 15.5; there is no gcc12
  on Leap 15.4, which is now officially required by Mesa 22.3</changelog>
  <changelog author="manfred.h@gmx.net" date="1674561600">- Add BuildRequires for x264 and x265 in case video_codecs should
  be built.</changelog>
  <changelog author="sndirsch@suse.com" date="1674561601">- force usage of gcc 12 only on Leap 15.5; there is no gcc12 on
  Leap 15.4</changelog>
  <changelog author="sndirsch@suse.com" date="1674820800">- using gcc 12 now also on Leap 15.4; after changing build project
  to openSUSE:Leap:15.4:Update gcc 12 packages are found now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1674820801">- removing again BuildRequires for x264 and x265 in case
  video_codecs should be built (these were never needed nor used
  for build)</changelog>
  <changelog author="sndirsch@suse.com" date="1674820802">- Update to version 22.3.4
  * bug fix release which fixes bugs found since Mesa 22.3.3
  * see https://docs.mesa3d.org/relnotes/22.3.4.html for more
    details</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- Don't enable rusticl without opencl</changelog>
  <changelog author="sndirsch@suse.com" date="1675944000">- Update to version 22.3.5
  * bug fix release which fixes bugs found since Mesa 22.3.4
  * see https://docs.mesa3d.org/relnotes/22.3.5.html for more
    details
- refreshed u_dep_xcb.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1676030400">- U_ReturnME.patch
  * fixes blackscreen in Return To Monkey Island on Intel graphics
    (boo#1208145)</changelog>
</package>
<package pkgid="bf897f031d25f3fb0895930670f6052279b62db9013df8d5ccc9fffcc14d05bf" name="Mesa-libGL1" arch="x86_64">
  <version epoch="0" ver="22.3.5" rel="150500.77.2.1"/>
  <changelog author="sndirsch@suse.com" date="1667908800">- third bugfix release
  * some regressions in CI worked out
  * a bit of everything, and nothing too crazy
- supersedes u_0001-gallivm-Fix-LLVM-optimization-with-the-new-pass-mana.patch
- supersedes u_nouveau-corrupted-colors-boo1203949.patch
- get rid of Mesa-libVulkan-devel(-32bit) package, which is no
  longer needed at all by providing/obsoleting it by
  libvulkan_intel</changelog>
  <changelog author="sndirsch@suse.com" date="1668513600">- try to fix build on ppc64le due to running OOM (boo#1205441)
  * let's request 20G of physical memory via _constraints file</changelog>
  <changelog author="dmueller@suse.com" date="1668686400">- update to 22.2.4:
  * clover: windows:  library filename has \`-1` suffix and a \`lib` prefix
    when built with mingw
  * radv, dxvk: Rendering errors in World of Tanks after "Switch to dynamic
    rendering only"
  * gen9 gt3e/gt4e skus fail dEQP-VK.pipeline.multisample.sample_locations_ext.*
  * v3d: Wrong colors (pink) in videos in Firefox (likely YUV-&gt;RGB shader issue)
  * panfrost t860 glmark-es2 regression
  * radv: Flickering in Spider-Man Remastered (Regression) (Bisected)
  * radv: Hitman 2 using Direct3D 12 has discolored squares on RDNA2 with DCC
    enabled
  * panfrost/midgard -  on Duckstation PSX emulator: segfault on GLES 3.0 and
    bad shader compilations on 3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1670068800">- spefile: removed Release lines from libxatracker2,
  libxatracker-devel packages in the hope to have reproducibly
  builds also on Tumbleweed (boo#1205998)</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1672315200">- Update to version 22.3.0:
  * See https://docs.mesa3d.org/relnotes/22.3.0.html
- Update to version 22.3.1:
  * See https://docs.mesa3d.org/relnotes/22.3.1.html
- Update to version 22.3.2:
  * See https://docs.mesa3d.org/relnotes/22.3.2.html
- Remove the libXvMC_nouveau and libXvMC_r600 packages as XVMC
  support was removed.
- Add libvdpau_virtio_gpu package for VirtIO GPU.
- Rebase n_drirc-disable-rgb10-for-chromium-on-amd.patch.
- Rebase u_dep_xcb.patch.
- Rebase U_fix-mpeg1_2-decode-mesa-20.2.patch.
- Drop n_buildfix-21.3.0.patch: fixed upstream.</changelog>
  <changelog author="sndirsch@suse.com" date="1672488000">- don't try to generate libvdpau_virtio_gpu package on ppc64le; for
  some reason this driver doesn't get built on this platform</changelog>
  <changelog author="schwab@suse.de" date="1672660800">- Update list of gallium-drivers to match default list</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1673438400">- Update to version 22.3.3:
  * See https://docs.mesa3d.org/relnotes/22.3.3.html</changelog>
  <changelog author="mardnh@gmx.de" date="1673784000">- Fix some deprecation warnings
  * WARNING: option "false" deprecated, please use "disabled" instead.
  * WARNING: option "true" deprecated, please use "enabled" instead.</changelog>
  <changelog author="hp@urpla.net" date="1673870400">- Compile with gcc12 on Leaps: building drivers fails with:
  /usr/include/dxguids/dxguids.h:70:1: internal compiler error:
  in cxx_eval_bit_field_ref, at cp/constexpr.c:2578</changelog>
  <changelog author="mardnh@gmx.de" date="1673870401">- Add support for Rusticl - Mesa's new OpenCL implementation.
  * See https://docs.mesa3d.org/rusticl
  You will need to set your environment to use it
  * See https://docs.mesa3d.org/envvars#rusticl-environment-variables</changelog>
  <changelog author="sndirsch@suse.com" date="1674475200">- re-enable build on Leap, but only for 15.5; there is no gcc12
  on Leap 15.4, which is now officially required by Mesa 22.3</changelog>
  <changelog author="manfred.h@gmx.net" date="1674561600">- Add BuildRequires for x264 and x265 in case video_codecs should
  be built.</changelog>
  <changelog author="sndirsch@suse.com" date="1674561601">- force usage of gcc 12 only on Leap 15.5; there is no gcc12 on
  Leap 15.4</changelog>
  <changelog author="sndirsch@suse.com" date="1674820800">- using gcc 12 now also on Leap 15.4; after changing build project
  to openSUSE:Leap:15.4:Update gcc 12 packages are found now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1674820801">- removing again BuildRequires for x264 and x265 in case
  video_codecs should be built (these were never needed nor used
  for build)</changelog>
  <changelog author="sndirsch@suse.com" date="1674820802">- Update to version 22.3.4
  * bug fix release which fixes bugs found since Mesa 22.3.3
  * see https://docs.mesa3d.org/relnotes/22.3.4.html for more
    details</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- Don't enable rusticl without opencl</changelog>
  <changelog author="sndirsch@suse.com" date="1675944000">- Update to version 22.3.5
  * bug fix release which fixes bugs found since Mesa 22.3.4
  * see https://docs.mesa3d.org/relnotes/22.3.5.html for more
    details
- refreshed u_dep_xcb.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1676030400">- U_ReturnME.patch
  * fixes blackscreen in Return To Monkey Island on Intel graphics
    (boo#1208145)</changelog>
</package>
<package pkgid="8ef7ae30f9ee4cc36e27df3aead1ddc42d347d44acfd1267f8a43d19ca4f6457" name="Mesa-libglapi0" arch="aarch64">
  <version epoch="0" ver="22.3.5" rel="150500.77.2.1"/>
  <changelog author="sndirsch@suse.com" date="1667908800">- third bugfix release
  * some regressions in CI worked out
  * a bit of everything, and nothing too crazy
- supersedes u_0001-gallivm-Fix-LLVM-optimization-with-the-new-pass-mana.patch
- supersedes u_nouveau-corrupted-colors-boo1203949.patch
- get rid of Mesa-libVulkan-devel(-32bit) package, which is no
  longer needed at all by providing/obsoleting it by
  libvulkan_intel</changelog>
  <changelog author="sndirsch@suse.com" date="1668513600">- try to fix build on ppc64le due to running OOM (boo#1205441)
  * let's request 20G of physical memory via _constraints file</changelog>
  <changelog author="dmueller@suse.com" date="1668686400">- update to 22.2.4:
  * clover: windows:  library filename has \`-1` suffix and a \`lib` prefix
    when built with mingw
  * radv, dxvk: Rendering errors in World of Tanks after "Switch to dynamic
    rendering only"
  * gen9 gt3e/gt4e skus fail dEQP-VK.pipeline.multisample.sample_locations_ext.*
  * v3d: Wrong colors (pink) in videos in Firefox (likely YUV-&gt;RGB shader issue)
  * panfrost t860 glmark-es2 regression
  * radv: Flickering in Spider-Man Remastered (Regression) (Bisected)
  * radv: Hitman 2 using Direct3D 12 has discolored squares on RDNA2 with DCC
    enabled
  * panfrost/midgard -  on Duckstation PSX emulator: segfault on GLES 3.0 and
    bad shader compilations on 3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1670068800">- spefile: removed Release lines from libxatracker2,
  libxatracker-devel packages in the hope to have reproducibly
  builds also on Tumbleweed (boo#1205998)</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1672315200">- Update to version 22.3.0:
  * See https://docs.mesa3d.org/relnotes/22.3.0.html
- Update to version 22.3.1:
  * See https://docs.mesa3d.org/relnotes/22.3.1.html
- Update to version 22.3.2:
  * See https://docs.mesa3d.org/relnotes/22.3.2.html
- Remove the libXvMC_nouveau and libXvMC_r600 packages as XVMC
  support was removed.
- Add libvdpau_virtio_gpu package for VirtIO GPU.
- Rebase n_drirc-disable-rgb10-for-chromium-on-amd.patch.
- Rebase u_dep_xcb.patch.
- Rebase U_fix-mpeg1_2-decode-mesa-20.2.patch.
- Drop n_buildfix-21.3.0.patch: fixed upstream.</changelog>
  <changelog author="sndirsch@suse.com" date="1672488000">- don't try to generate libvdpau_virtio_gpu package on ppc64le; for
  some reason this driver doesn't get built on this platform</changelog>
  <changelog author="schwab@suse.de" date="1672660800">- Update list of gallium-drivers to match default list</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1673438400">- Update to version 22.3.3:
  * See https://docs.mesa3d.org/relnotes/22.3.3.html</changelog>
  <changelog author="mardnh@gmx.de" date="1673784000">- Fix some deprecation warnings
  * WARNING: option "false" deprecated, please use "disabled" instead.
  * WARNING: option "true" deprecated, please use "enabled" instead.</changelog>
  <changelog author="hp@urpla.net" date="1673870400">- Compile with gcc12 on Leaps: building drivers fails with:
  /usr/include/dxguids/dxguids.h:70:1: internal compiler error:
  in cxx_eval_bit_field_ref, at cp/constexpr.c:2578</changelog>
  <changelog author="mardnh@gmx.de" date="1673870401">- Add support for Rusticl - Mesa's new OpenCL implementation.
  * See https://docs.mesa3d.org/rusticl
  You will need to set your environment to use it
  * See https://docs.mesa3d.org/envvars#rusticl-environment-variables</changelog>
  <changelog author="sndirsch@suse.com" date="1674475200">- re-enable build on Leap, but only for 15.5; there is no gcc12
  on Leap 15.4, which is now officially required by Mesa 22.3</changelog>
  <changelog author="manfred.h@gmx.net" date="1674561600">- Add BuildRequires for x264 and x265 in case video_codecs should
  be built.</changelog>
  <changelog author="sndirsch@suse.com" date="1674561601">- force usage of gcc 12 only on Leap 15.5; there is no gcc12 on
  Leap 15.4</changelog>
  <changelog author="sndirsch@suse.com" date="1674820800">- using gcc 12 now also on Leap 15.4; after changing build project
  to openSUSE:Leap:15.4:Update gcc 12 packages are found now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1674820801">- removing again BuildRequires for x264 and x265 in case
  video_codecs should be built (these were never needed nor used
  for build)</changelog>
  <changelog author="sndirsch@suse.com" date="1674820802">- Update to version 22.3.4
  * bug fix release which fixes bugs found since Mesa 22.3.3
  * see https://docs.mesa3d.org/relnotes/22.3.4.html for more
    details</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- Don't enable rusticl without opencl</changelog>
  <changelog author="sndirsch@suse.com" date="1675944000">- Update to version 22.3.5
  * bug fix release which fixes bugs found since Mesa 22.3.4
  * see https://docs.mesa3d.org/relnotes/22.3.5.html for more
    details
- refreshed u_dep_xcb.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1676030400">- U_ReturnME.patch
  * fixes blackscreen in Return To Monkey Island on Intel graphics
    (boo#1208145)</changelog>
</package>
<package pkgid="85ed42b339a3aa04c36f1b1d713bbc9e94330737dc1f8958166ebf7a0f30dc7f" name="Mesa-libglapi0" arch="s390x">
  <version epoch="0" ver="22.3.5" rel="150500.77.2.1"/>
  <changelog author="sndirsch@suse.com" date="1667908800">- third bugfix release
  * some regressions in CI worked out
  * a bit of everything, and nothing too crazy
- supersedes u_0001-gallivm-Fix-LLVM-optimization-with-the-new-pass-mana.patch
- supersedes u_nouveau-corrupted-colors-boo1203949.patch
- get rid of Mesa-libVulkan-devel(-32bit) package, which is no
  longer needed at all by providing/obsoleting it by
  libvulkan_intel</changelog>
  <changelog author="sndirsch@suse.com" date="1668513600">- try to fix build on ppc64le due to running OOM (boo#1205441)
  * let's request 20G of physical memory via _constraints file</changelog>
  <changelog author="dmueller@suse.com" date="1668686400">- update to 22.2.4:
  * clover: windows:  library filename has \`-1` suffix and a \`lib` prefix
    when built with mingw
  * radv, dxvk: Rendering errors in World of Tanks after "Switch to dynamic
    rendering only"
  * gen9 gt3e/gt4e skus fail dEQP-VK.pipeline.multisample.sample_locations_ext.*
  * v3d: Wrong colors (pink) in videos in Firefox (likely YUV-&gt;RGB shader issue)
  * panfrost t860 glmark-es2 regression
  * radv: Flickering in Spider-Man Remastered (Regression) (Bisected)
  * radv: Hitman 2 using Direct3D 12 has discolored squares on RDNA2 with DCC
    enabled
  * panfrost/midgard -  on Duckstation PSX emulator: segfault on GLES 3.0 and
    bad shader compilations on 3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1670068800">- spefile: removed Release lines from libxatracker2,
  libxatracker-devel packages in the hope to have reproducibly
  builds also on Tumbleweed (boo#1205998)</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1672315200">- Update to version 22.3.0:
  * See https://docs.mesa3d.org/relnotes/22.3.0.html
- Update to version 22.3.1:
  * See https://docs.mesa3d.org/relnotes/22.3.1.html
- Update to version 22.3.2:
  * See https://docs.mesa3d.org/relnotes/22.3.2.html
- Remove the libXvMC_nouveau and libXvMC_r600 packages as XVMC
  support was removed.
- Add libvdpau_virtio_gpu package for VirtIO GPU.
- Rebase n_drirc-disable-rgb10-for-chromium-on-amd.patch.
- Rebase u_dep_xcb.patch.
- Rebase U_fix-mpeg1_2-decode-mesa-20.2.patch.
- Drop n_buildfix-21.3.0.patch: fixed upstream.</changelog>
  <changelog author="sndirsch@suse.com" date="1672488000">- don't try to generate libvdpau_virtio_gpu package on ppc64le; for
  some reason this driver doesn't get built on this platform</changelog>
  <changelog author="schwab@suse.de" date="1672660800">- Update list of gallium-drivers to match default list</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1673438400">- Update to version 22.3.3:
  * See https://docs.mesa3d.org/relnotes/22.3.3.html</changelog>
  <changelog author="mardnh@gmx.de" date="1673784000">- Fix some deprecation warnings
  * WARNING: option "false" deprecated, please use "disabled" instead.
  * WARNING: option "true" deprecated, please use "enabled" instead.</changelog>
  <changelog author="hp@urpla.net" date="1673870400">- Compile with gcc12 on Leaps: building drivers fails with:
  /usr/include/dxguids/dxguids.h:70:1: internal compiler error:
  in cxx_eval_bit_field_ref, at cp/constexpr.c:2578</changelog>
  <changelog author="mardnh@gmx.de" date="1673870401">- Add support for Rusticl - Mesa's new OpenCL implementation.
  * See https://docs.mesa3d.org/rusticl
  You will need to set your environment to use it
  * See https://docs.mesa3d.org/envvars#rusticl-environment-variables</changelog>
  <changelog author="sndirsch@suse.com" date="1674475200">- re-enable build on Leap, but only for 15.5; there is no gcc12
  on Leap 15.4, which is now officially required by Mesa 22.3</changelog>
  <changelog author="manfred.h@gmx.net" date="1674561600">- Add BuildRequires for x264 and x265 in case video_codecs should
  be built.</changelog>
  <changelog author="sndirsch@suse.com" date="1674561601">- force usage of gcc 12 only on Leap 15.5; there is no gcc12 on
  Leap 15.4</changelog>
  <changelog author="sndirsch@suse.com" date="1674820800">- using gcc 12 now also on Leap 15.4; after changing build project
  to openSUSE:Leap:15.4:Update gcc 12 packages are found now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1674820801">- removing again BuildRequires for x264 and x265 in case
  video_codecs should be built (these were never needed nor used
  for build)</changelog>
  <changelog author="sndirsch@suse.com" date="1674820802">- Update to version 22.3.4
  * bug fix release which fixes bugs found since Mesa 22.3.3
  * see https://docs.mesa3d.org/relnotes/22.3.4.html for more
    details</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- Don't enable rusticl without opencl</changelog>
  <changelog author="sndirsch@suse.com" date="1675944000">- Update to version 22.3.5
  * bug fix release which fixes bugs found since Mesa 22.3.4
  * see https://docs.mesa3d.org/relnotes/22.3.5.html for more
    details
- refreshed u_dep_xcb.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1676030400">- U_ReturnME.patch
  * fixes blackscreen in Return To Monkey Island on Intel graphics
    (boo#1208145)</changelog>
</package>
<package pkgid="06170d0e78d07a7f3e7ded2427ff429325ba46d493162be07dd37589f4c7b82a" name="Mesa-libglapi0" arch="x86_64">
  <version epoch="0" ver="22.3.5" rel="150500.77.2.1"/>
  <changelog author="sndirsch@suse.com" date="1667908800">- third bugfix release
  * some regressions in CI worked out
  * a bit of everything, and nothing too crazy
- supersedes u_0001-gallivm-Fix-LLVM-optimization-with-the-new-pass-mana.patch
- supersedes u_nouveau-corrupted-colors-boo1203949.patch
- get rid of Mesa-libVulkan-devel(-32bit) package, which is no
  longer needed at all by providing/obsoleting it by
  libvulkan_intel</changelog>
  <changelog author="sndirsch@suse.com" date="1668513600">- try to fix build on ppc64le due to running OOM (boo#1205441)
  * let's request 20G of physical memory via _constraints file</changelog>
  <changelog author="dmueller@suse.com" date="1668686400">- update to 22.2.4:
  * clover: windows:  library filename has \`-1` suffix and a \`lib` prefix
    when built with mingw
  * radv, dxvk: Rendering errors in World of Tanks after "Switch to dynamic
    rendering only"
  * gen9 gt3e/gt4e skus fail dEQP-VK.pipeline.multisample.sample_locations_ext.*
  * v3d: Wrong colors (pink) in videos in Firefox (likely YUV-&gt;RGB shader issue)
  * panfrost t860 glmark-es2 regression
  * radv: Flickering in Spider-Man Remastered (Regression) (Bisected)
  * radv: Hitman 2 using Direct3D 12 has discolored squares on RDNA2 with DCC
    enabled
  * panfrost/midgard -  on Duckstation PSX emulator: segfault on GLES 3.0 and
    bad shader compilations on 3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1670068800">- spefile: removed Release lines from libxatracker2,
  libxatracker-devel packages in the hope to have reproducibly
  builds also on Tumbleweed (boo#1205998)</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1672315200">- Update to version 22.3.0:
  * See https://docs.mesa3d.org/relnotes/22.3.0.html
- Update to version 22.3.1:
  * See https://docs.mesa3d.org/relnotes/22.3.1.html
- Update to version 22.3.2:
  * See https://docs.mesa3d.org/relnotes/22.3.2.html
- Remove the libXvMC_nouveau and libXvMC_r600 packages as XVMC
  support was removed.
- Add libvdpau_virtio_gpu package for VirtIO GPU.
- Rebase n_drirc-disable-rgb10-for-chromium-on-amd.patch.
- Rebase u_dep_xcb.patch.
- Rebase U_fix-mpeg1_2-decode-mesa-20.2.patch.
- Drop n_buildfix-21.3.0.patch: fixed upstream.</changelog>
  <changelog author="sndirsch@suse.com" date="1672488000">- don't try to generate libvdpau_virtio_gpu package on ppc64le; for
  some reason this driver doesn't get built on this platform</changelog>
  <changelog author="schwab@suse.de" date="1672660800">- Update list of gallium-drivers to match default list</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1673438400">- Update to version 22.3.3:
  * See https://docs.mesa3d.org/relnotes/22.3.3.html</changelog>
  <changelog author="mardnh@gmx.de" date="1673784000">- Fix some deprecation warnings
  * WARNING: option "false" deprecated, please use "disabled" instead.
  * WARNING: option "true" deprecated, please use "enabled" instead.</changelog>
  <changelog author="hp@urpla.net" date="1673870400">- Compile with gcc12 on Leaps: building drivers fails with:
  /usr/include/dxguids/dxguids.h:70:1: internal compiler error:
  in cxx_eval_bit_field_ref, at cp/constexpr.c:2578</changelog>
  <changelog author="mardnh@gmx.de" date="1673870401">- Add support for Rusticl - Mesa's new OpenCL implementation.
  * See https://docs.mesa3d.org/rusticl
  You will need to set your environment to use it
  * See https://docs.mesa3d.org/envvars#rusticl-environment-variables</changelog>
  <changelog author="sndirsch@suse.com" date="1674475200">- re-enable build on Leap, but only for 15.5; there is no gcc12
  on Leap 15.4, which is now officially required by Mesa 22.3</changelog>
  <changelog author="manfred.h@gmx.net" date="1674561600">- Add BuildRequires for x264 and x265 in case video_codecs should
  be built.</changelog>
  <changelog author="sndirsch@suse.com" date="1674561601">- force usage of gcc 12 only on Leap 15.5; there is no gcc12 on
  Leap 15.4</changelog>
  <changelog author="sndirsch@suse.com" date="1674820800">- using gcc 12 now also on Leap 15.4; after changing build project
  to openSUSE:Leap:15.4:Update gcc 12 packages are found now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1674820801">- removing again BuildRequires for x264 and x265 in case
  video_codecs should be built (these were never needed nor used
  for build)</changelog>
  <changelog author="sndirsch@suse.com" date="1674820802">- Update to version 22.3.4
  * bug fix release which fixes bugs found since Mesa 22.3.3
  * see https://docs.mesa3d.org/relnotes/22.3.4.html for more
    details</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- Don't enable rusticl without opencl</changelog>
  <changelog author="sndirsch@suse.com" date="1675944000">- Update to version 22.3.5
  * bug fix release which fixes bugs found since Mesa 22.3.4
  * see https://docs.mesa3d.org/relnotes/22.3.5.html for more
    details
- refreshed u_dep_xcb.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1676030400">- U_ReturnME.patch
  * fixes blackscreen in Return To Monkey Island on Intel graphics
    (boo#1208145)</changelog>
</package>
<package pkgid="891bcab6190203713d6577451655a5220d7fdd0f386c55c586a6a68b716ff6a8" name="NetworkManager" arch="aarch64">
  <version epoch="0" ver="1.38.6" rel="150500.3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Update to version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.
- Changes from version 1.38.4:
  + Fix DAD for DHCPv6 addresses.
  + Wi-Fi: improvements for OWE networks.
  + Support EC private keys.
  + Fix nmcli tab completion support for embedded quote characters.
  + Fix reapply for lldp/mdns/llmnr/dns-over-tls settings.
  + Various bugfixes.</changelog>
</package>
<package pkgid="925b0b2d0bb4671cdf50d49dce9be5b9dbdfd373fd40ac98ba675bd8d793f19e" name="NetworkManager" arch="s390x">
  <version epoch="0" ver="1.38.6" rel="150500.3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Update to version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.
- Changes from version 1.38.4:
  + Fix DAD for DHCPv6 addresses.
  + Wi-Fi: improvements for OWE networks.
  + Support EC private keys.
  + Fix nmcli tab completion support for embedded quote characters.
  + Fix reapply for lldp/mdns/llmnr/dns-over-tls settings.
  + Various bugfixes.</changelog>
</package>
<package pkgid="5aa778da69a2ca24922bb363539b28d383b79d262a9bf18b6d91ced08a4dfe03" name="NetworkManager" arch="src">
  <version epoch="0" ver="1.38.6" rel="150500.3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Update to version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.
- Changes from version 1.38.4:
  + Fix DAD for DHCPv6 addresses.
  + Wi-Fi: improvements for OWE networks.
  + Support EC private keys.
  + Fix nmcli tab completion support for embedded quote characters.
  + Fix reapply for lldp/mdns/llmnr/dns-over-tls settings.
  + Various bugfixes.</changelog>
</package>
<package pkgid="d21680ed341c0e1a9f74cbc9a93e725e9c6ad0f2deccc4748005038f4bf42a76" name="NetworkManager" arch="x86_64">
  <version epoch="0" ver="1.38.6" rel="150500.3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Update to version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.
- Changes from version 1.38.4:
  + Fix DAD for DHCPv6 addresses.
  + Wi-Fi: improvements for OWE networks.
  + Support EC private keys.
  + Fix nmcli tab completion support for embedded quote characters.
  + Fix reapply for lldp/mdns/llmnr/dns-over-tls settings.
  + Various bugfixes.</changelog>
</package>
<package pkgid="a51a069e056e0d404b286c28f3d643f49501d3daa594d3e4bbcaea3f94ea8f81" name="NetworkManager-bluetooth" arch="aarch64">
  <version epoch="0" ver="1.38.6" rel="150500.3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Update to version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.
- Changes from version 1.38.4:
  + Fix DAD for DHCPv6 addresses.
  + Wi-Fi: improvements for OWE networks.
  + Support EC private keys.
  + Fix nmcli tab completion support for embedded quote characters.
  + Fix reapply for lldp/mdns/llmnr/dns-over-tls settings.
  + Various bugfixes.</changelog>
</package>
<package pkgid="8073c6149b80d5737f46f033d9188f40d9f15221ef348dd9a6809833a176c09b" name="NetworkManager-bluetooth" arch="s390x">
  <version epoch="0" ver="1.38.6" rel="150500.3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Update to version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.
- Changes from version 1.38.4:
  + Fix DAD for DHCPv6 addresses.
  + Wi-Fi: improvements for OWE networks.
  + Support EC private keys.
  + Fix nmcli tab completion support for embedded quote characters.
  + Fix reapply for lldp/mdns/llmnr/dns-over-tls settings.
  + Various bugfixes.</changelog>
</package>
<package pkgid="0eab3f3dcffa0c9178a7c3382b32c27555fdc95530b7988b2a764bd84118853f" name="NetworkManager-bluetooth" arch="x86_64">
  <version epoch="0" ver="1.38.6" rel="150500.3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Update to version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.
- Changes from version 1.38.4:
  + Fix DAD for DHCPv6 addresses.
  + Wi-Fi: improvements for OWE networks.
  + Support EC private keys.
  + Fix nmcli tab completion support for embedded quote characters.
  + Fix reapply for lldp/mdns/llmnr/dns-over-tls settings.
  + Various bugfixes.</changelog>
</package>
<package pkgid="627419ef13da2edabc942efda6518c5c8f9628378059d3918de80785746f2c6c" name="NetworkManager-cloud-setup" arch="aarch64">
  <version epoch="0" ver="1.38.6" rel="150500.3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Update to version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.
- Changes from version 1.38.4:
  + Fix DAD for DHCPv6 addresses.
  + Wi-Fi: improvements for OWE networks.
  + Support EC private keys.
  + Fix nmcli tab completion support for embedded quote characters.
  + Fix reapply for lldp/mdns/llmnr/dns-over-tls settings.
  + Various bugfixes.</changelog>
</package>
<package pkgid="2f43adce40dec6783cd58fc2134b82a5fc75148ed379354a4b8e7f221721933b" name="NetworkManager-cloud-setup" arch="s390x">
  <version epoch="0" ver="1.38.6" rel="150500.3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Update to version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.
- Changes from version 1.38.4:
  + Fix DAD for DHCPv6 addresses.
  + Wi-Fi: improvements for OWE networks.
  + Support EC private keys.
  + Fix nmcli tab completion support for embedded quote characters.
  + Fix reapply for lldp/mdns/llmnr/dns-over-tls settings.
  + Various bugfixes.</changelog>
</package>
<package pkgid="f30661dd99bf3b9db6b574e9b510c0096c3f955cde3c145ca4b2671d90be724a" name="NetworkManager-cloud-setup" arch="x86_64">
  <version epoch="0" ver="1.38.6" rel="150500.3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Update to version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.
- Changes from version 1.38.4:
  + Fix DAD for DHCPv6 addresses.
  + Wi-Fi: improvements for OWE networks.
  + Support EC private keys.
  + Fix nmcli tab completion support for embedded quote characters.
  + Fix reapply for lldp/mdns/llmnr/dns-over-tls settings.
  + Various bugfixes.</changelog>
</package>
<package pkgid="54f61248b09080c0a9f0558ad68b9606819dbedeb1cadb313b649b1a2f43f59b" name="NetworkManager-pppoe" arch="aarch64">
  <version epoch="0" ver="1.38.6" rel="150500.3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Update to version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.
- Changes from version 1.38.4:
  + Fix DAD for DHCPv6 addresses.
  + Wi-Fi: improvements for OWE networks.
  + Support EC private keys.
  + Fix nmcli tab completion support for embedded quote characters.
  + Fix reapply for lldp/mdns/llmnr/dns-over-tls settings.
  + Various bugfixes.</changelog>
</package>
<package pkgid="aaa8f8ed17cb2036268e9ae3989ebcb141a9db958e57fd3f3dcaeec52a905f62" name="NetworkManager-pppoe" arch="s390x">
  <version epoch="0" ver="1.38.6" rel="150500.3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Update to version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.
- Changes from version 1.38.4:
  + Fix DAD for DHCPv6 addresses.
  + Wi-Fi: improvements for OWE networks.
  + Support EC private keys.
  + Fix nmcli tab completion support for embedded quote characters.
  + Fix reapply for lldp/mdns/llmnr/dns-over-tls settings.
  + Various bugfixes.</changelog>
</package>
<package pkgid="5b66194d35f6d380a146441164e04e42c1a9a2b06f9bc7f8fd640488f101da27" name="NetworkManager-pppoe" arch="x86_64">
  <version epoch="0" ver="1.38.6" rel="150500.3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Update to version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.
- Changes from version 1.38.4:
  + Fix DAD for DHCPv6 addresses.
  + Wi-Fi: improvements for OWE networks.
  + Support EC private keys.
  + Fix nmcli tab completion support for embedded quote characters.
  + Fix reapply for lldp/mdns/llmnr/dns-over-tls settings.
  + Various bugfixes.</changelog>
</package>
<package pkgid="9bd71ec34dffc810cc4dbca689279cfe56dfc27ada307d08a0a4326721122bb6" name="NetworkManager-tui" arch="aarch64">
  <version epoch="0" ver="1.38.6" rel="150500.3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Update to version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.
- Changes from version 1.38.4:
  + Fix DAD for DHCPv6 addresses.
  + Wi-Fi: improvements for OWE networks.
  + Support EC private keys.
  + Fix nmcli tab completion support for embedded quote characters.
  + Fix reapply for lldp/mdns/llmnr/dns-over-tls settings.
  + Various bugfixes.</changelog>
</package>
<package pkgid="ba9f253ebb9b99877074ff1649b341ed11875238b2dd7ef5bcd2904aa2db7436" name="NetworkManager-tui" arch="s390x">
  <version epoch="0" ver="1.38.6" rel="150500.3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Update to version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.
- Changes from version 1.38.4:
  + Fix DAD for DHCPv6 addresses.
  + Wi-Fi: improvements for OWE networks.
  + Support EC private keys.
  + Fix nmcli tab completion support for embedded quote characters.
  + Fix reapply for lldp/mdns/llmnr/dns-over-tls settings.
  + Various bugfixes.</changelog>
</package>
<package pkgid="71877b0a5266f7aebb88d13d0f97833de0cb8646a76954d9b2966b457ab9c953" name="NetworkManager-tui" arch="x86_64">
  <version epoch="0" ver="1.38.6" rel="150500.3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Update to version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.
- Changes from version 1.38.4:
  + Fix DAD for DHCPv6 addresses.
  + Wi-Fi: improvements for OWE networks.
  + Support EC private keys.
  + Fix nmcli tab completion support for embedded quote characters.
  + Fix reapply for lldp/mdns/llmnr/dns-over-tls settings.
  + Various bugfixes.</changelog>
</package>
<package pkgid="788a63a47383ea010ccfeca54935ec9d920a07c0d2cc348a262a2ecdc1da4293" name="NetworkManager-wwan" arch="aarch64">
  <version epoch="0" ver="1.38.6" rel="150500.3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Update to version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.
- Changes from version 1.38.4:
  + Fix DAD for DHCPv6 addresses.
  + Wi-Fi: improvements for OWE networks.
  + Support EC private keys.
  + Fix nmcli tab completion support for embedded quote characters.
  + Fix reapply for lldp/mdns/llmnr/dns-over-tls settings.
  + Various bugfixes.</changelog>
</package>
<package pkgid="d3e7abc1ca758d4004796437973050e62043330797c197c2ec224f6da2295834" name="NetworkManager-wwan" arch="s390x">
  <version epoch="0" ver="1.38.6" rel="150500.3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Update to version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.
- Changes from version 1.38.4:
  + Fix DAD for DHCPv6 addresses.
  + Wi-Fi: improvements for OWE networks.
  + Support EC private keys.
  + Fix nmcli tab completion support for embedded quote characters.
  + Fix reapply for lldp/mdns/llmnr/dns-over-tls settings.
  + Various bugfixes.</changelog>
</package>
<package pkgid="bad4505c37834416c0137241a99da221b4bc8bb86d6db6eb55b7a4d98d8cca63" name="NetworkManager-wwan" arch="x86_64">
  <version epoch="0" ver="1.38.6" rel="150500.3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Update to version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.
- Changes from version 1.38.4:
  + Fix DAD for DHCPv6 addresses.
  + Wi-Fi: improvements for OWE networks.
  + Support EC private keys.
  + Fix nmcli tab completion support for embedded quote characters.
  + Fix reapply for lldp/mdns/llmnr/dns-over-tls settings.
  + Various bugfixes.</changelog>
</package>
<package pkgid="bb3038ba6df6dc7a9e49ab3697d1422d2759619cce9db0fcd7a47ed2b0256d12" name="aaa_base" arch="aarch64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.12.1"/>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
  <changelog author="ro@suse.de" date="1706875200">- silence the output in the case of broken symlinks (bsc#1218232)</changelog>
</package>
<package pkgid="07b353f5a4202b528d95ef5267aa004f2313604ec74030ae56fff1a92739b0bb" name="aaa_base" arch="s390x">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.12.1"/>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
  <changelog author="ro@suse.de" date="1706875200">- silence the output in the case of broken symlinks (bsc#1218232)</changelog>
</package>
<package pkgid="96e6e52c65a018108058b95480ead655d9a3587e08ba710faabde36b4c2108f9" name="aaa_base" arch="src">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.12.1"/>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
  <changelog author="ro@suse.de" date="1706875200">- silence the output in the case of broken symlinks (bsc#1218232)</changelog>
</package>
<package pkgid="b57d10255d90c01375006b468627cfed5fcea92057eaf2e072d1011e5db1fad7" name="aaa_base" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.12.1"/>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
  <changelog author="ro@suse.de" date="1706875200">- silence the output in the case of broken symlinks (bsc#1218232)</changelog>
</package>
<package pkgid="4cc81da096915a196b249f1ecd839f381039d783fbcc7e65b3808317f62b3afd" name="aaa_base" arch="aarch64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.17.3"/>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
  <changelog author="ro@suse.de" date="1706875200">- silence the output in the case of broken symlinks (bsc#1218232)</changelog>
  <changelog author="ro@suse.de" date="1710763200">- add patch git-48-477bc3c05fcdabf9319e84278a1cba2c12c9ed5a.patch
  home and end button not working from ssh client (bsc#1221407)
- use autosetup in prep stage of specfile</changelog>
  <changelog author="ro@suse.de" date="1712923200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  drop the stderr redirection for csh (bsc#1221361)
- add git-49-3f8f26123d91f70c644677a323134fc79318c818.patch
  drop sysctl.d/50-default-s390.conf (bsc#1211721)
- add aaa_base-preinstall.patch
  make sure the script does not exit with 1 if a file
  with content is found (bsc#1222547)</changelog>
</package>
<package pkgid="0d37cb289f5ae0c3aca00e209845104b20ce488c2884975990f0e9ab3076a574" name="aaa_base" arch="s390x">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.17.3"/>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
  <changelog author="ro@suse.de" date="1706875200">- silence the output in the case of broken symlinks (bsc#1218232)</changelog>
  <changelog author="ro@suse.de" date="1710763200">- add patch git-48-477bc3c05fcdabf9319e84278a1cba2c12c9ed5a.patch
  home and end button not working from ssh client (bsc#1221407)
- use autosetup in prep stage of specfile</changelog>
  <changelog author="ro@suse.de" date="1712923200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  drop the stderr redirection for csh (bsc#1221361)
- add git-49-3f8f26123d91f70c644677a323134fc79318c818.patch
  drop sysctl.d/50-default-s390.conf (bsc#1211721)
- add aaa_base-preinstall.patch
  make sure the script does not exit with 1 if a file
  with content is found (bsc#1222547)</changelog>
</package>
<package pkgid="6c45cb89fe7423bae7c5b0f28116ab1949383ae1263c8ff75117d2f5e8d552f7" name="aaa_base" arch="src">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.17.3"/>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
  <changelog author="ro@suse.de" date="1706875200">- silence the output in the case of broken symlinks (bsc#1218232)</changelog>
  <changelog author="ro@suse.de" date="1710763200">- add patch git-48-477bc3c05fcdabf9319e84278a1cba2c12c9ed5a.patch
  home and end button not working from ssh client (bsc#1221407)
- use autosetup in prep stage of specfile</changelog>
  <changelog author="ro@suse.de" date="1712923200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  drop the stderr redirection for csh (bsc#1221361)
- add git-49-3f8f26123d91f70c644677a323134fc79318c818.patch
  drop sysctl.d/50-default-s390.conf (bsc#1211721)
- add aaa_base-preinstall.patch
  make sure the script does not exit with 1 if a file
  with content is found (bsc#1222547)</changelog>
</package>
<package pkgid="a9c58f0f38171eb13786c04037abdd743f41e6681b01fe6578698ddb776cdd4f" name="aaa_base" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.17.3"/>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
  <changelog author="ro@suse.de" date="1706875200">- silence the output in the case of broken symlinks (bsc#1218232)</changelog>
  <changelog author="ro@suse.de" date="1710763200">- add patch git-48-477bc3c05fcdabf9319e84278a1cba2c12c9ed5a.patch
  home and end button not working from ssh client (bsc#1221407)
- use autosetup in prep stage of specfile</changelog>
  <changelog author="ro@suse.de" date="1712923200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  drop the stderr redirection for csh (bsc#1221361)
- add git-49-3f8f26123d91f70c644677a323134fc79318c818.patch
  drop sysctl.d/50-default-s390.conf (bsc#1211721)
- add aaa_base-preinstall.patch
  make sure the script does not exit with 1 if a file
  with content is found (bsc#1222547)</changelog>
</package>
<package pkgid="bd9492cd906dbf1d084580582422926baf8bd3659d4e347b8808635a03439891" name="aaa_base" arch="aarch64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.20.1"/>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
  <changelog author="ro@suse.de" date="1706875200">- silence the output in the case of broken symlinks (bsc#1218232)</changelog>
  <changelog author="ro@suse.de" date="1710763200">- add patch git-48-477bc3c05fcdabf9319e84278a1cba2c12c9ed5a.patch
  home and end button not working from ssh client (bsc#1221407)
- use autosetup in prep stage of specfile</changelog>
  <changelog author="ro@suse.de" date="1712923200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  drop the stderr redirection for csh (bsc#1221361)
- add git-49-3f8f26123d91f70c644677a323134fc79318c818.patch
  drop sysctl.d/50-default-s390.conf (bsc#1211721)
- add aaa_base-preinstall.patch
  make sure the script does not exit with 1 if a file
  with content is found (bsc#1222547)</changelog>
  <changelog author="ro@suse.de" date="1714651200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to also fix the typo to set JAVA_BINDIR in the csh variant
  of the alljava profile script (bsc#1221361)</changelog>
</package>
<package pkgid="9338bc325b60e59b7a48492a7ffd6e7e302ba111ed0ee369bd67e9c4fb6c488f" name="aaa_base" arch="s390x">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.20.1"/>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
  <changelog author="ro@suse.de" date="1706875200">- silence the output in the case of broken symlinks (bsc#1218232)</changelog>
  <changelog author="ro@suse.de" date="1710763200">- add patch git-48-477bc3c05fcdabf9319e84278a1cba2c12c9ed5a.patch
  home and end button not working from ssh client (bsc#1221407)
- use autosetup in prep stage of specfile</changelog>
  <changelog author="ro@suse.de" date="1712923200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  drop the stderr redirection for csh (bsc#1221361)
- add git-49-3f8f26123d91f70c644677a323134fc79318c818.patch
  drop sysctl.d/50-default-s390.conf (bsc#1211721)
- add aaa_base-preinstall.patch
  make sure the script does not exit with 1 if a file
  with content is found (bsc#1222547)</changelog>
  <changelog author="ro@suse.de" date="1714651200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to also fix the typo to set JAVA_BINDIR in the csh variant
  of the alljava profile script (bsc#1221361)</changelog>
</package>
<package pkgid="862585b96b291271b7c68f130ab3ab75afc51eac570e5afff94270572a767130" name="aaa_base" arch="src">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.20.1"/>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
  <changelog author="ro@suse.de" date="1706875200">- silence the output in the case of broken symlinks (bsc#1218232)</changelog>
  <changelog author="ro@suse.de" date="1710763200">- add patch git-48-477bc3c05fcdabf9319e84278a1cba2c12c9ed5a.patch
  home and end button not working from ssh client (bsc#1221407)
- use autosetup in prep stage of specfile</changelog>
  <changelog author="ro@suse.de" date="1712923200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  drop the stderr redirection for csh (bsc#1221361)
- add git-49-3f8f26123d91f70c644677a323134fc79318c818.patch
  drop sysctl.d/50-default-s390.conf (bsc#1211721)
- add aaa_base-preinstall.patch
  make sure the script does not exit with 1 if a file
  with content is found (bsc#1222547)</changelog>
  <changelog author="ro@suse.de" date="1714651200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to also fix the typo to set JAVA_BINDIR in the csh variant
  of the alljava profile script (bsc#1221361)</changelog>
</package>
<package pkgid="520a1a79da52c509673b5dff77405c93ff366e30912447d842d78c4a46fb3007" name="aaa_base" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.20.1"/>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
  <changelog author="ro@suse.de" date="1706875200">- silence the output in the case of broken symlinks (bsc#1218232)</changelog>
  <changelog author="ro@suse.de" date="1710763200">- add patch git-48-477bc3c05fcdabf9319e84278a1cba2c12c9ed5a.patch
  home and end button not working from ssh client (bsc#1221407)
- use autosetup in prep stage of specfile</changelog>
  <changelog author="ro@suse.de" date="1712923200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  drop the stderr redirection for csh (bsc#1221361)
- add git-49-3f8f26123d91f70c644677a323134fc79318c818.patch
  drop sysctl.d/50-default-s390.conf (bsc#1211721)
- add aaa_base-preinstall.patch
  make sure the script does not exit with 1 if a file
  with content is found (bsc#1222547)</changelog>
  <changelog author="ro@suse.de" date="1714651200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to also fix the typo to set JAVA_BINDIR in the csh variant
  of the alljava profile script (bsc#1221361)</changelog>
</package>
<package pkgid="f5fa1142db59370ef19dcbbde52b994baaa74e55689ad51c19aa87088e267981" name="aaa_base" arch="aarch64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.6.2"/>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
</package>
<package pkgid="2d9cd00800f7ef65ac5f5524fb1227f10ebdb9e2ea06ca08e2e8d947dbf351d8" name="aaa_base" arch="s390x">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.6.2"/>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
</package>
<package pkgid="2a7c2126b5e581ac05ee8a053221d803b1a6fe144cac1ad4ad5690e9b15a83d0" name="aaa_base" arch="src">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.6.2"/>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
</package>
<package pkgid="2dc73f3ef22c6319257ab268fe8fd1f4628d9a06652a426fd84a37b465809d80" name="aaa_base" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.6.2"/>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
</package>
<package pkgid="da835c5a25586b7faca6ffc6d0354dd63a604a2cb0e450ea08ad994f1ae5d681" name="aaa_base" arch="aarch64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.9.1"/>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
</package>
<package pkgid="5692ddb58838a5e2a62c3f2ef4e88c74866146b2762a7521f8b7b87802edb1eb" name="aaa_base" arch="s390x">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.9.1"/>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
</package>
<package pkgid="31c02efb3cee5bf744be9af8280ced23014b51b3821ecabb9745da881330daec" name="aaa_base" arch="src">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.9.1"/>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
</package>
<package pkgid="9c019e19eea4377c378cee2f6b97a89f48fe870ee7287578f2441750e4d4a90f" name="aaa_base" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.9.1"/>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
</package>
<package pkgid="d561a57f372e5d244dc724a7c5b3c37ee2b209c470b504ce4b56c09f798cc701" name="aardvark-dns" arch="aarch64">
  <version epoch="0" ver="1.10.0" rel="150500.3.3.1"/>
  <changelog author="danish.prakash@suse.com" date="1676376000">- First version of aardvark-dns</changelog>
  <changelog author="danish.prakash@suse.com" date="1679054400">- Fix libexecdir issue on Leap and SLE</changelog>
  <changelog author="danish.prakash@suse.com" date="1681300800">- Update to version 1.6.0:
  * v1.6.0 release
  * Update release notes for v1.6.0
  * fix(deps): update rust crate tokio to 1.27.0
  * use lower TTL for contianer entries
  * fix(deps): update rust crate syslog to ^6.0.1
  * fix(deps): update rust crate futures-util to 0.3.28
  * chore(deps): update dependency containers/automation_images to v20230330
  * Disable Dependabot in favor of Renovate
  * chore(deps): update dependency containers/automation_images to v20230320
  * build(deps): bump futures-util from 0.3.26 to 0.3.27
  * [CI:BUILD] Packit: trigger builds on commit to main branch
  * build(deps): bump anyhow from 1.0.68 to 1.0.70
  * fix lint issue with new rust version 1.68
  * Cirrus: Update to newer CI VM images
  * build(deps): bump chrono from 0.4.23 to 0.4.24
  * build(deps): bump libc from 0.2.139 to 0.2.140
  * build(deps): bump async-broadcast from 0.5.0 to 0.5.1
  * build(deps): bump signal-hook from 0.3.14 to 0.3.15
  * build(deps): bump futures-util from 0.3.25 to 0.3.26
  * build(deps): bump tokio from 1.25.0 to 1.26.0
  * [CI:DOCS] Clarify packit related comments
  * [CI:BUILD] Packit: initial enablement
  * Allow custom cargo binary path
  * Switch to explicit platform list for `cargo vendor-filterer`
  * bump to v1.6.0-dev
  * Add renovate.json5
  * Cirrus: Groom rust cache before updating</changelog>
  <changelog author="danish.prakash@suse.com" date="1688385600">- Update to version 1.7.0:
  * release v1.7.0
  * Update release notes for v1.7.0
  * fix(deps): update rust crate tokio to 1.29.0
  * fix(deps): update rust crate clap to 4.3.8
  * fix(deps): update rust crate clap to 4.3.5
  * run cargo update
  * [CI:BUILD] Packit: add Fedora downstream tasks
  * fix(deps): update rust crate clap to 4.3.4
  * chore(deps): update dependency containers/automation_images to v20230614
  * fix(deps): update rust crate clap to 4.3.3
  * fix(deps): update rust crate log to 0.4.19
  * fix(deps): update rust crate clap to 4.3.2
  * fix(deps): update rust crate clap to 4.3.1
  * cirrus: remove verify_vendor task
  * chore(deps): update dependency containers/automation_images to v20230601
  * fix(deps): update rust crate trust-dns-server to 0.22.1
  * chore(deps): update rust crate chrono to 0.4.26
  * fix(deps): update rust crate tokio to 1.28.2
  * fix(deps): update rust crate log to 0.4.18
  * chore(deps): update rust crate chrono to 0.4.25
  * fix(deps): update rust crate clap to 4.3.0
  * chore(deps): update dependency containers/automation_images to v20230517
  * fix(deps): update rust crate tokio to 1.28.1
  * chore(deps): update dependency containers/automation_images to v20230426
  * fix(deps): update rust crate clap to 4.2.7
  * fix(deps): update rust crate anyhow to 1.0.71
  * fix typo in makefile
  * fix(deps): update rust crate tokio to 1.28.0
  * fix(deps): update rust crate clap to 4.2.5
  * fix(deps): update rust crate syslog to ^6.1.0
  * fix(deps): update rust crate clap to 4.2.4
  * fix(deps): update rust crate clap to 4.2.3
  * fix(deps): update rust crate clap to v4
  * chore(deps): update dependency containers/automation_images to v20230405
  * bump to v1.7.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1689076800">- Disable restricting builds only for tier1 platforms
  i.e. only for x86_64 and aarch64 and enable for all.</changelog>
  <changelog author="danish.prakash@suse.com" date="1695902400">- Update to version 1.8.0:
  * Release v1.8.0
  * update release notes for v1.8.0
  * run cargo update
  * Packit: switch to @containers/packit-build team for copr failure notification comments
  * [CI:BUILD] Packit: tag @lsm5 on copr build failures
  * chore(deps): update rust crate chrono to 0.4.31
  * cargo: bump chrono to 0.4.30
  * test: IPv6 format is changed in v1.72.0
  * bump nix to 0.27.1
  * vendor: bump trust_dns_proto and trust_dns_client to 0.23.0
  * fix(deps): update rust crate trust-dns-server to 0.23.0
  * [CI:BUILD] rpm: spdx compatible license field
  * fix(deps): update rust crate anyhow to 1.0.75
  * fix(deps): update rust crate tokio to 1.32.0
  * chore(deps): update dependency containers/automation_images to v20230816
  * fix(deps): update rust crate tokio to 1.31.0
  * fix(deps): update rust crate anyhow to 1.0.74
  * fix(deps): update rust crate anyhow to 1.0.73
  * fix(deps): update rust crate log to 0.4.20
  * chore(deps): update dependency containers/automation_images to v20230809
  * fix(deps): update rust crate tokio to 1.30.0
  * fix(deps): update rust crate clap to 4.3.21
  * packit: Build PRs into default packit COPRs
  * chore(deps): update dependency containers/automation_images to v20230807
  * fix(deps): update rust crate anyhow to 1.0.72
  * fix(deps): update rust crate signal-hook to 0.3.17
  * fix(deps): update rust crate clap to 4.3.19
  * fix(deps): update rust crate clap to 4.3.15
  * fix(deps): update rust crate signal-hook to 0.3.16
  * [CI:BUILD] Packit: remove pre-sync action
  * fix(deps): update rust crate clap to 4.3.11
  * fix(deps): update rust crate tokio to 1.29.1
  * fix(deps): update rust crate clap to 4.3.10
  * [CI:BUILD] RPM: cleanup spec and fix eln builds
  * bump to v1.8.0-devel</changelog>
  <changelog author="danish.prakash@suse.com" date="1701345600">- Update to version 1.9.0:
  * Release v1.9.0
  * v1.9.0 Update release notes
  * run cargo update
  * chore(deps): update dependency containers/automation_images to v20231116
  * fix(deps): update rust crate tokio to 1.34.0
  * fix(deps): update rust crate async-broadcast to 0.6.0
  * update trust-dns to hickory
  * fix(deps): update rust crate futures-util to 0.3.29
  * fix(deps): update rust crate trust-dns-server to 0.23.2
  * fix(deps): update rust crate trust-dns-proto to 0.23.2
  * tmt: initial enablement
  * aardvark main: change error reporting
  * chore(deps): update dependency containers/automation_images to v20231004
  * fix(deps): update rust crate trust-dns-proto to 0.23.1
  * fix(deps): update rust crate trust-dns-client to 0.23.1
  * clippy: some format fixes
  * fix(deps): update rust crate tokio to 1.33.0
  * Bump to v1.9.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1706184000">- Update to version 1.10.0:
  * Release 1.10.0
  * Release notes for 1.10.0
  * chore(deps): update rust crate chrono to 0.4.32
  * chore(deps): update dependency containers/automation_images to v20240102
  * fix(deps): update rust crate futures-util to 0.3.30
  * fix(deps): update rust crate anyhow to 1.0.79
  * fix(deps): update rust crate tokio to 1.35.1
  * chore(deps): update dependency containers/automation_images to v20231208
  * fix(deps): update rust crate tokio to 1.35.0
  * fix duplicated IP CI flake
  * server: remove unused kill switch
  * fix(deps): update rust crate clap to ~4.4.10
  * Bump working version to v1.10.0-dev</changelog>
</package>
<package pkgid="4a60ed8e1fe08d977c15aa1d3eb364cf2ca8b7427f4e64f451d675c1a62931ed" name="aardvark-dns" arch="s390x">
  <version epoch="0" ver="1.10.0" rel="150500.3.3.1"/>
  <changelog author="danish.prakash@suse.com" date="1676376000">- First version of aardvark-dns</changelog>
  <changelog author="danish.prakash@suse.com" date="1679054400">- Fix libexecdir issue on Leap and SLE</changelog>
  <changelog author="danish.prakash@suse.com" date="1681300800">- Update to version 1.6.0:
  * v1.6.0 release
  * Update release notes for v1.6.0
  * fix(deps): update rust crate tokio to 1.27.0
  * use lower TTL for contianer entries
  * fix(deps): update rust crate syslog to ^6.0.1
  * fix(deps): update rust crate futures-util to 0.3.28
  * chore(deps): update dependency containers/automation_images to v20230330
  * Disable Dependabot in favor of Renovate
  * chore(deps): update dependency containers/automation_images to v20230320
  * build(deps): bump futures-util from 0.3.26 to 0.3.27
  * [CI:BUILD] Packit: trigger builds on commit to main branch
  * build(deps): bump anyhow from 1.0.68 to 1.0.70
  * fix lint issue with new rust version 1.68
  * Cirrus: Update to newer CI VM images
  * build(deps): bump chrono from 0.4.23 to 0.4.24
  * build(deps): bump libc from 0.2.139 to 0.2.140
  * build(deps): bump async-broadcast from 0.5.0 to 0.5.1
  * build(deps): bump signal-hook from 0.3.14 to 0.3.15
  * build(deps): bump futures-util from 0.3.25 to 0.3.26
  * build(deps): bump tokio from 1.25.0 to 1.26.0
  * [CI:DOCS] Clarify packit related comments
  * [CI:BUILD] Packit: initial enablement
  * Allow custom cargo binary path
  * Switch to explicit platform list for `cargo vendor-filterer`
  * bump to v1.6.0-dev
  * Add renovate.json5
  * Cirrus: Groom rust cache before updating</changelog>
  <changelog author="danish.prakash@suse.com" date="1688385600">- Update to version 1.7.0:
  * release v1.7.0
  * Update release notes for v1.7.0
  * fix(deps): update rust crate tokio to 1.29.0
  * fix(deps): update rust crate clap to 4.3.8
  * fix(deps): update rust crate clap to 4.3.5
  * run cargo update
  * [CI:BUILD] Packit: add Fedora downstream tasks
  * fix(deps): update rust crate clap to 4.3.4
  * chore(deps): update dependency containers/automation_images to v20230614
  * fix(deps): update rust crate clap to 4.3.3
  * fix(deps): update rust crate log to 0.4.19
  * fix(deps): update rust crate clap to 4.3.2
  * fix(deps): update rust crate clap to 4.3.1
  * cirrus: remove verify_vendor task
  * chore(deps): update dependency containers/automation_images to v20230601
  * fix(deps): update rust crate trust-dns-server to 0.22.1
  * chore(deps): update rust crate chrono to 0.4.26
  * fix(deps): update rust crate tokio to 1.28.2
  * fix(deps): update rust crate log to 0.4.18
  * chore(deps): update rust crate chrono to 0.4.25
  * fix(deps): update rust crate clap to 4.3.0
  * chore(deps): update dependency containers/automation_images to v20230517
  * fix(deps): update rust crate tokio to 1.28.1
  * chore(deps): update dependency containers/automation_images to v20230426
  * fix(deps): update rust crate clap to 4.2.7
  * fix(deps): update rust crate anyhow to 1.0.71
  * fix typo in makefile
  * fix(deps): update rust crate tokio to 1.28.0
  * fix(deps): update rust crate clap to 4.2.5
  * fix(deps): update rust crate syslog to ^6.1.0
  * fix(deps): update rust crate clap to 4.2.4
  * fix(deps): update rust crate clap to 4.2.3
  * fix(deps): update rust crate clap to v4
  * chore(deps): update dependency containers/automation_images to v20230405
  * bump to v1.7.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1689076800">- Disable restricting builds only for tier1 platforms
  i.e. only for x86_64 and aarch64 and enable for all.</changelog>
  <changelog author="danish.prakash@suse.com" date="1695902400">- Update to version 1.8.0:
  * Release v1.8.0
  * update release notes for v1.8.0
  * run cargo update
  * Packit: switch to @containers/packit-build team for copr failure notification comments
  * [CI:BUILD] Packit: tag @lsm5 on copr build failures
  * chore(deps): update rust crate chrono to 0.4.31
  * cargo: bump chrono to 0.4.30
  * test: IPv6 format is changed in v1.72.0
  * bump nix to 0.27.1
  * vendor: bump trust_dns_proto and trust_dns_client to 0.23.0
  * fix(deps): update rust crate trust-dns-server to 0.23.0
  * [CI:BUILD] rpm: spdx compatible license field
  * fix(deps): update rust crate anyhow to 1.0.75
  * fix(deps): update rust crate tokio to 1.32.0
  * chore(deps): update dependency containers/automation_images to v20230816
  * fix(deps): update rust crate tokio to 1.31.0
  * fix(deps): update rust crate anyhow to 1.0.74
  * fix(deps): update rust crate anyhow to 1.0.73
  * fix(deps): update rust crate log to 0.4.20
  * chore(deps): update dependency containers/automation_images to v20230809
  * fix(deps): update rust crate tokio to 1.30.0
  * fix(deps): update rust crate clap to 4.3.21
  * packit: Build PRs into default packit COPRs
  * chore(deps): update dependency containers/automation_images to v20230807
  * fix(deps): update rust crate anyhow to 1.0.72
  * fix(deps): update rust crate signal-hook to 0.3.17
  * fix(deps): update rust crate clap to 4.3.19
  * fix(deps): update rust crate clap to 4.3.15
  * fix(deps): update rust crate signal-hook to 0.3.16
  * [CI:BUILD] Packit: remove pre-sync action
  * fix(deps): update rust crate clap to 4.3.11
  * fix(deps): update rust crate tokio to 1.29.1
  * fix(deps): update rust crate clap to 4.3.10
  * [CI:BUILD] RPM: cleanup spec and fix eln builds
  * bump to v1.8.0-devel</changelog>
  <changelog author="danish.prakash@suse.com" date="1701345600">- Update to version 1.9.0:
  * Release v1.9.0
  * v1.9.0 Update release notes
  * run cargo update
  * chore(deps): update dependency containers/automation_images to v20231116
  * fix(deps): update rust crate tokio to 1.34.0
  * fix(deps): update rust crate async-broadcast to 0.6.0
  * update trust-dns to hickory
  * fix(deps): update rust crate futures-util to 0.3.29
  * fix(deps): update rust crate trust-dns-server to 0.23.2
  * fix(deps): update rust crate trust-dns-proto to 0.23.2
  * tmt: initial enablement
  * aardvark main: change error reporting
  * chore(deps): update dependency containers/automation_images to v20231004
  * fix(deps): update rust crate trust-dns-proto to 0.23.1
  * fix(deps): update rust crate trust-dns-client to 0.23.1
  * clippy: some format fixes
  * fix(deps): update rust crate tokio to 1.33.0
  * Bump to v1.9.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1706184000">- Update to version 1.10.0:
  * Release 1.10.0
  * Release notes for 1.10.0
  * chore(deps): update rust crate chrono to 0.4.32
  * chore(deps): update dependency containers/automation_images to v20240102
  * fix(deps): update rust crate futures-util to 0.3.30
  * fix(deps): update rust crate anyhow to 1.0.79
  * fix(deps): update rust crate tokio to 1.35.1
  * chore(deps): update dependency containers/automation_images to v20231208
  * fix(deps): update rust crate tokio to 1.35.0
  * fix duplicated IP CI flake
  * server: remove unused kill switch
  * fix(deps): update rust crate clap to ~4.4.10
  * Bump working version to v1.10.0-dev</changelog>
</package>
<package pkgid="56a11bd0e35fb11f58faf4c826f6741223a2d380e43771114a5cde75fe66922d" name="aardvark-dns" arch="src">
  <version epoch="0" ver="1.10.0" rel="150500.3.3.1"/>
  <changelog author="danish.prakash@suse.com" date="1676376000">- First version of aardvark-dns</changelog>
  <changelog author="danish.prakash@suse.com" date="1679054400">- Fix libexecdir issue on Leap and SLE</changelog>
  <changelog author="danish.prakash@suse.com" date="1681300800">- Update to version 1.6.0:
  * v1.6.0 release
  * Update release notes for v1.6.0
  * fix(deps): update rust crate tokio to 1.27.0
  * use lower TTL for contianer entries
  * fix(deps): update rust crate syslog to ^6.0.1
  * fix(deps): update rust crate futures-util to 0.3.28
  * chore(deps): update dependency containers/automation_images to v20230330
  * Disable Dependabot in favor of Renovate
  * chore(deps): update dependency containers/automation_images to v20230320
  * build(deps): bump futures-util from 0.3.26 to 0.3.27
  * [CI:BUILD] Packit: trigger builds on commit to main branch
  * build(deps): bump anyhow from 1.0.68 to 1.0.70
  * fix lint issue with new rust version 1.68
  * Cirrus: Update to newer CI VM images
  * build(deps): bump chrono from 0.4.23 to 0.4.24
  * build(deps): bump libc from 0.2.139 to 0.2.140
  * build(deps): bump async-broadcast from 0.5.0 to 0.5.1
  * build(deps): bump signal-hook from 0.3.14 to 0.3.15
  * build(deps): bump futures-util from 0.3.25 to 0.3.26
  * build(deps): bump tokio from 1.25.0 to 1.26.0
  * [CI:DOCS] Clarify packit related comments
  * [CI:BUILD] Packit: initial enablement
  * Allow custom cargo binary path
  * Switch to explicit platform list for `cargo vendor-filterer`
  * bump to v1.6.0-dev
  * Add renovate.json5
  * Cirrus: Groom rust cache before updating</changelog>
  <changelog author="danish.prakash@suse.com" date="1688385600">- Update to version 1.7.0:
  * release v1.7.0
  * Update release notes for v1.7.0
  * fix(deps): update rust crate tokio to 1.29.0
  * fix(deps): update rust crate clap to 4.3.8
  * fix(deps): update rust crate clap to 4.3.5
  * run cargo update
  * [CI:BUILD] Packit: add Fedora downstream tasks
  * fix(deps): update rust crate clap to 4.3.4
  * chore(deps): update dependency containers/automation_images to v20230614
  * fix(deps): update rust crate clap to 4.3.3
  * fix(deps): update rust crate log to 0.4.19
  * fix(deps): update rust crate clap to 4.3.2
  * fix(deps): update rust crate clap to 4.3.1
  * cirrus: remove verify_vendor task
  * chore(deps): update dependency containers/automation_images to v20230601
  * fix(deps): update rust crate trust-dns-server to 0.22.1
  * chore(deps): update rust crate chrono to 0.4.26
  * fix(deps): update rust crate tokio to 1.28.2
  * fix(deps): update rust crate log to 0.4.18
  * chore(deps): update rust crate chrono to 0.4.25
  * fix(deps): update rust crate clap to 4.3.0
  * chore(deps): update dependency containers/automation_images to v20230517
  * fix(deps): update rust crate tokio to 1.28.1
  * chore(deps): update dependency containers/automation_images to v20230426
  * fix(deps): update rust crate clap to 4.2.7
  * fix(deps): update rust crate anyhow to 1.0.71
  * fix typo in makefile
  * fix(deps): update rust crate tokio to 1.28.0
  * fix(deps): update rust crate clap to 4.2.5
  * fix(deps): update rust crate syslog to ^6.1.0
  * fix(deps): update rust crate clap to 4.2.4
  * fix(deps): update rust crate clap to 4.2.3
  * fix(deps): update rust crate clap to v4
  * chore(deps): update dependency containers/automation_images to v20230405
  * bump to v1.7.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1689076800">- Disable restricting builds only for tier1 platforms
  i.e. only for x86_64 and aarch64 and enable for all.</changelog>
  <changelog author="danish.prakash@suse.com" date="1695902400">- Update to version 1.8.0:
  * Release v1.8.0
  * update release notes for v1.8.0
  * run cargo update
  * Packit: switch to @containers/packit-build team for copr failure notification comments
  * [CI:BUILD] Packit: tag @lsm5 on copr build failures
  * chore(deps): update rust crate chrono to 0.4.31
  * cargo: bump chrono to 0.4.30
  * test: IPv6 format is changed in v1.72.0
  * bump nix to 0.27.1
  * vendor: bump trust_dns_proto and trust_dns_client to 0.23.0
  * fix(deps): update rust crate trust-dns-server to 0.23.0
  * [CI:BUILD] rpm: spdx compatible license field
  * fix(deps): update rust crate anyhow to 1.0.75
  * fix(deps): update rust crate tokio to 1.32.0
  * chore(deps): update dependency containers/automation_images to v20230816
  * fix(deps): update rust crate tokio to 1.31.0
  * fix(deps): update rust crate anyhow to 1.0.74
  * fix(deps): update rust crate anyhow to 1.0.73
  * fix(deps): update rust crate log to 0.4.20
  * chore(deps): update dependency containers/automation_images to v20230809
  * fix(deps): update rust crate tokio to 1.30.0
  * fix(deps): update rust crate clap to 4.3.21
  * packit: Build PRs into default packit COPRs
  * chore(deps): update dependency containers/automation_images to v20230807
  * fix(deps): update rust crate anyhow to 1.0.72
  * fix(deps): update rust crate signal-hook to 0.3.17
  * fix(deps): update rust crate clap to 4.3.19
  * fix(deps): update rust crate clap to 4.3.15
  * fix(deps): update rust crate signal-hook to 0.3.16
  * [CI:BUILD] Packit: remove pre-sync action
  * fix(deps): update rust crate clap to 4.3.11
  * fix(deps): update rust crate tokio to 1.29.1
  * fix(deps): update rust crate clap to 4.3.10
  * [CI:BUILD] RPM: cleanup spec and fix eln builds
  * bump to v1.8.0-devel</changelog>
  <changelog author="danish.prakash@suse.com" date="1701345600">- Update to version 1.9.0:
  * Release v1.9.0
  * v1.9.0 Update release notes
  * run cargo update
  * chore(deps): update dependency containers/automation_images to v20231116
  * fix(deps): update rust crate tokio to 1.34.0
  * fix(deps): update rust crate async-broadcast to 0.6.0
  * update trust-dns to hickory
  * fix(deps): update rust crate futures-util to 0.3.29
  * fix(deps): update rust crate trust-dns-server to 0.23.2
  * fix(deps): update rust crate trust-dns-proto to 0.23.2
  * tmt: initial enablement
  * aardvark main: change error reporting
  * chore(deps): update dependency containers/automation_images to v20231004
  * fix(deps): update rust crate trust-dns-proto to 0.23.1
  * fix(deps): update rust crate trust-dns-client to 0.23.1
  * clippy: some format fixes
  * fix(deps): update rust crate tokio to 1.33.0
  * Bump to v1.9.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1706184000">- Update to version 1.10.0:
  * Release 1.10.0
  * Release notes for 1.10.0
  * chore(deps): update rust crate chrono to 0.4.32
  * chore(deps): update dependency containers/automation_images to v20240102
  * fix(deps): update rust crate futures-util to 0.3.30
  * fix(deps): update rust crate anyhow to 1.0.79
  * fix(deps): update rust crate tokio to 1.35.1
  * chore(deps): update dependency containers/automation_images to v20231208
  * fix(deps): update rust crate tokio to 1.35.0
  * fix duplicated IP CI flake
  * server: remove unused kill switch
  * fix(deps): update rust crate clap to ~4.4.10
  * Bump working version to v1.10.0-dev</changelog>
</package>
<package pkgid="209dac08fd4e6a423131437a86a35e5701728c7bde3ece010069756ca368bad9" name="aardvark-dns" arch="x86_64">
  <version epoch="0" ver="1.10.0" rel="150500.3.3.1"/>
  <changelog author="danish.prakash@suse.com" date="1676376000">- First version of aardvark-dns</changelog>
  <changelog author="danish.prakash@suse.com" date="1679054400">- Fix libexecdir issue on Leap and SLE</changelog>
  <changelog author="danish.prakash@suse.com" date="1681300800">- Update to version 1.6.0:
  * v1.6.0 release
  * Update release notes for v1.6.0
  * fix(deps): update rust crate tokio to 1.27.0
  * use lower TTL for contianer entries
  * fix(deps): update rust crate syslog to ^6.0.1
  * fix(deps): update rust crate futures-util to 0.3.28
  * chore(deps): update dependency containers/automation_images to v20230330
  * Disable Dependabot in favor of Renovate
  * chore(deps): update dependency containers/automation_images to v20230320
  * build(deps): bump futures-util from 0.3.26 to 0.3.27
  * [CI:BUILD] Packit: trigger builds on commit to main branch
  * build(deps): bump anyhow from 1.0.68 to 1.0.70
  * fix lint issue with new rust version 1.68
  * Cirrus: Update to newer CI VM images
  * build(deps): bump chrono from 0.4.23 to 0.4.24
  * build(deps): bump libc from 0.2.139 to 0.2.140
  * build(deps): bump async-broadcast from 0.5.0 to 0.5.1
  * build(deps): bump signal-hook from 0.3.14 to 0.3.15
  * build(deps): bump futures-util from 0.3.25 to 0.3.26
  * build(deps): bump tokio from 1.25.0 to 1.26.0
  * [CI:DOCS] Clarify packit related comments
  * [CI:BUILD] Packit: initial enablement
  * Allow custom cargo binary path
  * Switch to explicit platform list for `cargo vendor-filterer`
  * bump to v1.6.0-dev
  * Add renovate.json5
  * Cirrus: Groom rust cache before updating</changelog>
  <changelog author="danish.prakash@suse.com" date="1688385600">- Update to version 1.7.0:
  * release v1.7.0
  * Update release notes for v1.7.0
  * fix(deps): update rust crate tokio to 1.29.0
  * fix(deps): update rust crate clap to 4.3.8
  * fix(deps): update rust crate clap to 4.3.5
  * run cargo update
  * [CI:BUILD] Packit: add Fedora downstream tasks
  * fix(deps): update rust crate clap to 4.3.4
  * chore(deps): update dependency containers/automation_images to v20230614
  * fix(deps): update rust crate clap to 4.3.3
  * fix(deps): update rust crate log to 0.4.19
  * fix(deps): update rust crate clap to 4.3.2
  * fix(deps): update rust crate clap to 4.3.1
  * cirrus: remove verify_vendor task
  * chore(deps): update dependency containers/automation_images to v20230601
  * fix(deps): update rust crate trust-dns-server to 0.22.1
  * chore(deps): update rust crate chrono to 0.4.26
  * fix(deps): update rust crate tokio to 1.28.2
  * fix(deps): update rust crate log to 0.4.18
  * chore(deps): update rust crate chrono to 0.4.25
  * fix(deps): update rust crate clap to 4.3.0
  * chore(deps): update dependency containers/automation_images to v20230517
  * fix(deps): update rust crate tokio to 1.28.1
  * chore(deps): update dependency containers/automation_images to v20230426
  * fix(deps): update rust crate clap to 4.2.7
  * fix(deps): update rust crate anyhow to 1.0.71
  * fix typo in makefile
  * fix(deps): update rust crate tokio to 1.28.0
  * fix(deps): update rust crate clap to 4.2.5
  * fix(deps): update rust crate syslog to ^6.1.0
  * fix(deps): update rust crate clap to 4.2.4
  * fix(deps): update rust crate clap to 4.2.3
  * fix(deps): update rust crate clap to v4
  * chore(deps): update dependency containers/automation_images to v20230405
  * bump to v1.7.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1689076800">- Disable restricting builds only for tier1 platforms
  i.e. only for x86_64 and aarch64 and enable for all.</changelog>
  <changelog author="danish.prakash@suse.com" date="1695902400">- Update to version 1.8.0:
  * Release v1.8.0
  * update release notes for v1.8.0
  * run cargo update
  * Packit: switch to @containers/packit-build team for copr failure notification comments
  * [CI:BUILD] Packit: tag @lsm5 on copr build failures
  * chore(deps): update rust crate chrono to 0.4.31
  * cargo: bump chrono to 0.4.30
  * test: IPv6 format is changed in v1.72.0
  * bump nix to 0.27.1
  * vendor: bump trust_dns_proto and trust_dns_client to 0.23.0
  * fix(deps): update rust crate trust-dns-server to 0.23.0
  * [CI:BUILD] rpm: spdx compatible license field
  * fix(deps): update rust crate anyhow to 1.0.75
  * fix(deps): update rust crate tokio to 1.32.0
  * chore(deps): update dependency containers/automation_images to v20230816
  * fix(deps): update rust crate tokio to 1.31.0
  * fix(deps): update rust crate anyhow to 1.0.74
  * fix(deps): update rust crate anyhow to 1.0.73
  * fix(deps): update rust crate log to 0.4.20
  * chore(deps): update dependency containers/automation_images to v20230809
  * fix(deps): update rust crate tokio to 1.30.0
  * fix(deps): update rust crate clap to 4.3.21
  * packit: Build PRs into default packit COPRs
  * chore(deps): update dependency containers/automation_images to v20230807
  * fix(deps): update rust crate anyhow to 1.0.72
  * fix(deps): update rust crate signal-hook to 0.3.17
  * fix(deps): update rust crate clap to 4.3.19
  * fix(deps): update rust crate clap to 4.3.15
  * fix(deps): update rust crate signal-hook to 0.3.16
  * [CI:BUILD] Packit: remove pre-sync action
  * fix(deps): update rust crate clap to 4.3.11
  * fix(deps): update rust crate tokio to 1.29.1
  * fix(deps): update rust crate clap to 4.3.10
  * [CI:BUILD] RPM: cleanup spec and fix eln builds
  * bump to v1.8.0-devel</changelog>
  <changelog author="danish.prakash@suse.com" date="1701345600">- Update to version 1.9.0:
  * Release v1.9.0
  * v1.9.0 Update release notes
  * run cargo update
  * chore(deps): update dependency containers/automation_images to v20231116
  * fix(deps): update rust crate tokio to 1.34.0
  * fix(deps): update rust crate async-broadcast to 0.6.0
  * update trust-dns to hickory
  * fix(deps): update rust crate futures-util to 0.3.29
  * fix(deps): update rust crate trust-dns-server to 0.23.2
  * fix(deps): update rust crate trust-dns-proto to 0.23.2
  * tmt: initial enablement
  * aardvark main: change error reporting
  * chore(deps): update dependency containers/automation_images to v20231004
  * fix(deps): update rust crate trust-dns-proto to 0.23.1
  * fix(deps): update rust crate trust-dns-client to 0.23.1
  * clippy: some format fixes
  * fix(deps): update rust crate tokio to 1.33.0
  * Bump to v1.9.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1706184000">- Update to version 1.10.0:
  * Release 1.10.0
  * Release notes for 1.10.0
  * chore(deps): update rust crate chrono to 0.4.32
  * chore(deps): update dependency containers/automation_images to v20240102
  * fix(deps): update rust crate futures-util to 0.3.30
  * fix(deps): update rust crate anyhow to 1.0.79
  * fix(deps): update rust crate tokio to 1.35.1
  * chore(deps): update dependency containers/automation_images to v20231208
  * fix(deps): update rust crate tokio to 1.35.0
  * fix duplicated IP CI flake
  * server: remove unused kill switch
  * fix(deps): update rust crate clap to ~4.4.10
  * Bump working version to v1.10.0-dev</changelog>
</package>
<package pkgid="02cefa13a9c016190a4b2da88da1ea59d5c045fc52e5f2e79190a03fabbf2837" name="aardvark-dns" arch="aarch64">
  <version epoch="0" ver="1.11.0" rel="150500.3.6.1"/>
  <changelog author="danish.prakash@suse.com" date="1676376000">- First version of aardvark-dns</changelog>
  <changelog author="danish.prakash@suse.com" date="1679054400">- Fix libexecdir issue on Leap and SLE</changelog>
  <changelog author="danish.prakash@suse.com" date="1681300800">- Update to version 1.6.0:
  * v1.6.0 release
  * Update release notes for v1.6.0
  * fix(deps): update rust crate tokio to 1.27.0
  * use lower TTL for contianer entries
  * fix(deps): update rust crate syslog to ^6.0.1
  * fix(deps): update rust crate futures-util to 0.3.28
  * chore(deps): update dependency containers/automation_images to v20230330
  * Disable Dependabot in favor of Renovate
  * chore(deps): update dependency containers/automation_images to v20230320
  * build(deps): bump futures-util from 0.3.26 to 0.3.27
  * [CI:BUILD] Packit: trigger builds on commit to main branch
  * build(deps): bump anyhow from 1.0.68 to 1.0.70
  * fix lint issue with new rust version 1.68
  * Cirrus: Update to newer CI VM images
  * build(deps): bump chrono from 0.4.23 to 0.4.24
  * build(deps): bump libc from 0.2.139 to 0.2.140
  * build(deps): bump async-broadcast from 0.5.0 to 0.5.1
  * build(deps): bump signal-hook from 0.3.14 to 0.3.15
  * build(deps): bump futures-util from 0.3.25 to 0.3.26
  * build(deps): bump tokio from 1.25.0 to 1.26.0
  * [CI:DOCS] Clarify packit related comments
  * [CI:BUILD] Packit: initial enablement
  * Allow custom cargo binary path
  * Switch to explicit platform list for `cargo vendor-filterer`
  * bump to v1.6.0-dev
  * Add renovate.json5
  * Cirrus: Groom rust cache before updating</changelog>
  <changelog author="danish.prakash@suse.com" date="1688385600">- Update to version 1.7.0:
  * release v1.7.0
  * Update release notes for v1.7.0
  * fix(deps): update rust crate tokio to 1.29.0
  * fix(deps): update rust crate clap to 4.3.8
  * fix(deps): update rust crate clap to 4.3.5
  * run cargo update
  * [CI:BUILD] Packit: add Fedora downstream tasks
  * fix(deps): update rust crate clap to 4.3.4
  * chore(deps): update dependency containers/automation_images to v20230614
  * fix(deps): update rust crate clap to 4.3.3
  * fix(deps): update rust crate log to 0.4.19
  * fix(deps): update rust crate clap to 4.3.2
  * fix(deps): update rust crate clap to 4.3.1
  * cirrus: remove verify_vendor task
  * chore(deps): update dependency containers/automation_images to v20230601
  * fix(deps): update rust crate trust-dns-server to 0.22.1
  * chore(deps): update rust crate chrono to 0.4.26
  * fix(deps): update rust crate tokio to 1.28.2
  * fix(deps): update rust crate log to 0.4.18
  * chore(deps): update rust crate chrono to 0.4.25
  * fix(deps): update rust crate clap to 4.3.0
  * chore(deps): update dependency containers/automation_images to v20230517
  * fix(deps): update rust crate tokio to 1.28.1
  * chore(deps): update dependency containers/automation_images to v20230426
  * fix(deps): update rust crate clap to 4.2.7
  * fix(deps): update rust crate anyhow to 1.0.71
  * fix typo in makefile
  * fix(deps): update rust crate tokio to 1.28.0
  * fix(deps): update rust crate clap to 4.2.5
  * fix(deps): update rust crate syslog to ^6.1.0
  * fix(deps): update rust crate clap to 4.2.4
  * fix(deps): update rust crate clap to 4.2.3
  * fix(deps): update rust crate clap to v4
  * chore(deps): update dependency containers/automation_images to v20230405
  * bump to v1.7.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1689076800">- Disable restricting builds only for tier1 platforms
  i.e. only for x86_64 and aarch64 and enable for all.</changelog>
  <changelog author="danish.prakash@suse.com" date="1695902400">- Update to version 1.8.0:
  * Release v1.8.0
  * update release notes for v1.8.0
  * run cargo update
  * Packit: switch to @containers/packit-build team for copr failure notification comments
  * [CI:BUILD] Packit: tag @lsm5 on copr build failures
  * chore(deps): update rust crate chrono to 0.4.31
  * cargo: bump chrono to 0.4.30
  * test: IPv6 format is changed in v1.72.0
  * bump nix to 0.27.1
  * vendor: bump trust_dns_proto and trust_dns_client to 0.23.0
  * fix(deps): update rust crate trust-dns-server to 0.23.0
  * [CI:BUILD] rpm: spdx compatible license field
  * fix(deps): update rust crate anyhow to 1.0.75
  * fix(deps): update rust crate tokio to 1.32.0
  * chore(deps): update dependency containers/automation_images to v20230816
  * fix(deps): update rust crate tokio to 1.31.0
  * fix(deps): update rust crate anyhow to 1.0.74
  * fix(deps): update rust crate anyhow to 1.0.73
  * fix(deps): update rust crate log to 0.4.20
  * chore(deps): update dependency containers/automation_images to v20230809
  * fix(deps): update rust crate tokio to 1.30.0
  * fix(deps): update rust crate clap to 4.3.21
  * packit: Build PRs into default packit COPRs
  * chore(deps): update dependency containers/automation_images to v20230807
  * fix(deps): update rust crate anyhow to 1.0.72
  * fix(deps): update rust crate signal-hook to 0.3.17
  * fix(deps): update rust crate clap to 4.3.19
  * fix(deps): update rust crate clap to 4.3.15
  * fix(deps): update rust crate signal-hook to 0.3.16
  * [CI:BUILD] Packit: remove pre-sync action
  * fix(deps): update rust crate clap to 4.3.11
  * fix(deps): update rust crate tokio to 1.29.1
  * fix(deps): update rust crate clap to 4.3.10
  * [CI:BUILD] RPM: cleanup spec and fix eln builds
  * bump to v1.8.0-devel</changelog>
  <changelog author="danish.prakash@suse.com" date="1701345600">- Update to version 1.9.0:
  * Release v1.9.0
  * v1.9.0 Update release notes
  * run cargo update
  * chore(deps): update dependency containers/automation_images to v20231116
  * fix(deps): update rust crate tokio to 1.34.0
  * fix(deps): update rust crate async-broadcast to 0.6.0
  * update trust-dns to hickory
  * fix(deps): update rust crate futures-util to 0.3.29
  * fix(deps): update rust crate trust-dns-server to 0.23.2
  * fix(deps): update rust crate trust-dns-proto to 0.23.2
  * tmt: initial enablement
  * aardvark main: change error reporting
  * chore(deps): update dependency containers/automation_images to v20231004
  * fix(deps): update rust crate trust-dns-proto to 0.23.1
  * fix(deps): update rust crate trust-dns-client to 0.23.1
  * clippy: some format fixes
  * fix(deps): update rust crate tokio to 1.33.0
  * Bump to v1.9.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1706184000">- Update to version 1.10.0:
  * Release 1.10.0
  * Release notes for 1.10.0
  * chore(deps): update rust crate chrono to 0.4.32
  * chore(deps): update dependency containers/automation_images to v20240102
  * fix(deps): update rust crate futures-util to 0.3.30
  * fix(deps): update rust crate anyhow to 1.0.79
  * fix(deps): update rust crate tokio to 1.35.1
  * chore(deps): update dependency containers/automation_images to v20231208
  * fix(deps): update rust crate tokio to 1.35.0
  * fix duplicated IP CI flake
  * server: remove unused kill switch
  * fix(deps): update rust crate clap to ~4.4.10
  * Bump working version to v1.10.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1717416000">- Remove redundant source: cargo_config
- Update to version 1.11.0:
  * Release v1.11.0
  * v1.11.0 release notes
  * run cargo update
  * chore(deps): update dependency containers/automation_images to v20240529
  * Internal networks cannot make external DNS requests
  * fix(deps): update rust crate anyhow to 1.0.86
  * fix(deps): update rust crate nix to 0.29.0
  * [skip-ci] RPM: use default __cargo macro across all envs
  * chore(deps): update dependency containers/automation_images to v20240513
  * fix(deps): update rust crate anyhow to 1.0.83
  * [skip-ci] Packit: separate `packages` key for rhel jobs
  * fix(deps): update rust crate libc to 0.2.154
  * [skip-ci] Packit: enable rhel10, c10s tests and c10s downstream sync
  * [skip-ci] Packit: Remove EL8 jobs
  * fix(deps): update rust crate syslog to ^6.1.1
  * fix reverse ipv6 lookup test flake
  * fix(deps): update hickory-dns monorepo to 0.24.1
  * chore(deps): update rust crate chrono to 0.4.38
  * Don't tear down all server threads on SIGHUP (bsc#1224167)
  * fix(deps): update rust crate anyhow to 1.0.82
  * fix(deps): update rust crate tokio to 1.37.0
  * Update to nix-0.28.0
  * update chrono package
  * chore(deps): update dependency containers/automation_images to v20240320
  * fix(deps): update rust crate anyhow to 1.0.81
  * tests: check queried domain name in reverse lookup tests
  * fix: set name for answers in reverse lookups
  * chore: fix typo in runner script
  * chore: fix log message when doing reverse lookup
  * fix(deps): update rust crate log to 0.4.21
  * fix(deps): update rust crate anyhow to 1.0.80
  * chore(deps): update rust crate chrono to 0.4.34
  * fix(deps): update rust crate async-broadcast to 0.7.0
  * fix(deps): update rust crate tokio to 1.36.0
  * [CI:DOCS] Packit: disable bodhi tasks
  * chore(deps): update rust crate chrono to 0.4.33
  * Bump to 1.11.0-dev</changelog>
</package>
<package pkgid="a97d1de58e126323a2070b3231acf54d9cdfc381c5877bc30fd644c1c96fe605" name="aardvark-dns" arch="s390x">
  <version epoch="0" ver="1.11.0" rel="150500.3.6.1"/>
  <changelog author="danish.prakash@suse.com" date="1676376000">- First version of aardvark-dns</changelog>
  <changelog author="danish.prakash@suse.com" date="1679054400">- Fix libexecdir issue on Leap and SLE</changelog>
  <changelog author="danish.prakash@suse.com" date="1681300800">- Update to version 1.6.0:
  * v1.6.0 release
  * Update release notes for v1.6.0
  * fix(deps): update rust crate tokio to 1.27.0
  * use lower TTL for contianer entries
  * fix(deps): update rust crate syslog to ^6.0.1
  * fix(deps): update rust crate futures-util to 0.3.28
  * chore(deps): update dependency containers/automation_images to v20230330
  * Disable Dependabot in favor of Renovate
  * chore(deps): update dependency containers/automation_images to v20230320
  * build(deps): bump futures-util from 0.3.26 to 0.3.27
  * [CI:BUILD] Packit: trigger builds on commit to main branch
  * build(deps): bump anyhow from 1.0.68 to 1.0.70
  * fix lint issue with new rust version 1.68
  * Cirrus: Update to newer CI VM images
  * build(deps): bump chrono from 0.4.23 to 0.4.24
  * build(deps): bump libc from 0.2.139 to 0.2.140
  * build(deps): bump async-broadcast from 0.5.0 to 0.5.1
  * build(deps): bump signal-hook from 0.3.14 to 0.3.15
  * build(deps): bump futures-util from 0.3.25 to 0.3.26
  * build(deps): bump tokio from 1.25.0 to 1.26.0
  * [CI:DOCS] Clarify packit related comments
  * [CI:BUILD] Packit: initial enablement
  * Allow custom cargo binary path
  * Switch to explicit platform list for `cargo vendor-filterer`
  * bump to v1.6.0-dev
  * Add renovate.json5
  * Cirrus: Groom rust cache before updating</changelog>
  <changelog author="danish.prakash@suse.com" date="1688385600">- Update to version 1.7.0:
  * release v1.7.0
  * Update release notes for v1.7.0
  * fix(deps): update rust crate tokio to 1.29.0
  * fix(deps): update rust crate clap to 4.3.8
  * fix(deps): update rust crate clap to 4.3.5
  * run cargo update
  * [CI:BUILD] Packit: add Fedora downstream tasks
  * fix(deps): update rust crate clap to 4.3.4
  * chore(deps): update dependency containers/automation_images to v20230614
  * fix(deps): update rust crate clap to 4.3.3
  * fix(deps): update rust crate log to 0.4.19
  * fix(deps): update rust crate clap to 4.3.2
  * fix(deps): update rust crate clap to 4.3.1
  * cirrus: remove verify_vendor task
  * chore(deps): update dependency containers/automation_images to v20230601
  * fix(deps): update rust crate trust-dns-server to 0.22.1
  * chore(deps): update rust crate chrono to 0.4.26
  * fix(deps): update rust crate tokio to 1.28.2
  * fix(deps): update rust crate log to 0.4.18
  * chore(deps): update rust crate chrono to 0.4.25
  * fix(deps): update rust crate clap to 4.3.0
  * chore(deps): update dependency containers/automation_images to v20230517
  * fix(deps): update rust crate tokio to 1.28.1
  * chore(deps): update dependency containers/automation_images to v20230426
  * fix(deps): update rust crate clap to 4.2.7
  * fix(deps): update rust crate anyhow to 1.0.71
  * fix typo in makefile
  * fix(deps): update rust crate tokio to 1.28.0
  * fix(deps): update rust crate clap to 4.2.5
  * fix(deps): update rust crate syslog to ^6.1.0
  * fix(deps): update rust crate clap to 4.2.4
  * fix(deps): update rust crate clap to 4.2.3
  * fix(deps): update rust crate clap to v4
  * chore(deps): update dependency containers/automation_images to v20230405
  * bump to v1.7.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1689076800">- Disable restricting builds only for tier1 platforms
  i.e. only for x86_64 and aarch64 and enable for all.</changelog>
  <changelog author="danish.prakash@suse.com" date="1695902400">- Update to version 1.8.0:
  * Release v1.8.0
  * update release notes for v1.8.0
  * run cargo update
  * Packit: switch to @containers/packit-build team for copr failure notification comments
  * [CI:BUILD] Packit: tag @lsm5 on copr build failures
  * chore(deps): update rust crate chrono to 0.4.31
  * cargo: bump chrono to 0.4.30
  * test: IPv6 format is changed in v1.72.0
  * bump nix to 0.27.1
  * vendor: bump trust_dns_proto and trust_dns_client to 0.23.0
  * fix(deps): update rust crate trust-dns-server to 0.23.0
  * [CI:BUILD] rpm: spdx compatible license field
  * fix(deps): update rust crate anyhow to 1.0.75
  * fix(deps): update rust crate tokio to 1.32.0
  * chore(deps): update dependency containers/automation_images to v20230816
  * fix(deps): update rust crate tokio to 1.31.0
  * fix(deps): update rust crate anyhow to 1.0.74
  * fix(deps): update rust crate anyhow to 1.0.73
  * fix(deps): update rust crate log to 0.4.20
  * chore(deps): update dependency containers/automation_images to v20230809
  * fix(deps): update rust crate tokio to 1.30.0
  * fix(deps): update rust crate clap to 4.3.21
  * packit: Build PRs into default packit COPRs
  * chore(deps): update dependency containers/automation_images to v20230807
  * fix(deps): update rust crate anyhow to 1.0.72
  * fix(deps): update rust crate signal-hook to 0.3.17
  * fix(deps): update rust crate clap to 4.3.19
  * fix(deps): update rust crate clap to 4.3.15
  * fix(deps): update rust crate signal-hook to 0.3.16
  * [CI:BUILD] Packit: remove pre-sync action
  * fix(deps): update rust crate clap to 4.3.11
  * fix(deps): update rust crate tokio to 1.29.1
  * fix(deps): update rust crate clap to 4.3.10
  * [CI:BUILD] RPM: cleanup spec and fix eln builds
  * bump to v1.8.0-devel</changelog>
  <changelog author="danish.prakash@suse.com" date="1701345600">- Update to version 1.9.0:
  * Release v1.9.0
  * v1.9.0 Update release notes
  * run cargo update
  * chore(deps): update dependency containers/automation_images to v20231116
  * fix(deps): update rust crate tokio to 1.34.0
  * fix(deps): update rust crate async-broadcast to 0.6.0
  * update trust-dns to hickory
  * fix(deps): update rust crate futures-util to 0.3.29
  * fix(deps): update rust crate trust-dns-server to 0.23.2
  * fix(deps): update rust crate trust-dns-proto to 0.23.2
  * tmt: initial enablement
  * aardvark main: change error reporting
  * chore(deps): update dependency containers/automation_images to v20231004
  * fix(deps): update rust crate trust-dns-proto to 0.23.1
  * fix(deps): update rust crate trust-dns-client to 0.23.1
  * clippy: some format fixes
  * fix(deps): update rust crate tokio to 1.33.0
  * Bump to v1.9.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1706184000">- Update to version 1.10.0:
  * Release 1.10.0
  * Release notes for 1.10.0
  * chore(deps): update rust crate chrono to 0.4.32
  * chore(deps): update dependency containers/automation_images to v20240102
  * fix(deps): update rust crate futures-util to 0.3.30
  * fix(deps): update rust crate anyhow to 1.0.79
  * fix(deps): update rust crate tokio to 1.35.1
  * chore(deps): update dependency containers/automation_images to v20231208
  * fix(deps): update rust crate tokio to 1.35.0
  * fix duplicated IP CI flake
  * server: remove unused kill switch
  * fix(deps): update rust crate clap to ~4.4.10
  * Bump working version to v1.10.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1717416000">- Remove redundant source: cargo_config
- Update to version 1.11.0:
  * Release v1.11.0
  * v1.11.0 release notes
  * run cargo update
  * chore(deps): update dependency containers/automation_images to v20240529
  * Internal networks cannot make external DNS requests
  * fix(deps): update rust crate anyhow to 1.0.86
  * fix(deps): update rust crate nix to 0.29.0
  * [skip-ci] RPM: use default __cargo macro across all envs
  * chore(deps): update dependency containers/automation_images to v20240513
  * fix(deps): update rust crate anyhow to 1.0.83
  * [skip-ci] Packit: separate `packages` key for rhel jobs
  * fix(deps): update rust crate libc to 0.2.154
  * [skip-ci] Packit: enable rhel10, c10s tests and c10s downstream sync
  * [skip-ci] Packit: Remove EL8 jobs
  * fix(deps): update rust crate syslog to ^6.1.1
  * fix reverse ipv6 lookup test flake
  * fix(deps): update hickory-dns monorepo to 0.24.1
  * chore(deps): update rust crate chrono to 0.4.38
  * Don't tear down all server threads on SIGHUP (bsc#1224167)
  * fix(deps): update rust crate anyhow to 1.0.82
  * fix(deps): update rust crate tokio to 1.37.0
  * Update to nix-0.28.0
  * update chrono package
  * chore(deps): update dependency containers/automation_images to v20240320
  * fix(deps): update rust crate anyhow to 1.0.81
  * tests: check queried domain name in reverse lookup tests
  * fix: set name for answers in reverse lookups
  * chore: fix typo in runner script
  * chore: fix log message when doing reverse lookup
  * fix(deps): update rust crate log to 0.4.21
  * fix(deps): update rust crate anyhow to 1.0.80
  * chore(deps): update rust crate chrono to 0.4.34
  * fix(deps): update rust crate async-broadcast to 0.7.0
  * fix(deps): update rust crate tokio to 1.36.0
  * [CI:DOCS] Packit: disable bodhi tasks
  * chore(deps): update rust crate chrono to 0.4.33
  * Bump to 1.11.0-dev</changelog>
</package>
<package pkgid="499610eb025fcb432bdd554fad706335c12167a736122dac7ed2e34339e46ba0" name="aardvark-dns" arch="src">
  <version epoch="0" ver="1.11.0" rel="150500.3.6.1"/>
  <changelog author="danish.prakash@suse.com" date="1676376000">- First version of aardvark-dns</changelog>
  <changelog author="danish.prakash@suse.com" date="1679054400">- Fix libexecdir issue on Leap and SLE</changelog>
  <changelog author="danish.prakash@suse.com" date="1681300800">- Update to version 1.6.0:
  * v1.6.0 release
  * Update release notes for v1.6.0
  * fix(deps): update rust crate tokio to 1.27.0
  * use lower TTL for contianer entries
  * fix(deps): update rust crate syslog to ^6.0.1
  * fix(deps): update rust crate futures-util to 0.3.28
  * chore(deps): update dependency containers/automation_images to v20230330
  * Disable Dependabot in favor of Renovate
  * chore(deps): update dependency containers/automation_images to v20230320
  * build(deps): bump futures-util from 0.3.26 to 0.3.27
  * [CI:BUILD] Packit: trigger builds on commit to main branch
  * build(deps): bump anyhow from 1.0.68 to 1.0.70
  * fix lint issue with new rust version 1.68
  * Cirrus: Update to newer CI VM images
  * build(deps): bump chrono from 0.4.23 to 0.4.24
  * build(deps): bump libc from 0.2.139 to 0.2.140
  * build(deps): bump async-broadcast from 0.5.0 to 0.5.1
  * build(deps): bump signal-hook from 0.3.14 to 0.3.15
  * build(deps): bump futures-util from 0.3.25 to 0.3.26
  * build(deps): bump tokio from 1.25.0 to 1.26.0
  * [CI:DOCS] Clarify packit related comments
  * [CI:BUILD] Packit: initial enablement
  * Allow custom cargo binary path
  * Switch to explicit platform list for `cargo vendor-filterer`
  * bump to v1.6.0-dev
  * Add renovate.json5
  * Cirrus: Groom rust cache before updating</changelog>
  <changelog author="danish.prakash@suse.com" date="1688385600">- Update to version 1.7.0:
  * release v1.7.0
  * Update release notes for v1.7.0
  * fix(deps): update rust crate tokio to 1.29.0
  * fix(deps): update rust crate clap to 4.3.8
  * fix(deps): update rust crate clap to 4.3.5
  * run cargo update
  * [CI:BUILD] Packit: add Fedora downstream tasks
  * fix(deps): update rust crate clap to 4.3.4
  * chore(deps): update dependency containers/automation_images to v20230614
  * fix(deps): update rust crate clap to 4.3.3
  * fix(deps): update rust crate log to 0.4.19
  * fix(deps): update rust crate clap to 4.3.2
  * fix(deps): update rust crate clap to 4.3.1
  * cirrus: remove verify_vendor task
  * chore(deps): update dependency containers/automation_images to v20230601
  * fix(deps): update rust crate trust-dns-server to 0.22.1
  * chore(deps): update rust crate chrono to 0.4.26
  * fix(deps): update rust crate tokio to 1.28.2
  * fix(deps): update rust crate log to 0.4.18
  * chore(deps): update rust crate chrono to 0.4.25
  * fix(deps): update rust crate clap to 4.3.0
  * chore(deps): update dependency containers/automation_images to v20230517
  * fix(deps): update rust crate tokio to 1.28.1
  * chore(deps): update dependency containers/automation_images to v20230426
  * fix(deps): update rust crate clap to 4.2.7
  * fix(deps): update rust crate anyhow to 1.0.71
  * fix typo in makefile
  * fix(deps): update rust crate tokio to 1.28.0
  * fix(deps): update rust crate clap to 4.2.5
  * fix(deps): update rust crate syslog to ^6.1.0
  * fix(deps): update rust crate clap to 4.2.4
  * fix(deps): update rust crate clap to 4.2.3
  * fix(deps): update rust crate clap to v4
  * chore(deps): update dependency containers/automation_images to v20230405
  * bump to v1.7.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1689076800">- Disable restricting builds only for tier1 platforms
  i.e. only for x86_64 and aarch64 and enable for all.</changelog>
  <changelog author="danish.prakash@suse.com" date="1695902400">- Update to version 1.8.0:
  * Release v1.8.0
  * update release notes for v1.8.0
  * run cargo update
  * Packit: switch to @containers/packit-build team for copr failure notification comments
  * [CI:BUILD] Packit: tag @lsm5 on copr build failures
  * chore(deps): update rust crate chrono to 0.4.31
  * cargo: bump chrono to 0.4.30
  * test: IPv6 format is changed in v1.72.0
  * bump nix to 0.27.1
  * vendor: bump trust_dns_proto and trust_dns_client to 0.23.0
  * fix(deps): update rust crate trust-dns-server to 0.23.0
  * [CI:BUILD] rpm: spdx compatible license field
  * fix(deps): update rust crate anyhow to 1.0.75
  * fix(deps): update rust crate tokio to 1.32.0
  * chore(deps): update dependency containers/automation_images to v20230816
  * fix(deps): update rust crate tokio to 1.31.0
  * fix(deps): update rust crate anyhow to 1.0.74
  * fix(deps): update rust crate anyhow to 1.0.73
  * fix(deps): update rust crate log to 0.4.20
  * chore(deps): update dependency containers/automation_images to v20230809
  * fix(deps): update rust crate tokio to 1.30.0
  * fix(deps): update rust crate clap to 4.3.21
  * packit: Build PRs into default packit COPRs
  * chore(deps): update dependency containers/automation_images to v20230807
  * fix(deps): update rust crate anyhow to 1.0.72
  * fix(deps): update rust crate signal-hook to 0.3.17
  * fix(deps): update rust crate clap to 4.3.19
  * fix(deps): update rust crate clap to 4.3.15
  * fix(deps): update rust crate signal-hook to 0.3.16
  * [CI:BUILD] Packit: remove pre-sync action
  * fix(deps): update rust crate clap to 4.3.11
  * fix(deps): update rust crate tokio to 1.29.1
  * fix(deps): update rust crate clap to 4.3.10
  * [CI:BUILD] RPM: cleanup spec and fix eln builds
  * bump to v1.8.0-devel</changelog>
  <changelog author="danish.prakash@suse.com" date="1701345600">- Update to version 1.9.0:
  * Release v1.9.0
  * v1.9.0 Update release notes
  * run cargo update
  * chore(deps): update dependency containers/automation_images to v20231116
  * fix(deps): update rust crate tokio to 1.34.0
  * fix(deps): update rust crate async-broadcast to 0.6.0
  * update trust-dns to hickory
  * fix(deps): update rust crate futures-util to 0.3.29
  * fix(deps): update rust crate trust-dns-server to 0.23.2
  * fix(deps): update rust crate trust-dns-proto to 0.23.2
  * tmt: initial enablement
  * aardvark main: change error reporting
  * chore(deps): update dependency containers/automation_images to v20231004
  * fix(deps): update rust crate trust-dns-proto to 0.23.1
  * fix(deps): update rust crate trust-dns-client to 0.23.1
  * clippy: some format fixes
  * fix(deps): update rust crate tokio to 1.33.0
  * Bump to v1.9.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1706184000">- Update to version 1.10.0:
  * Release 1.10.0
  * Release notes for 1.10.0
  * chore(deps): update rust crate chrono to 0.4.32
  * chore(deps): update dependency containers/automation_images to v20240102
  * fix(deps): update rust crate futures-util to 0.3.30
  * fix(deps): update rust crate anyhow to 1.0.79
  * fix(deps): update rust crate tokio to 1.35.1
  * chore(deps): update dependency containers/automation_images to v20231208
  * fix(deps): update rust crate tokio to 1.35.0
  * fix duplicated IP CI flake
  * server: remove unused kill switch
  * fix(deps): update rust crate clap to ~4.4.10
  * Bump working version to v1.10.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1717416000">- Remove redundant source: cargo_config
- Update to version 1.11.0:
  * Release v1.11.0
  * v1.11.0 release notes
  * run cargo update
  * chore(deps): update dependency containers/automation_images to v20240529
  * Internal networks cannot make external DNS requests
  * fix(deps): update rust crate anyhow to 1.0.86
  * fix(deps): update rust crate nix to 0.29.0
  * [skip-ci] RPM: use default __cargo macro across all envs
  * chore(deps): update dependency containers/automation_images to v20240513
  * fix(deps): update rust crate anyhow to 1.0.83
  * [skip-ci] Packit: separate `packages` key for rhel jobs
  * fix(deps): update rust crate libc to 0.2.154
  * [skip-ci] Packit: enable rhel10, c10s tests and c10s downstream sync
  * [skip-ci] Packit: Remove EL8 jobs
  * fix(deps): update rust crate syslog to ^6.1.1
  * fix reverse ipv6 lookup test flake
  * fix(deps): update hickory-dns monorepo to 0.24.1
  * chore(deps): update rust crate chrono to 0.4.38
  * Don't tear down all server threads on SIGHUP (bsc#1224167)
  * fix(deps): update rust crate anyhow to 1.0.82
  * fix(deps): update rust crate tokio to 1.37.0
  * Update to nix-0.28.0
  * update chrono package
  * chore(deps): update dependency containers/automation_images to v20240320
  * fix(deps): update rust crate anyhow to 1.0.81
  * tests: check queried domain name in reverse lookup tests
  * fix: set name for answers in reverse lookups
  * chore: fix typo in runner script
  * chore: fix log message when doing reverse lookup
  * fix(deps): update rust crate log to 0.4.21
  * fix(deps): update rust crate anyhow to 1.0.80
  * chore(deps): update rust crate chrono to 0.4.34
  * fix(deps): update rust crate async-broadcast to 0.7.0
  * fix(deps): update rust crate tokio to 1.36.0
  * [CI:DOCS] Packit: disable bodhi tasks
  * chore(deps): update rust crate chrono to 0.4.33
  * Bump to 1.11.0-dev</changelog>
</package>
<package pkgid="10b88f9f5ec5363ee8d4399db52288a1e432298bb6b121223217bc7ad57fb076" name="aardvark-dns" arch="x86_64">
  <version epoch="0" ver="1.11.0" rel="150500.3.6.1"/>
  <changelog author="danish.prakash@suse.com" date="1676376000">- First version of aardvark-dns</changelog>
  <changelog author="danish.prakash@suse.com" date="1679054400">- Fix libexecdir issue on Leap and SLE</changelog>
  <changelog author="danish.prakash@suse.com" date="1681300800">- Update to version 1.6.0:
  * v1.6.0 release
  * Update release notes for v1.6.0
  * fix(deps): update rust crate tokio to 1.27.0
  * use lower TTL for contianer entries
  * fix(deps): update rust crate syslog to ^6.0.1
  * fix(deps): update rust crate futures-util to 0.3.28
  * chore(deps): update dependency containers/automation_images to v20230330
  * Disable Dependabot in favor of Renovate
  * chore(deps): update dependency containers/automation_images to v20230320
  * build(deps): bump futures-util from 0.3.26 to 0.3.27
  * [CI:BUILD] Packit: trigger builds on commit to main branch
  * build(deps): bump anyhow from 1.0.68 to 1.0.70
  * fix lint issue with new rust version 1.68
  * Cirrus: Update to newer CI VM images
  * build(deps): bump chrono from 0.4.23 to 0.4.24
  * build(deps): bump libc from 0.2.139 to 0.2.140
  * build(deps): bump async-broadcast from 0.5.0 to 0.5.1
  * build(deps): bump signal-hook from 0.3.14 to 0.3.15
  * build(deps): bump futures-util from 0.3.25 to 0.3.26
  * build(deps): bump tokio from 1.25.0 to 1.26.0
  * [CI:DOCS] Clarify packit related comments
  * [CI:BUILD] Packit: initial enablement
  * Allow custom cargo binary path
  * Switch to explicit platform list for `cargo vendor-filterer`
  * bump to v1.6.0-dev
  * Add renovate.json5
  * Cirrus: Groom rust cache before updating</changelog>
  <changelog author="danish.prakash@suse.com" date="1688385600">- Update to version 1.7.0:
  * release v1.7.0
  * Update release notes for v1.7.0
  * fix(deps): update rust crate tokio to 1.29.0
  * fix(deps): update rust crate clap to 4.3.8
  * fix(deps): update rust crate clap to 4.3.5
  * run cargo update
  * [CI:BUILD] Packit: add Fedora downstream tasks
  * fix(deps): update rust crate clap to 4.3.4
  * chore(deps): update dependency containers/automation_images to v20230614
  * fix(deps): update rust crate clap to 4.3.3
  * fix(deps): update rust crate log to 0.4.19
  * fix(deps): update rust crate clap to 4.3.2
  * fix(deps): update rust crate clap to 4.3.1
  * cirrus: remove verify_vendor task
  * chore(deps): update dependency containers/automation_images to v20230601
  * fix(deps): update rust crate trust-dns-server to 0.22.1
  * chore(deps): update rust crate chrono to 0.4.26
  * fix(deps): update rust crate tokio to 1.28.2
  * fix(deps): update rust crate log to 0.4.18
  * chore(deps): update rust crate chrono to 0.4.25
  * fix(deps): update rust crate clap to 4.3.0
  * chore(deps): update dependency containers/automation_images to v20230517
  * fix(deps): update rust crate tokio to 1.28.1
  * chore(deps): update dependency containers/automation_images to v20230426
  * fix(deps): update rust crate clap to 4.2.7
  * fix(deps): update rust crate anyhow to 1.0.71
  * fix typo in makefile
  * fix(deps): update rust crate tokio to 1.28.0
  * fix(deps): update rust crate clap to 4.2.5
  * fix(deps): update rust crate syslog to ^6.1.0
  * fix(deps): update rust crate clap to 4.2.4
  * fix(deps): update rust crate clap to 4.2.3
  * fix(deps): update rust crate clap to v4
  * chore(deps): update dependency containers/automation_images to v20230405
  * bump to v1.7.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1689076800">- Disable restricting builds only for tier1 platforms
  i.e. only for x86_64 and aarch64 and enable for all.</changelog>
  <changelog author="danish.prakash@suse.com" date="1695902400">- Update to version 1.8.0:
  * Release v1.8.0
  * update release notes for v1.8.0
  * run cargo update
  * Packit: switch to @containers/packit-build team for copr failure notification comments
  * [CI:BUILD] Packit: tag @lsm5 on copr build failures
  * chore(deps): update rust crate chrono to 0.4.31
  * cargo: bump chrono to 0.4.30
  * test: IPv6 format is changed in v1.72.0
  * bump nix to 0.27.1
  * vendor: bump trust_dns_proto and trust_dns_client to 0.23.0
  * fix(deps): update rust crate trust-dns-server to 0.23.0
  * [CI:BUILD] rpm: spdx compatible license field
  * fix(deps): update rust crate anyhow to 1.0.75
  * fix(deps): update rust crate tokio to 1.32.0
  * chore(deps): update dependency containers/automation_images to v20230816
  * fix(deps): update rust crate tokio to 1.31.0
  * fix(deps): update rust crate anyhow to 1.0.74
  * fix(deps): update rust crate anyhow to 1.0.73
  * fix(deps): update rust crate log to 0.4.20
  * chore(deps): update dependency containers/automation_images to v20230809
  * fix(deps): update rust crate tokio to 1.30.0
  * fix(deps): update rust crate clap to 4.3.21
  * packit: Build PRs into default packit COPRs
  * chore(deps): update dependency containers/automation_images to v20230807
  * fix(deps): update rust crate anyhow to 1.0.72
  * fix(deps): update rust crate signal-hook to 0.3.17
  * fix(deps): update rust crate clap to 4.3.19
  * fix(deps): update rust crate clap to 4.3.15
  * fix(deps): update rust crate signal-hook to 0.3.16
  * [CI:BUILD] Packit: remove pre-sync action
  * fix(deps): update rust crate clap to 4.3.11
  * fix(deps): update rust crate tokio to 1.29.1
  * fix(deps): update rust crate clap to 4.3.10
  * [CI:BUILD] RPM: cleanup spec and fix eln builds
  * bump to v1.8.0-devel</changelog>
  <changelog author="danish.prakash@suse.com" date="1701345600">- Update to version 1.9.0:
  * Release v1.9.0
  * v1.9.0 Update release notes
  * run cargo update
  * chore(deps): update dependency containers/automation_images to v20231116
  * fix(deps): update rust crate tokio to 1.34.0
  * fix(deps): update rust crate async-broadcast to 0.6.0
  * update trust-dns to hickory
  * fix(deps): update rust crate futures-util to 0.3.29
  * fix(deps): update rust crate trust-dns-server to 0.23.2
  * fix(deps): update rust crate trust-dns-proto to 0.23.2
  * tmt: initial enablement
  * aardvark main: change error reporting
  * chore(deps): update dependency containers/automation_images to v20231004
  * fix(deps): update rust crate trust-dns-proto to 0.23.1
  * fix(deps): update rust crate trust-dns-client to 0.23.1
  * clippy: some format fixes
  * fix(deps): update rust crate tokio to 1.33.0
  * Bump to v1.9.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1706184000">- Update to version 1.10.0:
  * Release 1.10.0
  * Release notes for 1.10.0
  * chore(deps): update rust crate chrono to 0.4.32
  * chore(deps): update dependency containers/automation_images to v20240102
  * fix(deps): update rust crate futures-util to 0.3.30
  * fix(deps): update rust crate anyhow to 1.0.79
  * fix(deps): update rust crate tokio to 1.35.1
  * chore(deps): update dependency containers/automation_images to v20231208
  * fix(deps): update rust crate tokio to 1.35.0
  * fix duplicated IP CI flake
  * server: remove unused kill switch
  * fix(deps): update rust crate clap to ~4.4.10
  * Bump working version to v1.10.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1717416000">- Remove redundant source: cargo_config
- Update to version 1.11.0:
  * Release v1.11.0
  * v1.11.0 release notes
  * run cargo update
  * chore(deps): update dependency containers/automation_images to v20240529
  * Internal networks cannot make external DNS requests
  * fix(deps): update rust crate anyhow to 1.0.86
  * fix(deps): update rust crate nix to 0.29.0
  * [skip-ci] RPM: use default __cargo macro across all envs
  * chore(deps): update dependency containers/automation_images to v20240513
  * fix(deps): update rust crate anyhow to 1.0.83
  * [skip-ci] Packit: separate `packages` key for rhel jobs
  * fix(deps): update rust crate libc to 0.2.154
  * [skip-ci] Packit: enable rhel10, c10s tests and c10s downstream sync
  * [skip-ci] Packit: Remove EL8 jobs
  * fix(deps): update rust crate syslog to ^6.1.1
  * fix reverse ipv6 lookup test flake
  * fix(deps): update hickory-dns monorepo to 0.24.1
  * chore(deps): update rust crate chrono to 0.4.38
  * Don't tear down all server threads on SIGHUP (bsc#1224167)
  * fix(deps): update rust crate anyhow to 1.0.82
  * fix(deps): update rust crate tokio to 1.37.0
  * Update to nix-0.28.0
  * update chrono package
  * chore(deps): update dependency containers/automation_images to v20240320
  * fix(deps): update rust crate anyhow to 1.0.81
  * tests: check queried domain name in reverse lookup tests
  * fix: set name for answers in reverse lookups
  * chore: fix typo in runner script
  * chore: fix log message when doing reverse lookup
  * fix(deps): update rust crate log to 0.4.21
  * fix(deps): update rust crate anyhow to 1.0.80
  * chore(deps): update rust crate chrono to 0.4.34
  * fix(deps): update rust crate async-broadcast to 0.7.0
  * fix(deps): update rust crate tokio to 1.36.0
  * [CI:DOCS] Packit: disable bodhi tasks
  * chore(deps): update rust crate chrono to 0.4.33
  * Bump to 1.11.0-dev</changelog>
</package>
<package pkgid="5484aa6de6c3820f4d68cc97581e8ca4add3f15da523acf7f08676c8741c69d7" name="abseil-cpp" arch="src">
  <version epoch="0" ver="20230802.1" rel="150400.10.4.1"/>
  <changelog author="fvogt@suse.com" date="1604664000">- Drop source package, was only used by grpc which was switched
  over to use the shared library</changelog>
  <changelog author="elimat@opensuse.org" date="1609243200">- Update to version 20200923.2
  What's New:
  * absl::StatusOr&lt;T&gt; has been released. See our blog
    post for more information.
  * Abseil Flags reflection interfaces have been released.
  * Abseil Flags memory usage has been significantly optimized.
  * Abseil now supports a "hardened" build mode. This build mode enables
    runtime checks that guard against programming errors that may lead
    to security vulnerabilities.
  Notable Fixes:
  * Sanitizer dynamic annotations like AnnotateRWLockCreate that are
    also defined by the compiler sanitizer implementation are no longer
    also defined by Abseil.
  * Sanitizer macros are now prefixed with ABSL_ to avoid naming collisions.
  * Sanitizer usage is now automatically detected and no longer requires
    macros like ADDRESS_SANITIZER to be defined on the command line.
  Breaking Changes:
  * Abseil no longer contains a dynamic_annotations library. Users
    using a supported build system (Bazel or CMake) are unaffected by
    this, but users manually specifying link libraries may get an error
    about a missing linker input.</changelog>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to LTS version 20210324.0
  * Breaking: The empty absl::container target has been removed from
    the CMake build. This target had no effect and references to
    this target in user code can safely be removed.
  * New: The cleanup library has been released. This library contains
    the control-flow-construct-like type absl::Cleanup which is used
    for executing a callback on scope exit.
  * New: The numeric library now includes bits.h, a polyfill header
    containing implementations of C++20's bitwise math functions.
  * New: Abseil now installs pkg-config files to make it easier to
    use Abseil with some other build systems.
  * New: Abseil now respects the default CMake installation paths.
    Standard CMake variables like CMAKE_INSTALL_PREFIX can be used
    to change the installation path.
- Added Correctly-install-pkgconfig.patch from upstream to fix
  installation of pkgconfig files
- Call ldconfig on post and postun</changelog>
  <changelog author="rpm@fthiessen.de" date="1619352000">- Update to LTS version 20210324.1
  * Fixed missing absl::Cleanup
  * Fixed pkgconfig install path
- Dropped upstream merged Correctly-install-pkgconfig.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1625054400">- Update to version 20210324.2 (LTS):
  * No user visible changes, only build system related</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 20211102.0:
  * absl::Cord is now implemented as a b-tree. The new implementation offers
    improved performance in most workloads.
  * absl::SimpleHexAtoi() has been added to strings library for parsing
    hexadecimal strings</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646395200">- Fix build on SLE-12-SP5</changelog>
  <changelog author="jengelh@inai.de" date="1649073600">- Implement shlib packaging policy</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1656504000">- Add options-old.patch, options-cxx17.patch (boo#1203378)
  * Ensure ABI stability regardless of compiler settings per instruction in the header.</changelog>
  <changelog author="fvogt@suse.com" date="1656504001">- Remove obsolete 0%{suse_version} &lt; 1500 conditions</changelog>
  <changelog author="elimat@opensuse.org" date="1656849600">- Update to version 20220623.0
  What's New:
  * Added absl::AnyInvocable, a move-only function type.
  * Added absl::CordBuffer, a type for buffering data for eventual inclusion an
    absl::Cord, which is useful for writing zero-copy code.
  * Added support for command-line flags of type absl::optional&lt;T&gt;.
  Breaking Changes:
  * CMake builds now use the flag ABSL_BUILD_TESTING (default: OFF) to control
    whether or not unit tests are built.
  * The ABSL_DEPRECATED macro now works with the GCC compiler. GCC users that
    are experiencing new warnings can use -Wno-deprecated-declatations silence
  the warnings or use -Wno-error=deprecated-declarations to see warnings but
  not fail the build.
  * ABSL_CONST_INIT uses the C++20 keyword constinit when available. Some
    compilers are more strict about where this keyword must appear compared to
  the pre-C++20 implementation.
  * Bazel builds now depend on the bazelbuild/bazel-skylib repository.
    See Abseil's WORKSPACE file for an example of how to add this dependency.
  Other:
  * This will be the last release to support C++11. Future releases will require at least C++14.
- run spec-cleaner</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1657540800">- Add Fix-maes-msse41-leaking-into-pkgconfig.patch
  * Do not make programs compiled with abseil require new-ish CPUs (boo#1203379)</changelog>
  <changelog author="dmueller@suse.com" date="1664020800">- update to 20220623.1:
  * minor warning fix</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to 20230125.2
  What's New:
    The Abseil logging library has been released. This library
    provides facilities for writing short text messages about the
    status of a program to stderr, disk files, or other sinks
    (via an extension API). See the logging library documentation
    for more information.
    An extension point, AbslStringify(), allows user-defined types
    to seamlessly work with Abseil's string formatting functions
    like absl::StrCat() and absl::StrFormat().
    A library for computing CRC32C checksums has been added.
    Floating-point parsing now uses the Eisel-Lemire algorithm,
    which provides a significant speed improvement.
    The flags library now provides suggestions for the closest
    flag(s) in the case of misspelled flags.
    Using CMake to install Abseil now makes the installed artifacts
    (in particular absl/base/options.h) reflect the compiled ABI.
  Breaking Changes:
    Abseil now requires at least C++14 and follows Google's Foundational
    C++ Support Policy. See this table for a list of currently supported
    versions compilers, platforms, and build tools.
    The legacy spellings of the thread annotation macros/functions
    (e.g. GUARDED_BY()) have been removed by default in favor of the
    ABSL_ prefixed versions (e.g. ABSL_GUARDED_BY()) due to clashes with
    other libraries. The compatibility macro ABSL_LEGACY_THREAD_ANNOTATIONS
    can be defined on the compile command-line to temporarily restore these
    spellings, but this compatibility macro will be removed in the future.
  Known Issues
    The Abseil logging library in this release is not a feature-complete
    replacement for glog yet. VLOG and DFATAL are examples of features
    that have not yet been released.
- obsolete Fix-maes-msse41-leaking-into-pkgconfig.patch</changelog>
  <changelog author="adrian@suse.de" date="1685016000">- update to 20230125.3
  Details can be found on:
    https://github.com/abseil/abseil-cpp/releases/tag/20230125.3</changelog>
  <changelog author="fvogt@suse.com" date="1688040000">- Add baselibs.conf to make protobuf happy. Hopefully temporary.</changelog>
  <changelog author="fstrba@suse.com" date="1691582400">- Fix build on older systems by requiring C++17 compliant compiler
- Added patch:
  * cmake.patch
    + lower the cmake requirement to 3.5 in order to be able to
    build on SLE12SP5</changelog>
  <changelog author="adrian@suse.de" date="1694088000">- update to 20230802.0
  What's New:
  * Added the nullability library for designating the expected
    nullability of pointers. Currently these serve as annotations
    only, but it is expected that compilers will one day be able
    to use these annotations for diagnostic purposes.
  * Added the prefetch library as a portable layer for moving data
    into caches before it is read.
  * Abseil's hash tables now detect many more programming errors
    in debug and sanitizer builds.
  * Abseil's synchronization objects now differentiate absolute
    waits (when passed an absl::Time) from relative waits (when
    passed an absl::Duration) when the underlying platform supports
    differentiating these cases. This only makes a difference when
    system clocks are adjusted.
  * Abseil's flag parsing library includes additional methods that
    make it easier to use when another library also expects to be
    able to parse flags.
  * absl::string_view is now available as a smaller target,
    @com_google_absl//absl/strings:string_view, so that users may
    use this library without depending on the much larger
    @com_google_absl//absl/strings target.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1696593600">- update to 20230802.1:
  * Add StdcppWaiter to the end of the list of waiter
    implementations</changelog>
  <changelog author="dmueller@suse.com" date="1705665600">- fix build for non-SUSE distributions</changelog>
</package>
<package pkgid="d6c4f0fc5703df7a02c27ca93e0043c14394e6e4b54d19f00505549c9cb78b09" name="abseil-cpp" arch="src">
  <version epoch="0" ver="20240116.1" rel="150500.13.3.5"/>
  <changelog author="elimat@opensuse.org" date="1609243200">- Update to version 20200923.2
  What's New:
  * absl::StatusOr&lt;T&gt; has been released. See our blog
    post for more information.
  * Abseil Flags reflection interfaces have been released.
  * Abseil Flags memory usage has been significantly optimized.
  * Abseil now supports a "hardened" build mode. This build mode enables
    runtime checks that guard against programming errors that may lead
    to security vulnerabilities.
  Notable Fixes:
  * Sanitizer dynamic annotations like AnnotateRWLockCreate that are
    also defined by the compiler sanitizer implementation are no longer
    also defined by Abseil.
  * Sanitizer macros are now prefixed with ABSL_ to avoid naming collisions.
  * Sanitizer usage is now automatically detected and no longer requires
    macros like ADDRESS_SANITIZER to be defined on the command line.
  Breaking Changes:
  * Abseil no longer contains a dynamic_annotations library. Users
    using a supported build system (Bazel or CMake) are unaffected by
    this, but users manually specifying link libraries may get an error
    about a missing linker input.</changelog>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to LTS version 20210324.0
  * Breaking: The empty absl::container target has been removed from
    the CMake build. This target had no effect and references to
    this target in user code can safely be removed.
  * New: The cleanup library has been released. This library contains
    the control-flow-construct-like type absl::Cleanup which is used
    for executing a callback on scope exit.
  * New: The numeric library now includes bits.h, a polyfill header
    containing implementations of C++20's bitwise math functions.
  * New: Abseil now installs pkg-config files to make it easier to
    use Abseil with some other build systems.
  * New: Abseil now respects the default CMake installation paths.
    Standard CMake variables like CMAKE_INSTALL_PREFIX can be used
    to change the installation path.
- Added Correctly-install-pkgconfig.patch from upstream to fix
  installation of pkgconfig files
- Call ldconfig on post and postun</changelog>
  <changelog author="rpm@fthiessen.de" date="1619352000">- Update to LTS version 20210324.1
  * Fixed missing absl::Cleanup
  * Fixed pkgconfig install path
- Dropped upstream merged Correctly-install-pkgconfig.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1625054400">- Update to version 20210324.2 (LTS):
  * No user visible changes, only build system related</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 20211102.0:
  * absl::Cord is now implemented as a b-tree. The new implementation offers
    improved performance in most workloads.
  * absl::SimpleHexAtoi() has been added to strings library for parsing
    hexadecimal strings</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646395200">- Fix build on SLE-12-SP5</changelog>
  <changelog author="jengelh@inai.de" date="1649073600">- Implement shlib packaging policy</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1656504000">- Add options-old.patch, options-cxx17.patch (boo#1203378)
  * Ensure ABI stability regardless of compiler settings per instruction in the header.</changelog>
  <changelog author="fvogt@suse.com" date="1656504001">- Remove obsolete 0%{suse_version} &lt; 1500 conditions</changelog>
  <changelog author="elimat@opensuse.org" date="1656849600">- Update to version 20220623.0
  What's New:
  * Added absl::AnyInvocable, a move-only function type.
  * Added absl::CordBuffer, a type for buffering data for eventual inclusion an
    absl::Cord, which is useful for writing zero-copy code.
  * Added support for command-line flags of type absl::optional&lt;T&gt;.
  Breaking Changes:
  * CMake builds now use the flag ABSL_BUILD_TESTING (default: OFF) to control
    whether or not unit tests are built.
  * The ABSL_DEPRECATED macro now works with the GCC compiler. GCC users that
    are experiencing new warnings can use -Wno-deprecated-declatations silence
  the warnings or use -Wno-error=deprecated-declarations to see warnings but
  not fail the build.
  * ABSL_CONST_INIT uses the C++20 keyword constinit when available. Some
    compilers are more strict about where this keyword must appear compared to
  the pre-C++20 implementation.
  * Bazel builds now depend on the bazelbuild/bazel-skylib repository.
    See Abseil's WORKSPACE file for an example of how to add this dependency.
  Other:
  * This will be the last release to support C++11. Future releases will require at least C++14.
- run spec-cleaner</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1657540800">- Add Fix-maes-msse41-leaking-into-pkgconfig.patch
  * Do not make programs compiled with abseil require new-ish CPUs (boo#1203379)</changelog>
  <changelog author="dmueller@suse.com" date="1664020800">- update to 20220623.1:
  * minor warning fix</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to 20230125.2
  What's New:
    The Abseil logging library has been released. This library
    provides facilities for writing short text messages about the
    status of a program to stderr, disk files, or other sinks
    (via an extension API). See the logging library documentation
    for more information.
    An extension point, AbslStringify(), allows user-defined types
    to seamlessly work with Abseil's string formatting functions
    like absl::StrCat() and absl::StrFormat().
    A library for computing CRC32C checksums has been added.
    Floating-point parsing now uses the Eisel-Lemire algorithm,
    which provides a significant speed improvement.
    The flags library now provides suggestions for the closest
    flag(s) in the case of misspelled flags.
    Using CMake to install Abseil now makes the installed artifacts
    (in particular absl/base/options.h) reflect the compiled ABI.
  Breaking Changes:
    Abseil now requires at least C++14 and follows Google's Foundational
    C++ Support Policy. See this table for a list of currently supported
    versions compilers, platforms, and build tools.
    The legacy spellings of the thread annotation macros/functions
    (e.g. GUARDED_BY()) have been removed by default in favor of the
    ABSL_ prefixed versions (e.g. ABSL_GUARDED_BY()) due to clashes with
    other libraries. The compatibility macro ABSL_LEGACY_THREAD_ANNOTATIONS
    can be defined on the compile command-line to temporarily restore these
    spellings, but this compatibility macro will be removed in the future.
  Known Issues
    The Abseil logging library in this release is not a feature-complete
    replacement for glog yet. VLOG and DFATAL are examples of features
    that have not yet been released.
- obsolete Fix-maes-msse41-leaking-into-pkgconfig.patch</changelog>
  <changelog author="adrian@suse.de" date="1685016000">- update to 20230125.3
  Details can be found on:
    https://github.com/abseil/abseil-cpp/releases/tag/20230125.3</changelog>
  <changelog author="fvogt@suse.com" date="1688040000">- Add baselibs.conf to make protobuf happy. Hopefully temporary.</changelog>
  <changelog author="fstrba@suse.com" date="1691582400">- Fix build on older systems by requiring C++17 compliant compiler
- Added patch:
  * cmake.patch
    + lower the cmake requirement to 3.5 in order to be able to
    build on SLE12SP5</changelog>
  <changelog author="adrian@suse.de" date="1694088000">- update to 20230802.0
  What's New:
  * Added the nullability library for designating the expected
    nullability of pointers. Currently these serve as annotations
    only, but it is expected that compilers will one day be able
    to use these annotations for diagnostic purposes.
  * Added the prefetch library as a portable layer for moving data
    into caches before it is read.
  * Abseil's hash tables now detect many more programming errors
    in debug and sanitizer builds.
  * Abseil's synchronization objects now differentiate absolute
    waits (when passed an absl::Time) from relative waits (when
    passed an absl::Duration) when the underlying platform supports
    differentiating these cases. This only makes a difference when
    system clocks are adjusted.
  * Abseil's flag parsing library includes additional methods that
    make it easier to use when another library also expects to be
    able to parse flags.
  * absl::string_view is now available as a smaller target,
    @com_google_absl//absl/strings:string_view, so that users may
    use this library without depending on the much larger
    @com_google_absl//absl/strings target.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1696593600">- update to 20230802.1:
  * Add StdcppWaiter to the end of the list of waiter
    implementations</changelog>
  <changelog author="dmueller@suse.com" date="1705665600">- fix build for non-SUSE distributions</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1709467200">- update to 20240116.1:
  * Add absl::NoDestructor&lt;T&gt; to simplify defining static types
    that do not need to be destructed upon program exit.
  * Add configurable verbose logging (also known as VLOG).
  * Added absl::Overload(), which returns a functor that provides
    overloads based on the functors passed to it. Note that this
    functionality requires C++17 or newer.
  * Breaking Change: AbslHashValue() no longer accepts C-style
    arrays as a parameter, caller need to wrap C-string literals in
    absl::string_view.
  * Breaking Change: absl::weak_equality and absl::strong_equality
    have been removed. The corresponding std types were removed
    before C++20 was finalized</changelog>
</package>
<package pkgid="901b3184ba591c49a99203b67ce11dda5cbceca8a8804bb5d7072572cdb6bf76" name="abseil-cpp" arch="src">
  <version epoch="0" ver="20240116.1" rel="150500.13.7.8"/>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to LTS version 20210324.0
  * Breaking: The empty absl::container target has been removed from
    the CMake build. This target had no effect and references to
    this target in user code can safely be removed.
  * New: The cleanup library has been released. This library contains
    the control-flow-construct-like type absl::Cleanup which is used
    for executing a callback on scope exit.
  * New: The numeric library now includes bits.h, a polyfill header
    containing implementations of C++20's bitwise math functions.
  * New: Abseil now installs pkg-config files to make it easier to
    use Abseil with some other build systems.
  * New: Abseil now respects the default CMake installation paths.
    Standard CMake variables like CMAKE_INSTALL_PREFIX can be used
    to change the installation path.
- Added Correctly-install-pkgconfig.patch from upstream to fix
  installation of pkgconfig files
- Call ldconfig on post and postun</changelog>
  <changelog author="rpm@fthiessen.de" date="1619352000">- Update to LTS version 20210324.1
  * Fixed missing absl::Cleanup
  * Fixed pkgconfig install path
- Dropped upstream merged Correctly-install-pkgconfig.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1625054400">- Update to version 20210324.2 (LTS):
  * No user visible changes, only build system related</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 20211102.0:
  * absl::Cord is now implemented as a b-tree. The new implementation offers
    improved performance in most workloads.
  * absl::SimpleHexAtoi() has been added to strings library for parsing
    hexadecimal strings</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646395200">- Fix build on SLE-12-SP5</changelog>
  <changelog author="jengelh@inai.de" date="1649073600">- Implement shlib packaging policy</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1656504000">- Add options-old.patch, options-cxx17.patch (boo#1203378)
  * Ensure ABI stability regardless of compiler settings per instruction in the header.</changelog>
  <changelog author="fvogt@suse.com" date="1656504001">- Remove obsolete 0%{suse_version} &lt; 1500 conditions</changelog>
  <changelog author="elimat@opensuse.org" date="1656849600">- Update to version 20220623.0
  What's New:
  * Added absl::AnyInvocable, a move-only function type.
  * Added absl::CordBuffer, a type for buffering data for eventual inclusion an
    absl::Cord, which is useful for writing zero-copy code.
  * Added support for command-line flags of type absl::optional&lt;T&gt;.
  Breaking Changes:
  * CMake builds now use the flag ABSL_BUILD_TESTING (default: OFF) to control
    whether or not unit tests are built.
  * The ABSL_DEPRECATED macro now works with the GCC compiler. GCC users that
    are experiencing new warnings can use -Wno-deprecated-declatations silence
  the warnings or use -Wno-error=deprecated-declarations to see warnings but
  not fail the build.
  * ABSL_CONST_INIT uses the C++20 keyword constinit when available. Some
    compilers are more strict about where this keyword must appear compared to
  the pre-C++20 implementation.
  * Bazel builds now depend on the bazelbuild/bazel-skylib repository.
    See Abseil's WORKSPACE file for an example of how to add this dependency.
  Other:
  * This will be the last release to support C++11. Future releases will require at least C++14.
- run spec-cleaner</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1657540800">- Add Fix-maes-msse41-leaking-into-pkgconfig.patch
  * Do not make programs compiled with abseil require new-ish CPUs (boo#1203379)</changelog>
  <changelog author="dmueller@suse.com" date="1664020800">- update to 20220623.1:
  * minor warning fix</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to 20230125.2
  What's New:
    The Abseil logging library has been released. This library
    provides facilities for writing short text messages about the
    status of a program to stderr, disk files, or other sinks
    (via an extension API). See the logging library documentation
    for more information.
    An extension point, AbslStringify(), allows user-defined types
    to seamlessly work with Abseil's string formatting functions
    like absl::StrCat() and absl::StrFormat().
    A library for computing CRC32C checksums has been added.
    Floating-point parsing now uses the Eisel-Lemire algorithm,
    which provides a significant speed improvement.
    The flags library now provides suggestions for the closest
    flag(s) in the case of misspelled flags.
    Using CMake to install Abseil now makes the installed artifacts
    (in particular absl/base/options.h) reflect the compiled ABI.
  Breaking Changes:
    Abseil now requires at least C++14 and follows Google's Foundational
    C++ Support Policy. See this table for a list of currently supported
    versions compilers, platforms, and build tools.
    The legacy spellings of the thread annotation macros/functions
    (e.g. GUARDED_BY()) have been removed by default in favor of the
    ABSL_ prefixed versions (e.g. ABSL_GUARDED_BY()) due to clashes with
    other libraries. The compatibility macro ABSL_LEGACY_THREAD_ANNOTATIONS
    can be defined on the compile command-line to temporarily restore these
    spellings, but this compatibility macro will be removed in the future.
  Known Issues
    The Abseil logging library in this release is not a feature-complete
    replacement for glog yet. VLOG and DFATAL are examples of features
    that have not yet been released.
- obsolete Fix-maes-msse41-leaking-into-pkgconfig.patch</changelog>
  <changelog author="adrian@suse.de" date="1685016000">- update to 20230125.3
  Details can be found on:
    https://github.com/abseil/abseil-cpp/releases/tag/20230125.3</changelog>
  <changelog author="fvogt@suse.com" date="1688040000">- Add baselibs.conf to make protobuf happy. Hopefully temporary.</changelog>
  <changelog author="fstrba@suse.com" date="1691582400">- Fix build on older systems by requiring C++17 compliant compiler
- Added patch:
  * cmake.patch
    + lower the cmake requirement to 3.5 in order to be able to
    build on SLE12SP5</changelog>
  <changelog author="adrian@suse.de" date="1694088000">- update to 20230802.0
  What's New:
  * Added the nullability library for designating the expected
    nullability of pointers. Currently these serve as annotations
    only, but it is expected that compilers will one day be able
    to use these annotations for diagnostic purposes.
  * Added the prefetch library as a portable layer for moving data
    into caches before it is read.
  * Abseil's hash tables now detect many more programming errors
    in debug and sanitizer builds.
  * Abseil's synchronization objects now differentiate absolute
    waits (when passed an absl::Time) from relative waits (when
    passed an absl::Duration) when the underlying platform supports
    differentiating these cases. This only makes a difference when
    system clocks are adjusted.
  * Abseil's flag parsing library includes additional methods that
    make it easier to use when another library also expects to be
    able to parse flags.
  * absl::string_view is now available as a smaller target,
    @com_google_absl//absl/strings:string_view, so that users may
    use this library without depending on the much larger
    @com_google_absl//absl/strings target.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1696593600">- update to 20230802.1:
  * Add StdcppWaiter to the end of the list of waiter
    implementations</changelog>
  <changelog author="dmueller@suse.com" date="1705665600">- fix build for non-SUSE distributions</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1709467200">- update to 20240116.1:
  * Add absl::NoDestructor&lt;T&gt; to simplify defining static types
    that do not need to be destructed upon program exit.
  * Add configurable verbose logging (also known as VLOG).
  * Added absl::Overload(), which returns a functor that provides
    overloads based on the functors passed to it. Note that this
    functionality requires C++17 or newer.
  * Breaking Change: AbslHashValue() no longer accepts C-style
    arrays as a parameter, caller need to wrap C-string literals in
    absl::string_view.
  * Breaking Change: absl::weak_equality and absl::strong_equality
    have been removed. The corresponding std types were removed
    before C++20 was finalized</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1712836800">- SLE-only: import upstream patch to fix build with gcc7 in C++17
  mode: hash-fix-gcc7-cpp17-build.patch (bsc#1222261)
  + Upstream commit bb83aceacb554e79e7cd2404856f0be30bd00303</changelog>
</package>
<package pkgid="2234c693e832e19a5c4b7ea4965e3f0c9639a36b507badfa96505dadad60cc06" name="apparmor" arch="src">
  <version epoch="0" ver="3.0.4" rel="150500.11.9.1"/>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
  <changelog author="scabrero@suse.de" date="1671796800">- Add samba-4-17.patch to update the samba profiles for samba
  version 4.17 (bsc#1206626);</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1693915200">- update zgrep profile to allow egrep helper use (bsc#1214458)
  - zgrep-profile-sync-with-master.diff</changelog>
  <changelog author="ddiss@suse.com" date="1695643200">- Fix pam_apparmor %post and %postun scripts to handle pam-config errors
  (bsc#1215596)</changelog>
</package>
<package pkgid="470552e86847a963ea85115ac919f61e89abd2d551a13b9f858aa220998f15a1" name="apparmor-parser" arch="aarch64">
  <version epoch="0" ver="3.0.4" rel="150500.11.9.1"/>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
  <changelog author="scabrero@suse.de" date="1671796800">- Add samba-4-17.patch to update the samba profiles for samba
  version 4.17 (bsc#1206626);</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1693915200">- update zgrep profile to allow egrep helper use (bsc#1214458)
  - zgrep-profile-sync-with-master.diff</changelog>
  <changelog author="ddiss@suse.com" date="1695643200">- Fix pam_apparmor %post and %postun scripts to handle pam-config errors
  (bsc#1215596)</changelog>
</package>
<package pkgid="d58485cab64f93e2f28042260e6de1ecd0f011e132b66e4984de5025d630f534" name="apparmor-parser" arch="s390x">
  <version epoch="0" ver="3.0.4" rel="150500.11.9.1"/>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
  <changelog author="scabrero@suse.de" date="1671796800">- Add samba-4-17.patch to update the samba profiles for samba
  version 4.17 (bsc#1206626);</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1693915200">- update zgrep profile to allow egrep helper use (bsc#1214458)
  - zgrep-profile-sync-with-master.diff</changelog>
  <changelog author="ddiss@suse.com" date="1695643200">- Fix pam_apparmor %post and %postun scripts to handle pam-config errors
  (bsc#1215596)</changelog>
</package>
<package pkgid="cb6e1e489e875e8f2c87c24cfd9928c5f53931325c8eff88a7bc8d8c2a0c8207" name="apparmor-parser" arch="x86_64">
  <version epoch="0" ver="3.0.4" rel="150500.11.9.1"/>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
  <changelog author="scabrero@suse.de" date="1671796800">- Add samba-4-17.patch to update the samba profiles for samba
  version 4.17 (bsc#1206626);</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1693915200">- update zgrep profile to allow egrep helper use (bsc#1214458)
  - zgrep-profile-sync-with-master.diff</changelog>
  <changelog author="ddiss@suse.com" date="1695643200">- Fix pam_apparmor %post and %postun scripts to handle pam-config errors
  (bsc#1215596)</changelog>
</package>
<package pkgid="727e9ca56a779705f1da30ad8fa5fb0bf94915e5ab61ec335ad4e8aeff25593b" name="audit" arch="aarch64">
  <version epoch="0" ver="3.0.6" rel="150400.4.16.1"/>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100800">- Fix rules not loaded when restarting auditd.service(bsc#1204844)</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100801">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
  <changelog author="ematsumiya@suse.de" date="1706788800">- Fix plugin termination when using systemd service units (bsc#1215377)
  * add auditd.service-fix-plugin-termination.patch</changelog>
</package>
<package pkgid="241cd243c521f05ea586d9d51d57ce7a049dc8f724c037e782826d67d524752a" name="audit" arch="s390x">
  <version epoch="0" ver="3.0.6" rel="150400.4.16.1"/>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100800">- Fix rules not loaded when restarting auditd.service(bsc#1204844)</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100801">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
  <changelog author="ematsumiya@suse.de" date="1706788800">- Fix plugin termination when using systemd service units (bsc#1215377)
  * add auditd.service-fix-plugin-termination.patch</changelog>
</package>
<package pkgid="facf3c733a1f8b7a8d6b550b9f29ebb53ee2a12df1194ffae7da7cc1b9ab7769" name="audit" arch="src">
  <version epoch="0" ver="3.0.6" rel="150400.4.16.1"/>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Add patch to fix test run without python2 interpreter:
  * audit-python3.patch
- Update to 2.8.2 release:
  * Update tables for 4.14 kernel
  * Fixup ipv6 server side binding
  * AVC report from aureport was missing result column header (#1511606)
  * Add SOFTWARE_UPDATE event
  * In ausearch/report pickup any path and new-disk fields as a file
  * Fix value returned by auditctl --reset-lost (Richard Guy Briggs)
  * In auparse, fix expr_create_timestamp_comparison_ex to be numeric field
  * Fix building on old systems without linux/fanotify.h
  * Fix shell portability issues reported by shellcheck
  * Auditd validate_email should not use gethostbyname</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Update header in audit-python3.patch
- Update patch guidelines in README-BEFORE-ADDING-PATCHES</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529236800">- Update to version 2.8.3:
  * Correct msg function name in lru debug code.
  * Fix a segfault in auditd when dns resolution isn't available.
  * Make a reload legacy service for auditd.
  * In auparse python bindings, expose some new types that were
    missing.
  * In normalizer, pickup subject kind for user_login events.
  * Fix interpretation of unknown ioctcmds (rh#1540507).
  * Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, &amp;
    RESP_ORIGIN_BLOCK_TIMED events.
  * In auparse_normalize for USER_LOGIN events, map acct for
    subj_kind.
  * Fix logging of IPv6 addresses in DAEMON_ACCEPT events
    (rh#1534748).
  * Do not rotate auditd logs when num_logs &lt; 2 (brozs).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529755200">- Update to version 2.8.4:
  * Generate checkpoint file even when not results are returned
    (Burn Alting).
  * Fix log file creation when file logging is disabled entirely
    (Vlad Glagolev).
  * Use SIGCONT to dump auditd internal state (rh#1504251).
  * Fix parsing of virtual timestamp fields in ausearch_expression
    (rh#1515903).
  * Fix parsing of uid &amp; success for ausearch.
  * Hide lru symbols in auparse.
  * Fix aureport summary time range reporting.
  * Allow unlimited retries on startup for remote logging.
  * Add queue_depth to remote logging stats and increase default
    queue_depth size.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Make use of some %make_install.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Remote zos building is now a configurable option.
  It should be disabled in audit (and left enabled in audit-secondary).</changelog>
  <changelog author="ematsumiya@suse.com" date="1591012800">- Fix specfile to require libauparse0 and libaudit1 after splitting
  audit-libs (bsc#1172295)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Remove audit-fno-common.patch: fixed in upstream
- Remove audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1679313600">- Enable livepatching on main library on x86_64.</changelog>
</package>
<package pkgid="a1d93b3e0b9bce7192869a13fe165f17b34e7dec4a4d020ec17da45405088bec" name="audit" arch="x86_64">
  <version epoch="0" ver="3.0.6" rel="150400.4.16.1"/>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100800">- Fix rules not loaded when restarting auditd.service(bsc#1204844)</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100801">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
  <changelog author="ematsumiya@suse.de" date="1706788800">- Fix plugin termination when using systemd service units (bsc#1215377)
  * add auditd.service-fix-plugin-termination.patch</changelog>
</package>
<package pkgid="79c2ad821203c04419dba67d7991afffd76e5c84e753bca137ff91150fe4b412" name="audit-audispd-plugins" arch="aarch64">
  <version epoch="0" ver="3.0.6" rel="150400.4.16.1"/>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100800">- Fix rules not loaded when restarting auditd.service(bsc#1204844)</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100801">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
  <changelog author="ematsumiya@suse.de" date="1706788800">- Fix plugin termination when using systemd service units (bsc#1215377)
  * add auditd.service-fix-plugin-termination.patch</changelog>
</package>
<package pkgid="3375b8eb9e1299a06265795845ff4b387bd953a258fefdce5da47a84e10e349d" name="audit-audispd-plugins" arch="s390x">
  <version epoch="0" ver="3.0.6" rel="150400.4.16.1"/>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100800">- Fix rules not loaded when restarting auditd.service(bsc#1204844)</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100801">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
  <changelog author="ematsumiya@suse.de" date="1706788800">- Fix plugin termination when using systemd service units (bsc#1215377)
  * add auditd.service-fix-plugin-termination.patch</changelog>
</package>
<package pkgid="b50c4195249ee0fc865a145b9bd9da73737e511f95b4e0f1be02efe65e39bc46" name="audit-audispd-plugins" arch="x86_64">
  <version epoch="0" ver="3.0.6" rel="150400.4.16.1"/>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100800">- Fix rules not loaded when restarting auditd.service(bsc#1204844)</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100801">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
  <changelog author="ematsumiya@suse.de" date="1706788800">- Fix plugin termination when using systemd service units (bsc#1215377)
  * add auditd.service-fix-plugin-termination.patch</changelog>
</package>
<package pkgid="303b0228ccf7e5e6e2fe73eb4c8c870b096899ac4545ef0d993bc29ff1019977" name="audit-secondary" arch="src">
  <version epoch="0" ver="3.0.6" rel="150400.4.16.1"/>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100800">- Fix rules not loaded when restarting auditd.service(bsc#1204844)</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100801">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
  <changelog author="ematsumiya@suse.de" date="1706788800">- Fix plugin termination when using systemd service units (bsc#1215377)
  * add auditd.service-fix-plugin-termination.patch</changelog>
</package>
<package pkgid="818ec10f98c55323c8ab573fcffcc9a7d1024b09aa7405994a68774ea26ea1f2" name="avahi" arch="aarch64">
  <version epoch="0" ver="0.8" rel="150400.7.10.1"/>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
</package>
<package pkgid="b4d71589e2f252d6c6c38a95433a5c16e1f0a030045f82e6d5a6dd1a35078425" name="avahi" arch="s390x">
  <version epoch="0" ver="0.8" rel="150400.7.10.1"/>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
</package>
<package pkgid="8cb5ddf996f9eed46907027623ad1dc3f603692f2e6df2c587f6c479e1c2cf99" name="avahi" arch="src">
  <version epoch="0" ver="0.8" rel="150400.7.10.1"/>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
</package>
<package pkgid="f9976b2883d4a306242c0b4427000fbbd3ccf693524dc9d0f51402835a94bef0" name="avahi" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150400.7.10.1"/>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
</package>
<package pkgid="4f4f87b746290f4d28ceb28de8eaa23e80cad51995cba3a664f99da40e993c63" name="avahi" arch="aarch64">
  <version epoch="0" ver="0.8" rel="150400.7.13.1"/>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
</package>
<package pkgid="382dcd04740c7b908fe4edea02253d95416a2f2648403f10ed421ed3550af6f9" name="avahi" arch="s390x">
  <version epoch="0" ver="0.8" rel="150400.7.13.1"/>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
</package>
<package pkgid="5862c30e26cee3fe88657172b64ddf58dca385950f64de5575f9fd219ef8e4a8" name="avahi" arch="src">
  <version epoch="0" ver="0.8" rel="150400.7.13.1"/>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
</package>
<package pkgid="dc1eed122296dbefbbc16a2ece60e99b90455c547c13ff52026503914344d8bf" name="avahi" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150400.7.13.1"/>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
</package>
<package pkgid="b229bb45ced680f3a352a065021a83bd0d0b6ed75d4402d307fd444c372c00c0" name="avahi" arch="aarch64">
  <version epoch="0" ver="0.8" rel="150400.7.16.1"/>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1711454400">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).</changelog>
</package>
<package pkgid="caaaa07b92de93ffbc7ceeef9c7d29fdaff1de7f565db434071285faf2a7e24d" name="avahi" arch="s390x">
  <version epoch="0" ver="0.8" rel="150400.7.16.1"/>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1711454400">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).</changelog>
</package>
<package pkgid="624a3bf589171805d8cfaca4e0dafed32ecf8655a2ff67abc9460a29a4897af5" name="avahi" arch="src">
  <version epoch="0" ver="0.8" rel="150400.7.16.1"/>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1711454400">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).</changelog>
</package>
<package pkgid="5bd583f8a6a52701f0c76b519953e923a06acde7d2a7a58b170f1e85ff391e71" name="avahi" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150400.7.16.1"/>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1711454400">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).</changelog>
</package>
<package pkgid="22554ae134eef62c1cc22c7e73ec058c96f22d882f9443fb0f451c40964430da" name="babeltrace" arch="aarch64">
  <version epoch="0" ver="1.5.8" rel="150300.3.2.1"/>
  <changelog author="tonyj@suse.com" date="1438084800">- Update to version 1.2.4 (FATE#319273)
  Changelog 1.2.4:
  * Fix: make sure we can exit the get_new_metadata loop
  * Docs fix: Change bt_ctf_writer_create_stream return description
  * Fix: offset_s and CTF clocks with frequency != 1GHz
  Changelog 1.2.3:
  * Fix: incorrect compiler warning
  * Fix: Don't assume that PROT_WRITE grants read permissions
  * Fix: align objstack on 8 bytes
  * Fix Python: Add a comment warning about an API limitation
  * Use BABELTRACE_HOST_NAME_MAX in test_ctf_writer.c
  * Add limits compatibility header
  * Fix: don't perform unaligned integer read/writes
  * Fix: Align buffers from objstack_alloc on sizeof(void *)
  * Fix: bt_ctf_field_type_structure_add_field argument validation
  Changelog 1.2.2:
  * Fix: Support out of tree builds in babeltrace
  * Fix: mmap trace read the stream_id from the first packet
  * Fix: check the lttng-relayd protocol version
  * Fix: don't update the trace collection if no new streams were received
  * Fix (Python bindings): Return a string if a sequence's element are chars
  * Fix: don't use a return code in _bt_ctf_stream_append_discarded_events
  * Fix: Report the sequence's length field's value as length
  * Fix: Variable name typo in SequenceField and Event classes
  * Fix python: remove weird char at the end of line
  * Fix: add missing files to gitignore
  * Fix: ctf-text: add missing double-quotes around enum tag
  * Fix: Add missing lttng_live_should_quit checks
  * Fix: Report errors occuring in lttng_live_read</changelog>
  <changelog author="dmueller@suse.com" date="1441022400">- enable build for aarch64 (fate#318370)</changelog>
  <changelog author="tonyj@suse.com" date="1444046400">- Cleanup urls in spec file (FATE#319273)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1470139200">- add ppc64/ppc64le in ExclusiveArch</changelog>
  <changelog author="tonyj@suse.com" date="1504267200">- Update to version 1.5.3 for SLE15 (bsc#1055683)</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1509710400">- Disable static library build.
- Enable Python 3 bindings build.
- Remove explicit glib2-devel requirement for the devel package: is
  autodetected already.
- Spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521115200">- Update to version 1.5.4:
  * Use signed accessors for clock offsets.
  * Fix a signedness error in python complements.
  * Handle packet_seek errors.
  * Prevent calling adding the same trace recursively.
  * Make sure we have all the metadata streams before adding new
    traces.
  * Add missing debugging information in the live plugin.
  * Set stream id in HUP case.
  * Use list rather than ptr array for trace streams.
  * Fix a leak of streams.
  * Handle 0 session case in ask new streams.
  * Break loop on getting metadata error.
  * Return error on ask_new_stream when should quit.
  * Don't access missing ctf trace when getting metadata.
  * Fix lttng-live discarded event count after inactivity.
  * Fix timegm compat on Solaris.
  * Fix Python bindings when building with PIE hardening.
  * lttng-live: Print discarded event and packet lost warnings on
    stderr.</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1529236800">- Update to version 1.5.5:
  * Propagate error from packet_seek in case of truncated packet.
  * Fix: report truncated files while reading.
- Use tarball signing.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1542196800">- Update to version 1.5.6:
  * Fix: remove left-over debug logging statement.
  * Use trace-&gt;trace_id in check to remove trace from bt_ctx.
  * Fix: missing initializer braces warning.
  * Fix: zero out URL parsing array before use and ensure proper
    error reporting.</changelog>
  <changelog author="azouhr@opensuse.org" date="1563192000">- add s390x in ExclusiveArch</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1582718400">- Update to version 1.5.8 (changes since 1.5.6):
  * Cleanup: bitfields: streamline use of underscores.
  * Fix: bitfield: shift undefined/implementation defined
    behaviours.
  * Fix: array and sequence field's 'elems' members can be left NULL.
  * Fix: invalid alignment of enumeration fields.
  * Fix: lttng-live format: do not error out on empty streams
    hang up.
  * Fix: lttng-live: ctf_live_packet_seek stream hang up handling.
  * Fix: lib/iterator.c: unbalanced ctx put (leak).
  * Fix: lttng-live: lttng_live_open_trace_read memory leak.
  * Fix: trace-collection: trace clock use after free.
  * Fix: lttng-live: use-after-free in get_next_index().
  * Do not use diagnostic pragma when GCC version is lower than
    4.6.0.
  * Missing define when not building with gcc.
- Drop support for old openSUSE versions.</changelog>
  <changelog author="schwab@suse.de" date="1598875200">- Add riscv64 to ExclusiveArch</changelog>
</package>
<package pkgid="c76007e1a3b1cda3a4ca502a18383bccf4a769c8a9905c6e19681fc0e695096d" name="babeltrace" arch="src">
  <version epoch="0" ver="1.5.8" rel="150300.3.2.1"/>
  <changelog author="tonyj@suse.com" date="1335873600">- Update to version 1.0.0-rc2</changelog>
  <changelog author="tonyj@suse.com" date="1338811200">- Update to version 1.0.0-rc4</changelog>
  <changelog author="tonyj@suse.com" date="1363003200">- Upgrade to version 1.0.3 (FATE#314846)
  Changelog 1.0.3:
  * Fix: Double free when calling bt_context_remove_trace()
  * Add missing runall.sh to dist packaging
  * Fix: alignment of compound types containing array field
  Changelog 1.0.2:
  * Fix: add tests/lib missing files to Makefile.am
  Changelog 1.0.1:
  * Provides a basic pkg-config file for libbabeltrace
  * Fix erroneous warning/error messages
  * Fix comment in context.h
  * Cleanup: Remove whitespace at EOL from mit-license.txt
  * Add missing permission notice in each source file
  * Adding a test which do a sequence of seek BEGIN, LAST, BEGIN, LAST
  * Run seek tests on a second trace file
  * Add #define _GNU_SOURCE to remove warning about asprintf
  * Include a test for SEEK_BEGIN and SEEK_LAST
  * Fix: Report success even if we find at least one valid stream in find_max_timestamp_ctf_stream_class
  * Fix SEEK_BEGIN for streams that do not contain any event
  Changelog 1.0.0:
  * tests: add test traces to distribution tarball
  * Document bash requirement for make check in README
  * Add tests to make check
  * Fix: add missing header size validation
  * callbacks.c: handle extract_ctf_stream_event return value
  * Cleanup: fix cppcheck warning
  * Cleanup: fix cppcheck warnings
  * fix double-free on error path
  Changelog 1.0.0-rc6:
  * Add valgrind suppression file for libpopt
  * Fix: unplug memory leak that causes popt-0.13 to segfault
  * Fix: test all close/fclose ret val, fix double close
  * Cleanup: add missing newline
  * Fix: fd leak on trace close
  * Fix memory leaks induced by lack of libpopt documentation
  * babeltrace: fix poptGetOptArg memleak
  * plugins: implement plugin unregister
  * Doc: valgrind with babeltrace (glib workaround)
  * callsites: fix memory leak
  * Fix: free all the metadata-related memory
  * Fix : Free the iterator callback arrays
  * Fix : cleanup teardown of context
  * Fix : protect static float and double declarations
  * callsite: support instruction pointer field
  * Document that list.h is LGPLv2.1, but entirely trivial
  * Fix: callsite support: list multiple callsites
  * Add callsite support
  * Fix: Allow 64-bit packet offset
  * Fix: emf uri: surround by " "
  * Handle model.emf.uri event info
  * Fix: Documentation cleanup
  * Fix: misplaced C++ ifdef
  * Fix babeltrace-log get big line when the input file last line don't have enter
  * API Fix: bt_ctf_iter_read_event_flags
  * Fix: get encoding for char arrays and sequences
  * Fix: access to declaration from declaration_field
  * Fix: get_declaration_* should not cast to field
  * Fix babeltrace-log uninitialized memory (v2)
  * Revert "Fix babeltrace-log uninitialized memory"
  * Fix babeltrace-log uninitialized memory
  * Fix: access field properties by declaration
  * Fix: check return value of get_char_array
  * Fix: C++ support to API header files
  Changelog 1.0.0-rc5:
  * Change default printout to add host, process names and vpid
  * Add support for trace:hostname field
  * Fix: allow specifying more than one input trace path
  * Fix: make warnings (partial errors) visible
  * Fix: --clock-force-correlate to handle trace collections gathered from v
  * Documentation: update API doc with enum functions
  * Fix: API: remove unsupported BT_SEEK_END from API
  * API documentation
  * Cleanup: shut up gcc uninitialized var warning
  * Fix: support large files on 32-bit systems
  * Fix: remove unused fts.h include
  * Fix: add missing enum support to API
  * Fix: handle clock offset with frequency different from 1GHz
  * Cleanup: update ifdef wrapper name
  * Fix: clarify bt_ctf_get_field_list
  * Fix trace-collection.h: No such file or directory that build code with l
  * Fix: check return value of bt_context_create
  * Fix: ensure mmap_base_offset is zeroed on initialization
  * Fix: Reswitch to FTW for add_traces_recursive
  * Fix: don't free unallocated index
  * Fix: don't close the metadata FD if a FP is passed
  * Add BT_SEEK_LAST type to bt_iter_pos
  * Fix: iterator.c BT_SEEK_RESTORE: check return value
  * Fix: complete error handling of babeltrace API
  * cleanup: protected -&gt; hidden: cleanup symbol table
  * Fix: add mmap_base_offset to ctf_stream_pos
  * Fix: assign the current clock for mmap traces
  * Fix: libbabeltrace add missing static declaration
  * Fix: safety checks for opening mmap traces
  * Remove trace-collection.h from include_headers
  * Fix: protect visibility of ctf-parser functions
  * Fix: correct name of bt_ctf_field_get_error in comments and typo in man
  * Fix: wrong type in bt_ctf_get_uint64/int64
  * API cleanup name get_timestamp and get_cycles
  * fix comment struct bt_saved_pos
  * Fix: Add missing clock-types.h
  * Get rid of clock-raw and use real clock
  * Cleanup (messages): Make the wording of the signedness warning clearer
  * Fix: error path if heap_init fails
  * Fix: Remove obsolete bt_iter_seek function
  * Make the signedness warning useful with the field name
  * Fix: Restore heap for SEEK_BEGIN
  * Fix: check if handle is valid
  * Fix: iterator set_pos
  * Fix: get rid of consumed flag
  * Fix: add missing heap_copy
  * Fix: babeltrace assert() triggered by directories within trace
  * Several fixes for bt_iter_pos related functions
  * Fix iterator: various fixes
  * Fix: remove duplicate yydebug var
  * Fix babeltrace iterator lib: seek at time 0</changelog>
  <changelog author="cfarrell@suse.com" date="1363348800">- license update: MIT and GPL-2.0
  The correct operator is ^and^, not ^or^. Also, use SPDX format where
  possible</changelog>
  <changelog author="tonyj@suse.com" date="1392033600">- Update to version 1.1.1</changelog>
  <changelog author="tonyj@suse.com" date="1393588800">- Update to version 1.2</changelog>
  <changelog author="tonyj@suse.com" date="1397563200">- Update to version 1.2.1
  Changelog:
  * Fix: Accept an input port in the live URL when no session is provided</changelog>
  <changelog author="tonyj@suse.com" date="1438084800">- Update to version 1.2.4 (FATE#319273)
  Changelog 1.2.4:
  * Fix: make sure we can exit the get_new_metadata loop
  * Docs fix: Change bt_ctf_writer_create_stream return description
  * Fix: offset_s and CTF clocks with frequency != 1GHz
  Changelog 1.2.3:
  * Fix: incorrect compiler warning
  * Fix: Don't assume that PROT_WRITE grants read permissions
  * Fix: align objstack on 8 bytes
  * Fix Python: Add a comment warning about an API limitation
  * Use BABELTRACE_HOST_NAME_MAX in test_ctf_writer.c
  * Add limits compatibility header
  * Fix: don't perform unaligned integer read/writes
  * Fix: Align buffers from objstack_alloc on sizeof(void *)
  * Fix: bt_ctf_field_type_structure_add_field argument validation
  Changelog 1.2.2:
  * Fix: Support out of tree builds in babeltrace
  * Fix: mmap trace read the stream_id from the first packet
  * Fix: check the lttng-relayd protocol version
  * Fix: don't update the trace collection if no new streams were received
  * Fix (Python bindings): Return a string if a sequence's element are chars
  * Fix: don't use a return code in _bt_ctf_stream_append_discarded_events
  * Fix: Report the sequence's length field's value as length
  * Fix: Variable name typo in SequenceField and Event classes
  * Fix python: remove weird char at the end of line
  * Fix: add missing files to gitignore
  * Fix: ctf-text: add missing double-quotes around enum tag
  * Fix: Add missing lttng_live_should_quit checks
  * Fix: Report errors occuring in lttng_live_read</changelog>
  <changelog author="dmueller@suse.com" date="1441022400">- enable build for aarch64 (fate#318370)</changelog>
  <changelog author="tonyj@suse.com" date="1444046400">- Cleanup urls in spec file (FATE#319273)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1470139200">- add ppc64/ppc64le in ExclusiveArch</changelog>
  <changelog author="tonyj@suse.com" date="1504267200">- Update to version 1.5.3 for SLE15 (bsc#1055683)</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1509710400">- Disable static library build.
- Enable Python 3 bindings build.
- Remove explicit glib2-devel requirement for the devel package: is
  autodetected already.
- Spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521115200">- Update to version 1.5.4:
  * Use signed accessors for clock offsets.
  * Fix a signedness error in python complements.
  * Handle packet_seek errors.
  * Prevent calling adding the same trace recursively.
  * Make sure we have all the metadata streams before adding new
    traces.
  * Add missing debugging information in the live plugin.
  * Set stream id in HUP case.
  * Use list rather than ptr array for trace streams.
  * Fix a leak of streams.
  * Handle 0 session case in ask new streams.
  * Break loop on getting metadata error.
  * Return error on ask_new_stream when should quit.
  * Don't access missing ctf trace when getting metadata.
  * Fix lttng-live discarded event count after inactivity.
  * Fix timegm compat on Solaris.
  * Fix Python bindings when building with PIE hardening.
  * lttng-live: Print discarded event and packet lost warnings on
    stderr.</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1529236800">- Update to version 1.5.5:
  * Propagate error from packet_seek in case of truncated packet.
  * Fix: report truncated files while reading.
- Use tarball signing.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1542196800">- Update to version 1.5.6:
  * Fix: remove left-over debug logging statement.
  * Use trace-&gt;trace_id in check to remove trace from bt_ctx.
  * Fix: missing initializer braces warning.
  * Fix: zero out URL parsing array before use and ensure proper
    error reporting.</changelog>
  <changelog author="azouhr@opensuse.org" date="1563192000">- add s390x in ExclusiveArch</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1582718400">- Update to version 1.5.8 (changes since 1.5.6):
  * Cleanup: bitfields: streamline use of underscores.
  * Fix: bitfield: shift undefined/implementation defined
    behaviours.
  * Fix: array and sequence field's 'elems' members can be left NULL.
  * Fix: invalid alignment of enumeration fields.
  * Fix: lttng-live format: do not error out on empty streams
    hang up.
  * Fix: lttng-live: ctf_live_packet_seek stream hang up handling.
  * Fix: lib/iterator.c: unbalanced ctx put (leak).
  * Fix: lttng-live: lttng_live_open_trace_read memory leak.
  * Fix: trace-collection: trace clock use after free.
  * Fix: lttng-live: use-after-free in get_next_index().
  * Do not use diagnostic pragma when GCC version is lower than
    4.6.0.
  * Missing define when not building with gcc.
- Drop support for old openSUSE versions.</changelog>
  <changelog author="schwab@suse.de" date="1598875200">- Add riscv64 to ExclusiveArch</changelog>
</package>
<package pkgid="eab1117bf3acef697c4adbd2d22859cf4d2c52fb705bdd0ec0eaa6fbbc3cadda" name="babeltrace" arch="x86_64">
  <version epoch="0" ver="1.5.8" rel="150300.3.2.1"/>
  <changelog author="tonyj@suse.com" date="1438084800">- Update to version 1.2.4 (FATE#319273)
  Changelog 1.2.4:
  * Fix: make sure we can exit the get_new_metadata loop
  * Docs fix: Change bt_ctf_writer_create_stream return description
  * Fix: offset_s and CTF clocks with frequency != 1GHz
  Changelog 1.2.3:
  * Fix: incorrect compiler warning
  * Fix: Don't assume that PROT_WRITE grants read permissions
  * Fix: align objstack on 8 bytes
  * Fix Python: Add a comment warning about an API limitation
  * Use BABELTRACE_HOST_NAME_MAX in test_ctf_writer.c
  * Add limits compatibility header
  * Fix: don't perform unaligned integer read/writes
  * Fix: Align buffers from objstack_alloc on sizeof(void *)
  * Fix: bt_ctf_field_type_structure_add_field argument validation
  Changelog 1.2.2:
  * Fix: Support out of tree builds in babeltrace
  * Fix: mmap trace read the stream_id from the first packet
  * Fix: check the lttng-relayd protocol version
  * Fix: don't update the trace collection if no new streams were received
  * Fix (Python bindings): Return a string if a sequence's element are chars
  * Fix: don't use a return code in _bt_ctf_stream_append_discarded_events
  * Fix: Report the sequence's length field's value as length
  * Fix: Variable name typo in SequenceField and Event classes
  * Fix python: remove weird char at the end of line
  * Fix: add missing files to gitignore
  * Fix: ctf-text: add missing double-quotes around enum tag
  * Fix: Add missing lttng_live_should_quit checks
  * Fix: Report errors occuring in lttng_live_read</changelog>
  <changelog author="dmueller@suse.com" date="1441022400">- enable build for aarch64 (fate#318370)</changelog>
  <changelog author="tonyj@suse.com" date="1444046400">- Cleanup urls in spec file (FATE#319273)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1470139200">- add ppc64/ppc64le in ExclusiveArch</changelog>
  <changelog author="tonyj@suse.com" date="1504267200">- Update to version 1.5.3 for SLE15 (bsc#1055683)</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1509710400">- Disable static library build.
- Enable Python 3 bindings build.
- Remove explicit glib2-devel requirement for the devel package: is
  autodetected already.
- Spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521115200">- Update to version 1.5.4:
  * Use signed accessors for clock offsets.
  * Fix a signedness error in python complements.
  * Handle packet_seek errors.
  * Prevent calling adding the same trace recursively.
  * Make sure we have all the metadata streams before adding new
    traces.
  * Add missing debugging information in the live plugin.
  * Set stream id in HUP case.
  * Use list rather than ptr array for trace streams.
  * Fix a leak of streams.
  * Handle 0 session case in ask new streams.
  * Break loop on getting metadata error.
  * Return error on ask_new_stream when should quit.
  * Don't access missing ctf trace when getting metadata.
  * Fix lttng-live discarded event count after inactivity.
  * Fix timegm compat on Solaris.
  * Fix Python bindings when building with PIE hardening.
  * lttng-live: Print discarded event and packet lost warnings on
    stderr.</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1529236800">- Update to version 1.5.5:
  * Propagate error from packet_seek in case of truncated packet.
  * Fix: report truncated files while reading.
- Use tarball signing.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1542196800">- Update to version 1.5.6:
  * Fix: remove left-over debug logging statement.
  * Use trace-&gt;trace_id in check to remove trace from bt_ctx.
  * Fix: missing initializer braces warning.
  * Fix: zero out URL parsing array before use and ensure proper
    error reporting.</changelog>
  <changelog author="azouhr@opensuse.org" date="1563192000">- add s390x in ExclusiveArch</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1582718400">- Update to version 1.5.8 (changes since 1.5.6):
  * Cleanup: bitfields: streamline use of underscores.
  * Fix: bitfield: shift undefined/implementation defined
    behaviours.
  * Fix: array and sequence field's 'elems' members can be left NULL.
  * Fix: invalid alignment of enumeration fields.
  * Fix: lttng-live format: do not error out on empty streams
    hang up.
  * Fix: lttng-live: ctf_live_packet_seek stream hang up handling.
  * Fix: lib/iterator.c: unbalanced ctx put (leak).
  * Fix: lttng-live: lttng_live_open_trace_read memory leak.
  * Fix: trace-collection: trace clock use after free.
  * Fix: lttng-live: use-after-free in get_next_index().
  * Do not use diagnostic pragma when GCC version is lower than
    4.6.0.
  * Missing define when not building with gcc.
- Drop support for old openSUSE versions.</changelog>
  <changelog author="schwab@suse.de" date="1598875200">- Add riscv64 to ExclusiveArch</changelog>
</package>
<package pkgid="9d64b23713be0f9e0e29e7a31d5ed5294e1c9584b7247b36a49bec1f3dcec1a3" name="biosdevname" arch="src">
  <version epoch="0" ver="0.7.3.7.g495ab76" rel="150000.5.6.1"/>
  <changelog author="trenn@suse.de" date="1402660800">- Fix missing %posttrans section</changelog>
  <changelog author="trenn@suse.de" date="1407844800">- Add mainline commit: 51b8cdb0b60df3baa
  With this patch, the info can be showed correctly if there are two or more
  PCI root ports in the same Bus ID/Device ID (bnc#890562)
  Add: fix_several_PCI_root_ports_in_one_bus.patch</changelog>
  <changelog author="trenn@suse.de" date="1421928000">- Update to version 0.6.1
- Do not disable rule via perl script in .spec file, better use a patch
  (biosdevname_udevrule_rename_all_network_devices.patch)
- Modify configure.ac via sed to make use of %{_udevruledir} from .spec file
- Remove already integrated patches in latest source code:
  Delete biosdevname_v0.5.0_to_git_c140ce659a204d67e4cc.patch
  Delete biosdevname_udevrule_rename_all_network_devices.patch
  Delete fix_several_PCI_root_ports_in_one_bus.patch
  Modify udev-rule-path.patch
  Modify whitelist-dell</changelog>
  <changelog author="meissner@suse.com" date="1424520000">- biosdevname-pic.patch: make cpuid() not expose %ebx out of
  assembler, so we can build it with -fPIE.</changelog>
  <changelog author="mpluskal@suse.com" date="1428062400">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="zaitor@opensuse.org" date="1428667200">- Fix fault in ignore-broken-BIOSes patch (boo#920054).</changelog>
  <changelog author="mpluskal@suse.com" date="1433332800">- Update to 0.6.2
  * no upstream changelog provided</changelog>
  <changelog author="werner@suse.de" date="1436788800">- Add missed build require on pkgconfig udev</changelog>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix missing dependency on coreutils for initrd macros (boo#958562)
- Call missing initrd macro at postun (boo#958562)</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 0.7.1
  * no upstream changelog provided</changelog>
  <changelog author="trenn@suse.de" date="1457092800">- Update to latest 0.7.2 version (fate#319998)</changelog>
  <changelog author="olaf@aepfle.de" date="1471348800">- Detect dom0 via xenfs instead of cpuid to compensate for ABI
  change in xen-4.7 on AMD systems. (bnc#974257)
  biosdevname-dom0.patch</changelog>
  <changelog author="felix.gerling@suse.com" date="1484827200">-  Update to HEAD 66eab208d3c2abe947ba0a793094ee856e8fb3ee
  * Fix use-after-free of fd</changelog>
  <changelog author="fschnizlein@suse.com" date="1497009600">- Update to latest HEAD to 02811d5165c2eeecf8797fe9b5088d6e78bd25db
  * Changed source to github
  * Ignore naming of non-Ethernet network interfaces
  * Prevent reading of VPD-DCM strings for SRIOV-vfs
  - removed patch v0.7.2_to_HEAD_66eab208.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1506081600">- Update to version 0.7.3
  * Shipping and future Dell EMC systems support consistent network
    device naming feature.
  [fate#332490]</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="josef.moellers@suse.com" date="1527076800">- Prevent infinite recursion in dmidecode.c::smbios_setslot by
  checking that subordinate bus has a number greater than the
  current bus.
  [bsc#1093625, dmidecode-prevent-infinite-recursion.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1579694400">- BuildRequire pkgconfig(libudev) instead of libudev-devel: allow
  OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="msuchanek@suse.com" date="1597320000">- Read DMI info rom sysfs (bsc#1174491).
  * biosdevname-Add-buffer-read-helper-using-read-explicitly.patch
  * biosdevname-Read-DMI-entries-from-sys-firmware-dmi-tables-DMI.patch</changelog>
  <changelog author="aschnell@suse.com" date="1700827200">- Update to version 0.7.3.7.g495ab76 (bsc#1217455):
  * Add SMBIOS 3.x support
  * Read DMI entries from /sys/firmware/dmi/tables/DMI
  * Add buffer read helper using read explicitly
  * man: fix all_ethN indentation
  * Netronome biosdevname support (#8)
  * Prevent infinite recursion in dmidecode.c::smbios_setslot by (#7)
  * Add support for ExaNIC network cards (#5)
- Removed patches now upstream:
  - dmidecode-prevent-infinite-recursion.patch
  - biosdevname-Add-buffer-read-helper-using-read-explicitly.patch
  - biosdevname-Read-DMI-entries-from-sys-firmware-dmi-tables-DMI.patch</changelog>
</package>
<package pkgid="5084d39baa9e68076673ed193b910285bb371a86e52b992a890e0a4f52efbd65" name="biosdevname" arch="x86_64">
  <version epoch="0" ver="0.7.3.7.g495ab76" rel="150000.5.6.1"/>
  <changelog author="trenn@suse.de" date="1421928000">- Update to version 0.6.1
- Do not disable rule via perl script in .spec file, better use a patch
  (biosdevname_udevrule_rename_all_network_devices.patch)
- Modify configure.ac via sed to make use of %{_udevruledir} from .spec file
- Remove already integrated patches in latest source code:
  Delete biosdevname_v0.5.0_to_git_c140ce659a204d67e4cc.patch
  Delete biosdevname_udevrule_rename_all_network_devices.patch
  Delete fix_several_PCI_root_ports_in_one_bus.patch
  Modify udev-rule-path.patch
  Modify whitelist-dell</changelog>
  <changelog author="meissner@suse.com" date="1424520000">- biosdevname-pic.patch: make cpuid() not expose %ebx out of
  assembler, so we can build it with -fPIE.</changelog>
  <changelog author="mpluskal@suse.com" date="1428062400">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="zaitor@opensuse.org" date="1428667200">- Fix fault in ignore-broken-BIOSes patch (boo#920054).</changelog>
  <changelog author="mpluskal@suse.com" date="1433332800">- Update to 0.6.2
  * no upstream changelog provided</changelog>
  <changelog author="werner@suse.de" date="1436788800">- Add missed build require on pkgconfig udev</changelog>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix missing dependency on coreutils for initrd macros (boo#958562)
- Call missing initrd macro at postun (boo#958562)</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 0.7.1
  * no upstream changelog provided</changelog>
  <changelog author="trenn@suse.de" date="1457092800">- Update to latest 0.7.2 version (fate#319998)</changelog>
  <changelog author="olaf@aepfle.de" date="1471348800">- Detect dom0 via xenfs instead of cpuid to compensate for ABI
  change in xen-4.7 on AMD systems. (bnc#974257)
  biosdevname-dom0.patch</changelog>
  <changelog author="felix.gerling@suse.com" date="1484827200">-  Update to HEAD 66eab208d3c2abe947ba0a793094ee856e8fb3ee
  * Fix use-after-free of fd</changelog>
  <changelog author="fschnizlein@suse.com" date="1497009600">- Update to latest HEAD to 02811d5165c2eeecf8797fe9b5088d6e78bd25db
  * Changed source to github
  * Ignore naming of non-Ethernet network interfaces
  * Prevent reading of VPD-DCM strings for SRIOV-vfs
  - removed patch v0.7.2_to_HEAD_66eab208.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1506081600">- Update to version 0.7.3
  * Shipping and future Dell EMC systems support consistent network
    device naming feature.
  [fate#332490]</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="josef.moellers@suse.com" date="1527076800">- Prevent infinite recursion in dmidecode.c::smbios_setslot by
  checking that subordinate bus has a number greater than the
  current bus.
  [bsc#1093625, dmidecode-prevent-infinite-recursion.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1579694400">- BuildRequire pkgconfig(libudev) instead of libudev-devel: allow
  OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="msuchanek@suse.com" date="1597320000">- Read DMI info rom sysfs (bsc#1174491).
  * biosdevname-Add-buffer-read-helper-using-read-explicitly.patch
  * biosdevname-Read-DMI-entries-from-sys-firmware-dmi-tables-DMI.patch</changelog>
  <changelog author="aschnell@suse.com" date="1700827200">- Update to version 0.7.3.7.g495ab76 (bsc#1217455):
  * Add SMBIOS 3.x support
  * Read DMI entries from /sys/firmware/dmi/tables/DMI
  * Add buffer read helper using read explicitly
  * man: fix all_ethN indentation
  * Netronome biosdevname support (#8)
  * Prevent infinite recursion in dmidecode.c::smbios_setslot by (#7)
  * Add support for ExaNIC network cards (#5)
- Removed patches now upstream:
  - dmidecode-prevent-infinite-recursion.patch
  - biosdevname-Add-buffer-read-helper-using-read-explicitly.patch
  - biosdevname-Read-DMI-entries-from-sys-firmware-dmi-tables-DMI.patch</changelog>
</package>
<package pkgid="5643cb0218b7f94d12ac89f23558cd1e4e0a10fd3d121e7354fb7b588cdeac06" name="bluez" arch="src">
  <version epoch="0" ver="5.65" rel="150500.3.11.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
  <changelog author="jlee@suse.com" date="1705406400">- Add pbap-Fix-not-checking-Primary-Secundary-Counter-leng.patch
  pbap: Fix not checking Primary/Secundary Counter length
  (bsc#1218301)(CVE-2023-50230)(bsc#1218300)(CVE-2023-50229)</changelog>
  <changelog author="jlee@suse.com" date="1709208000">- Porting Yifan Jiang &lt;yfjiang@suse.com&gt;'s solution of bsc#1220329
  to SLE15-SP5 (bsc#1209153)
  - Add necessary Supplements (gnome-bluetooth, blueman, bluedevil5)
    to bluez-obexd, so that file transfer features of the applications
    can be used by default (bsc#1209153, bsc#1220329).
  - Update the description of bluez-obexd.</changelog>
</package>
<package pkgid="4543f315ba2009b54c50db7f15eb07d8ba719ccea10b25c837cb4516a5bea5cf" name="bluez" arch="src">
  <version epoch="0" ver="5.65" rel="150500.3.6.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
  <changelog author="jlee@suse.com" date="1705406400">- Add pbap-Fix-not-checking-Primary-Secundary-Counter-leng.patch
  pbap: Fix not checking Primary/Secundary Counter length
  (bsc#1218301)(CVE-2023-50230)(bsc#1218300)(CVE-2023-50229)</changelog>
</package>
<package pkgid="8bcc3ea0783a046a363b220c82c1e758eb438ffa75dfcb05922a5247ac29f8a5" name="bluez" arch="src">
  <version epoch="0" ver="5.65" rel="150500.3.8.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
  <changelog author="jlee@suse.com" date="1705406400">- Add pbap-Fix-not-checking-Primary-Secundary-Counter-leng.patch
  pbap: Fix not checking Primary/Secundary Counter length
  (bsc#1218301)(CVE-2023-50230)(bsc#1218300)(CVE-2023-50229)</changelog>
</package>
<package pkgid="c4b3c7821b427d6a3575241e33f768561c7865930e78fc9d2fa651452605fbc0" name="btrfsprogs" arch="aarch64">
  <version epoch="0" ver="5.14" rel="150500.10.3.1"/>
  <changelog author="info@paolostivanin.com" date="1586174400">- Update to 5.6:
  * inspect logical-resolve: support LOGICAL_INO_V2 as new option '-o',
    helps advanced dedupe tools
  * inspect: user larger buffer (64K) for results
  * subvol delete: support deletion by id (requires kernel 5.7+)
  * dump-tree: new option --hide-names, replace any names
    (file, directory, subvolume, xattr) in the output with stubs
  * various fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1588161600">- Fix content of _dracutmodulesdir variable: this definitively does
  not belong to libexecdir.</changelog>
  <changelog author="dsterba@suse.cz" date="1589371200">- Update to 5.6.1:
  * print warning when multiple block group profiles exist, update 'fi usage'
    summary, add docs to maual page explaining the situation
  * build: optional support for libgcrypt or libsodium, providing hash
    implementations
  * updated docs</changelog>
  <changelog author="dsterba@suse.cz" date="1594036800">- Update to 5.7:
  * mkfs:
  * new option to enable features otherwise enabled at runtime, now
    implemented for quotas, 'mkfs.btrfs -R quota'
  * fix space accounting for small image, DUP and --rootdir
  * option -A removed
  * check: detect ranges with overlapping csum items
  * fi usage: report correct numbers when plain RAID56 profiles are used
  * convert: ensure the data chunks size never exceed device size
  * libbtrfsutil: update documentation regarding subvolume deletion
  * build: support libkcapi as implementation backend for cryptographic
    primitives
  * core: global options for verbosity (-v, -q), subcommands -v or -q are
    aliases and will continue to work but are considered deprecated,
    current command output is preserved to keep scripts working
  * other:
  * build warning fixes
  * btrfs-debugfs ported to python 3</changelog>
  <changelog author="dsterba@suse.cz" date="1603627200">- Update to 5.9:
  * mkfs:
  * switch default to single profile for multi-device filesystem, up to
    now it was raid0 that may not be simple to convert to some other profile
    as raid0 needs a workspace on all device for that
  * new option -R for run-time options (eg. mount time enabled), now
    understands free-space-tree
  * subvolume delete:
  * refuse to delete the default subvolume (kernel will not allow that but
    the error reason is not obvious)
  * warn on EPERM, eg. if send is on progress on the subvolume
  * convert:
  * fix 32bit overflows on large filesystems
  * improved error handling and error messages
  * check free space taking fragmentation into account
  * check:
  * detect and repair wrong inode generation
  * minor improvement in error reporting on roots
  * libbtrfsutils: follow main package versioning (5.9)
  * add pkg-config file definitions
  * python-btrfsutil: follow main package versioning (5.9)
  * inspect tree-stats: print node counts for each level, fanout
  * other:
  * docs:
  * remove obsolete mount options (alloc_start, subvolrootid)
  * deleting default subvolume is not permitted
  * updated or fixed tests
  * .editorconfig updates
  * move files to kernel-shared/
  * CI:
  * updated to use zstd 1.4.5
  * fix reiserfs build
  * more builds with asan, ubsan
  * sb-mod updates
  * build:
  * print .so versions of libraries in configure summary</changelog>
  <changelog author="lnussel@suse.de" date="1604491200">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dsterba@suse.cz" date="1615118400">- Update to 5.11
  * fix device path canonicalization for device mapper devices
  * receive: remove workaround for setting capabilities, all stable kernels
    have been patched
  * receive: fix duplicate mount path detection
  * rescue: new subcommand create-control-device
  * device stats: minor fix for plain text format output
  * build: detect if e2fsprogs support 64bit timestamps
  * build: drop libmount, required functionality has been reimplemented
  * mkfs: warn when raid56 is used
  * balance convert: warn when raid56 is used
  * other
  * new and updated tests
  * documentation updates
  * seeding device
  * raid56 status
  * CI updates
  * docker images for various distros
- Update to 5.10.1
  * static build works again
  * other:
  * add a way to test static binaries with the testsuite
  * clarify scrub docs
  * update dependencies, minimum version for libmount is 2.24, this may
    change in the future
- Update to 5.10
  * scrub status:
  * print percentage of progress
  * add size unit options
  * fi usage: also print free space from statfs
  * convert: copy full 64 bit timestamp from ext4 if availalble
  * check:
  * add ability to repair extent item generation
  * new option to remove leftovers from inode number cache (-o inode_cache)
  * check for already running exclusive operation (balance, device add/...)
    when starting one
  * preliminary json output support for 'device stats'
  * fixes:
  * subvolume set-default: id 0 correctly falls back to toplevel
  * receive: align internal buffer to allow fast CRC calculation
  * logical-resolve: distinguish -o subvol and bind mounts
  * build: new dependency libmount
  * other
  * doc fixes and updates
  * new tests
  * ci on gitlab temporarily disabled
  * debugging output enhancements</changelog>
  <changelog author="dsterba@suse.cz" date="1620561600">- Update to 5.12
  * libbtrfsutil: relicensed to LGPL v2.1+
  * mkfs: zoned mode support (kernel 5.12+)
  * fi df: show zone_unusable per profile type in zoned mode
  * fi usage: show total amount of zone_unusable
  * fi resize: fix message for exact size
  * image: fix warning and enlarge output file if necessary
  * core
  * refactor chunk allocator for more modes
  * implement zoned mode support: allocation and writes, sb log
  * crypto/hash refactoring and cleanups
  * refactoring and cleanups
  * other
  * test updates
  * CI updates
  * travis-ci integration disabled
  * docker images updated, more coverage
  * incomplete build support for Android removed
  * doc updates
  * chattr mode m for 'NOCOMPRESS"
  * swapfile used from fstab
  * how to add a new export to libbtrfsutil
  * update status of mount options since 5.9
- Update to 5.11.1
  * properly format checksums when a mismatch is reported
  * check: fix false alert on tree block crossing 64K page boundary
  * convert:
  * refuse to convert filesystem with 'needs_recovery'
  * update documentation to require fsck before conversion
  * balance convert: fix raid56 warning when converting other profiles
  * fi resize: improved summary
  * other
  * build: fix checks and autoconf defines
  * fix symlink paths for CI support scripts
  * updated tests</changelog>
  <changelog author="dsterba@suse.cz" date="1620820800">- Update to 5.12.1
  * build: fix missing symbols in libbtrfs
  * mkfs: check for minimal number of zones
  * check: fix warning about cache generation when free space tree is enabled
  * fix superblock write in zoned mode on 16K pages</changelog>
  <changelog author="camspam@redhyena.net" date="1623758400">- Fix build for leap
  * --disable-zstd if leap &lt; 42.3
  * --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1623758401">- revert previous change, unintentionally disables zstd on tumbleweed</changelog>
  <changelog author="camspam@redhyena.net" date="1623844800">- Add --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1626091200">- Update to 5.13
  * restore: remove loop checks for extent count and directory scan
  * inspect dump-tree: new options to print node (--csum-headers) and data
    checksums (--csum-items)
  * fi usage:
  * print stripe count for striped profiles
  * print zoned information: size, total unusable
  * mkfs: print note about sha256 accelerated module loading issue
  * check: ability to reset dev_item::bytes_used
  * fixes
  * detect zoned kernel support at run time too
  * exclusive op running check return value
  * fi resize: support cancel (kernel 5.14)
  * device remove: support cancel (kernel 5.14)
  * documentation about general topics
  * compression
  * zoned mode
  * storage model
  * hardware considerations
  * other
  * libbtrfsutil API overview
  * help text fixes and updates
  * hash speedtest measure time, cycles using perf and print throughput</changelog>
  <changelog author="rgoldwyn@suse.com" date="1628596800">- Update to 5.13.1
  * build: fix build on musl libc due to missing definition of NAME_MAX
  * check:
  * batch more work into one transaction when clearing v1 free space inodes
  * detect directoris with wrong number of links
  * libbtrfsutil: fix race between subvolume iterator and deletion
  * mkfs: be more specific about supported profiles for zoned device
  * other:
  * documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1631448000">- Update to 5.14
  * convert:
  * new option --uuid to copy, generate or set a given uuid
  * improve output
  * mkfs:
  * allow to create degenerate raid0 (on 1 device) and raid10 (on 2 devices)
  * image:
  * improved error messages
  * fix some alignment of restored image
  * subvol delete: allow to delete by id when path is not resolvable
  * check:
  * require alignment of nodesize for 64k page systems
  * detect and fix invalid block groups
  * libbtrfs (deprecated):
  * remove most exported symbols, leave only a few that are used by snapper
  * no version change (still 0.1)
  * remove btrfs-list.h, btrfsck.h
  * fixes:
  * reset generation of space v1 if v2 is used
  * fi us: don't wrongly report missing device size when partition is not readable
  * other:
  * build: experimental features
  * build: better detection of 64bit timestamp support for ext4
  * corrupt-block: block group items
  * new and updated tests
  * refactoring
  * experimental features:
  * new image dump format, with data</changelog>
  <changelog author="rgoldwyn@suse.com" date="1632744000">- Deleted upstreamed patches for upgrade:
  - fate#325871
  * 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch
  * 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch
  * 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch
  * 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch
  * 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch
  - btrfs-progs: check: fixup_extent_flags needs to deal with non-skinny
  metadata (bsc#1131334).
  * btrfs-progs-check-fixup_extent_flags-needs-to-deal-with-non-skinny-metadata.patch
  - btrfs-progs: check: fix segfault with -Q (bsc#1158560)
  * btrfs-progs-check-initialize-qgroup_item_count-in-ea.patch
  - Enqueue feature to wait for exclusive operation to finish (JSC#SLE-15234)
  * 0001-btrfs-progs-add-get_fsid_fd-for-getting-fsid-using-f.patch
  * 0002-btrfs-progs-add-sysfs-file-reading-helpers.patch
  * 0003-btrfs-progs-add-helpers-for-parsing-filesystem-exclu.patch
  * 0004-btrfs-progs-check-for-exclusive-operation-before-iss.patch
  * 0005-btrfs-progs-add-helper-to-check-or-wait-for-exclusiv.patch
  * 0006-btrfs-progs-add-enqueue-parameter-for-exclusive-ops.patch
  - Correct check_running_fs_exclop() return value (bsc#1184481)
  * btrfs-progs-Correct-check_running_fs_exclop-return-v.patch</changelog>
  <changelog author="nborisov@suse.com" date="1638360000">- Ignore multipath devices when probing devices for a btrfs filesystem (bsc#1192983)
  * 0001-btrfs-progs-Add-optional-dependency-on-libudev.patch
  * 0002-btrfs-progs-Ignore-devices-representing-paths-in-mul.patch
  * 0003-btrfs-progs-Add-fallback-code-for-path-device-ignore.patch</changelog>
  <changelog author="dmueller@suse.com" date="1642593600">- add python-rpm-macros (bsc#1194748)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1661774400">- Upstream behavior of btrfs compression=none (JSC#PED-1711)
  * btrfs-progs_props_dont_translate_value_of_compression_none.patch</changelog>
  <changelog author="tabraham@suse.com" date="1702987200">- btrfs-progs: fix defrag -c option parsing (bsc#1218029)
  * btrfs-progs-fix-defrag-c-option-parsing.patch</changelog>
</package>
<package pkgid="230dcfe4344f811c9db04918b11a131fba3ee0803cad9feaba857e4286b2bd44" name="btrfsprogs" arch="s390x">
  <version epoch="0" ver="5.14" rel="150500.10.3.1"/>
  <changelog author="info@paolostivanin.com" date="1586174400">- Update to 5.6:
  * inspect logical-resolve: support LOGICAL_INO_V2 as new option '-o',
    helps advanced dedupe tools
  * inspect: user larger buffer (64K) for results
  * subvol delete: support deletion by id (requires kernel 5.7+)
  * dump-tree: new option --hide-names, replace any names
    (file, directory, subvolume, xattr) in the output with stubs
  * various fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1588161600">- Fix content of _dracutmodulesdir variable: this definitively does
  not belong to libexecdir.</changelog>
  <changelog author="dsterba@suse.cz" date="1589371200">- Update to 5.6.1:
  * print warning when multiple block group profiles exist, update 'fi usage'
    summary, add docs to maual page explaining the situation
  * build: optional support for libgcrypt or libsodium, providing hash
    implementations
  * updated docs</changelog>
  <changelog author="dsterba@suse.cz" date="1594036800">- Update to 5.7:
  * mkfs:
  * new option to enable features otherwise enabled at runtime, now
    implemented for quotas, 'mkfs.btrfs -R quota'
  * fix space accounting for small image, DUP and --rootdir
  * option -A removed
  * check: detect ranges with overlapping csum items
  * fi usage: report correct numbers when plain RAID56 profiles are used
  * convert: ensure the data chunks size never exceed device size
  * libbtrfsutil: update documentation regarding subvolume deletion
  * build: support libkcapi as implementation backend for cryptographic
    primitives
  * core: global options for verbosity (-v, -q), subcommands -v or -q are
    aliases and will continue to work but are considered deprecated,
    current command output is preserved to keep scripts working
  * other:
  * build warning fixes
  * btrfs-debugfs ported to python 3</changelog>
  <changelog author="dsterba@suse.cz" date="1603627200">- Update to 5.9:
  * mkfs:
  * switch default to single profile for multi-device filesystem, up to
    now it was raid0 that may not be simple to convert to some other profile
    as raid0 needs a workspace on all device for that
  * new option -R for run-time options (eg. mount time enabled), now
    understands free-space-tree
  * subvolume delete:
  * refuse to delete the default subvolume (kernel will not allow that but
    the error reason is not obvious)
  * warn on EPERM, eg. if send is on progress on the subvolume
  * convert:
  * fix 32bit overflows on large filesystems
  * improved error handling and error messages
  * check free space taking fragmentation into account
  * check:
  * detect and repair wrong inode generation
  * minor improvement in error reporting on roots
  * libbtrfsutils: follow main package versioning (5.9)
  * add pkg-config file definitions
  * python-btrfsutil: follow main package versioning (5.9)
  * inspect tree-stats: print node counts for each level, fanout
  * other:
  * docs:
  * remove obsolete mount options (alloc_start, subvolrootid)
  * deleting default subvolume is not permitted
  * updated or fixed tests
  * .editorconfig updates
  * move files to kernel-shared/
  * CI:
  * updated to use zstd 1.4.5
  * fix reiserfs build
  * more builds with asan, ubsan
  * sb-mod updates
  * build:
  * print .so versions of libraries in configure summary</changelog>
  <changelog author="lnussel@suse.de" date="1604491200">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dsterba@suse.cz" date="1615118400">- Update to 5.11
  * fix device path canonicalization for device mapper devices
  * receive: remove workaround for setting capabilities, all stable kernels
    have been patched
  * receive: fix duplicate mount path detection
  * rescue: new subcommand create-control-device
  * device stats: minor fix for plain text format output
  * build: detect if e2fsprogs support 64bit timestamps
  * build: drop libmount, required functionality has been reimplemented
  * mkfs: warn when raid56 is used
  * balance convert: warn when raid56 is used
  * other
  * new and updated tests
  * documentation updates
  * seeding device
  * raid56 status
  * CI updates
  * docker images for various distros
- Update to 5.10.1
  * static build works again
  * other:
  * add a way to test static binaries with the testsuite
  * clarify scrub docs
  * update dependencies, minimum version for libmount is 2.24, this may
    change in the future
- Update to 5.10
  * scrub status:
  * print percentage of progress
  * add size unit options
  * fi usage: also print free space from statfs
  * convert: copy full 64 bit timestamp from ext4 if availalble
  * check:
  * add ability to repair extent item generation
  * new option to remove leftovers from inode number cache (-o inode_cache)
  * check for already running exclusive operation (balance, device add/...)
    when starting one
  * preliminary json output support for 'device stats'
  * fixes:
  * subvolume set-default: id 0 correctly falls back to toplevel
  * receive: align internal buffer to allow fast CRC calculation
  * logical-resolve: distinguish -o subvol and bind mounts
  * build: new dependency libmount
  * other
  * doc fixes and updates
  * new tests
  * ci on gitlab temporarily disabled
  * debugging output enhancements</changelog>
  <changelog author="dsterba@suse.cz" date="1620561600">- Update to 5.12
  * libbtrfsutil: relicensed to LGPL v2.1+
  * mkfs: zoned mode support (kernel 5.12+)
  * fi df: show zone_unusable per profile type in zoned mode
  * fi usage: show total amount of zone_unusable
  * fi resize: fix message for exact size
  * image: fix warning and enlarge output file if necessary
  * core
  * refactor chunk allocator for more modes
  * implement zoned mode support: allocation and writes, sb log
  * crypto/hash refactoring and cleanups
  * refactoring and cleanups
  * other
  * test updates
  * CI updates
  * travis-ci integration disabled
  * docker images updated, more coverage
  * incomplete build support for Android removed
  * doc updates
  * chattr mode m for 'NOCOMPRESS"
  * swapfile used from fstab
  * how to add a new export to libbtrfsutil
  * update status of mount options since 5.9
- Update to 5.11.1
  * properly format checksums when a mismatch is reported
  * check: fix false alert on tree block crossing 64K page boundary
  * convert:
  * refuse to convert filesystem with 'needs_recovery'
  * update documentation to require fsck before conversion
  * balance convert: fix raid56 warning when converting other profiles
  * fi resize: improved summary
  * other
  * build: fix checks and autoconf defines
  * fix symlink paths for CI support scripts
  * updated tests</changelog>
  <changelog author="dsterba@suse.cz" date="1620820800">- Update to 5.12.1
  * build: fix missing symbols in libbtrfs
  * mkfs: check for minimal number of zones
  * check: fix warning about cache generation when free space tree is enabled
  * fix superblock write in zoned mode on 16K pages</changelog>
  <changelog author="camspam@redhyena.net" date="1623758400">- Fix build for leap
  * --disable-zstd if leap &lt; 42.3
  * --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1623758401">- revert previous change, unintentionally disables zstd on tumbleweed</changelog>
  <changelog author="camspam@redhyena.net" date="1623844800">- Add --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1626091200">- Update to 5.13
  * restore: remove loop checks for extent count and directory scan
  * inspect dump-tree: new options to print node (--csum-headers) and data
    checksums (--csum-items)
  * fi usage:
  * print stripe count for striped profiles
  * print zoned information: size, total unusable
  * mkfs: print note about sha256 accelerated module loading issue
  * check: ability to reset dev_item::bytes_used
  * fixes
  * detect zoned kernel support at run time too
  * exclusive op running check return value
  * fi resize: support cancel (kernel 5.14)
  * device remove: support cancel (kernel 5.14)
  * documentation about general topics
  * compression
  * zoned mode
  * storage model
  * hardware considerations
  * other
  * libbtrfsutil API overview
  * help text fixes and updates
  * hash speedtest measure time, cycles using perf and print throughput</changelog>
  <changelog author="rgoldwyn@suse.com" date="1628596800">- Update to 5.13.1
  * build: fix build on musl libc due to missing definition of NAME_MAX
  * check:
  * batch more work into one transaction when clearing v1 free space inodes
  * detect directoris with wrong number of links
  * libbtrfsutil: fix race between subvolume iterator and deletion
  * mkfs: be more specific about supported profiles for zoned device
  * other:
  * documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1631448000">- Update to 5.14
  * convert:
  * new option --uuid to copy, generate or set a given uuid
  * improve output
  * mkfs:
  * allow to create degenerate raid0 (on 1 device) and raid10 (on 2 devices)
  * image:
  * improved error messages
  * fix some alignment of restored image
  * subvol delete: allow to delete by id when path is not resolvable
  * check:
  * require alignment of nodesize for 64k page systems
  * detect and fix invalid block groups
  * libbtrfs (deprecated):
  * remove most exported symbols, leave only a few that are used by snapper
  * no version change (still 0.1)
  * remove btrfs-list.h, btrfsck.h
  * fixes:
  * reset generation of space v1 if v2 is used
  * fi us: don't wrongly report missing device size when partition is not readable
  * other:
  * build: experimental features
  * build: better detection of 64bit timestamp support for ext4
  * corrupt-block: block group items
  * new and updated tests
  * refactoring
  * experimental features:
  * new image dump format, with data</changelog>
  <changelog author="rgoldwyn@suse.com" date="1632744000">- Deleted upstreamed patches for upgrade:
  - fate#325871
  * 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch
  * 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch
  * 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch
  * 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch
  * 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch
  - btrfs-progs: check: fixup_extent_flags needs to deal with non-skinny
  metadata (bsc#1131334).
  * btrfs-progs-check-fixup_extent_flags-needs-to-deal-with-non-skinny-metadata.patch
  - btrfs-progs: check: fix segfault with -Q (bsc#1158560)
  * btrfs-progs-check-initialize-qgroup_item_count-in-ea.patch
  - Enqueue feature to wait for exclusive operation to finish (JSC#SLE-15234)
  * 0001-btrfs-progs-add-get_fsid_fd-for-getting-fsid-using-f.patch
  * 0002-btrfs-progs-add-sysfs-file-reading-helpers.patch
  * 0003-btrfs-progs-add-helpers-for-parsing-filesystem-exclu.patch
  * 0004-btrfs-progs-check-for-exclusive-operation-before-iss.patch
  * 0005-btrfs-progs-add-helper-to-check-or-wait-for-exclusiv.patch
  * 0006-btrfs-progs-add-enqueue-parameter-for-exclusive-ops.patch
  - Correct check_running_fs_exclop() return value (bsc#1184481)
  * btrfs-progs-Correct-check_running_fs_exclop-return-v.patch</changelog>
  <changelog author="nborisov@suse.com" date="1638360000">- Ignore multipath devices when probing devices for a btrfs filesystem (bsc#1192983)
  * 0001-btrfs-progs-Add-optional-dependency-on-libudev.patch
  * 0002-btrfs-progs-Ignore-devices-representing-paths-in-mul.patch
  * 0003-btrfs-progs-Add-fallback-code-for-path-device-ignore.patch</changelog>
  <changelog author="dmueller@suse.com" date="1642593600">- add python-rpm-macros (bsc#1194748)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1661774400">- Upstream behavior of btrfs compression=none (JSC#PED-1711)
  * btrfs-progs_props_dont_translate_value_of_compression_none.patch</changelog>
  <changelog author="tabraham@suse.com" date="1702987200">- btrfs-progs: fix defrag -c option parsing (bsc#1218029)
  * btrfs-progs-fix-defrag-c-option-parsing.patch</changelog>
</package>
<package pkgid="80bb821155c545de3f2481a9808a224be1e706e5f30c80ff18c2bb381b59e36a" name="btrfsprogs" arch="src">
  <version epoch="0" ver="5.14" rel="150500.10.3.1"/>
  <changelog author="info@paolostivanin.com" date="1586174400">- Update to 5.6:
  * inspect logical-resolve: support LOGICAL_INO_V2 as new option '-o',
    helps advanced dedupe tools
  * inspect: user larger buffer (64K) for results
  * subvol delete: support deletion by id (requires kernel 5.7+)
  * dump-tree: new option --hide-names, replace any names
    (file, directory, subvolume, xattr) in the output with stubs
  * various fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1588161600">- Fix content of _dracutmodulesdir variable: this definitively does
  not belong to libexecdir.</changelog>
  <changelog author="dsterba@suse.cz" date="1589371200">- Update to 5.6.1:
  * print warning when multiple block group profiles exist, update 'fi usage'
    summary, add docs to maual page explaining the situation
  * build: optional support for libgcrypt or libsodium, providing hash
    implementations
  * updated docs</changelog>
  <changelog author="dsterba@suse.cz" date="1594036800">- Update to 5.7:
  * mkfs:
  * new option to enable features otherwise enabled at runtime, now
    implemented for quotas, 'mkfs.btrfs -R quota'
  * fix space accounting for small image, DUP and --rootdir
  * option -A removed
  * check: detect ranges with overlapping csum items
  * fi usage: report correct numbers when plain RAID56 profiles are used
  * convert: ensure the data chunks size never exceed device size
  * libbtrfsutil: update documentation regarding subvolume deletion
  * build: support libkcapi as implementation backend for cryptographic
    primitives
  * core: global options for verbosity (-v, -q), subcommands -v or -q are
    aliases and will continue to work but are considered deprecated,
    current command output is preserved to keep scripts working
  * other:
  * build warning fixes
  * btrfs-debugfs ported to python 3</changelog>
  <changelog author="dsterba@suse.cz" date="1603627200">- Update to 5.9:
  * mkfs:
  * switch default to single profile for multi-device filesystem, up to
    now it was raid0 that may not be simple to convert to some other profile
    as raid0 needs a workspace on all device for that
  * new option -R for run-time options (eg. mount time enabled), now
    understands free-space-tree
  * subvolume delete:
  * refuse to delete the default subvolume (kernel will not allow that but
    the error reason is not obvious)
  * warn on EPERM, eg. if send is on progress on the subvolume
  * convert:
  * fix 32bit overflows on large filesystems
  * improved error handling and error messages
  * check free space taking fragmentation into account
  * check:
  * detect and repair wrong inode generation
  * minor improvement in error reporting on roots
  * libbtrfsutils: follow main package versioning (5.9)
  * add pkg-config file definitions
  * python-btrfsutil: follow main package versioning (5.9)
  * inspect tree-stats: print node counts for each level, fanout
  * other:
  * docs:
  * remove obsolete mount options (alloc_start, subvolrootid)
  * deleting default subvolume is not permitted
  * updated or fixed tests
  * .editorconfig updates
  * move files to kernel-shared/
  * CI:
  * updated to use zstd 1.4.5
  * fix reiserfs build
  * more builds with asan, ubsan
  * sb-mod updates
  * build:
  * print .so versions of libraries in configure summary</changelog>
  <changelog author="lnussel@suse.de" date="1604491200">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dsterba@suse.cz" date="1615118400">- Update to 5.11
  * fix device path canonicalization for device mapper devices
  * receive: remove workaround for setting capabilities, all stable kernels
    have been patched
  * receive: fix duplicate mount path detection
  * rescue: new subcommand create-control-device
  * device stats: minor fix for plain text format output
  * build: detect if e2fsprogs support 64bit timestamps
  * build: drop libmount, required functionality has been reimplemented
  * mkfs: warn when raid56 is used
  * balance convert: warn when raid56 is used
  * other
  * new and updated tests
  * documentation updates
  * seeding device
  * raid56 status
  * CI updates
  * docker images for various distros
- Update to 5.10.1
  * static build works again
  * other:
  * add a way to test static binaries with the testsuite
  * clarify scrub docs
  * update dependencies, minimum version for libmount is 2.24, this may
    change in the future
- Update to 5.10
  * scrub status:
  * print percentage of progress
  * add size unit options
  * fi usage: also print free space from statfs
  * convert: copy full 64 bit timestamp from ext4 if availalble
  * check:
  * add ability to repair extent item generation
  * new option to remove leftovers from inode number cache (-o inode_cache)
  * check for already running exclusive operation (balance, device add/...)
    when starting one
  * preliminary json output support for 'device stats'
  * fixes:
  * subvolume set-default: id 0 correctly falls back to toplevel
  * receive: align internal buffer to allow fast CRC calculation
  * logical-resolve: distinguish -o subvol and bind mounts
  * build: new dependency libmount
  * other
  * doc fixes and updates
  * new tests
  * ci on gitlab temporarily disabled
  * debugging output enhancements</changelog>
  <changelog author="dsterba@suse.cz" date="1620561600">- Update to 5.12
  * libbtrfsutil: relicensed to LGPL v2.1+
  * mkfs: zoned mode support (kernel 5.12+)
  * fi df: show zone_unusable per profile type in zoned mode
  * fi usage: show total amount of zone_unusable
  * fi resize: fix message for exact size
  * image: fix warning and enlarge output file if necessary
  * core
  * refactor chunk allocator for more modes
  * implement zoned mode support: allocation and writes, sb log
  * crypto/hash refactoring and cleanups
  * refactoring and cleanups
  * other
  * test updates
  * CI updates
  * travis-ci integration disabled
  * docker images updated, more coverage
  * incomplete build support for Android removed
  * doc updates
  * chattr mode m for 'NOCOMPRESS"
  * swapfile used from fstab
  * how to add a new export to libbtrfsutil
  * update status of mount options since 5.9
- Update to 5.11.1
  * properly format checksums when a mismatch is reported
  * check: fix false alert on tree block crossing 64K page boundary
  * convert:
  * refuse to convert filesystem with 'needs_recovery'
  * update documentation to require fsck before conversion
  * balance convert: fix raid56 warning when converting other profiles
  * fi resize: improved summary
  * other
  * build: fix checks and autoconf defines
  * fix symlink paths for CI support scripts
  * updated tests</changelog>
  <changelog author="dsterba@suse.cz" date="1620820800">- Update to 5.12.1
  * build: fix missing symbols in libbtrfs
  * mkfs: check for minimal number of zones
  * check: fix warning about cache generation when free space tree is enabled
  * fix superblock write in zoned mode on 16K pages</changelog>
  <changelog author="camspam@redhyena.net" date="1623758400">- Fix build for leap
  * --disable-zstd if leap &lt; 42.3
  * --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1623758401">- revert previous change, unintentionally disables zstd on tumbleweed</changelog>
  <changelog author="camspam@redhyena.net" date="1623844800">- Add --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1626091200">- Update to 5.13
  * restore: remove loop checks for extent count and directory scan
  * inspect dump-tree: new options to print node (--csum-headers) and data
    checksums (--csum-items)
  * fi usage:
  * print stripe count for striped profiles
  * print zoned information: size, total unusable
  * mkfs: print note about sha256 accelerated module loading issue
  * check: ability to reset dev_item::bytes_used
  * fixes
  * detect zoned kernel support at run time too
  * exclusive op running check return value
  * fi resize: support cancel (kernel 5.14)
  * device remove: support cancel (kernel 5.14)
  * documentation about general topics
  * compression
  * zoned mode
  * storage model
  * hardware considerations
  * other
  * libbtrfsutil API overview
  * help text fixes and updates
  * hash speedtest measure time, cycles using perf and print throughput</changelog>
  <changelog author="rgoldwyn@suse.com" date="1628596800">- Update to 5.13.1
  * build: fix build on musl libc due to missing definition of NAME_MAX
  * check:
  * batch more work into one transaction when clearing v1 free space inodes
  * detect directoris with wrong number of links
  * libbtrfsutil: fix race between subvolume iterator and deletion
  * mkfs: be more specific about supported profiles for zoned device
  * other:
  * documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1631448000">- Update to 5.14
  * convert:
  * new option --uuid to copy, generate or set a given uuid
  * improve output
  * mkfs:
  * allow to create degenerate raid0 (on 1 device) and raid10 (on 2 devices)
  * image:
  * improved error messages
  * fix some alignment of restored image
  * subvol delete: allow to delete by id when path is not resolvable
  * check:
  * require alignment of nodesize for 64k page systems
  * detect and fix invalid block groups
  * libbtrfs (deprecated):
  * remove most exported symbols, leave only a few that are used by snapper
  * no version change (still 0.1)
  * remove btrfs-list.h, btrfsck.h
  * fixes:
  * reset generation of space v1 if v2 is used
  * fi us: don't wrongly report missing device size when partition is not readable
  * other:
  * build: experimental features
  * build: better detection of 64bit timestamp support for ext4
  * corrupt-block: block group items
  * new and updated tests
  * refactoring
  * experimental features:
  * new image dump format, with data</changelog>
  <changelog author="rgoldwyn@suse.com" date="1632744000">- Deleted upstreamed patches for upgrade:
  - fate#325871
  * 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch
  * 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch
  * 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch
  * 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch
  * 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch
  - btrfs-progs: check: fixup_extent_flags needs to deal with non-skinny
  metadata (bsc#1131334).
  * btrfs-progs-check-fixup_extent_flags-needs-to-deal-with-non-skinny-metadata.patch
  - btrfs-progs: check: fix segfault with -Q (bsc#1158560)
  * btrfs-progs-check-initialize-qgroup_item_count-in-ea.patch
  - Enqueue feature to wait for exclusive operation to finish (JSC#SLE-15234)
  * 0001-btrfs-progs-add-get_fsid_fd-for-getting-fsid-using-f.patch
  * 0002-btrfs-progs-add-sysfs-file-reading-helpers.patch
  * 0003-btrfs-progs-add-helpers-for-parsing-filesystem-exclu.patch
  * 0004-btrfs-progs-check-for-exclusive-operation-before-iss.patch
  * 0005-btrfs-progs-add-helper-to-check-or-wait-for-exclusiv.patch
  * 0006-btrfs-progs-add-enqueue-parameter-for-exclusive-ops.patch
  - Correct check_running_fs_exclop() return value (bsc#1184481)
  * btrfs-progs-Correct-check_running_fs_exclop-return-v.patch</changelog>
  <changelog author="nborisov@suse.com" date="1638360000">- Ignore multipath devices when probing devices for a btrfs filesystem (bsc#1192983)
  * 0001-btrfs-progs-Add-optional-dependency-on-libudev.patch
  * 0002-btrfs-progs-Ignore-devices-representing-paths-in-mul.patch
  * 0003-btrfs-progs-Add-fallback-code-for-path-device-ignore.patch</changelog>
  <changelog author="dmueller@suse.com" date="1642593600">- add python-rpm-macros (bsc#1194748)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1661774400">- Upstream behavior of btrfs compression=none (JSC#PED-1711)
  * btrfs-progs_props_dont_translate_value_of_compression_none.patch</changelog>
  <changelog author="tabraham@suse.com" date="1702987200">- btrfs-progs: fix defrag -c option parsing (bsc#1218029)
  * btrfs-progs-fix-defrag-c-option-parsing.patch</changelog>
</package>
<package pkgid="00cb276ec7a5e706e3506ee11d339e2a2df7b49cc48a6f828b6773e1fd2039c8" name="btrfsprogs" arch="x86_64">
  <version epoch="0" ver="5.14" rel="150500.10.3.1"/>
  <changelog author="info@paolostivanin.com" date="1586174400">- Update to 5.6:
  * inspect logical-resolve: support LOGICAL_INO_V2 as new option '-o',
    helps advanced dedupe tools
  * inspect: user larger buffer (64K) for results
  * subvol delete: support deletion by id (requires kernel 5.7+)
  * dump-tree: new option --hide-names, replace any names
    (file, directory, subvolume, xattr) in the output with stubs
  * various fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1588161600">- Fix content of _dracutmodulesdir variable: this definitively does
  not belong to libexecdir.</changelog>
  <changelog author="dsterba@suse.cz" date="1589371200">- Update to 5.6.1:
  * print warning when multiple block group profiles exist, update 'fi usage'
    summary, add docs to maual page explaining the situation
  * build: optional support for libgcrypt or libsodium, providing hash
    implementations
  * updated docs</changelog>
  <changelog author="dsterba@suse.cz" date="1594036800">- Update to 5.7:
  * mkfs:
  * new option to enable features otherwise enabled at runtime, now
    implemented for quotas, 'mkfs.btrfs -R quota'
  * fix space accounting for small image, DUP and --rootdir
  * option -A removed
  * check: detect ranges with overlapping csum items
  * fi usage: report correct numbers when plain RAID56 profiles are used
  * convert: ensure the data chunks size never exceed device size
  * libbtrfsutil: update documentation regarding subvolume deletion
  * build: support libkcapi as implementation backend for cryptographic
    primitives
  * core: global options for verbosity (-v, -q), subcommands -v or -q are
    aliases and will continue to work but are considered deprecated,
    current command output is preserved to keep scripts working
  * other:
  * build warning fixes
  * btrfs-debugfs ported to python 3</changelog>
  <changelog author="dsterba@suse.cz" date="1603627200">- Update to 5.9:
  * mkfs:
  * switch default to single profile for multi-device filesystem, up to
    now it was raid0 that may not be simple to convert to some other profile
    as raid0 needs a workspace on all device for that
  * new option -R for run-time options (eg. mount time enabled), now
    understands free-space-tree
  * subvolume delete:
  * refuse to delete the default subvolume (kernel will not allow that but
    the error reason is not obvious)
  * warn on EPERM, eg. if send is on progress on the subvolume
  * convert:
  * fix 32bit overflows on large filesystems
  * improved error handling and error messages
  * check free space taking fragmentation into account
  * check:
  * detect and repair wrong inode generation
  * minor improvement in error reporting on roots
  * libbtrfsutils: follow main package versioning (5.9)
  * add pkg-config file definitions
  * python-btrfsutil: follow main package versioning (5.9)
  * inspect tree-stats: print node counts for each level, fanout
  * other:
  * docs:
  * remove obsolete mount options (alloc_start, subvolrootid)
  * deleting default subvolume is not permitted
  * updated or fixed tests
  * .editorconfig updates
  * move files to kernel-shared/
  * CI:
  * updated to use zstd 1.4.5
  * fix reiserfs build
  * more builds with asan, ubsan
  * sb-mod updates
  * build:
  * print .so versions of libraries in configure summary</changelog>
  <changelog author="lnussel@suse.de" date="1604491200">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dsterba@suse.cz" date="1615118400">- Update to 5.11
  * fix device path canonicalization for device mapper devices
  * receive: remove workaround for setting capabilities, all stable kernels
    have been patched
  * receive: fix duplicate mount path detection
  * rescue: new subcommand create-control-device
  * device stats: minor fix for plain text format output
  * build: detect if e2fsprogs support 64bit timestamps
  * build: drop libmount, required functionality has been reimplemented
  * mkfs: warn when raid56 is used
  * balance convert: warn when raid56 is used
  * other
  * new and updated tests
  * documentation updates
  * seeding device
  * raid56 status
  * CI updates
  * docker images for various distros
- Update to 5.10.1
  * static build works again
  * other:
  * add a way to test static binaries with the testsuite
  * clarify scrub docs
  * update dependencies, minimum version for libmount is 2.24, this may
    change in the future
- Update to 5.10
  * scrub status:
  * print percentage of progress
  * add size unit options
  * fi usage: also print free space from statfs
  * convert: copy full 64 bit timestamp from ext4 if availalble
  * check:
  * add ability to repair extent item generation
  * new option to remove leftovers from inode number cache (-o inode_cache)
  * check for already running exclusive operation (balance, device add/...)
    when starting one
  * preliminary json output support for 'device stats'
  * fixes:
  * subvolume set-default: id 0 correctly falls back to toplevel
  * receive: align internal buffer to allow fast CRC calculation
  * logical-resolve: distinguish -o subvol and bind mounts
  * build: new dependency libmount
  * other
  * doc fixes and updates
  * new tests
  * ci on gitlab temporarily disabled
  * debugging output enhancements</changelog>
  <changelog author="dsterba@suse.cz" date="1620561600">- Update to 5.12
  * libbtrfsutil: relicensed to LGPL v2.1+
  * mkfs: zoned mode support (kernel 5.12+)
  * fi df: show zone_unusable per profile type in zoned mode
  * fi usage: show total amount of zone_unusable
  * fi resize: fix message for exact size
  * image: fix warning and enlarge output file if necessary
  * core
  * refactor chunk allocator for more modes
  * implement zoned mode support: allocation and writes, sb log
  * crypto/hash refactoring and cleanups
  * refactoring and cleanups
  * other
  * test updates
  * CI updates
  * travis-ci integration disabled
  * docker images updated, more coverage
  * incomplete build support for Android removed
  * doc updates
  * chattr mode m for 'NOCOMPRESS"
  * swapfile used from fstab
  * how to add a new export to libbtrfsutil
  * update status of mount options since 5.9
- Update to 5.11.1
  * properly format checksums when a mismatch is reported
  * check: fix false alert on tree block crossing 64K page boundary
  * convert:
  * refuse to convert filesystem with 'needs_recovery'
  * update documentation to require fsck before conversion
  * balance convert: fix raid56 warning when converting other profiles
  * fi resize: improved summary
  * other
  * build: fix checks and autoconf defines
  * fix symlink paths for CI support scripts
  * updated tests</changelog>
  <changelog author="dsterba@suse.cz" date="1620820800">- Update to 5.12.1
  * build: fix missing symbols in libbtrfs
  * mkfs: check for minimal number of zones
  * check: fix warning about cache generation when free space tree is enabled
  * fix superblock write in zoned mode on 16K pages</changelog>
  <changelog author="camspam@redhyena.net" date="1623758400">- Fix build for leap
  * --disable-zstd if leap &lt; 42.3
  * --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1623758401">- revert previous change, unintentionally disables zstd on tumbleweed</changelog>
  <changelog author="camspam@redhyena.net" date="1623844800">- Add --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1626091200">- Update to 5.13
  * restore: remove loop checks for extent count and directory scan
  * inspect dump-tree: new options to print node (--csum-headers) and data
    checksums (--csum-items)
  * fi usage:
  * print stripe count for striped profiles
  * print zoned information: size, total unusable
  * mkfs: print note about sha256 accelerated module loading issue
  * check: ability to reset dev_item::bytes_used
  * fixes
  * detect zoned kernel support at run time too
  * exclusive op running check return value
  * fi resize: support cancel (kernel 5.14)
  * device remove: support cancel (kernel 5.14)
  * documentation about general topics
  * compression
  * zoned mode
  * storage model
  * hardware considerations
  * other
  * libbtrfsutil API overview
  * help text fixes and updates
  * hash speedtest measure time, cycles using perf and print throughput</changelog>
  <changelog author="rgoldwyn@suse.com" date="1628596800">- Update to 5.13.1
  * build: fix build on musl libc due to missing definition of NAME_MAX
  * check:
  * batch more work into one transaction when clearing v1 free space inodes
  * detect directoris with wrong number of links
  * libbtrfsutil: fix race between subvolume iterator and deletion
  * mkfs: be more specific about supported profiles for zoned device
  * other:
  * documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1631448000">- Update to 5.14
  * convert:
  * new option --uuid to copy, generate or set a given uuid
  * improve output
  * mkfs:
  * allow to create degenerate raid0 (on 1 device) and raid10 (on 2 devices)
  * image:
  * improved error messages
  * fix some alignment of restored image
  * subvol delete: allow to delete by id when path is not resolvable
  * check:
  * require alignment of nodesize for 64k page systems
  * detect and fix invalid block groups
  * libbtrfs (deprecated):
  * remove most exported symbols, leave only a few that are used by snapper
  * no version change (still 0.1)
  * remove btrfs-list.h, btrfsck.h
  * fixes:
  * reset generation of space v1 if v2 is used
  * fi us: don't wrongly report missing device size when partition is not readable
  * other:
  * build: experimental features
  * build: better detection of 64bit timestamp support for ext4
  * corrupt-block: block group items
  * new and updated tests
  * refactoring
  * experimental features:
  * new image dump format, with data</changelog>
  <changelog author="rgoldwyn@suse.com" date="1632744000">- Deleted upstreamed patches for upgrade:
  - fate#325871
  * 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch
  * 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch
  * 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch
  * 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch
  * 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch
  - btrfs-progs: check: fixup_extent_flags needs to deal with non-skinny
  metadata (bsc#1131334).
  * btrfs-progs-check-fixup_extent_flags-needs-to-deal-with-non-skinny-metadata.patch
  - btrfs-progs: check: fix segfault with -Q (bsc#1158560)
  * btrfs-progs-check-initialize-qgroup_item_count-in-ea.patch
  - Enqueue feature to wait for exclusive operation to finish (JSC#SLE-15234)
  * 0001-btrfs-progs-add-get_fsid_fd-for-getting-fsid-using-f.patch
  * 0002-btrfs-progs-add-sysfs-file-reading-helpers.patch
  * 0003-btrfs-progs-add-helpers-for-parsing-filesystem-exclu.patch
  * 0004-btrfs-progs-check-for-exclusive-operation-before-iss.patch
  * 0005-btrfs-progs-add-helper-to-check-or-wait-for-exclusiv.patch
  * 0006-btrfs-progs-add-enqueue-parameter-for-exclusive-ops.patch
  - Correct check_running_fs_exclop() return value (bsc#1184481)
  * btrfs-progs-Correct-check_running_fs_exclop-return-v.patch</changelog>
  <changelog author="nborisov@suse.com" date="1638360000">- Ignore multipath devices when probing devices for a btrfs filesystem (bsc#1192983)
  * 0001-btrfs-progs-Add-optional-dependency-on-libudev.patch
  * 0002-btrfs-progs-Ignore-devices-representing-paths-in-mul.patch
  * 0003-btrfs-progs-Add-fallback-code-for-path-device-ignore.patch</changelog>
  <changelog author="dmueller@suse.com" date="1642593600">- add python-rpm-macros (bsc#1194748)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1661774400">- Upstream behavior of btrfs compression=none (JSC#PED-1711)
  * btrfs-progs_props_dont_translate_value_of_compression_none.patch</changelog>
  <changelog author="tabraham@suse.com" date="1702987200">- btrfs-progs: fix defrag -c option parsing (bsc#1218029)
  * btrfs-progs-fix-defrag-c-option-parsing.patch</changelog>
</package>
<package pkgid="7deac2dbacb5a08875475eea790379e6b439b58a677ae08cef147c784fcc4f45" name="btrfsprogs-udev-rules" arch="noarch">
  <version epoch="0" ver="5.14" rel="150500.10.3.1"/>
  <changelog author="info@paolostivanin.com" date="1586174400">- Update to 5.6:
  * inspect logical-resolve: support LOGICAL_INO_V2 as new option '-o',
    helps advanced dedupe tools
  * inspect: user larger buffer (64K) for results
  * subvol delete: support deletion by id (requires kernel 5.7+)
  * dump-tree: new option --hide-names, replace any names
    (file, directory, subvolume, xattr) in the output with stubs
  * various fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1588161600">- Fix content of _dracutmodulesdir variable: this definitively does
  not belong to libexecdir.</changelog>
  <changelog author="dsterba@suse.cz" date="1589371200">- Update to 5.6.1:
  * print warning when multiple block group profiles exist, update 'fi usage'
    summary, add docs to maual page explaining the situation
  * build: optional support for libgcrypt or libsodium, providing hash
    implementations
  * updated docs</changelog>
  <changelog author="dsterba@suse.cz" date="1594036800">- Update to 5.7:
  * mkfs:
  * new option to enable features otherwise enabled at runtime, now
    implemented for quotas, 'mkfs.btrfs -R quota'
  * fix space accounting for small image, DUP and --rootdir
  * option -A removed
  * check: detect ranges with overlapping csum items
  * fi usage: report correct numbers when plain RAID56 profiles are used
  * convert: ensure the data chunks size never exceed device size
  * libbtrfsutil: update documentation regarding subvolume deletion
  * build: support libkcapi as implementation backend for cryptographic
    primitives
  * core: global options for verbosity (-v, -q), subcommands -v or -q are
    aliases and will continue to work but are considered deprecated,
    current command output is preserved to keep scripts working
  * other:
  * build warning fixes
  * btrfs-debugfs ported to python 3</changelog>
  <changelog author="dsterba@suse.cz" date="1603627200">- Update to 5.9:
  * mkfs:
  * switch default to single profile for multi-device filesystem, up to
    now it was raid0 that may not be simple to convert to some other profile
    as raid0 needs a workspace on all device for that
  * new option -R for run-time options (eg. mount time enabled), now
    understands free-space-tree
  * subvolume delete:
  * refuse to delete the default subvolume (kernel will not allow that but
    the error reason is not obvious)
  * warn on EPERM, eg. if send is on progress on the subvolume
  * convert:
  * fix 32bit overflows on large filesystems
  * improved error handling and error messages
  * check free space taking fragmentation into account
  * check:
  * detect and repair wrong inode generation
  * minor improvement in error reporting on roots
  * libbtrfsutils: follow main package versioning (5.9)
  * add pkg-config file definitions
  * python-btrfsutil: follow main package versioning (5.9)
  * inspect tree-stats: print node counts for each level, fanout
  * other:
  * docs:
  * remove obsolete mount options (alloc_start, subvolrootid)
  * deleting default subvolume is not permitted
  * updated or fixed tests
  * .editorconfig updates
  * move files to kernel-shared/
  * CI:
  * updated to use zstd 1.4.5
  * fix reiserfs build
  * more builds with asan, ubsan
  * sb-mod updates
  * build:
  * print .so versions of libraries in configure summary</changelog>
  <changelog author="lnussel@suse.de" date="1604491200">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dsterba@suse.cz" date="1615118400">- Update to 5.11
  * fix device path canonicalization for device mapper devices
  * receive: remove workaround for setting capabilities, all stable kernels
    have been patched
  * receive: fix duplicate mount path detection
  * rescue: new subcommand create-control-device
  * device stats: minor fix for plain text format output
  * build: detect if e2fsprogs support 64bit timestamps
  * build: drop libmount, required functionality has been reimplemented
  * mkfs: warn when raid56 is used
  * balance convert: warn when raid56 is used
  * other
  * new and updated tests
  * documentation updates
  * seeding device
  * raid56 status
  * CI updates
  * docker images for various distros
- Update to 5.10.1
  * static build works again
  * other:
  * add a way to test static binaries with the testsuite
  * clarify scrub docs
  * update dependencies, minimum version for libmount is 2.24, this may
    change in the future
- Update to 5.10
  * scrub status:
  * print percentage of progress
  * add size unit options
  * fi usage: also print free space from statfs
  * convert: copy full 64 bit timestamp from ext4 if availalble
  * check:
  * add ability to repair extent item generation
  * new option to remove leftovers from inode number cache (-o inode_cache)
  * check for already running exclusive operation (balance, device add/...)
    when starting one
  * preliminary json output support for 'device stats'
  * fixes:
  * subvolume set-default: id 0 correctly falls back to toplevel
  * receive: align internal buffer to allow fast CRC calculation
  * logical-resolve: distinguish -o subvol and bind mounts
  * build: new dependency libmount
  * other
  * doc fixes and updates
  * new tests
  * ci on gitlab temporarily disabled
  * debugging output enhancements</changelog>
  <changelog author="dsterba@suse.cz" date="1620561600">- Update to 5.12
  * libbtrfsutil: relicensed to LGPL v2.1+
  * mkfs: zoned mode support (kernel 5.12+)
  * fi df: show zone_unusable per profile type in zoned mode
  * fi usage: show total amount of zone_unusable
  * fi resize: fix message for exact size
  * image: fix warning and enlarge output file if necessary
  * core
  * refactor chunk allocator for more modes
  * implement zoned mode support: allocation and writes, sb log
  * crypto/hash refactoring and cleanups
  * refactoring and cleanups
  * other
  * test updates
  * CI updates
  * travis-ci integration disabled
  * docker images updated, more coverage
  * incomplete build support for Android removed
  * doc updates
  * chattr mode m for 'NOCOMPRESS"
  * swapfile used from fstab
  * how to add a new export to libbtrfsutil
  * update status of mount options since 5.9
- Update to 5.11.1
  * properly format checksums when a mismatch is reported
  * check: fix false alert on tree block crossing 64K page boundary
  * convert:
  * refuse to convert filesystem with 'needs_recovery'
  * update documentation to require fsck before conversion
  * balance convert: fix raid56 warning when converting other profiles
  * fi resize: improved summary
  * other
  * build: fix checks and autoconf defines
  * fix symlink paths for CI support scripts
  * updated tests</changelog>
  <changelog author="dsterba@suse.cz" date="1620820800">- Update to 5.12.1
  * build: fix missing symbols in libbtrfs
  * mkfs: check for minimal number of zones
  * check: fix warning about cache generation when free space tree is enabled
  * fix superblock write in zoned mode on 16K pages</changelog>
  <changelog author="camspam@redhyena.net" date="1623758400">- Fix build for leap
  * --disable-zstd if leap &lt; 42.3
  * --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1623758401">- revert previous change, unintentionally disables zstd on tumbleweed</changelog>
  <changelog author="camspam@redhyena.net" date="1623844800">- Add --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1626091200">- Update to 5.13
  * restore: remove loop checks for extent count and directory scan
  * inspect dump-tree: new options to print node (--csum-headers) and data
    checksums (--csum-items)
  * fi usage:
  * print stripe count for striped profiles
  * print zoned information: size, total unusable
  * mkfs: print note about sha256 accelerated module loading issue
  * check: ability to reset dev_item::bytes_used
  * fixes
  * detect zoned kernel support at run time too
  * exclusive op running check return value
  * fi resize: support cancel (kernel 5.14)
  * device remove: support cancel (kernel 5.14)
  * documentation about general topics
  * compression
  * zoned mode
  * storage model
  * hardware considerations
  * other
  * libbtrfsutil API overview
  * help text fixes and updates
  * hash speedtest measure time, cycles using perf and print throughput</changelog>
  <changelog author="rgoldwyn@suse.com" date="1628596800">- Update to 5.13.1
  * build: fix build on musl libc due to missing definition of NAME_MAX
  * check:
  * batch more work into one transaction when clearing v1 free space inodes
  * detect directoris with wrong number of links
  * libbtrfsutil: fix race between subvolume iterator and deletion
  * mkfs: be more specific about supported profiles for zoned device
  * other:
  * documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1631448000">- Update to 5.14
  * convert:
  * new option --uuid to copy, generate or set a given uuid
  * improve output
  * mkfs:
  * allow to create degenerate raid0 (on 1 device) and raid10 (on 2 devices)
  * image:
  * improved error messages
  * fix some alignment of restored image
  * subvol delete: allow to delete by id when path is not resolvable
  * check:
  * require alignment of nodesize for 64k page systems
  * detect and fix invalid block groups
  * libbtrfs (deprecated):
  * remove most exported symbols, leave only a few that are used by snapper
  * no version change (still 0.1)
  * remove btrfs-list.h, btrfsck.h
  * fixes:
  * reset generation of space v1 if v2 is used
  * fi us: don't wrongly report missing device size when partition is not readable
  * other:
  * build: experimental features
  * build: better detection of 64bit timestamp support for ext4
  * corrupt-block: block group items
  * new and updated tests
  * refactoring
  * experimental features:
  * new image dump format, with data</changelog>
  <changelog author="rgoldwyn@suse.com" date="1632744000">- Deleted upstreamed patches for upgrade:
  - fate#325871
  * 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch
  * 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch
  * 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch
  * 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch
  * 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch
  - btrfs-progs: check: fixup_extent_flags needs to deal with non-skinny
  metadata (bsc#1131334).
  * btrfs-progs-check-fixup_extent_flags-needs-to-deal-with-non-skinny-metadata.patch
  - btrfs-progs: check: fix segfault with -Q (bsc#1158560)
  * btrfs-progs-check-initialize-qgroup_item_count-in-ea.patch
  - Enqueue feature to wait for exclusive operation to finish (JSC#SLE-15234)
  * 0001-btrfs-progs-add-get_fsid_fd-for-getting-fsid-using-f.patch
  * 0002-btrfs-progs-add-sysfs-file-reading-helpers.patch
  * 0003-btrfs-progs-add-helpers-for-parsing-filesystem-exclu.patch
  * 0004-btrfs-progs-check-for-exclusive-operation-before-iss.patch
  * 0005-btrfs-progs-add-helper-to-check-or-wait-for-exclusiv.patch
  * 0006-btrfs-progs-add-enqueue-parameter-for-exclusive-ops.patch
  - Correct check_running_fs_exclop() return value (bsc#1184481)
  * btrfs-progs-Correct-check_running_fs_exclop-return-v.patch</changelog>
  <changelog author="nborisov@suse.com" date="1638360000">- Ignore multipath devices when probing devices for a btrfs filesystem (bsc#1192983)
  * 0001-btrfs-progs-Add-optional-dependency-on-libudev.patch
  * 0002-btrfs-progs-Ignore-devices-representing-paths-in-mul.patch
  * 0003-btrfs-progs-Add-fallback-code-for-path-device-ignore.patch</changelog>
  <changelog author="dmueller@suse.com" date="1642593600">- add python-rpm-macros (bsc#1194748)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1661774400">- Upstream behavior of btrfs compression=none (JSC#PED-1711)
  * btrfs-progs_props_dont_translate_value_of_compression_none.patch</changelog>
  <changelog author="tabraham@suse.com" date="1702987200">- btrfs-progs: fix defrag -c option parsing (bsc#1218029)
  * btrfs-progs-fix-defrag-c-option-parsing.patch</changelog>
</package>
<package pkgid="c61422f6839d38bd946acbf5c27612c2d99bd5c3c7d0ef20af8c3070f5dbf48c" name="c-ares" arch="src">
  <version epoch="0" ver="1.19.1" rel="150000.3.26.1"/>
  <changelog author="mrostecki@opensuse.org" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="tchvatal@suse.com" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="toddrme2178@gmail.com" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="adam.majer@suse.de" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="elimat@opensuse.org" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="tchvatal@suse.com" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="adam.majer@suse.de" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="adam.majer@suse.de" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="mrueckert@suse.de" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="dmueller@suse.com" date="1610798400">- update to 1.17.1:
    Travis: add iOS target built with CMake (#378)
    Issue #377 suggested that CMake builds for iOS with c-ares were broken. This PR adds an automatic Travis build for iOS CMake.
  - fix build
    External projects were using non-public header ares_dns.h, make public again (#376)
    It appears some outside projects were relying on macros in ares_dns.h, even
    though it doesn't appear that header was ever meant to be public.  That said,
    we don't want to break external integrators so we should distribute this header
    again.
  - note that so versioning has moved to configure.ac
  - note about 1.17.1
  - fix sed gone wrong
    autotools cleanup (#372)
  * buildconf: remove custom logic with autoreconf
- remove missing_header.patch (upstream)</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 1.17.2:
  Security:
  * When building c-ares with CMake, the RANDOM_FILE would not be set
    and therefore downgrade to the less secure random number generator
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause a crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as per
    RFC1035 5.1 to prevent spoofing follow-up
    (bsc#1188881, CVE-2021-3672)
  * Perform validation on hostnames to prevent possible XSS
    due to applications not performing valiation themselves
  Changes:
  * ares_malloc(0) is now defined behavior (returns NULL) rather than system-specific to catch edge cases
  Bug fixes:
  * Building tests should not force building of static libraries except on Windows
  * Relative headers must use double quotes to prevent pulling in a system library
  for details see,
  https://c-ares.haxx.se/changelog.html#1_17_2</changelog>
  <changelog author="adam.majer@suse.de" date="1631102400">- 5c995d5.patch: augment input validation on hostnames to allow _
  as part of DNS response (bsc#1190225)</changelog>
  <changelog author="adam.majer@suse.de" date="1631188800">- new upstream website
- drop multibuild - tests do not require static library anymore
- spec file cleanup
- drop sources that were re-added to upstream distibution
  (c-ares-config.cmake.in ares_dns.h libcares.pc.cmake)</changelog>
  <changelog author="adam.majer@suse.de" date="1638878400">- update to 1.18.1. Changes since 1.17.2:
  * Allow '/' as a valid character for a returned name for
    CNAME in-addr.arpa delegation
  * no longer forwards requests for localhost resolution per RFC6761
  * During a domain search, treat ARES_ENODATA as ARES_NXDOMAIN so
    that the search process will continue to the next domain
    in the search.
  * Provide ares_nameser.h as a public interface as needed by NodeJS
  * Add support for URI(Uniform Resource Identifier) records via
    ares_parse_uri_reply()
- disable unit tests for SLE12 since GCC compiler too old to build
  unit tests
- 5c995d5.patch: upstreamed
- disable-live-tests.patch: refreshed</changelog>
  <changelog author="mardnh@gmx.de" date="1674993600">- Update to version 1.19.0
  Security:
  * Low. Stack overflow in ares_set_sortlist() which is used
    during c-ares initialization and typically provided by an
    administrator and not an end user.
    (bsc#1208067, CVE-2022-4904)
  Changes:
  * Add ARES_OPT_HOSTS_FILE similar to ARES_OPT_RESOLVCONF for
    specifying a custom hosts file location.
  Bug fixes:
  * Fix memory leak in reading /etc/hosts when using localhost
    fallback.
  * Fix chain building c-ares when libresolv is already included by
    another project.
  * File lookup should not immediately abort as there may be other
    tries due to search criteria.
  * Asterisks should be allowed in host validation as CNAMEs may
    reference wildcard domains.
  * AutoTools build system referenced bad STDC_HEADERS macro.
  * Even if one address class returns a failure for
    ares_getaddrinfo() we should still return the results we have.
  * Fix ares_getaddrinfo() numerical address resolution with
    AF_UNSPEC
  * Fix tools and help information.
  * Various documentation fixes and cleanups.
  * Add include guards to ares_data.h
  * c-ares could try to exceed maximum number of iovec entries
    supported by system.
  * The RFC6761 6.3 states localhost subdomains must be offline too</changelog>
  <changelog author="adam.majer@suse.de" date="1684756800">- Update to version 1.19.1
  Security:
  * CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
  * CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
  * CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
  * CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
  Bug fixes:
  * Fix uninitialized memory warning in test
  * ares_getaddrinfo() should allow a port of 0
  * Fix memory leak in ares_send() on error
  * Fix comment style in ares_data.h
  * Fix typo in ares_init_options.3
  * Sync ax_pthread.m4 with upstream
  * Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support</changelog>
  <changelog author="adam.majer@suse.de" date="1708948800">- CVE-2024-25629.patch: fix out of bounds read in ares__read_line()
  (bsc#1220279, CVE-2024-25629)</changelog>
</package>
<package pkgid="bb772de4cd443befbdef068d4e1969be8fb85f532a49bcd0006eaab907e10273" name="ca-certificates" arch="noarch">
  <version epoch="0" ver="2+git20240416.98ae794" rel="150300.4.3.3"/>
  <changelog author="ledest@gmail.com" date="1415448000">- fix bashism in postun script</changelog>
  <changelog author="lnussel@suse.de" date="1427198400">- Update to version 2+git20150324.e3ee392:
  + p11-kit 0.23.1 supports pem-directory-hash now
- use service file to generate tarball</changelog>
  <changelog author="lnussel@suse.de" date="1427284800">- require p11-kit-tools &gt;= 0.23.1</changelog>
  <changelog author="lnussel@suse.de" date="1447243200">- Update to version 2+git20151110.c15593c:
  + set proper umask (boo#948724)</changelog>
  <changelog author="kukuk@suse.de" date="1497873600">- Run update-ca-certificate by systemd unit when the content of
  one of the paths changes. Needed for read-only root and/or
  transactional updates.</changelog>
  <changelog author="lnussel@suse.de" date="1502107200">- Update to version 2+git20170807.10b2785:
  * Check TRANSACTIONAL_UPDATE is set (boo#1045942)
  * Add systemd units</changelog>
  <changelog author="kukuk@suse.de" date="1511438400">- Don't require systemd, since we could be used in environments
  like container images, where we don't have systemd. If systemd
  is installed the systemd units will be used, else they are not
  needed.</changelog>
  <changelog author="kukuk@suse.com" date="1512734400">- Re-add systemd requires, else package will be installed to early
  and services never enabled [bsc#1071776].</changelog>
  <changelog author="kukuk@suse.de" date="1513252800">- Revert last change since we fixed systemd-preset-branding and
  this requires is no longer needed.</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="jsikes@suse.de" date="1537358400">- Changed "openssl" requirement to "openssl(cli)"
  * (bsc#1101470)</changelog>
  <changelog author="lnussel@suse.de" date="1615291200">- backport bash rewrite from Factory to make sure to trigger in
  transactional mode (boo#1179884)</changelog>
  <changelog author="lnussel@suse.de" date="1616068800">- openssl is no longer required but coreutils and findutils are
  (boo#1183680). Keep openssl(cli) at runtime for now nevertheless as this
  package might be the only one pulling it in.</changelog>
  <changelog author="lnussel@suse.com" date="1713268800">- Update to version 2+git20240416.98ae794 (bsc#1221184):
  * Use flock to serialize calls (boo#1188500)
  * Make certbundle.run container friendly
  * Create /var/lib/ca-certificates if needed</changelog>
</package>
<package pkgid="6354532e7f31b9d41b538a79f9abe36bec9eb587097d1c5093e1dbaea233a42d" name="ca-certificates" arch="src">
  <version epoch="0" ver="2+git20240416.98ae794" rel="150300.4.3.3"/>
  <changelog author="lnussel@suse.de" date="1401883200">- don't keep certificates with marker (bnc#875647)</changelog>
  <changelog author="lnussel@suse.de" date="1403524800">- fix directory permissions for real this time (bnc#871639)</changelog>
  <changelog author="meissner@suse.com" date="1405598400">- clarify the start order of the generators, as certbundle.run
  semi-depends on etc_ssl.run via a timestamp. (bnc#883386)</changelog>
  <changelog author="lnussel@suse.de" date="1406721600">- removed the version in the Obsoletes. The package in SLE11 got
  version updated (bnc#887099).</changelog>
  <changelog author="lnussel@suse.de" date="1407153600">- add p11 kit header to set label of migrated certificates to the
  file name of the previous one (bnc#890205)</changelog>
  <changelog author="lnussel@suse.de" date="1407240000">- use rpm -qf to determine if a ssl cert is owned by some other
  package and therefore doesn't need to be migrated (related to
  bnc#890205).</changelog>
  <changelog author="ledest@gmail.com" date="1415448000">- fix bashism in postun script</changelog>
  <changelog author="lnussel@suse.de" date="1427198400">- Update to version 2+git20150324.e3ee392:
  + p11-kit 0.23.1 supports pem-directory-hash now
- use service file to generate tarball</changelog>
  <changelog author="lnussel@suse.de" date="1427284800">- require p11-kit-tools &gt;= 0.23.1</changelog>
  <changelog author="lnussel@suse.de" date="1447243200">- Update to version 2+git20151110.c15593c:
  + set proper umask (boo#948724)</changelog>
  <changelog author="kukuk@suse.de" date="1497873600">- Run update-ca-certificate by systemd unit when the content of
  one of the paths changes. Needed for read-only root and/or
  transactional updates.</changelog>
  <changelog author="lnussel@suse.de" date="1502107200">- Update to version 2+git20170807.10b2785:
  * Check TRANSACTIONAL_UPDATE is set (boo#1045942)
  * Add systemd units</changelog>
  <changelog author="kukuk@suse.de" date="1511438400">- Don't require systemd, since we could be used in environments
  like container images, where we don't have systemd. If systemd
  is installed the systemd units will be used, else they are not
  needed.</changelog>
  <changelog author="kukuk@suse.com" date="1512734400">- Re-add systemd requires, else package will be installed to early
  and services never enabled [bsc#1071776].</changelog>
  <changelog author="kukuk@suse.de" date="1513252800">- Revert last change since we fixed systemd-preset-branding and
  this requires is no longer needed.</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="jsikes@suse.de" date="1537358400">- Changed "openssl" requirement to "openssl(cli)"
  * (bsc#1101470)</changelog>
  <changelog author="lnussel@suse.de" date="1615291200">- backport bash rewrite from Factory to make sure to trigger in
  transactional mode (boo#1179884)</changelog>
  <changelog author="lnussel@suse.de" date="1616068800">- openssl is no longer required but coreutils and findutils are
  (boo#1183680). Keep openssl(cli) at runtime for now nevertheless as this
  package might be the only one pulling it in.</changelog>
  <changelog author="lnussel@suse.com" date="1713268800">- Update to version 2+git20240416.98ae794 (bsc#1221184):
  * Use flock to serialize calls (boo#1188500)
  * Make certbundle.run container friendly
  * Create /var/lib/ca-certificates if needed</changelog>
</package>
<package pkgid="0fb3621efd78440cf1c03ae58e92810a0060ea3177daa54f0f67c74984a71e99" name="ca-certificates-mozilla" arch="noarch">
  <version epoch="0" ver="2.68" rel="150200.33.1"/>
  <changelog author="kukuk@suse.de" date="1521547200">-  Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store. (bsc#1100415)
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sağlayıcısı_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
  <changelog author="meissner@suse.com" date="1534420800">- updated to 2.26 state of the Mozilla NSS Certificate store. (bsc#1104780)
  - removed server auth
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - remove CA
  - ComSign CA
  - added new CA
  - GlobalSign</changelog>
  <changelog author="meissner@suse.com" date="1547726400">- updated to 2.30 state of the Mozilla NSS Certificate store. (bsc#1121446)
- Removed CAs:
  - AC Raiz Certicamara S.A.
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - Visa eCommerce Root
- Added Root CAs:
  - Certigna Root CA (email and server auth)
  - GTS Root R1 (server auth)
  - GTS Root R2 (server auth)
  - GTS Root R3 (server auth)
  - GTS Root R4 (server auth)
  - OISTE WISeKey Global Root GC CA (email and server auth)
  - UCA Extended Validation Root (server auth)
  - UCA Global G2 Root (email and server auth)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1564920000">- update to 2.34 state of the Mozilla NSS Certificate store (bsc#1144169)
- Removed CAs:
  - Certinomis - Root CA
- includes added root CAs from the 2.32 version:
  - emSign ECC Root CA - C3 (email and server auth)
  - emSign ECC Root CA - G3 (email and server auth)
  - emSign Root CA - C1 (email and server auth)
  - emSign Root CA - G1 (email and server auth)
  - Hongkong Post Root CA 3 (server auth)</changelog>
  <changelog author="lnussel@suse.de" date="1573560000">- export correct p11kit trust attributes so Firefox detects built in
  certificates (boo#1154871). Courtesy of Fedora.</changelog>
  <changelog author="lnussel@suse.de" date="1576670400">- make sure p11-kit with patches is installed on SLE (boo#1154871)</changelog>
  <changelog author="meissner@suse.com" date="1579003200">- update to 2.40 state of the Mozilla NSS Certificate store (bsc#1160160)
- removed:
  - Certplus Class 2 Primary CA
  - Deutsche Telekom Root CA 2
  - CN=Swisscom Root CA 2
  - UTN-USERFirst-Client Authentication and Email
- added:
  - Entrust Root Certification Authority - G4</changelog>
  <changelog author="meissner@suse.com" date="1585224000">- also run update-ca-certificates in %posttrans</changelog>
  <changelog author="meissner@suse.com" date="1596024000">- update to 2.42 state of the Mozilla NSS Certificate store (bsc#1174673)
  Removed CAs:
  - AddTrust External CA Root
  - AddTrust Class 1 CA Root
  - LuxTrust Global Root 2
  - Staat der Nederlanden Root CA - G2
  - Symantec Class 1 Public Primary Certification Authority - G4
  - Symantec Class 2 Public Primary Certification Authority - G4
  - VeriSign Class 3 Public Primary Certification Authority - G3
  Added CAs:
  - certSIGN Root CA G2
  - e-Szigno Root CA 2017
  - Microsoft ECC Root Certificate Authority 2017
  - Microsoft RSA Root Certificate Authority 2017</changelog>
  <changelog author="meissner@suse.com" date="1603108800">- Updated to 2.44 state of the Mozilla NSS Certificate store (bsc#1177864)
- Removed CAs:
  - EE Certification Centre Root CA
  - Taiwan GRCA
- Added CAs:
  - Trustwave Global Certification Authority
  - Trustwave Global ECC P256 Certification Authority
  - Trustwave Global ECC P384 Certification Authority</changelog>
  <changelog author="meissner@suse.com" date="1612872000">- Updated to 2.46 state of the Mozilla NSS Certificate store (bsc#1181994)
- Added new root CAs:
  - NAVER Global Root Certification Authority
- Removed old root CA:
  - GeoTrust Global CA
  - GeoTrust Primary Certification Authority
  - GeoTrust Primary Certification Authority - G3
  - GeoTrust Universal CA
  - GeoTrust Universal CA 2
  - thawte Primary Root CA
  - thawte Primary Root CA - G2
  - thawte Primary Root CA - G3
  - VeriSign Class 3 Public Primary Certification Authority - G4
  - VeriSign Class 3 Public Primary Certification Authority - G5</changelog>
  <changelog author="meissner@suse.com" date="1632484800">- remove the DST_Root_CA_X3.pem trust, as it expires september 30th 2021.
  (bsc#1190858)</changelog>
  <changelog author="meissner@suse.com" date="1633176000">- updated to 2.50 state of the Mozilla NSS Certificate store (bsc#1188006)
- Added CAs:
  + HARICA Client ECC Root CA 2021
  + HARICA Client RSA Root CA 2021
  + HARICA TLS ECC Root CA 2021
  + HARICA TLS RSA Root CA 2021
  + TunTrust Root CA</changelog>
  <changelog author="meissner@suse.com" date="1651492800">- Updated to 2.54 state of Mozilla SSL root CAs (bsc#1199079)
  Added:
  - Autoridad de Certificacion Firmaprofesional CIF A62634068
  - D-TRUST BR Root CA 1 2020
  - D-TRUST EV Root CA 1 2020
  - GlobalSign ECC Root CA R4
  - GTS Root R1
  - GTS Root R2
  - GTS Root R3
  - GTS Root R4
  - HiPKI Root CA - G1
  - ISRG Root X2
  - Telia Root CA v2
  - vTrus ECC Root CA
  - vTrus Root CA
  Removed:
  - Cybertrust Global Root
  - DST Root CA X3
  - DigiNotar PKIoverheid CA Organisatie - G2
  - GlobalSign ECC Root CA R4
  - GlobalSign Root CA R2
  - GTS Root R1
  - GTS Root R2
  - GTS Root R3
  - GTS Root R4</changelog>
  <changelog author="meissner@suse.com" date="1661774400">- Updated to 2.56 state of Mozilla SSL root CAs (bsc#1202868)
  Added:
  - Certainly Root E1
  - Certainly Root R1
  - DigiCert SMIME ECC P384 Root G5
  - DigiCert SMIME RSA4096 Root G5
  - DigiCert TLS ECC P384 Root G5
  - DigiCert TLS RSA4096 Root G5
  - E-Tugra Global Root CA ECC v3
  - E-Tugra Global Root CA RSA v3
  Removed:
  - Hellenic Academic and Research Institutions RootCA 2011</changelog>
  <changelog author="meissner@suse.com" date="1671710400">- Updated to 2.60 state of Mozilla SSL root CAs (bsc#1206622)
  Removed CAs:
  - Global Chambersign Root
  - EC-ACC
  - Network Solutions Certificate Authority
  - Staat der Nederlanden EV Root CA
  - SwissSign Platinum CA - G2
  Added CAs:
  - DIGITALSIGN GLOBAL ROOT ECDSA CA
  - DIGITALSIGN GLOBAL ROOT RSA CA
  - Security Communication ECC RootCA1
  - Security Communication RootCA3
  Changed trust:
  - TrustCor certificates only trusted up to Nov 30 (bsc#1206212)
- Removed CAs (bsc#1206212) as most code does not handle "valid before nov 30 2022"
  and it is not clear how many certs were issued for SSL middleware by TrustCor:
  - TrustCor RootCert CA-1
  - TrustCor RootCert CA-2
  - TrustCor ECA-1
  Patch: remove-trustcor.patch</changelog>
  <changelog author="meissner@suse.com" date="1692014400">- Updated to 2.62 state of Mozilla SSL root CAs (bsc#1214248)
  Added:
  - Atos TrustedRoot Root CA ECC G2 2020
  - Atos TrustedRoot Root CA ECC TLS 2021
  - Atos TrustedRoot Root CA RSA G2 2020
  - Atos TrustedRoot Root CA RSA TLS 2021
  - BJCA Global Root CA1
  - BJCA Global Root CA2
  - LAWtrust Root CA2 (4096)
  - Sectigo Public Email Protection Root E46
  - Sectigo Public Email Protection Root R46
  - Sectigo Public Server Authentication Root E46
  - Sectigo Public Server Authentication Root R46
  - SSL.com Client ECC Root CA 2022
  - SSL.com Client RSA Root CA 2022
  - SSL.com TLS ECC Root CA 2022
  - SSL.com TLS RSA Root CA 2022
  Removed CAs:
  - Chambers of Commerce Root
  - E-Tugra Certification Authority
  - E-Tugra Global Root CA ECC v3
  - E-Tugra Global Root CA RSA v3
  - Hongkong Post Root CA 1</changelog>
  <changelog author="meissner@suse.com" date="1708948800">- Updated to 2.66 state of Mozilla SSL root CAs (bsc#1220356)
  Added:
  - CommScope Public Trust ECC Root-01
  - CommScope Public Trust ECC Root-02
  - CommScope Public Trust RSA Root-01
  - CommScope Public Trust RSA Root-02
  - D-Trust SBR Root CA 1 2022
  - D-Trust SBR Root CA 2 2022
  - Telekom Security SMIME ECC Root 2021
  - Telekom Security SMIME RSA Root 2023
  - Telekom Security TLS ECC Root 2020
  - Telekom Security TLS RSA Root 2023
  - TrustAsia Global Root CA G3
  - TrustAsia Global Root CA G4
  Removed:
  - Autoridad de Certificacion Firmaprofesional CIF A62634068
  - Chambers of Commerce Root - 2008
  - Global Chambersign Root - 2008
  - Security Communication Root CA
  - Symantec Class 1 Public Primary Certification Authority - G6
  - Symantec Class 2 Public Primary Certification Authority - G6
  - TrustCor ECA-1
  - TrustCor RootCert CA-1
  - TrustCor RootCert CA-2
  - VeriSign Class 1 Public Primary Certification Authority - G3
  - VeriSign Class 2 Public Primary Certification Authority - G3
- remove-trustcor.patch: removed, now upstream
- do a versioned obsoletes of "openssl-certs".</changelog>
  <changelog author="meissner@suse.com" date="1720440000">- Updated to 2.68 state of Mozilla SSL root CAs (bsc#1227525)
  - Added: FIRMAPROFESIONAL CA ROOT-A WEB
  - Distrust: GLOBALTRUST 2020</changelog>
</package>
<package pkgid="8a132b673f0e7590cb1fe65521f13822c9ccefc8ef3b0b9878f67280670d21af" name="ca-certificates-mozilla" arch="src">
  <version epoch="0" ver="2.68" rel="150200.33.1"/>
  <changelog author="kukuk@suse.de" date="1521547200">-  Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store. (bsc#1100415)
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sağlayıcısı_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
  <changelog author="meissner@suse.com" date="1534420800">- updated to 2.26 state of the Mozilla NSS Certificate store. (bsc#1104780)
  - removed server auth
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - remove CA
  - ComSign CA
  - added new CA
  - GlobalSign</changelog>
  <changelog author="meissner@suse.com" date="1547726400">- updated to 2.30 state of the Mozilla NSS Certificate store. (bsc#1121446)
- Removed CAs:
  - AC Raiz Certicamara S.A.
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - Visa eCommerce Root
- Added Root CAs:
  - Certigna Root CA (email and server auth)
  - GTS Root R1 (server auth)
  - GTS Root R2 (server auth)
  - GTS Root R3 (server auth)
  - GTS Root R4 (server auth)
  - OISTE WISeKey Global Root GC CA (email and server auth)
  - UCA Extended Validation Root (server auth)
  - UCA Global G2 Root (email and server auth)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1564920000">- update to 2.34 state of the Mozilla NSS Certificate store (bsc#1144169)
- Removed CAs:
  - Certinomis - Root CA
- includes added root CAs from the 2.32 version:
  - emSign ECC Root CA - C3 (email and server auth)
  - emSign ECC Root CA - G3 (email and server auth)
  - emSign Root CA - C1 (email and server auth)
  - emSign Root CA - G1 (email and server auth)
  - Hongkong Post Root CA 3 (server auth)</changelog>
  <changelog author="lnussel@suse.de" date="1573560000">- export correct p11kit trust attributes so Firefox detects built in
  certificates (boo#1154871). Courtesy of Fedora.</changelog>
  <changelog author="lnussel@suse.de" date="1576670400">- make sure p11-kit with patches is installed on SLE (boo#1154871)</changelog>
  <changelog author="meissner@suse.com" date="1579003200">- update to 2.40 state of the Mozilla NSS Certificate store (bsc#1160160)
- removed:
  - Certplus Class 2 Primary CA
  - Deutsche Telekom Root CA 2
  - CN=Swisscom Root CA 2
  - UTN-USERFirst-Client Authentication and Email
- added:
  - Entrust Root Certification Authority - G4</changelog>
  <changelog author="meissner@suse.com" date="1585224000">- also run update-ca-certificates in %posttrans</changelog>
  <changelog author="meissner@suse.com" date="1596024000">- update to 2.42 state of the Mozilla NSS Certificate store (bsc#1174673)
  Removed CAs:
  - AddTrust External CA Root
  - AddTrust Class 1 CA Root
  - LuxTrust Global Root 2
  - Staat der Nederlanden Root CA - G2
  - Symantec Class 1 Public Primary Certification Authority - G4
  - Symantec Class 2 Public Primary Certification Authority - G4
  - VeriSign Class 3 Public Primary Certification Authority - G3
  Added CAs:
  - certSIGN Root CA G2
  - e-Szigno Root CA 2017
  - Microsoft ECC Root Certificate Authority 2017
  - Microsoft RSA Root Certificate Authority 2017</changelog>
  <changelog author="meissner@suse.com" date="1603108800">- Updated to 2.44 state of the Mozilla NSS Certificate store (bsc#1177864)
- Removed CAs:
  - EE Certification Centre Root CA
  - Taiwan GRCA
- Added CAs:
  - Trustwave Global Certification Authority
  - Trustwave Global ECC P256 Certification Authority
  - Trustwave Global ECC P384 Certification Authority</changelog>
  <changelog author="meissner@suse.com" date="1612872000">- Updated to 2.46 state of the Mozilla NSS Certificate store (bsc#1181994)
- Added new root CAs:
  - NAVER Global Root Certification Authority
- Removed old root CA:
  - GeoTrust Global CA
  - GeoTrust Primary Certification Authority
  - GeoTrust Primary Certification Authority - G3
  - GeoTrust Universal CA
  - GeoTrust Universal CA 2
  - thawte Primary Root CA
  - thawte Primary Root CA - G2
  - thawte Primary Root CA - G3
  - VeriSign Class 3 Public Primary Certification Authority - G4
  - VeriSign Class 3 Public Primary Certification Authority - G5</changelog>
  <changelog author="meissner@suse.com" date="1632484800">- remove the DST_Root_CA_X3.pem trust, as it expires september 30th 2021.
  (bsc#1190858)</changelog>
  <changelog author="meissner@suse.com" date="1633176000">- updated to 2.50 state of the Mozilla NSS Certificate store (bsc#1188006)
- Added CAs:
  + HARICA Client ECC Root CA 2021
  + HARICA Client RSA Root CA 2021
  + HARICA TLS ECC Root CA 2021
  + HARICA TLS RSA Root CA 2021
  + TunTrust Root CA</changelog>
  <changelog author="meissner@suse.com" date="1651492800">- Updated to 2.54 state of Mozilla SSL root CAs (bsc#1199079)
  Added:
  - Autoridad de Certificacion Firmaprofesional CIF A62634068
  - D-TRUST BR Root CA 1 2020
  - D-TRUST EV Root CA 1 2020
  - GlobalSign ECC Root CA R4
  - GTS Root R1
  - GTS Root R2
  - GTS Root R3
  - GTS Root R4
  - HiPKI Root CA - G1
  - ISRG Root X2
  - Telia Root CA v2
  - vTrus ECC Root CA
  - vTrus Root CA
  Removed:
  - Cybertrust Global Root
  - DST Root CA X3
  - DigiNotar PKIoverheid CA Organisatie - G2
  - GlobalSign ECC Root CA R4
  - GlobalSign Root CA R2
  - GTS Root R1
  - GTS Root R2
  - GTS Root R3
  - GTS Root R4</changelog>
  <changelog author="meissner@suse.com" date="1661774400">- Updated to 2.56 state of Mozilla SSL root CAs (bsc#1202868)
  Added:
  - Certainly Root E1
  - Certainly Root R1
  - DigiCert SMIME ECC P384 Root G5
  - DigiCert SMIME RSA4096 Root G5
  - DigiCert TLS ECC P384 Root G5
  - DigiCert TLS RSA4096 Root G5
  - E-Tugra Global Root CA ECC v3
  - E-Tugra Global Root CA RSA v3
  Removed:
  - Hellenic Academic and Research Institutions RootCA 2011</changelog>
  <changelog author="meissner@suse.com" date="1671710400">- Updated to 2.60 state of Mozilla SSL root CAs (bsc#1206622)
  Removed CAs:
  - Global Chambersign Root
  - EC-ACC
  - Network Solutions Certificate Authority
  - Staat der Nederlanden EV Root CA
  - SwissSign Platinum CA - G2
  Added CAs:
  - DIGITALSIGN GLOBAL ROOT ECDSA CA
  - DIGITALSIGN GLOBAL ROOT RSA CA
  - Security Communication ECC RootCA1
  - Security Communication RootCA3
  Changed trust:
  - TrustCor certificates only trusted up to Nov 30 (bsc#1206212)
- Removed CAs (bsc#1206212) as most code does not handle "valid before nov 30 2022"
  and it is not clear how many certs were issued for SSL middleware by TrustCor:
  - TrustCor RootCert CA-1
  - TrustCor RootCert CA-2
  - TrustCor ECA-1
  Patch: remove-trustcor.patch</changelog>
  <changelog author="meissner@suse.com" date="1692014400">- Updated to 2.62 state of Mozilla SSL root CAs (bsc#1214248)
  Added:
  - Atos TrustedRoot Root CA ECC G2 2020
  - Atos TrustedRoot Root CA ECC TLS 2021
  - Atos TrustedRoot Root CA RSA G2 2020
  - Atos TrustedRoot Root CA RSA TLS 2021
  - BJCA Global Root CA1
  - BJCA Global Root CA2
  - LAWtrust Root CA2 (4096)
  - Sectigo Public Email Protection Root E46
  - Sectigo Public Email Protection Root R46
  - Sectigo Public Server Authentication Root E46
  - Sectigo Public Server Authentication Root R46
  - SSL.com Client ECC Root CA 2022
  - SSL.com Client RSA Root CA 2022
  - SSL.com TLS ECC Root CA 2022
  - SSL.com TLS RSA Root CA 2022
  Removed CAs:
  - Chambers of Commerce Root
  - E-Tugra Certification Authority
  - E-Tugra Global Root CA ECC v3
  - E-Tugra Global Root CA RSA v3
  - Hongkong Post Root CA 1</changelog>
  <changelog author="meissner@suse.com" date="1708948800">- Updated to 2.66 state of Mozilla SSL root CAs (bsc#1220356)
  Added:
  - CommScope Public Trust ECC Root-01
  - CommScope Public Trust ECC Root-02
  - CommScope Public Trust RSA Root-01
  - CommScope Public Trust RSA Root-02
  - D-Trust SBR Root CA 1 2022
  - D-Trust SBR Root CA 2 2022
  - Telekom Security SMIME ECC Root 2021
  - Telekom Security SMIME RSA Root 2023
  - Telekom Security TLS ECC Root 2020
  - Telekom Security TLS RSA Root 2023
  - TrustAsia Global Root CA G3
  - TrustAsia Global Root CA G4
  Removed:
  - Autoridad de Certificacion Firmaprofesional CIF A62634068
  - Chambers of Commerce Root - 2008
  - Global Chambersign Root - 2008
  - Security Communication Root CA
  - Symantec Class 1 Public Primary Certification Authority - G6
  - Symantec Class 2 Public Primary Certification Authority - G6
  - TrustCor ECA-1
  - TrustCor RootCert CA-1
  - TrustCor RootCert CA-2
  - VeriSign Class 1 Public Primary Certification Authority - G3
  - VeriSign Class 2 Public Primary Certification Authority - G3
- remove-trustcor.patch: removed, now upstream
- do a versioned obsoletes of "openssl-certs".</changelog>
  <changelog author="meissner@suse.com" date="1720440000">- Updated to 2.68 state of Mozilla SSL root CAs (bsc#1227525)
  - Added: FIRMAPROFESIONAL CA ROOT-A WEB
  - Distrust: GLOBALTRUST 2020</changelog>
</package>
<package pkgid="27df5f5e20a7507d4d3aceb8a75f537672423f5b6785e42d84e8bcc723b4c964" name="cairo" arch="src">
  <version epoch="0" ver="1.16.0" rel="150400.11.3.1"/>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups; update summaries.
  Remove useless --with-pic which is only for static libs.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Add cairo-pdf-fixes.patch: Three minor pdf fixes from upstream
  git (fdo#99630).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Rebase cairo-pdf-fixes.patch: Add commit to fix fdo#100029.</changelog>
  <changelog author="alarrosa@suse.com" date="1496836800">- Add cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff to
  fix a segfault in get_bitmap_surface due to malformed font
  (bsc#1036789, fdo#100763, CVE-2017-7475).</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.15.6:
  + Detect if variable fonts have synthesized bold/italic or
    non-default variants, and use a fallback font where needed.
  + Restore MacOSX 10.4 support. Cairo had dropped 10.4 support
    when moving to the CoreText API.  Now we automatically detect
    which API to use via dynamic linking, so can resume supporting
    this older version of MacOSX.
  + Fix error reporting in the xcb backend if fallback fails.
    Instead of returning NULL when the X11 server can't do some
    operation, return a surface in an error state.
  + Call XSync in the xlib backend before setting the error handler
    to ignore errors for certain requests, to make sure all pending
    errors are handled first.
  + Fix text-glyph-range for quartz-font.  Use 0xFFFF instead of 0
    for invalid index tracking.
  + Fix handling of Supplementary Multilingual Plane (SMP) Unicode
    characters in quartz-font.
  + Fix various issues in the drm backend including updating API
    usage and general code cleanup.
  + Clarify documentation regarding device scale inheritance and
    the units used in cairo_surface_create_similar_image
    (fdo#99094).
- Drop cairo-pdf-fixes.patch: Fixed upstream.
- Add cairo-fix-off-by-one-check.patch: Fix off by one check in
  cairo-image-info.c (fdo#101427).</changelog>
  <changelog author="alarrosa@suse.com" date="1497960000">- Add 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch to
  fix a segfault when using &gt;4GB images since int values were used
  for pointer operations (bsc#1007255, fdo#98165, CVE-2016-9082).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504094400">- Update to version 1.15.8:
  + This small snapshot provides new colored emoji glyph support,
    and a handful of minor fixes. For a complete log of changes,
    please see
    http://cairographics.org/releases/ChangeLog.1.15.8
  + Features and Enhancements: Support colored emoji glyphs, stored
    as PNG images in OpenType fonts.
  + Bug Fixes:
  - pdf:
    . Fix internal links pointing to other pages, by
    pre-calculating page heights so that link positions can be
    calculated more accurately.
    . Don't emit /PageLabel dict when no labels defined.
  - image: Fix crash on negative lengths.
  - win32: Fix initialization of mutexes for static builds.
  - font:
    . Fix color font loading on big-endian systems.
    . Fix color font support infinite-loop with empty glyphs.
  - Fix off by one check in cairo-image-info.c.
- Drop cairo-fix-off-by-one-check.patch: Fixed upstream.
- Run spec-cleaner, modernize spec.
- Rename 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch
  to cairo-image-prevent-invalid-ptr-access.patch.
- Pass enable-gtk-doc instead of disable-gtk-doc to configure, we
  already have the gtk-doc BuildRequires in place so I can only
  assume that this was an honest error.</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig(gl) and pkgconfig(egl) instead of Mesa-devel.
  * The pkgconfig(gl) and pkgconfig(egl) are what cairo really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523534400">- Update to version 1.15.12:
  + The main focus for this release is the addition of Variable
    Font support. Variable fonts are single font files with various
    typography characteristics, such as weight or slant, that users
    of the font can adjust between two points. Effectively this
    enables a single font to behave as multiple fonts.
  + The Skia backend is disabled in this release, due to severe
    bitrot, and will be removed in future releases. Contact the
    cairo team if you have a need of this backend.
  + Features and Enhancements:
  - Variable font support.
  - Skia backend is disabled.
  + API Changes: cairo_font_options_get_variations() and
    cairo_font_options_set_variations() are added.
  + Bugs fixed:
  - Fix errors in csi-trace --help and --version options.
  - Fix a 'memory leak' in the image compositor, with
    pixman_glyph_cache_t.
  - Fix access of uninitialized memory found by valgrind
    (fdo#91271).
  - Fix improper initialization of memory in
    _cairo_ft_font_face_create_for_pattern() (fdo#105084).
  - Fix multi-monitor virtual desktop with negative coords on
    Win32 (fdo#100793).
  - Fix issues occuring with older FreeType versions.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524571200">- Add cairo-fix-assertion-failure-in-freetype-backend.patch: Fix
  assertion failure in the freetype backend (fdo#105746).</changelog>
  <changelog author="qzheng@suse.com" date="1529496000">- Add cairo-CVE-2017-9814.patch: Replace malloc with _cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538740800">- Update to version 1.15.14:
  + Features and Enhancements:
  - Add more FreeeType font color conversions to support
    COLR/CPAL.
  - Update test reference images against current pixman.
  + Bugs fixed:
  - Fix crash when rendering Microsoft's Segoe UI Emoji Regular
    font.
  - Fix build breakage with glesv3 enabled due to non-existant
    glesv3.pc.
  - Fix memory leaks found by Coverity.
  - Fix incorrect null ptr handling found by Coverity.
  - Fix test compilation when font-config is disabled.
  - Use _cairo_malloc instead of malloc
    (fdo#101547, CVE-2017-9814).
  - Fix assertion failure in the freetype backend (fdo#105746).
- Drop upstream fixed patches:
  + cairo-fix-assertion-failure-in-freetype-backend.patch.
  + cairo-CVE-2017-9814.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540123200">- Update to version 1.16.0:
  + test: Free resources in pdf2png.
  + Drop skia backend.
  + Revert "Correctly decode Adobe CMYK JPEGs in PDF export".</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567598400">- Add 2 upstream bug fix patches:
  + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch:
    ft: Use FT_Done_MM_Var instead of free when available in
    cairo_ft_apply_variations. Fixes a crash when using freetype
    &gt;= 2.9
  + cairo-composite_color_glyphs.patch: Fix a thinko in
    composite_color_glyphs. We can't just move around the contents
    of the passed-in string, we need to make a copy. This was
    showing up as memory corruption in pango.</changelog>
  <changelog author="mwilck@suse.com" date="1582459200">- Add an upstream bug fix
  + cairo-pdf-add-missing-flush.patch: Fixes PDF generation
    see https://gitlab.freedesktop.org/cairo/cairo/issues/342</changelog>
  <changelog author="rpm@fthiessen.de" date="1634904000">- Add upstream patch
  + cairo-do-not-override-explicitly-requested-grayscale-aa.patch
    Do not replace explicitly set applications settings by user
    settings for font antialiasing.
    See: https://gitlab.freedesktop.org/cairo/cairo/-/merge_requests/114</changelog>
  <changelog author="mgorse@suse.com" date="1714996800">- Add cairo-fix-infinite-loop-bsc1122321-CVE-2019-6462.patch: This
  fixes a potentially infinite loop (bsc#1122321, CVE-2019-6462,
  glfo#cairo/cairo#155).</changelog>
</package>
<package pkgid="0c918716dd3133b0c9a42b6c6ad16229652af8e8f6d16bf151a11fc07449fe59" name="catatonit" arch="aarch64">
  <version epoch="0" ver="0.2.0" rel="150500.3.3.1"/>
  <changelog author="asarai@suse.com" date="1522152000">- Initial import of catatonit v0.1.0.</changelog>
  <changelog author="asarai@suse.com" date="1522152001">- Update to catatonit v0.1.1, which includes a fix for the libtool requirement.
  This lets us build on much older distributions.</changelog>
  <changelog author="asarai@suse.com" date="1522324800">- Update to catatonit v0.1.2 and update links to point to openSUSE repo.</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Update package descriptions.</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix build to correctly build a static binary (which will allow it to work in
  all containers). This was caused by forgetting to include
  'glibc-devel-static'. I've added a check to ensure it doesn't happen by
  accident again.
- Add catatonit-rpmlintrc to include filters for "static binary" warnings,
  since this is intentional.</changelog>
  <changelog author="asarai@suse.com" date="1524052800">- Update to catatonit v0.1.3, which includes a fix for docker compatiblity so
  that dockerd doesn't give spurrious warnings.</changelog>
  <changelog author="asarai@suse.com" date="1548763200">- Update to catatonit v0.1.4, which includes support for "-g".</changelog>
  <changelog author="asarai@suse.com" date="1583150400">- Update to catatonit v0.1.5, which fixes two bugs where catatonit would hang
  endlessly when pid1 died in very specific ways. bsc#1176155</changelog>
  <changelog author="asarai@suse.com" date="1631793600">- Update to catatonit v0.1.6, which fixes a few bugs -- mainly ones related to
  socket activation or features somewhat adjacent to socket activation (such as
  passing file descriptors).
- Update catatonit-rpmlintrc in order to cover that static binaries are now an
  error not a warning.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637841600">- Add 99bb9048f.patch: configure.ac: call AM_INIT_AUTOMAKE only
  once. Fix build with autocnf 2.71 / automake 1.16.5.</changelog>
  <changelog author="rbrown@suse.com" date="1649678400">- Update to catatont v0.1.7
- This release adds the ability for catatonit to be used as the only
  process in a pause container, by passing the -P flag (in this mode no
  subprocess is spawned and thus no signal forwarding is done).</changelog>
  <changelog author="asarai@suse.com" date="1696248000">- Update to catatonit v0.2.0.
  * Change license to GPL-2.0-or-later.
- Remove upstreamed patches:
  - 99bb9048f.patch</changelog>
</package>
<package pkgid="55d041394501c44e7fbbbe51106167887d8ff69ea672bdba48527e9ad9c26640" name="catatonit" arch="s390x">
  <version epoch="0" ver="0.2.0" rel="150500.3.3.1"/>
  <changelog author="asarai@suse.com" date="1522152000">- Initial import of catatonit v0.1.0.</changelog>
  <changelog author="asarai@suse.com" date="1522152001">- Update to catatonit v0.1.1, which includes a fix for the libtool requirement.
  This lets us build on much older distributions.</changelog>
  <changelog author="asarai@suse.com" date="1522324800">- Update to catatonit v0.1.2 and update links to point to openSUSE repo.</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Update package descriptions.</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix build to correctly build a static binary (which will allow it to work in
  all containers). This was caused by forgetting to include
  'glibc-devel-static'. I've added a check to ensure it doesn't happen by
  accident again.
- Add catatonit-rpmlintrc to include filters for "static binary" warnings,
  since this is intentional.</changelog>
  <changelog author="asarai@suse.com" date="1524052800">- Update to catatonit v0.1.3, which includes a fix for docker compatiblity so
  that dockerd doesn't give spurrious warnings.</changelog>
  <changelog author="asarai@suse.com" date="1548763200">- Update to catatonit v0.1.4, which includes support for "-g".</changelog>
  <changelog author="asarai@suse.com" date="1583150400">- Update to catatonit v0.1.5, which fixes two bugs where catatonit would hang
  endlessly when pid1 died in very specific ways. bsc#1176155</changelog>
  <changelog author="asarai@suse.com" date="1631793600">- Update to catatonit v0.1.6, which fixes a few bugs -- mainly ones related to
  socket activation or features somewhat adjacent to socket activation (such as
  passing file descriptors).
- Update catatonit-rpmlintrc in order to cover that static binaries are now an
  error not a warning.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637841600">- Add 99bb9048f.patch: configure.ac: call AM_INIT_AUTOMAKE only
  once. Fix build with autocnf 2.71 / automake 1.16.5.</changelog>
  <changelog author="rbrown@suse.com" date="1649678400">- Update to catatont v0.1.7
- This release adds the ability for catatonit to be used as the only
  process in a pause container, by passing the -P flag (in this mode no
  subprocess is spawned and thus no signal forwarding is done).</changelog>
  <changelog author="asarai@suse.com" date="1696248000">- Update to catatonit v0.2.0.
  * Change license to GPL-2.0-or-later.
- Remove upstreamed patches:
  - 99bb9048f.patch</changelog>
</package>
<package pkgid="d920b241cc0190598a79d71c42adc1996e25a16167a5807bf35603ba874b8ebb" name="catatonit" arch="src">
  <version epoch="0" ver="0.2.0" rel="150500.3.3.1"/>
  <changelog author="asarai@suse.com" date="1522152000">- Initial import of catatonit v0.1.0.</changelog>
  <changelog author="asarai@suse.com" date="1522152001">- Update to catatonit v0.1.1, which includes a fix for the libtool requirement.
  This lets us build on much older distributions.</changelog>
  <changelog author="asarai@suse.com" date="1522324800">- Update to catatonit v0.1.2 and update links to point to openSUSE repo.</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Update package descriptions.</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix build to correctly build a static binary (which will allow it to work in
  all containers). This was caused by forgetting to include
  'glibc-devel-static'. I've added a check to ensure it doesn't happen by
  accident again.
- Add catatonit-rpmlintrc to include filters for "static binary" warnings,
  since this is intentional.</changelog>
  <changelog author="asarai@suse.com" date="1524052800">- Update to catatonit v0.1.3, which includes a fix for docker compatiblity so
  that dockerd doesn't give spurrious warnings.</changelog>
  <changelog author="asarai@suse.com" date="1548763200">- Update to catatonit v0.1.4, which includes support for "-g".</changelog>
  <changelog author="asarai@suse.com" date="1583150400">- Update to catatonit v0.1.5, which fixes two bugs where catatonit would hang
  endlessly when pid1 died in very specific ways. bsc#1176155</changelog>
  <changelog author="asarai@suse.com" date="1631793600">- Update to catatonit v0.1.6, which fixes a few bugs -- mainly ones related to
  socket activation or features somewhat adjacent to socket activation (such as
  passing file descriptors).
- Update catatonit-rpmlintrc in order to cover that static binaries are now an
  error not a warning.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637841600">- Add 99bb9048f.patch: configure.ac: call AM_INIT_AUTOMAKE only
  once. Fix build with autocnf 2.71 / automake 1.16.5.</changelog>
  <changelog author="rbrown@suse.com" date="1649678400">- Update to catatont v0.1.7
- This release adds the ability for catatonit to be used as the only
  process in a pause container, by passing the -P flag (in this mode no
  subprocess is spawned and thus no signal forwarding is done).</changelog>
  <changelog author="asarai@suse.com" date="1696248000">- Update to catatonit v0.2.0.
  * Change license to GPL-2.0-or-later.
- Remove upstreamed patches:
  - 99bb9048f.patch</changelog>
</package>
<package pkgid="0825a0191a963f7b04cd740fc07e1f0420dcff4e24bf9d5bb97b53ac97adaeaf" name="catatonit" arch="x86_64">
  <version epoch="0" ver="0.2.0" rel="150500.3.3.1"/>
  <changelog author="asarai@suse.com" date="1522152000">- Initial import of catatonit v0.1.0.</changelog>
  <changelog author="asarai@suse.com" date="1522152001">- Update to catatonit v0.1.1, which includes a fix for the libtool requirement.
  This lets us build on much older distributions.</changelog>
  <changelog author="asarai@suse.com" date="1522324800">- Update to catatonit v0.1.2 and update links to point to openSUSE repo.</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Update package descriptions.</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix build to correctly build a static binary (which will allow it to work in
  all containers). This was caused by forgetting to include
  'glibc-devel-static'. I've added a check to ensure it doesn't happen by
  accident again.
- Add catatonit-rpmlintrc to include filters for "static binary" warnings,
  since this is intentional.</changelog>
  <changelog author="asarai@suse.com" date="1524052800">- Update to catatonit v0.1.3, which includes a fix for docker compatiblity so
  that dockerd doesn't give spurrious warnings.</changelog>
  <changelog author="asarai@suse.com" date="1548763200">- Update to catatonit v0.1.4, which includes support for "-g".</changelog>
  <changelog author="asarai@suse.com" date="1583150400">- Update to catatonit v0.1.5, which fixes two bugs where catatonit would hang
  endlessly when pid1 died in very specific ways. bsc#1176155</changelog>
  <changelog author="asarai@suse.com" date="1631793600">- Update to catatonit v0.1.6, which fixes a few bugs -- mainly ones related to
  socket activation or features somewhat adjacent to socket activation (such as
  passing file descriptors).
- Update catatonit-rpmlintrc in order to cover that static binaries are now an
  error not a warning.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637841600">- Add 99bb9048f.patch: configure.ac: call AM_INIT_AUTOMAKE only
  once. Fix build with autocnf 2.71 / automake 1.16.5.</changelog>
  <changelog author="rbrown@suse.com" date="1649678400">- Update to catatont v0.1.7
- This release adds the ability for catatonit to be used as the only
  process in a pause container, by passing the -P flag (in this mode no
  subprocess is spawned and thus no signal forwarding is done).</changelog>
  <changelog author="asarai@suse.com" date="1696248000">- Update to catatonit v0.2.0.
  * Change license to GPL-2.0-or-later.
- Remove upstreamed patches:
  - 99bb9048f.patch</changelog>
</package>
<package pkgid="94fe53713f9e4fd5c632f17f170988a93f0e5434141d42373966edba89ee0efa" name="ceph" arch="src">
  <version epoch="0" ver="16.2.13.66+g54799ee0666" rel="150400.3.9.2"/>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit
  + (bsc#1187748) When an RBD is mapped, it is attempted to be deployed as an OSD.</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)
  + (bsc#1196046) mgr/cephadm: try to get FQDN for configuration files</changelog>
  <changelog author="tserong@suse.com" date="1658836800">- Update to 16.2.9-538-g9de83fa4064:
  + (bsc#1201604) cephfs-shell: move source to separate subdirectory</changelog>
  <changelog author="tserong@suse.com" date="1665057600">- Update to 16.2.9-539-gea74dd900cd:
  + (bsc#1202292) ceph.spec.in: Add -DFMT_DEPRECATED_OSTREAM to CXXFLAGS</changelog>
  <changelog author="michael.fritch@suse.com" date="1674820800">- Update to 16.2.11-56-gc067055f8f5:
  + (bsc#1199183) osd, tools, kv: non-aggressive, on-line trimming of accumulated dups
  + (bsc#1200262) ceph-volume: fix fast device alloc size on mulitple device
  + (bsc#1200501) cephadm: update monitoring container images
  + (bsc#1200978) mgr/dashboard: prevent alert redirect
  + (bsc#1201797) mgr/volumes: Add subvolumegroup resize cmd
  + (bsc#1201837) mgr/volumes: Fix subvolume discover during upgrade (CVE-2022-0670)
  + (bsc#1201976) monitoring/ceph-mixin: add RGW host to label info
  + (bsc#1202077) mgr/dashboard: enable addition of custom Prometheus alerts
  + (bsc#1203375) python-common: Add 'KB' to supported suffixes in SizeMatcher
  + (bsc#1204430) ceph-crash: drop privleges to run as "ceph" user, rather than root (CVE-2022-3650)
  + (bsc#1205025) rgw: Guard against malformed bucket URLs (CVE-2022-3854)
  + (bsc#1205436) mgr/dashboard: fix rgw connect when using ssl</changelog>
  <changelog author="tserong@suse.com" date="1674820801">- Update to 16.2.11-57-g9be7fb44a33:
  + ceph.spec.in: Replace %usrmerged macro with regular version check
- checkin.sh: default to ses7p branch</changelog>
  <changelog author="tserong@suse.com" date="1675771200">- Update to 16.2.11-58-g38d6afd3b78:
  + test/CMakeLists.txt: move 'APPEND rgw_libs Boost::filesystem' to top level</changelog>
  <changelog author="tserong@suse.com" date="1678449600">- Update to 16.2.11-62-gce6291a3463:
  + (bsc#1201088) fix FTBFS on gcc 13</changelog>
  <changelog author="tserong@suse.com" date="1680004800">- Update to 16.2.11-65-g8b7e6fc0182:
  + (bsc#1201088) test/librados: fix FTBFS on gcc 13
  + (bsc#1208820) mgr/dashboard: allow to pass controls on iscsi disk create</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="tserong@suse.com" date="1683806400">- Update to 16.2.13-66-g54799ee0666:
  + (bsc#1199880) mgr: don't dump global config holding gil
  + (bsc#1209621) cephadm: fix NFS haproxy failover if active node disappears
  + (bsc#1210153) mgr/cephadm: fix handling of mgr upgrades with 3 or more mgrs
  + (bsc#1210243, bsc#1210314) ceph-volume: fix regression in activate
  + (bsc#1210719) cephadm: mount host /etc/hosts for daemon containers in podman deployments
  + (bsc#1210784) mgr/dashboard: Fix SSO error: 'str' object has no attribute 'decode'
  + (bsc#1210944) cmake: patch boost source to support python 3.11
  + (bsc#1211090) fix FTBFS on s390x</changelog>
  <changelog author="tserong@suse.com" date="1684929600">- Add "#!BuildConstraint" to spec files for compatibility with _multibuild</changelog>
  <changelog author="tserong@suse.com" date="1687867200">- Remove _constraints file, add README-constraints.txt and pre_checkin.env</changelog>
</package>
<package pkgid="5f4f242f831de1a4a28f418826636e5d1d2522e73d6628ce4afc5b424c043074" name="chrony" arch="aarch64">
  <version epoch="0" ver="4.1" rel="150400.21.5.7"/>
  <changelog author="max@suse.com" date="1591272000">- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.
- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1596369600">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="elimat@opensuse.org" date="1599998400">- Update to 3.5.1:
  * Create new file when writing pidfile (CVE-2020-14367, bsc#1174911)</changelog>
  <changelog author="max@suse.com" date="1600084800">- Adjust and rename the sysconfig file, so that it matches the
  expectations of chronyd.service (bsc#1173277).</changelog>
  <changelog author="kukuk@suse.com" date="1603886400">- By default we don't write log files but log to journald, so
  only recommend logrotate.</changelog>
  <changelog author="mrueckert@suse.de" date="1604232000">- Update to 4.0
  - Enhancements
  - Add support for Network Time Security (NTS) authentication
  - Add support for AES-CMAC keys (AES128, AES256) with Nettle
  - Add authselectmode directive to control selection of
    unauthenticated sources
  - Add binddevice, bindacqdevice, bindcmddevice directives
  - Add confdir directive to better support fragmented
    configuration
  - Add sourcedir directive and "reload sources" command to
    support dynamic NTP sources specified in files
  - Add clockprecision directive
  - Add dscp directive to set Differentiated Services Code Point
    (DSCP)
  - Add -L option to limit log messages by severity
  - Add -p option to print whole configuration with included
    files
  - Add -U option to allow start under non-root user
  - Allow maxsamples to be set to 1 for faster update with -q/-Q
    option
  - Avoid replacing NTP sources with sources that have
    unreachable address
  - Improve pools to repeat name resolution to get "maxsources"
    sources
  - Improve source selection with trusted sources
  - Improve NTP loop test to prevent synchronisation to itself
  - Repeat iburst when NTP source is switched from offline state
    to online
  - Update clock synchronisation status and leap status more
    frequently
  - Update seccomp filter
  - Add "add pool" command
  - Add "reset sources" command to drop all measurements
  - Add authdata command to print details about NTP
    authentication
  - Add selectdata command to print details about source
    selection
  - Add -N option and sourcename command to print original names
    of sources
  - Add -a option to some commands to print also unresolved
    sources
  - Add -k, -p, -r options to clients command to select, limit,
    reset data
  - Bug fixes
  - Don’t set interface for NTP responses to allow asymmetric
    routing
  - Handle RTCs that don’t support interrupts
  - Respond to command requests with correct address on
    multihomed hosts
  - Removed features
  - Drop support for RIPEMD keys (RMD128, RMD160, RMD256, RMD320)
  - Drop support for long (non-standard) MACs in NTPv4 packets
    (chrony 2.x clients using non-MD5/SHA1 keys need to use
    option "version 3")
  - Drop support for line editing with GNU Readline
- add BuildRequires for gnutls-devel (which also pulls nettle to
  enable the new features)
- drop patches which are included in the update:
  chrony-test-update-processing-of-packet-log.patch
  chrony-test-fix-util-unit-test-for-NTP-era-split.patch
- refreshed chrony-config.patch
- track series file for easier quilt setup
- added option to turn off testsuite with
  osc build --without=testsuite
  testsuite still runs by default</changelog>
  <changelog author="mrueckert@suse.de" date="1607342400">- drop buildrequires on NSS. We need gnutls for NTS anyway and we
  can do all the other required crypto via nettle+gnutls. no need
  for another crypto library.</changelog>
  <changelog author="max@suse.com" date="1612526400">- Enable syscallfilter unconditionally [boo#1181826].</changelog>
  <changelog author="max@suse.com" date="1622548800">- Update to 4.1
  * Add support for NTS servers specified by IP address (matching
    Subject Alternative Name in server certificate)
  * Add source-specific configuration of trusted certificates
  * Allow multiple files and directories with trusted certificates
  * Allow multiple pairs of server keys and certificates
  * Add copy option to server/pool directive
  * Increase PPS lock limit to 40% of pulse interval
  * Perform source selection immediately after loading dump files
  * Reload dump files for addresses negotiated by NTS-KE server
  * Update seccomp filter and add less restrictive level
  * Restart ongoing name resolution on online command
  * Fix dump files to not include uncorrected offset
  * Fix initstepslew to accept time from own NTP clients
  * Reset NTP address and port when no longer negotiated by NTS-KE
    server
- Update clknetsim to snapshot f89702d.
- Refresh chrony.keyring from
  https://chrony.tuxfamily.org/gpgkey-8F375C7E8D0EE125A3D3BD51537E2B76F7680DAC.asc
- Ensure the correct pool packages are installed for openSUSE
  and SLE (bsc#1180689).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1622635200">- Change to using systemd-sysusers
- Remove otherproviders, not needed anymore</changelog>
  <changelog author="gmbr3@opensuse.org" date="1623585600">- Add now working CONFIG parameter to sysusers generator</changelog>
  <changelog author="max@suse.com" date="1625140800">- boo#1187906: Consolidate all references to the helper script.
- bsc#1173760: MD5 is not available from mozilla-nss in FIPS mode,
  but needed for calculating refids from IPv6 addresses as part of
  the NTP protocol (rfc5905). As this is a non-cryptographic use of
  MD5 we can use our own implementation without violating FIPS
  rules: chrony-refid-internal-md5.patch .</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_chrony-wait.service.patch
  * harden_chronyd.service.patch</changelog>
  <changelog author="max@suse.com" date="1633694400">- boo#1190926: PrivateDevices is too strict, we might need to
  access the rtc and ptp devices.
- Add back support to build chrony on SLE12.
- Drop dependency on asciidoctor. It is only needed for building
  the HTML documentation which we don't package anyway.</changelog>
  <changelog author="max@suse.com" date="1637323200">- SLE bugs that have been fixed in openSUSE up to this point
  without explicit references: bsc#1183783, bsc#1184400,
  bsc#1171806, bsc#1161119, bsc#1159840.
- Obsoleted SLE patches:
  * chrony-fix-open.patch
  * chrony-gettimeofday.patch
  * chrony-ntp-era-split.patch
  * chrony-pidfile.patch
  * chrony-select-timeout.patch
  * chrony-urandom.patch
  * chrony.sysconfig
  * clknetsim-glibc-2.31.patch</changelog>
  <changelog author="max@suse.com" date="1638878400">- Add chrony-htonl.patch to work around undocumented behaviour of
  htonl() in older glibc versions (SLE-12) on 64 bit big endian
  architectures (s390x).</changelog>
  <changelog author="max@suse.com" date="1641816000">- bsc#1194229: Fix pool package dependencies, so that SLE actually
  prefers chrony-pool-suse over chrony-pool-empty.</changelog>
  <changelog author="max@suse.com" date="1648123200">- Fix config file handling in the spec file and remove "ntsdumpdir"
  from default config, because augeas-lenses cannot parse it during
  installation of SLE Micro on SLE-15-SP3 (bsc#1194220).</changelog>
  <changelog author="max@suse.com" date="1710504000">- Use shorter NTS-KE retry interval when network is down
  (bsc#1213551, chrony-burst_total_samples_to_go.patch,
  chrony-retry_interval_ke_start.patch).</changelog>
  <changelog author="max@suse.com" date="1712750400">- Use make quickcheck instead of make check to avoid &gt;1h build
  times and failures due to timeouts. This was the default before
  3.2 but it changed to make tests more reliable. Here a seed is
  already set to get deterministic execution.</changelog>
</package>
<package pkgid="e1190640d771df1780ab16895cb25c90e161976f795cf64926c7d8309881e7b9" name="chrony" arch="s390x">
  <version epoch="0" ver="4.1" rel="150400.21.5.7"/>
  <changelog author="max@suse.com" date="1591272000">- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.
- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1596369600">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="elimat@opensuse.org" date="1599998400">- Update to 3.5.1:
  * Create new file when writing pidfile (CVE-2020-14367, bsc#1174911)</changelog>
  <changelog author="max@suse.com" date="1600084800">- Adjust and rename the sysconfig file, so that it matches the
  expectations of chronyd.service (bsc#1173277).</changelog>
  <changelog author="kukuk@suse.com" date="1603886400">- By default we don't write log files but log to journald, so
  only recommend logrotate.</changelog>
  <changelog author="mrueckert@suse.de" date="1604232000">- Update to 4.0
  - Enhancements
  - Add support for Network Time Security (NTS) authentication
  - Add support for AES-CMAC keys (AES128, AES256) with Nettle
  - Add authselectmode directive to control selection of
    unauthenticated sources
  - Add binddevice, bindacqdevice, bindcmddevice directives
  - Add confdir directive to better support fragmented
    configuration
  - Add sourcedir directive and "reload sources" command to
    support dynamic NTP sources specified in files
  - Add clockprecision directive
  - Add dscp directive to set Differentiated Services Code Point
    (DSCP)
  - Add -L option to limit log messages by severity
  - Add -p option to print whole configuration with included
    files
  - Add -U option to allow start under non-root user
  - Allow maxsamples to be set to 1 for faster update with -q/-Q
    option
  - Avoid replacing NTP sources with sources that have
    unreachable address
  - Improve pools to repeat name resolution to get "maxsources"
    sources
  - Improve source selection with trusted sources
  - Improve NTP loop test to prevent synchronisation to itself
  - Repeat iburst when NTP source is switched from offline state
    to online
  - Update clock synchronisation status and leap status more
    frequently
  - Update seccomp filter
  - Add "add pool" command
  - Add "reset sources" command to drop all measurements
  - Add authdata command to print details about NTP
    authentication
  - Add selectdata command to print details about source
    selection
  - Add -N option and sourcename command to print original names
    of sources
  - Add -a option to some commands to print also unresolved
    sources
  - Add -k, -p, -r options to clients command to select, limit,
    reset data
  - Bug fixes
  - Don’t set interface for NTP responses to allow asymmetric
    routing
  - Handle RTCs that don’t support interrupts
  - Respond to command requests with correct address on
    multihomed hosts
  - Removed features
  - Drop support for RIPEMD keys (RMD128, RMD160, RMD256, RMD320)
  - Drop support for long (non-standard) MACs in NTPv4 packets
    (chrony 2.x clients using non-MD5/SHA1 keys need to use
    option "version 3")
  - Drop support for line editing with GNU Readline
- add BuildRequires for gnutls-devel (which also pulls nettle to
  enable the new features)
- drop patches which are included in the update:
  chrony-test-update-processing-of-packet-log.patch
  chrony-test-fix-util-unit-test-for-NTP-era-split.patch
- refreshed chrony-config.patch
- track series file for easier quilt setup
- added option to turn off testsuite with
  osc build --without=testsuite
  testsuite still runs by default</changelog>
  <changelog author="mrueckert@suse.de" date="1607342400">- drop buildrequires on NSS. We need gnutls for NTS anyway and we
  can do all the other required crypto via nettle+gnutls. no need
  for another crypto library.</changelog>
  <changelog author="max@suse.com" date="1612526400">- Enable syscallfilter unconditionally [boo#1181826].</changelog>
  <changelog author="max@suse.com" date="1622548800">- Update to 4.1
  * Add support for NTS servers specified by IP address (matching
    Subject Alternative Name in server certificate)
  * Add source-specific configuration of trusted certificates
  * Allow multiple files and directories with trusted certificates
  * Allow multiple pairs of server keys and certificates
  * Add copy option to server/pool directive
  * Increase PPS lock limit to 40% of pulse interval
  * Perform source selection immediately after loading dump files
  * Reload dump files for addresses negotiated by NTS-KE server
  * Update seccomp filter and add less restrictive level
  * Restart ongoing name resolution on online command
  * Fix dump files to not include uncorrected offset
  * Fix initstepslew to accept time from own NTP clients
  * Reset NTP address and port when no longer negotiated by NTS-KE
    server
- Update clknetsim to snapshot f89702d.
- Refresh chrony.keyring from
  https://chrony.tuxfamily.org/gpgkey-8F375C7E8D0EE125A3D3BD51537E2B76F7680DAC.asc
- Ensure the correct pool packages are installed for openSUSE
  and SLE (bsc#1180689).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1622635200">- Change to using systemd-sysusers
- Remove otherproviders, not needed anymore</changelog>
  <changelog author="gmbr3@opensuse.org" date="1623585600">- Add now working CONFIG parameter to sysusers generator</changelog>
  <changelog author="max@suse.com" date="1625140800">- boo#1187906: Consolidate all references to the helper script.
- bsc#1173760: MD5 is not available from mozilla-nss in FIPS mode,
  but needed for calculating refids from IPv6 addresses as part of
  the NTP protocol (rfc5905). As this is a non-cryptographic use of
  MD5 we can use our own implementation without violating FIPS
  rules: chrony-refid-internal-md5.patch .</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_chrony-wait.service.patch
  * harden_chronyd.service.patch</changelog>
  <changelog author="max@suse.com" date="1633694400">- boo#1190926: PrivateDevices is too strict, we might need to
  access the rtc and ptp devices.
- Add back support to build chrony on SLE12.
- Drop dependency on asciidoctor. It is only needed for building
  the HTML documentation which we don't package anyway.</changelog>
  <changelog author="max@suse.com" date="1637323200">- SLE bugs that have been fixed in openSUSE up to this point
  without explicit references: bsc#1183783, bsc#1184400,
  bsc#1171806, bsc#1161119, bsc#1159840.
- Obsoleted SLE patches:
  * chrony-fix-open.patch
  * chrony-gettimeofday.patch
  * chrony-ntp-era-split.patch
  * chrony-pidfile.patch
  * chrony-select-timeout.patch
  * chrony-urandom.patch
  * chrony.sysconfig
  * clknetsim-glibc-2.31.patch</changelog>
  <changelog author="max@suse.com" date="1638878400">- Add chrony-htonl.patch to work around undocumented behaviour of
  htonl() in older glibc versions (SLE-12) on 64 bit big endian
  architectures (s390x).</changelog>
  <changelog author="max@suse.com" date="1641816000">- bsc#1194229: Fix pool package dependencies, so that SLE actually
  prefers chrony-pool-suse over chrony-pool-empty.</changelog>
  <changelog author="max@suse.com" date="1648123200">- Fix config file handling in the spec file and remove "ntsdumpdir"
  from default config, because augeas-lenses cannot parse it during
  installation of SLE Micro on SLE-15-SP3 (bsc#1194220).</changelog>
  <changelog author="max@suse.com" date="1710504000">- Use shorter NTS-KE retry interval when network is down
  (bsc#1213551, chrony-burst_total_samples_to_go.patch,
  chrony-retry_interval_ke_start.patch).</changelog>
  <changelog author="max@suse.com" date="1712750400">- Use make quickcheck instead of make check to avoid &gt;1h build
  times and failures due to timeouts. This was the default before
  3.2 but it changed to make tests more reliable. Here a seed is
  already set to get deterministic execution.</changelog>
</package>
<package pkgid="f7238acd01282105926a1157baa94bcd5bd58f29e0b554dbaa21a26e0817b92f" name="chrony" arch="src">
  <version epoch="0" ver="4.1" rel="150400.21.5.7"/>
  <changelog author="max@suse.com" date="1591272000">- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.
- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1596369600">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="elimat@opensuse.org" date="1599998400">- Update to 3.5.1:
  * Create new file when writing pidfile (CVE-2020-14367, bsc#1174911)</changelog>
  <changelog author="max@suse.com" date="1600084800">- Adjust and rename the sysconfig file, so that it matches the
  expectations of chronyd.service (bsc#1173277).</changelog>
  <changelog author="kukuk@suse.com" date="1603886400">- By default we don't write log files but log to journald, so
  only recommend logrotate.</changelog>
  <changelog author="mrueckert@suse.de" date="1604232000">- Update to 4.0
  - Enhancements
  - Add support for Network Time Security (NTS) authentication
  - Add support for AES-CMAC keys (AES128, AES256) with Nettle
  - Add authselectmode directive to control selection of
    unauthenticated sources
  - Add binddevice, bindacqdevice, bindcmddevice directives
  - Add confdir directive to better support fragmented
    configuration
  - Add sourcedir directive and "reload sources" command to
    support dynamic NTP sources specified in files
  - Add clockprecision directive
  - Add dscp directive to set Differentiated Services Code Point
    (DSCP)
  - Add -L option to limit log messages by severity
  - Add -p option to print whole configuration with included
    files
  - Add -U option to allow start under non-root user
  - Allow maxsamples to be set to 1 for faster update with -q/-Q
    option
  - Avoid replacing NTP sources with sources that have
    unreachable address
  - Improve pools to repeat name resolution to get "maxsources"
    sources
  - Improve source selection with trusted sources
  - Improve NTP loop test to prevent synchronisation to itself
  - Repeat iburst when NTP source is switched from offline state
    to online
  - Update clock synchronisation status and leap status more
    frequently
  - Update seccomp filter
  - Add "add pool" command
  - Add "reset sources" command to drop all measurements
  - Add authdata command to print details about NTP
    authentication
  - Add selectdata command to print details about source
    selection
  - Add -N option and sourcename command to print original names
    of sources
  - Add -a option to some commands to print also unresolved
    sources
  - Add -k, -p, -r options to clients command to select, limit,
    reset data
  - Bug fixes
  - Don’t set interface for NTP responses to allow asymmetric
    routing
  - Handle RTCs that don’t support interrupts
  - Respond to command requests with correct address on
    multihomed hosts
  - Removed features
  - Drop support for RIPEMD keys (RMD128, RMD160, RMD256, RMD320)
  - Drop support for long (non-standard) MACs in NTPv4 packets
    (chrony 2.x clients using non-MD5/SHA1 keys need to use
    option "version 3")
  - Drop support for line editing with GNU Readline
- add BuildRequires for gnutls-devel (which also pulls nettle to
  enable the new features)
- drop patches which are included in the update:
  chrony-test-update-processing-of-packet-log.patch
  chrony-test-fix-util-unit-test-for-NTP-era-split.patch
- refreshed chrony-config.patch
- track series file for easier quilt setup
- added option to turn off testsuite with
  osc build --without=testsuite
  testsuite still runs by default</changelog>
  <changelog author="mrueckert@suse.de" date="1607342400">- drop buildrequires on NSS. We need gnutls for NTS anyway and we
  can do all the other required crypto via nettle+gnutls. no need
  for another crypto library.</changelog>
  <changelog author="max@suse.com" date="1612526400">- Enable syscallfilter unconditionally [boo#1181826].</changelog>
  <changelog author="max@suse.com" date="1622548800">- Update to 4.1
  * Add support for NTS servers specified by IP address (matching
    Subject Alternative Name in server certificate)
  * Add source-specific configuration of trusted certificates
  * Allow multiple files and directories with trusted certificates
  * Allow multiple pairs of server keys and certificates
  * Add copy option to server/pool directive
  * Increase PPS lock limit to 40% of pulse interval
  * Perform source selection immediately after loading dump files
  * Reload dump files for addresses negotiated by NTS-KE server
  * Update seccomp filter and add less restrictive level
  * Restart ongoing name resolution on online command
  * Fix dump files to not include uncorrected offset
  * Fix initstepslew to accept time from own NTP clients
  * Reset NTP address and port when no longer negotiated by NTS-KE
    server
- Update clknetsim to snapshot f89702d.
- Refresh chrony.keyring from
  https://chrony.tuxfamily.org/gpgkey-8F375C7E8D0EE125A3D3BD51537E2B76F7680DAC.asc
- Ensure the correct pool packages are installed for openSUSE
  and SLE (bsc#1180689).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1622635200">- Change to using systemd-sysusers
- Remove otherproviders, not needed anymore</changelog>
  <changelog author="gmbr3@opensuse.org" date="1623585600">- Add now working CONFIG parameter to sysusers generator</changelog>
  <changelog author="max@suse.com" date="1625140800">- boo#1187906: Consolidate all references to the helper script.
- bsc#1173760: MD5 is not available from mozilla-nss in FIPS mode,
  but needed for calculating refids from IPv6 addresses as part of
  the NTP protocol (rfc5905). As this is a non-cryptographic use of
  MD5 we can use our own implementation without violating FIPS
  rules: chrony-refid-internal-md5.patch .</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_chrony-wait.service.patch
  * harden_chronyd.service.patch</changelog>
  <changelog author="max@suse.com" date="1633694400">- boo#1190926: PrivateDevices is too strict, we might need to
  access the rtc and ptp devices.
- Add back support to build chrony on SLE12.
- Drop dependency on asciidoctor. It is only needed for building
  the HTML documentation which we don't package anyway.</changelog>
  <changelog author="max@suse.com" date="1637323200">- SLE bugs that have been fixed in openSUSE up to this point
  without explicit references: bsc#1183783, bsc#1184400,
  bsc#1171806, bsc#1161119, bsc#1159840.
- Obsoleted SLE patches:
  * chrony-fix-open.patch
  * chrony-gettimeofday.patch
  * chrony-ntp-era-split.patch
  * chrony-pidfile.patch
  * chrony-select-timeout.patch
  * chrony-urandom.patch
  * chrony.sysconfig
  * clknetsim-glibc-2.31.patch</changelog>
  <changelog author="max@suse.com" date="1638878400">- Add chrony-htonl.patch to work around undocumented behaviour of
  htonl() in older glibc versions (SLE-12) on 64 bit big endian
  architectures (s390x).</changelog>
  <changelog author="max@suse.com" date="1641816000">- bsc#1194229: Fix pool package dependencies, so that SLE actually
  prefers chrony-pool-suse over chrony-pool-empty.</changelog>
  <changelog author="max@suse.com" date="1648123200">- Fix config file handling in the spec file and remove "ntsdumpdir"
  from default config, because augeas-lenses cannot parse it during
  installation of SLE Micro on SLE-15-SP3 (bsc#1194220).</changelog>
  <changelog author="max@suse.com" date="1710504000">- Use shorter NTS-KE retry interval when network is down
  (bsc#1213551, chrony-burst_total_samples_to_go.patch,
  chrony-retry_interval_ke_start.patch).</changelog>
  <changelog author="max@suse.com" date="1712750400">- Use make quickcheck instead of make check to avoid &gt;1h build
  times and failures due to timeouts. This was the default before
  3.2 but it changed to make tests more reliable. Here a seed is
  already set to get deterministic execution.</changelog>
</package>
<package pkgid="dfc68e6d7c7310636b10ca2d9265c499b9615e7825a76093df2f387af4816e78" name="chrony" arch="x86_64">
  <version epoch="0" ver="4.1" rel="150400.21.5.7"/>
  <changelog author="max@suse.com" date="1591272000">- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.
- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1596369600">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="elimat@opensuse.org" date="1599998400">- Update to 3.5.1:
  * Create new file when writing pidfile (CVE-2020-14367, bsc#1174911)</changelog>
  <changelog author="max@suse.com" date="1600084800">- Adjust and rename the sysconfig file, so that it matches the
  expectations of chronyd.service (bsc#1173277).</changelog>
  <changelog author="kukuk@suse.com" date="1603886400">- By default we don't write log files but log to journald, so
  only recommend logrotate.</changelog>
  <changelog author="mrueckert@suse.de" date="1604232000">- Update to 4.0
  - Enhancements
  - Add support for Network Time Security (NTS) authentication
  - Add support for AES-CMAC keys (AES128, AES256) with Nettle
  - Add authselectmode directive to control selection of
    unauthenticated sources
  - Add binddevice, bindacqdevice, bindcmddevice directives
  - Add confdir directive to better support fragmented
    configuration
  - Add sourcedir directive and "reload sources" command to
    support dynamic NTP sources specified in files
  - Add clockprecision directive
  - Add dscp directive to set Differentiated Services Code Point
    (DSCP)
  - Add -L option to limit log messages by severity
  - Add -p option to print whole configuration with included
    files
  - Add -U option to allow start under non-root user
  - Allow maxsamples to be set to 1 for faster update with -q/-Q
    option
  - Avoid replacing NTP sources with sources that have
    unreachable address
  - Improve pools to repeat name resolution to get "maxsources"
    sources
  - Improve source selection with trusted sources
  - Improve NTP loop test to prevent synchronisation to itself
  - Repeat iburst when NTP source is switched from offline state
    to online
  - Update clock synchronisation status and leap status more
    frequently
  - Update seccomp filter
  - Add "add pool" command
  - Add "reset sources" command to drop all measurements
  - Add authdata command to print details about NTP
    authentication
  - Add selectdata command to print details about source
    selection
  - Add -N option and sourcename command to print original names
    of sources
  - Add -a option to some commands to print also unresolved
    sources
  - Add -k, -p, -r options to clients command to select, limit,
    reset data
  - Bug fixes
  - Don’t set interface for NTP responses to allow asymmetric
    routing
  - Handle RTCs that don’t support interrupts
  - Respond to command requests with correct address on
    multihomed hosts
  - Removed features
  - Drop support for RIPEMD keys (RMD128, RMD160, RMD256, RMD320)
  - Drop support for long (non-standard) MACs in NTPv4 packets
    (chrony 2.x clients using non-MD5/SHA1 keys need to use
    option "version 3")
  - Drop support for line editing with GNU Readline
- add BuildRequires for gnutls-devel (which also pulls nettle to
  enable the new features)
- drop patches which are included in the update:
  chrony-test-update-processing-of-packet-log.patch
  chrony-test-fix-util-unit-test-for-NTP-era-split.patch
- refreshed chrony-config.patch
- track series file for easier quilt setup
- added option to turn off testsuite with
  osc build --without=testsuite
  testsuite still runs by default</changelog>
  <changelog author="mrueckert@suse.de" date="1607342400">- drop buildrequires on NSS. We need gnutls for NTS anyway and we
  can do all the other required crypto via nettle+gnutls. no need
  for another crypto library.</changelog>
  <changelog author="max@suse.com" date="1612526400">- Enable syscallfilter unconditionally [boo#1181826].</changelog>
  <changelog author="max@suse.com" date="1622548800">- Update to 4.1
  * Add support for NTS servers specified by IP address (matching
    Subject Alternative Name in server certificate)
  * Add source-specific configuration of trusted certificates
  * Allow multiple files and directories with trusted certificates
  * Allow multiple pairs of server keys and certificates
  * Add copy option to server/pool directive
  * Increase PPS lock limit to 40% of pulse interval
  * Perform source selection immediately after loading dump files
  * Reload dump files for addresses negotiated by NTS-KE server
  * Update seccomp filter and add less restrictive level
  * Restart ongoing name resolution on online command
  * Fix dump files to not include uncorrected offset
  * Fix initstepslew to accept time from own NTP clients
  * Reset NTP address and port when no longer negotiated by NTS-KE
    server
- Update clknetsim to snapshot f89702d.
- Refresh chrony.keyring from
  https://chrony.tuxfamily.org/gpgkey-8F375C7E8D0EE125A3D3BD51537E2B76F7680DAC.asc
- Ensure the correct pool packages are installed for openSUSE
  and SLE (bsc#1180689).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1622635200">- Change to using systemd-sysusers
- Remove otherproviders, not needed anymore</changelog>
  <changelog author="gmbr3@opensuse.org" date="1623585600">- Add now working CONFIG parameter to sysusers generator</changelog>
  <changelog author="max@suse.com" date="1625140800">- boo#1187906: Consolidate all references to the helper script.
- bsc#1173760: MD5 is not available from mozilla-nss in FIPS mode,
  but needed for calculating refids from IPv6 addresses as part of
  the NTP protocol (rfc5905). As this is a non-cryptographic use of
  MD5 we can use our own implementation without violating FIPS
  rules: chrony-refid-internal-md5.patch .</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_chrony-wait.service.patch
  * harden_chronyd.service.patch</changelog>
  <changelog author="max@suse.com" date="1633694400">- boo#1190926: PrivateDevices is too strict, we might need to
  access the rtc and ptp devices.
- Add back support to build chrony on SLE12.
- Drop dependency on asciidoctor. It is only needed for building
  the HTML documentation which we don't package anyway.</changelog>
  <changelog author="max@suse.com" date="1637323200">- SLE bugs that have been fixed in openSUSE up to this point
  without explicit references: bsc#1183783, bsc#1184400,
  bsc#1171806, bsc#1161119, bsc#1159840.
- Obsoleted SLE patches:
  * chrony-fix-open.patch
  * chrony-gettimeofday.patch
  * chrony-ntp-era-split.patch
  * chrony-pidfile.patch
  * chrony-select-timeout.patch
  * chrony-urandom.patch
  * chrony.sysconfig
  * clknetsim-glibc-2.31.patch</changelog>
  <changelog author="max@suse.com" date="1638878400">- Add chrony-htonl.patch to work around undocumented behaviour of
  htonl() in older glibc versions (SLE-12) on 64 bit big endian
  architectures (s390x).</changelog>
  <changelog author="max@suse.com" date="1641816000">- bsc#1194229: Fix pool package dependencies, so that SLE actually
  prefers chrony-pool-suse over chrony-pool-empty.</changelog>
  <changelog author="max@suse.com" date="1648123200">- Fix config file handling in the spec file and remove "ntsdumpdir"
  from default config, because augeas-lenses cannot parse it during
  installation of SLE Micro on SLE-15-SP3 (bsc#1194220).</changelog>
  <changelog author="max@suse.com" date="1710504000">- Use shorter NTS-KE retry interval when network is down
  (bsc#1213551, chrony-burst_total_samples_to_go.patch,
  chrony-retry_interval_ke_start.patch).</changelog>
  <changelog author="max@suse.com" date="1712750400">- Use make quickcheck instead of make check to avoid &gt;1h build
  times and failures due to timeouts. This was the default before
  3.2 but it changed to make tests more reliable. Here a seed is
  already set to get deterministic execution.</changelog>
</package>
<package pkgid="9a9a0cfdf95dc3158e57d034caf6edf746afb91816f3582795a13718e66e62f0" name="chrony-pool-suse" arch="noarch">
  <version epoch="0" ver="4.1" rel="150400.21.5.7"/>
  <changelog author="max@suse.com" date="1591272000">- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.
- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1596369600">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="elimat@opensuse.org" date="1599998400">- Update to 3.5.1:
  * Create new file when writing pidfile (CVE-2020-14367, bsc#1174911)</changelog>
  <changelog author="max@suse.com" date="1600084800">- Adjust and rename the sysconfig file, so that it matches the
  expectations of chronyd.service (bsc#1173277).</changelog>
  <changelog author="kukuk@suse.com" date="1603886400">- By default we don't write log files but log to journald, so
  only recommend logrotate.</changelog>
  <changelog author="mrueckert@suse.de" date="1604232000">- Update to 4.0
  - Enhancements
  - Add support for Network Time Security (NTS) authentication
  - Add support for AES-CMAC keys (AES128, AES256) with Nettle
  - Add authselectmode directive to control selection of
    unauthenticated sources
  - Add binddevice, bindacqdevice, bindcmddevice directives
  - Add confdir directive to better support fragmented
    configuration
  - Add sourcedir directive and "reload sources" command to
    support dynamic NTP sources specified in files
  - Add clockprecision directive
  - Add dscp directive to set Differentiated Services Code Point
    (DSCP)
  - Add -L option to limit log messages by severity
  - Add -p option to print whole configuration with included
    files
  - Add -U option to allow start under non-root user
  - Allow maxsamples to be set to 1 for faster update with -q/-Q
    option
  - Avoid replacing NTP sources with sources that have
    unreachable address
  - Improve pools to repeat name resolution to get "maxsources"
    sources
  - Improve source selection with trusted sources
  - Improve NTP loop test to prevent synchronisation to itself
  - Repeat iburst when NTP source is switched from offline state
    to online
  - Update clock synchronisation status and leap status more
    frequently
  - Update seccomp filter
  - Add "add pool" command
  - Add "reset sources" command to drop all measurements
  - Add authdata command to print details about NTP
    authentication
  - Add selectdata command to print details about source
    selection
  - Add -N option and sourcename command to print original names
    of sources
  - Add -a option to some commands to print also unresolved
    sources
  - Add -k, -p, -r options to clients command to select, limit,
    reset data
  - Bug fixes
  - Don’t set interface for NTP responses to allow asymmetric
    routing
  - Handle RTCs that don’t support interrupts
  - Respond to command requests with correct address on
    multihomed hosts
  - Removed features
  - Drop support for RIPEMD keys (RMD128, RMD160, RMD256, RMD320)
  - Drop support for long (non-standard) MACs in NTPv4 packets
    (chrony 2.x clients using non-MD5/SHA1 keys need to use
    option "version 3")
  - Drop support for line editing with GNU Readline
- add BuildRequires for gnutls-devel (which also pulls nettle to
  enable the new features)
- drop patches which are included in the update:
  chrony-test-update-processing-of-packet-log.patch
  chrony-test-fix-util-unit-test-for-NTP-era-split.patch
- refreshed chrony-config.patch
- track series file for easier quilt setup
- added option to turn off testsuite with
  osc build --without=testsuite
  testsuite still runs by default</changelog>
  <changelog author="mrueckert@suse.de" date="1607342400">- drop buildrequires on NSS. We need gnutls for NTS anyway and we
  can do all the other required crypto via nettle+gnutls. no need
  for another crypto library.</changelog>
  <changelog author="max@suse.com" date="1612526400">- Enable syscallfilter unconditionally [boo#1181826].</changelog>
  <changelog author="max@suse.com" date="1622548800">- Update to 4.1
  * Add support for NTS servers specified by IP address (matching
    Subject Alternative Name in server certificate)
  * Add source-specific configuration of trusted certificates
  * Allow multiple files and directories with trusted certificates
  * Allow multiple pairs of server keys and certificates
  * Add copy option to server/pool directive
  * Increase PPS lock limit to 40% of pulse interval
  * Perform source selection immediately after loading dump files
  * Reload dump files for addresses negotiated by NTS-KE server
  * Update seccomp filter and add less restrictive level
  * Restart ongoing name resolution on online command
  * Fix dump files to not include uncorrected offset
  * Fix initstepslew to accept time from own NTP clients
  * Reset NTP address and port when no longer negotiated by NTS-KE
    server
- Update clknetsim to snapshot f89702d.
- Refresh chrony.keyring from
  https://chrony.tuxfamily.org/gpgkey-8F375C7E8D0EE125A3D3BD51537E2B76F7680DAC.asc
- Ensure the correct pool packages are installed for openSUSE
  and SLE (bsc#1180689).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1622635200">- Change to using systemd-sysusers
- Remove otherproviders, not needed anymore</changelog>
  <changelog author="gmbr3@opensuse.org" date="1623585600">- Add now working CONFIG parameter to sysusers generator</changelog>
  <changelog author="max@suse.com" date="1625140800">- boo#1187906: Consolidate all references to the helper script.
- bsc#1173760: MD5 is not available from mozilla-nss in FIPS mode,
  but needed for calculating refids from IPv6 addresses as part of
  the NTP protocol (rfc5905). As this is a non-cryptographic use of
  MD5 we can use our own implementation without violating FIPS
  rules: chrony-refid-internal-md5.patch .</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_chrony-wait.service.patch
  * harden_chronyd.service.patch</changelog>
  <changelog author="max@suse.com" date="1633694400">- boo#1190926: PrivateDevices is too strict, we might need to
  access the rtc and ptp devices.
- Add back support to build chrony on SLE12.
- Drop dependency on asciidoctor. It is only needed for building
  the HTML documentation which we don't package anyway.</changelog>
  <changelog author="max@suse.com" date="1637323200">- SLE bugs that have been fixed in openSUSE up to this point
  without explicit references: bsc#1183783, bsc#1184400,
  bsc#1171806, bsc#1161119, bsc#1159840.
- Obsoleted SLE patches:
  * chrony-fix-open.patch
  * chrony-gettimeofday.patch
  * chrony-ntp-era-split.patch
  * chrony-pidfile.patch
  * chrony-select-timeout.patch
  * chrony-urandom.patch
  * chrony.sysconfig
  * clknetsim-glibc-2.31.patch</changelog>
  <changelog author="max@suse.com" date="1638878400">- Add chrony-htonl.patch to work around undocumented behaviour of
  htonl() in older glibc versions (SLE-12) on 64 bit big endian
  architectures (s390x).</changelog>
  <changelog author="max@suse.com" date="1641816000">- bsc#1194229: Fix pool package dependencies, so that SLE actually
  prefers chrony-pool-suse over chrony-pool-empty.</changelog>
  <changelog author="max@suse.com" date="1648123200">- Fix config file handling in the spec file and remove "ntsdumpdir"
  from default config, because augeas-lenses cannot parse it during
  installation of SLE Micro on SLE-15-SP3 (bsc#1194220).</changelog>
  <changelog author="max@suse.com" date="1710504000">- Use shorter NTS-KE retry interval when network is down
  (bsc#1213551, chrony-burst_total_samples_to_go.patch,
  chrony-retry_interval_ke_start.patch).</changelog>
  <changelog author="max@suse.com" date="1712750400">- Use make quickcheck instead of make check to avoid &gt;1h build
  times and failures due to timeouts. This was the default before
  3.2 but it changed to make tests more reliable. Here a seed is
  already set to get deterministic execution.</changelog>
</package>
<package pkgid="24122a822efc64852913983df93827c758350f6b833adb79b86d28beb1b0847f" name="cloud-netconfig-azure" arch="noarch">
  <version epoch="0" ver="1.10" rel="150000.25.14.1"/>
  <changelog author="jgleissner@suse.com" date="1507896000">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
</package>
<package pkgid="3c655f5b6dae30a9e22723ccc179ee0580a9f1c6a38205dcf5031030b0708309" name="cloud-netconfig-azure" arch="src">
  <version epoch="0" ver="1.10" rel="150000.25.14.1"/>
  <changelog author="jgleissner@suse.com" date="1507896000">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
</package>
<package pkgid="bee9689c7a61dd8a55526ac9b2a5c6853d045131dfa3ba7372e5ba2b9f7c098b" name="cloud-netconfig-azure" arch="noarch">
  <version epoch="0" ver="1.11" rel="150000.25.17.1"/>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
  <changelog author="jgleissner@suse.com" date="1707393600">- Update to version 1.11:
  + Revert address metadata lookup in GCE to local lookup (bsc#1219454)
  + Fix hang on warning log messages
  + Check whether getting IPv4 addresses from metadata failed and abort
    if true
  + Only delete policy rules if they exist
  + Skip adding/removing IPv4 ranges if metdata lookup failed
  + Improve error handling and logging in Azure
  + Set SCRIPTDIR when installing netconfig wrapper</changelog>
  <changelog author="jgleissner@suse.com" date="1708948800">- Add Provides/Obsoletes for dropped cloud-netconfig-nm
- Install dispatcher script into /etc/NetworkManager/dispatcher.d
  on older distributions
- Add BuildReqires: NetworkManager to avoid owning dispatcher.d
  parent directory</changelog>
</package>
<package pkgid="88dc63a567fd4f89a451840f1832962b1bce631cf91398582a3f0983a17ba616" name="cloud-netconfig-azure" arch="src">
  <version epoch="0" ver="1.11" rel="150000.25.17.1"/>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
  <changelog author="jgleissner@suse.com" date="1707393600">- Update to version 1.11:
  + Revert address metadata lookup in GCE to local lookup (bsc#1219454)
  + Fix hang on warning log messages
  + Check whether getting IPv4 addresses from metadata failed and abort
    if true
  + Only delete policy rules if they exist
  + Skip adding/removing IPv4 ranges if metdata lookup failed
  + Improve error handling and logging in Azure
  + Set SCRIPTDIR when installing netconfig wrapper</changelog>
  <changelog author="jgleissner@suse.com" date="1708948800">- Add Provides/Obsoletes for dropped cloud-netconfig-nm
- Install dispatcher script into /etc/NetworkManager/dispatcher.d
  on older distributions
- Add BuildReqires: NetworkManager to avoid owning dispatcher.d
  parent directory</changelog>
</package>
<package pkgid="7fa52e77dabb5928d646110d1680d92f6e5b14af097fb105cf6d419d1e7eec63" name="cloud-netconfig-azure" arch="noarch">
  <version epoch="0" ver="1.12" rel="150000.25.20.1"/>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
  <changelog author="jgleissner@suse.com" date="1707393600">- Update to version 1.11:
  + Revert address metadata lookup in GCE to local lookup (bsc#1219454)
  + Fix hang on warning log messages
  + Check whether getting IPv4 addresses from metadata failed and abort
    if true
  + Only delete policy rules if they exist
  + Skip adding/removing IPv4 ranges if metdata lookup failed
  + Improve error handling and logging in Azure
  + Set SCRIPTDIR when installing netconfig wrapper</changelog>
  <changelog author="jgleissner@suse.com" date="1708948800">- Add Provides/Obsoletes for dropped cloud-netconfig-nm
- Install dispatcher script into /etc/NetworkManager/dispatcher.d
  on older distributions
- Add BuildReqires: NetworkManager to avoid owning dispatcher.d
  parent directory</changelog>
  <changelog author="rjschwei@suse.com" date="1709985600">- Update to version 1.12 (bsc#1221202)
  + If token access succeeds using IPv4 do not use the IPv6 endpoint
    only use the IPv6 IMDS endpoint if IPv4 access fails.</changelog>
</package>
<package pkgid="7f5f3f381dbeacff61423e8731592a67dc3db2ccb61d31afbfbba9cbca1339a2" name="cloud-netconfig-azure" arch="src">
  <version epoch="0" ver="1.12" rel="150000.25.20.1"/>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
  <changelog author="jgleissner@suse.com" date="1707393600">- Update to version 1.11:
  + Revert address metadata lookup in GCE to local lookup (bsc#1219454)
  + Fix hang on warning log messages
  + Check whether getting IPv4 addresses from metadata failed and abort
    if true
  + Only delete policy rules if they exist
  + Skip adding/removing IPv4 ranges if metdata lookup failed
  + Improve error handling and logging in Azure
  + Set SCRIPTDIR when installing netconfig wrapper</changelog>
  <changelog author="jgleissner@suse.com" date="1708948800">- Add Provides/Obsoletes for dropped cloud-netconfig-nm
- Install dispatcher script into /etc/NetworkManager/dispatcher.d
  on older distributions
- Add BuildReqires: NetworkManager to avoid owning dispatcher.d
  parent directory</changelog>
  <changelog author="rjschwei@suse.com" date="1709985600">- Update to version 1.12 (bsc#1221202)
  + If token access succeeds using IPv4 do not use the IPv6 endpoint
    only use the IPv6 IMDS endpoint if IPv4 access fails.</changelog>
</package>
<package pkgid="bf9da4870bf9a77943b8a2fd5fdee8c6282849d6298b9fe9a94847ffb9d2eb18" name="cloud-netconfig-azure" arch="noarch">
  <version epoch="0" ver="1.14" rel="150000.25.23.1"/>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
  <changelog author="jgleissner@suse.com" date="1707393600">- Update to version 1.11:
  + Revert address metadata lookup in GCE to local lookup (bsc#1219454)
  + Fix hang on warning log messages
  + Check whether getting IPv4 addresses from metadata failed and abort
    if true
  + Only delete policy rules if they exist
  + Skip adding/removing IPv4 ranges if metdata lookup failed
  + Improve error handling and logging in Azure
  + Set SCRIPTDIR when installing netconfig wrapper</changelog>
  <changelog author="jgleissner@suse.com" date="1708948800">- Add Provides/Obsoletes for dropped cloud-netconfig-nm
- Install dispatcher script into /etc/NetworkManager/dispatcher.d
  on older distributions
- Add BuildReqires: NetworkManager to avoid owning dispatcher.d
  parent directory</changelog>
  <changelog author="rjschwei@suse.com" date="1709985600">- Update to version 1.12 (bsc#1221202)
  + If token access succeeds using IPv4 do not use the IPv6 endpoint
    only use the IPv6 IMDS endpoint if IPv4 access fails.</changelog>
  <changelog author="rjschwei@suse.com" date="1709985601">- Add version settings to Provides/Obsoletes</changelog>
  <changelog author="jgleissner@suse.com" date="1710936000">- Update to version 1.14
  + Use '-s' instead of '--no-progress-meter' for curl (bsc#1221757)</changelog>
</package>
<package pkgid="2350960791009e6aab21afbd20ddd0ce9beb4acf01d0165e7db2a7853594ca20" name="cloud-netconfig-azure" arch="src">
  <version epoch="0" ver="1.14" rel="150000.25.23.1"/>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
  <changelog author="jgleissner@suse.com" date="1707393600">- Update to version 1.11:
  + Revert address metadata lookup in GCE to local lookup (bsc#1219454)
  + Fix hang on warning log messages
  + Check whether getting IPv4 addresses from metadata failed and abort
    if true
  + Only delete policy rules if they exist
  + Skip adding/removing IPv4 ranges if metdata lookup failed
  + Improve error handling and logging in Azure
  + Set SCRIPTDIR when installing netconfig wrapper</changelog>
  <changelog author="jgleissner@suse.com" date="1708948800">- Add Provides/Obsoletes for dropped cloud-netconfig-nm
- Install dispatcher script into /etc/NetworkManager/dispatcher.d
  on older distributions
- Add BuildReqires: NetworkManager to avoid owning dispatcher.d
  parent directory</changelog>
  <changelog author="rjschwei@suse.com" date="1709985600">- Update to version 1.12 (bsc#1221202)
  + If token access succeeds using IPv4 do not use the IPv6 endpoint
    only use the IPv6 IMDS endpoint if IPv4 access fails.</changelog>
  <changelog author="rjschwei@suse.com" date="1709985601">- Add version settings to Provides/Obsoletes</changelog>
  <changelog author="jgleissner@suse.com" date="1710936000">- Update to version 1.14
  + Use '-s' instead of '--no-progress-meter' for curl (bsc#1221757)</changelog>
</package>
<package pkgid="ecd39335e529476b669e0946e9bff81c6947dff69ab687ff3f7b8e40341ef55c" name="cloud-netconfig-azure" arch="noarch">
  <version epoch="0" ver="1.8" rel="150000.25.11.1"/>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
</package>
<package pkgid="8d233dda3e49f4e333a5f5294c3b48e43fa5034d6e0d3565b283b850033c59b4" name="cloud-netconfig-azure" arch="src">
  <version epoch="0" ver="1.8" rel="150000.25.11.1"/>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
</package>
<package pkgid="12703ccd307386d0bbe156b3a79ba2362082416d255d7f561296e0b25b7c42b2" name="cloud-netconfig-ec2" arch="noarch">
  <version epoch="0" ver="1.10" rel="150000.25.14.1"/>
  <changelog author="jgleissner@suse.com" date="1507896000">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
</package>
<package pkgid="2e71bfd7f8aca08cbd94f5b02643ca53ba6a35c46e5e4bdd99b661d339e69833" name="cloud-netconfig-ec2" arch="src">
  <version epoch="0" ver="1.10" rel="150000.25.14.1"/>
  <changelog author="jgleissner@suse.com" date="1507896000">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
</package>
<package pkgid="4baf881af681d13ca620ed3bf27765b9c3f0959faaebc49ba35ff1b98a56160f" name="cloud-netconfig-ec2" arch="noarch">
  <version epoch="0" ver="1.11" rel="150000.25.17.1"/>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
  <changelog author="jgleissner@suse.com" date="1707393600">- Update to version 1.11:
  + Revert address metadata lookup in GCE to local lookup (bsc#1219454)
  + Fix hang on warning log messages
  + Check whether getting IPv4 addresses from metadata failed and abort
    if true
  + Only delete policy rules if they exist
  + Skip adding/removing IPv4 ranges if metdata lookup failed
  + Improve error handling and logging in Azure
  + Set SCRIPTDIR when installing netconfig wrapper</changelog>
  <changelog author="jgleissner@suse.com" date="1708948800">- Add Provides/Obsoletes for dropped cloud-netconfig-nm
- Install dispatcher script into /etc/NetworkManager/dispatcher.d
  on older distributions
- Add BuildReqires: NetworkManager to avoid owning dispatcher.d
  parent directory</changelog>
</package>
<package pkgid="5b93c008f55d322adab097201cdcd7d5d5d92cd102848f5bd883aca874b0011f" name="cloud-netconfig-ec2" arch="src">
  <version epoch="0" ver="1.11" rel="150000.25.17.1"/>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
  <changelog author="jgleissner@suse.com" date="1707393600">- Update to version 1.11:
  + Revert address metadata lookup in GCE to local lookup (bsc#1219454)
  + Fix hang on warning log messages
  + Check whether getting IPv4 addresses from metadata failed and abort
    if true
  + Only delete policy rules if they exist
  + Skip adding/removing IPv4 ranges if metdata lookup failed
  + Improve error handling and logging in Azure
  + Set SCRIPTDIR when installing netconfig wrapper</changelog>
  <changelog author="jgleissner@suse.com" date="1708948800">- Add Provides/Obsoletes for dropped cloud-netconfig-nm
- Install dispatcher script into /etc/NetworkManager/dispatcher.d
  on older distributions
- Add BuildReqires: NetworkManager to avoid owning dispatcher.d
  parent directory</changelog>
</package>
<package pkgid="90dd2078f76be064505eac3e71c899749cc1abe0653e8fd8906a912de5d81164" name="cloud-netconfig-ec2" arch="noarch">
  <version epoch="0" ver="1.12" rel="150000.25.20.1"/>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
  <changelog author="jgleissner@suse.com" date="1707393600">- Update to version 1.11:
  + Revert address metadata lookup in GCE to local lookup (bsc#1219454)
  + Fix hang on warning log messages
  + Check whether getting IPv4 addresses from metadata failed and abort
    if true
  + Only delete policy rules if they exist
  + Skip adding/removing IPv4 ranges if metdata lookup failed
  + Improve error handling and logging in Azure
  + Set SCRIPTDIR when installing netconfig wrapper</changelog>
  <changelog author="jgleissner@suse.com" date="1708948800">- Add Provides/Obsoletes for dropped cloud-netconfig-nm
- Install dispatcher script into /etc/NetworkManager/dispatcher.d
  on older distributions
- Add BuildReqires: NetworkManager to avoid owning dispatcher.d
  parent directory</changelog>
  <changelog author="rjschwei@suse.com" date="1709985600">- Update to version 1.12 (bsc#1221202)
  + If token access succeeds using IPv4 do not use the IPv6 endpoint
    only use the IPv6 IMDS endpoint if IPv4 access fails.</changelog>
</package>
<package pkgid="97b333140593b027ea551d5ff9750d42ec114bbffc11633e95c1cb6ea451ac3b" name="cloud-netconfig-ec2" arch="src">
  <version epoch="0" ver="1.12" rel="150000.25.20.1"/>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
  <changelog author="jgleissner@suse.com" date="1707393600">- Update to version 1.11:
  + Revert address metadata lookup in GCE to local lookup (bsc#1219454)
  + Fix hang on warning log messages
  + Check whether getting IPv4 addresses from metadata failed and abort
    if true
  + Only delete policy rules if they exist
  + Skip adding/removing IPv4 ranges if metdata lookup failed
  + Improve error handling and logging in Azure
  + Set SCRIPTDIR when installing netconfig wrapper</changelog>
  <changelog author="jgleissner@suse.com" date="1708948800">- Add Provides/Obsoletes for dropped cloud-netconfig-nm
- Install dispatcher script into /etc/NetworkManager/dispatcher.d
  on older distributions
- Add BuildReqires: NetworkManager to avoid owning dispatcher.d
  parent directory</changelog>
  <changelog author="rjschwei@suse.com" date="1709985600">- Update to version 1.12 (bsc#1221202)
  + If token access succeeds using IPv4 do not use the IPv6 endpoint
    only use the IPv6 IMDS endpoint if IPv4 access fails.</changelog>
</package>
<package pkgid="1e74443ef43e8521674e4738808cef158f27d897100e4ea717d6cac5f13aa97f" name="cloud-netconfig-ec2" arch="noarch">
  <version epoch="0" ver="1.14" rel="150000.25.23.1"/>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
  <changelog author="jgleissner@suse.com" date="1707393600">- Update to version 1.11:
  + Revert address metadata lookup in GCE to local lookup (bsc#1219454)
  + Fix hang on warning log messages
  + Check whether getting IPv4 addresses from metadata failed and abort
    if true
  + Only delete policy rules if they exist
  + Skip adding/removing IPv4 ranges if metdata lookup failed
  + Improve error handling and logging in Azure
  + Set SCRIPTDIR when installing netconfig wrapper</changelog>
  <changelog author="jgleissner@suse.com" date="1708948800">- Add Provides/Obsoletes for dropped cloud-netconfig-nm
- Install dispatcher script into /etc/NetworkManager/dispatcher.d
  on older distributions
- Add BuildReqires: NetworkManager to avoid owning dispatcher.d
  parent directory</changelog>
  <changelog author="rjschwei@suse.com" date="1709985600">- Update to version 1.12 (bsc#1221202)
  + If token access succeeds using IPv4 do not use the IPv6 endpoint
    only use the IPv6 IMDS endpoint if IPv4 access fails.</changelog>
  <changelog author="rjschwei@suse.com" date="1709985601">- Add version settings to Provides/Obsoletes</changelog>
  <changelog author="jgleissner@suse.com" date="1710936000">- Update to version 1.14
  + Use '-s' instead of '--no-progress-meter' for curl (bsc#1221757)</changelog>
</package>
<package pkgid="4481f1441a6f4c1f115cbdaf167e7640919ea2d322d39b733a797db1a4f1b0b2" name="cloud-netconfig-ec2" arch="src">
  <version epoch="0" ver="1.14" rel="150000.25.23.1"/>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
  <changelog author="jgleissner@suse.com" date="1707393600">- Update to version 1.11:
  + Revert address metadata lookup in GCE to local lookup (bsc#1219454)
  + Fix hang on warning log messages
  + Check whether getting IPv4 addresses from metadata failed and abort
    if true
  + Only delete policy rules if they exist
  + Skip adding/removing IPv4 ranges if metdata lookup failed
  + Improve error handling and logging in Azure
  + Set SCRIPTDIR when installing netconfig wrapper</changelog>
  <changelog author="jgleissner@suse.com" date="1708948800">- Add Provides/Obsoletes for dropped cloud-netconfig-nm
- Install dispatcher script into /etc/NetworkManager/dispatcher.d
  on older distributions
- Add BuildReqires: NetworkManager to avoid owning dispatcher.d
  parent directory</changelog>
  <changelog author="rjschwei@suse.com" date="1709985600">- Update to version 1.12 (bsc#1221202)
  + If token access succeeds using IPv4 do not use the IPv6 endpoint
    only use the IPv6 IMDS endpoint if IPv4 access fails.</changelog>
  <changelog author="rjschwei@suse.com" date="1709985601">- Add version settings to Provides/Obsoletes</changelog>
  <changelog author="jgleissner@suse.com" date="1710936000">- Update to version 1.14
  + Use '-s' instead of '--no-progress-meter' for curl (bsc#1221757)</changelog>
</package>
<package pkgid="e2f1f16da1088410353e046e1582a29f3852a1af3ac66c25b89c60c8177b0fcb" name="cloud-netconfig-ec2" arch="noarch">
  <version epoch="0" ver="1.8" rel="150000.25.11.1"/>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
</package>
<package pkgid="c6fa23ae082555d6ea55fe248b1900271edb6339a2f50139b884be6204cd5169" name="cloud-netconfig-ec2" arch="src">
  <version epoch="0" ver="1.8" rel="150000.25.11.1"/>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
</package>
<package pkgid="0b997d5b9413679f49df757cf99ba095c8262759bd9bf122881032a558297610" name="cloud-netconfig-gce" arch="noarch">
  <version epoch="0" ver="1.10" rel="150000.25.14.1"/>
  <changelog author="jgleissner@suse.com" date="1507896000">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
</package>
<package pkgid="5e1a179192782a3713a4f580930aadd74d003f6c4f0852604cc1595558da5b90" name="cloud-netconfig-gce" arch="src">
  <version epoch="0" ver="1.10" rel="150000.25.14.1"/>
  <changelog author="jgleissner@suse.com" date="1507896000">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
</package>
<package pkgid="9d7f849cea3cd3ca4a86dfc159f7dcc740b123394ce898431b1bf3da30537c2c" name="cloud-netconfig-gce" arch="noarch">
  <version epoch="0" ver="1.11" rel="150000.25.17.1"/>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
  <changelog author="jgleissner@suse.com" date="1707393600">- Update to version 1.11:
  + Revert address metadata lookup in GCE to local lookup (bsc#1219454)
  + Fix hang on warning log messages
  + Check whether getting IPv4 addresses from metadata failed and abort
    if true
  + Only delete policy rules if they exist
  + Skip adding/removing IPv4 ranges if metdata lookup failed
  + Improve error handling and logging in Azure
  + Set SCRIPTDIR when installing netconfig wrapper</changelog>
  <changelog author="jgleissner@suse.com" date="1708948800">- Add Provides/Obsoletes for dropped cloud-netconfig-nm
- Install dispatcher script into /etc/NetworkManager/dispatcher.d
  on older distributions
- Add BuildReqires: NetworkManager to avoid owning dispatcher.d
  parent directory</changelog>
</package>
<package pkgid="872b7559abbb7871a9f1ccdb99c4ecbec29d7023ded33b0a6e0d61f6999c3743" name="cloud-netconfig-gce" arch="src">
  <version epoch="0" ver="1.11" rel="150000.25.17.1"/>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
  <changelog author="jgleissner@suse.com" date="1707393600">- Update to version 1.11:
  + Revert address metadata lookup in GCE to local lookup (bsc#1219454)
  + Fix hang on warning log messages
  + Check whether getting IPv4 addresses from metadata failed and abort
    if true
  + Only delete policy rules if they exist
  + Skip adding/removing IPv4 ranges if metdata lookup failed
  + Improve error handling and logging in Azure
  + Set SCRIPTDIR when installing netconfig wrapper</changelog>
  <changelog author="jgleissner@suse.com" date="1708948800">- Add Provides/Obsoletes for dropped cloud-netconfig-nm
- Install dispatcher script into /etc/NetworkManager/dispatcher.d
  on older distributions
- Add BuildReqires: NetworkManager to avoid owning dispatcher.d
  parent directory</changelog>
</package>
<package pkgid="5f6a990bd96e68cf302f79b98da1b7d81cb8322e53e22c33dbd123d31de0cf0f" name="cloud-netconfig-gce" arch="noarch">
  <version epoch="0" ver="1.12" rel="150000.25.20.1"/>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
  <changelog author="jgleissner@suse.com" date="1707393600">- Update to version 1.11:
  + Revert address metadata lookup in GCE to local lookup (bsc#1219454)
  + Fix hang on warning log messages
  + Check whether getting IPv4 addresses from metadata failed and abort
    if true
  + Only delete policy rules if they exist
  + Skip adding/removing IPv4 ranges if metdata lookup failed
  + Improve error handling and logging in Azure
  + Set SCRIPTDIR when installing netconfig wrapper</changelog>
  <changelog author="jgleissner@suse.com" date="1708948800">- Add Provides/Obsoletes for dropped cloud-netconfig-nm
- Install dispatcher script into /etc/NetworkManager/dispatcher.d
  on older distributions
- Add BuildReqires: NetworkManager to avoid owning dispatcher.d
  parent directory</changelog>
  <changelog author="rjschwei@suse.com" date="1709985600">- Update to version 1.12 (bsc#1221202)
  + If token access succeeds using IPv4 do not use the IPv6 endpoint
    only use the IPv6 IMDS endpoint if IPv4 access fails.</changelog>
</package>
<package pkgid="bf6b28687084d02aa3ff06ee9c2b8e026a877c538fb7f4d4a78b2e8011b886ca" name="cloud-netconfig-gce" arch="src">
  <version epoch="0" ver="1.12" rel="150000.25.20.1"/>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
  <changelog author="jgleissner@suse.com" date="1707393600">- Update to version 1.11:
  + Revert address metadata lookup in GCE to local lookup (bsc#1219454)
  + Fix hang on warning log messages
  + Check whether getting IPv4 addresses from metadata failed and abort
    if true
  + Only delete policy rules if they exist
  + Skip adding/removing IPv4 ranges if metdata lookup failed
  + Improve error handling and logging in Azure
  + Set SCRIPTDIR when installing netconfig wrapper</changelog>
  <changelog author="jgleissner@suse.com" date="1708948800">- Add Provides/Obsoletes for dropped cloud-netconfig-nm
- Install dispatcher script into /etc/NetworkManager/dispatcher.d
  on older distributions
- Add BuildReqires: NetworkManager to avoid owning dispatcher.d
  parent directory</changelog>
  <changelog author="rjschwei@suse.com" date="1709985600">- Update to version 1.12 (bsc#1221202)
  + If token access succeeds using IPv4 do not use the IPv6 endpoint
    only use the IPv6 IMDS endpoint if IPv4 access fails.</changelog>
</package>
<package pkgid="087cbdac3f1f4b11afdce5a8d3cbcc5af5789677a8a724f04d820603f648a5d8" name="cloud-netconfig-gce" arch="noarch">
  <version epoch="0" ver="1.14" rel="150000.25.23.1"/>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
  <changelog author="jgleissner@suse.com" date="1707393600">- Update to version 1.11:
  + Revert address metadata lookup in GCE to local lookup (bsc#1219454)
  + Fix hang on warning log messages
  + Check whether getting IPv4 addresses from metadata failed and abort
    if true
  + Only delete policy rules if they exist
  + Skip adding/removing IPv4 ranges if metdata lookup failed
  + Improve error handling and logging in Azure
  + Set SCRIPTDIR when installing netconfig wrapper</changelog>
  <changelog author="jgleissner@suse.com" date="1708948800">- Add Provides/Obsoletes for dropped cloud-netconfig-nm
- Install dispatcher script into /etc/NetworkManager/dispatcher.d
  on older distributions
- Add BuildReqires: NetworkManager to avoid owning dispatcher.d
  parent directory</changelog>
  <changelog author="rjschwei@suse.com" date="1709985600">- Update to version 1.12 (bsc#1221202)
  + If token access succeeds using IPv4 do not use the IPv6 endpoint
    only use the IPv6 IMDS endpoint if IPv4 access fails.</changelog>
  <changelog author="rjschwei@suse.com" date="1709985601">- Add version settings to Provides/Obsoletes</changelog>
  <changelog author="jgleissner@suse.com" date="1710936000">- Update to version 1.14
  + Use '-s' instead of '--no-progress-meter' for curl (bsc#1221757)</changelog>
</package>
<package pkgid="e8fc7d4400b590db9bb136aebdb27767a096b9028cac7a5540b37026cdae5c51" name="cloud-netconfig-gce" arch="src">
  <version epoch="0" ver="1.14" rel="150000.25.23.1"/>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
  <changelog author="jgleissner@suse.com" date="1707393600">- Update to version 1.11:
  + Revert address metadata lookup in GCE to local lookup (bsc#1219454)
  + Fix hang on warning log messages
  + Check whether getting IPv4 addresses from metadata failed and abort
    if true
  + Only delete policy rules if they exist
  + Skip adding/removing IPv4 ranges if metdata lookup failed
  + Improve error handling and logging in Azure
  + Set SCRIPTDIR when installing netconfig wrapper</changelog>
  <changelog author="jgleissner@suse.com" date="1708948800">- Add Provides/Obsoletes for dropped cloud-netconfig-nm
- Install dispatcher script into /etc/NetworkManager/dispatcher.d
  on older distributions
- Add BuildReqires: NetworkManager to avoid owning dispatcher.d
  parent directory</changelog>
  <changelog author="rjschwei@suse.com" date="1709985600">- Update to version 1.12 (bsc#1221202)
  + If token access succeeds using IPv4 do not use the IPv6 endpoint
    only use the IPv6 IMDS endpoint if IPv4 access fails.</changelog>
  <changelog author="rjschwei@suse.com" date="1709985601">- Add version settings to Provides/Obsoletes</changelog>
  <changelog author="jgleissner@suse.com" date="1710936000">- Update to version 1.14
  + Use '-s' instead of '--no-progress-meter' for curl (bsc#1221757)</changelog>
</package>
<package pkgid="e96addec1958e48b5aa2ee7f4ec229b5d5bdf1a6081f5f25df1ba12ff2be61e4" name="cloud-netconfig-gce" arch="noarch">
  <version epoch="0" ver="1.8" rel="150000.25.11.1"/>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
</package>
<package pkgid="2a53a5a86a5560e8b608cd7447f0050a7bc8843a6ad70297c77c03ac52ba27f7" name="cloud-netconfig-gce" arch="src">
  <version epoch="0" ver="1.8" rel="150000.25.11.1"/>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
</package>
<package pkgid="d9404703e04a9603fbf3d2f27b866495d0ce5bc2560329cffc55cdff064ea054" name="cloud-regionsrv-client" arch="noarch">
  <version epoch="0" ver="10.1.3" rel="150000.6.99.1"/>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
</package>
<package pkgid="e884d71114ea4535dabb64d892f46635fb58fcf81ba3bea5398c35da3f3c50a8" name="cloud-regionsrv-client" arch="src">
  <version epoch="0" ver="10.1.3" rel="150000.6.99.1"/>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
</package>
<package pkgid="6dcf5a787b4c5412b248f58def316f0ebfb7d677ef7a63f891f24b20e8018fdf" name="cloud-regionsrv-client" arch="noarch">
  <version epoch="0" ver="10.1.5" rel="150000.6.102.1"/>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
</package>
<package pkgid="c2e8a49b2d377b718a8cfcf55eceedb7825b59f98b1e789b3ae5ab46489f6303" name="cloud-regionsrv-client" arch="src">
  <version epoch="0" ver="10.1.5" rel="150000.6.102.1"/>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
</package>
<package pkgid="847607a21d6b97e123dd1ce10bf8ec7028964cedba93bc2784cfca03871175bc" name="cloud-regionsrv-client" arch="noarch">
  <version epoch="0" ver="10.1.6" rel="150000.6.105.1"/>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
</package>
<package pkgid="83160df3467a59f21fe46a1d17f4f99679398af5d887960b35cb1fe07f01f589" name="cloud-regionsrv-client" arch="src">
  <version epoch="0" ver="10.1.6" rel="150000.6.105.1"/>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
</package>
<package pkgid="0fa0a91f94694a200bc00e33323e566ac155b0569250dc128ee7cc83789db09e" name="cloud-regionsrv-client" arch="noarch">
  <version epoch="0" ver="10.1.7" rel="150000.6.108.1"/>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
  <changelog author="rjschwei@suse.com" date="1708603200">- Update to version 10.1.7 (bsc#1220164, bsc#1220165)
  + Fix the failover path to a new target update server. At present a new
    server is not found since credential validation fails. We targeted
    the server detected in down condition to verify the credentials instead
    of the replacement server.</changelog>
</package>
<package pkgid="5c630ea5e9039747f9d9a8efe3f0315f008747062a539952334dcadec0601c7b" name="cloud-regionsrv-client" arch="src">
  <version epoch="0" ver="10.1.7" rel="150000.6.108.1"/>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
  <changelog author="rjschwei@suse.com" date="1708603200">- Update to version 10.1.7 (bsc#1220164, bsc#1220165)
  + Fix the failover path to a new target update server. At present a new
    server is not found since credential validation fails. We targeted
    the server detected in down condition to verify the credentials instead
    of the replacement server.</changelog>
</package>
<package pkgid="f0cd328d8891cffd15db8bee523fb6cea598864aaa8dfe5402d91c620866bb5d" name="cloud-regionsrv-client" arch="aarch64">
  <version epoch="0" ver="10.3.0" rel="150300.13.3.1"/>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
  <changelog author="rjschwei@suse.com" date="1708603200">- Update to version 10.1.7 (bsc#1220164, bsc#1220165)
  + Fix the failover path to a new target update server. At present a new
    server is not found since credential validation fails. We targeted
    the server detected in down condition to verify the credentials instead
    of the replacement server.</changelog>
  <changelog author="rjschwei@suse.com" date="1715256000">- Update to version 10.2.0 (bsc#1223571, bsc#1224014, bsc#1224016)
  + In addition to logging, write message to stderr when registration fails
  + Detect transactional-update system with read only setup and use
    the transactional-update command to register
  + Handle operation in a different target root directory for credentials
    checking</changelog>
  <changelog author="jesus.bv@suse.com" date="1719921600">- Update to version 10.3.0 (bsc#1227308, bsc#1222985)
  + Add support for sidecar registry
    Podman and rootless Docker support to set up the necessary
    configuration for the container engines to run as defined
  + Add running command as root through sudoers file</changelog>
</package>
<package pkgid="744c4d48a3c8a727967defe48a4df7eeec3773249e7acbeefd0355e46aaaa63a" name="cloud-regionsrv-client" arch="src">
  <version epoch="0" ver="10.3.0" rel="150300.13.3.1"/>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
  <changelog author="rjschwei@suse.com" date="1708603200">- Update to version 10.1.7 (bsc#1220164, bsc#1220165)
  + Fix the failover path to a new target update server. At present a new
    server is not found since credential validation fails. We targeted
    the server detected in down condition to verify the credentials instead
    of the replacement server.</changelog>
  <changelog author="rjschwei@suse.com" date="1715256000">- Update to version 10.2.0 (bsc#1223571, bsc#1224014, bsc#1224016)
  + In addition to logging, write message to stderr when registration fails
  + Detect transactional-update system with read only setup and use
    the transactional-update command to register
  + Handle operation in a different target root directory for credentials
    checking</changelog>
  <changelog author="jesus.bv@suse.com" date="1719921600">- Update to version 10.3.0 (bsc#1227308, bsc#1222985)
  + Add support for sidecar registry
    Podman and rootless Docker support to set up the necessary
    configuration for the container engines to run as defined
  + Add running command as root through sudoers file</changelog>
</package>
<package pkgid="7cef108db4915428a7f5d5a8230c529e41f64857f12efd91b167576b4f4d307a" name="cloud-regionsrv-client" arch="x86_64">
  <version epoch="0" ver="10.3.0" rel="150300.13.3.1"/>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
  <changelog author="rjschwei@suse.com" date="1708603200">- Update to version 10.1.7 (bsc#1220164, bsc#1220165)
  + Fix the failover path to a new target update server. At present a new
    server is not found since credential validation fails. We targeted
    the server detected in down condition to verify the credentials instead
    of the replacement server.</changelog>
  <changelog author="rjschwei@suse.com" date="1715256000">- Update to version 10.2.0 (bsc#1223571, bsc#1224014, bsc#1224016)
  + In addition to logging, write message to stderr when registration fails
  + Detect transactional-update system with read only setup and use
    the transactional-update command to register
  + Handle operation in a different target root directory for credentials
    checking</changelog>
  <changelog author="jesus.bv@suse.com" date="1719921600">- Update to version 10.3.0 (bsc#1227308, bsc#1222985)
  + Add support for sidecar registry
    Podman and rootless Docker support to set up the necessary
    configuration for the container engines to run as defined
  + Add running command as root through sudoers file</changelog>
</package>
<package pkgid="9bb89a6a7001b53188d4e61b360c10405a673cabfbfb699192a7cd0162085fcd" name="cloud-regionsrv-client" arch="aarch64">
  <version epoch="0" ver="10.3.0" rel="150300.13.6.1"/>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
  <changelog author="rjschwei@suse.com" date="1708603200">- Update to version 10.1.7 (bsc#1220164, bsc#1220165)
  + Fix the failover path to a new target update server. At present a new
    server is not found since credential validation fails. We targeted
    the server detected in down condition to verify the credentials instead
    of the replacement server.</changelog>
  <changelog author="rjschwei@suse.com" date="1715256000">- Update to version 10.2.0 (bsc#1223571, bsc#1224014, bsc#1224016)
  + In addition to logging, write message to stderr when registration fails
  + Detect transactional-update system with read only setup and use
    the transactional-update command to register
  + Handle operation in a different target root directory for credentials
    checking</changelog>
  <changelog author="jesus.bv@suse.com" date="1719921600">- Update to version 10.3.0 (bsc#1227308, bsc#1222985)
  + Add support for sidecar registry
    Podman and rootless Docker support to set up the necessary
    configuration for the container engines to run as defined
  + Add running command as root through sudoers file</changelog>
  <changelog author="rjschwei@suse.com" date="1723723200">- Add rgnsrv-clnt-fix-docker-setup.patch (bsc#1229137)
  + The entry for the update infrastructure registry mirror was written
    incorrectly causing docker daemon startup to fail.</changelog>
</package>
<package pkgid="cf541470367ecf98ecb34ff90d61a541af2dd3d9c7714e9e639efbe715ad557e" name="cloud-regionsrv-client" arch="src">
  <version epoch="0" ver="10.3.0" rel="150300.13.6.1"/>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
  <changelog author="rjschwei@suse.com" date="1708603200">- Update to version 10.1.7 (bsc#1220164, bsc#1220165)
  + Fix the failover path to a new target update server. At present a new
    server is not found since credential validation fails. We targeted
    the server detected in down condition to verify the credentials instead
    of the replacement server.</changelog>
  <changelog author="rjschwei@suse.com" date="1715256000">- Update to version 10.2.0 (bsc#1223571, bsc#1224014, bsc#1224016)
  + In addition to logging, write message to stderr when registration fails
  + Detect transactional-update system with read only setup and use
    the transactional-update command to register
  + Handle operation in a different target root directory for credentials
    checking</changelog>
  <changelog author="jesus.bv@suse.com" date="1719921600">- Update to version 10.3.0 (bsc#1227308, bsc#1222985)
  + Add support for sidecar registry
    Podman and rootless Docker support to set up the necessary
    configuration for the container engines to run as defined
  + Add running command as root through sudoers file</changelog>
  <changelog author="rjschwei@suse.com" date="1723723200">- Add rgnsrv-clnt-fix-docker-setup.patch (bsc#1229137)
  + The entry for the update infrastructure registry mirror was written
    incorrectly causing docker daemon startup to fail.</changelog>
</package>
<package pkgid="8d1ffcd8abe0eae20d454a9081ae9c814ab785506a9b560f2a0b32e7b2f21a53" name="cloud-regionsrv-client" arch="x86_64">
  <version epoch="0" ver="10.3.0" rel="150300.13.6.1"/>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
  <changelog author="rjschwei@suse.com" date="1708603200">- Update to version 10.1.7 (bsc#1220164, bsc#1220165)
  + Fix the failover path to a new target update server. At present a new
    server is not found since credential validation fails. We targeted
    the server detected in down condition to verify the credentials instead
    of the replacement server.</changelog>
  <changelog author="rjschwei@suse.com" date="1715256000">- Update to version 10.2.0 (bsc#1223571, bsc#1224014, bsc#1224016)
  + In addition to logging, write message to stderr when registration fails
  + Detect transactional-update system with read only setup and use
    the transactional-update command to register
  + Handle operation in a different target root directory for credentials
    checking</changelog>
  <changelog author="jesus.bv@suse.com" date="1719921600">- Update to version 10.3.0 (bsc#1227308, bsc#1222985)
  + Add support for sidecar registry
    Podman and rootless Docker support to set up the necessary
    configuration for the container engines to run as defined
  + Add running command as root through sudoers file</changelog>
  <changelog author="rjschwei@suse.com" date="1723723200">- Add rgnsrv-clnt-fix-docker-setup.patch (bsc#1229137)
  + The entry for the update infrastructure registry mirror was written
    incorrectly causing docker daemon startup to fail.</changelog>
</package>
<package pkgid="549fa02f39f7eeb27347f486cb14ffbdeef194bb403e0c8ba882c2d77878308b" name="cloud-regionsrv-client" arch="noarch">
  <version epoch="0" ver="10.3.4" rel="150300.13.9.1"/>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
  <changelog author="rjschwei@suse.com" date="1708603200">- Update to version 10.1.7 (bsc#1220164, bsc#1220165)
  + Fix the failover path to a new target update server. At present a new
    server is not found since credential validation fails. We targeted
    the server detected in down condition to verify the credentials instead
    of the replacement server.</changelog>
  <changelog author="rjschwei@suse.com" date="1715256000">- Update to version 10.2.0 (bsc#1223571, bsc#1224014, bsc#1224016)
  + In addition to logging, write message to stderr when registration fails
  + Detect transactional-update system with read only setup and use
    the transactional-update command to register
  + Handle operation in a different target root directory for credentials
    checking</changelog>
  <changelog author="jesus.bv@suse.com" date="1719921600">- Update to version 10.3.0 (bsc#1227308, bsc#1222985)
  + Add support for sidecar registry
    Podman and rootless Docker support to set up the necessary
    configuration for the container engines to run as defined
  + Add running command as root through sudoers file</changelog>
  <changelog author="rjschwei@suse.com" date="1723723200">- Add rgnsrv-clnt-fix-docker-setup.patch (bsc#1229137)
  + The entry for the update infrastructure registry mirror was written
    incorrectly causing docker daemon startup to fail.</changelog>
  <changelog author="rjschwei@suse.com" date="1724846400">- Update to 10.3.4
  + Modify the message when network access over a specific IP version does
    not work. This is an informational message and should not look like
    an error
  + Inform the user that LTSS registration takes a little longer
  + Add fix-for-sles12-no-trans_update.patch
    + SLE 12 family has no products with transactional-update we do not
    need to look for this condition
- From 10.3.3 (bsc#1229472)
  + Handle changes in process structure to properly identify the running
    zypper parent process and only check for 1 PID
- From 10.3.2
  + Remove rgnsrv-clnt-fix-docker-setup.patch included upstream
- From 10.3.1 (jsc#PCT-400)
  + Add support for LTSS registration
  + Add fix-for-sles12-disable-registry.patch
    ~ No container support in SLE 12</changelog>
</package>
<package pkgid="568b23b961a24b8d55d008477ce17b858816efb2fa0316e43e643c5efc377acf" name="cloud-regionsrv-client" arch="src">
  <version epoch="0" ver="10.3.4" rel="150300.13.9.1"/>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
  <changelog author="rjschwei@suse.com" date="1708603200">- Update to version 10.1.7 (bsc#1220164, bsc#1220165)
  + Fix the failover path to a new target update server. At present a new
    server is not found since credential validation fails. We targeted
    the server detected in down condition to verify the credentials instead
    of the replacement server.</changelog>
  <changelog author="rjschwei@suse.com" date="1715256000">- Update to version 10.2.0 (bsc#1223571, bsc#1224014, bsc#1224016)
  + In addition to logging, write message to stderr when registration fails
  + Detect transactional-update system with read only setup and use
    the transactional-update command to register
  + Handle operation in a different target root directory for credentials
    checking</changelog>
  <changelog author="jesus.bv@suse.com" date="1719921600">- Update to version 10.3.0 (bsc#1227308, bsc#1222985)
  + Add support for sidecar registry
    Podman and rootless Docker support to set up the necessary
    configuration for the container engines to run as defined
  + Add running command as root through sudoers file</changelog>
  <changelog author="rjschwei@suse.com" date="1723723200">- Add rgnsrv-clnt-fix-docker-setup.patch (bsc#1229137)
  + The entry for the update infrastructure registry mirror was written
    incorrectly causing docker daemon startup to fail.</changelog>
  <changelog author="rjschwei@suse.com" date="1724846400">- Update to 10.3.4
  + Modify the message when network access over a specific IP version does
    not work. This is an informational message and should not look like
    an error
  + Inform the user that LTSS registration takes a little longer
  + Add fix-for-sles12-no-trans_update.patch
    + SLE 12 family has no products with transactional-update we do not
    need to look for this condition
- From 10.3.3 (bsc#1229472)
  + Handle changes in process structure to properly identify the running
    zypper parent process and only check for 1 PID
- From 10.3.2
  + Remove rgnsrv-clnt-fix-docker-setup.patch included upstream
- From 10.3.1 (jsc#PCT-400)
  + Add support for LTSS registration
  + Add fix-for-sles12-disable-registry.patch
    ~ No container support in SLE 12</changelog>
</package>
<package pkgid="eb8c90a5c3f15d2f66fa75989bcb89a9a6844adc27cf78a0dc811ef87b300230" name="cloud-regionsrv-client-addon-azure" arch="noarch">
  <version epoch="0" ver="1.0.5" rel="150000.6.102.1"/>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
</package>
<package pkgid="d50cc83f0f8b4ae729ba1d00569c45293c80ecc84a6c0868cdf6fb23bf7d40a2" name="cloud-regionsrv-client-addon-azure" arch="noarch">
  <version epoch="0" ver="1.0.5" rel="150000.6.105.1"/>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
</package>
<package pkgid="4a36027309d62ae7698e9c5c5a076c78164670b9987e4c5870406304c358309b" name="cloud-regionsrv-client-addon-azure" arch="noarch">
  <version epoch="0" ver="1.0.5" rel="150000.6.108.1"/>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
  <changelog author="rjschwei@suse.com" date="1708603200">- Update to version 10.1.7 (bsc#1220164, bsc#1220165)
  + Fix the failover path to a new target update server. At present a new
    server is not found since credential validation fails. We targeted
    the server detected in down condition to verify the credentials instead
    of the replacement server.</changelog>
</package>
<package pkgid="607559670e6e141fe1a622deeb9509c21b60b3ea7f1acce257ce8b6b7fcd324e" name="cloud-regionsrv-client-addon-azure" arch="noarch">
  <version epoch="0" ver="1.0.5" rel="150000.6.99.1"/>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
</package>
<package pkgid="ae999e5184ba0c380a5ad71dee7a5c2ef9a046c463fb081383473232ddd5d3ef" name="cloud-regionsrv-client-addon-azure" arch="noarch">
  <version epoch="0" ver="1.0.5" rel="150300.13.3.1"/>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
  <changelog author="rjschwei@suse.com" date="1708603200">- Update to version 10.1.7 (bsc#1220164, bsc#1220165)
  + Fix the failover path to a new target update server. At present a new
    server is not found since credential validation fails. We targeted
    the server detected in down condition to verify the credentials instead
    of the replacement server.</changelog>
  <changelog author="rjschwei@suse.com" date="1715256000">- Update to version 10.2.0 (bsc#1223571, bsc#1224014, bsc#1224016)
  + In addition to logging, write message to stderr when registration fails
  + Detect transactional-update system with read only setup and use
    the transactional-update command to register
  + Handle operation in a different target root directory for credentials
    checking</changelog>
  <changelog author="jesus.bv@suse.com" date="1719921600">- Update to version 10.3.0 (bsc#1227308, bsc#1222985)
  + Add support for sidecar registry
    Podman and rootless Docker support to set up the necessary
    configuration for the container engines to run as defined
  + Add running command as root through sudoers file</changelog>
</package>
<package pkgid="42d7c0d8ae9348713c6386f7cf388ab4946fbcf307a9fe846c026826dbe72ba9" name="cloud-regionsrv-client-addon-azure" arch="noarch">
  <version epoch="0" ver="1.0.5" rel="150300.13.6.1"/>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
  <changelog author="rjschwei@suse.com" date="1708603200">- Update to version 10.1.7 (bsc#1220164, bsc#1220165)
  + Fix the failover path to a new target update server. At present a new
    server is not found since credential validation fails. We targeted
    the server detected in down condition to verify the credentials instead
    of the replacement server.</changelog>
  <changelog author="rjschwei@suse.com" date="1715256000">- Update to version 10.2.0 (bsc#1223571, bsc#1224014, bsc#1224016)
  + In addition to logging, write message to stderr when registration fails
  + Detect transactional-update system with read only setup and use
    the transactional-update command to register
  + Handle operation in a different target root directory for credentials
    checking</changelog>
  <changelog author="jesus.bv@suse.com" date="1719921600">- Update to version 10.3.0 (bsc#1227308, bsc#1222985)
  + Add support for sidecar registry
    Podman and rootless Docker support to set up the necessary
    configuration for the container engines to run as defined
  + Add running command as root through sudoers file</changelog>
  <changelog author="rjschwei@suse.com" date="1723723200">- Add rgnsrv-clnt-fix-docker-setup.patch (bsc#1229137)
  + The entry for the update infrastructure registry mirror was written
    incorrectly causing docker daemon startup to fail.</changelog>
</package>
<package pkgid="1e821cf019d6514a0e5678fc13eeec4974a773c10742c42d33197c08b28b8fdc" name="cloud-regionsrv-client-addon-azure" arch="noarch">
  <version epoch="0" ver="1.0.5" rel="150300.13.9.1"/>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
  <changelog author="rjschwei@suse.com" date="1708603200">- Update to version 10.1.7 (bsc#1220164, bsc#1220165)
  + Fix the failover path to a new target update server. At present a new
    server is not found since credential validation fails. We targeted
    the server detected in down condition to verify the credentials instead
    of the replacement server.</changelog>
  <changelog author="rjschwei@suse.com" date="1715256000">- Update to version 10.2.0 (bsc#1223571, bsc#1224014, bsc#1224016)
  + In addition to logging, write message to stderr when registration fails
  + Detect transactional-update system with read only setup and use
    the transactional-update command to register
  + Handle operation in a different target root directory for credentials
    checking</changelog>
  <changelog author="jesus.bv@suse.com" date="1719921600">- Update to version 10.3.0 (bsc#1227308, bsc#1222985)
  + Add support for sidecar registry
    Podman and rootless Docker support to set up the necessary
    configuration for the container engines to run as defined
  + Add running command as root through sudoers file</changelog>
  <changelog author="rjschwei@suse.com" date="1723723200">- Add rgnsrv-clnt-fix-docker-setup.patch (bsc#1229137)
  + The entry for the update infrastructure registry mirror was written
    incorrectly causing docker daemon startup to fail.</changelog>
  <changelog author="rjschwei@suse.com" date="1724846400">- Update to 10.3.4
  + Modify the message when network access over a specific IP version does
    not work. This is an informational message and should not look like
    an error
  + Inform the user that LTSS registration takes a little longer
  + Add fix-for-sles12-no-trans_update.patch
    + SLE 12 family has no products with transactional-update we do not
    need to look for this condition
- From 10.3.3 (bsc#1229472)
  + Handle changes in process structure to properly identify the running
    zypper parent process and only check for 1 PID
- From 10.3.2
  + Remove rgnsrv-clnt-fix-docker-setup.patch included upstream
- From 10.3.1 (jsc#PCT-400)
  + Add support for LTSS registration
  + Add fix-for-sles12-disable-registry.patch
    ~ No container support in SLE 12</changelog>
</package>
<package pkgid="01f36838871b0cab476e0501a0a30abaf454369130419d33209f661756918252" name="cloud-regionsrv-client-generic-config" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="150000.6.102.1"/>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
</package>
<package pkgid="2e95d2b8350862593de00c2a176ddcc32b1cc0eff6074846e4e6efb66a12049c" name="cloud-regionsrv-client-generic-config" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="150000.6.105.1"/>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
</package>
<package pkgid="997db7017b43ce16d6730aef2ec8e878cfa74f138ddb4a70793cd9f106d59c1d" name="cloud-regionsrv-client-generic-config" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="150000.6.108.1"/>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
  <changelog author="rjschwei@suse.com" date="1708603200">- Update to version 10.1.7 (bsc#1220164, bsc#1220165)
  + Fix the failover path to a new target update server. At present a new
    server is not found since credential validation fails. We targeted
    the server detected in down condition to verify the credentials instead
    of the replacement server.</changelog>
</package>
<package pkgid="831c3b1dc52c7506ad422bada408c5b10a967a775fee4a96e9e0ca69d4924778" name="cloud-regionsrv-client-generic-config" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="150000.6.99.1"/>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
</package>
<package pkgid="33a1374433dd2123dcc9f470a995180c1938585d9f57b156124b86cd19f67c9b" name="cloud-regionsrv-client-generic-config" arch="aarch64">
  <version epoch="0" ver="1.0.0" rel="150300.13.3.1"/>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
  <changelog author="rjschwei@suse.com" date="1708603200">- Update to version 10.1.7 (bsc#1220164, bsc#1220165)
  + Fix the failover path to a new target update server. At present a new
    server is not found since credential validation fails. We targeted
    the server detected in down condition to verify the credentials instead
    of the replacement server.</changelog>
  <changelog author="rjschwei@suse.com" date="1715256000">- Update to version 10.2.0 (bsc#1223571, bsc#1224014, bsc#1224016)
  + In addition to logging, write message to stderr when registration fails
  + Detect transactional-update system with read only setup and use
    the transactional-update command to register
  + Handle operation in a different target root directory for credentials
    checking</changelog>
  <changelog author="jesus.bv@suse.com" date="1719921600">- Update to version 10.3.0 (bsc#1227308, bsc#1222985)
  + Add support for sidecar registry
    Podman and rootless Docker support to set up the necessary
    configuration for the container engines to run as defined
  + Add running command as root through sudoers file</changelog>
</package>
<package pkgid="e889e74b79c458a11512ad5a93e5763faf7878e9367920b96cef36ae6c73c3a4" name="cloud-regionsrv-client-generic-config" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="150300.13.3.1"/>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
  <changelog author="rjschwei@suse.com" date="1708603200">- Update to version 10.1.7 (bsc#1220164, bsc#1220165)
  + Fix the failover path to a new target update server. At present a new
    server is not found since credential validation fails. We targeted
    the server detected in down condition to verify the credentials instead
    of the replacement server.</changelog>
  <changelog author="rjschwei@suse.com" date="1715256000">- Update to version 10.2.0 (bsc#1223571, bsc#1224014, bsc#1224016)
  + In addition to logging, write message to stderr when registration fails
  + Detect transactional-update system with read only setup and use
    the transactional-update command to register
  + Handle operation in a different target root directory for credentials
    checking</changelog>
  <changelog author="jesus.bv@suse.com" date="1719921600">- Update to version 10.3.0 (bsc#1227308, bsc#1222985)
  + Add support for sidecar registry
    Podman and rootless Docker support to set up the necessary
    configuration for the container engines to run as defined
  + Add running command as root through sudoers file</changelog>
</package>
<package pkgid="d7d159e3fe580fea182261011e921db61af8e58961984800d9dc618ebae8ef7d" name="cloud-regionsrv-client-generic-config" arch="aarch64">
  <version epoch="0" ver="1.0.0" rel="150300.13.6.1"/>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
  <changelog author="rjschwei@suse.com" date="1708603200">- Update to version 10.1.7 (bsc#1220164, bsc#1220165)
  + Fix the failover path to a new target update server. At present a new
    server is not found since credential validation fails. We targeted
    the server detected in down condition to verify the credentials instead
    of the replacement server.</changelog>
  <changelog author="rjschwei@suse.com" date="1715256000">- Update to version 10.2.0 (bsc#1223571, bsc#1224014, bsc#1224016)
  + In addition to logging, write message to stderr when registration fails
  + Detect transactional-update system with read only setup and use
    the transactional-update command to register
  + Handle operation in a different target root directory for credentials
    checking</changelog>
  <changelog author="jesus.bv@suse.com" date="1719921600">- Update to version 10.3.0 (bsc#1227308, bsc#1222985)
  + Add support for sidecar registry
    Podman and rootless Docker support to set up the necessary
    configuration for the container engines to run as defined
  + Add running command as root through sudoers file</changelog>
  <changelog author="rjschwei@suse.com" date="1723723200">- Add rgnsrv-clnt-fix-docker-setup.patch (bsc#1229137)
  + The entry for the update infrastructure registry mirror was written
    incorrectly causing docker daemon startup to fail.</changelog>
</package>
<package pkgid="7746fafdc52cc6403857d05170b88f6949526a1bd49dfaf4c28946964c06fbab" name="cloud-regionsrv-client-generic-config" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="150300.13.6.1"/>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
  <changelog author="rjschwei@suse.com" date="1708603200">- Update to version 10.1.7 (bsc#1220164, bsc#1220165)
  + Fix the failover path to a new target update server. At present a new
    server is not found since credential validation fails. We targeted
    the server detected in down condition to verify the credentials instead
    of the replacement server.</changelog>
  <changelog author="rjschwei@suse.com" date="1715256000">- Update to version 10.2.0 (bsc#1223571, bsc#1224014, bsc#1224016)
  + In addition to logging, write message to stderr when registration fails
  + Detect transactional-update system with read only setup and use
    the transactional-update command to register
  + Handle operation in a different target root directory for credentials
    checking</changelog>
  <changelog author="jesus.bv@suse.com" date="1719921600">- Update to version 10.3.0 (bsc#1227308, bsc#1222985)
  + Add support for sidecar registry
    Podman and rootless Docker support to set up the necessary
    configuration for the container engines to run as defined
  + Add running command as root through sudoers file</changelog>
  <changelog author="rjschwei@suse.com" date="1723723200">- Add rgnsrv-clnt-fix-docker-setup.patch (bsc#1229137)
  + The entry for the update infrastructure registry mirror was written
    incorrectly causing docker daemon startup to fail.</changelog>
</package>
<package pkgid="2801d7095111cc584030e6b7ce3b59ea9a3981e0cf611f65eb36fb8d25361bcc" name="cloud-regionsrv-client-generic-config" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="150300.13.9.1"/>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
  <changelog author="rjschwei@suse.com" date="1708603200">- Update to version 10.1.7 (bsc#1220164, bsc#1220165)
  + Fix the failover path to a new target update server. At present a new
    server is not found since credential validation fails. We targeted
    the server detected in down condition to verify the credentials instead
    of the replacement server.</changelog>
  <changelog author="rjschwei@suse.com" date="1715256000">- Update to version 10.2.0 (bsc#1223571, bsc#1224014, bsc#1224016)
  + In addition to logging, write message to stderr when registration fails
  + Detect transactional-update system with read only setup and use
    the transactional-update command to register
  + Handle operation in a different target root directory for credentials
    checking</changelog>
  <changelog author="jesus.bv@suse.com" date="1719921600">- Update to version 10.3.0 (bsc#1227308, bsc#1222985)
  + Add support for sidecar registry
    Podman and rootless Docker support to set up the necessary
    configuration for the container engines to run as defined
  + Add running command as root through sudoers file</changelog>
  <changelog author="rjschwei@suse.com" date="1723723200">- Add rgnsrv-clnt-fix-docker-setup.patch (bsc#1229137)
  + The entry for the update infrastructure registry mirror was written
    incorrectly causing docker daemon startup to fail.</changelog>
  <changelog author="rjschwei@suse.com" date="1724846400">- Update to 10.3.4
  + Modify the message when network access over a specific IP version does
    not work. This is an informational message and should not look like
    an error
  + Inform the user that LTSS registration takes a little longer
  + Add fix-for-sles12-no-trans_update.patch
    + SLE 12 family has no products with transactional-update we do not
    need to look for this condition
- From 10.3.3 (bsc#1229472)
  + Handle changes in process structure to properly identify the running
    zypper parent process and only check for 1 PID
- From 10.3.2
  + Remove rgnsrv-clnt-fix-docker-setup.patch included upstream
- From 10.3.1 (jsc#PCT-400)
  + Add support for LTSS registration
  + Add fix-for-sles12-disable-registry.patch
    ~ No container support in SLE 12</changelog>
</package>
<package pkgid="49b2b1148e4ae00927daec8e486e450eebc82b759ae78bdbcbdba3b5c3781136" name="cloud-regionsrv-client-plugin-azure" arch="noarch">
  <version epoch="0" ver="2.0.0" rel="150000.6.102.1"/>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
</package>
<package pkgid="b95a62234bca0fb814e914a589e61639adc2e0912d4d7dfef481e38f40cd504d" name="cloud-regionsrv-client-plugin-azure" arch="noarch">
  <version epoch="0" ver="2.0.0" rel="150000.6.105.1"/>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
</package>
<package pkgid="0fc3d6bbd1f2e8a6c109f022811bc5de1a531fcc8cb9ae8870e3dedc52d33c64" name="cloud-regionsrv-client-plugin-azure" arch="noarch">
  <version epoch="0" ver="2.0.0" rel="150000.6.108.1"/>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
  <changelog author="rjschwei@suse.com" date="1708603200">- Update to version 10.1.7 (bsc#1220164, bsc#1220165)
  + Fix the failover path to a new target update server. At present a new
    server is not found since credential validation fails. We targeted
    the server detected in down condition to verify the credentials instead
    of the replacement server.</changelog>
</package>
<package pkgid="c74a9beaac2b38bf8c629bf24a2b860a189b8f9f51b7b47238d2220817c5845d" name="cloud-regionsrv-client-plugin-azure" arch="noarch">
  <version epoch="0" ver="2.0.0" rel="150000.6.99.1"/>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
</package>
<package pkgid="f66d26a57ae685e4d8d28c35f1140850e9653576c7c3d2d60586f5c2208c672e" name="cloud-regionsrv-client-plugin-azure" arch="aarch64">
  <version epoch="0" ver="2.0.0" rel="150300.13.3.1"/>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
  <changelog author="rjschwei@suse.com" date="1708603200">- Update to version 10.1.7 (bsc#1220164, bsc#1220165)
  + Fix the failover path to a new target update server. At present a new
    server is not found since credential validation fails. We targeted
    the server detected in down condition to verify the credentials instead
    of the replacement server.</changelog>
  <changelog author="rjschwei@suse.com" date="1715256000">- Update to version 10.2.0 (bsc#1223571, bsc#1224014, bsc#1224016)
  + In addition to logging, write message to stderr when registration fails
  + Detect transactional-update system with read only setup and use
    the transactional-update command to register
  + Handle operation in a different target root directory for credentials
    checking</changelog>
  <changelog author="jesus.bv@suse.com" date="1719921600">- Update to version 10.3.0 (bsc#1227308, bsc#1222985)
  + Add support for sidecar registry
    Podman and rootless Docker support to set up the necessary
    configuration for the container engines to run as defined
  + Add running command as root through sudoers file</changelog>
</package>
<package pkgid="0938f5851f75025f3fbc2c90d98e1a2ee85b3c475961c1f18829612a2fdccd7b" name="cloud-regionsrv-client-plugin-azure" arch="x86_64">
  <version epoch="0" ver="2.0.0" rel="150300.13.3.1"/>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
  <changelog author="rjschwei@suse.com" date="1708603200">- Update to version 10.1.7 (bsc#1220164, bsc#1220165)
  + Fix the failover path to a new target update server. At present a new
    server is not found since credential validation fails. We targeted
    the server detected in down condition to verify the credentials instead
    of the replacement server.</changelog>
  <changelog author="rjschwei@suse.com" date="1715256000">- Update to version 10.2.0 (bsc#1223571, bsc#1224014, bsc#1224016)
  + In addition to logging, write message to stderr when registration fails
  + Detect transactional-update system with read only setup and use
    the transactional-update command to register
  + Handle operation in a different target root directory for credentials
    checking</changelog>
  <changelog author="jesus.bv@suse.com" date="1719921600">- Update to version 10.3.0 (bsc#1227308, bsc#1222985)
  + Add support for sidecar registry
    Podman and rootless Docker support to set up the necessary
    configuration for the container engines to run as defined
  + Add running command as root through sudoers file</changelog>
</package>
<package pkgid="e7fa0bf9ddd9d7f143f22afa211a01648fc15a6979b7337468d39761dec06c7e" name="cloud-regionsrv-client-plugin-azure" arch="aarch64">
  <version epoch="0" ver="2.0.0" rel="150300.13.6.1"/>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
  <changelog author="rjschwei@suse.com" date="1708603200">- Update to version 10.1.7 (bsc#1220164, bsc#1220165)
  + Fix the failover path to a new target update server. At present a new
    server is not found since credential validation fails. We targeted
    the server detected in down condition to verify the credentials instead
    of the replacement server.</changelog>
  <changelog author="rjschwei@suse.com" date="1715256000">- Update to version 10.2.0 (bsc#1223571, bsc#1224014, bsc#1224016)
  + In addition to logging, write message to stderr when registration fails
  + Detect transactional-update system with read only setup and use
    the transactional-update command to register
  + Handle operation in a different target root directory for credentials
    checking</changelog>
  <changelog author="jesus.bv@suse.com" date="1719921600">- Update to version 10.3.0 (bsc#1227308, bsc#1222985)
  + Add support for sidecar registry
    Podman and rootless Docker support to set up the necessary
    configuration for the container engines to run as defined
  + Add running command as root through sudoers file</changelog>
  <changelog author="rjschwei@suse.com" date="1723723200">- Add rgnsrv-clnt-fix-docker-setup.patch (bsc#1229137)
  + The entry for the update infrastructure registry mirror was written
    incorrectly causing docker daemon startup to fail.</changelog>
</package>
<package pkgid="46803198f2d13021a1a40a877ff86f26757ab168985f3f882fe369b5facbc787" name="cloud-regionsrv-client-plugin-azure" arch="x86_64">
  <version epoch="0" ver="2.0.0" rel="150300.13.6.1"/>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
  <changelog author="rjschwei@suse.com" date="1708603200">- Update to version 10.1.7 (bsc#1220164, bsc#1220165)
  + Fix the failover path to a new target update server. At present a new
    server is not found since credential validation fails. We targeted
    the server detected in down condition to verify the credentials instead
    of the replacement server.</changelog>
  <changelog author="rjschwei@suse.com" date="1715256000">- Update to version 10.2.0 (bsc#1223571, bsc#1224014, bsc#1224016)
  + In addition to logging, write message to stderr when registration fails
  + Detect transactional-update system with read only setup and use
    the transactional-update command to register
  + Handle operation in a different target root directory for credentials
    checking</changelog>
  <changelog author="jesus.bv@suse.com" date="1719921600">- Update to version 10.3.0 (bsc#1227308, bsc#1222985)
  + Add support for sidecar registry
    Podman and rootless Docker support to set up the necessary
    configuration for the container engines to run as defined
  + Add running command as root through sudoers file</changelog>
  <changelog author="rjschwei@suse.com" date="1723723200">- Add rgnsrv-clnt-fix-docker-setup.patch (bsc#1229137)
  + The entry for the update infrastructure registry mirror was written
    incorrectly causing docker daemon startup to fail.</changelog>
</package>
<package pkgid="066bf71dba544f3ed91a7b400821ed8903b2fb238941c230294c110a6af8371e" name="cloud-regionsrv-client-plugin-azure" arch="noarch">
  <version epoch="0" ver="2.0.0" rel="150300.13.9.1"/>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
  <changelog author="rjschwei@suse.com" date="1708603200">- Update to version 10.1.7 (bsc#1220164, bsc#1220165)
  + Fix the failover path to a new target update server. At present a new
    server is not found since credential validation fails. We targeted
    the server detected in down condition to verify the credentials instead
    of the replacement server.</changelog>
  <changelog author="rjschwei@suse.com" date="1715256000">- Update to version 10.2.0 (bsc#1223571, bsc#1224014, bsc#1224016)
  + In addition to logging, write message to stderr when registration fails
  + Detect transactional-update system with read only setup and use
    the transactional-update command to register
  + Handle operation in a different target root directory for credentials
    checking</changelog>
  <changelog author="jesus.bv@suse.com" date="1719921600">- Update to version 10.3.0 (bsc#1227308, bsc#1222985)
  + Add support for sidecar registry
    Podman and rootless Docker support to set up the necessary
    configuration for the container engines to run as defined
  + Add running command as root through sudoers file</changelog>
  <changelog author="rjschwei@suse.com" date="1723723200">- Add rgnsrv-clnt-fix-docker-setup.patch (bsc#1229137)
  + The entry for the update infrastructure registry mirror was written
    incorrectly causing docker daemon startup to fail.</changelog>
  <changelog author="rjschwei@suse.com" date="1724846400">- Update to 10.3.4
  + Modify the message when network access over a specific IP version does
    not work. This is an informational message and should not look like
    an error
  + Inform the user that LTSS registration takes a little longer
  + Add fix-for-sles12-no-trans_update.patch
    + SLE 12 family has no products with transactional-update we do not
    need to look for this condition
- From 10.3.3 (bsc#1229472)
  + Handle changes in process structure to properly identify the running
    zypper parent process and only check for 1 PID
- From 10.3.2
  + Remove rgnsrv-clnt-fix-docker-setup.patch included upstream
- From 10.3.1 (jsc#PCT-400)
  + Add support for LTSS registration
  + Add fix-for-sles12-disable-registry.patch
    ~ No container support in SLE 12</changelog>
</package>
<package pkgid="78fd8ec031ec9b35c2869853fd5162c933b0b0031cb1b31c9a50c43d4cb81bf4" name="cloud-regionsrv-client-plugin-ec2" arch="noarch">
  <version epoch="0" ver="1.0.2" rel="150000.6.99.1"/>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
</package>
<package pkgid="7fad6592da76012d213dc93afaf76888c5a2043962a30831caf88ac22447ad1e" name="cloud-regionsrv-client-plugin-ec2" arch="noarch">
  <version epoch="0" ver="1.0.3" rel="150000.6.102.1"/>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
</package>
<package pkgid="4b6bc3e2c6a051d7fa8de73cbaaf8d89f36057e81eba8802a4cf4cb718b32351" name="cloud-regionsrv-client-plugin-ec2" arch="noarch">
  <version epoch="0" ver="1.0.4" rel="150000.6.105.1"/>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
</package>
<package pkgid="7e9f9d1900b88859be47e70b914b1bde9b94b9eaa05f33b72e2b326c09cf0ce9" name="cloud-regionsrv-client-plugin-ec2" arch="noarch">
  <version epoch="0" ver="1.0.4" rel="150000.6.108.1"/>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
  <changelog author="rjschwei@suse.com" date="1708603200">- Update to version 10.1.7 (bsc#1220164, bsc#1220165)
  + Fix the failover path to a new target update server. At present a new
    server is not found since credential validation fails. We targeted
    the server detected in down condition to verify the credentials instead
    of the replacement server.</changelog>
</package>
<package pkgid="cc551ffa88e35192122b03cf272175e88aa0864b7c95966ae729b6d70d778de4" name="cloud-regionsrv-client-plugin-ec2" arch="aarch64">
  <version epoch="0" ver="1.0.4" rel="150300.13.3.1"/>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
  <changelog author="rjschwei@suse.com" date="1708603200">- Update to version 10.1.7 (bsc#1220164, bsc#1220165)
  + Fix the failover path to a new target update server. At present a new
    server is not found since credential validation fails. We targeted
    the server detected in down condition to verify the credentials instead
    of the replacement server.</changelog>
  <changelog author="rjschwei@suse.com" date="1715256000">- Update to version 10.2.0 (bsc#1223571, bsc#1224014, bsc#1224016)
  + In addition to logging, write message to stderr when registration fails
  + Detect transactional-update system with read only setup and use
    the transactional-update command to register
  + Handle operation in a different target root directory for credentials
    checking</changelog>
  <changelog author="jesus.bv@suse.com" date="1719921600">- Update to version 10.3.0 (bsc#1227308, bsc#1222985)
  + Add support for sidecar registry
    Podman and rootless Docker support to set up the necessary
    configuration for the container engines to run as defined
  + Add running command as root through sudoers file</changelog>
</package>
<package pkgid="1c791f601cec59f47763f32e84fe7c2df7870bd10f88eec7f9a8dd9164a83aae" name="cloud-regionsrv-client-plugin-ec2" arch="x86_64">
  <version epoch="0" ver="1.0.4" rel="150300.13.3.1"/>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
  <changelog author="rjschwei@suse.com" date="1708603200">- Update to version 10.1.7 (bsc#1220164, bsc#1220165)
  + Fix the failover path to a new target update server. At present a new
    server is not found since credential validation fails. We targeted
    the server detected in down condition to verify the credentials instead
    of the replacement server.</changelog>
  <changelog author="rjschwei@suse.com" date="1715256000">- Update to version 10.2.0 (bsc#1223571, bsc#1224014, bsc#1224016)
  + In addition to logging, write message to stderr when registration fails
  + Detect transactional-update system with read only setup and use
    the transactional-update command to register
  + Handle operation in a different target root directory for credentials
    checking</changelog>
  <changelog author="jesus.bv@suse.com" date="1719921600">- Update to version 10.3.0 (bsc#1227308, bsc#1222985)
  + Add support for sidecar registry
    Podman and rootless Docker support to set up the necessary
    configuration for the container engines to run as defined
  + Add running command as root through sudoers file</changelog>
</package>
<package pkgid="b55e0548178c95e33631ed7fb279db9d7cdf1767da958f447abefbb2a0af4e21" name="cloud-regionsrv-client-plugin-ec2" arch="aarch64">
  <version epoch="0" ver="1.0.4" rel="150300.13.6.1"/>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
  <changelog author="rjschwei@suse.com" date="1708603200">- Update to version 10.1.7 (bsc#1220164, bsc#1220165)
  + Fix the failover path to a new target update server. At present a new
    server is not found since credential validation fails. We targeted
    the server detected in down condition to verify the credentials instead
    of the replacement server.</changelog>
  <changelog author="rjschwei@suse.com" date="1715256000">- Update to version 10.2.0 (bsc#1223571, bsc#1224014, bsc#1224016)
  + In addition to logging, write message to stderr when registration fails
  + Detect transactional-update system with read only setup and use
    the transactional-update command to register
  + Handle operation in a different target root directory for credentials
    checking</changelog>
  <changelog author="jesus.bv@suse.com" date="1719921600">- Update to version 10.3.0 (bsc#1227308, bsc#1222985)
  + Add support for sidecar registry
    Podman and rootless Docker support to set up the necessary
    configuration for the container engines to run as defined
  + Add running command as root through sudoers file</changelog>
  <changelog author="rjschwei@suse.com" date="1723723200">- Add rgnsrv-clnt-fix-docker-setup.patch (bsc#1229137)
  + The entry for the update infrastructure registry mirror was written
    incorrectly causing docker daemon startup to fail.</changelog>
</package>
<package pkgid="a6a00fe5eaf270eb291836699738fdeb20ad291457e048e27643ff943ebc0c17" name="cloud-regionsrv-client-plugin-ec2" arch="x86_64">
  <version epoch="0" ver="1.0.4" rel="150300.13.6.1"/>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
  <changelog author="rjschwei@suse.com" date="1708603200">- Update to version 10.1.7 (bsc#1220164, bsc#1220165)
  + Fix the failover path to a new target update server. At present a new
    server is not found since credential validation fails. We targeted
    the server detected in down condition to verify the credentials instead
    of the replacement server.</changelog>
  <changelog author="rjschwei@suse.com" date="1715256000">- Update to version 10.2.0 (bsc#1223571, bsc#1224014, bsc#1224016)
  + In addition to logging, write message to stderr when registration fails
  + Detect transactional-update system with read only setup and use
    the transactional-update command to register
  + Handle operation in a different target root directory for credentials
    checking</changelog>
  <changelog author="jesus.bv@suse.com" date="1719921600">- Update to version 10.3.0 (bsc#1227308, bsc#1222985)
  + Add support for sidecar registry
    Podman and rootless Docker support to set up the necessary
    configuration for the container engines to run as defined
  + Add running command as root through sudoers file</changelog>
  <changelog author="rjschwei@suse.com" date="1723723200">- Add rgnsrv-clnt-fix-docker-setup.patch (bsc#1229137)
  + The entry for the update infrastructure registry mirror was written
    incorrectly causing docker daemon startup to fail.</changelog>
</package>
<package pkgid="32c770fdaaf76067db9f9b845365822a2846d56562521840993f078ab90815b7" name="cloud-regionsrv-client-plugin-ec2" arch="noarch">
  <version epoch="0" ver="1.0.4" rel="150300.13.9.1"/>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
  <changelog author="rjschwei@suse.com" date="1708603200">- Update to version 10.1.7 (bsc#1220164, bsc#1220165)
  + Fix the failover path to a new target update server. At present a new
    server is not found since credential validation fails. We targeted
    the server detected in down condition to verify the credentials instead
    of the replacement server.</changelog>
  <changelog author="rjschwei@suse.com" date="1715256000">- Update to version 10.2.0 (bsc#1223571, bsc#1224014, bsc#1224016)
  + In addition to logging, write message to stderr when registration fails
  + Detect transactional-update system with read only setup and use
    the transactional-update command to register
  + Handle operation in a different target root directory for credentials
    checking</changelog>
  <changelog author="jesus.bv@suse.com" date="1719921600">- Update to version 10.3.0 (bsc#1227308, bsc#1222985)
  + Add support for sidecar registry
    Podman and rootless Docker support to set up the necessary
    configuration for the container engines to run as defined
  + Add running command as root through sudoers file</changelog>
  <changelog author="rjschwei@suse.com" date="1723723200">- Add rgnsrv-clnt-fix-docker-setup.patch (bsc#1229137)
  + The entry for the update infrastructure registry mirror was written
    incorrectly causing docker daemon startup to fail.</changelog>
  <changelog author="rjschwei@suse.com" date="1724846400">- Update to 10.3.4
  + Modify the message when network access over a specific IP version does
    not work. This is an informational message and should not look like
    an error
  + Inform the user that LTSS registration takes a little longer
  + Add fix-for-sles12-no-trans_update.patch
    + SLE 12 family has no products with transactional-update we do not
    need to look for this condition
- From 10.3.3 (bsc#1229472)
  + Handle changes in process structure to properly identify the running
    zypper parent process and only check for 1 PID
- From 10.3.2
  + Remove rgnsrv-clnt-fix-docker-setup.patch included upstream
- From 10.3.1 (jsc#PCT-400)
  + Add support for LTSS registration
  + Add fix-for-sles12-disable-registry.patch
    ~ No container support in SLE 12</changelog>
</package>
<package pkgid="dfdb0e5c703d1d534b415ec9fba6d1a473459197890f0c50688aaeff925a4c39" name="cloud-regionsrv-client-plugin-gce" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="150000.6.102.1"/>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
</package>
<package pkgid="c2d9b7b4f35dcc335c9d69f4f8c3224ac759a8a1dc3098002c86c359417b8f49" name="cloud-regionsrv-client-plugin-gce" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="150000.6.105.1"/>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
</package>
<package pkgid="eb6566d25f1c941052d7536bcb2415280a1ca01aebb8e3aebf669a8d375bb3bc" name="cloud-regionsrv-client-plugin-gce" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="150000.6.108.1"/>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
  <changelog author="rjschwei@suse.com" date="1708603200">- Update to version 10.1.7 (bsc#1220164, bsc#1220165)
  + Fix the failover path to a new target update server. At present a new
    server is not found since credential validation fails. We targeted
    the server detected in down condition to verify the credentials instead
    of the replacement server.</changelog>
</package>
<package pkgid="73d6cb352c25b5e3bec2b70d9bd561ae46832977b63394f03d3e4cb10d152ecd" name="cloud-regionsrv-client-plugin-gce" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="150000.6.99.1"/>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
</package>
<package pkgid="cc24c13100a6110a01534f1c2e05153d18f068b21789744a61743ff7b88f23be" name="cloud-regionsrv-client-plugin-gce" arch="aarch64">
  <version epoch="0" ver="1.0.0" rel="150300.13.3.1"/>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
  <changelog author="rjschwei@suse.com" date="1708603200">- Update to version 10.1.7 (bsc#1220164, bsc#1220165)
  + Fix the failover path to a new target update server. At present a new
    server is not found since credential validation fails. We targeted
    the server detected in down condition to verify the credentials instead
    of the replacement server.</changelog>
  <changelog author="rjschwei@suse.com" date="1715256000">- Update to version 10.2.0 (bsc#1223571, bsc#1224014, bsc#1224016)
  + In addition to logging, write message to stderr when registration fails
  + Detect transactional-update system with read only setup and use
    the transactional-update command to register
  + Handle operation in a different target root directory for credentials
    checking</changelog>
  <changelog author="jesus.bv@suse.com" date="1719921600">- Update to version 10.3.0 (bsc#1227308, bsc#1222985)
  + Add support for sidecar registry
    Podman and rootless Docker support to set up the necessary
    configuration for the container engines to run as defined
  + Add running command as root through sudoers file</changelog>
</package>
<package pkgid="a76fdf81835c6c2bcb2945cbd56077de19c8771ba9588af62f82452ce260262e" name="cloud-regionsrv-client-plugin-gce" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="150300.13.3.1"/>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
  <changelog author="rjschwei@suse.com" date="1708603200">- Update to version 10.1.7 (bsc#1220164, bsc#1220165)
  + Fix the failover path to a new target update server. At present a new
    server is not found since credential validation fails. We targeted
    the server detected in down condition to verify the credentials instead
    of the replacement server.</changelog>
  <changelog author="rjschwei@suse.com" date="1715256000">- Update to version 10.2.0 (bsc#1223571, bsc#1224014, bsc#1224016)
  + In addition to logging, write message to stderr when registration fails
  + Detect transactional-update system with read only setup and use
    the transactional-update command to register
  + Handle operation in a different target root directory for credentials
    checking</changelog>
  <changelog author="jesus.bv@suse.com" date="1719921600">- Update to version 10.3.0 (bsc#1227308, bsc#1222985)
  + Add support for sidecar registry
    Podman and rootless Docker support to set up the necessary
    configuration for the container engines to run as defined
  + Add running command as root through sudoers file</changelog>
</package>
<package pkgid="7ad84442228758fca07ba7ff091a5abc31d9aa66f6a543fa8c8b043444bab078" name="cloud-regionsrv-client-plugin-gce" arch="aarch64">
  <version epoch="0" ver="1.0.0" rel="150300.13.6.1"/>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
  <changelog author="rjschwei@suse.com" date="1708603200">- Update to version 10.1.7 (bsc#1220164, bsc#1220165)
  + Fix the failover path to a new target update server. At present a new
    server is not found since credential validation fails. We targeted
    the server detected in down condition to verify the credentials instead
    of the replacement server.</changelog>
  <changelog author="rjschwei@suse.com" date="1715256000">- Update to version 10.2.0 (bsc#1223571, bsc#1224014, bsc#1224016)
  + In addition to logging, write message to stderr when registration fails
  + Detect transactional-update system with read only setup and use
    the transactional-update command to register
  + Handle operation in a different target root directory for credentials
    checking</changelog>
  <changelog author="jesus.bv@suse.com" date="1719921600">- Update to version 10.3.0 (bsc#1227308, bsc#1222985)
  + Add support for sidecar registry
    Podman and rootless Docker support to set up the necessary
    configuration for the container engines to run as defined
  + Add running command as root through sudoers file</changelog>
  <changelog author="rjschwei@suse.com" date="1723723200">- Add rgnsrv-clnt-fix-docker-setup.patch (bsc#1229137)
  + The entry for the update infrastructure registry mirror was written
    incorrectly causing docker daemon startup to fail.</changelog>
</package>
<package pkgid="9da0bc0c8c8670649ca5317e10c5c48b8021b4f52a8ca42eaa88376c4e805144" name="cloud-regionsrv-client-plugin-gce" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="150300.13.6.1"/>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
  <changelog author="rjschwei@suse.com" date="1708603200">- Update to version 10.1.7 (bsc#1220164, bsc#1220165)
  + Fix the failover path to a new target update server. At present a new
    server is not found since credential validation fails. We targeted
    the server detected in down condition to verify the credentials instead
    of the replacement server.</changelog>
  <changelog author="rjschwei@suse.com" date="1715256000">- Update to version 10.2.0 (bsc#1223571, bsc#1224014, bsc#1224016)
  + In addition to logging, write message to stderr when registration fails
  + Detect transactional-update system with read only setup and use
    the transactional-update command to register
  + Handle operation in a different target root directory for credentials
    checking</changelog>
  <changelog author="jesus.bv@suse.com" date="1719921600">- Update to version 10.3.0 (bsc#1227308, bsc#1222985)
  + Add support for sidecar registry
    Podman and rootless Docker support to set up the necessary
    configuration for the container engines to run as defined
  + Add running command as root through sudoers file</changelog>
  <changelog author="rjschwei@suse.com" date="1723723200">- Add rgnsrv-clnt-fix-docker-setup.patch (bsc#1229137)
  + The entry for the update infrastructure registry mirror was written
    incorrectly causing docker daemon startup to fail.</changelog>
</package>
<package pkgid="8982b3972892132e2dc9d1c1575cfbf0557a0c77ce6823f985a1bd1bd9fdaf99" name="cloud-regionsrv-client-plugin-gce" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="150300.13.9.1"/>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
  <changelog author="rjschwei@suse.com" date="1708603200">- Update to version 10.1.7 (bsc#1220164, bsc#1220165)
  + Fix the failover path to a new target update server. At present a new
    server is not found since credential validation fails. We targeted
    the server detected in down condition to verify the credentials instead
    of the replacement server.</changelog>
  <changelog author="rjschwei@suse.com" date="1715256000">- Update to version 10.2.0 (bsc#1223571, bsc#1224014, bsc#1224016)
  + In addition to logging, write message to stderr when registration fails
  + Detect transactional-update system with read only setup and use
    the transactional-update command to register
  + Handle operation in a different target root directory for credentials
    checking</changelog>
  <changelog author="jesus.bv@suse.com" date="1719921600">- Update to version 10.3.0 (bsc#1227308, bsc#1222985)
  + Add support for sidecar registry
    Podman and rootless Docker support to set up the necessary
    configuration for the container engines to run as defined
  + Add running command as root through sudoers file</changelog>
  <changelog author="rjschwei@suse.com" date="1723723200">- Add rgnsrv-clnt-fix-docker-setup.patch (bsc#1229137)
  + The entry for the update infrastructure registry mirror was written
    incorrectly causing docker daemon startup to fail.</changelog>
  <changelog author="rjschwei@suse.com" date="1724846400">- Update to 10.3.4
  + Modify the message when network access over a specific IP version does
    not work. This is an informational message and should not look like
    an error
  + Inform the user that LTSS registration takes a little longer
  + Add fix-for-sles12-no-trans_update.patch
    + SLE 12 family has no products with transactional-update we do not
    need to look for this condition
- From 10.3.3 (bsc#1229472)
  + Handle changes in process structure to properly identify the running
    zypper parent process and only check for 1 PID
- From 10.3.2
  + Remove rgnsrv-clnt-fix-docker-setup.patch included upstream
- From 10.3.1 (jsc#PCT-400)
  + Add support for LTSS registration
  + Add fix-for-sles12-disable-registry.patch
    ~ No container support in SLE 12</changelog>
</package>
<package pkgid="85892e540deaf996ed8950dba4e7a580a380457c2b7303a3c6ab667ec3bebeaf" name="cni" arch="aarch64">
  <version epoch="0" ver="1.1.2" rel="150500.3.2.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1490184000">- Update to version 0.5.0:
  * Documentation: Add conventions doc
  * noop: allow specifying debug file in config JSON
  * Spec/Conventions: Update to include plugin config
  * spec: add network configuration list specification
  * api,libcni: add network config list-based plugin chaining
  * Update CONVENTIONS.md
  * skel: adds PluginMainWithError which returns a *types.Error
  * testutils: pass netConf in for version operations; pass raw result out for tests
  * types: make Result an interface and move existing Result to separate package
  * macvlan/ipvlan: use common RenameLink method
  * plugins/flannel: organize test JSON alphabetically
  * pkg/ipam: add testcases
  * spec/plugins: return interface details and multiple IP addresses to runtime
  * spec, libcni, pkg/invoke: Use OS-agnostic separator when parsing CNI_PATH
  * pkg/utils/sysctl/sysctl_linux.go: fix build tag.
  * pkg/utils/sysctl/sysctl_linux.go: fix typo.
  * invoke: Enable plugin file names with extensions
  * CONVENTIONS.md: Update details on port-mappings
  * Update with feedback
  * More markups
  * spec: Remove `routes` from Network Configuration
  * docs: consolidate host-local documentation
  * pkg/ns: refactored so that builds succeed on non-linux platforms
  * Fix grammar
  * plugins/main/ptp: set the Sandbox property on the response
  * README: List multus as 3rd party plugin
  * Replace Michael Bridgen with Bryan Boreham
  * pkg/ns, pkg/types: refactored non linux build fix code to
  * pkg/ip: refactored so that builds succeed on non-linux platforms
  * vendor: Update vishvanana/netlink dependency
  * libcni: up-convert a Config to a ConfigList when no other configs are found.
  * docs: CNI versioning for 0.3.0 upgrade
  * docs: Edits to v0.3.0 upgrade guidance
  * docs: minor improvements to 0.3.0 upgrade guidance
  * docs: add small upgrade instructions
  * docs: minor improvements to spec-upgrades
  * docs: fill-out and correct version conversion table
  * docs: table formatting is hard
  * pkg/testutils: return errors after restoring stdout
  * pkg/types: misc current types testcase cleanups
  * Minor rewording about default config version
  * spec,libcni: add support for injecting runtimeConfig into plugin stdin data
  * Check n.IPAM before use it in LoadIPAMConfig function
  * do not error if last_reserved_ip is missing for host local ipam
  * add test for ensuring initial subnet creation does not contain an error
  * fix unrelated failing tests</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1490270400">- Update to version 0.5.1:
  * readme.md: Add link to community sync
  * pkg/ip: do not leak types from vendored netlink package
  * pkg/ip: SetupVeth returns net.Interface
  * pkg/ip: improve docstring for SetupVeth
  * Added Romana to list of CNI providers...
  * plugins/meta/flannel: If net config is missing do not return err on DEL
  * plugins/*: Don't error if the device doesn't exist</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1491825600">- Update to version 0.5.2:
  * Rename build script to avoid conflict with bazel
  * Enable s390x build
  * Update community sync detail
  * Added entry for CNI-Genie
  * travis: shift forward to Go 1.8 and 1.7
  * spec/plugins: fix 'ip'-&gt;'ips' in the spec, bump to 0.3.1
  * libcni: Improved error messages.
  * libcni: Fixed tests that were checking error strings.
  * Documentation: Added documentation for `cnitool`.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503921600">- Update to version 0.6.0:
  * Conventions: add convention around chaining interfaces
  * pkg/types: safer typecasting for TextUnmarshaler when loading args
  * pkg/types: modify LoadArgs to return a named error when an unmarshalable condition is detected
  * Update note about next Community Sync, 2017-06-21
  * types: fix marshalling of omitted "interfaces" key in IPConfig JSON
  * Update and document release process
  * scripts/release.sh: Add in s390x architecture
  * cnitool: add support for CNI_ARGS
  * README plugins list: add Linen CNI plugin</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Remove the dependency with the cni-plugins
- Recommend the cni-plugins</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1516017600">- Make /var/lib/cni writable</changelog>
  <changelog author="kmacinnes@suse.com" date="1516276800">- Add snapper as a requirement, to provide mksubvolume</changelog>
  <changelog author="kmacinnes@suse.com" date="1517227200">- Use full/absolute path for mksubvolume
- Change snapper Requires to a Requires(post)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1522843200">- Remove creating subvolumes. This should be in another package (kubernetes-kubelet)</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558094400">- Update to version 0.7.0:
  * Spec changes:
    + Use more RFC2119 style language in specification (must, should...)
    + add notes about ADD/DEL ordering
    + Make the container ID required and unique.
    + remove the version parameter from ADD and DEL commands.
    + Network interface name matters
    + be explicit about optional and required structure members
    + add CHECK method
    + Add a well-known error for "try again"
    + SPEC.md: clarify meaning of 'routes'
  * Library changes:
    + pkg/types: Makes IPAM concrete type
    + libcni: return error if Type is empty
    + skel: VERSION shouldn't block on stdin
    + non-pointer instances of types.Route now correctly marshal to JSON
    + libcni: add ValidateNetwork and ValidateNetworkList functions
    + pkg/skel: return error if JSON config has no network name
    + skel: add support for plugin version string
    + libcni: make exec handling an interface for better downstream testing
    + libcni: api now takes a Context to allow operations to be timed out or cancelled
    + types/version: add helper to parse PrevResult
    + skel: only print about message, not errors
    + skel,invoke,libcni: implementation of CHECK method
    + cnitool: Honor interface name supplied via CNI_IFNAME environment variable.
    + cnitool: validate correct number of args
    + Don't copy gw from IP4.Gateway to Route.GW When converting from 0.2.0
    + add PrintTo method to Result interface
    + Return a better error when the plugin returns none
- Install sleep binary into CNI plugin directory
- Restore build.sh script which was removed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1563278400">- Update to version 0.7.1 (bsc#1160460):
  * Library changes:
    + invoke : ensure custom envs of CNIArgs are prepended to process envs
    + add GetNetworkListCachedResult to CNI interface
    + delegate : allow delegation funcs override CNI_COMMAND env automatically in heritance
  * Documentation &amp; Convention changes:
    + Update cnitool documentation for spec v0.4.0
    + Add cni-route-override to CNI plugin list
  * Build and test changes:
    + Release: bump go to v1.12</changelog>
  <changelog author="sgrunert@suse.com" date="1578916800">- Set correct CNI version for 99-loopback.conf</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1601553600">- Update to version 0.8.0:
  * Specification and Conventions changes
    + docs: add ips and mac to well-known capabilities
    + add interface name validation
    + Add GUID to well known Capabilities
    + Add DeviceID attribute to RuntimeConfig
    + Typo fixes for infiniband GUID
    + Fix linting issues in docs, add headers to json example, update errors into table
  * Documentation changes
    + Update cnitool docs
    + Remove extra ',' chars which makes conflist examples invalid.
  * libcni changes
    + Remove Result.String method
    + libcni: add config caching [v2]
    + clean up : fix staticcheck warnings
    + libcni: add InitCNIConfigWithCacheDir() and deprecate RuntimeConfig.CacheDir
    + skel: clean up errors in skel and add some well-known error codes
    + libcni: find plugin in exec
    + validate containerID and networkName
    + skel: remove needless functions and types
    + libcni: also cache IfName
    + libcni: fix cache file 'result' key name
    + Bump Go version to 1.13
    + When CNI version isn't supplied in config, use default.
    + intercept netplugin std error
    + invoke: capture and return stderr if plugin exits unexpectedly
    + Retry exec commands on text file busy</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615896000">- Set GO111MODULE=auto to build with go1.16+
  * Default changed to GO111MODULE=on in go1.16
  * Set temporarily until using upstream release with go.mod
  * Drop BuildRequires: golang-packaging not currently using macros
  * Add BuildRequires: golang(API) &gt;= 1.13 recommended dependency expression</changelog>
  <changelog author="dmueller@suse.com" date="1619265600">- use buildmode=pie (cnitool is installed into sbindir)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1622462400">- Update to version 0.8.1:
  * This is a security release that fixes a single bug: bsc#1181961 aka CVE-2021-20206
  - Tighten up plugin-finding logic (#811).</changelog>
  <changelog author="idesmi@protonmail.com" date="1648296000">- Update to version v1.0.1:
  * Rewritten spec
    + non-List configurations are removed
    + the version field in the interfaces array was redundant and
    is removed
  * libcni improvements
- Employ RPM macros.go where feasible
- Use vendor tarball
- Remove ./build.sh</changelog>
  <changelog author="andrea.manzini@suse.com" date="1668081600">- Update to version 1.1.2:
  * spec: fix format
  * libcni: handle empty version when parsing version
  * [exec-plugins]: support plugin lists
  This is a minor update to the CNI libraries and tooling.
  This does not bump the protocol / spec version, which remains at v1.0.0</changelog>
</package>
<package pkgid="9c6734be7752bba340bbd795c37b3df3678867dff259c8f1694d69a0a0821e6c" name="cni" arch="s390x">
  <version epoch="0" ver="1.1.2" rel="150500.3.2.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1490184000">- Update to version 0.5.0:
  * Documentation: Add conventions doc
  * noop: allow specifying debug file in config JSON
  * Spec/Conventions: Update to include plugin config
  * spec: add network configuration list specification
  * api,libcni: add network config list-based plugin chaining
  * Update CONVENTIONS.md
  * skel: adds PluginMainWithError which returns a *types.Error
  * testutils: pass netConf in for version operations; pass raw result out for tests
  * types: make Result an interface and move existing Result to separate package
  * macvlan/ipvlan: use common RenameLink method
  * plugins/flannel: organize test JSON alphabetically
  * pkg/ipam: add testcases
  * spec/plugins: return interface details and multiple IP addresses to runtime
  * spec, libcni, pkg/invoke: Use OS-agnostic separator when parsing CNI_PATH
  * pkg/utils/sysctl/sysctl_linux.go: fix build tag.
  * pkg/utils/sysctl/sysctl_linux.go: fix typo.
  * invoke: Enable plugin file names with extensions
  * CONVENTIONS.md: Update details on port-mappings
  * Update with feedback
  * More markups
  * spec: Remove `routes` from Network Configuration
  * docs: consolidate host-local documentation
  * pkg/ns: refactored so that builds succeed on non-linux platforms
  * Fix grammar
  * plugins/main/ptp: set the Sandbox property on the response
  * README: List multus as 3rd party plugin
  * Replace Michael Bridgen with Bryan Boreham
  * pkg/ns, pkg/types: refactored non linux build fix code to
  * pkg/ip: refactored so that builds succeed on non-linux platforms
  * vendor: Update vishvanana/netlink dependency
  * libcni: up-convert a Config to a ConfigList when no other configs are found.
  * docs: CNI versioning for 0.3.0 upgrade
  * docs: Edits to v0.3.0 upgrade guidance
  * docs: minor improvements to 0.3.0 upgrade guidance
  * docs: add small upgrade instructions
  * docs: minor improvements to spec-upgrades
  * docs: fill-out and correct version conversion table
  * docs: table formatting is hard
  * pkg/testutils: return errors after restoring stdout
  * pkg/types: misc current types testcase cleanups
  * Minor rewording about default config version
  * spec,libcni: add support for injecting runtimeConfig into plugin stdin data
  * Check n.IPAM before use it in LoadIPAMConfig function
  * do not error if last_reserved_ip is missing for host local ipam
  * add test for ensuring initial subnet creation does not contain an error
  * fix unrelated failing tests</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1490270400">- Update to version 0.5.1:
  * readme.md: Add link to community sync
  * pkg/ip: do not leak types from vendored netlink package
  * pkg/ip: SetupVeth returns net.Interface
  * pkg/ip: improve docstring for SetupVeth
  * Added Romana to list of CNI providers...
  * plugins/meta/flannel: If net config is missing do not return err on DEL
  * plugins/*: Don't error if the device doesn't exist</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1491825600">- Update to version 0.5.2:
  * Rename build script to avoid conflict with bazel
  * Enable s390x build
  * Update community sync detail
  * Added entry for CNI-Genie
  * travis: shift forward to Go 1.8 and 1.7
  * spec/plugins: fix 'ip'-&gt;'ips' in the spec, bump to 0.3.1
  * libcni: Improved error messages.
  * libcni: Fixed tests that were checking error strings.
  * Documentation: Added documentation for `cnitool`.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503921600">- Update to version 0.6.0:
  * Conventions: add convention around chaining interfaces
  * pkg/types: safer typecasting for TextUnmarshaler when loading args
  * pkg/types: modify LoadArgs to return a named error when an unmarshalable condition is detected
  * Update note about next Community Sync, 2017-06-21
  * types: fix marshalling of omitted "interfaces" key in IPConfig JSON
  * Update and document release process
  * scripts/release.sh: Add in s390x architecture
  * cnitool: add support for CNI_ARGS
  * README plugins list: add Linen CNI plugin</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Remove the dependency with the cni-plugins
- Recommend the cni-plugins</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1516017600">- Make /var/lib/cni writable</changelog>
  <changelog author="kmacinnes@suse.com" date="1516276800">- Add snapper as a requirement, to provide mksubvolume</changelog>
  <changelog author="kmacinnes@suse.com" date="1517227200">- Use full/absolute path for mksubvolume
- Change snapper Requires to a Requires(post)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1522843200">- Remove creating subvolumes. This should be in another package (kubernetes-kubelet)</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558094400">- Update to version 0.7.0:
  * Spec changes:
    + Use more RFC2119 style language in specification (must, should...)
    + add notes about ADD/DEL ordering
    + Make the container ID required and unique.
    + remove the version parameter from ADD and DEL commands.
    + Network interface name matters
    + be explicit about optional and required structure members
    + add CHECK method
    + Add a well-known error for "try again"
    + SPEC.md: clarify meaning of 'routes'
  * Library changes:
    + pkg/types: Makes IPAM concrete type
    + libcni: return error if Type is empty
    + skel: VERSION shouldn't block on stdin
    + non-pointer instances of types.Route now correctly marshal to JSON
    + libcni: add ValidateNetwork and ValidateNetworkList functions
    + pkg/skel: return error if JSON config has no network name
    + skel: add support for plugin version string
    + libcni: make exec handling an interface for better downstream testing
    + libcni: api now takes a Context to allow operations to be timed out or cancelled
    + types/version: add helper to parse PrevResult
    + skel: only print about message, not errors
    + skel,invoke,libcni: implementation of CHECK method
    + cnitool: Honor interface name supplied via CNI_IFNAME environment variable.
    + cnitool: validate correct number of args
    + Don't copy gw from IP4.Gateway to Route.GW When converting from 0.2.0
    + add PrintTo method to Result interface
    + Return a better error when the plugin returns none
- Install sleep binary into CNI plugin directory
- Restore build.sh script which was removed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1563278400">- Update to version 0.7.1 (bsc#1160460):
  * Library changes:
    + invoke : ensure custom envs of CNIArgs are prepended to process envs
    + add GetNetworkListCachedResult to CNI interface
    + delegate : allow delegation funcs override CNI_COMMAND env automatically in heritance
  * Documentation &amp; Convention changes:
    + Update cnitool documentation for spec v0.4.0
    + Add cni-route-override to CNI plugin list
  * Build and test changes:
    + Release: bump go to v1.12</changelog>
  <changelog author="sgrunert@suse.com" date="1578916800">- Set correct CNI version for 99-loopback.conf</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1601553600">- Update to version 0.8.0:
  * Specification and Conventions changes
    + docs: add ips and mac to well-known capabilities
    + add interface name validation
    + Add GUID to well known Capabilities
    + Add DeviceID attribute to RuntimeConfig
    + Typo fixes for infiniband GUID
    + Fix linting issues in docs, add headers to json example, update errors into table
  * Documentation changes
    + Update cnitool docs
    + Remove extra ',' chars which makes conflist examples invalid.
  * libcni changes
    + Remove Result.String method
    + libcni: add config caching [v2]
    + clean up : fix staticcheck warnings
    + libcni: add InitCNIConfigWithCacheDir() and deprecate RuntimeConfig.CacheDir
    + skel: clean up errors in skel and add some well-known error codes
    + libcni: find plugin in exec
    + validate containerID and networkName
    + skel: remove needless functions and types
    + libcni: also cache IfName
    + libcni: fix cache file 'result' key name
    + Bump Go version to 1.13
    + When CNI version isn't supplied in config, use default.
    + intercept netplugin std error
    + invoke: capture and return stderr if plugin exits unexpectedly
    + Retry exec commands on text file busy</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615896000">- Set GO111MODULE=auto to build with go1.16+
  * Default changed to GO111MODULE=on in go1.16
  * Set temporarily until using upstream release with go.mod
  * Drop BuildRequires: golang-packaging not currently using macros
  * Add BuildRequires: golang(API) &gt;= 1.13 recommended dependency expression</changelog>
  <changelog author="dmueller@suse.com" date="1619265600">- use buildmode=pie (cnitool is installed into sbindir)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1622462400">- Update to version 0.8.1:
  * This is a security release that fixes a single bug: bsc#1181961 aka CVE-2021-20206
  - Tighten up plugin-finding logic (#811).</changelog>
  <changelog author="idesmi@protonmail.com" date="1648296000">- Update to version v1.0.1:
  * Rewritten spec
    + non-List configurations are removed
    + the version field in the interfaces array was redundant and
    is removed
  * libcni improvements
- Employ RPM macros.go where feasible
- Use vendor tarball
- Remove ./build.sh</changelog>
  <changelog author="andrea.manzini@suse.com" date="1668081600">- Update to version 1.1.2:
  * spec: fix format
  * libcni: handle empty version when parsing version
  * [exec-plugins]: support plugin lists
  This is a minor update to the CNI libraries and tooling.
  This does not bump the protocol / spec version, which remains at v1.0.0</changelog>
</package>
<package pkgid="bb49162d4e68e9a7bd646d3cb9b48a409a85c84bc0e88c5b1b1e3088180e1e6b" name="cni" arch="src">
  <version epoch="0" ver="1.1.2" rel="150500.3.2.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1490184000">- Update to version 0.5.0:
  * Documentation: Add conventions doc
  * noop: allow specifying debug file in config JSON
  * Spec/Conventions: Update to include plugin config
  * spec: add network configuration list specification
  * api,libcni: add network config list-based plugin chaining
  * Update CONVENTIONS.md
  * skel: adds PluginMainWithError which returns a *types.Error
  * testutils: pass netConf in for version operations; pass raw result out for tests
  * types: make Result an interface and move existing Result to separate package
  * macvlan/ipvlan: use common RenameLink method
  * plugins/flannel: organize test JSON alphabetically
  * pkg/ipam: add testcases
  * spec/plugins: return interface details and multiple IP addresses to runtime
  * spec, libcni, pkg/invoke: Use OS-agnostic separator when parsing CNI_PATH
  * pkg/utils/sysctl/sysctl_linux.go: fix build tag.
  * pkg/utils/sysctl/sysctl_linux.go: fix typo.
  * invoke: Enable plugin file names with extensions
  * CONVENTIONS.md: Update details on port-mappings
  * Update with feedback
  * More markups
  * spec: Remove `routes` from Network Configuration
  * docs: consolidate host-local documentation
  * pkg/ns: refactored so that builds succeed on non-linux platforms
  * Fix grammar
  * plugins/main/ptp: set the Sandbox property on the response
  * README: List multus as 3rd party plugin
  * Replace Michael Bridgen with Bryan Boreham
  * pkg/ns, pkg/types: refactored non linux build fix code to
  * pkg/ip: refactored so that builds succeed on non-linux platforms
  * vendor: Update vishvanana/netlink dependency
  * libcni: up-convert a Config to a ConfigList when no other configs are found.
  * docs: CNI versioning for 0.3.0 upgrade
  * docs: Edits to v0.3.0 upgrade guidance
  * docs: minor improvements to 0.3.0 upgrade guidance
  * docs: add small upgrade instructions
  * docs: minor improvements to spec-upgrades
  * docs: fill-out and correct version conversion table
  * docs: table formatting is hard
  * pkg/testutils: return errors after restoring stdout
  * pkg/types: misc current types testcase cleanups
  * Minor rewording about default config version
  * spec,libcni: add support for injecting runtimeConfig into plugin stdin data
  * Check n.IPAM before use it in LoadIPAMConfig function
  * do not error if last_reserved_ip is missing for host local ipam
  * add test for ensuring initial subnet creation does not contain an error
  * fix unrelated failing tests</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1490270400">- Update to version 0.5.1:
  * readme.md: Add link to community sync
  * pkg/ip: do not leak types from vendored netlink package
  * pkg/ip: SetupVeth returns net.Interface
  * pkg/ip: improve docstring for SetupVeth
  * Added Romana to list of CNI providers...
  * plugins/meta/flannel: If net config is missing do not return err on DEL
  * plugins/*: Don't error if the device doesn't exist</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1491825600">- Update to version 0.5.2:
  * Rename build script to avoid conflict with bazel
  * Enable s390x build
  * Update community sync detail
  * Added entry for CNI-Genie
  * travis: shift forward to Go 1.8 and 1.7
  * spec/plugins: fix 'ip'-&gt;'ips' in the spec, bump to 0.3.1
  * libcni: Improved error messages.
  * libcni: Fixed tests that were checking error strings.
  * Documentation: Added documentation for `cnitool`.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503921600">- Update to version 0.6.0:
  * Conventions: add convention around chaining interfaces
  * pkg/types: safer typecasting for TextUnmarshaler when loading args
  * pkg/types: modify LoadArgs to return a named error when an unmarshalable condition is detected
  * Update note about next Community Sync, 2017-06-21
  * types: fix marshalling of omitted "interfaces" key in IPConfig JSON
  * Update and document release process
  * scripts/release.sh: Add in s390x architecture
  * cnitool: add support for CNI_ARGS
  * README plugins list: add Linen CNI plugin</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Remove the dependency with the cni-plugins
- Recommend the cni-plugins</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1516017600">- Make /var/lib/cni writable</changelog>
  <changelog author="kmacinnes@suse.com" date="1516276800">- Add snapper as a requirement, to provide mksubvolume</changelog>
  <changelog author="kmacinnes@suse.com" date="1517227200">- Use full/absolute path for mksubvolume
- Change snapper Requires to a Requires(post)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1522843200">- Remove creating subvolumes. This should be in another package (kubernetes-kubelet)</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558094400">- Update to version 0.7.0:
  * Spec changes:
    + Use more RFC2119 style language in specification (must, should...)
    + add notes about ADD/DEL ordering
    + Make the container ID required and unique.
    + remove the version parameter from ADD and DEL commands.
    + Network interface name matters
    + be explicit about optional and required structure members
    + add CHECK method
    + Add a well-known error for "try again"
    + SPEC.md: clarify meaning of 'routes'
  * Library changes:
    + pkg/types: Makes IPAM concrete type
    + libcni: return error if Type is empty
    + skel: VERSION shouldn't block on stdin
    + non-pointer instances of types.Route now correctly marshal to JSON
    + libcni: add ValidateNetwork and ValidateNetworkList functions
    + pkg/skel: return error if JSON config has no network name
    + skel: add support for plugin version string
    + libcni: make exec handling an interface for better downstream testing
    + libcni: api now takes a Context to allow operations to be timed out or cancelled
    + types/version: add helper to parse PrevResult
    + skel: only print about message, not errors
    + skel,invoke,libcni: implementation of CHECK method
    + cnitool: Honor interface name supplied via CNI_IFNAME environment variable.
    + cnitool: validate correct number of args
    + Don't copy gw from IP4.Gateway to Route.GW When converting from 0.2.0
    + add PrintTo method to Result interface
    + Return a better error when the plugin returns none
- Install sleep binary into CNI plugin directory
- Restore build.sh script which was removed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1563278400">- Update to version 0.7.1 (bsc#1160460):
  * Library changes:
    + invoke : ensure custom envs of CNIArgs are prepended to process envs
    + add GetNetworkListCachedResult to CNI interface
    + delegate : allow delegation funcs override CNI_COMMAND env automatically in heritance
  * Documentation &amp; Convention changes:
    + Update cnitool documentation for spec v0.4.0
    + Add cni-route-override to CNI plugin list
  * Build and test changes:
    + Release: bump go to v1.12</changelog>
  <changelog author="sgrunert@suse.com" date="1578916800">- Set correct CNI version for 99-loopback.conf</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1601553600">- Update to version 0.8.0:
  * Specification and Conventions changes
    + docs: add ips and mac to well-known capabilities
    + add interface name validation
    + Add GUID to well known Capabilities
    + Add DeviceID attribute to RuntimeConfig
    + Typo fixes for infiniband GUID
    + Fix linting issues in docs, add headers to json example, update errors into table
  * Documentation changes
    + Update cnitool docs
    + Remove extra ',' chars which makes conflist examples invalid.
  * libcni changes
    + Remove Result.String method
    + libcni: add config caching [v2]
    + clean up : fix staticcheck warnings
    + libcni: add InitCNIConfigWithCacheDir() and deprecate RuntimeConfig.CacheDir
    + skel: clean up errors in skel and add some well-known error codes
    + libcni: find plugin in exec
    + validate containerID and networkName
    + skel: remove needless functions and types
    + libcni: also cache IfName
    + libcni: fix cache file 'result' key name
    + Bump Go version to 1.13
    + When CNI version isn't supplied in config, use default.
    + intercept netplugin std error
    + invoke: capture and return stderr if plugin exits unexpectedly
    + Retry exec commands on text file busy</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615896000">- Set GO111MODULE=auto to build with go1.16+
  * Default changed to GO111MODULE=on in go1.16
  * Set temporarily until using upstream release with go.mod
  * Drop BuildRequires: golang-packaging not currently using macros
  * Add BuildRequires: golang(API) &gt;= 1.13 recommended dependency expression</changelog>
  <changelog author="dmueller@suse.com" date="1619265600">- use buildmode=pie (cnitool is installed into sbindir)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1622462400">- Update to version 0.8.1:
  * This is a security release that fixes a single bug: bsc#1181961 aka CVE-2021-20206
  - Tighten up plugin-finding logic (#811).</changelog>
  <changelog author="idesmi@protonmail.com" date="1648296000">- Update to version v1.0.1:
  * Rewritten spec
    + non-List configurations are removed
    + the version field in the interfaces array was redundant and
    is removed
  * libcni improvements
- Employ RPM macros.go where feasible
- Use vendor tarball
- Remove ./build.sh</changelog>
  <changelog author="andrea.manzini@suse.com" date="1668081600">- Update to version 1.1.2:
  * spec: fix format
  * libcni: handle empty version when parsing version
  * [exec-plugins]: support plugin lists
  This is a minor update to the CNI libraries and tooling.
  This does not bump the protocol / spec version, which remains at v1.0.0</changelog>
</package>
<package pkgid="d241b02b30ffdc2b023f6f1abdd34fe4380dad299c2c5733624f2bed61748665" name="cni" arch="x86_64">
  <version epoch="0" ver="1.1.2" rel="150500.3.2.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1490184000">- Update to version 0.5.0:
  * Documentation: Add conventions doc
  * noop: allow specifying debug file in config JSON
  * Spec/Conventions: Update to include plugin config
  * spec: add network configuration list specification
  * api,libcni: add network config list-based plugin chaining
  * Update CONVENTIONS.md
  * skel: adds PluginMainWithError which returns a *types.Error
  * testutils: pass netConf in for version operations; pass raw result out for tests
  * types: make Result an interface and move existing Result to separate package
  * macvlan/ipvlan: use common RenameLink method
  * plugins/flannel: organize test JSON alphabetically
  * pkg/ipam: add testcases
  * spec/plugins: return interface details and multiple IP addresses to runtime
  * spec, libcni, pkg/invoke: Use OS-agnostic separator when parsing CNI_PATH
  * pkg/utils/sysctl/sysctl_linux.go: fix build tag.
  * pkg/utils/sysctl/sysctl_linux.go: fix typo.
  * invoke: Enable plugin file names with extensions
  * CONVENTIONS.md: Update details on port-mappings
  * Update with feedback
  * More markups
  * spec: Remove `routes` from Network Configuration
  * docs: consolidate host-local documentation
  * pkg/ns: refactored so that builds succeed on non-linux platforms
  * Fix grammar
  * plugins/main/ptp: set the Sandbox property on the response
  * README: List multus as 3rd party plugin
  * Replace Michael Bridgen with Bryan Boreham
  * pkg/ns, pkg/types: refactored non linux build fix code to
  * pkg/ip: refactored so that builds succeed on non-linux platforms
  * vendor: Update vishvanana/netlink dependency
  * libcni: up-convert a Config to a ConfigList when no other configs are found.
  * docs: CNI versioning for 0.3.0 upgrade
  * docs: Edits to v0.3.0 upgrade guidance
  * docs: minor improvements to 0.3.0 upgrade guidance
  * docs: add small upgrade instructions
  * docs: minor improvements to spec-upgrades
  * docs: fill-out and correct version conversion table
  * docs: table formatting is hard
  * pkg/testutils: return errors after restoring stdout
  * pkg/types: misc current types testcase cleanups
  * Minor rewording about default config version
  * spec,libcni: add support for injecting runtimeConfig into plugin stdin data
  * Check n.IPAM before use it in LoadIPAMConfig function
  * do not error if last_reserved_ip is missing for host local ipam
  * add test for ensuring initial subnet creation does not contain an error
  * fix unrelated failing tests</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1490270400">- Update to version 0.5.1:
  * readme.md: Add link to community sync
  * pkg/ip: do not leak types from vendored netlink package
  * pkg/ip: SetupVeth returns net.Interface
  * pkg/ip: improve docstring for SetupVeth
  * Added Romana to list of CNI providers...
  * plugins/meta/flannel: If net config is missing do not return err on DEL
  * plugins/*: Don't error if the device doesn't exist</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1491825600">- Update to version 0.5.2:
  * Rename build script to avoid conflict with bazel
  * Enable s390x build
  * Update community sync detail
  * Added entry for CNI-Genie
  * travis: shift forward to Go 1.8 and 1.7
  * spec/plugins: fix 'ip'-&gt;'ips' in the spec, bump to 0.3.1
  * libcni: Improved error messages.
  * libcni: Fixed tests that were checking error strings.
  * Documentation: Added documentation for `cnitool`.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503921600">- Update to version 0.6.0:
  * Conventions: add convention around chaining interfaces
  * pkg/types: safer typecasting for TextUnmarshaler when loading args
  * pkg/types: modify LoadArgs to return a named error when an unmarshalable condition is detected
  * Update note about next Community Sync, 2017-06-21
  * types: fix marshalling of omitted "interfaces" key in IPConfig JSON
  * Update and document release process
  * scripts/release.sh: Add in s390x architecture
  * cnitool: add support for CNI_ARGS
  * README plugins list: add Linen CNI plugin</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Remove the dependency with the cni-plugins
- Recommend the cni-plugins</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1516017600">- Make /var/lib/cni writable</changelog>
  <changelog author="kmacinnes@suse.com" date="1516276800">- Add snapper as a requirement, to provide mksubvolume</changelog>
  <changelog author="kmacinnes@suse.com" date="1517227200">- Use full/absolute path for mksubvolume
- Change snapper Requires to a Requires(post)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1522843200">- Remove creating subvolumes. This should be in another package (kubernetes-kubelet)</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558094400">- Update to version 0.7.0:
  * Spec changes:
    + Use more RFC2119 style language in specification (must, should...)
    + add notes about ADD/DEL ordering
    + Make the container ID required and unique.
    + remove the version parameter from ADD and DEL commands.
    + Network interface name matters
    + be explicit about optional and required structure members
    + add CHECK method
    + Add a well-known error for "try again"
    + SPEC.md: clarify meaning of 'routes'
  * Library changes:
    + pkg/types: Makes IPAM concrete type
    + libcni: return error if Type is empty
    + skel: VERSION shouldn't block on stdin
    + non-pointer instances of types.Route now correctly marshal to JSON
    + libcni: add ValidateNetwork and ValidateNetworkList functions
    + pkg/skel: return error if JSON config has no network name
    + skel: add support for plugin version string
    + libcni: make exec handling an interface for better downstream testing
    + libcni: api now takes a Context to allow operations to be timed out or cancelled
    + types/version: add helper to parse PrevResult
    + skel: only print about message, not errors
    + skel,invoke,libcni: implementation of CHECK method
    + cnitool: Honor interface name supplied via CNI_IFNAME environment variable.
    + cnitool: validate correct number of args
    + Don't copy gw from IP4.Gateway to Route.GW When converting from 0.2.0
    + add PrintTo method to Result interface
    + Return a better error when the plugin returns none
- Install sleep binary into CNI plugin directory
- Restore build.sh script which was removed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1563278400">- Update to version 0.7.1 (bsc#1160460):
  * Library changes:
    + invoke : ensure custom envs of CNIArgs are prepended to process envs
    + add GetNetworkListCachedResult to CNI interface
    + delegate : allow delegation funcs override CNI_COMMAND env automatically in heritance
  * Documentation &amp; Convention changes:
    + Update cnitool documentation for spec v0.4.0
    + Add cni-route-override to CNI plugin list
  * Build and test changes:
    + Release: bump go to v1.12</changelog>
  <changelog author="sgrunert@suse.com" date="1578916800">- Set correct CNI version for 99-loopback.conf</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1601553600">- Update to version 0.8.0:
  * Specification and Conventions changes
    + docs: add ips and mac to well-known capabilities
    + add interface name validation
    + Add GUID to well known Capabilities
    + Add DeviceID attribute to RuntimeConfig
    + Typo fixes for infiniband GUID
    + Fix linting issues in docs, add headers to json example, update errors into table
  * Documentation changes
    + Update cnitool docs
    + Remove extra ',' chars which makes conflist examples invalid.
  * libcni changes
    + Remove Result.String method
    + libcni: add config caching [v2]
    + clean up : fix staticcheck warnings
    + libcni: add InitCNIConfigWithCacheDir() and deprecate RuntimeConfig.CacheDir
    + skel: clean up errors in skel and add some well-known error codes
    + libcni: find plugin in exec
    + validate containerID and networkName
    + skel: remove needless functions and types
    + libcni: also cache IfName
    + libcni: fix cache file 'result' key name
    + Bump Go version to 1.13
    + When CNI version isn't supplied in config, use default.
    + intercept netplugin std error
    + invoke: capture and return stderr if plugin exits unexpectedly
    + Retry exec commands on text file busy</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615896000">- Set GO111MODULE=auto to build with go1.16+
  * Default changed to GO111MODULE=on in go1.16
  * Set temporarily until using upstream release with go.mod
  * Drop BuildRequires: golang-packaging not currently using macros
  * Add BuildRequires: golang(API) &gt;= 1.13 recommended dependency expression</changelog>
  <changelog author="dmueller@suse.com" date="1619265600">- use buildmode=pie (cnitool is installed into sbindir)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1622462400">- Update to version 0.8.1:
  * This is a security release that fixes a single bug: bsc#1181961 aka CVE-2021-20206
  - Tighten up plugin-finding logic (#811).</changelog>
  <changelog author="idesmi@protonmail.com" date="1648296000">- Update to version v1.0.1:
  * Rewritten spec
    + non-List configurations are removed
    + the version field in the interfaces array was redundant and
    is removed
  * libcni improvements
- Employ RPM macros.go where feasible
- Use vendor tarball
- Remove ./build.sh</changelog>
  <changelog author="andrea.manzini@suse.com" date="1668081600">- Update to version 1.1.2:
  * spec: fix format
  * libcni: handle empty version when parsing version
  * [exec-plugins]: support plugin lists
  This is a minor update to the CNI libraries and tooling.
  This does not bump the protocol / spec version, which remains at v1.0.0</changelog>
</package>
<package pkgid="9afc8a9b37afbd92cd95a2a58a3e336613afea6faa078906d58a56d34d1260df" name="cni-plugins" arch="aarch64">
  <version epoch="0" ver="1.1.1" rel="150500.3.2.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1503921600">- Initial version from CNI plugins v0.6.0</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1503921601">- Install docs in the cni-plugins dir</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Require cni</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1544616000">- Updated to a supported version of Go (due to security reasons)</changelog>
  <changelog author="sgrunert@suse.com" date="1548417600">- Updated plugins to v0.7.4:
  - Add host-device plugin, which simply moves a device from the
    host network namespace
  - Portmap now uses a more efficient rule structure
  - host-local can receive ranges as a RuntimeArgument
  - DHCP daemon can be containerized
  - DHCP now correctly parses routes
  - Various Windows build fixes
  - Waiting for DAD is skipped when possible
  - Bridge now uses a stable mac
  - Fix a regression where the interface's MAC address was no
    longer populated in the return type.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558353600">- Updated plugins to v0.8.0:
  + New plugins:
  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins
  + Plugin features / changelog:
  * CHECK Support
  * macvlan:
  - Allow to configure empty ipam for macvlan
  - Make master config optional
  * bridge:
  - Add vlan tag to the bridge cni plugin
  - Allow the user to assign VLAN tag
  - L2 bridge Implementation.
  * dhcp:
  - Include Subnet Mask option parameter in DHCPREQUEST
  - Add systemd unit file to activate socket with systemd
  - Add container ifName to the dhcp clientID, making the
    clientID value
  * flannel:
  - Pass through runtimeConfig to delegate
  * host-local:
  - host-local: add ifname to file tracking IP address used
  * host-device:
  - Support the IPAM in the host-device
  - Handle empty netns in DEL for loopback and host-device
  * tuning:
  - adds 'ip link' command related feature into tuning
  + Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip
  + Build fixes:
  * test: add coveralls support
  * plugins: correctly output build version, cosmetic cleanups
  * Move Windows tests to Travis
- from version v0.7.5:
  + This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules
  + This fixes a potential issue where firewall rules may
    be bypassed by port mapping
- Include patch to fix the build on i586:
  + 0001_use_Go_facilities_to_get_a_socket.patch
- Use new build_linux.sh script instead of removed build.sh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1559822400">- Updated plugins to v0.8.1:
  + Bugs:
  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface
  + Improvements:
  * Release: bump go to v1.12
  * host-device: add pciBusID property
- Drop patches merged upstream:
  + 0001_use_Go_facilities_to_get_a_socket.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1565956800">- Update plugins to v0.8.2
  + New features:
  * Support "args" in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable
  + Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to "cni0": file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is "invalid argument" not "file exists"
  * bump containernetworking/cni to v0.7.1</changelog>
  <changelog author="sgrunert@suse.com" date="1573473600">- Update to version 0.8.3:
  * Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).
  * Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).
  * Bugfixes:
  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).
  * Tests:
  * integration: fix ip address collision in integration tests (#409).
  * testutils: newNS() works in a rootless user namespace (#401).
  * Bump Go version (#386).
  * Cleanup netns after test suite (#375).
  * Docs:
  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to version 0.8.4 (bsc#1160460):
  * add support for mips64le
  * Add missing cniVersion in README example
  * bump go-iptables module to v0.4.5
  * iptables: add idempotent functions
  * portmap doesn't fail if chain doesn't exist
  * fix portmap port forward flakiness
  * Add Bruce Ma and Piotr Skarmuk as owners</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- Update to version 0.8.6 (bsc#1172410 CVE-2020-10749)
  * New features
  * Support device id in host device plugin (#471).
  * win-bridge: add support for portMappings capability (#475).
  * Make host-device to work with virtio net device (#453).
  * Small improvements
  * ptp, bridge: disable accept_ra on the host-side interface (#484).
  * modify the error url of windowscontainer (#460).
  * portmap: Apply the DNAT hairpin to the whole subnet (#469). The DNAT hairpin
    rule only allow the * container itself to access the ports it is exposing thru
    the host IP. Other containers in the same subnet might also want to access this
    service via the host IP, so apply this rule to the whole subnet instead of just
    for the container.
  * Unlock OS thread after netns is restored (#455).
  * Bugfixes
  * plugins/meta/sbr: Adjusted ipv6 address mask to /128 (#479). A /64 mask was used
    which routed an entire cidr based on source, not only the bound address.
  * check bridge's port state (#468). fix #463
  * Reset the route flag before moving the rule (#472).
  * replace juju/errors because of CNCF license scan (#458). ref to #457
  * loopback: Fix ipv6 address checks (#442). Fixes a minor bug in loopback plugin.
    The IPv6 address check loops over IPv4 addresses.
- from version 0.8.5
  * Bugfixes
  * bridge: Fix for the case where kernel doesn't have CONFIG_BRIDGE_VLAN_FILTERING
    (#434) fixes #370.
  * vlan: Fix vlan plugin returning error when device is already removed (#438).
  * Improvements
  * sysctl: Improve support of sysctl name separators (#437).</changelog>
  <changelog author="dmueller@suse.com" date="1598875200">- Update to version 0.8.7:
  * Fix race condition in GetCurrentNS
  * lo: CNI_IFNAME is no longer ignored
  * cni: bump to 0.8.0
  * Bump Go version to 1.13 and 1.14
  * Add contact info
  * Update firewall README.md CNI-ADMIN
  * firewall: fix some typos in docs
  * portmap DEL noop if no portMappings present
  * flannel: remove net conf file after DEL succeed</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 0.9.0:
  * tuning: revert values on delete (#540)
  * go mod tidy
  * bump to go 1.15
  * Add ability to trigger retests via comments
  * pkg/ns: fix test case to tolerate pids going away.
  * Add github build &amp; test actions
  * bridge: fix testcase to check addresses we care about
  * Remove travis.
  * vendor: bump ginkgo, gover
  * portmap plugin should flush previous udp connections
  * Updating plugin README.md files (#549)
  * update netlink dependencies
  * Xdhcp: fix example configuration
  * VRF: extend supported version to 0.3.1 too.
  * VRF CNI: Add an optional table parameter.
  * Add more tests for the vrf cni plugin.
  * Update github.com/vishvananda/netlink to v1.1.0
  * Introduce a new VRF CNI meta plugin.
  * Travis: run tests on arm64
  * Replace nc with the local echo client.
  * Add an echo client to be used instead of nc.
  * Bump up the ubuntu version used in CI to bionic.
  * flannel: allow input ipam parameters as basis for delegate
  * ipvlan: make master config as optional
  * Remove extraneous test file in Windows plugin</changelog>
  <changelog author="rpm@fthiessen.de" date="1619438400">- Update to version 0.9.1:
  * ipam/dhcp: Add broadcast flag
  * add flannel to support dual stack ip
  * bandwidth: fix panic in tests
  * host-device: Add support for DPDK device
  * [main/vlan] Fix error handling for delegate IPAM plugin
  * dhcp: default dhcp clien timeout is 10s
  * vlan: fix error message text by removing ptp references
  * dhcp: daemon dhcp client timeout is configurable
  * dhcp: timeout value is set in DHCP daemon
  * remove unused function
  * deps: go mod tidy coreos/go-iptables
  * deps: bump coreos/go-iptables</changelog>
  <changelog author="fvogt@suse.com" date="1648555200">- Update to version 1.1.1:
  * ipam/dhcp: Fix client id in renew/release
  * call ipam.ExceDel after clean up device in netns fix #666
  * portmap: fix checkPorts result when chain does not exist
  * portmap: fix bug that new udp connection deletes all existing conntrack entries
  * Enhanced dad set to 1
  * Add boolean to enable/disable dad
  * Disable DAD for container side veth
  * firewall: support ingressPolicy=(open|same-bridge) for isolating bridges as in Docker
  * Fix host-device gofmt
  * host-device: Bring interfaces up after moving into container
  * pkg/ns: use file system magic numbers from golang.org/x/sys/unix
  * gofmt
  * go mod tidy
  * build: bump to go 1.17
  * Remove arp notify setting per comment
  * plugins: replace arping package with arp_notify
  * fix #685
  * Ran go fmt so tests would pass
  * Fixed DHCP problem that broke when fast retry was added.
  * dhcp ipam: adjust retry mechanism
  * add ipam tests for dpdk device
  * add ipam support for dpdk device
  * ipvlan: Send Gratuitous ARP after IPs are set
  * dhcp ipam: fix client id
  * dhcp ipam: rename inconsistent options among files
  * dhcp ipam: add more options capable for sending
  * dhcp ipam: add fast retry
  * dhcp ipam: support customizing dhcp options
  * dhcp ipam: truncate client id to 254 bytes
  * dhcp ipam: print error correctly without format string
  * dhcp ipam: using full config to regular the code
  * Allow setting sysctls on a particular interface
  * dhcp: remove implemented TODO
  * Don't redundantly filepath.Clean the output of filepath.Join
  * Use crypto/rand.Read, not crypto.Reader.Read
  * bridge: Add macspoofchk support
  * plugins: fix bug where support for CNI version 0.4.0 or 1.0.0 was dropped
  * vendor: bump to libcni v1.0.1
  * static ipam: do not parse the CIDR twice
  * static ipam: improve error msgs when provisioning invalid CIDR
  * bump go to 1.16, other misc fixes
  * vendor: bump all direct dependencies
  * vendor: bump to libcni v1.0
  * docs: Update the CI badge from Travis CI to GitHub Actions
  * bridge: Fix typo in error message for promiscuous mode
  * ip: place veth peer in host namspace directly
  * bridge: Add mac field to specify container iface mac
  * static ipam: decide wrong cidr error msg
  * static ipam: stop wrapping net.ParseCIDR errors
  * static ipam: show confusing error msg
  * utils, hwaddr: Remove unused package
  * ip, link_linux: Remove unused SetHWAddrByIP function
  * plugins: remove flannel
  * refactor(win-bridge): netconf
  * refactor(win-bridge): hcn api processing
  * refactor(win-bridge): hns api processing
  * chore(win-bridge): location related
  * chore(win-bridge): text related
  * Remove Bryan Boreham as maintainer
  * host-local: support ip/prefix in env args and CNI args
  * [sbr]: Use different tableID for every ipCfg        Check tableID not in use for every ipCfg
  * Small typo improves in README.md
  * Allow multiple routes to be added for the same prefix. Enables ECMP
  * Update to lastest vendor/github.com/vishvananda/netlink
  * tuning: always update MAC in CNI result
  * vendor: bump to libcni v1.0-rc1
  * tuning: Add support of altering the allmulticast flag
  * [sbr]: Use different tableID for every ipCfg        Move default table routes which  match the ipCfg config
  * Fix nil-pointer check
  * host-local: support custom IPs allocation through runtime configuration
  * pkg/ip: introduce a new type `IP` to support formated &lt;ip&gt;[/&lt;prefix&gt;]
  * go.mod: github.com/j-keck/arping v1.0.1
  * go.mod: github.com/buger/jsonparser v1.1.1
  * go.mod: github.com/alexflint/go-filemutex v1.1.0
  * go.mod github.com/Microsoft/hcsshim v0.8.16
  * go.mod: godbus/dbus/v5 v5.0.3, coreos/go-systemd v22.2.0
  * go.mod: github.com/mattn/go-shellwords v1.0.11
  * go.mod: github.com/sirupsen/logrus v1.8.1
  * CI: Install linux-modules-extra for VRF module
  * Fix broken links to online docs in plugin READMEs
  * gha: update actions/setup-go@v2
  * remove redundant startRange in RangeIter due to overlap check on multi ranges
  * fix(win-bridge): panic while calling HNS api
  * portmap: use slashes in sysctl template to support interface names which separated by dots
  * pkg/ipam: use slash as sysctl separator so interface name can have dot
  * [macvlan] Stop setting proxy-arp on macvlan interface
  * tuning: increase test coverage to 1.0.0 and older spec versions
  * portmap: increase test coverage to 1.0.0 and older spec versions
  * flannel: increase test coverage to 1.0.0 and older spec versions
  * firewall: increase test coverage to 1.0.0 and older spec versions
  * bandwidth: increase test coverage to 1.0.0 and older spec versions
  * host-local: increase test coverage to 1.0.0 and older spec versions
  * static: increase test coverage to 1.0.0 and older spec versions
  * dhcp: increase test coverage to 1.0.0 and older spec versions
  * dhcp: add -resendmax option to limit lease acquisition time for testcases
  * vlan: increase test coverage to 1.0.0 and older spec versions
  * ptp: increase test coverage to 1.0.0 and older spec versions
  * macvlan: increase test coverage to 1.0.0 and older spec versions
  * loopback: increase test coverage to 1.0.0 and older spec versions
  * ipvlan: increase test coverage to 1.0.0 and older spec versions
  * host-device: increase test coverage to 1.0.0 and older spec versions
  * bridge: increase test coverage to 1.0.0 and older spec versions
  * bridge: simplify version-based testcase code
  * testutils: add test utilities for spec version features
  * plugins: update to spec version 1.0.0
  * vendor: bump CNI to 1.0.0-pre @ 62e54113 (fixes bsc#1181961 aka CVE-2021-20206)
- Drop %go_nostrip</changelog>
</package>
<package pkgid="2fddc8f6d35dbe412febaab71ce5f081244f9e9d3f5667c3a2bda5e85710e849" name="cni-plugins" arch="s390x">
  <version epoch="0" ver="1.1.1" rel="150500.3.2.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1503921600">- Initial version from CNI plugins v0.6.0</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1503921601">- Install docs in the cni-plugins dir</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Require cni</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1544616000">- Updated to a supported version of Go (due to security reasons)</changelog>
  <changelog author="sgrunert@suse.com" date="1548417600">- Updated plugins to v0.7.4:
  - Add host-device plugin, which simply moves a device from the
    host network namespace
  - Portmap now uses a more efficient rule structure
  - host-local can receive ranges as a RuntimeArgument
  - DHCP daemon can be containerized
  - DHCP now correctly parses routes
  - Various Windows build fixes
  - Waiting for DAD is skipped when possible
  - Bridge now uses a stable mac
  - Fix a regression where the interface's MAC address was no
    longer populated in the return type.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558353600">- Updated plugins to v0.8.0:
  + New plugins:
  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins
  + Plugin features / changelog:
  * CHECK Support
  * macvlan:
  - Allow to configure empty ipam for macvlan
  - Make master config optional
  * bridge:
  - Add vlan tag to the bridge cni plugin
  - Allow the user to assign VLAN tag
  - L2 bridge Implementation.
  * dhcp:
  - Include Subnet Mask option parameter in DHCPREQUEST
  - Add systemd unit file to activate socket with systemd
  - Add container ifName to the dhcp clientID, making the
    clientID value
  * flannel:
  - Pass through runtimeConfig to delegate
  * host-local:
  - host-local: add ifname to file tracking IP address used
  * host-device:
  - Support the IPAM in the host-device
  - Handle empty netns in DEL for loopback and host-device
  * tuning:
  - adds 'ip link' command related feature into tuning
  + Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip
  + Build fixes:
  * test: add coveralls support
  * plugins: correctly output build version, cosmetic cleanups
  * Move Windows tests to Travis
- from version v0.7.5:
  + This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules
  + This fixes a potential issue where firewall rules may
    be bypassed by port mapping
- Include patch to fix the build on i586:
  + 0001_use_Go_facilities_to_get_a_socket.patch
- Use new build_linux.sh script instead of removed build.sh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1559822400">- Updated plugins to v0.8.1:
  + Bugs:
  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface
  + Improvements:
  * Release: bump go to v1.12
  * host-device: add pciBusID property
- Drop patches merged upstream:
  + 0001_use_Go_facilities_to_get_a_socket.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1565956800">- Update plugins to v0.8.2
  + New features:
  * Support "args" in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable
  + Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to "cni0": file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is "invalid argument" not "file exists"
  * bump containernetworking/cni to v0.7.1</changelog>
  <changelog author="sgrunert@suse.com" date="1573473600">- Update to version 0.8.3:
  * Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).
  * Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).
  * Bugfixes:
  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).
  * Tests:
  * integration: fix ip address collision in integration tests (#409).
  * testutils: newNS() works in a rootless user namespace (#401).
  * Bump Go version (#386).
  * Cleanup netns after test suite (#375).
  * Docs:
  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to version 0.8.4 (bsc#1160460):
  * add support for mips64le
  * Add missing cniVersion in README example
  * bump go-iptables module to v0.4.5
  * iptables: add idempotent functions
  * portmap doesn't fail if chain doesn't exist
  * fix portmap port forward flakiness
  * Add Bruce Ma and Piotr Skarmuk as owners</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- Update to version 0.8.6 (bsc#1172410 CVE-2020-10749)
  * New features
  * Support device id in host device plugin (#471).
  * win-bridge: add support for portMappings capability (#475).
  * Make host-device to work with virtio net device (#453).
  * Small improvements
  * ptp, bridge: disable accept_ra on the host-side interface (#484).
  * modify the error url of windowscontainer (#460).
  * portmap: Apply the DNAT hairpin to the whole subnet (#469). The DNAT hairpin
    rule only allow the * container itself to access the ports it is exposing thru
    the host IP. Other containers in the same subnet might also want to access this
    service via the host IP, so apply this rule to the whole subnet instead of just
    for the container.
  * Unlock OS thread after netns is restored (#455).
  * Bugfixes
  * plugins/meta/sbr: Adjusted ipv6 address mask to /128 (#479). A /64 mask was used
    which routed an entire cidr based on source, not only the bound address.
  * check bridge's port state (#468). fix #463
  * Reset the route flag before moving the rule (#472).
  * replace juju/errors because of CNCF license scan (#458). ref to #457
  * loopback: Fix ipv6 address checks (#442). Fixes a minor bug in loopback plugin.
    The IPv6 address check loops over IPv4 addresses.
- from version 0.8.5
  * Bugfixes
  * bridge: Fix for the case where kernel doesn't have CONFIG_BRIDGE_VLAN_FILTERING
    (#434) fixes #370.
  * vlan: Fix vlan plugin returning error when device is already removed (#438).
  * Improvements
  * sysctl: Improve support of sysctl name separators (#437).</changelog>
  <changelog author="dmueller@suse.com" date="1598875200">- Update to version 0.8.7:
  * Fix race condition in GetCurrentNS
  * lo: CNI_IFNAME is no longer ignored
  * cni: bump to 0.8.0
  * Bump Go version to 1.13 and 1.14
  * Add contact info
  * Update firewall README.md CNI-ADMIN
  * firewall: fix some typos in docs
  * portmap DEL noop if no portMappings present
  * flannel: remove net conf file after DEL succeed</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 0.9.0:
  * tuning: revert values on delete (#540)
  * go mod tidy
  * bump to go 1.15
  * Add ability to trigger retests via comments
  * pkg/ns: fix test case to tolerate pids going away.
  * Add github build &amp; test actions
  * bridge: fix testcase to check addresses we care about
  * Remove travis.
  * vendor: bump ginkgo, gover
  * portmap plugin should flush previous udp connections
  * Updating plugin README.md files (#549)
  * update netlink dependencies
  * Xdhcp: fix example configuration
  * VRF: extend supported version to 0.3.1 too.
  * VRF CNI: Add an optional table parameter.
  * Add more tests for the vrf cni plugin.
  * Update github.com/vishvananda/netlink to v1.1.0
  * Introduce a new VRF CNI meta plugin.
  * Travis: run tests on arm64
  * Replace nc with the local echo client.
  * Add an echo client to be used instead of nc.
  * Bump up the ubuntu version used in CI to bionic.
  * flannel: allow input ipam parameters as basis for delegate
  * ipvlan: make master config as optional
  * Remove extraneous test file in Windows plugin</changelog>
  <changelog author="rpm@fthiessen.de" date="1619438400">- Update to version 0.9.1:
  * ipam/dhcp: Add broadcast flag
  * add flannel to support dual stack ip
  * bandwidth: fix panic in tests
  * host-device: Add support for DPDK device
  * [main/vlan] Fix error handling for delegate IPAM plugin
  * dhcp: default dhcp clien timeout is 10s
  * vlan: fix error message text by removing ptp references
  * dhcp: daemon dhcp client timeout is configurable
  * dhcp: timeout value is set in DHCP daemon
  * remove unused function
  * deps: go mod tidy coreos/go-iptables
  * deps: bump coreos/go-iptables</changelog>
  <changelog author="fvogt@suse.com" date="1648555200">- Update to version 1.1.1:
  * ipam/dhcp: Fix client id in renew/release
  * call ipam.ExceDel after clean up device in netns fix #666
  * portmap: fix checkPorts result when chain does not exist
  * portmap: fix bug that new udp connection deletes all existing conntrack entries
  * Enhanced dad set to 1
  * Add boolean to enable/disable dad
  * Disable DAD for container side veth
  * firewall: support ingressPolicy=(open|same-bridge) for isolating bridges as in Docker
  * Fix host-device gofmt
  * host-device: Bring interfaces up after moving into container
  * pkg/ns: use file system magic numbers from golang.org/x/sys/unix
  * gofmt
  * go mod tidy
  * build: bump to go 1.17
  * Remove arp notify setting per comment
  * plugins: replace arping package with arp_notify
  * fix #685
  * Ran go fmt so tests would pass
  * Fixed DHCP problem that broke when fast retry was added.
  * dhcp ipam: adjust retry mechanism
  * add ipam tests for dpdk device
  * add ipam support for dpdk device
  * ipvlan: Send Gratuitous ARP after IPs are set
  * dhcp ipam: fix client id
  * dhcp ipam: rename inconsistent options among files
  * dhcp ipam: add more options capable for sending
  * dhcp ipam: add fast retry
  * dhcp ipam: support customizing dhcp options
  * dhcp ipam: truncate client id to 254 bytes
  * dhcp ipam: print error correctly without format string
  * dhcp ipam: using full config to regular the code
  * Allow setting sysctls on a particular interface
  * dhcp: remove implemented TODO
  * Don't redundantly filepath.Clean the output of filepath.Join
  * Use crypto/rand.Read, not crypto.Reader.Read
  * bridge: Add macspoofchk support
  * plugins: fix bug where support for CNI version 0.4.0 or 1.0.0 was dropped
  * vendor: bump to libcni v1.0.1
  * static ipam: do not parse the CIDR twice
  * static ipam: improve error msgs when provisioning invalid CIDR
  * bump go to 1.16, other misc fixes
  * vendor: bump all direct dependencies
  * vendor: bump to libcni v1.0
  * docs: Update the CI badge from Travis CI to GitHub Actions
  * bridge: Fix typo in error message for promiscuous mode
  * ip: place veth peer in host namspace directly
  * bridge: Add mac field to specify container iface mac
  * static ipam: decide wrong cidr error msg
  * static ipam: stop wrapping net.ParseCIDR errors
  * static ipam: show confusing error msg
  * utils, hwaddr: Remove unused package
  * ip, link_linux: Remove unused SetHWAddrByIP function
  * plugins: remove flannel
  * refactor(win-bridge): netconf
  * refactor(win-bridge): hcn api processing
  * refactor(win-bridge): hns api processing
  * chore(win-bridge): location related
  * chore(win-bridge): text related
  * Remove Bryan Boreham as maintainer
  * host-local: support ip/prefix in env args and CNI args
  * [sbr]: Use different tableID for every ipCfg        Check tableID not in use for every ipCfg
  * Small typo improves in README.md
  * Allow multiple routes to be added for the same prefix. Enables ECMP
  * Update to lastest vendor/github.com/vishvananda/netlink
  * tuning: always update MAC in CNI result
  * vendor: bump to libcni v1.0-rc1
  * tuning: Add support of altering the allmulticast flag
  * [sbr]: Use different tableID for every ipCfg        Move default table routes which  match the ipCfg config
  * Fix nil-pointer check
  * host-local: support custom IPs allocation through runtime configuration
  * pkg/ip: introduce a new type `IP` to support formated &lt;ip&gt;[/&lt;prefix&gt;]
  * go.mod: github.com/j-keck/arping v1.0.1
  * go.mod: github.com/buger/jsonparser v1.1.1
  * go.mod: github.com/alexflint/go-filemutex v1.1.0
  * go.mod github.com/Microsoft/hcsshim v0.8.16
  * go.mod: godbus/dbus/v5 v5.0.3, coreos/go-systemd v22.2.0
  * go.mod: github.com/mattn/go-shellwords v1.0.11
  * go.mod: github.com/sirupsen/logrus v1.8.1
  * CI: Install linux-modules-extra for VRF module
  * Fix broken links to online docs in plugin READMEs
  * gha: update actions/setup-go@v2
  * remove redundant startRange in RangeIter due to overlap check on multi ranges
  * fix(win-bridge): panic while calling HNS api
  * portmap: use slashes in sysctl template to support interface names which separated by dots
  * pkg/ipam: use slash as sysctl separator so interface name can have dot
  * [macvlan] Stop setting proxy-arp on macvlan interface
  * tuning: increase test coverage to 1.0.0 and older spec versions
  * portmap: increase test coverage to 1.0.0 and older spec versions
  * flannel: increase test coverage to 1.0.0 and older spec versions
  * firewall: increase test coverage to 1.0.0 and older spec versions
  * bandwidth: increase test coverage to 1.0.0 and older spec versions
  * host-local: increase test coverage to 1.0.0 and older spec versions
  * static: increase test coverage to 1.0.0 and older spec versions
  * dhcp: increase test coverage to 1.0.0 and older spec versions
  * dhcp: add -resendmax option to limit lease acquisition time for testcases
  * vlan: increase test coverage to 1.0.0 and older spec versions
  * ptp: increase test coverage to 1.0.0 and older spec versions
  * macvlan: increase test coverage to 1.0.0 and older spec versions
  * loopback: increase test coverage to 1.0.0 and older spec versions
  * ipvlan: increase test coverage to 1.0.0 and older spec versions
  * host-device: increase test coverage to 1.0.0 and older spec versions
  * bridge: increase test coverage to 1.0.0 and older spec versions
  * bridge: simplify version-based testcase code
  * testutils: add test utilities for spec version features
  * plugins: update to spec version 1.0.0
  * vendor: bump CNI to 1.0.0-pre @ 62e54113 (fixes bsc#1181961 aka CVE-2021-20206)
- Drop %go_nostrip</changelog>
</package>
<package pkgid="2231ae77ef458ceb11f23fc4f1cc8b5427bd3c422ce19ff94ad99105d0cadfa0" name="cni-plugins" arch="src">
  <version epoch="0" ver="1.1.1" rel="150500.3.2.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1503921600">- Initial version from CNI plugins v0.6.0</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1503921601">- Install docs in the cni-plugins dir</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Require cni</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1544616000">- Updated to a supported version of Go (due to security reasons)</changelog>
  <changelog author="sgrunert@suse.com" date="1548417600">- Updated plugins to v0.7.4:
  - Add host-device plugin, which simply moves a device from the
    host network namespace
  - Portmap now uses a more efficient rule structure
  - host-local can receive ranges as a RuntimeArgument
  - DHCP daemon can be containerized
  - DHCP now correctly parses routes
  - Various Windows build fixes
  - Waiting for DAD is skipped when possible
  - Bridge now uses a stable mac
  - Fix a regression where the interface's MAC address was no
    longer populated in the return type.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558353600">- Updated plugins to v0.8.0:
  + New plugins:
  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins
  + Plugin features / changelog:
  * CHECK Support
  * macvlan:
  - Allow to configure empty ipam for macvlan
  - Make master config optional
  * bridge:
  - Add vlan tag to the bridge cni plugin
  - Allow the user to assign VLAN tag
  - L2 bridge Implementation.
  * dhcp:
  - Include Subnet Mask option parameter in DHCPREQUEST
  - Add systemd unit file to activate socket with systemd
  - Add container ifName to the dhcp clientID, making the
    clientID value
  * flannel:
  - Pass through runtimeConfig to delegate
  * host-local:
  - host-local: add ifname to file tracking IP address used
  * host-device:
  - Support the IPAM in the host-device
  - Handle empty netns in DEL for loopback and host-device
  * tuning:
  - adds 'ip link' command related feature into tuning
  + Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip
  + Build fixes:
  * test: add coveralls support
  * plugins: correctly output build version, cosmetic cleanups
  * Move Windows tests to Travis
- from version v0.7.5:
  + This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules
  + This fixes a potential issue where firewall rules may
    be bypassed by port mapping
- Include patch to fix the build on i586:
  + 0001_use_Go_facilities_to_get_a_socket.patch
- Use new build_linux.sh script instead of removed build.sh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1559822400">- Updated plugins to v0.8.1:
  + Bugs:
  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface
  + Improvements:
  * Release: bump go to v1.12
  * host-device: add pciBusID property
- Drop patches merged upstream:
  + 0001_use_Go_facilities_to_get_a_socket.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1565956800">- Update plugins to v0.8.2
  + New features:
  * Support "args" in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable
  + Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to "cni0": file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is "invalid argument" not "file exists"
  * bump containernetworking/cni to v0.7.1</changelog>
  <changelog author="sgrunert@suse.com" date="1573473600">- Update to version 0.8.3:
  * Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).
  * Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).
  * Bugfixes:
  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).
  * Tests:
  * integration: fix ip address collision in integration tests (#409).
  * testutils: newNS() works in a rootless user namespace (#401).
  * Bump Go version (#386).
  * Cleanup netns after test suite (#375).
  * Docs:
  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to version 0.8.4 (bsc#1160460):
  * add support for mips64le
  * Add missing cniVersion in README example
  * bump go-iptables module to v0.4.5
  * iptables: add idempotent functions
  * portmap doesn't fail if chain doesn't exist
  * fix portmap port forward flakiness
  * Add Bruce Ma and Piotr Skarmuk as owners</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- Update to version 0.8.6 (bsc#1172410 CVE-2020-10749)
  * New features
  * Support device id in host device plugin (#471).
  * win-bridge: add support for portMappings capability (#475).
  * Make host-device to work with virtio net device (#453).
  * Small improvements
  * ptp, bridge: disable accept_ra on the host-side interface (#484).
  * modify the error url of windowscontainer (#460).
  * portmap: Apply the DNAT hairpin to the whole subnet (#469). The DNAT hairpin
    rule only allow the * container itself to access the ports it is exposing thru
    the host IP. Other containers in the same subnet might also want to access this
    service via the host IP, so apply this rule to the whole subnet instead of just
    for the container.
  * Unlock OS thread after netns is restored (#455).
  * Bugfixes
  * plugins/meta/sbr: Adjusted ipv6 address mask to /128 (#479). A /64 mask was used
    which routed an entire cidr based on source, not only the bound address.
  * check bridge's port state (#468). fix #463
  * Reset the route flag before moving the rule (#472).
  * replace juju/errors because of CNCF license scan (#458). ref to #457
  * loopback: Fix ipv6 address checks (#442). Fixes a minor bug in loopback plugin.
    The IPv6 address check loops over IPv4 addresses.
- from version 0.8.5
  * Bugfixes
  * bridge: Fix for the case where kernel doesn't have CONFIG_BRIDGE_VLAN_FILTERING
    (#434) fixes #370.
  * vlan: Fix vlan plugin returning error when device is already removed (#438).
  * Improvements
  * sysctl: Improve support of sysctl name separators (#437).</changelog>
  <changelog author="dmueller@suse.com" date="1598875200">- Update to version 0.8.7:
  * Fix race condition in GetCurrentNS
  * lo: CNI_IFNAME is no longer ignored
  * cni: bump to 0.8.0
  * Bump Go version to 1.13 and 1.14
  * Add contact info
  * Update firewall README.md CNI-ADMIN
  * firewall: fix some typos in docs
  * portmap DEL noop if no portMappings present
  * flannel: remove net conf file after DEL succeed</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 0.9.0:
  * tuning: revert values on delete (#540)
  * go mod tidy
  * bump to go 1.15
  * Add ability to trigger retests via comments
  * pkg/ns: fix test case to tolerate pids going away.
  * Add github build &amp; test actions
  * bridge: fix testcase to check addresses we care about
  * Remove travis.
  * vendor: bump ginkgo, gover
  * portmap plugin should flush previous udp connections
  * Updating plugin README.md files (#549)
  * update netlink dependencies
  * Xdhcp: fix example configuration
  * VRF: extend supported version to 0.3.1 too.
  * VRF CNI: Add an optional table parameter.
  * Add more tests for the vrf cni plugin.
  * Update github.com/vishvananda/netlink to v1.1.0
  * Introduce a new VRF CNI meta plugin.
  * Travis: run tests on arm64
  * Replace nc with the local echo client.
  * Add an echo client to be used instead of nc.
  * Bump up the ubuntu version used in CI to bionic.
  * flannel: allow input ipam parameters as basis for delegate
  * ipvlan: make master config as optional
  * Remove extraneous test file in Windows plugin</changelog>
  <changelog author="rpm@fthiessen.de" date="1619438400">- Update to version 0.9.1:
  * ipam/dhcp: Add broadcast flag
  * add flannel to support dual stack ip
  * bandwidth: fix panic in tests
  * host-device: Add support for DPDK device
  * [main/vlan] Fix error handling for delegate IPAM plugin
  * dhcp: default dhcp clien timeout is 10s
  * vlan: fix error message text by removing ptp references
  * dhcp: daemon dhcp client timeout is configurable
  * dhcp: timeout value is set in DHCP daemon
  * remove unused function
  * deps: go mod tidy coreos/go-iptables
  * deps: bump coreos/go-iptables</changelog>
  <changelog author="fvogt@suse.com" date="1648555200">- Update to version 1.1.1:
  * ipam/dhcp: Fix client id in renew/release
  * call ipam.ExceDel after clean up device in netns fix #666
  * portmap: fix checkPorts result when chain does not exist
  * portmap: fix bug that new udp connection deletes all existing conntrack entries
  * Enhanced dad set to 1
  * Add boolean to enable/disable dad
  * Disable DAD for container side veth
  * firewall: support ingressPolicy=(open|same-bridge) for isolating bridges as in Docker
  * Fix host-device gofmt
  * host-device: Bring interfaces up after moving into container
  * pkg/ns: use file system magic numbers from golang.org/x/sys/unix
  * gofmt
  * go mod tidy
  * build: bump to go 1.17
  * Remove arp notify setting per comment
  * plugins: replace arping package with arp_notify
  * fix #685
  * Ran go fmt so tests would pass
  * Fixed DHCP problem that broke when fast retry was added.
  * dhcp ipam: adjust retry mechanism
  * add ipam tests for dpdk device
  * add ipam support for dpdk device
  * ipvlan: Send Gratuitous ARP after IPs are set
  * dhcp ipam: fix client id
  * dhcp ipam: rename inconsistent options among files
  * dhcp ipam: add more options capable for sending
  * dhcp ipam: add fast retry
  * dhcp ipam: support customizing dhcp options
  * dhcp ipam: truncate client id to 254 bytes
  * dhcp ipam: print error correctly without format string
  * dhcp ipam: using full config to regular the code
  * Allow setting sysctls on a particular interface
  * dhcp: remove implemented TODO
  * Don't redundantly filepath.Clean the output of filepath.Join
  * Use crypto/rand.Read, not crypto.Reader.Read
  * bridge: Add macspoofchk support
  * plugins: fix bug where support for CNI version 0.4.0 or 1.0.0 was dropped
  * vendor: bump to libcni v1.0.1
  * static ipam: do not parse the CIDR twice
  * static ipam: improve error msgs when provisioning invalid CIDR
  * bump go to 1.16, other misc fixes
  * vendor: bump all direct dependencies
  * vendor: bump to libcni v1.0
  * docs: Update the CI badge from Travis CI to GitHub Actions
  * bridge: Fix typo in error message for promiscuous mode
  * ip: place veth peer in host namspace directly
  * bridge: Add mac field to specify container iface mac
  * static ipam: decide wrong cidr error msg
  * static ipam: stop wrapping net.ParseCIDR errors
  * static ipam: show confusing error msg
  * utils, hwaddr: Remove unused package
  * ip, link_linux: Remove unused SetHWAddrByIP function
  * plugins: remove flannel
  * refactor(win-bridge): netconf
  * refactor(win-bridge): hcn api processing
  * refactor(win-bridge): hns api processing
  * chore(win-bridge): location related
  * chore(win-bridge): text related
  * Remove Bryan Boreham as maintainer
  * host-local: support ip/prefix in env args and CNI args
  * [sbr]: Use different tableID for every ipCfg        Check tableID not in use for every ipCfg
  * Small typo improves in README.md
  * Allow multiple routes to be added for the same prefix. Enables ECMP
  * Update to lastest vendor/github.com/vishvananda/netlink
  * tuning: always update MAC in CNI result
  * vendor: bump to libcni v1.0-rc1
  * tuning: Add support of altering the allmulticast flag
  * [sbr]: Use different tableID for every ipCfg        Move default table routes which  match the ipCfg config
  * Fix nil-pointer check
  * host-local: support custom IPs allocation through runtime configuration
  * pkg/ip: introduce a new type `IP` to support formated &lt;ip&gt;[/&lt;prefix&gt;]
  * go.mod: github.com/j-keck/arping v1.0.1
  * go.mod: github.com/buger/jsonparser v1.1.1
  * go.mod: github.com/alexflint/go-filemutex v1.1.0
  * go.mod github.com/Microsoft/hcsshim v0.8.16
  * go.mod: godbus/dbus/v5 v5.0.3, coreos/go-systemd v22.2.0
  * go.mod: github.com/mattn/go-shellwords v1.0.11
  * go.mod: github.com/sirupsen/logrus v1.8.1
  * CI: Install linux-modules-extra for VRF module
  * Fix broken links to online docs in plugin READMEs
  * gha: update actions/setup-go@v2
  * remove redundant startRange in RangeIter due to overlap check on multi ranges
  * fix(win-bridge): panic while calling HNS api
  * portmap: use slashes in sysctl template to support interface names which separated by dots
  * pkg/ipam: use slash as sysctl separator so interface name can have dot
  * [macvlan] Stop setting proxy-arp on macvlan interface
  * tuning: increase test coverage to 1.0.0 and older spec versions
  * portmap: increase test coverage to 1.0.0 and older spec versions
  * flannel: increase test coverage to 1.0.0 and older spec versions
  * firewall: increase test coverage to 1.0.0 and older spec versions
  * bandwidth: increase test coverage to 1.0.0 and older spec versions
  * host-local: increase test coverage to 1.0.0 and older spec versions
  * static: increase test coverage to 1.0.0 and older spec versions
  * dhcp: increase test coverage to 1.0.0 and older spec versions
  * dhcp: add -resendmax option to limit lease acquisition time for testcases
  * vlan: increase test coverage to 1.0.0 and older spec versions
  * ptp: increase test coverage to 1.0.0 and older spec versions
  * macvlan: increase test coverage to 1.0.0 and older spec versions
  * loopback: increase test coverage to 1.0.0 and older spec versions
  * ipvlan: increase test coverage to 1.0.0 and older spec versions
  * host-device: increase test coverage to 1.0.0 and older spec versions
  * bridge: increase test coverage to 1.0.0 and older spec versions
  * bridge: simplify version-based testcase code
  * testutils: add test utilities for spec version features
  * plugins: update to spec version 1.0.0
  * vendor: bump CNI to 1.0.0-pre @ 62e54113 (fixes bsc#1181961 aka CVE-2021-20206)
- Drop %go_nostrip</changelog>
</package>
<package pkgid="362af06b56866a41b96f9b5df68bce976fddc2c8303301f60eb5d550e00e1acf" name="cni-plugins" arch="x86_64">
  <version epoch="0" ver="1.1.1" rel="150500.3.2.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1503921600">- Initial version from CNI plugins v0.6.0</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1503921601">- Install docs in the cni-plugins dir</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Require cni</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1544616000">- Updated to a supported version of Go (due to security reasons)</changelog>
  <changelog author="sgrunert@suse.com" date="1548417600">- Updated plugins to v0.7.4:
  - Add host-device plugin, which simply moves a device from the
    host network namespace
  - Portmap now uses a more efficient rule structure
  - host-local can receive ranges as a RuntimeArgument
  - DHCP daemon can be containerized
  - DHCP now correctly parses routes
  - Various Windows build fixes
  - Waiting for DAD is skipped when possible
  - Bridge now uses a stable mac
  - Fix a regression where the interface's MAC address was no
    longer populated in the return type.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558353600">- Updated plugins to v0.8.0:
  + New plugins:
  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins
  + Plugin features / changelog:
  * CHECK Support
  * macvlan:
  - Allow to configure empty ipam for macvlan
  - Make master config optional
  * bridge:
  - Add vlan tag to the bridge cni plugin
  - Allow the user to assign VLAN tag
  - L2 bridge Implementation.
  * dhcp:
  - Include Subnet Mask option parameter in DHCPREQUEST
  - Add systemd unit file to activate socket with systemd
  - Add container ifName to the dhcp clientID, making the
    clientID value
  * flannel:
  - Pass through runtimeConfig to delegate
  * host-local:
  - host-local: add ifname to file tracking IP address used
  * host-device:
  - Support the IPAM in the host-device
  - Handle empty netns in DEL for loopback and host-device
  * tuning:
  - adds 'ip link' command related feature into tuning
  + Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip
  + Build fixes:
  * test: add coveralls support
  * plugins: correctly output build version, cosmetic cleanups
  * Move Windows tests to Travis
- from version v0.7.5:
  + This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules
  + This fixes a potential issue where firewall rules may
    be bypassed by port mapping
- Include patch to fix the build on i586:
  + 0001_use_Go_facilities_to_get_a_socket.patch
- Use new build_linux.sh script instead of removed build.sh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1559822400">- Updated plugins to v0.8.1:
  + Bugs:
  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface
  + Improvements:
  * Release: bump go to v1.12
  * host-device: add pciBusID property
- Drop patches merged upstream:
  + 0001_use_Go_facilities_to_get_a_socket.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1565956800">- Update plugins to v0.8.2
  + New features:
  * Support "args" in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable
  + Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to "cni0": file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is "invalid argument" not "file exists"
  * bump containernetworking/cni to v0.7.1</changelog>
  <changelog author="sgrunert@suse.com" date="1573473600">- Update to version 0.8.3:
  * Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).
  * Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).
  * Bugfixes:
  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).
  * Tests:
  * integration: fix ip address collision in integration tests (#409).
  * testutils: newNS() works in a rootless user namespace (#401).
  * Bump Go version (#386).
  * Cleanup netns after test suite (#375).
  * Docs:
  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to version 0.8.4 (bsc#1160460):
  * add support for mips64le
  * Add missing cniVersion in README example
  * bump go-iptables module to v0.4.5
  * iptables: add idempotent functions
  * portmap doesn't fail if chain doesn't exist
  * fix portmap port forward flakiness
  * Add Bruce Ma and Piotr Skarmuk as owners</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- Update to version 0.8.6 (bsc#1172410 CVE-2020-10749)
  * New features
  * Support device id in host device plugin (#471).
  * win-bridge: add support for portMappings capability (#475).
  * Make host-device to work with virtio net device (#453).
  * Small improvements
  * ptp, bridge: disable accept_ra on the host-side interface (#484).
  * modify the error url of windowscontainer (#460).
  * portmap: Apply the DNAT hairpin to the whole subnet (#469). The DNAT hairpin
    rule only allow the * container itself to access the ports it is exposing thru
    the host IP. Other containers in the same subnet might also want to access this
    service via the host IP, so apply this rule to the whole subnet instead of just
    for the container.
  * Unlock OS thread after netns is restored (#455).
  * Bugfixes
  * plugins/meta/sbr: Adjusted ipv6 address mask to /128 (#479). A /64 mask was used
    which routed an entire cidr based on source, not only the bound address.
  * check bridge's port state (#468). fix #463
  * Reset the route flag before moving the rule (#472).
  * replace juju/errors because of CNCF license scan (#458). ref to #457
  * loopback: Fix ipv6 address checks (#442). Fixes a minor bug in loopback plugin.
    The IPv6 address check loops over IPv4 addresses.
- from version 0.8.5
  * Bugfixes
  * bridge: Fix for the case where kernel doesn't have CONFIG_BRIDGE_VLAN_FILTERING
    (#434) fixes #370.
  * vlan: Fix vlan plugin returning error when device is already removed (#438).
  * Improvements
  * sysctl: Improve support of sysctl name separators (#437).</changelog>
  <changelog author="dmueller@suse.com" date="1598875200">- Update to version 0.8.7:
  * Fix race condition in GetCurrentNS
  * lo: CNI_IFNAME is no longer ignored
  * cni: bump to 0.8.0
  * Bump Go version to 1.13 and 1.14
  * Add contact info
  * Update firewall README.md CNI-ADMIN
  * firewall: fix some typos in docs
  * portmap DEL noop if no portMappings present
  * flannel: remove net conf file after DEL succeed</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 0.9.0:
  * tuning: revert values on delete (#540)
  * go mod tidy
  * bump to go 1.15
  * Add ability to trigger retests via comments
  * pkg/ns: fix test case to tolerate pids going away.
  * Add github build &amp; test actions
  * bridge: fix testcase to check addresses we care about
  * Remove travis.
  * vendor: bump ginkgo, gover
  * portmap plugin should flush previous udp connections
  * Updating plugin README.md files (#549)
  * update netlink dependencies
  * Xdhcp: fix example configuration
  * VRF: extend supported version to 0.3.1 too.
  * VRF CNI: Add an optional table parameter.
  * Add more tests for the vrf cni plugin.
  * Update github.com/vishvananda/netlink to v1.1.0
  * Introduce a new VRF CNI meta plugin.
  * Travis: run tests on arm64
  * Replace nc with the local echo client.
  * Add an echo client to be used instead of nc.
  * Bump up the ubuntu version used in CI to bionic.
  * flannel: allow input ipam parameters as basis for delegate
  * ipvlan: make master config as optional
  * Remove extraneous test file in Windows plugin</changelog>
  <changelog author="rpm@fthiessen.de" date="1619438400">- Update to version 0.9.1:
  * ipam/dhcp: Add broadcast flag
  * add flannel to support dual stack ip
  * bandwidth: fix panic in tests
  * host-device: Add support for DPDK device
  * [main/vlan] Fix error handling for delegate IPAM plugin
  * dhcp: default dhcp clien timeout is 10s
  * vlan: fix error message text by removing ptp references
  * dhcp: daemon dhcp client timeout is configurable
  * dhcp: timeout value is set in DHCP daemon
  * remove unused function
  * deps: go mod tidy coreos/go-iptables
  * deps: bump coreos/go-iptables</changelog>
  <changelog author="fvogt@suse.com" date="1648555200">- Update to version 1.1.1:
  * ipam/dhcp: Fix client id in renew/release
  * call ipam.ExceDel after clean up device in netns fix #666
  * portmap: fix checkPorts result when chain does not exist
  * portmap: fix bug that new udp connection deletes all existing conntrack entries
  * Enhanced dad set to 1
  * Add boolean to enable/disable dad
  * Disable DAD for container side veth
  * firewall: support ingressPolicy=(open|same-bridge) for isolating bridges as in Docker
  * Fix host-device gofmt
  * host-device: Bring interfaces up after moving into container
  * pkg/ns: use file system magic numbers from golang.org/x/sys/unix
  * gofmt
  * go mod tidy
  * build: bump to go 1.17
  * Remove arp notify setting per comment
  * plugins: replace arping package with arp_notify
  * fix #685
  * Ran go fmt so tests would pass
  * Fixed DHCP problem that broke when fast retry was added.
  * dhcp ipam: adjust retry mechanism
  * add ipam tests for dpdk device
  * add ipam support for dpdk device
  * ipvlan: Send Gratuitous ARP after IPs are set
  * dhcp ipam: fix client id
  * dhcp ipam: rename inconsistent options among files
  * dhcp ipam: add more options capable for sending
  * dhcp ipam: add fast retry
  * dhcp ipam: support customizing dhcp options
  * dhcp ipam: truncate client id to 254 bytes
  * dhcp ipam: print error correctly without format string
  * dhcp ipam: using full config to regular the code
  * Allow setting sysctls on a particular interface
  * dhcp: remove implemented TODO
  * Don't redundantly filepath.Clean the output of filepath.Join
  * Use crypto/rand.Read, not crypto.Reader.Read
  * bridge: Add macspoofchk support
  * plugins: fix bug where support for CNI version 0.4.0 or 1.0.0 was dropped
  * vendor: bump to libcni v1.0.1
  * static ipam: do not parse the CIDR twice
  * static ipam: improve error msgs when provisioning invalid CIDR
  * bump go to 1.16, other misc fixes
  * vendor: bump all direct dependencies
  * vendor: bump to libcni v1.0
  * docs: Update the CI badge from Travis CI to GitHub Actions
  * bridge: Fix typo in error message for promiscuous mode
  * ip: place veth peer in host namspace directly
  * bridge: Add mac field to specify container iface mac
  * static ipam: decide wrong cidr error msg
  * static ipam: stop wrapping net.ParseCIDR errors
  * static ipam: show confusing error msg
  * utils, hwaddr: Remove unused package
  * ip, link_linux: Remove unused SetHWAddrByIP function
  * plugins: remove flannel
  * refactor(win-bridge): netconf
  * refactor(win-bridge): hcn api processing
  * refactor(win-bridge): hns api processing
  * chore(win-bridge): location related
  * chore(win-bridge): text related
  * Remove Bryan Boreham as maintainer
  * host-local: support ip/prefix in env args and CNI args
  * [sbr]: Use different tableID for every ipCfg        Check tableID not in use for every ipCfg
  * Small typo improves in README.md
  * Allow multiple routes to be added for the same prefix. Enables ECMP
  * Update to lastest vendor/github.com/vishvananda/netlink
  * tuning: always update MAC in CNI result
  * vendor: bump to libcni v1.0-rc1
  * tuning: Add support of altering the allmulticast flag
  * [sbr]: Use different tableID for every ipCfg        Move default table routes which  match the ipCfg config
  * Fix nil-pointer check
  * host-local: support custom IPs allocation through runtime configuration
  * pkg/ip: introduce a new type `IP` to support formated &lt;ip&gt;[/&lt;prefix&gt;]
  * go.mod: github.com/j-keck/arping v1.0.1
  * go.mod: github.com/buger/jsonparser v1.1.1
  * go.mod: github.com/alexflint/go-filemutex v1.1.0
  * go.mod github.com/Microsoft/hcsshim v0.8.16
  * go.mod: godbus/dbus/v5 v5.0.3, coreos/go-systemd v22.2.0
  * go.mod: github.com/mattn/go-shellwords v1.0.11
  * go.mod: github.com/sirupsen/logrus v1.8.1
  * CI: Install linux-modules-extra for VRF module
  * Fix broken links to online docs in plugin READMEs
  * gha: update actions/setup-go@v2
  * remove redundant startRange in RangeIter due to overlap check on multi ranges
  * fix(win-bridge): panic while calling HNS api
  * portmap: use slashes in sysctl template to support interface names which separated by dots
  * pkg/ipam: use slash as sysctl separator so interface name can have dot
  * [macvlan] Stop setting proxy-arp on macvlan interface
  * tuning: increase test coverage to 1.0.0 and older spec versions
  * portmap: increase test coverage to 1.0.0 and older spec versions
  * flannel: increase test coverage to 1.0.0 and older spec versions
  * firewall: increase test coverage to 1.0.0 and older spec versions
  * bandwidth: increase test coverage to 1.0.0 and older spec versions
  * host-local: increase test coverage to 1.0.0 and older spec versions
  * static: increase test coverage to 1.0.0 and older spec versions
  * dhcp: increase test coverage to 1.0.0 and older spec versions
  * dhcp: add -resendmax option to limit lease acquisition time for testcases
  * vlan: increase test coverage to 1.0.0 and older spec versions
  * ptp: increase test coverage to 1.0.0 and older spec versions
  * macvlan: increase test coverage to 1.0.0 and older spec versions
  * loopback: increase test coverage to 1.0.0 and older spec versions
  * ipvlan: increase test coverage to 1.0.0 and older spec versions
  * host-device: increase test coverage to 1.0.0 and older spec versions
  * bridge: increase test coverage to 1.0.0 and older spec versions
  * bridge: simplify version-based testcase code
  * testutils: add test utilities for spec version features
  * plugins: update to spec version 1.0.0
  * vendor: bump CNI to 1.0.0-pre @ 62e54113 (fixes bsc#1181961 aka CVE-2021-20206)
- Drop %go_nostrip</changelog>
</package>
<package pkgid="83e4fac4bb3809d91dc6cb71f1ca85febb9905109f547de86561ad5de9ca52c7" name="cockpit-wicked" arch="noarch">
  <version epoch="0" ver="5~git8.c06c55b" rel="150500.3.3.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1606219200">- Version 1.
- First public release.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1606996800">- Version 2:
  * Fix routes handling (gh#94).
  * Display those interfaces that are not managed by Wicked in a
    separate list (gh#95). As part of this enhancement, several
    visual improvements were introduced.
  * Just write the changes to the ifcfg-* files (gh#98).
  * Avoid calling too many external tools to get the list of
    ESSIDs (gh#91).
  * Adjust the label of the button that allows deleting an
    interface configuration (gh#102).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1610366400">- Version 3:
  * Properly remove the last route in /etc/sysconfig/network/routes
    (gh#110).
  * Improve detection of virtual interfaces (gh#113).
  * Usability improvements in the interfaces (gh#114, gh#115)
    and routes lists (gh#112).
  * Update dependencies to latest compatible versions (gh#116).
  * Added translations for Catalan, Japanese, Portuguese
    (Brazil and Portugal) and Spanish.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1614945600">- Version 4:
  * Properly detect whether the interface is up (gh#123 and
    bsc#1182189).
  * Clarify that the "Routing" tab is about user-defined routes (related
    to gh#122).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1627300800">- Version 4.1:
  * Fix a problem when detecting whether an interface is down and
    clean up the list of assigned addresses when they are released
    (gh#128, bsc#1182189 and bsc#1186736).
  * Update several dependencies to address security concerns
    (gh#127).
  * Add translations for German, Hindi and Sinhala (work in
    progress).
  * Update translations for Catalan, Czech, Italian, Japanese
    and Portuguese (Brazil).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1629374400">- Version 4.2:
  * Update a few dependencies to address security concerns
    (gh#132).
- Fix a packaging problem that caused cockpit-wicked to do not
  work at all (bsc#1189611).</changelog>
  <changelog author="kanderssen@suse.com" date="1648728000">- Version 4.3:
  * Update a few dependencies to address security concerns
    (gh#134).
  * Fix wicked wireless configuration parser (bsc#1196528).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1663934400">- Version 4.4:
  * Security: update a few dependencies to address security concerns (gh#136).
  * Packaging: add a conflict with cockpit-networkmanager (gh#135).
  * Update translations for Spanish.</changelog>
  <changelog author="miika.alikirri@suse.com" date="1692705600">- Version 5:
  * Update the build system to support new cockpit build system
  * Update React components to patternfly 5</changelog>
  <changelog author="miika.alikirri@suse.com" date="1694174400">- Remove the node_modules service workaround
  and node-module-duplicate-fix.patch</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1713528000">- Update to version 5~git8.c06c55b:
  * Fixed vulnerabilities reported by npm audit and
    updated minimum cockpit-devel version
    (CVE-2023-26364, bsc#1217325).
  * Update @css-tools to address a security issue (related to
    bsc#1217325) and replace/drop deprecated dependencies
    (gh#openSUSE/cockpit-wicked#143).</changelog>
</package>
<package pkgid="d4a3cafab7bd2f1793261f03764cc0a330a2b08000a742e0b7306d1cddb40492" name="cockpit-wicked" arch="src">
  <version epoch="0" ver="5~git8.c06c55b" rel="150500.3.3.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1606219200">- Version 1.
- First public release.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1606996800">- Version 2:
  * Fix routes handling (gh#94).
  * Display those interfaces that are not managed by Wicked in a
    separate list (gh#95). As part of this enhancement, several
    visual improvements were introduced.
  * Just write the changes to the ifcfg-* files (gh#98).
  * Avoid calling too many external tools to get the list of
    ESSIDs (gh#91).
  * Adjust the label of the button that allows deleting an
    interface configuration (gh#102).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1610366400">- Version 3:
  * Properly remove the last route in /etc/sysconfig/network/routes
    (gh#110).
  * Improve detection of virtual interfaces (gh#113).
  * Usability improvements in the interfaces (gh#114, gh#115)
    and routes lists (gh#112).
  * Update dependencies to latest compatible versions (gh#116).
  * Added translations for Catalan, Japanese, Portuguese
    (Brazil and Portugal) and Spanish.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1614945600">- Version 4:
  * Properly detect whether the interface is up (gh#123 and
    bsc#1182189).
  * Clarify that the "Routing" tab is about user-defined routes (related
    to gh#122).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1627300800">- Version 4.1:
  * Fix a problem when detecting whether an interface is down and
    clean up the list of assigned addresses when they are released
    (gh#128, bsc#1182189 and bsc#1186736).
  * Update several dependencies to address security concerns
    (gh#127).
  * Add translations for German, Hindi and Sinhala (work in
    progress).
  * Update translations for Catalan, Czech, Italian, Japanese
    and Portuguese (Brazil).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1629374400">- Version 4.2:
  * Update a few dependencies to address security concerns
    (gh#132).
- Fix a packaging problem that caused cockpit-wicked to do not
  work at all (bsc#1189611).</changelog>
  <changelog author="kanderssen@suse.com" date="1648728000">- Version 4.3:
  * Update a few dependencies to address security concerns
    (gh#134).
  * Fix wicked wireless configuration parser (bsc#1196528).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1663934400">- Version 4.4:
  * Security: update a few dependencies to address security concerns (gh#136).
  * Packaging: add a conflict with cockpit-networkmanager (gh#135).
  * Update translations for Spanish.</changelog>
  <changelog author="miika.alikirri@suse.com" date="1692705600">- Version 5:
  * Update the build system to support new cockpit build system
  * Update React components to patternfly 5</changelog>
  <changelog author="miika.alikirri@suse.com" date="1694174400">- Remove the node_modules service workaround
  and node-module-duplicate-fix.patch</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1713528000">- Update to version 5~git8.c06c55b:
  * Fixed vulnerabilities reported by npm audit and
    updated minimum cockpit-devel version
    (CVE-2023-26364, bsc#1217325).
  * Update @css-tools to address a security issue (related to
    bsc#1217325) and replace/drop deprecated dependencies
    (gh#openSUSE/cockpit-wicked#143).</changelog>
</package>
<package pkgid="559df2fbfa9744882be4caa7c4af8617237a66478039366ab5e0371b1a799c43" name="conmon" arch="aarch64">
  <version epoch="0" ver="2.1.10" rel="150500.9.9.1"/>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- New upstream release 2.1.7
  2.1.7:
  [#]## Bug Fixes
  Fix leaking symbolic links in the opt_socket_path directory
  cgroup: Stumble on if we can't set up oom handling (bsc#1208737)
  2.1.6:
  [#]## Bug Fixes
  * Fix OOM watcher for cgroupv2 `oom_kill` events
  [#]## Misc
  * Use --detach instead of -d
  * ctrl: drop fifo perms to 0660
- Remove merged patch:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch
- Bump go version to 1.19 (bsc#1209307)</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to version 2.1.8:
  * stdio: ignore EIO for terminals (bsc#1217773)
  * ensure console socket buffers are properly sized
  * conmon: drop return after pexit()
  * ctrl: make accept4 failures fatal
  * logging: avoid opening /dev/null for each write
  * oom: restore old OOM score
  * Use default umask 0022
  * cli: log parsing errors to stderr
  * Changes to build conmon for riscv64
  * Changes to build conmon for ppc64le
  * Fix close_other_fds on FreeBSD</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695902400">- go 1.19 EOL, swith to go &gt;= 1.20
  * [bsc#1215806]</changelog>
  <changelog author="dcermak@suse.com" date="1702641600">- New upstream release 2.1.9
  [#]## Bug fixes
  * fix some issues flagged by SAST scan
  * src: fix write after end of buffer
  * src: open all files with O_CLOEXEC
  * oom-score: restore oom score before running exit command
  [#]## Features
  * Forward more messages on the sd-notify socket
  * logging: -l passthrough accepts TTYs</changelog>
  <changelog author="dcermak@suse.com" date="1702900800">- Add fix-incorrect-free-in-conn_sock.patch
  This fixes a regression in 2.1.9
  (https://github.com/containers/conmon/issues/475 and
  https://github.com/containers/conmon/issues/477)</changelog>
  <changelog author="dcermak@suse.com" date="1702987200">- New upstream release 2.1.10
  Bug fixes:
  * Fix incorrect free in conn_sock (removes fix-incorrect-free-in-conn_sock.patch)
  * logging: Respect log-size-max immediately after open</changelog>
</package>
<package pkgid="26f6b544b43a4ac7fe41ec4a9b351b9ed72ff308e38df3fdba5d6bc29b41a1a9" name="conmon" arch="s390x">
  <version epoch="0" ver="2.1.10" rel="150500.9.9.1"/>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- New upstream release 2.1.7
  2.1.7:
  [#]## Bug Fixes
  Fix leaking symbolic links in the opt_socket_path directory
  cgroup: Stumble on if we can't set up oom handling (bsc#1208737)
  2.1.6:
  [#]## Bug Fixes
  * Fix OOM watcher for cgroupv2 `oom_kill` events
  [#]## Misc
  * Use --detach instead of -d
  * ctrl: drop fifo perms to 0660
- Remove merged patch:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch
- Bump go version to 1.19 (bsc#1209307)</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to version 2.1.8:
  * stdio: ignore EIO for terminals (bsc#1217773)
  * ensure console socket buffers are properly sized
  * conmon: drop return after pexit()
  * ctrl: make accept4 failures fatal
  * logging: avoid opening /dev/null for each write
  * oom: restore old OOM score
  * Use default umask 0022
  * cli: log parsing errors to stderr
  * Changes to build conmon for riscv64
  * Changes to build conmon for ppc64le
  * Fix close_other_fds on FreeBSD</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695902400">- go 1.19 EOL, swith to go &gt;= 1.20
  * [bsc#1215806]</changelog>
  <changelog author="dcermak@suse.com" date="1702641600">- New upstream release 2.1.9
  [#]## Bug fixes
  * fix some issues flagged by SAST scan
  * src: fix write after end of buffer
  * src: open all files with O_CLOEXEC
  * oom-score: restore oom score before running exit command
  [#]## Features
  * Forward more messages on the sd-notify socket
  * logging: -l passthrough accepts TTYs</changelog>
  <changelog author="dcermak@suse.com" date="1702900800">- Add fix-incorrect-free-in-conn_sock.patch
  This fixes a regression in 2.1.9
  (https://github.com/containers/conmon/issues/475 and
  https://github.com/containers/conmon/issues/477)</changelog>
  <changelog author="dcermak@suse.com" date="1702987200">- New upstream release 2.1.10
  Bug fixes:
  * Fix incorrect free in conn_sock (removes fix-incorrect-free-in-conn_sock.patch)
  * logging: Respect log-size-max immediately after open</changelog>
</package>
<package pkgid="972f694bf6cd2f797f07de1373bce5e31c4f3ef35d8ec4b4608943e8615e93bc" name="conmon" arch="src">
  <version epoch="0" ver="2.1.10" rel="150500.9.9.1"/>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- New upstream release 2.1.7
  2.1.7:
  [#]## Bug Fixes
  Fix leaking symbolic links in the opt_socket_path directory
  cgroup: Stumble on if we can't set up oom handling (bsc#1208737)
  2.1.6:
  [#]## Bug Fixes
  * Fix OOM watcher for cgroupv2 `oom_kill` events
  [#]## Misc
  * Use --detach instead of -d
  * ctrl: drop fifo perms to 0660
- Remove merged patch:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch
- Bump go version to 1.19 (bsc#1209307)</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to version 2.1.8:
  * stdio: ignore EIO for terminals (bsc#1217773)
  * ensure console socket buffers are properly sized
  * conmon: drop return after pexit()
  * ctrl: make accept4 failures fatal
  * logging: avoid opening /dev/null for each write
  * oom: restore old OOM score
  * Use default umask 0022
  * cli: log parsing errors to stderr
  * Changes to build conmon for riscv64
  * Changes to build conmon for ppc64le
  * Fix close_other_fds on FreeBSD</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695902400">- go 1.19 EOL, swith to go &gt;= 1.20
  * [bsc#1215806]</changelog>
  <changelog author="dcermak@suse.com" date="1702641600">- New upstream release 2.1.9
  [#]## Bug fixes
  * fix some issues flagged by SAST scan
  * src: fix write after end of buffer
  * src: open all files with O_CLOEXEC
  * oom-score: restore oom score before running exit command
  [#]## Features
  * Forward more messages on the sd-notify socket
  * logging: -l passthrough accepts TTYs</changelog>
  <changelog author="dcermak@suse.com" date="1702900800">- Add fix-incorrect-free-in-conn_sock.patch
  This fixes a regression in 2.1.9
  (https://github.com/containers/conmon/issues/475 and
  https://github.com/containers/conmon/issues/477)</changelog>
  <changelog author="dcermak@suse.com" date="1702987200">- New upstream release 2.1.10
  Bug fixes:
  * Fix incorrect free in conn_sock (removes fix-incorrect-free-in-conn_sock.patch)
  * logging: Respect log-size-max immediately after open</changelog>
</package>
<package pkgid="d98ed6e7595c12a34b99f367b8b3de6e38e00d46568da0ea8e05ca276fa4b3ec" name="conmon" arch="x86_64">
  <version epoch="0" ver="2.1.10" rel="150500.9.9.1"/>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- New upstream release 2.1.7
  2.1.7:
  [#]## Bug Fixes
  Fix leaking symbolic links in the opt_socket_path directory
  cgroup: Stumble on if we can't set up oom handling (bsc#1208737)
  2.1.6:
  [#]## Bug Fixes
  * Fix OOM watcher for cgroupv2 `oom_kill` events
  [#]## Misc
  * Use --detach instead of -d
  * ctrl: drop fifo perms to 0660
- Remove merged patch:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch
- Bump go version to 1.19 (bsc#1209307)</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to version 2.1.8:
  * stdio: ignore EIO for terminals (bsc#1217773)
  * ensure console socket buffers are properly sized
  * conmon: drop return after pexit()
  * ctrl: make accept4 failures fatal
  * logging: avoid opening /dev/null for each write
  * oom: restore old OOM score
  * Use default umask 0022
  * cli: log parsing errors to stderr
  * Changes to build conmon for riscv64
  * Changes to build conmon for ppc64le
  * Fix close_other_fds on FreeBSD</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695902400">- go 1.19 EOL, swith to go &gt;= 1.20
  * [bsc#1215806]</changelog>
  <changelog author="dcermak@suse.com" date="1702641600">- New upstream release 2.1.9
  [#]## Bug fixes
  * fix some issues flagged by SAST scan
  * src: fix write after end of buffer
  * src: open all files with O_CLOEXEC
  * oom-score: restore oom score before running exit command
  [#]## Features
  * Forward more messages on the sd-notify socket
  * logging: -l passthrough accepts TTYs</changelog>
  <changelog author="dcermak@suse.com" date="1702900800">- Add fix-incorrect-free-in-conn_sock.patch
  This fixes a regression in 2.1.9
  (https://github.com/containers/conmon/issues/475 and
  https://github.com/containers/conmon/issues/477)</changelog>
  <changelog author="dcermak@suse.com" date="1702987200">- New upstream release 2.1.10
  Bug fixes:
  * Fix incorrect free in conn_sock (removes fix-incorrect-free-in-conn_sock.patch)
  * logging: Respect log-size-max immediately after open</changelog>
</package>
<package pkgid="b1d0a2e65e670e7570f4412c572a5d691c6468975765d4190311a80f5d314f4c" name="conmon" arch="aarch64">
  <version epoch="0" ver="2.1.7" rel="150500.9.6.1"/>
  <changelog author="rhafer@suse.com" date="1584446400">- Update to v2.0.12
  - oom: fix potential race between verification steps</changelog>
  <changelog author="sgrunert@suse.com" date="1585137600">- Update to v2.0.14
  - drop usage of splice(2)
  - avoid hanging on stdin
  - stdio: sometimes quit main loop after io is done
  - ignore sigpipe</changelog>
  <changelog author="sgrunert@suse.com" date="1585915200">- Update to v2.0.15
  - store status while waiting for pid</changelog>
  <changelog author="rhafer@suse.com" date="1585915201">- Enable support for journald logging (bsc#1162432)</changelog>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- New upstream release 2.1.7
  2.1.7:
  [#]## Bug Fixes
  Fix leaking symbolic links in the opt_socket_path directory
  cgroup: Stumble on if we can't set up oom handling (bsc#1208737)
  2.1.6:
  [#]## Bug Fixes
  * Fix OOM watcher for cgroupv2 `oom_kill` events
  [#]## Misc
  * Use --detach instead of -d
  * ctrl: drop fifo perms to 0660
- Remove merged patch:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch
- Bump go version to 1.19 (bsc#1209307)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695988800">- go 1.19 EOL, swith to go &gt;= 1.20
  * [bsc#1215806]</changelog>
</package>
<package pkgid="e4904bfec1ccc1e418a87353eafd4b557cd9f3dd1594bddf8674cada86adec2a" name="conmon" arch="s390x">
  <version epoch="0" ver="2.1.7" rel="150500.9.6.1"/>
  <changelog author="rhafer@suse.com" date="1584446400">- Update to v2.0.12
  - oom: fix potential race between verification steps</changelog>
  <changelog author="sgrunert@suse.com" date="1585137600">- Update to v2.0.14
  - drop usage of splice(2)
  - avoid hanging on stdin
  - stdio: sometimes quit main loop after io is done
  - ignore sigpipe</changelog>
  <changelog author="sgrunert@suse.com" date="1585915200">- Update to v2.0.15
  - store status while waiting for pid</changelog>
  <changelog author="rhafer@suse.com" date="1585915201">- Enable support for journald logging (bsc#1162432)</changelog>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- New upstream release 2.1.7
  2.1.7:
  [#]## Bug Fixes
  Fix leaking symbolic links in the opt_socket_path directory
  cgroup: Stumble on if we can't set up oom handling (bsc#1208737)
  2.1.6:
  [#]## Bug Fixes
  * Fix OOM watcher for cgroupv2 `oom_kill` events
  [#]## Misc
  * Use --detach instead of -d
  * ctrl: drop fifo perms to 0660
- Remove merged patch:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch
- Bump go version to 1.19 (bsc#1209307)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695988800">- go 1.19 EOL, swith to go &gt;= 1.20
  * [bsc#1215806]</changelog>
</package>
<package pkgid="c75ed0fb0246f249b4561ba1c1eadc0a1f7e4a4fabdcb48bb014201520c31ceb" name="conmon" arch="src">
  <version epoch="0" ver="2.1.7" rel="150500.9.6.1"/>
  <changelog author="rhafer@suse.com" date="1584446400">- Update to v2.0.12
  - oom: fix potential race between verification steps</changelog>
  <changelog author="sgrunert@suse.com" date="1585137600">- Update to v2.0.14
  - drop usage of splice(2)
  - avoid hanging on stdin
  - stdio: sometimes quit main loop after io is done
  - ignore sigpipe</changelog>
  <changelog author="sgrunert@suse.com" date="1585915200">- Update to v2.0.15
  - store status while waiting for pid</changelog>
  <changelog author="rhafer@suse.com" date="1585915201">- Enable support for journald logging (bsc#1162432)</changelog>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- New upstream release 2.1.7
  2.1.7:
  [#]## Bug Fixes
  Fix leaking symbolic links in the opt_socket_path directory
  cgroup: Stumble on if we can't set up oom handling (bsc#1208737)
  2.1.6:
  [#]## Bug Fixes
  * Fix OOM watcher for cgroupv2 `oom_kill` events
  [#]## Misc
  * Use --detach instead of -d
  * ctrl: drop fifo perms to 0660
- Remove merged patch:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch
- Bump go version to 1.19 (bsc#1209307)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695988800">- go 1.19 EOL, swith to go &gt;= 1.20
  * [bsc#1215806]</changelog>
</package>
<package pkgid="107fcc01882b51bc2c6d991bda1ebcc901f6e927be114c648fcfd52d1135733e" name="conmon" arch="x86_64">
  <version epoch="0" ver="2.1.7" rel="150500.9.6.1"/>
  <changelog author="rhafer@suse.com" date="1584446400">- Update to v2.0.12
  - oom: fix potential race between verification steps</changelog>
  <changelog author="sgrunert@suse.com" date="1585137600">- Update to v2.0.14
  - drop usage of splice(2)
  - avoid hanging on stdin
  - stdio: sometimes quit main loop after io is done
  - ignore sigpipe</changelog>
  <changelog author="sgrunert@suse.com" date="1585915200">- Update to v2.0.15
  - store status while waiting for pid</changelog>
  <changelog author="rhafer@suse.com" date="1585915201">- Enable support for journald logging (bsc#1162432)</changelog>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- New upstream release 2.1.7
  2.1.7:
  [#]## Bug Fixes
  Fix leaking symbolic links in the opt_socket_path directory
  cgroup: Stumble on if we can't set up oom handling (bsc#1208737)
  2.1.6:
  [#]## Bug Fixes
  * Fix OOM watcher for cgroupv2 `oom_kill` events
  [#]## Misc
  * Use --detach instead of -d
  * ctrl: drop fifo perms to 0660
- Remove merged patch:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch
- Bump go version to 1.19 (bsc#1209307)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695988800">- go 1.19 EOL, swith to go &gt;= 1.20
  * [bsc#1215806]</changelog>
</package>
<package pkgid="3d34fddfb473ddb67160aa03678588ea7e580184e4a917b7c579bb19bc937146" name="container-selinux" arch="noarch">
  <version epoch="0" ver="2.188.0" rel="150500.3.3.2"/>
  <changelog author="kukuk@suse.com" date="1596628800">- Initial version</changelog>
  <changelog author="kukuk@suse.com" date="1597060800">- Update to version 2.143.0
  - support containerd/cri</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Minimize BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1602676800">- Update to version 2.145.0
  - Add support for kubernetes_file_t
  - Allow container_t to open existing tun/tap</changelog>
  <changelog author="kukuk@suse.com" date="1603972800">- Update to version 2.150.0
  - Add additional allow rules for kvm based containers using
    virtiofsd.</changelog>
  <changelog author="lnussel@suse.de" date="1604404800">- Don't use BuildRequires based on shell script output. OBS can't
  evaluate that.</changelog>
  <changelog author="kukuk@suse.com" date="1610366400">- Update to version 2.154.0
  - Allow confined user domains to run confined container domains.
  - Allow all containers to use nfs shares, iff virt_use_nfs boolean
    is enabled.
  - Allow containers to read nsfs file systems.
  - KVM Container need to use tunnel sockets created by runtime.</changelog>
  <changelog author="kukuk@suse.com" date="1614081600">- Update to version 2.158.0
  - Add nfs remount support
  - Allow containers to execmod on nfs, samba and cephs remote shares
  - Allow confined users to send dbus messages to container_runtime</changelog>
  <changelog author="jsegitz@suse.com" date="1619179200">- Fix container runtime binary labels (bsc#1185030). You need to
  relable at least /usr/sbin if you're affected</changelog>
  <changelog author="jsegitz@suse.com" date="1628510400">- Update to version 2.164.2
  * Don't setup users for writing to pid_sockets
  * Allow container engines to be started from the staff user.
  * Allow spc_t domains to set bpf rules on any domain
  * Add support for k3s</changelog>
  <changelog author="rbrown@suse.com" date="1636718400">- Update to version 2.171.0
  * Define kubernetes_file_t as a config_type
  * Allow containers to be socket activated by user domains and by systemd.
  * Allow iptables to use fifo files of a container runtime
  * Allow container_runtime create all tmpfs content as container_runtime_tmpfs_t
  * Allow containers to create lnk_file on tmpfs_t directories.</changelog>
  <changelog author="jsegitz@suse.com" date="1647604800">- Update to version 2.180.0
  * Allow container domains to read/write kvm_device_t
  * Update kublet mappings to inlcude /usr/local/*
  * Allow container domains to use container runtime tcp and udp sockets
  * Alow containers to use unix_stream_sockets leaked from container runtimes
  * Allow userdomains to execute conmon_exec_t and use it as an entrypoint
  * Allow conmon_exec_t as an entrypoint
  * Add container_use_devices boolean to allow containers to use any device
  * Add explicit range transition for conmon
  * Add missing dbus class declaration into container_runtime_run()
  * Remove lockdown allow rules
  * Remove k3s fcontexts
  * Allow container domains to be used by user roles
- Changed source url to allow for download via source service</changelog>
  <changelog author="jsegitz@suse.com" date="1647950400">- Add udica templates to the package</changelog>
  <changelog author="fcrozat@suse.com" date="1655899200">- Update to version 2.187.0:
  * Allow container domains to use /dev/zero
- Changes from 2.186.0:
  * Create policy for a container_device_t
  * Allow containers to shutdown &amp; setopt userdomain:sockets
- Changes from 2.183.0:
  * Allow containers to inherit all socket classes from container runtimes.
- Changes from 2.182.0:
  * Allow containers to inherit all socket classes
- Changes from 2.181.0:
  * Allow socket activated domains for tcp sockets from init_t and userdomains.</changelog>
  <changelog author="jsegitz@suse.com" date="1657800000">- Update to version 2.188.0:
  * Allow confined containers to mount overlay filesystems
  Fixed bsc#1201348</changelog>
  <changelog author="cathy.hu@suse.com" date="1721390400">- Allow iptables_t list directory permissions of container_file_t (bsc#1227442)
  - added 1227442-allow-iptables_t-list_dir_perms-container_file_t.patch</changelog>
</package>
<package pkgid="150f3ee868753cbb8ab4e73cdbc72da2c8a722366bc121e92fb45e7767e527d5" name="container-selinux" arch="src">
  <version epoch="0" ver="2.188.0" rel="150500.3.3.2"/>
  <changelog author="kukuk@suse.com" date="1596628800">- Initial version</changelog>
  <changelog author="kukuk@suse.com" date="1597060800">- Update to version 2.143.0
  - support containerd/cri</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Minimize BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1602676800">- Update to version 2.145.0
  - Add support for kubernetes_file_t
  - Allow container_t to open existing tun/tap</changelog>
  <changelog author="kukuk@suse.com" date="1603972800">- Update to version 2.150.0
  - Add additional allow rules for kvm based containers using
    virtiofsd.</changelog>
  <changelog author="lnussel@suse.de" date="1604404800">- Don't use BuildRequires based on shell script output. OBS can't
  evaluate that.</changelog>
  <changelog author="kukuk@suse.com" date="1610366400">- Update to version 2.154.0
  - Allow confined user domains to run confined container domains.
  - Allow all containers to use nfs shares, iff virt_use_nfs boolean
    is enabled.
  - Allow containers to read nsfs file systems.
  - KVM Container need to use tunnel sockets created by runtime.</changelog>
  <changelog author="kukuk@suse.com" date="1614081600">- Update to version 2.158.0
  - Add nfs remount support
  - Allow containers to execmod on nfs, samba and cephs remote shares
  - Allow confined users to send dbus messages to container_runtime</changelog>
  <changelog author="jsegitz@suse.com" date="1619179200">- Fix container runtime binary labels (bsc#1185030). You need to
  relable at least /usr/sbin if you're affected</changelog>
  <changelog author="jsegitz@suse.com" date="1628510400">- Update to version 2.164.2
  * Don't setup users for writing to pid_sockets
  * Allow container engines to be started from the staff user.
  * Allow spc_t domains to set bpf rules on any domain
  * Add support for k3s</changelog>
  <changelog author="rbrown@suse.com" date="1636718400">- Update to version 2.171.0
  * Define kubernetes_file_t as a config_type
  * Allow containers to be socket activated by user domains and by systemd.
  * Allow iptables to use fifo files of a container runtime
  * Allow container_runtime create all tmpfs content as container_runtime_tmpfs_t
  * Allow containers to create lnk_file on tmpfs_t directories.</changelog>
  <changelog author="jsegitz@suse.com" date="1647604800">- Update to version 2.180.0
  * Allow container domains to read/write kvm_device_t
  * Update kublet mappings to inlcude /usr/local/*
  * Allow container domains to use container runtime tcp and udp sockets
  * Alow containers to use unix_stream_sockets leaked from container runtimes
  * Allow userdomains to execute conmon_exec_t and use it as an entrypoint
  * Allow conmon_exec_t as an entrypoint
  * Add container_use_devices boolean to allow containers to use any device
  * Add explicit range transition for conmon
  * Add missing dbus class declaration into container_runtime_run()
  * Remove lockdown allow rules
  * Remove k3s fcontexts
  * Allow container domains to be used by user roles
- Changed source url to allow for download via source service</changelog>
  <changelog author="jsegitz@suse.com" date="1647950400">- Add udica templates to the package</changelog>
  <changelog author="fcrozat@suse.com" date="1655899200">- Update to version 2.187.0:
  * Allow container domains to use /dev/zero
- Changes from 2.186.0:
  * Create policy for a container_device_t
  * Allow containers to shutdown &amp; setopt userdomain:sockets
- Changes from 2.183.0:
  * Allow containers to inherit all socket classes from container runtimes.
- Changes from 2.182.0:
  * Allow containers to inherit all socket classes
- Changes from 2.181.0:
  * Allow socket activated domains for tcp sockets from init_t and userdomains.</changelog>
  <changelog author="jsegitz@suse.com" date="1657800000">- Update to version 2.188.0:
  * Allow confined containers to mount overlay filesystems
  Fixed bsc#1201348</changelog>
  <changelog author="cathy.hu@suse.com" date="1721390400">- Allow iptables_t list directory permissions of container_file_t (bsc#1227442)
  - added 1227442-allow-iptables_t-list_dir_perms-container_file_t.patch</changelog>
</package>
<package pkgid="5cb10dc3a213814033157f1d7bdbc9b116e394263960fb46f6f4e46a88b83727" name="containerd" arch="aarch64">
  <version epoch="0" ver="1.6.21" rel="150000.95.1"/>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
</package>
<package pkgid="b4f43097ef410ee2472268c24968541bbb92248d808ee39263f1ef4702b95394" name="containerd" arch="s390x">
  <version epoch="0" ver="1.6.21" rel="150000.95.1"/>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
</package>
<package pkgid="d10f7882fabfaa38f2a6c5df86010654ee63a1df05695d6a5ac43a8185259b1e" name="containerd" arch="src">
  <version epoch="0" ver="1.6.21" rel="150000.95.1"/>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
</package>
<package pkgid="b158ed1e4273459c38b77f51bdd534c5b59012a21efe9dccf0dd9f7689eea138" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.6.21" rel="150000.95.1"/>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
</package>
<package pkgid="0b702e954cdfb560ebdabd455443729dc9cf84f6652086b97a44dfe90882e440" name="containerd" arch="aarch64">
  <version epoch="0" ver="1.7.10" rel="150000.106.1"/>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt; bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
</package>
<package pkgid="508d8c987569955feae56c13a76de0d33581ad67d034ab6a832fcb4b15d251bb" name="containerd" arch="s390x">
  <version epoch="0" ver="1.7.10" rel="150000.106.1"/>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt; bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
</package>
<package pkgid="6c0ed88a1a813e0d0e63ff7e2731563ddafd1e44bf729f947bfe7c43037b5710" name="containerd" arch="src">
  <version epoch="0" ver="1.7.10" rel="150000.106.1"/>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt; bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
</package>
<package pkgid="ffe4d877cb43b009ccabc59cdcc58e5a58891c876fd65c63b8de49c95186d9b7" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.7.10" rel="150000.106.1"/>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt; bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
</package>
<package pkgid="7ba3bc79ca41db0064e969b85784dffa090825d3de29ca90252179feee12117d" name="containerd" arch="aarch64">
  <version epoch="0" ver="1.7.10" rel="150000.108.1"/>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt; bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
</package>
<package pkgid="ea185697338182ed5d27783f1868f2ee90b7062081a183b231c1d5a0aafcdad9" name="containerd" arch="s390x">
  <version epoch="0" ver="1.7.10" rel="150000.108.1"/>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt; bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
</package>
<package pkgid="4e1457d501af143894ba536929d8341fcb9421de91cbca20e5caa8b5899a0675" name="containerd" arch="src">
  <version epoch="0" ver="1.7.10" rel="150000.108.1"/>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt; bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
</package>
<package pkgid="69794ea7566312d0b8829d0a400805d78e9b30601582325303e9856029279d03" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.7.10" rel="150000.108.1"/>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt; bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
</package>
<package pkgid="a84a176799b0950900816901c0d84544b82fea79d484ac1f0d1a67b6d6cf6f67" name="containerd" arch="aarch64">
  <version epoch="0" ver="1.7.17" rel="150000.111.3"/>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt; bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
  <changelog author="dcermak@suse.com" date="1705320000">- Enable manpage generation
- Make devel package noarch
- adjust rpmlint filters</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="eyadlorenzo@gmail.com" date="1713700800">- Use obs_scm service instead of tar_scm
- Removed patch 0002-shim-Create-pid-file-with-0644-permissions.patch
  (merged upstream at
  &lt;https://github.com/containerd/containerd/pull/9571&gt;)
- Update to containerd v1.7.15. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.15&gt;
- Update to containerd v1.7.14. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.14&gt;
- Update to containerd v1.7.13. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.13&gt;
- Update to containerd v1.7.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.12&gt;
- Update to containerd v1.7.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.11&gt;
  GHSA-jq35-85cj-fj4p bsc#1224323</changelog>
  <changelog author="asarai@suse.com" date="1716379200">- Update to containerd v1.7.17. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.17&gt;
- Switch back to using tar_scm service. Aside from obs_scm using more bandwidth
  and storage than a locally-compressed tar.xz, it seems there's some weird
  issue with paths in obscpio that break our SLE-12-only patch.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch
- Update to containerd v1.7.16. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.16&gt;
  CVE-2023-45288 bsc#1221400</changelog>
</package>
<package pkgid="ebbc04a4ef6a808e87408e2bc31c3ad6db639e61972609e718003a024c8a32d9" name="containerd" arch="s390x">
  <version epoch="0" ver="1.7.17" rel="150000.111.3"/>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt; bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
  <changelog author="dcermak@suse.com" date="1705320000">- Enable manpage generation
- Make devel package noarch
- adjust rpmlint filters</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="eyadlorenzo@gmail.com" date="1713700800">- Use obs_scm service instead of tar_scm
- Removed patch 0002-shim-Create-pid-file-with-0644-permissions.patch
  (merged upstream at
  &lt;https://github.com/containerd/containerd/pull/9571&gt;)
- Update to containerd v1.7.15. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.15&gt;
- Update to containerd v1.7.14. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.14&gt;
- Update to containerd v1.7.13. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.13&gt;
- Update to containerd v1.7.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.12&gt;
- Update to containerd v1.7.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.11&gt;
  GHSA-jq35-85cj-fj4p bsc#1224323</changelog>
  <changelog author="asarai@suse.com" date="1716379200">- Update to containerd v1.7.17. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.17&gt;
- Switch back to using tar_scm service. Aside from obs_scm using more bandwidth
  and storage than a locally-compressed tar.xz, it seems there's some weird
  issue with paths in obscpio that break our SLE-12-only patch.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch
- Update to containerd v1.7.16. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.16&gt;
  CVE-2023-45288 bsc#1221400</changelog>
</package>
<package pkgid="439a1bf8606e0d62e2af6c2a21fdbadf1aef19a1f5a3229625115f51fba422ab" name="containerd" arch="src">
  <version epoch="0" ver="1.7.17" rel="150000.111.3"/>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt; bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
  <changelog author="dcermak@suse.com" date="1705320000">- Enable manpage generation
- Make devel package noarch
- adjust rpmlint filters</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="eyadlorenzo@gmail.com" date="1713700800">- Use obs_scm service instead of tar_scm
- Removed patch 0002-shim-Create-pid-file-with-0644-permissions.patch
  (merged upstream at
  &lt;https://github.com/containerd/containerd/pull/9571&gt;)
- Update to containerd v1.7.15. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.15&gt;
- Update to containerd v1.7.14. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.14&gt;
- Update to containerd v1.7.13. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.13&gt;
- Update to containerd v1.7.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.12&gt;
- Update to containerd v1.7.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.11&gt;
  GHSA-jq35-85cj-fj4p bsc#1224323</changelog>
  <changelog author="asarai@suse.com" date="1716379200">- Update to containerd v1.7.17. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.17&gt;
- Switch back to using tar_scm service. Aside from obs_scm using more bandwidth
  and storage than a locally-compressed tar.xz, it seems there's some weird
  issue with paths in obscpio that break our SLE-12-only patch.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch
- Update to containerd v1.7.16. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.16&gt;
  CVE-2023-45288 bsc#1221400</changelog>
</package>
<package pkgid="64adbd9395d3373ebb983aaa8ca93af8287bf2e63c96f13a1af3dffa396942dc" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.7.17" rel="150000.111.3"/>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt; bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
  <changelog author="dcermak@suse.com" date="1705320000">- Enable manpage generation
- Make devel package noarch
- adjust rpmlint filters</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="eyadlorenzo@gmail.com" date="1713700800">- Use obs_scm service instead of tar_scm
- Removed patch 0002-shim-Create-pid-file-with-0644-permissions.patch
  (merged upstream at
  &lt;https://github.com/containerd/containerd/pull/9571&gt;)
- Update to containerd v1.7.15. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.15&gt;
- Update to containerd v1.7.14. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.14&gt;
- Update to containerd v1.7.13. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.13&gt;
- Update to containerd v1.7.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.12&gt;
- Update to containerd v1.7.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.11&gt;
  GHSA-jq35-85cj-fj4p bsc#1224323</changelog>
  <changelog author="asarai@suse.com" date="1716379200">- Update to containerd v1.7.17. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.17&gt;
- Switch back to using tar_scm service. Aside from obs_scm using more bandwidth
  and storage than a locally-compressed tar.xz, it seems there's some weird
  issue with paths in obscpio that break our SLE-12-only patch.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch
- Update to containerd v1.7.16. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.16&gt;
  CVE-2023-45288 bsc#1221400</changelog>
</package>
<package pkgid="b484950d41c414cb3dafd9ac44fd7b8b97235247885573b12e8723eaf846153d" name="containerd" arch="aarch64">
  <version epoch="0" ver="1.7.17" rel="150000.114.1"/>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt; bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
  <changelog author="dcermak@suse.com" date="1705320000">- Enable manpage generation
- Make devel package noarch
- adjust rpmlint filters</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="eyadlorenzo@gmail.com" date="1713700800">- Use obs_scm service instead of tar_scm
- Removed patch 0002-shim-Create-pid-file-with-0644-permissions.patch
  (merged upstream at
  &lt;https://github.com/containerd/containerd/pull/9571&gt;)
- Update to containerd v1.7.15. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.15&gt;
- Update to containerd v1.7.14. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.14&gt;
- Update to containerd v1.7.13. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.13&gt;
- Update to containerd v1.7.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.12&gt;
- Update to containerd v1.7.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.11&gt;
  GHSA-jq35-85cj-fj4p bsc#1224323</changelog>
  <changelog author="asarai@suse.com" date="1716379200">- Update to containerd v1.7.17. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.17&gt;
- Switch back to using tar_scm service. Aside from obs_scm using more bandwidth
  and storage than a locally-compressed tar.xz, it seems there's some weird
  issue with paths in obscpio that break our SLE-12-only patch.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch
- Update to containerd v1.7.16. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.16&gt;
  CVE-2023-45288 bsc#1221400</changelog>
  <changelog author="dcermak@suse.com" date="1719230400">- Revert noarch for devel subpackage
  Switching to noarch causes issues on SLES maintenance updates, reverting it
  fixes our image builds</changelog>
</package>
<package pkgid="9d3e3ad597e82320ea39dc2ef1d3a390fef4c8085624f7561c4ee3ca7bbd5c6d" name="containerd" arch="s390x">
  <version epoch="0" ver="1.7.17" rel="150000.114.1"/>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt; bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
  <changelog author="dcermak@suse.com" date="1705320000">- Enable manpage generation
- Make devel package noarch
- adjust rpmlint filters</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="eyadlorenzo@gmail.com" date="1713700800">- Use obs_scm service instead of tar_scm
- Removed patch 0002-shim-Create-pid-file-with-0644-permissions.patch
  (merged upstream at
  &lt;https://github.com/containerd/containerd/pull/9571&gt;)
- Update to containerd v1.7.15. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.15&gt;
- Update to containerd v1.7.14. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.14&gt;
- Update to containerd v1.7.13. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.13&gt;
- Update to containerd v1.7.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.12&gt;
- Update to containerd v1.7.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.11&gt;
  GHSA-jq35-85cj-fj4p bsc#1224323</changelog>
  <changelog author="asarai@suse.com" date="1716379200">- Update to containerd v1.7.17. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.17&gt;
- Switch back to using tar_scm service. Aside from obs_scm using more bandwidth
  and storage than a locally-compressed tar.xz, it seems there's some weird
  issue with paths in obscpio that break our SLE-12-only patch.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch
- Update to containerd v1.7.16. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.16&gt;
  CVE-2023-45288 bsc#1221400</changelog>
  <changelog author="dcermak@suse.com" date="1719230400">- Revert noarch for devel subpackage
  Switching to noarch causes issues on SLES maintenance updates, reverting it
  fixes our image builds</changelog>
</package>
<package pkgid="e8d8069e9d9c8c34cf8e81ecce2f44512dbf3d084f785ca3eb3d72d38ba6a817" name="containerd" arch="src">
  <version epoch="0" ver="1.7.17" rel="150000.114.1"/>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt; bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
  <changelog author="dcermak@suse.com" date="1705320000">- Enable manpage generation
- Make devel package noarch
- adjust rpmlint filters</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="eyadlorenzo@gmail.com" date="1713700800">- Use obs_scm service instead of tar_scm
- Removed patch 0002-shim-Create-pid-file-with-0644-permissions.patch
  (merged upstream at
  &lt;https://github.com/containerd/containerd/pull/9571&gt;)
- Update to containerd v1.7.15. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.15&gt;
- Update to containerd v1.7.14. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.14&gt;
- Update to containerd v1.7.13. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.13&gt;
- Update to containerd v1.7.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.12&gt;
- Update to containerd v1.7.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.11&gt;
  GHSA-jq35-85cj-fj4p bsc#1224323</changelog>
  <changelog author="asarai@suse.com" date="1716379200">- Update to containerd v1.7.17. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.17&gt;
- Switch back to using tar_scm service. Aside from obs_scm using more bandwidth
  and storage than a locally-compressed tar.xz, it seems there's some weird
  issue with paths in obscpio that break our SLE-12-only patch.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch
- Update to containerd v1.7.16. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.16&gt;
  CVE-2023-45288 bsc#1221400</changelog>
  <changelog author="dcermak@suse.com" date="1719230400">- Revert noarch for devel subpackage
  Switching to noarch causes issues on SLES maintenance updates, reverting it
  fixes our image builds</changelog>
</package>
<package pkgid="ab475be7032936624df606af6748124192243f427cec3088f247f10449d899c3" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.7.17" rel="150000.114.1"/>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt; bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
  <changelog author="dcermak@suse.com" date="1705320000">- Enable manpage generation
- Make devel package noarch
- adjust rpmlint filters</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="eyadlorenzo@gmail.com" date="1713700800">- Use obs_scm service instead of tar_scm
- Removed patch 0002-shim-Create-pid-file-with-0644-permissions.patch
  (merged upstream at
  &lt;https://github.com/containerd/containerd/pull/9571&gt;)
- Update to containerd v1.7.15. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.15&gt;
- Update to containerd v1.7.14. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.14&gt;
- Update to containerd v1.7.13. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.13&gt;
- Update to containerd v1.7.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.12&gt;
- Update to containerd v1.7.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.11&gt;
  GHSA-jq35-85cj-fj4p bsc#1224323</changelog>
  <changelog author="asarai@suse.com" date="1716379200">- Update to containerd v1.7.17. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.17&gt;
- Switch back to using tar_scm service. Aside from obs_scm using more bandwidth
  and storage than a locally-compressed tar.xz, it seems there's some weird
  issue with paths in obscpio that break our SLE-12-only patch.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch
- Update to containerd v1.7.16. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.16&gt;
  CVE-2023-45288 bsc#1221400</changelog>
  <changelog author="dcermak@suse.com" date="1719230400">- Revert noarch for devel subpackage
  Switching to noarch causes issues on SLES maintenance updates, reverting it
  fixes our image builds</changelog>
</package>
<package pkgid="7b79ff08e48ff9c6af252b4df349bc4d78202ef892b77e38b1219e933c90502a" name="containerd" arch="aarch64">
  <version epoch="0" ver="1.7.21" rel="150000.117.1"/>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt;
  Includes fixes for:
  - CVE-2022-1996 bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
  <changelog author="dcermak@suse.com" date="1705320000">- Enable manpage generation
- Make devel package noarch
- adjust rpmlint filters</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="eyadlorenzo@gmail.com" date="1713700800">- Use obs_scm service instead of tar_scm
- Removed patch 0002-shim-Create-pid-file-with-0644-permissions.patch
  (merged upstream at
  &lt;https://github.com/containerd/containerd/pull/9571&gt;)
- Update to containerd v1.7.15. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.15&gt;
- Update to containerd v1.7.14. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.14&gt;
- Update to containerd v1.7.13. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.13&gt;
- Update to containerd v1.7.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.12&gt;
- Update to containerd v1.7.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.11&gt;
  GHSA-jq35-85cj-fj4p bsc#1224323</changelog>
  <changelog author="asarai@suse.com" date="1716379200">- Update to containerd v1.7.17. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.17&gt;
- Switch back to using tar_scm service. Aside from obs_scm using more bandwidth
  and storage than a locally-compressed tar.xz, it seems there's some weird
  issue with paths in obscpio that break our SLE-12-only patch.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch
- Update to containerd v1.7.16. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.16&gt;
  CVE-2023-45288 bsc#1221400</changelog>
  <changelog author="dcermak@suse.com" date="1719230400">- Revert noarch for devel subpackage for SLE 15
  Switching to noarch causes issues on SLES maintenance updates, reverting it
  fixes our image builds</changelog>
  <changelog author="asarai@suse.com" date="1725537600">- Update to containerd v1.7.21. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.21&gt;
  Fixes CVE-2023-47108. bsc#1217070
  Fixes CVE-2023-45142. bsc#1228553
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
</package>
<package pkgid="ab0d1ab256e384387bfc33b77561b196f8b04d5c8f80e0d9030a434be7e74b1c" name="containerd" arch="s390x">
  <version epoch="0" ver="1.7.21" rel="150000.117.1"/>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt;
  Includes fixes for:
  - CVE-2022-1996 bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
  <changelog author="dcermak@suse.com" date="1705320000">- Enable manpage generation
- Make devel package noarch
- adjust rpmlint filters</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="eyadlorenzo@gmail.com" date="1713700800">- Use obs_scm service instead of tar_scm
- Removed patch 0002-shim-Create-pid-file-with-0644-permissions.patch
  (merged upstream at
  &lt;https://github.com/containerd/containerd/pull/9571&gt;)
- Update to containerd v1.7.15. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.15&gt;
- Update to containerd v1.7.14. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.14&gt;
- Update to containerd v1.7.13. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.13&gt;
- Update to containerd v1.7.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.12&gt;
- Update to containerd v1.7.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.11&gt;
  GHSA-jq35-85cj-fj4p bsc#1224323</changelog>
  <changelog author="asarai@suse.com" date="1716379200">- Update to containerd v1.7.17. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.17&gt;
- Switch back to using tar_scm service. Aside from obs_scm using more bandwidth
  and storage than a locally-compressed tar.xz, it seems there's some weird
  issue with paths in obscpio that break our SLE-12-only patch.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch
- Update to containerd v1.7.16. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.16&gt;
  CVE-2023-45288 bsc#1221400</changelog>
  <changelog author="dcermak@suse.com" date="1719230400">- Revert noarch for devel subpackage for SLE 15
  Switching to noarch causes issues on SLES maintenance updates, reverting it
  fixes our image builds</changelog>
  <changelog author="asarai@suse.com" date="1725537600">- Update to containerd v1.7.21. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.21&gt;
  Fixes CVE-2023-47108. bsc#1217070
  Fixes CVE-2023-45142. bsc#1228553
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
</package>
<package pkgid="f034e46b1b2736cc248d004e01bb1a18051600b78f0a64d30a2b5932502bff18" name="containerd" arch="src">
  <version epoch="0" ver="1.7.21" rel="150000.117.1"/>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt;
  Includes fixes for:
  - CVE-2022-1996 bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
  <changelog author="dcermak@suse.com" date="1705320000">- Enable manpage generation
- Make devel package noarch
- adjust rpmlint filters</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="eyadlorenzo@gmail.com" date="1713700800">- Use obs_scm service instead of tar_scm
- Removed patch 0002-shim-Create-pid-file-with-0644-permissions.patch
  (merged upstream at
  &lt;https://github.com/containerd/containerd/pull/9571&gt;)
- Update to containerd v1.7.15. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.15&gt;
- Update to containerd v1.7.14. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.14&gt;
- Update to containerd v1.7.13. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.13&gt;
- Update to containerd v1.7.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.12&gt;
- Update to containerd v1.7.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.11&gt;
  GHSA-jq35-85cj-fj4p bsc#1224323</changelog>
  <changelog author="asarai@suse.com" date="1716379200">- Update to containerd v1.7.17. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.17&gt;
- Switch back to using tar_scm service. Aside from obs_scm using more bandwidth
  and storage than a locally-compressed tar.xz, it seems there's some weird
  issue with paths in obscpio that break our SLE-12-only patch.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch
- Update to containerd v1.7.16. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.16&gt;
  CVE-2023-45288 bsc#1221400</changelog>
  <changelog author="dcermak@suse.com" date="1719230400">- Revert noarch for devel subpackage for SLE 15
  Switching to noarch causes issues on SLES maintenance updates, reverting it
  fixes our image builds</changelog>
  <changelog author="asarai@suse.com" date="1725537600">- Update to containerd v1.7.21. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.21&gt;
  Fixes CVE-2023-47108. bsc#1217070
  Fixes CVE-2023-45142. bsc#1228553
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
</package>
<package pkgid="6271ef86d873d9405e2852d44a9e6a4ba24c6f88c10e42c62c40df151fefa67a" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.7.21" rel="150000.117.1"/>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt;
  Includes fixes for:
  - CVE-2022-1996 bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
  <changelog author="dcermak@suse.com" date="1705320000">- Enable manpage generation
- Make devel package noarch
- adjust rpmlint filters</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="eyadlorenzo@gmail.com" date="1713700800">- Use obs_scm service instead of tar_scm
- Removed patch 0002-shim-Create-pid-file-with-0644-permissions.patch
  (merged upstream at
  &lt;https://github.com/containerd/containerd/pull/9571&gt;)
- Update to containerd v1.7.15. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.15&gt;
- Update to containerd v1.7.14. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.14&gt;
- Update to containerd v1.7.13. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.13&gt;
- Update to containerd v1.7.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.12&gt;
- Update to containerd v1.7.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.11&gt;
  GHSA-jq35-85cj-fj4p bsc#1224323</changelog>
  <changelog author="asarai@suse.com" date="1716379200">- Update to containerd v1.7.17. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.17&gt;
- Switch back to using tar_scm service. Aside from obs_scm using more bandwidth
  and storage than a locally-compressed tar.xz, it seems there's some weird
  issue with paths in obscpio that break our SLE-12-only patch.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch
- Update to containerd v1.7.16. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.16&gt;
  CVE-2023-45288 bsc#1221400</changelog>
  <changelog author="dcermak@suse.com" date="1719230400">- Revert noarch for devel subpackage for SLE 15
  Switching to noarch causes issues on SLES maintenance updates, reverting it
  fixes our image builds</changelog>
  <changelog author="asarai@suse.com" date="1725537600">- Update to containerd v1.7.21. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.21&gt;
  Fixes CVE-2023-47108. bsc#1217070
  Fixes CVE-2023-45142. bsc#1228553
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
</package>
<package pkgid="a1634c9ae58c9d6c557eb6533db28f986b7b08674a2def7437eb2bb274ebe241" name="containerd" arch="aarch64">
  <version epoch="0" ver="1.7.7" rel="150000.100.1"/>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
</package>
<package pkgid="270a056cc5ed1e9b34ef96d31619c98ff18bfe1c6dbcde4f315d95310afee263" name="containerd" arch="s390x">
  <version epoch="0" ver="1.7.7" rel="150000.100.1"/>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
</package>
<package pkgid="99af1341d77b8711d5f27b9133227fdea7eeae719ac1890c8a36680a1e23e31a" name="containerd" arch="src">
  <version epoch="0" ver="1.7.7" rel="150000.100.1"/>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
</package>
<package pkgid="9c640d5e50b38122f4013c48266339b1e7266cda832f70c4c4b737129af981d0" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.7.7" rel="150000.100.1"/>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
</package>
<package pkgid="94366b6471ebae62ff2057674c5a53b910daf8055418a021281be7fad86efb09" name="containerd" arch="aarch64">
  <version epoch="0" ver="1.7.8" rel="150000.103.1"/>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt; bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
</package>
<package pkgid="7135991c78e69fce45b8523cdcc77c48e0f5b3fd94fd325fc9590778586b9c6f" name="containerd" arch="s390x">
  <version epoch="0" ver="1.7.8" rel="150000.103.1"/>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt; bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
</package>
<package pkgid="ce360e545ebda16670bb21f7ed97d0086cc2e339b587b1c033f75e2d41c8bf6f" name="containerd" arch="src">
  <version epoch="0" ver="1.7.8" rel="150000.103.1"/>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt; bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
</package>
<package pkgid="16c9911872258bfdff7fa97f0b31fb978959d5ce66ed63875bb680fa252b1dd7" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.7.8" rel="150000.103.1"/>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt; bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
</package>
<package pkgid="fc1f59d188ef4825e1ad0e971a9024f66d99907987c8e9c0766241173e19b1a2" name="containerized-data-importer" arch="src">
  <version epoch="0" ver="1.57.0" rel="150500.6.3.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1621512000">- Disable changelog generation via tar_scm service (too verbose)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1621512001">- Update to version 1.34.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.34.0</changelog>
  <changelog author="fvogt@suse.com" date="1622808000">- Add REGISTRY variable</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1623672000">- Use registry.suse.com as the default fallback for sle
- Rename macro registry_path to kubevirt_registry_path
- Update to version 1.35.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.35.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1625054400">- Generate meta info for containers during rpm build</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1626091200">- Update to version 1.36.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.36.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1628596800">- Update to version 1.37.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.37.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1633953600">- Update to version 1.40.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.40.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1636718400">- Update to version 1.41.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.41.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1637928000">- Detect SLE15 SP4 build environment</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639915200">- Update to version 1.42.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.42.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641816000">- Update to version 1.43.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.43.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1650974400">- Increase storage requirements in _constraints (bsc#1198791)</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Pack only cdi-operator and cdi-cr release manifests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Update to version 1.51.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.51.0
- Fix CVE-2022-1996 go-restful: CORS bypass (bsc#1200528)
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 1.55.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.55.0
- Drop upstreamed patches:
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665835200">- Build tools/cdi-containerimage-server with CGO_ENABLED=0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1679659200">- Use recent golang compiler (bsc#1208916)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1692187200">- Update to version 1.57.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.57.0
- Add registry path for SLE15 SP6</changelog>
</package>
<package pkgid="c2f580e35619ff7b17e6f7f1ed1b71c7d2397181b6bde5c93db3bb449e51fdbc" name="containerized-data-importer" arch="src">
  <version epoch="0" ver="1.58.0" rel="150500.6.12.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1623672000">- Use registry.suse.com as the default fallback for sle
- Rename macro registry_path to kubevirt_registry_path
- Update to version 1.35.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.35.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1625054400">- Generate meta info for containers during rpm build</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1626091200">- Update to version 1.36.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.36.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1628596800">- Update to version 1.37.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.37.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1633953600">- Update to version 1.40.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.40.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1636718400">- Update to version 1.41.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.41.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1637928000">- Detect SLE15 SP4 build environment</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639915200">- Update to version 1.42.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.42.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641816000">- Update to version 1.43.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.43.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1650974400">- Increase storage requirements in _constraints (bsc#1198791)</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Pack only cdi-operator and cdi-cr release manifests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Update to version 1.51.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.51.0
- Fix CVE-2022-1996 go-restful: CORS bypass (bsc#1200528)
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 1.55.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.55.0
- Drop upstreamed patches:
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665835200">- Build tools/cdi-containerimage-server with CGO_ENABLED=0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1679659200">- Use recent golang compiler (bsc#1208916)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1692187200">- Update to version 1.57.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.57.0
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1695038400">- Enable the build for ALP and remove no longer supported SLE versions
  from the distro check</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1700568000">- Update to version 1.58.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
</package>
<package pkgid="80449939ea63e6021145e86bd5ba5a87191f44e91beab00fb7bc198ea43fff94" name="containerized-data-importer" arch="src">
  <version epoch="0" ver="1.58.0" rel="150500.6.15.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1625054400">- Generate meta info for containers during rpm build</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1626091200">- Update to version 1.36.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.36.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1628596800">- Update to version 1.37.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.37.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1633953600">- Update to version 1.40.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.40.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1636718400">- Update to version 1.41.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.41.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1637928000">- Detect SLE15 SP4 build environment</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639915200">- Update to version 1.42.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.42.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641816000">- Update to version 1.43.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.43.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1650974400">- Increase storage requirements in _constraints (bsc#1198791)</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Pack only cdi-operator and cdi-cr release manifests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Update to version 1.51.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.51.0
- Fix CVE-2022-1996 go-restful: CORS bypass (bsc#1200528)
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 1.55.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.55.0
- Drop upstreamed patches:
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665835200">- Build tools/cdi-containerimage-server with CGO_ENABLED=0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1679659200">- Use recent golang compiler (bsc#1208916)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1692187200">- Update to version 1.57.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.57.0
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1695038400">- Enable the build for ALP and remove no longer supported SLE versions
  from the distro check</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1700568000">- Update to version 1.58.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1715688000">- Bump github.com/containers/image/v5 (bsc#1224119, CVE-2024-3727)
  0001-Bump-github.com-containers-image-v5-to-v5.30.1.patch</changelog>
</package>
<package pkgid="ca1dca758cf0dd1100040b99d68362ddbef7d54ac42d7e48678c205f455e1dcc" name="containerized-data-importer" arch="src">
  <version epoch="0" ver="1.58.0" rel="150500.6.6.1"/>
  <changelog author="fvogt@suse.com" date="1622808000">- Add REGISTRY variable</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1623672000">- Use registry.suse.com as the default fallback for sle
- Rename macro registry_path to kubevirt_registry_path
- Update to version 1.35.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.35.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1625054400">- Generate meta info for containers during rpm build</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1626091200">- Update to version 1.36.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.36.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1628596800">- Update to version 1.37.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.37.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1633953600">- Update to version 1.40.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.40.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1636718400">- Update to version 1.41.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.41.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1637928000">- Detect SLE15 SP4 build environment</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639915200">- Update to version 1.42.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.42.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641816000">- Update to version 1.43.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.43.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1650974400">- Increase storage requirements in _constraints (bsc#1198791)</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Pack only cdi-operator and cdi-cr release manifests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Update to version 1.51.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.51.0
- Fix CVE-2022-1996 go-restful: CORS bypass (bsc#1200528)
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 1.55.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.55.0
- Drop upstreamed patches:
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665835200">- Build tools/cdi-containerimage-server with CGO_ENABLED=0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1679659200">- Use recent golang compiler (bsc#1208916)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1692187200">- Update to version 1.57.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.57.0
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1695038400">- Enable the build for ALP and remove no longer supported SLE versions
  from the distro check</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1700568000">- Update to version 1.58.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.0</changelog>
</package>
<package pkgid="21540ddaec31ada1b572826d17e01005822d397d0567a9f21eaedb9f81d362b8" name="containerized-data-importer" arch="src">
  <version epoch="0" ver="1.58.0" rel="150500.6.9.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1623672000">- Use registry.suse.com as the default fallback for sle
- Rename macro registry_path to kubevirt_registry_path
- Update to version 1.35.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.35.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1625054400">- Generate meta info for containers during rpm build</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1626091200">- Update to version 1.36.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.36.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1628596800">- Update to version 1.37.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.37.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1633953600">- Update to version 1.40.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.40.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1636718400">- Update to version 1.41.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.41.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1637928000">- Detect SLE15 SP4 build environment</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639915200">- Update to version 1.42.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.42.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641816000">- Update to version 1.43.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.43.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1650974400">- Increase storage requirements in _constraints (bsc#1198791)</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Pack only cdi-operator and cdi-cr release manifests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Update to version 1.51.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.51.0
- Fix CVE-2022-1996 go-restful: CORS bypass (bsc#1200528)
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 1.55.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.55.0
- Drop upstreamed patches:
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665835200">- Build tools/cdi-containerimage-server with CGO_ENABLED=0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1679659200">- Use recent golang compiler (bsc#1208916)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1692187200">- Update to version 1.57.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.57.0
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1695038400">- Enable the build for ALP and remove no longer supported SLE versions
  from the distro check</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1700568000">- Update to version 1.58.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
</package>
<package pkgid="62b4624348c9baa8e8de4dfafad2f8f4e5c95743d2d6e460e134e14bf20a226c" name="containerized-data-importer" arch="src">
  <version epoch="0" ver="1.59.0" rel="150500.6.18.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1626091200">- Update to version 1.36.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.36.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1628596800">- Update to version 1.37.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.37.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1633953600">- Update to version 1.40.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.40.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1636718400">- Update to version 1.41.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.41.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1637928000">- Detect SLE15 SP4 build environment</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639915200">- Update to version 1.42.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.42.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641816000">- Update to version 1.43.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.43.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1650974400">- Increase storage requirements in _constraints (bsc#1198791)</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Pack only cdi-operator and cdi-cr release manifests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Update to version 1.51.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.51.0
- Fix CVE-2022-1996 go-restful: CORS bypass (bsc#1200528)
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 1.55.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.55.0
- Drop upstreamed patches:
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665835200">- Build tools/cdi-containerimage-server with CGO_ENABLED=0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1679659200">- Use recent golang compiler (bsc#1208916)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1692187200">- Update to version 1.57.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.57.0
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1695038400">- Enable the build for ALP and remove no longer supported SLE versions
  from the distro check</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1700568000">- Update to version 1.58.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1715688000">- Bump github.com/containers/image/v5 (bsc#1224119, CVE-2024-3727)
  0001-Bump-github.com-containers-image-v5-to-v5.30.1.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1720440000">- Update to version 1.59.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.59.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.1</changelog>
</package>
<package pkgid="690db399955b5dbd23e44f98b54679d4c9a207ad161ebf1f2e90b580ab4145c2" name="containerized-data-importer-manifests" arch="x86_64">
  <version epoch="0" ver="1.57.0" rel="150500.6.3.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1621512000">- Disable changelog generation via tar_scm service (too verbose)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1621512001">- Update to version 1.34.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.34.0</changelog>
  <changelog author="fvogt@suse.com" date="1622808000">- Add REGISTRY variable</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1623672000">- Use registry.suse.com as the default fallback for sle
- Rename macro registry_path to kubevirt_registry_path
- Update to version 1.35.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.35.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1625054400">- Generate meta info for containers during rpm build</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1626091200">- Update to version 1.36.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.36.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1628596800">- Update to version 1.37.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.37.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1633953600">- Update to version 1.40.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.40.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1636718400">- Update to version 1.41.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.41.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1637928000">- Detect SLE15 SP4 build environment</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639915200">- Update to version 1.42.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.42.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641816000">- Update to version 1.43.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.43.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1650974400">- Increase storage requirements in _constraints (bsc#1198791)</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Pack only cdi-operator and cdi-cr release manifests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Update to version 1.51.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.51.0
- Fix CVE-2022-1996 go-restful: CORS bypass (bsc#1200528)
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 1.55.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.55.0
- Drop upstreamed patches:
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665835200">- Build tools/cdi-containerimage-server with CGO_ENABLED=0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1679659200">- Use recent golang compiler (bsc#1208916)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1692187200">- Update to version 1.57.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.57.0
- Add registry path for SLE15 SP6</changelog>
</package>
<package pkgid="ec087c58af6017068878f4c1cb94de8e4433d4e8f27718aea2331b89f7090b33" name="containerized-data-importer-manifests" arch="x86_64">
  <version epoch="0" ver="1.58.0" rel="150500.6.12.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1623672000">- Use registry.suse.com as the default fallback for sle
- Rename macro registry_path to kubevirt_registry_path
- Update to version 1.35.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.35.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1625054400">- Generate meta info for containers during rpm build</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1626091200">- Update to version 1.36.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.36.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1628596800">- Update to version 1.37.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.37.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1633953600">- Update to version 1.40.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.40.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1636718400">- Update to version 1.41.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.41.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1637928000">- Detect SLE15 SP4 build environment</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639915200">- Update to version 1.42.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.42.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641816000">- Update to version 1.43.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.43.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1650974400">- Increase storage requirements in _constraints (bsc#1198791)</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Pack only cdi-operator and cdi-cr release manifests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Update to version 1.51.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.51.0
- Fix CVE-2022-1996 go-restful: CORS bypass (bsc#1200528)
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 1.55.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.55.0
- Drop upstreamed patches:
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665835200">- Build tools/cdi-containerimage-server with CGO_ENABLED=0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1679659200">- Use recent golang compiler (bsc#1208916)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1692187200">- Update to version 1.57.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.57.0
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1695038400">- Enable the build for ALP and remove no longer supported SLE versions
  from the distro check</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1700568000">- Update to version 1.58.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
</package>
<package pkgid="e5168245bc12bd7a4df0d7dbc8940860391c34bb963c6a2900fdd0c10ed8ea25" name="containerized-data-importer-manifests" arch="x86_64">
  <version epoch="0" ver="1.58.0" rel="150500.6.15.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1625054400">- Generate meta info for containers during rpm build</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1626091200">- Update to version 1.36.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.36.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1628596800">- Update to version 1.37.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.37.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1633953600">- Update to version 1.40.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.40.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1636718400">- Update to version 1.41.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.41.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1637928000">- Detect SLE15 SP4 build environment</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639915200">- Update to version 1.42.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.42.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641816000">- Update to version 1.43.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.43.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1650974400">- Increase storage requirements in _constraints (bsc#1198791)</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Pack only cdi-operator and cdi-cr release manifests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Update to version 1.51.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.51.0
- Fix CVE-2022-1996 go-restful: CORS bypass (bsc#1200528)
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 1.55.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.55.0
- Drop upstreamed patches:
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665835200">- Build tools/cdi-containerimage-server with CGO_ENABLED=0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1679659200">- Use recent golang compiler (bsc#1208916)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1692187200">- Update to version 1.57.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.57.0
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1695038400">- Enable the build for ALP and remove no longer supported SLE versions
  from the distro check</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1700568000">- Update to version 1.58.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1715688000">- Bump github.com/containers/image/v5 (bsc#1224119, CVE-2024-3727)
  0001-Bump-github.com-containers-image-v5-to-v5.30.1.patch</changelog>
</package>
<package pkgid="a15151ce4b6edcd80ded9d94b226d964c974638307f32e0e5b7841b2c4450478" name="containerized-data-importer-manifests" arch="x86_64">
  <version epoch="0" ver="1.58.0" rel="150500.6.6.1"/>
  <changelog author="fvogt@suse.com" date="1622808000">- Add REGISTRY variable</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1623672000">- Use registry.suse.com as the default fallback for sle
- Rename macro registry_path to kubevirt_registry_path
- Update to version 1.35.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.35.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1625054400">- Generate meta info for containers during rpm build</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1626091200">- Update to version 1.36.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.36.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1628596800">- Update to version 1.37.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.37.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1633953600">- Update to version 1.40.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.40.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1636718400">- Update to version 1.41.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.41.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1637928000">- Detect SLE15 SP4 build environment</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639915200">- Update to version 1.42.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.42.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641816000">- Update to version 1.43.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.43.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1650974400">- Increase storage requirements in _constraints (bsc#1198791)</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Pack only cdi-operator and cdi-cr release manifests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Update to version 1.51.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.51.0
- Fix CVE-2022-1996 go-restful: CORS bypass (bsc#1200528)
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 1.55.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.55.0
- Drop upstreamed patches:
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665835200">- Build tools/cdi-containerimage-server with CGO_ENABLED=0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1679659200">- Use recent golang compiler (bsc#1208916)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1692187200">- Update to version 1.57.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.57.0
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1695038400">- Enable the build for ALP and remove no longer supported SLE versions
  from the distro check</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1700568000">- Update to version 1.58.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.0</changelog>
</package>
<package pkgid="f829c7ecc5890e3b8b8fd2695001c0c48523a436613cf5d6a9b7c2333c949ec9" name="containerized-data-importer-manifests" arch="x86_64">
  <version epoch="0" ver="1.58.0" rel="150500.6.9.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1623672000">- Use registry.suse.com as the default fallback for sle
- Rename macro registry_path to kubevirt_registry_path
- Update to version 1.35.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.35.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1625054400">- Generate meta info for containers during rpm build</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1626091200">- Update to version 1.36.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.36.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1628596800">- Update to version 1.37.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.37.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1633953600">- Update to version 1.40.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.40.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1636718400">- Update to version 1.41.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.41.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1637928000">- Detect SLE15 SP4 build environment</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639915200">- Update to version 1.42.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.42.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641816000">- Update to version 1.43.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.43.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1650974400">- Increase storage requirements in _constraints (bsc#1198791)</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Pack only cdi-operator and cdi-cr release manifests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Update to version 1.51.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.51.0
- Fix CVE-2022-1996 go-restful: CORS bypass (bsc#1200528)
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 1.55.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.55.0
- Drop upstreamed patches:
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665835200">- Build tools/cdi-containerimage-server with CGO_ENABLED=0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1679659200">- Use recent golang compiler (bsc#1208916)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1692187200">- Update to version 1.57.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.57.0
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1695038400">- Enable the build for ALP and remove no longer supported SLE versions
  from the distro check</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1700568000">- Update to version 1.58.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
</package>
<package pkgid="3be4be8f246182c49b97195fcc51f4cc659af1c138d0011deaa4248a737d9f9e" name="containerized-data-importer-manifests" arch="x86_64">
  <version epoch="0" ver="1.59.0" rel="150500.6.18.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1626091200">- Update to version 1.36.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.36.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1628596800">- Update to version 1.37.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.37.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1633953600">- Update to version 1.40.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.40.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1636718400">- Update to version 1.41.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.41.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1637928000">- Detect SLE15 SP4 build environment</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639915200">- Update to version 1.42.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.42.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641816000">- Update to version 1.43.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.43.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1650974400">- Increase storage requirements in _constraints (bsc#1198791)</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Pack only cdi-operator and cdi-cr release manifests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Update to version 1.51.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.51.0
- Fix CVE-2022-1996 go-restful: CORS bypass (bsc#1200528)
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 1.55.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.55.0
- Drop upstreamed patches:
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665835200">- Build tools/cdi-containerimage-server with CGO_ENABLED=0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1679659200">- Use recent golang compiler (bsc#1208916)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1692187200">- Update to version 1.57.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.57.0
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1695038400">- Enable the build for ALP and remove no longer supported SLE versions
  from the distro check</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1700568000">- Update to version 1.58.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1715688000">- Bump github.com/containers/image/v5 (bsc#1224119, CVE-2024-3727)
  0001-Bump-github.com-containers-image-v5-to-v5.30.1.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1720440000">- Update to version 1.59.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.59.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.1</changelog>
</package>
<package pkgid="2fbd633fd6fb34c0127aba7c24816436f9678304329ea68e2d175f4907d3fab0" name="coreutils" arch="aarch64">
  <version epoch="0" ver="8.32" rel="150400.9.3.1"/>
  <changelog author="mail@bernhard-voelker.de" date="1489147200">- Update to 8.27
  (for details see included NEWS file)
- Refresh patches:
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-getaddrinfo.patch
  * coreutils-i18n.patch
  * coreutils-ocfs2_reflinks.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
  * coreutils-testsuite.spec
- coreutils.keyring: Update (now ascii-armored) by
    'osc service localrun download_files'.
- coreutils-tests-port-to-timezone-2017a.patch: Add patch to
  workaround a FP test failure with newer timezone-2017a.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1493726400">- coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch:
  Add upstream patch to fix an heap overflow security issue
  in date(1) and touch(1) with a large TZ variable
  (CVE-2017-7476, rh#1444774, boo#1037124).</changelog>
  <changelog author="ghe@suse.com" date="1502884800">- Drop coreutils-ocfs2_reflinks.patch
  OCFS2 file system has supported file clone ioctls like btrfs,
  then, coreutils doesn't need this patch from the kernel v4.10-rc1</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1504526400">- Update to 8.28
  (for details see included NEWS file)
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.keyring: Update from upstream (Savannah).
- Remove now-upstream patches:
  * coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch
  * coreutils-tests-port-to-timezone-2017a.patch
- coreutils.spec: Add "BuildRequires: user(bin)" for the tests.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1514462400">- Update to 8.29:
  * Noteworthy changes in release 8.29 (2017-12-27) [stable]
  * * Bug fixes
  b2sum no longer crashes when processing certain truncated check files.
  [bug introduced with b2sum coreutils-8.26]
  dd now ensures the correct cache ranges are specified for the "nocache"
  and "direct" flags.  Previously some pages in the page cache were not
  invalidated.  [bug introduced for "direct" in coreutils-7.5,
  and with the "nocache" implementation in coreutils-8.11]
  df no longer hangs when given a fifo argument.
  [bug introduced in coreutils-7.3]
  ptx -S no longer infloops for a pattern which returns zero-length matches.
  [the bug dates back to the initial implementation]
  shred --remove will again repeatedly rename files with shortening names
  to attempt to hide the original length of the file name.
  [bug introduced in coreutils-8.28]
  stty no longer crashes when processing settings with -F also specified.
  [bug introduced in fileutils-4.0]
  tail --bytes again supports non seekable inputs on all systems.
  On systems like android it always tried to process as seekable inputs.
  [bug introduced in coreutils-8.24]
  timeout will again notice its managed command exiting, even when
  invoked with blocked CHLD signal, or in a narrow window where
  this CHLD signal from the exiting child was missed.  In each case
  timeout would have then waited for the time limit to expire.
  [bug introduced in coreutils-8.27]
  * * New features
  timeout now supports the --verbose option to diagnose forced termination.
  * * Improvements
  dd now supports iflag=direct with arbitrary sized files on all file systems.
  tail --bytes=NUM will efficiently seek to the end of block devices,
  rather than reading from the start.
  Utilities which do not support long options (other than the default --help
  and --version), e.g. cksum and sleep, now use more consistent error diagnostic
  for unknown long options.
  * * Build-related
  Default man pages are now distributed which are used if perl is
  not available on the build system, or when cross compiling.
- Refresh patches (line number changes only):
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1530619200">- Update to 8.30:
  * Noteworthy changes in release 8.30 (2018-07-01) [stable]
  * * Bug fixes
  'cp --symlink SRC DST' will again correctly validate DST.
  If DST is a regular file and SRC is a symlink to DST,
  then cp will no longer allow that operation to clobber DST.
  Also with -d, if DST is a symlink, then it can always be replaced,
  even if it points to SRC on a separate device.
  [bugs introduced with coreutils-8.27]
  'cp -n -u' and 'mv -n -u' now consistently ignore the -u option.
  Previously, this option combination suffered from race conditions
  that caused -u to sometimes override -n.
  [bug introduced with coreutils-7.1]
  'cp -a --no-preserve=mode' now sets appropriate default permissions
  for non regular files like fifos and character device nodes etc.,
  and leaves mode bits of existing files unchanged.
  Previously it would have set executable bits on created special files,
  and set mode bits for existing files as if they had been created.
  [bug introduced with coreutils-8.20]
  'cp --remove-destination file symlink' now removes the symlink
  even if it can't be traversed.
  [bug introduced with --remove-destination in fileutils-4.1.1]
  ls no longer truncates the abbreviated month names that have a
  display width between 6 and 12 inclusive.  Previously this would have
  output ambiguous months for Arabic or Catalan locales.
  'ls -aA' is now equivalent to 'ls -A', since -A now overrides -a.
  [bug introduced in coreutils-5.3.0]
  'mv -n A B' no longer suffers from a race condition that can
  overwrite a simultaneously-created B.  This bug fix requires
  platform support for the renameat2 or renameatx_np syscalls, found
  in recent Linux and macOS kernels.  As a side effect, ‘mv -n A A’
  now silently does nothing if A exists.
  [bug introduced with coreutils-7.1]
  * * Changes in behavior
  'cp --force file symlink' now removes the symlink even if
  it is self referential.
  ls --color now matches file extensions case insensitively.
  * * New features
  cp --reflink now supports --reflink=never to enforce a standard copy.
  env supports a new -v/--debug option to show verbose information about
  each processing step.
  env supports a new -S/--split-string=S option to split a single argument
  string into multiple arguments. Used to pass multiple arguments in scripts
  (shebang lines).
  md5sum accepts a new option: --zero (-z) to delimit the output lines with a
  NUL instead of a newline character.  This also disables file name escaping.
  This also applies to sha*sum and b2sum.
  rm --preserve-root now supports the --preserve-root=all option to
  reject any command line argument that is mounted to a separate file system.
  * * Improvements
  cut supports line lengths up to the max file size on 32 bit systems.
  Previously only offsets up to SIZE_MAX-1 were supported.
  stat and tail now know about the "exfs" file system, which is a
  version of XFS.  stat -f --format=%T now reports the file system type,
  and tail -f uses inotify.
  wc avoids redundant processing of ASCII text in multibyte locales,
  which is especially significant on macOS.
  * * Build-related
  Adjust to glibc &gt;= 2.28  (bsc#1182550, jsc#SLE-13520, jsc#SLE-13756)
- Refresh patches (line number changes only):
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * (License): osc changed the value from "GPL-3.0+" to "GPL-3.0-or-later".
  * (build): Make sure that parse-datetime.{c,y} ends up in debuginfo (rh#1555079).
- coreutils-i18n.patch:
  * src/exand.c,src/unexpand.c: Avoid -Wcomment warning.
  * src/cut.c (cut_characters_or_cut_bytes_no_split): Change idx from size_t
    to uintmax_t type to avoid a regression on i586, armv7l and ppc.
    Compare upstream, non-MB commit:
    https://git.sv.gnu.org/cgit/coreutils.git/commit/?id=d1a754c8272
    (cut_fields_mb): Likewise for field_idx.
  * tests/misc/cut.pl: Remove downstream tweaks as upstream MB tests are
    working since a while.
- coreutils.keyring: Update Assaf Gordon's GPG public key.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1552305600">- Update to 8.31:
  * Noteworthy changes in release 8.31 (2019-03-10) [stable]
  * * Bug fixes
  'base64 a b' now correctly diagnoses 'b' as the extra operand, not 'a'.
  [bug introduced in coreutils-5.3.0]
  When B already exists, 'cp -il A B' no longer immediately fails
  after asking the user whether to proceed.
  [This bug was present in "the beginning".]
  df no longer corrupts displayed multibyte characters on macOS.
  [bug introduced with coreutils-8.18]
  seq no longer outputs inconsistent decimal point characters
  for the last number, when locales are misconfigured.
  [bug introduced in coreutils-7.0]
  shred, sort, and split no longer falsely report ftruncate errors
  when outputting to less-common file types.  For example, the shell
  command 'sort /dev/null -o /dev/stdout | cat' no longer fails with
  an "error truncating" diagnostic.
  [bug was introduced with coreutils-8.18 for sort and split, and
  (for shared memory objects only) with fileutils-4.1 for shred]
  sync no longer fails for write-only file arguments.
  [bug introduced with argument support to sync in coreutils-8.24]
  'tail -f file | filter' no longer exits immediately on AIX.
  [bug introduced in coreutils-8.28]
  'tail -f file | filter' no longer goes into an infinite loop
  if filter exits and SIGPIPE is ignored.
  [bug introduced in coreutils-8.28]
  * * Changes in behavior
  cksum, dd, hostid, hostname, link, logname, sleep, tsort, unlink,
  uptime, users, whoami, yes: now always process --help and --version options,
  regardless of any other arguments present before any optional '--'
  end-of-options marker.
  nohup now processes --help and --version as first options even if other
  parameters follow.
  'yes a -- b' now outputs 'a b' instead of including the end-of-options
  marker as before: 'a -- b'.
  echo now always processes backslash escapes when the POSIXLY_CORRECT
  environment variable is set.
  When possible 'ln A B' now merely links A to B and reports an error
  if this fails, instead of statting A and B before linking.  This
  uses fewer system calls and avoids some races.  The old statting
  approach is still used in situations where hard links to directories
  are allowed (e.g., NetBSD when superuser).
  ls --group-directories-first will also group symlinks to directories.
  'test -a FILE' is not supported anymore.  Long ago, there were concerns about
  the high probability of humans confusing the -a primary with the -a binary
  operator, so POSIX changed this to 'test -e FILE'.  Scripts using it were
  already broken and non-portable; the -a unary operator was never documented.
  wc now treats non breaking space characters as word delimiters
  unless the POSIXLY_CORRECT environment variable is set.
  * * New features
  id now supports specifying multiple users.
  'date' now supports the '+' conversion specification flag,
  introduced in POSIX.1-2017.
  printf, seq, sleep, tail, and timeout now accept floating point
  numbers in either the current or the C locale.  For example, if the
  current locale's decimal point is ',', 'sleep 0,1' and 'sleep 0.1'
  now mean the same thing.  Previously, these commands accepted only
  C-locale syntax with '.' as the decimal point.  The new behavior is
  more compatible with other implementations in non-C locales.
  test now supports the '-N FILE' unary operator (like e.g. bash) to check
  whether FILE exists and has been modified since it was last read.
  env now supports '--default-signal[=SIG]', '--ignore-signal[=SIG]', and
  '--block-signal[=SIG], to setup signal handling before executing a program.
  env now supports '--list-signal-handling' to indicate non-default
  signal handling before executing a program.
  * * New commands
  basenc is added to complement existing base64,base32 commands,
  and encodes and decodes printable text using various common encodings:
  base64,base64url,base32,base32hex,base16,base2,z85.
  * * Improvements
  ls -l now better aligns abbreviated months containing digits,
  which is common in Asian locales.
  stat and tail now know about the "sdcardfs" file system on Android.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  stat now prints file creation time when supported by the file system,
  on GNU Linux systems with glibc &gt;= 2.28 and kernel &gt;= 4.11.
- Refresh patches (line number changes only):
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-misc.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * Version: bump version.
  * URL: Use https scheme.
  * %description: Add 'basenc' tool.
  * Change gitweb to cgit URL with https in a comment.
- coreutils.keyring:
  * Update for added section headers ('GPG keys of &lt;MAINTAINER&gt;').</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="lnussel@suse.de" date="1578571200">- switch to multibuild
- add coreutils-single subpackage that contains a single binary coreutils tool
  similar to busybox
- package LC_CTIME directories also in lang package
- split off doc package
- remove info macros, handled by file trigger nowadays</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1579521600">- minor: remove obsolete comment in spec file.</changelog>
  <changelog author="lnussel@suse.de" date="1580212800">- disable single and testsuite builds in rings/staging
- remove duplicate "coreutils" in flavor to make it look nicer in OBS</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1583755200">- Update to 8.32:
  * Noteworthy changes in release 8.32 (2020-03-05) [stable]
  * * Bug fixes
  cp now copies /dev/fd/N correctly on platforms like Solaris where
  it is a character-special file whose minor device number is N.
  [bug introduced in fileutils-4.1.6]
  dd conv=fdatasync no longer reports a "Bad file descriptor" error
  when fdatasync is interrupted, and dd now retries interrupted calls
  to close, fdatasync, fstat and fsync instead of incorrectly
  reporting an "Interrupted system call" error.
  [bugs introduced in coreutils-6.0]
  df now correctly parses the /proc/self/mountinfo file for unusual entries
  like ones with '\r' in a field value ("mount -t tmpfs tmpfs /foo$'\r'bar"),
  when the source field is empty ('mount -t tmpfs "" /mnt'), and when the
  filesystem type contains characters like a blank which need escaping.
  [bugs introduced in coreutils-8.24 with the introduction of reading
  the /proc/self/mountinfo file]
  factor again outputs immediately when stdout is a tty but stdin is not.
  [bug introduced in coreutils-8.24]
  ln works again on old systems without O_DIRECTORY support (like Solaris 10),
  and on systems where symlink ("x", ".") fails with errno == EINVAL
  (like Solaris 10 and Solaris 11).
  [bug introduced in coreutils-8.31]
  rmdir --ignore-fail-on-non-empty now works correctly for directories
  that fail to be removed due to permission issues.  Previously the exit status
  was reversed, failing for non empty and succeeding for empty directories.
  [bug introduced in coreutils-6.11]
  'shuf -r -n 0 file' no longer mistakenly reads from standard input.
  [bug introduced with the --repeat feature in coreutils-8.22]
  split no longer reports a "output file suffixes exhausted" error
  when the specified number of files is evenly divisible by 10, 16, 26,
  for --numeric, --hex, or default alphabetic suffixes respectively.
  [bug introduced in coreutils-8.24]
  seq no longer prints an extra line under certain circumstances (such as
  'seq -f "%g " 1000000 1000000').
  [bug introduced in coreutils-6.10]
  * * Changes in behavior
  Several programs now check that numbers end properly.  For example,
  'du -d 1x' now reports an error instead of silently ignoring the 'x'.
  Affected programs and options include du -d, expr's numeric operands
  on non-GMP builds, install -g and -o, ls's TABSIZE environment
  variable, mknod b and c, ptx -g and -w, shuf -n, and sort --batch-size
  and --parallel.
  date now parses military time zones in accordance with common usage:
    "A" to "M"  are equivalent to UTC+1 to UTC+12
    "N" to "Y"  are equivalent to UTC-1 to UTC-12
    "Z" is "zulu" time (UTC).
  For example, 'date -d "09:00B" is now equivalent to 9am in UTC+2 time zone.
  Previously, military time zones were parsed according to the obsolete
  rfc822, with their value negated (e.g., "B" was equivalent to UTC-2).
  [The old behavior was introduced in sh-utils 2.0.15 ca. 1999, predating
  coreutils package.]
  ls issues an error message on a removed directory, on GNU/Linux systems.
  Previously no error and no entries were output, and so indistinguishable
  from an empty directory, with default ls options.
  uniq no longer uses strcoll() to determine string equivalence,
  and so will operate more efficiently and consistently.
  * * New Features
  ls now supports the --time=birth option to display and sort by
  file creation time, where available.
  od --skip-bytes now can use lseek even if the input is not a regular
  file, greatly improving performance in some cases.
  stat(1) supports a new --cached= option, used on systems with statx(2)
  to control cache coherency of file system attributes,
  useful on network file systems.
  * * Improvements
  stat and ls now use the statx() system call where available, which can
  operate more efficiently by only retrieving requested attributes.
  stat and tail now know about the "binderfs", "dma-buf-fs", "erofs",
  "ppc-cmm-fs", and "z3fold" file systems.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  * * Build-related
  gzip-compressed tarballs are distributed once again
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-getaddrinfo.patch
  * coreutils-i18n.patch
  * coreutils-invalid-ids.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils-i18n.patch:
  * uniq: remove collation handling as required by newer POSIX; see
  - https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8e81d44b5
  - https://www.austingroupbugs.net/view.php?id=963
- coreutils-ls-restore-8.31-behavior-on-removed-dirs.patch:
  * Add patch for 'ls' to restore 8.31 behavior on removed directories.
- coreutils.spec:
  * Version: bump version.
  * %check: re-enable regular 'make check' for non-multibuild package.
  * reference the above new patch.
- coreutils.keyring:
  * Update from upstream (Savannah).</changelog>
  <changelog author="dmueller@suse.com" date="1588593600">- add coreutils-use-python3.patch to minimally port away from
  python 2.x use of pyinotify in the testsuite</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1592049600">- coreutils-gnulib-disable-test-float.patch: Add patch to temporarily
  disable the gnulib test 'test-float' failing on ppc and ppc64le.
- coreutils.spec: Reference the patch.  While at it, avoid conditional
  Patch and Source entries as that break cross-platform builds from
  source RPMs.</changelog>
  <changelog author="dimstar@opensuse.org" date="1594900800">- Drop suse-module-tools BuildRequires: this was used for the macro
  regenerate_initrd_post/posttrans, which have been moved to
  rpm-config-SUSE in Jan 2019.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1598875200">- gnulib-test-avoid-FP-perror-strerror.patch: Add patch to
  avoid false-positive error in gnulib tests 'test-perror2' and
  'test-strerror_r', visible on armv7l.
- coreutils.spec: Reference the patch.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="zpetrova@suse.com" date="1635163200">- coreutils-df-fuse-portal-dummy.patch:
  df: Add "fuse.portal" as a dummy file system (used in flatpak
  implementations). (bsc#1189152)</changelog>
  <changelog author="ailiop@suse.com" date="1706529600">- tail: fix tailing sysfs files where PAGE_SIZE &gt; BUFSIZ (bsc#1219321)
  - add coreutils-tail-fix-tailing-sysfs-files-where-PAGE_SIZE-BUFSIZ.patch</changelog>
</package>
<package pkgid="6fd0d10c14991a24468d4b2088c227cba2652d8230fbc80628d5695854b26c53" name="coreutils" arch="s390x">
  <version epoch="0" ver="8.32" rel="150400.9.3.1"/>
  <changelog author="mail@bernhard-voelker.de" date="1489147200">- Update to 8.27
  (for details see included NEWS file)
- Refresh patches:
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-getaddrinfo.patch
  * coreutils-i18n.patch
  * coreutils-ocfs2_reflinks.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
  * coreutils-testsuite.spec
- coreutils.keyring: Update (now ascii-armored) by
    'osc service localrun download_files'.
- coreutils-tests-port-to-timezone-2017a.patch: Add patch to
  workaround a FP test failure with newer timezone-2017a.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1493726400">- coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch:
  Add upstream patch to fix an heap overflow security issue
  in date(1) and touch(1) with a large TZ variable
  (CVE-2017-7476, rh#1444774, boo#1037124).</changelog>
  <changelog author="ghe@suse.com" date="1502884800">- Drop coreutils-ocfs2_reflinks.patch
  OCFS2 file system has supported file clone ioctls like btrfs,
  then, coreutils doesn't need this patch from the kernel v4.10-rc1</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1504526400">- Update to 8.28
  (for details see included NEWS file)
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.keyring: Update from upstream (Savannah).
- Remove now-upstream patches:
  * coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch
  * coreutils-tests-port-to-timezone-2017a.patch
- coreutils.spec: Add "BuildRequires: user(bin)" for the tests.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1514462400">- Update to 8.29:
  * Noteworthy changes in release 8.29 (2017-12-27) [stable]
  * * Bug fixes
  b2sum no longer crashes when processing certain truncated check files.
  [bug introduced with b2sum coreutils-8.26]
  dd now ensures the correct cache ranges are specified for the "nocache"
  and "direct" flags.  Previously some pages in the page cache were not
  invalidated.  [bug introduced for "direct" in coreutils-7.5,
  and with the "nocache" implementation in coreutils-8.11]
  df no longer hangs when given a fifo argument.
  [bug introduced in coreutils-7.3]
  ptx -S no longer infloops for a pattern which returns zero-length matches.
  [the bug dates back to the initial implementation]
  shred --remove will again repeatedly rename files with shortening names
  to attempt to hide the original length of the file name.
  [bug introduced in coreutils-8.28]
  stty no longer crashes when processing settings with -F also specified.
  [bug introduced in fileutils-4.0]
  tail --bytes again supports non seekable inputs on all systems.
  On systems like android it always tried to process as seekable inputs.
  [bug introduced in coreutils-8.24]
  timeout will again notice its managed command exiting, even when
  invoked with blocked CHLD signal, or in a narrow window where
  this CHLD signal from the exiting child was missed.  In each case
  timeout would have then waited for the time limit to expire.
  [bug introduced in coreutils-8.27]
  * * New features
  timeout now supports the --verbose option to diagnose forced termination.
  * * Improvements
  dd now supports iflag=direct with arbitrary sized files on all file systems.
  tail --bytes=NUM will efficiently seek to the end of block devices,
  rather than reading from the start.
  Utilities which do not support long options (other than the default --help
  and --version), e.g. cksum and sleep, now use more consistent error diagnostic
  for unknown long options.
  * * Build-related
  Default man pages are now distributed which are used if perl is
  not available on the build system, or when cross compiling.
- Refresh patches (line number changes only):
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1530619200">- Update to 8.30:
  * Noteworthy changes in release 8.30 (2018-07-01) [stable]
  * * Bug fixes
  'cp --symlink SRC DST' will again correctly validate DST.
  If DST is a regular file and SRC is a symlink to DST,
  then cp will no longer allow that operation to clobber DST.
  Also with -d, if DST is a symlink, then it can always be replaced,
  even if it points to SRC on a separate device.
  [bugs introduced with coreutils-8.27]
  'cp -n -u' and 'mv -n -u' now consistently ignore the -u option.
  Previously, this option combination suffered from race conditions
  that caused -u to sometimes override -n.
  [bug introduced with coreutils-7.1]
  'cp -a --no-preserve=mode' now sets appropriate default permissions
  for non regular files like fifos and character device nodes etc.,
  and leaves mode bits of existing files unchanged.
  Previously it would have set executable bits on created special files,
  and set mode bits for existing files as if they had been created.
  [bug introduced with coreutils-8.20]
  'cp --remove-destination file symlink' now removes the symlink
  even if it can't be traversed.
  [bug introduced with --remove-destination in fileutils-4.1.1]
  ls no longer truncates the abbreviated month names that have a
  display width between 6 and 12 inclusive.  Previously this would have
  output ambiguous months for Arabic or Catalan locales.
  'ls -aA' is now equivalent to 'ls -A', since -A now overrides -a.
  [bug introduced in coreutils-5.3.0]
  'mv -n A B' no longer suffers from a race condition that can
  overwrite a simultaneously-created B.  This bug fix requires
  platform support for the renameat2 or renameatx_np syscalls, found
  in recent Linux and macOS kernels.  As a side effect, ‘mv -n A A’
  now silently does nothing if A exists.
  [bug introduced with coreutils-7.1]
  * * Changes in behavior
  'cp --force file symlink' now removes the symlink even if
  it is self referential.
  ls --color now matches file extensions case insensitively.
  * * New features
  cp --reflink now supports --reflink=never to enforce a standard copy.
  env supports a new -v/--debug option to show verbose information about
  each processing step.
  env supports a new -S/--split-string=S option to split a single argument
  string into multiple arguments. Used to pass multiple arguments in scripts
  (shebang lines).
  md5sum accepts a new option: --zero (-z) to delimit the output lines with a
  NUL instead of a newline character.  This also disables file name escaping.
  This also applies to sha*sum and b2sum.
  rm --preserve-root now supports the --preserve-root=all option to
  reject any command line argument that is mounted to a separate file system.
  * * Improvements
  cut supports line lengths up to the max file size on 32 bit systems.
  Previously only offsets up to SIZE_MAX-1 were supported.
  stat and tail now know about the "exfs" file system, which is a
  version of XFS.  stat -f --format=%T now reports the file system type,
  and tail -f uses inotify.
  wc avoids redundant processing of ASCII text in multibyte locales,
  which is especially significant on macOS.
  * * Build-related
  Adjust to glibc &gt;= 2.28  (bsc#1182550, jsc#SLE-13520, jsc#SLE-13756)
- Refresh patches (line number changes only):
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * (License): osc changed the value from "GPL-3.0+" to "GPL-3.0-or-later".
  * (build): Make sure that parse-datetime.{c,y} ends up in debuginfo (rh#1555079).
- coreutils-i18n.patch:
  * src/exand.c,src/unexpand.c: Avoid -Wcomment warning.
  * src/cut.c (cut_characters_or_cut_bytes_no_split): Change idx from size_t
    to uintmax_t type to avoid a regression on i586, armv7l and ppc.
    Compare upstream, non-MB commit:
    https://git.sv.gnu.org/cgit/coreutils.git/commit/?id=d1a754c8272
    (cut_fields_mb): Likewise for field_idx.
  * tests/misc/cut.pl: Remove downstream tweaks as upstream MB tests are
    working since a while.
- coreutils.keyring: Update Assaf Gordon's GPG public key.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1552305600">- Update to 8.31:
  * Noteworthy changes in release 8.31 (2019-03-10) [stable]
  * * Bug fixes
  'base64 a b' now correctly diagnoses 'b' as the extra operand, not 'a'.
  [bug introduced in coreutils-5.3.0]
  When B already exists, 'cp -il A B' no longer immediately fails
  after asking the user whether to proceed.
  [This bug was present in "the beginning".]
  df no longer corrupts displayed multibyte characters on macOS.
  [bug introduced with coreutils-8.18]
  seq no longer outputs inconsistent decimal point characters
  for the last number, when locales are misconfigured.
  [bug introduced in coreutils-7.0]
  shred, sort, and split no longer falsely report ftruncate errors
  when outputting to less-common file types.  For example, the shell
  command 'sort /dev/null -o /dev/stdout | cat' no longer fails with
  an "error truncating" diagnostic.
  [bug was introduced with coreutils-8.18 for sort and split, and
  (for shared memory objects only) with fileutils-4.1 for shred]
  sync no longer fails for write-only file arguments.
  [bug introduced with argument support to sync in coreutils-8.24]
  'tail -f file | filter' no longer exits immediately on AIX.
  [bug introduced in coreutils-8.28]
  'tail -f file | filter' no longer goes into an infinite loop
  if filter exits and SIGPIPE is ignored.
  [bug introduced in coreutils-8.28]
  * * Changes in behavior
  cksum, dd, hostid, hostname, link, logname, sleep, tsort, unlink,
  uptime, users, whoami, yes: now always process --help and --version options,
  regardless of any other arguments present before any optional '--'
  end-of-options marker.
  nohup now processes --help and --version as first options even if other
  parameters follow.
  'yes a -- b' now outputs 'a b' instead of including the end-of-options
  marker as before: 'a -- b'.
  echo now always processes backslash escapes when the POSIXLY_CORRECT
  environment variable is set.
  When possible 'ln A B' now merely links A to B and reports an error
  if this fails, instead of statting A and B before linking.  This
  uses fewer system calls and avoids some races.  The old statting
  approach is still used in situations where hard links to directories
  are allowed (e.g., NetBSD when superuser).
  ls --group-directories-first will also group symlinks to directories.
  'test -a FILE' is not supported anymore.  Long ago, there were concerns about
  the high probability of humans confusing the -a primary with the -a binary
  operator, so POSIX changed this to 'test -e FILE'.  Scripts using it were
  already broken and non-portable; the -a unary operator was never documented.
  wc now treats non breaking space characters as word delimiters
  unless the POSIXLY_CORRECT environment variable is set.
  * * New features
  id now supports specifying multiple users.
  'date' now supports the '+' conversion specification flag,
  introduced in POSIX.1-2017.
  printf, seq, sleep, tail, and timeout now accept floating point
  numbers in either the current or the C locale.  For example, if the
  current locale's decimal point is ',', 'sleep 0,1' and 'sleep 0.1'
  now mean the same thing.  Previously, these commands accepted only
  C-locale syntax with '.' as the decimal point.  The new behavior is
  more compatible with other implementations in non-C locales.
  test now supports the '-N FILE' unary operator (like e.g. bash) to check
  whether FILE exists and has been modified since it was last read.
  env now supports '--default-signal[=SIG]', '--ignore-signal[=SIG]', and
  '--block-signal[=SIG], to setup signal handling before executing a program.
  env now supports '--list-signal-handling' to indicate non-default
  signal handling before executing a program.
  * * New commands
  basenc is added to complement existing base64,base32 commands,
  and encodes and decodes printable text using various common encodings:
  base64,base64url,base32,base32hex,base16,base2,z85.
  * * Improvements
  ls -l now better aligns abbreviated months containing digits,
  which is common in Asian locales.
  stat and tail now know about the "sdcardfs" file system on Android.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  stat now prints file creation time when supported by the file system,
  on GNU Linux systems with glibc &gt;= 2.28 and kernel &gt;= 4.11.
- Refresh patches (line number changes only):
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-misc.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * Version: bump version.
  * URL: Use https scheme.
  * %description: Add 'basenc' tool.
  * Change gitweb to cgit URL with https in a comment.
- coreutils.keyring:
  * Update for added section headers ('GPG keys of &lt;MAINTAINER&gt;').</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="lnussel@suse.de" date="1578571200">- switch to multibuild
- add coreutils-single subpackage that contains a single binary coreutils tool
  similar to busybox
- package LC_CTIME directories also in lang package
- split off doc package
- remove info macros, handled by file trigger nowadays</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1579521600">- minor: remove obsolete comment in spec file.</changelog>
  <changelog author="lnussel@suse.de" date="1580212800">- disable single and testsuite builds in rings/staging
- remove duplicate "coreutils" in flavor to make it look nicer in OBS</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1583755200">- Update to 8.32:
  * Noteworthy changes in release 8.32 (2020-03-05) [stable]
  * * Bug fixes
  cp now copies /dev/fd/N correctly on platforms like Solaris where
  it is a character-special file whose minor device number is N.
  [bug introduced in fileutils-4.1.6]
  dd conv=fdatasync no longer reports a "Bad file descriptor" error
  when fdatasync is interrupted, and dd now retries interrupted calls
  to close, fdatasync, fstat and fsync instead of incorrectly
  reporting an "Interrupted system call" error.
  [bugs introduced in coreutils-6.0]
  df now correctly parses the /proc/self/mountinfo file for unusual entries
  like ones with '\r' in a field value ("mount -t tmpfs tmpfs /foo$'\r'bar"),
  when the source field is empty ('mount -t tmpfs "" /mnt'), and when the
  filesystem type contains characters like a blank which need escaping.
  [bugs introduced in coreutils-8.24 with the introduction of reading
  the /proc/self/mountinfo file]
  factor again outputs immediately when stdout is a tty but stdin is not.
  [bug introduced in coreutils-8.24]
  ln works again on old systems without O_DIRECTORY support (like Solaris 10),
  and on systems where symlink ("x", ".") fails with errno == EINVAL
  (like Solaris 10 and Solaris 11).
  [bug introduced in coreutils-8.31]
  rmdir --ignore-fail-on-non-empty now works correctly for directories
  that fail to be removed due to permission issues.  Previously the exit status
  was reversed, failing for non empty and succeeding for empty directories.
  [bug introduced in coreutils-6.11]
  'shuf -r -n 0 file' no longer mistakenly reads from standard input.
  [bug introduced with the --repeat feature in coreutils-8.22]
  split no longer reports a "output file suffixes exhausted" error
  when the specified number of files is evenly divisible by 10, 16, 26,
  for --numeric, --hex, or default alphabetic suffixes respectively.
  [bug introduced in coreutils-8.24]
  seq no longer prints an extra line under certain circumstances (such as
  'seq -f "%g " 1000000 1000000').
  [bug introduced in coreutils-6.10]
  * * Changes in behavior
  Several programs now check that numbers end properly.  For example,
  'du -d 1x' now reports an error instead of silently ignoring the 'x'.
  Affected programs and options include du -d, expr's numeric operands
  on non-GMP builds, install -g and -o, ls's TABSIZE environment
  variable, mknod b and c, ptx -g and -w, shuf -n, and sort --batch-size
  and --parallel.
  date now parses military time zones in accordance with common usage:
    "A" to "M"  are equivalent to UTC+1 to UTC+12
    "N" to "Y"  are equivalent to UTC-1 to UTC-12
    "Z" is "zulu" time (UTC).
  For example, 'date -d "09:00B" is now equivalent to 9am in UTC+2 time zone.
  Previously, military time zones were parsed according to the obsolete
  rfc822, with their value negated (e.g., "B" was equivalent to UTC-2).
  [The old behavior was introduced in sh-utils 2.0.15 ca. 1999, predating
  coreutils package.]
  ls issues an error message on a removed directory, on GNU/Linux systems.
  Previously no error and no entries were output, and so indistinguishable
  from an empty directory, with default ls options.
  uniq no longer uses strcoll() to determine string equivalence,
  and so will operate more efficiently and consistently.
  * * New Features
  ls now supports the --time=birth option to display and sort by
  file creation time, where available.
  od --skip-bytes now can use lseek even if the input is not a regular
  file, greatly improving performance in some cases.
  stat(1) supports a new --cached= option, used on systems with statx(2)
  to control cache coherency of file system attributes,
  useful on network file systems.
  * * Improvements
  stat and ls now use the statx() system call where available, which can
  operate more efficiently by only retrieving requested attributes.
  stat and tail now know about the "binderfs", "dma-buf-fs", "erofs",
  "ppc-cmm-fs", and "z3fold" file systems.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  * * Build-related
  gzip-compressed tarballs are distributed once again
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-getaddrinfo.patch
  * coreutils-i18n.patch
  * coreutils-invalid-ids.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils-i18n.patch:
  * uniq: remove collation handling as required by newer POSIX; see
  - https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8e81d44b5
  - https://www.austingroupbugs.net/view.php?id=963
- coreutils-ls-restore-8.31-behavior-on-removed-dirs.patch:
  * Add patch for 'ls' to restore 8.31 behavior on removed directories.
- coreutils.spec:
  * Version: bump version.
  * %check: re-enable regular 'make check' for non-multibuild package.
  * reference the above new patch.
- coreutils.keyring:
  * Update from upstream (Savannah).</changelog>
  <changelog author="dmueller@suse.com" date="1588593600">- add coreutils-use-python3.patch to minimally port away from
  python 2.x use of pyinotify in the testsuite</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1592049600">- coreutils-gnulib-disable-test-float.patch: Add patch to temporarily
  disable the gnulib test 'test-float' failing on ppc and ppc64le.
- coreutils.spec: Reference the patch.  While at it, avoid conditional
  Patch and Source entries as that break cross-platform builds from
  source RPMs.</changelog>
  <changelog author="dimstar@opensuse.org" date="1594900800">- Drop suse-module-tools BuildRequires: this was used for the macro
  regenerate_initrd_post/posttrans, which have been moved to
  rpm-config-SUSE in Jan 2019.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1598875200">- gnulib-test-avoid-FP-perror-strerror.patch: Add patch to
  avoid false-positive error in gnulib tests 'test-perror2' and
  'test-strerror_r', visible on armv7l.
- coreutils.spec: Reference the patch.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="zpetrova@suse.com" date="1635163200">- coreutils-df-fuse-portal-dummy.patch:
  df: Add "fuse.portal" as a dummy file system (used in flatpak
  implementations). (bsc#1189152)</changelog>
  <changelog author="ailiop@suse.com" date="1706529600">- tail: fix tailing sysfs files where PAGE_SIZE &gt; BUFSIZ (bsc#1219321)
  - add coreutils-tail-fix-tailing-sysfs-files-where-PAGE_SIZE-BUFSIZ.patch</changelog>
</package>
<package pkgid="8bc384d877bc78593f81b9b689520e83491a5abfb9d555ad3aa8c53645e7362c" name="coreutils" arch="src">
  <version epoch="0" ver="8.32" rel="150400.9.3.1"/>
  <changelog author="mail@bernhard-voelker.de" date="1489147200">- Update to 8.27
  (for details see included NEWS file)
- Refresh patches:
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-getaddrinfo.patch
  * coreutils-i18n.patch
  * coreutils-ocfs2_reflinks.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
  * coreutils-testsuite.spec
- coreutils.keyring: Update (now ascii-armored) by
    'osc service localrun download_files'.
- coreutils-tests-port-to-timezone-2017a.patch: Add patch to
  workaround a FP test failure with newer timezone-2017a.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1493726400">- coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch:
  Add upstream patch to fix an heap overflow security issue
  in date(1) and touch(1) with a large TZ variable
  (CVE-2017-7476, rh#1444774, boo#1037124).</changelog>
  <changelog author="ghe@suse.com" date="1502884800">- Drop coreutils-ocfs2_reflinks.patch
  OCFS2 file system has supported file clone ioctls like btrfs,
  then, coreutils doesn't need this patch from the kernel v4.10-rc1</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1504526400">- Update to 8.28
  (for details see included NEWS file)
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.keyring: Update from upstream (Savannah).
- Remove now-upstream patches:
  * coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch
  * coreutils-tests-port-to-timezone-2017a.patch
- coreutils.spec: Add "BuildRequires: user(bin)" for the tests.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1514462400">- Update to 8.29:
  * Noteworthy changes in release 8.29 (2017-12-27) [stable]
  * * Bug fixes
  b2sum no longer crashes when processing certain truncated check files.
  [bug introduced with b2sum coreutils-8.26]
  dd now ensures the correct cache ranges are specified for the "nocache"
  and "direct" flags.  Previously some pages in the page cache were not
  invalidated.  [bug introduced for "direct" in coreutils-7.5,
  and with the "nocache" implementation in coreutils-8.11]
  df no longer hangs when given a fifo argument.
  [bug introduced in coreutils-7.3]
  ptx -S no longer infloops for a pattern which returns zero-length matches.
  [the bug dates back to the initial implementation]
  shred --remove will again repeatedly rename files with shortening names
  to attempt to hide the original length of the file name.
  [bug introduced in coreutils-8.28]
  stty no longer crashes when processing settings with -F also specified.
  [bug introduced in fileutils-4.0]
  tail --bytes again supports non seekable inputs on all systems.
  On systems like android it always tried to process as seekable inputs.
  [bug introduced in coreutils-8.24]
  timeout will again notice its managed command exiting, even when
  invoked with blocked CHLD signal, or in a narrow window where
  this CHLD signal from the exiting child was missed.  In each case
  timeout would have then waited for the time limit to expire.
  [bug introduced in coreutils-8.27]
  * * New features
  timeout now supports the --verbose option to diagnose forced termination.
  * * Improvements
  dd now supports iflag=direct with arbitrary sized files on all file systems.
  tail --bytes=NUM will efficiently seek to the end of block devices,
  rather than reading from the start.
  Utilities which do not support long options (other than the default --help
  and --version), e.g. cksum and sleep, now use more consistent error diagnostic
  for unknown long options.
  * * Build-related
  Default man pages are now distributed which are used if perl is
  not available on the build system, or when cross compiling.
- Refresh patches (line number changes only):
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1530619200">- Update to 8.30:
  * Noteworthy changes in release 8.30 (2018-07-01) [stable]
  * * Bug fixes
  'cp --symlink SRC DST' will again correctly validate DST.
  If DST is a regular file and SRC is a symlink to DST,
  then cp will no longer allow that operation to clobber DST.
  Also with -d, if DST is a symlink, then it can always be replaced,
  even if it points to SRC on a separate device.
  [bugs introduced with coreutils-8.27]
  'cp -n -u' and 'mv -n -u' now consistently ignore the -u option.
  Previously, this option combination suffered from race conditions
  that caused -u to sometimes override -n.
  [bug introduced with coreutils-7.1]
  'cp -a --no-preserve=mode' now sets appropriate default permissions
  for non regular files like fifos and character device nodes etc.,
  and leaves mode bits of existing files unchanged.
  Previously it would have set executable bits on created special files,
  and set mode bits for existing files as if they had been created.
  [bug introduced with coreutils-8.20]
  'cp --remove-destination file symlink' now removes the symlink
  even if it can't be traversed.
  [bug introduced with --remove-destination in fileutils-4.1.1]
  ls no longer truncates the abbreviated month names that have a
  display width between 6 and 12 inclusive.  Previously this would have
  output ambiguous months for Arabic or Catalan locales.
  'ls -aA' is now equivalent to 'ls -A', since -A now overrides -a.
  [bug introduced in coreutils-5.3.0]
  'mv -n A B' no longer suffers from a race condition that can
  overwrite a simultaneously-created B.  This bug fix requires
  platform support for the renameat2 or renameatx_np syscalls, found
  in recent Linux and macOS kernels.  As a side effect, ‘mv -n A A’
  now silently does nothing if A exists.
  [bug introduced with coreutils-7.1]
  * * Changes in behavior
  'cp --force file symlink' now removes the symlink even if
  it is self referential.
  ls --color now matches file extensions case insensitively.
  * * New features
  cp --reflink now supports --reflink=never to enforce a standard copy.
  env supports a new -v/--debug option to show verbose information about
  each processing step.
  env supports a new -S/--split-string=S option to split a single argument
  string into multiple arguments. Used to pass multiple arguments in scripts
  (shebang lines).
  md5sum accepts a new option: --zero (-z) to delimit the output lines with a
  NUL instead of a newline character.  This also disables file name escaping.
  This also applies to sha*sum and b2sum.
  rm --preserve-root now supports the --preserve-root=all option to
  reject any command line argument that is mounted to a separate file system.
  * * Improvements
  cut supports line lengths up to the max file size on 32 bit systems.
  Previously only offsets up to SIZE_MAX-1 were supported.
  stat and tail now know about the "exfs" file system, which is a
  version of XFS.  stat -f --format=%T now reports the file system type,
  and tail -f uses inotify.
  wc avoids redundant processing of ASCII text in multibyte locales,
  which is especially significant on macOS.
  * * Build-related
  Adjust to glibc &gt;= 2.28  (bsc#1182550, jsc#SLE-13520, jsc#SLE-13756)
- Refresh patches (line number changes only):
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * (License): osc changed the value from "GPL-3.0+" to "GPL-3.0-or-later".
  * (build): Make sure that parse-datetime.{c,y} ends up in debuginfo (rh#1555079).
- coreutils-i18n.patch:
  * src/exand.c,src/unexpand.c: Avoid -Wcomment warning.
  * src/cut.c (cut_characters_or_cut_bytes_no_split): Change idx from size_t
    to uintmax_t type to avoid a regression on i586, armv7l and ppc.
    Compare upstream, non-MB commit:
    https://git.sv.gnu.org/cgit/coreutils.git/commit/?id=d1a754c8272
    (cut_fields_mb): Likewise for field_idx.
  * tests/misc/cut.pl: Remove downstream tweaks as upstream MB tests are
    working since a while.
- coreutils.keyring: Update Assaf Gordon's GPG public key.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1552305600">- Update to 8.31:
  * Noteworthy changes in release 8.31 (2019-03-10) [stable]
  * * Bug fixes
  'base64 a b' now correctly diagnoses 'b' as the extra operand, not 'a'.
  [bug introduced in coreutils-5.3.0]
  When B already exists, 'cp -il A B' no longer immediately fails
  after asking the user whether to proceed.
  [This bug was present in "the beginning".]
  df no longer corrupts displayed multibyte characters on macOS.
  [bug introduced with coreutils-8.18]
  seq no longer outputs inconsistent decimal point characters
  for the last number, when locales are misconfigured.
  [bug introduced in coreutils-7.0]
  shred, sort, and split no longer falsely report ftruncate errors
  when outputting to less-common file types.  For example, the shell
  command 'sort /dev/null -o /dev/stdout | cat' no longer fails with
  an "error truncating" diagnostic.
  [bug was introduced with coreutils-8.18 for sort and split, and
  (for shared memory objects only) with fileutils-4.1 for shred]
  sync no longer fails for write-only file arguments.
  [bug introduced with argument support to sync in coreutils-8.24]
  'tail -f file | filter' no longer exits immediately on AIX.
  [bug introduced in coreutils-8.28]
  'tail -f file | filter' no longer goes into an infinite loop
  if filter exits and SIGPIPE is ignored.
  [bug introduced in coreutils-8.28]
  * * Changes in behavior
  cksum, dd, hostid, hostname, link, logname, sleep, tsort, unlink,
  uptime, users, whoami, yes: now always process --help and --version options,
  regardless of any other arguments present before any optional '--'
  end-of-options marker.
  nohup now processes --help and --version as first options even if other
  parameters follow.
  'yes a -- b' now outputs 'a b' instead of including the end-of-options
  marker as before: 'a -- b'.
  echo now always processes backslash escapes when the POSIXLY_CORRECT
  environment variable is set.
  When possible 'ln A B' now merely links A to B and reports an error
  if this fails, instead of statting A and B before linking.  This
  uses fewer system calls and avoids some races.  The old statting
  approach is still used in situations where hard links to directories
  are allowed (e.g., NetBSD when superuser).
  ls --group-directories-first will also group symlinks to directories.
  'test -a FILE' is not supported anymore.  Long ago, there were concerns about
  the high probability of humans confusing the -a primary with the -a binary
  operator, so POSIX changed this to 'test -e FILE'.  Scripts using it were
  already broken and non-portable; the -a unary operator was never documented.
  wc now treats non breaking space characters as word delimiters
  unless the POSIXLY_CORRECT environment variable is set.
  * * New features
  id now supports specifying multiple users.
  'date' now supports the '+' conversion specification flag,
  introduced in POSIX.1-2017.
  printf, seq, sleep, tail, and timeout now accept floating point
  numbers in either the current or the C locale.  For example, if the
  current locale's decimal point is ',', 'sleep 0,1' and 'sleep 0.1'
  now mean the same thing.  Previously, these commands accepted only
  C-locale syntax with '.' as the decimal point.  The new behavior is
  more compatible with other implementations in non-C locales.
  test now supports the '-N FILE' unary operator (like e.g. bash) to check
  whether FILE exists and has been modified since it was last read.
  env now supports '--default-signal[=SIG]', '--ignore-signal[=SIG]', and
  '--block-signal[=SIG], to setup signal handling before executing a program.
  env now supports '--list-signal-handling' to indicate non-default
  signal handling before executing a program.
  * * New commands
  basenc is added to complement existing base64,base32 commands,
  and encodes and decodes printable text using various common encodings:
  base64,base64url,base32,base32hex,base16,base2,z85.
  * * Improvements
  ls -l now better aligns abbreviated months containing digits,
  which is common in Asian locales.
  stat and tail now know about the "sdcardfs" file system on Android.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  stat now prints file creation time when supported by the file system,
  on GNU Linux systems with glibc &gt;= 2.28 and kernel &gt;= 4.11.
- Refresh patches (line number changes only):
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-misc.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * Version: bump version.
  * URL: Use https scheme.
  * %description: Add 'basenc' tool.
  * Change gitweb to cgit URL with https in a comment.
- coreutils.keyring:
  * Update for added section headers ('GPG keys of &lt;MAINTAINER&gt;').</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="lnussel@suse.de" date="1578571200">- switch to multibuild
- add coreutils-single subpackage that contains a single binary coreutils tool
  similar to busybox
- package LC_CTIME directories also in lang package
- split off doc package
- remove info macros, handled by file trigger nowadays</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1579521600">- minor: remove obsolete comment in spec file.</changelog>
  <changelog author="lnussel@suse.de" date="1580212800">- disable single and testsuite builds in rings/staging
- remove duplicate "coreutils" in flavor to make it look nicer in OBS</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1583755200">- Update to 8.32:
  * Noteworthy changes in release 8.32 (2020-03-05) [stable]
  * * Bug fixes
  cp now copies /dev/fd/N correctly on platforms like Solaris where
  it is a character-special file whose minor device number is N.
  [bug introduced in fileutils-4.1.6]
  dd conv=fdatasync no longer reports a "Bad file descriptor" error
  when fdatasync is interrupted, and dd now retries interrupted calls
  to close, fdatasync, fstat and fsync instead of incorrectly
  reporting an "Interrupted system call" error.
  [bugs introduced in coreutils-6.0]
  df now correctly parses the /proc/self/mountinfo file for unusual entries
  like ones with '\r' in a field value ("mount -t tmpfs tmpfs /foo$'\r'bar"),
  when the source field is empty ('mount -t tmpfs "" /mnt'), and when the
  filesystem type contains characters like a blank which need escaping.
  [bugs introduced in coreutils-8.24 with the introduction of reading
  the /proc/self/mountinfo file]
  factor again outputs immediately when stdout is a tty but stdin is not.
  [bug introduced in coreutils-8.24]
  ln works again on old systems without O_DIRECTORY support (like Solaris 10),
  and on systems where symlink ("x", ".") fails with errno == EINVAL
  (like Solaris 10 and Solaris 11).
  [bug introduced in coreutils-8.31]
  rmdir --ignore-fail-on-non-empty now works correctly for directories
  that fail to be removed due to permission issues.  Previously the exit status
  was reversed, failing for non empty and succeeding for empty directories.
  [bug introduced in coreutils-6.11]
  'shuf -r -n 0 file' no longer mistakenly reads from standard input.
  [bug introduced with the --repeat feature in coreutils-8.22]
  split no longer reports a "output file suffixes exhausted" error
  when the specified number of files is evenly divisible by 10, 16, 26,
  for --numeric, --hex, or default alphabetic suffixes respectively.
  [bug introduced in coreutils-8.24]
  seq no longer prints an extra line under certain circumstances (such as
  'seq -f "%g " 1000000 1000000').
  [bug introduced in coreutils-6.10]
  * * Changes in behavior
  Several programs now check that numbers end properly.  For example,
  'du -d 1x' now reports an error instead of silently ignoring the 'x'.
  Affected programs and options include du -d, expr's numeric operands
  on non-GMP builds, install -g and -o, ls's TABSIZE environment
  variable, mknod b and c, ptx -g and -w, shuf -n, and sort --batch-size
  and --parallel.
  date now parses military time zones in accordance with common usage:
    "A" to "M"  are equivalent to UTC+1 to UTC+12
    "N" to "Y"  are equivalent to UTC-1 to UTC-12
    "Z" is "zulu" time (UTC).
  For example, 'date -d "09:00B" is now equivalent to 9am in UTC+2 time zone.
  Previously, military time zones were parsed according to the obsolete
  rfc822, with their value negated (e.g., "B" was equivalent to UTC-2).
  [The old behavior was introduced in sh-utils 2.0.15 ca. 1999, predating
  coreutils package.]
  ls issues an error message on a removed directory, on GNU/Linux systems.
  Previously no error and no entries were output, and so indistinguishable
  from an empty directory, with default ls options.
  uniq no longer uses strcoll() to determine string equivalence,
  and so will operate more efficiently and consistently.
  * * New Features
  ls now supports the --time=birth option to display and sort by
  file creation time, where available.
  od --skip-bytes now can use lseek even if the input is not a regular
  file, greatly improving performance in some cases.
  stat(1) supports a new --cached= option, used on systems with statx(2)
  to control cache coherency of file system attributes,
  useful on network file systems.
  * * Improvements
  stat and ls now use the statx() system call where available, which can
  operate more efficiently by only retrieving requested attributes.
  stat and tail now know about the "binderfs", "dma-buf-fs", "erofs",
  "ppc-cmm-fs", and "z3fold" file systems.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  * * Build-related
  gzip-compressed tarballs are distributed once again
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-getaddrinfo.patch
  * coreutils-i18n.patch
  * coreutils-invalid-ids.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils-i18n.patch:
  * uniq: remove collation handling as required by newer POSIX; see
  - https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8e81d44b5
  - https://www.austingroupbugs.net/view.php?id=963
- coreutils-ls-restore-8.31-behavior-on-removed-dirs.patch:
  * Add patch for 'ls' to restore 8.31 behavior on removed directories.
- coreutils.spec:
  * Version: bump version.
  * %check: re-enable regular 'make check' for non-multibuild package.
  * reference the above new patch.
- coreutils.keyring:
  * Update from upstream (Savannah).</changelog>
  <changelog author="dmueller@suse.com" date="1588593600">- add coreutils-use-python3.patch to minimally port away from
  python 2.x use of pyinotify in the testsuite</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1592049600">- coreutils-gnulib-disable-test-float.patch: Add patch to temporarily
  disable the gnulib test 'test-float' failing on ppc and ppc64le.
- coreutils.spec: Reference the patch.  While at it, avoid conditional
  Patch and Source entries as that break cross-platform builds from
  source RPMs.</changelog>
  <changelog author="dimstar@opensuse.org" date="1594900800">- Drop suse-module-tools BuildRequires: this was used for the macro
  regenerate_initrd_post/posttrans, which have been moved to
  rpm-config-SUSE in Jan 2019.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1598875200">- gnulib-test-avoid-FP-perror-strerror.patch: Add patch to
  avoid false-positive error in gnulib tests 'test-perror2' and
  'test-strerror_r', visible on armv7l.
- coreutils.spec: Reference the patch.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="zpetrova@suse.com" date="1635163200">- coreutils-df-fuse-portal-dummy.patch:
  df: Add "fuse.portal" as a dummy file system (used in flatpak
  implementations). (bsc#1189152)</changelog>
  <changelog author="ailiop@suse.com" date="1706529600">- tail: fix tailing sysfs files where PAGE_SIZE &gt; BUFSIZ (bsc#1219321)
  - add coreutils-tail-fix-tailing-sysfs-files-where-PAGE_SIZE-BUFSIZ.patch</changelog>
</package>
<package pkgid="34f6205f2e6b99fe07629e026376de2b6af7c4f83fd4848c024d9133842d83d0" name="coreutils" arch="x86_64">
  <version epoch="0" ver="8.32" rel="150400.9.3.1"/>
  <changelog author="mail@bernhard-voelker.de" date="1489147200">- Update to 8.27
  (for details see included NEWS file)
- Refresh patches:
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-getaddrinfo.patch
  * coreutils-i18n.patch
  * coreutils-ocfs2_reflinks.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
  * coreutils-testsuite.spec
- coreutils.keyring: Update (now ascii-armored) by
    'osc service localrun download_files'.
- coreutils-tests-port-to-timezone-2017a.patch: Add patch to
  workaround a FP test failure with newer timezone-2017a.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1493726400">- coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch:
  Add upstream patch to fix an heap overflow security issue
  in date(1) and touch(1) with a large TZ variable
  (CVE-2017-7476, rh#1444774, boo#1037124).</changelog>
  <changelog author="ghe@suse.com" date="1502884800">- Drop coreutils-ocfs2_reflinks.patch
  OCFS2 file system has supported file clone ioctls like btrfs,
  then, coreutils doesn't need this patch from the kernel v4.10-rc1</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1504526400">- Update to 8.28
  (for details see included NEWS file)
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.keyring: Update from upstream (Savannah).
- Remove now-upstream patches:
  * coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch
  * coreutils-tests-port-to-timezone-2017a.patch
- coreutils.spec: Add "BuildRequires: user(bin)" for the tests.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1514462400">- Update to 8.29:
  * Noteworthy changes in release 8.29 (2017-12-27) [stable]
  * * Bug fixes
  b2sum no longer crashes when processing certain truncated check files.
  [bug introduced with b2sum coreutils-8.26]
  dd now ensures the correct cache ranges are specified for the "nocache"
  and "direct" flags.  Previously some pages in the page cache were not
  invalidated.  [bug introduced for "direct" in coreutils-7.5,
  and with the "nocache" implementation in coreutils-8.11]
  df no longer hangs when given a fifo argument.
  [bug introduced in coreutils-7.3]
  ptx -S no longer infloops for a pattern which returns zero-length matches.
  [the bug dates back to the initial implementation]
  shred --remove will again repeatedly rename files with shortening names
  to attempt to hide the original length of the file name.
  [bug introduced in coreutils-8.28]
  stty no longer crashes when processing settings with -F also specified.
  [bug introduced in fileutils-4.0]
  tail --bytes again supports non seekable inputs on all systems.
  On systems like android it always tried to process as seekable inputs.
  [bug introduced in coreutils-8.24]
  timeout will again notice its managed command exiting, even when
  invoked with blocked CHLD signal, or in a narrow window where
  this CHLD signal from the exiting child was missed.  In each case
  timeout would have then waited for the time limit to expire.
  [bug introduced in coreutils-8.27]
  * * New features
  timeout now supports the --verbose option to diagnose forced termination.
  * * Improvements
  dd now supports iflag=direct with arbitrary sized files on all file systems.
  tail --bytes=NUM will efficiently seek to the end of block devices,
  rather than reading from the start.
  Utilities which do not support long options (other than the default --help
  and --version), e.g. cksum and sleep, now use more consistent error diagnostic
  for unknown long options.
  * * Build-related
  Default man pages are now distributed which are used if perl is
  not available on the build system, or when cross compiling.
- Refresh patches (line number changes only):
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1530619200">- Update to 8.30:
  * Noteworthy changes in release 8.30 (2018-07-01) [stable]
  * * Bug fixes
  'cp --symlink SRC DST' will again correctly validate DST.
  If DST is a regular file and SRC is a symlink to DST,
  then cp will no longer allow that operation to clobber DST.
  Also with -d, if DST is a symlink, then it can always be replaced,
  even if it points to SRC on a separate device.
  [bugs introduced with coreutils-8.27]
  'cp -n -u' and 'mv -n -u' now consistently ignore the -u option.
  Previously, this option combination suffered from race conditions
  that caused -u to sometimes override -n.
  [bug introduced with coreutils-7.1]
  'cp -a --no-preserve=mode' now sets appropriate default permissions
  for non regular files like fifos and character device nodes etc.,
  and leaves mode bits of existing files unchanged.
  Previously it would have set executable bits on created special files,
  and set mode bits for existing files as if they had been created.
  [bug introduced with coreutils-8.20]
  'cp --remove-destination file symlink' now removes the symlink
  even if it can't be traversed.
  [bug introduced with --remove-destination in fileutils-4.1.1]
  ls no longer truncates the abbreviated month names that have a
  display width between 6 and 12 inclusive.  Previously this would have
  output ambiguous months for Arabic or Catalan locales.
  'ls -aA' is now equivalent to 'ls -A', since -A now overrides -a.
  [bug introduced in coreutils-5.3.0]
  'mv -n A B' no longer suffers from a race condition that can
  overwrite a simultaneously-created B.  This bug fix requires
  platform support for the renameat2 or renameatx_np syscalls, found
  in recent Linux and macOS kernels.  As a side effect, ‘mv -n A A’
  now silently does nothing if A exists.
  [bug introduced with coreutils-7.1]
  * * Changes in behavior
  'cp --force file symlink' now removes the symlink even if
  it is self referential.
  ls --color now matches file extensions case insensitively.
  * * New features
  cp --reflink now supports --reflink=never to enforce a standard copy.
  env supports a new -v/--debug option to show verbose information about
  each processing step.
  env supports a new -S/--split-string=S option to split a single argument
  string into multiple arguments. Used to pass multiple arguments in scripts
  (shebang lines).
  md5sum accepts a new option: --zero (-z) to delimit the output lines with a
  NUL instead of a newline character.  This also disables file name escaping.
  This also applies to sha*sum and b2sum.
  rm --preserve-root now supports the --preserve-root=all option to
  reject any command line argument that is mounted to a separate file system.
  * * Improvements
  cut supports line lengths up to the max file size on 32 bit systems.
  Previously only offsets up to SIZE_MAX-1 were supported.
  stat and tail now know about the "exfs" file system, which is a
  version of XFS.  stat -f --format=%T now reports the file system type,
  and tail -f uses inotify.
  wc avoids redundant processing of ASCII text in multibyte locales,
  which is especially significant on macOS.
  * * Build-related
  Adjust to glibc &gt;= 2.28  (bsc#1182550, jsc#SLE-13520, jsc#SLE-13756)
- Refresh patches (line number changes only):
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * (License): osc changed the value from "GPL-3.0+" to "GPL-3.0-or-later".
  * (build): Make sure that parse-datetime.{c,y} ends up in debuginfo (rh#1555079).
- coreutils-i18n.patch:
  * src/exand.c,src/unexpand.c: Avoid -Wcomment warning.
  * src/cut.c (cut_characters_or_cut_bytes_no_split): Change idx from size_t
    to uintmax_t type to avoid a regression on i586, armv7l and ppc.
    Compare upstream, non-MB commit:
    https://git.sv.gnu.org/cgit/coreutils.git/commit/?id=d1a754c8272
    (cut_fields_mb): Likewise for field_idx.
  * tests/misc/cut.pl: Remove downstream tweaks as upstream MB tests are
    working since a while.
- coreutils.keyring: Update Assaf Gordon's GPG public key.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1552305600">- Update to 8.31:
  * Noteworthy changes in release 8.31 (2019-03-10) [stable]
  * * Bug fixes
  'base64 a b' now correctly diagnoses 'b' as the extra operand, not 'a'.
  [bug introduced in coreutils-5.3.0]
  When B already exists, 'cp -il A B' no longer immediately fails
  after asking the user whether to proceed.
  [This bug was present in "the beginning".]
  df no longer corrupts displayed multibyte characters on macOS.
  [bug introduced with coreutils-8.18]
  seq no longer outputs inconsistent decimal point characters
  for the last number, when locales are misconfigured.
  [bug introduced in coreutils-7.0]
  shred, sort, and split no longer falsely report ftruncate errors
  when outputting to less-common file types.  For example, the shell
  command 'sort /dev/null -o /dev/stdout | cat' no longer fails with
  an "error truncating" diagnostic.
  [bug was introduced with coreutils-8.18 for sort and split, and
  (for shared memory objects only) with fileutils-4.1 for shred]
  sync no longer fails for write-only file arguments.
  [bug introduced with argument support to sync in coreutils-8.24]
  'tail -f file | filter' no longer exits immediately on AIX.
  [bug introduced in coreutils-8.28]
  'tail -f file | filter' no longer goes into an infinite loop
  if filter exits and SIGPIPE is ignored.
  [bug introduced in coreutils-8.28]
  * * Changes in behavior
  cksum, dd, hostid, hostname, link, logname, sleep, tsort, unlink,
  uptime, users, whoami, yes: now always process --help and --version options,
  regardless of any other arguments present before any optional '--'
  end-of-options marker.
  nohup now processes --help and --version as first options even if other
  parameters follow.
  'yes a -- b' now outputs 'a b' instead of including the end-of-options
  marker as before: 'a -- b'.
  echo now always processes backslash escapes when the POSIXLY_CORRECT
  environment variable is set.
  When possible 'ln A B' now merely links A to B and reports an error
  if this fails, instead of statting A and B before linking.  This
  uses fewer system calls and avoids some races.  The old statting
  approach is still used in situations where hard links to directories
  are allowed (e.g., NetBSD when superuser).
  ls --group-directories-first will also group symlinks to directories.
  'test -a FILE' is not supported anymore.  Long ago, there were concerns about
  the high probability of humans confusing the -a primary with the -a binary
  operator, so POSIX changed this to 'test -e FILE'.  Scripts using it were
  already broken and non-portable; the -a unary operator was never documented.
  wc now treats non breaking space characters as word delimiters
  unless the POSIXLY_CORRECT environment variable is set.
  * * New features
  id now supports specifying multiple users.
  'date' now supports the '+' conversion specification flag,
  introduced in POSIX.1-2017.
  printf, seq, sleep, tail, and timeout now accept floating point
  numbers in either the current or the C locale.  For example, if the
  current locale's decimal point is ',', 'sleep 0,1' and 'sleep 0.1'
  now mean the same thing.  Previously, these commands accepted only
  C-locale syntax with '.' as the decimal point.  The new behavior is
  more compatible with other implementations in non-C locales.
  test now supports the '-N FILE' unary operator (like e.g. bash) to check
  whether FILE exists and has been modified since it was last read.
  env now supports '--default-signal[=SIG]', '--ignore-signal[=SIG]', and
  '--block-signal[=SIG], to setup signal handling before executing a program.
  env now supports '--list-signal-handling' to indicate non-default
  signal handling before executing a program.
  * * New commands
  basenc is added to complement existing base64,base32 commands,
  and encodes and decodes printable text using various common encodings:
  base64,base64url,base32,base32hex,base16,base2,z85.
  * * Improvements
  ls -l now better aligns abbreviated months containing digits,
  which is common in Asian locales.
  stat and tail now know about the "sdcardfs" file system on Android.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  stat now prints file creation time when supported by the file system,
  on GNU Linux systems with glibc &gt;= 2.28 and kernel &gt;= 4.11.
- Refresh patches (line number changes only):
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-misc.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * Version: bump version.
  * URL: Use https scheme.
  * %description: Add 'basenc' tool.
  * Change gitweb to cgit URL with https in a comment.
- coreutils.keyring:
  * Update for added section headers ('GPG keys of &lt;MAINTAINER&gt;').</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="lnussel@suse.de" date="1578571200">- switch to multibuild
- add coreutils-single subpackage that contains a single binary coreutils tool
  similar to busybox
- package LC_CTIME directories also in lang package
- split off doc package
- remove info macros, handled by file trigger nowadays</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1579521600">- minor: remove obsolete comment in spec file.</changelog>
  <changelog author="lnussel@suse.de" date="1580212800">- disable single and testsuite builds in rings/staging
- remove duplicate "coreutils" in flavor to make it look nicer in OBS</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1583755200">- Update to 8.32:
  * Noteworthy changes in release 8.32 (2020-03-05) [stable]
  * * Bug fixes
  cp now copies /dev/fd/N correctly on platforms like Solaris where
  it is a character-special file whose minor device number is N.
  [bug introduced in fileutils-4.1.6]
  dd conv=fdatasync no longer reports a "Bad file descriptor" error
  when fdatasync is interrupted, and dd now retries interrupted calls
  to close, fdatasync, fstat and fsync instead of incorrectly
  reporting an "Interrupted system call" error.
  [bugs introduced in coreutils-6.0]
  df now correctly parses the /proc/self/mountinfo file for unusual entries
  like ones with '\r' in a field value ("mount -t tmpfs tmpfs /foo$'\r'bar"),
  when the source field is empty ('mount -t tmpfs "" /mnt'), and when the
  filesystem type contains characters like a blank which need escaping.
  [bugs introduced in coreutils-8.24 with the introduction of reading
  the /proc/self/mountinfo file]
  factor again outputs immediately when stdout is a tty but stdin is not.
  [bug introduced in coreutils-8.24]
  ln works again on old systems without O_DIRECTORY support (like Solaris 10),
  and on systems where symlink ("x", ".") fails with errno == EINVAL
  (like Solaris 10 and Solaris 11).
  [bug introduced in coreutils-8.31]
  rmdir --ignore-fail-on-non-empty now works correctly for directories
  that fail to be removed due to permission issues.  Previously the exit status
  was reversed, failing for non empty and succeeding for empty directories.
  [bug introduced in coreutils-6.11]
  'shuf -r -n 0 file' no longer mistakenly reads from standard input.
  [bug introduced with the --repeat feature in coreutils-8.22]
  split no longer reports a "output file suffixes exhausted" error
  when the specified number of files is evenly divisible by 10, 16, 26,
  for --numeric, --hex, or default alphabetic suffixes respectively.
  [bug introduced in coreutils-8.24]
  seq no longer prints an extra line under certain circumstances (such as
  'seq -f "%g " 1000000 1000000').
  [bug introduced in coreutils-6.10]
  * * Changes in behavior
  Several programs now check that numbers end properly.  For example,
  'du -d 1x' now reports an error instead of silently ignoring the 'x'.
  Affected programs and options include du -d, expr's numeric operands
  on non-GMP builds, install -g and -o, ls's TABSIZE environment
  variable, mknod b and c, ptx -g and -w, shuf -n, and sort --batch-size
  and --parallel.
  date now parses military time zones in accordance with common usage:
    "A" to "M"  are equivalent to UTC+1 to UTC+12
    "N" to "Y"  are equivalent to UTC-1 to UTC-12
    "Z" is "zulu" time (UTC).
  For example, 'date -d "09:00B" is now equivalent to 9am in UTC+2 time zone.
  Previously, military time zones were parsed according to the obsolete
  rfc822, with their value negated (e.g., "B" was equivalent to UTC-2).
  [The old behavior was introduced in sh-utils 2.0.15 ca. 1999, predating
  coreutils package.]
  ls issues an error message on a removed directory, on GNU/Linux systems.
  Previously no error and no entries were output, and so indistinguishable
  from an empty directory, with default ls options.
  uniq no longer uses strcoll() to determine string equivalence,
  and so will operate more efficiently and consistently.
  * * New Features
  ls now supports the --time=birth option to display and sort by
  file creation time, where available.
  od --skip-bytes now can use lseek even if the input is not a regular
  file, greatly improving performance in some cases.
  stat(1) supports a new --cached= option, used on systems with statx(2)
  to control cache coherency of file system attributes,
  useful on network file systems.
  * * Improvements
  stat and ls now use the statx() system call where available, which can
  operate more efficiently by only retrieving requested attributes.
  stat and tail now know about the "binderfs", "dma-buf-fs", "erofs",
  "ppc-cmm-fs", and "z3fold" file systems.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  * * Build-related
  gzip-compressed tarballs are distributed once again
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-getaddrinfo.patch
  * coreutils-i18n.patch
  * coreutils-invalid-ids.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils-i18n.patch:
  * uniq: remove collation handling as required by newer POSIX; see
  - https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8e81d44b5
  - https://www.austingroupbugs.net/view.php?id=963
- coreutils-ls-restore-8.31-behavior-on-removed-dirs.patch:
  * Add patch for 'ls' to restore 8.31 behavior on removed directories.
- coreutils.spec:
  * Version: bump version.
  * %check: re-enable regular 'make check' for non-multibuild package.
  * reference the above new patch.
- coreutils.keyring:
  * Update from upstream (Savannah).</changelog>
  <changelog author="dmueller@suse.com" date="1588593600">- add coreutils-use-python3.patch to minimally port away from
  python 2.x use of pyinotify in the testsuite</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1592049600">- coreutils-gnulib-disable-test-float.patch: Add patch to temporarily
  disable the gnulib test 'test-float' failing on ppc and ppc64le.
- coreutils.spec: Reference the patch.  While at it, avoid conditional
  Patch and Source entries as that break cross-platform builds from
  source RPMs.</changelog>
  <changelog author="dimstar@opensuse.org" date="1594900800">- Drop suse-module-tools BuildRequires: this was used for the macro
  regenerate_initrd_post/posttrans, which have been moved to
  rpm-config-SUSE in Jan 2019.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1598875200">- gnulib-test-avoid-FP-perror-strerror.patch: Add patch to
  avoid false-positive error in gnulib tests 'test-perror2' and
  'test-strerror_r', visible on armv7l.
- coreutils.spec: Reference the patch.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="zpetrova@suse.com" date="1635163200">- coreutils-df-fuse-portal-dummy.patch:
  df: Add "fuse.portal" as a dummy file system (used in flatpak
  implementations). (bsc#1189152)</changelog>
  <changelog author="ailiop@suse.com" date="1706529600">- tail: fix tailing sysfs files where PAGE_SIZE &gt; BUFSIZ (bsc#1219321)
  - add coreutils-tail-fix-tailing-sysfs-files-where-PAGE_SIZE-BUFSIZ.patch</changelog>
</package>
<package pkgid="6e588d986f5396f61e522d7ced6f4756e23036a2a1844abf197c2187ad420e0d" name="coreutils" arch="aarch64">
  <version epoch="0" ver="8.32" rel="150400.9.6.1"/>
  <changelog author="mail@bernhard-voelker.de" date="1493726400">- coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch:
  Add upstream patch to fix an heap overflow security issue
  in date(1) and touch(1) with a large TZ variable
  (CVE-2017-7476, rh#1444774, boo#1037124).</changelog>
  <changelog author="ghe@suse.com" date="1502884800">- Drop coreutils-ocfs2_reflinks.patch
  OCFS2 file system has supported file clone ioctls like btrfs,
  then, coreutils doesn't need this patch from the kernel v4.10-rc1</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1504526400">- Update to 8.28
  (for details see included NEWS file)
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.keyring: Update from upstream (Savannah).
- Remove now-upstream patches:
  * coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch
  * coreutils-tests-port-to-timezone-2017a.patch
- coreutils.spec: Add "BuildRequires: user(bin)" for the tests.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1514462400">- Update to 8.29:
  * Noteworthy changes in release 8.29 (2017-12-27) [stable]
  * * Bug fixes
  b2sum no longer crashes when processing certain truncated check files.
  [bug introduced with b2sum coreutils-8.26]
  dd now ensures the correct cache ranges are specified for the "nocache"
  and "direct" flags.  Previously some pages in the page cache were not
  invalidated.  [bug introduced for "direct" in coreutils-7.5,
  and with the "nocache" implementation in coreutils-8.11]
  df no longer hangs when given a fifo argument.
  [bug introduced in coreutils-7.3]
  ptx -S no longer infloops for a pattern which returns zero-length matches.
  [the bug dates back to the initial implementation]
  shred --remove will again repeatedly rename files with shortening names
  to attempt to hide the original length of the file name.
  [bug introduced in coreutils-8.28]
  stty no longer crashes when processing settings with -F also specified.
  [bug introduced in fileutils-4.0]
  tail --bytes again supports non seekable inputs on all systems.
  On systems like android it always tried to process as seekable inputs.
  [bug introduced in coreutils-8.24]
  timeout will again notice its managed command exiting, even when
  invoked with blocked CHLD signal, or in a narrow window where
  this CHLD signal from the exiting child was missed.  In each case
  timeout would have then waited for the time limit to expire.
  [bug introduced in coreutils-8.27]
  * * New features
  timeout now supports the --verbose option to diagnose forced termination.
  * * Improvements
  dd now supports iflag=direct with arbitrary sized files on all file systems.
  tail --bytes=NUM will efficiently seek to the end of block devices,
  rather than reading from the start.
  Utilities which do not support long options (other than the default --help
  and --version), e.g. cksum and sleep, now use more consistent error diagnostic
  for unknown long options.
  * * Build-related
  Default man pages are now distributed which are used if perl is
  not available on the build system, or when cross compiling.
- Refresh patches (line number changes only):
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1530619200">- Update to 8.30:
  * Noteworthy changes in release 8.30 (2018-07-01) [stable]
  * * Bug fixes
  'cp --symlink SRC DST' will again correctly validate DST.
  If DST is a regular file and SRC is a symlink to DST,
  then cp will no longer allow that operation to clobber DST.
  Also with -d, if DST is a symlink, then it can always be replaced,
  even if it points to SRC on a separate device.
  [bugs introduced with coreutils-8.27]
  'cp -n -u' and 'mv -n -u' now consistently ignore the -u option.
  Previously, this option combination suffered from race conditions
  that caused -u to sometimes override -n.
  [bug introduced with coreutils-7.1]
  'cp -a --no-preserve=mode' now sets appropriate default permissions
  for non regular files like fifos and character device nodes etc.,
  and leaves mode bits of existing files unchanged.
  Previously it would have set executable bits on created special files,
  and set mode bits for existing files as if they had been created.
  [bug introduced with coreutils-8.20]
  'cp --remove-destination file symlink' now removes the symlink
  even if it can't be traversed.
  [bug introduced with --remove-destination in fileutils-4.1.1]
  ls no longer truncates the abbreviated month names that have a
  display width between 6 and 12 inclusive.  Previously this would have
  output ambiguous months for Arabic or Catalan locales.
  'ls -aA' is now equivalent to 'ls -A', since -A now overrides -a.
  [bug introduced in coreutils-5.3.0]
  'mv -n A B' no longer suffers from a race condition that can
  overwrite a simultaneously-created B.  This bug fix requires
  platform support for the renameat2 or renameatx_np syscalls, found
  in recent Linux and macOS kernels.  As a side effect, ‘mv -n A A’
  now silently does nothing if A exists.
  [bug introduced with coreutils-7.1]
  * * Changes in behavior
  'cp --force file symlink' now removes the symlink even if
  it is self referential.
  ls --color now matches file extensions case insensitively.
  * * New features
  cp --reflink now supports --reflink=never to enforce a standard copy.
  env supports a new -v/--debug option to show verbose information about
  each processing step.
  env supports a new -S/--split-string=S option to split a single argument
  string into multiple arguments. Used to pass multiple arguments in scripts
  (shebang lines).
  md5sum accepts a new option: --zero (-z) to delimit the output lines with a
  NUL instead of a newline character.  This also disables file name escaping.
  This also applies to sha*sum and b2sum.
  rm --preserve-root now supports the --preserve-root=all option to
  reject any command line argument that is mounted to a separate file system.
  * * Improvements
  cut supports line lengths up to the max file size on 32 bit systems.
  Previously only offsets up to SIZE_MAX-1 were supported.
  stat and tail now know about the "exfs" file system, which is a
  version of XFS.  stat -f --format=%T now reports the file system type,
  and tail -f uses inotify.
  wc avoids redundant processing of ASCII text in multibyte locales,
  which is especially significant on macOS.
  * * Build-related
  Adjust to glibc &gt;= 2.28  (bsc#1182550, jsc#SLE-13520, jsc#SLE-13756)
- Refresh patches (line number changes only):
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * (License): osc changed the value from "GPL-3.0+" to "GPL-3.0-or-later".
  * (build): Make sure that parse-datetime.{c,y} ends up in debuginfo (rh#1555079).
- coreutils-i18n.patch:
  * src/exand.c,src/unexpand.c: Avoid -Wcomment warning.
  * src/cut.c (cut_characters_or_cut_bytes_no_split): Change idx from size_t
    to uintmax_t type to avoid a regression on i586, armv7l and ppc.
    Compare upstream, non-MB commit:
    https://git.sv.gnu.org/cgit/coreutils.git/commit/?id=d1a754c8272
    (cut_fields_mb): Likewise for field_idx.
  * tests/misc/cut.pl: Remove downstream tweaks as upstream MB tests are
    working since a while.
- coreutils.keyring: Update Assaf Gordon's GPG public key.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1552305600">- Update to 8.31:
  * Noteworthy changes in release 8.31 (2019-03-10) [stable]
  * * Bug fixes
  'base64 a b' now correctly diagnoses 'b' as the extra operand, not 'a'.
  [bug introduced in coreutils-5.3.0]
  When B already exists, 'cp -il A B' no longer immediately fails
  after asking the user whether to proceed.
  [This bug was present in "the beginning".]
  df no longer corrupts displayed multibyte characters on macOS.
  [bug introduced with coreutils-8.18]
  seq no longer outputs inconsistent decimal point characters
  for the last number, when locales are misconfigured.
  [bug introduced in coreutils-7.0]
  shred, sort, and split no longer falsely report ftruncate errors
  when outputting to less-common file types.  For example, the shell
  command 'sort /dev/null -o /dev/stdout | cat' no longer fails with
  an "error truncating" diagnostic.
  [bug was introduced with coreutils-8.18 for sort and split, and
  (for shared memory objects only) with fileutils-4.1 for shred]
  sync no longer fails for write-only file arguments.
  [bug introduced with argument support to sync in coreutils-8.24]
  'tail -f file | filter' no longer exits immediately on AIX.
  [bug introduced in coreutils-8.28]
  'tail -f file | filter' no longer goes into an infinite loop
  if filter exits and SIGPIPE is ignored.
  [bug introduced in coreutils-8.28]
  * * Changes in behavior
  cksum, dd, hostid, hostname, link, logname, sleep, tsort, unlink,
  uptime, users, whoami, yes: now always process --help and --version options,
  regardless of any other arguments present before any optional '--'
  end-of-options marker.
  nohup now processes --help and --version as first options even if other
  parameters follow.
  'yes a -- b' now outputs 'a b' instead of including the end-of-options
  marker as before: 'a -- b'.
  echo now always processes backslash escapes when the POSIXLY_CORRECT
  environment variable is set.
  When possible 'ln A B' now merely links A to B and reports an error
  if this fails, instead of statting A and B before linking.  This
  uses fewer system calls and avoids some races.  The old statting
  approach is still used in situations where hard links to directories
  are allowed (e.g., NetBSD when superuser).
  ls --group-directories-first will also group symlinks to directories.
  'test -a FILE' is not supported anymore.  Long ago, there were concerns about
  the high probability of humans confusing the -a primary with the -a binary
  operator, so POSIX changed this to 'test -e FILE'.  Scripts using it were
  already broken and non-portable; the -a unary operator was never documented.
  wc now treats non breaking space characters as word delimiters
  unless the POSIXLY_CORRECT environment variable is set.
  * * New features
  id now supports specifying multiple users.
  'date' now supports the '+' conversion specification flag,
  introduced in POSIX.1-2017.
  printf, seq, sleep, tail, and timeout now accept floating point
  numbers in either the current or the C locale.  For example, if the
  current locale's decimal point is ',', 'sleep 0,1' and 'sleep 0.1'
  now mean the same thing.  Previously, these commands accepted only
  C-locale syntax with '.' as the decimal point.  The new behavior is
  more compatible with other implementations in non-C locales.
  test now supports the '-N FILE' unary operator (like e.g. bash) to check
  whether FILE exists and has been modified since it was last read.
  env now supports '--default-signal[=SIG]', '--ignore-signal[=SIG]', and
  '--block-signal[=SIG], to setup signal handling before executing a program.
  env now supports '--list-signal-handling' to indicate non-default
  signal handling before executing a program.
  * * New commands
  basenc is added to complement existing base64,base32 commands,
  and encodes and decodes printable text using various common encodings:
  base64,base64url,base32,base32hex,base16,base2,z85.
  * * Improvements
  ls -l now better aligns abbreviated months containing digits,
  which is common in Asian locales.
  stat and tail now know about the "sdcardfs" file system on Android.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  stat now prints file creation time when supported by the file system,
  on GNU Linux systems with glibc &gt;= 2.28 and kernel &gt;= 4.11.
- Refresh patches (line number changes only):
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-misc.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * Version: bump version.
  * URL: Use https scheme.
  * %description: Add 'basenc' tool.
  * Change gitweb to cgit URL with https in a comment.
- coreutils.keyring:
  * Update for added section headers ('GPG keys of &lt;MAINTAINER&gt;').</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="lnussel@suse.de" date="1578571200">- switch to multibuild
- add coreutils-single subpackage that contains a single binary coreutils tool
  similar to busybox
- package LC_CTIME directories also in lang package
- split off doc package
- remove info macros, handled by file trigger nowadays</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1579521600">- minor: remove obsolete comment in spec file.</changelog>
  <changelog author="lnussel@suse.de" date="1580212800">- disable single and testsuite builds in rings/staging
- remove duplicate "coreutils" in flavor to make it look nicer in OBS</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1583755200">- Update to 8.32:
  * Noteworthy changes in release 8.32 (2020-03-05) [stable]
  * * Bug fixes
  cp now copies /dev/fd/N correctly on platforms like Solaris where
  it is a character-special file whose minor device number is N.
  [bug introduced in fileutils-4.1.6]
  dd conv=fdatasync no longer reports a "Bad file descriptor" error
  when fdatasync is interrupted, and dd now retries interrupted calls
  to close, fdatasync, fstat and fsync instead of incorrectly
  reporting an "Interrupted system call" error.
  [bugs introduced in coreutils-6.0]
  df now correctly parses the /proc/self/mountinfo file for unusual entries
  like ones with '\r' in a field value ("mount -t tmpfs tmpfs /foo$'\r'bar"),
  when the source field is empty ('mount -t tmpfs "" /mnt'), and when the
  filesystem type contains characters like a blank which need escaping.
  [bugs introduced in coreutils-8.24 with the introduction of reading
  the /proc/self/mountinfo file]
  factor again outputs immediately when stdout is a tty but stdin is not.
  [bug introduced in coreutils-8.24]
  ln works again on old systems without O_DIRECTORY support (like Solaris 10),
  and on systems where symlink ("x", ".") fails with errno == EINVAL
  (like Solaris 10 and Solaris 11).
  [bug introduced in coreutils-8.31]
  rmdir --ignore-fail-on-non-empty now works correctly for directories
  that fail to be removed due to permission issues.  Previously the exit status
  was reversed, failing for non empty and succeeding for empty directories.
  [bug introduced in coreutils-6.11]
  'shuf -r -n 0 file' no longer mistakenly reads from standard input.
  [bug introduced with the --repeat feature in coreutils-8.22]
  split no longer reports a "output file suffixes exhausted" error
  when the specified number of files is evenly divisible by 10, 16, 26,
  for --numeric, --hex, or default alphabetic suffixes respectively.
  [bug introduced in coreutils-8.24]
  seq no longer prints an extra line under certain circumstances (such as
  'seq -f "%g " 1000000 1000000').
  [bug introduced in coreutils-6.10]
  * * Changes in behavior
  Several programs now check that numbers end properly.  For example,
  'du -d 1x' now reports an error instead of silently ignoring the 'x'.
  Affected programs and options include du -d, expr's numeric operands
  on non-GMP builds, install -g and -o, ls's TABSIZE environment
  variable, mknod b and c, ptx -g and -w, shuf -n, and sort --batch-size
  and --parallel.
  date now parses military time zones in accordance with common usage:
    "A" to "M"  are equivalent to UTC+1 to UTC+12
    "N" to "Y"  are equivalent to UTC-1 to UTC-12
    "Z" is "zulu" time (UTC).
  For example, 'date -d "09:00B" is now equivalent to 9am in UTC+2 time zone.
  Previously, military time zones were parsed according to the obsolete
  rfc822, with their value negated (e.g., "B" was equivalent to UTC-2).
  [The old behavior was introduced in sh-utils 2.0.15 ca. 1999, predating
  coreutils package.]
  ls issues an error message on a removed directory, on GNU/Linux systems.
  Previously no error and no entries were output, and so indistinguishable
  from an empty directory, with default ls options.
  uniq no longer uses strcoll() to determine string equivalence,
  and so will operate more efficiently and consistently.
  * * New Features
  ls now supports the --time=birth option to display and sort by
  file creation time, where available.
  od --skip-bytes now can use lseek even if the input is not a regular
  file, greatly improving performance in some cases.
  stat(1) supports a new --cached= option, used on systems with statx(2)
  to control cache coherency of file system attributes,
  useful on network file systems.
  * * Improvements
  stat and ls now use the statx() system call where available, which can
  operate more efficiently by only retrieving requested attributes.
  stat and tail now know about the "binderfs", "dma-buf-fs", "erofs",
  "ppc-cmm-fs", and "z3fold" file systems.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  * * Build-related
  gzip-compressed tarballs are distributed once again
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-getaddrinfo.patch
  * coreutils-i18n.patch
  * coreutils-invalid-ids.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils-i18n.patch:
  * uniq: remove collation handling as required by newer POSIX; see
  - https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8e81d44b5
  - https://www.austingroupbugs.net/view.php?id=963
- coreutils-ls-restore-8.31-behavior-on-removed-dirs.patch:
  * Add patch for 'ls' to restore 8.31 behavior on removed directories.
- coreutils.spec:
  * Version: bump version.
  * %check: re-enable regular 'make check' for non-multibuild package.
  * reference the above new patch.
- coreutils.keyring:
  * Update from upstream (Savannah).</changelog>
  <changelog author="dmueller@suse.com" date="1588593600">- add coreutils-use-python3.patch to minimally port away from
  python 2.x use of pyinotify in the testsuite</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1592049600">- coreutils-gnulib-disable-test-float.patch: Add patch to temporarily
  disable the gnulib test 'test-float' failing on ppc and ppc64le.
- coreutils.spec: Reference the patch.  While at it, avoid conditional
  Patch and Source entries as that break cross-platform builds from
  source RPMs.</changelog>
  <changelog author="dimstar@opensuse.org" date="1594900800">- Drop suse-module-tools BuildRequires: this was used for the macro
  regenerate_initrd_post/posttrans, which have been moved to
  rpm-config-SUSE in Jan 2019.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1598875200">- gnulib-test-avoid-FP-perror-strerror.patch: Add patch to
  avoid false-positive error in gnulib tests 'test-perror2' and
  'test-strerror_r', visible on armv7l.
- coreutils.spec: Reference the patch.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="zpetrova@suse.com" date="1635163200">- coreutils-df-fuse-portal-dummy.patch:
  df: Add "fuse.portal" as a dummy file system (used in flatpak
  implementations). (bsc#1189152)</changelog>
  <changelog author="ailiop@suse.com" date="1706529600">- tail: fix tailing sysfs files where PAGE_SIZE &gt; BUFSIZ (bsc#1219321)
  - add coreutils-tail-fix-tailing-sysfs-files-where-PAGE_SIZE-BUFSIZ.patch</changelog>
  <changelog author="tabraham@suse.com" date="1712059200">- ls: avoid triggering automounts (bsc#1221632)
  - add coreutils-ls-avoid-triggering-automounts.patch</changelog>
</package>
<package pkgid="f926e9b97d825bf362bab843b9cf5755c011aa25dbc6822394fab8413b731010" name="coreutils" arch="s390x">
  <version epoch="0" ver="8.32" rel="150400.9.6.1"/>
  <changelog author="mail@bernhard-voelker.de" date="1493726400">- coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch:
  Add upstream patch to fix an heap overflow security issue
  in date(1) and touch(1) with a large TZ variable
  (CVE-2017-7476, rh#1444774, boo#1037124).</changelog>
  <changelog author="ghe@suse.com" date="1502884800">- Drop coreutils-ocfs2_reflinks.patch
  OCFS2 file system has supported file clone ioctls like btrfs,
  then, coreutils doesn't need this patch from the kernel v4.10-rc1</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1504526400">- Update to 8.28
  (for details see included NEWS file)
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.keyring: Update from upstream (Savannah).
- Remove now-upstream patches:
  * coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch
  * coreutils-tests-port-to-timezone-2017a.patch
- coreutils.spec: Add "BuildRequires: user(bin)" for the tests.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1514462400">- Update to 8.29:
  * Noteworthy changes in release 8.29 (2017-12-27) [stable]
  * * Bug fixes
  b2sum no longer crashes when processing certain truncated check files.
  [bug introduced with b2sum coreutils-8.26]
  dd now ensures the correct cache ranges are specified for the "nocache"
  and "direct" flags.  Previously some pages in the page cache were not
  invalidated.  [bug introduced for "direct" in coreutils-7.5,
  and with the "nocache" implementation in coreutils-8.11]
  df no longer hangs when given a fifo argument.
  [bug introduced in coreutils-7.3]
  ptx -S no longer infloops for a pattern which returns zero-length matches.
  [the bug dates back to the initial implementation]
  shred --remove will again repeatedly rename files with shortening names
  to attempt to hide the original length of the file name.
  [bug introduced in coreutils-8.28]
  stty no longer crashes when processing settings with -F also specified.
  [bug introduced in fileutils-4.0]
  tail --bytes again supports non seekable inputs on all systems.
  On systems like android it always tried to process as seekable inputs.
  [bug introduced in coreutils-8.24]
  timeout will again notice its managed command exiting, even when
  invoked with blocked CHLD signal, or in a narrow window where
  this CHLD signal from the exiting child was missed.  In each case
  timeout would have then waited for the time limit to expire.
  [bug introduced in coreutils-8.27]
  * * New features
  timeout now supports the --verbose option to diagnose forced termination.
  * * Improvements
  dd now supports iflag=direct with arbitrary sized files on all file systems.
  tail --bytes=NUM will efficiently seek to the end of block devices,
  rather than reading from the start.
  Utilities which do not support long options (other than the default --help
  and --version), e.g. cksum and sleep, now use more consistent error diagnostic
  for unknown long options.
  * * Build-related
  Default man pages are now distributed which are used if perl is
  not available on the build system, or when cross compiling.
- Refresh patches (line number changes only):
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1530619200">- Update to 8.30:
  * Noteworthy changes in release 8.30 (2018-07-01) [stable]
  * * Bug fixes
  'cp --symlink SRC DST' will again correctly validate DST.
  If DST is a regular file and SRC is a symlink to DST,
  then cp will no longer allow that operation to clobber DST.
  Also with -d, if DST is a symlink, then it can always be replaced,
  even if it points to SRC on a separate device.
  [bugs introduced with coreutils-8.27]
  'cp -n -u' and 'mv -n -u' now consistently ignore the -u option.
  Previously, this option combination suffered from race conditions
  that caused -u to sometimes override -n.
  [bug introduced with coreutils-7.1]
  'cp -a --no-preserve=mode' now sets appropriate default permissions
  for non regular files like fifos and character device nodes etc.,
  and leaves mode bits of existing files unchanged.
  Previously it would have set executable bits on created special files,
  and set mode bits for existing files as if they had been created.
  [bug introduced with coreutils-8.20]
  'cp --remove-destination file symlink' now removes the symlink
  even if it can't be traversed.
  [bug introduced with --remove-destination in fileutils-4.1.1]
  ls no longer truncates the abbreviated month names that have a
  display width between 6 and 12 inclusive.  Previously this would have
  output ambiguous months for Arabic or Catalan locales.
  'ls -aA' is now equivalent to 'ls -A', since -A now overrides -a.
  [bug introduced in coreutils-5.3.0]
  'mv -n A B' no longer suffers from a race condition that can
  overwrite a simultaneously-created B.  This bug fix requires
  platform support for the renameat2 or renameatx_np syscalls, found
  in recent Linux and macOS kernels.  As a side effect, ‘mv -n A A’
  now silently does nothing if A exists.
  [bug introduced with coreutils-7.1]
  * * Changes in behavior
  'cp --force file symlink' now removes the symlink even if
  it is self referential.
  ls --color now matches file extensions case insensitively.
  * * New features
  cp --reflink now supports --reflink=never to enforce a standard copy.
  env supports a new -v/--debug option to show verbose information about
  each processing step.
  env supports a new -S/--split-string=S option to split a single argument
  string into multiple arguments. Used to pass multiple arguments in scripts
  (shebang lines).
  md5sum accepts a new option: --zero (-z) to delimit the output lines with a
  NUL instead of a newline character.  This also disables file name escaping.
  This also applies to sha*sum and b2sum.
  rm --preserve-root now supports the --preserve-root=all option to
  reject any command line argument that is mounted to a separate file system.
  * * Improvements
  cut supports line lengths up to the max file size on 32 bit systems.
  Previously only offsets up to SIZE_MAX-1 were supported.
  stat and tail now know about the "exfs" file system, which is a
  version of XFS.  stat -f --format=%T now reports the file system type,
  and tail -f uses inotify.
  wc avoids redundant processing of ASCII text in multibyte locales,
  which is especially significant on macOS.
  * * Build-related
  Adjust to glibc &gt;= 2.28  (bsc#1182550, jsc#SLE-13520, jsc#SLE-13756)
- Refresh patches (line number changes only):
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * (License): osc changed the value from "GPL-3.0+" to "GPL-3.0-or-later".
  * (build): Make sure that parse-datetime.{c,y} ends up in debuginfo (rh#1555079).
- coreutils-i18n.patch:
  * src/exand.c,src/unexpand.c: Avoid -Wcomment warning.
  * src/cut.c (cut_characters_or_cut_bytes_no_split): Change idx from size_t
    to uintmax_t type to avoid a regression on i586, armv7l and ppc.
    Compare upstream, non-MB commit:
    https://git.sv.gnu.org/cgit/coreutils.git/commit/?id=d1a754c8272
    (cut_fields_mb): Likewise for field_idx.
  * tests/misc/cut.pl: Remove downstream tweaks as upstream MB tests are
    working since a while.
- coreutils.keyring: Update Assaf Gordon's GPG public key.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1552305600">- Update to 8.31:
  * Noteworthy changes in release 8.31 (2019-03-10) [stable]
  * * Bug fixes
  'base64 a b' now correctly diagnoses 'b' as the extra operand, not 'a'.
  [bug introduced in coreutils-5.3.0]
  When B already exists, 'cp -il A B' no longer immediately fails
  after asking the user whether to proceed.
  [This bug was present in "the beginning".]
  df no longer corrupts displayed multibyte characters on macOS.
  [bug introduced with coreutils-8.18]
  seq no longer outputs inconsistent decimal point characters
  for the last number, when locales are misconfigured.
  [bug introduced in coreutils-7.0]
  shred, sort, and split no longer falsely report ftruncate errors
  when outputting to less-common file types.  For example, the shell
  command 'sort /dev/null -o /dev/stdout | cat' no longer fails with
  an "error truncating" diagnostic.
  [bug was introduced with coreutils-8.18 for sort and split, and
  (for shared memory objects only) with fileutils-4.1 for shred]
  sync no longer fails for write-only file arguments.
  [bug introduced with argument support to sync in coreutils-8.24]
  'tail -f file | filter' no longer exits immediately on AIX.
  [bug introduced in coreutils-8.28]
  'tail -f file | filter' no longer goes into an infinite loop
  if filter exits and SIGPIPE is ignored.
  [bug introduced in coreutils-8.28]
  * * Changes in behavior
  cksum, dd, hostid, hostname, link, logname, sleep, tsort, unlink,
  uptime, users, whoami, yes: now always process --help and --version options,
  regardless of any other arguments present before any optional '--'
  end-of-options marker.
  nohup now processes --help and --version as first options even if other
  parameters follow.
  'yes a -- b' now outputs 'a b' instead of including the end-of-options
  marker as before: 'a -- b'.
  echo now always processes backslash escapes when the POSIXLY_CORRECT
  environment variable is set.
  When possible 'ln A B' now merely links A to B and reports an error
  if this fails, instead of statting A and B before linking.  This
  uses fewer system calls and avoids some races.  The old statting
  approach is still used in situations where hard links to directories
  are allowed (e.g., NetBSD when superuser).
  ls --group-directories-first will also group symlinks to directories.
  'test -a FILE' is not supported anymore.  Long ago, there were concerns about
  the high probability of humans confusing the -a primary with the -a binary
  operator, so POSIX changed this to 'test -e FILE'.  Scripts using it were
  already broken and non-portable; the -a unary operator was never documented.
  wc now treats non breaking space characters as word delimiters
  unless the POSIXLY_CORRECT environment variable is set.
  * * New features
  id now supports specifying multiple users.
  'date' now supports the '+' conversion specification flag,
  introduced in POSIX.1-2017.
  printf, seq, sleep, tail, and timeout now accept floating point
  numbers in either the current or the C locale.  For example, if the
  current locale's decimal point is ',', 'sleep 0,1' and 'sleep 0.1'
  now mean the same thing.  Previously, these commands accepted only
  C-locale syntax with '.' as the decimal point.  The new behavior is
  more compatible with other implementations in non-C locales.
  test now supports the '-N FILE' unary operator (like e.g. bash) to check
  whether FILE exists and has been modified since it was last read.
  env now supports '--default-signal[=SIG]', '--ignore-signal[=SIG]', and
  '--block-signal[=SIG], to setup signal handling before executing a program.
  env now supports '--list-signal-handling' to indicate non-default
  signal handling before executing a program.
  * * New commands
  basenc is added to complement existing base64,base32 commands,
  and encodes and decodes printable text using various common encodings:
  base64,base64url,base32,base32hex,base16,base2,z85.
  * * Improvements
  ls -l now better aligns abbreviated months containing digits,
  which is common in Asian locales.
  stat and tail now know about the "sdcardfs" file system on Android.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  stat now prints file creation time when supported by the file system,
  on GNU Linux systems with glibc &gt;= 2.28 and kernel &gt;= 4.11.
- Refresh patches (line number changes only):
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-misc.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * Version: bump version.
  * URL: Use https scheme.
  * %description: Add 'basenc' tool.
  * Change gitweb to cgit URL with https in a comment.
- coreutils.keyring:
  * Update for added section headers ('GPG keys of &lt;MAINTAINER&gt;').</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="lnussel@suse.de" date="1578571200">- switch to multibuild
- add coreutils-single subpackage that contains a single binary coreutils tool
  similar to busybox
- package LC_CTIME directories also in lang package
- split off doc package
- remove info macros, handled by file trigger nowadays</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1579521600">- minor: remove obsolete comment in spec file.</changelog>
  <changelog author="lnussel@suse.de" date="1580212800">- disable single and testsuite builds in rings/staging
- remove duplicate "coreutils" in flavor to make it look nicer in OBS</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1583755200">- Update to 8.32:
  * Noteworthy changes in release 8.32 (2020-03-05) [stable]
  * * Bug fixes
  cp now copies /dev/fd/N correctly on platforms like Solaris where
  it is a character-special file whose minor device number is N.
  [bug introduced in fileutils-4.1.6]
  dd conv=fdatasync no longer reports a "Bad file descriptor" error
  when fdatasync is interrupted, and dd now retries interrupted calls
  to close, fdatasync, fstat and fsync instead of incorrectly
  reporting an "Interrupted system call" error.
  [bugs introduced in coreutils-6.0]
  df now correctly parses the /proc/self/mountinfo file for unusual entries
  like ones with '\r' in a field value ("mount -t tmpfs tmpfs /foo$'\r'bar"),
  when the source field is empty ('mount -t tmpfs "" /mnt'), and when the
  filesystem type contains characters like a blank which need escaping.
  [bugs introduced in coreutils-8.24 with the introduction of reading
  the /proc/self/mountinfo file]
  factor again outputs immediately when stdout is a tty but stdin is not.
  [bug introduced in coreutils-8.24]
  ln works again on old systems without O_DIRECTORY support (like Solaris 10),
  and on systems where symlink ("x", ".") fails with errno == EINVAL
  (like Solaris 10 and Solaris 11).
  [bug introduced in coreutils-8.31]
  rmdir --ignore-fail-on-non-empty now works correctly for directories
  that fail to be removed due to permission issues.  Previously the exit status
  was reversed, failing for non empty and succeeding for empty directories.
  [bug introduced in coreutils-6.11]
  'shuf -r -n 0 file' no longer mistakenly reads from standard input.
  [bug introduced with the --repeat feature in coreutils-8.22]
  split no longer reports a "output file suffixes exhausted" error
  when the specified number of files is evenly divisible by 10, 16, 26,
  for --numeric, --hex, or default alphabetic suffixes respectively.
  [bug introduced in coreutils-8.24]
  seq no longer prints an extra line under certain circumstances (such as
  'seq -f "%g " 1000000 1000000').
  [bug introduced in coreutils-6.10]
  * * Changes in behavior
  Several programs now check that numbers end properly.  For example,
  'du -d 1x' now reports an error instead of silently ignoring the 'x'.
  Affected programs and options include du -d, expr's numeric operands
  on non-GMP builds, install -g and -o, ls's TABSIZE environment
  variable, mknod b and c, ptx -g and -w, shuf -n, and sort --batch-size
  and --parallel.
  date now parses military time zones in accordance with common usage:
    "A" to "M"  are equivalent to UTC+1 to UTC+12
    "N" to "Y"  are equivalent to UTC-1 to UTC-12
    "Z" is "zulu" time (UTC).
  For example, 'date -d "09:00B" is now equivalent to 9am in UTC+2 time zone.
  Previously, military time zones were parsed according to the obsolete
  rfc822, with their value negated (e.g., "B" was equivalent to UTC-2).
  [The old behavior was introduced in sh-utils 2.0.15 ca. 1999, predating
  coreutils package.]
  ls issues an error message on a removed directory, on GNU/Linux systems.
  Previously no error and no entries were output, and so indistinguishable
  from an empty directory, with default ls options.
  uniq no longer uses strcoll() to determine string equivalence,
  and so will operate more efficiently and consistently.
  * * New Features
  ls now supports the --time=birth option to display and sort by
  file creation time, where available.
  od --skip-bytes now can use lseek even if the input is not a regular
  file, greatly improving performance in some cases.
  stat(1) supports a new --cached= option, used on systems with statx(2)
  to control cache coherency of file system attributes,
  useful on network file systems.
  * * Improvements
  stat and ls now use the statx() system call where available, which can
  operate more efficiently by only retrieving requested attributes.
  stat and tail now know about the "binderfs", "dma-buf-fs", "erofs",
  "ppc-cmm-fs", and "z3fold" file systems.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  * * Build-related
  gzip-compressed tarballs are distributed once again
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-getaddrinfo.patch
  * coreutils-i18n.patch
  * coreutils-invalid-ids.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils-i18n.patch:
  * uniq: remove collation handling as required by newer POSIX; see
  - https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8e81d44b5
  - https://www.austingroupbugs.net/view.php?id=963
- coreutils-ls-restore-8.31-behavior-on-removed-dirs.patch:
  * Add patch for 'ls' to restore 8.31 behavior on removed directories.
- coreutils.spec:
  * Version: bump version.
  * %check: re-enable regular 'make check' for non-multibuild package.
  * reference the above new patch.
- coreutils.keyring:
  * Update from upstream (Savannah).</changelog>
  <changelog author="dmueller@suse.com" date="1588593600">- add coreutils-use-python3.patch to minimally port away from
  python 2.x use of pyinotify in the testsuite</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1592049600">- coreutils-gnulib-disable-test-float.patch: Add patch to temporarily
  disable the gnulib test 'test-float' failing on ppc and ppc64le.
- coreutils.spec: Reference the patch.  While at it, avoid conditional
  Patch and Source entries as that break cross-platform builds from
  source RPMs.</changelog>
  <changelog author="dimstar@opensuse.org" date="1594900800">- Drop suse-module-tools BuildRequires: this was used for the macro
  regenerate_initrd_post/posttrans, which have been moved to
  rpm-config-SUSE in Jan 2019.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1598875200">- gnulib-test-avoid-FP-perror-strerror.patch: Add patch to
  avoid false-positive error in gnulib tests 'test-perror2' and
  'test-strerror_r', visible on armv7l.
- coreutils.spec: Reference the patch.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="zpetrova@suse.com" date="1635163200">- coreutils-df-fuse-portal-dummy.patch:
  df: Add "fuse.portal" as a dummy file system (used in flatpak
  implementations). (bsc#1189152)</changelog>
  <changelog author="ailiop@suse.com" date="1706529600">- tail: fix tailing sysfs files where PAGE_SIZE &gt; BUFSIZ (bsc#1219321)
  - add coreutils-tail-fix-tailing-sysfs-files-where-PAGE_SIZE-BUFSIZ.patch</changelog>
  <changelog author="tabraham@suse.com" date="1712059200">- ls: avoid triggering automounts (bsc#1221632)
  - add coreutils-ls-avoid-triggering-automounts.patch</changelog>
</package>
<package pkgid="f81cc4e0f5ea5f5de70095456a020b275b59c0161cf4644e9a889361e5e17290" name="coreutils" arch="src">
  <version epoch="0" ver="8.32" rel="150400.9.6.1"/>
  <changelog author="mail@bernhard-voelker.de" date="1493726400">- coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch:
  Add upstream patch to fix an heap overflow security issue
  in date(1) and touch(1) with a large TZ variable
  (CVE-2017-7476, rh#1444774, boo#1037124).</changelog>
  <changelog author="ghe@suse.com" date="1502884800">- Drop coreutils-ocfs2_reflinks.patch
  OCFS2 file system has supported file clone ioctls like btrfs,
  then, coreutils doesn't need this patch from the kernel v4.10-rc1</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1504526400">- Update to 8.28
  (for details see included NEWS file)
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.keyring: Update from upstream (Savannah).
- Remove now-upstream patches:
  * coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch
  * coreutils-tests-port-to-timezone-2017a.patch
- coreutils.spec: Add "BuildRequires: user(bin)" for the tests.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1514462400">- Update to 8.29:
  * Noteworthy changes in release 8.29 (2017-12-27) [stable]
  * * Bug fixes
  b2sum no longer crashes when processing certain truncated check files.
  [bug introduced with b2sum coreutils-8.26]
  dd now ensures the correct cache ranges are specified for the "nocache"
  and "direct" flags.  Previously some pages in the page cache were not
  invalidated.  [bug introduced for "direct" in coreutils-7.5,
  and with the "nocache" implementation in coreutils-8.11]
  df no longer hangs when given a fifo argument.
  [bug introduced in coreutils-7.3]
  ptx -S no longer infloops for a pattern which returns zero-length matches.
  [the bug dates back to the initial implementation]
  shred --remove will again repeatedly rename files with shortening names
  to attempt to hide the original length of the file name.
  [bug introduced in coreutils-8.28]
  stty no longer crashes when processing settings with -F also specified.
  [bug introduced in fileutils-4.0]
  tail --bytes again supports non seekable inputs on all systems.
  On systems like android it always tried to process as seekable inputs.
  [bug introduced in coreutils-8.24]
  timeout will again notice its managed command exiting, even when
  invoked with blocked CHLD signal, or in a narrow window where
  this CHLD signal from the exiting child was missed.  In each case
  timeout would have then waited for the time limit to expire.
  [bug introduced in coreutils-8.27]
  * * New features
  timeout now supports the --verbose option to diagnose forced termination.
  * * Improvements
  dd now supports iflag=direct with arbitrary sized files on all file systems.
  tail --bytes=NUM will efficiently seek to the end of block devices,
  rather than reading from the start.
  Utilities which do not support long options (other than the default --help
  and --version), e.g. cksum and sleep, now use more consistent error diagnostic
  for unknown long options.
  * * Build-related
  Default man pages are now distributed which are used if perl is
  not available on the build system, or when cross compiling.
- Refresh patches (line number changes only):
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1530619200">- Update to 8.30:
  * Noteworthy changes in release 8.30 (2018-07-01) [stable]
  * * Bug fixes
  'cp --symlink SRC DST' will again correctly validate DST.
  If DST is a regular file and SRC is a symlink to DST,
  then cp will no longer allow that operation to clobber DST.
  Also with -d, if DST is a symlink, then it can always be replaced,
  even if it points to SRC on a separate device.
  [bugs introduced with coreutils-8.27]
  'cp -n -u' and 'mv -n -u' now consistently ignore the -u option.
  Previously, this option combination suffered from race conditions
  that caused -u to sometimes override -n.
  [bug introduced with coreutils-7.1]
  'cp -a --no-preserve=mode' now sets appropriate default permissions
  for non regular files like fifos and character device nodes etc.,
  and leaves mode bits of existing files unchanged.
  Previously it would have set executable bits on created special files,
  and set mode bits for existing files as if they had been created.
  [bug introduced with coreutils-8.20]
  'cp --remove-destination file symlink' now removes the symlink
  even if it can't be traversed.
  [bug introduced with --remove-destination in fileutils-4.1.1]
  ls no longer truncates the abbreviated month names that have a
  display width between 6 and 12 inclusive.  Previously this would have
  output ambiguous months for Arabic or Catalan locales.
  'ls -aA' is now equivalent to 'ls -A', since -A now overrides -a.
  [bug introduced in coreutils-5.3.0]
  'mv -n A B' no longer suffers from a race condition that can
  overwrite a simultaneously-created B.  This bug fix requires
  platform support for the renameat2 or renameatx_np syscalls, found
  in recent Linux and macOS kernels.  As a side effect, ‘mv -n A A’
  now silently does nothing if A exists.
  [bug introduced with coreutils-7.1]
  * * Changes in behavior
  'cp --force file symlink' now removes the symlink even if
  it is self referential.
  ls --color now matches file extensions case insensitively.
  * * New features
  cp --reflink now supports --reflink=never to enforce a standard copy.
  env supports a new -v/--debug option to show verbose information about
  each processing step.
  env supports a new -S/--split-string=S option to split a single argument
  string into multiple arguments. Used to pass multiple arguments in scripts
  (shebang lines).
  md5sum accepts a new option: --zero (-z) to delimit the output lines with a
  NUL instead of a newline character.  This also disables file name escaping.
  This also applies to sha*sum and b2sum.
  rm --preserve-root now supports the --preserve-root=all option to
  reject any command line argument that is mounted to a separate file system.
  * * Improvements
  cut supports line lengths up to the max file size on 32 bit systems.
  Previously only offsets up to SIZE_MAX-1 were supported.
  stat and tail now know about the "exfs" file system, which is a
  version of XFS.  stat -f --format=%T now reports the file system type,
  and tail -f uses inotify.
  wc avoids redundant processing of ASCII text in multibyte locales,
  which is especially significant on macOS.
  * * Build-related
  Adjust to glibc &gt;= 2.28  (bsc#1182550, jsc#SLE-13520, jsc#SLE-13756)
- Refresh patches (line number changes only):
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * (License): osc changed the value from "GPL-3.0+" to "GPL-3.0-or-later".
  * (build): Make sure that parse-datetime.{c,y} ends up in debuginfo (rh#1555079).
- coreutils-i18n.patch:
  * src/exand.c,src/unexpand.c: Avoid -Wcomment warning.
  * src/cut.c (cut_characters_or_cut_bytes_no_split): Change idx from size_t
    to uintmax_t type to avoid a regression on i586, armv7l and ppc.
    Compare upstream, non-MB commit:
    https://git.sv.gnu.org/cgit/coreutils.git/commit/?id=d1a754c8272
    (cut_fields_mb): Likewise for field_idx.
  * tests/misc/cut.pl: Remove downstream tweaks as upstream MB tests are
    working since a while.
- coreutils.keyring: Update Assaf Gordon's GPG public key.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1552305600">- Update to 8.31:
  * Noteworthy changes in release 8.31 (2019-03-10) [stable]
  * * Bug fixes
  'base64 a b' now correctly diagnoses 'b' as the extra operand, not 'a'.
  [bug introduced in coreutils-5.3.0]
  When B already exists, 'cp -il A B' no longer immediately fails
  after asking the user whether to proceed.
  [This bug was present in "the beginning".]
  df no longer corrupts displayed multibyte characters on macOS.
  [bug introduced with coreutils-8.18]
  seq no longer outputs inconsistent decimal point characters
  for the last number, when locales are misconfigured.
  [bug introduced in coreutils-7.0]
  shred, sort, and split no longer falsely report ftruncate errors
  when outputting to less-common file types.  For example, the shell
  command 'sort /dev/null -o /dev/stdout | cat' no longer fails with
  an "error truncating" diagnostic.
  [bug was introduced with coreutils-8.18 for sort and split, and
  (for shared memory objects only) with fileutils-4.1 for shred]
  sync no longer fails for write-only file arguments.
  [bug introduced with argument support to sync in coreutils-8.24]
  'tail -f file | filter' no longer exits immediately on AIX.
  [bug introduced in coreutils-8.28]
  'tail -f file | filter' no longer goes into an infinite loop
  if filter exits and SIGPIPE is ignored.
  [bug introduced in coreutils-8.28]
  * * Changes in behavior
  cksum, dd, hostid, hostname, link, logname, sleep, tsort, unlink,
  uptime, users, whoami, yes: now always process --help and --version options,
  regardless of any other arguments present before any optional '--'
  end-of-options marker.
  nohup now processes --help and --version as first options even if other
  parameters follow.
  'yes a -- b' now outputs 'a b' instead of including the end-of-options
  marker as before: 'a -- b'.
  echo now always processes backslash escapes when the POSIXLY_CORRECT
  environment variable is set.
  When possible 'ln A B' now merely links A to B and reports an error
  if this fails, instead of statting A and B before linking.  This
  uses fewer system calls and avoids some races.  The old statting
  approach is still used in situations where hard links to directories
  are allowed (e.g., NetBSD when superuser).
  ls --group-directories-first will also group symlinks to directories.
  'test -a FILE' is not supported anymore.  Long ago, there were concerns about
  the high probability of humans confusing the -a primary with the -a binary
  operator, so POSIX changed this to 'test -e FILE'.  Scripts using it were
  already broken and non-portable; the -a unary operator was never documented.
  wc now treats non breaking space characters as word delimiters
  unless the POSIXLY_CORRECT environment variable is set.
  * * New features
  id now supports specifying multiple users.
  'date' now supports the '+' conversion specification flag,
  introduced in POSIX.1-2017.
  printf, seq, sleep, tail, and timeout now accept floating point
  numbers in either the current or the C locale.  For example, if the
  current locale's decimal point is ',', 'sleep 0,1' and 'sleep 0.1'
  now mean the same thing.  Previously, these commands accepted only
  C-locale syntax with '.' as the decimal point.  The new behavior is
  more compatible with other implementations in non-C locales.
  test now supports the '-N FILE' unary operator (like e.g. bash) to check
  whether FILE exists and has been modified since it was last read.
  env now supports '--default-signal[=SIG]', '--ignore-signal[=SIG]', and
  '--block-signal[=SIG], to setup signal handling before executing a program.
  env now supports '--list-signal-handling' to indicate non-default
  signal handling before executing a program.
  * * New commands
  basenc is added to complement existing base64,base32 commands,
  and encodes and decodes printable text using various common encodings:
  base64,base64url,base32,base32hex,base16,base2,z85.
  * * Improvements
  ls -l now better aligns abbreviated months containing digits,
  which is common in Asian locales.
  stat and tail now know about the "sdcardfs" file system on Android.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  stat now prints file creation time when supported by the file system,
  on GNU Linux systems with glibc &gt;= 2.28 and kernel &gt;= 4.11.
- Refresh patches (line number changes only):
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-misc.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * Version: bump version.
  * URL: Use https scheme.
  * %description: Add 'basenc' tool.
  * Change gitweb to cgit URL with https in a comment.
- coreutils.keyring:
  * Update for added section headers ('GPG keys of &lt;MAINTAINER&gt;').</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="lnussel@suse.de" date="1578571200">- switch to multibuild
- add coreutils-single subpackage that contains a single binary coreutils tool
  similar to busybox
- package LC_CTIME directories also in lang package
- split off doc package
- remove info macros, handled by file trigger nowadays</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1579521600">- minor: remove obsolete comment in spec file.</changelog>
  <changelog author="lnussel@suse.de" date="1580212800">- disable single and testsuite builds in rings/staging
- remove duplicate "coreutils" in flavor to make it look nicer in OBS</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1583755200">- Update to 8.32:
  * Noteworthy changes in release 8.32 (2020-03-05) [stable]
  * * Bug fixes
  cp now copies /dev/fd/N correctly on platforms like Solaris where
  it is a character-special file whose minor device number is N.
  [bug introduced in fileutils-4.1.6]
  dd conv=fdatasync no longer reports a "Bad file descriptor" error
  when fdatasync is interrupted, and dd now retries interrupted calls
  to close, fdatasync, fstat and fsync instead of incorrectly
  reporting an "Interrupted system call" error.
  [bugs introduced in coreutils-6.0]
  df now correctly parses the /proc/self/mountinfo file for unusual entries
  like ones with '\r' in a field value ("mount -t tmpfs tmpfs /foo$'\r'bar"),
  when the source field is empty ('mount -t tmpfs "" /mnt'), and when the
  filesystem type contains characters like a blank which need escaping.
  [bugs introduced in coreutils-8.24 with the introduction of reading
  the /proc/self/mountinfo file]
  factor again outputs immediately when stdout is a tty but stdin is not.
  [bug introduced in coreutils-8.24]
  ln works again on old systems without O_DIRECTORY support (like Solaris 10),
  and on systems where symlink ("x", ".") fails with errno == EINVAL
  (like Solaris 10 and Solaris 11).
  [bug introduced in coreutils-8.31]
  rmdir --ignore-fail-on-non-empty now works correctly for directories
  that fail to be removed due to permission issues.  Previously the exit status
  was reversed, failing for non empty and succeeding for empty directories.
  [bug introduced in coreutils-6.11]
  'shuf -r -n 0 file' no longer mistakenly reads from standard input.
  [bug introduced with the --repeat feature in coreutils-8.22]
  split no longer reports a "output file suffixes exhausted" error
  when the specified number of files is evenly divisible by 10, 16, 26,
  for --numeric, --hex, or default alphabetic suffixes respectively.
  [bug introduced in coreutils-8.24]
  seq no longer prints an extra line under certain circumstances (such as
  'seq -f "%g " 1000000 1000000').
  [bug introduced in coreutils-6.10]
  * * Changes in behavior
  Several programs now check that numbers end properly.  For example,
  'du -d 1x' now reports an error instead of silently ignoring the 'x'.
  Affected programs and options include du -d, expr's numeric operands
  on non-GMP builds, install -g and -o, ls's TABSIZE environment
  variable, mknod b and c, ptx -g and -w, shuf -n, and sort --batch-size
  and --parallel.
  date now parses military time zones in accordance with common usage:
    "A" to "M"  are equivalent to UTC+1 to UTC+12
    "N" to "Y"  are equivalent to UTC-1 to UTC-12
    "Z" is "zulu" time (UTC).
  For example, 'date -d "09:00B" is now equivalent to 9am in UTC+2 time zone.
  Previously, military time zones were parsed according to the obsolete
  rfc822, with their value negated (e.g., "B" was equivalent to UTC-2).
  [The old behavior was introduced in sh-utils 2.0.15 ca. 1999, predating
  coreutils package.]
  ls issues an error message on a removed directory, on GNU/Linux systems.
  Previously no error and no entries were output, and so indistinguishable
  from an empty directory, with default ls options.
  uniq no longer uses strcoll() to determine string equivalence,
  and so will operate more efficiently and consistently.
  * * New Features
  ls now supports the --time=birth option to display and sort by
  file creation time, where available.
  od --skip-bytes now can use lseek even if the input is not a regular
  file, greatly improving performance in some cases.
  stat(1) supports a new --cached= option, used on systems with statx(2)
  to control cache coherency of file system attributes,
  useful on network file systems.
  * * Improvements
  stat and ls now use the statx() system call where available, which can
  operate more efficiently by only retrieving requested attributes.
  stat and tail now know about the "binderfs", "dma-buf-fs", "erofs",
  "ppc-cmm-fs", and "z3fold" file systems.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  * * Build-related
  gzip-compressed tarballs are distributed once again
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-getaddrinfo.patch
  * coreutils-i18n.patch
  * coreutils-invalid-ids.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils-i18n.patch:
  * uniq: remove collation handling as required by newer POSIX; see
  - https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8e81d44b5
  - https://www.austingroupbugs.net/view.php?id=963
- coreutils-ls-restore-8.31-behavior-on-removed-dirs.patch:
  * Add patch for 'ls' to restore 8.31 behavior on removed directories.
- coreutils.spec:
  * Version: bump version.
  * %check: re-enable regular 'make check' for non-multibuild package.
  * reference the above new patch.
- coreutils.keyring:
  * Update from upstream (Savannah).</changelog>
  <changelog author="dmueller@suse.com" date="1588593600">- add coreutils-use-python3.patch to minimally port away from
  python 2.x use of pyinotify in the testsuite</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1592049600">- coreutils-gnulib-disable-test-float.patch: Add patch to temporarily
  disable the gnulib test 'test-float' failing on ppc and ppc64le.
- coreutils.spec: Reference the patch.  While at it, avoid conditional
  Patch and Source entries as that break cross-platform builds from
  source RPMs.</changelog>
  <changelog author="dimstar@opensuse.org" date="1594900800">- Drop suse-module-tools BuildRequires: this was used for the macro
  regenerate_initrd_post/posttrans, which have been moved to
  rpm-config-SUSE in Jan 2019.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1598875200">- gnulib-test-avoid-FP-perror-strerror.patch: Add patch to
  avoid false-positive error in gnulib tests 'test-perror2' and
  'test-strerror_r', visible on armv7l.
- coreutils.spec: Reference the patch.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="zpetrova@suse.com" date="1635163200">- coreutils-df-fuse-portal-dummy.patch:
  df: Add "fuse.portal" as a dummy file system (used in flatpak
  implementations). (bsc#1189152)</changelog>
  <changelog author="ailiop@suse.com" date="1706529600">- tail: fix tailing sysfs files where PAGE_SIZE &gt; BUFSIZ (bsc#1219321)
  - add coreutils-tail-fix-tailing-sysfs-files-where-PAGE_SIZE-BUFSIZ.patch</changelog>
  <changelog author="tabraham@suse.com" date="1712059200">- ls: avoid triggering automounts (bsc#1221632)
  - add coreutils-ls-avoid-triggering-automounts.patch</changelog>
</package>
<package pkgid="e22285e41ab6361c1368ecbacea6be3ca9fae0947af4abebf73d5a876c47693d" name="coreutils" arch="x86_64">
  <version epoch="0" ver="8.32" rel="150400.9.6.1"/>
  <changelog author="mail@bernhard-voelker.de" date="1493726400">- coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch:
  Add upstream patch to fix an heap overflow security issue
  in date(1) and touch(1) with a large TZ variable
  (CVE-2017-7476, rh#1444774, boo#1037124).</changelog>
  <changelog author="ghe@suse.com" date="1502884800">- Drop coreutils-ocfs2_reflinks.patch
  OCFS2 file system has supported file clone ioctls like btrfs,
  then, coreutils doesn't need this patch from the kernel v4.10-rc1</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1504526400">- Update to 8.28
  (for details see included NEWS file)
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.keyring: Update from upstream (Savannah).
- Remove now-upstream patches:
  * coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch
  * coreutils-tests-port-to-timezone-2017a.patch
- coreutils.spec: Add "BuildRequires: user(bin)" for the tests.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1514462400">- Update to 8.29:
  * Noteworthy changes in release 8.29 (2017-12-27) [stable]
  * * Bug fixes
  b2sum no longer crashes when processing certain truncated check files.
  [bug introduced with b2sum coreutils-8.26]
  dd now ensures the correct cache ranges are specified for the "nocache"
  and "direct" flags.  Previously some pages in the page cache were not
  invalidated.  [bug introduced for "direct" in coreutils-7.5,
  and with the "nocache" implementation in coreutils-8.11]
  df no longer hangs when given a fifo argument.
  [bug introduced in coreutils-7.3]
  ptx -S no longer infloops for a pattern which returns zero-length matches.
  [the bug dates back to the initial implementation]
  shred --remove will again repeatedly rename files with shortening names
  to attempt to hide the original length of the file name.
  [bug introduced in coreutils-8.28]
  stty no longer crashes when processing settings with -F also specified.
  [bug introduced in fileutils-4.0]
  tail --bytes again supports non seekable inputs on all systems.
  On systems like android it always tried to process as seekable inputs.
  [bug introduced in coreutils-8.24]
  timeout will again notice its managed command exiting, even when
  invoked with blocked CHLD signal, or in a narrow window where
  this CHLD signal from the exiting child was missed.  In each case
  timeout would have then waited for the time limit to expire.
  [bug introduced in coreutils-8.27]
  * * New features
  timeout now supports the --verbose option to diagnose forced termination.
  * * Improvements
  dd now supports iflag=direct with arbitrary sized files on all file systems.
  tail --bytes=NUM will efficiently seek to the end of block devices,
  rather than reading from the start.
  Utilities which do not support long options (other than the default --help
  and --version), e.g. cksum and sleep, now use more consistent error diagnostic
  for unknown long options.
  * * Build-related
  Default man pages are now distributed which are used if perl is
  not available on the build system, or when cross compiling.
- Refresh patches (line number changes only):
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1530619200">- Update to 8.30:
  * Noteworthy changes in release 8.30 (2018-07-01) [stable]
  * * Bug fixes
  'cp --symlink SRC DST' will again correctly validate DST.
  If DST is a regular file and SRC is a symlink to DST,
  then cp will no longer allow that operation to clobber DST.
  Also with -d, if DST is a symlink, then it can always be replaced,
  even if it points to SRC on a separate device.
  [bugs introduced with coreutils-8.27]
  'cp -n -u' and 'mv -n -u' now consistently ignore the -u option.
  Previously, this option combination suffered from race conditions
  that caused -u to sometimes override -n.
  [bug introduced with coreutils-7.1]
  'cp -a --no-preserve=mode' now sets appropriate default permissions
  for non regular files like fifos and character device nodes etc.,
  and leaves mode bits of existing files unchanged.
  Previously it would have set executable bits on created special files,
  and set mode bits for existing files as if they had been created.
  [bug introduced with coreutils-8.20]
  'cp --remove-destination file symlink' now removes the symlink
  even if it can't be traversed.
  [bug introduced with --remove-destination in fileutils-4.1.1]
  ls no longer truncates the abbreviated month names that have a
  display width between 6 and 12 inclusive.  Previously this would have
  output ambiguous months for Arabic or Catalan locales.
  'ls -aA' is now equivalent to 'ls -A', since -A now overrides -a.
  [bug introduced in coreutils-5.3.0]
  'mv -n A B' no longer suffers from a race condition that can
  overwrite a simultaneously-created B.  This bug fix requires
  platform support for the renameat2 or renameatx_np syscalls, found
  in recent Linux and macOS kernels.  As a side effect, ‘mv -n A A’
  now silently does nothing if A exists.
  [bug introduced with coreutils-7.1]
  * * Changes in behavior
  'cp --force file symlink' now removes the symlink even if
  it is self referential.
  ls --color now matches file extensions case insensitively.
  * * New features
  cp --reflink now supports --reflink=never to enforce a standard copy.
  env supports a new -v/--debug option to show verbose information about
  each processing step.
  env supports a new -S/--split-string=S option to split a single argument
  string into multiple arguments. Used to pass multiple arguments in scripts
  (shebang lines).
  md5sum accepts a new option: --zero (-z) to delimit the output lines with a
  NUL instead of a newline character.  This also disables file name escaping.
  This also applies to sha*sum and b2sum.
  rm --preserve-root now supports the --preserve-root=all option to
  reject any command line argument that is mounted to a separate file system.
  * * Improvements
  cut supports line lengths up to the max file size on 32 bit systems.
  Previously only offsets up to SIZE_MAX-1 were supported.
  stat and tail now know about the "exfs" file system, which is a
  version of XFS.  stat -f --format=%T now reports the file system type,
  and tail -f uses inotify.
  wc avoids redundant processing of ASCII text in multibyte locales,
  which is especially significant on macOS.
  * * Build-related
  Adjust to glibc &gt;= 2.28  (bsc#1182550, jsc#SLE-13520, jsc#SLE-13756)
- Refresh patches (line number changes only):
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * (License): osc changed the value from "GPL-3.0+" to "GPL-3.0-or-later".
  * (build): Make sure that parse-datetime.{c,y} ends up in debuginfo (rh#1555079).
- coreutils-i18n.patch:
  * src/exand.c,src/unexpand.c: Avoid -Wcomment warning.
  * src/cut.c (cut_characters_or_cut_bytes_no_split): Change idx from size_t
    to uintmax_t type to avoid a regression on i586, armv7l and ppc.
    Compare upstream, non-MB commit:
    https://git.sv.gnu.org/cgit/coreutils.git/commit/?id=d1a754c8272
    (cut_fields_mb): Likewise for field_idx.
  * tests/misc/cut.pl: Remove downstream tweaks as upstream MB tests are
    working since a while.
- coreutils.keyring: Update Assaf Gordon's GPG public key.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1552305600">- Update to 8.31:
  * Noteworthy changes in release 8.31 (2019-03-10) [stable]
  * * Bug fixes
  'base64 a b' now correctly diagnoses 'b' as the extra operand, not 'a'.
  [bug introduced in coreutils-5.3.0]
  When B already exists, 'cp -il A B' no longer immediately fails
  after asking the user whether to proceed.
  [This bug was present in "the beginning".]
  df no longer corrupts displayed multibyte characters on macOS.
  [bug introduced with coreutils-8.18]
  seq no longer outputs inconsistent decimal point characters
  for the last number, when locales are misconfigured.
  [bug introduced in coreutils-7.0]
  shred, sort, and split no longer falsely report ftruncate errors
  when outputting to less-common file types.  For example, the shell
  command 'sort /dev/null -o /dev/stdout | cat' no longer fails with
  an "error truncating" diagnostic.
  [bug was introduced with coreutils-8.18 for sort and split, and
  (for shared memory objects only) with fileutils-4.1 for shred]
  sync no longer fails for write-only file arguments.
  [bug introduced with argument support to sync in coreutils-8.24]
  'tail -f file | filter' no longer exits immediately on AIX.
  [bug introduced in coreutils-8.28]
  'tail -f file | filter' no longer goes into an infinite loop
  if filter exits and SIGPIPE is ignored.
  [bug introduced in coreutils-8.28]
  * * Changes in behavior
  cksum, dd, hostid, hostname, link, logname, sleep, tsort, unlink,
  uptime, users, whoami, yes: now always process --help and --version options,
  regardless of any other arguments present before any optional '--'
  end-of-options marker.
  nohup now processes --help and --version as first options even if other
  parameters follow.
  'yes a -- b' now outputs 'a b' instead of including the end-of-options
  marker as before: 'a -- b'.
  echo now always processes backslash escapes when the POSIXLY_CORRECT
  environment variable is set.
  When possible 'ln A B' now merely links A to B and reports an error
  if this fails, instead of statting A and B before linking.  This
  uses fewer system calls and avoids some races.  The old statting
  approach is still used in situations where hard links to directories
  are allowed (e.g., NetBSD when superuser).
  ls --group-directories-first will also group symlinks to directories.
  'test -a FILE' is not supported anymore.  Long ago, there were concerns about
  the high probability of humans confusing the -a primary with the -a binary
  operator, so POSIX changed this to 'test -e FILE'.  Scripts using it were
  already broken and non-portable; the -a unary operator was never documented.
  wc now treats non breaking space characters as word delimiters
  unless the POSIXLY_CORRECT environment variable is set.
  * * New features
  id now supports specifying multiple users.
  'date' now supports the '+' conversion specification flag,
  introduced in POSIX.1-2017.
  printf, seq, sleep, tail, and timeout now accept floating point
  numbers in either the current or the C locale.  For example, if the
  current locale's decimal point is ',', 'sleep 0,1' and 'sleep 0.1'
  now mean the same thing.  Previously, these commands accepted only
  C-locale syntax with '.' as the decimal point.  The new behavior is
  more compatible with other implementations in non-C locales.
  test now supports the '-N FILE' unary operator (like e.g. bash) to check
  whether FILE exists and has been modified since it was last read.
  env now supports '--default-signal[=SIG]', '--ignore-signal[=SIG]', and
  '--block-signal[=SIG], to setup signal handling before executing a program.
  env now supports '--list-signal-handling' to indicate non-default
  signal handling before executing a program.
  * * New commands
  basenc is added to complement existing base64,base32 commands,
  and encodes and decodes printable text using various common encodings:
  base64,base64url,base32,base32hex,base16,base2,z85.
  * * Improvements
  ls -l now better aligns abbreviated months containing digits,
  which is common in Asian locales.
  stat and tail now know about the "sdcardfs" file system on Android.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  stat now prints file creation time when supported by the file system,
  on GNU Linux systems with glibc &gt;= 2.28 and kernel &gt;= 4.11.
- Refresh patches (line number changes only):
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-misc.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * Version: bump version.
  * URL: Use https scheme.
  * %description: Add 'basenc' tool.
  * Change gitweb to cgit URL with https in a comment.
- coreutils.keyring:
  * Update for added section headers ('GPG keys of &lt;MAINTAINER&gt;').</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="lnussel@suse.de" date="1578571200">- switch to multibuild
- add coreutils-single subpackage that contains a single binary coreutils tool
  similar to busybox
- package LC_CTIME directories also in lang package
- split off doc package
- remove info macros, handled by file trigger nowadays</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1579521600">- minor: remove obsolete comment in spec file.</changelog>
  <changelog author="lnussel@suse.de" date="1580212800">- disable single and testsuite builds in rings/staging
- remove duplicate "coreutils" in flavor to make it look nicer in OBS</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1583755200">- Update to 8.32:
  * Noteworthy changes in release 8.32 (2020-03-05) [stable]
  * * Bug fixes
  cp now copies /dev/fd/N correctly on platforms like Solaris where
  it is a character-special file whose minor device number is N.
  [bug introduced in fileutils-4.1.6]
  dd conv=fdatasync no longer reports a "Bad file descriptor" error
  when fdatasync is interrupted, and dd now retries interrupted calls
  to close, fdatasync, fstat and fsync instead of incorrectly
  reporting an "Interrupted system call" error.
  [bugs introduced in coreutils-6.0]
  df now correctly parses the /proc/self/mountinfo file for unusual entries
  like ones with '\r' in a field value ("mount -t tmpfs tmpfs /foo$'\r'bar"),
  when the source field is empty ('mount -t tmpfs "" /mnt'), and when the
  filesystem type contains characters like a blank which need escaping.
  [bugs introduced in coreutils-8.24 with the introduction of reading
  the /proc/self/mountinfo file]
  factor again outputs immediately when stdout is a tty but stdin is not.
  [bug introduced in coreutils-8.24]
  ln works again on old systems without O_DIRECTORY support (like Solaris 10),
  and on systems where symlink ("x", ".") fails with errno == EINVAL
  (like Solaris 10 and Solaris 11).
  [bug introduced in coreutils-8.31]
  rmdir --ignore-fail-on-non-empty now works correctly for directories
  that fail to be removed due to permission issues.  Previously the exit status
  was reversed, failing for non empty and succeeding for empty directories.
  [bug introduced in coreutils-6.11]
  'shuf -r -n 0 file' no longer mistakenly reads from standard input.
  [bug introduced with the --repeat feature in coreutils-8.22]
  split no longer reports a "output file suffixes exhausted" error
  when the specified number of files is evenly divisible by 10, 16, 26,
  for --numeric, --hex, or default alphabetic suffixes respectively.
  [bug introduced in coreutils-8.24]
  seq no longer prints an extra line under certain circumstances (such as
  'seq -f "%g " 1000000 1000000').
  [bug introduced in coreutils-6.10]
  * * Changes in behavior
  Several programs now check that numbers end properly.  For example,
  'du -d 1x' now reports an error instead of silently ignoring the 'x'.
  Affected programs and options include du -d, expr's numeric operands
  on non-GMP builds, install -g and -o, ls's TABSIZE environment
  variable, mknod b and c, ptx -g and -w, shuf -n, and sort --batch-size
  and --parallel.
  date now parses military time zones in accordance with common usage:
    "A" to "M"  are equivalent to UTC+1 to UTC+12
    "N" to "Y"  are equivalent to UTC-1 to UTC-12
    "Z" is "zulu" time (UTC).
  For example, 'date -d "09:00B" is now equivalent to 9am in UTC+2 time zone.
  Previously, military time zones were parsed according to the obsolete
  rfc822, with their value negated (e.g., "B" was equivalent to UTC-2).
  [The old behavior was introduced in sh-utils 2.0.15 ca. 1999, predating
  coreutils package.]
  ls issues an error message on a removed directory, on GNU/Linux systems.
  Previously no error and no entries were output, and so indistinguishable
  from an empty directory, with default ls options.
  uniq no longer uses strcoll() to determine string equivalence,
  and so will operate more efficiently and consistently.
  * * New Features
  ls now supports the --time=birth option to display and sort by
  file creation time, where available.
  od --skip-bytes now can use lseek even if the input is not a regular
  file, greatly improving performance in some cases.
  stat(1) supports a new --cached= option, used on systems with statx(2)
  to control cache coherency of file system attributes,
  useful on network file systems.
  * * Improvements
  stat and ls now use the statx() system call where available, which can
  operate more efficiently by only retrieving requested attributes.
  stat and tail now know about the "binderfs", "dma-buf-fs", "erofs",
  "ppc-cmm-fs", and "z3fold" file systems.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  * * Build-related
  gzip-compressed tarballs are distributed once again
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-getaddrinfo.patch
  * coreutils-i18n.patch
  * coreutils-invalid-ids.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils-i18n.patch:
  * uniq: remove collation handling as required by newer POSIX; see
  - https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8e81d44b5
  - https://www.austingroupbugs.net/view.php?id=963
- coreutils-ls-restore-8.31-behavior-on-removed-dirs.patch:
  * Add patch for 'ls' to restore 8.31 behavior on removed directories.
- coreutils.spec:
  * Version: bump version.
  * %check: re-enable regular 'make check' for non-multibuild package.
  * reference the above new patch.
- coreutils.keyring:
  * Update from upstream (Savannah).</changelog>
  <changelog author="dmueller@suse.com" date="1588593600">- add coreutils-use-python3.patch to minimally port away from
  python 2.x use of pyinotify in the testsuite</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1592049600">- coreutils-gnulib-disable-test-float.patch: Add patch to temporarily
  disable the gnulib test 'test-float' failing on ppc and ppc64le.
- coreutils.spec: Reference the patch.  While at it, avoid conditional
  Patch and Source entries as that break cross-platform builds from
  source RPMs.</changelog>
  <changelog author="dimstar@opensuse.org" date="1594900800">- Drop suse-module-tools BuildRequires: this was used for the macro
  regenerate_initrd_post/posttrans, which have been moved to
  rpm-config-SUSE in Jan 2019.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1598875200">- gnulib-test-avoid-FP-perror-strerror.patch: Add patch to
  avoid false-positive error in gnulib tests 'test-perror2' and
  'test-strerror_r', visible on armv7l.
- coreutils.spec: Reference the patch.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="zpetrova@suse.com" date="1635163200">- coreutils-df-fuse-portal-dummy.patch:
  df: Add "fuse.portal" as a dummy file system (used in flatpak
  implementations). (bsc#1189152)</changelog>
  <changelog author="ailiop@suse.com" date="1706529600">- tail: fix tailing sysfs files where PAGE_SIZE &gt; BUFSIZ (bsc#1219321)
  - add coreutils-tail-fix-tailing-sysfs-files-where-PAGE_SIZE-BUFSIZ.patch</changelog>
  <changelog author="tabraham@suse.com" date="1712059200">- ls: avoid triggering automounts (bsc#1221632)
  - add coreutils-ls-avoid-triggering-automounts.patch</changelog>
</package>
<package pkgid="e98502330e65c62613722ecc1953b62f05263289ee7237a971dc2216c17a372d" name="cpio" arch="aarch64">
  <version epoch="0" ver="2.13" rel="150400.3.3.1"/>
  <changelog author="kstreitova@suse.com" date="1455883200">- add cpio-2.12-out_of_bounds_write.patch to fix an out of bounds
  write in a way cpio parses certain cpio files [bsc#963448],
  [CVE-2016-2037]</changelog>
  <changelog author="svalx@svalx.net" date="1457006400">- Disable mt building: this binary from mt_st package offers
  advanced capabilities with the same functionality.
- Enable rmt building: 'dump' package no longer include it, besides
  cpio code base for rmt is more fresh.
- Reflect those changes in the package description.</changelog>
  <changelog author="kstreitova@suse.com" date="1457006401">- fix typos in the description
- add 'Require: mt_st' in order not to surprise users by the missing
  'mt' binary</changelog>
  <changelog author="mpluskal@suse.com" date="1457179200">- Recommend mt_st as it is not hard dependency</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="svalx@svalx.net" date="1490356800">- Enable mt building
- Separated cpio-mt subpackge
- Change recommend to own mt subpackge
- Remove cpio-mt.patch - those features available in original mt-st package
- Switch to use alternatives system for mt
- Disable rmt building: this binary fully identical to rmt from tar
- Change default rmt dir to /usr/bin</changelog>
  <changelog author="mpluskal@suse.com" date="1490616000">- Use macro for configure and make install
- Use update-alternatives according to current documentation
- Enable testsuite</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- modify cpio-2.12-out_of_bounds_write.patch to fix a regression
  causing cpio to crash for tar and ustar archive types
  [bsc#1028410]</changelog>
  <changelog author="mpluskal@suse.com" date="1536926400">- Use URL to fetch keyring
- Do not force building with PIE, it is default now anyways
- Use https for URLs
- Install license</changelog>
  <changelog author="bwiedemann@suse.com" date="1537963200">- Use gettextize --no-changelog to drop build date
  to make package build reproducible (boo#1047218)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="kstreitova@suse.com" date="1572868800">- add cpio-2.12-CVE-2019-14866.patch to fix a security issue where
  cpio does not properly validate the values written in the header
  of a TAR file through the to_oct() function [bsc#1155199]
  [CVE-2019-14866]</changelog>
  <changelog author="kstreitova@suse.com" date="1585483200">- starting with GCC 10, the default of '-fcommon' option will
  change to '-fno-common'. Because cpio build fails with
  'fno-common', add '-fcommon' option to optflags as a temporary
  workaround for this problem till it's properly fixed [bsc#1160870]</changelog>
  <changelog author="dmueller@suse.com" date="1597492800">- update to 2.13:
  * CVE-2015-1197, CVE-2016-2037, CVE-2019-14866
- remove patches (upstream):
  cpio-2.12-out_of_bounds_write.patch, cpio-2.12-CVE-2019-14866.patch,
  cpio-2.12-util.c_no_return_in_nonvoid_fnc.patch,
  cpio-check_for_symlinks.patch</changelog>
  <changelog author="dmueller@suse.com" date="1599825600">- add cpio-revert-CVE-2015-1197-fix.patch as recommended by upstream
  to fix https://lists.gnu.org/archive/html/bug-cpio/2019-11/msg00016.html</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628510400">- Fix CVE-2021-38185 Remote code execution caused by an integer overflow in ds_fgetstr
  (CVE-2021-38185, bsc#1189206)
  * fix-CVE-2021-38185.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1629288000">- Fix regression in last update (bsc#1189465)
  * fix-CVE-2021-38185_2.patch
  * fix-CVE-2021-38185_3.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1635422400">- Update keyring</changelog>
  <changelog author="danilo.spinella@suse.com" date="1705060800">- Fix CVE-2023-7207, path traversal vulnerability (bsc#1218571)
  * fix-CVE-2023-7207.patch</changelog>
</package>
<package pkgid="1f31c481ae06512b804c51f4e76e4b637ead3d7cd2b62777dd886b67d9727e2e" name="cpio" arch="s390x">
  <version epoch="0" ver="2.13" rel="150400.3.3.1"/>
  <changelog author="kstreitova@suse.com" date="1455883200">- add cpio-2.12-out_of_bounds_write.patch to fix an out of bounds
  write in a way cpio parses certain cpio files [bsc#963448],
  [CVE-2016-2037]</changelog>
  <changelog author="svalx@svalx.net" date="1457006400">- Disable mt building: this binary from mt_st package offers
  advanced capabilities with the same functionality.
- Enable rmt building: 'dump' package no longer include it, besides
  cpio code base for rmt is more fresh.
- Reflect those changes in the package description.</changelog>
  <changelog author="kstreitova@suse.com" date="1457006401">- fix typos in the description
- add 'Require: mt_st' in order not to surprise users by the missing
  'mt' binary</changelog>
  <changelog author="mpluskal@suse.com" date="1457179200">- Recommend mt_st as it is not hard dependency</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="svalx@svalx.net" date="1490356800">- Enable mt building
- Separated cpio-mt subpackge
- Change recommend to own mt subpackge
- Remove cpio-mt.patch - those features available in original mt-st package
- Switch to use alternatives system for mt
- Disable rmt building: this binary fully identical to rmt from tar
- Change default rmt dir to /usr/bin</changelog>
  <changelog author="mpluskal@suse.com" date="1490616000">- Use macro for configure and make install
- Use update-alternatives according to current documentation
- Enable testsuite</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- modify cpio-2.12-out_of_bounds_write.patch to fix a regression
  causing cpio to crash for tar and ustar archive types
  [bsc#1028410]</changelog>
  <changelog author="mpluskal@suse.com" date="1536926400">- Use URL to fetch keyring
- Do not force building with PIE, it is default now anyways
- Use https for URLs
- Install license</changelog>
  <changelog author="bwiedemann@suse.com" date="1537963200">- Use gettextize --no-changelog to drop build date
  to make package build reproducible (boo#1047218)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="kstreitova@suse.com" date="1572868800">- add cpio-2.12-CVE-2019-14866.patch to fix a security issue where
  cpio does not properly validate the values written in the header
  of a TAR file through the to_oct() function [bsc#1155199]
  [CVE-2019-14866]</changelog>
  <changelog author="kstreitova@suse.com" date="1585483200">- starting with GCC 10, the default of '-fcommon' option will
  change to '-fno-common'. Because cpio build fails with
  'fno-common', add '-fcommon' option to optflags as a temporary
  workaround for this problem till it's properly fixed [bsc#1160870]</changelog>
  <changelog author="dmueller@suse.com" date="1597492800">- update to 2.13:
  * CVE-2015-1197, CVE-2016-2037, CVE-2019-14866
- remove patches (upstream):
  cpio-2.12-out_of_bounds_write.patch, cpio-2.12-CVE-2019-14866.patch,
  cpio-2.12-util.c_no_return_in_nonvoid_fnc.patch,
  cpio-check_for_symlinks.patch</changelog>
  <changelog author="dmueller@suse.com" date="1599825600">- add cpio-revert-CVE-2015-1197-fix.patch as recommended by upstream
  to fix https://lists.gnu.org/archive/html/bug-cpio/2019-11/msg00016.html</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628510400">- Fix CVE-2021-38185 Remote code execution caused by an integer overflow in ds_fgetstr
  (CVE-2021-38185, bsc#1189206)
  * fix-CVE-2021-38185.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1629288000">- Fix regression in last update (bsc#1189465)
  * fix-CVE-2021-38185_2.patch
  * fix-CVE-2021-38185_3.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1635422400">- Update keyring</changelog>
  <changelog author="danilo.spinella@suse.com" date="1705060800">- Fix CVE-2023-7207, path traversal vulnerability (bsc#1218571)
  * fix-CVE-2023-7207.patch</changelog>
</package>
<package pkgid="1c298f7a79057d934ec9893e5f59c06c0d9cdafe295d57ca2ebdcf50215f30db" name="cpio" arch="src">
  <version epoch="0" ver="2.13" rel="150400.3.3.1"/>
  <changelog author="kstreitova@suse.com" date="1455883200">- add cpio-2.12-out_of_bounds_write.patch to fix an out of bounds
  write in a way cpio parses certain cpio files [bsc#963448],
  [CVE-2016-2037]</changelog>
  <changelog author="svalx@svalx.net" date="1457006400">- Disable mt building: this binary from mt_st package offers
  advanced capabilities with the same functionality.
- Enable rmt building: 'dump' package no longer include it, besides
  cpio code base for rmt is more fresh.
- Reflect those changes in the package description.</changelog>
  <changelog author="kstreitova@suse.com" date="1457006401">- fix typos in the description
- add 'Require: mt_st' in order not to surprise users by the missing
  'mt' binary</changelog>
  <changelog author="mpluskal@suse.com" date="1457179200">- Recommend mt_st as it is not hard dependency</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="svalx@svalx.net" date="1490356800">- Enable mt building
- Separated cpio-mt subpackge
- Change recommend to own mt subpackge
- Remove cpio-mt.patch - those features available in original mt-st package
- Switch to use alternatives system for mt
- Disable rmt building: this binary fully identical to rmt from tar
- Change default rmt dir to /usr/bin</changelog>
  <changelog author="mpluskal@suse.com" date="1490616000">- Use macro for configure and make install
- Use update-alternatives according to current documentation
- Enable testsuite</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- modify cpio-2.12-out_of_bounds_write.patch to fix a regression
  causing cpio to crash for tar and ustar archive types
  [bsc#1028410]</changelog>
  <changelog author="mpluskal@suse.com" date="1536926400">- Use URL to fetch keyring
- Do not force building with PIE, it is default now anyways
- Use https for URLs
- Install license</changelog>
  <changelog author="bwiedemann@suse.com" date="1537963200">- Use gettextize --no-changelog to drop build date
  to make package build reproducible (boo#1047218)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="kstreitova@suse.com" date="1572868800">- add cpio-2.12-CVE-2019-14866.patch to fix a security issue where
  cpio does not properly validate the values written in the header
  of a TAR file through the to_oct() function [bsc#1155199]
  [CVE-2019-14866]</changelog>
  <changelog author="kstreitova@suse.com" date="1585483200">- starting with GCC 10, the default of '-fcommon' option will
  change to '-fno-common'. Because cpio build fails with
  'fno-common', add '-fcommon' option to optflags as a temporary
  workaround for this problem till it's properly fixed [bsc#1160870]</changelog>
  <changelog author="dmueller@suse.com" date="1597492800">- update to 2.13:
  * CVE-2015-1197, CVE-2016-2037, CVE-2019-14866
- remove patches (upstream):
  cpio-2.12-out_of_bounds_write.patch, cpio-2.12-CVE-2019-14866.patch,
  cpio-2.12-util.c_no_return_in_nonvoid_fnc.patch,
  cpio-check_for_symlinks.patch</changelog>
  <changelog author="dmueller@suse.com" date="1599825600">- add cpio-revert-CVE-2015-1197-fix.patch as recommended by upstream
  to fix https://lists.gnu.org/archive/html/bug-cpio/2019-11/msg00016.html</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628510400">- Fix CVE-2021-38185 Remote code execution caused by an integer overflow in ds_fgetstr
  (CVE-2021-38185, bsc#1189206)
  * fix-CVE-2021-38185.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1629288000">- Fix regression in last update (bsc#1189465)
  * fix-CVE-2021-38185_2.patch
  * fix-CVE-2021-38185_3.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1635422400">- Update keyring</changelog>
  <changelog author="danilo.spinella@suse.com" date="1705060800">- Fix CVE-2023-7207, path traversal vulnerability (bsc#1218571)
  * fix-CVE-2023-7207.patch</changelog>
</package>
<package pkgid="5e11adc2e99e4bdf72d18c0d8947a624912ad2b50b31f9759482122f3990529a" name="cpio" arch="x86_64">
  <version epoch="0" ver="2.13" rel="150400.3.3.1"/>
  <changelog author="kstreitova@suse.com" date="1455883200">- add cpio-2.12-out_of_bounds_write.patch to fix an out of bounds
  write in a way cpio parses certain cpio files [bsc#963448],
  [CVE-2016-2037]</changelog>
  <changelog author="svalx@svalx.net" date="1457006400">- Disable mt building: this binary from mt_st package offers
  advanced capabilities with the same functionality.
- Enable rmt building: 'dump' package no longer include it, besides
  cpio code base for rmt is more fresh.
- Reflect those changes in the package description.</changelog>
  <changelog author="kstreitova@suse.com" date="1457006401">- fix typos in the description
- add 'Require: mt_st' in order not to surprise users by the missing
  'mt' binary</changelog>
  <changelog author="mpluskal@suse.com" date="1457179200">- Recommend mt_st as it is not hard dependency</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="svalx@svalx.net" date="1490356800">- Enable mt building
- Separated cpio-mt subpackge
- Change recommend to own mt subpackge
- Remove cpio-mt.patch - those features available in original mt-st package
- Switch to use alternatives system for mt
- Disable rmt building: this binary fully identical to rmt from tar
- Change default rmt dir to /usr/bin</changelog>
  <changelog author="mpluskal@suse.com" date="1490616000">- Use macro for configure and make install
- Use update-alternatives according to current documentation
- Enable testsuite</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- modify cpio-2.12-out_of_bounds_write.patch to fix a regression
  causing cpio to crash for tar and ustar archive types
  [bsc#1028410]</changelog>
  <changelog author="mpluskal@suse.com" date="1536926400">- Use URL to fetch keyring
- Do not force building with PIE, it is default now anyways
- Use https for URLs
- Install license</changelog>
  <changelog author="bwiedemann@suse.com" date="1537963200">- Use gettextize --no-changelog to drop build date
  to make package build reproducible (boo#1047218)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="kstreitova@suse.com" date="1572868800">- add cpio-2.12-CVE-2019-14866.patch to fix a security issue where
  cpio does not properly validate the values written in the header
  of a TAR file through the to_oct() function [bsc#1155199]
  [CVE-2019-14866]</changelog>
  <changelog author="kstreitova@suse.com" date="1585483200">- starting with GCC 10, the default of '-fcommon' option will
  change to '-fno-common'. Because cpio build fails with
  'fno-common', add '-fcommon' option to optflags as a temporary
  workaround for this problem till it's properly fixed [bsc#1160870]</changelog>
  <changelog author="dmueller@suse.com" date="1597492800">- update to 2.13:
  * CVE-2015-1197, CVE-2016-2037, CVE-2019-14866
- remove patches (upstream):
  cpio-2.12-out_of_bounds_write.patch, cpio-2.12-CVE-2019-14866.patch,
  cpio-2.12-util.c_no_return_in_nonvoid_fnc.patch,
  cpio-check_for_symlinks.patch</changelog>
  <changelog author="dmueller@suse.com" date="1599825600">- add cpio-revert-CVE-2015-1197-fix.patch as recommended by upstream
  to fix https://lists.gnu.org/archive/html/bug-cpio/2019-11/msg00016.html</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628510400">- Fix CVE-2021-38185 Remote code execution caused by an integer overflow in ds_fgetstr
  (CVE-2021-38185, bsc#1189206)
  * fix-CVE-2021-38185.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1629288000">- Fix regression in last update (bsc#1189465)
  * fix-CVE-2021-38185_2.patch
  * fix-CVE-2021-38185_3.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1635422400">- Update keyring</changelog>
  <changelog author="danilo.spinella@suse.com" date="1705060800">- Fix CVE-2023-7207, path traversal vulnerability (bsc#1218571)
  * fix-CVE-2023-7207.patch</changelog>
</package>
<package pkgid="8a531cef423708de94c25207dca0338fa4423984c032fd52788d1cb180cf5e93" name="cpio" arch="aarch64">
  <version epoch="0" ver="2.13" rel="150400.3.6.1"/>
  <changelog author="svalx@svalx.net" date="1457006400">- Disable mt building: this binary from mt_st package offers
  advanced capabilities with the same functionality.
- Enable rmt building: 'dump' package no longer include it, besides
  cpio code base for rmt is more fresh.
- Reflect those changes in the package description.</changelog>
  <changelog author="kstreitova@suse.com" date="1457006401">- fix typos in the description
- add 'Require: mt_st' in order not to surprise users by the missing
  'mt' binary</changelog>
  <changelog author="mpluskal@suse.com" date="1457179200">- Recommend mt_st as it is not hard dependency</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="svalx@svalx.net" date="1490356800">- Enable mt building
- Separated cpio-mt subpackge
- Change recommend to own mt subpackge
- Remove cpio-mt.patch - those features available in original mt-st package
- Switch to use alternatives system for mt
- Disable rmt building: this binary fully identical to rmt from tar
- Change default rmt dir to /usr/bin</changelog>
  <changelog author="mpluskal@suse.com" date="1490616000">- Use macro for configure and make install
- Use update-alternatives according to current documentation
- Enable testsuite</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- modify cpio-2.12-out_of_bounds_write.patch to fix a regression
  causing cpio to crash for tar and ustar archive types
  [bsc#1028410]</changelog>
  <changelog author="mpluskal@suse.com" date="1536926400">- Use URL to fetch keyring
- Do not force building with PIE, it is default now anyways
- Use https for URLs
- Install license</changelog>
  <changelog author="bwiedemann@suse.com" date="1537963200">- Use gettextize --no-changelog to drop build date
  to make package build reproducible (boo#1047218)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="kstreitova@suse.com" date="1572868800">- add cpio-2.12-CVE-2019-14866.patch to fix a security issue where
  cpio does not properly validate the values written in the header
  of a TAR file through the to_oct() function [bsc#1155199]
  [CVE-2019-14866]</changelog>
  <changelog author="kstreitova@suse.com" date="1585483200">- starting with GCC 10, the default of '-fcommon' option will
  change to '-fno-common'. Because cpio build fails with
  'fno-common', add '-fcommon' option to optflags as a temporary
  workaround for this problem till it's properly fixed [bsc#1160870]</changelog>
  <changelog author="dmueller@suse.com" date="1597492800">- update to 2.13:
  * CVE-2015-1197, CVE-2016-2037, CVE-2019-14866
- remove patches (upstream):
  cpio-2.12-out_of_bounds_write.patch, cpio-2.12-CVE-2019-14866.patch,
  cpio-2.12-util.c_no_return_in_nonvoid_fnc.patch,
  cpio-check_for_symlinks.patch</changelog>
  <changelog author="dmueller@suse.com" date="1599825600">- add cpio-revert-CVE-2015-1197-fix.patch as recommended by upstream
  to fix https://lists.gnu.org/archive/html/bug-cpio/2019-11/msg00016.html</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628510400">- Fix CVE-2021-38185 Remote code execution caused by an integer overflow in ds_fgetstr
  (CVE-2021-38185, bsc#1189206)
  * fix-CVE-2021-38185.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1629288000">- Fix regression in last update (bsc#1189465)
  * fix-CVE-2021-38185_2.patch
  * fix-CVE-2021-38185_3.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1635422400">- Update keyring</changelog>
  <changelog author="danilo.spinella@suse.com" date="1705060800">- Fix CVE-2023-7207, path traversal vulnerability (bsc#1218571)
  * fix-CVE-2023-7207.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1706529600">- Fix cpio not working after the fix in bsc#1218571, fixes bsc#1219238
  * fix-bsc1219238.patch</changelog>
</package>
<package pkgid="0ca87787e31e6407a436c058a06a8172ddfe6b74c92672331fb560c8a84a549f" name="cpio" arch="s390x">
  <version epoch="0" ver="2.13" rel="150400.3.6.1"/>
  <changelog author="svalx@svalx.net" date="1457006400">- Disable mt building: this binary from mt_st package offers
  advanced capabilities with the same functionality.
- Enable rmt building: 'dump' package no longer include it, besides
  cpio code base for rmt is more fresh.
- Reflect those changes in the package description.</changelog>
  <changelog author="kstreitova@suse.com" date="1457006401">- fix typos in the description
- add 'Require: mt_st' in order not to surprise users by the missing
  'mt' binary</changelog>
  <changelog author="mpluskal@suse.com" date="1457179200">- Recommend mt_st as it is not hard dependency</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="svalx@svalx.net" date="1490356800">- Enable mt building
- Separated cpio-mt subpackge
- Change recommend to own mt subpackge
- Remove cpio-mt.patch - those features available in original mt-st package
- Switch to use alternatives system for mt
- Disable rmt building: this binary fully identical to rmt from tar
- Change default rmt dir to /usr/bin</changelog>
  <changelog author="mpluskal@suse.com" date="1490616000">- Use macro for configure and make install
- Use update-alternatives according to current documentation
- Enable testsuite</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- modify cpio-2.12-out_of_bounds_write.patch to fix a regression
  causing cpio to crash for tar and ustar archive types
  [bsc#1028410]</changelog>
  <changelog author="mpluskal@suse.com" date="1536926400">- Use URL to fetch keyring
- Do not force building with PIE, it is default now anyways
- Use https for URLs
- Install license</changelog>
  <changelog author="bwiedemann@suse.com" date="1537963200">- Use gettextize --no-changelog to drop build date
  to make package build reproducible (boo#1047218)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="kstreitova@suse.com" date="1572868800">- add cpio-2.12-CVE-2019-14866.patch to fix a security issue where
  cpio does not properly validate the values written in the header
  of a TAR file through the to_oct() function [bsc#1155199]
  [CVE-2019-14866]</changelog>
  <changelog author="kstreitova@suse.com" date="1585483200">- starting with GCC 10, the default of '-fcommon' option will
  change to '-fno-common'. Because cpio build fails with
  'fno-common', add '-fcommon' option to optflags as a temporary
  workaround for this problem till it's properly fixed [bsc#1160870]</changelog>
  <changelog author="dmueller@suse.com" date="1597492800">- update to 2.13:
  * CVE-2015-1197, CVE-2016-2037, CVE-2019-14866
- remove patches (upstream):
  cpio-2.12-out_of_bounds_write.patch, cpio-2.12-CVE-2019-14866.patch,
  cpio-2.12-util.c_no_return_in_nonvoid_fnc.patch,
  cpio-check_for_symlinks.patch</changelog>
  <changelog author="dmueller@suse.com" date="1599825600">- add cpio-revert-CVE-2015-1197-fix.patch as recommended by upstream
  to fix https://lists.gnu.org/archive/html/bug-cpio/2019-11/msg00016.html</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628510400">- Fix CVE-2021-38185 Remote code execution caused by an integer overflow in ds_fgetstr
  (CVE-2021-38185, bsc#1189206)
  * fix-CVE-2021-38185.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1629288000">- Fix regression in last update (bsc#1189465)
  * fix-CVE-2021-38185_2.patch
  * fix-CVE-2021-38185_3.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1635422400">- Update keyring</changelog>
  <changelog author="danilo.spinella@suse.com" date="1705060800">- Fix CVE-2023-7207, path traversal vulnerability (bsc#1218571)
  * fix-CVE-2023-7207.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1706529600">- Fix cpio not working after the fix in bsc#1218571, fixes bsc#1219238
  * fix-bsc1219238.patch</changelog>
</package>
<package pkgid="ae7729815ba1e674de121c124fb5485876c4d1a354fa60321594d647f1ac203d" name="cpio" arch="src">
  <version epoch="0" ver="2.13" rel="150400.3.6.1"/>
  <changelog author="svalx@svalx.net" date="1457006400">- Disable mt building: this binary from mt_st package offers
  advanced capabilities with the same functionality.
- Enable rmt building: 'dump' package no longer include it, besides
  cpio code base for rmt is more fresh.
- Reflect those changes in the package description.</changelog>
  <changelog author="kstreitova@suse.com" date="1457006401">- fix typos in the description
- add 'Require: mt_st' in order not to surprise users by the missing
  'mt' binary</changelog>
  <changelog author="mpluskal@suse.com" date="1457179200">- Recommend mt_st as it is not hard dependency</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="svalx@svalx.net" date="1490356800">- Enable mt building
- Separated cpio-mt subpackge
- Change recommend to own mt subpackge
- Remove cpio-mt.patch - those features available in original mt-st package
- Switch to use alternatives system for mt
- Disable rmt building: this binary fully identical to rmt from tar
- Change default rmt dir to /usr/bin</changelog>
  <changelog author="mpluskal@suse.com" date="1490616000">- Use macro for configure and make install
- Use update-alternatives according to current documentation
- Enable testsuite</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- modify cpio-2.12-out_of_bounds_write.patch to fix a regression
  causing cpio to crash for tar and ustar archive types
  [bsc#1028410]</changelog>
  <changelog author="mpluskal@suse.com" date="1536926400">- Use URL to fetch keyring
- Do not force building with PIE, it is default now anyways
- Use https for URLs
- Install license</changelog>
  <changelog author="bwiedemann@suse.com" date="1537963200">- Use gettextize --no-changelog to drop build date
  to make package build reproducible (boo#1047218)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="kstreitova@suse.com" date="1572868800">- add cpio-2.12-CVE-2019-14866.patch to fix a security issue where
  cpio does not properly validate the values written in the header
  of a TAR file through the to_oct() function [bsc#1155199]
  [CVE-2019-14866]</changelog>
  <changelog author="kstreitova@suse.com" date="1585483200">- starting with GCC 10, the default of '-fcommon' option will
  change to '-fno-common'. Because cpio build fails with
  'fno-common', add '-fcommon' option to optflags as a temporary
  workaround for this problem till it's properly fixed [bsc#1160870]</changelog>
  <changelog author="dmueller@suse.com" date="1597492800">- update to 2.13:
  * CVE-2015-1197, CVE-2016-2037, CVE-2019-14866
- remove patches (upstream):
  cpio-2.12-out_of_bounds_write.patch, cpio-2.12-CVE-2019-14866.patch,
  cpio-2.12-util.c_no_return_in_nonvoid_fnc.patch,
  cpio-check_for_symlinks.patch</changelog>
  <changelog author="dmueller@suse.com" date="1599825600">- add cpio-revert-CVE-2015-1197-fix.patch as recommended by upstream
  to fix https://lists.gnu.org/archive/html/bug-cpio/2019-11/msg00016.html</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628510400">- Fix CVE-2021-38185 Remote code execution caused by an integer overflow in ds_fgetstr
  (CVE-2021-38185, bsc#1189206)
  * fix-CVE-2021-38185.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1629288000">- Fix regression in last update (bsc#1189465)
  * fix-CVE-2021-38185_2.patch
  * fix-CVE-2021-38185_3.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1635422400">- Update keyring</changelog>
  <changelog author="danilo.spinella@suse.com" date="1705060800">- Fix CVE-2023-7207, path traversal vulnerability (bsc#1218571)
  * fix-CVE-2023-7207.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1706529600">- Fix cpio not working after the fix in bsc#1218571, fixes bsc#1219238
  * fix-bsc1219238.patch</changelog>
</package>
<package pkgid="cbc2d14dddebff945bf47329fcaa16699429f0f858cc0a5d71d1e7ea77891e2d" name="cpio" arch="x86_64">
  <version epoch="0" ver="2.13" rel="150400.3.6.1"/>
  <changelog author="svalx@svalx.net" date="1457006400">- Disable mt building: this binary from mt_st package offers
  advanced capabilities with the same functionality.
- Enable rmt building: 'dump' package no longer include it, besides
  cpio code base for rmt is more fresh.
- Reflect those changes in the package description.</changelog>
  <changelog author="kstreitova@suse.com" date="1457006401">- fix typos in the description
- add 'Require: mt_st' in order not to surprise users by the missing
  'mt' binary</changelog>
  <changelog author="mpluskal@suse.com" date="1457179200">- Recommend mt_st as it is not hard dependency</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="svalx@svalx.net" date="1490356800">- Enable mt building
- Separated cpio-mt subpackge
- Change recommend to own mt subpackge
- Remove cpio-mt.patch - those features available in original mt-st package
- Switch to use alternatives system for mt
- Disable rmt building: this binary fully identical to rmt from tar
- Change default rmt dir to /usr/bin</changelog>
  <changelog author="mpluskal@suse.com" date="1490616000">- Use macro for configure and make install
- Use update-alternatives according to current documentation
- Enable testsuite</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- modify cpio-2.12-out_of_bounds_write.patch to fix a regression
  causing cpio to crash for tar and ustar archive types
  [bsc#1028410]</changelog>
  <changelog author="mpluskal@suse.com" date="1536926400">- Use URL to fetch keyring
- Do not force building with PIE, it is default now anyways
- Use https for URLs
- Install license</changelog>
  <changelog author="bwiedemann@suse.com" date="1537963200">- Use gettextize --no-changelog to drop build date
  to make package build reproducible (boo#1047218)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="kstreitova@suse.com" date="1572868800">- add cpio-2.12-CVE-2019-14866.patch to fix a security issue where
  cpio does not properly validate the values written in the header
  of a TAR file through the to_oct() function [bsc#1155199]
  [CVE-2019-14866]</changelog>
  <changelog author="kstreitova@suse.com" date="1585483200">- starting with GCC 10, the default of '-fcommon' option will
  change to '-fno-common'. Because cpio build fails with
  'fno-common', add '-fcommon' option to optflags as a temporary
  workaround for this problem till it's properly fixed [bsc#1160870]</changelog>
  <changelog author="dmueller@suse.com" date="1597492800">- update to 2.13:
  * CVE-2015-1197, CVE-2016-2037, CVE-2019-14866
- remove patches (upstream):
  cpio-2.12-out_of_bounds_write.patch, cpio-2.12-CVE-2019-14866.patch,
  cpio-2.12-util.c_no_return_in_nonvoid_fnc.patch,
  cpio-check_for_symlinks.patch</changelog>
  <changelog author="dmueller@suse.com" date="1599825600">- add cpio-revert-CVE-2015-1197-fix.patch as recommended by upstream
  to fix https://lists.gnu.org/archive/html/bug-cpio/2019-11/msg00016.html</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628510400">- Fix CVE-2021-38185 Remote code execution caused by an integer overflow in ds_fgetstr
  (CVE-2021-38185, bsc#1189206)
  * fix-CVE-2021-38185.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1629288000">- Fix regression in last update (bsc#1189465)
  * fix-CVE-2021-38185_2.patch
  * fix-CVE-2021-38185_3.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1635422400">- Update keyring</changelog>
  <changelog author="danilo.spinella@suse.com" date="1705060800">- Fix CVE-2023-7207, path traversal vulnerability (bsc#1218571)
  * fix-CVE-2023-7207.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1706529600">- Fix cpio not working after the fix in bsc#1218571, fixes bsc#1219238
  * fix-bsc1219238.patch</changelog>
</package>
<package pkgid="c71c2d6235e833e5b659eff4a8d3987f527975b4332303c95761b31ec77d2c32" name="crypto-policies" arch="noarch">
  <version epoch="0" ver="20210917.c9d86d1" rel="150400.3.6.1"/>
  <changelog author="pmonreal@suse.com" date="1608638400">- Add crypto-policies-typos.patch to fix some typos</changelog>
  <changelog author="pmonreal@suse.com" date="1611230400">- Test only supported modules
- Add crypto-policies-test_supported_modules_only.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1611230401">- Fix the man pages generation
- Add crypto-policies-asciidoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1611230402">- Update to git version 20210118
  * Output sigalgs required by nss &gt;=3.59
  * Bump Python requirement to 3.6
  * Kerberos 5: Fix policy generator to account for macs
  * Add AES-192 support (non-TLS scenarios)
  * Add documentation of the --check option</changelog>
  <changelog author="pmonreal@suse.com" date="1612267200">- Update to git version 20210127
  * Bump Python requirement to 3.6
  * Output sigalgs required by nss &gt;=3.59
  * Do not require bind during build
  * Break build cycles with openssl and gnutls</changelog>
  <changelog author="dimstar@opensuse.org" date="1612267201">- Convert to use a proper git source _service:
  + To update, one just needs to update the commit/revision in the
    _service file and run `osc service dr`.
  + The version of the package is defined by the commit date of the
    revision, followed by the abbreviated git hash (The same
    revision used before results thus in a downgrade to 20210118,
    but as this is a alltime new package, this is acceptable.</changelog>
  <changelog author="pmonreal@suse.com" date="1612526400">- Do not build the manpages to avoid build cycles
- Add crypto-policies-no-build-manpages.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1612785600">- Use gzip instead of xz in obscpio and sources</changelog>
  <changelog author="pmonreal@suse.com" date="1612785601">- Add a BuildIgnore for crypto-policies</changelog>
  <changelog author="dimstar@opensuse.org" date="1612872000">- Use tar_scm service, not obs_scm: With crypto-policies entering
  Ring0 (distro bootstrap) we want to be sure to keep the buildtime
  deps as low as possible.
- Add python3-base BuildRequires: previously, OBS' tar service
  pulled this in for us.</changelog>
  <changelog author="pmonreal@suse.com" date="1613563200">- Update to version 20210213.5c710c0: [bsc#1180938]
  * setup_directories(): perform safer creation of directories
  * save_config(): avoid re-opening output file for each iteration
  * save_config(): break after first match to avoid unnecessary stat() calls
  * CryptoPolicy.parse(): actually stop parsing line on syntax error
  * ProfileConfig.parse_string(): correctly extended subpolicies
  * Exclude RC4 from LEGACY
  * Introduce rc4_md5_in_krb5 to narrow AD_SUPPORT
  * code style: fix 'not in' membership testing
  * pylintrc: tighten up a bit
  * formatting: avoid long lines
  * formatting: use f-strings instead of format()
  * formatting: reformat all python code with autopep8
  * nss: postponing the version check again, to 3.61
  * Revert "Unfortunately we have to keep ignoring the openssh check for sk-"</changelog>
  <changelog author="pmonreal@suse.com" date="1614168000">- Disable DTLS0.9 protocol in GnuTLS DEFAULT policy. [bsc#1180938]
  * The minimum DTLS protocol version in the DEFAULT and FUTURE
    policies is DTLS1.2.
  * Fixed upstream: 05203d21f6d0ea9bbdb351e4600f1e273720bb8e</changelog>
  <changelog author="pmonreal@suse.com" date="1614254400">- Remove not needed scripts: fips-finish-install fips-mode-setup</changelog>
  <changelog author="pmonreal@suse.com" date="1614254401">- Update to version 20210225.05203d2:
  * Disable DTLS0.9 protocol in the DEFAULT policy.
  * policies/FIPS: insignificant reformatting
  * policygenerators/libssh: respect ssh_certs
  * policies/modules/OSPP: tighten to follow RHEL 8
  * crypto-policies(7): drop not-reenableable comment
  * follow up on disabling RC4</changelog>
  <changelog author="pmonreal@suse.com" date="1632484800">- Update to version 20210917.c9d86d1:
  * openssl: fix disabling ChaCha20
  * pacify pylint 2.11: use format strings
  * pacify pylint 2.11: specify explicit encoding
  * fix minor things found by new pylint
  * update-crypto-policies: --check against regenerated
  * update-crypto-policies: fix --check's walking order
  * policygenerators/gnutls: revert disabling DTLS0.9...
  * policygenerators/java: add javasystem backend
  * LEGACY: bump 1023 key size to 1024
  * cryptopolicies: fix 'and' in deprecation warnings
  * *ssh: condition ecdh-sha2-nistp384 on SECP384R1
  * nss: hopefully the last fix for nss sigalgs check
  * cryptopolicies: Python 3.10 compatibility
  * nss: postponing check + testing at least something
  * Rename 'policy modules' to 'subpolicies'
  * validation.rules: fix a missing word in error
  * cryptopolicies: raise errors right after warnings
  * update-crypto-policies: capitalize warnings
  * cryptopolicies: syntax-precheck scope errors
  * .gitlab-ci.yml, Makefile: enable codespell
  * all: fix several typos
  * docs: don't leave zero TLS/DTLS protocols on
  * openssl: separate TLS/DTLS MinProtocol/MaxProtocol
  * alg_lists: order protocols new-to-old for consistency
  * alg_lists: max_{d,}tls_version
  * update-crypto-policies: fix pregenerated + local.d
  * openssh: allow validation with pre-8.5
  * .gitlab-ci.yml: run commit-range against upstream
  * openssh: Use the new name for PubkeyAcceptedKeyTypes
  * sha1_in_dnssec: deprecate
  * .gitlab-ci.yml: test commit ranges
  * FIPS:OSPP: sign = -*-SHA2-224
  * scoped policies: documentation update
  * scoped policies: use new features to the fullest...
  * scoped policies: rewrite + minimal policy changes
  * scoped policies: rewrite preparations
  * nss: postponing the version check again, to 3.64
- Remove patches fixed upstream: crypto-policies-typos.patch
- Rebase: crypto-policies-test_supported_modules_only.patch
- Merge crypto-policies-asciidoc.patch into
    crypto-policies-no-build-manpages.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1632484801">- Remove the scripts and documentation regarding
  fips-finish-install and test-fips-setup
  * Add crypto-policies-FIPS.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683547200">- Update the update-crypto-policies(8) man pages and README.SUSE
  to mention the supported back-end policies. [bsc#1209998]</changelog>
  <changelog author="pmonreal@suse.com" date="1689595200">- FIPS: Enable to set the kernel FIPS mode with fips-mode-setup
  and fips-finish-install commands, add also the man pages.
  * Adapt the fips-mode-setup script for SLE [jsc#PED-5041]
  * Rebase crypto-policies-FIPS.patch
  * Simplify the man pages creation:
  - Rebase crypto-policies-no-build-manpages.patch
  - Add crypto-policies-asciidoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- FIPS: Adapt the fips-mode-setup script to use the pbl command
  from the perl-Bootloader package to replace grubby. Add a note
  for transactional systems. Ship the man 8 pages for
  fips-mode-setup and fips-finish-install [jsc#PED-5041].
  * Rebase crypto-policies-FIPS.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693483200">- Make the supported versions change in the update-crypto-policies(8)
  man page persistent [bsc#1209998].
  * Add patch crypto-policies-supported.patch
  * Rebase patches:
  - crypto-policies-asciidoc.patch
  - crypto-policies-no-build-manpages.patch</changelog>
</package>
<package pkgid="6784cfec7e4bc403389b8a3bf538c43d26b44fb335526a393235e216370b1922" name="crypto-policies" arch="src">
  <version epoch="0" ver="20210917.c9d86d1" rel="150400.3.6.1"/>
  <changelog author="pmonreal@suse.com" date="1608638400">- Add crypto-policies-typos.patch to fix some typos</changelog>
  <changelog author="pmonreal@suse.com" date="1611230400">- Test only supported modules
- Add crypto-policies-test_supported_modules_only.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1611230401">- Fix the man pages generation
- Add crypto-policies-asciidoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1611230402">- Update to git version 20210118
  * Output sigalgs required by nss &gt;=3.59
  * Bump Python requirement to 3.6
  * Kerberos 5: Fix policy generator to account for macs
  * Add AES-192 support (non-TLS scenarios)
  * Add documentation of the --check option</changelog>
  <changelog author="pmonreal@suse.com" date="1612267200">- Update to git version 20210127
  * Bump Python requirement to 3.6
  * Output sigalgs required by nss &gt;=3.59
  * Do not require bind during build
  * Break build cycles with openssl and gnutls</changelog>
  <changelog author="dimstar@opensuse.org" date="1612267201">- Convert to use a proper git source _service:
  + To update, one just needs to update the commit/revision in the
    _service file and run `osc service dr`.
  + The version of the package is defined by the commit date of the
    revision, followed by the abbreviated git hash (The same
    revision used before results thus in a downgrade to 20210118,
    but as this is a alltime new package, this is acceptable.</changelog>
  <changelog author="pmonreal@suse.com" date="1612526400">- Do not build the manpages to avoid build cycles
- Add crypto-policies-no-build-manpages.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1612785600">- Use gzip instead of xz in obscpio and sources</changelog>
  <changelog author="pmonreal@suse.com" date="1612785601">- Add a BuildIgnore for crypto-policies</changelog>
  <changelog author="dimstar@opensuse.org" date="1612872000">- Use tar_scm service, not obs_scm: With crypto-policies entering
  Ring0 (distro bootstrap) we want to be sure to keep the buildtime
  deps as low as possible.
- Add python3-base BuildRequires: previously, OBS' tar service
  pulled this in for us.</changelog>
  <changelog author="pmonreal@suse.com" date="1613563200">- Update to version 20210213.5c710c0: [bsc#1180938]
  * setup_directories(): perform safer creation of directories
  * save_config(): avoid re-opening output file for each iteration
  * save_config(): break after first match to avoid unnecessary stat() calls
  * CryptoPolicy.parse(): actually stop parsing line on syntax error
  * ProfileConfig.parse_string(): correctly extended subpolicies
  * Exclude RC4 from LEGACY
  * Introduce rc4_md5_in_krb5 to narrow AD_SUPPORT
  * code style: fix 'not in' membership testing
  * pylintrc: tighten up a bit
  * formatting: avoid long lines
  * formatting: use f-strings instead of format()
  * formatting: reformat all python code with autopep8
  * nss: postponing the version check again, to 3.61
  * Revert "Unfortunately we have to keep ignoring the openssh check for sk-"</changelog>
  <changelog author="pmonreal@suse.com" date="1614168000">- Disable DTLS0.9 protocol in GnuTLS DEFAULT policy. [bsc#1180938]
  * The minimum DTLS protocol version in the DEFAULT and FUTURE
    policies is DTLS1.2.
  * Fixed upstream: 05203d21f6d0ea9bbdb351e4600f1e273720bb8e</changelog>
  <changelog author="pmonreal@suse.com" date="1614254400">- Remove not needed scripts: fips-finish-install fips-mode-setup</changelog>
  <changelog author="pmonreal@suse.com" date="1614254401">- Update to version 20210225.05203d2:
  * Disable DTLS0.9 protocol in the DEFAULT policy.
  * policies/FIPS: insignificant reformatting
  * policygenerators/libssh: respect ssh_certs
  * policies/modules/OSPP: tighten to follow RHEL 8
  * crypto-policies(7): drop not-reenableable comment
  * follow up on disabling RC4</changelog>
  <changelog author="pmonreal@suse.com" date="1632484800">- Update to version 20210917.c9d86d1:
  * openssl: fix disabling ChaCha20
  * pacify pylint 2.11: use format strings
  * pacify pylint 2.11: specify explicit encoding
  * fix minor things found by new pylint
  * update-crypto-policies: --check against regenerated
  * update-crypto-policies: fix --check's walking order
  * policygenerators/gnutls: revert disabling DTLS0.9...
  * policygenerators/java: add javasystem backend
  * LEGACY: bump 1023 key size to 1024
  * cryptopolicies: fix 'and' in deprecation warnings
  * *ssh: condition ecdh-sha2-nistp384 on SECP384R1
  * nss: hopefully the last fix for nss sigalgs check
  * cryptopolicies: Python 3.10 compatibility
  * nss: postponing check + testing at least something
  * Rename 'policy modules' to 'subpolicies'
  * validation.rules: fix a missing word in error
  * cryptopolicies: raise errors right after warnings
  * update-crypto-policies: capitalize warnings
  * cryptopolicies: syntax-precheck scope errors
  * .gitlab-ci.yml, Makefile: enable codespell
  * all: fix several typos
  * docs: don't leave zero TLS/DTLS protocols on
  * openssl: separate TLS/DTLS MinProtocol/MaxProtocol
  * alg_lists: order protocols new-to-old for consistency
  * alg_lists: max_{d,}tls_version
  * update-crypto-policies: fix pregenerated + local.d
  * openssh: allow validation with pre-8.5
  * .gitlab-ci.yml: run commit-range against upstream
  * openssh: Use the new name for PubkeyAcceptedKeyTypes
  * sha1_in_dnssec: deprecate
  * .gitlab-ci.yml: test commit ranges
  * FIPS:OSPP: sign = -*-SHA2-224
  * scoped policies: documentation update
  * scoped policies: use new features to the fullest...
  * scoped policies: rewrite + minimal policy changes
  * scoped policies: rewrite preparations
  * nss: postponing the version check again, to 3.64
- Remove patches fixed upstream: crypto-policies-typos.patch
- Rebase: crypto-policies-test_supported_modules_only.patch
- Merge crypto-policies-asciidoc.patch into
    crypto-policies-no-build-manpages.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1632484801">- Remove the scripts and documentation regarding
  fips-finish-install and test-fips-setup
  * Add crypto-policies-FIPS.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683547200">- Update the update-crypto-policies(8) man pages and README.SUSE
  to mention the supported back-end policies. [bsc#1209998]</changelog>
  <changelog author="pmonreal@suse.com" date="1689595200">- FIPS: Enable to set the kernel FIPS mode with fips-mode-setup
  and fips-finish-install commands, add also the man pages.
  * Adapt the fips-mode-setup script for SLE [jsc#PED-5041]
  * Rebase crypto-policies-FIPS.patch
  * Simplify the man pages creation:
  - Rebase crypto-policies-no-build-manpages.patch
  - Add crypto-policies-asciidoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- FIPS: Adapt the fips-mode-setup script to use the pbl command
  from the perl-Bootloader package to replace grubby. Add a note
  for transactional systems. Ship the man 8 pages for
  fips-mode-setup and fips-finish-install [jsc#PED-5041].
  * Rebase crypto-policies-FIPS.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693483200">- Make the supported versions change in the update-crypto-policies(8)
  man page persistent [bsc#1209998].
  * Add patch crypto-policies-supported.patch
  * Rebase patches:
  - crypto-policies-asciidoc.patch
  - crypto-policies-no-build-manpages.patch</changelog>
</package>
<package pkgid="3a547a754e29219f29a84072f4afb1507e9f4dd4789d411438b6218d80a5c955" name="cups" arch="src">
  <version epoch="0" ver="2.2.7" rel="150000.3.51.2"/>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
</package>
<package pkgid="00f4fe45f7eedf96a8e721124ada2f8dbcd28f39d6397a78bb92313a5e08c758" name="cups" arch="src">
  <version epoch="0" ver="2.2.7" rel="150000.3.54.1"/>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
</package>
<package pkgid="f15dc1bc53615d90177635645d45f2f5b9e9afd7168760ff3e554a4ce58ab83d" name="cups" arch="src">
  <version epoch="0" ver="2.2.7" rel="150000.3.59.1"/>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
</package>
<package pkgid="4a2839e4c65ae8982b1dcf7eab4dbbbe80ebd8ca6a8687a6e0f60cd33953cec4" name="cups" arch="src">
  <version epoch="0" ver="2.2.7" rel="150000.3.62.1"/>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
</package>
<package pkgid="32e8fd322e0ec4abd9f3ae595d90200a1b6c138dee718936fd5f717f1129ff66" name="cups" arch="src">
  <version epoch="0" ver="2.2.7" rel="150000.3.65.1"/>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
</package>
<package pkgid="2f2351e2c88043e0d16bb3e227dae76b82d48770dcc338f1784edc474b3f6200" name="cups-config" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.51.2"/>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
</package>
<package pkgid="67307e20b3f5af69f9446de0b9582233f35146d5b5cb4187a24fa5fb90fdc1a6" name="cups-config" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.51.2"/>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
</package>
<package pkgid="15b14dc9059560ea9fcae0755ddabd1ce0e0654e3540db3bfc1ea7cbf3aac4bf" name="cups-config" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.51.2"/>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
</package>
<package pkgid="f45e028fce4a36e624273bce17ceda24da00eabf90031e5808c18527a5ea706c" name="cups-config" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.54.1"/>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
</package>
<package pkgid="9361bfbb6b5113f79d4ce2be7d0093f2f091d524f830734585484eb7dde793ea" name="cups-config" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.54.1"/>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
</package>
<package pkgid="86571dc1c6b570a8b43b6f30becc03219231cd050c88440a1859c65199ba0c59" name="cups-config" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.54.1"/>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
</package>
<package pkgid="af16e93da1941e5201a4d1f96ced71272fb05dd6e458e0e786442f34dbfa7b11" name="cups-config" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.59.1"/>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
</package>
<package pkgid="5a849ee56e6cf9885b31916838c6e6cb87d2b08c4ca7a5b92424cfd40417493d" name="cups-config" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.59.1"/>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
</package>
<package pkgid="b057017f02db924ac7c9377191ff2588574938273d5533daf8e17f2238e8d501" name="cups-config" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.59.1"/>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
</package>
<package pkgid="425a24564d9c7c76d60eeda9d4aa34324b5f143366091dd6ac820bf59e9dfbdc" name="cups-config" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.62.1"/>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
</package>
<package pkgid="11de6987d4099ea08667654c6ecbee003ca21a153825318fb57418d266975331" name="cups-config" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.62.1"/>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
</package>
<package pkgid="ac97f81659c354958974a63aa981a7ed4867181c6660d8678ed5edf3917d85d1" name="cups-config" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.62.1"/>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
</package>
<package pkgid="b41c8c7e939f492d66f1548933545dee574d343187dea7b06585a5d893df5fb7" name="cups-config" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.65.1"/>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
</package>
<package pkgid="09ff925da348d29a59158431aa713604068e905f972d3510c9935610d4ff2ed6" name="cups-config" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.65.1"/>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
</package>
<package pkgid="4114193bf0c3b1fa6c0c1dd86b7c62ca07597a3c57c11ebe5d40865bcccc4e4f" name="cups-config" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.65.1"/>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
</package>
<package pkgid="c481adeab307e2c0b9174d35ca0aa97575f67424a81b05479a676f02c53d929e" name="curl" arch="aarch64">
  <version epoch="0" ver="8.0.1" rel="150400.5.32.1"/>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
</package>
<package pkgid="fb5923d131be18a18658ef561323b8476442311472c64f171bc102c01bfbddfe" name="curl" arch="s390x">
  <version epoch="0" ver="8.0.1" rel="150400.5.32.1"/>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
</package>
<package pkgid="e3c3a5f408941dc3cf8e8126a55d4d979d455a28a842061f90cb044374be0d59" name="curl" arch="src">
  <version epoch="0" ver="8.0.1" rel="150400.5.32.1"/>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
</package>
<package pkgid="e92e64cb25e1dc17228d9301a46a87a955807c79c093a12fe795aa8d457dc125" name="curl" arch="x86_64">
  <version epoch="0" ver="8.0.1" rel="150400.5.32.1"/>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
</package>
<package pkgid="917dd0c9a0bae75ddd3f2735fd549259b09dbe5b07a8f288cd43a28abad5007e" name="curl" arch="aarch64">
  <version epoch="0" ver="8.0.1" rel="150400.5.36.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
</package>
<package pkgid="e2fc7a89a3bbff26173216b2295c4f30de0b8fb46029713bbb19e16906e785a6" name="curl" arch="s390x">
  <version epoch="0" ver="8.0.1" rel="150400.5.36.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
</package>
<package pkgid="bc0a076ffd7dc01dc1246cc8925e3047011ab167c82c0866007baac4f079a84b" name="curl" arch="src">
  <version epoch="0" ver="8.0.1" rel="150400.5.36.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
</package>
<package pkgid="736fd786fbe92b195a251f4211f2db9711bbd1e51fc8ec0c317243c24ca06fcc" name="curl" arch="x86_64">
  <version epoch="0" ver="8.0.1" rel="150400.5.36.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
</package>
<package pkgid="28986a3a0f188d6b9925289f050a437d706aed4b266392644be6878353266134" name="curl" arch="aarch64">
  <version epoch="0" ver="8.0.1" rel="150400.5.41.1"/>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701950400">- Fix: libssh: Implement SFTP packet size limit (bsc#1216987)
  * Add curl-libssh_Implement_SFTP_packet_size_limit.patch</changelog>
</package>
<package pkgid="ef6fd0e8777b6a946d24bab9a9ed28f50f920c60c5c9535386eb4a5af5700019" name="curl" arch="s390x">
  <version epoch="0" ver="8.0.1" rel="150400.5.41.1"/>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701950400">- Fix: libssh: Implement SFTP packet size limit (bsc#1216987)
  * Add curl-libssh_Implement_SFTP_packet_size_limit.patch</changelog>
</package>
<package pkgid="4895bbea9f7694b60076f17fd669b04fc81f1e417a57b35d8375646b6246df2c" name="curl" arch="src">
  <version epoch="0" ver="8.0.1" rel="150400.5.41.1"/>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701950400">- Fix: libssh: Implement SFTP packet size limit (bsc#1216987)
  * Add curl-libssh_Implement_SFTP_packet_size_limit.patch</changelog>
</package>
<package pkgid="aa1cb5e7ee2f550526908edc9e94d8b167ef15da42499143c72decc90794f40e" name="curl" arch="x86_64">
  <version epoch="0" ver="8.0.1" rel="150400.5.41.1"/>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701950400">- Fix: libssh: Implement SFTP packet size limit (bsc#1216987)
  * Add curl-libssh_Implement_SFTP_packet_size_limit.patch</changelog>
</package>
<package pkgid="20a95b3d916692f6247e43a56da19e613cf3b510fb5c1a137624dc80b10d4113" name="curl" arch="aarch64">
  <version epoch="0" ver="8.0.1" rel="150400.5.44.1"/>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701950400">- Fix: libssh: Implement SFTP packet size limit (bsc#1216987)
  * Add curl-libssh_Implement_SFTP_packet_size_limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711022400">- Security fix: [bsc#1221667, CVE-2024-2398]
  * curl: HTTP/2 push headers memory-leak
  * Add curl-CVE-2024-2398.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711108800">- Security fix: [bsc#1221665, CVE-2024-2004]
  * Usage of disabled protocol
  * Add curl-CVE-2024-2004.patch</changelog>
</package>
<package pkgid="5f24ed062a1ec63b636d5872eaf5a7a6659a2cdc218753e8cbcf87bcfb21e6b9" name="curl" arch="s390x">
  <version epoch="0" ver="8.0.1" rel="150400.5.44.1"/>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701950400">- Fix: libssh: Implement SFTP packet size limit (bsc#1216987)
  * Add curl-libssh_Implement_SFTP_packet_size_limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711022400">- Security fix: [bsc#1221667, CVE-2024-2398]
  * curl: HTTP/2 push headers memory-leak
  * Add curl-CVE-2024-2398.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711108800">- Security fix: [bsc#1221665, CVE-2024-2004]
  * Usage of disabled protocol
  * Add curl-CVE-2024-2004.patch</changelog>
</package>
<package pkgid="7971f0006d928061fc348abf1901e9725b9b8c4074598592b286f6f6f97ecaf1" name="curl" arch="src">
  <version epoch="0" ver="8.0.1" rel="150400.5.44.1"/>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701950400">- Fix: libssh: Implement SFTP packet size limit (bsc#1216987)
  * Add curl-libssh_Implement_SFTP_packet_size_limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711022400">- Security fix: [bsc#1221667, CVE-2024-2398]
  * curl: HTTP/2 push headers memory-leak
  * Add curl-CVE-2024-2398.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711108800">- Security fix: [bsc#1221665, CVE-2024-2004]
  * Usage of disabled protocol
  * Add curl-CVE-2024-2004.patch</changelog>
</package>
<package pkgid="d1605b3d71e0120d03dd9f9f9c041b5116df97ef8301ae0a1155c81341f624e8" name="curl" arch="x86_64">
  <version epoch="0" ver="8.0.1" rel="150400.5.44.1"/>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701950400">- Fix: libssh: Implement SFTP packet size limit (bsc#1216987)
  * Add curl-libssh_Implement_SFTP_packet_size_limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711022400">- Security fix: [bsc#1221667, CVE-2024-2398]
  * curl: HTTP/2 push headers memory-leak
  * Add curl-CVE-2024-2398.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711108800">- Security fix: [bsc#1221665, CVE-2024-2004]
  * Usage of disabled protocol
  * Add curl-CVE-2024-2004.patch</changelog>
</package>
<package pkgid="8352f4f1da5670ac57a05a81c77e78f7b644f8ecf2c96e9edf293629da1a90b9" name="curl" arch="aarch64">
  <version epoch="0" ver="8.0.1" rel="150400.5.47.1"/>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701950400">- Fix: libssh: Implement SFTP packet size limit (bsc#1216987)
  * Add curl-libssh_Implement_SFTP_packet_size_limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711022400">- Security fix: [bsc#1221667, CVE-2024-2398]
  * curl: HTTP/2 push headers memory-leak
  * Add curl-CVE-2024-2398.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711108800">- Security fix: [bsc#1221665, CVE-2024-2004]
  * Usage of disabled protocol
  * Add curl-CVE-2024-2004.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1722427200">- Security fix: [bsc#1228535, CVE-2024-7264]
  * curl: ASN.1 date parser overread
  * Add curl-CVE-2024-7264.patch</changelog>
</package>
<package pkgid="6688e77057fdc2871fd49c761b7c9bd2ba73ceb8798d49c3cc2f2d03cb7f21dd" name="curl" arch="s390x">
  <version epoch="0" ver="8.0.1" rel="150400.5.47.1"/>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701950400">- Fix: libssh: Implement SFTP packet size limit (bsc#1216987)
  * Add curl-libssh_Implement_SFTP_packet_size_limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711022400">- Security fix: [bsc#1221667, CVE-2024-2398]
  * curl: HTTP/2 push headers memory-leak
  * Add curl-CVE-2024-2398.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711108800">- Security fix: [bsc#1221665, CVE-2024-2004]
  * Usage of disabled protocol
  * Add curl-CVE-2024-2004.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1722427200">- Security fix: [bsc#1228535, CVE-2024-7264]
  * curl: ASN.1 date parser overread
  * Add curl-CVE-2024-7264.patch</changelog>
</package>
<package pkgid="ae3702b83e8b2855c4bd80f6ef80bc24c13cbbf92bce1a0a222155c9570e3a59" name="curl" arch="src">
  <version epoch="0" ver="8.0.1" rel="150400.5.47.1"/>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701950400">- Fix: libssh: Implement SFTP packet size limit (bsc#1216987)
  * Add curl-libssh_Implement_SFTP_packet_size_limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711022400">- Security fix: [bsc#1221667, CVE-2024-2398]
  * curl: HTTP/2 push headers memory-leak
  * Add curl-CVE-2024-2398.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711108800">- Security fix: [bsc#1221665, CVE-2024-2004]
  * Usage of disabled protocol
  * Add curl-CVE-2024-2004.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1722427200">- Security fix: [bsc#1228535, CVE-2024-7264]
  * curl: ASN.1 date parser overread
  * Add curl-CVE-2024-7264.patch</changelog>
</package>
<package pkgid="10d81de0940167f9cfed2f4accc72aa4fa2ffe04e9d4777a26e9dfd2cc8e72d6" name="curl" arch="x86_64">
  <version epoch="0" ver="8.0.1" rel="150400.5.47.1"/>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701950400">- Fix: libssh: Implement SFTP packet size limit (bsc#1216987)
  * Add curl-libssh_Implement_SFTP_packet_size_limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711022400">- Security fix: [bsc#1221667, CVE-2024-2398]
  * curl: HTTP/2 push headers memory-leak
  * Add curl-CVE-2024-2398.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711108800">- Security fix: [bsc#1221665, CVE-2024-2004]
  * Usage of disabled protocol
  * Add curl-CVE-2024-2004.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1722427200">- Security fix: [bsc#1228535, CVE-2024-7264]
  * curl: ASN.1 date parser overread
  * Add curl-CVE-2024-7264.patch</changelog>
</package>
<package pkgid="a4985a9ef818889cf39a4c9481972b6af6bcc25ec7e2426eb8dc67858e488861" name="curl" arch="aarch64">
  <version epoch="0" ver="8.0.1" rel="150400.5.50.1"/>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701950400">- Fix: libssh: Implement SFTP packet size limit (bsc#1216987)
  * Add curl-libssh_Implement_SFTP_packet_size_limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711022400">- Security fix: [bsc#1221667, CVE-2024-2398]
  * curl: HTTP/2 push headers memory-leak
  * Add curl-CVE-2024-2398.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711108800">- Security fix: [bsc#1221665, CVE-2024-2004]
  * Usage of disabled protocol
  * Add curl-CVE-2024-2004.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1722427200">- Security fix: [bsc#1228535, CVE-2024-7264]
  * curl: ASN.1 date parser overread
  * Add curl-CVE-2024-7264.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725451200">- Security fix: [bsc#1230093, CVE-2024-8096]
  * curl: OCSP stapling bypass with GnuTLS
  * Add curl-CVE-2024-8096.patch</changelog>
</package>
<package pkgid="48579a8d91f1919ef2c21ea37ad52188e3c1534e920eb51c6d3bef496d0bfb60" name="curl" arch="s390x">
  <version epoch="0" ver="8.0.1" rel="150400.5.50.1"/>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701950400">- Fix: libssh: Implement SFTP packet size limit (bsc#1216987)
  * Add curl-libssh_Implement_SFTP_packet_size_limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711022400">- Security fix: [bsc#1221667, CVE-2024-2398]
  * curl: HTTP/2 push headers memory-leak
  * Add curl-CVE-2024-2398.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711108800">- Security fix: [bsc#1221665, CVE-2024-2004]
  * Usage of disabled protocol
  * Add curl-CVE-2024-2004.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1722427200">- Security fix: [bsc#1228535, CVE-2024-7264]
  * curl: ASN.1 date parser overread
  * Add curl-CVE-2024-7264.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725451200">- Security fix: [bsc#1230093, CVE-2024-8096]
  * curl: OCSP stapling bypass with GnuTLS
  * Add curl-CVE-2024-8096.patch</changelog>
</package>
<package pkgid="95d0148ad1ca0950383e05b41723807bd38dab34ba54bce776bbff3250d9a36a" name="curl" arch="src">
  <version epoch="0" ver="8.0.1" rel="150400.5.50.1"/>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701950400">- Fix: libssh: Implement SFTP packet size limit (bsc#1216987)
  * Add curl-libssh_Implement_SFTP_packet_size_limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711022400">- Security fix: [bsc#1221667, CVE-2024-2398]
  * curl: HTTP/2 push headers memory-leak
  * Add curl-CVE-2024-2398.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711108800">- Security fix: [bsc#1221665, CVE-2024-2004]
  * Usage of disabled protocol
  * Add curl-CVE-2024-2004.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1722427200">- Security fix: [bsc#1228535, CVE-2024-7264]
  * curl: ASN.1 date parser overread
  * Add curl-CVE-2024-7264.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725451200">- Security fix: [bsc#1230093, CVE-2024-8096]
  * curl: OCSP stapling bypass with GnuTLS
  * Add curl-CVE-2024-8096.patch</changelog>
</package>
<package pkgid="56e58c4132c7976db071a53e8f307f249dbfd47262081fc2934f129b2e528316" name="curl" arch="x86_64">
  <version epoch="0" ver="8.0.1" rel="150400.5.50.1"/>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701950400">- Fix: libssh: Implement SFTP packet size limit (bsc#1216987)
  * Add curl-libssh_Implement_SFTP_packet_size_limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711022400">- Security fix: [bsc#1221667, CVE-2024-2398]
  * curl: HTTP/2 push headers memory-leak
  * Add curl-CVE-2024-2398.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711108800">- Security fix: [bsc#1221665, CVE-2024-2004]
  * Usage of disabled protocol
  * Add curl-CVE-2024-2004.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1722427200">- Security fix: [bsc#1228535, CVE-2024-7264]
  * curl: ASN.1 date parser overread
  * Add curl-CVE-2024-7264.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725451200">- Security fix: [bsc#1230093, CVE-2024-8096]
  * curl: OCSP stapling bypass with GnuTLS
  * Add curl-CVE-2024-8096.patch</changelog>
</package>
<package pkgid="28e4f11e2489f51f3b14d597ab80890ce879c8c19000a425c41172a210aa92e6" name="device-mapper" arch="aarch64">
  <version epoch="0" ver="2.03.22_1.02.196" rel="150500.7.9.1"/>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6753)
  - device-mapper version upgrade to 1.02.196
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
</package>
<package pkgid="66273e91f835516b5e3e72697c444715f4ab4272bcc1ee24953339c4b2348ee4" name="device-mapper" arch="s390x">
  <version epoch="0" ver="2.03.22_1.02.196" rel="150500.7.9.1"/>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6753)
  - device-mapper version upgrade to 1.02.196
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
</package>
<package pkgid="252edd8bbb5e46d58e061a8ce95bf92703c2109fe77b6c4edb8c7276fb03eb54" name="device-mapper" arch="x86_64">
  <version epoch="0" ver="2.03.22_1.02.196" rel="150500.7.9.1"/>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6753)
  - device-mapper version upgrade to 1.02.196
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
</package>
<package pkgid="0f6731a9915fe8946e8740fe47a7c52605470792a90526aeca34a512009f8a8e" name="dmidecode" arch="aarch64">
  <version epoch="0" ver="3.6" rel="150400.16.11.2"/>
  <changelog author="mpluskal@suse.com" date="1424433600">- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="meissner@suse.com" date="1424606400">- dmidecode.keyring was empty, reference the savannah keyring.
  but the tarball is signed by someone unknown without gpg signatures,
  so no keyring for now.</changelog>
  <changelog author="jdelvare@suse.de" date="1441281600">- Update to upstream version 3.0 (FATE#320746, FATE#320773):
  * Adds support for SMBIOS 3.0. This includes a new (64-bit) entry
    point format and new enumerated values for recent hardware.
  * Adds support for the new kernel interface (as of Linux v4.2) as
    an alternative to relying on /dev/mem to access the entry point
    and DMI table.
  * Adds decoding of Acer-specific DMI type 170 and HP-specific DMI
    types 212, 219 and 233.
  * Obsoletes dmidecode-1.173-drop-cast.patch,
    dmidecode-1.175-fix-SMBIOS-2.8.0.patch,
    dmidecode-1.176-SMBIOS-2.8-is-supported.patch,
    dmidecode-1.177-decode-pcie3-slot-id.patch,
    dmidecode-1.181-decode-CPUID-recent-AMD.patch, and
    dmidecode-1.182-decode-ddr4-memory-type.patch.
  * Various minor fixes and clean-ups.
  * Skip the SMBIOS version comparison in quiet mode (bsc#974862).</changelog>
  <changelog author="jdelvare@suse.de" date="1462276800">- dmidecode-01-add-no-sysfs-option-description-to-h-output.patch:
  Add "--no-sysfs" option description to -h output.
- dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch:
  Fix 'No SMBIOS nor DMI entry point found' on SMBIOS3.
- dmidecode-03-let-read_file-return-the-actual-data-size.patch:
  Let read_file return the actual data size.
- dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch:
  Use read_file() to read the DMI table from sysfs.
  https://savannah.nongnu.org/bugs/?46176
- dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch:
  Use DWORD for Structure table maximum size in SMBIOS3.
- dmidecode-06-hide-irrelevant-fixup-message.patch:
  Hide irrelevant fixup message.
  http://savannah.nongnu.org/support/?109024</changelog>
  <changelog author="jdelvare@suse.de" date="1484913600">- dmidecode-07-only-decode-one-dmi-table.patch: Only decode one
  DMI table.
  https://savannah.nongnu.org/bugs/?50022</changelog>
  <changelog author="jdelvare@suse.de" date="1495627200">- Update to upstream version 3.1:
  * Support for SMBIOS 3.1.0 and 3.1.1. This includes new chassis
    types, new processor family names, new processor family upgrade
    names, and new slot types, as well as support of larger BIOS
    ROM sizes and cache sizes, and a new structure type (43, TPM
    Device.)
  * A new command line option to query OEM strings.
  * All error messages are now printed on stderr (#47274, #48158.)
  * Fixes a crash with SIGBUS (#46066.)
  * Various minor fixes, improvements and cleanups.
  * Obsoletes dmidecode-01-add-no-sysfs-option-description-to-h-output.patch,
    dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch,
    dmidecode-03-let-read_file-return-the-actual-data-size.patch,
    dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch,
    dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch,
    dmidecode-06-hide-irrelevant-fixup-message.patch, and
    dmidecode-07-only-decode-one-dmi-table.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1500292800">- Add missing bug numbers and FATE references in changes file
  (bsc#1041670).</changelog>
  <changelog author="jdelvare@suse.de" date="1523966400">- dmioem-reflect-hpe-new-company-name.patch: Reflect HPE's new
  company name.
- dmidecode-fix-tpm-device-firmware-version.patch: Fix firmware
  version of TPM device.
- dmioem-fix-hpe-type-219-uefi-flag.patch: Fix the reporting of
  HP/HPE UEFI feature.</changelog>
  <changelog author="jdelvare@suse.de" date="1537185600">- Update to upstream version 3.2 (FATE#326044):
  * [COMPATIBILITY] The UUID is now displayed using lowercase
    letters, per RFC 4122 (#53569). You must ensure that any code
    parsing it is case-insensitive.
  * Support for SMBIOS 3.2.0. This includes new processor names,
    new socket and port connector types, new system slot state and
    property, and support for non-volatile memory (NVDIMM).
  * Support for Redfish management controllers.
  * A new command line option to query a specific structure by its
    handle.
  * A new command line option to query the system family string.
  * Support for 3 ThinkPad-specific structures (patch #9642).
  * Support for HPE's new company name.
  * Support UEFI on FreeBSD.
  * Important bug fixes:
    Fix firmware version of TPM device
    Fix the HPE UEFI feature flag check
  * (biosdecode) A new command line option to fully decode PIR
    information (support request #109339).
  * Obsoletes dmioem-reflect-hpe-new-company-name.patch,
    dmidecode-fix-tpm-device-firmware-version.patch, and
    dmioem-fix-hpe-type-219-uefi-flag.patch.
  * CHANGELOG is gone, package more compact NEWS file instead.
- Reenable signature checking.
- Use %license for LICENSE file.</changelog>
  <changelog author="jdelvare@suse.de" date="1540209600">- dmidecode-fix-redfish-hostname-print-length.patch: Fix Redfish
  Hostname print length (bsc#1112755).</changelog>
  <changelog author="jdelvare@suse.de" date="1547467200">- Don't overwrite the path of license (boo#1121851).</changelog>
  <changelog author="jdelvare@suse.de" date="1547640000">- dmidecode-add-logical-non-volatile-device.patch: Add "Logical
  non-volatile device" to the memory device types (bsc#1120149).
- Use %doc directly on files instead of installing them explicitly.</changelog>
  <changelog author="jdelvare@suse.de" date="1576670400">Partial support for SMBIOS 3.3.0:
- dmidecode-add-enumerated-values-from-smbios-3.3.0.patch: Add
  enumerated values from SMBIOS 3.3.0 (bsc#1153533 bsc#1158833
  jsc#SLE-10875).
  3 recommended fixes from upstream:
- dmidecode-only-scan-dev-mem-for-entry-point-on-x86.patch: Only
  scan /dev/mem for entry point on x86 (fixes reboot on ARM64).
- dmidecode-fix-formatting-of-tpm-table-output.patch: Fix
  formatting of TPM table output (missing newlines).
- dmidecode-fix-system-slot-information-for-pcie-ssd.patch: Fix
  System Slot Information for PCIe SSD.</changelog>
  <changelog author="jdelvare@suse.de" date="1604059200">Partial support for SMBIOS 3.4.0:
- dmidecode-add-memory-device-types-from-smbios-3.4.0.patch,
  dmidecode-add-processor-characteristics-bits-from-smbios-3.4.0.patch,
  dmidecode-add-processor-upgrades-from-smbios-3.4.0.patch,
  dmidecode-add-slot-characteristics2-from-smbios-3.4.0.patch,
  dmidecode-add-system-slot-types-from-smbios-3.4.0.patch: Add
  enumerated values from SMBIOS 3.4.0 (bsc#1174257).
  1 presentation fix from upstream:
- dmidecode-skip-details-of-uninstalled-memory-modules.patch:
  Skip details of uninstalled memory modules (bsc#1174257).</changelog>
  <changelog author="jdelvare@suse.de" date="1607601600">1 recommended fix from upstream:
- dmidecode-missing-commas.patch: Two missing commas in data arrays
  cause off-by-one or mangling during index resolution
  (bsc#1174257).</changelog>
  <changelog author="jdelvare@suse.de" date="1663070400">- Update to upstream version 3.4:
  * This update implements jsc#SLE-24502 and jsc#PED-1466.
  * [COMPATIBILITY] Document how the UUID fields are interpreted.
  * [PORTABILITY] Don't use memcpy on /dev/mem on arm64.
  * Support for SMBIOS 3.4.0. This includes new memory device types, new
    processor upgrades, new slot types and characteristics, decoding of memory
    module extended speed, new system slot types, new processor characteristics
    and new format of Processor ID.
  * Support for SMBIOS 3.5.0. This includes new processor upgrades, BIOS
    characteristics, new slot characteristics, new on-board device types, new
    pointing device interface types, and a new record type (type 45 -
    Firmware Inventory Information).
  * Decode HPE OEM records 194, 199, 203, 236, 237, 238 ans 240.
  * Bug fixes:
    Fix OEM vendor name matching
  * Minor improvements:
    Add bios-revision, firmware-revision and system-sku-number to -s option
    Use the most appropriate unit for cache size
    Decode system slot base bus width and peers
    Skip details of uninstalled memory modules
    Don't display the raw CPU ID in quiet mode
    Improve the formatting of the manual pages
  * Obsoletes dmidecode-add-enumerated-values-from-smbios-3.3.0.patch,
    dmidecode-add-logical-non-volatile-device.patch,
    dmidecode-add-memory-device-types-from-smbios-3.4.0.patch,
    dmidecode-add-processor-characteristics-bits-from-smbios-3.4.0.patch,
    dmidecode-add-processor-upgrades-from-smbios-3.4.0.patch,
    dmidecode-add-slot-characteristics2-from-smbios-3.4.0.patch,
    dmidecode-add-system-slot-types-from-smbios-3.4.0.patch,
    dmidecode-fix-formatting-of-tpm-table-output.patch,
    dmidecode-fix-redfish-hostname-print-length.patch,
    dmidecode-fix-system-slot-information-for-pcie-ssd.patch,
    dmidecode-missing-commas.patch,
    dmidecode-only-scan-dev-mem-for-entry-point-on-x86.patch and
    dmidecode-skip-details-of-uninstalled-memory-modules.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1663070401">2 recommended fixes from upstream:
- news-fix-typo.patch: We ship the NEWS file so avoid including a
  typo in it.
- dmioem-fix-segmentation-fault-in-dmi_hp_240_attr.patch: Passing
  NULL to a %s printf conversion specifier is illegal, and can
  result in a segmentation fault. Current version of glibc doesn't
  mind, but alternative, past or future libc implementations could
  crash, so let's fix it.</changelog>
  <changelog author="jdelvare@suse.de" date="1681473600">Security fixes (CVE-2023-30630)
- dmidecode-split-table-fetching-from-decoding.patch: dmidecode:
  Clean up function dmi_table so that it does only one thing
  (bsc#1210418).
- dmidecode-write-the-whole-dump-file-at-once.patch: When option
  - -dump-bin is used, write the whole dump file at once, instead of
  opening and closing the file separately for the table and then
  for the entry point (bsc#1210418).
- dmidecode-do-not-let-dump-bin-overwrite-an-existing-file.patch:
  Make sure that the file passed to option --dump-bin does not
  already exist (bsc#1210418).
- ensure-dev-mem-is-a-character-device-file.patch: Add a safety
  check on the type of the mem device file we are asked to read
  from, if we are root (bsc#1210418).
  3 recommended fixes from upstream:
- dmioem-typo-fix-virutal-virtual.patch: Simple typo fix in a
  user-visible string.
- dmidecode-fortify-entry-point-length-checks.patch: Ensure that
  the SMBIOS entry point is long enough to include all the fields
  we need.
- dmioem-hpe-oem-record-237-firmware-change.patch: Properly decode
  the last field of HPE OEM record type 237.</changelog>
  <changelog author="jdelvare@suse.de" date="1681905600">- use-read_file-to-read-from-dump.patch: Fix an old harmless bug
  which would prevent root from using the --from-dump option since
  the latest security fixes (bsc#1210418).</changelog>
  <changelog author="jdelvare@suse.de" date="1721390400">- Update to upstream version 3.6 (jsc#PED-8574):
  * Support for SMBIOS 3.6.0. This includes new memory device types, new
    processor upgrades, and Loongarch support.
  * Support for SMBIOS 3.7.0. This includes new port types, new processor
    upgrades, new slot characteristics and new fields for memory modules.
  * Add bash completion.
  * Decode HPE OEM records 197, 216, 224, 230, 238, 239, 242 and 245.
  * Implement options --list-strings and --list-types.
  * Update HPE OEM records 203, 212, 216, 221, 233 and 236.
  * Update Redfish support.
  * Bug fixes:
    Fix enabled slot characteristics not being printed
  * Minor improvements:
    Print slot width on its own line
    Use standard strings for slot width
  * Add a --no-quirks option.
  * Drop the CPUID exception list.
  * Obsoletes dmidecode-do-not-let-dump-bin-overwrite-an-existing-file.patch,
    dmidecode-fortify-entry-point-length-checks.patch,
    dmidecode-split-table-fetching-from-decoding.patch,
    dmidecode-write-the-whole-dump-file-at-once.patch,
    dmioem-fix-segmentation-fault-in-dmi_hp_240_attr.patch,
    dmioem-hpe-oem-record-237-firmware-change.patch,
    dmioem-typo-fix-virutal-virtual.patch,
    ensure-dev-mem-is-a-character-device-file.patch,
    news-fix-typo.patch and
    use-read_file-to-read-from-dump.patch.
  Update for HPE servers from upstream:
- dmioem-update-hpe-oem-type-238.patch: Decode PCI bus segment in
  HPE type 238 records.</changelog>
</package>
<package pkgid="0bfd382009627bfa511e2c78aaa7bdc4dd0e8c8f085c3ad3c9cf9b0e8c41cfcd" name="dmidecode" arch="src">
  <version epoch="0" ver="3.6" rel="150400.16.11.2"/>
  <changelog author="mpluskal@suse.com" date="1424433600">- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="meissner@suse.com" date="1424606400">- dmidecode.keyring was empty, reference the savannah keyring.
  but the tarball is signed by someone unknown without gpg signatures,
  so no keyring for now.</changelog>
  <changelog author="jdelvare@suse.de" date="1441281600">- Update to upstream version 3.0 (FATE#320746, FATE#320773):
  * Adds support for SMBIOS 3.0. This includes a new (64-bit) entry
    point format and new enumerated values for recent hardware.
  * Adds support for the new kernel interface (as of Linux v4.2) as
    an alternative to relying on /dev/mem to access the entry point
    and DMI table.
  * Adds decoding of Acer-specific DMI type 170 and HP-specific DMI
    types 212, 219 and 233.
  * Obsoletes dmidecode-1.173-drop-cast.patch,
    dmidecode-1.175-fix-SMBIOS-2.8.0.patch,
    dmidecode-1.176-SMBIOS-2.8-is-supported.patch,
    dmidecode-1.177-decode-pcie3-slot-id.patch,
    dmidecode-1.181-decode-CPUID-recent-AMD.patch, and
    dmidecode-1.182-decode-ddr4-memory-type.patch.
  * Various minor fixes and clean-ups.
  * Skip the SMBIOS version comparison in quiet mode (bsc#974862).</changelog>
  <changelog author="jdelvare@suse.de" date="1462276800">- dmidecode-01-add-no-sysfs-option-description-to-h-output.patch:
  Add "--no-sysfs" option description to -h output.
- dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch:
  Fix 'No SMBIOS nor DMI entry point found' on SMBIOS3.
- dmidecode-03-let-read_file-return-the-actual-data-size.patch:
  Let read_file return the actual data size.
- dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch:
  Use read_file() to read the DMI table from sysfs.
  https://savannah.nongnu.org/bugs/?46176
- dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch:
  Use DWORD for Structure table maximum size in SMBIOS3.
- dmidecode-06-hide-irrelevant-fixup-message.patch:
  Hide irrelevant fixup message.
  http://savannah.nongnu.org/support/?109024</changelog>
  <changelog author="jdelvare@suse.de" date="1484913600">- dmidecode-07-only-decode-one-dmi-table.patch: Only decode one
  DMI table.
  https://savannah.nongnu.org/bugs/?50022</changelog>
  <changelog author="jdelvare@suse.de" date="1495627200">- Update to upstream version 3.1:
  * Support for SMBIOS 3.1.0 and 3.1.1. This includes new chassis
    types, new processor family names, new processor family upgrade
    names, and new slot types, as well as support of larger BIOS
    ROM sizes and cache sizes, and a new structure type (43, TPM
    Device.)
  * A new command line option to query OEM strings.
  * All error messages are now printed on stderr (#47274, #48158.)
  * Fixes a crash with SIGBUS (#46066.)
  * Various minor fixes, improvements and cleanups.
  * Obsoletes dmidecode-01-add-no-sysfs-option-description-to-h-output.patch,
    dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch,
    dmidecode-03-let-read_file-return-the-actual-data-size.patch,
    dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch,
    dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch,
    dmidecode-06-hide-irrelevant-fixup-message.patch, and
    dmidecode-07-only-decode-one-dmi-table.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1500292800">- Add missing bug numbers and FATE references in changes file
  (bsc#1041670).</changelog>
  <changelog author="jdelvare@suse.de" date="1523966400">- dmioem-reflect-hpe-new-company-name.patch: Reflect HPE's new
  company name.
- dmidecode-fix-tpm-device-firmware-version.patch: Fix firmware
  version of TPM device.
- dmioem-fix-hpe-type-219-uefi-flag.patch: Fix the reporting of
  HP/HPE UEFI feature.</changelog>
  <changelog author="jdelvare@suse.de" date="1537185600">- Update to upstream version 3.2 (FATE#326044):
  * [COMPATIBILITY] The UUID is now displayed using lowercase
    letters, per RFC 4122 (#53569). You must ensure that any code
    parsing it is case-insensitive.
  * Support for SMBIOS 3.2.0. This includes new processor names,
    new socket and port connector types, new system slot state and
    property, and support for non-volatile memory (NVDIMM).
  * Support for Redfish management controllers.
  * A new command line option to query a specific structure by its
    handle.
  * A new command line option to query the system family string.
  * Support for 3 ThinkPad-specific structures (patch #9642).
  * Support for HPE's new company name.
  * Support UEFI on FreeBSD.
  * Important bug fixes:
    Fix firmware version of TPM device
    Fix the HPE UEFI feature flag check
  * (biosdecode) A new command line option to fully decode PIR
    information (support request #109339).
  * Obsoletes dmioem-reflect-hpe-new-company-name.patch,
    dmidecode-fix-tpm-device-firmware-version.patch, and
    dmioem-fix-hpe-type-219-uefi-flag.patch.
  * CHANGELOG is gone, package more compact NEWS file instead.
- Reenable signature checking.
- Use %license for LICENSE file.</changelog>
  <changelog author="jdelvare@suse.de" date="1540209600">- dmidecode-fix-redfish-hostname-print-length.patch: Fix Redfish
  Hostname print length (bsc#1112755).</changelog>
  <changelog author="jdelvare@suse.de" date="1547467200">- Don't overwrite the path of license (boo#1121851).</changelog>
  <changelog author="jdelvare@suse.de" date="1547640000">- dmidecode-add-logical-non-volatile-device.patch: Add "Logical
  non-volatile device" to the memory device types (bsc#1120149).
- Use %doc directly on files instead of installing them explicitly.</changelog>
  <changelog author="jdelvare@suse.de" date="1576670400">Partial support for SMBIOS 3.3.0:
- dmidecode-add-enumerated-values-from-smbios-3.3.0.patch: Add
  enumerated values from SMBIOS 3.3.0 (bsc#1153533 bsc#1158833
  jsc#SLE-10875).
  3 recommended fixes from upstream:
- dmidecode-only-scan-dev-mem-for-entry-point-on-x86.patch: Only
  scan /dev/mem for entry point on x86 (fixes reboot on ARM64).
- dmidecode-fix-formatting-of-tpm-table-output.patch: Fix
  formatting of TPM table output (missing newlines).
- dmidecode-fix-system-slot-information-for-pcie-ssd.patch: Fix
  System Slot Information for PCIe SSD.</changelog>
  <changelog author="jdelvare@suse.de" date="1604059200">Partial support for SMBIOS 3.4.0:
- dmidecode-add-memory-device-types-from-smbios-3.4.0.patch,
  dmidecode-add-processor-characteristics-bits-from-smbios-3.4.0.patch,
  dmidecode-add-processor-upgrades-from-smbios-3.4.0.patch,
  dmidecode-add-slot-characteristics2-from-smbios-3.4.0.patch,
  dmidecode-add-system-slot-types-from-smbios-3.4.0.patch: Add
  enumerated values from SMBIOS 3.4.0 (bsc#1174257).
  1 presentation fix from upstream:
- dmidecode-skip-details-of-uninstalled-memory-modules.patch:
  Skip details of uninstalled memory modules (bsc#1174257).</changelog>
  <changelog author="jdelvare@suse.de" date="1607601600">1 recommended fix from upstream:
- dmidecode-missing-commas.patch: Two missing commas in data arrays
  cause off-by-one or mangling during index resolution
  (bsc#1174257).</changelog>
  <changelog author="jdelvare@suse.de" date="1663070400">- Update to upstream version 3.4:
  * This update implements jsc#SLE-24502 and jsc#PED-1466.
  * [COMPATIBILITY] Document how the UUID fields are interpreted.
  * [PORTABILITY] Don't use memcpy on /dev/mem on arm64.
  * Support for SMBIOS 3.4.0. This includes new memory device types, new
    processor upgrades, new slot types and characteristics, decoding of memory
    module extended speed, new system slot types, new processor characteristics
    and new format of Processor ID.
  * Support for SMBIOS 3.5.0. This includes new processor upgrades, BIOS
    characteristics, new slot characteristics, new on-board device types, new
    pointing device interface types, and a new record type (type 45 -
    Firmware Inventory Information).
  * Decode HPE OEM records 194, 199, 203, 236, 237, 238 ans 240.
  * Bug fixes:
    Fix OEM vendor name matching
  * Minor improvements:
    Add bios-revision, firmware-revision and system-sku-number to -s option
    Use the most appropriate unit for cache size
    Decode system slot base bus width and peers
    Skip details of uninstalled memory modules
    Don't display the raw CPU ID in quiet mode
    Improve the formatting of the manual pages
  * Obsoletes dmidecode-add-enumerated-values-from-smbios-3.3.0.patch,
    dmidecode-add-logical-non-volatile-device.patch,
    dmidecode-add-memory-device-types-from-smbios-3.4.0.patch,
    dmidecode-add-processor-characteristics-bits-from-smbios-3.4.0.patch,
    dmidecode-add-processor-upgrades-from-smbios-3.4.0.patch,
    dmidecode-add-slot-characteristics2-from-smbios-3.4.0.patch,
    dmidecode-add-system-slot-types-from-smbios-3.4.0.patch,
    dmidecode-fix-formatting-of-tpm-table-output.patch,
    dmidecode-fix-redfish-hostname-print-length.patch,
    dmidecode-fix-system-slot-information-for-pcie-ssd.patch,
    dmidecode-missing-commas.patch,
    dmidecode-only-scan-dev-mem-for-entry-point-on-x86.patch and
    dmidecode-skip-details-of-uninstalled-memory-modules.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1663070401">2 recommended fixes from upstream:
- news-fix-typo.patch: We ship the NEWS file so avoid including a
  typo in it.
- dmioem-fix-segmentation-fault-in-dmi_hp_240_attr.patch: Passing
  NULL to a %s printf conversion specifier is illegal, and can
  result in a segmentation fault. Current version of glibc doesn't
  mind, but alternative, past or future libc implementations could
  crash, so let's fix it.</changelog>
  <changelog author="jdelvare@suse.de" date="1681473600">Security fixes (CVE-2023-30630)
- dmidecode-split-table-fetching-from-decoding.patch: dmidecode:
  Clean up function dmi_table so that it does only one thing
  (bsc#1210418).
- dmidecode-write-the-whole-dump-file-at-once.patch: When option
  - -dump-bin is used, write the whole dump file at once, instead of
  opening and closing the file separately for the table and then
  for the entry point (bsc#1210418).
- dmidecode-do-not-let-dump-bin-overwrite-an-existing-file.patch:
  Make sure that the file passed to option --dump-bin does not
  already exist (bsc#1210418).
- ensure-dev-mem-is-a-character-device-file.patch: Add a safety
  check on the type of the mem device file we are asked to read
  from, if we are root (bsc#1210418).
  3 recommended fixes from upstream:
- dmioem-typo-fix-virutal-virtual.patch: Simple typo fix in a
  user-visible string.
- dmidecode-fortify-entry-point-length-checks.patch: Ensure that
  the SMBIOS entry point is long enough to include all the fields
  we need.
- dmioem-hpe-oem-record-237-firmware-change.patch: Properly decode
  the last field of HPE OEM record type 237.</changelog>
  <changelog author="jdelvare@suse.de" date="1681905600">- use-read_file-to-read-from-dump.patch: Fix an old harmless bug
  which would prevent root from using the --from-dump option since
  the latest security fixes (bsc#1210418).</changelog>
  <changelog author="jdelvare@suse.de" date="1721390400">- Update to upstream version 3.6 (jsc#PED-8574):
  * Support for SMBIOS 3.6.0. This includes new memory device types, new
    processor upgrades, and Loongarch support.
  * Support for SMBIOS 3.7.0. This includes new port types, new processor
    upgrades, new slot characteristics and new fields for memory modules.
  * Add bash completion.
  * Decode HPE OEM records 197, 216, 224, 230, 238, 239, 242 and 245.
  * Implement options --list-strings and --list-types.
  * Update HPE OEM records 203, 212, 216, 221, 233 and 236.
  * Update Redfish support.
  * Bug fixes:
    Fix enabled slot characteristics not being printed
  * Minor improvements:
    Print slot width on its own line
    Use standard strings for slot width
  * Add a --no-quirks option.
  * Drop the CPUID exception list.
  * Obsoletes dmidecode-do-not-let-dump-bin-overwrite-an-existing-file.patch,
    dmidecode-fortify-entry-point-length-checks.patch,
    dmidecode-split-table-fetching-from-decoding.patch,
    dmidecode-write-the-whole-dump-file-at-once.patch,
    dmioem-fix-segmentation-fault-in-dmi_hp_240_attr.patch,
    dmioem-hpe-oem-record-237-firmware-change.patch,
    dmioem-typo-fix-virutal-virtual.patch,
    ensure-dev-mem-is-a-character-device-file.patch,
    news-fix-typo.patch and
    use-read_file-to-read-from-dump.patch.
  Update for HPE servers from upstream:
- dmioem-update-hpe-oem-type-238.patch: Decode PCI bus segment in
  HPE type 238 records.</changelog>
</package>
<package pkgid="0691bbc5b410067483ac77217792e28f084e5e66b44e8240e5c11c5bf3ad9266" name="dmidecode" arch="x86_64">
  <version epoch="0" ver="3.6" rel="150400.16.11.2"/>
  <changelog author="mpluskal@suse.com" date="1424433600">- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="meissner@suse.com" date="1424606400">- dmidecode.keyring was empty, reference the savannah keyring.
  but the tarball is signed by someone unknown without gpg signatures,
  so no keyring for now.</changelog>
  <changelog author="jdelvare@suse.de" date="1441281600">- Update to upstream version 3.0 (FATE#320746, FATE#320773):
  * Adds support for SMBIOS 3.0. This includes a new (64-bit) entry
    point format and new enumerated values for recent hardware.
  * Adds support for the new kernel interface (as of Linux v4.2) as
    an alternative to relying on /dev/mem to access the entry point
    and DMI table.
  * Adds decoding of Acer-specific DMI type 170 and HP-specific DMI
    types 212, 219 and 233.
  * Obsoletes dmidecode-1.173-drop-cast.patch,
    dmidecode-1.175-fix-SMBIOS-2.8.0.patch,
    dmidecode-1.176-SMBIOS-2.8-is-supported.patch,
    dmidecode-1.177-decode-pcie3-slot-id.patch,
    dmidecode-1.181-decode-CPUID-recent-AMD.patch, and
    dmidecode-1.182-decode-ddr4-memory-type.patch.
  * Various minor fixes and clean-ups.
  * Skip the SMBIOS version comparison in quiet mode (bsc#974862).</changelog>
  <changelog author="jdelvare@suse.de" date="1462276800">- dmidecode-01-add-no-sysfs-option-description-to-h-output.patch:
  Add "--no-sysfs" option description to -h output.
- dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch:
  Fix 'No SMBIOS nor DMI entry point found' on SMBIOS3.
- dmidecode-03-let-read_file-return-the-actual-data-size.patch:
  Let read_file return the actual data size.
- dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch:
  Use read_file() to read the DMI table from sysfs.
  https://savannah.nongnu.org/bugs/?46176
- dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch:
  Use DWORD for Structure table maximum size in SMBIOS3.
- dmidecode-06-hide-irrelevant-fixup-message.patch:
  Hide irrelevant fixup message.
  http://savannah.nongnu.org/support/?109024</changelog>
  <changelog author="jdelvare@suse.de" date="1484913600">- dmidecode-07-only-decode-one-dmi-table.patch: Only decode one
  DMI table.
  https://savannah.nongnu.org/bugs/?50022</changelog>
  <changelog author="jdelvare@suse.de" date="1495627200">- Update to upstream version 3.1:
  * Support for SMBIOS 3.1.0 and 3.1.1. This includes new chassis
    types, new processor family names, new processor family upgrade
    names, and new slot types, as well as support of larger BIOS
    ROM sizes and cache sizes, and a new structure type (43, TPM
    Device.)
  * A new command line option to query OEM strings.
  * All error messages are now printed on stderr (#47274, #48158.)
  * Fixes a crash with SIGBUS (#46066.)
  * Various minor fixes, improvements and cleanups.
  * Obsoletes dmidecode-01-add-no-sysfs-option-description-to-h-output.patch,
    dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch,
    dmidecode-03-let-read_file-return-the-actual-data-size.patch,
    dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch,
    dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch,
    dmidecode-06-hide-irrelevant-fixup-message.patch, and
    dmidecode-07-only-decode-one-dmi-table.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1500292800">- Add missing bug numbers and FATE references in changes file
  (bsc#1041670).</changelog>
  <changelog author="jdelvare@suse.de" date="1523966400">- dmioem-reflect-hpe-new-company-name.patch: Reflect HPE's new
  company name.
- dmidecode-fix-tpm-device-firmware-version.patch: Fix firmware
  version of TPM device.
- dmioem-fix-hpe-type-219-uefi-flag.patch: Fix the reporting of
  HP/HPE UEFI feature.</changelog>
  <changelog author="jdelvare@suse.de" date="1537185600">- Update to upstream version 3.2 (FATE#326044):
  * [COMPATIBILITY] The UUID is now displayed using lowercase
    letters, per RFC 4122 (#53569). You must ensure that any code
    parsing it is case-insensitive.
  * Support for SMBIOS 3.2.0. This includes new processor names,
    new socket and port connector types, new system slot state and
    property, and support for non-volatile memory (NVDIMM).
  * Support for Redfish management controllers.
  * A new command line option to query a specific structure by its
    handle.
  * A new command line option to query the system family string.
  * Support for 3 ThinkPad-specific structures (patch #9642).
  * Support for HPE's new company name.
  * Support UEFI on FreeBSD.
  * Important bug fixes:
    Fix firmware version of TPM device
    Fix the HPE UEFI feature flag check
  * (biosdecode) A new command line option to fully decode PIR
    information (support request #109339).
  * Obsoletes dmioem-reflect-hpe-new-company-name.patch,
    dmidecode-fix-tpm-device-firmware-version.patch, and
    dmioem-fix-hpe-type-219-uefi-flag.patch.
  * CHANGELOG is gone, package more compact NEWS file instead.
- Reenable signature checking.
- Use %license for LICENSE file.</changelog>
  <changelog author="jdelvare@suse.de" date="1540209600">- dmidecode-fix-redfish-hostname-print-length.patch: Fix Redfish
  Hostname print length (bsc#1112755).</changelog>
  <changelog author="jdelvare@suse.de" date="1547467200">- Don't overwrite the path of license (boo#1121851).</changelog>
  <changelog author="jdelvare@suse.de" date="1547640000">- dmidecode-add-logical-non-volatile-device.patch: Add "Logical
  non-volatile device" to the memory device types (bsc#1120149).
- Use %doc directly on files instead of installing them explicitly.</changelog>
  <changelog author="jdelvare@suse.de" date="1576670400">Partial support for SMBIOS 3.3.0:
- dmidecode-add-enumerated-values-from-smbios-3.3.0.patch: Add
  enumerated values from SMBIOS 3.3.0 (bsc#1153533 bsc#1158833
  jsc#SLE-10875).
  3 recommended fixes from upstream:
- dmidecode-only-scan-dev-mem-for-entry-point-on-x86.patch: Only
  scan /dev/mem for entry point on x86 (fixes reboot on ARM64).
- dmidecode-fix-formatting-of-tpm-table-output.patch: Fix
  formatting of TPM table output (missing newlines).
- dmidecode-fix-system-slot-information-for-pcie-ssd.patch: Fix
  System Slot Information for PCIe SSD.</changelog>
  <changelog author="jdelvare@suse.de" date="1604059200">Partial support for SMBIOS 3.4.0:
- dmidecode-add-memory-device-types-from-smbios-3.4.0.patch,
  dmidecode-add-processor-characteristics-bits-from-smbios-3.4.0.patch,
  dmidecode-add-processor-upgrades-from-smbios-3.4.0.patch,
  dmidecode-add-slot-characteristics2-from-smbios-3.4.0.patch,
  dmidecode-add-system-slot-types-from-smbios-3.4.0.patch: Add
  enumerated values from SMBIOS 3.4.0 (bsc#1174257).
  1 presentation fix from upstream:
- dmidecode-skip-details-of-uninstalled-memory-modules.patch:
  Skip details of uninstalled memory modules (bsc#1174257).</changelog>
  <changelog author="jdelvare@suse.de" date="1607601600">1 recommended fix from upstream:
- dmidecode-missing-commas.patch: Two missing commas in data arrays
  cause off-by-one or mangling during index resolution
  (bsc#1174257).</changelog>
  <changelog author="jdelvare@suse.de" date="1663070400">- Update to upstream version 3.4:
  * This update implements jsc#SLE-24502 and jsc#PED-1466.
  * [COMPATIBILITY] Document how the UUID fields are interpreted.
  * [PORTABILITY] Don't use memcpy on /dev/mem on arm64.
  * Support for SMBIOS 3.4.0. This includes new memory device types, new
    processor upgrades, new slot types and characteristics, decoding of memory
    module extended speed, new system slot types, new processor characteristics
    and new format of Processor ID.
  * Support for SMBIOS 3.5.0. This includes new processor upgrades, BIOS
    characteristics, new slot characteristics, new on-board device types, new
    pointing device interface types, and a new record type (type 45 -
    Firmware Inventory Information).
  * Decode HPE OEM records 194, 199, 203, 236, 237, 238 ans 240.
  * Bug fixes:
    Fix OEM vendor name matching
  * Minor improvements:
    Add bios-revision, firmware-revision and system-sku-number to -s option
    Use the most appropriate unit for cache size
    Decode system slot base bus width and peers
    Skip details of uninstalled memory modules
    Don't display the raw CPU ID in quiet mode
    Improve the formatting of the manual pages
  * Obsoletes dmidecode-add-enumerated-values-from-smbios-3.3.0.patch,
    dmidecode-add-logical-non-volatile-device.patch,
    dmidecode-add-memory-device-types-from-smbios-3.4.0.patch,
    dmidecode-add-processor-characteristics-bits-from-smbios-3.4.0.patch,
    dmidecode-add-processor-upgrades-from-smbios-3.4.0.patch,
    dmidecode-add-slot-characteristics2-from-smbios-3.4.0.patch,
    dmidecode-add-system-slot-types-from-smbios-3.4.0.patch,
    dmidecode-fix-formatting-of-tpm-table-output.patch,
    dmidecode-fix-redfish-hostname-print-length.patch,
    dmidecode-fix-system-slot-information-for-pcie-ssd.patch,
    dmidecode-missing-commas.patch,
    dmidecode-only-scan-dev-mem-for-entry-point-on-x86.patch and
    dmidecode-skip-details-of-uninstalled-memory-modules.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1663070401">2 recommended fixes from upstream:
- news-fix-typo.patch: We ship the NEWS file so avoid including a
  typo in it.
- dmioem-fix-segmentation-fault-in-dmi_hp_240_attr.patch: Passing
  NULL to a %s printf conversion specifier is illegal, and can
  result in a segmentation fault. Current version of glibc doesn't
  mind, but alternative, past or future libc implementations could
  crash, so let's fix it.</changelog>
  <changelog author="jdelvare@suse.de" date="1681473600">Security fixes (CVE-2023-30630)
- dmidecode-split-table-fetching-from-decoding.patch: dmidecode:
  Clean up function dmi_table so that it does only one thing
  (bsc#1210418).
- dmidecode-write-the-whole-dump-file-at-once.patch: When option
  - -dump-bin is used, write the whole dump file at once, instead of
  opening and closing the file separately for the table and then
  for the entry point (bsc#1210418).
- dmidecode-do-not-let-dump-bin-overwrite-an-existing-file.patch:
  Make sure that the file passed to option --dump-bin does not
  already exist (bsc#1210418).
- ensure-dev-mem-is-a-character-device-file.patch: Add a safety
  check on the type of the mem device file we are asked to read
  from, if we are root (bsc#1210418).
  3 recommended fixes from upstream:
- dmioem-typo-fix-virutal-virtual.patch: Simple typo fix in a
  user-visible string.
- dmidecode-fortify-entry-point-length-checks.patch: Ensure that
  the SMBIOS entry point is long enough to include all the fields
  we need.
- dmioem-hpe-oem-record-237-firmware-change.patch: Properly decode
  the last field of HPE OEM record type 237.</changelog>
  <changelog author="jdelvare@suse.de" date="1681905600">- use-read_file-to-read-from-dump.patch: Fix an old harmless bug
  which would prevent root from using the --from-dump option since
  the latest security fixes (bsc#1210418).</changelog>
  <changelog author="jdelvare@suse.de" date="1721390400">- Update to upstream version 3.6 (jsc#PED-8574):
  * Support for SMBIOS 3.6.0. This includes new memory device types, new
    processor upgrades, and Loongarch support.
  * Support for SMBIOS 3.7.0. This includes new port types, new processor
    upgrades, new slot characteristics and new fields for memory modules.
  * Add bash completion.
  * Decode HPE OEM records 197, 216, 224, 230, 238, 239, 242 and 245.
  * Implement options --list-strings and --list-types.
  * Update HPE OEM records 203, 212, 216, 221, 233 and 236.
  * Update Redfish support.
  * Bug fixes:
    Fix enabled slot characteristics not being printed
  * Minor improvements:
    Print slot width on its own line
    Use standard strings for slot width
  * Add a --no-quirks option.
  * Drop the CPUID exception list.
  * Obsoletes dmidecode-do-not-let-dump-bin-overwrite-an-existing-file.patch,
    dmidecode-fortify-entry-point-length-checks.patch,
    dmidecode-split-table-fetching-from-decoding.patch,
    dmidecode-write-the-whole-dump-file-at-once.patch,
    dmioem-fix-segmentation-fault-in-dmi_hp_240_attr.patch,
    dmioem-hpe-oem-record-237-firmware-change.patch,
    dmioem-typo-fix-virutal-virtual.patch,
    ensure-dev-mem-is-a-character-device-file.patch,
    news-fix-typo.patch and
    use-read_file-to-read-from-dump.patch.
  Update for HPE servers from upstream:
- dmioem-update-hpe-oem-type-238.patch: Decode PCI bus segment in
  HPE type 238 records.</changelog>
</package>
<package pkgid="03386654027f3dd0abc7b587b565191caf902ef37c23421727b2290be07c93da" name="docker" arch="aarch64">
  <version epoch="0" ver="24.0.7_ce" rel="150000.190.4"/>
  <changelog author="asarai@suse.com" date="1656504000">- Backport &lt;https://github.com/containerd/fifo/pull/32&gt; to fix a crash-on-start
  issue with dockerd. bsc#1200022
  + 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Fixes:
  * bsc#1214107 - CVE-2023-28840
  * bsc#1214108 - CVE-2023-28841
  * bsc#1214109 - CVE-2023-28842
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
  <changelog author="asarai@suse.com" date="1686744000">- Update to Docker 24.0.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2402&gt;. bsc#1212368
  * Includes the upstreamed fix for the mount table pollution issue.
    bsc#1210797
- Add Recommends for docker-buildx, and add /usr/lib/docker/cli-plugins as
  being provided by this package.
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1687262400">- Add docker-rootless-extras subpackage
  (https://docs.docker.com/engine/security/rootless)</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Recommend docker-rootless-extras instead of Require(ing) it, given
  it's an additional functionality and not inherently required for
  docker to function.</changelog>
  <changelog author="asarai@suse.com" date="1688731200">- Update to Docker 24.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2403&gt;. bsc#1213120
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1688731201">- Update to Docker 24.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2404&gt;. bsc#1213500</changelog>
  <changelog author="dmueller@suse.com" date="1690286400">- Update to Docker 24.0.5-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2405&gt;. bsc#1213229</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to Docker 24.0.6-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2406&gt;. bsc#1215323
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Switch from disabledrun to manualrun in _service.
- Add a docker.socket unit file, but with socket activation effectively
  disabled to ensure that Docker will always run even if you start the socket
  individually. Users should probably just ignore this unit file. bsc#1210141</changelog>
  <changelog author="asarai@suse.com" date="1697025600">- Add a patch to fix apparmor on SLE-12, reverting the upstream removal of
  version-specific templating for the default apparmor profile. bsc#1213500
  + 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to Docker 24.0.7-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2407&gt;. bsc#1217513
  * Deny containers access to /sys/devices/virtual/powercap by default.
  - CVE-2020-8694 bsc#1170415
  - CVE-2020-8695 bsc#1170446
  - CVE-2020-12912 bsc#1178760
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
</package>
<package pkgid="4402fd84a4211e8796c83c4606c52cfa876a0c3580935fb9b5941f8ed4a782ae" name="docker" arch="s390x">
  <version epoch="0" ver="24.0.7_ce" rel="150000.190.4"/>
  <changelog author="asarai@suse.com" date="1656504000">- Backport &lt;https://github.com/containerd/fifo/pull/32&gt; to fix a crash-on-start
  issue with dockerd. bsc#1200022
  + 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Fixes:
  * bsc#1214107 - CVE-2023-28840
  * bsc#1214108 - CVE-2023-28841
  * bsc#1214109 - CVE-2023-28842
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
  <changelog author="asarai@suse.com" date="1686744000">- Update to Docker 24.0.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2402&gt;. bsc#1212368
  * Includes the upstreamed fix for the mount table pollution issue.
    bsc#1210797
- Add Recommends for docker-buildx, and add /usr/lib/docker/cli-plugins as
  being provided by this package.
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1687262400">- Add docker-rootless-extras subpackage
  (https://docs.docker.com/engine/security/rootless)</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Recommend docker-rootless-extras instead of Require(ing) it, given
  it's an additional functionality and not inherently required for
  docker to function.</changelog>
  <changelog author="asarai@suse.com" date="1688731200">- Update to Docker 24.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2403&gt;. bsc#1213120
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1688731201">- Update to Docker 24.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2404&gt;. bsc#1213500</changelog>
  <changelog author="dmueller@suse.com" date="1690286400">- Update to Docker 24.0.5-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2405&gt;. bsc#1213229</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to Docker 24.0.6-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2406&gt;. bsc#1215323
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Switch from disabledrun to manualrun in _service.
- Add a docker.socket unit file, but with socket activation effectively
  disabled to ensure that Docker will always run even if you start the socket
  individually. Users should probably just ignore this unit file. bsc#1210141</changelog>
  <changelog author="asarai@suse.com" date="1697025600">- Add a patch to fix apparmor on SLE-12, reverting the upstream removal of
  version-specific templating for the default apparmor profile. bsc#1213500
  + 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to Docker 24.0.7-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2407&gt;. bsc#1217513
  * Deny containers access to /sys/devices/virtual/powercap by default.
  - CVE-2020-8694 bsc#1170415
  - CVE-2020-8695 bsc#1170446
  - CVE-2020-12912 bsc#1178760
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
</package>
<package pkgid="909b62eb0397f964cb517f9733c3f3657c44963e8e86a0f65d3306f2f4a2e2f2" name="docker" arch="src">
  <version epoch="0" ver="24.0.7_ce" rel="150000.190.4"/>
  <changelog author="asarai@suse.com" date="1656504000">- Backport &lt;https://github.com/containerd/fifo/pull/32&gt; to fix a crash-on-start
  issue with dockerd. bsc#1200022
  + 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Fixes:
  * bsc#1214107 - CVE-2023-28840
  * bsc#1214108 - CVE-2023-28841
  * bsc#1214109 - CVE-2023-28842
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
  <changelog author="asarai@suse.com" date="1686744000">- Update to Docker 24.0.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2402&gt;. bsc#1212368
  * Includes the upstreamed fix for the mount table pollution issue.
    bsc#1210797
- Add Recommends for docker-buildx, and add /usr/lib/docker/cli-plugins as
  being provided by this package.
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1687262400">- Add docker-rootless-extras subpackage
  (https://docs.docker.com/engine/security/rootless)</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Recommend docker-rootless-extras instead of Require(ing) it, given
  it's an additional functionality and not inherently required for
  docker to function.</changelog>
  <changelog author="asarai@suse.com" date="1688731200">- Update to Docker 24.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2403&gt;. bsc#1213120
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1688731201">- Update to Docker 24.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2404&gt;. bsc#1213500</changelog>
  <changelog author="dmueller@suse.com" date="1690286400">- Update to Docker 24.0.5-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2405&gt;. bsc#1213229</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to Docker 24.0.6-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2406&gt;. bsc#1215323
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Switch from disabledrun to manualrun in _service.
- Add a docker.socket unit file, but with socket activation effectively
  disabled to ensure that Docker will always run even if you start the socket
  individually. Users should probably just ignore this unit file. bsc#1210141</changelog>
  <changelog author="asarai@suse.com" date="1697025600">- Add a patch to fix apparmor on SLE-12, reverting the upstream removal of
  version-specific templating for the default apparmor profile. bsc#1213500
  + 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to Docker 24.0.7-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2407&gt;. bsc#1217513
  * Deny containers access to /sys/devices/virtual/powercap by default.
  - CVE-2020-8694 bsc#1170415
  - CVE-2020-8695 bsc#1170446
  - CVE-2020-12912 bsc#1178760
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
</package>
<package pkgid="260f33928825b4b7e666ba37c68cc3efb52dec6a2c8b0c2d68a06dece2e202a5" name="docker" arch="x86_64">
  <version epoch="0" ver="24.0.7_ce" rel="150000.190.4"/>
  <changelog author="asarai@suse.com" date="1656504000">- Backport &lt;https://github.com/containerd/fifo/pull/32&gt; to fix a crash-on-start
  issue with dockerd. bsc#1200022
  + 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Fixes:
  * bsc#1214107 - CVE-2023-28840
  * bsc#1214108 - CVE-2023-28841
  * bsc#1214109 - CVE-2023-28842
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
  <changelog author="asarai@suse.com" date="1686744000">- Update to Docker 24.0.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2402&gt;. bsc#1212368
  * Includes the upstreamed fix for the mount table pollution issue.
    bsc#1210797
- Add Recommends for docker-buildx, and add /usr/lib/docker/cli-plugins as
  being provided by this package.
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1687262400">- Add docker-rootless-extras subpackage
  (https://docs.docker.com/engine/security/rootless)</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Recommend docker-rootless-extras instead of Require(ing) it, given
  it's an additional functionality and not inherently required for
  docker to function.</changelog>
  <changelog author="asarai@suse.com" date="1688731200">- Update to Docker 24.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2403&gt;. bsc#1213120
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1688731201">- Update to Docker 24.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2404&gt;. bsc#1213500</changelog>
  <changelog author="dmueller@suse.com" date="1690286400">- Update to Docker 24.0.5-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2405&gt;. bsc#1213229</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to Docker 24.0.6-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2406&gt;. bsc#1215323
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Switch from disabledrun to manualrun in _service.
- Add a docker.socket unit file, but with socket activation effectively
  disabled to ensure that Docker will always run even if you start the socket
  individually. Users should probably just ignore this unit file. bsc#1210141</changelog>
  <changelog author="asarai@suse.com" date="1697025600">- Add a patch to fix apparmor on SLE-12, reverting the upstream removal of
  version-specific templating for the default apparmor profile. bsc#1213500
  + 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to Docker 24.0.7-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2407&gt;. bsc#1217513
  * Deny containers access to /sys/devices/virtual/powercap by default.
  - CVE-2020-8694 bsc#1170415
  - CVE-2020-8695 bsc#1170446
  - CVE-2020-12912 bsc#1178760
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
</package>
<package pkgid="695f3d0bf51edec24b6a9ebc5e791f41b09d94a5fb4101b37dff44909bb7c7fc" name="docker" arch="aarch64">
  <version epoch="0" ver="24.0.7_ce" rel="150000.193.1"/>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Fixes:
  * bsc#1214107 - CVE-2023-28840
  * bsc#1214108 - CVE-2023-28841
  * bsc#1214109 - CVE-2023-28842
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
  <changelog author="asarai@suse.com" date="1686744000">- Update to Docker 24.0.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2402&gt;. bsc#1212368
  * Includes the upstreamed fix for the mount table pollution issue.
    bsc#1210797
- Add Recommends for docker-buildx, and add /usr/lib/docker/cli-plugins as
  being provided by this package.
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1687262400">- Add docker-rootless-extras subpackage
  (https://docs.docker.com/engine/security/rootless)</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Recommend docker-rootless-extras instead of Require(ing) it, given
  it's an additional functionality and not inherently required for
  docker to function.</changelog>
  <changelog author="asarai@suse.com" date="1688731200">- Update to Docker 24.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2403&gt;. bsc#1213120
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1688731201">- Update to Docker 24.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2404&gt;. bsc#1213500</changelog>
  <changelog author="dmueller@suse.com" date="1690286400">- Update to Docker 24.0.5-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2405&gt;. bsc#1213229</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to Docker 24.0.6-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2406&gt;. bsc#1215323
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Switch from disabledrun to manualrun in _service.
- Add a docker.socket unit file, but with socket activation effectively
  disabled to ensure that Docker will always run even if you start the socket
  individually. Users should probably just ignore this unit file. bsc#1210141</changelog>
  <changelog author="asarai@suse.com" date="1697025600">- Add a patch to fix apparmor on SLE-12, reverting the upstream removal of
  version-specific templating for the default apparmor profile. bsc#1213500
  + 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to Docker 24.0.7-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2407&gt;. bsc#1217513
  * Deny containers access to /sys/devices/virtual/powercap by default.
  - CVE-2020-8694 bsc#1170415
  - CVE-2020-8695 bsc#1170446
  - CVE-2020-12912 bsc#1178760
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="dcermak@suse.com" date="1707912000">- Vendor latest buildkit v0.11:
  Add patch 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch that
  vendors in the latest v0.11 buildkit branch including bugfixes for the following:
  * bsc#1219438: CVE-2024-23653
  * bsc#1219268: CVE-2024-23652
  * bsc#1219267: CVE-2024-23651
- rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- switch from %patchN to %patch -PN syntax
- remove unused rpmlint filters and add filters to silence pointless bash &amp; zsh
  completion warnings</changelog>
</package>
<package pkgid="bab1854e84b7b40c553d5676a94f6b7cc7b9b1d10a77d559b17be12439cca16f" name="docker" arch="s390x">
  <version epoch="0" ver="24.0.7_ce" rel="150000.193.1"/>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Fixes:
  * bsc#1214107 - CVE-2023-28840
  * bsc#1214108 - CVE-2023-28841
  * bsc#1214109 - CVE-2023-28842
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
  <changelog author="asarai@suse.com" date="1686744000">- Update to Docker 24.0.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2402&gt;. bsc#1212368
  * Includes the upstreamed fix for the mount table pollution issue.
    bsc#1210797
- Add Recommends for docker-buildx, and add /usr/lib/docker/cli-plugins as
  being provided by this package.
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1687262400">- Add docker-rootless-extras subpackage
  (https://docs.docker.com/engine/security/rootless)</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Recommend docker-rootless-extras instead of Require(ing) it, given
  it's an additional functionality and not inherently required for
  docker to function.</changelog>
  <changelog author="asarai@suse.com" date="1688731200">- Update to Docker 24.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2403&gt;. bsc#1213120
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1688731201">- Update to Docker 24.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2404&gt;. bsc#1213500</changelog>
  <changelog author="dmueller@suse.com" date="1690286400">- Update to Docker 24.0.5-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2405&gt;. bsc#1213229</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to Docker 24.0.6-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2406&gt;. bsc#1215323
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Switch from disabledrun to manualrun in _service.
- Add a docker.socket unit file, but with socket activation effectively
  disabled to ensure that Docker will always run even if you start the socket
  individually. Users should probably just ignore this unit file. bsc#1210141</changelog>
  <changelog author="asarai@suse.com" date="1697025600">- Add a patch to fix apparmor on SLE-12, reverting the upstream removal of
  version-specific templating for the default apparmor profile. bsc#1213500
  + 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to Docker 24.0.7-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2407&gt;. bsc#1217513
  * Deny containers access to /sys/devices/virtual/powercap by default.
  - CVE-2020-8694 bsc#1170415
  - CVE-2020-8695 bsc#1170446
  - CVE-2020-12912 bsc#1178760
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="dcermak@suse.com" date="1707912000">- Vendor latest buildkit v0.11:
  Add patch 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch that
  vendors in the latest v0.11 buildkit branch including bugfixes for the following:
  * bsc#1219438: CVE-2024-23653
  * bsc#1219268: CVE-2024-23652
  * bsc#1219267: CVE-2024-23651
- rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- switch from %patchN to %patch -PN syntax
- remove unused rpmlint filters and add filters to silence pointless bash &amp; zsh
  completion warnings</changelog>
</package>
<package pkgid="3a283ce8e934edddf044c2f74518990393659dc14a19fbcb9ce488b1e385510c" name="docker" arch="src">
  <version epoch="0" ver="24.0.7_ce" rel="150000.193.1"/>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Fixes:
  * bsc#1214107 - CVE-2023-28840
  * bsc#1214108 - CVE-2023-28841
  * bsc#1214109 - CVE-2023-28842
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
  <changelog author="asarai@suse.com" date="1686744000">- Update to Docker 24.0.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2402&gt;. bsc#1212368
  * Includes the upstreamed fix for the mount table pollution issue.
    bsc#1210797
- Add Recommends for docker-buildx, and add /usr/lib/docker/cli-plugins as
  being provided by this package.
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1687262400">- Add docker-rootless-extras subpackage
  (https://docs.docker.com/engine/security/rootless)</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Recommend docker-rootless-extras instead of Require(ing) it, given
  it's an additional functionality and not inherently required for
  docker to function.</changelog>
  <changelog author="asarai@suse.com" date="1688731200">- Update to Docker 24.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2403&gt;. bsc#1213120
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1688731201">- Update to Docker 24.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2404&gt;. bsc#1213500</changelog>
  <changelog author="dmueller@suse.com" date="1690286400">- Update to Docker 24.0.5-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2405&gt;. bsc#1213229</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to Docker 24.0.6-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2406&gt;. bsc#1215323
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Switch from disabledrun to manualrun in _service.
- Add a docker.socket unit file, but with socket activation effectively
  disabled to ensure that Docker will always run even if you start the socket
  individually. Users should probably just ignore this unit file. bsc#1210141</changelog>
  <changelog author="asarai@suse.com" date="1697025600">- Add a patch to fix apparmor on SLE-12, reverting the upstream removal of
  version-specific templating for the default apparmor profile. bsc#1213500
  + 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to Docker 24.0.7-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2407&gt;. bsc#1217513
  * Deny containers access to /sys/devices/virtual/powercap by default.
  - CVE-2020-8694 bsc#1170415
  - CVE-2020-8695 bsc#1170446
  - CVE-2020-12912 bsc#1178760
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="dcermak@suse.com" date="1707912000">- Vendor latest buildkit v0.11:
  Add patch 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch that
  vendors in the latest v0.11 buildkit branch including bugfixes for the following:
  * bsc#1219438: CVE-2024-23653
  * bsc#1219268: CVE-2024-23652
  * bsc#1219267: CVE-2024-23651
- rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- switch from %patchN to %patch -PN syntax
- remove unused rpmlint filters and add filters to silence pointless bash &amp; zsh
  completion warnings</changelog>
</package>
<package pkgid="3d295c0578c5f9a52a01a49d62717fcabdd60aad580bc223892e6944aaf6ef6c" name="docker" arch="x86_64">
  <version epoch="0" ver="24.0.7_ce" rel="150000.193.1"/>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Fixes:
  * bsc#1214107 - CVE-2023-28840
  * bsc#1214108 - CVE-2023-28841
  * bsc#1214109 - CVE-2023-28842
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
  <changelog author="asarai@suse.com" date="1686744000">- Update to Docker 24.0.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2402&gt;. bsc#1212368
  * Includes the upstreamed fix for the mount table pollution issue.
    bsc#1210797
- Add Recommends for docker-buildx, and add /usr/lib/docker/cli-plugins as
  being provided by this package.
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1687262400">- Add docker-rootless-extras subpackage
  (https://docs.docker.com/engine/security/rootless)</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Recommend docker-rootless-extras instead of Require(ing) it, given
  it's an additional functionality and not inherently required for
  docker to function.</changelog>
  <changelog author="asarai@suse.com" date="1688731200">- Update to Docker 24.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2403&gt;. bsc#1213120
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1688731201">- Update to Docker 24.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2404&gt;. bsc#1213500</changelog>
  <changelog author="dmueller@suse.com" date="1690286400">- Update to Docker 24.0.5-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2405&gt;. bsc#1213229</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to Docker 24.0.6-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2406&gt;. bsc#1215323
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Switch from disabledrun to manualrun in _service.
- Add a docker.socket unit file, but with socket activation effectively
  disabled to ensure that Docker will always run even if you start the socket
  individually. Users should probably just ignore this unit file. bsc#1210141</changelog>
  <changelog author="asarai@suse.com" date="1697025600">- Add a patch to fix apparmor on SLE-12, reverting the upstream removal of
  version-specific templating for the default apparmor profile. bsc#1213500
  + 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to Docker 24.0.7-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2407&gt;. bsc#1217513
  * Deny containers access to /sys/devices/virtual/powercap by default.
  - CVE-2020-8694 bsc#1170415
  - CVE-2020-8695 bsc#1170446
  - CVE-2020-12912 bsc#1178760
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="dcermak@suse.com" date="1707912000">- Vendor latest buildkit v0.11:
  Add patch 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch that
  vendors in the latest v0.11 buildkit branch including bugfixes for the following:
  * bsc#1219438: CVE-2024-23653
  * bsc#1219268: CVE-2024-23652
  * bsc#1219267: CVE-2024-23651
- rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- switch from %patchN to %patch -PN syntax
- remove unused rpmlint filters and add filters to silence pointless bash &amp; zsh
  completion warnings</changelog>
</package>
<package pkgid="53917691b18a731236cde8f036ed95813d40262df15505292acd542724f3f047" name="docker" arch="aarch64">
  <version epoch="0" ver="24.0.7_ce" rel="150000.198.2"/>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Fixes:
  * bsc#1214107 - CVE-2023-28840
  * bsc#1214108 - CVE-2023-28841
  * bsc#1214109 - CVE-2023-28842
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
  <changelog author="asarai@suse.com" date="1686744000">- Update to Docker 24.0.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2402&gt;. bsc#1212368
  * Includes the upstreamed fix for the mount table pollution issue.
    bsc#1210797
- Add Recommends for docker-buildx, and add /usr/lib/docker/cli-plugins as
  being provided by this package.
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1687262400">- Add docker-rootless-extras subpackage
  (https://docs.docker.com/engine/security/rootless)</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Recommend docker-rootless-extras instead of Require(ing) it, given
  it's an additional functionality and not inherently required for
  docker to function.</changelog>
  <changelog author="asarai@suse.com" date="1688731200">- Update to Docker 24.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2403&gt;. bsc#1213120
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1688731201">- Update to Docker 24.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2404&gt;. bsc#1213500</changelog>
  <changelog author="dmueller@suse.com" date="1690286400">- Update to Docker 24.0.5-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2405&gt;. bsc#1213229</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to Docker 24.0.6-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2406&gt;. bsc#1215323
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Switch from disabledrun to manualrun in _service.
- Add a docker.socket unit file, but with socket activation effectively
  disabled to ensure that Docker will always run even if you start the socket
  individually. Users should probably just ignore this unit file. bsc#1210141</changelog>
  <changelog author="asarai@suse.com" date="1697025600">- Add a patch to fix apparmor on SLE-12, reverting the upstream removal of
  version-specific templating for the default apparmor profile. bsc#1213500
  + 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to Docker 24.0.7-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2407&gt;. bsc#1217513
  * Deny containers access to /sys/devices/virtual/powercap by default.
  - CVE-2020-8694 bsc#1170415
  - CVE-2020-8695 bsc#1170446
  - CVE-2020-12912 bsc#1178760
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="dcermak@suse.com" date="1707912000">- Vendor latest buildkit v0.11:
  Add patch 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch that
  vendors in the latest v0.11 buildkit branch including bugfixes for the following:
  * bsc#1219438: CVE-2024-23653
  * bsc#1219268: CVE-2024-23652
  * bsc#1219267: CVE-2024-23651
- rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- switch from %patchN to %patch -PN syntax
- remove unused rpmlint filters and add filters to silence pointless bash &amp; zsh
  completion warnings</changelog>
  <changelog author="kukuk@suse.com" date="1708603200">- Allow to disable apparmor support (ALP supports only SELinux)</changelog>
  <changelog author="dcermak@suse.com" date="1709899200">- Add patch to fix bsc#1220339
  * 0007-daemon-overlay2-remove-world-writable-permission-fro.patch
- rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch</changelog>
</package>
<package pkgid="fd389a253a77c5b8c852dac99b35a47bd7ceb329d5d5274b394581fd65ed637d" name="docker" arch="s390x">
  <version epoch="0" ver="24.0.7_ce" rel="150000.198.2"/>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Fixes:
  * bsc#1214107 - CVE-2023-28840
  * bsc#1214108 - CVE-2023-28841
  * bsc#1214109 - CVE-2023-28842
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
  <changelog author="asarai@suse.com" date="1686744000">- Update to Docker 24.0.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2402&gt;. bsc#1212368
  * Includes the upstreamed fix for the mount table pollution issue.
    bsc#1210797
- Add Recommends for docker-buildx, and add /usr/lib/docker/cli-plugins as
  being provided by this package.
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1687262400">- Add docker-rootless-extras subpackage
  (https://docs.docker.com/engine/security/rootless)</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Recommend docker-rootless-extras instead of Require(ing) it, given
  it's an additional functionality and not inherently required for
  docker to function.</changelog>
  <changelog author="asarai@suse.com" date="1688731200">- Update to Docker 24.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2403&gt;. bsc#1213120
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1688731201">- Update to Docker 24.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2404&gt;. bsc#1213500</changelog>
  <changelog author="dmueller@suse.com" date="1690286400">- Update to Docker 24.0.5-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2405&gt;. bsc#1213229</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to Docker 24.0.6-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2406&gt;. bsc#1215323
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Switch from disabledrun to manualrun in _service.
- Add a docker.socket unit file, but with socket activation effectively
  disabled to ensure that Docker will always run even if you start the socket
  individually. Users should probably just ignore this unit file. bsc#1210141</changelog>
  <changelog author="asarai@suse.com" date="1697025600">- Add a patch to fix apparmor on SLE-12, reverting the upstream removal of
  version-specific templating for the default apparmor profile. bsc#1213500
  + 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to Docker 24.0.7-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2407&gt;. bsc#1217513
  * Deny containers access to /sys/devices/virtual/powercap by default.
  - CVE-2020-8694 bsc#1170415
  - CVE-2020-8695 bsc#1170446
  - CVE-2020-12912 bsc#1178760
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="dcermak@suse.com" date="1707912000">- Vendor latest buildkit v0.11:
  Add patch 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch that
  vendors in the latest v0.11 buildkit branch including bugfixes for the following:
  * bsc#1219438: CVE-2024-23653
  * bsc#1219268: CVE-2024-23652
  * bsc#1219267: CVE-2024-23651
- rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- switch from %patchN to %patch -PN syntax
- remove unused rpmlint filters and add filters to silence pointless bash &amp; zsh
  completion warnings</changelog>
  <changelog author="kukuk@suse.com" date="1708603200">- Allow to disable apparmor support (ALP supports only SELinux)</changelog>
  <changelog author="dcermak@suse.com" date="1709899200">- Add patch to fix bsc#1220339
  * 0007-daemon-overlay2-remove-world-writable-permission-fro.patch
- rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch</changelog>
</package>
<package pkgid="6d92005a5a795f81a5ce2637e08d31fbc6eaffd43cf4d4703c5e9e453b565d61" name="docker" arch="src">
  <version epoch="0" ver="24.0.7_ce" rel="150000.198.2"/>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Fixes:
  * bsc#1214107 - CVE-2023-28840
  * bsc#1214108 - CVE-2023-28841
  * bsc#1214109 - CVE-2023-28842
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
  <changelog author="asarai@suse.com" date="1686744000">- Update to Docker 24.0.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2402&gt;. bsc#1212368
  * Includes the upstreamed fix for the mount table pollution issue.
    bsc#1210797
- Add Recommends for docker-buildx, and add /usr/lib/docker/cli-plugins as
  being provided by this package.
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1687262400">- Add docker-rootless-extras subpackage
  (https://docs.docker.com/engine/security/rootless)</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Recommend docker-rootless-extras instead of Require(ing) it, given
  it's an additional functionality and not inherently required for
  docker to function.</changelog>
  <changelog author="asarai@suse.com" date="1688731200">- Update to Docker 24.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2403&gt;. bsc#1213120
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1688731201">- Update to Docker 24.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2404&gt;. bsc#1213500</changelog>
  <changelog author="dmueller@suse.com" date="1690286400">- Update to Docker 24.0.5-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2405&gt;. bsc#1213229</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to Docker 24.0.6-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2406&gt;. bsc#1215323
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Switch from disabledrun to manualrun in _service.
- Add a docker.socket unit file, but with socket activation effectively
  disabled to ensure that Docker will always run even if you start the socket
  individually. Users should probably just ignore this unit file. bsc#1210141</changelog>
  <changelog author="asarai@suse.com" date="1697025600">- Add a patch to fix apparmor on SLE-12, reverting the upstream removal of
  version-specific templating for the default apparmor profile. bsc#1213500
  + 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to Docker 24.0.7-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2407&gt;. bsc#1217513
  * Deny containers access to /sys/devices/virtual/powercap by default.
  - CVE-2020-8694 bsc#1170415
  - CVE-2020-8695 bsc#1170446
  - CVE-2020-12912 bsc#1178760
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="dcermak@suse.com" date="1707912000">- Vendor latest buildkit v0.11:
  Add patch 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch that
  vendors in the latest v0.11 buildkit branch including bugfixes for the following:
  * bsc#1219438: CVE-2024-23653
  * bsc#1219268: CVE-2024-23652
  * bsc#1219267: CVE-2024-23651
- rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- switch from %patchN to %patch -PN syntax
- remove unused rpmlint filters and add filters to silence pointless bash &amp; zsh
  completion warnings</changelog>
  <changelog author="kukuk@suse.com" date="1708603200">- Allow to disable apparmor support (ALP supports only SELinux)</changelog>
  <changelog author="dcermak@suse.com" date="1709899200">- Add patch to fix bsc#1220339
  * 0007-daemon-overlay2-remove-world-writable-permission-fro.patch
- rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch</changelog>
</package>
<package pkgid="e1949ed68d88bdd5d195a5fafdaf6949f186b7dc22f6e101deb10a6f9ab63336" name="docker" arch="x86_64">
  <version epoch="0" ver="24.0.7_ce" rel="150000.198.2"/>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Fixes:
  * bsc#1214107 - CVE-2023-28840
  * bsc#1214108 - CVE-2023-28841
  * bsc#1214109 - CVE-2023-28842
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
  <changelog author="asarai@suse.com" date="1686744000">- Update to Docker 24.0.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2402&gt;. bsc#1212368
  * Includes the upstreamed fix for the mount table pollution issue.
    bsc#1210797
- Add Recommends for docker-buildx, and add /usr/lib/docker/cli-plugins as
  being provided by this package.
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1687262400">- Add docker-rootless-extras subpackage
  (https://docs.docker.com/engine/security/rootless)</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Recommend docker-rootless-extras instead of Require(ing) it, given
  it's an additional functionality and not inherently required for
  docker to function.</changelog>
  <changelog author="asarai@suse.com" date="1688731200">- Update to Docker 24.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2403&gt;. bsc#1213120
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1688731201">- Update to Docker 24.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2404&gt;. bsc#1213500</changelog>
  <changelog author="dmueller@suse.com" date="1690286400">- Update to Docker 24.0.5-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2405&gt;. bsc#1213229</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to Docker 24.0.6-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2406&gt;. bsc#1215323
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Switch from disabledrun to manualrun in _service.
- Add a docker.socket unit file, but with socket activation effectively
  disabled to ensure that Docker will always run even if you start the socket
  individually. Users should probably just ignore this unit file. bsc#1210141</changelog>
  <changelog author="asarai@suse.com" date="1697025600">- Add a patch to fix apparmor on SLE-12, reverting the upstream removal of
  version-specific templating for the default apparmor profile. bsc#1213500
  + 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to Docker 24.0.7-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2407&gt;. bsc#1217513
  * Deny containers access to /sys/devices/virtual/powercap by default.
  - CVE-2020-8694 bsc#1170415
  - CVE-2020-8695 bsc#1170446
  - CVE-2020-12912 bsc#1178760
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="dcermak@suse.com" date="1707912000">- Vendor latest buildkit v0.11:
  Add patch 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch that
  vendors in the latest v0.11 buildkit branch including bugfixes for the following:
  * bsc#1219438: CVE-2024-23653
  * bsc#1219268: CVE-2024-23652
  * bsc#1219267: CVE-2024-23651
- rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- switch from %patchN to %patch -PN syntax
- remove unused rpmlint filters and add filters to silence pointless bash &amp; zsh
  completion warnings</changelog>
  <changelog author="kukuk@suse.com" date="1708603200">- Allow to disable apparmor support (ALP supports only SELinux)</changelog>
  <changelog author="dcermak@suse.com" date="1709899200">- Add patch to fix bsc#1220339
  * 0007-daemon-overlay2-remove-world-writable-permission-fro.patch
- rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch</changelog>
</package>
<package pkgid="a81b19ce6be81bc19018e66c8678e7bcbacfee36db1e3a6e34795c7e2162a74e" name="docker" arch="aarch64">
  <version epoch="0" ver="25.0.6_ce" rel="150000.203.1"/>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Fixes:
  * bsc#1214107 - CVE-2023-28840
  * bsc#1214108 - CVE-2023-28841
  * bsc#1214109 - CVE-2023-28842
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
  <changelog author="asarai@suse.com" date="1686744000">- Update to Docker 24.0.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2402&gt;. bsc#1212368
  * Includes the upstreamed fix for the mount table pollution issue.
    bsc#1210797
- Add Recommends for docker-buildx, and add /usr/lib/docker/cli-plugins as
  being provided by this package.
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1687262400">- Add docker-rootless-extras subpackage
  (https://docs.docker.com/engine/security/rootless)</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Recommend docker-rootless-extras instead of Require(ing) it, given
  it's an additional functionality and not inherently required for
  docker to function.</changelog>
  <changelog author="asarai@suse.com" date="1688731200">- Update to Docker 24.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2403&gt;. bsc#1213120
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1688731201">- Update to Docker 24.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2404&gt;. bsc#1213500</changelog>
  <changelog author="dmueller@suse.com" date="1690286400">- Update to Docker 24.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2405&gt;. bsc#1213229</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to Docker 24.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2406&gt;. bsc#1215323
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Switch from disabledrun to manualrun in _service.
- Add a docker.socket unit file, but with socket activation effectively
  disabled to ensure that Docker will always run even if you start the socket
  individually. Users should probably just ignore this unit file. bsc#1210141</changelog>
  <changelog author="asarai@suse.com" date="1697025600">- Add a patch to fix apparmor on SLE-12, reverting the upstream removal of
  version-specific templating for the default apparmor profile. bsc#1213500
  + 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to Docker 24.0.7-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2407&gt;. bsc#1217513
  * Deny containers access to /sys/devices/virtual/powercap by default.
  - CVE-2020-8694 bsc#1170415
  - CVE-2020-8695 bsc#1170446
  - CVE-2020-12912 bsc#1178760
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="dcermak@suse.com" date="1707912000">- Vendor latest buildkit v0.11:
  Add patch 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch that
  vendors in the latest v0.11 buildkit branch including bugfixes for the following:
  * bsc#1219438: CVE-2024-23653
  * bsc#1219268: CVE-2024-23652
  * bsc#1219267: CVE-2024-23651
- rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- switch from %patchN to %patch -PN syntax
- remove unused rpmlint filters and add filters to silence pointless bash &amp; zsh
  completion warnings</changelog>
  <changelog author="danish.prakash@suse.com" date="1708171200">- Update to Docker 25.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/25.0/#2503&gt;
- Fixes:
  * bsc#1219267 - CVE-2024-23651
  * bsc#1219268 - CVE-2024-23652
  * bsc#1219438 - CVE-2024-23653
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Remove upstreamed patches:
  - 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch</changelog>
  <changelog author="kukuk@suse.com" date="1708603200">- Allow to disable apparmor support (ALP supports only SELinux)</changelog>
  <changelog author="dcermak@suse.com" date="1709899200">[NOTE: This update was only ever released in SLES and Leap.]
- Add patch to fix bsc#1220339
  * 0007-daemon-overlay2-remove-world-writable-permission-fro.patch
- rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch</changelog>
  <changelog author="asarai@suse.com" date="1711368000">[NOTE: This update was only ever released in SLES and Leap.]
- Update to Docker 25.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/25.0/#2505&gt; bsc#1223409
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Remove upstreamed patches:
  - 0007-daemon-overlay2-remove-world-writable-permission-fro.patch
- Update --add-runtime to point to correct binary path.</changelog>
  <changelog author="asarai@suse.com" date="1719230400">- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Fix BuildKit's symlink resolution logic to correctly handle non-lexical
  symlinks. Backport of &lt;https://github.com/moby/buildkit/pull/4896&gt; and
  &lt;https://github.com/moby/buildkit/pull/5060&gt;. bsc#1221916
  + 0006-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
- Write volume options atomically so sudden system crashes won't result in
  future Docker starts failing due to empty files. Backport of
  &lt;https://github.com/moby/moby/pull/48034&gt;. bsc#1214855
  + 0007-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch</changelog>
  <changelog author="asarai@suse.com" date="1722427200">[NOTE: This update was only ever released in SLES and Leap.]
- Update to Docker 25.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/25.0/#2506&gt;
- This update includes a fix for CVE-2024-41110. bsc#1228324
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0006-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0007-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch</changelog>
</package>
<package pkgid="7688a163d5718cad64e1ed0ca9f218b5563f01e3fb49ef0e9a69028d843fde91" name="docker" arch="s390x">
  <version epoch="0" ver="25.0.6_ce" rel="150000.203.1"/>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Fixes:
  * bsc#1214107 - CVE-2023-28840
  * bsc#1214108 - CVE-2023-28841
  * bsc#1214109 - CVE-2023-28842
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
  <changelog author="asarai@suse.com" date="1686744000">- Update to Docker 24.0.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2402&gt;. bsc#1212368
  * Includes the upstreamed fix for the mount table pollution issue.
    bsc#1210797
- Add Recommends for docker-buildx, and add /usr/lib/docker/cli-plugins as
  being provided by this package.
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1687262400">- Add docker-rootless-extras subpackage
  (https://docs.docker.com/engine/security/rootless)</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Recommend docker-rootless-extras instead of Require(ing) it, given
  it's an additional functionality and not inherently required for
  docker to function.</changelog>
  <changelog author="asarai@suse.com" date="1688731200">- Update to Docker 24.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2403&gt;. bsc#1213120
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1688731201">- Update to Docker 24.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2404&gt;. bsc#1213500</changelog>
  <changelog author="dmueller@suse.com" date="1690286400">- Update to Docker 24.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2405&gt;. bsc#1213229</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to Docker 24.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2406&gt;. bsc#1215323
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Switch from disabledrun to manualrun in _service.
- Add a docker.socket unit file, but with socket activation effectively
  disabled to ensure that Docker will always run even if you start the socket
  individually. Users should probably just ignore this unit file. bsc#1210141</changelog>
  <changelog author="asarai@suse.com" date="1697025600">- Add a patch to fix apparmor on SLE-12, reverting the upstream removal of
  version-specific templating for the default apparmor profile. bsc#1213500
  + 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to Docker 24.0.7-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2407&gt;. bsc#1217513
  * Deny containers access to /sys/devices/virtual/powercap by default.
  - CVE-2020-8694 bsc#1170415
  - CVE-2020-8695 bsc#1170446
  - CVE-2020-12912 bsc#1178760
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="dcermak@suse.com" date="1707912000">- Vendor latest buildkit v0.11:
  Add patch 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch that
  vendors in the latest v0.11 buildkit branch including bugfixes for the following:
  * bsc#1219438: CVE-2024-23653
  * bsc#1219268: CVE-2024-23652
  * bsc#1219267: CVE-2024-23651
- rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- switch from %patchN to %patch -PN syntax
- remove unused rpmlint filters and add filters to silence pointless bash &amp; zsh
  completion warnings</changelog>
  <changelog author="danish.prakash@suse.com" date="1708171200">- Update to Docker 25.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/25.0/#2503&gt;
- Fixes:
  * bsc#1219267 - CVE-2024-23651
  * bsc#1219268 - CVE-2024-23652
  * bsc#1219438 - CVE-2024-23653
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Remove upstreamed patches:
  - 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch</changelog>
  <changelog author="kukuk@suse.com" date="1708603200">- Allow to disable apparmor support (ALP supports only SELinux)</changelog>
  <changelog author="dcermak@suse.com" date="1709899200">[NOTE: This update was only ever released in SLES and Leap.]
- Add patch to fix bsc#1220339
  * 0007-daemon-overlay2-remove-world-writable-permission-fro.patch
- rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch</changelog>
  <changelog author="asarai@suse.com" date="1711368000">[NOTE: This update was only ever released in SLES and Leap.]
- Update to Docker 25.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/25.0/#2505&gt; bsc#1223409
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Remove upstreamed patches:
  - 0007-daemon-overlay2-remove-world-writable-permission-fro.patch
- Update --add-runtime to point to correct binary path.</changelog>
  <changelog author="asarai@suse.com" date="1719230400">- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Fix BuildKit's symlink resolution logic to correctly handle non-lexical
  symlinks. Backport of &lt;https://github.com/moby/buildkit/pull/4896&gt; and
  &lt;https://github.com/moby/buildkit/pull/5060&gt;. bsc#1221916
  + 0006-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
- Write volume options atomically so sudden system crashes won't result in
  future Docker starts failing due to empty files. Backport of
  &lt;https://github.com/moby/moby/pull/48034&gt;. bsc#1214855
  + 0007-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch</changelog>
  <changelog author="asarai@suse.com" date="1722427200">[NOTE: This update was only ever released in SLES and Leap.]
- Update to Docker 25.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/25.0/#2506&gt;
- This update includes a fix for CVE-2024-41110. bsc#1228324
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0006-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0007-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch</changelog>
</package>
<package pkgid="caf4def74854647ff0b5f2e542e3a56a3b608a83daae4c30e071a5ae7852d9b3" name="docker" arch="src">
  <version epoch="0" ver="25.0.6_ce" rel="150000.203.1"/>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Fixes:
  * bsc#1214107 - CVE-2023-28840
  * bsc#1214108 - CVE-2023-28841
  * bsc#1214109 - CVE-2023-28842
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
  <changelog author="asarai@suse.com" date="1686744000">- Update to Docker 24.0.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2402&gt;. bsc#1212368
  * Includes the upstreamed fix for the mount table pollution issue.
    bsc#1210797
- Add Recommends for docker-buildx, and add /usr/lib/docker/cli-plugins as
  being provided by this package.
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1687262400">- Add docker-rootless-extras subpackage
  (https://docs.docker.com/engine/security/rootless)</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Recommend docker-rootless-extras instead of Require(ing) it, given
  it's an additional functionality and not inherently required for
  docker to function.</changelog>
  <changelog author="asarai@suse.com" date="1688731200">- Update to Docker 24.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2403&gt;. bsc#1213120
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1688731201">- Update to Docker 24.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2404&gt;. bsc#1213500</changelog>
  <changelog author="dmueller@suse.com" date="1690286400">- Update to Docker 24.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2405&gt;. bsc#1213229</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to Docker 24.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2406&gt;. bsc#1215323
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Switch from disabledrun to manualrun in _service.
- Add a docker.socket unit file, but with socket activation effectively
  disabled to ensure that Docker will always run even if you start the socket
  individually. Users should probably just ignore this unit file. bsc#1210141</changelog>
  <changelog author="asarai@suse.com" date="1697025600">- Add a patch to fix apparmor on SLE-12, reverting the upstream removal of
  version-specific templating for the default apparmor profile. bsc#1213500
  + 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to Docker 24.0.7-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2407&gt;. bsc#1217513
  * Deny containers access to /sys/devices/virtual/powercap by default.
  - CVE-2020-8694 bsc#1170415
  - CVE-2020-8695 bsc#1170446
  - CVE-2020-12912 bsc#1178760
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="dcermak@suse.com" date="1707912000">- Vendor latest buildkit v0.11:
  Add patch 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch that
  vendors in the latest v0.11 buildkit branch including bugfixes for the following:
  * bsc#1219438: CVE-2024-23653
  * bsc#1219268: CVE-2024-23652
  * bsc#1219267: CVE-2024-23651
- rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- switch from %patchN to %patch -PN syntax
- remove unused rpmlint filters and add filters to silence pointless bash &amp; zsh
  completion warnings</changelog>
  <changelog author="danish.prakash@suse.com" date="1708171200">- Update to Docker 25.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/25.0/#2503&gt;
- Fixes:
  * bsc#1219267 - CVE-2024-23651
  * bsc#1219268 - CVE-2024-23652
  * bsc#1219438 - CVE-2024-23653
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Remove upstreamed patches:
  - 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch</changelog>
  <changelog author="kukuk@suse.com" date="1708603200">- Allow to disable apparmor support (ALP supports only SELinux)</changelog>
  <changelog author="dcermak@suse.com" date="1709899200">[NOTE: This update was only ever released in SLES and Leap.]
- Add patch to fix bsc#1220339
  * 0007-daemon-overlay2-remove-world-writable-permission-fro.patch
- rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch</changelog>
  <changelog author="asarai@suse.com" date="1711368000">[NOTE: This update was only ever released in SLES and Leap.]
- Update to Docker 25.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/25.0/#2505&gt; bsc#1223409
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Remove upstreamed patches:
  - 0007-daemon-overlay2-remove-world-writable-permission-fro.patch
- Update --add-runtime to point to correct binary path.</changelog>
  <changelog author="asarai@suse.com" date="1719230400">- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Fix BuildKit's symlink resolution logic to correctly handle non-lexical
  symlinks. Backport of &lt;https://github.com/moby/buildkit/pull/4896&gt; and
  &lt;https://github.com/moby/buildkit/pull/5060&gt;. bsc#1221916
  + 0006-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
- Write volume options atomically so sudden system crashes won't result in
  future Docker starts failing due to empty files. Backport of
  &lt;https://github.com/moby/moby/pull/48034&gt;. bsc#1214855
  + 0007-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch</changelog>
  <changelog author="asarai@suse.com" date="1722427200">[NOTE: This update was only ever released in SLES and Leap.]
- Update to Docker 25.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/25.0/#2506&gt;
- This update includes a fix for CVE-2024-41110. bsc#1228324
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0006-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0007-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch</changelog>
</package>
<package pkgid="8149fa1d8cc7a2fd1e49672b1c33d7d22b1e1fd7559a9278bff197a142bcef01" name="docker" arch="x86_64">
  <version epoch="0" ver="25.0.6_ce" rel="150000.203.1"/>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Fixes:
  * bsc#1214107 - CVE-2023-28840
  * bsc#1214108 - CVE-2023-28841
  * bsc#1214109 - CVE-2023-28842
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
  <changelog author="asarai@suse.com" date="1686744000">- Update to Docker 24.0.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2402&gt;. bsc#1212368
  * Includes the upstreamed fix for the mount table pollution issue.
    bsc#1210797
- Add Recommends for docker-buildx, and add /usr/lib/docker/cli-plugins as
  being provided by this package.
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1687262400">- Add docker-rootless-extras subpackage
  (https://docs.docker.com/engine/security/rootless)</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Recommend docker-rootless-extras instead of Require(ing) it, given
  it's an additional functionality and not inherently required for
  docker to function.</changelog>
  <changelog author="asarai@suse.com" date="1688731200">- Update to Docker 24.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2403&gt;. bsc#1213120
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1688731201">- Update to Docker 24.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2404&gt;. bsc#1213500</changelog>
  <changelog author="dmueller@suse.com" date="1690286400">- Update to Docker 24.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2405&gt;. bsc#1213229</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to Docker 24.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2406&gt;. bsc#1215323
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Switch from disabledrun to manualrun in _service.
- Add a docker.socket unit file, but with socket activation effectively
  disabled to ensure that Docker will always run even if you start the socket
  individually. Users should probably just ignore this unit file. bsc#1210141</changelog>
  <changelog author="asarai@suse.com" date="1697025600">- Add a patch to fix apparmor on SLE-12, reverting the upstream removal of
  version-specific templating for the default apparmor profile. bsc#1213500
  + 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to Docker 24.0.7-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2407&gt;. bsc#1217513
  * Deny containers access to /sys/devices/virtual/powercap by default.
  - CVE-2020-8694 bsc#1170415
  - CVE-2020-8695 bsc#1170446
  - CVE-2020-12912 bsc#1178760
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="dcermak@suse.com" date="1707912000">- Vendor latest buildkit v0.11:
  Add patch 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch that
  vendors in the latest v0.11 buildkit branch including bugfixes for the following:
  * bsc#1219438: CVE-2024-23653
  * bsc#1219268: CVE-2024-23652
  * bsc#1219267: CVE-2024-23651
- rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- switch from %patchN to %patch -PN syntax
- remove unused rpmlint filters and add filters to silence pointless bash &amp; zsh
  completion warnings</changelog>
  <changelog author="danish.prakash@suse.com" date="1708171200">- Update to Docker 25.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/25.0/#2503&gt;
- Fixes:
  * bsc#1219267 - CVE-2024-23651
  * bsc#1219268 - CVE-2024-23652
  * bsc#1219438 - CVE-2024-23653
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Remove upstreamed patches:
  - 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch</changelog>
  <changelog author="kukuk@suse.com" date="1708603200">- Allow to disable apparmor support (ALP supports only SELinux)</changelog>
  <changelog author="dcermak@suse.com" date="1709899200">[NOTE: This update was only ever released in SLES and Leap.]
- Add patch to fix bsc#1220339
  * 0007-daemon-overlay2-remove-world-writable-permission-fro.patch
- rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch</changelog>
  <changelog author="asarai@suse.com" date="1711368000">[NOTE: This update was only ever released in SLES and Leap.]
- Update to Docker 25.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/25.0/#2505&gt; bsc#1223409
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Remove upstreamed patches:
  - 0007-daemon-overlay2-remove-world-writable-permission-fro.patch
- Update --add-runtime to point to correct binary path.</changelog>
  <changelog author="asarai@suse.com" date="1719230400">- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Fix BuildKit's symlink resolution logic to correctly handle non-lexical
  symlinks. Backport of &lt;https://github.com/moby/buildkit/pull/4896&gt; and
  &lt;https://github.com/moby/buildkit/pull/5060&gt;. bsc#1221916
  + 0006-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
- Write volume options atomically so sudden system crashes won't result in
  future Docker starts failing due to empty files. Backport of
  &lt;https://github.com/moby/moby/pull/48034&gt;. bsc#1214855
  + 0007-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch</changelog>
  <changelog author="asarai@suse.com" date="1722427200">[NOTE: This update was only ever released in SLES and Leap.]
- Update to Docker 25.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/25.0/#2506&gt;
- This update includes a fix for CVE-2024-41110. bsc#1228324
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0006-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0007-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch</changelog>
</package>
<package pkgid="fdafc70213d9ba4aabf7a8ffa1610eb288945a7719f6b70704214cac2e53ed7d" name="docker" arch="aarch64">
  <version epoch="0" ver="25.0.6_ce" rel="150000.207.1"/>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Fixes:
  * bsc#1214107 - CVE-2023-28840
  * bsc#1214108 - CVE-2023-28841
  * bsc#1214109 - CVE-2023-28842
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
  <changelog author="asarai@suse.com" date="1686744000">- Update to Docker 24.0.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2402&gt;. bsc#1212368
  * Includes the upstreamed fix for the mount table pollution issue.
    bsc#1210797
- Add Recommends for docker-buildx, and add /usr/lib/docker/cli-plugins as
  being provided by this package.
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1687262400">- Add docker-rootless-extras subpackage
  (https://docs.docker.com/engine/security/rootless)</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Recommend docker-rootless-extras instead of Require(ing) it, given
  it's an additional functionality and not inherently required for
  docker to function.</changelog>
  <changelog author="asarai@suse.com" date="1688731200">- Update to Docker 24.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2403&gt;. bsc#1213120
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1688731201">- Update to Docker 24.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2404&gt;. bsc#1213500</changelog>
  <changelog author="dmueller@suse.com" date="1690286400">- Update to Docker 24.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2405&gt;. bsc#1213229</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to Docker 24.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2406&gt;. bsc#1215323
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Switch from disabledrun to manualrun in _service.
- Add a docker.socket unit file, but with socket activation effectively
  disabled to ensure that Docker will always run even if you start the socket
  individually. Users should probably just ignore this unit file. bsc#1210141</changelog>
  <changelog author="asarai@suse.com" date="1697025600">- Add a patch to fix apparmor on SLE-12, reverting the upstream removal of
  version-specific templating for the default apparmor profile. bsc#1213500
  + 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to Docker 24.0.7-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2407&gt;. bsc#1217513
  * Deny containers access to /sys/devices/virtual/powercap by default.
  - CVE-2020-8694 bsc#1170415
  - CVE-2020-8695 bsc#1170446
  - CVE-2020-12912 bsc#1178760
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="dcermak@suse.com" date="1707912000">- Vendor latest buildkit v0.11:
  Add patch 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch that
  vendors in the latest v0.11 buildkit branch including bugfixes for the following:
  * bsc#1219438: CVE-2024-23653
  * bsc#1219268: CVE-2024-23652
  * bsc#1219267: CVE-2024-23651
- rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- switch from %patchN to %patch -PN syntax
- remove unused rpmlint filters and add filters to silence pointless bash &amp; zsh
  completion warnings</changelog>
  <changelog author="danish.prakash@suse.com" date="1708171200">- Update to Docker 25.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/25.0/#2503&gt;
- Fixes:
  * bsc#1219267 - CVE-2024-23651
  * bsc#1219268 - CVE-2024-23652
  * bsc#1219438 - CVE-2024-23653
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Remove upstreamed patches:
  - 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch</changelog>
  <changelog author="kukuk@suse.com" date="1708603200">- Allow to disable apparmor support (ALP supports only SELinux)</changelog>
  <changelog author="dcermak@suse.com" date="1709899200">[NOTE: This update was only ever released in SLES and Leap.]
- Add patch to fix bsc#1220339
  * 0007-daemon-overlay2-remove-world-writable-permission-fro.patch
- rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch</changelog>
  <changelog author="asarai@suse.com" date="1711368000">[NOTE: This update was only ever released in SLES and Leap.]
- Update to Docker 25.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/25.0/#2505&gt; bsc#1223409
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Remove upstreamed patches:
  - 0007-daemon-overlay2-remove-world-writable-permission-fro.patch
- Update --add-runtime to point to correct binary path.</changelog>
  <changelog author="asarai@suse.com" date="1719230400">- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Fix BuildKit's symlink resolution logic to correctly handle non-lexical
  symlinks. Backport of &lt;https://github.com/moby/buildkit/pull/4896&gt; and
  &lt;https://github.com/moby/buildkit/pull/5060&gt;. bsc#1221916
  + 0006-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
- Write volume options atomically so sudden system crashes won't result in
  future Docker starts failing due to empty files. Backport of
  &lt;https://github.com/moby/moby/pull/48034&gt;. bsc#1214855
  + 0007-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch</changelog>
  <changelog author="asarai@suse.com" date="1722427200">[NOTE: This update was only ever released in SLES and Leap.]
- Update to Docker 25.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/25.0/#2506&gt;
- This update includes a fix for CVE-2024-41110. bsc#1228324
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0006-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0007-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch</changelog>
</package>
<package pkgid="b6cc4d488bfcc3ecd56d05d57d5dff2a27fa9653e64b91a07712d45ae825b4c6" name="docker" arch="s390x">
  <version epoch="0" ver="25.0.6_ce" rel="150000.207.1"/>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Fixes:
  * bsc#1214107 - CVE-2023-28840
  * bsc#1214108 - CVE-2023-28841
  * bsc#1214109 - CVE-2023-28842
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
  <changelog author="asarai@suse.com" date="1686744000">- Update to Docker 24.0.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2402&gt;. bsc#1212368
  * Includes the upstreamed fix for the mount table pollution issue.
    bsc#1210797
- Add Recommends for docker-buildx, and add /usr/lib/docker/cli-plugins as
  being provided by this package.
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1687262400">- Add docker-rootless-extras subpackage
  (https://docs.docker.com/engine/security/rootless)</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Recommend docker-rootless-extras instead of Require(ing) it, given
  it's an additional functionality and not inherently required for
  docker to function.</changelog>
  <changelog author="asarai@suse.com" date="1688731200">- Update to Docker 24.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2403&gt;. bsc#1213120
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1688731201">- Update to Docker 24.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2404&gt;. bsc#1213500</changelog>
  <changelog author="dmueller@suse.com" date="1690286400">- Update to Docker 24.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2405&gt;. bsc#1213229</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to Docker 24.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2406&gt;. bsc#1215323
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Switch from disabledrun to manualrun in _service.
- Add a docker.socket unit file, but with socket activation effectively
  disabled to ensure that Docker will always run even if you start the socket
  individually. Users should probably just ignore this unit file. bsc#1210141</changelog>
  <changelog author="asarai@suse.com" date="1697025600">- Add a patch to fix apparmor on SLE-12, reverting the upstream removal of
  version-specific templating for the default apparmor profile. bsc#1213500
  + 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to Docker 24.0.7-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2407&gt;. bsc#1217513
  * Deny containers access to /sys/devices/virtual/powercap by default.
  - CVE-2020-8694 bsc#1170415
  - CVE-2020-8695 bsc#1170446
  - CVE-2020-12912 bsc#1178760
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="dcermak@suse.com" date="1707912000">- Vendor latest buildkit v0.11:
  Add patch 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch that
  vendors in the latest v0.11 buildkit branch including bugfixes for the following:
  * bsc#1219438: CVE-2024-23653
  * bsc#1219268: CVE-2024-23652
  * bsc#1219267: CVE-2024-23651
- rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- switch from %patchN to %patch -PN syntax
- remove unused rpmlint filters and add filters to silence pointless bash &amp; zsh
  completion warnings</changelog>
  <changelog author="danish.prakash@suse.com" date="1708171200">- Update to Docker 25.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/25.0/#2503&gt;
- Fixes:
  * bsc#1219267 - CVE-2024-23651
  * bsc#1219268 - CVE-2024-23652
  * bsc#1219438 - CVE-2024-23653
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Remove upstreamed patches:
  - 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch</changelog>
  <changelog author="kukuk@suse.com" date="1708603200">- Allow to disable apparmor support (ALP supports only SELinux)</changelog>
  <changelog author="dcermak@suse.com" date="1709899200">[NOTE: This update was only ever released in SLES and Leap.]
- Add patch to fix bsc#1220339
  * 0007-daemon-overlay2-remove-world-writable-permission-fro.patch
- rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch</changelog>
  <changelog author="asarai@suse.com" date="1711368000">[NOTE: This update was only ever released in SLES and Leap.]
- Update to Docker 25.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/25.0/#2505&gt; bsc#1223409
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Remove upstreamed patches:
  - 0007-daemon-overlay2-remove-world-writable-permission-fro.patch
- Update --add-runtime to point to correct binary path.</changelog>
  <changelog author="asarai@suse.com" date="1719230400">- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Fix BuildKit's symlink resolution logic to correctly handle non-lexical
  symlinks. Backport of &lt;https://github.com/moby/buildkit/pull/4896&gt; and
  &lt;https://github.com/moby/buildkit/pull/5060&gt;. bsc#1221916
  + 0006-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
- Write volume options atomically so sudden system crashes won't result in
  future Docker starts failing due to empty files. Backport of
  &lt;https://github.com/moby/moby/pull/48034&gt;. bsc#1214855
  + 0007-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch</changelog>
  <changelog author="asarai@suse.com" date="1722427200">[NOTE: This update was only ever released in SLES and Leap.]
- Update to Docker 25.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/25.0/#2506&gt;
- This update includes a fix for CVE-2024-41110. bsc#1228324
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0006-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0007-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch</changelog>
</package>
<package pkgid="be5f7c96a050c9da13852da37ad43ca3b21d3e43b6d2193a5cb7bff2bc5105fa" name="docker" arch="src">
  <version epoch="0" ver="25.0.6_ce" rel="150000.207.1"/>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Fixes:
  * bsc#1214107 - CVE-2023-28840
  * bsc#1214108 - CVE-2023-28841
  * bsc#1214109 - CVE-2023-28842
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
  <changelog author="asarai@suse.com" date="1686744000">- Update to Docker 24.0.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2402&gt;. bsc#1212368
  * Includes the upstreamed fix for the mount table pollution issue.
    bsc#1210797
- Add Recommends for docker-buildx, and add /usr/lib/docker/cli-plugins as
  being provided by this package.
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1687262400">- Add docker-rootless-extras subpackage
  (https://docs.docker.com/engine/security/rootless)</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Recommend docker-rootless-extras instead of Require(ing) it, given
  it's an additional functionality and not inherently required for
  docker to function.</changelog>
  <changelog author="asarai@suse.com" date="1688731200">- Update to Docker 24.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2403&gt;. bsc#1213120
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1688731201">- Update to Docker 24.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2404&gt;. bsc#1213500</changelog>
  <changelog author="dmueller@suse.com" date="1690286400">- Update to Docker 24.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2405&gt;. bsc#1213229</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to Docker 24.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2406&gt;. bsc#1215323
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Switch from disabledrun to manualrun in _service.
- Add a docker.socket unit file, but with socket activation effectively
  disabled to ensure that Docker will always run even if you start the socket
  individually. Users should probably just ignore this unit file. bsc#1210141</changelog>
  <changelog author="asarai@suse.com" date="1697025600">- Add a patch to fix apparmor on SLE-12, reverting the upstream removal of
  version-specific templating for the default apparmor profile. bsc#1213500
  + 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to Docker 24.0.7-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2407&gt;. bsc#1217513
  * Deny containers access to /sys/devices/virtual/powercap by default.
  - CVE-2020-8694 bsc#1170415
  - CVE-2020-8695 bsc#1170446
  - CVE-2020-12912 bsc#1178760
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="dcermak@suse.com" date="1707912000">- Vendor latest buildkit v0.11:
  Add patch 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch that
  vendors in the latest v0.11 buildkit branch including bugfixes for the following:
  * bsc#1219438: CVE-2024-23653
  * bsc#1219268: CVE-2024-23652
  * bsc#1219267: CVE-2024-23651
- rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- switch from %patchN to %patch -PN syntax
- remove unused rpmlint filters and add filters to silence pointless bash &amp; zsh
  completion warnings</changelog>
  <changelog author="danish.prakash@suse.com" date="1708171200">- Update to Docker 25.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/25.0/#2503&gt;
- Fixes:
  * bsc#1219267 - CVE-2024-23651
  * bsc#1219268 - CVE-2024-23652
  * bsc#1219438 - CVE-2024-23653
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Remove upstreamed patches:
  - 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch</changelog>
  <changelog author="kukuk@suse.com" date="1708603200">- Allow to disable apparmor support (ALP supports only SELinux)</changelog>
  <changelog author="dcermak@suse.com" date="1709899200">[NOTE: This update was only ever released in SLES and Leap.]
- Add patch to fix bsc#1220339
  * 0007-daemon-overlay2-remove-world-writable-permission-fro.patch
- rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch</changelog>
  <changelog author="asarai@suse.com" date="1711368000">[NOTE: This update was only ever released in SLES and Leap.]
- Update to Docker 25.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/25.0/#2505&gt; bsc#1223409
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Remove upstreamed patches:
  - 0007-daemon-overlay2-remove-world-writable-permission-fro.patch
- Update --add-runtime to point to correct binary path.</changelog>
  <changelog author="asarai@suse.com" date="1719230400">- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Fix BuildKit's symlink resolution logic to correctly handle non-lexical
  symlinks. Backport of &lt;https://github.com/moby/buildkit/pull/4896&gt; and
  &lt;https://github.com/moby/buildkit/pull/5060&gt;. bsc#1221916
  + 0006-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
- Write volume options atomically so sudden system crashes won't result in
  future Docker starts failing due to empty files. Backport of
  &lt;https://github.com/moby/moby/pull/48034&gt;. bsc#1214855
  + 0007-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch</changelog>
  <changelog author="asarai@suse.com" date="1722427200">[NOTE: This update was only ever released in SLES and Leap.]
- Update to Docker 25.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/25.0/#2506&gt;
- This update includes a fix for CVE-2024-41110. bsc#1228324
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0006-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0007-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch</changelog>
</package>
<package pkgid="7fbc4cdc4d54e28fe8a5a48d0cbbc29b5d1630291e68f7c3586d7078b235dfa6" name="docker" arch="x86_64">
  <version epoch="0" ver="25.0.6_ce" rel="150000.207.1"/>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Fixes:
  * bsc#1214107 - CVE-2023-28840
  * bsc#1214108 - CVE-2023-28841
  * bsc#1214109 - CVE-2023-28842
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
  <changelog author="asarai@suse.com" date="1686744000">- Update to Docker 24.0.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2402&gt;. bsc#1212368
  * Includes the upstreamed fix for the mount table pollution issue.
    bsc#1210797
- Add Recommends for docker-buildx, and add /usr/lib/docker/cli-plugins as
  being provided by this package.
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1687262400">- Add docker-rootless-extras subpackage
  (https://docs.docker.com/engine/security/rootless)</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Recommend docker-rootless-extras instead of Require(ing) it, given
  it's an additional functionality and not inherently required for
  docker to function.</changelog>
  <changelog author="asarai@suse.com" date="1688731200">- Update to Docker 24.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2403&gt;. bsc#1213120
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1688731201">- Update to Docker 24.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2404&gt;. bsc#1213500</changelog>
  <changelog author="dmueller@suse.com" date="1690286400">- Update to Docker 24.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2405&gt;. bsc#1213229</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to Docker 24.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2406&gt;. bsc#1215323
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Switch from disabledrun to manualrun in _service.
- Add a docker.socket unit file, but with socket activation effectively
  disabled to ensure that Docker will always run even if you start the socket
  individually. Users should probably just ignore this unit file. bsc#1210141</changelog>
  <changelog author="asarai@suse.com" date="1697025600">- Add a patch to fix apparmor on SLE-12, reverting the upstream removal of
  version-specific templating for the default apparmor profile. bsc#1213500
  + 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to Docker 24.0.7-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2407&gt;. bsc#1217513
  * Deny containers access to /sys/devices/virtual/powercap by default.
  - CVE-2020-8694 bsc#1170415
  - CVE-2020-8695 bsc#1170446
  - CVE-2020-12912 bsc#1178760
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="dcermak@suse.com" date="1707912000">- Vendor latest buildkit v0.11:
  Add patch 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch that
  vendors in the latest v0.11 buildkit branch including bugfixes for the following:
  * bsc#1219438: CVE-2024-23653
  * bsc#1219268: CVE-2024-23652
  * bsc#1219267: CVE-2024-23651
- rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- switch from %patchN to %patch -PN syntax
- remove unused rpmlint filters and add filters to silence pointless bash &amp; zsh
  completion warnings</changelog>
  <changelog author="danish.prakash@suse.com" date="1708171200">- Update to Docker 25.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/25.0/#2503&gt;
- Fixes:
  * bsc#1219267 - CVE-2024-23651
  * bsc#1219268 - CVE-2024-23652
  * bsc#1219438 - CVE-2024-23653
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Remove upstreamed patches:
  - 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch</changelog>
  <changelog author="kukuk@suse.com" date="1708603200">- Allow to disable apparmor support (ALP supports only SELinux)</changelog>
  <changelog author="dcermak@suse.com" date="1709899200">[NOTE: This update was only ever released in SLES and Leap.]
- Add patch to fix bsc#1220339
  * 0007-daemon-overlay2-remove-world-writable-permission-fro.patch
- rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch</changelog>
  <changelog author="asarai@suse.com" date="1711368000">[NOTE: This update was only ever released in SLES and Leap.]
- Update to Docker 25.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/25.0/#2505&gt; bsc#1223409
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Remove upstreamed patches:
  - 0007-daemon-overlay2-remove-world-writable-permission-fro.patch
- Update --add-runtime to point to correct binary path.</changelog>
  <changelog author="asarai@suse.com" date="1719230400">- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Fix BuildKit's symlink resolution logic to correctly handle non-lexical
  symlinks. Backport of &lt;https://github.com/moby/buildkit/pull/4896&gt; and
  &lt;https://github.com/moby/buildkit/pull/5060&gt;. bsc#1221916
  + 0006-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
- Write volume options atomically so sudden system crashes won't result in
  future Docker starts failing due to empty files. Backport of
  &lt;https://github.com/moby/moby/pull/48034&gt;. bsc#1214855
  + 0007-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch</changelog>
  <changelog author="asarai@suse.com" date="1722427200">[NOTE: This update was only ever released in SLES and Leap.]
- Update to Docker 25.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/25.0/#2506&gt;
- This update includes a fix for CVE-2024-41110. bsc#1228324
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0006-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0007-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch</changelog>
</package>
<package pkgid="40e573578141089eff65a9343e1262fc9ea665807e0a46acd2dba6f065b6bef8" name="dracut" arch="aarch64">
  <version epoch="0" ver="055+suse.371.g5237e44a" rel="150500.3.12.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
</package>
<package pkgid="c20d87498570ba204e8e80e590e43fa4d2b40cabfc1556e0c2d12829af476394" name="dracut" arch="s390x">
  <version epoch="0" ver="055+suse.371.g5237e44a" rel="150500.3.12.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
</package>
<package pkgid="9afb3cb094e58c2291a163e9f14e4cabacd740bc17065ff826f86d4956608d08" name="dracut" arch="src">
  <version epoch="0" ver="055+suse.371.g5237e44a" rel="150500.3.12.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
</package>
<package pkgid="60460696c1ab819a45d4d0c91518a9c8beda23cfaea12b3ffa3476f2139ef46d" name="dracut" arch="x86_64">
  <version epoch="0" ver="055+suse.371.g5237e44a" rel="150500.3.12.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
</package>
<package pkgid="e0b0f8e5b8be86f84d687ca3c3841c6aeeec340ea554b8a370cd9b56c54c1cdd" name="dracut" arch="aarch64">
  <version epoch="0" ver="055+suse.375.g1167ed75" rel="150500.3.15.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 055+suse.375.g1167ed75:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
</package>
<package pkgid="a0141ea95484365db061a3f82cca831d44f44d9f5368471182345d4182a73154" name="dracut" arch="s390x">
  <version epoch="0" ver="055+suse.375.g1167ed75" rel="150500.3.15.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 055+suse.375.g1167ed75:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
</package>
<package pkgid="a7280ee640e63b5cf165e7b33433060b1545565cfe95e0adecc803db55d4b0ce" name="dracut" arch="src">
  <version epoch="0" ver="055+suse.375.g1167ed75" rel="150500.3.15.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 055+suse.375.g1167ed75:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
</package>
<package pkgid="2fc35ace77c620b8781594d0ec7cce11179500703dbefd0c1b868499c94c3eec" name="dracut" arch="x86_64">
  <version epoch="0" ver="055+suse.375.g1167ed75" rel="150500.3.15.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 055+suse.375.g1167ed75:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
</package>
<package pkgid="f65d73aeae725ecd958fa0036186dca4eb65b8b411ef83bbe12dadf826604e36" name="dracut" arch="aarch64">
  <version epoch="0" ver="055+suse.382.g80b55af2" rel="150500.3.18.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 055+suse.375.g1167ed75:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1710849600">- Update to version 055+suse.382.g80b55af2:
  * fix(dracut): correct regression with multiple `rd.break=` options (bsc#1221675)
  * fix(dracut-util): do not call `strcmp` if the `value` argument is NULL (bsc#1219841)
  * fix(zfcp_rules): correct shellcheck regression when parsing ccw args (bsc#1220485)
  * fix(dracut.sh): skip README for AMD microcode generation (bsc#1217083)</changelog>
</package>
<package pkgid="f3da2bb1ae0af01ff0da6b3c8347c7a83d8485500e5e56411b2268882f1bff7b" name="dracut" arch="s390x">
  <version epoch="0" ver="055+suse.382.g80b55af2" rel="150500.3.18.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 055+suse.375.g1167ed75:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1710849600">- Update to version 055+suse.382.g80b55af2:
  * fix(dracut): correct regression with multiple `rd.break=` options (bsc#1221675)
  * fix(dracut-util): do not call `strcmp` if the `value` argument is NULL (bsc#1219841)
  * fix(zfcp_rules): correct shellcheck regression when parsing ccw args (bsc#1220485)
  * fix(dracut.sh): skip README for AMD microcode generation (bsc#1217083)</changelog>
</package>
<package pkgid="a643b72fef1f677294edfe97a545cea998b0e55cd3a9ba341d8b6a81b7afdf30" name="dracut" arch="src">
  <version epoch="0" ver="055+suse.382.g80b55af2" rel="150500.3.18.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 055+suse.375.g1167ed75:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1710849600">- Update to version 055+suse.382.g80b55af2:
  * fix(dracut): correct regression with multiple `rd.break=` options (bsc#1221675)
  * fix(dracut-util): do not call `strcmp` if the `value` argument is NULL (bsc#1219841)
  * fix(zfcp_rules): correct shellcheck regression when parsing ccw args (bsc#1220485)
  * fix(dracut.sh): skip README for AMD microcode generation (bsc#1217083)</changelog>
</package>
<package pkgid="7663f465c7f7d0363113c11f31608183f8825e8ce1d18d17a02b61a8d7576b1c" name="dracut" arch="x86_64">
  <version epoch="0" ver="055+suse.382.g80b55af2" rel="150500.3.18.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 055+suse.375.g1167ed75:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1710849600">- Update to version 055+suse.382.g80b55af2:
  * fix(dracut): correct regression with multiple `rd.break=` options (bsc#1221675)
  * fix(dracut-util): do not call `strcmp` if the `value` argument is NULL (bsc#1219841)
  * fix(zfcp_rules): correct shellcheck regression when parsing ccw args (bsc#1220485)
  * fix(dracut.sh): skip README for AMD microcode generation (bsc#1217083)</changelog>
</package>
<package pkgid="94a0ce3a4d263c5dc8da6a5dd633eecd833470306a03d5e9cda90a56253ee8c5" name="dracut" arch="aarch64">
  <version epoch="0" ver="055+suse.388.g70c21afa" rel="150500.3.21.2"/>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 055+suse.375.g1167ed75:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1710849600">- Update to version 055+suse.382.g80b55af2:
  * fix(dracut): correct regression with multiple `rd.break=` options (bsc#1221675)
  * fix(dracut-util): do not call `strcmp` if the `value` argument is NULL (bsc#1219841)
  * fix(zfcp_rules): correct shellcheck regression when parsing ccw args (bsc#1220485)
  * fix(dracut.sh): skip README for AMD microcode generation (bsc#1217083)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1720440000">- Update to version 055+suse.388.g70c21afa:
  * feat(crypt): force the inclusion of crypttab entries with x-initrd.attach (bsc#1226529)
  * fix(mdraid): try to assemble the missing raid device (bsc#1226412)
  * fix(dracut-install): continue parsing if ldd prints "cannot be preloaded" (bsc#1208690)</changelog>
</package>
<package pkgid="b97303e6b5c6c850ad89eba35f96284ca1016af1d8b4c6aa627153525ecb8230" name="dracut" arch="s390x">
  <version epoch="0" ver="055+suse.388.g70c21afa" rel="150500.3.21.2"/>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 055+suse.375.g1167ed75:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1710849600">- Update to version 055+suse.382.g80b55af2:
  * fix(dracut): correct regression with multiple `rd.break=` options (bsc#1221675)
  * fix(dracut-util): do not call `strcmp` if the `value` argument is NULL (bsc#1219841)
  * fix(zfcp_rules): correct shellcheck regression when parsing ccw args (bsc#1220485)
  * fix(dracut.sh): skip README for AMD microcode generation (bsc#1217083)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1720440000">- Update to version 055+suse.388.g70c21afa:
  * feat(crypt): force the inclusion of crypttab entries with x-initrd.attach (bsc#1226529)
  * fix(mdraid): try to assemble the missing raid device (bsc#1226412)
  * fix(dracut-install): continue parsing if ldd prints "cannot be preloaded" (bsc#1208690)</changelog>
</package>
<package pkgid="b132067a7aca1433850378f358223b7a297f0a1e0511e1b66c29a9827e71b9f4" name="dracut" arch="src">
  <version epoch="0" ver="055+suse.388.g70c21afa" rel="150500.3.21.2"/>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 055+suse.375.g1167ed75:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1710849600">- Update to version 055+suse.382.g80b55af2:
  * fix(dracut): correct regression with multiple `rd.break=` options (bsc#1221675)
  * fix(dracut-util): do not call `strcmp` if the `value` argument is NULL (bsc#1219841)
  * fix(zfcp_rules): correct shellcheck regression when parsing ccw args (bsc#1220485)
  * fix(dracut.sh): skip README for AMD microcode generation (bsc#1217083)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1720440000">- Update to version 055+suse.388.g70c21afa:
  * feat(crypt): force the inclusion of crypttab entries with x-initrd.attach (bsc#1226529)
  * fix(mdraid): try to assemble the missing raid device (bsc#1226412)
  * fix(dracut-install): continue parsing if ldd prints "cannot be preloaded" (bsc#1208690)</changelog>
</package>
<package pkgid="a55a14b353a33e40ae64e8f30589a7bd271efb46a0f75713d742a00b1fb397f7" name="dracut" arch="x86_64">
  <version epoch="0" ver="055+suse.388.g70c21afa" rel="150500.3.21.2"/>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 055+suse.375.g1167ed75:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1710849600">- Update to version 055+suse.382.g80b55af2:
  * fix(dracut): correct regression with multiple `rd.break=` options (bsc#1221675)
  * fix(dracut-util): do not call `strcmp` if the `value` argument is NULL (bsc#1219841)
  * fix(zfcp_rules): correct shellcheck regression when parsing ccw args (bsc#1220485)
  * fix(dracut.sh): skip README for AMD microcode generation (bsc#1217083)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1720440000">- Update to version 055+suse.388.g70c21afa:
  * feat(crypt): force the inclusion of crypttab entries with x-initrd.attach (bsc#1226529)
  * fix(mdraid): try to assemble the missing raid device (bsc#1226412)
  * fix(dracut-install): continue parsing if ldd prints "cannot be preloaded" (bsc#1208690)</changelog>
</package>
<package pkgid="4343cdf821a0897fda9e841d441e21c4dc8ced4b47fd82f63f0d981dc255a33d" name="dracut" arch="aarch64">
  <version epoch="0" ver="055+suse.392.g7930ab23" rel="150500.3.24.2"/>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 055+suse.375.g1167ed75:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1710849600">- Update to version 055+suse.382.g80b55af2:
  * fix(dracut): correct regression with multiple `rd.break=` options (bsc#1221675)
  * fix(dracut-util): do not call `strcmp` if the `value` argument is NULL (bsc#1219841)
  * fix(zfcp_rules): correct shellcheck regression when parsing ccw args (bsc#1220485)
  * fix(dracut.sh): skip README for AMD microcode generation (bsc#1217083)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1720440000">- Update to version 055+suse.388.g70c21afa:
  * feat(crypt): force the inclusion of crypttab entries with x-initrd.attach (bsc#1226529)
  * fix(mdraid): try to assemble the missing raid device (bsc#1226412)
  * fix(dracut-install): continue parsing if ldd prints "cannot be preloaded" (bsc#1208690)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1724414400">- Update to version 055+suse.392.g7930ab23:
  * feat(systemd*): include systemd config files from /usr/lib/systemd (bsc#1228398)
  * fix(convertfs): error in conditional expressions (bsc#1228847)</changelog>
</package>
<package pkgid="8c4dced87296edc2c8a282d846a4c3d7db27a095c21f19d4aaf4ac42af7c7008" name="dracut" arch="s390x">
  <version epoch="0" ver="055+suse.392.g7930ab23" rel="150500.3.24.2"/>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 055+suse.375.g1167ed75:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1710849600">- Update to version 055+suse.382.g80b55af2:
  * fix(dracut): correct regression with multiple `rd.break=` options (bsc#1221675)
  * fix(dracut-util): do not call `strcmp` if the `value` argument is NULL (bsc#1219841)
  * fix(zfcp_rules): correct shellcheck regression when parsing ccw args (bsc#1220485)
  * fix(dracut.sh): skip README for AMD microcode generation (bsc#1217083)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1720440000">- Update to version 055+suse.388.g70c21afa:
  * feat(crypt): force the inclusion of crypttab entries with x-initrd.attach (bsc#1226529)
  * fix(mdraid): try to assemble the missing raid device (bsc#1226412)
  * fix(dracut-install): continue parsing if ldd prints "cannot be preloaded" (bsc#1208690)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1724414400">- Update to version 055+suse.392.g7930ab23:
  * feat(systemd*): include systemd config files from /usr/lib/systemd (bsc#1228398)
  * fix(convertfs): error in conditional expressions (bsc#1228847)</changelog>
</package>
<package pkgid="0997a0df535a1743f77984aad26fa7289828a8871336c89e48da6a8b5b761de2" name="dracut" arch="src">
  <version epoch="0" ver="055+suse.392.g7930ab23" rel="150500.3.24.2"/>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 055+suse.375.g1167ed75:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1710849600">- Update to version 055+suse.382.g80b55af2:
  * fix(dracut): correct regression with multiple `rd.break=` options (bsc#1221675)
  * fix(dracut-util): do not call `strcmp` if the `value` argument is NULL (bsc#1219841)
  * fix(zfcp_rules): correct shellcheck regression when parsing ccw args (bsc#1220485)
  * fix(dracut.sh): skip README for AMD microcode generation (bsc#1217083)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1720440000">- Update to version 055+suse.388.g70c21afa:
  * feat(crypt): force the inclusion of crypttab entries with x-initrd.attach (bsc#1226529)
  * fix(mdraid): try to assemble the missing raid device (bsc#1226412)
  * fix(dracut-install): continue parsing if ldd prints "cannot be preloaded" (bsc#1208690)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1724414400">- Update to version 055+suse.392.g7930ab23:
  * feat(systemd*): include systemd config files from /usr/lib/systemd (bsc#1228398)
  * fix(convertfs): error in conditional expressions (bsc#1228847)</changelog>
</package>
<package pkgid="777abd7b3d9d135982466fb62c5ff24c74a0dfc44b047276fde7954e40bb0d9d" name="dracut" arch="x86_64">
  <version epoch="0" ver="055+suse.392.g7930ab23" rel="150500.3.24.2"/>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 055+suse.375.g1167ed75:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1710849600">- Update to version 055+suse.382.g80b55af2:
  * fix(dracut): correct regression with multiple `rd.break=` options (bsc#1221675)
  * fix(dracut-util): do not call `strcmp` if the `value` argument is NULL (bsc#1219841)
  * fix(zfcp_rules): correct shellcheck regression when parsing ccw args (bsc#1220485)
  * fix(dracut.sh): skip README for AMD microcode generation (bsc#1217083)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1720440000">- Update to version 055+suse.388.g70c21afa:
  * feat(crypt): force the inclusion of crypttab entries with x-initrd.attach (bsc#1226529)
  * fix(mdraid): try to assemble the missing raid device (bsc#1226412)
  * fix(dracut-install): continue parsing if ldd prints "cannot be preloaded" (bsc#1208690)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1724414400">- Update to version 055+suse.392.g7930ab23:
  * feat(systemd*): include systemd config files from /usr/lib/systemd (bsc#1228398)
  * fix(convertfs): error in conditional expressions (bsc#1228847)</changelog>
</package>
<package pkgid="f9ceb458b618359e18359ee04af0d613af12fca50dcccfbbfa5f2451f0ac7fbb" name="dracut-fips" arch="aarch64">
  <version epoch="0" ver="055+suse.371.g5237e44a" rel="150500.3.12.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
</package>
<package pkgid="7ef1bf8d46889225a63b9bd85afc15a833851ff0a761e961f5c1c0a82d5b2889" name="dracut-fips" arch="s390x">
  <version epoch="0" ver="055+suse.371.g5237e44a" rel="150500.3.12.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
</package>
<package pkgid="a88cbc957cee21c0bd621c5f10f17af9556a802d527559543b692e7d41c4530b" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="055+suse.371.g5237e44a" rel="150500.3.12.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
</package>
<package pkgid="a2e9239fd18b94136ea7223e04b76cd5f42caeb99f1764c5eed6ed3c3025eb9a" name="dracut-fips" arch="aarch64">
  <version epoch="0" ver="055+suse.375.g1167ed75" rel="150500.3.15.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 055+suse.375.g1167ed75:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
</package>
<package pkgid="48d0a3a7687ea015e920db9981df51eb9adf47fc2305c47a0cf0c058c7567e34" name="dracut-fips" arch="s390x">
  <version epoch="0" ver="055+suse.375.g1167ed75" rel="150500.3.15.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 055+suse.375.g1167ed75:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
</package>
<package pkgid="41cb9c338e5f46afbe4e8d4ecac610a1da0389fa116c918d86e43b0cd41c2198" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="055+suse.375.g1167ed75" rel="150500.3.15.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 055+suse.375.g1167ed75:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
</package>
<package pkgid="f925e6bffbb0095c3ac616f00a802c193c27f0fe71434c60176b27fcff780f26" name="dracut-fips" arch="aarch64">
  <version epoch="0" ver="055+suse.382.g80b55af2" rel="150500.3.18.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 055+suse.375.g1167ed75:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1710849600">- Update to version 055+suse.382.g80b55af2:
  * fix(dracut): correct regression with multiple `rd.break=` options (bsc#1221675)
  * fix(dracut-util): do not call `strcmp` if the `value` argument is NULL (bsc#1219841)
  * fix(zfcp_rules): correct shellcheck regression when parsing ccw args (bsc#1220485)
  * fix(dracut.sh): skip README for AMD microcode generation (bsc#1217083)</changelog>
</package>
<package pkgid="77b3ab85daa7e6439abaa8cf2bce2ddf2fc422308e85ba4f47d9f561b6d71d68" name="dracut-fips" arch="s390x">
  <version epoch="0" ver="055+suse.382.g80b55af2" rel="150500.3.18.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 055+suse.375.g1167ed75:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1710849600">- Update to version 055+suse.382.g80b55af2:
  * fix(dracut): correct regression with multiple `rd.break=` options (bsc#1221675)
  * fix(dracut-util): do not call `strcmp` if the `value` argument is NULL (bsc#1219841)
  * fix(zfcp_rules): correct shellcheck regression when parsing ccw args (bsc#1220485)
  * fix(dracut.sh): skip README for AMD microcode generation (bsc#1217083)</changelog>
</package>
<package pkgid="779051ca87e477b977b746d08036b9304bbc67c0198c2035442cd8b702c13b78" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="055+suse.382.g80b55af2" rel="150500.3.18.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 055+suse.375.g1167ed75:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1710849600">- Update to version 055+suse.382.g80b55af2:
  * fix(dracut): correct regression with multiple `rd.break=` options (bsc#1221675)
  * fix(dracut-util): do not call `strcmp` if the `value` argument is NULL (bsc#1219841)
  * fix(zfcp_rules): correct shellcheck regression when parsing ccw args (bsc#1220485)
  * fix(dracut.sh): skip README for AMD microcode generation (bsc#1217083)</changelog>
</package>
<package pkgid="0d18734c3064616b3eed7d41bed19c4d935ca10be8ef54a5bbee62112167c8b7" name="dracut-fips" arch="aarch64">
  <version epoch="0" ver="055+suse.388.g70c21afa" rel="150500.3.21.2"/>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 055+suse.375.g1167ed75:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1710849600">- Update to version 055+suse.382.g80b55af2:
  * fix(dracut): correct regression with multiple `rd.break=` options (bsc#1221675)
  * fix(dracut-util): do not call `strcmp` if the `value` argument is NULL (bsc#1219841)
  * fix(zfcp_rules): correct shellcheck regression when parsing ccw args (bsc#1220485)
  * fix(dracut.sh): skip README for AMD microcode generation (bsc#1217083)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1720440000">- Update to version 055+suse.388.g70c21afa:
  * feat(crypt): force the inclusion of crypttab entries with x-initrd.attach (bsc#1226529)
  * fix(mdraid): try to assemble the missing raid device (bsc#1226412)
  * fix(dracut-install): continue parsing if ldd prints "cannot be preloaded" (bsc#1208690)</changelog>
</package>
<package pkgid="38b156044b141db5e09be3a42fb4f6d9c58589cbbbee285472a7be0cb8285a5d" name="dracut-fips" arch="s390x">
  <version epoch="0" ver="055+suse.388.g70c21afa" rel="150500.3.21.2"/>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 055+suse.375.g1167ed75:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1710849600">- Update to version 055+suse.382.g80b55af2:
  * fix(dracut): correct regression with multiple `rd.break=` options (bsc#1221675)
  * fix(dracut-util): do not call `strcmp` if the `value` argument is NULL (bsc#1219841)
  * fix(zfcp_rules): correct shellcheck regression when parsing ccw args (bsc#1220485)
  * fix(dracut.sh): skip README for AMD microcode generation (bsc#1217083)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1720440000">- Update to version 055+suse.388.g70c21afa:
  * feat(crypt): force the inclusion of crypttab entries with x-initrd.attach (bsc#1226529)
  * fix(mdraid): try to assemble the missing raid device (bsc#1226412)
  * fix(dracut-install): continue parsing if ldd prints "cannot be preloaded" (bsc#1208690)</changelog>
</package>
<package pkgid="22fc0f1bdb161aa23e48bd6fd1ff89a4a6f901fc04a131b365a999550d214109" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="055+suse.388.g70c21afa" rel="150500.3.21.2"/>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 055+suse.375.g1167ed75:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1710849600">- Update to version 055+suse.382.g80b55af2:
  * fix(dracut): correct regression with multiple `rd.break=` options (bsc#1221675)
  * fix(dracut-util): do not call `strcmp` if the `value` argument is NULL (bsc#1219841)
  * fix(zfcp_rules): correct shellcheck regression when parsing ccw args (bsc#1220485)
  * fix(dracut.sh): skip README for AMD microcode generation (bsc#1217083)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1720440000">- Update to version 055+suse.388.g70c21afa:
  * feat(crypt): force the inclusion of crypttab entries with x-initrd.attach (bsc#1226529)
  * fix(mdraid): try to assemble the missing raid device (bsc#1226412)
  * fix(dracut-install): continue parsing if ldd prints "cannot be preloaded" (bsc#1208690)</changelog>
</package>
<package pkgid="a47e90c646b65f696e5c4e9b5931fd84a887f95c085f5635c60ed9045fbb53fd" name="dracut-fips" arch="aarch64">
  <version epoch="0" ver="055+suse.392.g7930ab23" rel="150500.3.24.2"/>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 055+suse.375.g1167ed75:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1710849600">- Update to version 055+suse.382.g80b55af2:
  * fix(dracut): correct regression with multiple `rd.break=` options (bsc#1221675)
  * fix(dracut-util): do not call `strcmp` if the `value` argument is NULL (bsc#1219841)
  * fix(zfcp_rules): correct shellcheck regression when parsing ccw args (bsc#1220485)
  * fix(dracut.sh): skip README for AMD microcode generation (bsc#1217083)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1720440000">- Update to version 055+suse.388.g70c21afa:
  * feat(crypt): force the inclusion of crypttab entries with x-initrd.attach (bsc#1226529)
  * fix(mdraid): try to assemble the missing raid device (bsc#1226412)
  * fix(dracut-install): continue parsing if ldd prints "cannot be preloaded" (bsc#1208690)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1724414400">- Update to version 055+suse.392.g7930ab23:
  * feat(systemd*): include systemd config files from /usr/lib/systemd (bsc#1228398)
  * fix(convertfs): error in conditional expressions (bsc#1228847)</changelog>
</package>
<package pkgid="c1e9bb5efb9dc7bfaa2cdd1f04ada0a3381df811e12a064997089a0320fc1751" name="dracut-fips" arch="s390x">
  <version epoch="0" ver="055+suse.392.g7930ab23" rel="150500.3.24.2"/>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 055+suse.375.g1167ed75:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1710849600">- Update to version 055+suse.382.g80b55af2:
  * fix(dracut): correct regression with multiple `rd.break=` options (bsc#1221675)
  * fix(dracut-util): do not call `strcmp` if the `value` argument is NULL (bsc#1219841)
  * fix(zfcp_rules): correct shellcheck regression when parsing ccw args (bsc#1220485)
  * fix(dracut.sh): skip README for AMD microcode generation (bsc#1217083)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1720440000">- Update to version 055+suse.388.g70c21afa:
  * feat(crypt): force the inclusion of crypttab entries with x-initrd.attach (bsc#1226529)
  * fix(mdraid): try to assemble the missing raid device (bsc#1226412)
  * fix(dracut-install): continue parsing if ldd prints "cannot be preloaded" (bsc#1208690)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1724414400">- Update to version 055+suse.392.g7930ab23:
  * feat(systemd*): include systemd config files from /usr/lib/systemd (bsc#1228398)
  * fix(convertfs): error in conditional expressions (bsc#1228847)</changelog>
</package>
<package pkgid="34c583fc7424d320217644083489cf2deb5641bf0f4de155d34302f7359a2c8b" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="055+suse.392.g7930ab23" rel="150500.3.24.2"/>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 055+suse.375.g1167ed75:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1710849600">- Update to version 055+suse.382.g80b55af2:
  * fix(dracut): correct regression with multiple `rd.break=` options (bsc#1221675)
  * fix(dracut-util): do not call `strcmp` if the `value` argument is NULL (bsc#1219841)
  * fix(zfcp_rules): correct shellcheck regression when parsing ccw args (bsc#1220485)
  * fix(dracut.sh): skip README for AMD microcode generation (bsc#1217083)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1720440000">- Update to version 055+suse.388.g70c21afa:
  * feat(crypt): force the inclusion of crypttab entries with x-initrd.attach (bsc#1226529)
  * fix(mdraid): try to assemble the missing raid device (bsc#1226412)
  * fix(dracut-install): continue parsing if ldd prints "cannot be preloaded" (bsc#1208690)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1724414400">- Update to version 055+suse.392.g7930ab23:
  * feat(systemd*): include systemd config files from /usr/lib/systemd (bsc#1228398)
  * fix(convertfs): error in conditional expressions (bsc#1228847)</changelog>
</package>
<package pkgid="ce68b0d67b811e335e369cffda796fe030aad13bb4456ea2b83faec6a7525bc0" name="dracut-kiwi-lib" arch="aarch64">
  <version epoch="0" ver="9.24.43" rel="150100.3.62.1"/>
  <changelog author="ms@suse.de" date="1635163200">- Bump version: 9.23.20 → 9.24.2
  This version upgrade includes several fixes:
  * Fixed secure boot fallback setup
    Make sure MokManager gets copied. The name and location of
    the mok manager is distribution specific in the same way as
    the shim loader. Thus we need to apply a similar concept
    for looking it up. This Fixes bsc#1187515
  * Allow creation of LUKS system with empty key
    To support cloud platforms better we should allow the
    creation of an initial(insecure) LUKS encrypted image
    with an empty passphrase/keyfile. This Fixes
    bsc#1187461 and bsc#1187460
  * Delete obsolete ddb.adapterType patching
    When building a vmdk image with pvscsi as adapter type, kiwi
    implicitly changed the adapter_type from pvscsi to lsilogic
    because qemu only knows lsilogic. At the end kiwi patched
    the adapter type in the descriptor of the vmdk header back
    to pvscsi. That patching seems to be wrong according to
    information from users and VMware support. This commit
    deletes the descriptor patching and only leaves the pvscsi
    setting in the guest configuration(vmx).
    This Fixes bsc#1180539 and Fixes #1847
  * Make dracut version check more robust
    The check_dracut_module_versions_compatible_to_kiwi() runtime
    check calls the package manager from the host and reads the
    package database from the image root. Doing this requires
    the package database in the image to be compatible with the
    package manager on the host. However this cannot be guarenteed
    and it is more robust to chroot into the image root and call
    the package manager from there. However, this change also comes
    with the cost that it's required to have a package manager
    available in the image root tree. Therefore along with the
    chroot based call, eventual exceptions from the call are now
    catched and leads to a debug message in the log file but will
    not lead the runtime check to fail. I consider the cases
    without a package database inside of the image to be less
    critical than the incompatibility issue between the host
    tooling and the package database in the image.
    This Fixes bsc#1185937
  * Fixed setup of repository architecture
    Unfortunately the architecture reported by uname is not
    necessarily the same name as used in the repository metadata.
    Therefore it was not a good idea to set the architecture
    and manage the name via a mapping table. It also has turned
    out that repo arch names are distro specific which causes
    more complexity on an eventual mapping table. In the end
    this commit changes the way how the repository architecture
    is setup in a way that we only set the architecture if
    a name was explicitly specified such that the user keeps
    full control over it without any mapping magic included
    This Fixes bsc#1185287
  * Do not apply default subcommand for derivate containers
    This commit does not apply the default subcommand for derivate
    containers. Fixes bsc#1184823
  * Added openssl to the core requires
    openssl is used in kiwi to construct a password hash
    if the plaintext password feature for user settings
    is used. This Fixes bsc#1184128</changelog>
  <changelog author="dcassany@suse.com" date="1643630400">- Bump version: 9.24.15 → 9.24.16
  This version upgrade includes several fixes:
  * Fixed regression in compression detection
    The change from 282529de8f612dee32d54ee868c2365dcd829220
    Introduced a bad regression. The assumption was made that the
    xz tool could be used to detect if a file is compressed or not.
    However, this requires the file to be locally present. In the
    scope of the method call is_compressed() and within a remote
    deployment e.g PXE this is not the case. Therefore the former
    way to "detect" the compression according to the .xz postfix
    of the source filename was restored. In addition the function
    name was changed to is_xz_compressed() because that's what the
    method can do and not more. This Fixes #2015
    Fixes a regression in the scope of bsc#1192975 (#c16)
  * index.rst: Change title (bsc#1189294#c2)
  * 'KIWI NG 9: KIWI NG Documentation' -&gt; 'Building Linux System Appliances with KIWI Next Generation (KIWI NG &lt;VERSION&gt;)
  * suggested in bsc#1189294#c2 for more clarity
  * change has been discussed with and approved by main author (Marcus S.)
  * Care for different snapper template locations
    snapper recently changed their config template location
    from etc/ to usr/. This commit handles the two locations
    and Fixes bsc#1192940
  * Do not force dracut into a compression setting
    So far we called dracut with --xz which forces the initrd
    to be xz compressed. There are other compression formats
    used by the distributions and they might differe from xz.
    The selection for a compression tool is done by a dist
    configuration in dracut.conf.d which is provided by the
    distributions as they see fit. For us this means not
    forcing dracut into a specific compression setting allows
    to make use of the distro provided setting and also
    allows to change/override this setting by an overlay
    file. This Fixes bsc#1192975</changelog>
  <changelog author="dcassany@suse.com" date="1643630401">- Ensure backward compatibility on deprecated methods
  This commit ensures backward compatibility for deprecated
  config bash script utilities.
  Fixes bsc#1195229
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="fvogt@suse.de" date="1646222400">- Don't exit the script on deprecated function use (bsc#1196644)
  The "exit 0" there stops processing of the calling script with a success exit
  code, which leads to incomplete and broken images.</changelog>
  <changelog author="dcassany@suse.com" date="1646222401">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
</package>
<package pkgid="66f8c51551b33bb50b95e51bc19686fa8af84099079457397f6303d36b0e3510" name="dracut-kiwi-lib" arch="s390x">
  <version epoch="0" ver="9.24.43" rel="150100.3.62.1"/>
  <changelog author="ms@suse.de" date="1635163200">- Bump version: 9.23.20 → 9.24.2
  This version upgrade includes several fixes:
  * Fixed secure boot fallback setup
    Make sure MokManager gets copied. The name and location of
    the mok manager is distribution specific in the same way as
    the shim loader. Thus we need to apply a similar concept
    for looking it up. This Fixes bsc#1187515
  * Allow creation of LUKS system with empty key
    To support cloud platforms better we should allow the
    creation of an initial(insecure) LUKS encrypted image
    with an empty passphrase/keyfile. This Fixes
    bsc#1187461 and bsc#1187460
  * Delete obsolete ddb.adapterType patching
    When building a vmdk image with pvscsi as adapter type, kiwi
    implicitly changed the adapter_type from pvscsi to lsilogic
    because qemu only knows lsilogic. At the end kiwi patched
    the adapter type in the descriptor of the vmdk header back
    to pvscsi. That patching seems to be wrong according to
    information from users and VMware support. This commit
    deletes the descriptor patching and only leaves the pvscsi
    setting in the guest configuration(vmx).
    This Fixes bsc#1180539 and Fixes #1847
  * Make dracut version check more robust
    The check_dracut_module_versions_compatible_to_kiwi() runtime
    check calls the package manager from the host and reads the
    package database from the image root. Doing this requires
    the package database in the image to be compatible with the
    package manager on the host. However this cannot be guarenteed
    and it is more robust to chroot into the image root and call
    the package manager from there. However, this change also comes
    with the cost that it's required to have a package manager
    available in the image root tree. Therefore along with the
    chroot based call, eventual exceptions from the call are now
    catched and leads to a debug message in the log file but will
    not lead the runtime check to fail. I consider the cases
    without a package database inside of the image to be less
    critical than the incompatibility issue between the host
    tooling and the package database in the image.
    This Fixes bsc#1185937
  * Fixed setup of repository architecture
    Unfortunately the architecture reported by uname is not
    necessarily the same name as used in the repository metadata.
    Therefore it was not a good idea to set the architecture
    and manage the name via a mapping table. It also has turned
    out that repo arch names are distro specific which causes
    more complexity on an eventual mapping table. In the end
    this commit changes the way how the repository architecture
    is setup in a way that we only set the architecture if
    a name was explicitly specified such that the user keeps
    full control over it without any mapping magic included
    This Fixes bsc#1185287
  * Do not apply default subcommand for derivate containers
    This commit does not apply the default subcommand for derivate
    containers. Fixes bsc#1184823
  * Added openssl to the core requires
    openssl is used in kiwi to construct a password hash
    if the plaintext password feature for user settings
    is used. This Fixes bsc#1184128</changelog>
  <changelog author="dcassany@suse.com" date="1643630400">- Bump version: 9.24.15 → 9.24.16
  This version upgrade includes several fixes:
  * Fixed regression in compression detection
    The change from 282529de8f612dee32d54ee868c2365dcd829220
    Introduced a bad regression. The assumption was made that the
    xz tool could be used to detect if a file is compressed or not.
    However, this requires the file to be locally present. In the
    scope of the method call is_compressed() and within a remote
    deployment e.g PXE this is not the case. Therefore the former
    way to "detect" the compression according to the .xz postfix
    of the source filename was restored. In addition the function
    name was changed to is_xz_compressed() because that's what the
    method can do and not more. This Fixes #2015
    Fixes a regression in the scope of bsc#1192975 (#c16)
  * index.rst: Change title (bsc#1189294#c2)
  * 'KIWI NG 9: KIWI NG Documentation' -&gt; 'Building Linux System Appliances with KIWI Next Generation (KIWI NG &lt;VERSION&gt;)
  * suggested in bsc#1189294#c2 for more clarity
  * change has been discussed with and approved by main author (Marcus S.)
  * Care for different snapper template locations
    snapper recently changed their config template location
    from etc/ to usr/. This commit handles the two locations
    and Fixes bsc#1192940
  * Do not force dracut into a compression setting
    So far we called dracut with --xz which forces the initrd
    to be xz compressed. There are other compression formats
    used by the distributions and they might differe from xz.
    The selection for a compression tool is done by a dist
    configuration in dracut.conf.d which is provided by the
    distributions as they see fit. For us this means not
    forcing dracut into a specific compression setting allows
    to make use of the distro provided setting and also
    allows to change/override this setting by an overlay
    file. This Fixes bsc#1192975</changelog>
  <changelog author="dcassany@suse.com" date="1643630401">- Ensure backward compatibility on deprecated methods
  This commit ensures backward compatibility for deprecated
  config bash script utilities.
  Fixes bsc#1195229
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="fvogt@suse.de" date="1646222400">- Don't exit the script on deprecated function use (bsc#1196644)
  The "exit 0" there stops processing of the calling script with a success exit
  code, which leads to incomplete and broken images.</changelog>
  <changelog author="dcassany@suse.com" date="1646222401">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
</package>
<package pkgid="1013b7f33fce5167b1e00164c2e51ce657faff2fc215f96eedbcd36c5a7264e1" name="dracut-kiwi-lib" arch="x86_64">
  <version epoch="0" ver="9.24.43" rel="150100.3.62.1"/>
  <changelog author="ms@suse.de" date="1635163200">- Bump version: 9.23.20 → 9.24.2
  This version upgrade includes several fixes:
  * Fixed secure boot fallback setup
    Make sure MokManager gets copied. The name and location of
    the mok manager is distribution specific in the same way as
    the shim loader. Thus we need to apply a similar concept
    for looking it up. This Fixes bsc#1187515
  * Allow creation of LUKS system with empty key
    To support cloud platforms better we should allow the
    creation of an initial(insecure) LUKS encrypted image
    with an empty passphrase/keyfile. This Fixes
    bsc#1187461 and bsc#1187460
  * Delete obsolete ddb.adapterType patching
    When building a vmdk image with pvscsi as adapter type, kiwi
    implicitly changed the adapter_type from pvscsi to lsilogic
    because qemu only knows lsilogic. At the end kiwi patched
    the adapter type in the descriptor of the vmdk header back
    to pvscsi. That patching seems to be wrong according to
    information from users and VMware support. This commit
    deletes the descriptor patching and only leaves the pvscsi
    setting in the guest configuration(vmx).
    This Fixes bsc#1180539 and Fixes #1847
  * Make dracut version check more robust
    The check_dracut_module_versions_compatible_to_kiwi() runtime
    check calls the package manager from the host and reads the
    package database from the image root. Doing this requires
    the package database in the image to be compatible with the
    package manager on the host. However this cannot be guarenteed
    and it is more robust to chroot into the image root and call
    the package manager from there. However, this change also comes
    with the cost that it's required to have a package manager
    available in the image root tree. Therefore along with the
    chroot based call, eventual exceptions from the call are now
    catched and leads to a debug message in the log file but will
    not lead the runtime check to fail. I consider the cases
    without a package database inside of the image to be less
    critical than the incompatibility issue between the host
    tooling and the package database in the image.
    This Fixes bsc#1185937
  * Fixed setup of repository architecture
    Unfortunately the architecture reported by uname is not
    necessarily the same name as used in the repository metadata.
    Therefore it was not a good idea to set the architecture
    and manage the name via a mapping table. It also has turned
    out that repo arch names are distro specific which causes
    more complexity on an eventual mapping table. In the end
    this commit changes the way how the repository architecture
    is setup in a way that we only set the architecture if
    a name was explicitly specified such that the user keeps
    full control over it without any mapping magic included
    This Fixes bsc#1185287
  * Do not apply default subcommand for derivate containers
    This commit does not apply the default subcommand for derivate
    containers. Fixes bsc#1184823
  * Added openssl to the core requires
    openssl is used in kiwi to construct a password hash
    if the plaintext password feature for user settings
    is used. This Fixes bsc#1184128</changelog>
  <changelog author="dcassany@suse.com" date="1643630400">- Bump version: 9.24.15 → 9.24.16
  This version upgrade includes several fixes:
  * Fixed regression in compression detection
    The change from 282529de8f612dee32d54ee868c2365dcd829220
    Introduced a bad regression. The assumption was made that the
    xz tool could be used to detect if a file is compressed or not.
    However, this requires the file to be locally present. In the
    scope of the method call is_compressed() and within a remote
    deployment e.g PXE this is not the case. Therefore the former
    way to "detect" the compression according to the .xz postfix
    of the source filename was restored. In addition the function
    name was changed to is_xz_compressed() because that's what the
    method can do and not more. This Fixes #2015
    Fixes a regression in the scope of bsc#1192975 (#c16)
  * index.rst: Change title (bsc#1189294#c2)
  * 'KIWI NG 9: KIWI NG Documentation' -&gt; 'Building Linux System Appliances with KIWI Next Generation (KIWI NG &lt;VERSION&gt;)
  * suggested in bsc#1189294#c2 for more clarity
  * change has been discussed with and approved by main author (Marcus S.)
  * Care for different snapper template locations
    snapper recently changed their config template location
    from etc/ to usr/. This commit handles the two locations
    and Fixes bsc#1192940
  * Do not force dracut into a compression setting
    So far we called dracut with --xz which forces the initrd
    to be xz compressed. There are other compression formats
    used by the distributions and they might differe from xz.
    The selection for a compression tool is done by a dist
    configuration in dracut.conf.d which is provided by the
    distributions as they see fit. For us this means not
    forcing dracut into a specific compression setting allows
    to make use of the distro provided setting and also
    allows to change/override this setting by an overlay
    file. This Fixes bsc#1192975</changelog>
  <changelog author="dcassany@suse.com" date="1643630401">- Ensure backward compatibility on deprecated methods
  This commit ensures backward compatibility for deprecated
  config bash script utilities.
  Fixes bsc#1195229
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="fvogt@suse.de" date="1646222400">- Don't exit the script on deprecated function use (bsc#1196644)
  The "exit 0" there stops processing of the calling script with a success exit
  code, which leads to incomplete and broken images.</changelog>
  <changelog author="dcassany@suse.com" date="1646222401">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
</package>
<package pkgid="00640ce9e572a5b26855c00d2407e55621c72c807b72b97170fe700cfc37767d" name="dracut-kiwi-lib" arch="aarch64">
  <version epoch="0" ver="9.24.43" rel="150100.3.65.1"/>
  <changelog author="dcassany@suse.com" date="1646222400">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
</package>
<package pkgid="aaee246cf684ebc3b33412df3f6d58e705b01791e5f41bb883b9ab2caf726163" name="dracut-kiwi-lib" arch="s390x">
  <version epoch="0" ver="9.24.43" rel="150100.3.65.1"/>
  <changelog author="dcassany@suse.com" date="1646222400">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
</package>
<package pkgid="24d4ffa74ebcc64fd5cbcfbdbc8fd1a809f6bf2d80f5d8926f6dd4c5ac0e9476" name="dracut-kiwi-lib" arch="x86_64">
  <version epoch="0" ver="9.24.43" rel="150100.3.65.1"/>
  <changelog author="dcassany@suse.com" date="1646222400">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
</package>
<package pkgid="381689ee668bb43c1511144703d4221852d587e7e36def5464a017d3ff2dcbe2" name="dracut-kiwi-lib" arch="aarch64">
  <version epoch="0" ver="9.24.43" rel="150100.3.68.1"/>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
</package>
<package pkgid="b10a43220aa1fb249ae2a2fadcedd6ba160ed3c771acd0f5cf3492872614fce8" name="dracut-kiwi-lib" arch="s390x">
  <version epoch="0" ver="9.24.43" rel="150100.3.68.1"/>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
</package>
<package pkgid="fb8dfcb21d1c0705a17ce758550929431b0e46150ea18f261ebec466154b8ce8" name="dracut-kiwi-lib" arch="x86_64">
  <version epoch="0" ver="9.24.43" rel="150100.3.68.1"/>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
</package>
<package pkgid="c1419c07d2bd4bc6f2926ca1e10103f6f60d17694d924a4094a178d23ef6dabc" name="dracut-kiwi-lib" arch="aarch64">
  <version epoch="0" ver="9.24.43" rel="150100.3.71.1"/>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
</package>
<package pkgid="623c6c2c18cb6fd1e1a259ddda47808113150ce7f017514b244d771f1c2660fe" name="dracut-kiwi-lib" arch="s390x">
  <version epoch="0" ver="9.24.43" rel="150100.3.71.1"/>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
</package>
<package pkgid="95916601b8cc18450ccfe9c4d7a9504f627deb2829986bce0d3c42e645b155a1" name="dracut-kiwi-lib" arch="x86_64">
  <version epoch="0" ver="9.24.43" rel="150100.3.71.1"/>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
</package>
<package pkgid="42013e3472aa832b67233e3d6b28260b8dfc3850528305d251d4ae977016bd72" name="dracut-kiwi-lib" arch="aarch64">
  <version epoch="0" ver="9.24.43" rel="150100.3.76.1"/>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1711368000">- Live ISO Wait for udev events after repart
  Make sure to wait for the event queue to become empty after
  the creation of the write partition. When kiwi calls the
  code to create the write partition this emits new udev events.
  It's important to wait for the event queue to become empty
  to avoid a potential regression on the use of the device nodes.
  In the processing of the events it can happen that a device
  gets removed and re-added. If we don't want for udev
  to process the entire queue it can happen that the
  wrong block device is used. This wrong selection is only
  possible because the way how hybrid ISOs are designed exposes
  both, the disk and the partition for the root device with
  the same label. This Fixes bsc#1213595</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1712232000">- Set default output console to gfxterm for grub
  If no console setting is done in the image description for grub
  the default output console is set to: gfxterm and the default
  input console is set to: console. This Fixes bsc#1219074</changelog>
</package>
<package pkgid="ff14603cdb07fc2ed5a4ca4ad32ad30da4f3b63876f88565e5dce2d6e1cd79cf" name="dracut-kiwi-lib" arch="s390x">
  <version epoch="0" ver="9.24.43" rel="150100.3.76.1"/>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1711368000">- Live ISO Wait for udev events after repart
  Make sure to wait for the event queue to become empty after
  the creation of the write partition. When kiwi calls the
  code to create the write partition this emits new udev events.
  It's important to wait for the event queue to become empty
  to avoid a potential regression on the use of the device nodes.
  In the processing of the events it can happen that a device
  gets removed and re-added. If we don't want for udev
  to process the entire queue it can happen that the
  wrong block device is used. This wrong selection is only
  possible because the way how hybrid ISOs are designed exposes
  both, the disk and the partition for the root device with
  the same label. This Fixes bsc#1213595</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1712232000">- Set default output console to gfxterm for grub
  If no console setting is done in the image description for grub
  the default output console is set to: gfxterm and the default
  input console is set to: console. This Fixes bsc#1219074</changelog>
</package>
<package pkgid="d642bfc60d6fd8b755f50b1e4b7bc0cfaf825d01af1e374ce5cc1eb031edcb9b" name="dracut-kiwi-lib" arch="x86_64">
  <version epoch="0" ver="9.24.43" rel="150100.3.76.1"/>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1711368000">- Live ISO Wait for udev events after repart
  Make sure to wait for the event queue to become empty after
  the creation of the write partition. When kiwi calls the
  code to create the write partition this emits new udev events.
  It's important to wait for the event queue to become empty
  to avoid a potential regression on the use of the device nodes.
  In the processing of the events it can happen that a device
  gets removed and re-added. If we don't want for udev
  to process the entire queue it can happen that the
  wrong block device is used. This wrong selection is only
  possible because the way how hybrid ISOs are designed exposes
  both, the disk and the partition for the root device with
  the same label. This Fixes bsc#1213595</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1712232000">- Set default output console to gfxterm for grub
  If no console setting is done in the image description for grub
  the default output console is set to: gfxterm and the default
  input console is set to: console. This Fixes bsc#1219074</changelog>
</package>
<package pkgid="6e0a1582549b8a5c9ccc0a30525646aea2956b3176538ef799641e0d80bcc8b9" name="dracut-kiwi-lib" arch="aarch64">
  <version epoch="0" ver="9.24.43" rel="150100.3.81.1"/>
  <changelog author="dcassany@suse.com" date="1681300800">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1711368000">- Live ISO Wait for udev events after repart
  Make sure to wait for the event queue to become empty after
  the creation of the write partition. When kiwi calls the
  code to create the write partition this emits new udev events.
  It's important to wait for the event queue to become empty
  to avoid a potential regression on the use of the device nodes.
  In the processing of the events it can happen that a device
  gets removed and re-added. If we don't want for udev
  to process the entire queue it can happen that the
  wrong block device is used. This wrong selection is only
  possible because the way how hybrid ISOs are designed exposes
  both, the disk and the partition for the root device with
  the same label. This Fixes bsc#1213595</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1712232000">- Set default output console to gfxterm for grub
  If no console setting is done in the image description for grub
  the default output console is set to: gfxterm and the default
  input console is set to: console. This Fixes bsc#1219074</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1722427200">- Add rd.kiwi.oem.force_resize boot option
  Forces the disk resize process on an OEM disk image.
  If set, no sanity check for unpartitioned/free space
  is performed and also an eventually configured
  &lt;oem-resize-once&gt; configuration from the image description
  will not be taken into account. This Fixes bsc#1224389</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1722427201">- Do not exclude the .profile env file by default
  kiwi's initrd modules read a .profile file which gets included
  into the initrd produced at build time. To allow rebuild of a
  host-only initrd from the booted system this information should
  be present such that it is possible to re-use kiwi initrd code.
  This is related to bsc#1228118</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1722427202">- Fix kiwi-repart restrictions
  The kiwi repart dracut module reads a profile file and if it
  does not exists it dies in the initrd. However, that profile
  file is not mandatory for the main resize functionality. Thus
  this commit turns this into a warning message. In addition
  the module-setup for 90kiwi-repart makes sure to include
  the required and optional profile files.
  This Fixes bsc#1228118</changelog>
</package>
<package pkgid="8c217080c6bad199a9e5ca77c8e28a3cbc2717939c394341b8510ddfee14c65c" name="dracut-kiwi-lib" arch="s390x">
  <version epoch="0" ver="9.24.43" rel="150100.3.81.1"/>
  <changelog author="dcassany@suse.com" date="1681300800">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1711368000">- Live ISO Wait for udev events after repart
  Make sure to wait for the event queue to become empty after
  the creation of the write partition. When kiwi calls the
  code to create the write partition this emits new udev events.
  It's important to wait for the event queue to become empty
  to avoid a potential regression on the use of the device nodes.
  In the processing of the events it can happen that a device
  gets removed and re-added. If we don't want for udev
  to process the entire queue it can happen that the
  wrong block device is used. This wrong selection is only
  possible because the way how hybrid ISOs are designed exposes
  both, the disk and the partition for the root device with
  the same label. This Fixes bsc#1213595</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1712232000">- Set default output console to gfxterm for grub
  If no console setting is done in the image description for grub
  the default output console is set to: gfxterm and the default
  input console is set to: console. This Fixes bsc#1219074</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1722427200">- Add rd.kiwi.oem.force_resize boot option
  Forces the disk resize process on an OEM disk image.
  If set, no sanity check for unpartitioned/free space
  is performed and also an eventually configured
  &lt;oem-resize-once&gt; configuration from the image description
  will not be taken into account. This Fixes bsc#1224389</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1722427201">- Do not exclude the .profile env file by default
  kiwi's initrd modules read a .profile file which gets included
  into the initrd produced at build time. To allow rebuild of a
  host-only initrd from the booted system this information should
  be present such that it is possible to re-use kiwi initrd code.
  This is related to bsc#1228118</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1722427202">- Fix kiwi-repart restrictions
  The kiwi repart dracut module reads a profile file and if it
  does not exists it dies in the initrd. However, that profile
  file is not mandatory for the main resize functionality. Thus
  this commit turns this into a warning message. In addition
  the module-setup for 90kiwi-repart makes sure to include
  the required and optional profile files.
  This Fixes bsc#1228118</changelog>
</package>
<package pkgid="e695b277768c401210fa72349ab30ab189993a36b06dd9bc3ca52cf314b57b84" name="dracut-kiwi-lib" arch="x86_64">
  <version epoch="0" ver="9.24.43" rel="150100.3.81.1"/>
  <changelog author="dcassany@suse.com" date="1681300800">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1711368000">- Live ISO Wait for udev events after repart
  Make sure to wait for the event queue to become empty after
  the creation of the write partition. When kiwi calls the
  code to create the write partition this emits new udev events.
  It's important to wait for the event queue to become empty
  to avoid a potential regression on the use of the device nodes.
  In the processing of the events it can happen that a device
  gets removed and re-added. If we don't want for udev
  to process the entire queue it can happen that the
  wrong block device is used. This wrong selection is only
  possible because the way how hybrid ISOs are designed exposes
  both, the disk and the partition for the root device with
  the same label. This Fixes bsc#1213595</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1712232000">- Set default output console to gfxterm for grub
  If no console setting is done in the image description for grub
  the default output console is set to: gfxterm and the default
  input console is set to: console. This Fixes bsc#1219074</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1722427200">- Add rd.kiwi.oem.force_resize boot option
  Forces the disk resize process on an OEM disk image.
  If set, no sanity check for unpartitioned/free space
  is performed and also an eventually configured
  &lt;oem-resize-once&gt; configuration from the image description
  will not be taken into account. This Fixes bsc#1224389</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1722427201">- Do not exclude the .profile env file by default
  kiwi's initrd modules read a .profile file which gets included
  into the initrd produced at build time. To allow rebuild of a
  host-only initrd from the booted system this information should
  be present such that it is possible to re-use kiwi initrd code.
  This is related to bsc#1228118</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1722427202">- Fix kiwi-repart restrictions
  The kiwi repart dracut module reads a profile file and if it
  does not exists it dies in the initrd. However, that profile
  file is not mandatory for the main resize functionality. Thus
  this commit turns this into a warning message. In addition
  the module-setup for 90kiwi-repart makes sure to include
  the required and optional profile files.
  This Fixes bsc#1228118</changelog>
</package>
<package pkgid="fbe524d219ddc909d6c73aad24a088435adeb75f59f2b91c79d8a9f5a970d667" name="dracut-kiwi-lib" arch="aarch64">
  <version epoch="0" ver="9.24.43" rel="150100.3.84.1"/>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704801600">- Fixed regression in GRUB_SERIAL_COMMAND setup
  The condition to write the serial line setup was broken.
  This commit fixes it. Related to Issue #2419 and
  Fixes bsc#1228808</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1711368000">- Live ISO Wait for udev events after repart
  Make sure to wait for the event queue to become empty after
  the creation of the write partition. When kiwi calls the
  code to create the write partition this emits new udev events.
  It's important to wait for the event queue to become empty
  to avoid a potential regression on the use of the device nodes.
  In the processing of the events it can happen that a device
  gets removed and re-added. If we don't want for udev
  to process the entire queue it can happen that the
  wrong block device is used. This wrong selection is only
  possible because the way how hybrid ISOs are designed exposes
  both, the disk and the partition for the root device with
  the same label. This Fixes bsc#1213595</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1712232000">- Set default output console to gfxterm for grub
  If no console setting is done in the image description for grub
  the default output console is set to: gfxterm and the default
  input console is set to: console. This Fixes bsc#1219074</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1722427200">- Add rd.kiwi.oem.force_resize boot option
  Forces the disk resize process on an OEM disk image.
  If set, no sanity check for unpartitioned/free space
  is performed and also an eventually configured
  &lt;oem-resize-once&gt; configuration from the image description
  will not be taken into account. This Fixes bsc#1224389</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1722427201">- Do not exclude the .profile env file by default
  kiwi's initrd modules read a .profile file which gets included
  into the initrd produced at build time. To allow rebuild of a
  host-only initrd from the booted system this information should
  be present such that it is possible to re-use kiwi initrd code.
  This is related to bsc#1228118</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1722427202">- Fix kiwi-repart restrictions
  The kiwi repart dracut module reads a profile file and if it
  does not exists it dies in the initrd. However, that profile
  file is not mandatory for the main resize functionality. Thus
  this commit turns this into a warning message. In addition
  the module-setup for 90kiwi-repart makes sure to include
  the required and optional profile files.
  This Fixes bsc#1228118</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1723118400">- Update virtualenv setup
  types-pkg_resources got dropped from PyPI</changelog>
</package>
<package pkgid="5eb81919be3c34b30adc824c0ed5b47e387d31a41d74bfa2bd8333b860f05463" name="dracut-kiwi-lib" arch="s390x">
  <version epoch="0" ver="9.24.43" rel="150100.3.84.1"/>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704801600">- Fixed regression in GRUB_SERIAL_COMMAND setup
  The condition to write the serial line setup was broken.
  This commit fixes it. Related to Issue #2419 and
  Fixes bsc#1228808</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1711368000">- Live ISO Wait for udev events after repart
  Make sure to wait for the event queue to become empty after
  the creation of the write partition. When kiwi calls the
  code to create the write partition this emits new udev events.
  It's important to wait for the event queue to become empty
  to avoid a potential regression on the use of the device nodes.
  In the processing of the events it can happen that a device
  gets removed and re-added. If we don't want for udev
  to process the entire queue it can happen that the
  wrong block device is used. This wrong selection is only
  possible because the way how hybrid ISOs are designed exposes
  both, the disk and the partition for the root device with
  the same label. This Fixes bsc#1213595</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1712232000">- Set default output console to gfxterm for grub
  If no console setting is done in the image description for grub
  the default output console is set to: gfxterm and the default
  input console is set to: console. This Fixes bsc#1219074</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1722427200">- Add rd.kiwi.oem.force_resize boot option
  Forces the disk resize process on an OEM disk image.
  If set, no sanity check for unpartitioned/free space
  is performed and also an eventually configured
  &lt;oem-resize-once&gt; configuration from the image description
  will not be taken into account. This Fixes bsc#1224389</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1722427201">- Do not exclude the .profile env file by default
  kiwi's initrd modules read a .profile file which gets included
  into the initrd produced at build time. To allow rebuild of a
  host-only initrd from the booted system this information should
  be present such that it is possible to re-use kiwi initrd code.
  This is related to bsc#1228118</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1722427202">- Fix kiwi-repart restrictions
  The kiwi repart dracut module reads a profile file and if it
  does not exists it dies in the initrd. However, that profile
  file is not mandatory for the main resize functionality. Thus
  this commit turns this into a warning message. In addition
  the module-setup for 90kiwi-repart makes sure to include
  the required and optional profile files.
  This Fixes bsc#1228118</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1723118400">- Update virtualenv setup
  types-pkg_resources got dropped from PyPI</changelog>
</package>
<package pkgid="560647ac6c9e76d985af005e55c7e6c3ae95bb83fb29273ecbb8fc3f2a425d3d" name="dracut-kiwi-lib" arch="x86_64">
  <version epoch="0" ver="9.24.43" rel="150100.3.84.1"/>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704801600">- Fixed regression in GRUB_SERIAL_COMMAND setup
  The condition to write the serial line setup was broken.
  This commit fixes it. Related to Issue #2419 and
  Fixes bsc#1228808</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1711368000">- Live ISO Wait for udev events after repart
  Make sure to wait for the event queue to become empty after
  the creation of the write partition. When kiwi calls the
  code to create the write partition this emits new udev events.
  It's important to wait for the event queue to become empty
  to avoid a potential regression on the use of the device nodes.
  In the processing of the events it can happen that a device
  gets removed and re-added. If we don't want for udev
  to process the entire queue it can happen that the
  wrong block device is used. This wrong selection is only
  possible because the way how hybrid ISOs are designed exposes
  both, the disk and the partition for the root device with
  the same label. This Fixes bsc#1213595</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1712232000">- Set default output console to gfxterm for grub
  If no console setting is done in the image description for grub
  the default output console is set to: gfxterm and the default
  input console is set to: console. This Fixes bsc#1219074</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1722427200">- Add rd.kiwi.oem.force_resize boot option
  Forces the disk resize process on an OEM disk image.
  If set, no sanity check for unpartitioned/free space
  is performed and also an eventually configured
  &lt;oem-resize-once&gt; configuration from the image description
  will not be taken into account. This Fixes bsc#1224389</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1722427201">- Do not exclude the .profile env file by default
  kiwi's initrd modules read a .profile file which gets included
  into the initrd produced at build time. To allow rebuild of a
  host-only initrd from the booted system this information should
  be present such that it is possible to re-use kiwi initrd code.
  This is related to bsc#1228118</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1722427202">- Fix kiwi-repart restrictions
  The kiwi repart dracut module reads a profile file and if it
  does not exists it dies in the initrd. However, that profile
  file is not mandatory for the main resize functionality. Thus
  this commit turns this into a warning message. In addition
  the module-setup for 90kiwi-repart makes sure to include
  the required and optional profile files.
  This Fixes bsc#1228118</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1723118400">- Update virtualenv setup
  types-pkg_resources got dropped from PyPI</changelog>
</package>
<package pkgid="28b5238048b0c08d133566a9fbb7aec1e2c941b51f7729130f38225df8ba65db" name="dracut-kiwi-oem-dump" arch="aarch64">
  <version epoch="0" ver="9.24.43" rel="150100.3.62.1"/>
  <changelog author="ms@suse.de" date="1635163200">- Bump version: 9.23.20 → 9.24.2
  This version upgrade includes several fixes:
  * Fixed secure boot fallback setup
    Make sure MokManager gets copied. The name and location of
    the mok manager is distribution specific in the same way as
    the shim loader. Thus we need to apply a similar concept
    for looking it up. This Fixes bsc#1187515
  * Allow creation of LUKS system with empty key
    To support cloud platforms better we should allow the
    creation of an initial(insecure) LUKS encrypted image
    with an empty passphrase/keyfile. This Fixes
    bsc#1187461 and bsc#1187460
  * Delete obsolete ddb.adapterType patching
    When building a vmdk image with pvscsi as adapter type, kiwi
    implicitly changed the adapter_type from pvscsi to lsilogic
    because qemu only knows lsilogic. At the end kiwi patched
    the adapter type in the descriptor of the vmdk header back
    to pvscsi. That patching seems to be wrong according to
    information from users and VMware support. This commit
    deletes the descriptor patching and only leaves the pvscsi
    setting in the guest configuration(vmx).
    This Fixes bsc#1180539 and Fixes #1847
  * Make dracut version check more robust
    The check_dracut_module_versions_compatible_to_kiwi() runtime
    check calls the package manager from the host and reads the
    package database from the image root. Doing this requires
    the package database in the image to be compatible with the
    package manager on the host. However this cannot be guarenteed
    and it is more robust to chroot into the image root and call
    the package manager from there. However, this change also comes
    with the cost that it's required to have a package manager
    available in the image root tree. Therefore along with the
    chroot based call, eventual exceptions from the call are now
    catched and leads to a debug message in the log file but will
    not lead the runtime check to fail. I consider the cases
    without a package database inside of the image to be less
    critical than the incompatibility issue between the host
    tooling and the package database in the image.
    This Fixes bsc#1185937
  * Fixed setup of repository architecture
    Unfortunately the architecture reported by uname is not
    necessarily the same name as used in the repository metadata.
    Therefore it was not a good idea to set the architecture
    and manage the name via a mapping table. It also has turned
    out that repo arch names are distro specific which causes
    more complexity on an eventual mapping table. In the end
    this commit changes the way how the repository architecture
    is setup in a way that we only set the architecture if
    a name was explicitly specified such that the user keeps
    full control over it without any mapping magic included
    This Fixes bsc#1185287
  * Do not apply default subcommand for derivate containers
    This commit does not apply the default subcommand for derivate
    containers. Fixes bsc#1184823
  * Added openssl to the core requires
    openssl is used in kiwi to construct a password hash
    if the plaintext password feature for user settings
    is used. This Fixes bsc#1184128</changelog>
  <changelog author="dcassany@suse.com" date="1643630400">- Bump version: 9.24.15 → 9.24.16
  This version upgrade includes several fixes:
  * Fixed regression in compression detection
    The change from 282529de8f612dee32d54ee868c2365dcd829220
    Introduced a bad regression. The assumption was made that the
    xz tool could be used to detect if a file is compressed or not.
    However, this requires the file to be locally present. In the
    scope of the method call is_compressed() and within a remote
    deployment e.g PXE this is not the case. Therefore the former
    way to "detect" the compression according to the .xz postfix
    of the source filename was restored. In addition the function
    name was changed to is_xz_compressed() because that's what the
    method can do and not more. This Fixes #2015
    Fixes a regression in the scope of bsc#1192975 (#c16)
  * index.rst: Change title (bsc#1189294#c2)
  * 'KIWI NG 9: KIWI NG Documentation' -&gt; 'Building Linux System Appliances with KIWI Next Generation (KIWI NG &lt;VERSION&gt;)
  * suggested in bsc#1189294#c2 for more clarity
  * change has been discussed with and approved by main author (Marcus S.)
  * Care for different snapper template locations
    snapper recently changed their config template location
    from etc/ to usr/. This commit handles the two locations
    and Fixes bsc#1192940
  * Do not force dracut into a compression setting
    So far we called dracut with --xz which forces the initrd
    to be xz compressed. There are other compression formats
    used by the distributions and they might differe from xz.
    The selection for a compression tool is done by a dist
    configuration in dracut.conf.d which is provided by the
    distributions as they see fit. For us this means not
    forcing dracut into a specific compression setting allows
    to make use of the distro provided setting and also
    allows to change/override this setting by an overlay
    file. This Fixes bsc#1192975</changelog>
  <changelog author="dcassany@suse.com" date="1643630401">- Ensure backward compatibility on deprecated methods
  This commit ensures backward compatibility for deprecated
  config bash script utilities.
  Fixes bsc#1195229
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="fvogt@suse.de" date="1646222400">- Don't exit the script on deprecated function use (bsc#1196644)
  The "exit 0" there stops processing of the calling script with a success exit
  code, which leads to incomplete and broken images.</changelog>
  <changelog author="dcassany@suse.com" date="1646222401">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
</package>
<package pkgid="d6f1b5b59d7875ef5a189570fb939dff12466d6e078db632f9bf060fe745a9db" name="dracut-kiwi-oem-dump" arch="s390x">
  <version epoch="0" ver="9.24.43" rel="150100.3.62.1"/>
  <changelog author="ms@suse.de" date="1635163200">- Bump version: 9.23.20 → 9.24.2
  This version upgrade includes several fixes:
  * Fixed secure boot fallback setup
    Make sure MokManager gets copied. The name and location of
    the mok manager is distribution specific in the same way as
    the shim loader. Thus we need to apply a similar concept
    for looking it up. This Fixes bsc#1187515
  * Allow creation of LUKS system with empty key
    To support cloud platforms better we should allow the
    creation of an initial(insecure) LUKS encrypted image
    with an empty passphrase/keyfile. This Fixes
    bsc#1187461 and bsc#1187460
  * Delete obsolete ddb.adapterType patching
    When building a vmdk image with pvscsi as adapter type, kiwi
    implicitly changed the adapter_type from pvscsi to lsilogic
    because qemu only knows lsilogic. At the end kiwi patched
    the adapter type in the descriptor of the vmdk header back
    to pvscsi. That patching seems to be wrong according to
    information from users and VMware support. This commit
    deletes the descriptor patching and only leaves the pvscsi
    setting in the guest configuration(vmx).
    This Fixes bsc#1180539 and Fixes #1847
  * Make dracut version check more robust
    The check_dracut_module_versions_compatible_to_kiwi() runtime
    check calls the package manager from the host and reads the
    package database from the image root. Doing this requires
    the package database in the image to be compatible with the
    package manager on the host. However this cannot be guarenteed
    and it is more robust to chroot into the image root and call
    the package manager from there. However, this change also comes
    with the cost that it's required to have a package manager
    available in the image root tree. Therefore along with the
    chroot based call, eventual exceptions from the call are now
    catched and leads to a debug message in the log file but will
    not lead the runtime check to fail. I consider the cases
    without a package database inside of the image to be less
    critical than the incompatibility issue between the host
    tooling and the package database in the image.
    This Fixes bsc#1185937
  * Fixed setup of repository architecture
    Unfortunately the architecture reported by uname is not
    necessarily the same name as used in the repository metadata.
    Therefore it was not a good idea to set the architecture
    and manage the name via a mapping table. It also has turned
    out that repo arch names are distro specific which causes
    more complexity on an eventual mapping table. In the end
    this commit changes the way how the repository architecture
    is setup in a way that we only set the architecture if
    a name was explicitly specified such that the user keeps
    full control over it without any mapping magic included
    This Fixes bsc#1185287
  * Do not apply default subcommand for derivate containers
    This commit does not apply the default subcommand for derivate
    containers. Fixes bsc#1184823
  * Added openssl to the core requires
    openssl is used in kiwi to construct a password hash
    if the plaintext password feature for user settings
    is used. This Fixes bsc#1184128</changelog>
  <changelog author="dcassany@suse.com" date="1643630400">- Bump version: 9.24.15 → 9.24.16
  This version upgrade includes several fixes:
  * Fixed regression in compression detection
    The change from 282529de8f612dee32d54ee868c2365dcd829220
    Introduced a bad regression. The assumption was made that the
    xz tool could be used to detect if a file is compressed or not.
    However, this requires the file to be locally present. In the
    scope of the method call is_compressed() and within a remote
    deployment e.g PXE this is not the case. Therefore the former
    way to "detect" the compression according to the .xz postfix
    of the source filename was restored. In addition the function
    name was changed to is_xz_compressed() because that's what the
    method can do and not more. This Fixes #2015
    Fixes a regression in the scope of bsc#1192975 (#c16)
  * index.rst: Change title (bsc#1189294#c2)
  * 'KIWI NG 9: KIWI NG Documentation' -&gt; 'Building Linux System Appliances with KIWI Next Generation (KIWI NG &lt;VERSION&gt;)
  * suggested in bsc#1189294#c2 for more clarity
  * change has been discussed with and approved by main author (Marcus S.)
  * Care for different snapper template locations
    snapper recently changed their config template location
    from etc/ to usr/. This commit handles the two locations
    and Fixes bsc#1192940
  * Do not force dracut into a compression setting
    So far we called dracut with --xz which forces the initrd
    to be xz compressed. There are other compression formats
    used by the distributions and they might differe from xz.
    The selection for a compression tool is done by a dist
    configuration in dracut.conf.d which is provided by the
    distributions as they see fit. For us this means not
    forcing dracut into a specific compression setting allows
    to make use of the distro provided setting and also
    allows to change/override this setting by an overlay
    file. This Fixes bsc#1192975</changelog>
  <changelog author="dcassany@suse.com" date="1643630401">- Ensure backward compatibility on deprecated methods
  This commit ensures backward compatibility for deprecated
  config bash script utilities.
  Fixes bsc#1195229
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="fvogt@suse.de" date="1646222400">- Don't exit the script on deprecated function use (bsc#1196644)
  The "exit 0" there stops processing of the calling script with a success exit
  code, which leads to incomplete and broken images.</changelog>
  <changelog author="dcassany@suse.com" date="1646222401">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
</package>
<package pkgid="0a8678c6ec501b7d540ad111c944046e1aea063dc1183c2a87aab6e191e519fa" name="dracut-kiwi-oem-dump" arch="x86_64">
  <version epoch="0" ver="9.24.43" rel="150100.3.62.1"/>
  <changelog author="ms@suse.de" date="1635163200">- Bump version: 9.23.20 → 9.24.2
  This version upgrade includes several fixes:
  * Fixed secure boot fallback setup
    Make sure MokManager gets copied. The name and location of
    the mok manager is distribution specific in the same way as
    the shim loader. Thus we need to apply a similar concept
    for looking it up. This Fixes bsc#1187515
  * Allow creation of LUKS system with empty key
    To support cloud platforms better we should allow the
    creation of an initial(insecure) LUKS encrypted image
    with an empty passphrase/keyfile. This Fixes
    bsc#1187461 and bsc#1187460
  * Delete obsolete ddb.adapterType patching
    When building a vmdk image with pvscsi as adapter type, kiwi
    implicitly changed the adapter_type from pvscsi to lsilogic
    because qemu only knows lsilogic. At the end kiwi patched
    the adapter type in the descriptor of the vmdk header back
    to pvscsi. That patching seems to be wrong according to
    information from users and VMware support. This commit
    deletes the descriptor patching and only leaves the pvscsi
    setting in the guest configuration(vmx).
    This Fixes bsc#1180539 and Fixes #1847
  * Make dracut version check more robust
    The check_dracut_module_versions_compatible_to_kiwi() runtime
    check calls the package manager from the host and reads the
    package database from the image root. Doing this requires
    the package database in the image to be compatible with the
    package manager on the host. However this cannot be guarenteed
    and it is more robust to chroot into the image root and call
    the package manager from there. However, this change also comes
    with the cost that it's required to have a package manager
    available in the image root tree. Therefore along with the
    chroot based call, eventual exceptions from the call are now
    catched and leads to a debug message in the log file but will
    not lead the runtime check to fail. I consider the cases
    without a package database inside of the image to be less
    critical than the incompatibility issue between the host
    tooling and the package database in the image.
    This Fixes bsc#1185937
  * Fixed setup of repository architecture
    Unfortunately the architecture reported by uname is not
    necessarily the same name as used in the repository metadata.
    Therefore it was not a good idea to set the architecture
    and manage the name via a mapping table. It also has turned
    out that repo arch names are distro specific which causes
    more complexity on an eventual mapping table. In the end
    this commit changes the way how the repository architecture
    is setup in a way that we only set the architecture if
    a name was explicitly specified such that the user keeps
    full control over it without any mapping magic included
    This Fixes bsc#1185287
  * Do not apply default subcommand for derivate containers
    This commit does not apply the default subcommand for derivate
    containers. Fixes bsc#1184823
  * Added openssl to the core requires
    openssl is used in kiwi to construct a password hash
    if the plaintext password feature for user settings
    is used. This Fixes bsc#1184128</changelog>
  <changelog author="dcassany@suse.com" date="1643630400">- Bump version: 9.24.15 → 9.24.16
  This version upgrade includes several fixes:
  * Fixed regression in compression detection
    The change from 282529de8f612dee32d54ee868c2365dcd829220
    Introduced a bad regression. The assumption was made that the
    xz tool could be used to detect if a file is compressed or not.
    However, this requires the file to be locally present. In the
    scope of the method call is_compressed() and within a remote
    deployment e.g PXE this is not the case. Therefore the former
    way to "detect" the compression according to the .xz postfix
    of the source filename was restored. In addition the function
    name was changed to is_xz_compressed() because that's what the
    method can do and not more. This Fixes #2015
    Fixes a regression in the scope of bsc#1192975 (#c16)
  * index.rst: Change title (bsc#1189294#c2)
  * 'KIWI NG 9: KIWI NG Documentation' -&gt; 'Building Linux System Appliances with KIWI Next Generation (KIWI NG &lt;VERSION&gt;)
  * suggested in bsc#1189294#c2 for more clarity
  * change has been discussed with and approved by main author (Marcus S.)
  * Care for different snapper template locations
    snapper recently changed their config template location
    from etc/ to usr/. This commit handles the two locations
    and Fixes bsc#1192940
  * Do not force dracut into a compression setting
    So far we called dracut with --xz which forces the initrd
    to be xz compressed. There are other compression formats
    used by the distributions and they might differe from xz.
    The selection for a compression tool is done by a dist
    configuration in dracut.conf.d which is provided by the
    distributions as they see fit. For us this means not
    forcing dracut into a specific compression setting allows
    to make use of the distro provided setting and also
    allows to change/override this setting by an overlay
    file. This Fixes bsc#1192975</changelog>
  <changelog author="dcassany@suse.com" date="1643630401">- Ensure backward compatibility on deprecated methods
  This commit ensures backward compatibility for deprecated
  config bash script utilities.
  Fixes bsc#1195229
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="fvogt@suse.de" date="1646222400">- Don't exit the script on deprecated function use (bsc#1196644)
  The "exit 0" there stops processing of the calling script with a success exit
  code, which leads to incomplete and broken images.</changelog>
  <changelog author="dcassany@suse.com" date="1646222401">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
</package>
<package pkgid="c702a0eaa67082339d84e1d0c2b3471e37d8d0710e64522948ea2f65c8af953f" name="dracut-kiwi-oem-dump" arch="aarch64">
  <version epoch="0" ver="9.24.43" rel="150100.3.65.1"/>
  <changelog author="dcassany@suse.com" date="1646222400">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
</package>
<package pkgid="ddef90c7d5171e00981383f48bb1339b26c04ac22932eecab56c50e169b10941" name="dracut-kiwi-oem-dump" arch="s390x">
  <version epoch="0" ver="9.24.43" rel="150100.3.65.1"/>
  <changelog author="dcassany@suse.com" date="1646222400">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
</package>
<package pkgid="7b703919efd67f97f4f4e607b829ce7421c508b4809f27ceba64c7e283cf2877" name="dracut-kiwi-oem-dump" arch="x86_64">
  <version epoch="0" ver="9.24.43" rel="150100.3.65.1"/>
  <changelog author="dcassany@suse.com" date="1646222400">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
</package>
<package pkgid="9520018872d831a84b50f567a14c40f3e998971e33c30845d6358e2e025c6052" name="dracut-kiwi-oem-dump" arch="aarch64">
  <version epoch="0" ver="9.24.43" rel="150100.3.68.1"/>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
</package>
<package pkgid="6b47d70c834a08bb391531faa0e6cd2afefb4ccb6b0e387672f3a3e08fd47e91" name="dracut-kiwi-oem-dump" arch="s390x">
  <version epoch="0" ver="9.24.43" rel="150100.3.68.1"/>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
</package>
<package pkgid="bdc16bdd0bcaffd99935a88ddd9506ee30cb960751469ca3df286b75f8c3d324" name="dracut-kiwi-oem-dump" arch="x86_64">
  <version epoch="0" ver="9.24.43" rel="150100.3.68.1"/>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
</package>
<package pkgid="cf8230ca507eb84cc5c1b6f57773e187aea9395dcbfeb6b9db1c3466698bc3fc" name="dracut-kiwi-oem-dump" arch="aarch64">
  <version epoch="0" ver="9.24.43" rel="150100.3.71.1"/>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
</package>
<package pkgid="921a2ec9c008d54558d7e19728ea565c94b7f9641c7e483105e670074b81e233" name="dracut-kiwi-oem-dump" arch="s390x">
  <version epoch="0" ver="9.24.43" rel="150100.3.71.1"/>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
</package>
<package pkgid="17059c1eb73ae15c3c3ed937f33c091c77912ce417a710214067d67a6730ad90" name="dracut-kiwi-oem-dump" arch="x86_64">
  <version epoch="0" ver="9.24.43" rel="150100.3.71.1"/>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
</package>
<package pkgid="31b69f245dc35bced387e209bbca8e3af4394d3b8adb0931e8fa97c3644c9bd7" name="dracut-kiwi-oem-dump" arch="aarch64">
  <version epoch="0" ver="9.24.43" rel="150100.3.76.1"/>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1711368000">- Live ISO Wait for udev events after repart
  Make sure to wait for the event queue to become empty after
  the creation of the write partition. When kiwi calls the
  code to create the write partition this emits new udev events.
  It's important to wait for the event queue to become empty
  to avoid a potential regression on the use of the device nodes.
  In the processing of the events it can happen that a device
  gets removed and re-added. If we don't want for udev
  to process the entire queue it can happen that the
  wrong block device is used. This wrong selection is only
  possible because the way how hybrid ISOs are designed exposes
  both, the disk and the partition for the root device with
  the same label. This Fixes bsc#1213595</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1712232000">- Set default output console to gfxterm for grub
  If no console setting is done in the image description for grub
  the default output console is set to: gfxterm and the default
  input console is set to: console. This Fixes bsc#1219074</changelog>
</package>
<package pkgid="733e2adea7b23f894cf190bccc9b806dd2d5b98ee5d6fca03ab72f5a692921da" name="dracut-kiwi-oem-dump" arch="s390x">
  <version epoch="0" ver="9.24.43" rel="150100.3.76.1"/>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1711368000">- Live ISO Wait for udev events after repart
  Make sure to wait for the event queue to become empty after
  the creation of the write partition. When kiwi calls the
  code to create the write partition this emits new udev events.
  It's important to wait for the event queue to become empty
  to avoid a potential regression on the use of the device nodes.
  In the processing of the events it can happen that a device
  gets removed and re-added. If we don't want for udev
  to process the entire queue it can happen that the
  wrong block device is used. This wrong selection is only
  possible because the way how hybrid ISOs are designed exposes
  both, the disk and the partition for the root device with
  the same label. This Fixes bsc#1213595</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1712232000">- Set default output console to gfxterm for grub
  If no console setting is done in the image description for grub
  the default output console is set to: gfxterm and the default
  input console is set to: console. This Fixes bsc#1219074</changelog>
</package>
<package pkgid="6667b1cfce2c0c59f817b2f6a205ec19c0c0112ff1dd078df1a9164dba71f552" name="dracut-kiwi-oem-dump" arch="x86_64">
  <version epoch="0" ver="9.24.43" rel="150100.3.76.1"/>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1711368000">- Live ISO Wait for udev events after repart
  Make sure to wait for the event queue to become empty after
  the creation of the write partition. When kiwi calls the
  code to create the write partition this emits new udev events.
  It's important to wait for the event queue to become empty
  to avoid a potential regression on the use of the device nodes.
  In the processing of the events it can happen that a device
  gets removed and re-added. If we don't want for udev
  to process the entire queue it can happen that the
  wrong block device is used. This wrong selection is only
  possible because the way how hybrid ISOs are designed exposes
  both, the disk and the partition for the root device with
  the same label. This Fixes bsc#1213595</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1712232000">- Set default output console to gfxterm for grub
  If no console setting is done in the image description for grub
  the default output console is set to: gfxterm and the default
  input console is set to: console. This Fixes bsc#1219074</changelog>
</package>
<package pkgid="fc81a33ef4b7f5fae432521728247b3c3cd815e843c6ece0df833b01f16629d8" name="dracut-kiwi-oem-dump" arch="aarch64">
  <version epoch="0" ver="9.24.43" rel="150100.3.81.1"/>
  <changelog author="dcassany@suse.com" date="1681300800">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1711368000">- Live ISO Wait for udev events after repart
  Make sure to wait for the event queue to become empty after
  the creation of the write partition. When kiwi calls the
  code to create the write partition this emits new udev events.
  It's important to wait for the event queue to become empty
  to avoid a potential regression on the use of the device nodes.
  In the processing of the events it can happen that a device
  gets removed and re-added. If we don't want for udev
  to process the entire queue it can happen that the
  wrong block device is used. This wrong selection is only
  possible because the way how hybrid ISOs are designed exposes
  both, the disk and the partition for the root device with
  the same label. This Fixes bsc#1213595</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1712232000">- Set default output console to gfxterm for grub
  If no console setting is done in the image description for grub
  the default output console is set to: gfxterm and the default
  input console is set to: console. This Fixes bsc#1219074</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1722427200">- Add rd.kiwi.oem.force_resize boot option
  Forces the disk resize process on an OEM disk image.
  If set, no sanity check for unpartitioned/free space
  is performed and also an eventually configured
  &lt;oem-resize-once&gt; configuration from the image description
  will not be taken into account. This Fixes bsc#1224389</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1722427201">- Do not exclude the .profile env file by default
  kiwi's initrd modules read a .profile file which gets included
  into the initrd produced at build time. To allow rebuild of a
  host-only initrd from the booted system this information should
  be present such that it is possible to re-use kiwi initrd code.
  This is related to bsc#1228118</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1722427202">- Fix kiwi-repart restrictions
  The kiwi repart dracut module reads a profile file and if it
  does not exists it dies in the initrd. However, that profile
  file is not mandatory for the main resize functionality. Thus
  this commit turns this into a warning message. In addition
  the module-setup for 90kiwi-repart makes sure to include
  the required and optional profile files.
  This Fixes bsc#1228118</changelog>
</package>
<package pkgid="9c719205a66ad4f9f6f1960dbdf892f2820ed89406bcf87109b8015509842c19" name="dracut-kiwi-oem-dump" arch="s390x">
  <version epoch="0" ver="9.24.43" rel="150100.3.81.1"/>
  <changelog author="dcassany@suse.com" date="1681300800">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1711368000">- Live ISO Wait for udev events after repart
  Make sure to wait for the event queue to become empty after
  the creation of the write partition. When kiwi calls the
  code to create the write partition this emits new udev events.
  It's important to wait for the event queue to become empty
  to avoid a potential regression on the use of the device nodes.
  In the processing of the events it can happen that a device
  gets removed and re-added. If we don't want for udev
  to process the entire queue it can happen that the
  wrong block device is used. This wrong selection is only
  possible because the way how hybrid ISOs are designed exposes
  both, the disk and the partition for the root device with
  the same label. This Fixes bsc#1213595</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1712232000">- Set default output console to gfxterm for grub
  If no console setting is done in the image description for grub
  the default output console is set to: gfxterm and the default
  input console is set to: console. This Fixes bsc#1219074</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1722427200">- Add rd.kiwi.oem.force_resize boot option
  Forces the disk resize process on an OEM disk image.
  If set, no sanity check for unpartitioned/free space
  is performed and also an eventually configured
  &lt;oem-resize-once&gt; configuration from the image description
  will not be taken into account. This Fixes bsc#1224389</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1722427201">- Do not exclude the .profile env file by default
  kiwi's initrd modules read a .profile file which gets included
  into the initrd produced at build time. To allow rebuild of a
  host-only initrd from the booted system this information should
  be present such that it is possible to re-use kiwi initrd code.
  This is related to bsc#1228118</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1722427202">- Fix kiwi-repart restrictions
  The kiwi repart dracut module reads a profile file and if it
  does not exists it dies in the initrd. However, that profile
  file is not mandatory for the main resize functionality. Thus
  this commit turns this into a warning message. In addition
  the module-setup for 90kiwi-repart makes sure to include
  the required and optional profile files.
  This Fixes bsc#1228118</changelog>
</package>
<package pkgid="16e35629d25249ecef97b51f8a95d1d444c00eadaf6b6c6a21db74004e89b1fc" name="dracut-kiwi-oem-dump" arch="x86_64">
  <version epoch="0" ver="9.24.43" rel="150100.3.81.1"/>
  <changelog author="dcassany@suse.com" date="1681300800">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1711368000">- Live ISO Wait for udev events after repart
  Make sure to wait for the event queue to become empty after
  the creation of the write partition. When kiwi calls the
  code to create the write partition this emits new udev events.
  It's important to wait for the event queue to become empty
  to avoid a potential regression on the use of the device nodes.
  In the processing of the events it can happen that a device
  gets removed and re-added. If we don't want for udev
  to process the entire queue it can happen that the
  wrong block device is used. This wrong selection is only
  possible because the way how hybrid ISOs are designed exposes
  both, the disk and the partition for the root device with
  the same label. This Fixes bsc#1213595</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1712232000">- Set default output console to gfxterm for grub
  If no console setting is done in the image description for grub
  the default output console is set to: gfxterm and the default
  input console is set to: console. This Fixes bsc#1219074</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1722427200">- Add rd.kiwi.oem.force_resize boot option
  Forces the disk resize process on an OEM disk image.
  If set, no sanity check for unpartitioned/free space
  is performed and also an eventually configured
  &lt;oem-resize-once&gt; configuration from the image description
  will not be taken into account. This Fixes bsc#1224389</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1722427201">- Do not exclude the .profile env file by default
  kiwi's initrd modules read a .profile file which gets included
  into the initrd produced at build time. To allow rebuild of a
  host-only initrd from the booted system this information should
  be present such that it is possible to re-use kiwi initrd code.
  This is related to bsc#1228118</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1722427202">- Fix kiwi-repart restrictions
  The kiwi repart dracut module reads a profile file and if it
  does not exists it dies in the initrd. However, that profile
  file is not mandatory for the main resize functionality. Thus
  this commit turns this into a warning message. In addition
  the module-setup for 90kiwi-repart makes sure to include
  the required and optional profile files.
  This Fixes bsc#1228118</changelog>
</package>
<package pkgid="8fed2e3940c2b5a1fdc7343241f3e7439678b3e531d09e41a08f92c5d5360c21" name="dracut-kiwi-oem-dump" arch="aarch64">
  <version epoch="0" ver="9.24.43" rel="150100.3.84.1"/>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704801600">- Fixed regression in GRUB_SERIAL_COMMAND setup
  The condition to write the serial line setup was broken.
  This commit fixes it. Related to Issue #2419 and
  Fixes bsc#1228808</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1711368000">- Live ISO Wait for udev events after repart
  Make sure to wait for the event queue to become empty after
  the creation of the write partition. When kiwi calls the
  code to create the write partition this emits new udev events.
  It's important to wait for the event queue to become empty
  to avoid a potential regression on the use of the device nodes.
  In the processing of the events it can happen that a device
  gets removed and re-added. If we don't want for udev
  to process the entire queue it can happen that the
  wrong block device is used. This wrong selection is only
  possible because the way how hybrid ISOs are designed exposes
  both, the disk and the partition for the root device with
  the same label. This Fixes bsc#1213595</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1712232000">- Set default output console to gfxterm for grub
  If no console setting is done in the image description for grub
  the default output console is set to: gfxterm and the default
  input console is set to: console. This Fixes bsc#1219074</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1722427200">- Add rd.kiwi.oem.force_resize boot option
  Forces the disk resize process on an OEM disk image.
  If set, no sanity check for unpartitioned/free space
  is performed and also an eventually configured
  &lt;oem-resize-once&gt; configuration from the image description
  will not be taken into account. This Fixes bsc#1224389</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1722427201">- Do not exclude the .profile env file by default
  kiwi's initrd modules read a .profile file which gets included
  into the initrd produced at build time. To allow rebuild of a
  host-only initrd from the booted system this information should
  be present such that it is possible to re-use kiwi initrd code.
  This is related to bsc#1228118</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1722427202">- Fix kiwi-repart restrictions
  The kiwi repart dracut module reads a profile file and if it
  does not exists it dies in the initrd. However, that profile
  file is not mandatory for the main resize functionality. Thus
  this commit turns this into a warning message. In addition
  the module-setup for 90kiwi-repart makes sure to include
  the required and optional profile files.
  This Fixes bsc#1228118</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1723118400">- Update virtualenv setup
  types-pkg_resources got dropped from PyPI</changelog>
</package>
<package pkgid="1b8914a0f6de239a9dffa00d3f559dd0534da0ae8e08d6653d46870831c15e13" name="dracut-kiwi-oem-dump" arch="s390x">
  <version epoch="0" ver="9.24.43" rel="150100.3.84.1"/>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704801600">- Fixed regression in GRUB_SERIAL_COMMAND setup
  The condition to write the serial line setup was broken.
  This commit fixes it. Related to Issue #2419 and
  Fixes bsc#1228808</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1711368000">- Live ISO Wait for udev events after repart
  Make sure to wait for the event queue to become empty after
  the creation of the write partition. When kiwi calls the
  code to create the write partition this emits new udev events.
  It's important to wait for the event queue to become empty
  to avoid a potential regression on the use of the device nodes.
  In the processing of the events it can happen that a device
  gets removed and re-added. If we don't want for udev
  to process the entire queue it can happen that the
  wrong block device is used. This wrong selection is only
  possible because the way how hybrid ISOs are designed exposes
  both, the disk and the partition for the root device with
  the same label. This Fixes bsc#1213595</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1712232000">- Set default output console to gfxterm for grub
  If no console setting is done in the image description for grub
  the default output console is set to: gfxterm and the default
  input console is set to: console. This Fixes bsc#1219074</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1722427200">- Add rd.kiwi.oem.force_resize boot option
  Forces the disk resize process on an OEM disk image.
  If set, no sanity check for unpartitioned/free space
  is performed and also an eventually configured
  &lt;oem-resize-once&gt; configuration from the image description
  will not be taken into account. This Fixes bsc#1224389</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1722427201">- Do not exclude the .profile env file by default
  kiwi's initrd modules read a .profile file which gets included
  into the initrd produced at build time. To allow rebuild of a
  host-only initrd from the booted system this information should
  be present such that it is possible to re-use kiwi initrd code.
  This is related to bsc#1228118</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1722427202">- Fix kiwi-repart restrictions
  The kiwi repart dracut module reads a profile file and if it
  does not exists it dies in the initrd. However, that profile
  file is not mandatory for the main resize functionality. Thus
  this commit turns this into a warning message. In addition
  the module-setup for 90kiwi-repart makes sure to include
  the required and optional profile files.
  This Fixes bsc#1228118</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1723118400">- Update virtualenv setup
  types-pkg_resources got dropped from PyPI</changelog>
</package>
<package pkgid="47189cd60eb308384d456f7a89babd97f110fdb3a83140bb1bfed6d961139184" name="dracut-kiwi-oem-dump" arch="x86_64">
  <version epoch="0" ver="9.24.43" rel="150100.3.84.1"/>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704801600">- Fixed regression in GRUB_SERIAL_COMMAND setup
  The condition to write the serial line setup was broken.
  This commit fixes it. Related to Issue #2419 and
  Fixes bsc#1228808</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1711368000">- Live ISO Wait for udev events after repart
  Make sure to wait for the event queue to become empty after
  the creation of the write partition. When kiwi calls the
  code to create the write partition this emits new udev events.
  It's important to wait for the event queue to become empty
  to avoid a potential regression on the use of the device nodes.
  In the processing of the events it can happen that a device
  gets removed and re-added. If we don't want for udev
  to process the entire queue it can happen that the
  wrong block device is used. This wrong selection is only
  possible because the way how hybrid ISOs are designed exposes
  both, the disk and the partition for the root device with
  the same label. This Fixes bsc#1213595</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1712232000">- Set default output console to gfxterm for grub
  If no console setting is done in the image description for grub
  the default output console is set to: gfxterm and the default
  input console is set to: console. This Fixes bsc#1219074</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1722427200">- Add rd.kiwi.oem.force_resize boot option
  Forces the disk resize process on an OEM disk image.
  If set, no sanity check for unpartitioned/free space
  is performed and also an eventually configured
  &lt;oem-resize-once&gt; configuration from the image description
  will not be taken into account. This Fixes bsc#1224389</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1722427201">- Do not exclude the .profile env file by default
  kiwi's initrd modules read a .profile file which gets included
  into the initrd produced at build time. To allow rebuild of a
  host-only initrd from the booted system this information should
  be present such that it is possible to re-use kiwi initrd code.
  This is related to bsc#1228118</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1722427202">- Fix kiwi-repart restrictions
  The kiwi repart dracut module reads a profile file and if it
  does not exists it dies in the initrd. However, that profile
  file is not mandatory for the main resize functionality. Thus
  this commit turns this into a warning message. In addition
  the module-setup for 90kiwi-repart makes sure to include
  the required and optional profile files.
  This Fixes bsc#1228118</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1723118400">- Update virtualenv setup
  types-pkg_resources got dropped from PyPI</changelog>
</package>
<package pkgid="aa7740e01794215cddf495e99b217576c647dfcf394dbfe0577e49e3bc905db7" name="dracut-kiwi-oem-repart" arch="aarch64">
  <version epoch="0" ver="9.24.43" rel="150100.3.62.1"/>
  <changelog author="ms@suse.de" date="1635163200">- Bump version: 9.23.20 → 9.24.2
  This version upgrade includes several fixes:
  * Fixed secure boot fallback setup
    Make sure MokManager gets copied. The name and location of
    the mok manager is distribution specific in the same way as
    the shim loader. Thus we need to apply a similar concept
    for looking it up. This Fixes bsc#1187515
  * Allow creation of LUKS system with empty key
    To support cloud platforms better we should allow the
    creation of an initial(insecure) LUKS encrypted image
    with an empty passphrase/keyfile. This Fixes
    bsc#1187461 and bsc#1187460
  * Delete obsolete ddb.adapterType patching
    When building a vmdk image with pvscsi as adapter type, kiwi
    implicitly changed the adapter_type from pvscsi to lsilogic
    because qemu only knows lsilogic. At the end kiwi patched
    the adapter type in the descriptor of the vmdk header back
    to pvscsi. That patching seems to be wrong according to
    information from users and VMware support. This commit
    deletes the descriptor patching and only leaves the pvscsi
    setting in the guest configuration(vmx).
    This Fixes bsc#1180539 and Fixes #1847
  * Make dracut version check more robust
    The check_dracut_module_versions_compatible_to_kiwi() runtime
    check calls the package manager from the host and reads the
    package database from the image root. Doing this requires
    the package database in the image to be compatible with the
    package manager on the host. However this cannot be guarenteed
    and it is more robust to chroot into the image root and call
    the package manager from there. However, this change also comes
    with the cost that it's required to have a package manager
    available in the image root tree. Therefore along with the
    chroot based call, eventual exceptions from the call are now
    catched and leads to a debug message in the log file but will
    not lead the runtime check to fail. I consider the cases
    without a package database inside of the image to be less
    critical than the incompatibility issue between the host
    tooling and the package database in the image.
    This Fixes bsc#1185937
  * Fixed setup of repository architecture
    Unfortunately the architecture reported by uname is not
    necessarily the same name as used in the repository metadata.
    Therefore it was not a good idea to set the architecture
    and manage the name via a mapping table. It also has turned
    out that repo arch names are distro specific which causes
    more complexity on an eventual mapping table. In the end
    this commit changes the way how the repository architecture
    is setup in a way that we only set the architecture if
    a name was explicitly specified such that the user keeps
    full control over it without any mapping magic included
    This Fixes bsc#1185287
  * Do not apply default subcommand for derivate containers
    This commit does not apply the default subcommand for derivate
    containers. Fixes bsc#1184823
  * Added openssl to the core requires
    openssl is used in kiwi to construct a password hash
    if the plaintext password feature for user settings
    is used. This Fixes bsc#1184128</changelog>
  <changelog author="dcassany@suse.com" date="1643630400">- Bump version: 9.24.15 → 9.24.16
  This version upgrade includes several fixes:
  * Fixed regression in compression detection
    The change from 282529de8f612dee32d54ee868c2365dcd829220
    Introduced a bad regression. The assumption was made that the
    xz tool could be used to detect if a file is compressed or not.
    However, this requires the file to be locally present. In the
    scope of the method call is_compressed() and within a remote
    deployment e.g PXE this is not the case. Therefore the former
    way to "detect" the compression according to the .xz postfix
    of the source filename was restored. In addition the function
    name was changed to is_xz_compressed() because that's what the
    method can do and not more. This Fixes #2015
    Fixes a regression in the scope of bsc#1192975 (#c16)
  * index.rst: Change title (bsc#1189294#c2)
  * 'KIWI NG 9: KIWI NG Documentation' -&gt; 'Building Linux System Appliances with KIWI Next Generation (KIWI NG &lt;VERSION&gt;)
  * suggested in bsc#1189294#c2 for more clarity
  * change has been discussed with and approved by main author (Marcus S.)
  * Care for different snapper template locations
    snapper recently changed their config template location
    from etc/ to usr/. This commit handles the two locations
    and Fixes bsc#1192940
  * Do not force dracut into a compression setting
    So far we called dracut with --xz which forces the initrd
    to be xz compressed. There are other compression formats
    used by the distributions and they might differe from xz.
    The selection for a compression tool is done by a dist
    configuration in dracut.conf.d which is provided by the
    distributions as they see fit. For us this means not
    forcing dracut into a specific compression setting allows
    to make use of the distro provided setting and also
    allows to change/override this setting by an overlay
    file. This Fixes bsc#1192975</changelog>
  <changelog author="dcassany@suse.com" date="1643630401">- Ensure backward compatibility on deprecated methods
  This commit ensures backward compatibility for deprecated
  config bash script utilities.
  Fixes bsc#1195229
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="fvogt@suse.de" date="1646222400">- Don't exit the script on deprecated function use (bsc#1196644)
  The "exit 0" there stops processing of the calling script with a success exit
  code, which leads to incomplete and broken images.</changelog>
  <changelog author="dcassany@suse.com" date="1646222401">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
</package>
<package pkgid="03993b88d69e8bf5a7ce04ee7787e886f7163bbb0ab2efa50de1981056001553" name="dracut-kiwi-oem-repart" arch="s390x">
  <version epoch="0" ver="9.24.43" rel="150100.3.62.1"/>
  <changelog author="ms@suse.de" date="1635163200">- Bump version: 9.23.20 → 9.24.2
  This version upgrade includes several fixes:
  * Fixed secure boot fallback setup
    Make sure MokManager gets copied. The name and location of
    the mok manager is distribution specific in the same way as
    the shim loader. Thus we need to apply a similar concept
    for looking it up. This Fixes bsc#1187515
  * Allow creation of LUKS system with empty key
    To support cloud platforms better we should allow the
    creation of an initial(insecure) LUKS encrypted image
    with an empty passphrase/keyfile. This Fixes
    bsc#1187461 and bsc#1187460
  * Delete obsolete ddb.adapterType patching
    When building a vmdk image with pvscsi as adapter type, kiwi
    implicitly changed the adapter_type from pvscsi to lsilogic
    because qemu only knows lsilogic. At the end kiwi patched
    the adapter type in the descriptor of the vmdk header back
    to pvscsi. That patching seems to be wrong according to
    information from users and VMware support. This commit
    deletes the descriptor patching and only leaves the pvscsi
    setting in the guest configuration(vmx).
    This Fixes bsc#1180539 and Fixes #1847
  * Make dracut version check more robust
    The check_dracut_module_versions_compatible_to_kiwi() runtime
    check calls the package manager from the host and reads the
    package database from the image root. Doing this requires
    the package database in the image to be compatible with the
    package manager on the host. However this cannot be guarenteed
    and it is more robust to chroot into the image root and call
    the package manager from there. However, this change also comes
    with the cost that it's required to have a package manager
    available in the image root tree. Therefore along with the
    chroot based call, eventual exceptions from the call are now
    catched and leads to a debug message in the log file but will
    not lead the runtime check to fail. I consider the cases
    without a package database inside of the image to be less
    critical than the incompatibility issue between the host
    tooling and the package database in the image.
    This Fixes bsc#1185937
  * Fixed setup of repository architecture
    Unfortunately the architecture reported by uname is not
    necessarily the same name as used in the repository metadata.
    Therefore it was not a good idea to set the architecture
    and manage the name via a mapping table. It also has turned
    out that repo arch names are distro specific which causes
    more complexity on an eventual mapping table. In the end
    this commit changes the way how the repository architecture
    is setup in a way that we only set the architecture if
    a name was explicitly specified such that the user keeps
    full control over it without any mapping magic included
    This Fixes bsc#1185287
  * Do not apply default subcommand for derivate containers
    This commit does not apply the default subcommand for derivate
    containers. Fixes bsc#1184823
  * Added openssl to the core requires
    openssl is used in kiwi to construct a password hash
    if the plaintext password feature for user settings
    is used. This Fixes bsc#1184128</changelog>
  <changelog author="dcassany@suse.com" date="1643630400">- Bump version: 9.24.15 → 9.24.16
  This version upgrade includes several fixes:
  * Fixed regression in compression detection
    The change from 282529de8f612dee32d54ee868c2365dcd829220
    Introduced a bad regression. The assumption was made that the
    xz tool could be used to detect if a file is compressed or not.
    However, this requires the file to be locally present. In the
    scope of the method call is_compressed() and within a remote
    deployment e.g PXE this is not the case. Therefore the former
    way to "detect" the compression according to the .xz postfix
    of the source filename was restored. In addition the function
    name was changed to is_xz_compressed() because that's what the
    method can do and not more. This Fixes #2015
    Fixes a regression in the scope of bsc#1192975 (#c16)
  * index.rst: Change title (bsc#1189294#c2)
  * 'KIWI NG 9: KIWI NG Documentation' -&gt; 'Building Linux System Appliances with KIWI Next Generation (KIWI NG &lt;VERSION&gt;)
  * suggested in bsc#1189294#c2 for more clarity
  * change has been discussed with and approved by main author (Marcus S.)
  * Care for different snapper template locations
    snapper recently changed their config template location
    from etc/ to usr/. This commit handles the two locations
    and Fixes bsc#1192940
  * Do not force dracut into a compression setting
    So far we called dracut with --xz which forces the initrd
    to be xz compressed. There are other compression formats
    used by the distributions and they might differe from xz.
    The selection for a compression tool is done by a dist
    configuration in dracut.conf.d which is provided by the
    distributions as they see fit. For us this means not
    forcing dracut into a specific compression setting allows
    to make use of the distro provided setting and also
    allows to change/override this setting by an overlay
    file. This Fixes bsc#1192975</changelog>
  <changelog author="dcassany@suse.com" date="1643630401">- Ensure backward compatibility on deprecated methods
  This commit ensures backward compatibility for deprecated
  config bash script utilities.
  Fixes bsc#1195229
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="fvogt@suse.de" date="1646222400">- Don't exit the script on deprecated function use (bsc#1196644)
  The "exit 0" there stops processing of the calling script with a success exit
  code, which leads to incomplete and broken images.</changelog>
  <changelog author="dcassany@suse.com" date="1646222401">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
</package>
<package pkgid="a443c1297f99be70a036cf7d64964ee6c9ffb773fe05032ef7328646eff70a5b" name="dracut-kiwi-oem-repart" arch="x86_64">
  <version epoch="0" ver="9.24.43" rel="150100.3.62.1"/>
  <changelog author="ms@suse.de" date="1635163200">- Bump version: 9.23.20 → 9.24.2
  This version upgrade includes several fixes:
  * Fixed secure boot fallback setup
    Make sure MokManager gets copied. The name and location of
    the mok manager is distribution specific in the same way as
    the shim loader. Thus we need to apply a similar concept
    for looking it up. This Fixes bsc#1187515
  * Allow creation of LUKS system with empty key
    To support cloud platforms better we should allow the
    creation of an initial(insecure) LUKS encrypted image
    with an empty passphrase/keyfile. This Fixes
    bsc#1187461 and bsc#1187460
  * Delete obsolete ddb.adapterType patching
    When building a vmdk image with pvscsi as adapter type, kiwi
    implicitly changed the adapter_type from pvscsi to lsilogic
    because qemu only knows lsilogic. At the end kiwi patched
    the adapter type in the descriptor of the vmdk header back
    to pvscsi. That patching seems to be wrong according to
    information from users and VMware support. This commit
    deletes the descriptor patching and only leaves the pvscsi
    setting in the guest configuration(vmx).
    This Fixes bsc#1180539 and Fixes #1847
  * Make dracut version check more robust
    The check_dracut_module_versions_compatible_to_kiwi() runtime
    check calls the package manager from the host and reads the
    package database from the image root. Doing this requires
    the package database in the image to be compatible with the
    package manager on the host. However this cannot be guarenteed
    and it is more robust to chroot into the image root and call
    the package manager from there. However, this change also comes
    with the cost that it's required to have a package manager
    available in the image root tree. Therefore along with the
    chroot based call, eventual exceptions from the call are now
    catched and leads to a debug message in the log file but will
    not lead the runtime check to fail. I consider the cases
    without a package database inside of the image to be less
    critical than the incompatibility issue between the host
    tooling and the package database in the image.
    This Fixes bsc#1185937
  * Fixed setup of repository architecture
    Unfortunately the architecture reported by uname is not
    necessarily the same name as used in the repository metadata.
    Therefore it was not a good idea to set the architecture
    and manage the name via a mapping table. It also has turned
    out that repo arch names are distro specific which causes
    more complexity on an eventual mapping table. In the end
    this commit changes the way how the repository architecture
    is setup in a way that we only set the architecture if
    a name was explicitly specified such that the user keeps
    full control over it without any mapping magic included
    This Fixes bsc#1185287
  * Do not apply default subcommand for derivate containers
    This commit does not apply the default subcommand for derivate
    containers. Fixes bsc#1184823
  * Added openssl to the core requires
    openssl is used in kiwi to construct a password hash
    if the plaintext password feature for user settings
    is used. This Fixes bsc#1184128</changelog>
  <changelog author="dcassany@suse.com" date="1643630400">- Bump version: 9.24.15 → 9.24.16
  This version upgrade includes several fixes:
  * Fixed regression in compression detection
    The change from 282529de8f612dee32d54ee868c2365dcd829220
    Introduced a bad regression. The assumption was made that the
    xz tool could be used to detect if a file is compressed or not.
    However, this requires the file to be locally present. In the
    scope of the method call is_compressed() and within a remote
    deployment e.g PXE this is not the case. Therefore the former
    way to "detect" the compression according to the .xz postfix
    of the source filename was restored. In addition the function
    name was changed to is_xz_compressed() because that's what the
    method can do and not more. This Fixes #2015
    Fixes a regression in the scope of bsc#1192975 (#c16)
  * index.rst: Change title (bsc#1189294#c2)
  * 'KIWI NG 9: KIWI NG Documentation' -&gt; 'Building Linux System Appliances with KIWI Next Generation (KIWI NG &lt;VERSION&gt;)
  * suggested in bsc#1189294#c2 for more clarity
  * change has been discussed with and approved by main author (Marcus S.)
  * Care for different snapper template locations
    snapper recently changed their config template location
    from etc/ to usr/. This commit handles the two locations
    and Fixes bsc#1192940
  * Do not force dracut into a compression setting
    So far we called dracut with --xz which forces the initrd
    to be xz compressed. There are other compression formats
    used by the distributions and they might differe from xz.
    The selection for a compression tool is done by a dist
    configuration in dracut.conf.d which is provided by the
    distributions as they see fit. For us this means not
    forcing dracut into a specific compression setting allows
    to make use of the distro provided setting and also
    allows to change/override this setting by an overlay
    file. This Fixes bsc#1192975</changelog>
  <changelog author="dcassany@suse.com" date="1643630401">- Ensure backward compatibility on deprecated methods
  This commit ensures backward compatibility for deprecated
  config bash script utilities.
  Fixes bsc#1195229
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="fvogt@suse.de" date="1646222400">- Don't exit the script on deprecated function use (bsc#1196644)
  The "exit 0" there stops processing of the calling script with a success exit
  code, which leads to incomplete and broken images.</changelog>
  <changelog author="dcassany@suse.com" date="1646222401">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
</package>
<package pkgid="0b23060d74abfa7ed82d1514c9734500b524dab6a88e66b03f665b4471995712" name="dracut-kiwi-oem-repart" arch="aarch64">
  <version epoch="0" ver="9.24.43" rel="150100.3.65.1"/>
  <changelog author="dcassany@suse.com" date="1646222400">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
</package>
<package pkgid="3251dbc2b954fc4dc6951f33175e7575634d7cd9fb162f815b1848162a164b05" name="dracut-kiwi-oem-repart" arch="s390x">
  <version epoch="0" ver="9.24.43" rel="150100.3.65.1"/>
  <changelog author="dcassany@suse.com" date="1646222400">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
</package>
<package pkgid="483987de08bdc3815763aec174133f2f7abb9bc528d4f9665cfdfab3f9a28bd0" name="dracut-kiwi-oem-repart" arch="x86_64">
  <version epoch="0" ver="9.24.43" rel="150100.3.65.1"/>
  <changelog author="dcassany@suse.com" date="1646222400">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
</package>
<package pkgid="a22d49754c0989f7a67308ea252eec34db5bc65cd0146decf58e775686e45164" name="dracut-kiwi-oem-repart" arch="aarch64">
  <version epoch="0" ver="9.24.43" rel="150100.3.68.1"/>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
</package>
<package pkgid="6d4afc97fc8be378087810ea1163d7644bab33bab71ea2e7bf88a43caf33d7b2" name="dracut-kiwi-oem-repart" arch="s390x">
  <version epoch="0" ver="9.24.43" rel="150100.3.68.1"/>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
</package>
<package pkgid="df1f6565fc6cbe68c90747f208a5116e2a1aad16870fa5ed2fe5504e7eaabd06" name="dracut-kiwi-oem-repart" arch="x86_64">
  <version epoch="0" ver="9.24.43" rel="150100.3.68.1"/>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
</package>
<package pkgid="09a1fea23f636221f8adf9923653c0c8bf28b09b6352545e9427dc91e711b956" name="dracut-kiwi-oem-repart" arch="aarch64">
  <version epoch="0" ver="9.24.43" rel="150100.3.71.1"/>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
</package>
<package pkgid="9b1591adf9a313ef08a22be3dcda6f534f4655739d5513430adca6a9b16818cf" name="dracut-kiwi-oem-repart" arch="s390x">
  <version epoch="0" ver="9.24.43" rel="150100.3.71.1"/>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
</package>
<package pkgid="6992809b9650e7fda1a2318368de4e82e31ed305ca74591fe7cbe8c10cc2c657" name="dracut-kiwi-oem-repart" arch="x86_64">
  <version epoch="0" ver="9.24.43" rel="150100.3.71.1"/>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
</package>
<package pkgid="57460c28870b1eba3e2235fef20fe292bbd81813f6a902524de81822e6cfe3e5" name="dracut-kiwi-oem-repart" arch="aarch64">
  <version epoch="0" ver="9.24.43" rel="150100.3.76.1"/>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1711368000">- Live ISO Wait for udev events after repart
  Make sure to wait for the event queue to become empty after
  the creation of the write partition. When kiwi calls the
  code to create the write partition this emits new udev events.
  It's important to wait for the event queue to become empty
  to avoid a potential regression on the use of the device nodes.
  In the processing of the events it can happen that a device
  gets removed and re-added. If we don't want for udev
  to process the entire queue it can happen that the
  wrong block device is used. This wrong selection is only
  possible because the way how hybrid ISOs are designed exposes
  both, the disk and the partition for the root device with
  the same label. This Fixes bsc#1213595</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1712232000">- Set default output console to gfxterm for grub
  If no console setting is done in the image description for grub
  the default output console is set to: gfxterm and the default
  input console is set to: console. This Fixes bsc#1219074</changelog>
</package>
<package pkgid="0d36eba7c5413d386a1875fb8c996cfa1203d2c54fa78697c3b9befcd203ebfe" name="dracut-kiwi-oem-repart" arch="s390x">
  <version epoch="0" ver="9.24.43" rel="150100.3.76.1"/>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1711368000">- Live ISO Wait for udev events after repart
  Make sure to wait for the event queue to become empty after
  the creation of the write partition. When kiwi calls the
  code to create the write partition this emits new udev events.
  It's important to wait for the event queue to become empty
  to avoid a potential regression on the use of the device nodes.
  In the processing of the events it can happen that a device
  gets removed and re-added. If we don't want for udev
  to process the entire queue it can happen that the
  wrong block device is used. This wrong selection is only
  possible because the way how hybrid ISOs are designed exposes
  both, the disk and the partition for the root device with
  the same label. This Fixes bsc#1213595</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1712232000">- Set default output console to gfxterm for grub
  If no console setting is done in the image description for grub
  the default output console is set to: gfxterm and the default
  input console is set to: console. This Fixes bsc#1219074</changelog>
</package>
<package pkgid="7812284974fddc554f0435c3b54fbd34ad77a64be975cf53c04f1db7426e1295" name="dracut-kiwi-oem-repart" arch="x86_64">
  <version epoch="0" ver="9.24.43" rel="150100.3.76.1"/>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1711368000">- Live ISO Wait for udev events after repart
  Make sure to wait for the event queue to become empty after
  the creation of the write partition. When kiwi calls the
  code to create the write partition this emits new udev events.
  It's important to wait for the event queue to become empty
  to avoid a potential regression on the use of the device nodes.
  In the processing of the events it can happen that a device
  gets removed and re-added. If we don't want for udev
  to process the entire queue it can happen that the
  wrong block device is used. This wrong selection is only
  possible because the way how hybrid ISOs are designed exposes
  both, the disk and the partition for the root device with
  the same label. This Fixes bsc#1213595</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1712232000">- Set default output console to gfxterm for grub
  If no console setting is done in the image description for grub
  the default output console is set to: gfxterm and the default
  input console is set to: console. This Fixes bsc#1219074</changelog>
</package>
<package pkgid="3cdef7842bccabffa052e6abe0c8bd2f9dbb023b8b10b677130a84f77a97f5ea" name="dracut-kiwi-oem-repart" arch="aarch64">
  <version epoch="0" ver="9.24.43" rel="150100.3.81.1"/>
  <changelog author="dcassany@suse.com" date="1681300800">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1711368000">- Live ISO Wait for udev events after repart
  Make sure to wait for the event queue to become empty after
  the creation of the write partition. When kiwi calls the
  code to create the write partition this emits new udev events.
  It's important to wait for the event queue to become empty
  to avoid a potential regression on the use of the device nodes.
  In the processing of the events it can happen that a device
  gets removed and re-added. If we don't want for udev
  to process the entire queue it can happen that the
  wrong block device is used. This wrong selection is only
  possible because the way how hybrid ISOs are designed exposes
  both, the disk and the partition for the root device with
  the same label. This Fixes bsc#1213595</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1712232000">- Set default output console to gfxterm for grub
  If no console setting is done in the image description for grub
  the default output console is set to: gfxterm and the default
  input console is set to: console. This Fixes bsc#1219074</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1722427200">- Add rd.kiwi.oem.force_resize boot option
  Forces the disk resize process on an OEM disk image.
  If set, no sanity check for unpartitioned/free space
  is performed and also an eventually configured
  &lt;oem-resize-once&gt; configuration from the image description
  will not be taken into account. This Fixes bsc#1224389</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1722427201">- Do not exclude the .profile env file by default
  kiwi's initrd modules read a .profile file which gets included
  into the initrd produced at build time. To allow rebuild of a
  host-only initrd from the booted system this information should
  be present such that it is possible to re-use kiwi initrd code.
  This is related to bsc#1228118</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1722427202">- Fix kiwi-repart restrictions
  The kiwi repart dracut module reads a profile file and if it
  does not exists it dies in the initrd. However, that profile
  file is not mandatory for the main resize functionality. Thus
  this commit turns this into a warning message. In addition
  the module-setup for 90kiwi-repart makes sure to include
  the required and optional profile files.
  This Fixes bsc#1228118</changelog>
</package>
<package pkgid="71223d479860600badf2240719e7118665a3e4ee606ce890b5367dfaaaa053bc" name="dracut-kiwi-oem-repart" arch="s390x">
  <version epoch="0" ver="9.24.43" rel="150100.3.81.1"/>
  <changelog author="dcassany@suse.com" date="1681300800">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1711368000">- Live ISO Wait for udev events after repart
  Make sure to wait for the event queue to become empty after
  the creation of the write partition. When kiwi calls the
  code to create the write partition this emits new udev events.
  It's important to wait for the event queue to become empty
  to avoid a potential regression on the use of the device nodes.
  In the processing of the events it can happen that a device
  gets removed and re-added. If we don't want for udev
  to process the entire queue it can happen that the
  wrong block device is used. This wrong selection is only
  possible because the way how hybrid ISOs are designed exposes
  both, the disk and the partition for the root device with
  the same label. This Fixes bsc#1213595</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1712232000">- Set default output console to gfxterm for grub
  If no console setting is done in the image description for grub
  the default output console is set to: gfxterm and the default
  input console is set to: console. This Fixes bsc#1219074</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1722427200">- Add rd.kiwi.oem.force_resize boot option
  Forces the disk resize process on an OEM disk image.
  If set, no sanity check for unpartitioned/free space
  is performed and also an eventually configured
  &lt;oem-resize-once&gt; configuration from the image description
  will not be taken into account. This Fixes bsc#1224389</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1722427201">- Do not exclude the .profile env file by default
  kiwi's initrd modules read a .profile file which gets included
  into the initrd produced at build time. To allow rebuild of a
  host-only initrd from the booted system this information should
  be present such that it is possible to re-use kiwi initrd code.
  This is related to bsc#1228118</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1722427202">- Fix kiwi-repart restrictions
  The kiwi repart dracut module reads a profile file and if it
  does not exists it dies in the initrd. However, that profile
  file is not mandatory for the main resize functionality. Thus
  this commit turns this into a warning message. In addition
  the module-setup for 90kiwi-repart makes sure to include
  the required and optional profile files.
  This Fixes bsc#1228118</changelog>
</package>
<package pkgid="393d5682d00e554f92580e55f5b67d5302142d2cca2c1b568333ac08e0900a04" name="dracut-kiwi-oem-repart" arch="x86_64">
  <version epoch="0" ver="9.24.43" rel="150100.3.81.1"/>
  <changelog author="dcassany@suse.com" date="1681300800">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1711368000">- Live ISO Wait for udev events after repart
  Make sure to wait for the event queue to become empty after
  the creation of the write partition. When kiwi calls the
  code to create the write partition this emits new udev events.
  It's important to wait for the event queue to become empty
  to avoid a potential regression on the use of the device nodes.
  In the processing of the events it can happen that a device
  gets removed and re-added. If we don't want for udev
  to process the entire queue it can happen that the
  wrong block device is used. This wrong selection is only
  possible because the way how hybrid ISOs are designed exposes
  both, the disk and the partition for the root device with
  the same label. This Fixes bsc#1213595</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1712232000">- Set default output console to gfxterm for grub
  If no console setting is done in the image description for grub
  the default output console is set to: gfxterm and the default
  input console is set to: console. This Fixes bsc#1219074</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1722427200">- Add rd.kiwi.oem.force_resize boot option
  Forces the disk resize process on an OEM disk image.
  If set, no sanity check for unpartitioned/free space
  is performed and also an eventually configured
  &lt;oem-resize-once&gt; configuration from the image description
  will not be taken into account. This Fixes bsc#1224389</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1722427201">- Do not exclude the .profile env file by default
  kiwi's initrd modules read a .profile file which gets included
  into the initrd produced at build time. To allow rebuild of a
  host-only initrd from the booted system this information should
  be present such that it is possible to re-use kiwi initrd code.
  This is related to bsc#1228118</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1722427202">- Fix kiwi-repart restrictions
  The kiwi repart dracut module reads a profile file and if it
  does not exists it dies in the initrd. However, that profile
  file is not mandatory for the main resize functionality. Thus
  this commit turns this into a warning message. In addition
  the module-setup for 90kiwi-repart makes sure to include
  the required and optional profile files.
  This Fixes bsc#1228118</changelog>
</package>
<package pkgid="6e29954702cc399979d375daa2d8860a6ea29ea8013a5e4d24bee29932559f8d" name="dracut-kiwi-oem-repart" arch="aarch64">
  <version epoch="0" ver="9.24.43" rel="150100.3.84.1"/>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704801600">- Fixed regression in GRUB_SERIAL_COMMAND setup
  The condition to write the serial line setup was broken.
  This commit fixes it. Related to Issue #2419 and
  Fixes bsc#1228808</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1711368000">- Live ISO Wait for udev events after repart
  Make sure to wait for the event queue to become empty after
  the creation of the write partition. When kiwi calls the
  code to create the write partition this emits new udev events.
  It's important to wait for the event queue to become empty
  to avoid a potential regression on the use of the device nodes.
  In the processing of the events it can happen that a device
  gets removed and re-added. If we don't want for udev
  to process the entire queue it can happen that the
  wrong block device is used. This wrong selection is only
  possible because the way how hybrid ISOs are designed exposes
  both, the disk and the partition for the root device with
  the same label. This Fixes bsc#1213595</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1712232000">- Set default output console to gfxterm for grub
  If no console setting is done in the image description for grub
  the default output console is set to: gfxterm and the default
  input console is set to: console. This Fixes bsc#1219074</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1722427200">- Add rd.kiwi.oem.force_resize boot option
  Forces the disk resize process on an OEM disk image.
  If set, no sanity check for unpartitioned/free space
  is performed and also an eventually configured
  &lt;oem-resize-once&gt; configuration from the image description
  will not be taken into account. This Fixes bsc#1224389</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1722427201">- Do not exclude the .profile env file by default
  kiwi's initrd modules read a .profile file which gets included
  into the initrd produced at build time. To allow rebuild of a
  host-only initrd from the booted system this information should
  be present such that it is possible to re-use kiwi initrd code.
  This is related to bsc#1228118</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1722427202">- Fix kiwi-repart restrictions
  The kiwi repart dracut module reads a profile file and if it
  does not exists it dies in the initrd. However, that profile
  file is not mandatory for the main resize functionality. Thus
  this commit turns this into a warning message. In addition
  the module-setup for 90kiwi-repart makes sure to include
  the required and optional profile files.
  This Fixes bsc#1228118</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1723118400">- Update virtualenv setup
  types-pkg_resources got dropped from PyPI</changelog>
</package>
<package pkgid="ba34c2c95385d03acfe4ab3e6cc37a1bc8afd88156060634382f2284b4e58d59" name="dracut-kiwi-oem-repart" arch="s390x">
  <version epoch="0" ver="9.24.43" rel="150100.3.84.1"/>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704801600">- Fixed regression in GRUB_SERIAL_COMMAND setup
  The condition to write the serial line setup was broken.
  This commit fixes it. Related to Issue #2419 and
  Fixes bsc#1228808</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1711368000">- Live ISO Wait for udev events after repart
  Make sure to wait for the event queue to become empty after
  the creation of the write partition. When kiwi calls the
  code to create the write partition this emits new udev events.
  It's important to wait for the event queue to become empty
  to avoid a potential regression on the use of the device nodes.
  In the processing of the events it can happen that a device
  gets removed and re-added. If we don't want for udev
  to process the entire queue it can happen that the
  wrong block device is used. This wrong selection is only
  possible because the way how hybrid ISOs are designed exposes
  both, the disk and the partition for the root device with
  the same label. This Fixes bsc#1213595</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1712232000">- Set default output console to gfxterm for grub
  If no console setting is done in the image description for grub
  the default output console is set to: gfxterm and the default
  input console is set to: console. This Fixes bsc#1219074</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1722427200">- Add rd.kiwi.oem.force_resize boot option
  Forces the disk resize process on an OEM disk image.
  If set, no sanity check for unpartitioned/free space
  is performed and also an eventually configured
  &lt;oem-resize-once&gt; configuration from the image description
  will not be taken into account. This Fixes bsc#1224389</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1722427201">- Do not exclude the .profile env file by default
  kiwi's initrd modules read a .profile file which gets included
  into the initrd produced at build time. To allow rebuild of a
  host-only initrd from the booted system this information should
  be present such that it is possible to re-use kiwi initrd code.
  This is related to bsc#1228118</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1722427202">- Fix kiwi-repart restrictions
  The kiwi repart dracut module reads a profile file and if it
  does not exists it dies in the initrd. However, that profile
  file is not mandatory for the main resize functionality. Thus
  this commit turns this into a warning message. In addition
  the module-setup for 90kiwi-repart makes sure to include
  the required and optional profile files.
  This Fixes bsc#1228118</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1723118400">- Update virtualenv setup
  types-pkg_resources got dropped from PyPI</changelog>
</package>
<package pkgid="86497d9482e4c2acc0c337097ee7af939cf2b9f59efecea3e57899a005527568" name="dracut-kiwi-oem-repart" arch="x86_64">
  <version epoch="0" ver="9.24.43" rel="150100.3.84.1"/>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704801600">- Fixed regression in GRUB_SERIAL_COMMAND setup
  The condition to write the serial line setup was broken.
  This commit fixes it. Related to Issue #2419 and
  Fixes bsc#1228808</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1711368000">- Live ISO Wait for udev events after repart
  Make sure to wait for the event queue to become empty after
  the creation of the write partition. When kiwi calls the
  code to create the write partition this emits new udev events.
  It's important to wait for the event queue to become empty
  to avoid a potential regression on the use of the device nodes.
  In the processing of the events it can happen that a device
  gets removed and re-added. If we don't want for udev
  to process the entire queue it can happen that the
  wrong block device is used. This wrong selection is only
  possible because the way how hybrid ISOs are designed exposes
  both, the disk and the partition for the root device with
  the same label. This Fixes bsc#1213595</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1712232000">- Set default output console to gfxterm for grub
  If no console setting is done in the image description for grub
  the default output console is set to: gfxterm and the default
  input console is set to: console. This Fixes bsc#1219074</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1722427200">- Add rd.kiwi.oem.force_resize boot option
  Forces the disk resize process on an OEM disk image.
  If set, no sanity check for unpartitioned/free space
  is performed and also an eventually configured
  &lt;oem-resize-once&gt; configuration from the image description
  will not be taken into account. This Fixes bsc#1224389</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1722427201">- Do not exclude the .profile env file by default
  kiwi's initrd modules read a .profile file which gets included
  into the initrd produced at build time. To allow rebuild of a
  host-only initrd from the booted system this information should
  be present such that it is possible to re-use kiwi initrd code.
  This is related to bsc#1228118</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1722427202">- Fix kiwi-repart restrictions
  The kiwi repart dracut module reads a profile file and if it
  does not exists it dies in the initrd. However, that profile
  file is not mandatory for the main resize functionality. Thus
  this commit turns this into a warning message. In addition
  the module-setup for 90kiwi-repart makes sure to include
  the required and optional profile files.
  This Fixes bsc#1228118</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1723118400">- Update virtualenv setup
  types-pkg_resources got dropped from PyPI</changelog>
</package>
<package pkgid="cc3ad995405914ea70220124880e287a6198e43989c9c4bd1ddcf84b5ea2f49d" name="dracut-transactional-update" arch="noarch">
  <version epoch="0" ver="4.1.6" rel="150500.3.3.1"/>
  <changelog author="iforster@suse.com" date="1631880000">- Version 3.5.5
  - t-u: Use tukit for SUSEConnect call [bsc#1190574]
    Correctly registers repositories</changelog>
  <changelog author="iforster@suse.com" date="1632398400">- Version 3.5.6
  - tukit: Add S/390 bootloader support [bsc#1189807]
  - t-u: support purge-kernels with t-u patch [bsc#1190788]</changelog>
  <changelog author="iforster@suse.com" date="1634040000">- Version 3.5.7
  Various fixes affecting Salt support:
  - t-u: Don't squash stderr messages into stdout
  - t-u: Correctly handle case when the snapshot has been deleted due to
    using --drop-if-no-change: Don't show reboot messages and avoid an awk
    error message [bsc#1191475]
  - tukit: Make inotify handler less sensitive / ignore more directories
    [bsc#1191475]</changelog>
  <changelog author="iforster@suse.com" date="1634904000">- Version 3.6.0
  - Simplify mount hierarchy by just using a single slave bind
    mount as the root of the update environment; this may avoid the
    error messages of failed unmounts
    May fix [boo#1191945]</changelog>
  <changelog author="iforster@suse.com" date="1636545600">- Version 3.6.1
  - Fix rsyncing /etc into the running system with
  - -drop-if-no-change [bsc#1192242]</changelog>
  <changelog author="iforster@suse.com" date="1637323200">- Version 3.6.2
  - Bind mount root file system snapshot on itself, this makes the
    temporary directory in /tmp unnecessary; also fixes [boo#1188110]
    to return the correct snapshot's working directory via API call.
  - Use separate mount namespace for transactional-update; this should
    fix several applications that fail to run if a mount point has the
    'unbindable' mount flag set</changelog>
  <changelog author="iforster@suse.com" date="1637582400">- Version 4.0.0~rc1
  This release is API, but not ABI compatible with previous releases;
  existing applications will have to be recompiled against this new version.
  Major features:
  - Introduces a D-Bus service to access the libtukit API via the
    org.opensuse.tukit.Transaction interface
  - Introduces a C binding via libtukit.h.
  Other changes:
  - t-u: Rework --quiet handling to make sure no output is shown even in
    error cases; this is necessary for automation, e.g. with Salt.
    [gh#openSUSE/transactional-update#73]
  - tukit: Allow storing command output into variable by introducing a new
    optional parameter for "execute" and "callExt".
  - Replace multiple and non-standalone occurenses of {} in "callExt"
    argument.
  - Split transactional-update.timer into transactional-update.timer
    and transactional-update-cleanup.timer; the later will clean up
    old snapshots even when the system does not do automatic updates.
  - tukit: Remove legacy alias "setDiscard" for "setDiscardIfUnchanged".
  - Throw exception if snapshot is not found.
  - Fix various compiler warnings
- Update spec file:
  - Include tukitd D-Bus daemon
  - Only install one version of the library (as there are no breaking API
    changes yet)
  - Add %pre scriplets for systemd services
  - Replace %systemd_postun scriptlets with %systemd_postun_with_restart
    to satisfy rpmlint checks
  - Add transactional-update log file as %ghost file</changelog>
  <changelog author="iforster@suse.com" date="1646568000">- Version 4.0.0~rc2
  - Fix missing prompt in "shell" command [bsc#1196580]
  - Add output of tukit commands to log file
  - Fix compilation error with GCC12 [boo#1194876]
  - Fixed (non-critical) security review comments [boo#1196149]
  - Fixed selfupdate
  - Code cleanup</changelog>
  <changelog author="iforster@suse.com" date="1651579200">- Version 4.0.0~rc3
  - Add Snapshot interface
  - Reworked signal handling: All public signals are sent from the
    main thread now, keeping the same sender for everything
  - Implement D-Bus call "Execute" for Transactions
  - Implement interface for listing Snapshots
  - Implement Reboot interface
  - Fix bug when using --continue on old snapshots
  - Fix hypothetical integer overflow in snapshot list [bsc#1196826]
  - Fix wrong sort order in status command
    [gh#openSUSE/transactional-update#80]</changelog>
  <changelog author="iforster@suse.com" date="1652788800">- Version 4.0.0~rc4
  - Fix building with GCC 12
  - Fix stack overflow with very long commands / ids [bsc#1196149]
  - Use separate mount namespace for chroot, allowing overwriting
    the bind mounts from the update environment - this could have
    lead to data loss of the bind mount previously
  - Fix C error and exception handling for snapshots</changelog>
  <changelog author="schubi@suse.com" date="1655812800">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="iforster@suse.com" date="1659441600">- Version 4.0.0
  - Last minute interface change: Changed "List" method of Snapshot D-Bus
    interface to return a map of properties instead of a comma separated
    list of strings; this will allow retrieving the snapshot properties
    even if they contain a comma in their value [boo#1202147]
  - Remove "Snapshot.hpp" as a public API for now - all public
    functionality is part of SnapshotManager.hpp
  - Add header file documentation for SnapshotManager.hpp
  - Add method to delete snapshot
    [gh#openSUSE/transactional-update#52]
  - Allow setting description of snapshot
    [gh#openSUSE/transactional-update#55]
  - create_dirs_from_rpmdb: set SELinux file context of missing directories
    [gh#openSUSE/transactional-update#84], [bsc#1197242]
  - Fix broken logrotate due to typo in config file
    [gh#openSUSE/transactional-update#87]
  - create_dirs_from_rpmdb: Fix handling return code of create_dirs()
    [gh#openSUSE/transactional-update#86]
  - Fix broken "shell" prompt after selfupdate
  - Add documented D-Bus interface definition files
  - Add tukit_sm_get_current and tukit_sm_get_default to C interface
  - Fixed typos</changelog>
  <changelog author="fvogt@suse.com" date="1661169600">- Version 4.0.1
  - create_dirs_from_rpmdb: Just warn if no default SELinux context found
    [gh#openSUSE/transactional-update#88], [bsc#1188215]
  - create_dirs_from_rpmdb: Don't update the rpmdb cookie on failure
    [gh#openSUSE/transactional-update#88]
  - Handle directories owned by multiple packages
    [gh#openSUSE/transactional-update#90], [bsc#1188215]</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration of logrotate configuration to /usr/etc: Saving user
  changed configuration files in /etc and restoring them while
  an RPM update.</changelog>
  <changelog author="iforster@suse.com" date="1664539200">- Version 4.1.0
  - t-u: Add a "setup-kdump" command; implements [jsc#PED-1441]
  - Export TRANSACTIONAL_UPDATE_ROOT (the path to the snapshot) in
    the update environment; implements [jsc#PED-1078]
  - Add support for "notify" reboot method for desktop use
    [gh#openSUSE/transactional-update#93]
  - Fix kdump initrd recreation detection; the check was performed in the
    active snapshot instead of the target snapshot
  - Document register command [bsc#1202900]
  - Avoid unnecessary snapshots for register command [bsc#1202901]
  - Various optimizations for register command
  - Remove bogus error message when triggering reboot
  - Rework /etc overlay documentation in "The Transactional Update Guide"
  - Fix incorrect manpage formatting
  - Remove leftover "salt" reboot method in configuration example file
  - Replace deprecated std::mem_fn with lambdas</changelog>
  <changelog author="iforster@suse.com" date="1674043200">- Version 4.1.1
  - Mount user specific binddirs last: Prevously the internal mounts would
    potentially overwrite user bind mounts [boo#1205011]
  - selinux: Relabel shadowed /var files during update to make sure they
    don't interfere with the update [boo#1205937]
  - Clean up /var/lib/overlay more aggressively [boo#1206947]
  - tukit: Merge /etc overlay into parent if --discard is used together
    with --continue - previously the files were incorrectly always merged
    with the currently running system
  - status: do not execute the status command if experimental
  - Don't delete created mount point dirs any more
  - Small code optimizations</changelog>
  <changelog author="iforster@suse.com" date="1674475200">- Version 4.1.2
  - Don't try to mount user mounts if they don't exist [boo#1207366]</changelog>
  <changelog author="iforster@suse.com" date="1675857600">- Version 4.1.3
  - Suppress SELinux relabelling output in quiet mode
  - Documentation readability improvements</changelog>
  <changelog author="iforster@suse.com" date="1678449600">- Version 4.1.4
  - Workaround for broken Tumbleweed package libfdisk1</changelog>
  <changelog author="iforster@suse.com" date="1696507200">- Version 4.1.6
  - Use permissions of real /etc when creating overlay
    [bsc#1215878]
- Version 4.1.5
  - Add support for configuration file snippets</changelog>
</package>
<package pkgid="43797139b5a1030aa742e129e16c7a3ffe75270f60e1a35a0956e66a15854a4e" name="dracut-transactional-update" arch="noarch">
  <version epoch="0" ver="4.1.7" rel="150500.3.6.2"/>
  <changelog author="iforster@suse.com" date="1632398400">- Version 3.5.6
  - tukit: Add S/390 bootloader support [bsc#1189807]
  - t-u: support purge-kernels with t-u patch [bsc#1190788]</changelog>
  <changelog author="iforster@suse.com" date="1634040000">- Version 3.5.7
  Various fixes affecting Salt support:
  - t-u: Don't squash stderr messages into stdout
  - t-u: Correctly handle case when the snapshot has been deleted due to
    using --drop-if-no-change: Don't show reboot messages and avoid an awk
    error message [bsc#1191475]
  - tukit: Make inotify handler less sensitive / ignore more directories
    [bsc#1191475]</changelog>
  <changelog author="iforster@suse.com" date="1634904000">- Version 3.6.0
  - Simplify mount hierarchy by just using a single slave bind
    mount as the root of the update environment; this may avoid the
    error messages of failed unmounts
    May fix [boo#1191945]</changelog>
  <changelog author="iforster@suse.com" date="1636545600">- Version 3.6.1
  - Fix rsyncing /etc into the running system with
  - -drop-if-no-change [bsc#1192242]</changelog>
  <changelog author="iforster@suse.com" date="1637323200">- Version 3.6.2
  - Bind mount root file system snapshot on itself, this makes the
    temporary directory in /tmp unnecessary; also fixes [boo#1188110]
    to return the correct snapshot's working directory via API call.
  - Use separate mount namespace for transactional-update; this should
    fix several applications that fail to run if a mount point has the
    'unbindable' mount flag set</changelog>
  <changelog author="iforster@suse.com" date="1637582400">- Version 4.0.0~rc1
  This release is API, but not ABI compatible with previous releases;
  existing applications will have to be recompiled against this new version.
  Major features:
  - Introduces a D-Bus service to access the libtukit API via the
    org.opensuse.tukit.Transaction interface
  - Introduces a C binding via libtukit.h.
  Other changes:
  - t-u: Rework --quiet handling to make sure no output is shown even in
    error cases; this is necessary for automation, e.g. with Salt.
    [gh#openSUSE/transactional-update#73]
  - tukit: Allow storing command output into variable by introducing a new
    optional parameter for "execute" and "callExt".
  - Replace multiple and non-standalone occurenses of {} in "callExt"
    argument.
  - Split transactional-update.timer into transactional-update.timer
    and transactional-update-cleanup.timer; the later will clean up
    old snapshots even when the system does not do automatic updates.
  - tukit: Remove legacy alias "setDiscard" for "setDiscardIfUnchanged".
  - Throw exception if snapshot is not found.
  - Fix various compiler warnings
- Update spec file:
  - Include tukitd D-Bus daemon
  - Only install one version of the library (as there are no breaking API
    changes yet)
  - Add %pre scriplets for systemd services
  - Replace %systemd_postun scriptlets with %systemd_postun_with_restart
    to satisfy rpmlint checks
  - Add transactional-update log file as %ghost file</changelog>
  <changelog author="iforster@suse.com" date="1646568000">- Version 4.0.0~rc2
  - Fix missing prompt in "shell" command [bsc#1196580]
  - Add output of tukit commands to log file
  - Fix compilation error with GCC12 [boo#1194876]
  - Fixed (non-critical) security review comments [boo#1196149]
  - Fixed selfupdate
  - Code cleanup</changelog>
  <changelog author="iforster@suse.com" date="1651579200">- Version 4.0.0~rc3
  - Add Snapshot interface
  - Reworked signal handling: All public signals are sent from the
    main thread now, keeping the same sender for everything
  - Implement D-Bus call "Execute" for Transactions
  - Implement interface for listing Snapshots
  - Implement Reboot interface
  - Fix bug when using --continue on old snapshots
  - Fix hypothetical integer overflow in snapshot list [bsc#1196826]
  - Fix wrong sort order in status command
    [gh#openSUSE/transactional-update#80]</changelog>
  <changelog author="iforster@suse.com" date="1652788800">- Version 4.0.0~rc4
  - Fix building with GCC 12
  - Fix stack overflow with very long commands / ids [bsc#1196149]
  - Use separate mount namespace for chroot, allowing overwriting
    the bind mounts from the update environment - this could have
    lead to data loss of the bind mount previously
  - Fix C error and exception handling for snapshots</changelog>
  <changelog author="schubi@suse.com" date="1655812800">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="iforster@suse.com" date="1659441600">- Version 4.0.0
  - Last minute interface change: Changed "List" method of Snapshot D-Bus
    interface to return a map of properties instead of a comma separated
    list of strings; this will allow retrieving the snapshot properties
    even if they contain a comma in their value [boo#1202147]
  - Remove "Snapshot.hpp" as a public API for now - all public
    functionality is part of SnapshotManager.hpp
  - Add header file documentation for SnapshotManager.hpp
  - Add method to delete snapshot
    [gh#openSUSE/transactional-update#52]
  - Allow setting description of snapshot
    [gh#openSUSE/transactional-update#55]
  - create_dirs_from_rpmdb: set SELinux file context of missing directories
    [gh#openSUSE/transactional-update#84], [bsc#1197242]
  - Fix broken logrotate due to typo in config file
    [gh#openSUSE/transactional-update#87]
  - create_dirs_from_rpmdb: Fix handling return code of create_dirs()
    [gh#openSUSE/transactional-update#86]
  - Fix broken "shell" prompt after selfupdate
  - Add documented D-Bus interface definition files
  - Add tukit_sm_get_current and tukit_sm_get_default to C interface
  - Fixed typos</changelog>
  <changelog author="fvogt@suse.com" date="1661169600">- Version 4.0.1
  - create_dirs_from_rpmdb: Just warn if no default SELinux context found
    [gh#openSUSE/transactional-update#88], [bsc#1188215]
  - create_dirs_from_rpmdb: Don't update the rpmdb cookie on failure
    [gh#openSUSE/transactional-update#88]
  - Handle directories owned by multiple packages
    [gh#openSUSE/transactional-update#90], [bsc#1188215]</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration of logrotate configuration to /usr/etc: Saving user
  changed configuration files in /etc and restoring them while
  an RPM update.</changelog>
  <changelog author="iforster@suse.com" date="1664539200">- Version 4.1.0
  - t-u: Add a "setup-kdump" command; implements [jsc#PED-1441]
  - Export TRANSACTIONAL_UPDATE_ROOT (the path to the snapshot) in
    the update environment; implements [jsc#PED-1078]
  - Add support for "notify" reboot method for desktop use
    [gh#openSUSE/transactional-update#93]
  - Fix kdump initrd recreation detection; the check was performed in the
    active snapshot instead of the target snapshot
  - Document register command [bsc#1202900]
  - Avoid unnecessary snapshots for register command [bsc#1202901]
  - Various optimizations for register command
  - Remove bogus error message when triggering reboot
  - Rework /etc overlay documentation in "The Transactional Update Guide"
  - Fix incorrect manpage formatting
  - Remove leftover "salt" reboot method in configuration example file
  - Replace deprecated std::mem_fn with lambdas</changelog>
  <changelog author="iforster@suse.com" date="1674043200">- Version 4.1.1
  - Mount user specific binddirs last: Prevously the internal mounts would
    potentially overwrite user bind mounts [boo#1205011]
  - selinux: Relabel shadowed /var files during update to make sure they
    don't interfere with the update [boo#1205937]
  - Clean up /var/lib/overlay more aggressively [boo#1206947]
  - tukit: Merge /etc overlay into parent if --discard is used together
    with --continue - previously the files were incorrectly always merged
    with the currently running system
  - status: do not execute the status command if experimental
  - Don't delete created mount point dirs any more
  - Small code optimizations</changelog>
  <changelog author="iforster@suse.com" date="1674475200">- Version 4.1.2
  - Don't try to mount user mounts if they don't exist [boo#1207366]</changelog>
  <changelog author="iforster@suse.com" date="1675857600">- Version 4.1.3
  - Suppress SELinux relabelling output in quiet mode
  - Documentation readability improvements</changelog>
  <changelog author="iforster@suse.com" date="1678449600">- Version 4.1.4
  - Workaround for broken Tumbleweed package libfdisk1</changelog>
  <changelog author="iforster@suse.com" date="1696507200">- Version 4.1.6
  - Use permissions of real /etc when creating overlay
    [bsc#1215878]
- Version 4.1.5
  - Add support for configuration file snippets</changelog>
  <changelog author="iforster@suse.com" date="1710417600">- Version 4.1.7
  - Always use zypper of installed system [bsc#1221346]</changelog>
</package>
<package pkgid="10d03a7f921acaa9e5ae389666ea4068ce11a3e94ae4eb4a3d88987de7471082" name="dracut-transactional-update" arch="noarch">
  <version epoch="0" ver="4.1.8" rel="150500.3.9.2"/>
  <changelog author="iforster@suse.com" date="1634040000">- Version 3.5.7
  Various fixes affecting Salt support:
  - t-u: Don't squash stderr messages into stdout
  - t-u: Correctly handle case when the snapshot has been deleted due to
    using --drop-if-no-change: Don't show reboot messages and avoid an awk
    error message [bsc#1191475]
  - tukit: Make inotify handler less sensitive / ignore more directories
    [bsc#1191475]</changelog>
  <changelog author="iforster@suse.com" date="1634904000">- Version 3.6.0
  - Simplify mount hierarchy by just using a single slave bind
    mount as the root of the update environment; this may avoid the
    error messages of failed unmounts
    May fix [boo#1191945]</changelog>
  <changelog author="iforster@suse.com" date="1636545600">- Version 3.6.1
  - Fix rsyncing /etc into the running system with
  - -drop-if-no-change [bsc#1192242]</changelog>
  <changelog author="iforster@suse.com" date="1637323200">- Version 3.6.2
  - Bind mount root file system snapshot on itself, this makes the
    temporary directory in /tmp unnecessary; also fixes [boo#1188110]
    to return the correct snapshot's working directory via API call.
  - Use separate mount namespace for transactional-update; this should
    fix several applications that fail to run if a mount point has the
    'unbindable' mount flag set</changelog>
  <changelog author="iforster@suse.com" date="1637582400">- Version 4.0.0~rc1
  This release is API, but not ABI compatible with previous releases;
  existing applications will have to be recompiled against this new version.
  Major features:
  - Introduces a D-Bus service to access the libtukit API via the
    org.opensuse.tukit.Transaction interface
  - Introduces a C binding via libtukit.h.
  Other changes:
  - t-u: Rework --quiet handling to make sure no output is shown even in
    error cases; this is necessary for automation, e.g. with Salt.
    [gh#openSUSE/transactional-update#73]
  - tukit: Allow storing command output into variable by introducing a new
    optional parameter for "execute" and "callExt".
  - Replace multiple and non-standalone occurenses of {} in "callExt"
    argument.
  - Split transactional-update.timer into transactional-update.timer
    and transactional-update-cleanup.timer; the later will clean up
    old snapshots even when the system does not do automatic updates.
  - tukit: Remove legacy alias "setDiscard" for "setDiscardIfUnchanged".
  - Throw exception if snapshot is not found.
  - Fix various compiler warnings
- Update spec file:
  - Include tukitd D-Bus daemon
  - Only install one version of the library (as there are no breaking API
    changes yet)
  - Add %pre scriplets for systemd services
  - Replace %systemd_postun scriptlets with %systemd_postun_with_restart
    to satisfy rpmlint checks
  - Add transactional-update log file as %ghost file</changelog>
  <changelog author="iforster@suse.com" date="1646568000">- Version 4.0.0~rc2
  - Fix missing prompt in "shell" command [bsc#1196580]
  - Add output of tukit commands to log file
  - Fix compilation error with GCC12 [boo#1194876]
  - Fixed (non-critical) security review comments [boo#1196149]
  - Fixed selfupdate
  - Code cleanup</changelog>
  <changelog author="iforster@suse.com" date="1651579200">- Version 4.0.0~rc3
  - Add Snapshot interface
  - Reworked signal handling: All public signals are sent from the
    main thread now, keeping the same sender for everything
  - Implement D-Bus call "Execute" for Transactions
  - Implement interface for listing Snapshots
  - Implement Reboot interface
  - Fix bug when using --continue on old snapshots
  - Fix hypothetical integer overflow in snapshot list [bsc#1196826]
  - Fix wrong sort order in status command
    [gh#openSUSE/transactional-update#80]</changelog>
  <changelog author="iforster@suse.com" date="1652788800">- Version 4.0.0~rc4
  - Fix building with GCC 12
  - Fix stack overflow with very long commands / ids [bsc#1196149]
  - Use separate mount namespace for chroot, allowing overwriting
    the bind mounts from the update environment - this could have
    lead to data loss of the bind mount previously
  - Fix C error and exception handling for snapshots</changelog>
  <changelog author="schubi@suse.com" date="1655812800">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="iforster@suse.com" date="1659441600">- Version 4.0.0
  - Last minute interface change: Changed "List" method of Snapshot D-Bus
    interface to return a map of properties instead of a comma separated
    list of strings; this will allow retrieving the snapshot properties
    even if they contain a comma in their value [boo#1202147]
  - Remove "Snapshot.hpp" as a public API for now - all public
    functionality is part of SnapshotManager.hpp
  - Add header file documentation for SnapshotManager.hpp
  - Add method to delete snapshot
    [gh#openSUSE/transactional-update#52]
  - Allow setting description of snapshot
    [gh#openSUSE/transactional-update#55]
  - create_dirs_from_rpmdb: set SELinux file context of missing directories
    [gh#openSUSE/transactional-update#84], [bsc#1197242]
  - Fix broken logrotate due to typo in config file
    [gh#openSUSE/transactional-update#87]
  - create_dirs_from_rpmdb: Fix handling return code of create_dirs()
    [gh#openSUSE/transactional-update#86]
  - Fix broken "shell" prompt after selfupdate
  - Add documented D-Bus interface definition files
  - Add tukit_sm_get_current and tukit_sm_get_default to C interface
  - Fixed typos</changelog>
  <changelog author="fvogt@suse.com" date="1661169600">- Version 4.0.1
  - create_dirs_from_rpmdb: Just warn if no default SELinux context found
    [gh#openSUSE/transactional-update#88], [bsc#1188215]
  - create_dirs_from_rpmdb: Don't update the rpmdb cookie on failure
    [gh#openSUSE/transactional-update#88]
  - Handle directories owned by multiple packages
    [gh#openSUSE/transactional-update#90], [bsc#1188215]</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration of logrotate configuration to /usr/etc: Saving user
  changed configuration files in /etc and restoring them while
  an RPM update.</changelog>
  <changelog author="iforster@suse.com" date="1664539200">- Version 4.1.0
  - t-u: Add a "setup-kdump" command; implements [jsc#PED-1441]
  - Export TRANSACTIONAL_UPDATE_ROOT (the path to the snapshot) in
    the update environment; implements [jsc#PED-1078]
  - Add support for "notify" reboot method for desktop use
    [gh#openSUSE/transactional-update#93]
  - Fix kdump initrd recreation detection; the check was performed in the
    active snapshot instead of the target snapshot
  - Document register command [bsc#1202900]
  - Avoid unnecessary snapshots for register command [bsc#1202901]
  - Various optimizations for register command
  - Remove bogus error message when triggering reboot
  - Rework /etc overlay documentation in "The Transactional Update Guide"
  - Fix incorrect manpage formatting
  - Remove leftover "salt" reboot method in configuration example file
  - Replace deprecated std::mem_fn with lambdas</changelog>
  <changelog author="iforster@suse.com" date="1674043200">- Version 4.1.1
  - Mount user specific binddirs last: Prevously the internal mounts would
    potentially overwrite user bind mounts [boo#1205011]
  - selinux: Relabel shadowed /var files during update to make sure they
    don't interfere with the update [boo#1205937]
  - Clean up /var/lib/overlay more aggressively [boo#1206947]
  - tukit: Merge /etc overlay into parent if --discard is used together
    with --continue - previously the files were incorrectly always merged
    with the currently running system
  - status: do not execute the status command if experimental
  - Don't delete created mount point dirs any more
  - Small code optimizations</changelog>
  <changelog author="iforster@suse.com" date="1674475200">- Version 4.1.2
  - Don't try to mount user mounts if they don't exist [boo#1207366]</changelog>
  <changelog author="iforster@suse.com" date="1675857600">- Version 4.1.3
  - Suppress SELinux relabelling output in quiet mode
  - Documentation readability improvements</changelog>
  <changelog author="iforster@suse.com" date="1678449600">- Version 4.1.4
  - Workaround for broken Tumbleweed package libfdisk1</changelog>
  <changelog author="iforster@suse.com" date="1696507200">- Version 4.1.6
  - Use permissions of real /etc when creating overlay
    [bsc#1215878]
- Version 4.1.5
  - Add support for configuration file snippets</changelog>
  <changelog author="iforster@suse.com" date="1710417600">- Version 4.1.7
  - Always use zypper of installed system [bsc#1221346]</changelog>
  <changelog author="iforster@suse.com" date="1718020800">- Version 4.1.8
  - tukit: Properly handle overlay syncing failures: If the system
    would not be rebooted and several snapshots accumulated in the
    meantime, it was possible that the previous base snapshot -
    required for /etc syncing - was deleted already. In that case
    changes in /etc might have been reset.
    [gh#openSUSE/transactional-update#116]
    [gh#kube-hetzner/terraform-hcloud-kube-hetzner#1287]</changelog>
</package>
<package pkgid="5fde370071cf6f31b6b9ee8f07064ddc46e9712a95477f5e72992c4ec7964c7b" name="dracut-transactional-update" arch="noarch">
  <version epoch="0" ver="4.1.9" rel="150500.3.12.2"/>
  <changelog author="iforster@suse.com" date="1634904000">- Version 3.6.0
  - Simplify mount hierarchy by just using a single slave bind
    mount as the root of the update environment; this may avoid the
    error messages of failed unmounts
    May fix [boo#1191945]</changelog>
  <changelog author="iforster@suse.com" date="1636545600">- Version 3.6.1
  - Fix rsyncing /etc into the running system with
  - -drop-if-no-change [bsc#1192242]</changelog>
  <changelog author="iforster@suse.com" date="1637323200">- Version 3.6.2
  - Bind mount root file system snapshot on itself, this makes the
    temporary directory in /tmp unnecessary; also fixes [boo#1188110]
    to return the correct snapshot's working directory via API call.
  - Use separate mount namespace for transactional-update; this should
    fix several applications that fail to run if a mount point has the
    'unbindable' mount flag set</changelog>
  <changelog author="iforster@suse.com" date="1637582400">- Version 4.0.0~rc1
  This release is API, but not ABI compatible with previous releases;
  existing applications will have to be recompiled against this new version.
  Major features:
  - Introduces a D-Bus service to access the libtukit API via the
    org.opensuse.tukit.Transaction interface
  - Introduces a C binding via libtukit.h.
  Other changes:
  - t-u: Rework --quiet handling to make sure no output is shown even in
    error cases; this is necessary for automation, e.g. with Salt.
    [gh#openSUSE/transactional-update#73]
  - tukit: Allow storing command output into variable by introducing a new
    optional parameter for "execute" and "callExt".
  - Replace multiple and non-standalone occurenses of {} in "callExt"
    argument.
  - Split transactional-update.timer into transactional-update.timer
    and transactional-update-cleanup.timer; the later will clean up
    old snapshots even when the system does not do automatic updates.
  - tukit: Remove legacy alias "setDiscard" for "setDiscardIfUnchanged".
  - Throw exception if snapshot is not found.
  - Fix various compiler warnings
- Update spec file:
  - Include tukitd D-Bus daemon
  - Only install one version of the library (as there are no breaking API
    changes yet)
  - Add %pre scriplets for systemd services
  - Replace %systemd_postun scriptlets with %systemd_postun_with_restart
    to satisfy rpmlint checks
  - Add transactional-update log file as %ghost file</changelog>
  <changelog author="iforster@suse.com" date="1646568000">- Version 4.0.0~rc2
  - Fix missing prompt in "shell" command [bsc#1196580]
  - Add output of tukit commands to log file
  - Fix compilation error with GCC12 [boo#1194876]
  - Fixed (non-critical) security review comments [boo#1196149]
  - Fixed selfupdate
  - Code cleanup</changelog>
  <changelog author="iforster@suse.com" date="1651579200">- Version 4.0.0~rc3
  - Add Snapshot interface
  - Reworked signal handling: All public signals are sent from the
    main thread now, keeping the same sender for everything
  - Implement D-Bus call "Execute" for Transactions
  - Implement interface for listing Snapshots
  - Implement Reboot interface
  - Fix bug when using --continue on old snapshots
  - Fix hypothetical integer overflow in snapshot list [bsc#1196826]
  - Fix wrong sort order in status command
    [gh#openSUSE/transactional-update#80]</changelog>
  <changelog author="iforster@suse.com" date="1652788800">- Version 4.0.0~rc4
  - Fix building with GCC 12
  - Fix stack overflow with very long commands / ids [bsc#1196149]
  - Use separate mount namespace for chroot, allowing overwriting
    the bind mounts from the update environment - this could have
    lead to data loss of the bind mount previously
  - Fix C error and exception handling for snapshots</changelog>
  <changelog author="schubi@suse.com" date="1655812800">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="iforster@suse.com" date="1659441600">- Version 4.0.0
  - Last minute interface change: Changed "List" method of Snapshot D-Bus
    interface to return a map of properties instead of a comma separated
    list of strings; this will allow retrieving the snapshot properties
    even if they contain a comma in their value [boo#1202147]
  - Remove "Snapshot.hpp" as a public API for now - all public
    functionality is part of SnapshotManager.hpp
  - Add header file documentation for SnapshotManager.hpp
  - Add method to delete snapshot
    [gh#openSUSE/transactional-update#52]
  - Allow setting description of snapshot
    [gh#openSUSE/transactional-update#55]
  - create_dirs_from_rpmdb: set SELinux file context of missing directories
    [gh#openSUSE/transactional-update#84], [bsc#1197242]
  - Fix broken logrotate due to typo in config file
    [gh#openSUSE/transactional-update#87]
  - create_dirs_from_rpmdb: Fix handling return code of create_dirs()
    [gh#openSUSE/transactional-update#86]
  - Fix broken "shell" prompt after selfupdate
  - Add documented D-Bus interface definition files
  - Add tukit_sm_get_current and tukit_sm_get_default to C interface
  - Fixed typos</changelog>
  <changelog author="fvogt@suse.com" date="1661169600">- Version 4.0.1
  - create_dirs_from_rpmdb: Just warn if no default SELinux context found
    [gh#openSUSE/transactional-update#88], [bsc#1188215]
  - create_dirs_from_rpmdb: Don't update the rpmdb cookie on failure
    [gh#openSUSE/transactional-update#88]
  - Handle directories owned by multiple packages
    [gh#openSUSE/transactional-update#90], [bsc#1188215]</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration of logrotate configuration to /usr/etc: Saving user
  changed configuration files in /etc and restoring them while
  an RPM update.</changelog>
  <changelog author="iforster@suse.com" date="1664539200">- Version 4.1.0
  - t-u: Add a "setup-kdump" command; implements [jsc#PED-1441]
  - Export TRANSACTIONAL_UPDATE_ROOT (the path to the snapshot) in
    the update environment; implements [jsc#PED-1078]
  - Add support for "notify" reboot method for desktop use
    [gh#openSUSE/transactional-update#93]
  - Fix kdump initrd recreation detection; the check was performed in the
    active snapshot instead of the target snapshot
  - Document register command [bsc#1202900]
  - Avoid unnecessary snapshots for register command [bsc#1202901]
  - Various optimizations for register command
  - Remove bogus error message when triggering reboot
  - Rework /etc overlay documentation in "The Transactional Update Guide"
  - Fix incorrect manpage formatting
  - Remove leftover "salt" reboot method in configuration example file
  - Replace deprecated std::mem_fn with lambdas</changelog>
  <changelog author="iforster@suse.com" date="1674043200">- Version 4.1.1
  - Mount user specific binddirs last: Prevously the internal mounts would
    potentially overwrite user bind mounts [boo#1205011]
  - selinux: Relabel shadowed /var files during update to make sure they
    don't interfere with the update [boo#1205937]
  - Clean up /var/lib/overlay more aggressively [boo#1206947]
  - tukit: Merge /etc overlay into parent if --discard is used together
    with --continue - previously the files were incorrectly always merged
    with the currently running system
  - status: do not execute the status command if experimental
  - Don't delete created mount point dirs any more
  - Small code optimizations</changelog>
  <changelog author="iforster@suse.com" date="1674475200">- Version 4.1.2
  - Don't try to mount user mounts if they don't exist [boo#1207366]</changelog>
  <changelog author="iforster@suse.com" date="1675857600">- Version 4.1.3
  - Suppress SELinux relabelling output in quiet mode
  - Documentation readability improvements</changelog>
  <changelog author="iforster@suse.com" date="1678449600">- Version 4.1.4
  - Workaround for broken Tumbleweed package libfdisk1</changelog>
  <changelog author="iforster@suse.com" date="1696507200">- Version 4.1.6
  - Use permissions of real /etc when creating overlay
    [bsc#1215878]
- Version 4.1.5
  - Add support for configuration file snippets</changelog>
  <changelog author="iforster@suse.com" date="1710417600">- Version 4.1.7
  - Always use zypper of installed system [bsc#1221346]</changelog>
  <changelog author="iforster@suse.com" date="1718020800">- Version 4.1.8
  - tukit: Properly handle overlay syncing failures: If the system
    would not be rebooted and several snapshots accumulated in the
    meantime, it was possible that the previous base snapshot -
    required for /etc syncing - was deleted already. In that case
    changes in /etc might have been reset.
    [gh#openSUSE/transactional-update#116]
    [gh#kube-hetzner/terraform-hcloud-kube-hetzner#1287]</changelog>
  <changelog author="iforster@suse.com" date="1725364800">- Version 4.1.9
  - Adding support for specifying migration arguments</changelog>
</package>
<package pkgid="371b67760dddcca1ed5910efe8679c240d4cfe199de028021f2eefaba4301724" name="duktape" arch="src">
  <version epoch="0" ver="2.6.0" rel="150500.4.2.1"/>
  <changelog author="avvissu@yandex.by" date="1496145600">- Initial package</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Correct RPM group.</changelog>
  <changelog author="avvissu@yandex.by" date="1501329600">- Update to 2.1.1:
  * maintenance release</changelog>
  <changelog author="avvissu@yandex.by" date="1507204800">- Update to 2.2.0:
  * call handling, API improvements, performance</changelog>
  <changelog author="avvissu@yandex.by" date="1524744000">- Update to 2.2.1:
  * maintenance release</changelog>
  <changelog author="sean@suspend.net" date="1539864000">- Update to 2.3.0:
  * ES2015 improvements</changelog>
  <changelog author="avvissu@yandex.by" date="1564401600">- Update to 2.4.0:
  * Minor fixes and improvements</changelog>
  <changelog author="mrey@suse.com" date="1595937600">- Update to 2.5.0:
  * CBOR support, minor fixes and improvements
- spec file changes
  * change http to https in URLs
  * use RPM macros</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1604059200">- Update to 2.6.0:
  * Various fixes and portability improvements.</changelog>
  <changelog author="meissner@suse.com" date="1669636800">- duktape-link-m.patch: link against libm for sin() and related functions,
  in case the compiler with -Os creates external references. bsc#1205805</changelog>
</package>
<package pkgid="6e2b5d6494d0797f088628dced4677981cdc61db5303dcc5b9318bb40fe9a30d" name="duktape" arch="src">
  <version epoch="0" ver="2.6.0" rel="150500.4.5.1"/>
  <changelog author="avvissu@yandex.by" date="1496145600">- Initial package</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Correct RPM group.</changelog>
  <changelog author="avvissu@yandex.by" date="1501329600">- Update to 2.1.1:
  * maintenance release</changelog>
  <changelog author="avvissu@yandex.by" date="1507204800">- Update to 2.2.0:
  * call handling, API improvements, performance</changelog>
  <changelog author="avvissu@yandex.by" date="1524744000">- Update to 2.2.1:
  * maintenance release</changelog>
  <changelog author="sean@suspend.net" date="1539864000">- Update to 2.3.0:
  * ES2015 improvements</changelog>
  <changelog author="avvissu@yandex.by" date="1564401600">- Update to 2.4.0:
  * Minor fixes and improvements</changelog>
  <changelog author="mrey@suse.com" date="1595937600">- Update to 2.5.0:
  * CBOR support, minor fixes and improvements
- spec file changes
  * change http to https in URLs
  * use RPM macros</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1604059200">- Update to 2.6.0:
  * Various fixes and portability improvements.</changelog>
  <changelog author="meissner@suse.com" date="1669636800">- duktape-link-m.patch: link against libm for sin() and related functions,
  in case the compiler with -Os creates external references. bsc#1205805</changelog>
  <changelog author="yfjiang@suse.com" date="1705060800">- Ship libduktape206-32bit: needed by libproxy since version 0.5.</changelog>
</package>
<package pkgid="e9eb2ed08be8b178ef7e8f20ca3933f216246efd41d2e2e9620a00e623f29b6e" name="e2fsprogs" arch="aarch64">
  <version epoch="0" ver="1.46.4" rel="150400.3.6.2"/>
  <changelog author="jack@suse.cz" date="1559304000">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
  <changelog author="jack@suse.cz" date="1716552000">EA Inode handling fixes:
- ext2fs-avoid-re-reading-inode-multiple-times.patch: ext2fs: avoid re-reading
  inode multiple times (bsc#1223596)
- e2fsck-fix-potential-out-of-bounds-read-in-inc_ea_in.patch: e2fsck: fix
  potential out-of-bounds read in inc_ea_inode_refs() (bsc#1223596)
- e2fsck-add-more-checks-for-ea-inode-consistency.patch: e2fsck: add more
  checks for ea inode consistency (bsc#1223596)
- e2fsck-fix-golden-output-of-several-tests.patch: e2fsck: fix golden output of
  several tests (bsc#1223596)</changelog>
</package>
<package pkgid="b46c9a73c19e815a44806a4f0e8707af8c28d4eea366466088cdb19a22d9b03c" name="e2fsprogs" arch="s390x">
  <version epoch="0" ver="1.46.4" rel="150400.3.6.2"/>
  <changelog author="jack@suse.cz" date="1559304000">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
  <changelog author="jack@suse.cz" date="1716552000">EA Inode handling fixes:
- ext2fs-avoid-re-reading-inode-multiple-times.patch: ext2fs: avoid re-reading
  inode multiple times (bsc#1223596)
- e2fsck-fix-potential-out-of-bounds-read-in-inc_ea_in.patch: e2fsck: fix
  potential out-of-bounds read in inc_ea_inode_refs() (bsc#1223596)
- e2fsck-add-more-checks-for-ea-inode-consistency.patch: e2fsck: add more
  checks for ea inode consistency (bsc#1223596)
- e2fsck-fix-golden-output-of-several-tests.patch: e2fsck: fix golden output of
  several tests (bsc#1223596)</changelog>
</package>
<package pkgid="b05f17f9b31998378e8f1c856364538adc4299d1a19788a05785c939803a2a0a" name="e2fsprogs" arch="src">
  <version epoch="0" ver="1.46.4" rel="150400.3.6.2"/>
  <changelog author="jack@suse.cz" date="1559304000">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
  <changelog author="jack@suse.cz" date="1716552000">EA Inode handling fixes:
- ext2fs-avoid-re-reading-inode-multiple-times.patch: ext2fs: avoid re-reading
  inode multiple times (bsc#1223596)
- e2fsck-fix-potential-out-of-bounds-read-in-inc_ea_in.patch: e2fsck: fix
  potential out-of-bounds read in inc_ea_inode_refs() (bsc#1223596)
- e2fsck-add-more-checks-for-ea-inode-consistency.patch: e2fsck: add more
  checks for ea inode consistency (bsc#1223596)
- e2fsck-fix-golden-output-of-several-tests.patch: e2fsck: fix golden output of
  several tests (bsc#1223596)</changelog>
</package>
<package pkgid="84f046176e218bb7b8fc8e1119cc60741ca7b7727159bfd51c090ca72363972f" name="e2fsprogs" arch="x86_64">
  <version epoch="0" ver="1.46.4" rel="150400.3.6.2"/>
  <changelog author="jack@suse.cz" date="1559304000">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
  <changelog author="jack@suse.cz" date="1716552000">EA Inode handling fixes:
- ext2fs-avoid-re-reading-inode-multiple-times.patch: ext2fs: avoid re-reading
  inode multiple times (bsc#1223596)
- e2fsck-fix-potential-out-of-bounds-read-in-inc_ea_in.patch: e2fsck: fix
  potential out-of-bounds read in inc_ea_inode_refs() (bsc#1223596)
- e2fsck-add-more-checks-for-ea-inode-consistency.patch: e2fsck: add more
  checks for ea inode consistency (bsc#1223596)
- e2fsck-fix-golden-output-of-several-tests.patch: e2fsck: fix golden output of
  several tests (bsc#1223596)</changelog>
</package>
<package pkgid="c836a55d2f67fa6618dd7f1680f08d14f94d83f23eb0f4eca5530a6ca6083bee" name="efibootmgr" arch="aarch64">
  <version epoch="0" ver="17" rel="150400.3.2.2"/>
  <changelog author="glin@suse.com" date="1414584000">- Update version number to 0.11.0
- Rebase patches
  (efibootmgr-0.11.0-derhat.diff,
  efibootmgr-0.11.0-check-boot-order.diff)
- Drop efibootmgr-0.6.0-set_boot_order.diff since the data size of
  the variable is handled properly now
- Drop efibootmgr-0.6.0-fail-visibly.diff since err() and warn()
  are introduced to show more meaningful messages
- Drop upstreamed patch
  (efibootmgr-0.6.0-gcc-Wall.diff,
  efibootmgr-0.6.0-write-unique-id-once.diff)</changelog>
  <changelog author="dmueller@suse.com" date="1414756800">- efibootmgr-0.6.0-check-boot-order.diff, efibootmgr-0.6.0-derhat.diff:
  pass source validator check
- switch homepage to https://github.com/vathpela/efibootmgr</changelog>
  <changelog author="mpluskal@suse.com" date="1419249600">- Enable i586 build</changelog>
  <changelog author="rw@suse.com" date="1422619200">- Introduce partition UUID as selector for delete.  [bsc#870211]
  (efibootmgr-0.6.0-delete-by-uuid.diff)</changelog>
  <changelog author="rw@suse.com" date="1426075200">- Allow disk/partition as selector for delete as well.  [bsc#870211]
  (efibootmgr-delete-multiple.diff)
- Remove version number from patches.
  (add efibootmgr-derhat.diff, efibootmgr-fail-visibly.diff,
  efibootmgr-gcc-Wall.diff, efibootmgr-set_boot_order.diff,
  efibootmgr-write-unique-id-once.diff;
  drop efibootmgr-0.6.0-check-boot-order.diff,
  efibootmgr-0.6.0-delete-by-uuid.diff, efibootmgr-0.6.0-derhat.diff,
  efibootmgr-0.6.0-fail-visibly.diff, efibootmgr-0.6.0-gcc-Wall.diff,
  efibootmgr-0.6.0-set_boot_order.diff,
  efibootmgr-0.6.0-write-unique-id-once.diff)
  Note: this entry reflects obsoleted, SLE-only changes!</changelog>
  <changelog author="mpluskal@suse.com" date="1434110400">- Update to 0.12
  * This release is mostly a maintenance release that uses
    libefivar's new library API for creating device paths and load
    options.
  * Also DHCPv4 network boot entries are now something you can
    create without knowing an awful lot about ACPI.
- Refresh patches
  efibootmgr-0.11.0-derhat.diff as efibootmgr-derhat.diff
  efibootmgr-0.11.0-check-boot-order.diff as
  efibootmgr-check-boot-order.diff
- Update project and download url</changelog>
  <changelog author="rw@suse.com" date="1437739200">- Refresh for SLE12.  [bsc#929677]
  (efibootmgr-gcc-Wall.diff, efibootmgr-delete-multiple.diff)</changelog>
  <changelog author="rw@suse.com" date="1442318400">- Properly latch long to short option for delete.  [bsc#945705]
  (efibootmgr-delete-multiple.diff)</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Add efibootmgr-fix-efivar-0.24.patch fix the compilation errors
  caused by the efivar update</changelog>
  <changelog author="rw@suse.com" date="1468497600">- Add support for Memory Address Range Mirroring.
  [fate#320999, bsc#987599]
  (add MARM-add-m-and-M-options.diff,
  MARM-fix-insufficient-validation-check-of-M-option.diff,
  MARM-introduce-man-for-m-and-M-option.diff,
  MARM-extend-man-for-M-option.diff,
  MARM-sanitize-set_mirror.diff)</changelog>
  <changelog author="arvidjaar@gmail.com" date="1471694400">- add efibootmgr-fix-usage-of-efi_loadopt_path-again.patch - fix
  efibootmgr -v with new efivar (boo#993458)</changelog>
  <changelog author="msuchanek@suse.com" date="1487246400">- Build on all archs. There is no reason not to. [boo#1025520]
- Depend on new enough efivar. Build fails otherwise.</changelog>
  <changelog author="rw@suse.com" date="1488542400">- Update to 14 plus upstream fixes.  [fate#322108]
  (0001-Don-t-use-fshort-wchar-when-building-63.patch,
  0002-Remove-extra-const-keywords-gcc-7-gripes-about.patch,
  0003-Add-support-for-parsing-optional-data-as-ucs2.patch)
- Forward port and refresh SLE patches
  (efibootmgr-derhat.diff, MARM-sanitize-set_mirror.diff
  efibootmgr-delete-multiple.diff)
- Drop upstreamed patches
  (efibootmgr-check-boot-order.diff,
  efibootmgr-fix-efivar-0.24.patch,
  efibootmgr-fix-usage-of-efi_loadopt_path-again.patch,
  MARM-add-m-and-M-options.diff,
  MARM-extend-man-for-M-option.diff,
  MARM-fix-insufficient-validation-check-of-M-option.diff,
  MARM-introduce-man-for-m-and-M-option.diff)</changelog>
  <changelog author="meissner@suse.com" date="1497096000">- forcefully enable PIE</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="info@paolostivanin.com" date="1627992000">- Update to v17:  [jsc#SLE-22542]
  * use efivar's logging facility more (more info in -v2 , -v3, etc)
  * Various bug fixes
  * Better -e parsing
  * fix pkg-config invocation for ldflags
  * Make efibootmgr use EFIDIR / efibootmgr.efidir like fwupdate does
  * make --loader default build-time configurable
  * sanitize set_mirror()/get_mirror()
  * Add support for parsing loader options as UCS2
  * GCC 7 fixes
  * Don't use -fshort-wchar since we don't run on EFI machines.
- Drop 0001-Don-t-use-fshort-wchar-when-building-63.patch (upstreamed)
- Drop 0002-Remove-extra-const-keywords-gcc-7-gripes-about.patch
  (upstreamed)
- Drop 0003-Add-support-for-parsing-optional-data-as-ucs2.patch
  (upstreamed)
- Drop MARM-sanitize-set_mirror.diff (upstreamed)
- Drop efibootmgr-derhat.diff (upstreamed)
- Rebase efibootmgr-delete-multiple.diff</changelog>
</package>
<package pkgid="f37363189d4a42f87e6ecc41ea084359c38548778a369a5a08db282dcaf22725" name="efibootmgr" arch="src">
  <version epoch="0" ver="17" rel="150400.3.2.2"/>
  <changelog author="rw@suse.com" date="1364385600">- Print EFI status for failed '--create' as well.  [bnc#811767]
  (efibootmgr-0.5.4-fail-visibly.diff)</changelog>
  <changelog author="rw@suse.com" date="1387454400">- Update version number to 0.6.0,
- Integrate SLE11 patches.  [bnc#830784]
  (efibootmgr-0.6.0-fail-visibly.diff,
  efibootmgr-0.6.0-set_boot_order.diff)
- Fix gcc warnings.
  (efibootmgr-0.6.0-gcc-Wall.diff)
- Make default '--loader' build-time configurable.
  (efibootmgr-0.6.0-derhat.diff)
- Don't let '--write-signature' overwrite unique signatures.
  (efibootmgr-0.6.0-write-unique-id-once.diff)
- Drop obsolete patches
  (efibootmgr-0.5.4.diff,
  efibootmgr-0.5.4-catchup.diff,
  efibootmgr-0.5.4-sector-size.diff)</changelog>
  <changelog author="glin@suse.com" date="1404734400">- Add efibootmgr-0.6.0-check-boot-order.diff to delete BootOrder
  if there is no more boot option. [bnc#883545]</changelog>
  <changelog author="schwab@suse.de" date="1410264000">- Enable for aarch64 [fate#318444]</changelog>
  <changelog author="glin@suse.com" date="1414584000">- Update version number to 0.11.0
- Rebase patches
  (efibootmgr-0.11.0-derhat.diff,
  efibootmgr-0.11.0-check-boot-order.diff)
- Drop efibootmgr-0.6.0-set_boot_order.diff since the data size of
  the variable is handled properly now
- Drop efibootmgr-0.6.0-fail-visibly.diff since err() and warn()
  are introduced to show more meaningful messages
- Drop upstreamed patch
  (efibootmgr-0.6.0-gcc-Wall.diff,
  efibootmgr-0.6.0-write-unique-id-once.diff)</changelog>
  <changelog author="dmueller@suse.com" date="1414756800">- efibootmgr-0.6.0-check-boot-order.diff, efibootmgr-0.6.0-derhat.diff:
  pass source validator check
- switch homepage to https://github.com/vathpela/efibootmgr</changelog>
  <changelog author="mpluskal@suse.com" date="1419249600">- Enable i586 build</changelog>
  <changelog author="rw@suse.com" date="1422619200">- Introduce partition UUID as selector for delete.  [bsc#870211]
  (efibootmgr-0.6.0-delete-by-uuid.diff)</changelog>
  <changelog author="rw@suse.com" date="1426075200">- Allow disk/partition as selector for delete as well.  [bsc#870211]
  (efibootmgr-delete-multiple.diff)
- Remove version number from patches.
  (add efibootmgr-derhat.diff, efibootmgr-fail-visibly.diff,
  efibootmgr-gcc-Wall.diff, efibootmgr-set_boot_order.diff,
  efibootmgr-write-unique-id-once.diff;
  drop efibootmgr-0.6.0-check-boot-order.diff,
  efibootmgr-0.6.0-delete-by-uuid.diff, efibootmgr-0.6.0-derhat.diff,
  efibootmgr-0.6.0-fail-visibly.diff, efibootmgr-0.6.0-gcc-Wall.diff,
  efibootmgr-0.6.0-set_boot_order.diff,
  efibootmgr-0.6.0-write-unique-id-once.diff)
  Note: this entry reflects obsoleted, SLE-only changes!</changelog>
  <changelog author="mpluskal@suse.com" date="1434110400">- Update to 0.12
  * This release is mostly a maintenance release that uses
    libefivar's new library API for creating device paths and load
    options.
  * Also DHCPv4 network boot entries are now something you can
    create without knowing an awful lot about ACPI.
- Refresh patches
  efibootmgr-0.11.0-derhat.diff as efibootmgr-derhat.diff
  efibootmgr-0.11.0-check-boot-order.diff as
  efibootmgr-check-boot-order.diff
- Update project and download url</changelog>
  <changelog author="rw@suse.com" date="1437739200">- Refresh for SLE12.  [bsc#929677]
  (efibootmgr-gcc-Wall.diff, efibootmgr-delete-multiple.diff)</changelog>
  <changelog author="rw@suse.com" date="1442318400">- Properly latch long to short option for delete.  [bsc#945705]
  (efibootmgr-delete-multiple.diff)</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Add efibootmgr-fix-efivar-0.24.patch fix the compilation errors
  caused by the efivar update</changelog>
  <changelog author="rw@suse.com" date="1468497600">- Add support for Memory Address Range Mirroring.
  [fate#320999, bsc#987599]
  (add MARM-add-m-and-M-options.diff,
  MARM-fix-insufficient-validation-check-of-M-option.diff,
  MARM-introduce-man-for-m-and-M-option.diff,
  MARM-extend-man-for-M-option.diff,
  MARM-sanitize-set_mirror.diff)</changelog>
  <changelog author="arvidjaar@gmail.com" date="1471694400">- add efibootmgr-fix-usage-of-efi_loadopt_path-again.patch - fix
  efibootmgr -v with new efivar (boo#993458)</changelog>
  <changelog author="msuchanek@suse.com" date="1487246400">- Build on all archs. There is no reason not to. [boo#1025520]
- Depend on new enough efivar. Build fails otherwise.</changelog>
  <changelog author="rw@suse.com" date="1488542400">- Update to 14 plus upstream fixes.  [fate#322108]
  (0001-Don-t-use-fshort-wchar-when-building-63.patch,
  0002-Remove-extra-const-keywords-gcc-7-gripes-about.patch,
  0003-Add-support-for-parsing-optional-data-as-ucs2.patch)
- Forward port and refresh SLE patches
  (efibootmgr-derhat.diff, MARM-sanitize-set_mirror.diff
  efibootmgr-delete-multiple.diff)
- Drop upstreamed patches
  (efibootmgr-check-boot-order.diff,
  efibootmgr-fix-efivar-0.24.patch,
  efibootmgr-fix-usage-of-efi_loadopt_path-again.patch,
  MARM-add-m-and-M-options.diff,
  MARM-extend-man-for-M-option.diff,
  MARM-fix-insufficient-validation-check-of-M-option.diff,
  MARM-introduce-man-for-m-and-M-option.diff)</changelog>
  <changelog author="meissner@suse.com" date="1497096000">- forcefully enable PIE</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="info@paolostivanin.com" date="1627992000">- Update to v17:  [jsc#SLE-22542]
  * use efivar's logging facility more (more info in -v2 , -v3, etc)
  * Various bug fixes
  * Better -e parsing
  * fix pkg-config invocation for ldflags
  * Make efibootmgr use EFIDIR / efibootmgr.efidir like fwupdate does
  * make --loader default build-time configurable
  * sanitize set_mirror()/get_mirror()
  * Add support for parsing loader options as UCS2
  * GCC 7 fixes
  * Don't use -fshort-wchar since we don't run on EFI machines.
- Drop 0001-Don-t-use-fshort-wchar-when-building-63.patch (upstreamed)
- Drop 0002-Remove-extra-const-keywords-gcc-7-gripes-about.patch
  (upstreamed)
- Drop 0003-Add-support-for-parsing-optional-data-as-ucs2.patch
  (upstreamed)
- Drop MARM-sanitize-set_mirror.diff (upstreamed)
- Drop efibootmgr-derhat.diff (upstreamed)
- Rebase efibootmgr-delete-multiple.diff</changelog>
</package>
<package pkgid="51f73df6e9a9a658a7b884b206914891ab87a2c919cb13998af33e544db630a0" name="efibootmgr" arch="x86_64">
  <version epoch="0" ver="17" rel="150400.3.2.2"/>
  <changelog author="glin@suse.com" date="1414584000">- Update version number to 0.11.0
- Rebase patches
  (efibootmgr-0.11.0-derhat.diff,
  efibootmgr-0.11.0-check-boot-order.diff)
- Drop efibootmgr-0.6.0-set_boot_order.diff since the data size of
  the variable is handled properly now
- Drop efibootmgr-0.6.0-fail-visibly.diff since err() and warn()
  are introduced to show more meaningful messages
- Drop upstreamed patch
  (efibootmgr-0.6.0-gcc-Wall.diff,
  efibootmgr-0.6.0-write-unique-id-once.diff)</changelog>
  <changelog author="dmueller@suse.com" date="1414756800">- efibootmgr-0.6.0-check-boot-order.diff, efibootmgr-0.6.0-derhat.diff:
  pass source validator check
- switch homepage to https://github.com/vathpela/efibootmgr</changelog>
  <changelog author="mpluskal@suse.com" date="1419249600">- Enable i586 build</changelog>
  <changelog author="rw@suse.com" date="1422619200">- Introduce partition UUID as selector for delete.  [bsc#870211]
  (efibootmgr-0.6.0-delete-by-uuid.diff)</changelog>
  <changelog author="rw@suse.com" date="1426075200">- Allow disk/partition as selector for delete as well.  [bsc#870211]
  (efibootmgr-delete-multiple.diff)
- Remove version number from patches.
  (add efibootmgr-derhat.diff, efibootmgr-fail-visibly.diff,
  efibootmgr-gcc-Wall.diff, efibootmgr-set_boot_order.diff,
  efibootmgr-write-unique-id-once.diff;
  drop efibootmgr-0.6.0-check-boot-order.diff,
  efibootmgr-0.6.0-delete-by-uuid.diff, efibootmgr-0.6.0-derhat.diff,
  efibootmgr-0.6.0-fail-visibly.diff, efibootmgr-0.6.0-gcc-Wall.diff,
  efibootmgr-0.6.0-set_boot_order.diff,
  efibootmgr-0.6.0-write-unique-id-once.diff)
  Note: this entry reflects obsoleted, SLE-only changes!</changelog>
  <changelog author="mpluskal@suse.com" date="1434110400">- Update to 0.12
  * This release is mostly a maintenance release that uses
    libefivar's new library API for creating device paths and load
    options.
  * Also DHCPv4 network boot entries are now something you can
    create without knowing an awful lot about ACPI.
- Refresh patches
  efibootmgr-0.11.0-derhat.diff as efibootmgr-derhat.diff
  efibootmgr-0.11.0-check-boot-order.diff as
  efibootmgr-check-boot-order.diff
- Update project and download url</changelog>
  <changelog author="rw@suse.com" date="1437739200">- Refresh for SLE12.  [bsc#929677]
  (efibootmgr-gcc-Wall.diff, efibootmgr-delete-multiple.diff)</changelog>
  <changelog author="rw@suse.com" date="1442318400">- Properly latch long to short option for delete.  [bsc#945705]
  (efibootmgr-delete-multiple.diff)</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Add efibootmgr-fix-efivar-0.24.patch fix the compilation errors
  caused by the efivar update</changelog>
  <changelog author="rw@suse.com" date="1468497600">- Add support for Memory Address Range Mirroring.
  [fate#320999, bsc#987599]
  (add MARM-add-m-and-M-options.diff,
  MARM-fix-insufficient-validation-check-of-M-option.diff,
  MARM-introduce-man-for-m-and-M-option.diff,
  MARM-extend-man-for-M-option.diff,
  MARM-sanitize-set_mirror.diff)</changelog>
  <changelog author="arvidjaar@gmail.com" date="1471694400">- add efibootmgr-fix-usage-of-efi_loadopt_path-again.patch - fix
  efibootmgr -v with new efivar (boo#993458)</changelog>
  <changelog author="msuchanek@suse.com" date="1487246400">- Build on all archs. There is no reason not to. [boo#1025520]
- Depend on new enough efivar. Build fails otherwise.</changelog>
  <changelog author="rw@suse.com" date="1488542400">- Update to 14 plus upstream fixes.  [fate#322108]
  (0001-Don-t-use-fshort-wchar-when-building-63.patch,
  0002-Remove-extra-const-keywords-gcc-7-gripes-about.patch,
  0003-Add-support-for-parsing-optional-data-as-ucs2.patch)
- Forward port and refresh SLE patches
  (efibootmgr-derhat.diff, MARM-sanitize-set_mirror.diff
  efibootmgr-delete-multiple.diff)
- Drop upstreamed patches
  (efibootmgr-check-boot-order.diff,
  efibootmgr-fix-efivar-0.24.patch,
  efibootmgr-fix-usage-of-efi_loadopt_path-again.patch,
  MARM-add-m-and-M-options.diff,
  MARM-extend-man-for-M-option.diff,
  MARM-fix-insufficient-validation-check-of-M-option.diff,
  MARM-introduce-man-for-m-and-M-option.diff)</changelog>
  <changelog author="meissner@suse.com" date="1497096000">- forcefully enable PIE</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="info@paolostivanin.com" date="1627992000">- Update to v17:  [jsc#SLE-22542]
  * use efivar's logging facility more (more info in -v2 , -v3, etc)
  * Various bug fixes
  * Better -e parsing
  * fix pkg-config invocation for ldflags
  * Make efibootmgr use EFIDIR / efibootmgr.efidir like fwupdate does
  * make --loader default build-time configurable
  * sanitize set_mirror()/get_mirror()
  * Add support for parsing loader options as UCS2
  * GCC 7 fixes
  * Don't use -fshort-wchar since we don't run on EFI machines.
- Drop 0001-Don-t-use-fshort-wchar-when-building-63.patch (upstreamed)
- Drop 0002-Remove-extra-const-keywords-gcc-7-gripes-about.patch
  (upstreamed)
- Drop 0003-Add-support-for-parsing-optional-data-as-ucs2.patch
  (upstreamed)
- Drop MARM-sanitize-set_mirror.diff (upstreamed)
- Drop efibootmgr-derhat.diff (upstreamed)
- Rebase efibootmgr-delete-multiple.diff</changelog>
</package>
<package pkgid="0818c0efe11578fb26b103d4df76aab587b33d7569846a3576dbfb02b22c1861" name="expat" arch="src">
  <version epoch="0" ver="2.4.4" rel="150400.3.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1562068800">- Version update to 2.2.7 (CVE-2018-20843, bsc#1139937)
  * Security fixes:
  - CVE-2018-20843 - Fix extraction of namespace prefixes from
    XML names; XML names with multiple colons could end up in
    the wrong namespace, and take a high amount of RAM and CPU
    resources while processing, opening the door to use for
    denial-of-service attacks
  * Other changes:
  - Autotools/CMake: Utilize -fvisibility=hidden to stop
    exporting non-API symbols
  - Autotools: Add --without-examples and --without-tests
  - Autotools: Modernize configure.ac
  - Autotools: Fix check for -fvisibility=hidden for Clang
  - Autotools: Fix compilation for lack of docbook2x-man
  - CMake: Make libdir of pkgconfig expat.pc support multilib
  - CMake: Build man page in PROJECT_BINARY_DIR not _SOURCE_DIR
  - Remove fallback to bcopy, assume that memmove(3) exists
- Removed expat-2.2.6-fix-make-clean.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567598400">- Security fix (CVE-2019-15903, bsc#1149429)
  * Crafted XML input results in heap-based buffer over-read by fooling
    the parser into changing from DTD parsing to document parsing
  * Added patches:
  - expat-CVE-2019-15903.patch
  - expat-CVE-2019-15903-tests.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568635200">- Version update to 2.2.8
  * Security fixes: (CVE-2019-15903, bsc#1149429)
  - CVE-2019-15903 -- Fix heap overflow triggered by XML_GetCurrentLineNumber
    (or XML_GetCurrentColumnNumber), and deny internal entities closing the doctype;
  * Bug fixes:
  - Fix cases where XML_StopParser did not have any effect
    when called from inside of an end element handler
  - xmlwf: Fix exit code for operation without "-d DIRECTORY";
    previously, only "-d DIRECTORY" would give you a proper exit code:
    Now both cases return exit code 2.
  * Other changes:
  - examples: Improve elements.c
  - Autotools: Add argument --enable-xml-attr-info
  - Autotools: Add arguments --with-getrandom --without-getrandom --with-sys-getrandom --without-sys-getrandom
  - Autotools: Fix linking issues with "./configure LD=clang"
  - Autotools: Fix "make run-xmltest" for out-of-source builds
  - CMake: Pull all options from Expat &lt;=2.2.7 into namespace
  - CMake: Add argument -DEXPAT_ATTR_INFO=(ON|OFF), default OFF
  - CMake: Add argument -DEXPAT_LARGE_SIZE=(ON|OFF), default OFF
  - CMake: Add argument -DEXPAT_MIN_SIZE=(ON|OFF), default OFF
  - CMake: Add arguments -DEXPAT_WITH_GETRANDOM=(ON|OFF|AUTO), default AUTO
  - CMake: Add arguments -DEXPAT_WITH_SYS_GETRANDOM=(ON|OFF|AUTO), default AUTO
  - CMake: Install expat_config.h to include directory
  - CMake: Generate and install configuration files for future find_package(expat [..] CONFIG [..])
  - CMake: Now produces a summary of applied configuration
  - CMake: Require C++ compiler only when tests are enabled
  - CMake: Fix compilation for 16bit character types, i.e. ex -DXML_UNICODE=ON (and ex -DXML_UNICODE_WCHAR_T=ON)
  - CMake: Port "make run-xmltest" from GNU Autotools to CMake
  - CMake: Integrate OSS-Fuzz fuzzers, option -DEXPAT_BUILD_FUZZERS=(ON|OFF), default OFF
- Removed patches fixed in the update:
  * expat-CVE-2019-15903.patch
  * expat-CVE-2019-15903-tests.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1575028800">- Version update to 2.2.9
  * Other changes:
  - examples: Drop executable bits from elements.c
    [#349]  Windows: Change the name of the Windows DLLs from expat*.dll
    to libexpat*.dll once more (regression from 2.2.8, first
    fixed in 1.95.3, issue #61 on SourceForge today,
    was issue #432456 back then); needs a fix due
    case-insensitive file systems on Windows and the fact that
    Perl's XML::Parser::Expat compiles into Expat.dll.
    [#347]  Windows: Only define _CRT_RAND_S if not defined
    Version info bumped from 7:10:6 to 7:11:6</changelog>
  <changelog author="pmonreal@suse.com" date="1601812800">- Update to 2.2.10:
  * Bug fixes:
  - Fix undefined behavior during parsing caused by pointer
    arithmetic with NULL pointers
  - Fix reading uninitialized variable during parsing
  - xmlwf: Add missing check for malloc NULL return
  * Other changes:
  - xmlwf: Document exit codes in xmlwf manpage and exit with code 3
    (rather than code 1) for output errors when used with "-d DIRECTORY"
  - Autotools: Use -Werror while configure tests the compiler for
    supported compile flags to avoid false positives
  - Autotools: Improve handling of user (C|CPP|CXX|LD)FLAGS, e.g.
    ensure that they have the last word over flags added while
    running ./configure
  - CMake: Create libexpatw.{dll,so} and expatw.pc (with emphasis
    on suffix "w") with -DEXPAT_CHAR_TYPE=(ushort|wchar_t)
  - CMake: Detect and deny unsupported build combinations
    involving -DEXPAT_CHAR_TYPE=(ushort|wchar_t)
  - CMake: Install pre-compiled shipped xmlwf.1 manpage in case
    of -DEXPAT_BUILD_DOCS=OFF
  - CMake: Fix use of Expat by means of add_subdirectory
  - CMake: Keep expat target name constant at "expat" (i.e. refrain
    from using the target name to control build artifact filenames)
  - CMake: Expose man page compilation as target "xmlwf-manpage"
  - CMake: Introduce option EXPAT_BUILD_PKGCONFIG to control
    generation of pkg-config file "expat.pc"
  - CMake: Add minimalistic support for building binary packages
    with CMake target "package"; based on CPack
  - CMake: Add option -DEXPAT_OSSFUZZ_BUILD=(ON|OFF) with default
    OFF to build fuzzer code against OSS-Fuzz and related
    environment variable LIB_FUZZING_ENGINE
  - Fix testsuite for -DEXPAT_DTD=OFF and -DEXPAT_NS=OFF
  - Address compiler warnings
  - Address pngcheck warnings with doc/*.png images: Version info
    bumped from 7:11:6 to 7:12:6</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- update to 2.3.0:
  * When calling XML_ParseBuffer without a prior successful call to
    XML_GetBuffer as a user, no longer trigger undefined behavior
    (by adding an integer to a NULL pointer) but rather return
    XML_STATUS_ERROR and set the error code to (new) code
    XML_ERROR_NO_BUFFER. Found by UBSan (UndefinedBehaviorSanitizer)
    of Clang 11 (but not Clang 9).
  * xmlwf: Exit status 2 was used for both:
  - malformed input files (documented) and
  - invalid command-line arguments (undocumented).
    case of invalid command-line arguments now
    has its own exit status 4, resolving the ambiguity.
  * Other changes</changelog>
  <changelog author="dimstar@opensuse.org" date="1618315200">- Do not BuildRequire cmake: expat is part of the distro bootstrap
  cycle and any additional dependency makes the ring larger. In
  this case here, cmake was even only used to own a directory.</changelog>
  <changelog author="pmonreal@suse.com" date="1621857600">- Update to 2.4.0: [CVE-2013-0340 "Billion Laughs"]
  * Security fixes:
  - CVE-2013-0340/CWE-776 -- Protect against billion laughs attacks
    (denial-of-service; flavors targeting CPU time or RAM or both,
    leveraging general entities or parameter entities or both)
    by tracking and limiting the input amplification factor
    (&lt;amplification&gt; := (&lt;direct&gt; + &lt;indirect&gt;) / &lt;direct&gt;).
    By conservative default, amplification up to a factor of 100.0
    is tolerated and rejection only starts after 8 MiB of output bytes
    (=&lt;direct&gt; + &lt;indirect&gt;) have been processed.
    The fix adds the following to the API:
  - A new error code XML_ERROR_AMPLIFICATION_LIMIT_BREACH to
    signals this specific condition.
  - Two new API functions ..
  - XML_SetBillionLaughsAttackProtectionMaximumAmplification and
  - XML_SetBillionLaughsAttackProtectionActivationThreshold
    .. to further tighten billion laughs protection parameters
    when desired.  Please see file "doc/reference.html" for details.
    If you ever need to increase the defaults for non-attack XML
    payload, please file a bug report with libexpat.
  - Two new XML_FEATURE_* constants ..
  - that can be queried using the XML_GetFeatureList function, and
  - that are shown in "xmlwf -v" output.
  - Two new environment variable switches ..
  - EXPAT_ACCOUNTING_DEBUG=(0|1|2|3) and
  - EXPAT_ENTITY_DEBUG=(0|1)
    .. for runtime debugging of accounting and entity processing.
    Specific behavior of these values may change in the future.
  - Two new command line arguments "-a FACTOR" and "-b BYTES"
    for xmlwf to further tighten billion laughs protection
    parameters when desired.
    If you ever need to increase the defaults for non-attack XML
    payload, please file a bug report with libexpat.
  * Bug fixes:
  - For (non-default) compilation with -DEXPAT_MIN_SIZE=ON (CMake)
    or CPPFLAGS=-DXML_MIN_SIZE (GNU Autotools): Fix segfault
    for UTF-16 payloads containing CDATA sections.
  - Autotools: Fix generated CMake files for non-64bit and
    non-Linux platforms (e.g. macOS and MinGW in particular)
    that were introduced with release 2.3.0
  * Other changes:
  - xmlwf: Improve help output and the xmlwf man page
  - xmlwf: Improve maintainability through some refactoring
  - xmlwf: Fix man page DocBook validity
  - CMake: Support absolute paths for both CMAKE_INSTALL_LIBDIR
    and CMAKE_INSTALL_INCLUDEDIR
  - CMake: Add support for standard variable BUILD_SHARED_LIBS
  - Unexpose symbol _INTERNAL_trim_to_complete_utf8_characters
  - Resolve macro HAVE_EXPAT_CONFIG_H
  - Delete unused legacy helper file "conftools/PrintPath"
  - doc/reference.html: Fix XHTML validity
  - doc/reference.html: Replace the 90s look by OK.css
  - Version info bumped from 8:0:7 to 9:0:8 due to addition of
    new symbols and error codes; see https://verbump.de/ for
    what these numbers do</changelog>
  <changelog author="pmonreal@suse.com" date="1621857601">- Update to 2.4.1:
  * Bug fixes:
  - Autotools: Fix installed header expat_config.h for multilib
    systems; regression introduced in 2.4.0 by pull request #486
  * Other changes:
  - Version info bumped from 9:0:8 to 9:1:8; see
    https://verbump.de/ for what these numbers do</changelog>
  <changelog author="pmonreal@suse.com" date="1631016000">- Update to 2.4.1 in SLE-15-SP4 [jsc#SLE-21253]
  * Remove expat-CVE-2018-20843.patch upstream</changelog>
  <changelog author="dmueller@suse.com" date="1640606400">- update to 2.4.2:
  * Link againgst libm for function "isnan"
  * Include expat_config.h as early as possible
  * Autotools: Include files with release archives:
  - buildconf.sh
  - fuzz/*.c
  * Autotools: Sync CMake templates
  * docs: Document that function XML_GetBuffer may return NULL
    when asking for a buffer of 0 (zero) bytes size
  * docs: Fix return value docs for both
    XML_SetBillionLaughsAttackProtection* functions
  * Version info bumped from 9:1:8 to 9:2:8</changelog>
  <changelog author="dmueller@suse.com" date="1642420800">- update to 2.4.3 (bsc#1194251, bsc#1194362, bsc#1194474,
    bsc#1194476, bsc#1194477, bsc#1194478, bsc#1194479, bsc#1194480):
  * CVE-2021-45960 -- Fix issues with left shifts by &gt;=29 places
    resulting in
    a) realloc acting as free
    b) realloc allocating too few bytes
    c) undefined behavior
    depending on architecture and precise value
    for XML documents with &gt;=2^27+1 prefixed attributes
    on a single XML tag a la
    "&lt;r xmlns:a='[..]' a:a123='[..]' [..] /&gt;"
    where XML_ParserCreateNS is used to create the parser
    (which needs argument "-n" when running xmlwf).
    Impact is denial of service, or more.
  * CVE-2021-46143 (ZDI-CAN-16157) -- Fix integer overflow
    on variable m_groupSize in function doProlog leading
    to realloc acting as free.
    Impact is denial of service or more.
  * CVE-2022-22822 to CVE-2022-22827 -- Prevent integer overflows
    near memory allocation at multiple places.  Mitre assigned
    a dedicated CVE for each involved internal C function:
  - CVE-2022-22822 for function addBinding
  - CVE-2022-22823 for function build_model
  - CVE-2022-22824 for function defineAttribute
  - CVE-2022-22825 for function lookup
  - CVE-2022-22826 for function nextScaffoldPart
  - CVE-2022-22827 for function storeAtts
    Impact is denial of service or more.</changelog>
  <changelog author="david.anes@suse.com" date="1643630400">- update to 2.4.4 (bsc#1195217, bsc#1195054):
  * Security fixes:
  - CVE-2022-23852 -- Fix signed integer overflow
    (undefined behavior) in function XML_GetBuffer
    that is also called by function XML_Parse internally)
    for when XML_CONTEXT_BYTES is defined to &gt;0 (which is both
    common and default).
    Impact is denial of service or more.
  - CVE-2022-23990 -- Fix unsigned integer overflow in function
    doProlog triggered by large content in element type
    declarations when there is an element declaration handler
    present (from a prior call to XML_SetElementDeclHandler).
    Impact is denial of service or more.
  * Bug fixes:
  - xmlwf: Fix a memory leak on output file opening error
  * Other changes:
  - Version info bumped from 9:3:8 to 9:4:8;
    see https://verbump.de/ for what these numbers do
  * Drop unused file valid-xhtml10.png</changelog>
  <changelog author="david.anes@suse.com" date="1643716800">- Update to latest version 2.4.4 in SLE-15-SP4 [jsc#SLE-21253]</changelog>
  <changelog author="david.anes@suse.com" date="1645444800">- Security fixes:
  * (CVE-2022-25236, bsc#1196025) Expat before 2.4.5 allows
    attackers to insert namespace-separator characters into
    namespace URIs
  - Added expat-CVE-2022-25236.patch
  * (CVE-2022-25235, bsc#1196026) xmltok_impl.c in Expat before
    2.4.5 does not check whether a UTF-8 character is valid in a
    certain context.
  - Added expat-CVE-2022-25235.patch
  * (CVE-2022-25313, bsc#1196168) Stack exhaustion in
    build_model() via uncontrolled recursion
  - Added expat-CVE-2022-25313.patch
  - The fix upstream introduced a regression that was later
    amended in 2.4.6 version
    + Added expat-CVE-2022-25313-fix-regression.patch
  * (CVE-2022-25314, bsc#1196169) Integer overflow in copyString
  - Added expat-CVE-2022-25314.patch
  * (CVE-2022-25315, bsc#1196171) Integer overflow in storeRawNames
  - Added expat-CVE-2022-25315.patch</changelog>
  <changelog author="david.anes@suse.com" date="1646481600">- Security fixes:
  * (CVE-2022-25236, bsc#1196784) [&gt;=2.4.5] Fix to CVE-2022-25236
    breaks biboumi, ClairMeta, jxmlease, libwbxml,
    openleadr-python, rnv, xmltodict
  - Added expat-CVE-2022-25236-relax-fix.patch</changelog>
  <changelog author="david.anes@suse.com" date="1664193600">- Security fix:
  * (CVE-2022-40674, bsc#1203438) use-after-free in the doContent
    function in xmlparse.c
  - Added patch expat-CVE-2022-40674.patch</changelog>
  <changelog author="david.anes@suse.com" date="1666785600">- Security fix:
  * (CVE-2022-43680, bsc#1204708) use-after free caused by overeager
    destruction of a shared DTD in XML_ExternalEntityParserCreate in
    out-of-memory situations
  - Added patch expat-CVE-2022-43680.patch</changelog>
  <changelog author="david.anes@suse.com" date="1708084800">- Security fix:
  * (CVE-2023-52425, bsc#1219559) denial of service (resource
    consumption) caused by processing large tokens.
  - Added patch expat-CVE-2023-52425-1.patch
  - Added patch expat-CVE-2023-52425-2.patch
  - Added patch expat-CVE-2023-52425-backport-parser-changes.patch
  - Added patch expat-CVE-2023-52425-fix-tests.patch</changelog>
  <changelog author="david.anes@suse.com" date="1710763200">- Security fix (boo#1221289, CVE-2024-28757): XML Entity Expansion
  attack when there is isolated use of external parsers.
  * Added expat-CVE-2024-28757.patch</changelog>
</package>
<package pkgid="06cce7f7c0ce6976237371548f7d7f24bd57b92b8ba426edbb34d35997e1de73" name="expat" arch="src">
  <version epoch="0" ver="2.4.4" rel="150400.3.22.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1567598400">- Security fix (CVE-2019-15903, bsc#1149429)
  * Crafted XML input results in heap-based buffer over-read by fooling
    the parser into changing from DTD parsing to document parsing
  * Added patches:
  - expat-CVE-2019-15903.patch
  - expat-CVE-2019-15903-tests.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568635200">- Version update to 2.2.8
  * Security fixes: (CVE-2019-15903, bsc#1149429)
  - CVE-2019-15903 -- Fix heap overflow triggered by XML_GetCurrentLineNumber
    (or XML_GetCurrentColumnNumber), and deny internal entities closing the doctype;
  * Bug fixes:
  - Fix cases where XML_StopParser did not have any effect
    when called from inside of an end element handler
  - xmlwf: Fix exit code for operation without "-d DIRECTORY";
    previously, only "-d DIRECTORY" would give you a proper exit code:
    Now both cases return exit code 2.
  * Other changes:
  - examples: Improve elements.c
  - Autotools: Add argument --enable-xml-attr-info
  - Autotools: Add arguments --with-getrandom --without-getrandom --with-sys-getrandom --without-sys-getrandom
  - Autotools: Fix linking issues with "./configure LD=clang"
  - Autotools: Fix "make run-xmltest" for out-of-source builds
  - CMake: Pull all options from Expat &lt;=2.2.7 into namespace
  - CMake: Add argument -DEXPAT_ATTR_INFO=(ON|OFF), default OFF
  - CMake: Add argument -DEXPAT_LARGE_SIZE=(ON|OFF), default OFF
  - CMake: Add argument -DEXPAT_MIN_SIZE=(ON|OFF), default OFF
  - CMake: Add arguments -DEXPAT_WITH_GETRANDOM=(ON|OFF|AUTO), default AUTO
  - CMake: Add arguments -DEXPAT_WITH_SYS_GETRANDOM=(ON|OFF|AUTO), default AUTO
  - CMake: Install expat_config.h to include directory
  - CMake: Generate and install configuration files for future find_package(expat [..] CONFIG [..])
  - CMake: Now produces a summary of applied configuration
  - CMake: Require C++ compiler only when tests are enabled
  - CMake: Fix compilation for 16bit character types, i.e. ex -DXML_UNICODE=ON (and ex -DXML_UNICODE_WCHAR_T=ON)
  - CMake: Port "make run-xmltest" from GNU Autotools to CMake
  - CMake: Integrate OSS-Fuzz fuzzers, option -DEXPAT_BUILD_FUZZERS=(ON|OFF), default OFF
- Removed patches fixed in the update:
  * expat-CVE-2019-15903.patch
  * expat-CVE-2019-15903-tests.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1575028800">- Version update to 2.2.9
  * Other changes:
  - examples: Drop executable bits from elements.c
    [#349]  Windows: Change the name of the Windows DLLs from expat*.dll
    to libexpat*.dll once more (regression from 2.2.8, first
    fixed in 1.95.3, issue #61 on SourceForge today,
    was issue #432456 back then); needs a fix due
    case-insensitive file systems on Windows and the fact that
    Perl's XML::Parser::Expat compiles into Expat.dll.
    [#347]  Windows: Only define _CRT_RAND_S if not defined
    Version info bumped from 7:10:6 to 7:11:6</changelog>
  <changelog author="pmonreal@suse.com" date="1601812800">- Update to 2.2.10:
  * Bug fixes:
  - Fix undefined behavior during parsing caused by pointer
    arithmetic with NULL pointers
  - Fix reading uninitialized variable during parsing
  - xmlwf: Add missing check for malloc NULL return
  * Other changes:
  - xmlwf: Document exit codes in xmlwf manpage and exit with code 3
    (rather than code 1) for output errors when used with "-d DIRECTORY"
  - Autotools: Use -Werror while configure tests the compiler for
    supported compile flags to avoid false positives
  - Autotools: Improve handling of user (C|CPP|CXX|LD)FLAGS, e.g.
    ensure that they have the last word over flags added while
    running ./configure
  - CMake: Create libexpatw.{dll,so} and expatw.pc (with emphasis
    on suffix "w") with -DEXPAT_CHAR_TYPE=(ushort|wchar_t)
  - CMake: Detect and deny unsupported build combinations
    involving -DEXPAT_CHAR_TYPE=(ushort|wchar_t)
  - CMake: Install pre-compiled shipped xmlwf.1 manpage in case
    of -DEXPAT_BUILD_DOCS=OFF
  - CMake: Fix use of Expat by means of add_subdirectory
  - CMake: Keep expat target name constant at "expat" (i.e. refrain
    from using the target name to control build artifact filenames)
  - CMake: Expose man page compilation as target "xmlwf-manpage"
  - CMake: Introduce option EXPAT_BUILD_PKGCONFIG to control
    generation of pkg-config file "expat.pc"
  - CMake: Add minimalistic support for building binary packages
    with CMake target "package"; based on CPack
  - CMake: Add option -DEXPAT_OSSFUZZ_BUILD=(ON|OFF) with default
    OFF to build fuzzer code against OSS-Fuzz and related
    environment variable LIB_FUZZING_ENGINE
  - Fix testsuite for -DEXPAT_DTD=OFF and -DEXPAT_NS=OFF
  - Address compiler warnings
  - Address pngcheck warnings with doc/*.png images: Version info
    bumped from 7:11:6 to 7:12:6</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- update to 2.3.0:
  * When calling XML_ParseBuffer without a prior successful call to
    XML_GetBuffer as a user, no longer trigger undefined behavior
    (by adding an integer to a NULL pointer) but rather return
    XML_STATUS_ERROR and set the error code to (new) code
    XML_ERROR_NO_BUFFER. Found by UBSan (UndefinedBehaviorSanitizer)
    of Clang 11 (but not Clang 9).
  * xmlwf: Exit status 2 was used for both:
  - malformed input files (documented) and
  - invalid command-line arguments (undocumented).
    case of invalid command-line arguments now
    has its own exit status 4, resolving the ambiguity.
  * Other changes</changelog>
  <changelog author="dimstar@opensuse.org" date="1618315200">- Do not BuildRequire cmake: expat is part of the distro bootstrap
  cycle and any additional dependency makes the ring larger. In
  this case here, cmake was even only used to own a directory.</changelog>
  <changelog author="pmonreal@suse.com" date="1621857600">- Update to 2.4.0: [CVE-2013-0340 "Billion Laughs"]
  * Security fixes:
  - CVE-2013-0340/CWE-776 -- Protect against billion laughs attacks
    (denial-of-service; flavors targeting CPU time or RAM or both,
    leveraging general entities or parameter entities or both)
    by tracking and limiting the input amplification factor
    (&lt;amplification&gt; := (&lt;direct&gt; + &lt;indirect&gt;) / &lt;direct&gt;).
    By conservative default, amplification up to a factor of 100.0
    is tolerated and rejection only starts after 8 MiB of output bytes
    (=&lt;direct&gt; + &lt;indirect&gt;) have been processed.
    The fix adds the following to the API:
  - A new error code XML_ERROR_AMPLIFICATION_LIMIT_BREACH to
    signals this specific condition.
  - Two new API functions ..
  - XML_SetBillionLaughsAttackProtectionMaximumAmplification and
  - XML_SetBillionLaughsAttackProtectionActivationThreshold
    .. to further tighten billion laughs protection parameters
    when desired.  Please see file "doc/reference.html" for details.
    If you ever need to increase the defaults for non-attack XML
    payload, please file a bug report with libexpat.
  - Two new XML_FEATURE_* constants ..
  - that can be queried using the XML_GetFeatureList function, and
  - that are shown in "xmlwf -v" output.
  - Two new environment variable switches ..
  - EXPAT_ACCOUNTING_DEBUG=(0|1|2|3) and
  - EXPAT_ENTITY_DEBUG=(0|1)
    .. for runtime debugging of accounting and entity processing.
    Specific behavior of these values may change in the future.
  - Two new command line arguments "-a FACTOR" and "-b BYTES"
    for xmlwf to further tighten billion laughs protection
    parameters when desired.
    If you ever need to increase the defaults for non-attack XML
    payload, please file a bug report with libexpat.
  * Bug fixes:
  - For (non-default) compilation with -DEXPAT_MIN_SIZE=ON (CMake)
    or CPPFLAGS=-DXML_MIN_SIZE (GNU Autotools): Fix segfault
    for UTF-16 payloads containing CDATA sections.
  - Autotools: Fix generated CMake files for non-64bit and
    non-Linux platforms (e.g. macOS and MinGW in particular)
    that were introduced with release 2.3.0
  * Other changes:
  - xmlwf: Improve help output and the xmlwf man page
  - xmlwf: Improve maintainability through some refactoring
  - xmlwf: Fix man page DocBook validity
  - CMake: Support absolute paths for both CMAKE_INSTALL_LIBDIR
    and CMAKE_INSTALL_INCLUDEDIR
  - CMake: Add support for standard variable BUILD_SHARED_LIBS
  - Unexpose symbol _INTERNAL_trim_to_complete_utf8_characters
  - Resolve macro HAVE_EXPAT_CONFIG_H
  - Delete unused legacy helper file "conftools/PrintPath"
  - doc/reference.html: Fix XHTML validity
  - doc/reference.html: Replace the 90s look by OK.css
  - Version info bumped from 8:0:7 to 9:0:8 due to addition of
    new symbols and error codes; see https://verbump.de/ for
    what these numbers do</changelog>
  <changelog author="pmonreal@suse.com" date="1621857601">- Update to 2.4.1:
  * Bug fixes:
  - Autotools: Fix installed header expat_config.h for multilib
    systems; regression introduced in 2.4.0 by pull request #486
  * Other changes:
  - Version info bumped from 9:0:8 to 9:1:8; see
    https://verbump.de/ for what these numbers do</changelog>
  <changelog author="pmonreal@suse.com" date="1631016000">- Update to 2.4.1 in SLE-15-SP4 [jsc#SLE-21253]
  * Remove expat-CVE-2018-20843.patch upstream</changelog>
  <changelog author="dmueller@suse.com" date="1640606400">- update to 2.4.2:
  * Link againgst libm for function "isnan"
  * Include expat_config.h as early as possible
  * Autotools: Include files with release archives:
  - buildconf.sh
  - fuzz/*.c
  * Autotools: Sync CMake templates
  * docs: Document that function XML_GetBuffer may return NULL
    when asking for a buffer of 0 (zero) bytes size
  * docs: Fix return value docs for both
    XML_SetBillionLaughsAttackProtection* functions
  * Version info bumped from 9:1:8 to 9:2:8</changelog>
  <changelog author="dmueller@suse.com" date="1642420800">- update to 2.4.3 (bsc#1194251, bsc#1194362, bsc#1194474,
    bsc#1194476, bsc#1194477, bsc#1194478, bsc#1194479, bsc#1194480):
  * CVE-2021-45960 -- Fix issues with left shifts by &gt;=29 places
    resulting in
    a) realloc acting as free
    b) realloc allocating too few bytes
    c) undefined behavior
    depending on architecture and precise value
    for XML documents with &gt;=2^27+1 prefixed attributes
    on a single XML tag a la
    "&lt;r xmlns:a='[..]' a:a123='[..]' [..] /&gt;"
    where XML_ParserCreateNS is used to create the parser
    (which needs argument "-n" when running xmlwf).
    Impact is denial of service, or more.
  * CVE-2021-46143 (ZDI-CAN-16157) -- Fix integer overflow
    on variable m_groupSize in function doProlog leading
    to realloc acting as free.
    Impact is denial of service or more.
  * CVE-2022-22822 to CVE-2022-22827 -- Prevent integer overflows
    near memory allocation at multiple places.  Mitre assigned
    a dedicated CVE for each involved internal C function:
  - CVE-2022-22822 for function addBinding
  - CVE-2022-22823 for function build_model
  - CVE-2022-22824 for function defineAttribute
  - CVE-2022-22825 for function lookup
  - CVE-2022-22826 for function nextScaffoldPart
  - CVE-2022-22827 for function storeAtts
    Impact is denial of service or more.</changelog>
  <changelog author="david.anes@suse.com" date="1643630400">- update to 2.4.4 (bsc#1195217, bsc#1195054):
  * Security fixes:
  - CVE-2022-23852 -- Fix signed integer overflow
    (undefined behavior) in function XML_GetBuffer
    that is also called by function XML_Parse internally)
    for when XML_CONTEXT_BYTES is defined to &gt;0 (which is both
    common and default).
    Impact is denial of service or more.
  - CVE-2022-23990 -- Fix unsigned integer overflow in function
    doProlog triggered by large content in element type
    declarations when there is an element declaration handler
    present (from a prior call to XML_SetElementDeclHandler).
    Impact is denial of service or more.
  * Bug fixes:
  - xmlwf: Fix a memory leak on output file opening error
  * Other changes:
  - Version info bumped from 9:3:8 to 9:4:8;
    see https://verbump.de/ for what these numbers do
  * Drop unused file valid-xhtml10.png</changelog>
  <changelog author="david.anes@suse.com" date="1643716800">- Update to latest version 2.4.4 in SLE-15-SP4 [jsc#SLE-21253]</changelog>
  <changelog author="david.anes@suse.com" date="1645444800">- Security fixes:
  * (CVE-2022-25236, bsc#1196025) Expat before 2.4.5 allows
    attackers to insert namespace-separator characters into
    namespace URIs
  - Added expat-CVE-2022-25236.patch
  * (CVE-2022-25235, bsc#1196026) xmltok_impl.c in Expat before
    2.4.5 does not check whether a UTF-8 character is valid in a
    certain context.
  - Added expat-CVE-2022-25235.patch
  * (CVE-2022-25313, bsc#1196168) Stack exhaustion in
    build_model() via uncontrolled recursion
  - Added expat-CVE-2022-25313.patch
  - The fix upstream introduced a regression that was later
    amended in 2.4.6 version
    + Added expat-CVE-2022-25313-fix-regression.patch
  * (CVE-2022-25314, bsc#1196169) Integer overflow in copyString
  - Added expat-CVE-2022-25314.patch
  * (CVE-2022-25315, bsc#1196171) Integer overflow in storeRawNames
  - Added expat-CVE-2022-25315.patch</changelog>
  <changelog author="david.anes@suse.com" date="1646481600">- Security fixes:
  * (CVE-2022-25236, bsc#1196784) [&gt;=2.4.5] Fix to CVE-2022-25236
    breaks biboumi, ClairMeta, jxmlease, libwbxml,
    openleadr-python, rnv, xmltodict
  - Added expat-CVE-2022-25236-relax-fix.patch</changelog>
  <changelog author="david.anes@suse.com" date="1664193600">- Security fix:
  * (CVE-2022-40674, bsc#1203438) use-after-free in the doContent
    function in xmlparse.c
  - Added patch expat-CVE-2022-40674.patch</changelog>
  <changelog author="david.anes@suse.com" date="1666785600">- Security fix:
  * (CVE-2022-43680, bsc#1204708) use-after free caused by overeager
    destruction of a shared DTD in XML_ExternalEntityParserCreate in
    out-of-memory situations
  - Added patch expat-CVE-2022-43680.patch</changelog>
  <changelog author="david.anes@suse.com" date="1708084800">- Security fix:
  * (CVE-2023-52425, bsc#1219559) denial of service (resource
    consumption) caused by processing large tokens.
  - Added patch expat-CVE-2023-52425-1.patch
  - Added patch expat-CVE-2023-52425-2.patch
  - Added patch expat-CVE-2023-52425-backport-parser-changes.patch
  - Added patch expat-CVE-2023-52425-fix-tests.patch</changelog>
  <changelog author="david.anes@suse.com" date="1710763200">- Security fix (boo#1221289, CVE-2024-28757): XML Entity Expansion
  attack when there is isolated use of external parsers.
  * Added expat-CVE-2024-28757.patch</changelog>
  <changelog author="david.anes@suse.com" date="1725364800">- Security fix (bsc#1229932, CVE-2024-45492): detect integer
  overflow in function nextScaffoldPart
  * Added expat-CVE-2024-45492.patch
- Security fix (bsc#1229931, CVE-2024-45491): detect integer
  overflow in dtdCopy
  * Added expat-CVE-2024-45491.patch
- Security fix (bsc#1229930, CVE-2024-45490): reject negative
  len for XML_ParseBuffer
  * Added expat-CVE-2024-45490.patch</changelog>
</package>
<package pkgid="850da0cc500e88b74e5ddae42281e7aae6dfd341d1c72d8b70b27161031235b4" name="fdo-client" arch="aarch64">
  <version epoch="0" ver="1.0.0+git20210816.baa09b5" rel="150500.3.3.1"/>
  <changelog author="schubi@suse.de" date="1634299200">- This is the successor of sdo-client
  EPIC: SLE/SLE-22946</changelog>
  <changelog author="schubi@suse.com" date="1700136000">- Removed build key via utils/keys_gen.sh. (bsc#1216293)</changelog>
</package>
<package pkgid="ded89d8be22042e30952b8d90a34d619e87f7d9b0846578489d31497f6707556" name="fdo-client" arch="s390x">
  <version epoch="0" ver="1.0.0+git20210816.baa09b5" rel="150500.3.3.1"/>
  <changelog author="schubi@suse.de" date="1634299200">- This is the successor of sdo-client
  EPIC: SLE/SLE-22946</changelog>
  <changelog author="schubi@suse.com" date="1700136000">- Removed build key via utils/keys_gen.sh. (bsc#1216293)</changelog>
</package>
<package pkgid="3dd68fe578be2abd4a2ce389959d2dd84fa8b6b75ad2a1dcf0bd5efb3a4dea1e" name="fdo-client" arch="src">
  <version epoch="0" ver="1.0.0+git20210816.baa09b5" rel="150500.3.3.1"/>
  <changelog author="schubi@suse.de" date="1634299200">- This is the successor of sdo-client
  EPIC: SLE/SLE-22946</changelog>
  <changelog author="schubi@suse.com" date="1700136000">- Removed build key via utils/keys_gen.sh. (bsc#1216293)</changelog>
</package>
<package pkgid="7396625e44de0b9f27aa90ea00e0dcae592a8fde608da33f0c9c8c86f0c092ac" name="fdo-client" arch="x86_64">
  <version epoch="0" ver="1.0.0+git20210816.baa09b5" rel="150500.3.3.1"/>
  <changelog author="schubi@suse.de" date="1634299200">- This is the successor of sdo-client
  EPIC: SLE/SLE-22946</changelog>
  <changelog author="schubi@suse.com" date="1700136000">- Removed build key via utils/keys_gen.sh. (bsc#1216293)</changelog>
</package>
<package pkgid="aa13193577adb5d6f4e85c52dd45b9e04aa4dca160f0fc5f260f27293527204f" name="fdo-client-devel" arch="aarch64">
  <version epoch="0" ver="1.0.0+git20210816.baa09b5" rel="150500.3.3.1"/>
  <changelog author="schubi@suse.de" date="1634299200">- This is the successor of sdo-client
  EPIC: SLE/SLE-22946</changelog>
  <changelog author="schubi@suse.com" date="1700136000">- Removed build key via utils/keys_gen.sh. (bsc#1216293)</changelog>
</package>
<package pkgid="683c6c55f3bcfc074bc000e10c0cf78d40a81a1a60f2c25d4ba7a730e83bb0ec" name="fdo-client-devel" arch="s390x">
  <version epoch="0" ver="1.0.0+git20210816.baa09b5" rel="150500.3.3.1"/>
  <changelog author="schubi@suse.de" date="1634299200">- This is the successor of sdo-client
  EPIC: SLE/SLE-22946</changelog>
  <changelog author="schubi@suse.com" date="1700136000">- Removed build key via utils/keys_gen.sh. (bsc#1216293)</changelog>
</package>
<package pkgid="b5147d5d3630f4f5cdbb275af0a19df8896b164e3717dd4b636080aae75141b5" name="fdo-client-devel" arch="x86_64">
  <version epoch="0" ver="1.0.0+git20210816.baa09b5" rel="150500.3.3.1"/>
  <changelog author="schubi@suse.de" date="1634299200">- This is the successor of sdo-client
  EPIC: SLE/SLE-22946</changelog>
  <changelog author="schubi@suse.com" date="1700136000">- Removed build key via utils/keys_gen.sh. (bsc#1216293)</changelog>
</package>
<package pkgid="559a99f397fdac921462058ab57534ee4613217581d49de50b157c9967d453de" name="fuse-overlayfs" arch="aarch64">
  <version epoch="0" ver="1.1.2" rel="150100.3.11.1"/>
  <changelog author="fcastelli@suse.com" date="1553774400">- Create initial package for version 0.3</changelog>
  <changelog author="sgrunert@suse.com" date="1560772800">- Update to v0.4.1 (bsc#1137860):
  - create_directory: do not redeclare variable buf
  - fuse-overlayfs: accept option "dev"
  - fuse-overlayfs: add check to readdir for the node parent
  - fuse-overlayfs: add cleanup for layers
  - fuse-overlayfs: drop usage of static arrays for paths
  - fuse-overlayfs: refactor some xattrs common code
  - fuse-overlayfs: start using GCC autocleanup
  - fuse-overlayfs: use cleanup function for initializing node
  - fuse-overlays: fix interaction of unlink(2) with readdir(2)
  - main: add missing debug messages
  - main: do the unlink only after we created the temporary file
  - main: fix a fd leak
  - main: ignore EINVAL when copying xattrs
  - setattr: use fd from fi-&gt;fh for ftruncate() whenever possible</changelog>
  <changelog author="sgrunert@suse.com" date="1566216000">- Update to v0.5.1
  - support fuse writeback cache and enable it by default
  - update to latest gnulib
  - add option to disable fsync
  - add option to disable xattrs
  - add option to skip ino number check in lower layers
  - fix fd validity check
  - fix memory leak
  - fix read after free
  - fix type for flistxattr return
  - fix warnings reported by lgtm.com
  - enable parallel dirops</changelog>
  <changelog author="sgrunert@suse.com" date="1576584000">- Update to v0.7.2
  - introduce inodes cache
  - correctly read inode for unix sockets
  - avoid hash map lookup when possible
  - use st_dev for the ino key
  - check whether writeback is supported
  - set_attrs: don't require write to S_IFREG
  - ioctl: do not reuse fi-&gt;fh for directories
  - fix skip whiteout deletion optimization
  - store the new mode after chmod</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to v0.7.3
  - fix build with -fno-common
  - fix possible segmentation fault in direct_fsync()
  - use the data store to create missing whiteouts
  - after a rename, force a directory reload</changelog>
  <changelog author="sgrunert@suse.com" date="1579262400">- Update to v0.7.4
  - fix fallocate for deleted files.
  - ignore O_DIRECT.  It causes issues with libfuse not using an
    aligned buffer, causing write(2) to fail with EINVAL.
  - on copyup, do not copy the opaque xattr.
  - fix a wrong lookup for whiteout files, that could happen on a
    double unlink.</changelog>
  <changelog author="sgrunert@suse.com" date="1579521600">- Update to v0.7.5
  - do not expose internal xattrs through listxattr and getxattr</changelog>
  <changelog author="sgrunert@suse.com" date="1580817600">- Update to v0.7.6 (bsc#1160460)
  - do not look in lower layers for the ino if there is no origin
    xattr set
  - attempt to use the file path if the operation on the fd fails
    with ENXIO</changelog>
  <changelog author="sgrunert@suse.com" date="1583323200">- Update to v0.7.7
  - make sure the destination is deleted before doing a rename(2).
    It prevents a left over directory to cause delete to fail with
    EEXIST.
  - honor --debug.</changelog>
  <changelog author="sgrunert@suse.com" date="1584446400">- Update to v0.7.8
  - report correctly the number of links for a directory also for
    subsequent stat calls
  - stop looking up the ino in the lower layers if the file could
    not be opened</changelog>
  <changelog author="sgrunert@suse.com" date="1587384000">- Update to v1.0.0
  - Fix portability issue to 32 bits architectures</changelog>
  <changelog author="rhafer@suse.com" date="1593000000">- Update to v1.1.0
  - use openat2(2) when available.
  - accept "ro" as mount option.
  - fix set mtime for a symlink.
  - fix some issues reported by static analysis.
  - fix potential infinite loop on a short read.
  - fix creating a directory if the destination already exists
    in the upper layer.</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- udpate to 1.1.2 (bsc#1175821)
  - fix build issues with libmusl.
  - fix memory leak when creating whiteout files.
  - fix lookup for overflow uid when it is different than the overflow gid.</changelog>
</package>
<package pkgid="912a8a1f6a6dc77d0fd49248ae3301670f685446253c970dd1fd3576b5225f1c" name="fuse-overlayfs" arch="s390x">
  <version epoch="0" ver="1.1.2" rel="150100.3.11.1"/>
  <changelog author="fcastelli@suse.com" date="1553774400">- Create initial package for version 0.3</changelog>
  <changelog author="sgrunert@suse.com" date="1560772800">- Update to v0.4.1 (bsc#1137860):
  - create_directory: do not redeclare variable buf
  - fuse-overlayfs: accept option "dev"
  - fuse-overlayfs: add check to readdir for the node parent
  - fuse-overlayfs: add cleanup for layers
  - fuse-overlayfs: drop usage of static arrays for paths
  - fuse-overlayfs: refactor some xattrs common code
  - fuse-overlayfs: start using GCC autocleanup
  - fuse-overlayfs: use cleanup function for initializing node
  - fuse-overlays: fix interaction of unlink(2) with readdir(2)
  - main: add missing debug messages
  - main: do the unlink only after we created the temporary file
  - main: fix a fd leak
  - main: ignore EINVAL when copying xattrs
  - setattr: use fd from fi-&gt;fh for ftruncate() whenever possible</changelog>
  <changelog author="sgrunert@suse.com" date="1566216000">- Update to v0.5.1
  - support fuse writeback cache and enable it by default
  - update to latest gnulib
  - add option to disable fsync
  - add option to disable xattrs
  - add option to skip ino number check in lower layers
  - fix fd validity check
  - fix memory leak
  - fix read after free
  - fix type for flistxattr return
  - fix warnings reported by lgtm.com
  - enable parallel dirops</changelog>
  <changelog author="sgrunert@suse.com" date="1576584000">- Update to v0.7.2
  - introduce inodes cache
  - correctly read inode for unix sockets
  - avoid hash map lookup when possible
  - use st_dev for the ino key
  - check whether writeback is supported
  - set_attrs: don't require write to S_IFREG
  - ioctl: do not reuse fi-&gt;fh for directories
  - fix skip whiteout deletion optimization
  - store the new mode after chmod</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to v0.7.3
  - fix build with -fno-common
  - fix possible segmentation fault in direct_fsync()
  - use the data store to create missing whiteouts
  - after a rename, force a directory reload</changelog>
  <changelog author="sgrunert@suse.com" date="1579262400">- Update to v0.7.4
  - fix fallocate for deleted files.
  - ignore O_DIRECT.  It causes issues with libfuse not using an
    aligned buffer, causing write(2) to fail with EINVAL.
  - on copyup, do not copy the opaque xattr.
  - fix a wrong lookup for whiteout files, that could happen on a
    double unlink.</changelog>
  <changelog author="sgrunert@suse.com" date="1579521600">- Update to v0.7.5
  - do not expose internal xattrs through listxattr and getxattr</changelog>
  <changelog author="sgrunert@suse.com" date="1580817600">- Update to v0.7.6 (bsc#1160460)
  - do not look in lower layers for the ino if there is no origin
    xattr set
  - attempt to use the file path if the operation on the fd fails
    with ENXIO</changelog>
  <changelog author="sgrunert@suse.com" date="1583323200">- Update to v0.7.7
  - make sure the destination is deleted before doing a rename(2).
    It prevents a left over directory to cause delete to fail with
    EEXIST.
  - honor --debug.</changelog>
  <changelog author="sgrunert@suse.com" date="1584446400">- Update to v0.7.8
  - report correctly the number of links for a directory also for
    subsequent stat calls
  - stop looking up the ino in the lower layers if the file could
    not be opened</changelog>
  <changelog author="sgrunert@suse.com" date="1587384000">- Update to v1.0.0
  - Fix portability issue to 32 bits architectures</changelog>
  <changelog author="rhafer@suse.com" date="1593000000">- Update to v1.1.0
  - use openat2(2) when available.
  - accept "ro" as mount option.
  - fix set mtime for a symlink.
  - fix some issues reported by static analysis.
  - fix potential infinite loop on a short read.
  - fix creating a directory if the destination already exists
    in the upper layer.</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- udpate to 1.1.2 (bsc#1175821)
  - fix build issues with libmusl.
  - fix memory leak when creating whiteout files.
  - fix lookup for overflow uid when it is different than the overflow gid.</changelog>
</package>
<package pkgid="bace92542de9c6b19a4da25472dad080fc1bef2684911202cce5db2884fc8613" name="fuse-overlayfs" arch="src">
  <version epoch="0" ver="1.1.2" rel="150100.3.11.1"/>
  <changelog author="fcastelli@suse.com" date="1553774400">- Create initial package for version 0.3</changelog>
  <changelog author="sgrunert@suse.com" date="1560772800">- Update to v0.4.1 (bsc#1137860):
  - create_directory: do not redeclare variable buf
  - fuse-overlayfs: accept option "dev"
  - fuse-overlayfs: add check to readdir for the node parent
  - fuse-overlayfs: add cleanup for layers
  - fuse-overlayfs: drop usage of static arrays for paths
  - fuse-overlayfs: refactor some xattrs common code
  - fuse-overlayfs: start using GCC autocleanup
  - fuse-overlayfs: use cleanup function for initializing node
  - fuse-overlays: fix interaction of unlink(2) with readdir(2)
  - main: add missing debug messages
  - main: do the unlink only after we created the temporary file
  - main: fix a fd leak
  - main: ignore EINVAL when copying xattrs
  - setattr: use fd from fi-&gt;fh for ftruncate() whenever possible</changelog>
  <changelog author="sgrunert@suse.com" date="1566216000">- Update to v0.5.1
  - support fuse writeback cache and enable it by default
  - update to latest gnulib
  - add option to disable fsync
  - add option to disable xattrs
  - add option to skip ino number check in lower layers
  - fix fd validity check
  - fix memory leak
  - fix read after free
  - fix type for flistxattr return
  - fix warnings reported by lgtm.com
  - enable parallel dirops</changelog>
  <changelog author="sgrunert@suse.com" date="1576584000">- Update to v0.7.2
  - introduce inodes cache
  - correctly read inode for unix sockets
  - avoid hash map lookup when possible
  - use st_dev for the ino key
  - check whether writeback is supported
  - set_attrs: don't require write to S_IFREG
  - ioctl: do not reuse fi-&gt;fh for directories
  - fix skip whiteout deletion optimization
  - store the new mode after chmod</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to v0.7.3
  - fix build with -fno-common
  - fix possible segmentation fault in direct_fsync()
  - use the data store to create missing whiteouts
  - after a rename, force a directory reload</changelog>
  <changelog author="sgrunert@suse.com" date="1579262400">- Update to v0.7.4
  - fix fallocate for deleted files.
  - ignore O_DIRECT.  It causes issues with libfuse not using an
    aligned buffer, causing write(2) to fail with EINVAL.
  - on copyup, do not copy the opaque xattr.
  - fix a wrong lookup for whiteout files, that could happen on a
    double unlink.</changelog>
  <changelog author="sgrunert@suse.com" date="1579521600">- Update to v0.7.5
  - do not expose internal xattrs through listxattr and getxattr</changelog>
  <changelog author="sgrunert@suse.com" date="1580817600">- Update to v0.7.6 (bsc#1160460)
  - do not look in lower layers for the ino if there is no origin
    xattr set
  - attempt to use the file path if the operation on the fd fails
    with ENXIO</changelog>
  <changelog author="sgrunert@suse.com" date="1583323200">- Update to v0.7.7
  - make sure the destination is deleted before doing a rename(2).
    It prevents a left over directory to cause delete to fail with
    EEXIST.
  - honor --debug.</changelog>
  <changelog author="sgrunert@suse.com" date="1584446400">- Update to v0.7.8
  - report correctly the number of links for a directory also for
    subsequent stat calls
  - stop looking up the ino in the lower layers if the file could
    not be opened</changelog>
  <changelog author="sgrunert@suse.com" date="1587384000">- Update to v1.0.0
  - Fix portability issue to 32 bits architectures</changelog>
  <changelog author="rhafer@suse.com" date="1593000000">- Update to v1.1.0
  - use openat2(2) when available.
  - accept "ro" as mount option.
  - fix set mtime for a symlink.
  - fix some issues reported by static analysis.
  - fix potential infinite loop on a short read.
  - fix creating a directory if the destination already exists
    in the upper layer.</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- udpate to 1.1.2 (bsc#1175821)
  - fix build issues with libmusl.
  - fix memory leak when creating whiteout files.
  - fix lookup for overflow uid when it is different than the overflow gid.</changelog>
</package>
<package pkgid="7fd26744555a2bc1462dda9c25476e26322bf5deec99f15b553337f5d0caba66" name="fuse-overlayfs" arch="x86_64">
  <version epoch="0" ver="1.1.2" rel="150100.3.11.1"/>
  <changelog author="fcastelli@suse.com" date="1553774400">- Create initial package for version 0.3</changelog>
  <changelog author="sgrunert@suse.com" date="1560772800">- Update to v0.4.1 (bsc#1137860):
  - create_directory: do not redeclare variable buf
  - fuse-overlayfs: accept option "dev"
  - fuse-overlayfs: add check to readdir for the node parent
  - fuse-overlayfs: add cleanup for layers
  - fuse-overlayfs: drop usage of static arrays for paths
  - fuse-overlayfs: refactor some xattrs common code
  - fuse-overlayfs: start using GCC autocleanup
  - fuse-overlayfs: use cleanup function for initializing node
  - fuse-overlays: fix interaction of unlink(2) with readdir(2)
  - main: add missing debug messages
  - main: do the unlink only after we created the temporary file
  - main: fix a fd leak
  - main: ignore EINVAL when copying xattrs
  - setattr: use fd from fi-&gt;fh for ftruncate() whenever possible</changelog>
  <changelog author="sgrunert@suse.com" date="1566216000">- Update to v0.5.1
  - support fuse writeback cache and enable it by default
  - update to latest gnulib
  - add option to disable fsync
  - add option to disable xattrs
  - add option to skip ino number check in lower layers
  - fix fd validity check
  - fix memory leak
  - fix read after free
  - fix type for flistxattr return
  - fix warnings reported by lgtm.com
  - enable parallel dirops</changelog>
  <changelog author="sgrunert@suse.com" date="1576584000">- Update to v0.7.2
  - introduce inodes cache
  - correctly read inode for unix sockets
  - avoid hash map lookup when possible
  - use st_dev for the ino key
  - check whether writeback is supported
  - set_attrs: don't require write to S_IFREG
  - ioctl: do not reuse fi-&gt;fh for directories
  - fix skip whiteout deletion optimization
  - store the new mode after chmod</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to v0.7.3
  - fix build with -fno-common
  - fix possible segmentation fault in direct_fsync()
  - use the data store to create missing whiteouts
  - after a rename, force a directory reload</changelog>
  <changelog author="sgrunert@suse.com" date="1579262400">- Update to v0.7.4
  - fix fallocate for deleted files.
  - ignore O_DIRECT.  It causes issues with libfuse not using an
    aligned buffer, causing write(2) to fail with EINVAL.
  - on copyup, do not copy the opaque xattr.
  - fix a wrong lookup for whiteout files, that could happen on a
    double unlink.</changelog>
  <changelog author="sgrunert@suse.com" date="1579521600">- Update to v0.7.5
  - do not expose internal xattrs through listxattr and getxattr</changelog>
  <changelog author="sgrunert@suse.com" date="1580817600">- Update to v0.7.6 (bsc#1160460)
  - do not look in lower layers for the ino if there is no origin
    xattr set
  - attempt to use the file path if the operation on the fd fails
    with ENXIO</changelog>
  <changelog author="sgrunert@suse.com" date="1583323200">- Update to v0.7.7
  - make sure the destination is deleted before doing a rename(2).
    It prevents a left over directory to cause delete to fail with
    EEXIST.
  - honor --debug.</changelog>
  <changelog author="sgrunert@suse.com" date="1584446400">- Update to v0.7.8
  - report correctly the number of links for a directory also for
    subsequent stat calls
  - stop looking up the ino in the lower layers if the file could
    not be opened</changelog>
  <changelog author="sgrunert@suse.com" date="1587384000">- Update to v1.0.0
  - Fix portability issue to 32 bits architectures</changelog>
  <changelog author="rhafer@suse.com" date="1593000000">- Update to v1.1.0
  - use openat2(2) when available.
  - accept "ro" as mount option.
  - fix set mtime for a symlink.
  - fix some issues reported by static analysis.
  - fix potential infinite loop on a short read.
  - fix creating a directory if the destination already exists
    in the upper layer.</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- udpate to 1.1.2 (bsc#1175821)
  - fix build issues with libmusl.
  - fix memory leak when creating whiteout files.
  - fix lookup for overflow uid when it is different than the overflow gid.</changelog>
</package>
<package pkgid="210749fd7364c8e4cd3ccba9f47d9bda4c5c94442888b3d4abfca39249350571" name="fwupdate" arch="src">
  <version epoch="0" ver="12" rel="150100.11.15.2"/>
  <changelog author="glin@suse.com" date="1469102400">- Amend the spec file to detect SLE/openSUSE (bsc#990228)</changelog>
  <changelog author="glin@suse.com" date="1469707200">- Relax the requirement of efivar-devel and disable the efivar API
  patch for openSUSE Leap 42.x and SLE</changelog>
  <changelog author="rw@suse.com" date="1489060800">- Enable efivar API patch based on pkg-config data and require
  at least gnu-efi-3.0.2.  (ramification of FATE#322108)</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Remove the debug source and info of the EFI files when disabling
  the debug build (bsc#1031554)
  + Also remove the efi-debuginfo subpackage since the debug file
    is packaged correctly now.</changelog>
  <changelog author="glin@suse.com" date="1504008000">- Update to 9+git21.gcd8f7d7 (FATE#322805)
- Add the new BuildRequires: libsmbios-devel
- Update the so version of libfwup
- Refresh fwupdate-suse-build.patch
- Remove the upstream patches
  + fwupdate-fix-efivar-0.24-api.patch
  + fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch
  + fwupdate-unset-immutable-flag.patch
- Drop fwupdate-bsc988886-add-leading-space.patch (Need shim &gt;= 11)
- Add fwupdate-list-firmware-types.patch to list the supported
  firmware types</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Add back fwupdate-bsc988886-add-leading-space.patch due to the
  long pending shim signature request. Also drop the shim version
  requirement.</changelog>
  <changelog author="mls@suse.de" date="1513252800">- disable _unique_debug_names fow now
  fwupdate wants to install it's own debug files, but doesn't know
  about this option yet</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513339200">- EFI updates through fwupdate are also possible on Aarch64.
  smbios support is only relevant for some Dell machines, i.e.
  x86 only.</changelog>
  <changelog author="mls@suse.de" date="1513598400">- bring back accidental removed needssslcertforbuild</changelog>
  <changelog author="glin@suse.com" date="1518177600">- Remove fwupdate-bsc988886-add-leading-space.patch and bump the
  shim version requirement since we got the new signature for shim
  (bsc#1054712)</changelog>
  <changelog author="glin@suse.com" date="1523275200">- Require shim only for x86_64 (bsc#1088434)</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 11
  + lots of fixes from cov-scan and clang analyzer
  + support for Lenovo machines
  + experimental support for UI Capsules
  + Dell WMI support
  + lots of bugfixes
  + configurable EFI ESP location by setting ESPMOUNTPOINT or the git
    config property fwupdate.espmountdir during the build.
  + Lots of coverity work
  + ABI compatibility checking during the release process
  + Make subdirectory builds work
- removed fwupdate-list-firmware-types.patch</changelog>
  <changelog author="glin@suse.com" date="1530187200">- Correct the requirement of efivar-devel version</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532001600">- Update to version 12 (FATE#326702)
  + Better CI.
  + Limit how large our WMI buffer can be.
  + Add fwup_version() because fwupd wants it.
  + Fix linking on (some) platforms that need libgcc_eh.a.
  + abicheck improvements.
  + Default to creating a UX capsule, whatever it may actually do.
- Refresh fwupdate-suse-build.patch with quilt.
- Use url for source tarball and license tag for COPYING.</changelog>
  <changelog author="glin@suse.com" date="1540296000">- Amend the spec file to avoid fwup*.efi from being removed
  mistakenly (bsc#1112832)</changelog>
  <changelog author="rw@suse.com" date="1547726400">- Move 'efi'-executables to '/usr/share/efi'  (FATE#326960)</changelog>
  <changelog author="glin@suse.com" date="1548676800">- Fix the destination of 'efi'-executables for i586 (FATE#326960)</changelog>
  <changelog author="glin@suse.com" date="1571227200">- Add fwupdate-bsc1152928-update-aarch64-linker-script.patch to
  update the linker script for AArch64 to match the one in
  gnu-efi (bsc#1152928)</changelog>
  <changelog author="glin@suse.com" date="1617105600">- Add fwupdate-bsc1182057-add-sbat-support.patch to add SBAT
  section to EFI images (bsc#1182057)
  + Also specify the vendor SBAT</changelog>
  <changelog author="glin@suse.com" date="1710331200">- Update the email address of security team in SBAT (bsc#1221301)
- Update fwupdate-bsc1182057-add-sbat-support.patch for
  elf_aarch64_efi.lds to set the memory permission explicitly to
  avoid ld warning like "LOAD segment with RWX permissions"</changelog>
</package>
<package pkgid="69b490385c8c73e29341a6e025f14138fe2c67821f43bec82a270f048c2ce685" name="fwupdate" arch="x86_64">
  <version epoch="0" ver="12" rel="150100.11.15.2"/>
  <changelog author="glin@suse.com" date="1469102400">- Amend the spec file to detect SLE/openSUSE (bsc#990228)</changelog>
  <changelog author="glin@suse.com" date="1469707200">- Relax the requirement of efivar-devel and disable the efivar API
  patch for openSUSE Leap 42.x and SLE</changelog>
  <changelog author="rw@suse.com" date="1489060800">- Enable efivar API patch based on pkg-config data and require
  at least gnu-efi-3.0.2.  (ramification of FATE#322108)</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Remove the debug source and info of the EFI files when disabling
  the debug build (bsc#1031554)
  + Also remove the efi-debuginfo subpackage since the debug file
    is packaged correctly now.</changelog>
  <changelog author="glin@suse.com" date="1504008000">- Update to 9+git21.gcd8f7d7 (FATE#322805)
- Add the new BuildRequires: libsmbios-devel
- Update the so version of libfwup
- Refresh fwupdate-suse-build.patch
- Remove the upstream patches
  + fwupdate-fix-efivar-0.24-api.patch
  + fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch
  + fwupdate-unset-immutable-flag.patch
- Drop fwupdate-bsc988886-add-leading-space.patch (Need shim &gt;= 11)
- Add fwupdate-list-firmware-types.patch to list the supported
  firmware types</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Add back fwupdate-bsc988886-add-leading-space.patch due to the
  long pending shim signature request. Also drop the shim version
  requirement.</changelog>
  <changelog author="mls@suse.de" date="1513252800">- disable _unique_debug_names fow now
  fwupdate wants to install it's own debug files, but doesn't know
  about this option yet</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513339200">- EFI updates through fwupdate are also possible on Aarch64.
  smbios support is only relevant for some Dell machines, i.e.
  x86 only.</changelog>
  <changelog author="mls@suse.de" date="1513598400">- bring back accidental removed needssslcertforbuild</changelog>
  <changelog author="glin@suse.com" date="1518177600">- Remove fwupdate-bsc988886-add-leading-space.patch and bump the
  shim version requirement since we got the new signature for shim
  (bsc#1054712)</changelog>
  <changelog author="glin@suse.com" date="1523275200">- Require shim only for x86_64 (bsc#1088434)</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 11
  + lots of fixes from cov-scan and clang analyzer
  + support for Lenovo machines
  + experimental support for UI Capsules
  + Dell WMI support
  + lots of bugfixes
  + configurable EFI ESP location by setting ESPMOUNTPOINT or the git
    config property fwupdate.espmountdir during the build.
  + Lots of coverity work
  + ABI compatibility checking during the release process
  + Make subdirectory builds work
- removed fwupdate-list-firmware-types.patch</changelog>
  <changelog author="glin@suse.com" date="1530187200">- Correct the requirement of efivar-devel version</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532001600">- Update to version 12 (FATE#326702)
  + Better CI.
  + Limit how large our WMI buffer can be.
  + Add fwup_version() because fwupd wants it.
  + Fix linking on (some) platforms that need libgcc_eh.a.
  + abicheck improvements.
  + Default to creating a UX capsule, whatever it may actually do.
- Refresh fwupdate-suse-build.patch with quilt.
- Use url for source tarball and license tag for COPYING.</changelog>
  <changelog author="glin@suse.com" date="1540296000">- Amend the spec file to avoid fwup*.efi from being removed
  mistakenly (bsc#1112832)</changelog>
  <changelog author="rw@suse.com" date="1547726400">- Move 'efi'-executables to '/usr/share/efi'  (FATE#326960)</changelog>
  <changelog author="glin@suse.com" date="1548676800">- Fix the destination of 'efi'-executables for i586 (FATE#326960)</changelog>
  <changelog author="glin@suse.com" date="1571227200">- Add fwupdate-bsc1152928-update-aarch64-linker-script.patch to
  update the linker script for AArch64 to match the one in
  gnu-efi (bsc#1152928)</changelog>
  <changelog author="glin@suse.com" date="1617105600">- Add fwupdate-bsc1182057-add-sbat-support.patch to add SBAT
  section to EFI images (bsc#1182057)
  + Also specify the vendor SBAT</changelog>
  <changelog author="glin@suse.com" date="1710331200">- Update the email address of security team in SBAT (bsc#1221301)
- Update fwupdate-bsc1182057-add-sbat-support.patch for
  elf_aarch64_efi.lds to set the memory permission explicitly to
  avoid ld warning like "LOAD segment with RWX permissions"</changelog>
</package>
<package pkgid="386735e3cdd811477eeeed376597d9a01f20aa7c4fc3a1ecae63354c6ee3e40c" name="fwupdate-efi" arch="x86_64">
  <version epoch="0" ver="12" rel="150100.11.15.2"/>
  <changelog author="glin@suse.com" date="1469102400">- Amend the spec file to detect SLE/openSUSE (bsc#990228)</changelog>
  <changelog author="glin@suse.com" date="1469707200">- Relax the requirement of efivar-devel and disable the efivar API
  patch for openSUSE Leap 42.x and SLE</changelog>
  <changelog author="rw@suse.com" date="1489060800">- Enable efivar API patch based on pkg-config data and require
  at least gnu-efi-3.0.2.  (ramification of FATE#322108)</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Remove the debug source and info of the EFI files when disabling
  the debug build (bsc#1031554)
  + Also remove the efi-debuginfo subpackage since the debug file
    is packaged correctly now.</changelog>
  <changelog author="glin@suse.com" date="1504008000">- Update to 9+git21.gcd8f7d7 (FATE#322805)
- Add the new BuildRequires: libsmbios-devel
- Update the so version of libfwup
- Refresh fwupdate-suse-build.patch
- Remove the upstream patches
  + fwupdate-fix-efivar-0.24-api.patch
  + fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch
  + fwupdate-unset-immutable-flag.patch
- Drop fwupdate-bsc988886-add-leading-space.patch (Need shim &gt;= 11)
- Add fwupdate-list-firmware-types.patch to list the supported
  firmware types</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Add back fwupdate-bsc988886-add-leading-space.patch due to the
  long pending shim signature request. Also drop the shim version
  requirement.</changelog>
  <changelog author="mls@suse.de" date="1513252800">- disable _unique_debug_names fow now
  fwupdate wants to install it's own debug files, but doesn't know
  about this option yet</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513339200">- EFI updates through fwupdate are also possible on Aarch64.
  smbios support is only relevant for some Dell machines, i.e.
  x86 only.</changelog>
  <changelog author="mls@suse.de" date="1513598400">- bring back accidental removed needssslcertforbuild</changelog>
  <changelog author="glin@suse.com" date="1518177600">- Remove fwupdate-bsc988886-add-leading-space.patch and bump the
  shim version requirement since we got the new signature for shim
  (bsc#1054712)</changelog>
  <changelog author="glin@suse.com" date="1523275200">- Require shim only for x86_64 (bsc#1088434)</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 11
  + lots of fixes from cov-scan and clang analyzer
  + support for Lenovo machines
  + experimental support for UI Capsules
  + Dell WMI support
  + lots of bugfixes
  + configurable EFI ESP location by setting ESPMOUNTPOINT or the git
    config property fwupdate.espmountdir during the build.
  + Lots of coverity work
  + ABI compatibility checking during the release process
  + Make subdirectory builds work
- removed fwupdate-list-firmware-types.patch</changelog>
  <changelog author="glin@suse.com" date="1530187200">- Correct the requirement of efivar-devel version</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532001600">- Update to version 12 (FATE#326702)
  + Better CI.
  + Limit how large our WMI buffer can be.
  + Add fwup_version() because fwupd wants it.
  + Fix linking on (some) platforms that need libgcc_eh.a.
  + abicheck improvements.
  + Default to creating a UX capsule, whatever it may actually do.
- Refresh fwupdate-suse-build.patch with quilt.
- Use url for source tarball and license tag for COPYING.</changelog>
  <changelog author="glin@suse.com" date="1540296000">- Amend the spec file to avoid fwup*.efi from being removed
  mistakenly (bsc#1112832)</changelog>
  <changelog author="rw@suse.com" date="1547726400">- Move 'efi'-executables to '/usr/share/efi'  (FATE#326960)</changelog>
  <changelog author="glin@suse.com" date="1548676800">- Fix the destination of 'efi'-executables for i586 (FATE#326960)</changelog>
  <changelog author="glin@suse.com" date="1571227200">- Add fwupdate-bsc1152928-update-aarch64-linker-script.patch to
  update the linker script for AArch64 to match the one in
  gnu-efi (bsc#1152928)</changelog>
  <changelog author="glin@suse.com" date="1617105600">- Add fwupdate-bsc1182057-add-sbat-support.patch to add SBAT
  section to EFI images (bsc#1182057)
  + Also specify the vendor SBAT</changelog>
  <changelog author="glin@suse.com" date="1710331200">- Update the email address of security team in SBAT (bsc#1221301)
- Update fwupdate-bsc1182057-add-sbat-support.patch for
  elf_aarch64_efi.lds to set the memory permission explicitly to
  avoid ld warning like "LOAD segment with RWX permissions"</changelog>
</package>
<package pkgid="59dfe3d861213f02a09a982b9bff798bcad8068fc012c138ad45df5f878e3d49" name="gcc12" arch="src">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.18.1"/>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
  <changelog author="rguenther@suse.com" date="1692273600">- Add gcc12-aarch64-bsc1214052.patch to fix -fstack-protector issues
  with variable length stack allocations on aarch64.
  Fixes CVE-2023-4039.  [bsc#1214052]</changelog>
</package>
<package pkgid="d01e771eead0ca67f082a3438cb442116903fc7f0baa044c4d63a3caf3d08b36" name="gcc13" arch="src">
  <version epoch="0" ver="13.2.1+git7813" rel="150000.1.3.3"/>
  <changelog author="mliska@suse.cz" date="1679659200">- Use --enable-link-serialization rather that --enable-link-mutex,
  the benefit of the former one is that the linker jobs are not
  holding tokens of the make's jobserver.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1679659201">- Add %limit_build for gcc13 to avoid OOM</changelog>
  <changelog author="mliska@suse.cz" date="1680609600">- Bump to d0b961b802dd7d9d555ff4515835a479329326e9, git6995.</changelog>
  <changelog author="schwab@suse.de" date="1681214400">- riscv-atomic.patch: RISC-V: Add support for inlining subword atomic
  operations
- riscv-pthread.patch: Don't add -latomic with -pthread</changelog>
  <changelog author="mliska@suse.cz" date="1681214401">- Add new x86-related intrinsics (amxcomplexintrin.h).</changelog>
  <changelog author="mliska@suse.cz" date="1681300800">- Bump to d339e9802f758e051b0a1ef6db732ff846cbf4e3, git7162.</changelog>
  <changelog author="rguenther@suse.com" date="1682078400">- Bump to f980561c60b0446cc427595198d7f3f4f90e0924, git7231.
  * fixes compile-time issue reported in [bsc#1210557]
  * GCC 13.1 RC3
- Disable building the rust frontend.</changelog>
  <changelog author="rguenther@suse.com" date="1682596800">- Bump to 910735c5d7ce7607384fc1eec4189e90c8ae5c84, git7256.
  * Includes GCC 13.1 release and first bugfixes
- Update riscv-atomic.patch from the version committed upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1684756800">- Bump to dd36656ada05731c069ecd5b1878380294fb1f3e, git7364.
  * Includes the RISC-V atomic changes
- Remove riscv-atomic.patch and riscv-pthread.patch now included
- Make libstdc++6-devel packages own their directories since they
  can be installed standalone.  [bsc#1211427]</changelog>
  <changelog author="rguenther@suse.com" date="1686657600">- Raise architecture levels for ALP.  [PED-153]
  * Raise POWER architecture baseline to power9.  [PED-2005]
  * Raise x86-64 architecture baseline to x86-64-v2 for ALP.  [PED-252]
  * Delay raising s390x architecture baseline to z14.  [PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1687953600">- Bump to a533ded17fb13cbbb2fa5133ecd470360f66c5cf, git7489.
- Add gcc13-pr110334.patch to fix missed optimization in Skia
  resulting in Firefox crashes when building with LTO.  [boo#1212101]</changelog>
  <changelog author="rguenther@suse.com" date="1688990400">- Bump to f9781fcf733ca3afe5b5811afd8ecbb18d9d3a11, git7552
- Remove gcc13-pr110334.patch again as it breaks libreoffice build.</changelog>
  <changelog author="schwab@suse.de" date="1689076800">- Also handle -static-pie in the default-PIE specs</changelog>
  <changelog author="rguenther@suse.com" date="1689854400">- Bump to 9aac37ab8a7b919a89c6d64bc7107a8436996e93, git7597
  * GCC 13.2 RC1
- Add rpmlint filter for SLE12 complaining about invalid licenses.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- gdcflags.patch: Use substituted GDCFLAGS
- Filter out -Werror=return-type from D compile flags</changelog>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
</package>
<package pkgid="c0c100358474c8820b6ca95007cd5d85b0acb9d79ab79bf7c96a576bc505dce6" name="gcc13" arch="src">
  <version epoch="0" ver="13.2.1+git7813" rel="150000.1.6.1"/>
  <changelog author="mliska@suse.cz" date="1680609600">- Bump to d0b961b802dd7d9d555ff4515835a479329326e9, git6995.</changelog>
  <changelog author="schwab@suse.de" date="1681214400">- riscv-atomic.patch: RISC-V: Add support for inlining subword atomic
  operations
- riscv-pthread.patch: Don't add -latomic with -pthread</changelog>
  <changelog author="mliska@suse.cz" date="1681214401">- Add new x86-related intrinsics (amxcomplexintrin.h).</changelog>
  <changelog author="mliska@suse.cz" date="1681300800">- Bump to d339e9802f758e051b0a1ef6db732ff846cbf4e3, git7162.</changelog>
  <changelog author="rguenther@suse.com" date="1682078400">- Bump to f980561c60b0446cc427595198d7f3f4f90e0924, git7231.
  * fixes compile-time issue reported in [bsc#1210557]
  * GCC 13.1 RC3
- Disable building the rust frontend.</changelog>
  <changelog author="rguenther@suse.com" date="1682596800">- Bump to 910735c5d7ce7607384fc1eec4189e90c8ae5c84, git7256.
  * Includes GCC 13.1 release and first bugfixes
- Update riscv-atomic.patch from the version committed upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1684756800">- Bump to dd36656ada05731c069ecd5b1878380294fb1f3e, git7364.
  * Includes the RISC-V atomic changes
- Remove riscv-atomic.patch and riscv-pthread.patch now included
- Make libstdc++6-devel packages own their directories since they
  can be installed standalone.  [bsc#1211427]</changelog>
  <changelog author="rguenther@suse.com" date="1686657600">- Raise architecture levels for ALP.  [PED-153]
  * Raise POWER architecture baseline to power9.  [PED-2005]
  * Raise x86-64 architecture baseline to x86-64-v2 for ALP.  [PED-252]
  * Delay raising s390x architecture baseline to z14.  [PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1687953600">- Bump to a533ded17fb13cbbb2fa5133ecd470360f66c5cf, git7489.
- Add gcc13-pr110334.patch to fix missed optimization in Skia
  resulting in Firefox crashes when building with LTO.  [boo#1212101]</changelog>
  <changelog author="rguenther@suse.com" date="1688990400">- Bump to f9781fcf733ca3afe5b5811afd8ecbb18d9d3a11, git7552
- Remove gcc13-pr110334.patch again as it breaks libreoffice build.</changelog>
  <changelog author="schwab@suse.de" date="1689076800">- Also handle -static-pie in the default-PIE specs</changelog>
  <changelog author="rguenther@suse.com" date="1689854400">- Bump to 9aac37ab8a7b919a89c6d64bc7107a8436996e93, git7597
  * GCC 13.2 RC1
- Add rpmlint filter for SLE12 complaining about invalid licenses.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- gdcflags.patch: Use substituted GDCFLAGS
- Filter out -Werror=return-type from D compile flags</changelog>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
</package>
<package pkgid="3ff97b6b6ba85a7a62f4672f19c65bd15688685a7002ee8a27ea82155ed87665" name="gcc13" arch="src">
  <version epoch="0" ver="13.2.1+git8285" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
</package>
<package pkgid="a77df9b193a2df695b9b0c5bdd804c035f79c407fc9ca8894329318e51bbe462" name="gcc13" arch="src">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="dc229fb4e9b607deea6cc24b79276e623e5f97ebf2a1d7be079f2599150d141f" name="gdk-pixbuf" arch="src">
  <version epoch="0" ver="2.42.12" rel="150400.5.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Udpate to version 2.42.0:
  + Remove the libjasper JPEG2000 loader.
  + Split the gdk-pixbuf-xlib library to a separate repository.
  + Fix cppcheck 'shifting signed 32-bit value warning',
  + Fix memory leaks in pixops error paths,
  + Improve internal consistency of loaders,
  + Skip bytes during JPEG incremental load.
  + Check for overflows.
  + Let the test suite cope with missing loaders.
  + Check for mmap failure.
  + Fix UB in the XPM loader.
  + Speed up alpha scaling pixop.
  + Add the `gtk_doc` configuration option, and deprecate `docs`.
  + Add the `introspection` configuration option, and remove `gir`.
  + Handle truncated PNMs more gracefully.
  + Clean up GIF loader code.
  + Fix colormap handling in GIF.
- Drop gdk-pixbuf-boo1174307-io-gif-overflow.patch: fixed upstream.
- Replace meson parameters, following upstream changes:
  + -Ddocs=true =&gt; -Dgtk_doc=true.
  + -Dgir=true =&gt; -Dintrospection=enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1607428800">- Update to version 2.42.2:
  + Requre Meson 0.55.3.
  + Improve the PNG save operation.
  + Fix leak in the error path of the XPM loader.
  + Fix loading GIF without a GCE rendering color 0.
  + Fix invalid LZW codes in the GIF loader (CVE-2020-29385).</changelog>
  <changelog author="zcjia@suse.com" date="1610020800">- Add gdk-pixbuf-bsc1180393-CVE-2020-29385.patch:
  gif: Fix LZW decoder accepting invalid LZW code. (bsc#1180393)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 2.42.4:
  + Make enum type registration thread safe.
  + Do not install skipped test files.
  + Fix GIF initialization.
  + Always run GIF loader tests.
  + Fix leaks discovered via ASan.
  + Expose GdkPixbufLoader API via introspection.
  + Fix revert-to-previous first frame behaviour for GIF files.
  + Link to libintl if needed.
  + Improve support for using gdk-pixbuf as a subproject.
  + Fix build with GModule disabled.
  + Use gi-docgen to generate the API reference from introspection
    data.
- Replace gtk-doc BuildRequires with python3-gi-docgen: follow
  upstreams port.
- As a workaround to
  https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/177, delete
  the installed gi-docgen program files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616846400">- Disable building of docs: creates a cycle with python:
  + Drop python3-gi-docgen BuildRequires.
  + Pass gtk_doc=false to meson</changelog>
  <changelog author="rpm@fthiessen.de" date="1618401600">- Update to stable 2.42.6
  + Yield gtk_doc option value in subprojects
  + Always initialise locale on thumbnailer startup
  + Add fallback subproject for libjpeg
  + Use type:array for the builtin_loaders option
  + Default to using builtin png and jpeg loaders</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop gdk-pixbuf-bsc1180393-CVE-2020-29385.patch on SLE and Leap
  15.4: fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636027200">- Stop passing no longer used nor recognized options jasper=false
  and x11=false to meson, fails the build when using meson 0.60.x.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 2.42.8 (boo#1201826):
  + Clear the pixbuf's memory buffer to avoid returning
    uninitialized memory.
  + Turn GdkPixbufModule functions into typed callbacks.
  + tiff: Use non-deprecated C99 integer types.
  + gif: Check for overflow when compositing or clearing frames.
  + Change png/jpeg/tiff build options from boolean to feature.
  + jpeg: Do not rely on UB around setjmp/longjmp.
  + Build fixes.
  + Documentation fixes.
  + Security fixes: CVE-2021-46829.
  + Updated translations.
- Stop passing options to meson that just follow upstream default,
  just rely on upstream providing sane defaults, apart from where
  we want to deviate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1660046400">- Update to version 2.42.9:
  + Fix the check for maximum value of LZW initial code size
    (boo#1194633 CVE-2021-44648).
  + Use CMake for dependencies on Windows/MSVC.
  + Add option for building tests.
  + Move man pages to reStructuredText.
  + Disable relocation when built as a static libary on Windows.
  + Update wrap file for libjpeg-turbo.
  + Limit the memory size when loading image data.
- Add docutils and pkgconfig(gi-docgen) BuildRequires: New
  dependencies.</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- avoid bashism in baselibs postscript (bsc#1195391)</changelog>
  <changelog author="mgorse@suse.com" date="1661860800">- Add 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch:
  fix loading of larger images (glgo#GNOME/gdk-pixbuf#216).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666785600">- Update to version 2.42.10:
  + Search for rst2man.py.
  + Update the memory size limit for JPEG images.
  + Updated translations.
- Drop patch fixed upstream (with different limit):
  + 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- Fix path to gdk-pixbuf-query-loader in pkg-config file: we rename
  the loader to be multi-arch compatible and thus also need to
  adjust the .pc file to have build-systems find it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714651200">- Update to version 2.42.11:
  + Disable fringe loaders by default.
  + Introspection fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714996800">- Pass -Dothers=enabled to meson: enable other image loaders (most
  notably beeded seems xpm,xbm). This is in line with upstreams
  recommendation for now, but won't be working past version 2.43.x.
  The loaders will likely be split out into a separate repo.
  (boo#1223903, glgo#GNOME/gdk-pixbuf!169).
- Add 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: Fix test
  suite with other loaders enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715774400">- Update to version 2.42.12:
  + Fix a build failure,
  + Fix occasional build failures,
  + ani: Reject files with multiple INA or IART chunks,
  + ani: Reject files with multiple anih chunks (CVE-2022-48622),
  + ani: validate chunk size,
  + Updated translations.
- Drop 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Migrate package to a regular obs_scm service, no longer password
  protecting a zip file. The originally reported bsc#1159337 seems
  no longer be applicable and we prefer the easier route.
- Drop unzip BuildRequires and pre_checkin.sh script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860801">- Enable test suite on x86_64 (other arches seem too flaky for now):
  + Add %check section and call %meson_test
  + Add gdk-pixbuf-jpeg-slow.patch: allow pixbuf-jpeg to run for
    more than 30s, by marking it as a slow test
    (glgo#GNOME/gdk-pixbuf!174).</changelog>
</package>
<package pkgid="24bb7aa4312dbd0a742dbed245e138c77a28adb191fa39ef9dfb2a2e50d2a193" name="gdk-pixbuf-query-loaders" arch="aarch64">
  <version epoch="0" ver="2.42.12" rel="150400.5.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Udpate to version 2.42.0:
  + Remove the libjasper JPEG2000 loader.
  + Split the gdk-pixbuf-xlib library to a separate repository.
  + Fix cppcheck 'shifting signed 32-bit value warning',
  + Fix memory leaks in pixops error paths,
  + Improve internal consistency of loaders,
  + Skip bytes during JPEG incremental load.
  + Check for overflows.
  + Let the test suite cope with missing loaders.
  + Check for mmap failure.
  + Fix UB in the XPM loader.
  + Speed up alpha scaling pixop.
  + Add the `gtk_doc` configuration option, and deprecate `docs`.
  + Add the `introspection` configuration option, and remove `gir`.
  + Handle truncated PNMs more gracefully.
  + Clean up GIF loader code.
  + Fix colormap handling in GIF.
- Drop gdk-pixbuf-boo1174307-io-gif-overflow.patch: fixed upstream.
- Replace meson parameters, following upstream changes:
  + -Ddocs=true =&gt; -Dgtk_doc=true.
  + -Dgir=true =&gt; -Dintrospection=enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1607428800">- Update to version 2.42.2:
  + Requre Meson 0.55.3.
  + Improve the PNG save operation.
  + Fix leak in the error path of the XPM loader.
  + Fix loading GIF without a GCE rendering color 0.
  + Fix invalid LZW codes in the GIF loader (CVE-2020-29385).</changelog>
  <changelog author="zcjia@suse.com" date="1610020800">- Add gdk-pixbuf-bsc1180393-CVE-2020-29385.patch:
  gif: Fix LZW decoder accepting invalid LZW code. (bsc#1180393)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 2.42.4:
  + Make enum type registration thread safe.
  + Do not install skipped test files.
  + Fix GIF initialization.
  + Always run GIF loader tests.
  + Fix leaks discovered via ASan.
  + Expose GdkPixbufLoader API via introspection.
  + Fix revert-to-previous first frame behaviour for GIF files.
  + Link to libintl if needed.
  + Improve support for using gdk-pixbuf as a subproject.
  + Fix build with GModule disabled.
  + Use gi-docgen to generate the API reference from introspection
    data.
- Replace gtk-doc BuildRequires with python3-gi-docgen: follow
  upstreams port.
- As a workaround to
  https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/177, delete
  the installed gi-docgen program files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616846400">- Disable building of docs: creates a cycle with python:
  + Drop python3-gi-docgen BuildRequires.
  + Pass gtk_doc=false to meson</changelog>
  <changelog author="rpm@fthiessen.de" date="1618401600">- Update to stable 2.42.6
  + Yield gtk_doc option value in subprojects
  + Always initialise locale on thumbnailer startup
  + Add fallback subproject for libjpeg
  + Use type:array for the builtin_loaders option
  + Default to using builtin png and jpeg loaders</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop gdk-pixbuf-bsc1180393-CVE-2020-29385.patch on SLE and Leap
  15.4: fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636027200">- Stop passing no longer used nor recognized options jasper=false
  and x11=false to meson, fails the build when using meson 0.60.x.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 2.42.8 (boo#1201826):
  + Clear the pixbuf's memory buffer to avoid returning
    uninitialized memory.
  + Turn GdkPixbufModule functions into typed callbacks.
  + tiff: Use non-deprecated C99 integer types.
  + gif: Check for overflow when compositing or clearing frames.
  + Change png/jpeg/tiff build options from boolean to feature.
  + jpeg: Do not rely on UB around setjmp/longjmp.
  + Build fixes.
  + Documentation fixes.
  + Security fixes: CVE-2021-46829.
  + Updated translations.
- Stop passing options to meson that just follow upstream default,
  just rely on upstream providing sane defaults, apart from where
  we want to deviate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1660046400">- Update to version 2.42.9:
  + Fix the check for maximum value of LZW initial code size
    (boo#1194633 CVE-2021-44648).
  + Use CMake for dependencies on Windows/MSVC.
  + Add option for building tests.
  + Move man pages to reStructuredText.
  + Disable relocation when built as a static libary on Windows.
  + Update wrap file for libjpeg-turbo.
  + Limit the memory size when loading image data.
- Add docutils and pkgconfig(gi-docgen) BuildRequires: New
  dependencies.</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- avoid bashism in baselibs postscript (bsc#1195391)</changelog>
  <changelog author="mgorse@suse.com" date="1661860800">- Add 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch:
  fix loading of larger images (glgo#GNOME/gdk-pixbuf#216).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666785600">- Update to version 2.42.10:
  + Search for rst2man.py.
  + Update the memory size limit for JPEG images.
  + Updated translations.
- Drop patch fixed upstream (with different limit):
  + 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- Fix path to gdk-pixbuf-query-loader in pkg-config file: we rename
  the loader to be multi-arch compatible and thus also need to
  adjust the .pc file to have build-systems find it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714651200">- Update to version 2.42.11:
  + Disable fringe loaders by default.
  + Introspection fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714996800">- Pass -Dothers=enabled to meson: enable other image loaders (most
  notably beeded seems xpm,xbm). This is in line with upstreams
  recommendation for now, but won't be working past version 2.43.x.
  The loaders will likely be split out into a separate repo.
  (boo#1223903, glgo#GNOME/gdk-pixbuf!169).
- Add 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: Fix test
  suite with other loaders enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715774400">- Update to version 2.42.12:
  + Fix a build failure,
  + Fix occasional build failures,
  + ani: Reject files with multiple INA or IART chunks,
  + ani: Reject files with multiple anih chunks (CVE-2022-48622),
  + ani: validate chunk size,
  + Updated translations.
- Drop 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Migrate package to a regular obs_scm service, no longer password
  protecting a zip file. The originally reported bsc#1159337 seems
  no longer be applicable and we prefer the easier route.
- Drop unzip BuildRequires and pre_checkin.sh script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860801">- Enable test suite on x86_64 (other arches seem too flaky for now):
  + Add %check section and call %meson_test
  + Add gdk-pixbuf-jpeg-slow.patch: allow pixbuf-jpeg to run for
    more than 30s, by marking it as a slow test
    (glgo#GNOME/gdk-pixbuf!174).</changelog>
</package>
<package pkgid="281a94938006ab7ceddec51abe454c71b751cb1a75ae3e4ef2995cd0e3717410" name="gdk-pixbuf-query-loaders" arch="s390x">
  <version epoch="0" ver="2.42.12" rel="150400.5.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Udpate to version 2.42.0:
  + Remove the libjasper JPEG2000 loader.
  + Split the gdk-pixbuf-xlib library to a separate repository.
  + Fix cppcheck 'shifting signed 32-bit value warning',
  + Fix memory leaks in pixops error paths,
  + Improve internal consistency of loaders,
  + Skip bytes during JPEG incremental load.
  + Check for overflows.
  + Let the test suite cope with missing loaders.
  + Check for mmap failure.
  + Fix UB in the XPM loader.
  + Speed up alpha scaling pixop.
  + Add the `gtk_doc` configuration option, and deprecate `docs`.
  + Add the `introspection` configuration option, and remove `gir`.
  + Handle truncated PNMs more gracefully.
  + Clean up GIF loader code.
  + Fix colormap handling in GIF.
- Drop gdk-pixbuf-boo1174307-io-gif-overflow.patch: fixed upstream.
- Replace meson parameters, following upstream changes:
  + -Ddocs=true =&gt; -Dgtk_doc=true.
  + -Dgir=true =&gt; -Dintrospection=enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1607428800">- Update to version 2.42.2:
  + Requre Meson 0.55.3.
  + Improve the PNG save operation.
  + Fix leak in the error path of the XPM loader.
  + Fix loading GIF without a GCE rendering color 0.
  + Fix invalid LZW codes in the GIF loader (CVE-2020-29385).</changelog>
  <changelog author="zcjia@suse.com" date="1610020800">- Add gdk-pixbuf-bsc1180393-CVE-2020-29385.patch:
  gif: Fix LZW decoder accepting invalid LZW code. (bsc#1180393)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 2.42.4:
  + Make enum type registration thread safe.
  + Do not install skipped test files.
  + Fix GIF initialization.
  + Always run GIF loader tests.
  + Fix leaks discovered via ASan.
  + Expose GdkPixbufLoader API via introspection.
  + Fix revert-to-previous first frame behaviour for GIF files.
  + Link to libintl if needed.
  + Improve support for using gdk-pixbuf as a subproject.
  + Fix build with GModule disabled.
  + Use gi-docgen to generate the API reference from introspection
    data.
- Replace gtk-doc BuildRequires with python3-gi-docgen: follow
  upstreams port.
- As a workaround to
  https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/177, delete
  the installed gi-docgen program files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616846400">- Disable building of docs: creates a cycle with python:
  + Drop python3-gi-docgen BuildRequires.
  + Pass gtk_doc=false to meson</changelog>
  <changelog author="rpm@fthiessen.de" date="1618401600">- Update to stable 2.42.6
  + Yield gtk_doc option value in subprojects
  + Always initialise locale on thumbnailer startup
  + Add fallback subproject for libjpeg
  + Use type:array for the builtin_loaders option
  + Default to using builtin png and jpeg loaders</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop gdk-pixbuf-bsc1180393-CVE-2020-29385.patch on SLE and Leap
  15.4: fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636027200">- Stop passing no longer used nor recognized options jasper=false
  and x11=false to meson, fails the build when using meson 0.60.x.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 2.42.8 (boo#1201826):
  + Clear the pixbuf's memory buffer to avoid returning
    uninitialized memory.
  + Turn GdkPixbufModule functions into typed callbacks.
  + tiff: Use non-deprecated C99 integer types.
  + gif: Check for overflow when compositing or clearing frames.
  + Change png/jpeg/tiff build options from boolean to feature.
  + jpeg: Do not rely on UB around setjmp/longjmp.
  + Build fixes.
  + Documentation fixes.
  + Security fixes: CVE-2021-46829.
  + Updated translations.
- Stop passing options to meson that just follow upstream default,
  just rely on upstream providing sane defaults, apart from where
  we want to deviate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1660046400">- Update to version 2.42.9:
  + Fix the check for maximum value of LZW initial code size
    (boo#1194633 CVE-2021-44648).
  + Use CMake for dependencies on Windows/MSVC.
  + Add option for building tests.
  + Move man pages to reStructuredText.
  + Disable relocation when built as a static libary on Windows.
  + Update wrap file for libjpeg-turbo.
  + Limit the memory size when loading image data.
- Add docutils and pkgconfig(gi-docgen) BuildRequires: New
  dependencies.</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- avoid bashism in baselibs postscript (bsc#1195391)</changelog>
  <changelog author="mgorse@suse.com" date="1661860800">- Add 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch:
  fix loading of larger images (glgo#GNOME/gdk-pixbuf#216).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666785600">- Update to version 2.42.10:
  + Search for rst2man.py.
  + Update the memory size limit for JPEG images.
  + Updated translations.
- Drop patch fixed upstream (with different limit):
  + 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- Fix path to gdk-pixbuf-query-loader in pkg-config file: we rename
  the loader to be multi-arch compatible and thus also need to
  adjust the .pc file to have build-systems find it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714651200">- Update to version 2.42.11:
  + Disable fringe loaders by default.
  + Introspection fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714996800">- Pass -Dothers=enabled to meson: enable other image loaders (most
  notably beeded seems xpm,xbm). This is in line with upstreams
  recommendation for now, but won't be working past version 2.43.x.
  The loaders will likely be split out into a separate repo.
  (boo#1223903, glgo#GNOME/gdk-pixbuf!169).
- Add 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: Fix test
  suite with other loaders enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715774400">- Update to version 2.42.12:
  + Fix a build failure,
  + Fix occasional build failures,
  + ani: Reject files with multiple INA or IART chunks,
  + ani: Reject files with multiple anih chunks (CVE-2022-48622),
  + ani: validate chunk size,
  + Updated translations.
- Drop 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Migrate package to a regular obs_scm service, no longer password
  protecting a zip file. The originally reported bsc#1159337 seems
  no longer be applicable and we prefer the easier route.
- Drop unzip BuildRequires and pre_checkin.sh script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860801">- Enable test suite on x86_64 (other arches seem too flaky for now):
  + Add %check section and call %meson_test
  + Add gdk-pixbuf-jpeg-slow.patch: allow pixbuf-jpeg to run for
    more than 30s, by marking it as a slow test
    (glgo#GNOME/gdk-pixbuf!174).</changelog>
</package>
<package pkgid="f914d1531be79967f2e0a71675b57d6f80b3b7feea2aebef8a5c894e3bb20093" name="gdk-pixbuf-query-loaders" arch="x86_64">
  <version epoch="0" ver="2.42.12" rel="150400.5.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Udpate to version 2.42.0:
  + Remove the libjasper JPEG2000 loader.
  + Split the gdk-pixbuf-xlib library to a separate repository.
  + Fix cppcheck 'shifting signed 32-bit value warning',
  + Fix memory leaks in pixops error paths,
  + Improve internal consistency of loaders,
  + Skip bytes during JPEG incremental load.
  + Check for overflows.
  + Let the test suite cope with missing loaders.
  + Check for mmap failure.
  + Fix UB in the XPM loader.
  + Speed up alpha scaling pixop.
  + Add the `gtk_doc` configuration option, and deprecate `docs`.
  + Add the `introspection` configuration option, and remove `gir`.
  + Handle truncated PNMs more gracefully.
  + Clean up GIF loader code.
  + Fix colormap handling in GIF.
- Drop gdk-pixbuf-boo1174307-io-gif-overflow.patch: fixed upstream.
- Replace meson parameters, following upstream changes:
  + -Ddocs=true =&gt; -Dgtk_doc=true.
  + -Dgir=true =&gt; -Dintrospection=enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1607428800">- Update to version 2.42.2:
  + Requre Meson 0.55.3.
  + Improve the PNG save operation.
  + Fix leak in the error path of the XPM loader.
  + Fix loading GIF without a GCE rendering color 0.
  + Fix invalid LZW codes in the GIF loader (CVE-2020-29385).</changelog>
  <changelog author="zcjia@suse.com" date="1610020800">- Add gdk-pixbuf-bsc1180393-CVE-2020-29385.patch:
  gif: Fix LZW decoder accepting invalid LZW code. (bsc#1180393)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 2.42.4:
  + Make enum type registration thread safe.
  + Do not install skipped test files.
  + Fix GIF initialization.
  + Always run GIF loader tests.
  + Fix leaks discovered via ASan.
  + Expose GdkPixbufLoader API via introspection.
  + Fix revert-to-previous first frame behaviour for GIF files.
  + Link to libintl if needed.
  + Improve support for using gdk-pixbuf as a subproject.
  + Fix build with GModule disabled.
  + Use gi-docgen to generate the API reference from introspection
    data.
- Replace gtk-doc BuildRequires with python3-gi-docgen: follow
  upstreams port.
- As a workaround to
  https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/177, delete
  the installed gi-docgen program files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616846400">- Disable building of docs: creates a cycle with python:
  + Drop python3-gi-docgen BuildRequires.
  + Pass gtk_doc=false to meson</changelog>
  <changelog author="rpm@fthiessen.de" date="1618401600">- Update to stable 2.42.6
  + Yield gtk_doc option value in subprojects
  + Always initialise locale on thumbnailer startup
  + Add fallback subproject for libjpeg
  + Use type:array for the builtin_loaders option
  + Default to using builtin png and jpeg loaders</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop gdk-pixbuf-bsc1180393-CVE-2020-29385.patch on SLE and Leap
  15.4: fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636027200">- Stop passing no longer used nor recognized options jasper=false
  and x11=false to meson, fails the build when using meson 0.60.x.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 2.42.8 (boo#1201826):
  + Clear the pixbuf's memory buffer to avoid returning
    uninitialized memory.
  + Turn GdkPixbufModule functions into typed callbacks.
  + tiff: Use non-deprecated C99 integer types.
  + gif: Check for overflow when compositing or clearing frames.
  + Change png/jpeg/tiff build options from boolean to feature.
  + jpeg: Do not rely on UB around setjmp/longjmp.
  + Build fixes.
  + Documentation fixes.
  + Security fixes: CVE-2021-46829.
  + Updated translations.
- Stop passing options to meson that just follow upstream default,
  just rely on upstream providing sane defaults, apart from where
  we want to deviate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1660046400">- Update to version 2.42.9:
  + Fix the check for maximum value of LZW initial code size
    (boo#1194633 CVE-2021-44648).
  + Use CMake for dependencies on Windows/MSVC.
  + Add option for building tests.
  + Move man pages to reStructuredText.
  + Disable relocation when built as a static libary on Windows.
  + Update wrap file for libjpeg-turbo.
  + Limit the memory size when loading image data.
- Add docutils and pkgconfig(gi-docgen) BuildRequires: New
  dependencies.</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- avoid bashism in baselibs postscript (bsc#1195391)</changelog>
  <changelog author="mgorse@suse.com" date="1661860800">- Add 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch:
  fix loading of larger images (glgo#GNOME/gdk-pixbuf#216).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666785600">- Update to version 2.42.10:
  + Search for rst2man.py.
  + Update the memory size limit for JPEG images.
  + Updated translations.
- Drop patch fixed upstream (with different limit):
  + 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- Fix path to gdk-pixbuf-query-loader in pkg-config file: we rename
  the loader to be multi-arch compatible and thus also need to
  adjust the .pc file to have build-systems find it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714651200">- Update to version 2.42.11:
  + Disable fringe loaders by default.
  + Introspection fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714996800">- Pass -Dothers=enabled to meson: enable other image loaders (most
  notably beeded seems xpm,xbm). This is in line with upstreams
  recommendation for now, but won't be working past version 2.43.x.
  The loaders will likely be split out into a separate repo.
  (boo#1223903, glgo#GNOME/gdk-pixbuf!169).
- Add 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: Fix test
  suite with other loaders enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715774400">- Update to version 2.42.12:
  + Fix a build failure,
  + Fix occasional build failures,
  + ani: Reject files with multiple INA or IART chunks,
  + ani: Reject files with multiple anih chunks (CVE-2022-48622),
  + ani: validate chunk size,
  + Updated translations.
- Drop 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Migrate package to a regular obs_scm service, no longer password
  protecting a zip file. The originally reported bsc#1159337 seems
  no longer be applicable and we prefer the easier route.
- Drop unzip BuildRequires and pre_checkin.sh script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860801">- Enable test suite on x86_64 (other arches seem too flaky for now):
  + Add %check section and call %meson_test
  + Add gdk-pixbuf-jpeg-slow.patch: allow pixbuf-jpeg to run for
    more than 30s, by marking it as a slow test
    (glgo#GNOME/gdk-pixbuf!174).</changelog>
</package>
<package pkgid="e4fa25e50d308e8ef222a93bb3f9df60b51da10b35bcd4da1ec627528898fed8" name="git" arch="aarch64">
  <version epoch="0" ver="2.35.3" rel="150300.10.30.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
</package>
<package pkgid="cb31dd7ef558b46dd53d3fb7dd6466fb21f710c0540213ad7ff3ee89afb282ad" name="git" arch="s390x">
  <version epoch="0" ver="2.35.3" rel="150300.10.30.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
</package>
<package pkgid="63a9366e1c09ded162fbbe58bf18fc777cfa41c5a98435809afe2e02edd95ef1" name="git" arch="src">
  <version epoch="0" ver="2.35.3" rel="150300.10.30.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
</package>
<package pkgid="8a954af8f97bcb82a244850356f8990302006240c216f82ca1414edae4f91b3b" name="git" arch="x86_64">
  <version epoch="0" ver="2.35.3" rel="150300.10.30.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
</package>
<package pkgid="44b780bd7f5b7f2c67c2952837cf875015d1b783328e5e32515bda0c40b8c2c2" name="git" arch="aarch64">
  <version epoch="0" ver="2.35.3" rel="150300.10.33.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
</package>
<package pkgid="3534611bc56e3413bc8ba5e7b1ffb8ede5e4faf1d449bfda572ecbbe2f949286" name="git" arch="s390x">
  <version epoch="0" ver="2.35.3" rel="150300.10.33.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
</package>
<package pkgid="d72a815c946d8eebba5860ae64bc0ad2de79049995e83a6834dfe6fb30dec65a" name="git" arch="src">
  <version epoch="0" ver="2.35.3" rel="150300.10.33.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
</package>
<package pkgid="4f9dded842a597632e5da56bcdf9eb0ea088ca64b58b6f41254478d828007912" name="git" arch="x86_64">
  <version epoch="0" ver="2.35.3" rel="150300.10.33.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
</package>
<package pkgid="49ac6382baf3bc373f7d23b64952e1da9a5bee1127b76470314c4281c25d8ffd" name="git" arch="aarch64">
  <version epoch="0" ver="2.35.3" rel="150300.10.36.1"/>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1708430400">- Do not replace apparmor configuration, fixes bsc#1216545</changelog>
</package>
<package pkgid="6c7a3a307792188b6674004a9299f1db48f721885dc7309acc51fd689c19f8fa" name="git" arch="s390x">
  <version epoch="0" ver="2.35.3" rel="150300.10.36.1"/>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1708430400">- Do not replace apparmor configuration, fixes bsc#1216545</changelog>
</package>
<package pkgid="1597f1128fc3877cceb534ce2ed936585bfaf53704e5a859eb457b061cd911c6" name="git" arch="src">
  <version epoch="0" ver="2.35.3" rel="150300.10.36.1"/>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1708430400">- Do not replace apparmor configuration, fixes bsc#1216545</changelog>
</package>
<package pkgid="19bd53e8ed0011a4a611fe4a381003c1d7343118b19791526d2fb434fa3e3b54" name="git" arch="x86_64">
  <version epoch="0" ver="2.35.3" rel="150300.10.36.1"/>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1708430400">- Do not replace apparmor configuration, fixes bsc#1216545</changelog>
</package>
<package pkgid="c76a0e44eb977af3400a98eb85e9dcb408a5a36f227c035a91183cf5ef1a7fe6" name="git" arch="aarch64">
  <version epoch="0" ver="2.35.3" rel="150300.10.39.1"/>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1708430400">- Do not replace apparmor configuration, fixes bsc#1216545</changelog>
  <changelog author="danilo.spinella@suse.com" date="1715860800">- Fix CVE-2024-32002, recursive clones on case-insensitive filesystems
  that support symbolic links are susceptible to case confusion,
  bsc#1224168
  * CVE-2024-32002.patch
- Fix CVE-2024-32004, arbitrary code execution during local clones,
  bsc#1224170
  * CVE-2024-32004.patch
- Fix CVE-2024-32020, file overwriting vulnerability during local clones,
  bsc#1224171
  * CVE-2024-32020-1.patch
  * CVE-2024-32020-2.patch
  * CVE-2024-32020-3.patch
  * CVE-2024-32020-4.patch
- Fix CVE-2024-32021, git may create hardlinks to arbitrary user-readable files,
  bsc#1224172
- Fix CVE-2024-32465, arbitrary code execution during clone operations,
  bsc#1224173
  * CVE-2024-32465.patch</changelog>
</package>
<package pkgid="935e86925381ae01aaba681a898919873b3c97146a5f495ed79ca8f9c19242eb" name="git" arch="s390x">
  <version epoch="0" ver="2.35.3" rel="150300.10.39.1"/>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1708430400">- Do not replace apparmor configuration, fixes bsc#1216545</changelog>
  <changelog author="danilo.spinella@suse.com" date="1715860800">- Fix CVE-2024-32002, recursive clones on case-insensitive filesystems
  that support symbolic links are susceptible to case confusion,
  bsc#1224168
  * CVE-2024-32002.patch
- Fix CVE-2024-32004, arbitrary code execution during local clones,
  bsc#1224170
  * CVE-2024-32004.patch
- Fix CVE-2024-32020, file overwriting vulnerability during local clones,
  bsc#1224171
  * CVE-2024-32020-1.patch
  * CVE-2024-32020-2.patch
  * CVE-2024-32020-3.patch
  * CVE-2024-32020-4.patch
- Fix CVE-2024-32021, git may create hardlinks to arbitrary user-readable files,
  bsc#1224172
- Fix CVE-2024-32465, arbitrary code execution during clone operations,
  bsc#1224173
  * CVE-2024-32465.patch</changelog>
</package>
<package pkgid="b442a0a3ddc21a403dca63475e5449eed4ba368c10da3564c4ea7dea130bca4f" name="git" arch="src">
  <version epoch="0" ver="2.35.3" rel="150300.10.39.1"/>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1708430400">- Do not replace apparmor configuration, fixes bsc#1216545</changelog>
  <changelog author="danilo.spinella@suse.com" date="1715860800">- Fix CVE-2024-32002, recursive clones on case-insensitive filesystems
  that support symbolic links are susceptible to case confusion,
  bsc#1224168
  * CVE-2024-32002.patch
- Fix CVE-2024-32004, arbitrary code execution during local clones,
  bsc#1224170
  * CVE-2024-32004.patch
- Fix CVE-2024-32020, file overwriting vulnerability during local clones,
  bsc#1224171
  * CVE-2024-32020-1.patch
  * CVE-2024-32020-2.patch
  * CVE-2024-32020-3.patch
  * CVE-2024-32020-4.patch
- Fix CVE-2024-32021, git may create hardlinks to arbitrary user-readable files,
  bsc#1224172
- Fix CVE-2024-32465, arbitrary code execution during clone operations,
  bsc#1224173
  * CVE-2024-32465.patch</changelog>
</package>
<package pkgid="a027367d6002cd18b0886c32c4164b30d17fb3882802e829896d8b6fb1d725af" name="git" arch="x86_64">
  <version epoch="0" ver="2.35.3" rel="150300.10.39.1"/>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1708430400">- Do not replace apparmor configuration, fixes bsc#1216545</changelog>
  <changelog author="danilo.spinella@suse.com" date="1715860800">- Fix CVE-2024-32002, recursive clones on case-insensitive filesystems
  that support symbolic links are susceptible to case confusion,
  bsc#1224168
  * CVE-2024-32002.patch
- Fix CVE-2024-32004, arbitrary code execution during local clones,
  bsc#1224170
  * CVE-2024-32004.patch
- Fix CVE-2024-32020, file overwriting vulnerability during local clones,
  bsc#1224171
  * CVE-2024-32020-1.patch
  * CVE-2024-32020-2.patch
  * CVE-2024-32020-3.patch
  * CVE-2024-32020-4.patch
- Fix CVE-2024-32021, git may create hardlinks to arbitrary user-readable files,
  bsc#1224172
- Fix CVE-2024-32465, arbitrary code execution during clone operations,
  bsc#1224173
  * CVE-2024-32465.patch</changelog>
</package>
<package pkgid="a6ac5e1bd7910c29458a7d13125f717c59a7162f1a19b79c8cf9222e8046c81c" name="git" arch="aarch64">
  <version epoch="0" ver="2.35.3" rel="150300.10.42.1"/>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1708430400">- Do not replace apparmor configuration, fixes bsc#1216545</changelog>
  <changelog author="danilo.spinella@suse.com" date="1715860800">- Fix CVE-2024-32002, recursive clones on case-insensitive filesystems
  that support symbolic links are susceptible to case confusion,
  bsc#1224168
  * CVE-2024-32002.patch
- Fix CVE-2024-32004, arbitrary code execution during local clones,
  bsc#1224170
  * CVE-2024-32004.patch
- Fix CVE-2024-32020, file overwriting vulnerability during local clones,
  bsc#1224171
  * CVE-2024-32020-1.patch
  * CVE-2024-32020-2.patch
  * CVE-2024-32020-3.patch
  * CVE-2024-32020-4.patch
- Fix CVE-2024-32021, git may create hardlinks to arbitrary user-readable files,
  bsc#1224172
- Fix CVE-2024-32465, arbitrary code execution during clone operations,
  bsc#1224173
  * CVE-2024-32465.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1721304000">- Add CVE-2024-24577.patch
  * CVE-2024-24577: arbitrary code execution due to heap corruption
    in git_index_add (bsc#1219660)</changelog>
</package>
<package pkgid="fc8390a8e1837a8493985827f15804dff738b73174bf156588f24eda7dcef62d" name="git" arch="s390x">
  <version epoch="0" ver="2.35.3" rel="150300.10.42.1"/>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1708430400">- Do not replace apparmor configuration, fixes bsc#1216545</changelog>
  <changelog author="danilo.spinella@suse.com" date="1715860800">- Fix CVE-2024-32002, recursive clones on case-insensitive filesystems
  that support symbolic links are susceptible to case confusion,
  bsc#1224168
  * CVE-2024-32002.patch
- Fix CVE-2024-32004, arbitrary code execution during local clones,
  bsc#1224170
  * CVE-2024-32004.patch
- Fix CVE-2024-32020, file overwriting vulnerability during local clones,
  bsc#1224171
  * CVE-2024-32020-1.patch
  * CVE-2024-32020-2.patch
  * CVE-2024-32020-3.patch
  * CVE-2024-32020-4.patch
- Fix CVE-2024-32021, git may create hardlinks to arbitrary user-readable files,
  bsc#1224172
- Fix CVE-2024-32465, arbitrary code execution during clone operations,
  bsc#1224173
  * CVE-2024-32465.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1721304000">- Add CVE-2024-24577.patch
  * CVE-2024-24577: arbitrary code execution due to heap corruption
    in git_index_add (bsc#1219660)</changelog>
</package>
<package pkgid="5413f56ab59b01193b78793d22266caca7e41fb17676a69d7d5d14032debcb9b" name="git" arch="src">
  <version epoch="0" ver="2.35.3" rel="150300.10.42.1"/>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1708430400">- Do not replace apparmor configuration, fixes bsc#1216545</changelog>
  <changelog author="danilo.spinella@suse.com" date="1715860800">- Fix CVE-2024-32002, recursive clones on case-insensitive filesystems
  that support symbolic links are susceptible to case confusion,
  bsc#1224168
  * CVE-2024-32002.patch
- Fix CVE-2024-32004, arbitrary code execution during local clones,
  bsc#1224170
  * CVE-2024-32004.patch
- Fix CVE-2024-32020, file overwriting vulnerability during local clones,
  bsc#1224171
  * CVE-2024-32020-1.patch
  * CVE-2024-32020-2.patch
  * CVE-2024-32020-3.patch
  * CVE-2024-32020-4.patch
- Fix CVE-2024-32021, git may create hardlinks to arbitrary user-readable files,
  bsc#1224172
- Fix CVE-2024-32465, arbitrary code execution during clone operations,
  bsc#1224173
  * CVE-2024-32465.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1721304000">- Add CVE-2024-24577.patch
  * CVE-2024-24577: arbitrary code execution due to heap corruption
    in git_index_add (bsc#1219660)</changelog>
</package>
<package pkgid="7a0b46d1a19b97f80397e1b72630f1a8784134a7de6ca3714b798667797a6c5a" name="git" arch="x86_64">
  <version epoch="0" ver="2.35.3" rel="150300.10.42.1"/>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1708430400">- Do not replace apparmor configuration, fixes bsc#1216545</changelog>
  <changelog author="danilo.spinella@suse.com" date="1715860800">- Fix CVE-2024-32002, recursive clones on case-insensitive filesystems
  that support symbolic links are susceptible to case confusion,
  bsc#1224168
  * CVE-2024-32002.patch
- Fix CVE-2024-32004, arbitrary code execution during local clones,
  bsc#1224170
  * CVE-2024-32004.patch
- Fix CVE-2024-32020, file overwriting vulnerability during local clones,
  bsc#1224171
  * CVE-2024-32020-1.patch
  * CVE-2024-32020-2.patch
  * CVE-2024-32020-3.patch
  * CVE-2024-32020-4.patch
- Fix CVE-2024-32021, git may create hardlinks to arbitrary user-readable files,
  bsc#1224172
- Fix CVE-2024-32465, arbitrary code execution during clone operations,
  bsc#1224173
  * CVE-2024-32465.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1721304000">- Add CVE-2024-24577.patch
  * CVE-2024-24577: arbitrary code execution due to heap corruption
    in git_index_add (bsc#1219660)</changelog>
</package>
<package pkgid="40aecf905f901e99e0cba935560c628aabf6730343f4ff89b4a83ce7d986efb8" name="git" arch="aarch64">
  <version epoch="0" ver="2.35.3" rel="150300.10.45.2"/>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1708430400">- Do not replace apparmor configuration, fixes bsc#1216545</changelog>
  <changelog author="danilo.spinella@suse.com" date="1715860800">- Fix CVE-2024-32002, recursive clones on case-insensitive filesystems
  that support symbolic links are susceptible to case confusion,
  bsc#1224168
  * CVE-2024-32002.patch
- Fix CVE-2024-32004, arbitrary code execution during local clones,
  bsc#1224170
  * CVE-2024-32004.patch
- Fix CVE-2024-32020, file overwriting vulnerability during local clones,
  bsc#1224171
  * CVE-2024-32020-1.patch
  * CVE-2024-32020-2.patch
  * CVE-2024-32020-3.patch
  * CVE-2024-32020-4.patch
- Fix CVE-2024-32021, git may create hardlinks to arbitrary user-readable files,
  bsc#1224172
- Fix CVE-2024-32465, arbitrary code execution during clone operations,
  bsc#1224173
  * CVE-2024-32465.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1721304000">- Add CVE-2024-24577.patch
  * CVE-2024-24577: arbitrary code execution due to heap corruption
    in git_index_add (bsc#1219660)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1723636800">- usr.share.git-web.gitweb.cgi: Fix syntax error with old apparmor
  versions (bsc#1229029)</changelog>
</package>
<package pkgid="b3995a003f2a0ef934797f35b5c2b01b61b0c9c16027e6f7664187f282c575ba" name="git" arch="s390x">
  <version epoch="0" ver="2.35.3" rel="150300.10.45.2"/>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1708430400">- Do not replace apparmor configuration, fixes bsc#1216545</changelog>
  <changelog author="danilo.spinella@suse.com" date="1715860800">- Fix CVE-2024-32002, recursive clones on case-insensitive filesystems
  that support symbolic links are susceptible to case confusion,
  bsc#1224168
  * CVE-2024-32002.patch
- Fix CVE-2024-32004, arbitrary code execution during local clones,
  bsc#1224170
  * CVE-2024-32004.patch
- Fix CVE-2024-32020, file overwriting vulnerability during local clones,
  bsc#1224171
  * CVE-2024-32020-1.patch
  * CVE-2024-32020-2.patch
  * CVE-2024-32020-3.patch
  * CVE-2024-32020-4.patch
- Fix CVE-2024-32021, git may create hardlinks to arbitrary user-readable files,
  bsc#1224172
- Fix CVE-2024-32465, arbitrary code execution during clone operations,
  bsc#1224173
  * CVE-2024-32465.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1721304000">- Add CVE-2024-24577.patch
  * CVE-2024-24577: arbitrary code execution due to heap corruption
    in git_index_add (bsc#1219660)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1723636800">- usr.share.git-web.gitweb.cgi: Fix syntax error with old apparmor
  versions (bsc#1229029)</changelog>
</package>
<package pkgid="1e9d5e65c61474df86a3540dce5ee6bd0adb519c8eeec9b321e8132ca14fe01b" name="git" arch="src">
  <version epoch="0" ver="2.35.3" rel="150300.10.45.2"/>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1708430400">- Do not replace apparmor configuration, fixes bsc#1216545</changelog>
  <changelog author="danilo.spinella@suse.com" date="1715860800">- Fix CVE-2024-32002, recursive clones on case-insensitive filesystems
  that support symbolic links are susceptible to case confusion,
  bsc#1224168
  * CVE-2024-32002.patch
- Fix CVE-2024-32004, arbitrary code execution during local clones,
  bsc#1224170
  * CVE-2024-32004.patch
- Fix CVE-2024-32020, file overwriting vulnerability during local clones,
  bsc#1224171
  * CVE-2024-32020-1.patch
  * CVE-2024-32020-2.patch
  * CVE-2024-32020-3.patch
  * CVE-2024-32020-4.patch
- Fix CVE-2024-32021, git may create hardlinks to arbitrary user-readable files,
  bsc#1224172
- Fix CVE-2024-32465, arbitrary code execution during clone operations,
  bsc#1224173
  * CVE-2024-32465.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1721304000">- Add CVE-2024-24577.patch
  * CVE-2024-24577: arbitrary code execution due to heap corruption
    in git_index_add (bsc#1219660)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1723636800">- usr.share.git-web.gitweb.cgi: Fix syntax error with old apparmor
  versions (bsc#1229029)</changelog>
</package>
<package pkgid="559887d119ab5b57622ffaf9055ec28a0db02815b5ec0c2ccfce7b9d3cfd7832" name="git" arch="x86_64">
  <version epoch="0" ver="2.35.3" rel="150300.10.45.2"/>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1708430400">- Do not replace apparmor configuration, fixes bsc#1216545</changelog>
  <changelog author="danilo.spinella@suse.com" date="1715860800">- Fix CVE-2024-32002, recursive clones on case-insensitive filesystems
  that support symbolic links are susceptible to case confusion,
  bsc#1224168
  * CVE-2024-32002.patch
- Fix CVE-2024-32004, arbitrary code execution during local clones,
  bsc#1224170
  * CVE-2024-32004.patch
- Fix CVE-2024-32020, file overwriting vulnerability during local clones,
  bsc#1224171
  * CVE-2024-32020-1.patch
  * CVE-2024-32020-2.patch
  * CVE-2024-32020-3.patch
  * CVE-2024-32020-4.patch
- Fix CVE-2024-32021, git may create hardlinks to arbitrary user-readable files,
  bsc#1224172
- Fix CVE-2024-32465, arbitrary code execution during clone operations,
  bsc#1224173
  * CVE-2024-32465.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1721304000">- Add CVE-2024-24577.patch
  * CVE-2024-24577: arbitrary code execution due to heap corruption
    in git_index_add (bsc#1219660)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1723636800">- usr.share.git-web.gitweb.cgi: Fix syntax error with old apparmor
  versions (bsc#1229029)</changelog>
</package>
<package pkgid="2a7df55772f4cd629a82e3ad1090fd36c8c3a7e354359ee6af6e2a6a762bebd7" name="git-core" arch="aarch64">
  <version epoch="0" ver="2.35.3" rel="150300.10.30.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
</package>
<package pkgid="30e26fd086cbd42c7c011a8cac04bc044d1e375c06d3e23f08fa7a46ebbab567" name="git-core" arch="s390x">
  <version epoch="0" ver="2.35.3" rel="150300.10.30.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
</package>
<package pkgid="06c12a745a2ff425e27bc8dbabb28a311535631e3b711c4299a9bc0942f5f6ad" name="git-core" arch="x86_64">
  <version epoch="0" ver="2.35.3" rel="150300.10.30.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
</package>
<package pkgid="caf0e7e4889b7b4744a2f232a1d27cec9f7afe388665a5ea29792a769279890d" name="git-core" arch="aarch64">
  <version epoch="0" ver="2.35.3" rel="150300.10.33.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
</package>
<package pkgid="736dc2150f5281358e7a839a249c073e8229c7844ffa20f69ff087ebfdf9cc12" name="git-core" arch="s390x">
  <version epoch="0" ver="2.35.3" rel="150300.10.33.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
</package>
<package pkgid="36c75314693ab88511ba42ccef983108fcbe50c77a87084275781109573d9cf3" name="git-core" arch="x86_64">
  <version epoch="0" ver="2.35.3" rel="150300.10.33.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
</package>
<package pkgid="cd7233309076b38968ca8234e90edcd559a3028b1994200c6cbd8c36e940460a" name="git-core" arch="aarch64">
  <version epoch="0" ver="2.35.3" rel="150300.10.36.1"/>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1708430400">- Do not replace apparmor configuration, fixes bsc#1216545</changelog>
</package>
<package pkgid="e2c5228597148463b8734dfc25e49a05e5463ac0caf2a676574c2c9a77bdc3e3" name="git-core" arch="s390x">
  <version epoch="0" ver="2.35.3" rel="150300.10.36.1"/>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1708430400">- Do not replace apparmor configuration, fixes bsc#1216545</changelog>
</package>
<package pkgid="0e85e65a950287262c396c7fafb9ce909f11decfd0e4fdbe8ec3e05588f68aed" name="git-core" arch="x86_64">
  <version epoch="0" ver="2.35.3" rel="150300.10.36.1"/>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1708430400">- Do not replace apparmor configuration, fixes bsc#1216545</changelog>
</package>
<package pkgid="9c9836b4b137ac0a9dadf964edcdbb07ae190efa636b8c3005e7f60de091284d" name="git-core" arch="aarch64">
  <version epoch="0" ver="2.35.3" rel="150300.10.39.1"/>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1708430400">- Do not replace apparmor configuration, fixes bsc#1216545</changelog>
  <changelog author="danilo.spinella@suse.com" date="1715860800">- Fix CVE-2024-32002, recursive clones on case-insensitive filesystems
  that support symbolic links are susceptible to case confusion,
  bsc#1224168
  * CVE-2024-32002.patch
- Fix CVE-2024-32004, arbitrary code execution during local clones,
  bsc#1224170
  * CVE-2024-32004.patch
- Fix CVE-2024-32020, file overwriting vulnerability during local clones,
  bsc#1224171
  * CVE-2024-32020-1.patch
  * CVE-2024-32020-2.patch
  * CVE-2024-32020-3.patch
  * CVE-2024-32020-4.patch
- Fix CVE-2024-32021, git may create hardlinks to arbitrary user-readable files,
  bsc#1224172
- Fix CVE-2024-32465, arbitrary code execution during clone operations,
  bsc#1224173
  * CVE-2024-32465.patch</changelog>
</package>
<package pkgid="aaaf0954dd0ca3c4ba41c1f2b31ac509f60d61c9043eb786d9512e01c4a357e6" name="git-core" arch="s390x">
  <version epoch="0" ver="2.35.3" rel="150300.10.39.1"/>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1708430400">- Do not replace apparmor configuration, fixes bsc#1216545</changelog>
  <changelog author="danilo.spinella@suse.com" date="1715860800">- Fix CVE-2024-32002, recursive clones on case-insensitive filesystems
  that support symbolic links are susceptible to case confusion,
  bsc#1224168
  * CVE-2024-32002.patch
- Fix CVE-2024-32004, arbitrary code execution during local clones,
  bsc#1224170
  * CVE-2024-32004.patch
- Fix CVE-2024-32020, file overwriting vulnerability during local clones,
  bsc#1224171
  * CVE-2024-32020-1.patch
  * CVE-2024-32020-2.patch
  * CVE-2024-32020-3.patch
  * CVE-2024-32020-4.patch
- Fix CVE-2024-32021, git may create hardlinks to arbitrary user-readable files,
  bsc#1224172
- Fix CVE-2024-32465, arbitrary code execution during clone operations,
  bsc#1224173
  * CVE-2024-32465.patch</changelog>
</package>
<package pkgid="c1d4cfa87585daaad4da977129fa6749a7f72af3f757603a249676bd18ff5a7c" name="git-core" arch="x86_64">
  <version epoch="0" ver="2.35.3" rel="150300.10.39.1"/>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1708430400">- Do not replace apparmor configuration, fixes bsc#1216545</changelog>
  <changelog author="danilo.spinella@suse.com" date="1715860800">- Fix CVE-2024-32002, recursive clones on case-insensitive filesystems
  that support symbolic links are susceptible to case confusion,
  bsc#1224168
  * CVE-2024-32002.patch
- Fix CVE-2024-32004, arbitrary code execution during local clones,
  bsc#1224170
  * CVE-2024-32004.patch
- Fix CVE-2024-32020, file overwriting vulnerability during local clones,
  bsc#1224171
  * CVE-2024-32020-1.patch
  * CVE-2024-32020-2.patch
  * CVE-2024-32020-3.patch
  * CVE-2024-32020-4.patch
- Fix CVE-2024-32021, git may create hardlinks to arbitrary user-readable files,
  bsc#1224172
- Fix CVE-2024-32465, arbitrary code execution during clone operations,
  bsc#1224173
  * CVE-2024-32465.patch</changelog>
</package>
<package pkgid="9f89c40809f6e5c5613347739395ea1e1cf5456e9bc8750885620d6b0a00f48e" name="git-core" arch="aarch64">
  <version epoch="0" ver="2.35.3" rel="150300.10.42.1"/>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1708430400">- Do not replace apparmor configuration, fixes bsc#1216545</changelog>
  <changelog author="danilo.spinella@suse.com" date="1715860800">- Fix CVE-2024-32002, recursive clones on case-insensitive filesystems
  that support symbolic links are susceptible to case confusion,
  bsc#1224168
  * CVE-2024-32002.patch
- Fix CVE-2024-32004, arbitrary code execution during local clones,
  bsc#1224170
  * CVE-2024-32004.patch
- Fix CVE-2024-32020, file overwriting vulnerability during local clones,
  bsc#1224171
  * CVE-2024-32020-1.patch
  * CVE-2024-32020-2.patch
  * CVE-2024-32020-3.patch
  * CVE-2024-32020-4.patch
- Fix CVE-2024-32021, git may create hardlinks to arbitrary user-readable files,
  bsc#1224172
- Fix CVE-2024-32465, arbitrary code execution during clone operations,
  bsc#1224173
  * CVE-2024-32465.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1721304000">- Add CVE-2024-24577.patch
  * CVE-2024-24577: arbitrary code execution due to heap corruption
    in git_index_add (bsc#1219660)</changelog>
</package>
<package pkgid="290f87243be6c62e30173db0344526a2117a6aa5f320c394ac2ac197b8891c8b" name="git-core" arch="s390x">
  <version epoch="0" ver="2.35.3" rel="150300.10.42.1"/>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1708430400">- Do not replace apparmor configuration, fixes bsc#1216545</changelog>
  <changelog author="danilo.spinella@suse.com" date="1715860800">- Fix CVE-2024-32002, recursive clones on case-insensitive filesystems
  that support symbolic links are susceptible to case confusion,
  bsc#1224168
  * CVE-2024-32002.patch
- Fix CVE-2024-32004, arbitrary code execution during local clones,
  bsc#1224170
  * CVE-2024-32004.patch
- Fix CVE-2024-32020, file overwriting vulnerability during local clones,
  bsc#1224171
  * CVE-2024-32020-1.patch
  * CVE-2024-32020-2.patch
  * CVE-2024-32020-3.patch
  * CVE-2024-32020-4.patch
- Fix CVE-2024-32021, git may create hardlinks to arbitrary user-readable files,
  bsc#1224172
- Fix CVE-2024-32465, arbitrary code execution during clone operations,
  bsc#1224173
  * CVE-2024-32465.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1721304000">- Add CVE-2024-24577.patch
  * CVE-2024-24577: arbitrary code execution due to heap corruption
    in git_index_add (bsc#1219660)</changelog>
</package>
<package pkgid="d6a1488394d841127514422bd994d1ca78ba72574d126828869072ce4bff6ab9" name="git-core" arch="x86_64">
  <version epoch="0" ver="2.35.3" rel="150300.10.42.1"/>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1708430400">- Do not replace apparmor configuration, fixes bsc#1216545</changelog>
  <changelog author="danilo.spinella@suse.com" date="1715860800">- Fix CVE-2024-32002, recursive clones on case-insensitive filesystems
  that support symbolic links are susceptible to case confusion,
  bsc#1224168
  * CVE-2024-32002.patch
- Fix CVE-2024-32004, arbitrary code execution during local clones,
  bsc#1224170
  * CVE-2024-32004.patch
- Fix CVE-2024-32020, file overwriting vulnerability during local clones,
  bsc#1224171
  * CVE-2024-32020-1.patch
  * CVE-2024-32020-2.patch
  * CVE-2024-32020-3.patch
  * CVE-2024-32020-4.patch
- Fix CVE-2024-32021, git may create hardlinks to arbitrary user-readable files,
  bsc#1224172
- Fix CVE-2024-32465, arbitrary code execution during clone operations,
  bsc#1224173
  * CVE-2024-32465.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1721304000">- Add CVE-2024-24577.patch
  * CVE-2024-24577: arbitrary code execution due to heap corruption
    in git_index_add (bsc#1219660)</changelog>
</package>
<package pkgid="451dd5da771ed93ee6bce29761f600d5f9b86b9d6b3a04ed72ee39d64088c1c6" name="git-core" arch="aarch64">
  <version epoch="0" ver="2.35.3" rel="150300.10.45.2"/>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1708430400">- Do not replace apparmor configuration, fixes bsc#1216545</changelog>
  <changelog author="danilo.spinella@suse.com" date="1715860800">- Fix CVE-2024-32002, recursive clones on case-insensitive filesystems
  that support symbolic links are susceptible to case confusion,
  bsc#1224168
  * CVE-2024-32002.patch
- Fix CVE-2024-32004, arbitrary code execution during local clones,
  bsc#1224170
  * CVE-2024-32004.patch
- Fix CVE-2024-32020, file overwriting vulnerability during local clones,
  bsc#1224171
  * CVE-2024-32020-1.patch
  * CVE-2024-32020-2.patch
  * CVE-2024-32020-3.patch
  * CVE-2024-32020-4.patch
- Fix CVE-2024-32021, git may create hardlinks to arbitrary user-readable files,
  bsc#1224172
- Fix CVE-2024-32465, arbitrary code execution during clone operations,
  bsc#1224173
  * CVE-2024-32465.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1721304000">- Add CVE-2024-24577.patch
  * CVE-2024-24577: arbitrary code execution due to heap corruption
    in git_index_add (bsc#1219660)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1723636800">- usr.share.git-web.gitweb.cgi: Fix syntax error with old apparmor
  versions (bsc#1229029)</changelog>
</package>
<package pkgid="b631ce614afea4d90aa7ac302c693a2e6bc3cbcfbd6679539bb56b008c4d56de" name="git-core" arch="s390x">
  <version epoch="0" ver="2.35.3" rel="150300.10.45.2"/>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1708430400">- Do not replace apparmor configuration, fixes bsc#1216545</changelog>
  <changelog author="danilo.spinella@suse.com" date="1715860800">- Fix CVE-2024-32002, recursive clones on case-insensitive filesystems
  that support symbolic links are susceptible to case confusion,
  bsc#1224168
  * CVE-2024-32002.patch
- Fix CVE-2024-32004, arbitrary code execution during local clones,
  bsc#1224170
  * CVE-2024-32004.patch
- Fix CVE-2024-32020, file overwriting vulnerability during local clones,
  bsc#1224171
  * CVE-2024-32020-1.patch
  * CVE-2024-32020-2.patch
  * CVE-2024-32020-3.patch
  * CVE-2024-32020-4.patch
- Fix CVE-2024-32021, git may create hardlinks to arbitrary user-readable files,
  bsc#1224172
- Fix CVE-2024-32465, arbitrary code execution during clone operations,
  bsc#1224173
  * CVE-2024-32465.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1721304000">- Add CVE-2024-24577.patch
  * CVE-2024-24577: arbitrary code execution due to heap corruption
    in git_index_add (bsc#1219660)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1723636800">- usr.share.git-web.gitweb.cgi: Fix syntax error with old apparmor
  versions (bsc#1229029)</changelog>
</package>
<package pkgid="2d3df82fcafbc6121f2fa34c68564b41b7418db7d1b7225380bbc63136b150fa" name="git-core" arch="x86_64">
  <version epoch="0" ver="2.35.3" rel="150300.10.45.2"/>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1708430400">- Do not replace apparmor configuration, fixes bsc#1216545</changelog>
  <changelog author="danilo.spinella@suse.com" date="1715860800">- Fix CVE-2024-32002, recursive clones on case-insensitive filesystems
  that support symbolic links are susceptible to case confusion,
  bsc#1224168
  * CVE-2024-32002.patch
- Fix CVE-2024-32004, arbitrary code execution during local clones,
  bsc#1224170
  * CVE-2024-32004.patch
- Fix CVE-2024-32020, file overwriting vulnerability during local clones,
  bsc#1224171
  * CVE-2024-32020-1.patch
  * CVE-2024-32020-2.patch
  * CVE-2024-32020-3.patch
  * CVE-2024-32020-4.patch
- Fix CVE-2024-32021, git may create hardlinks to arbitrary user-readable files,
  bsc#1224172
- Fix CVE-2024-32465, arbitrary code execution during clone operations,
  bsc#1224173
  * CVE-2024-32465.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1721304000">- Add CVE-2024-24577.patch
  * CVE-2024-24577: arbitrary code execution due to heap corruption
    in git_index_add (bsc#1219660)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1723636800">- usr.share.git-web.gitweb.cgi: Fix syntax error with old apparmor
  versions (bsc#1229029)</changelog>
</package>
<package pkgid="75604a91569f9e6fd6762327be1c65b98265e06797e3cbfa345f49a918205691" name="glib2" arch="src">
  <version epoch="0" ver="2.70.5" rel="150400.3.11.1"/>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
  <changelog author="mgorse@suse.com" date="1716292800">- Add patches to fix CVE-2024-34397 (boo#1224044):
  glib2-CVE-2024-34397.patch (glgo#GNOME/glib#3268).
  glib2-fix-ibus-regression.patch (glgo#GNOME/glib#3353)</changelog>
</package>
<package pkgid="037776b796e24c4e64c7d005ae17ec0109f76e0831bbfb9704c854e0bd3a4d9b" name="glib2" arch="src">
  <version epoch="0" ver="2.70.5" rel="150400.3.14.1"/>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
  <changelog author="mgorse@suse.com" date="1716292800">- Add patches to fix CVE-2024-34397 (boo#1224044):
  glib2-CVE-2024-34397.patch (glgo#GNOME/glib#3268).
  glib2-fix-ibus-regression.patch (glgo#GNOME/glib#3353)</changelog>
  <changelog author="mgorse@suse.com" date="1724068800">- Add glib2-gdbusmessage-cache-arg0.patch: cache the arg0 value in
  a dbus message. Fixes a possible use after free (boo#1224044).</changelog>
</package>
<package pkgid="19451fe12b413ac9c9b35229638e40166b46d33d6518b6e62f13ad4f4e56765b" name="glib2-tools" arch="aarch64">
  <version epoch="0" ver="2.70.5" rel="150400.3.11.1"/>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
  <changelog author="mgorse@suse.com" date="1716292800">- Add patches to fix CVE-2024-34397 (boo#1224044):
  glib2-CVE-2024-34397.patch (glgo#GNOME/glib#3268).
  glib2-fix-ibus-regression.patch (glgo#GNOME/glib#3353)</changelog>
</package>
<package pkgid="836bb73480f355d809983df2d7d657cf811c52dd2913f86b4da0c9eb5d811a73" name="glib2-tools" arch="s390x">
  <version epoch="0" ver="2.70.5" rel="150400.3.11.1"/>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
  <changelog author="mgorse@suse.com" date="1716292800">- Add patches to fix CVE-2024-34397 (boo#1224044):
  glib2-CVE-2024-34397.patch (glgo#GNOME/glib#3268).
  glib2-fix-ibus-regression.patch (glgo#GNOME/glib#3353)</changelog>
</package>
<package pkgid="1f5da135177d9183e39041cc66bf09a1a1adef57aa1c10920a093538bff57efe" name="glib2-tools" arch="x86_64">
  <version epoch="0" ver="2.70.5" rel="150400.3.11.1"/>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
  <changelog author="mgorse@suse.com" date="1716292800">- Add patches to fix CVE-2024-34397 (boo#1224044):
  glib2-CVE-2024-34397.patch (glgo#GNOME/glib#3268).
  glib2-fix-ibus-regression.patch (glgo#GNOME/glib#3353)</changelog>
</package>
<package pkgid="dfa906d658fcb738548e5b59f941b3bdd036d32b5b1c3b8a3d11f6fc536f5be4" name="glib2-tools" arch="aarch64">
  <version epoch="0" ver="2.70.5" rel="150400.3.14.1"/>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
  <changelog author="mgorse@suse.com" date="1716292800">- Add patches to fix CVE-2024-34397 (boo#1224044):
  glib2-CVE-2024-34397.patch (glgo#GNOME/glib#3268).
  glib2-fix-ibus-regression.patch (glgo#GNOME/glib#3353)</changelog>
  <changelog author="mgorse@suse.com" date="1724068800">- Add glib2-gdbusmessage-cache-arg0.patch: cache the arg0 value in
  a dbus message. Fixes a possible use after free (boo#1224044).</changelog>
</package>
<package pkgid="ac8960a9df126fd0447a99b0d38dea8c87f53bf5ea5a5a5ce79c4490a90f1120" name="glib2-tools" arch="s390x">
  <version epoch="0" ver="2.70.5" rel="150400.3.14.1"/>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
  <changelog author="mgorse@suse.com" date="1716292800">- Add patches to fix CVE-2024-34397 (boo#1224044):
  glib2-CVE-2024-34397.patch (glgo#GNOME/glib#3268).
  glib2-fix-ibus-regression.patch (glgo#GNOME/glib#3353)</changelog>
  <changelog author="mgorse@suse.com" date="1724068800">- Add glib2-gdbusmessage-cache-arg0.patch: cache the arg0 value in
  a dbus message. Fixes a possible use after free (boo#1224044).</changelog>
</package>
<package pkgid="e07deeef189325cf5543e7d7597e8795e960c38eb06b5953c9b013d7df060be9" name="glib2-tools" arch="x86_64">
  <version epoch="0" ver="2.70.5" rel="150400.3.14.1"/>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
  <changelog author="mgorse@suse.com" date="1716292800">- Add patches to fix CVE-2024-34397 (boo#1224044):
  glib2-CVE-2024-34397.patch (glgo#GNOME/glib#3268).
  glib2-fix-ibus-regression.patch (glgo#GNOME/glib#3353)</changelog>
  <changelog author="mgorse@suse.com" date="1724068800">- Add glib2-gdbusmessage-cache-arg0.patch: cache the arg0 value in
  a dbus message. Fixes a possible use after free (boo#1224044).</changelog>
</package>
<package pkgid="30acda6fd66c3c1bf2663eecf0cf55830b83f9291e52fcd711c84392e9775154" name="glibc" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.63.1"/>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
</package>
<package pkgid="ad649d262dbd3b40a327662abe0be17d6445167921e6a8b09d23dee2d88514f7" name="glibc" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.63.1"/>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
</package>
<package pkgid="d0ea80a2074b614361e6b3cca38eadae45a623f187334324f4181298d98cddcd" name="glibc" arch="src">
  <version epoch="0" ver="2.31" rel="150300.63.1"/>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
</package>
<package pkgid="4605e7cd661b0e322fafa1aca67b1963e316f23af0637db0966f5643e1834460" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.63.1"/>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
</package>
<package pkgid="39f6c156f2e0b5956f36fdc97d30d4df9f4e28b9a013c6470001817c3ebcfefd" name="glibc" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.68.1"/>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
</package>
<package pkgid="48bc52daeaca240a3f82f2a488b21ed85c25214d5b39b997863dcbf45b9f5be1" name="glibc" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.68.1"/>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
</package>
<package pkgid="0c2c3101335ef5b1729b212305178f380debd45050fa8563073936f4cbd65e37" name="glibc" arch="src">
  <version epoch="0" ver="2.31" rel="150300.68.1"/>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
</package>
<package pkgid="96ad310b634b8d73f96070e5de5757bcb0e8a8db4e5384c028c77aaad68b2951" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.68.1"/>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
</package>
<package pkgid="5600c5eeca846f4e33a6f8c931eda1a4fcc154173dad5f80908db09bb72612e3" name="glibc" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.71.1"/>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
</package>
<package pkgid="a36d64f6915fe134224893e8f06b0b1a152547cdc375ef1a13bb60a5e77bab20" name="glibc" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.71.1"/>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
</package>
<package pkgid="99628f1dcf8872948d9fcc70249be90ff573cfa18800cba567b8bccf73aebe2c" name="glibc" arch="src">
  <version epoch="0" ver="2.31" rel="150300.71.1"/>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
</package>
<package pkgid="a7599d34bf983b693663d9eae53a64ed56272bd4a4574abf7bf766ea93a56450" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.71.1"/>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
</package>
<package pkgid="d6953f8774223f3b52413ee127a3a2f6f8fcabb4a25d71c67843ca9252643941" name="glibc" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.74.1"/>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
</package>
<package pkgid="c89f10a77ba9d57795370ed19abb91634399abc143c6045723059e7d2ba8e9c2" name="glibc" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.74.1"/>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
</package>
<package pkgid="650b6d722189e1da9d7da5480c16f9eaff3fd02f4fa8de20884a43d1d23fb594" name="glibc" arch="src">
  <version epoch="0" ver="2.31" rel="150300.74.1"/>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
</package>
<package pkgid="511cc6848824c215f8fec77bc5d90aad153a6a6c3b72218a549e431088cfd67d" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.74.1"/>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
</package>
<package pkgid="4e81bccb33fa1d1e2f02d30aabaf1f9f16176ff8e422c4b4893bedaf9f5b24c4" name="glibc" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.83.1"/>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715083200">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1715601600">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)</changelog>
</package>
<package pkgid="6c791966d75581dca2559f551bbc4f2d3e0ce837aa69378c1c0092d585b9c21b" name="glibc" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.83.1"/>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715083200">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1715601600">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)</changelog>
</package>
<package pkgid="8bc4ec7b3fad9b49f33d2a6f6b336a7ad8f7dbb65ee49851ffba908ed10565a3" name="glibc" arch="src">
  <version epoch="0" ver="2.31" rel="150300.83.1"/>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715083200">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1715601600">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)</changelog>
</package>
<package pkgid="1278b347a1da5f21c19740d4f09cce456252985ae7f6f94302a4d12589f22ece" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.83.1"/>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715083200">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1715601600">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)</changelog>
</package>
<package pkgid="16638c748a5d497e6037d704ed62da4a60c92df23587cb9986dad199c1f6dfe0" name="glibc" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.86.3"/>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715083200">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1715601600">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)</changelog>
  <changelog author="schwab@suse.de" date="1722945600">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228043, BZ
  [#31934])</changelog>
</package>
<package pkgid="d117962b9876577ca1393cfc169683974181a8db2cea022e71de2c49b8f44368" name="glibc" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.86.3"/>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715083200">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1715601600">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)</changelog>
  <changelog author="schwab@suse.de" date="1722945600">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228043, BZ
  [#31934])</changelog>
</package>
<package pkgid="0e0c5dbb15c17ae16e2e218e095b3a7264b1b9e4cac260c4ace1106990e7ce61" name="glibc" arch="src">
  <version epoch="0" ver="2.31" rel="150300.86.3"/>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715083200">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1715601600">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)</changelog>
  <changelog author="schwab@suse.de" date="1722945600">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228043, BZ
  [#31934])</changelog>
</package>
<package pkgid="1dcff082c6f8184b53ad8d7e4196218fb1a5dca42f7414f3aebf42dccab80012" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.86.3"/>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715083200">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1715601600">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)</changelog>
  <changelog author="schwab@suse.de" date="1722945600">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228043, BZ
  [#31934])</changelog>
</package>
<package pkgid="5e1c1af73a4417eebf1eb9984276c9cd3098e05945f69c583aec6c1bb9b59f09" name="glibc-devel" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.63.1"/>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
</package>
<package pkgid="1e42cd387f0f246aad86b0288b503c8c7a72d0d5146dc11a448239da6460302f" name="glibc-devel" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.63.1"/>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
</package>
<package pkgid="3c938332f6d797bf39bc4940e1d029d511dfcd9c6afaae27d52112374b66495a" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.63.1"/>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
</package>
<package pkgid="95c3e071e3af44fdc5c4e378faf4074b14a087e1c278bd9cbb68a7e42c4f7fe9" name="glibc-devel" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.68.1"/>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
</package>
<package pkgid="a5f71e57029d329d999474afa4e769f655e7074ac790712964581b93ce90122f" name="glibc-devel" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.68.1"/>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
</package>
<package pkgid="df4ae910035d4bd40a7f41654863c5b1c71b8ce27c62422d69429ea3d5d49090" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.68.1"/>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
</package>
<package pkgid="0aa1aecd135aafaab78a93c2a4b815e1ba18009e326bd5c87d0c5354256d2b7d" name="glibc-devel" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.71.1"/>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
</package>
<package pkgid="2dca64523a404a3f78ba9a57842193f8d18726d96853315acdc80db6acc2d3e1" name="glibc-devel" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.71.1"/>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
</package>
<package pkgid="631a6ba0980934f48867d1b0a9e05a069c07cb5a40c28e837a1205f49aea99b5" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.71.1"/>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
</package>
<package pkgid="c087ba174845bcd58cc911c27739fb4950818d737d7a964fba9927357e002da4" name="glibc-devel" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.74.1"/>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
</package>
<package pkgid="4197da2f6a3683008628483a39b4d5c8be09cac96e788901b53cd1d0b25caf46" name="glibc-devel" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.74.1"/>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
</package>
<package pkgid="fc4173cb9c39e749fb1f15e497553f00ae58aebeab35d28a98b3183f77465f80" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.74.1"/>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
</package>
<package pkgid="af23b38f62fdc1d55122a55fb65972c175cc1c087b9c5bcc50b1bb53b6337cb4" name="glibc-devel" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.83.1"/>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715083200">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1715601600">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)</changelog>
</package>
<package pkgid="bf51e2cd7e98005ae9ec21b6f4eb915c7db3a204e80e25fbda73566036f11489" name="glibc-devel" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.83.1"/>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715083200">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1715601600">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)</changelog>
</package>
<package pkgid="fd53af32a8c666ebd0f956e07d8ac2ec85798fc7d87be61f8e3a680c3926372f" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.83.1"/>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715083200">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1715601600">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)</changelog>
</package>
<package pkgid="855176647592eb53033046b9d9a2235c0194447bd24cb5e1179f016ddbe06e6a" name="glibc-devel" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.86.3"/>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715083200">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1715601600">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)</changelog>
  <changelog author="schwab@suse.de" date="1722945600">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228043, BZ
  [#31934])</changelog>
</package>
<package pkgid="b3f8191b740b65f0ba2eeb8ac7e5013d61167a11e06af3599a1ea47962544ffb" name="glibc-devel" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.86.3"/>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715083200">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1715601600">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)</changelog>
  <changelog author="schwab@suse.de" date="1722945600">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228043, BZ
  [#31934])</changelog>
</package>
<package pkgid="59d183f72e36637f23c5748c6b4d8770d79dd39d52e95355ced3ab344510f11d" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.86.3"/>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715083200">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1715601600">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)</changelog>
  <changelog author="schwab@suse.de" date="1722945600">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228043, BZ
  [#31934])</changelog>
</package>
<package pkgid="9f01671f44dbf858a609d85be7f61922fade4a66bc6dcf238407d41389648f93" name="glibc-locale" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.63.1"/>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
</package>
<package pkgid="8c341d756d66e6f088c4b7a31f084720e29c59e836edbc73b5e5ab8d173e5583" name="glibc-locale" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.63.1"/>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
</package>
<package pkgid="4dd56c5df933804b6c5191b47758d8cff23999edf9869a0a0e5023d3142472bb" name="glibc-locale" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.63.1"/>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
</package>
<package pkgid="0c2802cd126837e067e34ee5ccc683aef69f60027ab96f52011c5efb897ac531" name="glibc-locale" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.68.1"/>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
</package>
<package pkgid="42ecb0cb91c3b10ce68bc17f482dedce30b9fb61868a0b65903fd999ddd5e1de" name="glibc-locale" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.68.1"/>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
</package>
<package pkgid="97ddbe2fc10a79bb1bcc2895974aca01eed02a5be045d89bbefbbf39e332c36a" name="glibc-locale" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.68.1"/>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
</package>
<package pkgid="c5c4231ffdaf5787c8fd997653ad23dd556a1d91cef36404c85e2f43b512c8f8" name="glibc-locale" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.71.1"/>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
</package>
<package pkgid="d6c75d52cce16a2e6e20028c7f36938caaf6b1bf5b26a2e51fdeeed77dacc72c" name="glibc-locale" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.71.1"/>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
</package>
<package pkgid="5338cf05d99166a6557bcb226d5a64efdc964bea69831504d3969931398f1aeb" name="glibc-locale" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.71.1"/>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
</package>
<package pkgid="7e41b2c9bf96f95af1e6c09d7875d6c280ea5c7f19fb9d1aed30ad22a9e4289a" name="glibc-locale" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.74.1"/>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
</package>
<package pkgid="667c43f948a17e754791bb024ef72a1236c18f3982a6c4f77da1b1bdd7d9ac7b" name="glibc-locale" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.74.1"/>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
</package>
<package pkgid="680be3783d533c603f3159d2ef103f8aa84c8ed48d4fa9a3059cb8a65421ccfb" name="glibc-locale" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.74.1"/>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
</package>
<package pkgid="b5135673ce09ed7bc57575951fd0039fb0260fd4bf7e62b2b427f22bf42ba444" name="glibc-locale" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.83.1"/>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715083200">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1715601600">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)</changelog>
</package>
<package pkgid="5e9c058c84e0d16142d97e0b9d52772154fbd7c0b23029bbbad08d785b8b047a" name="glibc-locale" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.83.1"/>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715083200">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1715601600">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)</changelog>
</package>
<package pkgid="a5bd9f6d2f87df5ab2eb3adef917fcd26f99eac3079c60e648fb7e2c83729353" name="glibc-locale" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.83.1"/>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715083200">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1715601600">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)</changelog>
</package>
<package pkgid="3ca07b8a354c026a89581035a055561fa79454413a257d1bc8210397d61d64e6" name="glibc-locale" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.86.3"/>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715083200">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1715601600">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)</changelog>
  <changelog author="schwab@suse.de" date="1722945600">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228043, BZ
  [#31934])</changelog>
</package>
<package pkgid="cf8e073bbc43079a7f36522e5eeaac4564e0f3d03a2af406307f11470576f981" name="glibc-locale" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.86.3"/>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715083200">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1715601600">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)</changelog>
  <changelog author="schwab@suse.de" date="1722945600">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228043, BZ
  [#31934])</changelog>
</package>
<package pkgid="4e8431167078e2760634199ecf17fedf71434e301b1caadad6188c794052f4dd" name="glibc-locale" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.86.3"/>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715083200">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1715601600">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)</changelog>
  <changelog author="schwab@suse.de" date="1722945600">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228043, BZ
  [#31934])</changelog>
</package>
<package pkgid="8587611444fe60667d2110a9284c55e29090f2d16c21f210c8333a68b45a47e2" name="glibc-locale-base" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.63.1"/>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
</package>
<package pkgid="ba2dea237ae8f2976c1d96a46e27cfa63561d5974ddcd9704626be32512078c3" name="glibc-locale-base" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.63.1"/>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
</package>
<package pkgid="66d9e0aee5e99a6c79ef53246e613f036f757c5548205bc0f9937a0ff3428e00" name="glibc-locale-base" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.63.1"/>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
</package>
<package pkgid="6754b14d5263d94b5231abf94f6ee0f1762172101f215994479781a4474a0879" name="glibc-locale-base" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.68.1"/>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
</package>
<package pkgid="0dfc26d9fd7287555cc74b9b9b2f64e22748f12421ec89b003972a16db8af42e" name="glibc-locale-base" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.68.1"/>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
</package>
<package pkgid="f6f64fdaccae3e939a3ae7cf9f949f92a96d2d5e693de1603f10dfa5ede64cd2" name="glibc-locale-base" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.68.1"/>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
</package>
<package pkgid="68d74bc1bf89cf54af8720b5f0fe8b1d5ba4f36ed2bedcd1821a1d5f0ec4e8fb" name="glibc-locale-base" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.71.1"/>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
</package>
<package pkgid="3a1cc523d4cf74189364e7494bc1981eb21b2d5c84dc5f17eb4d5c3374e29945" name="glibc-locale-base" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.71.1"/>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
</package>
<package pkgid="678eeb6ad805314c17ca41b7c4d1f9d049211ca5c99c77204c7ea808f8bd1b94" name="glibc-locale-base" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.71.1"/>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
</package>
<package pkgid="e3cdeb9826c56d6a07ce7d234edac1c69abb685ee46e68fa0c7276f3d325e46e" name="glibc-locale-base" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.74.1"/>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
</package>
<package pkgid="1d5f107332e96134ecdf44120ef52848620140413472a16abcc3048775f32cbd" name="glibc-locale-base" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.74.1"/>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
</package>
<package pkgid="ea995fbf4892de53c86697ea63d068036f848568b2fb4e61f60b1ac860e8784b" name="glibc-locale-base" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.74.1"/>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
</package>
<package pkgid="26d1b96d8eda4996ba0149315dfeea8749ede46da2d9e57551eda25f2199f9fe" name="glibc-locale-base" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.83.1"/>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715083200">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1715601600">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)</changelog>
</package>
<package pkgid="a02c48100f533aec6bdfc64b41273ac1da071db928cd327ab6e441ca1bb497be" name="glibc-locale-base" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.83.1"/>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715083200">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1715601600">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)</changelog>
</package>
<package pkgid="782c994c42c27b7c1e8b1cf68ab61ea6a080d1e829594748789d9367fb5fbcc3" name="glibc-locale-base" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.83.1"/>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715083200">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1715601600">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)</changelog>
</package>
<package pkgid="db58b2e3a3d062966f5b9b47e0b84510a0926bdbbb8eef71a8901f07b96c7c38" name="glibc-locale-base" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.86.3"/>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715083200">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1715601600">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)</changelog>
  <changelog author="schwab@suse.de" date="1722945600">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228043, BZ
  [#31934])</changelog>
</package>
<package pkgid="ada3a82171f5b001ad7672b3d15f1f9719af92ccd3c71e2ed42763d2c6ae05b5" name="glibc-locale-base" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.86.3"/>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715083200">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1715601600">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)</changelog>
  <changelog author="schwab@suse.de" date="1722945600">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228043, BZ
  [#31934])</changelog>
</package>
<package pkgid="647b9217d7688e73c4cfe9e00621cde342e6d73ce679a8b393ddf50673ad0136" name="glibc-locale-base" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.86.3"/>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715083200">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1715601600">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)</changelog>
  <changelog author="schwab@suse.de" date="1722945600">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228043, BZ
  [#31934])</changelog>
</package>
<package pkgid="6bf60d010e937b97c96b17ad96b2283867e210dc286018e20d6d2db20918e198" name="gnutls" arch="aarch64">
  <version epoch="0" ver="3.7.3" rel="150400.4.38.1"/>
  <changelog author="pmonreal@suse.com" date="1652097600">- FIPS: Add missing requirements for the SLI [bsc#1190698]
  * Remove 3DES from FIPS approved algorithms:
  - gnutls-Remove-3DES-from-FIPS-approved-algos.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570
  * DRBG service (gnutls_rnd) should be considered approved:
  - gnutls-Add-missing-FIPS-service-indicator-transitions.patch
  - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch
  - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569</changelog>
  <changelog author="pmonreal@suse.com" date="1652097601">- FIPS: Make sure zeroization is performed in all API functions
  * Add gnutls-zeroization-API-functions.patch [bsc#1191021]
  * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573</changelog>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
</package>
<package pkgid="708bc3185d1be493a4a40ffacdc0cab74252275ba58f56ec350e5c18fb9341bc" name="gnutls" arch="s390x">
  <version epoch="0" ver="3.7.3" rel="150400.4.38.1"/>
  <changelog author="pmonreal@suse.com" date="1652097600">- FIPS: Add missing requirements for the SLI [bsc#1190698]
  * Remove 3DES from FIPS approved algorithms:
  - gnutls-Remove-3DES-from-FIPS-approved-algos.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570
  * DRBG service (gnutls_rnd) should be considered approved:
  - gnutls-Add-missing-FIPS-service-indicator-transitions.patch
  - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch
  - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569</changelog>
  <changelog author="pmonreal@suse.com" date="1652097601">- FIPS: Make sure zeroization is performed in all API functions
  * Add gnutls-zeroization-API-functions.patch [bsc#1191021]
  * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573</changelog>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
</package>
<package pkgid="92d1c5187baa2047f07d6a3ca95899b0fd79b215a0088705e5248f0639538f83" name="gnutls" arch="src">
  <version epoch="0" ver="3.7.3" rel="150400.4.38.1"/>
  <changelog author="pmonreal@suse.com" date="1652097600">- FIPS: Add missing requirements for the SLI [bsc#1190698]
  * Remove 3DES from FIPS approved algorithms:
  - gnutls-Remove-3DES-from-FIPS-approved-algos.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570
  * DRBG service (gnutls_rnd) should be considered approved:
  - gnutls-Add-missing-FIPS-service-indicator-transitions.patch
  - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch
  - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569</changelog>
  <changelog author="pmonreal@suse.com" date="1652097601">- FIPS: Make sure zeroization is performed in all API functions
  * Add gnutls-zeroization-API-functions.patch [bsc#1191021]
  * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573</changelog>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
</package>
<package pkgid="618bb64ce420906d0099308edf6513aaa60fa9bd2ce280e222f503d5a410a289" name="gnutls" arch="x86_64">
  <version epoch="0" ver="3.7.3" rel="150400.4.38.1"/>
  <changelog author="pmonreal@suse.com" date="1652097600">- FIPS: Add missing requirements for the SLI [bsc#1190698]
  * Remove 3DES from FIPS approved algorithms:
  - gnutls-Remove-3DES-from-FIPS-approved-algos.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570
  * DRBG service (gnutls_rnd) should be considered approved:
  - gnutls-Add-missing-FIPS-service-indicator-transitions.patch
  - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch
  - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569</changelog>
  <changelog author="pmonreal@suse.com" date="1652097601">- FIPS: Make sure zeroization is performed in all API functions
  * Add gnutls-zeroization-API-functions.patch [bsc#1191021]
  * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573</changelog>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
</package>
<package pkgid="1da26ca59648118e86e87321bddbb97035be6685796c80a82b79fa37f757f080" name="gnutls" arch="aarch64">
  <version epoch="0" ver="3.7.3" rel="150400.4.41.3"/>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Security fix: [bsc#1218865, CVE-2024-0553]
  * Incomplete fix for CVE-2023-5981.
  * The response times to malformed ciphertexts in RSA-PSK
    ClientKeyExchange differ from response times of ciphertexts
    with correct PKCS#1 v1.5 padding.
  * Add gnutls-CVE-2024-0553.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492801">- Security fix: [bsc#1218862, CVE-2024-0567]
  * gnutls: rejects certificate chain with distributed trust
  * Cockpit (which uses gnuTLS) rejects certificate chain with
    distributed trust.
  * Add gnutls-CVE-2024-0567.patch</changelog>
</package>
<package pkgid="8f1f10fd34541f9b5fa7d660bab40fdd517727120b4b5a3007c8ec729340e03a" name="gnutls" arch="s390x">
  <version epoch="0" ver="3.7.3" rel="150400.4.41.3"/>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Security fix: [bsc#1218865, CVE-2024-0553]
  * Incomplete fix for CVE-2023-5981.
  * The response times to malformed ciphertexts in RSA-PSK
    ClientKeyExchange differ from response times of ciphertexts
    with correct PKCS#1 v1.5 padding.
  * Add gnutls-CVE-2024-0553.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492801">- Security fix: [bsc#1218862, CVE-2024-0567]
  * gnutls: rejects certificate chain with distributed trust
  * Cockpit (which uses gnuTLS) rejects certificate chain with
    distributed trust.
  * Add gnutls-CVE-2024-0567.patch</changelog>
</package>
<package pkgid="1100ef7707542ea98d37893c3f59694127c703b1b97c25a87f5d0a3d8983d063" name="gnutls" arch="src">
  <version epoch="0" ver="3.7.3" rel="150400.4.41.3"/>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Security fix: [bsc#1218865, CVE-2024-0553]
  * Incomplete fix for CVE-2023-5981.
  * The response times to malformed ciphertexts in RSA-PSK
    ClientKeyExchange differ from response times of ciphertexts
    with correct PKCS#1 v1.5 padding.
  * Add gnutls-CVE-2024-0553.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492801">- Security fix: [bsc#1218862, CVE-2024-0567]
  * gnutls: rejects certificate chain with distributed trust
  * Cockpit (which uses gnuTLS) rejects certificate chain with
    distributed trust.
  * Add gnutls-CVE-2024-0567.patch</changelog>
</package>
<package pkgid="6ae1955ea03dbd3f320a74e91b5ff05bbe4cb2c1bf82702d237c9a93bbf5039d" name="gnutls" arch="x86_64">
  <version epoch="0" ver="3.7.3" rel="150400.4.41.3"/>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Security fix: [bsc#1218865, CVE-2024-0553]
  * Incomplete fix for CVE-2023-5981.
  * The response times to malformed ciphertexts in RSA-PSK
    ClientKeyExchange differ from response times of ciphertexts
    with correct PKCS#1 v1.5 padding.
  * Add gnutls-CVE-2024-0553.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492801">- Security fix: [bsc#1218862, CVE-2024-0567]
  * gnutls: rejects certificate chain with distributed trust
  * Cockpit (which uses gnuTLS) rejects certificate chain with
    distributed trust.
  * Add gnutls-CVE-2024-0567.patch</changelog>
</package>
<package pkgid="052e7a61bd1aa0f3b311295b2442586e05cfb9c3610bd0cf5ce907584421bea4" name="gnutls" arch="aarch64">
  <version epoch="0" ver="3.7.3" rel="150400.4.44.1"/>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Security fix: [bsc#1218865, CVE-2024-0553]
  * Incomplete fix for CVE-2023-5981.
  * The response times to malformed ciphertexts in RSA-PSK
    ClientKeyExchange differ from response times of ciphertexts
    with correct PKCS#1 v1.5 padding.
  * Add gnutls-CVE-2024-0553.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492801">- Security fix: [bsc#1218862, CVE-2024-0567]
  * gnutls: rejects certificate chain with distributed trust
  * Cockpit (which uses gnuTLS) rejects certificate chain with
    distributed trust.
  * Add gnutls-CVE-2024-0567.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
</package>
<package pkgid="b881ede558ea55da979ead2dac5acf9005c700ddfbe787fb04325f0428eb5ded" name="gnutls" arch="s390x">
  <version epoch="0" ver="3.7.3" rel="150400.4.44.1"/>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Security fix: [bsc#1218865, CVE-2024-0553]
  * Incomplete fix for CVE-2023-5981.
  * The response times to malformed ciphertexts in RSA-PSK
    ClientKeyExchange differ from response times of ciphertexts
    with correct PKCS#1 v1.5 padding.
  * Add gnutls-CVE-2024-0553.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492801">- Security fix: [bsc#1218862, CVE-2024-0567]
  * gnutls: rejects certificate chain with distributed trust
  * Cockpit (which uses gnuTLS) rejects certificate chain with
    distributed trust.
  * Add gnutls-CVE-2024-0567.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
</package>
<package pkgid="8b34e7763096f7d1811b37e2076f2ba7d1d9a9871de1cc780358430294354c7f" name="gnutls" arch="src">
  <version epoch="0" ver="3.7.3" rel="150400.4.44.1"/>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Security fix: [bsc#1218865, CVE-2024-0553]
  * Incomplete fix for CVE-2023-5981.
  * The response times to malformed ciphertexts in RSA-PSK
    ClientKeyExchange differ from response times of ciphertexts
    with correct PKCS#1 v1.5 padding.
  * Add gnutls-CVE-2024-0553.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492801">- Security fix: [bsc#1218862, CVE-2024-0567]
  * gnutls: rejects certificate chain with distributed trust
  * Cockpit (which uses gnuTLS) rejects certificate chain with
    distributed trust.
  * Add gnutls-CVE-2024-0567.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
</package>
<package pkgid="8b3ef039644131a502883db576b95d74c984f03a1cc52e0568166f024b34ed69" name="gnutls" arch="x86_64">
  <version epoch="0" ver="3.7.3" rel="150400.4.44.1"/>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Security fix: [bsc#1218865, CVE-2024-0553]
  * Incomplete fix for CVE-2023-5981.
  * The response times to malformed ciphertexts in RSA-PSK
    ClientKeyExchange differ from response times of ciphertexts
    with correct PKCS#1 v1.5 padding.
  * Add gnutls-CVE-2024-0553.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492801">- Security fix: [bsc#1218862, CVE-2024-0567]
  * gnutls: rejects certificate chain with distributed trust
  * Cockpit (which uses gnuTLS) rejects certificate chain with
    distributed trust.
  * Add gnutls-CVE-2024-0567.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
</package>
<package pkgid="0b0038c39e192fb8210733f25d3a9fa98aeb101328cb160a6ad3d22a5dfd37f4" name="gpg2" arch="aarch64">
  <version epoch="0" ver="2.2.27" rel="150300.3.8.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1575720000">- update to 2.2.19:
  * gpg: Fix double free when decrypting for hidden recipients
  * gpg: Use auto-key-locate for encryption even for mail addressed
    given with angle brackets
  * gpgsm: Add special case for certain expired intermediate
    certificates</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1578571200">- Security fix: [bsc#1157900, CVE-2019-14855, jsc#SLE-16534]
  * Web of Trust forgeries using collisions in SHA-1 signatures
  * Ignore all SHA-1 signatures in 3rd party key signatures.
  * Forbid the creation of SHA-1 third-party key signatures.
  * Add option --allow-weak-key-signatures
- Add gnupg-CVE-2019-14855.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1578657600">- Accept key updates even without UIDs [bsc#1143158]
- Add patches:
  * gnupg-allow-import-of-previously-known-keys-even-without-UIDs.patch
  * gnupg-accept_subkeys_with_a_good_revocation_but_no_self-sig_during_import.patch
  * gnupg-add-test-cases-for-import-without-uid.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582113600">- Fix build with GCC-10: [bsc#1160394]
  * Always use EXTERN_UNLESS_MAIN_MODULE pattern
  * In GCC-10, the default option -fcommon will change to -fno-common
- Add gpg2-gcc10-build-fno-common.patch</changelog>
  <changelog author="fvogt@suse.com" date="1584100800">- Split dirmngr into a subpackage to avoid a hard dependency of
  gpg2 on libgnutls</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1584705600">- GnuPG 2.2.20:
  * Protect the error counter against overflow to guarantee that the
    tools can't be tricked into returning success after an error
  * gpg: Make really sure that --verify-files always returns an error
  * gpg: Fix key listing --with-secret if a pattern is given
  * gpg: Fix detection of certain keys used as default-key
  * gpg: Fix default-key selection when a card is available
  * gpg: Fix key expiration and key usage for keys created with a
    creation date of zero
  * gpgsm: Fix import of some CR,LF terminated certificates
  * gpg: New options --include-key-block and --auto-key-import to
    allow encrypted replies after an initial signed message
  * gpg: Allow the use of a fingerprint with --trusted-key
  * gpg: New property "fpr" for use by --export-filter
  * scdaemon: Disable the pinpad if a KDF DO is used
  * dirmngr: Improve finding OCSP certificates
- drop gpg2-gcc10-build-fno-common.patch, upstream</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588248000">- Fix gpgme and gpgme-qt builds on gpg2 2.2.20 update [bsc#1170811]
- Refresh patches:
  * gnupg-2.2.8-files-are-digests.patch
  * gnupg-add_legacy_FIPS_mode_option.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590062400">- Fix warning: agent returned different signature type ssh-rsa
  * The gpg-agent's ssh-agent does not handle flags in signing
    requests properly [bsc#1161268, bsc#1172308]
  * Add gnupg-gpg-agent-ssh-agent.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1594296000">- GnuPG 2.2.21:
  * gpg: Improve symmetric decryption speed by about 25%
  * gpg: Support decryption of AEAD encrypted data packets
  * gpg: Add option --no-include-key-block
  * gpg: Allow for extra padding in ECDH
  * gpg: Only a single pinentry is shown for symmetric encryption if
    the pinentry supports this
  * gpg: Print a note if no keys are given to --delete-key
  * gpg,gpgsm: The ridiculous passphrase quality bar is not anymore
    shown
  * gpgsm: Certificates without a CRL distribution point are now
    considered valid without looking up a CRL. The new option
  - -enable-issuer-based-crl-check can be used to revert to the
    former behaviour
  * gpgsm: Support rsaPSS signature verification
  * gpgsm: Unless CRL checking is disabled lookup a missing issuer
    certificate using the certificate's authorityInfoAccess
  * gpgsm: Print the certificate's serial number also in decimal
    notation
  * gpgsm: Fix possible NULL-deref in messages of --gen-key
  * scd: Support the CardOS 5 based D-Trust Card 3.1
  * dirmngr: Allow http URLs with "LOOKUP --url"
  * wkd: Take name of sendmail from configure. Fixes an OpenBSD
    specific bug</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1594728000">- Fix regression in latest gpg2 that makes gpgme fail to build [bsc#1174007]
- Add gnupg-gpgme-t-encrypt-sym.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1598961600">- GnuPG 2.2.22:
  * gpg: Change the default key algorithm to rsa3072
  * gpg: Add regular expression support for Trust Signatures on
    all platforms
  * gpg: Ignore --personal-digest-prefs for ECDSA keys
  * gpgsm: Make rsaPSS a de-vs compliant scheme
  * gpgsm: Show also the SHA256 fingerprint in key listings
  * gpgsm: Do not require a default keyring for --gpgconf-list
  * gpg-agent: Default to extended key format and record the
    creation time of keys
    Add new option --disable-extended-key-format
  * gpg-agent: Support the WAYLAND_DISPLAY envvar
  * gpg-agent: Allow using --gpgconf-list even if HOME does not
    exist
  * gpg-agent: Make the Pinentry work even if the envvar TERM is
    set to the empty string
  * scdaemon: Add a workaround for Gnuk tokens &lt;= 2.15 which
    wrongly incremented the error counter when using the
    "verify" command of "gpg --edit-key" with only the signature
    key being present
  * dirmngr: Better handle systems with disabled IPv6
  * gpgpslit: Install tool.  It was not installed in the past to
    avoid conflicts with the version installed by GnuPG 1.4
  * gpgtar: Make --files-from and --null work as documented
- drop gnupg-gpgme-t-encrypt-sym.patch, upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1599048000">- Fix segv importing certain keys (e.g. ed25519). [bsc#1176034]
- Add gnupg-2.2.22-fix-segv-import-keys.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599134400">- GnuPG 2.2.23:
  * gpg: fix AHEAD preference list overflow boo#1176034 /  CVE-2020-25125
  * gpg: fix possible segv in the key cleaning code
  * gpgsm: fix a minor RFC2253 parser gub
  * scdaemon: Fix a PIN verify failure on certain OpenPGP card
    implementations</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1605614400">- GnuPG 2.2.24:
  * gpg: New command --quick-revoke-sig
  * gpg: Do not use weak digest algos if selected by recipient
    preference during sign+encrypt
  * gpg: Switch to AES256 for symmetric encryption in de-vs mode
  * gpg: Silence weak digest warnings with --quiet
  * gpg: Print new status line CANCELED_BY_USER for a cancel during
    symmetric encryption
  * gpg: Fix the encrypt+sign hash algo preference selection for
    ECDSA.  This is in particular needed for keys created from
    existing smartcard based keys
  * agent: Fix secret key import of GnuPG 2.3 generated Ed25519
    keys
  * agent: Keep some permissions of private-keys-v1.d
  * dirmngr: Align sks-keyservers.netCA.pem use between ntbtls and
    gnutls builds
  * dirmngr: Fix the pool keyserver case for a single host in the
    pool
  * scd: Fix the use case of verify_chv2 by CHECKPIN
  * scd: Various improvements to the ccid-driver
  * scd: Minor fixes for Yubikey
  * gpgconf: New option --show-versions
  * i18n: Complete overhaul and completion of the Italian
    translation</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606132800">- GnuPG 2.2.25:
  * scd: Fix regression in 2.2.24 requiring gpg --card-status
    before signing or decrypting
  * gpgsm: Using Libksba 1.5.0 signatures with a rarely used
    combination of attributes can now be verified</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1610452800">- GnuPG 2.2.27:
  * gpgconf: Fix case with neither local nor global gpg.conf
  * gpgconf: Fix description of two new options
- includes changes from 2.2.26:
  * gpg: New AKL method "ntds"
  * gpg: Fix --trusted-key with fingerprint arg
  * scd: Fix writing of ECC keys to an OpenPGP card
  * scd: Make an USB error fix specific to SPR532 readers
  * dirmngr: With new LDAP keyservers store the new attributes.
    Never store the useless pgpSignerID. Fix a long standing
    bug storing some keys on an ldap server.
  * dirmngr: Support the new Active Direcory LDAP schema for
    keyservers
  * dirmngr: Allow LDAP OpenPGP searches via fingerprint
  * dirmngr: Do not block other threads during keyserver LDAP calls
  * Support global configuration files
  * Fix the iconv fallback handling to UTF-8</changelog>
  <changelog author="pmonreal@suse.com" date="1613995200">- Update gpg2 for SLE15-SP3 [jsc#SLE-17559, bsc#1182572]
- Remove patches fixed upstream:
  * gnupg-gpg-agent-ssh-agent.patch
  * gnupg-2.2.22-fix-segv-import-keys.patch
  * gnupg-Allow-redirection-from-https-to-http-for-CRLs.patch
  * gnupg-CRL-fetching-via-https.patch
  * gnupg-CVE-2018-1000858.patch
  * gnupg-CVE-2018-12020.patch
  * gnupg-CVE-2019-13050_0_of_5.patch
  * gnupg-CVE-2019-13050_1_of_5.patch
  * gnupg-CVE-2019-13050_2_of_5.patch
  * gnupg-CVE-2019-13050_3_of_5.patch
  * gnupg-CVE-2019-13050_4_of_5.patch
  * gnupg-CVE-2019-13050_5_of_5.patch
  * gnupg-CVE-2019-14855.patch
- Update gpg2.keyring</changelog>
  <changelog author="meissner@suse.com" date="1654689600">- gnupg-detect_FIPS_mode.patch: use AES as default cipher instead
  of 3DES if we are in FIPS mode. (bsc#1196125)</changelog>
  <changelog author="david.anes@suse.com" date="1658145600">- Security fix [CVE-2022-34903, bsc#1201225]
  - Vulnerable to status injection
  - Added patch gnupg-CVE-2022-34903.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1700654400">- Suppress error message on trial reading as PEM format when using
  dirmngr to validate broken DER encoded files (bsc#1217212)
  * Add patches:
  - gnupg-dirmngr-Suppress-error-message-on-trial-reading-as-PEM.patch
  - gnupg-dirmngr-Clear-the-error-count-to-try-certificate-as-binary.patch</changelog>
</package>
<package pkgid="5623c4da70e202323f869688139d4dc6c9c6f6d2b1fb65fecf60b4ac94410f0e" name="gpg2" arch="s390x">
  <version epoch="0" ver="2.2.27" rel="150300.3.8.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1575720000">- update to 2.2.19:
  * gpg: Fix double free when decrypting for hidden recipients
  * gpg: Use auto-key-locate for encryption even for mail addressed
    given with angle brackets
  * gpgsm: Add special case for certain expired intermediate
    certificates</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1578571200">- Security fix: [bsc#1157900, CVE-2019-14855, jsc#SLE-16534]
  * Web of Trust forgeries using collisions in SHA-1 signatures
  * Ignore all SHA-1 signatures in 3rd party key signatures.
  * Forbid the creation of SHA-1 third-party key signatures.
  * Add option --allow-weak-key-signatures
- Add gnupg-CVE-2019-14855.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1578657600">- Accept key updates even without UIDs [bsc#1143158]
- Add patches:
  * gnupg-allow-import-of-previously-known-keys-even-without-UIDs.patch
  * gnupg-accept_subkeys_with_a_good_revocation_but_no_self-sig_during_import.patch
  * gnupg-add-test-cases-for-import-without-uid.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582113600">- Fix build with GCC-10: [bsc#1160394]
  * Always use EXTERN_UNLESS_MAIN_MODULE pattern
  * In GCC-10, the default option -fcommon will change to -fno-common
- Add gpg2-gcc10-build-fno-common.patch</changelog>
  <changelog author="fvogt@suse.com" date="1584100800">- Split dirmngr into a subpackage to avoid a hard dependency of
  gpg2 on libgnutls</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1584705600">- GnuPG 2.2.20:
  * Protect the error counter against overflow to guarantee that the
    tools can't be tricked into returning success after an error
  * gpg: Make really sure that --verify-files always returns an error
  * gpg: Fix key listing --with-secret if a pattern is given
  * gpg: Fix detection of certain keys used as default-key
  * gpg: Fix default-key selection when a card is available
  * gpg: Fix key expiration and key usage for keys created with a
    creation date of zero
  * gpgsm: Fix import of some CR,LF terminated certificates
  * gpg: New options --include-key-block and --auto-key-import to
    allow encrypted replies after an initial signed message
  * gpg: Allow the use of a fingerprint with --trusted-key
  * gpg: New property "fpr" for use by --export-filter
  * scdaemon: Disable the pinpad if a KDF DO is used
  * dirmngr: Improve finding OCSP certificates
- drop gpg2-gcc10-build-fno-common.patch, upstream</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588248000">- Fix gpgme and gpgme-qt builds on gpg2 2.2.20 update [bsc#1170811]
- Refresh patches:
  * gnupg-2.2.8-files-are-digests.patch
  * gnupg-add_legacy_FIPS_mode_option.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590062400">- Fix warning: agent returned different signature type ssh-rsa
  * The gpg-agent's ssh-agent does not handle flags in signing
    requests properly [bsc#1161268, bsc#1172308]
  * Add gnupg-gpg-agent-ssh-agent.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1594296000">- GnuPG 2.2.21:
  * gpg: Improve symmetric decryption speed by about 25%
  * gpg: Support decryption of AEAD encrypted data packets
  * gpg: Add option --no-include-key-block
  * gpg: Allow for extra padding in ECDH
  * gpg: Only a single pinentry is shown for symmetric encryption if
    the pinentry supports this
  * gpg: Print a note if no keys are given to --delete-key
  * gpg,gpgsm: The ridiculous passphrase quality bar is not anymore
    shown
  * gpgsm: Certificates without a CRL distribution point are now
    considered valid without looking up a CRL. The new option
  - -enable-issuer-based-crl-check can be used to revert to the
    former behaviour
  * gpgsm: Support rsaPSS signature verification
  * gpgsm: Unless CRL checking is disabled lookup a missing issuer
    certificate using the certificate's authorityInfoAccess
  * gpgsm: Print the certificate's serial number also in decimal
    notation
  * gpgsm: Fix possible NULL-deref in messages of --gen-key
  * scd: Support the CardOS 5 based D-Trust Card 3.1
  * dirmngr: Allow http URLs with "LOOKUP --url"
  * wkd: Take name of sendmail from configure. Fixes an OpenBSD
    specific bug</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1594728000">- Fix regression in latest gpg2 that makes gpgme fail to build [bsc#1174007]
- Add gnupg-gpgme-t-encrypt-sym.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1598961600">- GnuPG 2.2.22:
  * gpg: Change the default key algorithm to rsa3072
  * gpg: Add regular expression support for Trust Signatures on
    all platforms
  * gpg: Ignore --personal-digest-prefs for ECDSA keys
  * gpgsm: Make rsaPSS a de-vs compliant scheme
  * gpgsm: Show also the SHA256 fingerprint in key listings
  * gpgsm: Do not require a default keyring for --gpgconf-list
  * gpg-agent: Default to extended key format and record the
    creation time of keys
    Add new option --disable-extended-key-format
  * gpg-agent: Support the WAYLAND_DISPLAY envvar
  * gpg-agent: Allow using --gpgconf-list even if HOME does not
    exist
  * gpg-agent: Make the Pinentry work even if the envvar TERM is
    set to the empty string
  * scdaemon: Add a workaround for Gnuk tokens &lt;= 2.15 which
    wrongly incremented the error counter when using the
    "verify" command of "gpg --edit-key" with only the signature
    key being present
  * dirmngr: Better handle systems with disabled IPv6
  * gpgpslit: Install tool.  It was not installed in the past to
    avoid conflicts with the version installed by GnuPG 1.4
  * gpgtar: Make --files-from and --null work as documented
- drop gnupg-gpgme-t-encrypt-sym.patch, upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1599048000">- Fix segv importing certain keys (e.g. ed25519). [bsc#1176034]
- Add gnupg-2.2.22-fix-segv-import-keys.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599134400">- GnuPG 2.2.23:
  * gpg: fix AHEAD preference list overflow boo#1176034 /  CVE-2020-25125
  * gpg: fix possible segv in the key cleaning code
  * gpgsm: fix a minor RFC2253 parser gub
  * scdaemon: Fix a PIN verify failure on certain OpenPGP card
    implementations</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1605614400">- GnuPG 2.2.24:
  * gpg: New command --quick-revoke-sig
  * gpg: Do not use weak digest algos if selected by recipient
    preference during sign+encrypt
  * gpg: Switch to AES256 for symmetric encryption in de-vs mode
  * gpg: Silence weak digest warnings with --quiet
  * gpg: Print new status line CANCELED_BY_USER for a cancel during
    symmetric encryption
  * gpg: Fix the encrypt+sign hash algo preference selection for
    ECDSA.  This is in particular needed for keys created from
    existing smartcard based keys
  * agent: Fix secret key import of GnuPG 2.3 generated Ed25519
    keys
  * agent: Keep some permissions of private-keys-v1.d
  * dirmngr: Align sks-keyservers.netCA.pem use between ntbtls and
    gnutls builds
  * dirmngr: Fix the pool keyserver case for a single host in the
    pool
  * scd: Fix the use case of verify_chv2 by CHECKPIN
  * scd: Various improvements to the ccid-driver
  * scd: Minor fixes for Yubikey
  * gpgconf: New option --show-versions
  * i18n: Complete overhaul and completion of the Italian
    translation</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606132800">- GnuPG 2.2.25:
  * scd: Fix regression in 2.2.24 requiring gpg --card-status
    before signing or decrypting
  * gpgsm: Using Libksba 1.5.0 signatures with a rarely used
    combination of attributes can now be verified</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1610452800">- GnuPG 2.2.27:
  * gpgconf: Fix case with neither local nor global gpg.conf
  * gpgconf: Fix description of two new options
- includes changes from 2.2.26:
  * gpg: New AKL method "ntds"
  * gpg: Fix --trusted-key with fingerprint arg
  * scd: Fix writing of ECC keys to an OpenPGP card
  * scd: Make an USB error fix specific to SPR532 readers
  * dirmngr: With new LDAP keyservers store the new attributes.
    Never store the useless pgpSignerID. Fix a long standing
    bug storing some keys on an ldap server.
  * dirmngr: Support the new Active Direcory LDAP schema for
    keyservers
  * dirmngr: Allow LDAP OpenPGP searches via fingerprint
  * dirmngr: Do not block other threads during keyserver LDAP calls
  * Support global configuration files
  * Fix the iconv fallback handling to UTF-8</changelog>
  <changelog author="pmonreal@suse.com" date="1613995200">- Update gpg2 for SLE15-SP3 [jsc#SLE-17559, bsc#1182572]
- Remove patches fixed upstream:
  * gnupg-gpg-agent-ssh-agent.patch
  * gnupg-2.2.22-fix-segv-import-keys.patch
  * gnupg-Allow-redirection-from-https-to-http-for-CRLs.patch
  * gnupg-CRL-fetching-via-https.patch
  * gnupg-CVE-2018-1000858.patch
  * gnupg-CVE-2018-12020.patch
  * gnupg-CVE-2019-13050_0_of_5.patch
  * gnupg-CVE-2019-13050_1_of_5.patch
  * gnupg-CVE-2019-13050_2_of_5.patch
  * gnupg-CVE-2019-13050_3_of_5.patch
  * gnupg-CVE-2019-13050_4_of_5.patch
  * gnupg-CVE-2019-13050_5_of_5.patch
  * gnupg-CVE-2019-14855.patch
- Update gpg2.keyring</changelog>
  <changelog author="meissner@suse.com" date="1654689600">- gnupg-detect_FIPS_mode.patch: use AES as default cipher instead
  of 3DES if we are in FIPS mode. (bsc#1196125)</changelog>
  <changelog author="david.anes@suse.com" date="1658145600">- Security fix [CVE-2022-34903, bsc#1201225]
  - Vulnerable to status injection
  - Added patch gnupg-CVE-2022-34903.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1700654400">- Suppress error message on trial reading as PEM format when using
  dirmngr to validate broken DER encoded files (bsc#1217212)
  * Add patches:
  - gnupg-dirmngr-Suppress-error-message-on-trial-reading-as-PEM.patch
  - gnupg-dirmngr-Clear-the-error-count-to-try-certificate-as-binary.patch</changelog>
</package>
<package pkgid="1ed24e5b0813cd7dd16d072dd035171cd30f4e7ff015348f7ee360407b0eec9c" name="gpg2" arch="src">
  <version epoch="0" ver="2.2.27" rel="150300.3.8.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1575720000">- update to 2.2.19:
  * gpg: Fix double free when decrypting for hidden recipients
  * gpg: Use auto-key-locate for encryption even for mail addressed
    given with angle brackets
  * gpgsm: Add special case for certain expired intermediate
    certificates</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1578571200">- Security fix: [bsc#1157900, CVE-2019-14855, jsc#SLE-16534]
  * Web of Trust forgeries using collisions in SHA-1 signatures
  * Ignore all SHA-1 signatures in 3rd party key signatures.
  * Forbid the creation of SHA-1 third-party key signatures.
  * Add option --allow-weak-key-signatures
- Add gnupg-CVE-2019-14855.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1578657600">- Accept key updates even without UIDs [bsc#1143158]
- Add patches:
  * gnupg-allow-import-of-previously-known-keys-even-without-UIDs.patch
  * gnupg-accept_subkeys_with_a_good_revocation_but_no_self-sig_during_import.patch
  * gnupg-add-test-cases-for-import-without-uid.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582113600">- Fix build with GCC-10: [bsc#1160394]
  * Always use EXTERN_UNLESS_MAIN_MODULE pattern
  * In GCC-10, the default option -fcommon will change to -fno-common
- Add gpg2-gcc10-build-fno-common.patch</changelog>
  <changelog author="fvogt@suse.com" date="1584100800">- Split dirmngr into a subpackage to avoid a hard dependency of
  gpg2 on libgnutls</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1584705600">- GnuPG 2.2.20:
  * Protect the error counter against overflow to guarantee that the
    tools can't be tricked into returning success after an error
  * gpg: Make really sure that --verify-files always returns an error
  * gpg: Fix key listing --with-secret if a pattern is given
  * gpg: Fix detection of certain keys used as default-key
  * gpg: Fix default-key selection when a card is available
  * gpg: Fix key expiration and key usage for keys created with a
    creation date of zero
  * gpgsm: Fix import of some CR,LF terminated certificates
  * gpg: New options --include-key-block and --auto-key-import to
    allow encrypted replies after an initial signed message
  * gpg: Allow the use of a fingerprint with --trusted-key
  * gpg: New property "fpr" for use by --export-filter
  * scdaemon: Disable the pinpad if a KDF DO is used
  * dirmngr: Improve finding OCSP certificates
- drop gpg2-gcc10-build-fno-common.patch, upstream</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588248000">- Fix gpgme and gpgme-qt builds on gpg2 2.2.20 update [bsc#1170811]
- Refresh patches:
  * gnupg-2.2.8-files-are-digests.patch
  * gnupg-add_legacy_FIPS_mode_option.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590062400">- Fix warning: agent returned different signature type ssh-rsa
  * The gpg-agent's ssh-agent does not handle flags in signing
    requests properly [bsc#1161268, bsc#1172308]
  * Add gnupg-gpg-agent-ssh-agent.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1594296000">- GnuPG 2.2.21:
  * gpg: Improve symmetric decryption speed by about 25%
  * gpg: Support decryption of AEAD encrypted data packets
  * gpg: Add option --no-include-key-block
  * gpg: Allow for extra padding in ECDH
  * gpg: Only a single pinentry is shown for symmetric encryption if
    the pinentry supports this
  * gpg: Print a note if no keys are given to --delete-key
  * gpg,gpgsm: The ridiculous passphrase quality bar is not anymore
    shown
  * gpgsm: Certificates without a CRL distribution point are now
    considered valid without looking up a CRL. The new option
  - -enable-issuer-based-crl-check can be used to revert to the
    former behaviour
  * gpgsm: Support rsaPSS signature verification
  * gpgsm: Unless CRL checking is disabled lookup a missing issuer
    certificate using the certificate's authorityInfoAccess
  * gpgsm: Print the certificate's serial number also in decimal
    notation
  * gpgsm: Fix possible NULL-deref in messages of --gen-key
  * scd: Support the CardOS 5 based D-Trust Card 3.1
  * dirmngr: Allow http URLs with "LOOKUP --url"
  * wkd: Take name of sendmail from configure. Fixes an OpenBSD
    specific bug</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1594728000">- Fix regression in latest gpg2 that makes gpgme fail to build [bsc#1174007]
- Add gnupg-gpgme-t-encrypt-sym.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1598961600">- GnuPG 2.2.22:
  * gpg: Change the default key algorithm to rsa3072
  * gpg: Add regular expression support for Trust Signatures on
    all platforms
  * gpg: Ignore --personal-digest-prefs for ECDSA keys
  * gpgsm: Make rsaPSS a de-vs compliant scheme
  * gpgsm: Show also the SHA256 fingerprint in key listings
  * gpgsm: Do not require a default keyring for --gpgconf-list
  * gpg-agent: Default to extended key format and record the
    creation time of keys
    Add new option --disable-extended-key-format
  * gpg-agent: Support the WAYLAND_DISPLAY envvar
  * gpg-agent: Allow using --gpgconf-list even if HOME does not
    exist
  * gpg-agent: Make the Pinentry work even if the envvar TERM is
    set to the empty string
  * scdaemon: Add a workaround for Gnuk tokens &lt;= 2.15 which
    wrongly incremented the error counter when using the
    "verify" command of "gpg --edit-key" with only the signature
    key being present
  * dirmngr: Better handle systems with disabled IPv6
  * gpgpslit: Install tool.  It was not installed in the past to
    avoid conflicts with the version installed by GnuPG 1.4
  * gpgtar: Make --files-from and --null work as documented
- drop gnupg-gpgme-t-encrypt-sym.patch, upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1599048000">- Fix segv importing certain keys (e.g. ed25519). [bsc#1176034]
- Add gnupg-2.2.22-fix-segv-import-keys.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599134400">- GnuPG 2.2.23:
  * gpg: fix AHEAD preference list overflow boo#1176034 /  CVE-2020-25125
  * gpg: fix possible segv in the key cleaning code
  * gpgsm: fix a minor RFC2253 parser gub
  * scdaemon: Fix a PIN verify failure on certain OpenPGP card
    implementations</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1605614400">- GnuPG 2.2.24:
  * gpg: New command --quick-revoke-sig
  * gpg: Do not use weak digest algos if selected by recipient
    preference during sign+encrypt
  * gpg: Switch to AES256 for symmetric encryption in de-vs mode
  * gpg: Silence weak digest warnings with --quiet
  * gpg: Print new status line CANCELED_BY_USER for a cancel during
    symmetric encryption
  * gpg: Fix the encrypt+sign hash algo preference selection for
    ECDSA.  This is in particular needed for keys created from
    existing smartcard based keys
  * agent: Fix secret key import of GnuPG 2.3 generated Ed25519
    keys
  * agent: Keep some permissions of private-keys-v1.d
  * dirmngr: Align sks-keyservers.netCA.pem use between ntbtls and
    gnutls builds
  * dirmngr: Fix the pool keyserver case for a single host in the
    pool
  * scd: Fix the use case of verify_chv2 by CHECKPIN
  * scd: Various improvements to the ccid-driver
  * scd: Minor fixes for Yubikey
  * gpgconf: New option --show-versions
  * i18n: Complete overhaul and completion of the Italian
    translation</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606132800">- GnuPG 2.2.25:
  * scd: Fix regression in 2.2.24 requiring gpg --card-status
    before signing or decrypting
  * gpgsm: Using Libksba 1.5.0 signatures with a rarely used
    combination of attributes can now be verified</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1610452800">- GnuPG 2.2.27:
  * gpgconf: Fix case with neither local nor global gpg.conf
  * gpgconf: Fix description of two new options
- includes changes from 2.2.26:
  * gpg: New AKL method "ntds"
  * gpg: Fix --trusted-key with fingerprint arg
  * scd: Fix writing of ECC keys to an OpenPGP card
  * scd: Make an USB error fix specific to SPR532 readers
  * dirmngr: With new LDAP keyservers store the new attributes.
    Never store the useless pgpSignerID. Fix a long standing
    bug storing some keys on an ldap server.
  * dirmngr: Support the new Active Direcory LDAP schema for
    keyservers
  * dirmngr: Allow LDAP OpenPGP searches via fingerprint
  * dirmngr: Do not block other threads during keyserver LDAP calls
  * Support global configuration files
  * Fix the iconv fallback handling to UTF-8</changelog>
  <changelog author="pmonreal@suse.com" date="1613995200">- Update gpg2 for SLE15-SP3 [jsc#SLE-17559, bsc#1182572]
- Remove patches fixed upstream:
  * gnupg-gpg-agent-ssh-agent.patch
  * gnupg-2.2.22-fix-segv-import-keys.patch
  * gnupg-Allow-redirection-from-https-to-http-for-CRLs.patch
  * gnupg-CRL-fetching-via-https.patch
  * gnupg-CVE-2018-1000858.patch
  * gnupg-CVE-2018-12020.patch
  * gnupg-CVE-2019-13050_0_of_5.patch
  * gnupg-CVE-2019-13050_1_of_5.patch
  * gnupg-CVE-2019-13050_2_of_5.patch
  * gnupg-CVE-2019-13050_3_of_5.patch
  * gnupg-CVE-2019-13050_4_of_5.patch
  * gnupg-CVE-2019-13050_5_of_5.patch
  * gnupg-CVE-2019-14855.patch
- Update gpg2.keyring</changelog>
  <changelog author="meissner@suse.com" date="1654689600">- gnupg-detect_FIPS_mode.patch: use AES as default cipher instead
  of 3DES if we are in FIPS mode. (bsc#1196125)</changelog>
  <changelog author="david.anes@suse.com" date="1658145600">- Security fix [CVE-2022-34903, bsc#1201225]
  - Vulnerable to status injection
  - Added patch gnupg-CVE-2022-34903.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1700654400">- Suppress error message on trial reading as PEM format when using
  dirmngr to validate broken DER encoded files (bsc#1217212)
  * Add patches:
  - gnupg-dirmngr-Suppress-error-message-on-trial-reading-as-PEM.patch
  - gnupg-dirmngr-Clear-the-error-count-to-try-certificate-as-binary.patch</changelog>
</package>
<package pkgid="4b6099a7710c559a83df70595e11054230d122c4b6be604b7bfba48e76f5e97f" name="gpg2" arch="x86_64">
  <version epoch="0" ver="2.2.27" rel="150300.3.8.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1575720000">- update to 2.2.19:
  * gpg: Fix double free when decrypting for hidden recipients
  * gpg: Use auto-key-locate for encryption even for mail addressed
    given with angle brackets
  * gpgsm: Add special case for certain expired intermediate
    certificates</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1578571200">- Security fix: [bsc#1157900, CVE-2019-14855, jsc#SLE-16534]
  * Web of Trust forgeries using collisions in SHA-1 signatures
  * Ignore all SHA-1 signatures in 3rd party key signatures.
  * Forbid the creation of SHA-1 third-party key signatures.
  * Add option --allow-weak-key-signatures
- Add gnupg-CVE-2019-14855.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1578657600">- Accept key updates even without UIDs [bsc#1143158]
- Add patches:
  * gnupg-allow-import-of-previously-known-keys-even-without-UIDs.patch
  * gnupg-accept_subkeys_with_a_good_revocation_but_no_self-sig_during_import.patch
  * gnupg-add-test-cases-for-import-without-uid.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582113600">- Fix build with GCC-10: [bsc#1160394]
  * Always use EXTERN_UNLESS_MAIN_MODULE pattern
  * In GCC-10, the default option -fcommon will change to -fno-common
- Add gpg2-gcc10-build-fno-common.patch</changelog>
  <changelog author="fvogt@suse.com" date="1584100800">- Split dirmngr into a subpackage to avoid a hard dependency of
  gpg2 on libgnutls</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1584705600">- GnuPG 2.2.20:
  * Protect the error counter against overflow to guarantee that the
    tools can't be tricked into returning success after an error
  * gpg: Make really sure that --verify-files always returns an error
  * gpg: Fix key listing --with-secret if a pattern is given
  * gpg: Fix detection of certain keys used as default-key
  * gpg: Fix default-key selection when a card is available
  * gpg: Fix key expiration and key usage for keys created with a
    creation date of zero
  * gpgsm: Fix import of some CR,LF terminated certificates
  * gpg: New options --include-key-block and --auto-key-import to
    allow encrypted replies after an initial signed message
  * gpg: Allow the use of a fingerprint with --trusted-key
  * gpg: New property "fpr" for use by --export-filter
  * scdaemon: Disable the pinpad if a KDF DO is used
  * dirmngr: Improve finding OCSP certificates
- drop gpg2-gcc10-build-fno-common.patch, upstream</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588248000">- Fix gpgme and gpgme-qt builds on gpg2 2.2.20 update [bsc#1170811]
- Refresh patches:
  * gnupg-2.2.8-files-are-digests.patch
  * gnupg-add_legacy_FIPS_mode_option.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590062400">- Fix warning: agent returned different signature type ssh-rsa
  * The gpg-agent's ssh-agent does not handle flags in signing
    requests properly [bsc#1161268, bsc#1172308]
  * Add gnupg-gpg-agent-ssh-agent.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1594296000">- GnuPG 2.2.21:
  * gpg: Improve symmetric decryption speed by about 25%
  * gpg: Support decryption of AEAD encrypted data packets
  * gpg: Add option --no-include-key-block
  * gpg: Allow for extra padding in ECDH
  * gpg: Only a single pinentry is shown for symmetric encryption if
    the pinentry supports this
  * gpg: Print a note if no keys are given to --delete-key
  * gpg,gpgsm: The ridiculous passphrase quality bar is not anymore
    shown
  * gpgsm: Certificates without a CRL distribution point are now
    considered valid without looking up a CRL. The new option
  - -enable-issuer-based-crl-check can be used to revert to the
    former behaviour
  * gpgsm: Support rsaPSS signature verification
  * gpgsm: Unless CRL checking is disabled lookup a missing issuer
    certificate using the certificate's authorityInfoAccess
  * gpgsm: Print the certificate's serial number also in decimal
    notation
  * gpgsm: Fix possible NULL-deref in messages of --gen-key
  * scd: Support the CardOS 5 based D-Trust Card 3.1
  * dirmngr: Allow http URLs with "LOOKUP --url"
  * wkd: Take name of sendmail from configure. Fixes an OpenBSD
    specific bug</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1594728000">- Fix regression in latest gpg2 that makes gpgme fail to build [bsc#1174007]
- Add gnupg-gpgme-t-encrypt-sym.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1598961600">- GnuPG 2.2.22:
  * gpg: Change the default key algorithm to rsa3072
  * gpg: Add regular expression support for Trust Signatures on
    all platforms
  * gpg: Ignore --personal-digest-prefs for ECDSA keys
  * gpgsm: Make rsaPSS a de-vs compliant scheme
  * gpgsm: Show also the SHA256 fingerprint in key listings
  * gpgsm: Do not require a default keyring for --gpgconf-list
  * gpg-agent: Default to extended key format and record the
    creation time of keys
    Add new option --disable-extended-key-format
  * gpg-agent: Support the WAYLAND_DISPLAY envvar
  * gpg-agent: Allow using --gpgconf-list even if HOME does not
    exist
  * gpg-agent: Make the Pinentry work even if the envvar TERM is
    set to the empty string
  * scdaemon: Add a workaround for Gnuk tokens &lt;= 2.15 which
    wrongly incremented the error counter when using the
    "verify" command of "gpg --edit-key" with only the signature
    key being present
  * dirmngr: Better handle systems with disabled IPv6
  * gpgpslit: Install tool.  It was not installed in the past to
    avoid conflicts with the version installed by GnuPG 1.4
  * gpgtar: Make --files-from and --null work as documented
- drop gnupg-gpgme-t-encrypt-sym.patch, upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1599048000">- Fix segv importing certain keys (e.g. ed25519). [bsc#1176034]
- Add gnupg-2.2.22-fix-segv-import-keys.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599134400">- GnuPG 2.2.23:
  * gpg: fix AHEAD preference list overflow boo#1176034 /  CVE-2020-25125
  * gpg: fix possible segv in the key cleaning code
  * gpgsm: fix a minor RFC2253 parser gub
  * scdaemon: Fix a PIN verify failure on certain OpenPGP card
    implementations</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1605614400">- GnuPG 2.2.24:
  * gpg: New command --quick-revoke-sig
  * gpg: Do not use weak digest algos if selected by recipient
    preference during sign+encrypt
  * gpg: Switch to AES256 for symmetric encryption in de-vs mode
  * gpg: Silence weak digest warnings with --quiet
  * gpg: Print new status line CANCELED_BY_USER for a cancel during
    symmetric encryption
  * gpg: Fix the encrypt+sign hash algo preference selection for
    ECDSA.  This is in particular needed for keys created from
    existing smartcard based keys
  * agent: Fix secret key import of GnuPG 2.3 generated Ed25519
    keys
  * agent: Keep some permissions of private-keys-v1.d
  * dirmngr: Align sks-keyservers.netCA.pem use between ntbtls and
    gnutls builds
  * dirmngr: Fix the pool keyserver case for a single host in the
    pool
  * scd: Fix the use case of verify_chv2 by CHECKPIN
  * scd: Various improvements to the ccid-driver
  * scd: Minor fixes for Yubikey
  * gpgconf: New option --show-versions
  * i18n: Complete overhaul and completion of the Italian
    translation</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606132800">- GnuPG 2.2.25:
  * scd: Fix regression in 2.2.24 requiring gpg --card-status
    before signing or decrypting
  * gpgsm: Using Libksba 1.5.0 signatures with a rarely used
    combination of attributes can now be verified</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1610452800">- GnuPG 2.2.27:
  * gpgconf: Fix case with neither local nor global gpg.conf
  * gpgconf: Fix description of two new options
- includes changes from 2.2.26:
  * gpg: New AKL method "ntds"
  * gpg: Fix --trusted-key with fingerprint arg
  * scd: Fix writing of ECC keys to an OpenPGP card
  * scd: Make an USB error fix specific to SPR532 readers
  * dirmngr: With new LDAP keyservers store the new attributes.
    Never store the useless pgpSignerID. Fix a long standing
    bug storing some keys on an ldap server.
  * dirmngr: Support the new Active Direcory LDAP schema for
    keyservers
  * dirmngr: Allow LDAP OpenPGP searches via fingerprint
  * dirmngr: Do not block other threads during keyserver LDAP calls
  * Support global configuration files
  * Fix the iconv fallback handling to UTF-8</changelog>
  <changelog author="pmonreal@suse.com" date="1613995200">- Update gpg2 for SLE15-SP3 [jsc#SLE-17559, bsc#1182572]
- Remove patches fixed upstream:
  * gnupg-gpg-agent-ssh-agent.patch
  * gnupg-2.2.22-fix-segv-import-keys.patch
  * gnupg-Allow-redirection-from-https-to-http-for-CRLs.patch
  * gnupg-CRL-fetching-via-https.patch
  * gnupg-CVE-2018-1000858.patch
  * gnupg-CVE-2018-12020.patch
  * gnupg-CVE-2019-13050_0_of_5.patch
  * gnupg-CVE-2019-13050_1_of_5.patch
  * gnupg-CVE-2019-13050_2_of_5.patch
  * gnupg-CVE-2019-13050_3_of_5.patch
  * gnupg-CVE-2019-13050_4_of_5.patch
  * gnupg-CVE-2019-13050_5_of_5.patch
  * gnupg-CVE-2019-14855.patch
- Update gpg2.keyring</changelog>
  <changelog author="meissner@suse.com" date="1654689600">- gnupg-detect_FIPS_mode.patch: use AES as default cipher instead
  of 3DES if we are in FIPS mode. (bsc#1196125)</changelog>
  <changelog author="david.anes@suse.com" date="1658145600">- Security fix [CVE-2022-34903, bsc#1201225]
  - Vulnerable to status injection
  - Added patch gnupg-CVE-2022-34903.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1700654400">- Suppress error message on trial reading as PEM format when using
  dirmngr to validate broken DER encoded files (bsc#1217212)
  * Add patches:
  - gnupg-dirmngr-Suppress-error-message-on-trial-reading-as-PEM.patch
  - gnupg-dirmngr-Clear-the-error-count-to-try-certificate-as-binary.patch</changelog>
</package>
<package pkgid="256e2973e46f2d04a120c3643cf363502341dc84ee2c8fd1a3b19d584eb7fc06" name="groff" arch="src">
  <version epoch="0" ver="1.22.4" rel="150400.5.2.1"/>
  <changelog author="mvyskocil@suse.com" date="1370433600">- modify groff_1.22.2-2.debian.diff - remove the part related to
  src/preproc/html/pre-html.cpp, fixes bnc#755533</changelog>
  <changelog author="werner@suse.de" date="1371470400">- Move important non-graphical macros from groff-full back to groff
  as otherwise many packages do not build anymore</changelog>
  <changelog author="werner@suse.de" date="1371470401">- Take care of mmroff.1.gz as well as of mmroff perl script</changelog>
  <changelog author="mvyskocil@suse.com" date="1372161600">- move man.local and mdoc.local from groff-full to groff
  * fixes libssh2.org testsuite</changelog>
  <changelog author="meissner@suse.com" date="1419076800">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1423051200">- Version bump to latest release 1.22.3:
  * X11 resources for `gxditview', which were previously installed in
    /usr/X11/lib/X11/app-defaults no matter which `prefix' was set, are
    now installed in appresdir=$prefix/lib/X11/app-defaults.  If
    `appresdir' is not a standard X11 resource directory, the environment
    variable XFILESEARCHPATH should be set to this path.  The standard
    default directories depends on the system `libXt'.
  * This new preprocessor (contributed by Bernd Warken) allows embedding of
    code for GNU LilyPond (http://www.lilypond.org), a music typesetter.  The
    data gets automatically processed and embedded as EPS images.
  * Bernd Warken contributed a new preprocessor to handle Perl code that can
    be evaluated and then processed by groff.
  * Another preprocessor from Bernd Warken to pretty-print Pinyin syllables
    like `guo2wang2' as `guówáng'.
  * The pdfroff utility script now activates its `--no-toc-relocation' option
    by default, unless a request similar to:
    .if !\n[PHASE] .tm pdfroff-option:set toc_relocation=enabled
    is invoked during input file processing; (`.if !\n[PHASE] ...' ensures
    that the effect of the `.tm' request is restricted to the document setup
    phase of processing, as pdfroff sets it to 1 or 2 in the output phase,
    but leaves it unset in the setup phase).
    The bundled `spdf.tmac' macro package, which implicitly activates
    `-mpdfmark' for `ms' macro users, ensures that TOC relocation is
    appropriately enabled, when the `.TC' macro is invoked.
  * The -mom macro package now has full support for eqn, pic, and tbl, as well
    as captioning and labelling of pdf images and preprocessor output.  Lists
    of Figures, Equations, and Tables can now be autogenerated.  PDF_IMAGE has
    a new FRAME option.
  * A French introduction to the -me macro package has been added (file
    `meintro_fr.me').
  * In -mdoc, command %C is now available, providing a city or place
    reference.
- Refreshed patches:
  * groff-1.21-CVE-2009-5081.patch
  * groff-1.21-groffer-libexecdir.patch
  * groff-force-locale-usage.patch
- Replaced patches:
  * deleted groff_1.22.2-2.debian.diff
  * added groff_1.22.3-1.debian.diff
- New patches:
  * groff-multi-thread.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1469102400">- Add patch for bnc#989903 and move all scripts from libdir to
  libexecdir</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1513252800">- Replace xorg-x11-devel buildrequires by the needed individual
  libraries</changelog>
  <changelog author="tchvatal@suse.com" date="1513598400">- Set the license to GPL-3.0+ as per COPYING</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="bwiedemann@suse.com" date="1540900800">- add groff-reproducible-mdate.patch and groff-use-SDE.patch to allow
  to override build time to make package build reproducible (boo#1047218)</changelog>
  <changelog author="tchvatal@suse.com" date="1546516800">- Switch to multibuild in order to avoid having to manage 2
  differentiating spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1546603200">- Version update to 1.22.4:
  * Many fixes for hyphenation helping
  * Various build tweaks
  * See the NEWS file for details
- New signature -&gt; update keyring file
- Remove upstream merged patches:
  * groff-multi-thread.patch
  * groff-reproducible-mdate.patch
  * groff-use-SDE.patch
- Remove groff-1.21-groffer-libexecdir.patch as upstream redid
  the autotools rules and uses configure option now
- Rebase patch groff-1.20.1-deunicode.patch
- Rebase patch groff-1.21-CVE-2009-5081.patch
- Drop patch groff-1.21-CVE-2009-5080.patch as it seems the shell
  script now properly safeguards against this
- Rebase patch 0002-documentation-for-the-locale-keyword.patch
- Recreate groff-force-locale-usage.patch for autotools buildsystem
- Add patch 0004-don-t-use-usr-bin-env-in-shebang.patch
- Remove groff_1.22.3-1.debian.diff and replace it with split
  debian patches:
  * bash-scripts.patch
  * sort-perl-hash-keys.patch</changelog>
  <changelog author="jengelh@inai.de" date="1547294400">- Trim tm signs</changelog>
  <changelog author="i@marguerite.su" date="1550491200">- install essential build files needed by ghostscript-fonts-grops</changelog>
  <changelog author="mcepl@suse.com" date="1576497600">- Add man page roff(7) to alternatives to avoid conflict with
  mandoc.</changelog>
  <changelog author="lnussel@suse.de" date="1578571200">- don't recommend groff-full as that would pull in X etc by default.
  Instead use packageand on groff and ghostscript-library to only install
  groff-full when other deps are already there.</changelog>
  <changelog author="dimstar@opensuse.org" date="1602331200">- Don't create recursive link 'current' inside
  /usr/share/groff/%{version}.</changelog>
  <changelog author="sbrabec@suse.com" date="1638273600">- Remove /usr/share/groff/current from groff-full. It creates file
  conflicts during version upgrade (bsc#1192195#c8).</changelog>
  <changelog author="sbrabec@suse.com" date="1644235200">- Do not fail with rpm --excludedocs (bsc#1192195).</changelog>
</package>
<package pkgid="d3b7e3102f24be3b2c41420cb7b1bebc640b51f68efa1012de36b8474547d344" name="groff" arch="x86_64">
  <version epoch="0" ver="1.22.4" rel="150400.5.2.1"/>
  <changelog author="meissner@suse.com" date="1419076800">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1423051200">- Version bump to latest release 1.22.3:
  * X11 resources for `gxditview', which were previously installed in
    /usr/X11/lib/X11/app-defaults no matter which `prefix' was set, are
    now installed in appresdir=$prefix/lib/X11/app-defaults.  If
    `appresdir' is not a standard X11 resource directory, the environment
    variable XFILESEARCHPATH should be set to this path.  The standard
    default directories depends on the system `libXt'.
  * This new preprocessor (contributed by Bernd Warken) allows embedding of
    code for GNU LilyPond (http://www.lilypond.org), a music typesetter.  The
    data gets automatically processed and embedded as EPS images.
  * Bernd Warken contributed a new preprocessor to handle Perl code that can
    be evaluated and then processed by groff.
  * Another preprocessor from Bernd Warken to pretty-print Pinyin syllables
    like `guo2wang2' as `guówáng'.
  * The pdfroff utility script now activates its `--no-toc-relocation' option
    by default, unless a request similar to:
    .if !\n[PHASE] .tm pdfroff-option:set toc_relocation=enabled
    is invoked during input file processing; (`.if !\n[PHASE] ...' ensures
    that the effect of the `.tm' request is restricted to the document setup
    phase of processing, as pdfroff sets it to 1 or 2 in the output phase,
    but leaves it unset in the setup phase).
    The bundled `spdf.tmac' macro package, which implicitly activates
    `-mpdfmark' for `ms' macro users, ensures that TOC relocation is
    appropriately enabled, when the `.TC' macro is invoked.
  * The -mom macro package now has full support for eqn, pic, and tbl, as well
    as captioning and labelling of pdf images and preprocessor output.  Lists
    of Figures, Equations, and Tables can now be autogenerated.  PDF_IMAGE has
    a new FRAME option.
  * A French introduction to the -me macro package has been added (file
    `meintro_fr.me').
  * In -mdoc, command %C is now available, providing a city or place
    reference.
- Refreshed patches:
  * groff-1.21-CVE-2009-5081.patch
  * groff-1.21-groffer-libexecdir.patch
  * groff-force-locale-usage.patch
- Replaced patches:
  * deleted groff_1.22.2-2.debian.diff
  * added groff_1.22.3-1.debian.diff
- New patches:
  * groff-multi-thread.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1469102400">- Add patch for bnc#989903 and move all scripts from libdir to
  libexecdir</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1513252800">- Replace xorg-x11-devel buildrequires by the needed individual
  libraries</changelog>
  <changelog author="tchvatal@suse.com" date="1513598400">- Set the license to GPL-3.0+ as per COPYING</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="bwiedemann@suse.com" date="1540900800">- add groff-reproducible-mdate.patch and groff-use-SDE.patch to allow
  to override build time to make package build reproducible (boo#1047218)</changelog>
  <changelog author="tchvatal@suse.com" date="1546516800">- Switch to multibuild in order to avoid having to manage 2
  differentiating spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1546603200">- Version update to 1.22.4:
  * Many fixes for hyphenation helping
  * Various build tweaks
  * See the NEWS file for details
- New signature -&gt; update keyring file
- Remove upstream merged patches:
  * groff-multi-thread.patch
  * groff-reproducible-mdate.patch
  * groff-use-SDE.patch
- Remove groff-1.21-groffer-libexecdir.patch as upstream redid
  the autotools rules and uses configure option now
- Rebase patch groff-1.20.1-deunicode.patch
- Rebase patch groff-1.21-CVE-2009-5081.patch
- Drop patch groff-1.21-CVE-2009-5080.patch as it seems the shell
  script now properly safeguards against this
- Rebase patch 0002-documentation-for-the-locale-keyword.patch
- Recreate groff-force-locale-usage.patch for autotools buildsystem
- Add patch 0004-don-t-use-usr-bin-env-in-shebang.patch
- Remove groff_1.22.3-1.debian.diff and replace it with split
  debian patches:
  * bash-scripts.patch
  * sort-perl-hash-keys.patch</changelog>
  <changelog author="jengelh@inai.de" date="1547294400">- Trim tm signs</changelog>
  <changelog author="i@marguerite.su" date="1550491200">- install essential build files needed by ghostscript-fonts-grops</changelog>
  <changelog author="mcepl@suse.com" date="1576497600">- Add man page roff(7) to alternatives to avoid conflict with
  mandoc.</changelog>
  <changelog author="lnussel@suse.de" date="1578571200">- don't recommend groff-full as that would pull in X etc by default.
  Instead use packageand on groff and ghostscript-library to only install
  groff-full when other deps are already there.</changelog>
  <changelog author="dimstar@opensuse.org" date="1602331200">- Don't create recursive link 'current' inside
  /usr/share/groff/%{version}.</changelog>
  <changelog author="sbrabec@suse.com" date="1638273600">- Remove /usr/share/groff/current from groff-full. It creates file
  conflicts during version upgrade (bsc#1192195#c8).</changelog>
  <changelog author="sbrabec@suse.com" date="1644235200">- Do not fail with rpm --excludedocs (bsc#1192195).</changelog>
</package>
<package pkgid="c228b81978153134f4e30a003f49148fd3e22f3d24a1739ef6e89fb40fdaa0c1" name="grub2" arch="aarch64">
  <version epoch="0" ver="2.06" rel="150500.29.11.1"/>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="1e104d9466e952af7ca2faddd6184cd2916725846ac7b873c214a1681c7b4d2c" name="grub2" arch="s390x">
  <version epoch="0" ver="2.06" rel="150500.29.11.1"/>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="92544a84ad3e84c1cf57aab6e3c0509d82290825a674d1c357a79b8f5bb1fb06" name="grub2" arch="src">
  <version epoch="0" ver="2.06" rel="150500.29.11.1"/>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="9cbfdb1e0000e0808b9fbae0586799ab054b448328a9ad8cdd6120f0ab4f7ee2" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.06" rel="150500.29.11.1"/>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="feb43575a44c41c6ae31d3b44e8ba9c6d3e511e10e727de09da748c525c69c73" name="grub2" arch="aarch64">
  <version epoch="0" ver="2.06" rel="150500.29.13.1"/>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="07ae8eb22b86b936737e1e7034744005539690ef417d2ae5cdeed6ebd5e732af" name="grub2" arch="s390x">
  <version epoch="0" ver="2.06" rel="150500.29.13.1"/>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="52fc247c9becf2b583a644b3cf6ec53de7bac8816fd3a46e68c78548083b6f12" name="grub2" arch="src">
  <version epoch="0" ver="2.06" rel="150500.29.13.1"/>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="b869aa4c77228158e5438c9854456a394e2ea3039908b112befc7e14a28888f6" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.06" rel="150500.29.13.1"/>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="5df8781b0ede4cad2fe442f5044b4695f8ffe970af56b796476196a73e87a99b" name="grub2" arch="aarch64">
  <version epoch="0" ver="2.06" rel="150500.29.16.1"/>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
</package>
<package pkgid="748f8323110fd2cba67ecffd96fcffb17214476c0b1020444e12cecbd586abb5" name="grub2" arch="s390x">
  <version epoch="0" ver="2.06" rel="150500.29.16.1"/>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
</package>
<package pkgid="be84dd05b63bb56bcbff21cdbe5f0e8f5793b33808f1e98c733e458fd24ba789" name="grub2" arch="src">
  <version epoch="0" ver="2.06" rel="150500.29.16.1"/>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
</package>
<package pkgid="afa6af57fbca58013827cdb4f6f04c92c4bc5b9770f1d2d0d2523b6196924c02" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.06" rel="150500.29.16.1"/>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
</package>
<package pkgid="66503614a95e4e29c6a8e38c3ca5e3f48b1a353d432eedd250ba86a28859c27d" name="grub2" arch="aarch64">
  <version epoch="0" ver="2.06" rel="150500.29.19.1"/>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
  <changelog author="mchang@suse.com" date="1708603200">- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762)
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch</changelog>
</package>
<package pkgid="56b5cd961c7459aa8eb516f2f460e01bf687d4325b45d8c15351ac6f73f3c117" name="grub2" arch="s390x">
  <version epoch="0" ver="2.06" rel="150500.29.19.1"/>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
  <changelog author="mchang@suse.com" date="1708603200">- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762)
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch</changelog>
</package>
<package pkgid="8b2e711b6ac9e2e2910acf0b43119b2d1dc06587be54e20cb283e39e4998c647" name="grub2" arch="src">
  <version epoch="0" ver="2.06" rel="150500.29.19.1"/>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
  <changelog author="mchang@suse.com" date="1708603200">- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762)
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch</changelog>
</package>
<package pkgid="b65caf403a99c13acd905d44b9f690e5a686829bcb65ad0321209a5a25877992" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.06" rel="150500.29.19.1"/>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
  <changelog author="mchang@suse.com" date="1708603200">- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762)
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch</changelog>
</package>
<package pkgid="d6411eab191d0e7ce547fe64d46e08ccbd962da610088ec048a9b5472d88c603" name="grub2" arch="aarch64">
  <version epoch="0" ver="2.06" rel="150500.29.22.2"/>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
  <changelog author="mchang@suse.com" date="1708603200">- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762)
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch</changelog>
  <changelog author="mchang@suse.com" date="1711108800">- Fix memdisk becomes the default boot entry, resolving no graphic display
  device error in guest vnc console (bsc#1221779)
  * grub2-xen-pv-firmware.cfg</changelog>
</package>
<package pkgid="17fa51778bb1a74201f5681fc3b8b88ce74c48f4514bcfc0678c6d6af804d827" name="grub2" arch="s390x">
  <version epoch="0" ver="2.06" rel="150500.29.22.2"/>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
  <changelog author="mchang@suse.com" date="1708603200">- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762)
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch</changelog>
  <changelog author="mchang@suse.com" date="1711108800">- Fix memdisk becomes the default boot entry, resolving no graphic display
  device error in guest vnc console (bsc#1221779)
  * grub2-xen-pv-firmware.cfg</changelog>
</package>
<package pkgid="d4961d0ea42f68e83e572ad1b774185f31f961c58c5af41bc9018a7dccb8950a" name="grub2" arch="src">
  <version epoch="0" ver="2.06" rel="150500.29.22.2"/>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
  <changelog author="mchang@suse.com" date="1708603200">- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762)
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch</changelog>
  <changelog author="mchang@suse.com" date="1711108800">- Fix memdisk becomes the default boot entry, resolving no graphic display
  device error in guest vnc console (bsc#1221779)
  * grub2-xen-pv-firmware.cfg</changelog>
</package>
<package pkgid="3836427fd2e06e251e9b57724429e437d06605aa41451db51ac5c2ddbad53ec2" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.06" rel="150500.29.22.2"/>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
  <changelog author="mchang@suse.com" date="1708603200">- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762)
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch</changelog>
  <changelog author="mchang@suse.com" date="1711108800">- Fix memdisk becomes the default boot entry, resolving no graphic display
  device error in guest vnc console (bsc#1221779)
  * grub2-xen-pv-firmware.cfg</changelog>
</package>
<package pkgid="8b2c699140af02f1a4403cd1a69a2d9732cf6c9be1fc11b79596f6da5745555f" name="grub2" arch="aarch64">
  <version epoch="0" ver="2.06" rel="150500.29.25.12"/>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
  <changelog author="mchang@suse.com" date="1708603200">- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762)
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch</changelog>
  <changelog author="mchang@suse.com" date="1711108800">- Fix memdisk becomes the default boot entry, resolving no graphic display
  device error in guest vnc console (bsc#1221779)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1711540800">- Fix LPAR falls into grub shell after installation with lvm (bsc#1221866)
  * 0001-ofdisk-Enhance-canonical-path-handling-for-bootpath.patch</changelog>
</package>
<package pkgid="daa0bcddaba37a975411df8b89806742572c4a842399380daf424259a0136ea3" name="grub2" arch="s390x">
  <version epoch="0" ver="2.06" rel="150500.29.25.12"/>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
  <changelog author="mchang@suse.com" date="1708603200">- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762)
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch</changelog>
  <changelog author="mchang@suse.com" date="1711108800">- Fix memdisk becomes the default boot entry, resolving no graphic display
  device error in guest vnc console (bsc#1221779)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1711540800">- Fix LPAR falls into grub shell after installation with lvm (bsc#1221866)
  * 0001-ofdisk-Enhance-canonical-path-handling-for-bootpath.patch</changelog>
</package>
<package pkgid="34f8ec34d7371ce9b66a0148e89d43e45a091dfbef659c764924844da7a3a87b" name="grub2" arch="src">
  <version epoch="0" ver="2.06" rel="150500.29.25.12"/>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
  <changelog author="mchang@suse.com" date="1708603200">- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762)
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch</changelog>
  <changelog author="mchang@suse.com" date="1711108800">- Fix memdisk becomes the default boot entry, resolving no graphic display
  device error in guest vnc console (bsc#1221779)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1711540800">- Fix LPAR falls into grub shell after installation with lvm (bsc#1221866)
  * 0001-ofdisk-Enhance-canonical-path-handling-for-bootpath.patch</changelog>
</package>
<package pkgid="9515ff1dbeaee1fc6e6bc94c9fe3709a67b81eebda5ab653b11d25a958f618dd" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.06" rel="150500.29.25.12"/>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
  <changelog author="mchang@suse.com" date="1708603200">- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762)
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch</changelog>
  <changelog author="mchang@suse.com" date="1711108800">- Fix memdisk becomes the default boot entry, resolving no graphic display
  device error in guest vnc console (bsc#1221779)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1711540800">- Fix LPAR falls into grub shell after installation with lvm (bsc#1221866)
  * 0001-ofdisk-Enhance-canonical-path-handling-for-bootpath.patch</changelog>
</package>
<package pkgid="24928e38fd599a297feea464ab8c1fc29621c1ef054cde27b85da67d73826bc6" name="grub2" arch="aarch64">
  <version epoch="0" ver="2.06" rel="150500.29.28.1"/>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
  <changelog author="mchang@suse.com" date="1708603200">- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762)
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch</changelog>
  <changelog author="mchang@suse.com" date="1711108800">- Fix memdisk becomes the default boot entry, resolving no graphic display
  device error in guest vnc console (bsc#1221779)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1711540800">- Fix LPAR falls into grub shell after installation with lvm (bsc#1221866)
  * 0001-ofdisk-Enhance-canonical-path-handling-for-bootpath.patch</changelog>
  <changelog author="mchang@suse.com" date="1715774400">- Fix error in /etc/grub.d/20_linux_xen: file_is_not_sym not found, renamed to
  file_is_not_xen_garbage (bsc#1224226)
  * grub2-fix-menu-in-xen-host-server.patch</changelog>
  <changelog author="mchang@suse.com" date="1720180800">- Fix input handling in ppc64le grub2 has high latency (bsc#1223535)
  * 0001-net-drivers-ieee1275-ofnet-Remove-200-ms-timeout-in-.patch</changelog>
  <changelog author="mchang@suse.com" date="1721390400">- Fix error in grub-install when root is on tmpfs (bsc#1226100)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1722600000">- Fix btrfs subvolume for platform modules not mounting at runtime when the
  default subvolume is the topmost root tree (bsc#1228124)
  * grub2-btrfs-06-subvol-mount.patch
- Rediff
  * 0001-Unify-the-check-to-enable-btrfs-relative-path.patch</changelog>
</package>
<package pkgid="d7f3b4de5c57a8dfbb0541f89ca1ec093c68fab4026f48eb7afc49ab05a56b82" name="grub2" arch="s390x">
  <version epoch="0" ver="2.06" rel="150500.29.28.1"/>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
  <changelog author="mchang@suse.com" date="1708603200">- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762)
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch</changelog>
  <changelog author="mchang@suse.com" date="1711108800">- Fix memdisk becomes the default boot entry, resolving no graphic display
  device error in guest vnc console (bsc#1221779)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1711540800">- Fix LPAR falls into grub shell after installation with lvm (bsc#1221866)
  * 0001-ofdisk-Enhance-canonical-path-handling-for-bootpath.patch</changelog>
  <changelog author="mchang@suse.com" date="1715774400">- Fix error in /etc/grub.d/20_linux_xen: file_is_not_sym not found, renamed to
  file_is_not_xen_garbage (bsc#1224226)
  * grub2-fix-menu-in-xen-host-server.patch</changelog>
  <changelog author="mchang@suse.com" date="1720180800">- Fix input handling in ppc64le grub2 has high latency (bsc#1223535)
  * 0001-net-drivers-ieee1275-ofnet-Remove-200-ms-timeout-in-.patch</changelog>
  <changelog author="mchang@suse.com" date="1721390400">- Fix error in grub-install when root is on tmpfs (bsc#1226100)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1722600000">- Fix btrfs subvolume for platform modules not mounting at runtime when the
  default subvolume is the topmost root tree (bsc#1228124)
  * grub2-btrfs-06-subvol-mount.patch
- Rediff
  * 0001-Unify-the-check-to-enable-btrfs-relative-path.patch</changelog>
</package>
<package pkgid="ec9ea58090db49e0751ffb3f2f7cbb717380509d65277842fe5de0ab57c79bc3" name="grub2" arch="src">
  <version epoch="0" ver="2.06" rel="150500.29.28.1"/>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
  <changelog author="mchang@suse.com" date="1708603200">- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762)
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch</changelog>
  <changelog author="mchang@suse.com" date="1711108800">- Fix memdisk becomes the default boot entry, resolving no graphic display
  device error in guest vnc console (bsc#1221779)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1711540800">- Fix LPAR falls into grub shell after installation with lvm (bsc#1221866)
  * 0001-ofdisk-Enhance-canonical-path-handling-for-bootpath.patch</changelog>
  <changelog author="mchang@suse.com" date="1715774400">- Fix error in /etc/grub.d/20_linux_xen: file_is_not_sym not found, renamed to
  file_is_not_xen_garbage (bsc#1224226)
  * grub2-fix-menu-in-xen-host-server.patch</changelog>
  <changelog author="mchang@suse.com" date="1720180800">- Fix input handling in ppc64le grub2 has high latency (bsc#1223535)
  * 0001-net-drivers-ieee1275-ofnet-Remove-200-ms-timeout-in-.patch</changelog>
  <changelog author="mchang@suse.com" date="1721390400">- Fix error in grub-install when root is on tmpfs (bsc#1226100)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1722600000">- Fix btrfs subvolume for platform modules not mounting at runtime when the
  default subvolume is the topmost root tree (bsc#1228124)
  * grub2-btrfs-06-subvol-mount.patch
- Rediff
  * 0001-Unify-the-check-to-enable-btrfs-relative-path.patch</changelog>
</package>
<package pkgid="9c619dd56c37d38cc15430b099b339cad1cd9a501231e0050bd5f7979a8c9237" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.06" rel="150500.29.28.1"/>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
  <changelog author="mchang@suse.com" date="1708603200">- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762)
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch</changelog>
  <changelog author="mchang@suse.com" date="1711108800">- Fix memdisk becomes the default boot entry, resolving no graphic display
  device error in guest vnc console (bsc#1221779)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1711540800">- Fix LPAR falls into grub shell after installation with lvm (bsc#1221866)
  * 0001-ofdisk-Enhance-canonical-path-handling-for-bootpath.patch</changelog>
  <changelog author="mchang@suse.com" date="1715774400">- Fix error in /etc/grub.d/20_linux_xen: file_is_not_sym not found, renamed to
  file_is_not_xen_garbage (bsc#1224226)
  * grub2-fix-menu-in-xen-host-server.patch</changelog>
  <changelog author="mchang@suse.com" date="1720180800">- Fix input handling in ppc64le grub2 has high latency (bsc#1223535)
  * 0001-net-drivers-ieee1275-ofnet-Remove-200-ms-timeout-in-.patch</changelog>
  <changelog author="mchang@suse.com" date="1721390400">- Fix error in grub-install when root is on tmpfs (bsc#1226100)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1722600000">- Fix btrfs subvolume for platform modules not mounting at runtime when the
  default subvolume is the topmost root tree (bsc#1228124)
  * grub2-btrfs-06-subvol-mount.patch
- Rediff
  * 0001-Unify-the-check-to-enable-btrfs-relative-path.patch</changelog>
</package>
<package pkgid="e1599b4fe0b293e9173c6431f76698dd462e7e842431574a8c2d0781a403475c" name="grub2" arch="aarch64">
  <version epoch="0" ver="2.06" rel="150500.29.31.1"/>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
  <changelog author="mchang@suse.com" date="1708603200">- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762)
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch</changelog>
  <changelog author="mchang@suse.com" date="1711108800">- Fix memdisk becomes the default boot entry, resolving no graphic display
  device error in guest vnc console (bsc#1221779)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1711540800">- Fix LPAR falls into grub shell after installation with lvm (bsc#1221866)
  * 0001-ofdisk-Enhance-canonical-path-handling-for-bootpath.patch</changelog>
  <changelog author="mchang@suse.com" date="1715774400">- Fix error in /etc/grub.d/20_linux_xen: file_is_not_sym not found, renamed to
  file_is_not_xen_garbage (bsc#1224226)
  * grub2-fix-menu-in-xen-host-server.patch</changelog>
  <changelog author="mchang@suse.com" date="1720180800">- Fix input handling in ppc64le grub2 has high latency (bsc#1223535)
  * 0001-net-drivers-ieee1275-ofnet-Remove-200-ms-timeout-in-.patch</changelog>
  <changelog author="mchang@suse.com" date="1721390400">- Fix error in grub-install when root is on tmpfs (bsc#1226100)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1722600000">- Fix btrfs subvolume for platform modules not mounting at runtime when the
  default subvolume is the topmost root tree (bsc#1228124)
  * grub2-btrfs-06-subvol-mount.patch
- Rediff
  * 0001-Unify-the-check-to-enable-btrfs-relative-path.patch</changelog>
  <changelog author="mchang@suse.com" date="1723636800">- grub2.spec: Add ofnet to signed grub.elf to support powerpc net boot
  installation when secure boot is enabled (bsc#1217761) (bsc#1228866)
- Improved check for disk device when looking for PReP partition
  * 0004-Introduce-prep_load_env-command.patch</changelog>
</package>
<package pkgid="033f6ee1e0e8e675f62986e6dcbec8f80eb89636871d36c2371e7e744ed1d156" name="grub2" arch="s390x">
  <version epoch="0" ver="2.06" rel="150500.29.31.1"/>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
  <changelog author="mchang@suse.com" date="1708603200">- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762)
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch</changelog>
  <changelog author="mchang@suse.com" date="1711108800">- Fix memdisk becomes the default boot entry, resolving no graphic display
  device error in guest vnc console (bsc#1221779)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1711540800">- Fix LPAR falls into grub shell after installation with lvm (bsc#1221866)
  * 0001-ofdisk-Enhance-canonical-path-handling-for-bootpath.patch</changelog>
  <changelog author="mchang@suse.com" date="1715774400">- Fix error in /etc/grub.d/20_linux_xen: file_is_not_sym not found, renamed to
  file_is_not_xen_garbage (bsc#1224226)
  * grub2-fix-menu-in-xen-host-server.patch</changelog>
  <changelog author="mchang@suse.com" date="1720180800">- Fix input handling in ppc64le grub2 has high latency (bsc#1223535)
  * 0001-net-drivers-ieee1275-ofnet-Remove-200-ms-timeout-in-.patch</changelog>
  <changelog author="mchang@suse.com" date="1721390400">- Fix error in grub-install when root is on tmpfs (bsc#1226100)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1722600000">- Fix btrfs subvolume for platform modules not mounting at runtime when the
  default subvolume is the topmost root tree (bsc#1228124)
  * grub2-btrfs-06-subvol-mount.patch
- Rediff
  * 0001-Unify-the-check-to-enable-btrfs-relative-path.patch</changelog>
  <changelog author="mchang@suse.com" date="1723636800">- grub2.spec: Add ofnet to signed grub.elf to support powerpc net boot
  installation when secure boot is enabled (bsc#1217761) (bsc#1228866)
- Improved check for disk device when looking for PReP partition
  * 0004-Introduce-prep_load_env-command.patch</changelog>
</package>
<package pkgid="043f5df5b88f146072c56ac0913877b57a2403b90bd5557127442dbf5da077e0" name="grub2" arch="src">
  <version epoch="0" ver="2.06" rel="150500.29.31.1"/>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
  <changelog author="mchang@suse.com" date="1708603200">- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762)
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch</changelog>
  <changelog author="mchang@suse.com" date="1711108800">- Fix memdisk becomes the default boot entry, resolving no graphic display
  device error in guest vnc console (bsc#1221779)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1711540800">- Fix LPAR falls into grub shell after installation with lvm (bsc#1221866)
  * 0001-ofdisk-Enhance-canonical-path-handling-for-bootpath.patch</changelog>
  <changelog author="mchang@suse.com" date="1715774400">- Fix error in /etc/grub.d/20_linux_xen: file_is_not_sym not found, renamed to
  file_is_not_xen_garbage (bsc#1224226)
  * grub2-fix-menu-in-xen-host-server.patch</changelog>
  <changelog author="mchang@suse.com" date="1720180800">- Fix input handling in ppc64le grub2 has high latency (bsc#1223535)
  * 0001-net-drivers-ieee1275-ofnet-Remove-200-ms-timeout-in-.patch</changelog>
  <changelog author="mchang@suse.com" date="1721390400">- Fix error in grub-install when root is on tmpfs (bsc#1226100)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1722600000">- Fix btrfs subvolume for platform modules not mounting at runtime when the
  default subvolume is the topmost root tree (bsc#1228124)
  * grub2-btrfs-06-subvol-mount.patch
- Rediff
  * 0001-Unify-the-check-to-enable-btrfs-relative-path.patch</changelog>
  <changelog author="mchang@suse.com" date="1723636800">- grub2.spec: Add ofnet to signed grub.elf to support powerpc net boot
  installation when secure boot is enabled (bsc#1217761) (bsc#1228866)
- Improved check for disk device when looking for PReP partition
  * 0004-Introduce-prep_load_env-command.patch</changelog>
</package>
<package pkgid="b818cacf403df63b53a86ba969fca00f35ca842cd588833bb90ff4706b4a2e0b" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.06" rel="150500.29.31.1"/>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
  <changelog author="mchang@suse.com" date="1708603200">- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762)
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch</changelog>
  <changelog author="mchang@suse.com" date="1711108800">- Fix memdisk becomes the default boot entry, resolving no graphic display
  device error in guest vnc console (bsc#1221779)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1711540800">- Fix LPAR falls into grub shell after installation with lvm (bsc#1221866)
  * 0001-ofdisk-Enhance-canonical-path-handling-for-bootpath.patch</changelog>
  <changelog author="mchang@suse.com" date="1715774400">- Fix error in /etc/grub.d/20_linux_xen: file_is_not_sym not found, renamed to
  file_is_not_xen_garbage (bsc#1224226)
  * grub2-fix-menu-in-xen-host-server.patch</changelog>
  <changelog author="mchang@suse.com" date="1720180800">- Fix input handling in ppc64le grub2 has high latency (bsc#1223535)
  * 0001-net-drivers-ieee1275-ofnet-Remove-200-ms-timeout-in-.patch</changelog>
  <changelog author="mchang@suse.com" date="1721390400">- Fix error in grub-install when root is on tmpfs (bsc#1226100)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1722600000">- Fix btrfs subvolume for platform modules not mounting at runtime when the
  default subvolume is the topmost root tree (bsc#1228124)
  * grub2-btrfs-06-subvol-mount.patch
- Rediff
  * 0001-Unify-the-check-to-enable-btrfs-relative-path.patch</changelog>
  <changelog author="mchang@suse.com" date="1723636800">- grub2.spec: Add ofnet to signed grub.elf to support powerpc net boot
  installation when secure boot is enabled (bsc#1217761) (bsc#1228866)
- Improved check for disk device when looking for PReP partition
  * 0004-Introduce-prep_load_env-command.patch</changelog>
</package>
<package pkgid="ce22197a7b677eb6934a8903afe3def0ad3069a28c463ed498ffee8d42e5456f" name="grub2" arch="aarch64">
  <version epoch="0" ver="2.06" rel="150500.29.8.1"/>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1666958400">- NVMeoFC support on grub (jsc#PED-996)
  * 0001-ieee1275-add-support-for-NVMeoFC.patch
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
  * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
  * 0004-ofpath-controller-name-update.patch
- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
  * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
  * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
  * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch
- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990)
  * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
</package>
<package pkgid="55cb4b88f21d8fc6648344775a4085830869931772ef26d0e935e86242dbd5b1" name="grub2" arch="s390x">
  <version epoch="0" ver="2.06" rel="150500.29.8.1"/>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1666958400">- NVMeoFC support on grub (jsc#PED-996)
  * 0001-ieee1275-add-support-for-NVMeoFC.patch
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
  * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
  * 0004-ofpath-controller-name-update.patch
- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
  * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
  * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
  * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch
- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990)
  * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
</package>
<package pkgid="d4066cedcd93c0b8bc934408ef56199069ed750dbc47332e1f16d5e0040d625f" name="grub2" arch="src">
  <version epoch="0" ver="2.06" rel="150500.29.8.1"/>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1666958400">- NVMeoFC support on grub (jsc#PED-996)
  * 0001-ieee1275-add-support-for-NVMeoFC.patch
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
  * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
  * 0004-ofpath-controller-name-update.patch
- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
  * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
  * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
  * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch
- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990)
  * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
</package>
<package pkgid="9fcf301cd8dfad6632372bcc5d8560f12559b193a6e226a3fd28cd2aa17ad2cd" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.06" rel="150500.29.8.1"/>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1666958400">- NVMeoFC support on grub (jsc#PED-996)
  * 0001-ieee1275-add-support-for-NVMeoFC.patch
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
  * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
  * 0004-ofpath-controller-name-update.patch
- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
  * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
  * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
  * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch
- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990)
  * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
</package>
<package pkgid="220278ba80d706a7364a59932bf56ce1e594efbf218b5d03e0e5b64396218682" name="grub2-arm64-efi" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.11.1"/>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="8e3cb0cd6b58d3d08321cc7532f430cdba21e2839bc82db7416755e2c39a72d0" name="grub2-arm64-efi" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.13.1"/>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="441daad3fba8f1249d0a36abf9589d544d36e092749158344b3412c8431f2562" name="grub2-arm64-efi" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.16.1"/>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
</package>
<package pkgid="b00100d95f2435411270c7672c42d2380fcc25a652858d3847909cfca98d996e" name="grub2-arm64-efi" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.19.1"/>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
  <changelog author="mchang@suse.com" date="1708603200">- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762)
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch</changelog>
</package>
<package pkgid="b805b0d5621c7078f41faefff98e0e210405c750f07d7e3d0fa7d525786a07df" name="grub2-arm64-efi" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.22.2"/>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
  <changelog author="mchang@suse.com" date="1708603200">- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762)
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch</changelog>
  <changelog author="mchang@suse.com" date="1711108800">- Fix memdisk becomes the default boot entry, resolving no graphic display
  device error in guest vnc console (bsc#1221779)
  * grub2-xen-pv-firmware.cfg</changelog>
</package>
<package pkgid="d1a5b052e036e0d953feb2d66d2c22d7eb3559497de1380e41a847c9809d03b5" name="grub2-arm64-efi" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.25.12"/>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
  <changelog author="mchang@suse.com" date="1708603200">- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762)
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch</changelog>
  <changelog author="mchang@suse.com" date="1711108800">- Fix memdisk becomes the default boot entry, resolving no graphic display
  device error in guest vnc console (bsc#1221779)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1711540800">- Fix LPAR falls into grub shell after installation with lvm (bsc#1221866)
  * 0001-ofdisk-Enhance-canonical-path-handling-for-bootpath.patch</changelog>
</package>
<package pkgid="0a059318d0d8df81ff439c87d24d1665bf979fdfc7e418e4f76cb83c2d9b47a9" name="grub2-arm64-efi" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.28.1"/>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
  <changelog author="mchang@suse.com" date="1708603200">- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762)
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch</changelog>
  <changelog author="mchang@suse.com" date="1711108800">- Fix memdisk becomes the default boot entry, resolving no graphic display
  device error in guest vnc console (bsc#1221779)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1711540800">- Fix LPAR falls into grub shell after installation with lvm (bsc#1221866)
  * 0001-ofdisk-Enhance-canonical-path-handling-for-bootpath.patch</changelog>
  <changelog author="mchang@suse.com" date="1715774400">- Fix error in /etc/grub.d/20_linux_xen: file_is_not_sym not found, renamed to
  file_is_not_xen_garbage (bsc#1224226)
  * grub2-fix-menu-in-xen-host-server.patch</changelog>
  <changelog author="mchang@suse.com" date="1720180800">- Fix input handling in ppc64le grub2 has high latency (bsc#1223535)
  * 0001-net-drivers-ieee1275-ofnet-Remove-200-ms-timeout-in-.patch</changelog>
  <changelog author="mchang@suse.com" date="1721390400">- Fix error in grub-install when root is on tmpfs (bsc#1226100)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1722600000">- Fix btrfs subvolume for platform modules not mounting at runtime when the
  default subvolume is the topmost root tree (bsc#1228124)
  * grub2-btrfs-06-subvol-mount.patch
- Rediff
  * 0001-Unify-the-check-to-enable-btrfs-relative-path.patch</changelog>
</package>
<package pkgid="f3f9bd793cc290d37789a96df306f8bb158924b6af6e79a73f30b0f538bbabe5" name="grub2-arm64-efi" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.31.1"/>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
  <changelog author="mchang@suse.com" date="1708603200">- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762)
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch</changelog>
  <changelog author="mchang@suse.com" date="1711108800">- Fix memdisk becomes the default boot entry, resolving no graphic display
  device error in guest vnc console (bsc#1221779)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1711540800">- Fix LPAR falls into grub shell after installation with lvm (bsc#1221866)
  * 0001-ofdisk-Enhance-canonical-path-handling-for-bootpath.patch</changelog>
  <changelog author="mchang@suse.com" date="1715774400">- Fix error in /etc/grub.d/20_linux_xen: file_is_not_sym not found, renamed to
  file_is_not_xen_garbage (bsc#1224226)
  * grub2-fix-menu-in-xen-host-server.patch</changelog>
  <changelog author="mchang@suse.com" date="1720180800">- Fix input handling in ppc64le grub2 has high latency (bsc#1223535)
  * 0001-net-drivers-ieee1275-ofnet-Remove-200-ms-timeout-in-.patch</changelog>
  <changelog author="mchang@suse.com" date="1721390400">- Fix error in grub-install when root is on tmpfs (bsc#1226100)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1722600000">- Fix btrfs subvolume for platform modules not mounting at runtime when the
  default subvolume is the topmost root tree (bsc#1228124)
  * grub2-btrfs-06-subvol-mount.patch
- Rediff
  * 0001-Unify-the-check-to-enable-btrfs-relative-path.patch</changelog>
  <changelog author="mchang@suse.com" date="1723636800">- grub2.spec: Add ofnet to signed grub.elf to support powerpc net boot
  installation when secure boot is enabled (bsc#1217761) (bsc#1228866)
- Improved check for disk device when looking for PReP partition
  * 0004-Introduce-prep_load_env-command.patch</changelog>
</package>
<package pkgid="61d8f4fd4aacca0b5c2c4c04af3bd1a5ab652036b12a4b639e39eb37a9b2e41b" name="grub2-arm64-efi" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.8.1"/>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1666958400">- NVMeoFC support on grub (jsc#PED-996)
  * 0001-ieee1275-add-support-for-NVMeoFC.patch
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
  * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
  * 0004-ofpath-controller-name-update.patch
- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
  * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
  * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
  * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch
- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990)
  * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
</package>
<package pkgid="0851d06be61f41d26473998dfb224543b9109b0ea71fd1be90e59b1b20ee242a" name="grub2-i386-pc" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.11.1"/>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="0b517b87e8d4c86be29866d30c7fa0c1473cb640ccdb480309de04e373db8ce4" name="grub2-i386-pc" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.13.1"/>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="2420a4dc6d083812c9bf67bba0ab6803e88c787dd70384b84f762a83dca0db8f" name="grub2-i386-pc" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.16.1"/>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
</package>
<package pkgid="268592c24af658940ebd45d62e4435ae510fe4bec9a8067a6151ca7a44cb232c" name="grub2-i386-pc" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.19.1"/>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
  <changelog author="mchang@suse.com" date="1708603200">- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762)
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch</changelog>
</package>
<package pkgid="f02fbef87d71eeffbbf7d80a9156d2e1d6d01a3985b84a992db31b0e370f665d" name="grub2-i386-pc" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.22.2"/>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
  <changelog author="mchang@suse.com" date="1708603200">- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762)
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch</changelog>
  <changelog author="mchang@suse.com" date="1711108800">- Fix memdisk becomes the default boot entry, resolving no graphic display
  device error in guest vnc console (bsc#1221779)
  * grub2-xen-pv-firmware.cfg</changelog>
</package>
<package pkgid="5a6c78a61f8dced3781255e7ae6d5c195f2a6108fa97431261a090c5ac096ab4" name="grub2-i386-pc" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.25.12"/>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
  <changelog author="mchang@suse.com" date="1708603200">- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762)
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch</changelog>
  <changelog author="mchang@suse.com" date="1711108800">- Fix memdisk becomes the default boot entry, resolving no graphic display
  device error in guest vnc console (bsc#1221779)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1711540800">- Fix LPAR falls into grub shell after installation with lvm (bsc#1221866)
  * 0001-ofdisk-Enhance-canonical-path-handling-for-bootpath.patch</changelog>
</package>
<package pkgid="437148f5a912ddaca64d3ebf6d47d628c0e9148e081e446382e7db05e354b83d" name="grub2-i386-pc" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.28.1"/>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
  <changelog author="mchang@suse.com" date="1708603200">- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762)
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch</changelog>
  <changelog author="mchang@suse.com" date="1711108800">- Fix memdisk becomes the default boot entry, resolving no graphic display
  device error in guest vnc console (bsc#1221779)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1711540800">- Fix LPAR falls into grub shell after installation with lvm (bsc#1221866)
  * 0001-ofdisk-Enhance-canonical-path-handling-for-bootpath.patch</changelog>
  <changelog author="mchang@suse.com" date="1715774400">- Fix error in /etc/grub.d/20_linux_xen: file_is_not_sym not found, renamed to
  file_is_not_xen_garbage (bsc#1224226)
  * grub2-fix-menu-in-xen-host-server.patch</changelog>
  <changelog author="mchang@suse.com" date="1720180800">- Fix input handling in ppc64le grub2 has high latency (bsc#1223535)
  * 0001-net-drivers-ieee1275-ofnet-Remove-200-ms-timeout-in-.patch</changelog>
  <changelog author="mchang@suse.com" date="1721390400">- Fix error in grub-install when root is on tmpfs (bsc#1226100)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1722600000">- Fix btrfs subvolume for platform modules not mounting at runtime when the
  default subvolume is the topmost root tree (bsc#1228124)
  * grub2-btrfs-06-subvol-mount.patch
- Rediff
  * 0001-Unify-the-check-to-enable-btrfs-relative-path.patch</changelog>
</package>
<package pkgid="82b1863cdcb288bcddf93d31ea073ef8f8be7745c0b505924701f5a30e75ab63" name="grub2-i386-pc" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.31.1"/>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
  <changelog author="mchang@suse.com" date="1708603200">- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762)
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch</changelog>
  <changelog author="mchang@suse.com" date="1711108800">- Fix memdisk becomes the default boot entry, resolving no graphic display
  device error in guest vnc console (bsc#1221779)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1711540800">- Fix LPAR falls into grub shell after installation with lvm (bsc#1221866)
  * 0001-ofdisk-Enhance-canonical-path-handling-for-bootpath.patch</changelog>
  <changelog author="mchang@suse.com" date="1715774400">- Fix error in /etc/grub.d/20_linux_xen: file_is_not_sym not found, renamed to
  file_is_not_xen_garbage (bsc#1224226)
  * grub2-fix-menu-in-xen-host-server.patch</changelog>
  <changelog author="mchang@suse.com" date="1720180800">- Fix input handling in ppc64le grub2 has high latency (bsc#1223535)
  * 0001-net-drivers-ieee1275-ofnet-Remove-200-ms-timeout-in-.patch</changelog>
  <changelog author="mchang@suse.com" date="1721390400">- Fix error in grub-install when root is on tmpfs (bsc#1226100)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1722600000">- Fix btrfs subvolume for platform modules not mounting at runtime when the
  default subvolume is the topmost root tree (bsc#1228124)
  * grub2-btrfs-06-subvol-mount.patch
- Rediff
  * 0001-Unify-the-check-to-enable-btrfs-relative-path.patch</changelog>
  <changelog author="mchang@suse.com" date="1723636800">- grub2.spec: Add ofnet to signed grub.elf to support powerpc net boot
  installation when secure boot is enabled (bsc#1217761) (bsc#1228866)
- Improved check for disk device when looking for PReP partition
  * 0004-Introduce-prep_load_env-command.patch</changelog>
</package>
<package pkgid="e4675a06907138dcffad11e1b0e2a8362160643437802b5c2f768ca35d2920c6" name="grub2-i386-pc" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.8.1"/>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1666958400">- NVMeoFC support on grub (jsc#PED-996)
  * 0001-ieee1275-add-support-for-NVMeoFC.patch
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
  * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
  * 0004-ofpath-controller-name-update.patch
- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
  * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
  * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
  * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch
- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990)
  * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
</package>
<package pkgid="d2986a55ab9aa5ed044668d2df87768522311ac5d4b34e0d82418da67b02d0cd" name="grub2-s390x-emu" arch="s390x">
  <version epoch="0" ver="2.06" rel="150500.29.11.1"/>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="24a662ff2bd77b87b17b91dc84cc3d2e441a99326e70cd84e10639953fd4dc73" name="grub2-s390x-emu" arch="s390x">
  <version epoch="0" ver="2.06" rel="150500.29.13.1"/>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="38eda49eb1c2d9e5121a3f9b5552172895c35b2a77974369d064f1c340c8ba00" name="grub2-s390x-emu" arch="s390x">
  <version epoch="0" ver="2.06" rel="150500.29.16.1"/>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
</package>
<package pkgid="52e0cbc65bf40b672065b5dc3145e10787b5a9303d8b1b8e6cd872844be0cc57" name="grub2-s390x-emu" arch="s390x">
  <version epoch="0" ver="2.06" rel="150500.29.19.1"/>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
  <changelog author="mchang@suse.com" date="1708603200">- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762)
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch</changelog>
</package>
<package pkgid="8727892824a29a7bd97af5d49d31ec231ba1eb6d04c56e47c69cdf0270d8d2f4" name="grub2-s390x-emu" arch="s390x">
  <version epoch="0" ver="2.06" rel="150500.29.22.2"/>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
  <changelog author="mchang@suse.com" date="1708603200">- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762)
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch</changelog>
  <changelog author="mchang@suse.com" date="1711108800">- Fix memdisk becomes the default boot entry, resolving no graphic display
  device error in guest vnc console (bsc#1221779)
  * grub2-xen-pv-firmware.cfg</changelog>
</package>
<package pkgid="8d404a7a0d2884678781bbdb7a4e1ee2fa9b45d2b1b14171266ed166e7367c57" name="grub2-s390x-emu" arch="s390x">
  <version epoch="0" ver="2.06" rel="150500.29.25.12"/>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
  <changelog author="mchang@suse.com" date="1708603200">- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762)
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch</changelog>
  <changelog author="mchang@suse.com" date="1711108800">- Fix memdisk becomes the default boot entry, resolving no graphic display
  device error in guest vnc console (bsc#1221779)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1711540800">- Fix LPAR falls into grub shell after installation with lvm (bsc#1221866)
  * 0001-ofdisk-Enhance-canonical-path-handling-for-bootpath.patch</changelog>
</package>
<package pkgid="9d89b5bd293541dffa71395307617b935858ca4aafe1f1b2787c371c613b3ef0" name="grub2-s390x-emu" arch="s390x">
  <version epoch="0" ver="2.06" rel="150500.29.28.1"/>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
  <changelog author="mchang@suse.com" date="1708603200">- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762)
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch</changelog>
  <changelog author="mchang@suse.com" date="1711108800">- Fix memdisk becomes the default boot entry, resolving no graphic display
  device error in guest vnc console (bsc#1221779)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1711540800">- Fix LPAR falls into grub shell after installation with lvm (bsc#1221866)
  * 0001-ofdisk-Enhance-canonical-path-handling-for-bootpath.patch</changelog>
  <changelog author="mchang@suse.com" date="1715774400">- Fix error in /etc/grub.d/20_linux_xen: file_is_not_sym not found, renamed to
  file_is_not_xen_garbage (bsc#1224226)
  * grub2-fix-menu-in-xen-host-server.patch</changelog>
  <changelog author="mchang@suse.com" date="1720180800">- Fix input handling in ppc64le grub2 has high latency (bsc#1223535)
  * 0001-net-drivers-ieee1275-ofnet-Remove-200-ms-timeout-in-.patch</changelog>
  <changelog author="mchang@suse.com" date="1721390400">- Fix error in grub-install when root is on tmpfs (bsc#1226100)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1722600000">- Fix btrfs subvolume for platform modules not mounting at runtime when the
  default subvolume is the topmost root tree (bsc#1228124)
  * grub2-btrfs-06-subvol-mount.patch
- Rediff
  * 0001-Unify-the-check-to-enable-btrfs-relative-path.patch</changelog>
</package>
<package pkgid="6c774ca7e5fccd4210f7ef6a3bbbb20e1af57e8299c6c7639961048297e93041" name="grub2-s390x-emu" arch="s390x">
  <version epoch="0" ver="2.06" rel="150500.29.31.1"/>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
  <changelog author="mchang@suse.com" date="1708603200">- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762)
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch</changelog>
  <changelog author="mchang@suse.com" date="1711108800">- Fix memdisk becomes the default boot entry, resolving no graphic display
  device error in guest vnc console (bsc#1221779)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1711540800">- Fix LPAR falls into grub shell after installation with lvm (bsc#1221866)
  * 0001-ofdisk-Enhance-canonical-path-handling-for-bootpath.patch</changelog>
  <changelog author="mchang@suse.com" date="1715774400">- Fix error in /etc/grub.d/20_linux_xen: file_is_not_sym not found, renamed to
  file_is_not_xen_garbage (bsc#1224226)
  * grub2-fix-menu-in-xen-host-server.patch</changelog>
  <changelog author="mchang@suse.com" date="1720180800">- Fix input handling in ppc64le grub2 has high latency (bsc#1223535)
  * 0001-net-drivers-ieee1275-ofnet-Remove-200-ms-timeout-in-.patch</changelog>
  <changelog author="mchang@suse.com" date="1721390400">- Fix error in grub-install when root is on tmpfs (bsc#1226100)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1722600000">- Fix btrfs subvolume for platform modules not mounting at runtime when the
  default subvolume is the topmost root tree (bsc#1228124)
  * grub2-btrfs-06-subvol-mount.patch
- Rediff
  * 0001-Unify-the-check-to-enable-btrfs-relative-path.patch</changelog>
  <changelog author="mchang@suse.com" date="1723636800">- grub2.spec: Add ofnet to signed grub.elf to support powerpc net boot
  installation when secure boot is enabled (bsc#1217761) (bsc#1228866)
- Improved check for disk device when looking for PReP partition
  * 0004-Introduce-prep_load_env-command.patch</changelog>
</package>
<package pkgid="0eed197b9aae2a903e61bb5c6b86c503ae5872c3500cbfae8633fa2805ca35a8" name="grub2-s390x-emu" arch="s390x">
  <version epoch="0" ver="2.06" rel="150500.29.8.1"/>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1666958400">- NVMeoFC support on grub (jsc#PED-996)
  * 0001-ieee1275-add-support-for-NVMeoFC.patch
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
  * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
  * 0004-ofpath-controller-name-update.patch
- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
  * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
  * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
  * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch
- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990)
  * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
</package>
<package pkgid="dbd3906c3033991bbff9ea60a6c371d91b7e587910ee025a12eb9cc9d484f5f7" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.11.1"/>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="09af4f7191984210e97e68dc67e251f6e501e2ed9e977d98caa58ac664a2295e" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.13.1"/>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="be57b379ad16c39ffbff99ad84ffccf11feaebc3d17de5acfa126ba4622b933e" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.16.1"/>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
</package>
<package pkgid="b67551b3abe1bfb874eb65fafa3342d6b3745a5a787aade5e8c2d11ba5654fed" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.19.1"/>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
  <changelog author="mchang@suse.com" date="1708603200">- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762)
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch</changelog>
</package>
<package pkgid="8450e13d107e5246bad8fc770ae2f0bf9f328d6f2986efccc82e6ca7cbbfb89a" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.22.2"/>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
  <changelog author="mchang@suse.com" date="1708603200">- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762)
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch</changelog>
  <changelog author="mchang@suse.com" date="1711108800">- Fix memdisk becomes the default boot entry, resolving no graphic display
  device error in guest vnc console (bsc#1221779)
  * grub2-xen-pv-firmware.cfg</changelog>
</package>
<package pkgid="863d170cd2d7c55716c128b63d48454b33c1d393ea9041d002a02b9509285700" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.25.12"/>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
  <changelog author="mchang@suse.com" date="1708603200">- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762)
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch</changelog>
  <changelog author="mchang@suse.com" date="1711108800">- Fix memdisk becomes the default boot entry, resolving no graphic display
  device error in guest vnc console (bsc#1221779)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1711540800">- Fix LPAR falls into grub shell after installation with lvm (bsc#1221866)
  * 0001-ofdisk-Enhance-canonical-path-handling-for-bootpath.patch</changelog>
</package>
<package pkgid="d2e046d2bdd7380bd01c93372939e4135e797b12d8019ca98cda5091adbbc86d" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.28.1"/>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
  <changelog author="mchang@suse.com" date="1708603200">- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762)
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch</changelog>
  <changelog author="mchang@suse.com" date="1711108800">- Fix memdisk becomes the default boot entry, resolving no graphic display
  device error in guest vnc console (bsc#1221779)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1711540800">- Fix LPAR falls into grub shell after installation with lvm (bsc#1221866)
  * 0001-ofdisk-Enhance-canonical-path-handling-for-bootpath.patch</changelog>
  <changelog author="mchang@suse.com" date="1715774400">- Fix error in /etc/grub.d/20_linux_xen: file_is_not_sym not found, renamed to
  file_is_not_xen_garbage (bsc#1224226)
  * grub2-fix-menu-in-xen-host-server.patch</changelog>
  <changelog author="mchang@suse.com" date="1720180800">- Fix input handling in ppc64le grub2 has high latency (bsc#1223535)
  * 0001-net-drivers-ieee1275-ofnet-Remove-200-ms-timeout-in-.patch</changelog>
  <changelog author="mchang@suse.com" date="1721390400">- Fix error in grub-install when root is on tmpfs (bsc#1226100)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1722600000">- Fix btrfs subvolume for platform modules not mounting at runtime when the
  default subvolume is the topmost root tree (bsc#1228124)
  * grub2-btrfs-06-subvol-mount.patch
- Rediff
  * 0001-Unify-the-check-to-enable-btrfs-relative-path.patch</changelog>
</package>
<package pkgid="44c9465a40574c6bd19e363f095a482ef7c4f60818cf6e5394d74214dd520113" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.31.1"/>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
  <changelog author="mchang@suse.com" date="1708603200">- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762)
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch</changelog>
  <changelog author="mchang@suse.com" date="1711108800">- Fix memdisk becomes the default boot entry, resolving no graphic display
  device error in guest vnc console (bsc#1221779)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1711540800">- Fix LPAR falls into grub shell after installation with lvm (bsc#1221866)
  * 0001-ofdisk-Enhance-canonical-path-handling-for-bootpath.patch</changelog>
  <changelog author="mchang@suse.com" date="1715774400">- Fix error in /etc/grub.d/20_linux_xen: file_is_not_sym not found, renamed to
  file_is_not_xen_garbage (bsc#1224226)
  * grub2-fix-menu-in-xen-host-server.patch</changelog>
  <changelog author="mchang@suse.com" date="1720180800">- Fix input handling in ppc64le grub2 has high latency (bsc#1223535)
  * 0001-net-drivers-ieee1275-ofnet-Remove-200-ms-timeout-in-.patch</changelog>
  <changelog author="mchang@suse.com" date="1721390400">- Fix error in grub-install when root is on tmpfs (bsc#1226100)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1722600000">- Fix btrfs subvolume for platform modules not mounting at runtime when the
  default subvolume is the topmost root tree (bsc#1228124)
  * grub2-btrfs-06-subvol-mount.patch
- Rediff
  * 0001-Unify-the-check-to-enable-btrfs-relative-path.patch</changelog>
  <changelog author="mchang@suse.com" date="1723636800">- grub2.spec: Add ofnet to signed grub.elf to support powerpc net boot
  installation when secure boot is enabled (bsc#1217761) (bsc#1228866)
- Improved check for disk device when looking for PReP partition
  * 0004-Introduce-prep_load_env-command.patch</changelog>
</package>
<package pkgid="812cf04648769b5c4c3b942f2e644916d9fbed488d3d212094c1b0333df88d34" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.8.1"/>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1666958400">- NVMeoFC support on grub (jsc#PED-996)
  * 0001-ieee1275-add-support-for-NVMeoFC.patch
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
  * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
  * 0004-ofpath-controller-name-update.patch
- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
  * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
  * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
  * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch
- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990)
  * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
</package>
<package pkgid="9c023e7c22c3bad743bc79267c4b3e9cbe3ec4f95f41f079203198f73de21412" name="grub2-x86_64-efi" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.11.1"/>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="263ddbbe03ec7f4ae73710254d87bbd97d1dcaa17ee5f72854012862efeb75c8" name="grub2-x86_64-efi" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.13.1"/>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="6c436c9249b642493552340b46d86f521e332a175f4f342d93d61d6222672040" name="grub2-x86_64-efi" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.16.1"/>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
</package>
<package pkgid="48468792ebb08d76c77c56f69d616104c371b261e60b7b287e7c2dbd1b196b26" name="grub2-x86_64-efi" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.19.1"/>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
  <changelog author="mchang@suse.com" date="1708603200">- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762)
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch</changelog>
</package>
<package pkgid="cdb5d2328287c1a66d22f0e227f5912c77683fe203b546872034473a2e9b19bd" name="grub2-x86_64-efi" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.22.2"/>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
  <changelog author="mchang@suse.com" date="1708603200">- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762)
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch</changelog>
  <changelog author="mchang@suse.com" date="1711108800">- Fix memdisk becomes the default boot entry, resolving no graphic display
  device error in guest vnc console (bsc#1221779)
  * grub2-xen-pv-firmware.cfg</changelog>
</package>
<package pkgid="e53dd05376c0fa8b8c652fa6b63ddb28d04036a4e2ff32e37ce6fd2cf05c4302" name="grub2-x86_64-efi" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.25.12"/>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
  <changelog author="mchang@suse.com" date="1708603200">- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762)
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch</changelog>
  <changelog author="mchang@suse.com" date="1711108800">- Fix memdisk becomes the default boot entry, resolving no graphic display
  device error in guest vnc console (bsc#1221779)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1711540800">- Fix LPAR falls into grub shell after installation with lvm (bsc#1221866)
  * 0001-ofdisk-Enhance-canonical-path-handling-for-bootpath.patch</changelog>
</package>
<package pkgid="614e951b2a234817af7855b823b6c2042ef1775130c7d2cf920981804ac0c318" name="grub2-x86_64-efi" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.28.1"/>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
  <changelog author="mchang@suse.com" date="1708603200">- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762)
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch</changelog>
  <changelog author="mchang@suse.com" date="1711108800">- Fix memdisk becomes the default boot entry, resolving no graphic display
  device error in guest vnc console (bsc#1221779)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1711540800">- Fix LPAR falls into grub shell after installation with lvm (bsc#1221866)
  * 0001-ofdisk-Enhance-canonical-path-handling-for-bootpath.patch</changelog>
  <changelog author="mchang@suse.com" date="1715774400">- Fix error in /etc/grub.d/20_linux_xen: file_is_not_sym not found, renamed to
  file_is_not_xen_garbage (bsc#1224226)
  * grub2-fix-menu-in-xen-host-server.patch</changelog>
  <changelog author="mchang@suse.com" date="1720180800">- Fix input handling in ppc64le grub2 has high latency (bsc#1223535)
  * 0001-net-drivers-ieee1275-ofnet-Remove-200-ms-timeout-in-.patch</changelog>
  <changelog author="mchang@suse.com" date="1721390400">- Fix error in grub-install when root is on tmpfs (bsc#1226100)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1722600000">- Fix btrfs subvolume for platform modules not mounting at runtime when the
  default subvolume is the topmost root tree (bsc#1228124)
  * grub2-btrfs-06-subvol-mount.patch
- Rediff
  * 0001-Unify-the-check-to-enable-btrfs-relative-path.patch</changelog>
</package>
<package pkgid="66f01f867dc6cc0dd15bed7d3f4742a08840f155d5b6abc8c5faa3729ecf8936" name="grub2-x86_64-efi" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.31.1"/>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
  <changelog author="mchang@suse.com" date="1708603200">- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762)
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch</changelog>
  <changelog author="mchang@suse.com" date="1711108800">- Fix memdisk becomes the default boot entry, resolving no graphic display
  device error in guest vnc console (bsc#1221779)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1711540800">- Fix LPAR falls into grub shell after installation with lvm (bsc#1221866)
  * 0001-ofdisk-Enhance-canonical-path-handling-for-bootpath.patch</changelog>
  <changelog author="mchang@suse.com" date="1715774400">- Fix error in /etc/grub.d/20_linux_xen: file_is_not_sym not found, renamed to
  file_is_not_xen_garbage (bsc#1224226)
  * grub2-fix-menu-in-xen-host-server.patch</changelog>
  <changelog author="mchang@suse.com" date="1720180800">- Fix input handling in ppc64le grub2 has high latency (bsc#1223535)
  * 0001-net-drivers-ieee1275-ofnet-Remove-200-ms-timeout-in-.patch</changelog>
  <changelog author="mchang@suse.com" date="1721390400">- Fix error in grub-install when root is on tmpfs (bsc#1226100)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1722600000">- Fix btrfs subvolume for platform modules not mounting at runtime when the
  default subvolume is the topmost root tree (bsc#1228124)
  * grub2-btrfs-06-subvol-mount.patch
- Rediff
  * 0001-Unify-the-check-to-enable-btrfs-relative-path.patch</changelog>
  <changelog author="mchang@suse.com" date="1723636800">- grub2.spec: Add ofnet to signed grub.elf to support powerpc net boot
  installation when secure boot is enabled (bsc#1217761) (bsc#1228866)
- Improved check for disk device when looking for PReP partition
  * 0004-Introduce-prep_load_env-command.patch</changelog>
</package>
<package pkgid="b0b3ec2e850805fc7685231b8a7ab92fbefb5ce7d9e182eb381df41a7aad5f0f" name="grub2-x86_64-efi" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.8.1"/>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1666958400">- NVMeoFC support on grub (jsc#PED-996)
  * 0001-ieee1275-add-support-for-NVMeoFC.patch
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
  * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
  * 0004-ofpath-controller-name-update.patch
- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
  * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
  * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
  * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch
- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990)
  * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
</package>
<package pkgid="8727b1abc0d2885f62ecaa9689588860b9f0435abe6ea2d0a0dcc11a7f687489" name="grub2-x86_64-xen" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.11.1"/>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="4c8f81cc26c478baa10a59b28278cfdc1fe4186fcd8846ffe729239f0dac87b8" name="grub2-x86_64-xen" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.13.1"/>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="4ecc5840adedabd050d28e103bd4bf532a655a88c668d30fd8a4632b31e09f7f" name="grub2-x86_64-xen" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.16.1"/>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
</package>
<package pkgid="717a0ed374ca35a8b2cd32ab1969e3e7474eadf2c49a7a17959df7a379982291" name="grub2-x86_64-xen" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.19.1"/>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
  <changelog author="mchang@suse.com" date="1708603200">- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762)
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch</changelog>
</package>
<package pkgid="027aef7f4a1e02e0fbe13e71cfe5eb897dee084c431dabbed2363d70c22c6976" name="grub2-x86_64-xen" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.22.2"/>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
  <changelog author="mchang@suse.com" date="1708603200">- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762)
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch</changelog>
  <changelog author="mchang@suse.com" date="1711108800">- Fix memdisk becomes the default boot entry, resolving no graphic display
  device error in guest vnc console (bsc#1221779)
  * grub2-xen-pv-firmware.cfg</changelog>
</package>
<package pkgid="a9cd2b93d78edf26f578500f6b4e0952cd0d42b4908e3021bda8f446559bfc88" name="grub2-x86_64-xen" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.25.12"/>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
  <changelog author="mchang@suse.com" date="1708603200">- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762)
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch</changelog>
  <changelog author="mchang@suse.com" date="1711108800">- Fix memdisk becomes the default boot entry, resolving no graphic display
  device error in guest vnc console (bsc#1221779)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1711540800">- Fix LPAR falls into grub shell after installation with lvm (bsc#1221866)
  * 0001-ofdisk-Enhance-canonical-path-handling-for-bootpath.patch</changelog>
</package>
<package pkgid="aeb8bc31eda130eb98d72ca118dab899e6da11070e4dfd4db3c15e5f68aa148d" name="grub2-x86_64-xen" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.28.1"/>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
  <changelog author="mchang@suse.com" date="1708603200">- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762)
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch</changelog>
  <changelog author="mchang@suse.com" date="1711108800">- Fix memdisk becomes the default boot entry, resolving no graphic display
  device error in guest vnc console (bsc#1221779)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1711540800">- Fix LPAR falls into grub shell after installation with lvm (bsc#1221866)
  * 0001-ofdisk-Enhance-canonical-path-handling-for-bootpath.patch</changelog>
  <changelog author="mchang@suse.com" date="1715774400">- Fix error in /etc/grub.d/20_linux_xen: file_is_not_sym not found, renamed to
  file_is_not_xen_garbage (bsc#1224226)
  * grub2-fix-menu-in-xen-host-server.patch</changelog>
  <changelog author="mchang@suse.com" date="1720180800">- Fix input handling in ppc64le grub2 has high latency (bsc#1223535)
  * 0001-net-drivers-ieee1275-ofnet-Remove-200-ms-timeout-in-.patch</changelog>
  <changelog author="mchang@suse.com" date="1721390400">- Fix error in grub-install when root is on tmpfs (bsc#1226100)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1722600000">- Fix btrfs subvolume for platform modules not mounting at runtime when the
  default subvolume is the topmost root tree (bsc#1228124)
  * grub2-btrfs-06-subvol-mount.patch
- Rediff
  * 0001-Unify-the-check-to-enable-btrfs-relative-path.patch</changelog>
</package>
<package pkgid="388f30cb59f0082529dc811ecbc66f5a9b068678b22d65115850da460649ad74" name="grub2-x86_64-xen" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.31.1"/>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
  <changelog author="mchang@suse.com" date="1708171200">- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch</changelog>
  <changelog author="mchang@suse.com" date="1708603200">- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762)
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch</changelog>
  <changelog author="mchang@suse.com" date="1711108800">- Fix memdisk becomes the default boot entry, resolving no graphic display
  device error in guest vnc console (bsc#1221779)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1711540800">- Fix LPAR falls into grub shell after installation with lvm (bsc#1221866)
  * 0001-ofdisk-Enhance-canonical-path-handling-for-bootpath.patch</changelog>
  <changelog author="mchang@suse.com" date="1715774400">- Fix error in /etc/grub.d/20_linux_xen: file_is_not_sym not found, renamed to
  file_is_not_xen_garbage (bsc#1224226)
  * grub2-fix-menu-in-xen-host-server.patch</changelog>
  <changelog author="mchang@suse.com" date="1720180800">- Fix input handling in ppc64le grub2 has high latency (bsc#1223535)
  * 0001-net-drivers-ieee1275-ofnet-Remove-200-ms-timeout-in-.patch</changelog>
  <changelog author="mchang@suse.com" date="1721390400">- Fix error in grub-install when root is on tmpfs (bsc#1226100)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1722600000">- Fix btrfs subvolume for platform modules not mounting at runtime when the
  default subvolume is the topmost root tree (bsc#1228124)
  * grub2-btrfs-06-subvol-mount.patch
- Rediff
  * 0001-Unify-the-check-to-enable-btrfs-relative-path.patch</changelog>
  <changelog author="mchang@suse.com" date="1723636800">- grub2.spec: Add ofnet to signed grub.elf to support powerpc net boot
  installation when secure boot is enabled (bsc#1217761) (bsc#1228866)
- Improved check for disk device when looking for PReP partition
  * 0004-Introduce-prep_load_env-command.patch</changelog>
</package>
<package pkgid="ef559f657f2337593e5823d8da014bd3ca2f18774481361fae2e073886accf29" name="grub2-x86_64-xen" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.8.1"/>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1666958400">- NVMeoFC support on grub (jsc#PED-996)
  * 0001-ieee1275-add-support-for-NVMeoFC.patch
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
  * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
  * 0004-ofpath-controller-name-update.patch
- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
  * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
  * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
  * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch
- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990)
  * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
</package>
<package pkgid="8a7b898e3ddb5eb3c47e7c6b74cd06ce41651a96f9091bec35f63ba9d158786d" name="gstreamer-plugins-base" arch="aarch64">
  <version epoch="0" ver="1.22.0" rel="150500.3.8.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix SRT subtitle parsing heap-based
  buffer overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="450c38fda34289dc259082fc964fb82a167c336c6a5ef12b8b2edc494b23aaaf" name="gstreamer-plugins-base" arch="s390x">
  <version epoch="0" ver="1.22.0" rel="150500.3.8.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix SRT subtitle parsing heap-based
  buffer overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="04d899a3f987776474219d742b2a4bbb1fc90348ca17d970731760632bb55fbb" name="gstreamer-plugins-base" arch="src">
  <version epoch="0" ver="1.22.0" rel="150500.3.8.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix SRT subtitle parsing heap-based
  buffer overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="e8fb01efc875c80d3460ad9a896c2b21d2888a4bb5fcde4ab1e365ffc323653e" name="gstreamer-plugins-base" arch="x86_64">
  <version epoch="0" ver="1.22.0" rel="150500.3.8.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix SRT subtitle parsing heap-based
  buffer overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="c2488d7317265877650728346942da35396836512b7ebc2b5c44187dc9ccde8a" name="gtk2" arch="src">
  <version epoch="0" ver="2.24.33" rel="150400.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1513857600">- Update to version 2.24.31+20171209.61d5c82f5c:
  + Fix updating the widget accessible description when using its
    tooltip
  + Fix introspection builds on Visual Studio 2017
  + imcontextxim: Fix showing glyph in status window
  + Visual Studio builds: Improve binary security
  + Fixed: If can’t add child, don’t add to child info
  + ComboBox: Don’t let modes disconnect each other
  + Enter submenus when activating their parent item
  + ComboBox: Don’t pile up ::grab-broken handlers
  + testcombo: Test grid :row- and :column-span-column
  + Updated translations.
- Switch to git checkout via source service.
- Following the above, remove gnome-common BuildRequires and
  gnome-autogen.sh call. Replace with libtool BuildRequires and
  autogen.sh call, also add gtk-doc BuildRequires and pass
  - -enable-gtk-doc to configure.
- Clean up patch numbering.
- Drop gtk2-window-dragging.patch: Fixed upstream (bgo#554057).
- Drop bugzilla-131498-allow-xim-for-all-languages.patch: This
  patch was only applied to work around a missing recommends for
  scim-32Bit, stop doing that, as we should not fix errors in other
  packages in a toolkit.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="yfjiang@suse.com" date="1514289600">- Manually move the position of "Group System/Libraries" line,
  which was moved automatically by format_spec_file, above the
  comment of "Requires: hicolor-icon-theme":
  https://lists.opensuse.org/opensuse-packaging/2017-07/msg00062.html</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515499200">- Update to version 2.24.32:
  + Fix abicheck.
- Use the release version as revision and set versionformat to
  PARENT_TAG, ensure we build the upstream released tag.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Use SPDX3.0 license tags and package COPYING as %license</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="dimstar@opensuse.org" date="1522152000">- Add 0001-build-support-automake-1.16.patch: Support automake
  1.16.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524052800">- Update _service to point to new
  https://gitlab.gnome.org/GNOME/gtk.git home.</changelog>
  <changelog author="tchvatal@suse.com" date="1533816000">- Fix package name to be uniform immodules -&gt; immodule bsc#1104264</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1555416000">- Update to version 2.24.32+54:
  + Force redraw on Mojave and later when processing updates.
  + Fix UAC manifest RC file
  + atk key: Always convert control character events into key names
  + icontheme: Fix annotations on array arguments
  + MSVC introspection: Make more robust and avoid confusion
  + Revert "gdk: deactivation/activate window on keyboard grabs"
  + gtk/gtkiconcache.c: Fix running on GLib-2.57.3 or later on
    Windows
  + MSVC builds: Fix pkg-config file generation
  + MSVC builds: Improve pkg-config files generation
  + [gdk|gtk]/Makefile.am: Fix CFlags passed to introspecion on
    MSVC
- Switch to gitcheckout of stable branch again, upstream is not
  making releases.
- Drop 0001-build-support-automake-1.16.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="dimstar@opensuse.org" date="1568203200">- Update to version 2.24.32+62 (boo#1147106):
  * gtk-builder-convert: Update bug report URL.
  * gtk-builder-convert: Remove compat code for Python 2.3 and
  * below.
  * Make gtk-builder-convert compatible with Python 3.
  * Fix use-after-free due to unexpected unref of context-&gt;default_style.
  * Visual Studio builds: Fix previous commit.
  * Visual Studio builds: "Add" Visual Studio 2019 projects.
- Drop gtk2-converter-python3.patch: fixed upstream.
- Replace shebang in ./gtk/gtk-builder-convert using sed (use
  python3).</changelog>
  <changelog author="dimstar@opensuse.org" date="1574164800">- Update to version 2.24.32+67:
  * Do not use VIQR input method for vi locale by default
  * Add CI for gtk-2-24
  * win32: Remove extraneous changes</changelog>
  <changelog author="mvetter@suse.com" date="1575979200">- bsc#1158897: Remove dependency on jasper (due to planned removal)
  Removes JPEG2000 support.</changelog>
  <changelog author="fcrozat@suse.com" date="1576584000">- Add Obsoletes/Provides to baselibs.conf to ensure
  gtk2-immodule-tigrigna-32bit can be upgraded from old version.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1594555200">- Update to version 2.24.32+70:
  * Resolve GIMP segfault from accessing memory past end of pixbuf
    Fixes https://gitlab.gnome.org/GNOME/gtk/-/issues/2684
  * Use bundle id instead of package name for the macOS preview as
    filename is now changed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608638400">- Update to version 2.24.33:
  + This is the final GTK 2.x release. There will be no more
    updates to GTK 2. All users are encouraged to update to GTK 3
    or 4.
  + Make the output of gtk-query-immodules deterministic.
  + GtkCalendar: Use %OB if supported.
  + GtkIconTheme: prefer exact matches.
  + build:
  - Support automake 1.16.
  - Fix compiler warnings with newer gcc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1634817600">- Add gtk2-rpmlintrc (boo#1191758):
  + Filter wrong split request for libgdk-x11-2.0.so.0: the
    library shares the version info with gtk2 and is allowed to be
    in the same library package.
  + Filter libgail.so.18 split request: the error is actually
    correct, but gtk2 being a legacy package does not justify the
    extra efort. The libgtk-2_0-0 package is the only consumer.</changelog>
  <changelog author="mgorse@suse.com" date="1721649600">- Add CVE-2024-6655.patch: CVE-2024-6655 Stop looking for modules
  in cwd (bsc#1228120).</changelog>
</package>
<package pkgid="c86683f7e1538b38a07f6ad7897ae118bf7b620f12838793e59a20bc8703cb34" name="gtk2-tools" arch="aarch64">
  <version epoch="0" ver="2.24.33" rel="150400.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1513857600">- Update to version 2.24.31+20171209.61d5c82f5c:
  + Fix updating the widget accessible description when using its
    tooltip
  + Fix introspection builds on Visual Studio 2017
  + imcontextxim: Fix showing glyph in status window
  + Visual Studio builds: Improve binary security
  + Fixed: If can’t add child, don’t add to child info
  + ComboBox: Don’t let modes disconnect each other
  + Enter submenus when activating their parent item
  + ComboBox: Don’t pile up ::grab-broken handlers
  + testcombo: Test grid :row- and :column-span-column
  + Updated translations.
- Switch to git checkout via source service.
- Following the above, remove gnome-common BuildRequires and
  gnome-autogen.sh call. Replace with libtool BuildRequires and
  autogen.sh call, also add gtk-doc BuildRequires and pass
  - -enable-gtk-doc to configure.
- Clean up patch numbering.
- Drop gtk2-window-dragging.patch: Fixed upstream (bgo#554057).
- Drop bugzilla-131498-allow-xim-for-all-languages.patch: This
  patch was only applied to work around a missing recommends for
  scim-32Bit, stop doing that, as we should not fix errors in other
  packages in a toolkit.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="yfjiang@suse.com" date="1514289600">- Manually move the position of "Group System/Libraries" line,
  which was moved automatically by format_spec_file, above the
  comment of "Requires: hicolor-icon-theme":
  https://lists.opensuse.org/opensuse-packaging/2017-07/msg00062.html</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515499200">- Update to version 2.24.32:
  + Fix abicheck.
- Use the release version as revision and set versionformat to
  PARENT_TAG, ensure we build the upstream released tag.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Use SPDX3.0 license tags and package COPYING as %license</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="dimstar@opensuse.org" date="1522152000">- Add 0001-build-support-automake-1.16.patch: Support automake
  1.16.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524052800">- Update _service to point to new
  https://gitlab.gnome.org/GNOME/gtk.git home.</changelog>
  <changelog author="tchvatal@suse.com" date="1533816000">- Fix package name to be uniform immodules -&gt; immodule bsc#1104264</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1555416000">- Update to version 2.24.32+54:
  + Force redraw on Mojave and later when processing updates.
  + Fix UAC manifest RC file
  + atk key: Always convert control character events into key names
  + icontheme: Fix annotations on array arguments
  + MSVC introspection: Make more robust and avoid confusion
  + Revert "gdk: deactivation/activate window on keyboard grabs"
  + gtk/gtkiconcache.c: Fix running on GLib-2.57.3 or later on
    Windows
  + MSVC builds: Fix pkg-config file generation
  + MSVC builds: Improve pkg-config files generation
  + [gdk|gtk]/Makefile.am: Fix CFlags passed to introspecion on
    MSVC
- Switch to gitcheckout of stable branch again, upstream is not
  making releases.
- Drop 0001-build-support-automake-1.16.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="dimstar@opensuse.org" date="1568203200">- Update to version 2.24.32+62 (boo#1147106):
  * gtk-builder-convert: Update bug report URL.
  * gtk-builder-convert: Remove compat code for Python 2.3 and
  * below.
  * Make gtk-builder-convert compatible with Python 3.
  * Fix use-after-free due to unexpected unref of context-&gt;default_style.
  * Visual Studio builds: Fix previous commit.
  * Visual Studio builds: "Add" Visual Studio 2019 projects.
- Drop gtk2-converter-python3.patch: fixed upstream.
- Replace shebang in ./gtk/gtk-builder-convert using sed (use
  python3).</changelog>
  <changelog author="dimstar@opensuse.org" date="1574164800">- Update to version 2.24.32+67:
  * Do not use VIQR input method for vi locale by default
  * Add CI for gtk-2-24
  * win32: Remove extraneous changes</changelog>
  <changelog author="mvetter@suse.com" date="1575979200">- bsc#1158897: Remove dependency on jasper (due to planned removal)
  Removes JPEG2000 support.</changelog>
  <changelog author="fcrozat@suse.com" date="1576584000">- Add Obsoletes/Provides to baselibs.conf to ensure
  gtk2-immodule-tigrigna-32bit can be upgraded from old version.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1594555200">- Update to version 2.24.32+70:
  * Resolve GIMP segfault from accessing memory past end of pixbuf
    Fixes https://gitlab.gnome.org/GNOME/gtk/-/issues/2684
  * Use bundle id instead of package name for the macOS preview as
    filename is now changed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608638400">- Update to version 2.24.33:
  + This is the final GTK 2.x release. There will be no more
    updates to GTK 2. All users are encouraged to update to GTK 3
    or 4.
  + Make the output of gtk-query-immodules deterministic.
  + GtkCalendar: Use %OB if supported.
  + GtkIconTheme: prefer exact matches.
  + build:
  - Support automake 1.16.
  - Fix compiler warnings with newer gcc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1634817600">- Add gtk2-rpmlintrc (boo#1191758):
  + Filter wrong split request for libgdk-x11-2.0.so.0: the
    library shares the version info with gtk2 and is allowed to be
    in the same library package.
  + Filter libgail.so.18 split request: the error is actually
    correct, but gtk2 being a legacy package does not justify the
    extra efort. The libgtk-2_0-0 package is the only consumer.</changelog>
  <changelog author="mgorse@suse.com" date="1721649600">- Add CVE-2024-6655.patch: CVE-2024-6655 Stop looking for modules
  in cwd (bsc#1228120).</changelog>
</package>
<package pkgid="7d04c87aed4a3b2adc3d35873bafd850c868df91b0a264011b61d499d3aed721" name="gtk2-tools" arch="s390x">
  <version epoch="0" ver="2.24.33" rel="150400.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1513857600">- Update to version 2.24.31+20171209.61d5c82f5c:
  + Fix updating the widget accessible description when using its
    tooltip
  + Fix introspection builds on Visual Studio 2017
  + imcontextxim: Fix showing glyph in status window
  + Visual Studio builds: Improve binary security
  + Fixed: If can’t add child, don’t add to child info
  + ComboBox: Don’t let modes disconnect each other
  + Enter submenus when activating their parent item
  + ComboBox: Don’t pile up ::grab-broken handlers
  + testcombo: Test grid :row- and :column-span-column
  + Updated translations.
- Switch to git checkout via source service.
- Following the above, remove gnome-common BuildRequires and
  gnome-autogen.sh call. Replace with libtool BuildRequires and
  autogen.sh call, also add gtk-doc BuildRequires and pass
  - -enable-gtk-doc to configure.
- Clean up patch numbering.
- Drop gtk2-window-dragging.patch: Fixed upstream (bgo#554057).
- Drop bugzilla-131498-allow-xim-for-all-languages.patch: This
  patch was only applied to work around a missing recommends for
  scim-32Bit, stop doing that, as we should not fix errors in other
  packages in a toolkit.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="yfjiang@suse.com" date="1514289600">- Manually move the position of "Group System/Libraries" line,
  which was moved automatically by format_spec_file, above the
  comment of "Requires: hicolor-icon-theme":
  https://lists.opensuse.org/opensuse-packaging/2017-07/msg00062.html</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515499200">- Update to version 2.24.32:
  + Fix abicheck.
- Use the release version as revision and set versionformat to
  PARENT_TAG, ensure we build the upstream released tag.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Use SPDX3.0 license tags and package COPYING as %license</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="dimstar@opensuse.org" date="1522152000">- Add 0001-build-support-automake-1.16.patch: Support automake
  1.16.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524052800">- Update _service to point to new
  https://gitlab.gnome.org/GNOME/gtk.git home.</changelog>
  <changelog author="tchvatal@suse.com" date="1533816000">- Fix package name to be uniform immodules -&gt; immodule bsc#1104264</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1555416000">- Update to version 2.24.32+54:
  + Force redraw on Mojave and later when processing updates.
  + Fix UAC manifest RC file
  + atk key: Always convert control character events into key names
  + icontheme: Fix annotations on array arguments
  + MSVC introspection: Make more robust and avoid confusion
  + Revert "gdk: deactivation/activate window on keyboard grabs"
  + gtk/gtkiconcache.c: Fix running on GLib-2.57.3 or later on
    Windows
  + MSVC builds: Fix pkg-config file generation
  + MSVC builds: Improve pkg-config files generation
  + [gdk|gtk]/Makefile.am: Fix CFlags passed to introspecion on
    MSVC
- Switch to gitcheckout of stable branch again, upstream is not
  making releases.
- Drop 0001-build-support-automake-1.16.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="dimstar@opensuse.org" date="1568203200">- Update to version 2.24.32+62 (boo#1147106):
  * gtk-builder-convert: Update bug report URL.
  * gtk-builder-convert: Remove compat code for Python 2.3 and
  * below.
  * Make gtk-builder-convert compatible with Python 3.
  * Fix use-after-free due to unexpected unref of context-&gt;default_style.
  * Visual Studio builds: Fix previous commit.
  * Visual Studio builds: "Add" Visual Studio 2019 projects.
- Drop gtk2-converter-python3.patch: fixed upstream.
- Replace shebang in ./gtk/gtk-builder-convert using sed (use
  python3).</changelog>
  <changelog author="dimstar@opensuse.org" date="1574164800">- Update to version 2.24.32+67:
  * Do not use VIQR input method for vi locale by default
  * Add CI for gtk-2-24
  * win32: Remove extraneous changes</changelog>
  <changelog author="mvetter@suse.com" date="1575979200">- bsc#1158897: Remove dependency on jasper (due to planned removal)
  Removes JPEG2000 support.</changelog>
  <changelog author="fcrozat@suse.com" date="1576584000">- Add Obsoletes/Provides to baselibs.conf to ensure
  gtk2-immodule-tigrigna-32bit can be upgraded from old version.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1594555200">- Update to version 2.24.32+70:
  * Resolve GIMP segfault from accessing memory past end of pixbuf
    Fixes https://gitlab.gnome.org/GNOME/gtk/-/issues/2684
  * Use bundle id instead of package name for the macOS preview as
    filename is now changed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608638400">- Update to version 2.24.33:
  + This is the final GTK 2.x release. There will be no more
    updates to GTK 2. All users are encouraged to update to GTK 3
    or 4.
  + Make the output of gtk-query-immodules deterministic.
  + GtkCalendar: Use %OB if supported.
  + GtkIconTheme: prefer exact matches.
  + build:
  - Support automake 1.16.
  - Fix compiler warnings with newer gcc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1634817600">- Add gtk2-rpmlintrc (boo#1191758):
  + Filter wrong split request for libgdk-x11-2.0.so.0: the
    library shares the version info with gtk2 and is allowed to be
    in the same library package.
  + Filter libgail.so.18 split request: the error is actually
    correct, but gtk2 being a legacy package does not justify the
    extra efort. The libgtk-2_0-0 package is the only consumer.</changelog>
  <changelog author="mgorse@suse.com" date="1721649600">- Add CVE-2024-6655.patch: CVE-2024-6655 Stop looking for modules
  in cwd (bsc#1228120).</changelog>
</package>
<package pkgid="ed54a63b6e6299b507f9d67b824c90fc52535efa34787d7401daa8dd92938a7b" name="gtk2-tools" arch="x86_64">
  <version epoch="0" ver="2.24.33" rel="150400.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1513857600">- Update to version 2.24.31+20171209.61d5c82f5c:
  + Fix updating the widget accessible description when using its
    tooltip
  + Fix introspection builds on Visual Studio 2017
  + imcontextxim: Fix showing glyph in status window
  + Visual Studio builds: Improve binary security
  + Fixed: If can’t add child, don’t add to child info
  + ComboBox: Don’t let modes disconnect each other
  + Enter submenus when activating their parent item
  + ComboBox: Don’t pile up ::grab-broken handlers
  + testcombo: Test grid :row- and :column-span-column
  + Updated translations.
- Switch to git checkout via source service.
- Following the above, remove gnome-common BuildRequires and
  gnome-autogen.sh call. Replace with libtool BuildRequires and
  autogen.sh call, also add gtk-doc BuildRequires and pass
  - -enable-gtk-doc to configure.
- Clean up patch numbering.
- Drop gtk2-window-dragging.patch: Fixed upstream (bgo#554057).
- Drop bugzilla-131498-allow-xim-for-all-languages.patch: This
  patch was only applied to work around a missing recommends for
  scim-32Bit, stop doing that, as we should not fix errors in other
  packages in a toolkit.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="yfjiang@suse.com" date="1514289600">- Manually move the position of "Group System/Libraries" line,
  which was moved automatically by format_spec_file, above the
  comment of "Requires: hicolor-icon-theme":
  https://lists.opensuse.org/opensuse-packaging/2017-07/msg00062.html</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515499200">- Update to version 2.24.32:
  + Fix abicheck.
- Use the release version as revision and set versionformat to
  PARENT_TAG, ensure we build the upstream released tag.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Use SPDX3.0 license tags and package COPYING as %license</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="dimstar@opensuse.org" date="1522152000">- Add 0001-build-support-automake-1.16.patch: Support automake
  1.16.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524052800">- Update _service to point to new
  https://gitlab.gnome.org/GNOME/gtk.git home.</changelog>
  <changelog author="tchvatal@suse.com" date="1533816000">- Fix package name to be uniform immodules -&gt; immodule bsc#1104264</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1555416000">- Update to version 2.24.32+54:
  + Force redraw on Mojave and later when processing updates.
  + Fix UAC manifest RC file
  + atk key: Always convert control character events into key names
  + icontheme: Fix annotations on array arguments
  + MSVC introspection: Make more robust and avoid confusion
  + Revert "gdk: deactivation/activate window on keyboard grabs"
  + gtk/gtkiconcache.c: Fix running on GLib-2.57.3 or later on
    Windows
  + MSVC builds: Fix pkg-config file generation
  + MSVC builds: Improve pkg-config files generation
  + [gdk|gtk]/Makefile.am: Fix CFlags passed to introspecion on
    MSVC
- Switch to gitcheckout of stable branch again, upstream is not
  making releases.
- Drop 0001-build-support-automake-1.16.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="dimstar@opensuse.org" date="1568203200">- Update to version 2.24.32+62 (boo#1147106):
  * gtk-builder-convert: Update bug report URL.
  * gtk-builder-convert: Remove compat code for Python 2.3 and
  * below.
  * Make gtk-builder-convert compatible with Python 3.
  * Fix use-after-free due to unexpected unref of context-&gt;default_style.
  * Visual Studio builds: Fix previous commit.
  * Visual Studio builds: "Add" Visual Studio 2019 projects.
- Drop gtk2-converter-python3.patch: fixed upstream.
- Replace shebang in ./gtk/gtk-builder-convert using sed (use
  python3).</changelog>
  <changelog author="dimstar@opensuse.org" date="1574164800">- Update to version 2.24.32+67:
  * Do not use VIQR input method for vi locale by default
  * Add CI for gtk-2-24
  * win32: Remove extraneous changes</changelog>
  <changelog author="mvetter@suse.com" date="1575979200">- bsc#1158897: Remove dependency on jasper (due to planned removal)
  Removes JPEG2000 support.</changelog>
  <changelog author="fcrozat@suse.com" date="1576584000">- Add Obsoletes/Provides to baselibs.conf to ensure
  gtk2-immodule-tigrigna-32bit can be upgraded from old version.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1594555200">- Update to version 2.24.32+70:
  * Resolve GIMP segfault from accessing memory past end of pixbuf
    Fixes https://gitlab.gnome.org/GNOME/gtk/-/issues/2684
  * Use bundle id instead of package name for the macOS preview as
    filename is now changed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608638400">- Update to version 2.24.33:
  + This is the final GTK 2.x release. There will be no more
    updates to GTK 2. All users are encouraged to update to GTK 3
    or 4.
  + Make the output of gtk-query-immodules deterministic.
  + GtkCalendar: Use %OB if supported.
  + GtkIconTheme: prefer exact matches.
  + build:
  - Support automake 1.16.
  - Fix compiler warnings with newer gcc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1634817600">- Add gtk2-rpmlintrc (boo#1191758):
  + Filter wrong split request for libgdk-x11-2.0.so.0: the
    library shares the version info with gtk2 and is allowed to be
    in the same library package.
  + Filter libgail.so.18 split request: the error is actually
    correct, but gtk2 being a legacy package does not justify the
    extra efort. The libgtk-2_0-0 package is the only consumer.</changelog>
  <changelog author="mgorse@suse.com" date="1721649600">- Add CVE-2024-6655.patch: CVE-2024-6655 Stop looking for modules
  in cwd (bsc#1228120).</changelog>
</package>
<package pkgid="be1d767a548f105ae2f407e6c4af37e206158b98b68fccb132707ed2a02848b9" name="gtk3" arch="src">
  <version epoch="0" ver="3.24.34" rel="150400.3.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
  <changelog author="mgorse@suse.com" date="1721649600">- Add CVE-2024-6655.patch: CVE-2024-6655 Stop looking for modules
  in cwd (bsc#1228120).</changelog>
</package>
<package pkgid="bb11f7edfb7e80e9d3c2975c4afe8d1504c06924d5b86116af6da54cd44331dc" name="gtk3-data" arch="noarch">
  <version epoch="0" ver="3.24.34" rel="150400.3.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
  <changelog author="mgorse@suse.com" date="1721649600">- Add CVE-2024-6655.patch: CVE-2024-6655 Stop looking for modules
  in cwd (bsc#1228120).</changelog>
</package>
<package pkgid="5417a25fa79ae961d52cb807a580e6f5b9a8d389708ee0f33a0d9caf0f8690fa" name="gtk3-schema" arch="noarch">
  <version epoch="0" ver="3.24.34" rel="150400.3.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
  <changelog author="mgorse@suse.com" date="1721649600">- Add CVE-2024-6655.patch: CVE-2024-6655 Stop looking for modules
  in cwd (bsc#1228120).</changelog>
</package>
<package pkgid="e492c65b091952f1a2e23469b391d06477b2278242f337d9bd8cbf6df2bff1fb" name="gtk3-tools" arch="aarch64">
  <version epoch="0" ver="3.24.34" rel="150400.3.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
  <changelog author="mgorse@suse.com" date="1721649600">- Add CVE-2024-6655.patch: CVE-2024-6655 Stop looking for modules
  in cwd (bsc#1228120).</changelog>
</package>
<package pkgid="0faea8fc6889264bb139e9d2afdb74773478f9e059cc1bb90ddcecbe9b708d03" name="gtk3-tools" arch="s390x">
  <version epoch="0" ver="3.24.34" rel="150400.3.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
  <changelog author="mgorse@suse.com" date="1721649600">- Add CVE-2024-6655.patch: CVE-2024-6655 Stop looking for modules
  in cwd (bsc#1228120).</changelog>
</package>
<package pkgid="858e2fe537fe8ec06fcbd9e491594ad9f597828bc28c6411fb1775fb8dbd5bff" name="gtk3-tools" arch="x86_64">
  <version epoch="0" ver="3.24.34" rel="150400.3.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
  <changelog author="mgorse@suse.com" date="1721649600">- Add CVE-2024-6655.patch: CVE-2024-6655 Stop looking for modules
  in cwd (bsc#1228120).</changelog>
</package>
<package pkgid="4ee206e40fbbc02041fa16382195fb24737a4d182254ade432d2a9c88beb7c54" name="haproxy" arch="aarch64">
  <version epoch="0" ver="2.4.22+git0.f8e3218e2" rel="150400.3.19.1"/>
  <changelog author="mrueckert@suse.de" date="1614772800">- Update to version 2.3.6+git0.7851701ed:
  * [RELEASE] Released version 2.3.6
  * BUG/MINOR: http-ana: Don't increment HTTP error counter on read error/timeout
  * BUG/MINOR: mux-h2: Fix typo in scheme adjustment
  * DOC: spoe: Add a note about fragmentation support in HAProxy
  * BUG/MEDIUM: spoe: Kill applets if there are pending connections and nbthread &gt; 1
  * BUG/MINOR: connection: Use the client's dst family for adressless servers
  * BUG/MINOR: tcp-act: Don't forget to set the original port for IPv4 set-dst rule
  * BUG/MINOR: http-ana: Only consider dst address to process originalto option
  * BUG/MINOR: mux-h1: Immediately report H1C errors from h1_snd_buf()
  * BUG/MINOR: stats: fix compare of no-maint url suffix
  * CLEANUP: muxes: Remove useless if condition in show_fd function
  * BUG/MINOR: ssl: potential null pointer dereference in ckchs_dup()
  * BUG/MEDIUM: resolvers: Reset address for unresolved servers
  * BUG/MEDIUM: resolvers: Reset server address and port for obselete SRV records
  * BUG/MINOR: resolvers: new callback to properly handle SRV record errors
  * BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record
  * BUG/MINOR: resolvers: Fix condition to release received ARs if not assigned
  * BUG/MINOR: fd: properly wait for !running_mask in fd_set_running_excl()
  * BUG/MINOR: proxy: wake up all threads when sending the hard-stop signal
  * BUG/MEDIUM: cli/shutdown sessions: make it thread-safe
  * BUG/MEDIUM: proxy: use thread-safe stream killing on hard-stop
  * BUG/MEDIUM: vars: make functions vars_get_by_{name,desc} thread-safe
  * BUG/MINOR: sample: secure convs that accept base64 string and var name as args
  * MINOR: Configure the `cpp` userdiff driver for *.[ch] in .gitattributes
  * BUG/MINOR: ssl/cli: potential null pointer dereference in "set ssl cert"
  * BUG/MEDIUM: mux-h1: Fix handling of responses to CONNECT other than 200-ok
  * BUG/MINOR: server: Be sure to cut the last parsed field of a server-state line
  * BUG/MINOR: server: Init params before parsing a new server-state line
  * BUG/MINOR: http-rules: Always replace the response status on a return action
  * BUG/MEDIUM: spoe: Resolve the sink if a SPOE logs in a ring buffer
  * BUG/MEDIUM: lists: Avoid an infinite loop in MT_LIST_TRY_ADDQ().
  * DOC: explain the relation between pool-low-conn and tune.idle-pool.shared
  * BUILD: ssl: introduce fine guard for OpenSSL specific SCTL functions
  * BUG/MINOR: sample: Always consider zero size string samples as unsafe
  * BUG/MEDIUM: checks: don't needlessly take the server lock in health_adjust()
  * BUG/MINOR: checks: properly handle wrapping time in __health_adjust()
  * BUG/MINOR: session: atomically increment the tracked sessions counter
  * BUG/MINOR: server: Remove RMAINT from admin state when loading server state
  * CLEANUP: channel: fix comment in ci_putblk.
  * DOC: tune: explain the origin of block size for ssl.cachesize
  * BUG/MINOR: server: Don't call fopen() with server-state filepath set to NULL
  * BUG/MINOR: cfgparse: do not mention "addr:port" as supported on proxy lines
  * BUG/MINOR: stats: revert the change on ST_CONVDONE
  * BUG/MEDIUM: config: don't pick unset values from last defaults section
  * CLEANUP: deinit: release global and per-proxy server-state variables on deinit
  * BUG/MINOR: server: Fix server-state-file-name directive
  * BUG/MINOR: backend: hold correctly lock when killing idle conn
  * BUG/MINOR: tools: Fix a memory leak on error path in parse_dotted_uints()
  * BUG/MINOR: server: re-align state file fields number
  * BUG/MEDIUM: mux-h1: Always set CS_FL_EOI for response in MSG_DONE state
  * BUG/MINOR: http-ana: Don't increment HTTP error counter on internal errors
  * BUG/MINOR: intops: fix mul32hi()'s off-by-one
  * BUILD: ssl: guard SSL_CTX_set_msg_callback with SSL_CTRL_SET_MSG_CALLBACK macro
  * BUILD: ssl: guard SSL_CTX_add_server_custom_ext with special macro
  * BUILD: ssl: fix typo in HAVE_SSL_CTX_ADD_SERVER_CUSTOM_EXT macro
  * MINOR: check: do not ignore a connection header for http-check send</changelog>
  <changelog author="mrueckert@suse.de" date="1615896000">- Update to version 2.3.7+git0.2d39ce334:
  * [RELEASE] Released version 2.3.7
  * BUG/MINOR: resolvers: Add missing case-insensitive comparisons of DNS hostnames
  * MINOR: resolvers: Don't try to match immediatly renewed ADD items
  * MINOR: resolvers: Use milliseconds for cached items in resolver responses
  * BUG/MEDIUM: resolvers: Skip DNS resolution at startup if SRV resolution is set
  * BUG/MEDIUM: resolvers: Don't release resolution from a requester callbacks
  * MINOR: resolvers: Directly call srvrq_update_srv_state() when possible
  * MINOR: resolvers: Add function to change the srv status based on SRV resolution
  * MINOR: resolvers: Purge answer items when a SRV resolution triggers an error
  * MINOR: resolvers: Use a function to remove answers attached to a resolution
  * BUG/MEDIUM: resolvers: Trigger a DNS resolution if an ADD item is obsolete
  * BUG/MINOR; resolvers: Ignore DNS resolution for expired SRV item
  * MINOR: resolvers: new function find_srvrq_answer_record()
  * BUG/MEDIUM: resolvers: Fix the loop looking for an existing ADD item
  * BUG/MEDIUM: resolvers: Don't set an address-less server as UP
  * BUG/MINOR: resolvers: Unlink DNS resolution to set RMAINT on SRV resolution
  * BUG/MINOR: resolvers: Reset server address on DNS error only on status change
  * BUG/MINOR: resolvers: Consider server to have no IP on DNS resolution error
  * Revert "BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record"
  * CLEANUP: tcp-rules: add missing actions in the tcp-request error message
  * BUG/MINOR: tcpcheck: Fix double free on error path when parsing tcp/http-check
  * BUG/MINOR: session: Add some forgotten tests on session's listener
  * BUG/MINOR: proxy/session: Be sure to have a listener to increment its counters
  * BUG/MINOR: tcpcheck: Update .health threshold of agent inside an agent-check
  * BUG/MEDIUM: filters: Set CF_FL_ANALYZE on channels when filters are attached
  * BUILD: atomic/arm64: force the register pairs to use in __ha_cas_dw()
  * BUG/MEDIUM: stick-tables: fix ref counter in table entry using multiple http tracksc.
  * OPTIM: task: automatically adjust the default runqueue-depth to the threads
  * MINOR: task: give the scheduler a bit more flexibility in the runqueue size
  * MEDIUM: task: remove the tasks_run_queue counter and have one per thread
  * MEDIUM: ssl: implement xprt_set_used and xprt_set_idle to relax context checks
  * MINOR: xprt: add new xprt_set_idle and xprt_set_used methods
  * MEDIUM: muxes: mark idle conns tasklets with TASK_F_USR1
  * MINOR: task: add an application specific flag to the state: TASK_F_USR1
  * BUG/MEDIUM: ssl: properly remove the TASK_HEAVY flag at end of handshake
  * MINOR: ssl: mark the SSL handshake tasklet as heavy
  * MINOR: task: limit the number of subsequent heavy tasks with flag TASK_HEAVY
  * MEDIUM: backend: use a trylock when trying to grab an idle connection
  * MINOR: pools: double the local pool cache size to 1 MB
  * MEDIUM: pools: add CONFIG_HAP_NO_GLOBAL_POOLS and CONFIG_HAP_GLOBAL_POOLS
  * MEDIUM: streams: do not use the streams lock anymore
  * MINOR: streams: use one list per stream instead of a global one
  * MINOR: cli/streams: make "show sess" dump all streams till the new epoch
  * MINOR: stream: add an "epoch" to figure which streams appeared when
  * MINOR: dynbuf: pass offer_buffers() the number of buffers instead of a threshold
  * MINOR: dynbuf: use regular lists instead of mt_lists for buffer_wait
  * MINOR: dynbuf: make the buffer wait queue per thread
  * OPTIM: lb-leastconn: do not unlink the server if it did not change
  * OPTIM: lb-leastconn: do not take the server lock on take_conn/drop_conn
  * OPTIM: lb-first: do not take the server lock on take_conn/drop_conn
  * MINOR: lb/api: let callers of take_conn/drop_conn tell if they have the lock
  * MINOR: server: move actconns to the per-thread structure
  * OPTIM: server: switch the actconn list to an mt-list
  * MINOR: listener: refine the default MAX_ACCEPT from 64 to 4
  * MINOR: tasks: refine the default run queue depth
  * BUG/MEDIUM: session: NULL dereference possible when accessing the listener
  * MINOR: atomic: implement a more efficient arm64 __ha_cas_dw() using pairs
  * MINOR: atomic: add armv8.1-a atomics variant for cas-dw
  * BUG/MINOR: mt-list: always perform a cpu_relax call on failure
  * REORG: atomic: reimplement pl_cpu_relax() from atomic-ops.h
  * BUG/MINOR: ssl: don't truncate the file descriptor to 16 bits in debug mode
  * BUG/MINOR: hlua: Don't strip last non-LWS char in hlua_pushstrippedstring()
  * BUG/MINOR: backend: fix condition for reuse on mode HTTP</changelog>
  <changelog author="mrueckert@suse.de" date="1616673600">- Update to version 2.3.8+git0.e572195c7:
  * [RELEASE] Released version 2.3.8
  * BUG/MINOR: http_fetch: make hdr_ip() reject trailing characters
  * MINOR: tools: make url2ipv4 return the exact number of bytes parsed
  * BUG/MEDIUM: thread: Fix a deadlock if an isolated thread is marked as harmless
  * BUG/MEDIUM: fd: Take the fd_mig_lock when closing if no DWCAS is available.
  * CLEANUP: fd: remove unused fd_set_running_excl()
  * BUG/MEDIUM: fd: do not wait on FD removal in fd_delete()
  * MINOR: fd: remove the unneeded running bit from fd_insert()
  * MINOR: fd: make fd_clr_running() return the remaining running mask
  * BUG/MEDIUM: lua: Always init the lua stack before referencing the context
  * BUG/MEDIUM: debug/lua: Use internal hlua function to dump the lua traceback
  * MINOR: lua: Slightly improve function dumping the lua traceback
  * BUILD: ssl: guard ecdh functions with SSL_CTX_set_tmp_ecdh macro
  * BUG/MINOR: ssl: Prevent disk access when using "add ssl crt-list"
  * BUG/MEDIUM: debug/lua: Don't dump the lua stack if not dumpable
  * MEDIUM: lua: Use a per-thread counter to track some non-reentrant parts of lua
  * MINOR/BUG: mworker/cli: do not use the unix_bind prefix for the master CLI socket
  * BUG/MINOR: protocol: add missing support of dgram unix socket.
  * BUG/MEDIUM: freq_ctr/threads: use the global_now_ms variable
  * MINOR: time: also provide a global, monotonic global_now_ms timer
  * BUG/MEDIUM: mux-fcgi: Fix locking of idle_conns lock in the FCGI I/O callback
  * BUG/MINOR: freq_ctr/threads: make use of the last updated global time
  * MINOR: time: export the global_now variable</changelog>
  <changelog author="mrueckert@suse.de" date="1617105600">- Update to version 2.3.9+git1.afb63bc04:
  * BUILD: backend: fix build breakage in idle conn locking fix
  * [RELEASE] Released version 2.3.9
  * BUG/MEDIUM: time: make sure to always initialize the global tick
  * BUG/MINOR: stats: Apply proper styles in HTML status page.
  * BUG/MINOR: payload: Wait for more data if buffer is empty in payload/payload_lv
  * MEDIUM: backend: use a trylock to grab a connection on high FD counts as well
  * BUG/MEDIUM: mux-h1: make h1_shutw_conn() idempotent</changelog>
  <changelog author="mrueckert@suse.de" date="1619179200">- Update to version 2.3.10+git0.4764f0e4e:
  * [RELEASE] Released version 2.3.10
  * BUG/MEDIUM: peers: re-work refcnt on table to protect against flush
  * BUG/MEDIUM: peers: re-work connection to new process during reload.
  * BUG/MINOR: peers: remove useless table check if initial resync is finished
  * BUG/MEDIUM: mux-h2: Properly handle shutdowns when received with data
  * BUG/MINOR: mworker: don't use oldpids[] anymore for reload
  * BUG/MINOR: mworker/init: don't reset nb_oldpids in non-mworker cases
  * BUG/MEDIUM: config: fix cpu-map notation with both process and threads
  * BUG/MEDIUM: mux-h2: Fix dfl calculation when merging CONTINUATION frames
  * BUG/MAJOR: mux-h2: Properly detect too large frames when decoding headers
  * BUG/MINOR: server: free srv.lb_nodes in free_server
  * BUG/MINOR: mux-h1: Release idle server H1 connection if data are received
  * BUG/MINOR: logs: Report the true number of retries if there was no connection
  * BUG/MINOR: http_htx: Remove BUG_ON() from http_get_stline() function
  * BUG/MINOR: http-fetch: Make method smp safe if headers were already forwarded
  * BUG/MINOR: ssl-samples: Fix ssl_bc_* samples when called from a health-check
  * MINOR: connection: Make bc_http_major compatible with tcp-checks
  * BUG/MINOR: connection: Fix fc_http_major and bc_http_major for TCP connections
  * MINOR: logs: Add support of checks as session origin to format lf strings
  * BUG/MINOR: checks: Set missing id to the dummy checks frontend
  * BUG/MEDIUM: threads: Ignore current thread to end its harmless period
  * DOC: ssl: Certificate hot update only works on fronted certificates
  * BUG/MEDIUM: sample: Fix adjusting size in field converter
  * MINOR: No longer rely on deprecated sample fetches for predefined ACLs
  * DOC: clarify that compression works for HTTP/2
  * BUG/MINOR: tools: fix parsing "us" unit for timers
  * CONTRIB: halog: fix issue with array of type char
  * REGTESTS: ssl: mark set_ssl_cert_bundle.vtc as broken
  * DOC: Explicitly state only IPv4 are supported by forwardfor/originalto options
  * REGTESTS: ssl: "set ssl cert" and multi-certificates bundle
  * BUG/MINOR: ssl: Add missing free on SSL_CTX in ckch_inst_free
  * BUG/MINOR: http_fetch: make hdr_ip() resistant to empty fields
  * BUG/MINOR: ssl: Prevent removal of crt-list line if the instance is a default one
  * BUG/MINOR: ssl: Fix update of default certificate
  * BUILD: tcp: use IPPROTO_IPV6 instead of SOL_IPV6 on FreeBSD/MacOS
  * BUG/MINOR: tcp: fix silent-drop workaround for IPv6</changelog>
  <changelog author="mrueckert@suse.de" date="1620993600">- Update to version 2.4.0+git0.6cbbecf09:
  https://www.haproxy.com/blog/announcing-haproxy-2-4/
  for all the details see /usr/share/doc/packages/haproxy/CHANGELOG
- refreshed patches to apply cleanly again
  haproxy-1.6.0-makefile_lib.patch
  haproxy-1.6.0-sec-options.patch
  lua54.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1623931200">- Update to version 2.4.1+git0.1ce7d4925:
  * [RELEASE] Released version 2.4.1
  * BUG/MINOR: mux-h2/traces: bring back the lost "sent H2 REQ/RES" traces
  * BUG/MINOR: mux-h2/traces: bring back the lost "rcvd H2 REQ" trace
  * MINOR: mux-h2: obey http-ignore-probes during the preface
  * BUG/MINOR: stats: make "show stat typed desc" work again
  * CLEANUP: mux-h2/traces: better align user messages
  * MINOR: mux-h2/trace: report a few connection-level info during h2_init()
  * MINOR: connection: add helper conn_append_debug_info()
  * BUG/MINOR: server: explicitly set "none" init-addr for dynamic servers
  * BUG/MINOR: mux-h1: do not skip the error response on bad requests
  * MINOR: backend: only skip LB when there are actual connections
  * BUG/MAJOR: queue: set SF_ASSIGNED when setting strm-&gt;target on dequeue
  * CLEANUP: global: remove unused definition of stopping_task[]
  * BUG/MINOR: mworker: fix typo in chroot error message
  * BUG/MINOR: ssl: use atomic ops to update global shctx stats
  * BUG/MEDIUM: shctx: use at least thread-based locking on USE_PRIVATE_CACHE
  * BUG/MEDIUM: server: do not auto insert a dynamic server in px addr_node
  * BUG/MINOR: server: do not keep an invalid dynamic server in px ids tree
  * BUG/MEDIUM: server: do not forget to generate the dynamic servers ids
  * BUG/MEDIUM: server: clear dynamic srv on delete from proxy id/name trees
  * BUG/MEDIUM: server: extend thread-isolate over much of CLI 'add server'
  * BUG/MINOR: stick-table: insert srv in used_name tree even with fixed id
  * DOC: lua: Add a warning about buffers modification in HTTP
  * BUG/MAJOR: resolvers: segfault using server template without SRV RECORDs
  * MEDIUM: resolvers: add a ref between servers and srv request or used SRV record
  * MEDIUM: resolvers: add a ref on server to the used A/AAAA answer item
  * BUG/MINOR: resolvers: answser item list was randomly purged or errors
  * CLEANUP: l7-retries: do not test the buffer before calling b_alloc()
  * BUG/MINOR: mux-fcgi: Expose SERVER_SOFTWARE parameter by default
  * BUG/MAJOR: htx: Fix htx_defrag() when an HTX block is expanded
  * CLEANUP: pools: remove now unused seq and pool_free_list
  * BUG/MAJOR: pools: fix possible race with free() in the lockless variant
  * MEDIUM: pools: use a single pool_gc() function for locked and lockless
  * MINOR: pools: call malloc_trim() under thread isolation
  * MINOR: pools: do not maintain the lock during pool_flush()
  * BUG/MINOR: pools: make DEBUG_UAF always write to the to-be-freed location
  * BUG/MINOR: pools: fix a possible memory leak in the lockless pool_flush()
  * BUG/MEDIUM: compression: Add a flag to know the filter is still processing data
  * BUG/MEDIUM: compression: Properly get the next block to iterate on payload
  * BUG/MEDIUM: compression: Fix loop skipping unused blocks to get the next block
  * BUG/MEDIUM: opentracing: initialization before establishing daemon and/or chroot mode
  * Revert "BUG/MINOR: opentracing: initialization after establishing daemon mode"
  * BUG/MINOR: ssl: OCSP stapling does not work if expire too far in the future
  * BUILD: make tune.ssl.keylog available again
  * DOC: use the req.ssl_sni in examples
  * MINOR: errors: allow empty va_args for diag variadic macro
  * BUG/MAJOR: stream-int: Release SI endpoint on server side ASAP on retry
  * DOC/MINOR: move uuid in the configuration to the right alphabetical order
  * BUG/MINOR: vars: Be sure to have a session to get checks variables
  * CLEANUP: http-ana: Remove useless if statement about L7 retries
  * BUG/MINOR: proxy: Missing calloc return value check in chash_init_server_tree
  * BUG/MINOR: http: Missing calloc return value check in make_arg_list
  * BUG/MINOR: http: Missing calloc return value check while parsing redirect rule
  * BUG/MINOR: worker: Missing calloc return value check in mworker_env_to_proc_list
  * BUG/MINOR: compression: Missing calloc return value check in comp_append_type/algo
  * BUG/MINOR: http: Missing calloc return value check while parsing tcp-request rule
  * BUG/MINOR: http: Missing calloc return value check while parsing tcp-request/tcp-response
  * BUG/MINOR: proxy: Missing calloc return value check in proxy_defproxy_cpy
  * BUG/MINOR: proxy: Missing calloc return value check in proxy_parse_declare
  * BUG/MINOR: http: Missing calloc return value check in parse_http_req_capture
  * BUG/MINOR: ssl: Missing calloc return value check in ssl_init_single_engine
  * BUG/MINOR: peers: Missing calloc return value check in peers_register_table
  * BUG/MINOR: server: Missing calloc return value check in srv_parse_source
  * DOC: intro: Fix typo in starter guide
  * MINOR: cfgparse: Fail when encountering extra arguments in macro
  * MINOR: http-ana: Perform L7 retries because of status codes in response analyser
  * BUG/MINOR: http-ana: Handle L7 retries on refused early data before K/A aborts
  * BUG/MINOR: http-ana: Send the right error if max retries is reached on L7 retry
  * Revert "MEDIUM: http-ana: Deal with L7 retries in HTTP analysers"
  * BUG/MINOR: http-comp: Preserve HTTP_MSGF_COMPRESSIONG flag on the response
  * BUG/MEDIUM: filters: Exec pre/post analysers only one time per filter
  * BUILD/MINOR: opentracing: fixed build when using clang
  * BUG/MAJOR: server: prevent deadlock when using 'set maxconn server'
  * BUG/MEDIUM: ebtree: Invalid read when looking for dup entry</changelog>
  <changelog author="mrueckert@suse.de" date="1625659200">- Update to version 2.4.2+git0.553dee326:
  * [RELEASE] Released version 2.4.2
  * REGTESTS: add http scheme-based normalization test
  * MEDIUM: h2: apply scheme-based normalization on h2 requests
  * MEDIUM: h1-htx: apply scheme-based normalization on h1 requests
  * MEDIUM: http: implement scheme-based normalization
  * MINOR: http: implement http_get_scheme
  * Revert "MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules"
  * BUG/MINOR: cli: fix server name output in "show fd"
  * BUG/MEDIUM: sock: make sure to never miss early connection failures
  * DOC: stick-table: add missing documentation about gpt0 stored type
  * BUG/MINOR: peers: fix data_type bit computation more than 32 data_types
  * BUG/MINOR: stick-table: fix several printf sign errors dumping tables
  * DOC: config: use CREATE USER for mysql-check
  * BUG/MEDIUM: resolvers: Make 1st server of a template take part to SRV resolution
  * BUG/MINOR: mqtt: Support empty client ID in CONNECT message
  * BUG/MINOR: mqtt: Fix parser for string with more than 127 characters
  * BUG/MINOR: tcpcheck: Fix numbering of implicit HTTP send/expect rules
  * BUILD: Makefile: fix linkage for Haiku.
  * BUG/MINOR: checks: return correct error code for srv_parse_agent_check
  * MINOR: resolvers: Reset server IP on error in resolv_get_ip_from_response()
  * BUG/MINOR: resolvers: Reset server IP when no ip is found in the response
  * BUG/MINOR: resolvers: Always attach server on matching record on resolution
  * CLEANUP: dns: Remove a forgotten debug message
  * DOC: config: Add missing actions in "tcp-request session" documentation
  * MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules
  * REGTESTS: fix maxconn update with agent-check
  * BUG/MAJOR: server: fix deadlock when changing maxconn via agent-check
  * BUG/MINOR: cache: Correctly handle existing-but-empty 'accept-encoding' header
  * BUG/MINOR: server/cli: Fix locking in function processing "set server" command
  * BUG/MINOR: resolvers: Use resolver's lock in resolv_srvrq_expire_task()
  * BUG/MEDIUM: resolvers: Add a task on servers to check SRV resolution status
  * MINOR: resolvers: Remove server from named_servers tree when removing a SRV item
  * MINOR: resolvers: Clean server in a dedicated function when removing a SRV item
  * BUG/MEDIUM: server/cli: Fix ABBA deadlock when fqdn is set from the CLI
  * BUG/MINOR: server: Forbid to set fqdn on the CLI if SRV resolution is enabled
  * BUG/MINOR: server-state: load SRV resolution only if params match the config</changelog>
  <changelog author="mrueckert@suse.de" date="1629201600">- Update to version 2.4.3+git0.4dd5a5a6c:
    CVE-2021-39240 CVE-2021-39241 CVE-2021-39242
    (boo#1189366 boo#1189548 boo#1189549)
  * [RELEASE] Released version 2.4.3
  * REGTESTS: add a test to prevent h2 desync attacks
  * BUG/MEDIUM: h2: give :authority precedence over Host
  * BUG/MAJOR: h2: enforce stricter syntax checks on the :method pseudo-header
  * BUG/MAJOR: h2: verify that :path starts with a '/' before concatenating it
  * BUG/MAJOR: h2: verify early that non-http/https schemes match the valid syntax
  * MINOR: http: add a new function http_validate_scheme() to validate a scheme
  * DOC/MINOR: fix typo in management document
  * CLEANUP: assorted typo fixes in the code and comments
  * BUG/MEDIUM: cfgcheck: verify existing log-forward listeners during config check
  * BUG/MEDIUM: spoe: Fix policy to close applets when SPOE connections are queued
  * DOC: config: Fix 'http-response send-spoe-group' documentation
  * DOC: Improve the lua documentation
  * BUG/MINOR: tcpcheck: Properly detect pending HTTP data in output buffer
  * BUG/MINOR: buffer: fix buffer_dump() formatting
  * BUG/MEDIUM: spoe: Create a SPOE applet if necessary when the last one is released
  * MINOR: spoe: Add a pointer on the filter config in the spoe_agent structure
  * ADMIN: dyncookie: implement a simple dynamic cookie calculator
  * MINOR: server: unmark deprecated on enable health/agent cli
  * BUG/MINOR: server: update last_change on maint-&gt;ready transitions too
  * BUG/MINOR: server: remove srv from px list on CLI 'add server' error
  * BUILD: opentracing: fixed build when using pkg-config utility
  * DOC: internals: document the FD takeover process
  * BUG/MINOR: fd: protect fd state harder against a concurrent takeover
  * BUG/MINOR: pollers: always program an update for migrated FDs
  * BUG/MINOR: poll: fix abnormally high skip_fd counter
  * BUG/MINOR: select: fix excess number of dead/skip reported
  * BUG/MEDIUM: pollers: clear the sleeping bit after waking up, not before
  * BUG/MEDIUM: connection: close a rare race between idle conn close and takeover
  * BUG/MINOR: connection: Add missing error labels to conn_err_code_str
  * BUG/MEDIUM: mux-h2: Handle remaining read0 cases on partial frames
  * BUG/MINOR: mux-h1: Be sure to swap H1C to splice mode when rcv_pipe() is called
  * BUG/MINOR: mux-h2: Obey dontlognull option during the preface
  * BUG/MINOR: mux-h1: Obey dontlognull option for empty requests
  * BUG/MINOR: systemd: must check the configuration using -Ws
  * BUG/MINOR: resolvers: Use a null-terminated string to lookup in servers tree
  * BUG/MINOR: check: fix the condition to validate a port-less server
  * BUG/MINOR: stats: Add missing agent stats on servers
  * BUG/MEDIUM: ssl_sample: fix segfault for srv samples on invalid request
  * BUILD/MINOR: memprof fix macOs build.
  * BUG/MINOR: mworker: do not export HAPROXY_MWORKER_REEXEC across programs
  * BUG/MEDIUM: mworker: do not register an exit handler if exit is expected
  * BUILD: lua: silence a build warning with TCC
  * BUILD: add detection of missing important CFLAGS
  * BUG/MINOR: ssl: Default-server configuration ignored by server
  * MINOR: mux_h2: define config to disable h2 websocket support
  * BUILD: http_htx: fix ci compilation error with isdigit for Windows</changelog>
  <changelog author="mrueckert@suse.de" date="1631016000">- Update to version 2.4.4+git0.acb1d0bea: CVE-2021-40346 (boo#1189877)
  * [RELEASE] Released version 2.4.4
  * Revert "BUG/MINOR: stream-int: Don't block reads in si_update_rx() if chn may receive"
  * BUG/MAJOR: htx: fix missing header name length check in htx_add_header/trailer
  * CLEANUP: htx: remove comments about "must be &lt; 256 MB"
  * BUG/MINOR: config: reject configs using HTTP with bufsize &gt;= 256 MB
  * DOC: configuration: remove wrong tcp-request examples in tcp-response
  * BUG/MINOR: vars: fix set-var/unset-var exclusivity in the keyword parser
  * CLEANUP: Add missing include guard to signal.h
  * BUG/MINOR: tools: Fix loop condition in dump_text()
  * BUG/MINOR threads: Use get_(local|gm)time instead of (local|gm)time
  * BUG/MINOR: ebtree: remove dependency on incorrect macro for bits per long
  * MINOR: time: add report_idle() to report process-wide idle time
  * BUG/MINOR: time: fix idle time computation for long sleeps
  * BUG/MINOR: lua: use strlcpy2() not strncpy() to copy sample keywords
  * MINOR: compiler: implement an ONLY_ONCE() macro
  * BUG/MINOR: base64: base64urldec() ignores padding in output size check
  * BUG/MEDIUM: base64: check output boundaries within base64{dec,urldec}
  * BUG/MINOR: stick-table: fix the sc-set-gpt* parser when using expressions
  * MINOR: hlua: take the global Lua lock inside a global function
  * REGTESTS: abortonclose: after retries, 503 is expected, not close
  * REGTESTS: http_upgrade: fix incorrect expectation on TCP-&gt;H1-&gt;H2
  * BUG/MEDIUM: h2: match absolute-path not path-absolute for :path</changelog>
  <changelog author="mrueckert@suse.de" date="1633089600">- Update to version 2.4.5+git0.e74a1b34b:
  * [RELEASE] Released version 2.4.5
  * MINOR: tasks: catch TICK_ETERNITY with BUG_ON() in __task_queue()
  * BUG/MINOR: tcp-rules: Stop content rules eval on read error and end-of-input
  * BUG/MINOR: tcpcheck: Don't use arg list for default proxies during parsing
  * MINOR: arg: Be able to forbid unresolved args when building an argument list
  * BUG/MAJOR: lua: use task_wakeup() to properly run a task once
  * BUG/MEDIUM: lua: fix wakeup condition from sleep()
  * MINOR: Makefile: add MEMORY_POOLS to the list of DEBUG_xxx options
  * DOC: peers: fix doc "enable" statement on "peers" sections
  * BUG/MINOR: mux-h1/mux-fcgi: Sanitize TE header to only send "trailers"
  * MINOR: stream-int: Notify mux when the buffer is not stuck when calling rcv_buf
  * BUG/MEDIUM: stream-int: Defrag HTX message in si_cs_recv() if necessary
  * MINOR: htx: Add a function to know if the free space wraps
  * MINOR: htx: Add an HTX flag to know when a message is fragmented
  * MINOR: stream-int: Set CO_RFL transient/persistent flags apart in si_cs_rcv()
  * BUG/MEDIUM: stream: Stop waiting for more data if SI is blocked on RXBLK_ROOM
  * BUG/MEDIUM: stream-int: Notify stream that the mux wants more room to xfer data
  * BUG/MEDIUM: mux-h1: Adjust conditions to ask more space in the channel buffer
  * BUG/MINOR: stats: use refcount to protect dynamic server on dump
  * MINOR: server: return the next srv instance on free_server
  * BUG/MINOR: server: do not use refcount in free_server in stopping mode
  * MINOR: global: define MODE_STOPPING
  * MINOR: server: implement a refcount for dynamic servers
  * BUG/MINOR: http-ana: increment internal_errors counter on response error
  * BUG/MINOR: h1-htx: Fix a typo when request parser is reset
  * BUG/MEDIUM: leastconn: fix rare possibility of divide by zero
  * BUG/MINOR: server: allow 'enable health' only if check configured
  * BUILD: threads: fix -Wundef for _POSIX_PRIORITY_SCHEDULING on libmusl
  * BUILD: halog: fix a -Wundef warning on non-glibc systems
  * BUILD: compiler: fixed a missing test on  defined(__GNUC__)
  * BUILD: fix dragonfly build again on __read_mostly
  * BUG/MINOR: vars: do not talk about global section in CLI errors for set-var
  * BUG/MINOR: vars: truncate the variable name in error reports about scope.
  * BUG/MINOR: vars: properly set the argument parsing context in the expression
  * MINOR: sample: add missing ARGC_ entries
  * BUG/MINOR: vars: improve accuracy of the rules used to check expression validity
  * BUILD: tools: properly guard __GLIBC__ with defined()
  * BUILD: ssl: fix two remaining occurrences of #if USE_OPENSSL
  * BUILD: ssl: next round of build warnings on LIBRESSL_VERSION_NUMBER
  * BUILD/MINOR: regex: avoid a build warning on USE_PCRE2 with -Wundef
  * IMPORT: slz: silence a build warning with -Wundef
  * BUILD/MINOR: ssl: avoid a build warning on LIBRESSL_VERSION with -Wundef
  * BUILD/MINOR: defaults: eliminate warning on MAXHOSTNAMELEN with -Wundef
  * BUILD: activity: use #ifdef not #if on USE_MEMORY_PROFILING
  * MINOR: proc: setting the process to produce a core dump on FreeBSD.
  * MINOR: tools: add FreeBSD support to get_exec_path()
  * BUILD: tools: get the absolute path of the current binary on NetBSD.
  * BUG/MINOR: flt-trace: fix an infinite loop when random-parsing is set
  * BUG/MINOR: cli/payload: do not search for args inside payload
  * BUILD: ist: prevent gcc11 maybe-uninitialized warning on istalloc
  * BUG/MINOR: connection: prevent null deref on mux cleanup task allocation
  * DOC: management: certificate files must be sanitized before injection
  * BUG/MINOR: tcpcheck: Improve LDAP response parsing to fix LDAP check
  * BUG/MAJOR: mux-h1: Don't eval input data if an error was reported
  * MINOR: pools: use mallinfo2() when available instead of mallinfo()
  * MINOR: pools: automatically disable malloc_trim() with external allocators
  * CLEANUP: pools: factor all malloc_trim() calls into trim_all_pools()
  * BUG/MINOR: compat: make sure __WORDSIZE is always defined
  * BUG/MEDIUM: stream-int: Don't block SI on a channel policy if EOI is reached
  * CLEANUP: mux-h1: Remove condition rejecting upgrade requests with payload
  * MINOR: htx: Skip headers with no value when adding a header list to a message
  * BUG/MEDIUM: mux-h1: Remove "Upgrade:" header for requests with payload
  * BUG/MINOR: systemd: ExecStartPre must use -Ws
  * BUG/MINOR: filters: Set right FLT_END analyser depending on channel
  * BUG/MINOR: filters: Always set FLT_END analyser when CF_FLT_ANALYZE flag is set
  * BUG/MEDIUM: http-ana: Reset channels analysers when returning an error
  * BUG/MINOR: stream: Don't release a stream if FLT_END is still registered
  * BUG/MINOR: lua: Don't yield in channel.append() and channel.set()
  * BUG/MINOR: lua: Yield in channel functions only if lua context can yield
  * MINOR: lua: Add a flag on lua context to know the yield capability at run time</changelog>
  <changelog author="mrueckert@suse.de" date="1633348800">- Update to version 2.4.6+git0.d83fd76a1:
  * [RELEASE] Released version 2.4.6
  * BUG/MEDIUM: filters: Fix a typo when a filter is attached blocking the release</changelog>
  <changelog author="mrueckert@suse.de" date="1633348801">- Update to version 2.4.7+git0.b5e51a5e2:
  * [RELEASE] Released version 2.4.7
  * BUG/MEDIUM: http-ana: Clear request analyzers when applying redirect rule</changelog>
  <changelog author="mrueckert@suse.de" date="1635940800">- Update to version 2.4.8+git0.d1f8d41e0:
  * [RELEASE] Released version 2.4.8
  * SCRIPTS: git-show-backports: re-enable file-based filtering
  * DOC/peers: some grammar fixes for peers 2.1 spec
  * MINOR: stream: Improve dump of bogus streams
  * BUILD/MINOR: cpuset freebsd build fix
  * DOC: config: Fix alphabetical order of fc_* samples
  * BUG/MINOR: sample: fix backend direction flags consecutive to last fix
  * BUG/MEDIUM: sample: Cumulate frontend and backend sample validity flags
  * BUG/MEDIUM: stream-int: Block reads if channel cannot receive more data
  * BUG/MINOR: http: Authorization value can have multiple spaces after the scheme
  * BUG/MEDIUM: http-ana: Drain request data waiting the tarpit timeout expiration
  * MINOR: halog: Add support for extracting captures using -hdr
  * BUG/MINOR: halog: Add missing newlines in die() messages
  * CLEANUP: halog: Use consistent indentation in help()
  * MINOR: halog: Rename -qry to -query
  * DOC: halog: Move the `-qry` parameter into the correct section in help text
  * MINOR: halog: Add -qry parameter allowing to preserve the query string in -uX
  * BUG/MEDIUM: resolvers: Track api calls with a counter to free resolutions
  * BUG/MEDIUM: resolvers: Don't recursively perform requester unlink
  * MEDIUM: resolvers: remove the last occurrences of the "safe" argument
  * MEDIUM: resolvers: use a kill list to preserve the list consistency
  * CLEANUP: resolvers: replace all LIST_DELETE with LIST_DEL_INIT
  * CLEANUP: resolvers: simplify resolv_link_resolution() regarding requesters
  * CLEANUP: always initialize the answer_list
  * CLEANUP: resolvers: do not export resolv_purge_resolution_answer_records()
  * BUG/MEDIUM: mux-h1: Perform a connection shutdown when the h1c is released
  * BUG/MINOR: mux-h1: Save shutdown mode if the shutdown is delayed
  * BUILD: atomic: fix build on mac/arm64
  * BUG/MINOR: backend: fix improper insert in avail tree for always reuse
  * BUILD: fix compilation on NetBSD
  * MINOR: memprof: add one pointer size to the size of allocations
  * MINOR: memprof: report the delta between alloc and free on realloc()
  * BUG/MEDIUM: lua: fix memory leaks with realloc() on non-glibc systems
  * BUG/MINOR: mux-h2: do not prevent from sending a final GOAWAY frame
  * BUG/MINOR: task: do not set TASK_F_USR1 for no reason
  * BUG/MAJOR: buf: fix varint API post- vs pre- increment
  * BUG/MEDIUM: resolvers: always check a valid item in query_list
  * BUILD: resolvers: avoid a possible warning on null-deref
  * BUG/MAJOR: resolvers: add other missing references during resolution removal
  * MINOR: resolvers: merge address and target into a union "data"
  * BUG/MEDIUM: resolvers: use correct storage for the target address
  * BUG/MEDIUM: resolvers: fix truncated TLD consecutive to the API fix
  * MINOR: resolvers: fix the resolv_dn_label_to_str() API about trailing zero
  * BUG/MINOR: resolvers: do not reject host names of length 255 in SRV records
  * BUG/MEDIUM: resolver: make sure to always use the correct hostname length
  * MINOR: resolvers: fix the resolv_str_to_dn_label() API about trailing zero
  * BUG/MAJOR: dns: attempt to lock globaly for msg waiter list instead of use barrier
  * BUG/MAJOR: dns: tcp session can remain attached to a list after a free
  * BUG/MEDIUM: tcpcheck: Properly catch early HTTP parsing errors
  * Revert "CLEANUP: server: always include the storage for SSL settings"
  * BUG/MEDIUM: stream: Keep FLT_END analyzers if a stream detects a channel error
  * BUG/MEDIUM: cpuset: fix cpuset size for FreeBSD
  * BUG/MINOR: sample: Fix 'fix_tag_value' sample when waiting for more data
  * BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back
  * MINOR: initcall: Rename __GLOBL and __GLOBL1.
  * DOC: configuration: add clarification on escaping in keyword arguments
  * BUG/MEDIUM: mux_h2: Handle others remaining read0 cases on partial frames
  * BUG/MEDIUM: sample: properly verify that variables cast to sample
  * MINOR: sample: provide a generic var-to-sample conversion function
  * CLEANUP: sample: uninline sample_conv_var2smp_str()
  * CLEANUP: sample: rename sample_conv_var2smp() to *_sint
  * CLEANUP: server: always include the storage for SSL settings</changelog>
  <changelog author="varkoly@suse.com" date="1646740800">- (bsc#1196408) VUL-0: CVE-2022-0711: haproxy: Denial of service via set-cookie2 header
  o Apply upstream patch:
    0001-BUG-MAJOR-http-htx-prevent-unbounded-loop-in-http_ma.patch</changelog>
  <changelog author="varkoly@suse.com" date="1674043200">- VUL-0: CVE-2023-0056: haproxy: segfault DoS (bsc#1207181)
  o Apply upstream patch:
    0001-BUG-MEDIUM-mux-h2-Refuse-interim-responses-with-end-.patch</changelog>
  <changelog author="varkoly@suse.com" date="1676030400">- VUL-0: serious vulnerability in the HTTP/1 parser (bsc#1208132)
  o Apply upstream patch:
    2.0-2.5-BUG-CRITICAL-http-properly-reject-empty-http-header-.patch
- The output buffer is not zero-initialized. If we don't clear reserved
  bytes, fcgi requests sent to backend will leak sensitive data.
  o Apply proposed patch:
    0001-output-buffer-is-not-zero-initialized.path</changelog>
  <changelog author="varkoly@suse.com" date="1681214400">- ECO: Maint: Update haproxy to latest maintenance release for all SLE15 (jsc#PED-3821)
- rebase and rename haproxy-1.6.0-sec-options.patch -&gt; haproxy-2.4.22-sec-options.patch
- remove patches covered by new release:
  lua54.patch
  0001-BUG-MAJOR-http-htx-prevent-unbounded-loop-in-http_ma.patch
  0001-BUG-MEDIUM-mux-h2-Refuse-interim-responses-with-end-.patch
  0001-output-buffer-is-not-zero-initialized.path
  2.0-2.5-BUG-CRITICAL-http-properly-reject-empty-http-header-.patch
- Update to version 2.4.22+git0.f8e3218e2:
  * [RELEASE] Released version 2.4.22
  * BUG/CRITICAL: http: properly reject empty http header field names
  * CI: github: don't warn on deprecated openssl functions on windows
  * BUG/MEDIUM: stconn: Schedule a shutw on shutr if data must be sent first
  * DOC: proxy-protocol: fix wrong byte in provided example
  * DOC: config: 'http-send-name-header' option may be used in default section
  * DOC: config: fix option spop-check proxy compatibility
  * BUG/MEDIUM: cache: use the correct time reference when comparing dates
  * BUG/MEDIUM: stick-table: do not leave entries in end of window during purge
  * BUG/MINOR: ssl/crt-list: warn when a line is malformated
  * BUG/MEDIUM: ssl: wrong eviction from the session cache tree
  * BUG/MINOR: fcgi-app: prevent 'use-fcgi-app' in default section
  * [RELEASE] Released version 2.4.21
  * BUG/MINOR: sink: free the forwarding task on exit
  * BUILD: hpack: include global.h for the trash that is needed in debug mode
  * BUG/MINOR: mux-h2: add missing traces on failed headers decoding
  * BUG/MINOR: listener: close tiny race between resume_listener() and stopping
  * DOC: config: fix "Address formats" chapter syntax
  * BUG/MINOR: mux-fcgi: Correctly set pathinfo
  * DOC: config: fix aliases for protocol prefixes "udp4@" and "udp6@"
  * DOC: config: fix wrong section number for "protocol prefixes"
  * BUG/MINOR: listeners: fix suspend/resume of inherited FDs
  * BUG/MINOR: http-ana: make set-status also update txn-&gt;status
  * BUG/MINOR: http-fetch: Don't block HTTP sample fetch eval in HTTP_MSG_ERROR state
  * BUG/MINOR: http-ana: Report SF_FINST_R flag on error waiting the request body
  * BUG/MINOR: promex: Don't forget to consume the request on error
  * BUG/MINOR: resolvers: Wait the resolution execution for a do_resolv action
  * BUG/MINOR: h1-htx: Remove flags about protocol upgrade on non-101 responses
  * CLEANUP: htx: fix a typo in an error message of http_str_to_htx
  * BUG/MINOR: http: Memory leak of http redirect rules' format string
  * REGTEST: fix the race conditions in hmac.vtc
  * REGTEST: fix the race conditions in digest.vtc
  * REGTEST: fix the race conditions in json_query.vtc
  * BUG/MAJOR: buf: Fix copy of wrapping output data when a buffer is realigned
  * BUG/MINOR: http-fetch: Only fill txn status during prefetch if not already set
  * BUILD: makefile: sort the features list
  * BUILD: makefile: build the features list dynamically
  * BUG/MINOR: pool/stats: Use ullong to report total pool usage in bytes in stats
  * BUG/MEDIUM: mux-h2: Refuse interim responses with end-stream flag set
  * BUG/MINOR: ssl: Fix memory leak of find_chain in ssl_sock_load_cert_chain
  * LICENSE: wurfl: clarify the dummy library license.
  * BUG/MEDIUM: resolvers: Use tick_first() to update the resolvers task timeout
  * REGTESTS: startup: check maxconn computation
  * REGTESTS: fix the race conditions in iff.vtc
  * BUG/MAJOR: fcgi: Fix uninitialized reserved bytes
  * DOC: promex: Add missing backend metrics
  * MINOR: promex: introduce haproxy_backend_agg_check_status
  * BUG/MINOR: promex: create haproxy_backend_agg_server_status
  * BUG/MEDIUM: mworker: fix segv in early failure of mworker mode with peers
  * BUG/MINOR: ssl: Fix potential overflow
  * BUG/MEDIUM: ssl: Verify error codes can exceed 63
  * BUG/MINOR: resolvers: Don't wait periodic resolution on healthcheck failure
  * BUILD: peers: peers-t.h depends on stick-table-t.h
  * CI: github: change "ubuntu-latest" to "ubuntu-20.04"
  * BUG/MEDIIM: stconn: Flush output data before forwarding close to write side
  * BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
  * [RELEASE] Released version 2.4.20
  * Revert "CI: determine actual OpenSSL version dynamically"
  * Revert "CI: switch to the "latest" LibreSSL"
  * SCRIPTS: announce-release: add a link to the data plane API
  * DOC: config: clarify the -m dir and -m dom pattern matching methods
  * DOC: config: clarify the fact that "retries" is not just for connections
  * DOC: config: explain how default matching method for ACL works
  * DOC: config: mention that a single monitor-uri rule is supported
  * DOC: config: clarify the fact that SNI should not be used in HTTP scenarios
  * DOC: config: provide some configuration hints for "http-reuse"
  * Revert "BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action"
  * BUG/MINOR: mux-h1: Fix handling of 408-Request-Time-Out
  * BUILD: http-htx: Silent build error about a possible NULL start-line
  * BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
  * BUG/MINOR: log: fix parse_log_message rfc5424 size check
  * BUG/MINOR: cfgparse-listen: fix ebpt_next_dup pointer dereference on proxy "from" inheritance
  * BUILD: listener: fix build warning on global_listener_rwlock without threads
  * BUG/MINOR: server/idle: at least use atomic stores when updating max_used_conns
  * BUILD: peers: Remove unused variables
  * BUG/MEDIUM: peers: messages about unkown tables not correctly ignored
  * BUG/MINOR: ssl: don't initialize the keylog callback when not required
  * BUG/MINOR: http_ana/txn: don't re-initialize txn and req var lists
  * BUG/MEDIUM: listener: Fix race condition when updating the global mngmt task
  * BUG/MINOR: pool/cli: use ullong to report total pool usage in bytes
  * BUG/MEDIUM: ring: fix creation of server in uninitialized ring
  * DOC: config: fix alphabetical ordering of global section
  * REG-TESTS: cache: Remove T-E header for 304-Not-Modified responses
  * BUG/MINOR: mux-h1: Do not send a last null chunk on body-less answers
  * BUG/MEDIUM: mux-fcgi: Avoid value length overflow when it doesn't fit at once
  * BUG/MINOR: mux-fcgi: Be sure to send empty STDING record in case of zero-copy
  * BUG/MINOR: resolvers: Set port before IP address when processing SRV records
  * BUG/MINOR: http-htx: Fix error handling during parsing http replies
  * BUG/MEDIUM: wdt/clock: properly handle early task hangs
  * CI: emit the compiler's version in the build reports
  * CI: switch to the "latest" LibreSSL
  * BUG/MINOR: ssl: ocsp structure not freed properly in case of error
  * BUG/MINOR: ssl: Memory leak of AUTHORITY_KEYID struct when loading issuer
  * CI: add monthly gcc cross compile jobs
  * BUG/MINOR: log: fixing bug in tcp syslog_io_handler Octet-Counting
  * BUG/MEDIUM: stick-table: fix a race condition when updating the expiration task
  * BUG/MAJOR: stick-table: don't process store-response rules for applets
  * DOC: management: add forgotten "show startup-logs"
  * BUG/MINOR: stick-table: Use server_id instead of std_t_sint in process_store_rules()
  * CI: SSL: temporarily stick to LibreSSL=3.5.3
  * CI: SSL: use proper version generating when "latest" semantic is used
  * BUG/MINOR: sink: Set default connect/server timeout for implicit ring buffers
  * BUG/MINOR: sink: Only use backend capability for the sink proxies
  * BUG/MEDIUM: compression: handle rewrite errors when updating response headers
  * BUG/MINOR: ring: Properly parse connect timeout
  * BUG/MINOR: log: Preserve message facility when the log target is a ring buffer
  * CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in workflow definition
  * CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in matrix.py
  * BUG/MINOR: server: make sure "show servers state" hides private bits
  * BUG/MAJOR: stick-tables: do not try to index a server name for applets
  * DOC: configuration: missing 'if' in tcp-request content example
  * BUG/MINOR: backend: only enforce turn-around state when not redispatching
  * BUG/MINOR: smtpchk: SMTP Service check should gracefully close SMTP transaction
  * MINOR: smtpchk: Update expect rule to fully match replies to EHLO commands
  * BUG/MINOR: mux-h1: Account consumed output data on synchronous connection error
  * BUILD: http_fetch: silence an uninitiialized warning with gcc-4/5/6 at -Os
  * BUG/MINOR: http-fetch: Update method after a prefetch in smp_fetch_meth()
  * BUILD: h1: silence an initiialized warning with gcc-4.7 and -Os
  * BUG/MEDIUM: lua: handle stick table implicit arguments right.
  * BUG/MEDIUM: lua: Don't crash in hlua_lua2arg_check on failure
  * DOC: config: Fix pgsql-check documentation to make user param mandatory
  * BUG/MINOR: checks: update pgsql regex on auth packet
  * [RELEASE] Released version 2.4.19
  * BUG/MEDIUM: resolvers: Remove aborted resolutions from query_ids tree
  * REGTESTS: 4be_1srv_smtpchk_httpchk_layer47errors: Return valid SMTP replies
  * BUG/MINOR: log: improper behavior when escaping log data
  * SCRIPTS: announce-release: update some URLs to https
  * BUILD: fd: fix a build warning on the DWCAS
  * BUG/MEDIUM: captures: free() an error capture out of the proxy lock
  * DOC: fix TOC in starter guide for subsection 3.3.8. Statistics
  * REGTESTS: ssl/log: test the log-forward with SSL
  * BUG/MEDIUM: sink: bad init sequence on tcp sink from a ring.
  * REGTESTS: log: test the log-forward feature
  * REGTESTS: healthcheckmail: Relax matching on the healthcheck log message
  * BUG/MINOR: stats: fixing stat shows disabled frontend status as 'OPEN'
  * MINOR: listener: small API change
  * BUG/MEDIUM: proxy: ensure pause_proxy() and resume_proxy() own PROXY_LOCK
  * CI: cirrus-ci: bump FreeBSD image to 13-1
  * BUG/MINOR: signals/poller: ensure wakeup from signals
  * BUG/MINOR: signals/poller: set the poller timeout to 0 when there are signals
  * BUG/MINOR: task: always reset a new tasklet's call date
  * BUG/MINOR: h1: Support headers case adjustment for TCP proxies
  * BUILD: makefile: enable crypt(3) for NetBSD
  * BUG/MINOR: regex: Properly handle PCRE2 lib compiled without JIT support
  * BUG/MINOR: mux-fcgi: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: mux-h1: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: mux-h2: fix the "show fd" dest buffer for the subscriber
  * BUG/MEDIUM: mux-h1: always use RST to kill idle connections in pools
  * REGTESTS: http_request_buffer: Add a barrier to not mix up log messages
  * BUG/MEDIUM: mux-h1: do not refrain from signaling errors after end of input
  * BUG/MINOR: tcpcheck: Disable QUICKACK for default tcp-check (with no rule)
  * BUG/MINOR: hlua: Rely on CF_EOI to detect end of message in HTTP applets
  * BUG/MEDIUM: peers: Don't start resync on reload if local peer is not up-to-date
  * BUG/MEDIUM: peers: Don't use resync timer when local resync is in progress
  * BUG/MEDIUM: peers: Add connect and server timeut to peers proxy
  * BUG/MEDIUM: spoe: Properly update streams waiting for a ACK in async mode
  * DOC: configuration: do-resolve doesn't work with a port in the string
  * REGTESTS: Fix prometheus script to perform HTTP health-checks
  * BUG/MINOR: tcpcheck: Disable QUICKACK only if data should be sent after connect
  * BUG/MINOR: resolvers: return the correct value in resolvers_finalize_config()
  * BUG/MAJOR: mworker: fix infinite loop on master with no proxies.
  * BUG/MAJOR: log-forward: Fix log-forward proxies not fully initialized
  * BUG/MEDIUM: mux-h2: do not fiddle with -&gt;dsi to indicate demux is idle
  * BUG/MEDIUM: http-ana: fix crash or wrong header deletion by http-restrict-req-hdr-names
  * BUILD: http: silence an uninitialized warning affecting gcc-5
  * BUG/MEDIUM: ring: fix too lax 'size' parser
  * BUILD: debug: silence warning on gcc-5
  * BUG/MEDIUM: task: relax one thread consistency check in task_unlink_wq()
  * BUG/MEDIUM: poller: use fd_delete() to release the poller pipes
  * BUILD: cfgparse: always defined _GNU_SOURCE for sched.h and crypt.h
  * BUG/MINOR: sink: fix a race condition between the writer and the reader
  * BUG/MINOR: ring/cli: fix a race condition between the writer and the reader
  * BUG/MEDIUM: proxy: Perform a custom copy for default server settings
  * REORG: server: Export srv_settings_cpy() function
  * MINOR: server: Constify source server to copy its settings
  * BUG/MEDIUM: dns: Properly initialize new DNS session
  * BUG/MINOR: peers: Use right channel flag to consider the peer as connected
  * BUG/MEDIUM: peers: limit reconnect attempts of the old process on reload
  * MINOR: peers: Use a dedicated reconnect timeout when stopping the local peer
  * BUG/MEDIUM: pattern: only visit equivalent nodes when skipping versions
  * MINOR: ebtree: add ebmb_lookup_shorter() to pursue lookups
  * MINOR: http-htx: Use new HTTP functions for the scheme based normalization
  * BUG/MEDIUM: h1: Improve authority validation for CONNCET request
  * MINOR: http: Add function to detect default port
  * MINOR: http: Add function to get port part of a host
  * BUG/MEDIUM: mworker: use default maxconn in wait mode
  * [RELEASE] Released version 2.4.18
  * BUG/MINOR: sockpair: wrong return value for fd_send_uxst()
  * BUG/MINOR: backend: Fallback on RR algo if balance on source is impossible
  * BUILD: add detection for unsupported compiler models
  * BUG/MEDIUM: mworker: proc_self incorrectly set crashes upon reload
  * REGTESTS: Fix some scripts to be compatible with 2.4 and prior
  * BUG/MINOR: tools: fix statistical_prng_range()'s output range
  * BUG/MEDIUM: tools: avoid calling dlsym() in static builds (try 2)
  * BUILD: makefile: Fix install(1) handling for OpenBSD/NetBSD/Solaris/AIX
  * BUG/MEDIUM: tools: avoid calling dlsym() in static builds
  * MEDIUM: mworker: set the iocb of the socketpair without using fd_insert()
  * BUG/MEDIUM: mux-h1: Handle connection error after a synchronous send
  * BUG/MEDIUM: http-ana: Don't wait to have an empty buf to switch in TUNNEL state
  * BUG/MINOR: mux-h1: Be sure to commit htx changes in the demux buffer
  * REGTEESTS: filters: Fix CONNECT request in random-forwarding script
  * BUG/MEDIUM: http-fetch: Don't fetch the method if there is no stream
  * BUG/MINOR: http-htx: Fix scheme based normalization for URIs wih userinfo
  * BUG/MINOR: peers: fix possible NULL dereferences at config parsing
  * BUG/MINOR: http-act: Properly generate 103 responses when several rules are used
  * BUG/MINOR: http-check: Preserve headers if not redefined by an implicit rule
  * BUG/MINOR: peers/config: always fill the bind_conf's argument
  * MINOR: fd: Add BUG_ON checks on fd_insert()
  * CI: re-enable gcc asan builds
  * BUILD: Makefile: Add Lua 5.4 autodetect
  * BUG/MEDIUM: ssl/fd: unexpected fd close using async engine
  * MINOR: fd: add a new FD_DISOWN flag to prevent from closing a deleted FD
  * BUG/MINOR: http-fetch: Use integer value when possible in "method" sample fetch
  * BUG/MINOR: http-ana: Set method to HTTP_METH_OTHER when an HTTP txn is created
  * BUG/MINOR: ssl: Do not look for key in extra files if already in pem
  * MEDIUM: mux-h2: try to coalesce outgoing WINDOW_UPDATE frames
  * BUG/MEDIUM: ssl/cli: crash when crt inserted into a crt-list
  * BUG/MINOR: tcp-rules: Make action call final on read error and delay expiration
  * BUG/MINOR: cli/stats: add missing trailing LF after "show info json"
  * BUG/MINOR: server: do not enable DNS resolution on disabled proxies
  * BUG/MINOR: cli/stats: add missing trailing LF after JSON outputs
  * REGTESTS: healthcheckmail: Relax health-check failure condition
  * REGTESTS: healthcheckmail: Update the test to be functionnal again
  * BUG/MINOR: checks: Properly handle email alerts in trace messages
  * BUG/MINOR: trace: Test server existence for health-checks to get proxy
  * BUG/MEDIUM: mailers: Set the object type for check attached to an email alert
  * BUILD: compiler: implement unreachable for older compilers too
  * REGTESTS: restrict_req_hdr_names: Extend supported versions
  * REGTESTS: http_abortonclose: Extend supported versions
  * BUG/MINOR: ssl_ckch: Fix possible uninitialized value in show_cert I/O handler
  * BUG/MINOR: ssl_ckch: Dump cert transaction only once if show command yield
  * REGTESTS: http_request_buffer: Increase client timeout to wait "slow" clients
  * REGTESTS: abortonclose: Add a barrier to not mix up log messages
  * MEDIUM: http-ana: Always report rewrite failures as PRXCOND in logs
  * BUG/MEDIUM: ssl/crt-list: Rework 'add ssl crt-list' to handle full buffer cases
  * BUG/MEDIUM: ssl_ckch: Rework 'commit ssl cert' to handle full buffer cases
  * BUG/MINOR: ssl_ckch: Don't duplicate path when replacing a cert entry
  * BUG/MEDIUM: ssl_ckch: Don't delete a cert entry if it is being modified
  * BUG/MINOR: ssl_ckch: Free error msg if commit changes on a cert entry fails
  * DOC: intro: adjust the numbering of paragrams to keep the output ordered
  * DOC: peers: fix port number and addresses on new peers section format
  * DOC: peers: clarify when entry expiration date is renewed.
  * DOC: peers: indicate that some server settings are not usable
  * SCRIPTS: make publish-release try to launch make-releases-json
  * SCRIPTS: add make-releases-json to recreate a releases.json file in download dirs
  * REGTESTS: Do not use REQUIRE_VERSION for HAProxy 2.5+ (2)
  * BUG/MEDIUM: sample: Fix adjusting size in word converter
  * BUG/MEDIUM: peers: prevent unitialized multiple listeners on peers section
  * BUG/MEDIUM: peers: fix segfault using multiple bind on peers sections
  * BUG/MEDIUM: resolvers: Don't defer resolutions release in deinit function
  * BUG/MEDIUM: http: Properly reject non-HTTP/1.x protocols
  * BUG/MEDIUM: tools: Fix `inet_ntop` usage in sa2str
  * CI: determine actual OpenSSL version dynamically
  * BUILD/MINOR: cpuset fix build for FreeBSD 13.1
  * BUG/MINOR: peers: fix error reporting of "bind" lines
  * BUG/MINOR: cfgparse: abort earlier in case of allocation error
  * BUG/MINOR: check: Reinit the buffer wait list at the end of a check
  * BUG/MEDIUM: config: Reset outline buffer size on realloc error in readcfgfile()
  * REGTESTS: abortonclose: Fix some race conditions
  * BUG/MINOR: ssl: Fix crash when no private key is found in pem
  * MINOR: tools: add get_exec_path implementation for solaris based systems.
  * BUILD: fix build warning on solaris based systems with __maybe_unused.
  * MEDIUM: http-ana: Add a proxy option to restrict chars in request header names
  * CI: determine actual LibreSSL version dynamically
  * [RELEASE] Released version 2.4.17
  * CLEANUP: mux-h1: Fix comments and error messages for global options
  * BUG/MEDIUM: wdt: don't trigger the watchdog when p is unitialized
  * BUG/MINOR: conn_stream: do not confirm a connection from the frontend path
  * BUG/MINOR: server: Make SRV_STATE_LINE_MAXLEN value from 512 to 2kB (2000 bytes).
  * DOC: install: update gcc version requirements
  * BUG/MEDIUM: ssl: fix the gcc-12 broken fix :-(
  * BUILD: listener: shut report of possible null-deref in listener_accept()
  * BUILD: debug: work around gcc-12 excessive -Warray-bounds warnings
  * BUILD: ssl: work around bogus warning in gcc 12's -Wformat-truncation
  * CI: dynamically determine actual version of h2spec
  * DOC: fix typo "ant" for "and" in INSTALL
  * BUG/MINOR: map/cli: make sure patterns don't vanish under "show map"'s init
  * BUG/MINOR: map/cli: protect the backref list during "show map" errors
  * BUG/MEDIUM: cli: make "show cli sockets" really yield
  * BUG/MEDIUM: resolvers: make "show resolvers" properly yield
  * BUG/MINOR: tcp/http: release the expr of set-{src,dst}[-port]
  * DOC: config: Update doc for PR/PH session states to warn about rewrite failures
  * MINOR: mux-h2: report a trace event when failing to create a new stream
  * BUG/MINOR: mux-h2: mark the stream as open before processing it not after
  * BUG/MAJOR: dns: multi-thread concurrency issue on UDP socket
  * BUG/MEDIUM: mux-h1: Be able to handle trailers when C-L header was specified
  * BUG/MEDIUM: mux-fcgi: Be sure to never set EOM flag on an empty HTX message
  * SCRIPTS: announce-release: add URL of dev packages
  * CI: github actions: update LibreSSL to 3.5.2
  * [RELEASE] Released version 2.4.16
  * BUILD: opentracing: Fix OT build due to misuse of var_clear()
  * BUILD: proto_uxst: do not set unused flag
  * BUILD: sockpair: do not set unused flag
  * BUILD: fd: remove unused variable totlen in fd_write_frag_line()
  * CLEANUP: acl: Remove unused variable when releasing an acl expression
  * BUG/MINOR: pools: make sure to also destroy shared pools in pool_destroy_all()
  * BUG/MINOR: resolvers: Fix memory leak in resolvers_deinit()
  * BUILD: compiler: properly distinguish weak and global symbols
  * REGTESTS: fix the race conditions in be2dec.vtc ad field.vtc
  * MEDIUM: queue: use tasklet_instant_wakeup() to wake tasks
  * MINOR: task: add a new task_instant_wakeup() function
  * BUG/MINOR: rules: Fix check_capture() function to use the right rule arguments
  * DOC: remove my name from the config doc
  * BUG/MAJOR: connection: Never remove connection from idle lists outside the lock
  * BUG/MINOR: cache: Disable cache if applet creation fails
  * SCRIPTS: announce-release: add shortened links to pending issues
  * DOC: lua: update a few doc URLs
  * SCRIPTS: announce-release: update the doc's URL
  * BUG/MEDIUM: compression: Don't forget to update htx_sl and http_msg flags
  * BUG/MEDIUM: fcgi-app: Use http_msg flags to know if C-L header can be added
  * BUG/MEDIUM: stream: do not abort connection setup too early
  * BUILD: compiler: use a more portable set of asm(".weak") statements
  * BUILD: sched: workaround crazy and dangerous warning in Clang 14
  * BUG/MEDIUM: mux-h1: Don't request more room on partial trailers
  * BUG/MINOR: mux-h2: use timeout http-request as a fallback for http-keep-alive
  * BUG/MINOR: mux-h2: do not use timeout http-keep-alive on backend side
  * BUILD: debug: mark the __start_mem_stats/__stop_mem_stats symbols as weak
  * BUG/MINOR: cache: do not display expired entries in "show cache"
  * BUG/MINOR: mux-h2: do not send GOAWAY if SETTINGS were not sent
  * CI: cirrus: switch to FreeBSD-13.0
  * CI: Update to actions/cache@v3
  * CI: Update to actions/checkout@v3
  * DEBUG: opentracing: show return values of all functions in the debug output
  * CLEANUP: opentracing: added variable to store variable length
  * CLEANUP: opentracing: added flt_ot_smp_init() function
  * CLEANUP: opentracing: removed unused function flt_ot_var_get()
  * CLEANUP: opentracing: removed unused function flt_ot_var_unset()
  * DOC: opentracing: corrected comments in function descriptions
  * EXAMPLES: opentracing: refined shell scripts for testing filter performance
  * BUG/MINOR: opentracing: setting the return value in function flt_ot_var_set()
  * BUG/MEDIUM: http-act: Don't replace URI if path is not found or invalid
  * BUG/MEDIUM: http-conv: Fix url_enc() to not crush const samples
  * BUG/MEDIUM: mux-h1: Set outgoing message to DONE when payload length is reached
  * BUG/MEDIUM: promex: Be sure to never set EOM flag on an empty HTX message
  * BUG/MEDIUM: hlua: Don't set EOM flag on an empty HTX message in HTTP applet
  * BUG/MEDIUM: stats: Be sure to never set EOM flag on an empty HTX message
  * BUG/MINOR: fcgi-app: Don't add C-L header on response to HEAD requests
  * CI: github actions: update OpenSSL to 3.0.2
  * BUG/MAJOR: mux_pt: always report the connection error to the conn_stream
  * BUG/MINOR: cli/stream: fix "shutdown session" to iterate over all threads
  * BUG/MINOR: samples: add missing context names for sample fetch functions
  * DOC: reflect H2 timeout changes
  * BUG/MEDIUM: mux-h2: make use of http-request and keep-alive timeouts
  * MEDIUM: mux-h2: slightly relax timeout management rules
  * BUG/MEDIUM: stream-int: do not rely on the connection error once established
  * BUG/MEDIUM: mux-h1: Properly detect full buffer cases during message parsing
  * BUG/MEDIUM: mux-fcgi: Properly handle return value of headers/trailers parsing
  * BUG/MINOR: tools: url2sa reads too far when no port nor path
  * DOC: config: Explictly add supported MQTT versions
  * MEDIUM: mqtt: support mqtt_is_valid and mqtt_field_value converters for MQTTv3.1
  * BUG/MEDIUM: trace: avoid race condition when retrieving session from conn-&gt;owner
  * BUG/MEDIUM: mux-h1: only turn CO_FL_ERROR to CS_FL_ERROR with empty ibuf
  * CI: github actions: switch to LibreSSL-3.5.1
  * BUG/MINOR: server/ssl: free the SNI sample expression
  * BUG/MINOR: tools: fix url2sa return value with IPv4
  * [RELEASE] Released version 2.4.15
  * BUILD: tree-wide: mark a few numeric constants as explicitly long long
  * DOC: Fix usage/examples of deprecated ACLs
  * BUG/MINOR: stream: make the call_rate only count the no-progress calls
  * BUG/MINOR: session: fix theoretical risk of memleak in session_accept_fd()
  * BUG/MAJOR: mux-pt: Always destroy the backend connection on detach
  * DEBUG: stream: Fix stream trace message to print response buffer state
  * DEBUG: stream: Add the missing descriptions for stream trace events
  * BUG/MEDIUM: mcli: Properly handle errors and timeouts during reponse processing
  * DEBUG: cache: Update underlying buffer when loading HTX message in cache applet
  * BUG/MINOR: promex: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: cache: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: stats: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: hlua: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: cli: shows correct mode in "show sess"
  * BUG/MINOR: add missing modes in proxy_mode_str()
  * BUILD: pools: fix backport of no-memory-trimming on non-linux OS
  * MINOR: pools: add a new global option "no-memory-trimming"
  * BUG/MEDIUM: pools: fix ha_free() on area in the process of being freed
  * BUG/MINOR: pool: always align pool_heads to 64 bytes
  * REGTESTS: fix the race conditions in secure_memcmp.vtc
  * REGTESTS: fix the race conditions in normalize_uri.vtc
  * BUG/MEDIUM: htx: Fix a possible null derefs in htx_xfer_blks()
  * CI: github actions: use cache for SSL libs
  * CI: github actions: use cache for OpenTracing
  * CI: github actions: add OpenTracing builds
  * CI: github actions: add the output of $CC -dM -E-
  * [RELEASE] Released version 2.4.14
  * BUG/MEDIUM: stream: Abort processing if response buffer allocation fails
  * CI: github: enable pool debugging by default
  * REGTESTS: fix the race conditions in 40be_2srv_odd_health_checks
  * BUG/MINOR: proxy: preset the error message pointer to NULL in parse_new_proxy()
  * BUG/MAJOR: mux-h2: Be sure to always report HTX parsing error to the app layer
  * BUG/MEDIUM: mux-h1: Don't wake h1s if mux is blocked on lack of output buffer
  * BUG/MEDIUM: htx: Be sure to have a buffer to perform a raw copy of a message
  * BUG/MINOR: tools: url2sa reads ipv4 too far
  * BUG/MINOR: mailers: negotiate SMTP, not ESMTP
  * CI: github actions: update OpenSSL to 3.0.1
  * CI: github: switch to OpenSSL 3.0.0
  * CI: github actions: relax OpenSSL-3.0.0 version comparision
  * CI: github actions: -Wno-deprecated-declarations with OpenSSL 3.0.0
  * CI: github actions: add OpenSSL-3.0.0 builds
  * BUILD: adopt script/build-ssl.sh for OpenSSL-3.0.0beta2
  * BUILD: fix compilation for OpenSSL-3.0.0-alpha17
  * CI: ssl: keep the old method for ancient OpenSSL versions
  * CI: ssl: do not needlessly build the OpenSSL docs
  * CI: ssl: enable parallel builds for OpenSSL on Linux
  * BUG/MAJOR: compiler: relax alignment constraints on certain structures
  * BUG/MEDIUM: fd: always align fdtab[] to 64 bytes
  * BUG/MEDIUM: resolvers: Really ignore trailing dot in domain names
  * BUG/MINOR: sink: Use the right field in appctx context in release callback
  * BUG/MINOR: mworker: fix a FD leak of a sockpair upon a failed reload
  * BUG/MEDIUM: mworker: close unused transferred FDs on load failure
  * MINOR: sock: move the unused socket cleaning code into its own function
  * [RELEASE] Released version 2.4.13
  * BUG/MINOR: mux-h2: update the session's idle delay before creating the stream
  * BUG/MEDIUM: h2/hpack: fix emission of HPACK DTSU after settings change
  * REGTESTS: peers: leave a bit more time to peers to synchronize
  * BUG/MAJOR: spoe: properly detach all agents when releasing the applet
  * BUG/MAJOR: http/htx: prevent unbounded loop in http_manage_server_side_cookies
  * BUG/MEDIUM: listener: read-lock the listener during accept()
  * MINOR: listener: replace the listener's spinlock with an rwlock
  * BUG/MINOR: mworker: does not erase the pidfile upon reload
  * BUG/MAJOR: sched: prevent rare concurrent wakeup of multi-threaded tasks
  * DEBUG: pools: replace the link pointer with the caller's address on pool_free()
  * DEBUG: pools: let's add reverse mapping from cache heads to thread and pool
  * DEBUG: pools: add extra sanity checks when picking objects from a local cache
  * BUG/MINOR: pools: always flush pools about to be destroyed
  * BUG/MEDIUM: mworker: don't lose the stats socket on failed reload
  * DEBUG: pools: add new build option DEBUG_POOL_INTEGRITY
  * BUILD: debug/cli: condition test of O_ASYNC to its existence
  * DEBUG: cli: add a new "debug dev fd" expert command
  * MEDIUM: h2/hpack: emit a Dynamic Table Size Update after settings change
  * BUG/MEDIUM: mcli: always realign wrapping buffers before parsing them
  * BUG/MEDIUM: mcli: do not try to parse empty buffers
  * BUG/MEDIUM: cli: Never wait for more data on client shutdown
  * BUG/MINOR: cli: avoid O(bufsize) parsing cost on pipelined commands
  * MINOR: channel: add new function co_getdelim() to support multiple delimiters
  * MEDIUM: cli: yield between each pipelined command
  * BUG/MEDIUM: server: avoid changing healthcheck ctx with set server ssl
  * BUILD/MINOR: fix solaris build with clang.
  * BUG/MEDIUM: htx: Adjust length to add DATA block in an empty HTX buffer
  * BUG/MEDIUM: connection: properly leave stopping list on error
  * [RELEASE] Released version 2.4.12
  * BUG/MAJOR: mux-h1: Don't decrement .curr_len for unsent data
  * BUG/MEDIUM: mworker: don't use _getsocks in wait mode
  * [RELEASE] Released version 2.4.11
  * BUG/MEDIUM: http-ana: Preserve response's FLT_END analyser on L7 retry
  * BUG/MINOR: cli: fix _getsocks with musl libc
  * BUILD/MINOR: tools: solaris build fix on dladdr.
  * BUILD/MINOR: cpuset FreeBSD 14 build fix.
  * BUG/MEDIUM: ssl: free the ckch instance linked to a server
  * BUG/MINOR: ssl: free the fields in srv-&gt;ssl_ctx
  * MINOR: debug: add support for -dL to dump library names at boot
  * MINOR: debug: add ability to dump loaded shared libraries
  * MINOR: compat: detect support for dl_iterate_phdr()
  * BUG/MINOR: mux-h1: Fix splicing for messages with unknown length
  * BUG/MEDIUM: mux-h1: Fix splicing by properly detecting end of message
  * BUILD: makefile: add -Wno-atomic-alignment to work around clang abusive warning
  * MINOR: proxy: add option idle-close-on-response
  * REGTESTS: ssl: fix ssl_default_server.vtc
  * BUG/MEDIUM: ssl: initialize correctly ssl w/ default-server
  * DOC: fix misspelled keyword "resolve_retries" in resolvers
  * BUILD: ssl: unbreak the build with newer libressl
  * BUILD: cli: clear a maybe-unused  warning on some older compilers
  * BUG/MINOR: pools: don't mark ourselves as harmless in DEBUG_UAF mode
  * BUG/MEDIUM: backend: fix possible sockaddr leak on redispatch
  * [RELEASE] Released version 2.4.10
  * BUG/MINOR: backend: restore the SF_SRV_REUSED flag original purpose
  * BUG/MINOR: backend: do not set sni on connection reuse
  * MINOR: pools: work around possibly slow malloc_trim() during gc
  * BUG/MEDIUM: mworker/cli: crash when trying to access an old PID in prompt mode
  * DOC: config: retry-on list is space-delimited
  * DOC: config: Specify %Ta is only available in HTTP mode
  * DOC: spoe: Clarify use of the event directive in spoe-message section
  * BUG/MINOR: cli/server: Don't crash when a server is added with a custom id
  * IMPORT: slz: use the correct CRC32 instruction when running in 32-bit mode
  * BUILD: tree-wide: avoid warnings caused by redundant checks of obj_types
  * MINOR: cli: "show version" displays the current process version
  * CI: Github Actions: temporarily disable BoringSSL builds
  * BUILD: bug: Fix error when compiling with -DDEBUG_STRICT_NOCRASH
  * MINOR: mux-h1: Improve H1 traces by adding info about http parsers
  * BUG/MAJOR: segfault using multiple log forward sections.
  * BUG/MEDIUM: resolvers: Detach query item on response error
  * BUG/MINOR: server: Don't rely on last default-server to init server SSL context
  * BUG/MEDIUM: cli: Properly set stream analyzers to process one command at a time
  * BUILD/MINOR: server: fix compilation without SSL
  * [RELEASE] Released version 2.4.9
  * BUG/MINOR: cache: Fix loop on cache entries in "show cache"
  * MINOR: promex: backend aggregated server check status
  * MINOR: server: add ws keyword
  * MEDIUM: server/backend: implement websocket protocol selection
  * MINOR: connection: add alternative mux_ops param for conn_install_mux_be
  * MINOR: connection: implement function to update ALPN
  * MINOR: stream/mux: implement websocket stream flag
  * BUG/MINOR: ssl: make SSL counters atomic
  * MINOR: shctx: add a few BUG_ON() for consistency checks
  * BUG/MINOR: shctx: do not look for available blocks when the first one is enough
  * BUG/MEDIUM: shctx: leave the block allocator when enough blocks are found
  * BUG/MEDIUM: cache/cli: make "show cache" thread-safe
  * BUG/MEDIUM: mux-h2: always process a pending shut read
  * BUG/MEDIUM: ssl: abort with the correct SSL error when SNI not found
  * CLEANUP: ssl: fix wrong #else commentary
  * BUG/MINOR: ssl: free correctly the sni in the backend SSL cache
  * BUG/MEDIUM: ssl: backend TLS resumption with sni and TLSv1.3
  * BUILD: makefile: simplify detection of libatomic
  * BUG/MEDIUM: mux-h1: Handle delayed silent shut in h1_process() to release H1C
  * BUG/MINOR: stick-table/cli: Check for invalid ipv6 key
  * BUG/MEDIUM: connection: make cs_shutr/cs_shutw//cs_close() idempotent
  * BUG/MINOR: mux-h2: Fix H2_CF_DEM_SHORT_READ value
  * BUG/MINOR: mworker: doesn't launch the program postparser
  * BUG/MEDIUM: conn-stream: Don't reset CS flags on close
  * MINOR: mux-h1: Slightly Improve H1 traces
  * DOC: lua: Be explicit with the Reply object limits
  * Revert "BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back"
  * BUG/MINOR: http-ana: Apply stop to the current section for http-response rules
  * DOC: config: Fix typo in ssl_fc_unique_id description
  * BUG/MINOR: cache: properly ignore unparsable max-age in quotes
  * BUG/MINOR: resolvers: throw log message if trash not large enough for query
  * BUG/MINOR: resolvers: fix sent messages were counted twice
  * BUG/MEDIUM: mux-h2: reject upgrade if no RFC8441 support
  * MINOR: mux-h2: add trace on extended connect usage
  * MINOR: mux-h2: perform a full cycle shutdown+drain on close
  * MINOR: connection: add a new CO_FL_WANT_DRAIN flag to force drain on close</changelog>
  <changelog author="varkoly@suse.com" date="1692014400">- VUL-0: CVE-2023-40225: haproxy: reject any empty content-length header value
  (bsc#1214102) Apply upstream patch adapted for 2.4.22 (patch h2_parse_cont_len_header() instead of http_parse_cont_len_header())
  Add patch: 0001-BUG-MAJOR-http-reject-any-empty-content-length-heade.patch</changelog>
  <changelog author="varkoly@suse.com" date="1701345600">- VUL-0: CVE-2023-45539: haproxy: misinterpretation of a path_end rule with # as part of the URI component
  (bsc#1217653) Apply upstream patch.
  Add patch: 0001-BUG-MINOR-h1-do-not-accept-as-part-of-the-URI-compon.patch</changelog>
</package>
<package pkgid="70a46549d0ba581bd6318d12f1a04a0405626e45e8e7dd280df45ec3a2b06d41" name="haproxy" arch="s390x">
  <version epoch="0" ver="2.4.22+git0.f8e3218e2" rel="150400.3.19.1"/>
  <changelog author="mrueckert@suse.de" date="1614772800">- Update to version 2.3.6+git0.7851701ed:
  * [RELEASE] Released version 2.3.6
  * BUG/MINOR: http-ana: Don't increment HTTP error counter on read error/timeout
  * BUG/MINOR: mux-h2: Fix typo in scheme adjustment
  * DOC: spoe: Add a note about fragmentation support in HAProxy
  * BUG/MEDIUM: spoe: Kill applets if there are pending connections and nbthread &gt; 1
  * BUG/MINOR: connection: Use the client's dst family for adressless servers
  * BUG/MINOR: tcp-act: Don't forget to set the original port for IPv4 set-dst rule
  * BUG/MINOR: http-ana: Only consider dst address to process originalto option
  * BUG/MINOR: mux-h1: Immediately report H1C errors from h1_snd_buf()
  * BUG/MINOR: stats: fix compare of no-maint url suffix
  * CLEANUP: muxes: Remove useless if condition in show_fd function
  * BUG/MINOR: ssl: potential null pointer dereference in ckchs_dup()
  * BUG/MEDIUM: resolvers: Reset address for unresolved servers
  * BUG/MEDIUM: resolvers: Reset server address and port for obselete SRV records
  * BUG/MINOR: resolvers: new callback to properly handle SRV record errors
  * BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record
  * BUG/MINOR: resolvers: Fix condition to release received ARs if not assigned
  * BUG/MINOR: fd: properly wait for !running_mask in fd_set_running_excl()
  * BUG/MINOR: proxy: wake up all threads when sending the hard-stop signal
  * BUG/MEDIUM: cli/shutdown sessions: make it thread-safe
  * BUG/MEDIUM: proxy: use thread-safe stream killing on hard-stop
  * BUG/MEDIUM: vars: make functions vars_get_by_{name,desc} thread-safe
  * BUG/MINOR: sample: secure convs that accept base64 string and var name as args
  * MINOR: Configure the `cpp` userdiff driver for *.[ch] in .gitattributes
  * BUG/MINOR: ssl/cli: potential null pointer dereference in "set ssl cert"
  * BUG/MEDIUM: mux-h1: Fix handling of responses to CONNECT other than 200-ok
  * BUG/MINOR: server: Be sure to cut the last parsed field of a server-state line
  * BUG/MINOR: server: Init params before parsing a new server-state line
  * BUG/MINOR: http-rules: Always replace the response status on a return action
  * BUG/MEDIUM: spoe: Resolve the sink if a SPOE logs in a ring buffer
  * BUG/MEDIUM: lists: Avoid an infinite loop in MT_LIST_TRY_ADDQ().
  * DOC: explain the relation between pool-low-conn and tune.idle-pool.shared
  * BUILD: ssl: introduce fine guard for OpenSSL specific SCTL functions
  * BUG/MINOR: sample: Always consider zero size string samples as unsafe
  * BUG/MEDIUM: checks: don't needlessly take the server lock in health_adjust()
  * BUG/MINOR: checks: properly handle wrapping time in __health_adjust()
  * BUG/MINOR: session: atomically increment the tracked sessions counter
  * BUG/MINOR: server: Remove RMAINT from admin state when loading server state
  * CLEANUP: channel: fix comment in ci_putblk.
  * DOC: tune: explain the origin of block size for ssl.cachesize
  * BUG/MINOR: server: Don't call fopen() with server-state filepath set to NULL
  * BUG/MINOR: cfgparse: do not mention "addr:port" as supported on proxy lines
  * BUG/MINOR: stats: revert the change on ST_CONVDONE
  * BUG/MEDIUM: config: don't pick unset values from last defaults section
  * CLEANUP: deinit: release global and per-proxy server-state variables on deinit
  * BUG/MINOR: server: Fix server-state-file-name directive
  * BUG/MINOR: backend: hold correctly lock when killing idle conn
  * BUG/MINOR: tools: Fix a memory leak on error path in parse_dotted_uints()
  * BUG/MINOR: server: re-align state file fields number
  * BUG/MEDIUM: mux-h1: Always set CS_FL_EOI for response in MSG_DONE state
  * BUG/MINOR: http-ana: Don't increment HTTP error counter on internal errors
  * BUG/MINOR: intops: fix mul32hi()'s off-by-one
  * BUILD: ssl: guard SSL_CTX_set_msg_callback with SSL_CTRL_SET_MSG_CALLBACK macro
  * BUILD: ssl: guard SSL_CTX_add_server_custom_ext with special macro
  * BUILD: ssl: fix typo in HAVE_SSL_CTX_ADD_SERVER_CUSTOM_EXT macro
  * MINOR: check: do not ignore a connection header for http-check send</changelog>
  <changelog author="mrueckert@suse.de" date="1615896000">- Update to version 2.3.7+git0.2d39ce334:
  * [RELEASE] Released version 2.3.7
  * BUG/MINOR: resolvers: Add missing case-insensitive comparisons of DNS hostnames
  * MINOR: resolvers: Don't try to match immediatly renewed ADD items
  * MINOR: resolvers: Use milliseconds for cached items in resolver responses
  * BUG/MEDIUM: resolvers: Skip DNS resolution at startup if SRV resolution is set
  * BUG/MEDIUM: resolvers: Don't release resolution from a requester callbacks
  * MINOR: resolvers: Directly call srvrq_update_srv_state() when possible
  * MINOR: resolvers: Add function to change the srv status based on SRV resolution
  * MINOR: resolvers: Purge answer items when a SRV resolution triggers an error
  * MINOR: resolvers: Use a function to remove answers attached to a resolution
  * BUG/MEDIUM: resolvers: Trigger a DNS resolution if an ADD item is obsolete
  * BUG/MINOR; resolvers: Ignore DNS resolution for expired SRV item
  * MINOR: resolvers: new function find_srvrq_answer_record()
  * BUG/MEDIUM: resolvers: Fix the loop looking for an existing ADD item
  * BUG/MEDIUM: resolvers: Don't set an address-less server as UP
  * BUG/MINOR: resolvers: Unlink DNS resolution to set RMAINT on SRV resolution
  * BUG/MINOR: resolvers: Reset server address on DNS error only on status change
  * BUG/MINOR: resolvers: Consider server to have no IP on DNS resolution error
  * Revert "BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record"
  * CLEANUP: tcp-rules: add missing actions in the tcp-request error message
  * BUG/MINOR: tcpcheck: Fix double free on error path when parsing tcp/http-check
  * BUG/MINOR: session: Add some forgotten tests on session's listener
  * BUG/MINOR: proxy/session: Be sure to have a listener to increment its counters
  * BUG/MINOR: tcpcheck: Update .health threshold of agent inside an agent-check
  * BUG/MEDIUM: filters: Set CF_FL_ANALYZE on channels when filters are attached
  * BUILD: atomic/arm64: force the register pairs to use in __ha_cas_dw()
  * BUG/MEDIUM: stick-tables: fix ref counter in table entry using multiple http tracksc.
  * OPTIM: task: automatically adjust the default runqueue-depth to the threads
  * MINOR: task: give the scheduler a bit more flexibility in the runqueue size
  * MEDIUM: task: remove the tasks_run_queue counter and have one per thread
  * MEDIUM: ssl: implement xprt_set_used and xprt_set_idle to relax context checks
  * MINOR: xprt: add new xprt_set_idle and xprt_set_used methods
  * MEDIUM: muxes: mark idle conns tasklets with TASK_F_USR1
  * MINOR: task: add an application specific flag to the state: TASK_F_USR1
  * BUG/MEDIUM: ssl: properly remove the TASK_HEAVY flag at end of handshake
  * MINOR: ssl: mark the SSL handshake tasklet as heavy
  * MINOR: task: limit the number of subsequent heavy tasks with flag TASK_HEAVY
  * MEDIUM: backend: use a trylock when trying to grab an idle connection
  * MINOR: pools: double the local pool cache size to 1 MB
  * MEDIUM: pools: add CONFIG_HAP_NO_GLOBAL_POOLS and CONFIG_HAP_GLOBAL_POOLS
  * MEDIUM: streams: do not use the streams lock anymore
  * MINOR: streams: use one list per stream instead of a global one
  * MINOR: cli/streams: make "show sess" dump all streams till the new epoch
  * MINOR: stream: add an "epoch" to figure which streams appeared when
  * MINOR: dynbuf: pass offer_buffers() the number of buffers instead of a threshold
  * MINOR: dynbuf: use regular lists instead of mt_lists for buffer_wait
  * MINOR: dynbuf: make the buffer wait queue per thread
  * OPTIM: lb-leastconn: do not unlink the server if it did not change
  * OPTIM: lb-leastconn: do not take the server lock on take_conn/drop_conn
  * OPTIM: lb-first: do not take the server lock on take_conn/drop_conn
  * MINOR: lb/api: let callers of take_conn/drop_conn tell if they have the lock
  * MINOR: server: move actconns to the per-thread structure
  * OPTIM: server: switch the actconn list to an mt-list
  * MINOR: listener: refine the default MAX_ACCEPT from 64 to 4
  * MINOR: tasks: refine the default run queue depth
  * BUG/MEDIUM: session: NULL dereference possible when accessing the listener
  * MINOR: atomic: implement a more efficient arm64 __ha_cas_dw() using pairs
  * MINOR: atomic: add armv8.1-a atomics variant for cas-dw
  * BUG/MINOR: mt-list: always perform a cpu_relax call on failure
  * REORG: atomic: reimplement pl_cpu_relax() from atomic-ops.h
  * BUG/MINOR: ssl: don't truncate the file descriptor to 16 bits in debug mode
  * BUG/MINOR: hlua: Don't strip last non-LWS char in hlua_pushstrippedstring()
  * BUG/MINOR: backend: fix condition for reuse on mode HTTP</changelog>
  <changelog author="mrueckert@suse.de" date="1616673600">- Update to version 2.3.8+git0.e572195c7:
  * [RELEASE] Released version 2.3.8
  * BUG/MINOR: http_fetch: make hdr_ip() reject trailing characters
  * MINOR: tools: make url2ipv4 return the exact number of bytes parsed
  * BUG/MEDIUM: thread: Fix a deadlock if an isolated thread is marked as harmless
  * BUG/MEDIUM: fd: Take the fd_mig_lock when closing if no DWCAS is available.
  * CLEANUP: fd: remove unused fd_set_running_excl()
  * BUG/MEDIUM: fd: do not wait on FD removal in fd_delete()
  * MINOR: fd: remove the unneeded running bit from fd_insert()
  * MINOR: fd: make fd_clr_running() return the remaining running mask
  * BUG/MEDIUM: lua: Always init the lua stack before referencing the context
  * BUG/MEDIUM: debug/lua: Use internal hlua function to dump the lua traceback
  * MINOR: lua: Slightly improve function dumping the lua traceback
  * BUILD: ssl: guard ecdh functions with SSL_CTX_set_tmp_ecdh macro
  * BUG/MINOR: ssl: Prevent disk access when using "add ssl crt-list"
  * BUG/MEDIUM: debug/lua: Don't dump the lua stack if not dumpable
  * MEDIUM: lua: Use a per-thread counter to track some non-reentrant parts of lua
  * MINOR/BUG: mworker/cli: do not use the unix_bind prefix for the master CLI socket
  * BUG/MINOR: protocol: add missing support of dgram unix socket.
  * BUG/MEDIUM: freq_ctr/threads: use the global_now_ms variable
  * MINOR: time: also provide a global, monotonic global_now_ms timer
  * BUG/MEDIUM: mux-fcgi: Fix locking of idle_conns lock in the FCGI I/O callback
  * BUG/MINOR: freq_ctr/threads: make use of the last updated global time
  * MINOR: time: export the global_now variable</changelog>
  <changelog author="mrueckert@suse.de" date="1617105600">- Update to version 2.3.9+git1.afb63bc04:
  * BUILD: backend: fix build breakage in idle conn locking fix
  * [RELEASE] Released version 2.3.9
  * BUG/MEDIUM: time: make sure to always initialize the global tick
  * BUG/MINOR: stats: Apply proper styles in HTML status page.
  * BUG/MINOR: payload: Wait for more data if buffer is empty in payload/payload_lv
  * MEDIUM: backend: use a trylock to grab a connection on high FD counts as well
  * BUG/MEDIUM: mux-h1: make h1_shutw_conn() idempotent</changelog>
  <changelog author="mrueckert@suse.de" date="1619179200">- Update to version 2.3.10+git0.4764f0e4e:
  * [RELEASE] Released version 2.3.10
  * BUG/MEDIUM: peers: re-work refcnt on table to protect against flush
  * BUG/MEDIUM: peers: re-work connection to new process during reload.
  * BUG/MINOR: peers: remove useless table check if initial resync is finished
  * BUG/MEDIUM: mux-h2: Properly handle shutdowns when received with data
  * BUG/MINOR: mworker: don't use oldpids[] anymore for reload
  * BUG/MINOR: mworker/init: don't reset nb_oldpids in non-mworker cases
  * BUG/MEDIUM: config: fix cpu-map notation with both process and threads
  * BUG/MEDIUM: mux-h2: Fix dfl calculation when merging CONTINUATION frames
  * BUG/MAJOR: mux-h2: Properly detect too large frames when decoding headers
  * BUG/MINOR: server: free srv.lb_nodes in free_server
  * BUG/MINOR: mux-h1: Release idle server H1 connection if data are received
  * BUG/MINOR: logs: Report the true number of retries if there was no connection
  * BUG/MINOR: http_htx: Remove BUG_ON() from http_get_stline() function
  * BUG/MINOR: http-fetch: Make method smp safe if headers were already forwarded
  * BUG/MINOR: ssl-samples: Fix ssl_bc_* samples when called from a health-check
  * MINOR: connection: Make bc_http_major compatible with tcp-checks
  * BUG/MINOR: connection: Fix fc_http_major and bc_http_major for TCP connections
  * MINOR: logs: Add support of checks as session origin to format lf strings
  * BUG/MINOR: checks: Set missing id to the dummy checks frontend
  * BUG/MEDIUM: threads: Ignore current thread to end its harmless period
  * DOC: ssl: Certificate hot update only works on fronted certificates
  * BUG/MEDIUM: sample: Fix adjusting size in field converter
  * MINOR: No longer rely on deprecated sample fetches for predefined ACLs
  * DOC: clarify that compression works for HTTP/2
  * BUG/MINOR: tools: fix parsing "us" unit for timers
  * CONTRIB: halog: fix issue with array of type char
  * REGTESTS: ssl: mark set_ssl_cert_bundle.vtc as broken
  * DOC: Explicitly state only IPv4 are supported by forwardfor/originalto options
  * REGTESTS: ssl: "set ssl cert" and multi-certificates bundle
  * BUG/MINOR: ssl: Add missing free on SSL_CTX in ckch_inst_free
  * BUG/MINOR: http_fetch: make hdr_ip() resistant to empty fields
  * BUG/MINOR: ssl: Prevent removal of crt-list line if the instance is a default one
  * BUG/MINOR: ssl: Fix update of default certificate
  * BUILD: tcp: use IPPROTO_IPV6 instead of SOL_IPV6 on FreeBSD/MacOS
  * BUG/MINOR: tcp: fix silent-drop workaround for IPv6</changelog>
  <changelog author="mrueckert@suse.de" date="1620993600">- Update to version 2.4.0+git0.6cbbecf09:
  https://www.haproxy.com/blog/announcing-haproxy-2-4/
  for all the details see /usr/share/doc/packages/haproxy/CHANGELOG
- refreshed patches to apply cleanly again
  haproxy-1.6.0-makefile_lib.patch
  haproxy-1.6.0-sec-options.patch
  lua54.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1623931200">- Update to version 2.4.1+git0.1ce7d4925:
  * [RELEASE] Released version 2.4.1
  * BUG/MINOR: mux-h2/traces: bring back the lost "sent H2 REQ/RES" traces
  * BUG/MINOR: mux-h2/traces: bring back the lost "rcvd H2 REQ" trace
  * MINOR: mux-h2: obey http-ignore-probes during the preface
  * BUG/MINOR: stats: make "show stat typed desc" work again
  * CLEANUP: mux-h2/traces: better align user messages
  * MINOR: mux-h2/trace: report a few connection-level info during h2_init()
  * MINOR: connection: add helper conn_append_debug_info()
  * BUG/MINOR: server: explicitly set "none" init-addr for dynamic servers
  * BUG/MINOR: mux-h1: do not skip the error response on bad requests
  * MINOR: backend: only skip LB when there are actual connections
  * BUG/MAJOR: queue: set SF_ASSIGNED when setting strm-&gt;target on dequeue
  * CLEANUP: global: remove unused definition of stopping_task[]
  * BUG/MINOR: mworker: fix typo in chroot error message
  * BUG/MINOR: ssl: use atomic ops to update global shctx stats
  * BUG/MEDIUM: shctx: use at least thread-based locking on USE_PRIVATE_CACHE
  * BUG/MEDIUM: server: do not auto insert a dynamic server in px addr_node
  * BUG/MINOR: server: do not keep an invalid dynamic server in px ids tree
  * BUG/MEDIUM: server: do not forget to generate the dynamic servers ids
  * BUG/MEDIUM: server: clear dynamic srv on delete from proxy id/name trees
  * BUG/MEDIUM: server: extend thread-isolate over much of CLI 'add server'
  * BUG/MINOR: stick-table: insert srv in used_name tree even with fixed id
  * DOC: lua: Add a warning about buffers modification in HTTP
  * BUG/MAJOR: resolvers: segfault using server template without SRV RECORDs
  * MEDIUM: resolvers: add a ref between servers and srv request or used SRV record
  * MEDIUM: resolvers: add a ref on server to the used A/AAAA answer item
  * BUG/MINOR: resolvers: answser item list was randomly purged or errors
  * CLEANUP: l7-retries: do not test the buffer before calling b_alloc()
  * BUG/MINOR: mux-fcgi: Expose SERVER_SOFTWARE parameter by default
  * BUG/MAJOR: htx: Fix htx_defrag() when an HTX block is expanded
  * CLEANUP: pools: remove now unused seq and pool_free_list
  * BUG/MAJOR: pools: fix possible race with free() in the lockless variant
  * MEDIUM: pools: use a single pool_gc() function for locked and lockless
  * MINOR: pools: call malloc_trim() under thread isolation
  * MINOR: pools: do not maintain the lock during pool_flush()
  * BUG/MINOR: pools: make DEBUG_UAF always write to the to-be-freed location
  * BUG/MINOR: pools: fix a possible memory leak in the lockless pool_flush()
  * BUG/MEDIUM: compression: Add a flag to know the filter is still processing data
  * BUG/MEDIUM: compression: Properly get the next block to iterate on payload
  * BUG/MEDIUM: compression: Fix loop skipping unused blocks to get the next block
  * BUG/MEDIUM: opentracing: initialization before establishing daemon and/or chroot mode
  * Revert "BUG/MINOR: opentracing: initialization after establishing daemon mode"
  * BUG/MINOR: ssl: OCSP stapling does not work if expire too far in the future
  * BUILD: make tune.ssl.keylog available again
  * DOC: use the req.ssl_sni in examples
  * MINOR: errors: allow empty va_args for diag variadic macro
  * BUG/MAJOR: stream-int: Release SI endpoint on server side ASAP on retry
  * DOC/MINOR: move uuid in the configuration to the right alphabetical order
  * BUG/MINOR: vars: Be sure to have a session to get checks variables
  * CLEANUP: http-ana: Remove useless if statement about L7 retries
  * BUG/MINOR: proxy: Missing calloc return value check in chash_init_server_tree
  * BUG/MINOR: http: Missing calloc return value check in make_arg_list
  * BUG/MINOR: http: Missing calloc return value check while parsing redirect rule
  * BUG/MINOR: worker: Missing calloc return value check in mworker_env_to_proc_list
  * BUG/MINOR: compression: Missing calloc return value check in comp_append_type/algo
  * BUG/MINOR: http: Missing calloc return value check while parsing tcp-request rule
  * BUG/MINOR: http: Missing calloc return value check while parsing tcp-request/tcp-response
  * BUG/MINOR: proxy: Missing calloc return value check in proxy_defproxy_cpy
  * BUG/MINOR: proxy: Missing calloc return value check in proxy_parse_declare
  * BUG/MINOR: http: Missing calloc return value check in parse_http_req_capture
  * BUG/MINOR: ssl: Missing calloc return value check in ssl_init_single_engine
  * BUG/MINOR: peers: Missing calloc return value check in peers_register_table
  * BUG/MINOR: server: Missing calloc return value check in srv_parse_source
  * DOC: intro: Fix typo in starter guide
  * MINOR: cfgparse: Fail when encountering extra arguments in macro
  * MINOR: http-ana: Perform L7 retries because of status codes in response analyser
  * BUG/MINOR: http-ana: Handle L7 retries on refused early data before K/A aborts
  * BUG/MINOR: http-ana: Send the right error if max retries is reached on L7 retry
  * Revert "MEDIUM: http-ana: Deal with L7 retries in HTTP analysers"
  * BUG/MINOR: http-comp: Preserve HTTP_MSGF_COMPRESSIONG flag on the response
  * BUG/MEDIUM: filters: Exec pre/post analysers only one time per filter
  * BUILD/MINOR: opentracing: fixed build when using clang
  * BUG/MAJOR: server: prevent deadlock when using 'set maxconn server'
  * BUG/MEDIUM: ebtree: Invalid read when looking for dup entry</changelog>
  <changelog author="mrueckert@suse.de" date="1625659200">- Update to version 2.4.2+git0.553dee326:
  * [RELEASE] Released version 2.4.2
  * REGTESTS: add http scheme-based normalization test
  * MEDIUM: h2: apply scheme-based normalization on h2 requests
  * MEDIUM: h1-htx: apply scheme-based normalization on h1 requests
  * MEDIUM: http: implement scheme-based normalization
  * MINOR: http: implement http_get_scheme
  * Revert "MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules"
  * BUG/MINOR: cli: fix server name output in "show fd"
  * BUG/MEDIUM: sock: make sure to never miss early connection failures
  * DOC: stick-table: add missing documentation about gpt0 stored type
  * BUG/MINOR: peers: fix data_type bit computation more than 32 data_types
  * BUG/MINOR: stick-table: fix several printf sign errors dumping tables
  * DOC: config: use CREATE USER for mysql-check
  * BUG/MEDIUM: resolvers: Make 1st server of a template take part to SRV resolution
  * BUG/MINOR: mqtt: Support empty client ID in CONNECT message
  * BUG/MINOR: mqtt: Fix parser for string with more than 127 characters
  * BUG/MINOR: tcpcheck: Fix numbering of implicit HTTP send/expect rules
  * BUILD: Makefile: fix linkage for Haiku.
  * BUG/MINOR: checks: return correct error code for srv_parse_agent_check
  * MINOR: resolvers: Reset server IP on error in resolv_get_ip_from_response()
  * BUG/MINOR: resolvers: Reset server IP when no ip is found in the response
  * BUG/MINOR: resolvers: Always attach server on matching record on resolution
  * CLEANUP: dns: Remove a forgotten debug message
  * DOC: config: Add missing actions in "tcp-request session" documentation
  * MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules
  * REGTESTS: fix maxconn update with agent-check
  * BUG/MAJOR: server: fix deadlock when changing maxconn via agent-check
  * BUG/MINOR: cache: Correctly handle existing-but-empty 'accept-encoding' header
  * BUG/MINOR: server/cli: Fix locking in function processing "set server" command
  * BUG/MINOR: resolvers: Use resolver's lock in resolv_srvrq_expire_task()
  * BUG/MEDIUM: resolvers: Add a task on servers to check SRV resolution status
  * MINOR: resolvers: Remove server from named_servers tree when removing a SRV item
  * MINOR: resolvers: Clean server in a dedicated function when removing a SRV item
  * BUG/MEDIUM: server/cli: Fix ABBA deadlock when fqdn is set from the CLI
  * BUG/MINOR: server: Forbid to set fqdn on the CLI if SRV resolution is enabled
  * BUG/MINOR: server-state: load SRV resolution only if params match the config</changelog>
  <changelog author="mrueckert@suse.de" date="1629201600">- Update to version 2.4.3+git0.4dd5a5a6c:
    CVE-2021-39240 CVE-2021-39241 CVE-2021-39242
    (boo#1189366 boo#1189548 boo#1189549)
  * [RELEASE] Released version 2.4.3
  * REGTESTS: add a test to prevent h2 desync attacks
  * BUG/MEDIUM: h2: give :authority precedence over Host
  * BUG/MAJOR: h2: enforce stricter syntax checks on the :method pseudo-header
  * BUG/MAJOR: h2: verify that :path starts with a '/' before concatenating it
  * BUG/MAJOR: h2: verify early that non-http/https schemes match the valid syntax
  * MINOR: http: add a new function http_validate_scheme() to validate a scheme
  * DOC/MINOR: fix typo in management document
  * CLEANUP: assorted typo fixes in the code and comments
  * BUG/MEDIUM: cfgcheck: verify existing log-forward listeners during config check
  * BUG/MEDIUM: spoe: Fix policy to close applets when SPOE connections are queued
  * DOC: config: Fix 'http-response send-spoe-group' documentation
  * DOC: Improve the lua documentation
  * BUG/MINOR: tcpcheck: Properly detect pending HTTP data in output buffer
  * BUG/MINOR: buffer: fix buffer_dump() formatting
  * BUG/MEDIUM: spoe: Create a SPOE applet if necessary when the last one is released
  * MINOR: spoe: Add a pointer on the filter config in the spoe_agent structure
  * ADMIN: dyncookie: implement a simple dynamic cookie calculator
  * MINOR: server: unmark deprecated on enable health/agent cli
  * BUG/MINOR: server: update last_change on maint-&gt;ready transitions too
  * BUG/MINOR: server: remove srv from px list on CLI 'add server' error
  * BUILD: opentracing: fixed build when using pkg-config utility
  * DOC: internals: document the FD takeover process
  * BUG/MINOR: fd: protect fd state harder against a concurrent takeover
  * BUG/MINOR: pollers: always program an update for migrated FDs
  * BUG/MINOR: poll: fix abnormally high skip_fd counter
  * BUG/MINOR: select: fix excess number of dead/skip reported
  * BUG/MEDIUM: pollers: clear the sleeping bit after waking up, not before
  * BUG/MEDIUM: connection: close a rare race between idle conn close and takeover
  * BUG/MINOR: connection: Add missing error labels to conn_err_code_str
  * BUG/MEDIUM: mux-h2: Handle remaining read0 cases on partial frames
  * BUG/MINOR: mux-h1: Be sure to swap H1C to splice mode when rcv_pipe() is called
  * BUG/MINOR: mux-h2: Obey dontlognull option during the preface
  * BUG/MINOR: mux-h1: Obey dontlognull option for empty requests
  * BUG/MINOR: systemd: must check the configuration using -Ws
  * BUG/MINOR: resolvers: Use a null-terminated string to lookup in servers tree
  * BUG/MINOR: check: fix the condition to validate a port-less server
  * BUG/MINOR: stats: Add missing agent stats on servers
  * BUG/MEDIUM: ssl_sample: fix segfault for srv samples on invalid request
  * BUILD/MINOR: memprof fix macOs build.
  * BUG/MINOR: mworker: do not export HAPROXY_MWORKER_REEXEC across programs
  * BUG/MEDIUM: mworker: do not register an exit handler if exit is expected
  * BUILD: lua: silence a build warning with TCC
  * BUILD: add detection of missing important CFLAGS
  * BUG/MINOR: ssl: Default-server configuration ignored by server
  * MINOR: mux_h2: define config to disable h2 websocket support
  * BUILD: http_htx: fix ci compilation error with isdigit for Windows</changelog>
  <changelog author="mrueckert@suse.de" date="1631016000">- Update to version 2.4.4+git0.acb1d0bea: CVE-2021-40346 (boo#1189877)
  * [RELEASE] Released version 2.4.4
  * Revert "BUG/MINOR: stream-int: Don't block reads in si_update_rx() if chn may receive"
  * BUG/MAJOR: htx: fix missing header name length check in htx_add_header/trailer
  * CLEANUP: htx: remove comments about "must be &lt; 256 MB"
  * BUG/MINOR: config: reject configs using HTTP with bufsize &gt;= 256 MB
  * DOC: configuration: remove wrong tcp-request examples in tcp-response
  * BUG/MINOR: vars: fix set-var/unset-var exclusivity in the keyword parser
  * CLEANUP: Add missing include guard to signal.h
  * BUG/MINOR: tools: Fix loop condition in dump_text()
  * BUG/MINOR threads: Use get_(local|gm)time instead of (local|gm)time
  * BUG/MINOR: ebtree: remove dependency on incorrect macro for bits per long
  * MINOR: time: add report_idle() to report process-wide idle time
  * BUG/MINOR: time: fix idle time computation for long sleeps
  * BUG/MINOR: lua: use strlcpy2() not strncpy() to copy sample keywords
  * MINOR: compiler: implement an ONLY_ONCE() macro
  * BUG/MINOR: base64: base64urldec() ignores padding in output size check
  * BUG/MEDIUM: base64: check output boundaries within base64{dec,urldec}
  * BUG/MINOR: stick-table: fix the sc-set-gpt* parser when using expressions
  * MINOR: hlua: take the global Lua lock inside a global function
  * REGTESTS: abortonclose: after retries, 503 is expected, not close
  * REGTESTS: http_upgrade: fix incorrect expectation on TCP-&gt;H1-&gt;H2
  * BUG/MEDIUM: h2: match absolute-path not path-absolute for :path</changelog>
  <changelog author="mrueckert@suse.de" date="1633089600">- Update to version 2.4.5+git0.e74a1b34b:
  * [RELEASE] Released version 2.4.5
  * MINOR: tasks: catch TICK_ETERNITY with BUG_ON() in __task_queue()
  * BUG/MINOR: tcp-rules: Stop content rules eval on read error and end-of-input
  * BUG/MINOR: tcpcheck: Don't use arg list for default proxies during parsing
  * MINOR: arg: Be able to forbid unresolved args when building an argument list
  * BUG/MAJOR: lua: use task_wakeup() to properly run a task once
  * BUG/MEDIUM: lua: fix wakeup condition from sleep()
  * MINOR: Makefile: add MEMORY_POOLS to the list of DEBUG_xxx options
  * DOC: peers: fix doc "enable" statement on "peers" sections
  * BUG/MINOR: mux-h1/mux-fcgi: Sanitize TE header to only send "trailers"
  * MINOR: stream-int: Notify mux when the buffer is not stuck when calling rcv_buf
  * BUG/MEDIUM: stream-int: Defrag HTX message in si_cs_recv() if necessary
  * MINOR: htx: Add a function to know if the free space wraps
  * MINOR: htx: Add an HTX flag to know when a message is fragmented
  * MINOR: stream-int: Set CO_RFL transient/persistent flags apart in si_cs_rcv()
  * BUG/MEDIUM: stream: Stop waiting for more data if SI is blocked on RXBLK_ROOM
  * BUG/MEDIUM: stream-int: Notify stream that the mux wants more room to xfer data
  * BUG/MEDIUM: mux-h1: Adjust conditions to ask more space in the channel buffer
  * BUG/MINOR: stats: use refcount to protect dynamic server on dump
  * MINOR: server: return the next srv instance on free_server
  * BUG/MINOR: server: do not use refcount in free_server in stopping mode
  * MINOR: global: define MODE_STOPPING
  * MINOR: server: implement a refcount for dynamic servers
  * BUG/MINOR: http-ana: increment internal_errors counter on response error
  * BUG/MINOR: h1-htx: Fix a typo when request parser is reset
  * BUG/MEDIUM: leastconn: fix rare possibility of divide by zero
  * BUG/MINOR: server: allow 'enable health' only if check configured
  * BUILD: threads: fix -Wundef for _POSIX_PRIORITY_SCHEDULING on libmusl
  * BUILD: halog: fix a -Wundef warning on non-glibc systems
  * BUILD: compiler: fixed a missing test on  defined(__GNUC__)
  * BUILD: fix dragonfly build again on __read_mostly
  * BUG/MINOR: vars: do not talk about global section in CLI errors for set-var
  * BUG/MINOR: vars: truncate the variable name in error reports about scope.
  * BUG/MINOR: vars: properly set the argument parsing context in the expression
  * MINOR: sample: add missing ARGC_ entries
  * BUG/MINOR: vars: improve accuracy of the rules used to check expression validity
  * BUILD: tools: properly guard __GLIBC__ with defined()
  * BUILD: ssl: fix two remaining occurrences of #if USE_OPENSSL
  * BUILD: ssl: next round of build warnings on LIBRESSL_VERSION_NUMBER
  * BUILD/MINOR: regex: avoid a build warning on USE_PCRE2 with -Wundef
  * IMPORT: slz: silence a build warning with -Wundef
  * BUILD/MINOR: ssl: avoid a build warning on LIBRESSL_VERSION with -Wundef
  * BUILD/MINOR: defaults: eliminate warning on MAXHOSTNAMELEN with -Wundef
  * BUILD: activity: use #ifdef not #if on USE_MEMORY_PROFILING
  * MINOR: proc: setting the process to produce a core dump on FreeBSD.
  * MINOR: tools: add FreeBSD support to get_exec_path()
  * BUILD: tools: get the absolute path of the current binary on NetBSD.
  * BUG/MINOR: flt-trace: fix an infinite loop when random-parsing is set
  * BUG/MINOR: cli/payload: do not search for args inside payload
  * BUILD: ist: prevent gcc11 maybe-uninitialized warning on istalloc
  * BUG/MINOR: connection: prevent null deref on mux cleanup task allocation
  * DOC: management: certificate files must be sanitized before injection
  * BUG/MINOR: tcpcheck: Improve LDAP response parsing to fix LDAP check
  * BUG/MAJOR: mux-h1: Don't eval input data if an error was reported
  * MINOR: pools: use mallinfo2() when available instead of mallinfo()
  * MINOR: pools: automatically disable malloc_trim() with external allocators
  * CLEANUP: pools: factor all malloc_trim() calls into trim_all_pools()
  * BUG/MINOR: compat: make sure __WORDSIZE is always defined
  * BUG/MEDIUM: stream-int: Don't block SI on a channel policy if EOI is reached
  * CLEANUP: mux-h1: Remove condition rejecting upgrade requests with payload
  * MINOR: htx: Skip headers with no value when adding a header list to a message
  * BUG/MEDIUM: mux-h1: Remove "Upgrade:" header for requests with payload
  * BUG/MINOR: systemd: ExecStartPre must use -Ws
  * BUG/MINOR: filters: Set right FLT_END analyser depending on channel
  * BUG/MINOR: filters: Always set FLT_END analyser when CF_FLT_ANALYZE flag is set
  * BUG/MEDIUM: http-ana: Reset channels analysers when returning an error
  * BUG/MINOR: stream: Don't release a stream if FLT_END is still registered
  * BUG/MINOR: lua: Don't yield in channel.append() and channel.set()
  * BUG/MINOR: lua: Yield in channel functions only if lua context can yield
  * MINOR: lua: Add a flag on lua context to know the yield capability at run time</changelog>
  <changelog author="mrueckert@suse.de" date="1633348800">- Update to version 2.4.6+git0.d83fd76a1:
  * [RELEASE] Released version 2.4.6
  * BUG/MEDIUM: filters: Fix a typo when a filter is attached blocking the release</changelog>
  <changelog author="mrueckert@suse.de" date="1633348801">- Update to version 2.4.7+git0.b5e51a5e2:
  * [RELEASE] Released version 2.4.7
  * BUG/MEDIUM: http-ana: Clear request analyzers when applying redirect rule</changelog>
  <changelog author="mrueckert@suse.de" date="1635940800">- Update to version 2.4.8+git0.d1f8d41e0:
  * [RELEASE] Released version 2.4.8
  * SCRIPTS: git-show-backports: re-enable file-based filtering
  * DOC/peers: some grammar fixes for peers 2.1 spec
  * MINOR: stream: Improve dump of bogus streams
  * BUILD/MINOR: cpuset freebsd build fix
  * DOC: config: Fix alphabetical order of fc_* samples
  * BUG/MINOR: sample: fix backend direction flags consecutive to last fix
  * BUG/MEDIUM: sample: Cumulate frontend and backend sample validity flags
  * BUG/MEDIUM: stream-int: Block reads if channel cannot receive more data
  * BUG/MINOR: http: Authorization value can have multiple spaces after the scheme
  * BUG/MEDIUM: http-ana: Drain request data waiting the tarpit timeout expiration
  * MINOR: halog: Add support for extracting captures using -hdr
  * BUG/MINOR: halog: Add missing newlines in die() messages
  * CLEANUP: halog: Use consistent indentation in help()
  * MINOR: halog: Rename -qry to -query
  * DOC: halog: Move the `-qry` parameter into the correct section in help text
  * MINOR: halog: Add -qry parameter allowing to preserve the query string in -uX
  * BUG/MEDIUM: resolvers: Track api calls with a counter to free resolutions
  * BUG/MEDIUM: resolvers: Don't recursively perform requester unlink
  * MEDIUM: resolvers: remove the last occurrences of the "safe" argument
  * MEDIUM: resolvers: use a kill list to preserve the list consistency
  * CLEANUP: resolvers: replace all LIST_DELETE with LIST_DEL_INIT
  * CLEANUP: resolvers: simplify resolv_link_resolution() regarding requesters
  * CLEANUP: always initialize the answer_list
  * CLEANUP: resolvers: do not export resolv_purge_resolution_answer_records()
  * BUG/MEDIUM: mux-h1: Perform a connection shutdown when the h1c is released
  * BUG/MINOR: mux-h1: Save shutdown mode if the shutdown is delayed
  * BUILD: atomic: fix build on mac/arm64
  * BUG/MINOR: backend: fix improper insert in avail tree for always reuse
  * BUILD: fix compilation on NetBSD
  * MINOR: memprof: add one pointer size to the size of allocations
  * MINOR: memprof: report the delta between alloc and free on realloc()
  * BUG/MEDIUM: lua: fix memory leaks with realloc() on non-glibc systems
  * BUG/MINOR: mux-h2: do not prevent from sending a final GOAWAY frame
  * BUG/MINOR: task: do not set TASK_F_USR1 for no reason
  * BUG/MAJOR: buf: fix varint API post- vs pre- increment
  * BUG/MEDIUM: resolvers: always check a valid item in query_list
  * BUILD: resolvers: avoid a possible warning on null-deref
  * BUG/MAJOR: resolvers: add other missing references during resolution removal
  * MINOR: resolvers: merge address and target into a union "data"
  * BUG/MEDIUM: resolvers: use correct storage for the target address
  * BUG/MEDIUM: resolvers: fix truncated TLD consecutive to the API fix
  * MINOR: resolvers: fix the resolv_dn_label_to_str() API about trailing zero
  * BUG/MINOR: resolvers: do not reject host names of length 255 in SRV records
  * BUG/MEDIUM: resolver: make sure to always use the correct hostname length
  * MINOR: resolvers: fix the resolv_str_to_dn_label() API about trailing zero
  * BUG/MAJOR: dns: attempt to lock globaly for msg waiter list instead of use barrier
  * BUG/MAJOR: dns: tcp session can remain attached to a list after a free
  * BUG/MEDIUM: tcpcheck: Properly catch early HTTP parsing errors
  * Revert "CLEANUP: server: always include the storage for SSL settings"
  * BUG/MEDIUM: stream: Keep FLT_END analyzers if a stream detects a channel error
  * BUG/MEDIUM: cpuset: fix cpuset size for FreeBSD
  * BUG/MINOR: sample: Fix 'fix_tag_value' sample when waiting for more data
  * BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back
  * MINOR: initcall: Rename __GLOBL and __GLOBL1.
  * DOC: configuration: add clarification on escaping in keyword arguments
  * BUG/MEDIUM: mux_h2: Handle others remaining read0 cases on partial frames
  * BUG/MEDIUM: sample: properly verify that variables cast to sample
  * MINOR: sample: provide a generic var-to-sample conversion function
  * CLEANUP: sample: uninline sample_conv_var2smp_str()
  * CLEANUP: sample: rename sample_conv_var2smp() to *_sint
  * CLEANUP: server: always include the storage for SSL settings</changelog>
  <changelog author="varkoly@suse.com" date="1646740800">- (bsc#1196408) VUL-0: CVE-2022-0711: haproxy: Denial of service via set-cookie2 header
  o Apply upstream patch:
    0001-BUG-MAJOR-http-htx-prevent-unbounded-loop-in-http_ma.patch</changelog>
  <changelog author="varkoly@suse.com" date="1674043200">- VUL-0: CVE-2023-0056: haproxy: segfault DoS (bsc#1207181)
  o Apply upstream patch:
    0001-BUG-MEDIUM-mux-h2-Refuse-interim-responses-with-end-.patch</changelog>
  <changelog author="varkoly@suse.com" date="1676030400">- VUL-0: serious vulnerability in the HTTP/1 parser (bsc#1208132)
  o Apply upstream patch:
    2.0-2.5-BUG-CRITICAL-http-properly-reject-empty-http-header-.patch
- The output buffer is not zero-initialized. If we don't clear reserved
  bytes, fcgi requests sent to backend will leak sensitive data.
  o Apply proposed patch:
    0001-output-buffer-is-not-zero-initialized.path</changelog>
  <changelog author="varkoly@suse.com" date="1681214400">- ECO: Maint: Update haproxy to latest maintenance release for all SLE15 (jsc#PED-3821)
- rebase and rename haproxy-1.6.0-sec-options.patch -&gt; haproxy-2.4.22-sec-options.patch
- remove patches covered by new release:
  lua54.patch
  0001-BUG-MAJOR-http-htx-prevent-unbounded-loop-in-http_ma.patch
  0001-BUG-MEDIUM-mux-h2-Refuse-interim-responses-with-end-.patch
  0001-output-buffer-is-not-zero-initialized.path
  2.0-2.5-BUG-CRITICAL-http-properly-reject-empty-http-header-.patch
- Update to version 2.4.22+git0.f8e3218e2:
  * [RELEASE] Released version 2.4.22
  * BUG/CRITICAL: http: properly reject empty http header field names
  * CI: github: don't warn on deprecated openssl functions on windows
  * BUG/MEDIUM: stconn: Schedule a shutw on shutr if data must be sent first
  * DOC: proxy-protocol: fix wrong byte in provided example
  * DOC: config: 'http-send-name-header' option may be used in default section
  * DOC: config: fix option spop-check proxy compatibility
  * BUG/MEDIUM: cache: use the correct time reference when comparing dates
  * BUG/MEDIUM: stick-table: do not leave entries in end of window during purge
  * BUG/MINOR: ssl/crt-list: warn when a line is malformated
  * BUG/MEDIUM: ssl: wrong eviction from the session cache tree
  * BUG/MINOR: fcgi-app: prevent 'use-fcgi-app' in default section
  * [RELEASE] Released version 2.4.21
  * BUG/MINOR: sink: free the forwarding task on exit
  * BUILD: hpack: include global.h for the trash that is needed in debug mode
  * BUG/MINOR: mux-h2: add missing traces on failed headers decoding
  * BUG/MINOR: listener: close tiny race between resume_listener() and stopping
  * DOC: config: fix "Address formats" chapter syntax
  * BUG/MINOR: mux-fcgi: Correctly set pathinfo
  * DOC: config: fix aliases for protocol prefixes "udp4@" and "udp6@"
  * DOC: config: fix wrong section number for "protocol prefixes"
  * BUG/MINOR: listeners: fix suspend/resume of inherited FDs
  * BUG/MINOR: http-ana: make set-status also update txn-&gt;status
  * BUG/MINOR: http-fetch: Don't block HTTP sample fetch eval in HTTP_MSG_ERROR state
  * BUG/MINOR: http-ana: Report SF_FINST_R flag on error waiting the request body
  * BUG/MINOR: promex: Don't forget to consume the request on error
  * BUG/MINOR: resolvers: Wait the resolution execution for a do_resolv action
  * BUG/MINOR: h1-htx: Remove flags about protocol upgrade on non-101 responses
  * CLEANUP: htx: fix a typo in an error message of http_str_to_htx
  * BUG/MINOR: http: Memory leak of http redirect rules' format string
  * REGTEST: fix the race conditions in hmac.vtc
  * REGTEST: fix the race conditions in digest.vtc
  * REGTEST: fix the race conditions in json_query.vtc
  * BUG/MAJOR: buf: Fix copy of wrapping output data when a buffer is realigned
  * BUG/MINOR: http-fetch: Only fill txn status during prefetch if not already set
  * BUILD: makefile: sort the features list
  * BUILD: makefile: build the features list dynamically
  * BUG/MINOR: pool/stats: Use ullong to report total pool usage in bytes in stats
  * BUG/MEDIUM: mux-h2: Refuse interim responses with end-stream flag set
  * BUG/MINOR: ssl: Fix memory leak of find_chain in ssl_sock_load_cert_chain
  * LICENSE: wurfl: clarify the dummy library license.
  * BUG/MEDIUM: resolvers: Use tick_first() to update the resolvers task timeout
  * REGTESTS: startup: check maxconn computation
  * REGTESTS: fix the race conditions in iff.vtc
  * BUG/MAJOR: fcgi: Fix uninitialized reserved bytes
  * DOC: promex: Add missing backend metrics
  * MINOR: promex: introduce haproxy_backend_agg_check_status
  * BUG/MINOR: promex: create haproxy_backend_agg_server_status
  * BUG/MEDIUM: mworker: fix segv in early failure of mworker mode with peers
  * BUG/MINOR: ssl: Fix potential overflow
  * BUG/MEDIUM: ssl: Verify error codes can exceed 63
  * BUG/MINOR: resolvers: Don't wait periodic resolution on healthcheck failure
  * BUILD: peers: peers-t.h depends on stick-table-t.h
  * CI: github: change "ubuntu-latest" to "ubuntu-20.04"
  * BUG/MEDIIM: stconn: Flush output data before forwarding close to write side
  * BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
  * [RELEASE] Released version 2.4.20
  * Revert "CI: determine actual OpenSSL version dynamically"
  * Revert "CI: switch to the "latest" LibreSSL"
  * SCRIPTS: announce-release: add a link to the data plane API
  * DOC: config: clarify the -m dir and -m dom pattern matching methods
  * DOC: config: clarify the fact that "retries" is not just for connections
  * DOC: config: explain how default matching method for ACL works
  * DOC: config: mention that a single monitor-uri rule is supported
  * DOC: config: clarify the fact that SNI should not be used in HTTP scenarios
  * DOC: config: provide some configuration hints for "http-reuse"
  * Revert "BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action"
  * BUG/MINOR: mux-h1: Fix handling of 408-Request-Time-Out
  * BUILD: http-htx: Silent build error about a possible NULL start-line
  * BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
  * BUG/MINOR: log: fix parse_log_message rfc5424 size check
  * BUG/MINOR: cfgparse-listen: fix ebpt_next_dup pointer dereference on proxy "from" inheritance
  * BUILD: listener: fix build warning on global_listener_rwlock without threads
  * BUG/MINOR: server/idle: at least use atomic stores when updating max_used_conns
  * BUILD: peers: Remove unused variables
  * BUG/MEDIUM: peers: messages about unkown tables not correctly ignored
  * BUG/MINOR: ssl: don't initialize the keylog callback when not required
  * BUG/MINOR: http_ana/txn: don't re-initialize txn and req var lists
  * BUG/MEDIUM: listener: Fix race condition when updating the global mngmt task
  * BUG/MINOR: pool/cli: use ullong to report total pool usage in bytes
  * BUG/MEDIUM: ring: fix creation of server in uninitialized ring
  * DOC: config: fix alphabetical ordering of global section
  * REG-TESTS: cache: Remove T-E header for 304-Not-Modified responses
  * BUG/MINOR: mux-h1: Do not send a last null chunk on body-less answers
  * BUG/MEDIUM: mux-fcgi: Avoid value length overflow when it doesn't fit at once
  * BUG/MINOR: mux-fcgi: Be sure to send empty STDING record in case of zero-copy
  * BUG/MINOR: resolvers: Set port before IP address when processing SRV records
  * BUG/MINOR: http-htx: Fix error handling during parsing http replies
  * BUG/MEDIUM: wdt/clock: properly handle early task hangs
  * CI: emit the compiler's version in the build reports
  * CI: switch to the "latest" LibreSSL
  * BUG/MINOR: ssl: ocsp structure not freed properly in case of error
  * BUG/MINOR: ssl: Memory leak of AUTHORITY_KEYID struct when loading issuer
  * CI: add monthly gcc cross compile jobs
  * BUG/MINOR: log: fixing bug in tcp syslog_io_handler Octet-Counting
  * BUG/MEDIUM: stick-table: fix a race condition when updating the expiration task
  * BUG/MAJOR: stick-table: don't process store-response rules for applets
  * DOC: management: add forgotten "show startup-logs"
  * BUG/MINOR: stick-table: Use server_id instead of std_t_sint in process_store_rules()
  * CI: SSL: temporarily stick to LibreSSL=3.5.3
  * CI: SSL: use proper version generating when "latest" semantic is used
  * BUG/MINOR: sink: Set default connect/server timeout for implicit ring buffers
  * BUG/MINOR: sink: Only use backend capability for the sink proxies
  * BUG/MEDIUM: compression: handle rewrite errors when updating response headers
  * BUG/MINOR: ring: Properly parse connect timeout
  * BUG/MINOR: log: Preserve message facility when the log target is a ring buffer
  * CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in workflow definition
  * CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in matrix.py
  * BUG/MINOR: server: make sure "show servers state" hides private bits
  * BUG/MAJOR: stick-tables: do not try to index a server name for applets
  * DOC: configuration: missing 'if' in tcp-request content example
  * BUG/MINOR: backend: only enforce turn-around state when not redispatching
  * BUG/MINOR: smtpchk: SMTP Service check should gracefully close SMTP transaction
  * MINOR: smtpchk: Update expect rule to fully match replies to EHLO commands
  * BUG/MINOR: mux-h1: Account consumed output data on synchronous connection error
  * BUILD: http_fetch: silence an uninitiialized warning with gcc-4/5/6 at -Os
  * BUG/MINOR: http-fetch: Update method after a prefetch in smp_fetch_meth()
  * BUILD: h1: silence an initiialized warning with gcc-4.7 and -Os
  * BUG/MEDIUM: lua: handle stick table implicit arguments right.
  * BUG/MEDIUM: lua: Don't crash in hlua_lua2arg_check on failure
  * DOC: config: Fix pgsql-check documentation to make user param mandatory
  * BUG/MINOR: checks: update pgsql regex on auth packet
  * [RELEASE] Released version 2.4.19
  * BUG/MEDIUM: resolvers: Remove aborted resolutions from query_ids tree
  * REGTESTS: 4be_1srv_smtpchk_httpchk_layer47errors: Return valid SMTP replies
  * BUG/MINOR: log: improper behavior when escaping log data
  * SCRIPTS: announce-release: update some URLs to https
  * BUILD: fd: fix a build warning on the DWCAS
  * BUG/MEDIUM: captures: free() an error capture out of the proxy lock
  * DOC: fix TOC in starter guide for subsection 3.3.8. Statistics
  * REGTESTS: ssl/log: test the log-forward with SSL
  * BUG/MEDIUM: sink: bad init sequence on tcp sink from a ring.
  * REGTESTS: log: test the log-forward feature
  * REGTESTS: healthcheckmail: Relax matching on the healthcheck log message
  * BUG/MINOR: stats: fixing stat shows disabled frontend status as 'OPEN'
  * MINOR: listener: small API change
  * BUG/MEDIUM: proxy: ensure pause_proxy() and resume_proxy() own PROXY_LOCK
  * CI: cirrus-ci: bump FreeBSD image to 13-1
  * BUG/MINOR: signals/poller: ensure wakeup from signals
  * BUG/MINOR: signals/poller: set the poller timeout to 0 when there are signals
  * BUG/MINOR: task: always reset a new tasklet's call date
  * BUG/MINOR: h1: Support headers case adjustment for TCP proxies
  * BUILD: makefile: enable crypt(3) for NetBSD
  * BUG/MINOR: regex: Properly handle PCRE2 lib compiled without JIT support
  * BUG/MINOR: mux-fcgi: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: mux-h1: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: mux-h2: fix the "show fd" dest buffer for the subscriber
  * BUG/MEDIUM: mux-h1: always use RST to kill idle connections in pools
  * REGTESTS: http_request_buffer: Add a barrier to not mix up log messages
  * BUG/MEDIUM: mux-h1: do not refrain from signaling errors after end of input
  * BUG/MINOR: tcpcheck: Disable QUICKACK for default tcp-check (with no rule)
  * BUG/MINOR: hlua: Rely on CF_EOI to detect end of message in HTTP applets
  * BUG/MEDIUM: peers: Don't start resync on reload if local peer is not up-to-date
  * BUG/MEDIUM: peers: Don't use resync timer when local resync is in progress
  * BUG/MEDIUM: peers: Add connect and server timeut to peers proxy
  * BUG/MEDIUM: spoe: Properly update streams waiting for a ACK in async mode
  * DOC: configuration: do-resolve doesn't work with a port in the string
  * REGTESTS: Fix prometheus script to perform HTTP health-checks
  * BUG/MINOR: tcpcheck: Disable QUICKACK only if data should be sent after connect
  * BUG/MINOR: resolvers: return the correct value in resolvers_finalize_config()
  * BUG/MAJOR: mworker: fix infinite loop on master with no proxies.
  * BUG/MAJOR: log-forward: Fix log-forward proxies not fully initialized
  * BUG/MEDIUM: mux-h2: do not fiddle with -&gt;dsi to indicate demux is idle
  * BUG/MEDIUM: http-ana: fix crash or wrong header deletion by http-restrict-req-hdr-names
  * BUILD: http: silence an uninitialized warning affecting gcc-5
  * BUG/MEDIUM: ring: fix too lax 'size' parser
  * BUILD: debug: silence warning on gcc-5
  * BUG/MEDIUM: task: relax one thread consistency check in task_unlink_wq()
  * BUG/MEDIUM: poller: use fd_delete() to release the poller pipes
  * BUILD: cfgparse: always defined _GNU_SOURCE for sched.h and crypt.h
  * BUG/MINOR: sink: fix a race condition between the writer and the reader
  * BUG/MINOR: ring/cli: fix a race condition between the writer and the reader
  * BUG/MEDIUM: proxy: Perform a custom copy for default server settings
  * REORG: server: Export srv_settings_cpy() function
  * MINOR: server: Constify source server to copy its settings
  * BUG/MEDIUM: dns: Properly initialize new DNS session
  * BUG/MINOR: peers: Use right channel flag to consider the peer as connected
  * BUG/MEDIUM: peers: limit reconnect attempts of the old process on reload
  * MINOR: peers: Use a dedicated reconnect timeout when stopping the local peer
  * BUG/MEDIUM: pattern: only visit equivalent nodes when skipping versions
  * MINOR: ebtree: add ebmb_lookup_shorter() to pursue lookups
  * MINOR: http-htx: Use new HTTP functions for the scheme based normalization
  * BUG/MEDIUM: h1: Improve authority validation for CONNCET request
  * MINOR: http: Add function to detect default port
  * MINOR: http: Add function to get port part of a host
  * BUG/MEDIUM: mworker: use default maxconn in wait mode
  * [RELEASE] Released version 2.4.18
  * BUG/MINOR: sockpair: wrong return value for fd_send_uxst()
  * BUG/MINOR: backend: Fallback on RR algo if balance on source is impossible
  * BUILD: add detection for unsupported compiler models
  * BUG/MEDIUM: mworker: proc_self incorrectly set crashes upon reload
  * REGTESTS: Fix some scripts to be compatible with 2.4 and prior
  * BUG/MINOR: tools: fix statistical_prng_range()'s output range
  * BUG/MEDIUM: tools: avoid calling dlsym() in static builds (try 2)
  * BUILD: makefile: Fix install(1) handling for OpenBSD/NetBSD/Solaris/AIX
  * BUG/MEDIUM: tools: avoid calling dlsym() in static builds
  * MEDIUM: mworker: set the iocb of the socketpair without using fd_insert()
  * BUG/MEDIUM: mux-h1: Handle connection error after a synchronous send
  * BUG/MEDIUM: http-ana: Don't wait to have an empty buf to switch in TUNNEL state
  * BUG/MINOR: mux-h1: Be sure to commit htx changes in the demux buffer
  * REGTEESTS: filters: Fix CONNECT request in random-forwarding script
  * BUG/MEDIUM: http-fetch: Don't fetch the method if there is no stream
  * BUG/MINOR: http-htx: Fix scheme based normalization for URIs wih userinfo
  * BUG/MINOR: peers: fix possible NULL dereferences at config parsing
  * BUG/MINOR: http-act: Properly generate 103 responses when several rules are used
  * BUG/MINOR: http-check: Preserve headers if not redefined by an implicit rule
  * BUG/MINOR: peers/config: always fill the bind_conf's argument
  * MINOR: fd: Add BUG_ON checks on fd_insert()
  * CI: re-enable gcc asan builds
  * BUILD: Makefile: Add Lua 5.4 autodetect
  * BUG/MEDIUM: ssl/fd: unexpected fd close using async engine
  * MINOR: fd: add a new FD_DISOWN flag to prevent from closing a deleted FD
  * BUG/MINOR: http-fetch: Use integer value when possible in "method" sample fetch
  * BUG/MINOR: http-ana: Set method to HTTP_METH_OTHER when an HTTP txn is created
  * BUG/MINOR: ssl: Do not look for key in extra files if already in pem
  * MEDIUM: mux-h2: try to coalesce outgoing WINDOW_UPDATE frames
  * BUG/MEDIUM: ssl/cli: crash when crt inserted into a crt-list
  * BUG/MINOR: tcp-rules: Make action call final on read error and delay expiration
  * BUG/MINOR: cli/stats: add missing trailing LF after "show info json"
  * BUG/MINOR: server: do not enable DNS resolution on disabled proxies
  * BUG/MINOR: cli/stats: add missing trailing LF after JSON outputs
  * REGTESTS: healthcheckmail: Relax health-check failure condition
  * REGTESTS: healthcheckmail: Update the test to be functionnal again
  * BUG/MINOR: checks: Properly handle email alerts in trace messages
  * BUG/MINOR: trace: Test server existence for health-checks to get proxy
  * BUG/MEDIUM: mailers: Set the object type for check attached to an email alert
  * BUILD: compiler: implement unreachable for older compilers too
  * REGTESTS: restrict_req_hdr_names: Extend supported versions
  * REGTESTS: http_abortonclose: Extend supported versions
  * BUG/MINOR: ssl_ckch: Fix possible uninitialized value in show_cert I/O handler
  * BUG/MINOR: ssl_ckch: Dump cert transaction only once if show command yield
  * REGTESTS: http_request_buffer: Increase client timeout to wait "slow" clients
  * REGTESTS: abortonclose: Add a barrier to not mix up log messages
  * MEDIUM: http-ana: Always report rewrite failures as PRXCOND in logs
  * BUG/MEDIUM: ssl/crt-list: Rework 'add ssl crt-list' to handle full buffer cases
  * BUG/MEDIUM: ssl_ckch: Rework 'commit ssl cert' to handle full buffer cases
  * BUG/MINOR: ssl_ckch: Don't duplicate path when replacing a cert entry
  * BUG/MEDIUM: ssl_ckch: Don't delete a cert entry if it is being modified
  * BUG/MINOR: ssl_ckch: Free error msg if commit changes on a cert entry fails
  * DOC: intro: adjust the numbering of paragrams to keep the output ordered
  * DOC: peers: fix port number and addresses on new peers section format
  * DOC: peers: clarify when entry expiration date is renewed.
  * DOC: peers: indicate that some server settings are not usable
  * SCRIPTS: make publish-release try to launch make-releases-json
  * SCRIPTS: add make-releases-json to recreate a releases.json file in download dirs
  * REGTESTS: Do not use REQUIRE_VERSION for HAProxy 2.5+ (2)
  * BUG/MEDIUM: sample: Fix adjusting size in word converter
  * BUG/MEDIUM: peers: prevent unitialized multiple listeners on peers section
  * BUG/MEDIUM: peers: fix segfault using multiple bind on peers sections
  * BUG/MEDIUM: resolvers: Don't defer resolutions release in deinit function
  * BUG/MEDIUM: http: Properly reject non-HTTP/1.x protocols
  * BUG/MEDIUM: tools: Fix `inet_ntop` usage in sa2str
  * CI: determine actual OpenSSL version dynamically
  * BUILD/MINOR: cpuset fix build for FreeBSD 13.1
  * BUG/MINOR: peers: fix error reporting of "bind" lines
  * BUG/MINOR: cfgparse: abort earlier in case of allocation error
  * BUG/MINOR: check: Reinit the buffer wait list at the end of a check
  * BUG/MEDIUM: config: Reset outline buffer size on realloc error in readcfgfile()
  * REGTESTS: abortonclose: Fix some race conditions
  * BUG/MINOR: ssl: Fix crash when no private key is found in pem
  * MINOR: tools: add get_exec_path implementation for solaris based systems.
  * BUILD: fix build warning on solaris based systems with __maybe_unused.
  * MEDIUM: http-ana: Add a proxy option to restrict chars in request header names
  * CI: determine actual LibreSSL version dynamically
  * [RELEASE] Released version 2.4.17
  * CLEANUP: mux-h1: Fix comments and error messages for global options
  * BUG/MEDIUM: wdt: don't trigger the watchdog when p is unitialized
  * BUG/MINOR: conn_stream: do not confirm a connection from the frontend path
  * BUG/MINOR: server: Make SRV_STATE_LINE_MAXLEN value from 512 to 2kB (2000 bytes).
  * DOC: install: update gcc version requirements
  * BUG/MEDIUM: ssl: fix the gcc-12 broken fix :-(
  * BUILD: listener: shut report of possible null-deref in listener_accept()
  * BUILD: debug: work around gcc-12 excessive -Warray-bounds warnings
  * BUILD: ssl: work around bogus warning in gcc 12's -Wformat-truncation
  * CI: dynamically determine actual version of h2spec
  * DOC: fix typo "ant" for "and" in INSTALL
  * BUG/MINOR: map/cli: make sure patterns don't vanish under "show map"'s init
  * BUG/MINOR: map/cli: protect the backref list during "show map" errors
  * BUG/MEDIUM: cli: make "show cli sockets" really yield
  * BUG/MEDIUM: resolvers: make "show resolvers" properly yield
  * BUG/MINOR: tcp/http: release the expr of set-{src,dst}[-port]
  * DOC: config: Update doc for PR/PH session states to warn about rewrite failures
  * MINOR: mux-h2: report a trace event when failing to create a new stream
  * BUG/MINOR: mux-h2: mark the stream as open before processing it not after
  * BUG/MAJOR: dns: multi-thread concurrency issue on UDP socket
  * BUG/MEDIUM: mux-h1: Be able to handle trailers when C-L header was specified
  * BUG/MEDIUM: mux-fcgi: Be sure to never set EOM flag on an empty HTX message
  * SCRIPTS: announce-release: add URL of dev packages
  * CI: github actions: update LibreSSL to 3.5.2
  * [RELEASE] Released version 2.4.16
  * BUILD: opentracing: Fix OT build due to misuse of var_clear()
  * BUILD: proto_uxst: do not set unused flag
  * BUILD: sockpair: do not set unused flag
  * BUILD: fd: remove unused variable totlen in fd_write_frag_line()
  * CLEANUP: acl: Remove unused variable when releasing an acl expression
  * BUG/MINOR: pools: make sure to also destroy shared pools in pool_destroy_all()
  * BUG/MINOR: resolvers: Fix memory leak in resolvers_deinit()
  * BUILD: compiler: properly distinguish weak and global symbols
  * REGTESTS: fix the race conditions in be2dec.vtc ad field.vtc
  * MEDIUM: queue: use tasklet_instant_wakeup() to wake tasks
  * MINOR: task: add a new task_instant_wakeup() function
  * BUG/MINOR: rules: Fix check_capture() function to use the right rule arguments
  * DOC: remove my name from the config doc
  * BUG/MAJOR: connection: Never remove connection from idle lists outside the lock
  * BUG/MINOR: cache: Disable cache if applet creation fails
  * SCRIPTS: announce-release: add shortened links to pending issues
  * DOC: lua: update a few doc URLs
  * SCRIPTS: announce-release: update the doc's URL
  * BUG/MEDIUM: compression: Don't forget to update htx_sl and http_msg flags
  * BUG/MEDIUM: fcgi-app: Use http_msg flags to know if C-L header can be added
  * BUG/MEDIUM: stream: do not abort connection setup too early
  * BUILD: compiler: use a more portable set of asm(".weak") statements
  * BUILD: sched: workaround crazy and dangerous warning in Clang 14
  * BUG/MEDIUM: mux-h1: Don't request more room on partial trailers
  * BUG/MINOR: mux-h2: use timeout http-request as a fallback for http-keep-alive
  * BUG/MINOR: mux-h2: do not use timeout http-keep-alive on backend side
  * BUILD: debug: mark the __start_mem_stats/__stop_mem_stats symbols as weak
  * BUG/MINOR: cache: do not display expired entries in "show cache"
  * BUG/MINOR: mux-h2: do not send GOAWAY if SETTINGS were not sent
  * CI: cirrus: switch to FreeBSD-13.0
  * CI: Update to actions/cache@v3
  * CI: Update to actions/checkout@v3
  * DEBUG: opentracing: show return values of all functions in the debug output
  * CLEANUP: opentracing: added variable to store variable length
  * CLEANUP: opentracing: added flt_ot_smp_init() function
  * CLEANUP: opentracing: removed unused function flt_ot_var_get()
  * CLEANUP: opentracing: removed unused function flt_ot_var_unset()
  * DOC: opentracing: corrected comments in function descriptions
  * EXAMPLES: opentracing: refined shell scripts for testing filter performance
  * BUG/MINOR: opentracing: setting the return value in function flt_ot_var_set()
  * BUG/MEDIUM: http-act: Don't replace URI if path is not found or invalid
  * BUG/MEDIUM: http-conv: Fix url_enc() to not crush const samples
  * BUG/MEDIUM: mux-h1: Set outgoing message to DONE when payload length is reached
  * BUG/MEDIUM: promex: Be sure to never set EOM flag on an empty HTX message
  * BUG/MEDIUM: hlua: Don't set EOM flag on an empty HTX message in HTTP applet
  * BUG/MEDIUM: stats: Be sure to never set EOM flag on an empty HTX message
  * BUG/MINOR: fcgi-app: Don't add C-L header on response to HEAD requests
  * CI: github actions: update OpenSSL to 3.0.2
  * BUG/MAJOR: mux_pt: always report the connection error to the conn_stream
  * BUG/MINOR: cli/stream: fix "shutdown session" to iterate over all threads
  * BUG/MINOR: samples: add missing context names for sample fetch functions
  * DOC: reflect H2 timeout changes
  * BUG/MEDIUM: mux-h2: make use of http-request and keep-alive timeouts
  * MEDIUM: mux-h2: slightly relax timeout management rules
  * BUG/MEDIUM: stream-int: do not rely on the connection error once established
  * BUG/MEDIUM: mux-h1: Properly detect full buffer cases during message parsing
  * BUG/MEDIUM: mux-fcgi: Properly handle return value of headers/trailers parsing
  * BUG/MINOR: tools: url2sa reads too far when no port nor path
  * DOC: config: Explictly add supported MQTT versions
  * MEDIUM: mqtt: support mqtt_is_valid and mqtt_field_value converters for MQTTv3.1
  * BUG/MEDIUM: trace: avoid race condition when retrieving session from conn-&gt;owner
  * BUG/MEDIUM: mux-h1: only turn CO_FL_ERROR to CS_FL_ERROR with empty ibuf
  * CI: github actions: switch to LibreSSL-3.5.1
  * BUG/MINOR: server/ssl: free the SNI sample expression
  * BUG/MINOR: tools: fix url2sa return value with IPv4
  * [RELEASE] Released version 2.4.15
  * BUILD: tree-wide: mark a few numeric constants as explicitly long long
  * DOC: Fix usage/examples of deprecated ACLs
  * BUG/MINOR: stream: make the call_rate only count the no-progress calls
  * BUG/MINOR: session: fix theoretical risk of memleak in session_accept_fd()
  * BUG/MAJOR: mux-pt: Always destroy the backend connection on detach
  * DEBUG: stream: Fix stream trace message to print response buffer state
  * DEBUG: stream: Add the missing descriptions for stream trace events
  * BUG/MEDIUM: mcli: Properly handle errors and timeouts during reponse processing
  * DEBUG: cache: Update underlying buffer when loading HTX message in cache applet
  * BUG/MINOR: promex: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: cache: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: stats: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: hlua: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: cli: shows correct mode in "show sess"
  * BUG/MINOR: add missing modes in proxy_mode_str()
  * BUILD: pools: fix backport of no-memory-trimming on non-linux OS
  * MINOR: pools: add a new global option "no-memory-trimming"
  * BUG/MEDIUM: pools: fix ha_free() on area in the process of being freed
  * BUG/MINOR: pool: always align pool_heads to 64 bytes
  * REGTESTS: fix the race conditions in secure_memcmp.vtc
  * REGTESTS: fix the race conditions in normalize_uri.vtc
  * BUG/MEDIUM: htx: Fix a possible null derefs in htx_xfer_blks()
  * CI: github actions: use cache for SSL libs
  * CI: github actions: use cache for OpenTracing
  * CI: github actions: add OpenTracing builds
  * CI: github actions: add the output of $CC -dM -E-
  * [RELEASE] Released version 2.4.14
  * BUG/MEDIUM: stream: Abort processing if response buffer allocation fails
  * CI: github: enable pool debugging by default
  * REGTESTS: fix the race conditions in 40be_2srv_odd_health_checks
  * BUG/MINOR: proxy: preset the error message pointer to NULL in parse_new_proxy()
  * BUG/MAJOR: mux-h2: Be sure to always report HTX parsing error to the app layer
  * BUG/MEDIUM: mux-h1: Don't wake h1s if mux is blocked on lack of output buffer
  * BUG/MEDIUM: htx: Be sure to have a buffer to perform a raw copy of a message
  * BUG/MINOR: tools: url2sa reads ipv4 too far
  * BUG/MINOR: mailers: negotiate SMTP, not ESMTP
  * CI: github actions: update OpenSSL to 3.0.1
  * CI: github: switch to OpenSSL 3.0.0
  * CI: github actions: relax OpenSSL-3.0.0 version comparision
  * CI: github actions: -Wno-deprecated-declarations with OpenSSL 3.0.0
  * CI: github actions: add OpenSSL-3.0.0 builds
  * BUILD: adopt script/build-ssl.sh for OpenSSL-3.0.0beta2
  * BUILD: fix compilation for OpenSSL-3.0.0-alpha17
  * CI: ssl: keep the old method for ancient OpenSSL versions
  * CI: ssl: do not needlessly build the OpenSSL docs
  * CI: ssl: enable parallel builds for OpenSSL on Linux
  * BUG/MAJOR: compiler: relax alignment constraints on certain structures
  * BUG/MEDIUM: fd: always align fdtab[] to 64 bytes
  * BUG/MEDIUM: resolvers: Really ignore trailing dot in domain names
  * BUG/MINOR: sink: Use the right field in appctx context in release callback
  * BUG/MINOR: mworker: fix a FD leak of a sockpair upon a failed reload
  * BUG/MEDIUM: mworker: close unused transferred FDs on load failure
  * MINOR: sock: move the unused socket cleaning code into its own function
  * [RELEASE] Released version 2.4.13
  * BUG/MINOR: mux-h2: update the session's idle delay before creating the stream
  * BUG/MEDIUM: h2/hpack: fix emission of HPACK DTSU after settings change
  * REGTESTS: peers: leave a bit more time to peers to synchronize
  * BUG/MAJOR: spoe: properly detach all agents when releasing the applet
  * BUG/MAJOR: http/htx: prevent unbounded loop in http_manage_server_side_cookies
  * BUG/MEDIUM: listener: read-lock the listener during accept()
  * MINOR: listener: replace the listener's spinlock with an rwlock
  * BUG/MINOR: mworker: does not erase the pidfile upon reload
  * BUG/MAJOR: sched: prevent rare concurrent wakeup of multi-threaded tasks
  * DEBUG: pools: replace the link pointer with the caller's address on pool_free()
  * DEBUG: pools: let's add reverse mapping from cache heads to thread and pool
  * DEBUG: pools: add extra sanity checks when picking objects from a local cache
  * BUG/MINOR: pools: always flush pools about to be destroyed
  * BUG/MEDIUM: mworker: don't lose the stats socket on failed reload
  * DEBUG: pools: add new build option DEBUG_POOL_INTEGRITY
  * BUILD: debug/cli: condition test of O_ASYNC to its existence
  * DEBUG: cli: add a new "debug dev fd" expert command
  * MEDIUM: h2/hpack: emit a Dynamic Table Size Update after settings change
  * BUG/MEDIUM: mcli: always realign wrapping buffers before parsing them
  * BUG/MEDIUM: mcli: do not try to parse empty buffers
  * BUG/MEDIUM: cli: Never wait for more data on client shutdown
  * BUG/MINOR: cli: avoid O(bufsize) parsing cost on pipelined commands
  * MINOR: channel: add new function co_getdelim() to support multiple delimiters
  * MEDIUM: cli: yield between each pipelined command
  * BUG/MEDIUM: server: avoid changing healthcheck ctx with set server ssl
  * BUILD/MINOR: fix solaris build with clang.
  * BUG/MEDIUM: htx: Adjust length to add DATA block in an empty HTX buffer
  * BUG/MEDIUM: connection: properly leave stopping list on error
  * [RELEASE] Released version 2.4.12
  * BUG/MAJOR: mux-h1: Don't decrement .curr_len for unsent data
  * BUG/MEDIUM: mworker: don't use _getsocks in wait mode
  * [RELEASE] Released version 2.4.11
  * BUG/MEDIUM: http-ana: Preserve response's FLT_END analyser on L7 retry
  * BUG/MINOR: cli: fix _getsocks with musl libc
  * BUILD/MINOR: tools: solaris build fix on dladdr.
  * BUILD/MINOR: cpuset FreeBSD 14 build fix.
  * BUG/MEDIUM: ssl: free the ckch instance linked to a server
  * BUG/MINOR: ssl: free the fields in srv-&gt;ssl_ctx
  * MINOR: debug: add support for -dL to dump library names at boot
  * MINOR: debug: add ability to dump loaded shared libraries
  * MINOR: compat: detect support for dl_iterate_phdr()
  * BUG/MINOR: mux-h1: Fix splicing for messages with unknown length
  * BUG/MEDIUM: mux-h1: Fix splicing by properly detecting end of message
  * BUILD: makefile: add -Wno-atomic-alignment to work around clang abusive warning
  * MINOR: proxy: add option idle-close-on-response
  * REGTESTS: ssl: fix ssl_default_server.vtc
  * BUG/MEDIUM: ssl: initialize correctly ssl w/ default-server
  * DOC: fix misspelled keyword "resolve_retries" in resolvers
  * BUILD: ssl: unbreak the build with newer libressl
  * BUILD: cli: clear a maybe-unused  warning on some older compilers
  * BUG/MINOR: pools: don't mark ourselves as harmless in DEBUG_UAF mode
  * BUG/MEDIUM: backend: fix possible sockaddr leak on redispatch
  * [RELEASE] Released version 2.4.10
  * BUG/MINOR: backend: restore the SF_SRV_REUSED flag original purpose
  * BUG/MINOR: backend: do not set sni on connection reuse
  * MINOR: pools: work around possibly slow malloc_trim() during gc
  * BUG/MEDIUM: mworker/cli: crash when trying to access an old PID in prompt mode
  * DOC: config: retry-on list is space-delimited
  * DOC: config: Specify %Ta is only available in HTTP mode
  * DOC: spoe: Clarify use of the event directive in spoe-message section
  * BUG/MINOR: cli/server: Don't crash when a server is added with a custom id
  * IMPORT: slz: use the correct CRC32 instruction when running in 32-bit mode
  * BUILD: tree-wide: avoid warnings caused by redundant checks of obj_types
  * MINOR: cli: "show version" displays the current process version
  * CI: Github Actions: temporarily disable BoringSSL builds
  * BUILD: bug: Fix error when compiling with -DDEBUG_STRICT_NOCRASH
  * MINOR: mux-h1: Improve H1 traces by adding info about http parsers
  * BUG/MAJOR: segfault using multiple log forward sections.
  * BUG/MEDIUM: resolvers: Detach query item on response error
  * BUG/MINOR: server: Don't rely on last default-server to init server SSL context
  * BUG/MEDIUM: cli: Properly set stream analyzers to process one command at a time
  * BUILD/MINOR: server: fix compilation without SSL
  * [RELEASE] Released version 2.4.9
  * BUG/MINOR: cache: Fix loop on cache entries in "show cache"
  * MINOR: promex: backend aggregated server check status
  * MINOR: server: add ws keyword
  * MEDIUM: server/backend: implement websocket protocol selection
  * MINOR: connection: add alternative mux_ops param for conn_install_mux_be
  * MINOR: connection: implement function to update ALPN
  * MINOR: stream/mux: implement websocket stream flag
  * BUG/MINOR: ssl: make SSL counters atomic
  * MINOR: shctx: add a few BUG_ON() for consistency checks
  * BUG/MINOR: shctx: do not look for available blocks when the first one is enough
  * BUG/MEDIUM: shctx: leave the block allocator when enough blocks are found
  * BUG/MEDIUM: cache/cli: make "show cache" thread-safe
  * BUG/MEDIUM: mux-h2: always process a pending shut read
  * BUG/MEDIUM: ssl: abort with the correct SSL error when SNI not found
  * CLEANUP: ssl: fix wrong #else commentary
  * BUG/MINOR: ssl: free correctly the sni in the backend SSL cache
  * BUG/MEDIUM: ssl: backend TLS resumption with sni and TLSv1.3
  * BUILD: makefile: simplify detection of libatomic
  * BUG/MEDIUM: mux-h1: Handle delayed silent shut in h1_process() to release H1C
  * BUG/MINOR: stick-table/cli: Check for invalid ipv6 key
  * BUG/MEDIUM: connection: make cs_shutr/cs_shutw//cs_close() idempotent
  * BUG/MINOR: mux-h2: Fix H2_CF_DEM_SHORT_READ value
  * BUG/MINOR: mworker: doesn't launch the program postparser
  * BUG/MEDIUM: conn-stream: Don't reset CS flags on close
  * MINOR: mux-h1: Slightly Improve H1 traces
  * DOC: lua: Be explicit with the Reply object limits
  * Revert "BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back"
  * BUG/MINOR: http-ana: Apply stop to the current section for http-response rules
  * DOC: config: Fix typo in ssl_fc_unique_id description
  * BUG/MINOR: cache: properly ignore unparsable max-age in quotes
  * BUG/MINOR: resolvers: throw log message if trash not large enough for query
  * BUG/MINOR: resolvers: fix sent messages were counted twice
  * BUG/MEDIUM: mux-h2: reject upgrade if no RFC8441 support
  * MINOR: mux-h2: add trace on extended connect usage
  * MINOR: mux-h2: perform a full cycle shutdown+drain on close
  * MINOR: connection: add a new CO_FL_WANT_DRAIN flag to force drain on close</changelog>
  <changelog author="varkoly@suse.com" date="1692014400">- VUL-0: CVE-2023-40225: haproxy: reject any empty content-length header value
  (bsc#1214102) Apply upstream patch adapted for 2.4.22 (patch h2_parse_cont_len_header() instead of http_parse_cont_len_header())
  Add patch: 0001-BUG-MAJOR-http-reject-any-empty-content-length-heade.patch</changelog>
  <changelog author="varkoly@suse.com" date="1701345600">- VUL-0: CVE-2023-45539: haproxy: misinterpretation of a path_end rule with # as part of the URI component
  (bsc#1217653) Apply upstream patch.
  Add patch: 0001-BUG-MINOR-h1-do-not-accept-as-part-of-the-URI-compon.patch</changelog>
</package>
<package pkgid="523aab737741d16772293d52fa70904f07b0233954757990bfd962c11e2a758d" name="haproxy" arch="src">
  <version epoch="0" ver="2.4.22+git0.f8e3218e2" rel="150400.3.19.1"/>
  <changelog author="mrueckert@suse.de" date="1614772800">- Update to version 2.3.6+git0.7851701ed:
  * [RELEASE] Released version 2.3.6
  * BUG/MINOR: http-ana: Don't increment HTTP error counter on read error/timeout
  * BUG/MINOR: mux-h2: Fix typo in scheme adjustment
  * DOC: spoe: Add a note about fragmentation support in HAProxy
  * BUG/MEDIUM: spoe: Kill applets if there are pending connections and nbthread &gt; 1
  * BUG/MINOR: connection: Use the client's dst family for adressless servers
  * BUG/MINOR: tcp-act: Don't forget to set the original port for IPv4 set-dst rule
  * BUG/MINOR: http-ana: Only consider dst address to process originalto option
  * BUG/MINOR: mux-h1: Immediately report H1C errors from h1_snd_buf()
  * BUG/MINOR: stats: fix compare of no-maint url suffix
  * CLEANUP: muxes: Remove useless if condition in show_fd function
  * BUG/MINOR: ssl: potential null pointer dereference in ckchs_dup()
  * BUG/MEDIUM: resolvers: Reset address for unresolved servers
  * BUG/MEDIUM: resolvers: Reset server address and port for obselete SRV records
  * BUG/MINOR: resolvers: new callback to properly handle SRV record errors
  * BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record
  * BUG/MINOR: resolvers: Fix condition to release received ARs if not assigned
  * BUG/MINOR: fd: properly wait for !running_mask in fd_set_running_excl()
  * BUG/MINOR: proxy: wake up all threads when sending the hard-stop signal
  * BUG/MEDIUM: cli/shutdown sessions: make it thread-safe
  * BUG/MEDIUM: proxy: use thread-safe stream killing on hard-stop
  * BUG/MEDIUM: vars: make functions vars_get_by_{name,desc} thread-safe
  * BUG/MINOR: sample: secure convs that accept base64 string and var name as args
  * MINOR: Configure the `cpp` userdiff driver for *.[ch] in .gitattributes
  * BUG/MINOR: ssl/cli: potential null pointer dereference in "set ssl cert"
  * BUG/MEDIUM: mux-h1: Fix handling of responses to CONNECT other than 200-ok
  * BUG/MINOR: server: Be sure to cut the last parsed field of a server-state line
  * BUG/MINOR: server: Init params before parsing a new server-state line
  * BUG/MINOR: http-rules: Always replace the response status on a return action
  * BUG/MEDIUM: spoe: Resolve the sink if a SPOE logs in a ring buffer
  * BUG/MEDIUM: lists: Avoid an infinite loop in MT_LIST_TRY_ADDQ().
  * DOC: explain the relation between pool-low-conn and tune.idle-pool.shared
  * BUILD: ssl: introduce fine guard for OpenSSL specific SCTL functions
  * BUG/MINOR: sample: Always consider zero size string samples as unsafe
  * BUG/MEDIUM: checks: don't needlessly take the server lock in health_adjust()
  * BUG/MINOR: checks: properly handle wrapping time in __health_adjust()
  * BUG/MINOR: session: atomically increment the tracked sessions counter
  * BUG/MINOR: server: Remove RMAINT from admin state when loading server state
  * CLEANUP: channel: fix comment in ci_putblk.
  * DOC: tune: explain the origin of block size for ssl.cachesize
  * BUG/MINOR: server: Don't call fopen() with server-state filepath set to NULL
  * BUG/MINOR: cfgparse: do not mention "addr:port" as supported on proxy lines
  * BUG/MINOR: stats: revert the change on ST_CONVDONE
  * BUG/MEDIUM: config: don't pick unset values from last defaults section
  * CLEANUP: deinit: release global and per-proxy server-state variables on deinit
  * BUG/MINOR: server: Fix server-state-file-name directive
  * BUG/MINOR: backend: hold correctly lock when killing idle conn
  * BUG/MINOR: tools: Fix a memory leak on error path in parse_dotted_uints()
  * BUG/MINOR: server: re-align state file fields number
  * BUG/MEDIUM: mux-h1: Always set CS_FL_EOI for response in MSG_DONE state
  * BUG/MINOR: http-ana: Don't increment HTTP error counter on internal errors
  * BUG/MINOR: intops: fix mul32hi()'s off-by-one
  * BUILD: ssl: guard SSL_CTX_set_msg_callback with SSL_CTRL_SET_MSG_CALLBACK macro
  * BUILD: ssl: guard SSL_CTX_add_server_custom_ext with special macro
  * BUILD: ssl: fix typo in HAVE_SSL_CTX_ADD_SERVER_CUSTOM_EXT macro
  * MINOR: check: do not ignore a connection header for http-check send</changelog>
  <changelog author="mrueckert@suse.de" date="1615896000">- Update to version 2.3.7+git0.2d39ce334:
  * [RELEASE] Released version 2.3.7
  * BUG/MINOR: resolvers: Add missing case-insensitive comparisons of DNS hostnames
  * MINOR: resolvers: Don't try to match immediatly renewed ADD items
  * MINOR: resolvers: Use milliseconds for cached items in resolver responses
  * BUG/MEDIUM: resolvers: Skip DNS resolution at startup if SRV resolution is set
  * BUG/MEDIUM: resolvers: Don't release resolution from a requester callbacks
  * MINOR: resolvers: Directly call srvrq_update_srv_state() when possible
  * MINOR: resolvers: Add function to change the srv status based on SRV resolution
  * MINOR: resolvers: Purge answer items when a SRV resolution triggers an error
  * MINOR: resolvers: Use a function to remove answers attached to a resolution
  * BUG/MEDIUM: resolvers: Trigger a DNS resolution if an ADD item is obsolete
  * BUG/MINOR; resolvers: Ignore DNS resolution for expired SRV item
  * MINOR: resolvers: new function find_srvrq_answer_record()
  * BUG/MEDIUM: resolvers: Fix the loop looking for an existing ADD item
  * BUG/MEDIUM: resolvers: Don't set an address-less server as UP
  * BUG/MINOR: resolvers: Unlink DNS resolution to set RMAINT on SRV resolution
  * BUG/MINOR: resolvers: Reset server address on DNS error only on status change
  * BUG/MINOR: resolvers: Consider server to have no IP on DNS resolution error
  * Revert "BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record"
  * CLEANUP: tcp-rules: add missing actions in the tcp-request error message
  * BUG/MINOR: tcpcheck: Fix double free on error path when parsing tcp/http-check
  * BUG/MINOR: session: Add some forgotten tests on session's listener
  * BUG/MINOR: proxy/session: Be sure to have a listener to increment its counters
  * BUG/MINOR: tcpcheck: Update .health threshold of agent inside an agent-check
  * BUG/MEDIUM: filters: Set CF_FL_ANALYZE on channels when filters are attached
  * BUILD: atomic/arm64: force the register pairs to use in __ha_cas_dw()
  * BUG/MEDIUM: stick-tables: fix ref counter in table entry using multiple http tracksc.
  * OPTIM: task: automatically adjust the default runqueue-depth to the threads
  * MINOR: task: give the scheduler a bit more flexibility in the runqueue size
  * MEDIUM: task: remove the tasks_run_queue counter and have one per thread
  * MEDIUM: ssl: implement xprt_set_used and xprt_set_idle to relax context checks
  * MINOR: xprt: add new xprt_set_idle and xprt_set_used methods
  * MEDIUM: muxes: mark idle conns tasklets with TASK_F_USR1
  * MINOR: task: add an application specific flag to the state: TASK_F_USR1
  * BUG/MEDIUM: ssl: properly remove the TASK_HEAVY flag at end of handshake
  * MINOR: ssl: mark the SSL handshake tasklet as heavy
  * MINOR: task: limit the number of subsequent heavy tasks with flag TASK_HEAVY
  * MEDIUM: backend: use a trylock when trying to grab an idle connection
  * MINOR: pools: double the local pool cache size to 1 MB
  * MEDIUM: pools: add CONFIG_HAP_NO_GLOBAL_POOLS and CONFIG_HAP_GLOBAL_POOLS
  * MEDIUM: streams: do not use the streams lock anymore
  * MINOR: streams: use one list per stream instead of a global one
  * MINOR: cli/streams: make "show sess" dump all streams till the new epoch
  * MINOR: stream: add an "epoch" to figure which streams appeared when
  * MINOR: dynbuf: pass offer_buffers() the number of buffers instead of a threshold
  * MINOR: dynbuf: use regular lists instead of mt_lists for buffer_wait
  * MINOR: dynbuf: make the buffer wait queue per thread
  * OPTIM: lb-leastconn: do not unlink the server if it did not change
  * OPTIM: lb-leastconn: do not take the server lock on take_conn/drop_conn
  * OPTIM: lb-first: do not take the server lock on take_conn/drop_conn
  * MINOR: lb/api: let callers of take_conn/drop_conn tell if they have the lock
  * MINOR: server: move actconns to the per-thread structure
  * OPTIM: server: switch the actconn list to an mt-list
  * MINOR: listener: refine the default MAX_ACCEPT from 64 to 4
  * MINOR: tasks: refine the default run queue depth
  * BUG/MEDIUM: session: NULL dereference possible when accessing the listener
  * MINOR: atomic: implement a more efficient arm64 __ha_cas_dw() using pairs
  * MINOR: atomic: add armv8.1-a atomics variant for cas-dw
  * BUG/MINOR: mt-list: always perform a cpu_relax call on failure
  * REORG: atomic: reimplement pl_cpu_relax() from atomic-ops.h
  * BUG/MINOR: ssl: don't truncate the file descriptor to 16 bits in debug mode
  * BUG/MINOR: hlua: Don't strip last non-LWS char in hlua_pushstrippedstring()
  * BUG/MINOR: backend: fix condition for reuse on mode HTTP</changelog>
  <changelog author="mrueckert@suse.de" date="1616673600">- Update to version 2.3.8+git0.e572195c7:
  * [RELEASE] Released version 2.3.8
  * BUG/MINOR: http_fetch: make hdr_ip() reject trailing characters
  * MINOR: tools: make url2ipv4 return the exact number of bytes parsed
  * BUG/MEDIUM: thread: Fix a deadlock if an isolated thread is marked as harmless
  * BUG/MEDIUM: fd: Take the fd_mig_lock when closing if no DWCAS is available.
  * CLEANUP: fd: remove unused fd_set_running_excl()
  * BUG/MEDIUM: fd: do not wait on FD removal in fd_delete()
  * MINOR: fd: remove the unneeded running bit from fd_insert()
  * MINOR: fd: make fd_clr_running() return the remaining running mask
  * BUG/MEDIUM: lua: Always init the lua stack before referencing the context
  * BUG/MEDIUM: debug/lua: Use internal hlua function to dump the lua traceback
  * MINOR: lua: Slightly improve function dumping the lua traceback
  * BUILD: ssl: guard ecdh functions with SSL_CTX_set_tmp_ecdh macro
  * BUG/MINOR: ssl: Prevent disk access when using "add ssl crt-list"
  * BUG/MEDIUM: debug/lua: Don't dump the lua stack if not dumpable
  * MEDIUM: lua: Use a per-thread counter to track some non-reentrant parts of lua
  * MINOR/BUG: mworker/cli: do not use the unix_bind prefix for the master CLI socket
  * BUG/MINOR: protocol: add missing support of dgram unix socket.
  * BUG/MEDIUM: freq_ctr/threads: use the global_now_ms variable
  * MINOR: time: also provide a global, monotonic global_now_ms timer
  * BUG/MEDIUM: mux-fcgi: Fix locking of idle_conns lock in the FCGI I/O callback
  * BUG/MINOR: freq_ctr/threads: make use of the last updated global time
  * MINOR: time: export the global_now variable</changelog>
  <changelog author="mrueckert@suse.de" date="1617105600">- Update to version 2.3.9+git1.afb63bc04:
  * BUILD: backend: fix build breakage in idle conn locking fix
  * [RELEASE] Released version 2.3.9
  * BUG/MEDIUM: time: make sure to always initialize the global tick
  * BUG/MINOR: stats: Apply proper styles in HTML status page.
  * BUG/MINOR: payload: Wait for more data if buffer is empty in payload/payload_lv
  * MEDIUM: backend: use a trylock to grab a connection on high FD counts as well
  * BUG/MEDIUM: mux-h1: make h1_shutw_conn() idempotent</changelog>
  <changelog author="mrueckert@suse.de" date="1619179200">- Update to version 2.3.10+git0.4764f0e4e:
  * [RELEASE] Released version 2.3.10
  * BUG/MEDIUM: peers: re-work refcnt on table to protect against flush
  * BUG/MEDIUM: peers: re-work connection to new process during reload.
  * BUG/MINOR: peers: remove useless table check if initial resync is finished
  * BUG/MEDIUM: mux-h2: Properly handle shutdowns when received with data
  * BUG/MINOR: mworker: don't use oldpids[] anymore for reload
  * BUG/MINOR: mworker/init: don't reset nb_oldpids in non-mworker cases
  * BUG/MEDIUM: config: fix cpu-map notation with both process and threads
  * BUG/MEDIUM: mux-h2: Fix dfl calculation when merging CONTINUATION frames
  * BUG/MAJOR: mux-h2: Properly detect too large frames when decoding headers
  * BUG/MINOR: server: free srv.lb_nodes in free_server
  * BUG/MINOR: mux-h1: Release idle server H1 connection if data are received
  * BUG/MINOR: logs: Report the true number of retries if there was no connection
  * BUG/MINOR: http_htx: Remove BUG_ON() from http_get_stline() function
  * BUG/MINOR: http-fetch: Make method smp safe if headers were already forwarded
  * BUG/MINOR: ssl-samples: Fix ssl_bc_* samples when called from a health-check
  * MINOR: connection: Make bc_http_major compatible with tcp-checks
  * BUG/MINOR: connection: Fix fc_http_major and bc_http_major for TCP connections
  * MINOR: logs: Add support of checks as session origin to format lf strings
  * BUG/MINOR: checks: Set missing id to the dummy checks frontend
  * BUG/MEDIUM: threads: Ignore current thread to end its harmless period
  * DOC: ssl: Certificate hot update only works on fronted certificates
  * BUG/MEDIUM: sample: Fix adjusting size in field converter
  * MINOR: No longer rely on deprecated sample fetches for predefined ACLs
  * DOC: clarify that compression works for HTTP/2
  * BUG/MINOR: tools: fix parsing "us" unit for timers
  * CONTRIB: halog: fix issue with array of type char
  * REGTESTS: ssl: mark set_ssl_cert_bundle.vtc as broken
  * DOC: Explicitly state only IPv4 are supported by forwardfor/originalto options
  * REGTESTS: ssl: "set ssl cert" and multi-certificates bundle
  * BUG/MINOR: ssl: Add missing free on SSL_CTX in ckch_inst_free
  * BUG/MINOR: http_fetch: make hdr_ip() resistant to empty fields
  * BUG/MINOR: ssl: Prevent removal of crt-list line if the instance is a default one
  * BUG/MINOR: ssl: Fix update of default certificate
  * BUILD: tcp: use IPPROTO_IPV6 instead of SOL_IPV6 on FreeBSD/MacOS
  * BUG/MINOR: tcp: fix silent-drop workaround for IPv6</changelog>
  <changelog author="mrueckert@suse.de" date="1620993600">- Update to version 2.4.0+git0.6cbbecf09:
  https://www.haproxy.com/blog/announcing-haproxy-2-4/
  for all the details see /usr/share/doc/packages/haproxy/CHANGELOG
- refreshed patches to apply cleanly again
  haproxy-1.6.0-makefile_lib.patch
  haproxy-1.6.0-sec-options.patch
  lua54.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1623931200">- Update to version 2.4.1+git0.1ce7d4925:
  * [RELEASE] Released version 2.4.1
  * BUG/MINOR: mux-h2/traces: bring back the lost "sent H2 REQ/RES" traces
  * BUG/MINOR: mux-h2/traces: bring back the lost "rcvd H2 REQ" trace
  * MINOR: mux-h2: obey http-ignore-probes during the preface
  * BUG/MINOR: stats: make "show stat typed desc" work again
  * CLEANUP: mux-h2/traces: better align user messages
  * MINOR: mux-h2/trace: report a few connection-level info during h2_init()
  * MINOR: connection: add helper conn_append_debug_info()
  * BUG/MINOR: server: explicitly set "none" init-addr for dynamic servers
  * BUG/MINOR: mux-h1: do not skip the error response on bad requests
  * MINOR: backend: only skip LB when there are actual connections
  * BUG/MAJOR: queue: set SF_ASSIGNED when setting strm-&gt;target on dequeue
  * CLEANUP: global: remove unused definition of stopping_task[]
  * BUG/MINOR: mworker: fix typo in chroot error message
  * BUG/MINOR: ssl: use atomic ops to update global shctx stats
  * BUG/MEDIUM: shctx: use at least thread-based locking on USE_PRIVATE_CACHE
  * BUG/MEDIUM: server: do not auto insert a dynamic server in px addr_node
  * BUG/MINOR: server: do not keep an invalid dynamic server in px ids tree
  * BUG/MEDIUM: server: do not forget to generate the dynamic servers ids
  * BUG/MEDIUM: server: clear dynamic srv on delete from proxy id/name trees
  * BUG/MEDIUM: server: extend thread-isolate over much of CLI 'add server'
  * BUG/MINOR: stick-table: insert srv in used_name tree even with fixed id
  * DOC: lua: Add a warning about buffers modification in HTTP
  * BUG/MAJOR: resolvers: segfault using server template without SRV RECORDs
  * MEDIUM: resolvers: add a ref between servers and srv request or used SRV record
  * MEDIUM: resolvers: add a ref on server to the used A/AAAA answer item
  * BUG/MINOR: resolvers: answser item list was randomly purged or errors
  * CLEANUP: l7-retries: do not test the buffer before calling b_alloc()
  * BUG/MINOR: mux-fcgi: Expose SERVER_SOFTWARE parameter by default
  * BUG/MAJOR: htx: Fix htx_defrag() when an HTX block is expanded
  * CLEANUP: pools: remove now unused seq and pool_free_list
  * BUG/MAJOR: pools: fix possible race with free() in the lockless variant
  * MEDIUM: pools: use a single pool_gc() function for locked and lockless
  * MINOR: pools: call malloc_trim() under thread isolation
  * MINOR: pools: do not maintain the lock during pool_flush()
  * BUG/MINOR: pools: make DEBUG_UAF always write to the to-be-freed location
  * BUG/MINOR: pools: fix a possible memory leak in the lockless pool_flush()
  * BUG/MEDIUM: compression: Add a flag to know the filter is still processing data
  * BUG/MEDIUM: compression: Properly get the next block to iterate on payload
  * BUG/MEDIUM: compression: Fix loop skipping unused blocks to get the next block
  * BUG/MEDIUM: opentracing: initialization before establishing daemon and/or chroot mode
  * Revert "BUG/MINOR: opentracing: initialization after establishing daemon mode"
  * BUG/MINOR: ssl: OCSP stapling does not work if expire too far in the future
  * BUILD: make tune.ssl.keylog available again
  * DOC: use the req.ssl_sni in examples
  * MINOR: errors: allow empty va_args for diag variadic macro
  * BUG/MAJOR: stream-int: Release SI endpoint on server side ASAP on retry
  * DOC/MINOR: move uuid in the configuration to the right alphabetical order
  * BUG/MINOR: vars: Be sure to have a session to get checks variables
  * CLEANUP: http-ana: Remove useless if statement about L7 retries
  * BUG/MINOR: proxy: Missing calloc return value check in chash_init_server_tree
  * BUG/MINOR: http: Missing calloc return value check in make_arg_list
  * BUG/MINOR: http: Missing calloc return value check while parsing redirect rule
  * BUG/MINOR: worker: Missing calloc return value check in mworker_env_to_proc_list
  * BUG/MINOR: compression: Missing calloc return value check in comp_append_type/algo
  * BUG/MINOR: http: Missing calloc return value check while parsing tcp-request rule
  * BUG/MINOR: http: Missing calloc return value check while parsing tcp-request/tcp-response
  * BUG/MINOR: proxy: Missing calloc return value check in proxy_defproxy_cpy
  * BUG/MINOR: proxy: Missing calloc return value check in proxy_parse_declare
  * BUG/MINOR: http: Missing calloc return value check in parse_http_req_capture
  * BUG/MINOR: ssl: Missing calloc return value check in ssl_init_single_engine
  * BUG/MINOR: peers: Missing calloc return value check in peers_register_table
  * BUG/MINOR: server: Missing calloc return value check in srv_parse_source
  * DOC: intro: Fix typo in starter guide
  * MINOR: cfgparse: Fail when encountering extra arguments in macro
  * MINOR: http-ana: Perform L7 retries because of status codes in response analyser
  * BUG/MINOR: http-ana: Handle L7 retries on refused early data before K/A aborts
  * BUG/MINOR: http-ana: Send the right error if max retries is reached on L7 retry
  * Revert "MEDIUM: http-ana: Deal with L7 retries in HTTP analysers"
  * BUG/MINOR: http-comp: Preserve HTTP_MSGF_COMPRESSIONG flag on the response
  * BUG/MEDIUM: filters: Exec pre/post analysers only one time per filter
  * BUILD/MINOR: opentracing: fixed build when using clang
  * BUG/MAJOR: server: prevent deadlock when using 'set maxconn server'
  * BUG/MEDIUM: ebtree: Invalid read when looking for dup entry</changelog>
  <changelog author="mrueckert@suse.de" date="1625659200">- Update to version 2.4.2+git0.553dee326:
  * [RELEASE] Released version 2.4.2
  * REGTESTS: add http scheme-based normalization test
  * MEDIUM: h2: apply scheme-based normalization on h2 requests
  * MEDIUM: h1-htx: apply scheme-based normalization on h1 requests
  * MEDIUM: http: implement scheme-based normalization
  * MINOR: http: implement http_get_scheme
  * Revert "MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules"
  * BUG/MINOR: cli: fix server name output in "show fd"
  * BUG/MEDIUM: sock: make sure to never miss early connection failures
  * DOC: stick-table: add missing documentation about gpt0 stored type
  * BUG/MINOR: peers: fix data_type bit computation more than 32 data_types
  * BUG/MINOR: stick-table: fix several printf sign errors dumping tables
  * DOC: config: use CREATE USER for mysql-check
  * BUG/MEDIUM: resolvers: Make 1st server of a template take part to SRV resolution
  * BUG/MINOR: mqtt: Support empty client ID in CONNECT message
  * BUG/MINOR: mqtt: Fix parser for string with more than 127 characters
  * BUG/MINOR: tcpcheck: Fix numbering of implicit HTTP send/expect rules
  * BUILD: Makefile: fix linkage for Haiku.
  * BUG/MINOR: checks: return correct error code for srv_parse_agent_check
  * MINOR: resolvers: Reset server IP on error in resolv_get_ip_from_response()
  * BUG/MINOR: resolvers: Reset server IP when no ip is found in the response
  * BUG/MINOR: resolvers: Always attach server on matching record on resolution
  * CLEANUP: dns: Remove a forgotten debug message
  * DOC: config: Add missing actions in "tcp-request session" documentation
  * MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules
  * REGTESTS: fix maxconn update with agent-check
  * BUG/MAJOR: server: fix deadlock when changing maxconn via agent-check
  * BUG/MINOR: cache: Correctly handle existing-but-empty 'accept-encoding' header
  * BUG/MINOR: server/cli: Fix locking in function processing "set server" command
  * BUG/MINOR: resolvers: Use resolver's lock in resolv_srvrq_expire_task()
  * BUG/MEDIUM: resolvers: Add a task on servers to check SRV resolution status
  * MINOR: resolvers: Remove server from named_servers tree when removing a SRV item
  * MINOR: resolvers: Clean server in a dedicated function when removing a SRV item
  * BUG/MEDIUM: server/cli: Fix ABBA deadlock when fqdn is set from the CLI
  * BUG/MINOR: server: Forbid to set fqdn on the CLI if SRV resolution is enabled
  * BUG/MINOR: server-state: load SRV resolution only if params match the config</changelog>
  <changelog author="mrueckert@suse.de" date="1629201600">- Update to version 2.4.3+git0.4dd5a5a6c:
    CVE-2021-39240 CVE-2021-39241 CVE-2021-39242
    (boo#1189366 boo#1189548 boo#1189549)
  * [RELEASE] Released version 2.4.3
  * REGTESTS: add a test to prevent h2 desync attacks
  * BUG/MEDIUM: h2: give :authority precedence over Host
  * BUG/MAJOR: h2: enforce stricter syntax checks on the :method pseudo-header
  * BUG/MAJOR: h2: verify that :path starts with a '/' before concatenating it
  * BUG/MAJOR: h2: verify early that non-http/https schemes match the valid syntax
  * MINOR: http: add a new function http_validate_scheme() to validate a scheme
  * DOC/MINOR: fix typo in management document
  * CLEANUP: assorted typo fixes in the code and comments
  * BUG/MEDIUM: cfgcheck: verify existing log-forward listeners during config check
  * BUG/MEDIUM: spoe: Fix policy to close applets when SPOE connections are queued
  * DOC: config: Fix 'http-response send-spoe-group' documentation
  * DOC: Improve the lua documentation
  * BUG/MINOR: tcpcheck: Properly detect pending HTTP data in output buffer
  * BUG/MINOR: buffer: fix buffer_dump() formatting
  * BUG/MEDIUM: spoe: Create a SPOE applet if necessary when the last one is released
  * MINOR: spoe: Add a pointer on the filter config in the spoe_agent structure
  * ADMIN: dyncookie: implement a simple dynamic cookie calculator
  * MINOR: server: unmark deprecated on enable health/agent cli
  * BUG/MINOR: server: update last_change on maint-&gt;ready transitions too
  * BUG/MINOR: server: remove srv from px list on CLI 'add server' error
  * BUILD: opentracing: fixed build when using pkg-config utility
  * DOC: internals: document the FD takeover process
  * BUG/MINOR: fd: protect fd state harder against a concurrent takeover
  * BUG/MINOR: pollers: always program an update for migrated FDs
  * BUG/MINOR: poll: fix abnormally high skip_fd counter
  * BUG/MINOR: select: fix excess number of dead/skip reported
  * BUG/MEDIUM: pollers: clear the sleeping bit after waking up, not before
  * BUG/MEDIUM: connection: close a rare race between idle conn close and takeover
  * BUG/MINOR: connection: Add missing error labels to conn_err_code_str
  * BUG/MEDIUM: mux-h2: Handle remaining read0 cases on partial frames
  * BUG/MINOR: mux-h1: Be sure to swap H1C to splice mode when rcv_pipe() is called
  * BUG/MINOR: mux-h2: Obey dontlognull option during the preface
  * BUG/MINOR: mux-h1: Obey dontlognull option for empty requests
  * BUG/MINOR: systemd: must check the configuration using -Ws
  * BUG/MINOR: resolvers: Use a null-terminated string to lookup in servers tree
  * BUG/MINOR: check: fix the condition to validate a port-less server
  * BUG/MINOR: stats: Add missing agent stats on servers
  * BUG/MEDIUM: ssl_sample: fix segfault for srv samples on invalid request
  * BUILD/MINOR: memprof fix macOs build.
  * BUG/MINOR: mworker: do not export HAPROXY_MWORKER_REEXEC across programs
  * BUG/MEDIUM: mworker: do not register an exit handler if exit is expected
  * BUILD: lua: silence a build warning with TCC
  * BUILD: add detection of missing important CFLAGS
  * BUG/MINOR: ssl: Default-server configuration ignored by server
  * MINOR: mux_h2: define config to disable h2 websocket support
  * BUILD: http_htx: fix ci compilation error with isdigit for Windows</changelog>
  <changelog author="mrueckert@suse.de" date="1631016000">- Update to version 2.4.4+git0.acb1d0bea: CVE-2021-40346 (boo#1189877)
  * [RELEASE] Released version 2.4.4
  * Revert "BUG/MINOR: stream-int: Don't block reads in si_update_rx() if chn may receive"
  * BUG/MAJOR: htx: fix missing header name length check in htx_add_header/trailer
  * CLEANUP: htx: remove comments about "must be &lt; 256 MB"
  * BUG/MINOR: config: reject configs using HTTP with bufsize &gt;= 256 MB
  * DOC: configuration: remove wrong tcp-request examples in tcp-response
  * BUG/MINOR: vars: fix set-var/unset-var exclusivity in the keyword parser
  * CLEANUP: Add missing include guard to signal.h
  * BUG/MINOR: tools: Fix loop condition in dump_text()
  * BUG/MINOR threads: Use get_(local|gm)time instead of (local|gm)time
  * BUG/MINOR: ebtree: remove dependency on incorrect macro for bits per long
  * MINOR: time: add report_idle() to report process-wide idle time
  * BUG/MINOR: time: fix idle time computation for long sleeps
  * BUG/MINOR: lua: use strlcpy2() not strncpy() to copy sample keywords
  * MINOR: compiler: implement an ONLY_ONCE() macro
  * BUG/MINOR: base64: base64urldec() ignores padding in output size check
  * BUG/MEDIUM: base64: check output boundaries within base64{dec,urldec}
  * BUG/MINOR: stick-table: fix the sc-set-gpt* parser when using expressions
  * MINOR: hlua: take the global Lua lock inside a global function
  * REGTESTS: abortonclose: after retries, 503 is expected, not close
  * REGTESTS: http_upgrade: fix incorrect expectation on TCP-&gt;H1-&gt;H2
  * BUG/MEDIUM: h2: match absolute-path not path-absolute for :path</changelog>
  <changelog author="mrueckert@suse.de" date="1633089600">- Update to version 2.4.5+git0.e74a1b34b:
  * [RELEASE] Released version 2.4.5
  * MINOR: tasks: catch TICK_ETERNITY with BUG_ON() in __task_queue()
  * BUG/MINOR: tcp-rules: Stop content rules eval on read error and end-of-input
  * BUG/MINOR: tcpcheck: Don't use arg list for default proxies during parsing
  * MINOR: arg: Be able to forbid unresolved args when building an argument list
  * BUG/MAJOR: lua: use task_wakeup() to properly run a task once
  * BUG/MEDIUM: lua: fix wakeup condition from sleep()
  * MINOR: Makefile: add MEMORY_POOLS to the list of DEBUG_xxx options
  * DOC: peers: fix doc "enable" statement on "peers" sections
  * BUG/MINOR: mux-h1/mux-fcgi: Sanitize TE header to only send "trailers"
  * MINOR: stream-int: Notify mux when the buffer is not stuck when calling rcv_buf
  * BUG/MEDIUM: stream-int: Defrag HTX message in si_cs_recv() if necessary
  * MINOR: htx: Add a function to know if the free space wraps
  * MINOR: htx: Add an HTX flag to know when a message is fragmented
  * MINOR: stream-int: Set CO_RFL transient/persistent flags apart in si_cs_rcv()
  * BUG/MEDIUM: stream: Stop waiting for more data if SI is blocked on RXBLK_ROOM
  * BUG/MEDIUM: stream-int: Notify stream that the mux wants more room to xfer data
  * BUG/MEDIUM: mux-h1: Adjust conditions to ask more space in the channel buffer
  * BUG/MINOR: stats: use refcount to protect dynamic server on dump
  * MINOR: server: return the next srv instance on free_server
  * BUG/MINOR: server: do not use refcount in free_server in stopping mode
  * MINOR: global: define MODE_STOPPING
  * MINOR: server: implement a refcount for dynamic servers
  * BUG/MINOR: http-ana: increment internal_errors counter on response error
  * BUG/MINOR: h1-htx: Fix a typo when request parser is reset
  * BUG/MEDIUM: leastconn: fix rare possibility of divide by zero
  * BUG/MINOR: server: allow 'enable health' only if check configured
  * BUILD: threads: fix -Wundef for _POSIX_PRIORITY_SCHEDULING on libmusl
  * BUILD: halog: fix a -Wundef warning on non-glibc systems
  * BUILD: compiler: fixed a missing test on  defined(__GNUC__)
  * BUILD: fix dragonfly build again on __read_mostly
  * BUG/MINOR: vars: do not talk about global section in CLI errors for set-var
  * BUG/MINOR: vars: truncate the variable name in error reports about scope.
  * BUG/MINOR: vars: properly set the argument parsing context in the expression
  * MINOR: sample: add missing ARGC_ entries
  * BUG/MINOR: vars: improve accuracy of the rules used to check expression validity
  * BUILD: tools: properly guard __GLIBC__ with defined()
  * BUILD: ssl: fix two remaining occurrences of #if USE_OPENSSL
  * BUILD: ssl: next round of build warnings on LIBRESSL_VERSION_NUMBER
  * BUILD/MINOR: regex: avoid a build warning on USE_PCRE2 with -Wundef
  * IMPORT: slz: silence a build warning with -Wundef
  * BUILD/MINOR: ssl: avoid a build warning on LIBRESSL_VERSION with -Wundef
  * BUILD/MINOR: defaults: eliminate warning on MAXHOSTNAMELEN with -Wundef
  * BUILD: activity: use #ifdef not #if on USE_MEMORY_PROFILING
  * MINOR: proc: setting the process to produce a core dump on FreeBSD.
  * MINOR: tools: add FreeBSD support to get_exec_path()
  * BUILD: tools: get the absolute path of the current binary on NetBSD.
  * BUG/MINOR: flt-trace: fix an infinite loop when random-parsing is set
  * BUG/MINOR: cli/payload: do not search for args inside payload
  * BUILD: ist: prevent gcc11 maybe-uninitialized warning on istalloc
  * BUG/MINOR: connection: prevent null deref on mux cleanup task allocation
  * DOC: management: certificate files must be sanitized before injection
  * BUG/MINOR: tcpcheck: Improve LDAP response parsing to fix LDAP check
  * BUG/MAJOR: mux-h1: Don't eval input data if an error was reported
  * MINOR: pools: use mallinfo2() when available instead of mallinfo()
  * MINOR: pools: automatically disable malloc_trim() with external allocators
  * CLEANUP: pools: factor all malloc_trim() calls into trim_all_pools()
  * BUG/MINOR: compat: make sure __WORDSIZE is always defined
  * BUG/MEDIUM: stream-int: Don't block SI on a channel policy if EOI is reached
  * CLEANUP: mux-h1: Remove condition rejecting upgrade requests with payload
  * MINOR: htx: Skip headers with no value when adding a header list to a message
  * BUG/MEDIUM: mux-h1: Remove "Upgrade:" header for requests with payload
  * BUG/MINOR: systemd: ExecStartPre must use -Ws
  * BUG/MINOR: filters: Set right FLT_END analyser depending on channel
  * BUG/MINOR: filters: Always set FLT_END analyser when CF_FLT_ANALYZE flag is set
  * BUG/MEDIUM: http-ana: Reset channels analysers when returning an error
  * BUG/MINOR: stream: Don't release a stream if FLT_END is still registered
  * BUG/MINOR: lua: Don't yield in channel.append() and channel.set()
  * BUG/MINOR: lua: Yield in channel functions only if lua context can yield
  * MINOR: lua: Add a flag on lua context to know the yield capability at run time</changelog>
  <changelog author="mrueckert@suse.de" date="1633348800">- Update to version 2.4.6+git0.d83fd76a1:
  * [RELEASE] Released version 2.4.6
  * BUG/MEDIUM: filters: Fix a typo when a filter is attached blocking the release</changelog>
  <changelog author="mrueckert@suse.de" date="1633348801">- Update to version 2.4.7+git0.b5e51a5e2:
  * [RELEASE] Released version 2.4.7
  * BUG/MEDIUM: http-ana: Clear request analyzers when applying redirect rule</changelog>
  <changelog author="mrueckert@suse.de" date="1635940800">- Update to version 2.4.8+git0.d1f8d41e0:
  * [RELEASE] Released version 2.4.8
  * SCRIPTS: git-show-backports: re-enable file-based filtering
  * DOC/peers: some grammar fixes for peers 2.1 spec
  * MINOR: stream: Improve dump of bogus streams
  * BUILD/MINOR: cpuset freebsd build fix
  * DOC: config: Fix alphabetical order of fc_* samples
  * BUG/MINOR: sample: fix backend direction flags consecutive to last fix
  * BUG/MEDIUM: sample: Cumulate frontend and backend sample validity flags
  * BUG/MEDIUM: stream-int: Block reads if channel cannot receive more data
  * BUG/MINOR: http: Authorization value can have multiple spaces after the scheme
  * BUG/MEDIUM: http-ana: Drain request data waiting the tarpit timeout expiration
  * MINOR: halog: Add support for extracting captures using -hdr
  * BUG/MINOR: halog: Add missing newlines in die() messages
  * CLEANUP: halog: Use consistent indentation in help()
  * MINOR: halog: Rename -qry to -query
  * DOC: halog: Move the `-qry` parameter into the correct section in help text
  * MINOR: halog: Add -qry parameter allowing to preserve the query string in -uX
  * BUG/MEDIUM: resolvers: Track api calls with a counter to free resolutions
  * BUG/MEDIUM: resolvers: Don't recursively perform requester unlink
  * MEDIUM: resolvers: remove the last occurrences of the "safe" argument
  * MEDIUM: resolvers: use a kill list to preserve the list consistency
  * CLEANUP: resolvers: replace all LIST_DELETE with LIST_DEL_INIT
  * CLEANUP: resolvers: simplify resolv_link_resolution() regarding requesters
  * CLEANUP: always initialize the answer_list
  * CLEANUP: resolvers: do not export resolv_purge_resolution_answer_records()
  * BUG/MEDIUM: mux-h1: Perform a connection shutdown when the h1c is released
  * BUG/MINOR: mux-h1: Save shutdown mode if the shutdown is delayed
  * BUILD: atomic: fix build on mac/arm64
  * BUG/MINOR: backend: fix improper insert in avail tree for always reuse
  * BUILD: fix compilation on NetBSD
  * MINOR: memprof: add one pointer size to the size of allocations
  * MINOR: memprof: report the delta between alloc and free on realloc()
  * BUG/MEDIUM: lua: fix memory leaks with realloc() on non-glibc systems
  * BUG/MINOR: mux-h2: do not prevent from sending a final GOAWAY frame
  * BUG/MINOR: task: do not set TASK_F_USR1 for no reason
  * BUG/MAJOR: buf: fix varint API post- vs pre- increment
  * BUG/MEDIUM: resolvers: always check a valid item in query_list
  * BUILD: resolvers: avoid a possible warning on null-deref
  * BUG/MAJOR: resolvers: add other missing references during resolution removal
  * MINOR: resolvers: merge address and target into a union "data"
  * BUG/MEDIUM: resolvers: use correct storage for the target address
  * BUG/MEDIUM: resolvers: fix truncated TLD consecutive to the API fix
  * MINOR: resolvers: fix the resolv_dn_label_to_str() API about trailing zero
  * BUG/MINOR: resolvers: do not reject host names of length 255 in SRV records
  * BUG/MEDIUM: resolver: make sure to always use the correct hostname length
  * MINOR: resolvers: fix the resolv_str_to_dn_label() API about trailing zero
  * BUG/MAJOR: dns: attempt to lock globaly for msg waiter list instead of use barrier
  * BUG/MAJOR: dns: tcp session can remain attached to a list after a free
  * BUG/MEDIUM: tcpcheck: Properly catch early HTTP parsing errors
  * Revert "CLEANUP: server: always include the storage for SSL settings"
  * BUG/MEDIUM: stream: Keep FLT_END analyzers if a stream detects a channel error
  * BUG/MEDIUM: cpuset: fix cpuset size for FreeBSD
  * BUG/MINOR: sample: Fix 'fix_tag_value' sample when waiting for more data
  * BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back
  * MINOR: initcall: Rename __GLOBL and __GLOBL1.
  * DOC: configuration: add clarification on escaping in keyword arguments
  * BUG/MEDIUM: mux_h2: Handle others remaining read0 cases on partial frames
  * BUG/MEDIUM: sample: properly verify that variables cast to sample
  * MINOR: sample: provide a generic var-to-sample conversion function
  * CLEANUP: sample: uninline sample_conv_var2smp_str()
  * CLEANUP: sample: rename sample_conv_var2smp() to *_sint
  * CLEANUP: server: always include the storage for SSL settings</changelog>
  <changelog author="varkoly@suse.com" date="1646740800">- (bsc#1196408) VUL-0: CVE-2022-0711: haproxy: Denial of service via set-cookie2 header
  o Apply upstream patch:
    0001-BUG-MAJOR-http-htx-prevent-unbounded-loop-in-http_ma.patch</changelog>
  <changelog author="varkoly@suse.com" date="1674043200">- VUL-0: CVE-2023-0056: haproxy: segfault DoS (bsc#1207181)
  o Apply upstream patch:
    0001-BUG-MEDIUM-mux-h2-Refuse-interim-responses-with-end-.patch</changelog>
  <changelog author="varkoly@suse.com" date="1676030400">- VUL-0: serious vulnerability in the HTTP/1 parser (bsc#1208132)
  o Apply upstream patch:
    2.0-2.5-BUG-CRITICAL-http-properly-reject-empty-http-header-.patch
- The output buffer is not zero-initialized. If we don't clear reserved
  bytes, fcgi requests sent to backend will leak sensitive data.
  o Apply proposed patch:
    0001-output-buffer-is-not-zero-initialized.path</changelog>
  <changelog author="varkoly@suse.com" date="1681214400">- ECO: Maint: Update haproxy to latest maintenance release for all SLE15 (jsc#PED-3821)
- rebase and rename haproxy-1.6.0-sec-options.patch -&gt; haproxy-2.4.22-sec-options.patch
- remove patches covered by new release:
  lua54.patch
  0001-BUG-MAJOR-http-htx-prevent-unbounded-loop-in-http_ma.patch
  0001-BUG-MEDIUM-mux-h2-Refuse-interim-responses-with-end-.patch
  0001-output-buffer-is-not-zero-initialized.path
  2.0-2.5-BUG-CRITICAL-http-properly-reject-empty-http-header-.patch
- Update to version 2.4.22+git0.f8e3218e2:
  * [RELEASE] Released version 2.4.22
  * BUG/CRITICAL: http: properly reject empty http header field names
  * CI: github: don't warn on deprecated openssl functions on windows
  * BUG/MEDIUM: stconn: Schedule a shutw on shutr if data must be sent first
  * DOC: proxy-protocol: fix wrong byte in provided example
  * DOC: config: 'http-send-name-header' option may be used in default section
  * DOC: config: fix option spop-check proxy compatibility
  * BUG/MEDIUM: cache: use the correct time reference when comparing dates
  * BUG/MEDIUM: stick-table: do not leave entries in end of window during purge
  * BUG/MINOR: ssl/crt-list: warn when a line is malformated
  * BUG/MEDIUM: ssl: wrong eviction from the session cache tree
  * BUG/MINOR: fcgi-app: prevent 'use-fcgi-app' in default section
  * [RELEASE] Released version 2.4.21
  * BUG/MINOR: sink: free the forwarding task on exit
  * BUILD: hpack: include global.h for the trash that is needed in debug mode
  * BUG/MINOR: mux-h2: add missing traces on failed headers decoding
  * BUG/MINOR: listener: close tiny race between resume_listener() and stopping
  * DOC: config: fix "Address formats" chapter syntax
  * BUG/MINOR: mux-fcgi: Correctly set pathinfo
  * DOC: config: fix aliases for protocol prefixes "udp4@" and "udp6@"
  * DOC: config: fix wrong section number for "protocol prefixes"
  * BUG/MINOR: listeners: fix suspend/resume of inherited FDs
  * BUG/MINOR: http-ana: make set-status also update txn-&gt;status
  * BUG/MINOR: http-fetch: Don't block HTTP sample fetch eval in HTTP_MSG_ERROR state
  * BUG/MINOR: http-ana: Report SF_FINST_R flag on error waiting the request body
  * BUG/MINOR: promex: Don't forget to consume the request on error
  * BUG/MINOR: resolvers: Wait the resolution execution for a do_resolv action
  * BUG/MINOR: h1-htx: Remove flags about protocol upgrade on non-101 responses
  * CLEANUP: htx: fix a typo in an error message of http_str_to_htx
  * BUG/MINOR: http: Memory leak of http redirect rules' format string
  * REGTEST: fix the race conditions in hmac.vtc
  * REGTEST: fix the race conditions in digest.vtc
  * REGTEST: fix the race conditions in json_query.vtc
  * BUG/MAJOR: buf: Fix copy of wrapping output data when a buffer is realigned
  * BUG/MINOR: http-fetch: Only fill txn status during prefetch if not already set
  * BUILD: makefile: sort the features list
  * BUILD: makefile: build the features list dynamically
  * BUG/MINOR: pool/stats: Use ullong to report total pool usage in bytes in stats
  * BUG/MEDIUM: mux-h2: Refuse interim responses with end-stream flag set
  * BUG/MINOR: ssl: Fix memory leak of find_chain in ssl_sock_load_cert_chain
  * LICENSE: wurfl: clarify the dummy library license.
  * BUG/MEDIUM: resolvers: Use tick_first() to update the resolvers task timeout
  * REGTESTS: startup: check maxconn computation
  * REGTESTS: fix the race conditions in iff.vtc
  * BUG/MAJOR: fcgi: Fix uninitialized reserved bytes
  * DOC: promex: Add missing backend metrics
  * MINOR: promex: introduce haproxy_backend_agg_check_status
  * BUG/MINOR: promex: create haproxy_backend_agg_server_status
  * BUG/MEDIUM: mworker: fix segv in early failure of mworker mode with peers
  * BUG/MINOR: ssl: Fix potential overflow
  * BUG/MEDIUM: ssl: Verify error codes can exceed 63
  * BUG/MINOR: resolvers: Don't wait periodic resolution on healthcheck failure
  * BUILD: peers: peers-t.h depends on stick-table-t.h
  * CI: github: change "ubuntu-latest" to "ubuntu-20.04"
  * BUG/MEDIIM: stconn: Flush output data before forwarding close to write side
  * BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
  * [RELEASE] Released version 2.4.20
  * Revert "CI: determine actual OpenSSL version dynamically"
  * Revert "CI: switch to the "latest" LibreSSL"
  * SCRIPTS: announce-release: add a link to the data plane API
  * DOC: config: clarify the -m dir and -m dom pattern matching methods
  * DOC: config: clarify the fact that "retries" is not just for connections
  * DOC: config: explain how default matching method for ACL works
  * DOC: config: mention that a single monitor-uri rule is supported
  * DOC: config: clarify the fact that SNI should not be used in HTTP scenarios
  * DOC: config: provide some configuration hints for "http-reuse"
  * Revert "BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action"
  * BUG/MINOR: mux-h1: Fix handling of 408-Request-Time-Out
  * BUILD: http-htx: Silent build error about a possible NULL start-line
  * BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
  * BUG/MINOR: log: fix parse_log_message rfc5424 size check
  * BUG/MINOR: cfgparse-listen: fix ebpt_next_dup pointer dereference on proxy "from" inheritance
  * BUILD: listener: fix build warning on global_listener_rwlock without threads
  * BUG/MINOR: server/idle: at least use atomic stores when updating max_used_conns
  * BUILD: peers: Remove unused variables
  * BUG/MEDIUM: peers: messages about unkown tables not correctly ignored
  * BUG/MINOR: ssl: don't initialize the keylog callback when not required
  * BUG/MINOR: http_ana/txn: don't re-initialize txn and req var lists
  * BUG/MEDIUM: listener: Fix race condition when updating the global mngmt task
  * BUG/MINOR: pool/cli: use ullong to report total pool usage in bytes
  * BUG/MEDIUM: ring: fix creation of server in uninitialized ring
  * DOC: config: fix alphabetical ordering of global section
  * REG-TESTS: cache: Remove T-E header for 304-Not-Modified responses
  * BUG/MINOR: mux-h1: Do not send a last null chunk on body-less answers
  * BUG/MEDIUM: mux-fcgi: Avoid value length overflow when it doesn't fit at once
  * BUG/MINOR: mux-fcgi: Be sure to send empty STDING record in case of zero-copy
  * BUG/MINOR: resolvers: Set port before IP address when processing SRV records
  * BUG/MINOR: http-htx: Fix error handling during parsing http replies
  * BUG/MEDIUM: wdt/clock: properly handle early task hangs
  * CI: emit the compiler's version in the build reports
  * CI: switch to the "latest" LibreSSL
  * BUG/MINOR: ssl: ocsp structure not freed properly in case of error
  * BUG/MINOR: ssl: Memory leak of AUTHORITY_KEYID struct when loading issuer
  * CI: add monthly gcc cross compile jobs
  * BUG/MINOR: log: fixing bug in tcp syslog_io_handler Octet-Counting
  * BUG/MEDIUM: stick-table: fix a race condition when updating the expiration task
  * BUG/MAJOR: stick-table: don't process store-response rules for applets
  * DOC: management: add forgotten "show startup-logs"
  * BUG/MINOR: stick-table: Use server_id instead of std_t_sint in process_store_rules()
  * CI: SSL: temporarily stick to LibreSSL=3.5.3
  * CI: SSL: use proper version generating when "latest" semantic is used
  * BUG/MINOR: sink: Set default connect/server timeout for implicit ring buffers
  * BUG/MINOR: sink: Only use backend capability for the sink proxies
  * BUG/MEDIUM: compression: handle rewrite errors when updating response headers
  * BUG/MINOR: ring: Properly parse connect timeout
  * BUG/MINOR: log: Preserve message facility when the log target is a ring buffer
  * CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in workflow definition
  * CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in matrix.py
  * BUG/MINOR: server: make sure "show servers state" hides private bits
  * BUG/MAJOR: stick-tables: do not try to index a server name for applets
  * DOC: configuration: missing 'if' in tcp-request content example
  * BUG/MINOR: backend: only enforce turn-around state when not redispatching
  * BUG/MINOR: smtpchk: SMTP Service check should gracefully close SMTP transaction
  * MINOR: smtpchk: Update expect rule to fully match replies to EHLO commands
  * BUG/MINOR: mux-h1: Account consumed output data on synchronous connection error
  * BUILD: http_fetch: silence an uninitiialized warning with gcc-4/5/6 at -Os
  * BUG/MINOR: http-fetch: Update method after a prefetch in smp_fetch_meth()
  * BUILD: h1: silence an initiialized warning with gcc-4.7 and -Os
  * BUG/MEDIUM: lua: handle stick table implicit arguments right.
  * BUG/MEDIUM: lua: Don't crash in hlua_lua2arg_check on failure
  * DOC: config: Fix pgsql-check documentation to make user param mandatory
  * BUG/MINOR: checks: update pgsql regex on auth packet
  * [RELEASE] Released version 2.4.19
  * BUG/MEDIUM: resolvers: Remove aborted resolutions from query_ids tree
  * REGTESTS: 4be_1srv_smtpchk_httpchk_layer47errors: Return valid SMTP replies
  * BUG/MINOR: log: improper behavior when escaping log data
  * SCRIPTS: announce-release: update some URLs to https
  * BUILD: fd: fix a build warning on the DWCAS
  * BUG/MEDIUM: captures: free() an error capture out of the proxy lock
  * DOC: fix TOC in starter guide for subsection 3.3.8. Statistics
  * REGTESTS: ssl/log: test the log-forward with SSL
  * BUG/MEDIUM: sink: bad init sequence on tcp sink from a ring.
  * REGTESTS: log: test the log-forward feature
  * REGTESTS: healthcheckmail: Relax matching on the healthcheck log message
  * BUG/MINOR: stats: fixing stat shows disabled frontend status as 'OPEN'
  * MINOR: listener: small API change
  * BUG/MEDIUM: proxy: ensure pause_proxy() and resume_proxy() own PROXY_LOCK
  * CI: cirrus-ci: bump FreeBSD image to 13-1
  * BUG/MINOR: signals/poller: ensure wakeup from signals
  * BUG/MINOR: signals/poller: set the poller timeout to 0 when there are signals
  * BUG/MINOR: task: always reset a new tasklet's call date
  * BUG/MINOR: h1: Support headers case adjustment for TCP proxies
  * BUILD: makefile: enable crypt(3) for NetBSD
  * BUG/MINOR: regex: Properly handle PCRE2 lib compiled without JIT support
  * BUG/MINOR: mux-fcgi: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: mux-h1: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: mux-h2: fix the "show fd" dest buffer for the subscriber
  * BUG/MEDIUM: mux-h1: always use RST to kill idle connections in pools
  * REGTESTS: http_request_buffer: Add a barrier to not mix up log messages
  * BUG/MEDIUM: mux-h1: do not refrain from signaling errors after end of input
  * BUG/MINOR: tcpcheck: Disable QUICKACK for default tcp-check (with no rule)
  * BUG/MINOR: hlua: Rely on CF_EOI to detect end of message in HTTP applets
  * BUG/MEDIUM: peers: Don't start resync on reload if local peer is not up-to-date
  * BUG/MEDIUM: peers: Don't use resync timer when local resync is in progress
  * BUG/MEDIUM: peers: Add connect and server timeut to peers proxy
  * BUG/MEDIUM: spoe: Properly update streams waiting for a ACK in async mode
  * DOC: configuration: do-resolve doesn't work with a port in the string
  * REGTESTS: Fix prometheus script to perform HTTP health-checks
  * BUG/MINOR: tcpcheck: Disable QUICKACK only if data should be sent after connect
  * BUG/MINOR: resolvers: return the correct value in resolvers_finalize_config()
  * BUG/MAJOR: mworker: fix infinite loop on master with no proxies.
  * BUG/MAJOR: log-forward: Fix log-forward proxies not fully initialized
  * BUG/MEDIUM: mux-h2: do not fiddle with -&gt;dsi to indicate demux is idle
  * BUG/MEDIUM: http-ana: fix crash or wrong header deletion by http-restrict-req-hdr-names
  * BUILD: http: silence an uninitialized warning affecting gcc-5
  * BUG/MEDIUM: ring: fix too lax 'size' parser
  * BUILD: debug: silence warning on gcc-5
  * BUG/MEDIUM: task: relax one thread consistency check in task_unlink_wq()
  * BUG/MEDIUM: poller: use fd_delete() to release the poller pipes
  * BUILD: cfgparse: always defined _GNU_SOURCE for sched.h and crypt.h
  * BUG/MINOR: sink: fix a race condition between the writer and the reader
  * BUG/MINOR: ring/cli: fix a race condition between the writer and the reader
  * BUG/MEDIUM: proxy: Perform a custom copy for default server settings
  * REORG: server: Export srv_settings_cpy() function
  * MINOR: server: Constify source server to copy its settings
  * BUG/MEDIUM: dns: Properly initialize new DNS session
  * BUG/MINOR: peers: Use right channel flag to consider the peer as connected
  * BUG/MEDIUM: peers: limit reconnect attempts of the old process on reload
  * MINOR: peers: Use a dedicated reconnect timeout when stopping the local peer
  * BUG/MEDIUM: pattern: only visit equivalent nodes when skipping versions
  * MINOR: ebtree: add ebmb_lookup_shorter() to pursue lookups
  * MINOR: http-htx: Use new HTTP functions for the scheme based normalization
  * BUG/MEDIUM: h1: Improve authority validation for CONNCET request
  * MINOR: http: Add function to detect default port
  * MINOR: http: Add function to get port part of a host
  * BUG/MEDIUM: mworker: use default maxconn in wait mode
  * [RELEASE] Released version 2.4.18
  * BUG/MINOR: sockpair: wrong return value for fd_send_uxst()
  * BUG/MINOR: backend: Fallback on RR algo if balance on source is impossible
  * BUILD: add detection for unsupported compiler models
  * BUG/MEDIUM: mworker: proc_self incorrectly set crashes upon reload
  * REGTESTS: Fix some scripts to be compatible with 2.4 and prior
  * BUG/MINOR: tools: fix statistical_prng_range()'s output range
  * BUG/MEDIUM: tools: avoid calling dlsym() in static builds (try 2)
  * BUILD: makefile: Fix install(1) handling for OpenBSD/NetBSD/Solaris/AIX
  * BUG/MEDIUM: tools: avoid calling dlsym() in static builds
  * MEDIUM: mworker: set the iocb of the socketpair without using fd_insert()
  * BUG/MEDIUM: mux-h1: Handle connection error after a synchronous send
  * BUG/MEDIUM: http-ana: Don't wait to have an empty buf to switch in TUNNEL state
  * BUG/MINOR: mux-h1: Be sure to commit htx changes in the demux buffer
  * REGTEESTS: filters: Fix CONNECT request in random-forwarding script
  * BUG/MEDIUM: http-fetch: Don't fetch the method if there is no stream
  * BUG/MINOR: http-htx: Fix scheme based normalization for URIs wih userinfo
  * BUG/MINOR: peers: fix possible NULL dereferences at config parsing
  * BUG/MINOR: http-act: Properly generate 103 responses when several rules are used
  * BUG/MINOR: http-check: Preserve headers if not redefined by an implicit rule
  * BUG/MINOR: peers/config: always fill the bind_conf's argument
  * MINOR: fd: Add BUG_ON checks on fd_insert()
  * CI: re-enable gcc asan builds
  * BUILD: Makefile: Add Lua 5.4 autodetect
  * BUG/MEDIUM: ssl/fd: unexpected fd close using async engine
  * MINOR: fd: add a new FD_DISOWN flag to prevent from closing a deleted FD
  * BUG/MINOR: http-fetch: Use integer value when possible in "method" sample fetch
  * BUG/MINOR: http-ana: Set method to HTTP_METH_OTHER when an HTTP txn is created
  * BUG/MINOR: ssl: Do not look for key in extra files if already in pem
  * MEDIUM: mux-h2: try to coalesce outgoing WINDOW_UPDATE frames
  * BUG/MEDIUM: ssl/cli: crash when crt inserted into a crt-list
  * BUG/MINOR: tcp-rules: Make action call final on read error and delay expiration
  * BUG/MINOR: cli/stats: add missing trailing LF after "show info json"
  * BUG/MINOR: server: do not enable DNS resolution on disabled proxies
  * BUG/MINOR: cli/stats: add missing trailing LF after JSON outputs
  * REGTESTS: healthcheckmail: Relax health-check failure condition
  * REGTESTS: healthcheckmail: Update the test to be functionnal again
  * BUG/MINOR: checks: Properly handle email alerts in trace messages
  * BUG/MINOR: trace: Test server existence for health-checks to get proxy
  * BUG/MEDIUM: mailers: Set the object type for check attached to an email alert
  * BUILD: compiler: implement unreachable for older compilers too
  * REGTESTS: restrict_req_hdr_names: Extend supported versions
  * REGTESTS: http_abortonclose: Extend supported versions
  * BUG/MINOR: ssl_ckch: Fix possible uninitialized value in show_cert I/O handler
  * BUG/MINOR: ssl_ckch: Dump cert transaction only once if show command yield
  * REGTESTS: http_request_buffer: Increase client timeout to wait "slow" clients
  * REGTESTS: abortonclose: Add a barrier to not mix up log messages
  * MEDIUM: http-ana: Always report rewrite failures as PRXCOND in logs
  * BUG/MEDIUM: ssl/crt-list: Rework 'add ssl crt-list' to handle full buffer cases
  * BUG/MEDIUM: ssl_ckch: Rework 'commit ssl cert' to handle full buffer cases
  * BUG/MINOR: ssl_ckch: Don't duplicate path when replacing a cert entry
  * BUG/MEDIUM: ssl_ckch: Don't delete a cert entry if it is being modified
  * BUG/MINOR: ssl_ckch: Free error msg if commit changes on a cert entry fails
  * DOC: intro: adjust the numbering of paragrams to keep the output ordered
  * DOC: peers: fix port number and addresses on new peers section format
  * DOC: peers: clarify when entry expiration date is renewed.
  * DOC: peers: indicate that some server settings are not usable
  * SCRIPTS: make publish-release try to launch make-releases-json
  * SCRIPTS: add make-releases-json to recreate a releases.json file in download dirs
  * REGTESTS: Do not use REQUIRE_VERSION for HAProxy 2.5+ (2)
  * BUG/MEDIUM: sample: Fix adjusting size in word converter
  * BUG/MEDIUM: peers: prevent unitialized multiple listeners on peers section
  * BUG/MEDIUM: peers: fix segfault using multiple bind on peers sections
  * BUG/MEDIUM: resolvers: Don't defer resolutions release in deinit function
  * BUG/MEDIUM: http: Properly reject non-HTTP/1.x protocols
  * BUG/MEDIUM: tools: Fix `inet_ntop` usage in sa2str
  * CI: determine actual OpenSSL version dynamically
  * BUILD/MINOR: cpuset fix build for FreeBSD 13.1
  * BUG/MINOR: peers: fix error reporting of "bind" lines
  * BUG/MINOR: cfgparse: abort earlier in case of allocation error
  * BUG/MINOR: check: Reinit the buffer wait list at the end of a check
  * BUG/MEDIUM: config: Reset outline buffer size on realloc error in readcfgfile()
  * REGTESTS: abortonclose: Fix some race conditions
  * BUG/MINOR: ssl: Fix crash when no private key is found in pem
  * MINOR: tools: add get_exec_path implementation for solaris based systems.
  * BUILD: fix build warning on solaris based systems with __maybe_unused.
  * MEDIUM: http-ana: Add a proxy option to restrict chars in request header names
  * CI: determine actual LibreSSL version dynamically
  * [RELEASE] Released version 2.4.17
  * CLEANUP: mux-h1: Fix comments and error messages for global options
  * BUG/MEDIUM: wdt: don't trigger the watchdog when p is unitialized
  * BUG/MINOR: conn_stream: do not confirm a connection from the frontend path
  * BUG/MINOR: server: Make SRV_STATE_LINE_MAXLEN value from 512 to 2kB (2000 bytes).
  * DOC: install: update gcc version requirements
  * BUG/MEDIUM: ssl: fix the gcc-12 broken fix :-(
  * BUILD: listener: shut report of possible null-deref in listener_accept()
  * BUILD: debug: work around gcc-12 excessive -Warray-bounds warnings
  * BUILD: ssl: work around bogus warning in gcc 12's -Wformat-truncation
  * CI: dynamically determine actual version of h2spec
  * DOC: fix typo "ant" for "and" in INSTALL
  * BUG/MINOR: map/cli: make sure patterns don't vanish under "show map"'s init
  * BUG/MINOR: map/cli: protect the backref list during "show map" errors
  * BUG/MEDIUM: cli: make "show cli sockets" really yield
  * BUG/MEDIUM: resolvers: make "show resolvers" properly yield
  * BUG/MINOR: tcp/http: release the expr of set-{src,dst}[-port]
  * DOC: config: Update doc for PR/PH session states to warn about rewrite failures
  * MINOR: mux-h2: report a trace event when failing to create a new stream
  * BUG/MINOR: mux-h2: mark the stream as open before processing it not after
  * BUG/MAJOR: dns: multi-thread concurrency issue on UDP socket
  * BUG/MEDIUM: mux-h1: Be able to handle trailers when C-L header was specified
  * BUG/MEDIUM: mux-fcgi: Be sure to never set EOM flag on an empty HTX message
  * SCRIPTS: announce-release: add URL of dev packages
  * CI: github actions: update LibreSSL to 3.5.2
  * [RELEASE] Released version 2.4.16
  * BUILD: opentracing: Fix OT build due to misuse of var_clear()
  * BUILD: proto_uxst: do not set unused flag
  * BUILD: sockpair: do not set unused flag
  * BUILD: fd: remove unused variable totlen in fd_write_frag_line()
  * CLEANUP: acl: Remove unused variable when releasing an acl expression
  * BUG/MINOR: pools: make sure to also destroy shared pools in pool_destroy_all()
  * BUG/MINOR: resolvers: Fix memory leak in resolvers_deinit()
  * BUILD: compiler: properly distinguish weak and global symbols
  * REGTESTS: fix the race conditions in be2dec.vtc ad field.vtc
  * MEDIUM: queue: use tasklet_instant_wakeup() to wake tasks
  * MINOR: task: add a new task_instant_wakeup() function
  * BUG/MINOR: rules: Fix check_capture() function to use the right rule arguments
  * DOC: remove my name from the config doc
  * BUG/MAJOR: connection: Never remove connection from idle lists outside the lock
  * BUG/MINOR: cache: Disable cache if applet creation fails
  * SCRIPTS: announce-release: add shortened links to pending issues
  * DOC: lua: update a few doc URLs
  * SCRIPTS: announce-release: update the doc's URL
  * BUG/MEDIUM: compression: Don't forget to update htx_sl and http_msg flags
  * BUG/MEDIUM: fcgi-app: Use http_msg flags to know if C-L header can be added
  * BUG/MEDIUM: stream: do not abort connection setup too early
  * BUILD: compiler: use a more portable set of asm(".weak") statements
  * BUILD: sched: workaround crazy and dangerous warning in Clang 14
  * BUG/MEDIUM: mux-h1: Don't request more room on partial trailers
  * BUG/MINOR: mux-h2: use timeout http-request as a fallback for http-keep-alive
  * BUG/MINOR: mux-h2: do not use timeout http-keep-alive on backend side
  * BUILD: debug: mark the __start_mem_stats/__stop_mem_stats symbols as weak
  * BUG/MINOR: cache: do not display expired entries in "show cache"
  * BUG/MINOR: mux-h2: do not send GOAWAY if SETTINGS were not sent
  * CI: cirrus: switch to FreeBSD-13.0
  * CI: Update to actions/cache@v3
  * CI: Update to actions/checkout@v3
  * DEBUG: opentracing: show return values of all functions in the debug output
  * CLEANUP: opentracing: added variable to store variable length
  * CLEANUP: opentracing: added flt_ot_smp_init() function
  * CLEANUP: opentracing: removed unused function flt_ot_var_get()
  * CLEANUP: opentracing: removed unused function flt_ot_var_unset()
  * DOC: opentracing: corrected comments in function descriptions
  * EXAMPLES: opentracing: refined shell scripts for testing filter performance
  * BUG/MINOR: opentracing: setting the return value in function flt_ot_var_set()
  * BUG/MEDIUM: http-act: Don't replace URI if path is not found or invalid
  * BUG/MEDIUM: http-conv: Fix url_enc() to not crush const samples
  * BUG/MEDIUM: mux-h1: Set outgoing message to DONE when payload length is reached
  * BUG/MEDIUM: promex: Be sure to never set EOM flag on an empty HTX message
  * BUG/MEDIUM: hlua: Don't set EOM flag on an empty HTX message in HTTP applet
  * BUG/MEDIUM: stats: Be sure to never set EOM flag on an empty HTX message
  * BUG/MINOR: fcgi-app: Don't add C-L header on response to HEAD requests
  * CI: github actions: update OpenSSL to 3.0.2
  * BUG/MAJOR: mux_pt: always report the connection error to the conn_stream
  * BUG/MINOR: cli/stream: fix "shutdown session" to iterate over all threads
  * BUG/MINOR: samples: add missing context names for sample fetch functions
  * DOC: reflect H2 timeout changes
  * BUG/MEDIUM: mux-h2: make use of http-request and keep-alive timeouts
  * MEDIUM: mux-h2: slightly relax timeout management rules
  * BUG/MEDIUM: stream-int: do not rely on the connection error once established
  * BUG/MEDIUM: mux-h1: Properly detect full buffer cases during message parsing
  * BUG/MEDIUM: mux-fcgi: Properly handle return value of headers/trailers parsing
  * BUG/MINOR: tools: url2sa reads too far when no port nor path
  * DOC: config: Explictly add supported MQTT versions
  * MEDIUM: mqtt: support mqtt_is_valid and mqtt_field_value converters for MQTTv3.1
  * BUG/MEDIUM: trace: avoid race condition when retrieving session from conn-&gt;owner
  * BUG/MEDIUM: mux-h1: only turn CO_FL_ERROR to CS_FL_ERROR with empty ibuf
  * CI: github actions: switch to LibreSSL-3.5.1
  * BUG/MINOR: server/ssl: free the SNI sample expression
  * BUG/MINOR: tools: fix url2sa return value with IPv4
  * [RELEASE] Released version 2.4.15
  * BUILD: tree-wide: mark a few numeric constants as explicitly long long
  * DOC: Fix usage/examples of deprecated ACLs
  * BUG/MINOR: stream: make the call_rate only count the no-progress calls
  * BUG/MINOR: session: fix theoretical risk of memleak in session_accept_fd()
  * BUG/MAJOR: mux-pt: Always destroy the backend connection on detach
  * DEBUG: stream: Fix stream trace message to print response buffer state
  * DEBUG: stream: Add the missing descriptions for stream trace events
  * BUG/MEDIUM: mcli: Properly handle errors and timeouts during reponse processing
  * DEBUG: cache: Update underlying buffer when loading HTX message in cache applet
  * BUG/MINOR: promex: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: cache: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: stats: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: hlua: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: cli: shows correct mode in "show sess"
  * BUG/MINOR: add missing modes in proxy_mode_str()
  * BUILD: pools: fix backport of no-memory-trimming on non-linux OS
  * MINOR: pools: add a new global option "no-memory-trimming"
  * BUG/MEDIUM: pools: fix ha_free() on area in the process of being freed
  * BUG/MINOR: pool: always align pool_heads to 64 bytes
  * REGTESTS: fix the race conditions in secure_memcmp.vtc
  * REGTESTS: fix the race conditions in normalize_uri.vtc
  * BUG/MEDIUM: htx: Fix a possible null derefs in htx_xfer_blks()
  * CI: github actions: use cache for SSL libs
  * CI: github actions: use cache for OpenTracing
  * CI: github actions: add OpenTracing builds
  * CI: github actions: add the output of $CC -dM -E-
  * [RELEASE] Released version 2.4.14
  * BUG/MEDIUM: stream: Abort processing if response buffer allocation fails
  * CI: github: enable pool debugging by default
  * REGTESTS: fix the race conditions in 40be_2srv_odd_health_checks
  * BUG/MINOR: proxy: preset the error message pointer to NULL in parse_new_proxy()
  * BUG/MAJOR: mux-h2: Be sure to always report HTX parsing error to the app layer
  * BUG/MEDIUM: mux-h1: Don't wake h1s if mux is blocked on lack of output buffer
  * BUG/MEDIUM: htx: Be sure to have a buffer to perform a raw copy of a message
  * BUG/MINOR: tools: url2sa reads ipv4 too far
  * BUG/MINOR: mailers: negotiate SMTP, not ESMTP
  * CI: github actions: update OpenSSL to 3.0.1
  * CI: github: switch to OpenSSL 3.0.0
  * CI: github actions: relax OpenSSL-3.0.0 version comparision
  * CI: github actions: -Wno-deprecated-declarations with OpenSSL 3.0.0
  * CI: github actions: add OpenSSL-3.0.0 builds
  * BUILD: adopt script/build-ssl.sh for OpenSSL-3.0.0beta2
  * BUILD: fix compilation for OpenSSL-3.0.0-alpha17
  * CI: ssl: keep the old method for ancient OpenSSL versions
  * CI: ssl: do not needlessly build the OpenSSL docs
  * CI: ssl: enable parallel builds for OpenSSL on Linux
  * BUG/MAJOR: compiler: relax alignment constraints on certain structures
  * BUG/MEDIUM: fd: always align fdtab[] to 64 bytes
  * BUG/MEDIUM: resolvers: Really ignore trailing dot in domain names
  * BUG/MINOR: sink: Use the right field in appctx context in release callback
  * BUG/MINOR: mworker: fix a FD leak of a sockpair upon a failed reload
  * BUG/MEDIUM: mworker: close unused transferred FDs on load failure
  * MINOR: sock: move the unused socket cleaning code into its own function
  * [RELEASE] Released version 2.4.13
  * BUG/MINOR: mux-h2: update the session's idle delay before creating the stream
  * BUG/MEDIUM: h2/hpack: fix emission of HPACK DTSU after settings change
  * REGTESTS: peers: leave a bit more time to peers to synchronize
  * BUG/MAJOR: spoe: properly detach all agents when releasing the applet
  * BUG/MAJOR: http/htx: prevent unbounded loop in http_manage_server_side_cookies
  * BUG/MEDIUM: listener: read-lock the listener during accept()
  * MINOR: listener: replace the listener's spinlock with an rwlock
  * BUG/MINOR: mworker: does not erase the pidfile upon reload
  * BUG/MAJOR: sched: prevent rare concurrent wakeup of multi-threaded tasks
  * DEBUG: pools: replace the link pointer with the caller's address on pool_free()
  * DEBUG: pools: let's add reverse mapping from cache heads to thread and pool
  * DEBUG: pools: add extra sanity checks when picking objects from a local cache
  * BUG/MINOR: pools: always flush pools about to be destroyed
  * BUG/MEDIUM: mworker: don't lose the stats socket on failed reload
  * DEBUG: pools: add new build option DEBUG_POOL_INTEGRITY
  * BUILD: debug/cli: condition test of O_ASYNC to its existence
  * DEBUG: cli: add a new "debug dev fd" expert command
  * MEDIUM: h2/hpack: emit a Dynamic Table Size Update after settings change
  * BUG/MEDIUM: mcli: always realign wrapping buffers before parsing them
  * BUG/MEDIUM: mcli: do not try to parse empty buffers
  * BUG/MEDIUM: cli: Never wait for more data on client shutdown
  * BUG/MINOR: cli: avoid O(bufsize) parsing cost on pipelined commands
  * MINOR: channel: add new function co_getdelim() to support multiple delimiters
  * MEDIUM: cli: yield between each pipelined command
  * BUG/MEDIUM: server: avoid changing healthcheck ctx with set server ssl
  * BUILD/MINOR: fix solaris build with clang.
  * BUG/MEDIUM: htx: Adjust length to add DATA block in an empty HTX buffer
  * BUG/MEDIUM: connection: properly leave stopping list on error
  * [RELEASE] Released version 2.4.12
  * BUG/MAJOR: mux-h1: Don't decrement .curr_len for unsent data
  * BUG/MEDIUM: mworker: don't use _getsocks in wait mode
  * [RELEASE] Released version 2.4.11
  * BUG/MEDIUM: http-ana: Preserve response's FLT_END analyser on L7 retry
  * BUG/MINOR: cli: fix _getsocks with musl libc
  * BUILD/MINOR: tools: solaris build fix on dladdr.
  * BUILD/MINOR: cpuset FreeBSD 14 build fix.
  * BUG/MEDIUM: ssl: free the ckch instance linked to a server
  * BUG/MINOR: ssl: free the fields in srv-&gt;ssl_ctx
  * MINOR: debug: add support for -dL to dump library names at boot
  * MINOR: debug: add ability to dump loaded shared libraries
  * MINOR: compat: detect support for dl_iterate_phdr()
  * BUG/MINOR: mux-h1: Fix splicing for messages with unknown length
  * BUG/MEDIUM: mux-h1: Fix splicing by properly detecting end of message
  * BUILD: makefile: add -Wno-atomic-alignment to work around clang abusive warning
  * MINOR: proxy: add option idle-close-on-response
  * REGTESTS: ssl: fix ssl_default_server.vtc
  * BUG/MEDIUM: ssl: initialize correctly ssl w/ default-server
  * DOC: fix misspelled keyword "resolve_retries" in resolvers
  * BUILD: ssl: unbreak the build with newer libressl
  * BUILD: cli: clear a maybe-unused  warning on some older compilers
  * BUG/MINOR: pools: don't mark ourselves as harmless in DEBUG_UAF mode
  * BUG/MEDIUM: backend: fix possible sockaddr leak on redispatch
  * [RELEASE] Released version 2.4.10
  * BUG/MINOR: backend: restore the SF_SRV_REUSED flag original purpose
  * BUG/MINOR: backend: do not set sni on connection reuse
  * MINOR: pools: work around possibly slow malloc_trim() during gc
  * BUG/MEDIUM: mworker/cli: crash when trying to access an old PID in prompt mode
  * DOC: config: retry-on list is space-delimited
  * DOC: config: Specify %Ta is only available in HTTP mode
  * DOC: spoe: Clarify use of the event directive in spoe-message section
  * BUG/MINOR: cli/server: Don't crash when a server is added with a custom id
  * IMPORT: slz: use the correct CRC32 instruction when running in 32-bit mode
  * BUILD: tree-wide: avoid warnings caused by redundant checks of obj_types
  * MINOR: cli: "show version" displays the current process version
  * CI: Github Actions: temporarily disable BoringSSL builds
  * BUILD: bug: Fix error when compiling with -DDEBUG_STRICT_NOCRASH
  * MINOR: mux-h1: Improve H1 traces by adding info about http parsers
  * BUG/MAJOR: segfault using multiple log forward sections.
  * BUG/MEDIUM: resolvers: Detach query item on response error
  * BUG/MINOR: server: Don't rely on last default-server to init server SSL context
  * BUG/MEDIUM: cli: Properly set stream analyzers to process one command at a time
  * BUILD/MINOR: server: fix compilation without SSL
  * [RELEASE] Released version 2.4.9
  * BUG/MINOR: cache: Fix loop on cache entries in "show cache"
  * MINOR: promex: backend aggregated server check status
  * MINOR: server: add ws keyword
  * MEDIUM: server/backend: implement websocket protocol selection
  * MINOR: connection: add alternative mux_ops param for conn_install_mux_be
  * MINOR: connection: implement function to update ALPN
  * MINOR: stream/mux: implement websocket stream flag
  * BUG/MINOR: ssl: make SSL counters atomic
  * MINOR: shctx: add a few BUG_ON() for consistency checks
  * BUG/MINOR: shctx: do not look for available blocks when the first one is enough
  * BUG/MEDIUM: shctx: leave the block allocator when enough blocks are found
  * BUG/MEDIUM: cache/cli: make "show cache" thread-safe
  * BUG/MEDIUM: mux-h2: always process a pending shut read
  * BUG/MEDIUM: ssl: abort with the correct SSL error when SNI not found
  * CLEANUP: ssl: fix wrong #else commentary
  * BUG/MINOR: ssl: free correctly the sni in the backend SSL cache
  * BUG/MEDIUM: ssl: backend TLS resumption with sni and TLSv1.3
  * BUILD: makefile: simplify detection of libatomic
  * BUG/MEDIUM: mux-h1: Handle delayed silent shut in h1_process() to release H1C
  * BUG/MINOR: stick-table/cli: Check for invalid ipv6 key
  * BUG/MEDIUM: connection: make cs_shutr/cs_shutw//cs_close() idempotent
  * BUG/MINOR: mux-h2: Fix H2_CF_DEM_SHORT_READ value
  * BUG/MINOR: mworker: doesn't launch the program postparser
  * BUG/MEDIUM: conn-stream: Don't reset CS flags on close
  * MINOR: mux-h1: Slightly Improve H1 traces
  * DOC: lua: Be explicit with the Reply object limits
  * Revert "BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back"
  * BUG/MINOR: http-ana: Apply stop to the current section for http-response rules
  * DOC: config: Fix typo in ssl_fc_unique_id description
  * BUG/MINOR: cache: properly ignore unparsable max-age in quotes
  * BUG/MINOR: resolvers: throw log message if trash not large enough for query
  * BUG/MINOR: resolvers: fix sent messages were counted twice
  * BUG/MEDIUM: mux-h2: reject upgrade if no RFC8441 support
  * MINOR: mux-h2: add trace on extended connect usage
  * MINOR: mux-h2: perform a full cycle shutdown+drain on close
  * MINOR: connection: add a new CO_FL_WANT_DRAIN flag to force drain on close</changelog>
  <changelog author="varkoly@suse.com" date="1692014400">- VUL-0: CVE-2023-40225: haproxy: reject any empty content-length header value
  (bsc#1214102) Apply upstream patch adapted for 2.4.22 (patch h2_parse_cont_len_header() instead of http_parse_cont_len_header())
  Add patch: 0001-BUG-MAJOR-http-reject-any-empty-content-length-heade.patch</changelog>
  <changelog author="varkoly@suse.com" date="1701345600">- VUL-0: CVE-2023-45539: haproxy: misinterpretation of a path_end rule with # as part of the URI component
  (bsc#1217653) Apply upstream patch.
  Add patch: 0001-BUG-MINOR-h1-do-not-accept-as-part-of-the-URI-compon.patch</changelog>
</package>
<package pkgid="7c0630c171ef55ed6aa8ce2687db001f8a4b7247868b5097fcda32e4358b1a06" name="haproxy" arch="x86_64">
  <version epoch="0" ver="2.4.22+git0.f8e3218e2" rel="150400.3.19.1"/>
  <changelog author="mrueckert@suse.de" date="1614772800">- Update to version 2.3.6+git0.7851701ed:
  * [RELEASE] Released version 2.3.6
  * BUG/MINOR: http-ana: Don't increment HTTP error counter on read error/timeout
  * BUG/MINOR: mux-h2: Fix typo in scheme adjustment
  * DOC: spoe: Add a note about fragmentation support in HAProxy
  * BUG/MEDIUM: spoe: Kill applets if there are pending connections and nbthread &gt; 1
  * BUG/MINOR: connection: Use the client's dst family for adressless servers
  * BUG/MINOR: tcp-act: Don't forget to set the original port for IPv4 set-dst rule
  * BUG/MINOR: http-ana: Only consider dst address to process originalto option
  * BUG/MINOR: mux-h1: Immediately report H1C errors from h1_snd_buf()
  * BUG/MINOR: stats: fix compare of no-maint url suffix
  * CLEANUP: muxes: Remove useless if condition in show_fd function
  * BUG/MINOR: ssl: potential null pointer dereference in ckchs_dup()
  * BUG/MEDIUM: resolvers: Reset address for unresolved servers
  * BUG/MEDIUM: resolvers: Reset server address and port for obselete SRV records
  * BUG/MINOR: resolvers: new callback to properly handle SRV record errors
  * BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record
  * BUG/MINOR: resolvers: Fix condition to release received ARs if not assigned
  * BUG/MINOR: fd: properly wait for !running_mask in fd_set_running_excl()
  * BUG/MINOR: proxy: wake up all threads when sending the hard-stop signal
  * BUG/MEDIUM: cli/shutdown sessions: make it thread-safe
  * BUG/MEDIUM: proxy: use thread-safe stream killing on hard-stop
  * BUG/MEDIUM: vars: make functions vars_get_by_{name,desc} thread-safe
  * BUG/MINOR: sample: secure convs that accept base64 string and var name as args
  * MINOR: Configure the `cpp` userdiff driver for *.[ch] in .gitattributes
  * BUG/MINOR: ssl/cli: potential null pointer dereference in "set ssl cert"
  * BUG/MEDIUM: mux-h1: Fix handling of responses to CONNECT other than 200-ok
  * BUG/MINOR: server: Be sure to cut the last parsed field of a server-state line
  * BUG/MINOR: server: Init params before parsing a new server-state line
  * BUG/MINOR: http-rules: Always replace the response status on a return action
  * BUG/MEDIUM: spoe: Resolve the sink if a SPOE logs in a ring buffer
  * BUG/MEDIUM: lists: Avoid an infinite loop in MT_LIST_TRY_ADDQ().
  * DOC: explain the relation between pool-low-conn and tune.idle-pool.shared
  * BUILD: ssl: introduce fine guard for OpenSSL specific SCTL functions
  * BUG/MINOR: sample: Always consider zero size string samples as unsafe
  * BUG/MEDIUM: checks: don't needlessly take the server lock in health_adjust()
  * BUG/MINOR: checks: properly handle wrapping time in __health_adjust()
  * BUG/MINOR: session: atomically increment the tracked sessions counter
  * BUG/MINOR: server: Remove RMAINT from admin state when loading server state
  * CLEANUP: channel: fix comment in ci_putblk.
  * DOC: tune: explain the origin of block size for ssl.cachesize
  * BUG/MINOR: server: Don't call fopen() with server-state filepath set to NULL
  * BUG/MINOR: cfgparse: do not mention "addr:port" as supported on proxy lines
  * BUG/MINOR: stats: revert the change on ST_CONVDONE
  * BUG/MEDIUM: config: don't pick unset values from last defaults section
  * CLEANUP: deinit: release global and per-proxy server-state variables on deinit
  * BUG/MINOR: server: Fix server-state-file-name directive
  * BUG/MINOR: backend: hold correctly lock when killing idle conn
  * BUG/MINOR: tools: Fix a memory leak on error path in parse_dotted_uints()
  * BUG/MINOR: server: re-align state file fields number
  * BUG/MEDIUM: mux-h1: Always set CS_FL_EOI for response in MSG_DONE state
  * BUG/MINOR: http-ana: Don't increment HTTP error counter on internal errors
  * BUG/MINOR: intops: fix mul32hi()'s off-by-one
  * BUILD: ssl: guard SSL_CTX_set_msg_callback with SSL_CTRL_SET_MSG_CALLBACK macro
  * BUILD: ssl: guard SSL_CTX_add_server_custom_ext with special macro
  * BUILD: ssl: fix typo in HAVE_SSL_CTX_ADD_SERVER_CUSTOM_EXT macro
  * MINOR: check: do not ignore a connection header for http-check send</changelog>
  <changelog author="mrueckert@suse.de" date="1615896000">- Update to version 2.3.7+git0.2d39ce334:
  * [RELEASE] Released version 2.3.7
  * BUG/MINOR: resolvers: Add missing case-insensitive comparisons of DNS hostnames
  * MINOR: resolvers: Don't try to match immediatly renewed ADD items
  * MINOR: resolvers: Use milliseconds for cached items in resolver responses
  * BUG/MEDIUM: resolvers: Skip DNS resolution at startup if SRV resolution is set
  * BUG/MEDIUM: resolvers: Don't release resolution from a requester callbacks
  * MINOR: resolvers: Directly call srvrq_update_srv_state() when possible
  * MINOR: resolvers: Add function to change the srv status based on SRV resolution
  * MINOR: resolvers: Purge answer items when a SRV resolution triggers an error
  * MINOR: resolvers: Use a function to remove answers attached to a resolution
  * BUG/MEDIUM: resolvers: Trigger a DNS resolution if an ADD item is obsolete
  * BUG/MINOR; resolvers: Ignore DNS resolution for expired SRV item
  * MINOR: resolvers: new function find_srvrq_answer_record()
  * BUG/MEDIUM: resolvers: Fix the loop looking for an existing ADD item
  * BUG/MEDIUM: resolvers: Don't set an address-less server as UP
  * BUG/MINOR: resolvers: Unlink DNS resolution to set RMAINT on SRV resolution
  * BUG/MINOR: resolvers: Reset server address on DNS error only on status change
  * BUG/MINOR: resolvers: Consider server to have no IP on DNS resolution error
  * Revert "BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record"
  * CLEANUP: tcp-rules: add missing actions in the tcp-request error message
  * BUG/MINOR: tcpcheck: Fix double free on error path when parsing tcp/http-check
  * BUG/MINOR: session: Add some forgotten tests on session's listener
  * BUG/MINOR: proxy/session: Be sure to have a listener to increment its counters
  * BUG/MINOR: tcpcheck: Update .health threshold of agent inside an agent-check
  * BUG/MEDIUM: filters: Set CF_FL_ANALYZE on channels when filters are attached
  * BUILD: atomic/arm64: force the register pairs to use in __ha_cas_dw()
  * BUG/MEDIUM: stick-tables: fix ref counter in table entry using multiple http tracksc.
  * OPTIM: task: automatically adjust the default runqueue-depth to the threads
  * MINOR: task: give the scheduler a bit more flexibility in the runqueue size
  * MEDIUM: task: remove the tasks_run_queue counter and have one per thread
  * MEDIUM: ssl: implement xprt_set_used and xprt_set_idle to relax context checks
  * MINOR: xprt: add new xprt_set_idle and xprt_set_used methods
  * MEDIUM: muxes: mark idle conns tasklets with TASK_F_USR1
  * MINOR: task: add an application specific flag to the state: TASK_F_USR1
  * BUG/MEDIUM: ssl: properly remove the TASK_HEAVY flag at end of handshake
  * MINOR: ssl: mark the SSL handshake tasklet as heavy
  * MINOR: task: limit the number of subsequent heavy tasks with flag TASK_HEAVY
  * MEDIUM: backend: use a trylock when trying to grab an idle connection
  * MINOR: pools: double the local pool cache size to 1 MB
  * MEDIUM: pools: add CONFIG_HAP_NO_GLOBAL_POOLS and CONFIG_HAP_GLOBAL_POOLS
  * MEDIUM: streams: do not use the streams lock anymore
  * MINOR: streams: use one list per stream instead of a global one
  * MINOR: cli/streams: make "show sess" dump all streams till the new epoch
  * MINOR: stream: add an "epoch" to figure which streams appeared when
  * MINOR: dynbuf: pass offer_buffers() the number of buffers instead of a threshold
  * MINOR: dynbuf: use regular lists instead of mt_lists for buffer_wait
  * MINOR: dynbuf: make the buffer wait queue per thread
  * OPTIM: lb-leastconn: do not unlink the server if it did not change
  * OPTIM: lb-leastconn: do not take the server lock on take_conn/drop_conn
  * OPTIM: lb-first: do not take the server lock on take_conn/drop_conn
  * MINOR: lb/api: let callers of take_conn/drop_conn tell if they have the lock
  * MINOR: server: move actconns to the per-thread structure
  * OPTIM: server: switch the actconn list to an mt-list
  * MINOR: listener: refine the default MAX_ACCEPT from 64 to 4
  * MINOR: tasks: refine the default run queue depth
  * BUG/MEDIUM: session: NULL dereference possible when accessing the listener
  * MINOR: atomic: implement a more efficient arm64 __ha_cas_dw() using pairs
  * MINOR: atomic: add armv8.1-a atomics variant for cas-dw
  * BUG/MINOR: mt-list: always perform a cpu_relax call on failure
  * REORG: atomic: reimplement pl_cpu_relax() from atomic-ops.h
  * BUG/MINOR: ssl: don't truncate the file descriptor to 16 bits in debug mode
  * BUG/MINOR: hlua: Don't strip last non-LWS char in hlua_pushstrippedstring()
  * BUG/MINOR: backend: fix condition for reuse on mode HTTP</changelog>
  <changelog author="mrueckert@suse.de" date="1616673600">- Update to version 2.3.8+git0.e572195c7:
  * [RELEASE] Released version 2.3.8
  * BUG/MINOR: http_fetch: make hdr_ip() reject trailing characters
  * MINOR: tools: make url2ipv4 return the exact number of bytes parsed
  * BUG/MEDIUM: thread: Fix a deadlock if an isolated thread is marked as harmless
  * BUG/MEDIUM: fd: Take the fd_mig_lock when closing if no DWCAS is available.
  * CLEANUP: fd: remove unused fd_set_running_excl()
  * BUG/MEDIUM: fd: do not wait on FD removal in fd_delete()
  * MINOR: fd: remove the unneeded running bit from fd_insert()
  * MINOR: fd: make fd_clr_running() return the remaining running mask
  * BUG/MEDIUM: lua: Always init the lua stack before referencing the context
  * BUG/MEDIUM: debug/lua: Use internal hlua function to dump the lua traceback
  * MINOR: lua: Slightly improve function dumping the lua traceback
  * BUILD: ssl: guard ecdh functions with SSL_CTX_set_tmp_ecdh macro
  * BUG/MINOR: ssl: Prevent disk access when using "add ssl crt-list"
  * BUG/MEDIUM: debug/lua: Don't dump the lua stack if not dumpable
  * MEDIUM: lua: Use a per-thread counter to track some non-reentrant parts of lua
  * MINOR/BUG: mworker/cli: do not use the unix_bind prefix for the master CLI socket
  * BUG/MINOR: protocol: add missing support of dgram unix socket.
  * BUG/MEDIUM: freq_ctr/threads: use the global_now_ms variable
  * MINOR: time: also provide a global, monotonic global_now_ms timer
  * BUG/MEDIUM: mux-fcgi: Fix locking of idle_conns lock in the FCGI I/O callback
  * BUG/MINOR: freq_ctr/threads: make use of the last updated global time
  * MINOR: time: export the global_now variable</changelog>
  <changelog author="mrueckert@suse.de" date="1617105600">- Update to version 2.3.9+git1.afb63bc04:
  * BUILD: backend: fix build breakage in idle conn locking fix
  * [RELEASE] Released version 2.3.9
  * BUG/MEDIUM: time: make sure to always initialize the global tick
  * BUG/MINOR: stats: Apply proper styles in HTML status page.
  * BUG/MINOR: payload: Wait for more data if buffer is empty in payload/payload_lv
  * MEDIUM: backend: use a trylock to grab a connection on high FD counts as well
  * BUG/MEDIUM: mux-h1: make h1_shutw_conn() idempotent</changelog>
  <changelog author="mrueckert@suse.de" date="1619179200">- Update to version 2.3.10+git0.4764f0e4e:
  * [RELEASE] Released version 2.3.10
  * BUG/MEDIUM: peers: re-work refcnt on table to protect against flush
  * BUG/MEDIUM: peers: re-work connection to new process during reload.
  * BUG/MINOR: peers: remove useless table check if initial resync is finished
  * BUG/MEDIUM: mux-h2: Properly handle shutdowns when received with data
  * BUG/MINOR: mworker: don't use oldpids[] anymore for reload
  * BUG/MINOR: mworker/init: don't reset nb_oldpids in non-mworker cases
  * BUG/MEDIUM: config: fix cpu-map notation with both process and threads
  * BUG/MEDIUM: mux-h2: Fix dfl calculation when merging CONTINUATION frames
  * BUG/MAJOR: mux-h2: Properly detect too large frames when decoding headers
  * BUG/MINOR: server: free srv.lb_nodes in free_server
  * BUG/MINOR: mux-h1: Release idle server H1 connection if data are received
  * BUG/MINOR: logs: Report the true number of retries if there was no connection
  * BUG/MINOR: http_htx: Remove BUG_ON() from http_get_stline() function
  * BUG/MINOR: http-fetch: Make method smp safe if headers were already forwarded
  * BUG/MINOR: ssl-samples: Fix ssl_bc_* samples when called from a health-check
  * MINOR: connection: Make bc_http_major compatible with tcp-checks
  * BUG/MINOR: connection: Fix fc_http_major and bc_http_major for TCP connections
  * MINOR: logs: Add support of checks as session origin to format lf strings
  * BUG/MINOR: checks: Set missing id to the dummy checks frontend
  * BUG/MEDIUM: threads: Ignore current thread to end its harmless period
  * DOC: ssl: Certificate hot update only works on fronted certificates
  * BUG/MEDIUM: sample: Fix adjusting size in field converter
  * MINOR: No longer rely on deprecated sample fetches for predefined ACLs
  * DOC: clarify that compression works for HTTP/2
  * BUG/MINOR: tools: fix parsing "us" unit for timers
  * CONTRIB: halog: fix issue with array of type char
  * REGTESTS: ssl: mark set_ssl_cert_bundle.vtc as broken
  * DOC: Explicitly state only IPv4 are supported by forwardfor/originalto options
  * REGTESTS: ssl: "set ssl cert" and multi-certificates bundle
  * BUG/MINOR: ssl: Add missing free on SSL_CTX in ckch_inst_free
  * BUG/MINOR: http_fetch: make hdr_ip() resistant to empty fields
  * BUG/MINOR: ssl: Prevent removal of crt-list line if the instance is a default one
  * BUG/MINOR: ssl: Fix update of default certificate
  * BUILD: tcp: use IPPROTO_IPV6 instead of SOL_IPV6 on FreeBSD/MacOS
  * BUG/MINOR: tcp: fix silent-drop workaround for IPv6</changelog>
  <changelog author="mrueckert@suse.de" date="1620993600">- Update to version 2.4.0+git0.6cbbecf09:
  https://www.haproxy.com/blog/announcing-haproxy-2-4/
  for all the details see /usr/share/doc/packages/haproxy/CHANGELOG
- refreshed patches to apply cleanly again
  haproxy-1.6.0-makefile_lib.patch
  haproxy-1.6.0-sec-options.patch
  lua54.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1623931200">- Update to version 2.4.1+git0.1ce7d4925:
  * [RELEASE] Released version 2.4.1
  * BUG/MINOR: mux-h2/traces: bring back the lost "sent H2 REQ/RES" traces
  * BUG/MINOR: mux-h2/traces: bring back the lost "rcvd H2 REQ" trace
  * MINOR: mux-h2: obey http-ignore-probes during the preface
  * BUG/MINOR: stats: make "show stat typed desc" work again
  * CLEANUP: mux-h2/traces: better align user messages
  * MINOR: mux-h2/trace: report a few connection-level info during h2_init()
  * MINOR: connection: add helper conn_append_debug_info()
  * BUG/MINOR: server: explicitly set "none" init-addr for dynamic servers
  * BUG/MINOR: mux-h1: do not skip the error response on bad requests
  * MINOR: backend: only skip LB when there are actual connections
  * BUG/MAJOR: queue: set SF_ASSIGNED when setting strm-&gt;target on dequeue
  * CLEANUP: global: remove unused definition of stopping_task[]
  * BUG/MINOR: mworker: fix typo in chroot error message
  * BUG/MINOR: ssl: use atomic ops to update global shctx stats
  * BUG/MEDIUM: shctx: use at least thread-based locking on USE_PRIVATE_CACHE
  * BUG/MEDIUM: server: do not auto insert a dynamic server in px addr_node
  * BUG/MINOR: server: do not keep an invalid dynamic server in px ids tree
  * BUG/MEDIUM: server: do not forget to generate the dynamic servers ids
  * BUG/MEDIUM: server: clear dynamic srv on delete from proxy id/name trees
  * BUG/MEDIUM: server: extend thread-isolate over much of CLI 'add server'
  * BUG/MINOR: stick-table: insert srv in used_name tree even with fixed id
  * DOC: lua: Add a warning about buffers modification in HTTP
  * BUG/MAJOR: resolvers: segfault using server template without SRV RECORDs
  * MEDIUM: resolvers: add a ref between servers and srv request or used SRV record
  * MEDIUM: resolvers: add a ref on server to the used A/AAAA answer item
  * BUG/MINOR: resolvers: answser item list was randomly purged or errors
  * CLEANUP: l7-retries: do not test the buffer before calling b_alloc()
  * BUG/MINOR: mux-fcgi: Expose SERVER_SOFTWARE parameter by default
  * BUG/MAJOR: htx: Fix htx_defrag() when an HTX block is expanded
  * CLEANUP: pools: remove now unused seq and pool_free_list
  * BUG/MAJOR: pools: fix possible race with free() in the lockless variant
  * MEDIUM: pools: use a single pool_gc() function for locked and lockless
  * MINOR: pools: call malloc_trim() under thread isolation
  * MINOR: pools: do not maintain the lock during pool_flush()
  * BUG/MINOR: pools: make DEBUG_UAF always write to the to-be-freed location
  * BUG/MINOR: pools: fix a possible memory leak in the lockless pool_flush()
  * BUG/MEDIUM: compression: Add a flag to know the filter is still processing data
  * BUG/MEDIUM: compression: Properly get the next block to iterate on payload
  * BUG/MEDIUM: compression: Fix loop skipping unused blocks to get the next block
  * BUG/MEDIUM: opentracing: initialization before establishing daemon and/or chroot mode
  * Revert "BUG/MINOR: opentracing: initialization after establishing daemon mode"
  * BUG/MINOR: ssl: OCSP stapling does not work if expire too far in the future
  * BUILD: make tune.ssl.keylog available again
  * DOC: use the req.ssl_sni in examples
  * MINOR: errors: allow empty va_args for diag variadic macro
  * BUG/MAJOR: stream-int: Release SI endpoint on server side ASAP on retry
  * DOC/MINOR: move uuid in the configuration to the right alphabetical order
  * BUG/MINOR: vars: Be sure to have a session to get checks variables
  * CLEANUP: http-ana: Remove useless if statement about L7 retries
  * BUG/MINOR: proxy: Missing calloc return value check in chash_init_server_tree
  * BUG/MINOR: http: Missing calloc return value check in make_arg_list
  * BUG/MINOR: http: Missing calloc return value check while parsing redirect rule
  * BUG/MINOR: worker: Missing calloc return value check in mworker_env_to_proc_list
  * BUG/MINOR: compression: Missing calloc return value check in comp_append_type/algo
  * BUG/MINOR: http: Missing calloc return value check while parsing tcp-request rule
  * BUG/MINOR: http: Missing calloc return value check while parsing tcp-request/tcp-response
  * BUG/MINOR: proxy: Missing calloc return value check in proxy_defproxy_cpy
  * BUG/MINOR: proxy: Missing calloc return value check in proxy_parse_declare
  * BUG/MINOR: http: Missing calloc return value check in parse_http_req_capture
  * BUG/MINOR: ssl: Missing calloc return value check in ssl_init_single_engine
  * BUG/MINOR: peers: Missing calloc return value check in peers_register_table
  * BUG/MINOR: server: Missing calloc return value check in srv_parse_source
  * DOC: intro: Fix typo in starter guide
  * MINOR: cfgparse: Fail when encountering extra arguments in macro
  * MINOR: http-ana: Perform L7 retries because of status codes in response analyser
  * BUG/MINOR: http-ana: Handle L7 retries on refused early data before K/A aborts
  * BUG/MINOR: http-ana: Send the right error if max retries is reached on L7 retry
  * Revert "MEDIUM: http-ana: Deal with L7 retries in HTTP analysers"
  * BUG/MINOR: http-comp: Preserve HTTP_MSGF_COMPRESSIONG flag on the response
  * BUG/MEDIUM: filters: Exec pre/post analysers only one time per filter
  * BUILD/MINOR: opentracing: fixed build when using clang
  * BUG/MAJOR: server: prevent deadlock when using 'set maxconn server'
  * BUG/MEDIUM: ebtree: Invalid read when looking for dup entry</changelog>
  <changelog author="mrueckert@suse.de" date="1625659200">- Update to version 2.4.2+git0.553dee326:
  * [RELEASE] Released version 2.4.2
  * REGTESTS: add http scheme-based normalization test
  * MEDIUM: h2: apply scheme-based normalization on h2 requests
  * MEDIUM: h1-htx: apply scheme-based normalization on h1 requests
  * MEDIUM: http: implement scheme-based normalization
  * MINOR: http: implement http_get_scheme
  * Revert "MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules"
  * BUG/MINOR: cli: fix server name output in "show fd"
  * BUG/MEDIUM: sock: make sure to never miss early connection failures
  * DOC: stick-table: add missing documentation about gpt0 stored type
  * BUG/MINOR: peers: fix data_type bit computation more than 32 data_types
  * BUG/MINOR: stick-table: fix several printf sign errors dumping tables
  * DOC: config: use CREATE USER for mysql-check
  * BUG/MEDIUM: resolvers: Make 1st server of a template take part to SRV resolution
  * BUG/MINOR: mqtt: Support empty client ID in CONNECT message
  * BUG/MINOR: mqtt: Fix parser for string with more than 127 characters
  * BUG/MINOR: tcpcheck: Fix numbering of implicit HTTP send/expect rules
  * BUILD: Makefile: fix linkage for Haiku.
  * BUG/MINOR: checks: return correct error code for srv_parse_agent_check
  * MINOR: resolvers: Reset server IP on error in resolv_get_ip_from_response()
  * BUG/MINOR: resolvers: Reset server IP when no ip is found in the response
  * BUG/MINOR: resolvers: Always attach server on matching record on resolution
  * CLEANUP: dns: Remove a forgotten debug message
  * DOC: config: Add missing actions in "tcp-request session" documentation
  * MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules
  * REGTESTS: fix maxconn update with agent-check
  * BUG/MAJOR: server: fix deadlock when changing maxconn via agent-check
  * BUG/MINOR: cache: Correctly handle existing-but-empty 'accept-encoding' header
  * BUG/MINOR: server/cli: Fix locking in function processing "set server" command
  * BUG/MINOR: resolvers: Use resolver's lock in resolv_srvrq_expire_task()
  * BUG/MEDIUM: resolvers: Add a task on servers to check SRV resolution status
  * MINOR: resolvers: Remove server from named_servers tree when removing a SRV item
  * MINOR: resolvers: Clean server in a dedicated function when removing a SRV item
  * BUG/MEDIUM: server/cli: Fix ABBA deadlock when fqdn is set from the CLI
  * BUG/MINOR: server: Forbid to set fqdn on the CLI if SRV resolution is enabled
  * BUG/MINOR: server-state: load SRV resolution only if params match the config</changelog>
  <changelog author="mrueckert@suse.de" date="1629201600">- Update to version 2.4.3+git0.4dd5a5a6c:
    CVE-2021-39240 CVE-2021-39241 CVE-2021-39242
    (boo#1189366 boo#1189548 boo#1189549)
  * [RELEASE] Released version 2.4.3
  * REGTESTS: add a test to prevent h2 desync attacks
  * BUG/MEDIUM: h2: give :authority precedence over Host
  * BUG/MAJOR: h2: enforce stricter syntax checks on the :method pseudo-header
  * BUG/MAJOR: h2: verify that :path starts with a '/' before concatenating it
  * BUG/MAJOR: h2: verify early that non-http/https schemes match the valid syntax
  * MINOR: http: add a new function http_validate_scheme() to validate a scheme
  * DOC/MINOR: fix typo in management document
  * CLEANUP: assorted typo fixes in the code and comments
  * BUG/MEDIUM: cfgcheck: verify existing log-forward listeners during config check
  * BUG/MEDIUM: spoe: Fix policy to close applets when SPOE connections are queued
  * DOC: config: Fix 'http-response send-spoe-group' documentation
  * DOC: Improve the lua documentation
  * BUG/MINOR: tcpcheck: Properly detect pending HTTP data in output buffer
  * BUG/MINOR: buffer: fix buffer_dump() formatting
  * BUG/MEDIUM: spoe: Create a SPOE applet if necessary when the last one is released
  * MINOR: spoe: Add a pointer on the filter config in the spoe_agent structure
  * ADMIN: dyncookie: implement a simple dynamic cookie calculator
  * MINOR: server: unmark deprecated on enable health/agent cli
  * BUG/MINOR: server: update last_change on maint-&gt;ready transitions too
  * BUG/MINOR: server: remove srv from px list on CLI 'add server' error
  * BUILD: opentracing: fixed build when using pkg-config utility
  * DOC: internals: document the FD takeover process
  * BUG/MINOR: fd: protect fd state harder against a concurrent takeover
  * BUG/MINOR: pollers: always program an update for migrated FDs
  * BUG/MINOR: poll: fix abnormally high skip_fd counter
  * BUG/MINOR: select: fix excess number of dead/skip reported
  * BUG/MEDIUM: pollers: clear the sleeping bit after waking up, not before
  * BUG/MEDIUM: connection: close a rare race between idle conn close and takeover
  * BUG/MINOR: connection: Add missing error labels to conn_err_code_str
  * BUG/MEDIUM: mux-h2: Handle remaining read0 cases on partial frames
  * BUG/MINOR: mux-h1: Be sure to swap H1C to splice mode when rcv_pipe() is called
  * BUG/MINOR: mux-h2: Obey dontlognull option during the preface
  * BUG/MINOR: mux-h1: Obey dontlognull option for empty requests
  * BUG/MINOR: systemd: must check the configuration using -Ws
  * BUG/MINOR: resolvers: Use a null-terminated string to lookup in servers tree
  * BUG/MINOR: check: fix the condition to validate a port-less server
  * BUG/MINOR: stats: Add missing agent stats on servers
  * BUG/MEDIUM: ssl_sample: fix segfault for srv samples on invalid request
  * BUILD/MINOR: memprof fix macOs build.
  * BUG/MINOR: mworker: do not export HAPROXY_MWORKER_REEXEC across programs
  * BUG/MEDIUM: mworker: do not register an exit handler if exit is expected
  * BUILD: lua: silence a build warning with TCC
  * BUILD: add detection of missing important CFLAGS
  * BUG/MINOR: ssl: Default-server configuration ignored by server
  * MINOR: mux_h2: define config to disable h2 websocket support
  * BUILD: http_htx: fix ci compilation error with isdigit for Windows</changelog>
  <changelog author="mrueckert@suse.de" date="1631016000">- Update to version 2.4.4+git0.acb1d0bea: CVE-2021-40346 (boo#1189877)
  * [RELEASE] Released version 2.4.4
  * Revert "BUG/MINOR: stream-int: Don't block reads in si_update_rx() if chn may receive"
  * BUG/MAJOR: htx: fix missing header name length check in htx_add_header/trailer
  * CLEANUP: htx: remove comments about "must be &lt; 256 MB"
  * BUG/MINOR: config: reject configs using HTTP with bufsize &gt;= 256 MB
  * DOC: configuration: remove wrong tcp-request examples in tcp-response
  * BUG/MINOR: vars: fix set-var/unset-var exclusivity in the keyword parser
  * CLEANUP: Add missing include guard to signal.h
  * BUG/MINOR: tools: Fix loop condition in dump_text()
  * BUG/MINOR threads: Use get_(local|gm)time instead of (local|gm)time
  * BUG/MINOR: ebtree: remove dependency on incorrect macro for bits per long
  * MINOR: time: add report_idle() to report process-wide idle time
  * BUG/MINOR: time: fix idle time computation for long sleeps
  * BUG/MINOR: lua: use strlcpy2() not strncpy() to copy sample keywords
  * MINOR: compiler: implement an ONLY_ONCE() macro
  * BUG/MINOR: base64: base64urldec() ignores padding in output size check
  * BUG/MEDIUM: base64: check output boundaries within base64{dec,urldec}
  * BUG/MINOR: stick-table: fix the sc-set-gpt* parser when using expressions
  * MINOR: hlua: take the global Lua lock inside a global function
  * REGTESTS: abortonclose: after retries, 503 is expected, not close
  * REGTESTS: http_upgrade: fix incorrect expectation on TCP-&gt;H1-&gt;H2
  * BUG/MEDIUM: h2: match absolute-path not path-absolute for :path</changelog>
  <changelog author="mrueckert@suse.de" date="1633089600">- Update to version 2.4.5+git0.e74a1b34b:
  * [RELEASE] Released version 2.4.5
  * MINOR: tasks: catch TICK_ETERNITY with BUG_ON() in __task_queue()
  * BUG/MINOR: tcp-rules: Stop content rules eval on read error and end-of-input
  * BUG/MINOR: tcpcheck: Don't use arg list for default proxies during parsing
  * MINOR: arg: Be able to forbid unresolved args when building an argument list
  * BUG/MAJOR: lua: use task_wakeup() to properly run a task once
  * BUG/MEDIUM: lua: fix wakeup condition from sleep()
  * MINOR: Makefile: add MEMORY_POOLS to the list of DEBUG_xxx options
  * DOC: peers: fix doc "enable" statement on "peers" sections
  * BUG/MINOR: mux-h1/mux-fcgi: Sanitize TE header to only send "trailers"
  * MINOR: stream-int: Notify mux when the buffer is not stuck when calling rcv_buf
  * BUG/MEDIUM: stream-int: Defrag HTX message in si_cs_recv() if necessary
  * MINOR: htx: Add a function to know if the free space wraps
  * MINOR: htx: Add an HTX flag to know when a message is fragmented
  * MINOR: stream-int: Set CO_RFL transient/persistent flags apart in si_cs_rcv()
  * BUG/MEDIUM: stream: Stop waiting for more data if SI is blocked on RXBLK_ROOM
  * BUG/MEDIUM: stream-int: Notify stream that the mux wants more room to xfer data
  * BUG/MEDIUM: mux-h1: Adjust conditions to ask more space in the channel buffer
  * BUG/MINOR: stats: use refcount to protect dynamic server on dump
  * MINOR: server: return the next srv instance on free_server
  * BUG/MINOR: server: do not use refcount in free_server in stopping mode
  * MINOR: global: define MODE_STOPPING
  * MINOR: server: implement a refcount for dynamic servers
  * BUG/MINOR: http-ana: increment internal_errors counter on response error
  * BUG/MINOR: h1-htx: Fix a typo when request parser is reset
  * BUG/MEDIUM: leastconn: fix rare possibility of divide by zero
  * BUG/MINOR: server: allow 'enable health' only if check configured
  * BUILD: threads: fix -Wundef for _POSIX_PRIORITY_SCHEDULING on libmusl
  * BUILD: halog: fix a -Wundef warning on non-glibc systems
  * BUILD: compiler: fixed a missing test on  defined(__GNUC__)
  * BUILD: fix dragonfly build again on __read_mostly
  * BUG/MINOR: vars: do not talk about global section in CLI errors for set-var
  * BUG/MINOR: vars: truncate the variable name in error reports about scope.
  * BUG/MINOR: vars: properly set the argument parsing context in the expression
  * MINOR: sample: add missing ARGC_ entries
  * BUG/MINOR: vars: improve accuracy of the rules used to check expression validity
  * BUILD: tools: properly guard __GLIBC__ with defined()
  * BUILD: ssl: fix two remaining occurrences of #if USE_OPENSSL
  * BUILD: ssl: next round of build warnings on LIBRESSL_VERSION_NUMBER
  * BUILD/MINOR: regex: avoid a build warning on USE_PCRE2 with -Wundef
  * IMPORT: slz: silence a build warning with -Wundef
  * BUILD/MINOR: ssl: avoid a build warning on LIBRESSL_VERSION with -Wundef
  * BUILD/MINOR: defaults: eliminate warning on MAXHOSTNAMELEN with -Wundef
  * BUILD: activity: use #ifdef not #if on USE_MEMORY_PROFILING
  * MINOR: proc: setting the process to produce a core dump on FreeBSD.
  * MINOR: tools: add FreeBSD support to get_exec_path()
  * BUILD: tools: get the absolute path of the current binary on NetBSD.
  * BUG/MINOR: flt-trace: fix an infinite loop when random-parsing is set
  * BUG/MINOR: cli/payload: do not search for args inside payload
  * BUILD: ist: prevent gcc11 maybe-uninitialized warning on istalloc
  * BUG/MINOR: connection: prevent null deref on mux cleanup task allocation
  * DOC: management: certificate files must be sanitized before injection
  * BUG/MINOR: tcpcheck: Improve LDAP response parsing to fix LDAP check
  * BUG/MAJOR: mux-h1: Don't eval input data if an error was reported
  * MINOR: pools: use mallinfo2() when available instead of mallinfo()
  * MINOR: pools: automatically disable malloc_trim() with external allocators
  * CLEANUP: pools: factor all malloc_trim() calls into trim_all_pools()
  * BUG/MINOR: compat: make sure __WORDSIZE is always defined
  * BUG/MEDIUM: stream-int: Don't block SI on a channel policy if EOI is reached
  * CLEANUP: mux-h1: Remove condition rejecting upgrade requests with payload
  * MINOR: htx: Skip headers with no value when adding a header list to a message
  * BUG/MEDIUM: mux-h1: Remove "Upgrade:" header for requests with payload
  * BUG/MINOR: systemd: ExecStartPre must use -Ws
  * BUG/MINOR: filters: Set right FLT_END analyser depending on channel
  * BUG/MINOR: filters: Always set FLT_END analyser when CF_FLT_ANALYZE flag is set
  * BUG/MEDIUM: http-ana: Reset channels analysers when returning an error
  * BUG/MINOR: stream: Don't release a stream if FLT_END is still registered
  * BUG/MINOR: lua: Don't yield in channel.append() and channel.set()
  * BUG/MINOR: lua: Yield in channel functions only if lua context can yield
  * MINOR: lua: Add a flag on lua context to know the yield capability at run time</changelog>
  <changelog author="mrueckert@suse.de" date="1633348800">- Update to version 2.4.6+git0.d83fd76a1:
  * [RELEASE] Released version 2.4.6
  * BUG/MEDIUM: filters: Fix a typo when a filter is attached blocking the release</changelog>
  <changelog author="mrueckert@suse.de" date="1633348801">- Update to version 2.4.7+git0.b5e51a5e2:
  * [RELEASE] Released version 2.4.7
  * BUG/MEDIUM: http-ana: Clear request analyzers when applying redirect rule</changelog>
  <changelog author="mrueckert@suse.de" date="1635940800">- Update to version 2.4.8+git0.d1f8d41e0:
  * [RELEASE] Released version 2.4.8
  * SCRIPTS: git-show-backports: re-enable file-based filtering
  * DOC/peers: some grammar fixes for peers 2.1 spec
  * MINOR: stream: Improve dump of bogus streams
  * BUILD/MINOR: cpuset freebsd build fix
  * DOC: config: Fix alphabetical order of fc_* samples
  * BUG/MINOR: sample: fix backend direction flags consecutive to last fix
  * BUG/MEDIUM: sample: Cumulate frontend and backend sample validity flags
  * BUG/MEDIUM: stream-int: Block reads if channel cannot receive more data
  * BUG/MINOR: http: Authorization value can have multiple spaces after the scheme
  * BUG/MEDIUM: http-ana: Drain request data waiting the tarpit timeout expiration
  * MINOR: halog: Add support for extracting captures using -hdr
  * BUG/MINOR: halog: Add missing newlines in die() messages
  * CLEANUP: halog: Use consistent indentation in help()
  * MINOR: halog: Rename -qry to -query
  * DOC: halog: Move the `-qry` parameter into the correct section in help text
  * MINOR: halog: Add -qry parameter allowing to preserve the query string in -uX
  * BUG/MEDIUM: resolvers: Track api calls with a counter to free resolutions
  * BUG/MEDIUM: resolvers: Don't recursively perform requester unlink
  * MEDIUM: resolvers: remove the last occurrences of the "safe" argument
  * MEDIUM: resolvers: use a kill list to preserve the list consistency
  * CLEANUP: resolvers: replace all LIST_DELETE with LIST_DEL_INIT
  * CLEANUP: resolvers: simplify resolv_link_resolution() regarding requesters
  * CLEANUP: always initialize the answer_list
  * CLEANUP: resolvers: do not export resolv_purge_resolution_answer_records()
  * BUG/MEDIUM: mux-h1: Perform a connection shutdown when the h1c is released
  * BUG/MINOR: mux-h1: Save shutdown mode if the shutdown is delayed
  * BUILD: atomic: fix build on mac/arm64
  * BUG/MINOR: backend: fix improper insert in avail tree for always reuse
  * BUILD: fix compilation on NetBSD
  * MINOR: memprof: add one pointer size to the size of allocations
  * MINOR: memprof: report the delta between alloc and free on realloc()
  * BUG/MEDIUM: lua: fix memory leaks with realloc() on non-glibc systems
  * BUG/MINOR: mux-h2: do not prevent from sending a final GOAWAY frame
  * BUG/MINOR: task: do not set TASK_F_USR1 for no reason
  * BUG/MAJOR: buf: fix varint API post- vs pre- increment
  * BUG/MEDIUM: resolvers: always check a valid item in query_list
  * BUILD: resolvers: avoid a possible warning on null-deref
  * BUG/MAJOR: resolvers: add other missing references during resolution removal
  * MINOR: resolvers: merge address and target into a union "data"
  * BUG/MEDIUM: resolvers: use correct storage for the target address
  * BUG/MEDIUM: resolvers: fix truncated TLD consecutive to the API fix
  * MINOR: resolvers: fix the resolv_dn_label_to_str() API about trailing zero
  * BUG/MINOR: resolvers: do not reject host names of length 255 in SRV records
  * BUG/MEDIUM: resolver: make sure to always use the correct hostname length
  * MINOR: resolvers: fix the resolv_str_to_dn_label() API about trailing zero
  * BUG/MAJOR: dns: attempt to lock globaly for msg waiter list instead of use barrier
  * BUG/MAJOR: dns: tcp session can remain attached to a list after a free
  * BUG/MEDIUM: tcpcheck: Properly catch early HTTP parsing errors
  * Revert "CLEANUP: server: always include the storage for SSL settings"
  * BUG/MEDIUM: stream: Keep FLT_END analyzers if a stream detects a channel error
  * BUG/MEDIUM: cpuset: fix cpuset size for FreeBSD
  * BUG/MINOR: sample: Fix 'fix_tag_value' sample when waiting for more data
  * BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back
  * MINOR: initcall: Rename __GLOBL and __GLOBL1.
  * DOC: configuration: add clarification on escaping in keyword arguments
  * BUG/MEDIUM: mux_h2: Handle others remaining read0 cases on partial frames
  * BUG/MEDIUM: sample: properly verify that variables cast to sample
  * MINOR: sample: provide a generic var-to-sample conversion function
  * CLEANUP: sample: uninline sample_conv_var2smp_str()
  * CLEANUP: sample: rename sample_conv_var2smp() to *_sint
  * CLEANUP: server: always include the storage for SSL settings</changelog>
  <changelog author="varkoly@suse.com" date="1646740800">- (bsc#1196408) VUL-0: CVE-2022-0711: haproxy: Denial of service via set-cookie2 header
  o Apply upstream patch:
    0001-BUG-MAJOR-http-htx-prevent-unbounded-loop-in-http_ma.patch</changelog>
  <changelog author="varkoly@suse.com" date="1674043200">- VUL-0: CVE-2023-0056: haproxy: segfault DoS (bsc#1207181)
  o Apply upstream patch:
    0001-BUG-MEDIUM-mux-h2-Refuse-interim-responses-with-end-.patch</changelog>
  <changelog author="varkoly@suse.com" date="1676030400">- VUL-0: serious vulnerability in the HTTP/1 parser (bsc#1208132)
  o Apply upstream patch:
    2.0-2.5-BUG-CRITICAL-http-properly-reject-empty-http-header-.patch
- The output buffer is not zero-initialized. If we don't clear reserved
  bytes, fcgi requests sent to backend will leak sensitive data.
  o Apply proposed patch:
    0001-output-buffer-is-not-zero-initialized.path</changelog>
  <changelog author="varkoly@suse.com" date="1681214400">- ECO: Maint: Update haproxy to latest maintenance release for all SLE15 (jsc#PED-3821)
- rebase and rename haproxy-1.6.0-sec-options.patch -&gt; haproxy-2.4.22-sec-options.patch
- remove patches covered by new release:
  lua54.patch
  0001-BUG-MAJOR-http-htx-prevent-unbounded-loop-in-http_ma.patch
  0001-BUG-MEDIUM-mux-h2-Refuse-interim-responses-with-end-.patch
  0001-output-buffer-is-not-zero-initialized.path
  2.0-2.5-BUG-CRITICAL-http-properly-reject-empty-http-header-.patch
- Update to version 2.4.22+git0.f8e3218e2:
  * [RELEASE] Released version 2.4.22
  * BUG/CRITICAL: http: properly reject empty http header field names
  * CI: github: don't warn on deprecated openssl functions on windows
  * BUG/MEDIUM: stconn: Schedule a shutw on shutr if data must be sent first
  * DOC: proxy-protocol: fix wrong byte in provided example
  * DOC: config: 'http-send-name-header' option may be used in default section
  * DOC: config: fix option spop-check proxy compatibility
  * BUG/MEDIUM: cache: use the correct time reference when comparing dates
  * BUG/MEDIUM: stick-table: do not leave entries in end of window during purge
  * BUG/MINOR: ssl/crt-list: warn when a line is malformated
  * BUG/MEDIUM: ssl: wrong eviction from the session cache tree
  * BUG/MINOR: fcgi-app: prevent 'use-fcgi-app' in default section
  * [RELEASE] Released version 2.4.21
  * BUG/MINOR: sink: free the forwarding task on exit
  * BUILD: hpack: include global.h for the trash that is needed in debug mode
  * BUG/MINOR: mux-h2: add missing traces on failed headers decoding
  * BUG/MINOR: listener: close tiny race between resume_listener() and stopping
  * DOC: config: fix "Address formats" chapter syntax
  * BUG/MINOR: mux-fcgi: Correctly set pathinfo
  * DOC: config: fix aliases for protocol prefixes "udp4@" and "udp6@"
  * DOC: config: fix wrong section number for "protocol prefixes"
  * BUG/MINOR: listeners: fix suspend/resume of inherited FDs
  * BUG/MINOR: http-ana: make set-status also update txn-&gt;status
  * BUG/MINOR: http-fetch: Don't block HTTP sample fetch eval in HTTP_MSG_ERROR state
  * BUG/MINOR: http-ana: Report SF_FINST_R flag on error waiting the request body
  * BUG/MINOR: promex: Don't forget to consume the request on error
  * BUG/MINOR: resolvers: Wait the resolution execution for a do_resolv action
  * BUG/MINOR: h1-htx: Remove flags about protocol upgrade on non-101 responses
  * CLEANUP: htx: fix a typo in an error message of http_str_to_htx
  * BUG/MINOR: http: Memory leak of http redirect rules' format string
  * REGTEST: fix the race conditions in hmac.vtc
  * REGTEST: fix the race conditions in digest.vtc
  * REGTEST: fix the race conditions in json_query.vtc
  * BUG/MAJOR: buf: Fix copy of wrapping output data when a buffer is realigned
  * BUG/MINOR: http-fetch: Only fill txn status during prefetch if not already set
  * BUILD: makefile: sort the features list
  * BUILD: makefile: build the features list dynamically
  * BUG/MINOR: pool/stats: Use ullong to report total pool usage in bytes in stats
  * BUG/MEDIUM: mux-h2: Refuse interim responses with end-stream flag set
  * BUG/MINOR: ssl: Fix memory leak of find_chain in ssl_sock_load_cert_chain
  * LICENSE: wurfl: clarify the dummy library license.
  * BUG/MEDIUM: resolvers: Use tick_first() to update the resolvers task timeout
  * REGTESTS: startup: check maxconn computation
  * REGTESTS: fix the race conditions in iff.vtc
  * BUG/MAJOR: fcgi: Fix uninitialized reserved bytes
  * DOC: promex: Add missing backend metrics
  * MINOR: promex: introduce haproxy_backend_agg_check_status
  * BUG/MINOR: promex: create haproxy_backend_agg_server_status
  * BUG/MEDIUM: mworker: fix segv in early failure of mworker mode with peers
  * BUG/MINOR: ssl: Fix potential overflow
  * BUG/MEDIUM: ssl: Verify error codes can exceed 63
  * BUG/MINOR: resolvers: Don't wait periodic resolution on healthcheck failure
  * BUILD: peers: peers-t.h depends on stick-table-t.h
  * CI: github: change "ubuntu-latest" to "ubuntu-20.04"
  * BUG/MEDIIM: stconn: Flush output data before forwarding close to write side
  * BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
  * [RELEASE] Released version 2.4.20
  * Revert "CI: determine actual OpenSSL version dynamically"
  * Revert "CI: switch to the "latest" LibreSSL"
  * SCRIPTS: announce-release: add a link to the data plane API
  * DOC: config: clarify the -m dir and -m dom pattern matching methods
  * DOC: config: clarify the fact that "retries" is not just for connections
  * DOC: config: explain how default matching method for ACL works
  * DOC: config: mention that a single monitor-uri rule is supported
  * DOC: config: clarify the fact that SNI should not be used in HTTP scenarios
  * DOC: config: provide some configuration hints for "http-reuse"
  * Revert "BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action"
  * BUG/MINOR: mux-h1: Fix handling of 408-Request-Time-Out
  * BUILD: http-htx: Silent build error about a possible NULL start-line
  * BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
  * BUG/MINOR: log: fix parse_log_message rfc5424 size check
  * BUG/MINOR: cfgparse-listen: fix ebpt_next_dup pointer dereference on proxy "from" inheritance
  * BUILD: listener: fix build warning on global_listener_rwlock without threads
  * BUG/MINOR: server/idle: at least use atomic stores when updating max_used_conns
  * BUILD: peers: Remove unused variables
  * BUG/MEDIUM: peers: messages about unkown tables not correctly ignored
  * BUG/MINOR: ssl: don't initialize the keylog callback when not required
  * BUG/MINOR: http_ana/txn: don't re-initialize txn and req var lists
  * BUG/MEDIUM: listener: Fix race condition when updating the global mngmt task
  * BUG/MINOR: pool/cli: use ullong to report total pool usage in bytes
  * BUG/MEDIUM: ring: fix creation of server in uninitialized ring
  * DOC: config: fix alphabetical ordering of global section
  * REG-TESTS: cache: Remove T-E header for 304-Not-Modified responses
  * BUG/MINOR: mux-h1: Do not send a last null chunk on body-less answers
  * BUG/MEDIUM: mux-fcgi: Avoid value length overflow when it doesn't fit at once
  * BUG/MINOR: mux-fcgi: Be sure to send empty STDING record in case of zero-copy
  * BUG/MINOR: resolvers: Set port before IP address when processing SRV records
  * BUG/MINOR: http-htx: Fix error handling during parsing http replies
  * BUG/MEDIUM: wdt/clock: properly handle early task hangs
  * CI: emit the compiler's version in the build reports
  * CI: switch to the "latest" LibreSSL
  * BUG/MINOR: ssl: ocsp structure not freed properly in case of error
  * BUG/MINOR: ssl: Memory leak of AUTHORITY_KEYID struct when loading issuer
  * CI: add monthly gcc cross compile jobs
  * BUG/MINOR: log: fixing bug in tcp syslog_io_handler Octet-Counting
  * BUG/MEDIUM: stick-table: fix a race condition when updating the expiration task
  * BUG/MAJOR: stick-table: don't process store-response rules for applets
  * DOC: management: add forgotten "show startup-logs"
  * BUG/MINOR: stick-table: Use server_id instead of std_t_sint in process_store_rules()
  * CI: SSL: temporarily stick to LibreSSL=3.5.3
  * CI: SSL: use proper version generating when "latest" semantic is used
  * BUG/MINOR: sink: Set default connect/server timeout for implicit ring buffers
  * BUG/MINOR: sink: Only use backend capability for the sink proxies
  * BUG/MEDIUM: compression: handle rewrite errors when updating response headers
  * BUG/MINOR: ring: Properly parse connect timeout
  * BUG/MINOR: log: Preserve message facility when the log target is a ring buffer
  * CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in workflow definition
  * CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in matrix.py
  * BUG/MINOR: server: make sure "show servers state" hides private bits
  * BUG/MAJOR: stick-tables: do not try to index a server name for applets
  * DOC: configuration: missing 'if' in tcp-request content example
  * BUG/MINOR: backend: only enforce turn-around state when not redispatching
  * BUG/MINOR: smtpchk: SMTP Service check should gracefully close SMTP transaction
  * MINOR: smtpchk: Update expect rule to fully match replies to EHLO commands
  * BUG/MINOR: mux-h1: Account consumed output data on synchronous connection error
  * BUILD: http_fetch: silence an uninitiialized warning with gcc-4/5/6 at -Os
  * BUG/MINOR: http-fetch: Update method after a prefetch in smp_fetch_meth()
  * BUILD: h1: silence an initiialized warning with gcc-4.7 and -Os
  * BUG/MEDIUM: lua: handle stick table implicit arguments right.
  * BUG/MEDIUM: lua: Don't crash in hlua_lua2arg_check on failure
  * DOC: config: Fix pgsql-check documentation to make user param mandatory
  * BUG/MINOR: checks: update pgsql regex on auth packet
  * [RELEASE] Released version 2.4.19
  * BUG/MEDIUM: resolvers: Remove aborted resolutions from query_ids tree
  * REGTESTS: 4be_1srv_smtpchk_httpchk_layer47errors: Return valid SMTP replies
  * BUG/MINOR: log: improper behavior when escaping log data
  * SCRIPTS: announce-release: update some URLs to https
  * BUILD: fd: fix a build warning on the DWCAS
  * BUG/MEDIUM: captures: free() an error capture out of the proxy lock
  * DOC: fix TOC in starter guide for subsection 3.3.8. Statistics
  * REGTESTS: ssl/log: test the log-forward with SSL
  * BUG/MEDIUM: sink: bad init sequence on tcp sink from a ring.
  * REGTESTS: log: test the log-forward feature
  * REGTESTS: healthcheckmail: Relax matching on the healthcheck log message
  * BUG/MINOR: stats: fixing stat shows disabled frontend status as 'OPEN'
  * MINOR: listener: small API change
  * BUG/MEDIUM: proxy: ensure pause_proxy() and resume_proxy() own PROXY_LOCK
  * CI: cirrus-ci: bump FreeBSD image to 13-1
  * BUG/MINOR: signals/poller: ensure wakeup from signals
  * BUG/MINOR: signals/poller: set the poller timeout to 0 when there are signals
  * BUG/MINOR: task: always reset a new tasklet's call date
  * BUG/MINOR: h1: Support headers case adjustment for TCP proxies
  * BUILD: makefile: enable crypt(3) for NetBSD
  * BUG/MINOR: regex: Properly handle PCRE2 lib compiled without JIT support
  * BUG/MINOR: mux-fcgi: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: mux-h1: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: mux-h2: fix the "show fd" dest buffer for the subscriber
  * BUG/MEDIUM: mux-h1: always use RST to kill idle connections in pools
  * REGTESTS: http_request_buffer: Add a barrier to not mix up log messages
  * BUG/MEDIUM: mux-h1: do not refrain from signaling errors after end of input
  * BUG/MINOR: tcpcheck: Disable QUICKACK for default tcp-check (with no rule)
  * BUG/MINOR: hlua: Rely on CF_EOI to detect end of message in HTTP applets
  * BUG/MEDIUM: peers: Don't start resync on reload if local peer is not up-to-date
  * BUG/MEDIUM: peers: Don't use resync timer when local resync is in progress
  * BUG/MEDIUM: peers: Add connect and server timeut to peers proxy
  * BUG/MEDIUM: spoe: Properly update streams waiting for a ACK in async mode
  * DOC: configuration: do-resolve doesn't work with a port in the string
  * REGTESTS: Fix prometheus script to perform HTTP health-checks
  * BUG/MINOR: tcpcheck: Disable QUICKACK only if data should be sent after connect
  * BUG/MINOR: resolvers: return the correct value in resolvers_finalize_config()
  * BUG/MAJOR: mworker: fix infinite loop on master with no proxies.
  * BUG/MAJOR: log-forward: Fix log-forward proxies not fully initialized
  * BUG/MEDIUM: mux-h2: do not fiddle with -&gt;dsi to indicate demux is idle
  * BUG/MEDIUM: http-ana: fix crash or wrong header deletion by http-restrict-req-hdr-names
  * BUILD: http: silence an uninitialized warning affecting gcc-5
  * BUG/MEDIUM: ring: fix too lax 'size' parser
  * BUILD: debug: silence warning on gcc-5
  * BUG/MEDIUM: task: relax one thread consistency check in task_unlink_wq()
  * BUG/MEDIUM: poller: use fd_delete() to release the poller pipes
  * BUILD: cfgparse: always defined _GNU_SOURCE for sched.h and crypt.h
  * BUG/MINOR: sink: fix a race condition between the writer and the reader
  * BUG/MINOR: ring/cli: fix a race condition between the writer and the reader
  * BUG/MEDIUM: proxy: Perform a custom copy for default server settings
  * REORG: server: Export srv_settings_cpy() function
  * MINOR: server: Constify source server to copy its settings
  * BUG/MEDIUM: dns: Properly initialize new DNS session
  * BUG/MINOR: peers: Use right channel flag to consider the peer as connected
  * BUG/MEDIUM: peers: limit reconnect attempts of the old process on reload
  * MINOR: peers: Use a dedicated reconnect timeout when stopping the local peer
  * BUG/MEDIUM: pattern: only visit equivalent nodes when skipping versions
  * MINOR: ebtree: add ebmb_lookup_shorter() to pursue lookups
  * MINOR: http-htx: Use new HTTP functions for the scheme based normalization
  * BUG/MEDIUM: h1: Improve authority validation for CONNCET request
  * MINOR: http: Add function to detect default port
  * MINOR: http: Add function to get port part of a host
  * BUG/MEDIUM: mworker: use default maxconn in wait mode
  * [RELEASE] Released version 2.4.18
  * BUG/MINOR: sockpair: wrong return value for fd_send_uxst()
  * BUG/MINOR: backend: Fallback on RR algo if balance on source is impossible
  * BUILD: add detection for unsupported compiler models
  * BUG/MEDIUM: mworker: proc_self incorrectly set crashes upon reload
  * REGTESTS: Fix some scripts to be compatible with 2.4 and prior
  * BUG/MINOR: tools: fix statistical_prng_range()'s output range
  * BUG/MEDIUM: tools: avoid calling dlsym() in static builds (try 2)
  * BUILD: makefile: Fix install(1) handling for OpenBSD/NetBSD/Solaris/AIX
  * BUG/MEDIUM: tools: avoid calling dlsym() in static builds
  * MEDIUM: mworker: set the iocb of the socketpair without using fd_insert()
  * BUG/MEDIUM: mux-h1: Handle connection error after a synchronous send
  * BUG/MEDIUM: http-ana: Don't wait to have an empty buf to switch in TUNNEL state
  * BUG/MINOR: mux-h1: Be sure to commit htx changes in the demux buffer
  * REGTEESTS: filters: Fix CONNECT request in random-forwarding script
  * BUG/MEDIUM: http-fetch: Don't fetch the method if there is no stream
  * BUG/MINOR: http-htx: Fix scheme based normalization for URIs wih userinfo
  * BUG/MINOR: peers: fix possible NULL dereferences at config parsing
  * BUG/MINOR: http-act: Properly generate 103 responses when several rules are used
  * BUG/MINOR: http-check: Preserve headers if not redefined by an implicit rule
  * BUG/MINOR: peers/config: always fill the bind_conf's argument
  * MINOR: fd: Add BUG_ON checks on fd_insert()
  * CI: re-enable gcc asan builds
  * BUILD: Makefile: Add Lua 5.4 autodetect
  * BUG/MEDIUM: ssl/fd: unexpected fd close using async engine
  * MINOR: fd: add a new FD_DISOWN flag to prevent from closing a deleted FD
  * BUG/MINOR: http-fetch: Use integer value when possible in "method" sample fetch
  * BUG/MINOR: http-ana: Set method to HTTP_METH_OTHER when an HTTP txn is created
  * BUG/MINOR: ssl: Do not look for key in extra files if already in pem
  * MEDIUM: mux-h2: try to coalesce outgoing WINDOW_UPDATE frames
  * BUG/MEDIUM: ssl/cli: crash when crt inserted into a crt-list
  * BUG/MINOR: tcp-rules: Make action call final on read error and delay expiration
  * BUG/MINOR: cli/stats: add missing trailing LF after "show info json"
  * BUG/MINOR: server: do not enable DNS resolution on disabled proxies
  * BUG/MINOR: cli/stats: add missing trailing LF after JSON outputs
  * REGTESTS: healthcheckmail: Relax health-check failure condition
  * REGTESTS: healthcheckmail: Update the test to be functionnal again
  * BUG/MINOR: checks: Properly handle email alerts in trace messages
  * BUG/MINOR: trace: Test server existence for health-checks to get proxy
  * BUG/MEDIUM: mailers: Set the object type for check attached to an email alert
  * BUILD: compiler: implement unreachable for older compilers too
  * REGTESTS: restrict_req_hdr_names: Extend supported versions
  * REGTESTS: http_abortonclose: Extend supported versions
  * BUG/MINOR: ssl_ckch: Fix possible uninitialized value in show_cert I/O handler
  * BUG/MINOR: ssl_ckch: Dump cert transaction only once if show command yield
  * REGTESTS: http_request_buffer: Increase client timeout to wait "slow" clients
  * REGTESTS: abortonclose: Add a barrier to not mix up log messages
  * MEDIUM: http-ana: Always report rewrite failures as PRXCOND in logs
  * BUG/MEDIUM: ssl/crt-list: Rework 'add ssl crt-list' to handle full buffer cases
  * BUG/MEDIUM: ssl_ckch: Rework 'commit ssl cert' to handle full buffer cases
  * BUG/MINOR: ssl_ckch: Don't duplicate path when replacing a cert entry
  * BUG/MEDIUM: ssl_ckch: Don't delete a cert entry if it is being modified
  * BUG/MINOR: ssl_ckch: Free error msg if commit changes on a cert entry fails
  * DOC: intro: adjust the numbering of paragrams to keep the output ordered
  * DOC: peers: fix port number and addresses on new peers section format
  * DOC: peers: clarify when entry expiration date is renewed.
  * DOC: peers: indicate that some server settings are not usable
  * SCRIPTS: make publish-release try to launch make-releases-json
  * SCRIPTS: add make-releases-json to recreate a releases.json file in download dirs
  * REGTESTS: Do not use REQUIRE_VERSION for HAProxy 2.5+ (2)
  * BUG/MEDIUM: sample: Fix adjusting size in word converter
  * BUG/MEDIUM: peers: prevent unitialized multiple listeners on peers section
  * BUG/MEDIUM: peers: fix segfault using multiple bind on peers sections
  * BUG/MEDIUM: resolvers: Don't defer resolutions release in deinit function
  * BUG/MEDIUM: http: Properly reject non-HTTP/1.x protocols
  * BUG/MEDIUM: tools: Fix `inet_ntop` usage in sa2str
  * CI: determine actual OpenSSL version dynamically
  * BUILD/MINOR: cpuset fix build for FreeBSD 13.1
  * BUG/MINOR: peers: fix error reporting of "bind" lines
  * BUG/MINOR: cfgparse: abort earlier in case of allocation error
  * BUG/MINOR: check: Reinit the buffer wait list at the end of a check
  * BUG/MEDIUM: config: Reset outline buffer size on realloc error in readcfgfile()
  * REGTESTS: abortonclose: Fix some race conditions
  * BUG/MINOR: ssl: Fix crash when no private key is found in pem
  * MINOR: tools: add get_exec_path implementation for solaris based systems.
  * BUILD: fix build warning on solaris based systems with __maybe_unused.
  * MEDIUM: http-ana: Add a proxy option to restrict chars in request header names
  * CI: determine actual LibreSSL version dynamically
  * [RELEASE] Released version 2.4.17
  * CLEANUP: mux-h1: Fix comments and error messages for global options
  * BUG/MEDIUM: wdt: don't trigger the watchdog when p is unitialized
  * BUG/MINOR: conn_stream: do not confirm a connection from the frontend path
  * BUG/MINOR: server: Make SRV_STATE_LINE_MAXLEN value from 512 to 2kB (2000 bytes).
  * DOC: install: update gcc version requirements
  * BUG/MEDIUM: ssl: fix the gcc-12 broken fix :-(
  * BUILD: listener: shut report of possible null-deref in listener_accept()
  * BUILD: debug: work around gcc-12 excessive -Warray-bounds warnings
  * BUILD: ssl: work around bogus warning in gcc 12's -Wformat-truncation
  * CI: dynamically determine actual version of h2spec
  * DOC: fix typo "ant" for "and" in INSTALL
  * BUG/MINOR: map/cli: make sure patterns don't vanish under "show map"'s init
  * BUG/MINOR: map/cli: protect the backref list during "show map" errors
  * BUG/MEDIUM: cli: make "show cli sockets" really yield
  * BUG/MEDIUM: resolvers: make "show resolvers" properly yield
  * BUG/MINOR: tcp/http: release the expr of set-{src,dst}[-port]
  * DOC: config: Update doc for PR/PH session states to warn about rewrite failures
  * MINOR: mux-h2: report a trace event when failing to create a new stream
  * BUG/MINOR: mux-h2: mark the stream as open before processing it not after
  * BUG/MAJOR: dns: multi-thread concurrency issue on UDP socket
  * BUG/MEDIUM: mux-h1: Be able to handle trailers when C-L header was specified
  * BUG/MEDIUM: mux-fcgi: Be sure to never set EOM flag on an empty HTX message
  * SCRIPTS: announce-release: add URL of dev packages
  * CI: github actions: update LibreSSL to 3.5.2
  * [RELEASE] Released version 2.4.16
  * BUILD: opentracing: Fix OT build due to misuse of var_clear()
  * BUILD: proto_uxst: do not set unused flag
  * BUILD: sockpair: do not set unused flag
  * BUILD: fd: remove unused variable totlen in fd_write_frag_line()
  * CLEANUP: acl: Remove unused variable when releasing an acl expression
  * BUG/MINOR: pools: make sure to also destroy shared pools in pool_destroy_all()
  * BUG/MINOR: resolvers: Fix memory leak in resolvers_deinit()
  * BUILD: compiler: properly distinguish weak and global symbols
  * REGTESTS: fix the race conditions in be2dec.vtc ad field.vtc
  * MEDIUM: queue: use tasklet_instant_wakeup() to wake tasks
  * MINOR: task: add a new task_instant_wakeup() function
  * BUG/MINOR: rules: Fix check_capture() function to use the right rule arguments
  * DOC: remove my name from the config doc
  * BUG/MAJOR: connection: Never remove connection from idle lists outside the lock
  * BUG/MINOR: cache: Disable cache if applet creation fails
  * SCRIPTS: announce-release: add shortened links to pending issues
  * DOC: lua: update a few doc URLs
  * SCRIPTS: announce-release: update the doc's URL
  * BUG/MEDIUM: compression: Don't forget to update htx_sl and http_msg flags
  * BUG/MEDIUM: fcgi-app: Use http_msg flags to know if C-L header can be added
  * BUG/MEDIUM: stream: do not abort connection setup too early
  * BUILD: compiler: use a more portable set of asm(".weak") statements
  * BUILD: sched: workaround crazy and dangerous warning in Clang 14
  * BUG/MEDIUM: mux-h1: Don't request more room on partial trailers
  * BUG/MINOR: mux-h2: use timeout http-request as a fallback for http-keep-alive
  * BUG/MINOR: mux-h2: do not use timeout http-keep-alive on backend side
  * BUILD: debug: mark the __start_mem_stats/__stop_mem_stats symbols as weak
  * BUG/MINOR: cache: do not display expired entries in "show cache"
  * BUG/MINOR: mux-h2: do not send GOAWAY if SETTINGS were not sent
  * CI: cirrus: switch to FreeBSD-13.0
  * CI: Update to actions/cache@v3
  * CI: Update to actions/checkout@v3
  * DEBUG: opentracing: show return values of all functions in the debug output
  * CLEANUP: opentracing: added variable to store variable length
  * CLEANUP: opentracing: added flt_ot_smp_init() function
  * CLEANUP: opentracing: removed unused function flt_ot_var_get()
  * CLEANUP: opentracing: removed unused function flt_ot_var_unset()
  * DOC: opentracing: corrected comments in function descriptions
  * EXAMPLES: opentracing: refined shell scripts for testing filter performance
  * BUG/MINOR: opentracing: setting the return value in function flt_ot_var_set()
  * BUG/MEDIUM: http-act: Don't replace URI if path is not found or invalid
  * BUG/MEDIUM: http-conv: Fix url_enc() to not crush const samples
  * BUG/MEDIUM: mux-h1: Set outgoing message to DONE when payload length is reached
  * BUG/MEDIUM: promex: Be sure to never set EOM flag on an empty HTX message
  * BUG/MEDIUM: hlua: Don't set EOM flag on an empty HTX message in HTTP applet
  * BUG/MEDIUM: stats: Be sure to never set EOM flag on an empty HTX message
  * BUG/MINOR: fcgi-app: Don't add C-L header on response to HEAD requests
  * CI: github actions: update OpenSSL to 3.0.2
  * BUG/MAJOR: mux_pt: always report the connection error to the conn_stream
  * BUG/MINOR: cli/stream: fix "shutdown session" to iterate over all threads
  * BUG/MINOR: samples: add missing context names for sample fetch functions
  * DOC: reflect H2 timeout changes
  * BUG/MEDIUM: mux-h2: make use of http-request and keep-alive timeouts
  * MEDIUM: mux-h2: slightly relax timeout management rules
  * BUG/MEDIUM: stream-int: do not rely on the connection error once established
  * BUG/MEDIUM: mux-h1: Properly detect full buffer cases during message parsing
  * BUG/MEDIUM: mux-fcgi: Properly handle return value of headers/trailers parsing
  * BUG/MINOR: tools: url2sa reads too far when no port nor path
  * DOC: config: Explictly add supported MQTT versions
  * MEDIUM: mqtt: support mqtt_is_valid and mqtt_field_value converters for MQTTv3.1
  * BUG/MEDIUM: trace: avoid race condition when retrieving session from conn-&gt;owner
  * BUG/MEDIUM: mux-h1: only turn CO_FL_ERROR to CS_FL_ERROR with empty ibuf
  * CI: github actions: switch to LibreSSL-3.5.1
  * BUG/MINOR: server/ssl: free the SNI sample expression
  * BUG/MINOR: tools: fix url2sa return value with IPv4
  * [RELEASE] Released version 2.4.15
  * BUILD: tree-wide: mark a few numeric constants as explicitly long long
  * DOC: Fix usage/examples of deprecated ACLs
  * BUG/MINOR: stream: make the call_rate only count the no-progress calls
  * BUG/MINOR: session: fix theoretical risk of memleak in session_accept_fd()
  * BUG/MAJOR: mux-pt: Always destroy the backend connection on detach
  * DEBUG: stream: Fix stream trace message to print response buffer state
  * DEBUG: stream: Add the missing descriptions for stream trace events
  * BUG/MEDIUM: mcli: Properly handle errors and timeouts during reponse processing
  * DEBUG: cache: Update underlying buffer when loading HTX message in cache applet
  * BUG/MINOR: promex: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: cache: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: stats: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: hlua: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: cli: shows correct mode in "show sess"
  * BUG/MINOR: add missing modes in proxy_mode_str()
  * BUILD: pools: fix backport of no-memory-trimming on non-linux OS
  * MINOR: pools: add a new global option "no-memory-trimming"
  * BUG/MEDIUM: pools: fix ha_free() on area in the process of being freed
  * BUG/MINOR: pool: always align pool_heads to 64 bytes
  * REGTESTS: fix the race conditions in secure_memcmp.vtc
  * REGTESTS: fix the race conditions in normalize_uri.vtc
  * BUG/MEDIUM: htx: Fix a possible null derefs in htx_xfer_blks()
  * CI: github actions: use cache for SSL libs
  * CI: github actions: use cache for OpenTracing
  * CI: github actions: add OpenTracing builds
  * CI: github actions: add the output of $CC -dM -E-
  * [RELEASE] Released version 2.4.14
  * BUG/MEDIUM: stream: Abort processing if response buffer allocation fails
  * CI: github: enable pool debugging by default
  * REGTESTS: fix the race conditions in 40be_2srv_odd_health_checks
  * BUG/MINOR: proxy: preset the error message pointer to NULL in parse_new_proxy()
  * BUG/MAJOR: mux-h2: Be sure to always report HTX parsing error to the app layer
  * BUG/MEDIUM: mux-h1: Don't wake h1s if mux is blocked on lack of output buffer
  * BUG/MEDIUM: htx: Be sure to have a buffer to perform a raw copy of a message
  * BUG/MINOR: tools: url2sa reads ipv4 too far
  * BUG/MINOR: mailers: negotiate SMTP, not ESMTP
  * CI: github actions: update OpenSSL to 3.0.1
  * CI: github: switch to OpenSSL 3.0.0
  * CI: github actions: relax OpenSSL-3.0.0 version comparision
  * CI: github actions: -Wno-deprecated-declarations with OpenSSL 3.0.0
  * CI: github actions: add OpenSSL-3.0.0 builds
  * BUILD: adopt script/build-ssl.sh for OpenSSL-3.0.0beta2
  * BUILD: fix compilation for OpenSSL-3.0.0-alpha17
  * CI: ssl: keep the old method for ancient OpenSSL versions
  * CI: ssl: do not needlessly build the OpenSSL docs
  * CI: ssl: enable parallel builds for OpenSSL on Linux
  * BUG/MAJOR: compiler: relax alignment constraints on certain structures
  * BUG/MEDIUM: fd: always align fdtab[] to 64 bytes
  * BUG/MEDIUM: resolvers: Really ignore trailing dot in domain names
  * BUG/MINOR: sink: Use the right field in appctx context in release callback
  * BUG/MINOR: mworker: fix a FD leak of a sockpair upon a failed reload
  * BUG/MEDIUM: mworker: close unused transferred FDs on load failure
  * MINOR: sock: move the unused socket cleaning code into its own function
  * [RELEASE] Released version 2.4.13
  * BUG/MINOR: mux-h2: update the session's idle delay before creating the stream
  * BUG/MEDIUM: h2/hpack: fix emission of HPACK DTSU after settings change
  * REGTESTS: peers: leave a bit more time to peers to synchronize
  * BUG/MAJOR: spoe: properly detach all agents when releasing the applet
  * BUG/MAJOR: http/htx: prevent unbounded loop in http_manage_server_side_cookies
  * BUG/MEDIUM: listener: read-lock the listener during accept()
  * MINOR: listener: replace the listener's spinlock with an rwlock
  * BUG/MINOR: mworker: does not erase the pidfile upon reload
  * BUG/MAJOR: sched: prevent rare concurrent wakeup of multi-threaded tasks
  * DEBUG: pools: replace the link pointer with the caller's address on pool_free()
  * DEBUG: pools: let's add reverse mapping from cache heads to thread and pool
  * DEBUG: pools: add extra sanity checks when picking objects from a local cache
  * BUG/MINOR: pools: always flush pools about to be destroyed
  * BUG/MEDIUM: mworker: don't lose the stats socket on failed reload
  * DEBUG: pools: add new build option DEBUG_POOL_INTEGRITY
  * BUILD: debug/cli: condition test of O_ASYNC to its existence
  * DEBUG: cli: add a new "debug dev fd" expert command
  * MEDIUM: h2/hpack: emit a Dynamic Table Size Update after settings change
  * BUG/MEDIUM: mcli: always realign wrapping buffers before parsing them
  * BUG/MEDIUM: mcli: do not try to parse empty buffers
  * BUG/MEDIUM: cli: Never wait for more data on client shutdown
  * BUG/MINOR: cli: avoid O(bufsize) parsing cost on pipelined commands
  * MINOR: channel: add new function co_getdelim() to support multiple delimiters
  * MEDIUM: cli: yield between each pipelined command
  * BUG/MEDIUM: server: avoid changing healthcheck ctx with set server ssl
  * BUILD/MINOR: fix solaris build with clang.
  * BUG/MEDIUM: htx: Adjust length to add DATA block in an empty HTX buffer
  * BUG/MEDIUM: connection: properly leave stopping list on error
  * [RELEASE] Released version 2.4.12
  * BUG/MAJOR: mux-h1: Don't decrement .curr_len for unsent data
  * BUG/MEDIUM: mworker: don't use _getsocks in wait mode
  * [RELEASE] Released version 2.4.11
  * BUG/MEDIUM: http-ana: Preserve response's FLT_END analyser on L7 retry
  * BUG/MINOR: cli: fix _getsocks with musl libc
  * BUILD/MINOR: tools: solaris build fix on dladdr.
  * BUILD/MINOR: cpuset FreeBSD 14 build fix.
  * BUG/MEDIUM: ssl: free the ckch instance linked to a server
  * BUG/MINOR: ssl: free the fields in srv-&gt;ssl_ctx
  * MINOR: debug: add support for -dL to dump library names at boot
  * MINOR: debug: add ability to dump loaded shared libraries
  * MINOR: compat: detect support for dl_iterate_phdr()
  * BUG/MINOR: mux-h1: Fix splicing for messages with unknown length
  * BUG/MEDIUM: mux-h1: Fix splicing by properly detecting end of message
  * BUILD: makefile: add -Wno-atomic-alignment to work around clang abusive warning
  * MINOR: proxy: add option idle-close-on-response
  * REGTESTS: ssl: fix ssl_default_server.vtc
  * BUG/MEDIUM: ssl: initialize correctly ssl w/ default-server
  * DOC: fix misspelled keyword "resolve_retries" in resolvers
  * BUILD: ssl: unbreak the build with newer libressl
  * BUILD: cli: clear a maybe-unused  warning on some older compilers
  * BUG/MINOR: pools: don't mark ourselves as harmless in DEBUG_UAF mode
  * BUG/MEDIUM: backend: fix possible sockaddr leak on redispatch
  * [RELEASE] Released version 2.4.10
  * BUG/MINOR: backend: restore the SF_SRV_REUSED flag original purpose
  * BUG/MINOR: backend: do not set sni on connection reuse
  * MINOR: pools: work around possibly slow malloc_trim() during gc
  * BUG/MEDIUM: mworker/cli: crash when trying to access an old PID in prompt mode
  * DOC: config: retry-on list is space-delimited
  * DOC: config: Specify %Ta is only available in HTTP mode
  * DOC: spoe: Clarify use of the event directive in spoe-message section
  * BUG/MINOR: cli/server: Don't crash when a server is added with a custom id
  * IMPORT: slz: use the correct CRC32 instruction when running in 32-bit mode
  * BUILD: tree-wide: avoid warnings caused by redundant checks of obj_types
  * MINOR: cli: "show version" displays the current process version
  * CI: Github Actions: temporarily disable BoringSSL builds
  * BUILD: bug: Fix error when compiling with -DDEBUG_STRICT_NOCRASH
  * MINOR: mux-h1: Improve H1 traces by adding info about http parsers
  * BUG/MAJOR: segfault using multiple log forward sections.
  * BUG/MEDIUM: resolvers: Detach query item on response error
  * BUG/MINOR: server: Don't rely on last default-server to init server SSL context
  * BUG/MEDIUM: cli: Properly set stream analyzers to process one command at a time
  * BUILD/MINOR: server: fix compilation without SSL
  * [RELEASE] Released version 2.4.9
  * BUG/MINOR: cache: Fix loop on cache entries in "show cache"
  * MINOR: promex: backend aggregated server check status
  * MINOR: server: add ws keyword
  * MEDIUM: server/backend: implement websocket protocol selection
  * MINOR: connection: add alternative mux_ops param for conn_install_mux_be
  * MINOR: connection: implement function to update ALPN
  * MINOR: stream/mux: implement websocket stream flag
  * BUG/MINOR: ssl: make SSL counters atomic
  * MINOR: shctx: add a few BUG_ON() for consistency checks
  * BUG/MINOR: shctx: do not look for available blocks when the first one is enough
  * BUG/MEDIUM: shctx: leave the block allocator when enough blocks are found
  * BUG/MEDIUM: cache/cli: make "show cache" thread-safe
  * BUG/MEDIUM: mux-h2: always process a pending shut read
  * BUG/MEDIUM: ssl: abort with the correct SSL error when SNI not found
  * CLEANUP: ssl: fix wrong #else commentary
  * BUG/MINOR: ssl: free correctly the sni in the backend SSL cache
  * BUG/MEDIUM: ssl: backend TLS resumption with sni and TLSv1.3
  * BUILD: makefile: simplify detection of libatomic
  * BUG/MEDIUM: mux-h1: Handle delayed silent shut in h1_process() to release H1C
  * BUG/MINOR: stick-table/cli: Check for invalid ipv6 key
  * BUG/MEDIUM: connection: make cs_shutr/cs_shutw//cs_close() idempotent
  * BUG/MINOR: mux-h2: Fix H2_CF_DEM_SHORT_READ value
  * BUG/MINOR: mworker: doesn't launch the program postparser
  * BUG/MEDIUM: conn-stream: Don't reset CS flags on close
  * MINOR: mux-h1: Slightly Improve H1 traces
  * DOC: lua: Be explicit with the Reply object limits
  * Revert "BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back"
  * BUG/MINOR: http-ana: Apply stop to the current section for http-response rules
  * DOC: config: Fix typo in ssl_fc_unique_id description
  * BUG/MINOR: cache: properly ignore unparsable max-age in quotes
  * BUG/MINOR: resolvers: throw log message if trash not large enough for query
  * BUG/MINOR: resolvers: fix sent messages were counted twice
  * BUG/MEDIUM: mux-h2: reject upgrade if no RFC8441 support
  * MINOR: mux-h2: add trace on extended connect usage
  * MINOR: mux-h2: perform a full cycle shutdown+drain on close
  * MINOR: connection: add a new CO_FL_WANT_DRAIN flag to force drain on close</changelog>
  <changelog author="varkoly@suse.com" date="1692014400">- VUL-0: CVE-2023-40225: haproxy: reject any empty content-length header value
  (bsc#1214102) Apply upstream patch adapted for 2.4.22 (patch h2_parse_cont_len_header() instead of http_parse_cont_len_header())
  Add patch: 0001-BUG-MAJOR-http-reject-any-empty-content-length-heade.patch</changelog>
  <changelog author="varkoly@suse.com" date="1701345600">- VUL-0: CVE-2023-45539: haproxy: misinterpretation of a path_end rule with # as part of the URI component
  (bsc#1217653) Apply upstream patch.
  Add patch: 0001-BUG-MINOR-h1-do-not-accept-as-part-of-the-URI-compon.patch</changelog>
</package>
<package pkgid="aa68f2cb800a71059f5545dd42bceb3925c375d4a8546418ad9e7cfafccab5c4" name="harfbuzz" arch="src">
  <version epoch="0" ver="3.4.0" rel="150400.3.8.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1591185600">- Update to version 2.6.7:
  + Update to Unicode 13.0.0
  + Fix hb_ot_layout_get_ligature_carets for fonts without lcar
    table
- includes fixes from 2.6.6:
  * A fix in AAT kerning for Geeza Pro</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1592913600">- update to 2.6.8:
  + New API to fetch glyph alternates from GSUB table
  + New API +hb_ot_layout_lookup_get_glyph_alternates()
- Drop gpg2 BuildRequires and stop verifying signature during
  build: upstream no longer signs the tarball/signature.</changelog>
  <changelog author="dmueller@suse.com" date="1600344000">- Update to version 2.7.2:
  + Fix a regression in the previous release that caused a crash
    with Kaithi.
  + More OOM fixes.
  + ot-funcs now handles variable empty glyphs better when
    hvar/vvar isn't present.
  + Reverted a GDEF processing regression.
  + A couple of fixes to handle OOM better.
  + Use an implementation for round that always rounds up, some
    minor fluctuations are expected on var font specially when
    hb-ot callback is used.
  + Fix an AAT's `kerx` issue on broken rendering of Devanagari
    Sangam MN.
  + Remove AAT's `lcar` table support from _get_ligature_carets
    API, not even much use on macOS installed fonts (only two
    files). GDEF support is the recommended one and expected to
    work properly after issues fixed two releases ago.
  - Minor memory fixes to handle OOM better specially in hb-ft.
  - Minor .so files versioning scheme change and remove
    stable/unstable scheme differences, was never used in practice
    (always default to stable scheme).
  - We are now suggesting careful packaging of the library using
    meson, https://github.com/harfbuzz/harfbuzz/wiki/Notes-on-migration-to-meson
    for more information.
  - Distribution package URL is changed, either use GitHub
    generated tarballs,
    `https://github.com/harfbuzz/harfbuzz/archive/$pkgver.tar.gz`
    or, even more preferably use commit hash of the release and git
    checkouts like,
    `git+https://github.com/harfbuzz/harfbuzz#commit=$commit`</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609070400">- Update to version 2.7.4:
  + Fix missing --enable-introspection configure option
- Changes from version 2.7.3:
  + Update USE shaper to 2020-08-13 specification, and other
    improvements
  + Don’t disable liga feature in myanmar shaper, to match
    Uniscribe
  + Improvements to language and script tags handling.
  + Update language system tag registry to OpenType 1.8.4
  + Support for serializing and deserializing Unicode buffers
  + Increase buffer work limits to handle fonts with many complex
    lookups
  + Handle more shaping operations in trace output
  + Memory access fixes
  + More OOM fixes
  + Improved documentation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610107200">- Switch to meson buildsystem:
  + Add meson BuildRequires and macros.
  + Replace gcc-c++ for generic c++_compiler BuildRequires.
  + Add meson_test macro in check section, run tests during build.
  + Drop pkgconfig(graphite2) BuildRequires: No longer build
    graphite2 support, following upstream that disables this by
    default.
  + Stop packaging gtk-docs, pass -Ddocs=disabled to meson, this
    way we might avoid a build-cycle and since we did not have a
    explicit docs subpackage, just silently drop them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1610539200">- Re-enable graphite2 support: TexLive relies on this to be
  present:
  + Pass -Dgraphite=enabled to meson.
  + Add pkgconfig(graphite2) BuildRequires.</changelog>
  <changelog author="christophe@krop.fr" date="1618315200">- Update to version 2.8.0:
  + Shape joining scripts other than Arabic/Syriac using the
    Universal Shaping Engine. Previously these were shaped using
    the generalized Arabic shaper.
  + Fix regression in shaping of U+0B55 ORIYA SIGN OVERLINE.
  + Update language tags.
  + Variations: reduce error: do not round each interpolated delta.
  + Documentation improvements.
  + Subsetter improvements: subsets most, if not all, lookup types
    now.
  + Fuzzer-found fixes and other improvements when memory failures
    happen.
  + Removed most atomic implementations now that we have C++11
    atomic impl.
  + General codebase upkeep; using more C++11 features: constexpr
    constructors, etc.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620302400">- Update to version 2.8.1:
  + Subsetter now fully supports GSUB/GPOS/GDEF tables (including
    variations); as such, layout tables are retained by subsetter
    by default
  + hb-view supports iTerm2 and kitty inline image protocols
    it can also use Chafa for terminal graphics if available
- Add  pkgconfig(chafa): new, optional depdency.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1626264000">- Update to version 2.8.2:
  + Shaping LTR digits for RTL scripts now makes the native
    direction of the digits LTR, applying shaping and positioning
    rules on the same glyph order as Uniscribe
  + Subsetting COLR v1 and CPAL tables is now supported
  + Various fixes and improvements to the subsetter
  + When applying morx table, mark glyph widths should not be zeroed
  + GPOS is preferred over kerx, if GSUB was applied
  + Regional_Indicator pairs are grouped together when clustering</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Drop pkgconfig(chafa) BuildRequires for now: causes a cycle
  between chafa and harfbuzz, and disable it in meson</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631448000">- harfbuzz 2.9.1:
  + Subsetter API close to stable
  + Various fuzzer-found bug fixes
  + hb_buffer_append() now handles the pre- and post-context which
    previously were left unchanged in the destination buffer
  + hb-view / hb-shape now accept following new arguments:
  - -unicodes: takes a list of hex numbers that represent Unicode
    codepoints.
  + Undeprecated API: hb_set_invert()
- includes changes from 2.9.0:
  + Support multiple variation axes with same tag, aka HOI
  + The coretext testing shaper now passes font variations to
    CoreText
  + hb-shape/hb-view does not break line at new lines unless text
    is read from file
  + hb-view and hb-subset has a --batch now, similar to hb-shape
  + The --batch mode now uses ; as argument separator instead of :
    used previously
  + The --batch in hb-shape does not expect 0th argument anymore.
    That is, the lines read are interpreted as argv[1:], instead
    of argv[0:].
  + The --batch option has been undocumented. We are ready to
    document it; send feedback if you find it useful
  + hb-subset got arguments revamps. Added much-requested
  - -gids-file, --glyphs, --glyphs-file, --unicodes-file,
    supporting ranges in --unicodes.
  + Various bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631966400">- harfbuzz 3.0.0:
  + Unicode 14.0 support
  + hb-subset API and harfbuzz-subset ABI now declared stable
  + hb-style API is now stable</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1636200000">- harfbuzz 3.1.0:
  * Better offset-overflow handling in the subsetter library
  * Improved Unicode 14 properties in the USE shaper, and various
    other USE shaper fixes
  * MATH and COLR v1 tables subsetting support, and various other
    subsetter fixes
  * Support for Pwo Karen / Ason Chin medial la. (Simon Cozens)
  * Apply GPOS positioning when substituting with morx table, if
    kerx is missing
  * Apply calt and clig features across syllable boundaries in
    Indic shaper
  * Meson option for enabling Graphite 2 has been renamed to
    graphite2
  * Build and documentation fixes
- add harfbuzz-3.1.0-work-around-GCC-cast-align-error-warning.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636459200">- Update to version 3.1.1:
  + Work around GCC cast-align error/warning on some platforms.
  + Documentation improvements.
- Drop patch fixed upstream:
  + harfbuzz-3.1.0-work-around-GCC-cast-align-error-warning.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639742400">- Update to 3.1.2:
  + hb-shape / hb-view: revert treating text on the commandline as
    single paragraph (was introduced in 3.0.0); add new
  - -single-par to do that
  + Subsetter bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639742401">- Update to 3.2.0:
  + Fixed shaping of Apple Color Emoji flags in right-to-left context
  + Fixed positioning of CFF fonts in HB_TINY profile
  + OpenType 1.9 language tags update
  + Add HB_NO_VERTICAL config option
  + Add HB_CONFIG_OVERRIDE_H for easier configuration
  + Improved packing of cmap, loca, and Ligature tables
  + Significantly improved overflow-resolution strategy in the repacker</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644235200">- update to 3.3.2:
  + Revert splitting of pair positioning values introduced in 3.3.0
    as it proved problematic
- includes changes from 3.3.1:
  + Fix heap-use-after-free in harfbuzz-subset introduced in
    previous release
- includes changes from 3.3.0:
  + Improved documentation, code cleanup
  + The low 16-bits of face index will be used by hb_face_create()
    to select a face inside a font collection file format, while the
    high 16-bits will be used by hb_font_create() to load the named
    instance
  + Glyph positions and other font metrics now apply synthetic slant
    set by hb_font_set_synthetic_slant(), for improved positioning
    for synthetically slanted fonts
  + Fixed unintentional locale dependency in hb_variation_to_string()
    for decimal point representation
  + When applying pair positioning (kerning) the positioning value
    is split between the two sides of the pair for improved cursor
    positioning between such pairs
  + Introduced new HB_GLYPH_FLAG_UNSAFE_TO_CONCAT, to be used in
    conjunction with HB_GLYPH_FLAG_UNSAFE_TO_BREAK for optimizing
    re-shaping during line breaking. Check the documentation for
    further details
  + Improved handling of macrolanguages when mapping BCP 47 codes
    to OpenType tags</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644753600">- update to 3.4.0:
  + Perform sanity checks on shaping results is now part of
    “harfbuzz” library and can be enabled by setting the buffer
    flag HB_BUFFER_FLAG_VERIFY
  + Arabic Mark Transient Reordering Algorithm have been updated
    to revision 6
  + ISO 15924 code for mathematical notation, ‘Zmth’, now maps to
    the OpenType ‘math’ tag
  + It is now possible to get at once all math kerning values for a
    given glyph at a given corner
  + Fix locale_t portability issues on systems the typedef’s it to
    a void pointer</changelog>
  <changelog author="mgorse@suse.com" date="1658836800">- Add harfbuzz-CVE-2022-33068.patch: sbix: limit glyph extents
  (boo#1200900 CVE-2022-33068).</changelog>
  <changelog author="mgorse@suse.com" date="1680696000">- Add CVE-2023-25193.patch: limit how far we skip when looking
  back (bsc#1207922 CVE-2023-25193).</changelog>
</package>
<package pkgid="9df42ff1d31cee4d9ea54904d4660fa36096dd0ae1e9d007f8d7c2c4e72d449a" name="hidapi" arch="src">
  <version epoch="0" ver="0.10.1" rel="150300.3.2.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1390824000">- Initial version</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1394798400">- Add do_not_install_docs.patch: don't let make install docs</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1395662400">- Supply LICENSE files with libraries</changelog>
  <changelog author="luca@z3ntu.xyz" date="1563796800">- Update to 0.9.0
- Switch upstream to libusb/hidapi because the original maintainer is not active anymore</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1563796801">- Use disabled services to follow Factory guidelines.</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(libudev) instead of libudev-devel: allow
  OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="jgwang@suse.com" date="1610366400">- Update to version 0.10.1
  * Add FreeBSD/macOS/MinGW/Alpine/Arch Linux/Windows CI
  * Add hid_version/hid_version_str API (#192)
  * Add podspec to support releases via cocoapods
  * Add support for HID over I2C and uhid devices (#166)
  * Fix small casting issue
  * Fix race condition on device close (#189)
  * Fix API prototype for gcc flag -Wstrict-prototypes (#207)
  * Fix strict typecast (#206)
  * Fix -Wall -Wextra -pedantic -Werror compilation (#214) ￼…
  * Drop workaround for kernel &lt; 2.6.34
  * Use pkg-config to find libusb on *freebsd
  * Reattach kernel driver in hidapi-libusb
  * Move local variable declaration to the beginning of the function</changelog>
</package>
<package pkgid="4f3c86749fd5df962052ebbd45d9e795bc9909544281d0a7d2d2159e20e126aa" name="hwdata" arch="noarch">
  <version epoch="0" ver="0.378" rel="150000.3.65.1"/>
  <changelog author="mpluskal@suse.com" date="1646740800">- Update to version 0.357 (bsc#1196332):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1650369600">- Update to version 0.358 (bsc#1196332):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1652270400">- Update to version 0.359:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1654084800">- Update to version 0.360 (bsc#1200110):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="dmueller@suse.com" date="1657540800">- update to 0.361:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1663156800">- update to 0.362:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1665662400">- update to 0.363:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1668513600">- update to 0.364:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1670328000">- update to 0.365:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="dmueller@suse.com" date="1672833600">- update to 0.366:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1675339200">- update to 0.367:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1678190400">- update to 0.368:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1680523200">- update to 0.369:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1684238400">- update to 0.370:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1686312000">- update to 0.371:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1689076800">- update to 0.372:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="andrea.manzini@suse.com" date="1692705600">- update to 0.373:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1700049600">- update to 0.376:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1701691200">- update to 0.377:
  * Fixed trailing spaces in pnp.ids</changelog>
  <changelog author="mpluskal@suse.com" date="1704888000">- update to 0.378:
  * Update pci, usb and vendor ids</changelog>
</package>
<package pkgid="8efda5ecfef763aded6707788644802a4ea7081d1aada3fa9a4f0343c686040d" name="hwdata" arch="src">
  <version epoch="0" ver="0.378" rel="150000.3.65.1"/>
  <changelog author="mpluskal@suse.com" date="1646740800">- Update to version 0.357 (bsc#1196332):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1650369600">- Update to version 0.358 (bsc#1196332):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1652270400">- Update to version 0.359:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1654084800">- Update to version 0.360 (bsc#1200110):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="dmueller@suse.com" date="1657540800">- update to 0.361:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1663156800">- update to 0.362:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1665662400">- update to 0.363:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1668513600">- update to 0.364:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1670328000">- update to 0.365:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="dmueller@suse.com" date="1672833600">- update to 0.366:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1675339200">- update to 0.367:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1678190400">- update to 0.368:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1680523200">- update to 0.369:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1684238400">- update to 0.370:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1686312000">- update to 0.371:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1689076800">- update to 0.372:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="andrea.manzini@suse.com" date="1692705600">- update to 0.373:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1700049600">- update to 0.376:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1701691200">- update to 0.377:
  * Fixed trailing spaces in pnp.ids</changelog>
  <changelog author="mpluskal@suse.com" date="1704888000">- update to 0.378:
  * Update pci, usb and vendor ids</changelog>
</package>
<package pkgid="c4dbcf303efd79f895ac1612f006e065cace801be615fc3e3e59a2ec74814595" name="hwdata" arch="noarch">
  <version epoch="0" ver="0.380" rel="150000.3.68.1"/>
  <changelog author="mpluskal@suse.com" date="1652270400">- Update to version 0.359:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1654084800">- Update to version 0.360 (bsc#1200110):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="dmueller@suse.com" date="1657540800">- update to 0.361:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1663156800">- update to 0.362:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1665662400">- update to 0.363:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1668513600">- update to 0.364:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1670328000">- update to 0.365:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="dmueller@suse.com" date="1672833600">- update to 0.366:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1675339200">- update to 0.367:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1678190400">- update to 0.368:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1680523200">- update to 0.369:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1684238400">- update to 0.370:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1686312000">- update to 0.371:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1689076800">- update to 0.372:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="andrea.manzini@suse.com" date="1692705600">- update to 0.373:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1700049600">- update to 0.376:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1701691200">- update to 0.377:
  * Fixed trailing spaces in pnp.ids</changelog>
  <changelog author="mpluskal@suse.com" date="1704888000">- update to 0.378:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1708084800">- update to 0.379:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1709640000">- update to 0.380:
  * Update pci, usb and vendor ids</changelog>
</package>
<package pkgid="80156c59d8e30797022fda5e9dce0e9779f2c4661a6eeb071990d5a65b25d58d" name="hwdata" arch="src">
  <version epoch="0" ver="0.380" rel="150000.3.68.1"/>
  <changelog author="mpluskal@suse.com" date="1652270400">- Update to version 0.359:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1654084800">- Update to version 0.360 (bsc#1200110):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="dmueller@suse.com" date="1657540800">- update to 0.361:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1663156800">- update to 0.362:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1665662400">- update to 0.363:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1668513600">- update to 0.364:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1670328000">- update to 0.365:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="dmueller@suse.com" date="1672833600">- update to 0.366:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1675339200">- update to 0.367:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1678190400">- update to 0.368:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1680523200">- update to 0.369:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1684238400">- update to 0.370:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1686312000">- update to 0.371:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1689076800">- update to 0.372:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="andrea.manzini@suse.com" date="1692705600">- update to 0.373:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1700049600">- update to 0.376:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1701691200">- update to 0.377:
  * Fixed trailing spaces in pnp.ids</changelog>
  <changelog author="mpluskal@suse.com" date="1704888000">- update to 0.378:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1708084800">- update to 0.379:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1709640000">- update to 0.380:
  * Update pci, usb and vendor ids</changelog>
</package>
<package pkgid="e1e897bbf940f220e7c09a365fb3b48de18a0ff385d4541c83e8f97a56e3d9a7" name="ignition" arch="aarch64">
  <version epoch="0" ver="2.17.0" rel="150500.3.3.1"/>
  <changelog author="iforster@suse.com" date="1625659200">- Implement missing ignition-kargs-helper script for kernel
  argument support</changelog>
  <changelog author="iforster@suse.com" date="1625659201">- Update to version 2.11.0:
  * news: add notes for 2.11.0
  * Upgraded docs
  * config/*: return report from previous parser when chaining
  * config/*: re-order testcases by version
  * tree: update for stable v3.3.0 and new v3.4.0-experimental
  * config/v3_4_experimental: adapt for experimental
  * config/v3_4_experimental: copy from config/v3_3
  * config/v3_3: adapt for stabilization
  * config/v3_3_experimental: rename to config/v3_3
  * config/v3_3_exp: pointerify ClevisCustom Config and Pin
  * config/v3_3_exp: pointerify Raid.Level
  * config/v3_3_exp: pointerify LinkEmbedded1.Target
  * stages/disks: simplify a check
  * config/v3_1/translate: don't point to field from input struct
  * config/v3_3_exp: drop devices from schema "required" field
  * config/*: validate that storage.raid.devices is non-empty
  * config/*/types: add RAID validation tests
  * config/shared/errors: fix ErrSparesUnsupportedForLevel message
  * config: fix comment
  * *: formally bump Go to 1.13
  * platform: add powervs platform
  * internal/providers/*stack: drop dead timeout code
  * stages/disks: improve error reporting for LUKS device reuse
  * ignition-setup-user.service: drop Before=multipathd.service
  * Dockerfile: build ignition-validate container using Fedora
  * workflows: test on Go 1.16
  * tests/*: verify deletion of block device w/o creating a FS
  * *: allow erasing block device without creating a filesystem
  * *: rename other projects' master branches to main
  * *: rename master branch to main
  * config/*: add export functions for parsing any config version &lt; N
  * config/*: refactor config.go's Parse() to use GetConfigVersion
  * config/* : minor cleanup
- Refreshed to match new Ignition spec
  * 0002-allow-multiple-mounts-of-same-device.patch</changelog>
  <changelog author="iforster@suse.com" date="1625745600">- If a Combustion device was mounted, then unmount it in
  ignition-kargs-helper - the replacement script will be put on
  the same location</changelog>
  <changelog author="iforster@suse.com" date="1626868800">- Ignore error return code if no virtualization environment
  detected. [bsc#1188479]
  This makes it possible to use Ignition also on bare metal (e.g.
  when dumping images directly to disk) without adding a
  ignition.platform.id parameter.</changelog>
  <changelog author="kukuk@suse.com" date="1627473600">- Include vfat and nls kernel modules into initrd so that we can
  read the ignition configuration from USB drives [bsc#1184202]</changelog>
  <changelog author="iforster@suse.com" date="1628510400">- Update to version 2.12.0:
  * news: add notes for 2.12.0
  * stages/files: add previousReport to result report
  * tests: fix linter warning
  * workflows: limit permissions to reading repo contents
  * workflows: bump linter version
  * go.mod: revendor
  * Drop EOL Go versions
  * internal/distro: drop DiskByIDDir
  * providers/azure: add support for azure gen2 VMs [bsc#1196679]
  * stages/mount: correctly relabel the root of a fresh ext4 filesystem
  * exec: fix permissions for mountpoints in home dirs
  * tests: drop os.ModeDir requirement in mode of output directories
  * examples: reboot with --force
  * exec/util: add blkid API to query block devices based on FSTYPE
  * stages/files: use IntToPtr() in createCrypttabEntries()
  * stages/files: write result report to /var/lib/ignition
  * engine: persist fetched config summaries in State
  * stages/disks: use State to persist keyfiles for files stage
  * *: add general mechanism for persisting state between stages
  * main: drop -clear-cache flag
  * engine: don't hardcode neednet path
  * fetch-offline: return ErrNeedNet if we need net
  * engine: switch Engine.logReport() to pointer receiver
  * engine: fix incorrect error in log message
  * dracut: drop ignition-setup-user.service
  * dracut: drop reference to ignition-setup-base.service
  * providers/gcp: access GCP metadata service by IP address
  * Remove ignition-firstboot-complete.service
  * OWNERS: remove
  * internal/exec/util: drop device argument from cResultToErr()
  * docs/config*: document storage.luks.clevis.threshold default
  * ci: disable spec bump external test workaround
  * docs: Add Ignition release / Spec version table
  * templates: update example releng signing ticket
  * templates: don't update %gotest lines
  * Provide ignition-firstboot-complete.service (removed by upstream
  due to correctly being considered distro spcific), based on the
  old upstream version; removed all non-SUSE specific stuff and
  integrated our own changes
  * Removed change-ignition-firstboot-path.conf (changes are
  integrated into ignition-firstboot-complete.service now).
  * Provide ignition-setup-user.service  (removed by upstream due
  to correctly being considered distro spcific), based on the old
  upstream version.
  * Renamed ignition-setup-user-suse.sh to ignition-setup-user.sh
  * Adapted ignition-generator-suse and module-setup.sh to use the
  custom ignition-setup-user.service (no overriding of parts of the
  service file necessary any more).
  * Synced ignition-kargs-helper script with upstream example
  * Raising minimum Go version to 1.15 as required by upstream</changelog>
  <changelog author="iforster@suse.com" date="1628769600">- is-live-image doesn't exist on *SUSE, and our live images don't
  use Ignition, so just add the Ignition device dependency to the
  service file directly.</changelog>
  <changelog author="iforster@suse.com" date="1629720000">- Make sure to create /boot/writable (may not be present in some
  images)</changelog>
  <changelog author="iforster@suse.com" date="1638360000">- Update to version 2.13.0:
  * news: add notes for 2.13.0
  * config/v3_4_exp: noProxy entries cannot be null
  * config/v3_4_exp: mark ignition.version as required
  * docs/supported-platforms: add some description about Nutanix
  * providers/nutanix: add Nutanix platform
  * tests: use umountPath as a thin wrapper around umountPartition
  * internal/providers: refactor handling of unmounting the mount path
  * tests: address gostatic-check warning
  * tests: Add base64 decoding test
  * Dockerfile.validate: build with Fedora 35
  * go.mod: update dataurl to 1.0.0
  * ci: give blackbox tests two hours to run
  * tests/filesystem: fix umountPartition retry loop
  * templates: skip vendoring the new version in favor of dependabot
  * go.mod: update vcontext
  * providers/virtualbox: read config from /Ignition/Config guest property
  * stages/filesystems: use mkfs.fat instead of mkfs.vfat
  * docs/supported-platforms: switch to Afterburn docs URL
  * docs/supported-platforms: drop reference to platform-specific agents
  * test: ensure all platforms are documented
  * docs/supported-platforms: add missing platforms
  * stages/files: rename `relabelDirsForFile` and add docstring
  * stages/files: make variable name follow Go convention
  * docs/supported-platforms: update platform names and URLs
  * docs/supported-platforms: sort by platform ID
  * docs/supported-platforms: add platform IDs
  * docs: Remove default layout from front matter
  * docs: Do not convert -- &amp; --- to en/em-dash
  * internal/*: change the location of Ignition report
  * internal/exec/util: rename FindFirstMissingDirForFile and tweak docs
  * providers/qemu: start reporting progress reading fw_cfg after 10 s
  * providers/qemu: optimize fw_cfg read size
  * ci: use coreos-ci-lib helper for kola testiso
  * *: gofmt 1.17
  * workflows: bump Go and golangci-lint
  * config: update versions in comments
- Removed obsolete ignition-rpmlintrc</changelog>
  <changelog author="fvogt@suse.com" date="1646395200">- Add support for NetworkManager in dracut:
  * ignition-enable-network.service, ignition-enable-network.sh</changelog>
  <changelog author="fvogt@suse.com" date="1646395201">- Remove /var/lib/YaST2/reconfig_system if a config was provided:
  * ignition-remove-reconfig_system.service</changelog>
  <changelog author="iforster@suse.com" date="1648209600">- Add ignition-touch-selinux-autorelabel.conf:
  Trigger SELinux autorelabel after Ignition runs; Ignition would
  support SELinux itself, however this is a compile time option, so
  it can't be used here.
- Filter commented lines in ignition-mount-initrd-fstab.service</changelog>
  <changelog author="iforster@suse.com" date="1649073600">- Don't include non-MarkDown files in documentation</changelog>
  <changelog author="iforster@suse.com" date="1649160000">- ignition-mount-initrd-fstab.service:
  - Don't ignore errors in loops
  - Unmount mount points recursively - a new submount may have
    appeared
  - Split umount part into own service file:
- ignition-umount-initrd-fstab.service:
  - Unmounts the additional mounts as soon as they are not
    required for Ignition any more; the ExecStop operation is
    running quite late in initrd and may unmount essential mount
    points flagged with "x-initrd.mount" (e.g. when storing /usr on
    a separate mount point). In theory this will also affect
    Ignition itself, but it hasn't been reported as a problem so
    far.</changelog>
  <changelog author="iforster@suse.com" date="1649419200">- Use /bin/sh instead of /usr/bin/sh (for backwards compatibility
  with SLE Micro 5.1) [bsc#1196679]</changelog>
  <changelog author="iforster@suse.com" date="1652875200">- Update to version 2.14.0:
  * NEWS: update v2.14.0
  * docs/operator-notes: add section on provisioning secrets
  * Dockerfile.validate: build with Fedora 36
  * internal/resource: fix gs:// fetches in GCE without a service account
  * docs/operator-notes: document supported S3 URL formats
  * internal/resource: fix S3 access point object ARNs
  * exec/util: fix infinite loop in Depth() if -root is relative
  * Add ignition-delete-config.service and ignition-rmcfg symlink
  * providers/virtualbox: support deleting Ignition configs
  * providers/virtualbox: add comment referencing VirtualBox source
  * providers/virtualbox: add define for GUEST_PROP_FN_GET_PROP
  * providers/virtualbox: add helper to set up hypervisor connection
  * providers/vmware: support deleting Ignition configs
  * main: add ignition-rmcfg multicall binary
  * go.mod: add github.com/beevik/etree
  * providers/vmware: switch to internal copy of OVF parser
  * internal/resource: fix bucket field in error message
  * internal/resource: derive AWS region hint from ARN partition field
  * internal/resource: simplify test
  * internal/resource: fix minor nits
  * provider/azure: try to fetch userdata from IMDS
  * providers/vmware: convert OVF tests to testify
  * providers/vmware: drop vmw-ovflib docs
  * providers/vmware: add verbatim copy of vmw-ovflib
  * providers/vmware: add constants for guestinfo and OVF property names
  * providers/virtualbox: fix reading properties with flags
  * internal/resource: support S3 access point URLs
- Update fixes CVE from [bsc#1199524]; this introduces a new
  service "ignition-delete-config.service"
- Add ignition-rmcfg-suse.conf dropin to adapt to SUSE environment
- Use fixed paths in spec file for hardcoded installation paths</changelog>
  <changelog author="fvogt@suse.com" date="1659441600">- ignition-enable-network.sh: Use /lib/dracut/hooks directly
  instead of the usr-merged location which isn't available everywhere
  (bsc#1201957)</changelog>
  <changelog author="iforster@suse.com" date="1677499200">- Update to version 2.15.0:
  * Features
  * Support offline Tang provisioning via pre-shared advertisement (3.4.0)
  * Allow enabling discard passthrough on LUKS devices (3.4.0)
  * Allow specifying arbitrary LUKS open options (3.4.0)
  * Ship aarch64 macOS ignition-validate binary in GitHub release artifacts
  * Changes
  * Mark the 3.4.0 config spec as stable
  * No longer accept configs with version 3.4.0-experimental
  * Create new 3.5.0-experimental config spec from 3.4.0
  * Fail if files/links/dirs conflict with systemd units or dropins
  * Warn if template for enabled systemd instance unit has no Install section
  * Warn if filesystem overwrites partitioned disk
  * Warn if wipeTable overwrites a filesystem that would otherwise be reused
  * Warn if user/group specified for hard link
  * Install ignition-apply in /usr/libexec
  * Allow distros to add Ignition command-line arguments from a unit drop-in
  * Convert NEWS to Markdown and move to docs site
  * Require Go 1.18+
  * Bug fixes
  * Don't overwrite LUKS1 volume when storage.luks.wipeVolume is false
  * Request network when custom Clevis config has needsNetwork set
  * Fix creating LUKS volume with custom Clevis config that uses TPM2
  * Avoid logging spurious error when a LUKS volume wasn't previously formatted
  * Fix version string in ignition-validate release container
  * Fix reproducibility of systemd preset file in ignition-apply output
  * Document that user/group fields aren't applied to hard links
  * Clarify spec docs for files/directories/links group fields
- Modified 0002-allow-multiple-mounts-of-same-device.patch to add
  new Ignition spec version
- Add 0001-ignore-missing-qemu-blockdev.patch [bsc#1207679] to
  support booting without configuration device on s390x.
- Move all /usr/libexec contents to %sbindir</changelog>
  <changelog author="iforster@suse.com" date="1678363200">- Add `dasd_mod.dasd=autodetect` to kernel command line parameters
  (for Ignition device support on S/390) [boo#1207903]</changelog>
  <changelog author="iforster@suse.com" date="1702900800">- Update to version 2.17.0:
  * Features
  * providers/hetzner: add support for Hetzner Cloud
  * providers/applehv: Add Apple Hypervisor
  * packit: add initial support
  * Other notable Changes
  * Add vsock modules into ramdisk
  * stages/disks: retry `sgdisk --zap-all` invocation
  * Add optionally-installed grub2 code
  * internal/exec/stages/disks: prevent races with udev
- Updates from version 2.16.x [jsc#SMO-314] [bsc#1217533]:
  * Features
  * Add support for Hyper-V platform
  * Other notable changes
  * dracut: make hv_utils module optional
  * internal/exec: don't relabel a mountpoint that already exists
  * internal/exec/util: check if unit exists before disabling
  * platform: allow provider fetch to save files to write from files stage
  * providers: rename noop to metal
  * platform: drop function pointer indirection for fetch method
  * providers: add Config wrapper structs for cmdline and system providers
- Fix segmentation fault if filesystem section of Ignition JSON
  doesn't contain path entry in
  0002-allow-multiple-mounts-of-same-device.patch
- Add 0003-Move-the-GPT-header-on-resized-disks.patch
- Increased required Go version</changelog>
</package>
<package pkgid="6629652dda66077410ae5458b802ca186e1c9b2a7f0738d9000f405a4b2e2690" name="ignition" arch="s390x">
  <version epoch="0" ver="2.17.0" rel="150500.3.3.1"/>
  <changelog author="iforster@suse.com" date="1625659200">- Implement missing ignition-kargs-helper script for kernel
  argument support</changelog>
  <changelog author="iforster@suse.com" date="1625659201">- Update to version 2.11.0:
  * news: add notes for 2.11.0
  * Upgraded docs
  * config/*: return report from previous parser when chaining
  * config/*: re-order testcases by version
  * tree: update for stable v3.3.0 and new v3.4.0-experimental
  * config/v3_4_experimental: adapt for experimental
  * config/v3_4_experimental: copy from config/v3_3
  * config/v3_3: adapt for stabilization
  * config/v3_3_experimental: rename to config/v3_3
  * config/v3_3_exp: pointerify ClevisCustom Config and Pin
  * config/v3_3_exp: pointerify Raid.Level
  * config/v3_3_exp: pointerify LinkEmbedded1.Target
  * stages/disks: simplify a check
  * config/v3_1/translate: don't point to field from input struct
  * config/v3_3_exp: drop devices from schema "required" field
  * config/*: validate that storage.raid.devices is non-empty
  * config/*/types: add RAID validation tests
  * config/shared/errors: fix ErrSparesUnsupportedForLevel message
  * config: fix comment
  * *: formally bump Go to 1.13
  * platform: add powervs platform
  * internal/providers/*stack: drop dead timeout code
  * stages/disks: improve error reporting for LUKS device reuse
  * ignition-setup-user.service: drop Before=multipathd.service
  * Dockerfile: build ignition-validate container using Fedora
  * workflows: test on Go 1.16
  * tests/*: verify deletion of block device w/o creating a FS
  * *: allow erasing block device without creating a filesystem
  * *: rename other projects' master branches to main
  * *: rename master branch to main
  * config/*: add export functions for parsing any config version &lt; N
  * config/*: refactor config.go's Parse() to use GetConfigVersion
  * config/* : minor cleanup
- Refreshed to match new Ignition spec
  * 0002-allow-multiple-mounts-of-same-device.patch</changelog>
  <changelog author="iforster@suse.com" date="1625745600">- If a Combustion device was mounted, then unmount it in
  ignition-kargs-helper - the replacement script will be put on
  the same location</changelog>
  <changelog author="iforster@suse.com" date="1626868800">- Ignore error return code if no virtualization environment
  detected. [bsc#1188479]
  This makes it possible to use Ignition also on bare metal (e.g.
  when dumping images directly to disk) without adding a
  ignition.platform.id parameter.</changelog>
  <changelog author="kukuk@suse.com" date="1627473600">- Include vfat and nls kernel modules into initrd so that we can
  read the ignition configuration from USB drives [bsc#1184202]</changelog>
  <changelog author="iforster@suse.com" date="1628510400">- Update to version 2.12.0:
  * news: add notes for 2.12.0
  * stages/files: add previousReport to result report
  * tests: fix linter warning
  * workflows: limit permissions to reading repo contents
  * workflows: bump linter version
  * go.mod: revendor
  * Drop EOL Go versions
  * internal/distro: drop DiskByIDDir
  * providers/azure: add support for azure gen2 VMs [bsc#1196679]
  * stages/mount: correctly relabel the root of a fresh ext4 filesystem
  * exec: fix permissions for mountpoints in home dirs
  * tests: drop os.ModeDir requirement in mode of output directories
  * examples: reboot with --force
  * exec/util: add blkid API to query block devices based on FSTYPE
  * stages/files: use IntToPtr() in createCrypttabEntries()
  * stages/files: write result report to /var/lib/ignition
  * engine: persist fetched config summaries in State
  * stages/disks: use State to persist keyfiles for files stage
  * *: add general mechanism for persisting state between stages
  * main: drop -clear-cache flag
  * engine: don't hardcode neednet path
  * fetch-offline: return ErrNeedNet if we need net
  * engine: switch Engine.logReport() to pointer receiver
  * engine: fix incorrect error in log message
  * dracut: drop ignition-setup-user.service
  * dracut: drop reference to ignition-setup-base.service
  * providers/gcp: access GCP metadata service by IP address
  * Remove ignition-firstboot-complete.service
  * OWNERS: remove
  * internal/exec/util: drop device argument from cResultToErr()
  * docs/config*: document storage.luks.clevis.threshold default
  * ci: disable spec bump external test workaround
  * docs: Add Ignition release / Spec version table
  * templates: update example releng signing ticket
  * templates: don't update %gotest lines
  * Provide ignition-firstboot-complete.service (removed by upstream
  due to correctly being considered distro spcific), based on the
  old upstream version; removed all non-SUSE specific stuff and
  integrated our own changes
  * Removed change-ignition-firstboot-path.conf (changes are
  integrated into ignition-firstboot-complete.service now).
  * Provide ignition-setup-user.service  (removed by upstream due
  to correctly being considered distro spcific), based on the old
  upstream version.
  * Renamed ignition-setup-user-suse.sh to ignition-setup-user.sh
  * Adapted ignition-generator-suse and module-setup.sh to use the
  custom ignition-setup-user.service (no overriding of parts of the
  service file necessary any more).
  * Synced ignition-kargs-helper script with upstream example
  * Raising minimum Go version to 1.15 as required by upstream</changelog>
  <changelog author="iforster@suse.com" date="1628769600">- is-live-image doesn't exist on *SUSE, and our live images don't
  use Ignition, so just add the Ignition device dependency to the
  service file directly.</changelog>
  <changelog author="iforster@suse.com" date="1629720000">- Make sure to create /boot/writable (may not be present in some
  images)</changelog>
  <changelog author="iforster@suse.com" date="1638360000">- Update to version 2.13.0:
  * news: add notes for 2.13.0
  * config/v3_4_exp: noProxy entries cannot be null
  * config/v3_4_exp: mark ignition.version as required
  * docs/supported-platforms: add some description about Nutanix
  * providers/nutanix: add Nutanix platform
  * tests: use umountPath as a thin wrapper around umountPartition
  * internal/providers: refactor handling of unmounting the mount path
  * tests: address gostatic-check warning
  * tests: Add base64 decoding test
  * Dockerfile.validate: build with Fedora 35
  * go.mod: update dataurl to 1.0.0
  * ci: give blackbox tests two hours to run
  * tests/filesystem: fix umountPartition retry loop
  * templates: skip vendoring the new version in favor of dependabot
  * go.mod: update vcontext
  * providers/virtualbox: read config from /Ignition/Config guest property
  * stages/filesystems: use mkfs.fat instead of mkfs.vfat
  * docs/supported-platforms: switch to Afterburn docs URL
  * docs/supported-platforms: drop reference to platform-specific agents
  * test: ensure all platforms are documented
  * docs/supported-platforms: add missing platforms
  * stages/files: rename `relabelDirsForFile` and add docstring
  * stages/files: make variable name follow Go convention
  * docs/supported-platforms: update platform names and URLs
  * docs/supported-platforms: sort by platform ID
  * docs/supported-platforms: add platform IDs
  * docs: Remove default layout from front matter
  * docs: Do not convert -- &amp; --- to en/em-dash
  * internal/*: change the location of Ignition report
  * internal/exec/util: rename FindFirstMissingDirForFile and tweak docs
  * providers/qemu: start reporting progress reading fw_cfg after 10 s
  * providers/qemu: optimize fw_cfg read size
  * ci: use coreos-ci-lib helper for kola testiso
  * *: gofmt 1.17
  * workflows: bump Go and golangci-lint
  * config: update versions in comments
- Removed obsolete ignition-rpmlintrc</changelog>
  <changelog author="fvogt@suse.com" date="1646395200">- Add support for NetworkManager in dracut:
  * ignition-enable-network.service, ignition-enable-network.sh</changelog>
  <changelog author="fvogt@suse.com" date="1646395201">- Remove /var/lib/YaST2/reconfig_system if a config was provided:
  * ignition-remove-reconfig_system.service</changelog>
  <changelog author="iforster@suse.com" date="1648209600">- Add ignition-touch-selinux-autorelabel.conf:
  Trigger SELinux autorelabel after Ignition runs; Ignition would
  support SELinux itself, however this is a compile time option, so
  it can't be used here.
- Filter commented lines in ignition-mount-initrd-fstab.service</changelog>
  <changelog author="iforster@suse.com" date="1649073600">- Don't include non-MarkDown files in documentation</changelog>
  <changelog author="iforster@suse.com" date="1649160000">- ignition-mount-initrd-fstab.service:
  - Don't ignore errors in loops
  - Unmount mount points recursively - a new submount may have
    appeared
  - Split umount part into own service file:
- ignition-umount-initrd-fstab.service:
  - Unmounts the additional mounts as soon as they are not
    required for Ignition any more; the ExecStop operation is
    running quite late in initrd and may unmount essential mount
    points flagged with "x-initrd.mount" (e.g. when storing /usr on
    a separate mount point). In theory this will also affect
    Ignition itself, but it hasn't been reported as a problem so
    far.</changelog>
  <changelog author="iforster@suse.com" date="1649419200">- Use /bin/sh instead of /usr/bin/sh (for backwards compatibility
  with SLE Micro 5.1) [bsc#1196679]</changelog>
  <changelog author="iforster@suse.com" date="1652875200">- Update to version 2.14.0:
  * NEWS: update v2.14.0
  * docs/operator-notes: add section on provisioning secrets
  * Dockerfile.validate: build with Fedora 36
  * internal/resource: fix gs:// fetches in GCE without a service account
  * docs/operator-notes: document supported S3 URL formats
  * internal/resource: fix S3 access point object ARNs
  * exec/util: fix infinite loop in Depth() if -root is relative
  * Add ignition-delete-config.service and ignition-rmcfg symlink
  * providers/virtualbox: support deleting Ignition configs
  * providers/virtualbox: add comment referencing VirtualBox source
  * providers/virtualbox: add define for GUEST_PROP_FN_GET_PROP
  * providers/virtualbox: add helper to set up hypervisor connection
  * providers/vmware: support deleting Ignition configs
  * main: add ignition-rmcfg multicall binary
  * go.mod: add github.com/beevik/etree
  * providers/vmware: switch to internal copy of OVF parser
  * internal/resource: fix bucket field in error message
  * internal/resource: derive AWS region hint from ARN partition field
  * internal/resource: simplify test
  * internal/resource: fix minor nits
  * provider/azure: try to fetch userdata from IMDS
  * providers/vmware: convert OVF tests to testify
  * providers/vmware: drop vmw-ovflib docs
  * providers/vmware: add verbatim copy of vmw-ovflib
  * providers/vmware: add constants for guestinfo and OVF property names
  * providers/virtualbox: fix reading properties with flags
  * internal/resource: support S3 access point URLs
- Update fixes CVE from [bsc#1199524]; this introduces a new
  service "ignition-delete-config.service"
- Add ignition-rmcfg-suse.conf dropin to adapt to SUSE environment
- Use fixed paths in spec file for hardcoded installation paths</changelog>
  <changelog author="fvogt@suse.com" date="1659441600">- ignition-enable-network.sh: Use /lib/dracut/hooks directly
  instead of the usr-merged location which isn't available everywhere
  (bsc#1201957)</changelog>
  <changelog author="iforster@suse.com" date="1677499200">- Update to version 2.15.0:
  * Features
  * Support offline Tang provisioning via pre-shared advertisement (3.4.0)
  * Allow enabling discard passthrough on LUKS devices (3.4.0)
  * Allow specifying arbitrary LUKS open options (3.4.0)
  * Ship aarch64 macOS ignition-validate binary in GitHub release artifacts
  * Changes
  * Mark the 3.4.0 config spec as stable
  * No longer accept configs with version 3.4.0-experimental
  * Create new 3.5.0-experimental config spec from 3.4.0
  * Fail if files/links/dirs conflict with systemd units or dropins
  * Warn if template for enabled systemd instance unit has no Install section
  * Warn if filesystem overwrites partitioned disk
  * Warn if wipeTable overwrites a filesystem that would otherwise be reused
  * Warn if user/group specified for hard link
  * Install ignition-apply in /usr/libexec
  * Allow distros to add Ignition command-line arguments from a unit drop-in
  * Convert NEWS to Markdown and move to docs site
  * Require Go 1.18+
  * Bug fixes
  * Don't overwrite LUKS1 volume when storage.luks.wipeVolume is false
  * Request network when custom Clevis config has needsNetwork set
  * Fix creating LUKS volume with custom Clevis config that uses TPM2
  * Avoid logging spurious error when a LUKS volume wasn't previously formatted
  * Fix version string in ignition-validate release container
  * Fix reproducibility of systemd preset file in ignition-apply output
  * Document that user/group fields aren't applied to hard links
  * Clarify spec docs for files/directories/links group fields
- Modified 0002-allow-multiple-mounts-of-same-device.patch to add
  new Ignition spec version
- Add 0001-ignore-missing-qemu-blockdev.patch [bsc#1207679] to
  support booting without configuration device on s390x.
- Move all /usr/libexec contents to %sbindir</changelog>
  <changelog author="iforster@suse.com" date="1678363200">- Add `dasd_mod.dasd=autodetect` to kernel command line parameters
  (for Ignition device support on S/390) [boo#1207903]</changelog>
  <changelog author="iforster@suse.com" date="1702900800">- Update to version 2.17.0:
  * Features
  * providers/hetzner: add support for Hetzner Cloud
  * providers/applehv: Add Apple Hypervisor
  * packit: add initial support
  * Other notable Changes
  * Add vsock modules into ramdisk
  * stages/disks: retry `sgdisk --zap-all` invocation
  * Add optionally-installed grub2 code
  * internal/exec/stages/disks: prevent races with udev
- Updates from version 2.16.x [jsc#SMO-314] [bsc#1217533]:
  * Features
  * Add support for Hyper-V platform
  * Other notable changes
  * dracut: make hv_utils module optional
  * internal/exec: don't relabel a mountpoint that already exists
  * internal/exec/util: check if unit exists before disabling
  * platform: allow provider fetch to save files to write from files stage
  * providers: rename noop to metal
  * platform: drop function pointer indirection for fetch method
  * providers: add Config wrapper structs for cmdline and system providers
- Fix segmentation fault if filesystem section of Ignition JSON
  doesn't contain path entry in
  0002-allow-multiple-mounts-of-same-device.patch
- Add 0003-Move-the-GPT-header-on-resized-disks.patch
- Increased required Go version</changelog>
</package>
<package pkgid="b427da3db2aceb0908e16c2c6678e8b6195c52d61eb57ea9349adfcc9db30287" name="ignition" arch="src">
  <version epoch="0" ver="2.17.0" rel="150500.3.3.1"/>
  <changelog author="iforster@suse.com" date="1625659200">- Implement missing ignition-kargs-helper script for kernel
  argument support</changelog>
  <changelog author="iforster@suse.com" date="1625659201">- Update to version 2.11.0:
  * news: add notes for 2.11.0
  * Upgraded docs
  * config/*: return report from previous parser when chaining
  * config/*: re-order testcases by version
  * tree: update for stable v3.3.0 and new v3.4.0-experimental
  * config/v3_4_experimental: adapt for experimental
  * config/v3_4_experimental: copy from config/v3_3
  * config/v3_3: adapt for stabilization
  * config/v3_3_experimental: rename to config/v3_3
  * config/v3_3_exp: pointerify ClevisCustom Config and Pin
  * config/v3_3_exp: pointerify Raid.Level
  * config/v3_3_exp: pointerify LinkEmbedded1.Target
  * stages/disks: simplify a check
  * config/v3_1/translate: don't point to field from input struct
  * config/v3_3_exp: drop devices from schema "required" field
  * config/*: validate that storage.raid.devices is non-empty
  * config/*/types: add RAID validation tests
  * config/shared/errors: fix ErrSparesUnsupportedForLevel message
  * config: fix comment
  * *: formally bump Go to 1.13
  * platform: add powervs platform
  * internal/providers/*stack: drop dead timeout code
  * stages/disks: improve error reporting for LUKS device reuse
  * ignition-setup-user.service: drop Before=multipathd.service
  * Dockerfile: build ignition-validate container using Fedora
  * workflows: test on Go 1.16
  * tests/*: verify deletion of block device w/o creating a FS
  * *: allow erasing block device without creating a filesystem
  * *: rename other projects' master branches to main
  * *: rename master branch to main
  * config/*: add export functions for parsing any config version &lt; N
  * config/*: refactor config.go's Parse() to use GetConfigVersion
  * config/* : minor cleanup
- Refreshed to match new Ignition spec
  * 0002-allow-multiple-mounts-of-same-device.patch</changelog>
  <changelog author="iforster@suse.com" date="1625745600">- If a Combustion device was mounted, then unmount it in
  ignition-kargs-helper - the replacement script will be put on
  the same location</changelog>
  <changelog author="iforster@suse.com" date="1626868800">- Ignore error return code if no virtualization environment
  detected. [bsc#1188479]
  This makes it possible to use Ignition also on bare metal (e.g.
  when dumping images directly to disk) without adding a
  ignition.platform.id parameter.</changelog>
  <changelog author="kukuk@suse.com" date="1627473600">- Include vfat and nls kernel modules into initrd so that we can
  read the ignition configuration from USB drives [bsc#1184202]</changelog>
  <changelog author="iforster@suse.com" date="1628510400">- Update to version 2.12.0:
  * news: add notes for 2.12.0
  * stages/files: add previousReport to result report
  * tests: fix linter warning
  * workflows: limit permissions to reading repo contents
  * workflows: bump linter version
  * go.mod: revendor
  * Drop EOL Go versions
  * internal/distro: drop DiskByIDDir
  * providers/azure: add support for azure gen2 VMs [bsc#1196679]
  * stages/mount: correctly relabel the root of a fresh ext4 filesystem
  * exec: fix permissions for mountpoints in home dirs
  * tests: drop os.ModeDir requirement in mode of output directories
  * examples: reboot with --force
  * exec/util: add blkid API to query block devices based on FSTYPE
  * stages/files: use IntToPtr() in createCrypttabEntries()
  * stages/files: write result report to /var/lib/ignition
  * engine: persist fetched config summaries in State
  * stages/disks: use State to persist keyfiles for files stage
  * *: add general mechanism for persisting state between stages
  * main: drop -clear-cache flag
  * engine: don't hardcode neednet path
  * fetch-offline: return ErrNeedNet if we need net
  * engine: switch Engine.logReport() to pointer receiver
  * engine: fix incorrect error in log message
  * dracut: drop ignition-setup-user.service
  * dracut: drop reference to ignition-setup-base.service
  * providers/gcp: access GCP metadata service by IP address
  * Remove ignition-firstboot-complete.service
  * OWNERS: remove
  * internal/exec/util: drop device argument from cResultToErr()
  * docs/config*: document storage.luks.clevis.threshold default
  * ci: disable spec bump external test workaround
  * docs: Add Ignition release / Spec version table
  * templates: update example releng signing ticket
  * templates: don't update %gotest lines
  * Provide ignition-firstboot-complete.service (removed by upstream
  due to correctly being considered distro spcific), based on the
  old upstream version; removed all non-SUSE specific stuff and
  integrated our own changes
  * Removed change-ignition-firstboot-path.conf (changes are
  integrated into ignition-firstboot-complete.service now).
  * Provide ignition-setup-user.service  (removed by upstream due
  to correctly being considered distro spcific), based on the old
  upstream version.
  * Renamed ignition-setup-user-suse.sh to ignition-setup-user.sh
  * Adapted ignition-generator-suse and module-setup.sh to use the
  custom ignition-setup-user.service (no overriding of parts of the
  service file necessary any more).
  * Synced ignition-kargs-helper script with upstream example
  * Raising minimum Go version to 1.15 as required by upstream</changelog>
  <changelog author="iforster@suse.com" date="1628769600">- is-live-image doesn't exist on *SUSE, and our live images don't
  use Ignition, so just add the Ignition device dependency to the
  service file directly.</changelog>
  <changelog author="iforster@suse.com" date="1629720000">- Make sure to create /boot/writable (may not be present in some
  images)</changelog>
  <changelog author="iforster@suse.com" date="1638360000">- Update to version 2.13.0:
  * news: add notes for 2.13.0
  * config/v3_4_exp: noProxy entries cannot be null
  * config/v3_4_exp: mark ignition.version as required
  * docs/supported-platforms: add some description about Nutanix
  * providers/nutanix: add Nutanix platform
  * tests: use umountPath as a thin wrapper around umountPartition
  * internal/providers: refactor handling of unmounting the mount path
  * tests: address gostatic-check warning
  * tests: Add base64 decoding test
  * Dockerfile.validate: build with Fedora 35
  * go.mod: update dataurl to 1.0.0
  * ci: give blackbox tests two hours to run
  * tests/filesystem: fix umountPartition retry loop
  * templates: skip vendoring the new version in favor of dependabot
  * go.mod: update vcontext
  * providers/virtualbox: read config from /Ignition/Config guest property
  * stages/filesystems: use mkfs.fat instead of mkfs.vfat
  * docs/supported-platforms: switch to Afterburn docs URL
  * docs/supported-platforms: drop reference to platform-specific agents
  * test: ensure all platforms are documented
  * docs/supported-platforms: add missing platforms
  * stages/files: rename `relabelDirsForFile` and add docstring
  * stages/files: make variable name follow Go convention
  * docs/supported-platforms: update platform names and URLs
  * docs/supported-platforms: sort by platform ID
  * docs/supported-platforms: add platform IDs
  * docs: Remove default layout from front matter
  * docs: Do not convert -- &amp; --- to en/em-dash
  * internal/*: change the location of Ignition report
  * internal/exec/util: rename FindFirstMissingDirForFile and tweak docs
  * providers/qemu: start reporting progress reading fw_cfg after 10 s
  * providers/qemu: optimize fw_cfg read size
  * ci: use coreos-ci-lib helper for kola testiso
  * *: gofmt 1.17
  * workflows: bump Go and golangci-lint
  * config: update versions in comments
- Removed obsolete ignition-rpmlintrc</changelog>
  <changelog author="fvogt@suse.com" date="1646395200">- Add support for NetworkManager in dracut:
  * ignition-enable-network.service, ignition-enable-network.sh</changelog>
  <changelog author="fvogt@suse.com" date="1646395201">- Remove /var/lib/YaST2/reconfig_system if a config was provided:
  * ignition-remove-reconfig_system.service</changelog>
  <changelog author="iforster@suse.com" date="1648209600">- Add ignition-touch-selinux-autorelabel.conf:
  Trigger SELinux autorelabel after Ignition runs; Ignition would
  support SELinux itself, however this is a compile time option, so
  it can't be used here.
- Filter commented lines in ignition-mount-initrd-fstab.service</changelog>
  <changelog author="iforster@suse.com" date="1649073600">- Don't include non-MarkDown files in documentation</changelog>
  <changelog author="iforster@suse.com" date="1649160000">- ignition-mount-initrd-fstab.service:
  - Don't ignore errors in loops
  - Unmount mount points recursively - a new submount may have
    appeared
  - Split umount part into own service file:
- ignition-umount-initrd-fstab.service:
  - Unmounts the additional mounts as soon as they are not
    required for Ignition any more; the ExecStop operation is
    running quite late in initrd and may unmount essential mount
    points flagged with "x-initrd.mount" (e.g. when storing /usr on
    a separate mount point). In theory this will also affect
    Ignition itself, but it hasn't been reported as a problem so
    far.</changelog>
  <changelog author="iforster@suse.com" date="1649419200">- Use /bin/sh instead of /usr/bin/sh (for backwards compatibility
  with SLE Micro 5.1) [bsc#1196679]</changelog>
  <changelog author="iforster@suse.com" date="1652875200">- Update to version 2.14.0:
  * NEWS: update v2.14.0
  * docs/operator-notes: add section on provisioning secrets
  * Dockerfile.validate: build with Fedora 36
  * internal/resource: fix gs:// fetches in GCE without a service account
  * docs/operator-notes: document supported S3 URL formats
  * internal/resource: fix S3 access point object ARNs
  * exec/util: fix infinite loop in Depth() if -root is relative
  * Add ignition-delete-config.service and ignition-rmcfg symlink
  * providers/virtualbox: support deleting Ignition configs
  * providers/virtualbox: add comment referencing VirtualBox source
  * providers/virtualbox: add define for GUEST_PROP_FN_GET_PROP
  * providers/virtualbox: add helper to set up hypervisor connection
  * providers/vmware: support deleting Ignition configs
  * main: add ignition-rmcfg multicall binary
  * go.mod: add github.com/beevik/etree
  * providers/vmware: switch to internal copy of OVF parser
  * internal/resource: fix bucket field in error message
  * internal/resource: derive AWS region hint from ARN partition field
  * internal/resource: simplify test
  * internal/resource: fix minor nits
  * provider/azure: try to fetch userdata from IMDS
  * providers/vmware: convert OVF tests to testify
  * providers/vmware: drop vmw-ovflib docs
  * providers/vmware: add verbatim copy of vmw-ovflib
  * providers/vmware: add constants for guestinfo and OVF property names
  * providers/virtualbox: fix reading properties with flags
  * internal/resource: support S3 access point URLs
- Update fixes CVE from [bsc#1199524]; this introduces a new
  service "ignition-delete-config.service"
- Add ignition-rmcfg-suse.conf dropin to adapt to SUSE environment
- Use fixed paths in spec file for hardcoded installation paths</changelog>
  <changelog author="fvogt@suse.com" date="1659441600">- ignition-enable-network.sh: Use /lib/dracut/hooks directly
  instead of the usr-merged location which isn't available everywhere
  (bsc#1201957)</changelog>
  <changelog author="iforster@suse.com" date="1677499200">- Update to version 2.15.0:
  * Features
  * Support offline Tang provisioning via pre-shared advertisement (3.4.0)
  * Allow enabling discard passthrough on LUKS devices (3.4.0)
  * Allow specifying arbitrary LUKS open options (3.4.0)
  * Ship aarch64 macOS ignition-validate binary in GitHub release artifacts
  * Changes
  * Mark the 3.4.0 config spec as stable
  * No longer accept configs with version 3.4.0-experimental
  * Create new 3.5.0-experimental config spec from 3.4.0
  * Fail if files/links/dirs conflict with systemd units or dropins
  * Warn if template for enabled systemd instance unit has no Install section
  * Warn if filesystem overwrites partitioned disk
  * Warn if wipeTable overwrites a filesystem that would otherwise be reused
  * Warn if user/group specified for hard link
  * Install ignition-apply in /usr/libexec
  * Allow distros to add Ignition command-line arguments from a unit drop-in
  * Convert NEWS to Markdown and move to docs site
  * Require Go 1.18+
  * Bug fixes
  * Don't overwrite LUKS1 volume when storage.luks.wipeVolume is false
  * Request network when custom Clevis config has needsNetwork set
  * Fix creating LUKS volume with custom Clevis config that uses TPM2
  * Avoid logging spurious error when a LUKS volume wasn't previously formatted
  * Fix version string in ignition-validate release container
  * Fix reproducibility of systemd preset file in ignition-apply output
  * Document that user/group fields aren't applied to hard links
  * Clarify spec docs for files/directories/links group fields
- Modified 0002-allow-multiple-mounts-of-same-device.patch to add
  new Ignition spec version
- Add 0001-ignore-missing-qemu-blockdev.patch [bsc#1207679] to
  support booting without configuration device on s390x.
- Move all /usr/libexec contents to %sbindir</changelog>
  <changelog author="iforster@suse.com" date="1678363200">- Add `dasd_mod.dasd=autodetect` to kernel command line parameters
  (for Ignition device support on S/390) [boo#1207903]</changelog>
  <changelog author="iforster@suse.com" date="1702900800">- Update to version 2.17.0:
  * Features
  * providers/hetzner: add support for Hetzner Cloud
  * providers/applehv: Add Apple Hypervisor
  * packit: add initial support
  * Other notable Changes
  * Add vsock modules into ramdisk
  * stages/disks: retry `sgdisk --zap-all` invocation
  * Add optionally-installed grub2 code
  * internal/exec/stages/disks: prevent races with udev
- Updates from version 2.16.x [jsc#SMO-314] [bsc#1217533]:
  * Features
  * Add support for Hyper-V platform
  * Other notable changes
  * dracut: make hv_utils module optional
  * internal/exec: don't relabel a mountpoint that already exists
  * internal/exec/util: check if unit exists before disabling
  * platform: allow provider fetch to save files to write from files stage
  * providers: rename noop to metal
  * platform: drop function pointer indirection for fetch method
  * providers: add Config wrapper structs for cmdline and system providers
- Fix segmentation fault if filesystem section of Ignition JSON
  doesn't contain path entry in
  0002-allow-multiple-mounts-of-same-device.patch
- Add 0003-Move-the-GPT-header-on-resized-disks.patch
- Increased required Go version</changelog>
</package>
<package pkgid="b64f6f7ca3988a71ee5649eafc59fa4fd63c549a3da6dfcc6b1dd52222d52353" name="ignition" arch="x86_64">
  <version epoch="0" ver="2.17.0" rel="150500.3.3.1"/>
  <changelog author="iforster@suse.com" date="1625659200">- Implement missing ignition-kargs-helper script for kernel
  argument support</changelog>
  <changelog author="iforster@suse.com" date="1625659201">- Update to version 2.11.0:
  * news: add notes for 2.11.0
  * Upgraded docs
  * config/*: return report from previous parser when chaining
  * config/*: re-order testcases by version
  * tree: update for stable v3.3.0 and new v3.4.0-experimental
  * config/v3_4_experimental: adapt for experimental
  * config/v3_4_experimental: copy from config/v3_3
  * config/v3_3: adapt for stabilization
  * config/v3_3_experimental: rename to config/v3_3
  * config/v3_3_exp: pointerify ClevisCustom Config and Pin
  * config/v3_3_exp: pointerify Raid.Level
  * config/v3_3_exp: pointerify LinkEmbedded1.Target
  * stages/disks: simplify a check
  * config/v3_1/translate: don't point to field from input struct
  * config/v3_3_exp: drop devices from schema "required" field
  * config/*: validate that storage.raid.devices is non-empty
  * config/*/types: add RAID validation tests
  * config/shared/errors: fix ErrSparesUnsupportedForLevel message
  * config: fix comment
  * *: formally bump Go to 1.13
  * platform: add powervs platform
  * internal/providers/*stack: drop dead timeout code
  * stages/disks: improve error reporting for LUKS device reuse
  * ignition-setup-user.service: drop Before=multipathd.service
  * Dockerfile: build ignition-validate container using Fedora
  * workflows: test on Go 1.16
  * tests/*: verify deletion of block device w/o creating a FS
  * *: allow erasing block device without creating a filesystem
  * *: rename other projects' master branches to main
  * *: rename master branch to main
  * config/*: add export functions for parsing any config version &lt; N
  * config/*: refactor config.go's Parse() to use GetConfigVersion
  * config/* : minor cleanup
- Refreshed to match new Ignition spec
  * 0002-allow-multiple-mounts-of-same-device.patch</changelog>
  <changelog author="iforster@suse.com" date="1625745600">- If a Combustion device was mounted, then unmount it in
  ignition-kargs-helper - the replacement script will be put on
  the same location</changelog>
  <changelog author="iforster@suse.com" date="1626868800">- Ignore error return code if no virtualization environment
  detected. [bsc#1188479]
  This makes it possible to use Ignition also on bare metal (e.g.
  when dumping images directly to disk) without adding a
  ignition.platform.id parameter.</changelog>
  <changelog author="kukuk@suse.com" date="1627473600">- Include vfat and nls kernel modules into initrd so that we can
  read the ignition configuration from USB drives [bsc#1184202]</changelog>
  <changelog author="iforster@suse.com" date="1628510400">- Update to version 2.12.0:
  * news: add notes for 2.12.0
  * stages/files: add previousReport to result report
  * tests: fix linter warning
  * workflows: limit permissions to reading repo contents
  * workflows: bump linter version
  * go.mod: revendor
  * Drop EOL Go versions
  * internal/distro: drop DiskByIDDir
  * providers/azure: add support for azure gen2 VMs [bsc#1196679]
  * stages/mount: correctly relabel the root of a fresh ext4 filesystem
  * exec: fix permissions for mountpoints in home dirs
  * tests: drop os.ModeDir requirement in mode of output directories
  * examples: reboot with --force
  * exec/util: add blkid API to query block devices based on FSTYPE
  * stages/files: use IntToPtr() in createCrypttabEntries()
  * stages/files: write result report to /var/lib/ignition
  * engine: persist fetched config summaries in State
  * stages/disks: use State to persist keyfiles for files stage
  * *: add general mechanism for persisting state between stages
  * main: drop -clear-cache flag
  * engine: don't hardcode neednet path
  * fetch-offline: return ErrNeedNet if we need net
  * engine: switch Engine.logReport() to pointer receiver
  * engine: fix incorrect error in log message
  * dracut: drop ignition-setup-user.service
  * dracut: drop reference to ignition-setup-base.service
  * providers/gcp: access GCP metadata service by IP address
  * Remove ignition-firstboot-complete.service
  * OWNERS: remove
  * internal/exec/util: drop device argument from cResultToErr()
  * docs/config*: document storage.luks.clevis.threshold default
  * ci: disable spec bump external test workaround
  * docs: Add Ignition release / Spec version table
  * templates: update example releng signing ticket
  * templates: don't update %gotest lines
  * Provide ignition-firstboot-complete.service (removed by upstream
  due to correctly being considered distro spcific), based on the
  old upstream version; removed all non-SUSE specific stuff and
  integrated our own changes
  * Removed change-ignition-firstboot-path.conf (changes are
  integrated into ignition-firstboot-complete.service now).
  * Provide ignition-setup-user.service  (removed by upstream due
  to correctly being considered distro spcific), based on the old
  upstream version.
  * Renamed ignition-setup-user-suse.sh to ignition-setup-user.sh
  * Adapted ignition-generator-suse and module-setup.sh to use the
  custom ignition-setup-user.service (no overriding of parts of the
  service file necessary any more).
  * Synced ignition-kargs-helper script with upstream example
  * Raising minimum Go version to 1.15 as required by upstream</changelog>
  <changelog author="iforster@suse.com" date="1628769600">- is-live-image doesn't exist on *SUSE, and our live images don't
  use Ignition, so just add the Ignition device dependency to the
  service file directly.</changelog>
  <changelog author="iforster@suse.com" date="1629720000">- Make sure to create /boot/writable (may not be present in some
  images)</changelog>
  <changelog author="iforster@suse.com" date="1638360000">- Update to version 2.13.0:
  * news: add notes for 2.13.0
  * config/v3_4_exp: noProxy entries cannot be null
  * config/v3_4_exp: mark ignition.version as required
  * docs/supported-platforms: add some description about Nutanix
  * providers/nutanix: add Nutanix platform
  * tests: use umountPath as a thin wrapper around umountPartition
  * internal/providers: refactor handling of unmounting the mount path
  * tests: address gostatic-check warning
  * tests: Add base64 decoding test
  * Dockerfile.validate: build with Fedora 35
  * go.mod: update dataurl to 1.0.0
  * ci: give blackbox tests two hours to run
  * tests/filesystem: fix umountPartition retry loop
  * templates: skip vendoring the new version in favor of dependabot
  * go.mod: update vcontext
  * providers/virtualbox: read config from /Ignition/Config guest property
  * stages/filesystems: use mkfs.fat instead of mkfs.vfat
  * docs/supported-platforms: switch to Afterburn docs URL
  * docs/supported-platforms: drop reference to platform-specific agents
  * test: ensure all platforms are documented
  * docs/supported-platforms: add missing platforms
  * stages/files: rename `relabelDirsForFile` and add docstring
  * stages/files: make variable name follow Go convention
  * docs/supported-platforms: update platform names and URLs
  * docs/supported-platforms: sort by platform ID
  * docs/supported-platforms: add platform IDs
  * docs: Remove default layout from front matter
  * docs: Do not convert -- &amp; --- to en/em-dash
  * internal/*: change the location of Ignition report
  * internal/exec/util: rename FindFirstMissingDirForFile and tweak docs
  * providers/qemu: start reporting progress reading fw_cfg after 10 s
  * providers/qemu: optimize fw_cfg read size
  * ci: use coreos-ci-lib helper for kola testiso
  * *: gofmt 1.17
  * workflows: bump Go and golangci-lint
  * config: update versions in comments
- Removed obsolete ignition-rpmlintrc</changelog>
  <changelog author="fvogt@suse.com" date="1646395200">- Add support for NetworkManager in dracut:
  * ignition-enable-network.service, ignition-enable-network.sh</changelog>
  <changelog author="fvogt@suse.com" date="1646395201">- Remove /var/lib/YaST2/reconfig_system if a config was provided:
  * ignition-remove-reconfig_system.service</changelog>
  <changelog author="iforster@suse.com" date="1648209600">- Add ignition-touch-selinux-autorelabel.conf:
  Trigger SELinux autorelabel after Ignition runs; Ignition would
  support SELinux itself, however this is a compile time option, so
  it can't be used here.
- Filter commented lines in ignition-mount-initrd-fstab.service</changelog>
  <changelog author="iforster@suse.com" date="1649073600">- Don't include non-MarkDown files in documentation</changelog>
  <changelog author="iforster@suse.com" date="1649160000">- ignition-mount-initrd-fstab.service:
  - Don't ignore errors in loops
  - Unmount mount points recursively - a new submount may have
    appeared
  - Split umount part into own service file:
- ignition-umount-initrd-fstab.service:
  - Unmounts the additional mounts as soon as they are not
    required for Ignition any more; the ExecStop operation is
    running quite late in initrd and may unmount essential mount
    points flagged with "x-initrd.mount" (e.g. when storing /usr on
    a separate mount point). In theory this will also affect
    Ignition itself, but it hasn't been reported as a problem so
    far.</changelog>
  <changelog author="iforster@suse.com" date="1649419200">- Use /bin/sh instead of /usr/bin/sh (for backwards compatibility
  with SLE Micro 5.1) [bsc#1196679]</changelog>
  <changelog author="iforster@suse.com" date="1652875200">- Update to version 2.14.0:
  * NEWS: update v2.14.0
  * docs/operator-notes: add section on provisioning secrets
  * Dockerfile.validate: build with Fedora 36
  * internal/resource: fix gs:// fetches in GCE without a service account
  * docs/operator-notes: document supported S3 URL formats
  * internal/resource: fix S3 access point object ARNs
  * exec/util: fix infinite loop in Depth() if -root is relative
  * Add ignition-delete-config.service and ignition-rmcfg symlink
  * providers/virtualbox: support deleting Ignition configs
  * providers/virtualbox: add comment referencing VirtualBox source
  * providers/virtualbox: add define for GUEST_PROP_FN_GET_PROP
  * providers/virtualbox: add helper to set up hypervisor connection
  * providers/vmware: support deleting Ignition configs
  * main: add ignition-rmcfg multicall binary
  * go.mod: add github.com/beevik/etree
  * providers/vmware: switch to internal copy of OVF parser
  * internal/resource: fix bucket field in error message
  * internal/resource: derive AWS region hint from ARN partition field
  * internal/resource: simplify test
  * internal/resource: fix minor nits
  * provider/azure: try to fetch userdata from IMDS
  * providers/vmware: convert OVF tests to testify
  * providers/vmware: drop vmw-ovflib docs
  * providers/vmware: add verbatim copy of vmw-ovflib
  * providers/vmware: add constants for guestinfo and OVF property names
  * providers/virtualbox: fix reading properties with flags
  * internal/resource: support S3 access point URLs
- Update fixes CVE from [bsc#1199524]; this introduces a new
  service "ignition-delete-config.service"
- Add ignition-rmcfg-suse.conf dropin to adapt to SUSE environment
- Use fixed paths in spec file for hardcoded installation paths</changelog>
  <changelog author="fvogt@suse.com" date="1659441600">- ignition-enable-network.sh: Use /lib/dracut/hooks directly
  instead of the usr-merged location which isn't available everywhere
  (bsc#1201957)</changelog>
  <changelog author="iforster@suse.com" date="1677499200">- Update to version 2.15.0:
  * Features
  * Support offline Tang provisioning via pre-shared advertisement (3.4.0)
  * Allow enabling discard passthrough on LUKS devices (3.4.0)
  * Allow specifying arbitrary LUKS open options (3.4.0)
  * Ship aarch64 macOS ignition-validate binary in GitHub release artifacts
  * Changes
  * Mark the 3.4.0 config spec as stable
  * No longer accept configs with version 3.4.0-experimental
  * Create new 3.5.0-experimental config spec from 3.4.0
  * Fail if files/links/dirs conflict with systemd units or dropins
  * Warn if template for enabled systemd instance unit has no Install section
  * Warn if filesystem overwrites partitioned disk
  * Warn if wipeTable overwrites a filesystem that would otherwise be reused
  * Warn if user/group specified for hard link
  * Install ignition-apply in /usr/libexec
  * Allow distros to add Ignition command-line arguments from a unit drop-in
  * Convert NEWS to Markdown and move to docs site
  * Require Go 1.18+
  * Bug fixes
  * Don't overwrite LUKS1 volume when storage.luks.wipeVolume is false
  * Request network when custom Clevis config has needsNetwork set
  * Fix creating LUKS volume with custom Clevis config that uses TPM2
  * Avoid logging spurious error when a LUKS volume wasn't previously formatted
  * Fix version string in ignition-validate release container
  * Fix reproducibility of systemd preset file in ignition-apply output
  * Document that user/group fields aren't applied to hard links
  * Clarify spec docs for files/directories/links group fields
- Modified 0002-allow-multiple-mounts-of-same-device.patch to add
  new Ignition spec version
- Add 0001-ignore-missing-qemu-blockdev.patch [bsc#1207679] to
  support booting without configuration device on s390x.
- Move all /usr/libexec contents to %sbindir</changelog>
  <changelog author="iforster@suse.com" date="1678363200">- Add `dasd_mod.dasd=autodetect` to kernel command line parameters
  (for Ignition device support on S/390) [boo#1207903]</changelog>
  <changelog author="iforster@suse.com" date="1702900800">- Update to version 2.17.0:
  * Features
  * providers/hetzner: add support for Hetzner Cloud
  * providers/applehv: Add Apple Hypervisor
  * packit: add initial support
  * Other notable Changes
  * Add vsock modules into ramdisk
  * stages/disks: retry `sgdisk --zap-all` invocation
  * Add optionally-installed grub2 code
  * internal/exec/stages/disks: prevent races with udev
- Updates from version 2.16.x [jsc#SMO-314] [bsc#1217533]:
  * Features
  * Add support for Hyper-V platform
  * Other notable changes
  * dracut: make hv_utils module optional
  * internal/exec: don't relabel a mountpoint that already exists
  * internal/exec/util: check if unit exists before disabling
  * platform: allow provider fetch to save files to write from files stage
  * providers: rename noop to metal
  * platform: drop function pointer indirection for fetch method
  * providers: add Config wrapper structs for cmdline and system providers
- Fix segmentation fault if filesystem section of Ignition JSON
  doesn't contain path entry in
  0002-allow-multiple-mounts-of-same-device.patch
- Add 0003-Move-the-GPT-header-on-resized-disks.patch
- Increased required Go version</changelog>
</package>
<package pkgid="3aefb91391996570d6ed18542250f7e4ffcb553cf944286646c0b57bfab8f9cb" name="ignition-dracut-grub2" arch="aarch64">
  <version epoch="0" ver="2.17.0" rel="150500.3.3.1"/>
  <changelog author="iforster@suse.com" date="1625659200">- Implement missing ignition-kargs-helper script for kernel
  argument support</changelog>
  <changelog author="iforster@suse.com" date="1625659201">- Update to version 2.11.0:
  * news: add notes for 2.11.0
  * Upgraded docs
  * config/*: return report from previous parser when chaining
  * config/*: re-order testcases by version
  * tree: update for stable v3.3.0 and new v3.4.0-experimental
  * config/v3_4_experimental: adapt for experimental
  * config/v3_4_experimental: copy from config/v3_3
  * config/v3_3: adapt for stabilization
  * config/v3_3_experimental: rename to config/v3_3
  * config/v3_3_exp: pointerify ClevisCustom Config and Pin
  * config/v3_3_exp: pointerify Raid.Level
  * config/v3_3_exp: pointerify LinkEmbedded1.Target
  * stages/disks: simplify a check
  * config/v3_1/translate: don't point to field from input struct
  * config/v3_3_exp: drop devices from schema "required" field
  * config/*: validate that storage.raid.devices is non-empty
  * config/*/types: add RAID validation tests
  * config/shared/errors: fix ErrSparesUnsupportedForLevel message
  * config: fix comment
  * *: formally bump Go to 1.13
  * platform: add powervs platform
  * internal/providers/*stack: drop dead timeout code
  * stages/disks: improve error reporting for LUKS device reuse
  * ignition-setup-user.service: drop Before=multipathd.service
  * Dockerfile: build ignition-validate container using Fedora
  * workflows: test on Go 1.16
  * tests/*: verify deletion of block device w/o creating a FS
  * *: allow erasing block device without creating a filesystem
  * *: rename other projects' master branches to main
  * *: rename master branch to main
  * config/*: add export functions for parsing any config version &lt; N
  * config/*: refactor config.go's Parse() to use GetConfigVersion
  * config/* : minor cleanup
- Refreshed to match new Ignition spec
  * 0002-allow-multiple-mounts-of-same-device.patch</changelog>
  <changelog author="iforster@suse.com" date="1625745600">- If a Combustion device was mounted, then unmount it in
  ignition-kargs-helper - the replacement script will be put on
  the same location</changelog>
  <changelog author="iforster@suse.com" date="1626868800">- Ignore error return code if no virtualization environment
  detected. [bsc#1188479]
  This makes it possible to use Ignition also on bare metal (e.g.
  when dumping images directly to disk) without adding a
  ignition.platform.id parameter.</changelog>
  <changelog author="kukuk@suse.com" date="1627473600">- Include vfat and nls kernel modules into initrd so that we can
  read the ignition configuration from USB drives [bsc#1184202]</changelog>
  <changelog author="iforster@suse.com" date="1628510400">- Update to version 2.12.0:
  * news: add notes for 2.12.0
  * stages/files: add previousReport to result report
  * tests: fix linter warning
  * workflows: limit permissions to reading repo contents
  * workflows: bump linter version
  * go.mod: revendor
  * Drop EOL Go versions
  * internal/distro: drop DiskByIDDir
  * providers/azure: add support for azure gen2 VMs [bsc#1196679]
  * stages/mount: correctly relabel the root of a fresh ext4 filesystem
  * exec: fix permissions for mountpoints in home dirs
  * tests: drop os.ModeDir requirement in mode of output directories
  * examples: reboot with --force
  * exec/util: add blkid API to query block devices based on FSTYPE
  * stages/files: use IntToPtr() in createCrypttabEntries()
  * stages/files: write result report to /var/lib/ignition
  * engine: persist fetched config summaries in State
  * stages/disks: use State to persist keyfiles for files stage
  * *: add general mechanism for persisting state between stages
  * main: drop -clear-cache flag
  * engine: don't hardcode neednet path
  * fetch-offline: return ErrNeedNet if we need net
  * engine: switch Engine.logReport() to pointer receiver
  * engine: fix incorrect error in log message
  * dracut: drop ignition-setup-user.service
  * dracut: drop reference to ignition-setup-base.service
  * providers/gcp: access GCP metadata service by IP address
  * Remove ignition-firstboot-complete.service
  * OWNERS: remove
  * internal/exec/util: drop device argument from cResultToErr()
  * docs/config*: document storage.luks.clevis.threshold default
  * ci: disable spec bump external test workaround
  * docs: Add Ignition release / Spec version table
  * templates: update example releng signing ticket
  * templates: don't update %gotest lines
  * Provide ignition-firstboot-complete.service (removed by upstream
  due to correctly being considered distro spcific), based on the
  old upstream version; removed all non-SUSE specific stuff and
  integrated our own changes
  * Removed change-ignition-firstboot-path.conf (changes are
  integrated into ignition-firstboot-complete.service now).
  * Provide ignition-setup-user.service  (removed by upstream due
  to correctly being considered distro spcific), based on the old
  upstream version.
  * Renamed ignition-setup-user-suse.sh to ignition-setup-user.sh
  * Adapted ignition-generator-suse and module-setup.sh to use the
  custom ignition-setup-user.service (no overriding of parts of the
  service file necessary any more).
  * Synced ignition-kargs-helper script with upstream example
  * Raising minimum Go version to 1.15 as required by upstream</changelog>
  <changelog author="iforster@suse.com" date="1628769600">- is-live-image doesn't exist on *SUSE, and our live images don't
  use Ignition, so just add the Ignition device dependency to the
  service file directly.</changelog>
  <changelog author="iforster@suse.com" date="1629720000">- Make sure to create /boot/writable (may not be present in some
  images)</changelog>
  <changelog author="iforster@suse.com" date="1638360000">- Update to version 2.13.0:
  * news: add notes for 2.13.0
  * config/v3_4_exp: noProxy entries cannot be null
  * config/v3_4_exp: mark ignition.version as required
  * docs/supported-platforms: add some description about Nutanix
  * providers/nutanix: add Nutanix platform
  * tests: use umountPath as a thin wrapper around umountPartition
  * internal/providers: refactor handling of unmounting the mount path
  * tests: address gostatic-check warning
  * tests: Add base64 decoding test
  * Dockerfile.validate: build with Fedora 35
  * go.mod: update dataurl to 1.0.0
  * ci: give blackbox tests two hours to run
  * tests/filesystem: fix umountPartition retry loop
  * templates: skip vendoring the new version in favor of dependabot
  * go.mod: update vcontext
  * providers/virtualbox: read config from /Ignition/Config guest property
  * stages/filesystems: use mkfs.fat instead of mkfs.vfat
  * docs/supported-platforms: switch to Afterburn docs URL
  * docs/supported-platforms: drop reference to platform-specific agents
  * test: ensure all platforms are documented
  * docs/supported-platforms: add missing platforms
  * stages/files: rename `relabelDirsForFile` and add docstring
  * stages/files: make variable name follow Go convention
  * docs/supported-platforms: update platform names and URLs
  * docs/supported-platforms: sort by platform ID
  * docs/supported-platforms: add platform IDs
  * docs: Remove default layout from front matter
  * docs: Do not convert -- &amp; --- to en/em-dash
  * internal/*: change the location of Ignition report
  * internal/exec/util: rename FindFirstMissingDirForFile and tweak docs
  * providers/qemu: start reporting progress reading fw_cfg after 10 s
  * providers/qemu: optimize fw_cfg read size
  * ci: use coreos-ci-lib helper for kola testiso
  * *: gofmt 1.17
  * workflows: bump Go and golangci-lint
  * config: update versions in comments
- Removed obsolete ignition-rpmlintrc</changelog>
  <changelog author="fvogt@suse.com" date="1646395200">- Add support for NetworkManager in dracut:
  * ignition-enable-network.service, ignition-enable-network.sh</changelog>
  <changelog author="fvogt@suse.com" date="1646395201">- Remove /var/lib/YaST2/reconfig_system if a config was provided:
  * ignition-remove-reconfig_system.service</changelog>
  <changelog author="iforster@suse.com" date="1648209600">- Add ignition-touch-selinux-autorelabel.conf:
  Trigger SELinux autorelabel after Ignition runs; Ignition would
  support SELinux itself, however this is a compile time option, so
  it can't be used here.
- Filter commented lines in ignition-mount-initrd-fstab.service</changelog>
  <changelog author="iforster@suse.com" date="1649073600">- Don't include non-MarkDown files in documentation</changelog>
  <changelog author="iforster@suse.com" date="1649160000">- ignition-mount-initrd-fstab.service:
  - Don't ignore errors in loops
  - Unmount mount points recursively - a new submount may have
    appeared
  - Split umount part into own service file:
- ignition-umount-initrd-fstab.service:
  - Unmounts the additional mounts as soon as they are not
    required for Ignition any more; the ExecStop operation is
    running quite late in initrd and may unmount essential mount
    points flagged with "x-initrd.mount" (e.g. when storing /usr on
    a separate mount point). In theory this will also affect
    Ignition itself, but it hasn't been reported as a problem so
    far.</changelog>
  <changelog author="iforster@suse.com" date="1649419200">- Use /bin/sh instead of /usr/bin/sh (for backwards compatibility
  with SLE Micro 5.1) [bsc#1196679]</changelog>
  <changelog author="iforster@suse.com" date="1652875200">- Update to version 2.14.0:
  * NEWS: update v2.14.0
  * docs/operator-notes: add section on provisioning secrets
  * Dockerfile.validate: build with Fedora 36
  * internal/resource: fix gs:// fetches in GCE without a service account
  * docs/operator-notes: document supported S3 URL formats
  * internal/resource: fix S3 access point object ARNs
  * exec/util: fix infinite loop in Depth() if -root is relative
  * Add ignition-delete-config.service and ignition-rmcfg symlink
  * providers/virtualbox: support deleting Ignition configs
  * providers/virtualbox: add comment referencing VirtualBox source
  * providers/virtualbox: add define for GUEST_PROP_FN_GET_PROP
  * providers/virtualbox: add helper to set up hypervisor connection
  * providers/vmware: support deleting Ignition configs
  * main: add ignition-rmcfg multicall binary
  * go.mod: add github.com/beevik/etree
  * providers/vmware: switch to internal copy of OVF parser
  * internal/resource: fix bucket field in error message
  * internal/resource: derive AWS region hint from ARN partition field
  * internal/resource: simplify test
  * internal/resource: fix minor nits
  * provider/azure: try to fetch userdata from IMDS
  * providers/vmware: convert OVF tests to testify
  * providers/vmware: drop vmw-ovflib docs
  * providers/vmware: add verbatim copy of vmw-ovflib
  * providers/vmware: add constants for guestinfo and OVF property names
  * providers/virtualbox: fix reading properties with flags
  * internal/resource: support S3 access point URLs
- Update fixes CVE from [bsc#1199524]; this introduces a new
  service "ignition-delete-config.service"
- Add ignition-rmcfg-suse.conf dropin to adapt to SUSE environment
- Use fixed paths in spec file for hardcoded installation paths</changelog>
  <changelog author="fvogt@suse.com" date="1659441600">- ignition-enable-network.sh: Use /lib/dracut/hooks directly
  instead of the usr-merged location which isn't available everywhere
  (bsc#1201957)</changelog>
  <changelog author="iforster@suse.com" date="1677499200">- Update to version 2.15.0:
  * Features
  * Support offline Tang provisioning via pre-shared advertisement (3.4.0)
  * Allow enabling discard passthrough on LUKS devices (3.4.0)
  * Allow specifying arbitrary LUKS open options (3.4.0)
  * Ship aarch64 macOS ignition-validate binary in GitHub release artifacts
  * Changes
  * Mark the 3.4.0 config spec as stable
  * No longer accept configs with version 3.4.0-experimental
  * Create new 3.5.0-experimental config spec from 3.4.0
  * Fail if files/links/dirs conflict with systemd units or dropins
  * Warn if template for enabled systemd instance unit has no Install section
  * Warn if filesystem overwrites partitioned disk
  * Warn if wipeTable overwrites a filesystem that would otherwise be reused
  * Warn if user/group specified for hard link
  * Install ignition-apply in /usr/libexec
  * Allow distros to add Ignition command-line arguments from a unit drop-in
  * Convert NEWS to Markdown and move to docs site
  * Require Go 1.18+
  * Bug fixes
  * Don't overwrite LUKS1 volume when storage.luks.wipeVolume is false
  * Request network when custom Clevis config has needsNetwork set
  * Fix creating LUKS volume with custom Clevis config that uses TPM2
  * Avoid logging spurious error when a LUKS volume wasn't previously formatted
  * Fix version string in ignition-validate release container
  * Fix reproducibility of systemd preset file in ignition-apply output
  * Document that user/group fields aren't applied to hard links
  * Clarify spec docs for files/directories/links group fields
- Modified 0002-allow-multiple-mounts-of-same-device.patch to add
  new Ignition spec version
- Add 0001-ignore-missing-qemu-blockdev.patch [bsc#1207679] to
  support booting without configuration device on s390x.
- Move all /usr/libexec contents to %sbindir</changelog>
  <changelog author="iforster@suse.com" date="1678363200">- Add `dasd_mod.dasd=autodetect` to kernel command line parameters
  (for Ignition device support on S/390) [boo#1207903]</changelog>
  <changelog author="iforster@suse.com" date="1702900800">- Update to version 2.17.0:
  * Features
  * providers/hetzner: add support for Hetzner Cloud
  * providers/applehv: Add Apple Hypervisor
  * packit: add initial support
  * Other notable Changes
  * Add vsock modules into ramdisk
  * stages/disks: retry `sgdisk --zap-all` invocation
  * Add optionally-installed grub2 code
  * internal/exec/stages/disks: prevent races with udev
- Updates from version 2.16.x [jsc#SMO-314] [bsc#1217533]:
  * Features
  * Add support for Hyper-V platform
  * Other notable changes
  * dracut: make hv_utils module optional
  * internal/exec: don't relabel a mountpoint that already exists
  * internal/exec/util: check if unit exists before disabling
  * platform: allow provider fetch to save files to write from files stage
  * providers: rename noop to metal
  * platform: drop function pointer indirection for fetch method
  * providers: add Config wrapper structs for cmdline and system providers
- Fix segmentation fault if filesystem section of Ignition JSON
  doesn't contain path entry in
  0002-allow-multiple-mounts-of-same-device.patch
- Add 0003-Move-the-GPT-header-on-resized-disks.patch
- Increased required Go version</changelog>
</package>
<package pkgid="656f9e8e3fb62db95bce85ac313ec54223805183bcf350a6bf2957915c46afe6" name="ignition-dracut-grub2" arch="s390x">
  <version epoch="0" ver="2.17.0" rel="150500.3.3.1"/>
  <changelog author="iforster@suse.com" date="1625659200">- Implement missing ignition-kargs-helper script for kernel
  argument support</changelog>
  <changelog author="iforster@suse.com" date="1625659201">- Update to version 2.11.0:
  * news: add notes for 2.11.0
  * Upgraded docs
  * config/*: return report from previous parser when chaining
  * config/*: re-order testcases by version
  * tree: update for stable v3.3.0 and new v3.4.0-experimental
  * config/v3_4_experimental: adapt for experimental
  * config/v3_4_experimental: copy from config/v3_3
  * config/v3_3: adapt for stabilization
  * config/v3_3_experimental: rename to config/v3_3
  * config/v3_3_exp: pointerify ClevisCustom Config and Pin
  * config/v3_3_exp: pointerify Raid.Level
  * config/v3_3_exp: pointerify LinkEmbedded1.Target
  * stages/disks: simplify a check
  * config/v3_1/translate: don't point to field from input struct
  * config/v3_3_exp: drop devices from schema "required" field
  * config/*: validate that storage.raid.devices is non-empty
  * config/*/types: add RAID validation tests
  * config/shared/errors: fix ErrSparesUnsupportedForLevel message
  * config: fix comment
  * *: formally bump Go to 1.13
  * platform: add powervs platform
  * internal/providers/*stack: drop dead timeout code
  * stages/disks: improve error reporting for LUKS device reuse
  * ignition-setup-user.service: drop Before=multipathd.service
  * Dockerfile: build ignition-validate container using Fedora
  * workflows: test on Go 1.16
  * tests/*: verify deletion of block device w/o creating a FS
  * *: allow erasing block device without creating a filesystem
  * *: rename other projects' master branches to main
  * *: rename master branch to main
  * config/*: add export functions for parsing any config version &lt; N
  * config/*: refactor config.go's Parse() to use GetConfigVersion
  * config/* : minor cleanup
- Refreshed to match new Ignition spec
  * 0002-allow-multiple-mounts-of-same-device.patch</changelog>
  <changelog author="iforster@suse.com" date="1625745600">- If a Combustion device was mounted, then unmount it in
  ignition-kargs-helper - the replacement script will be put on
  the same location</changelog>
  <changelog author="iforster@suse.com" date="1626868800">- Ignore error return code if no virtualization environment
  detected. [bsc#1188479]
  This makes it possible to use Ignition also on bare metal (e.g.
  when dumping images directly to disk) without adding a
  ignition.platform.id parameter.</changelog>
  <changelog author="kukuk@suse.com" date="1627473600">- Include vfat and nls kernel modules into initrd so that we can
  read the ignition configuration from USB drives [bsc#1184202]</changelog>
  <changelog author="iforster@suse.com" date="1628510400">- Update to version 2.12.0:
  * news: add notes for 2.12.0
  * stages/files: add previousReport to result report
  * tests: fix linter warning
  * workflows: limit permissions to reading repo contents
  * workflows: bump linter version
  * go.mod: revendor
  * Drop EOL Go versions
  * internal/distro: drop DiskByIDDir
  * providers/azure: add support for azure gen2 VMs [bsc#1196679]
  * stages/mount: correctly relabel the root of a fresh ext4 filesystem
  * exec: fix permissions for mountpoints in home dirs
  * tests: drop os.ModeDir requirement in mode of output directories
  * examples: reboot with --force
  * exec/util: add blkid API to query block devices based on FSTYPE
  * stages/files: use IntToPtr() in createCrypttabEntries()
  * stages/files: write result report to /var/lib/ignition
  * engine: persist fetched config summaries in State
  * stages/disks: use State to persist keyfiles for files stage
  * *: add general mechanism for persisting state between stages
  * main: drop -clear-cache flag
  * engine: don't hardcode neednet path
  * fetch-offline: return ErrNeedNet if we need net
  * engine: switch Engine.logReport() to pointer receiver
  * engine: fix incorrect error in log message
  * dracut: drop ignition-setup-user.service
  * dracut: drop reference to ignition-setup-base.service
  * providers/gcp: access GCP metadata service by IP address
  * Remove ignition-firstboot-complete.service
  * OWNERS: remove
  * internal/exec/util: drop device argument from cResultToErr()
  * docs/config*: document storage.luks.clevis.threshold default
  * ci: disable spec bump external test workaround
  * docs: Add Ignition release / Spec version table
  * templates: update example releng signing ticket
  * templates: don't update %gotest lines
  * Provide ignition-firstboot-complete.service (removed by upstream
  due to correctly being considered distro spcific), based on the
  old upstream version; removed all non-SUSE specific stuff and
  integrated our own changes
  * Removed change-ignition-firstboot-path.conf (changes are
  integrated into ignition-firstboot-complete.service now).
  * Provide ignition-setup-user.service  (removed by upstream due
  to correctly being considered distro spcific), based on the old
  upstream version.
  * Renamed ignition-setup-user-suse.sh to ignition-setup-user.sh
  * Adapted ignition-generator-suse and module-setup.sh to use the
  custom ignition-setup-user.service (no overriding of parts of the
  service file necessary any more).
  * Synced ignition-kargs-helper script with upstream example
  * Raising minimum Go version to 1.15 as required by upstream</changelog>
  <changelog author="iforster@suse.com" date="1628769600">- is-live-image doesn't exist on *SUSE, and our live images don't
  use Ignition, so just add the Ignition device dependency to the
  service file directly.</changelog>
  <changelog author="iforster@suse.com" date="1629720000">- Make sure to create /boot/writable (may not be present in some
  images)</changelog>
  <changelog author="iforster@suse.com" date="1638360000">- Update to version 2.13.0:
  * news: add notes for 2.13.0
  * config/v3_4_exp: noProxy entries cannot be null
  * config/v3_4_exp: mark ignition.version as required
  * docs/supported-platforms: add some description about Nutanix
  * providers/nutanix: add Nutanix platform
  * tests: use umountPath as a thin wrapper around umountPartition
  * internal/providers: refactor handling of unmounting the mount path
  * tests: address gostatic-check warning
  * tests: Add base64 decoding test
  * Dockerfile.validate: build with Fedora 35
  * go.mod: update dataurl to 1.0.0
  * ci: give blackbox tests two hours to run
  * tests/filesystem: fix umountPartition retry loop
  * templates: skip vendoring the new version in favor of dependabot
  * go.mod: update vcontext
  * providers/virtualbox: read config from /Ignition/Config guest property
  * stages/filesystems: use mkfs.fat instead of mkfs.vfat
  * docs/supported-platforms: switch to Afterburn docs URL
  * docs/supported-platforms: drop reference to platform-specific agents
  * test: ensure all platforms are documented
  * docs/supported-platforms: add missing platforms
  * stages/files: rename `relabelDirsForFile` and add docstring
  * stages/files: make variable name follow Go convention
  * docs/supported-platforms: update platform names and URLs
  * docs/supported-platforms: sort by platform ID
  * docs/supported-platforms: add platform IDs
  * docs: Remove default layout from front matter
  * docs: Do not convert -- &amp; --- to en/em-dash
  * internal/*: change the location of Ignition report
  * internal/exec/util: rename FindFirstMissingDirForFile and tweak docs
  * providers/qemu: start reporting progress reading fw_cfg after 10 s
  * providers/qemu: optimize fw_cfg read size
  * ci: use coreos-ci-lib helper for kola testiso
  * *: gofmt 1.17
  * workflows: bump Go and golangci-lint
  * config: update versions in comments
- Removed obsolete ignition-rpmlintrc</changelog>
  <changelog author="fvogt@suse.com" date="1646395200">- Add support for NetworkManager in dracut:
  * ignition-enable-network.service, ignition-enable-network.sh</changelog>
  <changelog author="fvogt@suse.com" date="1646395201">- Remove /var/lib/YaST2/reconfig_system if a config was provided:
  * ignition-remove-reconfig_system.service</changelog>
  <changelog author="iforster@suse.com" date="1648209600">- Add ignition-touch-selinux-autorelabel.conf:
  Trigger SELinux autorelabel after Ignition runs; Ignition would
  support SELinux itself, however this is a compile time option, so
  it can't be used here.
- Filter commented lines in ignition-mount-initrd-fstab.service</changelog>
  <changelog author="iforster@suse.com" date="1649073600">- Don't include non-MarkDown files in documentation</changelog>
  <changelog author="iforster@suse.com" date="1649160000">- ignition-mount-initrd-fstab.service:
  - Don't ignore errors in loops
  - Unmount mount points recursively - a new submount may have
    appeared
  - Split umount part into own service file:
- ignition-umount-initrd-fstab.service:
  - Unmounts the additional mounts as soon as they are not
    required for Ignition any more; the ExecStop operation is
    running quite late in initrd and may unmount essential mount
    points flagged with "x-initrd.mount" (e.g. when storing /usr on
    a separate mount point). In theory this will also affect
    Ignition itself, but it hasn't been reported as a problem so
    far.</changelog>
  <changelog author="iforster@suse.com" date="1649419200">- Use /bin/sh instead of /usr/bin/sh (for backwards compatibility
  with SLE Micro 5.1) [bsc#1196679]</changelog>
  <changelog author="iforster@suse.com" date="1652875200">- Update to version 2.14.0:
  * NEWS: update v2.14.0
  * docs/operator-notes: add section on provisioning secrets
  * Dockerfile.validate: build with Fedora 36
  * internal/resource: fix gs:// fetches in GCE without a service account
  * docs/operator-notes: document supported S3 URL formats
  * internal/resource: fix S3 access point object ARNs
  * exec/util: fix infinite loop in Depth() if -root is relative
  * Add ignition-delete-config.service and ignition-rmcfg symlink
  * providers/virtualbox: support deleting Ignition configs
  * providers/virtualbox: add comment referencing VirtualBox source
  * providers/virtualbox: add define for GUEST_PROP_FN_GET_PROP
  * providers/virtualbox: add helper to set up hypervisor connection
  * providers/vmware: support deleting Ignition configs
  * main: add ignition-rmcfg multicall binary
  * go.mod: add github.com/beevik/etree
  * providers/vmware: switch to internal copy of OVF parser
  * internal/resource: fix bucket field in error message
  * internal/resource: derive AWS region hint from ARN partition field
  * internal/resource: simplify test
  * internal/resource: fix minor nits
  * provider/azure: try to fetch userdata from IMDS
  * providers/vmware: convert OVF tests to testify
  * providers/vmware: drop vmw-ovflib docs
  * providers/vmware: add verbatim copy of vmw-ovflib
  * providers/vmware: add constants for guestinfo and OVF property names
  * providers/virtualbox: fix reading properties with flags
  * internal/resource: support S3 access point URLs
- Update fixes CVE from [bsc#1199524]; this introduces a new
  service "ignition-delete-config.service"
- Add ignition-rmcfg-suse.conf dropin to adapt to SUSE environment
- Use fixed paths in spec file for hardcoded installation paths</changelog>
  <changelog author="fvogt@suse.com" date="1659441600">- ignition-enable-network.sh: Use /lib/dracut/hooks directly
  instead of the usr-merged location which isn't available everywhere
  (bsc#1201957)</changelog>
  <changelog author="iforster@suse.com" date="1677499200">- Update to version 2.15.0:
  * Features
  * Support offline Tang provisioning via pre-shared advertisement (3.4.0)
  * Allow enabling discard passthrough on LUKS devices (3.4.0)
  * Allow specifying arbitrary LUKS open options (3.4.0)
  * Ship aarch64 macOS ignition-validate binary in GitHub release artifacts
  * Changes
  * Mark the 3.4.0 config spec as stable
  * No longer accept configs with version 3.4.0-experimental
  * Create new 3.5.0-experimental config spec from 3.4.0
  * Fail if files/links/dirs conflict with systemd units or dropins
  * Warn if template for enabled systemd instance unit has no Install section
  * Warn if filesystem overwrites partitioned disk
  * Warn if wipeTable overwrites a filesystem that would otherwise be reused
  * Warn if user/group specified for hard link
  * Install ignition-apply in /usr/libexec
  * Allow distros to add Ignition command-line arguments from a unit drop-in
  * Convert NEWS to Markdown and move to docs site
  * Require Go 1.18+
  * Bug fixes
  * Don't overwrite LUKS1 volume when storage.luks.wipeVolume is false
  * Request network when custom Clevis config has needsNetwork set
  * Fix creating LUKS volume with custom Clevis config that uses TPM2
  * Avoid logging spurious error when a LUKS volume wasn't previously formatted
  * Fix version string in ignition-validate release container
  * Fix reproducibility of systemd preset file in ignition-apply output
  * Document that user/group fields aren't applied to hard links
  * Clarify spec docs for files/directories/links group fields
- Modified 0002-allow-multiple-mounts-of-same-device.patch to add
  new Ignition spec version
- Add 0001-ignore-missing-qemu-blockdev.patch [bsc#1207679] to
  support booting without configuration device on s390x.
- Move all /usr/libexec contents to %sbindir</changelog>
  <changelog author="iforster@suse.com" date="1678363200">- Add `dasd_mod.dasd=autodetect` to kernel command line parameters
  (for Ignition device support on S/390) [boo#1207903]</changelog>
  <changelog author="iforster@suse.com" date="1702900800">- Update to version 2.17.0:
  * Features
  * providers/hetzner: add support for Hetzner Cloud
  * providers/applehv: Add Apple Hypervisor
  * packit: add initial support
  * Other notable Changes
  * Add vsock modules into ramdisk
  * stages/disks: retry `sgdisk --zap-all` invocation
  * Add optionally-installed grub2 code
  * internal/exec/stages/disks: prevent races with udev
- Updates from version 2.16.x [jsc#SMO-314] [bsc#1217533]:
  * Features
  * Add support for Hyper-V platform
  * Other notable changes
  * dracut: make hv_utils module optional
  * internal/exec: don't relabel a mountpoint that already exists
  * internal/exec/util: check if unit exists before disabling
  * platform: allow provider fetch to save files to write from files stage
  * providers: rename noop to metal
  * platform: drop function pointer indirection for fetch method
  * providers: add Config wrapper structs for cmdline and system providers
- Fix segmentation fault if filesystem section of Ignition JSON
  doesn't contain path entry in
  0002-allow-multiple-mounts-of-same-device.patch
- Add 0003-Move-the-GPT-header-on-resized-disks.patch
- Increased required Go version</changelog>
</package>
<package pkgid="4023deaa80aa8ae9a1e902d7d66b4444f11099ba1d59c39397a74609442a62f3" name="ignition-dracut-grub2" arch="x86_64">
  <version epoch="0" ver="2.17.0" rel="150500.3.3.1"/>
  <changelog author="iforster@suse.com" date="1625659200">- Implement missing ignition-kargs-helper script for kernel
  argument support</changelog>
  <changelog author="iforster@suse.com" date="1625659201">- Update to version 2.11.0:
  * news: add notes for 2.11.0
  * Upgraded docs
  * config/*: return report from previous parser when chaining
  * config/*: re-order testcases by version
  * tree: update for stable v3.3.0 and new v3.4.0-experimental
  * config/v3_4_experimental: adapt for experimental
  * config/v3_4_experimental: copy from config/v3_3
  * config/v3_3: adapt for stabilization
  * config/v3_3_experimental: rename to config/v3_3
  * config/v3_3_exp: pointerify ClevisCustom Config and Pin
  * config/v3_3_exp: pointerify Raid.Level
  * config/v3_3_exp: pointerify LinkEmbedded1.Target
  * stages/disks: simplify a check
  * config/v3_1/translate: don't point to field from input struct
  * config/v3_3_exp: drop devices from schema "required" field
  * config/*: validate that storage.raid.devices is non-empty
  * config/*/types: add RAID validation tests
  * config/shared/errors: fix ErrSparesUnsupportedForLevel message
  * config: fix comment
  * *: formally bump Go to 1.13
  * platform: add powervs platform
  * internal/providers/*stack: drop dead timeout code
  * stages/disks: improve error reporting for LUKS device reuse
  * ignition-setup-user.service: drop Before=multipathd.service
  * Dockerfile: build ignition-validate container using Fedora
  * workflows: test on Go 1.16
  * tests/*: verify deletion of block device w/o creating a FS
  * *: allow erasing block device without creating a filesystem
  * *: rename other projects' master branches to main
  * *: rename master branch to main
  * config/*: add export functions for parsing any config version &lt; N
  * config/*: refactor config.go's Parse() to use GetConfigVersion
  * config/* : minor cleanup
- Refreshed to match new Ignition spec
  * 0002-allow-multiple-mounts-of-same-device.patch</changelog>
  <changelog author="iforster@suse.com" date="1625745600">- If a Combustion device was mounted, then unmount it in
  ignition-kargs-helper - the replacement script will be put on
  the same location</changelog>
  <changelog author="iforster@suse.com" date="1626868800">- Ignore error return code if no virtualization environment
  detected. [bsc#1188479]
  This makes it possible to use Ignition also on bare metal (e.g.
  when dumping images directly to disk) without adding a
  ignition.platform.id parameter.</changelog>
  <changelog author="kukuk@suse.com" date="1627473600">- Include vfat and nls kernel modules into initrd so that we can
  read the ignition configuration from USB drives [bsc#1184202]</changelog>
  <changelog author="iforster@suse.com" date="1628510400">- Update to version 2.12.0:
  * news: add notes for 2.12.0
  * stages/files: add previousReport to result report
  * tests: fix linter warning
  * workflows: limit permissions to reading repo contents
  * workflows: bump linter version
  * go.mod: revendor
  * Drop EOL Go versions
  * internal/distro: drop DiskByIDDir
  * providers/azure: add support for azure gen2 VMs [bsc#1196679]
  * stages/mount: correctly relabel the root of a fresh ext4 filesystem
  * exec: fix permissions for mountpoints in home dirs
  * tests: drop os.ModeDir requirement in mode of output directories
  * examples: reboot with --force
  * exec/util: add blkid API to query block devices based on FSTYPE
  * stages/files: use IntToPtr() in createCrypttabEntries()
  * stages/files: write result report to /var/lib/ignition
  * engine: persist fetched config summaries in State
  * stages/disks: use State to persist keyfiles for files stage
  * *: add general mechanism for persisting state between stages
  * main: drop -clear-cache flag
  * engine: don't hardcode neednet path
  * fetch-offline: return ErrNeedNet if we need net
  * engine: switch Engine.logReport() to pointer receiver
  * engine: fix incorrect error in log message
  * dracut: drop ignition-setup-user.service
  * dracut: drop reference to ignition-setup-base.service
  * providers/gcp: access GCP metadata service by IP address
  * Remove ignition-firstboot-complete.service
  * OWNERS: remove
  * internal/exec/util: drop device argument from cResultToErr()
  * docs/config*: document storage.luks.clevis.threshold default
  * ci: disable spec bump external test workaround
  * docs: Add Ignition release / Spec version table
  * templates: update example releng signing ticket
  * templates: don't update %gotest lines
  * Provide ignition-firstboot-complete.service (removed by upstream
  due to correctly being considered distro spcific), based on the
  old upstream version; removed all non-SUSE specific stuff and
  integrated our own changes
  * Removed change-ignition-firstboot-path.conf (changes are
  integrated into ignition-firstboot-complete.service now).
  * Provide ignition-setup-user.service  (removed by upstream due
  to correctly being considered distro spcific), based on the old
  upstream version.
  * Renamed ignition-setup-user-suse.sh to ignition-setup-user.sh
  * Adapted ignition-generator-suse and module-setup.sh to use the
  custom ignition-setup-user.service (no overriding of parts of the
  service file necessary any more).
  * Synced ignition-kargs-helper script with upstream example
  * Raising minimum Go version to 1.15 as required by upstream</changelog>
  <changelog author="iforster@suse.com" date="1628769600">- is-live-image doesn't exist on *SUSE, and our live images don't
  use Ignition, so just add the Ignition device dependency to the
  service file directly.</changelog>
  <changelog author="iforster@suse.com" date="1629720000">- Make sure to create /boot/writable (may not be present in some
  images)</changelog>
  <changelog author="iforster@suse.com" date="1638360000">- Update to version 2.13.0:
  * news: add notes for 2.13.0
  * config/v3_4_exp: noProxy entries cannot be null
  * config/v3_4_exp: mark ignition.version as required
  * docs/supported-platforms: add some description about Nutanix
  * providers/nutanix: add Nutanix platform
  * tests: use umountPath as a thin wrapper around umountPartition
  * internal/providers: refactor handling of unmounting the mount path
  * tests: address gostatic-check warning
  * tests: Add base64 decoding test
  * Dockerfile.validate: build with Fedora 35
  * go.mod: update dataurl to 1.0.0
  * ci: give blackbox tests two hours to run
  * tests/filesystem: fix umountPartition retry loop
  * templates: skip vendoring the new version in favor of dependabot
  * go.mod: update vcontext
  * providers/virtualbox: read config from /Ignition/Config guest property
  * stages/filesystems: use mkfs.fat instead of mkfs.vfat
  * docs/supported-platforms: switch to Afterburn docs URL
  * docs/supported-platforms: drop reference to platform-specific agents
  * test: ensure all platforms are documented
  * docs/supported-platforms: add missing platforms
  * stages/files: rename `relabelDirsForFile` and add docstring
  * stages/files: make variable name follow Go convention
  * docs/supported-platforms: update platform names and URLs
  * docs/supported-platforms: sort by platform ID
  * docs/supported-platforms: add platform IDs
  * docs: Remove default layout from front matter
  * docs: Do not convert -- &amp; --- to en/em-dash
  * internal/*: change the location of Ignition report
  * internal/exec/util: rename FindFirstMissingDirForFile and tweak docs
  * providers/qemu: start reporting progress reading fw_cfg after 10 s
  * providers/qemu: optimize fw_cfg read size
  * ci: use coreos-ci-lib helper for kola testiso
  * *: gofmt 1.17
  * workflows: bump Go and golangci-lint
  * config: update versions in comments
- Removed obsolete ignition-rpmlintrc</changelog>
  <changelog author="fvogt@suse.com" date="1646395200">- Add support for NetworkManager in dracut:
  * ignition-enable-network.service, ignition-enable-network.sh</changelog>
  <changelog author="fvogt@suse.com" date="1646395201">- Remove /var/lib/YaST2/reconfig_system if a config was provided:
  * ignition-remove-reconfig_system.service</changelog>
  <changelog author="iforster@suse.com" date="1648209600">- Add ignition-touch-selinux-autorelabel.conf:
  Trigger SELinux autorelabel after Ignition runs; Ignition would
  support SELinux itself, however this is a compile time option, so
  it can't be used here.
- Filter commented lines in ignition-mount-initrd-fstab.service</changelog>
  <changelog author="iforster@suse.com" date="1649073600">- Don't include non-MarkDown files in documentation</changelog>
  <changelog author="iforster@suse.com" date="1649160000">- ignition-mount-initrd-fstab.service:
  - Don't ignore errors in loops
  - Unmount mount points recursively - a new submount may have
    appeared
  - Split umount part into own service file:
- ignition-umount-initrd-fstab.service:
  - Unmounts the additional mounts as soon as they are not
    required for Ignition any more; the ExecStop operation is
    running quite late in initrd and may unmount essential mount
    points flagged with "x-initrd.mount" (e.g. when storing /usr on
    a separate mount point). In theory this will also affect
    Ignition itself, but it hasn't been reported as a problem so
    far.</changelog>
  <changelog author="iforster@suse.com" date="1649419200">- Use /bin/sh instead of /usr/bin/sh (for backwards compatibility
  with SLE Micro 5.1) [bsc#1196679]</changelog>
  <changelog author="iforster@suse.com" date="1652875200">- Update to version 2.14.0:
  * NEWS: update v2.14.0
  * docs/operator-notes: add section on provisioning secrets
  * Dockerfile.validate: build with Fedora 36
  * internal/resource: fix gs:// fetches in GCE without a service account
  * docs/operator-notes: document supported S3 URL formats
  * internal/resource: fix S3 access point object ARNs
  * exec/util: fix infinite loop in Depth() if -root is relative
  * Add ignition-delete-config.service and ignition-rmcfg symlink
  * providers/virtualbox: support deleting Ignition configs
  * providers/virtualbox: add comment referencing VirtualBox source
  * providers/virtualbox: add define for GUEST_PROP_FN_GET_PROP
  * providers/virtualbox: add helper to set up hypervisor connection
  * providers/vmware: support deleting Ignition configs
  * main: add ignition-rmcfg multicall binary
  * go.mod: add github.com/beevik/etree
  * providers/vmware: switch to internal copy of OVF parser
  * internal/resource: fix bucket field in error message
  * internal/resource: derive AWS region hint from ARN partition field
  * internal/resource: simplify test
  * internal/resource: fix minor nits
  * provider/azure: try to fetch userdata from IMDS
  * providers/vmware: convert OVF tests to testify
  * providers/vmware: drop vmw-ovflib docs
  * providers/vmware: add verbatim copy of vmw-ovflib
  * providers/vmware: add constants for guestinfo and OVF property names
  * providers/virtualbox: fix reading properties with flags
  * internal/resource: support S3 access point URLs
- Update fixes CVE from [bsc#1199524]; this introduces a new
  service "ignition-delete-config.service"
- Add ignition-rmcfg-suse.conf dropin to adapt to SUSE environment
- Use fixed paths in spec file for hardcoded installation paths</changelog>
  <changelog author="fvogt@suse.com" date="1659441600">- ignition-enable-network.sh: Use /lib/dracut/hooks directly
  instead of the usr-merged location which isn't available everywhere
  (bsc#1201957)</changelog>
  <changelog author="iforster@suse.com" date="1677499200">- Update to version 2.15.0:
  * Features
  * Support offline Tang provisioning via pre-shared advertisement (3.4.0)
  * Allow enabling discard passthrough on LUKS devices (3.4.0)
  * Allow specifying arbitrary LUKS open options (3.4.0)
  * Ship aarch64 macOS ignition-validate binary in GitHub release artifacts
  * Changes
  * Mark the 3.4.0 config spec as stable
  * No longer accept configs with version 3.4.0-experimental
  * Create new 3.5.0-experimental config spec from 3.4.0
  * Fail if files/links/dirs conflict with systemd units or dropins
  * Warn if template for enabled systemd instance unit has no Install section
  * Warn if filesystem overwrites partitioned disk
  * Warn if wipeTable overwrites a filesystem that would otherwise be reused
  * Warn if user/group specified for hard link
  * Install ignition-apply in /usr/libexec
  * Allow distros to add Ignition command-line arguments from a unit drop-in
  * Convert NEWS to Markdown and move to docs site
  * Require Go 1.18+
  * Bug fixes
  * Don't overwrite LUKS1 volume when storage.luks.wipeVolume is false
  * Request network when custom Clevis config has needsNetwork set
  * Fix creating LUKS volume with custom Clevis config that uses TPM2
  * Avoid logging spurious error when a LUKS volume wasn't previously formatted
  * Fix version string in ignition-validate release container
  * Fix reproducibility of systemd preset file in ignition-apply output
  * Document that user/group fields aren't applied to hard links
  * Clarify spec docs for files/directories/links group fields
- Modified 0002-allow-multiple-mounts-of-same-device.patch to add
  new Ignition spec version
- Add 0001-ignore-missing-qemu-blockdev.patch [bsc#1207679] to
  support booting without configuration device on s390x.
- Move all /usr/libexec contents to %sbindir</changelog>
  <changelog author="iforster@suse.com" date="1678363200">- Add `dasd_mod.dasd=autodetect` to kernel command line parameters
  (for Ignition device support on S/390) [boo#1207903]</changelog>
  <changelog author="iforster@suse.com" date="1702900800">- Update to version 2.17.0:
  * Features
  * providers/hetzner: add support for Hetzner Cloud
  * providers/applehv: Add Apple Hypervisor
  * packit: add initial support
  * Other notable Changes
  * Add vsock modules into ramdisk
  * stages/disks: retry `sgdisk --zap-all` invocation
  * Add optionally-installed grub2 code
  * internal/exec/stages/disks: prevent races with udev
- Updates from version 2.16.x [jsc#SMO-314] [bsc#1217533]:
  * Features
  * Add support for Hyper-V platform
  * Other notable changes
  * dracut: make hv_utils module optional
  * internal/exec: don't relabel a mountpoint that already exists
  * internal/exec/util: check if unit exists before disabling
  * platform: allow provider fetch to save files to write from files stage
  * providers: rename noop to metal
  * platform: drop function pointer indirection for fetch method
  * providers: add Config wrapper structs for cmdline and system providers
- Fix segmentation fault if filesystem section of Ignition JSON
  doesn't contain path entry in
  0002-allow-multiple-mounts-of-same-device.patch
- Add 0003-Move-the-GPT-header-on-resized-disks.patch
- Increased required Go version</changelog>
</package>
<package pkgid="87fb5902b50a6206b0566ac0204445af4d6ed3ae216f601dbdefa6c8efb888fe" name="ipset" arch="aarch64">
  <version epoch="0" ver="7.15" rel="150400.12.6.4"/>
  <changelog author="jengelh@inai.de" date="1506168000">- Update to new upstream release 6.34
  * Reset state after a command failed, when multiple ones
    are issued.
  * Handle padding attribute properly in userspace.
  * Test to check the fix to add an IPv4 range containing more
    than 2^31 addresses.
- Remove ipset-6.33-export-func.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1515240000">- Update to new upstream release 6.35
  * Userspace revision handling is reworked
  * Backport patch: netfilter: ipset: use nfnl_mutex_is_locked
  * Missing nfnl_lock()/nfnl_unlock() is added to
    ip_set_net_exit()
  * netfilter: ipset: add resched points during set listing
  * Fix "don't update counters" mode when counters used at the
    matching
  * netfilter: ipset: Fix race between dump and swap</changelog>
  <changelog author="jengelh@inai.de" date="1516622400">- Add 0001-build-do-install-libipset-args.h.patch [boo#1077037].</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 6.36
  * Adding a IPv4 range x.x.x.x–255.255.255.255 could lead to
    memory exhaustion, which has been fixed.
- Drop 0001-build-do-install-libipset-args.h.patch (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1523361600">- Update to new upstream release 6.38
  * Fix parsing service names for ports.</changelog>
  <changelog author="jengelh@inai.de" date="1540900800">- Update to new upstream release 7.0
  * A new internal protocol version between the kernel and
    userspace is used. This is required in order to support two
    new functions and the extendend LIST operation, which makes
    possible to run ipset in every case entirely over netlink,
    without the need to use getsockopt().
  * The userspace library was reworked so it can be embedded
    without calling the binary.</changelog>
  <changelog author="suse+build@de-korte.org" date="1542715200">- Add ipset-file.diff [boo#1116432].</changelog>
  <changelog author="jengelh@inai.de" date="1544529600">- Update to new upstream release 7.1
  * Correct the manpage about the sort option
  * Implement sorting for hash types in the ipset tool
  * Fix to list/save into file specified by option
- Remove ipset-file.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1560168000">- Update to new upstream release 7.2
  * ipset: Fix memory accounting for hash types on resize</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 7.3
  * Fix rename concurrency with listing, which can result broken
    list/save results.
  * ipset: Copy the right MAC address in bitmap:ip,mac and
    hash:ip,mac sets.
  * ipset: Actually allow destination MAC address for hash:ip,mac
    sets too.</changelog>
  <changelog author="jengelh@inai.de" date="1572609600">- Update to release 7.4
  * Wildcard support for the "hash:net,iface" type.</changelog>
  <changelog author="jengelh@inai.de" date="1578657600">- Update to release 7.5
  * netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO
    is present.
  * netfilter: xt_set: Do not restrict --map-set to the
    mangle table.</changelog>
  <changelog author="jengelh@inai.de" date="1582545600">- Update to release 7.6
  * Add checking system_power_efficient_wq in the source tree.</changelog>
  <changelog author="jengelh@inai.de" date="1605787200">- Update to release 7.9
  * Enable memory accounting for ipset allocations
  * Expose the initval hash parameter to userspace
  * Add bucketsize parameter to all hash types
  * Support the -exist flag with the destroy command</changelog>
  <changelog author="jengelh@inai.de" date="1608465600">- Update to release 7.10
  * Fix shift-out-of-bounds in htable_bits()</changelog>
  <changelog author="jengelh@inai.de" date="1613736000">- Update to release 7.11
  * Argument parsing buffer overflow in ipset_parse_argv fixed</changelog>
  <changelog author="jengelh@inai.de" date="1627473600">- Update to release 7.14
  * Allow specifying protocols by number
  * Limit the maximum range of consecutive elements to add/delete</changelog>
  <changelog author="info@paolostivanin.com" date="1628078400">- Update to release 7.15
  * netfilter: ipset: Fix maximal range check in
    hash_ipportnet4_uadt()</changelog>
  <changelog author="danilo.spinella@suse.com" date="1667563200">- Tumbleweed is not affected by the following SLE issues:
  bsc#1122853</changelog>
  <changelog author="danilo.spinella@suse.com" date="1714737600">- Fix build with latest kernel, bsc#1223370
  * bsc1223370.patch</changelog>
</package>
<package pkgid="be9f99df25092f07b85393b113671b68cf4b6c0318f8073898a0a3017f9d7f44" name="ipset" arch="s390x">
  <version epoch="0" ver="7.15" rel="150400.12.6.4"/>
  <changelog author="jengelh@inai.de" date="1506168000">- Update to new upstream release 6.34
  * Reset state after a command failed, when multiple ones
    are issued.
  * Handle padding attribute properly in userspace.
  * Test to check the fix to add an IPv4 range containing more
    than 2^31 addresses.
- Remove ipset-6.33-export-func.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1515240000">- Update to new upstream release 6.35
  * Userspace revision handling is reworked
  * Backport patch: netfilter: ipset: use nfnl_mutex_is_locked
  * Missing nfnl_lock()/nfnl_unlock() is added to
    ip_set_net_exit()
  * netfilter: ipset: add resched points during set listing
  * Fix "don't update counters" mode when counters used at the
    matching
  * netfilter: ipset: Fix race between dump and swap</changelog>
  <changelog author="jengelh@inai.de" date="1516622400">- Add 0001-build-do-install-libipset-args.h.patch [boo#1077037].</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 6.36
  * Adding a IPv4 range x.x.x.x–255.255.255.255 could lead to
    memory exhaustion, which has been fixed.
- Drop 0001-build-do-install-libipset-args.h.patch (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1523361600">- Update to new upstream release 6.38
  * Fix parsing service names for ports.</changelog>
  <changelog author="jengelh@inai.de" date="1540900800">- Update to new upstream release 7.0
  * A new internal protocol version between the kernel and
    userspace is used. This is required in order to support two
    new functions and the extendend LIST operation, which makes
    possible to run ipset in every case entirely over netlink,
    without the need to use getsockopt().
  * The userspace library was reworked so it can be embedded
    without calling the binary.</changelog>
  <changelog author="suse+build@de-korte.org" date="1542715200">- Add ipset-file.diff [boo#1116432].</changelog>
  <changelog author="jengelh@inai.de" date="1544529600">- Update to new upstream release 7.1
  * Correct the manpage about the sort option
  * Implement sorting for hash types in the ipset tool
  * Fix to list/save into file specified by option
- Remove ipset-file.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1560168000">- Update to new upstream release 7.2
  * ipset: Fix memory accounting for hash types on resize</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 7.3
  * Fix rename concurrency with listing, which can result broken
    list/save results.
  * ipset: Copy the right MAC address in bitmap:ip,mac and
    hash:ip,mac sets.
  * ipset: Actually allow destination MAC address for hash:ip,mac
    sets too.</changelog>
  <changelog author="jengelh@inai.de" date="1572609600">- Update to release 7.4
  * Wildcard support for the "hash:net,iface" type.</changelog>
  <changelog author="jengelh@inai.de" date="1578657600">- Update to release 7.5
  * netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO
    is present.
  * netfilter: xt_set: Do not restrict --map-set to the
    mangle table.</changelog>
  <changelog author="jengelh@inai.de" date="1582545600">- Update to release 7.6
  * Add checking system_power_efficient_wq in the source tree.</changelog>
  <changelog author="jengelh@inai.de" date="1605787200">- Update to release 7.9
  * Enable memory accounting for ipset allocations
  * Expose the initval hash parameter to userspace
  * Add bucketsize parameter to all hash types
  * Support the -exist flag with the destroy command</changelog>
  <changelog author="jengelh@inai.de" date="1608465600">- Update to release 7.10
  * Fix shift-out-of-bounds in htable_bits()</changelog>
  <changelog author="jengelh@inai.de" date="1613736000">- Update to release 7.11
  * Argument parsing buffer overflow in ipset_parse_argv fixed</changelog>
  <changelog author="jengelh@inai.de" date="1627473600">- Update to release 7.14
  * Allow specifying protocols by number
  * Limit the maximum range of consecutive elements to add/delete</changelog>
  <changelog author="info@paolostivanin.com" date="1628078400">- Update to release 7.15
  * netfilter: ipset: Fix maximal range check in
    hash_ipportnet4_uadt()</changelog>
  <changelog author="danilo.spinella@suse.com" date="1667563200">- Tumbleweed is not affected by the following SLE issues:
  bsc#1122853</changelog>
  <changelog author="danilo.spinella@suse.com" date="1714737600">- Fix build with latest kernel, bsc#1223370
  * bsc1223370.patch</changelog>
</package>
<package pkgid="9e10b3d7e5f130c62da8a87ba449643ab27c00a847a7c53b7a4dc4824f311e56" name="ipset" arch="src">
  <version epoch="0" ver="7.15" rel="150400.12.6.4"/>
  <changelog author="jengelh@inai.de" date="1506168000">- Update to new upstream release 6.34
  * Reset state after a command failed, when multiple ones
    are issued.
  * Handle padding attribute properly in userspace.
  * Test to check the fix to add an IPv4 range containing more
    than 2^31 addresses.
- Remove ipset-6.33-export-func.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1515240000">- Update to new upstream release 6.35
  * Userspace revision handling is reworked
  * Backport patch: netfilter: ipset: use nfnl_mutex_is_locked
  * Missing nfnl_lock()/nfnl_unlock() is added to
    ip_set_net_exit()
  * netfilter: ipset: add resched points during set listing
  * Fix "don't update counters" mode when counters used at the
    matching
  * netfilter: ipset: Fix race between dump and swap</changelog>
  <changelog author="jengelh@inai.de" date="1516622400">- Add 0001-build-do-install-libipset-args.h.patch [boo#1077037].</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 6.36
  * Adding a IPv4 range x.x.x.x–255.255.255.255 could lead to
    memory exhaustion, which has been fixed.
- Drop 0001-build-do-install-libipset-args.h.patch (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1523361600">- Update to new upstream release 6.38
  * Fix parsing service names for ports.</changelog>
  <changelog author="jengelh@inai.de" date="1540900800">- Update to new upstream release 7.0
  * A new internal protocol version between the kernel and
    userspace is used. This is required in order to support two
    new functions and the extendend LIST operation, which makes
    possible to run ipset in every case entirely over netlink,
    without the need to use getsockopt().
  * The userspace library was reworked so it can be embedded
    without calling the binary.</changelog>
  <changelog author="suse+build@de-korte.org" date="1542715200">- Add ipset-file.diff [boo#1116432].</changelog>
  <changelog author="jengelh@inai.de" date="1544529600">- Update to new upstream release 7.1
  * Correct the manpage about the sort option
  * Implement sorting for hash types in the ipset tool
  * Fix to list/save into file specified by option
- Remove ipset-file.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1560168000">- Update to new upstream release 7.2
  * ipset: Fix memory accounting for hash types on resize</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 7.3
  * Fix rename concurrency with listing, which can result broken
    list/save results.
  * ipset: Copy the right MAC address in bitmap:ip,mac and
    hash:ip,mac sets.
  * ipset: Actually allow destination MAC address for hash:ip,mac
    sets too.</changelog>
  <changelog author="jengelh@inai.de" date="1572609600">- Update to release 7.4
  * Wildcard support for the "hash:net,iface" type.</changelog>
  <changelog author="jengelh@inai.de" date="1578657600">- Update to release 7.5
  * netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO
    is present.
  * netfilter: xt_set: Do not restrict --map-set to the
    mangle table.</changelog>
  <changelog author="jengelh@inai.de" date="1582545600">- Update to release 7.6
  * Add checking system_power_efficient_wq in the source tree.</changelog>
  <changelog author="jengelh@inai.de" date="1605787200">- Update to release 7.9
  * Enable memory accounting for ipset allocations
  * Expose the initval hash parameter to userspace
  * Add bucketsize parameter to all hash types
  * Support the -exist flag with the destroy command</changelog>
  <changelog author="jengelh@inai.de" date="1608465600">- Update to release 7.10
  * Fix shift-out-of-bounds in htable_bits()</changelog>
  <changelog author="jengelh@inai.de" date="1613736000">- Update to release 7.11
  * Argument parsing buffer overflow in ipset_parse_argv fixed</changelog>
  <changelog author="jengelh@inai.de" date="1627473600">- Update to release 7.14
  * Allow specifying protocols by number
  * Limit the maximum range of consecutive elements to add/delete</changelog>
  <changelog author="info@paolostivanin.com" date="1628078400">- Update to release 7.15
  * netfilter: ipset: Fix maximal range check in
    hash_ipportnet4_uadt()</changelog>
  <changelog author="danilo.spinella@suse.com" date="1667563200">- Tumbleweed is not affected by the following SLE issues:
  bsc#1122853</changelog>
  <changelog author="danilo.spinella@suse.com" date="1714737600">- Fix build with latest kernel, bsc#1223370
  * bsc1223370.patch</changelog>
</package>
<package pkgid="0b40bc6879b41c5d95571807e2e4c3d8cbc42fa409fe4f53a8c6d089e3e4d94f" name="ipset" arch="x86_64">
  <version epoch="0" ver="7.15" rel="150400.12.6.4"/>
  <changelog author="jengelh@inai.de" date="1506168000">- Update to new upstream release 6.34
  * Reset state after a command failed, when multiple ones
    are issued.
  * Handle padding attribute properly in userspace.
  * Test to check the fix to add an IPv4 range containing more
    than 2^31 addresses.
- Remove ipset-6.33-export-func.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1515240000">- Update to new upstream release 6.35
  * Userspace revision handling is reworked
  * Backport patch: netfilter: ipset: use nfnl_mutex_is_locked
  * Missing nfnl_lock()/nfnl_unlock() is added to
    ip_set_net_exit()
  * netfilter: ipset: add resched points during set listing
  * Fix "don't update counters" mode when counters used at the
    matching
  * netfilter: ipset: Fix race between dump and swap</changelog>
  <changelog author="jengelh@inai.de" date="1516622400">- Add 0001-build-do-install-libipset-args.h.patch [boo#1077037].</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 6.36
  * Adding a IPv4 range x.x.x.x–255.255.255.255 could lead to
    memory exhaustion, which has been fixed.
- Drop 0001-build-do-install-libipset-args.h.patch (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1523361600">- Update to new upstream release 6.38
  * Fix parsing service names for ports.</changelog>
  <changelog author="jengelh@inai.de" date="1540900800">- Update to new upstream release 7.0
  * A new internal protocol version between the kernel and
    userspace is used. This is required in order to support two
    new functions and the extendend LIST operation, which makes
    possible to run ipset in every case entirely over netlink,
    without the need to use getsockopt().
  * The userspace library was reworked so it can be embedded
    without calling the binary.</changelog>
  <changelog author="suse+build@de-korte.org" date="1542715200">- Add ipset-file.diff [boo#1116432].</changelog>
  <changelog author="jengelh@inai.de" date="1544529600">- Update to new upstream release 7.1
  * Correct the manpage about the sort option
  * Implement sorting for hash types in the ipset tool
  * Fix to list/save into file specified by option
- Remove ipset-file.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1560168000">- Update to new upstream release 7.2
  * ipset: Fix memory accounting for hash types on resize</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 7.3
  * Fix rename concurrency with listing, which can result broken
    list/save results.
  * ipset: Copy the right MAC address in bitmap:ip,mac and
    hash:ip,mac sets.
  * ipset: Actually allow destination MAC address for hash:ip,mac
    sets too.</changelog>
  <changelog author="jengelh@inai.de" date="1572609600">- Update to release 7.4
  * Wildcard support for the "hash:net,iface" type.</changelog>
  <changelog author="jengelh@inai.de" date="1578657600">- Update to release 7.5
  * netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO
    is present.
  * netfilter: xt_set: Do not restrict --map-set to the
    mangle table.</changelog>
  <changelog author="jengelh@inai.de" date="1582545600">- Update to release 7.6
  * Add checking system_power_efficient_wq in the source tree.</changelog>
  <changelog author="jengelh@inai.de" date="1605787200">- Update to release 7.9
  * Enable memory accounting for ipset allocations
  * Expose the initval hash parameter to userspace
  * Add bucketsize parameter to all hash types
  * Support the -exist flag with the destroy command</changelog>
  <changelog author="jengelh@inai.de" date="1608465600">- Update to release 7.10
  * Fix shift-out-of-bounds in htable_bits()</changelog>
  <changelog author="jengelh@inai.de" date="1613736000">- Update to release 7.11
  * Argument parsing buffer overflow in ipset_parse_argv fixed</changelog>
  <changelog author="jengelh@inai.de" date="1627473600">- Update to release 7.14
  * Allow specifying protocols by number
  * Limit the maximum range of consecutive elements to add/delete</changelog>
  <changelog author="info@paolostivanin.com" date="1628078400">- Update to release 7.15
  * netfilter: ipset: Fix maximal range check in
    hash_ipportnet4_uadt()</changelog>
  <changelog author="danilo.spinella@suse.com" date="1667563200">- Tumbleweed is not affected by the following SLE issues:
  bsc#1122853</changelog>
  <changelog author="danilo.spinella@suse.com" date="1714737600">- Fix build with latest kernel, bsc#1223370
  * bsc1223370.patch</changelog>
</package>
<package pkgid="8d66dc65a0d0040b28508e29b95a1819002b58c66eb1159575be192e49529ea2" name="iputils" arch="aarch64">
  <version epoch="0" ver="20221126" rel="150500.3.5.3"/>
  <changelog author="mwilck@suse.com" date="1566302400">- Fix arping -D problem (bsc#1146440)
  * added arping-revert-partially-fix-sent-vs-received-package.patch
  (upstream commit 18f14be)</changelog>
  <changelog author="pvorel@suse.cz" date="1567771200">- Fix arping -w problem (https://github.com/iputils/iputils/issues/211)
  * added arping-fix-f-quit-on-first-reply-regression.patch
  (upstream commit 1df5350)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1594555200">- remove unneeded libidn build dependency (boo#1174049)</changelog>
  <changelog author="pvorel@suse.cz" date="1597406400">- Remove 2 old patches (iputils-sec-ping-unblock.diff, iputils-ping-interrupt.diff)
  Although not documented, they both belong to bsc#674304. Fix from 2011 was
  resolved upstream in commit 810dd7f ("ping,ping6: Unmask signals on
  start-up.") [1], released in s20121112.
- Use %autosetup -p1</changelog>
  <changelog author="pvorel@suse.cz" date="1598270400">- Update to version s20200821
  https://github.com/iputils/iputils/releases/tag/s20200821
- Remove BuildRequires libopenssl-devel (added md5 implementation thus not needed)
- Remove patches from this release
  (arping-revert-partially-fix-sent-vs-received-package.patch,
  arping-fix-f-quit-on-first-reply-regression.patch)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1602072000">- No longer invoke permissions macros for ping. It now uses ICMP_PROTO sockets
  (bsc#1174504).</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1603108800">- Reference meson's build subdirectory as %_vpath_builddir, to
  line up with meson's structure.</changelog>
  <changelog author="pvorel@suse.cz" date="1612267200">- Update to version 20210202
  https://github.com/iputils/iputils/releases/tag/20210202
- Version scheme change: dropped leading 's', update that change</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1615896000">- Binaries were found to be not optimized or built
  with proper %optflags.</changelog>
  <changelog author="pvorel@suse.cz" date="1626955200">- Update to version 20210722
  https://github.com/iputils/iputils/releases/tag/20210722
- Use rarpd.service from upstream (removes PrivateUsers=yes, which fixes broken
  start of the service, adds DynamicUser=yes for more security)
- Add BuildRequires:  iproute2 (required for running tests)</changelog>
  <changelog author="jsegitz@suse.com" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_rdisc.service.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="pvorel@suse.cz" date="1639569600">- Update to version 20211215
  https://github.com/iputils/iputils/releases/tag/20211215
- rarpd and rdisc are going to be removed in next release
  (https://github.com/iputils/iputils/issues/363)
  therefore don't pack it since this release
- Drop harden_rdisc.service.patch, which was 1) merged upstream
  4bb0ace ("systemd: Add ProtectHostname, ProtectKernelLogs")
  for all services
  2) we don't build rdisc since this release</changelog>
  <changelog author="pgajdos@suse.com" date="1643112000">- temporarily reintroduce rarpd and rdisc tools to get them into
  15sp4 [jsc#SLE-23521]</changelog>
  <changelog author="pgajdos@suse.com" date="1644840000">- rarpd and rdisc tools are now disabled again [jsc#SLE-23521]</changelog>
  <changelog author="pvorel@suse.cz" date="1664798400">- Backport 2 fixes for bsc#1203957:
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1669464000">- Update to version 20221126
  https://github.com/iputils/iputils/releases/tag/20221126
- Update configure variables (ninfod, rarpd and rdisc were removed from
  upstream in next release =&gt; remove -DBUILD_NINFOD=false -DBUILD_RARPD=false
  - DBUILD_RDISC=false)
- Remove 2 backported fixes from this release
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716465600">- Backport upstream fix for bsc#1224877
  4db1de6 ("arping: Fix 1s delay on exit for unsolicited arpings")
  0001-arping-Fix-1s-delay-on-exit-for-unsolicited-arpings.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716811200">- Backport proposed fix for regression in upstream commit 4db1de6 (bsc#1224877)
  0002-arping-Fix-unsolicited-ARP-regressions-on-c-1.patch</changelog>
</package>
<package pkgid="4eab822c2c43ab94e4151fcd03047f9b9421501a31bde50809cdaec5b47e147f" name="iputils" arch="s390x">
  <version epoch="0" ver="20221126" rel="150500.3.5.3"/>
  <changelog author="mwilck@suse.com" date="1566302400">- Fix arping -D problem (bsc#1146440)
  * added arping-revert-partially-fix-sent-vs-received-package.patch
  (upstream commit 18f14be)</changelog>
  <changelog author="pvorel@suse.cz" date="1567771200">- Fix arping -w problem (https://github.com/iputils/iputils/issues/211)
  * added arping-fix-f-quit-on-first-reply-regression.patch
  (upstream commit 1df5350)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1594555200">- remove unneeded libidn build dependency (boo#1174049)</changelog>
  <changelog author="pvorel@suse.cz" date="1597406400">- Remove 2 old patches (iputils-sec-ping-unblock.diff, iputils-ping-interrupt.diff)
  Although not documented, they both belong to bsc#674304. Fix from 2011 was
  resolved upstream in commit 810dd7f ("ping,ping6: Unmask signals on
  start-up.") [1], released in s20121112.
- Use %autosetup -p1</changelog>
  <changelog author="pvorel@suse.cz" date="1598270400">- Update to version s20200821
  https://github.com/iputils/iputils/releases/tag/s20200821
- Remove BuildRequires libopenssl-devel (added md5 implementation thus not needed)
- Remove patches from this release
  (arping-revert-partially-fix-sent-vs-received-package.patch,
  arping-fix-f-quit-on-first-reply-regression.patch)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1602072000">- No longer invoke permissions macros for ping. It now uses ICMP_PROTO sockets
  (bsc#1174504).</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1603108800">- Reference meson's build subdirectory as %_vpath_builddir, to
  line up with meson's structure.</changelog>
  <changelog author="pvorel@suse.cz" date="1612267200">- Update to version 20210202
  https://github.com/iputils/iputils/releases/tag/20210202
- Version scheme change: dropped leading 's', update that change</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1615896000">- Binaries were found to be not optimized or built
  with proper %optflags.</changelog>
  <changelog author="pvorel@suse.cz" date="1626955200">- Update to version 20210722
  https://github.com/iputils/iputils/releases/tag/20210722
- Use rarpd.service from upstream (removes PrivateUsers=yes, which fixes broken
  start of the service, adds DynamicUser=yes for more security)
- Add BuildRequires:  iproute2 (required for running tests)</changelog>
  <changelog author="jsegitz@suse.com" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_rdisc.service.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="pvorel@suse.cz" date="1639569600">- Update to version 20211215
  https://github.com/iputils/iputils/releases/tag/20211215
- rarpd and rdisc are going to be removed in next release
  (https://github.com/iputils/iputils/issues/363)
  therefore don't pack it since this release
- Drop harden_rdisc.service.patch, which was 1) merged upstream
  4bb0ace ("systemd: Add ProtectHostname, ProtectKernelLogs")
  for all services
  2) we don't build rdisc since this release</changelog>
  <changelog author="pgajdos@suse.com" date="1643112000">- temporarily reintroduce rarpd and rdisc tools to get them into
  15sp4 [jsc#SLE-23521]</changelog>
  <changelog author="pgajdos@suse.com" date="1644840000">- rarpd and rdisc tools are now disabled again [jsc#SLE-23521]</changelog>
  <changelog author="pvorel@suse.cz" date="1664798400">- Backport 2 fixes for bsc#1203957:
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1669464000">- Update to version 20221126
  https://github.com/iputils/iputils/releases/tag/20221126
- Update configure variables (ninfod, rarpd and rdisc were removed from
  upstream in next release =&gt; remove -DBUILD_NINFOD=false -DBUILD_RARPD=false
  - DBUILD_RDISC=false)
- Remove 2 backported fixes from this release
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716465600">- Backport upstream fix for bsc#1224877
  4db1de6 ("arping: Fix 1s delay on exit for unsolicited arpings")
  0001-arping-Fix-1s-delay-on-exit-for-unsolicited-arpings.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716811200">- Backport proposed fix for regression in upstream commit 4db1de6 (bsc#1224877)
  0002-arping-Fix-unsolicited-ARP-regressions-on-c-1.patch</changelog>
</package>
<package pkgid="cd559d2063b0bfc7b52cfe8205520378afa0631d9994a84bef96f9ac8becba12" name="iputils" arch="src">
  <version epoch="0" ver="20221126" rel="150500.3.5.3"/>
  <changelog author="mwilck@suse.com" date="1566302400">- Fix arping -D problem (bsc#1146440)
  * added arping-revert-partially-fix-sent-vs-received-package.patch
  (upstream commit 18f14be)</changelog>
  <changelog author="pvorel@suse.cz" date="1567771200">- Fix arping -w problem (https://github.com/iputils/iputils/issues/211)
  * added arping-fix-f-quit-on-first-reply-regression.patch
  (upstream commit 1df5350)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1594555200">- remove unneeded libidn build dependency (boo#1174049)</changelog>
  <changelog author="pvorel@suse.cz" date="1597406400">- Remove 2 old patches (iputils-sec-ping-unblock.diff, iputils-ping-interrupt.diff)
  Although not documented, they both belong to bsc#674304. Fix from 2011 was
  resolved upstream in commit 810dd7f ("ping,ping6: Unmask signals on
  start-up.") [1], released in s20121112.
- Use %autosetup -p1</changelog>
  <changelog author="pvorel@suse.cz" date="1598270400">- Update to version s20200821
  https://github.com/iputils/iputils/releases/tag/s20200821
- Remove BuildRequires libopenssl-devel (added md5 implementation thus not needed)
- Remove patches from this release
  (arping-revert-partially-fix-sent-vs-received-package.patch,
  arping-fix-f-quit-on-first-reply-regression.patch)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1602072000">- No longer invoke permissions macros for ping. It now uses ICMP_PROTO sockets
  (bsc#1174504).</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1603108800">- Reference meson's build subdirectory as %_vpath_builddir, to
  line up with meson's structure.</changelog>
  <changelog author="pvorel@suse.cz" date="1612267200">- Update to version 20210202
  https://github.com/iputils/iputils/releases/tag/20210202
- Version scheme change: dropped leading 's', update that change</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1615896000">- Binaries were found to be not optimized or built
  with proper %optflags.</changelog>
  <changelog author="pvorel@suse.cz" date="1626955200">- Update to version 20210722
  https://github.com/iputils/iputils/releases/tag/20210722
- Use rarpd.service from upstream (removes PrivateUsers=yes, which fixes broken
  start of the service, adds DynamicUser=yes for more security)
- Add BuildRequires:  iproute2 (required for running tests)</changelog>
  <changelog author="jsegitz@suse.com" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_rdisc.service.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="pvorel@suse.cz" date="1639569600">- Update to version 20211215
  https://github.com/iputils/iputils/releases/tag/20211215
- rarpd and rdisc are going to be removed in next release
  (https://github.com/iputils/iputils/issues/363)
  therefore don't pack it since this release
- Drop harden_rdisc.service.patch, which was 1) merged upstream
  4bb0ace ("systemd: Add ProtectHostname, ProtectKernelLogs")
  for all services
  2) we don't build rdisc since this release</changelog>
  <changelog author="pgajdos@suse.com" date="1643112000">- temporarily reintroduce rarpd and rdisc tools to get them into
  15sp4 [jsc#SLE-23521]</changelog>
  <changelog author="pgajdos@suse.com" date="1644840000">- rarpd and rdisc tools are now disabled again [jsc#SLE-23521]</changelog>
  <changelog author="pvorel@suse.cz" date="1664798400">- Backport 2 fixes for bsc#1203957:
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1669464000">- Update to version 20221126
  https://github.com/iputils/iputils/releases/tag/20221126
- Update configure variables (ninfod, rarpd and rdisc were removed from
  upstream in next release =&gt; remove -DBUILD_NINFOD=false -DBUILD_RARPD=false
  - DBUILD_RDISC=false)
- Remove 2 backported fixes from this release
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716465600">- Backport upstream fix for bsc#1224877
  4db1de6 ("arping: Fix 1s delay on exit for unsolicited arpings")
  0001-arping-Fix-1s-delay-on-exit-for-unsolicited-arpings.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716811200">- Backport proposed fix for regression in upstream commit 4db1de6 (bsc#1224877)
  0002-arping-Fix-unsolicited-ARP-regressions-on-c-1.patch</changelog>
</package>
<package pkgid="612d0b51622d91c24a9d8e4988faf8c4f988877200b98e41a1117fb7d259c403" name="iputils" arch="x86_64">
  <version epoch="0" ver="20221126" rel="150500.3.5.3"/>
  <changelog author="mwilck@suse.com" date="1566302400">- Fix arping -D problem (bsc#1146440)
  * added arping-revert-partially-fix-sent-vs-received-package.patch
  (upstream commit 18f14be)</changelog>
  <changelog author="pvorel@suse.cz" date="1567771200">- Fix arping -w problem (https://github.com/iputils/iputils/issues/211)
  * added arping-fix-f-quit-on-first-reply-regression.patch
  (upstream commit 1df5350)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1594555200">- remove unneeded libidn build dependency (boo#1174049)</changelog>
  <changelog author="pvorel@suse.cz" date="1597406400">- Remove 2 old patches (iputils-sec-ping-unblock.diff, iputils-ping-interrupt.diff)
  Although not documented, they both belong to bsc#674304. Fix from 2011 was
  resolved upstream in commit 810dd7f ("ping,ping6: Unmask signals on
  start-up.") [1], released in s20121112.
- Use %autosetup -p1</changelog>
  <changelog author="pvorel@suse.cz" date="1598270400">- Update to version s20200821
  https://github.com/iputils/iputils/releases/tag/s20200821
- Remove BuildRequires libopenssl-devel (added md5 implementation thus not needed)
- Remove patches from this release
  (arping-revert-partially-fix-sent-vs-received-package.patch,
  arping-fix-f-quit-on-first-reply-regression.patch)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1602072000">- No longer invoke permissions macros for ping. It now uses ICMP_PROTO sockets
  (bsc#1174504).</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1603108800">- Reference meson's build subdirectory as %_vpath_builddir, to
  line up with meson's structure.</changelog>
  <changelog author="pvorel@suse.cz" date="1612267200">- Update to version 20210202
  https://github.com/iputils/iputils/releases/tag/20210202
- Version scheme change: dropped leading 's', update that change</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1615896000">- Binaries were found to be not optimized or built
  with proper %optflags.</changelog>
  <changelog author="pvorel@suse.cz" date="1626955200">- Update to version 20210722
  https://github.com/iputils/iputils/releases/tag/20210722
- Use rarpd.service from upstream (removes PrivateUsers=yes, which fixes broken
  start of the service, adds DynamicUser=yes for more security)
- Add BuildRequires:  iproute2 (required for running tests)</changelog>
  <changelog author="jsegitz@suse.com" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_rdisc.service.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="pvorel@suse.cz" date="1639569600">- Update to version 20211215
  https://github.com/iputils/iputils/releases/tag/20211215
- rarpd and rdisc are going to be removed in next release
  (https://github.com/iputils/iputils/issues/363)
  therefore don't pack it since this release
- Drop harden_rdisc.service.patch, which was 1) merged upstream
  4bb0ace ("systemd: Add ProtectHostname, ProtectKernelLogs")
  for all services
  2) we don't build rdisc since this release</changelog>
  <changelog author="pgajdos@suse.com" date="1643112000">- temporarily reintroduce rarpd and rdisc tools to get them into
  15sp4 [jsc#SLE-23521]</changelog>
  <changelog author="pgajdos@suse.com" date="1644840000">- rarpd and rdisc tools are now disabled again [jsc#SLE-23521]</changelog>
  <changelog author="pvorel@suse.cz" date="1664798400">- Backport 2 fixes for bsc#1203957:
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1669464000">- Update to version 20221126
  https://github.com/iputils/iputils/releases/tag/20221126
- Update configure variables (ninfod, rarpd and rdisc were removed from
  upstream in next release =&gt; remove -DBUILD_NINFOD=false -DBUILD_RARPD=false
  - DBUILD_RDISC=false)
- Remove 2 backported fixes from this release
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716465600">- Backport upstream fix for bsc#1224877
  4db1de6 ("arping: Fix 1s delay on exit for unsolicited arpings")
  0001-arping-Fix-1s-delay-on-exit-for-unsolicited-arpings.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716811200">- Backport proposed fix for regression in upstream commit 4db1de6 (bsc#1224877)
  0002-arping-Fix-unsolicited-ARP-regressions-on-c-1.patch</changelog>
</package>
<package pkgid="77032afe4ad1ddf4dc4dcceeb230ca73a453e4b0a364126b681f5a56cb9ba0fe" name="iputils" arch="aarch64">
  <version epoch="0" ver="20221126" rel="150500.3.8.2"/>
  <changelog author="pvorel@suse.cz" date="1567771200">- Fix arping -w problem (https://github.com/iputils/iputils/issues/211)
  * added arping-fix-f-quit-on-first-reply-regression.patch
  (upstream commit 1df5350)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1594555200">- remove unneeded libidn build dependency (boo#1174049)</changelog>
  <changelog author="pvorel@suse.cz" date="1597406400">- Remove 2 old patches (iputils-sec-ping-unblock.diff, iputils-ping-interrupt.diff)
  Although not documented, they both belong to bsc#674304. Fix from 2011 was
  resolved upstream in commit 810dd7f ("ping,ping6: Unmask signals on
  start-up.") [1], released in s20121112.
- Use %autosetup -p1</changelog>
  <changelog author="pvorel@suse.cz" date="1598270400">- Update to version s20200821
  https://github.com/iputils/iputils/releases/tag/s20200821
- Remove BuildRequires libopenssl-devel (added md5 implementation thus not needed)
- Remove patches from this release
  (arping-revert-partially-fix-sent-vs-received-package.patch,
  arping-fix-f-quit-on-first-reply-regression.patch)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1602072000">- No longer invoke permissions macros for ping. It now uses ICMP_PROTO sockets
  (bsc#1174504).</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1603108800">- Reference meson's build subdirectory as %_vpath_builddir, to
  line up with meson's structure.</changelog>
  <changelog author="pvorel@suse.cz" date="1612267200">- Update to version 20210202
  https://github.com/iputils/iputils/releases/tag/20210202
- Version scheme change: dropped leading 's', update that change</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1615896000">- Binaries were found to be not optimized or built
  with proper %optflags.</changelog>
  <changelog author="pvorel@suse.cz" date="1626955200">- Update to version 20210722
  https://github.com/iputils/iputils/releases/tag/20210722
- Use rarpd.service from upstream (removes PrivateUsers=yes, which fixes broken
  start of the service, adds DynamicUser=yes for more security)
- Add BuildRequires:  iproute2 (required for running tests)</changelog>
  <changelog author="jsegitz@suse.com" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_rdisc.service.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="pvorel@suse.cz" date="1639569600">- Update to version 20211215
  https://github.com/iputils/iputils/releases/tag/20211215
- rarpd and rdisc are going to be removed in next release
  (https://github.com/iputils/iputils/issues/363)
  therefore don't pack it since this release
- Drop harden_rdisc.service.patch, which was 1) merged upstream
  4bb0ace ("systemd: Add ProtectHostname, ProtectKernelLogs")
  for all services
  2) we don't build rdisc since this release</changelog>
  <changelog author="pgajdos@suse.com" date="1643112000">- temporarily reintroduce rarpd and rdisc tools to get them into
  15sp4 [jsc#SLE-23521]</changelog>
  <changelog author="pgajdos@suse.com" date="1644840000">- rarpd and rdisc tools are now disabled again [jsc#SLE-23521]</changelog>
  <changelog author="pvorel@suse.cz" date="1664798400">- Backport 2 fixes for bsc#1203957:
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1669464000">- Update to version 20221126
  https://github.com/iputils/iputils/releases/tag/20221126
- Update configure variables (ninfod, rarpd and rdisc were removed from
  upstream in next release =&gt; remove -DBUILD_NINFOD=false -DBUILD_RARPD=false
  - DBUILD_RDISC=false)
- Remove 2 backported fixes from this release
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716465600">- Backport upstream fix for bsc#1224877
  4db1de6 ("arping: Fix 1s delay on exit for unsolicited arpings")
  0001-arping-Fix-1s-delay-on-exit-for-unsolicited-arpings.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716811200">- Backport proposed fix for regression in upstream commit 4db1de6 (bsc#1224877)
  0002-arping-Fix-unsolicited-ARP-regressions-on-c-1.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1717416000">- Update 0002-arping-Fix-unsolicited-ARP-regressions-on-c-1.patch
  after upstream merged the fix, update git commit hashes.</changelog>
</package>
<package pkgid="5d661bc37557ee94688e8870dbe1b9f40816c78ba9311a65e9f38c67daebf871" name="iputils" arch="s390x">
  <version epoch="0" ver="20221126" rel="150500.3.8.2"/>
  <changelog author="pvorel@suse.cz" date="1567771200">- Fix arping -w problem (https://github.com/iputils/iputils/issues/211)
  * added arping-fix-f-quit-on-first-reply-regression.patch
  (upstream commit 1df5350)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1594555200">- remove unneeded libidn build dependency (boo#1174049)</changelog>
  <changelog author="pvorel@suse.cz" date="1597406400">- Remove 2 old patches (iputils-sec-ping-unblock.diff, iputils-ping-interrupt.diff)
  Although not documented, they both belong to bsc#674304. Fix from 2011 was
  resolved upstream in commit 810dd7f ("ping,ping6: Unmask signals on
  start-up.") [1], released in s20121112.
- Use %autosetup -p1</changelog>
  <changelog author="pvorel@suse.cz" date="1598270400">- Update to version s20200821
  https://github.com/iputils/iputils/releases/tag/s20200821
- Remove BuildRequires libopenssl-devel (added md5 implementation thus not needed)
- Remove patches from this release
  (arping-revert-partially-fix-sent-vs-received-package.patch,
  arping-fix-f-quit-on-first-reply-regression.patch)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1602072000">- No longer invoke permissions macros for ping. It now uses ICMP_PROTO sockets
  (bsc#1174504).</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1603108800">- Reference meson's build subdirectory as %_vpath_builddir, to
  line up with meson's structure.</changelog>
  <changelog author="pvorel@suse.cz" date="1612267200">- Update to version 20210202
  https://github.com/iputils/iputils/releases/tag/20210202
- Version scheme change: dropped leading 's', update that change</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1615896000">- Binaries were found to be not optimized or built
  with proper %optflags.</changelog>
  <changelog author="pvorel@suse.cz" date="1626955200">- Update to version 20210722
  https://github.com/iputils/iputils/releases/tag/20210722
- Use rarpd.service from upstream (removes PrivateUsers=yes, which fixes broken
  start of the service, adds DynamicUser=yes for more security)
- Add BuildRequires:  iproute2 (required for running tests)</changelog>
  <changelog author="jsegitz@suse.com" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_rdisc.service.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="pvorel@suse.cz" date="1639569600">- Update to version 20211215
  https://github.com/iputils/iputils/releases/tag/20211215
- rarpd and rdisc are going to be removed in next release
  (https://github.com/iputils/iputils/issues/363)
  therefore don't pack it since this release
- Drop harden_rdisc.service.patch, which was 1) merged upstream
  4bb0ace ("systemd: Add ProtectHostname, ProtectKernelLogs")
  for all services
  2) we don't build rdisc since this release</changelog>
  <changelog author="pgajdos@suse.com" date="1643112000">- temporarily reintroduce rarpd and rdisc tools to get them into
  15sp4 [jsc#SLE-23521]</changelog>
  <changelog author="pgajdos@suse.com" date="1644840000">- rarpd and rdisc tools are now disabled again [jsc#SLE-23521]</changelog>
  <changelog author="pvorel@suse.cz" date="1664798400">- Backport 2 fixes for bsc#1203957:
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1669464000">- Update to version 20221126
  https://github.com/iputils/iputils/releases/tag/20221126
- Update configure variables (ninfod, rarpd and rdisc were removed from
  upstream in next release =&gt; remove -DBUILD_NINFOD=false -DBUILD_RARPD=false
  - DBUILD_RDISC=false)
- Remove 2 backported fixes from this release
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716465600">- Backport upstream fix for bsc#1224877
  4db1de6 ("arping: Fix 1s delay on exit for unsolicited arpings")
  0001-arping-Fix-1s-delay-on-exit-for-unsolicited-arpings.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716811200">- Backport proposed fix for regression in upstream commit 4db1de6 (bsc#1224877)
  0002-arping-Fix-unsolicited-ARP-regressions-on-c-1.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1717416000">- Update 0002-arping-Fix-unsolicited-ARP-regressions-on-c-1.patch
  after upstream merged the fix, update git commit hashes.</changelog>
</package>
<package pkgid="38aff9347aac845da1f803207eaebcb146e2c1cdaffc4ee712d9c3007b29b685" name="iputils" arch="src">
  <version epoch="0" ver="20221126" rel="150500.3.8.2"/>
  <changelog author="pvorel@suse.cz" date="1567771200">- Fix arping -w problem (https://github.com/iputils/iputils/issues/211)
  * added arping-fix-f-quit-on-first-reply-regression.patch
  (upstream commit 1df5350)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1594555200">- remove unneeded libidn build dependency (boo#1174049)</changelog>
  <changelog author="pvorel@suse.cz" date="1597406400">- Remove 2 old patches (iputils-sec-ping-unblock.diff, iputils-ping-interrupt.diff)
  Although not documented, they both belong to bsc#674304. Fix from 2011 was
  resolved upstream in commit 810dd7f ("ping,ping6: Unmask signals on
  start-up.") [1], released in s20121112.
- Use %autosetup -p1</changelog>
  <changelog author="pvorel@suse.cz" date="1598270400">- Update to version s20200821
  https://github.com/iputils/iputils/releases/tag/s20200821
- Remove BuildRequires libopenssl-devel (added md5 implementation thus not needed)
- Remove patches from this release
  (arping-revert-partially-fix-sent-vs-received-package.patch,
  arping-fix-f-quit-on-first-reply-regression.patch)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1602072000">- No longer invoke permissions macros for ping. It now uses ICMP_PROTO sockets
  (bsc#1174504).</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1603108800">- Reference meson's build subdirectory as %_vpath_builddir, to
  line up with meson's structure.</changelog>
  <changelog author="pvorel@suse.cz" date="1612267200">- Update to version 20210202
  https://github.com/iputils/iputils/releases/tag/20210202
- Version scheme change: dropped leading 's', update that change</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1615896000">- Binaries were found to be not optimized or built
  with proper %optflags.</changelog>
  <changelog author="pvorel@suse.cz" date="1626955200">- Update to version 20210722
  https://github.com/iputils/iputils/releases/tag/20210722
- Use rarpd.service from upstream (removes PrivateUsers=yes, which fixes broken
  start of the service, adds DynamicUser=yes for more security)
- Add BuildRequires:  iproute2 (required for running tests)</changelog>
  <changelog author="jsegitz@suse.com" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_rdisc.service.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="pvorel@suse.cz" date="1639569600">- Update to version 20211215
  https://github.com/iputils/iputils/releases/tag/20211215
- rarpd and rdisc are going to be removed in next release
  (https://github.com/iputils/iputils/issues/363)
  therefore don't pack it since this release
- Drop harden_rdisc.service.patch, which was 1) merged upstream
  4bb0ace ("systemd: Add ProtectHostname, ProtectKernelLogs")
  for all services
  2) we don't build rdisc since this release</changelog>
  <changelog author="pgajdos@suse.com" date="1643112000">- temporarily reintroduce rarpd and rdisc tools to get them into
  15sp4 [jsc#SLE-23521]</changelog>
  <changelog author="pgajdos@suse.com" date="1644840000">- rarpd and rdisc tools are now disabled again [jsc#SLE-23521]</changelog>
  <changelog author="pvorel@suse.cz" date="1664798400">- Backport 2 fixes for bsc#1203957:
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1669464000">- Update to version 20221126
  https://github.com/iputils/iputils/releases/tag/20221126
- Update configure variables (ninfod, rarpd and rdisc were removed from
  upstream in next release =&gt; remove -DBUILD_NINFOD=false -DBUILD_RARPD=false
  - DBUILD_RDISC=false)
- Remove 2 backported fixes from this release
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716465600">- Backport upstream fix for bsc#1224877
  4db1de6 ("arping: Fix 1s delay on exit for unsolicited arpings")
  0001-arping-Fix-1s-delay-on-exit-for-unsolicited-arpings.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716811200">- Backport proposed fix for regression in upstream commit 4db1de6 (bsc#1224877)
  0002-arping-Fix-unsolicited-ARP-regressions-on-c-1.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1717416000">- Update 0002-arping-Fix-unsolicited-ARP-regressions-on-c-1.patch
  after upstream merged the fix, update git commit hashes.</changelog>
</package>
<package pkgid="a2677e7594a8b3b7d3fb65a32ec4e9188511ec0d3280342aec1dc795b08d36c5" name="iputils" arch="x86_64">
  <version epoch="0" ver="20221126" rel="150500.3.8.2"/>
  <changelog author="pvorel@suse.cz" date="1567771200">- Fix arping -w problem (https://github.com/iputils/iputils/issues/211)
  * added arping-fix-f-quit-on-first-reply-regression.patch
  (upstream commit 1df5350)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1594555200">- remove unneeded libidn build dependency (boo#1174049)</changelog>
  <changelog author="pvorel@suse.cz" date="1597406400">- Remove 2 old patches (iputils-sec-ping-unblock.diff, iputils-ping-interrupt.diff)
  Although not documented, they both belong to bsc#674304. Fix from 2011 was
  resolved upstream in commit 810dd7f ("ping,ping6: Unmask signals on
  start-up.") [1], released in s20121112.
- Use %autosetup -p1</changelog>
  <changelog author="pvorel@suse.cz" date="1598270400">- Update to version s20200821
  https://github.com/iputils/iputils/releases/tag/s20200821
- Remove BuildRequires libopenssl-devel (added md5 implementation thus not needed)
- Remove patches from this release
  (arping-revert-partially-fix-sent-vs-received-package.patch,
  arping-fix-f-quit-on-first-reply-regression.patch)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1602072000">- No longer invoke permissions macros for ping. It now uses ICMP_PROTO sockets
  (bsc#1174504).</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1603108800">- Reference meson's build subdirectory as %_vpath_builddir, to
  line up with meson's structure.</changelog>
  <changelog author="pvorel@suse.cz" date="1612267200">- Update to version 20210202
  https://github.com/iputils/iputils/releases/tag/20210202
- Version scheme change: dropped leading 's', update that change</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1615896000">- Binaries were found to be not optimized or built
  with proper %optflags.</changelog>
  <changelog author="pvorel@suse.cz" date="1626955200">- Update to version 20210722
  https://github.com/iputils/iputils/releases/tag/20210722
- Use rarpd.service from upstream (removes PrivateUsers=yes, which fixes broken
  start of the service, adds DynamicUser=yes for more security)
- Add BuildRequires:  iproute2 (required for running tests)</changelog>
  <changelog author="jsegitz@suse.com" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_rdisc.service.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="pvorel@suse.cz" date="1639569600">- Update to version 20211215
  https://github.com/iputils/iputils/releases/tag/20211215
- rarpd and rdisc are going to be removed in next release
  (https://github.com/iputils/iputils/issues/363)
  therefore don't pack it since this release
- Drop harden_rdisc.service.patch, which was 1) merged upstream
  4bb0ace ("systemd: Add ProtectHostname, ProtectKernelLogs")
  for all services
  2) we don't build rdisc since this release</changelog>
  <changelog author="pgajdos@suse.com" date="1643112000">- temporarily reintroduce rarpd and rdisc tools to get them into
  15sp4 [jsc#SLE-23521]</changelog>
  <changelog author="pgajdos@suse.com" date="1644840000">- rarpd and rdisc tools are now disabled again [jsc#SLE-23521]</changelog>
  <changelog author="pvorel@suse.cz" date="1664798400">- Backport 2 fixes for bsc#1203957:
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1669464000">- Update to version 20221126
  https://github.com/iputils/iputils/releases/tag/20221126
- Update configure variables (ninfod, rarpd and rdisc were removed from
  upstream in next release =&gt; remove -DBUILD_NINFOD=false -DBUILD_RARPD=false
  - DBUILD_RDISC=false)
- Remove 2 backported fixes from this release
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716465600">- Backport upstream fix for bsc#1224877
  4db1de6 ("arping: Fix 1s delay on exit for unsolicited arpings")
  0001-arping-Fix-1s-delay-on-exit-for-unsolicited-arpings.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716811200">- Backport proposed fix for regression in upstream commit 4db1de6 (bsc#1224877)
  0002-arping-Fix-unsolicited-ARP-regressions-on-c-1.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1717416000">- Update 0002-arping-Fix-unsolicited-ARP-regressions-on-c-1.patch
  after upstream merged the fix, update git commit hashes.</changelog>
</package>
<package pkgid="534c02d5bf040a6cf5bc4071ee9c592c70521ed1b23244d1648f238e6421bb35" name="iscsiuio" arch="aarch64">
  <version epoch="0" ver="0.7.8.8" rel="150500.46.3.1"/>
  <changelog author="lduncan@suse.com" date="1635163200">- Fix the usr-merge changes (bsc#1192013). This includes catching
  all the places that /sbin was still used directly, as well as
  making the SPEC file build using /usr/sbin for openSUSE but
  still use /sbin for SLE, for now.</changelog>
  <changelog author="lduncan@suse.com" date="1636632000">- Merged latest upstream. Mostly cleanup, but includes a fix for
  iscsi-init.service when trying to write to the root volume too
  early (bsc#1192568), as well as an upstream fix for possible
  deadlock when dealing with sysfs.</changelog>
  <changelog author="lduncan@suse.com" date="1644840000">- Updated to latest upstream 2.1.6 as 2.1.6-suse, which contains
  bug fixes and cleanups. See the Changelog for more details.</changelog>
  <changelog author="lduncan@suse.com" date="1646481600">- Update to latest upstream, including test cleanup, minor
  bug fixes (cosmetic), and fixing iscsi-init (bsc#1195656).</changelog>
  <changelog author="lduncan@suse.com" date="1649246400">- Updated to latest upstream, including bug fixes and cleanups.
  Changes included:
  * add handling name/value pairs for firmware login (bsc#1196113),
    including man page update for same
  * Fix bug where some package parts were installed using
    DESTDIR twice
  * general build cleanup (in prep for removing DB files from
    /etc/iscsi some day soon)
  Also, now delivering a "package config" file for libopeniscsiusr.</changelog>
  <changelog author="lduncan@suse.com" date="1651838400">- Updated to latest upstream version, tagged 2.1.7. Changes
  included:
  * updated/fixed test script
  * updated build system
  * several bug fixes, including one for bsc#1199264</changelog>
  <changelog author="lduncan@suse.com" date="1652097600">- Update to latest upstream, including:
  * Added 'distclean' to Makefile targets
  * Ensure Makefile '.PHONY' targets set up correctly
  * fix an iscsid logout bug generating a false error
    and cleanup logout error messages</changelog>
  <changelog author="lduncan@suse.com" date="1652443200">- Set initiatorname in %post (at end of install), for cases
  where root is read-only at startup time (bsc#1198457)</changelog>
  <changelog author="lduncan@suse.com" date="1655467200">- For Tumbleweed, moved logrotate files from user-specific
  directory /etc/logrotate.d to vendor-specific
  /usr/etc/logrotate.d
  (for Stefan Schubert &lt;schubi@suse.com&gt;)</changelog>
  <changelog author="lduncan@suse.com" date="1657108800">- Modify SPEC file so systemd unit files are mode 644 (not 755)
  (bsc#1200570)</changelog>
  <changelog author="lduncan@suse.com" date="1664193600">- Update to upstream version 2.1.8, which includes some bug fixes,
  and adds the ability to build using meson. The SPEC file was
  updated to use meson.
  Also, some files have moved:
  * the "lock" file has moved from /etc/iscsi to /var/lock/iscsi
  * the "database files" have moved from /etc/iscsi to
    /var/lib/iscsi</changelog>
  <changelog author="lduncan@suse.com" date="1668600000">- Updated to latest upstream. Changes:
  * iscsid/iscsiuio: fix OOM adjustment (github issue #377)</changelog>
  <changelog author="lduncan@suse.com" date="1670414400">- Moving DB files from /etc/iscsi/* to /var/lib/iscsi/* for
  SLE-15-SP5 and forward, as is done in Tumbleweed.
- Added /etc/iscsi/README.DB-files-moved, and added SPEC file
  changes to support this, including a post-install script to
  move the DB files, only installed if DB files are moved.
- Renamed shared library from libopeniscsiusr0_2_0 to
  libopeniscsiusr0, to correctly match SONAME in library.</changelog>
  <changelog author="lduncan@suse.com" date="1671451200">- Updated SPEC file dependencies for libopeniscsiusr to avoid
  conflicting package installation.</changelog>
  <changelog author="lduncan@suse.com" date="1671624000">- Update iscsid.service so it starts iscsid.socket, if needed
  (bsc#1206132).</changelog>
  <changelog author="lduncan@suse.com" date="1677326400">- Build system: meson builds were ignoring optflags, and other
  passed in compiler options.</changelog>
  <changelog author="lduncan@suse.com" date="1681732800">- Remove "--strip" in SPEC file for meson build, so that
  debuginfo is generated. (from mwilck) (bsc#1210536)</changelog>
  <changelog author="lduncan@suse.com" date="1686830400">- Upgrade to upstream version 2.1.9 with tag "2.1.9-suse"
  (bsc#1210514), replacing open-iscsi-2.1.8-suse.tar.bz2 with
  open-iscsi-2.1.9-suse.tar.bz2, and resetting
  open-iscsi-SUSE-latest.diff.bz2. A summary from the ChangeLog
  file:
  * Fix discoveryd compiler warning
  * Sync iscsi_if.h with kernel
  * Handle old DB records correctly
  * Make IQN configuration for iscsi-iname
  * remove OFFLOAD_BOOT_SUPPORTED, which is always true
  * Use UUID for IPC, not "root"
  * do not support SHA3 for libressl
  * build meson cleanups, including changing default DB home
  * Updated README about NOPs
  * Remove "BindTo" in systemd service file
  * Some iscsiuio fixes, including licensing and memory leaks
    (bsc#1210514)
  * Small netlink fixes
  * Fix OOM adjustment
  * Some error recovery fixes
  * Some spelling fixes</changelog>
  <changelog author="lduncan@suse.com" date="1687262400">- Fix iscsiuio build version by updating iscsiuio/meson.build
  and RPM SPEC file (bsc#1210514), updating
  open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1698235200">- Updated to latest upstream, which includes (bsc#1210514):
  * several fixes to harden iscsiuio, including:
  - logging now uses syslog
  - shutdown now waits for helper threads to complete
  - netlink socket cleanup
  * some minor bug fixes, some helping builds on musl
  This updates iscsiuio version to 0.7.8.8.
  This updates open-iscsi-SUSE-latest.diff.bz2</changelog>
</package>
<package pkgid="db202f4cf93fd2f92751be3b1003ff09de998d347780cb6937ae35098f38ec8d" name="iscsiuio" arch="s390x">
  <version epoch="0" ver="0.7.8.8" rel="150500.46.3.1"/>
  <changelog author="lduncan@suse.com" date="1635163200">- Fix the usr-merge changes (bsc#1192013). This includes catching
  all the places that /sbin was still used directly, as well as
  making the SPEC file build using /usr/sbin for openSUSE but
  still use /sbin for SLE, for now.</changelog>
  <changelog author="lduncan@suse.com" date="1636632000">- Merged latest upstream. Mostly cleanup, but includes a fix for
  iscsi-init.service when trying to write to the root volume too
  early (bsc#1192568), as well as an upstream fix for possible
  deadlock when dealing with sysfs.</changelog>
  <changelog author="lduncan@suse.com" date="1644840000">- Updated to latest upstream 2.1.6 as 2.1.6-suse, which contains
  bug fixes and cleanups. See the Changelog for more details.</changelog>
  <changelog author="lduncan@suse.com" date="1646481600">- Update to latest upstream, including test cleanup, minor
  bug fixes (cosmetic), and fixing iscsi-init (bsc#1195656).</changelog>
  <changelog author="lduncan@suse.com" date="1649246400">- Updated to latest upstream, including bug fixes and cleanups.
  Changes included:
  * add handling name/value pairs for firmware login (bsc#1196113),
    including man page update for same
  * Fix bug where some package parts were installed using
    DESTDIR twice
  * general build cleanup (in prep for removing DB files from
    /etc/iscsi some day soon)
  Also, now delivering a "package config" file for libopeniscsiusr.</changelog>
  <changelog author="lduncan@suse.com" date="1651838400">- Updated to latest upstream version, tagged 2.1.7. Changes
  included:
  * updated/fixed test script
  * updated build system
  * several bug fixes, including one for bsc#1199264</changelog>
  <changelog author="lduncan@suse.com" date="1652097600">- Update to latest upstream, including:
  * Added 'distclean' to Makefile targets
  * Ensure Makefile '.PHONY' targets set up correctly
  * fix an iscsid logout bug generating a false error
    and cleanup logout error messages</changelog>
  <changelog author="lduncan@suse.com" date="1652443200">- Set initiatorname in %post (at end of install), for cases
  where root is read-only at startup time (bsc#1198457)</changelog>
  <changelog author="lduncan@suse.com" date="1655467200">- For Tumbleweed, moved logrotate files from user-specific
  directory /etc/logrotate.d to vendor-specific
  /usr/etc/logrotate.d
  (for Stefan Schubert &lt;schubi@suse.com&gt;)</changelog>
  <changelog author="lduncan@suse.com" date="1657108800">- Modify SPEC file so systemd unit files are mode 644 (not 755)
  (bsc#1200570)</changelog>
  <changelog author="lduncan@suse.com" date="1664193600">- Update to upstream version 2.1.8, which includes some bug fixes,
  and adds the ability to build using meson. The SPEC file was
  updated to use meson.
  Also, some files have moved:
  * the "lock" file has moved from /etc/iscsi to /var/lock/iscsi
  * the "database files" have moved from /etc/iscsi to
    /var/lib/iscsi</changelog>
  <changelog author="lduncan@suse.com" date="1668600000">- Updated to latest upstream. Changes:
  * iscsid/iscsiuio: fix OOM adjustment (github issue #377)</changelog>
  <changelog author="lduncan@suse.com" date="1670414400">- Moving DB files from /etc/iscsi/* to /var/lib/iscsi/* for
  SLE-15-SP5 and forward, as is done in Tumbleweed.
- Added /etc/iscsi/README.DB-files-moved, and added SPEC file
  changes to support this, including a post-install script to
  move the DB files, only installed if DB files are moved.
- Renamed shared library from libopeniscsiusr0_2_0 to
  libopeniscsiusr0, to correctly match SONAME in library.</changelog>
  <changelog author="lduncan@suse.com" date="1671451200">- Updated SPEC file dependencies for libopeniscsiusr to avoid
  conflicting package installation.</changelog>
  <changelog author="lduncan@suse.com" date="1671624000">- Update iscsid.service so it starts iscsid.socket, if needed
  (bsc#1206132).</changelog>
  <changelog author="lduncan@suse.com" date="1677326400">- Build system: meson builds were ignoring optflags, and other
  passed in compiler options.</changelog>
  <changelog author="lduncan@suse.com" date="1681732800">- Remove "--strip" in SPEC file for meson build, so that
  debuginfo is generated. (from mwilck) (bsc#1210536)</changelog>
  <changelog author="lduncan@suse.com" date="1686830400">- Upgrade to upstream version 2.1.9 with tag "2.1.9-suse"
  (bsc#1210514), replacing open-iscsi-2.1.8-suse.tar.bz2 with
  open-iscsi-2.1.9-suse.tar.bz2, and resetting
  open-iscsi-SUSE-latest.diff.bz2. A summary from the ChangeLog
  file:
  * Fix discoveryd compiler warning
  * Sync iscsi_if.h with kernel
  * Handle old DB records correctly
  * Make IQN configuration for iscsi-iname
  * remove OFFLOAD_BOOT_SUPPORTED, which is always true
  * Use UUID for IPC, not "root"
  * do not support SHA3 for libressl
  * build meson cleanups, including changing default DB home
  * Updated README about NOPs
  * Remove "BindTo" in systemd service file
  * Some iscsiuio fixes, including licensing and memory leaks
    (bsc#1210514)
  * Small netlink fixes
  * Fix OOM adjustment
  * Some error recovery fixes
  * Some spelling fixes</changelog>
  <changelog author="lduncan@suse.com" date="1687262400">- Fix iscsiuio build version by updating iscsiuio/meson.build
  and RPM SPEC file (bsc#1210514), updating
  open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1698235200">- Updated to latest upstream, which includes (bsc#1210514):
  * several fixes to harden iscsiuio, including:
  - logging now uses syslog
  - shutdown now waits for helper threads to complete
  - netlink socket cleanup
  * some minor bug fixes, some helping builds on musl
  This updates iscsiuio version to 0.7.8.8.
  This updates open-iscsi-SUSE-latest.diff.bz2</changelog>
</package>
<package pkgid="26a2c889995bac34a4f80c6f4930553073661a9c7502ed9f83832ef721bb720e" name="iscsiuio" arch="x86_64">
  <version epoch="0" ver="0.7.8.8" rel="150500.46.3.1"/>
  <changelog author="lduncan@suse.com" date="1635163200">- Fix the usr-merge changes (bsc#1192013). This includes catching
  all the places that /sbin was still used directly, as well as
  making the SPEC file build using /usr/sbin for openSUSE but
  still use /sbin for SLE, for now.</changelog>
  <changelog author="lduncan@suse.com" date="1636632000">- Merged latest upstream. Mostly cleanup, but includes a fix for
  iscsi-init.service when trying to write to the root volume too
  early (bsc#1192568), as well as an upstream fix for possible
  deadlock when dealing with sysfs.</changelog>
  <changelog author="lduncan@suse.com" date="1644840000">- Updated to latest upstream 2.1.6 as 2.1.6-suse, which contains
  bug fixes and cleanups. See the Changelog for more details.</changelog>
  <changelog author="lduncan@suse.com" date="1646481600">- Update to latest upstream, including test cleanup, minor
  bug fixes (cosmetic), and fixing iscsi-init (bsc#1195656).</changelog>
  <changelog author="lduncan@suse.com" date="1649246400">- Updated to latest upstream, including bug fixes and cleanups.
  Changes included:
  * add handling name/value pairs for firmware login (bsc#1196113),
    including man page update for same
  * Fix bug where some package parts were installed using
    DESTDIR twice
  * general build cleanup (in prep for removing DB files from
    /etc/iscsi some day soon)
  Also, now delivering a "package config" file for libopeniscsiusr.</changelog>
  <changelog author="lduncan@suse.com" date="1651838400">- Updated to latest upstream version, tagged 2.1.7. Changes
  included:
  * updated/fixed test script
  * updated build system
  * several bug fixes, including one for bsc#1199264</changelog>
  <changelog author="lduncan@suse.com" date="1652097600">- Update to latest upstream, including:
  * Added 'distclean' to Makefile targets
  * Ensure Makefile '.PHONY' targets set up correctly
  * fix an iscsid logout bug generating a false error
    and cleanup logout error messages</changelog>
  <changelog author="lduncan@suse.com" date="1652443200">- Set initiatorname in %post (at end of install), for cases
  where root is read-only at startup time (bsc#1198457)</changelog>
  <changelog author="lduncan@suse.com" date="1655467200">- For Tumbleweed, moved logrotate files from user-specific
  directory /etc/logrotate.d to vendor-specific
  /usr/etc/logrotate.d
  (for Stefan Schubert &lt;schubi@suse.com&gt;)</changelog>
  <changelog author="lduncan@suse.com" date="1657108800">- Modify SPEC file so systemd unit files are mode 644 (not 755)
  (bsc#1200570)</changelog>
  <changelog author="lduncan@suse.com" date="1664193600">- Update to upstream version 2.1.8, which includes some bug fixes,
  and adds the ability to build using meson. The SPEC file was
  updated to use meson.
  Also, some files have moved:
  * the "lock" file has moved from /etc/iscsi to /var/lock/iscsi
  * the "database files" have moved from /etc/iscsi to
    /var/lib/iscsi</changelog>
  <changelog author="lduncan@suse.com" date="1668600000">- Updated to latest upstream. Changes:
  * iscsid/iscsiuio: fix OOM adjustment (github issue #377)</changelog>
  <changelog author="lduncan@suse.com" date="1670414400">- Moving DB files from /etc/iscsi/* to /var/lib/iscsi/* for
  SLE-15-SP5 and forward, as is done in Tumbleweed.
- Added /etc/iscsi/README.DB-files-moved, and added SPEC file
  changes to support this, including a post-install script to
  move the DB files, only installed if DB files are moved.
- Renamed shared library from libopeniscsiusr0_2_0 to
  libopeniscsiusr0, to correctly match SONAME in library.</changelog>
  <changelog author="lduncan@suse.com" date="1671451200">- Updated SPEC file dependencies for libopeniscsiusr to avoid
  conflicting package installation.</changelog>
  <changelog author="lduncan@suse.com" date="1671624000">- Update iscsid.service so it starts iscsid.socket, if needed
  (bsc#1206132).</changelog>
  <changelog author="lduncan@suse.com" date="1677326400">- Build system: meson builds were ignoring optflags, and other
  passed in compiler options.</changelog>
  <changelog author="lduncan@suse.com" date="1681732800">- Remove "--strip" in SPEC file for meson build, so that
  debuginfo is generated. (from mwilck) (bsc#1210536)</changelog>
  <changelog author="lduncan@suse.com" date="1686830400">- Upgrade to upstream version 2.1.9 with tag "2.1.9-suse"
  (bsc#1210514), replacing open-iscsi-2.1.8-suse.tar.bz2 with
  open-iscsi-2.1.9-suse.tar.bz2, and resetting
  open-iscsi-SUSE-latest.diff.bz2. A summary from the ChangeLog
  file:
  * Fix discoveryd compiler warning
  * Sync iscsi_if.h with kernel
  * Handle old DB records correctly
  * Make IQN configuration for iscsi-iname
  * remove OFFLOAD_BOOT_SUPPORTED, which is always true
  * Use UUID for IPC, not "root"
  * do not support SHA3 for libressl
  * build meson cleanups, including changing default DB home
  * Updated README about NOPs
  * Remove "BindTo" in systemd service file
  * Some iscsiuio fixes, including licensing and memory leaks
    (bsc#1210514)
  * Small netlink fixes
  * Fix OOM adjustment
  * Some error recovery fixes
  * Some spelling fixes</changelog>
  <changelog author="lduncan@suse.com" date="1687262400">- Fix iscsiuio build version by updating iscsiuio/meson.build
  and RPM SPEC file (bsc#1210514), updating
  open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1698235200">- Updated to latest upstream, which includes (bsc#1210514):
  * several fixes to harden iscsiuio, including:
  - logging now uses syslog
  - shutdown now waits for helper threads to complete
  - netlink socket cleanup
  * some minor bug fixes, some helping builds on musl
  This updates iscsiuio version to 0.7.8.8.
  This updates open-iscsi-SUSE-latest.diff.bz2</changelog>
</package>
<package pkgid="ce31d1ef00c72ddcca23d56e7f60be9b0c4870fc5e64ab30ac1aac27093d1481" name="jbigkit" arch="src">
  <version epoch="0" ver="2.1" rel="150000.3.5.1"/>
  <changelog author="brian@aljex.com" date="1334059200">- Initial SUSE package.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1339156800">- build -32bit packages to make libtiff5-32bit installable</changelog>
  <changelog author="coolo@suse.com" date="1339588800">- fix baselibs.conf</changelog>
  <changelog author="mmeister@suse.com" date="1364472000">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="schwab@linux-m68k.org" date="1374235200">- Don't strip binaries</changelog>
  <changelog author="brian@aljex.com" date="1397563200">- v2.1
-Fixes bnc#870855
-Fixes CVE-2013-6369</changelog>
  <changelog author="pgajdos@suse.com" date="1702987200">- security update
- added patches
  fix CVE-2022-1210 [bsc#1198146], Malicious file leads to a denial of service in TIFF File Handler
  + jbigkit-CVE-2022-1210.patch</changelog>
</package>
<package pkgid="aa80cd2319d9d0926dfe75d2c297992fd2c49c00e99411cc9b2bf0628cdeb5cb" name="jitterentropy" arch="src">
  <version epoch="0" ver="3.4.1" rel="150000.1.12.1"/>
  <changelog author="meissner@suse.com" date="1632225600">- add a userspace jitter entropy generator library</changelog>
  <changelog author="jengelh@inai.de" date="1632830400">- Trim conjecture from descriptions.</changelog>
  <changelog author="meissner@suse.com" date="1659528000">- updated to 3.4.0
  * enhancement: add API call jent_set_fips_failure_callback as requested by Daniel Ojalvo
  * fix: Change the SHA-3 integration: The entropy pool is now a SHA-3 state.
  It is filled with the time delta containing entropy and auxiliary data that does not contain entropy using a SHA update operation. The auxiliary data is calculated by a SHA-3 hashing of some varying state data. The time delta that contains entropy is measured about the SHA-3 hasing of the auxiliary data. This satisfies FIPS 140-3 IG D.K resolutions 4, 6, and 8.
  * enhancement: add CMake support by Andrew Hopkins
- updated to 3.3.1
  * fix: bug fix in initialization logic by Vladis Dronov &lt;vdronov@redhat.com&gt;
  * fix: use __asm__ instead of asm to suit the C11 standard
- added a -devel-static package to be able to link it static.</changelog>
  <changelog author="meissner@suse.com" date="1662984000">- updated to 3.4.1
  * add FIPS 140 hints to man page
  * simplify the test tool to search for optimal configurations
  * fix: jent_loop_shuffle: re-add setting the time that was lost with 3.4.0
  * enhancement: add ARM64 assembler code to read high-res timer</changelog>
  <changelog author="meissner@suse.com" date="1663070400">- jitterentropy-split-internal-header.patch:
  Hide the non-GNUC constructs that are library internal from the
  exported header. (bsc#1202870)</changelog>
  <changelog author="meissner@suse.com" date="1674734400">- jitterentropy-with-debug.patch: build with debuginfo (bsc#1207789)</changelog>
  <changelog author="pmonreal@suse.com" date="1679486400">- Fix a stack corruption on s390x: [bsc#1209627]
  * Output size of the STCKE command on s390x is 16 bytes, compared
    to 8 bytes of the STCK command. Fix a stack corruption in the
    s390x version of jent_get_nstime(). Add some more detailed
    information on the STCKE command.
  * github.com/smuellerDD/jitterentropy-library/commit/7bf9f85
  * Add jitterentropy-fix-a-stack-corruption-on-s390x.patch</changelog>
</package>
<package pkgid="4af605f61dad775ec190c7a0f1683d59917db8728e5168a53475e7d5cbc636b6" name="jitterentropy-devel" arch="aarch64">
  <version epoch="0" ver="3.4.1" rel="150000.1.12.1"/>
  <changelog author="meissner@suse.com" date="1632225600">- add a userspace jitter entropy generator library</changelog>
  <changelog author="jengelh@inai.de" date="1632830400">- Trim conjecture from descriptions.</changelog>
  <changelog author="meissner@suse.com" date="1659528000">- updated to 3.4.0
  * enhancement: add API call jent_set_fips_failure_callback as requested by Daniel Ojalvo
  * fix: Change the SHA-3 integration: The entropy pool is now a SHA-3 state.
  It is filled with the time delta containing entropy and auxiliary data that does not contain entropy using a SHA update operation. The auxiliary data is calculated by a SHA-3 hashing of some varying state data. The time delta that contains entropy is measured about the SHA-3 hasing of the auxiliary data. This satisfies FIPS 140-3 IG D.K resolutions 4, 6, and 8.
  * enhancement: add CMake support by Andrew Hopkins
- updated to 3.3.1
  * fix: bug fix in initialization logic by Vladis Dronov &lt;vdronov@redhat.com&gt;
  * fix: use __asm__ instead of asm to suit the C11 standard
- added a -devel-static package to be able to link it static.</changelog>
  <changelog author="meissner@suse.com" date="1662984000">- updated to 3.4.1
  * add FIPS 140 hints to man page
  * simplify the test tool to search for optimal configurations
  * fix: jent_loop_shuffle: re-add setting the time that was lost with 3.4.0
  * enhancement: add ARM64 assembler code to read high-res timer</changelog>
  <changelog author="meissner@suse.com" date="1663070400">- jitterentropy-split-internal-header.patch:
  Hide the non-GNUC constructs that are library internal from the
  exported header. (bsc#1202870)</changelog>
  <changelog author="meissner@suse.com" date="1674734400">- jitterentropy-with-debug.patch: build with debuginfo (bsc#1207789)</changelog>
  <changelog author="pmonreal@suse.com" date="1679486400">- Fix a stack corruption on s390x: [bsc#1209627]
  * Output size of the STCKE command on s390x is 16 bytes, compared
    to 8 bytes of the STCK command. Fix a stack corruption in the
    s390x version of jent_get_nstime(). Add some more detailed
    information on the STCKE command.
  * github.com/smuellerDD/jitterentropy-library/commit/7bf9f85
  * Add jitterentropy-fix-a-stack-corruption-on-s390x.patch</changelog>
</package>
<package pkgid="0c548b3962a94c2bfd2bd1ca10524e36afaf511196ed6846eb4645814899a556" name="jitterentropy-devel" arch="s390x">
  <version epoch="0" ver="3.4.1" rel="150000.1.12.1"/>
  <changelog author="meissner@suse.com" date="1632225600">- add a userspace jitter entropy generator library</changelog>
  <changelog author="jengelh@inai.de" date="1632830400">- Trim conjecture from descriptions.</changelog>
  <changelog author="meissner@suse.com" date="1659528000">- updated to 3.4.0
  * enhancement: add API call jent_set_fips_failure_callback as requested by Daniel Ojalvo
  * fix: Change the SHA-3 integration: The entropy pool is now a SHA-3 state.
  It is filled with the time delta containing entropy and auxiliary data that does not contain entropy using a SHA update operation. The auxiliary data is calculated by a SHA-3 hashing of some varying state data. The time delta that contains entropy is measured about the SHA-3 hasing of the auxiliary data. This satisfies FIPS 140-3 IG D.K resolutions 4, 6, and 8.
  * enhancement: add CMake support by Andrew Hopkins
- updated to 3.3.1
  * fix: bug fix in initialization logic by Vladis Dronov &lt;vdronov@redhat.com&gt;
  * fix: use __asm__ instead of asm to suit the C11 standard
- added a -devel-static package to be able to link it static.</changelog>
  <changelog author="meissner@suse.com" date="1662984000">- updated to 3.4.1
  * add FIPS 140 hints to man page
  * simplify the test tool to search for optimal configurations
  * fix: jent_loop_shuffle: re-add setting the time that was lost with 3.4.0
  * enhancement: add ARM64 assembler code to read high-res timer</changelog>
  <changelog author="meissner@suse.com" date="1663070400">- jitterentropy-split-internal-header.patch:
  Hide the non-GNUC constructs that are library internal from the
  exported header. (bsc#1202870)</changelog>
  <changelog author="meissner@suse.com" date="1674734400">- jitterentropy-with-debug.patch: build with debuginfo (bsc#1207789)</changelog>
  <changelog author="pmonreal@suse.com" date="1679486400">- Fix a stack corruption on s390x: [bsc#1209627]
  * Output size of the STCKE command on s390x is 16 bytes, compared
    to 8 bytes of the STCK command. Fix a stack corruption in the
    s390x version of jent_get_nstime(). Add some more detailed
    information on the STCKE command.
  * github.com/smuellerDD/jitterentropy-library/commit/7bf9f85
  * Add jitterentropy-fix-a-stack-corruption-on-s390x.patch</changelog>
</package>
<package pkgid="9045bea370e116e048300cb869711804a2ea1092a6d075e8217a449ec5e40fef" name="jitterentropy-devel" arch="x86_64">
  <version epoch="0" ver="3.4.1" rel="150000.1.12.1"/>
  <changelog author="meissner@suse.com" date="1632225600">- add a userspace jitter entropy generator library</changelog>
  <changelog author="jengelh@inai.de" date="1632830400">- Trim conjecture from descriptions.</changelog>
  <changelog author="meissner@suse.com" date="1659528000">- updated to 3.4.0
  * enhancement: add API call jent_set_fips_failure_callback as requested by Daniel Ojalvo
  * fix: Change the SHA-3 integration: The entropy pool is now a SHA-3 state.
  It is filled with the time delta containing entropy and auxiliary data that does not contain entropy using a SHA update operation. The auxiliary data is calculated by a SHA-3 hashing of some varying state data. The time delta that contains entropy is measured about the SHA-3 hasing of the auxiliary data. This satisfies FIPS 140-3 IG D.K resolutions 4, 6, and 8.
  * enhancement: add CMake support by Andrew Hopkins
- updated to 3.3.1
  * fix: bug fix in initialization logic by Vladis Dronov &lt;vdronov@redhat.com&gt;
  * fix: use __asm__ instead of asm to suit the C11 standard
- added a -devel-static package to be able to link it static.</changelog>
  <changelog author="meissner@suse.com" date="1662984000">- updated to 3.4.1
  * add FIPS 140 hints to man page
  * simplify the test tool to search for optimal configurations
  * fix: jent_loop_shuffle: re-add setting the time that was lost with 3.4.0
  * enhancement: add ARM64 assembler code to read high-res timer</changelog>
  <changelog author="meissner@suse.com" date="1663070400">- jitterentropy-split-internal-header.patch:
  Hide the non-GNUC constructs that are library internal from the
  exported header. (bsc#1202870)</changelog>
  <changelog author="meissner@suse.com" date="1674734400">- jitterentropy-with-debug.patch: build with debuginfo (bsc#1207789)</changelog>
  <changelog author="pmonreal@suse.com" date="1679486400">- Fix a stack corruption on s390x: [bsc#1209627]
  * Output size of the STCKE command on s390x is 16 bytes, compared
    to 8 bytes of the STCK command. Fix a stack corruption in the
    s390x version of jent_get_nstime(). Add some more detailed
    information on the STCKE command.
  * github.com/smuellerDD/jitterentropy-library/commit/7bf9f85
  * Add jitterentropy-fix-a-stack-corruption-on-s390x.patch</changelog>
</package>
<package pkgid="a6af4f10e4af45fee5b6526b2608437e6261aefdb16708e092ced5f52e6c4fb6" name="kdump" arch="aarch64">
  <version epoch="0" ver="1.0.2+git45.g7e4faf4" rel="150500.3.3.1"/>
  <changelog author="ptesarik@suse.com" date="1622203200">- Fix use of DNS in the panic environment (bsc#1183070):
  * kdump-avoid-endless-loop-on-EAI_AGAIN.patch: Avoid an endless
    loop when resolving a hostname fails with EAI_AGAIN.
  * kdump-install-real-resolv.conf.patch: Install /etc/resolv.conf
    using its resolved path.</changelog>
  <changelog author="ptesarik@suse.com" date="1637841600">- kdump-Store-kdump-initrd-in-kernel-image-path.patch: Fix kdumprd
  location for usrmerge kernels (boo#1190920).</changelog>
  <changelog author="ptesarik@suse.com" date="1638964800">- Update to 0.9.2
  * Isolate fadump initrd within the default one (jsc#SLE-18272)
  * Bug fixes
  * Code cleanups
- Remove patches that have been upstreamed:
  * kdump-mounts.cc-Include-sys-ioctl.h.patch
  * kdump-Add-bootdev-to-dracut-command-line.patch
  * kdump-do-not-iterate-past-end-of-string.patch
  * kdump-fix-incorrect-exit-code-checking.patch
  * kdump-avoid-endless-loop-on-EAI_AGAIN.patch
  * kdump-install-real-resolv.conf.patch
  * kdump-Store-kdump-initrd-in-kernel-image-path.patch
- Remove patches that have been solved differently:
  * kdump-on-error-option-yesno.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1639051200">- Sync with SLE15-SP4 changelog. These patches were never applied
  to Factory:
  * kdump-avoid-endless-loop-EAI_AGAIN.patch
  * kdump-calibrate-Add-LUKS2-Argon2-requirements-to-the-reser.patch
  * kdump-calibrate-Fix-kernel-command-line-parsing.patch
  * kdump-do-not-add-rd.neednet.patch
  * kdump-Do-not-list-all-block-devices-if-no-block-devices-ar.patch
  * kdump-ensure-initrd.target.wants-directory.patch
  * kdump-Enumerate-all-BTRFS-devices-for-btrfs-mount-points.patch
  * kdump-Implement-KString-isHexNumber.patch
  * kdump-install-etc-resolv.conf-using-resolved-path.patch
  * kdump-Mount-and-device-resolution-using-libmount-and-lsblk.patch
  * kdump-remove-console-hvc0-from-commandline.patch
  * kdump-set-serial-console-from-Xen-cmdline.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1641211200">- kdump-0.9.2-mkdumprd-properly-pass-compression-params.patch: Fix
  malformation in passing Dracut compression parameters in mkdumprd
  (bsc#1193765).
- Refresh existing patches.</changelog>
  <changelog author="ptesarik@suse.com" date="1642766400">- Update to 1.0
  * Estimate kdump memory requirements at build time
    (jsc#SLE-18441).
- Remove patches that have been upstreamed:
  * kdump-0.9.2-mkdumprd-properly-pass-compression-params.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1642766401">- kdump-calibrate-Ignore-malformed-VMCOREINFO.patch: calibrate:
  Ignore malformed VMCOREINFO lines (address occasional OBS build
  failures).</changelog>
  <changelog author="ptesarik@suse.com" date="1643716800">- Update to 1.0.2
  * Adjust crash kernel reservation at boot time (jsc#SLE-18441).
- All remaining patches have been upstreamed:
  * kdump-fillupdir-fixes.patch
  * kdump-use-pbl.patch
  * kdump-calibrate-Ignore-malformed-VMCOREINFO.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1643716801">- kdump-calibrate.conf-depends-on-kdumptool.patch: calibrate.conf:
  Add dependency on kdumptool.
- kdump-calibrate-fix-nic-naming.patch: calibrate: Fix network
  interface naming.
- kdump-calibrate-include-af_packet.patch: calibrate: Explicitly
  include af_packet in the test initrd.</changelog>
  <changelog author="ptesarik@suse.com" date="1644321600">- Exclude i586 from SLE builds.</changelog>
  <changelog author="jbohac@suse.com" date="1648728000">- pull sources directly from git using obs_scm
- fix bsc#1190299, bsc#1186272
- remove patches included in upstream git:
  kdump-calibrate-include-af_packet.patch,
  kdump-calibrate-fix-nic-naming.patch,
  kdump-calibrate.conf-depends-on-kdumptool.patch</changelog>
  <changelog author="jbohac@suse.com" date="1651665600">- kdumptool calibrate: add more margin to reservation calculations
  (bsc#1196728)
- remount target filesystem r/w for fadump (bsc1197125)
- stop reloading FADump on CPU hot-add event (jsc#IBM-768)
- mkdumprd: add option to run dracut in debug mode</changelog>
  <changelog author="jbohac@suse.com" date="1663934400">- pull from new upstream SLE-15-SP5 branch
- copy SLE-15-SP4 calibration data for SLE-15-SP5</changelog>
  <changelog author="jbohac@suse.com" date="1666699200">- fix broken URL in manpage (bsc#1187312)
- kdumptool calibrate: modify fadump suggestions (jsc#IBM-1027)</changelog>
  <changelog author="jbohac@suse.com" date="1669118400">- fix renaming of qeth interfaces (bsc#1204743, bsc#1144337)
- ppc64: rebuild initrd image after migration (bsc#1191410)</changelog>
  <changelog author="jbohac@suse.com" date="1669377600">- Make the kdump-save.service reboot after kdump-save is finished
  (bsc#1204000)</changelog>
  <changelog author="jbohac@suse.com" date="1672833600">- maintain the spec file in git
- print the qemu messages and trackrss log during calibrate
- fix deleting of a temporary file in dracut/module-setup.sh
- look for nsswitch.conf in /etc and /usr/etc
- never run a debugging shell when KDUMP_CONTINUE_ON_ERROR is set
- calibrate: properly kill the tail process</changelog>
  <changelog author="jbohac@suse.com" date="1673352000">- improve the generation of calibrate.conf
  * use static IP address for calibration
  * all calibrate.conf variants now stored in a single file
  * added a README and a helper script for updating calibrate.conf
  * prevent dracut from running emergency shell
  * fix s390x build dependencies</changelog>
  <changelog author="jbohac@suse.com" date="1677240000">- revert back to using rd.neednet=1 to enable network (bsc#1206015)
- kdumptool calibrate: add even more margin to reservation
  calculations (bsc#1207061)
- run kdump.service only after kdump-early.service (bsc#1196335)
- don't skip infiniband interfaces (bsc#1186745)
  (not a complete fix, requires a patch in dracut as well)</changelog>
  <changelog author="jbohac@suse.com" date="1706097600">- dracut: always create fstab, even if empty (bsc#1218494)
- fix NOSPLIT option
- Honor the KDUMP_VERBOSE setting in kdump-save</changelog>
</package>
<package pkgid="9ba989e7fbdd2d1b658268d31dfaad48567da4b524e143658ac7e76f7901aca6" name="kdump" arch="s390x">
  <version epoch="0" ver="1.0.2+git45.g7e4faf4" rel="150500.3.3.1"/>
  <changelog author="ptesarik@suse.com" date="1622203200">- Fix use of DNS in the panic environment (bsc#1183070):
  * kdump-avoid-endless-loop-on-EAI_AGAIN.patch: Avoid an endless
    loop when resolving a hostname fails with EAI_AGAIN.
  * kdump-install-real-resolv.conf.patch: Install /etc/resolv.conf
    using its resolved path.</changelog>
  <changelog author="ptesarik@suse.com" date="1637841600">- kdump-Store-kdump-initrd-in-kernel-image-path.patch: Fix kdumprd
  location for usrmerge kernels (boo#1190920).</changelog>
  <changelog author="ptesarik@suse.com" date="1638964800">- Update to 0.9.2
  * Isolate fadump initrd within the default one (jsc#SLE-18272)
  * Bug fixes
  * Code cleanups
- Remove patches that have been upstreamed:
  * kdump-mounts.cc-Include-sys-ioctl.h.patch
  * kdump-Add-bootdev-to-dracut-command-line.patch
  * kdump-do-not-iterate-past-end-of-string.patch
  * kdump-fix-incorrect-exit-code-checking.patch
  * kdump-avoid-endless-loop-on-EAI_AGAIN.patch
  * kdump-install-real-resolv.conf.patch
  * kdump-Store-kdump-initrd-in-kernel-image-path.patch
- Remove patches that have been solved differently:
  * kdump-on-error-option-yesno.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1639051200">- Sync with SLE15-SP4 changelog. These patches were never applied
  to Factory:
  * kdump-avoid-endless-loop-EAI_AGAIN.patch
  * kdump-calibrate-Add-LUKS2-Argon2-requirements-to-the-reser.patch
  * kdump-calibrate-Fix-kernel-command-line-parsing.patch
  * kdump-do-not-add-rd.neednet.patch
  * kdump-Do-not-list-all-block-devices-if-no-block-devices-ar.patch
  * kdump-ensure-initrd.target.wants-directory.patch
  * kdump-Enumerate-all-BTRFS-devices-for-btrfs-mount-points.patch
  * kdump-Implement-KString-isHexNumber.patch
  * kdump-install-etc-resolv.conf-using-resolved-path.patch
  * kdump-Mount-and-device-resolution-using-libmount-and-lsblk.patch
  * kdump-remove-console-hvc0-from-commandline.patch
  * kdump-set-serial-console-from-Xen-cmdline.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1641211200">- kdump-0.9.2-mkdumprd-properly-pass-compression-params.patch: Fix
  malformation in passing Dracut compression parameters in mkdumprd
  (bsc#1193765).
- Refresh existing patches.</changelog>
  <changelog author="ptesarik@suse.com" date="1642766400">- Update to 1.0
  * Estimate kdump memory requirements at build time
    (jsc#SLE-18441).
- Remove patches that have been upstreamed:
  * kdump-0.9.2-mkdumprd-properly-pass-compression-params.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1642766401">- kdump-calibrate-Ignore-malformed-VMCOREINFO.patch: calibrate:
  Ignore malformed VMCOREINFO lines (address occasional OBS build
  failures).</changelog>
  <changelog author="ptesarik@suse.com" date="1643716800">- Update to 1.0.2
  * Adjust crash kernel reservation at boot time (jsc#SLE-18441).
- All remaining patches have been upstreamed:
  * kdump-fillupdir-fixes.patch
  * kdump-use-pbl.patch
  * kdump-calibrate-Ignore-malformed-VMCOREINFO.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1643716801">- kdump-calibrate.conf-depends-on-kdumptool.patch: calibrate.conf:
  Add dependency on kdumptool.
- kdump-calibrate-fix-nic-naming.patch: calibrate: Fix network
  interface naming.
- kdump-calibrate-include-af_packet.patch: calibrate: Explicitly
  include af_packet in the test initrd.</changelog>
  <changelog author="ptesarik@suse.com" date="1644321600">- Exclude i586 from SLE builds.</changelog>
  <changelog author="jbohac@suse.com" date="1648728000">- pull sources directly from git using obs_scm
- fix bsc#1190299, bsc#1186272
- remove patches included in upstream git:
  kdump-calibrate-include-af_packet.patch,
  kdump-calibrate-fix-nic-naming.patch,
  kdump-calibrate.conf-depends-on-kdumptool.patch</changelog>
  <changelog author="jbohac@suse.com" date="1651665600">- kdumptool calibrate: add more margin to reservation calculations
  (bsc#1196728)
- remount target filesystem r/w for fadump (bsc1197125)
- stop reloading FADump on CPU hot-add event (jsc#IBM-768)
- mkdumprd: add option to run dracut in debug mode</changelog>
  <changelog author="jbohac@suse.com" date="1663934400">- pull from new upstream SLE-15-SP5 branch
- copy SLE-15-SP4 calibration data for SLE-15-SP5</changelog>
  <changelog author="jbohac@suse.com" date="1666699200">- fix broken URL in manpage (bsc#1187312)
- kdumptool calibrate: modify fadump suggestions (jsc#IBM-1027)</changelog>
  <changelog author="jbohac@suse.com" date="1669118400">- fix renaming of qeth interfaces (bsc#1204743, bsc#1144337)
- ppc64: rebuild initrd image after migration (bsc#1191410)</changelog>
  <changelog author="jbohac@suse.com" date="1669377600">- Make the kdump-save.service reboot after kdump-save is finished
  (bsc#1204000)</changelog>
  <changelog author="jbohac@suse.com" date="1672833600">- maintain the spec file in git
- print the qemu messages and trackrss log during calibrate
- fix deleting of a temporary file in dracut/module-setup.sh
- look for nsswitch.conf in /etc and /usr/etc
- never run a debugging shell when KDUMP_CONTINUE_ON_ERROR is set
- calibrate: properly kill the tail process</changelog>
  <changelog author="jbohac@suse.com" date="1673352000">- improve the generation of calibrate.conf
  * use static IP address for calibration
  * all calibrate.conf variants now stored in a single file
  * added a README and a helper script for updating calibrate.conf
  * prevent dracut from running emergency shell
  * fix s390x build dependencies</changelog>
  <changelog author="jbohac@suse.com" date="1677240000">- revert back to using rd.neednet=1 to enable network (bsc#1206015)
- kdumptool calibrate: add even more margin to reservation
  calculations (bsc#1207061)
- run kdump.service only after kdump-early.service (bsc#1196335)
- don't skip infiniband interfaces (bsc#1186745)
  (not a complete fix, requires a patch in dracut as well)</changelog>
  <changelog author="jbohac@suse.com" date="1706097600">- dracut: always create fstab, even if empty (bsc#1218494)
- fix NOSPLIT option
- Honor the KDUMP_VERBOSE setting in kdump-save</changelog>
</package>
<package pkgid="cdf977ef9422e3dad3ab6dc9a1e810ec5134194916b77a5758650d4e9c21ba3e" name="kdump" arch="src">
  <version epoch="0" ver="1.0.2+git45.g7e4faf4" rel="150500.3.3.1"/>
  <changelog author="ptesarik@suse.com" date="1622203200">- Fix use of DNS in the panic environment (bsc#1183070):
  * kdump-avoid-endless-loop-on-EAI_AGAIN.patch: Avoid an endless
    loop when resolving a hostname fails with EAI_AGAIN.
  * kdump-install-real-resolv.conf.patch: Install /etc/resolv.conf
    using its resolved path.</changelog>
  <changelog author="ptesarik@suse.com" date="1637841600">- kdump-Store-kdump-initrd-in-kernel-image-path.patch: Fix kdumprd
  location for usrmerge kernels (boo#1190920).</changelog>
  <changelog author="ptesarik@suse.com" date="1638964800">- Update to 0.9.2
  * Isolate fadump initrd within the default one (jsc#SLE-18272)
  * Bug fixes
  * Code cleanups
- Remove patches that have been upstreamed:
  * kdump-mounts.cc-Include-sys-ioctl.h.patch
  * kdump-Add-bootdev-to-dracut-command-line.patch
  * kdump-do-not-iterate-past-end-of-string.patch
  * kdump-fix-incorrect-exit-code-checking.patch
  * kdump-avoid-endless-loop-on-EAI_AGAIN.patch
  * kdump-install-real-resolv.conf.patch
  * kdump-Store-kdump-initrd-in-kernel-image-path.patch
- Remove patches that have been solved differently:
  * kdump-on-error-option-yesno.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1639051200">- Sync with SLE15-SP4 changelog. These patches were never applied
  to Factory:
  * kdump-avoid-endless-loop-EAI_AGAIN.patch
  * kdump-calibrate-Add-LUKS2-Argon2-requirements-to-the-reser.patch
  * kdump-calibrate-Fix-kernel-command-line-parsing.patch
  * kdump-do-not-add-rd.neednet.patch
  * kdump-Do-not-list-all-block-devices-if-no-block-devices-ar.patch
  * kdump-ensure-initrd.target.wants-directory.patch
  * kdump-Enumerate-all-BTRFS-devices-for-btrfs-mount-points.patch
  * kdump-Implement-KString-isHexNumber.patch
  * kdump-install-etc-resolv.conf-using-resolved-path.patch
  * kdump-Mount-and-device-resolution-using-libmount-and-lsblk.patch
  * kdump-remove-console-hvc0-from-commandline.patch
  * kdump-set-serial-console-from-Xen-cmdline.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1641211200">- kdump-0.9.2-mkdumprd-properly-pass-compression-params.patch: Fix
  malformation in passing Dracut compression parameters in mkdumprd
  (bsc#1193765).
- Refresh existing patches.</changelog>
  <changelog author="ptesarik@suse.com" date="1642766400">- Update to 1.0
  * Estimate kdump memory requirements at build time
    (jsc#SLE-18441).
- Remove patches that have been upstreamed:
  * kdump-0.9.2-mkdumprd-properly-pass-compression-params.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1642766401">- kdump-calibrate-Ignore-malformed-VMCOREINFO.patch: calibrate:
  Ignore malformed VMCOREINFO lines (address occasional OBS build
  failures).</changelog>
  <changelog author="ptesarik@suse.com" date="1643716800">- Update to 1.0.2
  * Adjust crash kernel reservation at boot time (jsc#SLE-18441).
- All remaining patches have been upstreamed:
  * kdump-fillupdir-fixes.patch
  * kdump-use-pbl.patch
  * kdump-calibrate-Ignore-malformed-VMCOREINFO.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1643716801">- kdump-calibrate.conf-depends-on-kdumptool.patch: calibrate.conf:
  Add dependency on kdumptool.
- kdump-calibrate-fix-nic-naming.patch: calibrate: Fix network
  interface naming.
- kdump-calibrate-include-af_packet.patch: calibrate: Explicitly
  include af_packet in the test initrd.</changelog>
  <changelog author="ptesarik@suse.com" date="1644321600">- Exclude i586 from SLE builds.</changelog>
  <changelog author="jbohac@suse.com" date="1648728000">- pull sources directly from git using obs_scm
- fix bsc#1190299, bsc#1186272
- remove patches included in upstream git:
  kdump-calibrate-include-af_packet.patch,
  kdump-calibrate-fix-nic-naming.patch,
  kdump-calibrate.conf-depends-on-kdumptool.patch</changelog>
  <changelog author="jbohac@suse.com" date="1651665600">- kdumptool calibrate: add more margin to reservation calculations
  (bsc#1196728)
- remount target filesystem r/w for fadump (bsc1197125)
- stop reloading FADump on CPU hot-add event (jsc#IBM-768)
- mkdumprd: add option to run dracut in debug mode</changelog>
  <changelog author="jbohac@suse.com" date="1663934400">- pull from new upstream SLE-15-SP5 branch
- copy SLE-15-SP4 calibration data for SLE-15-SP5</changelog>
  <changelog author="jbohac@suse.com" date="1666699200">- fix broken URL in manpage (bsc#1187312)
- kdumptool calibrate: modify fadump suggestions (jsc#IBM-1027)</changelog>
  <changelog author="jbohac@suse.com" date="1669118400">- fix renaming of qeth interfaces (bsc#1204743, bsc#1144337)
- ppc64: rebuild initrd image after migration (bsc#1191410)</changelog>
  <changelog author="jbohac@suse.com" date="1669377600">- Make the kdump-save.service reboot after kdump-save is finished
  (bsc#1204000)</changelog>
  <changelog author="jbohac@suse.com" date="1672833600">- maintain the spec file in git
- print the qemu messages and trackrss log during calibrate
- fix deleting of a temporary file in dracut/module-setup.sh
- look for nsswitch.conf in /etc and /usr/etc
- never run a debugging shell when KDUMP_CONTINUE_ON_ERROR is set
- calibrate: properly kill the tail process</changelog>
  <changelog author="jbohac@suse.com" date="1673352000">- improve the generation of calibrate.conf
  * use static IP address for calibration
  * all calibrate.conf variants now stored in a single file
  * added a README and a helper script for updating calibrate.conf
  * prevent dracut from running emergency shell
  * fix s390x build dependencies</changelog>
  <changelog author="jbohac@suse.com" date="1677240000">- revert back to using rd.neednet=1 to enable network (bsc#1206015)
- kdumptool calibrate: add even more margin to reservation
  calculations (bsc#1207061)
- run kdump.service only after kdump-early.service (bsc#1196335)
- don't skip infiniband interfaces (bsc#1186745)
  (not a complete fix, requires a patch in dracut as well)</changelog>
  <changelog author="jbohac@suse.com" date="1706097600">- dracut: always create fstab, even if empty (bsc#1218494)
- fix NOSPLIT option
- Honor the KDUMP_VERBOSE setting in kdump-save</changelog>
</package>
<package pkgid="157df236e62cdea6ae3baa317dde7622daad0e734a94626dd30633e8b57127b2" name="kdump" arch="x86_64">
  <version epoch="0" ver="1.0.2+git45.g7e4faf4" rel="150500.3.3.1"/>
  <changelog author="ptesarik@suse.com" date="1622203200">- Fix use of DNS in the panic environment (bsc#1183070):
  * kdump-avoid-endless-loop-on-EAI_AGAIN.patch: Avoid an endless
    loop when resolving a hostname fails with EAI_AGAIN.
  * kdump-install-real-resolv.conf.patch: Install /etc/resolv.conf
    using its resolved path.</changelog>
  <changelog author="ptesarik@suse.com" date="1637841600">- kdump-Store-kdump-initrd-in-kernel-image-path.patch: Fix kdumprd
  location for usrmerge kernels (boo#1190920).</changelog>
  <changelog author="ptesarik@suse.com" date="1638964800">- Update to 0.9.2
  * Isolate fadump initrd within the default one (jsc#SLE-18272)
  * Bug fixes
  * Code cleanups
- Remove patches that have been upstreamed:
  * kdump-mounts.cc-Include-sys-ioctl.h.patch
  * kdump-Add-bootdev-to-dracut-command-line.patch
  * kdump-do-not-iterate-past-end-of-string.patch
  * kdump-fix-incorrect-exit-code-checking.patch
  * kdump-avoid-endless-loop-on-EAI_AGAIN.patch
  * kdump-install-real-resolv.conf.patch
  * kdump-Store-kdump-initrd-in-kernel-image-path.patch
- Remove patches that have been solved differently:
  * kdump-on-error-option-yesno.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1639051200">- Sync with SLE15-SP4 changelog. These patches were never applied
  to Factory:
  * kdump-avoid-endless-loop-EAI_AGAIN.patch
  * kdump-calibrate-Add-LUKS2-Argon2-requirements-to-the-reser.patch
  * kdump-calibrate-Fix-kernel-command-line-parsing.patch
  * kdump-do-not-add-rd.neednet.patch
  * kdump-Do-not-list-all-block-devices-if-no-block-devices-ar.patch
  * kdump-ensure-initrd.target.wants-directory.patch
  * kdump-Enumerate-all-BTRFS-devices-for-btrfs-mount-points.patch
  * kdump-Implement-KString-isHexNumber.patch
  * kdump-install-etc-resolv.conf-using-resolved-path.patch
  * kdump-Mount-and-device-resolution-using-libmount-and-lsblk.patch
  * kdump-remove-console-hvc0-from-commandline.patch
  * kdump-set-serial-console-from-Xen-cmdline.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1641211200">- kdump-0.9.2-mkdumprd-properly-pass-compression-params.patch: Fix
  malformation in passing Dracut compression parameters in mkdumprd
  (bsc#1193765).
- Refresh existing patches.</changelog>
  <changelog author="ptesarik@suse.com" date="1642766400">- Update to 1.0
  * Estimate kdump memory requirements at build time
    (jsc#SLE-18441).
- Remove patches that have been upstreamed:
  * kdump-0.9.2-mkdumprd-properly-pass-compression-params.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1642766401">- kdump-calibrate-Ignore-malformed-VMCOREINFO.patch: calibrate:
  Ignore malformed VMCOREINFO lines (address occasional OBS build
  failures).</changelog>
  <changelog author="ptesarik@suse.com" date="1643716800">- Update to 1.0.2
  * Adjust crash kernel reservation at boot time (jsc#SLE-18441).
- All remaining patches have been upstreamed:
  * kdump-fillupdir-fixes.patch
  * kdump-use-pbl.patch
  * kdump-calibrate-Ignore-malformed-VMCOREINFO.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1643716801">- kdump-calibrate.conf-depends-on-kdumptool.patch: calibrate.conf:
  Add dependency on kdumptool.
- kdump-calibrate-fix-nic-naming.patch: calibrate: Fix network
  interface naming.
- kdump-calibrate-include-af_packet.patch: calibrate: Explicitly
  include af_packet in the test initrd.</changelog>
  <changelog author="ptesarik@suse.com" date="1644321600">- Exclude i586 from SLE builds.</changelog>
  <changelog author="jbohac@suse.com" date="1648728000">- pull sources directly from git using obs_scm
- fix bsc#1190299, bsc#1186272
- remove patches included in upstream git:
  kdump-calibrate-include-af_packet.patch,
  kdump-calibrate-fix-nic-naming.patch,
  kdump-calibrate.conf-depends-on-kdumptool.patch</changelog>
  <changelog author="jbohac@suse.com" date="1651665600">- kdumptool calibrate: add more margin to reservation calculations
  (bsc#1196728)
- remount target filesystem r/w for fadump (bsc1197125)
- stop reloading FADump on CPU hot-add event (jsc#IBM-768)
- mkdumprd: add option to run dracut in debug mode</changelog>
  <changelog author="jbohac@suse.com" date="1663934400">- pull from new upstream SLE-15-SP5 branch
- copy SLE-15-SP4 calibration data for SLE-15-SP5</changelog>
  <changelog author="jbohac@suse.com" date="1666699200">- fix broken URL in manpage (bsc#1187312)
- kdumptool calibrate: modify fadump suggestions (jsc#IBM-1027)</changelog>
  <changelog author="jbohac@suse.com" date="1669118400">- fix renaming of qeth interfaces (bsc#1204743, bsc#1144337)
- ppc64: rebuild initrd image after migration (bsc#1191410)</changelog>
  <changelog author="jbohac@suse.com" date="1669377600">- Make the kdump-save.service reboot after kdump-save is finished
  (bsc#1204000)</changelog>
  <changelog author="jbohac@suse.com" date="1672833600">- maintain the spec file in git
- print the qemu messages and trackrss log during calibrate
- fix deleting of a temporary file in dracut/module-setup.sh
- look for nsswitch.conf in /etc and /usr/etc
- never run a debugging shell when KDUMP_CONTINUE_ON_ERROR is set
- calibrate: properly kill the tail process</changelog>
  <changelog author="jbohac@suse.com" date="1673352000">- improve the generation of calibrate.conf
  * use static IP address for calibration
  * all calibrate.conf variants now stored in a single file
  * added a README and a helper script for updating calibrate.conf
  * prevent dracut from running emergency shell
  * fix s390x build dependencies</changelog>
  <changelog author="jbohac@suse.com" date="1677240000">- revert back to using rd.neednet=1 to enable network (bsc#1206015)
- kdumptool calibrate: add even more margin to reservation
  calculations (bsc#1207061)
- run kdump.service only after kdump-early.service (bsc#1196335)
- don't skip infiniband interfaces (bsc#1186745)
  (not a complete fix, requires a patch in dracut as well)</changelog>
  <changelog author="jbohac@suse.com" date="1706097600">- dracut: always create fstab, even if empty (bsc#1218494)
- fix NOSPLIT option
- Honor the KDUMP_VERBOSE setting in kdump-save</changelog>
</package>
<package pkgid="2d9249240e7f9bf006fd3f703454d473fb1fd49aacfe955fe5174581fcfc2411" name="kdump" arch="aarch64">
  <version epoch="0" ver="1.0.2+git47.g28549ab" rel="150500.3.6.1"/>
  <changelog author="ptesarik@suse.com" date="1637841600">- kdump-Store-kdump-initrd-in-kernel-image-path.patch: Fix kdumprd
  location for usrmerge kernels (boo#1190920).</changelog>
  <changelog author="ptesarik@suse.com" date="1638964800">- Update to 0.9.2
  * Isolate fadump initrd within the default one (jsc#SLE-18272)
  * Bug fixes
  * Code cleanups
- Remove patches that have been upstreamed:
  * kdump-mounts.cc-Include-sys-ioctl.h.patch
  * kdump-Add-bootdev-to-dracut-command-line.patch
  * kdump-do-not-iterate-past-end-of-string.patch
  * kdump-fix-incorrect-exit-code-checking.patch
  * kdump-avoid-endless-loop-on-EAI_AGAIN.patch
  * kdump-install-real-resolv.conf.patch
  * kdump-Store-kdump-initrd-in-kernel-image-path.patch
- Remove patches that have been solved differently:
  * kdump-on-error-option-yesno.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1639051200">- Sync with SLE15-SP4 changelog. These patches were never applied
  to Factory:
  * kdump-avoid-endless-loop-EAI_AGAIN.patch
  * kdump-calibrate-Add-LUKS2-Argon2-requirements-to-the-reser.patch
  * kdump-calibrate-Fix-kernel-command-line-parsing.patch
  * kdump-do-not-add-rd.neednet.patch
  * kdump-Do-not-list-all-block-devices-if-no-block-devices-ar.patch
  * kdump-ensure-initrd.target.wants-directory.patch
  * kdump-Enumerate-all-BTRFS-devices-for-btrfs-mount-points.patch
  * kdump-Implement-KString-isHexNumber.patch
  * kdump-install-etc-resolv.conf-using-resolved-path.patch
  * kdump-Mount-and-device-resolution-using-libmount-and-lsblk.patch
  * kdump-remove-console-hvc0-from-commandline.patch
  * kdump-set-serial-console-from-Xen-cmdline.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1641211200">- kdump-0.9.2-mkdumprd-properly-pass-compression-params.patch: Fix
  malformation in passing Dracut compression parameters in mkdumprd
  (bsc#1193765).
- Refresh existing patches.</changelog>
  <changelog author="ptesarik@suse.com" date="1642766400">- Update to 1.0
  * Estimate kdump memory requirements at build time
    (jsc#SLE-18441).
- Remove patches that have been upstreamed:
  * kdump-0.9.2-mkdumprd-properly-pass-compression-params.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1642766401">- kdump-calibrate-Ignore-malformed-VMCOREINFO.patch: calibrate:
  Ignore malformed VMCOREINFO lines (address occasional OBS build
  failures).</changelog>
  <changelog author="ptesarik@suse.com" date="1643716800">- Update to 1.0.2
  * Adjust crash kernel reservation at boot time (jsc#SLE-18441).
- All remaining patches have been upstreamed:
  * kdump-fillupdir-fixes.patch
  * kdump-use-pbl.patch
  * kdump-calibrate-Ignore-malformed-VMCOREINFO.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1643716801">- kdump-calibrate.conf-depends-on-kdumptool.patch: calibrate.conf:
  Add dependency on kdumptool.
- kdump-calibrate-fix-nic-naming.patch: calibrate: Fix network
  interface naming.
- kdump-calibrate-include-af_packet.patch: calibrate: Explicitly
  include af_packet in the test initrd.</changelog>
  <changelog author="ptesarik@suse.com" date="1644321600">- Exclude i586 from SLE builds.</changelog>
  <changelog author="jbohac@suse.com" date="1648728000">- pull sources directly from git using obs_scm
- fix bsc#1190299, bsc#1186272
- remove patches included in upstream git:
  kdump-calibrate-include-af_packet.patch,
  kdump-calibrate-fix-nic-naming.patch,
  kdump-calibrate.conf-depends-on-kdumptool.patch</changelog>
  <changelog author="jbohac@suse.com" date="1651665600">- kdumptool calibrate: add more margin to reservation calculations
  (bsc#1196728)
- remount target filesystem r/w for fadump (bsc1197125)
- stop reloading FADump on CPU hot-add event (jsc#IBM-768)
- mkdumprd: add option to run dracut in debug mode</changelog>
  <changelog author="jbohac@suse.com" date="1663934400">- pull from new upstream SLE-15-SP5 branch
- copy SLE-15-SP4 calibration data for SLE-15-SP5</changelog>
  <changelog author="jbohac@suse.com" date="1666699200">- fix broken URL in manpage (bsc#1187312)
- kdumptool calibrate: modify fadump suggestions (jsc#IBM-1027)</changelog>
  <changelog author="jbohac@suse.com" date="1669118400">- fix renaming of qeth interfaces (bsc#1204743, bsc#1144337)
- ppc64: rebuild initrd image after migration (bsc#1191410)</changelog>
  <changelog author="jbohac@suse.com" date="1669377600">- Make the kdump-save.service reboot after kdump-save is finished
  (bsc#1204000)</changelog>
  <changelog author="jbohac@suse.com" date="1672833600">- maintain the spec file in git
- print the qemu messages and trackrss log during calibrate
- fix deleting of a temporary file in dracut/module-setup.sh
- look for nsswitch.conf in /etc and /usr/etc
- never run a debugging shell when KDUMP_CONTINUE_ON_ERROR is set
- calibrate: properly kill the tail process</changelog>
  <changelog author="jbohac@suse.com" date="1673352000">- improve the generation of calibrate.conf
  * use static IP address for calibration
  * all calibrate.conf variants now stored in a single file
  * added a README and a helper script for updating calibrate.conf
  * prevent dracut from running emergency shell
  * fix s390x build dependencies</changelog>
  <changelog author="jbohac@suse.com" date="1677240000">- revert back to using rd.neednet=1 to enable network (bsc#1206015)
- kdumptool calibrate: add even more margin to reservation
  calculations (bsc#1207061)
- run kdump.service only after kdump-early.service (bsc#1196335)
- don't skip infiniband interfaces (bsc#1186745)
  (not a complete fix, requires a patch in dracut as well)</changelog>
  <changelog author="jbohac@suse.com" date="1706097600">- dracut: always create fstab, even if empty (bsc#1218494)
- fix NOSPLIT option
- Honor the KDUMP_VERBOSE setting in kdump-save</changelog>
  <changelog author="jbohac@suse.com" date="1715860800">- spec: return success from pre, post, preun and postun scriplets
  (bsc#1222228, bsc#1191410)
- spec: differentiate between uninstall and upgrade in postun/preun
  (bsc#1191410)</changelog>
</package>
<package pkgid="dc50bec45979476a8f36002d44011b26c135f1ee8e4100d0d2082c0e4c421ed1" name="kdump" arch="s390x">
  <version epoch="0" ver="1.0.2+git47.g28549ab" rel="150500.3.6.1"/>
  <changelog author="ptesarik@suse.com" date="1637841600">- kdump-Store-kdump-initrd-in-kernel-image-path.patch: Fix kdumprd
  location for usrmerge kernels (boo#1190920).</changelog>
  <changelog author="ptesarik@suse.com" date="1638964800">- Update to 0.9.2
  * Isolate fadump initrd within the default one (jsc#SLE-18272)
  * Bug fixes
  * Code cleanups
- Remove patches that have been upstreamed:
  * kdump-mounts.cc-Include-sys-ioctl.h.patch
  * kdump-Add-bootdev-to-dracut-command-line.patch
  * kdump-do-not-iterate-past-end-of-string.patch
  * kdump-fix-incorrect-exit-code-checking.patch
  * kdump-avoid-endless-loop-on-EAI_AGAIN.patch
  * kdump-install-real-resolv.conf.patch
  * kdump-Store-kdump-initrd-in-kernel-image-path.patch
- Remove patches that have been solved differently:
  * kdump-on-error-option-yesno.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1639051200">- Sync with SLE15-SP4 changelog. These patches were never applied
  to Factory:
  * kdump-avoid-endless-loop-EAI_AGAIN.patch
  * kdump-calibrate-Add-LUKS2-Argon2-requirements-to-the-reser.patch
  * kdump-calibrate-Fix-kernel-command-line-parsing.patch
  * kdump-do-not-add-rd.neednet.patch
  * kdump-Do-not-list-all-block-devices-if-no-block-devices-ar.patch
  * kdump-ensure-initrd.target.wants-directory.patch
  * kdump-Enumerate-all-BTRFS-devices-for-btrfs-mount-points.patch
  * kdump-Implement-KString-isHexNumber.patch
  * kdump-install-etc-resolv.conf-using-resolved-path.patch
  * kdump-Mount-and-device-resolution-using-libmount-and-lsblk.patch
  * kdump-remove-console-hvc0-from-commandline.patch
  * kdump-set-serial-console-from-Xen-cmdline.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1641211200">- kdump-0.9.2-mkdumprd-properly-pass-compression-params.patch: Fix
  malformation in passing Dracut compression parameters in mkdumprd
  (bsc#1193765).
- Refresh existing patches.</changelog>
  <changelog author="ptesarik@suse.com" date="1642766400">- Update to 1.0
  * Estimate kdump memory requirements at build time
    (jsc#SLE-18441).
- Remove patches that have been upstreamed:
  * kdump-0.9.2-mkdumprd-properly-pass-compression-params.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1642766401">- kdump-calibrate-Ignore-malformed-VMCOREINFO.patch: calibrate:
  Ignore malformed VMCOREINFO lines (address occasional OBS build
  failures).</changelog>
  <changelog author="ptesarik@suse.com" date="1643716800">- Update to 1.0.2
  * Adjust crash kernel reservation at boot time (jsc#SLE-18441).
- All remaining patches have been upstreamed:
  * kdump-fillupdir-fixes.patch
  * kdump-use-pbl.patch
  * kdump-calibrate-Ignore-malformed-VMCOREINFO.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1643716801">- kdump-calibrate.conf-depends-on-kdumptool.patch: calibrate.conf:
  Add dependency on kdumptool.
- kdump-calibrate-fix-nic-naming.patch: calibrate: Fix network
  interface naming.
- kdump-calibrate-include-af_packet.patch: calibrate: Explicitly
  include af_packet in the test initrd.</changelog>
  <changelog author="ptesarik@suse.com" date="1644321600">- Exclude i586 from SLE builds.</changelog>
  <changelog author="jbohac@suse.com" date="1648728000">- pull sources directly from git using obs_scm
- fix bsc#1190299, bsc#1186272
- remove patches included in upstream git:
  kdump-calibrate-include-af_packet.patch,
  kdump-calibrate-fix-nic-naming.patch,
  kdump-calibrate.conf-depends-on-kdumptool.patch</changelog>
  <changelog author="jbohac@suse.com" date="1651665600">- kdumptool calibrate: add more margin to reservation calculations
  (bsc#1196728)
- remount target filesystem r/w for fadump (bsc1197125)
- stop reloading FADump on CPU hot-add event (jsc#IBM-768)
- mkdumprd: add option to run dracut in debug mode</changelog>
  <changelog author="jbohac@suse.com" date="1663934400">- pull from new upstream SLE-15-SP5 branch
- copy SLE-15-SP4 calibration data for SLE-15-SP5</changelog>
  <changelog author="jbohac@suse.com" date="1666699200">- fix broken URL in manpage (bsc#1187312)
- kdumptool calibrate: modify fadump suggestions (jsc#IBM-1027)</changelog>
  <changelog author="jbohac@suse.com" date="1669118400">- fix renaming of qeth interfaces (bsc#1204743, bsc#1144337)
- ppc64: rebuild initrd image after migration (bsc#1191410)</changelog>
  <changelog author="jbohac@suse.com" date="1669377600">- Make the kdump-save.service reboot after kdump-save is finished
  (bsc#1204000)</changelog>
  <changelog author="jbohac@suse.com" date="1672833600">- maintain the spec file in git
- print the qemu messages and trackrss log during calibrate
- fix deleting of a temporary file in dracut/module-setup.sh
- look for nsswitch.conf in /etc and /usr/etc
- never run a debugging shell when KDUMP_CONTINUE_ON_ERROR is set
- calibrate: properly kill the tail process</changelog>
  <changelog author="jbohac@suse.com" date="1673352000">- improve the generation of calibrate.conf
  * use static IP address for calibration
  * all calibrate.conf variants now stored in a single file
  * added a README and a helper script for updating calibrate.conf
  * prevent dracut from running emergency shell
  * fix s390x build dependencies</changelog>
  <changelog author="jbohac@suse.com" date="1677240000">- revert back to using rd.neednet=1 to enable network (bsc#1206015)
- kdumptool calibrate: add even more margin to reservation
  calculations (bsc#1207061)
- run kdump.service only after kdump-early.service (bsc#1196335)
- don't skip infiniband interfaces (bsc#1186745)
  (not a complete fix, requires a patch in dracut as well)</changelog>
  <changelog author="jbohac@suse.com" date="1706097600">- dracut: always create fstab, even if empty (bsc#1218494)
- fix NOSPLIT option
- Honor the KDUMP_VERBOSE setting in kdump-save</changelog>
  <changelog author="jbohac@suse.com" date="1715860800">- spec: return success from pre, post, preun and postun scriplets
  (bsc#1222228, bsc#1191410)
- spec: differentiate between uninstall and upgrade in postun/preun
  (bsc#1191410)</changelog>
</package>
<package pkgid="5008932f43c161ee42fd53be8c56ee8854e33aa32dd9463dee04c0fb07f48649" name="kdump" arch="src">
  <version epoch="0" ver="1.0.2+git47.g28549ab" rel="150500.3.6.1"/>
  <changelog author="ptesarik@suse.com" date="1637841600">- kdump-Store-kdump-initrd-in-kernel-image-path.patch: Fix kdumprd
  location for usrmerge kernels (boo#1190920).</changelog>
  <changelog author="ptesarik@suse.com" date="1638964800">- Update to 0.9.2
  * Isolate fadump initrd within the default one (jsc#SLE-18272)
  * Bug fixes
  * Code cleanups
- Remove patches that have been upstreamed:
  * kdump-mounts.cc-Include-sys-ioctl.h.patch
  * kdump-Add-bootdev-to-dracut-command-line.patch
  * kdump-do-not-iterate-past-end-of-string.patch
  * kdump-fix-incorrect-exit-code-checking.patch
  * kdump-avoid-endless-loop-on-EAI_AGAIN.patch
  * kdump-install-real-resolv.conf.patch
  * kdump-Store-kdump-initrd-in-kernel-image-path.patch
- Remove patches that have been solved differently:
  * kdump-on-error-option-yesno.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1639051200">- Sync with SLE15-SP4 changelog. These patches were never applied
  to Factory:
  * kdump-avoid-endless-loop-EAI_AGAIN.patch
  * kdump-calibrate-Add-LUKS2-Argon2-requirements-to-the-reser.patch
  * kdump-calibrate-Fix-kernel-command-line-parsing.patch
  * kdump-do-not-add-rd.neednet.patch
  * kdump-Do-not-list-all-block-devices-if-no-block-devices-ar.patch
  * kdump-ensure-initrd.target.wants-directory.patch
  * kdump-Enumerate-all-BTRFS-devices-for-btrfs-mount-points.patch
  * kdump-Implement-KString-isHexNumber.patch
  * kdump-install-etc-resolv.conf-using-resolved-path.patch
  * kdump-Mount-and-device-resolution-using-libmount-and-lsblk.patch
  * kdump-remove-console-hvc0-from-commandline.patch
  * kdump-set-serial-console-from-Xen-cmdline.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1641211200">- kdump-0.9.2-mkdumprd-properly-pass-compression-params.patch: Fix
  malformation in passing Dracut compression parameters in mkdumprd
  (bsc#1193765).
- Refresh existing patches.</changelog>
  <changelog author="ptesarik@suse.com" date="1642766400">- Update to 1.0
  * Estimate kdump memory requirements at build time
    (jsc#SLE-18441).
- Remove patches that have been upstreamed:
  * kdump-0.9.2-mkdumprd-properly-pass-compression-params.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1642766401">- kdump-calibrate-Ignore-malformed-VMCOREINFO.patch: calibrate:
  Ignore malformed VMCOREINFO lines (address occasional OBS build
  failures).</changelog>
  <changelog author="ptesarik@suse.com" date="1643716800">- Update to 1.0.2
  * Adjust crash kernel reservation at boot time (jsc#SLE-18441).
- All remaining patches have been upstreamed:
  * kdump-fillupdir-fixes.patch
  * kdump-use-pbl.patch
  * kdump-calibrate-Ignore-malformed-VMCOREINFO.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1643716801">- kdump-calibrate.conf-depends-on-kdumptool.patch: calibrate.conf:
  Add dependency on kdumptool.
- kdump-calibrate-fix-nic-naming.patch: calibrate: Fix network
  interface naming.
- kdump-calibrate-include-af_packet.patch: calibrate: Explicitly
  include af_packet in the test initrd.</changelog>
  <changelog author="ptesarik@suse.com" date="1644321600">- Exclude i586 from SLE builds.</changelog>
  <changelog author="jbohac@suse.com" date="1648728000">- pull sources directly from git using obs_scm
- fix bsc#1190299, bsc#1186272
- remove patches included in upstream git:
  kdump-calibrate-include-af_packet.patch,
  kdump-calibrate-fix-nic-naming.patch,
  kdump-calibrate.conf-depends-on-kdumptool.patch</changelog>
  <changelog author="jbohac@suse.com" date="1651665600">- kdumptool calibrate: add more margin to reservation calculations
  (bsc#1196728)
- remount target filesystem r/w for fadump (bsc1197125)
- stop reloading FADump on CPU hot-add event (jsc#IBM-768)
- mkdumprd: add option to run dracut in debug mode</changelog>
  <changelog author="jbohac@suse.com" date="1663934400">- pull from new upstream SLE-15-SP5 branch
- copy SLE-15-SP4 calibration data for SLE-15-SP5</changelog>
  <changelog author="jbohac@suse.com" date="1666699200">- fix broken URL in manpage (bsc#1187312)
- kdumptool calibrate: modify fadump suggestions (jsc#IBM-1027)</changelog>
  <changelog author="jbohac@suse.com" date="1669118400">- fix renaming of qeth interfaces (bsc#1204743, bsc#1144337)
- ppc64: rebuild initrd image after migration (bsc#1191410)</changelog>
  <changelog author="jbohac@suse.com" date="1669377600">- Make the kdump-save.service reboot after kdump-save is finished
  (bsc#1204000)</changelog>
  <changelog author="jbohac@suse.com" date="1672833600">- maintain the spec file in git
- print the qemu messages and trackrss log during calibrate
- fix deleting of a temporary file in dracut/module-setup.sh
- look for nsswitch.conf in /etc and /usr/etc
- never run a debugging shell when KDUMP_CONTINUE_ON_ERROR is set
- calibrate: properly kill the tail process</changelog>
  <changelog author="jbohac@suse.com" date="1673352000">- improve the generation of calibrate.conf
  * use static IP address for calibration
  * all calibrate.conf variants now stored in a single file
  * added a README and a helper script for updating calibrate.conf
  * prevent dracut from running emergency shell
  * fix s390x build dependencies</changelog>
  <changelog author="jbohac@suse.com" date="1677240000">- revert back to using rd.neednet=1 to enable network (bsc#1206015)
- kdumptool calibrate: add even more margin to reservation
  calculations (bsc#1207061)
- run kdump.service only after kdump-early.service (bsc#1196335)
- don't skip infiniband interfaces (bsc#1186745)
  (not a complete fix, requires a patch in dracut as well)</changelog>
  <changelog author="jbohac@suse.com" date="1706097600">- dracut: always create fstab, even if empty (bsc#1218494)
- fix NOSPLIT option
- Honor the KDUMP_VERBOSE setting in kdump-save</changelog>
  <changelog author="jbohac@suse.com" date="1715860800">- spec: return success from pre, post, preun and postun scriplets
  (bsc#1222228, bsc#1191410)
- spec: differentiate between uninstall and upgrade in postun/preun
  (bsc#1191410)</changelog>
</package>
<package pkgid="d3b74267d149b050dbf12fa1d3b4026fc29dbe4c96356d8c1c7ff5c7c6c95237" name="kdump" arch="x86_64">
  <version epoch="0" ver="1.0.2+git47.g28549ab" rel="150500.3.6.1"/>
  <changelog author="ptesarik@suse.com" date="1637841600">- kdump-Store-kdump-initrd-in-kernel-image-path.patch: Fix kdumprd
  location for usrmerge kernels (boo#1190920).</changelog>
  <changelog author="ptesarik@suse.com" date="1638964800">- Update to 0.9.2
  * Isolate fadump initrd within the default one (jsc#SLE-18272)
  * Bug fixes
  * Code cleanups
- Remove patches that have been upstreamed:
  * kdump-mounts.cc-Include-sys-ioctl.h.patch
  * kdump-Add-bootdev-to-dracut-command-line.patch
  * kdump-do-not-iterate-past-end-of-string.patch
  * kdump-fix-incorrect-exit-code-checking.patch
  * kdump-avoid-endless-loop-on-EAI_AGAIN.patch
  * kdump-install-real-resolv.conf.patch
  * kdump-Store-kdump-initrd-in-kernel-image-path.patch
- Remove patches that have been solved differently:
  * kdump-on-error-option-yesno.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1639051200">- Sync with SLE15-SP4 changelog. These patches were never applied
  to Factory:
  * kdump-avoid-endless-loop-EAI_AGAIN.patch
  * kdump-calibrate-Add-LUKS2-Argon2-requirements-to-the-reser.patch
  * kdump-calibrate-Fix-kernel-command-line-parsing.patch
  * kdump-do-not-add-rd.neednet.patch
  * kdump-Do-not-list-all-block-devices-if-no-block-devices-ar.patch
  * kdump-ensure-initrd.target.wants-directory.patch
  * kdump-Enumerate-all-BTRFS-devices-for-btrfs-mount-points.patch
  * kdump-Implement-KString-isHexNumber.patch
  * kdump-install-etc-resolv.conf-using-resolved-path.patch
  * kdump-Mount-and-device-resolution-using-libmount-and-lsblk.patch
  * kdump-remove-console-hvc0-from-commandline.patch
  * kdump-set-serial-console-from-Xen-cmdline.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1641211200">- kdump-0.9.2-mkdumprd-properly-pass-compression-params.patch: Fix
  malformation in passing Dracut compression parameters in mkdumprd
  (bsc#1193765).
- Refresh existing patches.</changelog>
  <changelog author="ptesarik@suse.com" date="1642766400">- Update to 1.0
  * Estimate kdump memory requirements at build time
    (jsc#SLE-18441).
- Remove patches that have been upstreamed:
  * kdump-0.9.2-mkdumprd-properly-pass-compression-params.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1642766401">- kdump-calibrate-Ignore-malformed-VMCOREINFO.patch: calibrate:
  Ignore malformed VMCOREINFO lines (address occasional OBS build
  failures).</changelog>
  <changelog author="ptesarik@suse.com" date="1643716800">- Update to 1.0.2
  * Adjust crash kernel reservation at boot time (jsc#SLE-18441).
- All remaining patches have been upstreamed:
  * kdump-fillupdir-fixes.patch
  * kdump-use-pbl.patch
  * kdump-calibrate-Ignore-malformed-VMCOREINFO.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1643716801">- kdump-calibrate.conf-depends-on-kdumptool.patch: calibrate.conf:
  Add dependency on kdumptool.
- kdump-calibrate-fix-nic-naming.patch: calibrate: Fix network
  interface naming.
- kdump-calibrate-include-af_packet.patch: calibrate: Explicitly
  include af_packet in the test initrd.</changelog>
  <changelog author="ptesarik@suse.com" date="1644321600">- Exclude i586 from SLE builds.</changelog>
  <changelog author="jbohac@suse.com" date="1648728000">- pull sources directly from git using obs_scm
- fix bsc#1190299, bsc#1186272
- remove patches included in upstream git:
  kdump-calibrate-include-af_packet.patch,
  kdump-calibrate-fix-nic-naming.patch,
  kdump-calibrate.conf-depends-on-kdumptool.patch</changelog>
  <changelog author="jbohac@suse.com" date="1651665600">- kdumptool calibrate: add more margin to reservation calculations
  (bsc#1196728)
- remount target filesystem r/w for fadump (bsc1197125)
- stop reloading FADump on CPU hot-add event (jsc#IBM-768)
- mkdumprd: add option to run dracut in debug mode</changelog>
  <changelog author="jbohac@suse.com" date="1663934400">- pull from new upstream SLE-15-SP5 branch
- copy SLE-15-SP4 calibration data for SLE-15-SP5</changelog>
  <changelog author="jbohac@suse.com" date="1666699200">- fix broken URL in manpage (bsc#1187312)
- kdumptool calibrate: modify fadump suggestions (jsc#IBM-1027)</changelog>
  <changelog author="jbohac@suse.com" date="1669118400">- fix renaming of qeth interfaces (bsc#1204743, bsc#1144337)
- ppc64: rebuild initrd image after migration (bsc#1191410)</changelog>
  <changelog author="jbohac@suse.com" date="1669377600">- Make the kdump-save.service reboot after kdump-save is finished
  (bsc#1204000)</changelog>
  <changelog author="jbohac@suse.com" date="1672833600">- maintain the spec file in git
- print the qemu messages and trackrss log during calibrate
- fix deleting of a temporary file in dracut/module-setup.sh
- look for nsswitch.conf in /etc and /usr/etc
- never run a debugging shell when KDUMP_CONTINUE_ON_ERROR is set
- calibrate: properly kill the tail process</changelog>
  <changelog author="jbohac@suse.com" date="1673352000">- improve the generation of calibrate.conf
  * use static IP address for calibration
  * all calibrate.conf variants now stored in a single file
  * added a README and a helper script for updating calibrate.conf
  * prevent dracut from running emergency shell
  * fix s390x build dependencies</changelog>
  <changelog author="jbohac@suse.com" date="1677240000">- revert back to using rd.neednet=1 to enable network (bsc#1206015)
- kdumptool calibrate: add even more margin to reservation
  calculations (bsc#1207061)
- run kdump.service only after kdump-early.service (bsc#1196335)
- don't skip infiniband interfaces (bsc#1186745)
  (not a complete fix, requires a patch in dracut as well)</changelog>
  <changelog author="jbohac@suse.com" date="1706097600">- dracut: always create fstab, even if empty (bsc#1218494)
- fix NOSPLIT option
- Honor the KDUMP_VERBOSE setting in kdump-save</changelog>
  <changelog author="jbohac@suse.com" date="1715860800">- spec: return success from pre, post, preun and postun scriplets
  (bsc#1222228, bsc#1191410)
- spec: differentiate between uninstall and upgrade in postun/preun
  (bsc#1191410)</changelog>
</package>
<package pkgid="bab3e7c02fc1a4cab2318484c7845e69cdb21ab1fa3bacadcd0a0bbc3f0a2e2f" name="kernel-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.28.1"/>
  <changelog author="nmorey@suse.com" date="1693828800">- RDMA/siw: Correct wrong debug message (git-fixes)
- commit 3732fc1</changelog>
  <changelog author="nmorey@suse.com" date="1693828801">- RDMA/efa: Fix wrong resources deallocation order (git-fixes)
- commit c7f667b</changelog>
  <changelog author="nmorey@suse.com" date="1693828802">- scsi: RDMA/srp: Fix residual handling (git-fixes)
- commit 429e77b</changelog>
  <changelog author="mfranc@suse.cz" date="1693828803">- Refresh
  patches.suse/0002-nvme-tcp-fix-potential-unbalanced-freeze-unfreeze.patch.
- Refresh
  patches.suse/0003-nvme-rdma-fix-potential-unbalanced-freeze-unfreeze.patch.
- commit 452e63f</changelog>
  <changelog author="oneukum@suse.com" date="1693828804">- USB: core: Unite old scheme and new scheme descriptor reads
  (bsc#1213123 CVE-2023-37453).
- commit 9f60ef1</changelog>
  <changelog author="oneukum@suse.com" date="1693828805">- USB: core: Fix race by not overwriting udev-&gt;descriptor in
  hub_port_init() (bsc#1213123 CVE-2023-37453).
- commit a1f446d</changelog>
  <changelog author="mgorman@suse.de" date="1693828806">- blacklist.conf: Not a fix, relatively high risk of performance regression
- commit fd04425</changelog>
  <changelog author="oneukum@suse.com" date="1693828807">- USB: core: Fix oversight in SuperSpeed initialization
  (bsc#1213123 CVE-2023-37453).
- commit 6b6c148</changelog>
  <changelog author="mgorman@suse.de" date="1693828808">- sched/fair: Use recent_used_cpu to test p-&gt;cpus_ptr (git fixes).
- sched/fair: Fix inaccurate tally of ttwu_move_affine (git
  fixes).
- commit 4be7d48</changelog>
  <changelog author="tiwai@suse.de" date="1693915200">- cpufreq: Fix the race condition while updating the
  transition_task of policy (git-fixes).
- rpmsg: glink: Add check for kstrdup (git-fixes).
- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).
- leds: trigger: tty: Do not use LED_ON/OFF constants, use
  led_blink_set_oneshot instead (git-fixes).
- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always
  false (git-fixes).
- leds: multicolor: Use rounded division when calculating color
  components (git-fixes).
- leds: pwm: Fix error code in led_pwm_create_fwnode()
  (git-fixes).
- docs: printk-formats: Fix hex printing of signed values
  (git-fixes).
- commit 1c98d58</changelog>
  <changelog author="mfranc@suse.cz" date="1693915201">- s390/ipl: add missing secure/has_secure file to ipl type
  'unknown' (bsc#1214976).
- commit 33974e8</changelog>
  <changelog author="tzimmermann@suse.com" date="1693915202">- "drm/vmwgfx: Remove rcu locks from user resources" (bsc#1203329 CVE-2022-40133 bsc#1203330 CVE-2022-38457)
  This patch also fixes two CVEs. Update the References tag accordingly.
- commit 552e790</changelog>
  <changelog author="nik.borisov@suse.com" date="1693915203">- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
- commit 47ff352</changelog>
  <changelog author="mkubecek@suse.cz" date="1693915204">- netfilter: nf_tables: use correct lock to protect gc_list
  (CVE-2023-4563 bsc#1214727).
- netfilter: nf_tables: GC transaction race with abort path
  (CVE-2023-4563 bsc#1214727).
- netfilter: nf_tables: GC transaction race with netns dismantle
  (CVE-2023-4563 bsc#1214727).
- netfilter: nf_tables: fix GC transaction races with netns and
  netlink event exit path (CVE-2023-4563 bsc#1214727).
- netfilter: nf_tables: fix kdoc warnings after gc rework
  (CVE-2023-4563 bsc#1214727).
- refresh
  - patches.kabi/kabi-hide-changes-in-struct-nft_set.patch
- kabi: hide changes in struct nft_set (CVE-2023-4563
  bsc#1214727).
- netfilter: nf_tables: GC transaction API to avoid race with
  control plane (CVE-2023-4563 bsc#1214727).
- commit cfed41c</changelog>
  <changelog author="msuchanek@suse.de" date="1693915205">- Refresh sorted section
- commit a6fbcee</changelog>
  <changelog author="msuchanek@suse.de" date="1693915206">- powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051).
- commit ac82be8</changelog>
  <changelog author="jlee@suse.com" date="1694001600">- Update References
  patches.suse/Bluetooth-L2CAP-Fix-use-after-free-in-l2cap_sock_rea.patch
  (git-fixes bsc#1214233 CVE-2023-40283).
- commit 63a801c</changelog>
  <changelog author="jkosina@suse.cz" date="1695297600">- USB: core: Change usb_get_device_descriptor() API (bsc#1213123
  CVE-2023-37453 bsc#1215553 bsc#1215522 bsc#1215552).
  Refresh patches.suse/USB-core-Fix-race-by-not-overwriting-udev-descriptor.patch (add missing hunk)
  Refresh patches.suse/USB-core-Fix-oversight-in-SuperSpeed-initialization.patch (context)
- commit be6100d</changelog>
  <changelog author="osalvador@suse.de" date="1695297601">- Drop amdgpu patch causing spamming (bsc#1215523)
  Deleted:
  patches.suse/drm-amdgpu-install-stub-fence-into-potential-unused-.patch.
- commit 2351f50</changelog>
  <changelog author="osalvador@suse.de" date="1695384000">- x86/sev: Make enc_dec_hypercall() accept a size instead of
  npages (bsc#1214635).
- commit c11336f</changelog>
</package>
<package pkgid="b2339af15aaaaf7c8dab29ca25b7072542bf58ea4e5578f046c0b63c521bdc27" name="kernel-default" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.55.28.1"/>
  <changelog author="nmorey@suse.com" date="1693828800">- RDMA/siw: Correct wrong debug message (git-fixes)
- commit 3732fc1</changelog>
  <changelog author="nmorey@suse.com" date="1693828801">- RDMA/efa: Fix wrong resources deallocation order (git-fixes)
- commit c7f667b</changelog>
  <changelog author="nmorey@suse.com" date="1693828802">- scsi: RDMA/srp: Fix residual handling (git-fixes)
- commit 429e77b</changelog>
  <changelog author="mfranc@suse.cz" date="1693828803">- Refresh
  patches.suse/0002-nvme-tcp-fix-potential-unbalanced-freeze-unfreeze.patch.
- Refresh
  patches.suse/0003-nvme-rdma-fix-potential-unbalanced-freeze-unfreeze.patch.
- commit 452e63f</changelog>
  <changelog author="oneukum@suse.com" date="1693828804">- USB: core: Unite old scheme and new scheme descriptor reads
  (bsc#1213123 CVE-2023-37453).
- commit 9f60ef1</changelog>
  <changelog author="oneukum@suse.com" date="1693828805">- USB: core: Fix race by not overwriting udev-&gt;descriptor in
  hub_port_init() (bsc#1213123 CVE-2023-37453).
- commit a1f446d</changelog>
  <changelog author="mgorman@suse.de" date="1693828806">- blacklist.conf: Not a fix, relatively high risk of performance regression
- commit fd04425</changelog>
  <changelog author="oneukum@suse.com" date="1693828807">- USB: core: Fix oversight in SuperSpeed initialization
  (bsc#1213123 CVE-2023-37453).
- commit 6b6c148</changelog>
  <changelog author="mgorman@suse.de" date="1693828808">- sched/fair: Use recent_used_cpu to test p-&gt;cpus_ptr (git fixes).
- sched/fair: Fix inaccurate tally of ttwu_move_affine (git
  fixes).
- commit 4be7d48</changelog>
  <changelog author="tiwai@suse.de" date="1693915200">- cpufreq: Fix the race condition while updating the
  transition_task of policy (git-fixes).
- rpmsg: glink: Add check for kstrdup (git-fixes).
- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).
- leds: trigger: tty: Do not use LED_ON/OFF constants, use
  led_blink_set_oneshot instead (git-fixes).
- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always
  false (git-fixes).
- leds: multicolor: Use rounded division when calculating color
  components (git-fixes).
- leds: pwm: Fix error code in led_pwm_create_fwnode()
  (git-fixes).
- docs: printk-formats: Fix hex printing of signed values
  (git-fixes).
- commit 1c98d58</changelog>
  <changelog author="mfranc@suse.cz" date="1693915201">- s390/ipl: add missing secure/has_secure file to ipl type
  'unknown' (bsc#1214976).
- commit 33974e8</changelog>
  <changelog author="tzimmermann@suse.com" date="1693915202">- "drm/vmwgfx: Remove rcu locks from user resources" (bsc#1203329 CVE-2022-40133 bsc#1203330 CVE-2022-38457)
  This patch also fixes two CVEs. Update the References tag accordingly.
- commit 552e790</changelog>
  <changelog author="nik.borisov@suse.com" date="1693915203">- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
- commit 47ff352</changelog>
  <changelog author="mkubecek@suse.cz" date="1693915204">- netfilter: nf_tables: use correct lock to protect gc_list
  (CVE-2023-4563 bsc#1214727).
- netfilter: nf_tables: GC transaction race with abort path
  (CVE-2023-4563 bsc#1214727).
- netfilter: nf_tables: GC transaction race with netns dismantle
  (CVE-2023-4563 bsc#1214727).
- netfilter: nf_tables: fix GC transaction races with netns and
  netlink event exit path (CVE-2023-4563 bsc#1214727).
- netfilter: nf_tables: fix kdoc warnings after gc rework
  (CVE-2023-4563 bsc#1214727).
- refresh
  - patches.kabi/kabi-hide-changes-in-struct-nft_set.patch
- kabi: hide changes in struct nft_set (CVE-2023-4563
  bsc#1214727).
- netfilter: nf_tables: GC transaction API to avoid race with
  control plane (CVE-2023-4563 bsc#1214727).
- commit cfed41c</changelog>
  <changelog author="msuchanek@suse.de" date="1693915205">- Refresh sorted section
- commit a6fbcee</changelog>
  <changelog author="msuchanek@suse.de" date="1693915206">- powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051).
- commit ac82be8</changelog>
  <changelog author="jlee@suse.com" date="1694001600">- Update References
  patches.suse/Bluetooth-L2CAP-Fix-use-after-free-in-l2cap_sock_rea.patch
  (git-fixes bsc#1214233 CVE-2023-40283).
- commit 63a801c</changelog>
  <changelog author="jkosina@suse.cz" date="1695297600">- USB: core: Change usb_get_device_descriptor() API (bsc#1213123
  CVE-2023-37453 bsc#1215553 bsc#1215522 bsc#1215552).
  Refresh patches.suse/USB-core-Fix-race-by-not-overwriting-udev-descriptor.patch (add missing hunk)
  Refresh patches.suse/USB-core-Fix-oversight-in-SuperSpeed-initialization.patch (context)
- commit be6100d</changelog>
  <changelog author="osalvador@suse.de" date="1695297601">- Drop amdgpu patch causing spamming (bsc#1215523)
  Deleted:
  patches.suse/drm-amdgpu-install-stub-fence-into-potential-unused-.patch.
- commit 2351f50</changelog>
  <changelog author="osalvador@suse.de" date="1695384000">- x86/sev: Make enc_dec_hypercall() accept a size instead of
  npages (bsc#1214635).
- commit c11336f</changelog>
</package>
<package pkgid="78ac205ab03cecedfe7e1e3553c801dce1c91037ca403a48f4d7051c56eee00a" name="kernel-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150500.55.28.1"/>
  <changelog author="nmorey@suse.com" date="1693828800">- RDMA/siw: Correct wrong debug message (git-fixes)
- commit 3732fc1</changelog>
  <changelog author="nmorey@suse.com" date="1693828801">- RDMA/efa: Fix wrong resources deallocation order (git-fixes)
- commit c7f667b</changelog>
  <changelog author="nmorey@suse.com" date="1693828802">- scsi: RDMA/srp: Fix residual handling (git-fixes)
- commit 429e77b</changelog>
  <changelog author="mfranc@suse.cz" date="1693828803">- Refresh
  patches.suse/0002-nvme-tcp-fix-potential-unbalanced-freeze-unfreeze.patch.
- Refresh
  patches.suse/0003-nvme-rdma-fix-potential-unbalanced-freeze-unfreeze.patch.
- commit 452e63f</changelog>
  <changelog author="oneukum@suse.com" date="1693828804">- USB: core: Unite old scheme and new scheme descriptor reads
  (bsc#1213123 CVE-2023-37453).
- commit 9f60ef1</changelog>
  <changelog author="oneukum@suse.com" date="1693828805">- USB: core: Fix race by not overwriting udev-&gt;descriptor in
  hub_port_init() (bsc#1213123 CVE-2023-37453).
- commit a1f446d</changelog>
  <changelog author="mgorman@suse.de" date="1693828806">- blacklist.conf: Not a fix, relatively high risk of performance regression
- commit fd04425</changelog>
  <changelog author="oneukum@suse.com" date="1693828807">- USB: core: Fix oversight in SuperSpeed initialization
  (bsc#1213123 CVE-2023-37453).
- commit 6b6c148</changelog>
  <changelog author="mgorman@suse.de" date="1693828808">- sched/fair: Use recent_used_cpu to test p-&gt;cpus_ptr (git fixes).
- sched/fair: Fix inaccurate tally of ttwu_move_affine (git
  fixes).
- commit 4be7d48</changelog>
  <changelog author="tiwai@suse.de" date="1693915200">- cpufreq: Fix the race condition while updating the
  transition_task of policy (git-fixes).
- rpmsg: glink: Add check for kstrdup (git-fixes).
- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).
- leds: trigger: tty: Do not use LED_ON/OFF constants, use
  led_blink_set_oneshot instead (git-fixes).
- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always
  false (git-fixes).
- leds: multicolor: Use rounded division when calculating color
  components (git-fixes).
- leds: pwm: Fix error code in led_pwm_create_fwnode()
  (git-fixes).
- docs: printk-formats: Fix hex printing of signed values
  (git-fixes).
- commit 1c98d58</changelog>
  <changelog author="mfranc@suse.cz" date="1693915201">- s390/ipl: add missing secure/has_secure file to ipl type
  'unknown' (bsc#1214976).
- commit 33974e8</changelog>
  <changelog author="tzimmermann@suse.com" date="1693915202">- "drm/vmwgfx: Remove rcu locks from user resources" (bsc#1203329 CVE-2022-40133 bsc#1203330 CVE-2022-38457)
  This patch also fixes two CVEs. Update the References tag accordingly.
- commit 552e790</changelog>
  <changelog author="nik.borisov@suse.com" date="1693915203">- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
- commit 47ff352</changelog>
  <changelog author="mkubecek@suse.cz" date="1693915204">- netfilter: nf_tables: use correct lock to protect gc_list
  (CVE-2023-4563 bsc#1214727).
- netfilter: nf_tables: GC transaction race with abort path
  (CVE-2023-4563 bsc#1214727).
- netfilter: nf_tables: GC transaction race with netns dismantle
  (CVE-2023-4563 bsc#1214727).
- netfilter: nf_tables: fix GC transaction races with netns and
  netlink event exit path (CVE-2023-4563 bsc#1214727).
- netfilter: nf_tables: fix kdoc warnings after gc rework
  (CVE-2023-4563 bsc#1214727).
- refresh
  - patches.kabi/kabi-hide-changes-in-struct-nft_set.patch
- kabi: hide changes in struct nft_set (CVE-2023-4563
  bsc#1214727).
- netfilter: nf_tables: GC transaction API to avoid race with
  control plane (CVE-2023-4563 bsc#1214727).
- commit cfed41c</changelog>
  <changelog author="msuchanek@suse.de" date="1693915205">- Refresh sorted section
- commit a6fbcee</changelog>
  <changelog author="msuchanek@suse.de" date="1693915206">- powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051).
- commit ac82be8</changelog>
  <changelog author="jlee@suse.com" date="1694001600">- Update References
  patches.suse/Bluetooth-L2CAP-Fix-use-after-free-in-l2cap_sock_rea.patch
  (git-fixes bsc#1214233 CVE-2023-40283).
- commit 63a801c</changelog>
  <changelog author="jkosina@suse.cz" date="1695297600">- USB: core: Change usb_get_device_descriptor() API (bsc#1213123
  CVE-2023-37453 bsc#1215553 bsc#1215522 bsc#1215552).
  Refresh patches.suse/USB-core-Fix-race-by-not-overwriting-udev-descriptor.patch (add missing hunk)
  Refresh patches.suse/USB-core-Fix-oversight-in-SuperSpeed-initialization.patch (context)
- commit be6100d</changelog>
  <changelog author="osalvador@suse.de" date="1695297601">- Drop amdgpu patch causing spamming (bsc#1215523)
  Deleted:
  patches.suse/drm-amdgpu-install-stub-fence-into-potential-unused-.patch.
- commit 2351f50</changelog>
  <changelog author="osalvador@suse.de" date="1695384000">- x86/sev: Make enc_dec_hypercall() accept a size instead of
  npages (bsc#1214635).
- commit c11336f</changelog>
</package>
<package pkgid="3f709658cfdb74bc4827353ef975373b7617aed058d0c14f1bc5b8c88994220f" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.55.28.1"/>
  <changelog author="nmorey@suse.com" date="1693828800">- RDMA/siw: Correct wrong debug message (git-fixes)
- commit 3732fc1</changelog>
  <changelog author="nmorey@suse.com" date="1693828801">- RDMA/efa: Fix wrong resources deallocation order (git-fixes)
- commit c7f667b</changelog>
  <changelog author="nmorey@suse.com" date="1693828802">- scsi: RDMA/srp: Fix residual handling (git-fixes)
- commit 429e77b</changelog>
  <changelog author="mfranc@suse.cz" date="1693828803">- Refresh
  patches.suse/0002-nvme-tcp-fix-potential-unbalanced-freeze-unfreeze.patch.
- Refresh
  patches.suse/0003-nvme-rdma-fix-potential-unbalanced-freeze-unfreeze.patch.
- commit 452e63f</changelog>
  <changelog author="oneukum@suse.com" date="1693828804">- USB: core: Unite old scheme and new scheme descriptor reads
  (bsc#1213123 CVE-2023-37453).
- commit 9f60ef1</changelog>
  <changelog author="oneukum@suse.com" date="1693828805">- USB: core: Fix race by not overwriting udev-&gt;descriptor in
  hub_port_init() (bsc#1213123 CVE-2023-37453).
- commit a1f446d</changelog>
  <changelog author="mgorman@suse.de" date="1693828806">- blacklist.conf: Not a fix, relatively high risk of performance regression
- commit fd04425</changelog>
  <changelog author="oneukum@suse.com" date="1693828807">- USB: core: Fix oversight in SuperSpeed initialization
  (bsc#1213123 CVE-2023-37453).
- commit 6b6c148</changelog>
  <changelog author="mgorman@suse.de" date="1693828808">- sched/fair: Use recent_used_cpu to test p-&gt;cpus_ptr (git fixes).
- sched/fair: Fix inaccurate tally of ttwu_move_affine (git
  fixes).
- commit 4be7d48</changelog>
  <changelog author="tiwai@suse.de" date="1693915200">- cpufreq: Fix the race condition while updating the
  transition_task of policy (git-fixes).
- rpmsg: glink: Add check for kstrdup (git-fixes).
- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).
- leds: trigger: tty: Do not use LED_ON/OFF constants, use
  led_blink_set_oneshot instead (git-fixes).
- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always
  false (git-fixes).
- leds: multicolor: Use rounded division when calculating color
  components (git-fixes).
- leds: pwm: Fix error code in led_pwm_create_fwnode()
  (git-fixes).
- docs: printk-formats: Fix hex printing of signed values
  (git-fixes).
- commit 1c98d58</changelog>
  <changelog author="mfranc@suse.cz" date="1693915201">- s390/ipl: add missing secure/has_secure file to ipl type
  'unknown' (bsc#1214976).
- commit 33974e8</changelog>
  <changelog author="tzimmermann@suse.com" date="1693915202">- "drm/vmwgfx: Remove rcu locks from user resources" (bsc#1203329 CVE-2022-40133 bsc#1203330 CVE-2022-38457)
  This patch also fixes two CVEs. Update the References tag accordingly.
- commit 552e790</changelog>
  <changelog author="nik.borisov@suse.com" date="1693915203">- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
- commit 47ff352</changelog>
  <changelog author="mkubecek@suse.cz" date="1693915204">- netfilter: nf_tables: use correct lock to protect gc_list
  (CVE-2023-4563 bsc#1214727).
- netfilter: nf_tables: GC transaction race with abort path
  (CVE-2023-4563 bsc#1214727).
- netfilter: nf_tables: GC transaction race with netns dismantle
  (CVE-2023-4563 bsc#1214727).
- netfilter: nf_tables: fix GC transaction races with netns and
  netlink event exit path (CVE-2023-4563 bsc#1214727).
- netfilter: nf_tables: fix kdoc warnings after gc rework
  (CVE-2023-4563 bsc#1214727).
- refresh
  - patches.kabi/kabi-hide-changes-in-struct-nft_set.patch
- kabi: hide changes in struct nft_set (CVE-2023-4563
  bsc#1214727).
- netfilter: nf_tables: GC transaction API to avoid race with
  control plane (CVE-2023-4563 bsc#1214727).
- commit cfed41c</changelog>
  <changelog author="msuchanek@suse.de" date="1693915205">- Refresh sorted section
- commit a6fbcee</changelog>
  <changelog author="msuchanek@suse.de" date="1693915206">- powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051).
- commit ac82be8</changelog>
  <changelog author="jlee@suse.com" date="1694001600">- Update References
  patches.suse/Bluetooth-L2CAP-Fix-use-after-free-in-l2cap_sock_rea.patch
  (git-fixes bsc#1214233 CVE-2023-40283).
- commit 63a801c</changelog>
  <changelog author="jkosina@suse.cz" date="1695297600">- USB: core: Change usb_get_device_descriptor() API (bsc#1213123
  CVE-2023-37453 bsc#1215553 bsc#1215522 bsc#1215552).
  Refresh patches.suse/USB-core-Fix-race-by-not-overwriting-udev-descriptor.patch (add missing hunk)
  Refresh patches.suse/USB-core-Fix-oversight-in-SuperSpeed-initialization.patch (context)
- commit be6100d</changelog>
  <changelog author="osalvador@suse.de" date="1695297601">- Drop amdgpu patch causing spamming (bsc#1215523)
  Deleted:
  patches.suse/drm-amdgpu-install-stub-fence-into-potential-unused-.patch.
- commit 2351f50</changelog>
  <changelog author="osalvador@suse.de" date="1695384000">- x86/sev: Make enc_dec_hypercall() accept a size instead of
  npages (bsc#1214635).
- commit c11336f</changelog>
</package>
<package pkgid="47ac15b2c93efbf33364034ea112f4244948c36e25bfc38e6945a3901a906d5c" name="kernel-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.31.1"/>
  <changelog author="pmladek@suse.com" date="1696248000">- printk: ringbuffer: Fix truncating buffer size min_t cast
  (bsc#1215875).
- commit e0d3999</changelog>
  <changelog author="pmladek@suse.com" date="1696248001">- blacklist.conf: printk: the changes look good but they do not fix
  any serious problem
- commit c560ceb</changelog>
  <changelog author="pmladek@suse.com" date="1696248002">- blacklist.conf: workqueue: Code refactoring
- commit e204334</changelog>
  <changelog author="pmladek@suse.com" date="1696248003">- blacklist.conf: workqueue: compiler warning on 32-bit systems with
  Clang (bsc#1215877)
- commit b7e65aa</changelog>
  <changelog author="mkubecek@suse.cz" date="1696334400">- tcp: Reduce chance of collisions in inet6_hashfn()
  (CVE-2023-1206 bsc#1212703).
- commit e3ebd17</changelog>
  <changelog author="mkubecek@suse.cz" date="1696334401">- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro
  for ip_set_hash_netportnet.c (CVE-2023-42753 bsc#1215150).
- commit 7a6be79</changelog>
  <changelog author="mfranc@suse.cz" date="1696334402">- KVM: s390: vsie: Fix the initialization of the epoch extension
  (epdx) field (git-fixes bsc#1215894).
- commit 9c5bbd7</changelog>
  <changelog author="mfranc@suse.cz" date="1696334403">- KVM: s390: vsie: fix the length of APCB bitmap (git-fixes
  bsc#1215895).
- commit 9ff1a1e</changelog>
  <changelog author="mfranc@suse.cz" date="1696334404">- KVM: s390: interrupt: use READ_ONCE() before cmpxchg()
  (git-fixes bsc#1215896).
- commit 8726736</changelog>
  <changelog author="mfranc@suse.cz" date="1696334405">- blacklist.conf: kABi breakage (vmalloc)
- commit 10bad47</changelog>
  <changelog author="palcantara@suse.de" date="1696334406">- fs/smb/client: Reset password pointer to NULL (bsc#1215899
  CVE-2023-5345).
- commit 679511d</changelog>
  <changelog author="mfranc@suse.cz" date="1696334407">- KVM: s390/diag: fix racy access of physical cpu number in diag
  9c handler (git-fixes bsc#1215911).
- commit 6454286</changelog>
  <changelog author="mfranc@suse.cz" date="1696334408">- KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes
  (git-fixes bsc#1215915).
- commit fe7fbfc</changelog>
  <changelog author="jdelvare@suse.de" date="1696334409">- btrfs: fix root ref counts in error handling in
  btrfs_get_root_ref (bsc#1214351 CVE-2023-4389).
- commit 3731029</changelog>
  <changelog author="mfranc@suse.cz" date="1696334410">- KVM: s390: pv: fix external interruption loop not always
  detected (git-fixes bsc#1215916).
- commit f1893aa</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420800">- ipv4: fix null-deref in ipv4_link_failure (CVE-2023-42754
  bsc#1215467).
- commit ad87dd3</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420801">- netfilter: xt_u32: validate user space input (CVE-2023-39192
  bsc#1215858).
- commit 292c059</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420802">- netfilter: xt_sctp: validate the flag_info count (CVE-2023-39193
  bsc#1215860).
- commit 5ec24b7</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420803">- net: xfrm: Fix xfrm_address_filter OOB read (CVE-2023-39194
  bsc#1215861).
- commit 55308cb</changelog>
  <changelog author="mfranc@suse.cz" date="1696420804">- scsi: zfcp: Fix a double put in zfcp_port_enqueue() (git-fixes
  bsc#1215941).
- commit a62865f</changelog>
</package>
<package pkgid="ebdc69c212da995a28f9254bb0b60191d7aa475dd80791fbbdecbb46a419e764" name="kernel-default" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.55.31.1"/>
  <changelog author="pmladek@suse.com" date="1696248000">- printk: ringbuffer: Fix truncating buffer size min_t cast
  (bsc#1215875).
- commit e0d3999</changelog>
  <changelog author="pmladek@suse.com" date="1696248001">- blacklist.conf: printk: the changes look good but they do not fix
  any serious problem
- commit c560ceb</changelog>
  <changelog author="pmladek@suse.com" date="1696248002">- blacklist.conf: workqueue: Code refactoring
- commit e204334</changelog>
  <changelog author="pmladek@suse.com" date="1696248003">- blacklist.conf: workqueue: compiler warning on 32-bit systems with
  Clang (bsc#1215877)
- commit b7e65aa</changelog>
  <changelog author="mkubecek@suse.cz" date="1696334400">- tcp: Reduce chance of collisions in inet6_hashfn()
  (CVE-2023-1206 bsc#1212703).
- commit e3ebd17</changelog>
  <changelog author="mkubecek@suse.cz" date="1696334401">- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro
  for ip_set_hash_netportnet.c (CVE-2023-42753 bsc#1215150).
- commit 7a6be79</changelog>
  <changelog author="mfranc@suse.cz" date="1696334402">- KVM: s390: vsie: Fix the initialization of the epoch extension
  (epdx) field (git-fixes bsc#1215894).
- commit 9c5bbd7</changelog>
  <changelog author="mfranc@suse.cz" date="1696334403">- KVM: s390: vsie: fix the length of APCB bitmap (git-fixes
  bsc#1215895).
- commit 9ff1a1e</changelog>
  <changelog author="mfranc@suse.cz" date="1696334404">- KVM: s390: interrupt: use READ_ONCE() before cmpxchg()
  (git-fixes bsc#1215896).
- commit 8726736</changelog>
  <changelog author="mfranc@suse.cz" date="1696334405">- blacklist.conf: kABi breakage (vmalloc)
- commit 10bad47</changelog>
  <changelog author="palcantara@suse.de" date="1696334406">- fs/smb/client: Reset password pointer to NULL (bsc#1215899
  CVE-2023-5345).
- commit 679511d</changelog>
  <changelog author="mfranc@suse.cz" date="1696334407">- KVM: s390/diag: fix racy access of physical cpu number in diag
  9c handler (git-fixes bsc#1215911).
- commit 6454286</changelog>
  <changelog author="mfranc@suse.cz" date="1696334408">- KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes
  (git-fixes bsc#1215915).
- commit fe7fbfc</changelog>
  <changelog author="jdelvare@suse.de" date="1696334409">- btrfs: fix root ref counts in error handling in
  btrfs_get_root_ref (bsc#1214351 CVE-2023-4389).
- commit 3731029</changelog>
  <changelog author="mfranc@suse.cz" date="1696334410">- KVM: s390: pv: fix external interruption loop not always
  detected (git-fixes bsc#1215916).
- commit f1893aa</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420800">- ipv4: fix null-deref in ipv4_link_failure (CVE-2023-42754
  bsc#1215467).
- commit ad87dd3</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420801">- netfilter: xt_u32: validate user space input (CVE-2023-39192
  bsc#1215858).
- commit 292c059</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420802">- netfilter: xt_sctp: validate the flag_info count (CVE-2023-39193
  bsc#1215860).
- commit 5ec24b7</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420803">- net: xfrm: Fix xfrm_address_filter OOB read (CVE-2023-39194
  bsc#1215861).
- commit 55308cb</changelog>
  <changelog author="mfranc@suse.cz" date="1696420804">- scsi: zfcp: Fix a double put in zfcp_port_enqueue() (git-fixes
  bsc#1215941).
- commit a62865f</changelog>
</package>
<package pkgid="9d4acec134768b920ea41e5f397e8c235c68d7bb64188463cb040b9f9ff464e7" name="kernel-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150500.55.31.1"/>
  <changelog author="pmladek@suse.com" date="1696248000">- printk: ringbuffer: Fix truncating buffer size min_t cast
  (bsc#1215875).
- commit e0d3999</changelog>
  <changelog author="pmladek@suse.com" date="1696248001">- blacklist.conf: printk: the changes look good but they do not fix
  any serious problem
- commit c560ceb</changelog>
  <changelog author="pmladek@suse.com" date="1696248002">- blacklist.conf: workqueue: Code refactoring
- commit e204334</changelog>
  <changelog author="pmladek@suse.com" date="1696248003">- blacklist.conf: workqueue: compiler warning on 32-bit systems with
  Clang (bsc#1215877)
- commit b7e65aa</changelog>
  <changelog author="mkubecek@suse.cz" date="1696334400">- tcp: Reduce chance of collisions in inet6_hashfn()
  (CVE-2023-1206 bsc#1212703).
- commit e3ebd17</changelog>
  <changelog author="mkubecek@suse.cz" date="1696334401">- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro
  for ip_set_hash_netportnet.c (CVE-2023-42753 bsc#1215150).
- commit 7a6be79</changelog>
  <changelog author="mfranc@suse.cz" date="1696334402">- KVM: s390: vsie: Fix the initialization of the epoch extension
  (epdx) field (git-fixes bsc#1215894).
- commit 9c5bbd7</changelog>
  <changelog author="mfranc@suse.cz" date="1696334403">- KVM: s390: vsie: fix the length of APCB bitmap (git-fixes
  bsc#1215895).
- commit 9ff1a1e</changelog>
  <changelog author="mfranc@suse.cz" date="1696334404">- KVM: s390: interrupt: use READ_ONCE() before cmpxchg()
  (git-fixes bsc#1215896).
- commit 8726736</changelog>
  <changelog author="mfranc@suse.cz" date="1696334405">- blacklist.conf: kABi breakage (vmalloc)
- commit 10bad47</changelog>
  <changelog author="palcantara@suse.de" date="1696334406">- fs/smb/client: Reset password pointer to NULL (bsc#1215899
  CVE-2023-5345).
- commit 679511d</changelog>
  <changelog author="mfranc@suse.cz" date="1696334407">- KVM: s390/diag: fix racy access of physical cpu number in diag
  9c handler (git-fixes bsc#1215911).
- commit 6454286</changelog>
  <changelog author="mfranc@suse.cz" date="1696334408">- KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes
  (git-fixes bsc#1215915).
- commit fe7fbfc</changelog>
  <changelog author="jdelvare@suse.de" date="1696334409">- btrfs: fix root ref counts in error handling in
  btrfs_get_root_ref (bsc#1214351 CVE-2023-4389).
- commit 3731029</changelog>
  <changelog author="mfranc@suse.cz" date="1696334410">- KVM: s390: pv: fix external interruption loop not always
  detected (git-fixes bsc#1215916).
- commit f1893aa</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420800">- ipv4: fix null-deref in ipv4_link_failure (CVE-2023-42754
  bsc#1215467).
- commit ad87dd3</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420801">- netfilter: xt_u32: validate user space input (CVE-2023-39192
  bsc#1215858).
- commit 292c059</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420802">- netfilter: xt_sctp: validate the flag_info count (CVE-2023-39193
  bsc#1215860).
- commit 5ec24b7</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420803">- net: xfrm: Fix xfrm_address_filter OOB read (CVE-2023-39194
  bsc#1215861).
- commit 55308cb</changelog>
  <changelog author="mfranc@suse.cz" date="1696420804">- scsi: zfcp: Fix a double put in zfcp_port_enqueue() (git-fixes
  bsc#1215941).
- commit a62865f</changelog>
</package>
<package pkgid="ba5dd593e52ae94846d9ee8aa9051f1f69a42c7a653df83226969e01c5c8ba60" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.55.31.1"/>
  <changelog author="pmladek@suse.com" date="1696248000">- printk: ringbuffer: Fix truncating buffer size min_t cast
  (bsc#1215875).
- commit e0d3999</changelog>
  <changelog author="pmladek@suse.com" date="1696248001">- blacklist.conf: printk: the changes look good but they do not fix
  any serious problem
- commit c560ceb</changelog>
  <changelog author="pmladek@suse.com" date="1696248002">- blacklist.conf: workqueue: Code refactoring
- commit e204334</changelog>
  <changelog author="pmladek@suse.com" date="1696248003">- blacklist.conf: workqueue: compiler warning on 32-bit systems with
  Clang (bsc#1215877)
- commit b7e65aa</changelog>
  <changelog author="mkubecek@suse.cz" date="1696334400">- tcp: Reduce chance of collisions in inet6_hashfn()
  (CVE-2023-1206 bsc#1212703).
- commit e3ebd17</changelog>
  <changelog author="mkubecek@suse.cz" date="1696334401">- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro
  for ip_set_hash_netportnet.c (CVE-2023-42753 bsc#1215150).
- commit 7a6be79</changelog>
  <changelog author="mfranc@suse.cz" date="1696334402">- KVM: s390: vsie: Fix the initialization of the epoch extension
  (epdx) field (git-fixes bsc#1215894).
- commit 9c5bbd7</changelog>
  <changelog author="mfranc@suse.cz" date="1696334403">- KVM: s390: vsie: fix the length of APCB bitmap (git-fixes
  bsc#1215895).
- commit 9ff1a1e</changelog>
  <changelog author="mfranc@suse.cz" date="1696334404">- KVM: s390: interrupt: use READ_ONCE() before cmpxchg()
  (git-fixes bsc#1215896).
- commit 8726736</changelog>
  <changelog author="mfranc@suse.cz" date="1696334405">- blacklist.conf: kABi breakage (vmalloc)
- commit 10bad47</changelog>
  <changelog author="palcantara@suse.de" date="1696334406">- fs/smb/client: Reset password pointer to NULL (bsc#1215899
  CVE-2023-5345).
- commit 679511d</changelog>
  <changelog author="mfranc@suse.cz" date="1696334407">- KVM: s390/diag: fix racy access of physical cpu number in diag
  9c handler (git-fixes bsc#1215911).
- commit 6454286</changelog>
  <changelog author="mfranc@suse.cz" date="1696334408">- KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes
  (git-fixes bsc#1215915).
- commit fe7fbfc</changelog>
  <changelog author="jdelvare@suse.de" date="1696334409">- btrfs: fix root ref counts in error handling in
  btrfs_get_root_ref (bsc#1214351 CVE-2023-4389).
- commit 3731029</changelog>
  <changelog author="mfranc@suse.cz" date="1696334410">- KVM: s390: pv: fix external interruption loop not always
  detected (git-fixes bsc#1215916).
- commit f1893aa</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420800">- ipv4: fix null-deref in ipv4_link_failure (CVE-2023-42754
  bsc#1215467).
- commit ad87dd3</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420801">- netfilter: xt_u32: validate user space input (CVE-2023-39192
  bsc#1215858).
- commit 292c059</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420802">- netfilter: xt_sctp: validate the flag_info count (CVE-2023-39193
  bsc#1215860).
- commit 5ec24b7</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420803">- net: xfrm: Fix xfrm_address_filter OOB read (CVE-2023-39194
  bsc#1215861).
- commit 55308cb</changelog>
  <changelog author="mfranc@suse.cz" date="1696420804">- scsi: zfcp: Fix a double put in zfcp_port_enqueue() (git-fixes
  bsc#1215941).
- commit a62865f</changelog>
</package>
<package pkgid="ee15266a69a448e330553a24454e658e8a0f2ecbe6e1e0a6c6a1f4472ef85fca" name="kernel-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.36.1"/>
  <changelog author="mfranc@suse.cz" date="1698062400">- s390/pci: fix iommu bitmap allocation (git-fixes bsc#1216511).
- commit 2bb6835</changelog>
  <changelog author="mfranc@suse.cz" date="1698062401">- KVM: s390: fix gisa destroy operation might lead to cpu stalls
  (git-fixes bsc#1216512).
- commit 3976fa9</changelog>
  <changelog author="oneukum@suse.com" date="1698148800">- Update
  patches.suse/USB-ene_usb6250-Allocate-enough-memory-for-full-obje.patch
  (bsc#1216051 CVE-2023-45862).
  Retroactively recognized as a security issue
- commit 716929e</changelog>
  <changelog author="tiwai@suse.de" date="1698148801">- ubi: Refuse attaching if mtd's erasesize is 0 (CVE-2023-31085
  bsc#1210778).
- commit 86e05f1</changelog>
  <changelog author="mwilck@suse.com" date="1698148802">- nvme-fc: Prevent null pointer dereference in
  nvme_fc_io_getuuid() (bsc#1214842).
- commit 3b513db</changelog>
  <changelog author="lduncan@suse.com" date="1698148803">- blacklist.conf: added two commmits that break kabi
- commit fdf2030</changelog>
  <changelog author="lduncan@suse.com" date="1698148804">- scsi: iscsi_tcp: restrict to TCP sockets (git-fixes).
- scsi: pm8001: Setup IRQs on resume (git-fixes).
- scsi: mpt3sas: Perform additional retries if doorbell read
  returns 0 (git-fixes).
- scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock
  (git-fixes).
- scsi: qedf: Do not touch __user pointer in
  qedf_dbg_fp_int_cmd_read() directly (git-fixes).
- scsi: qedf: Do not touch __user pointer in
  qedf_dbg_debug_cmd_read() directly (git-fixes).
- scsi: qedf: Do not touch __user pointer in
  qedf_dbg_stop_io_on_error_cmd_read() directly (git-fixes).
- scsi: qla4xxx: Add length check when parsing nlattrs
  (git-fixes).
- scsi: be2iscsi: Add length check when parsing nlattrs
  (git-fixes).
- scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param()
  (git-fixes).
- scsi: iscsi: Add length check for nlattr payload (git-fixes).
- scsi: qedi: Fix potential deadlock on &amp;qedi_percpu-&gt;p_work_lock
  (git-fixes).
- scsi: mpi3mr: Propagate sense data for admin queue SCSI I/O
  (git-fixes).
- net: use sk_is_tcp() in more places (git-fixes).
- commit 24cbf21</changelog>
  <changelog author="ohering@suse.de" date="1698321600">- x86/mm: Print the encryption features correctly when a paravisor
  is present (bsc#1206453).
- commit d1a6274</changelog>
  <changelog author="tiwai@suse.de" date="1698321601">- phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins
  (git-fixes).
- phy: mapphone-mdm6600: Fix runtime PM for remove (git-fixes).
- phy: mapphone-mdm6600: Fix runtime disable on probe (git-fixes).
- gpio: vf610: set value before the direction to avoid a glitch
  (git-fixes).
- platform/surface: platform_profile: Propagate error if profile
  registration fails (git-fixes).
- platform/x86: asus-wmi: Map 0x2a code, Ignore 0x2b and 0x2c
  events (git-fixes).
- platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from
  0x20 to 0x2e (git-fixes).
- USB: serial: option: add Fibocom to DELL custom modem FM101R-GL
  (git-fixes).
- USB: serial: option: add entry for Sierra EM9191 with new
  firmware (git-fixes).
- USB: serial: option: add Telit LE910C4-WWX 0x1035 composition
  (git-fixes).
- mmc: core: Capture correct oemid-bits for eMMC cards
  (git-fixes).
- Bluetooth: hci_sock: Correctly bounds check and pad
  HCI_MON_NEW_INDEX name (git-fixes).
- Bluetooth: avoid memcmp() out of bounds warning (git-fixes).
- Bluetooth: hci_sock: fix slab oob read in create_monitor_event
  (git-fixes).
- Bluetooth: hci_event: Fix coding style (git-fixes).
- Bluetooth: Reject connection with the device which has same
  BD_ADDR (git-fixes).
- Bluetooth: vhci: Fix race when opening vhci device (git-fixes).
- platform/x86: touchscreen_dmi: Add info for the Positivo C4128B
  (git-fixes).
- drm: panel-orientation-quirks: Add quirk for One Mix 2S
  (git-fixes).
- HID: multitouch: Add required quirk for Synaptics 0xcd7e device
  (git-fixes).
- HID: holtek: fix slab-out-of-bounds Write in
  holtek_kbd_input_event (git-fixes).
- wifi: cfg80211: avoid leaking stack data into trace (git-fixes).
- wifi: mac80211: allow transmitting EAPOL frames with tainted
  key (git-fixes).
- wifi: cfg80211: Fix 6GHz scan configuration (git-fixes).
- wifi: iwlwifi: Ensure ack flag is properly cleared (git-fixes).
- wifi: mwifiex: Sanity check tlv_len and tlv_bitmap_len
  (git-fixes).
- Bluetooth: Avoid redundant authentication (git-fixes).
- Bluetooth: btusb: add shutdown function for QCA6174 (git-fixes).
- i2c: mux: Avoid potential false error message in
  i2c_mux_add_adapter (git-fixes).
- gpio: timberdale: Fix potential deadlock on &amp;tgpio-&gt;lock
  (git-fixes).
- commit b480af6</changelog>
  <changelog author="tiwai@suse.de" date="1698321602">- ALSA: hda/realtek - Fixed ASUS platform headset Mic issue
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GU603ZV (git-fixes).
- ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq5xxx
  (git-fixes).
- drm/mediatek: Correctly free sg_table in gem prime vmap
  (git-fixes).
- drm/amd/pm: add unique_id for gc 11.0.3 (git-fixes).
- commit ad38bcf</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321603">- x86/sev: Disable MMIO emulation from user mode (bsc#1212649).
- commit 5dae47e</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321604">- x86/sev: Check IOBM for IOIO exceptions from user-space
  (bsc#1212649).
- commit 2b69036</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321605">- x86/sev: Check for user-space IOIO pointing to kernel space
  (bsc#1212649).
- commit 816f817</changelog>
  <changelog author="jack@suse.cz" date="1698321606">- quota: Fix slow quotaoff (bsc#1216621).
- commit 988e5f4</changelog>
  <changelog author="spradhan@suse.de" date="1698321607">- btrfs: don't start transaction for scrub if the fs is mounted read-only (bsc#1214874).
- commit cc8e6f1</changelog>
  <changelog author="neilb@suse.de" date="1698408000">- remove unnecessary WARN_ON_ONCE() (bsc#1214823).
- NFSD: Never call nfsd_file_gc() in foreground paths
  (bsc#1215545).
- commit d81dfc3</changelog>
  <changelog author="vkarasulli@suse.de" date="1698408001">- Update
  patches.suse/0001-x86-sev-Disable-MMIO-emulation-from-user-mode.patch
  (bsc#1212649 CVE-2023-46813).
- Update
  patches.suse/0002-x86-sev-Check-IOBM-for-IOIO-exceptions-from-user-spa.patch
  (bsc#1212649 CVE-2023-46813).
- Update
  patches.suse/0003-x86-sev-Check-for-user-space-IOIO-pointing-to-kernel.patch
  (bsc#1212649 CVE-2023-46813).
- commit dd6a315</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1698408002">- netfilter: nf_tables: skip bound chain on rule flush
  (bsc#1215095 CVE-2023-3777).
- commit afb7c25</changelog>
  <changelog author="tiwai@suse.de" date="1698580800">- iio: exynos-adc: request second interupt only when touchscreen
  mode is used (git-fixes).
- iio: adc: xilinx-xadc: Correct temperature offset/scale for
  UltraScale (git-fixes).
- iio: adc: xilinx-xadc: Don't clobber preset voltage/temperature
  thresholds (git-fixes).
- misc: fastrpc: Clean buffers on remote invocation failures
  (git-fixes).
- i2c: stm32f7: Fix PEC handling in case of SMBUS transfers
  (git-fixes).
- i2c: muxes: i2c-mux-gpmux: Use of_get_i2c_adapter_by_node()
  (git-fixes).
- i2c: muxes: i2c-demux-pinctrl: Use of_get_i2c_adapter_by_node()
  (git-fixes).
- i2c: muxes: i2c-mux-pinctrl: Use of_get_i2c_adapter_by_node()
  (git-fixes).
- i2c: aspeed: Fix i2c bus hang in slave read (git-fixes).
- drm/i915/pmu: Check if pmu is closed before stopping event
  (git-fixes).
- firmware/imx-dsp: Fix use_after_free in imx_dsp_setup_channels()
  (git-fixes).
- r8152: Release firmware if we have an error in probe
  (git-fixes).
- r8152: Cancel hw_phy_work if we have an error in probe
  (git-fixes).
- r8152: Run the unload routine if we have errors during probe
  (git-fixes).
- r8152: Increase USB control msg timeout to 5000ms as per spec
  (git-fixes).
- net: usb: smsc95xx: Fix uninit-value access in smsc95xx_read_reg
  (git-fixes).
- net: ieee802154: adf7242: Fix some potential buffer overflow
  in adf7242_stats_show() (git-fixes).
- treewide: Spelling fix in comment (git-fixes).
- commit e69ab42</changelog>
  <changelog author="ohering@suse.de" date="1698667200">- fix x86/mm: print the encryption features in hyperv is disabled
- commit 37d6855</changelog>
</package>
<package pkgid="137fc54d97ad35e1716ff47e215403a0f2eab7130dca362e6e1ea462cf73bf2e" name="kernel-default" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.55.36.1"/>
  <changelog author="mfranc@suse.cz" date="1698062400">- s390/pci: fix iommu bitmap allocation (git-fixes bsc#1216511).
- commit 2bb6835</changelog>
  <changelog author="mfranc@suse.cz" date="1698062401">- KVM: s390: fix gisa destroy operation might lead to cpu stalls
  (git-fixes bsc#1216512).
- commit 3976fa9</changelog>
  <changelog author="oneukum@suse.com" date="1698148800">- Update
  patches.suse/USB-ene_usb6250-Allocate-enough-memory-for-full-obje.patch
  (bsc#1216051 CVE-2023-45862).
  Retroactively recognized as a security issue
- commit 716929e</changelog>
  <changelog author="tiwai@suse.de" date="1698148801">- ubi: Refuse attaching if mtd's erasesize is 0 (CVE-2023-31085
  bsc#1210778).
- commit 86e05f1</changelog>
  <changelog author="mwilck@suse.com" date="1698148802">- nvme-fc: Prevent null pointer dereference in
  nvme_fc_io_getuuid() (bsc#1214842).
- commit 3b513db</changelog>
  <changelog author="lduncan@suse.com" date="1698148803">- blacklist.conf: added two commmits that break kabi
- commit fdf2030</changelog>
  <changelog author="lduncan@suse.com" date="1698148804">- scsi: iscsi_tcp: restrict to TCP sockets (git-fixes).
- scsi: pm8001: Setup IRQs on resume (git-fixes).
- scsi: mpt3sas: Perform additional retries if doorbell read
  returns 0 (git-fixes).
- scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock
  (git-fixes).
- scsi: qedf: Do not touch __user pointer in
  qedf_dbg_fp_int_cmd_read() directly (git-fixes).
- scsi: qedf: Do not touch __user pointer in
  qedf_dbg_debug_cmd_read() directly (git-fixes).
- scsi: qedf: Do not touch __user pointer in
  qedf_dbg_stop_io_on_error_cmd_read() directly (git-fixes).
- scsi: qla4xxx: Add length check when parsing nlattrs
  (git-fixes).
- scsi: be2iscsi: Add length check when parsing nlattrs
  (git-fixes).
- scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param()
  (git-fixes).
- scsi: iscsi: Add length check for nlattr payload (git-fixes).
- scsi: qedi: Fix potential deadlock on &amp;qedi_percpu-&gt;p_work_lock
  (git-fixes).
- scsi: mpi3mr: Propagate sense data for admin queue SCSI I/O
  (git-fixes).
- net: use sk_is_tcp() in more places (git-fixes).
- commit 24cbf21</changelog>
  <changelog author="ohering@suse.de" date="1698321600">- x86/mm: Print the encryption features correctly when a paravisor
  is present (bsc#1206453).
- commit d1a6274</changelog>
  <changelog author="tiwai@suse.de" date="1698321601">- phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins
  (git-fixes).
- phy: mapphone-mdm6600: Fix runtime PM for remove (git-fixes).
- phy: mapphone-mdm6600: Fix runtime disable on probe (git-fixes).
- gpio: vf610: set value before the direction to avoid a glitch
  (git-fixes).
- platform/surface: platform_profile: Propagate error if profile
  registration fails (git-fixes).
- platform/x86: asus-wmi: Map 0x2a code, Ignore 0x2b and 0x2c
  events (git-fixes).
- platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from
  0x20 to 0x2e (git-fixes).
- USB: serial: option: add Fibocom to DELL custom modem FM101R-GL
  (git-fixes).
- USB: serial: option: add entry for Sierra EM9191 with new
  firmware (git-fixes).
- USB: serial: option: add Telit LE910C4-WWX 0x1035 composition
  (git-fixes).
- mmc: core: Capture correct oemid-bits for eMMC cards
  (git-fixes).
- Bluetooth: hci_sock: Correctly bounds check and pad
  HCI_MON_NEW_INDEX name (git-fixes).
- Bluetooth: avoid memcmp() out of bounds warning (git-fixes).
- Bluetooth: hci_sock: fix slab oob read in create_monitor_event
  (git-fixes).
- Bluetooth: hci_event: Fix coding style (git-fixes).
- Bluetooth: Reject connection with the device which has same
  BD_ADDR (git-fixes).
- Bluetooth: vhci: Fix race when opening vhci device (git-fixes).
- platform/x86: touchscreen_dmi: Add info for the Positivo C4128B
  (git-fixes).
- drm: panel-orientation-quirks: Add quirk for One Mix 2S
  (git-fixes).
- HID: multitouch: Add required quirk for Synaptics 0xcd7e device
  (git-fixes).
- HID: holtek: fix slab-out-of-bounds Write in
  holtek_kbd_input_event (git-fixes).
- wifi: cfg80211: avoid leaking stack data into trace (git-fixes).
- wifi: mac80211: allow transmitting EAPOL frames with tainted
  key (git-fixes).
- wifi: cfg80211: Fix 6GHz scan configuration (git-fixes).
- wifi: iwlwifi: Ensure ack flag is properly cleared (git-fixes).
- wifi: mwifiex: Sanity check tlv_len and tlv_bitmap_len
  (git-fixes).
- Bluetooth: Avoid redundant authentication (git-fixes).
- Bluetooth: btusb: add shutdown function for QCA6174 (git-fixes).
- i2c: mux: Avoid potential false error message in
  i2c_mux_add_adapter (git-fixes).
- gpio: timberdale: Fix potential deadlock on &amp;tgpio-&gt;lock
  (git-fixes).
- commit b480af6</changelog>
  <changelog author="tiwai@suse.de" date="1698321602">- ALSA: hda/realtek - Fixed ASUS platform headset Mic issue
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GU603ZV (git-fixes).
- ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq5xxx
  (git-fixes).
- drm/mediatek: Correctly free sg_table in gem prime vmap
  (git-fixes).
- drm/amd/pm: add unique_id for gc 11.0.3 (git-fixes).
- commit ad38bcf</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321603">- x86/sev: Disable MMIO emulation from user mode (bsc#1212649).
- commit 5dae47e</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321604">- x86/sev: Check IOBM for IOIO exceptions from user-space
  (bsc#1212649).
- commit 2b69036</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321605">- x86/sev: Check for user-space IOIO pointing to kernel space
  (bsc#1212649).
- commit 816f817</changelog>
  <changelog author="jack@suse.cz" date="1698321606">- quota: Fix slow quotaoff (bsc#1216621).
- commit 988e5f4</changelog>
  <changelog author="spradhan@suse.de" date="1698321607">- btrfs: don't start transaction for scrub if the fs is mounted read-only (bsc#1214874).
- commit cc8e6f1</changelog>
  <changelog author="neilb@suse.de" date="1698408000">- remove unnecessary WARN_ON_ONCE() (bsc#1214823).
- NFSD: Never call nfsd_file_gc() in foreground paths
  (bsc#1215545).
- commit d81dfc3</changelog>
  <changelog author="vkarasulli@suse.de" date="1698408001">- Update
  patches.suse/0001-x86-sev-Disable-MMIO-emulation-from-user-mode.patch
  (bsc#1212649 CVE-2023-46813).
- Update
  patches.suse/0002-x86-sev-Check-IOBM-for-IOIO-exceptions-from-user-spa.patch
  (bsc#1212649 CVE-2023-46813).
- Update
  patches.suse/0003-x86-sev-Check-for-user-space-IOIO-pointing-to-kernel.patch
  (bsc#1212649 CVE-2023-46813).
- commit dd6a315</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1698408002">- netfilter: nf_tables: skip bound chain on rule flush
  (bsc#1215095 CVE-2023-3777).
- commit afb7c25</changelog>
  <changelog author="tiwai@suse.de" date="1698580800">- iio: exynos-adc: request second interupt only when touchscreen
  mode is used (git-fixes).
- iio: adc: xilinx-xadc: Correct temperature offset/scale for
  UltraScale (git-fixes).
- iio: adc: xilinx-xadc: Don't clobber preset voltage/temperature
  thresholds (git-fixes).
- misc: fastrpc: Clean buffers on remote invocation failures
  (git-fixes).
- i2c: stm32f7: Fix PEC handling in case of SMBUS transfers
  (git-fixes).
- i2c: muxes: i2c-mux-gpmux: Use of_get_i2c_adapter_by_node()
  (git-fixes).
- i2c: muxes: i2c-demux-pinctrl: Use of_get_i2c_adapter_by_node()
  (git-fixes).
- i2c: muxes: i2c-mux-pinctrl: Use of_get_i2c_adapter_by_node()
  (git-fixes).
- i2c: aspeed: Fix i2c bus hang in slave read (git-fixes).
- drm/i915/pmu: Check if pmu is closed before stopping event
  (git-fixes).
- firmware/imx-dsp: Fix use_after_free in imx_dsp_setup_channels()
  (git-fixes).
- r8152: Release firmware if we have an error in probe
  (git-fixes).
- r8152: Cancel hw_phy_work if we have an error in probe
  (git-fixes).
- r8152: Run the unload routine if we have errors during probe
  (git-fixes).
- r8152: Increase USB control msg timeout to 5000ms as per spec
  (git-fixes).
- net: usb: smsc95xx: Fix uninit-value access in smsc95xx_read_reg
  (git-fixes).
- net: ieee802154: adf7242: Fix some potential buffer overflow
  in adf7242_stats_show() (git-fixes).
- treewide: Spelling fix in comment (git-fixes).
- commit e69ab42</changelog>
  <changelog author="ohering@suse.de" date="1698667200">- fix x86/mm: print the encryption features in hyperv is disabled
- commit 37d6855</changelog>
</package>
<package pkgid="e95c3fa383617a25076bce8aeac6c35bc3394ea3b969ec38b909d76760454889" name="kernel-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150500.55.36.1"/>
  <changelog author="mfranc@suse.cz" date="1698062400">- s390/pci: fix iommu bitmap allocation (git-fixes bsc#1216511).
- commit 2bb6835</changelog>
  <changelog author="mfranc@suse.cz" date="1698062401">- KVM: s390: fix gisa destroy operation might lead to cpu stalls
  (git-fixes bsc#1216512).
- commit 3976fa9</changelog>
  <changelog author="oneukum@suse.com" date="1698148800">- Update
  patches.suse/USB-ene_usb6250-Allocate-enough-memory-for-full-obje.patch
  (bsc#1216051 CVE-2023-45862).
  Retroactively recognized as a security issue
- commit 716929e</changelog>
  <changelog author="tiwai@suse.de" date="1698148801">- ubi: Refuse attaching if mtd's erasesize is 0 (CVE-2023-31085
  bsc#1210778).
- commit 86e05f1</changelog>
  <changelog author="mwilck@suse.com" date="1698148802">- nvme-fc: Prevent null pointer dereference in
  nvme_fc_io_getuuid() (bsc#1214842).
- commit 3b513db</changelog>
  <changelog author="lduncan@suse.com" date="1698148803">- blacklist.conf: added two commmits that break kabi
- commit fdf2030</changelog>
  <changelog author="lduncan@suse.com" date="1698148804">- scsi: iscsi_tcp: restrict to TCP sockets (git-fixes).
- scsi: pm8001: Setup IRQs on resume (git-fixes).
- scsi: mpt3sas: Perform additional retries if doorbell read
  returns 0 (git-fixes).
- scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock
  (git-fixes).
- scsi: qedf: Do not touch __user pointer in
  qedf_dbg_fp_int_cmd_read() directly (git-fixes).
- scsi: qedf: Do not touch __user pointer in
  qedf_dbg_debug_cmd_read() directly (git-fixes).
- scsi: qedf: Do not touch __user pointer in
  qedf_dbg_stop_io_on_error_cmd_read() directly (git-fixes).
- scsi: qla4xxx: Add length check when parsing nlattrs
  (git-fixes).
- scsi: be2iscsi: Add length check when parsing nlattrs
  (git-fixes).
- scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param()
  (git-fixes).
- scsi: iscsi: Add length check for nlattr payload (git-fixes).
- scsi: qedi: Fix potential deadlock on &amp;qedi_percpu-&gt;p_work_lock
  (git-fixes).
- scsi: mpi3mr: Propagate sense data for admin queue SCSI I/O
  (git-fixes).
- net: use sk_is_tcp() in more places (git-fixes).
- commit 24cbf21</changelog>
  <changelog author="ohering@suse.de" date="1698321600">- x86/mm: Print the encryption features correctly when a paravisor
  is present (bsc#1206453).
- commit d1a6274</changelog>
  <changelog author="tiwai@suse.de" date="1698321601">- phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins
  (git-fixes).
- phy: mapphone-mdm6600: Fix runtime PM for remove (git-fixes).
- phy: mapphone-mdm6600: Fix runtime disable on probe (git-fixes).
- gpio: vf610: set value before the direction to avoid a glitch
  (git-fixes).
- platform/surface: platform_profile: Propagate error if profile
  registration fails (git-fixes).
- platform/x86: asus-wmi: Map 0x2a code, Ignore 0x2b and 0x2c
  events (git-fixes).
- platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from
  0x20 to 0x2e (git-fixes).
- USB: serial: option: add Fibocom to DELL custom modem FM101R-GL
  (git-fixes).
- USB: serial: option: add entry for Sierra EM9191 with new
  firmware (git-fixes).
- USB: serial: option: add Telit LE910C4-WWX 0x1035 composition
  (git-fixes).
- mmc: core: Capture correct oemid-bits for eMMC cards
  (git-fixes).
- Bluetooth: hci_sock: Correctly bounds check and pad
  HCI_MON_NEW_INDEX name (git-fixes).
- Bluetooth: avoid memcmp() out of bounds warning (git-fixes).
- Bluetooth: hci_sock: fix slab oob read in create_monitor_event
  (git-fixes).
- Bluetooth: hci_event: Fix coding style (git-fixes).
- Bluetooth: Reject connection with the device which has same
  BD_ADDR (git-fixes).
- Bluetooth: vhci: Fix race when opening vhci device (git-fixes).
- platform/x86: touchscreen_dmi: Add info for the Positivo C4128B
  (git-fixes).
- drm: panel-orientation-quirks: Add quirk for One Mix 2S
  (git-fixes).
- HID: multitouch: Add required quirk for Synaptics 0xcd7e device
  (git-fixes).
- HID: holtek: fix slab-out-of-bounds Write in
  holtek_kbd_input_event (git-fixes).
- wifi: cfg80211: avoid leaking stack data into trace (git-fixes).
- wifi: mac80211: allow transmitting EAPOL frames with tainted
  key (git-fixes).
- wifi: cfg80211: Fix 6GHz scan configuration (git-fixes).
- wifi: iwlwifi: Ensure ack flag is properly cleared (git-fixes).
- wifi: mwifiex: Sanity check tlv_len and tlv_bitmap_len
  (git-fixes).
- Bluetooth: Avoid redundant authentication (git-fixes).
- Bluetooth: btusb: add shutdown function for QCA6174 (git-fixes).
- i2c: mux: Avoid potential false error message in
  i2c_mux_add_adapter (git-fixes).
- gpio: timberdale: Fix potential deadlock on &amp;tgpio-&gt;lock
  (git-fixes).
- commit b480af6</changelog>
  <changelog author="tiwai@suse.de" date="1698321602">- ALSA: hda/realtek - Fixed ASUS platform headset Mic issue
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GU603ZV (git-fixes).
- ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq5xxx
  (git-fixes).
- drm/mediatek: Correctly free sg_table in gem prime vmap
  (git-fixes).
- drm/amd/pm: add unique_id for gc 11.0.3 (git-fixes).
- commit ad38bcf</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321603">- x86/sev: Disable MMIO emulation from user mode (bsc#1212649).
- commit 5dae47e</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321604">- x86/sev: Check IOBM for IOIO exceptions from user-space
  (bsc#1212649).
- commit 2b69036</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321605">- x86/sev: Check for user-space IOIO pointing to kernel space
  (bsc#1212649).
- commit 816f817</changelog>
  <changelog author="jack@suse.cz" date="1698321606">- quota: Fix slow quotaoff (bsc#1216621).
- commit 988e5f4</changelog>
  <changelog author="spradhan@suse.de" date="1698321607">- btrfs: don't start transaction for scrub if the fs is mounted read-only (bsc#1214874).
- commit cc8e6f1</changelog>
  <changelog author="neilb@suse.de" date="1698408000">- remove unnecessary WARN_ON_ONCE() (bsc#1214823).
- NFSD: Never call nfsd_file_gc() in foreground paths
  (bsc#1215545).
- commit d81dfc3</changelog>
  <changelog author="vkarasulli@suse.de" date="1698408001">- Update
  patches.suse/0001-x86-sev-Disable-MMIO-emulation-from-user-mode.patch
  (bsc#1212649 CVE-2023-46813).
- Update
  patches.suse/0002-x86-sev-Check-IOBM-for-IOIO-exceptions-from-user-spa.patch
  (bsc#1212649 CVE-2023-46813).
- Update
  patches.suse/0003-x86-sev-Check-for-user-space-IOIO-pointing-to-kernel.patch
  (bsc#1212649 CVE-2023-46813).
- commit dd6a315</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1698408002">- netfilter: nf_tables: skip bound chain on rule flush
  (bsc#1215095 CVE-2023-3777).
- commit afb7c25</changelog>
  <changelog author="tiwai@suse.de" date="1698580800">- iio: exynos-adc: request second interupt only when touchscreen
  mode is used (git-fixes).
- iio: adc: xilinx-xadc: Correct temperature offset/scale for
  UltraScale (git-fixes).
- iio: adc: xilinx-xadc: Don't clobber preset voltage/temperature
  thresholds (git-fixes).
- misc: fastrpc: Clean buffers on remote invocation failures
  (git-fixes).
- i2c: stm32f7: Fix PEC handling in case of SMBUS transfers
  (git-fixes).
- i2c: muxes: i2c-mux-gpmux: Use of_get_i2c_adapter_by_node()
  (git-fixes).
- i2c: muxes: i2c-demux-pinctrl: Use of_get_i2c_adapter_by_node()
  (git-fixes).
- i2c: muxes: i2c-mux-pinctrl: Use of_get_i2c_adapter_by_node()
  (git-fixes).
- i2c: aspeed: Fix i2c bus hang in slave read (git-fixes).
- drm/i915/pmu: Check if pmu is closed before stopping event
  (git-fixes).
- firmware/imx-dsp: Fix use_after_free in imx_dsp_setup_channels()
  (git-fixes).
- r8152: Release firmware if we have an error in probe
  (git-fixes).
- r8152: Cancel hw_phy_work if we have an error in probe
  (git-fixes).
- r8152: Run the unload routine if we have errors during probe
  (git-fixes).
- r8152: Increase USB control msg timeout to 5000ms as per spec
  (git-fixes).
- net: usb: smsc95xx: Fix uninit-value access in smsc95xx_read_reg
  (git-fixes).
- net: ieee802154: adf7242: Fix some potential buffer overflow
  in adf7242_stats_show() (git-fixes).
- treewide: Spelling fix in comment (git-fixes).
- commit e69ab42</changelog>
  <changelog author="ohering@suse.de" date="1698667200">- fix x86/mm: print the encryption features in hyperv is disabled
- commit 37d6855</changelog>
</package>
<package pkgid="261a9a59bba165bb0553e320d32fc2b744a7a8a8ba41f238ef6aaf85f40f1cbd" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.55.36.1"/>
  <changelog author="mfranc@suse.cz" date="1698062400">- s390/pci: fix iommu bitmap allocation (git-fixes bsc#1216511).
- commit 2bb6835</changelog>
  <changelog author="mfranc@suse.cz" date="1698062401">- KVM: s390: fix gisa destroy operation might lead to cpu stalls
  (git-fixes bsc#1216512).
- commit 3976fa9</changelog>
  <changelog author="oneukum@suse.com" date="1698148800">- Update
  patches.suse/USB-ene_usb6250-Allocate-enough-memory-for-full-obje.patch
  (bsc#1216051 CVE-2023-45862).
  Retroactively recognized as a security issue
- commit 716929e</changelog>
  <changelog author="tiwai@suse.de" date="1698148801">- ubi: Refuse attaching if mtd's erasesize is 0 (CVE-2023-31085
  bsc#1210778).
- commit 86e05f1</changelog>
  <changelog author="mwilck@suse.com" date="1698148802">- nvme-fc: Prevent null pointer dereference in
  nvme_fc_io_getuuid() (bsc#1214842).
- commit 3b513db</changelog>
  <changelog author="lduncan@suse.com" date="1698148803">- blacklist.conf: added two commmits that break kabi
- commit fdf2030</changelog>
  <changelog author="lduncan@suse.com" date="1698148804">- scsi: iscsi_tcp: restrict to TCP sockets (git-fixes).
- scsi: pm8001: Setup IRQs on resume (git-fixes).
- scsi: mpt3sas: Perform additional retries if doorbell read
  returns 0 (git-fixes).
- scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock
  (git-fixes).
- scsi: qedf: Do not touch __user pointer in
  qedf_dbg_fp_int_cmd_read() directly (git-fixes).
- scsi: qedf: Do not touch __user pointer in
  qedf_dbg_debug_cmd_read() directly (git-fixes).
- scsi: qedf: Do not touch __user pointer in
  qedf_dbg_stop_io_on_error_cmd_read() directly (git-fixes).
- scsi: qla4xxx: Add length check when parsing nlattrs
  (git-fixes).
- scsi: be2iscsi: Add length check when parsing nlattrs
  (git-fixes).
- scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param()
  (git-fixes).
- scsi: iscsi: Add length check for nlattr payload (git-fixes).
- scsi: qedi: Fix potential deadlock on &amp;qedi_percpu-&gt;p_work_lock
  (git-fixes).
- scsi: mpi3mr: Propagate sense data for admin queue SCSI I/O
  (git-fixes).
- net: use sk_is_tcp() in more places (git-fixes).
- commit 24cbf21</changelog>
  <changelog author="ohering@suse.de" date="1698321600">- x86/mm: Print the encryption features correctly when a paravisor
  is present (bsc#1206453).
- commit d1a6274</changelog>
  <changelog author="tiwai@suse.de" date="1698321601">- phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins
  (git-fixes).
- phy: mapphone-mdm6600: Fix runtime PM for remove (git-fixes).
- phy: mapphone-mdm6600: Fix runtime disable on probe (git-fixes).
- gpio: vf610: set value before the direction to avoid a glitch
  (git-fixes).
- platform/surface: platform_profile: Propagate error if profile
  registration fails (git-fixes).
- platform/x86: asus-wmi: Map 0x2a code, Ignore 0x2b and 0x2c
  events (git-fixes).
- platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from
  0x20 to 0x2e (git-fixes).
- USB: serial: option: add Fibocom to DELL custom modem FM101R-GL
  (git-fixes).
- USB: serial: option: add entry for Sierra EM9191 with new
  firmware (git-fixes).
- USB: serial: option: add Telit LE910C4-WWX 0x1035 composition
  (git-fixes).
- mmc: core: Capture correct oemid-bits for eMMC cards
  (git-fixes).
- Bluetooth: hci_sock: Correctly bounds check and pad
  HCI_MON_NEW_INDEX name (git-fixes).
- Bluetooth: avoid memcmp() out of bounds warning (git-fixes).
- Bluetooth: hci_sock: fix slab oob read in create_monitor_event
  (git-fixes).
- Bluetooth: hci_event: Fix coding style (git-fixes).
- Bluetooth: Reject connection with the device which has same
  BD_ADDR (git-fixes).
- Bluetooth: vhci: Fix race when opening vhci device (git-fixes).
- platform/x86: touchscreen_dmi: Add info for the Positivo C4128B
  (git-fixes).
- drm: panel-orientation-quirks: Add quirk for One Mix 2S
  (git-fixes).
- HID: multitouch: Add required quirk for Synaptics 0xcd7e device
  (git-fixes).
- HID: holtek: fix slab-out-of-bounds Write in
  holtek_kbd_input_event (git-fixes).
- wifi: cfg80211: avoid leaking stack data into trace (git-fixes).
- wifi: mac80211: allow transmitting EAPOL frames with tainted
  key (git-fixes).
- wifi: cfg80211: Fix 6GHz scan configuration (git-fixes).
- wifi: iwlwifi: Ensure ack flag is properly cleared (git-fixes).
- wifi: mwifiex: Sanity check tlv_len and tlv_bitmap_len
  (git-fixes).
- Bluetooth: Avoid redundant authentication (git-fixes).
- Bluetooth: btusb: add shutdown function for QCA6174 (git-fixes).
- i2c: mux: Avoid potential false error message in
  i2c_mux_add_adapter (git-fixes).
- gpio: timberdale: Fix potential deadlock on &amp;tgpio-&gt;lock
  (git-fixes).
- commit b480af6</changelog>
  <changelog author="tiwai@suse.de" date="1698321602">- ALSA: hda/realtek - Fixed ASUS platform headset Mic issue
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GU603ZV (git-fixes).
- ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq5xxx
  (git-fixes).
- drm/mediatek: Correctly free sg_table in gem prime vmap
  (git-fixes).
- drm/amd/pm: add unique_id for gc 11.0.3 (git-fixes).
- commit ad38bcf</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321603">- x86/sev: Disable MMIO emulation from user mode (bsc#1212649).
- commit 5dae47e</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321604">- x86/sev: Check IOBM for IOIO exceptions from user-space
  (bsc#1212649).
- commit 2b69036</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321605">- x86/sev: Check for user-space IOIO pointing to kernel space
  (bsc#1212649).
- commit 816f817</changelog>
  <changelog author="jack@suse.cz" date="1698321606">- quota: Fix slow quotaoff (bsc#1216621).
- commit 988e5f4</changelog>
  <changelog author="spradhan@suse.de" date="1698321607">- btrfs: don't start transaction for scrub if the fs is mounted read-only (bsc#1214874).
- commit cc8e6f1</changelog>
  <changelog author="neilb@suse.de" date="1698408000">- remove unnecessary WARN_ON_ONCE() (bsc#1214823).
- NFSD: Never call nfsd_file_gc() in foreground paths
  (bsc#1215545).
- commit d81dfc3</changelog>
  <changelog author="vkarasulli@suse.de" date="1698408001">- Update
  patches.suse/0001-x86-sev-Disable-MMIO-emulation-from-user-mode.patch
  (bsc#1212649 CVE-2023-46813).
- Update
  patches.suse/0002-x86-sev-Check-IOBM-for-IOIO-exceptions-from-user-spa.patch
  (bsc#1212649 CVE-2023-46813).
- Update
  patches.suse/0003-x86-sev-Check-for-user-space-IOIO-pointing-to-kernel.patch
  (bsc#1212649 CVE-2023-46813).
- commit dd6a315</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1698408002">- netfilter: nf_tables: skip bound chain on rule flush
  (bsc#1215095 CVE-2023-3777).
- commit afb7c25</changelog>
  <changelog author="tiwai@suse.de" date="1698580800">- iio: exynos-adc: request second interupt only when touchscreen
  mode is used (git-fixes).
- iio: adc: xilinx-xadc: Correct temperature offset/scale for
  UltraScale (git-fixes).
- iio: adc: xilinx-xadc: Don't clobber preset voltage/temperature
  thresholds (git-fixes).
- misc: fastrpc: Clean buffers on remote invocation failures
  (git-fixes).
- i2c: stm32f7: Fix PEC handling in case of SMBUS transfers
  (git-fixes).
- i2c: muxes: i2c-mux-gpmux: Use of_get_i2c_adapter_by_node()
  (git-fixes).
- i2c: muxes: i2c-demux-pinctrl: Use of_get_i2c_adapter_by_node()
  (git-fixes).
- i2c: muxes: i2c-mux-pinctrl: Use of_get_i2c_adapter_by_node()
  (git-fixes).
- i2c: aspeed: Fix i2c bus hang in slave read (git-fixes).
- drm/i915/pmu: Check if pmu is closed before stopping event
  (git-fixes).
- firmware/imx-dsp: Fix use_after_free in imx_dsp_setup_channels()
  (git-fixes).
- r8152: Release firmware if we have an error in probe
  (git-fixes).
- r8152: Cancel hw_phy_work if we have an error in probe
  (git-fixes).
- r8152: Run the unload routine if we have errors during probe
  (git-fixes).
- r8152: Increase USB control msg timeout to 5000ms as per spec
  (git-fixes).
- net: usb: smsc95xx: Fix uninit-value access in smsc95xx_read_reg
  (git-fixes).
- net: ieee802154: adf7242: Fix some potential buffer overflow
  in adf7242_stats_show() (git-fixes).
- treewide: Spelling fix in comment (git-fixes).
- commit e69ab42</changelog>
  <changelog author="ohering@suse.de" date="1698667200">- fix x86/mm: print the encryption features in hyperv is disabled
- commit 37d6855</changelog>
</package>
<package pkgid="ce1ab0da33a19fc4c633906cfb6bbdc61dfdec148a6c6ea9e213542804a9ad35" name="kernel-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.39.1"/>
  <changelog author="ailiop@suse.com" date="1701518400">- xfs: standardize inode generation formatting in ftrace output
  (git-fixes).
- commit 81e4504</changelog>
  <changelog author="ailiop@suse.com" date="1701518401">- xfs: convert buffer flags to unsigned (git-fixes).
- commit 6147a1c</changelog>
  <changelog author="ailiop@suse.com" date="1701518402">- xfs: convert attr type flags to unsigned (git-fixes).
- commit c641f4d</changelog>
  <changelog author="ailiop@suse.com" date="1701518403">- xfs: convert scrub type flags to unsigned (git-fixes).
- commit c3c7c82</changelog>
  <changelog author="ailiop@suse.com" date="1701518404">- xfs: convert bmap extent type flags to unsigned (git-fixes).
- commit 30fead3</changelog>
  <changelog author="ailiop@suse.com" date="1701518405">- xfs: convert bmapi flags to unsigned (git-fixes).
- commit 1ec6360</changelog>
  <changelog author="ailiop@suse.com" date="1701518406">- xfs: convert AGF log flags to unsigned (git-fixes).
- commit 91cefbb</changelog>
  <changelog author="ailiop@suse.com" date="1701518407">- xfs: convert AGI log flags to unsigned (git-fixes).
- commit 66d955b</changelog>
  <changelog author="ailiop@suse.com" date="1701518408">- xfs: convert btree buffer log flags to unsigned (git-fixes).
- commit ced67a9</changelog>
  <changelog author="ailiop@suse.com" date="1701518409">- xfs: convert buffer log item flags to unsigned (git-fixes).
- commit d4d0c9c</changelog>
  <changelog author="ailiop@suse.com" date="1701518410">- xfs: convert da btree operations flags to unsigned (git-fixes).
- commit 41198d9</changelog>
  <changelog author="ailiop@suse.com" date="1701518411">- xfs: convert dquot flags to unsigned (git-fixes).
- commit 1630213</changelog>
  <changelog author="ailiop@suse.com" date="1701518412">- xfs: convert log item tracepoint flags to unsigned (git-fixes).
- commit 411032a</changelog>
  <changelog author="ailiop@suse.com" date="1701518413">- xfs: convert inode lock flags to unsigned (git-fixes).
- commit 831f7e2</changelog>
  <changelog author="ailiop@suse.com" date="1701518414">- xfs: convert quota options flags to unsigned (git-fixes).
- commit 7dfe466</changelog>
  <changelog author="ailiop@suse.com" date="1701518415">- xfs: convert log ticket and iclog flags to unsigned (git-fixes).
- commit 57245d3</changelog>
  <changelog author="tiwai@suse.de" date="1701604800">- firewire: core: fix possible memory leak in create_units()
  (git-fixes).
- commit 0ade49c</changelog>
  <changelog author="tiwai@suse.de" date="1701691200">- USB: serial: option: add Luat Air72*U series products
  (git-fixes).
- USB: serial: option: add Fibocom L7xx modules (git-fixes).
- USB: serial: option: don't claim interface 4 for ZTE MF290
  (git-fixes).
- ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CVA
  (git-fixes).
- commit 4c40fde</changelog>
  <changelog author="mfranc@suse.cz" date="1701691201">- blacklist.conf: this is true for SLE15-SP4 not SLE15-SP5
  The backport was provided in bsc#1215123 for SP5, but it has further
  dependencies not present in SP4, so unless requested by IBM, I'm going
  to skip it for git-fixes.
- commit 5219b23</changelog>
  <changelog author="msuchanek@suse.de" date="1701691202">- powerpc: Don't clobber f0/vs0 during fp|altivec register save
  (bsc#1217780).
- commit 46d31e2</changelog>
</package>
<package pkgid="2383cfd43cc43394e8e9c2c23a4c82e3b665c18357930244064b8427cee4c2ee" name="kernel-default" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.55.39.1"/>
  <changelog author="ailiop@suse.com" date="1701518400">- xfs: standardize inode generation formatting in ftrace output
  (git-fixes).
- commit 81e4504</changelog>
  <changelog author="ailiop@suse.com" date="1701518401">- xfs: convert buffer flags to unsigned (git-fixes).
- commit 6147a1c</changelog>
  <changelog author="ailiop@suse.com" date="1701518402">- xfs: convert attr type flags to unsigned (git-fixes).
- commit c641f4d</changelog>
  <changelog author="ailiop@suse.com" date="1701518403">- xfs: convert scrub type flags to unsigned (git-fixes).
- commit c3c7c82</changelog>
  <changelog author="ailiop@suse.com" date="1701518404">- xfs: convert bmap extent type flags to unsigned (git-fixes).
- commit 30fead3</changelog>
  <changelog author="ailiop@suse.com" date="1701518405">- xfs: convert bmapi flags to unsigned (git-fixes).
- commit 1ec6360</changelog>
  <changelog author="ailiop@suse.com" date="1701518406">- xfs: convert AGF log flags to unsigned (git-fixes).
- commit 91cefbb</changelog>
  <changelog author="ailiop@suse.com" date="1701518407">- xfs: convert AGI log flags to unsigned (git-fixes).
- commit 66d955b</changelog>
  <changelog author="ailiop@suse.com" date="1701518408">- xfs: convert btree buffer log flags to unsigned (git-fixes).
- commit ced67a9</changelog>
  <changelog author="ailiop@suse.com" date="1701518409">- xfs: convert buffer log item flags to unsigned (git-fixes).
- commit d4d0c9c</changelog>
  <changelog author="ailiop@suse.com" date="1701518410">- xfs: convert da btree operations flags to unsigned (git-fixes).
- commit 41198d9</changelog>
  <changelog author="ailiop@suse.com" date="1701518411">- xfs: convert dquot flags to unsigned (git-fixes).
- commit 1630213</changelog>
  <changelog author="ailiop@suse.com" date="1701518412">- xfs: convert log item tracepoint flags to unsigned (git-fixes).
- commit 411032a</changelog>
  <changelog author="ailiop@suse.com" date="1701518413">- xfs: convert inode lock flags to unsigned (git-fixes).
- commit 831f7e2</changelog>
  <changelog author="ailiop@suse.com" date="1701518414">- xfs: convert quota options flags to unsigned (git-fixes).
- commit 7dfe466</changelog>
  <changelog author="ailiop@suse.com" date="1701518415">- xfs: convert log ticket and iclog flags to unsigned (git-fixes).
- commit 57245d3</changelog>
  <changelog author="tiwai@suse.de" date="1701604800">- firewire: core: fix possible memory leak in create_units()
  (git-fixes).
- commit 0ade49c</changelog>
  <changelog author="tiwai@suse.de" date="1701691200">- USB: serial: option: add Luat Air72*U series products
  (git-fixes).
- USB: serial: option: add Fibocom L7xx modules (git-fixes).
- USB: serial: option: don't claim interface 4 for ZTE MF290
  (git-fixes).
- ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CVA
  (git-fixes).
- commit 4c40fde</changelog>
  <changelog author="mfranc@suse.cz" date="1701691201">- blacklist.conf: this is true for SLE15-SP4 not SLE15-SP5
  The backport was provided in bsc#1215123 for SP5, but it has further
  dependencies not present in SP4, so unless requested by IBM, I'm going
  to skip it for git-fixes.
- commit 5219b23</changelog>
  <changelog author="msuchanek@suse.de" date="1701691202">- powerpc: Don't clobber f0/vs0 during fp|altivec register save
  (bsc#1217780).
- commit 46d31e2</changelog>
</package>
<package pkgid="9b199337cd9c2ae11dde1ee139e6111e29879e1859521067d53ca0dc5588597d" name="kernel-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150500.55.39.1"/>
  <changelog author="ailiop@suse.com" date="1701518400">- xfs: standardize inode generation formatting in ftrace output
  (git-fixes).
- commit 81e4504</changelog>
  <changelog author="ailiop@suse.com" date="1701518401">- xfs: convert buffer flags to unsigned (git-fixes).
- commit 6147a1c</changelog>
  <changelog author="ailiop@suse.com" date="1701518402">- xfs: convert attr type flags to unsigned (git-fixes).
- commit c641f4d</changelog>
  <changelog author="ailiop@suse.com" date="1701518403">- xfs: convert scrub type flags to unsigned (git-fixes).
- commit c3c7c82</changelog>
  <changelog author="ailiop@suse.com" date="1701518404">- xfs: convert bmap extent type flags to unsigned (git-fixes).
- commit 30fead3</changelog>
  <changelog author="ailiop@suse.com" date="1701518405">- xfs: convert bmapi flags to unsigned (git-fixes).
- commit 1ec6360</changelog>
  <changelog author="ailiop@suse.com" date="1701518406">- xfs: convert AGF log flags to unsigned (git-fixes).
- commit 91cefbb</changelog>
  <changelog author="ailiop@suse.com" date="1701518407">- xfs: convert AGI log flags to unsigned (git-fixes).
- commit 66d955b</changelog>
  <changelog author="ailiop@suse.com" date="1701518408">- xfs: convert btree buffer log flags to unsigned (git-fixes).
- commit ced67a9</changelog>
  <changelog author="ailiop@suse.com" date="1701518409">- xfs: convert buffer log item flags to unsigned (git-fixes).
- commit d4d0c9c</changelog>
  <changelog author="ailiop@suse.com" date="1701518410">- xfs: convert da btree operations flags to unsigned (git-fixes).
- commit 41198d9</changelog>
  <changelog author="ailiop@suse.com" date="1701518411">- xfs: convert dquot flags to unsigned (git-fixes).
- commit 1630213</changelog>
  <changelog author="ailiop@suse.com" date="1701518412">- xfs: convert log item tracepoint flags to unsigned (git-fixes).
- commit 411032a</changelog>
  <changelog author="ailiop@suse.com" date="1701518413">- xfs: convert inode lock flags to unsigned (git-fixes).
- commit 831f7e2</changelog>
  <changelog author="ailiop@suse.com" date="1701518414">- xfs: convert quota options flags to unsigned (git-fixes).
- commit 7dfe466</changelog>
  <changelog author="ailiop@suse.com" date="1701518415">- xfs: convert log ticket and iclog flags to unsigned (git-fixes).
- commit 57245d3</changelog>
  <changelog author="tiwai@suse.de" date="1701604800">- firewire: core: fix possible memory leak in create_units()
  (git-fixes).
- commit 0ade49c</changelog>
  <changelog author="tiwai@suse.de" date="1701691200">- USB: serial: option: add Luat Air72*U series products
  (git-fixes).
- USB: serial: option: add Fibocom L7xx modules (git-fixes).
- USB: serial: option: don't claim interface 4 for ZTE MF290
  (git-fixes).
- ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CVA
  (git-fixes).
- commit 4c40fde</changelog>
  <changelog author="mfranc@suse.cz" date="1701691201">- blacklist.conf: this is true for SLE15-SP4 not SLE15-SP5
  The backport was provided in bsc#1215123 for SP5, but it has further
  dependencies not present in SP4, so unless requested by IBM, I'm going
  to skip it for git-fixes.
- commit 5219b23</changelog>
  <changelog author="msuchanek@suse.de" date="1701691202">- powerpc: Don't clobber f0/vs0 during fp|altivec register save
  (bsc#1217780).
- commit 46d31e2</changelog>
</package>
<package pkgid="6612afc4d340793a854a74ae8ac1a327a18e0d51466f9a5d9f9574c6e8c1dbac" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.55.39.1"/>
  <changelog author="ailiop@suse.com" date="1701518400">- xfs: standardize inode generation formatting in ftrace output
  (git-fixes).
- commit 81e4504</changelog>
  <changelog author="ailiop@suse.com" date="1701518401">- xfs: convert buffer flags to unsigned (git-fixes).
- commit 6147a1c</changelog>
  <changelog author="ailiop@suse.com" date="1701518402">- xfs: convert attr type flags to unsigned (git-fixes).
- commit c641f4d</changelog>
  <changelog author="ailiop@suse.com" date="1701518403">- xfs: convert scrub type flags to unsigned (git-fixes).
- commit c3c7c82</changelog>
  <changelog author="ailiop@suse.com" date="1701518404">- xfs: convert bmap extent type flags to unsigned (git-fixes).
- commit 30fead3</changelog>
  <changelog author="ailiop@suse.com" date="1701518405">- xfs: convert bmapi flags to unsigned (git-fixes).
- commit 1ec6360</changelog>
  <changelog author="ailiop@suse.com" date="1701518406">- xfs: convert AGF log flags to unsigned (git-fixes).
- commit 91cefbb</changelog>
  <changelog author="ailiop@suse.com" date="1701518407">- xfs: convert AGI log flags to unsigned (git-fixes).
- commit 66d955b</changelog>
  <changelog author="ailiop@suse.com" date="1701518408">- xfs: convert btree buffer log flags to unsigned (git-fixes).
- commit ced67a9</changelog>
  <changelog author="ailiop@suse.com" date="1701518409">- xfs: convert buffer log item flags to unsigned (git-fixes).
- commit d4d0c9c</changelog>
  <changelog author="ailiop@suse.com" date="1701518410">- xfs: convert da btree operations flags to unsigned (git-fixes).
- commit 41198d9</changelog>
  <changelog author="ailiop@suse.com" date="1701518411">- xfs: convert dquot flags to unsigned (git-fixes).
- commit 1630213</changelog>
  <changelog author="ailiop@suse.com" date="1701518412">- xfs: convert log item tracepoint flags to unsigned (git-fixes).
- commit 411032a</changelog>
  <changelog author="ailiop@suse.com" date="1701518413">- xfs: convert inode lock flags to unsigned (git-fixes).
- commit 831f7e2</changelog>
  <changelog author="ailiop@suse.com" date="1701518414">- xfs: convert quota options flags to unsigned (git-fixes).
- commit 7dfe466</changelog>
  <changelog author="ailiop@suse.com" date="1701518415">- xfs: convert log ticket and iclog flags to unsigned (git-fixes).
- commit 57245d3</changelog>
  <changelog author="tiwai@suse.de" date="1701604800">- firewire: core: fix possible memory leak in create_units()
  (git-fixes).
- commit 0ade49c</changelog>
  <changelog author="tiwai@suse.de" date="1701691200">- USB: serial: option: add Luat Air72*U series products
  (git-fixes).
- USB: serial: option: add Fibocom L7xx modules (git-fixes).
- USB: serial: option: don't claim interface 4 for ZTE MF290
  (git-fixes).
- ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CVA
  (git-fixes).
- commit 4c40fde</changelog>
  <changelog author="mfranc@suse.cz" date="1701691201">- blacklist.conf: this is true for SLE15-SP4 not SLE15-SP5
  The backport was provided in bsc#1215123 for SP5, but it has further
  dependencies not present in SP4, so unless requested by IBM, I'm going
  to skip it for git-fixes.
- commit 5219b23</changelog>
  <changelog author="msuchanek@suse.de" date="1701691202">- powerpc: Don't clobber f0/vs0 during fp|altivec register save
  (bsc#1217780).
- commit 46d31e2</changelog>
</package>
<package pkgid="663ce341dd742771f1ad98cba6d7cd993ac933e1a09c38d57c5b1293c837ee3f" name="kernel-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.44.1"/>
  <changelog author="nik.borisov@suse.com" date="1704715200">- x86/srso: Fix SBPB enablement for (possible) future fixed HW   (git-fixes).
- Refresh
  patches.suse/x86-srso-fix-vulnerability-reporting-for-missing-microcode.patch.
- commit b121d1d</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715201">- x86/srso: Add SRSO mitigation for Hygon processors (git-fixes).
- commit 7b8dfd1</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715202">- x86/smp: Use dedicated cache-line for mwait_play_dead() (git-fixes).
- commit 8087b92</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715203">- x86/alternatives: Disable KASAN in apply_alternatives() (git-fixes).
- commit 7029135</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715204">- x86/alternatives: Sync core before enabling interrupts (git-fixes).
- commit 4a0b72a</changelog>
  <changelog author="ailiop@suse.com" date="1704715205">- gfs2: Silence "suspicious RCU usage in gfs2_permission" warning
  (git-fixes).
- commit 3929c70</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715206">- x86/boot/compressed: Reserve more memory for page tables  (git-fixes).
- commit 6bf16e1</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715207">- x86/boot: Fix incorrect startup_gdt_descr.size (git-fixes).
- commit fdc98a7</changelog>
  <changelog author="pmladek@suse.com" date="1704715208">- vsprintf/kallsyms: Prevent invalid data when printing symbol
  (bsc#1217602).
- commit 8dab9cc</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715209">- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 (git-fixes).
- commit d74349c</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715210">- x86/cpu: Fix amd_check_microcode() declaration (git-fixes).
- Refresh patches.suse/x86-srso-set-cpuid-feature-bits-independently-of-bug-or-mitigation-status.patch.
- commit c22f4b4</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715211">- x86/fpu: Invalidate FPU state correctly on exec() (git-fixes).
- commit 7686df9</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715212">- x86/fpu/xstate: Prevent false-positive warning in __copy_xstate_uabi_buf() (git-fixes).
- commit 46d60b3</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715213">- x86/purgatory: Remove LTO flags (git-fixes).
- commit bbd4f84</changelog>
  <changelog author="palcantara@suse.de" date="1704715214">- smb: client: fix potential OOB in smb2_dump_detail()
  (bsc#1217946 CVE-2023-6610).
- commit cfca7f7</changelog>
  <changelog author="jroedel@suse.de" date="1704801600">- swiotlb: reduce the number of areas to match actual memory
  pool size (git-fixes).
- swiotlb: always set the number of areas before allocating the
  pool (git-fixes).
- swiotlb: fix debugfs reporting of reserved memory pools
  (git-fixes).
- swiotlb: fix a braino in the alignment check fix (bsc#1216559).
- swiotlb: fix slot alignment checks (bsc#1216559).
- swiotlb: fix the deadlock in swiotlb_do_find_slots (git-fixes).
- swiotlb: reduce the swiotlb buffer size on allocation failure
  (git-fixes).
- swiotlb: don't panic! (git-fixes).
- Revert "swiotlb: panic if nslabs is too small" (git-fixes).
- commit 1b89825</changelog>
  <changelog author="ohering@suse.de" date="1704801601">- io_uring/af_unix: disable sending io_uring over sockets
  (bsc#1218447, CVE-2023-6531).
- commit fdc256b</changelog>
  <changelog author="jroedel@suse.de" date="1704801602">- swiotlb: use the calculated number of areas (git-fixes).
- swiotlb: mark swiotlb_memblock_alloc() as __init (git-fixes).
- commit b9aedb4</changelog>
  <changelog author="mkoutny@suse.com" date="1704801603">- Update patches.kabi/kabi-fix-zone-unaccepted-memory.patch
  (jsc#PED-7167 bsc#1218643).
- commit f781e3d</changelog>
  <changelog author="aabdallah@suse.de" date="1705320000">- Update: drm/vmwgfx: Keep a gem reference to user bos in surfaces
- Fix crash in vmw_context_cotables_unref when 3d support is enabled
  (bsc#1218738)
- commit 99a9f67</changelog>
</package>
<package pkgid="7ebfc911fceca908dbb63c188bc0324770bac7f045b77111a72ac3920a5dee37" name="kernel-default" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.55.44.1"/>
  <changelog author="nik.borisov@suse.com" date="1704715200">- x86/srso: Fix SBPB enablement for (possible) future fixed HW   (git-fixes).
- Refresh
  patches.suse/x86-srso-fix-vulnerability-reporting-for-missing-microcode.patch.
- commit b121d1d</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715201">- x86/srso: Add SRSO mitigation for Hygon processors (git-fixes).
- commit 7b8dfd1</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715202">- x86/smp: Use dedicated cache-line for mwait_play_dead() (git-fixes).
- commit 8087b92</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715203">- x86/alternatives: Disable KASAN in apply_alternatives() (git-fixes).
- commit 7029135</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715204">- x86/alternatives: Sync core before enabling interrupts (git-fixes).
- commit 4a0b72a</changelog>
  <changelog author="ailiop@suse.com" date="1704715205">- gfs2: Silence "suspicious RCU usage in gfs2_permission" warning
  (git-fixes).
- commit 3929c70</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715206">- x86/boot/compressed: Reserve more memory for page tables  (git-fixes).
- commit 6bf16e1</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715207">- x86/boot: Fix incorrect startup_gdt_descr.size (git-fixes).
- commit fdc98a7</changelog>
  <changelog author="pmladek@suse.com" date="1704715208">- vsprintf/kallsyms: Prevent invalid data when printing symbol
  (bsc#1217602).
- commit 8dab9cc</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715209">- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 (git-fixes).
- commit d74349c</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715210">- x86/cpu: Fix amd_check_microcode() declaration (git-fixes).
- Refresh patches.suse/x86-srso-set-cpuid-feature-bits-independently-of-bug-or-mitigation-status.patch.
- commit c22f4b4</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715211">- x86/fpu: Invalidate FPU state correctly on exec() (git-fixes).
- commit 7686df9</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715212">- x86/fpu/xstate: Prevent false-positive warning in __copy_xstate_uabi_buf() (git-fixes).
- commit 46d60b3</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715213">- x86/purgatory: Remove LTO flags (git-fixes).
- commit bbd4f84</changelog>
  <changelog author="palcantara@suse.de" date="1704715214">- smb: client: fix potential OOB in smb2_dump_detail()
  (bsc#1217946 CVE-2023-6610).
- commit cfca7f7</changelog>
  <changelog author="jroedel@suse.de" date="1704801600">- swiotlb: reduce the number of areas to match actual memory
  pool size (git-fixes).
- swiotlb: always set the number of areas before allocating the
  pool (git-fixes).
- swiotlb: fix debugfs reporting of reserved memory pools
  (git-fixes).
- swiotlb: fix a braino in the alignment check fix (bsc#1216559).
- swiotlb: fix slot alignment checks (bsc#1216559).
- swiotlb: fix the deadlock in swiotlb_do_find_slots (git-fixes).
- swiotlb: reduce the swiotlb buffer size on allocation failure
  (git-fixes).
- swiotlb: don't panic! (git-fixes).
- Revert "swiotlb: panic if nslabs is too small" (git-fixes).
- commit 1b89825</changelog>
  <changelog author="ohering@suse.de" date="1704801601">- io_uring/af_unix: disable sending io_uring over sockets
  (bsc#1218447, CVE-2023-6531).
- commit fdc256b</changelog>
  <changelog author="jroedel@suse.de" date="1704801602">- swiotlb: use the calculated number of areas (git-fixes).
- swiotlb: mark swiotlb_memblock_alloc() as __init (git-fixes).
- commit b9aedb4</changelog>
  <changelog author="mkoutny@suse.com" date="1704801603">- Update patches.kabi/kabi-fix-zone-unaccepted-memory.patch
  (jsc#PED-7167 bsc#1218643).
- commit f781e3d</changelog>
  <changelog author="aabdallah@suse.de" date="1705320000">- Update: drm/vmwgfx: Keep a gem reference to user bos in surfaces
- Fix crash in vmw_context_cotables_unref when 3d support is enabled
  (bsc#1218738)
- commit 99a9f67</changelog>
</package>
<package pkgid="419f540b4a196949108ac01520e241cae0df5c73f00eeeff23dbff207c583e6e" name="kernel-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150500.55.44.1"/>
  <changelog author="nik.borisov@suse.com" date="1704715200">- x86/srso: Fix SBPB enablement for (possible) future fixed HW   (git-fixes).
- Refresh
  patches.suse/x86-srso-fix-vulnerability-reporting-for-missing-microcode.patch.
- commit b121d1d</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715201">- x86/srso: Add SRSO mitigation for Hygon processors (git-fixes).
- commit 7b8dfd1</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715202">- x86/smp: Use dedicated cache-line for mwait_play_dead() (git-fixes).
- commit 8087b92</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715203">- x86/alternatives: Disable KASAN in apply_alternatives() (git-fixes).
- commit 7029135</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715204">- x86/alternatives: Sync core before enabling interrupts (git-fixes).
- commit 4a0b72a</changelog>
  <changelog author="ailiop@suse.com" date="1704715205">- gfs2: Silence "suspicious RCU usage in gfs2_permission" warning
  (git-fixes).
- commit 3929c70</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715206">- x86/boot/compressed: Reserve more memory for page tables  (git-fixes).
- commit 6bf16e1</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715207">- x86/boot: Fix incorrect startup_gdt_descr.size (git-fixes).
- commit fdc98a7</changelog>
  <changelog author="pmladek@suse.com" date="1704715208">- vsprintf/kallsyms: Prevent invalid data when printing symbol
  (bsc#1217602).
- commit 8dab9cc</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715209">- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 (git-fixes).
- commit d74349c</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715210">- x86/cpu: Fix amd_check_microcode() declaration (git-fixes).
- Refresh patches.suse/x86-srso-set-cpuid-feature-bits-independently-of-bug-or-mitigation-status.patch.
- commit c22f4b4</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715211">- x86/fpu: Invalidate FPU state correctly on exec() (git-fixes).
- commit 7686df9</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715212">- x86/fpu/xstate: Prevent false-positive warning in __copy_xstate_uabi_buf() (git-fixes).
- commit 46d60b3</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715213">- x86/purgatory: Remove LTO flags (git-fixes).
- commit bbd4f84</changelog>
  <changelog author="palcantara@suse.de" date="1704715214">- smb: client: fix potential OOB in smb2_dump_detail()
  (bsc#1217946 CVE-2023-6610).
- commit cfca7f7</changelog>
  <changelog author="jroedel@suse.de" date="1704801600">- swiotlb: reduce the number of areas to match actual memory
  pool size (git-fixes).
- swiotlb: always set the number of areas before allocating the
  pool (git-fixes).
- swiotlb: fix debugfs reporting of reserved memory pools
  (git-fixes).
- swiotlb: fix a braino in the alignment check fix (bsc#1216559).
- swiotlb: fix slot alignment checks (bsc#1216559).
- swiotlb: fix the deadlock in swiotlb_do_find_slots (git-fixes).
- swiotlb: reduce the swiotlb buffer size on allocation failure
  (git-fixes).
- swiotlb: don't panic! (git-fixes).
- Revert "swiotlb: panic if nslabs is too small" (git-fixes).
- commit 1b89825</changelog>
  <changelog author="ohering@suse.de" date="1704801601">- io_uring/af_unix: disable sending io_uring over sockets
  (bsc#1218447, CVE-2023-6531).
- commit fdc256b</changelog>
  <changelog author="jroedel@suse.de" date="1704801602">- swiotlb: use the calculated number of areas (git-fixes).
- swiotlb: mark swiotlb_memblock_alloc() as __init (git-fixes).
- commit b9aedb4</changelog>
  <changelog author="mkoutny@suse.com" date="1704801603">- Update patches.kabi/kabi-fix-zone-unaccepted-memory.patch
  (jsc#PED-7167 bsc#1218643).
- commit f781e3d</changelog>
  <changelog author="aabdallah@suse.de" date="1705320000">- Update: drm/vmwgfx: Keep a gem reference to user bos in surfaces
- Fix crash in vmw_context_cotables_unref when 3d support is enabled
  (bsc#1218738)
- commit 99a9f67</changelog>
</package>
<package pkgid="bbe9f7e00baff6fcbdef1b27347b4e81714520bc7270c608cae6ac0812319a1f" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.55.44.1"/>
  <changelog author="nik.borisov@suse.com" date="1704715200">- x86/srso: Fix SBPB enablement for (possible) future fixed HW   (git-fixes).
- Refresh
  patches.suse/x86-srso-fix-vulnerability-reporting-for-missing-microcode.patch.
- commit b121d1d</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715201">- x86/srso: Add SRSO mitigation for Hygon processors (git-fixes).
- commit 7b8dfd1</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715202">- x86/smp: Use dedicated cache-line for mwait_play_dead() (git-fixes).
- commit 8087b92</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715203">- x86/alternatives: Disable KASAN in apply_alternatives() (git-fixes).
- commit 7029135</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715204">- x86/alternatives: Sync core before enabling interrupts (git-fixes).
- commit 4a0b72a</changelog>
  <changelog author="ailiop@suse.com" date="1704715205">- gfs2: Silence "suspicious RCU usage in gfs2_permission" warning
  (git-fixes).
- commit 3929c70</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715206">- x86/boot/compressed: Reserve more memory for page tables  (git-fixes).
- commit 6bf16e1</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715207">- x86/boot: Fix incorrect startup_gdt_descr.size (git-fixes).
- commit fdc98a7</changelog>
  <changelog author="pmladek@suse.com" date="1704715208">- vsprintf/kallsyms: Prevent invalid data when printing symbol
  (bsc#1217602).
- commit 8dab9cc</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715209">- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 (git-fixes).
- commit d74349c</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715210">- x86/cpu: Fix amd_check_microcode() declaration (git-fixes).
- Refresh patches.suse/x86-srso-set-cpuid-feature-bits-independently-of-bug-or-mitigation-status.patch.
- commit c22f4b4</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715211">- x86/fpu: Invalidate FPU state correctly on exec() (git-fixes).
- commit 7686df9</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715212">- x86/fpu/xstate: Prevent false-positive warning in __copy_xstate_uabi_buf() (git-fixes).
- commit 46d60b3</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715213">- x86/purgatory: Remove LTO flags (git-fixes).
- commit bbd4f84</changelog>
  <changelog author="palcantara@suse.de" date="1704715214">- smb: client: fix potential OOB in smb2_dump_detail()
  (bsc#1217946 CVE-2023-6610).
- commit cfca7f7</changelog>
  <changelog author="jroedel@suse.de" date="1704801600">- swiotlb: reduce the number of areas to match actual memory
  pool size (git-fixes).
- swiotlb: always set the number of areas before allocating the
  pool (git-fixes).
- swiotlb: fix debugfs reporting of reserved memory pools
  (git-fixes).
- swiotlb: fix a braino in the alignment check fix (bsc#1216559).
- swiotlb: fix slot alignment checks (bsc#1216559).
- swiotlb: fix the deadlock in swiotlb_do_find_slots (git-fixes).
- swiotlb: reduce the swiotlb buffer size on allocation failure
  (git-fixes).
- swiotlb: don't panic! (git-fixes).
- Revert "swiotlb: panic if nslabs is too small" (git-fixes).
- commit 1b89825</changelog>
  <changelog author="ohering@suse.de" date="1704801601">- io_uring/af_unix: disable sending io_uring over sockets
  (bsc#1218447, CVE-2023-6531).
- commit fdc256b</changelog>
  <changelog author="jroedel@suse.de" date="1704801602">- swiotlb: use the calculated number of areas (git-fixes).
- swiotlb: mark swiotlb_memblock_alloc() as __init (git-fixes).
- commit b9aedb4</changelog>
  <changelog author="mkoutny@suse.com" date="1704801603">- Update patches.kabi/kabi-fix-zone-unaccepted-memory.patch
  (jsc#PED-7167 bsc#1218643).
- commit f781e3d</changelog>
  <changelog author="aabdallah@suse.de" date="1705320000">- Update: drm/vmwgfx: Keep a gem reference to user bos in surfaces
- Fix crash in vmw_context_cotables_unref when 3d support is enabled
  (bsc#1218738)
- commit 99a9f67</changelog>
</package>
<package pkgid="0ae644814e38d920b28076b1afa632cc57c4e389599b840def19f3d161028e82" name="kernel-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.49.1"/>
  <changelog author="ailiop@suse.com" date="1707220800">- fs: Fix error checking for d_hash_and_lookup() (git-fixes).
- commit b1a5e63</changelog>
  <changelog author="ailiop@suse.com" date="1707220801">- tracefs: Add missing lockdown check to tracefs_create_dir()
  (git-fixes).
- commit 36d0f04</changelog>
  <changelog author="ailiop@suse.com" date="1707220802">- fs: indicate request originates from old mount API (git-fixes).
- commit 8ccbbb1</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1707220803">- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
  (CVE-2024-1086 bsc#1219434).
- commit 5f917ff</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1707307200">- netfilter: nf_tables: check if catch-all set element is active
  in next generation (CVE-2024-1085 bsc#1219429).
- commit 7b3f4c4</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307201">- RAS: Introduce AMD Address Translation Library (jsc#PED-7618).
- commit d6ad6ba</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307202">- EDAC/amd64: Use new AMD Address Translation Library (jsc#PED-7618).
- commit f1baba4</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307203">- Documentation: RAS: Add index and address translation section (jsc#PED-7618).
- commit d6e1334</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307204">- RAS/AMD/ATL: Add MI300 support (jsc#PED-7618).
- commit 761e3c8</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307205">- RAS/AMD/ATL: Fix array overflow in get_logical_coh_st_fabric_id_mi300() (jsc#PED-7618).
- commit 83df5af</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307206">- RAS/AMD/ATL: Add MI300 DRAM to normalized address translation support (jsc#PED-7618).
- commit a26a502</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307207">- EDAC/amd64: Add MI300 row retirement support (jsc#PED-7618).
- commit fb688f3</changelog>
  <changelog author="vbabka@suse.cz" date="1707393600">- README.BRANCH: update branch name to cve/linux-5.14, update maintainers
  as requested
- commit 8e34879</changelog>
  <changelog author="vkarasulli@suse.de" date="1707393601">- Update
  patches.suse/Bluetooth-Fix-atomicity-violation-in-min-max-_key_si.patch
  (git-fixes bsc#1219608 CVE-2024-24860).
- commit dedfe8a</changelog>
  <changelog author="vkarasulli@suse.de" date="1707393602">- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
  (git-fixes bsc#1219608 CVE-2024-24860).
- commit a1186fd</changelog>
  <changelog author="neilb@suse.de" date="1707480000">- Refresh patches.suse/nfsd-fix-RELEASE_LOCKOWNER.patch.
  Accidentally removed nfs4_get_stateowner
- commit ad106c0</changelog>
  <changelog author="mkoutny@suse.com" date="1707480001">- README.BRANCH: Update cve/linux-5.14 maintainers
  Add myself to match SLE15-SP5 consumer + fix typo in branch name.
- commit da26653</changelog>
  <changelog author="jgross@suse.com" date="1707480002">- vhost: use kzalloc() instead of kmalloc() followed by memset()
  (CVE-2024-0340, bsc#1218689).
- commit 4c5a740</changelog>
  <changelog author="nik.borisov@suse.com" date="1707480003">- Refresh patches.suse/EDAC-amd64-Use-new-AMD-Address-Translation-Library.patch.
  Fix build due to incomplete line removal
- commit 720d084</changelog>
  <changelog author="ykaukab@suse.de" date="1707652800">- Refresh patches.suse/EDAC-amd64-Use-new-AMD-Address-Translation-Library.patch.
  Fix following error when building kvmsmall config by removing left over
  declaration:
  [  216s] In file included from ../arch/x86/kernel/cpu/mce/core.c:52:0:
  [  216s] ../arch/x86/include/asm/mce.h:366:1: error: duplicate 'static'
  [  216s]  static inline void mce_hygon_feature_init(struct cpuinfo_x86 *c) { return mce_amd_feature_init(c); }
  [  216s]  ^~~~~~
  [  216s] ../arch/x86/include/asm/mce.h:366:15: error: two or more data types in declaration specifiers
  [  216s]  static inline void mce_hygon_feature_init(struct cpuinfo_x86 *c) { return mce_amd_feature_init(c); }
  [  216s]                ^~~~
  [  216s] ../arch/x86/include/asm/mce.h: In function 'mce_hygon_feature_init':
  [  216s] ../arch/x86/include/asm/mce.h:366:75: error: void value not ignored as it ought to be
  [  216s]  static inline void mce_hygon_feature_init(struct cpuinfo_x86 *c) { return mce_amd_feature_init(c); }
  [  216s]                                                                            ^~~~~~~~~~~~~~~~~~~~~~~
  [  216s] ../arch/x86/include/asm/mce.h:366:50: error: control reaches end of non-void function [-Werror=return-type]
  [  216s]  static inline void mce_hygon_feature_init(struct cpuinfo_x86 *c) { return mce_amd_feature_init(c); }
- commit 7015e17</changelog>
</package>
<package pkgid="a0489b685594ca283b966ea12c0e0351fefeda392d71bfb3188d82510c8e8f90" name="kernel-default" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.55.49.1"/>
  <changelog author="ailiop@suse.com" date="1707220800">- fs: Fix error checking for d_hash_and_lookup() (git-fixes).
- commit b1a5e63</changelog>
  <changelog author="ailiop@suse.com" date="1707220801">- tracefs: Add missing lockdown check to tracefs_create_dir()
  (git-fixes).
- commit 36d0f04</changelog>
  <changelog author="ailiop@suse.com" date="1707220802">- fs: indicate request originates from old mount API (git-fixes).
- commit 8ccbbb1</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1707220803">- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
  (CVE-2024-1086 bsc#1219434).
- commit 5f917ff</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1707307200">- netfilter: nf_tables: check if catch-all set element is active
  in next generation (CVE-2024-1085 bsc#1219429).
- commit 7b3f4c4</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307201">- RAS: Introduce AMD Address Translation Library (jsc#PED-7618).
- commit d6ad6ba</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307202">- EDAC/amd64: Use new AMD Address Translation Library (jsc#PED-7618).
- commit f1baba4</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307203">- Documentation: RAS: Add index and address translation section (jsc#PED-7618).
- commit d6e1334</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307204">- RAS/AMD/ATL: Add MI300 support (jsc#PED-7618).
- commit 761e3c8</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307205">- RAS/AMD/ATL: Fix array overflow in get_logical_coh_st_fabric_id_mi300() (jsc#PED-7618).
- commit 83df5af</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307206">- RAS/AMD/ATL: Add MI300 DRAM to normalized address translation support (jsc#PED-7618).
- commit a26a502</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307207">- EDAC/amd64: Add MI300 row retirement support (jsc#PED-7618).
- commit fb688f3</changelog>
  <changelog author="vbabka@suse.cz" date="1707393600">- README.BRANCH: update branch name to cve/linux-5.14, update maintainers
  as requested
- commit 8e34879</changelog>
  <changelog author="vkarasulli@suse.de" date="1707393601">- Update
  patches.suse/Bluetooth-Fix-atomicity-violation-in-min-max-_key_si.patch
  (git-fixes bsc#1219608 CVE-2024-24860).
- commit dedfe8a</changelog>
  <changelog author="vkarasulli@suse.de" date="1707393602">- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
  (git-fixes bsc#1219608 CVE-2024-24860).
- commit a1186fd</changelog>
  <changelog author="neilb@suse.de" date="1707480000">- Refresh patches.suse/nfsd-fix-RELEASE_LOCKOWNER.patch.
  Accidentally removed nfs4_get_stateowner
- commit ad106c0</changelog>
  <changelog author="mkoutny@suse.com" date="1707480001">- README.BRANCH: Update cve/linux-5.14 maintainers
  Add myself to match SLE15-SP5 consumer + fix typo in branch name.
- commit da26653</changelog>
  <changelog author="jgross@suse.com" date="1707480002">- vhost: use kzalloc() instead of kmalloc() followed by memset()
  (CVE-2024-0340, bsc#1218689).
- commit 4c5a740</changelog>
  <changelog author="nik.borisov@suse.com" date="1707480003">- Refresh patches.suse/EDAC-amd64-Use-new-AMD-Address-Translation-Library.patch.
  Fix build due to incomplete line removal
- commit 720d084</changelog>
  <changelog author="ykaukab@suse.de" date="1707652800">- Refresh patches.suse/EDAC-amd64-Use-new-AMD-Address-Translation-Library.patch.
  Fix following error when building kvmsmall config by removing left over
  declaration:
  [  216s] In file included from ../arch/x86/kernel/cpu/mce/core.c:52:0:
  [  216s] ../arch/x86/include/asm/mce.h:366:1: error: duplicate 'static'
  [  216s]  static inline void mce_hygon_feature_init(struct cpuinfo_x86 *c) { return mce_amd_feature_init(c); }
  [  216s]  ^~~~~~
  [  216s] ../arch/x86/include/asm/mce.h:366:15: error: two or more data types in declaration specifiers
  [  216s]  static inline void mce_hygon_feature_init(struct cpuinfo_x86 *c) { return mce_amd_feature_init(c); }
  [  216s]                ^~~~
  [  216s] ../arch/x86/include/asm/mce.h: In function 'mce_hygon_feature_init':
  [  216s] ../arch/x86/include/asm/mce.h:366:75: error: void value not ignored as it ought to be
  [  216s]  static inline void mce_hygon_feature_init(struct cpuinfo_x86 *c) { return mce_amd_feature_init(c); }
  [  216s]                                                                            ^~~~~~~~~~~~~~~~~~~~~~~
  [  216s] ../arch/x86/include/asm/mce.h:366:50: error: control reaches end of non-void function [-Werror=return-type]
  [  216s]  static inline void mce_hygon_feature_init(struct cpuinfo_x86 *c) { return mce_amd_feature_init(c); }
- commit 7015e17</changelog>
</package>
<package pkgid="248c2447c6790c348e2b1e8ac1a04e07944433513209dc01492b4d86dd9a4e91" name="kernel-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150500.55.49.1"/>
  <changelog author="ailiop@suse.com" date="1707220800">- fs: Fix error checking for d_hash_and_lookup() (git-fixes).
- commit b1a5e63</changelog>
  <changelog author="ailiop@suse.com" date="1707220801">- tracefs: Add missing lockdown check to tracefs_create_dir()
  (git-fixes).
- commit 36d0f04</changelog>
  <changelog author="ailiop@suse.com" date="1707220802">- fs: indicate request originates from old mount API (git-fixes).
- commit 8ccbbb1</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1707220803">- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
  (CVE-2024-1086 bsc#1219434).
- commit 5f917ff</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1707307200">- netfilter: nf_tables: check if catch-all set element is active
  in next generation (CVE-2024-1085 bsc#1219429).
- commit 7b3f4c4</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307201">- RAS: Introduce AMD Address Translation Library (jsc#PED-7618).
- commit d6ad6ba</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307202">- EDAC/amd64: Use new AMD Address Translation Library (jsc#PED-7618).
- commit f1baba4</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307203">- Documentation: RAS: Add index and address translation section (jsc#PED-7618).
- commit d6e1334</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307204">- RAS/AMD/ATL: Add MI300 support (jsc#PED-7618).
- commit 761e3c8</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307205">- RAS/AMD/ATL: Fix array overflow in get_logical_coh_st_fabric_id_mi300() (jsc#PED-7618).
- commit 83df5af</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307206">- RAS/AMD/ATL: Add MI300 DRAM to normalized address translation support (jsc#PED-7618).
- commit a26a502</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307207">- EDAC/amd64: Add MI300 row retirement support (jsc#PED-7618).
- commit fb688f3</changelog>
  <changelog author="vbabka@suse.cz" date="1707393600">- README.BRANCH: update branch name to cve/linux-5.14, update maintainers
  as requested
- commit 8e34879</changelog>
  <changelog author="vkarasulli@suse.de" date="1707393601">- Update
  patches.suse/Bluetooth-Fix-atomicity-violation-in-min-max-_key_si.patch
  (git-fixes bsc#1219608 CVE-2024-24860).
- commit dedfe8a</changelog>
  <changelog author="vkarasulli@suse.de" date="1707393602">- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
  (git-fixes bsc#1219608 CVE-2024-24860).
- commit a1186fd</changelog>
  <changelog author="neilb@suse.de" date="1707480000">- Refresh patches.suse/nfsd-fix-RELEASE_LOCKOWNER.patch.
  Accidentally removed nfs4_get_stateowner
- commit ad106c0</changelog>
  <changelog author="mkoutny@suse.com" date="1707480001">- README.BRANCH: Update cve/linux-5.14 maintainers
  Add myself to match SLE15-SP5 consumer + fix typo in branch name.
- commit da26653</changelog>
  <changelog author="jgross@suse.com" date="1707480002">- vhost: use kzalloc() instead of kmalloc() followed by memset()
  (CVE-2024-0340, bsc#1218689).
- commit 4c5a740</changelog>
  <changelog author="nik.borisov@suse.com" date="1707480003">- Refresh patches.suse/EDAC-amd64-Use-new-AMD-Address-Translation-Library.patch.
  Fix build due to incomplete line removal
- commit 720d084</changelog>
  <changelog author="ykaukab@suse.de" date="1707652800">- Refresh patches.suse/EDAC-amd64-Use-new-AMD-Address-Translation-Library.patch.
  Fix following error when building kvmsmall config by removing left over
  declaration:
  [  216s] In file included from ../arch/x86/kernel/cpu/mce/core.c:52:0:
  [  216s] ../arch/x86/include/asm/mce.h:366:1: error: duplicate 'static'
  [  216s]  static inline void mce_hygon_feature_init(struct cpuinfo_x86 *c) { return mce_amd_feature_init(c); }
  [  216s]  ^~~~~~
  [  216s] ../arch/x86/include/asm/mce.h:366:15: error: two or more data types in declaration specifiers
  [  216s]  static inline void mce_hygon_feature_init(struct cpuinfo_x86 *c) { return mce_amd_feature_init(c); }
  [  216s]                ^~~~
  [  216s] ../arch/x86/include/asm/mce.h: In function 'mce_hygon_feature_init':
  [  216s] ../arch/x86/include/asm/mce.h:366:75: error: void value not ignored as it ought to be
  [  216s]  static inline void mce_hygon_feature_init(struct cpuinfo_x86 *c) { return mce_amd_feature_init(c); }
  [  216s]                                                                            ^~~~~~~~~~~~~~~~~~~~~~~
  [  216s] ../arch/x86/include/asm/mce.h:366:50: error: control reaches end of non-void function [-Werror=return-type]
  [  216s]  static inline void mce_hygon_feature_init(struct cpuinfo_x86 *c) { return mce_amd_feature_init(c); }
- commit 7015e17</changelog>
</package>
<package pkgid="9f50ecc650842cdaec446a9704f815ada538511b8ae219353026e922863343bd" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.55.49.1"/>
  <changelog author="ailiop@suse.com" date="1707220800">- fs: Fix error checking for d_hash_and_lookup() (git-fixes).
- commit b1a5e63</changelog>
  <changelog author="ailiop@suse.com" date="1707220801">- tracefs: Add missing lockdown check to tracefs_create_dir()
  (git-fixes).
- commit 36d0f04</changelog>
  <changelog author="ailiop@suse.com" date="1707220802">- fs: indicate request originates from old mount API (git-fixes).
- commit 8ccbbb1</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1707220803">- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
  (CVE-2024-1086 bsc#1219434).
- commit 5f917ff</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1707307200">- netfilter: nf_tables: check if catch-all set element is active
  in next generation (CVE-2024-1085 bsc#1219429).
- commit 7b3f4c4</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307201">- RAS: Introduce AMD Address Translation Library (jsc#PED-7618).
- commit d6ad6ba</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307202">- EDAC/amd64: Use new AMD Address Translation Library (jsc#PED-7618).
- commit f1baba4</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307203">- Documentation: RAS: Add index and address translation section (jsc#PED-7618).
- commit d6e1334</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307204">- RAS/AMD/ATL: Add MI300 support (jsc#PED-7618).
- commit 761e3c8</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307205">- RAS/AMD/ATL: Fix array overflow in get_logical_coh_st_fabric_id_mi300() (jsc#PED-7618).
- commit 83df5af</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307206">- RAS/AMD/ATL: Add MI300 DRAM to normalized address translation support (jsc#PED-7618).
- commit a26a502</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307207">- EDAC/amd64: Add MI300 row retirement support (jsc#PED-7618).
- commit fb688f3</changelog>
  <changelog author="vbabka@suse.cz" date="1707393600">- README.BRANCH: update branch name to cve/linux-5.14, update maintainers
  as requested
- commit 8e34879</changelog>
  <changelog author="vkarasulli@suse.de" date="1707393601">- Update
  patches.suse/Bluetooth-Fix-atomicity-violation-in-min-max-_key_si.patch
  (git-fixes bsc#1219608 CVE-2024-24860).
- commit dedfe8a</changelog>
  <changelog author="vkarasulli@suse.de" date="1707393602">- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
  (git-fixes bsc#1219608 CVE-2024-24860).
- commit a1186fd</changelog>
  <changelog author="neilb@suse.de" date="1707480000">- Refresh patches.suse/nfsd-fix-RELEASE_LOCKOWNER.patch.
  Accidentally removed nfs4_get_stateowner
- commit ad106c0</changelog>
  <changelog author="mkoutny@suse.com" date="1707480001">- README.BRANCH: Update cve/linux-5.14 maintainers
  Add myself to match SLE15-SP5 consumer + fix typo in branch name.
- commit da26653</changelog>
  <changelog author="jgross@suse.com" date="1707480002">- vhost: use kzalloc() instead of kmalloc() followed by memset()
  (CVE-2024-0340, bsc#1218689).
- commit 4c5a740</changelog>
  <changelog author="nik.borisov@suse.com" date="1707480003">- Refresh patches.suse/EDAC-amd64-Use-new-AMD-Address-Translation-Library.patch.
  Fix build due to incomplete line removal
- commit 720d084</changelog>
  <changelog author="ykaukab@suse.de" date="1707652800">- Refresh patches.suse/EDAC-amd64-Use-new-AMD-Address-Translation-Library.patch.
  Fix following error when building kvmsmall config by removing left over
  declaration:
  [  216s] In file included from ../arch/x86/kernel/cpu/mce/core.c:52:0:
  [  216s] ../arch/x86/include/asm/mce.h:366:1: error: duplicate 'static'
  [  216s]  static inline void mce_hygon_feature_init(struct cpuinfo_x86 *c) { return mce_amd_feature_init(c); }
  [  216s]  ^~~~~~
  [  216s] ../arch/x86/include/asm/mce.h:366:15: error: two or more data types in declaration specifiers
  [  216s]  static inline void mce_hygon_feature_init(struct cpuinfo_x86 *c) { return mce_amd_feature_init(c); }
  [  216s]                ^~~~
  [  216s] ../arch/x86/include/asm/mce.h: In function 'mce_hygon_feature_init':
  [  216s] ../arch/x86/include/asm/mce.h:366:75: error: void value not ignored as it ought to be
  [  216s]  static inline void mce_hygon_feature_init(struct cpuinfo_x86 *c) { return mce_amd_feature_init(c); }
  [  216s]                                                                            ^~~~~~~~~~~~~~~~~~~~~~~
  [  216s] ../arch/x86/include/asm/mce.h:366:50: error: control reaches end of non-void function [-Werror=return-type]
  [  216s]  static inline void mce_hygon_feature_init(struct cpuinfo_x86 *c) { return mce_amd_feature_init(c); }
- commit 7015e17</changelog>
</package>
<package pkgid="27b5f3e7bc47da2083a33c0f7ede9bbca7b2517be62470292ebf8fefe0e0242a" name="kernel-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.52.1"/>
  <changelog author="tiwai@suse.de" date="1709553600">- power: supply: bq27xxx-i2c: Do not free non existing IRQ
  (git-fixes).
- mmc: sdhci-xenon: add timeout for PHY init complete (git-fixes).
- mmc: sdhci-xenon: fix PHY init clock stability (git-fixes).
- mmc: core: Fix eMMC initialization with 1-bit bus connection
  (git-fixes).
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
  (git-fixes).
- mtd: spinand: gigadevice: Fix the get ecc status issue
  (git-fixes).
- nouveau: fix function cast warnings (git-fixes).
- media: ir_toy: fix a memleak in irtoy_tx (git-fixes).
- media: rc: bpf attach/detach requires write permission
  (git-fixes).
- mmc: slot-gpio: Allow non-sleeping GPIO ro (git-fixes).
- regulator: pwm-regulator: Add validity checks in continuous
  .get_voltage (git-fixes).
- platform/x86: touchscreen_dmi: Add info for the TECLAST X16
  Plus tablet (git-fixes).
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were
  detected (git-fixes).
- PCI: switchtec: Fix stdev_release() crash after surprise hot
  remove (git-fixes).
- PCI: Fix 64GT/s effective data rate calculation (git-fixes).
- PCI: Only override AMD USB controller if required (git-fixes).
- PCI/AER: Decode Requester ID when no error info found
  (git-fixes).
- media: ddbridge: fix an error code problem in ddb_probe
  (git-fixes).
- mmc: mmc_spi: remove custom DMA mapped buffers (git-fixes).
- mmc: core: Use mrq.sbc in close-ended ffu (git-fixes).
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
  (git-fixes).
- pstore/ram: Fix crash when setting number of cpus to an odd
  number (git-fixes).
- PNP: ACPI: fix fortify warning (git-fixes).
- regulator: core: Only increment use_count when enable_count
  changes (git-fixes).
- PM: core: Remove unnecessary (void *) conversions (git-fixes).
- serial: 8250: Remove serial_rs485 sanitization from em485
  (git-fixes).
- PM: runtime: Have devm_pm_runtime_enable() handle
  pm_runtime_dont_use_autosuspend() (git-fixes).
- commit 9894050</changelog>
  <changelog author="tiwai@suse.de" date="1709553601">- tomoyo: fix UAF write bug in tomoyo_write_control() (git-fixes).
- wifi: nl80211: reject iftype change with mesh ID change
  (git-fixes).
- usb: dwc3: gadget: Don't disconnect if not started (git-fixes).
- wifi: mac80211: adding missing drv_mgd_complete_tx() call
  (git-fixes).
- usb: f_mass_storage: forbid async queue when shutdown happen
  (git-fixes).
- usb: dwc3: host: Set XHCI_SG_TRB_CACHE_SIZE_QUIRK (git-fixes).
- spi: sh-msiof: avoid integer overflow in constants (git-fixes).
- wifi: mac80211: fix race condition on enabling fast-xmit
  (git-fixes).
- wifi: cfg80211: fix missing interfaces when dumping (git-fixes).
- usb: dwc3: gadget: Queue PM runtime idle on disconnect event
  (git-fixes).
- usb: dwc3: gadget: Handle EP0 request dequeuing properly
  (git-fixes).
- usb: hub: Replace hardcoded quirk value with BIT() macro
  (git-fixes).
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
  (git-fixes).
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for
  IT8784/IT8786 (git-fixes).
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
  (git-fixes).
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
  (git-fixes).
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
  (git-fixes).
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
  (git-fixes).
- wifi: ath9k: Fix potential array-index-out-of-bounds read in
  ath9k_htc_txstatus() (git-fixes).
- wifi: rt2x00: restart beacon queue when hardware reset
  (git-fixes).
- wifi: iwlwifi: mvm: avoid baid size integer overflow
  (git-fixes).
- wifi: wext-core: Fix -Wstringop-overflow warning in
  ioctl_standard_iw_point() (git-fixes).
- wifi: ath11k: fix registration of 6Ghz-only phy without the
  full channel range (git-fixes).
- usb: dwc3: gadget: Refactor EP0 forced stall/restart into a
  separate API (git-fixes).
- usb: dwc3: gadget: Submit endxfer command if delayed during
  disconnect (git-fixes).
- commit 8b4f9a3</changelog>
  <changelog author="tiwai@suse.de" date="1709553602">- usb: dwc3: gadget: Ignore End Transfer delay on teardown
  (git-fixes).
- Refresh
  patches.suse/usb-dwc3-gadget-Add-1ms-delay-after-end-transfer-com.patch.
- commit 251cd08</changelog>
  <changelog author="tiwai@suse.de" date="1709553603">- Update patch reference for input fix (CVE-2021-46932 bsc#1220444)
- commit e44e0b1</changelog>
  <changelog author="osalvador@suse.de" date="1709553604">- powerpc/pseries/memhp: Fix access beyond end of drmem array
  (bsc#1220250,CVE-2023-52451).
- commit fdc7254</changelog>
  <changelog author="jslaby@suse.cz" date="1709553605">- serial: imx: fix tx statemachine deadlock (bsc#1220364
  CVE-2023-52456).
- commit cd9f92c</changelog>
  <changelog author="jslaby@suse.cz" date="1709553606">- serial: 8250: omap: Don't skip resource freeing if
  pm_runtime_resume_and_get() failed (bsc#1220350 CVE-2023-52457).
- commit c82f528</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1709553607">- bpf: Minor cleanup around stack bounds (bsc#1220257
  CVE-2023-52452).
- bpf: Fix accesses to uninit stack slots (bsc#1220257
  CVE-2023-52452).
- bpf: Guard stack limits against 32bit overflow (git-fixes).
- bpf: Fix verification of indirect var-off stack access
  (git-fixes).
- bpf: Minor cleanup around stack bounds (bsc#1220257
  CVE-2023-52452).
- bpf: Fix accesses to uninit stack slots (bsc#1220257
  CVE-2023-52452).
- bpf: Add some comments to stack representation (bsc#1220257
  CVE-2023-52452).
- Refresh patches.kabi/kABI-fix-bpf-Tighten-ptr_to_btf_id-checks.patch
- bpf: Guard stack limits against 32bit overflow (git-fixes).
- bpf: Fix verification of indirect var-off stack access
  (git-fixes).
- bpf: Minor logging improvement (bsc#1220257).
- commit 7d03125</changelog>
  <changelog author="fdmanana@suse.com" date="1709553608">- btrfs: do not ASSERT() if the newly created subvolume already
  got read (bsc#1219126 CVE-2024-23850).
- commit a2ac581</changelog>
  <changelog author="fdmanana@suse.com" date="1709553609">- btrfs: fix double free of anonymous device after snapshot
  creation failure (bsc#1219126 CVE-2024-23850).
- commit 257a534</changelog>
  <changelog author="ailiop@suse.com" date="1709553610">- tomoyo: fix UAF write bug in tomoyo_write_control() (bsc#1220825
  CVE-2024-26622).
- commit c8e5b38</changelog>
  <changelog author="mkubecek@suse.cz" date="1709553611">- netfilter: nft_set_pipapo: skip inactive elements during set
  walk (CVE-2023-6817 bsc#1218195).
- commit 4032aa7</changelog>
  <changelog author="mkubecek@suse.cz" date="1709553612">- netfilter: nf_tables: fix 64-bit load issue in
  nft_byteorder_eval() (CVE-2024-0607 bsc#1218915).
- netfilter: nf_tables: fix pointer math issue in
  nft_byteorder_eval() (CVE-2024-0607 bsc#1218915).
- commit e095cd0</changelog>
  <changelog author="mkubecek@suse.cz" date="1709640000">- kabi: restore return type of dst_ops::gc() callback
  (CVE-2023-52340 bsc#1219295).
- ipv6: remove max_size check inline with ipv4 (CVE-2023-52340
  bsc#1219295).
- commit b8eec42</changelog>
  <changelog author="mkubecek@suse.cz" date="1709640001">- tls: fix race between tx work scheduling and socket close
  (CVE-2024-26585 bsc#1220187).
- commit 1306bff</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1709640002">- selftests/bpf: Add test for alu on PTR_TO_FLOW_KEYS (bsc#1220255
  CVE-2024-26589).
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS (bsc#1220255
  CVE-2024-26589).
- commit 8a833ce</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1709640003">- bpf: Fix re-attachment branch in bpf_tracing_prog_attach
  (bsc#1220254 CVE-2024-26591).
- commit fc948d3</changelog>
  <changelog author="nik.borisov@suse.com" date="1709640004">- Documentation/hw-vuln: Add documentation for RFDS (bsc#1213456 CVE-2023-28746).
- commit c955133</changelog>
  <changelog author="nik.borisov@suse.com" date="1709640005">- x86/rfds: Mitigate Register File Data Sampling (RFDS) (bsc#1213456 CVE-2023-28746).
- commit ee70608</changelog>
  <changelog author="nik.borisov@suse.com" date="1709640006">- KVM: x86: Export RFDS_NO and RFDS_CLEAR to guests (bsc#1213456 CVE-2023-28746).
- commit 7f00c86</changelog>
</package>
<package pkgid="dab07e67ecf6218a548f0affd60427c20fd50daec146f11964d736611152c87d" name="kernel-default" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.55.52.1"/>
  <changelog author="tiwai@suse.de" date="1709553600">- power: supply: bq27xxx-i2c: Do not free non existing IRQ
  (git-fixes).
- mmc: sdhci-xenon: add timeout for PHY init complete (git-fixes).
- mmc: sdhci-xenon: fix PHY init clock stability (git-fixes).
- mmc: core: Fix eMMC initialization with 1-bit bus connection
  (git-fixes).
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
  (git-fixes).
- mtd: spinand: gigadevice: Fix the get ecc status issue
  (git-fixes).
- nouveau: fix function cast warnings (git-fixes).
- media: ir_toy: fix a memleak in irtoy_tx (git-fixes).
- media: rc: bpf attach/detach requires write permission
  (git-fixes).
- mmc: slot-gpio: Allow non-sleeping GPIO ro (git-fixes).
- regulator: pwm-regulator: Add validity checks in continuous
  .get_voltage (git-fixes).
- platform/x86: touchscreen_dmi: Add info for the TECLAST X16
  Plus tablet (git-fixes).
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were
  detected (git-fixes).
- PCI: switchtec: Fix stdev_release() crash after surprise hot
  remove (git-fixes).
- PCI: Fix 64GT/s effective data rate calculation (git-fixes).
- PCI: Only override AMD USB controller if required (git-fixes).
- PCI/AER: Decode Requester ID when no error info found
  (git-fixes).
- media: ddbridge: fix an error code problem in ddb_probe
  (git-fixes).
- mmc: mmc_spi: remove custom DMA mapped buffers (git-fixes).
- mmc: core: Use mrq.sbc in close-ended ffu (git-fixes).
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
  (git-fixes).
- pstore/ram: Fix crash when setting number of cpus to an odd
  number (git-fixes).
- PNP: ACPI: fix fortify warning (git-fixes).
- regulator: core: Only increment use_count when enable_count
  changes (git-fixes).
- PM: core: Remove unnecessary (void *) conversions (git-fixes).
- serial: 8250: Remove serial_rs485 sanitization from em485
  (git-fixes).
- PM: runtime: Have devm_pm_runtime_enable() handle
  pm_runtime_dont_use_autosuspend() (git-fixes).
- commit 9894050</changelog>
  <changelog author="tiwai@suse.de" date="1709553601">- tomoyo: fix UAF write bug in tomoyo_write_control() (git-fixes).
- wifi: nl80211: reject iftype change with mesh ID change
  (git-fixes).
- usb: dwc3: gadget: Don't disconnect if not started (git-fixes).
- wifi: mac80211: adding missing drv_mgd_complete_tx() call
  (git-fixes).
- usb: f_mass_storage: forbid async queue when shutdown happen
  (git-fixes).
- usb: dwc3: host: Set XHCI_SG_TRB_CACHE_SIZE_QUIRK (git-fixes).
- spi: sh-msiof: avoid integer overflow in constants (git-fixes).
- wifi: mac80211: fix race condition on enabling fast-xmit
  (git-fixes).
- wifi: cfg80211: fix missing interfaces when dumping (git-fixes).
- usb: dwc3: gadget: Queue PM runtime idle on disconnect event
  (git-fixes).
- usb: dwc3: gadget: Handle EP0 request dequeuing properly
  (git-fixes).
- usb: hub: Replace hardcoded quirk value with BIT() macro
  (git-fixes).
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
  (git-fixes).
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for
  IT8784/IT8786 (git-fixes).
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
  (git-fixes).
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
  (git-fixes).
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
  (git-fixes).
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
  (git-fixes).
- wifi: ath9k: Fix potential array-index-out-of-bounds read in
  ath9k_htc_txstatus() (git-fixes).
- wifi: rt2x00: restart beacon queue when hardware reset
  (git-fixes).
- wifi: iwlwifi: mvm: avoid baid size integer overflow
  (git-fixes).
- wifi: wext-core: Fix -Wstringop-overflow warning in
  ioctl_standard_iw_point() (git-fixes).
- wifi: ath11k: fix registration of 6Ghz-only phy without the
  full channel range (git-fixes).
- usb: dwc3: gadget: Refactor EP0 forced stall/restart into a
  separate API (git-fixes).
- usb: dwc3: gadget: Submit endxfer command if delayed during
  disconnect (git-fixes).
- commit 8b4f9a3</changelog>
  <changelog author="tiwai@suse.de" date="1709553602">- usb: dwc3: gadget: Ignore End Transfer delay on teardown
  (git-fixes).
- Refresh
  patches.suse/usb-dwc3-gadget-Add-1ms-delay-after-end-transfer-com.patch.
- commit 251cd08</changelog>
  <changelog author="tiwai@suse.de" date="1709553603">- Update patch reference for input fix (CVE-2021-46932 bsc#1220444)
- commit e44e0b1</changelog>
  <changelog author="osalvador@suse.de" date="1709553604">- powerpc/pseries/memhp: Fix access beyond end of drmem array
  (bsc#1220250,CVE-2023-52451).
- commit fdc7254</changelog>
  <changelog author="jslaby@suse.cz" date="1709553605">- serial: imx: fix tx statemachine deadlock (bsc#1220364
  CVE-2023-52456).
- commit cd9f92c</changelog>
  <changelog author="jslaby@suse.cz" date="1709553606">- serial: 8250: omap: Don't skip resource freeing if
  pm_runtime_resume_and_get() failed (bsc#1220350 CVE-2023-52457).
- commit c82f528</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1709553607">- bpf: Minor cleanup around stack bounds (bsc#1220257
  CVE-2023-52452).
- bpf: Fix accesses to uninit stack slots (bsc#1220257
  CVE-2023-52452).
- bpf: Guard stack limits against 32bit overflow (git-fixes).
- bpf: Fix verification of indirect var-off stack access
  (git-fixes).
- bpf: Minor cleanup around stack bounds (bsc#1220257
  CVE-2023-52452).
- bpf: Fix accesses to uninit stack slots (bsc#1220257
  CVE-2023-52452).
- bpf: Add some comments to stack representation (bsc#1220257
  CVE-2023-52452).
- Refresh patches.kabi/kABI-fix-bpf-Tighten-ptr_to_btf_id-checks.patch
- bpf: Guard stack limits against 32bit overflow (git-fixes).
- bpf: Fix verification of indirect var-off stack access
  (git-fixes).
- bpf: Minor logging improvement (bsc#1220257).
- commit 7d03125</changelog>
  <changelog author="fdmanana@suse.com" date="1709553608">- btrfs: do not ASSERT() if the newly created subvolume already
  got read (bsc#1219126 CVE-2024-23850).
- commit a2ac581</changelog>
  <changelog author="fdmanana@suse.com" date="1709553609">- btrfs: fix double free of anonymous device after snapshot
  creation failure (bsc#1219126 CVE-2024-23850).
- commit 257a534</changelog>
  <changelog author="ailiop@suse.com" date="1709553610">- tomoyo: fix UAF write bug in tomoyo_write_control() (bsc#1220825
  CVE-2024-26622).
- commit c8e5b38</changelog>
  <changelog author="mkubecek@suse.cz" date="1709553611">- netfilter: nft_set_pipapo: skip inactive elements during set
  walk (CVE-2023-6817 bsc#1218195).
- commit 4032aa7</changelog>
  <changelog author="mkubecek@suse.cz" date="1709553612">- netfilter: nf_tables: fix 64-bit load issue in
  nft_byteorder_eval() (CVE-2024-0607 bsc#1218915).
- netfilter: nf_tables: fix pointer math issue in
  nft_byteorder_eval() (CVE-2024-0607 bsc#1218915).
- commit e095cd0</changelog>
  <changelog author="mkubecek@suse.cz" date="1709640000">- kabi: restore return type of dst_ops::gc() callback
  (CVE-2023-52340 bsc#1219295).
- ipv6: remove max_size check inline with ipv4 (CVE-2023-52340
  bsc#1219295).
- commit b8eec42</changelog>
  <changelog author="mkubecek@suse.cz" date="1709640001">- tls: fix race between tx work scheduling and socket close
  (CVE-2024-26585 bsc#1220187).
- commit 1306bff</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1709640002">- selftests/bpf: Add test for alu on PTR_TO_FLOW_KEYS (bsc#1220255
  CVE-2024-26589).
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS (bsc#1220255
  CVE-2024-26589).
- commit 8a833ce</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1709640003">- bpf: Fix re-attachment branch in bpf_tracing_prog_attach
  (bsc#1220254 CVE-2024-26591).
- commit fc948d3</changelog>
  <changelog author="nik.borisov@suse.com" date="1709640004">- Documentation/hw-vuln: Add documentation for RFDS (bsc#1213456 CVE-2023-28746).
- commit c955133</changelog>
  <changelog author="nik.borisov@suse.com" date="1709640005">- x86/rfds: Mitigate Register File Data Sampling (RFDS) (bsc#1213456 CVE-2023-28746).
- commit ee70608</changelog>
  <changelog author="nik.borisov@suse.com" date="1709640006">- KVM: x86: Export RFDS_NO and RFDS_CLEAR to guests (bsc#1213456 CVE-2023-28746).
- commit 7f00c86</changelog>
</package>
<package pkgid="35dd56ea31af5edce494fcbe18cd2bd50c42ab5344a14211d60526425a26b97f" name="kernel-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150500.55.52.1"/>
  <changelog author="tiwai@suse.de" date="1709553600">- power: supply: bq27xxx-i2c: Do not free non existing IRQ
  (git-fixes).
- mmc: sdhci-xenon: add timeout for PHY init complete (git-fixes).
- mmc: sdhci-xenon: fix PHY init clock stability (git-fixes).
- mmc: core: Fix eMMC initialization with 1-bit bus connection
  (git-fixes).
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
  (git-fixes).
- mtd: spinand: gigadevice: Fix the get ecc status issue
  (git-fixes).
- nouveau: fix function cast warnings (git-fixes).
- media: ir_toy: fix a memleak in irtoy_tx (git-fixes).
- media: rc: bpf attach/detach requires write permission
  (git-fixes).
- mmc: slot-gpio: Allow non-sleeping GPIO ro (git-fixes).
- regulator: pwm-regulator: Add validity checks in continuous
  .get_voltage (git-fixes).
- platform/x86: touchscreen_dmi: Add info for the TECLAST X16
  Plus tablet (git-fixes).
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were
  detected (git-fixes).
- PCI: switchtec: Fix stdev_release() crash after surprise hot
  remove (git-fixes).
- PCI: Fix 64GT/s effective data rate calculation (git-fixes).
- PCI: Only override AMD USB controller if required (git-fixes).
- PCI/AER: Decode Requester ID when no error info found
  (git-fixes).
- media: ddbridge: fix an error code problem in ddb_probe
  (git-fixes).
- mmc: mmc_spi: remove custom DMA mapped buffers (git-fixes).
- mmc: core: Use mrq.sbc in close-ended ffu (git-fixes).
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
  (git-fixes).
- pstore/ram: Fix crash when setting number of cpus to an odd
  number (git-fixes).
- PNP: ACPI: fix fortify warning (git-fixes).
- regulator: core: Only increment use_count when enable_count
  changes (git-fixes).
- PM: core: Remove unnecessary (void *) conversions (git-fixes).
- serial: 8250: Remove serial_rs485 sanitization from em485
  (git-fixes).
- PM: runtime: Have devm_pm_runtime_enable() handle
  pm_runtime_dont_use_autosuspend() (git-fixes).
- commit 9894050</changelog>
  <changelog author="tiwai@suse.de" date="1709553601">- tomoyo: fix UAF write bug in tomoyo_write_control() (git-fixes).
- wifi: nl80211: reject iftype change with mesh ID change
  (git-fixes).
- usb: dwc3: gadget: Don't disconnect if not started (git-fixes).
- wifi: mac80211: adding missing drv_mgd_complete_tx() call
  (git-fixes).
- usb: f_mass_storage: forbid async queue when shutdown happen
  (git-fixes).
- usb: dwc3: host: Set XHCI_SG_TRB_CACHE_SIZE_QUIRK (git-fixes).
- spi: sh-msiof: avoid integer overflow in constants (git-fixes).
- wifi: mac80211: fix race condition on enabling fast-xmit
  (git-fixes).
- wifi: cfg80211: fix missing interfaces when dumping (git-fixes).
- usb: dwc3: gadget: Queue PM runtime idle on disconnect event
  (git-fixes).
- usb: dwc3: gadget: Handle EP0 request dequeuing properly
  (git-fixes).
- usb: hub: Replace hardcoded quirk value with BIT() macro
  (git-fixes).
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
  (git-fixes).
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for
  IT8784/IT8786 (git-fixes).
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
  (git-fixes).
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
  (git-fixes).
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
  (git-fixes).
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
  (git-fixes).
- wifi: ath9k: Fix potential array-index-out-of-bounds read in
  ath9k_htc_txstatus() (git-fixes).
- wifi: rt2x00: restart beacon queue when hardware reset
  (git-fixes).
- wifi: iwlwifi: mvm: avoid baid size integer overflow
  (git-fixes).
- wifi: wext-core: Fix -Wstringop-overflow warning in
  ioctl_standard_iw_point() (git-fixes).
- wifi: ath11k: fix registration of 6Ghz-only phy without the
  full channel range (git-fixes).
- usb: dwc3: gadget: Refactor EP0 forced stall/restart into a
  separate API (git-fixes).
- usb: dwc3: gadget: Submit endxfer command if delayed during
  disconnect (git-fixes).
- commit 8b4f9a3</changelog>
  <changelog author="tiwai@suse.de" date="1709553602">- usb: dwc3: gadget: Ignore End Transfer delay on teardown
  (git-fixes).
- Refresh
  patches.suse/usb-dwc3-gadget-Add-1ms-delay-after-end-transfer-com.patch.
- commit 251cd08</changelog>
  <changelog author="tiwai@suse.de" date="1709553603">- Update patch reference for input fix (CVE-2021-46932 bsc#1220444)
- commit e44e0b1</changelog>
  <changelog author="osalvador@suse.de" date="1709553604">- powerpc/pseries/memhp: Fix access beyond end of drmem array
  (bsc#1220250,CVE-2023-52451).
- commit fdc7254</changelog>
  <changelog author="jslaby@suse.cz" date="1709553605">- serial: imx: fix tx statemachine deadlock (bsc#1220364
  CVE-2023-52456).
- commit cd9f92c</changelog>
  <changelog author="jslaby@suse.cz" date="1709553606">- serial: 8250: omap: Don't skip resource freeing if
  pm_runtime_resume_and_get() failed (bsc#1220350 CVE-2023-52457).
- commit c82f528</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1709553607">- bpf: Minor cleanup around stack bounds (bsc#1220257
  CVE-2023-52452).
- bpf: Fix accesses to uninit stack slots (bsc#1220257
  CVE-2023-52452).
- bpf: Guard stack limits against 32bit overflow (git-fixes).
- bpf: Fix verification of indirect var-off stack access
  (git-fixes).
- bpf: Minor cleanup around stack bounds (bsc#1220257
  CVE-2023-52452).
- bpf: Fix accesses to uninit stack slots (bsc#1220257
  CVE-2023-52452).
- bpf: Add some comments to stack representation (bsc#1220257
  CVE-2023-52452).
- Refresh patches.kabi/kABI-fix-bpf-Tighten-ptr_to_btf_id-checks.patch
- bpf: Guard stack limits against 32bit overflow (git-fixes).
- bpf: Fix verification of indirect var-off stack access
  (git-fixes).
- bpf: Minor logging improvement (bsc#1220257).
- commit 7d03125</changelog>
  <changelog author="fdmanana@suse.com" date="1709553608">- btrfs: do not ASSERT() if the newly created subvolume already
  got read (bsc#1219126 CVE-2024-23850).
- commit a2ac581</changelog>
  <changelog author="fdmanana@suse.com" date="1709553609">- btrfs: fix double free of anonymous device after snapshot
  creation failure (bsc#1219126 CVE-2024-23850).
- commit 257a534</changelog>
  <changelog author="ailiop@suse.com" date="1709553610">- tomoyo: fix UAF write bug in tomoyo_write_control() (bsc#1220825
  CVE-2024-26622).
- commit c8e5b38</changelog>
  <changelog author="mkubecek@suse.cz" date="1709553611">- netfilter: nft_set_pipapo: skip inactive elements during set
  walk (CVE-2023-6817 bsc#1218195).
- commit 4032aa7</changelog>
  <changelog author="mkubecek@suse.cz" date="1709553612">- netfilter: nf_tables: fix 64-bit load issue in
  nft_byteorder_eval() (CVE-2024-0607 bsc#1218915).
- netfilter: nf_tables: fix pointer math issue in
  nft_byteorder_eval() (CVE-2024-0607 bsc#1218915).
- commit e095cd0</changelog>
  <changelog author="mkubecek@suse.cz" date="1709640000">- kabi: restore return type of dst_ops::gc() callback
  (CVE-2023-52340 bsc#1219295).
- ipv6: remove max_size check inline with ipv4 (CVE-2023-52340
  bsc#1219295).
- commit b8eec42</changelog>
  <changelog author="mkubecek@suse.cz" date="1709640001">- tls: fix race between tx work scheduling and socket close
  (CVE-2024-26585 bsc#1220187).
- commit 1306bff</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1709640002">- selftests/bpf: Add test for alu on PTR_TO_FLOW_KEYS (bsc#1220255
  CVE-2024-26589).
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS (bsc#1220255
  CVE-2024-26589).
- commit 8a833ce</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1709640003">- bpf: Fix re-attachment branch in bpf_tracing_prog_attach
  (bsc#1220254 CVE-2024-26591).
- commit fc948d3</changelog>
  <changelog author="nik.borisov@suse.com" date="1709640004">- Documentation/hw-vuln: Add documentation for RFDS (bsc#1213456 CVE-2023-28746).
- commit c955133</changelog>
  <changelog author="nik.borisov@suse.com" date="1709640005">- x86/rfds: Mitigate Register File Data Sampling (RFDS) (bsc#1213456 CVE-2023-28746).
- commit ee70608</changelog>
  <changelog author="nik.borisov@suse.com" date="1709640006">- KVM: x86: Export RFDS_NO and RFDS_CLEAR to guests (bsc#1213456 CVE-2023-28746).
- commit 7f00c86</changelog>
</package>
<package pkgid="873fb5b192f581b6b588aa06c7d9a2ba088ae8c41aaba6ba1d313d76957838b3" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.55.52.1"/>
  <changelog author="tiwai@suse.de" date="1709553600">- power: supply: bq27xxx-i2c: Do not free non existing IRQ
  (git-fixes).
- mmc: sdhci-xenon: add timeout for PHY init complete (git-fixes).
- mmc: sdhci-xenon: fix PHY init clock stability (git-fixes).
- mmc: core: Fix eMMC initialization with 1-bit bus connection
  (git-fixes).
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
  (git-fixes).
- mtd: spinand: gigadevice: Fix the get ecc status issue
  (git-fixes).
- nouveau: fix function cast warnings (git-fixes).
- media: ir_toy: fix a memleak in irtoy_tx (git-fixes).
- media: rc: bpf attach/detach requires write permission
  (git-fixes).
- mmc: slot-gpio: Allow non-sleeping GPIO ro (git-fixes).
- regulator: pwm-regulator: Add validity checks in continuous
  .get_voltage (git-fixes).
- platform/x86: touchscreen_dmi: Add info for the TECLAST X16
  Plus tablet (git-fixes).
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were
  detected (git-fixes).
- PCI: switchtec: Fix stdev_release() crash after surprise hot
  remove (git-fixes).
- PCI: Fix 64GT/s effective data rate calculation (git-fixes).
- PCI: Only override AMD USB controller if required (git-fixes).
- PCI/AER: Decode Requester ID when no error info found
  (git-fixes).
- media: ddbridge: fix an error code problem in ddb_probe
  (git-fixes).
- mmc: mmc_spi: remove custom DMA mapped buffers (git-fixes).
- mmc: core: Use mrq.sbc in close-ended ffu (git-fixes).
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
  (git-fixes).
- pstore/ram: Fix crash when setting number of cpus to an odd
  number (git-fixes).
- PNP: ACPI: fix fortify warning (git-fixes).
- regulator: core: Only increment use_count when enable_count
  changes (git-fixes).
- PM: core: Remove unnecessary (void *) conversions (git-fixes).
- serial: 8250: Remove serial_rs485 sanitization from em485
  (git-fixes).
- PM: runtime: Have devm_pm_runtime_enable() handle
  pm_runtime_dont_use_autosuspend() (git-fixes).
- commit 9894050</changelog>
  <changelog author="tiwai@suse.de" date="1709553601">- tomoyo: fix UAF write bug in tomoyo_write_control() (git-fixes).
- wifi: nl80211: reject iftype change with mesh ID change
  (git-fixes).
- usb: dwc3: gadget: Don't disconnect if not started (git-fixes).
- wifi: mac80211: adding missing drv_mgd_complete_tx() call
  (git-fixes).
- usb: f_mass_storage: forbid async queue when shutdown happen
  (git-fixes).
- usb: dwc3: host: Set XHCI_SG_TRB_CACHE_SIZE_QUIRK (git-fixes).
- spi: sh-msiof: avoid integer overflow in constants (git-fixes).
- wifi: mac80211: fix race condition on enabling fast-xmit
  (git-fixes).
- wifi: cfg80211: fix missing interfaces when dumping (git-fixes).
- usb: dwc3: gadget: Queue PM runtime idle on disconnect event
  (git-fixes).
- usb: dwc3: gadget: Handle EP0 request dequeuing properly
  (git-fixes).
- usb: hub: Replace hardcoded quirk value with BIT() macro
  (git-fixes).
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
  (git-fixes).
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for
  IT8784/IT8786 (git-fixes).
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
  (git-fixes).
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
  (git-fixes).
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
  (git-fixes).
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
  (git-fixes).
- wifi: ath9k: Fix potential array-index-out-of-bounds read in
  ath9k_htc_txstatus() (git-fixes).
- wifi: rt2x00: restart beacon queue when hardware reset
  (git-fixes).
- wifi: iwlwifi: mvm: avoid baid size integer overflow
  (git-fixes).
- wifi: wext-core: Fix -Wstringop-overflow warning in
  ioctl_standard_iw_point() (git-fixes).
- wifi: ath11k: fix registration of 6Ghz-only phy without the
  full channel range (git-fixes).
- usb: dwc3: gadget: Refactor EP0 forced stall/restart into a
  separate API (git-fixes).
- usb: dwc3: gadget: Submit endxfer command if delayed during
  disconnect (git-fixes).
- commit 8b4f9a3</changelog>
  <changelog author="tiwai@suse.de" date="1709553602">- usb: dwc3: gadget: Ignore End Transfer delay on teardown
  (git-fixes).
- Refresh
  patches.suse/usb-dwc3-gadget-Add-1ms-delay-after-end-transfer-com.patch.
- commit 251cd08</changelog>
  <changelog author="tiwai@suse.de" date="1709553603">- Update patch reference for input fix (CVE-2021-46932 bsc#1220444)
- commit e44e0b1</changelog>
  <changelog author="osalvador@suse.de" date="1709553604">- powerpc/pseries/memhp: Fix access beyond end of drmem array
  (bsc#1220250,CVE-2023-52451).
- commit fdc7254</changelog>
  <changelog author="jslaby@suse.cz" date="1709553605">- serial: imx: fix tx statemachine deadlock (bsc#1220364
  CVE-2023-52456).
- commit cd9f92c</changelog>
  <changelog author="jslaby@suse.cz" date="1709553606">- serial: 8250: omap: Don't skip resource freeing if
  pm_runtime_resume_and_get() failed (bsc#1220350 CVE-2023-52457).
- commit c82f528</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1709553607">- bpf: Minor cleanup around stack bounds (bsc#1220257
  CVE-2023-52452).
- bpf: Fix accesses to uninit stack slots (bsc#1220257
  CVE-2023-52452).
- bpf: Guard stack limits against 32bit overflow (git-fixes).
- bpf: Fix verification of indirect var-off stack access
  (git-fixes).
- bpf: Minor cleanup around stack bounds (bsc#1220257
  CVE-2023-52452).
- bpf: Fix accesses to uninit stack slots (bsc#1220257
  CVE-2023-52452).
- bpf: Add some comments to stack representation (bsc#1220257
  CVE-2023-52452).
- Refresh patches.kabi/kABI-fix-bpf-Tighten-ptr_to_btf_id-checks.patch
- bpf: Guard stack limits against 32bit overflow (git-fixes).
- bpf: Fix verification of indirect var-off stack access
  (git-fixes).
- bpf: Minor logging improvement (bsc#1220257).
- commit 7d03125</changelog>
  <changelog author="fdmanana@suse.com" date="1709553608">- btrfs: do not ASSERT() if the newly created subvolume already
  got read (bsc#1219126 CVE-2024-23850).
- commit a2ac581</changelog>
  <changelog author="fdmanana@suse.com" date="1709553609">- btrfs: fix double free of anonymous device after snapshot
  creation failure (bsc#1219126 CVE-2024-23850).
- commit 257a534</changelog>
  <changelog author="ailiop@suse.com" date="1709553610">- tomoyo: fix UAF write bug in tomoyo_write_control() (bsc#1220825
  CVE-2024-26622).
- commit c8e5b38</changelog>
  <changelog author="mkubecek@suse.cz" date="1709553611">- netfilter: nft_set_pipapo: skip inactive elements during set
  walk (CVE-2023-6817 bsc#1218195).
- commit 4032aa7</changelog>
  <changelog author="mkubecek@suse.cz" date="1709553612">- netfilter: nf_tables: fix 64-bit load issue in
  nft_byteorder_eval() (CVE-2024-0607 bsc#1218915).
- netfilter: nf_tables: fix pointer math issue in
  nft_byteorder_eval() (CVE-2024-0607 bsc#1218915).
- commit e095cd0</changelog>
  <changelog author="mkubecek@suse.cz" date="1709640000">- kabi: restore return type of dst_ops::gc() callback
  (CVE-2023-52340 bsc#1219295).
- ipv6: remove max_size check inline with ipv4 (CVE-2023-52340
  bsc#1219295).
- commit b8eec42</changelog>
  <changelog author="mkubecek@suse.cz" date="1709640001">- tls: fix race between tx work scheduling and socket close
  (CVE-2024-26585 bsc#1220187).
- commit 1306bff</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1709640002">- selftests/bpf: Add test for alu on PTR_TO_FLOW_KEYS (bsc#1220255
  CVE-2024-26589).
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS (bsc#1220255
  CVE-2024-26589).
- commit 8a833ce</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1709640003">- bpf: Fix re-attachment branch in bpf_tracing_prog_attach
  (bsc#1220254 CVE-2024-26591).
- commit fc948d3</changelog>
  <changelog author="nik.borisov@suse.com" date="1709640004">- Documentation/hw-vuln: Add documentation for RFDS (bsc#1213456 CVE-2023-28746).
- commit c955133</changelog>
  <changelog author="nik.borisov@suse.com" date="1709640005">- x86/rfds: Mitigate Register File Data Sampling (RFDS) (bsc#1213456 CVE-2023-28746).
- commit ee70608</changelog>
  <changelog author="nik.borisov@suse.com" date="1709640006">- KVM: x86: Export RFDS_NO and RFDS_CLEAR to guests (bsc#1213456 CVE-2023-28746).
- commit 7f00c86</changelog>
</package>
<package pkgid="9237acd870236726d7481627584e86bbaf21341de0d486d308a2084cdc38a99e" name="kernel-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.59.1"/>
  <changelog author="jslaby@suse.cz" date="1712577600">- blacklist.conf: add a couple of PCI git-fixes
- commit 37743ca</changelog>
  <changelog author="iivanov@suse.de" date="1712577601">- arm64: dts: imx8mm-kontron: Add support for ultra high speed modes on (git-fixes)
- commit b828266</changelog>
  <changelog author="iivanov@suse.de" date="1712577602">- blacklist.conf: ("arm64: dts: imx8mm-kontron: Use the VSELECT signal to switch SD card")
- commit 4b90502</changelog>
  <changelog author="iivanov@suse.de" date="1712577603">- arm64: dts: marvell: reorder crypto interrupts on Armada SoCs (git-fixes)
- commit a61527a</changelog>
  <changelog author="iivanov@suse.de" date="1712577604">- arm64: dts: broadcom: bcmbca: bcm4908: drop invalid switch cells (git-fixes)
- commit 22061fc</changelog>
  <changelog author="ohering@suse.de" date="1712577605">- net: mana: Fix Rx DMA datasize and skb_over_panic (git-fixes).
- RDMA/mana_ib: Fix bug in creation of dma regions (git-fixes).
- Drivers: hv: vmbus: Calculate ring buffer size for more
  efficient use of memory (git-fixes).
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER
  missed (git-fixes).
- hv_netvsc: Fix race condition between netvsc_probe and
  netvsc_remove (git-fixes).
- scsi: storvsc: Fix ring buffer size calculation (git-fixes).
- hv_netvsc: Calculate correct ring size when PAGE_SIZE is not
  4 Kbytes (git-fixes).
- commit 82617ea</changelog>
  <changelog author="jack@suse.cz" date="1712577606">- nfsd: Fix error cleanup path in nfsd_rename() (bsc#1221044
  CVE-2023-52591).
- commit a849be1</changelog>
  <changelog author="osalvador@suse.de" date="1712664000">- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
  (bsc#1219264 CVE-2024-0841).
- commit aa8204a</changelog>
  <changelog author="osalvador@suse.de" date="1712664001">- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
  (bsc#1219264 CVE-2024-0841).
- commit fe3c052</changelog>
  <changelog author="nik.borisov@suse.com" date="1712664002">- RAS: Avoid build errors when CONFIG_DEBUG_FS=n (git-fixes).
- commit eb744cd</changelog>
  <changelog author="nik.borisov@suse.com" date="1712664003">- blacklist.conf: We don't have annotate_noendbr in this kernel
  So shut up the warning.
- commit f6d75ac</changelog>
  <changelog author="osalvador@suse.de" date="1712664004">- stackdepot: rename pool_index to pool_index_plus_1 (git-fixes).
- commit 4edf006</changelog>
  <changelog author="osalvador@suse.de" date="1712750400">- mm,page_owner: Defer enablement of static branch (bsc#1222366).
- commit aa158b4</changelog>
  <changelog author="jslaby@suse.cz" date="1712836800">- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
  (bsc#1222619).
- commit 3d3186c</changelog>
  <changelog author="mkoutny@suse.com" date="1712836801">- blacklist.conf: Add d9b3ce8769e3 mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats
- commit 3201b4c</changelog>
  <changelog author="mkoutny@suse.com" date="1712836802">- blacklist.conf: Add f7ec1cd5cc7e getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
  and its prereqs
- commit 0650209</changelog>
  <changelog author="jslaby@suse.cz" date="1712923200">- Refresh
  patches.kabi/PCI-Add-locking-to-RMW-PCI-Express-Capability-Regist.patch.
  Drop a bogus hunk. It was introduced by mistake.
  Fixes: acf0d9920aee
- commit 3a754ef</changelog>
  <changelog author="nik.borisov@suse.com" date="1712923201">- Refresh patches.kabi/kabi-allow-extra-bugints.patch.
  Properly check whether the feature we are patching in the alternatives
  is a feature or a bug. This was broken because in apply_alternative()
  boot_cpu_has is used and if we have an alternative that depends on a bug
  bit (such as X86_BUG_SYSRET_SS_ATTRS) the boot_cpu_has will erroneously
  check if this bit is set in the feature ints rather than the bug ints.
  While at it ensure that static_cpu_has isn't called with extended
  bugs features as those aren't supported right now.
- commit 793068f</changelog>
  <changelog author="vbabka@suse.cz" date="1713268800">- mm/vmalloc: huge vmalloc backing pages should be split rather
  than compound (bsc#1217829).
- commit 539be83</changelog>
  <changelog author="nik.borisov@suse.com" date="1713441600">- Refresh patches.kabi/kabi-allow-extra-bugints.patch. (bsc#1222952)
- commit a04a1a9</changelog>
</package>
<package pkgid="82a8bf55edc0d349ecd6e5a2b9b53098206a2b1940713cefa74c59b61c421cfb" name="kernel-default" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.55.59.1"/>
  <changelog author="jslaby@suse.cz" date="1712577600">- blacklist.conf: add a couple of PCI git-fixes
- commit 37743ca</changelog>
  <changelog author="iivanov@suse.de" date="1712577601">- arm64: dts: imx8mm-kontron: Add support for ultra high speed modes on (git-fixes)
- commit b828266</changelog>
  <changelog author="iivanov@suse.de" date="1712577602">- blacklist.conf: ("arm64: dts: imx8mm-kontron: Use the VSELECT signal to switch SD card")
- commit 4b90502</changelog>
  <changelog author="iivanov@suse.de" date="1712577603">- arm64: dts: marvell: reorder crypto interrupts on Armada SoCs (git-fixes)
- commit a61527a</changelog>
  <changelog author="iivanov@suse.de" date="1712577604">- arm64: dts: broadcom: bcmbca: bcm4908: drop invalid switch cells (git-fixes)
- commit 22061fc</changelog>
  <changelog author="ohering@suse.de" date="1712577605">- net: mana: Fix Rx DMA datasize and skb_over_panic (git-fixes).
- RDMA/mana_ib: Fix bug in creation of dma regions (git-fixes).
- Drivers: hv: vmbus: Calculate ring buffer size for more
  efficient use of memory (git-fixes).
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER
  missed (git-fixes).
- hv_netvsc: Fix race condition between netvsc_probe and
  netvsc_remove (git-fixes).
- scsi: storvsc: Fix ring buffer size calculation (git-fixes).
- hv_netvsc: Calculate correct ring size when PAGE_SIZE is not
  4 Kbytes (git-fixes).
- commit 82617ea</changelog>
  <changelog author="jack@suse.cz" date="1712577606">- nfsd: Fix error cleanup path in nfsd_rename() (bsc#1221044
  CVE-2023-52591).
- commit a849be1</changelog>
  <changelog author="osalvador@suse.de" date="1712664000">- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
  (bsc#1219264 CVE-2024-0841).
- commit aa8204a</changelog>
  <changelog author="osalvador@suse.de" date="1712664001">- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
  (bsc#1219264 CVE-2024-0841).
- commit fe3c052</changelog>
  <changelog author="nik.borisov@suse.com" date="1712664002">- RAS: Avoid build errors when CONFIG_DEBUG_FS=n (git-fixes).
- commit eb744cd</changelog>
  <changelog author="nik.borisov@suse.com" date="1712664003">- blacklist.conf: We don't have annotate_noendbr in this kernel
  So shut up the warning.
- commit f6d75ac</changelog>
  <changelog author="osalvador@suse.de" date="1712664004">- stackdepot: rename pool_index to pool_index_plus_1 (git-fixes).
- commit 4edf006</changelog>
  <changelog author="osalvador@suse.de" date="1712750400">- mm,page_owner: Defer enablement of static branch (bsc#1222366).
- commit aa158b4</changelog>
  <changelog author="jslaby@suse.cz" date="1712836800">- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
  (bsc#1222619).
- commit 3d3186c</changelog>
  <changelog author="mkoutny@suse.com" date="1712836801">- blacklist.conf: Add d9b3ce8769e3 mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats
- commit 3201b4c</changelog>
  <changelog author="mkoutny@suse.com" date="1712836802">- blacklist.conf: Add f7ec1cd5cc7e getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
  and its prereqs
- commit 0650209</changelog>
  <changelog author="jslaby@suse.cz" date="1712923200">- Refresh
  patches.kabi/PCI-Add-locking-to-RMW-PCI-Express-Capability-Regist.patch.
  Drop a bogus hunk. It was introduced by mistake.
  Fixes: acf0d9920aee
- commit 3a754ef</changelog>
  <changelog author="nik.borisov@suse.com" date="1712923201">- Refresh patches.kabi/kabi-allow-extra-bugints.patch.
  Properly check whether the feature we are patching in the alternatives
  is a feature or a bug. This was broken because in apply_alternative()
  boot_cpu_has is used and if we have an alternative that depends on a bug
  bit (such as X86_BUG_SYSRET_SS_ATTRS) the boot_cpu_has will erroneously
  check if this bit is set in the feature ints rather than the bug ints.
  While at it ensure that static_cpu_has isn't called with extended
  bugs features as those aren't supported right now.
- commit 793068f</changelog>
  <changelog author="vbabka@suse.cz" date="1713268800">- mm/vmalloc: huge vmalloc backing pages should be split rather
  than compound (bsc#1217829).
- commit 539be83</changelog>
  <changelog author="nik.borisov@suse.com" date="1713441600">- Refresh patches.kabi/kabi-allow-extra-bugints.patch. (bsc#1222952)
- commit a04a1a9</changelog>
</package>
<package pkgid="dc29f2424b874ed7982f28c76e686a8d441dbbd620762f743c271090e0f276db" name="kernel-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150500.55.59.1"/>
  <changelog author="jslaby@suse.cz" date="1712577600">- blacklist.conf: add a couple of PCI git-fixes
- commit 37743ca</changelog>
  <changelog author="iivanov@suse.de" date="1712577601">- arm64: dts: imx8mm-kontron: Add support for ultra high speed modes on (git-fixes)
- commit b828266</changelog>
  <changelog author="iivanov@suse.de" date="1712577602">- blacklist.conf: ("arm64: dts: imx8mm-kontron: Use the VSELECT signal to switch SD card")
- commit 4b90502</changelog>
  <changelog author="iivanov@suse.de" date="1712577603">- arm64: dts: marvell: reorder crypto interrupts on Armada SoCs (git-fixes)
- commit a61527a</changelog>
  <changelog author="iivanov@suse.de" date="1712577604">- arm64: dts: broadcom: bcmbca: bcm4908: drop invalid switch cells (git-fixes)
- commit 22061fc</changelog>
  <changelog author="ohering@suse.de" date="1712577605">- net: mana: Fix Rx DMA datasize and skb_over_panic (git-fixes).
- RDMA/mana_ib: Fix bug in creation of dma regions (git-fixes).
- Drivers: hv: vmbus: Calculate ring buffer size for more
  efficient use of memory (git-fixes).
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER
  missed (git-fixes).
- hv_netvsc: Fix race condition between netvsc_probe and
  netvsc_remove (git-fixes).
- scsi: storvsc: Fix ring buffer size calculation (git-fixes).
- hv_netvsc: Calculate correct ring size when PAGE_SIZE is not
  4 Kbytes (git-fixes).
- commit 82617ea</changelog>
  <changelog author="jack@suse.cz" date="1712577606">- nfsd: Fix error cleanup path in nfsd_rename() (bsc#1221044
  CVE-2023-52591).
- commit a849be1</changelog>
  <changelog author="osalvador@suse.de" date="1712664000">- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
  (bsc#1219264 CVE-2024-0841).
- commit aa8204a</changelog>
  <changelog author="osalvador@suse.de" date="1712664001">- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
  (bsc#1219264 CVE-2024-0841).
- commit fe3c052</changelog>
  <changelog author="nik.borisov@suse.com" date="1712664002">- RAS: Avoid build errors when CONFIG_DEBUG_FS=n (git-fixes).
- commit eb744cd</changelog>
  <changelog author="nik.borisov@suse.com" date="1712664003">- blacklist.conf: We don't have annotate_noendbr in this kernel
  So shut up the warning.
- commit f6d75ac</changelog>
  <changelog author="osalvador@suse.de" date="1712664004">- stackdepot: rename pool_index to pool_index_plus_1 (git-fixes).
- commit 4edf006</changelog>
  <changelog author="osalvador@suse.de" date="1712750400">- mm,page_owner: Defer enablement of static branch (bsc#1222366).
- commit aa158b4</changelog>
  <changelog author="jslaby@suse.cz" date="1712836800">- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
  (bsc#1222619).
- commit 3d3186c</changelog>
  <changelog author="mkoutny@suse.com" date="1712836801">- blacklist.conf: Add d9b3ce8769e3 mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats
- commit 3201b4c</changelog>
  <changelog author="mkoutny@suse.com" date="1712836802">- blacklist.conf: Add f7ec1cd5cc7e getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
  and its prereqs
- commit 0650209</changelog>
  <changelog author="jslaby@suse.cz" date="1712923200">- Refresh
  patches.kabi/PCI-Add-locking-to-RMW-PCI-Express-Capability-Regist.patch.
  Drop a bogus hunk. It was introduced by mistake.
  Fixes: acf0d9920aee
- commit 3a754ef</changelog>
  <changelog author="nik.borisov@suse.com" date="1712923201">- Refresh patches.kabi/kabi-allow-extra-bugints.patch.
  Properly check whether the feature we are patching in the alternatives
  is a feature or a bug. This was broken because in apply_alternative()
  boot_cpu_has is used and if we have an alternative that depends on a bug
  bit (such as X86_BUG_SYSRET_SS_ATTRS) the boot_cpu_has will erroneously
  check if this bit is set in the feature ints rather than the bug ints.
  While at it ensure that static_cpu_has isn't called with extended
  bugs features as those aren't supported right now.
- commit 793068f</changelog>
  <changelog author="vbabka@suse.cz" date="1713268800">- mm/vmalloc: huge vmalloc backing pages should be split rather
  than compound (bsc#1217829).
- commit 539be83</changelog>
  <changelog author="nik.borisov@suse.com" date="1713441600">- Refresh patches.kabi/kabi-allow-extra-bugints.patch. (bsc#1222952)
- commit a04a1a9</changelog>
</package>
<package pkgid="f81774b1a0845af5fcdd4d6acdfb53e96324a866d7ca320bd37dbef5744f76f8" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.55.59.1"/>
  <changelog author="jslaby@suse.cz" date="1712577600">- blacklist.conf: add a couple of PCI git-fixes
- commit 37743ca</changelog>
  <changelog author="iivanov@suse.de" date="1712577601">- arm64: dts: imx8mm-kontron: Add support for ultra high speed modes on (git-fixes)
- commit b828266</changelog>
  <changelog author="iivanov@suse.de" date="1712577602">- blacklist.conf: ("arm64: dts: imx8mm-kontron: Use the VSELECT signal to switch SD card")
- commit 4b90502</changelog>
  <changelog author="iivanov@suse.de" date="1712577603">- arm64: dts: marvell: reorder crypto interrupts on Armada SoCs (git-fixes)
- commit a61527a</changelog>
  <changelog author="iivanov@suse.de" date="1712577604">- arm64: dts: broadcom: bcmbca: bcm4908: drop invalid switch cells (git-fixes)
- commit 22061fc</changelog>
  <changelog author="ohering@suse.de" date="1712577605">- net: mana: Fix Rx DMA datasize and skb_over_panic (git-fixes).
- RDMA/mana_ib: Fix bug in creation of dma regions (git-fixes).
- Drivers: hv: vmbus: Calculate ring buffer size for more
  efficient use of memory (git-fixes).
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER
  missed (git-fixes).
- hv_netvsc: Fix race condition between netvsc_probe and
  netvsc_remove (git-fixes).
- scsi: storvsc: Fix ring buffer size calculation (git-fixes).
- hv_netvsc: Calculate correct ring size when PAGE_SIZE is not
  4 Kbytes (git-fixes).
- commit 82617ea</changelog>
  <changelog author="jack@suse.cz" date="1712577606">- nfsd: Fix error cleanup path in nfsd_rename() (bsc#1221044
  CVE-2023-52591).
- commit a849be1</changelog>
  <changelog author="osalvador@suse.de" date="1712664000">- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
  (bsc#1219264 CVE-2024-0841).
- commit aa8204a</changelog>
  <changelog author="osalvador@suse.de" date="1712664001">- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
  (bsc#1219264 CVE-2024-0841).
- commit fe3c052</changelog>
  <changelog author="nik.borisov@suse.com" date="1712664002">- RAS: Avoid build errors when CONFIG_DEBUG_FS=n (git-fixes).
- commit eb744cd</changelog>
  <changelog author="nik.borisov@suse.com" date="1712664003">- blacklist.conf: We don't have annotate_noendbr in this kernel
  So shut up the warning.
- commit f6d75ac</changelog>
  <changelog author="osalvador@suse.de" date="1712664004">- stackdepot: rename pool_index to pool_index_plus_1 (git-fixes).
- commit 4edf006</changelog>
  <changelog author="osalvador@suse.de" date="1712750400">- mm,page_owner: Defer enablement of static branch (bsc#1222366).
- commit aa158b4</changelog>
  <changelog author="jslaby@suse.cz" date="1712836800">- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
  (bsc#1222619).
- commit 3d3186c</changelog>
  <changelog author="mkoutny@suse.com" date="1712836801">- blacklist.conf: Add d9b3ce8769e3 mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats
- commit 3201b4c</changelog>
  <changelog author="mkoutny@suse.com" date="1712836802">- blacklist.conf: Add f7ec1cd5cc7e getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
  and its prereqs
- commit 0650209</changelog>
  <changelog author="jslaby@suse.cz" date="1712923200">- Refresh
  patches.kabi/PCI-Add-locking-to-RMW-PCI-Express-Capability-Regist.patch.
  Drop a bogus hunk. It was introduced by mistake.
  Fixes: acf0d9920aee
- commit 3a754ef</changelog>
  <changelog author="nik.borisov@suse.com" date="1712923201">- Refresh patches.kabi/kabi-allow-extra-bugints.patch.
  Properly check whether the feature we are patching in the alternatives
  is a feature or a bug. This was broken because in apply_alternative()
  boot_cpu_has is used and if we have an alternative that depends on a bug
  bit (such as X86_BUG_SYSRET_SS_ATTRS) the boot_cpu_has will erroneously
  check if this bit is set in the feature ints rather than the bug ints.
  While at it ensure that static_cpu_has isn't called with extended
  bugs features as those aren't supported right now.
- commit 793068f</changelog>
  <changelog author="vbabka@suse.cz" date="1713268800">- mm/vmalloc: huge vmalloc backing pages should be split rather
  than compound (bsc#1217829).
- commit 539be83</changelog>
  <changelog author="nik.borisov@suse.com" date="1713441600">- Refresh patches.kabi/kabi-allow-extra-bugints.patch. (bsc#1222952)
- commit a04a1a9</changelog>
</package>
<package pkgid="c45474804b9bd5d7c599949d6a0bf95d09a5ecca11afde38f1c6a4bc4cf3aa14" name="kernel-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.62.2"/>
  <changelog author="tiwai@suse.de" date="1714996800">- Bluetooth: Add new quirk for broken read key length on ATS2851
  (git-fixes).
- commit 9ac913a</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996801">- tracing: Show size of requested perf buffer (git-fixes).
- commit f8d068b</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996802">- tracing/net_sched: Fix tracepoints that save qdisc_dev()
  as a string (git-fixes).
- commit a272f90</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996803">- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page
  in concurrent environment (git-fixes).
- commit 118cfcd</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996804">- kprobes: Fix possible use-after-free issue on kprobe
  registration (git-fixes).
- commit e007447</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996805">- ring-buffer: Only update pages_touched when a new page is
  touched (git-fixes).
- commit b42aba1</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996806">- blacklist.conf: add a not-relevant module-loader patch
- commit 90c64db</changelog>
  <changelog author="vkarasulli@suse.de" date="1714996807">- Update
  patches.suse/IB-core-Fix-a-nested-dead-lock-as-part-of-ODP-flow.patch
  (git-fixes CVE-2022-48675 bsc#1223894).
- Update
  patches.suse/drm-gma500-Fix-BUG-sleeping-function-called-from-inv.patch
  (git-fixes CVE-2022-48634 bsc#1223501).
- Update
  patches.suse/drm-i915-gem-Really-move-i915_gem_context.link-under.patch
  (CVE-2022-48662 bsc#1223505a4e7ccdac38e ("drm/i915: Move
  context management under GEM") bsc#1223505).
- Update
  patches.suse/i2c-mlxbf-prevent-stack-overflow-in-mlxbf_i2c_smbus_.patch
  (git-fixes CVE-2022-48632 bsc#1223481).
- Update
  patches.suse/ice-Fix-crash-by-keep-old-cfg-when-update-TCs-more-t.patch
  (git-fixes CVE-2022-48652 bsc#1223520).
- Update
  patches.suse/s390-dasd-fix-Oops-in-dasd_alias_get_start_dev-due-to-missing-pavgroup
  (git-fixes CVE-2022-48636 bsc#1223512).
- commit 523501c</changelog>
  <changelog author="dsterba@suse.com" date="1714996808">- fs: sysfs: Fix reference leak in sysfs_break_active_protection() (CVE-2024-26993 bsc#1223693)
- commit b0c9830</changelog>
  <changelog author="vkarasulli@suse.de" date="1714996809">- net: sparx5: Fix use after free inside sparx5_del_mact_entry
  (bsc#1223052 CVE-2024-26856).
- commit fc5c6ad</changelog>
  <changelog author="vkarasulli@suse.de" date="1714996810">- igc: avoid returning frame twice in XDP_REDIRECT (bsc#1223061
  CVE-2024-26853).
- commit 021db33</changelog>
  <changelog author="vkarasulli@suse.de" date="1714996811">- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in
  custom expectations (bsc#1222368 CVE-2024-26673).
- commit 785b7d0</changelog>
  <changelog author="mkoutny@suse.com" date="1714996812">- Update
  patches.suse/drm-i915-gem-Really-move-i915_gem_context.link-under.patch
  (CVE-2022-48662 bsc#1223505).
  Unbreak metadata (References: collides with our internal tracking,
  switch to Fixes: when referencing a commit).
- commit cd38265</changelog>
  <changelog author="mkubecek@suse.cz" date="1714996813">- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
  (CVE-2024-0639 bsc#1218917).
- commit 517d4f7</changelog>
  <changelog author="mkubecek@suse.cz" date="1714996814">- packet: annotate data-races around ignore_outgoing
  (CVE-2024-26862 bsc#1223111).
- commit 6e591e7</changelog>
  <changelog author="krisman@suse.de" date="1715083200">- Update
  patches.suse/ALSA-emu10k1-Fix-out-of-bounds-access-in-snd_emu10k1.patch
  (git-fixes CVE-2022-48702 bsc#1223923).
- Update
  patches.suse/ALSA-usb-audio-Fix-an-out-of-bounds-bug-in-__snd_usb.patch
  (git-fixes CVE-2022-48701 bsc#1223921).
- Update
  patches.suse/RDMA-irdma-Fix-drain-SQ-hang-with-no-completion.patch
  (jsc#SLE-18383 CVE-2022-48694 bsc#1223964).
- Update
  patches.suse/RDMA-srp-Set-scmnd-result-only-when-scmnd-is-not-NUL.patch
  (git-fixes CVE-2022-48692 bsc#1223962).
- Update
  patches.suse/cgroup-Add-missing-cpus_read_lock-to-cgroup_attach_task_all.patch
  (bsc#1196869 CVE-2022-48671 bsc#1223929).
- Update
  patches.suse/drm-radeon-add-a-force-flush-to-delay-work-when-rade.patch
  (git-fixes CVE-2022-48704 bsc#1223932).
- Update
  patches.suse/i40e-Fix-kernel-crash-during-module-removal.patch
  (jsc#SLE-18378 CVE-2022-48688 bsc#1223953).
- Update
  patches.suse/ipv6-sr-fix-out-of-bounds-read-when-setting-HMAC-dat.patch
  (bsc#1211592 CVE-2023-2860 CVE-2022-48687 bsc#1223952).
- Update
  patches.suse/net-smc-Fix-possible-access-to-freed-memory-in-link-clear
  (git-fixes CVE-2022-48673 bsc#1223934).
- Update
  patches.suse/nvme-tcp-fix-uaf-when-detecting-digest-errors.patch
  (bsc#1200313 bsc#1201489 CVE-2022-48686 bsc#1223948).
- Update patches.suse/nvmet-fix-a-use-after-free.patch (git-fixes
  CVE-2022-48697 bsc#1223922).
- Update
  patches.suse/of-fdt-fix-off-by-one-error-in-unflatten_dt_nodes.patch
  (git-fixes CVE-2022-48672 bsc#1223931).
- Update
  patches.suse/scsi-mpt3sas-Fix-use-after-free-warning.patch
  (git-fixes CVE-2022-48695 bsc#1223941).
- Update
  patches.suse/soc-brcmstb-pm-arm-Fix-refcount-leak-and-__iomem-lea.patch
  (git-fixes CVE-2022-48693 bsc#1223963).
- Update
  patches.suse/thermal-int340x_thermal-handle-data_vault-when-the-v.patch
  (bsc#1201308 CVE-2022-48703 bsc#1223924).
- Update patches.suse/vfio-type1-Unpin-zero-pages.patch (git-fixes
  CVE-2022-48700 bsc#1223957).
- commit c8677b5</changelog>
  <changelog author="krisman@suse.de" date="1715083201">- Update patches.suse/ice-Fix-DMA-mappings-leak.patch (jsc#PED-376
  CVE-2022-48690 bsc#1223960).
- commit 7e1bf3d</changelog>
  <changelog author="krisman@suse.de" date="1715083202">- Update
  patches.suse/1576-drm-amd-display-fix-memory-leak-when-using-debugfs_l.patch
  (jsc#PED-1166 jsc#PED-1168 jsc#PED-1170 jsc#PED-1218
  jsc#PED-1220 jsc#PED-1222 jsc#PED-1223 jsc#PED-1225 jsc#PED-2849
  CVE-2022-48698 bsc#1223956).
- commit a0e3008</changelog>
  <changelog author="tiwai@suse.de" date="1715083203">- Reapply "drm/qxl: simplify qxl_fence_wait" (stable-fixes).
- commit 8f3269f</changelog>
  <changelog author="vkarasulli@suse.de" date="1715083204">- netfilter: nft_ct: fix l3num expectations with inet pseudo
  family (git-fixes).
- commit 87e8a80</changelog>
</package>
<package pkgid="05eeeab8eaac3fc868429f2b25eb667b97ba6731def8610daeabb8692e1e8905" name="kernel-default" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.55.62.2"/>
  <changelog author="tiwai@suse.de" date="1714996800">- Bluetooth: Add new quirk for broken read key length on ATS2851
  (git-fixes).
- commit 9ac913a</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996801">- tracing: Show size of requested perf buffer (git-fixes).
- commit f8d068b</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996802">- tracing/net_sched: Fix tracepoints that save qdisc_dev()
  as a string (git-fixes).
- commit a272f90</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996803">- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page
  in concurrent environment (git-fixes).
- commit 118cfcd</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996804">- kprobes: Fix possible use-after-free issue on kprobe
  registration (git-fixes).
- commit e007447</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996805">- ring-buffer: Only update pages_touched when a new page is
  touched (git-fixes).
- commit b42aba1</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996806">- blacklist.conf: add a not-relevant module-loader patch
- commit 90c64db</changelog>
  <changelog author="vkarasulli@suse.de" date="1714996807">- Update
  patches.suse/IB-core-Fix-a-nested-dead-lock-as-part-of-ODP-flow.patch
  (git-fixes CVE-2022-48675 bsc#1223894).
- Update
  patches.suse/drm-gma500-Fix-BUG-sleeping-function-called-from-inv.patch
  (git-fixes CVE-2022-48634 bsc#1223501).
- Update
  patches.suse/drm-i915-gem-Really-move-i915_gem_context.link-under.patch
  (CVE-2022-48662 bsc#1223505a4e7ccdac38e ("drm/i915: Move
  context management under GEM") bsc#1223505).
- Update
  patches.suse/i2c-mlxbf-prevent-stack-overflow-in-mlxbf_i2c_smbus_.patch
  (git-fixes CVE-2022-48632 bsc#1223481).
- Update
  patches.suse/ice-Fix-crash-by-keep-old-cfg-when-update-TCs-more-t.patch
  (git-fixes CVE-2022-48652 bsc#1223520).
- Update
  patches.suse/s390-dasd-fix-Oops-in-dasd_alias_get_start_dev-due-to-missing-pavgroup
  (git-fixes CVE-2022-48636 bsc#1223512).
- commit 523501c</changelog>
  <changelog author="dsterba@suse.com" date="1714996808">- fs: sysfs: Fix reference leak in sysfs_break_active_protection() (CVE-2024-26993 bsc#1223693)
- commit b0c9830</changelog>
  <changelog author="vkarasulli@suse.de" date="1714996809">- net: sparx5: Fix use after free inside sparx5_del_mact_entry
  (bsc#1223052 CVE-2024-26856).
- commit fc5c6ad</changelog>
  <changelog author="vkarasulli@suse.de" date="1714996810">- igc: avoid returning frame twice in XDP_REDIRECT (bsc#1223061
  CVE-2024-26853).
- commit 021db33</changelog>
  <changelog author="vkarasulli@suse.de" date="1714996811">- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in
  custom expectations (bsc#1222368 CVE-2024-26673).
- commit 785b7d0</changelog>
  <changelog author="mkoutny@suse.com" date="1714996812">- Update
  patches.suse/drm-i915-gem-Really-move-i915_gem_context.link-under.patch
  (CVE-2022-48662 bsc#1223505).
  Unbreak metadata (References: collides with our internal tracking,
  switch to Fixes: when referencing a commit).
- commit cd38265</changelog>
  <changelog author="mkubecek@suse.cz" date="1714996813">- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
  (CVE-2024-0639 bsc#1218917).
- commit 517d4f7</changelog>
  <changelog author="mkubecek@suse.cz" date="1714996814">- packet: annotate data-races around ignore_outgoing
  (CVE-2024-26862 bsc#1223111).
- commit 6e591e7</changelog>
  <changelog author="krisman@suse.de" date="1715083200">- Update
  patches.suse/ALSA-emu10k1-Fix-out-of-bounds-access-in-snd_emu10k1.patch
  (git-fixes CVE-2022-48702 bsc#1223923).
- Update
  patches.suse/ALSA-usb-audio-Fix-an-out-of-bounds-bug-in-__snd_usb.patch
  (git-fixes CVE-2022-48701 bsc#1223921).
- Update
  patches.suse/RDMA-irdma-Fix-drain-SQ-hang-with-no-completion.patch
  (jsc#SLE-18383 CVE-2022-48694 bsc#1223964).
- Update
  patches.suse/RDMA-srp-Set-scmnd-result-only-when-scmnd-is-not-NUL.patch
  (git-fixes CVE-2022-48692 bsc#1223962).
- Update
  patches.suse/cgroup-Add-missing-cpus_read_lock-to-cgroup_attach_task_all.patch
  (bsc#1196869 CVE-2022-48671 bsc#1223929).
- Update
  patches.suse/drm-radeon-add-a-force-flush-to-delay-work-when-rade.patch
  (git-fixes CVE-2022-48704 bsc#1223932).
- Update
  patches.suse/i40e-Fix-kernel-crash-during-module-removal.patch
  (jsc#SLE-18378 CVE-2022-48688 bsc#1223953).
- Update
  patches.suse/ipv6-sr-fix-out-of-bounds-read-when-setting-HMAC-dat.patch
  (bsc#1211592 CVE-2023-2860 CVE-2022-48687 bsc#1223952).
- Update
  patches.suse/net-smc-Fix-possible-access-to-freed-memory-in-link-clear
  (git-fixes CVE-2022-48673 bsc#1223934).
- Update
  patches.suse/nvme-tcp-fix-uaf-when-detecting-digest-errors.patch
  (bsc#1200313 bsc#1201489 CVE-2022-48686 bsc#1223948).
- Update patches.suse/nvmet-fix-a-use-after-free.patch (git-fixes
  CVE-2022-48697 bsc#1223922).
- Update
  patches.suse/of-fdt-fix-off-by-one-error-in-unflatten_dt_nodes.patch
  (git-fixes CVE-2022-48672 bsc#1223931).
- Update
  patches.suse/scsi-mpt3sas-Fix-use-after-free-warning.patch
  (git-fixes CVE-2022-48695 bsc#1223941).
- Update
  patches.suse/soc-brcmstb-pm-arm-Fix-refcount-leak-and-__iomem-lea.patch
  (git-fixes CVE-2022-48693 bsc#1223963).
- Update
  patches.suse/thermal-int340x_thermal-handle-data_vault-when-the-v.patch
  (bsc#1201308 CVE-2022-48703 bsc#1223924).
- Update patches.suse/vfio-type1-Unpin-zero-pages.patch (git-fixes
  CVE-2022-48700 bsc#1223957).
- commit c8677b5</changelog>
  <changelog author="krisman@suse.de" date="1715083201">- Update patches.suse/ice-Fix-DMA-mappings-leak.patch (jsc#PED-376
  CVE-2022-48690 bsc#1223960).
- commit 7e1bf3d</changelog>
  <changelog author="krisman@suse.de" date="1715083202">- Update
  patches.suse/1576-drm-amd-display-fix-memory-leak-when-using-debugfs_l.patch
  (jsc#PED-1166 jsc#PED-1168 jsc#PED-1170 jsc#PED-1218
  jsc#PED-1220 jsc#PED-1222 jsc#PED-1223 jsc#PED-1225 jsc#PED-2849
  CVE-2022-48698 bsc#1223956).
- commit a0e3008</changelog>
  <changelog author="tiwai@suse.de" date="1715083203">- Reapply "drm/qxl: simplify qxl_fence_wait" (stable-fixes).
- commit 8f3269f</changelog>
  <changelog author="vkarasulli@suse.de" date="1715083204">- netfilter: nft_ct: fix l3num expectations with inet pseudo
  family (git-fixes).
- commit 87e8a80</changelog>
</package>
<package pkgid="9aca3de366c9aeafc5bdffd5134eae4ce6d2a5ddf5d4249e1351fe55784742e6" name="kernel-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150500.55.62.2"/>
  <changelog author="tiwai@suse.de" date="1714996800">- Bluetooth: Add new quirk for broken read key length on ATS2851
  (git-fixes).
- commit 9ac913a</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996801">- tracing: Show size of requested perf buffer (git-fixes).
- commit f8d068b</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996802">- tracing/net_sched: Fix tracepoints that save qdisc_dev()
  as a string (git-fixes).
- commit a272f90</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996803">- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page
  in concurrent environment (git-fixes).
- commit 118cfcd</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996804">- kprobes: Fix possible use-after-free issue on kprobe
  registration (git-fixes).
- commit e007447</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996805">- ring-buffer: Only update pages_touched when a new page is
  touched (git-fixes).
- commit b42aba1</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996806">- blacklist.conf: add a not-relevant module-loader patch
- commit 90c64db</changelog>
  <changelog author="vkarasulli@suse.de" date="1714996807">- Update
  patches.suse/IB-core-Fix-a-nested-dead-lock-as-part-of-ODP-flow.patch
  (git-fixes CVE-2022-48675 bsc#1223894).
- Update
  patches.suse/drm-gma500-Fix-BUG-sleeping-function-called-from-inv.patch
  (git-fixes CVE-2022-48634 bsc#1223501).
- Update
  patches.suse/drm-i915-gem-Really-move-i915_gem_context.link-under.patch
  (CVE-2022-48662 bsc#1223505a4e7ccdac38e ("drm/i915: Move
  context management under GEM") bsc#1223505).
- Update
  patches.suse/i2c-mlxbf-prevent-stack-overflow-in-mlxbf_i2c_smbus_.patch
  (git-fixes CVE-2022-48632 bsc#1223481).
- Update
  patches.suse/ice-Fix-crash-by-keep-old-cfg-when-update-TCs-more-t.patch
  (git-fixes CVE-2022-48652 bsc#1223520).
- Update
  patches.suse/s390-dasd-fix-Oops-in-dasd_alias_get_start_dev-due-to-missing-pavgroup
  (git-fixes CVE-2022-48636 bsc#1223512).
- commit 523501c</changelog>
  <changelog author="dsterba@suse.com" date="1714996808">- fs: sysfs: Fix reference leak in sysfs_break_active_protection() (CVE-2024-26993 bsc#1223693)
- commit b0c9830</changelog>
  <changelog author="vkarasulli@suse.de" date="1714996809">- net: sparx5: Fix use after free inside sparx5_del_mact_entry
  (bsc#1223052 CVE-2024-26856).
- commit fc5c6ad</changelog>
  <changelog author="vkarasulli@suse.de" date="1714996810">- igc: avoid returning frame twice in XDP_REDIRECT (bsc#1223061
  CVE-2024-26853).
- commit 021db33</changelog>
  <changelog author="vkarasulli@suse.de" date="1714996811">- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in
  custom expectations (bsc#1222368 CVE-2024-26673).
- commit 785b7d0</changelog>
  <changelog author="mkoutny@suse.com" date="1714996812">- Update
  patches.suse/drm-i915-gem-Really-move-i915_gem_context.link-under.patch
  (CVE-2022-48662 bsc#1223505).
  Unbreak metadata (References: collides with our internal tracking,
  switch to Fixes: when referencing a commit).
- commit cd38265</changelog>
  <changelog author="mkubecek@suse.cz" date="1714996813">- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
  (CVE-2024-0639 bsc#1218917).
- commit 517d4f7</changelog>
  <changelog author="mkubecek@suse.cz" date="1714996814">- packet: annotate data-races around ignore_outgoing
  (CVE-2024-26862 bsc#1223111).
- commit 6e591e7</changelog>
  <changelog author="krisman@suse.de" date="1715083200">- Update
  patches.suse/ALSA-emu10k1-Fix-out-of-bounds-access-in-snd_emu10k1.patch
  (git-fixes CVE-2022-48702 bsc#1223923).
- Update
  patches.suse/ALSA-usb-audio-Fix-an-out-of-bounds-bug-in-__snd_usb.patch
  (git-fixes CVE-2022-48701 bsc#1223921).
- Update
  patches.suse/RDMA-irdma-Fix-drain-SQ-hang-with-no-completion.patch
  (jsc#SLE-18383 CVE-2022-48694 bsc#1223964).
- Update
  patches.suse/RDMA-srp-Set-scmnd-result-only-when-scmnd-is-not-NUL.patch
  (git-fixes CVE-2022-48692 bsc#1223962).
- Update
  patches.suse/cgroup-Add-missing-cpus_read_lock-to-cgroup_attach_task_all.patch
  (bsc#1196869 CVE-2022-48671 bsc#1223929).
- Update
  patches.suse/drm-radeon-add-a-force-flush-to-delay-work-when-rade.patch
  (git-fixes CVE-2022-48704 bsc#1223932).
- Update
  patches.suse/i40e-Fix-kernel-crash-during-module-removal.patch
  (jsc#SLE-18378 CVE-2022-48688 bsc#1223953).
- Update
  patches.suse/ipv6-sr-fix-out-of-bounds-read-when-setting-HMAC-dat.patch
  (bsc#1211592 CVE-2023-2860 CVE-2022-48687 bsc#1223952).
- Update
  patches.suse/net-smc-Fix-possible-access-to-freed-memory-in-link-clear
  (git-fixes CVE-2022-48673 bsc#1223934).
- Update
  patches.suse/nvme-tcp-fix-uaf-when-detecting-digest-errors.patch
  (bsc#1200313 bsc#1201489 CVE-2022-48686 bsc#1223948).
- Update patches.suse/nvmet-fix-a-use-after-free.patch (git-fixes
  CVE-2022-48697 bsc#1223922).
- Update
  patches.suse/of-fdt-fix-off-by-one-error-in-unflatten_dt_nodes.patch
  (git-fixes CVE-2022-48672 bsc#1223931).
- Update
  patches.suse/scsi-mpt3sas-Fix-use-after-free-warning.patch
  (git-fixes CVE-2022-48695 bsc#1223941).
- Update
  patches.suse/soc-brcmstb-pm-arm-Fix-refcount-leak-and-__iomem-lea.patch
  (git-fixes CVE-2022-48693 bsc#1223963).
- Update
  patches.suse/thermal-int340x_thermal-handle-data_vault-when-the-v.patch
  (bsc#1201308 CVE-2022-48703 bsc#1223924).
- Update patches.suse/vfio-type1-Unpin-zero-pages.patch (git-fixes
  CVE-2022-48700 bsc#1223957).
- commit c8677b5</changelog>
  <changelog author="krisman@suse.de" date="1715083201">- Update patches.suse/ice-Fix-DMA-mappings-leak.patch (jsc#PED-376
  CVE-2022-48690 bsc#1223960).
- commit 7e1bf3d</changelog>
  <changelog author="krisman@suse.de" date="1715083202">- Update
  patches.suse/1576-drm-amd-display-fix-memory-leak-when-using-debugfs_l.patch
  (jsc#PED-1166 jsc#PED-1168 jsc#PED-1170 jsc#PED-1218
  jsc#PED-1220 jsc#PED-1222 jsc#PED-1223 jsc#PED-1225 jsc#PED-2849
  CVE-2022-48698 bsc#1223956).
- commit a0e3008</changelog>
  <changelog author="tiwai@suse.de" date="1715083203">- Reapply "drm/qxl: simplify qxl_fence_wait" (stable-fixes).
- commit 8f3269f</changelog>
  <changelog author="vkarasulli@suse.de" date="1715083204">- netfilter: nft_ct: fix l3num expectations with inet pseudo
  family (git-fixes).
- commit 87e8a80</changelog>
</package>
<package pkgid="9db91b4f03b8efc9e2cded87985e9c1c0c999aa6c69dd203458a42e5d56e246d" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.55.62.2"/>
  <changelog author="tiwai@suse.de" date="1714996800">- Bluetooth: Add new quirk for broken read key length on ATS2851
  (git-fixes).
- commit 9ac913a</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996801">- tracing: Show size of requested perf buffer (git-fixes).
- commit f8d068b</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996802">- tracing/net_sched: Fix tracepoints that save qdisc_dev()
  as a string (git-fixes).
- commit a272f90</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996803">- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page
  in concurrent environment (git-fixes).
- commit 118cfcd</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996804">- kprobes: Fix possible use-after-free issue on kprobe
  registration (git-fixes).
- commit e007447</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996805">- ring-buffer: Only update pages_touched when a new page is
  touched (git-fixes).
- commit b42aba1</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996806">- blacklist.conf: add a not-relevant module-loader patch
- commit 90c64db</changelog>
  <changelog author="vkarasulli@suse.de" date="1714996807">- Update
  patches.suse/IB-core-Fix-a-nested-dead-lock-as-part-of-ODP-flow.patch
  (git-fixes CVE-2022-48675 bsc#1223894).
- Update
  patches.suse/drm-gma500-Fix-BUG-sleeping-function-called-from-inv.patch
  (git-fixes CVE-2022-48634 bsc#1223501).
- Update
  patches.suse/drm-i915-gem-Really-move-i915_gem_context.link-under.patch
  (CVE-2022-48662 bsc#1223505a4e7ccdac38e ("drm/i915: Move
  context management under GEM") bsc#1223505).
- Update
  patches.suse/i2c-mlxbf-prevent-stack-overflow-in-mlxbf_i2c_smbus_.patch
  (git-fixes CVE-2022-48632 bsc#1223481).
- Update
  patches.suse/ice-Fix-crash-by-keep-old-cfg-when-update-TCs-more-t.patch
  (git-fixes CVE-2022-48652 bsc#1223520).
- Update
  patches.suse/s390-dasd-fix-Oops-in-dasd_alias_get_start_dev-due-to-missing-pavgroup
  (git-fixes CVE-2022-48636 bsc#1223512).
- commit 523501c</changelog>
  <changelog author="dsterba@suse.com" date="1714996808">- fs: sysfs: Fix reference leak in sysfs_break_active_protection() (CVE-2024-26993 bsc#1223693)
- commit b0c9830</changelog>
  <changelog author="vkarasulli@suse.de" date="1714996809">- net: sparx5: Fix use after free inside sparx5_del_mact_entry
  (bsc#1223052 CVE-2024-26856).
- commit fc5c6ad</changelog>
  <changelog author="vkarasulli@suse.de" date="1714996810">- igc: avoid returning frame twice in XDP_REDIRECT (bsc#1223061
  CVE-2024-26853).
- commit 021db33</changelog>
  <changelog author="vkarasulli@suse.de" date="1714996811">- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in
  custom expectations (bsc#1222368 CVE-2024-26673).
- commit 785b7d0</changelog>
  <changelog author="mkoutny@suse.com" date="1714996812">- Update
  patches.suse/drm-i915-gem-Really-move-i915_gem_context.link-under.patch
  (CVE-2022-48662 bsc#1223505).
  Unbreak metadata (References: collides with our internal tracking,
  switch to Fixes: when referencing a commit).
- commit cd38265</changelog>
  <changelog author="mkubecek@suse.cz" date="1714996813">- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
  (CVE-2024-0639 bsc#1218917).
- commit 517d4f7</changelog>
  <changelog author="mkubecek@suse.cz" date="1714996814">- packet: annotate data-races around ignore_outgoing
  (CVE-2024-26862 bsc#1223111).
- commit 6e591e7</changelog>
  <changelog author="krisman@suse.de" date="1715083200">- Update
  patches.suse/ALSA-emu10k1-Fix-out-of-bounds-access-in-snd_emu10k1.patch
  (git-fixes CVE-2022-48702 bsc#1223923).
- Update
  patches.suse/ALSA-usb-audio-Fix-an-out-of-bounds-bug-in-__snd_usb.patch
  (git-fixes CVE-2022-48701 bsc#1223921).
- Update
  patches.suse/RDMA-irdma-Fix-drain-SQ-hang-with-no-completion.patch
  (jsc#SLE-18383 CVE-2022-48694 bsc#1223964).
- Update
  patches.suse/RDMA-srp-Set-scmnd-result-only-when-scmnd-is-not-NUL.patch
  (git-fixes CVE-2022-48692 bsc#1223962).
- Update
  patches.suse/cgroup-Add-missing-cpus_read_lock-to-cgroup_attach_task_all.patch
  (bsc#1196869 CVE-2022-48671 bsc#1223929).
- Update
  patches.suse/drm-radeon-add-a-force-flush-to-delay-work-when-rade.patch
  (git-fixes CVE-2022-48704 bsc#1223932).
- Update
  patches.suse/i40e-Fix-kernel-crash-during-module-removal.patch
  (jsc#SLE-18378 CVE-2022-48688 bsc#1223953).
- Update
  patches.suse/ipv6-sr-fix-out-of-bounds-read-when-setting-HMAC-dat.patch
  (bsc#1211592 CVE-2023-2860 CVE-2022-48687 bsc#1223952).
- Update
  patches.suse/net-smc-Fix-possible-access-to-freed-memory-in-link-clear
  (git-fixes CVE-2022-48673 bsc#1223934).
- Update
  patches.suse/nvme-tcp-fix-uaf-when-detecting-digest-errors.patch
  (bsc#1200313 bsc#1201489 CVE-2022-48686 bsc#1223948).
- Update patches.suse/nvmet-fix-a-use-after-free.patch (git-fixes
  CVE-2022-48697 bsc#1223922).
- Update
  patches.suse/of-fdt-fix-off-by-one-error-in-unflatten_dt_nodes.patch
  (git-fixes CVE-2022-48672 bsc#1223931).
- Update
  patches.suse/scsi-mpt3sas-Fix-use-after-free-warning.patch
  (git-fixes CVE-2022-48695 bsc#1223941).
- Update
  patches.suse/soc-brcmstb-pm-arm-Fix-refcount-leak-and-__iomem-lea.patch
  (git-fixes CVE-2022-48693 bsc#1223963).
- Update
  patches.suse/thermal-int340x_thermal-handle-data_vault-when-the-v.patch
  (bsc#1201308 CVE-2022-48703 bsc#1223924).
- Update patches.suse/vfio-type1-Unpin-zero-pages.patch (git-fixes
  CVE-2022-48700 bsc#1223957).
- commit c8677b5</changelog>
  <changelog author="krisman@suse.de" date="1715083201">- Update patches.suse/ice-Fix-DMA-mappings-leak.patch (jsc#PED-376
  CVE-2022-48690 bsc#1223960).
- commit 7e1bf3d</changelog>
  <changelog author="krisman@suse.de" date="1715083202">- Update
  patches.suse/1576-drm-amd-display-fix-memory-leak-when-using-debugfs_l.patch
  (jsc#PED-1166 jsc#PED-1168 jsc#PED-1170 jsc#PED-1218
  jsc#PED-1220 jsc#PED-1222 jsc#PED-1223 jsc#PED-1225 jsc#PED-2849
  CVE-2022-48698 bsc#1223956).
- commit a0e3008</changelog>
  <changelog author="tiwai@suse.de" date="1715083203">- Reapply "drm/qxl: simplify qxl_fence_wait" (stable-fixes).
- commit 8f3269f</changelog>
  <changelog author="vkarasulli@suse.de" date="1715083204">- netfilter: nft_ct: fix l3num expectations with inet pseudo
  family (git-fixes).
- commit 87e8a80</changelog>
</package>
<package pkgid="0b83bb54e817a19b535d194a5aa81c728e3f6413513388bb7e7ace7829d29aa0" name="kernel-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.65.1"/>
  <changelog author="petr.pavlu@suse.com" date="1714996800">- tracing/net_sched: Fix tracepoints that save qdisc_dev()
  as a string (git-fixes).
- commit a272f90</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996801">- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page
  in concurrent environment (git-fixes).
- commit 118cfcd</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996802">- kprobes: Fix possible use-after-free issue on kprobe
  registration (git-fixes).
- commit e007447</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996803">- ring-buffer: Only update pages_touched when a new page is
  touched (git-fixes).
- commit b42aba1</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996804">- blacklist.conf: add a not-relevant module-loader patch
- commit 90c64db</changelog>
  <changelog author="vkarasulli@suse.de" date="1714996805">- Update
  patches.suse/IB-core-Fix-a-nested-dead-lock-as-part-of-ODP-flow.patch
  (git-fixes CVE-2022-48675 bsc#1223894).
- Update
  patches.suse/drm-gma500-Fix-BUG-sleeping-function-called-from-inv.patch
  (git-fixes CVE-2022-48634 bsc#1223501).
- Update
  patches.suse/drm-i915-gem-Really-move-i915_gem_context.link-under.patch
  (CVE-2022-48662 bsc#1223505a4e7ccdac38e ("drm/i915: Move
  context management under GEM") bsc#1223505).
- Update
  patches.suse/i2c-mlxbf-prevent-stack-overflow-in-mlxbf_i2c_smbus_.patch
  (git-fixes CVE-2022-48632 bsc#1223481).
- Update
  patches.suse/ice-Fix-crash-by-keep-old-cfg-when-update-TCs-more-t.patch
  (git-fixes CVE-2022-48652 bsc#1223520).
- Update
  patches.suse/s390-dasd-fix-Oops-in-dasd_alias_get_start_dev-due-to-missing-pavgroup
  (git-fixes CVE-2022-48636 bsc#1223512).
- commit 523501c</changelog>
  <changelog author="dsterba@suse.com" date="1714996806">- fs: sysfs: Fix reference leak in sysfs_break_active_protection() (CVE-2024-26993 bsc#1223693)
- commit b0c9830</changelog>
  <changelog author="vkarasulli@suse.de" date="1714996807">- net: sparx5: Fix use after free inside sparx5_del_mact_entry
  (bsc#1223052 CVE-2024-26856).
- commit fc5c6ad</changelog>
  <changelog author="vkarasulli@suse.de" date="1714996808">- igc: avoid returning frame twice in XDP_REDIRECT (bsc#1223061
  CVE-2024-26853).
- commit 021db33</changelog>
  <changelog author="vkarasulli@suse.de" date="1714996809">- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in
  custom expectations (bsc#1222368 CVE-2024-26673).
- commit 785b7d0</changelog>
  <changelog author="mkoutny@suse.com" date="1714996810">- Update
  patches.suse/drm-i915-gem-Really-move-i915_gem_context.link-under.patch
  (CVE-2022-48662 bsc#1223505).
  Unbreak metadata (References: collides with our internal tracking,
  switch to Fixes: when referencing a commit).
- commit cd38265</changelog>
  <changelog author="mkubecek@suse.cz" date="1714996811">- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
  (CVE-2024-0639 bsc#1218917).
- commit 517d4f7</changelog>
  <changelog author="mkubecek@suse.cz" date="1714996812">- packet: annotate data-races around ignore_outgoing
  (CVE-2024-26862 bsc#1223111).
- commit 6e591e7</changelog>
  <changelog author="krisman@suse.de" date="1715083200">- Update
  patches.suse/ALSA-emu10k1-Fix-out-of-bounds-access-in-snd_emu10k1.patch
  (git-fixes CVE-2022-48702 bsc#1223923).
- Update
  patches.suse/ALSA-usb-audio-Fix-an-out-of-bounds-bug-in-__snd_usb.patch
  (git-fixes CVE-2022-48701 bsc#1223921).
- Update
  patches.suse/RDMA-irdma-Fix-drain-SQ-hang-with-no-completion.patch
  (jsc#SLE-18383 CVE-2022-48694 bsc#1223964).
- Update
  patches.suse/RDMA-srp-Set-scmnd-result-only-when-scmnd-is-not-NUL.patch
  (git-fixes CVE-2022-48692 bsc#1223962).
- Update
  patches.suse/cgroup-Add-missing-cpus_read_lock-to-cgroup_attach_task_all.patch
  (bsc#1196869 CVE-2022-48671 bsc#1223929).
- Update
  patches.suse/drm-radeon-add-a-force-flush-to-delay-work-when-rade.patch
  (git-fixes CVE-2022-48704 bsc#1223932).
- Update
  patches.suse/i40e-Fix-kernel-crash-during-module-removal.patch
  (jsc#SLE-18378 CVE-2022-48688 bsc#1223953).
- Update
  patches.suse/ipv6-sr-fix-out-of-bounds-read-when-setting-HMAC-dat.patch
  (bsc#1211592 CVE-2023-2860 CVE-2022-48687 bsc#1223952).
- Update
  patches.suse/net-smc-Fix-possible-access-to-freed-memory-in-link-clear
  (git-fixes CVE-2022-48673 bsc#1223934).
- Update
  patches.suse/nvme-tcp-fix-uaf-when-detecting-digest-errors.patch
  (bsc#1200313 bsc#1201489 CVE-2022-48686 bsc#1223948).
- Update patches.suse/nvmet-fix-a-use-after-free.patch (git-fixes
  CVE-2022-48697 bsc#1223922).
- Update
  patches.suse/of-fdt-fix-off-by-one-error-in-unflatten_dt_nodes.patch
  (git-fixes CVE-2022-48672 bsc#1223931).
- Update
  patches.suse/scsi-mpt3sas-Fix-use-after-free-warning.patch
  (git-fixes CVE-2022-48695 bsc#1223941).
- Update
  patches.suse/soc-brcmstb-pm-arm-Fix-refcount-leak-and-__iomem-lea.patch
  (git-fixes CVE-2022-48693 bsc#1223963).
- Update
  patches.suse/thermal-int340x_thermal-handle-data_vault-when-the-v.patch
  (bsc#1201308 CVE-2022-48703 bsc#1223924).
- Update patches.suse/vfio-type1-Unpin-zero-pages.patch (git-fixes
  CVE-2022-48700 bsc#1223957).
- commit c8677b5</changelog>
  <changelog author="krisman@suse.de" date="1715083201">- Update patches.suse/ice-Fix-DMA-mappings-leak.patch (jsc#PED-376
  CVE-2022-48690 bsc#1223960).
- commit 7e1bf3d</changelog>
  <changelog author="krisman@suse.de" date="1715083202">- Update
  patches.suse/1576-drm-amd-display-fix-memory-leak-when-using-debugfs_l.patch
  (jsc#PED-1166 jsc#PED-1168 jsc#PED-1170 jsc#PED-1218
  jsc#PED-1220 jsc#PED-1222 jsc#PED-1223 jsc#PED-1225 jsc#PED-2849
  CVE-2022-48698 bsc#1223956).
- commit a0e3008</changelog>
  <changelog author="tiwai@suse.de" date="1715083203">- Reapply "drm/qxl: simplify qxl_fence_wait" (stable-fixes).
- commit 8f3269f</changelog>
  <changelog author="vkarasulli@suse.de" date="1715083204">- netfilter: nft_ct: fix l3num expectations with inet pseudo
  family (git-fixes).
- commit 87e8a80</changelog>
  <changelog author="neilb@suse.de" date="1715169600">- Update
  patches.suse/SUNRPC-fix-a-memleak-in-gss_import_v2_context.patch
  (git-fixes bsc#1223858).
- commit e50ed21</changelog>
  <changelog author="vbabka@suse.cz" date="1716379200">- Update
  patches.suse/efi-libstub-Implement-support-for-unaccepted-memory.patch
  (jsc#PED-7167, bsc#1224169).
- commit a57eb93</changelog>
</package>
<package pkgid="d1d6f07c0867a29ca81cd4f26f5ddb9cfcedc03bfabab5b4f013d375d0fe023e" name="kernel-default" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.55.65.1"/>
  <changelog author="petr.pavlu@suse.com" date="1714996800">- tracing/net_sched: Fix tracepoints that save qdisc_dev()
  as a string (git-fixes).
- commit a272f90</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996801">- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page
  in concurrent environment (git-fixes).
- commit 118cfcd</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996802">- kprobes: Fix possible use-after-free issue on kprobe
  registration (git-fixes).
- commit e007447</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996803">- ring-buffer: Only update pages_touched when a new page is
  touched (git-fixes).
- commit b42aba1</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996804">- blacklist.conf: add a not-relevant module-loader patch
- commit 90c64db</changelog>
  <changelog author="vkarasulli@suse.de" date="1714996805">- Update
  patches.suse/IB-core-Fix-a-nested-dead-lock-as-part-of-ODP-flow.patch
  (git-fixes CVE-2022-48675 bsc#1223894).
- Update
  patches.suse/drm-gma500-Fix-BUG-sleeping-function-called-from-inv.patch
  (git-fixes CVE-2022-48634 bsc#1223501).
- Update
  patches.suse/drm-i915-gem-Really-move-i915_gem_context.link-under.patch
  (CVE-2022-48662 bsc#1223505a4e7ccdac38e ("drm/i915: Move
  context management under GEM") bsc#1223505).
- Update
  patches.suse/i2c-mlxbf-prevent-stack-overflow-in-mlxbf_i2c_smbus_.patch
  (git-fixes CVE-2022-48632 bsc#1223481).
- Update
  patches.suse/ice-Fix-crash-by-keep-old-cfg-when-update-TCs-more-t.patch
  (git-fixes CVE-2022-48652 bsc#1223520).
- Update
  patches.suse/s390-dasd-fix-Oops-in-dasd_alias_get_start_dev-due-to-missing-pavgroup
  (git-fixes CVE-2022-48636 bsc#1223512).
- commit 523501c</changelog>
  <changelog author="dsterba@suse.com" date="1714996806">- fs: sysfs: Fix reference leak in sysfs_break_active_protection() (CVE-2024-26993 bsc#1223693)
- commit b0c9830</changelog>
  <changelog author="vkarasulli@suse.de" date="1714996807">- net: sparx5: Fix use after free inside sparx5_del_mact_entry
  (bsc#1223052 CVE-2024-26856).
- commit fc5c6ad</changelog>
  <changelog author="vkarasulli@suse.de" date="1714996808">- igc: avoid returning frame twice in XDP_REDIRECT (bsc#1223061
  CVE-2024-26853).
- commit 021db33</changelog>
  <changelog author="vkarasulli@suse.de" date="1714996809">- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in
  custom expectations (bsc#1222368 CVE-2024-26673).
- commit 785b7d0</changelog>
  <changelog author="mkoutny@suse.com" date="1714996810">- Update
  patches.suse/drm-i915-gem-Really-move-i915_gem_context.link-under.patch
  (CVE-2022-48662 bsc#1223505).
  Unbreak metadata (References: collides with our internal tracking,
  switch to Fixes: when referencing a commit).
- commit cd38265</changelog>
  <changelog author="mkubecek@suse.cz" date="1714996811">- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
  (CVE-2024-0639 bsc#1218917).
- commit 517d4f7</changelog>
  <changelog author="mkubecek@suse.cz" date="1714996812">- packet: annotate data-races around ignore_outgoing
  (CVE-2024-26862 bsc#1223111).
- commit 6e591e7</changelog>
  <changelog author="krisman@suse.de" date="1715083200">- Update
  patches.suse/ALSA-emu10k1-Fix-out-of-bounds-access-in-snd_emu10k1.patch
  (git-fixes CVE-2022-48702 bsc#1223923).
- Update
  patches.suse/ALSA-usb-audio-Fix-an-out-of-bounds-bug-in-__snd_usb.patch
  (git-fixes CVE-2022-48701 bsc#1223921).
- Update
  patches.suse/RDMA-irdma-Fix-drain-SQ-hang-with-no-completion.patch
  (jsc#SLE-18383 CVE-2022-48694 bsc#1223964).
- Update
  patches.suse/RDMA-srp-Set-scmnd-result-only-when-scmnd-is-not-NUL.patch
  (git-fixes CVE-2022-48692 bsc#1223962).
- Update
  patches.suse/cgroup-Add-missing-cpus_read_lock-to-cgroup_attach_task_all.patch
  (bsc#1196869 CVE-2022-48671 bsc#1223929).
- Update
  patches.suse/drm-radeon-add-a-force-flush-to-delay-work-when-rade.patch
  (git-fixes CVE-2022-48704 bsc#1223932).
- Update
  patches.suse/i40e-Fix-kernel-crash-during-module-removal.patch
  (jsc#SLE-18378 CVE-2022-48688 bsc#1223953).
- Update
  patches.suse/ipv6-sr-fix-out-of-bounds-read-when-setting-HMAC-dat.patch
  (bsc#1211592 CVE-2023-2860 CVE-2022-48687 bsc#1223952).
- Update
  patches.suse/net-smc-Fix-possible-access-to-freed-memory-in-link-clear
  (git-fixes CVE-2022-48673 bsc#1223934).
- Update
  patches.suse/nvme-tcp-fix-uaf-when-detecting-digest-errors.patch
  (bsc#1200313 bsc#1201489 CVE-2022-48686 bsc#1223948).
- Update patches.suse/nvmet-fix-a-use-after-free.patch (git-fixes
  CVE-2022-48697 bsc#1223922).
- Update
  patches.suse/of-fdt-fix-off-by-one-error-in-unflatten_dt_nodes.patch
  (git-fixes CVE-2022-48672 bsc#1223931).
- Update
  patches.suse/scsi-mpt3sas-Fix-use-after-free-warning.patch
  (git-fixes CVE-2022-48695 bsc#1223941).
- Update
  patches.suse/soc-brcmstb-pm-arm-Fix-refcount-leak-and-__iomem-lea.patch
  (git-fixes CVE-2022-48693 bsc#1223963).
- Update
  patches.suse/thermal-int340x_thermal-handle-data_vault-when-the-v.patch
  (bsc#1201308 CVE-2022-48703 bsc#1223924).
- Update patches.suse/vfio-type1-Unpin-zero-pages.patch (git-fixes
  CVE-2022-48700 bsc#1223957).
- commit c8677b5</changelog>
  <changelog author="krisman@suse.de" date="1715083201">- Update patches.suse/ice-Fix-DMA-mappings-leak.patch (jsc#PED-376
  CVE-2022-48690 bsc#1223960).
- commit 7e1bf3d</changelog>
  <changelog author="krisman@suse.de" date="1715083202">- Update
  patches.suse/1576-drm-amd-display-fix-memory-leak-when-using-debugfs_l.patch
  (jsc#PED-1166 jsc#PED-1168 jsc#PED-1170 jsc#PED-1218
  jsc#PED-1220 jsc#PED-1222 jsc#PED-1223 jsc#PED-1225 jsc#PED-2849
  CVE-2022-48698 bsc#1223956).
- commit a0e3008</changelog>
  <changelog author="tiwai@suse.de" date="1715083203">- Reapply "drm/qxl: simplify qxl_fence_wait" (stable-fixes).
- commit 8f3269f</changelog>
  <changelog author="vkarasulli@suse.de" date="1715083204">- netfilter: nft_ct: fix l3num expectations with inet pseudo
  family (git-fixes).
- commit 87e8a80</changelog>
  <changelog author="neilb@suse.de" date="1715169600">- Update
  patches.suse/SUNRPC-fix-a-memleak-in-gss_import_v2_context.patch
  (git-fixes bsc#1223858).
- commit e50ed21</changelog>
  <changelog author="vbabka@suse.cz" date="1716379200">- Update
  patches.suse/efi-libstub-Implement-support-for-unaccepted-memory.patch
  (jsc#PED-7167, bsc#1224169).
- commit a57eb93</changelog>
</package>
<package pkgid="f1048edcab55cc7a5d9830250580e1650605727c2de37a9e1baac2cbeb657a47" name="kernel-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150500.55.65.1"/>
  <changelog author="petr.pavlu@suse.com" date="1714996800">- tracing/net_sched: Fix tracepoints that save qdisc_dev()
  as a string (git-fixes).
- commit a272f90</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996801">- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page
  in concurrent environment (git-fixes).
- commit 118cfcd</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996802">- kprobes: Fix possible use-after-free issue on kprobe
  registration (git-fixes).
- commit e007447</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996803">- ring-buffer: Only update pages_touched when a new page is
  touched (git-fixes).
- commit b42aba1</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996804">- blacklist.conf: add a not-relevant module-loader patch
- commit 90c64db</changelog>
  <changelog author="vkarasulli@suse.de" date="1714996805">- Update
  patches.suse/IB-core-Fix-a-nested-dead-lock-as-part-of-ODP-flow.patch
  (git-fixes CVE-2022-48675 bsc#1223894).
- Update
  patches.suse/drm-gma500-Fix-BUG-sleeping-function-called-from-inv.patch
  (git-fixes CVE-2022-48634 bsc#1223501).
- Update
  patches.suse/drm-i915-gem-Really-move-i915_gem_context.link-under.patch
  (CVE-2022-48662 bsc#1223505a4e7ccdac38e ("drm/i915: Move
  context management under GEM") bsc#1223505).
- Update
  patches.suse/i2c-mlxbf-prevent-stack-overflow-in-mlxbf_i2c_smbus_.patch
  (git-fixes CVE-2022-48632 bsc#1223481).
- Update
  patches.suse/ice-Fix-crash-by-keep-old-cfg-when-update-TCs-more-t.patch
  (git-fixes CVE-2022-48652 bsc#1223520).
- Update
  patches.suse/s390-dasd-fix-Oops-in-dasd_alias_get_start_dev-due-to-missing-pavgroup
  (git-fixes CVE-2022-48636 bsc#1223512).
- commit 523501c</changelog>
  <changelog author="dsterba@suse.com" date="1714996806">- fs: sysfs: Fix reference leak in sysfs_break_active_protection() (CVE-2024-26993 bsc#1223693)
- commit b0c9830</changelog>
  <changelog author="vkarasulli@suse.de" date="1714996807">- net: sparx5: Fix use after free inside sparx5_del_mact_entry
  (bsc#1223052 CVE-2024-26856).
- commit fc5c6ad</changelog>
  <changelog author="vkarasulli@suse.de" date="1714996808">- igc: avoid returning frame twice in XDP_REDIRECT (bsc#1223061
  CVE-2024-26853).
- commit 021db33</changelog>
  <changelog author="vkarasulli@suse.de" date="1714996809">- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in
  custom expectations (bsc#1222368 CVE-2024-26673).
- commit 785b7d0</changelog>
  <changelog author="mkoutny@suse.com" date="1714996810">- Update
  patches.suse/drm-i915-gem-Really-move-i915_gem_context.link-under.patch
  (CVE-2022-48662 bsc#1223505).
  Unbreak metadata (References: collides with our internal tracking,
  switch to Fixes: when referencing a commit).
- commit cd38265</changelog>
  <changelog author="mkubecek@suse.cz" date="1714996811">- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
  (CVE-2024-0639 bsc#1218917).
- commit 517d4f7</changelog>
  <changelog author="mkubecek@suse.cz" date="1714996812">- packet: annotate data-races around ignore_outgoing
  (CVE-2024-26862 bsc#1223111).
- commit 6e591e7</changelog>
  <changelog author="krisman@suse.de" date="1715083200">- Update
  patches.suse/ALSA-emu10k1-Fix-out-of-bounds-access-in-snd_emu10k1.patch
  (git-fixes CVE-2022-48702 bsc#1223923).
- Update
  patches.suse/ALSA-usb-audio-Fix-an-out-of-bounds-bug-in-__snd_usb.patch
  (git-fixes CVE-2022-48701 bsc#1223921).
- Update
  patches.suse/RDMA-irdma-Fix-drain-SQ-hang-with-no-completion.patch
  (jsc#SLE-18383 CVE-2022-48694 bsc#1223964).
- Update
  patches.suse/RDMA-srp-Set-scmnd-result-only-when-scmnd-is-not-NUL.patch
  (git-fixes CVE-2022-48692 bsc#1223962).
- Update
  patches.suse/cgroup-Add-missing-cpus_read_lock-to-cgroup_attach_task_all.patch
  (bsc#1196869 CVE-2022-48671 bsc#1223929).
- Update
  patches.suse/drm-radeon-add-a-force-flush-to-delay-work-when-rade.patch
  (git-fixes CVE-2022-48704 bsc#1223932).
- Update
  patches.suse/i40e-Fix-kernel-crash-during-module-removal.patch
  (jsc#SLE-18378 CVE-2022-48688 bsc#1223953).
- Update
  patches.suse/ipv6-sr-fix-out-of-bounds-read-when-setting-HMAC-dat.patch
  (bsc#1211592 CVE-2023-2860 CVE-2022-48687 bsc#1223952).
- Update
  patches.suse/net-smc-Fix-possible-access-to-freed-memory-in-link-clear
  (git-fixes CVE-2022-48673 bsc#1223934).
- Update
  patches.suse/nvme-tcp-fix-uaf-when-detecting-digest-errors.patch
  (bsc#1200313 bsc#1201489 CVE-2022-48686 bsc#1223948).
- Update patches.suse/nvmet-fix-a-use-after-free.patch (git-fixes
  CVE-2022-48697 bsc#1223922).
- Update
  patches.suse/of-fdt-fix-off-by-one-error-in-unflatten_dt_nodes.patch
  (git-fixes CVE-2022-48672 bsc#1223931).
- Update
  patches.suse/scsi-mpt3sas-Fix-use-after-free-warning.patch
  (git-fixes CVE-2022-48695 bsc#1223941).
- Update
  patches.suse/soc-brcmstb-pm-arm-Fix-refcount-leak-and-__iomem-lea.patch
  (git-fixes CVE-2022-48693 bsc#1223963).
- Update
  patches.suse/thermal-int340x_thermal-handle-data_vault-when-the-v.patch
  (bsc#1201308 CVE-2022-48703 bsc#1223924).
- Update patches.suse/vfio-type1-Unpin-zero-pages.patch (git-fixes
  CVE-2022-48700 bsc#1223957).
- commit c8677b5</changelog>
  <changelog author="krisman@suse.de" date="1715083201">- Update patches.suse/ice-Fix-DMA-mappings-leak.patch (jsc#PED-376
  CVE-2022-48690 bsc#1223960).
- commit 7e1bf3d</changelog>
  <changelog author="krisman@suse.de" date="1715083202">- Update
  patches.suse/1576-drm-amd-display-fix-memory-leak-when-using-debugfs_l.patch
  (jsc#PED-1166 jsc#PED-1168 jsc#PED-1170 jsc#PED-1218
  jsc#PED-1220 jsc#PED-1222 jsc#PED-1223 jsc#PED-1225 jsc#PED-2849
  CVE-2022-48698 bsc#1223956).
- commit a0e3008</changelog>
  <changelog author="tiwai@suse.de" date="1715083203">- Reapply "drm/qxl: simplify qxl_fence_wait" (stable-fixes).
- commit 8f3269f</changelog>
  <changelog author="vkarasulli@suse.de" date="1715083204">- netfilter: nft_ct: fix l3num expectations with inet pseudo
  family (git-fixes).
- commit 87e8a80</changelog>
  <changelog author="neilb@suse.de" date="1715169600">- Update
  patches.suse/SUNRPC-fix-a-memleak-in-gss_import_v2_context.patch
  (git-fixes bsc#1223858).
- commit e50ed21</changelog>
  <changelog author="vbabka@suse.cz" date="1716379200">- Update
  patches.suse/efi-libstub-Implement-support-for-unaccepted-memory.patch
  (jsc#PED-7167, bsc#1224169).
- commit a57eb93</changelog>
</package>
<package pkgid="21140b576b6629379df3f73ad46dad47b44cfff8b810be4811c12dde297460f2" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.55.65.1"/>
  <changelog author="petr.pavlu@suse.com" date="1714996800">- tracing/net_sched: Fix tracepoints that save qdisc_dev()
  as a string (git-fixes).
- commit a272f90</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996801">- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page
  in concurrent environment (git-fixes).
- commit 118cfcd</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996802">- kprobes: Fix possible use-after-free issue on kprobe
  registration (git-fixes).
- commit e007447</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996803">- ring-buffer: Only update pages_touched when a new page is
  touched (git-fixes).
- commit b42aba1</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996804">- blacklist.conf: add a not-relevant module-loader patch
- commit 90c64db</changelog>
  <changelog author="vkarasulli@suse.de" date="1714996805">- Update
  patches.suse/IB-core-Fix-a-nested-dead-lock-as-part-of-ODP-flow.patch
  (git-fixes CVE-2022-48675 bsc#1223894).
- Update
  patches.suse/drm-gma500-Fix-BUG-sleeping-function-called-from-inv.patch
  (git-fixes CVE-2022-48634 bsc#1223501).
- Update
  patches.suse/drm-i915-gem-Really-move-i915_gem_context.link-under.patch
  (CVE-2022-48662 bsc#1223505a4e7ccdac38e ("drm/i915: Move
  context management under GEM") bsc#1223505).
- Update
  patches.suse/i2c-mlxbf-prevent-stack-overflow-in-mlxbf_i2c_smbus_.patch
  (git-fixes CVE-2022-48632 bsc#1223481).
- Update
  patches.suse/ice-Fix-crash-by-keep-old-cfg-when-update-TCs-more-t.patch
  (git-fixes CVE-2022-48652 bsc#1223520).
- Update
  patches.suse/s390-dasd-fix-Oops-in-dasd_alias_get_start_dev-due-to-missing-pavgroup
  (git-fixes CVE-2022-48636 bsc#1223512).
- commit 523501c</changelog>
  <changelog author="dsterba@suse.com" date="1714996806">- fs: sysfs: Fix reference leak in sysfs_break_active_protection() (CVE-2024-26993 bsc#1223693)
- commit b0c9830</changelog>
  <changelog author="vkarasulli@suse.de" date="1714996807">- net: sparx5: Fix use after free inside sparx5_del_mact_entry
  (bsc#1223052 CVE-2024-26856).
- commit fc5c6ad</changelog>
  <changelog author="vkarasulli@suse.de" date="1714996808">- igc: avoid returning frame twice in XDP_REDIRECT (bsc#1223061
  CVE-2024-26853).
- commit 021db33</changelog>
  <changelog author="vkarasulli@suse.de" date="1714996809">- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in
  custom expectations (bsc#1222368 CVE-2024-26673).
- commit 785b7d0</changelog>
  <changelog author="mkoutny@suse.com" date="1714996810">- Update
  patches.suse/drm-i915-gem-Really-move-i915_gem_context.link-under.patch
  (CVE-2022-48662 bsc#1223505).
  Unbreak metadata (References: collides with our internal tracking,
  switch to Fixes: when referencing a commit).
- commit cd38265</changelog>
  <changelog author="mkubecek@suse.cz" date="1714996811">- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
  (CVE-2024-0639 bsc#1218917).
- commit 517d4f7</changelog>
  <changelog author="mkubecek@suse.cz" date="1714996812">- packet: annotate data-races around ignore_outgoing
  (CVE-2024-26862 bsc#1223111).
- commit 6e591e7</changelog>
  <changelog author="krisman@suse.de" date="1715083200">- Update
  patches.suse/ALSA-emu10k1-Fix-out-of-bounds-access-in-snd_emu10k1.patch
  (git-fixes CVE-2022-48702 bsc#1223923).
- Update
  patches.suse/ALSA-usb-audio-Fix-an-out-of-bounds-bug-in-__snd_usb.patch
  (git-fixes CVE-2022-48701 bsc#1223921).
- Update
  patches.suse/RDMA-irdma-Fix-drain-SQ-hang-with-no-completion.patch
  (jsc#SLE-18383 CVE-2022-48694 bsc#1223964).
- Update
  patches.suse/RDMA-srp-Set-scmnd-result-only-when-scmnd-is-not-NUL.patch
  (git-fixes CVE-2022-48692 bsc#1223962).
- Update
  patches.suse/cgroup-Add-missing-cpus_read_lock-to-cgroup_attach_task_all.patch
  (bsc#1196869 CVE-2022-48671 bsc#1223929).
- Update
  patches.suse/drm-radeon-add-a-force-flush-to-delay-work-when-rade.patch
  (git-fixes CVE-2022-48704 bsc#1223932).
- Update
  patches.suse/i40e-Fix-kernel-crash-during-module-removal.patch
  (jsc#SLE-18378 CVE-2022-48688 bsc#1223953).
- Update
  patches.suse/ipv6-sr-fix-out-of-bounds-read-when-setting-HMAC-dat.patch
  (bsc#1211592 CVE-2023-2860 CVE-2022-48687 bsc#1223952).
- Update
  patches.suse/net-smc-Fix-possible-access-to-freed-memory-in-link-clear
  (git-fixes CVE-2022-48673 bsc#1223934).
- Update
  patches.suse/nvme-tcp-fix-uaf-when-detecting-digest-errors.patch
  (bsc#1200313 bsc#1201489 CVE-2022-48686 bsc#1223948).
- Update patches.suse/nvmet-fix-a-use-after-free.patch (git-fixes
  CVE-2022-48697 bsc#1223922).
- Update
  patches.suse/of-fdt-fix-off-by-one-error-in-unflatten_dt_nodes.patch
  (git-fixes CVE-2022-48672 bsc#1223931).
- Update
  patches.suse/scsi-mpt3sas-Fix-use-after-free-warning.patch
  (git-fixes CVE-2022-48695 bsc#1223941).
- Update
  patches.suse/soc-brcmstb-pm-arm-Fix-refcount-leak-and-__iomem-lea.patch
  (git-fixes CVE-2022-48693 bsc#1223963).
- Update
  patches.suse/thermal-int340x_thermal-handle-data_vault-when-the-v.patch
  (bsc#1201308 CVE-2022-48703 bsc#1223924).
- Update patches.suse/vfio-type1-Unpin-zero-pages.patch (git-fixes
  CVE-2022-48700 bsc#1223957).
- commit c8677b5</changelog>
  <changelog author="krisman@suse.de" date="1715083201">- Update patches.suse/ice-Fix-DMA-mappings-leak.patch (jsc#PED-376
  CVE-2022-48690 bsc#1223960).
- commit 7e1bf3d</changelog>
  <changelog author="krisman@suse.de" date="1715083202">- Update
  patches.suse/1576-drm-amd-display-fix-memory-leak-when-using-debugfs_l.patch
  (jsc#PED-1166 jsc#PED-1168 jsc#PED-1170 jsc#PED-1218
  jsc#PED-1220 jsc#PED-1222 jsc#PED-1223 jsc#PED-1225 jsc#PED-2849
  CVE-2022-48698 bsc#1223956).
- commit a0e3008</changelog>
  <changelog author="tiwai@suse.de" date="1715083203">- Reapply "drm/qxl: simplify qxl_fence_wait" (stable-fixes).
- commit 8f3269f</changelog>
  <changelog author="vkarasulli@suse.de" date="1715083204">- netfilter: nft_ct: fix l3num expectations with inet pseudo
  family (git-fixes).
- commit 87e8a80</changelog>
  <changelog author="neilb@suse.de" date="1715169600">- Update
  patches.suse/SUNRPC-fix-a-memleak-in-gss_import_v2_context.patch
  (git-fixes bsc#1223858).
- commit e50ed21</changelog>
  <changelog author="vbabka@suse.cz" date="1716379200">- Update
  patches.suse/efi-libstub-Implement-support-for-unaccepted-memory.patch
  (jsc#PED-7167, bsc#1224169).
- commit a57eb93</changelog>
</package>
<package pkgid="3c7e2d8f3968595126e86935246c216b571a298a0e9e233dda3c938ed6675812" name="kernel-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.68.1"/>
  <changelog author="ematsumiya@suse.de" date="1717502400">- smb: client: set correct id, uid and cruid for multiuser
  automounts (bsc#1223011, CVE-2024-26822).
- commit 04cc660</changelog>
  <changelog author="lduncan@suse.com" date="1717502401">- blacklist.conf: added fix that needs code not present
- commit 9671fd4</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502402">- bpf: handle ldimm64 properly in check_cfg() (bsc#1225756).
- commit 7a7f193</changelog>
  <changelog author="davide.benini@suse.com" date="1717502403">- blacklist.conf: add d380ce70058a4ccddc3e5f5c2063165dc07672c6
  netrom: Fix data-races around sysctl_net_busy_read
  (CVE-2024-27419 bsc#1224759)
- commit b538410</changelog>
  <changelog author="iivanov@suse.de" date="1717502404">- Refresh patches.suse/swiotlb-Fix-double-allocation-of-slots-due-to-broken-alignment-handling.patch
  This fixes following build warning:
  Changed build warnings:
  * **** 1 warnings *****
  * comparison of distinct pointer types lacks a cast in ../kernel/dma/swiotlb.c in swiotlb_do_find_slots (from ../include/linux/minmax.h)
  In file included from ../include/linux/kernel.h:17:0,
  ../kernel/dma/swiotlb.c: In function 'swiotlb_do_find_slots':
  ../include/linux/minmax.h:20:28: warning: comparison of distinct pointer types lacks a cast
  ../include/linux/minmax.h:26:4: note: in expansion of macro '__typecheck'
  ../include/linux/minmax.h:36:24: note: in expansion of macro '__safe_cmp'
  ../include/linux/minmax.h:52:19: note: in expansion of macro '__careful_cmp'
  ../kernel/dma/swiotlb.c:648:12: note: in expansion of macro 'max'
- commit a52b0ca</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502405">- bpf: remove unnecessary prune and jump points (bsc#1225756).
- bpf: mostly decouple jump history management from
  is_state_visited() (bsc#1225756).
- bpf: decouple prune and jump points (bsc#1225756).
- commit 574a67d</changelog>
  <changelog author="ematsumiya@suse.de" date="1717502406">- cifs: fix underflow in parse_server_interfaces() (bsc#1223084,
  CVE-2024-26828).
- commit cade548</changelog>
  <changelog author="lduncan@suse.com" date="1717502407">- Update
  patches.suse/scsi-core-Fix-unremoved-procfs-host-directory-regression.patch
  (git-fixes bsc#1223675 CVE-2024-269355).
  Adding the CVE references.
- commit 2df316d</changelog>
  <changelog author="iivanov@suse.de" date="1717502408">- ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array (bsc#1225506 CVE-2021-47548)
- commit b006eef</changelog>
  <changelog author="ematsumiya@suse.de" date="1717502409">- smb: client: fix potential deadlock when releasing mids
  (bsc#1224020, bsc#1225548, CVE-2023-52757).
- commit edc36f8</changelog>
  <changelog author="ematsumiya@suse.de" date="1717502410">- smb3: fix lock ordering potential deadlock in
  cifs_sync_mid_result (bsc#1224020, bsc#1224549, CVE-2024-35998).
- commit fbb4c17</changelog>
  <changelog author="farosas@suse.de" date="1717502411">- vhost-vdpa: fix use after free in vhost_vdpa_probe()
  (CVE-2023-52795 bsc#1225085).
- commit 423f910</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717588800">- bpf: Protect against int overflow for stack access size
  (bsc#1224488 CVE-2024-35905).
- commit 1edb341</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717588801">- kABI: bpf: struct bpf_insn_aux_data kABI workaround
  (bsc#1225756).
- commit b5b7cd0</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1717588802">- Update references
- commit 006ab15</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1717588803">- inet: inet_defrag: prevent sk release while still in use
  (CVE-2024-26921 bsc#1223138).
- commit fb20c1d</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717588804">- bpf, skmsg: Fix NULL pointer dereference in
  sk_psock_skb_ingress_enqueue (bsc#1225761 CVE-2024-36938).
- commit 38f788d</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717588805">- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
  (bsc#1224575 CVE-2024-35976).
- commit bc0a82d</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1717588806">- net: preserve kabi for sk_buff (CVE-2024-26921 bsc#1223138).
- commit 68cb9bf</changelog>
  <changelog author="oneukum@suse.com" date="1717588807">- usb: typec: ucsi: Limit read size on v1.2 (CVE-2024-35924
  bsc#1224657).
- commit 578815c</changelog>
</package>
<package pkgid="a26d0b9060614ff00425393835d7c45dc0a05bc3a09de5b25d6181c74837346a" name="kernel-default" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.55.68.1"/>
  <changelog author="ematsumiya@suse.de" date="1717502400">- smb: client: set correct id, uid and cruid for multiuser
  automounts (bsc#1223011, CVE-2024-26822).
- commit 04cc660</changelog>
  <changelog author="lduncan@suse.com" date="1717502401">- blacklist.conf: added fix that needs code not present
- commit 9671fd4</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502402">- bpf: handle ldimm64 properly in check_cfg() (bsc#1225756).
- commit 7a7f193</changelog>
  <changelog author="davide.benini@suse.com" date="1717502403">- blacklist.conf: add d380ce70058a4ccddc3e5f5c2063165dc07672c6
  netrom: Fix data-races around sysctl_net_busy_read
  (CVE-2024-27419 bsc#1224759)
- commit b538410</changelog>
  <changelog author="iivanov@suse.de" date="1717502404">- Refresh patches.suse/swiotlb-Fix-double-allocation-of-slots-due-to-broken-alignment-handling.patch
  This fixes following build warning:
  Changed build warnings:
  * **** 1 warnings *****
  * comparison of distinct pointer types lacks a cast in ../kernel/dma/swiotlb.c in swiotlb_do_find_slots (from ../include/linux/minmax.h)
  In file included from ../include/linux/kernel.h:17:0,
  ../kernel/dma/swiotlb.c: In function 'swiotlb_do_find_slots':
  ../include/linux/minmax.h:20:28: warning: comparison of distinct pointer types lacks a cast
  ../include/linux/minmax.h:26:4: note: in expansion of macro '__typecheck'
  ../include/linux/minmax.h:36:24: note: in expansion of macro '__safe_cmp'
  ../include/linux/minmax.h:52:19: note: in expansion of macro '__careful_cmp'
  ../kernel/dma/swiotlb.c:648:12: note: in expansion of macro 'max'
- commit a52b0ca</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502405">- bpf: remove unnecessary prune and jump points (bsc#1225756).
- bpf: mostly decouple jump history management from
  is_state_visited() (bsc#1225756).
- bpf: decouple prune and jump points (bsc#1225756).
- commit 574a67d</changelog>
  <changelog author="ematsumiya@suse.de" date="1717502406">- cifs: fix underflow in parse_server_interfaces() (bsc#1223084,
  CVE-2024-26828).
- commit cade548</changelog>
  <changelog author="lduncan@suse.com" date="1717502407">- Update
  patches.suse/scsi-core-Fix-unremoved-procfs-host-directory-regression.patch
  (git-fixes bsc#1223675 CVE-2024-269355).
  Adding the CVE references.
- commit 2df316d</changelog>
  <changelog author="iivanov@suse.de" date="1717502408">- ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array (bsc#1225506 CVE-2021-47548)
- commit b006eef</changelog>
  <changelog author="ematsumiya@suse.de" date="1717502409">- smb: client: fix potential deadlock when releasing mids
  (bsc#1224020, bsc#1225548, CVE-2023-52757).
- commit edc36f8</changelog>
  <changelog author="ematsumiya@suse.de" date="1717502410">- smb3: fix lock ordering potential deadlock in
  cifs_sync_mid_result (bsc#1224020, bsc#1224549, CVE-2024-35998).
- commit fbb4c17</changelog>
  <changelog author="farosas@suse.de" date="1717502411">- vhost-vdpa: fix use after free in vhost_vdpa_probe()
  (CVE-2023-52795 bsc#1225085).
- commit 423f910</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717588800">- bpf: Protect against int overflow for stack access size
  (bsc#1224488 CVE-2024-35905).
- commit 1edb341</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717588801">- kABI: bpf: struct bpf_insn_aux_data kABI workaround
  (bsc#1225756).
- commit b5b7cd0</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1717588802">- Update references
- commit 006ab15</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1717588803">- inet: inet_defrag: prevent sk release while still in use
  (CVE-2024-26921 bsc#1223138).
- commit fb20c1d</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717588804">- bpf, skmsg: Fix NULL pointer dereference in
  sk_psock_skb_ingress_enqueue (bsc#1225761 CVE-2024-36938).
- commit 38f788d</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717588805">- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
  (bsc#1224575 CVE-2024-35976).
- commit bc0a82d</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1717588806">- net: preserve kabi for sk_buff (CVE-2024-26921 bsc#1223138).
- commit 68cb9bf</changelog>
  <changelog author="oneukum@suse.com" date="1717588807">- usb: typec: ucsi: Limit read size on v1.2 (CVE-2024-35924
  bsc#1224657).
- commit 578815c</changelog>
</package>
<package pkgid="2c72f4f8d8e631beda3c798f4ed4c4a61d4808d7d48c7469a0507a7783d59060" name="kernel-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150500.55.68.1"/>
  <changelog author="ematsumiya@suse.de" date="1717502400">- smb: client: set correct id, uid and cruid for multiuser
  automounts (bsc#1223011, CVE-2024-26822).
- commit 04cc660</changelog>
  <changelog author="lduncan@suse.com" date="1717502401">- blacklist.conf: added fix that needs code not present
- commit 9671fd4</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502402">- bpf: handle ldimm64 properly in check_cfg() (bsc#1225756).
- commit 7a7f193</changelog>
  <changelog author="davide.benini@suse.com" date="1717502403">- blacklist.conf: add d380ce70058a4ccddc3e5f5c2063165dc07672c6
  netrom: Fix data-races around sysctl_net_busy_read
  (CVE-2024-27419 bsc#1224759)
- commit b538410</changelog>
  <changelog author="iivanov@suse.de" date="1717502404">- Refresh patches.suse/swiotlb-Fix-double-allocation-of-slots-due-to-broken-alignment-handling.patch
  This fixes following build warning:
  Changed build warnings:
  * **** 1 warnings *****
  * comparison of distinct pointer types lacks a cast in ../kernel/dma/swiotlb.c in swiotlb_do_find_slots (from ../include/linux/minmax.h)
  In file included from ../include/linux/kernel.h:17:0,
  ../kernel/dma/swiotlb.c: In function 'swiotlb_do_find_slots':
  ../include/linux/minmax.h:20:28: warning: comparison of distinct pointer types lacks a cast
  ../include/linux/minmax.h:26:4: note: in expansion of macro '__typecheck'
  ../include/linux/minmax.h:36:24: note: in expansion of macro '__safe_cmp'
  ../include/linux/minmax.h:52:19: note: in expansion of macro '__careful_cmp'
  ../kernel/dma/swiotlb.c:648:12: note: in expansion of macro 'max'
- commit a52b0ca</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502405">- bpf: remove unnecessary prune and jump points (bsc#1225756).
- bpf: mostly decouple jump history management from
  is_state_visited() (bsc#1225756).
- bpf: decouple prune and jump points (bsc#1225756).
- commit 574a67d</changelog>
  <changelog author="ematsumiya@suse.de" date="1717502406">- cifs: fix underflow in parse_server_interfaces() (bsc#1223084,
  CVE-2024-26828).
- commit cade548</changelog>
  <changelog author="lduncan@suse.com" date="1717502407">- Update
  patches.suse/scsi-core-Fix-unremoved-procfs-host-directory-regression.patch
  (git-fixes bsc#1223675 CVE-2024-269355).
  Adding the CVE references.
- commit 2df316d</changelog>
  <changelog author="iivanov@suse.de" date="1717502408">- ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array (bsc#1225506 CVE-2021-47548)
- commit b006eef</changelog>
  <changelog author="ematsumiya@suse.de" date="1717502409">- smb: client: fix potential deadlock when releasing mids
  (bsc#1224020, bsc#1225548, CVE-2023-52757).
- commit edc36f8</changelog>
  <changelog author="ematsumiya@suse.de" date="1717502410">- smb3: fix lock ordering potential deadlock in
  cifs_sync_mid_result (bsc#1224020, bsc#1224549, CVE-2024-35998).
- commit fbb4c17</changelog>
  <changelog author="farosas@suse.de" date="1717502411">- vhost-vdpa: fix use after free in vhost_vdpa_probe()
  (CVE-2023-52795 bsc#1225085).
- commit 423f910</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717588800">- bpf: Protect against int overflow for stack access size
  (bsc#1224488 CVE-2024-35905).
- commit 1edb341</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717588801">- kABI: bpf: struct bpf_insn_aux_data kABI workaround
  (bsc#1225756).
- commit b5b7cd0</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1717588802">- Update references
- commit 006ab15</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1717588803">- inet: inet_defrag: prevent sk release while still in use
  (CVE-2024-26921 bsc#1223138).
- commit fb20c1d</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717588804">- bpf, skmsg: Fix NULL pointer dereference in
  sk_psock_skb_ingress_enqueue (bsc#1225761 CVE-2024-36938).
- commit 38f788d</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717588805">- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
  (bsc#1224575 CVE-2024-35976).
- commit bc0a82d</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1717588806">- net: preserve kabi for sk_buff (CVE-2024-26921 bsc#1223138).
- commit 68cb9bf</changelog>
  <changelog author="oneukum@suse.com" date="1717588807">- usb: typec: ucsi: Limit read size on v1.2 (CVE-2024-35924
  bsc#1224657).
- commit 578815c</changelog>
</package>
<package pkgid="94fc9d3861a4b8dcb633a3cec0b4ebb6754479720ae4660a36321f9fae6cef06" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.55.68.1"/>
  <changelog author="ematsumiya@suse.de" date="1717502400">- smb: client: set correct id, uid and cruid for multiuser
  automounts (bsc#1223011, CVE-2024-26822).
- commit 04cc660</changelog>
  <changelog author="lduncan@suse.com" date="1717502401">- blacklist.conf: added fix that needs code not present
- commit 9671fd4</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502402">- bpf: handle ldimm64 properly in check_cfg() (bsc#1225756).
- commit 7a7f193</changelog>
  <changelog author="davide.benini@suse.com" date="1717502403">- blacklist.conf: add d380ce70058a4ccddc3e5f5c2063165dc07672c6
  netrom: Fix data-races around sysctl_net_busy_read
  (CVE-2024-27419 bsc#1224759)
- commit b538410</changelog>
  <changelog author="iivanov@suse.de" date="1717502404">- Refresh patches.suse/swiotlb-Fix-double-allocation-of-slots-due-to-broken-alignment-handling.patch
  This fixes following build warning:
  Changed build warnings:
  * **** 1 warnings *****
  * comparison of distinct pointer types lacks a cast in ../kernel/dma/swiotlb.c in swiotlb_do_find_slots (from ../include/linux/minmax.h)
  In file included from ../include/linux/kernel.h:17:0,
  ../kernel/dma/swiotlb.c: In function 'swiotlb_do_find_slots':
  ../include/linux/minmax.h:20:28: warning: comparison of distinct pointer types lacks a cast
  ../include/linux/minmax.h:26:4: note: in expansion of macro '__typecheck'
  ../include/linux/minmax.h:36:24: note: in expansion of macro '__safe_cmp'
  ../include/linux/minmax.h:52:19: note: in expansion of macro '__careful_cmp'
  ../kernel/dma/swiotlb.c:648:12: note: in expansion of macro 'max'
- commit a52b0ca</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502405">- bpf: remove unnecessary prune and jump points (bsc#1225756).
- bpf: mostly decouple jump history management from
  is_state_visited() (bsc#1225756).
- bpf: decouple prune and jump points (bsc#1225756).
- commit 574a67d</changelog>
  <changelog author="ematsumiya@suse.de" date="1717502406">- cifs: fix underflow in parse_server_interfaces() (bsc#1223084,
  CVE-2024-26828).
- commit cade548</changelog>
  <changelog author="lduncan@suse.com" date="1717502407">- Update
  patches.suse/scsi-core-Fix-unremoved-procfs-host-directory-regression.patch
  (git-fixes bsc#1223675 CVE-2024-269355).
  Adding the CVE references.
- commit 2df316d</changelog>
  <changelog author="iivanov@suse.de" date="1717502408">- ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array (bsc#1225506 CVE-2021-47548)
- commit b006eef</changelog>
  <changelog author="ematsumiya@suse.de" date="1717502409">- smb: client: fix potential deadlock when releasing mids
  (bsc#1224020, bsc#1225548, CVE-2023-52757).
- commit edc36f8</changelog>
  <changelog author="ematsumiya@suse.de" date="1717502410">- smb3: fix lock ordering potential deadlock in
  cifs_sync_mid_result (bsc#1224020, bsc#1224549, CVE-2024-35998).
- commit fbb4c17</changelog>
  <changelog author="farosas@suse.de" date="1717502411">- vhost-vdpa: fix use after free in vhost_vdpa_probe()
  (CVE-2023-52795 bsc#1225085).
- commit 423f910</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717588800">- bpf: Protect against int overflow for stack access size
  (bsc#1224488 CVE-2024-35905).
- commit 1edb341</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717588801">- kABI: bpf: struct bpf_insn_aux_data kABI workaround
  (bsc#1225756).
- commit b5b7cd0</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1717588802">- Update references
- commit 006ab15</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1717588803">- inet: inet_defrag: prevent sk release while still in use
  (CVE-2024-26921 bsc#1223138).
- commit fb20c1d</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717588804">- bpf, skmsg: Fix NULL pointer dereference in
  sk_psock_skb_ingress_enqueue (bsc#1225761 CVE-2024-36938).
- commit 38f788d</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717588805">- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
  (bsc#1224575 CVE-2024-35976).
- commit bc0a82d</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1717588806">- net: preserve kabi for sk_buff (CVE-2024-26921 bsc#1223138).
- commit 68cb9bf</changelog>
  <changelog author="oneukum@suse.com" date="1717588807">- usb: typec: ucsi: Limit read size on v1.2 (CVE-2024-35924
  bsc#1224657).
- commit 578815c</changelog>
</package>
<package pkgid="7f308f167e25b3dee32ff58e544a8cdfa3b5f1b0fb6f8cd29b4a598fa3fa11dd" name="kernel-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.73.1"/>
  <changelog author="nmorey@suse.com" date="1722772800">- RDMA/hns: Fix insufficient extend DB for VFs. (git-fixes)
- commit 8395f97</changelog>
  <changelog author="nmorey@suse.com" date="1722772801">- RDMA/hns: Fix mbx timing out before CMD execution is completed (git-fixes)
- commit 7f0f7e9</changelog>
  <changelog author="nmorey@suse.com" date="1722772802">- bnxt_re: Fix imm_data endianness (git-fixes)
- commit c690ca2</changelog>
  <changelog author="mkubecek@suse.cz" date="1722859200">- check-for-config-changes: ignore also GCC_ASM_GOTO_OUTPUT_BROKEN
  Mainline commit f2f6a8e88717 ("init/Kconfig: remove
  CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND") replaced
  GCC_ASM_GOTO_OUTPUT_WORKAROUND with GCC_ASM_GOTO_OUTPUT_BROKEN. Ignore both
  when checking config changes.
- commit b60be3e</changelog>
  <changelog author="neilb@suse.de" date="1722859201">- blacklist.conf: blocks list lots of 5.15-stable nfsd fixes.
  In the 5.15 stable series there was a full backport of nfsd.  We don't
  won't all of that.  So blacklist lots of patches that we don't want.
- commit 0cfb63d</changelog>
  <changelog author="ailiop@suse.com" date="1722859202">- hfsplus: fix uninit-value in copy_name (git-fixes).
- commit 383d5d6</changelog>
  <changelog author="dwagner@suse.de" date="1722859203">- nvme-pci: add missing condition check for existence of mapped
  data (git-fixes).
- nvme-pci: Fix the instructions for disabling power management
  (git-fixes).
- nvmet-auth: fix nvmet_auth hash error handling (git-fixes).
- nvme: fixup comment for nvme RDMA Provider Type (git-fixes).
- nvmet: always initialize cqe.result (git-fixes).
- nvme: avoid double free special payload (git-fixes).
- nvmet: fix a possible leak when destroy a ctrl during qp
  establishment (git-fixes).
- nvme: adjust multiples of NVME_CTRL_PAGE_SIZE in offset
  (git-fixes).
- nvme-multipath: find NUMA path only for online numa-node
  (git-fixes).
- nvme-auth: allow mixing of secret and hash lengths (git-fixes).
- nvme-auth: use transformed key size to create resp (git-fixes).
- nvme-auth: alloc nvme_dhchap_key as single buffer (git-fixes).
- commit 3284c90</changelog>
  <changelog author="dwagner@suse.de" date="1722859204">- scsi: lpfc: Update lpfc version to 14.4.0.3 (bsc#1228857).
- scsi: lpfc: Revise lpfc_prep_embed_io routine with proper
  endian macro usages (bsc#1228857).
- scsi: lpfc: Fix incorrect request len mbox field when setting
  trunking via sysfs (bsc#1228857).
- scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info
  (bsc#1228857).
- scsi: lpfc: Fix handling of fully recovered fabric node in
  dev_loss callbk (bsc#1228857).
- scsi: lpfc: Relax PRLI issue conditions after GID_FT response
  (bsc#1228857).
- scsi: lpfc: Allow DEVICE_RECOVERY mode after RSCN receipt if
  in PRLI_ISSUE state (bsc#1228857).
- scsi: lpfc: Cancel ELS WQE instead of issuing abort when SLI
  port is inactive (bsc#1228857).
- commit 21ebef1</changelog>
  <changelog author="dwagner@suse.de" date="1722859205">- scsi: qla2xxx: Convert comma to semicolon (bsc#1228850).
- scsi: qla2xxx: Update version to 10.02.09.300-k (bsc#1228850).
- scsi: qla2xxx: Use QP lock to search for bsg (bsc#1228850).
- scsi: qla2xxx: Reduce fabric scan duplicate code (bsc#1228850).
- scsi: qla2xxx: Fix optrom version displayed in FDMI
  (bsc#1228850).
- scsi: qla2xxx: During vport delete send async logout explicitly
  (bsc#1228850).
- scsi: qla2xxx: Complete command early within lock (bsc#1228850).
- scsi: qla2xxx: Fix flash read failure (bsc#1228850).
- scsi: qla2xxx: Return ENOBUFS if sg_cnt is more than one for
  ELS cmds (bsc#1228850).
- scsi: qla2xxx: Fix for possible memory corruption (bsc#1228850).
- scsi: qla2xxx: validate nvme_local_port correctly (bsc#1228850).
- scsi: qla2xxx: Unable to act on RSCN for port online
  (bsc#1228850).
- scsi: qla2xxx: Remove unused struct 'scsi_dif_tuple'
  (bsc#1228850).
- scsi: qla2xxx: Fix debugfs output for fw_resource_count
  (bsc#1228850).
- scsi: qla2xxx: Indent help text (bsc#1228850).
- scsi: qla2xxx: Drop driver owner assignment (bsc#1228850).
- scsi: qla2xxx: Avoid possible run-time warning with long
  model_num (bsc#1228850).
- string.h: Introduce memtostr() and memtostr_pad() (bsc#1228850).
- commit ce7acc0</changelog>
  <changelog author="dwagner@suse.de" date="1722859206">- kabi/severity: add nvme common code
  The nvme common code is also allowed to change the data structures, there
  are only internal users.
- commit b8cf562</changelog>
  <changelog author="dsterba@suse.com" date="1722859207">- net: do not leave a dangling sk pointer, when socket creation fails (CVE-2024-40954 bsc#1227808)
- commit 8f44f81</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1722859208">- liquidio: Adjust a NULL pointer handling path in
  lio_vf_rep_copy_packet (CVE-2024-39506 bsc#1227729).
- commit 02e87a9</changelog>
  <changelog author="msuchanek@suse.de" date="1722859209">- powerpc: fix a file leak in kvm_vcpu_ioctl_enable_cap()
  (bsc#1194869).
- KVM: PPC: Book3S HV: Fix the set_one_reg for MMCR3
  (bsc#1194869).
- KVM: PPC: Book3S HV: Fix "rm_exit" entry in debugfs timings
  (bsc#1194869).
- KVM: PPC: Book3S HV: remove extraneous asterisk from
  rm_host_ipi_action() comment (bsc#1194869).
- KVM: PPC: Book3S HV Nested: L2 LPCR should inherit L1 LPES
  setting (bsc#1194869).
- KVM: PPC: Book3S: Suppress failed alloc warning in
  H_COPY_TOFROM_GUEST (bsc#1194869).
- KVM: PPC: Book3S: Suppress warnings when allocating too big
  memory slots (bsc#1194869).
- commit cc22863</changelog>
  <changelog author="tiwai@suse.de" date="1722945600">- ASoC: topology: Fix route memory corruption (CVE-2024-41069
  bsc#1228644).
- commit 586db1a</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1722945601">- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
  (bsc#1228756 CVE-2024-42161).
- commit 8359d86</changelog>
  <changelog author="ddiss@suse.de" date="1722945602">- ima: Fix use-after-free on a dentry's dname.name (bsc#1227716
  CVE-2024-39494).
- commit 81484ec</changelog>
  <changelog author="tiwai@suse.de" date="1722945603">- ALSA: usb-audio: Correct surround channels in UAC1 channel map
  (git-fixes).
- ALSA: hda: conexant: Fix headset auto detect fail in the
  polling mode (git-fixes).
- drm/vmwgfx: Fix overlay when using Screen Targets (git-fixes).
- drm/vmwgfx: Fix a deadlock in dma buf fence polling (git-fixes).
- drm/nouveau: prime: fix refcount underflow (git-fixes).
- ALSA: usb-audio: Add a quirk for Sonix HD USB Camera
  (stable-fixes).
- ALSA: usb-audio: Move HD Webcam quirk to the right place
  (git-fixes).
- ALSA: usb-audio: Fix microphone sound on HD webcam
  (stable-fixes).
- drm/amd/display: Check for NULL pointer (stable-fixes).
- drm/amdgpu/sdma5.2: Update wptr registers as well as doorbell
  (stable-fixes).
- drm/i915/gt: Do not consider preemption during execlists_dequeue
  for gen8 (git-fixes).
- drm/etnaviv: don't block scheduler when GPU is still active
  (stable-fixes).
- drm/mipi-dsi: Fix theoretical int overflow in
  mipi_dsi_dcs_write_seq() (git-fixes).
- drm/mipi-dsi: Fix mipi_dsi_dcs_write_seq() macro definition
  format (stable-fixes).
- commit b91fd99</changelog>
  <changelog author="tiwai@suse.de" date="1722945604">- Drop doubly defined References in sound patches
- commit 46ad1df</changelog>
  <changelog author="ohering@suse.de" date="1722945605">- PCI: hv: Return zero, not garbage, when reading
  PCI_INTERRUPT_PIN (git-fixes).
- commit df5839d</changelog>
  <changelog author="mkoutny@suse.com" date="1722945606">- Refresh
  patches.kabi/xhci-restre-deleted-trb-fields-for-tracing.patch.
  Fix KABI restoration also in tracing event message format.
- commit 3bd4a56</changelog>
</package>
<package pkgid="951d3800b9467966d488ded1016037497e751284f57064f15506707920576218" name="kernel-default" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.55.73.1"/>
  <changelog author="nmorey@suse.com" date="1722772800">- RDMA/hns: Fix insufficient extend DB for VFs. (git-fixes)
- commit 8395f97</changelog>
  <changelog author="nmorey@suse.com" date="1722772801">- RDMA/hns: Fix mbx timing out before CMD execution is completed (git-fixes)
- commit 7f0f7e9</changelog>
  <changelog author="nmorey@suse.com" date="1722772802">- bnxt_re: Fix imm_data endianness (git-fixes)
- commit c690ca2</changelog>
  <changelog author="mkubecek@suse.cz" date="1722859200">- check-for-config-changes: ignore also GCC_ASM_GOTO_OUTPUT_BROKEN
  Mainline commit f2f6a8e88717 ("init/Kconfig: remove
  CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND") replaced
  GCC_ASM_GOTO_OUTPUT_WORKAROUND with GCC_ASM_GOTO_OUTPUT_BROKEN. Ignore both
  when checking config changes.
- commit b60be3e</changelog>
  <changelog author="neilb@suse.de" date="1722859201">- blacklist.conf: blocks list lots of 5.15-stable nfsd fixes.
  In the 5.15 stable series there was a full backport of nfsd.  We don't
  won't all of that.  So blacklist lots of patches that we don't want.
- commit 0cfb63d</changelog>
  <changelog author="ailiop@suse.com" date="1722859202">- hfsplus: fix uninit-value in copy_name (git-fixes).
- commit 383d5d6</changelog>
  <changelog author="dwagner@suse.de" date="1722859203">- nvme-pci: add missing condition check for existence of mapped
  data (git-fixes).
- nvme-pci: Fix the instructions for disabling power management
  (git-fixes).
- nvmet-auth: fix nvmet_auth hash error handling (git-fixes).
- nvme: fixup comment for nvme RDMA Provider Type (git-fixes).
- nvmet: always initialize cqe.result (git-fixes).
- nvme: avoid double free special payload (git-fixes).
- nvmet: fix a possible leak when destroy a ctrl during qp
  establishment (git-fixes).
- nvme: adjust multiples of NVME_CTRL_PAGE_SIZE in offset
  (git-fixes).
- nvme-multipath: find NUMA path only for online numa-node
  (git-fixes).
- nvme-auth: allow mixing of secret and hash lengths (git-fixes).
- nvme-auth: use transformed key size to create resp (git-fixes).
- nvme-auth: alloc nvme_dhchap_key as single buffer (git-fixes).
- commit 3284c90</changelog>
  <changelog author="dwagner@suse.de" date="1722859204">- scsi: lpfc: Update lpfc version to 14.4.0.3 (bsc#1228857).
- scsi: lpfc: Revise lpfc_prep_embed_io routine with proper
  endian macro usages (bsc#1228857).
- scsi: lpfc: Fix incorrect request len mbox field when setting
  trunking via sysfs (bsc#1228857).
- scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info
  (bsc#1228857).
- scsi: lpfc: Fix handling of fully recovered fabric node in
  dev_loss callbk (bsc#1228857).
- scsi: lpfc: Relax PRLI issue conditions after GID_FT response
  (bsc#1228857).
- scsi: lpfc: Allow DEVICE_RECOVERY mode after RSCN receipt if
  in PRLI_ISSUE state (bsc#1228857).
- scsi: lpfc: Cancel ELS WQE instead of issuing abort when SLI
  port is inactive (bsc#1228857).
- commit 21ebef1</changelog>
  <changelog author="dwagner@suse.de" date="1722859205">- scsi: qla2xxx: Convert comma to semicolon (bsc#1228850).
- scsi: qla2xxx: Update version to 10.02.09.300-k (bsc#1228850).
- scsi: qla2xxx: Use QP lock to search for bsg (bsc#1228850).
- scsi: qla2xxx: Reduce fabric scan duplicate code (bsc#1228850).
- scsi: qla2xxx: Fix optrom version displayed in FDMI
  (bsc#1228850).
- scsi: qla2xxx: During vport delete send async logout explicitly
  (bsc#1228850).
- scsi: qla2xxx: Complete command early within lock (bsc#1228850).
- scsi: qla2xxx: Fix flash read failure (bsc#1228850).
- scsi: qla2xxx: Return ENOBUFS if sg_cnt is more than one for
  ELS cmds (bsc#1228850).
- scsi: qla2xxx: Fix for possible memory corruption (bsc#1228850).
- scsi: qla2xxx: validate nvme_local_port correctly (bsc#1228850).
- scsi: qla2xxx: Unable to act on RSCN for port online
  (bsc#1228850).
- scsi: qla2xxx: Remove unused struct 'scsi_dif_tuple'
  (bsc#1228850).
- scsi: qla2xxx: Fix debugfs output for fw_resource_count
  (bsc#1228850).
- scsi: qla2xxx: Indent help text (bsc#1228850).
- scsi: qla2xxx: Drop driver owner assignment (bsc#1228850).
- scsi: qla2xxx: Avoid possible run-time warning with long
  model_num (bsc#1228850).
- string.h: Introduce memtostr() and memtostr_pad() (bsc#1228850).
- commit ce7acc0</changelog>
  <changelog author="dwagner@suse.de" date="1722859206">- kabi/severity: add nvme common code
  The nvme common code is also allowed to change the data structures, there
  are only internal users.
- commit b8cf562</changelog>
  <changelog author="dsterba@suse.com" date="1722859207">- net: do not leave a dangling sk pointer, when socket creation fails (CVE-2024-40954 bsc#1227808)
- commit 8f44f81</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1722859208">- liquidio: Adjust a NULL pointer handling path in
  lio_vf_rep_copy_packet (CVE-2024-39506 bsc#1227729).
- commit 02e87a9</changelog>
  <changelog author="msuchanek@suse.de" date="1722859209">- powerpc: fix a file leak in kvm_vcpu_ioctl_enable_cap()
  (bsc#1194869).
- KVM: PPC: Book3S HV: Fix the set_one_reg for MMCR3
  (bsc#1194869).
- KVM: PPC: Book3S HV: Fix "rm_exit" entry in debugfs timings
  (bsc#1194869).
- KVM: PPC: Book3S HV: remove extraneous asterisk from
  rm_host_ipi_action() comment (bsc#1194869).
- KVM: PPC: Book3S HV Nested: L2 LPCR should inherit L1 LPES
  setting (bsc#1194869).
- KVM: PPC: Book3S: Suppress failed alloc warning in
  H_COPY_TOFROM_GUEST (bsc#1194869).
- KVM: PPC: Book3S: Suppress warnings when allocating too big
  memory slots (bsc#1194869).
- commit cc22863</changelog>
  <changelog author="tiwai@suse.de" date="1722945600">- ASoC: topology: Fix route memory corruption (CVE-2024-41069
  bsc#1228644).
- commit 586db1a</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1722945601">- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
  (bsc#1228756 CVE-2024-42161).
- commit 8359d86</changelog>
  <changelog author="ddiss@suse.de" date="1722945602">- ima: Fix use-after-free on a dentry's dname.name (bsc#1227716
  CVE-2024-39494).
- commit 81484ec</changelog>
  <changelog author="tiwai@suse.de" date="1722945603">- ALSA: usb-audio: Correct surround channels in UAC1 channel map
  (git-fixes).
- ALSA: hda: conexant: Fix headset auto detect fail in the
  polling mode (git-fixes).
- drm/vmwgfx: Fix overlay when using Screen Targets (git-fixes).
- drm/vmwgfx: Fix a deadlock in dma buf fence polling (git-fixes).
- drm/nouveau: prime: fix refcount underflow (git-fixes).
- ALSA: usb-audio: Add a quirk for Sonix HD USB Camera
  (stable-fixes).
- ALSA: usb-audio: Move HD Webcam quirk to the right place
  (git-fixes).
- ALSA: usb-audio: Fix microphone sound on HD webcam
  (stable-fixes).
- drm/amd/display: Check for NULL pointer (stable-fixes).
- drm/amdgpu/sdma5.2: Update wptr registers as well as doorbell
  (stable-fixes).
- drm/i915/gt: Do not consider preemption during execlists_dequeue
  for gen8 (git-fixes).
- drm/etnaviv: don't block scheduler when GPU is still active
  (stable-fixes).
- drm/mipi-dsi: Fix theoretical int overflow in
  mipi_dsi_dcs_write_seq() (git-fixes).
- drm/mipi-dsi: Fix mipi_dsi_dcs_write_seq() macro definition
  format (stable-fixes).
- commit b91fd99</changelog>
  <changelog author="tiwai@suse.de" date="1722945604">- Drop doubly defined References in sound patches
- commit 46ad1df</changelog>
  <changelog author="ohering@suse.de" date="1722945605">- PCI: hv: Return zero, not garbage, when reading
  PCI_INTERRUPT_PIN (git-fixes).
- commit df5839d</changelog>
  <changelog author="mkoutny@suse.com" date="1722945606">- Refresh
  patches.kabi/xhci-restre-deleted-trb-fields-for-tracing.patch.
  Fix KABI restoration also in tracing event message format.
- commit 3bd4a56</changelog>
</package>
<package pkgid="4c6658982c1539db836d0f05bf2ab6e75c1673856e0b726485e0612dbf6a226c" name="kernel-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150500.55.73.1"/>
  <changelog author="nmorey@suse.com" date="1722772800">- RDMA/hns: Fix insufficient extend DB for VFs. (git-fixes)
- commit 8395f97</changelog>
  <changelog author="nmorey@suse.com" date="1722772801">- RDMA/hns: Fix mbx timing out before CMD execution is completed (git-fixes)
- commit 7f0f7e9</changelog>
  <changelog author="nmorey@suse.com" date="1722772802">- bnxt_re: Fix imm_data endianness (git-fixes)
- commit c690ca2</changelog>
  <changelog author="mkubecek@suse.cz" date="1722859200">- check-for-config-changes: ignore also GCC_ASM_GOTO_OUTPUT_BROKEN
  Mainline commit f2f6a8e88717 ("init/Kconfig: remove
  CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND") replaced
  GCC_ASM_GOTO_OUTPUT_WORKAROUND with GCC_ASM_GOTO_OUTPUT_BROKEN. Ignore both
  when checking config changes.
- commit b60be3e</changelog>
  <changelog author="neilb@suse.de" date="1722859201">- blacklist.conf: blocks list lots of 5.15-stable nfsd fixes.
  In the 5.15 stable series there was a full backport of nfsd.  We don't
  won't all of that.  So blacklist lots of patches that we don't want.
- commit 0cfb63d</changelog>
  <changelog author="ailiop@suse.com" date="1722859202">- hfsplus: fix uninit-value in copy_name (git-fixes).
- commit 383d5d6</changelog>
  <changelog author="dwagner@suse.de" date="1722859203">- nvme-pci: add missing condition check for existence of mapped
  data (git-fixes).
- nvme-pci: Fix the instructions for disabling power management
  (git-fixes).
- nvmet-auth: fix nvmet_auth hash error handling (git-fixes).
- nvme: fixup comment for nvme RDMA Provider Type (git-fixes).
- nvmet: always initialize cqe.result (git-fixes).
- nvme: avoid double free special payload (git-fixes).
- nvmet: fix a possible leak when destroy a ctrl during qp
  establishment (git-fixes).
- nvme: adjust multiples of NVME_CTRL_PAGE_SIZE in offset
  (git-fixes).
- nvme-multipath: find NUMA path only for online numa-node
  (git-fixes).
- nvme-auth: allow mixing of secret and hash lengths (git-fixes).
- nvme-auth: use transformed key size to create resp (git-fixes).
- nvme-auth: alloc nvme_dhchap_key as single buffer (git-fixes).
- commit 3284c90</changelog>
  <changelog author="dwagner@suse.de" date="1722859204">- scsi: lpfc: Update lpfc version to 14.4.0.3 (bsc#1228857).
- scsi: lpfc: Revise lpfc_prep_embed_io routine with proper
  endian macro usages (bsc#1228857).
- scsi: lpfc: Fix incorrect request len mbox field when setting
  trunking via sysfs (bsc#1228857).
- scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info
  (bsc#1228857).
- scsi: lpfc: Fix handling of fully recovered fabric node in
  dev_loss callbk (bsc#1228857).
- scsi: lpfc: Relax PRLI issue conditions after GID_FT response
  (bsc#1228857).
- scsi: lpfc: Allow DEVICE_RECOVERY mode after RSCN receipt if
  in PRLI_ISSUE state (bsc#1228857).
- scsi: lpfc: Cancel ELS WQE instead of issuing abort when SLI
  port is inactive (bsc#1228857).
- commit 21ebef1</changelog>
  <changelog author="dwagner@suse.de" date="1722859205">- scsi: qla2xxx: Convert comma to semicolon (bsc#1228850).
- scsi: qla2xxx: Update version to 10.02.09.300-k (bsc#1228850).
- scsi: qla2xxx: Use QP lock to search for bsg (bsc#1228850).
- scsi: qla2xxx: Reduce fabric scan duplicate code (bsc#1228850).
- scsi: qla2xxx: Fix optrom version displayed in FDMI
  (bsc#1228850).
- scsi: qla2xxx: During vport delete send async logout explicitly
  (bsc#1228850).
- scsi: qla2xxx: Complete command early within lock (bsc#1228850).
- scsi: qla2xxx: Fix flash read failure (bsc#1228850).
- scsi: qla2xxx: Return ENOBUFS if sg_cnt is more than one for
  ELS cmds (bsc#1228850).
- scsi: qla2xxx: Fix for possible memory corruption (bsc#1228850).
- scsi: qla2xxx: validate nvme_local_port correctly (bsc#1228850).
- scsi: qla2xxx: Unable to act on RSCN for port online
  (bsc#1228850).
- scsi: qla2xxx: Remove unused struct 'scsi_dif_tuple'
  (bsc#1228850).
- scsi: qla2xxx: Fix debugfs output for fw_resource_count
  (bsc#1228850).
- scsi: qla2xxx: Indent help text (bsc#1228850).
- scsi: qla2xxx: Drop driver owner assignment (bsc#1228850).
- scsi: qla2xxx: Avoid possible run-time warning with long
  model_num (bsc#1228850).
- string.h: Introduce memtostr() and memtostr_pad() (bsc#1228850).
- commit ce7acc0</changelog>
  <changelog author="dwagner@suse.de" date="1722859206">- kabi/severity: add nvme common code
  The nvme common code is also allowed to change the data structures, there
  are only internal users.
- commit b8cf562</changelog>
  <changelog author="dsterba@suse.com" date="1722859207">- net: do not leave a dangling sk pointer, when socket creation fails (CVE-2024-40954 bsc#1227808)
- commit 8f44f81</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1722859208">- liquidio: Adjust a NULL pointer handling path in
  lio_vf_rep_copy_packet (CVE-2024-39506 bsc#1227729).
- commit 02e87a9</changelog>
  <changelog author="msuchanek@suse.de" date="1722859209">- powerpc: fix a file leak in kvm_vcpu_ioctl_enable_cap()
  (bsc#1194869).
- KVM: PPC: Book3S HV: Fix the set_one_reg for MMCR3
  (bsc#1194869).
- KVM: PPC: Book3S HV: Fix "rm_exit" entry in debugfs timings
  (bsc#1194869).
- KVM: PPC: Book3S HV: remove extraneous asterisk from
  rm_host_ipi_action() comment (bsc#1194869).
- KVM: PPC: Book3S HV Nested: L2 LPCR should inherit L1 LPES
  setting (bsc#1194869).
- KVM: PPC: Book3S: Suppress failed alloc warning in
  H_COPY_TOFROM_GUEST (bsc#1194869).
- KVM: PPC: Book3S: Suppress warnings when allocating too big
  memory slots (bsc#1194869).
- commit cc22863</changelog>
  <changelog author="tiwai@suse.de" date="1722945600">- ASoC: topology: Fix route memory corruption (CVE-2024-41069
  bsc#1228644).
- commit 586db1a</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1722945601">- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
  (bsc#1228756 CVE-2024-42161).
- commit 8359d86</changelog>
  <changelog author="ddiss@suse.de" date="1722945602">- ima: Fix use-after-free on a dentry's dname.name (bsc#1227716
  CVE-2024-39494).
- commit 81484ec</changelog>
  <changelog author="tiwai@suse.de" date="1722945603">- ALSA: usb-audio: Correct surround channels in UAC1 channel map
  (git-fixes).
- ALSA: hda: conexant: Fix headset auto detect fail in the
  polling mode (git-fixes).
- drm/vmwgfx: Fix overlay when using Screen Targets (git-fixes).
- drm/vmwgfx: Fix a deadlock in dma buf fence polling (git-fixes).
- drm/nouveau: prime: fix refcount underflow (git-fixes).
- ALSA: usb-audio: Add a quirk for Sonix HD USB Camera
  (stable-fixes).
- ALSA: usb-audio: Move HD Webcam quirk to the right place
  (git-fixes).
- ALSA: usb-audio: Fix microphone sound on HD webcam
  (stable-fixes).
- drm/amd/display: Check for NULL pointer (stable-fixes).
- drm/amdgpu/sdma5.2: Update wptr registers as well as doorbell
  (stable-fixes).
- drm/i915/gt: Do not consider preemption during execlists_dequeue
  for gen8 (git-fixes).
- drm/etnaviv: don't block scheduler when GPU is still active
  (stable-fixes).
- drm/mipi-dsi: Fix theoretical int overflow in
  mipi_dsi_dcs_write_seq() (git-fixes).
- drm/mipi-dsi: Fix mipi_dsi_dcs_write_seq() macro definition
  format (stable-fixes).
- commit b91fd99</changelog>
  <changelog author="tiwai@suse.de" date="1722945604">- Drop doubly defined References in sound patches
- commit 46ad1df</changelog>
  <changelog author="ohering@suse.de" date="1722945605">- PCI: hv: Return zero, not garbage, when reading
  PCI_INTERRUPT_PIN (git-fixes).
- commit df5839d</changelog>
  <changelog author="mkoutny@suse.com" date="1722945606">- Refresh
  patches.kabi/xhci-restre-deleted-trb-fields-for-tracing.patch.
  Fix KABI restoration also in tracing event message format.
- commit 3bd4a56</changelog>
</package>
<package pkgid="c7b9f4664ff3ad5c4c45dbf61c7ad2f94095313a3e2c18622b80966b40646b22" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.55.73.1"/>
  <changelog author="nmorey@suse.com" date="1722772800">- RDMA/hns: Fix insufficient extend DB for VFs. (git-fixes)
- commit 8395f97</changelog>
  <changelog author="nmorey@suse.com" date="1722772801">- RDMA/hns: Fix mbx timing out before CMD execution is completed (git-fixes)
- commit 7f0f7e9</changelog>
  <changelog author="nmorey@suse.com" date="1722772802">- bnxt_re: Fix imm_data endianness (git-fixes)
- commit c690ca2</changelog>
  <changelog author="mkubecek@suse.cz" date="1722859200">- check-for-config-changes: ignore also GCC_ASM_GOTO_OUTPUT_BROKEN
  Mainline commit f2f6a8e88717 ("init/Kconfig: remove
  CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND") replaced
  GCC_ASM_GOTO_OUTPUT_WORKAROUND with GCC_ASM_GOTO_OUTPUT_BROKEN. Ignore both
  when checking config changes.
- commit b60be3e</changelog>
  <changelog author="neilb@suse.de" date="1722859201">- blacklist.conf: blocks list lots of 5.15-stable nfsd fixes.
  In the 5.15 stable series there was a full backport of nfsd.  We don't
  won't all of that.  So blacklist lots of patches that we don't want.
- commit 0cfb63d</changelog>
  <changelog author="ailiop@suse.com" date="1722859202">- hfsplus: fix uninit-value in copy_name (git-fixes).
- commit 383d5d6</changelog>
  <changelog author="dwagner@suse.de" date="1722859203">- nvme-pci: add missing condition check for existence of mapped
  data (git-fixes).
- nvme-pci: Fix the instructions for disabling power management
  (git-fixes).
- nvmet-auth: fix nvmet_auth hash error handling (git-fixes).
- nvme: fixup comment for nvme RDMA Provider Type (git-fixes).
- nvmet: always initialize cqe.result (git-fixes).
- nvme: avoid double free special payload (git-fixes).
- nvmet: fix a possible leak when destroy a ctrl during qp
  establishment (git-fixes).
- nvme: adjust multiples of NVME_CTRL_PAGE_SIZE in offset
  (git-fixes).
- nvme-multipath: find NUMA path only for online numa-node
  (git-fixes).
- nvme-auth: allow mixing of secret and hash lengths (git-fixes).
- nvme-auth: use transformed key size to create resp (git-fixes).
- nvme-auth: alloc nvme_dhchap_key as single buffer (git-fixes).
- commit 3284c90</changelog>
  <changelog author="dwagner@suse.de" date="1722859204">- scsi: lpfc: Update lpfc version to 14.4.0.3 (bsc#1228857).
- scsi: lpfc: Revise lpfc_prep_embed_io routine with proper
  endian macro usages (bsc#1228857).
- scsi: lpfc: Fix incorrect request len mbox field when setting
  trunking via sysfs (bsc#1228857).
- scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info
  (bsc#1228857).
- scsi: lpfc: Fix handling of fully recovered fabric node in
  dev_loss callbk (bsc#1228857).
- scsi: lpfc: Relax PRLI issue conditions after GID_FT response
  (bsc#1228857).
- scsi: lpfc: Allow DEVICE_RECOVERY mode after RSCN receipt if
  in PRLI_ISSUE state (bsc#1228857).
- scsi: lpfc: Cancel ELS WQE instead of issuing abort when SLI
  port is inactive (bsc#1228857).
- commit 21ebef1</changelog>
  <changelog author="dwagner@suse.de" date="1722859205">- scsi: qla2xxx: Convert comma to semicolon (bsc#1228850).
- scsi: qla2xxx: Update version to 10.02.09.300-k (bsc#1228850).
- scsi: qla2xxx: Use QP lock to search for bsg (bsc#1228850).
- scsi: qla2xxx: Reduce fabric scan duplicate code (bsc#1228850).
- scsi: qla2xxx: Fix optrom version displayed in FDMI
  (bsc#1228850).
- scsi: qla2xxx: During vport delete send async logout explicitly
  (bsc#1228850).
- scsi: qla2xxx: Complete command early within lock (bsc#1228850).
- scsi: qla2xxx: Fix flash read failure (bsc#1228850).
- scsi: qla2xxx: Return ENOBUFS if sg_cnt is more than one for
  ELS cmds (bsc#1228850).
- scsi: qla2xxx: Fix for possible memory corruption (bsc#1228850).
- scsi: qla2xxx: validate nvme_local_port correctly (bsc#1228850).
- scsi: qla2xxx: Unable to act on RSCN for port online
  (bsc#1228850).
- scsi: qla2xxx: Remove unused struct 'scsi_dif_tuple'
  (bsc#1228850).
- scsi: qla2xxx: Fix debugfs output for fw_resource_count
  (bsc#1228850).
- scsi: qla2xxx: Indent help text (bsc#1228850).
- scsi: qla2xxx: Drop driver owner assignment (bsc#1228850).
- scsi: qla2xxx: Avoid possible run-time warning with long
  model_num (bsc#1228850).
- string.h: Introduce memtostr() and memtostr_pad() (bsc#1228850).
- commit ce7acc0</changelog>
  <changelog author="dwagner@suse.de" date="1722859206">- kabi/severity: add nvme common code
  The nvme common code is also allowed to change the data structures, there
  are only internal users.
- commit b8cf562</changelog>
  <changelog author="dsterba@suse.com" date="1722859207">- net: do not leave a dangling sk pointer, when socket creation fails (CVE-2024-40954 bsc#1227808)
- commit 8f44f81</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1722859208">- liquidio: Adjust a NULL pointer handling path in
  lio_vf_rep_copy_packet (CVE-2024-39506 bsc#1227729).
- commit 02e87a9</changelog>
  <changelog author="msuchanek@suse.de" date="1722859209">- powerpc: fix a file leak in kvm_vcpu_ioctl_enable_cap()
  (bsc#1194869).
- KVM: PPC: Book3S HV: Fix the set_one_reg for MMCR3
  (bsc#1194869).
- KVM: PPC: Book3S HV: Fix "rm_exit" entry in debugfs timings
  (bsc#1194869).
- KVM: PPC: Book3S HV: remove extraneous asterisk from
  rm_host_ipi_action() comment (bsc#1194869).
- KVM: PPC: Book3S HV Nested: L2 LPCR should inherit L1 LPES
  setting (bsc#1194869).
- KVM: PPC: Book3S: Suppress failed alloc warning in
  H_COPY_TOFROM_GUEST (bsc#1194869).
- KVM: PPC: Book3S: Suppress warnings when allocating too big
  memory slots (bsc#1194869).
- commit cc22863</changelog>
  <changelog author="tiwai@suse.de" date="1722945600">- ASoC: topology: Fix route memory corruption (CVE-2024-41069
  bsc#1228644).
- commit 586db1a</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1722945601">- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
  (bsc#1228756 CVE-2024-42161).
- commit 8359d86</changelog>
  <changelog author="ddiss@suse.de" date="1722945602">- ima: Fix use-after-free on a dentry's dname.name (bsc#1227716
  CVE-2024-39494).
- commit 81484ec</changelog>
  <changelog author="tiwai@suse.de" date="1722945603">- ALSA: usb-audio: Correct surround channels in UAC1 channel map
  (git-fixes).
- ALSA: hda: conexant: Fix headset auto detect fail in the
  polling mode (git-fixes).
- drm/vmwgfx: Fix overlay when using Screen Targets (git-fixes).
- drm/vmwgfx: Fix a deadlock in dma buf fence polling (git-fixes).
- drm/nouveau: prime: fix refcount underflow (git-fixes).
- ALSA: usb-audio: Add a quirk for Sonix HD USB Camera
  (stable-fixes).
- ALSA: usb-audio: Move HD Webcam quirk to the right place
  (git-fixes).
- ALSA: usb-audio: Fix microphone sound on HD webcam
  (stable-fixes).
- drm/amd/display: Check for NULL pointer (stable-fixes).
- drm/amdgpu/sdma5.2: Update wptr registers as well as doorbell
  (stable-fixes).
- drm/i915/gt: Do not consider preemption during execlists_dequeue
  for gen8 (git-fixes).
- drm/etnaviv: don't block scheduler when GPU is still active
  (stable-fixes).
- drm/mipi-dsi: Fix theoretical int overflow in
  mipi_dsi_dcs_write_seq() (git-fixes).
- drm/mipi-dsi: Fix mipi_dsi_dcs_write_seq() macro definition
  format (stable-fixes).
- commit b91fd99</changelog>
  <changelog author="tiwai@suse.de" date="1722945604">- Drop doubly defined References in sound patches
- commit 46ad1df</changelog>
  <changelog author="ohering@suse.de" date="1722945605">- PCI: hv: Return zero, not garbage, when reading
  PCI_INTERRUPT_PIN (git-fixes).
- commit df5839d</changelog>
  <changelog author="mkoutny@suse.com" date="1722945606">- Refresh
  patches.kabi/xhci-restre-deleted-trb-fields-for-tracing.patch.
  Fix KABI restoration also in tracing event message format.
- commit 3bd4a56</changelog>
</package>
<package pkgid="2a952f43e98faaa18b5ebda00b2479d52ba24fd07f7141addb85493b69812a8d" name="kernel-default-base" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.28.1.150500.6.11.2"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="a05da3a65f0951600b6c1d3afe83127be24ca89b8a241141480e0f34abdc2b4d" name="kernel-default-base" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.55.28.1.150500.6.11.2"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="e0bd7f445336cde9e0ee73481c8e46493ff63292cebe60887f84b00657233694" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.55.28.1.150500.6.11.2"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="98664f478f2031e789b732672925bf9076bb95ec3fb947154fb4640c74339a9c" name="kernel-default-base" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.31.1.150500.6.13.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="bff278d72f0ee91c4e9c4ea5dd500c4c6cbafe1b79219ff68d9a1881f55f9e7a" name="kernel-default-base" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.55.31.1.150500.6.13.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="9c901c434a16362df00c6d85d673b39cd2bc9eaf3bc0042e0c6e8ba0c8cfd344" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.55.31.1.150500.6.13.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="91ad3ad595d93fe1215120db1244b8cc7f35d137ed1cb123b631b89103499b2c" name="kernel-default-base" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.36.1.150500.6.15.3"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="0819628c4e388191616ef6019244544d70f90d696164b78a79ba8e631407b174" name="kernel-default-base" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.55.36.1.150500.6.15.3"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="de516df1adf785b3c831ee5a5eba8225c81375f73a7454a2bb8ac1524ec8538e" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.55.36.1.150500.6.15.3"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="e35669ae9461f0413699a686bc4b0dd22c2033e58a0d5e979d134edc7685ba46" name="kernel-default-base" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.39.1.150500.6.17.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="96dfe69148031db0e010a3085432b4c6af175427b954344e4162460d7dc07769" name="kernel-default-base" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.55.39.1.150500.6.17.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="d49a3af9d220bebcc95fb0914424dbe1960c2cf300acf22a49bb21992a589baa" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.55.39.1.150500.6.17.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="f51244cf8da04886c0e1b1e2ec72ae3b2b7e26bb8aa00b99ca729a68a1bf9d51" name="kernel-default-base" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.44.1.150500.6.19.2"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="57e536b07ef63412e6dc602c514e3733debbaa74f0ad930a8211d9b26dce8b44" name="kernel-default-base" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.55.44.1.150500.6.19.2"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="13855b1dc9ffd2dedd0f5fafc4eecc656e7cb73a36033783ec573c89eabdbece" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.55.44.1.150500.6.19.2"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="c0fc69916569dfbb32191d076cba56ef8a74c4d7727c0cba772758427aafd8a0" name="kernel-default-base" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.49.1.150500.6.21.2"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="4747ffb44be45cd4fbc0309f269503435eb1738645244a84c0ef6b2fd57f187a" name="kernel-default-base" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.55.49.1.150500.6.21.2"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="a6b6bf565b23a38e84a088e2f9c9f1cb4796a91f19ef994abb070c9c7e63a180" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.55.49.1.150500.6.21.2"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="02723055784365d141c11fd815657e16ac98d20a08014b32af87f2767f0301d0" name="kernel-default-base" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.52.1.150500.6.23.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="eebb4d02af789133ece039c43c8fc19140c9940f4fa66bf2296228d86f0818be" name="kernel-default-base" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.55.52.1.150500.6.23.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="e4aa38cb8d0cd34232fe1c937d5336cb48f4bba3f362de77cccd756b6eb8f516" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.55.52.1.150500.6.23.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="280d186d3fa1bf6b5844d8189772c50de28547ee23f42dd0e60f19bde16d1e90" name="kernel-default-base" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.59.1.150500.6.25.7"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="26a9cd8ffd4b6ee10543cca00bbf50631adb8b9ee44a26de07874125ac89bda9" name="kernel-default-base" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.55.59.1.150500.6.25.7"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="53be5efaaaae057e363a00412e8e495d47f3dbff85d541336d23472aa0ac4da2" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.55.59.1.150500.6.25.7"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="8b33b5e7bd94389954c4f4f8c48342af3c4892e364bf942f1f8791552e0a6cc2" name="kernel-default-base" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.62.2.150500.6.27.2"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="30c3234ef1cc770ca7708b004c760a177480ee2f64331d6ceb5719366c3251b5" name="kernel-default-base" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.55.62.2.150500.6.27.2"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="da3a92fca5684a56024bb12e41580974c883d51310b769dcdc41cefa7da1abc0" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.55.62.2.150500.6.27.2"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="fcf5151c7366da0c17f5e0e87b08c330c6cada423fe163d5b60152c602ad43c1" name="kernel-default-base" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.65.1.150500.6.29.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="73b6664f5b0c888df65d39a3c0ae5a01e890dc9a8284a0e37ec4f8e4906ab297" name="kernel-default-base" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.55.65.1.150500.6.29.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="74a5d6c4fea86924732206fbb06e8dc3f4c6fcb16004a713cb1018dc8752ec48" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.55.65.1.150500.6.29.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="cdfa0de33c1bc08dff981ab65056f860e02088ba0fe64549f939b5be8b3160e0" name="kernel-default-base" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.68.1.150500.6.31.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="547c774878903d51a94ce1a2835bff6c9f2884f9d64de884fb87464f2defd156" name="kernel-default-base" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.55.68.1.150500.6.31.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="e5ec1f915fe84d4df0e5e4a88fbd8c0867be379b2d8b836c1267d4171feec60d" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.55.68.1.150500.6.31.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="0274b85d50831a8af740ad8f5201f33a0ea04a1335afabf1b1c0ef43eadd88d7" name="kernel-default-base" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.73.1.150500.6.33.8"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="beec0d53f5f120c3b1c7fcc8d218db304cf2712389ce6a383d3a3179ad2ac097" name="kernel-default-base" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.55.73.1.150500.6.33.8"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="aedc72e4cd8712f86aa3475f8deae52216dd63eed6dd0271a443e828d9170a13" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.55.73.1.150500.6.33.8"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="1ec83d753b1ae55e3af0ab5b9d9cff3d5c0e82937c9ac248d5ede60be295bec4" name="kernel-firmware" arch="src">
  <version epoch="0" ver="20230724" rel="150500.3.12.1"/>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1723464000">- Update AMD ucode to 20240809 (bsc#1229069, CVE-2023-31315)</changelog>
</package>
<package pkgid="60d70cad429c66b9da7736fc88a6b8f419c113892fb1077423aa8b3ed087575e" name="kernel-firmware" arch="src">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="aa4c397e7f4d2ecf3555b7b1188c906cb1b37199fb110e0e36697d9706383c65" name="kernel-firmware-all" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.12.1"/>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1723464000">- Update AMD ucode to 20240809 (bsc#1229069, CVE-2023-31315)</changelog>
</package>
<package pkgid="eb8a762e891360ac20d943e789a59ae5f1dd8de1b6a4da2c832e463472831635" name="kernel-firmware-all" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="8456fa778ecd8f282e62613b5bcb7f63bf5529f9739e3de740c3439aed0e4a03" name="kernel-firmware-amdgpu" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.12.1"/>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1723464000">- Update AMD ucode to 20240809 (bsc#1229069, CVE-2023-31315)</changelog>
</package>
<package pkgid="f818d50f89909727a96419aabe79fcc2d534c4f371e6dcf6ceb93bf646c24da3" name="kernel-firmware-amdgpu" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="420000d2aa55ef5add231adaa65ad966e9b800097738b994dc12c1319d106856" name="kernel-firmware-ath10k" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.12.1"/>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1723464000">- Update AMD ucode to 20240809 (bsc#1229069, CVE-2023-31315)</changelog>
</package>
<package pkgid="94109b93447820c17c58366403cd5ebde45bf5901a089e3fa8120e6ec5a25b02" name="kernel-firmware-ath10k" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="156bcaa8d02735479124f44dea8cd5a1491356f70cf476a3478bb17460b02fb0" name="kernel-firmware-ath11k" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.12.1"/>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1723464000">- Update AMD ucode to 20240809 (bsc#1229069, CVE-2023-31315)</changelog>
</package>
<package pkgid="2a68a22aacb53dcf0975ec36af3a721898f024ff6e23e9f819a1c4919fbfc288" name="kernel-firmware-ath11k" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="c6e8e1c7c59007f613a93a6300cd698070b9a9f0f37b3664c99f2deda7daea8a" name="kernel-firmware-atheros" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.12.1"/>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1723464000">- Update AMD ucode to 20240809 (bsc#1229069, CVE-2023-31315)</changelog>
</package>
<package pkgid="ac317e3c8abcc96a9ee97a56ccd15ae1586a5c06aa370b6d7fb4f5b9bd67108d" name="kernel-firmware-atheros" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="91f1840747ad7f334a07391cededab52e566a2b22bbed036d6f216bca32bc117" name="kernel-firmware-bluetooth" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.12.1"/>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1723464000">- Update AMD ucode to 20240809 (bsc#1229069, CVE-2023-31315)</changelog>
</package>
<package pkgid="02d1236de09a3db02f37f5a5f2869d0d3f8b9ddfd57f0b8c75f0db45e43c7ab2" name="kernel-firmware-bluetooth" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="d1c97e3c6056227a2984f9bb3f10311a8db62ad7d3d1c81bd8dec574273eee0f" name="kernel-firmware-bnx2" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.12.1"/>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1723464000">- Update AMD ucode to 20240809 (bsc#1229069, CVE-2023-31315)</changelog>
</package>
<package pkgid="5d647fe67460ef2f705d8f9d648d2fb92b4b4f260a8ff72842ffd489b5fa0dc5" name="kernel-firmware-bnx2" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="66de717b55a02e200310ef4d09e6d10c605dd59b51fdea1efebb5027e9e7a74c" name="kernel-firmware-brcm" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.12.1"/>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1723464000">- Update AMD ucode to 20240809 (bsc#1229069, CVE-2023-31315)</changelog>
</package>
<package pkgid="de5efc5d05049524d12425f33d3968c5375ab4566faf05521b8be646c2701d27" name="kernel-firmware-brcm" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="d319fbb860c9cf29fb07c700b662067a9eeae4561662503d88a111cb4e851e3a" name="kernel-firmware-chelsio" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.12.1"/>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1723464000">- Update AMD ucode to 20240809 (bsc#1229069, CVE-2023-31315)</changelog>
</package>
<package pkgid="05d0d6e22d7ccd49ccaf65ad3b58f6da3d693681d6b3cec4bfb8fe560c98d808" name="kernel-firmware-chelsio" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="13afbd36cd8ecba457282e278739f0af7037265c51f5b0de1f0dea29624cf2e5" name="kernel-firmware-dpaa2" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.12.1"/>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1723464000">- Update AMD ucode to 20240809 (bsc#1229069, CVE-2023-31315)</changelog>
</package>
<package pkgid="b122590973ed19b3cb8fcb39bb529857c8dc1e39515ab0b2577b4aca439e914c" name="kernel-firmware-dpaa2" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="c080b96315d66d0df2dc01ca8bfa600047370c17f364477f8494fd15529070b5" name="kernel-firmware-i915" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.12.1"/>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1723464000">- Update AMD ucode to 20240809 (bsc#1229069, CVE-2023-31315)</changelog>
</package>
<package pkgid="f4c474707cda1481348bcd1222ac41ef905b309987f9db90c7da9987e9fa3d03" name="kernel-firmware-i915" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="3aaf323002b0914c868fee54a7cf0a074f64df723e5253c1a744e1395f9a15e4" name="kernel-firmware-intel" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.12.1"/>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1723464000">- Update AMD ucode to 20240809 (bsc#1229069, CVE-2023-31315)</changelog>
</package>
<package pkgid="2007410f503e45bbc0296cb5075a3ea979e21fd57be78276d6dfda7f37c82670" name="kernel-firmware-intel" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="25ed04913c78ebea78066ffdb232808424ff37bf2310a46a21f1fd83e2c1c3ae" name="kernel-firmware-iwlwifi" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.12.1"/>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1723464000">- Update AMD ucode to 20240809 (bsc#1229069, CVE-2023-31315)</changelog>
</package>
<package pkgid="326d438a5b732b3711d43025520c3b33727ffa4517656bd0a0667603754df00e" name="kernel-firmware-iwlwifi" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="4aaf89b4d4ae14d2527da12409fbd6bcaca0a0b821dded661eed2ffaf51b47bd" name="kernel-firmware-liquidio" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.12.1"/>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1723464000">- Update AMD ucode to 20240809 (bsc#1229069, CVE-2023-31315)</changelog>
</package>
<package pkgid="bd90810d8436fa0176b635af45e5889618e83d2850ea517579bc4aee508e0a43" name="kernel-firmware-liquidio" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="454c45cdcdac7e0b2b4428dff895e7ef4bc11f40b3654b8c15a4978fc4563c91" name="kernel-firmware-marvell" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.12.1"/>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1723464000">- Update AMD ucode to 20240809 (bsc#1229069, CVE-2023-31315)</changelog>
</package>
<package pkgid="7b55cbea23cee0c6b61dc469b2f646a621d6e52277c901f6881fc6f97fb3f9f0" name="kernel-firmware-marvell" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="0d7e5bd75c1a0b879d238cdc79752503b1cbc549aaf168ae438118e0782ed55e" name="kernel-firmware-media" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.12.1"/>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1723464000">- Update AMD ucode to 20240809 (bsc#1229069, CVE-2023-31315)</changelog>
</package>
<package pkgid="68985c5a9d3d253754e68eed54815feaf2d475761a4d04ee4afc9f05056ef690" name="kernel-firmware-media" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="84848210fd28f7ab23c3d83829f965a6133df9d943e5f8c1ee1e58689e1f08dd" name="kernel-firmware-mediatek" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.12.1"/>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1723464000">- Update AMD ucode to 20240809 (bsc#1229069, CVE-2023-31315)</changelog>
</package>
<package pkgid="fac2b76cde09d51992b09d363a86c09325f08f11c29d42eb1b1752a3ffcf82d5" name="kernel-firmware-mediatek" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="88be238fbfd7ef8b21080f6c8064ec2f666f2e68542e996b0bdb6c01bd675173" name="kernel-firmware-mellanox" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.12.1"/>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1723464000">- Update AMD ucode to 20240809 (bsc#1229069, CVE-2023-31315)</changelog>
</package>
<package pkgid="d4d5b5a8dbb84d2562ac8f57d8998e8d7da72234f607e832fde2cc6c889888a1" name="kernel-firmware-mellanox" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="c8c70f704c87296b5e74e7fa4ed7265c4000ee7db90822caadfab5001eb717bb" name="kernel-firmware-mwifiex" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.12.1"/>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1723464000">- Update AMD ucode to 20240809 (bsc#1229069, CVE-2023-31315)</changelog>
</package>
<package pkgid="7396f061391b0a9d3e8b4354fbeb670aac51e407056863142cd6bf740eb89736" name="kernel-firmware-mwifiex" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="48b5f90068795f5aa8c50959bb56f7dbfe174ce25b5024c931567263783c1ab3" name="kernel-firmware-network" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.12.1"/>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1723464000">- Update AMD ucode to 20240809 (bsc#1229069, CVE-2023-31315)</changelog>
</package>
<package pkgid="a15fd7e9e6fd144599bafce59eadf0343463fa68c1d579b9463208df1d4f2083" name="kernel-firmware-network" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="4546ba24b71c0de12c7310ebe1e6edffe7d6cdc91980f13cc7b8422fb0d96686" name="kernel-firmware-nfp" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.12.1"/>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1723464000">- Update AMD ucode to 20240809 (bsc#1229069, CVE-2023-31315)</changelog>
</package>
<package pkgid="b1c843bd68cacf99c2cd1bcb81a87c91fdd912355e59c4244adfdc10977c3898" name="kernel-firmware-nfp" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="8a9b0521da4466f39ce283804976fd1344e63d4ee468014c2818c20265df7a82" name="kernel-firmware-nvidia" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.12.1"/>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1723464000">- Update AMD ucode to 20240809 (bsc#1229069, CVE-2023-31315)</changelog>
</package>
<package pkgid="40bb7373f515484598de807abe6f278ef9314bc0117a7aedb72ae80f99067f4e" name="kernel-firmware-nvidia" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="34f453cfb8797f1abd0b4b71028ec7a5acae34582d1c3dbd6709cdcaecb57bfb" name="kernel-firmware-nvidia-gspx-G06" arch="aarch64">
  <version epoch="0" ver="535.129.03" rel="150500.11.9.1"/>
  <changelog author="sndirsch@suse.com" date="1674043200">- implements jsc#PED-2658</changelog>
  <changelog author="sndirsch@suse.com" date="1674043201">- renamed rpmlintrc to %{name}-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1674043202">- Remove old specfile constructs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674129600">- Use _firmwaredir</changelog>
  <changelog author="sndirsch@suse.com" date="1674129601">- update firmware to version 525.85.05</changelog>
  <changelog author="sndirsch@suse.com" date="1674129602">- removed old firmware</changelog>
  <changelog author="sndirsch@suse.com" date="1675857600">- update firmware to version 525.89.02</changelog>
  <changelog author="sndirsch@suse.com" date="1680177600">- update firmware to version 525.105.17</changelog>
  <changelog author="sndirsch@suse.com" date="1682424000">- update firmware to version 525.116.03</changelog>
  <changelog author="sndirsch@suse.com" date="1683633600">- update firmware to version 525.116.04</changelog>
  <changelog author="sndirsch@suse.com" date="1685534400">- make package multiversion capable
  * no longer package libnvidia-ml and nvidia-smi
  * added "Provides: multiversion(kernel)"</changelog>
  <changelog author="sndirsch@suse.com" date="1686830400">- update firmware to version 535.54.03
  * gsp_ad10x.bin has been renamed to gsp_ga10x.bin</changelog>
  <changelog author="sndirsch@suse.com" date="1689768000">- update firmware to version 535.86.05</changelog>
  <changelog author="sndirsch@suse.com" date="1690286400">- one-time rename to kernel-firmware-nvidia-gspx-G06 to workaround
  multiversioned package update (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1690372800">- added conflicts to kernel-firmware-nvidia-gsp-G06 package</changelog>
  <changelog author="sndirsch@suse.com" date="1690372801">- remove conflicts from previous change again, since this likely
  would break QA test for sle again ...</changelog>
  <changelog author="sndirsch@suse.com" date="1690372802">- Obsoletes conflicting kernel-firmware-nvidia-gsp-G06 = 535.86.05
  (boo#1212724)
- minor cleanup in specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- update firmware to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- update firmware to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- update firmware to version 535.129.03</changelog>
</package>
<package pkgid="6f10eecfe1b17c77eb28c2e8574b10298bf8e15333dbb12d741da2c616f80a66" name="kernel-firmware-nvidia-gspx-G06" arch="src">
  <version epoch="0" ver="535.129.03" rel="150500.11.9.1"/>
  <changelog author="sndirsch@suse.com" date="1674043200">- implements jsc#PED-2658</changelog>
  <changelog author="sndirsch@suse.com" date="1674043201">- renamed rpmlintrc to %{name}-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1674043202">- Remove old specfile constructs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674129600">- Use _firmwaredir</changelog>
  <changelog author="sndirsch@suse.com" date="1674129601">- update firmware to version 525.85.05</changelog>
  <changelog author="sndirsch@suse.com" date="1674129602">- removed old firmware</changelog>
  <changelog author="sndirsch@suse.com" date="1675857600">- update firmware to version 525.89.02</changelog>
  <changelog author="sndirsch@suse.com" date="1680177600">- update firmware to version 525.105.17</changelog>
  <changelog author="sndirsch@suse.com" date="1682424000">- update firmware to version 525.116.03</changelog>
  <changelog author="sndirsch@suse.com" date="1683633600">- update firmware to version 525.116.04</changelog>
  <changelog author="sndirsch@suse.com" date="1685534400">- make package multiversion capable
  * no longer package libnvidia-ml and nvidia-smi
  * added "Provides: multiversion(kernel)"</changelog>
  <changelog author="sndirsch@suse.com" date="1686830400">- update firmware to version 535.54.03
  * gsp_ad10x.bin has been renamed to gsp_ga10x.bin</changelog>
  <changelog author="sndirsch@suse.com" date="1689768000">- update firmware to version 535.86.05</changelog>
  <changelog author="sndirsch@suse.com" date="1690286400">- one-time rename to kernel-firmware-nvidia-gspx-G06 to workaround
  multiversioned package update (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1690372800">- added conflicts to kernel-firmware-nvidia-gsp-G06 package</changelog>
  <changelog author="sndirsch@suse.com" date="1690372801">- remove conflicts from previous change again, since this likely
  would break QA test for sle again ...</changelog>
  <changelog author="sndirsch@suse.com" date="1690372802">- Obsoletes conflicting kernel-firmware-nvidia-gsp-G06 = 535.86.05
  (boo#1212724)
- minor cleanup in specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- update firmware to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- update firmware to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- update firmware to version 535.129.03</changelog>
</package>
<package pkgid="342cabae0a708ea2ecec999127f62d25c79f99e2b6ffb7ca2da4304cf1e57cd3" name="kernel-firmware-nvidia-gspx-G06" arch="x86_64">
  <version epoch="0" ver="535.129.03" rel="150500.11.9.1"/>
  <changelog author="sndirsch@suse.com" date="1674043200">- implements jsc#PED-2658</changelog>
  <changelog author="sndirsch@suse.com" date="1674043201">- renamed rpmlintrc to %{name}-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1674043202">- Remove old specfile constructs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674129600">- Use _firmwaredir</changelog>
  <changelog author="sndirsch@suse.com" date="1674129601">- update firmware to version 525.85.05</changelog>
  <changelog author="sndirsch@suse.com" date="1674129602">- removed old firmware</changelog>
  <changelog author="sndirsch@suse.com" date="1675857600">- update firmware to version 525.89.02</changelog>
  <changelog author="sndirsch@suse.com" date="1680177600">- update firmware to version 525.105.17</changelog>
  <changelog author="sndirsch@suse.com" date="1682424000">- update firmware to version 525.116.03</changelog>
  <changelog author="sndirsch@suse.com" date="1683633600">- update firmware to version 525.116.04</changelog>
  <changelog author="sndirsch@suse.com" date="1685534400">- make package multiversion capable
  * no longer package libnvidia-ml and nvidia-smi
  * added "Provides: multiversion(kernel)"</changelog>
  <changelog author="sndirsch@suse.com" date="1686830400">- update firmware to version 535.54.03
  * gsp_ad10x.bin has been renamed to gsp_ga10x.bin</changelog>
  <changelog author="sndirsch@suse.com" date="1689768000">- update firmware to version 535.86.05</changelog>
  <changelog author="sndirsch@suse.com" date="1690286400">- one-time rename to kernel-firmware-nvidia-gspx-G06 to workaround
  multiversioned package update (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1690372800">- added conflicts to kernel-firmware-nvidia-gsp-G06 package</changelog>
  <changelog author="sndirsch@suse.com" date="1690372801">- remove conflicts from previous change again, since this likely
  would break QA test for sle again ...</changelog>
  <changelog author="sndirsch@suse.com" date="1690372802">- Obsoletes conflicting kernel-firmware-nvidia-gsp-G06 = 535.86.05
  (boo#1212724)
- minor cleanup in specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- update firmware to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- update firmware to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- update firmware to version 535.129.03</changelog>
</package>
<package pkgid="df5bb44608cf37ee2b8831a0fa30fa5763bcd9ad754fac3c0dea8c36bd03254c" name="kernel-firmware-nvidia-gspx-G06" arch="aarch64">
  <version epoch="0" ver="545.29.02" rel="150500.11.12.1"/>
  <changelog author="sndirsch@suse.com" date="1674043200">- renamed rpmlintrc to %{name}-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1674043201">- Remove old specfile constructs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674129600">- Use _firmwaredir</changelog>
  <changelog author="sndirsch@suse.com" date="1674129601">- update firmware to version 525.85.05</changelog>
  <changelog author="sndirsch@suse.com" date="1674129602">- removed old firmware</changelog>
  <changelog author="sndirsch@suse.com" date="1675857600">- update firmware to version 525.89.02</changelog>
  <changelog author="sndirsch@suse.com" date="1680177600">- update firmware to version 525.105.17</changelog>
  <changelog author="sndirsch@suse.com" date="1682424000">- update firmware to version 525.116.03</changelog>
  <changelog author="sndirsch@suse.com" date="1683633600">- update firmware to version 525.116.04</changelog>
  <changelog author="sndirsch@suse.com" date="1685534400">- make package multiversion capable
  * no longer package libnvidia-ml and nvidia-smi
  * added "Provides: multiversion(kernel)"</changelog>
  <changelog author="sndirsch@suse.com" date="1686830400">- update firmware to version 535.54.03
  * gsp_ad10x.bin has been renamed to gsp_ga10x.bin</changelog>
  <changelog author="sndirsch@suse.com" date="1689768000">- update firmware to version 535.86.05</changelog>
  <changelog author="sndirsch@suse.com" date="1690286400">- one-time rename to kernel-firmware-nvidia-gspx-G06 to workaround
  multiversioned package update (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1690372800">- added conflicts to kernel-firmware-nvidia-gsp-G06 package</changelog>
  <changelog author="sndirsch@suse.com" date="1690372801">- remove conflicts from previous change again, since this likely
  would break QA test for sle again ...</changelog>
  <changelog author="sndirsch@suse.com" date="1690372802">- Obsoletes conflicting kernel-firmware-nvidia-gsp-G06 = 535.86.05
  (boo#1212724)
- minor cleanup in specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- update firmware to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- update firmware to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- update firmware to version 535.129.03</changelog>
  <changelog author="sndirsch@suse.com" date="1699876800">- update firmware to version 545.29.02</changelog>
</package>
<package pkgid="9ce10cb3c4aafc09e3b893191871520a8c1e7d713426ad05757b4752402b5501" name="kernel-firmware-nvidia-gspx-G06" arch="src">
  <version epoch="0" ver="545.29.02" rel="150500.11.12.1"/>
  <changelog author="sndirsch@suse.com" date="1674043200">- renamed rpmlintrc to %{name}-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1674043201">- Remove old specfile constructs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674129600">- Use _firmwaredir</changelog>
  <changelog author="sndirsch@suse.com" date="1674129601">- update firmware to version 525.85.05</changelog>
  <changelog author="sndirsch@suse.com" date="1674129602">- removed old firmware</changelog>
  <changelog author="sndirsch@suse.com" date="1675857600">- update firmware to version 525.89.02</changelog>
  <changelog author="sndirsch@suse.com" date="1680177600">- update firmware to version 525.105.17</changelog>
  <changelog author="sndirsch@suse.com" date="1682424000">- update firmware to version 525.116.03</changelog>
  <changelog author="sndirsch@suse.com" date="1683633600">- update firmware to version 525.116.04</changelog>
  <changelog author="sndirsch@suse.com" date="1685534400">- make package multiversion capable
  * no longer package libnvidia-ml and nvidia-smi
  * added "Provides: multiversion(kernel)"</changelog>
  <changelog author="sndirsch@suse.com" date="1686830400">- update firmware to version 535.54.03
  * gsp_ad10x.bin has been renamed to gsp_ga10x.bin</changelog>
  <changelog author="sndirsch@suse.com" date="1689768000">- update firmware to version 535.86.05</changelog>
  <changelog author="sndirsch@suse.com" date="1690286400">- one-time rename to kernel-firmware-nvidia-gspx-G06 to workaround
  multiversioned package update (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1690372800">- added conflicts to kernel-firmware-nvidia-gsp-G06 package</changelog>
  <changelog author="sndirsch@suse.com" date="1690372801">- remove conflicts from previous change again, since this likely
  would break QA test for sle again ...</changelog>
  <changelog author="sndirsch@suse.com" date="1690372802">- Obsoletes conflicting kernel-firmware-nvidia-gsp-G06 = 535.86.05
  (boo#1212724)
- minor cleanup in specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- update firmware to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- update firmware to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- update firmware to version 535.129.03</changelog>
  <changelog author="sndirsch@suse.com" date="1699876800">- update firmware to version 545.29.02</changelog>
</package>
<package pkgid="3daf6e2576a0392efb0435231049faf5d92ca9beeea23c7cc599bb0911612228" name="kernel-firmware-nvidia-gspx-G06" arch="x86_64">
  <version epoch="0" ver="545.29.02" rel="150500.11.12.1"/>
  <changelog author="sndirsch@suse.com" date="1674043200">- renamed rpmlintrc to %{name}-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1674043201">- Remove old specfile constructs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674129600">- Use _firmwaredir</changelog>
  <changelog author="sndirsch@suse.com" date="1674129601">- update firmware to version 525.85.05</changelog>
  <changelog author="sndirsch@suse.com" date="1674129602">- removed old firmware</changelog>
  <changelog author="sndirsch@suse.com" date="1675857600">- update firmware to version 525.89.02</changelog>
  <changelog author="sndirsch@suse.com" date="1680177600">- update firmware to version 525.105.17</changelog>
  <changelog author="sndirsch@suse.com" date="1682424000">- update firmware to version 525.116.03</changelog>
  <changelog author="sndirsch@suse.com" date="1683633600">- update firmware to version 525.116.04</changelog>
  <changelog author="sndirsch@suse.com" date="1685534400">- make package multiversion capable
  * no longer package libnvidia-ml and nvidia-smi
  * added "Provides: multiversion(kernel)"</changelog>
  <changelog author="sndirsch@suse.com" date="1686830400">- update firmware to version 535.54.03
  * gsp_ad10x.bin has been renamed to gsp_ga10x.bin</changelog>
  <changelog author="sndirsch@suse.com" date="1689768000">- update firmware to version 535.86.05</changelog>
  <changelog author="sndirsch@suse.com" date="1690286400">- one-time rename to kernel-firmware-nvidia-gspx-G06 to workaround
  multiversioned package update (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1690372800">- added conflicts to kernel-firmware-nvidia-gsp-G06 package</changelog>
  <changelog author="sndirsch@suse.com" date="1690372801">- remove conflicts from previous change again, since this likely
  would break QA test for sle again ...</changelog>
  <changelog author="sndirsch@suse.com" date="1690372802">- Obsoletes conflicting kernel-firmware-nvidia-gsp-G06 = 535.86.05
  (boo#1212724)
- minor cleanup in specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- update firmware to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- update firmware to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- update firmware to version 535.129.03</changelog>
  <changelog author="sndirsch@suse.com" date="1699876800">- update firmware to version 545.29.02</changelog>
</package>
<package pkgid="3072b5550b7844318d5e4d7dd18110b5ff3f0f9868fb73cec0bf3061ecc5893e" name="kernel-firmware-nvidia-gspx-G06" arch="aarch64">
  <version epoch="0" ver="545.29.06" rel="150500.11.15.1"/>
  <changelog author="jengelh@inai.de" date="1674043200">- Remove old specfile constructs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674129600">- Use _firmwaredir</changelog>
  <changelog author="sndirsch@suse.com" date="1674129601">- update firmware to version 525.85.05</changelog>
  <changelog author="sndirsch@suse.com" date="1674129602">- removed old firmware</changelog>
  <changelog author="sndirsch@suse.com" date="1675857600">- update firmware to version 525.89.02</changelog>
  <changelog author="sndirsch@suse.com" date="1680177600">- update firmware to version 525.105.17</changelog>
  <changelog author="sndirsch@suse.com" date="1682424000">- update firmware to version 525.116.03</changelog>
  <changelog author="sndirsch@suse.com" date="1683633600">- update firmware to version 525.116.04</changelog>
  <changelog author="sndirsch@suse.com" date="1685534400">- make package multiversion capable
  * no longer package libnvidia-ml and nvidia-smi
  * added "Provides: multiversion(kernel)"</changelog>
  <changelog author="sndirsch@suse.com" date="1686830400">- update firmware to version 535.54.03
  * gsp_ad10x.bin has been renamed to gsp_ga10x.bin</changelog>
  <changelog author="sndirsch@suse.com" date="1689768000">- update firmware to version 535.86.05</changelog>
  <changelog author="sndirsch@suse.com" date="1690286400">- one-time rename to kernel-firmware-nvidia-gspx-G06 to workaround
  multiversioned package update (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1690372800">- added conflicts to kernel-firmware-nvidia-gsp-G06 package</changelog>
  <changelog author="sndirsch@suse.com" date="1690372801">- remove conflicts from previous change again, since this likely
  would break QA test for sle again ...</changelog>
  <changelog author="sndirsch@suse.com" date="1690372802">- Obsoletes conflicting kernel-firmware-nvidia-gsp-G06 = 535.86.05
  (boo#1212724)
- minor cleanup in specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- update firmware to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- update firmware to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- update firmware to version 535.129.03</changelog>
  <changelog author="sndirsch@suse.com" date="1699876800">- update firmware to version 545.29.02</changelog>
  <changelog author="sndirsch@suse.com" date="1700740800">- update firmware to version 545.29.06</changelog>
</package>
<package pkgid="4ce55770d213adc2dcf4be8fa3bd8ace768a9147a425e3504a2a1ab7357115df" name="kernel-firmware-nvidia-gspx-G06" arch="src">
  <version epoch="0" ver="545.29.06" rel="150500.11.15.1"/>
  <changelog author="jengelh@inai.de" date="1674043200">- Remove old specfile constructs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674129600">- Use _firmwaredir</changelog>
  <changelog author="sndirsch@suse.com" date="1674129601">- update firmware to version 525.85.05</changelog>
  <changelog author="sndirsch@suse.com" date="1674129602">- removed old firmware</changelog>
  <changelog author="sndirsch@suse.com" date="1675857600">- update firmware to version 525.89.02</changelog>
  <changelog author="sndirsch@suse.com" date="1680177600">- update firmware to version 525.105.17</changelog>
  <changelog author="sndirsch@suse.com" date="1682424000">- update firmware to version 525.116.03</changelog>
  <changelog author="sndirsch@suse.com" date="1683633600">- update firmware to version 525.116.04</changelog>
  <changelog author="sndirsch@suse.com" date="1685534400">- make package multiversion capable
  * no longer package libnvidia-ml and nvidia-smi
  * added "Provides: multiversion(kernel)"</changelog>
  <changelog author="sndirsch@suse.com" date="1686830400">- update firmware to version 535.54.03
  * gsp_ad10x.bin has been renamed to gsp_ga10x.bin</changelog>
  <changelog author="sndirsch@suse.com" date="1689768000">- update firmware to version 535.86.05</changelog>
  <changelog author="sndirsch@suse.com" date="1690286400">- one-time rename to kernel-firmware-nvidia-gspx-G06 to workaround
  multiversioned package update (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1690372800">- added conflicts to kernel-firmware-nvidia-gsp-G06 package</changelog>
  <changelog author="sndirsch@suse.com" date="1690372801">- remove conflicts from previous change again, since this likely
  would break QA test for sle again ...</changelog>
  <changelog author="sndirsch@suse.com" date="1690372802">- Obsoletes conflicting kernel-firmware-nvidia-gsp-G06 = 535.86.05
  (boo#1212724)
- minor cleanup in specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- update firmware to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- update firmware to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- update firmware to version 535.129.03</changelog>
  <changelog author="sndirsch@suse.com" date="1699876800">- update firmware to version 545.29.02</changelog>
  <changelog author="sndirsch@suse.com" date="1700740800">- update firmware to version 545.29.06</changelog>
</package>
<package pkgid="d474065ef1d12079468b06679487d844a4e8063e5cfa767b5f9551c5a0030d18" name="kernel-firmware-nvidia-gspx-G06" arch="x86_64">
  <version epoch="0" ver="545.29.06" rel="150500.11.15.1"/>
  <changelog author="jengelh@inai.de" date="1674043200">- Remove old specfile constructs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674129600">- Use _firmwaredir</changelog>
  <changelog author="sndirsch@suse.com" date="1674129601">- update firmware to version 525.85.05</changelog>
  <changelog author="sndirsch@suse.com" date="1674129602">- removed old firmware</changelog>
  <changelog author="sndirsch@suse.com" date="1675857600">- update firmware to version 525.89.02</changelog>
  <changelog author="sndirsch@suse.com" date="1680177600">- update firmware to version 525.105.17</changelog>
  <changelog author="sndirsch@suse.com" date="1682424000">- update firmware to version 525.116.03</changelog>
  <changelog author="sndirsch@suse.com" date="1683633600">- update firmware to version 525.116.04</changelog>
  <changelog author="sndirsch@suse.com" date="1685534400">- make package multiversion capable
  * no longer package libnvidia-ml and nvidia-smi
  * added "Provides: multiversion(kernel)"</changelog>
  <changelog author="sndirsch@suse.com" date="1686830400">- update firmware to version 535.54.03
  * gsp_ad10x.bin has been renamed to gsp_ga10x.bin</changelog>
  <changelog author="sndirsch@suse.com" date="1689768000">- update firmware to version 535.86.05</changelog>
  <changelog author="sndirsch@suse.com" date="1690286400">- one-time rename to kernel-firmware-nvidia-gspx-G06 to workaround
  multiversioned package update (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1690372800">- added conflicts to kernel-firmware-nvidia-gsp-G06 package</changelog>
  <changelog author="sndirsch@suse.com" date="1690372801">- remove conflicts from previous change again, since this likely
  would break QA test for sle again ...</changelog>
  <changelog author="sndirsch@suse.com" date="1690372802">- Obsoletes conflicting kernel-firmware-nvidia-gsp-G06 = 535.86.05
  (boo#1212724)
- minor cleanup in specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- update firmware to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- update firmware to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- update firmware to version 535.129.03</changelog>
  <changelog author="sndirsch@suse.com" date="1699876800">- update firmware to version 545.29.02</changelog>
  <changelog author="sndirsch@suse.com" date="1700740800">- update firmware to version 545.29.06</changelog>
</package>
<package pkgid="da894f992b0840236efc26cff385cd81a3e780445a06e5944138f7ec201f2781" name="kernel-firmware-nvidia-gspx-G06" arch="aarch64">
  <version epoch="0" ver="550.100" rel="150500.11.36.1"/>
  <changelog author="sndirsch@suse.com" date="1690286400">- one-time rename to kernel-firmware-nvidia-gspx-G06 to workaround
  multiversioned package update (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1690372800">- added conflicts to kernel-firmware-nvidia-gsp-G06 package</changelog>
  <changelog author="sndirsch@suse.com" date="1690372801">- remove conflicts from previous change again, since this likely
  would break QA test for sle again ...</changelog>
  <changelog author="sndirsch@suse.com" date="1690372802">- Obsoletes conflicting kernel-firmware-nvidia-gsp-G06 = 535.86.05
  (boo#1212724)
- minor cleanup in specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- update firmware to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- update firmware to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- update firmware to version 535.129.03</changelog>
  <changelog author="sndirsch@suse.com" date="1699876800">- update firmware to version 545.29.02</changelog>
  <changelog author="sndirsch@suse.com" date="1700740800">- update firmware to version 545.29.06</changelog>
  <changelog author="sndirsch@suse.com" date="1708776000">- update firmware to version 550.54.14</changelog>
  <changelog author="sndirsch@suse.com" date="1710936000">- update firmware to version 550.67</changelog>
  <changelog author="sndirsch@suse.com" date="1713355200">- update firmware to version 550.76
  * addresses boo#1222972</changelog>
  <changelog author="sndirsch@suse.com" date="1714392000">- Update to 550.78
  * addresses boo#1223454</changelog>
  <changelog author="sndirsch@suse.com" date="1717502400">- Security Update 550.90.07
  * addresses boo#1223356 [CVE-2024-0090, CVE-2024-0091, CVE-2024-0092]</changelog>
  <changelog author="sndirsch@suse.com" date="1720094400">- Add a second flavor to be used by the kernel module versions
  used by CUDA. The firmware targetting CUDA contains '-cuda' in
  its name to track its versions separately from the graphics
  firmware. (bsc#1227417)</changelog>
  <changelog author="sndirsch@suse.com" date="1720180800">- make buildservice happy; all sources need to be mentioned as such
  in specfile</changelog>
  <changelog author="eich@suse.com" date="1720440000">- Use macro which is set during build but not when running
  `osc service run download_files` to make sure both source versions
  are visible for download. This way, only the correct source
  tarball will be included in the source package of its respective
  flavor but both can be downloaded (updated) simultaniously.</changelog>
  <changelog author="sndirsch@suse.com" date="1720526400">- Update to 550.100 (boo#1227575)</changelog>
  <changelog author="eich@suse.com" date="1720699200">- For CUDA update version to 555.42.6.
- Use firmware for one arch only as firmware doesn't run on
  the CPU and therefore should be arch-independent. This has
  been confirmed by NVIDIA.
  Since the run file attempts to run binaries if these are
  not installed, 'BuildRequire:' zstd.</changelog>
  <changelog author="sndirsch@suse.com" date="1720785600">- due to maintenance process we can switch to noarch only for new
  products; so do this only for sle15-sp7 or later</changelog>
</package>
<package pkgid="ca8e85d648d0e355313a953e7ae3a20daa511a8ee88eb8bf90f6ae5b0b12d5d3" name="kernel-firmware-nvidia-gspx-G06" arch="src">
  <version epoch="0" ver="550.100" rel="150500.11.36.1"/>
  <changelog author="sndirsch@suse.com" date="1690286400">- one-time rename to kernel-firmware-nvidia-gspx-G06 to workaround
  multiversioned package update (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1690372800">- added conflicts to kernel-firmware-nvidia-gsp-G06 package</changelog>
  <changelog author="sndirsch@suse.com" date="1690372801">- remove conflicts from previous change again, since this likely
  would break QA test for sle again ...</changelog>
  <changelog author="sndirsch@suse.com" date="1690372802">- Obsoletes conflicting kernel-firmware-nvidia-gsp-G06 = 535.86.05
  (boo#1212724)
- minor cleanup in specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- update firmware to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- update firmware to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- update firmware to version 535.129.03</changelog>
  <changelog author="sndirsch@suse.com" date="1699876800">- update firmware to version 545.29.02</changelog>
  <changelog author="sndirsch@suse.com" date="1700740800">- update firmware to version 545.29.06</changelog>
  <changelog author="sndirsch@suse.com" date="1708776000">- update firmware to version 550.54.14</changelog>
  <changelog author="sndirsch@suse.com" date="1710936000">- update firmware to version 550.67</changelog>
  <changelog author="sndirsch@suse.com" date="1713355200">- update firmware to version 550.76
  * addresses boo#1222972</changelog>
  <changelog author="sndirsch@suse.com" date="1714392000">- Update to 550.78
  * addresses boo#1223454</changelog>
  <changelog author="sndirsch@suse.com" date="1717502400">- Security Update 550.90.07
  * addresses boo#1223356 [CVE-2024-0090, CVE-2024-0091, CVE-2024-0092]</changelog>
  <changelog author="sndirsch@suse.com" date="1720094400">- Add a second flavor to be used by the kernel module versions
  used by CUDA. The firmware targetting CUDA contains '-cuda' in
  its name to track its versions separately from the graphics
  firmware. (bsc#1227417)</changelog>
  <changelog author="sndirsch@suse.com" date="1720180800">- make buildservice happy; all sources need to be mentioned as such
  in specfile</changelog>
  <changelog author="eich@suse.com" date="1720440000">- Use macro which is set during build but not when running
  `osc service run download_files` to make sure both source versions
  are visible for download. This way, only the correct source
  tarball will be included in the source package of its respective
  flavor but both can be downloaded (updated) simultaniously.</changelog>
  <changelog author="sndirsch@suse.com" date="1720526400">- Update to 550.100 (boo#1227575)</changelog>
  <changelog author="eich@suse.com" date="1720699200">- For CUDA update version to 555.42.6.
- Use firmware for one arch only as firmware doesn't run on
  the CPU and therefore should be arch-independent. This has
  been confirmed by NVIDIA.
  Since the run file attempts to run binaries if these are
  not installed, 'BuildRequire:' zstd.</changelog>
  <changelog author="sndirsch@suse.com" date="1720785600">- due to maintenance process we can switch to noarch only for new
  products; so do this only for sle15-sp7 or later</changelog>
</package>
<package pkgid="ed4d21657becae54cb80a47d73d4eb9a5fd4e04c34fa96ea864ae0e51b1e3683" name="kernel-firmware-nvidia-gspx-G06" arch="x86_64">
  <version epoch="0" ver="550.100" rel="150500.11.36.1"/>
  <changelog author="sndirsch@suse.com" date="1690286400">- one-time rename to kernel-firmware-nvidia-gspx-G06 to workaround
  multiversioned package update (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1690372800">- added conflicts to kernel-firmware-nvidia-gsp-G06 package</changelog>
  <changelog author="sndirsch@suse.com" date="1690372801">- remove conflicts from previous change again, since this likely
  would break QA test for sle again ...</changelog>
  <changelog author="sndirsch@suse.com" date="1690372802">- Obsoletes conflicting kernel-firmware-nvidia-gsp-G06 = 535.86.05
  (boo#1212724)
- minor cleanup in specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- update firmware to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- update firmware to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- update firmware to version 535.129.03</changelog>
  <changelog author="sndirsch@suse.com" date="1699876800">- update firmware to version 545.29.02</changelog>
  <changelog author="sndirsch@suse.com" date="1700740800">- update firmware to version 545.29.06</changelog>
  <changelog author="sndirsch@suse.com" date="1708776000">- update firmware to version 550.54.14</changelog>
  <changelog author="sndirsch@suse.com" date="1710936000">- update firmware to version 550.67</changelog>
  <changelog author="sndirsch@suse.com" date="1713355200">- update firmware to version 550.76
  * addresses boo#1222972</changelog>
  <changelog author="sndirsch@suse.com" date="1714392000">- Update to 550.78
  * addresses boo#1223454</changelog>
  <changelog author="sndirsch@suse.com" date="1717502400">- Security Update 550.90.07
  * addresses boo#1223356 [CVE-2024-0090, CVE-2024-0091, CVE-2024-0092]</changelog>
  <changelog author="sndirsch@suse.com" date="1720094400">- Add a second flavor to be used by the kernel module versions
  used by CUDA. The firmware targetting CUDA contains '-cuda' in
  its name to track its versions separately from the graphics
  firmware. (bsc#1227417)</changelog>
  <changelog author="sndirsch@suse.com" date="1720180800">- make buildservice happy; all sources need to be mentioned as such
  in specfile</changelog>
  <changelog author="eich@suse.com" date="1720440000">- Use macro which is set during build but not when running
  `osc service run download_files` to make sure both source versions
  are visible for download. This way, only the correct source
  tarball will be included in the source package of its respective
  flavor but both can be downloaded (updated) simultaniously.</changelog>
  <changelog author="sndirsch@suse.com" date="1720526400">- Update to 550.100 (boo#1227575)</changelog>
  <changelog author="eich@suse.com" date="1720699200">- For CUDA update version to 555.42.6.
- Use firmware for one arch only as firmware doesn't run on
  the CPU and therefore should be arch-independent. This has
  been confirmed by NVIDIA.
  Since the run file attempts to run binaries if these are
  not installed, 'BuildRequire:' zstd.</changelog>
  <changelog author="sndirsch@suse.com" date="1720785600">- due to maintenance process we can switch to noarch only for new
  products; so do this only for sle15-sp7 or later</changelog>
</package>
<package pkgid="16491aa282bd84c1a28eabca14799fd27de44b6ff645ecb1a2c9338ffe2fb50e" name="kernel-firmware-nvidia-gspx-G06" arch="aarch64">
  <version epoch="0" ver="550.54.14" rel="150500.11.18.1"/>
  <changelog author="gmbr3@opensuse.org" date="1674129600">- Use _firmwaredir</changelog>
  <changelog author="sndirsch@suse.com" date="1674129601">- update firmware to version 525.85.05</changelog>
  <changelog author="sndirsch@suse.com" date="1674129602">- removed old firmware</changelog>
  <changelog author="sndirsch@suse.com" date="1675857600">- update firmware to version 525.89.02</changelog>
  <changelog author="sndirsch@suse.com" date="1680177600">- update firmware to version 525.105.17</changelog>
  <changelog author="sndirsch@suse.com" date="1682424000">- update firmware to version 525.116.03</changelog>
  <changelog author="sndirsch@suse.com" date="1683633600">- update firmware to version 525.116.04</changelog>
  <changelog author="sndirsch@suse.com" date="1685534400">- make package multiversion capable
  * no longer package libnvidia-ml and nvidia-smi
  * added "Provides: multiversion(kernel)"</changelog>
  <changelog author="sndirsch@suse.com" date="1686830400">- update firmware to version 535.54.03
  * gsp_ad10x.bin has been renamed to gsp_ga10x.bin</changelog>
  <changelog author="sndirsch@suse.com" date="1689768000">- update firmware to version 535.86.05</changelog>
  <changelog author="sndirsch@suse.com" date="1690286400">- one-time rename to kernel-firmware-nvidia-gspx-G06 to workaround
  multiversioned package update (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1690372800">- added conflicts to kernel-firmware-nvidia-gsp-G06 package</changelog>
  <changelog author="sndirsch@suse.com" date="1690372801">- remove conflicts from previous change again, since this likely
  would break QA test for sle again ...</changelog>
  <changelog author="sndirsch@suse.com" date="1690372802">- Obsoletes conflicting kernel-firmware-nvidia-gsp-G06 = 535.86.05
  (boo#1212724)
- minor cleanup in specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- update firmware to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- update firmware to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- update firmware to version 535.129.03</changelog>
  <changelog author="sndirsch@suse.com" date="1699876800">- update firmware to version 545.29.02</changelog>
  <changelog author="sndirsch@suse.com" date="1700740800">- update firmware to version 545.29.06</changelog>
  <changelog author="sndirsch@suse.com" date="1708776000">- update firmware to version 550.54.14</changelog>
</package>
<package pkgid="12bb2408c43115cf48a01726fede4e93542ede20b8036ca6f6b90490b325b991" name="kernel-firmware-nvidia-gspx-G06" arch="src">
  <version epoch="0" ver="550.54.14" rel="150500.11.18.1"/>
  <changelog author="gmbr3@opensuse.org" date="1674129600">- Use _firmwaredir</changelog>
  <changelog author="sndirsch@suse.com" date="1674129601">- update firmware to version 525.85.05</changelog>
  <changelog author="sndirsch@suse.com" date="1674129602">- removed old firmware</changelog>
  <changelog author="sndirsch@suse.com" date="1675857600">- update firmware to version 525.89.02</changelog>
  <changelog author="sndirsch@suse.com" date="1680177600">- update firmware to version 525.105.17</changelog>
  <changelog author="sndirsch@suse.com" date="1682424000">- update firmware to version 525.116.03</changelog>
  <changelog author="sndirsch@suse.com" date="1683633600">- update firmware to version 525.116.04</changelog>
  <changelog author="sndirsch@suse.com" date="1685534400">- make package multiversion capable
  * no longer package libnvidia-ml and nvidia-smi
  * added "Provides: multiversion(kernel)"</changelog>
  <changelog author="sndirsch@suse.com" date="1686830400">- update firmware to version 535.54.03
  * gsp_ad10x.bin has been renamed to gsp_ga10x.bin</changelog>
  <changelog author="sndirsch@suse.com" date="1689768000">- update firmware to version 535.86.05</changelog>
  <changelog author="sndirsch@suse.com" date="1690286400">- one-time rename to kernel-firmware-nvidia-gspx-G06 to workaround
  multiversioned package update (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1690372800">- added conflicts to kernel-firmware-nvidia-gsp-G06 package</changelog>
  <changelog author="sndirsch@suse.com" date="1690372801">- remove conflicts from previous change again, since this likely
  would break QA test for sle again ...</changelog>
  <changelog author="sndirsch@suse.com" date="1690372802">- Obsoletes conflicting kernel-firmware-nvidia-gsp-G06 = 535.86.05
  (boo#1212724)
- minor cleanup in specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- update firmware to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- update firmware to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- update firmware to version 535.129.03</changelog>
  <changelog author="sndirsch@suse.com" date="1699876800">- update firmware to version 545.29.02</changelog>
  <changelog author="sndirsch@suse.com" date="1700740800">- update firmware to version 545.29.06</changelog>
  <changelog author="sndirsch@suse.com" date="1708776000">- update firmware to version 550.54.14</changelog>
</package>
<package pkgid="f586f0fe423b01987d18436b23b0cd841bd454ad1fffc69824c33ccd23f9ad3c" name="kernel-firmware-nvidia-gspx-G06" arch="x86_64">
  <version epoch="0" ver="550.54.14" rel="150500.11.18.1"/>
  <changelog author="gmbr3@opensuse.org" date="1674129600">- Use _firmwaredir</changelog>
  <changelog author="sndirsch@suse.com" date="1674129601">- update firmware to version 525.85.05</changelog>
  <changelog author="sndirsch@suse.com" date="1674129602">- removed old firmware</changelog>
  <changelog author="sndirsch@suse.com" date="1675857600">- update firmware to version 525.89.02</changelog>
  <changelog author="sndirsch@suse.com" date="1680177600">- update firmware to version 525.105.17</changelog>
  <changelog author="sndirsch@suse.com" date="1682424000">- update firmware to version 525.116.03</changelog>
  <changelog author="sndirsch@suse.com" date="1683633600">- update firmware to version 525.116.04</changelog>
  <changelog author="sndirsch@suse.com" date="1685534400">- make package multiversion capable
  * no longer package libnvidia-ml and nvidia-smi
  * added "Provides: multiversion(kernel)"</changelog>
  <changelog author="sndirsch@suse.com" date="1686830400">- update firmware to version 535.54.03
  * gsp_ad10x.bin has been renamed to gsp_ga10x.bin</changelog>
  <changelog author="sndirsch@suse.com" date="1689768000">- update firmware to version 535.86.05</changelog>
  <changelog author="sndirsch@suse.com" date="1690286400">- one-time rename to kernel-firmware-nvidia-gspx-G06 to workaround
  multiversioned package update (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1690372800">- added conflicts to kernel-firmware-nvidia-gsp-G06 package</changelog>
  <changelog author="sndirsch@suse.com" date="1690372801">- remove conflicts from previous change again, since this likely
  would break QA test for sle again ...</changelog>
  <changelog author="sndirsch@suse.com" date="1690372802">- Obsoletes conflicting kernel-firmware-nvidia-gsp-G06 = 535.86.05
  (boo#1212724)
- minor cleanup in specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- update firmware to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- update firmware to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- update firmware to version 535.129.03</changelog>
  <changelog author="sndirsch@suse.com" date="1699876800">- update firmware to version 545.29.02</changelog>
  <changelog author="sndirsch@suse.com" date="1700740800">- update firmware to version 545.29.06</changelog>
  <changelog author="sndirsch@suse.com" date="1708776000">- update firmware to version 550.54.14</changelog>
</package>
<package pkgid="65b9af51bd5fd5e70b1bfa11391d21211bb208dc5016870d91188fefe9aeff9d" name="kernel-firmware-nvidia-gspx-G06" arch="aarch64">
  <version epoch="0" ver="550.67" rel="150500.11.21.1"/>
  <changelog author="sndirsch@suse.com" date="1674129600">- update firmware to version 525.85.05</changelog>
  <changelog author="sndirsch@suse.com" date="1674129601">- removed old firmware</changelog>
  <changelog author="sndirsch@suse.com" date="1675857600">- update firmware to version 525.89.02</changelog>
  <changelog author="sndirsch@suse.com" date="1680177600">- update firmware to version 525.105.17</changelog>
  <changelog author="sndirsch@suse.com" date="1682424000">- update firmware to version 525.116.03</changelog>
  <changelog author="sndirsch@suse.com" date="1683633600">- update firmware to version 525.116.04</changelog>
  <changelog author="sndirsch@suse.com" date="1685534400">- make package multiversion capable
  * no longer package libnvidia-ml and nvidia-smi
  * added "Provides: multiversion(kernel)"</changelog>
  <changelog author="sndirsch@suse.com" date="1686830400">- update firmware to version 535.54.03
  * gsp_ad10x.bin has been renamed to gsp_ga10x.bin</changelog>
  <changelog author="sndirsch@suse.com" date="1689768000">- update firmware to version 535.86.05</changelog>
  <changelog author="sndirsch@suse.com" date="1690286400">- one-time rename to kernel-firmware-nvidia-gspx-G06 to workaround
  multiversioned package update (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1690372800">- added conflicts to kernel-firmware-nvidia-gsp-G06 package</changelog>
  <changelog author="sndirsch@suse.com" date="1690372801">- remove conflicts from previous change again, since this likely
  would break QA test for sle again ...</changelog>
  <changelog author="sndirsch@suse.com" date="1690372802">- Obsoletes conflicting kernel-firmware-nvidia-gsp-G06 = 535.86.05
  (boo#1212724)
- minor cleanup in specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- update firmware to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- update firmware to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- update firmware to version 535.129.03</changelog>
  <changelog author="sndirsch@suse.com" date="1699876800">- update firmware to version 545.29.02</changelog>
  <changelog author="sndirsch@suse.com" date="1700740800">- update firmware to version 545.29.06</changelog>
  <changelog author="sndirsch@suse.com" date="1708776000">- update firmware to version 550.54.14</changelog>
  <changelog author="sndirsch@suse.com" date="1710936000">- update firmware to version 550.67</changelog>
</package>
<package pkgid="3ed4e89802e776a84fd6f72d48f78a8163ccf287206e77f9b5c7474d33c8ad6c" name="kernel-firmware-nvidia-gspx-G06" arch="src">
  <version epoch="0" ver="550.67" rel="150500.11.21.1"/>
  <changelog author="sndirsch@suse.com" date="1674129600">- update firmware to version 525.85.05</changelog>
  <changelog author="sndirsch@suse.com" date="1674129601">- removed old firmware</changelog>
  <changelog author="sndirsch@suse.com" date="1675857600">- update firmware to version 525.89.02</changelog>
  <changelog author="sndirsch@suse.com" date="1680177600">- update firmware to version 525.105.17</changelog>
  <changelog author="sndirsch@suse.com" date="1682424000">- update firmware to version 525.116.03</changelog>
  <changelog author="sndirsch@suse.com" date="1683633600">- update firmware to version 525.116.04</changelog>
  <changelog author="sndirsch@suse.com" date="1685534400">- make package multiversion capable
  * no longer package libnvidia-ml and nvidia-smi
  * added "Provides: multiversion(kernel)"</changelog>
  <changelog author="sndirsch@suse.com" date="1686830400">- update firmware to version 535.54.03
  * gsp_ad10x.bin has been renamed to gsp_ga10x.bin</changelog>
  <changelog author="sndirsch@suse.com" date="1689768000">- update firmware to version 535.86.05</changelog>
  <changelog author="sndirsch@suse.com" date="1690286400">- one-time rename to kernel-firmware-nvidia-gspx-G06 to workaround
  multiversioned package update (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1690372800">- added conflicts to kernel-firmware-nvidia-gsp-G06 package</changelog>
  <changelog author="sndirsch@suse.com" date="1690372801">- remove conflicts from previous change again, since this likely
  would break QA test for sle again ...</changelog>
  <changelog author="sndirsch@suse.com" date="1690372802">- Obsoletes conflicting kernel-firmware-nvidia-gsp-G06 = 535.86.05
  (boo#1212724)
- minor cleanup in specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- update firmware to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- update firmware to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- update firmware to version 535.129.03</changelog>
  <changelog author="sndirsch@suse.com" date="1699876800">- update firmware to version 545.29.02</changelog>
  <changelog author="sndirsch@suse.com" date="1700740800">- update firmware to version 545.29.06</changelog>
  <changelog author="sndirsch@suse.com" date="1708776000">- update firmware to version 550.54.14</changelog>
  <changelog author="sndirsch@suse.com" date="1710936000">- update firmware to version 550.67</changelog>
</package>
<package pkgid="8a33ced573672f7fbfb9bea2c85a933bf0022c44baede10feabdac2590edd756" name="kernel-firmware-nvidia-gspx-G06" arch="x86_64">
  <version epoch="0" ver="550.67" rel="150500.11.21.1"/>
  <changelog author="sndirsch@suse.com" date="1674129600">- update firmware to version 525.85.05</changelog>
  <changelog author="sndirsch@suse.com" date="1674129601">- removed old firmware</changelog>
  <changelog author="sndirsch@suse.com" date="1675857600">- update firmware to version 525.89.02</changelog>
  <changelog author="sndirsch@suse.com" date="1680177600">- update firmware to version 525.105.17</changelog>
  <changelog author="sndirsch@suse.com" date="1682424000">- update firmware to version 525.116.03</changelog>
  <changelog author="sndirsch@suse.com" date="1683633600">- update firmware to version 525.116.04</changelog>
  <changelog author="sndirsch@suse.com" date="1685534400">- make package multiversion capable
  * no longer package libnvidia-ml and nvidia-smi
  * added "Provides: multiversion(kernel)"</changelog>
  <changelog author="sndirsch@suse.com" date="1686830400">- update firmware to version 535.54.03
  * gsp_ad10x.bin has been renamed to gsp_ga10x.bin</changelog>
  <changelog author="sndirsch@suse.com" date="1689768000">- update firmware to version 535.86.05</changelog>
  <changelog author="sndirsch@suse.com" date="1690286400">- one-time rename to kernel-firmware-nvidia-gspx-G06 to workaround
  multiversioned package update (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1690372800">- added conflicts to kernel-firmware-nvidia-gsp-G06 package</changelog>
  <changelog author="sndirsch@suse.com" date="1690372801">- remove conflicts from previous change again, since this likely
  would break QA test for sle again ...</changelog>
  <changelog author="sndirsch@suse.com" date="1690372802">- Obsoletes conflicting kernel-firmware-nvidia-gsp-G06 = 535.86.05
  (boo#1212724)
- minor cleanup in specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- update firmware to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- update firmware to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- update firmware to version 535.129.03</changelog>
  <changelog author="sndirsch@suse.com" date="1699876800">- update firmware to version 545.29.02</changelog>
  <changelog author="sndirsch@suse.com" date="1700740800">- update firmware to version 545.29.06</changelog>
  <changelog author="sndirsch@suse.com" date="1708776000">- update firmware to version 550.54.14</changelog>
  <changelog author="sndirsch@suse.com" date="1710936000">- update firmware to version 550.67</changelog>
</package>
<package pkgid="754a3c0026e557517192e2a88d3cd4e57616a6a7ab3f4d94cb89cecfa1c0603d" name="kernel-firmware-nvidia-gspx-G06" arch="aarch64">
  <version epoch="0" ver="550.78" rel="150500.11.26.1"/>
  <changelog author="sndirsch@suse.com" date="1675857600">- update firmware to version 525.89.02</changelog>
  <changelog author="sndirsch@suse.com" date="1680177600">- update firmware to version 525.105.17</changelog>
  <changelog author="sndirsch@suse.com" date="1682424000">- update firmware to version 525.116.03</changelog>
  <changelog author="sndirsch@suse.com" date="1683633600">- update firmware to version 525.116.04</changelog>
  <changelog author="sndirsch@suse.com" date="1685534400">- make package multiversion capable
  * no longer package libnvidia-ml and nvidia-smi
  * added "Provides: multiversion(kernel)"</changelog>
  <changelog author="sndirsch@suse.com" date="1686830400">- update firmware to version 535.54.03
  * gsp_ad10x.bin has been renamed to gsp_ga10x.bin</changelog>
  <changelog author="sndirsch@suse.com" date="1689768000">- update firmware to version 535.86.05</changelog>
  <changelog author="sndirsch@suse.com" date="1690286400">- one-time rename to kernel-firmware-nvidia-gspx-G06 to workaround
  multiversioned package update (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1690372800">- added conflicts to kernel-firmware-nvidia-gsp-G06 package</changelog>
  <changelog author="sndirsch@suse.com" date="1690372801">- remove conflicts from previous change again, since this likely
  would break QA test for sle again ...</changelog>
  <changelog author="sndirsch@suse.com" date="1690372802">- Obsoletes conflicting kernel-firmware-nvidia-gsp-G06 = 535.86.05
  (boo#1212724)
- minor cleanup in specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- update firmware to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- update firmware to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- update firmware to version 535.129.03</changelog>
  <changelog author="sndirsch@suse.com" date="1699876800">- update firmware to version 545.29.02</changelog>
  <changelog author="sndirsch@suse.com" date="1700740800">- update firmware to version 545.29.06</changelog>
  <changelog author="sndirsch@suse.com" date="1708776000">- update firmware to version 550.54.14</changelog>
  <changelog author="sndirsch@suse.com" date="1710936000">- update firmware to version 550.67</changelog>
  <changelog author="sndirsch@suse.com" date="1713355200">- update firmware to version 550.76
  * addresses boo#1222972</changelog>
  <changelog author="sndirsch@suse.com" date="1714392000">- Update to 550.78
  * addresses boo#1223454</changelog>
</package>
<package pkgid="9dc9096882b482981b7a25cf8e78ebf24837fa73b9e240fdf9e34da56f740fa8" name="kernel-firmware-nvidia-gspx-G06" arch="src">
  <version epoch="0" ver="550.78" rel="150500.11.26.1"/>
  <changelog author="sndirsch@suse.com" date="1675857600">- update firmware to version 525.89.02</changelog>
  <changelog author="sndirsch@suse.com" date="1680177600">- update firmware to version 525.105.17</changelog>
  <changelog author="sndirsch@suse.com" date="1682424000">- update firmware to version 525.116.03</changelog>
  <changelog author="sndirsch@suse.com" date="1683633600">- update firmware to version 525.116.04</changelog>
  <changelog author="sndirsch@suse.com" date="1685534400">- make package multiversion capable
  * no longer package libnvidia-ml and nvidia-smi
  * added "Provides: multiversion(kernel)"</changelog>
  <changelog author="sndirsch@suse.com" date="1686830400">- update firmware to version 535.54.03
  * gsp_ad10x.bin has been renamed to gsp_ga10x.bin</changelog>
  <changelog author="sndirsch@suse.com" date="1689768000">- update firmware to version 535.86.05</changelog>
  <changelog author="sndirsch@suse.com" date="1690286400">- one-time rename to kernel-firmware-nvidia-gspx-G06 to workaround
  multiversioned package update (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1690372800">- added conflicts to kernel-firmware-nvidia-gsp-G06 package</changelog>
  <changelog author="sndirsch@suse.com" date="1690372801">- remove conflicts from previous change again, since this likely
  would break QA test for sle again ...</changelog>
  <changelog author="sndirsch@suse.com" date="1690372802">- Obsoletes conflicting kernel-firmware-nvidia-gsp-G06 = 535.86.05
  (boo#1212724)
- minor cleanup in specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- update firmware to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- update firmware to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- update firmware to version 535.129.03</changelog>
  <changelog author="sndirsch@suse.com" date="1699876800">- update firmware to version 545.29.02</changelog>
  <changelog author="sndirsch@suse.com" date="1700740800">- update firmware to version 545.29.06</changelog>
  <changelog author="sndirsch@suse.com" date="1708776000">- update firmware to version 550.54.14</changelog>
  <changelog author="sndirsch@suse.com" date="1710936000">- update firmware to version 550.67</changelog>
  <changelog author="sndirsch@suse.com" date="1713355200">- update firmware to version 550.76
  * addresses boo#1222972</changelog>
  <changelog author="sndirsch@suse.com" date="1714392000">- Update to 550.78
  * addresses boo#1223454</changelog>
</package>
<package pkgid="5284c1b320736f39c1b7cfdad4894a5e0cd06c51d465580ff6beb2a39013b029" name="kernel-firmware-nvidia-gspx-G06" arch="x86_64">
  <version epoch="0" ver="550.78" rel="150500.11.26.1"/>
  <changelog author="sndirsch@suse.com" date="1675857600">- update firmware to version 525.89.02</changelog>
  <changelog author="sndirsch@suse.com" date="1680177600">- update firmware to version 525.105.17</changelog>
  <changelog author="sndirsch@suse.com" date="1682424000">- update firmware to version 525.116.03</changelog>
  <changelog author="sndirsch@suse.com" date="1683633600">- update firmware to version 525.116.04</changelog>
  <changelog author="sndirsch@suse.com" date="1685534400">- make package multiversion capable
  * no longer package libnvidia-ml and nvidia-smi
  * added "Provides: multiversion(kernel)"</changelog>
  <changelog author="sndirsch@suse.com" date="1686830400">- update firmware to version 535.54.03
  * gsp_ad10x.bin has been renamed to gsp_ga10x.bin</changelog>
  <changelog author="sndirsch@suse.com" date="1689768000">- update firmware to version 535.86.05</changelog>
  <changelog author="sndirsch@suse.com" date="1690286400">- one-time rename to kernel-firmware-nvidia-gspx-G06 to workaround
  multiversioned package update (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1690372800">- added conflicts to kernel-firmware-nvidia-gsp-G06 package</changelog>
  <changelog author="sndirsch@suse.com" date="1690372801">- remove conflicts from previous change again, since this likely
  would break QA test for sle again ...</changelog>
  <changelog author="sndirsch@suse.com" date="1690372802">- Obsoletes conflicting kernel-firmware-nvidia-gsp-G06 = 535.86.05
  (boo#1212724)
- minor cleanup in specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- update firmware to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- update firmware to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- update firmware to version 535.129.03</changelog>
  <changelog author="sndirsch@suse.com" date="1699876800">- update firmware to version 545.29.02</changelog>
  <changelog author="sndirsch@suse.com" date="1700740800">- update firmware to version 545.29.06</changelog>
  <changelog author="sndirsch@suse.com" date="1708776000">- update firmware to version 550.54.14</changelog>
  <changelog author="sndirsch@suse.com" date="1710936000">- update firmware to version 550.67</changelog>
  <changelog author="sndirsch@suse.com" date="1713355200">- update firmware to version 550.76
  * addresses boo#1222972</changelog>
  <changelog author="sndirsch@suse.com" date="1714392000">- Update to 550.78
  * addresses boo#1223454</changelog>
</package>
<package pkgid="87433199acaa131d83d7860db02e884cf2d4091c015d2446f70f9afd9a60b88e" name="kernel-firmware-nvidia-gspx-G06" arch="aarch64">
  <version epoch="0" ver="550.90.07" rel="150500.11.29.1"/>
  <changelog author="sndirsch@suse.com" date="1680177600">- update firmware to version 525.105.17</changelog>
  <changelog author="sndirsch@suse.com" date="1682424000">- update firmware to version 525.116.03</changelog>
  <changelog author="sndirsch@suse.com" date="1683633600">- update firmware to version 525.116.04</changelog>
  <changelog author="sndirsch@suse.com" date="1685534400">- make package multiversion capable
  * no longer package libnvidia-ml and nvidia-smi
  * added "Provides: multiversion(kernel)"</changelog>
  <changelog author="sndirsch@suse.com" date="1686830400">- update firmware to version 535.54.03
  * gsp_ad10x.bin has been renamed to gsp_ga10x.bin</changelog>
  <changelog author="sndirsch@suse.com" date="1689768000">- update firmware to version 535.86.05</changelog>
  <changelog author="sndirsch@suse.com" date="1690286400">- one-time rename to kernel-firmware-nvidia-gspx-G06 to workaround
  multiversioned package update (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1690372800">- added conflicts to kernel-firmware-nvidia-gsp-G06 package</changelog>
  <changelog author="sndirsch@suse.com" date="1690372801">- remove conflicts from previous change again, since this likely
  would break QA test for sle again ...</changelog>
  <changelog author="sndirsch@suse.com" date="1690372802">- Obsoletes conflicting kernel-firmware-nvidia-gsp-G06 = 535.86.05
  (boo#1212724)
- minor cleanup in specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- update firmware to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- update firmware to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- update firmware to version 535.129.03</changelog>
  <changelog author="sndirsch@suse.com" date="1699876800">- update firmware to version 545.29.02</changelog>
  <changelog author="sndirsch@suse.com" date="1700740800">- update firmware to version 545.29.06</changelog>
  <changelog author="sndirsch@suse.com" date="1708776000">- update firmware to version 550.54.14</changelog>
  <changelog author="sndirsch@suse.com" date="1710936000">- update firmware to version 550.67</changelog>
  <changelog author="sndirsch@suse.com" date="1713355200">- update firmware to version 550.76
  * addresses boo#1222972</changelog>
  <changelog author="sndirsch@suse.com" date="1714392000">- Update to 550.78
  * addresses boo#1223454</changelog>
  <changelog author="sndirsch@suse.com" date="1717502400">- Security Update 550.90.07
  * addresses boo#1223356 [CVE-2024-0090, CVE-2024-0091, CVE-2024-0092]</changelog>
</package>
<package pkgid="146b79348d64120b2ddf962746716fd5d8c01e181b7fe741025b82da710843dc" name="kernel-firmware-nvidia-gspx-G06" arch="src">
  <version epoch="0" ver="550.90.07" rel="150500.11.29.1"/>
  <changelog author="sndirsch@suse.com" date="1680177600">- update firmware to version 525.105.17</changelog>
  <changelog author="sndirsch@suse.com" date="1682424000">- update firmware to version 525.116.03</changelog>
  <changelog author="sndirsch@suse.com" date="1683633600">- update firmware to version 525.116.04</changelog>
  <changelog author="sndirsch@suse.com" date="1685534400">- make package multiversion capable
  * no longer package libnvidia-ml and nvidia-smi
  * added "Provides: multiversion(kernel)"</changelog>
  <changelog author="sndirsch@suse.com" date="1686830400">- update firmware to version 535.54.03
  * gsp_ad10x.bin has been renamed to gsp_ga10x.bin</changelog>
  <changelog author="sndirsch@suse.com" date="1689768000">- update firmware to version 535.86.05</changelog>
  <changelog author="sndirsch@suse.com" date="1690286400">- one-time rename to kernel-firmware-nvidia-gspx-G06 to workaround
  multiversioned package update (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1690372800">- added conflicts to kernel-firmware-nvidia-gsp-G06 package</changelog>
  <changelog author="sndirsch@suse.com" date="1690372801">- remove conflicts from previous change again, since this likely
  would break QA test for sle again ...</changelog>
  <changelog author="sndirsch@suse.com" date="1690372802">- Obsoletes conflicting kernel-firmware-nvidia-gsp-G06 = 535.86.05
  (boo#1212724)
- minor cleanup in specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- update firmware to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- update firmware to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- update firmware to version 535.129.03</changelog>
  <changelog author="sndirsch@suse.com" date="1699876800">- update firmware to version 545.29.02</changelog>
  <changelog author="sndirsch@suse.com" date="1700740800">- update firmware to version 545.29.06</changelog>
  <changelog author="sndirsch@suse.com" date="1708776000">- update firmware to version 550.54.14</changelog>
  <changelog author="sndirsch@suse.com" date="1710936000">- update firmware to version 550.67</changelog>
  <changelog author="sndirsch@suse.com" date="1713355200">- update firmware to version 550.76
  * addresses boo#1222972</changelog>
  <changelog author="sndirsch@suse.com" date="1714392000">- Update to 550.78
  * addresses boo#1223454</changelog>
  <changelog author="sndirsch@suse.com" date="1717502400">- Security Update 550.90.07
  * addresses boo#1223356 [CVE-2024-0090, CVE-2024-0091, CVE-2024-0092]</changelog>
</package>
<package pkgid="d4d38b9d7f37765c890c5067393a8a156ea89f177f4f6da4ecb161ae3e35965f" name="kernel-firmware-nvidia-gspx-G06" arch="x86_64">
  <version epoch="0" ver="550.90.07" rel="150500.11.29.1"/>
  <changelog author="sndirsch@suse.com" date="1680177600">- update firmware to version 525.105.17</changelog>
  <changelog author="sndirsch@suse.com" date="1682424000">- update firmware to version 525.116.03</changelog>
  <changelog author="sndirsch@suse.com" date="1683633600">- update firmware to version 525.116.04</changelog>
  <changelog author="sndirsch@suse.com" date="1685534400">- make package multiversion capable
  * no longer package libnvidia-ml and nvidia-smi
  * added "Provides: multiversion(kernel)"</changelog>
  <changelog author="sndirsch@suse.com" date="1686830400">- update firmware to version 535.54.03
  * gsp_ad10x.bin has been renamed to gsp_ga10x.bin</changelog>
  <changelog author="sndirsch@suse.com" date="1689768000">- update firmware to version 535.86.05</changelog>
  <changelog author="sndirsch@suse.com" date="1690286400">- one-time rename to kernel-firmware-nvidia-gspx-G06 to workaround
  multiversioned package update (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1690372800">- added conflicts to kernel-firmware-nvidia-gsp-G06 package</changelog>
  <changelog author="sndirsch@suse.com" date="1690372801">- remove conflicts from previous change again, since this likely
  would break QA test for sle again ...</changelog>
  <changelog author="sndirsch@suse.com" date="1690372802">- Obsoletes conflicting kernel-firmware-nvidia-gsp-G06 = 535.86.05
  (boo#1212724)
- minor cleanup in specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- update firmware to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- update firmware to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- update firmware to version 535.129.03</changelog>
  <changelog author="sndirsch@suse.com" date="1699876800">- update firmware to version 545.29.02</changelog>
  <changelog author="sndirsch@suse.com" date="1700740800">- update firmware to version 545.29.06</changelog>
  <changelog author="sndirsch@suse.com" date="1708776000">- update firmware to version 550.54.14</changelog>
  <changelog author="sndirsch@suse.com" date="1710936000">- update firmware to version 550.67</changelog>
  <changelog author="sndirsch@suse.com" date="1713355200">- update firmware to version 550.76
  * addresses boo#1222972</changelog>
  <changelog author="sndirsch@suse.com" date="1714392000">- Update to 550.78
  * addresses boo#1223454</changelog>
  <changelog author="sndirsch@suse.com" date="1717502400">- Security Update 550.90.07
  * addresses boo#1223356 [CVE-2024-0090, CVE-2024-0091, CVE-2024-0092]</changelog>
</package>
<package pkgid="e8165e0ba60f6ee0f6cebc085af84690793894b0abdabb2ffa7ff316ad58aecb" name="kernel-firmware-nvidia-gspx-G06-cuda" arch="aarch64">
  <version epoch="0" ver="555.42.06" rel="150500.11.36.1"/>
  <changelog author="sndirsch@suse.com" date="1690286400">- one-time rename to kernel-firmware-nvidia-gspx-G06 to workaround
  multiversioned package update (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1690372800">- added conflicts to kernel-firmware-nvidia-gsp-G06 package</changelog>
  <changelog author="sndirsch@suse.com" date="1690372801">- remove conflicts from previous change again, since this likely
  would break QA test for sle again ...</changelog>
  <changelog author="sndirsch@suse.com" date="1690372802">- Obsoletes conflicting kernel-firmware-nvidia-gsp-G06 = 535.86.05
  (boo#1212724)
- minor cleanup in specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- update firmware to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- update firmware to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- update firmware to version 535.129.03</changelog>
  <changelog author="sndirsch@suse.com" date="1699876800">- update firmware to version 545.29.02</changelog>
  <changelog author="sndirsch@suse.com" date="1700740800">- update firmware to version 545.29.06</changelog>
  <changelog author="sndirsch@suse.com" date="1708776000">- update firmware to version 550.54.14</changelog>
  <changelog author="sndirsch@suse.com" date="1710936000">- update firmware to version 550.67</changelog>
  <changelog author="sndirsch@suse.com" date="1713355200">- update firmware to version 550.76
  * addresses boo#1222972</changelog>
  <changelog author="sndirsch@suse.com" date="1714392000">- Update to 550.78
  * addresses boo#1223454</changelog>
  <changelog author="sndirsch@suse.com" date="1717502400">- Security Update 550.90.07
  * addresses boo#1223356 [CVE-2024-0090, CVE-2024-0091, CVE-2024-0092]</changelog>
  <changelog author="sndirsch@suse.com" date="1720094400">- Add a second flavor to be used by the kernel module versions
  used by CUDA. The firmware targetting CUDA contains '-cuda' in
  its name to track its versions separately from the graphics
  firmware. (bsc#1227417)</changelog>
  <changelog author="sndirsch@suse.com" date="1720180800">- make buildservice happy; all sources need to be mentioned as such
  in specfile</changelog>
  <changelog author="eich@suse.com" date="1720440000">- Use macro which is set during build but not when running
  `osc service run download_files` to make sure both source versions
  are visible for download. This way, only the correct source
  tarball will be included in the source package of its respective
  flavor but both can be downloaded (updated) simultaniously.</changelog>
  <changelog author="sndirsch@suse.com" date="1720526400">- Update to 550.100 (boo#1227575)</changelog>
  <changelog author="eich@suse.com" date="1720699200">- For CUDA update version to 555.42.6.
- Use firmware for one arch only as firmware doesn't run on
  the CPU and therefore should be arch-independent. This has
  been confirmed by NVIDIA.
  Since the run file attempts to run binaries if these are
  not installed, 'BuildRequire:' zstd.</changelog>
  <changelog author="sndirsch@suse.com" date="1720785600">- due to maintenance process we can switch to noarch only for new
  products; so do this only for sle15-sp7 or later</changelog>
</package>
<package pkgid="aa6b67290bd4c1bda433112a58f2b226ebd792d5ca5eb4a582a50b42626ae2f8" name="kernel-firmware-nvidia-gspx-G06-cuda" arch="src">
  <version epoch="0" ver="555.42.06" rel="150500.11.36.1"/>
  <changelog author="sndirsch@suse.com" date="1690286400">- one-time rename to kernel-firmware-nvidia-gspx-G06 to workaround
  multiversioned package update (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1690372800">- added conflicts to kernel-firmware-nvidia-gsp-G06 package</changelog>
  <changelog author="sndirsch@suse.com" date="1690372801">- remove conflicts from previous change again, since this likely
  would break QA test for sle again ...</changelog>
  <changelog author="sndirsch@suse.com" date="1690372802">- Obsoletes conflicting kernel-firmware-nvidia-gsp-G06 = 535.86.05
  (boo#1212724)
- minor cleanup in specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- update firmware to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- update firmware to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- update firmware to version 535.129.03</changelog>
  <changelog author="sndirsch@suse.com" date="1699876800">- update firmware to version 545.29.02</changelog>
  <changelog author="sndirsch@suse.com" date="1700740800">- update firmware to version 545.29.06</changelog>
  <changelog author="sndirsch@suse.com" date="1708776000">- update firmware to version 550.54.14</changelog>
  <changelog author="sndirsch@suse.com" date="1710936000">- update firmware to version 550.67</changelog>
  <changelog author="sndirsch@suse.com" date="1713355200">- update firmware to version 550.76
  * addresses boo#1222972</changelog>
  <changelog author="sndirsch@suse.com" date="1714392000">- Update to 550.78
  * addresses boo#1223454</changelog>
  <changelog author="sndirsch@suse.com" date="1717502400">- Security Update 550.90.07
  * addresses boo#1223356 [CVE-2024-0090, CVE-2024-0091, CVE-2024-0092]</changelog>
  <changelog author="sndirsch@suse.com" date="1720094400">- Add a second flavor to be used by the kernel module versions
  used by CUDA. The firmware targetting CUDA contains '-cuda' in
  its name to track its versions separately from the graphics
  firmware. (bsc#1227417)</changelog>
  <changelog author="sndirsch@suse.com" date="1720180800">- make buildservice happy; all sources need to be mentioned as such
  in specfile</changelog>
  <changelog author="eich@suse.com" date="1720440000">- Use macro which is set during build but not when running
  `osc service run download_files` to make sure both source versions
  are visible for download. This way, only the correct source
  tarball will be included in the source package of its respective
  flavor but both can be downloaded (updated) simultaniously.</changelog>
  <changelog author="sndirsch@suse.com" date="1720526400">- Update to 550.100 (boo#1227575)</changelog>
  <changelog author="eich@suse.com" date="1720699200">- For CUDA update version to 555.42.6.
- Use firmware for one arch only as firmware doesn't run on
  the CPU and therefore should be arch-independent. This has
  been confirmed by NVIDIA.
  Since the run file attempts to run binaries if these are
  not installed, 'BuildRequire:' zstd.</changelog>
  <changelog author="sndirsch@suse.com" date="1720785600">- due to maintenance process we can switch to noarch only for new
  products; so do this only for sle15-sp7 or later</changelog>
</package>
<package pkgid="e8d572dc0a6a79f67dcc2c71724c2b6724a51d0fea150797ada8446ff866320e" name="kernel-firmware-nvidia-gspx-G06-cuda" arch="x86_64">
  <version epoch="0" ver="555.42.06" rel="150500.11.36.1"/>
  <changelog author="sndirsch@suse.com" date="1690286400">- one-time rename to kernel-firmware-nvidia-gspx-G06 to workaround
  multiversioned package update (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1690372800">- added conflicts to kernel-firmware-nvidia-gsp-G06 package</changelog>
  <changelog author="sndirsch@suse.com" date="1690372801">- remove conflicts from previous change again, since this likely
  would break QA test for sle again ...</changelog>
  <changelog author="sndirsch@suse.com" date="1690372802">- Obsoletes conflicting kernel-firmware-nvidia-gsp-G06 = 535.86.05
  (boo#1212724)
- minor cleanup in specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- update firmware to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- update firmware to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- update firmware to version 535.129.03</changelog>
  <changelog author="sndirsch@suse.com" date="1699876800">- update firmware to version 545.29.02</changelog>
  <changelog author="sndirsch@suse.com" date="1700740800">- update firmware to version 545.29.06</changelog>
  <changelog author="sndirsch@suse.com" date="1708776000">- update firmware to version 550.54.14</changelog>
  <changelog author="sndirsch@suse.com" date="1710936000">- update firmware to version 550.67</changelog>
  <changelog author="sndirsch@suse.com" date="1713355200">- update firmware to version 550.76
  * addresses boo#1222972</changelog>
  <changelog author="sndirsch@suse.com" date="1714392000">- Update to 550.78
  * addresses boo#1223454</changelog>
  <changelog author="sndirsch@suse.com" date="1717502400">- Security Update 550.90.07
  * addresses boo#1223356 [CVE-2024-0090, CVE-2024-0091, CVE-2024-0092]</changelog>
  <changelog author="sndirsch@suse.com" date="1720094400">- Add a second flavor to be used by the kernel module versions
  used by CUDA. The firmware targetting CUDA contains '-cuda' in
  its name to track its versions separately from the graphics
  firmware. (bsc#1227417)</changelog>
  <changelog author="sndirsch@suse.com" date="1720180800">- make buildservice happy; all sources need to be mentioned as such
  in specfile</changelog>
  <changelog author="eich@suse.com" date="1720440000">- Use macro which is set during build but not when running
  `osc service run download_files` to make sure both source versions
  are visible for download. This way, only the correct source
  tarball will be included in the source package of its respective
  flavor but both can be downloaded (updated) simultaniously.</changelog>
  <changelog author="sndirsch@suse.com" date="1720526400">- Update to 550.100 (boo#1227575)</changelog>
  <changelog author="eich@suse.com" date="1720699200">- For CUDA update version to 555.42.6.
- Use firmware for one arch only as firmware doesn't run on
  the CPU and therefore should be arch-independent. This has
  been confirmed by NVIDIA.
  Since the run file attempts to run binaries if these are
  not installed, 'BuildRequire:' zstd.</changelog>
  <changelog author="sndirsch@suse.com" date="1720785600">- due to maintenance process we can switch to noarch only for new
  products; so do this only for sle15-sp7 or later</changelog>
</package>
<package pkgid="d74339a9d43197cda7c6f0e664883064e49589d2718df2e9fc5467bd2d59d34e" name="kernel-firmware-platform" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.12.1"/>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1723464000">- Update AMD ucode to 20240809 (bsc#1229069, CVE-2023-31315)</changelog>
</package>
<package pkgid="963cb731e4698e25a406137eead9898c4ac8ad48a682864cd3687af4df24fb64" name="kernel-firmware-platform" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="d26f332e274928953a66f0eafca62a96a90cf6954c678ca14e82698b68618e0b" name="kernel-firmware-prestera" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.12.1"/>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1723464000">- Update AMD ucode to 20240809 (bsc#1229069, CVE-2023-31315)</changelog>
</package>
<package pkgid="7b5720f6b4dce3b3a023395efc85cca2528e75099ccde68740525fada22de38f" name="kernel-firmware-prestera" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="d57b0eac06b31634bc74cf6b2be648853a7babd8e341eedb013c5fb1e89447ab" name="kernel-firmware-qcom" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.12.1"/>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1723464000">- Update AMD ucode to 20240809 (bsc#1229069, CVE-2023-31315)</changelog>
</package>
<package pkgid="f6ab133fabf2c4cb8f1887aac45b85ef5b172aeca058b5855b0d2369f7f26c83" name="kernel-firmware-qcom" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="baf73c9401e2f296e31d3fbc9320edf226a7267f232a418bb02bd80e7b4b1729" name="kernel-firmware-qlogic" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.12.1"/>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1723464000">- Update AMD ucode to 20240809 (bsc#1229069, CVE-2023-31315)</changelog>
</package>
<package pkgid="7cf3951e4ed7daecf31833cc39a5b00d79474be6e59510d2bfe1aa3edfc9261c" name="kernel-firmware-qlogic" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="bdb077f93d1b25b40a8d54243b35b4f1bd6a0204d58bbf605b19fb81ba5a8e3f" name="kernel-firmware-radeon" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.12.1"/>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1723464000">- Update AMD ucode to 20240809 (bsc#1229069, CVE-2023-31315)</changelog>
</package>
<package pkgid="4714c646e540920e020ca0c586d98fcd265134b0327387e9500f8b4a71a5d108" name="kernel-firmware-radeon" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="6b31bd3fccdf3048909b17563008a46e0ed6643ebfcb70aaee0e6d37e9c96156" name="kernel-firmware-realtek" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.12.1"/>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1723464000">- Update AMD ucode to 20240809 (bsc#1229069, CVE-2023-31315)</changelog>
</package>
<package pkgid="21df265bf2ea9a8a1ad6264967f969460acb0333a6880434c14a01b4db9efd27" name="kernel-firmware-realtek" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="ab337169c2e1a9b777c86e18982dcc45eb9d118cceaf75be03777fc743e7154f" name="kernel-firmware-serial" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.12.1"/>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1723464000">- Update AMD ucode to 20240809 (bsc#1229069, CVE-2023-31315)</changelog>
</package>
<package pkgid="a53de8bfaa3002a997d69ab22812a6a757f1559e959cff25baa70d1716320f47" name="kernel-firmware-serial" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="b96f748e6f03afc2e6ecc33743d1dbeddb122f3d6ad7bf743d2254e1e51b985c" name="kernel-firmware-sound" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.12.1"/>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1723464000">- Update AMD ucode to 20240809 (bsc#1229069, CVE-2023-31315)</changelog>
</package>
<package pkgid="17206b7290b86b4aa35deec67a49e26224bd9ef221aaa14e9922f95dc2a63afa" name="kernel-firmware-sound" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="36c1e05ca1d50337705791ef424d26f81b98c6ec54005393eec056a9274ed164" name="kernel-firmware-ti" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.12.1"/>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1723464000">- Update AMD ucode to 20240809 (bsc#1229069, CVE-2023-31315)</changelog>
</package>
<package pkgid="ccab388cd625957e35bff4b607eb86a6358ab0b4e09c5e3154551a350efbcfde" name="kernel-firmware-ti" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="7d444764483f9f0cba0a949d525fbc465d5bedd37d2314a5a555dfeb702bf495" name="kernel-firmware-ueagle" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.12.1"/>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1723464000">- Update AMD ucode to 20240809 (bsc#1229069, CVE-2023-31315)</changelog>
</package>
<package pkgid="22763d5e667901ee3af1189aed831b4c09049eaced217e45cea12c81b6511ee3" name="kernel-firmware-ueagle" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="a142f0e1fbd555bccb2b4ece928469e68567ede956182a91cff30e782a3c05ee" name="kernel-firmware-usb-network" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.12.1"/>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1723464000">- Update AMD ucode to 20240809 (bsc#1229069, CVE-2023-31315)</changelog>
</package>
<package pkgid="8214b46c8ca3aa7b2a0c5ebd81b3ba79afe7576494ef0c571cb117c3651b0027" name="kernel-firmware-usb-network" arch="noarch">
  <version epoch="0" ver="20230724" rel="150500.3.9.1"/>
  <changelog author="tiwai@suse.com" date="1672228800">- Update to version 20221216 (git commit c9c19583f717):
  * rtw89: 8852c: update fw to v0.27.56.9
  * rtw89: 8852c: update fw to v0.27.56.8
  * amdgpu: updated navi10 firmware for amd-5.4
  * amdgpu: updated yellow carp firmware for amd-5.4
  * amdgpu: updated raven2 firmware for amd-5.4
  * amdgpu: updated raven firmware for amd-5.4
  * amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  * amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  * amdgpu: updated vega20 firmware for amd-5.4
  * amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  * amdgpu: add VCN 4.0.0 firmware for amd-5.4
  * amdgpu: add SMU 13.0.0 firmware for amd-5.4
  * amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  * amdgpu: add PSP 13.0.0 firmware for amd-5.4
  * amdgpu: add GC 11.0.0 firmware for amd-5.4
  * amdgpu: add DCN 3.2.0 firmware for amd-5.4
  * amdgpu: updated vega10 firmware for amd-5.4
  * amdgpu: updated beige goby firmware for amd-5.4
  * amdgpu: updated dimgrey cavefish firmware for amd-5.4
  * amdgpu: updated vangogh firmware for amd-5.4
  * amdgpu: updated picasso firmware for amd-5.4
  * amdgpu: updated navy flounder firmware for amd-5.4
  * amdgpu: updated green sardine firmware for amd-5.4
  * amdgpu: updated sienna cichlid firmware for amd-5.4
  * amdgpu: updated arcture firmware for amd-5.4
  * amdgpu: updated navi14 firmware for amd-5.4
  * amdgpu: updated renoir firmware for amd-5.4
  * amdgpu: updated navi12 firmware for amd-5.4
  * amdgpu: updated aldebaran firmware for amd-5.4
  * sr150 : Add NXP SR150 UWB firmware
  * brcm: add/update firmware files for brcmfmac driver
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098</changelog>
  <changelog author="tiwai@suse.com" date="1673524800">- Update to version 20230110 (git commit a1ad1d5b5062):
  (preparation for jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: add VCN4.0.4 firmware from amd-5.4
  * amdgpu: add SMU13.0.7 firmware from amd-5.4
  * amdgpu: add SDMA6.0.2 firmware from amd-5.4
  * amdgpu: add PSP13.0.7 firmware from amd-5.4
  * amdgpu: add GC11.0.2 firmware from amd-5.4
  * amdgpu: add DCN3.2.1 firmware from amd-5.4
  * amdgpu: update VCN4.0.0 firmware from amd-5.4
  * amdgpu: update SMU13.0.0 firmware from amd-5.4
  * amdgpu: update SDMA6.0.0 firmware from amd-5.4
  * amdgpu: update PSP13.0.0 firmware from amd-5.4
  * amdgpu: update GC11.0.0 firmware from amd-5.4
  * iwlwifi: add new FWs from core76-35 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  * iwlwifi: add new FWs from core75-47 release
  * iwlwifi: update 9000-family firmwares to core75-47
  * amdgpu: update renoir DMCUB firmware
  * amdgpu: Update renoir PSP firmware
  * amdgpu: update copyright date for LICENSE.amdgpu
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * cxgb4: Update firmware to revision 1.27.1.0
  * qca: Update firmware files for BT chip WCN6750</changelog>
  <changelog author="tiwai@suse.com" date="1674043200">- Correct alias list for ACPI entries (bsc#1207211)</changelog>
  <changelog author="tiwai@suse.com" date="1675684800">- Update to version 20230125 (git commit 5c11a3742947):
  (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171)
  * amdgpu: Add VCN 4.0.2 firmware
  * amdgpu: Add PSP 13.0.4 firmware
  * amdgpu: Add SDMA 6.0.1 fimware
  * amdgpu: Add GC 11.0.1 firmware
  * amdgpu: Add DCN 3.1.4 firmware
  * iwlwifi: remove old intermediate 5.15+ firmwares
  * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  * iwlwifi: remove old unsupported older than 4.14 LTS
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * amdgpu: update vangogh firmware
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * brcm: add configuration files for CyberTan WC121
  * qcom: add firmware files for Adreno A200
  * rtw89: 8852c: update fw to v0.27.56.10
  * QCA: Add Bluetooth firmware for QCA2066</changelog>
  <changelog author="tiwai@suse.com" date="1676289600">- Update to version 20230210 (git commit bf4115c1aa2b):
  * linux-firmware: Update AMD cpu microcode
  * brcm: revert firmware files for Cypress devices
  * brcm: restore previous firmware file for BCM4329 device
  * rtw88: 8822c: Update normal firmware to v9.9.14
  * i915: Add DMC v2.11 for MTL (jsc#PED-1225)
  * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699)
  * i915: Add DMC v2.18 for ADLP (jsc#PED-1225)</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- set psuffix to deduplicate src.rpms
- spec-cleaner induced cleanups</changelog>
  <changelog author="tiwai@suse.com" date="1678795201">- Update to version 20230313 (git commit 5bc279fb161d):
  * iwlwifi: update core69 and core72 firmwares for So device
  * qat: update licence text
  * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  * WHENCE: remove duplicate File entries
  * WHENCE: remove trailing white space
  * linux-firmware: add fw for qat_4xxx (jsc#PED-3699)
  * Fix symlinks for Intel firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * iwlwifi: update core69 and core72 firmwares for Ty device
  * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  * brcm: Add nvram for the Advantech MICA-071 tablet
  * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  * rtl_bt: Add firmware and config files for RTL8821CS
  * rtw89: 8852b: update fw to v0.29.29.0
  * rtw89: 8852b: update fw to v0.29.26.0
  * liquidio: remove lio_23xx_vsw.bin
  * intel: avs: Add AudioDSP base firmware for CNL-based platforms
  * intel: avs: Add AudioDSP base firmware for APL-based platforms
  * intel: avs: Add AudioDSP base firmware for SKL-based platforms
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update board-2.bin
  * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ5018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  * ath10k: WCN3990 hw1.0: update board-2.bin
  * cnm: update chips&amp;media wave521c firmware.
  * amdgpu: Update GC 11.0.1 firmware
  * intel: catpt: Add AudioDSP base firmware for BDW platforms
- Update topics for catpt/avs
- Update aliases
- Update spec template</changelog>
  <changelog author="tiwai@suse.com" date="1679313600">- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily
  (bsc#1209449)</changelog>
  <changelog author="tiwai@suse.com" date="1679400000">- Revert pssufix change that caused the package renaming and broke
  dependencies from other packages</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Update to version 20230320 (git commit bcdcfbcf0a8f):
  * linux-firmware: Update firmware file for Intel Bluetooth AX101
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: add firmware files for NXP BT chipsets
  * rtw89: 8852b: update format-1 fw to v0.29.29.0
  * rtw89: 8852b: add format-1 fw v0.29.26.0
  * rtw89: 8852b: rollback firmware to v0.27.32.1
  * i915: Update MTL DMC to v2.12
  * i915: Update ADLP DMC to v2.19
  * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
- Update topics list
- Drop the manual revert of 8852b firmware file, as it's merged into
  the upstream</changelog>
  <changelog author="tiwai@suse.com" date="1679659201">- Revive the old iwlwifi-*-71 ucode for compatibility with
  SLE15-SP4 kernel (bsc#1209681):
  WHENCE updated by iwlwifi-WHENCE-fix.patch</changelog>
  <changelog author="tiwai@suse.com" date="1681732800">- Update to version 20230406 (git commit 86da2ac9b4e5):
  * linux-firmware: update firmware for MT7916
  * rtw89: 8852b: update format-1 fw to v0.29.29.1
  * rtw89: 8852c: update fw to v0.27.56.13
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  * ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Amphion: Update vpu firmware
  * iwlwifi: add new FWs from core78-32 release
  * iwlwifi: update 9000-family firmwares to core78-32
  * amdgpu: Update SDMA 6.0.1 firmware
  * amdgpu: Add PSP 13.0.11 firmware
  * amdgpu: Update PSP 13.0.4 firmware
  * amdgpu: Update GC 11.0.1 firmware
  * amdgpu: Update DCN 3.1.4 firmware
  * amdgpu: Add GC 11.0.4 firmware
  * rtw88: 8822c: Update normal firmware to v9.9.15</changelog>
  <changelog author="tiwai@suse.com" date="1682596800">- Update to version 20230427 (git commit fab149657d8d):
  * Group all Conexant V4L devices together
  * rtl_nic: update firmware of USB devices
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update firmware for MT7981
  * qca: Update firmware files for BT chip WCN6750
  * mt76xx: Move the old Mediatek WiFi firmware to mediatek
  * rtl_bt: Add firmware and config files for RTL8851B
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: add firmware for MT7981
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update qat firmware
  * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops</changelog>
  <changelog author="tiwai@suse.com" date="1684843200">- Update to version 20230517 (git commit 08b854f02066):
  * rtlwifi: Add firmware v6.0 for RTL8192FU
  * rtlwifi: Update firmware for RTL8188EU to v28.0
  * cirrus: Add firmware and tuning files for HP G10 series laptops
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * WHENCE: Cleanup Realtek BT firmware provenance
  * linux-firmware: update firmware for MT7922 WiFi device
  * cnm: update chips&amp;media wave521c firmware.
  * cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  * check_whence: error on directory listed as File
  * check_whence: error on duplicate file entries
  * WHENCE: comment out duplicate MediaTek firmware
  * i915: Add GuC v70.6.6 for MTL
  * amdgpu: update DCN 3.1.6 DMCUB firmware
  * rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  * rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  * rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
- Update aliases from 6.4-rc3</changelog>
  <changelog author="tiwai@suse.com" date="1685966400">- Update to version 20230531 (git commit 9d4c9a52c237):
  * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  * cirrus: Add firmware for new Asus ROG Laptops
  * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  * amdgpu: Update GC 11.0.1 and 11.0.4
  * rtw89: 8851b: add firmware v0.29.41.0
  * amdgpu: update yellow carp firmware for amd.5.5 release
  * amdgpu: update navi14 firmware for amd.5.5 release
  * amdgpu: update navi12 firmware for amd.5.5 release
  * amdgpu: update vega20 firmware for amd.5.5 release
  * amdgpu: update vega12 firmware for amd.5.5 release
  * amdgpu: update navi10 firmware for amd.5.5 release
  * amdgpu: update vega10 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  * amdgpu: update 13.0.8 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  * amdgpu: update vangogh firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  * amdgpu: update renoir firmware for amd.5.5 release
  * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  * amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  * amdgpu: update green sardine firmware for amd.5.5 release
  * amdgpu: update beige goby firmware for amd.5.5 release
  * amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  * amdgpu: update arcturus firmware for amd.5.5 release
  * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  * amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  * amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  * amdgpu: update navy flounder firmware for amd.5.5 release
  * amdgpu: update sienna cichlid firmware for amd.5.5 release
  * amdgpu: update aldebaran firmware for amd.5.5 release
  * amdgpu: DMCUB updates for various AMDGPU asics
  * ice: update ice DDP comms package to 1.3.40.0
  * cxgb4: Update firmware to revision 1.27.3.0
- Fix the broken symlink targets for cirrus firmware:
  cirrus-WHENCE-link-fixes.patch
- Clean up spec template to match with the actual output</changelog>
  <changelog author="tiwai@suse.com" date="1687435200">- Update to version 20230620 (git commit 045b2136a619):
  * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  * fix broken cirrus firmware symlinks
  * qcom: Update the microcode files for Adreno a630 GPUs.
  * qcom: sdm845: rename the modem firmware
  * qcom: sdm845: update remoteproc firmware
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  * amdgpu: DMCUB updates for various AMDGPU asics
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * i915: Add HuC v8.5.0 for MTL
  * mediatek: Update mt8195 SCP firmware to support hevc
- Drop obsoleted patch for WHENCE:
  cirrus-WHENCE-link-fixes.patch
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1688817600">- Update to version 20230707 (git commit d3f66064cf43):
  * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX203
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * Fix qcom ASoC tglp WHENCE entry
  * check_whence: Check link targets are valid
  * iwlwifi: add new FWs from core80-39 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  * qcom: Add Audio firmware for SC8280XP X13s
  * Makefile, copy-firmware: support xz/zstd compressed firmware
  * copy-firmware: silence the last shellcheck warnings
  * copy-firmware: drop obsolete backticks, quote
  * copy-firmware: tweak sed invocation
  * copy-firmware: quote deskdir and dirname
  * check_whence: error if symlinks are in-tree
  * check_whence: error if File: is actually a link
  * check_whence: strip quotation marks
  * linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  * ice: update ice DDP wireless_edge package to 1.3.10.0
  * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update to version 20230724 (git commit 59fbffa9ec8e):
  including the amd-ucode update for "ZenBleed" (CVE-2023-20593, bsc#1213286)
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: add initial SMU 13.0.10 firmware
  * amdgpu: add initial SDMA 6.0.3 firmware
  * amdgpu: add initial PSP 13.0.10 firmware
  * amdgpu: add initial GC 11.0.3 firmware
  * linux-firmware: Update AMD fam17h cpu microcode
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update Picasso VCN firmware
  * amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  * Updated NXP SR150 UWB firmware
  * wfx: update to firmware 3.16.1
  * mediatek: Update mt8195 SCP firmware to support 10bit mode
  * i915: update DG2 GuC to v70.8.0
  * i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  * cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)
  amd-ucode-CVE-2023-20569.patch</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")
- Drop the previous amd-ucode update patch:
  amd-ucode-CVE-2023-20569.patch</changelog>
</package>
<package pkgid="deb1ce50bbeab4e503f9f6b92dcd58b109c980873b3bf3f3b24de24d0cf42d13" name="kernel-rt" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.13.18.1"/>
  <changelog author="mfranc@suse.cz" date="1694606400">- s390/ipl: add eckd support (jsc#PED-2023).
- commit 21b5156</changelog>
  <changelog author="tiwai@suse.de" date="1694606401">- platform/mellanox: mlxbf-pmc: Fix reading of unprogrammed events
  (git-fixes).
- platform/mellanox: mlxbf-pmc: Fix potential buffer overflows
  (git-fixes).
- platform/mellanox: mlxbf-tmfifo: Drop jumbo frames (git-fixes).
- platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more
  descriptors (git-fixes).
- kselftest/runner.sh: Propagate SIGTERM to runner child
  (git-fixes).
- commit 495d04f</changelog>
  <changelog author="mfranc@suse.cz" date="1694606402">- s390/ipl: add eckd dump support (jsc#PED-2025).
- commit 0961d1f</changelog>
  <changelog author="mfranc@suse.cz" date="1694606403">- kabi: hide changes in enum ipl_type and struct sclp_info
  (jsc#PED-2023 jsc#PED-2025).
- commit b6fb6b6</changelog>
  <changelog author="mfranc@suse.cz" date="1694606404">- s390/ipl: use octal values instead of S_* macros (jsc#PED-2023).
- commit db2ef83</changelog>
  <changelog author="mfranc@suse.cz" date="1694606405">- s390/ipl: add DEFINE_GENERIC_LOADPARM() (jsc#PED-2023).
- commit cd6d27a</changelog>
  <changelog author="mfranc@suse.cz" date="1694606406">- s390/ipl: add loadparm parameter to eckd ipl/reipl data
  (jsc#PED-2023).
- commit 364a30d</changelog>
  <changelog author="mkubecek@suse.cz" date="1694692800">- sctp: leave the err path free in sctp_stream_init to
  sctp_stream_free (CVE-2023-2177 bsc#1210643).
- commit 337b7d8</changelog>
  <changelog author="mkubecek@suse.cz" date="1694779200">- netfilter: nftables: exthdr: fix 4-byte stack OOB write
  (CVE-2023-4881 bsc#1215221).
- commit 0de26c1</changelog>
  <changelog author="jgross@suse.com" date="1694865600">- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due
  to race condition (bsc#1215206, CVE-2023-1859).
- commit f333aa7</changelog>
  <changelog author="wqu@suse.com" date="1695038400">- btrfs: don't hold CPU for too long when defragging a file
  (bsc#1214988).
- commit 9b89645</changelog>
  <changelog author="tiwai@suse.de" date="1695038401">- ata: libata: disallow dev-initiated LPM transitions to
  unsupported states (git-fixes).
- i2c: aspeed: Reset the i2c controller when timeout occurs
  (git-fixes).
- selftests: tracing: Fix to unmount tracefs for recovering
  environment (git-fixes).
- drm/amd/display: fix the white screen issue when &gt;= 64GB DRAM
  (git-fixes).
- drm: gm12u320: Fix the timeout usage for usb_bulk_msg()
  (git-fixes).
- commit 1f4e814</changelog>
  <changelog author="tzimmermann@suse.com" date="1695038402">- blacklist.conf: Append 'parisc/agp: Annotate parisc agp init functions with __init'
- commit 9eb45cc</changelog>
  <changelog author="tzimmermann@suse.com" date="1695038403">- blacklist.conf: Append 'parisc: Flush gatt writes and adjust gatt mask in parisc_agp_mask_memory()'
- commit 30a9db6</changelog>
  <changelog author="tzimmermann@suse.com" date="1695038404">- blacklist.conf: Append 'video/aperture: Only remove sysfb on the default vga pci device'
- commit bfaaaff</changelog>
  <changelog author="tzimmermann@suse.com" date="1695038405">- blacklist.conf: Append 'Revert "fbcon: Use kzalloc() in fbcon_prepare_logo()"'
- commit 501bd2e</changelog>
  <changelog author="osalvador@suse.de" date="1695038406">- Rename colliding patches before merging SLE15-SP4
- commit 6493f7c</changelog>
  <changelog author="jkosina@suse.cz" date="1695297600">- USB: core: Change usb_get_device_descriptor() API (bsc#1213123
  CVE-2023-37453 bsc#1215553 bsc#1215522 bsc#1215552).
  Refresh patches.suse/USB-core-Fix-race-by-not-overwriting-udev-descriptor.patch (add missing hunk)
  Refresh patches.suse/USB-core-Fix-oversight-in-SuperSpeed-initialization.patch (context)
- commit 988a527</changelog>
  <changelog author="osalvador@suse.de" date="1695297601">- Drop amdgpu patch causing spamming (bsc#1215523)
  Deleted:
  patches.suse/drm-amdgpu-install-stub-fence-into-potential-unused-.patch.
- commit c753869</changelog>
  <changelog author="osalvador@suse.de" date="1695384000">- x86/sev: Make enc_dec_hypercall() accept a size instead of
  npages (bsc#1214635).
- commit 1e4ccee</changelog>
</package>
<package pkgid="76a06ecf07a6c53aa61e3ada05b4f9d6941939bae4833997de8ab22660944627" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.13.18.1"/>
  <changelog author="mfranc@suse.cz" date="1694606400">- s390/ipl: add eckd support (jsc#PED-2023).
- commit 21b5156</changelog>
  <changelog author="tiwai@suse.de" date="1694606401">- platform/mellanox: mlxbf-pmc: Fix reading of unprogrammed events
  (git-fixes).
- platform/mellanox: mlxbf-pmc: Fix potential buffer overflows
  (git-fixes).
- platform/mellanox: mlxbf-tmfifo: Drop jumbo frames (git-fixes).
- platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more
  descriptors (git-fixes).
- kselftest/runner.sh: Propagate SIGTERM to runner child
  (git-fixes).
- commit 495d04f</changelog>
  <changelog author="mfranc@suse.cz" date="1694606402">- s390/ipl: add eckd dump support (jsc#PED-2025).
- commit 0961d1f</changelog>
  <changelog author="mfranc@suse.cz" date="1694606403">- kabi: hide changes in enum ipl_type and struct sclp_info
  (jsc#PED-2023 jsc#PED-2025).
- commit b6fb6b6</changelog>
  <changelog author="mfranc@suse.cz" date="1694606404">- s390/ipl: use octal values instead of S_* macros (jsc#PED-2023).
- commit db2ef83</changelog>
  <changelog author="mfranc@suse.cz" date="1694606405">- s390/ipl: add DEFINE_GENERIC_LOADPARM() (jsc#PED-2023).
- commit cd6d27a</changelog>
  <changelog author="mfranc@suse.cz" date="1694606406">- s390/ipl: add loadparm parameter to eckd ipl/reipl data
  (jsc#PED-2023).
- commit 364a30d</changelog>
  <changelog author="mkubecek@suse.cz" date="1694692800">- sctp: leave the err path free in sctp_stream_init to
  sctp_stream_free (CVE-2023-2177 bsc#1210643).
- commit 337b7d8</changelog>
  <changelog author="mkubecek@suse.cz" date="1694779200">- netfilter: nftables: exthdr: fix 4-byte stack OOB write
  (CVE-2023-4881 bsc#1215221).
- commit 0de26c1</changelog>
  <changelog author="jgross@suse.com" date="1694865600">- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due
  to race condition (bsc#1215206, CVE-2023-1859).
- commit f333aa7</changelog>
  <changelog author="wqu@suse.com" date="1695038400">- btrfs: don't hold CPU for too long when defragging a file
  (bsc#1214988).
- commit 9b89645</changelog>
  <changelog author="tiwai@suse.de" date="1695038401">- ata: libata: disallow dev-initiated LPM transitions to
  unsupported states (git-fixes).
- i2c: aspeed: Reset the i2c controller when timeout occurs
  (git-fixes).
- selftests: tracing: Fix to unmount tracefs for recovering
  environment (git-fixes).
- drm/amd/display: fix the white screen issue when &gt;= 64GB DRAM
  (git-fixes).
- drm: gm12u320: Fix the timeout usage for usb_bulk_msg()
  (git-fixes).
- commit 1f4e814</changelog>
  <changelog author="tzimmermann@suse.com" date="1695038402">- blacklist.conf: Append 'parisc/agp: Annotate parisc agp init functions with __init'
- commit 9eb45cc</changelog>
  <changelog author="tzimmermann@suse.com" date="1695038403">- blacklist.conf: Append 'parisc: Flush gatt writes and adjust gatt mask in parisc_agp_mask_memory()'
- commit 30a9db6</changelog>
  <changelog author="tzimmermann@suse.com" date="1695038404">- blacklist.conf: Append 'video/aperture: Only remove sysfb on the default vga pci device'
- commit bfaaaff</changelog>
  <changelog author="tzimmermann@suse.com" date="1695038405">- blacklist.conf: Append 'Revert "fbcon: Use kzalloc() in fbcon_prepare_logo()"'
- commit 501bd2e</changelog>
  <changelog author="osalvador@suse.de" date="1695038406">- Rename colliding patches before merging SLE15-SP4
- commit 6493f7c</changelog>
  <changelog author="jkosina@suse.cz" date="1695297600">- USB: core: Change usb_get_device_descriptor() API (bsc#1213123
  CVE-2023-37453 bsc#1215553 bsc#1215522 bsc#1215552).
  Refresh patches.suse/USB-core-Fix-race-by-not-overwriting-udev-descriptor.patch (add missing hunk)
  Refresh patches.suse/USB-core-Fix-oversight-in-SuperSpeed-initialization.patch (context)
- commit 988a527</changelog>
  <changelog author="osalvador@suse.de" date="1695297601">- Drop amdgpu patch causing spamming (bsc#1215523)
  Deleted:
  patches.suse/drm-amdgpu-install-stub-fence-into-potential-unused-.patch.
- commit c753869</changelog>
  <changelog author="osalvador@suse.de" date="1695384000">- x86/sev: Make enc_dec_hypercall() accept a size instead of
  npages (bsc#1214635).
- commit 1e4ccee</changelog>
</package>
<package pkgid="b6a783ef44ea49fb500fb96b8dbb44f84982f5e20fb452ca5aa6863b85f8d934" name="kernel-rt" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.13.21.1"/>
  <changelog author="pmladek@suse.com" date="1696248000">- printk: ringbuffer: Fix truncating buffer size min_t cast
  (bsc#1215875).
- commit e0d3999</changelog>
  <changelog author="pmladek@suse.com" date="1696248001">- blacklist.conf: printk: the changes look good but they do not fix
  any serious problem
- commit c560ceb</changelog>
  <changelog author="pmladek@suse.com" date="1696248002">- blacklist.conf: workqueue: Code refactoring
- commit e204334</changelog>
  <changelog author="pmladek@suse.com" date="1696248003">- blacklist.conf: workqueue: compiler warning on 32-bit systems with
  Clang (bsc#1215877)
- commit b7e65aa</changelog>
  <changelog author="mkubecek@suse.cz" date="1696334400">- tcp: Reduce chance of collisions in inet6_hashfn()
  (CVE-2023-1206 bsc#1212703).
- commit e3ebd17</changelog>
  <changelog author="mkubecek@suse.cz" date="1696334401">- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro
  for ip_set_hash_netportnet.c (CVE-2023-42753 bsc#1215150).
- commit 7a6be79</changelog>
  <changelog author="mfranc@suse.cz" date="1696334402">- KVM: s390: vsie: Fix the initialization of the epoch extension
  (epdx) field (git-fixes bsc#1215894).
- commit 9c5bbd7</changelog>
  <changelog author="mfranc@suse.cz" date="1696334403">- KVM: s390: vsie: fix the length of APCB bitmap (git-fixes
  bsc#1215895).
- commit 9ff1a1e</changelog>
  <changelog author="mfranc@suse.cz" date="1696334404">- KVM: s390: interrupt: use READ_ONCE() before cmpxchg()
  (git-fixes bsc#1215896).
- commit 8726736</changelog>
  <changelog author="mfranc@suse.cz" date="1696334405">- blacklist.conf: kABi breakage (vmalloc)
- commit 10bad47</changelog>
  <changelog author="palcantara@suse.de" date="1696334406">- fs/smb/client: Reset password pointer to NULL (bsc#1215899
  CVE-2023-5345).
- commit 679511d</changelog>
  <changelog author="mfranc@suse.cz" date="1696334407">- KVM: s390/diag: fix racy access of physical cpu number in diag
  9c handler (git-fixes bsc#1215911).
- commit 6454286</changelog>
  <changelog author="mfranc@suse.cz" date="1696334408">- KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes
  (git-fixes bsc#1215915).
- commit fe7fbfc</changelog>
  <changelog author="jdelvare@suse.de" date="1696334409">- btrfs: fix root ref counts in error handling in
  btrfs_get_root_ref (bsc#1214351 CVE-2023-4389).
- commit 3731029</changelog>
  <changelog author="mfranc@suse.cz" date="1696334410">- KVM: s390: pv: fix external interruption loop not always
  detected (git-fixes bsc#1215916).
- commit f1893aa</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420800">- ipv4: fix null-deref in ipv4_link_failure (CVE-2023-42754
  bsc#1215467).
- commit ad87dd3</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420801">- netfilter: xt_u32: validate user space input (CVE-2023-39192
  bsc#1215858).
- commit 292c059</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420802">- netfilter: xt_sctp: validate the flag_info count (CVE-2023-39193
  bsc#1215860).
- commit 5ec24b7</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420803">- net: xfrm: Fix xfrm_address_filter OOB read (CVE-2023-39194
  bsc#1215861).
- commit 55308cb</changelog>
  <changelog author="mfranc@suse.cz" date="1696420804">- scsi: zfcp: Fix a double put in zfcp_port_enqueue() (git-fixes
  bsc#1215941).
- commit a62865f</changelog>
</package>
<package pkgid="e8aec2aac1b612ad2953298e26a38b6cc3834bce4813b5ada63e5fd73fcfb67b" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.13.21.1"/>
  <changelog author="pmladek@suse.com" date="1696248000">- printk: ringbuffer: Fix truncating buffer size min_t cast
  (bsc#1215875).
- commit e0d3999</changelog>
  <changelog author="pmladek@suse.com" date="1696248001">- blacklist.conf: printk: the changes look good but they do not fix
  any serious problem
- commit c560ceb</changelog>
  <changelog author="pmladek@suse.com" date="1696248002">- blacklist.conf: workqueue: Code refactoring
- commit e204334</changelog>
  <changelog author="pmladek@suse.com" date="1696248003">- blacklist.conf: workqueue: compiler warning on 32-bit systems with
  Clang (bsc#1215877)
- commit b7e65aa</changelog>
  <changelog author="mkubecek@suse.cz" date="1696334400">- tcp: Reduce chance of collisions in inet6_hashfn()
  (CVE-2023-1206 bsc#1212703).
- commit e3ebd17</changelog>
  <changelog author="mkubecek@suse.cz" date="1696334401">- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro
  for ip_set_hash_netportnet.c (CVE-2023-42753 bsc#1215150).
- commit 7a6be79</changelog>
  <changelog author="mfranc@suse.cz" date="1696334402">- KVM: s390: vsie: Fix the initialization of the epoch extension
  (epdx) field (git-fixes bsc#1215894).
- commit 9c5bbd7</changelog>
  <changelog author="mfranc@suse.cz" date="1696334403">- KVM: s390: vsie: fix the length of APCB bitmap (git-fixes
  bsc#1215895).
- commit 9ff1a1e</changelog>
  <changelog author="mfranc@suse.cz" date="1696334404">- KVM: s390: interrupt: use READ_ONCE() before cmpxchg()
  (git-fixes bsc#1215896).
- commit 8726736</changelog>
  <changelog author="mfranc@suse.cz" date="1696334405">- blacklist.conf: kABi breakage (vmalloc)
- commit 10bad47</changelog>
  <changelog author="palcantara@suse.de" date="1696334406">- fs/smb/client: Reset password pointer to NULL (bsc#1215899
  CVE-2023-5345).
- commit 679511d</changelog>
  <changelog author="mfranc@suse.cz" date="1696334407">- KVM: s390/diag: fix racy access of physical cpu number in diag
  9c handler (git-fixes bsc#1215911).
- commit 6454286</changelog>
  <changelog author="mfranc@suse.cz" date="1696334408">- KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes
  (git-fixes bsc#1215915).
- commit fe7fbfc</changelog>
  <changelog author="jdelvare@suse.de" date="1696334409">- btrfs: fix root ref counts in error handling in
  btrfs_get_root_ref (bsc#1214351 CVE-2023-4389).
- commit 3731029</changelog>
  <changelog author="mfranc@suse.cz" date="1696334410">- KVM: s390: pv: fix external interruption loop not always
  detected (git-fixes bsc#1215916).
- commit f1893aa</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420800">- ipv4: fix null-deref in ipv4_link_failure (CVE-2023-42754
  bsc#1215467).
- commit ad87dd3</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420801">- netfilter: xt_u32: validate user space input (CVE-2023-39192
  bsc#1215858).
- commit 292c059</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420802">- netfilter: xt_sctp: validate the flag_info count (CVE-2023-39193
  bsc#1215860).
- commit 5ec24b7</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420803">- net: xfrm: Fix xfrm_address_filter OOB read (CVE-2023-39194
  bsc#1215861).
- commit 55308cb</changelog>
  <changelog author="mfranc@suse.cz" date="1696420804">- scsi: zfcp: Fix a double put in zfcp_port_enqueue() (git-fixes
  bsc#1215941).
- commit a62865f</changelog>
</package>
<package pkgid="f991228cdf56609520c9d8b2d843232dbcff03050270482b9645947ce19a083e" name="kernel-rt" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.13.24.1"/>
  <changelog author="jwiesner@suse.de" date="1697803200">- bonding: do not assume skb mac_header is set (bsc#1214754).
- commit 88b9ad7</changelog>
  <changelog author="jwiesner@suse.de" date="1697803201">- bonding: Return pointer to data after pull on skb (bsc#1214754).
- commit fbbe7cc</changelog>
  <changelog author="tiwai@suse.de" date="1697889600">- ACPI: irq: Fix incorrect return value in acpi_register_gsi()
  (git-fixes).
- Revert "pinctrl: avoid unsafe code pattern in find_pinctrl()"
  (git-fixes).
- mtd: rawnand: qcom: Unmap the right resource upon probe failure
  (git-fixes).
- mtd: rawnand: pl353: Ensure program page operations are
  successful (git-fixes).
- mtd: rawnand: arasan: Ensure program page operations are
  successful (git-fixes).
- mtd: spinand: micron: correct bitmask for ecc status
  (git-fixes).
- mtd: physmap-core: Restore map_rom fallback (git-fixes).
- mtd: rawnand: marvell: Ensure program page operations are
  successful (git-fixes).
- mmc: mtk-sd: Use readl_poll_timeout_atomic in msdc_reset_hw
  (git-fixes).
- mmc: core: sdio: hold retuning if sdio in 1-bit mode
  (git-fixes).
- ASoC: codecs: wcd938x-sdw: fix runtime PM imbalance on probe
  errors (git-fixes).
- ASoC: codecs: wcd938x-sdw: fix use after free on driver unbind
  (git-fixes).
- ASoC: codecs: wcd938x: fix unbind tear down order (git-fixes).
- ASoC: codecs: wcd938x: drop bogus bind error handling
  (git-fixes).
- ASoC: pxa: fix a memory leak in probe() (git-fixes).
- drm/i915: Retry gtt fault when out of fence registers
  (git-fixes).
- commit 766bf5d</changelog>
  <changelog author="mfranc@suse.cz" date="1698062400">- s390/cio: fix a memleak in css_alloc_subchannel (git-fixes
  bsc#1216510).
- commit d475feb</changelog>
  <changelog author="mfranc@suse.cz" date="1698062401">- s390/pci: fix iommu bitmap allocation (git-fixes bsc#1216511).
- commit 2bb6835</changelog>
  <changelog author="mfranc@suse.cz" date="1698062402">- KVM: s390: fix gisa destroy operation might lead to cpu stalls
  (git-fixes bsc#1216512).
- commit 3976fa9</changelog>
  <changelog author="oneukum@suse.com" date="1698148800">- Update
  patches.suse/USB-ene_usb6250-Allocate-enough-memory-for-full-obje.patch
  (bsc#1216051 CVE-2023-45862).
  Retroactively recognized as a security issue
- commit 716929e</changelog>
  <changelog author="mgorman@suse.de" date="1698148801">- Refresh arm64 -rt test config files.
- commit 7274c6e</changelog>
  <changelog author="tiwai@suse.de" date="1698148802">- ubi: Refuse attaching if mtd's erasesize is 0 (CVE-2023-31085
  bsc#1210778).
- commit 86e05f1</changelog>
  <changelog author="mwilck@suse.com" date="1698148803">- nvme-fc: Prevent null pointer dereference in
  nvme_fc_io_getuuid() (bsc#1214842).
- commit 3b513db</changelog>
  <changelog author="lduncan@suse.com" date="1698148804">- blacklist.conf: added two commmits that break kabi
- commit fdf2030</changelog>
  <changelog author="lduncan@suse.com" date="1698148805">- scsi: iscsi_tcp: restrict to TCP sockets (git-fixes).
- scsi: pm8001: Setup IRQs on resume (git-fixes).
- scsi: mpt3sas: Perform additional retries if doorbell read
  returns 0 (git-fixes).
- scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock
  (git-fixes).
- scsi: qedf: Do not touch __user pointer in
  qedf_dbg_fp_int_cmd_read() directly (git-fixes).
- scsi: qedf: Do not touch __user pointer in
  qedf_dbg_debug_cmd_read() directly (git-fixes).
- scsi: qedf: Do not touch __user pointer in
  qedf_dbg_stop_io_on_error_cmd_read() directly (git-fixes).
- scsi: qla4xxx: Add length check when parsing nlattrs
  (git-fixes).
- scsi: be2iscsi: Add length check when parsing nlattrs
  (git-fixes).
- scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param()
  (git-fixes).
- scsi: iscsi: Add length check for nlattr payload (git-fixes).
- scsi: qedi: Fix potential deadlock on &amp;qedi_percpu-&gt;p_work_lock
  (git-fixes).
- scsi: mpi3mr: Propagate sense data for admin queue SCSI I/O
  (git-fixes).
- net: use sk_is_tcp() in more places (git-fixes).
- commit 24cbf21</changelog>
  <changelog author="ohering@suse.de" date="1698321600">- x86/mm: Print the encryption features correctly when a paravisor
  is present (bsc#1206453).
- commit d1a6274</changelog>
  <changelog author="tiwai@suse.de" date="1698321601">- phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins
  (git-fixes).
- phy: mapphone-mdm6600: Fix runtime PM for remove (git-fixes).
- phy: mapphone-mdm6600: Fix runtime disable on probe (git-fixes).
- gpio: vf610: set value before the direction to avoid a glitch
  (git-fixes).
- platform/surface: platform_profile: Propagate error if profile
  registration fails (git-fixes).
- platform/x86: asus-wmi: Map 0x2a code, Ignore 0x2b and 0x2c
  events (git-fixes).
- platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from
  0x20 to 0x2e (git-fixes).
- USB: serial: option: add Fibocom to DELL custom modem FM101R-GL
  (git-fixes).
- USB: serial: option: add entry for Sierra EM9191 with new
  firmware (git-fixes).
- USB: serial: option: add Telit LE910C4-WWX 0x1035 composition
  (git-fixes).
- mmc: core: Capture correct oemid-bits for eMMC cards
  (git-fixes).
- Bluetooth: hci_sock: Correctly bounds check and pad
  HCI_MON_NEW_INDEX name (git-fixes).
- Bluetooth: avoid memcmp() out of bounds warning (git-fixes).
- Bluetooth: hci_sock: fix slab oob read in create_monitor_event
  (git-fixes).
- Bluetooth: hci_event: Fix coding style (git-fixes).
- Bluetooth: Reject connection with the device which has same
  BD_ADDR (git-fixes).
- Bluetooth: vhci: Fix race when opening vhci device (git-fixes).
- platform/x86: touchscreen_dmi: Add info for the Positivo C4128B
  (git-fixes).
- drm: panel-orientation-quirks: Add quirk for One Mix 2S
  (git-fixes).
- HID: multitouch: Add required quirk for Synaptics 0xcd7e device
  (git-fixes).
- HID: holtek: fix slab-out-of-bounds Write in
  holtek_kbd_input_event (git-fixes).
- wifi: cfg80211: avoid leaking stack data into trace (git-fixes).
- wifi: mac80211: allow transmitting EAPOL frames with tainted
  key (git-fixes).
- wifi: cfg80211: Fix 6GHz scan configuration (git-fixes).
- wifi: iwlwifi: Ensure ack flag is properly cleared (git-fixes).
- wifi: mwifiex: Sanity check tlv_len and tlv_bitmap_len
  (git-fixes).
- Bluetooth: Avoid redundant authentication (git-fixes).
- Bluetooth: btusb: add shutdown function for QCA6174 (git-fixes).
- i2c: mux: Avoid potential false error message in
  i2c_mux_add_adapter (git-fixes).
- gpio: timberdale: Fix potential deadlock on &amp;tgpio-&gt;lock
  (git-fixes).
- commit b480af6</changelog>
  <changelog author="tiwai@suse.de" date="1698321602">- ALSA: hda/realtek - Fixed ASUS platform headset Mic issue
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GU603ZV (git-fixes).
- ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq5xxx
  (git-fixes).
- drm/mediatek: Correctly free sg_table in gem prime vmap
  (git-fixes).
- drm/amd/pm: add unique_id for gc 11.0.3 (git-fixes).
- commit ad38bcf</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321603">- x86/sev: Disable MMIO emulation from user mode (bsc#1212649).
- commit 5dae47e</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321604">- x86/sev: Check IOBM for IOIO exceptions from user-space
  (bsc#1212649).
- commit 2b69036</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321605">- x86/sev: Check for user-space IOIO pointing to kernel space
  (bsc#1212649).
- commit 816f817</changelog>
  <changelog author="spradhan@suse.de" date="1698321606">- btrfs: don't start transaction for scrub if the fs is mounted read-only (bsc#1214874).
- commit cc8e6f1</changelog>
  <changelog author="neilb@suse.de" date="1698408000">- remove unnecessary WARN_ON_ONCE() (bsc#1214823).
- NFSD: Never call nfsd_file_gc() in foreground paths
  (bsc#1215545).
- commit d81dfc3</changelog>
</package>
<package pkgid="76832cb83b2964a0ed8c0606b651b569b8c18c9d396cda072f20f2b1493ca6b0" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.13.24.1"/>
  <changelog author="jwiesner@suse.de" date="1697803200">- bonding: do not assume skb mac_header is set (bsc#1214754).
- commit 88b9ad7</changelog>
  <changelog author="jwiesner@suse.de" date="1697803201">- bonding: Return pointer to data after pull on skb (bsc#1214754).
- commit fbbe7cc</changelog>
  <changelog author="tiwai@suse.de" date="1697889600">- ACPI: irq: Fix incorrect return value in acpi_register_gsi()
  (git-fixes).
- Revert "pinctrl: avoid unsafe code pattern in find_pinctrl()"
  (git-fixes).
- mtd: rawnand: qcom: Unmap the right resource upon probe failure
  (git-fixes).
- mtd: rawnand: pl353: Ensure program page operations are
  successful (git-fixes).
- mtd: rawnand: arasan: Ensure program page operations are
  successful (git-fixes).
- mtd: spinand: micron: correct bitmask for ecc status
  (git-fixes).
- mtd: physmap-core: Restore map_rom fallback (git-fixes).
- mtd: rawnand: marvell: Ensure program page operations are
  successful (git-fixes).
- mmc: mtk-sd: Use readl_poll_timeout_atomic in msdc_reset_hw
  (git-fixes).
- mmc: core: sdio: hold retuning if sdio in 1-bit mode
  (git-fixes).
- ASoC: codecs: wcd938x-sdw: fix runtime PM imbalance on probe
  errors (git-fixes).
- ASoC: codecs: wcd938x-sdw: fix use after free on driver unbind
  (git-fixes).
- ASoC: codecs: wcd938x: fix unbind tear down order (git-fixes).
- ASoC: codecs: wcd938x: drop bogus bind error handling
  (git-fixes).
- ASoC: pxa: fix a memory leak in probe() (git-fixes).
- drm/i915: Retry gtt fault when out of fence registers
  (git-fixes).
- commit 766bf5d</changelog>
  <changelog author="mfranc@suse.cz" date="1698062400">- s390/cio: fix a memleak in css_alloc_subchannel (git-fixes
  bsc#1216510).
- commit d475feb</changelog>
  <changelog author="mfranc@suse.cz" date="1698062401">- s390/pci: fix iommu bitmap allocation (git-fixes bsc#1216511).
- commit 2bb6835</changelog>
  <changelog author="mfranc@suse.cz" date="1698062402">- KVM: s390: fix gisa destroy operation might lead to cpu stalls
  (git-fixes bsc#1216512).
- commit 3976fa9</changelog>
  <changelog author="oneukum@suse.com" date="1698148800">- Update
  patches.suse/USB-ene_usb6250-Allocate-enough-memory-for-full-obje.patch
  (bsc#1216051 CVE-2023-45862).
  Retroactively recognized as a security issue
- commit 716929e</changelog>
  <changelog author="mgorman@suse.de" date="1698148801">- Refresh arm64 -rt test config files.
- commit 7274c6e</changelog>
  <changelog author="tiwai@suse.de" date="1698148802">- ubi: Refuse attaching if mtd's erasesize is 0 (CVE-2023-31085
  bsc#1210778).
- commit 86e05f1</changelog>
  <changelog author="mwilck@suse.com" date="1698148803">- nvme-fc: Prevent null pointer dereference in
  nvme_fc_io_getuuid() (bsc#1214842).
- commit 3b513db</changelog>
  <changelog author="lduncan@suse.com" date="1698148804">- blacklist.conf: added two commmits that break kabi
- commit fdf2030</changelog>
  <changelog author="lduncan@suse.com" date="1698148805">- scsi: iscsi_tcp: restrict to TCP sockets (git-fixes).
- scsi: pm8001: Setup IRQs on resume (git-fixes).
- scsi: mpt3sas: Perform additional retries if doorbell read
  returns 0 (git-fixes).
- scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock
  (git-fixes).
- scsi: qedf: Do not touch __user pointer in
  qedf_dbg_fp_int_cmd_read() directly (git-fixes).
- scsi: qedf: Do not touch __user pointer in
  qedf_dbg_debug_cmd_read() directly (git-fixes).
- scsi: qedf: Do not touch __user pointer in
  qedf_dbg_stop_io_on_error_cmd_read() directly (git-fixes).
- scsi: qla4xxx: Add length check when parsing nlattrs
  (git-fixes).
- scsi: be2iscsi: Add length check when parsing nlattrs
  (git-fixes).
- scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param()
  (git-fixes).
- scsi: iscsi: Add length check for nlattr payload (git-fixes).
- scsi: qedi: Fix potential deadlock on &amp;qedi_percpu-&gt;p_work_lock
  (git-fixes).
- scsi: mpi3mr: Propagate sense data for admin queue SCSI I/O
  (git-fixes).
- net: use sk_is_tcp() in more places (git-fixes).
- commit 24cbf21</changelog>
  <changelog author="ohering@suse.de" date="1698321600">- x86/mm: Print the encryption features correctly when a paravisor
  is present (bsc#1206453).
- commit d1a6274</changelog>
  <changelog author="tiwai@suse.de" date="1698321601">- phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins
  (git-fixes).
- phy: mapphone-mdm6600: Fix runtime PM for remove (git-fixes).
- phy: mapphone-mdm6600: Fix runtime disable on probe (git-fixes).
- gpio: vf610: set value before the direction to avoid a glitch
  (git-fixes).
- platform/surface: platform_profile: Propagate error if profile
  registration fails (git-fixes).
- platform/x86: asus-wmi: Map 0x2a code, Ignore 0x2b and 0x2c
  events (git-fixes).
- platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from
  0x20 to 0x2e (git-fixes).
- USB: serial: option: add Fibocom to DELL custom modem FM101R-GL
  (git-fixes).
- USB: serial: option: add entry for Sierra EM9191 with new
  firmware (git-fixes).
- USB: serial: option: add Telit LE910C4-WWX 0x1035 composition
  (git-fixes).
- mmc: core: Capture correct oemid-bits for eMMC cards
  (git-fixes).
- Bluetooth: hci_sock: Correctly bounds check and pad
  HCI_MON_NEW_INDEX name (git-fixes).
- Bluetooth: avoid memcmp() out of bounds warning (git-fixes).
- Bluetooth: hci_sock: fix slab oob read in create_monitor_event
  (git-fixes).
- Bluetooth: hci_event: Fix coding style (git-fixes).
- Bluetooth: Reject connection with the device which has same
  BD_ADDR (git-fixes).
- Bluetooth: vhci: Fix race when opening vhci device (git-fixes).
- platform/x86: touchscreen_dmi: Add info for the Positivo C4128B
  (git-fixes).
- drm: panel-orientation-quirks: Add quirk for One Mix 2S
  (git-fixes).
- HID: multitouch: Add required quirk for Synaptics 0xcd7e device
  (git-fixes).
- HID: holtek: fix slab-out-of-bounds Write in
  holtek_kbd_input_event (git-fixes).
- wifi: cfg80211: avoid leaking stack data into trace (git-fixes).
- wifi: mac80211: allow transmitting EAPOL frames with tainted
  key (git-fixes).
- wifi: cfg80211: Fix 6GHz scan configuration (git-fixes).
- wifi: iwlwifi: Ensure ack flag is properly cleared (git-fixes).
- wifi: mwifiex: Sanity check tlv_len and tlv_bitmap_len
  (git-fixes).
- Bluetooth: Avoid redundant authentication (git-fixes).
- Bluetooth: btusb: add shutdown function for QCA6174 (git-fixes).
- i2c: mux: Avoid potential false error message in
  i2c_mux_add_adapter (git-fixes).
- gpio: timberdale: Fix potential deadlock on &amp;tgpio-&gt;lock
  (git-fixes).
- commit b480af6</changelog>
  <changelog author="tiwai@suse.de" date="1698321602">- ALSA: hda/realtek - Fixed ASUS platform headset Mic issue
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GU603ZV (git-fixes).
- ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq5xxx
  (git-fixes).
- drm/mediatek: Correctly free sg_table in gem prime vmap
  (git-fixes).
- drm/amd/pm: add unique_id for gc 11.0.3 (git-fixes).
- commit ad38bcf</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321603">- x86/sev: Disable MMIO emulation from user mode (bsc#1212649).
- commit 5dae47e</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321604">- x86/sev: Check IOBM for IOIO exceptions from user-space
  (bsc#1212649).
- commit 2b69036</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321605">- x86/sev: Check for user-space IOIO pointing to kernel space
  (bsc#1212649).
- commit 816f817</changelog>
  <changelog author="spradhan@suse.de" date="1698321606">- btrfs: don't start transaction for scrub if the fs is mounted read-only (bsc#1214874).
- commit cc8e6f1</changelog>
  <changelog author="neilb@suse.de" date="1698408000">- remove unnecessary WARN_ON_ONCE() (bsc#1214823).
- NFSD: Never call nfsd_file_gc() in foreground paths
  (bsc#1215545).
- commit d81dfc3</changelog>
</package>
<package pkgid="8d9d04c5ebd2a5887877fcd8ba08e392e452ecaa928b010746676047f407ee76" name="kernel-rt" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.13.27.2"/>
  <changelog author="ailiop@suse.com" date="1701518400">- xfs: convert buffer flags to unsigned (git-fixes).
- commit 6147a1c</changelog>
  <changelog author="ailiop@suse.com" date="1701518401">- xfs: convert attr type flags to unsigned (git-fixes).
- commit c641f4d</changelog>
  <changelog author="ailiop@suse.com" date="1701518402">- xfs: convert scrub type flags to unsigned (git-fixes).
- commit c3c7c82</changelog>
  <changelog author="ailiop@suse.com" date="1701518403">- xfs: convert bmap extent type flags to unsigned (git-fixes).
- commit 30fead3</changelog>
  <changelog author="ailiop@suse.com" date="1701518404">- xfs: convert bmapi flags to unsigned (git-fixes).
- commit 1ec6360</changelog>
  <changelog author="ailiop@suse.com" date="1701518405">- xfs: convert AGF log flags to unsigned (git-fixes).
- commit 91cefbb</changelog>
  <changelog author="ailiop@suse.com" date="1701518406">- xfs: convert AGI log flags to unsigned (git-fixes).
- commit 66d955b</changelog>
  <changelog author="ailiop@suse.com" date="1701518407">- xfs: convert btree buffer log flags to unsigned (git-fixes).
- commit ced67a9</changelog>
  <changelog author="ailiop@suse.com" date="1701518408">- xfs: convert buffer log item flags to unsigned (git-fixes).
- commit d4d0c9c</changelog>
  <changelog author="ailiop@suse.com" date="1701518409">- xfs: convert da btree operations flags to unsigned (git-fixes).
- commit 41198d9</changelog>
  <changelog author="ailiop@suse.com" date="1701518410">- xfs: convert dquot flags to unsigned (git-fixes).
- commit 1630213</changelog>
  <changelog author="ailiop@suse.com" date="1701518411">- xfs: convert log item tracepoint flags to unsigned (git-fixes).
- commit 411032a</changelog>
  <changelog author="ailiop@suse.com" date="1701518412">- xfs: convert inode lock flags to unsigned (git-fixes).
- commit 831f7e2</changelog>
  <changelog author="ailiop@suse.com" date="1701518413">- xfs: convert quota options flags to unsigned (git-fixes).
- commit 7dfe466</changelog>
  <changelog author="ailiop@suse.com" date="1701518414">- xfs: convert log ticket and iclog flags to unsigned (git-fixes).
- commit 57245d3</changelog>
  <changelog author="tiwai@suse.de" date="1701604800">- firewire: core: fix possible memory leak in create_units()
  (git-fixes).
- commit 0ade49c</changelog>
  <changelog author="tiwai@suse.de" date="1701691200">- USB: serial: option: add Luat Air72*U series products
  (git-fixes).
- USB: serial: option: add Fibocom L7xx modules (git-fixes).
- USB: serial: option: don't claim interface 4 for ZTE MF290
  (git-fixes).
- ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CVA
  (git-fixes).
- commit 4c40fde</changelog>
  <changelog author="mfranc@suse.cz" date="1701691201">- blacklist.conf: this is true for SLE15-SP4 not SLE15-SP5
  The backport was provided in bsc#1215123 for SP5, but it has further
  dependencies not present in SP4, so unless requested by IBM, I'm going
  to skip it for git-fixes.
- commit 5219b23</changelog>
  <changelog author="msuchanek@suse.de" date="1701691202">- powerpc: Don't clobber f0/vs0 during fp|altivec register save
  (bsc#1217780).
- commit 46d31e2</changelog>
  <changelog author="mgorman@suse.de" date="1701777600">- Refresh -rt config files.
- commit d71b92e</changelog>
</package>
<package pkgid="fedc2bc20fe025e61b9f55fc43f64f1e2a88ea0016bc14914342c1b56cb7b834" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.13.27.2"/>
  <changelog author="ailiop@suse.com" date="1701518400">- xfs: convert buffer flags to unsigned (git-fixes).
- commit 6147a1c</changelog>
  <changelog author="ailiop@suse.com" date="1701518401">- xfs: convert attr type flags to unsigned (git-fixes).
- commit c641f4d</changelog>
  <changelog author="ailiop@suse.com" date="1701518402">- xfs: convert scrub type flags to unsigned (git-fixes).
- commit c3c7c82</changelog>
  <changelog author="ailiop@suse.com" date="1701518403">- xfs: convert bmap extent type flags to unsigned (git-fixes).
- commit 30fead3</changelog>
  <changelog author="ailiop@suse.com" date="1701518404">- xfs: convert bmapi flags to unsigned (git-fixes).
- commit 1ec6360</changelog>
  <changelog author="ailiop@suse.com" date="1701518405">- xfs: convert AGF log flags to unsigned (git-fixes).
- commit 91cefbb</changelog>
  <changelog author="ailiop@suse.com" date="1701518406">- xfs: convert AGI log flags to unsigned (git-fixes).
- commit 66d955b</changelog>
  <changelog author="ailiop@suse.com" date="1701518407">- xfs: convert btree buffer log flags to unsigned (git-fixes).
- commit ced67a9</changelog>
  <changelog author="ailiop@suse.com" date="1701518408">- xfs: convert buffer log item flags to unsigned (git-fixes).
- commit d4d0c9c</changelog>
  <changelog author="ailiop@suse.com" date="1701518409">- xfs: convert da btree operations flags to unsigned (git-fixes).
- commit 41198d9</changelog>
  <changelog author="ailiop@suse.com" date="1701518410">- xfs: convert dquot flags to unsigned (git-fixes).
- commit 1630213</changelog>
  <changelog author="ailiop@suse.com" date="1701518411">- xfs: convert log item tracepoint flags to unsigned (git-fixes).
- commit 411032a</changelog>
  <changelog author="ailiop@suse.com" date="1701518412">- xfs: convert inode lock flags to unsigned (git-fixes).
- commit 831f7e2</changelog>
  <changelog author="ailiop@suse.com" date="1701518413">- xfs: convert quota options flags to unsigned (git-fixes).
- commit 7dfe466</changelog>
  <changelog author="ailiop@suse.com" date="1701518414">- xfs: convert log ticket and iclog flags to unsigned (git-fixes).
- commit 57245d3</changelog>
  <changelog author="tiwai@suse.de" date="1701604800">- firewire: core: fix possible memory leak in create_units()
  (git-fixes).
- commit 0ade49c</changelog>
  <changelog author="tiwai@suse.de" date="1701691200">- USB: serial: option: add Luat Air72*U series products
  (git-fixes).
- USB: serial: option: add Fibocom L7xx modules (git-fixes).
- USB: serial: option: don't claim interface 4 for ZTE MF290
  (git-fixes).
- ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CVA
  (git-fixes).
- commit 4c40fde</changelog>
  <changelog author="mfranc@suse.cz" date="1701691201">- blacklist.conf: this is true for SLE15-SP4 not SLE15-SP5
  The backport was provided in bsc#1215123 for SP5, but it has further
  dependencies not present in SP4, so unless requested by IBM, I'm going
  to skip it for git-fixes.
- commit 5219b23</changelog>
  <changelog author="msuchanek@suse.de" date="1701691202">- powerpc: Don't clobber f0/vs0 during fp|altivec register save
  (bsc#1217780).
- commit 46d31e2</changelog>
  <changelog author="mgorman@suse.de" date="1701777600">- Refresh -rt config files.
- commit d71b92e</changelog>
</package>
<package pkgid="4f8e75001f33d9adb6a74bf8e470f67dfb7c6af548191b576e5d88ec4e6cdca4" name="kernel-rt" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.13.30.1"/>
  <changelog author="nik.borisov@suse.com" date="1704715200">- x86/CPU/AMD: Check vendor in the AMD microcode callback (git-fixes).
- commit 43e31d9</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715201">- x86/srso: Fix SBPB enablement for (possible) future fixed HW   (git-fixes).
- Refresh
  patches.suse/x86-srso-fix-vulnerability-reporting-for-missing-microcode.patch.
- commit b121d1d</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715202">- x86/srso: Add SRSO mitigation for Hygon processors (git-fixes).
- commit 7b8dfd1</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715203">- x86/smp: Use dedicated cache-line for mwait_play_dead() (git-fixes).
- commit 8087b92</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715204">- x86/alternatives: Disable KASAN in apply_alternatives() (git-fixes).
- commit 7029135</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715205">- x86/alternatives: Sync core before enabling interrupts (git-fixes).
- commit 4a0b72a</changelog>
  <changelog author="ailiop@suse.com" date="1704715206">- gfs2: Silence "suspicious RCU usage in gfs2_permission" warning
  (git-fixes).
- commit 3929c70</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715207">- x86/boot/compressed: Reserve more memory for page tables  (git-fixes).
- commit 6bf16e1</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715208">- x86/boot: Fix incorrect startup_gdt_descr.size (git-fixes).
- commit fdc98a7</changelog>
  <changelog author="pmladek@suse.com" date="1704715209">- vsprintf/kallsyms: Prevent invalid data when printing symbol
  (bsc#1217602).
- commit 8dab9cc</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715210">- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 (git-fixes).
- commit d74349c</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715211">- x86/cpu: Fix amd_check_microcode() declaration (git-fixes).
- Refresh patches.suse/x86-srso-set-cpuid-feature-bits-independently-of-bug-or-mitigation-status.patch.
- commit c22f4b4</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715212">- x86/fpu: Invalidate FPU state correctly on exec() (git-fixes).
- commit 7686df9</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715213">- x86/fpu/xstate: Prevent false-positive warning in __copy_xstate_uabi_buf() (git-fixes).
- commit 46d60b3</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715214">- x86/purgatory: Remove LTO flags (git-fixes).
- commit bbd4f84</changelog>
  <changelog author="palcantara@suse.de" date="1704715215">- smb: client: fix potential OOB in smb2_dump_detail()
  (bsc#1217946 CVE-2023-6610).
- commit cfca7f7</changelog>
  <changelog author="jroedel@suse.de" date="1704801600">- swiotlb: reduce the number of areas to match actual memory
  pool size (git-fixes).
- swiotlb: always set the number of areas before allocating the
  pool (git-fixes).
- swiotlb: fix debugfs reporting of reserved memory pools
  (git-fixes).
- swiotlb: fix a braino in the alignment check fix (bsc#1216559).
- swiotlb: fix slot alignment checks (bsc#1216559).
- swiotlb: fix the deadlock in swiotlb_do_find_slots (git-fixes).
- swiotlb: reduce the swiotlb buffer size on allocation failure
  (git-fixes).
- swiotlb: don't panic! (git-fixes).
- Revert "swiotlb: panic if nslabs is too small" (git-fixes).
- commit 1b89825</changelog>
  <changelog author="ohering@suse.de" date="1704801601">- io_uring/af_unix: disable sending io_uring over sockets
  (bsc#1218447, CVE-2023-6531).
- commit fdc256b</changelog>
  <changelog author="jroedel@suse.de" date="1704801602">- swiotlb: use the calculated number of areas (git-fixes).
- swiotlb: mark swiotlb_memblock_alloc() as __init (git-fixes).
- commit b9aedb4</changelog>
  <changelog author="mkoutny@suse.com" date="1704801603">- Update patches.kabi/kabi-fix-zone-unaccepted-memory.patch
  (jsc#PED-7167 bsc#1218643).
- commit f781e3d</changelog>
</package>
<package pkgid="bae0392ed3dc18bb9928d33b573ad19a598789302aca63bc0e5c169a561fd544" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.13.30.1"/>
  <changelog author="nik.borisov@suse.com" date="1704715200">- x86/CPU/AMD: Check vendor in the AMD microcode callback (git-fixes).
- commit 43e31d9</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715201">- x86/srso: Fix SBPB enablement for (possible) future fixed HW   (git-fixes).
- Refresh
  patches.suse/x86-srso-fix-vulnerability-reporting-for-missing-microcode.patch.
- commit b121d1d</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715202">- x86/srso: Add SRSO mitigation for Hygon processors (git-fixes).
- commit 7b8dfd1</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715203">- x86/smp: Use dedicated cache-line for mwait_play_dead() (git-fixes).
- commit 8087b92</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715204">- x86/alternatives: Disable KASAN in apply_alternatives() (git-fixes).
- commit 7029135</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715205">- x86/alternatives: Sync core before enabling interrupts (git-fixes).
- commit 4a0b72a</changelog>
  <changelog author="ailiop@suse.com" date="1704715206">- gfs2: Silence "suspicious RCU usage in gfs2_permission" warning
  (git-fixes).
- commit 3929c70</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715207">- x86/boot/compressed: Reserve more memory for page tables  (git-fixes).
- commit 6bf16e1</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715208">- x86/boot: Fix incorrect startup_gdt_descr.size (git-fixes).
- commit fdc98a7</changelog>
  <changelog author="pmladek@suse.com" date="1704715209">- vsprintf/kallsyms: Prevent invalid data when printing symbol
  (bsc#1217602).
- commit 8dab9cc</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715210">- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 (git-fixes).
- commit d74349c</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715211">- x86/cpu: Fix amd_check_microcode() declaration (git-fixes).
- Refresh patches.suse/x86-srso-set-cpuid-feature-bits-independently-of-bug-or-mitigation-status.patch.
- commit c22f4b4</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715212">- x86/fpu: Invalidate FPU state correctly on exec() (git-fixes).
- commit 7686df9</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715213">- x86/fpu/xstate: Prevent false-positive warning in __copy_xstate_uabi_buf() (git-fixes).
- commit 46d60b3</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715214">- x86/purgatory: Remove LTO flags (git-fixes).
- commit bbd4f84</changelog>
  <changelog author="palcantara@suse.de" date="1704715215">- smb: client: fix potential OOB in smb2_dump_detail()
  (bsc#1217946 CVE-2023-6610).
- commit cfca7f7</changelog>
  <changelog author="jroedel@suse.de" date="1704801600">- swiotlb: reduce the number of areas to match actual memory
  pool size (git-fixes).
- swiotlb: always set the number of areas before allocating the
  pool (git-fixes).
- swiotlb: fix debugfs reporting of reserved memory pools
  (git-fixes).
- swiotlb: fix a braino in the alignment check fix (bsc#1216559).
- swiotlb: fix slot alignment checks (bsc#1216559).
- swiotlb: fix the deadlock in swiotlb_do_find_slots (git-fixes).
- swiotlb: reduce the swiotlb buffer size on allocation failure
  (git-fixes).
- swiotlb: don't panic! (git-fixes).
- Revert "swiotlb: panic if nslabs is too small" (git-fixes).
- commit 1b89825</changelog>
  <changelog author="ohering@suse.de" date="1704801601">- io_uring/af_unix: disable sending io_uring over sockets
  (bsc#1218447, CVE-2023-6531).
- commit fdc256b</changelog>
  <changelog author="jroedel@suse.de" date="1704801602">- swiotlb: use the calculated number of areas (git-fixes).
- swiotlb: mark swiotlb_memblock_alloc() as __init (git-fixes).
- commit b9aedb4</changelog>
  <changelog author="mkoutny@suse.com" date="1704801603">- Update patches.kabi/kabi-fix-zone-unaccepted-memory.patch
  (jsc#PED-7167 bsc#1218643).
- commit f781e3d</changelog>
</package>
<package pkgid="9daf36c2ec19eb1295acb094f3f3ce2c070aacca868f73146cbfe89841669642" name="kernel-rt" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.13.35.1"/>
  <changelog author="ailiop@suse.com" date="1707220800">- fs: Fix error checking for d_hash_and_lookup() (git-fixes).
- commit b1a5e63</changelog>
  <changelog author="ailiop@suse.com" date="1707220801">- tracefs: Add missing lockdown check to tracefs_create_dir()
  (git-fixes).
- commit 36d0f04</changelog>
  <changelog author="ailiop@suse.com" date="1707220802">- fs: indicate request originates from old mount API (git-fixes).
- commit 8ccbbb1</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1707220803">- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
  (CVE-2024-1086 bsc#1219434).
- commit 5f917ff</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1707307200">- netfilter: nf_tables: check if catch-all set element is active
  in next generation (CVE-2024-1085 bsc#1219429).
- commit 7b3f4c4</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307201">- RAS: Introduce AMD Address Translation Library (jsc#PED-7618).
- commit d6ad6ba</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307202">- EDAC/amd64: Use new AMD Address Translation Library (jsc#PED-7618).
- commit f1baba4</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307203">- Documentation: RAS: Add index and address translation section (jsc#PED-7618).
- commit d6e1334</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307204">- RAS/AMD/ATL: Add MI300 support (jsc#PED-7618).
- commit 761e3c8</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307205">- RAS/AMD/ATL: Fix array overflow in get_logical_coh_st_fabric_id_mi300() (jsc#PED-7618).
- commit 83df5af</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307206">- RAS/AMD/ATL: Add MI300 DRAM to normalized address translation support (jsc#PED-7618).
- commit a26a502</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307207">- EDAC/amd64: Add MI300 row retirement support (jsc#PED-7618).
- commit fb688f3</changelog>
  <changelog author="vbabka@suse.cz" date="1707393600">- README.BRANCH: update branch name to cve/linux-5.14, update maintainers
  as requested
- commit 8e34879</changelog>
  <changelog author="vkarasulli@suse.de" date="1707393601">- Update
  patches.suse/Bluetooth-Fix-atomicity-violation-in-min-max-_key_si.patch
  (git-fixes bsc#1219608 CVE-2024-24860).
- commit dedfe8a</changelog>
  <changelog author="vkarasulli@suse.de" date="1707393602">- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
  (git-fixes bsc#1219608 CVE-2024-24860).
- commit a1186fd</changelog>
  <changelog author="neilb@suse.de" date="1707480000">- Refresh patches.suse/nfsd-fix-RELEASE_LOCKOWNER.patch.
  Accidentally removed nfs4_get_stateowner
- commit ad106c0</changelog>
  <changelog author="mkoutny@suse.com" date="1707480001">- README.BRANCH: Update cve/linux-5.14 maintainers
  Add myself to match SLE15-SP5 consumer + fix typo in branch name.
- commit da26653</changelog>
  <changelog author="jgross@suse.com" date="1707480002">- vhost: use kzalloc() instead of kmalloc() followed by memset()
  (CVE-2024-0340, bsc#1218689).
- commit 4c5a740</changelog>
  <changelog author="nik.borisov@suse.com" date="1707480003">- Refresh patches.suse/EDAC-amd64-Use-new-AMD-Address-Translation-Library.patch.
  Fix build due to incomplete line removal
- commit 720d084</changelog>
  <changelog author="ykaukab@suse.de" date="1707652800">- Refresh patches.suse/EDAC-amd64-Use-new-AMD-Address-Translation-Library.patch.
  Fix following error when building kvmsmall config by removing left over
  declaration:
  [  216s] In file included from ../arch/x86/kernel/cpu/mce/core.c:52:0:
  [  216s] ../arch/x86/include/asm/mce.h:366:1: error: duplicate 'static'
  [  216s]  static inline void mce_hygon_feature_init(struct cpuinfo_x86 *c) { return mce_amd_feature_init(c); }
  [  216s]  ^~~~~~
  [  216s] ../arch/x86/include/asm/mce.h:366:15: error: two or more data types in declaration specifiers
  [  216s]  static inline void mce_hygon_feature_init(struct cpuinfo_x86 *c) { return mce_amd_feature_init(c); }
  [  216s]                ^~~~
  [  216s] ../arch/x86/include/asm/mce.h: In function 'mce_hygon_feature_init':
  [  216s] ../arch/x86/include/asm/mce.h:366:75: error: void value not ignored as it ought to be
  [  216s]  static inline void mce_hygon_feature_init(struct cpuinfo_x86 *c) { return mce_amd_feature_init(c); }
  [  216s]                                                                            ^~~~~~~~~~~~~~~~~~~~~~~
  [  216s] ../arch/x86/include/asm/mce.h:366:50: error: control reaches end of non-void function [-Werror=return-type]
  [  216s]  static inline void mce_hygon_feature_init(struct cpuinfo_x86 *c) { return mce_amd_feature_init(c); }
- commit 7015e17</changelog>
</package>
<package pkgid="9793f49555a27cbed25b5531fa830c3b618363b668c7b2f7f4b58a703eb5e81e" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.13.35.1"/>
  <changelog author="ailiop@suse.com" date="1707220800">- fs: Fix error checking for d_hash_and_lookup() (git-fixes).
- commit b1a5e63</changelog>
  <changelog author="ailiop@suse.com" date="1707220801">- tracefs: Add missing lockdown check to tracefs_create_dir()
  (git-fixes).
- commit 36d0f04</changelog>
  <changelog author="ailiop@suse.com" date="1707220802">- fs: indicate request originates from old mount API (git-fixes).
- commit 8ccbbb1</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1707220803">- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
  (CVE-2024-1086 bsc#1219434).
- commit 5f917ff</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1707307200">- netfilter: nf_tables: check if catch-all set element is active
  in next generation (CVE-2024-1085 bsc#1219429).
- commit 7b3f4c4</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307201">- RAS: Introduce AMD Address Translation Library (jsc#PED-7618).
- commit d6ad6ba</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307202">- EDAC/amd64: Use new AMD Address Translation Library (jsc#PED-7618).
- commit f1baba4</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307203">- Documentation: RAS: Add index and address translation section (jsc#PED-7618).
- commit d6e1334</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307204">- RAS/AMD/ATL: Add MI300 support (jsc#PED-7618).
- commit 761e3c8</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307205">- RAS/AMD/ATL: Fix array overflow in get_logical_coh_st_fabric_id_mi300() (jsc#PED-7618).
- commit 83df5af</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307206">- RAS/AMD/ATL: Add MI300 DRAM to normalized address translation support (jsc#PED-7618).
- commit a26a502</changelog>
  <changelog author="nik.borisov@suse.com" date="1707307207">- EDAC/amd64: Add MI300 row retirement support (jsc#PED-7618).
- commit fb688f3</changelog>
  <changelog author="vbabka@suse.cz" date="1707393600">- README.BRANCH: update branch name to cve/linux-5.14, update maintainers
  as requested
- commit 8e34879</changelog>
  <changelog author="vkarasulli@suse.de" date="1707393601">- Update
  patches.suse/Bluetooth-Fix-atomicity-violation-in-min-max-_key_si.patch
  (git-fixes bsc#1219608 CVE-2024-24860).
- commit dedfe8a</changelog>
  <changelog author="vkarasulli@suse.de" date="1707393602">- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
  (git-fixes bsc#1219608 CVE-2024-24860).
- commit a1186fd</changelog>
  <changelog author="neilb@suse.de" date="1707480000">- Refresh patches.suse/nfsd-fix-RELEASE_LOCKOWNER.patch.
  Accidentally removed nfs4_get_stateowner
- commit ad106c0</changelog>
  <changelog author="mkoutny@suse.com" date="1707480001">- README.BRANCH: Update cve/linux-5.14 maintainers
  Add myself to match SLE15-SP5 consumer + fix typo in branch name.
- commit da26653</changelog>
  <changelog author="jgross@suse.com" date="1707480002">- vhost: use kzalloc() instead of kmalloc() followed by memset()
  (CVE-2024-0340, bsc#1218689).
- commit 4c5a740</changelog>
  <changelog author="nik.borisov@suse.com" date="1707480003">- Refresh patches.suse/EDAC-amd64-Use-new-AMD-Address-Translation-Library.patch.
  Fix build due to incomplete line removal
- commit 720d084</changelog>
  <changelog author="ykaukab@suse.de" date="1707652800">- Refresh patches.suse/EDAC-amd64-Use-new-AMD-Address-Translation-Library.patch.
  Fix following error when building kvmsmall config by removing left over
  declaration:
  [  216s] In file included from ../arch/x86/kernel/cpu/mce/core.c:52:0:
  [  216s] ../arch/x86/include/asm/mce.h:366:1: error: duplicate 'static'
  [  216s]  static inline void mce_hygon_feature_init(struct cpuinfo_x86 *c) { return mce_amd_feature_init(c); }
  [  216s]  ^~~~~~
  [  216s] ../arch/x86/include/asm/mce.h:366:15: error: two or more data types in declaration specifiers
  [  216s]  static inline void mce_hygon_feature_init(struct cpuinfo_x86 *c) { return mce_amd_feature_init(c); }
  [  216s]                ^~~~
  [  216s] ../arch/x86/include/asm/mce.h: In function 'mce_hygon_feature_init':
  [  216s] ../arch/x86/include/asm/mce.h:366:75: error: void value not ignored as it ought to be
  [  216s]  static inline void mce_hygon_feature_init(struct cpuinfo_x86 *c) { return mce_amd_feature_init(c); }
  [  216s]                                                                            ^~~~~~~~~~~~~~~~~~~~~~~
  [  216s] ../arch/x86/include/asm/mce.h:366:50: error: control reaches end of non-void function [-Werror=return-type]
  [  216s]  static inline void mce_hygon_feature_init(struct cpuinfo_x86 *c) { return mce_amd_feature_init(c); }
- commit 7015e17</changelog>
</package>
<package pkgid="d2822d6db0fe98ffa373443623b446ac9172821d71ccb698086388c1bc15292d" name="kernel-rt" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.13.38.1"/>
  <changelog author="tiwai@suse.de" date="1709553600">- power: supply: bq27xxx-i2c: Do not free non existing IRQ
  (git-fixes).
- mmc: sdhci-xenon: add timeout for PHY init complete (git-fixes).
- mmc: sdhci-xenon: fix PHY init clock stability (git-fixes).
- mmc: core: Fix eMMC initialization with 1-bit bus connection
  (git-fixes).
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
  (git-fixes).
- mtd: spinand: gigadevice: Fix the get ecc status issue
  (git-fixes).
- nouveau: fix function cast warnings (git-fixes).
- media: ir_toy: fix a memleak in irtoy_tx (git-fixes).
- media: rc: bpf attach/detach requires write permission
  (git-fixes).
- mmc: slot-gpio: Allow non-sleeping GPIO ro (git-fixes).
- regulator: pwm-regulator: Add validity checks in continuous
  .get_voltage (git-fixes).
- platform/x86: touchscreen_dmi: Add info for the TECLAST X16
  Plus tablet (git-fixes).
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were
  detected (git-fixes).
- PCI: switchtec: Fix stdev_release() crash after surprise hot
  remove (git-fixes).
- PCI: Fix 64GT/s effective data rate calculation (git-fixes).
- PCI: Only override AMD USB controller if required (git-fixes).
- PCI/AER: Decode Requester ID when no error info found
  (git-fixes).
- media: ddbridge: fix an error code problem in ddb_probe
  (git-fixes).
- mmc: mmc_spi: remove custom DMA mapped buffers (git-fixes).
- mmc: core: Use mrq.sbc in close-ended ffu (git-fixes).
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
  (git-fixes).
- pstore/ram: Fix crash when setting number of cpus to an odd
  number (git-fixes).
- PNP: ACPI: fix fortify warning (git-fixes).
- regulator: core: Only increment use_count when enable_count
  changes (git-fixes).
- PM: core: Remove unnecessary (void *) conversions (git-fixes).
- serial: 8250: Remove serial_rs485 sanitization from em485
  (git-fixes).
- PM: runtime: Have devm_pm_runtime_enable() handle
  pm_runtime_dont_use_autosuspend() (git-fixes).
- commit 9894050</changelog>
  <changelog author="tiwai@suse.de" date="1709553601">- tomoyo: fix UAF write bug in tomoyo_write_control() (git-fixes).
- wifi: nl80211: reject iftype change with mesh ID change
  (git-fixes).
- usb: dwc3: gadget: Don't disconnect if not started (git-fixes).
- wifi: mac80211: adding missing drv_mgd_complete_tx() call
  (git-fixes).
- usb: f_mass_storage: forbid async queue when shutdown happen
  (git-fixes).
- usb: dwc3: host: Set XHCI_SG_TRB_CACHE_SIZE_QUIRK (git-fixes).
- spi: sh-msiof: avoid integer overflow in constants (git-fixes).
- wifi: mac80211: fix race condition on enabling fast-xmit
  (git-fixes).
- wifi: cfg80211: fix missing interfaces when dumping (git-fixes).
- usb: dwc3: gadget: Queue PM runtime idle on disconnect event
  (git-fixes).
- usb: dwc3: gadget: Handle EP0 request dequeuing properly
  (git-fixes).
- usb: hub: Replace hardcoded quirk value with BIT() macro
  (git-fixes).
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
  (git-fixes).
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for
  IT8784/IT8786 (git-fixes).
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
  (git-fixes).
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
  (git-fixes).
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
  (git-fixes).
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
  (git-fixes).
- wifi: ath9k: Fix potential array-index-out-of-bounds read in
  ath9k_htc_txstatus() (git-fixes).
- wifi: rt2x00: restart beacon queue when hardware reset
  (git-fixes).
- wifi: iwlwifi: mvm: avoid baid size integer overflow
  (git-fixes).
- wifi: wext-core: Fix -Wstringop-overflow warning in
  ioctl_standard_iw_point() (git-fixes).
- wifi: ath11k: fix registration of 6Ghz-only phy without the
  full channel range (git-fixes).
- usb: dwc3: gadget: Refactor EP0 forced stall/restart into a
  separate API (git-fixes).
- usb: dwc3: gadget: Submit endxfer command if delayed during
  disconnect (git-fixes).
- commit 8b4f9a3</changelog>
  <changelog author="tiwai@suse.de" date="1709553602">- usb: dwc3: gadget: Ignore End Transfer delay on teardown
  (git-fixes).
- Refresh
  patches.suse/usb-dwc3-gadget-Add-1ms-delay-after-end-transfer-com.patch.
- commit 251cd08</changelog>
  <changelog author="tiwai@suse.de" date="1709553603">- Update patch reference for input fix (CVE-2021-46932 bsc#1220444)
- commit e44e0b1</changelog>
  <changelog author="osalvador@suse.de" date="1709553604">- powerpc/pseries/memhp: Fix access beyond end of drmem array
  (bsc#1220250,CVE-2023-52451).
- commit fdc7254</changelog>
  <changelog author="jslaby@suse.cz" date="1709553605">- serial: imx: fix tx statemachine deadlock (bsc#1220364
  CVE-2023-52456).
- commit cd9f92c</changelog>
  <changelog author="jslaby@suse.cz" date="1709553606">- serial: 8250: omap: Don't skip resource freeing if
  pm_runtime_resume_and_get() failed (bsc#1220350 CVE-2023-52457).
- commit c82f528</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1709553607">- bpf: Minor cleanup around stack bounds (bsc#1220257
  CVE-2023-52452).
- bpf: Fix accesses to uninit stack slots (bsc#1220257
  CVE-2023-52452).
- bpf: Guard stack limits against 32bit overflow (git-fixes).
- bpf: Fix verification of indirect var-off stack access
  (git-fixes).
- bpf: Minor cleanup around stack bounds (bsc#1220257
  CVE-2023-52452).
- bpf: Fix accesses to uninit stack slots (bsc#1220257
  CVE-2023-52452).
- bpf: Add some comments to stack representation (bsc#1220257
  CVE-2023-52452).
- Refresh patches.kabi/kABI-fix-bpf-Tighten-ptr_to_btf_id-checks.patch
- bpf: Guard stack limits against 32bit overflow (git-fixes).
- bpf: Fix verification of indirect var-off stack access
  (git-fixes).
- bpf: Minor logging improvement (bsc#1220257).
- commit 7d03125</changelog>
  <changelog author="fdmanana@suse.com" date="1709553608">- btrfs: do not ASSERT() if the newly created subvolume already
  got read (bsc#1219126 CVE-2024-23850).
- commit a2ac581</changelog>
  <changelog author="fdmanana@suse.com" date="1709553609">- btrfs: fix double free of anonymous device after snapshot
  creation failure (bsc#1219126 CVE-2024-23850).
- commit 257a534</changelog>
  <changelog author="ailiop@suse.com" date="1709553610">- tomoyo: fix UAF write bug in tomoyo_write_control() (bsc#1220825
  CVE-2024-26622).
- commit c8e5b38</changelog>
  <changelog author="mkubecek@suse.cz" date="1709553611">- netfilter: nft_set_pipapo: skip inactive elements during set
  walk (CVE-2023-6817 bsc#1218195).
- commit 4032aa7</changelog>
  <changelog author="mkubecek@suse.cz" date="1709553612">- netfilter: nf_tables: fix 64-bit load issue in
  nft_byteorder_eval() (CVE-2024-0607 bsc#1218915).
- netfilter: nf_tables: fix pointer math issue in
  nft_byteorder_eval() (CVE-2024-0607 bsc#1218915).
- commit e095cd0</changelog>
  <changelog author="mkubecek@suse.cz" date="1709640000">- kabi: restore return type of dst_ops::gc() callback
  (CVE-2023-52340 bsc#1219295).
- ipv6: remove max_size check inline with ipv4 (CVE-2023-52340
  bsc#1219295).
- commit b8eec42</changelog>
  <changelog author="mkubecek@suse.cz" date="1709640001">- tls: fix race between tx work scheduling and socket close
  (CVE-2024-26585 bsc#1220187).
- commit 1306bff</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1709640002">- selftests/bpf: Add test for alu on PTR_TO_FLOW_KEYS (bsc#1220255
  CVE-2024-26589).
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS (bsc#1220255
  CVE-2024-26589).
- commit 8a833ce</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1709640003">- bpf: Fix re-attachment branch in bpf_tracing_prog_attach
  (bsc#1220254 CVE-2024-26591).
- commit fc948d3</changelog>
  <changelog author="nik.borisov@suse.com" date="1709640004">- Documentation/hw-vuln: Add documentation for RFDS (bsc#1213456 CVE-2023-28746).
- commit c955133</changelog>
  <changelog author="nik.borisov@suse.com" date="1709640005">- x86/rfds: Mitigate Register File Data Sampling (RFDS) (bsc#1213456 CVE-2023-28746).
- commit ee70608</changelog>
  <changelog author="nik.borisov@suse.com" date="1709640006">- KVM: x86: Export RFDS_NO and RFDS_CLEAR to guests (bsc#1213456 CVE-2023-28746).
- commit 7f00c86</changelog>
</package>
<package pkgid="07cd3a01a9274e3c03ee27ffe828bd1c3bed65dca5b5b7af36d310fb4d3e6429" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.13.38.1"/>
  <changelog author="tiwai@suse.de" date="1709553600">- power: supply: bq27xxx-i2c: Do not free non existing IRQ
  (git-fixes).
- mmc: sdhci-xenon: add timeout for PHY init complete (git-fixes).
- mmc: sdhci-xenon: fix PHY init clock stability (git-fixes).
- mmc: core: Fix eMMC initialization with 1-bit bus connection
  (git-fixes).
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
  (git-fixes).
- mtd: spinand: gigadevice: Fix the get ecc status issue
  (git-fixes).
- nouveau: fix function cast warnings (git-fixes).
- media: ir_toy: fix a memleak in irtoy_tx (git-fixes).
- media: rc: bpf attach/detach requires write permission
  (git-fixes).
- mmc: slot-gpio: Allow non-sleeping GPIO ro (git-fixes).
- regulator: pwm-regulator: Add validity checks in continuous
  .get_voltage (git-fixes).
- platform/x86: touchscreen_dmi: Add info for the TECLAST X16
  Plus tablet (git-fixes).
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were
  detected (git-fixes).
- PCI: switchtec: Fix stdev_release() crash after surprise hot
  remove (git-fixes).
- PCI: Fix 64GT/s effective data rate calculation (git-fixes).
- PCI: Only override AMD USB controller if required (git-fixes).
- PCI/AER: Decode Requester ID when no error info found
  (git-fixes).
- media: ddbridge: fix an error code problem in ddb_probe
  (git-fixes).
- mmc: mmc_spi: remove custom DMA mapped buffers (git-fixes).
- mmc: core: Use mrq.sbc in close-ended ffu (git-fixes).
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
  (git-fixes).
- pstore/ram: Fix crash when setting number of cpus to an odd
  number (git-fixes).
- PNP: ACPI: fix fortify warning (git-fixes).
- regulator: core: Only increment use_count when enable_count
  changes (git-fixes).
- PM: core: Remove unnecessary (void *) conversions (git-fixes).
- serial: 8250: Remove serial_rs485 sanitization from em485
  (git-fixes).
- PM: runtime: Have devm_pm_runtime_enable() handle
  pm_runtime_dont_use_autosuspend() (git-fixes).
- commit 9894050</changelog>
  <changelog author="tiwai@suse.de" date="1709553601">- tomoyo: fix UAF write bug in tomoyo_write_control() (git-fixes).
- wifi: nl80211: reject iftype change with mesh ID change
  (git-fixes).
- usb: dwc3: gadget: Don't disconnect if not started (git-fixes).
- wifi: mac80211: adding missing drv_mgd_complete_tx() call
  (git-fixes).
- usb: f_mass_storage: forbid async queue when shutdown happen
  (git-fixes).
- usb: dwc3: host: Set XHCI_SG_TRB_CACHE_SIZE_QUIRK (git-fixes).
- spi: sh-msiof: avoid integer overflow in constants (git-fixes).
- wifi: mac80211: fix race condition on enabling fast-xmit
  (git-fixes).
- wifi: cfg80211: fix missing interfaces when dumping (git-fixes).
- usb: dwc3: gadget: Queue PM runtime idle on disconnect event
  (git-fixes).
- usb: dwc3: gadget: Handle EP0 request dequeuing properly
  (git-fixes).
- usb: hub: Replace hardcoded quirk value with BIT() macro
  (git-fixes).
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
  (git-fixes).
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for
  IT8784/IT8786 (git-fixes).
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
  (git-fixes).
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
  (git-fixes).
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
  (git-fixes).
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
  (git-fixes).
- wifi: ath9k: Fix potential array-index-out-of-bounds read in
  ath9k_htc_txstatus() (git-fixes).
- wifi: rt2x00: restart beacon queue when hardware reset
  (git-fixes).
- wifi: iwlwifi: mvm: avoid baid size integer overflow
  (git-fixes).
- wifi: wext-core: Fix -Wstringop-overflow warning in
  ioctl_standard_iw_point() (git-fixes).
- wifi: ath11k: fix registration of 6Ghz-only phy without the
  full channel range (git-fixes).
- usb: dwc3: gadget: Refactor EP0 forced stall/restart into a
  separate API (git-fixes).
- usb: dwc3: gadget: Submit endxfer command if delayed during
  disconnect (git-fixes).
- commit 8b4f9a3</changelog>
  <changelog author="tiwai@suse.de" date="1709553602">- usb: dwc3: gadget: Ignore End Transfer delay on teardown
  (git-fixes).
- Refresh
  patches.suse/usb-dwc3-gadget-Add-1ms-delay-after-end-transfer-com.patch.
- commit 251cd08</changelog>
  <changelog author="tiwai@suse.de" date="1709553603">- Update patch reference for input fix (CVE-2021-46932 bsc#1220444)
- commit e44e0b1</changelog>
  <changelog author="osalvador@suse.de" date="1709553604">- powerpc/pseries/memhp: Fix access beyond end of drmem array
  (bsc#1220250,CVE-2023-52451).
- commit fdc7254</changelog>
  <changelog author="jslaby@suse.cz" date="1709553605">- serial: imx: fix tx statemachine deadlock (bsc#1220364
  CVE-2023-52456).
- commit cd9f92c</changelog>
  <changelog author="jslaby@suse.cz" date="1709553606">- serial: 8250: omap: Don't skip resource freeing if
  pm_runtime_resume_and_get() failed (bsc#1220350 CVE-2023-52457).
- commit c82f528</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1709553607">- bpf: Minor cleanup around stack bounds (bsc#1220257
  CVE-2023-52452).
- bpf: Fix accesses to uninit stack slots (bsc#1220257
  CVE-2023-52452).
- bpf: Guard stack limits against 32bit overflow (git-fixes).
- bpf: Fix verification of indirect var-off stack access
  (git-fixes).
- bpf: Minor cleanup around stack bounds (bsc#1220257
  CVE-2023-52452).
- bpf: Fix accesses to uninit stack slots (bsc#1220257
  CVE-2023-52452).
- bpf: Add some comments to stack representation (bsc#1220257
  CVE-2023-52452).
- Refresh patches.kabi/kABI-fix-bpf-Tighten-ptr_to_btf_id-checks.patch
- bpf: Guard stack limits against 32bit overflow (git-fixes).
- bpf: Fix verification of indirect var-off stack access
  (git-fixes).
- bpf: Minor logging improvement (bsc#1220257).
- commit 7d03125</changelog>
  <changelog author="fdmanana@suse.com" date="1709553608">- btrfs: do not ASSERT() if the newly created subvolume already
  got read (bsc#1219126 CVE-2024-23850).
- commit a2ac581</changelog>
  <changelog author="fdmanana@suse.com" date="1709553609">- btrfs: fix double free of anonymous device after snapshot
  creation failure (bsc#1219126 CVE-2024-23850).
- commit 257a534</changelog>
  <changelog author="ailiop@suse.com" date="1709553610">- tomoyo: fix UAF write bug in tomoyo_write_control() (bsc#1220825
  CVE-2024-26622).
- commit c8e5b38</changelog>
  <changelog author="mkubecek@suse.cz" date="1709553611">- netfilter: nft_set_pipapo: skip inactive elements during set
  walk (CVE-2023-6817 bsc#1218195).
- commit 4032aa7</changelog>
  <changelog author="mkubecek@suse.cz" date="1709553612">- netfilter: nf_tables: fix 64-bit load issue in
  nft_byteorder_eval() (CVE-2024-0607 bsc#1218915).
- netfilter: nf_tables: fix pointer math issue in
  nft_byteorder_eval() (CVE-2024-0607 bsc#1218915).
- commit e095cd0</changelog>
  <changelog author="mkubecek@suse.cz" date="1709640000">- kabi: restore return type of dst_ops::gc() callback
  (CVE-2023-52340 bsc#1219295).
- ipv6: remove max_size check inline with ipv4 (CVE-2023-52340
  bsc#1219295).
- commit b8eec42</changelog>
  <changelog author="mkubecek@suse.cz" date="1709640001">- tls: fix race between tx work scheduling and socket close
  (CVE-2024-26585 bsc#1220187).
- commit 1306bff</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1709640002">- selftests/bpf: Add test for alu on PTR_TO_FLOW_KEYS (bsc#1220255
  CVE-2024-26589).
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS (bsc#1220255
  CVE-2024-26589).
- commit 8a833ce</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1709640003">- bpf: Fix re-attachment branch in bpf_tracing_prog_attach
  (bsc#1220254 CVE-2024-26591).
- commit fc948d3</changelog>
  <changelog author="nik.borisov@suse.com" date="1709640004">- Documentation/hw-vuln: Add documentation for RFDS (bsc#1213456 CVE-2023-28746).
- commit c955133</changelog>
  <changelog author="nik.borisov@suse.com" date="1709640005">- x86/rfds: Mitigate Register File Data Sampling (RFDS) (bsc#1213456 CVE-2023-28746).
- commit ee70608</changelog>
  <changelog author="nik.borisov@suse.com" date="1709640006">- KVM: x86: Export RFDS_NO and RFDS_CLEAR to guests (bsc#1213456 CVE-2023-28746).
- commit 7f00c86</changelog>
</package>
<package pkgid="893b646f381bcc7933bf5f62004717dccd10ff4a95ea5a2f630fa126f162c366" name="kernel-rt" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.13.43.1"/>
  <changelog author="lduncan@suse.com" date="1712318400">- scsi: pm80xx: Avoid leaking tags when processing
  OPC_INB_SET_CONTROLLER_CONFIG command (bsc#1220883
  cve-2023-52500).
- commit fc88013</changelog>
  <changelog author="tiwai@suse.de" date="1712404800">- ata: sata_mv: Fix PCI device ID table declaration compilation
  warning (git-fixes).
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
  (git-fixes).
- ASoC: amd: acp: fix for acp_init function error handling
  (git-fixes).
- ASoC: rt711-sdw: fix locking sequence (git-fixes).
- ASoC: rt711-sdca: fix locking sequence (git-fixes).
- ASoC: rt5682-sdw: fix locking sequence (git-fixes).
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
  (git-fixes).
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support
  headset with microphone (git-fixes).
- drm/i915/gt: Do not generate the command streamer for all the
  CCS (git-fixes).
- drm/display: fix typo (git-fixes).
- drm/panfrost: fix power transition timeout warnings (git-fixes).
- commit 56ef24f</changelog>
  <changelog author="jslaby@suse.cz" date="1712577600">- blacklist.conf: add a couple of PCI git-fixes
- commit 37743ca</changelog>
  <changelog author="iivanov@suse.de" date="1712577601">- arm64: dts: imx8mm-kontron: Add support for ultra high speed modes on (git-fixes)
- commit b828266</changelog>
  <changelog author="iivanov@suse.de" date="1712577602">- blacklist.conf: ("arm64: dts: imx8mm-kontron: Use the VSELECT signal to switch SD card")
- commit 4b90502</changelog>
  <changelog author="iivanov@suse.de" date="1712577603">- arm64: dts: marvell: reorder crypto interrupts on Armada SoCs (git-fixes)
- commit a61527a</changelog>
  <changelog author="iivanov@suse.de" date="1712577604">- arm64: dts: broadcom: bcmbca: bcm4908: drop invalid switch cells (git-fixes)
- commit 22061fc</changelog>
  <changelog author="ohering@suse.de" date="1712577605">- net: mana: Fix Rx DMA datasize and skb_over_panic (git-fixes).
- RDMA/mana_ib: Fix bug in creation of dma regions (git-fixes).
- Drivers: hv: vmbus: Calculate ring buffer size for more
  efficient use of memory (git-fixes).
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER
  missed (git-fixes).
- hv_netvsc: Fix race condition between netvsc_probe and
  netvsc_remove (git-fixes).
- scsi: storvsc: Fix ring buffer size calculation (git-fixes).
- hv_netvsc: Calculate correct ring size when PAGE_SIZE is not
  4 Kbytes (git-fixes).
- commit 82617ea</changelog>
  <changelog author="jack@suse.cz" date="1712577606">- nfsd: Fix error cleanup path in nfsd_rename() (bsc#1221044
  CVE-2023-52591).
- commit a849be1</changelog>
  <changelog author="osalvador@suse.de" date="1712664000">- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
  (bsc#1219264 CVE-2024-0841).
- commit aa8204a</changelog>
  <changelog author="osalvador@suse.de" date="1712664001">- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
  (bsc#1219264 CVE-2024-0841).
- commit fe3c052</changelog>
  <changelog author="nik.borisov@suse.com" date="1712664002">- RAS: Avoid build errors when CONFIG_DEBUG_FS=n (git-fixes).
- commit eb744cd</changelog>
  <changelog author="nik.borisov@suse.com" date="1712664003">- blacklist.conf: We don't have annotate_noendbr in this kernel
  So shut up the warning.
- commit f6d75ac</changelog>
  <changelog author="osalvador@suse.de" date="1712664004">- stackdepot: rename pool_index to pool_index_plus_1 (git-fixes).
- commit 4edf006</changelog>
  <changelog author="osalvador@suse.de" date="1712750400">- mm,page_owner: Defer enablement of static branch (bsc#1222366).
- commit aa158b4</changelog>
  <changelog author="jslaby@suse.cz" date="1712836800">- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
  (bsc#1222619).
- commit 3d3186c</changelog>
  <changelog author="mkoutny@suse.com" date="1712836801">- blacklist.conf: Add d9b3ce8769e3 mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats
- commit 3201b4c</changelog>
  <changelog author="mkoutny@suse.com" date="1712836802">- blacklist.conf: Add f7ec1cd5cc7e getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
  and its prereqs
- commit 0650209</changelog>
  <changelog author="jslaby@suse.cz" date="1712923200">- Refresh
  patches.kabi/PCI-Add-locking-to-RMW-PCI-Express-Capability-Regist.patch.
  Drop a bogus hunk. It was introduced by mistake.
  Fixes: acf0d9920aee
- commit 3a754ef</changelog>
  <changelog author="nik.borisov@suse.com" date="1712923201">- Refresh patches.kabi/kabi-allow-extra-bugints.patch.
  Properly check whether the feature we are patching in the alternatives
  is a feature or a bug. This was broken because in apply_alternative()
  boot_cpu_has is used and if we have an alternative that depends on a bug
  bit (such as X86_BUG_SYSRET_SS_ATTRS) the boot_cpu_has will erroneously
  check if this bit is set in the feature ints rather than the bug ints.
  While at it ensure that static_cpu_has isn't called with extended
  bugs features as those aren't supported right now.
- commit 793068f</changelog>
</package>
<package pkgid="b295b726cfab3b1e9d59b8a9244c5d597ad14b5fa65671d0ec270a9a7bf2fabb" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.13.43.1"/>
  <changelog author="lduncan@suse.com" date="1712318400">- scsi: pm80xx: Avoid leaking tags when processing
  OPC_INB_SET_CONTROLLER_CONFIG command (bsc#1220883
  cve-2023-52500).
- commit fc88013</changelog>
  <changelog author="tiwai@suse.de" date="1712404800">- ata: sata_mv: Fix PCI device ID table declaration compilation
  warning (git-fixes).
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
  (git-fixes).
- ASoC: amd: acp: fix for acp_init function error handling
  (git-fixes).
- ASoC: rt711-sdw: fix locking sequence (git-fixes).
- ASoC: rt711-sdca: fix locking sequence (git-fixes).
- ASoC: rt5682-sdw: fix locking sequence (git-fixes).
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
  (git-fixes).
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support
  headset with microphone (git-fixes).
- drm/i915/gt: Do not generate the command streamer for all the
  CCS (git-fixes).
- drm/display: fix typo (git-fixes).
- drm/panfrost: fix power transition timeout warnings (git-fixes).
- commit 56ef24f</changelog>
  <changelog author="jslaby@suse.cz" date="1712577600">- blacklist.conf: add a couple of PCI git-fixes
- commit 37743ca</changelog>
  <changelog author="iivanov@suse.de" date="1712577601">- arm64: dts: imx8mm-kontron: Add support for ultra high speed modes on (git-fixes)
- commit b828266</changelog>
  <changelog author="iivanov@suse.de" date="1712577602">- blacklist.conf: ("arm64: dts: imx8mm-kontron: Use the VSELECT signal to switch SD card")
- commit 4b90502</changelog>
  <changelog author="iivanov@suse.de" date="1712577603">- arm64: dts: marvell: reorder crypto interrupts on Armada SoCs (git-fixes)
- commit a61527a</changelog>
  <changelog author="iivanov@suse.de" date="1712577604">- arm64: dts: broadcom: bcmbca: bcm4908: drop invalid switch cells (git-fixes)
- commit 22061fc</changelog>
  <changelog author="ohering@suse.de" date="1712577605">- net: mana: Fix Rx DMA datasize and skb_over_panic (git-fixes).
- RDMA/mana_ib: Fix bug in creation of dma regions (git-fixes).
- Drivers: hv: vmbus: Calculate ring buffer size for more
  efficient use of memory (git-fixes).
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER
  missed (git-fixes).
- hv_netvsc: Fix race condition between netvsc_probe and
  netvsc_remove (git-fixes).
- scsi: storvsc: Fix ring buffer size calculation (git-fixes).
- hv_netvsc: Calculate correct ring size when PAGE_SIZE is not
  4 Kbytes (git-fixes).
- commit 82617ea</changelog>
  <changelog author="jack@suse.cz" date="1712577606">- nfsd: Fix error cleanup path in nfsd_rename() (bsc#1221044
  CVE-2023-52591).
- commit a849be1</changelog>
  <changelog author="osalvador@suse.de" date="1712664000">- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
  (bsc#1219264 CVE-2024-0841).
- commit aa8204a</changelog>
  <changelog author="osalvador@suse.de" date="1712664001">- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
  (bsc#1219264 CVE-2024-0841).
- commit fe3c052</changelog>
  <changelog author="nik.borisov@suse.com" date="1712664002">- RAS: Avoid build errors when CONFIG_DEBUG_FS=n (git-fixes).
- commit eb744cd</changelog>
  <changelog author="nik.borisov@suse.com" date="1712664003">- blacklist.conf: We don't have annotate_noendbr in this kernel
  So shut up the warning.
- commit f6d75ac</changelog>
  <changelog author="osalvador@suse.de" date="1712664004">- stackdepot: rename pool_index to pool_index_plus_1 (git-fixes).
- commit 4edf006</changelog>
  <changelog author="osalvador@suse.de" date="1712750400">- mm,page_owner: Defer enablement of static branch (bsc#1222366).
- commit aa158b4</changelog>
  <changelog author="jslaby@suse.cz" date="1712836800">- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
  (bsc#1222619).
- commit 3d3186c</changelog>
  <changelog author="mkoutny@suse.com" date="1712836801">- blacklist.conf: Add d9b3ce8769e3 mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats
- commit 3201b4c</changelog>
  <changelog author="mkoutny@suse.com" date="1712836802">- blacklist.conf: Add f7ec1cd5cc7e getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
  and its prereqs
- commit 0650209</changelog>
  <changelog author="jslaby@suse.cz" date="1712923200">- Refresh
  patches.kabi/PCI-Add-locking-to-RMW-PCI-Express-Capability-Regist.patch.
  Drop a bogus hunk. It was introduced by mistake.
  Fixes: acf0d9920aee
- commit 3a754ef</changelog>
  <changelog author="nik.borisov@suse.com" date="1712923201">- Refresh patches.kabi/kabi-allow-extra-bugints.patch.
  Properly check whether the feature we are patching in the alternatives
  is a feature or a bug. This was broken because in apply_alternative()
  boot_cpu_has is used and if we have an alternative that depends on a bug
  bit (such as X86_BUG_SYSRET_SS_ATTRS) the boot_cpu_has will erroneously
  check if this bit is set in the feature ints rather than the bug ints.
  While at it ensure that static_cpu_has isn't called with extended
  bugs features as those aren't supported right now.
- commit 793068f</changelog>
</package>
<package pkgid="830052b7f17a0211b88e97522813b3ae94577cabdda776200f44f8464594a273" name="kernel-rt" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.13.47.1"/>
  <changelog author="iivanov@suse.de" date="1712577600">- arm64: dts: imx8mm-kontron: Add support for ultra high speed modes on (git-fixes)
- commit b828266</changelog>
  <changelog author="iivanov@suse.de" date="1712577601">- blacklist.conf: ("arm64: dts: imx8mm-kontron: Use the VSELECT signal to switch SD card")
- commit 4b90502</changelog>
  <changelog author="iivanov@suse.de" date="1712577602">- arm64: dts: marvell: reorder crypto interrupts on Armada SoCs (git-fixes)
- commit a61527a</changelog>
  <changelog author="iivanov@suse.de" date="1712577603">- arm64: dts: broadcom: bcmbca: bcm4908: drop invalid switch cells (git-fixes)
- commit 22061fc</changelog>
  <changelog author="ohering@suse.de" date="1712577604">- net: mana: Fix Rx DMA datasize and skb_over_panic (git-fixes).
- RDMA/mana_ib: Fix bug in creation of dma regions (git-fixes).
- Drivers: hv: vmbus: Calculate ring buffer size for more
  efficient use of memory (git-fixes).
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER
  missed (git-fixes).
- hv_netvsc: Fix race condition between netvsc_probe and
  netvsc_remove (git-fixes).
- scsi: storvsc: Fix ring buffer size calculation (git-fixes).
- hv_netvsc: Calculate correct ring size when PAGE_SIZE is not
  4 Kbytes (git-fixes).
- commit 82617ea</changelog>
  <changelog author="jack@suse.cz" date="1712577605">- nfsd: Fix error cleanup path in nfsd_rename() (bsc#1221044
  CVE-2023-52591).
- commit a849be1</changelog>
  <changelog author="osalvador@suse.de" date="1712664000">- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
  (bsc#1219264 CVE-2024-0841).
- commit aa8204a</changelog>
  <changelog author="osalvador@suse.de" date="1712664001">- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
  (bsc#1219264 CVE-2024-0841).
- commit fe3c052</changelog>
  <changelog author="nik.borisov@suse.com" date="1712664002">- RAS: Avoid build errors when CONFIG_DEBUG_FS=n (git-fixes).
- commit eb744cd</changelog>
  <changelog author="nik.borisov@suse.com" date="1712664003">- blacklist.conf: We don't have annotate_noendbr in this kernel
  So shut up the warning.
- commit f6d75ac</changelog>
  <changelog author="osalvador@suse.de" date="1712664004">- stackdepot: rename pool_index to pool_index_plus_1 (git-fixes).
- commit 4edf006</changelog>
  <changelog author="osalvador@suse.de" date="1712750400">- mm,page_owner: Defer enablement of static branch (bsc#1222366).
- commit aa158b4</changelog>
  <changelog author="jslaby@suse.cz" date="1712836800">- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
  (bsc#1222619).
- commit 3d3186c</changelog>
  <changelog author="mkoutny@suse.com" date="1712836801">- blacklist.conf: Add d9b3ce8769e3 mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats
- commit 3201b4c</changelog>
  <changelog author="mkoutny@suse.com" date="1712836802">- blacklist.conf: Add f7ec1cd5cc7e getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
  and its prereqs
- commit 0650209</changelog>
  <changelog author="jslaby@suse.cz" date="1712923200">- Refresh
  patches.kabi/PCI-Add-locking-to-RMW-PCI-Express-Capability-Regist.patch.
  Drop a bogus hunk. It was introduced by mistake.
  Fixes: acf0d9920aee
- commit 3a754ef</changelog>
  <changelog author="nik.borisov@suse.com" date="1712923201">- Refresh patches.kabi/kabi-allow-extra-bugints.patch.
  Properly check whether the feature we are patching in the alternatives
  is a feature or a bug. This was broken because in apply_alternative()
  boot_cpu_has is used and if we have an alternative that depends on a bug
  bit (such as X86_BUG_SYSRET_SS_ATTRS) the boot_cpu_has will erroneously
  check if this bit is set in the feature ints rather than the bug ints.
  While at it ensure that static_cpu_has isn't called with extended
  bugs features as those aren't supported right now.
- commit 793068f</changelog>
  <changelog author="mgorman@suse.de" date="1713268800">- README.BRANCH: Add Petr Tesarik
- commit ac60b6d</changelog>
  <changelog author="vbabka@suse.cz" date="1713268801">- mm/vmalloc: huge vmalloc backing pages should be split rather
  than compound (bsc#1217829).
- commit 539be83</changelog>
  <changelog author="nik.borisov@suse.com" date="1713441600">- Refresh patches.kabi/kabi-allow-extra-bugints.patch. (bsc#1222952)
- commit a04a1a9</changelog>
</package>
<package pkgid="64b21c848d3b709c7138af6b0264b3d43f2fca2a8d3b1e936d6cf73b0ce257b9" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.13.47.1"/>
  <changelog author="iivanov@suse.de" date="1712577600">- arm64: dts: imx8mm-kontron: Add support for ultra high speed modes on (git-fixes)
- commit b828266</changelog>
  <changelog author="iivanov@suse.de" date="1712577601">- blacklist.conf: ("arm64: dts: imx8mm-kontron: Use the VSELECT signal to switch SD card")
- commit 4b90502</changelog>
  <changelog author="iivanov@suse.de" date="1712577602">- arm64: dts: marvell: reorder crypto interrupts on Armada SoCs (git-fixes)
- commit a61527a</changelog>
  <changelog author="iivanov@suse.de" date="1712577603">- arm64: dts: broadcom: bcmbca: bcm4908: drop invalid switch cells (git-fixes)
- commit 22061fc</changelog>
  <changelog author="ohering@suse.de" date="1712577604">- net: mana: Fix Rx DMA datasize and skb_over_panic (git-fixes).
- RDMA/mana_ib: Fix bug in creation of dma regions (git-fixes).
- Drivers: hv: vmbus: Calculate ring buffer size for more
  efficient use of memory (git-fixes).
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER
  missed (git-fixes).
- hv_netvsc: Fix race condition between netvsc_probe and
  netvsc_remove (git-fixes).
- scsi: storvsc: Fix ring buffer size calculation (git-fixes).
- hv_netvsc: Calculate correct ring size when PAGE_SIZE is not
  4 Kbytes (git-fixes).
- commit 82617ea</changelog>
  <changelog author="jack@suse.cz" date="1712577605">- nfsd: Fix error cleanup path in nfsd_rename() (bsc#1221044
  CVE-2023-52591).
- commit a849be1</changelog>
  <changelog author="osalvador@suse.de" date="1712664000">- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
  (bsc#1219264 CVE-2024-0841).
- commit aa8204a</changelog>
  <changelog author="osalvador@suse.de" date="1712664001">- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
  (bsc#1219264 CVE-2024-0841).
- commit fe3c052</changelog>
  <changelog author="nik.borisov@suse.com" date="1712664002">- RAS: Avoid build errors when CONFIG_DEBUG_FS=n (git-fixes).
- commit eb744cd</changelog>
  <changelog author="nik.borisov@suse.com" date="1712664003">- blacklist.conf: We don't have annotate_noendbr in this kernel
  So shut up the warning.
- commit f6d75ac</changelog>
  <changelog author="osalvador@suse.de" date="1712664004">- stackdepot: rename pool_index to pool_index_plus_1 (git-fixes).
- commit 4edf006</changelog>
  <changelog author="osalvador@suse.de" date="1712750400">- mm,page_owner: Defer enablement of static branch (bsc#1222366).
- commit aa158b4</changelog>
  <changelog author="jslaby@suse.cz" date="1712836800">- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
  (bsc#1222619).
- commit 3d3186c</changelog>
  <changelog author="mkoutny@suse.com" date="1712836801">- blacklist.conf: Add d9b3ce8769e3 mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats
- commit 3201b4c</changelog>
  <changelog author="mkoutny@suse.com" date="1712836802">- blacklist.conf: Add f7ec1cd5cc7e getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
  and its prereqs
- commit 0650209</changelog>
  <changelog author="jslaby@suse.cz" date="1712923200">- Refresh
  patches.kabi/PCI-Add-locking-to-RMW-PCI-Express-Capability-Regist.patch.
  Drop a bogus hunk. It was introduced by mistake.
  Fixes: acf0d9920aee
- commit 3a754ef</changelog>
  <changelog author="nik.borisov@suse.com" date="1712923201">- Refresh patches.kabi/kabi-allow-extra-bugints.patch.
  Properly check whether the feature we are patching in the alternatives
  is a feature or a bug. This was broken because in apply_alternative()
  boot_cpu_has is used and if we have an alternative that depends on a bug
  bit (such as X86_BUG_SYSRET_SS_ATTRS) the boot_cpu_has will erroneously
  check if this bit is set in the feature ints rather than the bug ints.
  While at it ensure that static_cpu_has isn't called with extended
  bugs features as those aren't supported right now.
- commit 793068f</changelog>
  <changelog author="mgorman@suse.de" date="1713268800">- README.BRANCH: Add Petr Tesarik
- commit ac60b6d</changelog>
  <changelog author="vbabka@suse.cz" date="1713268801">- mm/vmalloc: huge vmalloc backing pages should be split rather
  than compound (bsc#1217829).
- commit 539be83</changelog>
  <changelog author="nik.borisov@suse.com" date="1713441600">- Refresh patches.kabi/kabi-allow-extra-bugints.patch. (bsc#1222952)
- commit a04a1a9</changelog>
</package>
<package pkgid="d49f9a36730c17c2f1fe2d0206b90a53115a9747e6f940607e49c5d650df213b" name="kernel-rt" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.13.52.1"/>
  <changelog author="petr.pavlu@suse.com" date="1714996800">- tracing: Show size of requested perf buffer (git-fixes).
- commit f8d068b</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996801">- tracing/net_sched: Fix tracepoints that save qdisc_dev()
  as a string (git-fixes).
- commit a272f90</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996802">- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page
  in concurrent environment (git-fixes).
- commit 118cfcd</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996803">- kprobes: Fix possible use-after-free issue on kprobe
  registration (git-fixes).
- commit e007447</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996804">- ring-buffer: Only update pages_touched when a new page is
  touched (git-fixes).
- commit b42aba1</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996805">- blacklist.conf: add a not-relevant module-loader patch
- commit 90c64db</changelog>
  <changelog author="vkarasulli@suse.de" date="1714996806">- Update
  patches.suse/IB-core-Fix-a-nested-dead-lock-as-part-of-ODP-flow.patch
  (git-fixes CVE-2022-48675 bsc#1223894).
- Update
  patches.suse/drm-gma500-Fix-BUG-sleeping-function-called-from-inv.patch
  (git-fixes CVE-2022-48634 bsc#1223501).
- Update
  patches.suse/drm-i915-gem-Really-move-i915_gem_context.link-under.patch
  (CVE-2022-48662 bsc#1223505a4e7ccdac38e ("drm/i915: Move
  context management under GEM") bsc#1223505).
- Update
  patches.suse/i2c-mlxbf-prevent-stack-overflow-in-mlxbf_i2c_smbus_.patch
  (git-fixes CVE-2022-48632 bsc#1223481).
- Update
  patches.suse/ice-Fix-crash-by-keep-old-cfg-when-update-TCs-more-t.patch
  (git-fixes CVE-2022-48652 bsc#1223520).
- Update
  patches.suse/s390-dasd-fix-Oops-in-dasd_alias_get_start_dev-due-to-missing-pavgroup
  (git-fixes CVE-2022-48636 bsc#1223512).
- commit 523501c</changelog>
  <changelog author="dsterba@suse.com" date="1714996807">- fs: sysfs: Fix reference leak in sysfs_break_active_protection() (CVE-2024-26993 bsc#1223693)
- commit b0c9830</changelog>
  <changelog author="vkarasulli@suse.de" date="1714996808">- net: sparx5: Fix use after free inside sparx5_del_mact_entry
  (bsc#1223052 CVE-2024-26856).
- commit fc5c6ad</changelog>
  <changelog author="vkarasulli@suse.de" date="1714996809">- igc: avoid returning frame twice in XDP_REDIRECT (bsc#1223061
  CVE-2024-26853).
- commit 021db33</changelog>
  <changelog author="vkarasulli@suse.de" date="1714996810">- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in
  custom expectations (bsc#1222368 CVE-2024-26673).
- commit 785b7d0</changelog>
  <changelog author="mkoutny@suse.com" date="1714996811">- Update
  patches.suse/drm-i915-gem-Really-move-i915_gem_context.link-under.patch
  (CVE-2022-48662 bsc#1223505).
  Unbreak metadata (References: collides with our internal tracking,
  switch to Fixes: when referencing a commit).
- commit cd38265</changelog>
  <changelog author="mkubecek@suse.cz" date="1714996812">- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
  (CVE-2024-0639 bsc#1218917).
- commit 517d4f7</changelog>
  <changelog author="mkubecek@suse.cz" date="1714996813">- packet: annotate data-races around ignore_outgoing
  (CVE-2024-26862 bsc#1223111).
- commit 6e591e7</changelog>
  <changelog author="krisman@suse.de" date="1715083200">- Update
  patches.suse/ALSA-emu10k1-Fix-out-of-bounds-access-in-snd_emu10k1.patch
  (git-fixes CVE-2022-48702 bsc#1223923).
- Update
  patches.suse/ALSA-usb-audio-Fix-an-out-of-bounds-bug-in-__snd_usb.patch
  (git-fixes CVE-2022-48701 bsc#1223921).
- Update
  patches.suse/RDMA-irdma-Fix-drain-SQ-hang-with-no-completion.patch
  (jsc#SLE-18383 CVE-2022-48694 bsc#1223964).
- Update
  patches.suse/RDMA-srp-Set-scmnd-result-only-when-scmnd-is-not-NUL.patch
  (git-fixes CVE-2022-48692 bsc#1223962).
- Update
  patches.suse/cgroup-Add-missing-cpus_read_lock-to-cgroup_attach_task_all.patch
  (bsc#1196869 CVE-2022-48671 bsc#1223929).
- Update
  patches.suse/drm-radeon-add-a-force-flush-to-delay-work-when-rade.patch
  (git-fixes CVE-2022-48704 bsc#1223932).
- Update
  patches.suse/i40e-Fix-kernel-crash-during-module-removal.patch
  (jsc#SLE-18378 CVE-2022-48688 bsc#1223953).
- Update
  patches.suse/ipv6-sr-fix-out-of-bounds-read-when-setting-HMAC-dat.patch
  (bsc#1211592 CVE-2023-2860 CVE-2022-48687 bsc#1223952).
- Update
  patches.suse/net-smc-Fix-possible-access-to-freed-memory-in-link-clear
  (git-fixes CVE-2022-48673 bsc#1223934).
- Update
  patches.suse/nvme-tcp-fix-uaf-when-detecting-digest-errors.patch
  (bsc#1200313 bsc#1201489 CVE-2022-48686 bsc#1223948).
- Update patches.suse/nvmet-fix-a-use-after-free.patch (git-fixes
  CVE-2022-48697 bsc#1223922).
- Update
  patches.suse/of-fdt-fix-off-by-one-error-in-unflatten_dt_nodes.patch
  (git-fixes CVE-2022-48672 bsc#1223931).
- Update
  patches.suse/scsi-mpt3sas-Fix-use-after-free-warning.patch
  (git-fixes CVE-2022-48695 bsc#1223941).
- Update
  patches.suse/soc-brcmstb-pm-arm-Fix-refcount-leak-and-__iomem-lea.patch
  (git-fixes CVE-2022-48693 bsc#1223963).
- Update
  patches.suse/thermal-int340x_thermal-handle-data_vault-when-the-v.patch
  (bsc#1201308 CVE-2022-48703 bsc#1223924).
- Update patches.suse/vfio-type1-Unpin-zero-pages.patch (git-fixes
  CVE-2022-48700 bsc#1223957).
- commit c8677b5</changelog>
  <changelog author="krisman@suse.de" date="1715083201">- Update patches.suse/ice-Fix-DMA-mappings-leak.patch (jsc#PED-376
  CVE-2022-48690 bsc#1223960).
- commit 7e1bf3d</changelog>
  <changelog author="krisman@suse.de" date="1715083202">- Update
  patches.suse/1576-drm-amd-display-fix-memory-leak-when-using-debugfs_l.patch
  (jsc#PED-1166 jsc#PED-1168 jsc#PED-1170 jsc#PED-1218
  jsc#PED-1220 jsc#PED-1222 jsc#PED-1223 jsc#PED-1225 jsc#PED-2849
  CVE-2022-48698 bsc#1223956).
- commit a0e3008</changelog>
  <changelog author="tiwai@suse.de" date="1715083203">- Reapply "drm/qxl: simplify qxl_fence_wait" (stable-fixes).
- commit 8f3269f</changelog>
  <changelog author="vkarasulli@suse.de" date="1715083204">- netfilter: nft_ct: fix l3num expectations with inet pseudo
  family (git-fixes).
- commit 87e8a80</changelog>
  <changelog author="ptesarik@suse.com" date="1715083205">- Delete patches.suse/Revert-drm-qxl-simplify-qxl_fence_wait.patch
  and add the commit to blacklist.conf.
- commit e221716</changelog>
</package>
<package pkgid="ccae2fd07e1f9565b9c0ef490ca99eb7617ad65acd7312d4605bcc3a23cccd42" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.13.52.1"/>
  <changelog author="petr.pavlu@suse.com" date="1714996800">- tracing: Show size of requested perf buffer (git-fixes).
- commit f8d068b</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996801">- tracing/net_sched: Fix tracepoints that save qdisc_dev()
  as a string (git-fixes).
- commit a272f90</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996802">- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page
  in concurrent environment (git-fixes).
- commit 118cfcd</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996803">- kprobes: Fix possible use-after-free issue on kprobe
  registration (git-fixes).
- commit e007447</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996804">- ring-buffer: Only update pages_touched when a new page is
  touched (git-fixes).
- commit b42aba1</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996805">- blacklist.conf: add a not-relevant module-loader patch
- commit 90c64db</changelog>
  <changelog author="vkarasulli@suse.de" date="1714996806">- Update
  patches.suse/IB-core-Fix-a-nested-dead-lock-as-part-of-ODP-flow.patch
  (git-fixes CVE-2022-48675 bsc#1223894).
- Update
  patches.suse/drm-gma500-Fix-BUG-sleeping-function-called-from-inv.patch
  (git-fixes CVE-2022-48634 bsc#1223501).
- Update
  patches.suse/drm-i915-gem-Really-move-i915_gem_context.link-under.patch
  (CVE-2022-48662 bsc#1223505a4e7ccdac38e ("drm/i915: Move
  context management under GEM") bsc#1223505).
- Update
  patches.suse/i2c-mlxbf-prevent-stack-overflow-in-mlxbf_i2c_smbus_.patch
  (git-fixes CVE-2022-48632 bsc#1223481).
- Update
  patches.suse/ice-Fix-crash-by-keep-old-cfg-when-update-TCs-more-t.patch
  (git-fixes CVE-2022-48652 bsc#1223520).
- Update
  patches.suse/s390-dasd-fix-Oops-in-dasd_alias_get_start_dev-due-to-missing-pavgroup
  (git-fixes CVE-2022-48636 bsc#1223512).
- commit 523501c</changelog>
  <changelog author="dsterba@suse.com" date="1714996807">- fs: sysfs: Fix reference leak in sysfs_break_active_protection() (CVE-2024-26993 bsc#1223693)
- commit b0c9830</changelog>
  <changelog author="vkarasulli@suse.de" date="1714996808">- net: sparx5: Fix use after free inside sparx5_del_mact_entry
  (bsc#1223052 CVE-2024-26856).
- commit fc5c6ad</changelog>
  <changelog author="vkarasulli@suse.de" date="1714996809">- igc: avoid returning frame twice in XDP_REDIRECT (bsc#1223061
  CVE-2024-26853).
- commit 021db33</changelog>
  <changelog author="vkarasulli@suse.de" date="1714996810">- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in
  custom expectations (bsc#1222368 CVE-2024-26673).
- commit 785b7d0</changelog>
  <changelog author="mkoutny@suse.com" date="1714996811">- Update
  patches.suse/drm-i915-gem-Really-move-i915_gem_context.link-under.patch
  (CVE-2022-48662 bsc#1223505).
  Unbreak metadata (References: collides with our internal tracking,
  switch to Fixes: when referencing a commit).
- commit cd38265</changelog>
  <changelog author="mkubecek@suse.cz" date="1714996812">- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
  (CVE-2024-0639 bsc#1218917).
- commit 517d4f7</changelog>
  <changelog author="mkubecek@suse.cz" date="1714996813">- packet: annotate data-races around ignore_outgoing
  (CVE-2024-26862 bsc#1223111).
- commit 6e591e7</changelog>
  <changelog author="krisman@suse.de" date="1715083200">- Update
  patches.suse/ALSA-emu10k1-Fix-out-of-bounds-access-in-snd_emu10k1.patch
  (git-fixes CVE-2022-48702 bsc#1223923).
- Update
  patches.suse/ALSA-usb-audio-Fix-an-out-of-bounds-bug-in-__snd_usb.patch
  (git-fixes CVE-2022-48701 bsc#1223921).
- Update
  patches.suse/RDMA-irdma-Fix-drain-SQ-hang-with-no-completion.patch
  (jsc#SLE-18383 CVE-2022-48694 bsc#1223964).
- Update
  patches.suse/RDMA-srp-Set-scmnd-result-only-when-scmnd-is-not-NUL.patch
  (git-fixes CVE-2022-48692 bsc#1223962).
- Update
  patches.suse/cgroup-Add-missing-cpus_read_lock-to-cgroup_attach_task_all.patch
  (bsc#1196869 CVE-2022-48671 bsc#1223929).
- Update
  patches.suse/drm-radeon-add-a-force-flush-to-delay-work-when-rade.patch
  (git-fixes CVE-2022-48704 bsc#1223932).
- Update
  patches.suse/i40e-Fix-kernel-crash-during-module-removal.patch
  (jsc#SLE-18378 CVE-2022-48688 bsc#1223953).
- Update
  patches.suse/ipv6-sr-fix-out-of-bounds-read-when-setting-HMAC-dat.patch
  (bsc#1211592 CVE-2023-2860 CVE-2022-48687 bsc#1223952).
- Update
  patches.suse/net-smc-Fix-possible-access-to-freed-memory-in-link-clear
  (git-fixes CVE-2022-48673 bsc#1223934).
- Update
  patches.suse/nvme-tcp-fix-uaf-when-detecting-digest-errors.patch
  (bsc#1200313 bsc#1201489 CVE-2022-48686 bsc#1223948).
- Update patches.suse/nvmet-fix-a-use-after-free.patch (git-fixes
  CVE-2022-48697 bsc#1223922).
- Update
  patches.suse/of-fdt-fix-off-by-one-error-in-unflatten_dt_nodes.patch
  (git-fixes CVE-2022-48672 bsc#1223931).
- Update
  patches.suse/scsi-mpt3sas-Fix-use-after-free-warning.patch
  (git-fixes CVE-2022-48695 bsc#1223941).
- Update
  patches.suse/soc-brcmstb-pm-arm-Fix-refcount-leak-and-__iomem-lea.patch
  (git-fixes CVE-2022-48693 bsc#1223963).
- Update
  patches.suse/thermal-int340x_thermal-handle-data_vault-when-the-v.patch
  (bsc#1201308 CVE-2022-48703 bsc#1223924).
- Update patches.suse/vfio-type1-Unpin-zero-pages.patch (git-fixes
  CVE-2022-48700 bsc#1223957).
- commit c8677b5</changelog>
  <changelog author="krisman@suse.de" date="1715083201">- Update patches.suse/ice-Fix-DMA-mappings-leak.patch (jsc#PED-376
  CVE-2022-48690 bsc#1223960).
- commit 7e1bf3d</changelog>
  <changelog author="krisman@suse.de" date="1715083202">- Update
  patches.suse/1576-drm-amd-display-fix-memory-leak-when-using-debugfs_l.patch
  (jsc#PED-1166 jsc#PED-1168 jsc#PED-1170 jsc#PED-1218
  jsc#PED-1220 jsc#PED-1222 jsc#PED-1223 jsc#PED-1225 jsc#PED-2849
  CVE-2022-48698 bsc#1223956).
- commit a0e3008</changelog>
  <changelog author="tiwai@suse.de" date="1715083203">- Reapply "drm/qxl: simplify qxl_fence_wait" (stable-fixes).
- commit 8f3269f</changelog>
  <changelog author="vkarasulli@suse.de" date="1715083204">- netfilter: nft_ct: fix l3num expectations with inet pseudo
  family (git-fixes).
- commit 87e8a80</changelog>
  <changelog author="ptesarik@suse.com" date="1715083205">- Delete patches.suse/Revert-drm-qxl-simplify-qxl_fence_wait.patch
  and add the commit to blacklist.conf.
- commit e221716</changelog>
</package>
<package pkgid="a925837b3308e3dbabdb7a981bf32c1ee3c342a3a9c5326d7a194925f6799bdf" name="kernel-rt" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.13.55.1"/>
  <changelog author="petr.pavlu@suse.com" date="1714996800">- kprobes: Fix possible use-after-free issue on kprobe
  registration (git-fixes).
- commit e007447</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996801">- ring-buffer: Only update pages_touched when a new page is
  touched (git-fixes).
- commit b42aba1</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996802">- blacklist.conf: add a not-relevant module-loader patch
- commit 90c64db</changelog>
  <changelog author="vkarasulli@suse.de" date="1714996803">- Update
  patches.suse/IB-core-Fix-a-nested-dead-lock-as-part-of-ODP-flow.patch
  (git-fixes CVE-2022-48675 bsc#1223894).
- Update
  patches.suse/drm-gma500-Fix-BUG-sleeping-function-called-from-inv.patch
  (git-fixes CVE-2022-48634 bsc#1223501).
- Update
  patches.suse/drm-i915-gem-Really-move-i915_gem_context.link-under.patch
  (CVE-2022-48662 bsc#1223505a4e7ccdac38e ("drm/i915: Move
  context management under GEM") bsc#1223505).
- Update
  patches.suse/i2c-mlxbf-prevent-stack-overflow-in-mlxbf_i2c_smbus_.patch
  (git-fixes CVE-2022-48632 bsc#1223481).
- Update
  patches.suse/ice-Fix-crash-by-keep-old-cfg-when-update-TCs-more-t.patch
  (git-fixes CVE-2022-48652 bsc#1223520).
- Update
  patches.suse/s390-dasd-fix-Oops-in-dasd_alias_get_start_dev-due-to-missing-pavgroup
  (git-fixes CVE-2022-48636 bsc#1223512).
- commit 523501c</changelog>
  <changelog author="dsterba@suse.com" date="1714996804">- fs: sysfs: Fix reference leak in sysfs_break_active_protection() (CVE-2024-26993 bsc#1223693)
- commit b0c9830</changelog>
  <changelog author="vkarasulli@suse.de" date="1714996805">- net: sparx5: Fix use after free inside sparx5_del_mact_entry
  (bsc#1223052 CVE-2024-26856).
- commit fc5c6ad</changelog>
  <changelog author="vkarasulli@suse.de" date="1714996806">- igc: avoid returning frame twice in XDP_REDIRECT (bsc#1223061
  CVE-2024-26853).
- commit 021db33</changelog>
  <changelog author="vkarasulli@suse.de" date="1714996807">- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in
  custom expectations (bsc#1222368 CVE-2024-26673).
- commit 785b7d0</changelog>
  <changelog author="mkoutny@suse.com" date="1714996808">- Update
  patches.suse/drm-i915-gem-Really-move-i915_gem_context.link-under.patch
  (CVE-2022-48662 bsc#1223505).
  Unbreak metadata (References: collides with our internal tracking,
  switch to Fixes: when referencing a commit).
- commit cd38265</changelog>
  <changelog author="mkubecek@suse.cz" date="1714996809">- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
  (CVE-2024-0639 bsc#1218917).
- commit 517d4f7</changelog>
  <changelog author="mkubecek@suse.cz" date="1714996810">- packet: annotate data-races around ignore_outgoing
  (CVE-2024-26862 bsc#1223111).
- commit 6e591e7</changelog>
  <changelog author="krisman@suse.de" date="1715083200">- Update
  patches.suse/ALSA-emu10k1-Fix-out-of-bounds-access-in-snd_emu10k1.patch
  (git-fixes CVE-2022-48702 bsc#1223923).
- Update
  patches.suse/ALSA-usb-audio-Fix-an-out-of-bounds-bug-in-__snd_usb.patch
  (git-fixes CVE-2022-48701 bsc#1223921).
- Update
  patches.suse/RDMA-irdma-Fix-drain-SQ-hang-with-no-completion.patch
  (jsc#SLE-18383 CVE-2022-48694 bsc#1223964).
- Update
  patches.suse/RDMA-srp-Set-scmnd-result-only-when-scmnd-is-not-NUL.patch
  (git-fixes CVE-2022-48692 bsc#1223962).
- Update
  patches.suse/cgroup-Add-missing-cpus_read_lock-to-cgroup_attach_task_all.patch
  (bsc#1196869 CVE-2022-48671 bsc#1223929).
- Update
  patches.suse/drm-radeon-add-a-force-flush-to-delay-work-when-rade.patch
  (git-fixes CVE-2022-48704 bsc#1223932).
- Update
  patches.suse/i40e-Fix-kernel-crash-during-module-removal.patch
  (jsc#SLE-18378 CVE-2022-48688 bsc#1223953).
- Update
  patches.suse/ipv6-sr-fix-out-of-bounds-read-when-setting-HMAC-dat.patch
  (bsc#1211592 CVE-2023-2860 CVE-2022-48687 bsc#1223952).
- Update
  patches.suse/net-smc-Fix-possible-access-to-freed-memory-in-link-clear
  (git-fixes CVE-2022-48673 bsc#1223934).
- Update
  patches.suse/nvme-tcp-fix-uaf-when-detecting-digest-errors.patch
  (bsc#1200313 bsc#1201489 CVE-2022-48686 bsc#1223948).
- Update patches.suse/nvmet-fix-a-use-after-free.patch (git-fixes
  CVE-2022-48697 bsc#1223922).
- Update
  patches.suse/of-fdt-fix-off-by-one-error-in-unflatten_dt_nodes.patch
  (git-fixes CVE-2022-48672 bsc#1223931).
- Update
  patches.suse/scsi-mpt3sas-Fix-use-after-free-warning.patch
  (git-fixes CVE-2022-48695 bsc#1223941).
- Update
  patches.suse/soc-brcmstb-pm-arm-Fix-refcount-leak-and-__iomem-lea.patch
  (git-fixes CVE-2022-48693 bsc#1223963).
- Update
  patches.suse/thermal-int340x_thermal-handle-data_vault-when-the-v.patch
  (bsc#1201308 CVE-2022-48703 bsc#1223924).
- Update patches.suse/vfio-type1-Unpin-zero-pages.patch (git-fixes
  CVE-2022-48700 bsc#1223957).
- commit c8677b5</changelog>
  <changelog author="krisman@suse.de" date="1715083201">- Update patches.suse/ice-Fix-DMA-mappings-leak.patch (jsc#PED-376
  CVE-2022-48690 bsc#1223960).
- commit 7e1bf3d</changelog>
  <changelog author="krisman@suse.de" date="1715083202">- Update
  patches.suse/1576-drm-amd-display-fix-memory-leak-when-using-debugfs_l.patch
  (jsc#PED-1166 jsc#PED-1168 jsc#PED-1170 jsc#PED-1218
  jsc#PED-1220 jsc#PED-1222 jsc#PED-1223 jsc#PED-1225 jsc#PED-2849
  CVE-2022-48698 bsc#1223956).
- commit a0e3008</changelog>
  <changelog author="tiwai@suse.de" date="1715083203">- Reapply "drm/qxl: simplify qxl_fence_wait" (stable-fixes).
- commit 8f3269f</changelog>
  <changelog author="vkarasulli@suse.de" date="1715083204">- netfilter: nft_ct: fix l3num expectations with inet pseudo
  family (git-fixes).
- commit 87e8a80</changelog>
  <changelog author="ptesarik@suse.com" date="1715083205">- Delete patches.suse/Revert-drm-qxl-simplify-qxl_fence_wait.patch
  and add the commit to blacklist.conf.
- commit e221716</changelog>
  <changelog author="neilb@suse.de" date="1715169600">- Update
  patches.suse/SUNRPC-fix-a-memleak-in-gss_import_v2_context.patch
  (git-fixes bsc#1223858).
- commit e50ed21</changelog>
  <changelog author="ptesarik@suse.com" date="1716379200">- Add two patches to match SLE15-SP5:
  patches.suse/Revert-drm-qxl-simplify-qxl_fence_wait.patch
  patches.suse/Reapply-drm-qxl-simplify-qxl_fence_wait.patch
- commit f92ae49</changelog>
  <changelog author="vbabka@suse.cz" date="1716379201">- Update
  patches.suse/efi-libstub-Implement-support-for-unaccepted-memory.patch
  (jsc#PED-7167, bsc#1224169).
- commit a57eb93</changelog>
</package>
<package pkgid="ae8f73dec21b407e8b97475f055dd73a1b37a7785c8cd0d26e31ecf3c50918ae" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.13.55.1"/>
  <changelog author="petr.pavlu@suse.com" date="1714996800">- kprobes: Fix possible use-after-free issue on kprobe
  registration (git-fixes).
- commit e007447</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996801">- ring-buffer: Only update pages_touched when a new page is
  touched (git-fixes).
- commit b42aba1</changelog>
  <changelog author="petr.pavlu@suse.com" date="1714996802">- blacklist.conf: add a not-relevant module-loader patch
- commit 90c64db</changelog>
  <changelog author="vkarasulli@suse.de" date="1714996803">- Update
  patches.suse/IB-core-Fix-a-nested-dead-lock-as-part-of-ODP-flow.patch
  (git-fixes CVE-2022-48675 bsc#1223894).
- Update
  patches.suse/drm-gma500-Fix-BUG-sleeping-function-called-from-inv.patch
  (git-fixes CVE-2022-48634 bsc#1223501).
- Update
  patches.suse/drm-i915-gem-Really-move-i915_gem_context.link-under.patch
  (CVE-2022-48662 bsc#1223505a4e7ccdac38e ("drm/i915: Move
  context management under GEM") bsc#1223505).
- Update
  patches.suse/i2c-mlxbf-prevent-stack-overflow-in-mlxbf_i2c_smbus_.patch
  (git-fixes CVE-2022-48632 bsc#1223481).
- Update
  patches.suse/ice-Fix-crash-by-keep-old-cfg-when-update-TCs-more-t.patch
  (git-fixes CVE-2022-48652 bsc#1223520).
- Update
  patches.suse/s390-dasd-fix-Oops-in-dasd_alias_get_start_dev-due-to-missing-pavgroup
  (git-fixes CVE-2022-48636 bsc#1223512).
- commit 523501c</changelog>
  <changelog author="dsterba@suse.com" date="1714996804">- fs: sysfs: Fix reference leak in sysfs_break_active_protection() (CVE-2024-26993 bsc#1223693)
- commit b0c9830</changelog>
  <changelog author="vkarasulli@suse.de" date="1714996805">- net: sparx5: Fix use after free inside sparx5_del_mact_entry
  (bsc#1223052 CVE-2024-26856).
- commit fc5c6ad</changelog>
  <changelog author="vkarasulli@suse.de" date="1714996806">- igc: avoid returning frame twice in XDP_REDIRECT (bsc#1223061
  CVE-2024-26853).
- commit 021db33</changelog>
  <changelog author="vkarasulli@suse.de" date="1714996807">- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in
  custom expectations (bsc#1222368 CVE-2024-26673).
- commit 785b7d0</changelog>
  <changelog author="mkoutny@suse.com" date="1714996808">- Update
  patches.suse/drm-i915-gem-Really-move-i915_gem_context.link-under.patch
  (CVE-2022-48662 bsc#1223505).
  Unbreak metadata (References: collides with our internal tracking,
  switch to Fixes: when referencing a commit).
- commit cd38265</changelog>
  <changelog author="mkubecek@suse.cz" date="1714996809">- sctp: fix potential deadlock on &amp;net-&gt;sctp.addr_wq_lock
  (CVE-2024-0639 bsc#1218917).
- commit 517d4f7</changelog>
  <changelog author="mkubecek@suse.cz" date="1714996810">- packet: annotate data-races around ignore_outgoing
  (CVE-2024-26862 bsc#1223111).
- commit 6e591e7</changelog>
  <changelog author="krisman@suse.de" date="1715083200">- Update
  patches.suse/ALSA-emu10k1-Fix-out-of-bounds-access-in-snd_emu10k1.patch
  (git-fixes CVE-2022-48702 bsc#1223923).
- Update
  patches.suse/ALSA-usb-audio-Fix-an-out-of-bounds-bug-in-__snd_usb.patch
  (git-fixes CVE-2022-48701 bsc#1223921).
- Update
  patches.suse/RDMA-irdma-Fix-drain-SQ-hang-with-no-completion.patch
  (jsc#SLE-18383 CVE-2022-48694 bsc#1223964).
- Update
  patches.suse/RDMA-srp-Set-scmnd-result-only-when-scmnd-is-not-NUL.patch
  (git-fixes CVE-2022-48692 bsc#1223962).
- Update
  patches.suse/cgroup-Add-missing-cpus_read_lock-to-cgroup_attach_task_all.patch
  (bsc#1196869 CVE-2022-48671 bsc#1223929).
- Update
  patches.suse/drm-radeon-add-a-force-flush-to-delay-work-when-rade.patch
  (git-fixes CVE-2022-48704 bsc#1223932).
- Update
  patches.suse/i40e-Fix-kernel-crash-during-module-removal.patch
  (jsc#SLE-18378 CVE-2022-48688 bsc#1223953).
- Update
  patches.suse/ipv6-sr-fix-out-of-bounds-read-when-setting-HMAC-dat.patch
  (bsc#1211592 CVE-2023-2860 CVE-2022-48687 bsc#1223952).
- Update
  patches.suse/net-smc-Fix-possible-access-to-freed-memory-in-link-clear
  (git-fixes CVE-2022-48673 bsc#1223934).
- Update
  patches.suse/nvme-tcp-fix-uaf-when-detecting-digest-errors.patch
  (bsc#1200313 bsc#1201489 CVE-2022-48686 bsc#1223948).
- Update patches.suse/nvmet-fix-a-use-after-free.patch (git-fixes
  CVE-2022-48697 bsc#1223922).
- Update
  patches.suse/of-fdt-fix-off-by-one-error-in-unflatten_dt_nodes.patch
  (git-fixes CVE-2022-48672 bsc#1223931).
- Update
  patches.suse/scsi-mpt3sas-Fix-use-after-free-warning.patch
  (git-fixes CVE-2022-48695 bsc#1223941).
- Update
  patches.suse/soc-brcmstb-pm-arm-Fix-refcount-leak-and-__iomem-lea.patch
  (git-fixes CVE-2022-48693 bsc#1223963).
- Update
  patches.suse/thermal-int340x_thermal-handle-data_vault-when-the-v.patch
  (bsc#1201308 CVE-2022-48703 bsc#1223924).
- Update patches.suse/vfio-type1-Unpin-zero-pages.patch (git-fixes
  CVE-2022-48700 bsc#1223957).
- commit c8677b5</changelog>
  <changelog author="krisman@suse.de" date="1715083201">- Update patches.suse/ice-Fix-DMA-mappings-leak.patch (jsc#PED-376
  CVE-2022-48690 bsc#1223960).
- commit 7e1bf3d</changelog>
  <changelog author="krisman@suse.de" date="1715083202">- Update
  patches.suse/1576-drm-amd-display-fix-memory-leak-when-using-debugfs_l.patch
  (jsc#PED-1166 jsc#PED-1168 jsc#PED-1170 jsc#PED-1218
  jsc#PED-1220 jsc#PED-1222 jsc#PED-1223 jsc#PED-1225 jsc#PED-2849
  CVE-2022-48698 bsc#1223956).
- commit a0e3008</changelog>
  <changelog author="tiwai@suse.de" date="1715083203">- Reapply "drm/qxl: simplify qxl_fence_wait" (stable-fixes).
- commit 8f3269f</changelog>
  <changelog author="vkarasulli@suse.de" date="1715083204">- netfilter: nft_ct: fix l3num expectations with inet pseudo
  family (git-fixes).
- commit 87e8a80</changelog>
  <changelog author="ptesarik@suse.com" date="1715083205">- Delete patches.suse/Revert-drm-qxl-simplify-qxl_fence_wait.patch
  and add the commit to blacklist.conf.
- commit e221716</changelog>
  <changelog author="neilb@suse.de" date="1715169600">- Update
  patches.suse/SUNRPC-fix-a-memleak-in-gss_import_v2_context.patch
  (git-fixes bsc#1223858).
- commit e50ed21</changelog>
  <changelog author="ptesarik@suse.com" date="1716379200">- Add two patches to match SLE15-SP5:
  patches.suse/Revert-drm-qxl-simplify-qxl_fence_wait.patch
  patches.suse/Reapply-drm-qxl-simplify-qxl_fence_wait.patch
- commit f92ae49</changelog>
  <changelog author="vbabka@suse.cz" date="1716379201">- Update
  patches.suse/efi-libstub-Implement-support-for-unaccepted-memory.patch
  (jsc#PED-7167, bsc#1224169).
- commit a57eb93</changelog>
</package>
<package pkgid="b17ceea9a0999a3a61c9143425dabe1f62a968538e543a6fd669ea888678107a" name="kernel-rt" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.13.58.1"/>
  <changelog author="ematsumiya@suse.de" date="1717502400">- smb: client: set correct id, uid and cruid for multiuser
  automounts (bsc#1223011, CVE-2024-26822).
- commit 04cc660</changelog>
  <changelog author="lduncan@suse.com" date="1717502401">- blacklist.conf: added fix that needs code not present
- commit 9671fd4</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502402">- bpf: handle ldimm64 properly in check_cfg() (bsc#1225756).
- commit 7a7f193</changelog>
  <changelog author="davide.benini@suse.com" date="1717502403">- blacklist.conf: add d380ce70058a4ccddc3e5f5c2063165dc07672c6
  netrom: Fix data-races around sysctl_net_busy_read
  (CVE-2024-27419 bsc#1224759)
- commit b538410</changelog>
  <changelog author="iivanov@suse.de" date="1717502404">- Refresh patches.suse/swiotlb-Fix-double-allocation-of-slots-due-to-broken-alignment-handling.patch
  This fixes following build warning:
  Changed build warnings:
  * **** 1 warnings *****
  * comparison of distinct pointer types lacks a cast in ../kernel/dma/swiotlb.c in swiotlb_do_find_slots (from ../include/linux/minmax.h)
  In file included from ../include/linux/kernel.h:17:0,
  ../kernel/dma/swiotlb.c: In function 'swiotlb_do_find_slots':
  ../include/linux/minmax.h:20:28: warning: comparison of distinct pointer types lacks a cast
  ../include/linux/minmax.h:26:4: note: in expansion of macro '__typecheck'
  ../include/linux/minmax.h:36:24: note: in expansion of macro '__safe_cmp'
  ../include/linux/minmax.h:52:19: note: in expansion of macro '__careful_cmp'
  ../kernel/dma/swiotlb.c:648:12: note: in expansion of macro 'max'
- commit a52b0ca</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502405">- bpf: remove unnecessary prune and jump points (bsc#1225756).
- bpf: mostly decouple jump history management from
  is_state_visited() (bsc#1225756).
- bpf: decouple prune and jump points (bsc#1225756).
- commit 574a67d</changelog>
  <changelog author="ematsumiya@suse.de" date="1717502406">- cifs: fix underflow in parse_server_interfaces() (bsc#1223084,
  CVE-2024-26828).
- commit cade548</changelog>
  <changelog author="lduncan@suse.com" date="1717502407">- Update
  patches.suse/scsi-core-Fix-unremoved-procfs-host-directory-regression.patch
  (git-fixes bsc#1223675 CVE-2024-269355).
  Adding the CVE references.
- commit 2df316d</changelog>
  <changelog author="iivanov@suse.de" date="1717502408">- ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array (bsc#1225506 CVE-2021-47548)
- commit b006eef</changelog>
  <changelog author="ematsumiya@suse.de" date="1717502409">- smb: client: fix potential deadlock when releasing mids
  (bsc#1224020, bsc#1225548, CVE-2023-52757).
- commit edc36f8</changelog>
  <changelog author="ematsumiya@suse.de" date="1717502410">- smb3: fix lock ordering potential deadlock in
  cifs_sync_mid_result (bsc#1224020, bsc#1224549, CVE-2024-35998).
- commit fbb4c17</changelog>
  <changelog author="farosas@suse.de" date="1717502411">- vhost-vdpa: fix use after free in vhost_vdpa_probe()
  (CVE-2023-52795 bsc#1225085).
- commit 423f910</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717588800">- bpf: Protect against int overflow for stack access size
  (bsc#1224488 CVE-2024-35905).
- commit 1edb341</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717588801">- kABI: bpf: struct bpf_insn_aux_data kABI workaround
  (bsc#1225756).
- commit b5b7cd0</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1717588802">- Update references
- commit 006ab15</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1717588803">- inet: inet_defrag: prevent sk release while still in use
  (CVE-2024-26921 bsc#1223138).
- commit fb20c1d</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717588804">- bpf, skmsg: Fix NULL pointer dereference in
  sk_psock_skb_ingress_enqueue (bsc#1225761 CVE-2024-36938).
- commit 38f788d</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717588805">- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
  (bsc#1224575 CVE-2024-35976).
- commit bc0a82d</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1717588806">- net: preserve kabi for sk_buff (CVE-2024-26921 bsc#1223138).
- commit 68cb9bf</changelog>
  <changelog author="oneukum@suse.com" date="1717588807">- usb: typec: ucsi: Limit read size on v1.2 (CVE-2024-35924
  bsc#1224657).
- commit 578815c</changelog>
</package>
<package pkgid="7be7d69a88eedc4eb90de8a3943a944abe29c8b69256f1911a72f36325156475" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.13.58.1"/>
  <changelog author="ematsumiya@suse.de" date="1717502400">- smb: client: set correct id, uid and cruid for multiuser
  automounts (bsc#1223011, CVE-2024-26822).
- commit 04cc660</changelog>
  <changelog author="lduncan@suse.com" date="1717502401">- blacklist.conf: added fix that needs code not present
- commit 9671fd4</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502402">- bpf: handle ldimm64 properly in check_cfg() (bsc#1225756).
- commit 7a7f193</changelog>
  <changelog author="davide.benini@suse.com" date="1717502403">- blacklist.conf: add d380ce70058a4ccddc3e5f5c2063165dc07672c6
  netrom: Fix data-races around sysctl_net_busy_read
  (CVE-2024-27419 bsc#1224759)
- commit b538410</changelog>
  <changelog author="iivanov@suse.de" date="1717502404">- Refresh patches.suse/swiotlb-Fix-double-allocation-of-slots-due-to-broken-alignment-handling.patch
  This fixes following build warning:
  Changed build warnings:
  * **** 1 warnings *****
  * comparison of distinct pointer types lacks a cast in ../kernel/dma/swiotlb.c in swiotlb_do_find_slots (from ../include/linux/minmax.h)
  In file included from ../include/linux/kernel.h:17:0,
  ../kernel/dma/swiotlb.c: In function 'swiotlb_do_find_slots':
  ../include/linux/minmax.h:20:28: warning: comparison of distinct pointer types lacks a cast
  ../include/linux/minmax.h:26:4: note: in expansion of macro '__typecheck'
  ../include/linux/minmax.h:36:24: note: in expansion of macro '__safe_cmp'
  ../include/linux/minmax.h:52:19: note: in expansion of macro '__careful_cmp'
  ../kernel/dma/swiotlb.c:648:12: note: in expansion of macro 'max'
- commit a52b0ca</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717502405">- bpf: remove unnecessary prune and jump points (bsc#1225756).
- bpf: mostly decouple jump history management from
  is_state_visited() (bsc#1225756).
- bpf: decouple prune and jump points (bsc#1225756).
- commit 574a67d</changelog>
  <changelog author="ematsumiya@suse.de" date="1717502406">- cifs: fix underflow in parse_server_interfaces() (bsc#1223084,
  CVE-2024-26828).
- commit cade548</changelog>
  <changelog author="lduncan@suse.com" date="1717502407">- Update
  patches.suse/scsi-core-Fix-unremoved-procfs-host-directory-regression.patch
  (git-fixes bsc#1223675 CVE-2024-269355).
  Adding the CVE references.
- commit 2df316d</changelog>
  <changelog author="iivanov@suse.de" date="1717502408">- ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array (bsc#1225506 CVE-2021-47548)
- commit b006eef</changelog>
  <changelog author="ematsumiya@suse.de" date="1717502409">- smb: client: fix potential deadlock when releasing mids
  (bsc#1224020, bsc#1225548, CVE-2023-52757).
- commit edc36f8</changelog>
  <changelog author="ematsumiya@suse.de" date="1717502410">- smb3: fix lock ordering potential deadlock in
  cifs_sync_mid_result (bsc#1224020, bsc#1224549, CVE-2024-35998).
- commit fbb4c17</changelog>
  <changelog author="farosas@suse.de" date="1717502411">- vhost-vdpa: fix use after free in vhost_vdpa_probe()
  (CVE-2023-52795 bsc#1225085).
- commit 423f910</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717588800">- bpf: Protect against int overflow for stack access size
  (bsc#1224488 CVE-2024-35905).
- commit 1edb341</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717588801">- kABI: bpf: struct bpf_insn_aux_data kABI workaround
  (bsc#1225756).
- commit b5b7cd0</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1717588802">- Update references
- commit 006ab15</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1717588803">- inet: inet_defrag: prevent sk release while still in use
  (CVE-2024-26921 bsc#1223138).
- commit fb20c1d</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717588804">- bpf, skmsg: Fix NULL pointer dereference in
  sk_psock_skb_ingress_enqueue (bsc#1225761 CVE-2024-36938).
- commit 38f788d</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1717588805">- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
  (bsc#1224575 CVE-2024-35976).
- commit bc0a82d</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1717588806">- net: preserve kabi for sk_buff (CVE-2024-26921 bsc#1223138).
- commit 68cb9bf</changelog>
  <changelog author="oneukum@suse.com" date="1717588807">- usb: typec: ucsi: Limit read size on v1.2 (CVE-2024-35924
  bsc#1224657).
- commit 578815c</changelog>
</package>
<package pkgid="82bdfc54bc89ea458519bfef45b275b78c80779eba6da61c648b53d99e596157" name="kernel-rt" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.13.61.1"/>
  <changelog author="vkarasulli@suse.de" date="1719576000">- iommu: Return right value in iommu_sva_bind_device()
  (git-fixes).
- iommu/amd: Fix sysfs leak in iommu init (git-fixes).
- commit 89e035d</changelog>
  <changelog author="vkarasulli@suse.de" date="1719576001">- iommu: mtk: fix module autoloading (git-fixes).
- commit 8d5ca45</changelog>
  <changelog author="ematsumiya@suse.de" date="1719576002">- smb: client: fix deadlock in smb2_find_smb_tcon() (bsc#1227103,
  CVE-2024-39468).
- commit ef9e40f</changelog>
  <changelog author="ptesarik@suse.com" date="1719576003">- arm64: mm: Don't remap pgtables for allocate vs populate
  (jsc#PED-8690).
- arm64: mm: Batch dsb and isb when populating pgtables
  (jsc#PED-8690).
- arm64: mm: Don't remap pgtables per-cont(pte|pmd) block
  (jsc#PED-8690).
- arm64: mm: don't acquire mutex when rewriting swapper
  (jsc#PED-8690).
- commit 911eabe</changelog>
  <changelog author="bdas@suse.de" date="1719576004">- net/9p: fix uninit-value in p9_client_rpc() (CVE-2024-39301
  bsc#1226994).
- commit b325415</changelog>
  <changelog author="tiwai@suse.de" date="1719662400">- gpiolib: cdev: Disallow reconfiguration without direction
  (uAPI v1) (git-fixes).
- gpio: davinci: Validate the obtained number of IRQs (git-fixes).
- commit dc60c09</changelog>
  <changelog author="tiwai@suse.de" date="1719748800">- i2c: testunit: discard write requests while old command is
  running (git-fixes).
- i2c: testunit: don't erase registers after STOP (git-fixes).
- mmc: sdhci: Do not lock spinlock around mmc_gpio_get_ro()
  (git-fixes).
- mmc: sdhci: Do not invert write-protect twice (git-fixes).
- mmc: sdhci-pci: Convert PCIBIOS_* return codes to errnos
  (git-fixes).
- commit 958e336</changelog>
  <changelog author="tiwai@suse.de" date="1719835200">- ata: ahci: Clean up sysfs file on error (git-fixes).
- ata: libata-core: Fix double free on error (git-fixes).
- ata: libata-core: Fix null pointer dereference on error
  (git-fixes).
- kbuild: Install dtb files as 0644 in Makefile.dtbinst
  (git-fixes).
- iio: chemical: bme680: Fix sensor data read operation
  (git-fixes).
- iio: chemical: bme680: Fix overflows in compensate() functions
  (git-fixes).
- iio: chemical: bme680: Fix calibration data variable
  (git-fixes).
- iio: chemical: bme680: Fix pressure value output (git-fixes).
- iio: accel: fxls8962af: select IIO_BUFFER &amp; IIO_KFIFO_BUF
  (git-fixes).
- iio: adc: ad7266: Fix variable checking bug (git-fixes).
- tty: mcf: MCF54418 has 10 UARTS (git-fixes).
- usb: dwc3: core: remove lock of otg mode during gadget
  suspend/resume to avoid deadlock (git-fixes).
- usb: musb: da8xx: fix a resource leak in probe() (git-fixes).
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
  (git-fixes).
- usb: gadget: printer: fix races against disable (git-fixes).
- commit 201a936</changelog>
  <changelog author="ptesarik@suse.com" date="1719835201">- net: ena: Fix redundant device NUMA node override
  (jsc#PED-8690).
- commit 629130c</changelog>
  <changelog author="mkubecek@suse.cz" date="1719835202">- tcp: do not accept ACK of bytes we never sent (CVE-2023-52881
  bsc#1225611).
- commit ab5f35b</changelog>
  <changelog author="mhocko@suse.com" date="1719835203">- Update
  patches.suse/1203-drm-mxsfb-Fix-NULL-pointer-dereference.patch
  (jsc#PED-1166 jsc#PED-1168 jsc#PED-1170 jsc#PED-1218
  jsc#PED-1220 jsc#PED-1222 jsc#PED-1223 jsc#PED-1225
  CVE-2022-48718 bsc#1226616).
- Update
  patches.suse/1250-drm-amd-display-Wrap-dcn301_calculate_wm_and_dlg-for.patch
  (jsc#PED-1166 jsc#PED-1168 jsc#PED-1170 jsc#PED-1218
  jsc#PED-1220 jsc#PED-1222 jsc#PED-1223 jsc#PED-1225
  CVE-2022-48766 bsc#1226704).
- Update
  patches.suse/1327-drm-msm-Fix-null-ptr-access-msm_ioctl_gem_submit.patch
  (jsc#PED-1166 jsc#PED-1168 jsc#PED-1170 jsc#PED-1218
  jsc#PED-1220 jsc#PED-1222 jsc#PED-1223 jsc#PED-1225
  CVE-2021-47610 bsc#1226581).
- Update
  patches.suse/ALSA-Fix-deadlocks-with-kctl-removals-at-disconnecti.patch
  (stable-fixes CVE-2024-38600 bsc#1226864).
- Update
  patches.suse/ALSA-core-Fix-NULL-module-pointer-assignment-at-card.patch
  (git-fixes CVE-2024-38605 bsc#1226740).
- Update
  patches.suse/ALSA-hda-cs_dsp_ctl-Use-private_free-for-control-cle.patch
  (git-fixes CVE-2024-38388 bsc#1226890).
- Update
  patches.suse/ALSA-timer-Set-lower-bound-of-start-tick-time.patch
  (stable-fixes git-fixes CVE-2024-38618 bsc#1226754).
- Update
  patches.suse/ASoC-kirkwood-Fix-potential-NULL-dereference.patch
  (git-fixes CVE-2024-38550 bsc#1226633).
- Update
  patches.suse/Input-cyapa-add-missing-input-core-locking-to-suspen.patch
  (git-fixes CVE-2023-52884 bsc#1226764).
- Update
  patches.suse/KEYS-trusted-Do-not-use-WARN-when-encode-fails.patch
  (git-fixes CVE-2024-36975 bsc#1226520).
- Update
  patches.suse/KEYS-trusted-Fix-memory-leak-in-tpm2_key_encode.patch
  (git-fixes CVE-2024-36967 bsc#1226131).
- Update
  patches.suse/RDMA-hns-Fix-deadlock-on-SRQ-async-events.patch
  (git-fixes CVE-2024-38591 bsc#1226738).
- Update
  patches.suse/RDMA-hns-Modify-the-print-level-of-CQE-error.patch
  (git-fixes CVE-2024-38590 bsc#1226839).
- Update
  patches.suse/RDMA-rxe-Fix-seg-fault-in-rxe_comp_queue_pkt.patch
  (git-fixes CVE-2024-38544 bsc#1226597).
- Update
  patches.suse/block-fix-memory-leak-in-disk_register_independent_a.patch
  (jsc#PED-1183 CVE-2022-48753 bsc#1226693).
- Update
  patches.suse/bnxt_re-avoid-shift-undefined-behavior-in-bnxt_qplib.patch
  (git-fixes CVE-2024-38540 bsc#1226582).
- Update
  patches.suse/bpf-Guard-against-accessing-NULL-pt_regs-in-bpf_get_.patch
  (jsc#PED-1377 CVE-2022-48770 bsc#1226730).
- Update
  patches.suse/bpf-Use-VM_MAP-instead-of-VM_ALLOC-for-ringbuf.patch
  (jsc#PED-1377 CVE-2022-48714 bsc#1226622).
- Update
  patches.suse/btrfs-fix-use-after-free-after-failure-to-create-a-s.patch
  (git-fixes CVE-2022-48733 bsc#1226718).
- Update
  patches.suse/cppc_cpufreq-Fix-possible-null-pointer-dereference.patch
  (git-fixes CVE-2024-38573 bsc#1226739).
- Update patches.suse/crypto-bcm-Fix-pointer-arithmetic.patch
  (git-fixes CVE-2024-38579 bsc#1226637).
- Update
  patches.suse/drm-amd-display-Fix-division-by-zero-in-setup_dsc_co.patch
  (stable-fixes CVE-2024-36969 bsc#1226155).
- Update
  patches.suse/drm-amd-display-Fix-potential-index-out-of-bounds-in.patch
  (git-fixes CVE-2024-38552 bsc#1226767).
- Update
  patches.suse/drm-amdgpu-add-error-handle-to-avoid-out-of-bounds.patch
  (stable-fixes CVE-2024-39471 bsc#1227096).
- Update
  patches.suse/drm-amdgpu-mes-fix-use-after-free-issue.patch
  (stable-fixes CVE-2024-38581 bsc#1226657).
- Update
  patches.suse/drm-bridge-cdns-mhdp8546-Fix-possible-null-pointer-d.patch
  (git-fixes CVE-2024-38548).
- Update
  patches.suse/drm-mediatek-Add-0-size-check-to-mtk_drm_gem_obj.patch
  (git-fixes CVE-2024-38549 bsc#1226735).
- Update
  patches.suse/drm-msm-a6xx-Avoid-a-nullptr-dereference-when-speedb.patch
  (git-fixes CVE-2024-38390 bsc#1226891).
- Update
  patches.suse/drm-vc4-Fix-possible-null-pointer-dereference.patch
  (git-fixes CVE-2024-38546 bsc#1226593).
- Update
  patches.suse/drm-vmwgfx-Fix-invalid-reads-in-fence-signaled-event.patch
  (git-fixes CVE-2024-36960 bsc#1225872).
- Update
  patches.suse/efi-libstub-only-free-priv.runtime_map-when-allocate.patch
  (git-fixes CVE-2024-33619 bsc#1226768).
- Update
  patches.suse/io-wq-check-for-wq-exit-after-adding-new-worker-task.patch
  (bsc#1205205 CVE-2021-47577 bsc#1226538).
- Update
  patches.suse/jffs2-prevent-xattr-node-from-overflowing-the-eraseblock.patch
  (git-fixes CVE-2024-38599 bsc#1226848).
- Update
  patches.suse/media-atomisp-ssh_css-Fix-a-null-pointer-dereference.patch
  (git-fixes CVE-2024-38547 bsc#1226632).
- Update
  patches.suse/media-lgdt3306a-Add-a-check-against-null-pointer-def.patch
  (stable-fixes CVE-2022-48772 bsc#1226976).
- Update
  patches.suse/media-stk1160-fix-bounds-checking-in-stk1160_copy_vi.patch
  (git-fixes CVE-2024-38621 bsc#1226895).
- Update
  patches.suse/net-bridge-vlan-fix-memory-leak-in-__allowed_ingress.patch
  (git-fixes CVE-2022-48748 bsc#1226647).
- Update
  patches.suse/net-sched-sch_ets-don-t-remove-idle-classes-from-the.patch
  (bsc#1207361 CVE-2021-47595 bsc#1226552).
- Update
  patches.suse/netfilter-complete-validation-of-user-input.patch
  (CVE-2024-35896 bsc#1224662 git-fixes CVE-2024-35962
  bsc#1224583).
- Update
  patches.suse/nfc-nci-Fix-uninit-value-in-nci_rx_work.patch
  (git-fixes CVE-2024-38381 bsc#1226878).
- Update
  patches.suse/nilfs2-fix-potential-hang-in-nilfs_detach_log_writer.patch
  (stable-fixes CVE-2024-38582 bsc#1226658).
- Update
  patches.suse/nilfs2-fix-use-after-free-of-timer-for-log-writer-th.patch
  (git-fixes CVE-2024-38583 bsc#1226777).
- Update
  patches.suse/powerpc64-bpf-Limit-ldbrx-to-processors-compliant-wi.patch
  (jsc#PED-1377 CVE-2022-48755 bsc#1226706).
- Update
  patches.suse/remoteproc-mediatek-Make-sure-IPI-buffer-fits-in-L2T.patch
  (git-fixes CVE-2024-36965 bsc#1226149).
- Update
  patches.suse/ring-buffer-Fix-a-race-between-readers-and-resize-checks.patch
  (bsc#1222893 CVE-2024-38601 bsc#1226876).
- Update
  patches.suse/scsi-qla2xxx-Fix-off-by-one-in-qla_edif_app_getstats.patch
  (git-fixes CVE-2024-36025 bsc#1225704).
- Update
  patches.suse/serial-max3100-Lock-port-lock-when-calling-uart_hand.patch
  (git-fixes CVE-2024-38634 bsc#1226868).
- Update
  patches.suse/serial-max3100-Update-uart_driver_registered-on-driv.patch
  (git-fixes CVE-2024-38633 bsc#1226867).
- Update
  patches.suse/soundwire-cadence-fix-invalid-PDI-offset.patch
  (stable-fixes CVE-2024-38635 bsc#1226863).
- Update patches.suse/speakup-Fix-sizeof-vs-ARRAY_SIZE-bug.patch
  (git-fixes CVE-2024-38587 bsc#1226780).
- Update
  patches.suse/swiotlb-Fix-double-allocation-of-slots-due-to-broken-alignment-handling.patch
  (bsc#1224331 CVE-2024-35814 bsc#1224602).
- Update
  patches.suse/thermal-drivers-tsens-Fix-null-pointer-dereference.patch
  (git-fixes CVE-2024-38571 bsc#1226737).
- Update
  patches.suse/tpm_tis_spi-Account-for-SPI-header-when-allocating-TPM-SPI-xfer-buffer.patch
  (bsc#1225535 CVE-2024-36477 bsc#1226840).
- Update
  patches.suse/usb-storage-alauda-Check-whether-the-media-is-initia.patch
  (git-fixes CVE-2024-38619 bsc#1226861).
- Update
  patches.suse/vduse-check-that-offset-is-within-bounds-in-get_conf.patch
  (jsc#PED-1549 CVE-2021-47604 bsc#1226566).
- Update
  patches.suse/vduse-fix-memory-corruption-in-vduse_dev_ioctl.patch
  (jsc#PED-1549 CVE-2021-47605 bsc#1226579).
- Update
  patches.suse/watchdog-cpu5wdt.c-Fix-use-after-free-bug-caused-by-.patch
  (git-fixes CVE-2024-38630 bsc#1226908).
- Update
  patches.suse/wifi-ar5523-enable-proper-endpoint-verification.patch
  (git-fixes CVE-2024-38565 bsc#1226747).
- Update
  patches.suse/wifi-carl9170-add-a-proper-sanity-check-for-endpoint.patch
  (git-fixes CVE-2024-38567 bsc#1226769).
- Update
  patches.suse/wifi-carl9170-re-fix-fortified-memset-warning.patch
  (git-fixes CVE-2024-38616 bsc#1226852).
- commit efd69a4</changelog>
  <changelog author="mkubecek@suse.cz" date="1719835204">- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique()
  (CVE-2024-36904 bsc#1225732).
- commit 975b193</changelog>
  <changelog author="jlee@suse.com" date="1719835205">- X.509: Fix the parser of extended key usage for length
  (bsc#1218820).
- commit c5d6d23</changelog>
  <changelog author="mhocko@suse.com" date="1719835206">- Update
  patches.suse/0001-dm-btree-remove-fix-use-after-free-in-rebalance_chil.patch
  (git-fixes CVE-2021-47600 bsc#1226575).
- Update
  patches.suse/ALSA-hda-Fix-UAF-of-leds-class-devs-at-unbinding.patch
  (bsc#1195349 CVE-2022-48735 bsc#1226719).
- Update
  patches.suse/ARM-9170-1-fix-panic-when-kasan-and-kprobe-are-enabl.patch
  (git-fixes CVE-2021-47618 bsc#1226644).
- Update
  patches.suse/ASoC-hdmi-codec-Fix-OOB-memory-accesses.patch
  (git-fixes CVE-2022-48739 bsc#1226675).
- Update
  patches.suse/ASoC-max9759-fix-underflow-in-speaker_gain_control_p.patch
  (git-fixes CVE-2022-48717 bsc#1226679).
- Update
  patches.suse/ASoC-ops-Reject-out-of-bounds-values-in-snd_soc_put_-4cf28e9ae6e2.patch
  (git-fixes CVE-2022-48736 bsc#1226721).
- Update
  patches.suse/ASoC-ops-Reject-out-of-bounds-values-in-snd_soc_put_-4f1e50d6a9cf.patch
  (git-fixes CVE-2022-48737 bsc#1226762).
- Update
  patches.suse/ASoC-ops-Reject-out-of-bounds-values-in-snd_soc_put_.patch
  (git-fixes CVE-2022-48738 bsc#1226674).
- Update
  patches.suse/Bluetooth-refactor-malicious-adv-data-check.patch
  (git-fixes CVE-2021-47620 bsc#1226669).
- Update patches.suse/IB-hfi1-Fix-AIP-early-init-panic.patch
  (git-fixes CVE-2022-48728 bsc#1226691).
- Update
  patches.suse/IB-hfi1-Fix-panic-with-larger-ipoib-send_queue_size.patch
  (jsc#SLE-19242 CVE-2022-48729 bsc#1226710).
- Update
  patches.suse/KVM-LAPIC-Also-cancel-preemption-timer-during-SET_LA.patch
  (git-fixes CVE-2022-48765 bsc#1226697).
- Update
  patches.suse/KVM-arm64-Avoid-consuming-a-stale-esr-value-when-SEr.patch
  (git-fixes CVE-2022-48727 bsc#1226690).
- Update
  patches.suse/KVM-x86-Forcibly-leave-nested-virt-when-SMM-state-is.patch
  (git-fixes CVE-2022-48763 bsc#1226628).
- Update
  patches.suse/PCI-pciehp-Fix-infinite-loop-in-IRQ-handler-upon-pow.patch
  (git-fixes CVE-2021-47617 bsc#1226614).
- Update
  patches.suse/RDMA-Fix-use-after-free-in-rxe_queue_cleanup.patch
  (jsc#SLE-19249 CVE-2021-47616 bsc#1226603).
- Update
  patches.suse/RDMA-irdma-Fix-a-user-after-free-in-add_pble_prm.patch
  (jsc#SLE-18383 CVE-2021-47614 bsc#1226601).
- Update
  patches.suse/RDMA-mlx5-Fix-releasing-unallocated-memory-in-dereg-.patch
  (jsc#SLE-19253 CVE-2021-47615 bsc#1226602).
- Update
  patches.suse/RDMA-siw-Fix-refcounting-leak-in-siw_create_qp.patch
  (jsc#SLE-19249 CVE-2022-48725 bsc#1226618).
- Update
  patches.suse/RDMA-ucma-Protect-mc-during-concurrent-multicast-lea.patch
  (git-fixes CVE-2022-48726 bsc#1226686).
- Update
  patches.suse/USB-core-Fix-hang-in-usb_kill_urb-by-adding-memory-b.patch
  (git-fixes CVE-2022-48760 bsc#1226712).
- Update
  patches.suse/USB-core-Make-do_proc_control-and-do_proc_bulk-killa.patch
  (git-fixes CVE-2021-47582 bsc#1226559).
- Update
  patches.suse/audit-improve-robustness-of-the-audit-queue-handling.patch
  (git-fixes CVE-2021-47603 bsc#1226577).
- Update patches.suse/block-Fix-wrong-offset-in-bio_truncate.patch
  (bsc#1202780 CVE-2022-48747 bsc#1226643).
- Update
  patches.suse/bpf-Fix-kernel-address-leakage-in-atomic-cmpxchg-s-r.patch
  (git-fixes CVE-2021-47607 bsc#1226580).
- Update
  patches.suse/bpf-Fix-kernel-address-leakage-in-atomic-fetch.patch
  (bsc#1193883 bsc#1194826 CVE-2022-0264 CVE-2021-47608
  bsc#1226569).
- Update
  patches.suse/bpf-Protect-against-int-overflow-for-stack-access-si.patch
  (bsc#1224488 CVE-2024-35905).
- Update
  patches.suse/btrfs-fix-deadlock-between-quota-disable-and-qgroup-.patch
  (bsc#1199295 CVE-2022-48734 bsc#1226626).
- Update
  patches.suse/btrfs-fix-memory-leak-in-__add_inode_ref.patch
  (bsc#1197915 CVE-2021-47585 bsc#1226556).
- Update
  patches.suse/ceph-properly-put-ceph_string-reference-after-async-create-attempt.patch
  (bsc#1195341 CVE-2022-48767 bsc#1226715).
- Update
  patches.suse/dma-buf-heaps-Fix-potential-spectre-v1-gadget.patch
  (git-fixes CVE-2022-48730 bsc#1226713).
- Update
  patches.suse/drm-msm-dpu-invalid-parameter-check-in-dpu_setup_dsp.patch
  (git-fixes CVE-2022-48749 bsc#1226650).
- Update
  patches.suse/drm-msm-dsi-invalid-parameter-check-in-msm_dsi_phy_e.patch
  (git-fixes CVE-2022-48756 bsc#1226698).
- Update
  patches.suse/drm-nouveau-fix-off-by-one-in-BIOS-boundary-checking.patch
  (git-fixes CVE-2022-48732 bsc#1226716).
- Update
  patches.suse/drm-vc4-kms-Add-missing-drm_crtc_commit_put.patch
  (git-fixes CVE-2021-47534).
- Update
  patches.suse/drm-vmwgfx-Fix-stale-file-descriptors-on-failed-user.patch
  (CVE-2022-22942 bsc#1195065 CVE-2022-48771 bsc#1226732).
- Update
  patches.suse/efi-runtime-avoid-EFIv2-runtime-services-on-Apple-x8.patch
  (git-fixes CVE-2022-48769 bsc#1226629).
- Update
  patches.suse/ext4-fix-error-handling-in-ext4_fc_record_modified_i.patch
  (bsc#1202767 CVE-2022-48712 bsc#1226673).
- Update
  patches.suse/firmware-arm_scpi-Fix-string-overflow-in-SCPI-genpd-.patch
  (git-fixes CVE-2021-47609 bsc#1226562).
- Update
  patches.suse/i3c-mipi-i3c-hci-Fix-out-of-bounds-access-in-hci_dma.patch
  (git-fixes CVE-2023-52766).
- Update patches.suse/i40e-Fix-queues-reservation-for-XDP.patch
  (git-fixes CVE-2021-47619 bsc#1226645).
- Update patches.suse/igbvf-fix-double-free-in-igbvf_probe.patch
  (jsc#SLE-18379 CVE-2021-47589 bsc#1226557).
- Update
  patches.suse/inet_diag-fix-kernel-infoleak-for-UDP-sockets.patch
  (git-fixes CVE-2021-47597 bsc#1226553).
- Update
  patches.suse/iocost-Fix-divide-by-zero-on-donation-from-low-hweig.patch
  (bsc#1198014 CVE-2021-47584 bsc#1226564).
- Update
  patches.suse/iommu-vt-d-fix-potential-memory-leak-in-intel_setup_irq_remapping
  (git-fixes CVE-2022-48724 bsc#1226624).
- Update
  patches.suse/isdn-cpai-check-ctr-cnr-to-avoid-array-index-out-of-.patch
  (stable-5.14.15 CVE-2021-43389 CVE-2021-3896 bsc#1191958
  CVE-2021-4439 bsc#1226670).
- Update
  patches.suse/mac80211-track-only-QoS-data-frames-for-admission-co.patch
  (git-fixes CVE-2021-47602 bsc#1226554).
- Update
  patches.suse/mac80211-validate-extended-element-ID-is-present.patch
  (git-fixes CVE-2021-47611 bsc#1226583).
- Update
  patches.suse/media-mxl111sf-change-mutex_init-location.patch
  (git-fixes CVE-2021-47583 bsc#1226563).
- Update
  patches.suse/net-amd-xgbe-Fix-skb-data-length-underflow.patch
  (git-fixes CVE-2022-48743 bsc#1226705).
- Update
  patches.suse/net-hns3-fix-use-after-free-bug-in-hclgevf_send_mbx_.patch
  (bsc#1190336 CVE-2021-47596 bsc#1226558).
- Update
  patches.suse/net-ieee802154-ca8210-Stop-leaking-skb-s.patch
  (git-fixes CVE-2022-48722 bsc#1226619).
- Update
  patches.suse/net-macsec-Fix-offload-support-for-NETDEV_UNREGISTER.patch
  (git-fixes CVE-2022-48720 bsc#1226683).
- Update
  patches.suse/net-mlx5-Use-del_timer_sync-in-fw-reset-flow-of-halt.patch
  (git-fixes CVE-2022-48745 bsc#1226702).
- Update
  patches.suse/net-mlx5e-Avoid-field-overflowing-memcpy.patch
  (git-fixes CVE-2022-48744 bsc#1226696).
- Update
  patches.suse/net-mlx5e-Fix-handling-of-wrong-devices-during-bond-.patch
  (git-fixes CVE-2022-48746 bsc#1226703).
- Update
  patches.suse/net-smc-Forward-wakeup-to-smc-socket-waitqueue-after-fallback
  (git-fixes CVE-2022-48721 bsc#1226685).
- Update
  patches.suse/net-smc-Transitional-solution-for-clcsock-race-issue
  (git-fixes CVE-2022-48751 bsc#1226653).
- Update
  patches.suse/net-stmmac-dwmac-rk-fix-oob-read-in-rk_gmac_setup.patch
  (git-fixes CVE-2021-47586 bsc#1226561).
- Update
  patches.suse/net-stmmac-fix-tc-flower-deletion-for-VLAN-priority-.patch
  (git-fixes CVE-2021-47592 bsc#1226572).
- Update
  patches.suse/net-systemport-Add-global-locking-for-descriptor-lif.patch
  (git-fixes CVE-2021-47587 bsc#1226567).
- Update
  patches.suse/nfc-fix-segfault-in-nfc_genl_dump_devices_done.patch
  (git-fixes CVE-2021-47612 bsc#1226585).
- Update
  patches.suse/of-module-prevent-NULL-pointer-dereference-in-vsnprintf.patch
  (bsc#1226587 CVE-2024-38541 CVE-2024-35878 bsc#1224671).
- Update
  patches.suse/perf-x86-intel-pt-Fix-crash-with-stop-filters-in-single-range-mode.patch
  (git fixes CVE-2022-48713).
- Update patches.suse/phylib-fix-potential-use-after-free.patch
  (git-fixes CVE-2022-48754 bsc#1226692).
- Update
  patches.suse/powerpc-perf-Fix-power_pmu_disable-to-call-clear_pmi.patch
  (bsc#1156395 CVE-2022-48752 bsc#1226709).
- Update
  patches.suse/rpmsg-char-Fix-race-between-the-release-of-rpmsg_ctr.patch
  (git-fixes CVE-2022-48759 bsc#1226711).
- Update
  patches.suse/scsi-bnx2fc-Flush-destroy_work-queue-before-calling-bnx2fc_interface_put
  (git-fixes bsc#1196746 CVE-2022-48758 bsc#1226708).
- Update patches.suse/scsi-bnx2fc-Make-bnx2fc_recv_frame-mp-safe
  (git-fixes bsc#1196746 CVE-2022-48715 bsc#1226621).
- Update
  patches.suse/scsi-scsi_debug-Don-t-call-kcalloc-if-size-arg-is-zero.patch
  (git-fixes CVE-2021-47578 bsc#1226539).
- Update
  patches.suse/scsi-scsi_debug-Fix-type-in-min_t-to-avoid-stack-OOB.patch
  (git-fixes CVE-2021-47580 bsc#1226550).
- Update
  patches.suse/scsi-scsi_debug-Sanity-check-block-descriptor-length-in-resp_mode_select.patch
  (git-fixes CVE-2021-47576 bsc#1226537).
- Update
  patches.suse/selinux-fix-double-free-of-cond_list-on-error-paths.patch
  (git-fixes CVE-2022-48740 bsc#1226699).
- Update
  patches.suse/spi-uniphier-fix-reference-count-leak-in-uniphier_sp.patch
  (git-fixes CVE-2022-48723 bsc#1226617).
- Update patches.suse/tee-amdtee-fix-an-IS_ERR-vs-NULL-bug.patch
  (jsc#SLE-21844 CVE-2021-47601 bsc#1226576).
- Update
  patches.suse/tipc-improve-size-validations-for-received-domain-re.patch
  (bsc#1195254 CVE-2022-0435 CVE-2022-48711 bsc#1226672).
- Update
  patches.suse/tracing-histogram-Fix-a-potential-memory-leak-for-kstrdup.patch
  (git-fixes CVE-2022-48768 bsc#1226720).
- Update
  patches.suse/usb-xhci-plat-fix-crash-when-suspend-if-remote-wake-.patch
  (git-fixes CVE-2022-48761 bsc#1226701).
- Update patches.suse/wifi-ath11k-fix-htt-pktlog-locking.patch
  (git-fixes CVE-2023-52800).
- commit cc322a0</changelog>
  <changelog author="tiwai@suse.de" date="1719921600">- mtd: rawnand: rockchip: ensure NVDDR timings are rejected
  (git-fixes).
- mtd: rawnand: Bypass a couple of sanity checks during NAND
  identification (git-fixes).
- mtd: rawnand: Ensure ECC configuration is propagated to upper
  layers (git-fixes).
- commit 69e8827</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1719921601">- kernel-doc: fix struct_group_tagged() parsing (git-fixes).
- lib: memcpy_kunit: Fix an invalid format specifier in an
  assertion msg (git-fixes).
- commit d600a63</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1719921602">- kbuild: do not include include/config/auto.conf from shell
  scripts (bsc#1227274).
- commit c743753</changelog>
  <changelog author="fdmanana@suse.com" date="1719921603">- btrfs: fix crash on racing fsync and size-extending write into
  prealloc (bsc#1227101 CVE-2024-37354).
- commit 899b45b</changelog>
  <changelog author="fdmanana@suse.com" date="1719921604">- btrfs: avoid copying BTRFS_ROOT_SUBVOL_DEAD flag to snapshot
  of subvolume being deleted (bsc#1221282).
- btrfs: don't abort filesystem when attempting to snapshot
  deleted subvolume (bsc#1221282 CVE-2024-26644 bsc#1222072).
- commit 7829d14</changelog>
  <changelog author="rhopkins@suse.de" date="1719921605">- hsr: Prevent use after free in prp_create_tagged_frame()
  (CVE-2023-52846 bsc#1225098).
- commit 74c7662</changelog>
</package>
<package pkgid="9eb58b473d81aef6dec2098b95408a6adcc7b0960abdcbeb110788d57b087e57" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.13.61.1"/>
  <changelog author="vkarasulli@suse.de" date="1719576000">- iommu: Return right value in iommu_sva_bind_device()
  (git-fixes).
- iommu/amd: Fix sysfs leak in iommu init (git-fixes).
- commit 89e035d</changelog>
  <changelog author="vkarasulli@suse.de" date="1719576001">- iommu: mtk: fix module autoloading (git-fixes).
- commit 8d5ca45</changelog>
  <changelog author="ematsumiya@suse.de" date="1719576002">- smb: client: fix deadlock in smb2_find_smb_tcon() (bsc#1227103,
  CVE-2024-39468).
- commit ef9e40f</changelog>
  <changelog author="ptesarik@suse.com" date="1719576003">- arm64: mm: Don't remap pgtables for allocate vs populate
  (jsc#PED-8690).
- arm64: mm: Batch dsb and isb when populating pgtables
  (jsc#PED-8690).
- arm64: mm: Don't remap pgtables per-cont(pte|pmd) block
  (jsc#PED-8690).
- arm64: mm: don't acquire mutex when rewriting swapper
  (jsc#PED-8690).
- commit 911eabe</changelog>
  <changelog author="bdas@suse.de" date="1719576004">- net/9p: fix uninit-value in p9_client_rpc() (CVE-2024-39301
  bsc#1226994).
- commit b325415</changelog>
  <changelog author="tiwai@suse.de" date="1719662400">- gpiolib: cdev: Disallow reconfiguration without direction
  (uAPI v1) (git-fixes).
- gpio: davinci: Validate the obtained number of IRQs (git-fixes).
- commit dc60c09</changelog>
  <changelog author="tiwai@suse.de" date="1719748800">- i2c: testunit: discard write requests while old command is
  running (git-fixes).
- i2c: testunit: don't erase registers after STOP (git-fixes).
- mmc: sdhci: Do not lock spinlock around mmc_gpio_get_ro()
  (git-fixes).
- mmc: sdhci: Do not invert write-protect twice (git-fixes).
- mmc: sdhci-pci: Convert PCIBIOS_* return codes to errnos
  (git-fixes).
- commit 958e336</changelog>
  <changelog author="tiwai@suse.de" date="1719835200">- ata: ahci: Clean up sysfs file on error (git-fixes).
- ata: libata-core: Fix double free on error (git-fixes).
- ata: libata-core: Fix null pointer dereference on error
  (git-fixes).
- kbuild: Install dtb files as 0644 in Makefile.dtbinst
  (git-fixes).
- iio: chemical: bme680: Fix sensor data read operation
  (git-fixes).
- iio: chemical: bme680: Fix overflows in compensate() functions
  (git-fixes).
- iio: chemical: bme680: Fix calibration data variable
  (git-fixes).
- iio: chemical: bme680: Fix pressure value output (git-fixes).
- iio: accel: fxls8962af: select IIO_BUFFER &amp; IIO_KFIFO_BUF
  (git-fixes).
- iio: adc: ad7266: Fix variable checking bug (git-fixes).
- tty: mcf: MCF54418 has 10 UARTS (git-fixes).
- usb: dwc3: core: remove lock of otg mode during gadget
  suspend/resume to avoid deadlock (git-fixes).
- usb: musb: da8xx: fix a resource leak in probe() (git-fixes).
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
  (git-fixes).
- usb: gadget: printer: fix races against disable (git-fixes).
- commit 201a936</changelog>
  <changelog author="ptesarik@suse.com" date="1719835201">- net: ena: Fix redundant device NUMA node override
  (jsc#PED-8690).
- commit 629130c</changelog>
  <changelog author="mkubecek@suse.cz" date="1719835202">- tcp: do not accept ACK of bytes we never sent (CVE-2023-52881
  bsc#1225611).
- commit ab5f35b</changelog>
  <changelog author="mhocko@suse.com" date="1719835203">- Update
  patches.suse/1203-drm-mxsfb-Fix-NULL-pointer-dereference.patch
  (jsc#PED-1166 jsc#PED-1168 jsc#PED-1170 jsc#PED-1218
  jsc#PED-1220 jsc#PED-1222 jsc#PED-1223 jsc#PED-1225
  CVE-2022-48718 bsc#1226616).
- Update
  patches.suse/1250-drm-amd-display-Wrap-dcn301_calculate_wm_and_dlg-for.patch
  (jsc#PED-1166 jsc#PED-1168 jsc#PED-1170 jsc#PED-1218
  jsc#PED-1220 jsc#PED-1222 jsc#PED-1223 jsc#PED-1225
  CVE-2022-48766 bsc#1226704).
- Update
  patches.suse/1327-drm-msm-Fix-null-ptr-access-msm_ioctl_gem_submit.patch
  (jsc#PED-1166 jsc#PED-1168 jsc#PED-1170 jsc#PED-1218
  jsc#PED-1220 jsc#PED-1222 jsc#PED-1223 jsc#PED-1225
  CVE-2021-47610 bsc#1226581).
- Update
  patches.suse/ALSA-Fix-deadlocks-with-kctl-removals-at-disconnecti.patch
  (stable-fixes CVE-2024-38600 bsc#1226864).
- Update
  patches.suse/ALSA-core-Fix-NULL-module-pointer-assignment-at-card.patch
  (git-fixes CVE-2024-38605 bsc#1226740).
- Update
  patches.suse/ALSA-hda-cs_dsp_ctl-Use-private_free-for-control-cle.patch
  (git-fixes CVE-2024-38388 bsc#1226890).
- Update
  patches.suse/ALSA-timer-Set-lower-bound-of-start-tick-time.patch
  (stable-fixes git-fixes CVE-2024-38618 bsc#1226754).
- Update
  patches.suse/ASoC-kirkwood-Fix-potential-NULL-dereference.patch
  (git-fixes CVE-2024-38550 bsc#1226633).
- Update
  patches.suse/Input-cyapa-add-missing-input-core-locking-to-suspen.patch
  (git-fixes CVE-2023-52884 bsc#1226764).
- Update
  patches.suse/KEYS-trusted-Do-not-use-WARN-when-encode-fails.patch
  (git-fixes CVE-2024-36975 bsc#1226520).
- Update
  patches.suse/KEYS-trusted-Fix-memory-leak-in-tpm2_key_encode.patch
  (git-fixes CVE-2024-36967 bsc#1226131).
- Update
  patches.suse/RDMA-hns-Fix-deadlock-on-SRQ-async-events.patch
  (git-fixes CVE-2024-38591 bsc#1226738).
- Update
  patches.suse/RDMA-hns-Modify-the-print-level-of-CQE-error.patch
  (git-fixes CVE-2024-38590 bsc#1226839).
- Update
  patches.suse/RDMA-rxe-Fix-seg-fault-in-rxe_comp_queue_pkt.patch
  (git-fixes CVE-2024-38544 bsc#1226597).
- Update
  patches.suse/block-fix-memory-leak-in-disk_register_independent_a.patch
  (jsc#PED-1183 CVE-2022-48753 bsc#1226693).
- Update
  patches.suse/bnxt_re-avoid-shift-undefined-behavior-in-bnxt_qplib.patch
  (git-fixes CVE-2024-38540 bsc#1226582).
- Update
  patches.suse/bpf-Guard-against-accessing-NULL-pt_regs-in-bpf_get_.patch
  (jsc#PED-1377 CVE-2022-48770 bsc#1226730).
- Update
  patches.suse/bpf-Use-VM_MAP-instead-of-VM_ALLOC-for-ringbuf.patch
  (jsc#PED-1377 CVE-2022-48714 bsc#1226622).
- Update
  patches.suse/btrfs-fix-use-after-free-after-failure-to-create-a-s.patch
  (git-fixes CVE-2022-48733 bsc#1226718).
- Update
  patches.suse/cppc_cpufreq-Fix-possible-null-pointer-dereference.patch
  (git-fixes CVE-2024-38573 bsc#1226739).
- Update patches.suse/crypto-bcm-Fix-pointer-arithmetic.patch
  (git-fixes CVE-2024-38579 bsc#1226637).
- Update
  patches.suse/drm-amd-display-Fix-division-by-zero-in-setup_dsc_co.patch
  (stable-fixes CVE-2024-36969 bsc#1226155).
- Update
  patches.suse/drm-amd-display-Fix-potential-index-out-of-bounds-in.patch
  (git-fixes CVE-2024-38552 bsc#1226767).
- Update
  patches.suse/drm-amdgpu-add-error-handle-to-avoid-out-of-bounds.patch
  (stable-fixes CVE-2024-39471 bsc#1227096).
- Update
  patches.suse/drm-amdgpu-mes-fix-use-after-free-issue.patch
  (stable-fixes CVE-2024-38581 bsc#1226657).
- Update
  patches.suse/drm-bridge-cdns-mhdp8546-Fix-possible-null-pointer-d.patch
  (git-fixes CVE-2024-38548).
- Update
  patches.suse/drm-mediatek-Add-0-size-check-to-mtk_drm_gem_obj.patch
  (git-fixes CVE-2024-38549 bsc#1226735).
- Update
  patches.suse/drm-msm-a6xx-Avoid-a-nullptr-dereference-when-speedb.patch
  (git-fixes CVE-2024-38390 bsc#1226891).
- Update
  patches.suse/drm-vc4-Fix-possible-null-pointer-dereference.patch
  (git-fixes CVE-2024-38546 bsc#1226593).
- Update
  patches.suse/drm-vmwgfx-Fix-invalid-reads-in-fence-signaled-event.patch
  (git-fixes CVE-2024-36960 bsc#1225872).
- Update
  patches.suse/efi-libstub-only-free-priv.runtime_map-when-allocate.patch
  (git-fixes CVE-2024-33619 bsc#1226768).
- Update
  patches.suse/io-wq-check-for-wq-exit-after-adding-new-worker-task.patch
  (bsc#1205205 CVE-2021-47577 bsc#1226538).
- Update
  patches.suse/jffs2-prevent-xattr-node-from-overflowing-the-eraseblock.patch
  (git-fixes CVE-2024-38599 bsc#1226848).
- Update
  patches.suse/media-atomisp-ssh_css-Fix-a-null-pointer-dereference.patch
  (git-fixes CVE-2024-38547 bsc#1226632).
- Update
  patches.suse/media-lgdt3306a-Add-a-check-against-null-pointer-def.patch
  (stable-fixes CVE-2022-48772 bsc#1226976).
- Update
  patches.suse/media-stk1160-fix-bounds-checking-in-stk1160_copy_vi.patch
  (git-fixes CVE-2024-38621 bsc#1226895).
- Update
  patches.suse/net-bridge-vlan-fix-memory-leak-in-__allowed_ingress.patch
  (git-fixes CVE-2022-48748 bsc#1226647).
- Update
  patches.suse/net-sched-sch_ets-don-t-remove-idle-classes-from-the.patch
  (bsc#1207361 CVE-2021-47595 bsc#1226552).
- Update
  patches.suse/netfilter-complete-validation-of-user-input.patch
  (CVE-2024-35896 bsc#1224662 git-fixes CVE-2024-35962
  bsc#1224583).
- Update
  patches.suse/nfc-nci-Fix-uninit-value-in-nci_rx_work.patch
  (git-fixes CVE-2024-38381 bsc#1226878).
- Update
  patches.suse/nilfs2-fix-potential-hang-in-nilfs_detach_log_writer.patch
  (stable-fixes CVE-2024-38582 bsc#1226658).
- Update
  patches.suse/nilfs2-fix-use-after-free-of-timer-for-log-writer-th.patch
  (git-fixes CVE-2024-38583 bsc#1226777).
- Update
  patches.suse/powerpc64-bpf-Limit-ldbrx-to-processors-compliant-wi.patch
  (jsc#PED-1377 CVE-2022-48755 bsc#1226706).
- Update
  patches.suse/remoteproc-mediatek-Make-sure-IPI-buffer-fits-in-L2T.patch
  (git-fixes CVE-2024-36965 bsc#1226149).
- Update
  patches.suse/ring-buffer-Fix-a-race-between-readers-and-resize-checks.patch
  (bsc#1222893 CVE-2024-38601 bsc#1226876).
- Update
  patches.suse/scsi-qla2xxx-Fix-off-by-one-in-qla_edif_app_getstats.patch
  (git-fixes CVE-2024-36025 bsc#1225704).
- Update
  patches.suse/serial-max3100-Lock-port-lock-when-calling-uart_hand.patch
  (git-fixes CVE-2024-38634 bsc#1226868).
- Update
  patches.suse/serial-max3100-Update-uart_driver_registered-on-driv.patch
  (git-fixes CVE-2024-38633 bsc#1226867).
- Update
  patches.suse/soundwire-cadence-fix-invalid-PDI-offset.patch
  (stable-fixes CVE-2024-38635 bsc#1226863).
- Update patches.suse/speakup-Fix-sizeof-vs-ARRAY_SIZE-bug.patch
  (git-fixes CVE-2024-38587 bsc#1226780).
- Update
  patches.suse/swiotlb-Fix-double-allocation-of-slots-due-to-broken-alignment-handling.patch
  (bsc#1224331 CVE-2024-35814 bsc#1224602).
- Update
  patches.suse/thermal-drivers-tsens-Fix-null-pointer-dereference.patch
  (git-fixes CVE-2024-38571 bsc#1226737).
- Update
  patches.suse/tpm_tis_spi-Account-for-SPI-header-when-allocating-TPM-SPI-xfer-buffer.patch
  (bsc#1225535 CVE-2024-36477 bsc#1226840).
- Update
  patches.suse/usb-storage-alauda-Check-whether-the-media-is-initia.patch
  (git-fixes CVE-2024-38619 bsc#1226861).
- Update
  patches.suse/vduse-check-that-offset-is-within-bounds-in-get_conf.patch
  (jsc#PED-1549 CVE-2021-47604 bsc#1226566).
- Update
  patches.suse/vduse-fix-memory-corruption-in-vduse_dev_ioctl.patch
  (jsc#PED-1549 CVE-2021-47605 bsc#1226579).
- Update
  patches.suse/watchdog-cpu5wdt.c-Fix-use-after-free-bug-caused-by-.patch
  (git-fixes CVE-2024-38630 bsc#1226908).
- Update
  patches.suse/wifi-ar5523-enable-proper-endpoint-verification.patch
  (git-fixes CVE-2024-38565 bsc#1226747).
- Update
  patches.suse/wifi-carl9170-add-a-proper-sanity-check-for-endpoint.patch
  (git-fixes CVE-2024-38567 bsc#1226769).
- Update
  patches.suse/wifi-carl9170-re-fix-fortified-memset-warning.patch
  (git-fixes CVE-2024-38616 bsc#1226852).
- commit efd69a4</changelog>
  <changelog author="mkubecek@suse.cz" date="1719835204">- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique()
  (CVE-2024-36904 bsc#1225732).
- commit 975b193</changelog>
  <changelog author="jlee@suse.com" date="1719835205">- X.509: Fix the parser of extended key usage for length
  (bsc#1218820).
- commit c5d6d23</changelog>
  <changelog author="mhocko@suse.com" date="1719835206">- Update
  patches.suse/0001-dm-btree-remove-fix-use-after-free-in-rebalance_chil.patch
  (git-fixes CVE-2021-47600 bsc#1226575).
- Update
  patches.suse/ALSA-hda-Fix-UAF-of-leds-class-devs-at-unbinding.patch
  (bsc#1195349 CVE-2022-48735 bsc#1226719).
- Update
  patches.suse/ARM-9170-1-fix-panic-when-kasan-and-kprobe-are-enabl.patch
  (git-fixes CVE-2021-47618 bsc#1226644).
- Update
  patches.suse/ASoC-hdmi-codec-Fix-OOB-memory-accesses.patch
  (git-fixes CVE-2022-48739 bsc#1226675).
- Update
  patches.suse/ASoC-max9759-fix-underflow-in-speaker_gain_control_p.patch
  (git-fixes CVE-2022-48717 bsc#1226679).
- Update
  patches.suse/ASoC-ops-Reject-out-of-bounds-values-in-snd_soc_put_-4cf28e9ae6e2.patch
  (git-fixes CVE-2022-48736 bsc#1226721).
- Update
  patches.suse/ASoC-ops-Reject-out-of-bounds-values-in-snd_soc_put_-4f1e50d6a9cf.patch
  (git-fixes CVE-2022-48737 bsc#1226762).
- Update
  patches.suse/ASoC-ops-Reject-out-of-bounds-values-in-snd_soc_put_.patch
  (git-fixes CVE-2022-48738 bsc#1226674).
- Update
  patches.suse/Bluetooth-refactor-malicious-adv-data-check.patch
  (git-fixes CVE-2021-47620 bsc#1226669).
- Update patches.suse/IB-hfi1-Fix-AIP-early-init-panic.patch
  (git-fixes CVE-2022-48728 bsc#1226691).
- Update
  patches.suse/IB-hfi1-Fix-panic-with-larger-ipoib-send_queue_size.patch
  (jsc#SLE-19242 CVE-2022-48729 bsc#1226710).
- Update
  patches.suse/KVM-LAPIC-Also-cancel-preemption-timer-during-SET_LA.patch
  (git-fixes CVE-2022-48765 bsc#1226697).
- Update
  patches.suse/KVM-arm64-Avoid-consuming-a-stale-esr-value-when-SEr.patch
  (git-fixes CVE-2022-48727 bsc#1226690).
- Update
  patches.suse/KVM-x86-Forcibly-leave-nested-virt-when-SMM-state-is.patch
  (git-fixes CVE-2022-48763 bsc#1226628).
- Update
  patches.suse/PCI-pciehp-Fix-infinite-loop-in-IRQ-handler-upon-pow.patch
  (git-fixes CVE-2021-47617 bsc#1226614).
- Update
  patches.suse/RDMA-Fix-use-after-free-in-rxe_queue_cleanup.patch
  (jsc#SLE-19249 CVE-2021-47616 bsc#1226603).
- Update
  patches.suse/RDMA-irdma-Fix-a-user-after-free-in-add_pble_prm.patch
  (jsc#SLE-18383 CVE-2021-47614 bsc#1226601).
- Update
  patches.suse/RDMA-mlx5-Fix-releasing-unallocated-memory-in-dereg-.patch
  (jsc#SLE-19253 CVE-2021-47615 bsc#1226602).
- Update
  patches.suse/RDMA-siw-Fix-refcounting-leak-in-siw_create_qp.patch
  (jsc#SLE-19249 CVE-2022-48725 bsc#1226618).
- Update
  patches.suse/RDMA-ucma-Protect-mc-during-concurrent-multicast-lea.patch
  (git-fixes CVE-2022-48726 bsc#1226686).
- Update
  patches.suse/USB-core-Fix-hang-in-usb_kill_urb-by-adding-memory-b.patch
  (git-fixes CVE-2022-48760 bsc#1226712).
- Update
  patches.suse/USB-core-Make-do_proc_control-and-do_proc_bulk-killa.patch
  (git-fixes CVE-2021-47582 bsc#1226559).
- Update
  patches.suse/audit-improve-robustness-of-the-audit-queue-handling.patch
  (git-fixes CVE-2021-47603 bsc#1226577).
- Update patches.suse/block-Fix-wrong-offset-in-bio_truncate.patch
  (bsc#1202780 CVE-2022-48747 bsc#1226643).
- Update
  patches.suse/bpf-Fix-kernel-address-leakage-in-atomic-cmpxchg-s-r.patch
  (git-fixes CVE-2021-47607 bsc#1226580).
- Update
  patches.suse/bpf-Fix-kernel-address-leakage-in-atomic-fetch.patch
  (bsc#1193883 bsc#1194826 CVE-2022-0264 CVE-2021-47608
  bsc#1226569).
- Update
  patches.suse/bpf-Protect-against-int-overflow-for-stack-access-si.patch
  (bsc#1224488 CVE-2024-35905).
- Update
  patches.suse/btrfs-fix-deadlock-between-quota-disable-and-qgroup-.patch
  (bsc#1199295 CVE-2022-48734 bsc#1226626).
- Update
  patches.suse/btrfs-fix-memory-leak-in-__add_inode_ref.patch
  (bsc#1197915 CVE-2021-47585 bsc#1226556).
- Update
  patches.suse/ceph-properly-put-ceph_string-reference-after-async-create-attempt.patch
  (bsc#1195341 CVE-2022-48767 bsc#1226715).
- Update
  patches.suse/dma-buf-heaps-Fix-potential-spectre-v1-gadget.patch
  (git-fixes CVE-2022-48730 bsc#1226713).
- Update
  patches.suse/drm-msm-dpu-invalid-parameter-check-in-dpu_setup_dsp.patch
  (git-fixes CVE-2022-48749 bsc#1226650).
- Update
  patches.suse/drm-msm-dsi-invalid-parameter-check-in-msm_dsi_phy_e.patch
  (git-fixes CVE-2022-48756 bsc#1226698).
- Update
  patches.suse/drm-nouveau-fix-off-by-one-in-BIOS-boundary-checking.patch
  (git-fixes CVE-2022-48732 bsc#1226716).
- Update
  patches.suse/drm-vc4-kms-Add-missing-drm_crtc_commit_put.patch
  (git-fixes CVE-2021-47534).
- Update
  patches.suse/drm-vmwgfx-Fix-stale-file-descriptors-on-failed-user.patch
  (CVE-2022-22942 bsc#1195065 CVE-2022-48771 bsc#1226732).
- Update
  patches.suse/efi-runtime-avoid-EFIv2-runtime-services-on-Apple-x8.patch
  (git-fixes CVE-2022-48769 bsc#1226629).
- Update
  patches.suse/ext4-fix-error-handling-in-ext4_fc_record_modified_i.patch
  (bsc#1202767 CVE-2022-48712 bsc#1226673).
- Update
  patches.suse/firmware-arm_scpi-Fix-string-overflow-in-SCPI-genpd-.patch
  (git-fixes CVE-2021-47609 bsc#1226562).
- Update
  patches.suse/i3c-mipi-i3c-hci-Fix-out-of-bounds-access-in-hci_dma.patch
  (git-fixes CVE-2023-52766).
- Update patches.suse/i40e-Fix-queues-reservation-for-XDP.patch
  (git-fixes CVE-2021-47619 bsc#1226645).
- Update patches.suse/igbvf-fix-double-free-in-igbvf_probe.patch
  (jsc#SLE-18379 CVE-2021-47589 bsc#1226557).
- Update
  patches.suse/inet_diag-fix-kernel-infoleak-for-UDP-sockets.patch
  (git-fixes CVE-2021-47597 bsc#1226553).
- Update
  patches.suse/iocost-Fix-divide-by-zero-on-donation-from-low-hweig.patch
  (bsc#1198014 CVE-2021-47584 bsc#1226564).
- Update
  patches.suse/iommu-vt-d-fix-potential-memory-leak-in-intel_setup_irq_remapping
  (git-fixes CVE-2022-48724 bsc#1226624).
- Update
  patches.suse/isdn-cpai-check-ctr-cnr-to-avoid-array-index-out-of-.patch
  (stable-5.14.15 CVE-2021-43389 CVE-2021-3896 bsc#1191958
  CVE-2021-4439 bsc#1226670).
- Update
  patches.suse/mac80211-track-only-QoS-data-frames-for-admission-co.patch
  (git-fixes CVE-2021-47602 bsc#1226554).
- Update
  patches.suse/mac80211-validate-extended-element-ID-is-present.patch
  (git-fixes CVE-2021-47611 bsc#1226583).
- Update
  patches.suse/media-mxl111sf-change-mutex_init-location.patch
  (git-fixes CVE-2021-47583 bsc#1226563).
- Update
  patches.suse/net-amd-xgbe-Fix-skb-data-length-underflow.patch
  (git-fixes CVE-2022-48743 bsc#1226705).
- Update
  patches.suse/net-hns3-fix-use-after-free-bug-in-hclgevf_send_mbx_.patch
  (bsc#1190336 CVE-2021-47596 bsc#1226558).
- Update
  patches.suse/net-ieee802154-ca8210-Stop-leaking-skb-s.patch
  (git-fixes CVE-2022-48722 bsc#1226619).
- Update
  patches.suse/net-macsec-Fix-offload-support-for-NETDEV_UNREGISTER.patch
  (git-fixes CVE-2022-48720 bsc#1226683).
- Update
  patches.suse/net-mlx5-Use-del_timer_sync-in-fw-reset-flow-of-halt.patch
  (git-fixes CVE-2022-48745 bsc#1226702).
- Update
  patches.suse/net-mlx5e-Avoid-field-overflowing-memcpy.patch
  (git-fixes CVE-2022-48744 bsc#1226696).
- Update
  patches.suse/net-mlx5e-Fix-handling-of-wrong-devices-during-bond-.patch
  (git-fixes CVE-2022-48746 bsc#1226703).
- Update
  patches.suse/net-smc-Forward-wakeup-to-smc-socket-waitqueue-after-fallback
  (git-fixes CVE-2022-48721 bsc#1226685).
- Update
  patches.suse/net-smc-Transitional-solution-for-clcsock-race-issue
  (git-fixes CVE-2022-48751 bsc#1226653).
- Update
  patches.suse/net-stmmac-dwmac-rk-fix-oob-read-in-rk_gmac_setup.patch
  (git-fixes CVE-2021-47586 bsc#1226561).
- Update
  patches.suse/net-stmmac-fix-tc-flower-deletion-for-VLAN-priority-.patch
  (git-fixes CVE-2021-47592 bsc#1226572).
- Update
  patches.suse/net-systemport-Add-global-locking-for-descriptor-lif.patch
  (git-fixes CVE-2021-47587 bsc#1226567).
- Update
  patches.suse/nfc-fix-segfault-in-nfc_genl_dump_devices_done.patch
  (git-fixes CVE-2021-47612 bsc#1226585).
- Update
  patches.suse/of-module-prevent-NULL-pointer-dereference-in-vsnprintf.patch
  (bsc#1226587 CVE-2024-38541 CVE-2024-35878 bsc#1224671).
- Update
  patches.suse/perf-x86-intel-pt-Fix-crash-with-stop-filters-in-single-range-mode.patch
  (git fixes CVE-2022-48713).
- Update patches.suse/phylib-fix-potential-use-after-free.patch
  (git-fixes CVE-2022-48754 bsc#1226692).
- Update
  patches.suse/powerpc-perf-Fix-power_pmu_disable-to-call-clear_pmi.patch
  (bsc#1156395 CVE-2022-48752 bsc#1226709).
- Update
  patches.suse/rpmsg-char-Fix-race-between-the-release-of-rpmsg_ctr.patch
  (git-fixes CVE-2022-48759 bsc#1226711).
- Update
  patches.suse/scsi-bnx2fc-Flush-destroy_work-queue-before-calling-bnx2fc_interface_put
  (git-fixes bsc#1196746 CVE-2022-48758 bsc#1226708).
- Update patches.suse/scsi-bnx2fc-Make-bnx2fc_recv_frame-mp-safe
  (git-fixes bsc#1196746 CVE-2022-48715 bsc#1226621).
- Update
  patches.suse/scsi-scsi_debug-Don-t-call-kcalloc-if-size-arg-is-zero.patch
  (git-fixes CVE-2021-47578 bsc#1226539).
- Update
  patches.suse/scsi-scsi_debug-Fix-type-in-min_t-to-avoid-stack-OOB.patch
  (git-fixes CVE-2021-47580 bsc#1226550).
- Update
  patches.suse/scsi-scsi_debug-Sanity-check-block-descriptor-length-in-resp_mode_select.patch
  (git-fixes CVE-2021-47576 bsc#1226537).
- Update
  patches.suse/selinux-fix-double-free-of-cond_list-on-error-paths.patch
  (git-fixes CVE-2022-48740 bsc#1226699).
- Update
  patches.suse/spi-uniphier-fix-reference-count-leak-in-uniphier_sp.patch
  (git-fixes CVE-2022-48723 bsc#1226617).
- Update patches.suse/tee-amdtee-fix-an-IS_ERR-vs-NULL-bug.patch
  (jsc#SLE-21844 CVE-2021-47601 bsc#1226576).
- Update
  patches.suse/tipc-improve-size-validations-for-received-domain-re.patch
  (bsc#1195254 CVE-2022-0435 CVE-2022-48711 bsc#1226672).
- Update
  patches.suse/tracing-histogram-Fix-a-potential-memory-leak-for-kstrdup.patch
  (git-fixes CVE-2022-48768 bsc#1226720).
- Update
  patches.suse/usb-xhci-plat-fix-crash-when-suspend-if-remote-wake-.patch
  (git-fixes CVE-2022-48761 bsc#1226701).
- Update patches.suse/wifi-ath11k-fix-htt-pktlog-locking.patch
  (git-fixes CVE-2023-52800).
- commit cc322a0</changelog>
  <changelog author="tiwai@suse.de" date="1719921600">- mtd: rawnand: rockchip: ensure NVDDR timings are rejected
  (git-fixes).
- mtd: rawnand: Bypass a couple of sanity checks during NAND
  identification (git-fixes).
- mtd: rawnand: Ensure ECC configuration is propagated to upper
  layers (git-fixes).
- commit 69e8827</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1719921601">- kernel-doc: fix struct_group_tagged() parsing (git-fixes).
- lib: memcpy_kunit: Fix an invalid format specifier in an
  assertion msg (git-fixes).
- commit d600a63</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1719921602">- kbuild: do not include include/config/auto.conf from shell
  scripts (bsc#1227274).
- commit c743753</changelog>
  <changelog author="fdmanana@suse.com" date="1719921603">- btrfs: fix crash on racing fsync and size-extending write into
  prealloc (bsc#1227101 CVE-2024-37354).
- commit 899b45b</changelog>
  <changelog author="fdmanana@suse.com" date="1719921604">- btrfs: avoid copying BTRFS_ROOT_SUBVOL_DEAD flag to snapshot
  of subvolume being deleted (bsc#1221282).
- btrfs: don't abort filesystem when attempting to snapshot
  deleted subvolume (bsc#1221282 CVE-2024-26644 bsc#1222072).
- commit 7829d14</changelog>
  <changelog author="rhopkins@suse.de" date="1719921605">- hsr: Prevent use after free in prp_create_tagged_frame()
  (CVE-2023-52846 bsc#1225098).
- commit 74c7662</changelog>
</package>
<package pkgid="00d43ece23c61d1353f9a52e7458cf004a7cd6d754b1f5101fe931bd3723cdbc" name="kernel-rt" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.13.64.1"/>
  <changelog author="nmorey@suse.com" date="1722772800">- RDMA/hns: Fix insufficient extend DB for VFs. (git-fixes)
- commit 8395f97</changelog>
  <changelog author="nmorey@suse.com" date="1722772801">- RDMA/hns: Fix mbx timing out before CMD execution is completed (git-fixes)
- commit 7f0f7e9</changelog>
  <changelog author="nmorey@suse.com" date="1722772802">- bnxt_re: Fix imm_data endianness (git-fixes)
- commit c690ca2</changelog>
  <changelog author="mkubecek@suse.cz" date="1722859200">- check-for-config-changes: ignore also GCC_ASM_GOTO_OUTPUT_BROKEN
  Mainline commit f2f6a8e88717 ("init/Kconfig: remove
  CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND") replaced
  GCC_ASM_GOTO_OUTPUT_WORKAROUND with GCC_ASM_GOTO_OUTPUT_BROKEN. Ignore both
  when checking config changes.
- commit b60be3e</changelog>
  <changelog author="neilb@suse.de" date="1722859201">- blacklist.conf: blocks list lots of 5.15-stable nfsd fixes.
  In the 5.15 stable series there was a full backport of nfsd.  We don't
  won't all of that.  So blacklist lots of patches that we don't want.
- commit 0cfb63d</changelog>
  <changelog author="ailiop@suse.com" date="1722859202">- hfsplus: fix uninit-value in copy_name (git-fixes).
- commit 383d5d6</changelog>
  <changelog author="dwagner@suse.de" date="1722859203">- nvme-pci: add missing condition check for existence of mapped
  data (git-fixes).
- nvme-pci: Fix the instructions for disabling power management
  (git-fixes).
- nvmet-auth: fix nvmet_auth hash error handling (git-fixes).
- nvme: fixup comment for nvme RDMA Provider Type (git-fixes).
- nvmet: always initialize cqe.result (git-fixes).
- nvme: avoid double free special payload (git-fixes).
- nvmet: fix a possible leak when destroy a ctrl during qp
  establishment (git-fixes).
- nvme: adjust multiples of NVME_CTRL_PAGE_SIZE in offset
  (git-fixes).
- nvme-multipath: find NUMA path only for online numa-node
  (git-fixes).
- nvme-auth: allow mixing of secret and hash lengths (git-fixes).
- nvme-auth: use transformed key size to create resp (git-fixes).
- nvme-auth: alloc nvme_dhchap_key as single buffer (git-fixes).
- commit 3284c90</changelog>
  <changelog author="dwagner@suse.de" date="1722859204">- scsi: lpfc: Update lpfc version to 14.4.0.3 (bsc#1228857).
- scsi: lpfc: Revise lpfc_prep_embed_io routine with proper
  endian macro usages (bsc#1228857).
- scsi: lpfc: Fix incorrect request len mbox field when setting
  trunking via sysfs (bsc#1228857).
- scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info
  (bsc#1228857).
- scsi: lpfc: Fix handling of fully recovered fabric node in
  dev_loss callbk (bsc#1228857).
- scsi: lpfc: Relax PRLI issue conditions after GID_FT response
  (bsc#1228857).
- scsi: lpfc: Allow DEVICE_RECOVERY mode after RSCN receipt if
  in PRLI_ISSUE state (bsc#1228857).
- scsi: lpfc: Cancel ELS WQE instead of issuing abort when SLI
  port is inactive (bsc#1228857).
- commit 21ebef1</changelog>
  <changelog author="dwagner@suse.de" date="1722859205">- scsi: qla2xxx: Convert comma to semicolon (bsc#1228850).
- scsi: qla2xxx: Update version to 10.02.09.300-k (bsc#1228850).
- scsi: qla2xxx: Use QP lock to search for bsg (bsc#1228850).
- scsi: qla2xxx: Reduce fabric scan duplicate code (bsc#1228850).
- scsi: qla2xxx: Fix optrom version displayed in FDMI
  (bsc#1228850).
- scsi: qla2xxx: During vport delete send async logout explicitly
  (bsc#1228850).
- scsi: qla2xxx: Complete command early within lock (bsc#1228850).
- scsi: qla2xxx: Fix flash read failure (bsc#1228850).
- scsi: qla2xxx: Return ENOBUFS if sg_cnt is more than one for
  ELS cmds (bsc#1228850).
- scsi: qla2xxx: Fix for possible memory corruption (bsc#1228850).
- scsi: qla2xxx: validate nvme_local_port correctly (bsc#1228850).
- scsi: qla2xxx: Unable to act on RSCN for port online
  (bsc#1228850).
- scsi: qla2xxx: Remove unused struct 'scsi_dif_tuple'
  (bsc#1228850).
- scsi: qla2xxx: Fix debugfs output for fw_resource_count
  (bsc#1228850).
- scsi: qla2xxx: Indent help text (bsc#1228850).
- scsi: qla2xxx: Drop driver owner assignment (bsc#1228850).
- scsi: qla2xxx: Avoid possible run-time warning with long
  model_num (bsc#1228850).
- string.h: Introduce memtostr() and memtostr_pad() (bsc#1228850).
- commit ce7acc0</changelog>
  <changelog author="dwagner@suse.de" date="1722859206">- kabi/severity: add nvme common code
  The nvme common code is also allowed to change the data structures, there
  are only internal users.
- commit b8cf562</changelog>
  <changelog author="dsterba@suse.com" date="1722859207">- net: do not leave a dangling sk pointer, when socket creation fails (CVE-2024-40954 bsc#1227808)
- commit 8f44f81</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1722859208">- liquidio: Adjust a NULL pointer handling path in
  lio_vf_rep_copy_packet (CVE-2024-39506 bsc#1227729).
- commit 02e87a9</changelog>
  <changelog author="msuchanek@suse.de" date="1722859209">- powerpc: fix a file leak in kvm_vcpu_ioctl_enable_cap()
  (bsc#1194869).
- KVM: PPC: Book3S HV: Fix the set_one_reg for MMCR3
  (bsc#1194869).
- KVM: PPC: Book3S HV: Fix "rm_exit" entry in debugfs timings
  (bsc#1194869).
- KVM: PPC: Book3S HV: remove extraneous asterisk from
  rm_host_ipi_action() comment (bsc#1194869).
- KVM: PPC: Book3S HV Nested: L2 LPCR should inherit L1 LPES
  setting (bsc#1194869).
- KVM: PPC: Book3S: Suppress failed alloc warning in
  H_COPY_TOFROM_GUEST (bsc#1194869).
- KVM: PPC: Book3S: Suppress warnings when allocating too big
  memory slots (bsc#1194869).
- commit cc22863</changelog>
  <changelog author="tiwai@suse.de" date="1722945600">- ASoC: topology: Fix route memory corruption (CVE-2024-41069
  bsc#1228644).
- commit 586db1a</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1722945601">- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
  (bsc#1228756 CVE-2024-42161).
- commit 8359d86</changelog>
  <changelog author="ddiss@suse.de" date="1722945602">- ima: Fix use-after-free on a dentry's dname.name (bsc#1227716
  CVE-2024-39494).
- commit 81484ec</changelog>
  <changelog author="tiwai@suse.de" date="1722945603">- ALSA: usb-audio: Correct surround channels in UAC1 channel map
  (git-fixes).
- ALSA: hda: conexant: Fix headset auto detect fail in the
  polling mode (git-fixes).
- drm/vmwgfx: Fix overlay when using Screen Targets (git-fixes).
- drm/vmwgfx: Fix a deadlock in dma buf fence polling (git-fixes).
- drm/nouveau: prime: fix refcount underflow (git-fixes).
- ALSA: usb-audio: Add a quirk for Sonix HD USB Camera
  (stable-fixes).
- ALSA: usb-audio: Move HD Webcam quirk to the right place
  (git-fixes).
- ALSA: usb-audio: Fix microphone sound on HD webcam
  (stable-fixes).
- drm/amd/display: Check for NULL pointer (stable-fixes).
- drm/amdgpu/sdma5.2: Update wptr registers as well as doorbell
  (stable-fixes).
- drm/i915/gt: Do not consider preemption during execlists_dequeue
  for gen8 (git-fixes).
- drm/etnaviv: don't block scheduler when GPU is still active
  (stable-fixes).
- drm/mipi-dsi: Fix theoretical int overflow in
  mipi_dsi_dcs_write_seq() (git-fixes).
- drm/mipi-dsi: Fix mipi_dsi_dcs_write_seq() macro definition
  format (stable-fixes).
- commit b91fd99</changelog>
  <changelog author="tiwai@suse.de" date="1722945604">- Drop doubly defined References in sound patches
- commit 46ad1df</changelog>
  <changelog author="ohering@suse.de" date="1722945605">- PCI: hv: Return zero, not garbage, when reading
  PCI_INTERRUPT_PIN (git-fixes).
- commit df5839d</changelog>
  <changelog author="mkoutny@suse.com" date="1722945606">- Refresh
  patches.kabi/xhci-restre-deleted-trb-fields-for-tracing.patch.
  Fix KABI restoration also in tracing event message format.
- commit 3bd4a56</changelog>
</package>
<package pkgid="c6f4f42f97c5cd53d6fd54723da32a26925f28af8c90cff43d9574c498e17595" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.13.64.1"/>
  <changelog author="nmorey@suse.com" date="1722772800">- RDMA/hns: Fix insufficient extend DB for VFs. (git-fixes)
- commit 8395f97</changelog>
  <changelog author="nmorey@suse.com" date="1722772801">- RDMA/hns: Fix mbx timing out before CMD execution is completed (git-fixes)
- commit 7f0f7e9</changelog>
  <changelog author="nmorey@suse.com" date="1722772802">- bnxt_re: Fix imm_data endianness (git-fixes)
- commit c690ca2</changelog>
  <changelog author="mkubecek@suse.cz" date="1722859200">- check-for-config-changes: ignore also GCC_ASM_GOTO_OUTPUT_BROKEN
  Mainline commit f2f6a8e88717 ("init/Kconfig: remove
  CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND") replaced
  GCC_ASM_GOTO_OUTPUT_WORKAROUND with GCC_ASM_GOTO_OUTPUT_BROKEN. Ignore both
  when checking config changes.
- commit b60be3e</changelog>
  <changelog author="neilb@suse.de" date="1722859201">- blacklist.conf: blocks list lots of 5.15-stable nfsd fixes.
  In the 5.15 stable series there was a full backport of nfsd.  We don't
  won't all of that.  So blacklist lots of patches that we don't want.
- commit 0cfb63d</changelog>
  <changelog author="ailiop@suse.com" date="1722859202">- hfsplus: fix uninit-value in copy_name (git-fixes).
- commit 383d5d6</changelog>
  <changelog author="dwagner@suse.de" date="1722859203">- nvme-pci: add missing condition check for existence of mapped
  data (git-fixes).
- nvme-pci: Fix the instructions for disabling power management
  (git-fixes).
- nvmet-auth: fix nvmet_auth hash error handling (git-fixes).
- nvme: fixup comment for nvme RDMA Provider Type (git-fixes).
- nvmet: always initialize cqe.result (git-fixes).
- nvme: avoid double free special payload (git-fixes).
- nvmet: fix a possible leak when destroy a ctrl during qp
  establishment (git-fixes).
- nvme: adjust multiples of NVME_CTRL_PAGE_SIZE in offset
  (git-fixes).
- nvme-multipath: find NUMA path only for online numa-node
  (git-fixes).
- nvme-auth: allow mixing of secret and hash lengths (git-fixes).
- nvme-auth: use transformed key size to create resp (git-fixes).
- nvme-auth: alloc nvme_dhchap_key as single buffer (git-fixes).
- commit 3284c90</changelog>
  <changelog author="dwagner@suse.de" date="1722859204">- scsi: lpfc: Update lpfc version to 14.4.0.3 (bsc#1228857).
- scsi: lpfc: Revise lpfc_prep_embed_io routine with proper
  endian macro usages (bsc#1228857).
- scsi: lpfc: Fix incorrect request len mbox field when setting
  trunking via sysfs (bsc#1228857).
- scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info
  (bsc#1228857).
- scsi: lpfc: Fix handling of fully recovered fabric node in
  dev_loss callbk (bsc#1228857).
- scsi: lpfc: Relax PRLI issue conditions after GID_FT response
  (bsc#1228857).
- scsi: lpfc: Allow DEVICE_RECOVERY mode after RSCN receipt if
  in PRLI_ISSUE state (bsc#1228857).
- scsi: lpfc: Cancel ELS WQE instead of issuing abort when SLI
  port is inactive (bsc#1228857).
- commit 21ebef1</changelog>
  <changelog author="dwagner@suse.de" date="1722859205">- scsi: qla2xxx: Convert comma to semicolon (bsc#1228850).
- scsi: qla2xxx: Update version to 10.02.09.300-k (bsc#1228850).
- scsi: qla2xxx: Use QP lock to search for bsg (bsc#1228850).
- scsi: qla2xxx: Reduce fabric scan duplicate code (bsc#1228850).
- scsi: qla2xxx: Fix optrom version displayed in FDMI
  (bsc#1228850).
- scsi: qla2xxx: During vport delete send async logout explicitly
  (bsc#1228850).
- scsi: qla2xxx: Complete command early within lock (bsc#1228850).
- scsi: qla2xxx: Fix flash read failure (bsc#1228850).
- scsi: qla2xxx: Return ENOBUFS if sg_cnt is more than one for
  ELS cmds (bsc#1228850).
- scsi: qla2xxx: Fix for possible memory corruption (bsc#1228850).
- scsi: qla2xxx: validate nvme_local_port correctly (bsc#1228850).
- scsi: qla2xxx: Unable to act on RSCN for port online
  (bsc#1228850).
- scsi: qla2xxx: Remove unused struct 'scsi_dif_tuple'
  (bsc#1228850).
- scsi: qla2xxx: Fix debugfs output for fw_resource_count
  (bsc#1228850).
- scsi: qla2xxx: Indent help text (bsc#1228850).
- scsi: qla2xxx: Drop driver owner assignment (bsc#1228850).
- scsi: qla2xxx: Avoid possible run-time warning with long
  model_num (bsc#1228850).
- string.h: Introduce memtostr() and memtostr_pad() (bsc#1228850).
- commit ce7acc0</changelog>
  <changelog author="dwagner@suse.de" date="1722859206">- kabi/severity: add nvme common code
  The nvme common code is also allowed to change the data structures, there
  are only internal users.
- commit b8cf562</changelog>
  <changelog author="dsterba@suse.com" date="1722859207">- net: do not leave a dangling sk pointer, when socket creation fails (CVE-2024-40954 bsc#1227808)
- commit 8f44f81</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1722859208">- liquidio: Adjust a NULL pointer handling path in
  lio_vf_rep_copy_packet (CVE-2024-39506 bsc#1227729).
- commit 02e87a9</changelog>
  <changelog author="msuchanek@suse.de" date="1722859209">- powerpc: fix a file leak in kvm_vcpu_ioctl_enable_cap()
  (bsc#1194869).
- KVM: PPC: Book3S HV: Fix the set_one_reg for MMCR3
  (bsc#1194869).
- KVM: PPC: Book3S HV: Fix "rm_exit" entry in debugfs timings
  (bsc#1194869).
- KVM: PPC: Book3S HV: remove extraneous asterisk from
  rm_host_ipi_action() comment (bsc#1194869).
- KVM: PPC: Book3S HV Nested: L2 LPCR should inherit L1 LPES
  setting (bsc#1194869).
- KVM: PPC: Book3S: Suppress failed alloc warning in
  H_COPY_TOFROM_GUEST (bsc#1194869).
- KVM: PPC: Book3S: Suppress warnings when allocating too big
  memory slots (bsc#1194869).
- commit cc22863</changelog>
  <changelog author="tiwai@suse.de" date="1722945600">- ASoC: topology: Fix route memory corruption (CVE-2024-41069
  bsc#1228644).
- commit 586db1a</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1722945601">- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
  (bsc#1228756 CVE-2024-42161).
- commit 8359d86</changelog>
  <changelog author="ddiss@suse.de" date="1722945602">- ima: Fix use-after-free on a dentry's dname.name (bsc#1227716
  CVE-2024-39494).
- commit 81484ec</changelog>
  <changelog author="tiwai@suse.de" date="1722945603">- ALSA: usb-audio: Correct surround channels in UAC1 channel map
  (git-fixes).
- ALSA: hda: conexant: Fix headset auto detect fail in the
  polling mode (git-fixes).
- drm/vmwgfx: Fix overlay when using Screen Targets (git-fixes).
- drm/vmwgfx: Fix a deadlock in dma buf fence polling (git-fixes).
- drm/nouveau: prime: fix refcount underflow (git-fixes).
- ALSA: usb-audio: Add a quirk for Sonix HD USB Camera
  (stable-fixes).
- ALSA: usb-audio: Move HD Webcam quirk to the right place
  (git-fixes).
- ALSA: usb-audio: Fix microphone sound on HD webcam
  (stable-fixes).
- drm/amd/display: Check for NULL pointer (stable-fixes).
- drm/amdgpu/sdma5.2: Update wptr registers as well as doorbell
  (stable-fixes).
- drm/i915/gt: Do not consider preemption during execlists_dequeue
  for gen8 (git-fixes).
- drm/etnaviv: don't block scheduler when GPU is still active
  (stable-fixes).
- drm/mipi-dsi: Fix theoretical int overflow in
  mipi_dsi_dcs_write_seq() (git-fixes).
- drm/mipi-dsi: Fix mipi_dsi_dcs_write_seq() macro definition
  format (stable-fixes).
- commit b91fd99</changelog>
  <changelog author="tiwai@suse.de" date="1722945604">- Drop doubly defined References in sound patches
- commit 46ad1df</changelog>
  <changelog author="ohering@suse.de" date="1722945605">- PCI: hv: Return zero, not garbage, when reading
  PCI_INTERRUPT_PIN (git-fixes).
- commit df5839d</changelog>
  <changelog author="mkoutny@suse.com" date="1722945606">- Refresh
  patches.kabi/xhci-restre-deleted-trb-fields-for-tracing.patch.
  Fix KABI restoration also in tracing event message format.
- commit 3bd4a56</changelog>
</package>
<package pkgid="5d49e4e370f0be50bcb343ba0b749ed3998d1b738baa3176d46d3c7329d4284c" name="kernel-rt" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.13.67.3"/>
  <changelog author="osalvador@suse.de" date="1725019200">- mm: prevent derefencing NULL ptr in pfn_section_valid()
  (git-fixes).
- commit d77caa1</changelog>
  <changelog author="pjakobsson@suse.de" date="1725019201">- blacklist.conf: 0cac183b98d8 drm/amdkfd: range check cp bad op exception interrupts
- commit a1d8500</changelog>
  <changelog author="vkarasulli@suse.de" date="1725019202">- iommu/amd: Convert comma to semicolon (git-fixes).
- commit f13afd4</changelog>
  <changelog author="dsterba@suse.com" date="1725019203">- Fix reference in patches.suse/netfilter-tproxy-bail-out-if-IP-has-been-disabled-on.patch (CVE-2024-36270 bsc#1226798)
- commit 7d81a29</changelog>
  <changelog author="mkoutny@suse.com" date="1725019204">- Update
  patches.suse/ASoC-ops-Shift-tested-values-in-snd_soc_put_volsw-by.patch
  (git-fixes CVE-2022-48917 bsc#1229637).
- Update
  patches.suse/Bluetooth-hci_qca-Fix-driver-shutdown-on-closed-serd.patch
  (git-fixes CVE-2022-48878 bsc#1229554).
- Update
  patches.suse/CDC-NCM-avoid-overflow-in-sanity-checking.patch
  (git-fixes CVE-2022-48938 bsc#1229664).
- Update
  patches.suse/KVM-x86-mmu-make-apf-token-non-zero-to-fix-bug.patch
  (git-fixes CVE-2022-48943 bsc#1229645).
- Update
  patches.suse/RDMA-cma-Do-not-change-route.addr.src_addr-outside-s.patch
  (git-fixes CVE-2022-48925 bsc#1229630).
- Update patches.suse/RDMA-ib_srp-Fix-a-deadlock.patch (git-fixes
  CVE-2022-48930 bsc#1229624).
- Update
  patches.suse/USB-gadgetfs-Fix-race-between-mounting-and-unmountin.patch
  (CVE-2022-4382 bsc#1206258 CVE-2022-48869 bsc#1229507).
- Update
  patches.suse/auxdisplay-lcd2s-Fix-memory-leak-in-remove.patch
  (git-fixes CVE-2022-48907 bsc#1229608).
- Update
  patches.suse/blktrace-fix-use-after-free-for-struct-blk_trace.patch
  (bsc#1198017 CVE-2022-48913 bsc#1229643).
- Update
  patches.suse/bpf-Fix-crash-due-to-out-of-bounds-access-into-reg2b.patch
  (git-fixes bsc#1194111 bsc#1194765 bsc#1196261 CVE-2021-4204
  CVE-2022-0500 CVE-2022-23222 CVE-2022-48929 bsc#1229625).
- Update
  patches.suse/btrfs-fix-race-between-quota-rescan-and-disable-lead.patch
  (bsc#1207158 CVE-2023-52896 bsc#1229533).
- Update
  patches.suse/btrfs-fix-relocation-crash-due-to-premature-return-f.patch
  (bsc#1203360 CVE-2022-48903 bsc#1229613).
- Update
  patches.suse/cgroup-cpuset-Prevent-UAF-in-proc_cpuset_show.patch
  (bsc#1228801 CVE-2024-43853 bsc#1229292).
- Update
  patches.suse/cifs-fix-double-free-race-when-mount-fails-in-cifs_get_root-.patch
  (bsc#1193629 CVE-2022-48919 bsc#1229657).
- Update
  patches.suse/configfs-fix-a-race-in-configfs_-un-register_subsyst.patch
  (git-fixes CVE-2022-48931 bsc#1229623).
- Update
  patches.suse/dmaengine-idxd-Let-probe-fail-when-workqueue-cannot-.patch
  (git-fixes CVE-2022-48868 bsc#1229506).
- Update
  patches.suse/drm-msm-another-fix-for-the-headless-Adreno-GPU.patch
  (git-fixes CVE-2023-52911 bsc#1229522).
- Update
  patches.suse/drm-msm-dp-do-not-complete-dp_aux_cmd_fifo_tx-if-irq.patch
  (git-fixes CVE-2022-48898 bsc#1229537).
- Update patches.suse/drm-virtio-Fix-GEM-handle-creation-UAF.patch
  (git-fixes CVE-2022-48899 bsc#1229536).
- Update
  patches.suse/gsmi-fix-null-deref-in-gsmi_get_variable.patch
  (git-fixes CVE-2023-52893 bsc#1229535).
- Update
  patches.suse/hwmon-Handle-failure-to-register-sensor-with-thermal.patch
  (git-fixes CVE-2022-48942 bsc#1229612).
- Update
  patches.suse/ibmvnic-free-reset-work-item-when-flushing.patch
  (bsc#1196516 ltc#196391 CVE-2022-48905 bsc#1229604).
- Update
  patches.suse/ice-fix-concurrent-reset-and-removal-of-VFs.patch
  (git-fixes CVE-2022-48941 bsc#1229614).
- Update
  patches.suse/iio-adc-men_z188_adc-Fix-a-resource-leak-in-an-error.patch
  (git-fixes CVE-2022-48928 bsc#1229626).
- Update
  patches.suse/iio-adc-tsc2046-fix-memory-corruption-by-preventing-.patch
  (git-fixes CVE-2022-48927 bsc#1229628).
- Update
  patches.suse/io_uring-add-a-schedule-point-in-io_add_buffers.patch
  (git-fixes CVE-2022-48937 bsc#1229617).
- Update patches.suse/iommu-amd-Fix-I-O-page-table-memory-leak
  (git-fixes CVE-2022-48904 bsc#1229603).
- Update
  patches.suse/iommu-vt-d-fix-double-list_add-when-enabling-vmd-in-scalable-mode
  (bsc#1196894 CVE-2022-48916 bsc#1229638).
- Update
  patches.suse/iwlwifi-mvm-check-debugfs_dir-ptr-before-use.patch
  (git-fixes CVE-2022-48918 bsc#1229636).
- Update patches.suse/ixgbe-fix-pci-device-refcount-leak.patch
  (jsc#SLE-18384 CVE-2022-48896 bsc#1229540).
- Update
  patches.suse/misc-fastrpc-Don-t-remove-map-on-creater_process-and.patch
  (git-fixes CVE-2022-48873 bsc#1229512).
- Update
  patches.suse/misc-fastrpc-Fix-use-after-free-race-condition-for-m.patch
  (git-fixes CVE-2022-48872 bsc#1229510).
- Update
  patches.suse/net-mlx5-DR-Fix-slab-out-of-bounds-in-mlx5_cmd_dr_cr.patch
  (jsc#SLE-19253 CVE-2022-48932 bsc#1229622).
- Update patches.suse/net-smc-fix-connection-leak (git-fixes
  CVE-2022-48909 bsc#1229611).
- Update
  patches.suse/nfc-pn533-Wait-for-out_urb-s-completion-in-pn533_usb.patch
  (git-fixes CVE-2023-52907 bsc#1229526).
- Update
  patches.suse/nfp-flower-Fix-a-potential-leak-in-nfp_tunnel_add_sh.patch
  (git-fixes CVE-2022-48934 bsc#1229620).
- Update
  patches.suse/nilfs2-fix-general-protection-fault-in-nilfs_btree_i.patch
  (git-fixes CVE-2023-52900 bsc#1229581).
- Update
  patches.suse/octeontx2-pf-Fix-resource-leakage-in-VF-driver-unbin.patch
  (git-fixes CVE-2023-52905 bsc#1229528).
- Update
  patches.suse/platform-surface-aggregator-Add-missing-call-to-ssam.patch
  (git-fixes CVE-2022-48880 bsc#1229557).
- Update
  patches.suse/regulator-da9211-Use-irq-handler-when-ready.patch
  (git-fixes CVE-2022-48891 bsc#1229565).
- Update
  patches.suse/sched-fair-Fix-fault-in-reweight_entity.patch
  (git fixes (sched/core) CVE-2022-48921 bsc#1229635).
- Update
  patches.suse/scsi-storvsc-Fix-swiotlb-bounce-buffer-leak-in-confi.patch
  (bsc#1206006 CVE-2022-48890 bsc#1229544).
- Update
  patches.suse/spi-spi-zynq-qspi-Fix-a-NULL-pointer-dereference-in-.patch
  (git-fixes CVE-2021-4441 bsc#1229598).
- Update
  patches.suse/thermal-core-Fix-TZ_GET_TRIP-NULL-pointer-dereferenc.patch
  (git-fixes CVE-2022-48915 bsc#1229639).
- Update
  patches.suse/thermal-int340x-fix-memory-leak-in-int3400_notify.patch
  (git-fixes CVE-2022-48924 bsc#1229631).
- Update
  patches.suse/tty-fix-possible-null-ptr-defer-in-spk_ttyio_release.patch
  (git-fixes CVE-2022-48870 bsc#1229508).
- Update
  patches.suse/tty-serial-qcom-geni-serial-fix-slab-out-of-bounds-o.patch
  (git-fixes CVE-2022-48871 bsc#1229509).
- Update
  patches.suse/usb-gadget-f_ncm-fix-potential-NULL-ptr-deref-in-ncm.patch
  (git-fixes CVE-2023-52894 bsc#1229566).
- Update
  patches.suse/usb-gadget-rndis-add-spinlock-for-rndis-response-lis.patch
  (git-fixes CVE-2022-48926 bsc#1229629).
- Update
  patches.suse/usb-xhci-Check-endpoint-is-valid-before-dereferencin.patch
  (git-fixes CVE-2023-52901 bsc#1229531).
- Update
  patches.suse/wifi-mac80211-sdata-can-be-NULL-during-AMPDU-start.patch
  (git-fixes CVE-2022-48875 bsc#1229516).
- Update
  patches.suse/xen-netfront-destroy-queues-before-real_num_tx_queue.patch
  (git-fixes CVE-2022-48914 bsc#1229642).
- Update
  patches.suse/xhci-Fix-null-pointer-dereference-when-host-dies.patch
  (git-fixes CVE-2023-52898 bsc#1229568).
- commit 5c5e4d7</changelog>
  <changelog author="mkoutny@suse.com" date="1725019205">- Update
  patches.suse/0001-net-rds-fix-possible-cp-null-dereference.patch
  (git-fixes CVE-2024-35902 bsc#1224496).
- Update
  patches.suse/ALSA-usb-audio-Fix-possible-NULL-pointer-dereference.patch
  (git-fixes CVE-2023-52904 bsc#1229529).
- Update
  patches.suse/ASoC-Intel-sof-nau8825-fix-module-alias-overflow.patch
  (git-fixes CVE-2022-48889 bsc#1229545).
- Update
  patches.suse/ASoC-amd-Adjust-error-handling-in-case-of-absent-cod.patch
  (git-fixes CVE-2024-43818 bsc#1229296).
- Update
  patches.suse/PCI-DPC-Fix-use-after-free-on-concurrent-DPC-and-hot.patch
  (git-fixes CVE-2024-42302 bsc#1229366).
- Update
  patches.suse/PCI-keystone-Fix-NULL-pointer-dereference-in-case-of.patch
  (git-fixes CVE-2024-43823 bsc#1229303).
- Update
  patches.suse/RDMA-hns-Fix-soft-lockup-under-heavy-CEQE-load.patch
  (git-fixes CVE-2024-43872 bsc#1229489).
- Update
  patches.suse/RDMA-iwcm-Fix-a-use-after-free-related-to-destroying.patch
  (git-fixes CVE-2024-42285 bsc#1229381).
- Update
  patches.suse/Revert-ALSA-firewire-lib-operate-for-period-elapse-e.patch
  (bsc#1208783 CVE-2024-42274 bsc#1229417).
- Update patches.suse/bpf-Add-schedule-points-in-batch-ops.patch
  (jsc#PED-1377 CVE-2022-48939 bsc#1229616).
- Update
  patches.suse/bpf-Fix-crash-due-to-incorrect-copy_map_value.patch
  (jsc#PED-1377 CVE-2022-48940 bsc#1229615).
- Update
  patches.suse/btrfs-prevent-copying-too-big-compressed-lzo-segment.patch
  (git-fixes CVE-2022-48923 bsc#1229662).
- Update
  patches.suse/devres-Fix-memory-leakage-caused-by-driver-API-devm_.patch
  (git-fixes CVE-2024-43871 bsc#1229490).
- Update
  patches.suse/dma-fix-call-order-in-dmam_free_coherent.patch
  (git-fixes CVE-2024-43856 bsc#1229346).
- Update
  patches.suse/drm-amd-display-Add-NULL-check-for-afb-before-derefe.patch
  (stable-fixes CVE-2024-43903 bsc#1229781).
- Update
  patches.suse/drm-amd-display-Skip-Recompute-DSC-Params-if-no-Stre.patch
  (stable-fixes CVE-2024-43895 bsc#1229755).
- Update
  patches.suse/drm-amd-pm-Fix-the-null-pointer-dereference-for-vega.patch
  (stable-fixes CVE-2024-43905 bsc#1229784).
- Update
  patches.suse/drm-amdgpu-Fix-potential-NULL-dereference.patch
  (bsc#1206843 CVE-2023-52908 bsc#1229525).
- Update
  patches.suse/drm-amdgpu-Fix-the-null-pointer-dereference-to-ras_m.patch
  (stable-fixes CVE-2024-43908 bsc#1229788).
- Update
  patches.suse/drm-amdgpu-Fixed-bug-on-error-when-unloading-amdgpu.patch
  (bsc#1206843 CVE-2023-52912 bsc#1229588).
- Update
  patches.suse/drm-amdgpu-pm-Fix-the-null-pointer-dereference-for-s.patch
  (stable-fixes CVE-2024-43909 bsc#1229789).
- Update
  patches.suse/drm-amdgpu-pm-Fix-the-null-pointer-dereference-in-ap.patch
  (stable-fixes CVE-2024-43907 bsc#1229787).
- Update
  patches.suse/drm-client-fix-null-pointer-dereference-in-drm_clien.patch
  (git-fixes CVE-2024-43894 bsc#1229746).
- Update
  patches.suse/drm-gma500-fix-null-pointer-dereference-in-cdv_intel.patch
  (git-fixes CVE-2024-42310 bsc#1229358).
- Update
  patches.suse/drm-gma500-fix-null-pointer-dereference-in-psb_intel.patch
  (git-fixes CVE-2024-42309 bsc#1229359).
- Update patches.suse/drm-i915-Fix-potential-context-UAFs.patch
  (git-fixes CVE-2023-52913 bsc#1229521).
- Update
  patches.suse/drm-i915-gt-Cleanup-partial-engine-discovery-failure.patch
  (git-fixes CVE-2022-48893 bsc#1229576).
- Update
  patches.suse/drm-msm-dpu-Fix-memory-leak-in-msm_mdss_parse_data_b.patch
  (git-fixes CVE-2022-48888 bsc#1229546).
- Update
  patches.suse/drm-nouveau-prime-fix-refcount-underflow.patch
  (git-fixes CVE-2024-43867 bsc#1229493).
- Update patches.suse/drm-qxl-Add-check-for-drm_cvt_mode.patch
  (git-fixes CVE-2024-43829 bsc#1229341).
- Update
  patches.suse/drm-vmwgfx-Fix-a-deadlock-in-dma-buf-fence-polling.patch
  (git-fixes CVE-2024-43863 bsc#1229497).
- Update
  patches.suse/drm-vmwgfx-Remove-rcu-locks-from-user-resources.patch
  (bsc#1203329 CVE-2022-40133 bsc#1203330 CVE-2022-38457
  bsc#1213632 CVE-2022-48887 bsc#1229547).
- Update
  patches.suse/drop_monitor-replace-spin_lock-by-raw_spin_lock.patch
  (References: CVE-2021-47546 bsc#1227937 CVE-2024-40980).
- Update
  patches.suse/exfat-fix-potential-deadlock-on-__exfat_get_dentry_set.patch
  (git-fixes CVE-2024-42315 bsc#1229354).
- Update
  patches.suse/genirq-cpuhotplug-x86-vector-Prevent-vector-leak-dur.patch
  (git-fixes CVE-2024-31076 bsc#1226765).
- Update
  patches.suse/hfs-fix-to-initialize-fields-of-hfs_inode_info-after-hfs_alloc_inode.patch
  (git-fixes CVE-2024-42311 bsc#1229413).
- Update patches.suse/ice-Add-check-for-kzalloc.patch (jsc#PED-376
  CVE-2022-48886 bsc#1229548).
- Update
  patches.suse/ice-Fix-potential-memory-leak-in-ice_gnss_tty_write.patch
  (jsc#PED-376 CVE-2022-48885 bsc#1229564).
- Update
  patches.suse/iommu-iova-Fix-alloc-iova-overflows-issue.patch
  (git-fixes CVE-2023-52910 bsc#1229523).
- Update
  patches.suse/jfs-Fix-array-index-out-of-bounds-in-diFree.patch
  (git-fixes CVE-2024-43858 bsc#1229414).
- Update
  patches.suse/kobject_uevent-Fix-OOB-access-within-zap_modalias_en.patch
  (git-fixes CVE-2024-42292 bsc#1229373).
- Update
  patches.suse/leds-trigger-Unregister-sysfs-attributes-before-call.patch
  (git-fixes CVE-2024-43830 bsc#1229305).
- Update
  patches.suse/lib-objagg-Fix-general-protection-fault.patch
  (git-fixes CVE-2024-43846 bsc#1229360).
- Update
  patches.suse/media-venus-fix-use-after-free-in-vdec_close.patch
  (git-fixes CVE-2024-42313 bsc#1229356).
- Update
  patches.suse/memcg-protect-concurrent-access-to-mem_cgroup_idr.patch
  (git-fixes CVE-2024-43892 bsc#1229761).
- Update
  patches.suse/net-ipv6-ensure-we-call-ipv6_mc_down-at-most-once.patch
  (git-fixes CVE-2022-48910 bsc#1229632).
- Update
  patches.suse/net-ks8851-Fix-deadlock-with-the-SPI-chip-variant.patch
  (git-fixes CVE-2024-41036 bsc#1228496).
- Update
  patches.suse/net-ks8851-Queue-RX-packets-in-IRQ-handler-instead-o.patch
  (CVE-2024-35971 bsc#1224578 CVE-2024-36962 bsc#1225827).
- Update
  patches.suse/net-mlx5-Fix-command-stats-access-after-free.patch
  (jsc#PED-1549 CVE-2022-48884 bsc#1229562).
- Update
  patches.suse/net-mlx5e-Fix-macsec-possible-null-dereference-when-.patch
  (jsc#PED-1549 CVE-2022-48882 bsc#1229558).
- Update
  patches.suse/net-mlx5e-IPoIB-Block-PKEY-interfaces-with-less-rx-q.patch
  (jsc#PED-1549 CVE-2022-48883 bsc#1229560).
- Update
  patches.suse/net-usb-qmi_wwan-fix-memory-leak-for-not-ip-packets.patch
  (git-fixes CVE-2024-43861 bsc#1229500).
- Update
  patches.suse/nfsd-fix-handling-of-cached-open-files-in-nfsd4_open.patch
  (git-fixes CVE-2023-52909 bsc#1229524).
- Update
  patches.suse/nvme-pci-add-missing-condition-check-for-existence-o.patch
  (git-fixes CVE-2024-42276 bsc#1229410).
- Update
  patches.suse/padata-Fix-possible-divide-by-0-panic-in-padata_mt_h.patch
  (git-fixes CVE-2024-43889 bsc#1229743).
- Update
  patches.suse/platform-x86-amd-Fix-refcount-leak-in-amd_pmc_probe.patch
  (bsc#1210644 CVE-2022-48881 bsc#1229559).
- Update
  patches.suse/powerpc-pseries-Whitelist-dtl-slub-object-for-copyin.patch
  (bsc#1194869 CVE-2024-41065 bsc#1228636).
- Update
  patches.suse/s390-dasd-fix-error-checks-in-dasd_copy_pair_store.patch
  (git-fixes bsc#1229190 CVE-2024-42320 bsc#1229349).
- Update
  patches.suse/scsi-lpfc-Revise-lpfc_prep_embed_io-routine-with-pro.patch
  (bsc#1228857 CVE-2024-43816 bsc#1229318).
- Update
  patches.suse/scsi-qla2xxx-Complete-command-early-within-lock.patch
  (bsc#1228850 CVE-2024-42287 bsc#1229392).
- Update
  patches.suse/scsi-qla2xxx-During-vport-delete-send-async-logout-e.patch
  (bsc#1228850 CVE-2024-42289 bsc#1229399).
- Update
  patches.suse/scsi-qla2xxx-Fix-for-possible-memory-corruption.patch
  (bsc#1228850 CVE-2024-42288 bsc#1229398).
- Update
  patches.suse/scsi-qla2xxx-validate-nvme_local_port-correctly.patch
  (bsc#1228850 CVE-2024-42286 bsc#1229395).
- Update
  patches.suse/wifi-cfg80211-handle-2x996-RU-allocation-in-cfg80211.patch
  (git-fixes CVE-2024-43879 bsc#1229482).
- Update
  patches.suse/wifi-rtw89-Fix-array-index-mistake-in-rtw89_sta_info.patch
  (git-fixes CVE-2024-43842 bsc#1229317).
- commit 777a4e3</changelog>
  <changelog author="ailiop@suse.com" date="1725192000">- xfs: Fix the owner setting issue for rmap query in xfs fsmap
  (git-fixes).
- commit 264a4ea</changelog>
  <changelog author="ailiop@suse.com" date="1725192001">- xfs: use XFS_BUF_DADDR_NULL for daddrs in getfsmap code
  (git-fixes).
- commit b060763</changelog>
  <changelog author="ailiop@suse.com" date="1725192002">- xfs: Fix missing interval for missing_owner in xfs fsmap
  (git-fixes).
- commit 3005438</changelog>
  <changelog author="ohering@suse.de" date="1725278400">- net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response (git-fixes).
- commit f65ae14</changelog>
  <changelog author="ailiop@suse.com" date="1725278401">- ocfs2: use coarse time for new created files (git-fixes).
- commit 82dc1eb</changelog>
  <changelog author="oneukum@suse.com" date="1725278402">- net: usb: qmi_wwan: fix memory leak for not ip packets
  (CVE-2024-43861 bsc#1229500).
- commit 3e796c3</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1725278403">- bluetooth/l2cap: sync sock recv cb and release (bsc#1228576
  CVE-2024-41062).
- commit 07bd1e3</changelog>
  <changelog author="ptesarik@suse.com" date="1725278404">- swiotlb: fix swiotlb_bounce() to do partial sync's correctly
  (git-fixes).
- commit b02e597</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1725278405">- Bluetooth: L2CAP: Fix deadlock (git-fixes).
- commit 717d839</changelog>
  <changelog author="oneukum@suse.com" date="1725278406">- usb: vhci-hcd: Do not drop references before new references
  are gained (CVE-2024-43883 bsc#1229707).
- commit 44d7bae</changelog>
  <changelog author="jlee@suse.com" date="1725364800">- vdpa: ifcvf: Do proper cleanup if IFCVF init fails (bsc#1225524
  CVE-2022-48706).
- commit 023b108</changelog>
  <changelog author="jlee@suse.com" date="1725364801">- efi/unaccepted: touch soft lockup during memory accept
  (bsc#1225773 CVE-2024-36936).
- commit 29d2eb8</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1725364802">- Bluetooth: Fix usage of __hci_cmd_sync_status (git-fixes).
- commit 6d0732e</changelog>
  <changelog author="lhenriques@suse.de" date="1725364803">- fuse: Initialize beyond-EOF page contents before setting
  uptodate (bsc#1229454 CVE-2024-44947).
- commit ddfd2d7</changelog>
</package>
<package pkgid="da0795d1f99b3f151d5204dbb2a34f1d5e11b5941da161dadbe7d8779f8f381b" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.13.67.3"/>
  <changelog author="osalvador@suse.de" date="1725019200">- mm: prevent derefencing NULL ptr in pfn_section_valid()
  (git-fixes).
- commit d77caa1</changelog>
  <changelog author="pjakobsson@suse.de" date="1725019201">- blacklist.conf: 0cac183b98d8 drm/amdkfd: range check cp bad op exception interrupts
- commit a1d8500</changelog>
  <changelog author="vkarasulli@suse.de" date="1725019202">- iommu/amd: Convert comma to semicolon (git-fixes).
- commit f13afd4</changelog>
  <changelog author="dsterba@suse.com" date="1725019203">- Fix reference in patches.suse/netfilter-tproxy-bail-out-if-IP-has-been-disabled-on.patch (CVE-2024-36270 bsc#1226798)
- commit 7d81a29</changelog>
  <changelog author="mkoutny@suse.com" date="1725019204">- Update
  patches.suse/ASoC-ops-Shift-tested-values-in-snd_soc_put_volsw-by.patch
  (git-fixes CVE-2022-48917 bsc#1229637).
- Update
  patches.suse/Bluetooth-hci_qca-Fix-driver-shutdown-on-closed-serd.patch
  (git-fixes CVE-2022-48878 bsc#1229554).
- Update
  patches.suse/CDC-NCM-avoid-overflow-in-sanity-checking.patch
  (git-fixes CVE-2022-48938 bsc#1229664).
- Update
  patches.suse/KVM-x86-mmu-make-apf-token-non-zero-to-fix-bug.patch
  (git-fixes CVE-2022-48943 bsc#1229645).
- Update
  patches.suse/RDMA-cma-Do-not-change-route.addr.src_addr-outside-s.patch
  (git-fixes CVE-2022-48925 bsc#1229630).
- Update patches.suse/RDMA-ib_srp-Fix-a-deadlock.patch (git-fixes
  CVE-2022-48930 bsc#1229624).
- Update
  patches.suse/USB-gadgetfs-Fix-race-between-mounting-and-unmountin.patch
  (CVE-2022-4382 bsc#1206258 CVE-2022-48869 bsc#1229507).
- Update
  patches.suse/auxdisplay-lcd2s-Fix-memory-leak-in-remove.patch
  (git-fixes CVE-2022-48907 bsc#1229608).
- Update
  patches.suse/blktrace-fix-use-after-free-for-struct-blk_trace.patch
  (bsc#1198017 CVE-2022-48913 bsc#1229643).
- Update
  patches.suse/bpf-Fix-crash-due-to-out-of-bounds-access-into-reg2b.patch
  (git-fixes bsc#1194111 bsc#1194765 bsc#1196261 CVE-2021-4204
  CVE-2022-0500 CVE-2022-23222 CVE-2022-48929 bsc#1229625).
- Update
  patches.suse/btrfs-fix-race-between-quota-rescan-and-disable-lead.patch
  (bsc#1207158 CVE-2023-52896 bsc#1229533).
- Update
  patches.suse/btrfs-fix-relocation-crash-due-to-premature-return-f.patch
  (bsc#1203360 CVE-2022-48903 bsc#1229613).
- Update
  patches.suse/cgroup-cpuset-Prevent-UAF-in-proc_cpuset_show.patch
  (bsc#1228801 CVE-2024-43853 bsc#1229292).
- Update
  patches.suse/cifs-fix-double-free-race-when-mount-fails-in-cifs_get_root-.patch
  (bsc#1193629 CVE-2022-48919 bsc#1229657).
- Update
  patches.suse/configfs-fix-a-race-in-configfs_-un-register_subsyst.patch
  (git-fixes CVE-2022-48931 bsc#1229623).
- Update
  patches.suse/dmaengine-idxd-Let-probe-fail-when-workqueue-cannot-.patch
  (git-fixes CVE-2022-48868 bsc#1229506).
- Update
  patches.suse/drm-msm-another-fix-for-the-headless-Adreno-GPU.patch
  (git-fixes CVE-2023-52911 bsc#1229522).
- Update
  patches.suse/drm-msm-dp-do-not-complete-dp_aux_cmd_fifo_tx-if-irq.patch
  (git-fixes CVE-2022-48898 bsc#1229537).
- Update patches.suse/drm-virtio-Fix-GEM-handle-creation-UAF.patch
  (git-fixes CVE-2022-48899 bsc#1229536).
- Update
  patches.suse/gsmi-fix-null-deref-in-gsmi_get_variable.patch
  (git-fixes CVE-2023-52893 bsc#1229535).
- Update
  patches.suse/hwmon-Handle-failure-to-register-sensor-with-thermal.patch
  (git-fixes CVE-2022-48942 bsc#1229612).
- Update
  patches.suse/ibmvnic-free-reset-work-item-when-flushing.patch
  (bsc#1196516 ltc#196391 CVE-2022-48905 bsc#1229604).
- Update
  patches.suse/ice-fix-concurrent-reset-and-removal-of-VFs.patch
  (git-fixes CVE-2022-48941 bsc#1229614).
- Update
  patches.suse/iio-adc-men_z188_adc-Fix-a-resource-leak-in-an-error.patch
  (git-fixes CVE-2022-48928 bsc#1229626).
- Update
  patches.suse/iio-adc-tsc2046-fix-memory-corruption-by-preventing-.patch
  (git-fixes CVE-2022-48927 bsc#1229628).
- Update
  patches.suse/io_uring-add-a-schedule-point-in-io_add_buffers.patch
  (git-fixes CVE-2022-48937 bsc#1229617).
- Update patches.suse/iommu-amd-Fix-I-O-page-table-memory-leak
  (git-fixes CVE-2022-48904 bsc#1229603).
- Update
  patches.suse/iommu-vt-d-fix-double-list_add-when-enabling-vmd-in-scalable-mode
  (bsc#1196894 CVE-2022-48916 bsc#1229638).
- Update
  patches.suse/iwlwifi-mvm-check-debugfs_dir-ptr-before-use.patch
  (git-fixes CVE-2022-48918 bsc#1229636).
- Update patches.suse/ixgbe-fix-pci-device-refcount-leak.patch
  (jsc#SLE-18384 CVE-2022-48896 bsc#1229540).
- Update
  patches.suse/misc-fastrpc-Don-t-remove-map-on-creater_process-and.patch
  (git-fixes CVE-2022-48873 bsc#1229512).
- Update
  patches.suse/misc-fastrpc-Fix-use-after-free-race-condition-for-m.patch
  (git-fixes CVE-2022-48872 bsc#1229510).
- Update
  patches.suse/net-mlx5-DR-Fix-slab-out-of-bounds-in-mlx5_cmd_dr_cr.patch
  (jsc#SLE-19253 CVE-2022-48932 bsc#1229622).
- Update patches.suse/net-smc-fix-connection-leak (git-fixes
  CVE-2022-48909 bsc#1229611).
- Update
  patches.suse/nfc-pn533-Wait-for-out_urb-s-completion-in-pn533_usb.patch
  (git-fixes CVE-2023-52907 bsc#1229526).
- Update
  patches.suse/nfp-flower-Fix-a-potential-leak-in-nfp_tunnel_add_sh.patch
  (git-fixes CVE-2022-48934 bsc#1229620).
- Update
  patches.suse/nilfs2-fix-general-protection-fault-in-nilfs_btree_i.patch
  (git-fixes CVE-2023-52900 bsc#1229581).
- Update
  patches.suse/octeontx2-pf-Fix-resource-leakage-in-VF-driver-unbin.patch
  (git-fixes CVE-2023-52905 bsc#1229528).
- Update
  patches.suse/platform-surface-aggregator-Add-missing-call-to-ssam.patch
  (git-fixes CVE-2022-48880 bsc#1229557).
- Update
  patches.suse/regulator-da9211-Use-irq-handler-when-ready.patch
  (git-fixes CVE-2022-48891 bsc#1229565).
- Update
  patches.suse/sched-fair-Fix-fault-in-reweight_entity.patch
  (git fixes (sched/core) CVE-2022-48921 bsc#1229635).
- Update
  patches.suse/scsi-storvsc-Fix-swiotlb-bounce-buffer-leak-in-confi.patch
  (bsc#1206006 CVE-2022-48890 bsc#1229544).
- Update
  patches.suse/spi-spi-zynq-qspi-Fix-a-NULL-pointer-dereference-in-.patch
  (git-fixes CVE-2021-4441 bsc#1229598).
- Update
  patches.suse/thermal-core-Fix-TZ_GET_TRIP-NULL-pointer-dereferenc.patch
  (git-fixes CVE-2022-48915 bsc#1229639).
- Update
  patches.suse/thermal-int340x-fix-memory-leak-in-int3400_notify.patch
  (git-fixes CVE-2022-48924 bsc#1229631).
- Update
  patches.suse/tty-fix-possible-null-ptr-defer-in-spk_ttyio_release.patch
  (git-fixes CVE-2022-48870 bsc#1229508).
- Update
  patches.suse/tty-serial-qcom-geni-serial-fix-slab-out-of-bounds-o.patch
  (git-fixes CVE-2022-48871 bsc#1229509).
- Update
  patches.suse/usb-gadget-f_ncm-fix-potential-NULL-ptr-deref-in-ncm.patch
  (git-fixes CVE-2023-52894 bsc#1229566).
- Update
  patches.suse/usb-gadget-rndis-add-spinlock-for-rndis-response-lis.patch
  (git-fixes CVE-2022-48926 bsc#1229629).
- Update
  patches.suse/usb-xhci-Check-endpoint-is-valid-before-dereferencin.patch
  (git-fixes CVE-2023-52901 bsc#1229531).
- Update
  patches.suse/wifi-mac80211-sdata-can-be-NULL-during-AMPDU-start.patch
  (git-fixes CVE-2022-48875 bsc#1229516).
- Update
  patches.suse/xen-netfront-destroy-queues-before-real_num_tx_queue.patch
  (git-fixes CVE-2022-48914 bsc#1229642).
- Update
  patches.suse/xhci-Fix-null-pointer-dereference-when-host-dies.patch
  (git-fixes CVE-2023-52898 bsc#1229568).
- commit 5c5e4d7</changelog>
  <changelog author="mkoutny@suse.com" date="1725019205">- Update
  patches.suse/0001-net-rds-fix-possible-cp-null-dereference.patch
  (git-fixes CVE-2024-35902 bsc#1224496).
- Update
  patches.suse/ALSA-usb-audio-Fix-possible-NULL-pointer-dereference.patch
  (git-fixes CVE-2023-52904 bsc#1229529).
- Update
  patches.suse/ASoC-Intel-sof-nau8825-fix-module-alias-overflow.patch
  (git-fixes CVE-2022-48889 bsc#1229545).
- Update
  patches.suse/ASoC-amd-Adjust-error-handling-in-case-of-absent-cod.patch
  (git-fixes CVE-2024-43818 bsc#1229296).
- Update
  patches.suse/PCI-DPC-Fix-use-after-free-on-concurrent-DPC-and-hot.patch
  (git-fixes CVE-2024-42302 bsc#1229366).
- Update
  patches.suse/PCI-keystone-Fix-NULL-pointer-dereference-in-case-of.patch
  (git-fixes CVE-2024-43823 bsc#1229303).
- Update
  patches.suse/RDMA-hns-Fix-soft-lockup-under-heavy-CEQE-load.patch
  (git-fixes CVE-2024-43872 bsc#1229489).
- Update
  patches.suse/RDMA-iwcm-Fix-a-use-after-free-related-to-destroying.patch
  (git-fixes CVE-2024-42285 bsc#1229381).
- Update
  patches.suse/Revert-ALSA-firewire-lib-operate-for-period-elapse-e.patch
  (bsc#1208783 CVE-2024-42274 bsc#1229417).
- Update patches.suse/bpf-Add-schedule-points-in-batch-ops.patch
  (jsc#PED-1377 CVE-2022-48939 bsc#1229616).
- Update
  patches.suse/bpf-Fix-crash-due-to-incorrect-copy_map_value.patch
  (jsc#PED-1377 CVE-2022-48940 bsc#1229615).
- Update
  patches.suse/btrfs-prevent-copying-too-big-compressed-lzo-segment.patch
  (git-fixes CVE-2022-48923 bsc#1229662).
- Update
  patches.suse/devres-Fix-memory-leakage-caused-by-driver-API-devm_.patch
  (git-fixes CVE-2024-43871 bsc#1229490).
- Update
  patches.suse/dma-fix-call-order-in-dmam_free_coherent.patch
  (git-fixes CVE-2024-43856 bsc#1229346).
- Update
  patches.suse/drm-amd-display-Add-NULL-check-for-afb-before-derefe.patch
  (stable-fixes CVE-2024-43903 bsc#1229781).
- Update
  patches.suse/drm-amd-display-Skip-Recompute-DSC-Params-if-no-Stre.patch
  (stable-fixes CVE-2024-43895 bsc#1229755).
- Update
  patches.suse/drm-amd-pm-Fix-the-null-pointer-dereference-for-vega.patch
  (stable-fixes CVE-2024-43905 bsc#1229784).
- Update
  patches.suse/drm-amdgpu-Fix-potential-NULL-dereference.patch
  (bsc#1206843 CVE-2023-52908 bsc#1229525).
- Update
  patches.suse/drm-amdgpu-Fix-the-null-pointer-dereference-to-ras_m.patch
  (stable-fixes CVE-2024-43908 bsc#1229788).
- Update
  patches.suse/drm-amdgpu-Fixed-bug-on-error-when-unloading-amdgpu.patch
  (bsc#1206843 CVE-2023-52912 bsc#1229588).
- Update
  patches.suse/drm-amdgpu-pm-Fix-the-null-pointer-dereference-for-s.patch
  (stable-fixes CVE-2024-43909 bsc#1229789).
- Update
  patches.suse/drm-amdgpu-pm-Fix-the-null-pointer-dereference-in-ap.patch
  (stable-fixes CVE-2024-43907 bsc#1229787).
- Update
  patches.suse/drm-client-fix-null-pointer-dereference-in-drm_clien.patch
  (git-fixes CVE-2024-43894 bsc#1229746).
- Update
  patches.suse/drm-gma500-fix-null-pointer-dereference-in-cdv_intel.patch
  (git-fixes CVE-2024-42310 bsc#1229358).
- Update
  patches.suse/drm-gma500-fix-null-pointer-dereference-in-psb_intel.patch
  (git-fixes CVE-2024-42309 bsc#1229359).
- Update patches.suse/drm-i915-Fix-potential-context-UAFs.patch
  (git-fixes CVE-2023-52913 bsc#1229521).
- Update
  patches.suse/drm-i915-gt-Cleanup-partial-engine-discovery-failure.patch
  (git-fixes CVE-2022-48893 bsc#1229576).
- Update
  patches.suse/drm-msm-dpu-Fix-memory-leak-in-msm_mdss_parse_data_b.patch
  (git-fixes CVE-2022-48888 bsc#1229546).
- Update
  patches.suse/drm-nouveau-prime-fix-refcount-underflow.patch
  (git-fixes CVE-2024-43867 bsc#1229493).
- Update patches.suse/drm-qxl-Add-check-for-drm_cvt_mode.patch
  (git-fixes CVE-2024-43829 bsc#1229341).
- Update
  patches.suse/drm-vmwgfx-Fix-a-deadlock-in-dma-buf-fence-polling.patch
  (git-fixes CVE-2024-43863 bsc#1229497).
- Update
  patches.suse/drm-vmwgfx-Remove-rcu-locks-from-user-resources.patch
  (bsc#1203329 CVE-2022-40133 bsc#1203330 CVE-2022-38457
  bsc#1213632 CVE-2022-48887 bsc#1229547).
- Update
  patches.suse/drop_monitor-replace-spin_lock-by-raw_spin_lock.patch
  (References: CVE-2021-47546 bsc#1227937 CVE-2024-40980).
- Update
  patches.suse/exfat-fix-potential-deadlock-on-__exfat_get_dentry_set.patch
  (git-fixes CVE-2024-42315 bsc#1229354).
- Update
  patches.suse/genirq-cpuhotplug-x86-vector-Prevent-vector-leak-dur.patch
  (git-fixes CVE-2024-31076 bsc#1226765).
- Update
  patches.suse/hfs-fix-to-initialize-fields-of-hfs_inode_info-after-hfs_alloc_inode.patch
  (git-fixes CVE-2024-42311 bsc#1229413).
- Update patches.suse/ice-Add-check-for-kzalloc.patch (jsc#PED-376
  CVE-2022-48886 bsc#1229548).
- Update
  patches.suse/ice-Fix-potential-memory-leak-in-ice_gnss_tty_write.patch
  (jsc#PED-376 CVE-2022-48885 bsc#1229564).
- Update
  patches.suse/iommu-iova-Fix-alloc-iova-overflows-issue.patch
  (git-fixes CVE-2023-52910 bsc#1229523).
- Update
  patches.suse/jfs-Fix-array-index-out-of-bounds-in-diFree.patch
  (git-fixes CVE-2024-43858 bsc#1229414).
- Update
  patches.suse/kobject_uevent-Fix-OOB-access-within-zap_modalias_en.patch
  (git-fixes CVE-2024-42292 bsc#1229373).
- Update
  patches.suse/leds-trigger-Unregister-sysfs-attributes-before-call.patch
  (git-fixes CVE-2024-43830 bsc#1229305).
- Update
  patches.suse/lib-objagg-Fix-general-protection-fault.patch
  (git-fixes CVE-2024-43846 bsc#1229360).
- Update
  patches.suse/media-venus-fix-use-after-free-in-vdec_close.patch
  (git-fixes CVE-2024-42313 bsc#1229356).
- Update
  patches.suse/memcg-protect-concurrent-access-to-mem_cgroup_idr.patch
  (git-fixes CVE-2024-43892 bsc#1229761).
- Update
  patches.suse/net-ipv6-ensure-we-call-ipv6_mc_down-at-most-once.patch
  (git-fixes CVE-2022-48910 bsc#1229632).
- Update
  patches.suse/net-ks8851-Fix-deadlock-with-the-SPI-chip-variant.patch
  (git-fixes CVE-2024-41036 bsc#1228496).
- Update
  patches.suse/net-ks8851-Queue-RX-packets-in-IRQ-handler-instead-o.patch
  (CVE-2024-35971 bsc#1224578 CVE-2024-36962 bsc#1225827).
- Update
  patches.suse/net-mlx5-Fix-command-stats-access-after-free.patch
  (jsc#PED-1549 CVE-2022-48884 bsc#1229562).
- Update
  patches.suse/net-mlx5e-Fix-macsec-possible-null-dereference-when-.patch
  (jsc#PED-1549 CVE-2022-48882 bsc#1229558).
- Update
  patches.suse/net-mlx5e-IPoIB-Block-PKEY-interfaces-with-less-rx-q.patch
  (jsc#PED-1549 CVE-2022-48883 bsc#1229560).
- Update
  patches.suse/net-usb-qmi_wwan-fix-memory-leak-for-not-ip-packets.patch
  (git-fixes CVE-2024-43861 bsc#1229500).
- Update
  patches.suse/nfsd-fix-handling-of-cached-open-files-in-nfsd4_open.patch
  (git-fixes CVE-2023-52909 bsc#1229524).
- Update
  patches.suse/nvme-pci-add-missing-condition-check-for-existence-o.patch
  (git-fixes CVE-2024-42276 bsc#1229410).
- Update
  patches.suse/padata-Fix-possible-divide-by-0-panic-in-padata_mt_h.patch
  (git-fixes CVE-2024-43889 bsc#1229743).
- Update
  patches.suse/platform-x86-amd-Fix-refcount-leak-in-amd_pmc_probe.patch
  (bsc#1210644 CVE-2022-48881 bsc#1229559).
- Update
  patches.suse/powerpc-pseries-Whitelist-dtl-slub-object-for-copyin.patch
  (bsc#1194869 CVE-2024-41065 bsc#1228636).
- Update
  patches.suse/s390-dasd-fix-error-checks-in-dasd_copy_pair_store.patch
  (git-fixes bsc#1229190 CVE-2024-42320 bsc#1229349).
- Update
  patches.suse/scsi-lpfc-Revise-lpfc_prep_embed_io-routine-with-pro.patch
  (bsc#1228857 CVE-2024-43816 bsc#1229318).
- Update
  patches.suse/scsi-qla2xxx-Complete-command-early-within-lock.patch
  (bsc#1228850 CVE-2024-42287 bsc#1229392).
- Update
  patches.suse/scsi-qla2xxx-During-vport-delete-send-async-logout-e.patch
  (bsc#1228850 CVE-2024-42289 bsc#1229399).
- Update
  patches.suse/scsi-qla2xxx-Fix-for-possible-memory-corruption.patch
  (bsc#1228850 CVE-2024-42288 bsc#1229398).
- Update
  patches.suse/scsi-qla2xxx-validate-nvme_local_port-correctly.patch
  (bsc#1228850 CVE-2024-42286 bsc#1229395).
- Update
  patches.suse/wifi-cfg80211-handle-2x996-RU-allocation-in-cfg80211.patch
  (git-fixes CVE-2024-43879 bsc#1229482).
- Update
  patches.suse/wifi-rtw89-Fix-array-index-mistake-in-rtw89_sta_info.patch
  (git-fixes CVE-2024-43842 bsc#1229317).
- commit 777a4e3</changelog>
  <changelog author="ailiop@suse.com" date="1725192000">- xfs: Fix the owner setting issue for rmap query in xfs fsmap
  (git-fixes).
- commit 264a4ea</changelog>
  <changelog author="ailiop@suse.com" date="1725192001">- xfs: use XFS_BUF_DADDR_NULL for daddrs in getfsmap code
  (git-fixes).
- commit b060763</changelog>
  <changelog author="ailiop@suse.com" date="1725192002">- xfs: Fix missing interval for missing_owner in xfs fsmap
  (git-fixes).
- commit 3005438</changelog>
  <changelog author="ohering@suse.de" date="1725278400">- net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response (git-fixes).
- commit f65ae14</changelog>
  <changelog author="ailiop@suse.com" date="1725278401">- ocfs2: use coarse time for new created files (git-fixes).
- commit 82dc1eb</changelog>
  <changelog author="oneukum@suse.com" date="1725278402">- net: usb: qmi_wwan: fix memory leak for not ip packets
  (CVE-2024-43861 bsc#1229500).
- commit 3e796c3</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1725278403">- bluetooth/l2cap: sync sock recv cb and release (bsc#1228576
  CVE-2024-41062).
- commit 07bd1e3</changelog>
  <changelog author="ptesarik@suse.com" date="1725278404">- swiotlb: fix swiotlb_bounce() to do partial sync's correctly
  (git-fixes).
- commit b02e597</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1725278405">- Bluetooth: L2CAP: Fix deadlock (git-fixes).
- commit 717d839</changelog>
  <changelog author="oneukum@suse.com" date="1725278406">- usb: vhci-hcd: Do not drop references before new references
  are gained (CVE-2024-43883 bsc#1229707).
- commit 44d7bae</changelog>
  <changelog author="jlee@suse.com" date="1725364800">- vdpa: ifcvf: Do proper cleanup if IFCVF init fails (bsc#1225524
  CVE-2022-48706).
- commit 023b108</changelog>
  <changelog author="jlee@suse.com" date="1725364801">- efi/unaccepted: touch soft lockup during memory accept
  (bsc#1225773 CVE-2024-36936).
- commit 29d2eb8</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1725364802">- Bluetooth: Fix usage of __hci_cmd_sync_status (git-fixes).
- commit 6d0732e</changelog>
  <changelog author="lhenriques@suse.de" date="1725364803">- fuse: Initialize beyond-EOF page contents before setting
  uptodate (bsc#1229454 CVE-2024-44947).
- commit ddfd2d7</changelog>
</package>
<package pkgid="8ae2a38d552f2cacaa4be4dce235498f3621348971a7b3cfe36d6477db00bfeb" name="kpartx" arch="aarch64">
  <version epoch="0" ver="0.9.4+117+suse.87f2634" rel="150500.3.9.1"/>
  <changelog author="mwilck@suse.com" date="1645012800">- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus</changelog>
  <changelog author="mwilck@suse.com" date="1648468800">- If multipath-tools is newly installed, load dm-multipath
  (bsc#1196898)</changelog>
  <changelog author="mwilck@suse.com" date="1649937600">- Update to version 0.8.9+42+suse.45974f11:
  * Logging improvements
  * Fix busy loop with delayed_reconfigure (bsc#1199342)
  * multipathd: use remove_map_callback for delayed reconfigure
  * multipathd: Don't keep starting TUR threads, if they always hang.
    (bsc#1199345)
  * Fix handling of path addition in read-only arrays on NVMe
  * Updates of built-in hardware database
- Update to upstream 0.8.9
  * libmultipath: only warn once about unsupported dev_loss_tmo
  * Otherwise code-identical to 0.8.8+64</changelog>
  <changelog author="mwilck@suse.com" date="1652097600">- Update to version 0.8.9+85+suse.a9da21c:
  * This is a pre-release of multipath-tools 0.9.0
  * multipath.conf: add "protocol" subsection in "overrides" section
    This allows to set "dev_loss_tmo", "fast_io_fail_tmo", and
    "eh_deadline" on a per-protocol basis rather than per storage
  * multipath.conf: drop support for deprecated options:
    getuid_callout, pg_timeout, config_dir, multipath_dir
  * multipathd: don't switch to DAEMON_IDLE during startup
  (bsc#1199346, bsc#1197570)
  * multipathd: avoid delays during uevent processing (bsc#1199347)
  * Fixes for minor issues reported by coverity
  * Fix for memory leak with uid_attrs
  * Fix possibility to redefine -D_FORTIFY_SOURCE macro.
  * Updates for built in hardware db</changelog>
  <changelog author="mwilck@suse.com" date="1652184000">- Update to version 0.8.9+87+suse.a1eb122:
  * add ability to autodetect support for -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1652270400">- Update to version 0.8.9+90+suse.71a70fb:
  * support overriding -D_FORTIFY_SOURCE in OPTFLAGS
  * add -U_FORTIFY_SOURCE to optflags to avoid compilation errors
    on old distros</changelog>
  <changelog author="mwilck@suse.com" date="1657713600">- Update to version 0.9.0+33+suse.fdc6686
  * multipath.conf: add support for "protocol" subsection in
    "overrides" section to set certain config options by protocol.
  * Removed the previously deprecated options getuid_callout,
    config_dir, multipath_dir, pg_timeout
  * hwable fixes and additions
  * multipath.conf(5): add disclaimer about vendor support
  * libmultipath, kpartx: fix callers of dm_get_next_target()
  * Change built-in defaults for NVMe: group by prio, and immediate
    failback
  * Allow compilation with -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1657713601">- Update to version 0.9.0+39+suse.51a2ab1:
  Upstream bug fixes:
  * libmultipath: fix find_multipaths_timeout for unknown hardware
  (boo#1201483)
  * multipath-tools: fix "multipath -ll" for Native NVME Multipath devices
  (boo#1201483)</changelog>
  <changelog author="mwilck@suse.com" date="1661342400">- Update to version 0.9.0+55+suse.33d8854:
  * Avoid linking to libreadline to avoid licensing issue
    (bsc#1202616)</changelog>
  <changelog author="mwilck@suse.com" date="1662206400">- Update to version 0.9.0+134+suse.dbf2e2d:
  * Add multipathc command under GPL3.0, and split off libmpathutil
    (bsc#1202616)
  * Fix command completion in interactive mode (bsc#1201483)
  * multipathd: fix use-after-free in handle_path_wwid_change()
    (bsc#1201483)
  * Improve startup time for very large multipath.conf (bsc#1200523)
  * Avoid checker blocking event handling for huge number of devices
    (boo#1203085)
  * Cleanup sysfs accessors in libmultipath
  * Minor upstream bug fixes
  * Spelling fixes
  * Documentation: add ALUA info to README.md, delete README.alua</changelog>
  <changelog author="mwilck@suse.com" date="1662552000">- Update to version 0.9.1+48+suse.9c6c435:
  * Upstream version update
  * kpartx_id: remove bashism
  * Doc: add multipathc.8 manual page</changelog>
  <changelog author="mwilck@suse.com" date="1662724800">- Update to version 0.9.1+52+suse.be8809e:
  * Code-identical to 0.9.1+48+suse.9c6c435 (merge in git repo
    to preserve history; fix revision in _service file).</changelog>
  <changelog author="mwilck@suse.com" date="1666612800">- Update to version 0.9.2+57+suse.cf3c1e9:
  * Fix multipathd authorization bypass and symlink attack
    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
  * add multipath-dracut.conf: dracut config file to install
    tmpfiles.d/multipath.conf in initramfs
  * Use "queue_mode bio" for NVMeoF/TCP devices
  * Upstream bug fixes and hwtable updates
- Drop recompress.service, it just slows down build</changelog>
  <changelog author="mwilck@suse.com" date="1666785600">- Update to version 0.9.2+59+suse.ac8942d:
  * Fix segfault in "multipath -t" command (boo#1204731)</changelog>
  <changelog author="mwilck@suse.com" date="1674043200">- Fix "rpm --verify" (bsc#1207232)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 0.9.4+68+suse.98559ea:
  * libmultipath: bump ABI version to 18.0.0
  * libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
    (gh#opensvc/multipath-tools#56)
  * libmpathpersist: use conf-&gt;timeout for updating persistent reservations
    (gh#opensvc/multipath-tools#45)
  * libmultipath: is_path_valid(): check if device is in use
    (bsc#1203141) (added libmount dependency)
  * libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
  * multipathd: handle no active paths in update_map_pr (bsc#1207546)
  * multipathd: make pr registration consistent (bsc#1207546)
  * libmultipath: don't leak memory on invalid strings  (bsc#1207546)
  * multipath.conf(5): improve documentation of dev_loss_tmo (bsc#1207546)
  * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
  * libmultipath: fix 'show paths format' failure
  * minor bugfixes
  * hwtable fixes
  * Build system rework
  * spec file: adapt make command line to changes in build system
  * spec file: use make -Orecurse (better readable output)
  * spec file: use verbose build</changelog>
  <changelog author="mwilck@suse.com" date="1679486400">- Update to version 0.9.4+71+suse.c648a77:
  * libmultipath: avoid grouping paths wrongly with "find_multipaths smart"
    (bsc#1209623)
  * fix multipath-tools build with liburcu 0.14.0</changelog>
  <changelog author="mwilck@suse.com" date="1688472000">- Update to version 0.9.4+73+suse.a5414a6:
  * libmultipath: ignore nvme devices if nvme native multipath is enabled
    (bsc#1212854)
  * libmultipath: fix dev_loss_tmo even if not set in configuration
    (bsc#1212440)
    Note: this changes user-visible behavior. multipathd will not
    grab any nvme devices for dm-multipath if nvme native multipathing
    is on (which is the default on SLE and openSUSE).</changelog>
  <changelog author="mwilck@suse.com" date="1704456000">- Update to version 0.9.4+77+suse.1f7a63b:
  * fix ANA prioritizer enablement logic (bsc#1218326)</changelog>
  <changelog author="mwilck@suse.com" date="1709035200">- Update to version 0.9.4+117+suse.87f2634
- Backport of earlier bugfixes:
  * Fix activation of LVM volume groups during coldplug (bsc#1219142)
  * avoid changing SCSI timeouts in "multipath -d" (bsc#1213809)
  * fix dev_loss_tmo even if not set in configuration (bsc#1212440)
- Backport of upstream bug fixes (bsc#1220374):
  * avoid setting queue_if_no_path on multipath maps for which the
    no_path_retry timeout has expired
  * fixed memory and error handling for code using aio (marginal path code,
    directio path checker)
  * libmultipath: fix max_sectors_kb on adding path
  * fix warnings reported by udevadm verify
  * libmultipath: use directio checker for LIO targets
    (gh#opensvc/multipath-tools#54)
  * multipathd.service: remove "Also=multipathd.socket"
    (gh#opensvc/multipath-tools#65)
  * libmultipathd: Avoid parsing errors due to unsupported designators
  * libmultipath: return 'pending' state when port is in transition
  * multipath.rules: fix "smart" bug with failed valid path check
  * libmpathpersist: fix resource leak in update_map_pr()
  * libmultipath: keep renames from stopping other multipath actions
  * pass EXTRAVERSION to build</changelog>
</package>
<package pkgid="10f1485d52ba8b36605fcbcec17d0b2a37df24523274ffe973a50b164f49a211" name="kpartx" arch="s390x">
  <version epoch="0" ver="0.9.4+117+suse.87f2634" rel="150500.3.9.1"/>
  <changelog author="mwilck@suse.com" date="1645012800">- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus</changelog>
  <changelog author="mwilck@suse.com" date="1648468800">- If multipath-tools is newly installed, load dm-multipath
  (bsc#1196898)</changelog>
  <changelog author="mwilck@suse.com" date="1649937600">- Update to version 0.8.9+42+suse.45974f11:
  * Logging improvements
  * Fix busy loop with delayed_reconfigure (bsc#1199342)
  * multipathd: use remove_map_callback for delayed reconfigure
  * multipathd: Don't keep starting TUR threads, if they always hang.
    (bsc#1199345)
  * Fix handling of path addition in read-only arrays on NVMe
  * Updates of built-in hardware database
- Update to upstream 0.8.9
  * libmultipath: only warn once about unsupported dev_loss_tmo
  * Otherwise code-identical to 0.8.8+64</changelog>
  <changelog author="mwilck@suse.com" date="1652097600">- Update to version 0.8.9+85+suse.a9da21c:
  * This is a pre-release of multipath-tools 0.9.0
  * multipath.conf: add "protocol" subsection in "overrides" section
    This allows to set "dev_loss_tmo", "fast_io_fail_tmo", and
    "eh_deadline" on a per-protocol basis rather than per storage
  * multipath.conf: drop support for deprecated options:
    getuid_callout, pg_timeout, config_dir, multipath_dir
  * multipathd: don't switch to DAEMON_IDLE during startup
  (bsc#1199346, bsc#1197570)
  * multipathd: avoid delays during uevent processing (bsc#1199347)
  * Fixes for minor issues reported by coverity
  * Fix for memory leak with uid_attrs
  * Fix possibility to redefine -D_FORTIFY_SOURCE macro.
  * Updates for built in hardware db</changelog>
  <changelog author="mwilck@suse.com" date="1652184000">- Update to version 0.8.9+87+suse.a1eb122:
  * add ability to autodetect support for -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1652270400">- Update to version 0.8.9+90+suse.71a70fb:
  * support overriding -D_FORTIFY_SOURCE in OPTFLAGS
  * add -U_FORTIFY_SOURCE to optflags to avoid compilation errors
    on old distros</changelog>
  <changelog author="mwilck@suse.com" date="1657713600">- Update to version 0.9.0+33+suse.fdc6686
  * multipath.conf: add support for "protocol" subsection in
    "overrides" section to set certain config options by protocol.
  * Removed the previously deprecated options getuid_callout,
    config_dir, multipath_dir, pg_timeout
  * hwable fixes and additions
  * multipath.conf(5): add disclaimer about vendor support
  * libmultipath, kpartx: fix callers of dm_get_next_target()
  * Change built-in defaults for NVMe: group by prio, and immediate
    failback
  * Allow compilation with -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1657713601">- Update to version 0.9.0+39+suse.51a2ab1:
  Upstream bug fixes:
  * libmultipath: fix find_multipaths_timeout for unknown hardware
  (boo#1201483)
  * multipath-tools: fix "multipath -ll" for Native NVME Multipath devices
  (boo#1201483)</changelog>
  <changelog author="mwilck@suse.com" date="1661342400">- Update to version 0.9.0+55+suse.33d8854:
  * Avoid linking to libreadline to avoid licensing issue
    (bsc#1202616)</changelog>
  <changelog author="mwilck@suse.com" date="1662206400">- Update to version 0.9.0+134+suse.dbf2e2d:
  * Add multipathc command under GPL3.0, and split off libmpathutil
    (bsc#1202616)
  * Fix command completion in interactive mode (bsc#1201483)
  * multipathd: fix use-after-free in handle_path_wwid_change()
    (bsc#1201483)
  * Improve startup time for very large multipath.conf (bsc#1200523)
  * Avoid checker blocking event handling for huge number of devices
    (boo#1203085)
  * Cleanup sysfs accessors in libmultipath
  * Minor upstream bug fixes
  * Spelling fixes
  * Documentation: add ALUA info to README.md, delete README.alua</changelog>
  <changelog author="mwilck@suse.com" date="1662552000">- Update to version 0.9.1+48+suse.9c6c435:
  * Upstream version update
  * kpartx_id: remove bashism
  * Doc: add multipathc.8 manual page</changelog>
  <changelog author="mwilck@suse.com" date="1662724800">- Update to version 0.9.1+52+suse.be8809e:
  * Code-identical to 0.9.1+48+suse.9c6c435 (merge in git repo
    to preserve history; fix revision in _service file).</changelog>
  <changelog author="mwilck@suse.com" date="1666612800">- Update to version 0.9.2+57+suse.cf3c1e9:
  * Fix multipathd authorization bypass and symlink attack
    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
  * add multipath-dracut.conf: dracut config file to install
    tmpfiles.d/multipath.conf in initramfs
  * Use "queue_mode bio" for NVMeoF/TCP devices
  * Upstream bug fixes and hwtable updates
- Drop recompress.service, it just slows down build</changelog>
  <changelog author="mwilck@suse.com" date="1666785600">- Update to version 0.9.2+59+suse.ac8942d:
  * Fix segfault in "multipath -t" command (boo#1204731)</changelog>
  <changelog author="mwilck@suse.com" date="1674043200">- Fix "rpm --verify" (bsc#1207232)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 0.9.4+68+suse.98559ea:
  * libmultipath: bump ABI version to 18.0.0
  * libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
    (gh#opensvc/multipath-tools#56)
  * libmpathpersist: use conf-&gt;timeout for updating persistent reservations
    (gh#opensvc/multipath-tools#45)
  * libmultipath: is_path_valid(): check if device is in use
    (bsc#1203141) (added libmount dependency)
  * libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
  * multipathd: handle no active paths in update_map_pr (bsc#1207546)
  * multipathd: make pr registration consistent (bsc#1207546)
  * libmultipath: don't leak memory on invalid strings  (bsc#1207546)
  * multipath.conf(5): improve documentation of dev_loss_tmo (bsc#1207546)
  * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
  * libmultipath: fix 'show paths format' failure
  * minor bugfixes
  * hwtable fixes
  * Build system rework
  * spec file: adapt make command line to changes in build system
  * spec file: use make -Orecurse (better readable output)
  * spec file: use verbose build</changelog>
  <changelog author="mwilck@suse.com" date="1679486400">- Update to version 0.9.4+71+suse.c648a77:
  * libmultipath: avoid grouping paths wrongly with "find_multipaths smart"
    (bsc#1209623)
  * fix multipath-tools build with liburcu 0.14.0</changelog>
  <changelog author="mwilck@suse.com" date="1688472000">- Update to version 0.9.4+73+suse.a5414a6:
  * libmultipath: ignore nvme devices if nvme native multipath is enabled
    (bsc#1212854)
  * libmultipath: fix dev_loss_tmo even if not set in configuration
    (bsc#1212440)
    Note: this changes user-visible behavior. multipathd will not
    grab any nvme devices for dm-multipath if nvme native multipathing
    is on (which is the default on SLE and openSUSE).</changelog>
  <changelog author="mwilck@suse.com" date="1704456000">- Update to version 0.9.4+77+suse.1f7a63b:
  * fix ANA prioritizer enablement logic (bsc#1218326)</changelog>
  <changelog author="mwilck@suse.com" date="1709035200">- Update to version 0.9.4+117+suse.87f2634
- Backport of earlier bugfixes:
  * Fix activation of LVM volume groups during coldplug (bsc#1219142)
  * avoid changing SCSI timeouts in "multipath -d" (bsc#1213809)
  * fix dev_loss_tmo even if not set in configuration (bsc#1212440)
- Backport of upstream bug fixes (bsc#1220374):
  * avoid setting queue_if_no_path on multipath maps for which the
    no_path_retry timeout has expired
  * fixed memory and error handling for code using aio (marginal path code,
    directio path checker)
  * libmultipath: fix max_sectors_kb on adding path
  * fix warnings reported by udevadm verify
  * libmultipath: use directio checker for LIO targets
    (gh#opensvc/multipath-tools#54)
  * multipathd.service: remove "Also=multipathd.socket"
    (gh#opensvc/multipath-tools#65)
  * libmultipathd: Avoid parsing errors due to unsupported designators
  * libmultipath: return 'pending' state when port is in transition
  * multipath.rules: fix "smart" bug with failed valid path check
  * libmpathpersist: fix resource leak in update_map_pr()
  * libmultipath: keep renames from stopping other multipath actions
  * pass EXTRAVERSION to build</changelog>
</package>
<package pkgid="8489244db1ba42c4e0e0b576f1d9783448277a612c71e34985ea0b7c907aaa76" name="kpartx" arch="x86_64">
  <version epoch="0" ver="0.9.4+117+suse.87f2634" rel="150500.3.9.1"/>
  <changelog author="mwilck@suse.com" date="1645012800">- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus</changelog>
  <changelog author="mwilck@suse.com" date="1648468800">- If multipath-tools is newly installed, load dm-multipath
  (bsc#1196898)</changelog>
  <changelog author="mwilck@suse.com" date="1649937600">- Update to version 0.8.9+42+suse.45974f11:
  * Logging improvements
  * Fix busy loop with delayed_reconfigure (bsc#1199342)
  * multipathd: use remove_map_callback for delayed reconfigure
  * multipathd: Don't keep starting TUR threads, if they always hang.
    (bsc#1199345)
  * Fix handling of path addition in read-only arrays on NVMe
  * Updates of built-in hardware database
- Update to upstream 0.8.9
  * libmultipath: only warn once about unsupported dev_loss_tmo
  * Otherwise code-identical to 0.8.8+64</changelog>
  <changelog author="mwilck@suse.com" date="1652097600">- Update to version 0.8.9+85+suse.a9da21c:
  * This is a pre-release of multipath-tools 0.9.0
  * multipath.conf: add "protocol" subsection in "overrides" section
    This allows to set "dev_loss_tmo", "fast_io_fail_tmo", and
    "eh_deadline" on a per-protocol basis rather than per storage
  * multipath.conf: drop support for deprecated options:
    getuid_callout, pg_timeout, config_dir, multipath_dir
  * multipathd: don't switch to DAEMON_IDLE during startup
  (bsc#1199346, bsc#1197570)
  * multipathd: avoid delays during uevent processing (bsc#1199347)
  * Fixes for minor issues reported by coverity
  * Fix for memory leak with uid_attrs
  * Fix possibility to redefine -D_FORTIFY_SOURCE macro.
  * Updates for built in hardware db</changelog>
  <changelog author="mwilck@suse.com" date="1652184000">- Update to version 0.8.9+87+suse.a1eb122:
  * add ability to autodetect support for -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1652270400">- Update to version 0.8.9+90+suse.71a70fb:
  * support overriding -D_FORTIFY_SOURCE in OPTFLAGS
  * add -U_FORTIFY_SOURCE to optflags to avoid compilation errors
    on old distros</changelog>
  <changelog author="mwilck@suse.com" date="1657713600">- Update to version 0.9.0+33+suse.fdc6686
  * multipath.conf: add support for "protocol" subsection in
    "overrides" section to set certain config options by protocol.
  * Removed the previously deprecated options getuid_callout,
    config_dir, multipath_dir, pg_timeout
  * hwable fixes and additions
  * multipath.conf(5): add disclaimer about vendor support
  * libmultipath, kpartx: fix callers of dm_get_next_target()
  * Change built-in defaults for NVMe: group by prio, and immediate
    failback
  * Allow compilation with -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1657713601">- Update to version 0.9.0+39+suse.51a2ab1:
  Upstream bug fixes:
  * libmultipath: fix find_multipaths_timeout for unknown hardware
  (boo#1201483)
  * multipath-tools: fix "multipath -ll" for Native NVME Multipath devices
  (boo#1201483)</changelog>
  <changelog author="mwilck@suse.com" date="1661342400">- Update to version 0.9.0+55+suse.33d8854:
  * Avoid linking to libreadline to avoid licensing issue
    (bsc#1202616)</changelog>
  <changelog author="mwilck@suse.com" date="1662206400">- Update to version 0.9.0+134+suse.dbf2e2d:
  * Add multipathc command under GPL3.0, and split off libmpathutil
    (bsc#1202616)
  * Fix command completion in interactive mode (bsc#1201483)
  * multipathd: fix use-after-free in handle_path_wwid_change()
    (bsc#1201483)
  * Improve startup time for very large multipath.conf (bsc#1200523)
  * Avoid checker blocking event handling for huge number of devices
    (boo#1203085)
  * Cleanup sysfs accessors in libmultipath
  * Minor upstream bug fixes
  * Spelling fixes
  * Documentation: add ALUA info to README.md, delete README.alua</changelog>
  <changelog author="mwilck@suse.com" date="1662552000">- Update to version 0.9.1+48+suse.9c6c435:
  * Upstream version update
  * kpartx_id: remove bashism
  * Doc: add multipathc.8 manual page</changelog>
  <changelog author="mwilck@suse.com" date="1662724800">- Update to version 0.9.1+52+suse.be8809e:
  * Code-identical to 0.9.1+48+suse.9c6c435 (merge in git repo
    to preserve history; fix revision in _service file).</changelog>
  <changelog author="mwilck@suse.com" date="1666612800">- Update to version 0.9.2+57+suse.cf3c1e9:
  * Fix multipathd authorization bypass and symlink attack
    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
  * add multipath-dracut.conf: dracut config file to install
    tmpfiles.d/multipath.conf in initramfs
  * Use "queue_mode bio" for NVMeoF/TCP devices
  * Upstream bug fixes and hwtable updates
- Drop recompress.service, it just slows down build</changelog>
  <changelog author="mwilck@suse.com" date="1666785600">- Update to version 0.9.2+59+suse.ac8942d:
  * Fix segfault in "multipath -t" command (boo#1204731)</changelog>
  <changelog author="mwilck@suse.com" date="1674043200">- Fix "rpm --verify" (bsc#1207232)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 0.9.4+68+suse.98559ea:
  * libmultipath: bump ABI version to 18.0.0
  * libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
    (gh#opensvc/multipath-tools#56)
  * libmpathpersist: use conf-&gt;timeout for updating persistent reservations
    (gh#opensvc/multipath-tools#45)
  * libmultipath: is_path_valid(): check if device is in use
    (bsc#1203141) (added libmount dependency)
  * libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
  * multipathd: handle no active paths in update_map_pr (bsc#1207546)
  * multipathd: make pr registration consistent (bsc#1207546)
  * libmultipath: don't leak memory on invalid strings  (bsc#1207546)
  * multipath.conf(5): improve documentation of dev_loss_tmo (bsc#1207546)
  * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
  * libmultipath: fix 'show paths format' failure
  * minor bugfixes
  * hwtable fixes
  * Build system rework
  * spec file: adapt make command line to changes in build system
  * spec file: use make -Orecurse (better readable output)
  * spec file: use verbose build</changelog>
  <changelog author="mwilck@suse.com" date="1679486400">- Update to version 0.9.4+71+suse.c648a77:
  * libmultipath: avoid grouping paths wrongly with "find_multipaths smart"
    (bsc#1209623)
  * fix multipath-tools build with liburcu 0.14.0</changelog>
  <changelog author="mwilck@suse.com" date="1688472000">- Update to version 0.9.4+73+suse.a5414a6:
  * libmultipath: ignore nvme devices if nvme native multipath is enabled
    (bsc#1212854)
  * libmultipath: fix dev_loss_tmo even if not set in configuration
    (bsc#1212440)
    Note: this changes user-visible behavior. multipathd will not
    grab any nvme devices for dm-multipath if nvme native multipathing
    is on (which is the default on SLE and openSUSE).</changelog>
  <changelog author="mwilck@suse.com" date="1704456000">- Update to version 0.9.4+77+suse.1f7a63b:
  * fix ANA prioritizer enablement logic (bsc#1218326)</changelog>
  <changelog author="mwilck@suse.com" date="1709035200">- Update to version 0.9.4+117+suse.87f2634
- Backport of earlier bugfixes:
  * Fix activation of LVM volume groups during coldplug (bsc#1219142)
  * avoid changing SCSI timeouts in "multipath -d" (bsc#1213809)
  * fix dev_loss_tmo even if not set in configuration (bsc#1212440)
- Backport of upstream bug fixes (bsc#1220374):
  * avoid setting queue_if_no_path on multipath maps for which the
    no_path_retry timeout has expired
  * fixed memory and error handling for code using aio (marginal path code,
    directio path checker)
  * libmultipath: fix max_sectors_kb on adding path
  * fix warnings reported by udevadm verify
  * libmultipath: use directio checker for LIO targets
    (gh#opensvc/multipath-tools#54)
  * multipathd.service: remove "Also=multipathd.socket"
    (gh#opensvc/multipath-tools#65)
  * libmultipathd: Avoid parsing errors due to unsupported designators
  * libmultipath: return 'pending' state when port is in transition
  * multipath.rules: fix "smart" bug with failed valid path check
  * libmpathpersist: fix resource leak in update_map_pr()
  * libmultipath: keep renames from stopping other multipath actions
  * pass EXTRAVERSION to build</changelog>
</package>
<package pkgid="4073f28ceebed1195f22224fc676bf9f90982e18d4532e86d0e34d55b353fb75" name="kpartx" arch="aarch64">
  <version epoch="0" ver="0.9.4+77+suse.1f7a63b" rel="150500.3.6.1"/>
  <changelog author="mwilck@suse.com" date="1644926400">- Update to version 0.8.8+60+suse.4c5922cb:
  * multipathd: add suppport for FC Fabric Performance Impact
    Notifications (FPIN) (bsc#1195506)</changelog>
  <changelog author="mwilck@suse.com" date="1645012800">- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus</changelog>
  <changelog author="mwilck@suse.com" date="1648468800">- If multipath-tools is newly installed, load dm-multipath
  (bsc#1196898)</changelog>
  <changelog author="mwilck@suse.com" date="1649937600">- Update to version 0.8.9+42+suse.45974f11:
  * Logging improvements
  * Fix busy loop with delayed_reconfigure (bsc#1199342)
  * multipathd: use remove_map_callback for delayed reconfigure
  * multipathd: Don't keep starting TUR threads, if they always hang.
    (bsc#1199345)
  * Fix handling of path addition in read-only arrays on NVMe
  * Updates of built-in hardware database
- Update to upstream 0.8.9
  * libmultipath: only warn once about unsupported dev_loss_tmo
  * Otherwise code-identical to 0.8.8+64</changelog>
  <changelog author="mwilck@suse.com" date="1652097600">- Update to version 0.8.9+85+suse.a9da21c:
  * This is a pre-release of multipath-tools 0.9.0
  * multipath.conf: add "protocol" subsection in "overrides" section
    This allows to set "dev_loss_tmo", "fast_io_fail_tmo", and
    "eh_deadline" on a per-protocol basis rather than per storage
  * multipath.conf: drop support for deprecated options:
    getuid_callout, pg_timeout, config_dir, multipath_dir
  * multipathd: don't switch to DAEMON_IDLE during startup
  (bsc#1199346, bsc#1197570)
  * multipathd: avoid delays during uevent processing (bsc#1199347)
  * Fixes for minor issues reported by coverity
  * Fix for memory leak with uid_attrs
  * Fix possibility to redefine -D_FORTIFY_SOURCE macro.
  * Updates for built in hardware db</changelog>
  <changelog author="mwilck@suse.com" date="1652184000">- Update to version 0.8.9+87+suse.a1eb122:
  * add ability to autodetect support for -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1652270400">- Update to version 0.8.9+90+suse.71a70fb:
  * support overriding -D_FORTIFY_SOURCE in OPTFLAGS
  * add -U_FORTIFY_SOURCE to optflags to avoid compilation errors
    on old distros</changelog>
  <changelog author="mwilck@suse.com" date="1657713600">- Update to version 0.9.0+33+suse.fdc6686
  * multipath.conf: add support for "protocol" subsection in
    "overrides" section to set certain config options by protocol.
  * Removed the previously deprecated options getuid_callout,
    config_dir, multipath_dir, pg_timeout
  * hwable fixes and additions
  * multipath.conf(5): add disclaimer about vendor support
  * libmultipath, kpartx: fix callers of dm_get_next_target()
  * Change built-in defaults for NVMe: group by prio, and immediate
    failback
  * Allow compilation with -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1657713601">- Update to version 0.9.0+39+suse.51a2ab1:
  Upstream bug fixes:
  * libmultipath: fix find_multipaths_timeout for unknown hardware
  (boo#1201483)
  * multipath-tools: fix "multipath -ll" for Native NVME Multipath devices
  (boo#1201483)</changelog>
  <changelog author="mwilck@suse.com" date="1661342400">- Update to version 0.9.0+55+suse.33d8854:
  * Avoid linking to libreadline to avoid licensing issue
    (bsc#1202616)</changelog>
  <changelog author="mwilck@suse.com" date="1662206400">- Update to version 0.9.0+134+suse.dbf2e2d:
  * Add multipathc command under GPL3.0, and split off libmpathutil
    (bsc#1202616)
  * Fix command completion in interactive mode (bsc#1201483)
  * multipathd: fix use-after-free in handle_path_wwid_change()
    (bsc#1201483)
  * Improve startup time for very large multipath.conf (bsc#1200523)
  * Avoid checker blocking event handling for huge number of devices
    (boo#1203085)
  * Cleanup sysfs accessors in libmultipath
  * Minor upstream bug fixes
  * Spelling fixes
  * Documentation: add ALUA info to README.md, delete README.alua</changelog>
  <changelog author="mwilck@suse.com" date="1662552000">- Update to version 0.9.1+48+suse.9c6c435:
  * Upstream version update
  * kpartx_id: remove bashism
  * Doc: add multipathc.8 manual page</changelog>
  <changelog author="mwilck@suse.com" date="1662724800">- Update to version 0.9.1+52+suse.be8809e:
  * Code-identical to 0.9.1+48+suse.9c6c435 (merge in git repo
    to preserve history; fix revision in _service file).</changelog>
  <changelog author="mwilck@suse.com" date="1666612800">- Update to version 0.9.2+57+suse.cf3c1e9:
  * Fix multipathd authorization bypass and symlink attack
    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
  * add multipath-dracut.conf: dracut config file to install
    tmpfiles.d/multipath.conf in initramfs
  * Use "queue_mode bio" for NVMeoF/TCP devices
  * Upstream bug fixes and hwtable updates
- Drop recompress.service, it just slows down build</changelog>
  <changelog author="mwilck@suse.com" date="1666785600">- Update to version 0.9.2+59+suse.ac8942d:
  * Fix segfault in "multipath -t" command (boo#1204731)</changelog>
  <changelog author="mwilck@suse.com" date="1674043200">- Fix "rpm --verify" (bsc#1207232)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 0.9.4+68+suse.98559ea:
  * libmultipath: bump ABI version to 18.0.0
  * libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
    (gh#opensvc/multipath-tools#56)
  * libmpathpersist: use conf-&gt;timeout for updating persistent reservations
    (gh#opensvc/multipath-tools#45)
  * libmultipath: is_path_valid(): check if device is in use
    (bsc#1203141) (added libmount dependency)
  * libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
  * multipathd: handle no active paths in update_map_pr (bsc#1207546)
  * multipathd: make pr registration consistent (bsc#1207546)
  * libmultipath: don't leak memory on invalid strings  (bsc#1207546)
  * multipath.conf(5): improve documentation of dev_loss_tmo (bsc#1207546)
  * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
  * libmultipath: fix 'show paths format' failure
  * minor bugfixes
  * hwtable fixes
  * Build system rework
  * spec file: adapt make command line to changes in build system
  * spec file: use make -Orecurse (better readable output)
  * spec file: use verbose build</changelog>
  <changelog author="mwilck@suse.com" date="1679486400">- Update to version 0.9.4+71+suse.c648a77:
  * libmultipath: avoid grouping paths wrongly with "find_multipaths smart"
    (bsc#1209623)
  * fix multipath-tools build with liburcu 0.14.0</changelog>
  <changelog author="mwilck@suse.com" date="1688472000">- Update to version 0.9.4+73+suse.a5414a6:
  * libmultipath: ignore nvme devices if nvme native multipath is enabled
    (bsc#1212854)
  * libmultipath: fix dev_loss_tmo even if not set in configuration
    (bsc#1212440)
    Note: this changes user-visible behavior. multipathd will not
    grab any nvme devices for dm-multipath if nvme native multipathing
    is on (which is the default on SLE and openSUSE).</changelog>
  <changelog author="mwilck@suse.com" date="1704456000">- Update to version 0.9.4+77+suse.1f7a63b:
  * fix ANA prioritizer enablement logic (bsc#1218326)</changelog>
</package>
<package pkgid="b1a2ac8afe0d52a04eb2eca95c82060b29c3f9befb1f470f8efa238a11b73ac5" name="kpartx" arch="s390x">
  <version epoch="0" ver="0.9.4+77+suse.1f7a63b" rel="150500.3.6.1"/>
  <changelog author="mwilck@suse.com" date="1644926400">- Update to version 0.8.8+60+suse.4c5922cb:
  * multipathd: add suppport for FC Fabric Performance Impact
    Notifications (FPIN) (bsc#1195506)</changelog>
  <changelog author="mwilck@suse.com" date="1645012800">- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus</changelog>
  <changelog author="mwilck@suse.com" date="1648468800">- If multipath-tools is newly installed, load dm-multipath
  (bsc#1196898)</changelog>
  <changelog author="mwilck@suse.com" date="1649937600">- Update to version 0.8.9+42+suse.45974f11:
  * Logging improvements
  * Fix busy loop with delayed_reconfigure (bsc#1199342)
  * multipathd: use remove_map_callback for delayed reconfigure
  * multipathd: Don't keep starting TUR threads, if they always hang.
    (bsc#1199345)
  * Fix handling of path addition in read-only arrays on NVMe
  * Updates of built-in hardware database
- Update to upstream 0.8.9
  * libmultipath: only warn once about unsupported dev_loss_tmo
  * Otherwise code-identical to 0.8.8+64</changelog>
  <changelog author="mwilck@suse.com" date="1652097600">- Update to version 0.8.9+85+suse.a9da21c:
  * This is a pre-release of multipath-tools 0.9.0
  * multipath.conf: add "protocol" subsection in "overrides" section
    This allows to set "dev_loss_tmo", "fast_io_fail_tmo", and
    "eh_deadline" on a per-protocol basis rather than per storage
  * multipath.conf: drop support for deprecated options:
    getuid_callout, pg_timeout, config_dir, multipath_dir
  * multipathd: don't switch to DAEMON_IDLE during startup
  (bsc#1199346, bsc#1197570)
  * multipathd: avoid delays during uevent processing (bsc#1199347)
  * Fixes for minor issues reported by coverity
  * Fix for memory leak with uid_attrs
  * Fix possibility to redefine -D_FORTIFY_SOURCE macro.
  * Updates for built in hardware db</changelog>
  <changelog author="mwilck@suse.com" date="1652184000">- Update to version 0.8.9+87+suse.a1eb122:
  * add ability to autodetect support for -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1652270400">- Update to version 0.8.9+90+suse.71a70fb:
  * support overriding -D_FORTIFY_SOURCE in OPTFLAGS
  * add -U_FORTIFY_SOURCE to optflags to avoid compilation errors
    on old distros</changelog>
  <changelog author="mwilck@suse.com" date="1657713600">- Update to version 0.9.0+33+suse.fdc6686
  * multipath.conf: add support for "protocol" subsection in
    "overrides" section to set certain config options by protocol.
  * Removed the previously deprecated options getuid_callout,
    config_dir, multipath_dir, pg_timeout
  * hwable fixes and additions
  * multipath.conf(5): add disclaimer about vendor support
  * libmultipath, kpartx: fix callers of dm_get_next_target()
  * Change built-in defaults for NVMe: group by prio, and immediate
    failback
  * Allow compilation with -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1657713601">- Update to version 0.9.0+39+suse.51a2ab1:
  Upstream bug fixes:
  * libmultipath: fix find_multipaths_timeout for unknown hardware
  (boo#1201483)
  * multipath-tools: fix "multipath -ll" for Native NVME Multipath devices
  (boo#1201483)</changelog>
  <changelog author="mwilck@suse.com" date="1661342400">- Update to version 0.9.0+55+suse.33d8854:
  * Avoid linking to libreadline to avoid licensing issue
    (bsc#1202616)</changelog>
  <changelog author="mwilck@suse.com" date="1662206400">- Update to version 0.9.0+134+suse.dbf2e2d:
  * Add multipathc command under GPL3.0, and split off libmpathutil
    (bsc#1202616)
  * Fix command completion in interactive mode (bsc#1201483)
  * multipathd: fix use-after-free in handle_path_wwid_change()
    (bsc#1201483)
  * Improve startup time for very large multipath.conf (bsc#1200523)
  * Avoid checker blocking event handling for huge number of devices
    (boo#1203085)
  * Cleanup sysfs accessors in libmultipath
  * Minor upstream bug fixes
  * Spelling fixes
  * Documentation: add ALUA info to README.md, delete README.alua</changelog>
  <changelog author="mwilck@suse.com" date="1662552000">- Update to version 0.9.1+48+suse.9c6c435:
  * Upstream version update
  * kpartx_id: remove bashism
  * Doc: add multipathc.8 manual page</changelog>
  <changelog author="mwilck@suse.com" date="1662724800">- Update to version 0.9.1+52+suse.be8809e:
  * Code-identical to 0.9.1+48+suse.9c6c435 (merge in git repo
    to preserve history; fix revision in _service file).</changelog>
  <changelog author="mwilck@suse.com" date="1666612800">- Update to version 0.9.2+57+suse.cf3c1e9:
  * Fix multipathd authorization bypass and symlink attack
    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
  * add multipath-dracut.conf: dracut config file to install
    tmpfiles.d/multipath.conf in initramfs
  * Use "queue_mode bio" for NVMeoF/TCP devices
  * Upstream bug fixes and hwtable updates
- Drop recompress.service, it just slows down build</changelog>
  <changelog author="mwilck@suse.com" date="1666785600">- Update to version 0.9.2+59+suse.ac8942d:
  * Fix segfault in "multipath -t" command (boo#1204731)</changelog>
  <changelog author="mwilck@suse.com" date="1674043200">- Fix "rpm --verify" (bsc#1207232)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 0.9.4+68+suse.98559ea:
  * libmultipath: bump ABI version to 18.0.0
  * libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
    (gh#opensvc/multipath-tools#56)
  * libmpathpersist: use conf-&gt;timeout for updating persistent reservations
    (gh#opensvc/multipath-tools#45)
  * libmultipath: is_path_valid(): check if device is in use
    (bsc#1203141) (added libmount dependency)
  * libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
  * multipathd: handle no active paths in update_map_pr (bsc#1207546)
  * multipathd: make pr registration consistent (bsc#1207546)
  * libmultipath: don't leak memory on invalid strings  (bsc#1207546)
  * multipath.conf(5): improve documentation of dev_loss_tmo (bsc#1207546)
  * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
  * libmultipath: fix 'show paths format' failure
  * minor bugfixes
  * hwtable fixes
  * Build system rework
  * spec file: adapt make command line to changes in build system
  * spec file: use make -Orecurse (better readable output)
  * spec file: use verbose build</changelog>
  <changelog author="mwilck@suse.com" date="1679486400">- Update to version 0.9.4+71+suse.c648a77:
  * libmultipath: avoid grouping paths wrongly with "find_multipaths smart"
    (bsc#1209623)
  * fix multipath-tools build with liburcu 0.14.0</changelog>
  <changelog author="mwilck@suse.com" date="1688472000">- Update to version 0.9.4+73+suse.a5414a6:
  * libmultipath: ignore nvme devices if nvme native multipath is enabled
    (bsc#1212854)
  * libmultipath: fix dev_loss_tmo even if not set in configuration
    (bsc#1212440)
    Note: this changes user-visible behavior. multipathd will not
    grab any nvme devices for dm-multipath if nvme native multipathing
    is on (which is the default on SLE and openSUSE).</changelog>
  <changelog author="mwilck@suse.com" date="1704456000">- Update to version 0.9.4+77+suse.1f7a63b:
  * fix ANA prioritizer enablement logic (bsc#1218326)</changelog>
</package>
<package pkgid="54b5bb1c3891985a83c1bba0583ee0190a652bd78edfcf5f426f915245ddffb9" name="kpartx" arch="x86_64">
  <version epoch="0" ver="0.9.4+77+suse.1f7a63b" rel="150500.3.6.1"/>
  <changelog author="mwilck@suse.com" date="1644926400">- Update to version 0.8.8+60+suse.4c5922cb:
  * multipathd: add suppport for FC Fabric Performance Impact
    Notifications (FPIN) (bsc#1195506)</changelog>
  <changelog author="mwilck@suse.com" date="1645012800">- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus</changelog>
  <changelog author="mwilck@suse.com" date="1648468800">- If multipath-tools is newly installed, load dm-multipath
  (bsc#1196898)</changelog>
  <changelog author="mwilck@suse.com" date="1649937600">- Update to version 0.8.9+42+suse.45974f11:
  * Logging improvements
  * Fix busy loop with delayed_reconfigure (bsc#1199342)
  * multipathd: use remove_map_callback for delayed reconfigure
  * multipathd: Don't keep starting TUR threads, if they always hang.
    (bsc#1199345)
  * Fix handling of path addition in read-only arrays on NVMe
  * Updates of built-in hardware database
- Update to upstream 0.8.9
  * libmultipath: only warn once about unsupported dev_loss_tmo
  * Otherwise code-identical to 0.8.8+64</changelog>
  <changelog author="mwilck@suse.com" date="1652097600">- Update to version 0.8.9+85+suse.a9da21c:
  * This is a pre-release of multipath-tools 0.9.0
  * multipath.conf: add "protocol" subsection in "overrides" section
    This allows to set "dev_loss_tmo", "fast_io_fail_tmo", and
    "eh_deadline" on a per-protocol basis rather than per storage
  * multipath.conf: drop support for deprecated options:
    getuid_callout, pg_timeout, config_dir, multipath_dir
  * multipathd: don't switch to DAEMON_IDLE during startup
  (bsc#1199346, bsc#1197570)
  * multipathd: avoid delays during uevent processing (bsc#1199347)
  * Fixes for minor issues reported by coverity
  * Fix for memory leak with uid_attrs
  * Fix possibility to redefine -D_FORTIFY_SOURCE macro.
  * Updates for built in hardware db</changelog>
  <changelog author="mwilck@suse.com" date="1652184000">- Update to version 0.8.9+87+suse.a1eb122:
  * add ability to autodetect support for -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1652270400">- Update to version 0.8.9+90+suse.71a70fb:
  * support overriding -D_FORTIFY_SOURCE in OPTFLAGS
  * add -U_FORTIFY_SOURCE to optflags to avoid compilation errors
    on old distros</changelog>
  <changelog author="mwilck@suse.com" date="1657713600">- Update to version 0.9.0+33+suse.fdc6686
  * multipath.conf: add support for "protocol" subsection in
    "overrides" section to set certain config options by protocol.
  * Removed the previously deprecated options getuid_callout,
    config_dir, multipath_dir, pg_timeout
  * hwable fixes and additions
  * multipath.conf(5): add disclaimer about vendor support
  * libmultipath, kpartx: fix callers of dm_get_next_target()
  * Change built-in defaults for NVMe: group by prio, and immediate
    failback
  * Allow compilation with -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1657713601">- Update to version 0.9.0+39+suse.51a2ab1:
  Upstream bug fixes:
  * libmultipath: fix find_multipaths_timeout for unknown hardware
  (boo#1201483)
  * multipath-tools: fix "multipath -ll" for Native NVME Multipath devices
  (boo#1201483)</changelog>
  <changelog author="mwilck@suse.com" date="1661342400">- Update to version 0.9.0+55+suse.33d8854:
  * Avoid linking to libreadline to avoid licensing issue
    (bsc#1202616)</changelog>
  <changelog author="mwilck@suse.com" date="1662206400">- Update to version 0.9.0+134+suse.dbf2e2d:
  * Add multipathc command under GPL3.0, and split off libmpathutil
    (bsc#1202616)
  * Fix command completion in interactive mode (bsc#1201483)
  * multipathd: fix use-after-free in handle_path_wwid_change()
    (bsc#1201483)
  * Improve startup time for very large multipath.conf (bsc#1200523)
  * Avoid checker blocking event handling for huge number of devices
    (boo#1203085)
  * Cleanup sysfs accessors in libmultipath
  * Minor upstream bug fixes
  * Spelling fixes
  * Documentation: add ALUA info to README.md, delete README.alua</changelog>
  <changelog author="mwilck@suse.com" date="1662552000">- Update to version 0.9.1+48+suse.9c6c435:
  * Upstream version update
  * kpartx_id: remove bashism
  * Doc: add multipathc.8 manual page</changelog>
  <changelog author="mwilck@suse.com" date="1662724800">- Update to version 0.9.1+52+suse.be8809e:
  * Code-identical to 0.9.1+48+suse.9c6c435 (merge in git repo
    to preserve history; fix revision in _service file).</changelog>
  <changelog author="mwilck@suse.com" date="1666612800">- Update to version 0.9.2+57+suse.cf3c1e9:
  * Fix multipathd authorization bypass and symlink attack
    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
  * add multipath-dracut.conf: dracut config file to install
    tmpfiles.d/multipath.conf in initramfs
  * Use "queue_mode bio" for NVMeoF/TCP devices
  * Upstream bug fixes and hwtable updates
- Drop recompress.service, it just slows down build</changelog>
  <changelog author="mwilck@suse.com" date="1666785600">- Update to version 0.9.2+59+suse.ac8942d:
  * Fix segfault in "multipath -t" command (boo#1204731)</changelog>
  <changelog author="mwilck@suse.com" date="1674043200">- Fix "rpm --verify" (bsc#1207232)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 0.9.4+68+suse.98559ea:
  * libmultipath: bump ABI version to 18.0.0
  * libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
    (gh#opensvc/multipath-tools#56)
  * libmpathpersist: use conf-&gt;timeout for updating persistent reservations
    (gh#opensvc/multipath-tools#45)
  * libmultipath: is_path_valid(): check if device is in use
    (bsc#1203141) (added libmount dependency)
  * libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
  * multipathd: handle no active paths in update_map_pr (bsc#1207546)
  * multipathd: make pr registration consistent (bsc#1207546)
  * libmultipath: don't leak memory on invalid strings  (bsc#1207546)
  * multipath.conf(5): improve documentation of dev_loss_tmo (bsc#1207546)
  * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
  * libmultipath: fix 'show paths format' failure
  * minor bugfixes
  * hwtable fixes
  * Build system rework
  * spec file: adapt make command line to changes in build system
  * spec file: use make -Orecurse (better readable output)
  * spec file: use verbose build</changelog>
  <changelog author="mwilck@suse.com" date="1679486400">- Update to version 0.9.4+71+suse.c648a77:
  * libmultipath: avoid grouping paths wrongly with "find_multipaths smart"
    (bsc#1209623)
  * fix multipath-tools build with liburcu 0.14.0</changelog>
  <changelog author="mwilck@suse.com" date="1688472000">- Update to version 0.9.4+73+suse.a5414a6:
  * libmultipath: ignore nvme devices if nvme native multipath is enabled
    (bsc#1212854)
  * libmultipath: fix dev_loss_tmo even if not set in configuration
    (bsc#1212440)
    Note: this changes user-visible behavior. multipathd will not
    grab any nvme devices for dm-multipath if nvme native multipathing
    is on (which is the default on SLE and openSUSE).</changelog>
  <changelog author="mwilck@suse.com" date="1704456000">- Update to version 0.9.4+77+suse.1f7a63b:
  * fix ANA prioritizer enablement logic (bsc#1218326)</changelog>
</package>
<package pkgid="30c19fa18d32d4ed25197e0a0ebb5f3f99fbb3d9b3beb85dcd26fa3729b90720" name="krb5" arch="aarch64">
  <version epoch="0" ver="1.20.1" rel="150500.3.6.1"/>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="jmcdonough@suse.com" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="scabrero@suse.de" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="scabrero@suse.de" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="scabrero@suse.de" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="scabrero@suse.de" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="scabrero@suse.de" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619092800">- Use /run instead of /var/run for daemon PID files; (bsc#1185163);</changelog>
  <changelog author="scabrero@suse.de" date="1627300800">- Fix KDC null deref on bad encrypted challenge; (CVE-2021-36222);
  (bsc#1188571);
- Added patches:
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch</changelog>
  <changelog author="scabrero@suse.de" date="1630324800">- Fix KDC null pointer dereference via a FAST inner body that
  lacks a server field; (CVE-2021-37750); (bsc#1189929);
- Added patches:
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="scabrero@suse.de" date="1631880000">- Update to 1.19.2
  * Fix a denial of service attack against the KDC encrypted challenge
    code; (CVE-2021-36222);
  * Fix a memory leak when gss_inquire_cred() is called without a
    credential handle.
- Changes from 1.19.1
  * Fix a linking issue with Samba.
  * Better support multiple pkinit_identities values by checking whether
    certificates can be loaded for each value.
- Changes from 1.19
  Administrator experience
  * When a client keytab is present, the GSSAPI krb5 mech will refresh
    credentials even if the current credentials were acquired manually.
  * It is now harder to accidentally delete the K/M entry from a KDB.
  Developer experience
  * gss_acquire_cred_from() now supports the "password" and "verify"
    options, allowing credentials to be acquired via password and
    verified using a keytab key.
  * When an application accepts a GSS security context, the new
    GSS_C_CHANNEL_BOUND_FLAG will be set if the initiator and acceptor
    both provided matching channel bindings.
  * Added the GSS_KRB5_NT_X509_CERT name type, allowing S4U2Self requests
    to identify the desired client principal by certificate.
  * PKINIT certauth modules can now cause the hw-authent flag to be set
    in issued tickets.
  * The krb5_init_creds_step() API will now issue the same password
    expiration warnings as krb5_get_init_creds_password().
  Protocol evolution
  * Added client and KDC support for Microsoft's Resource-Based Constrained
    Delegation, which allows cross-realm S4U2Proxy requests. A third-party
    database module is required for KDC support.
  * kadmin/admin is now the preferred server principal name for kadmin
    connections, and the host-based form is no longer created by default.
    The client will still try the host-based form as a fallback.
  * Added client and server support for Microsoft's KERB_AP_OPTIONS_CBT
    extension, which causes channel bindings to be required for the
    initiator if the acceptor provided them. The client will send this
    option if the client_aware_gss_bindings profile option is set.
  User experience
  * kinit will now issue a warning if the des3-cbc-sha1 encryption type is
    used in the reply. This encryption type will be deprecated and removed
    in future releases.
  * Added kvno flags --out-cache, --no-store, and --cached-only
    (inspired by Heimdal's kgetcred).
- Changes from 1.18.3
  * Fix a denial of service vulnerability when decoding Kerberos
    protocol messages; (CVE-2020-28196); (bsc#1178512);
  * Fix a locking issue with the LMDB KDB module which could cause
    KDC and kadmind processes to lose access to the database.
  * Fix an assertion failure when libgssapi_krb5 is repeatedly loaded
    and unloaded while libkrb5support remains loaded.
- Changes from 1.18.2
  * Fix a SPNEGO regression where an acceptor using the default credential
    would improperly filter mechanisms, causing a negotiation failure.
  * Fix a bug where the KDC would fail to issue tickets if the local krbtgt
    principal's first key has a single-DES enctype.
  * Add stub functions to allow old versions of OpenSSL libcrypto to link
    against libkrb5.
  * Fix a NegoEx bug where the client name and delegated credential might
    not be reported.
- Changes from 1.18.1
  * Fix a crash when qualifying short hostnames when the system has
    no primary DNS domain.
  * Fix a regression when an application imports "service@" as a GSS
    host-based name for its acceptor credential handle.
  * Fix KDC enforcement of auth indicators when they are modified by
    the KDB module.
  * Fix removal of require_auth string attributes when the LDAP KDB
    module is used.
  * Fix a compile error when building with musl libc on Linux.
  * Fix a compile error when building with gcc 4.x.
  * Change the KDC constrained delegation precedence order for consistency
    with Windows KDCs.
- Changes from 1.18
  Administrator experience:
  * Remove support for single-DES encryption types.
  * Change the replay cache format to be more efficient and robust.
    Replay cache filenames using the new format end with ".rcache2"
    by default.
  * setuid programs will automatically ignore environment variables
    that normally affect krb5 API functions, even if the caller does
    not use krb5_init_secure_context().
  * Add an "enforce_ok_as_delegate" krb5.conf relation to disable
    credential forwarding during GSSAPI authentication unless the KDC
    sets the ok-as-delegate bit in the service ticket.
  * Use the permitted_enctypes krb5.conf setting as the default value
    for default_tkt_enctypes and default_tgs_enctypes.
  Developer experience:
  * Implement krb5_cc_remove_cred() for all credential cache types.
  * Add the krb5_pac_get_client_info() API to get the client account
    name from a PAC.
  Protocol evolution:
  * Add KDC support for S4U2Self requests where the user is identified
    by X.509 certificate. (Requires support for certificate lookup from
    a third-party KDB module.)
  * Remove support for an old ("draft 9") variant of PKINIT.
  * Add support for Microsoft NegoEx. (Requires one or more third-party
    GSS modules implementing NegoEx mechanisms.)
  User experience:
  * Add support for "dns_canonicalize_hostname=fallback", causing
    host-based principal names to be tried first without DNS
    canonicalization, and again with DNS canonicalization if the
    un-canonicalized server is not found.
  * Expand single-component hostnames in host-based principal names
    when DNS canonicalization is not used, adding the system's first DNS
    search path as a suffix. Add a "qualify_shortname" krb5.conf relation
    to override this suffix or disable expansion.
  * Honor the transited-policy-checked ticket flag on application servers,
    eliminating the requirement to configure capaths on servers in some
    scenarios.
  Code quality:
  * The libkrb5 serialization code (used to export and import krb5 GSS
    security contexts) has been simplified and made type-safe.
  * The libkrb5 code for creating KRB-PRIV, KRB-SAFE, and KRB-CRED
    messages has been revised to conform to current coding practices.
  * The test suite has been modified to work with macOS System Integrity
    Protection enabled.
  * The test suite incorporates soft-pkcs11 so that PKINIT PKCS11 support
    can always be tested.
- Changes from 1.17.1
  * Fix a bug preventing "addprinc -randkey -kvno" from working in kadmin.
  * Fix a bug preventing time skew correction from working when a KCM
    credential cache is used.
- Changes from 1.17:
  Administrator experience:
  * A new Kerberos database module using the Lightning Memory-Mapped
    Database library (LMDB) has been added.  The LMDB KDB module should
    be more performant and more robust than the DB2 module, and may
    become the default module for new databases in a future release.
  * "kdb5_util dump" will no longer dump policy entries when specific
    principal names are requested.
  Developer experience:
  * The new krb5_get_etype_info() API can be used to retrieve enctype,
    salt, and string-to-key parameters from the KDC for a client
    principal.
  * The new GSS_KRB5_NT_ENTERPRISE_NAME name type allows enterprise
    principal names to be used with GSS-API functions.
  * KDC and kadmind modules which call com_err() will now write to the
    log file in a format more consistent with other log messages.
  * Programs which use large numbers of memory credential caches should
    perform better.
  Protocol evolution:
  * The SPAKE pre-authentication mechanism is now supported.  This
    mechanism protects against password dictionary attacks without
    requiring any additional infrastructure such as certificates.  SPAKE
    is enabled by default on clients, but must be manually enabled on
    the KDC for this release.
  * PKINIT freshness tokens are now supported.  Freshness tokens can
    protect against scenarios where an attacker uses temporary access to
    a smart card to generate authentication requests for the future.
  * Password change operations now prefer TCP over UDP, to avoid
    spurious error messages about replays when a response packet is
    dropped.
  * The KDC now supports cross-realm S4U2Self requests when used with a
    third-party KDB module such as Samba's.  The client code for
    cross-realm S4U2Self requests is also now more robust
    (CVE-2018-20217).
  User experience:
  * The new ktutil addent -f flag can be used to fetch salt information
    from the KDC for password-based keys.
  * The new kdestroy -p option can be used to destroy a credential cache
    within a collection by client principal name.
  * The Kerberos man page has been restored, and documents the
    environment variables that affect programs using the Kerberos
    library.
  Code quality:
  * Python test scripts now use Python 3.
  * Python test scripts now display markers in verbose output, making it
    easier to find where a failure occurred within the scripts.
  * The Windows build system has been simplified and updated to work
    with more recent versions of Visual Studio.  A large volume of
    unused Windows-specific code has been removed.  Visual Studio 2013
    or later is now required.
- Replace old $RPM_* shell vars
- Removal of SuSEfirewall2 service since SuSEfirewall2 has been replaced
  by firewalld
- Remove cruft to support distributions older than SLE 12
- Use macros where applicable
- Switch to pkgconfig style dependencies
- Use %_tmpfilesdir instead of the wrong %_libexecdir/tmpfiles.d
  notation: libexecdir is likely changing away from /usr/lib to
  /usr/libexec
- Build with full Cyrus SASL support. Negotiating SASL credentials with
  an EXTERNAL bind mechanism requires interaction. Kerberos provides its
  own interaction function that skips all interaction, thus preventing the
  mechanism from working.
- Removed patches:
  * 0007-krb5-1.12-ksu-path.patch
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch
- Renamed patches:
  * 0001-krb5-1.12-pam.patch =&gt; 0001-ksu-pam-integration.patch
  * 0003-krb5-1.12-buildconf.patch =&gt; 0003-Adjust-build-configuration.patch
  * 0008-krb5-1.12-selinux-label.patch =&gt; 0007-SELinux-integration.patch
  * 0009-krb5-1.9-debuginfo.patch =&gt; 0008-krb5-1.9-debuginfo.patch
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch =&gt;
    0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="nopower@suse.com" date="1667822400">- Fix integer overflows in PAC parsing; (CVE-2022-42898);
  (bso#15203), (bsc#1205126).
- Added patches:
  * 0010-Fix-integer-overflows-in-PAC-parsing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1670932800">- Update to 1.20.1; (bsc#1205126); (CVE-2022-42898);
  * Fix integer overflows in PAC parsing [CVE-2022-42898].
  * Fix null deref in KDC when decoding invalid NDR.
  * Fix memory leak in OTP kdcpreauth module.
  * Fix PKCS11 module path search.
- update to 1.20.0:
  * Added a "disable_pac" realm relation to suppress adding PAC authdata
    to tickets, for realms which do not need to support S4U requests.
  * Most credential cache types will use atomic replacement when a cache
    is reinitialized using kinit or refreshed from the client keytab.
  * kprop can now propagate databases with a dump size larger than 4GB,
    if both the client and server are upgraded.
  * kprop can now work over NATs that change the destination IP address,
    if the client is upgraded.
  * Updated the KDB interface.  The sign_authdata() method is replaced
    with the issue_pac() method, allowing KDB modules to add logon info
    and other buffers to the PAC issued by the KDC.
  * Host-based initiator names are better supported in the GSS krb5
    mechanism.
  * Replaced AD-SIGNEDPATH authdata with minimal PACs.
  * To avoid spurious replay errors, password change requests will not
    be attempted over UDP until the attempt over TCP fails.
  * PKINIT will sign its CMS messages with SHA-256 instead of SHA-1.
  * Updated all code using OpenSSL to be compatible with OpenSSL 3.
  * Reorganized the libk5crypto build system to allow the OpenSSL
    back-end to pull in material from the builtin back-end depending on
    the OpenSSL version.
  * Simplified the PRNG logic to always use the platform PRNG.
  * Converted the remaining Tcl tests to Python.
- update to 1.19.3 (bsc#1189929, CVE-2021-37750):
  * Fix a denial of service attack against the KDC [CVE-2021-37750].
  * Fix KDC null deref on TGS inner body null server
  * Fix conformance issue in GSSAPI tests
- Resolve "Credential cache directory /run/user/0/krb5cc does not
  exist while opening default credentials cache" by using a kernel
  keyring instead of a dir cache; (bsc#1109830);
- Added hardening to systemd services; (bsc#1181400);
- Drop 0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch,
  fixed in release 1.20.0
- Drop 0010-Fix-integer-overflows-in-PAC-parsing.patch,
  fixed in release 1.20.1</changelog>
  <changelog author="scabrero@suse.de" date="1691496000">- Ensure array count consistency in kadm5 RPC; (bsc#1214054);
  (CVE-2023-36054);
- Added patches:
  * 0009-Ensure-array-count-consistency-in-kadm5-RPC.patch</changelog>
  <changelog author="scabrero@suse.de" date="1711108800">- Fix memory leaks, add patch 0010-Fix-three-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771
  * CVE-2024-26462, bsc#1220772</changelog>
</package>
<package pkgid="e9bad86761245cbd17b2684d9269456a0c3f8e0319edb125353623d6752c9b7b" name="krb5" arch="s390x">
  <version epoch="0" ver="1.20.1" rel="150500.3.6.1"/>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="jmcdonough@suse.com" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="scabrero@suse.de" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="scabrero@suse.de" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="scabrero@suse.de" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="scabrero@suse.de" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="scabrero@suse.de" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619092800">- Use /run instead of /var/run for daemon PID files; (bsc#1185163);</changelog>
  <changelog author="scabrero@suse.de" date="1627300800">- Fix KDC null deref on bad encrypted challenge; (CVE-2021-36222);
  (bsc#1188571);
- Added patches:
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch</changelog>
  <changelog author="scabrero@suse.de" date="1630324800">- Fix KDC null pointer dereference via a FAST inner body that
  lacks a server field; (CVE-2021-37750); (bsc#1189929);
- Added patches:
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="scabrero@suse.de" date="1631880000">- Update to 1.19.2
  * Fix a denial of service attack against the KDC encrypted challenge
    code; (CVE-2021-36222);
  * Fix a memory leak when gss_inquire_cred() is called without a
    credential handle.
- Changes from 1.19.1
  * Fix a linking issue with Samba.
  * Better support multiple pkinit_identities values by checking whether
    certificates can be loaded for each value.
- Changes from 1.19
  Administrator experience
  * When a client keytab is present, the GSSAPI krb5 mech will refresh
    credentials even if the current credentials were acquired manually.
  * It is now harder to accidentally delete the K/M entry from a KDB.
  Developer experience
  * gss_acquire_cred_from() now supports the "password" and "verify"
    options, allowing credentials to be acquired via password and
    verified using a keytab key.
  * When an application accepts a GSS security context, the new
    GSS_C_CHANNEL_BOUND_FLAG will be set if the initiator and acceptor
    both provided matching channel bindings.
  * Added the GSS_KRB5_NT_X509_CERT name type, allowing S4U2Self requests
    to identify the desired client principal by certificate.
  * PKINIT certauth modules can now cause the hw-authent flag to be set
    in issued tickets.
  * The krb5_init_creds_step() API will now issue the same password
    expiration warnings as krb5_get_init_creds_password().
  Protocol evolution
  * Added client and KDC support for Microsoft's Resource-Based Constrained
    Delegation, which allows cross-realm S4U2Proxy requests. A third-party
    database module is required for KDC support.
  * kadmin/admin is now the preferred server principal name for kadmin
    connections, and the host-based form is no longer created by default.
    The client will still try the host-based form as a fallback.
  * Added client and server support for Microsoft's KERB_AP_OPTIONS_CBT
    extension, which causes channel bindings to be required for the
    initiator if the acceptor provided them. The client will send this
    option if the client_aware_gss_bindings profile option is set.
  User experience
  * kinit will now issue a warning if the des3-cbc-sha1 encryption type is
    used in the reply. This encryption type will be deprecated and removed
    in future releases.
  * Added kvno flags --out-cache, --no-store, and --cached-only
    (inspired by Heimdal's kgetcred).
- Changes from 1.18.3
  * Fix a denial of service vulnerability when decoding Kerberos
    protocol messages; (CVE-2020-28196); (bsc#1178512);
  * Fix a locking issue with the LMDB KDB module which could cause
    KDC and kadmind processes to lose access to the database.
  * Fix an assertion failure when libgssapi_krb5 is repeatedly loaded
    and unloaded while libkrb5support remains loaded.
- Changes from 1.18.2
  * Fix a SPNEGO regression where an acceptor using the default credential
    would improperly filter mechanisms, causing a negotiation failure.
  * Fix a bug where the KDC would fail to issue tickets if the local krbtgt
    principal's first key has a single-DES enctype.
  * Add stub functions to allow old versions of OpenSSL libcrypto to link
    against libkrb5.
  * Fix a NegoEx bug where the client name and delegated credential might
    not be reported.
- Changes from 1.18.1
  * Fix a crash when qualifying short hostnames when the system has
    no primary DNS domain.
  * Fix a regression when an application imports "service@" as a GSS
    host-based name for its acceptor credential handle.
  * Fix KDC enforcement of auth indicators when they are modified by
    the KDB module.
  * Fix removal of require_auth string attributes when the LDAP KDB
    module is used.
  * Fix a compile error when building with musl libc on Linux.
  * Fix a compile error when building with gcc 4.x.
  * Change the KDC constrained delegation precedence order for consistency
    with Windows KDCs.
- Changes from 1.18
  Administrator experience:
  * Remove support for single-DES encryption types.
  * Change the replay cache format to be more efficient and robust.
    Replay cache filenames using the new format end with ".rcache2"
    by default.
  * setuid programs will automatically ignore environment variables
    that normally affect krb5 API functions, even if the caller does
    not use krb5_init_secure_context().
  * Add an "enforce_ok_as_delegate" krb5.conf relation to disable
    credential forwarding during GSSAPI authentication unless the KDC
    sets the ok-as-delegate bit in the service ticket.
  * Use the permitted_enctypes krb5.conf setting as the default value
    for default_tkt_enctypes and default_tgs_enctypes.
  Developer experience:
  * Implement krb5_cc_remove_cred() for all credential cache types.
  * Add the krb5_pac_get_client_info() API to get the client account
    name from a PAC.
  Protocol evolution:
  * Add KDC support for S4U2Self requests where the user is identified
    by X.509 certificate. (Requires support for certificate lookup from
    a third-party KDB module.)
  * Remove support for an old ("draft 9") variant of PKINIT.
  * Add support for Microsoft NegoEx. (Requires one or more third-party
    GSS modules implementing NegoEx mechanisms.)
  User experience:
  * Add support for "dns_canonicalize_hostname=fallback", causing
    host-based principal names to be tried first without DNS
    canonicalization, and again with DNS canonicalization if the
    un-canonicalized server is not found.
  * Expand single-component hostnames in host-based principal names
    when DNS canonicalization is not used, adding the system's first DNS
    search path as a suffix. Add a "qualify_shortname" krb5.conf relation
    to override this suffix or disable expansion.
  * Honor the transited-policy-checked ticket flag on application servers,
    eliminating the requirement to configure capaths on servers in some
    scenarios.
  Code quality:
  * The libkrb5 serialization code (used to export and import krb5 GSS
    security contexts) has been simplified and made type-safe.
  * The libkrb5 code for creating KRB-PRIV, KRB-SAFE, and KRB-CRED
    messages has been revised to conform to current coding practices.
  * The test suite has been modified to work with macOS System Integrity
    Protection enabled.
  * The test suite incorporates soft-pkcs11 so that PKINIT PKCS11 support
    can always be tested.
- Changes from 1.17.1
  * Fix a bug preventing "addprinc -randkey -kvno" from working in kadmin.
  * Fix a bug preventing time skew correction from working when a KCM
    credential cache is used.
- Changes from 1.17:
  Administrator experience:
  * A new Kerberos database module using the Lightning Memory-Mapped
    Database library (LMDB) has been added.  The LMDB KDB module should
    be more performant and more robust than the DB2 module, and may
    become the default module for new databases in a future release.
  * "kdb5_util dump" will no longer dump policy entries when specific
    principal names are requested.
  Developer experience:
  * The new krb5_get_etype_info() API can be used to retrieve enctype,
    salt, and string-to-key parameters from the KDC for a client
    principal.
  * The new GSS_KRB5_NT_ENTERPRISE_NAME name type allows enterprise
    principal names to be used with GSS-API functions.
  * KDC and kadmind modules which call com_err() will now write to the
    log file in a format more consistent with other log messages.
  * Programs which use large numbers of memory credential caches should
    perform better.
  Protocol evolution:
  * The SPAKE pre-authentication mechanism is now supported.  This
    mechanism protects against password dictionary attacks without
    requiring any additional infrastructure such as certificates.  SPAKE
    is enabled by default on clients, but must be manually enabled on
    the KDC for this release.
  * PKINIT freshness tokens are now supported.  Freshness tokens can
    protect against scenarios where an attacker uses temporary access to
    a smart card to generate authentication requests for the future.
  * Password change operations now prefer TCP over UDP, to avoid
    spurious error messages about replays when a response packet is
    dropped.
  * The KDC now supports cross-realm S4U2Self requests when used with a
    third-party KDB module such as Samba's.  The client code for
    cross-realm S4U2Self requests is also now more robust
    (CVE-2018-20217).
  User experience:
  * The new ktutil addent -f flag can be used to fetch salt information
    from the KDC for password-based keys.
  * The new kdestroy -p option can be used to destroy a credential cache
    within a collection by client principal name.
  * The Kerberos man page has been restored, and documents the
    environment variables that affect programs using the Kerberos
    library.
  Code quality:
  * Python test scripts now use Python 3.
  * Python test scripts now display markers in verbose output, making it
    easier to find where a failure occurred within the scripts.
  * The Windows build system has been simplified and updated to work
    with more recent versions of Visual Studio.  A large volume of
    unused Windows-specific code has been removed.  Visual Studio 2013
    or later is now required.
- Replace old $RPM_* shell vars
- Removal of SuSEfirewall2 service since SuSEfirewall2 has been replaced
  by firewalld
- Remove cruft to support distributions older than SLE 12
- Use macros where applicable
- Switch to pkgconfig style dependencies
- Use %_tmpfilesdir instead of the wrong %_libexecdir/tmpfiles.d
  notation: libexecdir is likely changing away from /usr/lib to
  /usr/libexec
- Build with full Cyrus SASL support. Negotiating SASL credentials with
  an EXTERNAL bind mechanism requires interaction. Kerberos provides its
  own interaction function that skips all interaction, thus preventing the
  mechanism from working.
- Removed patches:
  * 0007-krb5-1.12-ksu-path.patch
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch
- Renamed patches:
  * 0001-krb5-1.12-pam.patch =&gt; 0001-ksu-pam-integration.patch
  * 0003-krb5-1.12-buildconf.patch =&gt; 0003-Adjust-build-configuration.patch
  * 0008-krb5-1.12-selinux-label.patch =&gt; 0007-SELinux-integration.patch
  * 0009-krb5-1.9-debuginfo.patch =&gt; 0008-krb5-1.9-debuginfo.patch
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch =&gt;
    0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="nopower@suse.com" date="1667822400">- Fix integer overflows in PAC parsing; (CVE-2022-42898);
  (bso#15203), (bsc#1205126).
- Added patches:
  * 0010-Fix-integer-overflows-in-PAC-parsing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1670932800">- Update to 1.20.1; (bsc#1205126); (CVE-2022-42898);
  * Fix integer overflows in PAC parsing [CVE-2022-42898].
  * Fix null deref in KDC when decoding invalid NDR.
  * Fix memory leak in OTP kdcpreauth module.
  * Fix PKCS11 module path search.
- update to 1.20.0:
  * Added a "disable_pac" realm relation to suppress adding PAC authdata
    to tickets, for realms which do not need to support S4U requests.
  * Most credential cache types will use atomic replacement when a cache
    is reinitialized using kinit or refreshed from the client keytab.
  * kprop can now propagate databases with a dump size larger than 4GB,
    if both the client and server are upgraded.
  * kprop can now work over NATs that change the destination IP address,
    if the client is upgraded.
  * Updated the KDB interface.  The sign_authdata() method is replaced
    with the issue_pac() method, allowing KDB modules to add logon info
    and other buffers to the PAC issued by the KDC.
  * Host-based initiator names are better supported in the GSS krb5
    mechanism.
  * Replaced AD-SIGNEDPATH authdata with minimal PACs.
  * To avoid spurious replay errors, password change requests will not
    be attempted over UDP until the attempt over TCP fails.
  * PKINIT will sign its CMS messages with SHA-256 instead of SHA-1.
  * Updated all code using OpenSSL to be compatible with OpenSSL 3.
  * Reorganized the libk5crypto build system to allow the OpenSSL
    back-end to pull in material from the builtin back-end depending on
    the OpenSSL version.
  * Simplified the PRNG logic to always use the platform PRNG.
  * Converted the remaining Tcl tests to Python.
- update to 1.19.3 (bsc#1189929, CVE-2021-37750):
  * Fix a denial of service attack against the KDC [CVE-2021-37750].
  * Fix KDC null deref on TGS inner body null server
  * Fix conformance issue in GSSAPI tests
- Resolve "Credential cache directory /run/user/0/krb5cc does not
  exist while opening default credentials cache" by using a kernel
  keyring instead of a dir cache; (bsc#1109830);
- Added hardening to systemd services; (bsc#1181400);
- Drop 0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch,
  fixed in release 1.20.0
- Drop 0010-Fix-integer-overflows-in-PAC-parsing.patch,
  fixed in release 1.20.1</changelog>
  <changelog author="scabrero@suse.de" date="1691496000">- Ensure array count consistency in kadm5 RPC; (bsc#1214054);
  (CVE-2023-36054);
- Added patches:
  * 0009-Ensure-array-count-consistency-in-kadm5-RPC.patch</changelog>
  <changelog author="scabrero@suse.de" date="1711108800">- Fix memory leaks, add patch 0010-Fix-three-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771
  * CVE-2024-26462, bsc#1220772</changelog>
</package>
<package pkgid="ad3b39afee2c603808d1e099b7738dd545bca8e4a13abc0070d268acc13b6bb0" name="krb5" arch="src">
  <version epoch="0" ver="1.20.1" rel="150500.3.6.1"/>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="jmcdonough@suse.com" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="scabrero@suse.de" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="scabrero@suse.de" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="scabrero@suse.de" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="scabrero@suse.de" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="scabrero@suse.de" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619092800">- Use /run instead of /var/run for daemon PID files; (bsc#1185163);</changelog>
  <changelog author="scabrero@suse.de" date="1627300800">- Fix KDC null deref on bad encrypted challenge; (CVE-2021-36222);
  (bsc#1188571);
- Added patches:
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch</changelog>
  <changelog author="scabrero@suse.de" date="1630324800">- Fix KDC null pointer dereference via a FAST inner body that
  lacks a server field; (CVE-2021-37750); (bsc#1189929);
- Added patches:
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="scabrero@suse.de" date="1631880000">- Update to 1.19.2
  * Fix a denial of service attack against the KDC encrypted challenge
    code; (CVE-2021-36222);
  * Fix a memory leak when gss_inquire_cred() is called without a
    credential handle.
- Changes from 1.19.1
  * Fix a linking issue with Samba.
  * Better support multiple pkinit_identities values by checking whether
    certificates can be loaded for each value.
- Changes from 1.19
  Administrator experience
  * When a client keytab is present, the GSSAPI krb5 mech will refresh
    credentials even if the current credentials were acquired manually.
  * It is now harder to accidentally delete the K/M entry from a KDB.
  Developer experience
  * gss_acquire_cred_from() now supports the "password" and "verify"
    options, allowing credentials to be acquired via password and
    verified using a keytab key.
  * When an application accepts a GSS security context, the new
    GSS_C_CHANNEL_BOUND_FLAG will be set if the initiator and acceptor
    both provided matching channel bindings.
  * Added the GSS_KRB5_NT_X509_CERT name type, allowing S4U2Self requests
    to identify the desired client principal by certificate.
  * PKINIT certauth modules can now cause the hw-authent flag to be set
    in issued tickets.
  * The krb5_init_creds_step() API will now issue the same password
    expiration warnings as krb5_get_init_creds_password().
  Protocol evolution
  * Added client and KDC support for Microsoft's Resource-Based Constrained
    Delegation, which allows cross-realm S4U2Proxy requests. A third-party
    database module is required for KDC support.
  * kadmin/admin is now the preferred server principal name for kadmin
    connections, and the host-based form is no longer created by default.
    The client will still try the host-based form as a fallback.
  * Added client and server support for Microsoft's KERB_AP_OPTIONS_CBT
    extension, which causes channel bindings to be required for the
    initiator if the acceptor provided them. The client will send this
    option if the client_aware_gss_bindings profile option is set.
  User experience
  * kinit will now issue a warning if the des3-cbc-sha1 encryption type is
    used in the reply. This encryption type will be deprecated and removed
    in future releases.
  * Added kvno flags --out-cache, --no-store, and --cached-only
    (inspired by Heimdal's kgetcred).
- Changes from 1.18.3
  * Fix a denial of service vulnerability when decoding Kerberos
    protocol messages; (CVE-2020-28196); (bsc#1178512);
  * Fix a locking issue with the LMDB KDB module which could cause
    KDC and kadmind processes to lose access to the database.
  * Fix an assertion failure when libgssapi_krb5 is repeatedly loaded
    and unloaded while libkrb5support remains loaded.
- Changes from 1.18.2
  * Fix a SPNEGO regression where an acceptor using the default credential
    would improperly filter mechanisms, causing a negotiation failure.
  * Fix a bug where the KDC would fail to issue tickets if the local krbtgt
    principal's first key has a single-DES enctype.
  * Add stub functions to allow old versions of OpenSSL libcrypto to link
    against libkrb5.
  * Fix a NegoEx bug where the client name and delegated credential might
    not be reported.
- Changes from 1.18.1
  * Fix a crash when qualifying short hostnames when the system has
    no primary DNS domain.
  * Fix a regression when an application imports "service@" as a GSS
    host-based name for its acceptor credential handle.
  * Fix KDC enforcement of auth indicators when they are modified by
    the KDB module.
  * Fix removal of require_auth string attributes when the LDAP KDB
    module is used.
  * Fix a compile error when building with musl libc on Linux.
  * Fix a compile error when building with gcc 4.x.
  * Change the KDC constrained delegation precedence order for consistency
    with Windows KDCs.
- Changes from 1.18
  Administrator experience:
  * Remove support for single-DES encryption types.
  * Change the replay cache format to be more efficient and robust.
    Replay cache filenames using the new format end with ".rcache2"
    by default.
  * setuid programs will automatically ignore environment variables
    that normally affect krb5 API functions, even if the caller does
    not use krb5_init_secure_context().
  * Add an "enforce_ok_as_delegate" krb5.conf relation to disable
    credential forwarding during GSSAPI authentication unless the KDC
    sets the ok-as-delegate bit in the service ticket.
  * Use the permitted_enctypes krb5.conf setting as the default value
    for default_tkt_enctypes and default_tgs_enctypes.
  Developer experience:
  * Implement krb5_cc_remove_cred() for all credential cache types.
  * Add the krb5_pac_get_client_info() API to get the client account
    name from a PAC.
  Protocol evolution:
  * Add KDC support for S4U2Self requests where the user is identified
    by X.509 certificate. (Requires support for certificate lookup from
    a third-party KDB module.)
  * Remove support for an old ("draft 9") variant of PKINIT.
  * Add support for Microsoft NegoEx. (Requires one or more third-party
    GSS modules implementing NegoEx mechanisms.)
  User experience:
  * Add support for "dns_canonicalize_hostname=fallback", causing
    host-based principal names to be tried first without DNS
    canonicalization, and again with DNS canonicalization if the
    un-canonicalized server is not found.
  * Expand single-component hostnames in host-based principal names
    when DNS canonicalization is not used, adding the system's first DNS
    search path as a suffix. Add a "qualify_shortname" krb5.conf relation
    to override this suffix or disable expansion.
  * Honor the transited-policy-checked ticket flag on application servers,
    eliminating the requirement to configure capaths on servers in some
    scenarios.
  Code quality:
  * The libkrb5 serialization code (used to export and import krb5 GSS
    security contexts) has been simplified and made type-safe.
  * The libkrb5 code for creating KRB-PRIV, KRB-SAFE, and KRB-CRED
    messages has been revised to conform to current coding practices.
  * The test suite has been modified to work with macOS System Integrity
    Protection enabled.
  * The test suite incorporates soft-pkcs11 so that PKINIT PKCS11 support
    can always be tested.
- Changes from 1.17.1
  * Fix a bug preventing "addprinc -randkey -kvno" from working in kadmin.
  * Fix a bug preventing time skew correction from working when a KCM
    credential cache is used.
- Changes from 1.17:
  Administrator experience:
  * A new Kerberos database module using the Lightning Memory-Mapped
    Database library (LMDB) has been added.  The LMDB KDB module should
    be more performant and more robust than the DB2 module, and may
    become the default module for new databases in a future release.
  * "kdb5_util dump" will no longer dump policy entries when specific
    principal names are requested.
  Developer experience:
  * The new krb5_get_etype_info() API can be used to retrieve enctype,
    salt, and string-to-key parameters from the KDC for a client
    principal.
  * The new GSS_KRB5_NT_ENTERPRISE_NAME name type allows enterprise
    principal names to be used with GSS-API functions.
  * KDC and kadmind modules which call com_err() will now write to the
    log file in a format more consistent with other log messages.
  * Programs which use large numbers of memory credential caches should
    perform better.
  Protocol evolution:
  * The SPAKE pre-authentication mechanism is now supported.  This
    mechanism protects against password dictionary attacks without
    requiring any additional infrastructure such as certificates.  SPAKE
    is enabled by default on clients, but must be manually enabled on
    the KDC for this release.
  * PKINIT freshness tokens are now supported.  Freshness tokens can
    protect against scenarios where an attacker uses temporary access to
    a smart card to generate authentication requests for the future.
  * Password change operations now prefer TCP over UDP, to avoid
    spurious error messages about replays when a response packet is
    dropped.
  * The KDC now supports cross-realm S4U2Self requests when used with a
    third-party KDB module such as Samba's.  The client code for
    cross-realm S4U2Self requests is also now more robust
    (CVE-2018-20217).
  User experience:
  * The new ktutil addent -f flag can be used to fetch salt information
    from the KDC for password-based keys.
  * The new kdestroy -p option can be used to destroy a credential cache
    within a collection by client principal name.
  * The Kerberos man page has been restored, and documents the
    environment variables that affect programs using the Kerberos
    library.
  Code quality:
  * Python test scripts now use Python 3.
  * Python test scripts now display markers in verbose output, making it
    easier to find where a failure occurred within the scripts.
  * The Windows build system has been simplified and updated to work
    with more recent versions of Visual Studio.  A large volume of
    unused Windows-specific code has been removed.  Visual Studio 2013
    or later is now required.
- Replace old $RPM_* shell vars
- Removal of SuSEfirewall2 service since SuSEfirewall2 has been replaced
  by firewalld
- Remove cruft to support distributions older than SLE 12
- Use macros where applicable
- Switch to pkgconfig style dependencies
- Use %_tmpfilesdir instead of the wrong %_libexecdir/tmpfiles.d
  notation: libexecdir is likely changing away from /usr/lib to
  /usr/libexec
- Build with full Cyrus SASL support. Negotiating SASL credentials with
  an EXTERNAL bind mechanism requires interaction. Kerberos provides its
  own interaction function that skips all interaction, thus preventing the
  mechanism from working.
- Removed patches:
  * 0007-krb5-1.12-ksu-path.patch
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch
- Renamed patches:
  * 0001-krb5-1.12-pam.patch =&gt; 0001-ksu-pam-integration.patch
  * 0003-krb5-1.12-buildconf.patch =&gt; 0003-Adjust-build-configuration.patch
  * 0008-krb5-1.12-selinux-label.patch =&gt; 0007-SELinux-integration.patch
  * 0009-krb5-1.9-debuginfo.patch =&gt; 0008-krb5-1.9-debuginfo.patch
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch =&gt;
    0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="nopower@suse.com" date="1667822400">- Fix integer overflows in PAC parsing; (CVE-2022-42898);
  (bso#15203), (bsc#1205126).
- Added patches:
  * 0010-Fix-integer-overflows-in-PAC-parsing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1670932800">- Update to 1.20.1; (bsc#1205126); (CVE-2022-42898);
  * Fix integer overflows in PAC parsing [CVE-2022-42898].
  * Fix null deref in KDC when decoding invalid NDR.
  * Fix memory leak in OTP kdcpreauth module.
  * Fix PKCS11 module path search.
- update to 1.20.0:
  * Added a "disable_pac" realm relation to suppress adding PAC authdata
    to tickets, for realms which do not need to support S4U requests.
  * Most credential cache types will use atomic replacement when a cache
    is reinitialized using kinit or refreshed from the client keytab.
  * kprop can now propagate databases with a dump size larger than 4GB,
    if both the client and server are upgraded.
  * kprop can now work over NATs that change the destination IP address,
    if the client is upgraded.
  * Updated the KDB interface.  The sign_authdata() method is replaced
    with the issue_pac() method, allowing KDB modules to add logon info
    and other buffers to the PAC issued by the KDC.
  * Host-based initiator names are better supported in the GSS krb5
    mechanism.
  * Replaced AD-SIGNEDPATH authdata with minimal PACs.
  * To avoid spurious replay errors, password change requests will not
    be attempted over UDP until the attempt over TCP fails.
  * PKINIT will sign its CMS messages with SHA-256 instead of SHA-1.
  * Updated all code using OpenSSL to be compatible with OpenSSL 3.
  * Reorganized the libk5crypto build system to allow the OpenSSL
    back-end to pull in material from the builtin back-end depending on
    the OpenSSL version.
  * Simplified the PRNG logic to always use the platform PRNG.
  * Converted the remaining Tcl tests to Python.
- update to 1.19.3 (bsc#1189929, CVE-2021-37750):
  * Fix a denial of service attack against the KDC [CVE-2021-37750].
  * Fix KDC null deref on TGS inner body null server
  * Fix conformance issue in GSSAPI tests
- Resolve "Credential cache directory /run/user/0/krb5cc does not
  exist while opening default credentials cache" by using a kernel
  keyring instead of a dir cache; (bsc#1109830);
- Added hardening to systemd services; (bsc#1181400);
- Drop 0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch,
  fixed in release 1.20.0
- Drop 0010-Fix-integer-overflows-in-PAC-parsing.patch,
  fixed in release 1.20.1</changelog>
  <changelog author="scabrero@suse.de" date="1691496000">- Ensure array count consistency in kadm5 RPC; (bsc#1214054);
  (CVE-2023-36054);
- Added patches:
  * 0009-Ensure-array-count-consistency-in-kadm5-RPC.patch</changelog>
  <changelog author="scabrero@suse.de" date="1711108800">- Fix memory leaks, add patch 0010-Fix-three-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771
  * CVE-2024-26462, bsc#1220772</changelog>
</package>
<package pkgid="48dfbe744aed9eb9f4f6e821b96f01ad6c3e3afffed164103568e0408ecab9e5" name="krb5" arch="x86_64">
  <version epoch="0" ver="1.20.1" rel="150500.3.6.1"/>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="jmcdonough@suse.com" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="scabrero@suse.de" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="scabrero@suse.de" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="scabrero@suse.de" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="scabrero@suse.de" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="scabrero@suse.de" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619092800">- Use /run instead of /var/run for daemon PID files; (bsc#1185163);</changelog>
  <changelog author="scabrero@suse.de" date="1627300800">- Fix KDC null deref on bad encrypted challenge; (CVE-2021-36222);
  (bsc#1188571);
- Added patches:
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch</changelog>
  <changelog author="scabrero@suse.de" date="1630324800">- Fix KDC null pointer dereference via a FAST inner body that
  lacks a server field; (CVE-2021-37750); (bsc#1189929);
- Added patches:
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="scabrero@suse.de" date="1631880000">- Update to 1.19.2
  * Fix a denial of service attack against the KDC encrypted challenge
    code; (CVE-2021-36222);
  * Fix a memory leak when gss_inquire_cred() is called without a
    credential handle.
- Changes from 1.19.1
  * Fix a linking issue with Samba.
  * Better support multiple pkinit_identities values by checking whether
    certificates can be loaded for each value.
- Changes from 1.19
  Administrator experience
  * When a client keytab is present, the GSSAPI krb5 mech will refresh
    credentials even if the current credentials were acquired manually.
  * It is now harder to accidentally delete the K/M entry from a KDB.
  Developer experience
  * gss_acquire_cred_from() now supports the "password" and "verify"
    options, allowing credentials to be acquired via password and
    verified using a keytab key.
  * When an application accepts a GSS security context, the new
    GSS_C_CHANNEL_BOUND_FLAG will be set if the initiator and acceptor
    both provided matching channel bindings.
  * Added the GSS_KRB5_NT_X509_CERT name type, allowing S4U2Self requests
    to identify the desired client principal by certificate.
  * PKINIT certauth modules can now cause the hw-authent flag to be set
    in issued tickets.
  * The krb5_init_creds_step() API will now issue the same password
    expiration warnings as krb5_get_init_creds_password().
  Protocol evolution
  * Added client and KDC support for Microsoft's Resource-Based Constrained
    Delegation, which allows cross-realm S4U2Proxy requests. A third-party
    database module is required for KDC support.
  * kadmin/admin is now the preferred server principal name for kadmin
    connections, and the host-based form is no longer created by default.
    The client will still try the host-based form as a fallback.
  * Added client and server support for Microsoft's KERB_AP_OPTIONS_CBT
    extension, which causes channel bindings to be required for the
    initiator if the acceptor provided them. The client will send this
    option if the client_aware_gss_bindings profile option is set.
  User experience
  * kinit will now issue a warning if the des3-cbc-sha1 encryption type is
    used in the reply. This encryption type will be deprecated and removed
    in future releases.
  * Added kvno flags --out-cache, --no-store, and --cached-only
    (inspired by Heimdal's kgetcred).
- Changes from 1.18.3
  * Fix a denial of service vulnerability when decoding Kerberos
    protocol messages; (CVE-2020-28196); (bsc#1178512);
  * Fix a locking issue with the LMDB KDB module which could cause
    KDC and kadmind processes to lose access to the database.
  * Fix an assertion failure when libgssapi_krb5 is repeatedly loaded
    and unloaded while libkrb5support remains loaded.
- Changes from 1.18.2
  * Fix a SPNEGO regression where an acceptor using the default credential
    would improperly filter mechanisms, causing a negotiation failure.
  * Fix a bug where the KDC would fail to issue tickets if the local krbtgt
    principal's first key has a single-DES enctype.
  * Add stub functions to allow old versions of OpenSSL libcrypto to link
    against libkrb5.
  * Fix a NegoEx bug where the client name and delegated credential might
    not be reported.
- Changes from 1.18.1
  * Fix a crash when qualifying short hostnames when the system has
    no primary DNS domain.
  * Fix a regression when an application imports "service@" as a GSS
    host-based name for its acceptor credential handle.
  * Fix KDC enforcement of auth indicators when they are modified by
    the KDB module.
  * Fix removal of require_auth string attributes when the LDAP KDB
    module is used.
  * Fix a compile error when building with musl libc on Linux.
  * Fix a compile error when building with gcc 4.x.
  * Change the KDC constrained delegation precedence order for consistency
    with Windows KDCs.
- Changes from 1.18
  Administrator experience:
  * Remove support for single-DES encryption types.
  * Change the replay cache format to be more efficient and robust.
    Replay cache filenames using the new format end with ".rcache2"
    by default.
  * setuid programs will automatically ignore environment variables
    that normally affect krb5 API functions, even if the caller does
    not use krb5_init_secure_context().
  * Add an "enforce_ok_as_delegate" krb5.conf relation to disable
    credential forwarding during GSSAPI authentication unless the KDC
    sets the ok-as-delegate bit in the service ticket.
  * Use the permitted_enctypes krb5.conf setting as the default value
    for default_tkt_enctypes and default_tgs_enctypes.
  Developer experience:
  * Implement krb5_cc_remove_cred() for all credential cache types.
  * Add the krb5_pac_get_client_info() API to get the client account
    name from a PAC.
  Protocol evolution:
  * Add KDC support for S4U2Self requests where the user is identified
    by X.509 certificate. (Requires support for certificate lookup from
    a third-party KDB module.)
  * Remove support for an old ("draft 9") variant of PKINIT.
  * Add support for Microsoft NegoEx. (Requires one or more third-party
    GSS modules implementing NegoEx mechanisms.)
  User experience:
  * Add support for "dns_canonicalize_hostname=fallback", causing
    host-based principal names to be tried first without DNS
    canonicalization, and again with DNS canonicalization if the
    un-canonicalized server is not found.
  * Expand single-component hostnames in host-based principal names
    when DNS canonicalization is not used, adding the system's first DNS
    search path as a suffix. Add a "qualify_shortname" krb5.conf relation
    to override this suffix or disable expansion.
  * Honor the transited-policy-checked ticket flag on application servers,
    eliminating the requirement to configure capaths on servers in some
    scenarios.
  Code quality:
  * The libkrb5 serialization code (used to export and import krb5 GSS
    security contexts) has been simplified and made type-safe.
  * The libkrb5 code for creating KRB-PRIV, KRB-SAFE, and KRB-CRED
    messages has been revised to conform to current coding practices.
  * The test suite has been modified to work with macOS System Integrity
    Protection enabled.
  * The test suite incorporates soft-pkcs11 so that PKINIT PKCS11 support
    can always be tested.
- Changes from 1.17.1
  * Fix a bug preventing "addprinc -randkey -kvno" from working in kadmin.
  * Fix a bug preventing time skew correction from working when a KCM
    credential cache is used.
- Changes from 1.17:
  Administrator experience:
  * A new Kerberos database module using the Lightning Memory-Mapped
    Database library (LMDB) has been added.  The LMDB KDB module should
    be more performant and more robust than the DB2 module, and may
    become the default module for new databases in a future release.
  * "kdb5_util dump" will no longer dump policy entries when specific
    principal names are requested.
  Developer experience:
  * The new krb5_get_etype_info() API can be used to retrieve enctype,
    salt, and string-to-key parameters from the KDC for a client
    principal.
  * The new GSS_KRB5_NT_ENTERPRISE_NAME name type allows enterprise
    principal names to be used with GSS-API functions.
  * KDC and kadmind modules which call com_err() will now write to the
    log file in a format more consistent with other log messages.
  * Programs which use large numbers of memory credential caches should
    perform better.
  Protocol evolution:
  * The SPAKE pre-authentication mechanism is now supported.  This
    mechanism protects against password dictionary attacks without
    requiring any additional infrastructure such as certificates.  SPAKE
    is enabled by default on clients, but must be manually enabled on
    the KDC for this release.
  * PKINIT freshness tokens are now supported.  Freshness tokens can
    protect against scenarios where an attacker uses temporary access to
    a smart card to generate authentication requests for the future.
  * Password change operations now prefer TCP over UDP, to avoid
    spurious error messages about replays when a response packet is
    dropped.
  * The KDC now supports cross-realm S4U2Self requests when used with a
    third-party KDB module such as Samba's.  The client code for
    cross-realm S4U2Self requests is also now more robust
    (CVE-2018-20217).
  User experience:
  * The new ktutil addent -f flag can be used to fetch salt information
    from the KDC for password-based keys.
  * The new kdestroy -p option can be used to destroy a credential cache
    within a collection by client principal name.
  * The Kerberos man page has been restored, and documents the
    environment variables that affect programs using the Kerberos
    library.
  Code quality:
  * Python test scripts now use Python 3.
  * Python test scripts now display markers in verbose output, making it
    easier to find where a failure occurred within the scripts.
  * The Windows build system has been simplified and updated to work
    with more recent versions of Visual Studio.  A large volume of
    unused Windows-specific code has been removed.  Visual Studio 2013
    or later is now required.
- Replace old $RPM_* shell vars
- Removal of SuSEfirewall2 service since SuSEfirewall2 has been replaced
  by firewalld
- Remove cruft to support distributions older than SLE 12
- Use macros where applicable
- Switch to pkgconfig style dependencies
- Use %_tmpfilesdir instead of the wrong %_libexecdir/tmpfiles.d
  notation: libexecdir is likely changing away from /usr/lib to
  /usr/libexec
- Build with full Cyrus SASL support. Negotiating SASL credentials with
  an EXTERNAL bind mechanism requires interaction. Kerberos provides its
  own interaction function that skips all interaction, thus preventing the
  mechanism from working.
- Removed patches:
  * 0007-krb5-1.12-ksu-path.patch
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch
- Renamed patches:
  * 0001-krb5-1.12-pam.patch =&gt; 0001-ksu-pam-integration.patch
  * 0003-krb5-1.12-buildconf.patch =&gt; 0003-Adjust-build-configuration.patch
  * 0008-krb5-1.12-selinux-label.patch =&gt; 0007-SELinux-integration.patch
  * 0009-krb5-1.9-debuginfo.patch =&gt; 0008-krb5-1.9-debuginfo.patch
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch =&gt;
    0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="nopower@suse.com" date="1667822400">- Fix integer overflows in PAC parsing; (CVE-2022-42898);
  (bso#15203), (bsc#1205126).
- Added patches:
  * 0010-Fix-integer-overflows-in-PAC-parsing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1670932800">- Update to 1.20.1; (bsc#1205126); (CVE-2022-42898);
  * Fix integer overflows in PAC parsing [CVE-2022-42898].
  * Fix null deref in KDC when decoding invalid NDR.
  * Fix memory leak in OTP kdcpreauth module.
  * Fix PKCS11 module path search.
- update to 1.20.0:
  * Added a "disable_pac" realm relation to suppress adding PAC authdata
    to tickets, for realms which do not need to support S4U requests.
  * Most credential cache types will use atomic replacement when a cache
    is reinitialized using kinit or refreshed from the client keytab.
  * kprop can now propagate databases with a dump size larger than 4GB,
    if both the client and server are upgraded.
  * kprop can now work over NATs that change the destination IP address,
    if the client is upgraded.
  * Updated the KDB interface.  The sign_authdata() method is replaced
    with the issue_pac() method, allowing KDB modules to add logon info
    and other buffers to the PAC issued by the KDC.
  * Host-based initiator names are better supported in the GSS krb5
    mechanism.
  * Replaced AD-SIGNEDPATH authdata with minimal PACs.
  * To avoid spurious replay errors, password change requests will not
    be attempted over UDP until the attempt over TCP fails.
  * PKINIT will sign its CMS messages with SHA-256 instead of SHA-1.
  * Updated all code using OpenSSL to be compatible with OpenSSL 3.
  * Reorganized the libk5crypto build system to allow the OpenSSL
    back-end to pull in material from the builtin back-end depending on
    the OpenSSL version.
  * Simplified the PRNG logic to always use the platform PRNG.
  * Converted the remaining Tcl tests to Python.
- update to 1.19.3 (bsc#1189929, CVE-2021-37750):
  * Fix a denial of service attack against the KDC [CVE-2021-37750].
  * Fix KDC null deref on TGS inner body null server
  * Fix conformance issue in GSSAPI tests
- Resolve "Credential cache directory /run/user/0/krb5cc does not
  exist while opening default credentials cache" by using a kernel
  keyring instead of a dir cache; (bsc#1109830);
- Added hardening to systemd services; (bsc#1181400);
- Drop 0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch,
  fixed in release 1.20.0
- Drop 0010-Fix-integer-overflows-in-PAC-parsing.patch,
  fixed in release 1.20.1</changelog>
  <changelog author="scabrero@suse.de" date="1691496000">- Ensure array count consistency in kadm5 RPC; (bsc#1214054);
  (CVE-2023-36054);
- Added patches:
  * 0009-Ensure-array-count-consistency-in-kadm5-RPC.patch</changelog>
  <changelog author="scabrero@suse.de" date="1711108800">- Fix memory leaks, add patch 0010-Fix-three-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771
  * CVE-2024-26462, bsc#1220772</changelog>
</package>
<package pkgid="9e593a5cf36dd503785d183b04a2d7cf412568985698fc8f90629527da90eabd" name="krb5" arch="aarch64">
  <version epoch="0" ver="1.20.1" rel="150500.3.9.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="jmcdonough@suse.com" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="scabrero@suse.de" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="scabrero@suse.de" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="scabrero@suse.de" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="scabrero@suse.de" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="scabrero@suse.de" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619092800">- Use /run instead of /var/run for daemon PID files; (bsc#1185163);</changelog>
  <changelog author="scabrero@suse.de" date="1627300800">- Fix KDC null deref on bad encrypted challenge; (CVE-2021-36222);
  (bsc#1188571);
- Added patches:
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch</changelog>
  <changelog author="scabrero@suse.de" date="1630324800">- Fix KDC null pointer dereference via a FAST inner body that
  lacks a server field; (CVE-2021-37750); (bsc#1189929);
- Added patches:
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="scabrero@suse.de" date="1631880000">- Update to 1.19.2
  * Fix a denial of service attack against the KDC encrypted challenge
    code; (CVE-2021-36222);
  * Fix a memory leak when gss_inquire_cred() is called without a
    credential handle.
- Changes from 1.19.1
  * Fix a linking issue with Samba.
  * Better support multiple pkinit_identities values by checking whether
    certificates can be loaded for each value.
- Changes from 1.19
  Administrator experience
  * When a client keytab is present, the GSSAPI krb5 mech will refresh
    credentials even if the current credentials were acquired manually.
  * It is now harder to accidentally delete the K/M entry from a KDB.
  Developer experience
  * gss_acquire_cred_from() now supports the "password" and "verify"
    options, allowing credentials to be acquired via password and
    verified using a keytab key.
  * When an application accepts a GSS security context, the new
    GSS_C_CHANNEL_BOUND_FLAG will be set if the initiator and acceptor
    both provided matching channel bindings.
  * Added the GSS_KRB5_NT_X509_CERT name type, allowing S4U2Self requests
    to identify the desired client principal by certificate.
  * PKINIT certauth modules can now cause the hw-authent flag to be set
    in issued tickets.
  * The krb5_init_creds_step() API will now issue the same password
    expiration warnings as krb5_get_init_creds_password().
  Protocol evolution
  * Added client and KDC support for Microsoft's Resource-Based Constrained
    Delegation, which allows cross-realm S4U2Proxy requests. A third-party
    database module is required for KDC support.
  * kadmin/admin is now the preferred server principal name for kadmin
    connections, and the host-based form is no longer created by default.
    The client will still try the host-based form as a fallback.
  * Added client and server support for Microsoft's KERB_AP_OPTIONS_CBT
    extension, which causes channel bindings to be required for the
    initiator if the acceptor provided them. The client will send this
    option if the client_aware_gss_bindings profile option is set.
  User experience
  * kinit will now issue a warning if the des3-cbc-sha1 encryption type is
    used in the reply. This encryption type will be deprecated and removed
    in future releases.
  * Added kvno flags --out-cache, --no-store, and --cached-only
    (inspired by Heimdal's kgetcred).
- Changes from 1.18.3
  * Fix a denial of service vulnerability when decoding Kerberos
    protocol messages; (CVE-2020-28196); (bsc#1178512);
  * Fix a locking issue with the LMDB KDB module which could cause
    KDC and kadmind processes to lose access to the database.
  * Fix an assertion failure when libgssapi_krb5 is repeatedly loaded
    and unloaded while libkrb5support remains loaded.
- Changes from 1.18.2
  * Fix a SPNEGO regression where an acceptor using the default credential
    would improperly filter mechanisms, causing a negotiation failure.
  * Fix a bug where the KDC would fail to issue tickets if the local krbtgt
    principal's first key has a single-DES enctype.
  * Add stub functions to allow old versions of OpenSSL libcrypto to link
    against libkrb5.
  * Fix a NegoEx bug where the client name and delegated credential might
    not be reported.
- Changes from 1.18.1
  * Fix a crash when qualifying short hostnames when the system has
    no primary DNS domain.
  * Fix a regression when an application imports "service@" as a GSS
    host-based name for its acceptor credential handle.
  * Fix KDC enforcement of auth indicators when they are modified by
    the KDB module.
  * Fix removal of require_auth string attributes when the LDAP KDB
    module is used.
  * Fix a compile error when building with musl libc on Linux.
  * Fix a compile error when building with gcc 4.x.
  * Change the KDC constrained delegation precedence order for consistency
    with Windows KDCs.
- Changes from 1.18
  Administrator experience:
  * Remove support for single-DES encryption types.
  * Change the replay cache format to be more efficient and robust.
    Replay cache filenames using the new format end with ".rcache2"
    by default.
  * setuid programs will automatically ignore environment variables
    that normally affect krb5 API functions, even if the caller does
    not use krb5_init_secure_context().
  * Add an "enforce_ok_as_delegate" krb5.conf relation to disable
    credential forwarding during GSSAPI authentication unless the KDC
    sets the ok-as-delegate bit in the service ticket.
  * Use the permitted_enctypes krb5.conf setting as the default value
    for default_tkt_enctypes and default_tgs_enctypes.
  Developer experience:
  * Implement krb5_cc_remove_cred() for all credential cache types.
  * Add the krb5_pac_get_client_info() API to get the client account
    name from a PAC.
  Protocol evolution:
  * Add KDC support for S4U2Self requests where the user is identified
    by X.509 certificate. (Requires support for certificate lookup from
    a third-party KDB module.)
  * Remove support for an old ("draft 9") variant of PKINIT.
  * Add support for Microsoft NegoEx. (Requires one or more third-party
    GSS modules implementing NegoEx mechanisms.)
  User experience:
  * Add support for "dns_canonicalize_hostname=fallback", causing
    host-based principal names to be tried first without DNS
    canonicalization, and again with DNS canonicalization if the
    un-canonicalized server is not found.
  * Expand single-component hostnames in host-based principal names
    when DNS canonicalization is not used, adding the system's first DNS
    search path as a suffix. Add a "qualify_shortname" krb5.conf relation
    to override this suffix or disable expansion.
  * Honor the transited-policy-checked ticket flag on application servers,
    eliminating the requirement to configure capaths on servers in some
    scenarios.
  Code quality:
  * The libkrb5 serialization code (used to export and import krb5 GSS
    security contexts) has been simplified and made type-safe.
  * The libkrb5 code for creating KRB-PRIV, KRB-SAFE, and KRB-CRED
    messages has been revised to conform to current coding practices.
  * The test suite has been modified to work with macOS System Integrity
    Protection enabled.
  * The test suite incorporates soft-pkcs11 so that PKINIT PKCS11 support
    can always be tested.
- Changes from 1.17.1
  * Fix a bug preventing "addprinc -randkey -kvno" from working in kadmin.
  * Fix a bug preventing time skew correction from working when a KCM
    credential cache is used.
- Changes from 1.17:
  Administrator experience:
  * A new Kerberos database module using the Lightning Memory-Mapped
    Database library (LMDB) has been added.  The LMDB KDB module should
    be more performant and more robust than the DB2 module, and may
    become the default module for new databases in a future release.
  * "kdb5_util dump" will no longer dump policy entries when specific
    principal names are requested.
  Developer experience:
  * The new krb5_get_etype_info() API can be used to retrieve enctype,
    salt, and string-to-key parameters from the KDC for a client
    principal.
  * The new GSS_KRB5_NT_ENTERPRISE_NAME name type allows enterprise
    principal names to be used with GSS-API functions.
  * KDC and kadmind modules which call com_err() will now write to the
    log file in a format more consistent with other log messages.
  * Programs which use large numbers of memory credential caches should
    perform better.
  Protocol evolution:
  * The SPAKE pre-authentication mechanism is now supported.  This
    mechanism protects against password dictionary attacks without
    requiring any additional infrastructure such as certificates.  SPAKE
    is enabled by default on clients, but must be manually enabled on
    the KDC for this release.
  * PKINIT freshness tokens are now supported.  Freshness tokens can
    protect against scenarios where an attacker uses temporary access to
    a smart card to generate authentication requests for the future.
  * Password change operations now prefer TCP over UDP, to avoid
    spurious error messages about replays when a response packet is
    dropped.
  * The KDC now supports cross-realm S4U2Self requests when used with a
    third-party KDB module such as Samba's.  The client code for
    cross-realm S4U2Self requests is also now more robust
    (CVE-2018-20217).
  User experience:
  * The new ktutil addent -f flag can be used to fetch salt information
    from the KDC for password-based keys.
  * The new kdestroy -p option can be used to destroy a credential cache
    within a collection by client principal name.
  * The Kerberos man page has been restored, and documents the
    environment variables that affect programs using the Kerberos
    library.
  Code quality:
  * Python test scripts now use Python 3.
  * Python test scripts now display markers in verbose output, making it
    easier to find where a failure occurred within the scripts.
  * The Windows build system has been simplified and updated to work
    with more recent versions of Visual Studio.  A large volume of
    unused Windows-specific code has been removed.  Visual Studio 2013
    or later is now required.
- Replace old $RPM_* shell vars
- Removal of SuSEfirewall2 service since SuSEfirewall2 has been replaced
  by firewalld
- Remove cruft to support distributions older than SLE 12
- Use macros where applicable
- Switch to pkgconfig style dependencies
- Use %_tmpfilesdir instead of the wrong %_libexecdir/tmpfiles.d
  notation: libexecdir is likely changing away from /usr/lib to
  /usr/libexec
- Build with full Cyrus SASL support. Negotiating SASL credentials with
  an EXTERNAL bind mechanism requires interaction. Kerberos provides its
  own interaction function that skips all interaction, thus preventing the
  mechanism from working.
- Removed patches:
  * 0007-krb5-1.12-ksu-path.patch
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch
- Renamed patches:
  * 0001-krb5-1.12-pam.patch =&gt; 0001-ksu-pam-integration.patch
  * 0003-krb5-1.12-buildconf.patch =&gt; 0003-Adjust-build-configuration.patch
  * 0008-krb5-1.12-selinux-label.patch =&gt; 0007-SELinux-integration.patch
  * 0009-krb5-1.9-debuginfo.patch =&gt; 0008-krb5-1.9-debuginfo.patch
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch =&gt;
    0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="nopower@suse.com" date="1667822400">- Fix integer overflows in PAC parsing; (CVE-2022-42898);
  (bso#15203), (bsc#1205126).
- Added patches:
  * 0010-Fix-integer-overflows-in-PAC-parsing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1670932800">- Update to 1.20.1; (bsc#1205126); (CVE-2022-42898);
  * Fix integer overflows in PAC parsing [CVE-2022-42898].
  * Fix null deref in KDC when decoding invalid NDR.
  * Fix memory leak in OTP kdcpreauth module.
  * Fix PKCS11 module path search.
- update to 1.20.0:
  * Added a "disable_pac" realm relation to suppress adding PAC authdata
    to tickets, for realms which do not need to support S4U requests.
  * Most credential cache types will use atomic replacement when a cache
    is reinitialized using kinit or refreshed from the client keytab.
  * kprop can now propagate databases with a dump size larger than 4GB,
    if both the client and server are upgraded.
  * kprop can now work over NATs that change the destination IP address,
    if the client is upgraded.
  * Updated the KDB interface.  The sign_authdata() method is replaced
    with the issue_pac() method, allowing KDB modules to add logon info
    and other buffers to the PAC issued by the KDC.
  * Host-based initiator names are better supported in the GSS krb5
    mechanism.
  * Replaced AD-SIGNEDPATH authdata with minimal PACs.
  * To avoid spurious replay errors, password change requests will not
    be attempted over UDP until the attempt over TCP fails.
  * PKINIT will sign its CMS messages with SHA-256 instead of SHA-1.
  * Updated all code using OpenSSL to be compatible with OpenSSL 3.
  * Reorganized the libk5crypto build system to allow the OpenSSL
    back-end to pull in material from the builtin back-end depending on
    the OpenSSL version.
  * Simplified the PRNG logic to always use the platform PRNG.
  * Converted the remaining Tcl tests to Python.
- update to 1.19.3 (bsc#1189929, CVE-2021-37750):
  * Fix a denial of service attack against the KDC [CVE-2021-37750].
  * Fix KDC null deref on TGS inner body null server
  * Fix conformance issue in GSSAPI tests
- Resolve "Credential cache directory /run/user/0/krb5cc does not
  exist while opening default credentials cache" by using a kernel
  keyring instead of a dir cache; (bsc#1109830);
- Added hardening to systemd services; (bsc#1181400);
- Drop 0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch,
  fixed in release 1.20.0
- Drop 0010-Fix-integer-overflows-in-PAC-parsing.patch,
  fixed in release 1.20.1</changelog>
  <changelog author="scabrero@suse.de" date="1691496000">- Ensure array count consistency in kadm5 RPC; (bsc#1214054);
  (CVE-2023-36054);
- Added patches:
  * 0009-Ensure-array-count-consistency-in-kadm5-RPC.patch</changelog>
  <changelog author="scabrero@suse.de" date="1711108800">- Fix memory leaks, add patch 0010-Fix-three-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771
  * CVE-2024-26462, bsc#1220772</changelog>
  <changelog author="scabrero@suse.de" date="1719835200">- Fix vulnerabilities in GSS message token handling, add patch
  0011-Fix-vulnerabilities-in-GSS-message-token-handling.patch
  * CVE-2024-37370, bsc#1227186
  * CVE-2024-37371, bsc#1227187</changelog>
</package>
<package pkgid="c5fdb62498ce76ef770524a46963adc7330bad2a2863173c5e8951d1d7596433" name="krb5" arch="s390x">
  <version epoch="0" ver="1.20.1" rel="150500.3.9.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="jmcdonough@suse.com" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="scabrero@suse.de" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="scabrero@suse.de" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="scabrero@suse.de" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="scabrero@suse.de" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="scabrero@suse.de" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619092800">- Use /run instead of /var/run for daemon PID files; (bsc#1185163);</changelog>
  <changelog author="scabrero@suse.de" date="1627300800">- Fix KDC null deref on bad encrypted challenge; (CVE-2021-36222);
  (bsc#1188571);
- Added patches:
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch</changelog>
  <changelog author="scabrero@suse.de" date="1630324800">- Fix KDC null pointer dereference via a FAST inner body that
  lacks a server field; (CVE-2021-37750); (bsc#1189929);
- Added patches:
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="scabrero@suse.de" date="1631880000">- Update to 1.19.2
  * Fix a denial of service attack against the KDC encrypted challenge
    code; (CVE-2021-36222);
  * Fix a memory leak when gss_inquire_cred() is called without a
    credential handle.
- Changes from 1.19.1
  * Fix a linking issue with Samba.
  * Better support multiple pkinit_identities values by checking whether
    certificates can be loaded for each value.
- Changes from 1.19
  Administrator experience
  * When a client keytab is present, the GSSAPI krb5 mech will refresh
    credentials even if the current credentials were acquired manually.
  * It is now harder to accidentally delete the K/M entry from a KDB.
  Developer experience
  * gss_acquire_cred_from() now supports the "password" and "verify"
    options, allowing credentials to be acquired via password and
    verified using a keytab key.
  * When an application accepts a GSS security context, the new
    GSS_C_CHANNEL_BOUND_FLAG will be set if the initiator and acceptor
    both provided matching channel bindings.
  * Added the GSS_KRB5_NT_X509_CERT name type, allowing S4U2Self requests
    to identify the desired client principal by certificate.
  * PKINIT certauth modules can now cause the hw-authent flag to be set
    in issued tickets.
  * The krb5_init_creds_step() API will now issue the same password
    expiration warnings as krb5_get_init_creds_password().
  Protocol evolution
  * Added client and KDC support for Microsoft's Resource-Based Constrained
    Delegation, which allows cross-realm S4U2Proxy requests. A third-party
    database module is required for KDC support.
  * kadmin/admin is now the preferred server principal name for kadmin
    connections, and the host-based form is no longer created by default.
    The client will still try the host-based form as a fallback.
  * Added client and server support for Microsoft's KERB_AP_OPTIONS_CBT
    extension, which causes channel bindings to be required for the
    initiator if the acceptor provided them. The client will send this
    option if the client_aware_gss_bindings profile option is set.
  User experience
  * kinit will now issue a warning if the des3-cbc-sha1 encryption type is
    used in the reply. This encryption type will be deprecated and removed
    in future releases.
  * Added kvno flags --out-cache, --no-store, and --cached-only
    (inspired by Heimdal's kgetcred).
- Changes from 1.18.3
  * Fix a denial of service vulnerability when decoding Kerberos
    protocol messages; (CVE-2020-28196); (bsc#1178512);
  * Fix a locking issue with the LMDB KDB module which could cause
    KDC and kadmind processes to lose access to the database.
  * Fix an assertion failure when libgssapi_krb5 is repeatedly loaded
    and unloaded while libkrb5support remains loaded.
- Changes from 1.18.2
  * Fix a SPNEGO regression where an acceptor using the default credential
    would improperly filter mechanisms, causing a negotiation failure.
  * Fix a bug where the KDC would fail to issue tickets if the local krbtgt
    principal's first key has a single-DES enctype.
  * Add stub functions to allow old versions of OpenSSL libcrypto to link
    against libkrb5.
  * Fix a NegoEx bug where the client name and delegated credential might
    not be reported.
- Changes from 1.18.1
  * Fix a crash when qualifying short hostnames when the system has
    no primary DNS domain.
  * Fix a regression when an application imports "service@" as a GSS
    host-based name for its acceptor credential handle.
  * Fix KDC enforcement of auth indicators when they are modified by
    the KDB module.
  * Fix removal of require_auth string attributes when the LDAP KDB
    module is used.
  * Fix a compile error when building with musl libc on Linux.
  * Fix a compile error when building with gcc 4.x.
  * Change the KDC constrained delegation precedence order for consistency
    with Windows KDCs.
- Changes from 1.18
  Administrator experience:
  * Remove support for single-DES encryption types.
  * Change the replay cache format to be more efficient and robust.
    Replay cache filenames using the new format end with ".rcache2"
    by default.
  * setuid programs will automatically ignore environment variables
    that normally affect krb5 API functions, even if the caller does
    not use krb5_init_secure_context().
  * Add an "enforce_ok_as_delegate" krb5.conf relation to disable
    credential forwarding during GSSAPI authentication unless the KDC
    sets the ok-as-delegate bit in the service ticket.
  * Use the permitted_enctypes krb5.conf setting as the default value
    for default_tkt_enctypes and default_tgs_enctypes.
  Developer experience:
  * Implement krb5_cc_remove_cred() for all credential cache types.
  * Add the krb5_pac_get_client_info() API to get the client account
    name from a PAC.
  Protocol evolution:
  * Add KDC support for S4U2Self requests where the user is identified
    by X.509 certificate. (Requires support for certificate lookup from
    a third-party KDB module.)
  * Remove support for an old ("draft 9") variant of PKINIT.
  * Add support for Microsoft NegoEx. (Requires one or more third-party
    GSS modules implementing NegoEx mechanisms.)
  User experience:
  * Add support for "dns_canonicalize_hostname=fallback", causing
    host-based principal names to be tried first without DNS
    canonicalization, and again with DNS canonicalization if the
    un-canonicalized server is not found.
  * Expand single-component hostnames in host-based principal names
    when DNS canonicalization is not used, adding the system's first DNS
    search path as a suffix. Add a "qualify_shortname" krb5.conf relation
    to override this suffix or disable expansion.
  * Honor the transited-policy-checked ticket flag on application servers,
    eliminating the requirement to configure capaths on servers in some
    scenarios.
  Code quality:
  * The libkrb5 serialization code (used to export and import krb5 GSS
    security contexts) has been simplified and made type-safe.
  * The libkrb5 code for creating KRB-PRIV, KRB-SAFE, and KRB-CRED
    messages has been revised to conform to current coding practices.
  * The test suite has been modified to work with macOS System Integrity
    Protection enabled.
  * The test suite incorporates soft-pkcs11 so that PKINIT PKCS11 support
    can always be tested.
- Changes from 1.17.1
  * Fix a bug preventing "addprinc -randkey -kvno" from working in kadmin.
  * Fix a bug preventing time skew correction from working when a KCM
    credential cache is used.
- Changes from 1.17:
  Administrator experience:
  * A new Kerberos database module using the Lightning Memory-Mapped
    Database library (LMDB) has been added.  The LMDB KDB module should
    be more performant and more robust than the DB2 module, and may
    become the default module for new databases in a future release.
  * "kdb5_util dump" will no longer dump policy entries when specific
    principal names are requested.
  Developer experience:
  * The new krb5_get_etype_info() API can be used to retrieve enctype,
    salt, and string-to-key parameters from the KDC for a client
    principal.
  * The new GSS_KRB5_NT_ENTERPRISE_NAME name type allows enterprise
    principal names to be used with GSS-API functions.
  * KDC and kadmind modules which call com_err() will now write to the
    log file in a format more consistent with other log messages.
  * Programs which use large numbers of memory credential caches should
    perform better.
  Protocol evolution:
  * The SPAKE pre-authentication mechanism is now supported.  This
    mechanism protects against password dictionary attacks without
    requiring any additional infrastructure such as certificates.  SPAKE
    is enabled by default on clients, but must be manually enabled on
    the KDC for this release.
  * PKINIT freshness tokens are now supported.  Freshness tokens can
    protect against scenarios where an attacker uses temporary access to
    a smart card to generate authentication requests for the future.
  * Password change operations now prefer TCP over UDP, to avoid
    spurious error messages about replays when a response packet is
    dropped.
  * The KDC now supports cross-realm S4U2Self requests when used with a
    third-party KDB module such as Samba's.  The client code for
    cross-realm S4U2Self requests is also now more robust
    (CVE-2018-20217).
  User experience:
  * The new ktutil addent -f flag can be used to fetch salt information
    from the KDC for password-based keys.
  * The new kdestroy -p option can be used to destroy a credential cache
    within a collection by client principal name.
  * The Kerberos man page has been restored, and documents the
    environment variables that affect programs using the Kerberos
    library.
  Code quality:
  * Python test scripts now use Python 3.
  * Python test scripts now display markers in verbose output, making it
    easier to find where a failure occurred within the scripts.
  * The Windows build system has been simplified and updated to work
    with more recent versions of Visual Studio.  A large volume of
    unused Windows-specific code has been removed.  Visual Studio 2013
    or later is now required.
- Replace old $RPM_* shell vars
- Removal of SuSEfirewall2 service since SuSEfirewall2 has been replaced
  by firewalld
- Remove cruft to support distributions older than SLE 12
- Use macros where applicable
- Switch to pkgconfig style dependencies
- Use %_tmpfilesdir instead of the wrong %_libexecdir/tmpfiles.d
  notation: libexecdir is likely changing away from /usr/lib to
  /usr/libexec
- Build with full Cyrus SASL support. Negotiating SASL credentials with
  an EXTERNAL bind mechanism requires interaction. Kerberos provides its
  own interaction function that skips all interaction, thus preventing the
  mechanism from working.
- Removed patches:
  * 0007-krb5-1.12-ksu-path.patch
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch
- Renamed patches:
  * 0001-krb5-1.12-pam.patch =&gt; 0001-ksu-pam-integration.patch
  * 0003-krb5-1.12-buildconf.patch =&gt; 0003-Adjust-build-configuration.patch
  * 0008-krb5-1.12-selinux-label.patch =&gt; 0007-SELinux-integration.patch
  * 0009-krb5-1.9-debuginfo.patch =&gt; 0008-krb5-1.9-debuginfo.patch
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch =&gt;
    0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="nopower@suse.com" date="1667822400">- Fix integer overflows in PAC parsing; (CVE-2022-42898);
  (bso#15203), (bsc#1205126).
- Added patches:
  * 0010-Fix-integer-overflows-in-PAC-parsing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1670932800">- Update to 1.20.1; (bsc#1205126); (CVE-2022-42898);
  * Fix integer overflows in PAC parsing [CVE-2022-42898].
  * Fix null deref in KDC when decoding invalid NDR.
  * Fix memory leak in OTP kdcpreauth module.
  * Fix PKCS11 module path search.
- update to 1.20.0:
  * Added a "disable_pac" realm relation to suppress adding PAC authdata
    to tickets, for realms which do not need to support S4U requests.
  * Most credential cache types will use atomic replacement when a cache
    is reinitialized using kinit or refreshed from the client keytab.
  * kprop can now propagate databases with a dump size larger than 4GB,
    if both the client and server are upgraded.
  * kprop can now work over NATs that change the destination IP address,
    if the client is upgraded.
  * Updated the KDB interface.  The sign_authdata() method is replaced
    with the issue_pac() method, allowing KDB modules to add logon info
    and other buffers to the PAC issued by the KDC.
  * Host-based initiator names are better supported in the GSS krb5
    mechanism.
  * Replaced AD-SIGNEDPATH authdata with minimal PACs.
  * To avoid spurious replay errors, password change requests will not
    be attempted over UDP until the attempt over TCP fails.
  * PKINIT will sign its CMS messages with SHA-256 instead of SHA-1.
  * Updated all code using OpenSSL to be compatible with OpenSSL 3.
  * Reorganized the libk5crypto build system to allow the OpenSSL
    back-end to pull in material from the builtin back-end depending on
    the OpenSSL version.
  * Simplified the PRNG logic to always use the platform PRNG.
  * Converted the remaining Tcl tests to Python.
- update to 1.19.3 (bsc#1189929, CVE-2021-37750):
  * Fix a denial of service attack against the KDC [CVE-2021-37750].
  * Fix KDC null deref on TGS inner body null server
  * Fix conformance issue in GSSAPI tests
- Resolve "Credential cache directory /run/user/0/krb5cc does not
  exist while opening default credentials cache" by using a kernel
  keyring instead of a dir cache; (bsc#1109830);
- Added hardening to systemd services; (bsc#1181400);
- Drop 0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch,
  fixed in release 1.20.0
- Drop 0010-Fix-integer-overflows-in-PAC-parsing.patch,
  fixed in release 1.20.1</changelog>
  <changelog author="scabrero@suse.de" date="1691496000">- Ensure array count consistency in kadm5 RPC; (bsc#1214054);
  (CVE-2023-36054);
- Added patches:
  * 0009-Ensure-array-count-consistency-in-kadm5-RPC.patch</changelog>
  <changelog author="scabrero@suse.de" date="1711108800">- Fix memory leaks, add patch 0010-Fix-three-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771
  * CVE-2024-26462, bsc#1220772</changelog>
  <changelog author="scabrero@suse.de" date="1719835200">- Fix vulnerabilities in GSS message token handling, add patch
  0011-Fix-vulnerabilities-in-GSS-message-token-handling.patch
  * CVE-2024-37370, bsc#1227186
  * CVE-2024-37371, bsc#1227187</changelog>
</package>
<package pkgid="447d379c87d95ec12ac6758d6f36522d4d205d7acf5573585a17c1c659cff6c1" name="krb5" arch="src">
  <version epoch="0" ver="1.20.1" rel="150500.3.9.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="jmcdonough@suse.com" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="scabrero@suse.de" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="scabrero@suse.de" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="scabrero@suse.de" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="scabrero@suse.de" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="scabrero@suse.de" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619092800">- Use /run instead of /var/run for daemon PID files; (bsc#1185163);</changelog>
  <changelog author="scabrero@suse.de" date="1627300800">- Fix KDC null deref on bad encrypted challenge; (CVE-2021-36222);
  (bsc#1188571);
- Added patches:
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch</changelog>
  <changelog author="scabrero@suse.de" date="1630324800">- Fix KDC null pointer dereference via a FAST inner body that
  lacks a server field; (CVE-2021-37750); (bsc#1189929);
- Added patches:
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="scabrero@suse.de" date="1631880000">- Update to 1.19.2
  * Fix a denial of service attack against the KDC encrypted challenge
    code; (CVE-2021-36222);
  * Fix a memory leak when gss_inquire_cred() is called without a
    credential handle.
- Changes from 1.19.1
  * Fix a linking issue with Samba.
  * Better support multiple pkinit_identities values by checking whether
    certificates can be loaded for each value.
- Changes from 1.19
  Administrator experience
  * When a client keytab is present, the GSSAPI krb5 mech will refresh
    credentials even if the current credentials were acquired manually.
  * It is now harder to accidentally delete the K/M entry from a KDB.
  Developer experience
  * gss_acquire_cred_from() now supports the "password" and "verify"
    options, allowing credentials to be acquired via password and
    verified using a keytab key.
  * When an application accepts a GSS security context, the new
    GSS_C_CHANNEL_BOUND_FLAG will be set if the initiator and acceptor
    both provided matching channel bindings.
  * Added the GSS_KRB5_NT_X509_CERT name type, allowing S4U2Self requests
    to identify the desired client principal by certificate.
  * PKINIT certauth modules can now cause the hw-authent flag to be set
    in issued tickets.
  * The krb5_init_creds_step() API will now issue the same password
    expiration warnings as krb5_get_init_creds_password().
  Protocol evolution
  * Added client and KDC support for Microsoft's Resource-Based Constrained
    Delegation, which allows cross-realm S4U2Proxy requests. A third-party
    database module is required for KDC support.
  * kadmin/admin is now the preferred server principal name for kadmin
    connections, and the host-based form is no longer created by default.
    The client will still try the host-based form as a fallback.
  * Added client and server support for Microsoft's KERB_AP_OPTIONS_CBT
    extension, which causes channel bindings to be required for the
    initiator if the acceptor provided them. The client will send this
    option if the client_aware_gss_bindings profile option is set.
  User experience
  * kinit will now issue a warning if the des3-cbc-sha1 encryption type is
    used in the reply. This encryption type will be deprecated and removed
    in future releases.
  * Added kvno flags --out-cache, --no-store, and --cached-only
    (inspired by Heimdal's kgetcred).
- Changes from 1.18.3
  * Fix a denial of service vulnerability when decoding Kerberos
    protocol messages; (CVE-2020-28196); (bsc#1178512);
  * Fix a locking issue with the LMDB KDB module which could cause
    KDC and kadmind processes to lose access to the database.
  * Fix an assertion failure when libgssapi_krb5 is repeatedly loaded
    and unloaded while libkrb5support remains loaded.
- Changes from 1.18.2
  * Fix a SPNEGO regression where an acceptor using the default credential
    would improperly filter mechanisms, causing a negotiation failure.
  * Fix a bug where the KDC would fail to issue tickets if the local krbtgt
    principal's first key has a single-DES enctype.
  * Add stub functions to allow old versions of OpenSSL libcrypto to link
    against libkrb5.
  * Fix a NegoEx bug where the client name and delegated credential might
    not be reported.
- Changes from 1.18.1
  * Fix a crash when qualifying short hostnames when the system has
    no primary DNS domain.
  * Fix a regression when an application imports "service@" as a GSS
    host-based name for its acceptor credential handle.
  * Fix KDC enforcement of auth indicators when they are modified by
    the KDB module.
  * Fix removal of require_auth string attributes when the LDAP KDB
    module is used.
  * Fix a compile error when building with musl libc on Linux.
  * Fix a compile error when building with gcc 4.x.
  * Change the KDC constrained delegation precedence order for consistency
    with Windows KDCs.
- Changes from 1.18
  Administrator experience:
  * Remove support for single-DES encryption types.
  * Change the replay cache format to be more efficient and robust.
    Replay cache filenames using the new format end with ".rcache2"
    by default.
  * setuid programs will automatically ignore environment variables
    that normally affect krb5 API functions, even if the caller does
    not use krb5_init_secure_context().
  * Add an "enforce_ok_as_delegate" krb5.conf relation to disable
    credential forwarding during GSSAPI authentication unless the KDC
    sets the ok-as-delegate bit in the service ticket.
  * Use the permitted_enctypes krb5.conf setting as the default value
    for default_tkt_enctypes and default_tgs_enctypes.
  Developer experience:
  * Implement krb5_cc_remove_cred() for all credential cache types.
  * Add the krb5_pac_get_client_info() API to get the client account
    name from a PAC.
  Protocol evolution:
  * Add KDC support for S4U2Self requests where the user is identified
    by X.509 certificate. (Requires support for certificate lookup from
    a third-party KDB module.)
  * Remove support for an old ("draft 9") variant of PKINIT.
  * Add support for Microsoft NegoEx. (Requires one or more third-party
    GSS modules implementing NegoEx mechanisms.)
  User experience:
  * Add support for "dns_canonicalize_hostname=fallback", causing
    host-based principal names to be tried first without DNS
    canonicalization, and again with DNS canonicalization if the
    un-canonicalized server is not found.
  * Expand single-component hostnames in host-based principal names
    when DNS canonicalization is not used, adding the system's first DNS
    search path as a suffix. Add a "qualify_shortname" krb5.conf relation
    to override this suffix or disable expansion.
  * Honor the transited-policy-checked ticket flag on application servers,
    eliminating the requirement to configure capaths on servers in some
    scenarios.
  Code quality:
  * The libkrb5 serialization code (used to export and import krb5 GSS
    security contexts) has been simplified and made type-safe.
  * The libkrb5 code for creating KRB-PRIV, KRB-SAFE, and KRB-CRED
    messages has been revised to conform to current coding practices.
  * The test suite has been modified to work with macOS System Integrity
    Protection enabled.
  * The test suite incorporates soft-pkcs11 so that PKINIT PKCS11 support
    can always be tested.
- Changes from 1.17.1
  * Fix a bug preventing "addprinc -randkey -kvno" from working in kadmin.
  * Fix a bug preventing time skew correction from working when a KCM
    credential cache is used.
- Changes from 1.17:
  Administrator experience:
  * A new Kerberos database module using the Lightning Memory-Mapped
    Database library (LMDB) has been added.  The LMDB KDB module should
    be more performant and more robust than the DB2 module, and may
    become the default module for new databases in a future release.
  * "kdb5_util dump" will no longer dump policy entries when specific
    principal names are requested.
  Developer experience:
  * The new krb5_get_etype_info() API can be used to retrieve enctype,
    salt, and string-to-key parameters from the KDC for a client
    principal.
  * The new GSS_KRB5_NT_ENTERPRISE_NAME name type allows enterprise
    principal names to be used with GSS-API functions.
  * KDC and kadmind modules which call com_err() will now write to the
    log file in a format more consistent with other log messages.
  * Programs which use large numbers of memory credential caches should
    perform better.
  Protocol evolution:
  * The SPAKE pre-authentication mechanism is now supported.  This
    mechanism protects against password dictionary attacks without
    requiring any additional infrastructure such as certificates.  SPAKE
    is enabled by default on clients, but must be manually enabled on
    the KDC for this release.
  * PKINIT freshness tokens are now supported.  Freshness tokens can
    protect against scenarios where an attacker uses temporary access to
    a smart card to generate authentication requests for the future.
  * Password change operations now prefer TCP over UDP, to avoid
    spurious error messages about replays when a response packet is
    dropped.
  * The KDC now supports cross-realm S4U2Self requests when used with a
    third-party KDB module such as Samba's.  The client code for
    cross-realm S4U2Self requests is also now more robust
    (CVE-2018-20217).
  User experience:
  * The new ktutil addent -f flag can be used to fetch salt information
    from the KDC for password-based keys.
  * The new kdestroy -p option can be used to destroy a credential cache
    within a collection by client principal name.
  * The Kerberos man page has been restored, and documents the
    environment variables that affect programs using the Kerberos
    library.
  Code quality:
  * Python test scripts now use Python 3.
  * Python test scripts now display markers in verbose output, making it
    easier to find where a failure occurred within the scripts.
  * The Windows build system has been simplified and updated to work
    with more recent versions of Visual Studio.  A large volume of
    unused Windows-specific code has been removed.  Visual Studio 2013
    or later is now required.
- Replace old $RPM_* shell vars
- Removal of SuSEfirewall2 service since SuSEfirewall2 has been replaced
  by firewalld
- Remove cruft to support distributions older than SLE 12
- Use macros where applicable
- Switch to pkgconfig style dependencies
- Use %_tmpfilesdir instead of the wrong %_libexecdir/tmpfiles.d
  notation: libexecdir is likely changing away from /usr/lib to
  /usr/libexec
- Build with full Cyrus SASL support. Negotiating SASL credentials with
  an EXTERNAL bind mechanism requires interaction. Kerberos provides its
  own interaction function that skips all interaction, thus preventing the
  mechanism from working.
- Removed patches:
  * 0007-krb5-1.12-ksu-path.patch
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch
- Renamed patches:
  * 0001-krb5-1.12-pam.patch =&gt; 0001-ksu-pam-integration.patch
  * 0003-krb5-1.12-buildconf.patch =&gt; 0003-Adjust-build-configuration.patch
  * 0008-krb5-1.12-selinux-label.patch =&gt; 0007-SELinux-integration.patch
  * 0009-krb5-1.9-debuginfo.patch =&gt; 0008-krb5-1.9-debuginfo.patch
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch =&gt;
    0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="nopower@suse.com" date="1667822400">- Fix integer overflows in PAC parsing; (CVE-2022-42898);
  (bso#15203), (bsc#1205126).
- Added patches:
  * 0010-Fix-integer-overflows-in-PAC-parsing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1670932800">- Update to 1.20.1; (bsc#1205126); (CVE-2022-42898);
  * Fix integer overflows in PAC parsing [CVE-2022-42898].
  * Fix null deref in KDC when decoding invalid NDR.
  * Fix memory leak in OTP kdcpreauth module.
  * Fix PKCS11 module path search.
- update to 1.20.0:
  * Added a "disable_pac" realm relation to suppress adding PAC authdata
    to tickets, for realms which do not need to support S4U requests.
  * Most credential cache types will use atomic replacement when a cache
    is reinitialized using kinit or refreshed from the client keytab.
  * kprop can now propagate databases with a dump size larger than 4GB,
    if both the client and server are upgraded.
  * kprop can now work over NATs that change the destination IP address,
    if the client is upgraded.
  * Updated the KDB interface.  The sign_authdata() method is replaced
    with the issue_pac() method, allowing KDB modules to add logon info
    and other buffers to the PAC issued by the KDC.
  * Host-based initiator names are better supported in the GSS krb5
    mechanism.
  * Replaced AD-SIGNEDPATH authdata with minimal PACs.
  * To avoid spurious replay errors, password change requests will not
    be attempted over UDP until the attempt over TCP fails.
  * PKINIT will sign its CMS messages with SHA-256 instead of SHA-1.
  * Updated all code using OpenSSL to be compatible with OpenSSL 3.
  * Reorganized the libk5crypto build system to allow the OpenSSL
    back-end to pull in material from the builtin back-end depending on
    the OpenSSL version.
  * Simplified the PRNG logic to always use the platform PRNG.
  * Converted the remaining Tcl tests to Python.
- update to 1.19.3 (bsc#1189929, CVE-2021-37750):
  * Fix a denial of service attack against the KDC [CVE-2021-37750].
  * Fix KDC null deref on TGS inner body null server
  * Fix conformance issue in GSSAPI tests
- Resolve "Credential cache directory /run/user/0/krb5cc does not
  exist while opening default credentials cache" by using a kernel
  keyring instead of a dir cache; (bsc#1109830);
- Added hardening to systemd services; (bsc#1181400);
- Drop 0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch,
  fixed in release 1.20.0
- Drop 0010-Fix-integer-overflows-in-PAC-parsing.patch,
  fixed in release 1.20.1</changelog>
  <changelog author="scabrero@suse.de" date="1691496000">- Ensure array count consistency in kadm5 RPC; (bsc#1214054);
  (CVE-2023-36054);
- Added patches:
  * 0009-Ensure-array-count-consistency-in-kadm5-RPC.patch</changelog>
  <changelog author="scabrero@suse.de" date="1711108800">- Fix memory leaks, add patch 0010-Fix-three-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771
  * CVE-2024-26462, bsc#1220772</changelog>
  <changelog author="scabrero@suse.de" date="1719835200">- Fix vulnerabilities in GSS message token handling, add patch
  0011-Fix-vulnerabilities-in-GSS-message-token-handling.patch
  * CVE-2024-37370, bsc#1227186
  * CVE-2024-37371, bsc#1227187</changelog>
</package>
<package pkgid="c424f733feeb6d04acf508ab45b64c2e578c6c65d34426f043980cb2a9b83a1a" name="krb5" arch="x86_64">
  <version epoch="0" ver="1.20.1" rel="150500.3.9.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="jmcdonough@suse.com" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="scabrero@suse.de" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="scabrero@suse.de" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="scabrero@suse.de" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="scabrero@suse.de" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="scabrero@suse.de" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619092800">- Use /run instead of /var/run for daemon PID files; (bsc#1185163);</changelog>
  <changelog author="scabrero@suse.de" date="1627300800">- Fix KDC null deref on bad encrypted challenge; (CVE-2021-36222);
  (bsc#1188571);
- Added patches:
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch</changelog>
  <changelog author="scabrero@suse.de" date="1630324800">- Fix KDC null pointer dereference via a FAST inner body that
  lacks a server field; (CVE-2021-37750); (bsc#1189929);
- Added patches:
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="scabrero@suse.de" date="1631880000">- Update to 1.19.2
  * Fix a denial of service attack against the KDC encrypted challenge
    code; (CVE-2021-36222);
  * Fix a memory leak when gss_inquire_cred() is called without a
    credential handle.
- Changes from 1.19.1
  * Fix a linking issue with Samba.
  * Better support multiple pkinit_identities values by checking whether
    certificates can be loaded for each value.
- Changes from 1.19
  Administrator experience
  * When a client keytab is present, the GSSAPI krb5 mech will refresh
    credentials even if the current credentials were acquired manually.
  * It is now harder to accidentally delete the K/M entry from a KDB.
  Developer experience
  * gss_acquire_cred_from() now supports the "password" and "verify"
    options, allowing credentials to be acquired via password and
    verified using a keytab key.
  * When an application accepts a GSS security context, the new
    GSS_C_CHANNEL_BOUND_FLAG will be set if the initiator and acceptor
    both provided matching channel bindings.
  * Added the GSS_KRB5_NT_X509_CERT name type, allowing S4U2Self requests
    to identify the desired client principal by certificate.
  * PKINIT certauth modules can now cause the hw-authent flag to be set
    in issued tickets.
  * The krb5_init_creds_step() API will now issue the same password
    expiration warnings as krb5_get_init_creds_password().
  Protocol evolution
  * Added client and KDC support for Microsoft's Resource-Based Constrained
    Delegation, which allows cross-realm S4U2Proxy requests. A third-party
    database module is required for KDC support.
  * kadmin/admin is now the preferred server principal name for kadmin
    connections, and the host-based form is no longer created by default.
    The client will still try the host-based form as a fallback.
  * Added client and server support for Microsoft's KERB_AP_OPTIONS_CBT
    extension, which causes channel bindings to be required for the
    initiator if the acceptor provided them. The client will send this
    option if the client_aware_gss_bindings profile option is set.
  User experience
  * kinit will now issue a warning if the des3-cbc-sha1 encryption type is
    used in the reply. This encryption type will be deprecated and removed
    in future releases.
  * Added kvno flags --out-cache, --no-store, and --cached-only
    (inspired by Heimdal's kgetcred).
- Changes from 1.18.3
  * Fix a denial of service vulnerability when decoding Kerberos
    protocol messages; (CVE-2020-28196); (bsc#1178512);
  * Fix a locking issue with the LMDB KDB module which could cause
    KDC and kadmind processes to lose access to the database.
  * Fix an assertion failure when libgssapi_krb5 is repeatedly loaded
    and unloaded while libkrb5support remains loaded.
- Changes from 1.18.2
  * Fix a SPNEGO regression where an acceptor using the default credential
    would improperly filter mechanisms, causing a negotiation failure.
  * Fix a bug where the KDC would fail to issue tickets if the local krbtgt
    principal's first key has a single-DES enctype.
  * Add stub functions to allow old versions of OpenSSL libcrypto to link
    against libkrb5.
  * Fix a NegoEx bug where the client name and delegated credential might
    not be reported.
- Changes from 1.18.1
  * Fix a crash when qualifying short hostnames when the system has
    no primary DNS domain.
  * Fix a regression when an application imports "service@" as a GSS
    host-based name for its acceptor credential handle.
  * Fix KDC enforcement of auth indicators when they are modified by
    the KDB module.
  * Fix removal of require_auth string attributes when the LDAP KDB
    module is used.
  * Fix a compile error when building with musl libc on Linux.
  * Fix a compile error when building with gcc 4.x.
  * Change the KDC constrained delegation precedence order for consistency
    with Windows KDCs.
- Changes from 1.18
  Administrator experience:
  * Remove support for single-DES encryption types.
  * Change the replay cache format to be more efficient and robust.
    Replay cache filenames using the new format end with ".rcache2"
    by default.
  * setuid programs will automatically ignore environment variables
    that normally affect krb5 API functions, even if the caller does
    not use krb5_init_secure_context().
  * Add an "enforce_ok_as_delegate" krb5.conf relation to disable
    credential forwarding during GSSAPI authentication unless the KDC
    sets the ok-as-delegate bit in the service ticket.
  * Use the permitted_enctypes krb5.conf setting as the default value
    for default_tkt_enctypes and default_tgs_enctypes.
  Developer experience:
  * Implement krb5_cc_remove_cred() for all credential cache types.
  * Add the krb5_pac_get_client_info() API to get the client account
    name from a PAC.
  Protocol evolution:
  * Add KDC support for S4U2Self requests where the user is identified
    by X.509 certificate. (Requires support for certificate lookup from
    a third-party KDB module.)
  * Remove support for an old ("draft 9") variant of PKINIT.
  * Add support for Microsoft NegoEx. (Requires one or more third-party
    GSS modules implementing NegoEx mechanisms.)
  User experience:
  * Add support for "dns_canonicalize_hostname=fallback", causing
    host-based principal names to be tried first without DNS
    canonicalization, and again with DNS canonicalization if the
    un-canonicalized server is not found.
  * Expand single-component hostnames in host-based principal names
    when DNS canonicalization is not used, adding the system's first DNS
    search path as a suffix. Add a "qualify_shortname" krb5.conf relation
    to override this suffix or disable expansion.
  * Honor the transited-policy-checked ticket flag on application servers,
    eliminating the requirement to configure capaths on servers in some
    scenarios.
  Code quality:
  * The libkrb5 serialization code (used to export and import krb5 GSS
    security contexts) has been simplified and made type-safe.
  * The libkrb5 code for creating KRB-PRIV, KRB-SAFE, and KRB-CRED
    messages has been revised to conform to current coding practices.
  * The test suite has been modified to work with macOS System Integrity
    Protection enabled.
  * The test suite incorporates soft-pkcs11 so that PKINIT PKCS11 support
    can always be tested.
- Changes from 1.17.1
  * Fix a bug preventing "addprinc -randkey -kvno" from working in kadmin.
  * Fix a bug preventing time skew correction from working when a KCM
    credential cache is used.
- Changes from 1.17:
  Administrator experience:
  * A new Kerberos database module using the Lightning Memory-Mapped
    Database library (LMDB) has been added.  The LMDB KDB module should
    be more performant and more robust than the DB2 module, and may
    become the default module for new databases in a future release.
  * "kdb5_util dump" will no longer dump policy entries when specific
    principal names are requested.
  Developer experience:
  * The new krb5_get_etype_info() API can be used to retrieve enctype,
    salt, and string-to-key parameters from the KDC for a client
    principal.
  * The new GSS_KRB5_NT_ENTERPRISE_NAME name type allows enterprise
    principal names to be used with GSS-API functions.
  * KDC and kadmind modules which call com_err() will now write to the
    log file in a format more consistent with other log messages.
  * Programs which use large numbers of memory credential caches should
    perform better.
  Protocol evolution:
  * The SPAKE pre-authentication mechanism is now supported.  This
    mechanism protects against password dictionary attacks without
    requiring any additional infrastructure such as certificates.  SPAKE
    is enabled by default on clients, but must be manually enabled on
    the KDC for this release.
  * PKINIT freshness tokens are now supported.  Freshness tokens can
    protect against scenarios where an attacker uses temporary access to
    a smart card to generate authentication requests for the future.
  * Password change operations now prefer TCP over UDP, to avoid
    spurious error messages about replays when a response packet is
    dropped.
  * The KDC now supports cross-realm S4U2Self requests when used with a
    third-party KDB module such as Samba's.  The client code for
    cross-realm S4U2Self requests is also now more robust
    (CVE-2018-20217).
  User experience:
  * The new ktutil addent -f flag can be used to fetch salt information
    from the KDC for password-based keys.
  * The new kdestroy -p option can be used to destroy a credential cache
    within a collection by client principal name.
  * The Kerberos man page has been restored, and documents the
    environment variables that affect programs using the Kerberos
    library.
  Code quality:
  * Python test scripts now use Python 3.
  * Python test scripts now display markers in verbose output, making it
    easier to find where a failure occurred within the scripts.
  * The Windows build system has been simplified and updated to work
    with more recent versions of Visual Studio.  A large volume of
    unused Windows-specific code has been removed.  Visual Studio 2013
    or later is now required.
- Replace old $RPM_* shell vars
- Removal of SuSEfirewall2 service since SuSEfirewall2 has been replaced
  by firewalld
- Remove cruft to support distributions older than SLE 12
- Use macros where applicable
- Switch to pkgconfig style dependencies
- Use %_tmpfilesdir instead of the wrong %_libexecdir/tmpfiles.d
  notation: libexecdir is likely changing away from /usr/lib to
  /usr/libexec
- Build with full Cyrus SASL support. Negotiating SASL credentials with
  an EXTERNAL bind mechanism requires interaction. Kerberos provides its
  own interaction function that skips all interaction, thus preventing the
  mechanism from working.
- Removed patches:
  * 0007-krb5-1.12-ksu-path.patch
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch
- Renamed patches:
  * 0001-krb5-1.12-pam.patch =&gt; 0001-ksu-pam-integration.patch
  * 0003-krb5-1.12-buildconf.patch =&gt; 0003-Adjust-build-configuration.patch
  * 0008-krb5-1.12-selinux-label.patch =&gt; 0007-SELinux-integration.patch
  * 0009-krb5-1.9-debuginfo.patch =&gt; 0008-krb5-1.9-debuginfo.patch
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch =&gt;
    0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="nopower@suse.com" date="1667822400">- Fix integer overflows in PAC parsing; (CVE-2022-42898);
  (bso#15203), (bsc#1205126).
- Added patches:
  * 0010-Fix-integer-overflows-in-PAC-parsing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1670932800">- Update to 1.20.1; (bsc#1205126); (CVE-2022-42898);
  * Fix integer overflows in PAC parsing [CVE-2022-42898].
  * Fix null deref in KDC when decoding invalid NDR.
  * Fix memory leak in OTP kdcpreauth module.
  * Fix PKCS11 module path search.
- update to 1.20.0:
  * Added a "disable_pac" realm relation to suppress adding PAC authdata
    to tickets, for realms which do not need to support S4U requests.
  * Most credential cache types will use atomic replacement when a cache
    is reinitialized using kinit or refreshed from the client keytab.
  * kprop can now propagate databases with a dump size larger than 4GB,
    if both the client and server are upgraded.
  * kprop can now work over NATs that change the destination IP address,
    if the client is upgraded.
  * Updated the KDB interface.  The sign_authdata() method is replaced
    with the issue_pac() method, allowing KDB modules to add logon info
    and other buffers to the PAC issued by the KDC.
  * Host-based initiator names are better supported in the GSS krb5
    mechanism.
  * Replaced AD-SIGNEDPATH authdata with minimal PACs.
  * To avoid spurious replay errors, password change requests will not
    be attempted over UDP until the attempt over TCP fails.
  * PKINIT will sign its CMS messages with SHA-256 instead of SHA-1.
  * Updated all code using OpenSSL to be compatible with OpenSSL 3.
  * Reorganized the libk5crypto build system to allow the OpenSSL
    back-end to pull in material from the builtin back-end depending on
    the OpenSSL version.
  * Simplified the PRNG logic to always use the platform PRNG.
  * Converted the remaining Tcl tests to Python.
- update to 1.19.3 (bsc#1189929, CVE-2021-37750):
  * Fix a denial of service attack against the KDC [CVE-2021-37750].
  * Fix KDC null deref on TGS inner body null server
  * Fix conformance issue in GSSAPI tests
- Resolve "Credential cache directory /run/user/0/krb5cc does not
  exist while opening default credentials cache" by using a kernel
  keyring instead of a dir cache; (bsc#1109830);
- Added hardening to systemd services; (bsc#1181400);
- Drop 0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch,
  fixed in release 1.20.0
- Drop 0010-Fix-integer-overflows-in-PAC-parsing.patch,
  fixed in release 1.20.1</changelog>
  <changelog author="scabrero@suse.de" date="1691496000">- Ensure array count consistency in kadm5 RPC; (bsc#1214054);
  (CVE-2023-36054);
- Added patches:
  * 0009-Ensure-array-count-consistency-in-kadm5-RPC.patch</changelog>
  <changelog author="scabrero@suse.de" date="1711108800">- Fix memory leaks, add patch 0010-Fix-three-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771
  * CVE-2024-26462, bsc#1220772</changelog>
  <changelog author="scabrero@suse.de" date="1719835200">- Fix vulnerabilities in GSS message token handling, add patch
  0011-Fix-vulnerabilities-in-GSS-message-token-handling.patch
  * CVE-2024-37370, bsc#1227186
  * CVE-2024-37371, bsc#1227187</changelog>
</package>
<package pkgid="757c67318addcf8c2e78fe63674fb44ac003d32fdd86d08d4377ef8cb44c129c" name="kubevirt" arch="src">
  <version epoch="0" ver="1.0.0" rel="150500.8.3.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1645444800">- Allow to configure utility containers for update test
  0001-improve-kubevirt-update-test.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645531200">- Drop kubevirt-psp-caasp.yaml</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Use semantic equality comparison
  0002-use-semantic-equality-comparison.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393601">- Avoid to return nil failure message
  0003-Avoid-to-return-nil-failure-message.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393602">- Increase storage requirements in _constraints
- Pack nft rules and nsswitch.conf for virt-handler
- Only create 1MiB-aligned disk images (bsc#1199603)
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1655899200">- Update to version 0.54.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.54.0
- Drop upstreamed patches
  0001-improve-kubevirt-update-test.patch
  0002-use-semantic-equality-comparison.patch
  0003-Avoid-to-return-nil-failure-message.patch
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Add CVE fixes
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch (CVE-2022-1996, bsc#1200528)
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch (CVE-2022-29162, bsc#1199460)
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 0.57.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.57.0
- Drop upstreamed patches:
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch
  0004-Update-libvirt-go-to-fix-memory-leak.patch
  0005-Improve-non-root-path-handling
  0006-topology-spread-constraints.patch
  0007-Fix-containerdisk-unmount-logic.patch
- Build new packages: virt-exportproxy and virt-exportserver
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665748800">- Update to version 0.58.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1670500800">- Fix libguestfs pod startup error
  0001-guestfs-flag-to-set-uid-and-gid.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1671537600">- Use JSON syntax for slirp device
  0002-network-Use-JSON-syntax-for-slirp-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683028800">- TSC frequencies: add 250PPM tolerance (bsc#1210906)
  0004-TSC-frequencies-add-250PPM-tolerance.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1689940800">- Update to version 1.0.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.0
- Drop patches
  0001-guestfs-flag-to-set-uid-and-gid.patch
  0002-network-Use-JSON-syntax-for-slirp-device.patch
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch
  0004-TSC-frequencies-add-250PPM-tolerance.patch
- Add patches
  0001-Fix-qemu-system-lookup.patch
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1690286400">- Use compat cmdline options for virtiofsd
  0005-Use-compat-cmdline-options-for-virtiofsd.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1693224000">- Fix leaking file descriptor
  0006-isolation-close-file-when-exits.patch
- Fix volume detach on hotplug attachment pod delete
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
- Fix leaking tickers
  0008-fix-ticker-leak.patch
- Run helper pod as qemu user
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
- SCSI reservation: fix leftover mount and resource permissions
  0010-Fix-PR-leftover-mount-and-perms.patch
- Bump client-go (fix possible panic in discovery)
  0011-Fix-Aggregated-Discovery.patch
- Wait for new hotplug attachment pod to be ready
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
- Adapt the storage tests to the new populators flow
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
- Create export VM datavolumes compatible with populators
  0014-Export-create-populator-compatible-datavolumes-from-.patch
- Delete VMI prior to NFS server pod in tests
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch</changelog>
</package>
<package pkgid="628ab6dbe53c1aeb1ea1adf517727ae7642e1034aa5b3d35ea7e67779f838491" name="kubevirt" arch="src">
  <version epoch="0" ver="1.1.0" rel="150500.8.6.1"/>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Use semantic equality comparison
  0002-use-semantic-equality-comparison.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393601">- Avoid to return nil failure message
  0003-Avoid-to-return-nil-failure-message.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393602">- Increase storage requirements in _constraints
- Pack nft rules and nsswitch.conf for virt-handler
- Only create 1MiB-aligned disk images (bsc#1199603)
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1655899200">- Update to version 0.54.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.54.0
- Drop upstreamed patches
  0001-improve-kubevirt-update-test.patch
  0002-use-semantic-equality-comparison.patch
  0003-Avoid-to-return-nil-failure-message.patch
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Add CVE fixes
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch (CVE-2022-1996, bsc#1200528)
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch (CVE-2022-29162, bsc#1199460)
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 0.57.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.57.0
- Drop upstreamed patches:
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch
  0004-Update-libvirt-go-to-fix-memory-leak.patch
  0005-Improve-non-root-path-handling
  0006-topology-spread-constraints.patch
  0007-Fix-containerdisk-unmount-logic.patch
- Build new packages: virt-exportproxy and virt-exportserver
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665748800">- Update to version 0.58.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1670500800">- Fix libguestfs pod startup error
  0001-guestfs-flag-to-set-uid-and-gid.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1671537600">- Use JSON syntax for slirp device
  0002-network-Use-JSON-syntax-for-slirp-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683028800">- TSC frequencies: add 250PPM tolerance (bsc#1210906)
  0004-TSC-frequencies-add-250PPM-tolerance.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1689940800">- Update to version 1.0.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.0
- Drop patches
  0001-guestfs-flag-to-set-uid-and-gid.patch
  0002-network-Use-JSON-syntax-for-slirp-device.patch
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch
  0004-TSC-frequencies-add-250PPM-tolerance.patch
- Add patches
  0001-Fix-qemu-system-lookup.patch
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1690286400">- Use compat cmdline options for virtiofsd
  0005-Use-compat-cmdline-options-for-virtiofsd.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1693224000">- Fix leaking file descriptor
  0006-isolation-close-file-when-exits.patch
- Fix volume detach on hotplug attachment pod delete
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
- Fix leaking tickers
  0008-fix-ticker-leak.patch
- Run helper pod as qemu user
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
- SCSI reservation: fix leftover mount and resource permissions
  0010-Fix-PR-leftover-mount-and-perms.patch
- Bump client-go (fix possible panic in discovery)
  0011-Fix-Aggregated-Discovery.patch
- Wait for new hotplug attachment pod to be ready
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
- Adapt the storage tests to the new populators flow
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
- Create export VM datavolumes compatible with populators
  0014-Export-create-populator-compatible-datavolumes-from-.patch
- Delete VMI prior to NFS server pod in tests
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1697630400">- Update to version 1.0.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.1
- Drop patches:
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
  0006-isolation-close-file-when-exits.patch
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
  0008-fix-ticker-leak.patch
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
  0010-Fix-PR-leftover-mount-and-perms.patch
  0011-Fix-Aggregated-Discovery.patch
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
  0014-Export-create-populator-compatible-datavolumes-from-.patch
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1699963200">- Update to version 1.1.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.1.0
- Drop upstreamed patches
  0001-Fix-qemu-system-lookup.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
- Add patches
  0001-Update-google.golang.org-grpc-to-1.56.3.patch (CVE-2023-44487)
  0002-virt-launcher-fix-qemu-non-root-path.patch
  0003-cgroupsv2-reconstruct-device-allowlist.patch</changelog>
</package>
<package pkgid="35f5df4965972bf599087533670c5ae0b6bdaad020ec71ff878768cb19fb167d" name="kubevirt" arch="src">
  <version epoch="0" ver="1.1.1" rel="150500.8.12.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1655899200">- Update to version 0.54.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.54.0
- Drop upstreamed patches
  0001-improve-kubevirt-update-test.patch
  0002-use-semantic-equality-comparison.patch
  0003-Avoid-to-return-nil-failure-message.patch
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Add CVE fixes
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch (CVE-2022-1996, bsc#1200528)
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch (CVE-2022-29162, bsc#1199460)
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 0.57.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.57.0
- Drop upstreamed patches:
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch
  0004-Update-libvirt-go-to-fix-memory-leak.patch
  0005-Improve-non-root-path-handling
  0006-topology-spread-constraints.patch
  0007-Fix-containerdisk-unmount-logic.patch
- Build new packages: virt-exportproxy and virt-exportserver
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665748800">- Update to version 0.58.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1670500800">- Fix libguestfs pod startup error
  0001-guestfs-flag-to-set-uid-and-gid.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1671537600">- Use JSON syntax for slirp device
  0002-network-Use-JSON-syntax-for-slirp-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683028800">- TSC frequencies: add 250PPM tolerance (bsc#1210906)
  0004-TSC-frequencies-add-250PPM-tolerance.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1689940800">- Update to version 1.0.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.0
- Drop patches
  0001-guestfs-flag-to-set-uid-and-gid.patch
  0002-network-Use-JSON-syntax-for-slirp-device.patch
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch
  0004-TSC-frequencies-add-250PPM-tolerance.patch
- Add patches
  0001-Fix-qemu-system-lookup.patch
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1690286400">- Use compat cmdline options for virtiofsd
  0005-Use-compat-cmdline-options-for-virtiofsd.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1693224000">- Fix leaking file descriptor
  0006-isolation-close-file-when-exits.patch
- Fix volume detach on hotplug attachment pod delete
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
- Fix leaking tickers
  0008-fix-ticker-leak.patch
- Run helper pod as qemu user
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
- SCSI reservation: fix leftover mount and resource permissions
  0010-Fix-PR-leftover-mount-and-perms.patch
- Bump client-go (fix possible panic in discovery)
  0011-Fix-Aggregated-Discovery.patch
- Wait for new hotplug attachment pod to be ready
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
- Adapt the storage tests to the new populators flow
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
- Create export VM datavolumes compatible with populators
  0014-Export-create-populator-compatible-datavolumes-from-.patch
- Delete VMI prior to NFS server pod in tests
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1697630400">- Update to version 1.0.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.1
- Drop patches:
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
  0006-isolation-close-file-when-exits.patch
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
  0008-fix-ticker-leak.patch
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
  0010-Fix-PR-leftover-mount-and-perms.patch
  0011-Fix-Aggregated-Discovery.patch
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
  0014-Export-create-populator-compatible-datavolumes-from-.patch
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1699963200">- Update to version 1.1.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.1.0
- Drop upstreamed patches
  0001-Fix-qemu-system-lookup.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
- Add patches
  0001-Update-google.golang.org-grpc-to-1.56.3.patch (CVE-2023-44487)
  0002-virt-launcher-fix-qemu-non-root-path.patch
  0003-cgroupsv2-reconstruct-device-allowlist.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Fix seccomp profile for post-copy migration
  0004-seccomp-Use-Names-field-to-define-the-syscall.patch
- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704369600">- Update to version 1.1.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.1.1
- Drop upstreamed patches
  0001-Update-google.golang.org-grpc-to-1.56.3.patch
  0002-virt-launcher-fix-qemu-non-root-path.patch
  0003-cgroupsv2-reconstruct-device-allowlist.patch
  0004-seccomp-Use-Names-field-to-define-the-syscall.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1705060800">- Fix test with initially invalid DataVolume (bsc#1218174)
  0001-tests-Adapt-VM-phase-expectation.patch</changelog>
</package>
<package pkgid="ccbd595d8bef08cf4ff80ced3d288de8012b071485471621bd574cc85019d163" name="kubevirt" arch="src">
  <version epoch="0" ver="1.1.1" rel="150500.8.15.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Add CVE fixes
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch (CVE-2022-1996, bsc#1200528)
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch (CVE-2022-29162, bsc#1199460)
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 0.57.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.57.0
- Drop upstreamed patches:
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch
  0004-Update-libvirt-go-to-fix-memory-leak.patch
  0005-Improve-non-root-path-handling
  0006-topology-spread-constraints.patch
  0007-Fix-containerdisk-unmount-logic.patch
- Build new packages: virt-exportproxy and virt-exportserver
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665748800">- Update to version 0.58.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1670500800">- Fix libguestfs pod startup error
  0001-guestfs-flag-to-set-uid-and-gid.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1671537600">- Use JSON syntax for slirp device
  0002-network-Use-JSON-syntax-for-slirp-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683028800">- TSC frequencies: add 250PPM tolerance (bsc#1210906)
  0004-TSC-frequencies-add-250PPM-tolerance.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1689940800">- Update to version 1.0.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.0
- Drop patches
  0001-guestfs-flag-to-set-uid-and-gid.patch
  0002-network-Use-JSON-syntax-for-slirp-device.patch
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch
  0004-TSC-frequencies-add-250PPM-tolerance.patch
- Add patches
  0001-Fix-qemu-system-lookup.patch
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1690286400">- Use compat cmdline options for virtiofsd
  0005-Use-compat-cmdline-options-for-virtiofsd.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1693224000">- Fix leaking file descriptor
  0006-isolation-close-file-when-exits.patch
- Fix volume detach on hotplug attachment pod delete
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
- Fix leaking tickers
  0008-fix-ticker-leak.patch
- Run helper pod as qemu user
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
- SCSI reservation: fix leftover mount and resource permissions
  0010-Fix-PR-leftover-mount-and-perms.patch
- Bump client-go (fix possible panic in discovery)
  0011-Fix-Aggregated-Discovery.patch
- Wait for new hotplug attachment pod to be ready
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
- Adapt the storage tests to the new populators flow
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
- Create export VM datavolumes compatible with populators
  0014-Export-create-populator-compatible-datavolumes-from-.patch
- Delete VMI prior to NFS server pod in tests
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1697630400">- Update to version 1.0.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.1
- Drop patches:
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
  0006-isolation-close-file-when-exits.patch
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
  0008-fix-ticker-leak.patch
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
  0010-Fix-PR-leftover-mount-and-perms.patch
  0011-Fix-Aggregated-Discovery.patch
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
  0014-Export-create-populator-compatible-datavolumes-from-.patch
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1699963200">- Update to version 1.1.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.1.0
- Drop upstreamed patches
  0001-Fix-qemu-system-lookup.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
- Add patches
  0001-Update-google.golang.org-grpc-to-1.56.3.patch (CVE-2023-44487)
  0002-virt-launcher-fix-qemu-non-root-path.patch
  0003-cgroupsv2-reconstruct-device-allowlist.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Fix seccomp profile for post-copy migration
  0004-seccomp-Use-Names-field-to-define-the-syscall.patch
- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704369600">- Update to version 1.1.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.1.1
- Drop upstreamed patches
  0001-Update-google.golang.org-grpc-to-1.56.3.patch
  0002-virt-launcher-fix-qemu-non-root-path.patch
  0003-cgroupsv2-reconstruct-device-allowlist.patch
  0004-seccomp-Use-Names-field-to-define-the-syscall.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1705060800">- Fix test with initially invalid DataVolume (bsc#1218174)
  0001-tests-Adapt-VM-phase-expectation.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1712923200">- Improve the OrdinalPodInterfaceName mechanism (bsc#1222699)
  0002-Improve-the-handling-of-ordinal-pod-interface-name-for-upgrade.patch</changelog>
</package>
<package pkgid="0a22ddf1c28aee01adf55974eb000a8601999a7a709d3215e34efc45faf32dfb" name="kubevirt" arch="src">
  <version epoch="0" ver="1.1.1" rel="150500.8.18.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 0.57.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.57.0
- Drop upstreamed patches:
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch
  0004-Update-libvirt-go-to-fix-memory-leak.patch
  0005-Improve-non-root-path-handling
  0006-topology-spread-constraints.patch
  0007-Fix-containerdisk-unmount-logic.patch
- Build new packages: virt-exportproxy and virt-exportserver
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665748800">- Update to version 0.58.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1670500800">- Fix libguestfs pod startup error
  0001-guestfs-flag-to-set-uid-and-gid.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1671537600">- Use JSON syntax for slirp device
  0002-network-Use-JSON-syntax-for-slirp-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683028800">- TSC frequencies: add 250PPM tolerance (bsc#1210906)
  0004-TSC-frequencies-add-250PPM-tolerance.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1689940800">- Update to version 1.0.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.0
- Drop patches
  0001-guestfs-flag-to-set-uid-and-gid.patch
  0002-network-Use-JSON-syntax-for-slirp-device.patch
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch
  0004-TSC-frequencies-add-250PPM-tolerance.patch
- Add patches
  0001-Fix-qemu-system-lookup.patch
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1690286400">- Use compat cmdline options for virtiofsd
  0005-Use-compat-cmdline-options-for-virtiofsd.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1693224000">- Fix leaking file descriptor
  0006-isolation-close-file-when-exits.patch
- Fix volume detach on hotplug attachment pod delete
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
- Fix leaking tickers
  0008-fix-ticker-leak.patch
- Run helper pod as qemu user
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
- SCSI reservation: fix leftover mount and resource permissions
  0010-Fix-PR-leftover-mount-and-perms.patch
- Bump client-go (fix possible panic in discovery)
  0011-Fix-Aggregated-Discovery.patch
- Wait for new hotplug attachment pod to be ready
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
- Adapt the storage tests to the new populators flow
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
- Create export VM datavolumes compatible with populators
  0014-Export-create-populator-compatible-datavolumes-from-.patch
- Delete VMI prior to NFS server pod in tests
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1697630400">- Update to version 1.0.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.1
- Drop patches:
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
  0006-isolation-close-file-when-exits.patch
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
  0008-fix-ticker-leak.patch
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
  0010-Fix-PR-leftover-mount-and-perms.patch
  0011-Fix-Aggregated-Discovery.patch
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
  0014-Export-create-populator-compatible-datavolumes-from-.patch
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1699963200">- Update to version 1.1.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.1.0
- Drop upstreamed patches
  0001-Fix-qemu-system-lookup.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
- Add patches
  0001-Update-google.golang.org-grpc-to-1.56.3.patch (CVE-2023-44487)
  0002-virt-launcher-fix-qemu-non-root-path.patch
  0003-cgroupsv2-reconstruct-device-allowlist.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Fix seccomp profile for post-copy migration
  0004-seccomp-Use-Names-field-to-define-the-syscall.patch
- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704369600">- Update to version 1.1.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.1.1
- Drop upstreamed patches
  0001-Update-google.golang.org-grpc-to-1.56.3.patch
  0002-virt-launcher-fix-qemu-non-root-path.patch
  0003-cgroupsv2-reconstruct-device-allowlist.patch
  0004-seccomp-Use-Names-field-to-define-the-syscall.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1705060800">- Fix test with initially invalid DataVolume (bsc#1218174)
  0001-tests-Adapt-VM-phase-expectation.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1712923200">- Improve the OrdinalPodInterfaceName mechanism (bsc#1222699)
  0002-Improve-the-handling-of-ordinal-pod-interface-name-for-upgrade.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1718884800">- Collect component Role rules under operator Role instead of
  ClusterRole (bsc#1223965, CVE-2024-33394)
  0003-Collect-component-Role-rules-under-operator-Role-ins.patch</changelog>
</package>
<package pkgid="c5f2790efadf1eaba04fa2f75a6548a9c4157046f76de814997c7cc655a2cae6" name="kubevirt" arch="src">
  <version epoch="0" ver="1.1.1" rel="150500.8.9.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1655899200">- Update to version 0.54.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.54.0
- Drop upstreamed patches
  0001-improve-kubevirt-update-test.patch
  0002-use-semantic-equality-comparison.patch
  0003-Avoid-to-return-nil-failure-message.patch
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Add CVE fixes
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch (CVE-2022-1996, bsc#1200528)
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch (CVE-2022-29162, bsc#1199460)
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 0.57.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.57.0
- Drop upstreamed patches:
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch
  0004-Update-libvirt-go-to-fix-memory-leak.patch
  0005-Improve-non-root-path-handling
  0006-topology-spread-constraints.patch
  0007-Fix-containerdisk-unmount-logic.patch
- Build new packages: virt-exportproxy and virt-exportserver
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665748800">- Update to version 0.58.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1670500800">- Fix libguestfs pod startup error
  0001-guestfs-flag-to-set-uid-and-gid.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1671537600">- Use JSON syntax for slirp device
  0002-network-Use-JSON-syntax-for-slirp-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683028800">- TSC frequencies: add 250PPM tolerance (bsc#1210906)
  0004-TSC-frequencies-add-250PPM-tolerance.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1689940800">- Update to version 1.0.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.0
- Drop patches
  0001-guestfs-flag-to-set-uid-and-gid.patch
  0002-network-Use-JSON-syntax-for-slirp-device.patch
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch
  0004-TSC-frequencies-add-250PPM-tolerance.patch
- Add patches
  0001-Fix-qemu-system-lookup.patch
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1690286400">- Use compat cmdline options for virtiofsd
  0005-Use-compat-cmdline-options-for-virtiofsd.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1693224000">- Fix leaking file descriptor
  0006-isolation-close-file-when-exits.patch
- Fix volume detach on hotplug attachment pod delete
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
- Fix leaking tickers
  0008-fix-ticker-leak.patch
- Run helper pod as qemu user
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
- SCSI reservation: fix leftover mount and resource permissions
  0010-Fix-PR-leftover-mount-and-perms.patch
- Bump client-go (fix possible panic in discovery)
  0011-Fix-Aggregated-Discovery.patch
- Wait for new hotplug attachment pod to be ready
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
- Adapt the storage tests to the new populators flow
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
- Create export VM datavolumes compatible with populators
  0014-Export-create-populator-compatible-datavolumes-from-.patch
- Delete VMI prior to NFS server pod in tests
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1697630400">- Update to version 1.0.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.1
- Drop patches:
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
  0006-isolation-close-file-when-exits.patch
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
  0008-fix-ticker-leak.patch
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
  0010-Fix-PR-leftover-mount-and-perms.patch
  0011-Fix-Aggregated-Discovery.patch
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
  0014-Export-create-populator-compatible-datavolumes-from-.patch
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1699963200">- Update to version 1.1.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.1.0
- Drop upstreamed patches
  0001-Fix-qemu-system-lookup.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
- Add patches
  0001-Update-google.golang.org-grpc-to-1.56.3.patch (CVE-2023-44487)
  0002-virt-launcher-fix-qemu-non-root-path.patch
  0003-cgroupsv2-reconstruct-device-allowlist.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Fix seccomp profile for post-copy migration
  0004-seccomp-Use-Names-field-to-define-the-syscall.patch
- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704369600">- Update to version 1.1.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.1.1
- Drop upstreamed patches
  0001-Update-google.golang.org-grpc-to-1.56.3.patch
  0002-virt-launcher-fix-qemu-non-root-path.patch
  0003-cgroupsv2-reconstruct-device-allowlist.patch
  0004-seccomp-Use-Names-field-to-define-the-syscall.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1705060800">- Fix test with initially invalid DataVolume (bsc#1218174)
  0001-tests-Adapt-VM-phase-expectation.patch</changelog>
</package>
<package pkgid="9912775a547291aab25ffbc087812596918d7369294a2a0fe396082c997c9c64" name="kubevirt" arch="src">
  <version epoch="0" ver="1.2.2" rel="150500.8.21.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 0.57.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.57.0
- Drop upstreamed patches:
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch
  0004-Update-libvirt-go-to-fix-memory-leak.patch
  0005-Improve-non-root-path-handling
  0006-topology-spread-constraints.patch
  0007-Fix-containerdisk-unmount-logic.patch
- Build new packages: virt-exportproxy and virt-exportserver
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665748800">- Update to version 0.58.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1670500800">- Fix libguestfs pod startup error
  0001-guestfs-flag-to-set-uid-and-gid.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1671537600">- Use JSON syntax for slirp device
  0002-network-Use-JSON-syntax-for-slirp-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683028800">- TSC frequencies: add 250PPM tolerance (bsc#1210906)
  0004-TSC-frequencies-add-250PPM-tolerance.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1689940800">- Update to version 1.0.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.0
- Drop patches
  0001-guestfs-flag-to-set-uid-and-gid.patch
  0002-network-Use-JSON-syntax-for-slirp-device.patch
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch
  0004-TSC-frequencies-add-250PPM-tolerance.patch
- Add patches
  0001-Fix-qemu-system-lookup.patch
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1690286400">- Use compat cmdline options for virtiofsd
  0005-Use-compat-cmdline-options-for-virtiofsd.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1693224000">- Fix leaking file descriptor
  0006-isolation-close-file-when-exits.patch
- Fix volume detach on hotplug attachment pod delete
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
- Fix leaking tickers
  0008-fix-ticker-leak.patch
- Run helper pod as qemu user
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
- SCSI reservation: fix leftover mount and resource permissions
  0010-Fix-PR-leftover-mount-and-perms.patch
- Bump client-go (fix possible panic in discovery)
  0011-Fix-Aggregated-Discovery.patch
- Wait for new hotplug attachment pod to be ready
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
- Adapt the storage tests to the new populators flow
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
- Create export VM datavolumes compatible with populators
  0014-Export-create-populator-compatible-datavolumes-from-.patch
- Delete VMI prior to NFS server pod in tests
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1697630400">- Update to version 1.0.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.1
- Drop patches:
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
  0006-isolation-close-file-when-exits.patch
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
  0008-fix-ticker-leak.patch
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
  0010-Fix-PR-leftover-mount-and-perms.patch
  0011-Fix-Aggregated-Discovery.patch
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
  0014-Export-create-populator-compatible-datavolumes-from-.patch
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1699963200">- Update to version 1.1.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.1.0
- Drop upstreamed patches
  0001-Fix-qemu-system-lookup.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
- Add patches
  0001-Update-google.golang.org-grpc-to-1.56.3.patch (CVE-2023-44487)
  0002-virt-launcher-fix-qemu-non-root-path.patch
  0003-cgroupsv2-reconstruct-device-allowlist.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Fix seccomp profile for post-copy migration
  0004-seccomp-Use-Names-field-to-define-the-syscall.patch
- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704369600">- Update to version 1.1.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.1.1
- Drop upstreamed patches
  0001-Update-google.golang.org-grpc-to-1.56.3.patch
  0002-virt-launcher-fix-qemu-non-root-path.patch
  0003-cgroupsv2-reconstruct-device-allowlist.patch
  0004-seccomp-Use-Names-field-to-define-the-syscall.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1705060800">- Fix test with initially invalid DataVolume (bsc#1218174)
  0001-tests-Adapt-VM-phase-expectation.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1712923200">- Improve the OrdinalPodInterfaceName mechanism (bsc#1222699)
  0002-Improve-the-handling-of-ordinal-pod-interface-name-for-upgrade.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1718884800">- Collect component Role rules under operator Role instead of
  ClusterRole (bsc#1223965, CVE-2024-33394)
  0003-Collect-component-Role-rules-under-operator-Role-ins.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1720440000">- Update to version 1.2.2
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.2.2
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.2.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.2.0
- Drop patches
  0001-tests-Adapt-VM-phase-expectation.patch
  0002-Improve-the-handling-of-ordinal-pod-interface-name-for-upgrade.patch
  0003-Collect-component-Role-rules-under-operator-Role-ins.patch
- Add patch
  0001-Collect-component-Role-rules-under-operator-Role-ins.patch
- Pack configuration files for libvirt</changelog>
</package>
<package pkgid="14f76f3c1eedb6d1d0db32372db92a2293a781d7da82d43fde2912e91dccb9e8" name="kubevirt-manifests" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="150500.8.3.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1645444800">- Allow to configure utility containers for update test
  0001-improve-kubevirt-update-test.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645531200">- Drop kubevirt-psp-caasp.yaml</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Use semantic equality comparison
  0002-use-semantic-equality-comparison.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393601">- Avoid to return nil failure message
  0003-Avoid-to-return-nil-failure-message.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393602">- Increase storage requirements in _constraints
- Pack nft rules and nsswitch.conf for virt-handler
- Only create 1MiB-aligned disk images (bsc#1199603)
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1655899200">- Update to version 0.54.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.54.0
- Drop upstreamed patches
  0001-improve-kubevirt-update-test.patch
  0002-use-semantic-equality-comparison.patch
  0003-Avoid-to-return-nil-failure-message.patch
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Add CVE fixes
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch (CVE-2022-1996, bsc#1200528)
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch (CVE-2022-29162, bsc#1199460)
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 0.57.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.57.0
- Drop upstreamed patches:
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch
  0004-Update-libvirt-go-to-fix-memory-leak.patch
  0005-Improve-non-root-path-handling
  0006-topology-spread-constraints.patch
  0007-Fix-containerdisk-unmount-logic.patch
- Build new packages: virt-exportproxy and virt-exportserver
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665748800">- Update to version 0.58.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1670500800">- Fix libguestfs pod startup error
  0001-guestfs-flag-to-set-uid-and-gid.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1671537600">- Use JSON syntax for slirp device
  0002-network-Use-JSON-syntax-for-slirp-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683028800">- TSC frequencies: add 250PPM tolerance (bsc#1210906)
  0004-TSC-frequencies-add-250PPM-tolerance.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1689940800">- Update to version 1.0.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.0
- Drop patches
  0001-guestfs-flag-to-set-uid-and-gid.patch
  0002-network-Use-JSON-syntax-for-slirp-device.patch
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch
  0004-TSC-frequencies-add-250PPM-tolerance.patch
- Add patches
  0001-Fix-qemu-system-lookup.patch
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1690286400">- Use compat cmdline options for virtiofsd
  0005-Use-compat-cmdline-options-for-virtiofsd.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1693224000">- Fix leaking file descriptor
  0006-isolation-close-file-when-exits.patch
- Fix volume detach on hotplug attachment pod delete
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
- Fix leaking tickers
  0008-fix-ticker-leak.patch
- Run helper pod as qemu user
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
- SCSI reservation: fix leftover mount and resource permissions
  0010-Fix-PR-leftover-mount-and-perms.patch
- Bump client-go (fix possible panic in discovery)
  0011-Fix-Aggregated-Discovery.patch
- Wait for new hotplug attachment pod to be ready
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
- Adapt the storage tests to the new populators flow
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
- Create export VM datavolumes compatible with populators
  0014-Export-create-populator-compatible-datavolumes-from-.patch
- Delete VMI prior to NFS server pod in tests
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch</changelog>
</package>
<package pkgid="0237cf36689304ec618e88d147feed55bbb8d2c0b6d5098da5a9aa7d1b9a8050" name="kubevirt-manifests" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="150500.8.6.1"/>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Use semantic equality comparison
  0002-use-semantic-equality-comparison.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393601">- Avoid to return nil failure message
  0003-Avoid-to-return-nil-failure-message.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393602">- Increase storage requirements in _constraints
- Pack nft rules and nsswitch.conf for virt-handler
- Only create 1MiB-aligned disk images (bsc#1199603)
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1655899200">- Update to version 0.54.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.54.0
- Drop upstreamed patches
  0001-improve-kubevirt-update-test.patch
  0002-use-semantic-equality-comparison.patch
  0003-Avoid-to-return-nil-failure-message.patch
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Add CVE fixes
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch (CVE-2022-1996, bsc#1200528)
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch (CVE-2022-29162, bsc#1199460)
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 0.57.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.57.0
- Drop upstreamed patches:
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch
  0004-Update-libvirt-go-to-fix-memory-leak.patch
  0005-Improve-non-root-path-handling
  0006-topology-spread-constraints.patch
  0007-Fix-containerdisk-unmount-logic.patch
- Build new packages: virt-exportproxy and virt-exportserver
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665748800">- Update to version 0.58.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1670500800">- Fix libguestfs pod startup error
  0001-guestfs-flag-to-set-uid-and-gid.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1671537600">- Use JSON syntax for slirp device
  0002-network-Use-JSON-syntax-for-slirp-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683028800">- TSC frequencies: add 250PPM tolerance (bsc#1210906)
  0004-TSC-frequencies-add-250PPM-tolerance.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1689940800">- Update to version 1.0.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.0
- Drop patches
  0001-guestfs-flag-to-set-uid-and-gid.patch
  0002-network-Use-JSON-syntax-for-slirp-device.patch
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch
  0004-TSC-frequencies-add-250PPM-tolerance.patch
- Add patches
  0001-Fix-qemu-system-lookup.patch
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1690286400">- Use compat cmdline options for virtiofsd
  0005-Use-compat-cmdline-options-for-virtiofsd.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1693224000">- Fix leaking file descriptor
  0006-isolation-close-file-when-exits.patch
- Fix volume detach on hotplug attachment pod delete
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
- Fix leaking tickers
  0008-fix-ticker-leak.patch
- Run helper pod as qemu user
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
- SCSI reservation: fix leftover mount and resource permissions
  0010-Fix-PR-leftover-mount-and-perms.patch
- Bump client-go (fix possible panic in discovery)
  0011-Fix-Aggregated-Discovery.patch
- Wait for new hotplug attachment pod to be ready
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
- Adapt the storage tests to the new populators flow
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
- Create export VM datavolumes compatible with populators
  0014-Export-create-populator-compatible-datavolumes-from-.patch
- Delete VMI prior to NFS server pod in tests
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1697630400">- Update to version 1.0.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.1
- Drop patches:
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
  0006-isolation-close-file-when-exits.patch
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
  0008-fix-ticker-leak.patch
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
  0010-Fix-PR-leftover-mount-and-perms.patch
  0011-Fix-Aggregated-Discovery.patch
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
  0014-Export-create-populator-compatible-datavolumes-from-.patch
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1699963200">- Update to version 1.1.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.1.0
- Drop upstreamed patches
  0001-Fix-qemu-system-lookup.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
- Add patches
  0001-Update-google.golang.org-grpc-to-1.56.3.patch (CVE-2023-44487)
  0002-virt-launcher-fix-qemu-non-root-path.patch
  0003-cgroupsv2-reconstruct-device-allowlist.patch</changelog>
</package>
<package pkgid="f26a7327010e1ab7154d5866a57778123a5d29f07bd43d380ee0e6a4796ffe2e" name="kubevirt-manifests" arch="x86_64">
  <version epoch="0" ver="1.1.1" rel="150500.8.12.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1655899200">- Update to version 0.54.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.54.0
- Drop upstreamed patches
  0001-improve-kubevirt-update-test.patch
  0002-use-semantic-equality-comparison.patch
  0003-Avoid-to-return-nil-failure-message.patch
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Add CVE fixes
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch (CVE-2022-1996, bsc#1200528)
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch (CVE-2022-29162, bsc#1199460)
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 0.57.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.57.0
- Drop upstreamed patches:
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch
  0004-Update-libvirt-go-to-fix-memory-leak.patch
  0005-Improve-non-root-path-handling
  0006-topology-spread-constraints.patch
  0007-Fix-containerdisk-unmount-logic.patch
- Build new packages: virt-exportproxy and virt-exportserver
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665748800">- Update to version 0.58.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1670500800">- Fix libguestfs pod startup error
  0001-guestfs-flag-to-set-uid-and-gid.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1671537600">- Use JSON syntax for slirp device
  0002-network-Use-JSON-syntax-for-slirp-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683028800">- TSC frequencies: add 250PPM tolerance (bsc#1210906)
  0004-TSC-frequencies-add-250PPM-tolerance.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1689940800">- Update to version 1.0.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.0
- Drop patches
  0001-guestfs-flag-to-set-uid-and-gid.patch
  0002-network-Use-JSON-syntax-for-slirp-device.patch
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch
  0004-TSC-frequencies-add-250PPM-tolerance.patch
- Add patches
  0001-Fix-qemu-system-lookup.patch
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1690286400">- Use compat cmdline options for virtiofsd
  0005-Use-compat-cmdline-options-for-virtiofsd.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1693224000">- Fix leaking file descriptor
  0006-isolation-close-file-when-exits.patch
- Fix volume detach on hotplug attachment pod delete
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
- Fix leaking tickers
  0008-fix-ticker-leak.patch
- Run helper pod as qemu user
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
- SCSI reservation: fix leftover mount and resource permissions
  0010-Fix-PR-leftover-mount-and-perms.patch
- Bump client-go (fix possible panic in discovery)
  0011-Fix-Aggregated-Discovery.patch
- Wait for new hotplug attachment pod to be ready
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
- Adapt the storage tests to the new populators flow
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
- Create export VM datavolumes compatible with populators
  0014-Export-create-populator-compatible-datavolumes-from-.patch
- Delete VMI prior to NFS server pod in tests
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1697630400">- Update to version 1.0.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.1
- Drop patches:
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
  0006-isolation-close-file-when-exits.patch
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
  0008-fix-ticker-leak.patch
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
  0010-Fix-PR-leftover-mount-and-perms.patch
  0011-Fix-Aggregated-Discovery.patch
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
  0014-Export-create-populator-compatible-datavolumes-from-.patch
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1699963200">- Update to version 1.1.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.1.0
- Drop upstreamed patches
  0001-Fix-qemu-system-lookup.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
- Add patches
  0001-Update-google.golang.org-grpc-to-1.56.3.patch (CVE-2023-44487)
  0002-virt-launcher-fix-qemu-non-root-path.patch
  0003-cgroupsv2-reconstruct-device-allowlist.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Fix seccomp profile for post-copy migration
  0004-seccomp-Use-Names-field-to-define-the-syscall.patch
- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704369600">- Update to version 1.1.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.1.1
- Drop upstreamed patches
  0001-Update-google.golang.org-grpc-to-1.56.3.patch
  0002-virt-launcher-fix-qemu-non-root-path.patch
  0003-cgroupsv2-reconstruct-device-allowlist.patch
  0004-seccomp-Use-Names-field-to-define-the-syscall.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1705060800">- Fix test with initially invalid DataVolume (bsc#1218174)
  0001-tests-Adapt-VM-phase-expectation.patch</changelog>
</package>
<package pkgid="bc40b90520ce1860fad7618d4587eedd09deaa45c3054a85bca46cc1e250f8cc" name="kubevirt-manifests" arch="x86_64">
  <version epoch="0" ver="1.1.1" rel="150500.8.15.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Add CVE fixes
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch (CVE-2022-1996, bsc#1200528)
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch (CVE-2022-29162, bsc#1199460)
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 0.57.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.57.0
- Drop upstreamed patches:
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch
  0004-Update-libvirt-go-to-fix-memory-leak.patch
  0005-Improve-non-root-path-handling
  0006-topology-spread-constraints.patch
  0007-Fix-containerdisk-unmount-logic.patch
- Build new packages: virt-exportproxy and virt-exportserver
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665748800">- Update to version 0.58.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1670500800">- Fix libguestfs pod startup error
  0001-guestfs-flag-to-set-uid-and-gid.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1671537600">- Use JSON syntax for slirp device
  0002-network-Use-JSON-syntax-for-slirp-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683028800">- TSC frequencies: add 250PPM tolerance (bsc#1210906)
  0004-TSC-frequencies-add-250PPM-tolerance.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1689940800">- Update to version 1.0.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.0
- Drop patches
  0001-guestfs-flag-to-set-uid-and-gid.patch
  0002-network-Use-JSON-syntax-for-slirp-device.patch
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch
  0004-TSC-frequencies-add-250PPM-tolerance.patch
- Add patches
  0001-Fix-qemu-system-lookup.patch
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1690286400">- Use compat cmdline options for virtiofsd
  0005-Use-compat-cmdline-options-for-virtiofsd.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1693224000">- Fix leaking file descriptor
  0006-isolation-close-file-when-exits.patch
- Fix volume detach on hotplug attachment pod delete
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
- Fix leaking tickers
  0008-fix-ticker-leak.patch
- Run helper pod as qemu user
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
- SCSI reservation: fix leftover mount and resource permissions
  0010-Fix-PR-leftover-mount-and-perms.patch
- Bump client-go (fix possible panic in discovery)
  0011-Fix-Aggregated-Discovery.patch
- Wait for new hotplug attachment pod to be ready
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
- Adapt the storage tests to the new populators flow
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
- Create export VM datavolumes compatible with populators
  0014-Export-create-populator-compatible-datavolumes-from-.patch
- Delete VMI prior to NFS server pod in tests
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1697630400">- Update to version 1.0.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.1
- Drop patches:
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
  0006-isolation-close-file-when-exits.patch
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
  0008-fix-ticker-leak.patch
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
  0010-Fix-PR-leftover-mount-and-perms.patch
  0011-Fix-Aggregated-Discovery.patch
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
  0014-Export-create-populator-compatible-datavolumes-from-.patch
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1699963200">- Update to version 1.1.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.1.0
- Drop upstreamed patches
  0001-Fix-qemu-system-lookup.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
- Add patches
  0001-Update-google.golang.org-grpc-to-1.56.3.patch (CVE-2023-44487)
  0002-virt-launcher-fix-qemu-non-root-path.patch
  0003-cgroupsv2-reconstruct-device-allowlist.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Fix seccomp profile for post-copy migration
  0004-seccomp-Use-Names-field-to-define-the-syscall.patch
- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704369600">- Update to version 1.1.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.1.1
- Drop upstreamed patches
  0001-Update-google.golang.org-grpc-to-1.56.3.patch
  0002-virt-launcher-fix-qemu-non-root-path.patch
  0003-cgroupsv2-reconstruct-device-allowlist.patch
  0004-seccomp-Use-Names-field-to-define-the-syscall.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1705060800">- Fix test with initially invalid DataVolume (bsc#1218174)
  0001-tests-Adapt-VM-phase-expectation.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1712923200">- Improve the OrdinalPodInterfaceName mechanism (bsc#1222699)
  0002-Improve-the-handling-of-ordinal-pod-interface-name-for-upgrade.patch</changelog>
</package>
<package pkgid="168533d77a881d503969018b8f9bba0e90f9134aa087ab12b33b06956f87e873" name="kubevirt-manifests" arch="x86_64">
  <version epoch="0" ver="1.1.1" rel="150500.8.18.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 0.57.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.57.0
- Drop upstreamed patches:
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch
  0004-Update-libvirt-go-to-fix-memory-leak.patch
  0005-Improve-non-root-path-handling
  0006-topology-spread-constraints.patch
  0007-Fix-containerdisk-unmount-logic.patch
- Build new packages: virt-exportproxy and virt-exportserver
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665748800">- Update to version 0.58.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1670500800">- Fix libguestfs pod startup error
  0001-guestfs-flag-to-set-uid-and-gid.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1671537600">- Use JSON syntax for slirp device
  0002-network-Use-JSON-syntax-for-slirp-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683028800">- TSC frequencies: add 250PPM tolerance (bsc#1210906)
  0004-TSC-frequencies-add-250PPM-tolerance.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1689940800">- Update to version 1.0.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.0
- Drop patches
  0001-guestfs-flag-to-set-uid-and-gid.patch
  0002-network-Use-JSON-syntax-for-slirp-device.patch
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch
  0004-TSC-frequencies-add-250PPM-tolerance.patch
- Add patches
  0001-Fix-qemu-system-lookup.patch
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1690286400">- Use compat cmdline options for virtiofsd
  0005-Use-compat-cmdline-options-for-virtiofsd.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1693224000">- Fix leaking file descriptor
  0006-isolation-close-file-when-exits.patch
- Fix volume detach on hotplug attachment pod delete
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
- Fix leaking tickers
  0008-fix-ticker-leak.patch
- Run helper pod as qemu user
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
- SCSI reservation: fix leftover mount and resource permissions
  0010-Fix-PR-leftover-mount-and-perms.patch
- Bump client-go (fix possible panic in discovery)
  0011-Fix-Aggregated-Discovery.patch
- Wait for new hotplug attachment pod to be ready
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
- Adapt the storage tests to the new populators flow
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
- Create export VM datavolumes compatible with populators
  0014-Export-create-populator-compatible-datavolumes-from-.patch
- Delete VMI prior to NFS server pod in tests
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1697630400">- Update to version 1.0.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.1
- Drop patches:
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
  0006-isolation-close-file-when-exits.patch
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
  0008-fix-ticker-leak.patch
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
  0010-Fix-PR-leftover-mount-and-perms.patch
  0011-Fix-Aggregated-Discovery.patch
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
  0014-Export-create-populator-compatible-datavolumes-from-.patch
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1699963200">- Update to version 1.1.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.1.0
- Drop upstreamed patches
  0001-Fix-qemu-system-lookup.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
- Add patches
  0001-Update-google.golang.org-grpc-to-1.56.3.patch (CVE-2023-44487)
  0002-virt-launcher-fix-qemu-non-root-path.patch
  0003-cgroupsv2-reconstruct-device-allowlist.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Fix seccomp profile for post-copy migration
  0004-seccomp-Use-Names-field-to-define-the-syscall.patch
- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704369600">- Update to version 1.1.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.1.1
- Drop upstreamed patches
  0001-Update-google.golang.org-grpc-to-1.56.3.patch
  0002-virt-launcher-fix-qemu-non-root-path.patch
  0003-cgroupsv2-reconstruct-device-allowlist.patch
  0004-seccomp-Use-Names-field-to-define-the-syscall.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1705060800">- Fix test with initially invalid DataVolume (bsc#1218174)
  0001-tests-Adapt-VM-phase-expectation.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1712923200">- Improve the OrdinalPodInterfaceName mechanism (bsc#1222699)
  0002-Improve-the-handling-of-ordinal-pod-interface-name-for-upgrade.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1718884800">- Collect component Role rules under operator Role instead of
  ClusterRole (bsc#1223965, CVE-2024-33394)
  0003-Collect-component-Role-rules-under-operator-Role-ins.patch</changelog>
</package>
<package pkgid="b1c47530339f46082a9fa722fc2fe1b2073ed162a13e010b88166fdc52b72321" name="kubevirt-manifests" arch="x86_64">
  <version epoch="0" ver="1.1.1" rel="150500.8.9.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1655899200">- Update to version 0.54.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.54.0
- Drop upstreamed patches
  0001-improve-kubevirt-update-test.patch
  0002-use-semantic-equality-comparison.patch
  0003-Avoid-to-return-nil-failure-message.patch
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Add CVE fixes
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch (CVE-2022-1996, bsc#1200528)
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch (CVE-2022-29162, bsc#1199460)
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 0.57.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.57.0
- Drop upstreamed patches:
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch
  0004-Update-libvirt-go-to-fix-memory-leak.patch
  0005-Improve-non-root-path-handling
  0006-topology-spread-constraints.patch
  0007-Fix-containerdisk-unmount-logic.patch
- Build new packages: virt-exportproxy and virt-exportserver
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665748800">- Update to version 0.58.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1670500800">- Fix libguestfs pod startup error
  0001-guestfs-flag-to-set-uid-and-gid.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1671537600">- Use JSON syntax for slirp device
  0002-network-Use-JSON-syntax-for-slirp-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683028800">- TSC frequencies: add 250PPM tolerance (bsc#1210906)
  0004-TSC-frequencies-add-250PPM-tolerance.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1689940800">- Update to version 1.0.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.0
- Drop patches
  0001-guestfs-flag-to-set-uid-and-gid.patch
  0002-network-Use-JSON-syntax-for-slirp-device.patch
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch
  0004-TSC-frequencies-add-250PPM-tolerance.patch
- Add patches
  0001-Fix-qemu-system-lookup.patch
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1690286400">- Use compat cmdline options for virtiofsd
  0005-Use-compat-cmdline-options-for-virtiofsd.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1693224000">- Fix leaking file descriptor
  0006-isolation-close-file-when-exits.patch
- Fix volume detach on hotplug attachment pod delete
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
- Fix leaking tickers
  0008-fix-ticker-leak.patch
- Run helper pod as qemu user
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
- SCSI reservation: fix leftover mount and resource permissions
  0010-Fix-PR-leftover-mount-and-perms.patch
- Bump client-go (fix possible panic in discovery)
  0011-Fix-Aggregated-Discovery.patch
- Wait for new hotplug attachment pod to be ready
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
- Adapt the storage tests to the new populators flow
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
- Create export VM datavolumes compatible with populators
  0014-Export-create-populator-compatible-datavolumes-from-.patch
- Delete VMI prior to NFS server pod in tests
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1697630400">- Update to version 1.0.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.1
- Drop patches:
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
  0006-isolation-close-file-when-exits.patch
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
  0008-fix-ticker-leak.patch
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
  0010-Fix-PR-leftover-mount-and-perms.patch
  0011-Fix-Aggregated-Discovery.patch
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
  0014-Export-create-populator-compatible-datavolumes-from-.patch
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1699963200">- Update to version 1.1.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.1.0
- Drop upstreamed patches
  0001-Fix-qemu-system-lookup.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
- Add patches
  0001-Update-google.golang.org-grpc-to-1.56.3.patch (CVE-2023-44487)
  0002-virt-launcher-fix-qemu-non-root-path.patch
  0003-cgroupsv2-reconstruct-device-allowlist.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Fix seccomp profile for post-copy migration
  0004-seccomp-Use-Names-field-to-define-the-syscall.patch
- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704369600">- Update to version 1.1.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.1.1
- Drop upstreamed patches
  0001-Update-google.golang.org-grpc-to-1.56.3.patch
  0002-virt-launcher-fix-qemu-non-root-path.patch
  0003-cgroupsv2-reconstruct-device-allowlist.patch
  0004-seccomp-Use-Names-field-to-define-the-syscall.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1705060800">- Fix test with initially invalid DataVolume (bsc#1218174)
  0001-tests-Adapt-VM-phase-expectation.patch</changelog>
</package>
<package pkgid="ac2f514e854f16baaaac2dc6f5bf957245cce03c9fab9ecc3a4af431c7fe525b" name="kubevirt-manifests" arch="x86_64">
  <version epoch="0" ver="1.2.2" rel="150500.8.21.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 0.57.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.57.0
- Drop upstreamed patches:
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch
  0004-Update-libvirt-go-to-fix-memory-leak.patch
  0005-Improve-non-root-path-handling
  0006-topology-spread-constraints.patch
  0007-Fix-containerdisk-unmount-logic.patch
- Build new packages: virt-exportproxy and virt-exportserver
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665748800">- Update to version 0.58.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1670500800">- Fix libguestfs pod startup error
  0001-guestfs-flag-to-set-uid-and-gid.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1671537600">- Use JSON syntax for slirp device
  0002-network-Use-JSON-syntax-for-slirp-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683028800">- TSC frequencies: add 250PPM tolerance (bsc#1210906)
  0004-TSC-frequencies-add-250PPM-tolerance.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1689940800">- Update to version 1.0.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.0
- Drop patches
  0001-guestfs-flag-to-set-uid-and-gid.patch
  0002-network-Use-JSON-syntax-for-slirp-device.patch
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch
  0004-TSC-frequencies-add-250PPM-tolerance.patch
- Add patches
  0001-Fix-qemu-system-lookup.patch
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1690286400">- Use compat cmdline options for virtiofsd
  0005-Use-compat-cmdline-options-for-virtiofsd.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1693224000">- Fix leaking file descriptor
  0006-isolation-close-file-when-exits.patch
- Fix volume detach on hotplug attachment pod delete
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
- Fix leaking tickers
  0008-fix-ticker-leak.patch
- Run helper pod as qemu user
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
- SCSI reservation: fix leftover mount and resource permissions
  0010-Fix-PR-leftover-mount-and-perms.patch
- Bump client-go (fix possible panic in discovery)
  0011-Fix-Aggregated-Discovery.patch
- Wait for new hotplug attachment pod to be ready
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
- Adapt the storage tests to the new populators flow
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
- Create export VM datavolumes compatible with populators
  0014-Export-create-populator-compatible-datavolumes-from-.patch
- Delete VMI prior to NFS server pod in tests
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1697630400">- Update to version 1.0.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.1
- Drop patches:
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
  0006-isolation-close-file-when-exits.patch
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
  0008-fix-ticker-leak.patch
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
  0010-Fix-PR-leftover-mount-and-perms.patch
  0011-Fix-Aggregated-Discovery.patch
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
  0014-Export-create-populator-compatible-datavolumes-from-.patch
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1699963200">- Update to version 1.1.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.1.0
- Drop upstreamed patches
  0001-Fix-qemu-system-lookup.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
- Add patches
  0001-Update-google.golang.org-grpc-to-1.56.3.patch (CVE-2023-44487)
  0002-virt-launcher-fix-qemu-non-root-path.patch
  0003-cgroupsv2-reconstruct-device-allowlist.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Fix seccomp profile for post-copy migration
  0004-seccomp-Use-Names-field-to-define-the-syscall.patch
- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704369600">- Update to version 1.1.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.1.1
- Drop upstreamed patches
  0001-Update-google.golang.org-grpc-to-1.56.3.patch
  0002-virt-launcher-fix-qemu-non-root-path.patch
  0003-cgroupsv2-reconstruct-device-allowlist.patch
  0004-seccomp-Use-Names-field-to-define-the-syscall.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1705060800">- Fix test with initially invalid DataVolume (bsc#1218174)
  0001-tests-Adapt-VM-phase-expectation.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1712923200">- Improve the OrdinalPodInterfaceName mechanism (bsc#1222699)
  0002-Improve-the-handling-of-ordinal-pod-interface-name-for-upgrade.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1718884800">- Collect component Role rules under operator Role instead of
  ClusterRole (bsc#1223965, CVE-2024-33394)
  0003-Collect-component-Role-rules-under-operator-Role-ins.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1720440000">- Update to version 1.2.2
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.2.2
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.2.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.2.0
- Drop patches
  0001-tests-Adapt-VM-phase-expectation.patch
  0002-Improve-the-handling-of-ordinal-pod-interface-name-for-upgrade.patch
  0003-Collect-component-Role-rules-under-operator-Role-ins.patch
- Add patch
  0001-Collect-component-Role-rules-under-operator-Role-ins.patch
- Pack configuration files for libvirt</changelog>
</package>
<package pkgid="ac30890a4499cf326783f22b3ae18151f206ce550fa171e3f9eb4d7fc512395e" name="kubevirt-virtctl" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="150500.8.3.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1645444800">- Allow to configure utility containers for update test
  0001-improve-kubevirt-update-test.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645531200">- Drop kubevirt-psp-caasp.yaml</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Use semantic equality comparison
  0002-use-semantic-equality-comparison.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393601">- Avoid to return nil failure message
  0003-Avoid-to-return-nil-failure-message.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393602">- Increase storage requirements in _constraints
- Pack nft rules and nsswitch.conf for virt-handler
- Only create 1MiB-aligned disk images (bsc#1199603)
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1655899200">- Update to version 0.54.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.54.0
- Drop upstreamed patches
  0001-improve-kubevirt-update-test.patch
  0002-use-semantic-equality-comparison.patch
  0003-Avoid-to-return-nil-failure-message.patch
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Add CVE fixes
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch (CVE-2022-1996, bsc#1200528)
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch (CVE-2022-29162, bsc#1199460)
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 0.57.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.57.0
- Drop upstreamed patches:
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch
  0004-Update-libvirt-go-to-fix-memory-leak.patch
  0005-Improve-non-root-path-handling
  0006-topology-spread-constraints.patch
  0007-Fix-containerdisk-unmount-logic.patch
- Build new packages: virt-exportproxy and virt-exportserver
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665748800">- Update to version 0.58.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1670500800">- Fix libguestfs pod startup error
  0001-guestfs-flag-to-set-uid-and-gid.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1671537600">- Use JSON syntax for slirp device
  0002-network-Use-JSON-syntax-for-slirp-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683028800">- TSC frequencies: add 250PPM tolerance (bsc#1210906)
  0004-TSC-frequencies-add-250PPM-tolerance.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1689940800">- Update to version 1.0.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.0
- Drop patches
  0001-guestfs-flag-to-set-uid-and-gid.patch
  0002-network-Use-JSON-syntax-for-slirp-device.patch
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch
  0004-TSC-frequencies-add-250PPM-tolerance.patch
- Add patches
  0001-Fix-qemu-system-lookup.patch
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1690286400">- Use compat cmdline options for virtiofsd
  0005-Use-compat-cmdline-options-for-virtiofsd.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1693224000">- Fix leaking file descriptor
  0006-isolation-close-file-when-exits.patch
- Fix volume detach on hotplug attachment pod delete
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
- Fix leaking tickers
  0008-fix-ticker-leak.patch
- Run helper pod as qemu user
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
- SCSI reservation: fix leftover mount and resource permissions
  0010-Fix-PR-leftover-mount-and-perms.patch
- Bump client-go (fix possible panic in discovery)
  0011-Fix-Aggregated-Discovery.patch
- Wait for new hotplug attachment pod to be ready
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
- Adapt the storage tests to the new populators flow
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
- Create export VM datavolumes compatible with populators
  0014-Export-create-populator-compatible-datavolumes-from-.patch
- Delete VMI prior to NFS server pod in tests
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch</changelog>
</package>
<package pkgid="7042c44375860cf9683300cb2f5f01dfc7dfda8a211553ceb4cc2f36e5e4101a" name="kubevirt-virtctl" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="150500.8.6.1"/>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Use semantic equality comparison
  0002-use-semantic-equality-comparison.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393601">- Avoid to return nil failure message
  0003-Avoid-to-return-nil-failure-message.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393602">- Increase storage requirements in _constraints
- Pack nft rules and nsswitch.conf for virt-handler
- Only create 1MiB-aligned disk images (bsc#1199603)
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1655899200">- Update to version 0.54.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.54.0
- Drop upstreamed patches
  0001-improve-kubevirt-update-test.patch
  0002-use-semantic-equality-comparison.patch
  0003-Avoid-to-return-nil-failure-message.patch
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Add CVE fixes
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch (CVE-2022-1996, bsc#1200528)
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch (CVE-2022-29162, bsc#1199460)
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 0.57.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.57.0
- Drop upstreamed patches:
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch
  0004-Update-libvirt-go-to-fix-memory-leak.patch
  0005-Improve-non-root-path-handling
  0006-topology-spread-constraints.patch
  0007-Fix-containerdisk-unmount-logic.patch
- Build new packages: virt-exportproxy and virt-exportserver
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665748800">- Update to version 0.58.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1670500800">- Fix libguestfs pod startup error
  0001-guestfs-flag-to-set-uid-and-gid.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1671537600">- Use JSON syntax for slirp device
  0002-network-Use-JSON-syntax-for-slirp-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683028800">- TSC frequencies: add 250PPM tolerance (bsc#1210906)
  0004-TSC-frequencies-add-250PPM-tolerance.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1689940800">- Update to version 1.0.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.0
- Drop patches
  0001-guestfs-flag-to-set-uid-and-gid.patch
  0002-network-Use-JSON-syntax-for-slirp-device.patch
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch
  0004-TSC-frequencies-add-250PPM-tolerance.patch
- Add patches
  0001-Fix-qemu-system-lookup.patch
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1690286400">- Use compat cmdline options for virtiofsd
  0005-Use-compat-cmdline-options-for-virtiofsd.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1693224000">- Fix leaking file descriptor
  0006-isolation-close-file-when-exits.patch
- Fix volume detach on hotplug attachment pod delete
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
- Fix leaking tickers
  0008-fix-ticker-leak.patch
- Run helper pod as qemu user
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
- SCSI reservation: fix leftover mount and resource permissions
  0010-Fix-PR-leftover-mount-and-perms.patch
- Bump client-go (fix possible panic in discovery)
  0011-Fix-Aggregated-Discovery.patch
- Wait for new hotplug attachment pod to be ready
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
- Adapt the storage tests to the new populators flow
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
- Create export VM datavolumes compatible with populators
  0014-Export-create-populator-compatible-datavolumes-from-.patch
- Delete VMI prior to NFS server pod in tests
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1697630400">- Update to version 1.0.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.1
- Drop patches:
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
  0006-isolation-close-file-when-exits.patch
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
  0008-fix-ticker-leak.patch
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
  0010-Fix-PR-leftover-mount-and-perms.patch
  0011-Fix-Aggregated-Discovery.patch
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
  0014-Export-create-populator-compatible-datavolumes-from-.patch
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1699963200">- Update to version 1.1.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.1.0
- Drop upstreamed patches
  0001-Fix-qemu-system-lookup.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
- Add patches
  0001-Update-google.golang.org-grpc-to-1.56.3.patch (CVE-2023-44487)
  0002-virt-launcher-fix-qemu-non-root-path.patch
  0003-cgroupsv2-reconstruct-device-allowlist.patch</changelog>
</package>
<package pkgid="bd51fcb782757411279323d415c1c46a6cd21acc4d23bb3692d835b4d5574270" name="kubevirt-virtctl" arch="x86_64">
  <version epoch="0" ver="1.1.1" rel="150500.8.12.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1655899200">- Update to version 0.54.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.54.0
- Drop upstreamed patches
  0001-improve-kubevirt-update-test.patch
  0002-use-semantic-equality-comparison.patch
  0003-Avoid-to-return-nil-failure-message.patch
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Add CVE fixes
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch (CVE-2022-1996, bsc#1200528)
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch (CVE-2022-29162, bsc#1199460)
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 0.57.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.57.0
- Drop upstreamed patches:
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch
  0004-Update-libvirt-go-to-fix-memory-leak.patch
  0005-Improve-non-root-path-handling
  0006-topology-spread-constraints.patch
  0007-Fix-containerdisk-unmount-logic.patch
- Build new packages: virt-exportproxy and virt-exportserver
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665748800">- Update to version 0.58.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1670500800">- Fix libguestfs pod startup error
  0001-guestfs-flag-to-set-uid-and-gid.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1671537600">- Use JSON syntax for slirp device
  0002-network-Use-JSON-syntax-for-slirp-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683028800">- TSC frequencies: add 250PPM tolerance (bsc#1210906)
  0004-TSC-frequencies-add-250PPM-tolerance.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1689940800">- Update to version 1.0.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.0
- Drop patches
  0001-guestfs-flag-to-set-uid-and-gid.patch
  0002-network-Use-JSON-syntax-for-slirp-device.patch
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch
  0004-TSC-frequencies-add-250PPM-tolerance.patch
- Add patches
  0001-Fix-qemu-system-lookup.patch
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1690286400">- Use compat cmdline options for virtiofsd
  0005-Use-compat-cmdline-options-for-virtiofsd.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1693224000">- Fix leaking file descriptor
  0006-isolation-close-file-when-exits.patch
- Fix volume detach on hotplug attachment pod delete
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
- Fix leaking tickers
  0008-fix-ticker-leak.patch
- Run helper pod as qemu user
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
- SCSI reservation: fix leftover mount and resource permissions
  0010-Fix-PR-leftover-mount-and-perms.patch
- Bump client-go (fix possible panic in discovery)
  0011-Fix-Aggregated-Discovery.patch
- Wait for new hotplug attachment pod to be ready
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
- Adapt the storage tests to the new populators flow
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
- Create export VM datavolumes compatible with populators
  0014-Export-create-populator-compatible-datavolumes-from-.patch
- Delete VMI prior to NFS server pod in tests
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1697630400">- Update to version 1.0.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.1
- Drop patches:
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
  0006-isolation-close-file-when-exits.patch
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
  0008-fix-ticker-leak.patch
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
  0010-Fix-PR-leftover-mount-and-perms.patch
  0011-Fix-Aggregated-Discovery.patch
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
  0014-Export-create-populator-compatible-datavolumes-from-.patch
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1699963200">- Update to version 1.1.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.1.0
- Drop upstreamed patches
  0001-Fix-qemu-system-lookup.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
- Add patches
  0001-Update-google.golang.org-grpc-to-1.56.3.patch (CVE-2023-44487)
  0002-virt-launcher-fix-qemu-non-root-path.patch
  0003-cgroupsv2-reconstruct-device-allowlist.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Fix seccomp profile for post-copy migration
  0004-seccomp-Use-Names-field-to-define-the-syscall.patch
- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704369600">- Update to version 1.1.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.1.1
- Drop upstreamed patches
  0001-Update-google.golang.org-grpc-to-1.56.3.patch
  0002-virt-launcher-fix-qemu-non-root-path.patch
  0003-cgroupsv2-reconstruct-device-allowlist.patch
  0004-seccomp-Use-Names-field-to-define-the-syscall.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1705060800">- Fix test with initially invalid DataVolume (bsc#1218174)
  0001-tests-Adapt-VM-phase-expectation.patch</changelog>
</package>
<package pkgid="4dd7885bed7c4f1f1021723fd2f25a28f4a5542e60be9415adcdf534d79ab78a" name="kubevirt-virtctl" arch="x86_64">
  <version epoch="0" ver="1.1.1" rel="150500.8.15.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Add CVE fixes
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch (CVE-2022-1996, bsc#1200528)
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch (CVE-2022-29162, bsc#1199460)
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 0.57.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.57.0
- Drop upstreamed patches:
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch
  0004-Update-libvirt-go-to-fix-memory-leak.patch
  0005-Improve-non-root-path-handling
  0006-topology-spread-constraints.patch
  0007-Fix-containerdisk-unmount-logic.patch
- Build new packages: virt-exportproxy and virt-exportserver
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665748800">- Update to version 0.58.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1670500800">- Fix libguestfs pod startup error
  0001-guestfs-flag-to-set-uid-and-gid.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1671537600">- Use JSON syntax for slirp device
  0002-network-Use-JSON-syntax-for-slirp-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683028800">- TSC frequencies: add 250PPM tolerance (bsc#1210906)
  0004-TSC-frequencies-add-250PPM-tolerance.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1689940800">- Update to version 1.0.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.0
- Drop patches
  0001-guestfs-flag-to-set-uid-and-gid.patch
  0002-network-Use-JSON-syntax-for-slirp-device.patch
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch
  0004-TSC-frequencies-add-250PPM-tolerance.patch
- Add patches
  0001-Fix-qemu-system-lookup.patch
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1690286400">- Use compat cmdline options for virtiofsd
  0005-Use-compat-cmdline-options-for-virtiofsd.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1693224000">- Fix leaking file descriptor
  0006-isolation-close-file-when-exits.patch
- Fix volume detach on hotplug attachment pod delete
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
- Fix leaking tickers
  0008-fix-ticker-leak.patch
- Run helper pod as qemu user
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
- SCSI reservation: fix leftover mount and resource permissions
  0010-Fix-PR-leftover-mount-and-perms.patch
- Bump client-go (fix possible panic in discovery)
  0011-Fix-Aggregated-Discovery.patch
- Wait for new hotplug attachment pod to be ready
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
- Adapt the storage tests to the new populators flow
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
- Create export VM datavolumes compatible with populators
  0014-Export-create-populator-compatible-datavolumes-from-.patch
- Delete VMI prior to NFS server pod in tests
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1697630400">- Update to version 1.0.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.1
- Drop patches:
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
  0006-isolation-close-file-when-exits.patch
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
  0008-fix-ticker-leak.patch
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
  0010-Fix-PR-leftover-mount-and-perms.patch
  0011-Fix-Aggregated-Discovery.patch
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
  0014-Export-create-populator-compatible-datavolumes-from-.patch
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1699963200">- Update to version 1.1.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.1.0
- Drop upstreamed patches
  0001-Fix-qemu-system-lookup.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
- Add patches
  0001-Update-google.golang.org-grpc-to-1.56.3.patch (CVE-2023-44487)
  0002-virt-launcher-fix-qemu-non-root-path.patch
  0003-cgroupsv2-reconstruct-device-allowlist.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Fix seccomp profile for post-copy migration
  0004-seccomp-Use-Names-field-to-define-the-syscall.patch
- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704369600">- Update to version 1.1.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.1.1
- Drop upstreamed patches
  0001-Update-google.golang.org-grpc-to-1.56.3.patch
  0002-virt-launcher-fix-qemu-non-root-path.patch
  0003-cgroupsv2-reconstruct-device-allowlist.patch
  0004-seccomp-Use-Names-field-to-define-the-syscall.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1705060800">- Fix test with initially invalid DataVolume (bsc#1218174)
  0001-tests-Adapt-VM-phase-expectation.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1712923200">- Improve the OrdinalPodInterfaceName mechanism (bsc#1222699)
  0002-Improve-the-handling-of-ordinal-pod-interface-name-for-upgrade.patch</changelog>
</package>
<package pkgid="3f725493752d54c069fdc3d831217e865785421cf66d731e18972cb2b9ae0163" name="kubevirt-virtctl" arch="x86_64">
  <version epoch="0" ver="1.1.1" rel="150500.8.18.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 0.57.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.57.0
- Drop upstreamed patches:
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch
  0004-Update-libvirt-go-to-fix-memory-leak.patch
  0005-Improve-non-root-path-handling
  0006-topology-spread-constraints.patch
  0007-Fix-containerdisk-unmount-logic.patch
- Build new packages: virt-exportproxy and virt-exportserver
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665748800">- Update to version 0.58.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1670500800">- Fix libguestfs pod startup error
  0001-guestfs-flag-to-set-uid-and-gid.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1671537600">- Use JSON syntax for slirp device
  0002-network-Use-JSON-syntax-for-slirp-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683028800">- TSC frequencies: add 250PPM tolerance (bsc#1210906)
  0004-TSC-frequencies-add-250PPM-tolerance.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1689940800">- Update to version 1.0.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.0
- Drop patches
  0001-guestfs-flag-to-set-uid-and-gid.patch
  0002-network-Use-JSON-syntax-for-slirp-device.patch
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch
  0004-TSC-frequencies-add-250PPM-tolerance.patch
- Add patches
  0001-Fix-qemu-system-lookup.patch
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1690286400">- Use compat cmdline options for virtiofsd
  0005-Use-compat-cmdline-options-for-virtiofsd.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1693224000">- Fix leaking file descriptor
  0006-isolation-close-file-when-exits.patch
- Fix volume detach on hotplug attachment pod delete
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
- Fix leaking tickers
  0008-fix-ticker-leak.patch
- Run helper pod as qemu user
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
- SCSI reservation: fix leftover mount and resource permissions
  0010-Fix-PR-leftover-mount-and-perms.patch
- Bump client-go (fix possible panic in discovery)
  0011-Fix-Aggregated-Discovery.patch
- Wait for new hotplug attachment pod to be ready
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
- Adapt the storage tests to the new populators flow
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
- Create export VM datavolumes compatible with populators
  0014-Export-create-populator-compatible-datavolumes-from-.patch
- Delete VMI prior to NFS server pod in tests
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1697630400">- Update to version 1.0.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.1
- Drop patches:
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
  0006-isolation-close-file-when-exits.patch
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
  0008-fix-ticker-leak.patch
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
  0010-Fix-PR-leftover-mount-and-perms.patch
  0011-Fix-Aggregated-Discovery.patch
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
  0014-Export-create-populator-compatible-datavolumes-from-.patch
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1699963200">- Update to version 1.1.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.1.0
- Drop upstreamed patches
  0001-Fix-qemu-system-lookup.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
- Add patches
  0001-Update-google.golang.org-grpc-to-1.56.3.patch (CVE-2023-44487)
  0002-virt-launcher-fix-qemu-non-root-path.patch
  0003-cgroupsv2-reconstruct-device-allowlist.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Fix seccomp profile for post-copy migration
  0004-seccomp-Use-Names-field-to-define-the-syscall.patch
- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704369600">- Update to version 1.1.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.1.1
- Drop upstreamed patches
  0001-Update-google.golang.org-grpc-to-1.56.3.patch
  0002-virt-launcher-fix-qemu-non-root-path.patch
  0003-cgroupsv2-reconstruct-device-allowlist.patch
  0004-seccomp-Use-Names-field-to-define-the-syscall.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1705060800">- Fix test with initially invalid DataVolume (bsc#1218174)
  0001-tests-Adapt-VM-phase-expectation.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1712923200">- Improve the OrdinalPodInterfaceName mechanism (bsc#1222699)
  0002-Improve-the-handling-of-ordinal-pod-interface-name-for-upgrade.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1718884800">- Collect component Role rules under operator Role instead of
  ClusterRole (bsc#1223965, CVE-2024-33394)
  0003-Collect-component-Role-rules-under-operator-Role-ins.patch</changelog>
</package>
<package pkgid="519c062ecfc3be8c91e289634d406429329f1b5a0b0458c947aec4353337cb13" name="kubevirt-virtctl" arch="x86_64">
  <version epoch="0" ver="1.1.1" rel="150500.8.9.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1655899200">- Update to version 0.54.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.54.0
- Drop upstreamed patches
  0001-improve-kubevirt-update-test.patch
  0002-use-semantic-equality-comparison.patch
  0003-Avoid-to-return-nil-failure-message.patch
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Add CVE fixes
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch (CVE-2022-1996, bsc#1200528)
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch (CVE-2022-29162, bsc#1199460)
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 0.57.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.57.0
- Drop upstreamed patches:
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch
  0004-Update-libvirt-go-to-fix-memory-leak.patch
  0005-Improve-non-root-path-handling
  0006-topology-spread-constraints.patch
  0007-Fix-containerdisk-unmount-logic.patch
- Build new packages: virt-exportproxy and virt-exportserver
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665748800">- Update to version 0.58.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1670500800">- Fix libguestfs pod startup error
  0001-guestfs-flag-to-set-uid-and-gid.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1671537600">- Use JSON syntax for slirp device
  0002-network-Use-JSON-syntax-for-slirp-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683028800">- TSC frequencies: add 250PPM tolerance (bsc#1210906)
  0004-TSC-frequencies-add-250PPM-tolerance.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1689940800">- Update to version 1.0.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.0
- Drop patches
  0001-guestfs-flag-to-set-uid-and-gid.patch
  0002-network-Use-JSON-syntax-for-slirp-device.patch
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch
  0004-TSC-frequencies-add-250PPM-tolerance.patch
- Add patches
  0001-Fix-qemu-system-lookup.patch
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1690286400">- Use compat cmdline options for virtiofsd
  0005-Use-compat-cmdline-options-for-virtiofsd.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1693224000">- Fix leaking file descriptor
  0006-isolation-close-file-when-exits.patch
- Fix volume detach on hotplug attachment pod delete
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
- Fix leaking tickers
  0008-fix-ticker-leak.patch
- Run helper pod as qemu user
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
- SCSI reservation: fix leftover mount and resource permissions
  0010-Fix-PR-leftover-mount-and-perms.patch
- Bump client-go (fix possible panic in discovery)
  0011-Fix-Aggregated-Discovery.patch
- Wait for new hotplug attachment pod to be ready
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
- Adapt the storage tests to the new populators flow
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
- Create export VM datavolumes compatible with populators
  0014-Export-create-populator-compatible-datavolumes-from-.patch
- Delete VMI prior to NFS server pod in tests
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1697630400">- Update to version 1.0.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.1
- Drop patches:
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
  0006-isolation-close-file-when-exits.patch
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
  0008-fix-ticker-leak.patch
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
  0010-Fix-PR-leftover-mount-and-perms.patch
  0011-Fix-Aggregated-Discovery.patch
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
  0014-Export-create-populator-compatible-datavolumes-from-.patch
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1699963200">- Update to version 1.1.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.1.0
- Drop upstreamed patches
  0001-Fix-qemu-system-lookup.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
- Add patches
  0001-Update-google.golang.org-grpc-to-1.56.3.patch (CVE-2023-44487)
  0002-virt-launcher-fix-qemu-non-root-path.patch
  0003-cgroupsv2-reconstruct-device-allowlist.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Fix seccomp profile for post-copy migration
  0004-seccomp-Use-Names-field-to-define-the-syscall.patch
- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704369600">- Update to version 1.1.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.1.1
- Drop upstreamed patches
  0001-Update-google.golang.org-grpc-to-1.56.3.patch
  0002-virt-launcher-fix-qemu-non-root-path.patch
  0003-cgroupsv2-reconstruct-device-allowlist.patch
  0004-seccomp-Use-Names-field-to-define-the-syscall.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1705060800">- Fix test with initially invalid DataVolume (bsc#1218174)
  0001-tests-Adapt-VM-phase-expectation.patch</changelog>
</package>
<package pkgid="352e5c02951ca9888ee18def106ab57834a3c97162bb057e1ffb5c4d242179c0" name="kubevirt-virtctl" arch="x86_64">
  <version epoch="0" ver="1.2.2" rel="150500.8.21.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665403200">- Update to version 0.57.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.57.0
- Drop upstreamed patches:
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch
  0004-Update-libvirt-go-to-fix-memory-leak.patch
  0005-Improve-non-root-path-handling
  0006-topology-spread-constraints.patch
  0007-Fix-containerdisk-unmount-logic.patch
- Build new packages: virt-exportproxy and virt-exportserver
- Update SP5 kubevirt registry path (bsc#1204140)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665748800">- Update to version 0.58.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.58.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1669896000">- Ensure RPMs and containers are built against the same distro
- Be more strict when discovering the registry path: error out if the
  distro is unknown, instead of falling through to 'opensuse' by
  default</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1670500800">- Fix libguestfs pod startup error
  0001-guestfs-flag-to-set-uid-and-gid.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1671537600">- Use JSON syntax for slirp device
  0002-network-Use-JSON-syntax-for-slirp-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683028800">- TSC frequencies: add 250PPM tolerance (bsc#1210906)
  0004-TSC-frequencies-add-250PPM-tolerance.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1689940800">- Update to version 1.0.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.0
- Drop patches
  0001-guestfs-flag-to-set-uid-and-gid.patch
  0002-network-Use-JSON-syntax-for-slirp-device.patch
  0003-Vulnerability-fix-limit-operator-secrets-permission.patch
  0004-TSC-frequencies-add-250PPM-tolerance.patch
- Add patches
  0001-Fix-qemu-system-lookup.patch
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1690286400">- Use compat cmdline options for virtiofsd
  0005-Use-compat-cmdline-options-for-virtiofsd.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1693224000">- Fix leaking file descriptor
  0006-isolation-close-file-when-exits.patch
- Fix volume detach on hotplug attachment pod delete
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
- Fix leaking tickers
  0008-fix-ticker-leak.patch
- Run helper pod as qemu user
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
- SCSI reservation: fix leftover mount and resource permissions
  0010-Fix-PR-leftover-mount-and-perms.patch
- Bump client-go (fix possible panic in discovery)
  0011-Fix-Aggregated-Discovery.patch
- Wait for new hotplug attachment pod to be ready
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
- Adapt the storage tests to the new populators flow
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
- Create export VM datavolumes compatible with populators
  0014-Export-create-populator-compatible-datavolumes-from-.patch
- Delete VMI prior to NFS server pod in tests
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1697630400">- Update to version 1.0.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.1
- Drop patches:
  0002-ksm-Access-sysfs-from-the-host-filesystem.patch
  0004-tests-leave-some-space-for-metadata-on-the-backend-P.patch
  0006-isolation-close-file-when-exits.patch
  0007-Fix-volume-detach-on-hotplug-attachment-pod-delete.patch
  0008-fix-ticker-leak.patch
  0009-tests-Run-helper-pod-as-qemu-107-user.patch
  0010-Fix-PR-leftover-mount-and-perms.patch
  0011-Fix-Aggregated-Discovery.patch
  0012-Wait-for-new-hotplug-attachment-pod-to-be-ready.patch
  0013-Adapt-e2e-tests-to-CDI-1.57.0.patch
  0014-Export-create-populator-compatible-datavolumes-from-.patch
  0015-tests-Delete-VMI-prior-to-NFS-server-pod.patch
- Add registry path for SLE15 SP6</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1699963200">- Update to version 1.1.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.1.0
- Drop upstreamed patches
  0001-Fix-qemu-system-lookup.patch
  0003-Virtiofs-Remove-duplicated-functional-tests.patch
- Add patches
  0001-Update-google.golang.org-grpc-to-1.56.3.patch (CVE-2023-44487)
  0002-virt-launcher-fix-qemu-non-root-path.patch
  0003-cgroupsv2-reconstruct-device-allowlist.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704283200">- Fix seccomp profile for post-copy migration
  0004-seccomp-Use-Names-field-to-define-the-syscall.patch
- Set ExclusiveArch conditionally depending on the distro
- Remove SLE15 SP4 from the distro check (end of general support)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1704369600">- Update to version 1.1.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.1.1
- Drop upstreamed patches
  0001-Update-google.golang.org-grpc-to-1.56.3.patch
  0002-virt-launcher-fix-qemu-non-root-path.patch
  0003-cgroupsv2-reconstruct-device-allowlist.patch
  0004-seccomp-Use-Names-field-to-define-the-syscall.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1705060800">- Fix test with initially invalid DataVolume (bsc#1218174)
  0001-tests-Adapt-VM-phase-expectation.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1712923200">- Improve the OrdinalPodInterfaceName mechanism (bsc#1222699)
  0002-Improve-the-handling-of-ordinal-pod-interface-name-for-upgrade.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1718884800">- Collect component Role rules under operator Role instead of
  ClusterRole (bsc#1223965, CVE-2024-33394)
  0003-Collect-component-Role-rules-under-operator-Role-ins.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1720440000">- Update to version 1.2.2
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.2.2
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.2.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.2.0
- Drop patches
  0001-tests-Adapt-VM-phase-expectation.patch
  0002-Improve-the-handling-of-ordinal-pod-interface-name-for-upgrade.patch
  0003-Collect-component-Role-rules-under-operator-Role-ins.patch
- Add patch
  0001-Collect-component-Role-rules-under-operator-Role-ins.patch
- Pack configuration files for libvirt</changelog>
</package>
<package pkgid="3afc3480076cc976b3eb40ea875357e22a062c37269eff1332c453f288276dc8" name="less" arch="aarch64">
  <version epoch="0" ver="590" rel="150400.3.6.2"/>
  <changelog author="astieger@suse.com" date="1446379200">- less 481:
  * Don't overwrite history file; just append to it. This behaves
    better when multiple sessions are running less simultaneously
    and using the same history file.
  * New command ESC-G goes to end of currently buffered data in a
    pipe.
  * Disable history feature when compiled with LESSHISTFILE set to
    "-".
  * In more-compatible mode, make the -p option apply to every file
    opened, not just the first one.
  * In more-compatible mode, change the -e option to work like -E,
    not -EF.
  * Treat multiple CRs before LF are like one CR (all the CRs are
    hidden).
  * Allow "extra" string in lesskey file to append to a multi-char
    command (like a search pattern), without executing the command.
  * Ignore -u/-U setting while viewing help file, so that underline
    and bold chars are displayed correctly.
  * Improve detection of "binary" files in UTF-8 mode.
  * Fix bug with ++ commands.
  * Fix bug where prompt was sometimes not displayed with +G.
  * Fix possible memory corruption
  * Fix bugs and improve performance in ampersand filtering.
  * Allow %% escape sequence in LESSOPEN variable.
  * Automate construction of Unicode tables from Unicode database.
- add keyring and verify source signature
- drop upstream patches:
  * less-458-out_of_bounds_read.patch
  * less-fix_crash_in_hilite_line.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1491307200">- update to version 487
  * New commands ESC-{ and ESC-} to shift to start/end of displayed
    lines.
  * Make search highlights work correctly when changing caselessness
    with -i.
  * New option -Da in Windows version to enable SGR mode.
  * Fix "nothing to search" error when top or bottom line on screen
    is empty.
  * Fix bug when terminal has no "cm" termcap entry.
  * Fix incorrect display when entering double-width chars in search
    string.
  * Fix bug in Unicode handling that missed some double width
    characters.
  * Update Unicode database to 9.0.0.
- remove less-429-widechars.patch that is no longer needed
  (fixed upstream)
- refresh less-429-shell.patch
- get rid of %{name} macro from the patch names</changelog>
  <changelog author="werner@suse.de" date="1493380800">- Extend lesskey with mappings for 8-bit controls key escape sequences</changelog>
  <changelog author="werner@suse.de" date="1509105600">- Let lessopen.sh also handle UTF-8 for (g)roff input, only apparmor
  as breaker of /usr/bin/file re,mains as "file" is not allowed to
  read files within the tool lessopen.sh</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1525003200">- update to version 530 [bsc#1091308]
  * Don't output terminal init sequence if using -F and file fits
    on one screen.
  * When using -S, mark truncated lines with a special character.
    The character can be changed or disabled via the new --rscroll
    option.
  * New command M marks the last line displayed on the screen.
  * New command ESC-m removes a line mark.
  * Status column (enabled via -J) now shows mark letters.
  * Status column shows search matches even if highlighting is
    disabled via -G.
  * A second ESC-u command will clear search match markers in the
    status column.
  * Do same ANSI escape code filtering for tag matching that we do
    for searching, to help when viewing syntax-highlighted code.
  * Catch SIGTERM and clean up before exiting.
  * Fix bug initializing default charset on Windows.
  * Handle keypad ENTER key correctly if it sends something other
    than newline.
  * Fix buffering bug when using stdin with a LESSOPEN pipe.
  * Update Unicode tables to 2017-03-08.
  * Pass-thru Unicode formating chars (Cf type) instead of treating
    them as binary chars. But treat them as binary if -U is set.
  * Fix erroneous binary file warning when UTF-8 file contains ANSI
    SGR sequences.
  * Fix bugs when using LESSOPEN and switching between stdin and
    other files.
  * Fix some bugs handling filenames containing shell metacharacters
  * Fix some memory leaks.
  * Allow some debugging environment variables to be set in lesskey
    file.
  * Code improvements:
  * Use ANSI prototypes in funcs.h declarations.
  * Fix some const mismatches.
  * Remove archaic "register" in variable declarations.
- remove the following patches (applied upstream)
  * less-429-strict_aliasing.patch
  * less-429-terminate.patch
- renumber patches
- remove 'make mkhelp' from the specfile as mkhelp.pl is now
  distributed in the tarball</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1569067200">- less 551:
  * Add --mouse option
  * Add --wheel-lines option
  * Add --no-histdups option
  * Add --save-marks option
  * Support PCRE2 regular expression library
  * Redraw screen on SIGWINCH even if screen size doesn't change
  * Shell-escape filenames in history so they can be used again
  * Ring bell if user enters invalid long option name
  * Use PCRE_UTF8 flag for pcre regular expressions when in UTF-8 mode
  * Don't count lines in initial screen if using -X with -F
  * Fix bug in v command on empty file
  * Fix bug in v command when filename contains shell metacharacters
- refresh less-429-shell.patch</changelog>
  <changelog author="kukuk@suse.com" date="1576065600">- Move lesskey* from /etc to /usr/etc</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1586001600">- less 557:
  * Update Unicode tables
  * Treat Hangul Jamo medial vowels and final consonants as zero width
  * Display error message immediately when -o is toggled and
    input is not a pipe
  * Fix memory corruption when built with libtermcap
  * Support libtinfow</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1589976000">- less 562:
  * Update unicode tables
  * formatting changes in man pages</changelog>
  <changelog author="dmueller@suse.com" date="1597492800">- update to 563:
  * Update Unicode tables.
  * Treat Hangul Jamo medial vowels and final consonants as zero width.
  * Display error message immediately when -o is toggled and
    input is not a pipe.
  * Fix regression: make screen repaint when "squished" and
    a no-movement command is given.
  * Fix erroneous EOF calculation when F command is interrupted.
  * Make WIN32C version include this fix from 551:
    Don't count lines in initial screen if using -X with -F.
  * Fix display bug in WIN32C version.
  * Fix memory corruption when built with libtermcap.
  * Support libtinfow.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1619179200">- less 581:
  * Change ESC-u command to toggle, not disable, highlighting per
    man page
  * Add ESC-U command
  * Add ctrl-W search modifier for wrapping search
  * F command can be interrupted by ^X
  * Support OSC 8 hyperlinks when -R is in effect
  * g command with no number will ignore -j and put first line at
    top of screen
  * Multiple + or -p command line options are handled better
  * Add the --incsearch option
  * Add the --line-num-width option
  * Add the --status-col-width option
  * Add the --use-color and --color options
  * Display -w highlight even if highlighted line is empty
  * If search result is in a long line, scroll to ensure it is
    visible
  * Editing the same file under different names now creates only
    one entry in the file list.
  * Make visual bell more visible on some terminals
  * Ring end-of-file bell no more than once per second
  * Build can use either Python or Perl for Makefile.aut operations
  * Fix crash when using the @ search modifier.
  * Fix crash in the 's' command due to duplicate free
- drop less-429-save_line_position.patch which was never accepted
  upstream due to solving one problem and creating others</changelog>
  <changelog author="dmueller@suse.com" date="1619697600">- update to 581.2:
  * This fixes a bug found in less-581 where the terminal was sometimes left in
    mouse-reporting mode after exiting less.</changelog>
  <changelog author="dmueller@suse.com" date="1621166400">- update to 586:
  * Make less able to read lesskey source files (deprecating lesskey).
  * If XDG_CONFIG_HOME is set, find lesskey source file
    in $XDG_CONFIG_HOME/lesskey rather than $HOME/.lesskey.
  * If XDG_DATA_HOME is set, find and store history file
    in $XDG_DATA_HOME/lesshst rather than $HOME/.lesshst.
  * Add the --lesskey-src option.
  * Add the --file-size option.
  * Fix bug which could leave terminal in mouse-reporting mode
    after exiting less.
  * Fix bug which caused failure to respond to window resize.
  * Fix backslash bug searching in tag file.</changelog>
  <changelog author="jengelh@inai.de" date="1623672000">- Remove --with-pic (no static libs are ever produced).</changelog>
  <changelog author="dmueller@suse.com" date="1623931200">- update to 590:
  * Make less able to read lesskey source files (deprecating lesskey).
  * If XDG_CONFIG_HOME is set, find lesskey source file
    in $XDG_CONFIG_HOME/lesskey rather than $HOME/.lesskey.
  * If XDG_DATA_HOME is set, find and store history file
    in $XDG_DATA_HOME/lesshst rather than $HOME/.lesshst.
  * Add the --lesskey-src option.
  * Add the --file-size option.
  * With -F, if screen is resized to make file fit on one screen, don't exit.</changelog>
  <changelog author="predivan@mts.rs" date="1625572800">- Fix build on Leap:
    Account for distinction in confdir after UsrMerge.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1631793600">- Add missing runtime dependency on which, which it is used by lessopen.sh.
  Fix bsc#1190552.</changelog>
  <changelog author="psimons@suse.com" date="1675771200">- Apply "cve-2022-46663.patch" to fix a vulnerability in less that
  could be exploited for denial-of-service attacks or even remote
  code execution by printing specially crafted escape sequences to
  the terminal. [CVE-2022-46663, bsc#1207815]</changelog>
  <changelog author="danilo.spinella@suse.com" date="1711713600">- Fix CVE-2022-48624, LESSCLOSE handling in less does not quote shell
  metacharacters, bsc#1219901
  * CVE-2022-48624.patch</changelog>
</package>
<package pkgid="e9940f9f132191b314d559e108494d8113a798d8c2a8a6f651e79c1c0e13d055" name="less" arch="s390x">
  <version epoch="0" ver="590" rel="150400.3.6.2"/>
  <changelog author="astieger@suse.com" date="1446379200">- less 481:
  * Don't overwrite history file; just append to it. This behaves
    better when multiple sessions are running less simultaneously
    and using the same history file.
  * New command ESC-G goes to end of currently buffered data in a
    pipe.
  * Disable history feature when compiled with LESSHISTFILE set to
    "-".
  * In more-compatible mode, make the -p option apply to every file
    opened, not just the first one.
  * In more-compatible mode, change the -e option to work like -E,
    not -EF.
  * Treat multiple CRs before LF are like one CR (all the CRs are
    hidden).
  * Allow "extra" string in lesskey file to append to a multi-char
    command (like a search pattern), without executing the command.
  * Ignore -u/-U setting while viewing help file, so that underline
    and bold chars are displayed correctly.
  * Improve detection of "binary" files in UTF-8 mode.
  * Fix bug with ++ commands.
  * Fix bug where prompt was sometimes not displayed with +G.
  * Fix possible memory corruption
  * Fix bugs and improve performance in ampersand filtering.
  * Allow %% escape sequence in LESSOPEN variable.
  * Automate construction of Unicode tables from Unicode database.
- add keyring and verify source signature
- drop upstream patches:
  * less-458-out_of_bounds_read.patch
  * less-fix_crash_in_hilite_line.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1491307200">- update to version 487
  * New commands ESC-{ and ESC-} to shift to start/end of displayed
    lines.
  * Make search highlights work correctly when changing caselessness
    with -i.
  * New option -Da in Windows version to enable SGR mode.
  * Fix "nothing to search" error when top or bottom line on screen
    is empty.
  * Fix bug when terminal has no "cm" termcap entry.
  * Fix incorrect display when entering double-width chars in search
    string.
  * Fix bug in Unicode handling that missed some double width
    characters.
  * Update Unicode database to 9.0.0.
- remove less-429-widechars.patch that is no longer needed
  (fixed upstream)
- refresh less-429-shell.patch
- get rid of %{name} macro from the patch names</changelog>
  <changelog author="werner@suse.de" date="1493380800">- Extend lesskey with mappings for 8-bit controls key escape sequences</changelog>
  <changelog author="werner@suse.de" date="1509105600">- Let lessopen.sh also handle UTF-8 for (g)roff input, only apparmor
  as breaker of /usr/bin/file re,mains as "file" is not allowed to
  read files within the tool lessopen.sh</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1525003200">- update to version 530 [bsc#1091308]
  * Don't output terminal init sequence if using -F and file fits
    on one screen.
  * When using -S, mark truncated lines with a special character.
    The character can be changed or disabled via the new --rscroll
    option.
  * New command M marks the last line displayed on the screen.
  * New command ESC-m removes a line mark.
  * Status column (enabled via -J) now shows mark letters.
  * Status column shows search matches even if highlighting is
    disabled via -G.
  * A second ESC-u command will clear search match markers in the
    status column.
  * Do same ANSI escape code filtering for tag matching that we do
    for searching, to help when viewing syntax-highlighted code.
  * Catch SIGTERM and clean up before exiting.
  * Fix bug initializing default charset on Windows.
  * Handle keypad ENTER key correctly if it sends something other
    than newline.
  * Fix buffering bug when using stdin with a LESSOPEN pipe.
  * Update Unicode tables to 2017-03-08.
  * Pass-thru Unicode formating chars (Cf type) instead of treating
    them as binary chars. But treat them as binary if -U is set.
  * Fix erroneous binary file warning when UTF-8 file contains ANSI
    SGR sequences.
  * Fix bugs when using LESSOPEN and switching between stdin and
    other files.
  * Fix some bugs handling filenames containing shell metacharacters
  * Fix some memory leaks.
  * Allow some debugging environment variables to be set in lesskey
    file.
  * Code improvements:
  * Use ANSI prototypes in funcs.h declarations.
  * Fix some const mismatches.
  * Remove archaic "register" in variable declarations.
- remove the following patches (applied upstream)
  * less-429-strict_aliasing.patch
  * less-429-terminate.patch
- renumber patches
- remove 'make mkhelp' from the specfile as mkhelp.pl is now
  distributed in the tarball</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1569067200">- less 551:
  * Add --mouse option
  * Add --wheel-lines option
  * Add --no-histdups option
  * Add --save-marks option
  * Support PCRE2 regular expression library
  * Redraw screen on SIGWINCH even if screen size doesn't change
  * Shell-escape filenames in history so they can be used again
  * Ring bell if user enters invalid long option name
  * Use PCRE_UTF8 flag for pcre regular expressions when in UTF-8 mode
  * Don't count lines in initial screen if using -X with -F
  * Fix bug in v command on empty file
  * Fix bug in v command when filename contains shell metacharacters
- refresh less-429-shell.patch</changelog>
  <changelog author="kukuk@suse.com" date="1576065600">- Move lesskey* from /etc to /usr/etc</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1586001600">- less 557:
  * Update Unicode tables
  * Treat Hangul Jamo medial vowels and final consonants as zero width
  * Display error message immediately when -o is toggled and
    input is not a pipe
  * Fix memory corruption when built with libtermcap
  * Support libtinfow</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1589976000">- less 562:
  * Update unicode tables
  * formatting changes in man pages</changelog>
  <changelog author="dmueller@suse.com" date="1597492800">- update to 563:
  * Update Unicode tables.
  * Treat Hangul Jamo medial vowels and final consonants as zero width.
  * Display error message immediately when -o is toggled and
    input is not a pipe.
  * Fix regression: make screen repaint when "squished" and
    a no-movement command is given.
  * Fix erroneous EOF calculation when F command is interrupted.
  * Make WIN32C version include this fix from 551:
    Don't count lines in initial screen if using -X with -F.
  * Fix display bug in WIN32C version.
  * Fix memory corruption when built with libtermcap.
  * Support libtinfow.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1619179200">- less 581:
  * Change ESC-u command to toggle, not disable, highlighting per
    man page
  * Add ESC-U command
  * Add ctrl-W search modifier for wrapping search
  * F command can be interrupted by ^X
  * Support OSC 8 hyperlinks when -R is in effect
  * g command with no number will ignore -j and put first line at
    top of screen
  * Multiple + or -p command line options are handled better
  * Add the --incsearch option
  * Add the --line-num-width option
  * Add the --status-col-width option
  * Add the --use-color and --color options
  * Display -w highlight even if highlighted line is empty
  * If search result is in a long line, scroll to ensure it is
    visible
  * Editing the same file under different names now creates only
    one entry in the file list.
  * Make visual bell more visible on some terminals
  * Ring end-of-file bell no more than once per second
  * Build can use either Python or Perl for Makefile.aut operations
  * Fix crash when using the @ search modifier.
  * Fix crash in the 's' command due to duplicate free
- drop less-429-save_line_position.patch which was never accepted
  upstream due to solving one problem and creating others</changelog>
  <changelog author="dmueller@suse.com" date="1619697600">- update to 581.2:
  * This fixes a bug found in less-581 where the terminal was sometimes left in
    mouse-reporting mode after exiting less.</changelog>
  <changelog author="dmueller@suse.com" date="1621166400">- update to 586:
  * Make less able to read lesskey source files (deprecating lesskey).
  * If XDG_CONFIG_HOME is set, find lesskey source file
    in $XDG_CONFIG_HOME/lesskey rather than $HOME/.lesskey.
  * If XDG_DATA_HOME is set, find and store history file
    in $XDG_DATA_HOME/lesshst rather than $HOME/.lesshst.
  * Add the --lesskey-src option.
  * Add the --file-size option.
  * Fix bug which could leave terminal in mouse-reporting mode
    after exiting less.
  * Fix bug which caused failure to respond to window resize.
  * Fix backslash bug searching in tag file.</changelog>
  <changelog author="jengelh@inai.de" date="1623672000">- Remove --with-pic (no static libs are ever produced).</changelog>
  <changelog author="dmueller@suse.com" date="1623931200">- update to 590:
  * Make less able to read lesskey source files (deprecating lesskey).
  * If XDG_CONFIG_HOME is set, find lesskey source file
    in $XDG_CONFIG_HOME/lesskey rather than $HOME/.lesskey.
  * If XDG_DATA_HOME is set, find and store history file
    in $XDG_DATA_HOME/lesshst rather than $HOME/.lesshst.
  * Add the --lesskey-src option.
  * Add the --file-size option.
  * With -F, if screen is resized to make file fit on one screen, don't exit.</changelog>
  <changelog author="predivan@mts.rs" date="1625572800">- Fix build on Leap:
    Account for distinction in confdir after UsrMerge.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1631793600">- Add missing runtime dependency on which, which it is used by lessopen.sh.
  Fix bsc#1190552.</changelog>
  <changelog author="psimons@suse.com" date="1675771200">- Apply "cve-2022-46663.patch" to fix a vulnerability in less that
  could be exploited for denial-of-service attacks or even remote
  code execution by printing specially crafted escape sequences to
  the terminal. [CVE-2022-46663, bsc#1207815]</changelog>
  <changelog author="danilo.spinella@suse.com" date="1711713600">- Fix CVE-2022-48624, LESSCLOSE handling in less does not quote shell
  metacharacters, bsc#1219901
  * CVE-2022-48624.patch</changelog>
</package>
<package pkgid="5f0432b0f6a4f326872b24bc7ec69713b80b9884b368f092e3ba6b046b57d15d" name="less" arch="src">
  <version epoch="0" ver="590" rel="150400.3.6.2"/>
  <changelog author="astieger@suse.com" date="1446379200">- less 481:
  * Don't overwrite history file; just append to it. This behaves
    better when multiple sessions are running less simultaneously
    and using the same history file.
  * New command ESC-G goes to end of currently buffered data in a
    pipe.
  * Disable history feature when compiled with LESSHISTFILE set to
    "-".
  * In more-compatible mode, make the -p option apply to every file
    opened, not just the first one.
  * In more-compatible mode, change the -e option to work like -E,
    not -EF.
  * Treat multiple CRs before LF are like one CR (all the CRs are
    hidden).
  * Allow "extra" string in lesskey file to append to a multi-char
    command (like a search pattern), without executing the command.
  * Ignore -u/-U setting while viewing help file, so that underline
    and bold chars are displayed correctly.
  * Improve detection of "binary" files in UTF-8 mode.
  * Fix bug with ++ commands.
  * Fix bug where prompt was sometimes not displayed with +G.
  * Fix possible memory corruption
  * Fix bugs and improve performance in ampersand filtering.
  * Allow %% escape sequence in LESSOPEN variable.
  * Automate construction of Unicode tables from Unicode database.
- add keyring and verify source signature
- drop upstream patches:
  * less-458-out_of_bounds_read.patch
  * less-fix_crash_in_hilite_line.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1491307200">- update to version 487
  * New commands ESC-{ and ESC-} to shift to start/end of displayed
    lines.
  * Make search highlights work correctly when changing caselessness
    with -i.
  * New option -Da in Windows version to enable SGR mode.
  * Fix "nothing to search" error when top or bottom line on screen
    is empty.
  * Fix bug when terminal has no "cm" termcap entry.
  * Fix incorrect display when entering double-width chars in search
    string.
  * Fix bug in Unicode handling that missed some double width
    characters.
  * Update Unicode database to 9.0.0.
- remove less-429-widechars.patch that is no longer needed
  (fixed upstream)
- refresh less-429-shell.patch
- get rid of %{name} macro from the patch names</changelog>
  <changelog author="werner@suse.de" date="1493380800">- Extend lesskey with mappings for 8-bit controls key escape sequences</changelog>
  <changelog author="werner@suse.de" date="1509105600">- Let lessopen.sh also handle UTF-8 for (g)roff input, only apparmor
  as breaker of /usr/bin/file re,mains as "file" is not allowed to
  read files within the tool lessopen.sh</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1525003200">- update to version 530 [bsc#1091308]
  * Don't output terminal init sequence if using -F and file fits
    on one screen.
  * When using -S, mark truncated lines with a special character.
    The character can be changed or disabled via the new --rscroll
    option.
  * New command M marks the last line displayed on the screen.
  * New command ESC-m removes a line mark.
  * Status column (enabled via -J) now shows mark letters.
  * Status column shows search matches even if highlighting is
    disabled via -G.
  * A second ESC-u command will clear search match markers in the
    status column.
  * Do same ANSI escape code filtering for tag matching that we do
    for searching, to help when viewing syntax-highlighted code.
  * Catch SIGTERM and clean up before exiting.
  * Fix bug initializing default charset on Windows.
  * Handle keypad ENTER key correctly if it sends something other
    than newline.
  * Fix buffering bug when using stdin with a LESSOPEN pipe.
  * Update Unicode tables to 2017-03-08.
  * Pass-thru Unicode formating chars (Cf type) instead of treating
    them as binary chars. But treat them as binary if -U is set.
  * Fix erroneous binary file warning when UTF-8 file contains ANSI
    SGR sequences.
  * Fix bugs when using LESSOPEN and switching between stdin and
    other files.
  * Fix some bugs handling filenames containing shell metacharacters
  * Fix some memory leaks.
  * Allow some debugging environment variables to be set in lesskey
    file.
  * Code improvements:
  * Use ANSI prototypes in funcs.h declarations.
  * Fix some const mismatches.
  * Remove archaic "register" in variable declarations.
- remove the following patches (applied upstream)
  * less-429-strict_aliasing.patch
  * less-429-terminate.patch
- renumber patches
- remove 'make mkhelp' from the specfile as mkhelp.pl is now
  distributed in the tarball</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1569067200">- less 551:
  * Add --mouse option
  * Add --wheel-lines option
  * Add --no-histdups option
  * Add --save-marks option
  * Support PCRE2 regular expression library
  * Redraw screen on SIGWINCH even if screen size doesn't change
  * Shell-escape filenames in history so they can be used again
  * Ring bell if user enters invalid long option name
  * Use PCRE_UTF8 flag for pcre regular expressions when in UTF-8 mode
  * Don't count lines in initial screen if using -X with -F
  * Fix bug in v command on empty file
  * Fix bug in v command when filename contains shell metacharacters
- refresh less-429-shell.patch</changelog>
  <changelog author="kukuk@suse.com" date="1576065600">- Move lesskey* from /etc to /usr/etc</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1586001600">- less 557:
  * Update Unicode tables
  * Treat Hangul Jamo medial vowels and final consonants as zero width
  * Display error message immediately when -o is toggled and
    input is not a pipe
  * Fix memory corruption when built with libtermcap
  * Support libtinfow</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1589976000">- less 562:
  * Update unicode tables
  * formatting changes in man pages</changelog>
  <changelog author="dmueller@suse.com" date="1597492800">- update to 563:
  * Update Unicode tables.
  * Treat Hangul Jamo medial vowels and final consonants as zero width.
  * Display error message immediately when -o is toggled and
    input is not a pipe.
  * Fix regression: make screen repaint when "squished" and
    a no-movement command is given.
  * Fix erroneous EOF calculation when F command is interrupted.
  * Make WIN32C version include this fix from 551:
    Don't count lines in initial screen if using -X with -F.
  * Fix display bug in WIN32C version.
  * Fix memory corruption when built with libtermcap.
  * Support libtinfow.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1619179200">- less 581:
  * Change ESC-u command to toggle, not disable, highlighting per
    man page
  * Add ESC-U command
  * Add ctrl-W search modifier for wrapping search
  * F command can be interrupted by ^X
  * Support OSC 8 hyperlinks when -R is in effect
  * g command with no number will ignore -j and put first line at
    top of screen
  * Multiple + or -p command line options are handled better
  * Add the --incsearch option
  * Add the --line-num-width option
  * Add the --status-col-width option
  * Add the --use-color and --color options
  * Display -w highlight even if highlighted line is empty
  * If search result is in a long line, scroll to ensure it is
    visible
  * Editing the same file under different names now creates only
    one entry in the file list.
  * Make visual bell more visible on some terminals
  * Ring end-of-file bell no more than once per second
  * Build can use either Python or Perl for Makefile.aut operations
  * Fix crash when using the @ search modifier.
  * Fix crash in the 's' command due to duplicate free
- drop less-429-save_line_position.patch which was never accepted
  upstream due to solving one problem and creating others</changelog>
  <changelog author="dmueller@suse.com" date="1619697600">- update to 581.2:
  * This fixes a bug found in less-581 where the terminal was sometimes left in
    mouse-reporting mode after exiting less.</changelog>
  <changelog author="dmueller@suse.com" date="1621166400">- update to 586:
  * Make less able to read lesskey source files (deprecating lesskey).
  * If XDG_CONFIG_HOME is set, find lesskey source file
    in $XDG_CONFIG_HOME/lesskey rather than $HOME/.lesskey.
  * If XDG_DATA_HOME is set, find and store history file
    in $XDG_DATA_HOME/lesshst rather than $HOME/.lesshst.
  * Add the --lesskey-src option.
  * Add the --file-size option.
  * Fix bug which could leave terminal in mouse-reporting mode
    after exiting less.
  * Fix bug which caused failure to respond to window resize.
  * Fix backslash bug searching in tag file.</changelog>
  <changelog author="jengelh@inai.de" date="1623672000">- Remove --with-pic (no static libs are ever produced).</changelog>
  <changelog author="dmueller@suse.com" date="1623931200">- update to 590:
  * Make less able to read lesskey source files (deprecating lesskey).
  * If XDG_CONFIG_HOME is set, find lesskey source file
    in $XDG_CONFIG_HOME/lesskey rather than $HOME/.lesskey.
  * If XDG_DATA_HOME is set, find and store history file
    in $XDG_DATA_HOME/lesshst rather than $HOME/.lesshst.
  * Add the --lesskey-src option.
  * Add the --file-size option.
  * With -F, if screen is resized to make file fit on one screen, don't exit.</changelog>
  <changelog author="predivan@mts.rs" date="1625572800">- Fix build on Leap:
    Account for distinction in confdir after UsrMerge.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1631793600">- Add missing runtime dependency on which, which it is used by lessopen.sh.
  Fix bsc#1190552.</changelog>
  <changelog author="psimons@suse.com" date="1675771200">- Apply "cve-2022-46663.patch" to fix a vulnerability in less that
  could be exploited for denial-of-service attacks or even remote
  code execution by printing specially crafted escape sequences to
  the terminal. [CVE-2022-46663, bsc#1207815]</changelog>
  <changelog author="danilo.spinella@suse.com" date="1711713600">- Fix CVE-2022-48624, LESSCLOSE handling in less does not quote shell
  metacharacters, bsc#1219901
  * CVE-2022-48624.patch</changelog>
</package>
<package pkgid="cb1578b311115055798125e859cf31a5bcfa91d9636967bee56af085a26c5a74" name="less" arch="x86_64">
  <version epoch="0" ver="590" rel="150400.3.6.2"/>
  <changelog author="astieger@suse.com" date="1446379200">- less 481:
  * Don't overwrite history file; just append to it. This behaves
    better when multiple sessions are running less simultaneously
    and using the same history file.
  * New command ESC-G goes to end of currently buffered data in a
    pipe.
  * Disable history feature when compiled with LESSHISTFILE set to
    "-".
  * In more-compatible mode, make the -p option apply to every file
    opened, not just the first one.
  * In more-compatible mode, change the -e option to work like -E,
    not -EF.
  * Treat multiple CRs before LF are like one CR (all the CRs are
    hidden).
  * Allow "extra" string in lesskey file to append to a multi-char
    command (like a search pattern), without executing the command.
  * Ignore -u/-U setting while viewing help file, so that underline
    and bold chars are displayed correctly.
  * Improve detection of "binary" files in UTF-8 mode.
  * Fix bug with ++ commands.
  * Fix bug where prompt was sometimes not displayed with +G.
  * Fix possible memory corruption
  * Fix bugs and improve performance in ampersand filtering.
  * Allow %% escape sequence in LESSOPEN variable.
  * Automate construction of Unicode tables from Unicode database.
- add keyring and verify source signature
- drop upstream patches:
  * less-458-out_of_bounds_read.patch
  * less-fix_crash_in_hilite_line.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1491307200">- update to version 487
  * New commands ESC-{ and ESC-} to shift to start/end of displayed
    lines.
  * Make search highlights work correctly when changing caselessness
    with -i.
  * New option -Da in Windows version to enable SGR mode.
  * Fix "nothing to search" error when top or bottom line on screen
    is empty.
  * Fix bug when terminal has no "cm" termcap entry.
  * Fix incorrect display when entering double-width chars in search
    string.
  * Fix bug in Unicode handling that missed some double width
    characters.
  * Update Unicode database to 9.0.0.
- remove less-429-widechars.patch that is no longer needed
  (fixed upstream)
- refresh less-429-shell.patch
- get rid of %{name} macro from the patch names</changelog>
  <changelog author="werner@suse.de" date="1493380800">- Extend lesskey with mappings for 8-bit controls key escape sequences</changelog>
  <changelog author="werner@suse.de" date="1509105600">- Let lessopen.sh also handle UTF-8 for (g)roff input, only apparmor
  as breaker of /usr/bin/file re,mains as "file" is not allowed to
  read files within the tool lessopen.sh</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1525003200">- update to version 530 [bsc#1091308]
  * Don't output terminal init sequence if using -F and file fits
    on one screen.
  * When using -S, mark truncated lines with a special character.
    The character can be changed or disabled via the new --rscroll
    option.
  * New command M marks the last line displayed on the screen.
  * New command ESC-m removes a line mark.
  * Status column (enabled via -J) now shows mark letters.
  * Status column shows search matches even if highlighting is
    disabled via -G.
  * A second ESC-u command will clear search match markers in the
    status column.
  * Do same ANSI escape code filtering for tag matching that we do
    for searching, to help when viewing syntax-highlighted code.
  * Catch SIGTERM and clean up before exiting.
  * Fix bug initializing default charset on Windows.
  * Handle keypad ENTER key correctly if it sends something other
    than newline.
  * Fix buffering bug when using stdin with a LESSOPEN pipe.
  * Update Unicode tables to 2017-03-08.
  * Pass-thru Unicode formating chars (Cf type) instead of treating
    them as binary chars. But treat them as binary if -U is set.
  * Fix erroneous binary file warning when UTF-8 file contains ANSI
    SGR sequences.
  * Fix bugs when using LESSOPEN and switching between stdin and
    other files.
  * Fix some bugs handling filenames containing shell metacharacters
  * Fix some memory leaks.
  * Allow some debugging environment variables to be set in lesskey
    file.
  * Code improvements:
  * Use ANSI prototypes in funcs.h declarations.
  * Fix some const mismatches.
  * Remove archaic "register" in variable declarations.
- remove the following patches (applied upstream)
  * less-429-strict_aliasing.patch
  * less-429-terminate.patch
- renumber patches
- remove 'make mkhelp' from the specfile as mkhelp.pl is now
  distributed in the tarball</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1569067200">- less 551:
  * Add --mouse option
  * Add --wheel-lines option
  * Add --no-histdups option
  * Add --save-marks option
  * Support PCRE2 regular expression library
  * Redraw screen on SIGWINCH even if screen size doesn't change
  * Shell-escape filenames in history so they can be used again
  * Ring bell if user enters invalid long option name
  * Use PCRE_UTF8 flag for pcre regular expressions when in UTF-8 mode
  * Don't count lines in initial screen if using -X with -F
  * Fix bug in v command on empty file
  * Fix bug in v command when filename contains shell metacharacters
- refresh less-429-shell.patch</changelog>
  <changelog author="kukuk@suse.com" date="1576065600">- Move lesskey* from /etc to /usr/etc</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1586001600">- less 557:
  * Update Unicode tables
  * Treat Hangul Jamo medial vowels and final consonants as zero width
  * Display error message immediately when -o is toggled and
    input is not a pipe
  * Fix memory corruption when built with libtermcap
  * Support libtinfow</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1589976000">- less 562:
  * Update unicode tables
  * formatting changes in man pages</changelog>
  <changelog author="dmueller@suse.com" date="1597492800">- update to 563:
  * Update Unicode tables.
  * Treat Hangul Jamo medial vowels and final consonants as zero width.
  * Display error message immediately when -o is toggled and
    input is not a pipe.
  * Fix regression: make screen repaint when "squished" and
    a no-movement command is given.
  * Fix erroneous EOF calculation when F command is interrupted.
  * Make WIN32C version include this fix from 551:
    Don't count lines in initial screen if using -X with -F.
  * Fix display bug in WIN32C version.
  * Fix memory corruption when built with libtermcap.
  * Support libtinfow.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1619179200">- less 581:
  * Change ESC-u command to toggle, not disable, highlighting per
    man page
  * Add ESC-U command
  * Add ctrl-W search modifier for wrapping search
  * F command can be interrupted by ^X
  * Support OSC 8 hyperlinks when -R is in effect
  * g command with no number will ignore -j and put first line at
    top of screen
  * Multiple + or -p command line options are handled better
  * Add the --incsearch option
  * Add the --line-num-width option
  * Add the --status-col-width option
  * Add the --use-color and --color options
  * Display -w highlight even if highlighted line is empty
  * If search result is in a long line, scroll to ensure it is
    visible
  * Editing the same file under different names now creates only
    one entry in the file list.
  * Make visual bell more visible on some terminals
  * Ring end-of-file bell no more than once per second
  * Build can use either Python or Perl for Makefile.aut operations
  * Fix crash when using the @ search modifier.
  * Fix crash in the 's' command due to duplicate free
- drop less-429-save_line_position.patch which was never accepted
  upstream due to solving one problem and creating others</changelog>
  <changelog author="dmueller@suse.com" date="1619697600">- update to 581.2:
  * This fixes a bug found in less-581 where the terminal was sometimes left in
    mouse-reporting mode after exiting less.</changelog>
  <changelog author="dmueller@suse.com" date="1621166400">- update to 586:
  * Make less able to read lesskey source files (deprecating lesskey).
  * If XDG_CONFIG_HOME is set, find lesskey source file
    in $XDG_CONFIG_HOME/lesskey rather than $HOME/.lesskey.
  * If XDG_DATA_HOME is set, find and store history file
    in $XDG_DATA_HOME/lesshst rather than $HOME/.lesshst.
  * Add the --lesskey-src option.
  * Add the --file-size option.
  * Fix bug which could leave terminal in mouse-reporting mode
    after exiting less.
  * Fix bug which caused failure to respond to window resize.
  * Fix backslash bug searching in tag file.</changelog>
  <changelog author="jengelh@inai.de" date="1623672000">- Remove --with-pic (no static libs are ever produced).</changelog>
  <changelog author="dmueller@suse.com" date="1623931200">- update to 590:
  * Make less able to read lesskey source files (deprecating lesskey).
  * If XDG_CONFIG_HOME is set, find lesskey source file
    in $XDG_CONFIG_HOME/lesskey rather than $HOME/.lesskey.
  * If XDG_DATA_HOME is set, find and store history file
    in $XDG_DATA_HOME/lesshst rather than $HOME/.lesshst.
  * Add the --lesskey-src option.
  * Add the --file-size option.
  * With -F, if screen is resized to make file fit on one screen, don't exit.</changelog>
  <changelog author="predivan@mts.rs" date="1625572800">- Fix build on Leap:
    Account for distinction in confdir after UsrMerge.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1631793600">- Add missing runtime dependency on which, which it is used by lessopen.sh.
  Fix bsc#1190552.</changelog>
  <changelog author="psimons@suse.com" date="1675771200">- Apply "cve-2022-46663.patch" to fix a vulnerability in less that
  could be exploited for denial-of-service attacks or even remote
  code execution by printing specially crafted escape sequences to
  the terminal. [CVE-2022-46663, bsc#1207815]</changelog>
  <changelog author="danilo.spinella@suse.com" date="1711713600">- Fix CVE-2022-48624, LESSCLOSE handling in less does not quote shell
  metacharacters, bsc#1219901
  * CVE-2022-48624.patch</changelog>
</package>
<package pkgid="a2329c53e2f8a15e22fca1f3589a9509c5ad2bf9ce4c8fd8189e6e360734805b" name="less" arch="aarch64">
  <version epoch="0" ver="590" rel="150400.3.9.1"/>
  <changelog author="kstreitova@suse.com" date="1491307200">- update to version 487
  * New commands ESC-{ and ESC-} to shift to start/end of displayed
    lines.
  * Make search highlights work correctly when changing caselessness
    with -i.
  * New option -Da in Windows version to enable SGR mode.
  * Fix "nothing to search" error when top or bottom line on screen
    is empty.
  * Fix bug when terminal has no "cm" termcap entry.
  * Fix incorrect display when entering double-width chars in search
    string.
  * Fix bug in Unicode handling that missed some double width
    characters.
  * Update Unicode database to 9.0.0.
- remove less-429-widechars.patch that is no longer needed
  (fixed upstream)
- refresh less-429-shell.patch
- get rid of %{name} macro from the patch names</changelog>
  <changelog author="werner@suse.de" date="1493380800">- Extend lesskey with mappings for 8-bit controls key escape sequences</changelog>
  <changelog author="werner@suse.de" date="1509105600">- Let lessopen.sh also handle UTF-8 for (g)roff input, only apparmor
  as breaker of /usr/bin/file re,mains as "file" is not allowed to
  read files within the tool lessopen.sh</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1525003200">- update to version 530 [bsc#1091308]
  * Don't output terminal init sequence if using -F and file fits
    on one screen.
  * When using -S, mark truncated lines with a special character.
    The character can be changed or disabled via the new --rscroll
    option.
  * New command M marks the last line displayed on the screen.
  * New command ESC-m removes a line mark.
  * Status column (enabled via -J) now shows mark letters.
  * Status column shows search matches even if highlighting is
    disabled via -G.
  * A second ESC-u command will clear search match markers in the
    status column.
  * Do same ANSI escape code filtering for tag matching that we do
    for searching, to help when viewing syntax-highlighted code.
  * Catch SIGTERM and clean up before exiting.
  * Fix bug initializing default charset on Windows.
  * Handle keypad ENTER key correctly if it sends something other
    than newline.
  * Fix buffering bug when using stdin with a LESSOPEN pipe.
  * Update Unicode tables to 2017-03-08.
  * Pass-thru Unicode formating chars (Cf type) instead of treating
    them as binary chars. But treat them as binary if -U is set.
  * Fix erroneous binary file warning when UTF-8 file contains ANSI
    SGR sequences.
  * Fix bugs when using LESSOPEN and switching between stdin and
    other files.
  * Fix some bugs handling filenames containing shell metacharacters
  * Fix some memory leaks.
  * Allow some debugging environment variables to be set in lesskey
    file.
  * Code improvements:
  * Use ANSI prototypes in funcs.h declarations.
  * Fix some const mismatches.
  * Remove archaic "register" in variable declarations.
- remove the following patches (applied upstream)
  * less-429-strict_aliasing.patch
  * less-429-terminate.patch
- renumber patches
- remove 'make mkhelp' from the specfile as mkhelp.pl is now
  distributed in the tarball</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1569067200">- less 551:
  * Add --mouse option
  * Add --wheel-lines option
  * Add --no-histdups option
  * Add --save-marks option
  * Support PCRE2 regular expression library
  * Redraw screen on SIGWINCH even if screen size doesn't change
  * Shell-escape filenames in history so they can be used again
  * Ring bell if user enters invalid long option name
  * Use PCRE_UTF8 flag for pcre regular expressions when in UTF-8 mode
  * Don't count lines in initial screen if using -X with -F
  * Fix bug in v command on empty file
  * Fix bug in v command when filename contains shell metacharacters
- refresh less-429-shell.patch</changelog>
  <changelog author="kukuk@suse.com" date="1576065600">- Move lesskey* from /etc to /usr/etc</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1586001600">- less 557:
  * Update Unicode tables
  * Treat Hangul Jamo medial vowels and final consonants as zero width
  * Display error message immediately when -o is toggled and
    input is not a pipe
  * Fix memory corruption when built with libtermcap
  * Support libtinfow</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1589976000">- less 562:
  * Update unicode tables
  * formatting changes in man pages</changelog>
  <changelog author="dmueller@suse.com" date="1597492800">- update to 563:
  * Update Unicode tables.
  * Treat Hangul Jamo medial vowels and final consonants as zero width.
  * Display error message immediately when -o is toggled and
    input is not a pipe.
  * Fix regression: make screen repaint when "squished" and
    a no-movement command is given.
  * Fix erroneous EOF calculation when F command is interrupted.
  * Make WIN32C version include this fix from 551:
    Don't count lines in initial screen if using -X with -F.
  * Fix display bug in WIN32C version.
  * Fix memory corruption when built with libtermcap.
  * Support libtinfow.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1619179200">- less 581:
  * Change ESC-u command to toggle, not disable, highlighting per
    man page
  * Add ESC-U command
  * Add ctrl-W search modifier for wrapping search
  * F command can be interrupted by ^X
  * Support OSC 8 hyperlinks when -R is in effect
  * g command with no number will ignore -j and put first line at
    top of screen
  * Multiple + or -p command line options are handled better
  * Add the --incsearch option
  * Add the --line-num-width option
  * Add the --status-col-width option
  * Add the --use-color and --color options
  * Display -w highlight even if highlighted line is empty
  * If search result is in a long line, scroll to ensure it is
    visible
  * Editing the same file under different names now creates only
    one entry in the file list.
  * Make visual bell more visible on some terminals
  * Ring end-of-file bell no more than once per second
  * Build can use either Python or Perl for Makefile.aut operations
  * Fix crash when using the @ search modifier.
  * Fix crash in the 's' command due to duplicate free
- drop less-429-save_line_position.patch which was never accepted
  upstream due to solving one problem and creating others</changelog>
  <changelog author="dmueller@suse.com" date="1619697600">- update to 581.2:
  * This fixes a bug found in less-581 where the terminal was sometimes left in
    mouse-reporting mode after exiting less.</changelog>
  <changelog author="dmueller@suse.com" date="1621166400">- update to 586:
  * Make less able to read lesskey source files (deprecating lesskey).
  * If XDG_CONFIG_HOME is set, find lesskey source file
    in $XDG_CONFIG_HOME/lesskey rather than $HOME/.lesskey.
  * If XDG_DATA_HOME is set, find and store history file
    in $XDG_DATA_HOME/lesshst rather than $HOME/.lesshst.
  * Add the --lesskey-src option.
  * Add the --file-size option.
  * Fix bug which could leave terminal in mouse-reporting mode
    after exiting less.
  * Fix bug which caused failure to respond to window resize.
  * Fix backslash bug searching in tag file.</changelog>
  <changelog author="jengelh@inai.de" date="1623672000">- Remove --with-pic (no static libs are ever produced).</changelog>
  <changelog author="dmueller@suse.com" date="1623931200">- update to 590:
  * Make less able to read lesskey source files (deprecating lesskey).
  * If XDG_CONFIG_HOME is set, find lesskey source file
    in $XDG_CONFIG_HOME/lesskey rather than $HOME/.lesskey.
  * If XDG_DATA_HOME is set, find and store history file
    in $XDG_DATA_HOME/lesshst rather than $HOME/.lesshst.
  * Add the --lesskey-src option.
  * Add the --file-size option.
  * With -F, if screen is resized to make file fit on one screen, don't exit.</changelog>
  <changelog author="predivan@mts.rs" date="1625572800">- Fix build on Leap:
    Account for distinction in confdir after UsrMerge.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1631793600">- Add missing runtime dependency on which, which it is used by lessopen.sh.
  Fix bsc#1190552.</changelog>
  <changelog author="psimons@suse.com" date="1675771200">- Apply "cve-2022-46663.patch" to fix a vulnerability in less that
  could be exploited for denial-of-service attacks or even remote
  code execution by printing specially crafted escape sequences to
  the terminal. [CVE-2022-46663, bsc#1207815]</changelog>
  <changelog author="danilo.spinella@suse.com" date="1711713600">- Fix CVE-2022-48624, LESSCLOSE handling in less does not quote shell
  metacharacters, bsc#1219901
  * CVE-2022-48624.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1714478400">- Fix CVE-2024-32487, mishandling of \n character in paths when
  LESSOPEN is set leads to OS command execution
  (CVE-2024-32487, bsc#1222849)
  * CVE-2024-32487.patch</changelog>
</package>
<package pkgid="ede59e465bddaa29453658b4ca0e3ef343d7a6405a33223013f4ac03dfc53b59" name="less" arch="s390x">
  <version epoch="0" ver="590" rel="150400.3.9.1"/>
  <changelog author="kstreitova@suse.com" date="1491307200">- update to version 487
  * New commands ESC-{ and ESC-} to shift to start/end of displayed
    lines.
  * Make search highlights work correctly when changing caselessness
    with -i.
  * New option -Da in Windows version to enable SGR mode.
  * Fix "nothing to search" error when top or bottom line on screen
    is empty.
  * Fix bug when terminal has no "cm" termcap entry.
  * Fix incorrect display when entering double-width chars in search
    string.
  * Fix bug in Unicode handling that missed some double width
    characters.
  * Update Unicode database to 9.0.0.
- remove less-429-widechars.patch that is no longer needed
  (fixed upstream)
- refresh less-429-shell.patch
- get rid of %{name} macro from the patch names</changelog>
  <changelog author="werner@suse.de" date="1493380800">- Extend lesskey with mappings for 8-bit controls key escape sequences</changelog>
  <changelog author="werner@suse.de" date="1509105600">- Let lessopen.sh also handle UTF-8 for (g)roff input, only apparmor
  as breaker of /usr/bin/file re,mains as "file" is not allowed to
  read files within the tool lessopen.sh</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1525003200">- update to version 530 [bsc#1091308]
  * Don't output terminal init sequence if using -F and file fits
    on one screen.
  * When using -S, mark truncated lines with a special character.
    The character can be changed or disabled via the new --rscroll
    option.
  * New command M marks the last line displayed on the screen.
  * New command ESC-m removes a line mark.
  * Status column (enabled via -J) now shows mark letters.
  * Status column shows search matches even if highlighting is
    disabled via -G.
  * A second ESC-u command will clear search match markers in the
    status column.
  * Do same ANSI escape code filtering for tag matching that we do
    for searching, to help when viewing syntax-highlighted code.
  * Catch SIGTERM and clean up before exiting.
  * Fix bug initializing default charset on Windows.
  * Handle keypad ENTER key correctly if it sends something other
    than newline.
  * Fix buffering bug when using stdin with a LESSOPEN pipe.
  * Update Unicode tables to 2017-03-08.
  * Pass-thru Unicode formating chars (Cf type) instead of treating
    them as binary chars. But treat them as binary if -U is set.
  * Fix erroneous binary file warning when UTF-8 file contains ANSI
    SGR sequences.
  * Fix bugs when using LESSOPEN and switching between stdin and
    other files.
  * Fix some bugs handling filenames containing shell metacharacters
  * Fix some memory leaks.
  * Allow some debugging environment variables to be set in lesskey
    file.
  * Code improvements:
  * Use ANSI prototypes in funcs.h declarations.
  * Fix some const mismatches.
  * Remove archaic "register" in variable declarations.
- remove the following patches (applied upstream)
  * less-429-strict_aliasing.patch
  * less-429-terminate.patch
- renumber patches
- remove 'make mkhelp' from the specfile as mkhelp.pl is now
  distributed in the tarball</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1569067200">- less 551:
  * Add --mouse option
  * Add --wheel-lines option
  * Add --no-histdups option
  * Add --save-marks option
  * Support PCRE2 regular expression library
  * Redraw screen on SIGWINCH even if screen size doesn't change
  * Shell-escape filenames in history so they can be used again
  * Ring bell if user enters invalid long option name
  * Use PCRE_UTF8 flag for pcre regular expressions when in UTF-8 mode
  * Don't count lines in initial screen if using -X with -F
  * Fix bug in v command on empty file
  * Fix bug in v command when filename contains shell metacharacters
- refresh less-429-shell.patch</changelog>
  <changelog author="kukuk@suse.com" date="1576065600">- Move lesskey* from /etc to /usr/etc</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1586001600">- less 557:
  * Update Unicode tables
  * Treat Hangul Jamo medial vowels and final consonants as zero width
  * Display error message immediately when -o is toggled and
    input is not a pipe
  * Fix memory corruption when built with libtermcap
  * Support libtinfow</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1589976000">- less 562:
  * Update unicode tables
  * formatting changes in man pages</changelog>
  <changelog author="dmueller@suse.com" date="1597492800">- update to 563:
  * Update Unicode tables.
  * Treat Hangul Jamo medial vowels and final consonants as zero width.
  * Display error message immediately when -o is toggled and
    input is not a pipe.
  * Fix regression: make screen repaint when "squished" and
    a no-movement command is given.
  * Fix erroneous EOF calculation when F command is interrupted.
  * Make WIN32C version include this fix from 551:
    Don't count lines in initial screen if using -X with -F.
  * Fix display bug in WIN32C version.
  * Fix memory corruption when built with libtermcap.
  * Support libtinfow.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1619179200">- less 581:
  * Change ESC-u command to toggle, not disable, highlighting per
    man page
  * Add ESC-U command
  * Add ctrl-W search modifier for wrapping search
  * F command can be interrupted by ^X
  * Support OSC 8 hyperlinks when -R is in effect
  * g command with no number will ignore -j and put first line at
    top of screen
  * Multiple + or -p command line options are handled better
  * Add the --incsearch option
  * Add the --line-num-width option
  * Add the --status-col-width option
  * Add the --use-color and --color options
  * Display -w highlight even if highlighted line is empty
  * If search result is in a long line, scroll to ensure it is
    visible
  * Editing the same file under different names now creates only
    one entry in the file list.
  * Make visual bell more visible on some terminals
  * Ring end-of-file bell no more than once per second
  * Build can use either Python or Perl for Makefile.aut operations
  * Fix crash when using the @ search modifier.
  * Fix crash in the 's' command due to duplicate free
- drop less-429-save_line_position.patch which was never accepted
  upstream due to solving one problem and creating others</changelog>
  <changelog author="dmueller@suse.com" date="1619697600">- update to 581.2:
  * This fixes a bug found in less-581 where the terminal was sometimes left in
    mouse-reporting mode after exiting less.</changelog>
  <changelog author="dmueller@suse.com" date="1621166400">- update to 586:
  * Make less able to read lesskey source files (deprecating lesskey).
  * If XDG_CONFIG_HOME is set, find lesskey source file
    in $XDG_CONFIG_HOME/lesskey rather than $HOME/.lesskey.
  * If XDG_DATA_HOME is set, find and store history file
    in $XDG_DATA_HOME/lesshst rather than $HOME/.lesshst.
  * Add the --lesskey-src option.
  * Add the --file-size option.
  * Fix bug which could leave terminal in mouse-reporting mode
    after exiting less.
  * Fix bug which caused failure to respond to window resize.
  * Fix backslash bug searching in tag file.</changelog>
  <changelog author="jengelh@inai.de" date="1623672000">- Remove --with-pic (no static libs are ever produced).</changelog>
  <changelog author="dmueller@suse.com" date="1623931200">- update to 590:
  * Make less able to read lesskey source files (deprecating lesskey).
  * If XDG_CONFIG_HOME is set, find lesskey source file
    in $XDG_CONFIG_HOME/lesskey rather than $HOME/.lesskey.
  * If XDG_DATA_HOME is set, find and store history file
    in $XDG_DATA_HOME/lesshst rather than $HOME/.lesshst.
  * Add the --lesskey-src option.
  * Add the --file-size option.
  * With -F, if screen is resized to make file fit on one screen, don't exit.</changelog>
  <changelog author="predivan@mts.rs" date="1625572800">- Fix build on Leap:
    Account for distinction in confdir after UsrMerge.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1631793600">- Add missing runtime dependency on which, which it is used by lessopen.sh.
  Fix bsc#1190552.</changelog>
  <changelog author="psimons@suse.com" date="1675771200">- Apply "cve-2022-46663.patch" to fix a vulnerability in less that
  could be exploited for denial-of-service attacks or even remote
  code execution by printing specially crafted escape sequences to
  the terminal. [CVE-2022-46663, bsc#1207815]</changelog>
  <changelog author="danilo.spinella@suse.com" date="1711713600">- Fix CVE-2022-48624, LESSCLOSE handling in less does not quote shell
  metacharacters, bsc#1219901
  * CVE-2022-48624.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1714478400">- Fix CVE-2024-32487, mishandling of \n character in paths when
  LESSOPEN is set leads to OS command execution
  (CVE-2024-32487, bsc#1222849)
  * CVE-2024-32487.patch</changelog>
</package>
<package pkgid="f8cee9f1d73de0eade14e310714aedc254abf14d648095417cf08acb84bfed69" name="less" arch="src">
  <version epoch="0" ver="590" rel="150400.3.9.1"/>
  <changelog author="kstreitova@suse.com" date="1491307200">- update to version 487
  * New commands ESC-{ and ESC-} to shift to start/end of displayed
    lines.
  * Make search highlights work correctly when changing caselessness
    with -i.
  * New option -Da in Windows version to enable SGR mode.
  * Fix "nothing to search" error when top or bottom line on screen
    is empty.
  * Fix bug when terminal has no "cm" termcap entry.
  * Fix incorrect display when entering double-width chars in search
    string.
  * Fix bug in Unicode handling that missed some double width
    characters.
  * Update Unicode database to 9.0.0.
- remove less-429-widechars.patch that is no longer needed
  (fixed upstream)
- refresh less-429-shell.patch
- get rid of %{name} macro from the patch names</changelog>
  <changelog author="werner@suse.de" date="1493380800">- Extend lesskey with mappings for 8-bit controls key escape sequences</changelog>
  <changelog author="werner@suse.de" date="1509105600">- Let lessopen.sh also handle UTF-8 for (g)roff input, only apparmor
  as breaker of /usr/bin/file re,mains as "file" is not allowed to
  read files within the tool lessopen.sh</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1525003200">- update to version 530 [bsc#1091308]
  * Don't output terminal init sequence if using -F and file fits
    on one screen.
  * When using -S, mark truncated lines with a special character.
    The character can be changed or disabled via the new --rscroll
    option.
  * New command M marks the last line displayed on the screen.
  * New command ESC-m removes a line mark.
  * Status column (enabled via -J) now shows mark letters.
  * Status column shows search matches even if highlighting is
    disabled via -G.
  * A second ESC-u command will clear search match markers in the
    status column.
  * Do same ANSI escape code filtering for tag matching that we do
    for searching, to help when viewing syntax-highlighted code.
  * Catch SIGTERM and clean up before exiting.
  * Fix bug initializing default charset on Windows.
  * Handle keypad ENTER key correctly if it sends something other
    than newline.
  * Fix buffering bug when using stdin with a LESSOPEN pipe.
  * Update Unicode tables to 2017-03-08.
  * Pass-thru Unicode formating chars (Cf type) instead of treating
    them as binary chars. But treat them as binary if -U is set.
  * Fix erroneous binary file warning when UTF-8 file contains ANSI
    SGR sequences.
  * Fix bugs when using LESSOPEN and switching between stdin and
    other files.
  * Fix some bugs handling filenames containing shell metacharacters
  * Fix some memory leaks.
  * Allow some debugging environment variables to be set in lesskey
    file.
  * Code improvements:
  * Use ANSI prototypes in funcs.h declarations.
  * Fix some const mismatches.
  * Remove archaic "register" in variable declarations.
- remove the following patches (applied upstream)
  * less-429-strict_aliasing.patch
  * less-429-terminate.patch
- renumber patches
- remove 'make mkhelp' from the specfile as mkhelp.pl is now
  distributed in the tarball</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1569067200">- less 551:
  * Add --mouse option
  * Add --wheel-lines option
  * Add --no-histdups option
  * Add --save-marks option
  * Support PCRE2 regular expression library
  * Redraw screen on SIGWINCH even if screen size doesn't change
  * Shell-escape filenames in history so they can be used again
  * Ring bell if user enters invalid long option name
  * Use PCRE_UTF8 flag for pcre regular expressions when in UTF-8 mode
  * Don't count lines in initial screen if using -X with -F
  * Fix bug in v command on empty file
  * Fix bug in v command when filename contains shell metacharacters
- refresh less-429-shell.patch</changelog>
  <changelog author="kukuk@suse.com" date="1576065600">- Move lesskey* from /etc to /usr/etc</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1586001600">- less 557:
  * Update Unicode tables
  * Treat Hangul Jamo medial vowels and final consonants as zero width
  * Display error message immediately when -o is toggled and
    input is not a pipe
  * Fix memory corruption when built with libtermcap
  * Support libtinfow</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1589976000">- less 562:
  * Update unicode tables
  * formatting changes in man pages</changelog>
  <changelog author="dmueller@suse.com" date="1597492800">- update to 563:
  * Update Unicode tables.
  * Treat Hangul Jamo medial vowels and final consonants as zero width.
  * Display error message immediately when -o is toggled and
    input is not a pipe.
  * Fix regression: make screen repaint when "squished" and
    a no-movement command is given.
  * Fix erroneous EOF calculation when F command is interrupted.
  * Make WIN32C version include this fix from 551:
    Don't count lines in initial screen if using -X with -F.
  * Fix display bug in WIN32C version.
  * Fix memory corruption when built with libtermcap.
  * Support libtinfow.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1619179200">- less 581:
  * Change ESC-u command to toggle, not disable, highlighting per
    man page
  * Add ESC-U command
  * Add ctrl-W search modifier for wrapping search
  * F command can be interrupted by ^X
  * Support OSC 8 hyperlinks when -R is in effect
  * g command with no number will ignore -j and put first line at
    top of screen
  * Multiple + or -p command line options are handled better
  * Add the --incsearch option
  * Add the --line-num-width option
  * Add the --status-col-width option
  * Add the --use-color and --color options
  * Display -w highlight even if highlighted line is empty
  * If search result is in a long line, scroll to ensure it is
    visible
  * Editing the same file under different names now creates only
    one entry in the file list.
  * Make visual bell more visible on some terminals
  * Ring end-of-file bell no more than once per second
  * Build can use either Python or Perl for Makefile.aut operations
  * Fix crash when using the @ search modifier.
  * Fix crash in the 's' command due to duplicate free
- drop less-429-save_line_position.patch which was never accepted
  upstream due to solving one problem and creating others</changelog>
  <changelog author="dmueller@suse.com" date="1619697600">- update to 581.2:
  * This fixes a bug found in less-581 where the terminal was sometimes left in
    mouse-reporting mode after exiting less.</changelog>
  <changelog author="dmueller@suse.com" date="1621166400">- update to 586:
  * Make less able to read lesskey source files (deprecating lesskey).
  * If XDG_CONFIG_HOME is set, find lesskey source file
    in $XDG_CONFIG_HOME/lesskey rather than $HOME/.lesskey.
  * If XDG_DATA_HOME is set, find and store history file
    in $XDG_DATA_HOME/lesshst rather than $HOME/.lesshst.
  * Add the --lesskey-src option.
  * Add the --file-size option.
  * Fix bug which could leave terminal in mouse-reporting mode
    after exiting less.
  * Fix bug which caused failure to respond to window resize.
  * Fix backslash bug searching in tag file.</changelog>
  <changelog author="jengelh@inai.de" date="1623672000">- Remove --with-pic (no static libs are ever produced).</changelog>
  <changelog author="dmueller@suse.com" date="1623931200">- update to 590:
  * Make less able to read lesskey source files (deprecating lesskey).
  * If XDG_CONFIG_HOME is set, find lesskey source file
    in $XDG_CONFIG_HOME/lesskey rather than $HOME/.lesskey.
  * If XDG_DATA_HOME is set, find and store history file
    in $XDG_DATA_HOME/lesshst rather than $HOME/.lesshst.
  * Add the --lesskey-src option.
  * Add the --file-size option.
  * With -F, if screen is resized to make file fit on one screen, don't exit.</changelog>
  <changelog author="predivan@mts.rs" date="1625572800">- Fix build on Leap:
    Account for distinction in confdir after UsrMerge.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1631793600">- Add missing runtime dependency on which, which it is used by lessopen.sh.
  Fix bsc#1190552.</changelog>
  <changelog author="psimons@suse.com" date="1675771200">- Apply "cve-2022-46663.patch" to fix a vulnerability in less that
  could be exploited for denial-of-service attacks or even remote
  code execution by printing specially crafted escape sequences to
  the terminal. [CVE-2022-46663, bsc#1207815]</changelog>
  <changelog author="danilo.spinella@suse.com" date="1711713600">- Fix CVE-2022-48624, LESSCLOSE handling in less does not quote shell
  metacharacters, bsc#1219901
  * CVE-2022-48624.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1714478400">- Fix CVE-2024-32487, mishandling of \n character in paths when
  LESSOPEN is set leads to OS command execution
  (CVE-2024-32487, bsc#1222849)
  * CVE-2024-32487.patch</changelog>
</package>
<package pkgid="e887921ac431a19512e594e818d5665a497b24b8f0ed9aa2997891b356f9766a" name="less" arch="x86_64">
  <version epoch="0" ver="590" rel="150400.3.9.1"/>
  <changelog author="kstreitova@suse.com" date="1491307200">- update to version 487
  * New commands ESC-{ and ESC-} to shift to start/end of displayed
    lines.
  * Make search highlights work correctly when changing caselessness
    with -i.
  * New option -Da in Windows version to enable SGR mode.
  * Fix "nothing to search" error when top or bottom line on screen
    is empty.
  * Fix bug when terminal has no "cm" termcap entry.
  * Fix incorrect display when entering double-width chars in search
    string.
  * Fix bug in Unicode handling that missed some double width
    characters.
  * Update Unicode database to 9.0.0.
- remove less-429-widechars.patch that is no longer needed
  (fixed upstream)
- refresh less-429-shell.patch
- get rid of %{name} macro from the patch names</changelog>
  <changelog author="werner@suse.de" date="1493380800">- Extend lesskey with mappings for 8-bit controls key escape sequences</changelog>
  <changelog author="werner@suse.de" date="1509105600">- Let lessopen.sh also handle UTF-8 for (g)roff input, only apparmor
  as breaker of /usr/bin/file re,mains as "file" is not allowed to
  read files within the tool lessopen.sh</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1525003200">- update to version 530 [bsc#1091308]
  * Don't output terminal init sequence if using -F and file fits
    on one screen.
  * When using -S, mark truncated lines with a special character.
    The character can be changed or disabled via the new --rscroll
    option.
  * New command M marks the last line displayed on the screen.
  * New command ESC-m removes a line mark.
  * Status column (enabled via -J) now shows mark letters.
  * Status column shows search matches even if highlighting is
    disabled via -G.
  * A second ESC-u command will clear search match markers in the
    status column.
  * Do same ANSI escape code filtering for tag matching that we do
    for searching, to help when viewing syntax-highlighted code.
  * Catch SIGTERM and clean up before exiting.
  * Fix bug initializing default charset on Windows.
  * Handle keypad ENTER key correctly if it sends something other
    than newline.
  * Fix buffering bug when using stdin with a LESSOPEN pipe.
  * Update Unicode tables to 2017-03-08.
  * Pass-thru Unicode formating chars (Cf type) instead of treating
    them as binary chars. But treat them as binary if -U is set.
  * Fix erroneous binary file warning when UTF-8 file contains ANSI
    SGR sequences.
  * Fix bugs when using LESSOPEN and switching between stdin and
    other files.
  * Fix some bugs handling filenames containing shell metacharacters
  * Fix some memory leaks.
  * Allow some debugging environment variables to be set in lesskey
    file.
  * Code improvements:
  * Use ANSI prototypes in funcs.h declarations.
  * Fix some const mismatches.
  * Remove archaic "register" in variable declarations.
- remove the following patches (applied upstream)
  * less-429-strict_aliasing.patch
  * less-429-terminate.patch
- renumber patches
- remove 'make mkhelp' from the specfile as mkhelp.pl is now
  distributed in the tarball</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1569067200">- less 551:
  * Add --mouse option
  * Add --wheel-lines option
  * Add --no-histdups option
  * Add --save-marks option
  * Support PCRE2 regular expression library
  * Redraw screen on SIGWINCH even if screen size doesn't change
  * Shell-escape filenames in history so they can be used again
  * Ring bell if user enters invalid long option name
  * Use PCRE_UTF8 flag for pcre regular expressions when in UTF-8 mode
  * Don't count lines in initial screen if using -X with -F
  * Fix bug in v command on empty file
  * Fix bug in v command when filename contains shell metacharacters
- refresh less-429-shell.patch</changelog>
  <changelog author="kukuk@suse.com" date="1576065600">- Move lesskey* from /etc to /usr/etc</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1586001600">- less 557:
  * Update Unicode tables
  * Treat Hangul Jamo medial vowels and final consonants as zero width
  * Display error message immediately when -o is toggled and
    input is not a pipe
  * Fix memory corruption when built with libtermcap
  * Support libtinfow</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1589976000">- less 562:
  * Update unicode tables
  * formatting changes in man pages</changelog>
  <changelog author="dmueller@suse.com" date="1597492800">- update to 563:
  * Update Unicode tables.
  * Treat Hangul Jamo medial vowels and final consonants as zero width.
  * Display error message immediately when -o is toggled and
    input is not a pipe.
  * Fix regression: make screen repaint when "squished" and
    a no-movement command is given.
  * Fix erroneous EOF calculation when F command is interrupted.
  * Make WIN32C version include this fix from 551:
    Don't count lines in initial screen if using -X with -F.
  * Fix display bug in WIN32C version.
  * Fix memory corruption when built with libtermcap.
  * Support libtinfow.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1619179200">- less 581:
  * Change ESC-u command to toggle, not disable, highlighting per
    man page
  * Add ESC-U command
  * Add ctrl-W search modifier for wrapping search
  * F command can be interrupted by ^X
  * Support OSC 8 hyperlinks when -R is in effect
  * g command with no number will ignore -j and put first line at
    top of screen
  * Multiple + or -p command line options are handled better
  * Add the --incsearch option
  * Add the --line-num-width option
  * Add the --status-col-width option
  * Add the --use-color and --color options
  * Display -w highlight even if highlighted line is empty
  * If search result is in a long line, scroll to ensure it is
    visible
  * Editing the same file under different names now creates only
    one entry in the file list.
  * Make visual bell more visible on some terminals
  * Ring end-of-file bell no more than once per second
  * Build can use either Python or Perl for Makefile.aut operations
  * Fix crash when using the @ search modifier.
  * Fix crash in the 's' command due to duplicate free
- drop less-429-save_line_position.patch which was never accepted
  upstream due to solving one problem and creating others</changelog>
  <changelog author="dmueller@suse.com" date="1619697600">- update to 581.2:
  * This fixes a bug found in less-581 where the terminal was sometimes left in
    mouse-reporting mode after exiting less.</changelog>
  <changelog author="dmueller@suse.com" date="1621166400">- update to 586:
  * Make less able to read lesskey source files (deprecating lesskey).
  * If XDG_CONFIG_HOME is set, find lesskey source file
    in $XDG_CONFIG_HOME/lesskey rather than $HOME/.lesskey.
  * If XDG_DATA_HOME is set, find and store history file
    in $XDG_DATA_HOME/lesshst rather than $HOME/.lesshst.
  * Add the --lesskey-src option.
  * Add the --file-size option.
  * Fix bug which could leave terminal in mouse-reporting mode
    after exiting less.
  * Fix bug which caused failure to respond to window resize.
  * Fix backslash bug searching in tag file.</changelog>
  <changelog author="jengelh@inai.de" date="1623672000">- Remove --with-pic (no static libs are ever produced).</changelog>
  <changelog author="dmueller@suse.com" date="1623931200">- update to 590:
  * Make less able to read lesskey source files (deprecating lesskey).
  * If XDG_CONFIG_HOME is set, find lesskey source file
    in $XDG_CONFIG_HOME/lesskey rather than $HOME/.lesskey.
  * If XDG_DATA_HOME is set, find and store history file
    in $XDG_DATA_HOME/lesshst rather than $HOME/.lesshst.
  * Add the --lesskey-src option.
  * Add the --file-size option.
  * With -F, if screen is resized to make file fit on one screen, don't exit.</changelog>
  <changelog author="predivan@mts.rs" date="1625572800">- Fix build on Leap:
    Account for distinction in confdir after UsrMerge.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1631793600">- Add missing runtime dependency on which, which it is used by lessopen.sh.
  Fix bsc#1190552.</changelog>
  <changelog author="psimons@suse.com" date="1675771200">- Apply "cve-2022-46663.patch" to fix a vulnerability in less that
  could be exploited for denial-of-service attacks or even remote
  code execution by printing specially crafted escape sequences to
  the terminal. [CVE-2022-46663, bsc#1207815]</changelog>
  <changelog author="danilo.spinella@suse.com" date="1711713600">- Fix CVE-2022-48624, LESSCLOSE handling in less does not quote shell
  metacharacters, bsc#1219901
  * CVE-2022-48624.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1714478400">- Fix CVE-2024-32487, mishandling of \n character in paths when
  LESSOPEN is set leads to OS command execution
  (CVE-2024-32487, bsc#1222849)
  * CVE-2024-32487.patch</changelog>
</package>
<package pkgid="5e638f9cce147b9d16c1c62d9fa940a0dc7069cf45fec5ad8c0d254c56dfaf13" name="libLLVM15" arch="aarch64">
  <version epoch="0" ver="15.0.7" rel="150500.4.11.1"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1655380800">- Update to version 14.0.5.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1656936000">- Update to version 14.0.6.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1660046400">- Add llvm-glibc-2-36.patch in order to address boo#1202215.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1660132800">- Add WebAssembly support for all architectures.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1660392000">- Use black RPM macro magic to deduplicate binary lists. This
  should have no effect on the generated RPM but shaves ~400 lines
  off the specfile and hopefully makes future maintenance easier.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1661256000">- Don't declare python3-clang as noarch: Python packages are
  installed into %{_libdir}.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1661515200">- Add llvm-lifetime-for-rust.patch to have Rust memory management
  functions considered as lifetime markers. This should aid dead
  store elimination to dynamically allocated memory in Rust code.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1662206400">- Make sure we keep -DNDEBUG. At some point %{optflags} must have
  lost it, perhaps because CMake usually adds it on top. So when
  overriding CMAKE_{C,CXX}_FLAGS_RELWITHDEBINFO, we make sure to
  take over the other flags. We drop LLVM_ENABLE_ASSERTIONS=OFF,
  because that's the default anyway and hasn't helped here.
- Add llvm-scev-fix-isImpliedViaMerge.patch: fixes a miscompilation
  caused by mixing up values of the current and previous iteration.
  (See gh#llvm/llvm-project#56242.)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1662465600">- Update to version 15.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/15.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools:
  - llvm-debuginfod: Provides debug info to remote hosts.
  - llvm-dwarfutil: Can copy and manipulate debug info.
  - llvm-remark-size-diff: Compute diff between remark files.
  * New Clang tools:
  - clang-offload-packager: Bundle multiple objects into single
    fat binaries including offload code.
  - clang-pseudo: Approximate heuristic parser for C++.
- Rebase patches:
  * check-no-llvm-exegesis.patch
  * link-clang-tools-extra-shared.patch
  * lld-default-sha1.patch
  * llvm-do-not-install-static-libraries.patch
  * lto-disable-cache.patch
- Drop patches that have landed upstream:
  * clang-repl-private-deps.patch
  * llvm-glibc-2-36.patch
  * llvm-scev-fix-isImpliedViaMerge.patch
- Drop llvm-lifetime-for-rust.patch: this is now solved via
  attributes and LLVM doesn't need a hardcoded list of allocation
  functions anymore.
- Add llvm-link-atomic.patch to fix build on ppc.
- Add libcxx-test-library-path.patch to fix libc++ tests failing
  without RUNPATH on libc++.so.
- Add libcxxabi-fix-armv7-test.patch to fix tests on armv7l.
- Thanks to Andreas Schwab for most of the rebasing!</changelog>
  <changelog author="schwab@suse.de" date="1662984000">- Use correct LLVM_HOST_TRIPLE for riscv64</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663761600">- Always drop -gnu from triple for consistency. Patch a test that
  was looking for -linux- in clang-test-xfail-gnuless-triple.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Update to version 15.0.1.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1664884800">- Update to version 15.0.2.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1666872000">- Update to version 15.0.3.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Add llvm-armv7-fix-vector-compare-with-zero-lowering.patch: Fix
  lowering of non-canonical vector comparison with zero on armv7,
  preventing a crash (boo#1204267, gh#llvm/llvm-project#58514).
- Add lldb-swig-4.1.0-build-fix.patch: Fix build with Swig 4.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1667736000">- Update to version 15.0.4.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1668600000">- Update to version 15.0.5.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Remove obsolete lldb-swig-4.1.0-build-fix.patch.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1670155200">- Update to version 15.0.6.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1673697600">- Update to version 15.0.7.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Build stage 2 with -fno-plt on x86_64: since building with
  - Wl,-z,now the PLT stubs are basically dead code, so eliminating
  the indirection reduces the number of branches and improves code
  locality for the quite frequent cross-DSO calls.
- Add llvm-workaround-superfluous-branches.patch: hints LLVM to
  eliminate branches until gh#llvm/llvm-project#28804 is solved.</changelog>
  <changelog author="dmueller@suse.com" date="1678363200">- update constraints to exclude workers with very slow CPU</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1701345600">- Manage clang-cpp with update-alternatives like other binaries.
  Solves upgrade issues from Leap 15.5 to 15.6.  [boo#1221183]</changelog>
</package>
<package pkgid="5c5ce47fa05a5458c35e3ffe4519527eca5d628c5af4d43241638bb4160c23e9" name="libLLVM15" arch="s390x">
  <version epoch="0" ver="15.0.7" rel="150500.4.11.1"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1655380800">- Update to version 14.0.5.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1656936000">- Update to version 14.0.6.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1660046400">- Add llvm-glibc-2-36.patch in order to address boo#1202215.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1660132800">- Add WebAssembly support for all architectures.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1660392000">- Use black RPM macro magic to deduplicate binary lists. This
  should have no effect on the generated RPM but shaves ~400 lines
  off the specfile and hopefully makes future maintenance easier.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1661256000">- Don't declare python3-clang as noarch: Python packages are
  installed into %{_libdir}.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1661515200">- Add llvm-lifetime-for-rust.patch to have Rust memory management
  functions considered as lifetime markers. This should aid dead
  store elimination to dynamically allocated memory in Rust code.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1662206400">- Make sure we keep -DNDEBUG. At some point %{optflags} must have
  lost it, perhaps because CMake usually adds it on top. So when
  overriding CMAKE_{C,CXX}_FLAGS_RELWITHDEBINFO, we make sure to
  take over the other flags. We drop LLVM_ENABLE_ASSERTIONS=OFF,
  because that's the default anyway and hasn't helped here.
- Add llvm-scev-fix-isImpliedViaMerge.patch: fixes a miscompilation
  caused by mixing up values of the current and previous iteration.
  (See gh#llvm/llvm-project#56242.)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1662465600">- Update to version 15.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/15.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools:
  - llvm-debuginfod: Provides debug info to remote hosts.
  - llvm-dwarfutil: Can copy and manipulate debug info.
  - llvm-remark-size-diff: Compute diff between remark files.
  * New Clang tools:
  - clang-offload-packager: Bundle multiple objects into single
    fat binaries including offload code.
  - clang-pseudo: Approximate heuristic parser for C++.
- Rebase patches:
  * check-no-llvm-exegesis.patch
  * link-clang-tools-extra-shared.patch
  * lld-default-sha1.patch
  * llvm-do-not-install-static-libraries.patch
  * lto-disable-cache.patch
- Drop patches that have landed upstream:
  * clang-repl-private-deps.patch
  * llvm-glibc-2-36.patch
  * llvm-scev-fix-isImpliedViaMerge.patch
- Drop llvm-lifetime-for-rust.patch: this is now solved via
  attributes and LLVM doesn't need a hardcoded list of allocation
  functions anymore.
- Add llvm-link-atomic.patch to fix build on ppc.
- Add libcxx-test-library-path.patch to fix libc++ tests failing
  without RUNPATH on libc++.so.
- Add libcxxabi-fix-armv7-test.patch to fix tests on armv7l.
- Thanks to Andreas Schwab for most of the rebasing!</changelog>
  <changelog author="schwab@suse.de" date="1662984000">- Use correct LLVM_HOST_TRIPLE for riscv64</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663761600">- Always drop -gnu from triple for consistency. Patch a test that
  was looking for -linux- in clang-test-xfail-gnuless-triple.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Update to version 15.0.1.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1664884800">- Update to version 15.0.2.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1666872000">- Update to version 15.0.3.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Add llvm-armv7-fix-vector-compare-with-zero-lowering.patch: Fix
  lowering of non-canonical vector comparison with zero on armv7,
  preventing a crash (boo#1204267, gh#llvm/llvm-project#58514).
- Add lldb-swig-4.1.0-build-fix.patch: Fix build with Swig 4.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1667736000">- Update to version 15.0.4.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1668600000">- Update to version 15.0.5.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Remove obsolete lldb-swig-4.1.0-build-fix.patch.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1670155200">- Update to version 15.0.6.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1673697600">- Update to version 15.0.7.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Build stage 2 with -fno-plt on x86_64: since building with
  - Wl,-z,now the PLT stubs are basically dead code, so eliminating
  the indirection reduces the number of branches and improves code
  locality for the quite frequent cross-DSO calls.
- Add llvm-workaround-superfluous-branches.patch: hints LLVM to
  eliminate branches until gh#llvm/llvm-project#28804 is solved.</changelog>
  <changelog author="dmueller@suse.com" date="1678363200">- update constraints to exclude workers with very slow CPU</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1701345600">- Manage clang-cpp with update-alternatives like other binaries.
  Solves upgrade issues from Leap 15.5 to 15.6.  [boo#1221183]</changelog>
</package>
<package pkgid="eceb83249d736d9e0efce9824aa566e5187cde1da7facc6162b3abec3f71cdb2" name="libLLVM15" arch="x86_64">
  <version epoch="0" ver="15.0.7" rel="150500.4.11.1"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1655380800">- Update to version 14.0.5.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1656936000">- Update to version 14.0.6.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1660046400">- Add llvm-glibc-2-36.patch in order to address boo#1202215.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1660132800">- Add WebAssembly support for all architectures.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1660392000">- Use black RPM macro magic to deduplicate binary lists. This
  should have no effect on the generated RPM but shaves ~400 lines
  off the specfile and hopefully makes future maintenance easier.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1661256000">- Don't declare python3-clang as noarch: Python packages are
  installed into %{_libdir}.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1661515200">- Add llvm-lifetime-for-rust.patch to have Rust memory management
  functions considered as lifetime markers. This should aid dead
  store elimination to dynamically allocated memory in Rust code.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1662206400">- Make sure we keep -DNDEBUG. At some point %{optflags} must have
  lost it, perhaps because CMake usually adds it on top. So when
  overriding CMAKE_{C,CXX}_FLAGS_RELWITHDEBINFO, we make sure to
  take over the other flags. We drop LLVM_ENABLE_ASSERTIONS=OFF,
  because that's the default anyway and hasn't helped here.
- Add llvm-scev-fix-isImpliedViaMerge.patch: fixes a miscompilation
  caused by mixing up values of the current and previous iteration.
  (See gh#llvm/llvm-project#56242.)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1662465600">- Update to version 15.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/15.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools:
  - llvm-debuginfod: Provides debug info to remote hosts.
  - llvm-dwarfutil: Can copy and manipulate debug info.
  - llvm-remark-size-diff: Compute diff between remark files.
  * New Clang tools:
  - clang-offload-packager: Bundle multiple objects into single
    fat binaries including offload code.
  - clang-pseudo: Approximate heuristic parser for C++.
- Rebase patches:
  * check-no-llvm-exegesis.patch
  * link-clang-tools-extra-shared.patch
  * lld-default-sha1.patch
  * llvm-do-not-install-static-libraries.patch
  * lto-disable-cache.patch
- Drop patches that have landed upstream:
  * clang-repl-private-deps.patch
  * llvm-glibc-2-36.patch
  * llvm-scev-fix-isImpliedViaMerge.patch
- Drop llvm-lifetime-for-rust.patch: this is now solved via
  attributes and LLVM doesn't need a hardcoded list of allocation
  functions anymore.
- Add llvm-link-atomic.patch to fix build on ppc.
- Add libcxx-test-library-path.patch to fix libc++ tests failing
  without RUNPATH on libc++.so.
- Add libcxxabi-fix-armv7-test.patch to fix tests on armv7l.
- Thanks to Andreas Schwab for most of the rebasing!</changelog>
  <changelog author="schwab@suse.de" date="1662984000">- Use correct LLVM_HOST_TRIPLE for riscv64</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663761600">- Always drop -gnu from triple for consistency. Patch a test that
  was looking for -linux- in clang-test-xfail-gnuless-triple.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Update to version 15.0.1.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1664884800">- Update to version 15.0.2.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1666872000">- Update to version 15.0.3.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Add llvm-armv7-fix-vector-compare-with-zero-lowering.patch: Fix
  lowering of non-canonical vector comparison with zero on armv7,
  preventing a crash (boo#1204267, gh#llvm/llvm-project#58514).
- Add lldb-swig-4.1.0-build-fix.patch: Fix build with Swig 4.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1667736000">- Update to version 15.0.4.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1668600000">- Update to version 15.0.5.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Remove obsolete lldb-swig-4.1.0-build-fix.patch.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1670155200">- Update to version 15.0.6.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1673697600">- Update to version 15.0.7.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Build stage 2 with -fno-plt on x86_64: since building with
  - Wl,-z,now the PLT stubs are basically dead code, so eliminating
  the indirection reduces the number of branches and improves code
  locality for the quite frequent cross-DSO calls.
- Add llvm-workaround-superfluous-branches.patch: hints LLVM to
  eliminate branches until gh#llvm/llvm-project#28804 is solved.</changelog>
  <changelog author="dmueller@suse.com" date="1678363200">- update constraints to exclude workers with very slow CPU</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1701345600">- Manage clang-cpp with update-alternatives like other binaries.
  Solves upgrade issues from Leap 15.5 to 15.6.  [boo#1221183]</changelog>
</package>
<package pkgid="58e253a0c38f944e53c102e614fb92ef042fe20e9bc553d91825b15db0f83cbe" name="libLLVM15" arch="aarch64">
  <version epoch="0" ver="15.0.7" rel="150500.4.4.1"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1653739200">- Update to version 14.0.4.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Don't use gold for linking anymore: on s390x we use ld.bfd with
  LLVMgold.so, on ppc64 we disable ThinLTO for now.
- Using ld.bfd on s390x exposed an issue with the existing
  llvm_build_tablegen_component_as_shared_library.patch: linking
  llvm-tblgen with libLLVM.so means we also have to link libraries
  used for that (like LLVMTableGenGlobalISel) with libLLVM.so.
- Rewrite summary and description for llvm-gold to point out that
  it can also be used with ld.bfd, recommend with binutils.
- Prefer RPM macros over shell scripting, so that we can better
  inspect the build script with substitutions in place.
- More memory for stage 1 build jobs due to recent OOMs.
- Add %_libclang_sonum RPM macro to llvm-devel, since that might
  now diverge from %_llvm_sonum.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1655380800">- Update to version 14.0.5.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1656936000">- Update to version 14.0.6.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1660046400">- Add llvm-glibc-2-36.patch in order to address boo#1202215.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1660132800">- Add WebAssembly support for all architectures.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1660392000">- Use black RPM macro magic to deduplicate binary lists. This
  should have no effect on the generated RPM but shaves ~400 lines
  off the specfile and hopefully makes future maintenance easier.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1661256000">- Don't declare python3-clang as noarch: Python packages are
  installed into %{_libdir}.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1661515200">- Add llvm-lifetime-for-rust.patch to have Rust memory management
  functions considered as lifetime markers. This should aid dead
  store elimination to dynamically allocated memory in Rust code.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1662206400">- Make sure we keep -DNDEBUG. At some point %{optflags} must have
  lost it, perhaps because CMake usually adds it on top. So when
  overriding CMAKE_{C,CXX}_FLAGS_RELWITHDEBINFO, we make sure to
  take over the other flags. We drop LLVM_ENABLE_ASSERTIONS=OFF,
  because that's the default anyway and hasn't helped here.
- Add llvm-scev-fix-isImpliedViaMerge.patch: fixes a miscompilation
  caused by mixing up values of the current and previous iteration.
  (See gh#llvm/llvm-project#56242.)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1662465600">- Update to version 15.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/15.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools:
  - llvm-debuginfod: Provides debug info to remote hosts.
  - llvm-dwarfutil: Can copy and manipulate debug info.
  - llvm-remark-size-diff: Compute diff between remark files.
  * New Clang tools:
  - clang-offload-packager: Bundle multiple objects into single
    fat binaries including offload code.
  - clang-pseudo: Approximate heuristic parser for C++.
- Rebase patches:
  * check-no-llvm-exegesis.patch
  * link-clang-tools-extra-shared.patch
  * lld-default-sha1.patch
  * llvm-do-not-install-static-libraries.patch
  * lto-disable-cache.patch
- Drop patches that have landed upstream:
  * clang-repl-private-deps.patch
  * llvm-glibc-2-36.patch
  * llvm-scev-fix-isImpliedViaMerge.patch
- Drop llvm-lifetime-for-rust.patch: this is now solved via
  attributes and LLVM doesn't need a hardcoded list of allocation
  functions anymore.
- Add llvm-link-atomic.patch to fix build on ppc.
- Add libcxx-test-library-path.patch to fix libc++ tests failing
  without RUNPATH on libc++.so.
- Add libcxxabi-fix-armv7-test.patch to fix tests on armv7l.
- Thanks to Andreas Schwab for most of the rebasing!</changelog>
  <changelog author="schwab@suse.de" date="1662984000">- Use correct LLVM_HOST_TRIPLE for riscv64</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663761600">- Always drop -gnu from triple for consistency. Patch a test that
  was looking for -linux- in clang-test-xfail-gnuless-triple.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Update to version 15.0.1.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1664884800">- Update to version 15.0.2.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1666872000">- Update to version 15.0.3.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Add llvm-armv7-fix-vector-compare-with-zero-lowering.patch: Fix
  lowering of non-canonical vector comparison with zero on armv7,
  preventing a crash (boo#1204267, gh#llvm/llvm-project#58514).
- Add lldb-swig-4.1.0-build-fix.patch: Fix build with Swig 4.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1667736000">- Update to version 15.0.4.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1668600000">- Update to version 15.0.5.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Remove obsolete lldb-swig-4.1.0-build-fix.patch.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1670155200">- Update to version 15.0.6.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1673697600">- Update to version 15.0.7.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Build stage 2 with -fno-plt on x86_64: since building with
  - Wl,-z,now the PLT stubs are basically dead code, so eliminating
  the indirection reduces the number of branches and improves code
  locality for the quite frequent cross-DSO calls.
- Add llvm-workaround-superfluous-branches.patch: hints LLVM to
  eliminate branches until gh#llvm/llvm-project#28804 is solved.</changelog>
  <changelog author="dmueller@suse.com" date="1678363200">- update constraints to exclude workers with very slow CPU</changelog>
</package>
<package pkgid="10c8eb63618dd1c14b6eae3253d1790de1b8a87fb817641b4f587a7c5d3aa449" name="libLLVM15" arch="s390x">
  <version epoch="0" ver="15.0.7" rel="150500.4.4.1"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1653739200">- Update to version 14.0.4.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Don't use gold for linking anymore: on s390x we use ld.bfd with
  LLVMgold.so, on ppc64 we disable ThinLTO for now.
- Using ld.bfd on s390x exposed an issue with the existing
  llvm_build_tablegen_component_as_shared_library.patch: linking
  llvm-tblgen with libLLVM.so means we also have to link libraries
  used for that (like LLVMTableGenGlobalISel) with libLLVM.so.
- Rewrite summary and description for llvm-gold to point out that
  it can also be used with ld.bfd, recommend with binutils.
- Prefer RPM macros over shell scripting, so that we can better
  inspect the build script with substitutions in place.
- More memory for stage 1 build jobs due to recent OOMs.
- Add %_libclang_sonum RPM macro to llvm-devel, since that might
  now diverge from %_llvm_sonum.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1655380800">- Update to version 14.0.5.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1656936000">- Update to version 14.0.6.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1660046400">- Add llvm-glibc-2-36.patch in order to address boo#1202215.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1660132800">- Add WebAssembly support for all architectures.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1660392000">- Use black RPM macro magic to deduplicate binary lists. This
  should have no effect on the generated RPM but shaves ~400 lines
  off the specfile and hopefully makes future maintenance easier.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1661256000">- Don't declare python3-clang as noarch: Python packages are
  installed into %{_libdir}.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1661515200">- Add llvm-lifetime-for-rust.patch to have Rust memory management
  functions considered as lifetime markers. This should aid dead
  store elimination to dynamically allocated memory in Rust code.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1662206400">- Make sure we keep -DNDEBUG. At some point %{optflags} must have
  lost it, perhaps because CMake usually adds it on top. So when
  overriding CMAKE_{C,CXX}_FLAGS_RELWITHDEBINFO, we make sure to
  take over the other flags. We drop LLVM_ENABLE_ASSERTIONS=OFF,
  because that's the default anyway and hasn't helped here.
- Add llvm-scev-fix-isImpliedViaMerge.patch: fixes a miscompilation
  caused by mixing up values of the current and previous iteration.
  (See gh#llvm/llvm-project#56242.)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1662465600">- Update to version 15.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/15.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools:
  - llvm-debuginfod: Provides debug info to remote hosts.
  - llvm-dwarfutil: Can copy and manipulate debug info.
  - llvm-remark-size-diff: Compute diff between remark files.
  * New Clang tools:
  - clang-offload-packager: Bundle multiple objects into single
    fat binaries including offload code.
  - clang-pseudo: Approximate heuristic parser for C++.
- Rebase patches:
  * check-no-llvm-exegesis.patch
  * link-clang-tools-extra-shared.patch
  * lld-default-sha1.patch
  * llvm-do-not-install-static-libraries.patch
  * lto-disable-cache.patch
- Drop patches that have landed upstream:
  * clang-repl-private-deps.patch
  * llvm-glibc-2-36.patch
  * llvm-scev-fix-isImpliedViaMerge.patch
- Drop llvm-lifetime-for-rust.patch: this is now solved via
  attributes and LLVM doesn't need a hardcoded list of allocation
  functions anymore.
- Add llvm-link-atomic.patch to fix build on ppc.
- Add libcxx-test-library-path.patch to fix libc++ tests failing
  without RUNPATH on libc++.so.
- Add libcxxabi-fix-armv7-test.patch to fix tests on armv7l.
- Thanks to Andreas Schwab for most of the rebasing!</changelog>
  <changelog author="schwab@suse.de" date="1662984000">- Use correct LLVM_HOST_TRIPLE for riscv64</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663761600">- Always drop -gnu from triple for consistency. Patch a test that
  was looking for -linux- in clang-test-xfail-gnuless-triple.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Update to version 15.0.1.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1664884800">- Update to version 15.0.2.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1666872000">- Update to version 15.0.3.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Add llvm-armv7-fix-vector-compare-with-zero-lowering.patch: Fix
  lowering of non-canonical vector comparison with zero on armv7,
  preventing a crash (boo#1204267, gh#llvm/llvm-project#58514).
- Add lldb-swig-4.1.0-build-fix.patch: Fix build with Swig 4.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1667736000">- Update to version 15.0.4.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1668600000">- Update to version 15.0.5.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Remove obsolete lldb-swig-4.1.0-build-fix.patch.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1670155200">- Update to version 15.0.6.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1673697600">- Update to version 15.0.7.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Build stage 2 with -fno-plt on x86_64: since building with
  - Wl,-z,now the PLT stubs are basically dead code, so eliminating
  the indirection reduces the number of branches and improves code
  locality for the quite frequent cross-DSO calls.
- Add llvm-workaround-superfluous-branches.patch: hints LLVM to
  eliminate branches until gh#llvm/llvm-project#28804 is solved.</changelog>
  <changelog author="dmueller@suse.com" date="1678363200">- update constraints to exclude workers with very slow CPU</changelog>
</package>
<package pkgid="0970cb0715998a2bd4837d9615e2202dfb2fc95c76243cebce7bc64d456ddf37" name="libLLVM15" arch="x86_64">
  <version epoch="0" ver="15.0.7" rel="150500.4.4.1"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1653739200">- Update to version 14.0.4.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Don't use gold for linking anymore: on s390x we use ld.bfd with
  LLVMgold.so, on ppc64 we disable ThinLTO for now.
- Using ld.bfd on s390x exposed an issue with the existing
  llvm_build_tablegen_component_as_shared_library.patch: linking
  llvm-tblgen with libLLVM.so means we also have to link libraries
  used for that (like LLVMTableGenGlobalISel) with libLLVM.so.
- Rewrite summary and description for llvm-gold to point out that
  it can also be used with ld.bfd, recommend with binutils.
- Prefer RPM macros over shell scripting, so that we can better
  inspect the build script with substitutions in place.
- More memory for stage 1 build jobs due to recent OOMs.
- Add %_libclang_sonum RPM macro to llvm-devel, since that might
  now diverge from %_llvm_sonum.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1655380800">- Update to version 14.0.5.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1656936000">- Update to version 14.0.6.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1660046400">- Add llvm-glibc-2-36.patch in order to address boo#1202215.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1660132800">- Add WebAssembly support for all architectures.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1660392000">- Use black RPM macro magic to deduplicate binary lists. This
  should have no effect on the generated RPM but shaves ~400 lines
  off the specfile and hopefully makes future maintenance easier.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1661256000">- Don't declare python3-clang as noarch: Python packages are
  installed into %{_libdir}.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1661515200">- Add llvm-lifetime-for-rust.patch to have Rust memory management
  functions considered as lifetime markers. This should aid dead
  store elimination to dynamically allocated memory in Rust code.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1662206400">- Make sure we keep -DNDEBUG. At some point %{optflags} must have
  lost it, perhaps because CMake usually adds it on top. So when
  overriding CMAKE_{C,CXX}_FLAGS_RELWITHDEBINFO, we make sure to
  take over the other flags. We drop LLVM_ENABLE_ASSERTIONS=OFF,
  because that's the default anyway and hasn't helped here.
- Add llvm-scev-fix-isImpliedViaMerge.patch: fixes a miscompilation
  caused by mixing up values of the current and previous iteration.
  (See gh#llvm/llvm-project#56242.)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1662465600">- Update to version 15.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/15.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools:
  - llvm-debuginfod: Provides debug info to remote hosts.
  - llvm-dwarfutil: Can copy and manipulate debug info.
  - llvm-remark-size-diff: Compute diff between remark files.
  * New Clang tools:
  - clang-offload-packager: Bundle multiple objects into single
    fat binaries including offload code.
  - clang-pseudo: Approximate heuristic parser for C++.
- Rebase patches:
  * check-no-llvm-exegesis.patch
  * link-clang-tools-extra-shared.patch
  * lld-default-sha1.patch
  * llvm-do-not-install-static-libraries.patch
  * lto-disable-cache.patch
- Drop patches that have landed upstream:
  * clang-repl-private-deps.patch
  * llvm-glibc-2-36.patch
  * llvm-scev-fix-isImpliedViaMerge.patch
- Drop llvm-lifetime-for-rust.patch: this is now solved via
  attributes and LLVM doesn't need a hardcoded list of allocation
  functions anymore.
- Add llvm-link-atomic.patch to fix build on ppc.
- Add libcxx-test-library-path.patch to fix libc++ tests failing
  without RUNPATH on libc++.so.
- Add libcxxabi-fix-armv7-test.patch to fix tests on armv7l.
- Thanks to Andreas Schwab for most of the rebasing!</changelog>
  <changelog author="schwab@suse.de" date="1662984000">- Use correct LLVM_HOST_TRIPLE for riscv64</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663761600">- Always drop -gnu from triple for consistency. Patch a test that
  was looking for -linux- in clang-test-xfail-gnuless-triple.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Update to version 15.0.1.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1664884800">- Update to version 15.0.2.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1666872000">- Update to version 15.0.3.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Add llvm-armv7-fix-vector-compare-with-zero-lowering.patch: Fix
  lowering of non-canonical vector comparison with zero on armv7,
  preventing a crash (boo#1204267, gh#llvm/llvm-project#58514).
- Add lldb-swig-4.1.0-build-fix.patch: Fix build with Swig 4.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1667736000">- Update to version 15.0.4.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1668600000">- Update to version 15.0.5.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Remove obsolete lldb-swig-4.1.0-build-fix.patch.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1670155200">- Update to version 15.0.6.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1673697600">- Update to version 15.0.7.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Build stage 2 with -fno-plt on x86_64: since building with
  - Wl,-z,now the PLT stubs are basically dead code, so eliminating
  the indirection reduces the number of branches and improves code
  locality for the quite frequent cross-DSO calls.
- Add llvm-workaround-superfluous-branches.patch: hints LLVM to
  eliminate branches until gh#llvm/llvm-project#28804 is solved.</changelog>
  <changelog author="dmueller@suse.com" date="1678363200">- update constraints to exclude workers with very slow CPU</changelog>
</package>
<package pkgid="fea046224c2ddddc8a1bd5db8a3bf2ade589524e02b5830a5eb1336d61a523ab" name="libLLVM15" arch="aarch64">
  <version epoch="0" ver="15.0.7" rel="150500.4.6.2"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1653739200">- Update to version 14.0.4.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Don't use gold for linking anymore: on s390x we use ld.bfd with
  LLVMgold.so, on ppc64 we disable ThinLTO for now.
- Using ld.bfd on s390x exposed an issue with the existing
  llvm_build_tablegen_component_as_shared_library.patch: linking
  llvm-tblgen with libLLVM.so means we also have to link libraries
  used for that (like LLVMTableGenGlobalISel) with libLLVM.so.
- Rewrite summary and description for llvm-gold to point out that
  it can also be used with ld.bfd, recommend with binutils.
- Prefer RPM macros over shell scripting, so that we can better
  inspect the build script with substitutions in place.
- More memory for stage 1 build jobs due to recent OOMs.
- Add %_libclang_sonum RPM macro to llvm-devel, since that might
  now diverge from %_llvm_sonum.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1655380800">- Update to version 14.0.5.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1656936000">- Update to version 14.0.6.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1660046400">- Add llvm-glibc-2-36.patch in order to address boo#1202215.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1660132800">- Add WebAssembly support for all architectures.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1660392000">- Use black RPM macro magic to deduplicate binary lists. This
  should have no effect on the generated RPM but shaves ~400 lines
  off the specfile and hopefully makes future maintenance easier.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1661256000">- Don't declare python3-clang as noarch: Python packages are
  installed into %{_libdir}.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1661515200">- Add llvm-lifetime-for-rust.patch to have Rust memory management
  functions considered as lifetime markers. This should aid dead
  store elimination to dynamically allocated memory in Rust code.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1662206400">- Make sure we keep -DNDEBUG. At some point %{optflags} must have
  lost it, perhaps because CMake usually adds it on top. So when
  overriding CMAKE_{C,CXX}_FLAGS_RELWITHDEBINFO, we make sure to
  take over the other flags. We drop LLVM_ENABLE_ASSERTIONS=OFF,
  because that's the default anyway and hasn't helped here.
- Add llvm-scev-fix-isImpliedViaMerge.patch: fixes a miscompilation
  caused by mixing up values of the current and previous iteration.
  (See gh#llvm/llvm-project#56242.)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1662465600">- Update to version 15.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/15.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools:
  - llvm-debuginfod: Provides debug info to remote hosts.
  - llvm-dwarfutil: Can copy and manipulate debug info.
  - llvm-remark-size-diff: Compute diff between remark files.
  * New Clang tools:
  - clang-offload-packager: Bundle multiple objects into single
    fat binaries including offload code.
  - clang-pseudo: Approximate heuristic parser for C++.
- Rebase patches:
  * check-no-llvm-exegesis.patch
  * link-clang-tools-extra-shared.patch
  * lld-default-sha1.patch
  * llvm-do-not-install-static-libraries.patch
  * lto-disable-cache.patch
- Drop patches that have landed upstream:
  * clang-repl-private-deps.patch
  * llvm-glibc-2-36.patch
  * llvm-scev-fix-isImpliedViaMerge.patch
- Drop llvm-lifetime-for-rust.patch: this is now solved via
  attributes and LLVM doesn't need a hardcoded list of allocation
  functions anymore.
- Add llvm-link-atomic.patch to fix build on ppc.
- Add libcxx-test-library-path.patch to fix libc++ tests failing
  without RUNPATH on libc++.so.
- Add libcxxabi-fix-armv7-test.patch to fix tests on armv7l.
- Thanks to Andreas Schwab for most of the rebasing!</changelog>
  <changelog author="schwab@suse.de" date="1662984000">- Use correct LLVM_HOST_TRIPLE for riscv64</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663761600">- Always drop -gnu from triple for consistency. Patch a test that
  was looking for -linux- in clang-test-xfail-gnuless-triple.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Update to version 15.0.1.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1664884800">- Update to version 15.0.2.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1666872000">- Update to version 15.0.3.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Add llvm-armv7-fix-vector-compare-with-zero-lowering.patch: Fix
  lowering of non-canonical vector comparison with zero on armv7,
  preventing a crash (boo#1204267, gh#llvm/llvm-project#58514).
- Add lldb-swig-4.1.0-build-fix.patch: Fix build with Swig 4.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1667736000">- Update to version 15.0.4.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1668600000">- Update to version 15.0.5.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Remove obsolete lldb-swig-4.1.0-build-fix.patch.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1670155200">- Update to version 15.0.6.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1673697600">- Update to version 15.0.7.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Build stage 2 with -fno-plt on x86_64: since building with
  - Wl,-z,now the PLT stubs are basically dead code, so eliminating
  the indirection reduces the number of branches and improves code
  locality for the quite frequent cross-DSO calls.
- Add llvm-workaround-superfluous-branches.patch: hints LLVM to
  eliminate branches until gh#llvm/llvm-project#28804 is solved.</changelog>
  <changelog author="dmueller@suse.com" date="1678363200">- update constraints to exclude workers with very slow CPU</changelog>
</package>
<package pkgid="963af6edfa59ebf909a317d5ba3fe09eb5ce777c7014911eb7483ac0021e1b6e" name="libLLVM15" arch="s390x">
  <version epoch="0" ver="15.0.7" rel="150500.4.6.2"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1653739200">- Update to version 14.0.4.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Don't use gold for linking anymore: on s390x we use ld.bfd with
  LLVMgold.so, on ppc64 we disable ThinLTO for now.
- Using ld.bfd on s390x exposed an issue with the existing
  llvm_build_tablegen_component_as_shared_library.patch: linking
  llvm-tblgen with libLLVM.so means we also have to link libraries
  used for that (like LLVMTableGenGlobalISel) with libLLVM.so.
- Rewrite summary and description for llvm-gold to point out that
  it can also be used with ld.bfd, recommend with binutils.
- Prefer RPM macros over shell scripting, so that we can better
  inspect the build script with substitutions in place.
- More memory for stage 1 build jobs due to recent OOMs.
- Add %_libclang_sonum RPM macro to llvm-devel, since that might
  now diverge from %_llvm_sonum.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1655380800">- Update to version 14.0.5.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1656936000">- Update to version 14.0.6.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1660046400">- Add llvm-glibc-2-36.patch in order to address boo#1202215.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1660132800">- Add WebAssembly support for all architectures.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1660392000">- Use black RPM macro magic to deduplicate binary lists. This
  should have no effect on the generated RPM but shaves ~400 lines
  off the specfile and hopefully makes future maintenance easier.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1661256000">- Don't declare python3-clang as noarch: Python packages are
  installed into %{_libdir}.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1661515200">- Add llvm-lifetime-for-rust.patch to have Rust memory management
  functions considered as lifetime markers. This should aid dead
  store elimination to dynamically allocated memory in Rust code.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1662206400">- Make sure we keep -DNDEBUG. At some point %{optflags} must have
  lost it, perhaps because CMake usually adds it on top. So when
  overriding CMAKE_{C,CXX}_FLAGS_RELWITHDEBINFO, we make sure to
  take over the other flags. We drop LLVM_ENABLE_ASSERTIONS=OFF,
  because that's the default anyway and hasn't helped here.
- Add llvm-scev-fix-isImpliedViaMerge.patch: fixes a miscompilation
  caused by mixing up values of the current and previous iteration.
  (See gh#llvm/llvm-project#56242.)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1662465600">- Update to version 15.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/15.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools:
  - llvm-debuginfod: Provides debug info to remote hosts.
  - llvm-dwarfutil: Can copy and manipulate debug info.
  - llvm-remark-size-diff: Compute diff between remark files.
  * New Clang tools:
  - clang-offload-packager: Bundle multiple objects into single
    fat binaries including offload code.
  - clang-pseudo: Approximate heuristic parser for C++.
- Rebase patches:
  * check-no-llvm-exegesis.patch
  * link-clang-tools-extra-shared.patch
  * lld-default-sha1.patch
  * llvm-do-not-install-static-libraries.patch
  * lto-disable-cache.patch
- Drop patches that have landed upstream:
  * clang-repl-private-deps.patch
  * llvm-glibc-2-36.patch
  * llvm-scev-fix-isImpliedViaMerge.patch
- Drop llvm-lifetime-for-rust.patch: this is now solved via
  attributes and LLVM doesn't need a hardcoded list of allocation
  functions anymore.
- Add llvm-link-atomic.patch to fix build on ppc.
- Add libcxx-test-library-path.patch to fix libc++ tests failing
  without RUNPATH on libc++.so.
- Add libcxxabi-fix-armv7-test.patch to fix tests on armv7l.
- Thanks to Andreas Schwab for most of the rebasing!</changelog>
  <changelog author="schwab@suse.de" date="1662984000">- Use correct LLVM_HOST_TRIPLE for riscv64</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663761600">- Always drop -gnu from triple for consistency. Patch a test that
  was looking for -linux- in clang-test-xfail-gnuless-triple.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Update to version 15.0.1.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1664884800">- Update to version 15.0.2.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1666872000">- Update to version 15.0.3.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Add llvm-armv7-fix-vector-compare-with-zero-lowering.patch: Fix
  lowering of non-canonical vector comparison with zero on armv7,
  preventing a crash (boo#1204267, gh#llvm/llvm-project#58514).
- Add lldb-swig-4.1.0-build-fix.patch: Fix build with Swig 4.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1667736000">- Update to version 15.0.4.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1668600000">- Update to version 15.0.5.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Remove obsolete lldb-swig-4.1.0-build-fix.patch.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1670155200">- Update to version 15.0.6.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1673697600">- Update to version 15.0.7.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Build stage 2 with -fno-plt on x86_64: since building with
  - Wl,-z,now the PLT stubs are basically dead code, so eliminating
  the indirection reduces the number of branches and improves code
  locality for the quite frequent cross-DSO calls.
- Add llvm-workaround-superfluous-branches.patch: hints LLVM to
  eliminate branches until gh#llvm/llvm-project#28804 is solved.</changelog>
  <changelog author="dmueller@suse.com" date="1678363200">- update constraints to exclude workers with very slow CPU</changelog>
</package>
<package pkgid="c5a283bb644ee628091dbbd7b1eac203b9ca0e75173daee0bf902371936ce38c" name="libLLVM15" arch="x86_64">
  <version epoch="0" ver="15.0.7" rel="150500.4.6.2"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1653739200">- Update to version 14.0.4.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Don't use gold for linking anymore: on s390x we use ld.bfd with
  LLVMgold.so, on ppc64 we disable ThinLTO for now.
- Using ld.bfd on s390x exposed an issue with the existing
  llvm_build_tablegen_component_as_shared_library.patch: linking
  llvm-tblgen with libLLVM.so means we also have to link libraries
  used for that (like LLVMTableGenGlobalISel) with libLLVM.so.
- Rewrite summary and description for llvm-gold to point out that
  it can also be used with ld.bfd, recommend with binutils.
- Prefer RPM macros over shell scripting, so that we can better
  inspect the build script with substitutions in place.
- More memory for stage 1 build jobs due to recent OOMs.
- Add %_libclang_sonum RPM macro to llvm-devel, since that might
  now diverge from %_llvm_sonum.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1655380800">- Update to version 14.0.5.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1656936000">- Update to version 14.0.6.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1660046400">- Add llvm-glibc-2-36.patch in order to address boo#1202215.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1660132800">- Add WebAssembly support for all architectures.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1660392000">- Use black RPM macro magic to deduplicate binary lists. This
  should have no effect on the generated RPM but shaves ~400 lines
  off the specfile and hopefully makes future maintenance easier.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1661256000">- Don't declare python3-clang as noarch: Python packages are
  installed into %{_libdir}.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1661515200">- Add llvm-lifetime-for-rust.patch to have Rust memory management
  functions considered as lifetime markers. This should aid dead
  store elimination to dynamically allocated memory in Rust code.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1662206400">- Make sure we keep -DNDEBUG. At some point %{optflags} must have
  lost it, perhaps because CMake usually adds it on top. So when
  overriding CMAKE_{C,CXX}_FLAGS_RELWITHDEBINFO, we make sure to
  take over the other flags. We drop LLVM_ENABLE_ASSERTIONS=OFF,
  because that's the default anyway and hasn't helped here.
- Add llvm-scev-fix-isImpliedViaMerge.patch: fixes a miscompilation
  caused by mixing up values of the current and previous iteration.
  (See gh#llvm/llvm-project#56242.)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1662465600">- Update to version 15.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/15.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools:
  - llvm-debuginfod: Provides debug info to remote hosts.
  - llvm-dwarfutil: Can copy and manipulate debug info.
  - llvm-remark-size-diff: Compute diff between remark files.
  * New Clang tools:
  - clang-offload-packager: Bundle multiple objects into single
    fat binaries including offload code.
  - clang-pseudo: Approximate heuristic parser for C++.
- Rebase patches:
  * check-no-llvm-exegesis.patch
  * link-clang-tools-extra-shared.patch
  * lld-default-sha1.patch
  * llvm-do-not-install-static-libraries.patch
  * lto-disable-cache.patch
- Drop patches that have landed upstream:
  * clang-repl-private-deps.patch
  * llvm-glibc-2-36.patch
  * llvm-scev-fix-isImpliedViaMerge.patch
- Drop llvm-lifetime-for-rust.patch: this is now solved via
  attributes and LLVM doesn't need a hardcoded list of allocation
  functions anymore.
- Add llvm-link-atomic.patch to fix build on ppc.
- Add libcxx-test-library-path.patch to fix libc++ tests failing
  without RUNPATH on libc++.so.
- Add libcxxabi-fix-armv7-test.patch to fix tests on armv7l.
- Thanks to Andreas Schwab for most of the rebasing!</changelog>
  <changelog author="schwab@suse.de" date="1662984000">- Use correct LLVM_HOST_TRIPLE for riscv64</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663761600">- Always drop -gnu from triple for consistency. Patch a test that
  was looking for -linux- in clang-test-xfail-gnuless-triple.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Update to version 15.0.1.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1664884800">- Update to version 15.0.2.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1666872000">- Update to version 15.0.3.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Add llvm-armv7-fix-vector-compare-with-zero-lowering.patch: Fix
  lowering of non-canonical vector comparison with zero on armv7,
  preventing a crash (boo#1204267, gh#llvm/llvm-project#58514).
- Add lldb-swig-4.1.0-build-fix.patch: Fix build with Swig 4.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1667736000">- Update to version 15.0.4.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1668600000">- Update to version 15.0.5.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Remove obsolete lldb-swig-4.1.0-build-fix.patch.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1670155200">- Update to version 15.0.6.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1673697600">- Update to version 15.0.7.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Build stage 2 with -fno-plt on x86_64: since building with
  - Wl,-z,now the PLT stubs are basically dead code, so eliminating
  the indirection reduces the number of branches and improves code
  locality for the quite frequent cross-DSO calls.
- Add llvm-workaround-superfluous-branches.patch: hints LLVM to
  eliminate branches until gh#llvm/llvm-project#28804 is solved.</changelog>
  <changelog author="dmueller@suse.com" date="1678363200">- update constraints to exclude workers with very slow CPU</changelog>
</package>
<package pkgid="87520ff26732e2c483e3f2e627be35c5df6348ff58b496691a749d189f3ee4fd" name="libLLVM15" arch="aarch64">
  <version epoch="0" ver="15.0.7" rel="150500.4.9.6"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1655380800">- Update to version 14.0.5.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1656936000">- Update to version 14.0.6.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1660046400">- Add llvm-glibc-2-36.patch in order to address boo#1202215.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1660132800">- Add WebAssembly support for all architectures.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1660392000">- Use black RPM macro magic to deduplicate binary lists. This
  should have no effect on the generated RPM but shaves ~400 lines
  off the specfile and hopefully makes future maintenance easier.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1661256000">- Don't declare python3-clang as noarch: Python packages are
  installed into %{_libdir}.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1661515200">- Add llvm-lifetime-for-rust.patch to have Rust memory management
  functions considered as lifetime markers. This should aid dead
  store elimination to dynamically allocated memory in Rust code.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1662206400">- Make sure we keep -DNDEBUG. At some point %{optflags} must have
  lost it, perhaps because CMake usually adds it on top. So when
  overriding CMAKE_{C,CXX}_FLAGS_RELWITHDEBINFO, we make sure to
  take over the other flags. We drop LLVM_ENABLE_ASSERTIONS=OFF,
  because that's the default anyway and hasn't helped here.
- Add llvm-scev-fix-isImpliedViaMerge.patch: fixes a miscompilation
  caused by mixing up values of the current and previous iteration.
  (See gh#llvm/llvm-project#56242.)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1662465600">- Update to version 15.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/15.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools:
  - llvm-debuginfod: Provides debug info to remote hosts.
  - llvm-dwarfutil: Can copy and manipulate debug info.
  - llvm-remark-size-diff: Compute diff between remark files.
  * New Clang tools:
  - clang-offload-packager: Bundle multiple objects into single
    fat binaries including offload code.
  - clang-pseudo: Approximate heuristic parser for C++.
- Rebase patches:
  * check-no-llvm-exegesis.patch
  * link-clang-tools-extra-shared.patch
  * lld-default-sha1.patch
  * llvm-do-not-install-static-libraries.patch
  * lto-disable-cache.patch
- Drop patches that have landed upstream:
  * clang-repl-private-deps.patch
  * llvm-glibc-2-36.patch
  * llvm-scev-fix-isImpliedViaMerge.patch
- Drop llvm-lifetime-for-rust.patch: this is now solved via
  attributes and LLVM doesn't need a hardcoded list of allocation
  functions anymore.
- Add llvm-link-atomic.patch to fix build on ppc.
- Add libcxx-test-library-path.patch to fix libc++ tests failing
  without RUNPATH on libc++.so.
- Add libcxxabi-fix-armv7-test.patch to fix tests on armv7l.
- Thanks to Andreas Schwab for most of the rebasing!</changelog>
  <changelog author="schwab@suse.de" date="1662984000">- Use correct LLVM_HOST_TRIPLE for riscv64</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663761600">- Always drop -gnu from triple for consistency. Patch a test that
  was looking for -linux- in clang-test-xfail-gnuless-triple.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Update to version 15.0.1.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1664884800">- Update to version 15.0.2.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1666872000">- Update to version 15.0.3.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Add llvm-armv7-fix-vector-compare-with-zero-lowering.patch: Fix
  lowering of non-canonical vector comparison with zero on armv7,
  preventing a crash (boo#1204267, gh#llvm/llvm-project#58514).
- Add lldb-swig-4.1.0-build-fix.patch: Fix build with Swig 4.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1667736000">- Update to version 15.0.4.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1668600000">- Update to version 15.0.5.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Remove obsolete lldb-swig-4.1.0-build-fix.patch.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1670155200">- Update to version 15.0.6.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1673697600">- Update to version 15.0.7.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Build stage 2 with -fno-plt on x86_64: since building with
  - Wl,-z,now the PLT stubs are basically dead code, so eliminating
  the indirection reduces the number of branches and improves code
  locality for the quite frequent cross-DSO calls.
- Add llvm-workaround-superfluous-branches.patch: hints LLVM to
  eliminate branches until gh#llvm/llvm-project#28804 is solved.</changelog>
  <changelog author="dmueller@suse.com" date="1678363200">- update constraints to exclude workers with very slow CPU</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1701345600">- Manage clang-cpp with update-alternatives like other binaries.
  Solves upgrade issues from Leap 15.5 to 15.6.  [boo#1221183]</changelog>
</package>
<package pkgid="62bafc7258107dda88beaeabfe6386254428afd30a69276401d8f89479f0452d" name="libLLVM15" arch="s390x">
  <version epoch="0" ver="15.0.7" rel="150500.4.9.6"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1655380800">- Update to version 14.0.5.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1656936000">- Update to version 14.0.6.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1660046400">- Add llvm-glibc-2-36.patch in order to address boo#1202215.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1660132800">- Add WebAssembly support for all architectures.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1660392000">- Use black RPM macro magic to deduplicate binary lists. This
  should have no effect on the generated RPM but shaves ~400 lines
  off the specfile and hopefully makes future maintenance easier.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1661256000">- Don't declare python3-clang as noarch: Python packages are
  installed into %{_libdir}.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1661515200">- Add llvm-lifetime-for-rust.patch to have Rust memory management
  functions considered as lifetime markers. This should aid dead
  store elimination to dynamically allocated memory in Rust code.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1662206400">- Make sure we keep -DNDEBUG. At some point %{optflags} must have
  lost it, perhaps because CMake usually adds it on top. So when
  overriding CMAKE_{C,CXX}_FLAGS_RELWITHDEBINFO, we make sure to
  take over the other flags. We drop LLVM_ENABLE_ASSERTIONS=OFF,
  because that's the default anyway and hasn't helped here.
- Add llvm-scev-fix-isImpliedViaMerge.patch: fixes a miscompilation
  caused by mixing up values of the current and previous iteration.
  (See gh#llvm/llvm-project#56242.)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1662465600">- Update to version 15.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/15.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools:
  - llvm-debuginfod: Provides debug info to remote hosts.
  - llvm-dwarfutil: Can copy and manipulate debug info.
  - llvm-remark-size-diff: Compute diff between remark files.
  * New Clang tools:
  - clang-offload-packager: Bundle multiple objects into single
    fat binaries including offload code.
  - clang-pseudo: Approximate heuristic parser for C++.
- Rebase patches:
  * check-no-llvm-exegesis.patch
  * link-clang-tools-extra-shared.patch
  * lld-default-sha1.patch
  * llvm-do-not-install-static-libraries.patch
  * lto-disable-cache.patch
- Drop patches that have landed upstream:
  * clang-repl-private-deps.patch
  * llvm-glibc-2-36.patch
  * llvm-scev-fix-isImpliedViaMerge.patch
- Drop llvm-lifetime-for-rust.patch: this is now solved via
  attributes and LLVM doesn't need a hardcoded list of allocation
  functions anymore.
- Add llvm-link-atomic.patch to fix build on ppc.
- Add libcxx-test-library-path.patch to fix libc++ tests failing
  without RUNPATH on libc++.so.
- Add libcxxabi-fix-armv7-test.patch to fix tests on armv7l.
- Thanks to Andreas Schwab for most of the rebasing!</changelog>
  <changelog author="schwab@suse.de" date="1662984000">- Use correct LLVM_HOST_TRIPLE for riscv64</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663761600">- Always drop -gnu from triple for consistency. Patch a test that
  was looking for -linux- in clang-test-xfail-gnuless-triple.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Update to version 15.0.1.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1664884800">- Update to version 15.0.2.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1666872000">- Update to version 15.0.3.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Add llvm-armv7-fix-vector-compare-with-zero-lowering.patch: Fix
  lowering of non-canonical vector comparison with zero on armv7,
  preventing a crash (boo#1204267, gh#llvm/llvm-project#58514).
- Add lldb-swig-4.1.0-build-fix.patch: Fix build with Swig 4.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1667736000">- Update to version 15.0.4.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1668600000">- Update to version 15.0.5.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Remove obsolete lldb-swig-4.1.0-build-fix.patch.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1670155200">- Update to version 15.0.6.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1673697600">- Update to version 15.0.7.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Build stage 2 with -fno-plt on x86_64: since building with
  - Wl,-z,now the PLT stubs are basically dead code, so eliminating
  the indirection reduces the number of branches and improves code
  locality for the quite frequent cross-DSO calls.
- Add llvm-workaround-superfluous-branches.patch: hints LLVM to
  eliminate branches until gh#llvm/llvm-project#28804 is solved.</changelog>
  <changelog author="dmueller@suse.com" date="1678363200">- update constraints to exclude workers with very slow CPU</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1701345600">- Manage clang-cpp with update-alternatives like other binaries.
  Solves upgrade issues from Leap 15.5 to 15.6.  [boo#1221183]</changelog>
</package>
<package pkgid="c0c7e2ea6443f836c7cfc95db8d8730b8fd63f17ac1c097ad66d1979975c291a" name="libLLVM15" arch="x86_64">
  <version epoch="0" ver="15.0.7" rel="150500.4.9.6"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1655380800">- Update to version 14.0.5.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1656936000">- Update to version 14.0.6.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1660046400">- Add llvm-glibc-2-36.patch in order to address boo#1202215.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1660132800">- Add WebAssembly support for all architectures.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1660392000">- Use black RPM macro magic to deduplicate binary lists. This
  should have no effect on the generated RPM but shaves ~400 lines
  off the specfile and hopefully makes future maintenance easier.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1661256000">- Don't declare python3-clang as noarch: Python packages are
  installed into %{_libdir}.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1661515200">- Add llvm-lifetime-for-rust.patch to have Rust memory management
  functions considered as lifetime markers. This should aid dead
  store elimination to dynamically allocated memory in Rust code.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1662206400">- Make sure we keep -DNDEBUG. At some point %{optflags} must have
  lost it, perhaps because CMake usually adds it on top. So when
  overriding CMAKE_{C,CXX}_FLAGS_RELWITHDEBINFO, we make sure to
  take over the other flags. We drop LLVM_ENABLE_ASSERTIONS=OFF,
  because that's the default anyway and hasn't helped here.
- Add llvm-scev-fix-isImpliedViaMerge.patch: fixes a miscompilation
  caused by mixing up values of the current and previous iteration.
  (See gh#llvm/llvm-project#56242.)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1662465600">- Update to version 15.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/15.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools:
  - llvm-debuginfod: Provides debug info to remote hosts.
  - llvm-dwarfutil: Can copy and manipulate debug info.
  - llvm-remark-size-diff: Compute diff between remark files.
  * New Clang tools:
  - clang-offload-packager: Bundle multiple objects into single
    fat binaries including offload code.
  - clang-pseudo: Approximate heuristic parser for C++.
- Rebase patches:
  * check-no-llvm-exegesis.patch
  * link-clang-tools-extra-shared.patch
  * lld-default-sha1.patch
  * llvm-do-not-install-static-libraries.patch
  * lto-disable-cache.patch
- Drop patches that have landed upstream:
  * clang-repl-private-deps.patch
  * llvm-glibc-2-36.patch
  * llvm-scev-fix-isImpliedViaMerge.patch
- Drop llvm-lifetime-for-rust.patch: this is now solved via
  attributes and LLVM doesn't need a hardcoded list of allocation
  functions anymore.
- Add llvm-link-atomic.patch to fix build on ppc.
- Add libcxx-test-library-path.patch to fix libc++ tests failing
  without RUNPATH on libc++.so.
- Add libcxxabi-fix-armv7-test.patch to fix tests on armv7l.
- Thanks to Andreas Schwab for most of the rebasing!</changelog>
  <changelog author="schwab@suse.de" date="1662984000">- Use correct LLVM_HOST_TRIPLE for riscv64</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663761600">- Always drop -gnu from triple for consistency. Patch a test that
  was looking for -linux- in clang-test-xfail-gnuless-triple.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Update to version 15.0.1.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1664884800">- Update to version 15.0.2.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1666872000">- Update to version 15.0.3.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Add llvm-armv7-fix-vector-compare-with-zero-lowering.patch: Fix
  lowering of non-canonical vector comparison with zero on armv7,
  preventing a crash (boo#1204267, gh#llvm/llvm-project#58514).
- Add lldb-swig-4.1.0-build-fix.patch: Fix build with Swig 4.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1667736000">- Update to version 15.0.4.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1668600000">- Update to version 15.0.5.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Remove obsolete lldb-swig-4.1.0-build-fix.patch.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1670155200">- Update to version 15.0.6.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1673697600">- Update to version 15.0.7.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Build stage 2 with -fno-plt on x86_64: since building with
  - Wl,-z,now the PLT stubs are basically dead code, so eliminating
  the indirection reduces the number of branches and improves code
  locality for the quite frequent cross-DSO calls.
- Add llvm-workaround-superfluous-branches.patch: hints LLVM to
  eliminate branches until gh#llvm/llvm-project#28804 is solved.</changelog>
  <changelog author="dmueller@suse.com" date="1678363200">- update constraints to exclude workers with very slow CPU</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1701345600">- Manage clang-cpp with update-alternatives like other binaries.
  Solves upgrade issues from Leap 15.5 to 15.6.  [boo#1221183]</changelog>
</package>
<package pkgid="f5f6ce7f85e83103dd76c8b1cfca2799c0ce699ac89da885f70706cac6b52159" name="libX11" arch="src">
  <version epoch="0" ver="1.6.5" rel="150000.3.33.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378728000">- Update to version 1.6.2:
  This release of libX11 includes a number of fixes to handle realloc() failure
  better, resolves a number of compiler &amp; static analyzer warnings, fixes several
  bugs in the X Input Method framework, and cleans up the XKB code to be a little
  more maintainable.
- Drop upstreamed patches:
  + Patch10: bug-239698_libx11.diff
  + Patch13: bug-221326-xim-sync.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1395662400">- U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch
  * fix typo in en_US Compose file (s/dead_actute/dead_acute/)
    (bnc#869333)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
  <changelog author="sndirsch@suse.com" date="1695816000">- U_0001-CVE-2023-43785-out-of-bounds-memory-access-in-_XkbRe.patch
  U_0002-CVE-2023-43786-stack-exhaustion-from-infinite-recurs.patch
  U_0003-XPutImage-clip-images-to-maximum-height-width-allowe.patch
  U_0004-XCreatePixmap-trigger-BadValue-error-for-out-of-rang.patch
  U_0005-CVE-2023-43787-Integer-overflow-in-XCreateImage-lead.patch
  * CVE-2023-43785 libX11: out-of-bounds memory access in
    _XkbReadKeySyms() (boo#1215683)
  * CVE-2023-43786 libX11: stack exhaustion from infinite recursion
  in PutSubImage() (boo#1215684)
  * CVE-2023-43787 libX11: integer overflow in XCreateImage()
    leading to a heap overflow (boo#1215685)</changelog>
</package>
<package pkgid="de9f9fe22fb4268565a310a62316ba8737096c3b5466ba49ae206e402ecfd65b" name="libX11-6" arch="aarch64">
  <version epoch="0" ver="1.6.5" rel="150000.3.33.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
  <changelog author="sndirsch@suse.com" date="1695816000">- U_0001-CVE-2023-43785-out-of-bounds-memory-access-in-_XkbRe.patch
  U_0002-CVE-2023-43786-stack-exhaustion-from-infinite-recurs.patch
  U_0003-XPutImage-clip-images-to-maximum-height-width-allowe.patch
  U_0004-XCreatePixmap-trigger-BadValue-error-for-out-of-rang.patch
  U_0005-CVE-2023-43787-Integer-overflow-in-XCreateImage-lead.patch
  * CVE-2023-43785 libX11: out-of-bounds memory access in
    _XkbReadKeySyms() (boo#1215683)
  * CVE-2023-43786 libX11: stack exhaustion from infinite recursion
  in PutSubImage() (boo#1215684)
  * CVE-2023-43787 libX11: integer overflow in XCreateImage()
    leading to a heap overflow (boo#1215685)</changelog>
</package>
<package pkgid="9975584c06db530ee59e809c369d62416d273bc36c289b15375184632901e060" name="libX11-6" arch="s390x">
  <version epoch="0" ver="1.6.5" rel="150000.3.33.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
  <changelog author="sndirsch@suse.com" date="1695816000">- U_0001-CVE-2023-43785-out-of-bounds-memory-access-in-_XkbRe.patch
  U_0002-CVE-2023-43786-stack-exhaustion-from-infinite-recurs.patch
  U_0003-XPutImage-clip-images-to-maximum-height-width-allowe.patch
  U_0004-XCreatePixmap-trigger-BadValue-error-for-out-of-rang.patch
  U_0005-CVE-2023-43787-Integer-overflow-in-XCreateImage-lead.patch
  * CVE-2023-43785 libX11: out-of-bounds memory access in
    _XkbReadKeySyms() (boo#1215683)
  * CVE-2023-43786 libX11: stack exhaustion from infinite recursion
  in PutSubImage() (boo#1215684)
  * CVE-2023-43787 libX11: integer overflow in XCreateImage()
    leading to a heap overflow (boo#1215685)</changelog>
</package>
<package pkgid="091b7a4e7b57eaf46901b5fadf94cf159136f38a8a37c358924a01948766614a" name="libX11-6" arch="x86_64">
  <version epoch="0" ver="1.6.5" rel="150000.3.33.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
  <changelog author="sndirsch@suse.com" date="1695816000">- U_0001-CVE-2023-43785-out-of-bounds-memory-access-in-_XkbRe.patch
  U_0002-CVE-2023-43786-stack-exhaustion-from-infinite-recurs.patch
  U_0003-XPutImage-clip-images-to-maximum-height-width-allowe.patch
  U_0004-XCreatePixmap-trigger-BadValue-error-for-out-of-rang.patch
  U_0005-CVE-2023-43787-Integer-overflow-in-XCreateImage-lead.patch
  * CVE-2023-43785 libX11: out-of-bounds memory access in
    _XkbReadKeySyms() (boo#1215683)
  * CVE-2023-43786 libX11: stack exhaustion from infinite recursion
  in PutSubImage() (boo#1215684)
  * CVE-2023-43787 libX11: integer overflow in XCreateImage()
    leading to a heap overflow (boo#1215685)</changelog>
</package>
<package pkgid="40043ca918cf34ad6a925de041020b875f95b1fb4eba167a73e65652b32a5551" name="libX11-data" arch="noarch">
  <version epoch="0" ver="1.6.5" rel="150000.3.33.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
  <changelog author="sndirsch@suse.com" date="1695816000">- U_0001-CVE-2023-43785-out-of-bounds-memory-access-in-_XkbRe.patch
  U_0002-CVE-2023-43786-stack-exhaustion-from-infinite-recurs.patch
  U_0003-XPutImage-clip-images-to-maximum-height-width-allowe.patch
  U_0004-XCreatePixmap-trigger-BadValue-error-for-out-of-rang.patch
  U_0005-CVE-2023-43787-Integer-overflow-in-XCreateImage-lead.patch
  * CVE-2023-43785 libX11: out-of-bounds memory access in
    _XkbReadKeySyms() (boo#1215683)
  * CVE-2023-43786 libX11: stack exhaustion from infinite recursion
  in PutSubImage() (boo#1215684)
  * CVE-2023-43787 libX11: integer overflow in XCreateImage()
    leading to a heap overflow (boo#1215685)</changelog>
</package>
<package pkgid="79753d4ab87d404262c9ec674289d0912b06e31744a5d63b5899d60e5ac2de42" name="libX11-xcb1" arch="aarch64">
  <version epoch="0" ver="1.6.5" rel="150000.3.33.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
  <changelog author="sndirsch@suse.com" date="1695816000">- U_0001-CVE-2023-43785-out-of-bounds-memory-access-in-_XkbRe.patch
  U_0002-CVE-2023-43786-stack-exhaustion-from-infinite-recurs.patch
  U_0003-XPutImage-clip-images-to-maximum-height-width-allowe.patch
  U_0004-XCreatePixmap-trigger-BadValue-error-for-out-of-rang.patch
  U_0005-CVE-2023-43787-Integer-overflow-in-XCreateImage-lead.patch
  * CVE-2023-43785 libX11: out-of-bounds memory access in
    _XkbReadKeySyms() (boo#1215683)
  * CVE-2023-43786 libX11: stack exhaustion from infinite recursion
  in PutSubImage() (boo#1215684)
  * CVE-2023-43787 libX11: integer overflow in XCreateImage()
    leading to a heap overflow (boo#1215685)</changelog>
</package>
<package pkgid="8d1ff75268b669793bc0850b9dbbd6497d64260b8cee1c95e2ecf839ac6c94e5" name="libX11-xcb1" arch="s390x">
  <version epoch="0" ver="1.6.5" rel="150000.3.33.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
  <changelog author="sndirsch@suse.com" date="1695816000">- U_0001-CVE-2023-43785-out-of-bounds-memory-access-in-_XkbRe.patch
  U_0002-CVE-2023-43786-stack-exhaustion-from-infinite-recurs.patch
  U_0003-XPutImage-clip-images-to-maximum-height-width-allowe.patch
  U_0004-XCreatePixmap-trigger-BadValue-error-for-out-of-rang.patch
  U_0005-CVE-2023-43787-Integer-overflow-in-XCreateImage-lead.patch
  * CVE-2023-43785 libX11: out-of-bounds memory access in
    _XkbReadKeySyms() (boo#1215683)
  * CVE-2023-43786 libX11: stack exhaustion from infinite recursion
  in PutSubImage() (boo#1215684)
  * CVE-2023-43787 libX11: integer overflow in XCreateImage()
    leading to a heap overflow (boo#1215685)</changelog>
</package>
<package pkgid="9b2034ab43589e1c33401f316c299753c84ee4f07b843e406e5b4eab365b240d" name="libX11-xcb1" arch="x86_64">
  <version epoch="0" ver="1.6.5" rel="150000.3.33.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
  <changelog author="sndirsch@suse.com" date="1695816000">- U_0001-CVE-2023-43785-out-of-bounds-memory-access-in-_XkbRe.patch
  U_0002-CVE-2023-43786-stack-exhaustion-from-infinite-recurs.patch
  U_0003-XPutImage-clip-images-to-maximum-height-width-allowe.patch
  U_0004-XCreatePixmap-trigger-BadValue-error-for-out-of-rang.patch
  U_0005-CVE-2023-43787-Integer-overflow-in-XCreateImage-lead.patch
  * CVE-2023-43785 libX11: out-of-bounds memory access in
    _XkbReadKeySyms() (boo#1215683)
  * CVE-2023-43786 libX11: stack exhaustion from infinite recursion
  in PutSubImage() (boo#1215684)
  * CVE-2023-43787 libX11: integer overflow in XCreateImage()
    leading to a heap overflow (boo#1215685)</changelog>
</package>
<package pkgid="ca83b27fa24c2c90d9d9f8a9a7e1054cdcb4b9c844e604e307d9cb35d0e8f664" name="libabsl2308_0_0" arch="aarch64">
  <version epoch="0" ver="20230802.1" rel="150400.10.4.1"/>
  <changelog author="fvogt@suse.com" date="1604664000">- Drop source package, was only used by grpc which was switched
  over to use the shared library</changelog>
  <changelog author="elimat@opensuse.org" date="1609243200">- Update to version 20200923.2
  What's New:
  * absl::StatusOr&lt;T&gt; has been released. See our blog
    post for more information.
  * Abseil Flags reflection interfaces have been released.
  * Abseil Flags memory usage has been significantly optimized.
  * Abseil now supports a "hardened" build mode. This build mode enables
    runtime checks that guard against programming errors that may lead
    to security vulnerabilities.
  Notable Fixes:
  * Sanitizer dynamic annotations like AnnotateRWLockCreate that are
    also defined by the compiler sanitizer implementation are no longer
    also defined by Abseil.
  * Sanitizer macros are now prefixed with ABSL_ to avoid naming collisions.
  * Sanitizer usage is now automatically detected and no longer requires
    macros like ADDRESS_SANITIZER to be defined on the command line.
  Breaking Changes:
  * Abseil no longer contains a dynamic_annotations library. Users
    using a supported build system (Bazel or CMake) are unaffected by
    this, but users manually specifying link libraries may get an error
    about a missing linker input.</changelog>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to LTS version 20210324.0
  * Breaking: The empty absl::container target has been removed from
    the CMake build. This target had no effect and references to
    this target in user code can safely be removed.
  * New: The cleanup library has been released. This library contains
    the control-flow-construct-like type absl::Cleanup which is used
    for executing a callback on scope exit.
  * New: The numeric library now includes bits.h, a polyfill header
    containing implementations of C++20's bitwise math functions.
  * New: Abseil now installs pkg-config files to make it easier to
    use Abseil with some other build systems.
  * New: Abseil now respects the default CMake installation paths.
    Standard CMake variables like CMAKE_INSTALL_PREFIX can be used
    to change the installation path.
- Added Correctly-install-pkgconfig.patch from upstream to fix
  installation of pkgconfig files
- Call ldconfig on post and postun</changelog>
  <changelog author="rpm@fthiessen.de" date="1619352000">- Update to LTS version 20210324.1
  * Fixed missing absl::Cleanup
  * Fixed pkgconfig install path
- Dropped upstream merged Correctly-install-pkgconfig.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1625054400">- Update to version 20210324.2 (LTS):
  * No user visible changes, only build system related</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 20211102.0:
  * absl::Cord is now implemented as a b-tree. The new implementation offers
    improved performance in most workloads.
  * absl::SimpleHexAtoi() has been added to strings library for parsing
    hexadecimal strings</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646395200">- Fix build on SLE-12-SP5</changelog>
  <changelog author="jengelh@inai.de" date="1649073600">- Implement shlib packaging policy</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1656504000">- Add options-old.patch, options-cxx17.patch (boo#1203378)
  * Ensure ABI stability regardless of compiler settings per instruction in the header.</changelog>
  <changelog author="fvogt@suse.com" date="1656504001">- Remove obsolete 0%{suse_version} &lt; 1500 conditions</changelog>
  <changelog author="elimat@opensuse.org" date="1656849600">- Update to version 20220623.0
  What's New:
  * Added absl::AnyInvocable, a move-only function type.
  * Added absl::CordBuffer, a type for buffering data for eventual inclusion an
    absl::Cord, which is useful for writing zero-copy code.
  * Added support for command-line flags of type absl::optional&lt;T&gt;.
  Breaking Changes:
  * CMake builds now use the flag ABSL_BUILD_TESTING (default: OFF) to control
    whether or not unit tests are built.
  * The ABSL_DEPRECATED macro now works with the GCC compiler. GCC users that
    are experiencing new warnings can use -Wno-deprecated-declatations silence
  the warnings or use -Wno-error=deprecated-declarations to see warnings but
  not fail the build.
  * ABSL_CONST_INIT uses the C++20 keyword constinit when available. Some
    compilers are more strict about where this keyword must appear compared to
  the pre-C++20 implementation.
  * Bazel builds now depend on the bazelbuild/bazel-skylib repository.
    See Abseil's WORKSPACE file for an example of how to add this dependency.
  Other:
  * This will be the last release to support C++11. Future releases will require at least C++14.
- run spec-cleaner</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1657540800">- Add Fix-maes-msse41-leaking-into-pkgconfig.patch
  * Do not make programs compiled with abseil require new-ish CPUs (boo#1203379)</changelog>
  <changelog author="dmueller@suse.com" date="1664020800">- update to 20220623.1:
  * minor warning fix</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to 20230125.2
  What's New:
    The Abseil logging library has been released. This library
    provides facilities for writing short text messages about the
    status of a program to stderr, disk files, or other sinks
    (via an extension API). See the logging library documentation
    for more information.
    An extension point, AbslStringify(), allows user-defined types
    to seamlessly work with Abseil's string formatting functions
    like absl::StrCat() and absl::StrFormat().
    A library for computing CRC32C checksums has been added.
    Floating-point parsing now uses the Eisel-Lemire algorithm,
    which provides a significant speed improvement.
    The flags library now provides suggestions for the closest
    flag(s) in the case of misspelled flags.
    Using CMake to install Abseil now makes the installed artifacts
    (in particular absl/base/options.h) reflect the compiled ABI.
  Breaking Changes:
    Abseil now requires at least C++14 and follows Google's Foundational
    C++ Support Policy. See this table for a list of currently supported
    versions compilers, platforms, and build tools.
    The legacy spellings of the thread annotation macros/functions
    (e.g. GUARDED_BY()) have been removed by default in favor of the
    ABSL_ prefixed versions (e.g. ABSL_GUARDED_BY()) due to clashes with
    other libraries. The compatibility macro ABSL_LEGACY_THREAD_ANNOTATIONS
    can be defined on the compile command-line to temporarily restore these
    spellings, but this compatibility macro will be removed in the future.
  Known Issues
    The Abseil logging library in this release is not a feature-complete
    replacement for glog yet. VLOG and DFATAL are examples of features
    that have not yet been released.
- obsolete Fix-maes-msse41-leaking-into-pkgconfig.patch</changelog>
  <changelog author="adrian@suse.de" date="1685016000">- update to 20230125.3
  Details can be found on:
    https://github.com/abseil/abseil-cpp/releases/tag/20230125.3</changelog>
  <changelog author="fvogt@suse.com" date="1688040000">- Add baselibs.conf to make protobuf happy. Hopefully temporary.</changelog>
  <changelog author="fstrba@suse.com" date="1691582400">- Fix build on older systems by requiring C++17 compliant compiler
- Added patch:
  * cmake.patch
    + lower the cmake requirement to 3.5 in order to be able to
    build on SLE12SP5</changelog>
  <changelog author="adrian@suse.de" date="1694088000">- update to 20230802.0
  What's New:
  * Added the nullability library for designating the expected
    nullability of pointers. Currently these serve as annotations
    only, but it is expected that compilers will one day be able
    to use these annotations for diagnostic purposes.
  * Added the prefetch library as a portable layer for moving data
    into caches before it is read.
  * Abseil's hash tables now detect many more programming errors
    in debug and sanitizer builds.
  * Abseil's synchronization objects now differentiate absolute
    waits (when passed an absl::Time) from relative waits (when
    passed an absl::Duration) when the underlying platform supports
    differentiating these cases. This only makes a difference when
    system clocks are adjusted.
  * Abseil's flag parsing library includes additional methods that
    make it easier to use when another library also expects to be
    able to parse flags.
  * absl::string_view is now available as a smaller target,
    @com_google_absl//absl/strings:string_view, so that users may
    use this library without depending on the much larger
    @com_google_absl//absl/strings target.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1696593600">- update to 20230802.1:
  * Add StdcppWaiter to the end of the list of waiter
    implementations</changelog>
  <changelog author="dmueller@suse.com" date="1705665600">- fix build for non-SUSE distributions</changelog>
</package>
<package pkgid="65fd36e91f7e166c51b13c48cef25e6654bbc1f0b88bbc1d08a4f2000fb80b5b" name="libabsl2308_0_0" arch="ppc64le">
  <version epoch="0" ver="20230802.1" rel="150400.10.4.1"/>
  <changelog author="fvogt@suse.com" date="1604664000">- Drop source package, was only used by grpc which was switched
  over to use the shared library</changelog>
  <changelog author="elimat@opensuse.org" date="1609243200">- Update to version 20200923.2
  What's New:
  * absl::StatusOr&lt;T&gt; has been released. See our blog
    post for more information.
  * Abseil Flags reflection interfaces have been released.
  * Abseil Flags memory usage has been significantly optimized.
  * Abseil now supports a "hardened" build mode. This build mode enables
    runtime checks that guard against programming errors that may lead
    to security vulnerabilities.
  Notable Fixes:
  * Sanitizer dynamic annotations like AnnotateRWLockCreate that are
    also defined by the compiler sanitizer implementation are no longer
    also defined by Abseil.
  * Sanitizer macros are now prefixed with ABSL_ to avoid naming collisions.
  * Sanitizer usage is now automatically detected and no longer requires
    macros like ADDRESS_SANITIZER to be defined on the command line.
  Breaking Changes:
  * Abseil no longer contains a dynamic_annotations library. Users
    using a supported build system (Bazel or CMake) are unaffected by
    this, but users manually specifying link libraries may get an error
    about a missing linker input.</changelog>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to LTS version 20210324.0
  * Breaking: The empty absl::container target has been removed from
    the CMake build. This target had no effect and references to
    this target in user code can safely be removed.
  * New: The cleanup library has been released. This library contains
    the control-flow-construct-like type absl::Cleanup which is used
    for executing a callback on scope exit.
  * New: The numeric library now includes bits.h, a polyfill header
    containing implementations of C++20's bitwise math functions.
  * New: Abseil now installs pkg-config files to make it easier to
    use Abseil with some other build systems.
  * New: Abseil now respects the default CMake installation paths.
    Standard CMake variables like CMAKE_INSTALL_PREFIX can be used
    to change the installation path.
- Added Correctly-install-pkgconfig.patch from upstream to fix
  installation of pkgconfig files
- Call ldconfig on post and postun</changelog>
  <changelog author="rpm@fthiessen.de" date="1619352000">- Update to LTS version 20210324.1
  * Fixed missing absl::Cleanup
  * Fixed pkgconfig install path
- Dropped upstream merged Correctly-install-pkgconfig.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1625054400">- Update to version 20210324.2 (LTS):
  * No user visible changes, only build system related</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 20211102.0:
  * absl::Cord is now implemented as a b-tree. The new implementation offers
    improved performance in most workloads.
  * absl::SimpleHexAtoi() has been added to strings library for parsing
    hexadecimal strings</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646395200">- Fix build on SLE-12-SP5</changelog>
  <changelog author="jengelh@inai.de" date="1649073600">- Implement shlib packaging policy</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1656504000">- Add options-old.patch, options-cxx17.patch (boo#1203378)
  * Ensure ABI stability regardless of compiler settings per instruction in the header.</changelog>
  <changelog author="fvogt@suse.com" date="1656504001">- Remove obsolete 0%{suse_version} &lt; 1500 conditions</changelog>
  <changelog author="elimat@opensuse.org" date="1656849600">- Update to version 20220623.0
  What's New:
  * Added absl::AnyInvocable, a move-only function type.
  * Added absl::CordBuffer, a type for buffering data for eventual inclusion an
    absl::Cord, which is useful for writing zero-copy code.
  * Added support for command-line flags of type absl::optional&lt;T&gt;.
  Breaking Changes:
  * CMake builds now use the flag ABSL_BUILD_TESTING (default: OFF) to control
    whether or not unit tests are built.
  * The ABSL_DEPRECATED macro now works with the GCC compiler. GCC users that
    are experiencing new warnings can use -Wno-deprecated-declatations silence
  the warnings or use -Wno-error=deprecated-declarations to see warnings but
  not fail the build.
  * ABSL_CONST_INIT uses the C++20 keyword constinit when available. Some
    compilers are more strict about where this keyword must appear compared to
  the pre-C++20 implementation.
  * Bazel builds now depend on the bazelbuild/bazel-skylib repository.
    See Abseil's WORKSPACE file for an example of how to add this dependency.
  Other:
  * This will be the last release to support C++11. Future releases will require at least C++14.
- run spec-cleaner</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1657540800">- Add Fix-maes-msse41-leaking-into-pkgconfig.patch
  * Do not make programs compiled with abseil require new-ish CPUs (boo#1203379)</changelog>
  <changelog author="dmueller@suse.com" date="1664020800">- update to 20220623.1:
  * minor warning fix</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to 20230125.2
  What's New:
    The Abseil logging library has been released. This library
    provides facilities for writing short text messages about the
    status of a program to stderr, disk files, or other sinks
    (via an extension API). See the logging library documentation
    for more information.
    An extension point, AbslStringify(), allows user-defined types
    to seamlessly work with Abseil's string formatting functions
    like absl::StrCat() and absl::StrFormat().
    A library for computing CRC32C checksums has been added.
    Floating-point parsing now uses the Eisel-Lemire algorithm,
    which provides a significant speed improvement.
    The flags library now provides suggestions for the closest
    flag(s) in the case of misspelled flags.
    Using CMake to install Abseil now makes the installed artifacts
    (in particular absl/base/options.h) reflect the compiled ABI.
  Breaking Changes:
    Abseil now requires at least C++14 and follows Google's Foundational
    C++ Support Policy. See this table for a list of currently supported
    versions compilers, platforms, and build tools.
    The legacy spellings of the thread annotation macros/functions
    (e.g. GUARDED_BY()) have been removed by default in favor of the
    ABSL_ prefixed versions (e.g. ABSL_GUARDED_BY()) due to clashes with
    other libraries. The compatibility macro ABSL_LEGACY_THREAD_ANNOTATIONS
    can be defined on the compile command-line to temporarily restore these
    spellings, but this compatibility macro will be removed in the future.
  Known Issues
    The Abseil logging library in this release is not a feature-complete
    replacement for glog yet. VLOG and DFATAL are examples of features
    that have not yet been released.
- obsolete Fix-maes-msse41-leaking-into-pkgconfig.patch</changelog>
  <changelog author="adrian@suse.de" date="1685016000">- update to 20230125.3
  Details can be found on:
    https://github.com/abseil/abseil-cpp/releases/tag/20230125.3</changelog>
  <changelog author="fvogt@suse.com" date="1688040000">- Add baselibs.conf to make protobuf happy. Hopefully temporary.</changelog>
  <changelog author="fstrba@suse.com" date="1691582400">- Fix build on older systems by requiring C++17 compliant compiler
- Added patch:
  * cmake.patch
    + lower the cmake requirement to 3.5 in order to be able to
    build on SLE12SP5</changelog>
  <changelog author="adrian@suse.de" date="1694088000">- update to 20230802.0
  What's New:
  * Added the nullability library for designating the expected
    nullability of pointers. Currently these serve as annotations
    only, but it is expected that compilers will one day be able
    to use these annotations for diagnostic purposes.
  * Added the prefetch library as a portable layer for moving data
    into caches before it is read.
  * Abseil's hash tables now detect many more programming errors
    in debug and sanitizer builds.
  * Abseil's synchronization objects now differentiate absolute
    waits (when passed an absl::Time) from relative waits (when
    passed an absl::Duration) when the underlying platform supports
    differentiating these cases. This only makes a difference when
    system clocks are adjusted.
  * Abseil's flag parsing library includes additional methods that
    make it easier to use when another library also expects to be
    able to parse flags.
  * absl::string_view is now available as a smaller target,
    @com_google_absl//absl/strings:string_view, so that users may
    use this library without depending on the much larger
    @com_google_absl//absl/strings target.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1696593600">- update to 20230802.1:
  * Add StdcppWaiter to the end of the list of waiter
    implementations</changelog>
  <changelog author="dmueller@suse.com" date="1705665600">- fix build for non-SUSE distributions</changelog>
</package>
<package pkgid="1a62bdac75f522fb481456cce64040977d1ef3357223c239f4eee3f8440d0697" name="libabsl2308_0_0" arch="s390x">
  <version epoch="0" ver="20230802.1" rel="150400.10.4.1"/>
  <changelog author="fvogt@suse.com" date="1604664000">- Drop source package, was only used by grpc which was switched
  over to use the shared library</changelog>
  <changelog author="elimat@opensuse.org" date="1609243200">- Update to version 20200923.2
  What's New:
  * absl::StatusOr&lt;T&gt; has been released. See our blog
    post for more information.
  * Abseil Flags reflection interfaces have been released.
  * Abseil Flags memory usage has been significantly optimized.
  * Abseil now supports a "hardened" build mode. This build mode enables
    runtime checks that guard against programming errors that may lead
    to security vulnerabilities.
  Notable Fixes:
  * Sanitizer dynamic annotations like AnnotateRWLockCreate that are
    also defined by the compiler sanitizer implementation are no longer
    also defined by Abseil.
  * Sanitizer macros are now prefixed with ABSL_ to avoid naming collisions.
  * Sanitizer usage is now automatically detected and no longer requires
    macros like ADDRESS_SANITIZER to be defined on the command line.
  Breaking Changes:
  * Abseil no longer contains a dynamic_annotations library. Users
    using a supported build system (Bazel or CMake) are unaffected by
    this, but users manually specifying link libraries may get an error
    about a missing linker input.</changelog>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to LTS version 20210324.0
  * Breaking: The empty absl::container target has been removed from
    the CMake build. This target had no effect and references to
    this target in user code can safely be removed.
  * New: The cleanup library has been released. This library contains
    the control-flow-construct-like type absl::Cleanup which is used
    for executing a callback on scope exit.
  * New: The numeric library now includes bits.h, a polyfill header
    containing implementations of C++20's bitwise math functions.
  * New: Abseil now installs pkg-config files to make it easier to
    use Abseil with some other build systems.
  * New: Abseil now respects the default CMake installation paths.
    Standard CMake variables like CMAKE_INSTALL_PREFIX can be used
    to change the installation path.
- Added Correctly-install-pkgconfig.patch from upstream to fix
  installation of pkgconfig files
- Call ldconfig on post and postun</changelog>
  <changelog author="rpm@fthiessen.de" date="1619352000">- Update to LTS version 20210324.1
  * Fixed missing absl::Cleanup
  * Fixed pkgconfig install path
- Dropped upstream merged Correctly-install-pkgconfig.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1625054400">- Update to version 20210324.2 (LTS):
  * No user visible changes, only build system related</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 20211102.0:
  * absl::Cord is now implemented as a b-tree. The new implementation offers
    improved performance in most workloads.
  * absl::SimpleHexAtoi() has been added to strings library for parsing
    hexadecimal strings</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646395200">- Fix build on SLE-12-SP5</changelog>
  <changelog author="jengelh@inai.de" date="1649073600">- Implement shlib packaging policy</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1656504000">- Add options-old.patch, options-cxx17.patch (boo#1203378)
  * Ensure ABI stability regardless of compiler settings per instruction in the header.</changelog>
  <changelog author="fvogt@suse.com" date="1656504001">- Remove obsolete 0%{suse_version} &lt; 1500 conditions</changelog>
  <changelog author="elimat@opensuse.org" date="1656849600">- Update to version 20220623.0
  What's New:
  * Added absl::AnyInvocable, a move-only function type.
  * Added absl::CordBuffer, a type for buffering data for eventual inclusion an
    absl::Cord, which is useful for writing zero-copy code.
  * Added support for command-line flags of type absl::optional&lt;T&gt;.
  Breaking Changes:
  * CMake builds now use the flag ABSL_BUILD_TESTING (default: OFF) to control
    whether or not unit tests are built.
  * The ABSL_DEPRECATED macro now works with the GCC compiler. GCC users that
    are experiencing new warnings can use -Wno-deprecated-declatations silence
  the warnings or use -Wno-error=deprecated-declarations to see warnings but
  not fail the build.
  * ABSL_CONST_INIT uses the C++20 keyword constinit when available. Some
    compilers are more strict about where this keyword must appear compared to
  the pre-C++20 implementation.
  * Bazel builds now depend on the bazelbuild/bazel-skylib repository.
    See Abseil's WORKSPACE file for an example of how to add this dependency.
  Other:
  * This will be the last release to support C++11. Future releases will require at least C++14.
- run spec-cleaner</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1657540800">- Add Fix-maes-msse41-leaking-into-pkgconfig.patch
  * Do not make programs compiled with abseil require new-ish CPUs (boo#1203379)</changelog>
  <changelog author="dmueller@suse.com" date="1664020800">- update to 20220623.1:
  * minor warning fix</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to 20230125.2
  What's New:
    The Abseil logging library has been released. This library
    provides facilities for writing short text messages about the
    status of a program to stderr, disk files, or other sinks
    (via an extension API). See the logging library documentation
    for more information.
    An extension point, AbslStringify(), allows user-defined types
    to seamlessly work with Abseil's string formatting functions
    like absl::StrCat() and absl::StrFormat().
    A library for computing CRC32C checksums has been added.
    Floating-point parsing now uses the Eisel-Lemire algorithm,
    which provides a significant speed improvement.
    The flags library now provides suggestions for the closest
    flag(s) in the case of misspelled flags.
    Using CMake to install Abseil now makes the installed artifacts
    (in particular absl/base/options.h) reflect the compiled ABI.
  Breaking Changes:
    Abseil now requires at least C++14 and follows Google's Foundational
    C++ Support Policy. See this table for a list of currently supported
    versions compilers, platforms, and build tools.
    The legacy spellings of the thread annotation macros/functions
    (e.g. GUARDED_BY()) have been removed by default in favor of the
    ABSL_ prefixed versions (e.g. ABSL_GUARDED_BY()) due to clashes with
    other libraries. The compatibility macro ABSL_LEGACY_THREAD_ANNOTATIONS
    can be defined on the compile command-line to temporarily restore these
    spellings, but this compatibility macro will be removed in the future.
  Known Issues
    The Abseil logging library in this release is not a feature-complete
    replacement for glog yet. VLOG and DFATAL are examples of features
    that have not yet been released.
- obsolete Fix-maes-msse41-leaking-into-pkgconfig.patch</changelog>
  <changelog author="adrian@suse.de" date="1685016000">- update to 20230125.3
  Details can be found on:
    https://github.com/abseil/abseil-cpp/releases/tag/20230125.3</changelog>
  <changelog author="fvogt@suse.com" date="1688040000">- Add baselibs.conf to make protobuf happy. Hopefully temporary.</changelog>
  <changelog author="fstrba@suse.com" date="1691582400">- Fix build on older systems by requiring C++17 compliant compiler
- Added patch:
  * cmake.patch
    + lower the cmake requirement to 3.5 in order to be able to
    build on SLE12SP5</changelog>
  <changelog author="adrian@suse.de" date="1694088000">- update to 20230802.0
  What's New:
  * Added the nullability library for designating the expected
    nullability of pointers. Currently these serve as annotations
    only, but it is expected that compilers will one day be able
    to use these annotations for diagnostic purposes.
  * Added the prefetch library as a portable layer for moving data
    into caches before it is read.
  * Abseil's hash tables now detect many more programming errors
    in debug and sanitizer builds.
  * Abseil's synchronization objects now differentiate absolute
    waits (when passed an absl::Time) from relative waits (when
    passed an absl::Duration) when the underlying platform supports
    differentiating these cases. This only makes a difference when
    system clocks are adjusted.
  * Abseil's flag parsing library includes additional methods that
    make it easier to use when another library also expects to be
    able to parse flags.
  * absl::string_view is now available as a smaller target,
    @com_google_absl//absl/strings:string_view, so that users may
    use this library without depending on the much larger
    @com_google_absl//absl/strings target.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1696593600">- update to 20230802.1:
  * Add StdcppWaiter to the end of the list of waiter
    implementations</changelog>
  <changelog author="dmueller@suse.com" date="1705665600">- fix build for non-SUSE distributions</changelog>
</package>
<package pkgid="218ac726dd655e61d5658c3ac169cbc46f939e241d7459e5200e029aadb5dc82" name="libabsl2308_0_0" arch="x86_64">
  <version epoch="0" ver="20230802.1" rel="150400.10.4.1"/>
  <changelog author="fvogt@suse.com" date="1604664000">- Drop source package, was only used by grpc which was switched
  over to use the shared library</changelog>
  <changelog author="elimat@opensuse.org" date="1609243200">- Update to version 20200923.2
  What's New:
  * absl::StatusOr&lt;T&gt; has been released. See our blog
    post for more information.
  * Abseil Flags reflection interfaces have been released.
  * Abseil Flags memory usage has been significantly optimized.
  * Abseil now supports a "hardened" build mode. This build mode enables
    runtime checks that guard against programming errors that may lead
    to security vulnerabilities.
  Notable Fixes:
  * Sanitizer dynamic annotations like AnnotateRWLockCreate that are
    also defined by the compiler sanitizer implementation are no longer
    also defined by Abseil.
  * Sanitizer macros are now prefixed with ABSL_ to avoid naming collisions.
  * Sanitizer usage is now automatically detected and no longer requires
    macros like ADDRESS_SANITIZER to be defined on the command line.
  Breaking Changes:
  * Abseil no longer contains a dynamic_annotations library. Users
    using a supported build system (Bazel or CMake) are unaffected by
    this, but users manually specifying link libraries may get an error
    about a missing linker input.</changelog>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to LTS version 20210324.0
  * Breaking: The empty absl::container target has been removed from
    the CMake build. This target had no effect and references to
    this target in user code can safely be removed.
  * New: The cleanup library has been released. This library contains
    the control-flow-construct-like type absl::Cleanup which is used
    for executing a callback on scope exit.
  * New: The numeric library now includes bits.h, a polyfill header
    containing implementations of C++20's bitwise math functions.
  * New: Abseil now installs pkg-config files to make it easier to
    use Abseil with some other build systems.
  * New: Abseil now respects the default CMake installation paths.
    Standard CMake variables like CMAKE_INSTALL_PREFIX can be used
    to change the installation path.
- Added Correctly-install-pkgconfig.patch from upstream to fix
  installation of pkgconfig files
- Call ldconfig on post and postun</changelog>
  <changelog author="rpm@fthiessen.de" date="1619352000">- Update to LTS version 20210324.1
  * Fixed missing absl::Cleanup
  * Fixed pkgconfig install path
- Dropped upstream merged Correctly-install-pkgconfig.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1625054400">- Update to version 20210324.2 (LTS):
  * No user visible changes, only build system related</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 20211102.0:
  * absl::Cord is now implemented as a b-tree. The new implementation offers
    improved performance in most workloads.
  * absl::SimpleHexAtoi() has been added to strings library for parsing
    hexadecimal strings</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646395200">- Fix build on SLE-12-SP5</changelog>
  <changelog author="jengelh@inai.de" date="1649073600">- Implement shlib packaging policy</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1656504000">- Add options-old.patch, options-cxx17.patch (boo#1203378)
  * Ensure ABI stability regardless of compiler settings per instruction in the header.</changelog>
  <changelog author="fvogt@suse.com" date="1656504001">- Remove obsolete 0%{suse_version} &lt; 1500 conditions</changelog>
  <changelog author="elimat@opensuse.org" date="1656849600">- Update to version 20220623.0
  What's New:
  * Added absl::AnyInvocable, a move-only function type.
  * Added absl::CordBuffer, a type for buffering data for eventual inclusion an
    absl::Cord, which is useful for writing zero-copy code.
  * Added support for command-line flags of type absl::optional&lt;T&gt;.
  Breaking Changes:
  * CMake builds now use the flag ABSL_BUILD_TESTING (default: OFF) to control
    whether or not unit tests are built.
  * The ABSL_DEPRECATED macro now works with the GCC compiler. GCC users that
    are experiencing new warnings can use -Wno-deprecated-declatations silence
  the warnings or use -Wno-error=deprecated-declarations to see warnings but
  not fail the build.
  * ABSL_CONST_INIT uses the C++20 keyword constinit when available. Some
    compilers are more strict about where this keyword must appear compared to
  the pre-C++20 implementation.
  * Bazel builds now depend on the bazelbuild/bazel-skylib repository.
    See Abseil's WORKSPACE file for an example of how to add this dependency.
  Other:
  * This will be the last release to support C++11. Future releases will require at least C++14.
- run spec-cleaner</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1657540800">- Add Fix-maes-msse41-leaking-into-pkgconfig.patch
  * Do not make programs compiled with abseil require new-ish CPUs (boo#1203379)</changelog>
  <changelog author="dmueller@suse.com" date="1664020800">- update to 20220623.1:
  * minor warning fix</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to 20230125.2
  What's New:
    The Abseil logging library has been released. This library
    provides facilities for writing short text messages about the
    status of a program to stderr, disk files, or other sinks
    (via an extension API). See the logging library documentation
    for more information.
    An extension point, AbslStringify(), allows user-defined types
    to seamlessly work with Abseil's string formatting functions
    like absl::StrCat() and absl::StrFormat().
    A library for computing CRC32C checksums has been added.
    Floating-point parsing now uses the Eisel-Lemire algorithm,
    which provides a significant speed improvement.
    The flags library now provides suggestions for the closest
    flag(s) in the case of misspelled flags.
    Using CMake to install Abseil now makes the installed artifacts
    (in particular absl/base/options.h) reflect the compiled ABI.
  Breaking Changes:
    Abseil now requires at least C++14 and follows Google's Foundational
    C++ Support Policy. See this table for a list of currently supported
    versions compilers, platforms, and build tools.
    The legacy spellings of the thread annotation macros/functions
    (e.g. GUARDED_BY()) have been removed by default in favor of the
    ABSL_ prefixed versions (e.g. ABSL_GUARDED_BY()) due to clashes with
    other libraries. The compatibility macro ABSL_LEGACY_THREAD_ANNOTATIONS
    can be defined on the compile command-line to temporarily restore these
    spellings, but this compatibility macro will be removed in the future.
  Known Issues
    The Abseil logging library in this release is not a feature-complete
    replacement for glog yet. VLOG and DFATAL are examples of features
    that have not yet been released.
- obsolete Fix-maes-msse41-leaking-into-pkgconfig.patch</changelog>
  <changelog author="adrian@suse.de" date="1685016000">- update to 20230125.3
  Details can be found on:
    https://github.com/abseil/abseil-cpp/releases/tag/20230125.3</changelog>
  <changelog author="fvogt@suse.com" date="1688040000">- Add baselibs.conf to make protobuf happy. Hopefully temporary.</changelog>
  <changelog author="fstrba@suse.com" date="1691582400">- Fix build on older systems by requiring C++17 compliant compiler
- Added patch:
  * cmake.patch
    + lower the cmake requirement to 3.5 in order to be able to
    build on SLE12SP5</changelog>
  <changelog author="adrian@suse.de" date="1694088000">- update to 20230802.0
  What's New:
  * Added the nullability library for designating the expected
    nullability of pointers. Currently these serve as annotations
    only, but it is expected that compilers will one day be able
    to use these annotations for diagnostic purposes.
  * Added the prefetch library as a portable layer for moving data
    into caches before it is read.
  * Abseil's hash tables now detect many more programming errors
    in debug and sanitizer builds.
  * Abseil's synchronization objects now differentiate absolute
    waits (when passed an absl::Time) from relative waits (when
    passed an absl::Duration) when the underlying platform supports
    differentiating these cases. This only makes a difference when
    system clocks are adjusted.
  * Abseil's flag parsing library includes additional methods that
    make it easier to use when another library also expects to be
    able to parse flags.
  * absl::string_view is now available as a smaller target,
    @com_google_absl//absl/strings:string_view, so that users may
    use this library without depending on the much larger
    @com_google_absl//absl/strings target.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1696593600">- update to 20230802.1:
  * Add StdcppWaiter to the end of the list of waiter
    implementations</changelog>
  <changelog author="dmueller@suse.com" date="1705665600">- fix build for non-SUSE distributions</changelog>
</package>
<package pkgid="84189efce50549d6014ca298dd90cdab8226645d17f0ce2b0750fe41fdb84b6a" name="libabsl2401_0_0" arch="aarch64">
  <version epoch="0" ver="20240116.1" rel="150500.13.7.8"/>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to LTS version 20210324.0
  * Breaking: The empty absl::container target has been removed from
    the CMake build. This target had no effect and references to
    this target in user code can safely be removed.
  * New: The cleanup library has been released. This library contains
    the control-flow-construct-like type absl::Cleanup which is used
    for executing a callback on scope exit.
  * New: The numeric library now includes bits.h, a polyfill header
    containing implementations of C++20's bitwise math functions.
  * New: Abseil now installs pkg-config files to make it easier to
    use Abseil with some other build systems.
  * New: Abseil now respects the default CMake installation paths.
    Standard CMake variables like CMAKE_INSTALL_PREFIX can be used
    to change the installation path.
- Added Correctly-install-pkgconfig.patch from upstream to fix
  installation of pkgconfig files
- Call ldconfig on post and postun</changelog>
  <changelog author="rpm@fthiessen.de" date="1619352000">- Update to LTS version 20210324.1
  * Fixed missing absl::Cleanup
  * Fixed pkgconfig install path
- Dropped upstream merged Correctly-install-pkgconfig.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1625054400">- Update to version 20210324.2 (LTS):
  * No user visible changes, only build system related</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 20211102.0:
  * absl::Cord is now implemented as a b-tree. The new implementation offers
    improved performance in most workloads.
  * absl::SimpleHexAtoi() has been added to strings library for parsing
    hexadecimal strings</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646395200">- Fix build on SLE-12-SP5</changelog>
  <changelog author="jengelh@inai.de" date="1649073600">- Implement shlib packaging policy</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1656504000">- Add options-old.patch, options-cxx17.patch (boo#1203378)
  * Ensure ABI stability regardless of compiler settings per instruction in the header.</changelog>
  <changelog author="fvogt@suse.com" date="1656504001">- Remove obsolete 0%{suse_version} &lt; 1500 conditions</changelog>
  <changelog author="elimat@opensuse.org" date="1656849600">- Update to version 20220623.0
  What's New:
  * Added absl::AnyInvocable, a move-only function type.
  * Added absl::CordBuffer, a type for buffering data for eventual inclusion an
    absl::Cord, which is useful for writing zero-copy code.
  * Added support for command-line flags of type absl::optional&lt;T&gt;.
  Breaking Changes:
  * CMake builds now use the flag ABSL_BUILD_TESTING (default: OFF) to control
    whether or not unit tests are built.
  * The ABSL_DEPRECATED macro now works with the GCC compiler. GCC users that
    are experiencing new warnings can use -Wno-deprecated-declatations silence
  the warnings or use -Wno-error=deprecated-declarations to see warnings but
  not fail the build.
  * ABSL_CONST_INIT uses the C++20 keyword constinit when available. Some
    compilers are more strict about where this keyword must appear compared to
  the pre-C++20 implementation.
  * Bazel builds now depend on the bazelbuild/bazel-skylib repository.
    See Abseil's WORKSPACE file for an example of how to add this dependency.
  Other:
  * This will be the last release to support C++11. Future releases will require at least C++14.
- run spec-cleaner</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1657540800">- Add Fix-maes-msse41-leaking-into-pkgconfig.patch
  * Do not make programs compiled with abseil require new-ish CPUs (boo#1203379)</changelog>
  <changelog author="dmueller@suse.com" date="1664020800">- update to 20220623.1:
  * minor warning fix</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to 20230125.2
  What's New:
    The Abseil logging library has been released. This library
    provides facilities for writing short text messages about the
    status of a program to stderr, disk files, or other sinks
    (via an extension API). See the logging library documentation
    for more information.
    An extension point, AbslStringify(), allows user-defined types
    to seamlessly work with Abseil's string formatting functions
    like absl::StrCat() and absl::StrFormat().
    A library for computing CRC32C checksums has been added.
    Floating-point parsing now uses the Eisel-Lemire algorithm,
    which provides a significant speed improvement.
    The flags library now provides suggestions for the closest
    flag(s) in the case of misspelled flags.
    Using CMake to install Abseil now makes the installed artifacts
    (in particular absl/base/options.h) reflect the compiled ABI.
  Breaking Changes:
    Abseil now requires at least C++14 and follows Google's Foundational
    C++ Support Policy. See this table for a list of currently supported
    versions compilers, platforms, and build tools.
    The legacy spellings of the thread annotation macros/functions
    (e.g. GUARDED_BY()) have been removed by default in favor of the
    ABSL_ prefixed versions (e.g. ABSL_GUARDED_BY()) due to clashes with
    other libraries. The compatibility macro ABSL_LEGACY_THREAD_ANNOTATIONS
    can be defined on the compile command-line to temporarily restore these
    spellings, but this compatibility macro will be removed in the future.
  Known Issues
    The Abseil logging library in this release is not a feature-complete
    replacement for glog yet. VLOG and DFATAL are examples of features
    that have not yet been released.
- obsolete Fix-maes-msse41-leaking-into-pkgconfig.patch</changelog>
  <changelog author="adrian@suse.de" date="1685016000">- update to 20230125.3
  Details can be found on:
    https://github.com/abseil/abseil-cpp/releases/tag/20230125.3</changelog>
  <changelog author="fvogt@suse.com" date="1688040000">- Add baselibs.conf to make protobuf happy. Hopefully temporary.</changelog>
  <changelog author="fstrba@suse.com" date="1691582400">- Fix build on older systems by requiring C++17 compliant compiler
- Added patch:
  * cmake.patch
    + lower the cmake requirement to 3.5 in order to be able to
    build on SLE12SP5</changelog>
  <changelog author="adrian@suse.de" date="1694088000">- update to 20230802.0
  What's New:
  * Added the nullability library for designating the expected
    nullability of pointers. Currently these serve as annotations
    only, but it is expected that compilers will one day be able
    to use these annotations for diagnostic purposes.
  * Added the prefetch library as a portable layer for moving data
    into caches before it is read.
  * Abseil's hash tables now detect many more programming errors
    in debug and sanitizer builds.
  * Abseil's synchronization objects now differentiate absolute
    waits (when passed an absl::Time) from relative waits (when
    passed an absl::Duration) when the underlying platform supports
    differentiating these cases. This only makes a difference when
    system clocks are adjusted.
  * Abseil's flag parsing library includes additional methods that
    make it easier to use when another library also expects to be
    able to parse flags.
  * absl::string_view is now available as a smaller target,
    @com_google_absl//absl/strings:string_view, so that users may
    use this library without depending on the much larger
    @com_google_absl//absl/strings target.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1696593600">- update to 20230802.1:
  * Add StdcppWaiter to the end of the list of waiter
    implementations</changelog>
  <changelog author="dmueller@suse.com" date="1705665600">- fix build for non-SUSE distributions</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1709467200">- update to 20240116.1:
  * Add absl::NoDestructor&lt;T&gt; to simplify defining static types
    that do not need to be destructed upon program exit.
  * Add configurable verbose logging (also known as VLOG).
  * Added absl::Overload(), which returns a functor that provides
    overloads based on the functors passed to it. Note that this
    functionality requires C++17 or newer.
  * Breaking Change: AbslHashValue() no longer accepts C-style
    arrays as a parameter, caller need to wrap C-string literals in
    absl::string_view.
  * Breaking Change: absl::weak_equality and absl::strong_equality
    have been removed. The corresponding std types were removed
    before C++20 was finalized</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1712836800">- SLE-only: import upstream patch to fix build with gcc7 in C++17
  mode: hash-fix-gcc7-cpp17-build.patch (bsc#1222261)
  + Upstream commit bb83aceacb554e79e7cd2404856f0be30bd00303</changelog>
</package>
<package pkgid="15bba17dda4104af6ae2536c3bea8fe41bd4e4b58a593b3fbbfcc42c5a497549" name="libabsl2401_0_0" arch="ppc64le">
  <version epoch="0" ver="20240116.1" rel="150500.13.7.8"/>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to LTS version 20210324.0
  * Breaking: The empty absl::container target has been removed from
    the CMake build. This target had no effect and references to
    this target in user code can safely be removed.
  * New: The cleanup library has been released. This library contains
    the control-flow-construct-like type absl::Cleanup which is used
    for executing a callback on scope exit.
  * New: The numeric library now includes bits.h, a polyfill header
    containing implementations of C++20's bitwise math functions.
  * New: Abseil now installs pkg-config files to make it easier to
    use Abseil with some other build systems.
  * New: Abseil now respects the default CMake installation paths.
    Standard CMake variables like CMAKE_INSTALL_PREFIX can be used
    to change the installation path.
- Added Correctly-install-pkgconfig.patch from upstream to fix
  installation of pkgconfig files
- Call ldconfig on post and postun</changelog>
  <changelog author="rpm@fthiessen.de" date="1619352000">- Update to LTS version 20210324.1
  * Fixed missing absl::Cleanup
  * Fixed pkgconfig install path
- Dropped upstream merged Correctly-install-pkgconfig.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1625054400">- Update to version 20210324.2 (LTS):
  * No user visible changes, only build system related</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 20211102.0:
  * absl::Cord is now implemented as a b-tree. The new implementation offers
    improved performance in most workloads.
  * absl::SimpleHexAtoi() has been added to strings library for parsing
    hexadecimal strings</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646395200">- Fix build on SLE-12-SP5</changelog>
  <changelog author="jengelh@inai.de" date="1649073600">- Implement shlib packaging policy</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1656504000">- Add options-old.patch, options-cxx17.patch (boo#1203378)
  * Ensure ABI stability regardless of compiler settings per instruction in the header.</changelog>
  <changelog author="fvogt@suse.com" date="1656504001">- Remove obsolete 0%{suse_version} &lt; 1500 conditions</changelog>
  <changelog author="elimat@opensuse.org" date="1656849600">- Update to version 20220623.0
  What's New:
  * Added absl::AnyInvocable, a move-only function type.
  * Added absl::CordBuffer, a type for buffering data for eventual inclusion an
    absl::Cord, which is useful for writing zero-copy code.
  * Added support for command-line flags of type absl::optional&lt;T&gt;.
  Breaking Changes:
  * CMake builds now use the flag ABSL_BUILD_TESTING (default: OFF) to control
    whether or not unit tests are built.
  * The ABSL_DEPRECATED macro now works with the GCC compiler. GCC users that
    are experiencing new warnings can use -Wno-deprecated-declatations silence
  the warnings or use -Wno-error=deprecated-declarations to see warnings but
  not fail the build.
  * ABSL_CONST_INIT uses the C++20 keyword constinit when available. Some
    compilers are more strict about where this keyword must appear compared to
  the pre-C++20 implementation.
  * Bazel builds now depend on the bazelbuild/bazel-skylib repository.
    See Abseil's WORKSPACE file for an example of how to add this dependency.
  Other:
  * This will be the last release to support C++11. Future releases will require at least C++14.
- run spec-cleaner</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1657540800">- Add Fix-maes-msse41-leaking-into-pkgconfig.patch
  * Do not make programs compiled with abseil require new-ish CPUs (boo#1203379)</changelog>
  <changelog author="dmueller@suse.com" date="1664020800">- update to 20220623.1:
  * minor warning fix</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to 20230125.2
  What's New:
    The Abseil logging library has been released. This library
    provides facilities for writing short text messages about the
    status of a program to stderr, disk files, or other sinks
    (via an extension API). See the logging library documentation
    for more information.
    An extension point, AbslStringify(), allows user-defined types
    to seamlessly work with Abseil's string formatting functions
    like absl::StrCat() and absl::StrFormat().
    A library for computing CRC32C checksums has been added.
    Floating-point parsing now uses the Eisel-Lemire algorithm,
    which provides a significant speed improvement.
    The flags library now provides suggestions for the closest
    flag(s) in the case of misspelled flags.
    Using CMake to install Abseil now makes the installed artifacts
    (in particular absl/base/options.h) reflect the compiled ABI.
  Breaking Changes:
    Abseil now requires at least C++14 and follows Google's Foundational
    C++ Support Policy. See this table for a list of currently supported
    versions compilers, platforms, and build tools.
    The legacy spellings of the thread annotation macros/functions
    (e.g. GUARDED_BY()) have been removed by default in favor of the
    ABSL_ prefixed versions (e.g. ABSL_GUARDED_BY()) due to clashes with
    other libraries. The compatibility macro ABSL_LEGACY_THREAD_ANNOTATIONS
    can be defined on the compile command-line to temporarily restore these
    spellings, but this compatibility macro will be removed in the future.
  Known Issues
    The Abseil logging library in this release is not a feature-complete
    replacement for glog yet. VLOG and DFATAL are examples of features
    that have not yet been released.
- obsolete Fix-maes-msse41-leaking-into-pkgconfig.patch</changelog>
  <changelog author="adrian@suse.de" date="1685016000">- update to 20230125.3
  Details can be found on:
    https://github.com/abseil/abseil-cpp/releases/tag/20230125.3</changelog>
  <changelog author="fvogt@suse.com" date="1688040000">- Add baselibs.conf to make protobuf happy. Hopefully temporary.</changelog>
  <changelog author="fstrba@suse.com" date="1691582400">- Fix build on older systems by requiring C++17 compliant compiler
- Added patch:
  * cmake.patch
    + lower the cmake requirement to 3.5 in order to be able to
    build on SLE12SP5</changelog>
  <changelog author="adrian@suse.de" date="1694088000">- update to 20230802.0
  What's New:
  * Added the nullability library for designating the expected
    nullability of pointers. Currently these serve as annotations
    only, but it is expected that compilers will one day be able
    to use these annotations for diagnostic purposes.
  * Added the prefetch library as a portable layer for moving data
    into caches before it is read.
  * Abseil's hash tables now detect many more programming errors
    in debug and sanitizer builds.
  * Abseil's synchronization objects now differentiate absolute
    waits (when passed an absl::Time) from relative waits (when
    passed an absl::Duration) when the underlying platform supports
    differentiating these cases. This only makes a difference when
    system clocks are adjusted.
  * Abseil's flag parsing library includes additional methods that
    make it easier to use when another library also expects to be
    able to parse flags.
  * absl::string_view is now available as a smaller target,
    @com_google_absl//absl/strings:string_view, so that users may
    use this library without depending on the much larger
    @com_google_absl//absl/strings target.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1696593600">- update to 20230802.1:
  * Add StdcppWaiter to the end of the list of waiter
    implementations</changelog>
  <changelog author="dmueller@suse.com" date="1705665600">- fix build for non-SUSE distributions</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1709467200">- update to 20240116.1:
  * Add absl::NoDestructor&lt;T&gt; to simplify defining static types
    that do not need to be destructed upon program exit.
  * Add configurable verbose logging (also known as VLOG).
  * Added absl::Overload(), which returns a functor that provides
    overloads based on the functors passed to it. Note that this
    functionality requires C++17 or newer.
  * Breaking Change: AbslHashValue() no longer accepts C-style
    arrays as a parameter, caller need to wrap C-string literals in
    absl::string_view.
  * Breaking Change: absl::weak_equality and absl::strong_equality
    have been removed. The corresponding std types were removed
    before C++20 was finalized</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1712836800">- SLE-only: import upstream patch to fix build with gcc7 in C++17
  mode: hash-fix-gcc7-cpp17-build.patch (bsc#1222261)
  + Upstream commit bb83aceacb554e79e7cd2404856f0be30bd00303</changelog>
</package>
<package pkgid="934ae237d3401507ff94553917cca9104dbdd63c40fbed11ba1ede6838994059" name="libabsl2401_0_0" arch="s390x">
  <version epoch="0" ver="20240116.1" rel="150500.13.7.8"/>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to LTS version 20210324.0
  * Breaking: The empty absl::container target has been removed from
    the CMake build. This target had no effect and references to
    this target in user code can safely be removed.
  * New: The cleanup library has been released. This library contains
    the control-flow-construct-like type absl::Cleanup which is used
    for executing a callback on scope exit.
  * New: The numeric library now includes bits.h, a polyfill header
    containing implementations of C++20's bitwise math functions.
  * New: Abseil now installs pkg-config files to make it easier to
    use Abseil with some other build systems.
  * New: Abseil now respects the default CMake installation paths.
    Standard CMake variables like CMAKE_INSTALL_PREFIX can be used
    to change the installation path.
- Added Correctly-install-pkgconfig.patch from upstream to fix
  installation of pkgconfig files
- Call ldconfig on post and postun</changelog>
  <changelog author="rpm@fthiessen.de" date="1619352000">- Update to LTS version 20210324.1
  * Fixed missing absl::Cleanup
  * Fixed pkgconfig install path
- Dropped upstream merged Correctly-install-pkgconfig.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1625054400">- Update to version 20210324.2 (LTS):
  * No user visible changes, only build system related</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 20211102.0:
  * absl::Cord is now implemented as a b-tree. The new implementation offers
    improved performance in most workloads.
  * absl::SimpleHexAtoi() has been added to strings library for parsing
    hexadecimal strings</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646395200">- Fix build on SLE-12-SP5</changelog>
  <changelog author="jengelh@inai.de" date="1649073600">- Implement shlib packaging policy</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1656504000">- Add options-old.patch, options-cxx17.patch (boo#1203378)
  * Ensure ABI stability regardless of compiler settings per instruction in the header.</changelog>
  <changelog author="fvogt@suse.com" date="1656504001">- Remove obsolete 0%{suse_version} &lt; 1500 conditions</changelog>
  <changelog author="elimat@opensuse.org" date="1656849600">- Update to version 20220623.0
  What's New:
  * Added absl::AnyInvocable, a move-only function type.
  * Added absl::CordBuffer, a type for buffering data for eventual inclusion an
    absl::Cord, which is useful for writing zero-copy code.
  * Added support for command-line flags of type absl::optional&lt;T&gt;.
  Breaking Changes:
  * CMake builds now use the flag ABSL_BUILD_TESTING (default: OFF) to control
    whether or not unit tests are built.
  * The ABSL_DEPRECATED macro now works with the GCC compiler. GCC users that
    are experiencing new warnings can use -Wno-deprecated-declatations silence
  the warnings or use -Wno-error=deprecated-declarations to see warnings but
  not fail the build.
  * ABSL_CONST_INIT uses the C++20 keyword constinit when available. Some
    compilers are more strict about where this keyword must appear compared to
  the pre-C++20 implementation.
  * Bazel builds now depend on the bazelbuild/bazel-skylib repository.
    See Abseil's WORKSPACE file for an example of how to add this dependency.
  Other:
  * This will be the last release to support C++11. Future releases will require at least C++14.
- run spec-cleaner</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1657540800">- Add Fix-maes-msse41-leaking-into-pkgconfig.patch
  * Do not make programs compiled with abseil require new-ish CPUs (boo#1203379)</changelog>
  <changelog author="dmueller@suse.com" date="1664020800">- update to 20220623.1:
  * minor warning fix</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to 20230125.2
  What's New:
    The Abseil logging library has been released. This library
    provides facilities for writing short text messages about the
    status of a program to stderr, disk files, or other sinks
    (via an extension API). See the logging library documentation
    for more information.
    An extension point, AbslStringify(), allows user-defined types
    to seamlessly work with Abseil's string formatting functions
    like absl::StrCat() and absl::StrFormat().
    A library for computing CRC32C checksums has been added.
    Floating-point parsing now uses the Eisel-Lemire algorithm,
    which provides a significant speed improvement.
    The flags library now provides suggestions for the closest
    flag(s) in the case of misspelled flags.
    Using CMake to install Abseil now makes the installed artifacts
    (in particular absl/base/options.h) reflect the compiled ABI.
  Breaking Changes:
    Abseil now requires at least C++14 and follows Google's Foundational
    C++ Support Policy. See this table for a list of currently supported
    versions compilers, platforms, and build tools.
    The legacy spellings of the thread annotation macros/functions
    (e.g. GUARDED_BY()) have been removed by default in favor of the
    ABSL_ prefixed versions (e.g. ABSL_GUARDED_BY()) due to clashes with
    other libraries. The compatibility macro ABSL_LEGACY_THREAD_ANNOTATIONS
    can be defined on the compile command-line to temporarily restore these
    spellings, but this compatibility macro will be removed in the future.
  Known Issues
    The Abseil logging library in this release is not a feature-complete
    replacement for glog yet. VLOG and DFATAL are examples of features
    that have not yet been released.
- obsolete Fix-maes-msse41-leaking-into-pkgconfig.patch</changelog>
  <changelog author="adrian@suse.de" date="1685016000">- update to 20230125.3
  Details can be found on:
    https://github.com/abseil/abseil-cpp/releases/tag/20230125.3</changelog>
  <changelog author="fvogt@suse.com" date="1688040000">- Add baselibs.conf to make protobuf happy. Hopefully temporary.</changelog>
  <changelog author="fstrba@suse.com" date="1691582400">- Fix build on older systems by requiring C++17 compliant compiler
- Added patch:
  * cmake.patch
    + lower the cmake requirement to 3.5 in order to be able to
    build on SLE12SP5</changelog>
  <changelog author="adrian@suse.de" date="1694088000">- update to 20230802.0
  What's New:
  * Added the nullability library for designating the expected
    nullability of pointers. Currently these serve as annotations
    only, but it is expected that compilers will one day be able
    to use these annotations for diagnostic purposes.
  * Added the prefetch library as a portable layer for moving data
    into caches before it is read.
  * Abseil's hash tables now detect many more programming errors
    in debug and sanitizer builds.
  * Abseil's synchronization objects now differentiate absolute
    waits (when passed an absl::Time) from relative waits (when
    passed an absl::Duration) when the underlying platform supports
    differentiating these cases. This only makes a difference when
    system clocks are adjusted.
  * Abseil's flag parsing library includes additional methods that
    make it easier to use when another library also expects to be
    able to parse flags.
  * absl::string_view is now available as a smaller target,
    @com_google_absl//absl/strings:string_view, so that users may
    use this library without depending on the much larger
    @com_google_absl//absl/strings target.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1696593600">- update to 20230802.1:
  * Add StdcppWaiter to the end of the list of waiter
    implementations</changelog>
  <changelog author="dmueller@suse.com" date="1705665600">- fix build for non-SUSE distributions</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1709467200">- update to 20240116.1:
  * Add absl::NoDestructor&lt;T&gt; to simplify defining static types
    that do not need to be destructed upon program exit.
  * Add configurable verbose logging (also known as VLOG).
  * Added absl::Overload(), which returns a functor that provides
    overloads based on the functors passed to it. Note that this
    functionality requires C++17 or newer.
  * Breaking Change: AbslHashValue() no longer accepts C-style
    arrays as a parameter, caller need to wrap C-string literals in
    absl::string_view.
  * Breaking Change: absl::weak_equality and absl::strong_equality
    have been removed. The corresponding std types were removed
    before C++20 was finalized</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1712836800">- SLE-only: import upstream patch to fix build with gcc7 in C++17
  mode: hash-fix-gcc7-cpp17-build.patch (bsc#1222261)
  + Upstream commit bb83aceacb554e79e7cd2404856f0be30bd00303</changelog>
</package>
<package pkgid="35c94c3357dc1bd05d38e7bd3650a2f00fb222ff7baf99b853adbaa19f95c328" name="libabsl2401_0_0" arch="x86_64">
  <version epoch="0" ver="20240116.1" rel="150500.13.7.8"/>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to LTS version 20210324.0
  * Breaking: The empty absl::container target has been removed from
    the CMake build. This target had no effect and references to
    this target in user code can safely be removed.
  * New: The cleanup library has been released. This library contains
    the control-flow-construct-like type absl::Cleanup which is used
    for executing a callback on scope exit.
  * New: The numeric library now includes bits.h, a polyfill header
    containing implementations of C++20's bitwise math functions.
  * New: Abseil now installs pkg-config files to make it easier to
    use Abseil with some other build systems.
  * New: Abseil now respects the default CMake installation paths.
    Standard CMake variables like CMAKE_INSTALL_PREFIX can be used
    to change the installation path.
- Added Correctly-install-pkgconfig.patch from upstream to fix
  installation of pkgconfig files
- Call ldconfig on post and postun</changelog>
  <changelog author="rpm@fthiessen.de" date="1619352000">- Update to LTS version 20210324.1
  * Fixed missing absl::Cleanup
  * Fixed pkgconfig install path
- Dropped upstream merged Correctly-install-pkgconfig.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1625054400">- Update to version 20210324.2 (LTS):
  * No user visible changes, only build system related</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 20211102.0:
  * absl::Cord is now implemented as a b-tree. The new implementation offers
    improved performance in most workloads.
  * absl::SimpleHexAtoi() has been added to strings library for parsing
    hexadecimal strings</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646395200">- Fix build on SLE-12-SP5</changelog>
  <changelog author="jengelh@inai.de" date="1649073600">- Implement shlib packaging policy</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1656504000">- Add options-old.patch, options-cxx17.patch (boo#1203378)
  * Ensure ABI stability regardless of compiler settings per instruction in the header.</changelog>
  <changelog author="fvogt@suse.com" date="1656504001">- Remove obsolete 0%{suse_version} &lt; 1500 conditions</changelog>
  <changelog author="elimat@opensuse.org" date="1656849600">- Update to version 20220623.0
  What's New:
  * Added absl::AnyInvocable, a move-only function type.
  * Added absl::CordBuffer, a type for buffering data for eventual inclusion an
    absl::Cord, which is useful for writing zero-copy code.
  * Added support for command-line flags of type absl::optional&lt;T&gt;.
  Breaking Changes:
  * CMake builds now use the flag ABSL_BUILD_TESTING (default: OFF) to control
    whether or not unit tests are built.
  * The ABSL_DEPRECATED macro now works with the GCC compiler. GCC users that
    are experiencing new warnings can use -Wno-deprecated-declatations silence
  the warnings or use -Wno-error=deprecated-declarations to see warnings but
  not fail the build.
  * ABSL_CONST_INIT uses the C++20 keyword constinit when available. Some
    compilers are more strict about where this keyword must appear compared to
  the pre-C++20 implementation.
  * Bazel builds now depend on the bazelbuild/bazel-skylib repository.
    See Abseil's WORKSPACE file for an example of how to add this dependency.
  Other:
  * This will be the last release to support C++11. Future releases will require at least C++14.
- run spec-cleaner</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1657540800">- Add Fix-maes-msse41-leaking-into-pkgconfig.patch
  * Do not make programs compiled with abseil require new-ish CPUs (boo#1203379)</changelog>
  <changelog author="dmueller@suse.com" date="1664020800">- update to 20220623.1:
  * minor warning fix</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to 20230125.2
  What's New:
    The Abseil logging library has been released. This library
    provides facilities for writing short text messages about the
    status of a program to stderr, disk files, or other sinks
    (via an extension API). See the logging library documentation
    for more information.
    An extension point, AbslStringify(), allows user-defined types
    to seamlessly work with Abseil's string formatting functions
    like absl::StrCat() and absl::StrFormat().
    A library for computing CRC32C checksums has been added.
    Floating-point parsing now uses the Eisel-Lemire algorithm,
    which provides a significant speed improvement.
    The flags library now provides suggestions for the closest
    flag(s) in the case of misspelled flags.
    Using CMake to install Abseil now makes the installed artifacts
    (in particular absl/base/options.h) reflect the compiled ABI.
  Breaking Changes:
    Abseil now requires at least C++14 and follows Google's Foundational
    C++ Support Policy. See this table for a list of currently supported
    versions compilers, platforms, and build tools.
    The legacy spellings of the thread annotation macros/functions
    (e.g. GUARDED_BY()) have been removed by default in favor of the
    ABSL_ prefixed versions (e.g. ABSL_GUARDED_BY()) due to clashes with
    other libraries. The compatibility macro ABSL_LEGACY_THREAD_ANNOTATIONS
    can be defined on the compile command-line to temporarily restore these
    spellings, but this compatibility macro will be removed in the future.
  Known Issues
    The Abseil logging library in this release is not a feature-complete
    replacement for glog yet. VLOG and DFATAL are examples of features
    that have not yet been released.
- obsolete Fix-maes-msse41-leaking-into-pkgconfig.patch</changelog>
  <changelog author="adrian@suse.de" date="1685016000">- update to 20230125.3
  Details can be found on:
    https://github.com/abseil/abseil-cpp/releases/tag/20230125.3</changelog>
  <changelog author="fvogt@suse.com" date="1688040000">- Add baselibs.conf to make protobuf happy. Hopefully temporary.</changelog>
  <changelog author="fstrba@suse.com" date="1691582400">- Fix build on older systems by requiring C++17 compliant compiler
- Added patch:
  * cmake.patch
    + lower the cmake requirement to 3.5 in order to be able to
    build on SLE12SP5</changelog>
  <changelog author="adrian@suse.de" date="1694088000">- update to 20230802.0
  What's New:
  * Added the nullability library for designating the expected
    nullability of pointers. Currently these serve as annotations
    only, but it is expected that compilers will one day be able
    to use these annotations for diagnostic purposes.
  * Added the prefetch library as a portable layer for moving data
    into caches before it is read.
  * Abseil's hash tables now detect many more programming errors
    in debug and sanitizer builds.
  * Abseil's synchronization objects now differentiate absolute
    waits (when passed an absl::Time) from relative waits (when
    passed an absl::Duration) when the underlying platform supports
    differentiating these cases. This only makes a difference when
    system clocks are adjusted.
  * Abseil's flag parsing library includes additional methods that
    make it easier to use when another library also expects to be
    able to parse flags.
  * absl::string_view is now available as a smaller target,
    @com_google_absl//absl/strings:string_view, so that users may
    use this library without depending on the much larger
    @com_google_absl//absl/strings target.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1696593600">- update to 20230802.1:
  * Add StdcppWaiter to the end of the list of waiter
    implementations</changelog>
  <changelog author="dmueller@suse.com" date="1705665600">- fix build for non-SUSE distributions</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1709467200">- update to 20240116.1:
  * Add absl::NoDestructor&lt;T&gt; to simplify defining static types
    that do not need to be destructed upon program exit.
  * Add configurable verbose logging (also known as VLOG).
  * Added absl::Overload(), which returns a functor that provides
    overloads based on the functors passed to it. Note that this
    functionality requires C++17 or newer.
  * Breaking Change: AbslHashValue() no longer accepts C-style
    arrays as a parameter, caller need to wrap C-string literals in
    absl::string_view.
  * Breaking Change: absl::weak_equality and absl::strong_equality
    have been removed. The corresponding std types were removed
    before C++20 was finalized</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1712836800">- SLE-only: import upstream patch to fix build with gcc7 in C++17
  mode: hash-fix-gcc7-cpp17-build.patch (bsc#1222261)
  + Upstream commit bb83aceacb554e79e7cd2404856f0be30bd00303</changelog>
</package>
<package pkgid="3a771593fa9af56fdd580bfc56028feb71c4ef02552b68c0c89adad70d301af3" name="libapparmor" arch="src">
  <version epoch="0" ver="3.0.4" rel="150500.11.9.1"/>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
  <changelog author="scabrero@suse.de" date="1671796800">- Add samba-4-17.patch to update the samba profiles for samba
  version 4.17 (bsc#1206626);</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1693915200">- update zgrep profile to allow egrep helper use (bsc#1214458)
  - zgrep-profile-sync-with-master.diff</changelog>
  <changelog author="ddiss@suse.com" date="1695643200">- Fix pam_apparmor %post and %postun scripts to handle pam-config errors
  (bsc#1215596)</changelog>
</package>
<package pkgid="6c65d123e693192f3086aab19eadf00d2766a8b52abc9123418ab1c74517b71a" name="libapparmor1" arch="aarch64">
  <version epoch="0" ver="3.0.4" rel="150500.11.9.1"/>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
  <changelog author="scabrero@suse.de" date="1671796800">- Add samba-4-17.patch to update the samba profiles for samba
  version 4.17 (bsc#1206626);</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1693915200">- update zgrep profile to allow egrep helper use (bsc#1214458)
  - zgrep-profile-sync-with-master.diff</changelog>
  <changelog author="ddiss@suse.com" date="1695643200">- Fix pam_apparmor %post and %postun scripts to handle pam-config errors
  (bsc#1215596)</changelog>
</package>
<package pkgid="b64a8caccbd34dbf7e357ba65181e03ad93689600390b5e7fd1a3b8725dd819f" name="libapparmor1" arch="s390x">
  <version epoch="0" ver="3.0.4" rel="150500.11.9.1"/>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
  <changelog author="scabrero@suse.de" date="1671796800">- Add samba-4-17.patch to update the samba profiles for samba
  version 4.17 (bsc#1206626);</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1693915200">- update zgrep profile to allow egrep helper use (bsc#1214458)
  - zgrep-profile-sync-with-master.diff</changelog>
  <changelog author="ddiss@suse.com" date="1695643200">- Fix pam_apparmor %post and %postun scripts to handle pam-config errors
  (bsc#1215596)</changelog>
</package>
<package pkgid="f478d04a97776c45c51b8d4b1c742b925b25ca0c89528bda8fd7f1700ca361d9" name="libapparmor1" arch="x86_64">
  <version epoch="0" ver="3.0.4" rel="150500.11.9.1"/>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
  <changelog author="scabrero@suse.de" date="1671796800">- Add samba-4-17.patch to update the samba profiles for samba
  version 4.17 (bsc#1206626);</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1693915200">- update zgrep profile to allow egrep helper use (bsc#1214458)
  - zgrep-profile-sync-with-master.diff</changelog>
  <changelog author="ddiss@suse.com" date="1695643200">- Fix pam_apparmor %post and %postun scripts to handle pam-config errors
  (bsc#1215596)</changelog>
</package>
<package pkgid="55b561849a9f3c817bbbb0ee0e523b393b525a894e3e6084a158f5dc6d5b1b1a" name="libarchive" arch="src">
  <version epoch="0" ver="3.5.1" rel="150400.3.15.1"/>
  <changelog author="kbabioch@suse.de" date="1546516800">- Added patches:
  * CVE-2018-1000877.patch, which fixes a double free vulnerability in RAR
    decoder (CVE-2018-1000877 bsc#1120653)
  * CVE-2018-1000878.patch, which fixes a Use-After-Free vulnerability in RAR
    decoder (CVE-2018-1000878 bsc#1120654)
  * CVE-2018-1000879.patch, which fixes a NULL Pointer Dereference
    vulnerability in ACL parser (CVE-2018-1000879 bsc#1120656)
  * CVE-2018-1000880.patch, which fixes an improper input validation
    vulnerability in WARC parser (CVE-2018-1000880 bsc#1120659)
- Make use of %license macro
- Applied spec-cleaner</changelog>
  <changelog author="adrian@suse.de" date="1549368000">- Added patches:
  * CVE-2019-1000019.patch Fixes 7zip crash (boo#1124341)
  * CVE-2019-1000020.patch ISO9660 infinite loop fixed (boo#1124342)</changelog>
  <changelog author="idonmez@suse.com" date="1560427200">- Update to version 3.4.0
  * Support for file and directory symlinks on Windows
  * Read support for RAR 5.0 archives
  * Read support for ZIPX archives with xz, lzma, ppmd8 and
    bzip2 compression
  * Support for non-recursive list and extract
  * New tar option: --exclude-vcs
  * Improved file attribute support on Linux and file flags support
    on FreeBSD
  * Fix reading Android APK archives (#1055 )
  * Fix problems related to unreadable directories (#1167)
  * A two-digit number of OSS-Fuzz issues was resolved in this release
    including CVE-2019-18408
- Add libarchive.keyring and validate the tarball signature
- Drop all security patches, fixed upstream:
  * CVE-2018-1000877.patch
  * CVE-2018-1000878.patch
  * CVE-2018-1000879.patch
  * CVE-2018-1000880.patch
  * CVE-2019-1000019.patch
  * CVE-2019-1000020.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561032000">- Add lz4 and zstd support
- Add BuildRequires on liblz4-devel and libzstd-devel</changelog>
  <changelog author="idonmez@suse.com" date="1566129600">- Switch to cmake build
- Add lib-suffix.patch to honor LIB_SUFFIX
- Add fix-zstd-test.patch to fix zstd test
- Add fix-soversion.patch to fix the soversion to 13 as autotools</changelog>
  <changelog author="adrian@suse.de" date="1574424000">- fix bsc#1157569
  CVE-2019-19221.patch out-of-bounds read in libarchive</changelog>
  <changelog author="idonmez@suse.com" date="1577707200">- Update to version 3.4.1
  New features:
  * Unicode filename support for reading lha/lzh archives
  * New pax write option "xattrhdr"
  Important bugfixes:
  * security fixes in wide string processing (#1276 #1298)
  * security fixes in RAR5 reader (#1212 #1217 #1296) CVE-2019-19221
  * security fixes and optimizations to write filter logic (#351)
  * security fix related to use of readlink(2) (1dae5a5)
  * sparse file handling fixes (#1218 #1260)
- Drop CVE-2019-19221.patch and fix-zstd-test.patch, fixed upstream</changelog>
  <changelog author="idonmez@suse.com" date="1577707201">- Revert back to autoconf, cmake introduces a cycle. Leave cmake
  patches in since they are basically correct and might be useful
  in the future.</changelog>
  <changelog author="idonmez@suse.com" date="1581508800">- Update to version 3.4.2
  New features:
  * support for atomic file extraction (bsdtar -x --safe-writes) (#1289)
  * support for mbed TLS (PolarSSL) (#1301)
  Important bugfixes:
  * security fixes in RAR5 reader (#1280 #1326)
  * compression buffer fix in XAR writer (#1317)
  * fix uname and gname longer than 32 characters in PAX writer (#1319)
  * fix segfault when archiving hard links in ISO9660 and XAR writers (#1325)
  * fix support for extracting 7z archive entries with Delta filter (#987)</changelog>
  <changelog author="idonmez@suse.com" date="1582027200">- Switch back to cmake build now that cmake-mini exists, this will
  no longer create a build-cycle.</changelog>
  <changelog author="idonmez@suse.com" date="1589976000">- Update to version 3.4.3
  * support for pzstd compressed files (#1357)
  * support for RHT.security.selinux tar extended attribute (#1348)
  * various zstd fixes and improvements (#1342 #1352 #1359)
  * child process handling fixes (#1372)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599480000">- fix build with binutils submitted to Factory, adding upstream
  libarchive-3.4.3-fix_test_write_disk_secure.patch</changelog>
  <changelog author="idonmez@suse.com" date="1606824000">- Update to version 3.5.0
  New features:
  * mtree digest reader support (#1347)
  * completed support for UTF-8 encoding conversion (#1389)
  * minor API enhancements (#1258, #1405)
  * support for system extended attributes (#1409)
  * support for decompression of symbolic links in zipx archives (#1435)
  Important bugfixes
  * fixed extraction of archives with hard links pointing to itself (#1381)
  * cpio fixes (#1387, #1388)
  * fixed uninitialized size in rar5_read_data (#1408)
  * fixed memory leaks in error case of archive_write_open() functions (#1456)
- Drop libarchive-3.4.3-fix_test_write_disk_secure.patch, fixed upstream.</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 3.5.1:
  * various compilation fixes (#1461, #1462, #1463, #1464)
  * fixed undefined behavior in a function in warc reader (#1465)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1647259200">- Fix CVE-2021-36976 use-after-free in copy_string
  (CVE-2021-36976, bsc#1188572)
  * fix-CVE-2021-36976.patch
- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  CVE-2017-5601, bsc#1022528, bsc#1189528</changelog>
  <changelog author="danilo.spinella@suse.com" date="1652184000">- Fix CVE-2022-26280 out-of-bounds read via the component zipx_lzma_alone_init
  (CVE-2022-26280, bsc#1197634)
  * fix-CVE-2022-26280.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1662984000">- Fix CVE-2021-23177, extracting a symlink with ACLs modifies ACLs of target
  (CVE-2021-23177, bsc#1192425)
  * CVE-2021-23177.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2021-31566, modifies file flags of symlink target
  (CVE-2021-31566, bsc#1192426.patch)
  CVE-2021-31566.patch
- Fix bsc#1192427, processing fixup entries may follow symbolic links
  bsc1192427.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1669118400">- Fix CVE-2022-36227, Handle a calloc returning NULL
  (CVE-2022-36227, bsc#1205629)
  * CVE-2022-36227.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1718193600">- Fix CVE-2024-20696, heap based out-of-bounds write
  (CVE-2024-20696, bsc#1225971)
  * CVE-2024-20696.patch</changelog>
</package>
<package pkgid="4ca742ff73884ffc9ea564532cc0f09ac8a98103a6c98acc6524e8e1c401f573" name="libarchive13" arch="aarch64">
  <version epoch="0" ver="3.5.1" rel="150400.3.15.1"/>
  <changelog author="kbabioch@suse.de" date="1546516800">- Added patches:
  * CVE-2018-1000877.patch, which fixes a double free vulnerability in RAR
    decoder (CVE-2018-1000877 bsc#1120653)
  * CVE-2018-1000878.patch, which fixes a Use-After-Free vulnerability in RAR
    decoder (CVE-2018-1000878 bsc#1120654)
  * CVE-2018-1000879.patch, which fixes a NULL Pointer Dereference
    vulnerability in ACL parser (CVE-2018-1000879 bsc#1120656)
  * CVE-2018-1000880.patch, which fixes an improper input validation
    vulnerability in WARC parser (CVE-2018-1000880 bsc#1120659)
- Make use of %license macro
- Applied spec-cleaner</changelog>
  <changelog author="adrian@suse.de" date="1549368000">- Added patches:
  * CVE-2019-1000019.patch Fixes 7zip crash (boo#1124341)
  * CVE-2019-1000020.patch ISO9660 infinite loop fixed (boo#1124342)</changelog>
  <changelog author="idonmez@suse.com" date="1560427200">- Update to version 3.4.0
  * Support for file and directory symlinks on Windows
  * Read support for RAR 5.0 archives
  * Read support for ZIPX archives with xz, lzma, ppmd8 and
    bzip2 compression
  * Support for non-recursive list and extract
  * New tar option: --exclude-vcs
  * Improved file attribute support on Linux and file flags support
    on FreeBSD
  * Fix reading Android APK archives (#1055 )
  * Fix problems related to unreadable directories (#1167)
  * A two-digit number of OSS-Fuzz issues was resolved in this release
    including CVE-2019-18408
- Add libarchive.keyring and validate the tarball signature
- Drop all security patches, fixed upstream:
  * CVE-2018-1000877.patch
  * CVE-2018-1000878.patch
  * CVE-2018-1000879.patch
  * CVE-2018-1000880.patch
  * CVE-2019-1000019.patch
  * CVE-2019-1000020.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561032000">- Add lz4 and zstd support
- Add BuildRequires on liblz4-devel and libzstd-devel</changelog>
  <changelog author="idonmez@suse.com" date="1566129600">- Switch to cmake build
- Add lib-suffix.patch to honor LIB_SUFFIX
- Add fix-zstd-test.patch to fix zstd test
- Add fix-soversion.patch to fix the soversion to 13 as autotools</changelog>
  <changelog author="adrian@suse.de" date="1574424000">- fix bsc#1157569
  CVE-2019-19221.patch out-of-bounds read in libarchive</changelog>
  <changelog author="idonmez@suse.com" date="1577707200">- Update to version 3.4.1
  New features:
  * Unicode filename support for reading lha/lzh archives
  * New pax write option "xattrhdr"
  Important bugfixes:
  * security fixes in wide string processing (#1276 #1298)
  * security fixes in RAR5 reader (#1212 #1217 #1296) CVE-2019-19221
  * security fixes and optimizations to write filter logic (#351)
  * security fix related to use of readlink(2) (1dae5a5)
  * sparse file handling fixes (#1218 #1260)
- Drop CVE-2019-19221.patch and fix-zstd-test.patch, fixed upstream</changelog>
  <changelog author="idonmez@suse.com" date="1577707201">- Revert back to autoconf, cmake introduces a cycle. Leave cmake
  patches in since they are basically correct and might be useful
  in the future.</changelog>
  <changelog author="idonmez@suse.com" date="1581508800">- Update to version 3.4.2
  New features:
  * support for atomic file extraction (bsdtar -x --safe-writes) (#1289)
  * support for mbed TLS (PolarSSL) (#1301)
  Important bugfixes:
  * security fixes in RAR5 reader (#1280 #1326)
  * compression buffer fix in XAR writer (#1317)
  * fix uname and gname longer than 32 characters in PAX writer (#1319)
  * fix segfault when archiving hard links in ISO9660 and XAR writers (#1325)
  * fix support for extracting 7z archive entries with Delta filter (#987)</changelog>
  <changelog author="idonmez@suse.com" date="1582027200">- Switch back to cmake build now that cmake-mini exists, this will
  no longer create a build-cycle.</changelog>
  <changelog author="idonmez@suse.com" date="1589976000">- Update to version 3.4.3
  * support for pzstd compressed files (#1357)
  * support for RHT.security.selinux tar extended attribute (#1348)
  * various zstd fixes and improvements (#1342 #1352 #1359)
  * child process handling fixes (#1372)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599480000">- fix build with binutils submitted to Factory, adding upstream
  libarchive-3.4.3-fix_test_write_disk_secure.patch</changelog>
  <changelog author="idonmez@suse.com" date="1606824000">- Update to version 3.5.0
  New features:
  * mtree digest reader support (#1347)
  * completed support for UTF-8 encoding conversion (#1389)
  * minor API enhancements (#1258, #1405)
  * support for system extended attributes (#1409)
  * support for decompression of symbolic links in zipx archives (#1435)
  Important bugfixes
  * fixed extraction of archives with hard links pointing to itself (#1381)
  * cpio fixes (#1387, #1388)
  * fixed uninitialized size in rar5_read_data (#1408)
  * fixed memory leaks in error case of archive_write_open() functions (#1456)
- Drop libarchive-3.4.3-fix_test_write_disk_secure.patch, fixed upstream.</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 3.5.1:
  * various compilation fixes (#1461, #1462, #1463, #1464)
  * fixed undefined behavior in a function in warc reader (#1465)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1647259200">- Fix CVE-2021-36976 use-after-free in copy_string
  (CVE-2021-36976, bsc#1188572)
  * fix-CVE-2021-36976.patch
- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  CVE-2017-5601, bsc#1022528, bsc#1189528</changelog>
  <changelog author="danilo.spinella@suse.com" date="1652184000">- Fix CVE-2022-26280 out-of-bounds read via the component zipx_lzma_alone_init
  (CVE-2022-26280, bsc#1197634)
  * fix-CVE-2022-26280.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1662984000">- Fix CVE-2021-23177, extracting a symlink with ACLs modifies ACLs of target
  (CVE-2021-23177, bsc#1192425)
  * CVE-2021-23177.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2021-31566, modifies file flags of symlink target
  (CVE-2021-31566, bsc#1192426.patch)
  CVE-2021-31566.patch
- Fix bsc#1192427, processing fixup entries may follow symbolic links
  bsc1192427.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1669118400">- Fix CVE-2022-36227, Handle a calloc returning NULL
  (CVE-2022-36227, bsc#1205629)
  * CVE-2022-36227.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1718193600">- Fix CVE-2024-20696, heap based out-of-bounds write
  (CVE-2024-20696, bsc#1225971)
  * CVE-2024-20696.patch</changelog>
</package>
<package pkgid="19b8a5839adbf63b355fcc43b8beb145aaa9da1c8105bf1e240964d9fb11eaea" name="libarchive13" arch="s390x">
  <version epoch="0" ver="3.5.1" rel="150400.3.15.1"/>
  <changelog author="kbabioch@suse.de" date="1546516800">- Added patches:
  * CVE-2018-1000877.patch, which fixes a double free vulnerability in RAR
    decoder (CVE-2018-1000877 bsc#1120653)
  * CVE-2018-1000878.patch, which fixes a Use-After-Free vulnerability in RAR
    decoder (CVE-2018-1000878 bsc#1120654)
  * CVE-2018-1000879.patch, which fixes a NULL Pointer Dereference
    vulnerability in ACL parser (CVE-2018-1000879 bsc#1120656)
  * CVE-2018-1000880.patch, which fixes an improper input validation
    vulnerability in WARC parser (CVE-2018-1000880 bsc#1120659)
- Make use of %license macro
- Applied spec-cleaner</changelog>
  <changelog author="adrian@suse.de" date="1549368000">- Added patches:
  * CVE-2019-1000019.patch Fixes 7zip crash (boo#1124341)
  * CVE-2019-1000020.patch ISO9660 infinite loop fixed (boo#1124342)</changelog>
  <changelog author="idonmez@suse.com" date="1560427200">- Update to version 3.4.0
  * Support for file and directory symlinks on Windows
  * Read support for RAR 5.0 archives
  * Read support for ZIPX archives with xz, lzma, ppmd8 and
    bzip2 compression
  * Support for non-recursive list and extract
  * New tar option: --exclude-vcs
  * Improved file attribute support on Linux and file flags support
    on FreeBSD
  * Fix reading Android APK archives (#1055 )
  * Fix problems related to unreadable directories (#1167)
  * A two-digit number of OSS-Fuzz issues was resolved in this release
    including CVE-2019-18408
- Add libarchive.keyring and validate the tarball signature
- Drop all security patches, fixed upstream:
  * CVE-2018-1000877.patch
  * CVE-2018-1000878.patch
  * CVE-2018-1000879.patch
  * CVE-2018-1000880.patch
  * CVE-2019-1000019.patch
  * CVE-2019-1000020.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561032000">- Add lz4 and zstd support
- Add BuildRequires on liblz4-devel and libzstd-devel</changelog>
  <changelog author="idonmez@suse.com" date="1566129600">- Switch to cmake build
- Add lib-suffix.patch to honor LIB_SUFFIX
- Add fix-zstd-test.patch to fix zstd test
- Add fix-soversion.patch to fix the soversion to 13 as autotools</changelog>
  <changelog author="adrian@suse.de" date="1574424000">- fix bsc#1157569
  CVE-2019-19221.patch out-of-bounds read in libarchive</changelog>
  <changelog author="idonmez@suse.com" date="1577707200">- Update to version 3.4.1
  New features:
  * Unicode filename support for reading lha/lzh archives
  * New pax write option "xattrhdr"
  Important bugfixes:
  * security fixes in wide string processing (#1276 #1298)
  * security fixes in RAR5 reader (#1212 #1217 #1296) CVE-2019-19221
  * security fixes and optimizations to write filter logic (#351)
  * security fix related to use of readlink(2) (1dae5a5)
  * sparse file handling fixes (#1218 #1260)
- Drop CVE-2019-19221.patch and fix-zstd-test.patch, fixed upstream</changelog>
  <changelog author="idonmez@suse.com" date="1577707201">- Revert back to autoconf, cmake introduces a cycle. Leave cmake
  patches in since they are basically correct and might be useful
  in the future.</changelog>
  <changelog author="idonmez@suse.com" date="1581508800">- Update to version 3.4.2
  New features:
  * support for atomic file extraction (bsdtar -x --safe-writes) (#1289)
  * support for mbed TLS (PolarSSL) (#1301)
  Important bugfixes:
  * security fixes in RAR5 reader (#1280 #1326)
  * compression buffer fix in XAR writer (#1317)
  * fix uname and gname longer than 32 characters in PAX writer (#1319)
  * fix segfault when archiving hard links in ISO9660 and XAR writers (#1325)
  * fix support for extracting 7z archive entries with Delta filter (#987)</changelog>
  <changelog author="idonmez@suse.com" date="1582027200">- Switch back to cmake build now that cmake-mini exists, this will
  no longer create a build-cycle.</changelog>
  <changelog author="idonmez@suse.com" date="1589976000">- Update to version 3.4.3
  * support for pzstd compressed files (#1357)
  * support for RHT.security.selinux tar extended attribute (#1348)
  * various zstd fixes and improvements (#1342 #1352 #1359)
  * child process handling fixes (#1372)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599480000">- fix build with binutils submitted to Factory, adding upstream
  libarchive-3.4.3-fix_test_write_disk_secure.patch</changelog>
  <changelog author="idonmez@suse.com" date="1606824000">- Update to version 3.5.0
  New features:
  * mtree digest reader support (#1347)
  * completed support for UTF-8 encoding conversion (#1389)
  * minor API enhancements (#1258, #1405)
  * support for system extended attributes (#1409)
  * support for decompression of symbolic links in zipx archives (#1435)
  Important bugfixes
  * fixed extraction of archives with hard links pointing to itself (#1381)
  * cpio fixes (#1387, #1388)
  * fixed uninitialized size in rar5_read_data (#1408)
  * fixed memory leaks in error case of archive_write_open() functions (#1456)
- Drop libarchive-3.4.3-fix_test_write_disk_secure.patch, fixed upstream.</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 3.5.1:
  * various compilation fixes (#1461, #1462, #1463, #1464)
  * fixed undefined behavior in a function in warc reader (#1465)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1647259200">- Fix CVE-2021-36976 use-after-free in copy_string
  (CVE-2021-36976, bsc#1188572)
  * fix-CVE-2021-36976.patch
- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  CVE-2017-5601, bsc#1022528, bsc#1189528</changelog>
  <changelog author="danilo.spinella@suse.com" date="1652184000">- Fix CVE-2022-26280 out-of-bounds read via the component zipx_lzma_alone_init
  (CVE-2022-26280, bsc#1197634)
  * fix-CVE-2022-26280.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1662984000">- Fix CVE-2021-23177, extracting a symlink with ACLs modifies ACLs of target
  (CVE-2021-23177, bsc#1192425)
  * CVE-2021-23177.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2021-31566, modifies file flags of symlink target
  (CVE-2021-31566, bsc#1192426.patch)
  CVE-2021-31566.patch
- Fix bsc#1192427, processing fixup entries may follow symbolic links
  bsc1192427.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1669118400">- Fix CVE-2022-36227, Handle a calloc returning NULL
  (CVE-2022-36227, bsc#1205629)
  * CVE-2022-36227.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1718193600">- Fix CVE-2024-20696, heap based out-of-bounds write
  (CVE-2024-20696, bsc#1225971)
  * CVE-2024-20696.patch</changelog>
</package>
<package pkgid="bb5ca1aa66e726a0049b9c48041a8803bdfc7b421be5d687ba8183d24487edb1" name="libarchive13" arch="x86_64">
  <version epoch="0" ver="3.5.1" rel="150400.3.15.1"/>
  <changelog author="kbabioch@suse.de" date="1546516800">- Added patches:
  * CVE-2018-1000877.patch, which fixes a double free vulnerability in RAR
    decoder (CVE-2018-1000877 bsc#1120653)
  * CVE-2018-1000878.patch, which fixes a Use-After-Free vulnerability in RAR
    decoder (CVE-2018-1000878 bsc#1120654)
  * CVE-2018-1000879.patch, which fixes a NULL Pointer Dereference
    vulnerability in ACL parser (CVE-2018-1000879 bsc#1120656)
  * CVE-2018-1000880.patch, which fixes an improper input validation
    vulnerability in WARC parser (CVE-2018-1000880 bsc#1120659)
- Make use of %license macro
- Applied spec-cleaner</changelog>
  <changelog author="adrian@suse.de" date="1549368000">- Added patches:
  * CVE-2019-1000019.patch Fixes 7zip crash (boo#1124341)
  * CVE-2019-1000020.patch ISO9660 infinite loop fixed (boo#1124342)</changelog>
  <changelog author="idonmez@suse.com" date="1560427200">- Update to version 3.4.0
  * Support for file and directory symlinks on Windows
  * Read support for RAR 5.0 archives
  * Read support for ZIPX archives with xz, lzma, ppmd8 and
    bzip2 compression
  * Support for non-recursive list and extract
  * New tar option: --exclude-vcs
  * Improved file attribute support on Linux and file flags support
    on FreeBSD
  * Fix reading Android APK archives (#1055 )
  * Fix problems related to unreadable directories (#1167)
  * A two-digit number of OSS-Fuzz issues was resolved in this release
    including CVE-2019-18408
- Add libarchive.keyring and validate the tarball signature
- Drop all security patches, fixed upstream:
  * CVE-2018-1000877.patch
  * CVE-2018-1000878.patch
  * CVE-2018-1000879.patch
  * CVE-2018-1000880.patch
  * CVE-2019-1000019.patch
  * CVE-2019-1000020.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561032000">- Add lz4 and zstd support
- Add BuildRequires on liblz4-devel and libzstd-devel</changelog>
  <changelog author="idonmez@suse.com" date="1566129600">- Switch to cmake build
- Add lib-suffix.patch to honor LIB_SUFFIX
- Add fix-zstd-test.patch to fix zstd test
- Add fix-soversion.patch to fix the soversion to 13 as autotools</changelog>
  <changelog author="adrian@suse.de" date="1574424000">- fix bsc#1157569
  CVE-2019-19221.patch out-of-bounds read in libarchive</changelog>
  <changelog author="idonmez@suse.com" date="1577707200">- Update to version 3.4.1
  New features:
  * Unicode filename support for reading lha/lzh archives
  * New pax write option "xattrhdr"
  Important bugfixes:
  * security fixes in wide string processing (#1276 #1298)
  * security fixes in RAR5 reader (#1212 #1217 #1296) CVE-2019-19221
  * security fixes and optimizations to write filter logic (#351)
  * security fix related to use of readlink(2) (1dae5a5)
  * sparse file handling fixes (#1218 #1260)
- Drop CVE-2019-19221.patch and fix-zstd-test.patch, fixed upstream</changelog>
  <changelog author="idonmez@suse.com" date="1577707201">- Revert back to autoconf, cmake introduces a cycle. Leave cmake
  patches in since they are basically correct and might be useful
  in the future.</changelog>
  <changelog author="idonmez@suse.com" date="1581508800">- Update to version 3.4.2
  New features:
  * support for atomic file extraction (bsdtar -x --safe-writes) (#1289)
  * support for mbed TLS (PolarSSL) (#1301)
  Important bugfixes:
  * security fixes in RAR5 reader (#1280 #1326)
  * compression buffer fix in XAR writer (#1317)
  * fix uname and gname longer than 32 characters in PAX writer (#1319)
  * fix segfault when archiving hard links in ISO9660 and XAR writers (#1325)
  * fix support for extracting 7z archive entries with Delta filter (#987)</changelog>
  <changelog author="idonmez@suse.com" date="1582027200">- Switch back to cmake build now that cmake-mini exists, this will
  no longer create a build-cycle.</changelog>
  <changelog author="idonmez@suse.com" date="1589976000">- Update to version 3.4.3
  * support for pzstd compressed files (#1357)
  * support for RHT.security.selinux tar extended attribute (#1348)
  * various zstd fixes and improvements (#1342 #1352 #1359)
  * child process handling fixes (#1372)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599480000">- fix build with binutils submitted to Factory, adding upstream
  libarchive-3.4.3-fix_test_write_disk_secure.patch</changelog>
  <changelog author="idonmez@suse.com" date="1606824000">- Update to version 3.5.0
  New features:
  * mtree digest reader support (#1347)
  * completed support for UTF-8 encoding conversion (#1389)
  * minor API enhancements (#1258, #1405)
  * support for system extended attributes (#1409)
  * support for decompression of symbolic links in zipx archives (#1435)
  Important bugfixes
  * fixed extraction of archives with hard links pointing to itself (#1381)
  * cpio fixes (#1387, #1388)
  * fixed uninitialized size in rar5_read_data (#1408)
  * fixed memory leaks in error case of archive_write_open() functions (#1456)
- Drop libarchive-3.4.3-fix_test_write_disk_secure.patch, fixed upstream.</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 3.5.1:
  * various compilation fixes (#1461, #1462, #1463, #1464)
  * fixed undefined behavior in a function in warc reader (#1465)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1647259200">- Fix CVE-2021-36976 use-after-free in copy_string
  (CVE-2021-36976, bsc#1188572)
  * fix-CVE-2021-36976.patch
- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  CVE-2017-5601, bsc#1022528, bsc#1189528</changelog>
  <changelog author="danilo.spinella@suse.com" date="1652184000">- Fix CVE-2022-26280 out-of-bounds read via the component zipx_lzma_alone_init
  (CVE-2022-26280, bsc#1197634)
  * fix-CVE-2022-26280.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1662984000">- Fix CVE-2021-23177, extracting a symlink with ACLs modifies ACLs of target
  (CVE-2021-23177, bsc#1192425)
  * CVE-2021-23177.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2021-31566, modifies file flags of symlink target
  (CVE-2021-31566, bsc#1192426.patch)
  CVE-2021-31566.patch
- Fix bsc#1192427, processing fixup entries may follow symbolic links
  bsc1192427.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1669118400">- Fix CVE-2022-36227, Handle a calloc returning NULL
  (CVE-2022-36227, bsc#1205629)
  * CVE-2022-36227.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1718193600">- Fix CVE-2024-20696, heap based out-of-bounds write
  (CVE-2024-20696, bsc#1225971)
  * CVE-2024-20696.patch</changelog>
</package>
<package pkgid="28d3255dc3eb0d99990ab7f85b5ea2cdf52db676466cc30987d4812c257c7f2f" name="libassuan" arch="src">
  <version epoch="0" ver="2.5.5" rel="150000.4.7.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1376913600">- update to 2.1.1
  * no changes on the GNU/Linux platform
- includes changes from 2.1.0:
  * Support for the nPth library.
  * Add assuan_check_version and two version macros.
  * Interface changes relative to the 2.0.3 release:
    ASSUAN_SYSTEM_NPTH_IMPL  NEW macro.
    ASSUAN_SYSTEM_NPTH       NEW macro.
    __assuan_read            NEW (private).
    __assuan_write           NEW (private).
    __assuan_recvmsg         NEW (private).
    __assuan_sendmsg         NEW (private).
    __assuan_waitpid         NEW (private).
    ASSUAN_VERSION           NEW macro.
    ASSUAN_VERSION_NUMBER    NEW macro.
    assuan_check_version     NEW.
- add tarball signature and keyring
- run unit tests during build
- libgpg-error requirement is &gt;= 1.8</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1408276800">- update to 2.1.2:
  * Added support for ppc64le.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1415448000">- update to 2.1.3:
  + Performance fix for a platform other than GNU/Linux</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1419768000">- libassuan 2.2.0:
  * Added support for socket redirection.
  * Interface changes relative to the 2.1.3 release:
  assuan_sock_set_sockaddr_un  NEW.
- fix SLE 11 SP2 build (make install)</changelog>
  <changelog author="astieger@suse.com" date="1431432000">- libassuan 2.2.1:
  * Documentation updates.
  * Fixes for platforms other than GNU/Linux</changelog>
  <changelog author="astieger@suse.com" date="1440763200">- libassuan 2.3.0:
  * Now wipes out the memory of the context structure before freeing.
  The context may have stored sensitive data in its line buffers.
  * Fixed a problem with the data length limit in assuan_inquire.
  * Returns GPG_ERR_SOURCE_ASSUAN with errors from functions w/o a
  context.
  * Two new functions to tweak the behaviour of the socket wrappers.
  * By default build without a build timestamp.
  * Interface changes relative to the 2.2.1 release:
  assuan_sock_set_flag     NEW.
  assuan_sock_get_flag     NEW.</changelog>
  <changelog author="astieger@suse.com" date="1446724800">- libassuan 2.4.0:
  * New flags "socks" and "tor-mode" for assuan_sock_{set,get}_flag.
  * New function assuan_sock_connect_byname.
  * Require at least libgpg-error 1.17.
  * Interface changes relative to the 2.3.0 release:
    assuan_sock_connect_byname    NEW.
    ASSUAN_SOCK_TOR               NEW.
    ASSUAN_SOCK_SOCKS             NEW.
    assuan_sock_set_flag          EXTENDED.
    assuan_sock_get_flag          EXTENDED.</changelog>
  <changelog author="astieger@suse.com" date="1448712000">- libassuan 2.4.1:
  * In Tor mode fallback to port 9150 if 9050 is not listening.</changelog>
  <changelog author="astieger@suse.com" date="1449144000">- libassuan 2.4.2:
  * The nPth version of the connect system hook does now wrap the
  call with npth_unprotec/npth_protect to avoid blocking during a
  connect.
  * Add feature to assuan_sock_connect_byname to test for SOCKS5
  availability.</changelog>
  <changelog author="astieger@suse.com" date="1468843200">- libassuan 2.4.3:
  * Allow socket redirection with assuan_socket_connect.
  * Speedup spawning programs on Linux
  * Fix minor memory leaks</changelog>
  <changelog author="schwab@suse.de" date="1478692800">- qemu-disable-fdpassing-test.patch: disable fdpassing test when running
  under qemu-linux-user</changelog>
  <changelog author="astieger@suse.com" date="1511265600">- libassuan 2.4.4:
  * New configure option --disable-doc
  * Fix the use of nanosleep
  * Portability fix for systems not defining INADDR_LOOPBACK</changelog>
  <changelog author="astieger@suse.com" date="1512388800">- libassuan 2.4.5:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="astieger@suse.com" date="1512993600">- libassuan 2.5.1:
  * New function to change the system hooks for the socket
    interface (assuan_sock_set_system_hooks)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1544702400">-Update to 2.5.2:
  * configure.ac: Bump LT version to C8/A8/R2
  * include libassuan.pc in the spec file</changelog>
  <changelog author="schwab@suse.de" date="1545220800">- qemu-disable-fdpassing-test.patch: remove</changelog>
  <changelog author="kbabioch@suse.de" date="1549886400">- Update to 2.5.3:
  * Add a timeout for writing to a SOCKS5 proxy.
  * Add workaround for a problem with LD_LIBRARY_PATH on newer systems.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603540800">- update to 2.5.4:
  * Fix some minor build annoyances</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616760000">- update to 2.5.5:
  * Fix a crash in the logging code
  * Upgrade autoconf</changelog>
</package>
<package pkgid="998a197306619965b8186218a82aa1f792f000f4d7d1d7f86e83d10ac56ef6f9" name="libassuan0" arch="aarch64">
  <version epoch="0" ver="2.5.5" rel="150000.4.7.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1415448000">- update to 2.1.3:
  + Performance fix for a platform other than GNU/Linux</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1419768000">- libassuan 2.2.0:
  * Added support for socket redirection.
  * Interface changes relative to the 2.1.3 release:
  assuan_sock_set_sockaddr_un  NEW.
- fix SLE 11 SP2 build (make install)</changelog>
  <changelog author="astieger@suse.com" date="1431432000">- libassuan 2.2.1:
  * Documentation updates.
  * Fixes for platforms other than GNU/Linux</changelog>
  <changelog author="astieger@suse.com" date="1440763200">- libassuan 2.3.0:
  * Now wipes out the memory of the context structure before freeing.
  The context may have stored sensitive data in its line buffers.
  * Fixed a problem with the data length limit in assuan_inquire.
  * Returns GPG_ERR_SOURCE_ASSUAN with errors from functions w/o a
  context.
  * Two new functions to tweak the behaviour of the socket wrappers.
  * By default build without a build timestamp.
  * Interface changes relative to the 2.2.1 release:
  assuan_sock_set_flag     NEW.
  assuan_sock_get_flag     NEW.</changelog>
  <changelog author="astieger@suse.com" date="1446724800">- libassuan 2.4.0:
  * New flags "socks" and "tor-mode" for assuan_sock_{set,get}_flag.
  * New function assuan_sock_connect_byname.
  * Require at least libgpg-error 1.17.
  * Interface changes relative to the 2.3.0 release:
    assuan_sock_connect_byname    NEW.
    ASSUAN_SOCK_TOR               NEW.
    ASSUAN_SOCK_SOCKS             NEW.
    assuan_sock_set_flag          EXTENDED.
    assuan_sock_get_flag          EXTENDED.</changelog>
  <changelog author="astieger@suse.com" date="1448712000">- libassuan 2.4.1:
  * In Tor mode fallback to port 9150 if 9050 is not listening.</changelog>
  <changelog author="astieger@suse.com" date="1449144000">- libassuan 2.4.2:
  * The nPth version of the connect system hook does now wrap the
  call with npth_unprotec/npth_protect to avoid blocking during a
  connect.
  * Add feature to assuan_sock_connect_byname to test for SOCKS5
  availability.</changelog>
  <changelog author="astieger@suse.com" date="1468843200">- libassuan 2.4.3:
  * Allow socket redirection with assuan_socket_connect.
  * Speedup spawning programs on Linux
  * Fix minor memory leaks</changelog>
  <changelog author="schwab@suse.de" date="1478692800">- qemu-disable-fdpassing-test.patch: disable fdpassing test when running
  under qemu-linux-user</changelog>
  <changelog author="astieger@suse.com" date="1511265600">- libassuan 2.4.4:
  * New configure option --disable-doc
  * Fix the use of nanosleep
  * Portability fix for systems not defining INADDR_LOOPBACK</changelog>
  <changelog author="astieger@suse.com" date="1512388800">- libassuan 2.4.5:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="astieger@suse.com" date="1512993600">- libassuan 2.5.1:
  * New function to change the system hooks for the socket
    interface (assuan_sock_set_system_hooks)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1544702400">-Update to 2.5.2:
  * configure.ac: Bump LT version to C8/A8/R2
  * include libassuan.pc in the spec file</changelog>
  <changelog author="schwab@suse.de" date="1545220800">- qemu-disable-fdpassing-test.patch: remove</changelog>
  <changelog author="kbabioch@suse.de" date="1549886400">- Update to 2.5.3:
  * Add a timeout for writing to a SOCKS5 proxy.
  * Add workaround for a problem with LD_LIBRARY_PATH on newer systems.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603540800">- update to 2.5.4:
  * Fix some minor build annoyances</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616760000">- update to 2.5.5:
  * Fix a crash in the logging code
  * Upgrade autoconf</changelog>
</package>
<package pkgid="47358bb43fd793532e40193eb503d6df678869c58a687685888702c8d286ff3b" name="libassuan0" arch="s390x">
  <version epoch="0" ver="2.5.5" rel="150000.4.7.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1415448000">- update to 2.1.3:
  + Performance fix for a platform other than GNU/Linux</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1419768000">- libassuan 2.2.0:
  * Added support for socket redirection.
  * Interface changes relative to the 2.1.3 release:
  assuan_sock_set_sockaddr_un  NEW.
- fix SLE 11 SP2 build (make install)</changelog>
  <changelog author="astieger@suse.com" date="1431432000">- libassuan 2.2.1:
  * Documentation updates.
  * Fixes for platforms other than GNU/Linux</changelog>
  <changelog author="astieger@suse.com" date="1440763200">- libassuan 2.3.0:
  * Now wipes out the memory of the context structure before freeing.
  The context may have stored sensitive data in its line buffers.
  * Fixed a problem with the data length limit in assuan_inquire.
  * Returns GPG_ERR_SOURCE_ASSUAN with errors from functions w/o a
  context.
  * Two new functions to tweak the behaviour of the socket wrappers.
  * By default build without a build timestamp.
  * Interface changes relative to the 2.2.1 release:
  assuan_sock_set_flag     NEW.
  assuan_sock_get_flag     NEW.</changelog>
  <changelog author="astieger@suse.com" date="1446724800">- libassuan 2.4.0:
  * New flags "socks" and "tor-mode" for assuan_sock_{set,get}_flag.
  * New function assuan_sock_connect_byname.
  * Require at least libgpg-error 1.17.
  * Interface changes relative to the 2.3.0 release:
    assuan_sock_connect_byname    NEW.
    ASSUAN_SOCK_TOR               NEW.
    ASSUAN_SOCK_SOCKS             NEW.
    assuan_sock_set_flag          EXTENDED.
    assuan_sock_get_flag          EXTENDED.</changelog>
  <changelog author="astieger@suse.com" date="1448712000">- libassuan 2.4.1:
  * In Tor mode fallback to port 9150 if 9050 is not listening.</changelog>
  <changelog author="astieger@suse.com" date="1449144000">- libassuan 2.4.2:
  * The nPth version of the connect system hook does now wrap the
  call with npth_unprotec/npth_protect to avoid blocking during a
  connect.
  * Add feature to assuan_sock_connect_byname to test for SOCKS5
  availability.</changelog>
  <changelog author="astieger@suse.com" date="1468843200">- libassuan 2.4.3:
  * Allow socket redirection with assuan_socket_connect.
  * Speedup spawning programs on Linux
  * Fix minor memory leaks</changelog>
  <changelog author="schwab@suse.de" date="1478692800">- qemu-disable-fdpassing-test.patch: disable fdpassing test when running
  under qemu-linux-user</changelog>
  <changelog author="astieger@suse.com" date="1511265600">- libassuan 2.4.4:
  * New configure option --disable-doc
  * Fix the use of nanosleep
  * Portability fix for systems not defining INADDR_LOOPBACK</changelog>
  <changelog author="astieger@suse.com" date="1512388800">- libassuan 2.4.5:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="astieger@suse.com" date="1512993600">- libassuan 2.5.1:
  * New function to change the system hooks for the socket
    interface (assuan_sock_set_system_hooks)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1544702400">-Update to 2.5.2:
  * configure.ac: Bump LT version to C8/A8/R2
  * include libassuan.pc in the spec file</changelog>
  <changelog author="schwab@suse.de" date="1545220800">- qemu-disable-fdpassing-test.patch: remove</changelog>
  <changelog author="kbabioch@suse.de" date="1549886400">- Update to 2.5.3:
  * Add a timeout for writing to a SOCKS5 proxy.
  * Add workaround for a problem with LD_LIBRARY_PATH on newer systems.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603540800">- update to 2.5.4:
  * Fix some minor build annoyances</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616760000">- update to 2.5.5:
  * Fix a crash in the logging code
  * Upgrade autoconf</changelog>
</package>
<package pkgid="dd679ca7eb5d39e512122697625d4d1466ff05466eeddd88dabf35cdec9abf36" name="libassuan0" arch="x86_64">
  <version epoch="0" ver="2.5.5" rel="150000.4.7.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1415448000">- update to 2.1.3:
  + Performance fix for a platform other than GNU/Linux</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1419768000">- libassuan 2.2.0:
  * Added support for socket redirection.
  * Interface changes relative to the 2.1.3 release:
  assuan_sock_set_sockaddr_un  NEW.
- fix SLE 11 SP2 build (make install)</changelog>
  <changelog author="astieger@suse.com" date="1431432000">- libassuan 2.2.1:
  * Documentation updates.
  * Fixes for platforms other than GNU/Linux</changelog>
  <changelog author="astieger@suse.com" date="1440763200">- libassuan 2.3.0:
  * Now wipes out the memory of the context structure before freeing.
  The context may have stored sensitive data in its line buffers.
  * Fixed a problem with the data length limit in assuan_inquire.
  * Returns GPG_ERR_SOURCE_ASSUAN with errors from functions w/o a
  context.
  * Two new functions to tweak the behaviour of the socket wrappers.
  * By default build without a build timestamp.
  * Interface changes relative to the 2.2.1 release:
  assuan_sock_set_flag     NEW.
  assuan_sock_get_flag     NEW.</changelog>
  <changelog author="astieger@suse.com" date="1446724800">- libassuan 2.4.0:
  * New flags "socks" and "tor-mode" for assuan_sock_{set,get}_flag.
  * New function assuan_sock_connect_byname.
  * Require at least libgpg-error 1.17.
  * Interface changes relative to the 2.3.0 release:
    assuan_sock_connect_byname    NEW.
    ASSUAN_SOCK_TOR               NEW.
    ASSUAN_SOCK_SOCKS             NEW.
    assuan_sock_set_flag          EXTENDED.
    assuan_sock_get_flag          EXTENDED.</changelog>
  <changelog author="astieger@suse.com" date="1448712000">- libassuan 2.4.1:
  * In Tor mode fallback to port 9150 if 9050 is not listening.</changelog>
  <changelog author="astieger@suse.com" date="1449144000">- libassuan 2.4.2:
  * The nPth version of the connect system hook does now wrap the
  call with npth_unprotec/npth_protect to avoid blocking during a
  connect.
  * Add feature to assuan_sock_connect_byname to test for SOCKS5
  availability.</changelog>
  <changelog author="astieger@suse.com" date="1468843200">- libassuan 2.4.3:
  * Allow socket redirection with assuan_socket_connect.
  * Speedup spawning programs on Linux
  * Fix minor memory leaks</changelog>
  <changelog author="schwab@suse.de" date="1478692800">- qemu-disable-fdpassing-test.patch: disable fdpassing test when running
  under qemu-linux-user</changelog>
  <changelog author="astieger@suse.com" date="1511265600">- libassuan 2.4.4:
  * New configure option --disable-doc
  * Fix the use of nanosleep
  * Portability fix for systems not defining INADDR_LOOPBACK</changelog>
  <changelog author="astieger@suse.com" date="1512388800">- libassuan 2.4.5:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="astieger@suse.com" date="1512993600">- libassuan 2.5.1:
  * New function to change the system hooks for the socket
    interface (assuan_sock_set_system_hooks)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1544702400">-Update to 2.5.2:
  * configure.ac: Bump LT version to C8/A8/R2
  * include libassuan.pc in the spec file</changelog>
  <changelog author="schwab@suse.de" date="1545220800">- qemu-disable-fdpassing-test.patch: remove</changelog>
  <changelog author="kbabioch@suse.de" date="1549886400">- Update to 2.5.3:
  * Add a timeout for writing to a SOCKS5 proxy.
  * Add workaround for a problem with LD_LIBRARY_PATH on newer systems.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603540800">- update to 2.5.4:
  * Fix some minor build annoyances</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616760000">- update to 2.5.5:
  * Fix a crash in the logging code
  * Upgrade autoconf</changelog>
</package>
<package pkgid="8a32069126e1e0ed08edbd387fb66de45b7dfb1591c397fd7e1bf4d6fb6c31dd" name="libaudit1" arch="aarch64">
  <version epoch="0" ver="3.0.6" rel="150400.4.16.1"/>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Add patch to fix test run without python2 interpreter:
  * audit-python3.patch
- Update to 2.8.2 release:
  * Update tables for 4.14 kernel
  * Fixup ipv6 server side binding
  * AVC report from aureport was missing result column header (#1511606)
  * Add SOFTWARE_UPDATE event
  * In ausearch/report pickup any path and new-disk fields as a file
  * Fix value returned by auditctl --reset-lost (Richard Guy Briggs)
  * In auparse, fix expr_create_timestamp_comparison_ex to be numeric field
  * Fix building on old systems without linux/fanotify.h
  * Fix shell portability issues reported by shellcheck
  * Auditd validate_email should not use gethostbyname</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Update header in audit-python3.patch
- Update patch guidelines in README-BEFORE-ADDING-PATCHES</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529236800">- Update to version 2.8.3:
  * Correct msg function name in lru debug code.
  * Fix a segfault in auditd when dns resolution isn't available.
  * Make a reload legacy service for auditd.
  * In auparse python bindings, expose some new types that were
    missing.
  * In normalizer, pickup subject kind for user_login events.
  * Fix interpretation of unknown ioctcmds (rh#1540507).
  * Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, &amp;
    RESP_ORIGIN_BLOCK_TIMED events.
  * In auparse_normalize for USER_LOGIN events, map acct for
    subj_kind.
  * Fix logging of IPv6 addresses in DAEMON_ACCEPT events
    (rh#1534748).
  * Do not rotate auditd logs when num_logs &lt; 2 (brozs).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529755200">- Update to version 2.8.4:
  * Generate checkpoint file even when not results are returned
    (Burn Alting).
  * Fix log file creation when file logging is disabled entirely
    (Vlad Glagolev).
  * Use SIGCONT to dump auditd internal state (rh#1504251).
  * Fix parsing of virtual timestamp fields in ausearch_expression
    (rh#1515903).
  * Fix parsing of uid &amp; success for ausearch.
  * Hide lru symbols in auparse.
  * Fix aureport summary time range reporting.
  * Allow unlimited retries on startup for remote logging.
  * Add queue_depth to remote logging stats and increase default
    queue_depth size.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Make use of some %make_install.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Remote zos building is now a configurable option.
  It should be disabled in audit (and left enabled in audit-secondary).</changelog>
  <changelog author="ematsumiya@suse.com" date="1591012800">- Fix specfile to require libauparse0 and libaudit1 after splitting
  audit-libs (bsc#1172295)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Remove audit-fno-common.patch: fixed in upstream
- Remove audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1679313600">- Enable livepatching on main library on x86_64.</changelog>
</package>
<package pkgid="07b5f74130a90f896e6061b23815e1a2032c3144e73cbe082e6cb7f6f8086dec" name="libaudit1" arch="s390x">
  <version epoch="0" ver="3.0.6" rel="150400.4.16.1"/>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Add patch to fix test run without python2 interpreter:
  * audit-python3.patch
- Update to 2.8.2 release:
  * Update tables for 4.14 kernel
  * Fixup ipv6 server side binding
  * AVC report from aureport was missing result column header (#1511606)
  * Add SOFTWARE_UPDATE event
  * In ausearch/report pickup any path and new-disk fields as a file
  * Fix value returned by auditctl --reset-lost (Richard Guy Briggs)
  * In auparse, fix expr_create_timestamp_comparison_ex to be numeric field
  * Fix building on old systems without linux/fanotify.h
  * Fix shell portability issues reported by shellcheck
  * Auditd validate_email should not use gethostbyname</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Update header in audit-python3.patch
- Update patch guidelines in README-BEFORE-ADDING-PATCHES</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529236800">- Update to version 2.8.3:
  * Correct msg function name in lru debug code.
  * Fix a segfault in auditd when dns resolution isn't available.
  * Make a reload legacy service for auditd.
  * In auparse python bindings, expose some new types that were
    missing.
  * In normalizer, pickup subject kind for user_login events.
  * Fix interpretation of unknown ioctcmds (rh#1540507).
  * Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, &amp;
    RESP_ORIGIN_BLOCK_TIMED events.
  * In auparse_normalize for USER_LOGIN events, map acct for
    subj_kind.
  * Fix logging of IPv6 addresses in DAEMON_ACCEPT events
    (rh#1534748).
  * Do not rotate auditd logs when num_logs &lt; 2 (brozs).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529755200">- Update to version 2.8.4:
  * Generate checkpoint file even when not results are returned
    (Burn Alting).
  * Fix log file creation when file logging is disabled entirely
    (Vlad Glagolev).
  * Use SIGCONT to dump auditd internal state (rh#1504251).
  * Fix parsing of virtual timestamp fields in ausearch_expression
    (rh#1515903).
  * Fix parsing of uid &amp; success for ausearch.
  * Hide lru symbols in auparse.
  * Fix aureport summary time range reporting.
  * Allow unlimited retries on startup for remote logging.
  * Add queue_depth to remote logging stats and increase default
    queue_depth size.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Make use of some %make_install.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Remote zos building is now a configurable option.
  It should be disabled in audit (and left enabled in audit-secondary).</changelog>
  <changelog author="ematsumiya@suse.com" date="1591012800">- Fix specfile to require libauparse0 and libaudit1 after splitting
  audit-libs (bsc#1172295)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Remove audit-fno-common.patch: fixed in upstream
- Remove audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1679313600">- Enable livepatching on main library on x86_64.</changelog>
</package>
<package pkgid="ca3d889253782b9a19217151fb9e6796d11fc50809951ef53407c61255d6128b" name="libaudit1" arch="x86_64">
  <version epoch="0" ver="3.0.6" rel="150400.4.16.1"/>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Add patch to fix test run without python2 interpreter:
  * audit-python3.patch
- Update to 2.8.2 release:
  * Update tables for 4.14 kernel
  * Fixup ipv6 server side binding
  * AVC report from aureport was missing result column header (#1511606)
  * Add SOFTWARE_UPDATE event
  * In ausearch/report pickup any path and new-disk fields as a file
  * Fix value returned by auditctl --reset-lost (Richard Guy Briggs)
  * In auparse, fix expr_create_timestamp_comparison_ex to be numeric field
  * Fix building on old systems without linux/fanotify.h
  * Fix shell portability issues reported by shellcheck
  * Auditd validate_email should not use gethostbyname</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Update header in audit-python3.patch
- Update patch guidelines in README-BEFORE-ADDING-PATCHES</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529236800">- Update to version 2.8.3:
  * Correct msg function name in lru debug code.
  * Fix a segfault in auditd when dns resolution isn't available.
  * Make a reload legacy service for auditd.
  * In auparse python bindings, expose some new types that were
    missing.
  * In normalizer, pickup subject kind for user_login events.
  * Fix interpretation of unknown ioctcmds (rh#1540507).
  * Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, &amp;
    RESP_ORIGIN_BLOCK_TIMED events.
  * In auparse_normalize for USER_LOGIN events, map acct for
    subj_kind.
  * Fix logging of IPv6 addresses in DAEMON_ACCEPT events
    (rh#1534748).
  * Do not rotate auditd logs when num_logs &lt; 2 (brozs).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529755200">- Update to version 2.8.4:
  * Generate checkpoint file even when not results are returned
    (Burn Alting).
  * Fix log file creation when file logging is disabled entirely
    (Vlad Glagolev).
  * Use SIGCONT to dump auditd internal state (rh#1504251).
  * Fix parsing of virtual timestamp fields in ausearch_expression
    (rh#1515903).
  * Fix parsing of uid &amp; success for ausearch.
  * Hide lru symbols in auparse.
  * Fix aureport summary time range reporting.
  * Allow unlimited retries on startup for remote logging.
  * Add queue_depth to remote logging stats and increase default
    queue_depth size.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Make use of some %make_install.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Remote zos building is now a configurable option.
  It should be disabled in audit (and left enabled in audit-secondary).</changelog>
  <changelog author="ematsumiya@suse.com" date="1591012800">- Fix specfile to require libauparse0 and libaudit1 after splitting
  audit-libs (bsc#1172295)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Remove audit-fno-common.patch: fixed in upstream
- Remove audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1679313600">- Enable livepatching on main library on x86_64.</changelog>
</package>
<package pkgid="957ce612621766e7e94fc7fc0b6c094daee122a9dcf526f6eb9c3aca006bdddb" name="libauparse0" arch="aarch64">
  <version epoch="0" ver="3.0.6" rel="150400.4.16.1"/>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Add patch to fix test run without python2 interpreter:
  * audit-python3.patch
- Update to 2.8.2 release:
  * Update tables for 4.14 kernel
  * Fixup ipv6 server side binding
  * AVC report from aureport was missing result column header (#1511606)
  * Add SOFTWARE_UPDATE event
  * In ausearch/report pickup any path and new-disk fields as a file
  * Fix value returned by auditctl --reset-lost (Richard Guy Briggs)
  * In auparse, fix expr_create_timestamp_comparison_ex to be numeric field
  * Fix building on old systems without linux/fanotify.h
  * Fix shell portability issues reported by shellcheck
  * Auditd validate_email should not use gethostbyname</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Update header in audit-python3.patch
- Update patch guidelines in README-BEFORE-ADDING-PATCHES</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529236800">- Update to version 2.8.3:
  * Correct msg function name in lru debug code.
  * Fix a segfault in auditd when dns resolution isn't available.
  * Make a reload legacy service for auditd.
  * In auparse python bindings, expose some new types that were
    missing.
  * In normalizer, pickup subject kind for user_login events.
  * Fix interpretation of unknown ioctcmds (rh#1540507).
  * Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, &amp;
    RESP_ORIGIN_BLOCK_TIMED events.
  * In auparse_normalize for USER_LOGIN events, map acct for
    subj_kind.
  * Fix logging of IPv6 addresses in DAEMON_ACCEPT events
    (rh#1534748).
  * Do not rotate auditd logs when num_logs &lt; 2 (brozs).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529755200">- Update to version 2.8.4:
  * Generate checkpoint file even when not results are returned
    (Burn Alting).
  * Fix log file creation when file logging is disabled entirely
    (Vlad Glagolev).
  * Use SIGCONT to dump auditd internal state (rh#1504251).
  * Fix parsing of virtual timestamp fields in ausearch_expression
    (rh#1515903).
  * Fix parsing of uid &amp; success for ausearch.
  * Hide lru symbols in auparse.
  * Fix aureport summary time range reporting.
  * Allow unlimited retries on startup for remote logging.
  * Add queue_depth to remote logging stats and increase default
    queue_depth size.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Make use of some %make_install.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Remote zos building is now a configurable option.
  It should be disabled in audit (and left enabled in audit-secondary).</changelog>
  <changelog author="ematsumiya@suse.com" date="1591012800">- Fix specfile to require libauparse0 and libaudit1 after splitting
  audit-libs (bsc#1172295)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Remove audit-fno-common.patch: fixed in upstream
- Remove audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1679313600">- Enable livepatching on main library on x86_64.</changelog>
</package>
<package pkgid="4ceba0cd6b670d243889534d385eeec4c9a63d363e758ceeb91e02e45e497c62" name="libauparse0" arch="s390x">
  <version epoch="0" ver="3.0.6" rel="150400.4.16.1"/>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Add patch to fix test run without python2 interpreter:
  * audit-python3.patch
- Update to 2.8.2 release:
  * Update tables for 4.14 kernel
  * Fixup ipv6 server side binding
  * AVC report from aureport was missing result column header (#1511606)
  * Add SOFTWARE_UPDATE event
  * In ausearch/report pickup any path and new-disk fields as a file
  * Fix value returned by auditctl --reset-lost (Richard Guy Briggs)
  * In auparse, fix expr_create_timestamp_comparison_ex to be numeric field
  * Fix building on old systems without linux/fanotify.h
  * Fix shell portability issues reported by shellcheck
  * Auditd validate_email should not use gethostbyname</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Update header in audit-python3.patch
- Update patch guidelines in README-BEFORE-ADDING-PATCHES</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529236800">- Update to version 2.8.3:
  * Correct msg function name in lru debug code.
  * Fix a segfault in auditd when dns resolution isn't available.
  * Make a reload legacy service for auditd.
  * In auparse python bindings, expose some new types that were
    missing.
  * In normalizer, pickup subject kind for user_login events.
  * Fix interpretation of unknown ioctcmds (rh#1540507).
  * Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, &amp;
    RESP_ORIGIN_BLOCK_TIMED events.
  * In auparse_normalize for USER_LOGIN events, map acct for
    subj_kind.
  * Fix logging of IPv6 addresses in DAEMON_ACCEPT events
    (rh#1534748).
  * Do not rotate auditd logs when num_logs &lt; 2 (brozs).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529755200">- Update to version 2.8.4:
  * Generate checkpoint file even when not results are returned
    (Burn Alting).
  * Fix log file creation when file logging is disabled entirely
    (Vlad Glagolev).
  * Use SIGCONT to dump auditd internal state (rh#1504251).
  * Fix parsing of virtual timestamp fields in ausearch_expression
    (rh#1515903).
  * Fix parsing of uid &amp; success for ausearch.
  * Hide lru symbols in auparse.
  * Fix aureport summary time range reporting.
  * Allow unlimited retries on startup for remote logging.
  * Add queue_depth to remote logging stats and increase default
    queue_depth size.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Make use of some %make_install.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Remote zos building is now a configurable option.
  It should be disabled in audit (and left enabled in audit-secondary).</changelog>
  <changelog author="ematsumiya@suse.com" date="1591012800">- Fix specfile to require libauparse0 and libaudit1 after splitting
  audit-libs (bsc#1172295)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Remove audit-fno-common.patch: fixed in upstream
- Remove audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1679313600">- Enable livepatching on main library on x86_64.</changelog>
</package>
<package pkgid="6c0561449bbb0acb3f7485b0ebac38b857dd7a12614633608e18574e20e26465" name="libauparse0" arch="x86_64">
  <version epoch="0" ver="3.0.6" rel="150400.4.16.1"/>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Add patch to fix test run without python2 interpreter:
  * audit-python3.patch
- Update to 2.8.2 release:
  * Update tables for 4.14 kernel
  * Fixup ipv6 server side binding
  * AVC report from aureport was missing result column header (#1511606)
  * Add SOFTWARE_UPDATE event
  * In ausearch/report pickup any path and new-disk fields as a file
  * Fix value returned by auditctl --reset-lost (Richard Guy Briggs)
  * In auparse, fix expr_create_timestamp_comparison_ex to be numeric field
  * Fix building on old systems without linux/fanotify.h
  * Fix shell portability issues reported by shellcheck
  * Auditd validate_email should not use gethostbyname</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Update header in audit-python3.patch
- Update patch guidelines in README-BEFORE-ADDING-PATCHES</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529236800">- Update to version 2.8.3:
  * Correct msg function name in lru debug code.
  * Fix a segfault in auditd when dns resolution isn't available.
  * Make a reload legacy service for auditd.
  * In auparse python bindings, expose some new types that were
    missing.
  * In normalizer, pickup subject kind for user_login events.
  * Fix interpretation of unknown ioctcmds (rh#1540507).
  * Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, &amp;
    RESP_ORIGIN_BLOCK_TIMED events.
  * In auparse_normalize for USER_LOGIN events, map acct for
    subj_kind.
  * Fix logging of IPv6 addresses in DAEMON_ACCEPT events
    (rh#1534748).
  * Do not rotate auditd logs when num_logs &lt; 2 (brozs).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529755200">- Update to version 2.8.4:
  * Generate checkpoint file even when not results are returned
    (Burn Alting).
  * Fix log file creation when file logging is disabled entirely
    (Vlad Glagolev).
  * Use SIGCONT to dump auditd internal state (rh#1504251).
  * Fix parsing of virtual timestamp fields in ausearch_expression
    (rh#1515903).
  * Fix parsing of uid &amp; success for ausearch.
  * Hide lru symbols in auparse.
  * Fix aureport summary time range reporting.
  * Allow unlimited retries on startup for remote logging.
  * Add queue_depth to remote logging stats and increase default
    queue_depth size.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Make use of some %make_install.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Remote zos building is now a configurable option.
  It should be disabled in audit (and left enabled in audit-secondary).</changelog>
  <changelog author="ematsumiya@suse.com" date="1591012800">- Fix specfile to require libauparse0 and libaudit1 after splitting
  audit-libs (bsc#1172295)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Remove audit-fno-common.patch: fixed in upstream
- Remove audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1679313600">- Enable livepatching on main library on x86_64.</changelog>
</package>
<package pkgid="f5761828e84d6153994f4d5cba2ad9b69a22bac7d98d0333c6119d4241334ce5" name="libavahi-client3" arch="aarch64">
  <version epoch="0" ver="0.8" rel="150400.7.10.1"/>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
</package>
<package pkgid="013eb14562d0d38e1747c2e502e12b0c7bd4ad617439e7c08e8ad109bc1f5041" name="libavahi-client3" arch="s390x">
  <version epoch="0" ver="0.8" rel="150400.7.10.1"/>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
</package>
<package pkgid="0dfb6b8fdd07df202a88f1d06b6799d58d24bb6bde5d9b432ae88b1887893ccc" name="libavahi-client3" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150400.7.10.1"/>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
</package>
<package pkgid="b75ce724bbbb61e89848a7041541de0e00e30eed8462a43dc9911a2156fbd62b" name="libavahi-client3" arch="aarch64">
  <version epoch="0" ver="0.8" rel="150400.7.13.1"/>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
</package>
<package pkgid="c4ad27ab0c1aeacd1bdb2305bde84198f31b73536a492dd4dbf78f13bd29e8a6" name="libavahi-client3" arch="s390x">
  <version epoch="0" ver="0.8" rel="150400.7.13.1"/>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
</package>
<package pkgid="cac31da7f8e67043692c50f20998ece5abb8daa08d8b6822f1b4a1af67e38a33" name="libavahi-client3" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150400.7.13.1"/>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
</package>
<package pkgid="53d47fe34db407b8384c488e68dcb406e79ea3c48279c8290a3d3724060006ce" name="libavahi-client3" arch="aarch64">
  <version epoch="0" ver="0.8" rel="150400.7.16.1"/>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1711454400">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).</changelog>
</package>
<package pkgid="8316e62070fb01159de377da1469abef1ac0f427a5d88597c69b07b0b1eabe68" name="libavahi-client3" arch="s390x">
  <version epoch="0" ver="0.8" rel="150400.7.16.1"/>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1711454400">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).</changelog>
</package>
<package pkgid="9a1f10389254317ead2000e0826667ac1ccae234830306766f99b99fc38f6de8" name="libavahi-client3" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150400.7.16.1"/>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1711454400">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).</changelog>
</package>
<package pkgid="86395b4b5b8c0cda6f3b9e7140c00db97452a9becb03f0b93a6c9b4807853712" name="libavahi-common3" arch="aarch64">
  <version epoch="0" ver="0.8" rel="150400.7.10.1"/>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
</package>
<package pkgid="27a693ac9298921efcaaaabbaa8e02242b7969fafc20901307b7aa027a247993" name="libavahi-common3" arch="s390x">
  <version epoch="0" ver="0.8" rel="150400.7.10.1"/>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
</package>
<package pkgid="b074cff28ff65e38bac3414ed8c4b69bbc3f60673dc8dcb51c256fe5c51ea73f" name="libavahi-common3" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150400.7.10.1"/>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
</package>
<package pkgid="9c92fe1cacc45212ce9451ce61c7659ea1cf40e2e4b080d2972636c2ee85723e" name="libavahi-common3" arch="aarch64">
  <version epoch="0" ver="0.8" rel="150400.7.13.1"/>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
</package>
<package pkgid="8e73e5f384855e7bdf632e1f333464f7ead469d067c501dc43719e4b6b39d058" name="libavahi-common3" arch="s390x">
  <version epoch="0" ver="0.8" rel="150400.7.13.1"/>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
</package>
<package pkgid="e922542dcc77345b89587d20777f7f85276d27d642a1a57407d6811fcd6be2c1" name="libavahi-common3" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150400.7.13.1"/>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
</package>
<package pkgid="b7b395055048c4c160fd7b733c2a12b1dc9ba08d46e7768a2f1eafe2187a3faa" name="libavahi-common3" arch="aarch64">
  <version epoch="0" ver="0.8" rel="150400.7.16.1"/>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1711454400">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).</changelog>
</package>
<package pkgid="e5ccc1d56cf9b0514b44f510d8d25e75d375febecec6c81d3f64eaa056645dec" name="libavahi-common3" arch="s390x">
  <version epoch="0" ver="0.8" rel="150400.7.16.1"/>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1711454400">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).</changelog>
</package>
<package pkgid="6eba40cc3c97e71c08255848ee9dde3956b020c8764f5948c634ea5899bfd5e7" name="libavahi-common3" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150400.7.16.1"/>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1711454400">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).</changelog>
</package>
<package pkgid="9a8e9f4a290b2e8bb796a221b2351e532940136b4ca0dc1a6dee2c4da12c74f9" name="libavahi-core7" arch="aarch64">
  <version epoch="0" ver="0.8" rel="150400.7.10.1"/>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
</package>
<package pkgid="db1ebd01f96195aa8eb60d6f7fe4cc5c24d0db4a71b8bab6ef45fcf110a974aa" name="libavahi-core7" arch="s390x">
  <version epoch="0" ver="0.8" rel="150400.7.10.1"/>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
</package>
<package pkgid="7b737bec445b4463641bff7a848254df25509d84c77f252c1408ab7a0b994a96" name="libavahi-core7" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150400.7.10.1"/>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
</package>
<package pkgid="bf88d73d33af4ec45a9340bb229ab51c6d59650ba49c485f840906929c7740bc" name="libavahi-core7" arch="aarch64">
  <version epoch="0" ver="0.8" rel="150400.7.13.1"/>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
</package>
<package pkgid="c37e8567939c6e45bc411eb4a0fda7cfce35bd5a8a4c85f725255d420ce28bab" name="libavahi-core7" arch="s390x">
  <version epoch="0" ver="0.8" rel="150400.7.13.1"/>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
</package>
<package pkgid="bd1aa14af4a6f0a64b13a84473c41b6a36280fb2ce12fe51c6b50a6d9f87e404" name="libavahi-core7" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150400.7.13.1"/>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
</package>
<package pkgid="5703d885ad3cd98031406a9c20bd137424034db1ff66c5dbe9aaaf9d75c7041a" name="libavahi-core7" arch="aarch64">
  <version epoch="0" ver="0.8" rel="150400.7.16.1"/>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1711454400">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).</changelog>
</package>
<package pkgid="1840b293a291976d747c880654c21978d6484543d9370b58efe952c3be3e2e4f" name="libavahi-core7" arch="s390x">
  <version epoch="0" ver="0.8" rel="150400.7.16.1"/>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1711454400">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).</changelog>
</package>
<package pkgid="637c6c52c47f4e17fa839665d9a3ea3e7a437ae7b3474c53b1190813e2306502" name="libavahi-core7" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150400.7.16.1"/>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1711454400">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).</changelog>
</package>
<package pkgid="a1e54aaf443d1274afd3231565c8eb656ea00ae9b97f8b7f48f4b1f3ae2de020" name="libblkid1" arch="aarch64">
  <version epoch="0" ver="2.37.4" rel="150500.9.11.1"/>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-more-ARM-cores-1.patch,
  util-linux-lscpu-add-more-ARM-cores-2.patch,
  util-linux-lscpu-add-more-ARM-cores-3.patch,
  util-linux-lscpu-add-more-ARM-cores-4.patch,
  util-linux-lscpu-add-more-ARM-cores-5.patch,
  util-linux-lscpu-add-more-ARM-cores-6.patch).</changelog>
</package>
<package pkgid="dffec2d94f544d54fd13db69a72b6d39ba0f5a9e1285d178b469328b2bc86555" name="libblkid1" arch="s390x">
  <version epoch="0" ver="2.37.4" rel="150500.9.11.1"/>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-more-ARM-cores-1.patch,
  util-linux-lscpu-add-more-ARM-cores-2.patch,
  util-linux-lscpu-add-more-ARM-cores-3.patch,
  util-linux-lscpu-add-more-ARM-cores-4.patch,
  util-linux-lscpu-add-more-ARM-cores-5.patch,
  util-linux-lscpu-add-more-ARM-cores-6.patch).</changelog>
</package>
<package pkgid="f41479cda2796c51de2d4bc2406d238086454e86924dbab217121d834e96e795" name="libblkid1" arch="x86_64">
  <version epoch="0" ver="2.37.4" rel="150500.9.11.1"/>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-more-ARM-cores-1.patch,
  util-linux-lscpu-add-more-ARM-cores-2.patch,
  util-linux-lscpu-add-more-ARM-cores-3.patch,
  util-linux-lscpu-add-more-ARM-cores-4.patch,
  util-linux-lscpu-add-more-ARM-cores-5.patch,
  util-linux-lscpu-add-more-ARM-cores-6.patch).</changelog>
</package>
<package pkgid="1cccecddbbc7f379b005674057ba9db186367faf2f2df408b50f30b4f713ec4b" name="libblkid1" arch="aarch64">
  <version epoch="0" ver="2.37.4" rel="150500.9.14.2"/>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-more-ARM-cores-1.patch,
  util-linux-lscpu-add-more-ARM-cores-2.patch,
  util-linux-lscpu-add-more-ARM-cores-3.patch,
  util-linux-lscpu-add-more-ARM-cores-4.patch,
  util-linux-lscpu-add-more-ARM-cores-5.patch,
  util-linux-lscpu-add-more-ARM-cores-6.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
</package>
<package pkgid="8af87ffccd0e554ef249bbce5608558c85897b6fd750dbbde0311649eef817ce" name="libblkid1" arch="s390x">
  <version epoch="0" ver="2.37.4" rel="150500.9.14.2"/>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-more-ARM-cores-1.patch,
  util-linux-lscpu-add-more-ARM-cores-2.patch,
  util-linux-lscpu-add-more-ARM-cores-3.patch,
  util-linux-lscpu-add-more-ARM-cores-4.patch,
  util-linux-lscpu-add-more-ARM-cores-5.patch,
  util-linux-lscpu-add-more-ARM-cores-6.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
</package>
<package pkgid="b2bec0d956f6b2b18e3d601de2b547435ef6ddd918e6723084c54ff8873dd772" name="libblkid1" arch="x86_64">
  <version epoch="0" ver="2.37.4" rel="150500.9.14.2"/>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-more-ARM-cores-1.patch,
  util-linux-lscpu-add-more-ARM-cores-2.patch,
  util-linux-lscpu-add-more-ARM-cores-3.patch,
  util-linux-lscpu-add-more-ARM-cores-4.patch,
  util-linux-lscpu-add-more-ARM-cores-5.patch,
  util-linux-lscpu-add-more-ARM-cores-6.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
</package>
<package pkgid="29ef6ce663e41f273836a377c6b87b5c5b3435124170f03b2ecdef177d9ed796" name="libblkid1" arch="aarch64">
  <version epoch="0" ver="2.37.4" rel="150500.9.17.2"/>
  <changelog author="sbrabec@suse.com" date="1646308800">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-more-ARM-cores-1.patch,
  util-linux-lscpu-add-more-ARM-cores-2.patch,
  util-linux-lscpu-add-more-ARM-cores-3.patch,
  util-linux-lscpu-add-more-ARM-cores-4.patch,
  util-linux-lscpu-add-more-ARM-cores-5.patch,
  util-linux-lscpu-add-more-ARM-cores-6.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1725364800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).</changelog>
</package>
<package pkgid="913ffcd2119bd92444aad0fb08acdc7a6cb864046b277c1f00944e63c97e1bfb" name="libblkid1" arch="s390x">
  <version epoch="0" ver="2.37.4" rel="150500.9.17.2"/>
  <changelog author="sbrabec@suse.com" date="1646308800">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-more-ARM-cores-1.patch,
  util-linux-lscpu-add-more-ARM-cores-2.patch,
  util-linux-lscpu-add-more-ARM-cores-3.patch,
  util-linux-lscpu-add-more-ARM-cores-4.patch,
  util-linux-lscpu-add-more-ARM-cores-5.patch,
  util-linux-lscpu-add-more-ARM-cores-6.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1725364800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).</changelog>
</package>
<package pkgid="c55783fe5dc82a49cc37728869a5cc428a3d662fc1097b5ff788ef5a3aac5cbe" name="libblkid1" arch="x86_64">
  <version epoch="0" ver="2.37.4" rel="150500.9.17.2"/>
  <changelog author="sbrabec@suse.com" date="1646308800">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-more-ARM-cores-1.patch,
  util-linux-lscpu-add-more-ARM-cores-2.patch,
  util-linux-lscpu-add-more-ARM-cores-3.patch,
  util-linux-lscpu-add-more-ARM-cores-4.patch,
  util-linux-lscpu-add-more-ARM-cores-5.patch,
  util-linux-lscpu-add-more-ARM-cores-6.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1725364800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).</changelog>
</package>
<package pkgid="e997c1ffa4eed85188f2cbde105c46c56c4d40db818b630793b59a0f9f623376" name="libblkid1" arch="aarch64">
  <version epoch="0" ver="2.37.4" rel="150500.9.3.1"/>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
</package>
<package pkgid="a59cb8b9bf40748574bce89f2b3e41ae45ec1212936d59a99cb5567b79f808ea" name="libblkid1" arch="s390x">
  <version epoch="0" ver="2.37.4" rel="150500.9.3.1"/>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
</package>
<package pkgid="063f795845395ed364d38e2c6475e806005c3760ec86e6c154aa143bfff91370" name="libblkid1" arch="x86_64">
  <version epoch="0" ver="2.37.4" rel="150500.9.3.1"/>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
</package>
<package pkgid="1d594ad3491f4b56412a4ec482a61a4a3f38ddef6b18be435e166abec793cb97" name="libblkid1" arch="aarch64">
  <version epoch="0" ver="2.37.4" rel="150500.9.6.1"/>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
</package>
<package pkgid="c2a41ed67e3a1aacd64719a2d10fc126af81dc4d7a4f9ea962c0a554e0c1b5f7" name="libblkid1" arch="s390x">
  <version epoch="0" ver="2.37.4" rel="150500.9.6.1"/>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
</package>
<package pkgid="cf51d4f9f386a70c69d22e51fc0fd58a8210960568f0befbd068377a90e627fd" name="libblkid1" arch="x86_64">
  <version epoch="0" ver="2.37.4" rel="150500.9.6.1"/>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
</package>
<package pkgid="2a5e02c30c87776aad88cf52c3582fe15190ff55e80ef08ae554da3083ca2621" name="libbluetooth3" arch="aarch64">
  <version epoch="0" ver="5.65" rel="150500.3.11.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
  <changelog author="jlee@suse.com" date="1705406400">- Add pbap-Fix-not-checking-Primary-Secundary-Counter-leng.patch
  pbap: Fix not checking Primary/Secundary Counter length
  (bsc#1218301)(CVE-2023-50230)(bsc#1218300)(CVE-2023-50229)</changelog>
  <changelog author="jlee@suse.com" date="1709208000">- Porting Yifan Jiang &lt;yfjiang@suse.com&gt;'s solution of bsc#1220329
  to SLE15-SP5 (bsc#1209153)
  - Add necessary Supplements (gnome-bluetooth, blueman, bluedevil5)
    to bluez-obexd, so that file transfer features of the applications
    can be used by default (bsc#1209153, bsc#1220329).
  - Update the description of bluez-obexd.</changelog>
</package>
<package pkgid="b5d5420aaec59d6249a5d0854d88529ebcef2362f4e856d3edf14c85299163d1" name="libbluetooth3" arch="s390x">
  <version epoch="0" ver="5.65" rel="150500.3.11.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
  <changelog author="jlee@suse.com" date="1705406400">- Add pbap-Fix-not-checking-Primary-Secundary-Counter-leng.patch
  pbap: Fix not checking Primary/Secundary Counter length
  (bsc#1218301)(CVE-2023-50230)(bsc#1218300)(CVE-2023-50229)</changelog>
  <changelog author="jlee@suse.com" date="1709208000">- Porting Yifan Jiang &lt;yfjiang@suse.com&gt;'s solution of bsc#1220329
  to SLE15-SP5 (bsc#1209153)
  - Add necessary Supplements (gnome-bluetooth, blueman, bluedevil5)
    to bluez-obexd, so that file transfer features of the applications
    can be used by default (bsc#1209153, bsc#1220329).
  - Update the description of bluez-obexd.</changelog>
</package>
<package pkgid="cb14e3bcbe0d46d2a824cdc1a1d11238352082656debb2864814821579b19530" name="libbluetooth3" arch="x86_64">
  <version epoch="0" ver="5.65" rel="150500.3.11.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
  <changelog author="jlee@suse.com" date="1705406400">- Add pbap-Fix-not-checking-Primary-Secundary-Counter-leng.patch
  pbap: Fix not checking Primary/Secundary Counter length
  (bsc#1218301)(CVE-2023-50230)(bsc#1218300)(CVE-2023-50229)</changelog>
  <changelog author="jlee@suse.com" date="1709208000">- Porting Yifan Jiang &lt;yfjiang@suse.com&gt;'s solution of bsc#1220329
  to SLE15-SP5 (bsc#1209153)
  - Add necessary Supplements (gnome-bluetooth, blueman, bluedevil5)
    to bluez-obexd, so that file transfer features of the applications
    can be used by default (bsc#1209153, bsc#1220329).
  - Update the description of bluez-obexd.</changelog>
</package>
<package pkgid="9a8c03e0dbbb2996a6b8714c074f085b158258d2881b62ffabca9f50b36dc401" name="libbluetooth3" arch="aarch64">
  <version epoch="0" ver="5.65" rel="150500.3.6.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
  <changelog author="jlee@suse.com" date="1705406400">- Add pbap-Fix-not-checking-Primary-Secundary-Counter-leng.patch
  pbap: Fix not checking Primary/Secundary Counter length
  (bsc#1218301)(CVE-2023-50230)(bsc#1218300)(CVE-2023-50229)</changelog>
</package>
<package pkgid="1ca3d1f830d8878cc27b4a30e0967be68e13bcbe7839fa1b8f8036fa985c6f5b" name="libbluetooth3" arch="s390x">
  <version epoch="0" ver="5.65" rel="150500.3.6.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
  <changelog author="jlee@suse.com" date="1705406400">- Add pbap-Fix-not-checking-Primary-Secundary-Counter-leng.patch
  pbap: Fix not checking Primary/Secundary Counter length
  (bsc#1218301)(CVE-2023-50230)(bsc#1218300)(CVE-2023-50229)</changelog>
</package>
<package pkgid="53971f581962ac1679bf5301c5b6d82990da0ea06fe6a9b64e2e3e55ec74c956" name="libbluetooth3" arch="x86_64">
  <version epoch="0" ver="5.65" rel="150500.3.6.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
  <changelog author="jlee@suse.com" date="1705406400">- Add pbap-Fix-not-checking-Primary-Secundary-Counter-leng.patch
  pbap: Fix not checking Primary/Secundary Counter length
  (bsc#1218301)(CVE-2023-50230)(bsc#1218300)(CVE-2023-50229)</changelog>
</package>
<package pkgid="ee67b824fb8afe923e42121785bbc55f1e0856538035273edd4822b38a419206" name="libbluetooth3" arch="aarch64">
  <version epoch="0" ver="5.65" rel="150500.3.8.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
  <changelog author="jlee@suse.com" date="1705406400">- Add pbap-Fix-not-checking-Primary-Secundary-Counter-leng.patch
  pbap: Fix not checking Primary/Secundary Counter length
  (bsc#1218301)(CVE-2023-50230)(bsc#1218300)(CVE-2023-50229)</changelog>
</package>
<package pkgid="5aa75bbf1c033d429debedc8231daacb81a4070c37f52169db96b86f490c515e" name="libbluetooth3" arch="s390x">
  <version epoch="0" ver="5.65" rel="150500.3.8.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
  <changelog author="jlee@suse.com" date="1705406400">- Add pbap-Fix-not-checking-Primary-Secundary-Counter-leng.patch
  pbap: Fix not checking Primary/Secundary Counter length
  (bsc#1218301)(CVE-2023-50230)(bsc#1218300)(CVE-2023-50229)</changelog>
</package>
<package pkgid="0fc1d5f5808b1392a00c504749404f1ac6b228c2d5c9eb3fe55b4278d632d25a" name="libbluetooth3" arch="x86_64">
  <version epoch="0" ver="5.65" rel="150500.3.8.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
  <changelog author="jlee@suse.com" date="1705406400">- Add pbap-Fix-not-checking-Primary-Secundary-Counter-leng.patch
  pbap: Fix not checking Primary/Secundary Counter length
  (bsc#1218301)(CVE-2023-50230)(bsc#1218300)(CVE-2023-50229)</changelog>
</package>
<package pkgid="f4f074dc8fa6db9a041f6851635bdc9f24c3320fcba9e50d9ca5a83e5669f2bf" name="libbpf" arch="src">
  <version epoch="0" ver="1.1.0" rel="150500.3.3.1"/>
  <changelog author="mrostecki@opensuse.org" date="1569931200">- Initial release</changelog>
  <changelog author="tchvatal@suse.com" date="1578398400">- Reflect SUSE CFLAGS
- Do not bother with obscpio if we are fetching direct releases
- Remove patch 0001-makefile-Fix-install-target.patch seems
  to build/install without it just fine
- Update to 0.0.6:
  + New features
  - new extensible bpf_object__open_{file,mem} APIs and
    DECLARE_LIBBPF_OPTS() macro to go with them
  - bpf_helpers.h, bpf_endian.h, and bpf_tracing.h are now
    distributed with libbpf
  - BPF CO-RE: added field size, field existence, and bitfield
    relocation support
  - BPF CO-RE: BPF_CORE_READ(), bpf_core_field_exists(),
    bpf_core_field_size() and other BPF CO-RE related helpers
    available through bpf_core_read.h header
  - bpf_object__open() API now auto-detects program type from
    its section name
  - BPF_PROG_TRACING programs support (incuding BTF-typed raw
    tracepoints, fentry/fexit programs)
  - mmap() support for BPF global variables
  - declarative map pinning support added
  - probe_read_{user,kernel}[_str]() BPF helpers added
  - bpf_get_link_xdp_info() function to get more XDP information
    added
  - a bunch of other AF_XDP changes
  + Usability improvements
  - no need for int version SEC('version') = 1; anymore
  - raw_tp/tp and uprobe/uretprobe section prefixes added
  - new bpf_program__get_{type,expected_attach_type} getters
  - preserve error code on program load failure
  + Fixes
  - btf_dump padding handling
  - bpf_object__name() returning name, not path
  - ELF section handling off-by-one bug fix
  - mem leak/double free fix in BPF program relocation code</changelog>
  <changelog author="mrostecki@opensuse.org" date="1580644800">- Build libbpf from kernel sources, not from github sources, for
  consistency with bpftool package.</changelog>
  <changelog author="mrostecki@suse.com" date="1591617600">- Add python3 as a build dependency.</changelog>
  <changelog author="msuchanek@suse.com" date="1626523200">- libbpf is now a separate project, stop building from the kernel
  (bsc#1188419 jsc#SLE-17288 jsc#SLE-18805).
- Fix LIBSUBDIR
  + libdir.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1627905600">- Create libbpf0-32bit needed by libdwarves1-32bit</changelog>
  <changelog author="msuchanek@suse.com" date="1629460800">- Depend on new enough Linux headers.</changelog>
  <changelog author="msuchanek@suse.com" date="1630065600">- Fix LTO build (bsc#1188749).
  + libbpf-Fix-build-with-latest-gcc-binutils-with-LTO.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1632744000">- Update to 0.5.0:
  + New features and user-space APIs:
  - libbpf_set_strict_mode() allowing to opt-in into backwards incompatible libbpf-1.0 changes. See "Libbpf: the road to 1.0" and "Libbpf 1.0 migration guide" for more details.
  - streamlined error reporting for low-level APIs, high-level error-returning APIs, and pointer-returning APIs (as a libbpf-1.0 opt-in);
  - "Light" BPF skeleton support;
  - BPF_PROG_TYPE_SYSCALL support;
  - BPF perf link support for kprobe, uprobe, tracepoint, and perf_event BPF programs;
  - BPF cookie support for kprobe, uprobe, tracepoint, and perf_event BPF programs through bpf_program__attach_[ku]probe_opts() APIs;
  - allow to specify ref_ctr_off for USDT semaphores through bpf_program__attach_uprobe_opts() API;
  - btf_custom_path support in bpf_object_open_opts, allowing to specify custom BTF for CO-RE relocations;
  - sk_reuseport/migrate program type support;
  - btf_dump__dump_type_data() API, allowing to dump binary data according to BTF type description;
  - btf__load_into_kernel() and btf__load_from_kernel_by_id(), and split BTF variants of them;
  - btf__load_vmlinux_btf() and btf__load_module_btf() APIs;
  - bpf_map__initial_value() API to get initial value of mmap-ed BPF maps;
  - bpf_map_lookup_and_delete_elem_flags() API.
  + BPF-side APIs and features:
  - support for weak typed __ksym externs;
  - BPF timer helpers: bpf_timer_init(), bpf_timer_set_callback(), bpf_timer_start(), bpf_timer_cancel();
  - bpf_get_attach_cookie() helper to get BPF cookie from BPF program side;
  - bpf_get_func_ip() helper;
  - bpf_sys_bpf() helper;
  - bpf_task_pt_regs() helper;
  - bpf_btf_find_by_name_kind() helper;
  - usability improvements for bpf_tracing.h when target architecture is missing.
  + Bug fixes and compatibility improvements:
  - improve BPF support detection on old Red Hat kernels with backported BPF patches;
  - improvements for LTO builds with GCC 10+;
  - pass NLM_F_EXCL when creating TC qdisc;
  - better support of BPF map reuse on old kernels;
  - fix the bug resulting in sometimes closing FD 0, which wasn't created and owned by libbpf itself.
- Remove patches merged upstream
  + libdir.patch
  + libbpf-Fix-build-with-latest-gcc-binutils-with-LTO.patch</changelog>
  <changelog author="jengelh@inai.de" date="1639224000">- Update to release 0.6.1
  * Introduce legacy kprobe events support
  * Add legacy uprobe attaching support
  * Support uniform BTF-defined key/value specification across
    all BPF maps
  * Support kernel module function calls
  * Support detecting and attaching of writable tracepoint
    program
  * Add bloom filter map implementation
  * Add typeless and weak ksym support to gen_loader
  * Add RISC-V (RV64) support to bpf_tracing.h
  * Deprecate AF_XDP support
  * Support BTF_KIND_TYPE_TAG</changelog>
  <changelog author="jengelh@inai.de" date="1646395200">- Update to release 0.7.0
  * legacy BPF map definitions (using struct bpf_map_def) are
    deprecated when LIBBPF_STRICT_MAP_DEFINITIONS is passed to
    libbpf_set_strict_mode(). Please use BTF-defined map
    definitions.
  * ability to control and capture BPF verifier log output on
    per-object and per-program level
  * CO-RE support and other improvements for "light skeleton"
  * improved compilation when system BTF UAPI headers are outdated</changelog>
  <changelog author="jengelh@inai.de" date="1646654400">- Python is not used during build; remove it and help break
  a cycle.</changelog>
  <changelog author="jeffm@suse.com" date="1646913600">- Enable building and packaging of static library.
  Explicitly enable fat LTO objects.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1652961600">- Update to release 0.8.0
  * New features and APIs:
  - support auto-resolution of binaries and shared libraries from PATH, if necessary;
  - support attaching by function names (only by IP was supported before);
  - support attaching to USDTs (SEC("usdt/...") and
    bpf_program__attach_usdt()) with initially supported architectures:
    x86-64 (amd64); x86 (i386); s390x; ARM64 (aarch64); RISC V (riscv);
  - improved BPF verifier log reporting for CO-RE relocation failures (no
    more obscure "invalid func unknown#195896080" errors);
  - auto-adjust BPF ringbuf size according to host kernel's page size requirements;
  - high-level BPF map APIs: bpf_map__lookup_elem(), bpf_map__update_elem(),
    etc that validate key/value buffer sizes;
  - bpf_link_create() can create all bpf_link-based (including raw_tp,
    fentry/fexit, etc), falling back to bpf_raw_tracepoint_open() on old
    kernels transparently;
  - support opting out from auto-loading BPF programs declaratively with
    SEC("?...");
  - support opting out from auto-creation of declarative BPF maps with
    bpf_map__set_autocreate();
  - support multi-kprobes (SEC("kprobe.multi/...") and
    bpf_program__attach_kprobe_multi_opts());
  - support target-less SEC() programs (e.g., SEC("kprobe"), SEC("tp"), etc);
  - support BPF sub-skeletons for "incomplete" BPF object files (requires
    matching bpftool to generate .subskel.h);
  - BPF cookie support for fentry/fexit/fmod_ret BPF programs
    (bpf_program__attach_trace_opts());
  - support for custom SEC() handlers (libbpf_register_prog_handler()).
  * BPF-side API
  - BPF-side USDT APIs. See new usdt.bpf.h header:
  * BPF_USDT() program wrapper macro; bpf_usdt_arg(), bpf_usdt_arg_cnt(),
  * bpf_usdt_cookie() helpers;
  - new bpf_core_field_offset() CO-RE helper and support
    bpf_core_field_size(type, field) forms;
  - barrier() and barrier_var() macros for improving BPF code generation;
  - __kptr and __kptr_ref tags added;
  - ARC architecture support in bpf_tracing.h header;
  - new BPF helpers:
  * bpf_skb_set_tstamp();
  * bpf_ima_file_hash();
  * bpf_kptr_xchg();
  * bpf_map_lookup_percpu_elem().
  * Bug fixes
  - netlink bug fixes;
  - libbpf.pc fixes to support patch releases properly;
  - BPF_MAP_TYPE_PERF_EVENT_ARRAY map auto-pinning fix;
  - minor CO-RE fixes and improvements for some corner cases;
  - various other small fixes and improvements.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1659528000">- Update to release 0.8.1:
  * make shared xsk creation network namespace aware</changelog>
  <changelog author="dmueller@suse.com" date="1664884800">- update to 1.0.1:
  * fix inadvertently changed struct bpf_object_open_opts memory layout;
  * fix btf.h header relying on struct enum64 type defined in kernel UAPI headers;
  * fix NULL pointer exception in API btf_dump__dump_type_data;
  * remove struct btf_map_def accidentally left in bpf_helpers.h header.
  * All deprecated APIs and features removed!
  * support for syscall-specific kprobe/kretprobe
    (SEC("ksyscall/&lt;syscall_name&gt;") and SEC("kretsyscall/&lt;syscall_name&gt;"));
  * support for sleepable uprobe BPF programs (SEC("uprobe.s"));
  * support for per-cgroup LSM BPF programs (SEC("lsm_cgroup"));
  * support for new BPF CO-RE relocation TYPE_MATCHES;
  * bpf_prog_load() and bpf_map_create() are now smarter about handling program
    and map name on old kernels (it will be ignored if kernel doesn't support
    names);
  * BTF_KIND_ENUM64 support;
  * increase tracing attachment (kprobe/uprobe/tracepoint) robustness by using
    tracefs or debugfs, whichever is mounted;
  * new APIs for converting BPF enums to their string representation:
  * libbpf_bpf_prog_type_str();
  * libbpf_bpf_map_type_str();
  * libbpf_bpf_link_type_str();
  * libbpf_bpf_attach_type_str();
  * bpf_program__set_autoattach() and bpf_program__autoattach() to allow opting
    out from auto-attaching of BPF program by BPF skeleton;
  * perf_buffer__buffer() API to give access to underlying per-CPU buffer for BPF ringbuf;
  * bpf_obj_get_opts() API for more flexible fetching of BPF kernel objects' information.
- see https://github.com/libbpf/libbpf/releases/tag/v1.0.0 for detailed changelog</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1667908800">- Fix out-of-bound heap write (boo#1194248 boo#1194249 CVE-2021-45940 CVE-2021-45941)
  + libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch
- Fix use-after-free in btf_dump_name_dups (boo#1204391 CVE-2022-3534)
  + libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
- Fix memory leak in parse_usdt_arg() (boo#1204393 CVE-2022-3533)
  + libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
- Fix null pointer dereference in find_prog_by_sec_insn() (boo#1204502 CVE-2022-3606)
  + libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch</changelog>
  <changelog author="dmueller@suse.com" date="1671710400">- update to v1.1.0:
  User space-side features and APIs:
  * user-space ring buffer (BPF_MAP_TYPE_USER_RINGBUF) support;
  * new documentation page listing all recognized SEC() definitions;
  * BTF dedup improvements:
  * unambiguous fwd declaration resolution for structs and unions;
  * better handling of some corner cases with identical structs and arrays;
  * mixed enum and enum64 forward declaration resolution logic;
  * bpf_{link,btf,pro,mapg}_get_fd_by_id_opts() and bpf_get_fd_by_id_opts()
    APIs;
  * libbpf supports loading raw BTF for BPF CO-RE from known search paths;
  * support for new cgroup local storage (BPF_MAP_TYPE_CGRP_STORAGE);
  * libbpf will only add BPF_F_MMAPABLE flag for data maps with global
    (i.e., non-static) vars;
  * latest Linux UAPI headers with lots of changes synced into
    include/uapi/linux.
  BPF-side features and APIs;
  * BPF_PROG2() macro added that supports struct-by-value arguments;
  * new BPF helpers:
  * bpf_user_ringbuf_drain();
  * cgrp_storage_get() and cgrp_storage_delete().
  Bug fixes
  * better handling of padding corner cases;
  * btf__align_of() determines packed structs better now;
  * improved handling of enums of non-standard sizes;
  * USDT spec parsing improvements;
  * overflow handling fixes for ringbufs;
  * Makefile fixes to support cross-compilation for 32-bit targets;
  * fix crash if SEC("freplace") programs don't have attach_prog_fd set;
  * better handling of file existence checks when running as non-root with
    enhanced capabilities;
  * a bunch of small fixes:
  * ELF handling improvements;
  * fix memory leak in USDT argument parsing logic;
  * fix NULL dereferences in few corner cases;
  * improved netlink attribute iteration handling.
- drop libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch,
  libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch,
  libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
  libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch (upstream)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672920000">- Remove requirement of linux-glibc-devel &gt;= 5.16 for devel package</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1716292800">- Fix null pointer dereference in bpf_object__collect_prog_relos()
  (bsc#1221101)
  * Add libbpf-Fix-NULL-pointer-dereference-in-bpf_object__c.patch</changelog>
</package>
<package pkgid="4f92caa33455aaf8b0e68f7460750fc8648dee239d481c41ae64ca88a665753b" name="libbpf1" arch="aarch64">
  <version epoch="0" ver="1.1.0" rel="150500.3.3.1"/>
  <changelog author="mrostecki@opensuse.org" date="1569931200">- Initial release</changelog>
  <changelog author="tchvatal@suse.com" date="1578398400">- Reflect SUSE CFLAGS
- Do not bother with obscpio if we are fetching direct releases
- Remove patch 0001-makefile-Fix-install-target.patch seems
  to build/install without it just fine
- Update to 0.0.6:
  + New features
  - new extensible bpf_object__open_{file,mem} APIs and
    DECLARE_LIBBPF_OPTS() macro to go with them
  - bpf_helpers.h, bpf_endian.h, and bpf_tracing.h are now
    distributed with libbpf
  - BPF CO-RE: added field size, field existence, and bitfield
    relocation support
  - BPF CO-RE: BPF_CORE_READ(), bpf_core_field_exists(),
    bpf_core_field_size() and other BPF CO-RE related helpers
    available through bpf_core_read.h header
  - bpf_object__open() API now auto-detects program type from
    its section name
  - BPF_PROG_TRACING programs support (incuding BTF-typed raw
    tracepoints, fentry/fexit programs)
  - mmap() support for BPF global variables
  - declarative map pinning support added
  - probe_read_{user,kernel}[_str]() BPF helpers added
  - bpf_get_link_xdp_info() function to get more XDP information
    added
  - a bunch of other AF_XDP changes
  + Usability improvements
  - no need for int version SEC('version') = 1; anymore
  - raw_tp/tp and uprobe/uretprobe section prefixes added
  - new bpf_program__get_{type,expected_attach_type} getters
  - preserve error code on program load failure
  + Fixes
  - btf_dump padding handling
  - bpf_object__name() returning name, not path
  - ELF section handling off-by-one bug fix
  - mem leak/double free fix in BPF program relocation code</changelog>
  <changelog author="mrostecki@opensuse.org" date="1580644800">- Build libbpf from kernel sources, not from github sources, for
  consistency with bpftool package.</changelog>
  <changelog author="mrostecki@suse.com" date="1591617600">- Add python3 as a build dependency.</changelog>
  <changelog author="msuchanek@suse.com" date="1626523200">- libbpf is now a separate project, stop building from the kernel
  (bsc#1188419 jsc#SLE-17288 jsc#SLE-18805).
- Fix LIBSUBDIR
  + libdir.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1627905600">- Create libbpf0-32bit needed by libdwarves1-32bit</changelog>
  <changelog author="msuchanek@suse.com" date="1629460800">- Depend on new enough Linux headers.</changelog>
  <changelog author="msuchanek@suse.com" date="1630065600">- Fix LTO build (bsc#1188749).
  + libbpf-Fix-build-with-latest-gcc-binutils-with-LTO.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1632744000">- Update to 0.5.0:
  + New features and user-space APIs:
  - libbpf_set_strict_mode() allowing to opt-in into backwards incompatible libbpf-1.0 changes. See "Libbpf: the road to 1.0" and "Libbpf 1.0 migration guide" for more details.
  - streamlined error reporting for low-level APIs, high-level error-returning APIs, and pointer-returning APIs (as a libbpf-1.0 opt-in);
  - "Light" BPF skeleton support;
  - BPF_PROG_TYPE_SYSCALL support;
  - BPF perf link support for kprobe, uprobe, tracepoint, and perf_event BPF programs;
  - BPF cookie support for kprobe, uprobe, tracepoint, and perf_event BPF programs through bpf_program__attach_[ku]probe_opts() APIs;
  - allow to specify ref_ctr_off for USDT semaphores through bpf_program__attach_uprobe_opts() API;
  - btf_custom_path support in bpf_object_open_opts, allowing to specify custom BTF for CO-RE relocations;
  - sk_reuseport/migrate program type support;
  - btf_dump__dump_type_data() API, allowing to dump binary data according to BTF type description;
  - btf__load_into_kernel() and btf__load_from_kernel_by_id(), and split BTF variants of them;
  - btf__load_vmlinux_btf() and btf__load_module_btf() APIs;
  - bpf_map__initial_value() API to get initial value of mmap-ed BPF maps;
  - bpf_map_lookup_and_delete_elem_flags() API.
  + BPF-side APIs and features:
  - support for weak typed __ksym externs;
  - BPF timer helpers: bpf_timer_init(), bpf_timer_set_callback(), bpf_timer_start(), bpf_timer_cancel();
  - bpf_get_attach_cookie() helper to get BPF cookie from BPF program side;
  - bpf_get_func_ip() helper;
  - bpf_sys_bpf() helper;
  - bpf_task_pt_regs() helper;
  - bpf_btf_find_by_name_kind() helper;
  - usability improvements for bpf_tracing.h when target architecture is missing.
  + Bug fixes and compatibility improvements:
  - improve BPF support detection on old Red Hat kernels with backported BPF patches;
  - improvements for LTO builds with GCC 10+;
  - pass NLM_F_EXCL when creating TC qdisc;
  - better support of BPF map reuse on old kernels;
  - fix the bug resulting in sometimes closing FD 0, which wasn't created and owned by libbpf itself.
- Remove patches merged upstream
  + libdir.patch
  + libbpf-Fix-build-with-latest-gcc-binutils-with-LTO.patch</changelog>
  <changelog author="jengelh@inai.de" date="1639224000">- Update to release 0.6.1
  * Introduce legacy kprobe events support
  * Add legacy uprobe attaching support
  * Support uniform BTF-defined key/value specification across
    all BPF maps
  * Support kernel module function calls
  * Support detecting and attaching of writable tracepoint
    program
  * Add bloom filter map implementation
  * Add typeless and weak ksym support to gen_loader
  * Add RISC-V (RV64) support to bpf_tracing.h
  * Deprecate AF_XDP support
  * Support BTF_KIND_TYPE_TAG</changelog>
  <changelog author="jengelh@inai.de" date="1646395200">- Update to release 0.7.0
  * legacy BPF map definitions (using struct bpf_map_def) are
    deprecated when LIBBPF_STRICT_MAP_DEFINITIONS is passed to
    libbpf_set_strict_mode(). Please use BTF-defined map
    definitions.
  * ability to control and capture BPF verifier log output on
    per-object and per-program level
  * CO-RE support and other improvements for "light skeleton"
  * improved compilation when system BTF UAPI headers are outdated</changelog>
  <changelog author="jengelh@inai.de" date="1646654400">- Python is not used during build; remove it and help break
  a cycle.</changelog>
  <changelog author="jeffm@suse.com" date="1646913600">- Enable building and packaging of static library.
  Explicitly enable fat LTO objects.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1652961600">- Update to release 0.8.0
  * New features and APIs:
  - support auto-resolution of binaries and shared libraries from PATH, if necessary;
  - support attaching by function names (only by IP was supported before);
  - support attaching to USDTs (SEC("usdt/...") and
    bpf_program__attach_usdt()) with initially supported architectures:
    x86-64 (amd64); x86 (i386); s390x; ARM64 (aarch64); RISC V (riscv);
  - improved BPF verifier log reporting for CO-RE relocation failures (no
    more obscure "invalid func unknown#195896080" errors);
  - auto-adjust BPF ringbuf size according to host kernel's page size requirements;
  - high-level BPF map APIs: bpf_map__lookup_elem(), bpf_map__update_elem(),
    etc that validate key/value buffer sizes;
  - bpf_link_create() can create all bpf_link-based (including raw_tp,
    fentry/fexit, etc), falling back to bpf_raw_tracepoint_open() on old
    kernels transparently;
  - support opting out from auto-loading BPF programs declaratively with
    SEC("?...");
  - support opting out from auto-creation of declarative BPF maps with
    bpf_map__set_autocreate();
  - support multi-kprobes (SEC("kprobe.multi/...") and
    bpf_program__attach_kprobe_multi_opts());
  - support target-less SEC() programs (e.g., SEC("kprobe"), SEC("tp"), etc);
  - support BPF sub-skeletons for "incomplete" BPF object files (requires
    matching bpftool to generate .subskel.h);
  - BPF cookie support for fentry/fexit/fmod_ret BPF programs
    (bpf_program__attach_trace_opts());
  - support for custom SEC() handlers (libbpf_register_prog_handler()).
  * BPF-side API
  - BPF-side USDT APIs. See new usdt.bpf.h header:
  * BPF_USDT() program wrapper macro; bpf_usdt_arg(), bpf_usdt_arg_cnt(),
  * bpf_usdt_cookie() helpers;
  - new bpf_core_field_offset() CO-RE helper and support
    bpf_core_field_size(type, field) forms;
  - barrier() and barrier_var() macros for improving BPF code generation;
  - __kptr and __kptr_ref tags added;
  - ARC architecture support in bpf_tracing.h header;
  - new BPF helpers:
  * bpf_skb_set_tstamp();
  * bpf_ima_file_hash();
  * bpf_kptr_xchg();
  * bpf_map_lookup_percpu_elem().
  * Bug fixes
  - netlink bug fixes;
  - libbpf.pc fixes to support patch releases properly;
  - BPF_MAP_TYPE_PERF_EVENT_ARRAY map auto-pinning fix;
  - minor CO-RE fixes and improvements for some corner cases;
  - various other small fixes and improvements.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1659528000">- Update to release 0.8.1:
  * make shared xsk creation network namespace aware</changelog>
  <changelog author="dmueller@suse.com" date="1664884800">- update to 1.0.1:
  * fix inadvertently changed struct bpf_object_open_opts memory layout;
  * fix btf.h header relying on struct enum64 type defined in kernel UAPI headers;
  * fix NULL pointer exception in API btf_dump__dump_type_data;
  * remove struct btf_map_def accidentally left in bpf_helpers.h header.
  * All deprecated APIs and features removed!
  * support for syscall-specific kprobe/kretprobe
    (SEC("ksyscall/&lt;syscall_name&gt;") and SEC("kretsyscall/&lt;syscall_name&gt;"));
  * support for sleepable uprobe BPF programs (SEC("uprobe.s"));
  * support for per-cgroup LSM BPF programs (SEC("lsm_cgroup"));
  * support for new BPF CO-RE relocation TYPE_MATCHES;
  * bpf_prog_load() and bpf_map_create() are now smarter about handling program
    and map name on old kernels (it will be ignored if kernel doesn't support
    names);
  * BTF_KIND_ENUM64 support;
  * increase tracing attachment (kprobe/uprobe/tracepoint) robustness by using
    tracefs or debugfs, whichever is mounted;
  * new APIs for converting BPF enums to their string representation:
  * libbpf_bpf_prog_type_str();
  * libbpf_bpf_map_type_str();
  * libbpf_bpf_link_type_str();
  * libbpf_bpf_attach_type_str();
  * bpf_program__set_autoattach() and bpf_program__autoattach() to allow opting
    out from auto-attaching of BPF program by BPF skeleton;
  * perf_buffer__buffer() API to give access to underlying per-CPU buffer for BPF ringbuf;
  * bpf_obj_get_opts() API for more flexible fetching of BPF kernel objects' information.
- see https://github.com/libbpf/libbpf/releases/tag/v1.0.0 for detailed changelog</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1667908800">- Fix out-of-bound heap write (boo#1194248 boo#1194249 CVE-2021-45940 CVE-2021-45941)
  + libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch
- Fix use-after-free in btf_dump_name_dups (boo#1204391 CVE-2022-3534)
  + libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
- Fix memory leak in parse_usdt_arg() (boo#1204393 CVE-2022-3533)
  + libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
- Fix null pointer dereference in find_prog_by_sec_insn() (boo#1204502 CVE-2022-3606)
  + libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch</changelog>
  <changelog author="dmueller@suse.com" date="1671710400">- update to v1.1.0:
  User space-side features and APIs:
  * user-space ring buffer (BPF_MAP_TYPE_USER_RINGBUF) support;
  * new documentation page listing all recognized SEC() definitions;
  * BTF dedup improvements:
  * unambiguous fwd declaration resolution for structs and unions;
  * better handling of some corner cases with identical structs and arrays;
  * mixed enum and enum64 forward declaration resolution logic;
  * bpf_{link,btf,pro,mapg}_get_fd_by_id_opts() and bpf_get_fd_by_id_opts()
    APIs;
  * libbpf supports loading raw BTF for BPF CO-RE from known search paths;
  * support for new cgroup local storage (BPF_MAP_TYPE_CGRP_STORAGE);
  * libbpf will only add BPF_F_MMAPABLE flag for data maps with global
    (i.e., non-static) vars;
  * latest Linux UAPI headers with lots of changes synced into
    include/uapi/linux.
  BPF-side features and APIs;
  * BPF_PROG2() macro added that supports struct-by-value arguments;
  * new BPF helpers:
  * bpf_user_ringbuf_drain();
  * cgrp_storage_get() and cgrp_storage_delete().
  Bug fixes
  * better handling of padding corner cases;
  * btf__align_of() determines packed structs better now;
  * improved handling of enums of non-standard sizes;
  * USDT spec parsing improvements;
  * overflow handling fixes for ringbufs;
  * Makefile fixes to support cross-compilation for 32-bit targets;
  * fix crash if SEC("freplace") programs don't have attach_prog_fd set;
  * better handling of file existence checks when running as non-root with
    enhanced capabilities;
  * a bunch of small fixes:
  * ELF handling improvements;
  * fix memory leak in USDT argument parsing logic;
  * fix NULL dereferences in few corner cases;
  * improved netlink attribute iteration handling.
- drop libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch,
  libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch,
  libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
  libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch (upstream)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672920000">- Remove requirement of linux-glibc-devel &gt;= 5.16 for devel package</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1716292800">- Fix null pointer dereference in bpf_object__collect_prog_relos()
  (bsc#1221101)
  * Add libbpf-Fix-NULL-pointer-dereference-in-bpf_object__c.patch</changelog>
</package>
<package pkgid="692526b7e5a4c5cc33506a3655fba1b7886f8228a513d58f6cbfdc1491e00d89" name="libbpf1" arch="s390x">
  <version epoch="0" ver="1.1.0" rel="150500.3.3.1"/>
  <changelog author="mrostecki@opensuse.org" date="1569931200">- Initial release</changelog>
  <changelog author="tchvatal@suse.com" date="1578398400">- Reflect SUSE CFLAGS
- Do not bother with obscpio if we are fetching direct releases
- Remove patch 0001-makefile-Fix-install-target.patch seems
  to build/install without it just fine
- Update to 0.0.6:
  + New features
  - new extensible bpf_object__open_{file,mem} APIs and
    DECLARE_LIBBPF_OPTS() macro to go with them
  - bpf_helpers.h, bpf_endian.h, and bpf_tracing.h are now
    distributed with libbpf
  - BPF CO-RE: added field size, field existence, and bitfield
    relocation support
  - BPF CO-RE: BPF_CORE_READ(), bpf_core_field_exists(),
    bpf_core_field_size() and other BPF CO-RE related helpers
    available through bpf_core_read.h header
  - bpf_object__open() API now auto-detects program type from
    its section name
  - BPF_PROG_TRACING programs support (incuding BTF-typed raw
    tracepoints, fentry/fexit programs)
  - mmap() support for BPF global variables
  - declarative map pinning support added
  - probe_read_{user,kernel}[_str]() BPF helpers added
  - bpf_get_link_xdp_info() function to get more XDP information
    added
  - a bunch of other AF_XDP changes
  + Usability improvements
  - no need for int version SEC('version') = 1; anymore
  - raw_tp/tp and uprobe/uretprobe section prefixes added
  - new bpf_program__get_{type,expected_attach_type} getters
  - preserve error code on program load failure
  + Fixes
  - btf_dump padding handling
  - bpf_object__name() returning name, not path
  - ELF section handling off-by-one bug fix
  - mem leak/double free fix in BPF program relocation code</changelog>
  <changelog author="mrostecki@opensuse.org" date="1580644800">- Build libbpf from kernel sources, not from github sources, for
  consistency with bpftool package.</changelog>
  <changelog author="mrostecki@suse.com" date="1591617600">- Add python3 as a build dependency.</changelog>
  <changelog author="msuchanek@suse.com" date="1626523200">- libbpf is now a separate project, stop building from the kernel
  (bsc#1188419 jsc#SLE-17288 jsc#SLE-18805).
- Fix LIBSUBDIR
  + libdir.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1627905600">- Create libbpf0-32bit needed by libdwarves1-32bit</changelog>
  <changelog author="msuchanek@suse.com" date="1629460800">- Depend on new enough Linux headers.</changelog>
  <changelog author="msuchanek@suse.com" date="1630065600">- Fix LTO build (bsc#1188749).
  + libbpf-Fix-build-with-latest-gcc-binutils-with-LTO.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1632744000">- Update to 0.5.0:
  + New features and user-space APIs:
  - libbpf_set_strict_mode() allowing to opt-in into backwards incompatible libbpf-1.0 changes. See "Libbpf: the road to 1.0" and "Libbpf 1.0 migration guide" for more details.
  - streamlined error reporting for low-level APIs, high-level error-returning APIs, and pointer-returning APIs (as a libbpf-1.0 opt-in);
  - "Light" BPF skeleton support;
  - BPF_PROG_TYPE_SYSCALL support;
  - BPF perf link support for kprobe, uprobe, tracepoint, and perf_event BPF programs;
  - BPF cookie support for kprobe, uprobe, tracepoint, and perf_event BPF programs through bpf_program__attach_[ku]probe_opts() APIs;
  - allow to specify ref_ctr_off for USDT semaphores through bpf_program__attach_uprobe_opts() API;
  - btf_custom_path support in bpf_object_open_opts, allowing to specify custom BTF for CO-RE relocations;
  - sk_reuseport/migrate program type support;
  - btf_dump__dump_type_data() API, allowing to dump binary data according to BTF type description;
  - btf__load_into_kernel() and btf__load_from_kernel_by_id(), and split BTF variants of them;
  - btf__load_vmlinux_btf() and btf__load_module_btf() APIs;
  - bpf_map__initial_value() API to get initial value of mmap-ed BPF maps;
  - bpf_map_lookup_and_delete_elem_flags() API.
  + BPF-side APIs and features:
  - support for weak typed __ksym externs;
  - BPF timer helpers: bpf_timer_init(), bpf_timer_set_callback(), bpf_timer_start(), bpf_timer_cancel();
  - bpf_get_attach_cookie() helper to get BPF cookie from BPF program side;
  - bpf_get_func_ip() helper;
  - bpf_sys_bpf() helper;
  - bpf_task_pt_regs() helper;
  - bpf_btf_find_by_name_kind() helper;
  - usability improvements for bpf_tracing.h when target architecture is missing.
  + Bug fixes and compatibility improvements:
  - improve BPF support detection on old Red Hat kernels with backported BPF patches;
  - improvements for LTO builds with GCC 10+;
  - pass NLM_F_EXCL when creating TC qdisc;
  - better support of BPF map reuse on old kernels;
  - fix the bug resulting in sometimes closing FD 0, which wasn't created and owned by libbpf itself.
- Remove patches merged upstream
  + libdir.patch
  + libbpf-Fix-build-with-latest-gcc-binutils-with-LTO.patch</changelog>
  <changelog author="jengelh@inai.de" date="1639224000">- Update to release 0.6.1
  * Introduce legacy kprobe events support
  * Add legacy uprobe attaching support
  * Support uniform BTF-defined key/value specification across
    all BPF maps
  * Support kernel module function calls
  * Support detecting and attaching of writable tracepoint
    program
  * Add bloom filter map implementation
  * Add typeless and weak ksym support to gen_loader
  * Add RISC-V (RV64) support to bpf_tracing.h
  * Deprecate AF_XDP support
  * Support BTF_KIND_TYPE_TAG</changelog>
  <changelog author="jengelh@inai.de" date="1646395200">- Update to release 0.7.0
  * legacy BPF map definitions (using struct bpf_map_def) are
    deprecated when LIBBPF_STRICT_MAP_DEFINITIONS is passed to
    libbpf_set_strict_mode(). Please use BTF-defined map
    definitions.
  * ability to control and capture BPF verifier log output on
    per-object and per-program level
  * CO-RE support and other improvements for "light skeleton"
  * improved compilation when system BTF UAPI headers are outdated</changelog>
  <changelog author="jengelh@inai.de" date="1646654400">- Python is not used during build; remove it and help break
  a cycle.</changelog>
  <changelog author="jeffm@suse.com" date="1646913600">- Enable building and packaging of static library.
  Explicitly enable fat LTO objects.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1652961600">- Update to release 0.8.0
  * New features and APIs:
  - support auto-resolution of binaries and shared libraries from PATH, if necessary;
  - support attaching by function names (only by IP was supported before);
  - support attaching to USDTs (SEC("usdt/...") and
    bpf_program__attach_usdt()) with initially supported architectures:
    x86-64 (amd64); x86 (i386); s390x; ARM64 (aarch64); RISC V (riscv);
  - improved BPF verifier log reporting for CO-RE relocation failures (no
    more obscure "invalid func unknown#195896080" errors);
  - auto-adjust BPF ringbuf size according to host kernel's page size requirements;
  - high-level BPF map APIs: bpf_map__lookup_elem(), bpf_map__update_elem(),
    etc that validate key/value buffer sizes;
  - bpf_link_create() can create all bpf_link-based (including raw_tp,
    fentry/fexit, etc), falling back to bpf_raw_tracepoint_open() on old
    kernels transparently;
  - support opting out from auto-loading BPF programs declaratively with
    SEC("?...");
  - support opting out from auto-creation of declarative BPF maps with
    bpf_map__set_autocreate();
  - support multi-kprobes (SEC("kprobe.multi/...") and
    bpf_program__attach_kprobe_multi_opts());
  - support target-less SEC() programs (e.g., SEC("kprobe"), SEC("tp"), etc);
  - support BPF sub-skeletons for "incomplete" BPF object files (requires
    matching bpftool to generate .subskel.h);
  - BPF cookie support for fentry/fexit/fmod_ret BPF programs
    (bpf_program__attach_trace_opts());
  - support for custom SEC() handlers (libbpf_register_prog_handler()).
  * BPF-side API
  - BPF-side USDT APIs. See new usdt.bpf.h header:
  * BPF_USDT() program wrapper macro; bpf_usdt_arg(), bpf_usdt_arg_cnt(),
  * bpf_usdt_cookie() helpers;
  - new bpf_core_field_offset() CO-RE helper and support
    bpf_core_field_size(type, field) forms;
  - barrier() and barrier_var() macros for improving BPF code generation;
  - __kptr and __kptr_ref tags added;
  - ARC architecture support in bpf_tracing.h header;
  - new BPF helpers:
  * bpf_skb_set_tstamp();
  * bpf_ima_file_hash();
  * bpf_kptr_xchg();
  * bpf_map_lookup_percpu_elem().
  * Bug fixes
  - netlink bug fixes;
  - libbpf.pc fixes to support patch releases properly;
  - BPF_MAP_TYPE_PERF_EVENT_ARRAY map auto-pinning fix;
  - minor CO-RE fixes and improvements for some corner cases;
  - various other small fixes and improvements.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1659528000">- Update to release 0.8.1:
  * make shared xsk creation network namespace aware</changelog>
  <changelog author="dmueller@suse.com" date="1664884800">- update to 1.0.1:
  * fix inadvertently changed struct bpf_object_open_opts memory layout;
  * fix btf.h header relying on struct enum64 type defined in kernel UAPI headers;
  * fix NULL pointer exception in API btf_dump__dump_type_data;
  * remove struct btf_map_def accidentally left in bpf_helpers.h header.
  * All deprecated APIs and features removed!
  * support for syscall-specific kprobe/kretprobe
    (SEC("ksyscall/&lt;syscall_name&gt;") and SEC("kretsyscall/&lt;syscall_name&gt;"));
  * support for sleepable uprobe BPF programs (SEC("uprobe.s"));
  * support for per-cgroup LSM BPF programs (SEC("lsm_cgroup"));
  * support for new BPF CO-RE relocation TYPE_MATCHES;
  * bpf_prog_load() and bpf_map_create() are now smarter about handling program
    and map name on old kernels (it will be ignored if kernel doesn't support
    names);
  * BTF_KIND_ENUM64 support;
  * increase tracing attachment (kprobe/uprobe/tracepoint) robustness by using
    tracefs or debugfs, whichever is mounted;
  * new APIs for converting BPF enums to their string representation:
  * libbpf_bpf_prog_type_str();
  * libbpf_bpf_map_type_str();
  * libbpf_bpf_link_type_str();
  * libbpf_bpf_attach_type_str();
  * bpf_program__set_autoattach() and bpf_program__autoattach() to allow opting
    out from auto-attaching of BPF program by BPF skeleton;
  * perf_buffer__buffer() API to give access to underlying per-CPU buffer for BPF ringbuf;
  * bpf_obj_get_opts() API for more flexible fetching of BPF kernel objects' information.
- see https://github.com/libbpf/libbpf/releases/tag/v1.0.0 for detailed changelog</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1667908800">- Fix out-of-bound heap write (boo#1194248 boo#1194249 CVE-2021-45940 CVE-2021-45941)
  + libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch
- Fix use-after-free in btf_dump_name_dups (boo#1204391 CVE-2022-3534)
  + libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
- Fix memory leak in parse_usdt_arg() (boo#1204393 CVE-2022-3533)
  + libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
- Fix null pointer dereference in find_prog_by_sec_insn() (boo#1204502 CVE-2022-3606)
  + libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch</changelog>
  <changelog author="dmueller@suse.com" date="1671710400">- update to v1.1.0:
  User space-side features and APIs:
  * user-space ring buffer (BPF_MAP_TYPE_USER_RINGBUF) support;
  * new documentation page listing all recognized SEC() definitions;
  * BTF dedup improvements:
  * unambiguous fwd declaration resolution for structs and unions;
  * better handling of some corner cases with identical structs and arrays;
  * mixed enum and enum64 forward declaration resolution logic;
  * bpf_{link,btf,pro,mapg}_get_fd_by_id_opts() and bpf_get_fd_by_id_opts()
    APIs;
  * libbpf supports loading raw BTF for BPF CO-RE from known search paths;
  * support for new cgroup local storage (BPF_MAP_TYPE_CGRP_STORAGE);
  * libbpf will only add BPF_F_MMAPABLE flag for data maps with global
    (i.e., non-static) vars;
  * latest Linux UAPI headers with lots of changes synced into
    include/uapi/linux.
  BPF-side features and APIs;
  * BPF_PROG2() macro added that supports struct-by-value arguments;
  * new BPF helpers:
  * bpf_user_ringbuf_drain();
  * cgrp_storage_get() and cgrp_storage_delete().
  Bug fixes
  * better handling of padding corner cases;
  * btf__align_of() determines packed structs better now;
  * improved handling of enums of non-standard sizes;
  * USDT spec parsing improvements;
  * overflow handling fixes for ringbufs;
  * Makefile fixes to support cross-compilation for 32-bit targets;
  * fix crash if SEC("freplace") programs don't have attach_prog_fd set;
  * better handling of file existence checks when running as non-root with
    enhanced capabilities;
  * a bunch of small fixes:
  * ELF handling improvements;
  * fix memory leak in USDT argument parsing logic;
  * fix NULL dereferences in few corner cases;
  * improved netlink attribute iteration handling.
- drop libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch,
  libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch,
  libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
  libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch (upstream)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672920000">- Remove requirement of linux-glibc-devel &gt;= 5.16 for devel package</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1716292800">- Fix null pointer dereference in bpf_object__collect_prog_relos()
  (bsc#1221101)
  * Add libbpf-Fix-NULL-pointer-dereference-in-bpf_object__c.patch</changelog>
</package>
<package pkgid="8be90e2f29eb6b8928bc0c78fbf8b276348fb55b145929a90cd9e99feb73b0ba" name="libbpf1" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="150500.3.3.1"/>
  <changelog author="mrostecki@opensuse.org" date="1569931200">- Initial release</changelog>
  <changelog author="tchvatal@suse.com" date="1578398400">- Reflect SUSE CFLAGS
- Do not bother with obscpio if we are fetching direct releases
- Remove patch 0001-makefile-Fix-install-target.patch seems
  to build/install without it just fine
- Update to 0.0.6:
  + New features
  - new extensible bpf_object__open_{file,mem} APIs and
    DECLARE_LIBBPF_OPTS() macro to go with them
  - bpf_helpers.h, bpf_endian.h, and bpf_tracing.h are now
    distributed with libbpf
  - BPF CO-RE: added field size, field existence, and bitfield
    relocation support
  - BPF CO-RE: BPF_CORE_READ(), bpf_core_field_exists(),
    bpf_core_field_size() and other BPF CO-RE related helpers
    available through bpf_core_read.h header
  - bpf_object__open() API now auto-detects program type from
    its section name
  - BPF_PROG_TRACING programs support (incuding BTF-typed raw
    tracepoints, fentry/fexit programs)
  - mmap() support for BPF global variables
  - declarative map pinning support added
  - probe_read_{user,kernel}[_str]() BPF helpers added
  - bpf_get_link_xdp_info() function to get more XDP information
    added
  - a bunch of other AF_XDP changes
  + Usability improvements
  - no need for int version SEC('version') = 1; anymore
  - raw_tp/tp and uprobe/uretprobe section prefixes added
  - new bpf_program__get_{type,expected_attach_type} getters
  - preserve error code on program load failure
  + Fixes
  - btf_dump padding handling
  - bpf_object__name() returning name, not path
  - ELF section handling off-by-one bug fix
  - mem leak/double free fix in BPF program relocation code</changelog>
  <changelog author="mrostecki@opensuse.org" date="1580644800">- Build libbpf from kernel sources, not from github sources, for
  consistency with bpftool package.</changelog>
  <changelog author="mrostecki@suse.com" date="1591617600">- Add python3 as a build dependency.</changelog>
  <changelog author="msuchanek@suse.com" date="1626523200">- libbpf is now a separate project, stop building from the kernel
  (bsc#1188419 jsc#SLE-17288 jsc#SLE-18805).
- Fix LIBSUBDIR
  + libdir.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1627905600">- Create libbpf0-32bit needed by libdwarves1-32bit</changelog>
  <changelog author="msuchanek@suse.com" date="1629460800">- Depend on new enough Linux headers.</changelog>
  <changelog author="msuchanek@suse.com" date="1630065600">- Fix LTO build (bsc#1188749).
  + libbpf-Fix-build-with-latest-gcc-binutils-with-LTO.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1632744000">- Update to 0.5.0:
  + New features and user-space APIs:
  - libbpf_set_strict_mode() allowing to opt-in into backwards incompatible libbpf-1.0 changes. See "Libbpf: the road to 1.0" and "Libbpf 1.0 migration guide" for more details.
  - streamlined error reporting for low-level APIs, high-level error-returning APIs, and pointer-returning APIs (as a libbpf-1.0 opt-in);
  - "Light" BPF skeleton support;
  - BPF_PROG_TYPE_SYSCALL support;
  - BPF perf link support for kprobe, uprobe, tracepoint, and perf_event BPF programs;
  - BPF cookie support for kprobe, uprobe, tracepoint, and perf_event BPF programs through bpf_program__attach_[ku]probe_opts() APIs;
  - allow to specify ref_ctr_off for USDT semaphores through bpf_program__attach_uprobe_opts() API;
  - btf_custom_path support in bpf_object_open_opts, allowing to specify custom BTF for CO-RE relocations;
  - sk_reuseport/migrate program type support;
  - btf_dump__dump_type_data() API, allowing to dump binary data according to BTF type description;
  - btf__load_into_kernel() and btf__load_from_kernel_by_id(), and split BTF variants of them;
  - btf__load_vmlinux_btf() and btf__load_module_btf() APIs;
  - bpf_map__initial_value() API to get initial value of mmap-ed BPF maps;
  - bpf_map_lookup_and_delete_elem_flags() API.
  + BPF-side APIs and features:
  - support for weak typed __ksym externs;
  - BPF timer helpers: bpf_timer_init(), bpf_timer_set_callback(), bpf_timer_start(), bpf_timer_cancel();
  - bpf_get_attach_cookie() helper to get BPF cookie from BPF program side;
  - bpf_get_func_ip() helper;
  - bpf_sys_bpf() helper;
  - bpf_task_pt_regs() helper;
  - bpf_btf_find_by_name_kind() helper;
  - usability improvements for bpf_tracing.h when target architecture is missing.
  + Bug fixes and compatibility improvements:
  - improve BPF support detection on old Red Hat kernels with backported BPF patches;
  - improvements for LTO builds with GCC 10+;
  - pass NLM_F_EXCL when creating TC qdisc;
  - better support of BPF map reuse on old kernels;
  - fix the bug resulting in sometimes closing FD 0, which wasn't created and owned by libbpf itself.
- Remove patches merged upstream
  + libdir.patch
  + libbpf-Fix-build-with-latest-gcc-binutils-with-LTO.patch</changelog>
  <changelog author="jengelh@inai.de" date="1639224000">- Update to release 0.6.1
  * Introduce legacy kprobe events support
  * Add legacy uprobe attaching support
  * Support uniform BTF-defined key/value specification across
    all BPF maps
  * Support kernel module function calls
  * Support detecting and attaching of writable tracepoint
    program
  * Add bloom filter map implementation
  * Add typeless and weak ksym support to gen_loader
  * Add RISC-V (RV64) support to bpf_tracing.h
  * Deprecate AF_XDP support
  * Support BTF_KIND_TYPE_TAG</changelog>
  <changelog author="jengelh@inai.de" date="1646395200">- Update to release 0.7.0
  * legacy BPF map definitions (using struct bpf_map_def) are
    deprecated when LIBBPF_STRICT_MAP_DEFINITIONS is passed to
    libbpf_set_strict_mode(). Please use BTF-defined map
    definitions.
  * ability to control and capture BPF verifier log output on
    per-object and per-program level
  * CO-RE support and other improvements for "light skeleton"
  * improved compilation when system BTF UAPI headers are outdated</changelog>
  <changelog author="jengelh@inai.de" date="1646654400">- Python is not used during build; remove it and help break
  a cycle.</changelog>
  <changelog author="jeffm@suse.com" date="1646913600">- Enable building and packaging of static library.
  Explicitly enable fat LTO objects.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1652961600">- Update to release 0.8.0
  * New features and APIs:
  - support auto-resolution of binaries and shared libraries from PATH, if necessary;
  - support attaching by function names (only by IP was supported before);
  - support attaching to USDTs (SEC("usdt/...") and
    bpf_program__attach_usdt()) with initially supported architectures:
    x86-64 (amd64); x86 (i386); s390x; ARM64 (aarch64); RISC V (riscv);
  - improved BPF verifier log reporting for CO-RE relocation failures (no
    more obscure "invalid func unknown#195896080" errors);
  - auto-adjust BPF ringbuf size according to host kernel's page size requirements;
  - high-level BPF map APIs: bpf_map__lookup_elem(), bpf_map__update_elem(),
    etc that validate key/value buffer sizes;
  - bpf_link_create() can create all bpf_link-based (including raw_tp,
    fentry/fexit, etc), falling back to bpf_raw_tracepoint_open() on old
    kernels transparently;
  - support opting out from auto-loading BPF programs declaratively with
    SEC("?...");
  - support opting out from auto-creation of declarative BPF maps with
    bpf_map__set_autocreate();
  - support multi-kprobes (SEC("kprobe.multi/...") and
    bpf_program__attach_kprobe_multi_opts());
  - support target-less SEC() programs (e.g., SEC("kprobe"), SEC("tp"), etc);
  - support BPF sub-skeletons for "incomplete" BPF object files (requires
    matching bpftool to generate .subskel.h);
  - BPF cookie support for fentry/fexit/fmod_ret BPF programs
    (bpf_program__attach_trace_opts());
  - support for custom SEC() handlers (libbpf_register_prog_handler()).
  * BPF-side API
  - BPF-side USDT APIs. See new usdt.bpf.h header:
  * BPF_USDT() program wrapper macro; bpf_usdt_arg(), bpf_usdt_arg_cnt(),
  * bpf_usdt_cookie() helpers;
  - new bpf_core_field_offset() CO-RE helper and support
    bpf_core_field_size(type, field) forms;
  - barrier() and barrier_var() macros for improving BPF code generation;
  - __kptr and __kptr_ref tags added;
  - ARC architecture support in bpf_tracing.h header;
  - new BPF helpers:
  * bpf_skb_set_tstamp();
  * bpf_ima_file_hash();
  * bpf_kptr_xchg();
  * bpf_map_lookup_percpu_elem().
  * Bug fixes
  - netlink bug fixes;
  - libbpf.pc fixes to support patch releases properly;
  - BPF_MAP_TYPE_PERF_EVENT_ARRAY map auto-pinning fix;
  - minor CO-RE fixes and improvements for some corner cases;
  - various other small fixes and improvements.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1659528000">- Update to release 0.8.1:
  * make shared xsk creation network namespace aware</changelog>
  <changelog author="dmueller@suse.com" date="1664884800">- update to 1.0.1:
  * fix inadvertently changed struct bpf_object_open_opts memory layout;
  * fix btf.h header relying on struct enum64 type defined in kernel UAPI headers;
  * fix NULL pointer exception in API btf_dump__dump_type_data;
  * remove struct btf_map_def accidentally left in bpf_helpers.h header.
  * All deprecated APIs and features removed!
  * support for syscall-specific kprobe/kretprobe
    (SEC("ksyscall/&lt;syscall_name&gt;") and SEC("kretsyscall/&lt;syscall_name&gt;"));
  * support for sleepable uprobe BPF programs (SEC("uprobe.s"));
  * support for per-cgroup LSM BPF programs (SEC("lsm_cgroup"));
  * support for new BPF CO-RE relocation TYPE_MATCHES;
  * bpf_prog_load() and bpf_map_create() are now smarter about handling program
    and map name on old kernels (it will be ignored if kernel doesn't support
    names);
  * BTF_KIND_ENUM64 support;
  * increase tracing attachment (kprobe/uprobe/tracepoint) robustness by using
    tracefs or debugfs, whichever is mounted;
  * new APIs for converting BPF enums to their string representation:
  * libbpf_bpf_prog_type_str();
  * libbpf_bpf_map_type_str();
  * libbpf_bpf_link_type_str();
  * libbpf_bpf_attach_type_str();
  * bpf_program__set_autoattach() and bpf_program__autoattach() to allow opting
    out from auto-attaching of BPF program by BPF skeleton;
  * perf_buffer__buffer() API to give access to underlying per-CPU buffer for BPF ringbuf;
  * bpf_obj_get_opts() API for more flexible fetching of BPF kernel objects' information.
- see https://github.com/libbpf/libbpf/releases/tag/v1.0.0 for detailed changelog</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1667908800">- Fix out-of-bound heap write (boo#1194248 boo#1194249 CVE-2021-45940 CVE-2021-45941)
  + libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch
- Fix use-after-free in btf_dump_name_dups (boo#1204391 CVE-2022-3534)
  + libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
- Fix memory leak in parse_usdt_arg() (boo#1204393 CVE-2022-3533)
  + libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
- Fix null pointer dereference in find_prog_by_sec_insn() (boo#1204502 CVE-2022-3606)
  + libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch</changelog>
  <changelog author="dmueller@suse.com" date="1671710400">- update to v1.1.0:
  User space-side features and APIs:
  * user-space ring buffer (BPF_MAP_TYPE_USER_RINGBUF) support;
  * new documentation page listing all recognized SEC() definitions;
  * BTF dedup improvements:
  * unambiguous fwd declaration resolution for structs and unions;
  * better handling of some corner cases with identical structs and arrays;
  * mixed enum and enum64 forward declaration resolution logic;
  * bpf_{link,btf,pro,mapg}_get_fd_by_id_opts() and bpf_get_fd_by_id_opts()
    APIs;
  * libbpf supports loading raw BTF for BPF CO-RE from known search paths;
  * support for new cgroup local storage (BPF_MAP_TYPE_CGRP_STORAGE);
  * libbpf will only add BPF_F_MMAPABLE flag for data maps with global
    (i.e., non-static) vars;
  * latest Linux UAPI headers with lots of changes synced into
    include/uapi/linux.
  BPF-side features and APIs;
  * BPF_PROG2() macro added that supports struct-by-value arguments;
  * new BPF helpers:
  * bpf_user_ringbuf_drain();
  * cgrp_storage_get() and cgrp_storage_delete().
  Bug fixes
  * better handling of padding corner cases;
  * btf__align_of() determines packed structs better now;
  * improved handling of enums of non-standard sizes;
  * USDT spec parsing improvements;
  * overflow handling fixes for ringbufs;
  * Makefile fixes to support cross-compilation for 32-bit targets;
  * fix crash if SEC("freplace") programs don't have attach_prog_fd set;
  * better handling of file existence checks when running as non-root with
    enhanced capabilities;
  * a bunch of small fixes:
  * ELF handling improvements;
  * fix memory leak in USDT argument parsing logic;
  * fix NULL dereferences in few corner cases;
  * improved netlink attribute iteration handling.
- drop libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch,
  libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch,
  libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
  libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch (upstream)</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1672920000">- Remove requirement of linux-glibc-devel &gt;= 5.16 for devel package</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1716292800">- Fix null pointer dereference in bpf_object__collect_prog_relos()
  (bsc#1221101)
  * Add libbpf-Fix-NULL-pointer-dereference-in-bpf_object__c.patch</changelog>
</package>
<package pkgid="3039494bc739256caa8c47fcabea9ee8e04332467bffef697c5632cbbf4d151c" name="libbtrfs0" arch="aarch64">
  <version epoch="0" ver="5.14" rel="150500.10.3.1"/>
  <changelog author="info@paolostivanin.com" date="1586174400">- Update to 5.6:
  * inspect logical-resolve: support LOGICAL_INO_V2 as new option '-o',
    helps advanced dedupe tools
  * inspect: user larger buffer (64K) for results
  * subvol delete: support deletion by id (requires kernel 5.7+)
  * dump-tree: new option --hide-names, replace any names
    (file, directory, subvolume, xattr) in the output with stubs
  * various fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1588161600">- Fix content of _dracutmodulesdir variable: this definitively does
  not belong to libexecdir.</changelog>
  <changelog author="dsterba@suse.cz" date="1589371200">- Update to 5.6.1:
  * print warning when multiple block group profiles exist, update 'fi usage'
    summary, add docs to maual page explaining the situation
  * build: optional support for libgcrypt or libsodium, providing hash
    implementations
  * updated docs</changelog>
  <changelog author="dsterba@suse.cz" date="1594036800">- Update to 5.7:
  * mkfs:
  * new option to enable features otherwise enabled at runtime, now
    implemented for quotas, 'mkfs.btrfs -R quota'
  * fix space accounting for small image, DUP and --rootdir
  * option -A removed
  * check: detect ranges with overlapping csum items
  * fi usage: report correct numbers when plain RAID56 profiles are used
  * convert: ensure the data chunks size never exceed device size
  * libbtrfsutil: update documentation regarding subvolume deletion
  * build: support libkcapi as implementation backend for cryptographic
    primitives
  * core: global options for verbosity (-v, -q), subcommands -v or -q are
    aliases and will continue to work but are considered deprecated,
    current command output is preserved to keep scripts working
  * other:
  * build warning fixes
  * btrfs-debugfs ported to python 3</changelog>
  <changelog author="dsterba@suse.cz" date="1603627200">- Update to 5.9:
  * mkfs:
  * switch default to single profile for multi-device filesystem, up to
    now it was raid0 that may not be simple to convert to some other profile
    as raid0 needs a workspace on all device for that
  * new option -R for run-time options (eg. mount time enabled), now
    understands free-space-tree
  * subvolume delete:
  * refuse to delete the default subvolume (kernel will not allow that but
    the error reason is not obvious)
  * warn on EPERM, eg. if send is on progress on the subvolume
  * convert:
  * fix 32bit overflows on large filesystems
  * improved error handling and error messages
  * check free space taking fragmentation into account
  * check:
  * detect and repair wrong inode generation
  * minor improvement in error reporting on roots
  * libbtrfsutils: follow main package versioning (5.9)
  * add pkg-config file definitions
  * python-btrfsutil: follow main package versioning (5.9)
  * inspect tree-stats: print node counts for each level, fanout
  * other:
  * docs:
  * remove obsolete mount options (alloc_start, subvolrootid)
  * deleting default subvolume is not permitted
  * updated or fixed tests
  * .editorconfig updates
  * move files to kernel-shared/
  * CI:
  * updated to use zstd 1.4.5
  * fix reiserfs build
  * more builds with asan, ubsan
  * sb-mod updates
  * build:
  * print .so versions of libraries in configure summary</changelog>
  <changelog author="lnussel@suse.de" date="1604491200">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dsterba@suse.cz" date="1615118400">- Update to 5.11
  * fix device path canonicalization for device mapper devices
  * receive: remove workaround for setting capabilities, all stable kernels
    have been patched
  * receive: fix duplicate mount path detection
  * rescue: new subcommand create-control-device
  * device stats: minor fix for plain text format output
  * build: detect if e2fsprogs support 64bit timestamps
  * build: drop libmount, required functionality has been reimplemented
  * mkfs: warn when raid56 is used
  * balance convert: warn when raid56 is used
  * other
  * new and updated tests
  * documentation updates
  * seeding device
  * raid56 status
  * CI updates
  * docker images for various distros
- Update to 5.10.1
  * static build works again
  * other:
  * add a way to test static binaries with the testsuite
  * clarify scrub docs
  * update dependencies, minimum version for libmount is 2.24, this may
    change in the future
- Update to 5.10
  * scrub status:
  * print percentage of progress
  * add size unit options
  * fi usage: also print free space from statfs
  * convert: copy full 64 bit timestamp from ext4 if availalble
  * check:
  * add ability to repair extent item generation
  * new option to remove leftovers from inode number cache (-o inode_cache)
  * check for already running exclusive operation (balance, device add/...)
    when starting one
  * preliminary json output support for 'device stats'
  * fixes:
  * subvolume set-default: id 0 correctly falls back to toplevel
  * receive: align internal buffer to allow fast CRC calculation
  * logical-resolve: distinguish -o subvol and bind mounts
  * build: new dependency libmount
  * other
  * doc fixes and updates
  * new tests
  * ci on gitlab temporarily disabled
  * debugging output enhancements</changelog>
  <changelog author="dsterba@suse.cz" date="1620561600">- Update to 5.12
  * libbtrfsutil: relicensed to LGPL v2.1+
  * mkfs: zoned mode support (kernel 5.12+)
  * fi df: show zone_unusable per profile type in zoned mode
  * fi usage: show total amount of zone_unusable
  * fi resize: fix message for exact size
  * image: fix warning and enlarge output file if necessary
  * core
  * refactor chunk allocator for more modes
  * implement zoned mode support: allocation and writes, sb log
  * crypto/hash refactoring and cleanups
  * refactoring and cleanups
  * other
  * test updates
  * CI updates
  * travis-ci integration disabled
  * docker images updated, more coverage
  * incomplete build support for Android removed
  * doc updates
  * chattr mode m for 'NOCOMPRESS"
  * swapfile used from fstab
  * how to add a new export to libbtrfsutil
  * update status of mount options since 5.9
- Update to 5.11.1
  * properly format checksums when a mismatch is reported
  * check: fix false alert on tree block crossing 64K page boundary
  * convert:
  * refuse to convert filesystem with 'needs_recovery'
  * update documentation to require fsck before conversion
  * balance convert: fix raid56 warning when converting other profiles
  * fi resize: improved summary
  * other
  * build: fix checks and autoconf defines
  * fix symlink paths for CI support scripts
  * updated tests</changelog>
  <changelog author="dsterba@suse.cz" date="1620820800">- Update to 5.12.1
  * build: fix missing symbols in libbtrfs
  * mkfs: check for minimal number of zones
  * check: fix warning about cache generation when free space tree is enabled
  * fix superblock write in zoned mode on 16K pages</changelog>
  <changelog author="camspam@redhyena.net" date="1623758400">- Fix build for leap
  * --disable-zstd if leap &lt; 42.3
  * --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1623758401">- revert previous change, unintentionally disables zstd on tumbleweed</changelog>
  <changelog author="camspam@redhyena.net" date="1623844800">- Add --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1626091200">- Update to 5.13
  * restore: remove loop checks for extent count and directory scan
  * inspect dump-tree: new options to print node (--csum-headers) and data
    checksums (--csum-items)
  * fi usage:
  * print stripe count for striped profiles
  * print zoned information: size, total unusable
  * mkfs: print note about sha256 accelerated module loading issue
  * check: ability to reset dev_item::bytes_used
  * fixes
  * detect zoned kernel support at run time too
  * exclusive op running check return value
  * fi resize: support cancel (kernel 5.14)
  * device remove: support cancel (kernel 5.14)
  * documentation about general topics
  * compression
  * zoned mode
  * storage model
  * hardware considerations
  * other
  * libbtrfsutil API overview
  * help text fixes and updates
  * hash speedtest measure time, cycles using perf and print throughput</changelog>
  <changelog author="rgoldwyn@suse.com" date="1628596800">- Update to 5.13.1
  * build: fix build on musl libc due to missing definition of NAME_MAX
  * check:
  * batch more work into one transaction when clearing v1 free space inodes
  * detect directoris with wrong number of links
  * libbtrfsutil: fix race between subvolume iterator and deletion
  * mkfs: be more specific about supported profiles for zoned device
  * other:
  * documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1631448000">- Update to 5.14
  * convert:
  * new option --uuid to copy, generate or set a given uuid
  * improve output
  * mkfs:
  * allow to create degenerate raid0 (on 1 device) and raid10 (on 2 devices)
  * image:
  * improved error messages
  * fix some alignment of restored image
  * subvol delete: allow to delete by id when path is not resolvable
  * check:
  * require alignment of nodesize for 64k page systems
  * detect and fix invalid block groups
  * libbtrfs (deprecated):
  * remove most exported symbols, leave only a few that are used by snapper
  * no version change (still 0.1)
  * remove btrfs-list.h, btrfsck.h
  * fixes:
  * reset generation of space v1 if v2 is used
  * fi us: don't wrongly report missing device size when partition is not readable
  * other:
  * build: experimental features
  * build: better detection of 64bit timestamp support for ext4
  * corrupt-block: block group items
  * new and updated tests
  * refactoring
  * experimental features:
  * new image dump format, with data</changelog>
  <changelog author="rgoldwyn@suse.com" date="1632744000">- Deleted upstreamed patches for upgrade:
  - fate#325871
  * 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch
  * 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch
  * 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch
  * 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch
  * 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch
  - btrfs-progs: check: fixup_extent_flags needs to deal with non-skinny
  metadata (bsc#1131334).
  * btrfs-progs-check-fixup_extent_flags-needs-to-deal-with-non-skinny-metadata.patch
  - btrfs-progs: check: fix segfault with -Q (bsc#1158560)
  * btrfs-progs-check-initialize-qgroup_item_count-in-ea.patch
  - Enqueue feature to wait for exclusive operation to finish (JSC#SLE-15234)
  * 0001-btrfs-progs-add-get_fsid_fd-for-getting-fsid-using-f.patch
  * 0002-btrfs-progs-add-sysfs-file-reading-helpers.patch
  * 0003-btrfs-progs-add-helpers-for-parsing-filesystem-exclu.patch
  * 0004-btrfs-progs-check-for-exclusive-operation-before-iss.patch
  * 0005-btrfs-progs-add-helper-to-check-or-wait-for-exclusiv.patch
  * 0006-btrfs-progs-add-enqueue-parameter-for-exclusive-ops.patch
  - Correct check_running_fs_exclop() return value (bsc#1184481)
  * btrfs-progs-Correct-check_running_fs_exclop-return-v.patch</changelog>
  <changelog author="nborisov@suse.com" date="1638360000">- Ignore multipath devices when probing devices for a btrfs filesystem (bsc#1192983)
  * 0001-btrfs-progs-Add-optional-dependency-on-libudev.patch
  * 0002-btrfs-progs-Ignore-devices-representing-paths-in-mul.patch
  * 0003-btrfs-progs-Add-fallback-code-for-path-device-ignore.patch</changelog>
  <changelog author="dmueller@suse.com" date="1642593600">- add python-rpm-macros (bsc#1194748)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1661774400">- Upstream behavior of btrfs compression=none (JSC#PED-1711)
  * btrfs-progs_props_dont_translate_value_of_compression_none.patch</changelog>
  <changelog author="tabraham@suse.com" date="1702987200">- btrfs-progs: fix defrag -c option parsing (bsc#1218029)
  * btrfs-progs-fix-defrag-c-option-parsing.patch</changelog>
</package>
<package pkgid="88ec4a00983fc9ccdca425dc8dfe6ea32c6bceb426ad217929e644bdd49d1140" name="libbtrfs0" arch="s390x">
  <version epoch="0" ver="5.14" rel="150500.10.3.1"/>
  <changelog author="info@paolostivanin.com" date="1586174400">- Update to 5.6:
  * inspect logical-resolve: support LOGICAL_INO_V2 as new option '-o',
    helps advanced dedupe tools
  * inspect: user larger buffer (64K) for results
  * subvol delete: support deletion by id (requires kernel 5.7+)
  * dump-tree: new option --hide-names, replace any names
    (file, directory, subvolume, xattr) in the output with stubs
  * various fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1588161600">- Fix content of _dracutmodulesdir variable: this definitively does
  not belong to libexecdir.</changelog>
  <changelog author="dsterba@suse.cz" date="1589371200">- Update to 5.6.1:
  * print warning when multiple block group profiles exist, update 'fi usage'
    summary, add docs to maual page explaining the situation
  * build: optional support for libgcrypt or libsodium, providing hash
    implementations
  * updated docs</changelog>
  <changelog author="dsterba@suse.cz" date="1594036800">- Update to 5.7:
  * mkfs:
  * new option to enable features otherwise enabled at runtime, now
    implemented for quotas, 'mkfs.btrfs -R quota'
  * fix space accounting for small image, DUP and --rootdir
  * option -A removed
  * check: detect ranges with overlapping csum items
  * fi usage: report correct numbers when plain RAID56 profiles are used
  * convert: ensure the data chunks size never exceed device size
  * libbtrfsutil: update documentation regarding subvolume deletion
  * build: support libkcapi as implementation backend for cryptographic
    primitives
  * core: global options for verbosity (-v, -q), subcommands -v or -q are
    aliases and will continue to work but are considered deprecated,
    current command output is preserved to keep scripts working
  * other:
  * build warning fixes
  * btrfs-debugfs ported to python 3</changelog>
  <changelog author="dsterba@suse.cz" date="1603627200">- Update to 5.9:
  * mkfs:
  * switch default to single profile for multi-device filesystem, up to
    now it was raid0 that may not be simple to convert to some other profile
    as raid0 needs a workspace on all device for that
  * new option -R for run-time options (eg. mount time enabled), now
    understands free-space-tree
  * subvolume delete:
  * refuse to delete the default subvolume (kernel will not allow that but
    the error reason is not obvious)
  * warn on EPERM, eg. if send is on progress on the subvolume
  * convert:
  * fix 32bit overflows on large filesystems
  * improved error handling and error messages
  * check free space taking fragmentation into account
  * check:
  * detect and repair wrong inode generation
  * minor improvement in error reporting on roots
  * libbtrfsutils: follow main package versioning (5.9)
  * add pkg-config file definitions
  * python-btrfsutil: follow main package versioning (5.9)
  * inspect tree-stats: print node counts for each level, fanout
  * other:
  * docs:
  * remove obsolete mount options (alloc_start, subvolrootid)
  * deleting default subvolume is not permitted
  * updated or fixed tests
  * .editorconfig updates
  * move files to kernel-shared/
  * CI:
  * updated to use zstd 1.4.5
  * fix reiserfs build
  * more builds with asan, ubsan
  * sb-mod updates
  * build:
  * print .so versions of libraries in configure summary</changelog>
  <changelog author="lnussel@suse.de" date="1604491200">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dsterba@suse.cz" date="1615118400">- Update to 5.11
  * fix device path canonicalization for device mapper devices
  * receive: remove workaround for setting capabilities, all stable kernels
    have been patched
  * receive: fix duplicate mount path detection
  * rescue: new subcommand create-control-device
  * device stats: minor fix for plain text format output
  * build: detect if e2fsprogs support 64bit timestamps
  * build: drop libmount, required functionality has been reimplemented
  * mkfs: warn when raid56 is used
  * balance convert: warn when raid56 is used
  * other
  * new and updated tests
  * documentation updates
  * seeding device
  * raid56 status
  * CI updates
  * docker images for various distros
- Update to 5.10.1
  * static build works again
  * other:
  * add a way to test static binaries with the testsuite
  * clarify scrub docs
  * update dependencies, minimum version for libmount is 2.24, this may
    change in the future
- Update to 5.10
  * scrub status:
  * print percentage of progress
  * add size unit options
  * fi usage: also print free space from statfs
  * convert: copy full 64 bit timestamp from ext4 if availalble
  * check:
  * add ability to repair extent item generation
  * new option to remove leftovers from inode number cache (-o inode_cache)
  * check for already running exclusive operation (balance, device add/...)
    when starting one
  * preliminary json output support for 'device stats'
  * fixes:
  * subvolume set-default: id 0 correctly falls back to toplevel
  * receive: align internal buffer to allow fast CRC calculation
  * logical-resolve: distinguish -o subvol and bind mounts
  * build: new dependency libmount
  * other
  * doc fixes and updates
  * new tests
  * ci on gitlab temporarily disabled
  * debugging output enhancements</changelog>
  <changelog author="dsterba@suse.cz" date="1620561600">- Update to 5.12
  * libbtrfsutil: relicensed to LGPL v2.1+
  * mkfs: zoned mode support (kernel 5.12+)
  * fi df: show zone_unusable per profile type in zoned mode
  * fi usage: show total amount of zone_unusable
  * fi resize: fix message for exact size
  * image: fix warning and enlarge output file if necessary
  * core
  * refactor chunk allocator for more modes
  * implement zoned mode support: allocation and writes, sb log
  * crypto/hash refactoring and cleanups
  * refactoring and cleanups
  * other
  * test updates
  * CI updates
  * travis-ci integration disabled
  * docker images updated, more coverage
  * incomplete build support for Android removed
  * doc updates
  * chattr mode m for 'NOCOMPRESS"
  * swapfile used from fstab
  * how to add a new export to libbtrfsutil
  * update status of mount options since 5.9
- Update to 5.11.1
  * properly format checksums when a mismatch is reported
  * check: fix false alert on tree block crossing 64K page boundary
  * convert:
  * refuse to convert filesystem with 'needs_recovery'
  * update documentation to require fsck before conversion
  * balance convert: fix raid56 warning when converting other profiles
  * fi resize: improved summary
  * other
  * build: fix checks and autoconf defines
  * fix symlink paths for CI support scripts
  * updated tests</changelog>
  <changelog author="dsterba@suse.cz" date="1620820800">- Update to 5.12.1
  * build: fix missing symbols in libbtrfs
  * mkfs: check for minimal number of zones
  * check: fix warning about cache generation when free space tree is enabled
  * fix superblock write in zoned mode on 16K pages</changelog>
  <changelog author="camspam@redhyena.net" date="1623758400">- Fix build for leap
  * --disable-zstd if leap &lt; 42.3
  * --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1623758401">- revert previous change, unintentionally disables zstd on tumbleweed</changelog>
  <changelog author="camspam@redhyena.net" date="1623844800">- Add --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1626091200">- Update to 5.13
  * restore: remove loop checks for extent count and directory scan
  * inspect dump-tree: new options to print node (--csum-headers) and data
    checksums (--csum-items)
  * fi usage:
  * print stripe count for striped profiles
  * print zoned information: size, total unusable
  * mkfs: print note about sha256 accelerated module loading issue
  * check: ability to reset dev_item::bytes_used
  * fixes
  * detect zoned kernel support at run time too
  * exclusive op running check return value
  * fi resize: support cancel (kernel 5.14)
  * device remove: support cancel (kernel 5.14)
  * documentation about general topics
  * compression
  * zoned mode
  * storage model
  * hardware considerations
  * other
  * libbtrfsutil API overview
  * help text fixes and updates
  * hash speedtest measure time, cycles using perf and print throughput</changelog>
  <changelog author="rgoldwyn@suse.com" date="1628596800">- Update to 5.13.1
  * build: fix build on musl libc due to missing definition of NAME_MAX
  * check:
  * batch more work into one transaction when clearing v1 free space inodes
  * detect directoris with wrong number of links
  * libbtrfsutil: fix race between subvolume iterator and deletion
  * mkfs: be more specific about supported profiles for zoned device
  * other:
  * documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1631448000">- Update to 5.14
  * convert:
  * new option --uuid to copy, generate or set a given uuid
  * improve output
  * mkfs:
  * allow to create degenerate raid0 (on 1 device) and raid10 (on 2 devices)
  * image:
  * improved error messages
  * fix some alignment of restored image
  * subvol delete: allow to delete by id when path is not resolvable
  * check:
  * require alignment of nodesize for 64k page systems
  * detect and fix invalid block groups
  * libbtrfs (deprecated):
  * remove most exported symbols, leave only a few that are used by snapper
  * no version change (still 0.1)
  * remove btrfs-list.h, btrfsck.h
  * fixes:
  * reset generation of space v1 if v2 is used
  * fi us: don't wrongly report missing device size when partition is not readable
  * other:
  * build: experimental features
  * build: better detection of 64bit timestamp support for ext4
  * corrupt-block: block group items
  * new and updated tests
  * refactoring
  * experimental features:
  * new image dump format, with data</changelog>
  <changelog author="rgoldwyn@suse.com" date="1632744000">- Deleted upstreamed patches for upgrade:
  - fate#325871
  * 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch
  * 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch
  * 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch
  * 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch
  * 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch
  - btrfs-progs: check: fixup_extent_flags needs to deal with non-skinny
  metadata (bsc#1131334).
  * btrfs-progs-check-fixup_extent_flags-needs-to-deal-with-non-skinny-metadata.patch
  - btrfs-progs: check: fix segfault with -Q (bsc#1158560)
  * btrfs-progs-check-initialize-qgroup_item_count-in-ea.patch
  - Enqueue feature to wait for exclusive operation to finish (JSC#SLE-15234)
  * 0001-btrfs-progs-add-get_fsid_fd-for-getting-fsid-using-f.patch
  * 0002-btrfs-progs-add-sysfs-file-reading-helpers.patch
  * 0003-btrfs-progs-add-helpers-for-parsing-filesystem-exclu.patch
  * 0004-btrfs-progs-check-for-exclusive-operation-before-iss.patch
  * 0005-btrfs-progs-add-helper-to-check-or-wait-for-exclusiv.patch
  * 0006-btrfs-progs-add-enqueue-parameter-for-exclusive-ops.patch
  - Correct check_running_fs_exclop() return value (bsc#1184481)
  * btrfs-progs-Correct-check_running_fs_exclop-return-v.patch</changelog>
  <changelog author="nborisov@suse.com" date="1638360000">- Ignore multipath devices when probing devices for a btrfs filesystem (bsc#1192983)
  * 0001-btrfs-progs-Add-optional-dependency-on-libudev.patch
  * 0002-btrfs-progs-Ignore-devices-representing-paths-in-mul.patch
  * 0003-btrfs-progs-Add-fallback-code-for-path-device-ignore.patch</changelog>
  <changelog author="dmueller@suse.com" date="1642593600">- add python-rpm-macros (bsc#1194748)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1661774400">- Upstream behavior of btrfs compression=none (JSC#PED-1711)
  * btrfs-progs_props_dont_translate_value_of_compression_none.patch</changelog>
  <changelog author="tabraham@suse.com" date="1702987200">- btrfs-progs: fix defrag -c option parsing (bsc#1218029)
  * btrfs-progs-fix-defrag-c-option-parsing.patch</changelog>
</package>
<package pkgid="c00924267d31631d8b78842e1467054d2ff5350d77df23b9c32b431ab7019cb2" name="libbtrfs0" arch="x86_64">
  <version epoch="0" ver="5.14" rel="150500.10.3.1"/>
  <changelog author="info@paolostivanin.com" date="1586174400">- Update to 5.6:
  * inspect logical-resolve: support LOGICAL_INO_V2 as new option '-o',
    helps advanced dedupe tools
  * inspect: user larger buffer (64K) for results
  * subvol delete: support deletion by id (requires kernel 5.7+)
  * dump-tree: new option --hide-names, replace any names
    (file, directory, subvolume, xattr) in the output with stubs
  * various fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1588161600">- Fix content of _dracutmodulesdir variable: this definitively does
  not belong to libexecdir.</changelog>
  <changelog author="dsterba@suse.cz" date="1589371200">- Update to 5.6.1:
  * print warning when multiple block group profiles exist, update 'fi usage'
    summary, add docs to maual page explaining the situation
  * build: optional support for libgcrypt or libsodium, providing hash
    implementations
  * updated docs</changelog>
  <changelog author="dsterba@suse.cz" date="1594036800">- Update to 5.7:
  * mkfs:
  * new option to enable features otherwise enabled at runtime, now
    implemented for quotas, 'mkfs.btrfs -R quota'
  * fix space accounting for small image, DUP and --rootdir
  * option -A removed
  * check: detect ranges with overlapping csum items
  * fi usage: report correct numbers when plain RAID56 profiles are used
  * convert: ensure the data chunks size never exceed device size
  * libbtrfsutil: update documentation regarding subvolume deletion
  * build: support libkcapi as implementation backend for cryptographic
    primitives
  * core: global options for verbosity (-v, -q), subcommands -v or -q are
    aliases and will continue to work but are considered deprecated,
    current command output is preserved to keep scripts working
  * other:
  * build warning fixes
  * btrfs-debugfs ported to python 3</changelog>
  <changelog author="dsterba@suse.cz" date="1603627200">- Update to 5.9:
  * mkfs:
  * switch default to single profile for multi-device filesystem, up to
    now it was raid0 that may not be simple to convert to some other profile
    as raid0 needs a workspace on all device for that
  * new option -R for run-time options (eg. mount time enabled), now
    understands free-space-tree
  * subvolume delete:
  * refuse to delete the default subvolume (kernel will not allow that but
    the error reason is not obvious)
  * warn on EPERM, eg. if send is on progress on the subvolume
  * convert:
  * fix 32bit overflows on large filesystems
  * improved error handling and error messages
  * check free space taking fragmentation into account
  * check:
  * detect and repair wrong inode generation
  * minor improvement in error reporting on roots
  * libbtrfsutils: follow main package versioning (5.9)
  * add pkg-config file definitions
  * python-btrfsutil: follow main package versioning (5.9)
  * inspect tree-stats: print node counts for each level, fanout
  * other:
  * docs:
  * remove obsolete mount options (alloc_start, subvolrootid)
  * deleting default subvolume is not permitted
  * updated or fixed tests
  * .editorconfig updates
  * move files to kernel-shared/
  * CI:
  * updated to use zstd 1.4.5
  * fix reiserfs build
  * more builds with asan, ubsan
  * sb-mod updates
  * build:
  * print .so versions of libraries in configure summary</changelog>
  <changelog author="lnussel@suse.de" date="1604491200">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dsterba@suse.cz" date="1615118400">- Update to 5.11
  * fix device path canonicalization for device mapper devices
  * receive: remove workaround for setting capabilities, all stable kernels
    have been patched
  * receive: fix duplicate mount path detection
  * rescue: new subcommand create-control-device
  * device stats: minor fix for plain text format output
  * build: detect if e2fsprogs support 64bit timestamps
  * build: drop libmount, required functionality has been reimplemented
  * mkfs: warn when raid56 is used
  * balance convert: warn when raid56 is used
  * other
  * new and updated tests
  * documentation updates
  * seeding device
  * raid56 status
  * CI updates
  * docker images for various distros
- Update to 5.10.1
  * static build works again
  * other:
  * add a way to test static binaries with the testsuite
  * clarify scrub docs
  * update dependencies, minimum version for libmount is 2.24, this may
    change in the future
- Update to 5.10
  * scrub status:
  * print percentage of progress
  * add size unit options
  * fi usage: also print free space from statfs
  * convert: copy full 64 bit timestamp from ext4 if availalble
  * check:
  * add ability to repair extent item generation
  * new option to remove leftovers from inode number cache (-o inode_cache)
  * check for already running exclusive operation (balance, device add/...)
    when starting one
  * preliminary json output support for 'device stats'
  * fixes:
  * subvolume set-default: id 0 correctly falls back to toplevel
  * receive: align internal buffer to allow fast CRC calculation
  * logical-resolve: distinguish -o subvol and bind mounts
  * build: new dependency libmount
  * other
  * doc fixes and updates
  * new tests
  * ci on gitlab temporarily disabled
  * debugging output enhancements</changelog>
  <changelog author="dsterba@suse.cz" date="1620561600">- Update to 5.12
  * libbtrfsutil: relicensed to LGPL v2.1+
  * mkfs: zoned mode support (kernel 5.12+)
  * fi df: show zone_unusable per profile type in zoned mode
  * fi usage: show total amount of zone_unusable
  * fi resize: fix message for exact size
  * image: fix warning and enlarge output file if necessary
  * core
  * refactor chunk allocator for more modes
  * implement zoned mode support: allocation and writes, sb log
  * crypto/hash refactoring and cleanups
  * refactoring and cleanups
  * other
  * test updates
  * CI updates
  * travis-ci integration disabled
  * docker images updated, more coverage
  * incomplete build support for Android removed
  * doc updates
  * chattr mode m for 'NOCOMPRESS"
  * swapfile used from fstab
  * how to add a new export to libbtrfsutil
  * update status of mount options since 5.9
- Update to 5.11.1
  * properly format checksums when a mismatch is reported
  * check: fix false alert on tree block crossing 64K page boundary
  * convert:
  * refuse to convert filesystem with 'needs_recovery'
  * update documentation to require fsck before conversion
  * balance convert: fix raid56 warning when converting other profiles
  * fi resize: improved summary
  * other
  * build: fix checks and autoconf defines
  * fix symlink paths for CI support scripts
  * updated tests</changelog>
  <changelog author="dsterba@suse.cz" date="1620820800">- Update to 5.12.1
  * build: fix missing symbols in libbtrfs
  * mkfs: check for minimal number of zones
  * check: fix warning about cache generation when free space tree is enabled
  * fix superblock write in zoned mode on 16K pages</changelog>
  <changelog author="camspam@redhyena.net" date="1623758400">- Fix build for leap
  * --disable-zstd if leap &lt; 42.3
  * --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1623758401">- revert previous change, unintentionally disables zstd on tumbleweed</changelog>
  <changelog author="camspam@redhyena.net" date="1623844800">- Add --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1626091200">- Update to 5.13
  * restore: remove loop checks for extent count and directory scan
  * inspect dump-tree: new options to print node (--csum-headers) and data
    checksums (--csum-items)
  * fi usage:
  * print stripe count for striped profiles
  * print zoned information: size, total unusable
  * mkfs: print note about sha256 accelerated module loading issue
  * check: ability to reset dev_item::bytes_used
  * fixes
  * detect zoned kernel support at run time too
  * exclusive op running check return value
  * fi resize: support cancel (kernel 5.14)
  * device remove: support cancel (kernel 5.14)
  * documentation about general topics
  * compression
  * zoned mode
  * storage model
  * hardware considerations
  * other
  * libbtrfsutil API overview
  * help text fixes and updates
  * hash speedtest measure time, cycles using perf and print throughput</changelog>
  <changelog author="rgoldwyn@suse.com" date="1628596800">- Update to 5.13.1
  * build: fix build on musl libc due to missing definition of NAME_MAX
  * check:
  * batch more work into one transaction when clearing v1 free space inodes
  * detect directoris with wrong number of links
  * libbtrfsutil: fix race between subvolume iterator and deletion
  * mkfs: be more specific about supported profiles for zoned device
  * other:
  * documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1631448000">- Update to 5.14
  * convert:
  * new option --uuid to copy, generate or set a given uuid
  * improve output
  * mkfs:
  * allow to create degenerate raid0 (on 1 device) and raid10 (on 2 devices)
  * image:
  * improved error messages
  * fix some alignment of restored image
  * subvol delete: allow to delete by id when path is not resolvable
  * check:
  * require alignment of nodesize for 64k page systems
  * detect and fix invalid block groups
  * libbtrfs (deprecated):
  * remove most exported symbols, leave only a few that are used by snapper
  * no version change (still 0.1)
  * remove btrfs-list.h, btrfsck.h
  * fixes:
  * reset generation of space v1 if v2 is used
  * fi us: don't wrongly report missing device size when partition is not readable
  * other:
  * build: experimental features
  * build: better detection of 64bit timestamp support for ext4
  * corrupt-block: block group items
  * new and updated tests
  * refactoring
  * experimental features:
  * new image dump format, with data</changelog>
  <changelog author="rgoldwyn@suse.com" date="1632744000">- Deleted upstreamed patches for upgrade:
  - fate#325871
  * 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch
  * 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch
  * 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch
  * 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch
  * 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch
  - btrfs-progs: check: fixup_extent_flags needs to deal with non-skinny
  metadata (bsc#1131334).
  * btrfs-progs-check-fixup_extent_flags-needs-to-deal-with-non-skinny-metadata.patch
  - btrfs-progs: check: fix segfault with -Q (bsc#1158560)
  * btrfs-progs-check-initialize-qgroup_item_count-in-ea.patch
  - Enqueue feature to wait for exclusive operation to finish (JSC#SLE-15234)
  * 0001-btrfs-progs-add-get_fsid_fd-for-getting-fsid-using-f.patch
  * 0002-btrfs-progs-add-sysfs-file-reading-helpers.patch
  * 0003-btrfs-progs-add-helpers-for-parsing-filesystem-exclu.patch
  * 0004-btrfs-progs-check-for-exclusive-operation-before-iss.patch
  * 0005-btrfs-progs-add-helper-to-check-or-wait-for-exclusiv.patch
  * 0006-btrfs-progs-add-enqueue-parameter-for-exclusive-ops.patch
  - Correct check_running_fs_exclop() return value (bsc#1184481)
  * btrfs-progs-Correct-check_running_fs_exclop-return-v.patch</changelog>
  <changelog author="nborisov@suse.com" date="1638360000">- Ignore multipath devices when probing devices for a btrfs filesystem (bsc#1192983)
  * 0001-btrfs-progs-Add-optional-dependency-on-libudev.patch
  * 0002-btrfs-progs-Ignore-devices-representing-paths-in-mul.patch
  * 0003-btrfs-progs-Add-fallback-code-for-path-device-ignore.patch</changelog>
  <changelog author="dmueller@suse.com" date="1642593600">- add python-rpm-macros (bsc#1194748)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1661774400">- Upstream behavior of btrfs compression=none (JSC#PED-1711)
  * btrfs-progs_props_dont_translate_value_of_compression_none.patch</changelog>
  <changelog author="tabraham@suse.com" date="1702987200">- btrfs-progs: fix defrag -c option parsing (bsc#1218029)
  * btrfs-progs-fix-defrag-c-option-parsing.patch</changelog>
</package>
<package pkgid="63743e7b68d59d00fe04f7bef9dd37782745e40eadc85a3e276e90c76d32a9d6" name="libcairo-gobject2" arch="aarch64">
  <version epoch="0" ver="1.16.0" rel="150400.11.3.1"/>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups; update summaries.
  Remove useless --with-pic which is only for static libs.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Add cairo-pdf-fixes.patch: Three minor pdf fixes from upstream
  git (fdo#99630).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Rebase cairo-pdf-fixes.patch: Add commit to fix fdo#100029.</changelog>
  <changelog author="alarrosa@suse.com" date="1496836800">- Add cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff to
  fix a segfault in get_bitmap_surface due to malformed font
  (bsc#1036789, fdo#100763, CVE-2017-7475).</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.15.6:
  + Detect if variable fonts have synthesized bold/italic or
    non-default variants, and use a fallback font where needed.
  + Restore MacOSX 10.4 support. Cairo had dropped 10.4 support
    when moving to the CoreText API.  Now we automatically detect
    which API to use via dynamic linking, so can resume supporting
    this older version of MacOSX.
  + Fix error reporting in the xcb backend if fallback fails.
    Instead of returning NULL when the X11 server can't do some
    operation, return a surface in an error state.
  + Call XSync in the xlib backend before setting the error handler
    to ignore errors for certain requests, to make sure all pending
    errors are handled first.
  + Fix text-glyph-range for quartz-font.  Use 0xFFFF instead of 0
    for invalid index tracking.
  + Fix handling of Supplementary Multilingual Plane (SMP) Unicode
    characters in quartz-font.
  + Fix various issues in the drm backend including updating API
    usage and general code cleanup.
  + Clarify documentation regarding device scale inheritance and
    the units used in cairo_surface_create_similar_image
    (fdo#99094).
- Drop cairo-pdf-fixes.patch: Fixed upstream.
- Add cairo-fix-off-by-one-check.patch: Fix off by one check in
  cairo-image-info.c (fdo#101427).</changelog>
  <changelog author="alarrosa@suse.com" date="1497960000">- Add 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch to
  fix a segfault when using &gt;4GB images since int values were used
  for pointer operations (bsc#1007255, fdo#98165, CVE-2016-9082).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504094400">- Update to version 1.15.8:
  + This small snapshot provides new colored emoji glyph support,
    and a handful of minor fixes. For a complete log of changes,
    please see
    http://cairographics.org/releases/ChangeLog.1.15.8
  + Features and Enhancements: Support colored emoji glyphs, stored
    as PNG images in OpenType fonts.
  + Bug Fixes:
  - pdf:
    . Fix internal links pointing to other pages, by
    pre-calculating page heights so that link positions can be
    calculated more accurately.
    . Don't emit /PageLabel dict when no labels defined.
  - image: Fix crash on negative lengths.
  - win32: Fix initialization of mutexes for static builds.
  - font:
    . Fix color font loading on big-endian systems.
    . Fix color font support infinite-loop with empty glyphs.
  - Fix off by one check in cairo-image-info.c.
- Drop cairo-fix-off-by-one-check.patch: Fixed upstream.
- Run spec-cleaner, modernize spec.
- Rename 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch
  to cairo-image-prevent-invalid-ptr-access.patch.
- Pass enable-gtk-doc instead of disable-gtk-doc to configure, we
  already have the gtk-doc BuildRequires in place so I can only
  assume that this was an honest error.</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig(gl) and pkgconfig(egl) instead of Mesa-devel.
  * The pkgconfig(gl) and pkgconfig(egl) are what cairo really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523534400">- Update to version 1.15.12:
  + The main focus for this release is the addition of Variable
    Font support. Variable fonts are single font files with various
    typography characteristics, such as weight or slant, that users
    of the font can adjust between two points. Effectively this
    enables a single font to behave as multiple fonts.
  + The Skia backend is disabled in this release, due to severe
    bitrot, and will be removed in future releases. Contact the
    cairo team if you have a need of this backend.
  + Features and Enhancements:
  - Variable font support.
  - Skia backend is disabled.
  + API Changes: cairo_font_options_get_variations() and
    cairo_font_options_set_variations() are added.
  + Bugs fixed:
  - Fix errors in csi-trace --help and --version options.
  - Fix a 'memory leak' in the image compositor, with
    pixman_glyph_cache_t.
  - Fix access of uninitialized memory found by valgrind
    (fdo#91271).
  - Fix improper initialization of memory in
    _cairo_ft_font_face_create_for_pattern() (fdo#105084).
  - Fix multi-monitor virtual desktop with negative coords on
    Win32 (fdo#100793).
  - Fix issues occuring with older FreeType versions.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524571200">- Add cairo-fix-assertion-failure-in-freetype-backend.patch: Fix
  assertion failure in the freetype backend (fdo#105746).</changelog>
  <changelog author="qzheng@suse.com" date="1529496000">- Add cairo-CVE-2017-9814.patch: Replace malloc with _cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538740800">- Update to version 1.15.14:
  + Features and Enhancements:
  - Add more FreeeType font color conversions to support
    COLR/CPAL.
  - Update test reference images against current pixman.
  + Bugs fixed:
  - Fix crash when rendering Microsoft's Segoe UI Emoji Regular
    font.
  - Fix build breakage with glesv3 enabled due to non-existant
    glesv3.pc.
  - Fix memory leaks found by Coverity.
  - Fix incorrect null ptr handling found by Coverity.
  - Fix test compilation when font-config is disabled.
  - Use _cairo_malloc instead of malloc
    (fdo#101547, CVE-2017-9814).
  - Fix assertion failure in the freetype backend (fdo#105746).
- Drop upstream fixed patches:
  + cairo-fix-assertion-failure-in-freetype-backend.patch.
  + cairo-CVE-2017-9814.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540123200">- Update to version 1.16.0:
  + test: Free resources in pdf2png.
  + Drop skia backend.
  + Revert "Correctly decode Adobe CMYK JPEGs in PDF export".</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567598400">- Add 2 upstream bug fix patches:
  + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch:
    ft: Use FT_Done_MM_Var instead of free when available in
    cairo_ft_apply_variations. Fixes a crash when using freetype
    &gt;= 2.9
  + cairo-composite_color_glyphs.patch: Fix a thinko in
    composite_color_glyphs. We can't just move around the contents
    of the passed-in string, we need to make a copy. This was
    showing up as memory corruption in pango.</changelog>
  <changelog author="mwilck@suse.com" date="1582459200">- Add an upstream bug fix
  + cairo-pdf-add-missing-flush.patch: Fixes PDF generation
    see https://gitlab.freedesktop.org/cairo/cairo/issues/342</changelog>
  <changelog author="rpm@fthiessen.de" date="1634904000">- Add upstream patch
  + cairo-do-not-override-explicitly-requested-grayscale-aa.patch
    Do not replace explicitly set applications settings by user
    settings for font antialiasing.
    See: https://gitlab.freedesktop.org/cairo/cairo/-/merge_requests/114</changelog>
  <changelog author="mgorse@suse.com" date="1714996800">- Add cairo-fix-infinite-loop-bsc1122321-CVE-2019-6462.patch: This
  fixes a potentially infinite loop (bsc#1122321, CVE-2019-6462,
  glfo#cairo/cairo#155).</changelog>
</package>
<package pkgid="c2d9556a0c19774b44a9dcc35e7c25be69291ac88a9458c6034e7619942864c8" name="libcairo-gobject2" arch="s390x">
  <version epoch="0" ver="1.16.0" rel="150400.11.3.1"/>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups; update summaries.
  Remove useless --with-pic which is only for static libs.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Add cairo-pdf-fixes.patch: Three minor pdf fixes from upstream
  git (fdo#99630).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Rebase cairo-pdf-fixes.patch: Add commit to fix fdo#100029.</changelog>
  <changelog author="alarrosa@suse.com" date="1496836800">- Add cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff to
  fix a segfault in get_bitmap_surface due to malformed font
  (bsc#1036789, fdo#100763, CVE-2017-7475).</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.15.6:
  + Detect if variable fonts have synthesized bold/italic or
    non-default variants, and use a fallback font where needed.
  + Restore MacOSX 10.4 support. Cairo had dropped 10.4 support
    when moving to the CoreText API.  Now we automatically detect
    which API to use via dynamic linking, so can resume supporting
    this older version of MacOSX.
  + Fix error reporting in the xcb backend if fallback fails.
    Instead of returning NULL when the X11 server can't do some
    operation, return a surface in an error state.
  + Call XSync in the xlib backend before setting the error handler
    to ignore errors for certain requests, to make sure all pending
    errors are handled first.
  + Fix text-glyph-range for quartz-font.  Use 0xFFFF instead of 0
    for invalid index tracking.
  + Fix handling of Supplementary Multilingual Plane (SMP) Unicode
    characters in quartz-font.
  + Fix various issues in the drm backend including updating API
    usage and general code cleanup.
  + Clarify documentation regarding device scale inheritance and
    the units used in cairo_surface_create_similar_image
    (fdo#99094).
- Drop cairo-pdf-fixes.patch: Fixed upstream.
- Add cairo-fix-off-by-one-check.patch: Fix off by one check in
  cairo-image-info.c (fdo#101427).</changelog>
  <changelog author="alarrosa@suse.com" date="1497960000">- Add 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch to
  fix a segfault when using &gt;4GB images since int values were used
  for pointer operations (bsc#1007255, fdo#98165, CVE-2016-9082).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504094400">- Update to version 1.15.8:
  + This small snapshot provides new colored emoji glyph support,
    and a handful of minor fixes. For a complete log of changes,
    please see
    http://cairographics.org/releases/ChangeLog.1.15.8
  + Features and Enhancements: Support colored emoji glyphs, stored
    as PNG images in OpenType fonts.
  + Bug Fixes:
  - pdf:
    . Fix internal links pointing to other pages, by
    pre-calculating page heights so that link positions can be
    calculated more accurately.
    . Don't emit /PageLabel dict when no labels defined.
  - image: Fix crash on negative lengths.
  - win32: Fix initialization of mutexes for static builds.
  - font:
    . Fix color font loading on big-endian systems.
    . Fix color font support infinite-loop with empty glyphs.
  - Fix off by one check in cairo-image-info.c.
- Drop cairo-fix-off-by-one-check.patch: Fixed upstream.
- Run spec-cleaner, modernize spec.
- Rename 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch
  to cairo-image-prevent-invalid-ptr-access.patch.
- Pass enable-gtk-doc instead of disable-gtk-doc to configure, we
  already have the gtk-doc BuildRequires in place so I can only
  assume that this was an honest error.</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig(gl) and pkgconfig(egl) instead of Mesa-devel.
  * The pkgconfig(gl) and pkgconfig(egl) are what cairo really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523534400">- Update to version 1.15.12:
  + The main focus for this release is the addition of Variable
    Font support. Variable fonts are single font files with various
    typography characteristics, such as weight or slant, that users
    of the font can adjust between two points. Effectively this
    enables a single font to behave as multiple fonts.
  + The Skia backend is disabled in this release, due to severe
    bitrot, and will be removed in future releases. Contact the
    cairo team if you have a need of this backend.
  + Features and Enhancements:
  - Variable font support.
  - Skia backend is disabled.
  + API Changes: cairo_font_options_get_variations() and
    cairo_font_options_set_variations() are added.
  + Bugs fixed:
  - Fix errors in csi-trace --help and --version options.
  - Fix a 'memory leak' in the image compositor, with
    pixman_glyph_cache_t.
  - Fix access of uninitialized memory found by valgrind
    (fdo#91271).
  - Fix improper initialization of memory in
    _cairo_ft_font_face_create_for_pattern() (fdo#105084).
  - Fix multi-monitor virtual desktop with negative coords on
    Win32 (fdo#100793).
  - Fix issues occuring with older FreeType versions.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524571200">- Add cairo-fix-assertion-failure-in-freetype-backend.patch: Fix
  assertion failure in the freetype backend (fdo#105746).</changelog>
  <changelog author="qzheng@suse.com" date="1529496000">- Add cairo-CVE-2017-9814.patch: Replace malloc with _cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538740800">- Update to version 1.15.14:
  + Features and Enhancements:
  - Add more FreeeType font color conversions to support
    COLR/CPAL.
  - Update test reference images against current pixman.
  + Bugs fixed:
  - Fix crash when rendering Microsoft's Segoe UI Emoji Regular
    font.
  - Fix build breakage with glesv3 enabled due to non-existant
    glesv3.pc.
  - Fix memory leaks found by Coverity.
  - Fix incorrect null ptr handling found by Coverity.
  - Fix test compilation when font-config is disabled.
  - Use _cairo_malloc instead of malloc
    (fdo#101547, CVE-2017-9814).
  - Fix assertion failure in the freetype backend (fdo#105746).
- Drop upstream fixed patches:
  + cairo-fix-assertion-failure-in-freetype-backend.patch.
  + cairo-CVE-2017-9814.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540123200">- Update to version 1.16.0:
  + test: Free resources in pdf2png.
  + Drop skia backend.
  + Revert "Correctly decode Adobe CMYK JPEGs in PDF export".</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567598400">- Add 2 upstream bug fix patches:
  + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch:
    ft: Use FT_Done_MM_Var instead of free when available in
    cairo_ft_apply_variations. Fixes a crash when using freetype
    &gt;= 2.9
  + cairo-composite_color_glyphs.patch: Fix a thinko in
    composite_color_glyphs. We can't just move around the contents
    of the passed-in string, we need to make a copy. This was
    showing up as memory corruption in pango.</changelog>
  <changelog author="mwilck@suse.com" date="1582459200">- Add an upstream bug fix
  + cairo-pdf-add-missing-flush.patch: Fixes PDF generation
    see https://gitlab.freedesktop.org/cairo/cairo/issues/342</changelog>
  <changelog author="rpm@fthiessen.de" date="1634904000">- Add upstream patch
  + cairo-do-not-override-explicitly-requested-grayscale-aa.patch
    Do not replace explicitly set applications settings by user
    settings for font antialiasing.
    See: https://gitlab.freedesktop.org/cairo/cairo/-/merge_requests/114</changelog>
  <changelog author="mgorse@suse.com" date="1714996800">- Add cairo-fix-infinite-loop-bsc1122321-CVE-2019-6462.patch: This
  fixes a potentially infinite loop (bsc#1122321, CVE-2019-6462,
  glfo#cairo/cairo#155).</changelog>
</package>
<package pkgid="bcfcd06f65d21371df6aa28b230527a0eda2839c05fe6b19cc43cc6fda1ebbee" name="libcairo-gobject2" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="150400.11.3.1"/>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups; update summaries.
  Remove useless --with-pic which is only for static libs.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Add cairo-pdf-fixes.patch: Three minor pdf fixes from upstream
  git (fdo#99630).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Rebase cairo-pdf-fixes.patch: Add commit to fix fdo#100029.</changelog>
  <changelog author="alarrosa@suse.com" date="1496836800">- Add cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff to
  fix a segfault in get_bitmap_surface due to malformed font
  (bsc#1036789, fdo#100763, CVE-2017-7475).</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.15.6:
  + Detect if variable fonts have synthesized bold/italic or
    non-default variants, and use a fallback font where needed.
  + Restore MacOSX 10.4 support. Cairo had dropped 10.4 support
    when moving to the CoreText API.  Now we automatically detect
    which API to use via dynamic linking, so can resume supporting
    this older version of MacOSX.
  + Fix error reporting in the xcb backend if fallback fails.
    Instead of returning NULL when the X11 server can't do some
    operation, return a surface in an error state.
  + Call XSync in the xlib backend before setting the error handler
    to ignore errors for certain requests, to make sure all pending
    errors are handled first.
  + Fix text-glyph-range for quartz-font.  Use 0xFFFF instead of 0
    for invalid index tracking.
  + Fix handling of Supplementary Multilingual Plane (SMP) Unicode
    characters in quartz-font.
  + Fix various issues in the drm backend including updating API
    usage and general code cleanup.
  + Clarify documentation regarding device scale inheritance and
    the units used in cairo_surface_create_similar_image
    (fdo#99094).
- Drop cairo-pdf-fixes.patch: Fixed upstream.
- Add cairo-fix-off-by-one-check.patch: Fix off by one check in
  cairo-image-info.c (fdo#101427).</changelog>
  <changelog author="alarrosa@suse.com" date="1497960000">- Add 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch to
  fix a segfault when using &gt;4GB images since int values were used
  for pointer operations (bsc#1007255, fdo#98165, CVE-2016-9082).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504094400">- Update to version 1.15.8:
  + This small snapshot provides new colored emoji glyph support,
    and a handful of minor fixes. For a complete log of changes,
    please see
    http://cairographics.org/releases/ChangeLog.1.15.8
  + Features and Enhancements: Support colored emoji glyphs, stored
    as PNG images in OpenType fonts.
  + Bug Fixes:
  - pdf:
    . Fix internal links pointing to other pages, by
    pre-calculating page heights so that link positions can be
    calculated more accurately.
    . Don't emit /PageLabel dict when no labels defined.
  - image: Fix crash on negative lengths.
  - win32: Fix initialization of mutexes for static builds.
  - font:
    . Fix color font loading on big-endian systems.
    . Fix color font support infinite-loop with empty glyphs.
  - Fix off by one check in cairo-image-info.c.
- Drop cairo-fix-off-by-one-check.patch: Fixed upstream.
- Run spec-cleaner, modernize spec.
- Rename 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch
  to cairo-image-prevent-invalid-ptr-access.patch.
- Pass enable-gtk-doc instead of disable-gtk-doc to configure, we
  already have the gtk-doc BuildRequires in place so I can only
  assume that this was an honest error.</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig(gl) and pkgconfig(egl) instead of Mesa-devel.
  * The pkgconfig(gl) and pkgconfig(egl) are what cairo really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523534400">- Update to version 1.15.12:
  + The main focus for this release is the addition of Variable
    Font support. Variable fonts are single font files with various
    typography characteristics, such as weight or slant, that users
    of the font can adjust between two points. Effectively this
    enables a single font to behave as multiple fonts.
  + The Skia backend is disabled in this release, due to severe
    bitrot, and will be removed in future releases. Contact the
    cairo team if you have a need of this backend.
  + Features and Enhancements:
  - Variable font support.
  - Skia backend is disabled.
  + API Changes: cairo_font_options_get_variations() and
    cairo_font_options_set_variations() are added.
  + Bugs fixed:
  - Fix errors in csi-trace --help and --version options.
  - Fix a 'memory leak' in the image compositor, with
    pixman_glyph_cache_t.
  - Fix access of uninitialized memory found by valgrind
    (fdo#91271).
  - Fix improper initialization of memory in
    _cairo_ft_font_face_create_for_pattern() (fdo#105084).
  - Fix multi-monitor virtual desktop with negative coords on
    Win32 (fdo#100793).
  - Fix issues occuring with older FreeType versions.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524571200">- Add cairo-fix-assertion-failure-in-freetype-backend.patch: Fix
  assertion failure in the freetype backend (fdo#105746).</changelog>
  <changelog author="qzheng@suse.com" date="1529496000">- Add cairo-CVE-2017-9814.patch: Replace malloc with _cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538740800">- Update to version 1.15.14:
  + Features and Enhancements:
  - Add more FreeeType font color conversions to support
    COLR/CPAL.
  - Update test reference images against current pixman.
  + Bugs fixed:
  - Fix crash when rendering Microsoft's Segoe UI Emoji Regular
    font.
  - Fix build breakage with glesv3 enabled due to non-existant
    glesv3.pc.
  - Fix memory leaks found by Coverity.
  - Fix incorrect null ptr handling found by Coverity.
  - Fix test compilation when font-config is disabled.
  - Use _cairo_malloc instead of malloc
    (fdo#101547, CVE-2017-9814).
  - Fix assertion failure in the freetype backend (fdo#105746).
- Drop upstream fixed patches:
  + cairo-fix-assertion-failure-in-freetype-backend.patch.
  + cairo-CVE-2017-9814.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540123200">- Update to version 1.16.0:
  + test: Free resources in pdf2png.
  + Drop skia backend.
  + Revert "Correctly decode Adobe CMYK JPEGs in PDF export".</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567598400">- Add 2 upstream bug fix patches:
  + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch:
    ft: Use FT_Done_MM_Var instead of free when available in
    cairo_ft_apply_variations. Fixes a crash when using freetype
    &gt;= 2.9
  + cairo-composite_color_glyphs.patch: Fix a thinko in
    composite_color_glyphs. We can't just move around the contents
    of the passed-in string, we need to make a copy. This was
    showing up as memory corruption in pango.</changelog>
  <changelog author="mwilck@suse.com" date="1582459200">- Add an upstream bug fix
  + cairo-pdf-add-missing-flush.patch: Fixes PDF generation
    see https://gitlab.freedesktop.org/cairo/cairo/issues/342</changelog>
  <changelog author="rpm@fthiessen.de" date="1634904000">- Add upstream patch
  + cairo-do-not-override-explicitly-requested-grayscale-aa.patch
    Do not replace explicitly set applications settings by user
    settings for font antialiasing.
    See: https://gitlab.freedesktop.org/cairo/cairo/-/merge_requests/114</changelog>
  <changelog author="mgorse@suse.com" date="1714996800">- Add cairo-fix-infinite-loop-bsc1122321-CVE-2019-6462.patch: This
  fixes a potentially infinite loop (bsc#1122321, CVE-2019-6462,
  glfo#cairo/cairo#155).</changelog>
</package>
<package pkgid="1097b6c583af4b3ae3735595c23e54ef585333c0793cdc39e55a495ac0073f6a" name="libcairo2" arch="aarch64">
  <version epoch="0" ver="1.16.0" rel="150400.11.3.1"/>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups; update summaries.
  Remove useless --with-pic which is only for static libs.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Add cairo-pdf-fixes.patch: Three minor pdf fixes from upstream
  git (fdo#99630).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Rebase cairo-pdf-fixes.patch: Add commit to fix fdo#100029.</changelog>
  <changelog author="alarrosa@suse.com" date="1496836800">- Add cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff to
  fix a segfault in get_bitmap_surface due to malformed font
  (bsc#1036789, fdo#100763, CVE-2017-7475).</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.15.6:
  + Detect if variable fonts have synthesized bold/italic or
    non-default variants, and use a fallback font where needed.
  + Restore MacOSX 10.4 support. Cairo had dropped 10.4 support
    when moving to the CoreText API.  Now we automatically detect
    which API to use via dynamic linking, so can resume supporting
    this older version of MacOSX.
  + Fix error reporting in the xcb backend if fallback fails.
    Instead of returning NULL when the X11 server can't do some
    operation, return a surface in an error state.
  + Call XSync in the xlib backend before setting the error handler
    to ignore errors for certain requests, to make sure all pending
    errors are handled first.
  + Fix text-glyph-range for quartz-font.  Use 0xFFFF instead of 0
    for invalid index tracking.
  + Fix handling of Supplementary Multilingual Plane (SMP) Unicode
    characters in quartz-font.
  + Fix various issues in the drm backend including updating API
    usage and general code cleanup.
  + Clarify documentation regarding device scale inheritance and
    the units used in cairo_surface_create_similar_image
    (fdo#99094).
- Drop cairo-pdf-fixes.patch: Fixed upstream.
- Add cairo-fix-off-by-one-check.patch: Fix off by one check in
  cairo-image-info.c (fdo#101427).</changelog>
  <changelog author="alarrosa@suse.com" date="1497960000">- Add 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch to
  fix a segfault when using &gt;4GB images since int values were used
  for pointer operations (bsc#1007255, fdo#98165, CVE-2016-9082).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504094400">- Update to version 1.15.8:
  + This small snapshot provides new colored emoji glyph support,
    and a handful of minor fixes. For a complete log of changes,
    please see
    http://cairographics.org/releases/ChangeLog.1.15.8
  + Features and Enhancements: Support colored emoji glyphs, stored
    as PNG images in OpenType fonts.
  + Bug Fixes:
  - pdf:
    . Fix internal links pointing to other pages, by
    pre-calculating page heights so that link positions can be
    calculated more accurately.
    . Don't emit /PageLabel dict when no labels defined.
  - image: Fix crash on negative lengths.
  - win32: Fix initialization of mutexes for static builds.
  - font:
    . Fix color font loading on big-endian systems.
    . Fix color font support infinite-loop with empty glyphs.
  - Fix off by one check in cairo-image-info.c.
- Drop cairo-fix-off-by-one-check.patch: Fixed upstream.
- Run spec-cleaner, modernize spec.
- Rename 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch
  to cairo-image-prevent-invalid-ptr-access.patch.
- Pass enable-gtk-doc instead of disable-gtk-doc to configure, we
  already have the gtk-doc BuildRequires in place so I can only
  assume that this was an honest error.</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig(gl) and pkgconfig(egl) instead of Mesa-devel.
  * The pkgconfig(gl) and pkgconfig(egl) are what cairo really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523534400">- Update to version 1.15.12:
  + The main focus for this release is the addition of Variable
    Font support. Variable fonts are single font files with various
    typography characteristics, such as weight or slant, that users
    of the font can adjust between two points. Effectively this
    enables a single font to behave as multiple fonts.
  + The Skia backend is disabled in this release, due to severe
    bitrot, and will be removed in future releases. Contact the
    cairo team if you have a need of this backend.
  + Features and Enhancements:
  - Variable font support.
  - Skia backend is disabled.
  + API Changes: cairo_font_options_get_variations() and
    cairo_font_options_set_variations() are added.
  + Bugs fixed:
  - Fix errors in csi-trace --help and --version options.
  - Fix a 'memory leak' in the image compositor, with
    pixman_glyph_cache_t.
  - Fix access of uninitialized memory found by valgrind
    (fdo#91271).
  - Fix improper initialization of memory in
    _cairo_ft_font_face_create_for_pattern() (fdo#105084).
  - Fix multi-monitor virtual desktop with negative coords on
    Win32 (fdo#100793).
  - Fix issues occuring with older FreeType versions.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524571200">- Add cairo-fix-assertion-failure-in-freetype-backend.patch: Fix
  assertion failure in the freetype backend (fdo#105746).</changelog>
  <changelog author="qzheng@suse.com" date="1529496000">- Add cairo-CVE-2017-9814.patch: Replace malloc with _cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538740800">- Update to version 1.15.14:
  + Features and Enhancements:
  - Add more FreeeType font color conversions to support
    COLR/CPAL.
  - Update test reference images against current pixman.
  + Bugs fixed:
  - Fix crash when rendering Microsoft's Segoe UI Emoji Regular
    font.
  - Fix build breakage with glesv3 enabled due to non-existant
    glesv3.pc.
  - Fix memory leaks found by Coverity.
  - Fix incorrect null ptr handling found by Coverity.
  - Fix test compilation when font-config is disabled.
  - Use _cairo_malloc instead of malloc
    (fdo#101547, CVE-2017-9814).
  - Fix assertion failure in the freetype backend (fdo#105746).
- Drop upstream fixed patches:
  + cairo-fix-assertion-failure-in-freetype-backend.patch.
  + cairo-CVE-2017-9814.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540123200">- Update to version 1.16.0:
  + test: Free resources in pdf2png.
  + Drop skia backend.
  + Revert "Correctly decode Adobe CMYK JPEGs in PDF export".</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567598400">- Add 2 upstream bug fix patches:
  + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch:
    ft: Use FT_Done_MM_Var instead of free when available in
    cairo_ft_apply_variations. Fixes a crash when using freetype
    &gt;= 2.9
  + cairo-composite_color_glyphs.patch: Fix a thinko in
    composite_color_glyphs. We can't just move around the contents
    of the passed-in string, we need to make a copy. This was
    showing up as memory corruption in pango.</changelog>
  <changelog author="mwilck@suse.com" date="1582459200">- Add an upstream bug fix
  + cairo-pdf-add-missing-flush.patch: Fixes PDF generation
    see https://gitlab.freedesktop.org/cairo/cairo/issues/342</changelog>
  <changelog author="rpm@fthiessen.de" date="1634904000">- Add upstream patch
  + cairo-do-not-override-explicitly-requested-grayscale-aa.patch
    Do not replace explicitly set applications settings by user
    settings for font antialiasing.
    See: https://gitlab.freedesktop.org/cairo/cairo/-/merge_requests/114</changelog>
  <changelog author="mgorse@suse.com" date="1714996800">- Add cairo-fix-infinite-loop-bsc1122321-CVE-2019-6462.patch: This
  fixes a potentially infinite loop (bsc#1122321, CVE-2019-6462,
  glfo#cairo/cairo#155).</changelog>
</package>
<package pkgid="2abc0b0334d88dc61fb3f974e6643cd9f6b85e6cd7e4a63f6465fdb64cb5a78b" name="libcairo2" arch="s390x">
  <version epoch="0" ver="1.16.0" rel="150400.11.3.1"/>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups; update summaries.
  Remove useless --with-pic which is only for static libs.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Add cairo-pdf-fixes.patch: Three minor pdf fixes from upstream
  git (fdo#99630).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Rebase cairo-pdf-fixes.patch: Add commit to fix fdo#100029.</changelog>
  <changelog author="alarrosa@suse.com" date="1496836800">- Add cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff to
  fix a segfault in get_bitmap_surface due to malformed font
  (bsc#1036789, fdo#100763, CVE-2017-7475).</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.15.6:
  + Detect if variable fonts have synthesized bold/italic or
    non-default variants, and use a fallback font where needed.
  + Restore MacOSX 10.4 support. Cairo had dropped 10.4 support
    when moving to the CoreText API.  Now we automatically detect
    which API to use via dynamic linking, so can resume supporting
    this older version of MacOSX.
  + Fix error reporting in the xcb backend if fallback fails.
    Instead of returning NULL when the X11 server can't do some
    operation, return a surface in an error state.
  + Call XSync in the xlib backend before setting the error handler
    to ignore errors for certain requests, to make sure all pending
    errors are handled first.
  + Fix text-glyph-range for quartz-font.  Use 0xFFFF instead of 0
    for invalid index tracking.
  + Fix handling of Supplementary Multilingual Plane (SMP) Unicode
    characters in quartz-font.
  + Fix various issues in the drm backend including updating API
    usage and general code cleanup.
  + Clarify documentation regarding device scale inheritance and
    the units used in cairo_surface_create_similar_image
    (fdo#99094).
- Drop cairo-pdf-fixes.patch: Fixed upstream.
- Add cairo-fix-off-by-one-check.patch: Fix off by one check in
  cairo-image-info.c (fdo#101427).</changelog>
  <changelog author="alarrosa@suse.com" date="1497960000">- Add 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch to
  fix a segfault when using &gt;4GB images since int values were used
  for pointer operations (bsc#1007255, fdo#98165, CVE-2016-9082).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504094400">- Update to version 1.15.8:
  + This small snapshot provides new colored emoji glyph support,
    and a handful of minor fixes. For a complete log of changes,
    please see
    http://cairographics.org/releases/ChangeLog.1.15.8
  + Features and Enhancements: Support colored emoji glyphs, stored
    as PNG images in OpenType fonts.
  + Bug Fixes:
  - pdf:
    . Fix internal links pointing to other pages, by
    pre-calculating page heights so that link positions can be
    calculated more accurately.
    . Don't emit /PageLabel dict when no labels defined.
  - image: Fix crash on negative lengths.
  - win32: Fix initialization of mutexes for static builds.
  - font:
    . Fix color font loading on big-endian systems.
    . Fix color font support infinite-loop with empty glyphs.
  - Fix off by one check in cairo-image-info.c.
- Drop cairo-fix-off-by-one-check.patch: Fixed upstream.
- Run spec-cleaner, modernize spec.
- Rename 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch
  to cairo-image-prevent-invalid-ptr-access.patch.
- Pass enable-gtk-doc instead of disable-gtk-doc to configure, we
  already have the gtk-doc BuildRequires in place so I can only
  assume that this was an honest error.</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig(gl) and pkgconfig(egl) instead of Mesa-devel.
  * The pkgconfig(gl) and pkgconfig(egl) are what cairo really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523534400">- Update to version 1.15.12:
  + The main focus for this release is the addition of Variable
    Font support. Variable fonts are single font files with various
    typography characteristics, such as weight or slant, that users
    of the font can adjust between two points. Effectively this
    enables a single font to behave as multiple fonts.
  + The Skia backend is disabled in this release, due to severe
    bitrot, and will be removed in future releases. Contact the
    cairo team if you have a need of this backend.
  + Features and Enhancements:
  - Variable font support.
  - Skia backend is disabled.
  + API Changes: cairo_font_options_get_variations() and
    cairo_font_options_set_variations() are added.
  + Bugs fixed:
  - Fix errors in csi-trace --help and --version options.
  - Fix a 'memory leak' in the image compositor, with
    pixman_glyph_cache_t.
  - Fix access of uninitialized memory found by valgrind
    (fdo#91271).
  - Fix improper initialization of memory in
    _cairo_ft_font_face_create_for_pattern() (fdo#105084).
  - Fix multi-monitor virtual desktop with negative coords on
    Win32 (fdo#100793).
  - Fix issues occuring with older FreeType versions.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524571200">- Add cairo-fix-assertion-failure-in-freetype-backend.patch: Fix
  assertion failure in the freetype backend (fdo#105746).</changelog>
  <changelog author="qzheng@suse.com" date="1529496000">- Add cairo-CVE-2017-9814.patch: Replace malloc with _cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538740800">- Update to version 1.15.14:
  + Features and Enhancements:
  - Add more FreeeType font color conversions to support
    COLR/CPAL.
  - Update test reference images against current pixman.
  + Bugs fixed:
  - Fix crash when rendering Microsoft's Segoe UI Emoji Regular
    font.
  - Fix build breakage with glesv3 enabled due to non-existant
    glesv3.pc.
  - Fix memory leaks found by Coverity.
  - Fix incorrect null ptr handling found by Coverity.
  - Fix test compilation when font-config is disabled.
  - Use _cairo_malloc instead of malloc
    (fdo#101547, CVE-2017-9814).
  - Fix assertion failure in the freetype backend (fdo#105746).
- Drop upstream fixed patches:
  + cairo-fix-assertion-failure-in-freetype-backend.patch.
  + cairo-CVE-2017-9814.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540123200">- Update to version 1.16.0:
  + test: Free resources in pdf2png.
  + Drop skia backend.
  + Revert "Correctly decode Adobe CMYK JPEGs in PDF export".</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567598400">- Add 2 upstream bug fix patches:
  + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch:
    ft: Use FT_Done_MM_Var instead of free when available in
    cairo_ft_apply_variations. Fixes a crash when using freetype
    &gt;= 2.9
  + cairo-composite_color_glyphs.patch: Fix a thinko in
    composite_color_glyphs. We can't just move around the contents
    of the passed-in string, we need to make a copy. This was
    showing up as memory corruption in pango.</changelog>
  <changelog author="mwilck@suse.com" date="1582459200">- Add an upstream bug fix
  + cairo-pdf-add-missing-flush.patch: Fixes PDF generation
    see https://gitlab.freedesktop.org/cairo/cairo/issues/342</changelog>
  <changelog author="rpm@fthiessen.de" date="1634904000">- Add upstream patch
  + cairo-do-not-override-explicitly-requested-grayscale-aa.patch
    Do not replace explicitly set applications settings by user
    settings for font antialiasing.
    See: https://gitlab.freedesktop.org/cairo/cairo/-/merge_requests/114</changelog>
  <changelog author="mgorse@suse.com" date="1714996800">- Add cairo-fix-infinite-loop-bsc1122321-CVE-2019-6462.patch: This
  fixes a potentially infinite loop (bsc#1122321, CVE-2019-6462,
  glfo#cairo/cairo#155).</changelog>
</package>
<package pkgid="1dbc7e69e28e0a268cc016fffe2d9f4f76015bd18a3c11fa0b0776026d82ba01" name="libcairo2" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="150400.11.3.1"/>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups; update summaries.
  Remove useless --with-pic which is only for static libs.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Add cairo-pdf-fixes.patch: Three minor pdf fixes from upstream
  git (fdo#99630).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Rebase cairo-pdf-fixes.patch: Add commit to fix fdo#100029.</changelog>
  <changelog author="alarrosa@suse.com" date="1496836800">- Add cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff to
  fix a segfault in get_bitmap_surface due to malformed font
  (bsc#1036789, fdo#100763, CVE-2017-7475).</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.15.6:
  + Detect if variable fonts have synthesized bold/italic or
    non-default variants, and use a fallback font where needed.
  + Restore MacOSX 10.4 support. Cairo had dropped 10.4 support
    when moving to the CoreText API.  Now we automatically detect
    which API to use via dynamic linking, so can resume supporting
    this older version of MacOSX.
  + Fix error reporting in the xcb backend if fallback fails.
    Instead of returning NULL when the X11 server can't do some
    operation, return a surface in an error state.
  + Call XSync in the xlib backend before setting the error handler
    to ignore errors for certain requests, to make sure all pending
    errors are handled first.
  + Fix text-glyph-range for quartz-font.  Use 0xFFFF instead of 0
    for invalid index tracking.
  + Fix handling of Supplementary Multilingual Plane (SMP) Unicode
    characters in quartz-font.
  + Fix various issues in the drm backend including updating API
    usage and general code cleanup.
  + Clarify documentation regarding device scale inheritance and
    the units used in cairo_surface_create_similar_image
    (fdo#99094).
- Drop cairo-pdf-fixes.patch: Fixed upstream.
- Add cairo-fix-off-by-one-check.patch: Fix off by one check in
  cairo-image-info.c (fdo#101427).</changelog>
  <changelog author="alarrosa@suse.com" date="1497960000">- Add 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch to
  fix a segfault when using &gt;4GB images since int values were used
  for pointer operations (bsc#1007255, fdo#98165, CVE-2016-9082).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504094400">- Update to version 1.15.8:
  + This small snapshot provides new colored emoji glyph support,
    and a handful of minor fixes. For a complete log of changes,
    please see
    http://cairographics.org/releases/ChangeLog.1.15.8
  + Features and Enhancements: Support colored emoji glyphs, stored
    as PNG images in OpenType fonts.
  + Bug Fixes:
  - pdf:
    . Fix internal links pointing to other pages, by
    pre-calculating page heights so that link positions can be
    calculated more accurately.
    . Don't emit /PageLabel dict when no labels defined.
  - image: Fix crash on negative lengths.
  - win32: Fix initialization of mutexes for static builds.
  - font:
    . Fix color font loading on big-endian systems.
    . Fix color font support infinite-loop with empty glyphs.
  - Fix off by one check in cairo-image-info.c.
- Drop cairo-fix-off-by-one-check.patch: Fixed upstream.
- Run spec-cleaner, modernize spec.
- Rename 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch
  to cairo-image-prevent-invalid-ptr-access.patch.
- Pass enable-gtk-doc instead of disable-gtk-doc to configure, we
  already have the gtk-doc BuildRequires in place so I can only
  assume that this was an honest error.</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig(gl) and pkgconfig(egl) instead of Mesa-devel.
  * The pkgconfig(gl) and pkgconfig(egl) are what cairo really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523534400">- Update to version 1.15.12:
  + The main focus for this release is the addition of Variable
    Font support. Variable fonts are single font files with various
    typography characteristics, such as weight or slant, that users
    of the font can adjust between two points. Effectively this
    enables a single font to behave as multiple fonts.
  + The Skia backend is disabled in this release, due to severe
    bitrot, and will be removed in future releases. Contact the
    cairo team if you have a need of this backend.
  + Features and Enhancements:
  - Variable font support.
  - Skia backend is disabled.
  + API Changes: cairo_font_options_get_variations() and
    cairo_font_options_set_variations() are added.
  + Bugs fixed:
  - Fix errors in csi-trace --help and --version options.
  - Fix a 'memory leak' in the image compositor, with
    pixman_glyph_cache_t.
  - Fix access of uninitialized memory found by valgrind
    (fdo#91271).
  - Fix improper initialization of memory in
    _cairo_ft_font_face_create_for_pattern() (fdo#105084).
  - Fix multi-monitor virtual desktop with negative coords on
    Win32 (fdo#100793).
  - Fix issues occuring with older FreeType versions.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524571200">- Add cairo-fix-assertion-failure-in-freetype-backend.patch: Fix
  assertion failure in the freetype backend (fdo#105746).</changelog>
  <changelog author="qzheng@suse.com" date="1529496000">- Add cairo-CVE-2017-9814.patch: Replace malloc with _cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538740800">- Update to version 1.15.14:
  + Features and Enhancements:
  - Add more FreeeType font color conversions to support
    COLR/CPAL.
  - Update test reference images against current pixman.
  + Bugs fixed:
  - Fix crash when rendering Microsoft's Segoe UI Emoji Regular
    font.
  - Fix build breakage with glesv3 enabled due to non-existant
    glesv3.pc.
  - Fix memory leaks found by Coverity.
  - Fix incorrect null ptr handling found by Coverity.
  - Fix test compilation when font-config is disabled.
  - Use _cairo_malloc instead of malloc
    (fdo#101547, CVE-2017-9814).
  - Fix assertion failure in the freetype backend (fdo#105746).
- Drop upstream fixed patches:
  + cairo-fix-assertion-failure-in-freetype-backend.patch.
  + cairo-CVE-2017-9814.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540123200">- Update to version 1.16.0:
  + test: Free resources in pdf2png.
  + Drop skia backend.
  + Revert "Correctly decode Adobe CMYK JPEGs in PDF export".</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567598400">- Add 2 upstream bug fix patches:
  + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch:
    ft: Use FT_Done_MM_Var instead of free when available in
    cairo_ft_apply_variations. Fixes a crash when using freetype
    &gt;= 2.9
  + cairo-composite_color_glyphs.patch: Fix a thinko in
    composite_color_glyphs. We can't just move around the contents
    of the passed-in string, we need to make a copy. This was
    showing up as memory corruption in pango.</changelog>
  <changelog author="mwilck@suse.com" date="1582459200">- Add an upstream bug fix
  + cairo-pdf-add-missing-flush.patch: Fixes PDF generation
    see https://gitlab.freedesktop.org/cairo/cairo/issues/342</changelog>
  <changelog author="rpm@fthiessen.de" date="1634904000">- Add upstream patch
  + cairo-do-not-override-explicitly-requested-grayscale-aa.patch
    Do not replace explicitly set applications settings by user
    settings for font antialiasing.
    See: https://gitlab.freedesktop.org/cairo/cairo/-/merge_requests/114</changelog>
  <changelog author="mgorse@suse.com" date="1714996800">- Add cairo-fix-infinite-loop-bsc1122321-CVE-2019-6462.patch: This
  fixes a potentially infinite loop (bsc#1122321, CVE-2019-6462,
  glfo#cairo/cairo#155).</changelog>
</package>
<package pkgid="b4ece0caea3c1c59b38dac3407ff62980ae08ad77cbeb2637296a6dea1a6391c" name="libcares2" arch="aarch64">
  <version epoch="0" ver="1.19.1" rel="150000.3.26.1"/>
  <changelog author="mrostecki@opensuse.org" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="tchvatal@suse.com" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="toddrme2178@gmail.com" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="adam.majer@suse.de" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="elimat@opensuse.org" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="tchvatal@suse.com" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="adam.majer@suse.de" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="adam.majer@suse.de" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="mrueckert@suse.de" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="dmueller@suse.com" date="1610798400">- update to 1.17.1:
    Travis: add iOS target built with CMake (#378)
    Issue #377 suggested that CMake builds for iOS with c-ares were broken. This PR adds an automatic Travis build for iOS CMake.
  - fix build
    External projects were using non-public header ares_dns.h, make public again (#376)
    It appears some outside projects were relying on macros in ares_dns.h, even
    though it doesn't appear that header was ever meant to be public.  That said,
    we don't want to break external integrators so we should distribute this header
    again.
  - note that so versioning has moved to configure.ac
  - note about 1.17.1
  - fix sed gone wrong
    autotools cleanup (#372)
  * buildconf: remove custom logic with autoreconf
- remove missing_header.patch (upstream)</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 1.17.2:
  Security:
  * When building c-ares with CMake, the RANDOM_FILE would not be set
    and therefore downgrade to the less secure random number generator
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause a crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as per
    RFC1035 5.1 to prevent spoofing follow-up
    (bsc#1188881, CVE-2021-3672)
  * Perform validation on hostnames to prevent possible XSS
    due to applications not performing valiation themselves
  Changes:
  * ares_malloc(0) is now defined behavior (returns NULL) rather than system-specific to catch edge cases
  Bug fixes:
  * Building tests should not force building of static libraries except on Windows
  * Relative headers must use double quotes to prevent pulling in a system library
  for details see,
  https://c-ares.haxx.se/changelog.html#1_17_2</changelog>
  <changelog author="adam.majer@suse.de" date="1631102400">- 5c995d5.patch: augment input validation on hostnames to allow _
  as part of DNS response (bsc#1190225)</changelog>
  <changelog author="adam.majer@suse.de" date="1631188800">- new upstream website
- drop multibuild - tests do not require static library anymore
- spec file cleanup
- drop sources that were re-added to upstream distibution
  (c-ares-config.cmake.in ares_dns.h libcares.pc.cmake)</changelog>
  <changelog author="adam.majer@suse.de" date="1638878400">- update to 1.18.1. Changes since 1.17.2:
  * Allow '/' as a valid character for a returned name for
    CNAME in-addr.arpa delegation
  * no longer forwards requests for localhost resolution per RFC6761
  * During a domain search, treat ARES_ENODATA as ARES_NXDOMAIN so
    that the search process will continue to the next domain
    in the search.
  * Provide ares_nameser.h as a public interface as needed by NodeJS
  * Add support for URI(Uniform Resource Identifier) records via
    ares_parse_uri_reply()
- disable unit tests for SLE12 since GCC compiler too old to build
  unit tests
- 5c995d5.patch: upstreamed
- disable-live-tests.patch: refreshed</changelog>
  <changelog author="mardnh@gmx.de" date="1674993600">- Update to version 1.19.0
  Security:
  * Low. Stack overflow in ares_set_sortlist() which is used
    during c-ares initialization and typically provided by an
    administrator and not an end user.
    (bsc#1208067, CVE-2022-4904)
  Changes:
  * Add ARES_OPT_HOSTS_FILE similar to ARES_OPT_RESOLVCONF for
    specifying a custom hosts file location.
  Bug fixes:
  * Fix memory leak in reading /etc/hosts when using localhost
    fallback.
  * Fix chain building c-ares when libresolv is already included by
    another project.
  * File lookup should not immediately abort as there may be other
    tries due to search criteria.
  * Asterisks should be allowed in host validation as CNAMEs may
    reference wildcard domains.
  * AutoTools build system referenced bad STDC_HEADERS macro.
  * Even if one address class returns a failure for
    ares_getaddrinfo() we should still return the results we have.
  * Fix ares_getaddrinfo() numerical address resolution with
    AF_UNSPEC
  * Fix tools and help information.
  * Various documentation fixes and cleanups.
  * Add include guards to ares_data.h
  * c-ares could try to exceed maximum number of iovec entries
    supported by system.
  * The RFC6761 6.3 states localhost subdomains must be offline too</changelog>
  <changelog author="adam.majer@suse.de" date="1684756800">- Update to version 1.19.1
  Security:
  * CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
  * CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
  * CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
  * CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
  Bug fixes:
  * Fix uninitialized memory warning in test
  * ares_getaddrinfo() should allow a port of 0
  * Fix memory leak in ares_send() on error
  * Fix comment style in ares_data.h
  * Fix typo in ares_init_options.3
  * Sync ax_pthread.m4 with upstream
  * Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support</changelog>
  <changelog author="adam.majer@suse.de" date="1708948800">- CVE-2024-25629.patch: fix out of bounds read in ares__read_line()
  (bsc#1220279, CVE-2024-25629)</changelog>
</package>
<package pkgid="57dad7cb1f1170c3c0459ef3464a3a5f50e78da2d43e8b214b015203892c2c0c" name="libcares2" arch="s390x">
  <version epoch="0" ver="1.19.1" rel="150000.3.26.1"/>
  <changelog author="mrostecki@opensuse.org" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="tchvatal@suse.com" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="toddrme2178@gmail.com" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="adam.majer@suse.de" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="elimat@opensuse.org" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="tchvatal@suse.com" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="adam.majer@suse.de" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="adam.majer@suse.de" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="mrueckert@suse.de" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="dmueller@suse.com" date="1610798400">- update to 1.17.1:
    Travis: add iOS target built with CMake (#378)
    Issue #377 suggested that CMake builds for iOS with c-ares were broken. This PR adds an automatic Travis build for iOS CMake.
  - fix build
    External projects were using non-public header ares_dns.h, make public again (#376)
    It appears some outside projects were relying on macros in ares_dns.h, even
    though it doesn't appear that header was ever meant to be public.  That said,
    we don't want to break external integrators so we should distribute this header
    again.
  - note that so versioning has moved to configure.ac
  - note about 1.17.1
  - fix sed gone wrong
    autotools cleanup (#372)
  * buildconf: remove custom logic with autoreconf
- remove missing_header.patch (upstream)</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 1.17.2:
  Security:
  * When building c-ares with CMake, the RANDOM_FILE would not be set
    and therefore downgrade to the less secure random number generator
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause a crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as per
    RFC1035 5.1 to prevent spoofing follow-up
    (bsc#1188881, CVE-2021-3672)
  * Perform validation on hostnames to prevent possible XSS
    due to applications not performing valiation themselves
  Changes:
  * ares_malloc(0) is now defined behavior (returns NULL) rather than system-specific to catch edge cases
  Bug fixes:
  * Building tests should not force building of static libraries except on Windows
  * Relative headers must use double quotes to prevent pulling in a system library
  for details see,
  https://c-ares.haxx.se/changelog.html#1_17_2</changelog>
  <changelog author="adam.majer@suse.de" date="1631102400">- 5c995d5.patch: augment input validation on hostnames to allow _
  as part of DNS response (bsc#1190225)</changelog>
  <changelog author="adam.majer@suse.de" date="1631188800">- new upstream website
- drop multibuild - tests do not require static library anymore
- spec file cleanup
- drop sources that were re-added to upstream distibution
  (c-ares-config.cmake.in ares_dns.h libcares.pc.cmake)</changelog>
  <changelog author="adam.majer@suse.de" date="1638878400">- update to 1.18.1. Changes since 1.17.2:
  * Allow '/' as a valid character for a returned name for
    CNAME in-addr.arpa delegation
  * no longer forwards requests for localhost resolution per RFC6761
  * During a domain search, treat ARES_ENODATA as ARES_NXDOMAIN so
    that the search process will continue to the next domain
    in the search.
  * Provide ares_nameser.h as a public interface as needed by NodeJS
  * Add support for URI(Uniform Resource Identifier) records via
    ares_parse_uri_reply()
- disable unit tests for SLE12 since GCC compiler too old to build
  unit tests
- 5c995d5.patch: upstreamed
- disable-live-tests.patch: refreshed</changelog>
  <changelog author="mardnh@gmx.de" date="1674993600">- Update to version 1.19.0
  Security:
  * Low. Stack overflow in ares_set_sortlist() which is used
    during c-ares initialization and typically provided by an
    administrator and not an end user.
    (bsc#1208067, CVE-2022-4904)
  Changes:
  * Add ARES_OPT_HOSTS_FILE similar to ARES_OPT_RESOLVCONF for
    specifying a custom hosts file location.
  Bug fixes:
  * Fix memory leak in reading /etc/hosts when using localhost
    fallback.
  * Fix chain building c-ares when libresolv is already included by
    another project.
  * File lookup should not immediately abort as there may be other
    tries due to search criteria.
  * Asterisks should be allowed in host validation as CNAMEs may
    reference wildcard domains.
  * AutoTools build system referenced bad STDC_HEADERS macro.
  * Even if one address class returns a failure for
    ares_getaddrinfo() we should still return the results we have.
  * Fix ares_getaddrinfo() numerical address resolution with
    AF_UNSPEC
  * Fix tools and help information.
  * Various documentation fixes and cleanups.
  * Add include guards to ares_data.h
  * c-ares could try to exceed maximum number of iovec entries
    supported by system.
  * The RFC6761 6.3 states localhost subdomains must be offline too</changelog>
  <changelog author="adam.majer@suse.de" date="1684756800">- Update to version 1.19.1
  Security:
  * CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
  * CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
  * CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
  * CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
  Bug fixes:
  * Fix uninitialized memory warning in test
  * ares_getaddrinfo() should allow a port of 0
  * Fix memory leak in ares_send() on error
  * Fix comment style in ares_data.h
  * Fix typo in ares_init_options.3
  * Sync ax_pthread.m4 with upstream
  * Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support</changelog>
  <changelog author="adam.majer@suse.de" date="1708948800">- CVE-2024-25629.patch: fix out of bounds read in ares__read_line()
  (bsc#1220279, CVE-2024-25629)</changelog>
</package>
<package pkgid="f8875fb258482a710bcd87f5321b259eda728d49b9e96858b16ba8cb47bd8474" name="libcares2" arch="x86_64">
  <version epoch="0" ver="1.19.1" rel="150000.3.26.1"/>
  <changelog author="mrostecki@opensuse.org" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="tchvatal@suse.com" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="toddrme2178@gmail.com" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="adam.majer@suse.de" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="elimat@opensuse.org" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="tchvatal@suse.com" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="adam.majer@suse.de" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="adam.majer@suse.de" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="mrueckert@suse.de" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="dmueller@suse.com" date="1610798400">- update to 1.17.1:
    Travis: add iOS target built with CMake (#378)
    Issue #377 suggested that CMake builds for iOS with c-ares were broken. This PR adds an automatic Travis build for iOS CMake.
  - fix build
    External projects were using non-public header ares_dns.h, make public again (#376)
    It appears some outside projects were relying on macros in ares_dns.h, even
    though it doesn't appear that header was ever meant to be public.  That said,
    we don't want to break external integrators so we should distribute this header
    again.
  - note that so versioning has moved to configure.ac
  - note about 1.17.1
  - fix sed gone wrong
    autotools cleanup (#372)
  * buildconf: remove custom logic with autoreconf
- remove missing_header.patch (upstream)</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 1.17.2:
  Security:
  * When building c-ares with CMake, the RANDOM_FILE would not be set
    and therefore downgrade to the less secure random number generator
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause a crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as per
    RFC1035 5.1 to prevent spoofing follow-up
    (bsc#1188881, CVE-2021-3672)
  * Perform validation on hostnames to prevent possible XSS
    due to applications not performing valiation themselves
  Changes:
  * ares_malloc(0) is now defined behavior (returns NULL) rather than system-specific to catch edge cases
  Bug fixes:
  * Building tests should not force building of static libraries except on Windows
  * Relative headers must use double quotes to prevent pulling in a system library
  for details see,
  https://c-ares.haxx.se/changelog.html#1_17_2</changelog>
  <changelog author="adam.majer@suse.de" date="1631102400">- 5c995d5.patch: augment input validation on hostnames to allow _
  as part of DNS response (bsc#1190225)</changelog>
  <changelog author="adam.majer@suse.de" date="1631188800">- new upstream website
- drop multibuild - tests do not require static library anymore
- spec file cleanup
- drop sources that were re-added to upstream distibution
  (c-ares-config.cmake.in ares_dns.h libcares.pc.cmake)</changelog>
  <changelog author="adam.majer@suse.de" date="1638878400">- update to 1.18.1. Changes since 1.17.2:
  * Allow '/' as a valid character for a returned name for
    CNAME in-addr.arpa delegation
  * no longer forwards requests for localhost resolution per RFC6761
  * During a domain search, treat ARES_ENODATA as ARES_NXDOMAIN so
    that the search process will continue to the next domain
    in the search.
  * Provide ares_nameser.h as a public interface as needed by NodeJS
  * Add support for URI(Uniform Resource Identifier) records via
    ares_parse_uri_reply()
- disable unit tests for SLE12 since GCC compiler too old to build
  unit tests
- 5c995d5.patch: upstreamed
- disable-live-tests.patch: refreshed</changelog>
  <changelog author="mardnh@gmx.de" date="1674993600">- Update to version 1.19.0
  Security:
  * Low. Stack overflow in ares_set_sortlist() which is used
    during c-ares initialization and typically provided by an
    administrator and not an end user.
    (bsc#1208067, CVE-2022-4904)
  Changes:
  * Add ARES_OPT_HOSTS_FILE similar to ARES_OPT_RESOLVCONF for
    specifying a custom hosts file location.
  Bug fixes:
  * Fix memory leak in reading /etc/hosts when using localhost
    fallback.
  * Fix chain building c-ares when libresolv is already included by
    another project.
  * File lookup should not immediately abort as there may be other
    tries due to search criteria.
  * Asterisks should be allowed in host validation as CNAMEs may
    reference wildcard domains.
  * AutoTools build system referenced bad STDC_HEADERS macro.
  * Even if one address class returns a failure for
    ares_getaddrinfo() we should still return the results we have.
  * Fix ares_getaddrinfo() numerical address resolution with
    AF_UNSPEC
  * Fix tools and help information.
  * Various documentation fixes and cleanups.
  * Add include guards to ares_data.h
  * c-ares could try to exceed maximum number of iovec entries
    supported by system.
  * The RFC6761 6.3 states localhost subdomains must be offline too</changelog>
  <changelog author="adam.majer@suse.de" date="1684756800">- Update to version 1.19.1
  Security:
  * CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
  * CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
  * CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
  * CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
  Bug fixes:
  * Fix uninitialized memory warning in test
  * ares_getaddrinfo() should allow a port of 0
  * Fix memory leak in ares_send() on error
  * Fix comment style in ares_data.h
  * Fix typo in ares_init_options.3
  * Sync ax_pthread.m4 with upstream
  * Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support</changelog>
  <changelog author="adam.majer@suse.de" date="1708948800">- CVE-2024-25629.patch: fix out of bounds read in ares__read_line()
  (bsc#1220279, CVE-2024-25629)</changelog>
</package>
<package pkgid="17e395dc9818c6fd009c243bcf1788baa44aa396cb57dfeacd9d82888229b4dc" name="libcom_err2" arch="aarch64">
  <version epoch="0" ver="1.46.4" rel="150400.3.6.2"/>
  <changelog author="jack@suse.cz" date="1559304000">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
  <changelog author="jack@suse.cz" date="1716552000">EA Inode handling fixes:
- ext2fs-avoid-re-reading-inode-multiple-times.patch: ext2fs: avoid re-reading
  inode multiple times (bsc#1223596)
- e2fsck-fix-potential-out-of-bounds-read-in-inc_ea_in.patch: e2fsck: fix
  potential out-of-bounds read in inc_ea_inode_refs() (bsc#1223596)
- e2fsck-add-more-checks-for-ea-inode-consistency.patch: e2fsck: add more
  checks for ea inode consistency (bsc#1223596)
- e2fsck-fix-golden-output-of-several-tests.patch: e2fsck: fix golden output of
  several tests (bsc#1223596)</changelog>
</package>
<package pkgid="7e7ac04e24f329c81b0b748f9cb02ce9bcaf2a9de3a49d45ed83b12877e8c8da" name="libcom_err2" arch="s390x">
  <version epoch="0" ver="1.46.4" rel="150400.3.6.2"/>
  <changelog author="jack@suse.cz" date="1559304000">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
  <changelog author="jack@suse.cz" date="1716552000">EA Inode handling fixes:
- ext2fs-avoid-re-reading-inode-multiple-times.patch: ext2fs: avoid re-reading
  inode multiple times (bsc#1223596)
- e2fsck-fix-potential-out-of-bounds-read-in-inc_ea_in.patch: e2fsck: fix
  potential out-of-bounds read in inc_ea_inode_refs() (bsc#1223596)
- e2fsck-add-more-checks-for-ea-inode-consistency.patch: e2fsck: add more
  checks for ea inode consistency (bsc#1223596)
- e2fsck-fix-golden-output-of-several-tests.patch: e2fsck: fix golden output of
  several tests (bsc#1223596)</changelog>
</package>
<package pkgid="e2b6057c5b447c9bd3fd0501e3884cc4619d771d592bdbaf06cb30b9b85d8bdb" name="libcom_err2" arch="x86_64">
  <version epoch="0" ver="1.46.4" rel="150400.3.6.2"/>
  <changelog author="jack@suse.cz" date="1559304000">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
  <changelog author="jack@suse.cz" date="1716552000">EA Inode handling fixes:
- ext2fs-avoid-re-reading-inode-multiple-times.patch: ext2fs: avoid re-reading
  inode multiple times (bsc#1223596)
- e2fsck-fix-potential-out-of-bounds-read-in-inc_ea_in.patch: e2fsck: fix
  potential out-of-bounds read in inc_ea_inode_refs() (bsc#1223596)
- e2fsck-add-more-checks-for-ea-inode-consistency.patch: e2fsck: add more
  checks for ea inode consistency (bsc#1223596)
- e2fsck-fix-golden-output-of-several-tests.patch: e2fsck: fix golden output of
  several tests (bsc#1223596)</changelog>
</package>
<package pkgid="8893ba61cac26dbf19cb9904f16d0a57caf5e69ff027530608ac75f3e5b1a63f" name="libcontainers-common" arch="noarch">
  <version epoch="0" ver="20230214" rel="150500.4.6.1"/>
  <changelog author="rbrown@suse.com" date="1654689600">- Add missing comma to previous change</changelog>
  <changelog author="dcermak@suse.com" date="1655208000">- Add missing Requires(post): sed, fixes boo#1200524
- Make %post compatible with dash</changelog>
  <changelog author="fvogt@suse.com" date="1655294400">- Use $() again in %post, but with a space for POSIX compliance</changelog>
  <changelog author="fcrozat@suse.com" date="1659528000">- Resync containers.conf / storage.conf with Fedora
- Create /etc/containers/registries.conf.d and
  add 000-shortnames.conf to it.</changelog>
  <changelog author="fvogt@suse.com" date="1660046400">- Fix obvious typo in containers.conf</changelog>
  <changelog author="dmueller@suse.com" date="1666699200">- set detached sigstore attachments for the SUSE controlled registries</changelog>
  <changelog author="dmueller@suse.com" date="1668081600">- postinstall script: slight cleanup, no functional change</changelog>
  <changelog author="dmueller@suse.com" date="1668686400">- add container-storage-driver.sh (bsc#1197093)</changelog>
  <changelog author="dcermak@suse.com" date="1669118400">- Update bundled common to 0.50.1
- Update bundled image to 5.23.1
- Update bundled storage to 1.44.0
- Drop bundled podman
- Bump version to 20221122
- Install container-storage-driver.sh in /etc/ on Leap &amp; SLE</changelog>
  <changelog author="dmueller@suse.com" date="1669636800">- add requires on util-linux-systemd for findmnt in profile script
- only set storage_driver env when no libpod exists
- avoid quoting issue</changelog>
  <changelog author="dcermak@suse.com" date="1670241600">- Remove registry.suse.com from search unqualified-search-registries:
  registry.suse.com responds very slowly to pagination repository listings
  (https://docs.docker.com/registry/spec/api/#pagination) and thereby causes
  every `podman search` to take over 90s. We have to remove it until this
  regression is fixed.</changelog>
  <changelog author="danish.prakash@suse.com" date="1673611200">- storage.conf: Unset 'driver' and set 'driver_priority' to
  allow podman to use 'btrfs' if available and fallback to
  'overlay' if not.
- .spec: rm %post script to set 'btrfs' as storage driver
  in storage.conf</changelog>
  <changelog author="danish.prakash@suse.com" date="1674648000">- Reverts https://build.opensuse.org/request/show/1060361
  Changes introduced to c/storage's storage.conf which adds
  a driver_priority attribute would break consumers of libcontainer-common
  as long as those packages are vendoring an older c/storage version.
  Instead of patching every consumer, we're reverting this change, until
  those packages have been updated downstream. [boo#1207509]</changelog>
  <changelog author="dcermak@suse.com" date="1676376000">- New upstream release 20230214
- bump c/storage to 1.45.3
- bump c/image to 5.24.1
- bump c/common to 0.51.0
- containers.conf:
  * add commented out options containers.read_only,
    engine.platform_to_oci_runtime, engine.events_container_create_inspect_data,
    network.volume_plugin_timeout, engine.runtimes.youki, machine.provider
  * remove deprecated setting containers.userns_size
  * add youki to engine.runtime_supports_json
- shortnames.conf: pull in latest upstream version
- storage.conf: add commented out option storage.transient_store
- correct license to APACHE-2.0 only (there's no GPLv3 code to be found)
- add source URLs to spec
- drop pointless copyright year</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add registry.suse.com to the unqualified-search-registries</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- Remove obsolete Requires(post): util-linux-systemd</changelog>
  <changelog author="dcermak@suse.com" date="1678881601">- Remove container-storage-driver.sh, we want to default to the overlay driver
  instead of btrfs.
  The btrfs driver is not really supported upstream (see
  e.g. https://github.com/containers/podman/issues/16882), there is no real
  development anymore and it appears to have subtle bugs (e.g. the one linked
  previously).
  To prevent further such issues, we will from now on default to the overlay
  driver.</changelog>
  <changelog author="fcrozat@suse.com" date="1682510400">- Own /etc/containers/systemd and /usr/share/containers/systemd,
  useful for podman quadlet.</changelog>
  <changelog author="danish.prakash@suse.com" date="1684238400">- Introduce new subpackage that adds SLE-specific mounts only
  on SLE systems (if sles-release) hence avoiding superfluous
  warnings on non-SLE systems while running podman commands.
  (bsc#1211124)</changelog>
  <changelog author="danish.prakash@suse.com" date="1694692800">- Require libcontainers-sles-mounts for *all* SLE products,
  and not just SLES. (bsc#1215291)</changelog>
</package>
<package pkgid="07169665905431ea879b032b5f85c1093a938d270154684030c210e3826d2183" name="libcontainers-common" arch="src">
  <version epoch="0" ver="20230214" rel="150500.4.6.1"/>
  <changelog author="rbrown@suse.com" date="1654689600">- Add missing comma to previous change</changelog>
  <changelog author="dcermak@suse.com" date="1655208000">- Add missing Requires(post): sed, fixes boo#1200524
- Make %post compatible with dash</changelog>
  <changelog author="fvogt@suse.com" date="1655294400">- Use $() again in %post, but with a space for POSIX compliance</changelog>
  <changelog author="fcrozat@suse.com" date="1659528000">- Resync containers.conf / storage.conf with Fedora
- Create /etc/containers/registries.conf.d and
  add 000-shortnames.conf to it.</changelog>
  <changelog author="fvogt@suse.com" date="1660046400">- Fix obvious typo in containers.conf</changelog>
  <changelog author="dmueller@suse.com" date="1666699200">- set detached sigstore attachments for the SUSE controlled registries</changelog>
  <changelog author="dmueller@suse.com" date="1668081600">- postinstall script: slight cleanup, no functional change</changelog>
  <changelog author="dmueller@suse.com" date="1668686400">- add container-storage-driver.sh (bsc#1197093)</changelog>
  <changelog author="dcermak@suse.com" date="1669118400">- Update bundled common to 0.50.1
- Update bundled image to 5.23.1
- Update bundled storage to 1.44.0
- Drop bundled podman
- Bump version to 20221122
- Install container-storage-driver.sh in /etc/ on Leap &amp; SLE</changelog>
  <changelog author="dmueller@suse.com" date="1669636800">- add requires on util-linux-systemd for findmnt in profile script
- only set storage_driver env when no libpod exists
- avoid quoting issue</changelog>
  <changelog author="dcermak@suse.com" date="1670241600">- Remove registry.suse.com from search unqualified-search-registries:
  registry.suse.com responds very slowly to pagination repository listings
  (https://docs.docker.com/registry/spec/api/#pagination) and thereby causes
  every `podman search` to take over 90s. We have to remove it until this
  regression is fixed.</changelog>
  <changelog author="danish.prakash@suse.com" date="1673611200">- storage.conf: Unset 'driver' and set 'driver_priority' to
  allow podman to use 'btrfs' if available and fallback to
  'overlay' if not.
- .spec: rm %post script to set 'btrfs' as storage driver
  in storage.conf</changelog>
  <changelog author="danish.prakash@suse.com" date="1674648000">- Reverts https://build.opensuse.org/request/show/1060361
  Changes introduced to c/storage's storage.conf which adds
  a driver_priority attribute would break consumers of libcontainer-common
  as long as those packages are vendoring an older c/storage version.
  Instead of patching every consumer, we're reverting this change, until
  those packages have been updated downstream. [boo#1207509]</changelog>
  <changelog author="dcermak@suse.com" date="1676376000">- New upstream release 20230214
- bump c/storage to 1.45.3
- bump c/image to 5.24.1
- bump c/common to 0.51.0
- containers.conf:
  * add commented out options containers.read_only,
    engine.platform_to_oci_runtime, engine.events_container_create_inspect_data,
    network.volume_plugin_timeout, engine.runtimes.youki, machine.provider
  * remove deprecated setting containers.userns_size
  * add youki to engine.runtime_supports_json
- shortnames.conf: pull in latest upstream version
- storage.conf: add commented out option storage.transient_store
- correct license to APACHE-2.0 only (there's no GPLv3 code to be found)
- add source URLs to spec
- drop pointless copyright year</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add registry.suse.com to the unqualified-search-registries</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- Remove obsolete Requires(post): util-linux-systemd</changelog>
  <changelog author="dcermak@suse.com" date="1678881601">- Remove container-storage-driver.sh, we want to default to the overlay driver
  instead of btrfs.
  The btrfs driver is not really supported upstream (see
  e.g. https://github.com/containers/podman/issues/16882), there is no real
  development anymore and it appears to have subtle bugs (e.g. the one linked
  previously).
  To prevent further such issues, we will from now on default to the overlay
  driver.</changelog>
  <changelog author="fcrozat@suse.com" date="1682510400">- Own /etc/containers/systemd and /usr/share/containers/systemd,
  useful for podman quadlet.</changelog>
  <changelog author="danish.prakash@suse.com" date="1684238400">- Introduce new subpackage that adds SLE-specific mounts only
  on SLE systems (if sles-release) hence avoiding superfluous
  warnings on non-SLE systems while running podman commands.
  (bsc#1211124)</changelog>
  <changelog author="danish.prakash@suse.com" date="1694692800">- Require libcontainers-sles-mounts for *all* SLE products,
  and not just SLES. (bsc#1215291)</changelog>
</package>
<package pkgid="ba0b0d1bee670425d7373a28d815149a1ccaf2613dd512428f6caf6e19ad5407" name="libcontainers-common" arch="noarch">
  <version epoch="0" ver="20240206" rel="150500.4.9.2"/>
  <changelog author="dcermak@suse.com" date="1669118400">- Update bundled common to 0.50.1
- Update bundled image to 5.23.1
- Update bundled storage to 1.44.0
- Drop bundled podman
- Bump version to 20221122
- Install container-storage-driver.sh in /etc/ on Leap &amp; SLE</changelog>
  <changelog author="dmueller@suse.com" date="1669636800">- add requires on util-linux-systemd for findmnt in profile script
- only set storage_driver env when no libpod exists
- avoid quoting issue</changelog>
  <changelog author="dcermak@suse.com" date="1670241600">- Remove registry.suse.com from search unqualified-search-registries:
  registry.suse.com responds very slowly to pagination repository listings
  (https://docs.docker.com/registry/spec/api/#pagination) and thereby causes
  every `podman search` to take over 90s. We have to remove it until this
  regression is fixed.</changelog>
  <changelog author="danish.prakash@suse.com" date="1673611200">- storage.conf: Unset 'driver' and set 'driver_priority' to
  allow podman to use 'btrfs' if available and fallback to
  'overlay' if not.
- .spec: rm %post script to set 'btrfs' as storage driver
  in storage.conf</changelog>
  <changelog author="danish.prakash@suse.com" date="1674648000">- Reverts https://build.opensuse.org/request/show/1060361
  Changes introduced to c/storage's storage.conf which adds
  a driver_priority attribute would break consumers of libcontainer-common
  as long as those packages are vendoring an older c/storage version.
  Instead of patching every consumer, we're reverting this change, until
  those packages have been updated downstream. [boo#1207509]</changelog>
  <changelog author="dcermak@suse.com" date="1676376000">- New upstream release 20230214
- bump c/storage to 1.45.3
- bump c/image to 5.24.1
- bump c/common to 0.51.0
- containers.conf:
  * add commented out options containers.read_only,
    engine.platform_to_oci_runtime, engine.events_container_create_inspect_data,
    network.volume_plugin_timeout, engine.runtimes.youki, machine.provider
  * remove deprecated setting containers.userns_size
  * add youki to engine.runtime_supports_json
- shortnames.conf: pull in latest upstream version
- storage.conf: add commented out option storage.transient_store
- correct license to APACHE-2.0 only (there's no GPLv3 code to be found)
- add source URLs to spec
- drop pointless copyright year</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add registry.suse.com to the unqualified-search-registries</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- Remove obsolete Requires(post): util-linux-systemd</changelog>
  <changelog author="dcermak@suse.com" date="1678881601">- Remove container-storage-driver.sh, we want to default to the overlay driver
  instead of btrfs.
  The btrfs driver is not really supported upstream (see
  e.g. https://github.com/containers/podman/issues/16882), there is no real
  development anymore and it appears to have subtle bugs (e.g. the one linked
  previously).
  To prevent further such issues, we will from now on default to the overlay
  driver.</changelog>
  <changelog author="fcrozat@suse.com" date="1682510400">- Own /etc/containers/systemd and /usr/share/containers/systemd,
  useful for podman quadlet.</changelog>
  <changelog author="danish.prakash@suse.com" date="1684238400">- Introduce new subpackage that adds SLE-specific mounts only
  on SLE systems (if sles-release) hence avoiding superfluous
  warnings on non-SLE systems while running podman commands.
  (bsc#1211124)</changelog>
  <changelog author="danish.prakash@suse.com" date="1685966400">- Enforce BCI verification via Podman on openSUSE distributions
  using the already shipped container signing keys.
  (bsc#1197030)</changelog>
  <changelog author="danish.prakash@suse.com" date="1687780800">- Resolve choice on openSUSE distributions for libcontainer-policy
  by suggesting the libcontainers-openSUSE-policy explicitly.</changelog>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Remove unused grep requirement</changelog>
  <changelog author="danish.prakash@suse.com" date="1690804800">- Disable CNI related configs on ALP (bsc#1213556)
  (https://github.com/containers/podman/issues/19327)</changelog>
  <changelog author="danish.prakash@suse.com" date="1692014400">- New release 20230814
- bump c/storage to 1.48.0
  * Bump to v1.47.0
  * Fix error if continueWrite/continueRead pipe open fails
  * pkg/regexp: make sure that &amp;Regexp implements the interfaces
  * Remove use of fillGo18FileTypeBits
- bump c/image to 5.27.0
  * fix(deps): update module github.com/docker/docker to v23.0.3+incompatible
  * fix(deps): update module golang.org/x/term to v0.7.0
  * fix(deps): update module github.com/klauspost/compress to v1.16.4
  * fix(deps): update module github.com/sigstore/sigstore to v1.6.1
  * chore(deps): update dependency containers/automation_images to v20230405
  * fix(deps): update module golang.org/x/crypto to v0.8.0
  * fix(deps): update module golang.org/x/oauth2 to v0.7.0
  * fix(deps): update module github.com/containers/storage to v1.46.1
  * fix(deps): update module github.com/sigstore/sigstore to v1.6.2
  * Don't completely silently ignore non-OCI manifests in OCI layouts
  * fix(deps): update module github.com/klauspost/compress to v1.16.5
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * fix(deps): update module github.com/docker/docker to v23.0.4+incompatible
- bump c/common to 0.55.3
  * Change default image volume mode to "nullfs" on FreeBSD
  * [v0.55][CI-DOCS] remove zstd:chunked from docs
  * libimage: harden lookup by digest
  * libimage: HasDifferentDigest: add InsecureSkipTLSVerify option</changelog>
  <changelog author="danish.prakash@suse.com" date="1694606400">- New release 20230913
- bump c/image to 5.28.0
  * Bump to v5.26.0
  * fix(deps): update module github.com/sigstore/rekor to v1.2.2
  * fix(deps): update module github.com/sigstore/fulcio to v1.3.2
  * Adding IO decorator to copy progress bar
  * Ensure we close HTTP connections on all paths
  * fix(deps): update module github.com/containers/storage to v1.48.0
  * fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc4
  * fix(deps): update github.com/cyberphone/json-canonicalization digest to 91eb5f1
  * fix(deps): update golang.org/x/exp digest to 97b1e66
  * fix(deps): update module github.com/klauspost/compress to v1.16.7
  * fix(deps): update module github.com/docker/docker to v24.0.3+incompatible
  * fix(deps): update module golang.org/x/oauth2 to v0.10.0
  * manifest: ListUpdate add imgspecv1.Platform field
  * fix(deps): update module github.com/docker/docker to v24.0.4+incompatible
  * pkg/docker: use the same default auth path as macOS on FreeBSD
  * fix(deps): update module github.com/sigstore/fulcio to v1.3.4
  * blob: TryReusingBlobWithOptions consider RequiredCompression if set
  * Fix tests of the ostree transport
  * helpers_test,cleanup: correct argument order
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Make temporary names container/image specific
  * listupdate,oci: instance show read-only annotations and CompressionAlgorithmNames
  * fix(deps): update module github.com/docker/docker-credential-helpers to v0.8.0
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Fix TestOCI1IndexChooseInstanc
  * Refactor data passing in c/image/copy
  * Update module github.com/sigstore/fulcio to v1.4.0
  * copy/multiple: instanceCopyCopy honor UpdateCompressionAlgorithms
  * Update vendor of containers/storage
  * copy/single: accept custom *Options and wrap arguments in copySingleImageOptions
  * Improve transport documentation
  * fix(deps): update module github.com/vbatts/tar-split to v0.11.5
  * fix(deps): update module github.com/docker/docker to v24.0.5+incompatible
  * copy: implement instanceCopyClone for zstd compression
  * copy/multiple: priority of instanceCopyCopy must be higher than instanceCopyClone
  * Clarify where mirrors are used
  * fix(deps): update github.com/cyberphone/json-canonicalization digest to aa7fe85
  * fix(deps): update github.com/containers/storage digest to c3da76f
  * Update x/exp/slices, and some small slice-related cleanups
  * Use consistent example domains in #2069
  * copy: add support for ForceCompressionFormat
  * fix(deps): update module golang.org/x/term to v0.11.0
  * fix(deps): update module golang.org/x/crypto to v0.12.0
  * fix(deps): update module golang.org/x/oauth2 to v0.11.0
  * [release-5.27] Preparing 5.27 backport
  * Update to Go 1.19
  * storage.storageImageDestination.Commit(): leverage image options
  * Rename SKOPEO_CI_TAG to SKOPEO_CI_BRANCH
  * [CI:DOCS] Add cirrus-cron retry/monitor jobs
  * chore(deps): update dependency containers/automation_images to v20230807
  * [release-5.27] Fix the branch we use for determining a git-validation starting point
  * fix(deps): update golang.org/x/exp digest to 352e893
  * fix(deps): update module github.com/sigstore/sigstore to v1.7.2
  * OCI image-spec / distribution-spec v1.1 updates, first round
  * fix(deps): update module github.com/sylabs/sif/v2 to v2.12.0
  * chore(deps): update dependency containers/automation_images to v20230809
  * Merge release branch into main
  * BREAKING: Update for move of github.com/theupdateframework/go-tuf/encrypted
  * Update module github.com/containers/ocicrypt to v1.1.8
  * chore(deps): update dependency containers/automation_images to v20230816
  * fix(deps): update module github.com/containers/storage to v1.49.0
  * fix(deps): update module github.com/sylabs/sif/v2 to v2.13.0
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.0
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.1
  * fix(deps): update golang.org/x/exp digest to d852ddb
  * fix(deps): update module golang.org/x/term to v0.12.0
  * fix(deps): update module github.com/sigstore/sigstore to v1.7.3
  * fix removal of temp file in GetBlob on Windows
  * fix(deps): update module golang.org/x/crypto to v0.13.0
  * Fix build with golangci-lint 1.54.2
  * fix(deps): update module golang.org/x/oauth2 to v0.12.0
  * Implement, and default to, a SQLite BlobInfoCache instead of BoltDB
  * fix(deps): update module github.com/docker/docker to v24.0.6+incompatible
  * Update dependencies of docker/docker
  * Correctly handle encryption/decryption changes in non-OCI formats
  * chore(deps): update module github.com/cyphar/filepath-securejoin to v0.2.4 [security]
  * fix(deps): update module github.com/containers/storage to v1.50.1
- bump c/storage to 1.50.2
  * Bump to v1.50.1
  * Add an OWNERS file for the merge bot to refer to
- bump c/common to 0.55.4
  * Bump c/image to v0.55.3</changelog>
  <changelog author="danish.prakash@suse.com" date="1694606401">- Require libcontainers-sles-mounts for *all* SLE products,
  and not just SLES. (bsc#1215291)</changelog>
  <changelog author="danish.prakash@suse.com" date="1701691200">- New release 20231204
-  bump c/common to 0.57.0
  * Bump to v0.56.0 by
  * Fix typo in comment
  * fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc5
  * Fix specification of unix:///run
  * libimage/layer_tree: if parent is empty and a manifest list then ignore check.
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Split up util package into pkg/password, pkg/copy, pkg/version
  * Remove ActiveDestination method to move into podman
  * Default machine CPUs to Cores/2
  * pkg/config: do NOT set StaticDir and VolumeDir
  * Implement negated label match function
  * chore: import packages only once
  * CoC: fix email link
-  bump c/storage to 1.51.0
  * Bump to v1.50.2
  * overlay, composefs: mount loop device RO
  * Run codespell on code
  * fix(deps): update module github.com/klauspost/compress to v1.17.0
  * store: serialize container deletion
  * pkg/system: reduce retry timeout for EnsureRemoveAll
  * overlay, composefs: use data-only lower layers
  * store: call RecordWrite() before graphDriver Cleanup()
  * fix(deps): update module golang.org/x/sys to v0.13.0
-  bump c/image to 5.29.0
  * Bump to v5.28.0
  * fix(deps): update module github.com/containers/storage to v1.50.2
  * Run codespell on code
  * fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc5
  * Use constants and types from opencontainers/image-spec/specs-go/v1
  * progress: set Current before Refill
  * copy: fix nil pointer dereference when checking compression algorithm
  * fix(deps): update module github.com/klauspost/compress to v1.17.0
  * fix(deps): update module github.com/sylabs/sif/v2 to v2.14.0
  * ociarchive: Add new ArchiveFileNotFoundError</changelog>
  <changelog author="dcermak@suse.com" date="1707220800">- New release 20240206
- bump bundled c/common to 0.57.4
- bump bundled c/image to 0.29.2
- conditionally require libcontainers-sles-mounds for product(SLE-Micro) as well
  (SLE Micro 6.0 now no longer provides product(SUSE_SLE) and instead only
  provides product(SLE-Micro)), fixes bsc#1216443</changelog>
</package>
<package pkgid="f3a07151704d100bf0401b4a8b05df562370cab733254c4a141f5d3a35080bd9" name="libcontainers-common" arch="src">
  <version epoch="0" ver="20240206" rel="150500.4.9.2"/>
  <changelog author="dcermak@suse.com" date="1669118400">- Update bundled common to 0.50.1
- Update bundled image to 5.23.1
- Update bundled storage to 1.44.0
- Drop bundled podman
- Bump version to 20221122
- Install container-storage-driver.sh in /etc/ on Leap &amp; SLE</changelog>
  <changelog author="dmueller@suse.com" date="1669636800">- add requires on util-linux-systemd for findmnt in profile script
- only set storage_driver env when no libpod exists
- avoid quoting issue</changelog>
  <changelog author="dcermak@suse.com" date="1670241600">- Remove registry.suse.com from search unqualified-search-registries:
  registry.suse.com responds very slowly to pagination repository listings
  (https://docs.docker.com/registry/spec/api/#pagination) and thereby causes
  every `podman search` to take over 90s. We have to remove it until this
  regression is fixed.</changelog>
  <changelog author="danish.prakash@suse.com" date="1673611200">- storage.conf: Unset 'driver' and set 'driver_priority' to
  allow podman to use 'btrfs' if available and fallback to
  'overlay' if not.
- .spec: rm %post script to set 'btrfs' as storage driver
  in storage.conf</changelog>
  <changelog author="danish.prakash@suse.com" date="1674648000">- Reverts https://build.opensuse.org/request/show/1060361
  Changes introduced to c/storage's storage.conf which adds
  a driver_priority attribute would break consumers of libcontainer-common
  as long as those packages are vendoring an older c/storage version.
  Instead of patching every consumer, we're reverting this change, until
  those packages have been updated downstream. [boo#1207509]</changelog>
  <changelog author="dcermak@suse.com" date="1676376000">- New upstream release 20230214
- bump c/storage to 1.45.3
- bump c/image to 5.24.1
- bump c/common to 0.51.0
- containers.conf:
  * add commented out options containers.read_only,
    engine.platform_to_oci_runtime, engine.events_container_create_inspect_data,
    network.volume_plugin_timeout, engine.runtimes.youki, machine.provider
  * remove deprecated setting containers.userns_size
  * add youki to engine.runtime_supports_json
- shortnames.conf: pull in latest upstream version
- storage.conf: add commented out option storage.transient_store
- correct license to APACHE-2.0 only (there's no GPLv3 code to be found)
- add source URLs to spec
- drop pointless copyright year</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add registry.suse.com to the unqualified-search-registries</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- Remove obsolete Requires(post): util-linux-systemd</changelog>
  <changelog author="dcermak@suse.com" date="1678881601">- Remove container-storage-driver.sh, we want to default to the overlay driver
  instead of btrfs.
  The btrfs driver is not really supported upstream (see
  e.g. https://github.com/containers/podman/issues/16882), there is no real
  development anymore and it appears to have subtle bugs (e.g. the one linked
  previously).
  To prevent further such issues, we will from now on default to the overlay
  driver.</changelog>
  <changelog author="fcrozat@suse.com" date="1682510400">- Own /etc/containers/systemd and /usr/share/containers/systemd,
  useful for podman quadlet.</changelog>
  <changelog author="danish.prakash@suse.com" date="1684238400">- Introduce new subpackage that adds SLE-specific mounts only
  on SLE systems (if sles-release) hence avoiding superfluous
  warnings on non-SLE systems while running podman commands.
  (bsc#1211124)</changelog>
  <changelog author="danish.prakash@suse.com" date="1685966400">- Enforce BCI verification via Podman on openSUSE distributions
  using the already shipped container signing keys.
  (bsc#1197030)</changelog>
  <changelog author="danish.prakash@suse.com" date="1687780800">- Resolve choice on openSUSE distributions for libcontainer-policy
  by suggesting the libcontainers-openSUSE-policy explicitly.</changelog>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Remove unused grep requirement</changelog>
  <changelog author="danish.prakash@suse.com" date="1690804800">- Disable CNI related configs on ALP (bsc#1213556)
  (https://github.com/containers/podman/issues/19327)</changelog>
  <changelog author="danish.prakash@suse.com" date="1692014400">- New release 20230814
- bump c/storage to 1.48.0
  * Bump to v1.47.0
  * Fix error if continueWrite/continueRead pipe open fails
  * pkg/regexp: make sure that &amp;Regexp implements the interfaces
  * Remove use of fillGo18FileTypeBits
- bump c/image to 5.27.0
  * fix(deps): update module github.com/docker/docker to v23.0.3+incompatible
  * fix(deps): update module golang.org/x/term to v0.7.0
  * fix(deps): update module github.com/klauspost/compress to v1.16.4
  * fix(deps): update module github.com/sigstore/sigstore to v1.6.1
  * chore(deps): update dependency containers/automation_images to v20230405
  * fix(deps): update module golang.org/x/crypto to v0.8.0
  * fix(deps): update module golang.org/x/oauth2 to v0.7.0
  * fix(deps): update module github.com/containers/storage to v1.46.1
  * fix(deps): update module github.com/sigstore/sigstore to v1.6.2
  * Don't completely silently ignore non-OCI manifests in OCI layouts
  * fix(deps): update module github.com/klauspost/compress to v1.16.5
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * fix(deps): update module github.com/docker/docker to v23.0.4+incompatible
- bump c/common to 0.55.3
  * Change default image volume mode to "nullfs" on FreeBSD
  * [v0.55][CI-DOCS] remove zstd:chunked from docs
  * libimage: harden lookup by digest
  * libimage: HasDifferentDigest: add InsecureSkipTLSVerify option</changelog>
  <changelog author="danish.prakash@suse.com" date="1694606400">- New release 20230913
- bump c/image to 5.28.0
  * Bump to v5.26.0
  * fix(deps): update module github.com/sigstore/rekor to v1.2.2
  * fix(deps): update module github.com/sigstore/fulcio to v1.3.2
  * Adding IO decorator to copy progress bar
  * Ensure we close HTTP connections on all paths
  * fix(deps): update module github.com/containers/storage to v1.48.0
  * fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc4
  * fix(deps): update github.com/cyberphone/json-canonicalization digest to 91eb5f1
  * fix(deps): update golang.org/x/exp digest to 97b1e66
  * fix(deps): update module github.com/klauspost/compress to v1.16.7
  * fix(deps): update module github.com/docker/docker to v24.0.3+incompatible
  * fix(deps): update module golang.org/x/oauth2 to v0.10.0
  * manifest: ListUpdate add imgspecv1.Platform field
  * fix(deps): update module github.com/docker/docker to v24.0.4+incompatible
  * pkg/docker: use the same default auth path as macOS on FreeBSD
  * fix(deps): update module github.com/sigstore/fulcio to v1.3.4
  * blob: TryReusingBlobWithOptions consider RequiredCompression if set
  * Fix tests of the ostree transport
  * helpers_test,cleanup: correct argument order
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Make temporary names container/image specific
  * listupdate,oci: instance show read-only annotations and CompressionAlgorithmNames
  * fix(deps): update module github.com/docker/docker-credential-helpers to v0.8.0
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Fix TestOCI1IndexChooseInstanc
  * Refactor data passing in c/image/copy
  * Update module github.com/sigstore/fulcio to v1.4.0
  * copy/multiple: instanceCopyCopy honor UpdateCompressionAlgorithms
  * Update vendor of containers/storage
  * copy/single: accept custom *Options and wrap arguments in copySingleImageOptions
  * Improve transport documentation
  * fix(deps): update module github.com/vbatts/tar-split to v0.11.5
  * fix(deps): update module github.com/docker/docker to v24.0.5+incompatible
  * copy: implement instanceCopyClone for zstd compression
  * copy/multiple: priority of instanceCopyCopy must be higher than instanceCopyClone
  * Clarify where mirrors are used
  * fix(deps): update github.com/cyberphone/json-canonicalization digest to aa7fe85
  * fix(deps): update github.com/containers/storage digest to c3da76f
  * Update x/exp/slices, and some small slice-related cleanups
  * Use consistent example domains in #2069
  * copy: add support for ForceCompressionFormat
  * fix(deps): update module golang.org/x/term to v0.11.0
  * fix(deps): update module golang.org/x/crypto to v0.12.0
  * fix(deps): update module golang.org/x/oauth2 to v0.11.0
  * [release-5.27] Preparing 5.27 backport
  * Update to Go 1.19
  * storage.storageImageDestination.Commit(): leverage image options
  * Rename SKOPEO_CI_TAG to SKOPEO_CI_BRANCH
  * [CI:DOCS] Add cirrus-cron retry/monitor jobs
  * chore(deps): update dependency containers/automation_images to v20230807
  * [release-5.27] Fix the branch we use for determining a git-validation starting point
  * fix(deps): update golang.org/x/exp digest to 352e893
  * fix(deps): update module github.com/sigstore/sigstore to v1.7.2
  * OCI image-spec / distribution-spec v1.1 updates, first round
  * fix(deps): update module github.com/sylabs/sif/v2 to v2.12.0
  * chore(deps): update dependency containers/automation_images to v20230809
  * Merge release branch into main
  * BREAKING: Update for move of github.com/theupdateframework/go-tuf/encrypted
  * Update module github.com/containers/ocicrypt to v1.1.8
  * chore(deps): update dependency containers/automation_images to v20230816
  * fix(deps): update module github.com/containers/storage to v1.49.0
  * fix(deps): update module github.com/sylabs/sif/v2 to v2.13.0
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.0
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.1
  * fix(deps): update golang.org/x/exp digest to d852ddb
  * fix(deps): update module golang.org/x/term to v0.12.0
  * fix(deps): update module github.com/sigstore/sigstore to v1.7.3
  * fix removal of temp file in GetBlob on Windows
  * fix(deps): update module golang.org/x/crypto to v0.13.0
  * Fix build with golangci-lint 1.54.2
  * fix(deps): update module golang.org/x/oauth2 to v0.12.0
  * Implement, and default to, a SQLite BlobInfoCache instead of BoltDB
  * fix(deps): update module github.com/docker/docker to v24.0.6+incompatible
  * Update dependencies of docker/docker
  * Correctly handle encryption/decryption changes in non-OCI formats
  * chore(deps): update module github.com/cyphar/filepath-securejoin to v0.2.4 [security]
  * fix(deps): update module github.com/containers/storage to v1.50.1
- bump c/storage to 1.50.2
  * Bump to v1.50.1
  * Add an OWNERS file for the merge bot to refer to
- bump c/common to 0.55.4
  * Bump c/image to v0.55.3</changelog>
  <changelog author="danish.prakash@suse.com" date="1694606401">- Require libcontainers-sles-mounts for *all* SLE products,
  and not just SLES. (bsc#1215291)</changelog>
  <changelog author="danish.prakash@suse.com" date="1701691200">- New release 20231204
-  bump c/common to 0.57.0
  * Bump to v0.56.0 by
  * Fix typo in comment
  * fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc5
  * Fix specification of unix:///run
  * libimage/layer_tree: if parent is empty and a manifest list then ignore check.
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Split up util package into pkg/password, pkg/copy, pkg/version
  * Remove ActiveDestination method to move into podman
  * Default machine CPUs to Cores/2
  * pkg/config: do NOT set StaticDir and VolumeDir
  * Implement negated label match function
  * chore: import packages only once
  * CoC: fix email link
-  bump c/storage to 1.51.0
  * Bump to v1.50.2
  * overlay, composefs: mount loop device RO
  * Run codespell on code
  * fix(deps): update module github.com/klauspost/compress to v1.17.0
  * store: serialize container deletion
  * pkg/system: reduce retry timeout for EnsureRemoveAll
  * overlay, composefs: use data-only lower layers
  * store: call RecordWrite() before graphDriver Cleanup()
  * fix(deps): update module golang.org/x/sys to v0.13.0
-  bump c/image to 5.29.0
  * Bump to v5.28.0
  * fix(deps): update module github.com/containers/storage to v1.50.2
  * Run codespell on code
  * fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc5
  * Use constants and types from opencontainers/image-spec/specs-go/v1
  * progress: set Current before Refill
  * copy: fix nil pointer dereference when checking compression algorithm
  * fix(deps): update module github.com/klauspost/compress to v1.17.0
  * fix(deps): update module github.com/sylabs/sif/v2 to v2.14.0
  * ociarchive: Add new ArchiveFileNotFoundError</changelog>
  <changelog author="dcermak@suse.com" date="1707220800">- New release 20240206
- bump bundled c/common to 0.57.4
- bump bundled c/image to 0.29.2
- conditionally require libcontainers-sles-mounds for product(SLE-Micro) as well
  (SLE Micro 6.0 now no longer provides product(SUSE_SLE) and instead only
  provides product(SLE-Micro)), fixes bsc#1216443</changelog>
</package>
<package pkgid="dafe9e11918aa79aa83ee080776327a9d582a28f9ff20bb8332830780e91fc97" name="libcontainers-default-policy" arch="noarch">
  <version epoch="0" ver="20240206" rel="150500.4.9.2"/>
  <changelog author="dcermak@suse.com" date="1669118400">- Update bundled common to 0.50.1
- Update bundled image to 5.23.1
- Update bundled storage to 1.44.0
- Drop bundled podman
- Bump version to 20221122
- Install container-storage-driver.sh in /etc/ on Leap &amp; SLE</changelog>
  <changelog author="dmueller@suse.com" date="1669636800">- add requires on util-linux-systemd for findmnt in profile script
- only set storage_driver env when no libpod exists
- avoid quoting issue</changelog>
  <changelog author="dcermak@suse.com" date="1670241600">- Remove registry.suse.com from search unqualified-search-registries:
  registry.suse.com responds very slowly to pagination repository listings
  (https://docs.docker.com/registry/spec/api/#pagination) and thereby causes
  every `podman search` to take over 90s. We have to remove it until this
  regression is fixed.</changelog>
  <changelog author="danish.prakash@suse.com" date="1673611200">- storage.conf: Unset 'driver' and set 'driver_priority' to
  allow podman to use 'btrfs' if available and fallback to
  'overlay' if not.
- .spec: rm %post script to set 'btrfs' as storage driver
  in storage.conf</changelog>
  <changelog author="danish.prakash@suse.com" date="1674648000">- Reverts https://build.opensuse.org/request/show/1060361
  Changes introduced to c/storage's storage.conf which adds
  a driver_priority attribute would break consumers of libcontainer-common
  as long as those packages are vendoring an older c/storage version.
  Instead of patching every consumer, we're reverting this change, until
  those packages have been updated downstream. [boo#1207509]</changelog>
  <changelog author="dcermak@suse.com" date="1676376000">- New upstream release 20230214
- bump c/storage to 1.45.3
- bump c/image to 5.24.1
- bump c/common to 0.51.0
- containers.conf:
  * add commented out options containers.read_only,
    engine.platform_to_oci_runtime, engine.events_container_create_inspect_data,
    network.volume_plugin_timeout, engine.runtimes.youki, machine.provider
  * remove deprecated setting containers.userns_size
  * add youki to engine.runtime_supports_json
- shortnames.conf: pull in latest upstream version
- storage.conf: add commented out option storage.transient_store
- correct license to APACHE-2.0 only (there's no GPLv3 code to be found)
- add source URLs to spec
- drop pointless copyright year</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add registry.suse.com to the unqualified-search-registries</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- Remove obsolete Requires(post): util-linux-systemd</changelog>
  <changelog author="dcermak@suse.com" date="1678881601">- Remove container-storage-driver.sh, we want to default to the overlay driver
  instead of btrfs.
  The btrfs driver is not really supported upstream (see
  e.g. https://github.com/containers/podman/issues/16882), there is no real
  development anymore and it appears to have subtle bugs (e.g. the one linked
  previously).
  To prevent further such issues, we will from now on default to the overlay
  driver.</changelog>
  <changelog author="fcrozat@suse.com" date="1682510400">- Own /etc/containers/systemd and /usr/share/containers/systemd,
  useful for podman quadlet.</changelog>
  <changelog author="danish.prakash@suse.com" date="1684238400">- Introduce new subpackage that adds SLE-specific mounts only
  on SLE systems (if sles-release) hence avoiding superfluous
  warnings on non-SLE systems while running podman commands.
  (bsc#1211124)</changelog>
  <changelog author="danish.prakash@suse.com" date="1685966400">- Enforce BCI verification via Podman on openSUSE distributions
  using the already shipped container signing keys.
  (bsc#1197030)</changelog>
  <changelog author="danish.prakash@suse.com" date="1687780800">- Resolve choice on openSUSE distributions for libcontainer-policy
  by suggesting the libcontainers-openSUSE-policy explicitly.</changelog>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Remove unused grep requirement</changelog>
  <changelog author="danish.prakash@suse.com" date="1690804800">- Disable CNI related configs on ALP (bsc#1213556)
  (https://github.com/containers/podman/issues/19327)</changelog>
  <changelog author="danish.prakash@suse.com" date="1692014400">- New release 20230814
- bump c/storage to 1.48.0
  * Bump to v1.47.0
  * Fix error if continueWrite/continueRead pipe open fails
  * pkg/regexp: make sure that &amp;Regexp implements the interfaces
  * Remove use of fillGo18FileTypeBits
- bump c/image to 5.27.0
  * fix(deps): update module github.com/docker/docker to v23.0.3+incompatible
  * fix(deps): update module golang.org/x/term to v0.7.0
  * fix(deps): update module github.com/klauspost/compress to v1.16.4
  * fix(deps): update module github.com/sigstore/sigstore to v1.6.1
  * chore(deps): update dependency containers/automation_images to v20230405
  * fix(deps): update module golang.org/x/crypto to v0.8.0
  * fix(deps): update module golang.org/x/oauth2 to v0.7.0
  * fix(deps): update module github.com/containers/storage to v1.46.1
  * fix(deps): update module github.com/sigstore/sigstore to v1.6.2
  * Don't completely silently ignore non-OCI manifests in OCI layouts
  * fix(deps): update module github.com/klauspost/compress to v1.16.5
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * fix(deps): update module github.com/docker/docker to v23.0.4+incompatible
- bump c/common to 0.55.3
  * Change default image volume mode to "nullfs" on FreeBSD
  * [v0.55][CI-DOCS] remove zstd:chunked from docs
  * libimage: harden lookup by digest
  * libimage: HasDifferentDigest: add InsecureSkipTLSVerify option</changelog>
  <changelog author="danish.prakash@suse.com" date="1694606400">- New release 20230913
- bump c/image to 5.28.0
  * Bump to v5.26.0
  * fix(deps): update module github.com/sigstore/rekor to v1.2.2
  * fix(deps): update module github.com/sigstore/fulcio to v1.3.2
  * Adding IO decorator to copy progress bar
  * Ensure we close HTTP connections on all paths
  * fix(deps): update module github.com/containers/storage to v1.48.0
  * fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc4
  * fix(deps): update github.com/cyberphone/json-canonicalization digest to 91eb5f1
  * fix(deps): update golang.org/x/exp digest to 97b1e66
  * fix(deps): update module github.com/klauspost/compress to v1.16.7
  * fix(deps): update module github.com/docker/docker to v24.0.3+incompatible
  * fix(deps): update module golang.org/x/oauth2 to v0.10.0
  * manifest: ListUpdate add imgspecv1.Platform field
  * fix(deps): update module github.com/docker/docker to v24.0.4+incompatible
  * pkg/docker: use the same default auth path as macOS on FreeBSD
  * fix(deps): update module github.com/sigstore/fulcio to v1.3.4
  * blob: TryReusingBlobWithOptions consider RequiredCompression if set
  * Fix tests of the ostree transport
  * helpers_test,cleanup: correct argument order
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Make temporary names container/image specific
  * listupdate,oci: instance show read-only annotations and CompressionAlgorithmNames
  * fix(deps): update module github.com/docker/docker-credential-helpers to v0.8.0
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Fix TestOCI1IndexChooseInstanc
  * Refactor data passing in c/image/copy
  * Update module github.com/sigstore/fulcio to v1.4.0
  * copy/multiple: instanceCopyCopy honor UpdateCompressionAlgorithms
  * Update vendor of containers/storage
  * copy/single: accept custom *Options and wrap arguments in copySingleImageOptions
  * Improve transport documentation
  * fix(deps): update module github.com/vbatts/tar-split to v0.11.5
  * fix(deps): update module github.com/docker/docker to v24.0.5+incompatible
  * copy: implement instanceCopyClone for zstd compression
  * copy/multiple: priority of instanceCopyCopy must be higher than instanceCopyClone
  * Clarify where mirrors are used
  * fix(deps): update github.com/cyberphone/json-canonicalization digest to aa7fe85
  * fix(deps): update github.com/containers/storage digest to c3da76f
  * Update x/exp/slices, and some small slice-related cleanups
  * Use consistent example domains in #2069
  * copy: add support for ForceCompressionFormat
  * fix(deps): update module golang.org/x/term to v0.11.0
  * fix(deps): update module golang.org/x/crypto to v0.12.0
  * fix(deps): update module golang.org/x/oauth2 to v0.11.0
  * [release-5.27] Preparing 5.27 backport
  * Update to Go 1.19
  * storage.storageImageDestination.Commit(): leverage image options
  * Rename SKOPEO_CI_TAG to SKOPEO_CI_BRANCH
  * [CI:DOCS] Add cirrus-cron retry/monitor jobs
  * chore(deps): update dependency containers/automation_images to v20230807
  * [release-5.27] Fix the branch we use for determining a git-validation starting point
  * fix(deps): update golang.org/x/exp digest to 352e893
  * fix(deps): update module github.com/sigstore/sigstore to v1.7.2
  * OCI image-spec / distribution-spec v1.1 updates, first round
  * fix(deps): update module github.com/sylabs/sif/v2 to v2.12.0
  * chore(deps): update dependency containers/automation_images to v20230809
  * Merge release branch into main
  * BREAKING: Update for move of github.com/theupdateframework/go-tuf/encrypted
  * Update module github.com/containers/ocicrypt to v1.1.8
  * chore(deps): update dependency containers/automation_images to v20230816
  * fix(deps): update module github.com/containers/storage to v1.49.0
  * fix(deps): update module github.com/sylabs/sif/v2 to v2.13.0
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.0
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.1
  * fix(deps): update golang.org/x/exp digest to d852ddb
  * fix(deps): update module golang.org/x/term to v0.12.0
  * fix(deps): update module github.com/sigstore/sigstore to v1.7.3
  * fix removal of temp file in GetBlob on Windows
  * fix(deps): update module golang.org/x/crypto to v0.13.0
  * Fix build with golangci-lint 1.54.2
  * fix(deps): update module golang.org/x/oauth2 to v0.12.0
  * Implement, and default to, a SQLite BlobInfoCache instead of BoltDB
  * fix(deps): update module github.com/docker/docker to v24.0.6+incompatible
  * Update dependencies of docker/docker
  * Correctly handle encryption/decryption changes in non-OCI formats
  * chore(deps): update module github.com/cyphar/filepath-securejoin to v0.2.4 [security]
  * fix(deps): update module github.com/containers/storage to v1.50.1
- bump c/storage to 1.50.2
  * Bump to v1.50.1
  * Add an OWNERS file for the merge bot to refer to
- bump c/common to 0.55.4
  * Bump c/image to v0.55.3</changelog>
  <changelog author="danish.prakash@suse.com" date="1694606401">- Require libcontainers-sles-mounts for *all* SLE products,
  and not just SLES. (bsc#1215291)</changelog>
  <changelog author="danish.prakash@suse.com" date="1701691200">- New release 20231204
-  bump c/common to 0.57.0
  * Bump to v0.56.0 by
  * Fix typo in comment
  * fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc5
  * Fix specification of unix:///run
  * libimage/layer_tree: if parent is empty and a manifest list then ignore check.
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Split up util package into pkg/password, pkg/copy, pkg/version
  * Remove ActiveDestination method to move into podman
  * Default machine CPUs to Cores/2
  * pkg/config: do NOT set StaticDir and VolumeDir
  * Implement negated label match function
  * chore: import packages only once
  * CoC: fix email link
-  bump c/storage to 1.51.0
  * Bump to v1.50.2
  * overlay, composefs: mount loop device RO
  * Run codespell on code
  * fix(deps): update module github.com/klauspost/compress to v1.17.0
  * store: serialize container deletion
  * pkg/system: reduce retry timeout for EnsureRemoveAll
  * overlay, composefs: use data-only lower layers
  * store: call RecordWrite() before graphDriver Cleanup()
  * fix(deps): update module golang.org/x/sys to v0.13.0
-  bump c/image to 5.29.0
  * Bump to v5.28.0
  * fix(deps): update module github.com/containers/storage to v1.50.2
  * Run codespell on code
  * fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc5
  * Use constants and types from opencontainers/image-spec/specs-go/v1
  * progress: set Current before Refill
  * copy: fix nil pointer dereference when checking compression algorithm
  * fix(deps): update module github.com/klauspost/compress to v1.17.0
  * fix(deps): update module github.com/sylabs/sif/v2 to v2.14.0
  * ociarchive: Add new ArchiveFileNotFoundError</changelog>
  <changelog author="dcermak@suse.com" date="1707220800">- New release 20240206
- bump bundled c/common to 0.57.4
- bump bundled c/image to 0.29.2
- conditionally require libcontainers-sles-mounds for product(SLE-Micro) as well
  (SLE Micro 6.0 now no longer provides product(SUSE_SLE) and instead only
  provides product(SLE-Micro)), fixes bsc#1216443</changelog>
</package>
<package pkgid="e696619bdc48e9b7d62c4925da28e1fd4facfec911b90421f5d004659c2e828b" name="libcontainers-openSUSE-policy" arch="noarch">
  <version epoch="0" ver="20240206" rel="150500.4.9.2"/>
  <changelog author="dcermak@suse.com" date="1669118400">- Update bundled common to 0.50.1
- Update bundled image to 5.23.1
- Update bundled storage to 1.44.0
- Drop bundled podman
- Bump version to 20221122
- Install container-storage-driver.sh in /etc/ on Leap &amp; SLE</changelog>
  <changelog author="dmueller@suse.com" date="1669636800">- add requires on util-linux-systemd for findmnt in profile script
- only set storage_driver env when no libpod exists
- avoid quoting issue</changelog>
  <changelog author="dcermak@suse.com" date="1670241600">- Remove registry.suse.com from search unqualified-search-registries:
  registry.suse.com responds very slowly to pagination repository listings
  (https://docs.docker.com/registry/spec/api/#pagination) and thereby causes
  every `podman search` to take over 90s. We have to remove it until this
  regression is fixed.</changelog>
  <changelog author="danish.prakash@suse.com" date="1673611200">- storage.conf: Unset 'driver' and set 'driver_priority' to
  allow podman to use 'btrfs' if available and fallback to
  'overlay' if not.
- .spec: rm %post script to set 'btrfs' as storage driver
  in storage.conf</changelog>
  <changelog author="danish.prakash@suse.com" date="1674648000">- Reverts https://build.opensuse.org/request/show/1060361
  Changes introduced to c/storage's storage.conf which adds
  a driver_priority attribute would break consumers of libcontainer-common
  as long as those packages are vendoring an older c/storage version.
  Instead of patching every consumer, we're reverting this change, until
  those packages have been updated downstream. [boo#1207509]</changelog>
  <changelog author="dcermak@suse.com" date="1676376000">- New upstream release 20230214
- bump c/storage to 1.45.3
- bump c/image to 5.24.1
- bump c/common to 0.51.0
- containers.conf:
  * add commented out options containers.read_only,
    engine.platform_to_oci_runtime, engine.events_container_create_inspect_data,
    network.volume_plugin_timeout, engine.runtimes.youki, machine.provider
  * remove deprecated setting containers.userns_size
  * add youki to engine.runtime_supports_json
- shortnames.conf: pull in latest upstream version
- storage.conf: add commented out option storage.transient_store
- correct license to APACHE-2.0 only (there's no GPLv3 code to be found)
- add source URLs to spec
- drop pointless copyright year</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add registry.suse.com to the unqualified-search-registries</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- Remove obsolete Requires(post): util-linux-systemd</changelog>
  <changelog author="dcermak@suse.com" date="1678881601">- Remove container-storage-driver.sh, we want to default to the overlay driver
  instead of btrfs.
  The btrfs driver is not really supported upstream (see
  e.g. https://github.com/containers/podman/issues/16882), there is no real
  development anymore and it appears to have subtle bugs (e.g. the one linked
  previously).
  To prevent further such issues, we will from now on default to the overlay
  driver.</changelog>
  <changelog author="fcrozat@suse.com" date="1682510400">- Own /etc/containers/systemd and /usr/share/containers/systemd,
  useful for podman quadlet.</changelog>
  <changelog author="danish.prakash@suse.com" date="1684238400">- Introduce new subpackage that adds SLE-specific mounts only
  on SLE systems (if sles-release) hence avoiding superfluous
  warnings on non-SLE systems while running podman commands.
  (bsc#1211124)</changelog>
  <changelog author="danish.prakash@suse.com" date="1685966400">- Enforce BCI verification via Podman on openSUSE distributions
  using the already shipped container signing keys.
  (bsc#1197030)</changelog>
  <changelog author="danish.prakash@suse.com" date="1687780800">- Resolve choice on openSUSE distributions for libcontainer-policy
  by suggesting the libcontainers-openSUSE-policy explicitly.</changelog>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Remove unused grep requirement</changelog>
  <changelog author="danish.prakash@suse.com" date="1690804800">- Disable CNI related configs on ALP (bsc#1213556)
  (https://github.com/containers/podman/issues/19327)</changelog>
  <changelog author="danish.prakash@suse.com" date="1692014400">- New release 20230814
- bump c/storage to 1.48.0
  * Bump to v1.47.0
  * Fix error if continueWrite/continueRead pipe open fails
  * pkg/regexp: make sure that &amp;Regexp implements the interfaces
  * Remove use of fillGo18FileTypeBits
- bump c/image to 5.27.0
  * fix(deps): update module github.com/docker/docker to v23.0.3+incompatible
  * fix(deps): update module golang.org/x/term to v0.7.0
  * fix(deps): update module github.com/klauspost/compress to v1.16.4
  * fix(deps): update module github.com/sigstore/sigstore to v1.6.1
  * chore(deps): update dependency containers/automation_images to v20230405
  * fix(deps): update module golang.org/x/crypto to v0.8.0
  * fix(deps): update module golang.org/x/oauth2 to v0.7.0
  * fix(deps): update module github.com/containers/storage to v1.46.1
  * fix(deps): update module github.com/sigstore/sigstore to v1.6.2
  * Don't completely silently ignore non-OCI manifests in OCI layouts
  * fix(deps): update module github.com/klauspost/compress to v1.16.5
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * fix(deps): update module github.com/docker/docker to v23.0.4+incompatible
- bump c/common to 0.55.3
  * Change default image volume mode to "nullfs" on FreeBSD
  * [v0.55][CI-DOCS] remove zstd:chunked from docs
  * libimage: harden lookup by digest
  * libimage: HasDifferentDigest: add InsecureSkipTLSVerify option</changelog>
  <changelog author="danish.prakash@suse.com" date="1694606400">- New release 20230913
- bump c/image to 5.28.0
  * Bump to v5.26.0
  * fix(deps): update module github.com/sigstore/rekor to v1.2.2
  * fix(deps): update module github.com/sigstore/fulcio to v1.3.2
  * Adding IO decorator to copy progress bar
  * Ensure we close HTTP connections on all paths
  * fix(deps): update module github.com/containers/storage to v1.48.0
  * fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc4
  * fix(deps): update github.com/cyberphone/json-canonicalization digest to 91eb5f1
  * fix(deps): update golang.org/x/exp digest to 97b1e66
  * fix(deps): update module github.com/klauspost/compress to v1.16.7
  * fix(deps): update module github.com/docker/docker to v24.0.3+incompatible
  * fix(deps): update module golang.org/x/oauth2 to v0.10.0
  * manifest: ListUpdate add imgspecv1.Platform field
  * fix(deps): update module github.com/docker/docker to v24.0.4+incompatible
  * pkg/docker: use the same default auth path as macOS on FreeBSD
  * fix(deps): update module github.com/sigstore/fulcio to v1.3.4
  * blob: TryReusingBlobWithOptions consider RequiredCompression if set
  * Fix tests of the ostree transport
  * helpers_test,cleanup: correct argument order
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Make temporary names container/image specific
  * listupdate,oci: instance show read-only annotations and CompressionAlgorithmNames
  * fix(deps): update module github.com/docker/docker-credential-helpers to v0.8.0
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Fix TestOCI1IndexChooseInstanc
  * Refactor data passing in c/image/copy
  * Update module github.com/sigstore/fulcio to v1.4.0
  * copy/multiple: instanceCopyCopy honor UpdateCompressionAlgorithms
  * Update vendor of containers/storage
  * copy/single: accept custom *Options and wrap arguments in copySingleImageOptions
  * Improve transport documentation
  * fix(deps): update module github.com/vbatts/tar-split to v0.11.5
  * fix(deps): update module github.com/docker/docker to v24.0.5+incompatible
  * copy: implement instanceCopyClone for zstd compression
  * copy/multiple: priority of instanceCopyCopy must be higher than instanceCopyClone
  * Clarify where mirrors are used
  * fix(deps): update github.com/cyberphone/json-canonicalization digest to aa7fe85
  * fix(deps): update github.com/containers/storage digest to c3da76f
  * Update x/exp/slices, and some small slice-related cleanups
  * Use consistent example domains in #2069
  * copy: add support for ForceCompressionFormat
  * fix(deps): update module golang.org/x/term to v0.11.0
  * fix(deps): update module golang.org/x/crypto to v0.12.0
  * fix(deps): update module golang.org/x/oauth2 to v0.11.0
  * [release-5.27] Preparing 5.27 backport
  * Update to Go 1.19
  * storage.storageImageDestination.Commit(): leverage image options
  * Rename SKOPEO_CI_TAG to SKOPEO_CI_BRANCH
  * [CI:DOCS] Add cirrus-cron retry/monitor jobs
  * chore(deps): update dependency containers/automation_images to v20230807
  * [release-5.27] Fix the branch we use for determining a git-validation starting point
  * fix(deps): update golang.org/x/exp digest to 352e893
  * fix(deps): update module github.com/sigstore/sigstore to v1.7.2
  * OCI image-spec / distribution-spec v1.1 updates, first round
  * fix(deps): update module github.com/sylabs/sif/v2 to v2.12.0
  * chore(deps): update dependency containers/automation_images to v20230809
  * Merge release branch into main
  * BREAKING: Update for move of github.com/theupdateframework/go-tuf/encrypted
  * Update module github.com/containers/ocicrypt to v1.1.8
  * chore(deps): update dependency containers/automation_images to v20230816
  * fix(deps): update module github.com/containers/storage to v1.49.0
  * fix(deps): update module github.com/sylabs/sif/v2 to v2.13.0
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.0
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.1
  * fix(deps): update golang.org/x/exp digest to d852ddb
  * fix(deps): update module golang.org/x/term to v0.12.0
  * fix(deps): update module github.com/sigstore/sigstore to v1.7.3
  * fix removal of temp file in GetBlob on Windows
  * fix(deps): update module golang.org/x/crypto to v0.13.0
  * Fix build with golangci-lint 1.54.2
  * fix(deps): update module golang.org/x/oauth2 to v0.12.0
  * Implement, and default to, a SQLite BlobInfoCache instead of BoltDB
  * fix(deps): update module github.com/docker/docker to v24.0.6+incompatible
  * Update dependencies of docker/docker
  * Correctly handle encryption/decryption changes in non-OCI formats
  * chore(deps): update module github.com/cyphar/filepath-securejoin to v0.2.4 [security]
  * fix(deps): update module github.com/containers/storage to v1.50.1
- bump c/storage to 1.50.2
  * Bump to v1.50.1
  * Add an OWNERS file for the merge bot to refer to
- bump c/common to 0.55.4
  * Bump c/image to v0.55.3</changelog>
  <changelog author="danish.prakash@suse.com" date="1694606401">- Require libcontainers-sles-mounts for *all* SLE products,
  and not just SLES. (bsc#1215291)</changelog>
  <changelog author="danish.prakash@suse.com" date="1701691200">- New release 20231204
-  bump c/common to 0.57.0
  * Bump to v0.56.0 by
  * Fix typo in comment
  * fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc5
  * Fix specification of unix:///run
  * libimage/layer_tree: if parent is empty and a manifest list then ignore check.
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Split up util package into pkg/password, pkg/copy, pkg/version
  * Remove ActiveDestination method to move into podman
  * Default machine CPUs to Cores/2
  * pkg/config: do NOT set StaticDir and VolumeDir
  * Implement negated label match function
  * chore: import packages only once
  * CoC: fix email link
-  bump c/storage to 1.51.0
  * Bump to v1.50.2
  * overlay, composefs: mount loop device RO
  * Run codespell on code
  * fix(deps): update module github.com/klauspost/compress to v1.17.0
  * store: serialize container deletion
  * pkg/system: reduce retry timeout for EnsureRemoveAll
  * overlay, composefs: use data-only lower layers
  * store: call RecordWrite() before graphDriver Cleanup()
  * fix(deps): update module golang.org/x/sys to v0.13.0
-  bump c/image to 5.29.0
  * Bump to v5.28.0
  * fix(deps): update module github.com/containers/storage to v1.50.2
  * Run codespell on code
  * fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc5
  * Use constants and types from opencontainers/image-spec/specs-go/v1
  * progress: set Current before Refill
  * copy: fix nil pointer dereference when checking compression algorithm
  * fix(deps): update module github.com/klauspost/compress to v1.17.0
  * fix(deps): update module github.com/sylabs/sif/v2 to v2.14.0
  * ociarchive: Add new ArchiveFileNotFoundError</changelog>
  <changelog author="dcermak@suse.com" date="1707220800">- New release 20240206
- bump bundled c/common to 0.57.4
- bump bundled c/image to 0.29.2
- conditionally require libcontainers-sles-mounds for product(SLE-Micro) as well
  (SLE Micro 6.0 now no longer provides product(SUSE_SLE) and instead only
  provides product(SLE-Micro)), fixes bsc#1216443</changelog>
</package>
<package pkgid="5e53e6af00f2b89a2c4ab85cf05693ed4d7a3a5f748087e0e09f834697637f69" name="libcontainers-sles-mounts" arch="noarch">
  <version epoch="0" ver="20230214" rel="150500.4.6.1"/>
  <changelog author="rbrown@suse.com" date="1654689600">- Add missing comma to previous change</changelog>
  <changelog author="dcermak@suse.com" date="1655208000">- Add missing Requires(post): sed, fixes boo#1200524
- Make %post compatible with dash</changelog>
  <changelog author="fvogt@suse.com" date="1655294400">- Use $() again in %post, but with a space for POSIX compliance</changelog>
  <changelog author="fcrozat@suse.com" date="1659528000">- Resync containers.conf / storage.conf with Fedora
- Create /etc/containers/registries.conf.d and
  add 000-shortnames.conf to it.</changelog>
  <changelog author="fvogt@suse.com" date="1660046400">- Fix obvious typo in containers.conf</changelog>
  <changelog author="dmueller@suse.com" date="1666699200">- set detached sigstore attachments for the SUSE controlled registries</changelog>
  <changelog author="dmueller@suse.com" date="1668081600">- postinstall script: slight cleanup, no functional change</changelog>
  <changelog author="dmueller@suse.com" date="1668686400">- add container-storage-driver.sh (bsc#1197093)</changelog>
  <changelog author="dcermak@suse.com" date="1669118400">- Update bundled common to 0.50.1
- Update bundled image to 5.23.1
- Update bundled storage to 1.44.0
- Drop bundled podman
- Bump version to 20221122
- Install container-storage-driver.sh in /etc/ on Leap &amp; SLE</changelog>
  <changelog author="dmueller@suse.com" date="1669636800">- add requires on util-linux-systemd for findmnt in profile script
- only set storage_driver env when no libpod exists
- avoid quoting issue</changelog>
  <changelog author="dcermak@suse.com" date="1670241600">- Remove registry.suse.com from search unqualified-search-registries:
  registry.suse.com responds very slowly to pagination repository listings
  (https://docs.docker.com/registry/spec/api/#pagination) and thereby causes
  every `podman search` to take over 90s. We have to remove it until this
  regression is fixed.</changelog>
  <changelog author="danish.prakash@suse.com" date="1673611200">- storage.conf: Unset 'driver' and set 'driver_priority' to
  allow podman to use 'btrfs' if available and fallback to
  'overlay' if not.
- .spec: rm %post script to set 'btrfs' as storage driver
  in storage.conf</changelog>
  <changelog author="danish.prakash@suse.com" date="1674648000">- Reverts https://build.opensuse.org/request/show/1060361
  Changes introduced to c/storage's storage.conf which adds
  a driver_priority attribute would break consumers of libcontainer-common
  as long as those packages are vendoring an older c/storage version.
  Instead of patching every consumer, we're reverting this change, until
  those packages have been updated downstream. [boo#1207509]</changelog>
  <changelog author="dcermak@suse.com" date="1676376000">- New upstream release 20230214
- bump c/storage to 1.45.3
- bump c/image to 5.24.1
- bump c/common to 0.51.0
- containers.conf:
  * add commented out options containers.read_only,
    engine.platform_to_oci_runtime, engine.events_container_create_inspect_data,
    network.volume_plugin_timeout, engine.runtimes.youki, machine.provider
  * remove deprecated setting containers.userns_size
  * add youki to engine.runtime_supports_json
- shortnames.conf: pull in latest upstream version
- storage.conf: add commented out option storage.transient_store
- correct license to APACHE-2.0 only (there's no GPLv3 code to be found)
- add source URLs to spec
- drop pointless copyright year</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add registry.suse.com to the unqualified-search-registries</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- Remove obsolete Requires(post): util-linux-systemd</changelog>
  <changelog author="dcermak@suse.com" date="1678881601">- Remove container-storage-driver.sh, we want to default to the overlay driver
  instead of btrfs.
  The btrfs driver is not really supported upstream (see
  e.g. https://github.com/containers/podman/issues/16882), there is no real
  development anymore and it appears to have subtle bugs (e.g. the one linked
  previously).
  To prevent further such issues, we will from now on default to the overlay
  driver.</changelog>
  <changelog author="fcrozat@suse.com" date="1682510400">- Own /etc/containers/systemd and /usr/share/containers/systemd,
  useful for podman quadlet.</changelog>
  <changelog author="danish.prakash@suse.com" date="1684238400">- Introduce new subpackage that adds SLE-specific mounts only
  on SLE systems (if sles-release) hence avoiding superfluous
  warnings on non-SLE systems while running podman commands.
  (bsc#1211124)</changelog>
  <changelog author="danish.prakash@suse.com" date="1694692800">- Require libcontainers-sles-mounts for *all* SLE products,
  and not just SLES. (bsc#1215291)</changelog>
</package>
<package pkgid="9c909630c789e8f54c191ca8ed451e98e9b6b3442c2296ee2a839a602912a4fa" name="libcontainers-sles-mounts" arch="noarch">
  <version epoch="0" ver="20240206" rel="150500.4.9.2"/>
  <changelog author="dcermak@suse.com" date="1669118400">- Update bundled common to 0.50.1
- Update bundled image to 5.23.1
- Update bundled storage to 1.44.0
- Drop bundled podman
- Bump version to 20221122
- Install container-storage-driver.sh in /etc/ on Leap &amp; SLE</changelog>
  <changelog author="dmueller@suse.com" date="1669636800">- add requires on util-linux-systemd for findmnt in profile script
- only set storage_driver env when no libpod exists
- avoid quoting issue</changelog>
  <changelog author="dcermak@suse.com" date="1670241600">- Remove registry.suse.com from search unqualified-search-registries:
  registry.suse.com responds very slowly to pagination repository listings
  (https://docs.docker.com/registry/spec/api/#pagination) and thereby causes
  every `podman search` to take over 90s. We have to remove it until this
  regression is fixed.</changelog>
  <changelog author="danish.prakash@suse.com" date="1673611200">- storage.conf: Unset 'driver' and set 'driver_priority' to
  allow podman to use 'btrfs' if available and fallback to
  'overlay' if not.
- .spec: rm %post script to set 'btrfs' as storage driver
  in storage.conf</changelog>
  <changelog author="danish.prakash@suse.com" date="1674648000">- Reverts https://build.opensuse.org/request/show/1060361
  Changes introduced to c/storage's storage.conf which adds
  a driver_priority attribute would break consumers of libcontainer-common
  as long as those packages are vendoring an older c/storage version.
  Instead of patching every consumer, we're reverting this change, until
  those packages have been updated downstream. [boo#1207509]</changelog>
  <changelog author="dcermak@suse.com" date="1676376000">- New upstream release 20230214
- bump c/storage to 1.45.3
- bump c/image to 5.24.1
- bump c/common to 0.51.0
- containers.conf:
  * add commented out options containers.read_only,
    engine.platform_to_oci_runtime, engine.events_container_create_inspect_data,
    network.volume_plugin_timeout, engine.runtimes.youki, machine.provider
  * remove deprecated setting containers.userns_size
  * add youki to engine.runtime_supports_json
- shortnames.conf: pull in latest upstream version
- storage.conf: add commented out option storage.transient_store
- correct license to APACHE-2.0 only (there's no GPLv3 code to be found)
- add source URLs to spec
- drop pointless copyright year</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add registry.suse.com to the unqualified-search-registries</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- Remove obsolete Requires(post): util-linux-systemd</changelog>
  <changelog author="dcermak@suse.com" date="1678881601">- Remove container-storage-driver.sh, we want to default to the overlay driver
  instead of btrfs.
  The btrfs driver is not really supported upstream (see
  e.g. https://github.com/containers/podman/issues/16882), there is no real
  development anymore and it appears to have subtle bugs (e.g. the one linked
  previously).
  To prevent further such issues, we will from now on default to the overlay
  driver.</changelog>
  <changelog author="fcrozat@suse.com" date="1682510400">- Own /etc/containers/systemd and /usr/share/containers/systemd,
  useful for podman quadlet.</changelog>
  <changelog author="danish.prakash@suse.com" date="1684238400">- Introduce new subpackage that adds SLE-specific mounts only
  on SLE systems (if sles-release) hence avoiding superfluous
  warnings on non-SLE systems while running podman commands.
  (bsc#1211124)</changelog>
  <changelog author="danish.prakash@suse.com" date="1685966400">- Enforce BCI verification via Podman on openSUSE distributions
  using the already shipped container signing keys.
  (bsc#1197030)</changelog>
  <changelog author="danish.prakash@suse.com" date="1687780800">- Resolve choice on openSUSE distributions for libcontainer-policy
  by suggesting the libcontainers-openSUSE-policy explicitly.</changelog>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Remove unused grep requirement</changelog>
  <changelog author="danish.prakash@suse.com" date="1690804800">- Disable CNI related configs on ALP (bsc#1213556)
  (https://github.com/containers/podman/issues/19327)</changelog>
  <changelog author="danish.prakash@suse.com" date="1692014400">- New release 20230814
- bump c/storage to 1.48.0
  * Bump to v1.47.0
  * Fix error if continueWrite/continueRead pipe open fails
  * pkg/regexp: make sure that &amp;Regexp implements the interfaces
  * Remove use of fillGo18FileTypeBits
- bump c/image to 5.27.0
  * fix(deps): update module github.com/docker/docker to v23.0.3+incompatible
  * fix(deps): update module golang.org/x/term to v0.7.0
  * fix(deps): update module github.com/klauspost/compress to v1.16.4
  * fix(deps): update module github.com/sigstore/sigstore to v1.6.1
  * chore(deps): update dependency containers/automation_images to v20230405
  * fix(deps): update module golang.org/x/crypto to v0.8.0
  * fix(deps): update module golang.org/x/oauth2 to v0.7.0
  * fix(deps): update module github.com/containers/storage to v1.46.1
  * fix(deps): update module github.com/sigstore/sigstore to v1.6.2
  * Don't completely silently ignore non-OCI manifests in OCI layouts
  * fix(deps): update module github.com/klauspost/compress to v1.16.5
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * fix(deps): update module github.com/docker/docker to v23.0.4+incompatible
- bump c/common to 0.55.3
  * Change default image volume mode to "nullfs" on FreeBSD
  * [v0.55][CI-DOCS] remove zstd:chunked from docs
  * libimage: harden lookup by digest
  * libimage: HasDifferentDigest: add InsecureSkipTLSVerify option</changelog>
  <changelog author="danish.prakash@suse.com" date="1694606400">- New release 20230913
- bump c/image to 5.28.0
  * Bump to v5.26.0
  * fix(deps): update module github.com/sigstore/rekor to v1.2.2
  * fix(deps): update module github.com/sigstore/fulcio to v1.3.2
  * Adding IO decorator to copy progress bar
  * Ensure we close HTTP connections on all paths
  * fix(deps): update module github.com/containers/storage to v1.48.0
  * fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc4
  * fix(deps): update github.com/cyberphone/json-canonicalization digest to 91eb5f1
  * fix(deps): update golang.org/x/exp digest to 97b1e66
  * fix(deps): update module github.com/klauspost/compress to v1.16.7
  * fix(deps): update module github.com/docker/docker to v24.0.3+incompatible
  * fix(deps): update module golang.org/x/oauth2 to v0.10.0
  * manifest: ListUpdate add imgspecv1.Platform field
  * fix(deps): update module github.com/docker/docker to v24.0.4+incompatible
  * pkg/docker: use the same default auth path as macOS on FreeBSD
  * fix(deps): update module github.com/sigstore/fulcio to v1.3.4
  * blob: TryReusingBlobWithOptions consider RequiredCompression if set
  * Fix tests of the ostree transport
  * helpers_test,cleanup: correct argument order
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Make temporary names container/image specific
  * listupdate,oci: instance show read-only annotations and CompressionAlgorithmNames
  * fix(deps): update module github.com/docker/docker-credential-helpers to v0.8.0
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Fix TestOCI1IndexChooseInstanc
  * Refactor data passing in c/image/copy
  * Update module github.com/sigstore/fulcio to v1.4.0
  * copy/multiple: instanceCopyCopy honor UpdateCompressionAlgorithms
  * Update vendor of containers/storage
  * copy/single: accept custom *Options and wrap arguments in copySingleImageOptions
  * Improve transport documentation
  * fix(deps): update module github.com/vbatts/tar-split to v0.11.5
  * fix(deps): update module github.com/docker/docker to v24.0.5+incompatible
  * copy: implement instanceCopyClone for zstd compression
  * copy/multiple: priority of instanceCopyCopy must be higher than instanceCopyClone
  * Clarify where mirrors are used
  * fix(deps): update github.com/cyberphone/json-canonicalization digest to aa7fe85
  * fix(deps): update github.com/containers/storage digest to c3da76f
  * Update x/exp/slices, and some small slice-related cleanups
  * Use consistent example domains in #2069
  * copy: add support for ForceCompressionFormat
  * fix(deps): update module golang.org/x/term to v0.11.0
  * fix(deps): update module golang.org/x/crypto to v0.12.0
  * fix(deps): update module golang.org/x/oauth2 to v0.11.0
  * [release-5.27] Preparing 5.27 backport
  * Update to Go 1.19
  * storage.storageImageDestination.Commit(): leverage image options
  * Rename SKOPEO_CI_TAG to SKOPEO_CI_BRANCH
  * [CI:DOCS] Add cirrus-cron retry/monitor jobs
  * chore(deps): update dependency containers/automation_images to v20230807
  * [release-5.27] Fix the branch we use for determining a git-validation starting point
  * fix(deps): update golang.org/x/exp digest to 352e893
  * fix(deps): update module github.com/sigstore/sigstore to v1.7.2
  * OCI image-spec / distribution-spec v1.1 updates, first round
  * fix(deps): update module github.com/sylabs/sif/v2 to v2.12.0
  * chore(deps): update dependency containers/automation_images to v20230809
  * Merge release branch into main
  * BREAKING: Update for move of github.com/theupdateframework/go-tuf/encrypted
  * Update module github.com/containers/ocicrypt to v1.1.8
  * chore(deps): update dependency containers/automation_images to v20230816
  * fix(deps): update module github.com/containers/storage to v1.49.0
  * fix(deps): update module github.com/sylabs/sif/v2 to v2.13.0
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.0
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.1
  * fix(deps): update golang.org/x/exp digest to d852ddb
  * fix(deps): update module golang.org/x/term to v0.12.0
  * fix(deps): update module github.com/sigstore/sigstore to v1.7.3
  * fix removal of temp file in GetBlob on Windows
  * fix(deps): update module golang.org/x/crypto to v0.13.0
  * Fix build with golangci-lint 1.54.2
  * fix(deps): update module golang.org/x/oauth2 to v0.12.0
  * Implement, and default to, a SQLite BlobInfoCache instead of BoltDB
  * fix(deps): update module github.com/docker/docker to v24.0.6+incompatible
  * Update dependencies of docker/docker
  * Correctly handle encryption/decryption changes in non-OCI formats
  * chore(deps): update module github.com/cyphar/filepath-securejoin to v0.2.4 [security]
  * fix(deps): update module github.com/containers/storage to v1.50.1
- bump c/storage to 1.50.2
  * Bump to v1.50.1
  * Add an OWNERS file for the merge bot to refer to
- bump c/common to 0.55.4
  * Bump c/image to v0.55.3</changelog>
  <changelog author="danish.prakash@suse.com" date="1694606401">- Require libcontainers-sles-mounts for *all* SLE products,
  and not just SLES. (bsc#1215291)</changelog>
  <changelog author="danish.prakash@suse.com" date="1701691200">- New release 20231204
-  bump c/common to 0.57.0
  * Bump to v0.56.0 by
  * Fix typo in comment
  * fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc5
  * Fix specification of unix:///run
  * libimage/layer_tree: if parent is empty and a manifest list then ignore check.
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Split up util package into pkg/password, pkg/copy, pkg/version
  * Remove ActiveDestination method to move into podman
  * Default machine CPUs to Cores/2
  * pkg/config: do NOT set StaticDir and VolumeDir
  * Implement negated label match function
  * chore: import packages only once
  * CoC: fix email link
-  bump c/storage to 1.51.0
  * Bump to v1.50.2
  * overlay, composefs: mount loop device RO
  * Run codespell on code
  * fix(deps): update module github.com/klauspost/compress to v1.17.0
  * store: serialize container deletion
  * pkg/system: reduce retry timeout for EnsureRemoveAll
  * overlay, composefs: use data-only lower layers
  * store: call RecordWrite() before graphDriver Cleanup()
  * fix(deps): update module golang.org/x/sys to v0.13.0
-  bump c/image to 5.29.0
  * Bump to v5.28.0
  * fix(deps): update module github.com/containers/storage to v1.50.2
  * Run codespell on code
  * fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc5
  * Use constants and types from opencontainers/image-spec/specs-go/v1
  * progress: set Current before Refill
  * copy: fix nil pointer dereference when checking compression algorithm
  * fix(deps): update module github.com/klauspost/compress to v1.17.0
  * fix(deps): update module github.com/sylabs/sif/v2 to v2.14.0
  * ociarchive: Add new ArchiveFileNotFoundError</changelog>
  <changelog author="dcermak@suse.com" date="1707220800">- New release 20240206
- bump bundled c/common to 0.57.4
- bump bundled c/image to 0.29.2
- conditionally require libcontainers-sles-mounds for product(SLE-Micro) as well
  (SLE Micro 6.0 now no longer provides product(SUSE_SLE) and instead only
  provides product(SLE-Micro)), fixes bsc#1216443</changelog>
</package>
<package pkgid="24ba9ff8c3f4628c0c6529f0213bfe7007e6fd67a3a740d16489f86f9424295c" name="libcrypt1" arch="aarch64">
  <version epoch="0" ver="4.4.15" rel="150300.4.7.1"/>
  <changelog author="schwab@suse.de" date="1525867200">- ABI compatible replacement for libcypt from glibc</changelog>
  <changelog author="schwab@suse.de" date="1527076800">- Update to libxcrypt 4.0.1</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- Update to libxcrypt 4.1.0
  * Fix spelling of SUSE.
  * Lower the minimum required automake version to 1.14.
  * Fix build with USE_SWAPCONTEXT turned off.
  * Extend --enable-weak-hashes configure option to accept optional
    "glibc" parameter.
  * Fix the leak of obtained random bytes.
  * Check expected output strings for deterministic methods.
  * Fix memory leak in crypt_sha1_rn.
  * Fix read of random bytes out of bounds in gensalt_sha1_rn.
  * Make it possible to disable individual hashes at configure time.
  * Make salt validation pickier.
  * Replace crypt-sunmd5.c with BSD-licensed cleanroom reimplementation.
  * Make crypt_gensalt for $sha1 deterministic.
  * Fix incorrect output-size computation in crypt_sha1_rn.
  * Add docs for SHA1, MD5/Sun, NTHASH.
  * Introduce CRYPT_GENSALT_IMPLEMENTS_* feature test macros.
  * Install libcrypt.pc symlink along with libxcrypt.pc.
  * Extend --enable-obsolete-api configure option.
  * Extend overall test coverage.</changelog>
  <changelog author="jengelh@inai.de" date="1533556800">- Fix RPM groups for Factory.</changelog>
  <changelog author="schwab@suse.de" date="1533729600">- Add conflicts with glibc-devel &lt; 2.28</changelog>
  <changelog author="schwab@suse.de" date="1539086400">- Set compatibility level to suse</changelog>
  <changelog author="mliska@suse.cz" date="1550145600">- Update to version 4.4.3:
  * Add libxcrypt.so, libxcrypt.a and xcrypt.h.
  * Add new man3 manual pages.</changelog>
  <changelog author="schwab@suse.de" date="1550577600">- format-overflow.patch: Fix -Werror=format-overflow</changelog>
  <changelog author="mliska@suse.cz" date="1561032000">- Disable LTO due to symbol versioning (boo#1138833).</changelog>
  <changelog author="schwab@suse.de" date="1575720000">- Update to version 4.4.10
  * Fix alignment problem for GOST 34.11 (Streebog) in gost-yestcrypt.
  * The crypt_* functions will now all fail and set errno to ERANGE if
    their 'phrase' argument is longer than CRYPT_MAX_PASSPHRASE_SIZE
    characters (this is currently 512)
  * The NT hashing method no longer truncates passphrases at 128
    characters; Windows does not do this.
- format-overflow.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1576152000">- gcc10.patch: fix build with gcc10 (bsc#1158192)</changelog>
  <changelog author="schwab@suse.de" date="1579694400">- Update to version 4.4.11
  * Fixes for GCC v10.x
  * Change how the known-answer tests are parallelized
- gcc10.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1580385600">- Update to version 4.4.12
  * Another fix for GCC v10.x, which occurs on s390 architectures only.</changelog>
  <changelog author="schwab@suse.de" date="1583150400">- Update to version 4.4.15
  * The compatibility symbols crypt_gensalt_r, xcrypt, xcrypt_r,
    xcrypt_gensalt, and xcrypt_gensalt_r are deprecated further
  * Speed up ka-sunmd5 by skipping most of the test phrases
- Package README.md and TODO.md (bsc#1165389)</changelog>
  <changelog author="schwab@suse.de" date="1598961600">- Add compatibility provides for SLE15</changelog>
  <changelog author="dmueller@suse.com" date="1612612800">- add compatibility provides for Step 15 as well (bsc#1181571)</changelog>
  <changelog author="pgajdos@suse.com" date="1702382400">- fix variable name for datamember in 'struct crypt_data' [bsc#1215496]
- added patches
  fix https://github.com/besser82/libxcrypt/commit/b212d601549a0fc84cbbcaf21b931f903787d7e2
  + libxcrypt-man-fix-variable-name.patch</changelog>
</package>
<package pkgid="b6b1afcbf0f8f81ced3471c2c5f4975926d1bb01840aea1eacda83eb0ec1c306" name="libcrypt1" arch="s390x">
  <version epoch="0" ver="4.4.15" rel="150300.4.7.1"/>
  <changelog author="schwab@suse.de" date="1525867200">- ABI compatible replacement for libcypt from glibc</changelog>
  <changelog author="schwab@suse.de" date="1527076800">- Update to libxcrypt 4.0.1</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- Update to libxcrypt 4.1.0
  * Fix spelling of SUSE.
  * Lower the minimum required automake version to 1.14.
  * Fix build with USE_SWAPCONTEXT turned off.
  * Extend --enable-weak-hashes configure option to accept optional
    "glibc" parameter.
  * Fix the leak of obtained random bytes.
  * Check expected output strings for deterministic methods.
  * Fix memory leak in crypt_sha1_rn.
  * Fix read of random bytes out of bounds in gensalt_sha1_rn.
  * Make it possible to disable individual hashes at configure time.
  * Make salt validation pickier.
  * Replace crypt-sunmd5.c with BSD-licensed cleanroom reimplementation.
  * Make crypt_gensalt for $sha1 deterministic.
  * Fix incorrect output-size computation in crypt_sha1_rn.
  * Add docs for SHA1, MD5/Sun, NTHASH.
  * Introduce CRYPT_GENSALT_IMPLEMENTS_* feature test macros.
  * Install libcrypt.pc symlink along with libxcrypt.pc.
  * Extend --enable-obsolete-api configure option.
  * Extend overall test coverage.</changelog>
  <changelog author="jengelh@inai.de" date="1533556800">- Fix RPM groups for Factory.</changelog>
  <changelog author="schwab@suse.de" date="1533729600">- Add conflicts with glibc-devel &lt; 2.28</changelog>
  <changelog author="schwab@suse.de" date="1539086400">- Set compatibility level to suse</changelog>
  <changelog author="mliska@suse.cz" date="1550145600">- Update to version 4.4.3:
  * Add libxcrypt.so, libxcrypt.a and xcrypt.h.
  * Add new man3 manual pages.</changelog>
  <changelog author="schwab@suse.de" date="1550577600">- format-overflow.patch: Fix -Werror=format-overflow</changelog>
  <changelog author="mliska@suse.cz" date="1561032000">- Disable LTO due to symbol versioning (boo#1138833).</changelog>
  <changelog author="schwab@suse.de" date="1575720000">- Update to version 4.4.10
  * Fix alignment problem for GOST 34.11 (Streebog) in gost-yestcrypt.
  * The crypt_* functions will now all fail and set errno to ERANGE if
    their 'phrase' argument is longer than CRYPT_MAX_PASSPHRASE_SIZE
    characters (this is currently 512)
  * The NT hashing method no longer truncates passphrases at 128
    characters; Windows does not do this.
- format-overflow.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1576152000">- gcc10.patch: fix build with gcc10 (bsc#1158192)</changelog>
  <changelog author="schwab@suse.de" date="1579694400">- Update to version 4.4.11
  * Fixes for GCC v10.x
  * Change how the known-answer tests are parallelized
- gcc10.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1580385600">- Update to version 4.4.12
  * Another fix for GCC v10.x, which occurs on s390 architectures only.</changelog>
  <changelog author="schwab@suse.de" date="1583150400">- Update to version 4.4.15
  * The compatibility symbols crypt_gensalt_r, xcrypt, xcrypt_r,
    xcrypt_gensalt, and xcrypt_gensalt_r are deprecated further
  * Speed up ka-sunmd5 by skipping most of the test phrases
- Package README.md and TODO.md (bsc#1165389)</changelog>
  <changelog author="schwab@suse.de" date="1598961600">- Add compatibility provides for SLE15</changelog>
  <changelog author="dmueller@suse.com" date="1612612800">- add compatibility provides for Step 15 as well (bsc#1181571)</changelog>
  <changelog author="pgajdos@suse.com" date="1702382400">- fix variable name for datamember in 'struct crypt_data' [bsc#1215496]
- added patches
  fix https://github.com/besser82/libxcrypt/commit/b212d601549a0fc84cbbcaf21b931f903787d7e2
  + libxcrypt-man-fix-variable-name.patch</changelog>
</package>
<package pkgid="4ad93fb0cd888b9ebe695cc906ee787eca9aabcb69c9530885f6032fbbcf2c3d" name="libcrypt1" arch="x86_64">
  <version epoch="0" ver="4.4.15" rel="150300.4.7.1"/>
  <changelog author="schwab@suse.de" date="1525867200">- ABI compatible replacement for libcypt from glibc</changelog>
  <changelog author="schwab@suse.de" date="1527076800">- Update to libxcrypt 4.0.1</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- Update to libxcrypt 4.1.0
  * Fix spelling of SUSE.
  * Lower the minimum required automake version to 1.14.
  * Fix build with USE_SWAPCONTEXT turned off.
  * Extend --enable-weak-hashes configure option to accept optional
    "glibc" parameter.
  * Fix the leak of obtained random bytes.
  * Check expected output strings for deterministic methods.
  * Fix memory leak in crypt_sha1_rn.
  * Fix read of random bytes out of bounds in gensalt_sha1_rn.
  * Make it possible to disable individual hashes at configure time.
  * Make salt validation pickier.
  * Replace crypt-sunmd5.c with BSD-licensed cleanroom reimplementation.
  * Make crypt_gensalt for $sha1 deterministic.
  * Fix incorrect output-size computation in crypt_sha1_rn.
  * Add docs for SHA1, MD5/Sun, NTHASH.
  * Introduce CRYPT_GENSALT_IMPLEMENTS_* feature test macros.
  * Install libcrypt.pc symlink along with libxcrypt.pc.
  * Extend --enable-obsolete-api configure option.
  * Extend overall test coverage.</changelog>
  <changelog author="jengelh@inai.de" date="1533556800">- Fix RPM groups for Factory.</changelog>
  <changelog author="schwab@suse.de" date="1533729600">- Add conflicts with glibc-devel &lt; 2.28</changelog>
  <changelog author="schwab@suse.de" date="1539086400">- Set compatibility level to suse</changelog>
  <changelog author="mliska@suse.cz" date="1550145600">- Update to version 4.4.3:
  * Add libxcrypt.so, libxcrypt.a and xcrypt.h.
  * Add new man3 manual pages.</changelog>
  <changelog author="schwab@suse.de" date="1550577600">- format-overflow.patch: Fix -Werror=format-overflow</changelog>
  <changelog author="mliska@suse.cz" date="1561032000">- Disable LTO due to symbol versioning (boo#1138833).</changelog>
  <changelog author="schwab@suse.de" date="1575720000">- Update to version 4.4.10
  * Fix alignment problem for GOST 34.11 (Streebog) in gost-yestcrypt.
  * The crypt_* functions will now all fail and set errno to ERANGE if
    their 'phrase' argument is longer than CRYPT_MAX_PASSPHRASE_SIZE
    characters (this is currently 512)
  * The NT hashing method no longer truncates passphrases at 128
    characters; Windows does not do this.
- format-overflow.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1576152000">- gcc10.patch: fix build with gcc10 (bsc#1158192)</changelog>
  <changelog author="schwab@suse.de" date="1579694400">- Update to version 4.4.11
  * Fixes for GCC v10.x
  * Change how the known-answer tests are parallelized
- gcc10.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1580385600">- Update to version 4.4.12
  * Another fix for GCC v10.x, which occurs on s390 architectures only.</changelog>
  <changelog author="schwab@suse.de" date="1583150400">- Update to version 4.4.15
  * The compatibility symbols crypt_gensalt_r, xcrypt, xcrypt_r,
    xcrypt_gensalt, and xcrypt_gensalt_r are deprecated further
  * Speed up ka-sunmd5 by skipping most of the test phrases
- Package README.md and TODO.md (bsc#1165389)</changelog>
  <changelog author="schwab@suse.de" date="1598961600">- Add compatibility provides for SLE15</changelog>
  <changelog author="dmueller@suse.com" date="1612612800">- add compatibility provides for Step 15 as well (bsc#1181571)</changelog>
  <changelog author="pgajdos@suse.com" date="1702382400">- fix variable name for datamember in 'struct crypt_data' [bsc#1215496]
- added patches
  fix https://github.com/besser82/libxcrypt/commit/b212d601549a0fc84cbbcaf21b931f903787d7e2
  + libxcrypt-man-fix-variable-name.patch</changelog>
</package>
<package pkgid="cabf433a58c2f8b915542fe52c89e140d5fc92937f5d9d68ef504599087cd101" name="libcups2" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.51.2"/>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
</package>
<package pkgid="2cc39b42ba89bf48cfe4f5cc3677e4adc812112e6a5f4dbc430cf381fafa09c0" name="libcups2" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.51.2"/>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
</package>
<package pkgid="1a68aff3becd9341eb7bfe420f5e548336542ae3d94616edf9fe9052b5dad535" name="libcups2" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.51.2"/>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
</package>
<package pkgid="fb1edc2fde8cce97dd015ece7efefe9bed823639f9284e00dad4db5902879a8c" name="libcups2" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.54.1"/>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
</package>
<package pkgid="6b01924633aeef719007deb62d3343ae2800c9cc272926937c4f0389fb01e103" name="libcups2" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.54.1"/>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
</package>
<package pkgid="59ac86d13c3c83026a8e3b4a395042e3bd158a8ca43a1f5bc4806b08ca5db82a" name="libcups2" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.54.1"/>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
</package>
<package pkgid="a089e662ab0d7cb8e5fcf50d5479619e3faeb56f5da59ea0568a6e4594c51f87" name="libcups2" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.59.1"/>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
</package>
<package pkgid="89994c45eb88ecfb66bc2ed455451f8b26ff4ef28a4dc55194b1ad04f283c206" name="libcups2" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.59.1"/>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
</package>
<package pkgid="35f375b8da44a2e4cc2adee7fd9cbaffb6351f18b59aca7e50a83302061a4d16" name="libcups2" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.59.1"/>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
</package>
<package pkgid="9ad5d27e2a0f090f041bd4fa0702e21cd53ef2bec4433d1810fd3f9925e921de" name="libcups2" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.62.1"/>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
</package>
<package pkgid="69896b30c0c1e6592f4490121fdbeab11c1c0d32ad54e473f8db60f47ea5300a" name="libcups2" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.62.1"/>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
</package>
<package pkgid="a8805551917b156e29b9c0514ba735c6d83d0ed7b71c5c236e41d1a19bc1bbc9" name="libcups2" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.62.1"/>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
</package>
<package pkgid="1c6b28aeed6b3c0959d1a8d3e7453c1d3e51155d10c8eebe33ae204a40c8e919" name="libcups2" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.65.1"/>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
</package>
<package pkgid="6572c39d9c5cd8a83b622b62c7822c87270f1ba0c3b8ce72ba4b7b30900ead21" name="libcups2" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.65.1"/>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
</package>
<package pkgid="63a645f909569582a24bc908a80a494d52ced2aa1f8b3e898fedc6e9fbdb8c72" name="libcups2" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.65.1"/>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
</package>
<package pkgid="c0b0b5e64bc9555dfc00f4a6459deb6e5f7e0585f05ce39aba551ce6b7827152" name="libcurl4" arch="aarch64">
  <version epoch="0" ver="8.0.1" rel="150400.5.32.1"/>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
</package>
<package pkgid="72363230c782bc8139584f7b6c661a07fe42554b441b17656d70a47370691c15" name="libcurl4" arch="s390x">
  <version epoch="0" ver="8.0.1" rel="150400.5.32.1"/>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
</package>
<package pkgid="14901f528d8e28d37214ef02b72883fdd6f281abfc3a1ef7fe8d9c14b71c5ca9" name="libcurl4" arch="x86_64">
  <version epoch="0" ver="8.0.1" rel="150400.5.32.1"/>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
</package>
<package pkgid="71db41ebef7432590a2f1d4624ca9471b50371e64fad86acc7acfca993b4bd44" name="libcurl4" arch="aarch64">
  <version epoch="0" ver="8.0.1" rel="150400.5.36.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
</package>
<package pkgid="74c40c2b85b963bfdb4de6b1f3f83cc47c84c9b2191b3a5d802327bdd3ffa4a3" name="libcurl4" arch="s390x">
  <version epoch="0" ver="8.0.1" rel="150400.5.36.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
</package>
<package pkgid="6266ce13ccbf934b0197b6c2a1123c0a4e3ff5dd9da7650092cc2b1907b1c548" name="libcurl4" arch="x86_64">
  <version epoch="0" ver="8.0.1" rel="150400.5.36.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
</package>
<package pkgid="34aed315e2e826cae93ca8afc8463f239fa29c6ff59599a04ab927d99c87cdd2" name="libcurl4" arch="aarch64">
  <version epoch="0" ver="8.0.1" rel="150400.5.41.1"/>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701950400">- Fix: libssh: Implement SFTP packet size limit (bsc#1216987)
  * Add curl-libssh_Implement_SFTP_packet_size_limit.patch</changelog>
</package>
<package pkgid="7e332dc9c9ce473eba03c8cf3afa124ef5bac24afbd951bbea87fadb9c51a74a" name="libcurl4" arch="s390x">
  <version epoch="0" ver="8.0.1" rel="150400.5.41.1"/>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701950400">- Fix: libssh: Implement SFTP packet size limit (bsc#1216987)
  * Add curl-libssh_Implement_SFTP_packet_size_limit.patch</changelog>
</package>
<package pkgid="739698a835ffdfa39d586ec201b656f8eef67fe752b426b27e499d2c04b6e7ac" name="libcurl4" arch="x86_64">
  <version epoch="0" ver="8.0.1" rel="150400.5.41.1"/>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701950400">- Fix: libssh: Implement SFTP packet size limit (bsc#1216987)
  * Add curl-libssh_Implement_SFTP_packet_size_limit.patch</changelog>
</package>
<package pkgid="68cb589fe9c8145b12d670bbcabc3b885ed971d4eff481ab5e463b8f2850f548" name="libcurl4" arch="aarch64">
  <version epoch="0" ver="8.0.1" rel="150400.5.44.1"/>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701950400">- Fix: libssh: Implement SFTP packet size limit (bsc#1216987)
  * Add curl-libssh_Implement_SFTP_packet_size_limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711022400">- Security fix: [bsc#1221667, CVE-2024-2398]
  * curl: HTTP/2 push headers memory-leak
  * Add curl-CVE-2024-2398.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711108800">- Security fix: [bsc#1221665, CVE-2024-2004]
  * Usage of disabled protocol
  * Add curl-CVE-2024-2004.patch</changelog>
</package>
<package pkgid="9fccab7cd56f5254ee3cabc40172ba5a56a41f38ea915e85821b05a4b4c3b014" name="libcurl4" arch="s390x">
  <version epoch="0" ver="8.0.1" rel="150400.5.44.1"/>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701950400">- Fix: libssh: Implement SFTP packet size limit (bsc#1216987)
  * Add curl-libssh_Implement_SFTP_packet_size_limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711022400">- Security fix: [bsc#1221667, CVE-2024-2398]
  * curl: HTTP/2 push headers memory-leak
  * Add curl-CVE-2024-2398.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711108800">- Security fix: [bsc#1221665, CVE-2024-2004]
  * Usage of disabled protocol
  * Add curl-CVE-2024-2004.patch</changelog>
</package>
<package pkgid="87a2607221ede31575fcdb17774ee1d41acb37a539a548a12d8aad4d535eefc7" name="libcurl4" arch="x86_64">
  <version epoch="0" ver="8.0.1" rel="150400.5.44.1"/>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701950400">- Fix: libssh: Implement SFTP packet size limit (bsc#1216987)
  * Add curl-libssh_Implement_SFTP_packet_size_limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711022400">- Security fix: [bsc#1221667, CVE-2024-2398]
  * curl: HTTP/2 push headers memory-leak
  * Add curl-CVE-2024-2398.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711108800">- Security fix: [bsc#1221665, CVE-2024-2004]
  * Usage of disabled protocol
  * Add curl-CVE-2024-2004.patch</changelog>
</package>
<package pkgid="7592047284106dffac8d07ff3a922298043024b3ba5f8771414165171cd25389" name="libcurl4" arch="aarch64">
  <version epoch="0" ver="8.0.1" rel="150400.5.47.1"/>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701950400">- Fix: libssh: Implement SFTP packet size limit (bsc#1216987)
  * Add curl-libssh_Implement_SFTP_packet_size_limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711022400">- Security fix: [bsc#1221667, CVE-2024-2398]
  * curl: HTTP/2 push headers memory-leak
  * Add curl-CVE-2024-2398.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711108800">- Security fix: [bsc#1221665, CVE-2024-2004]
  * Usage of disabled protocol
  * Add curl-CVE-2024-2004.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1722427200">- Security fix: [bsc#1228535, CVE-2024-7264]
  * curl: ASN.1 date parser overread
  * Add curl-CVE-2024-7264.patch</changelog>
</package>
<package pkgid="54cc9ec4fa2dd6588cb5c737883cb0e4e30c092eca4becfa7fcc6f0971feaf1c" name="libcurl4" arch="s390x">
  <version epoch="0" ver="8.0.1" rel="150400.5.47.1"/>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701950400">- Fix: libssh: Implement SFTP packet size limit (bsc#1216987)
  * Add curl-libssh_Implement_SFTP_packet_size_limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711022400">- Security fix: [bsc#1221667, CVE-2024-2398]
  * curl: HTTP/2 push headers memory-leak
  * Add curl-CVE-2024-2398.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711108800">- Security fix: [bsc#1221665, CVE-2024-2004]
  * Usage of disabled protocol
  * Add curl-CVE-2024-2004.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1722427200">- Security fix: [bsc#1228535, CVE-2024-7264]
  * curl: ASN.1 date parser overread
  * Add curl-CVE-2024-7264.patch</changelog>
</package>
<package pkgid="b95ceff44fbff40a66242710a5baae668dced9c3d6ed2ec535270645b11e7ce6" name="libcurl4" arch="x86_64">
  <version epoch="0" ver="8.0.1" rel="150400.5.47.1"/>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701950400">- Fix: libssh: Implement SFTP packet size limit (bsc#1216987)
  * Add curl-libssh_Implement_SFTP_packet_size_limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711022400">- Security fix: [bsc#1221667, CVE-2024-2398]
  * curl: HTTP/2 push headers memory-leak
  * Add curl-CVE-2024-2398.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711108800">- Security fix: [bsc#1221665, CVE-2024-2004]
  * Usage of disabled protocol
  * Add curl-CVE-2024-2004.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1722427200">- Security fix: [bsc#1228535, CVE-2024-7264]
  * curl: ASN.1 date parser overread
  * Add curl-CVE-2024-7264.patch</changelog>
</package>
<package pkgid="acfc5fe1f704414b7e6e41ca10807490fe0f67abb36c192e74f6443089cd7502" name="libcurl4" arch="aarch64">
  <version epoch="0" ver="8.0.1" rel="150400.5.50.1"/>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701950400">- Fix: libssh: Implement SFTP packet size limit (bsc#1216987)
  * Add curl-libssh_Implement_SFTP_packet_size_limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711022400">- Security fix: [bsc#1221667, CVE-2024-2398]
  * curl: HTTP/2 push headers memory-leak
  * Add curl-CVE-2024-2398.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711108800">- Security fix: [bsc#1221665, CVE-2024-2004]
  * Usage of disabled protocol
  * Add curl-CVE-2024-2004.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1722427200">- Security fix: [bsc#1228535, CVE-2024-7264]
  * curl: ASN.1 date parser overread
  * Add curl-CVE-2024-7264.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725451200">- Security fix: [bsc#1230093, CVE-2024-8096]
  * curl: OCSP stapling bypass with GnuTLS
  * Add curl-CVE-2024-8096.patch</changelog>
</package>
<package pkgid="0d12bf7ecc7debd6f5cd1c08cbe5307bd248a94c7cf5477ead4c0c4c4ba53483" name="libcurl4" arch="s390x">
  <version epoch="0" ver="8.0.1" rel="150400.5.50.1"/>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701950400">- Fix: libssh: Implement SFTP packet size limit (bsc#1216987)
  * Add curl-libssh_Implement_SFTP_packet_size_limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711022400">- Security fix: [bsc#1221667, CVE-2024-2398]
  * curl: HTTP/2 push headers memory-leak
  * Add curl-CVE-2024-2398.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711108800">- Security fix: [bsc#1221665, CVE-2024-2004]
  * Usage of disabled protocol
  * Add curl-CVE-2024-2004.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1722427200">- Security fix: [bsc#1228535, CVE-2024-7264]
  * curl: ASN.1 date parser overread
  * Add curl-CVE-2024-7264.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725451200">- Security fix: [bsc#1230093, CVE-2024-8096]
  * curl: OCSP stapling bypass with GnuTLS
  * Add curl-CVE-2024-8096.patch</changelog>
</package>
<package pkgid="4b94859d3bc054f5612c7b1d56760cfe56de6a28db47adca4895e10bb2f3f782" name="libcurl4" arch="x86_64">
  <version epoch="0" ver="8.0.1" rel="150400.5.50.1"/>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701950400">- Fix: libssh: Implement SFTP packet size limit (bsc#1216987)
  * Add curl-libssh_Implement_SFTP_packet_size_limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711022400">- Security fix: [bsc#1221667, CVE-2024-2398]
  * curl: HTTP/2 push headers memory-leak
  * Add curl-CVE-2024-2398.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711108800">- Security fix: [bsc#1221665, CVE-2024-2004]
  * Usage of disabled protocol
  * Add curl-CVE-2024-2004.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1722427200">- Security fix: [bsc#1228535, CVE-2024-7264]
  * curl: ASN.1 date parser overread
  * Add curl-CVE-2024-7264.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725451200">- Security fix: [bsc#1230093, CVE-2024-8096]
  * curl: OCSP stapling bypass with GnuTLS
  * Add curl-CVE-2024-8096.patch</changelog>
</package>
<package pkgid="706c306aa278b75f1d24c0b0df18adf66482ac950c4159f198407e33b73bb29c" name="libdbusmenu-glib4" arch="aarch64">
  <version epoch="0" ver="16.04.0" rel="150200.3.2.1"/>
  <changelog author="p.drouand@gmail.com" date="1414324800">- Update to version 12.10.3+14.10.20140610
  + No changelog available</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1430827200">- Update to 12.10.3+bzr20150410 (changes since 12.10.3+bzr20140610):
  * Use the configure-generated libtool script instead of
    /usr/bin/libtool, which might not match what we have.
  * Use gi's typelibdir pkgconfig variable and install into this
    directory, now that gi supports multiarch.
  * Parser: don't override the label for stock items if a custom
    one is provided.
- Minor spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1457092800">- Update to 12.10.3+bzr20160223 (changes since 12.10.3+bzr20150410):
  * Disable test-json-instruction, hangs on builds (lp#1429291).
  * gtk: Look for GtkImages on regular GtkMenuItems too (lp#1549021).</changelog>
  <changelog author="dimstar@opensuse.org" date="1473336000">- Use proper libdbusmenu 16.04.0 tarball directly from launchpad:
  + The old tarball's configure.ac happened to still use an old
    version, causing the .pc file to advertise insufficient
    capabilities.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1565697600">- Drop superfluous hard pkgconfig(gtk+-2.0) Requires from
  libdebusmenu-glib-devel sub-package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1571227200">- Inject -Wno-error into CFLAGS. It's kinda ridiculous for code
  that is not maintained upstream to pass -Werror by default and
  then not catching up. So for now we accept warnings.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1574078400">- Drop dependency on deprecated gnome-common, just run autoreconf
- Do not include unused tree_index.sgml, fix build with gtk-doc &gt;= 1.32,
  see https://gitlab.gnome.org/GNOME/gtk-doc/issues/103
  * add 0001-Fix-build-with-gtk-doc-1.32-due-to-non-existing-tree.patch
- Fix missing accelerators, add
  0002-genericmenuitem-Make-accelerator-text-appear-again.patch
- Split Gtk2 and Gtk3 build - glib, tools and doc subpackage are created
  from the Gtk2 flavor.
  * Fix building with disabled tests, add 0003-Fix-HAVE_VALGRIND-AM_CONDITIONAL.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1574164800">- Work around OBS idiosyncrasies regarding packages name.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1576065600">- Disable testtools on %arm since Valgrind is broken on armv6/7 atm</changelog>
  <changelog author="dimstar@opensuse.org" date="1584964800">- Require the tyeplib packages from the -devel packages: typelibs
  are shared libraries and consumers of the -devel package have a
  right to assume the libraries are present.</changelog>
</package>
<package pkgid="5fcca3c49b677ca7839d3bfef174c5f2dc0153e13f9cacf9fa8be9314dfa84d9" name="libdbusmenu-glib4" arch="s390x">
  <version epoch="0" ver="16.04.0" rel="150200.3.2.1"/>
  <changelog author="p.drouand@gmail.com" date="1414324800">- Update to version 12.10.3+14.10.20140610
  + No changelog available</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1430827200">- Update to 12.10.3+bzr20150410 (changes since 12.10.3+bzr20140610):
  * Use the configure-generated libtool script instead of
    /usr/bin/libtool, which might not match what we have.
  * Use gi's typelibdir pkgconfig variable and install into this
    directory, now that gi supports multiarch.
  * Parser: don't override the label for stock items if a custom
    one is provided.
- Minor spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1457092800">- Update to 12.10.3+bzr20160223 (changes since 12.10.3+bzr20150410):
  * Disable test-json-instruction, hangs on builds (lp#1429291).
  * gtk: Look for GtkImages on regular GtkMenuItems too (lp#1549021).</changelog>
  <changelog author="dimstar@opensuse.org" date="1473336000">- Use proper libdbusmenu 16.04.0 tarball directly from launchpad:
  + The old tarball's configure.ac happened to still use an old
    version, causing the .pc file to advertise insufficient
    capabilities.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1565697600">- Drop superfluous hard pkgconfig(gtk+-2.0) Requires from
  libdebusmenu-glib-devel sub-package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1571227200">- Inject -Wno-error into CFLAGS. It's kinda ridiculous for code
  that is not maintained upstream to pass -Werror by default and
  then not catching up. So for now we accept warnings.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1574078400">- Drop dependency on deprecated gnome-common, just run autoreconf
- Do not include unused tree_index.sgml, fix build with gtk-doc &gt;= 1.32,
  see https://gitlab.gnome.org/GNOME/gtk-doc/issues/103
  * add 0001-Fix-build-with-gtk-doc-1.32-due-to-non-existing-tree.patch
- Fix missing accelerators, add
  0002-genericmenuitem-Make-accelerator-text-appear-again.patch
- Split Gtk2 and Gtk3 build - glib, tools and doc subpackage are created
  from the Gtk2 flavor.
  * Fix building with disabled tests, add 0003-Fix-HAVE_VALGRIND-AM_CONDITIONAL.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1574164800">- Work around OBS idiosyncrasies regarding packages name.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1576065600">- Disable testtools on %arm since Valgrind is broken on armv6/7 atm</changelog>
  <changelog author="dimstar@opensuse.org" date="1584964800">- Require the tyeplib packages from the -devel packages: typelibs
  are shared libraries and consumers of the -devel package have a
  right to assume the libraries are present.</changelog>
</package>
<package pkgid="6e8b09c2c9c914eb8e26e61c9fdc9434830e17a01d0e713fc6ff4dca30e2dad8" name="libdbusmenu-glib4" arch="x86_64">
  <version epoch="0" ver="16.04.0" rel="150200.3.2.1"/>
  <changelog author="p.drouand@gmail.com" date="1414324800">- Update to version 12.10.3+14.10.20140610
  + No changelog available</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1430827200">- Update to 12.10.3+bzr20150410 (changes since 12.10.3+bzr20140610):
  * Use the configure-generated libtool script instead of
    /usr/bin/libtool, which might not match what we have.
  * Use gi's typelibdir pkgconfig variable and install into this
    directory, now that gi supports multiarch.
  * Parser: don't override the label for stock items if a custom
    one is provided.
- Minor spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1457092800">- Update to 12.10.3+bzr20160223 (changes since 12.10.3+bzr20150410):
  * Disable test-json-instruction, hangs on builds (lp#1429291).
  * gtk: Look for GtkImages on regular GtkMenuItems too (lp#1549021).</changelog>
  <changelog author="dimstar@opensuse.org" date="1473336000">- Use proper libdbusmenu 16.04.0 tarball directly from launchpad:
  + The old tarball's configure.ac happened to still use an old
    version, causing the .pc file to advertise insufficient
    capabilities.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1565697600">- Drop superfluous hard pkgconfig(gtk+-2.0) Requires from
  libdebusmenu-glib-devel sub-package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1571227200">- Inject -Wno-error into CFLAGS. It's kinda ridiculous for code
  that is not maintained upstream to pass -Werror by default and
  then not catching up. So for now we accept warnings.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1574078400">- Drop dependency on deprecated gnome-common, just run autoreconf
- Do not include unused tree_index.sgml, fix build with gtk-doc &gt;= 1.32,
  see https://gitlab.gnome.org/GNOME/gtk-doc/issues/103
  * add 0001-Fix-build-with-gtk-doc-1.32-due-to-non-existing-tree.patch
- Fix missing accelerators, add
  0002-genericmenuitem-Make-accelerator-text-appear-again.patch
- Split Gtk2 and Gtk3 build - glib, tools and doc subpackage are created
  from the Gtk2 flavor.
  * Fix building with disabled tests, add 0003-Fix-HAVE_VALGRIND-AM_CONDITIONAL.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1574164800">- Work around OBS idiosyncrasies regarding packages name.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1576065600">- Disable testtools on %arm since Valgrind is broken on armv6/7 atm</changelog>
  <changelog author="dimstar@opensuse.org" date="1584964800">- Require the tyeplib packages from the -devel packages: typelibs
  are shared libraries and consumers of the -devel package have a
  right to assume the libraries are present.</changelog>
</package>
<package pkgid="2ed72c78fc5f77ae28be0d481b7da4098caf6bed184974fc9f7ea08834ca9ad4" name="libdbusmenu-gtk2" arch="src">
  <version epoch="0" ver="16.04.0" rel="150200.3.2.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1394193600">- Init libdbusmenu package</changelog>
  <changelog author="cfarrell@suse.com" date="1394452800">- license update: GPL-3.0 and (LGPL-2.1 or LGPL-3.0)
  Interaction is not aggregation (^and^) but rather option (^or^). Also,
  the GPL-3.0 components are in the separate tools/ subdirectory</changelog>
  <changelog author="p.drouand@gmail.com" date="1414324800">- Update to version 12.10.3+14.10.20140610
  + No changelog available</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1430827200">- Update to 12.10.3+bzr20150410 (changes since 12.10.3+bzr20140610):
  * Use the configure-generated libtool script instead of
    /usr/bin/libtool, which might not match what we have.
  * Use gi's typelibdir pkgconfig variable and install into this
    directory, now that gi supports multiarch.
  * Parser: don't override the label for stock items if a custom
    one is provided.
- Minor spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1457092800">- Update to 12.10.3+bzr20160223 (changes since 12.10.3+bzr20150410):
  * Disable test-json-instruction, hangs on builds (lp#1429291).
  * gtk: Look for GtkImages on regular GtkMenuItems too (lp#1549021).</changelog>
  <changelog author="dimstar@opensuse.org" date="1473336000">- Use proper libdbusmenu 16.04.0 tarball directly from launchpad:
  + The old tarball's configure.ac happened to still use an old
    version, causing the .pc file to advertise insufficient
    capabilities.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1565697600">- Drop superfluous hard pkgconfig(gtk+-2.0) Requires from
  libdebusmenu-glib-devel sub-package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1571227200">- Inject -Wno-error into CFLAGS. It's kinda ridiculous for code
  that is not maintained upstream to pass -Werror by default and
  then not catching up. So for now we accept warnings.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1574078400">- Drop dependency on deprecated gnome-common, just run autoreconf
- Do not include unused tree_index.sgml, fix build with gtk-doc &gt;= 1.32,
  see https://gitlab.gnome.org/GNOME/gtk-doc/issues/103
  * add 0001-Fix-build-with-gtk-doc-1.32-due-to-non-existing-tree.patch
- Fix missing accelerators, add
  0002-genericmenuitem-Make-accelerator-text-appear-again.patch
- Split Gtk2 and Gtk3 build - glib, tools and doc subpackage are created
  from the Gtk2 flavor.
  * Fix building with disabled tests, add 0003-Fix-HAVE_VALGRIND-AM_CONDITIONAL.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1574164800">- Work around OBS idiosyncrasies regarding packages name.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1576065600">- Disable testtools on %arm since Valgrind is broken on armv6/7 atm</changelog>
  <changelog author="dimstar@opensuse.org" date="1584964800">- Require the tyeplib packages from the -devel packages: typelibs
  are shared libraries and consumers of the -devel package have a
  right to assume the libraries are present.</changelog>
</package>
<package pkgid="29f4861c1dc9be4ba13bf4510f3f18538a9586ee8880dbf8ca739eff632de490" name="libdbusmenu-gtk3" arch="src">
  <version epoch="0" ver="16.04.0" rel="150200.3.2.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1394193600">- Init libdbusmenu package</changelog>
  <changelog author="cfarrell@suse.com" date="1394452800">- license update: GPL-3.0 and (LGPL-2.1 or LGPL-3.0)
  Interaction is not aggregation (^and^) but rather option (^or^). Also,
  the GPL-3.0 components are in the separate tools/ subdirectory</changelog>
  <changelog author="p.drouand@gmail.com" date="1414324800">- Update to version 12.10.3+14.10.20140610
  + No changelog available</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1430827200">- Update to 12.10.3+bzr20150410 (changes since 12.10.3+bzr20140610):
  * Use the configure-generated libtool script instead of
    /usr/bin/libtool, which might not match what we have.
  * Use gi's typelibdir pkgconfig variable and install into this
    directory, now that gi supports multiarch.
  * Parser: don't override the label for stock items if a custom
    one is provided.
- Minor spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1457092800">- Update to 12.10.3+bzr20160223 (changes since 12.10.3+bzr20150410):
  * Disable test-json-instruction, hangs on builds (lp#1429291).
  * gtk: Look for GtkImages on regular GtkMenuItems too (lp#1549021).</changelog>
  <changelog author="dimstar@opensuse.org" date="1473336000">- Use proper libdbusmenu 16.04.0 tarball directly from launchpad:
  + The old tarball's configure.ac happened to still use an old
    version, causing the .pc file to advertise insufficient
    capabilities.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1565697600">- Drop superfluous hard pkgconfig(gtk+-2.0) Requires from
  libdebusmenu-glib-devel sub-package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1571227200">- Inject -Wno-error into CFLAGS. It's kinda ridiculous for code
  that is not maintained upstream to pass -Werror by default and
  then not catching up. So for now we accept warnings.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1574078400">- Drop dependency on deprecated gnome-common, just run autoreconf
- Do not include unused tree_index.sgml, fix build with gtk-doc &gt;= 1.32,
  see https://gitlab.gnome.org/GNOME/gtk-doc/issues/103
  * add 0001-Fix-build-with-gtk-doc-1.32-due-to-non-existing-tree.patch
- Fix missing accelerators, add
  0002-genericmenuitem-Make-accelerator-text-appear-again.patch
- Split Gtk2 and Gtk3 build - glib, tools and doc subpackage are created
  from the Gtk2 flavor.
  * Fix building with disabled tests, add 0003-Fix-HAVE_VALGRIND-AM_CONDITIONAL.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1574164800">- Work around OBS idiosyncrasies regarding packages name.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1576065600">- Disable testtools on %arm since Valgrind is broken on armv6/7 atm</changelog>
  <changelog author="dimstar@opensuse.org" date="1584964800">- Require the tyeplib packages from the -devel packages: typelibs
  are shared libraries and consumers of the -devel package have a
  right to assume the libraries are present.</changelog>
</package>
<package pkgid="640ebe3dbb429c5e2d243d8d0f654482233d0f518b3e11d9d4be29864d577df6" name="libdbusmenu-gtk3-4" arch="aarch64">
  <version epoch="0" ver="16.04.0" rel="150200.3.2.1"/>
  <changelog author="p.drouand@gmail.com" date="1414324800">- Update to version 12.10.3+14.10.20140610
  + No changelog available</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1430827200">- Update to 12.10.3+bzr20150410 (changes since 12.10.3+bzr20140610):
  * Use the configure-generated libtool script instead of
    /usr/bin/libtool, which might not match what we have.
  * Use gi's typelibdir pkgconfig variable and install into this
    directory, now that gi supports multiarch.
  * Parser: don't override the label for stock items if a custom
    one is provided.
- Minor spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1457092800">- Update to 12.10.3+bzr20160223 (changes since 12.10.3+bzr20150410):
  * Disable test-json-instruction, hangs on builds (lp#1429291).
  * gtk: Look for GtkImages on regular GtkMenuItems too (lp#1549021).</changelog>
  <changelog author="dimstar@opensuse.org" date="1473336000">- Use proper libdbusmenu 16.04.0 tarball directly from launchpad:
  + The old tarball's configure.ac happened to still use an old
    version, causing the .pc file to advertise insufficient
    capabilities.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1565697600">- Drop superfluous hard pkgconfig(gtk+-2.0) Requires from
  libdebusmenu-glib-devel sub-package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1571227200">- Inject -Wno-error into CFLAGS. It's kinda ridiculous for code
  that is not maintained upstream to pass -Werror by default and
  then not catching up. So for now we accept warnings.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1574078400">- Drop dependency on deprecated gnome-common, just run autoreconf
- Do not include unused tree_index.sgml, fix build with gtk-doc &gt;= 1.32,
  see https://gitlab.gnome.org/GNOME/gtk-doc/issues/103
  * add 0001-Fix-build-with-gtk-doc-1.32-due-to-non-existing-tree.patch
- Fix missing accelerators, add
  0002-genericmenuitem-Make-accelerator-text-appear-again.patch
- Split Gtk2 and Gtk3 build - glib, tools and doc subpackage are created
  from the Gtk2 flavor.
  * Fix building with disabled tests, add 0003-Fix-HAVE_VALGRIND-AM_CONDITIONAL.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1574164800">- Work around OBS idiosyncrasies regarding packages name.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1576065600">- Disable testtools on %arm since Valgrind is broken on armv6/7 atm</changelog>
  <changelog author="dimstar@opensuse.org" date="1584964800">- Require the tyeplib packages from the -devel packages: typelibs
  are shared libraries and consumers of the -devel package have a
  right to assume the libraries are present.</changelog>
</package>
<package pkgid="2cc20bf0d58158d10778b8a0bdae67028a0fa1eabfab272fe6f21353ea5a94d2" name="libdbusmenu-gtk3-4" arch="s390x">
  <version epoch="0" ver="16.04.0" rel="150200.3.2.1"/>
  <changelog author="p.drouand@gmail.com" date="1414324800">- Update to version 12.10.3+14.10.20140610
  + No changelog available</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1430827200">- Update to 12.10.3+bzr20150410 (changes since 12.10.3+bzr20140610):
  * Use the configure-generated libtool script instead of
    /usr/bin/libtool, which might not match what we have.
  * Use gi's typelibdir pkgconfig variable and install into this
    directory, now that gi supports multiarch.
  * Parser: don't override the label for stock items if a custom
    one is provided.
- Minor spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1457092800">- Update to 12.10.3+bzr20160223 (changes since 12.10.3+bzr20150410):
  * Disable test-json-instruction, hangs on builds (lp#1429291).
  * gtk: Look for GtkImages on regular GtkMenuItems too (lp#1549021).</changelog>
  <changelog author="dimstar@opensuse.org" date="1473336000">- Use proper libdbusmenu 16.04.0 tarball directly from launchpad:
  + The old tarball's configure.ac happened to still use an old
    version, causing the .pc file to advertise insufficient
    capabilities.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1565697600">- Drop superfluous hard pkgconfig(gtk+-2.0) Requires from
  libdebusmenu-glib-devel sub-package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1571227200">- Inject -Wno-error into CFLAGS. It's kinda ridiculous for code
  that is not maintained upstream to pass -Werror by default and
  then not catching up. So for now we accept warnings.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1574078400">- Drop dependency on deprecated gnome-common, just run autoreconf
- Do not include unused tree_index.sgml, fix build with gtk-doc &gt;= 1.32,
  see https://gitlab.gnome.org/GNOME/gtk-doc/issues/103
  * add 0001-Fix-build-with-gtk-doc-1.32-due-to-non-existing-tree.patch
- Fix missing accelerators, add
  0002-genericmenuitem-Make-accelerator-text-appear-again.patch
- Split Gtk2 and Gtk3 build - glib, tools and doc subpackage are created
  from the Gtk2 flavor.
  * Fix building with disabled tests, add 0003-Fix-HAVE_VALGRIND-AM_CONDITIONAL.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1574164800">- Work around OBS idiosyncrasies regarding packages name.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1576065600">- Disable testtools on %arm since Valgrind is broken on armv6/7 atm</changelog>
  <changelog author="dimstar@opensuse.org" date="1584964800">- Require the tyeplib packages from the -devel packages: typelibs
  are shared libraries and consumers of the -devel package have a
  right to assume the libraries are present.</changelog>
</package>
<package pkgid="4a4c92cab4c841ff2ce53e5813c0fdfa16a7b305131d77568818d3dc4648088d" name="libdbusmenu-gtk3-4" arch="x86_64">
  <version epoch="0" ver="16.04.0" rel="150200.3.2.1"/>
  <changelog author="p.drouand@gmail.com" date="1414324800">- Update to version 12.10.3+14.10.20140610
  + No changelog available</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1430827200">- Update to 12.10.3+bzr20150410 (changes since 12.10.3+bzr20140610):
  * Use the configure-generated libtool script instead of
    /usr/bin/libtool, which might not match what we have.
  * Use gi's typelibdir pkgconfig variable and install into this
    directory, now that gi supports multiarch.
  * Parser: don't override the label for stock items if a custom
    one is provided.
- Minor spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1457092800">- Update to 12.10.3+bzr20160223 (changes since 12.10.3+bzr20150410):
  * Disable test-json-instruction, hangs on builds (lp#1429291).
  * gtk: Look for GtkImages on regular GtkMenuItems too (lp#1549021).</changelog>
  <changelog author="dimstar@opensuse.org" date="1473336000">- Use proper libdbusmenu 16.04.0 tarball directly from launchpad:
  + The old tarball's configure.ac happened to still use an old
    version, causing the .pc file to advertise insufficient
    capabilities.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1565697600">- Drop superfluous hard pkgconfig(gtk+-2.0) Requires from
  libdebusmenu-glib-devel sub-package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1571227200">- Inject -Wno-error into CFLAGS. It's kinda ridiculous for code
  that is not maintained upstream to pass -Werror by default and
  then not catching up. So for now we accept warnings.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1574078400">- Drop dependency on deprecated gnome-common, just run autoreconf
- Do not include unused tree_index.sgml, fix build with gtk-doc &gt;= 1.32,
  see https://gitlab.gnome.org/GNOME/gtk-doc/issues/103
  * add 0001-Fix-build-with-gtk-doc-1.32-due-to-non-existing-tree.patch
- Fix missing accelerators, add
  0002-genericmenuitem-Make-accelerator-text-appear-again.patch
- Split Gtk2 and Gtk3 build - glib, tools and doc subpackage are created
  from the Gtk2 flavor.
  * Fix building with disabled tests, add 0003-Fix-HAVE_VALGRIND-AM_CONDITIONAL.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1574164800">- Work around OBS idiosyncrasies regarding packages name.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1576065600">- Disable testtools on %arm since Valgrind is broken on armv6/7 atm</changelog>
  <changelog author="dimstar@opensuse.org" date="1584964800">- Require the tyeplib packages from the -devel packages: typelibs
  are shared libraries and consumers of the -devel package have a
  right to assume the libraries are present.</changelog>
</package>
<package pkgid="f25daed1c18c425e2da18e38c7b0bd3e93d49ad518cf96ec90848129fbbd2252" name="libdevmapper-event1_03" arch="aarch64">
  <version epoch="0" ver="2.03.22_1.02.196" rel="150500.7.9.1"/>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6753)
  - device-mapper version upgrade to 1.02.196
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
</package>
<package pkgid="f97c35c938c6c7c5f2db3caa5eb85a344c283e909e3fb1f3d0b2b5ec9de6b942" name="libdevmapper-event1_03" arch="s390x">
  <version epoch="0" ver="2.03.22_1.02.196" rel="150500.7.9.1"/>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6753)
  - device-mapper version upgrade to 1.02.196
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
</package>
<package pkgid="5263ced1ddfccb6d9363b84590eb9ae2153e3853018f563cec6a42af6f56aef0" name="libdevmapper-event1_03" arch="x86_64">
  <version epoch="0" ver="2.03.22_1.02.196" rel="150500.7.9.1"/>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6753)
  - device-mapper version upgrade to 1.02.196
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
</package>
<package pkgid="028bf21976ba086d6eca425a96a2382a05c156d41cdfb0cf5448678b4bb5187d" name="libdevmapper1_03" arch="aarch64">
  <version epoch="0" ver="2.03.22_1.02.196" rel="150500.7.9.1"/>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6753)
  - device-mapper version upgrade to 1.02.196
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
</package>
<package pkgid="da3dac0c7b2c55f86d5cf8d9c53ed9c604024704b9ec00d9a4f045ff9ed9e2e1" name="libdevmapper1_03" arch="s390x">
  <version epoch="0" ver="2.03.22_1.02.196" rel="150500.7.9.1"/>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6753)
  - device-mapper version upgrade to 1.02.196
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
</package>
<package pkgid="53bfd79361915100dcaf41e014a18532fb1b733dbefa61bb9049d35dc024a0c6" name="libdevmapper1_03" arch="x86_64">
  <version epoch="0" ver="2.03.22_1.02.196" rel="150500.7.9.1"/>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6753)
  - device-mapper version upgrade to 1.02.196
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
</package>
<package pkgid="5b74e1c5ad1747823e21ceb6bfecdd26b17e5a252dd7a1286366379164a50677" name="libduktape206" arch="aarch64">
  <version epoch="0" ver="2.6.0" rel="150500.4.2.1"/>
  <changelog author="avvissu@yandex.by" date="1496145600">- Initial package</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Correct RPM group.</changelog>
  <changelog author="avvissu@yandex.by" date="1501329600">- Update to 2.1.1:
  * maintenance release</changelog>
  <changelog author="avvissu@yandex.by" date="1507204800">- Update to 2.2.0:
  * call handling, API improvements, performance</changelog>
  <changelog author="avvissu@yandex.by" date="1524744000">- Update to 2.2.1:
  * maintenance release</changelog>
  <changelog author="sean@suspend.net" date="1539864000">- Update to 2.3.0:
  * ES2015 improvements</changelog>
  <changelog author="avvissu@yandex.by" date="1564401600">- Update to 2.4.0:
  * Minor fixes and improvements</changelog>
  <changelog author="mrey@suse.com" date="1595937600">- Update to 2.5.0:
  * CBOR support, minor fixes and improvements
- spec file changes
  * change http to https in URLs
  * use RPM macros</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1604059200">- Update to 2.6.0:
  * Various fixes and portability improvements.</changelog>
  <changelog author="meissner@suse.com" date="1669636800">- duktape-link-m.patch: link against libm for sin() and related functions,
  in case the compiler with -Os creates external references. bsc#1205805</changelog>
</package>
<package pkgid="4d461b4731a6e916cd0fd6b2ea5cd858aab06ae4bcb19a2e1eef706a65d4cb8c" name="libduktape206" arch="s390x">
  <version epoch="0" ver="2.6.0" rel="150500.4.2.1"/>
  <changelog author="avvissu@yandex.by" date="1496145600">- Initial package</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Correct RPM group.</changelog>
  <changelog author="avvissu@yandex.by" date="1501329600">- Update to 2.1.1:
  * maintenance release</changelog>
  <changelog author="avvissu@yandex.by" date="1507204800">- Update to 2.2.0:
  * call handling, API improvements, performance</changelog>
  <changelog author="avvissu@yandex.by" date="1524744000">- Update to 2.2.1:
  * maintenance release</changelog>
  <changelog author="sean@suspend.net" date="1539864000">- Update to 2.3.0:
  * ES2015 improvements</changelog>
  <changelog author="avvissu@yandex.by" date="1564401600">- Update to 2.4.0:
  * Minor fixes and improvements</changelog>
  <changelog author="mrey@suse.com" date="1595937600">- Update to 2.5.0:
  * CBOR support, minor fixes and improvements
- spec file changes
  * change http to https in URLs
  * use RPM macros</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1604059200">- Update to 2.6.0:
  * Various fixes and portability improvements.</changelog>
  <changelog author="meissner@suse.com" date="1669636800">- duktape-link-m.patch: link against libm for sin() and related functions,
  in case the compiler with -Os creates external references. bsc#1205805</changelog>
</package>
<package pkgid="63df23429fd66049ee0106d5a6fbfd7a733f4564265f17b6b7e9dea458469e84" name="libduktape206" arch="x86_64">
  <version epoch="0" ver="2.6.0" rel="150500.4.2.1"/>
  <changelog author="avvissu@yandex.by" date="1496145600">- Initial package</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Correct RPM group.</changelog>
  <changelog author="avvissu@yandex.by" date="1501329600">- Update to 2.1.1:
  * maintenance release</changelog>
  <changelog author="avvissu@yandex.by" date="1507204800">- Update to 2.2.0:
  * call handling, API improvements, performance</changelog>
  <changelog author="avvissu@yandex.by" date="1524744000">- Update to 2.2.1:
  * maintenance release</changelog>
  <changelog author="sean@suspend.net" date="1539864000">- Update to 2.3.0:
  * ES2015 improvements</changelog>
  <changelog author="avvissu@yandex.by" date="1564401600">- Update to 2.4.0:
  * Minor fixes and improvements</changelog>
  <changelog author="mrey@suse.com" date="1595937600">- Update to 2.5.0:
  * CBOR support, minor fixes and improvements
- spec file changes
  * change http to https in URLs
  * use RPM macros</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1604059200">- Update to 2.6.0:
  * Various fixes and portability improvements.</changelog>
  <changelog author="meissner@suse.com" date="1669636800">- duktape-link-m.patch: link against libm for sin() and related functions,
  in case the compiler with -Os creates external references. bsc#1205805</changelog>
</package>
<package pkgid="e60e3917bf7d3f782370f77cf0ff3369a3772a4854d9f6879f9d33876c788259" name="libduktape206" arch="aarch64">
  <version epoch="0" ver="2.6.0" rel="150500.4.5.1"/>
  <changelog author="avvissu@yandex.by" date="1496145600">- Initial package</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Correct RPM group.</changelog>
  <changelog author="avvissu@yandex.by" date="1501329600">- Update to 2.1.1:
  * maintenance release</changelog>
  <changelog author="avvissu@yandex.by" date="1507204800">- Update to 2.2.0:
  * call handling, API improvements, performance</changelog>
  <changelog author="avvissu@yandex.by" date="1524744000">- Update to 2.2.1:
  * maintenance release</changelog>
  <changelog author="sean@suspend.net" date="1539864000">- Update to 2.3.0:
  * ES2015 improvements</changelog>
  <changelog author="avvissu@yandex.by" date="1564401600">- Update to 2.4.0:
  * Minor fixes and improvements</changelog>
  <changelog author="mrey@suse.com" date="1595937600">- Update to 2.5.0:
  * CBOR support, minor fixes and improvements
- spec file changes
  * change http to https in URLs
  * use RPM macros</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1604059200">- Update to 2.6.0:
  * Various fixes and portability improvements.</changelog>
  <changelog author="meissner@suse.com" date="1669636800">- duktape-link-m.patch: link against libm for sin() and related functions,
  in case the compiler with -Os creates external references. bsc#1205805</changelog>
  <changelog author="yfjiang@suse.com" date="1705060800">- Ship libduktape206-32bit: needed by libproxy since version 0.5.</changelog>
</package>
<package pkgid="b7592e2cc2ccc593b075aafe7b48a0a96f934c8d6a32cc14bc2d778bc9ed73a4" name="libduktape206" arch="s390x">
  <version epoch="0" ver="2.6.0" rel="150500.4.5.1"/>
  <changelog author="avvissu@yandex.by" date="1496145600">- Initial package</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Correct RPM group.</changelog>
  <changelog author="avvissu@yandex.by" date="1501329600">- Update to 2.1.1:
  * maintenance release</changelog>
  <changelog author="avvissu@yandex.by" date="1507204800">- Update to 2.2.0:
  * call handling, API improvements, performance</changelog>
  <changelog author="avvissu@yandex.by" date="1524744000">- Update to 2.2.1:
  * maintenance release</changelog>
  <changelog author="sean@suspend.net" date="1539864000">- Update to 2.3.0:
  * ES2015 improvements</changelog>
  <changelog author="avvissu@yandex.by" date="1564401600">- Update to 2.4.0:
  * Minor fixes and improvements</changelog>
  <changelog author="mrey@suse.com" date="1595937600">- Update to 2.5.0:
  * CBOR support, minor fixes and improvements
- spec file changes
  * change http to https in URLs
  * use RPM macros</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1604059200">- Update to 2.6.0:
  * Various fixes and portability improvements.</changelog>
  <changelog author="meissner@suse.com" date="1669636800">- duktape-link-m.patch: link against libm for sin() and related functions,
  in case the compiler with -Os creates external references. bsc#1205805</changelog>
  <changelog author="yfjiang@suse.com" date="1705060800">- Ship libduktape206-32bit: needed by libproxy since version 0.5.</changelog>
</package>
<package pkgid="5ff6b603292382819d2999d44241221c851a6e5dd223eac7315539bb11bdc9a6" name="libduktape206" arch="x86_64">
  <version epoch="0" ver="2.6.0" rel="150500.4.5.1"/>
  <changelog author="avvissu@yandex.by" date="1496145600">- Initial package</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Correct RPM group.</changelog>
  <changelog author="avvissu@yandex.by" date="1501329600">- Update to 2.1.1:
  * maintenance release</changelog>
  <changelog author="avvissu@yandex.by" date="1507204800">- Update to 2.2.0:
  * call handling, API improvements, performance</changelog>
  <changelog author="avvissu@yandex.by" date="1524744000">- Update to 2.2.1:
  * maintenance release</changelog>
  <changelog author="sean@suspend.net" date="1539864000">- Update to 2.3.0:
  * ES2015 improvements</changelog>
  <changelog author="avvissu@yandex.by" date="1564401600">- Update to 2.4.0:
  * Minor fixes and improvements</changelog>
  <changelog author="mrey@suse.com" date="1595937600">- Update to 2.5.0:
  * CBOR support, minor fixes and improvements
- spec file changes
  * change http to https in URLs
  * use RPM macros</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1604059200">- Update to 2.6.0:
  * Various fixes and portability improvements.</changelog>
  <changelog author="meissner@suse.com" date="1669636800">- duktape-link-m.patch: link against libm for sin() and related functions,
  in case the compiler with -Os creates external references. bsc#1205805</changelog>
  <changelog author="yfjiang@suse.com" date="1705060800">- Ship libduktape206-32bit: needed by libproxy since version 0.5.</changelog>
</package>
<package pkgid="30662160ced050a02b0b8c10efaee7eb01b757f7ce1551ffd9a4c0038bddb0d5" name="libeconf" arch="src">
  <version epoch="0" ver="0.5.2" rel="150400.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1594382400">- Update to version 0.3.8+git20200710.5126fff:
  * Add CMake build scripts, remove autotools support
  * Move C++ ABI compatibility section</changelog>
  <changelog author="lnussel@suse.de" date="1603368000">- explicitly BuildRequire: pkgconfig for /usr/lib/rpm/pkgconfigdeps.sh
  On TW it's pulled in implicitly by libxcrypt-devel which is not the
  case on 15.2</changelog>
  <changelog author="schubi@suse.com" date="1617883200">- Update to version 0.4.0+git20210408.6d33e5e:
  * Man pages libeconf.3 and econftool.8.
  * Handling multiline strings.
  * Added libeconf_ext which returns more information like
    line_nr, comments, path of the configuration file,...
  * Econftool, an command line interface for handling configuration
    files.
  * Generating HTML API documentation with doxygen.
  * Improving error handling and semantic file check.
  * Joining entries with the same key to one single entry if
    env variable ECONF_JOIN_SAME_ENTRIES has been set.</changelog>
  <changelog author="schubi@suse.com" date="1618228800">- Update to version 0.4.0+git20210412.1513a26:
  * Added econftool cat option (#146)
  * new API call: econf_readDirsHistory (showing ALL locations)
  * new API call: econf_getPath (absolute path of the configuration file)</changelog>
  <changelog author="schubi@suse.com" date="1618315200">- Update to version 0.4.0+git20210413.fdb8025:
  * Installing man pages via meson. (#147)</changelog>
  <changelog author="schubi@suse.com" date="1618488000">- Removed doxygen from build requires.</changelog>
  <changelog author="schubi@suse.com" date="1625659200">- Update to version 0.4.0+git20210707.537a8a:
  * Fixed resource leaks found by Iker Pedrosa.</changelog>
  <changelog author="Stefan Schubert schubi@suse.com" date="1625745600">- Update to version 0.4.0+git20210708.6918ea1:
  * Fixed covscan FORWARD_NULL_issues warnings</changelog>
  <changelog author="schubi@localhost" date="1625832000">- Update to version 0.4.1+git20210709.cf671f2:
  * CMake fixes regarding installation of econftool and man pages.</changelog>
  <changelog author="schubi@suse.com" date="1636632000">- Update to version libeconf-0.4.2+git20211111.c7a2c52:
  * CMake fixes regarding document installation.
  * Fixed different issues while writing string values to file.
  * Writing comments to file too.
  * Fixed memory leaks.
  * Fixed crash while merging values.</changelog>
  <changelog author="schubi@suse.com" date="1641297600">- Update to version 0.4.2+git20220104.5dfd69d:
  * Reading numbers with different bases (e.g. oktal) (bsc#1193632) (#157)</changelog>
  <changelog author="schubi@suse.com" date="1641297601">- Update to version 0.4.4+git20220104.962774f:
  * Fixed i586 build (#158)</changelog>
  <changelog author="schubi@suse.com" date="1649246400">- Update to version 0.4.5+git20220406.c9658f2:
  * econftool:
  * * New call "syntax" for checking the configuration files only.
    Returns an error string with line number if an error occurs.
  * * New options "--comment" and "--delimeters"
  * * Parsing one file only if needed.</changelog>
  <changelog author="schubi@suse.com" date="1651060800">- Update to version 0.4.6+git20220427.3016f4e:
  * econftool:
  * * Parsing error: Reporting file and line nr.
  * * --delimeters=spaces Taking all kind of spaces for delimiter
  * libeconf:
    Fixed bsc#1198165: Parsing files correctly which have space characters
    AND none space characters as delimiters.</changelog>
  <changelog author="schubi@suse.com" date="1668427200">- Update to version 0.4.8+git20221114.7ff7704:
  * Parsing files which are containing keys only (#170)
    All delimiters are allowed now : "", " =", " ", "=". But the
    user should use "" in order to be distinct.
  * /usr/etc/shells.d/&lt;file_name&gt; will not be parsed if
    /etc/shells.d/&lt;file_name&gt; is defined too.
  * Lto build fixed (#168)
  * New calls: econf_comment_tag, econf_delimiter_tag, econf_set_comment_tag,
    econf_set_delimiter_tag
  * Checking UID,GroupID, permissions,... of the parsed files (#165)
    New calls: econf_requireOwner, econf_requireGroup, econf_requirePermissions,
    econf_followSymlinks
  * Ignoring Group without brackets; Do not hold brackets in the internal data structure. (#164)
  * Error handling improved for nums and booleans (#163)</changelog>
  <changelog author="schubi@suse.com" date="1669204800">- Update to version 0.4.9:
  * libeconf.h: added missing sys/types.h header (#171)
  * new API calls: econf_readFileWithCallback,
    econf_readDirsWithCallback, econf_readDirsHistoryWithCallback (#172)
  * Checking NULL comment parameter in the parsing functions.</changelog>
  <changelog author="schubi@suse.com" date="1669982400">- Update to version 0.5.0:
  * API calls econf_read*WithCallback supporting a general (void *)
    argument for user defined data with which the callback function is
    called.
  * Tagged following functions deprecated:
    econf_requireOwner, econf_requireGroup, econf_requirePermissions,
    econf_followSymlinks, econf_reset_security_settings
    Use one of the econf_read*WithCallback functions instead.</changelog>
  <changelog author="schubi@suse.com" date="1674129600">- Update to version 0.5.1:
  * Reading files in /usr/_vendor_/_example_._suffix_.d/* regardless
    there is a /etc/_example_._suffix_ file. (#175)</changelog>
  <changelog author="schubi@suse.com" date="1679659200">- Update to version 0.5.2:
  * Fixed build for aarch64 and gcc13.
  * Making the output verbose when a test fails.
  * Fixed a stack-buffer-overflow vulnerability in "econf_writeFile"
    function.
  * Fixed a stack-buffer-overflow vulnerability in "read_file"
    function.
  * Added new feature: econf_set_conf_dirs (const char **dir_postfix_list)
    Sets a list of directory structures (with order) which describes
    the directories in which the files have to be parsed.
    E.G. with the given list: {"/conf.d/", ".d/", "/", NULL} files in following
    directories will be parsed:
    "&lt;default_dirs&gt;/&lt;project_name&gt;.&lt;suffix&gt;.d/"
    "&lt;default_dirs&gt;/&lt;project_name&gt;/conf.d/"
    "&lt;default_dirs&gt;/&lt;project_name&gt;.d/"
    "&lt;default_dirs&gt;/&lt;project_name&gt;/"
    The entry "&lt;default_dirs&gt;/&lt;project_name&gt;.&lt;suffix&gt;.d/" will be added
    automatically.
  * General code cleanup.</changelog>
  <changelog author="schubi@suse.com" date="1694001600">- Additional info for version 0.5.2:
  * Fixed a stack-buffer-overflow vulnerability in "econf_writeFile"
    function. (CVE-2023-30078, CVE-2023-32181, bsc#1211078)
  * Fixed a stack-buffer-overflow vulnerability in "read_file"
    function. (CVE-2023-30079, CVE-2023-22652, bsc#1211078)</changelog>
</package>
<package pkgid="e654a112184913261664490d7680499062916ae1789ae220c83e4421decade3f" name="libeconf0" arch="aarch64">
  <version epoch="0" ver="0.5.2" rel="150400.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1594382400">- Update to version 0.3.8+git20200710.5126fff:
  * Add CMake build scripts, remove autotools support
  * Move C++ ABI compatibility section</changelog>
  <changelog author="lnussel@suse.de" date="1603368000">- explicitly BuildRequire: pkgconfig for /usr/lib/rpm/pkgconfigdeps.sh
  On TW it's pulled in implicitly by libxcrypt-devel which is not the
  case on 15.2</changelog>
  <changelog author="schubi@suse.com" date="1617883200">- Update to version 0.4.0+git20210408.6d33e5e:
  * Man pages libeconf.3 and econftool.8.
  * Handling multiline strings.
  * Added libeconf_ext which returns more information like
    line_nr, comments, path of the configuration file,...
  * Econftool, an command line interface for handling configuration
    files.
  * Generating HTML API documentation with doxygen.
  * Improving error handling and semantic file check.
  * Joining entries with the same key to one single entry if
    env variable ECONF_JOIN_SAME_ENTRIES has been set.</changelog>
  <changelog author="schubi@suse.com" date="1618228800">- Update to version 0.4.0+git20210412.1513a26:
  * Added econftool cat option (#146)
  * new API call: econf_readDirsHistory (showing ALL locations)
  * new API call: econf_getPath (absolute path of the configuration file)</changelog>
  <changelog author="schubi@suse.com" date="1618315200">- Update to version 0.4.0+git20210413.fdb8025:
  * Installing man pages via meson. (#147)</changelog>
  <changelog author="schubi@suse.com" date="1618488000">- Removed doxygen from build requires.</changelog>
  <changelog author="schubi@suse.com" date="1625659200">- Update to version 0.4.0+git20210707.537a8a:
  * Fixed resource leaks found by Iker Pedrosa.</changelog>
  <changelog author="Stefan Schubert schubi@suse.com" date="1625745600">- Update to version 0.4.0+git20210708.6918ea1:
  * Fixed covscan FORWARD_NULL_issues warnings</changelog>
  <changelog author="schubi@localhost" date="1625832000">- Update to version 0.4.1+git20210709.cf671f2:
  * CMake fixes regarding installation of econftool and man pages.</changelog>
  <changelog author="schubi@suse.com" date="1636632000">- Update to version libeconf-0.4.2+git20211111.c7a2c52:
  * CMake fixes regarding document installation.
  * Fixed different issues while writing string values to file.
  * Writing comments to file too.
  * Fixed memory leaks.
  * Fixed crash while merging values.</changelog>
  <changelog author="schubi@suse.com" date="1641297600">- Update to version 0.4.2+git20220104.5dfd69d:
  * Reading numbers with different bases (e.g. oktal) (bsc#1193632) (#157)</changelog>
  <changelog author="schubi@suse.com" date="1641297601">- Update to version 0.4.4+git20220104.962774f:
  * Fixed i586 build (#158)</changelog>
  <changelog author="schubi@suse.com" date="1649246400">- Update to version 0.4.5+git20220406.c9658f2:
  * econftool:
  * * New call "syntax" for checking the configuration files only.
    Returns an error string with line number if an error occurs.
  * * New options "--comment" and "--delimeters"
  * * Parsing one file only if needed.</changelog>
  <changelog author="schubi@suse.com" date="1651060800">- Update to version 0.4.6+git20220427.3016f4e:
  * econftool:
  * * Parsing error: Reporting file and line nr.
  * * --delimeters=spaces Taking all kind of spaces for delimiter
  * libeconf:
    Fixed bsc#1198165: Parsing files correctly which have space characters
    AND none space characters as delimiters.</changelog>
  <changelog author="schubi@suse.com" date="1668427200">- Update to version 0.4.8+git20221114.7ff7704:
  * Parsing files which are containing keys only (#170)
    All delimiters are allowed now : "", " =", " ", "=". But the
    user should use "" in order to be distinct.
  * /usr/etc/shells.d/&lt;file_name&gt; will not be parsed if
    /etc/shells.d/&lt;file_name&gt; is defined too.
  * Lto build fixed (#168)
  * New calls: econf_comment_tag, econf_delimiter_tag, econf_set_comment_tag,
    econf_set_delimiter_tag
  * Checking UID,GroupID, permissions,... of the parsed files (#165)
    New calls: econf_requireOwner, econf_requireGroup, econf_requirePermissions,
    econf_followSymlinks
  * Ignoring Group without brackets; Do not hold brackets in the internal data structure. (#164)
  * Error handling improved for nums and booleans (#163)</changelog>
  <changelog author="schubi@suse.com" date="1669204800">- Update to version 0.4.9:
  * libeconf.h: added missing sys/types.h header (#171)
  * new API calls: econf_readFileWithCallback,
    econf_readDirsWithCallback, econf_readDirsHistoryWithCallback (#172)
  * Checking NULL comment parameter in the parsing functions.</changelog>
  <changelog author="schubi@suse.com" date="1669982400">- Update to version 0.5.0:
  * API calls econf_read*WithCallback supporting a general (void *)
    argument for user defined data with which the callback function is
    called.
  * Tagged following functions deprecated:
    econf_requireOwner, econf_requireGroup, econf_requirePermissions,
    econf_followSymlinks, econf_reset_security_settings
    Use one of the econf_read*WithCallback functions instead.</changelog>
  <changelog author="schubi@suse.com" date="1674129600">- Update to version 0.5.1:
  * Reading files in /usr/_vendor_/_example_._suffix_.d/* regardless
    there is a /etc/_example_._suffix_ file. (#175)</changelog>
  <changelog author="schubi@suse.com" date="1679659200">- Update to version 0.5.2:
  * Fixed build for aarch64 and gcc13.
  * Making the output verbose when a test fails.
  * Fixed a stack-buffer-overflow vulnerability in "econf_writeFile"
    function.
  * Fixed a stack-buffer-overflow vulnerability in "read_file"
    function.
  * Added new feature: econf_set_conf_dirs (const char **dir_postfix_list)
    Sets a list of directory structures (with order) which describes
    the directories in which the files have to be parsed.
    E.G. with the given list: {"/conf.d/", ".d/", "/", NULL} files in following
    directories will be parsed:
    "&lt;default_dirs&gt;/&lt;project_name&gt;.&lt;suffix&gt;.d/"
    "&lt;default_dirs&gt;/&lt;project_name&gt;/conf.d/"
    "&lt;default_dirs&gt;/&lt;project_name&gt;.d/"
    "&lt;default_dirs&gt;/&lt;project_name&gt;/"
    The entry "&lt;default_dirs&gt;/&lt;project_name&gt;.&lt;suffix&gt;.d/" will be added
    automatically.
  * General code cleanup.</changelog>
  <changelog author="schubi@suse.com" date="1694001600">- Additional info for version 0.5.2:
  * Fixed a stack-buffer-overflow vulnerability in "econf_writeFile"
    function. (CVE-2023-30078, CVE-2023-32181, bsc#1211078)
  * Fixed a stack-buffer-overflow vulnerability in "read_file"
    function. (CVE-2023-30079, CVE-2023-22652, bsc#1211078)</changelog>
</package>
<package pkgid="66220754f9f0aeee71461bc89816488af2562458de36d35ae2eead0f8534128f" name="libeconf0" arch="s390x">
  <version epoch="0" ver="0.5.2" rel="150400.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1594382400">- Update to version 0.3.8+git20200710.5126fff:
  * Add CMake build scripts, remove autotools support
  * Move C++ ABI compatibility section</changelog>
  <changelog author="lnussel@suse.de" date="1603368000">- explicitly BuildRequire: pkgconfig for /usr/lib/rpm/pkgconfigdeps.sh
  On TW it's pulled in implicitly by libxcrypt-devel which is not the
  case on 15.2</changelog>
  <changelog author="schubi@suse.com" date="1617883200">- Update to version 0.4.0+git20210408.6d33e5e:
  * Man pages libeconf.3 and econftool.8.
  * Handling multiline strings.
  * Added libeconf_ext which returns more information like
    line_nr, comments, path of the configuration file,...
  * Econftool, an command line interface for handling configuration
    files.
  * Generating HTML API documentation with doxygen.
  * Improving error handling and semantic file check.
  * Joining entries with the same key to one single entry if
    env variable ECONF_JOIN_SAME_ENTRIES has been set.</changelog>
  <changelog author="schubi@suse.com" date="1618228800">- Update to version 0.4.0+git20210412.1513a26:
  * Added econftool cat option (#146)
  * new API call: econf_readDirsHistory (showing ALL locations)
  * new API call: econf_getPath (absolute path of the configuration file)</changelog>
  <changelog author="schubi@suse.com" date="1618315200">- Update to version 0.4.0+git20210413.fdb8025:
  * Installing man pages via meson. (#147)</changelog>
  <changelog author="schubi@suse.com" date="1618488000">- Removed doxygen from build requires.</changelog>
  <changelog author="schubi@suse.com" date="1625659200">- Update to version 0.4.0+git20210707.537a8a:
  * Fixed resource leaks found by Iker Pedrosa.</changelog>
  <changelog author="Stefan Schubert schubi@suse.com" date="1625745600">- Update to version 0.4.0+git20210708.6918ea1:
  * Fixed covscan FORWARD_NULL_issues warnings</changelog>
  <changelog author="schubi@localhost" date="1625832000">- Update to version 0.4.1+git20210709.cf671f2:
  * CMake fixes regarding installation of econftool and man pages.</changelog>
  <changelog author="schubi@suse.com" date="1636632000">- Update to version libeconf-0.4.2+git20211111.c7a2c52:
  * CMake fixes regarding document installation.
  * Fixed different issues while writing string values to file.
  * Writing comments to file too.
  * Fixed memory leaks.
  * Fixed crash while merging values.</changelog>
  <changelog author="schubi@suse.com" date="1641297600">- Update to version 0.4.2+git20220104.5dfd69d:
  * Reading numbers with different bases (e.g. oktal) (bsc#1193632) (#157)</changelog>
  <changelog author="schubi@suse.com" date="1641297601">- Update to version 0.4.4+git20220104.962774f:
  * Fixed i586 build (#158)</changelog>
  <changelog author="schubi@suse.com" date="1649246400">- Update to version 0.4.5+git20220406.c9658f2:
  * econftool:
  * * New call "syntax" for checking the configuration files only.
    Returns an error string with line number if an error occurs.
  * * New options "--comment" and "--delimeters"
  * * Parsing one file only if needed.</changelog>
  <changelog author="schubi@suse.com" date="1651060800">- Update to version 0.4.6+git20220427.3016f4e:
  * econftool:
  * * Parsing error: Reporting file and line nr.
  * * --delimeters=spaces Taking all kind of spaces for delimiter
  * libeconf:
    Fixed bsc#1198165: Parsing files correctly which have space characters
    AND none space characters as delimiters.</changelog>
  <changelog author="schubi@suse.com" date="1668427200">- Update to version 0.4.8+git20221114.7ff7704:
  * Parsing files which are containing keys only (#170)
    All delimiters are allowed now : "", " =", " ", "=". But the
    user should use "" in order to be distinct.
  * /usr/etc/shells.d/&lt;file_name&gt; will not be parsed if
    /etc/shells.d/&lt;file_name&gt; is defined too.
  * Lto build fixed (#168)
  * New calls: econf_comment_tag, econf_delimiter_tag, econf_set_comment_tag,
    econf_set_delimiter_tag
  * Checking UID,GroupID, permissions,... of the parsed files (#165)
    New calls: econf_requireOwner, econf_requireGroup, econf_requirePermissions,
    econf_followSymlinks
  * Ignoring Group without brackets; Do not hold brackets in the internal data structure. (#164)
  * Error handling improved for nums and booleans (#163)</changelog>
  <changelog author="schubi@suse.com" date="1669204800">- Update to version 0.4.9:
  * libeconf.h: added missing sys/types.h header (#171)
  * new API calls: econf_readFileWithCallback,
    econf_readDirsWithCallback, econf_readDirsHistoryWithCallback (#172)
  * Checking NULL comment parameter in the parsing functions.</changelog>
  <changelog author="schubi@suse.com" date="1669982400">- Update to version 0.5.0:
  * API calls econf_read*WithCallback supporting a general (void *)
    argument for user defined data with which the callback function is
    called.
  * Tagged following functions deprecated:
    econf_requireOwner, econf_requireGroup, econf_requirePermissions,
    econf_followSymlinks, econf_reset_security_settings
    Use one of the econf_read*WithCallback functions instead.</changelog>
  <changelog author="schubi@suse.com" date="1674129600">- Update to version 0.5.1:
  * Reading files in /usr/_vendor_/_example_._suffix_.d/* regardless
    there is a /etc/_example_._suffix_ file. (#175)</changelog>
  <changelog author="schubi@suse.com" date="1679659200">- Update to version 0.5.2:
  * Fixed build for aarch64 and gcc13.
  * Making the output verbose when a test fails.
  * Fixed a stack-buffer-overflow vulnerability in "econf_writeFile"
    function.
  * Fixed a stack-buffer-overflow vulnerability in "read_file"
    function.
  * Added new feature: econf_set_conf_dirs (const char **dir_postfix_list)
    Sets a list of directory structures (with order) which describes
    the directories in which the files have to be parsed.
    E.G. with the given list: {"/conf.d/", ".d/", "/", NULL} files in following
    directories will be parsed:
    "&lt;default_dirs&gt;/&lt;project_name&gt;.&lt;suffix&gt;.d/"
    "&lt;default_dirs&gt;/&lt;project_name&gt;/conf.d/"
    "&lt;default_dirs&gt;/&lt;project_name&gt;.d/"
    "&lt;default_dirs&gt;/&lt;project_name&gt;/"
    The entry "&lt;default_dirs&gt;/&lt;project_name&gt;.&lt;suffix&gt;.d/" will be added
    automatically.
  * General code cleanup.</changelog>
  <changelog author="schubi@suse.com" date="1694001600">- Additional info for version 0.5.2:
  * Fixed a stack-buffer-overflow vulnerability in "econf_writeFile"
    function. (CVE-2023-30078, CVE-2023-32181, bsc#1211078)
  * Fixed a stack-buffer-overflow vulnerability in "read_file"
    function. (CVE-2023-30079, CVE-2023-22652, bsc#1211078)</changelog>
</package>
<package pkgid="f740e03a398e1a5684f32e385c61748d73e3f5e0c80627f9b24f3decf10d06cf" name="libeconf0" arch="x86_64">
  <version epoch="0" ver="0.5.2" rel="150400.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1594382400">- Update to version 0.3.8+git20200710.5126fff:
  * Add CMake build scripts, remove autotools support
  * Move C++ ABI compatibility section</changelog>
  <changelog author="lnussel@suse.de" date="1603368000">- explicitly BuildRequire: pkgconfig for /usr/lib/rpm/pkgconfigdeps.sh
  On TW it's pulled in implicitly by libxcrypt-devel which is not the
  case on 15.2</changelog>
  <changelog author="schubi@suse.com" date="1617883200">- Update to version 0.4.0+git20210408.6d33e5e:
  * Man pages libeconf.3 and econftool.8.
  * Handling multiline strings.
  * Added libeconf_ext which returns more information like
    line_nr, comments, path of the configuration file,...
  * Econftool, an command line interface for handling configuration
    files.
  * Generating HTML API documentation with doxygen.
  * Improving error handling and semantic file check.
  * Joining entries with the same key to one single entry if
    env variable ECONF_JOIN_SAME_ENTRIES has been set.</changelog>
  <changelog author="schubi@suse.com" date="1618228800">- Update to version 0.4.0+git20210412.1513a26:
  * Added econftool cat option (#146)
  * new API call: econf_readDirsHistory (showing ALL locations)
  * new API call: econf_getPath (absolute path of the configuration file)</changelog>
  <changelog author="schubi@suse.com" date="1618315200">- Update to version 0.4.0+git20210413.fdb8025:
  * Installing man pages via meson. (#147)</changelog>
  <changelog author="schubi@suse.com" date="1618488000">- Removed doxygen from build requires.</changelog>
  <changelog author="schubi@suse.com" date="1625659200">- Update to version 0.4.0+git20210707.537a8a:
  * Fixed resource leaks found by Iker Pedrosa.</changelog>
  <changelog author="Stefan Schubert schubi@suse.com" date="1625745600">- Update to version 0.4.0+git20210708.6918ea1:
  * Fixed covscan FORWARD_NULL_issues warnings</changelog>
  <changelog author="schubi@localhost" date="1625832000">- Update to version 0.4.1+git20210709.cf671f2:
  * CMake fixes regarding installation of econftool and man pages.</changelog>
  <changelog author="schubi@suse.com" date="1636632000">- Update to version libeconf-0.4.2+git20211111.c7a2c52:
  * CMake fixes regarding document installation.
  * Fixed different issues while writing string values to file.
  * Writing comments to file too.
  * Fixed memory leaks.
  * Fixed crash while merging values.</changelog>
  <changelog author="schubi@suse.com" date="1641297600">- Update to version 0.4.2+git20220104.5dfd69d:
  * Reading numbers with different bases (e.g. oktal) (bsc#1193632) (#157)</changelog>
  <changelog author="schubi@suse.com" date="1641297601">- Update to version 0.4.4+git20220104.962774f:
  * Fixed i586 build (#158)</changelog>
  <changelog author="schubi@suse.com" date="1649246400">- Update to version 0.4.5+git20220406.c9658f2:
  * econftool:
  * * New call "syntax" for checking the configuration files only.
    Returns an error string with line number if an error occurs.
  * * New options "--comment" and "--delimeters"
  * * Parsing one file only if needed.</changelog>
  <changelog author="schubi@suse.com" date="1651060800">- Update to version 0.4.6+git20220427.3016f4e:
  * econftool:
  * * Parsing error: Reporting file and line nr.
  * * --delimeters=spaces Taking all kind of spaces for delimiter
  * libeconf:
    Fixed bsc#1198165: Parsing files correctly which have space characters
    AND none space characters as delimiters.</changelog>
  <changelog author="schubi@suse.com" date="1668427200">- Update to version 0.4.8+git20221114.7ff7704:
  * Parsing files which are containing keys only (#170)
    All delimiters are allowed now : "", " =", " ", "=". But the
    user should use "" in order to be distinct.
  * /usr/etc/shells.d/&lt;file_name&gt; will not be parsed if
    /etc/shells.d/&lt;file_name&gt; is defined too.
  * Lto build fixed (#168)
  * New calls: econf_comment_tag, econf_delimiter_tag, econf_set_comment_tag,
    econf_set_delimiter_tag
  * Checking UID,GroupID, permissions,... of the parsed files (#165)
    New calls: econf_requireOwner, econf_requireGroup, econf_requirePermissions,
    econf_followSymlinks
  * Ignoring Group without brackets; Do not hold brackets in the internal data structure. (#164)
  * Error handling improved for nums and booleans (#163)</changelog>
  <changelog author="schubi@suse.com" date="1669204800">- Update to version 0.4.9:
  * libeconf.h: added missing sys/types.h header (#171)
  * new API calls: econf_readFileWithCallback,
    econf_readDirsWithCallback, econf_readDirsHistoryWithCallback (#172)
  * Checking NULL comment parameter in the parsing functions.</changelog>
  <changelog author="schubi@suse.com" date="1669982400">- Update to version 0.5.0:
  * API calls econf_read*WithCallback supporting a general (void *)
    argument for user defined data with which the callback function is
    called.
  * Tagged following functions deprecated:
    econf_requireOwner, econf_requireGroup, econf_requirePermissions,
    econf_followSymlinks, econf_reset_security_settings
    Use one of the econf_read*WithCallback functions instead.</changelog>
  <changelog author="schubi@suse.com" date="1674129600">- Update to version 0.5.1:
  * Reading files in /usr/_vendor_/_example_._suffix_.d/* regardless
    there is a /etc/_example_._suffix_ file. (#175)</changelog>
  <changelog author="schubi@suse.com" date="1679659200">- Update to version 0.5.2:
  * Fixed build for aarch64 and gcc13.
  * Making the output verbose when a test fails.
  * Fixed a stack-buffer-overflow vulnerability in "econf_writeFile"
    function.
  * Fixed a stack-buffer-overflow vulnerability in "read_file"
    function.
  * Added new feature: econf_set_conf_dirs (const char **dir_postfix_list)
    Sets a list of directory structures (with order) which describes
    the directories in which the files have to be parsed.
    E.G. with the given list: {"/conf.d/", ".d/", "/", NULL} files in following
    directories will be parsed:
    "&lt;default_dirs&gt;/&lt;project_name&gt;.&lt;suffix&gt;.d/"
    "&lt;default_dirs&gt;/&lt;project_name&gt;/conf.d/"
    "&lt;default_dirs&gt;/&lt;project_name&gt;.d/"
    "&lt;default_dirs&gt;/&lt;project_name&gt;/"
    The entry "&lt;default_dirs&gt;/&lt;project_name&gt;.&lt;suffix&gt;.d/" will be added
    automatically.
  * General code cleanup.</changelog>
  <changelog author="schubi@suse.com" date="1694001600">- Additional info for version 0.5.2:
  * Fixed a stack-buffer-overflow vulnerability in "econf_writeFile"
    function. (CVE-2023-30078, CVE-2023-32181, bsc#1211078)
  * Fixed a stack-buffer-overflow vulnerability in "read_file"
    function. (CVE-2023-30079, CVE-2023-22652, bsc#1211078)</changelog>
</package>
<package pkgid="3333a5e5d885bce71b0a6a17cce065d1b07618277aacb5bee6f763bb958c4f85" name="libekmfweb1" arch="s390x">
  <version epoch="0" ver="2.30.0" rel="150500.9.10.1"/>
  <changelog author="nikolay.gueorguiev@suse.com" date="1673352000">- Updated read_values.c for z16 machine type (bsc#1206832)</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1673438400">- Updated read_values.c for z16 machine type (bsc#1206832)
  * Added the IBM LinuxONE Emperor 4 machine type
  * Updated the z16 machine type to IBM z16 A01</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1675684800">- Added patch (bsc#1207947)
  * s390-tools-sles15sp5-zkey-Support-EP11-host-library-version-4.patch</changelog>
  <changelog author="jose.gomez@suse.com" date="1676548800">- Implemented read_values -u. The result of -u is a unique identifier composed of:
  * Machine Serial Number.
  * LPAR Name.
  * VM Name (can be optional).</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1676980800">- Applied the following patches (bsc#1208527, bsc#1206173)
  * s390-tools-sles15sp5-01-zipl-boot-discard-.eh_frame-and-.interp-input-sectio.patch
  * s390-tools-sles15sp5-02-zipl-boot-declare-that-no-executable-stack-is-requir.patch
  * s390-tools-sles15sp5-03-zipl-boot-use-no-warn-rwx-segments-linker-flag.patch
  * s390-tools-sles15sp5-04-zipl-boot-disable-build-id.patch
  * s390-tools-sles15sp5-05-zipl-boot-simplify-objcopy-commands.patch
  * s390-tools-sles15sp5-06-zipl-move-STAGE2_MAX_SIZE-and-STAGE1B_LOAD_ADDR-to-l.patch
  * s390-tools-sles15sp5-07-zipl-boot-use-linker-scripts-for-all-bootloaders.patch
  * s390-tools-sles15sp5-08-genprotimg-boot-declare-that-no-executable-stack-is-.patch
  * s390-tools-sles15sp5-09-genprotimg-boot-use-no-warn-rwx-segments-linker-flag.patch
  * s390-tools-sles15sp5-10-genprotimg-boot-disable-build-id.patch
  * s390-tools-sles15sp5-11-genprotimg-boot-Makefile-simplify-objcopy-command.patch
  * s390-tools-sles15sp5-12-genprotimg-boot-improve-linker-scripts.patch
  * s390-tools-sles15sp5-13-genprotimg-boot-stage3b-add-size-check-to-the-linker.patch
  * s390-tools-sles15sp5-14-genprotimg-boot-stage3b_reloc.bin-add-linker-script.patch
  * s390-tools-sles15sp5-15-zipl-Embed-loader-data-directly-into-boot-object.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1678276800">- Updated cputype (bsc#1208983)
  * Changed the script to avoid "/usr/bin/cputype: line xx: nnnn: command not found",
    when machine type was found more than once in the /proc/cpuinfo.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1678708800">- Applied a patch (bsc#1209196)
  * s390-tools-sles15sp5-lszcrypt-use-separate-index-for-inner-sub-device-loo.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1679572800">- Allow activation of devices at boot via kernel command line
  for live installation media (jsc#PED-2975)
  * Added a Source dracut-zdev-live-20230321.tar
  * Updated the .spec file for the new Source
-  Amended read_value.c</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1681905600">- Tailored the .spec, added a patch
  * s390-tools-ALP-zdev-live.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1683028800">- Applies a fix, splitting of rd.zdev-parameters, in
  * s390-tools-ALP-zdev-live.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1683201600">- Applied patches for ziomon: fix for SCSI devices of type disk without block dev
    (bsc#1211008)
  * s390-tools-sles15sp5-01-ziomon-ziorep_config-fix-missing-SG-major-minor-for-.patch
  * s390-tools-sles15sp5-02-ziomon-ziorep_config-fix-for-SCSI-devices-of-type-di.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1692619200">- Applies patches (bsc#1213377, bsc#1213852, bsc#1214114)
  * s390-tools-sles15sp5-01-zdev-add-missing-label-in-the-udev-rules.patch
  * s390-tools-sles15sp5-01-zdev-add-proper-value-input-for-the-ZDEV_SITE_ID-key.patch
  * s390-tools-sles15sp5-02-zdev-use-rename-file-to-avoid-any-symlinks-created.patch
  * s390-tools-sles15sp5-dasdfmt-Fall-back-to-full-format-if-space-release-fa.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1698926400">- Applied a patch (jsc#PED-6539, jsc#PED-6373)
  * s390-tools-sles15sp6-zkey-Support-EP11-AES-keys-with-prepended-header-to-.patch
- Updated read_values.c (bsc#1214466, bsc#1214534)
  * Update read_values.c to support the new IBM z Processors
- Updated SUSE's tools and their corresponding man pages (bsc#1216257)
  * ctc_configure
  * dasd_configure.opensuse
  * dasd_configure.8
  * dasd_configure.suse
  * mkdump.pl.opensuse
  * mkdump.pl.suse
  * qeth_configure
  * qeth_configure.8
  * zfcp_disk_configure
  * zfcp_disk_configure.8
  * zfcp_host_configure.8
  * zfcp_host_configure
- Updated cputype script
  * Amended cputype to support the new IBM z Processors</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1699876800">* Upgrade 390-tools from version 2.25.0 to version v2.29.0 (Latest)
  * * * *
  - General:
  - s390-tools now supports tools written in Rust.
  - Add compdb Makefile target to create 'compile_commands.json' to support LSP
  - backends in IDEs and editors
  - Add new tools / libraries:
  * rust/pv: Library for pv tools written in rust
  * rust/pvsecret: Tool to manage UV-secrets
  * Changes of existing tools:
  - dbginfo.sh: Global IFS variable
  - genprotimg: Add support for add-secret requests
  - genprotimg: Build debuginfo files for bootloader
  - hyptop: Add real SMT utilization field
  - hyptop: Allow users to set speedup factor
  - pvattest: Add yaml-output for verify command
  - zipl: Build debuginfo files for bootloader
  * Bug Fixes:
  - dump2tar: Fix truncated paths
  - zdev/dracut: fix kdump build to integrate with site support
  * * * *
  * v2.28.0
  - Changes of existing tools:
  - chzcrypt: Support for SE AP pass-through support
  - genprotimg: Add support for non-s390x architectures
  - lszcrypt: Support for SE AP pass-through support
  - zdev: Add support for autoquiesce related sysfs attributes
  * Bug Fixes:
  - ap_tools/ap-check: Handle missing 'matrix' and 'control_domains' attrs
  - ap_tools/ap-check: Hold ap config file lock over get attributes
  - s390-tools: Fix build for ppc64le
  - zdev: Add missing label in the udev-rules
  - zdev: Add proper value input for the ZDEV_SITE_ID key
  - zdev: Use rename-file to avoid any symlinks created
  - zipl/dump: fix ngdump dracut helper script
  * * * *
  * v2.27.0
  * Changes of existing tools:
  - s390-tools cross-compile and non-s390x support:
  - pkg-config is now mandatory for the build process
  - Add PKG_CONFIG Makefile variable to select pkg-config program;
  - default pkg-config or $(CROSS_COMPILE)pkg-config if
  - CROSS_COMPILE is set
  - Rename Makefile variable ARCH to HOST_ARCH. HOST_ARCH is the
    architecture that will run the produced (executable) objects
  - Add the Makefile variable BUILD_ARCH. BUILD_ARCH is the
    architecture of the build system. For each Makefile variable like
    CC, LINK, CPP, ... there is a suffixed version of it - e.g.
    CC_FOR_BUILD. This is useful for cross compiling, and this naming
    convention is very similar to the Meson convention (see
    https://mesonbuild.com/Reference-tables.html#environment-variables-per-machine).
  - Limit build targets for non-s390x architectures (pvattest)
  - dasdfmt: Fall back to full format if space release fails
  - dbginfo.sh: Add nstat for network and SNMP stats
  - dbginfo.sh: Rework crypto data collection
  - hyptop: Show thread util by default
  - zipl: Add support for list-directed IPL dump from ECKD DASD
  * Bug Fixes:
  - lszcrypt: Fix argument parsing
  - zdev/dracut: Fix out-of-memory (OOM) situations in the kdump crashkernel environment
  - ziomon/ziorep_config: Fix for SCSI devices of type disk without block dev
  - pvextract-hdr: Fix parsing issues on little-endian systems
  * * * *
  * v2.26.0
  * Remove tools / libraries:
  - Remove vmconvert and libvmdump in favor of vmdump file support in zdump
  * Changes of existing tools:
  - ipl_tools: Add support for list-directed IPL from ECKD DASD
  - lszcrypt: Display hardware filtering support capability
  - vmur: Remove option -c for dump file conversion (See zdump changes)
  - zdev: Add zfcp ber_stop parameter handling
  - zdump: Add vmdump dfi for vmdump format to elf format
  - zkey: Support EP11 host library version
  * Bug Fixes:
  - zipl: Move dump parmline processing and verification
  - zipl/genprotimg: Various build improvements
  * * * *
  * Removed obsolete IBM patches
  - s390-tools-sles15sp5-zipl-boot-disable-Warray-bounds-for-now.patch
  - s390-tools-sles15sp5-zkey-Support-EP11-host-library-version-4.patch
  * Removed obsolete patches for bug 1208527, and bug 1206173
  - s390-tools-sles15sp5-01-zipl-boot-discard-.eh_frame-and-.interp-input-sectio.patch
  - s390-tools-sles15sp5-02-zipl-boot-declare-that-no-executable-stack-is-requir.patch
  - s390-tools-sles15sp5-03-zipl-boot-use-no-warn-rwx-segments-linker-flag.patch
  - s390-tools-sles15sp5-04-zipl-boot-disable-build-id.patch
  - s390-tools-sles15sp5-05-zipl-boot-simplify-objcopy-commands.patch
  - s390-tools-sles15sp5-06-zipl-move-STAGE2_MAX_SIZE-and-STAGE1B_LOAD_ADDR-to-l.patch
  - s390-tools-sles15sp5-07-zipl-boot-use-linker-scripts-for-all-bootloaders.patch
  - s390-tools-sles15sp5-08-genprotimg-boot-declare-that-no-executable-stack-is-.patch
  - s390-tools-sles15sp5-09-genprotimg-boot-use-no-warn-rwx-segments-linker-flag.patch
  - s390-tools-sles15sp5-10-genprotimg-boot-disable-build-id.patch
  - s390-tools-sles15sp5-11-genprotimg-boot-Makefile-simplify-objcopy-command.patch
  - s390-tools-sles15sp5-12-genprotimg-boot-improve-linker-scripts.patch
  - s390-tools-sles15sp5-13-genprotimg-boot-stage3b-add-size-check-to-the-linker.patch
  - s390-tools-sles15sp5-14-genprotimg-boot-stage3b_reloc.bin-add-linker-script.patch
  - s390-tools-sles15sp5-15-zipl-Embed-loader-data-directly-into-boot-object.patch
  * Removed obsolete patch for bug 1209196
  - s390-tools-sles15sp5-lszcrypt-use-separate-index-for-inner-sub-device-loo.patch
  * Removed obsolete patches for bug 1211008
  - s390-tools-sles15sp5-01-ziomon-ziorep_config-fix-missing-SG-major-minor-for-.patch
  - s390-tools-sles15sp5-02-ziomon-ziorep_config-fix-for-SCSI-devices-of-type-di.patch
  * Removed obsolete patch for bug 1213377
  - s390-tools-sles15sp5-01-zdev-add-missing-label-in-the-udev-rules.patch
  * Removed obsolete patches for bug 1213852
  - s390-tools-sles15sp5-01-zdev-add-proper-value-input-for-the-ZDEV_SITE_ID-key.patch
  - s390-tools-sles15sp5-02-zdev-use-rename-file-to-avoid-any-symlinks-created.patch
  * Removed obsolete patch for bug 1214114
  - s390-tools-sles15sp5-dasdfmt-Fall-back-to-full-format-if-space-release-fa.patch
  * Removed obsolete patch
  - s390-tools-sles15sp5-fix-chown-commands-syntax.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1700049600">- Fixed a logic error in read_values.c</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1700827200">- Provide s390-tools on x86_64 to enable Secure Execution in the Cloud
    (jsc#PED-578, jsc#PED-7136, and jsc#PED-7138)
  * Selected tools from the s390-tools package need to be made available on x86_64.
    This will enable the integration of IBM Z machines running Secure Execution in a
    cloud environment where users don't necessarily need to have an s390x environment.
  - genprotimg    - (for building secure images)
  - pvsecret      -
  - pvattest      - (for external attestation)
  - pvextract-hdr -</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1701691200">- Upgrade s390-tools to version 2.30
    (jsc#PED-5783, jsc#PED-6785, jsc#PED-7136, jsc#PED-6539, jsc#PED-4604,
    jsc#PED-6649, jsc#PED-7138 )
- Add new tools / libraries:
  * lspai: Tool to display PAI counter sets
  * s390-tools: Provide a ShellCheck configuration
- Changes of existing tools / libraries:
  * cpumf/pai: Add command line option for realtime scheduling
  * dbginfo.sh: enhance ethtool collection for ROCE
  * libutil/util_lockfile: add routine to return owning pid of file lock
  * lszcrypt: Improve lszcrypt output on SE guests
  * rust: Use a single workspace for all rust tools
  * zdev: limit the derivation of ZDEV_SITE_ID
  * zdump/df_s390: Update 'zgetdump -i' output with zlib info
  * zdump/dfi_s390: Support reading compressed s390_ext dumps
  * zipl/boot: Integrate zlib compression to single volume DASD dumper
  * zipl/boot: compile the bootloaders only if HOST_ARCH is s390x
  * zipl: Add --no-compress option to zipl command
  * zkey: Also check for deconfigured and check-stopped cards
- Bug Fixes:
  * ap_tools/ap-check: handle get-attributes between pre and post event
  * libutil: fix util_file_read_*() using wrong format specifiers
  * rust/pv: fix Invalid write of size
- Amended the SUSE patches for version 2.30
- Revendored vendor.tar.gz
- Removed an obsolete patch
  * s390-tools-sles15sp6-zkey-Support-EP11-AES-keys-with-prepended-header-to-.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1702814400">- Updated the .spec file to use gcc13 (bsc#1217838)
- Amended read_values for '-S' option (bsc#1217923)</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1706097600">- Updated the .spec file
  * Explicitly specified 'ExclusiveArch: s390x x86_64'</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1706788800">- Updated read_values.c (bsc#1219227)</changelog>
</package>
<package pkgid="4766df81771b2c66cac35d66b56ad60cd0e86ad93496fdf4b2b6c49a8f80f3a5" name="libekmfweb1" arch="s390x">
  <version epoch="0" ver="2.30.0" rel="150500.9.13.1"/>
  <changelog author="nikolay.gueorguiev@suse.com" date="1673438400">- Updated read_values.c for z16 machine type (bsc#1206832)
  * Added the IBM LinuxONE Emperor 4 machine type
  * Updated the z16 machine type to IBM z16 A01</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1675684800">- Added patch (bsc#1207947)
  * s390-tools-sles15sp5-zkey-Support-EP11-host-library-version-4.patch</changelog>
  <changelog author="jose.gomez@suse.com" date="1676548800">- Implemented read_values -u. The result of -u is a unique identifier composed of:
  * Machine Serial Number.
  * LPAR Name.
  * VM Name (can be optional).</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1676980800">- Applied the following patches (bsc#1208527, bsc#1206173)
  * s390-tools-sles15sp5-01-zipl-boot-discard-.eh_frame-and-.interp-input-sectio.patch
  * s390-tools-sles15sp5-02-zipl-boot-declare-that-no-executable-stack-is-requir.patch
  * s390-tools-sles15sp5-03-zipl-boot-use-no-warn-rwx-segments-linker-flag.patch
  * s390-tools-sles15sp5-04-zipl-boot-disable-build-id.patch
  * s390-tools-sles15sp5-05-zipl-boot-simplify-objcopy-commands.patch
  * s390-tools-sles15sp5-06-zipl-move-STAGE2_MAX_SIZE-and-STAGE1B_LOAD_ADDR-to-l.patch
  * s390-tools-sles15sp5-07-zipl-boot-use-linker-scripts-for-all-bootloaders.patch
  * s390-tools-sles15sp5-08-genprotimg-boot-declare-that-no-executable-stack-is-.patch
  * s390-tools-sles15sp5-09-genprotimg-boot-use-no-warn-rwx-segments-linker-flag.patch
  * s390-tools-sles15sp5-10-genprotimg-boot-disable-build-id.patch
  * s390-tools-sles15sp5-11-genprotimg-boot-Makefile-simplify-objcopy-command.patch
  * s390-tools-sles15sp5-12-genprotimg-boot-improve-linker-scripts.patch
  * s390-tools-sles15sp5-13-genprotimg-boot-stage3b-add-size-check-to-the-linker.patch
  * s390-tools-sles15sp5-14-genprotimg-boot-stage3b_reloc.bin-add-linker-script.patch
  * s390-tools-sles15sp5-15-zipl-Embed-loader-data-directly-into-boot-object.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1678276800">- Updated cputype (bsc#1208983)
  * Changed the script to avoid "/usr/bin/cputype: line xx: nnnn: command not found",
    when machine type was found more than once in the /proc/cpuinfo.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1678708800">- Applied a patch (bsc#1209196)
  * s390-tools-sles15sp5-lszcrypt-use-separate-index-for-inner-sub-device-loo.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1679572800">- Allow activation of devices at boot via kernel command line
  for live installation media (jsc#PED-2975)
  * Added a Source dracut-zdev-live-20230321.tar
  * Updated the .spec file for the new Source
-  Amended read_value.c</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1681905600">- Tailored the .spec, added a patch
  * s390-tools-ALP-zdev-live.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1683028800">- Applies a fix, splitting of rd.zdev-parameters, in
  * s390-tools-ALP-zdev-live.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1683201600">- Applied patches for ziomon: fix for SCSI devices of type disk without block dev
    (bsc#1211008)
  * s390-tools-sles15sp5-01-ziomon-ziorep_config-fix-missing-SG-major-minor-for-.patch
  * s390-tools-sles15sp5-02-ziomon-ziorep_config-fix-for-SCSI-devices-of-type-di.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1692619200">- Applies patches (bsc#1213377, bsc#1213852, bsc#1214114)
  * s390-tools-sles15sp5-01-zdev-add-missing-label-in-the-udev-rules.patch
  * s390-tools-sles15sp5-01-zdev-add-proper-value-input-for-the-ZDEV_SITE_ID-key.patch
  * s390-tools-sles15sp5-02-zdev-use-rename-file-to-avoid-any-symlinks-created.patch
  * s390-tools-sles15sp5-dasdfmt-Fall-back-to-full-format-if-space-release-fa.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1698926400">- Applied a patch (jsc#PED-6539, jsc#PED-6373)
  * s390-tools-sles15sp6-zkey-Support-EP11-AES-keys-with-prepended-header-to-.patch
- Updated read_values.c (bsc#1214466, bsc#1214534)
  * Update read_values.c to support the new IBM z Processors
- Updated SUSE's tools and their corresponding man pages (bsc#1216257)
  * ctc_configure
  * dasd_configure.opensuse
  * dasd_configure.8
  * dasd_configure.suse
  * mkdump.pl.opensuse
  * mkdump.pl.suse
  * qeth_configure
  * qeth_configure.8
  * zfcp_disk_configure
  * zfcp_disk_configure.8
  * zfcp_host_configure.8
  * zfcp_host_configure
- Updated cputype script
  * Amended cputype to support the new IBM z Processors</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1699876800">* Upgrade 390-tools from version 2.25.0 to version v2.29.0 (Latest)
  * * * *
  - General:
  - s390-tools now supports tools written in Rust.
  - Add compdb Makefile target to create 'compile_commands.json' to support LSP
  - backends in IDEs and editors
  - Add new tools / libraries:
  * rust/pv: Library for pv tools written in rust
  * rust/pvsecret: Tool to manage UV-secrets
  * Changes of existing tools:
  - dbginfo.sh: Global IFS variable
  - genprotimg: Add support for add-secret requests
  - genprotimg: Build debuginfo files for bootloader
  - hyptop: Add real SMT utilization field
  - hyptop: Allow users to set speedup factor
  - pvattest: Add yaml-output for verify command
  - zipl: Build debuginfo files for bootloader
  * Bug Fixes:
  - dump2tar: Fix truncated paths
  - zdev/dracut: fix kdump build to integrate with site support
  * * * *
  * v2.28.0
  - Changes of existing tools:
  - chzcrypt: Support for SE AP pass-through support
  - genprotimg: Add support for non-s390x architectures
  - lszcrypt: Support for SE AP pass-through support
  - zdev: Add support for autoquiesce related sysfs attributes
  * Bug Fixes:
  - ap_tools/ap-check: Handle missing 'matrix' and 'control_domains' attrs
  - ap_tools/ap-check: Hold ap config file lock over get attributes
  - s390-tools: Fix build for ppc64le
  - zdev: Add missing label in the udev-rules
  - zdev: Add proper value input for the ZDEV_SITE_ID key
  - zdev: Use rename-file to avoid any symlinks created
  - zipl/dump: fix ngdump dracut helper script
  * * * *
  * v2.27.0
  * Changes of existing tools:
  - s390-tools cross-compile and non-s390x support:
  - pkg-config is now mandatory for the build process
  - Add PKG_CONFIG Makefile variable to select pkg-config program;
  - default pkg-config or $(CROSS_COMPILE)pkg-config if
  - CROSS_COMPILE is set
  - Rename Makefile variable ARCH to HOST_ARCH. HOST_ARCH is the
    architecture that will run the produced (executable) objects
  - Add the Makefile variable BUILD_ARCH. BUILD_ARCH is the
    architecture of the build system. For each Makefile variable like
    CC, LINK, CPP, ... there is a suffixed version of it - e.g.
    CC_FOR_BUILD. This is useful for cross compiling, and this naming
    convention is very similar to the Meson convention (see
    https://mesonbuild.com/Reference-tables.html#environment-variables-per-machine).
  - Limit build targets for non-s390x architectures (pvattest)
  - dasdfmt: Fall back to full format if space release fails
  - dbginfo.sh: Add nstat for network and SNMP stats
  - dbginfo.sh: Rework crypto data collection
  - hyptop: Show thread util by default
  - zipl: Add support for list-directed IPL dump from ECKD DASD
  * Bug Fixes:
  - lszcrypt: Fix argument parsing
  - zdev/dracut: Fix out-of-memory (OOM) situations in the kdump crashkernel environment
  - ziomon/ziorep_config: Fix for SCSI devices of type disk without block dev
  - pvextract-hdr: Fix parsing issues on little-endian systems
  * * * *
  * v2.26.0
  * Remove tools / libraries:
  - Remove vmconvert and libvmdump in favor of vmdump file support in zdump
  * Changes of existing tools:
  - ipl_tools: Add support for list-directed IPL from ECKD DASD
  - lszcrypt: Display hardware filtering support capability
  - vmur: Remove option -c for dump file conversion (See zdump changes)
  - zdev: Add zfcp ber_stop parameter handling
  - zdump: Add vmdump dfi for vmdump format to elf format
  - zkey: Support EP11 host library version
  * Bug Fixes:
  - zipl: Move dump parmline processing and verification
  - zipl/genprotimg: Various build improvements
  * * * *
  * Removed obsolete IBM patches
  - s390-tools-sles15sp5-zipl-boot-disable-Warray-bounds-for-now.patch
  - s390-tools-sles15sp5-zkey-Support-EP11-host-library-version-4.patch
  * Removed obsolete patches for bug 1208527, and bug 1206173
  - s390-tools-sles15sp5-01-zipl-boot-discard-.eh_frame-and-.interp-input-sectio.patch
  - s390-tools-sles15sp5-02-zipl-boot-declare-that-no-executable-stack-is-requir.patch
  - s390-tools-sles15sp5-03-zipl-boot-use-no-warn-rwx-segments-linker-flag.patch
  - s390-tools-sles15sp5-04-zipl-boot-disable-build-id.patch
  - s390-tools-sles15sp5-05-zipl-boot-simplify-objcopy-commands.patch
  - s390-tools-sles15sp5-06-zipl-move-STAGE2_MAX_SIZE-and-STAGE1B_LOAD_ADDR-to-l.patch
  - s390-tools-sles15sp5-07-zipl-boot-use-linker-scripts-for-all-bootloaders.patch
  - s390-tools-sles15sp5-08-genprotimg-boot-declare-that-no-executable-stack-is-.patch
  - s390-tools-sles15sp5-09-genprotimg-boot-use-no-warn-rwx-segments-linker-flag.patch
  - s390-tools-sles15sp5-10-genprotimg-boot-disable-build-id.patch
  - s390-tools-sles15sp5-11-genprotimg-boot-Makefile-simplify-objcopy-command.patch
  - s390-tools-sles15sp5-12-genprotimg-boot-improve-linker-scripts.patch
  - s390-tools-sles15sp5-13-genprotimg-boot-stage3b-add-size-check-to-the-linker.patch
  - s390-tools-sles15sp5-14-genprotimg-boot-stage3b_reloc.bin-add-linker-script.patch
  - s390-tools-sles15sp5-15-zipl-Embed-loader-data-directly-into-boot-object.patch
  * Removed obsolete patch for bug 1209196
  - s390-tools-sles15sp5-lszcrypt-use-separate-index-for-inner-sub-device-loo.patch
  * Removed obsolete patches for bug 1211008
  - s390-tools-sles15sp5-01-ziomon-ziorep_config-fix-missing-SG-major-minor-for-.patch
  - s390-tools-sles15sp5-02-ziomon-ziorep_config-fix-for-SCSI-devices-of-type-di.patch
  * Removed obsolete patch for bug 1213377
  - s390-tools-sles15sp5-01-zdev-add-missing-label-in-the-udev-rules.patch
  * Removed obsolete patches for bug 1213852
  - s390-tools-sles15sp5-01-zdev-add-proper-value-input-for-the-ZDEV_SITE_ID-key.patch
  - s390-tools-sles15sp5-02-zdev-use-rename-file-to-avoid-any-symlinks-created.patch
  * Removed obsolete patch for bug 1214114
  - s390-tools-sles15sp5-dasdfmt-Fall-back-to-full-format-if-space-release-fa.patch
  * Removed obsolete patch
  - s390-tools-sles15sp5-fix-chown-commands-syntax.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1700049600">- Fixed a logic error in read_values.c</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1700827200">- Provide s390-tools on x86_64 to enable Secure Execution in the Cloud
    (jsc#PED-578, jsc#PED-7136, and jsc#PED-7138)
  * Selected tools from the s390-tools package need to be made available on x86_64.
    This will enable the integration of IBM Z machines running Secure Execution in a
    cloud environment where users don't necessarily need to have an s390x environment.
  - genprotimg    - (for building secure images)
  - pvsecret      -
  - pvattest      - (for external attestation)
  - pvextract-hdr -</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1701691200">- Upgrade s390-tools to version 2.30
    (jsc#PED-5783, jsc#PED-6785, jsc#PED-7136, jsc#PED-6539, jsc#PED-4604,
    jsc#PED-6649, jsc#PED-7138 )
- Add new tools / libraries:
  * lspai: Tool to display PAI counter sets
  * s390-tools: Provide a ShellCheck configuration
- Changes of existing tools / libraries:
  * cpumf/pai: Add command line option for realtime scheduling
  * dbginfo.sh: enhance ethtool collection for ROCE
  * libutil/util_lockfile: add routine to return owning pid of file lock
  * lszcrypt: Improve lszcrypt output on SE guests
  * rust: Use a single workspace for all rust tools
  * zdev: limit the derivation of ZDEV_SITE_ID
  * zdump/df_s390: Update 'zgetdump -i' output with zlib info
  * zdump/dfi_s390: Support reading compressed s390_ext dumps
  * zipl/boot: Integrate zlib compression to single volume DASD dumper
  * zipl/boot: compile the bootloaders only if HOST_ARCH is s390x
  * zipl: Add --no-compress option to zipl command
  * zkey: Also check for deconfigured and check-stopped cards
- Bug Fixes:
  * ap_tools/ap-check: handle get-attributes between pre and post event
  * libutil: fix util_file_read_*() using wrong format specifiers
  * rust/pv: fix Invalid write of size
- Amended the SUSE patches for version 2.30
- Revendored vendor.tar.gz
- Removed an obsolete patch
  * s390-tools-sles15sp6-zkey-Support-EP11-AES-keys-with-prepended-header-to-.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1702814400">- Updated the .spec file to use gcc13 (bsc#1217838)
- Amended read_values for '-S' option (bsc#1217923)</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1706097600">- Updated the .spec file
  * Explicitly specified 'ExclusiveArch: s390x x86_64'</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1706788800">- Updated read_values.c (bsc#1219227)</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1712577600">- Applied patches to implement new IBM host-key subject locality (bsc#1222414)
  * s390-tools-sles15sp5-01-genprotimg-support-Armonk-in-IBM-signing-key-subject.patch
  * s390-tools-sles15sp5-02-libpv-support-Armonk-in-IBM-signing-key-subject.patch
  * s390-tools-sles15sp5-03-pvattest-Fix-root-ca-parsing.patch</changelog>
</package>
<package pkgid="2b356b1d81f689be34ff248c18c2d3e4001457544dc4ff4047ec613c2eaa59a3" name="libekmfweb1" arch="s390x">
  <version epoch="0" ver="2.30.0" rel="150500.9.16.2"/>
  <changelog author="nikolay.gueorguiev@suse.com" date="1675684800">- Added patch (bsc#1207947)
  * s390-tools-sles15sp5-zkey-Support-EP11-host-library-version-4.patch</changelog>
  <changelog author="jose.gomez@suse.com" date="1676548800">- Implemented read_values -u. The result of -u is a unique identifier composed of:
  * Machine Serial Number.
  * LPAR Name.
  * VM Name (can be optional).</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1676980800">- Applied the following patches (bsc#1208527, bsc#1206173)
  * s390-tools-sles15sp5-01-zipl-boot-discard-.eh_frame-and-.interp-input-sectio.patch
  * s390-tools-sles15sp5-02-zipl-boot-declare-that-no-executable-stack-is-requir.patch
  * s390-tools-sles15sp5-03-zipl-boot-use-no-warn-rwx-segments-linker-flag.patch
  * s390-tools-sles15sp5-04-zipl-boot-disable-build-id.patch
  * s390-tools-sles15sp5-05-zipl-boot-simplify-objcopy-commands.patch
  * s390-tools-sles15sp5-06-zipl-move-STAGE2_MAX_SIZE-and-STAGE1B_LOAD_ADDR-to-l.patch
  * s390-tools-sles15sp5-07-zipl-boot-use-linker-scripts-for-all-bootloaders.patch
  * s390-tools-sles15sp5-08-genprotimg-boot-declare-that-no-executable-stack-is-.patch
  * s390-tools-sles15sp5-09-genprotimg-boot-use-no-warn-rwx-segments-linker-flag.patch
  * s390-tools-sles15sp5-10-genprotimg-boot-disable-build-id.patch
  * s390-tools-sles15sp5-11-genprotimg-boot-Makefile-simplify-objcopy-command.patch
  * s390-tools-sles15sp5-12-genprotimg-boot-improve-linker-scripts.patch
  * s390-tools-sles15sp5-13-genprotimg-boot-stage3b-add-size-check-to-the-linker.patch
  * s390-tools-sles15sp5-14-genprotimg-boot-stage3b_reloc.bin-add-linker-script.patch
  * s390-tools-sles15sp5-15-zipl-Embed-loader-data-directly-into-boot-object.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1678276800">- Updated cputype (bsc#1208983)
  * Changed the script to avoid "/usr/bin/cputype: line xx: nnnn: command not found",
    when machine type was found more than once in the /proc/cpuinfo.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1678708800">- Applied a patch (bsc#1209196)
  * s390-tools-sles15sp5-lszcrypt-use-separate-index-for-inner-sub-device-loo.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1679572800">- Allow activation of devices at boot via kernel command line
  for live installation media (jsc#PED-2975)
  * Added a Source dracut-zdev-live-20230321.tar
  * Updated the .spec file for the new Source
-  Amended read_value.c</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1681905600">- Tailored the .spec, added a patch
  * s390-tools-ALP-zdev-live.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1683028800">- Applies a fix, splitting of rd.zdev-parameters, in
  * s390-tools-ALP-zdev-live.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1683201600">- Applied patches for ziomon: fix for SCSI devices of type disk without block dev
    (bsc#1211008)
  * s390-tools-sles15sp5-01-ziomon-ziorep_config-fix-missing-SG-major-minor-for-.patch
  * s390-tools-sles15sp5-02-ziomon-ziorep_config-fix-for-SCSI-devices-of-type-di.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1692619200">- Applies patches (bsc#1213377, bsc#1213852, bsc#1214114)
  * s390-tools-sles15sp5-01-zdev-add-missing-label-in-the-udev-rules.patch
  * s390-tools-sles15sp5-01-zdev-add-proper-value-input-for-the-ZDEV_SITE_ID-key.patch
  * s390-tools-sles15sp5-02-zdev-use-rename-file-to-avoid-any-symlinks-created.patch
  * s390-tools-sles15sp5-dasdfmt-Fall-back-to-full-format-if-space-release-fa.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1698926400">- Applied a patch (jsc#PED-6539, jsc#PED-6373)
  * s390-tools-sles15sp6-zkey-Support-EP11-AES-keys-with-prepended-header-to-.patch
- Updated read_values.c (bsc#1214466, bsc#1214534)
  * Update read_values.c to support the new IBM z Processors
- Updated SUSE's tools and their corresponding man pages (bsc#1216257)
  * ctc_configure
  * dasd_configure.opensuse
  * dasd_configure.8
  * dasd_configure.suse
  * mkdump.pl.opensuse
  * mkdump.pl.suse
  * qeth_configure
  * qeth_configure.8
  * zfcp_disk_configure
  * zfcp_disk_configure.8
  * zfcp_host_configure.8
  * zfcp_host_configure
- Updated cputype script
  * Amended cputype to support the new IBM z Processors</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1699876800">* Upgrade 390-tools from version 2.25.0 to version v2.29.0 (Latest)
  * * * *
  - General:
  - s390-tools now supports tools written in Rust.
  - Add compdb Makefile target to create 'compile_commands.json' to support LSP
  - backends in IDEs and editors
  - Add new tools / libraries:
  * rust/pv: Library for pv tools written in rust
  * rust/pvsecret: Tool to manage UV-secrets
  * Changes of existing tools:
  - dbginfo.sh: Global IFS variable
  - genprotimg: Add support for add-secret requests
  - genprotimg: Build debuginfo files for bootloader
  - hyptop: Add real SMT utilization field
  - hyptop: Allow users to set speedup factor
  - pvattest: Add yaml-output for verify command
  - zipl: Build debuginfo files for bootloader
  * Bug Fixes:
  - dump2tar: Fix truncated paths
  - zdev/dracut: fix kdump build to integrate with site support
  * * * *
  * v2.28.0
  - Changes of existing tools:
  - chzcrypt: Support for SE AP pass-through support
  - genprotimg: Add support for non-s390x architectures
  - lszcrypt: Support for SE AP pass-through support
  - zdev: Add support for autoquiesce related sysfs attributes
  * Bug Fixes:
  - ap_tools/ap-check: Handle missing 'matrix' and 'control_domains' attrs
  - ap_tools/ap-check: Hold ap config file lock over get attributes
  - s390-tools: Fix build for ppc64le
  - zdev: Add missing label in the udev-rules
  - zdev: Add proper value input for the ZDEV_SITE_ID key
  - zdev: Use rename-file to avoid any symlinks created
  - zipl/dump: fix ngdump dracut helper script
  * * * *
  * v2.27.0
  * Changes of existing tools:
  - s390-tools cross-compile and non-s390x support:
  - pkg-config is now mandatory for the build process
  - Add PKG_CONFIG Makefile variable to select pkg-config program;
  - default pkg-config or $(CROSS_COMPILE)pkg-config if
  - CROSS_COMPILE is set
  - Rename Makefile variable ARCH to HOST_ARCH. HOST_ARCH is the
    architecture that will run the produced (executable) objects
  - Add the Makefile variable BUILD_ARCH. BUILD_ARCH is the
    architecture of the build system. For each Makefile variable like
    CC, LINK, CPP, ... there is a suffixed version of it - e.g.
    CC_FOR_BUILD. This is useful for cross compiling, and this naming
    convention is very similar to the Meson convention (see
    https://mesonbuild.com/Reference-tables.html#environment-variables-per-machine).
  - Limit build targets for non-s390x architectures (pvattest)
  - dasdfmt: Fall back to full format if space release fails
  - dbginfo.sh: Add nstat for network and SNMP stats
  - dbginfo.sh: Rework crypto data collection
  - hyptop: Show thread util by default
  - zipl: Add support for list-directed IPL dump from ECKD DASD
  * Bug Fixes:
  - lszcrypt: Fix argument parsing
  - zdev/dracut: Fix out-of-memory (OOM) situations in the kdump crashkernel environment
  - ziomon/ziorep_config: Fix for SCSI devices of type disk without block dev
  - pvextract-hdr: Fix parsing issues on little-endian systems
  * * * *
  * v2.26.0
  * Remove tools / libraries:
  - Remove vmconvert and libvmdump in favor of vmdump file support in zdump
  * Changes of existing tools:
  - ipl_tools: Add support for list-directed IPL from ECKD DASD
  - lszcrypt: Display hardware filtering support capability
  - vmur: Remove option -c for dump file conversion (See zdump changes)
  - zdev: Add zfcp ber_stop parameter handling
  - zdump: Add vmdump dfi for vmdump format to elf format
  - zkey: Support EP11 host library version
  * Bug Fixes:
  - zipl: Move dump parmline processing and verification
  - zipl/genprotimg: Various build improvements
  * * * *
  * Removed obsolete IBM patches
  - s390-tools-sles15sp5-zipl-boot-disable-Warray-bounds-for-now.patch
  - s390-tools-sles15sp5-zkey-Support-EP11-host-library-version-4.patch
  * Removed obsolete patches for bug 1208527, and bug 1206173
  - s390-tools-sles15sp5-01-zipl-boot-discard-.eh_frame-and-.interp-input-sectio.patch
  - s390-tools-sles15sp5-02-zipl-boot-declare-that-no-executable-stack-is-requir.patch
  - s390-tools-sles15sp5-03-zipl-boot-use-no-warn-rwx-segments-linker-flag.patch
  - s390-tools-sles15sp5-04-zipl-boot-disable-build-id.patch
  - s390-tools-sles15sp5-05-zipl-boot-simplify-objcopy-commands.patch
  - s390-tools-sles15sp5-06-zipl-move-STAGE2_MAX_SIZE-and-STAGE1B_LOAD_ADDR-to-l.patch
  - s390-tools-sles15sp5-07-zipl-boot-use-linker-scripts-for-all-bootloaders.patch
  - s390-tools-sles15sp5-08-genprotimg-boot-declare-that-no-executable-stack-is-.patch
  - s390-tools-sles15sp5-09-genprotimg-boot-use-no-warn-rwx-segments-linker-flag.patch
  - s390-tools-sles15sp5-10-genprotimg-boot-disable-build-id.patch
  - s390-tools-sles15sp5-11-genprotimg-boot-Makefile-simplify-objcopy-command.patch
  - s390-tools-sles15sp5-12-genprotimg-boot-improve-linker-scripts.patch
  - s390-tools-sles15sp5-13-genprotimg-boot-stage3b-add-size-check-to-the-linker.patch
  - s390-tools-sles15sp5-14-genprotimg-boot-stage3b_reloc.bin-add-linker-script.patch
  - s390-tools-sles15sp5-15-zipl-Embed-loader-data-directly-into-boot-object.patch
  * Removed obsolete patch for bug 1209196
  - s390-tools-sles15sp5-lszcrypt-use-separate-index-for-inner-sub-device-loo.patch
  * Removed obsolete patches for bug 1211008
  - s390-tools-sles15sp5-01-ziomon-ziorep_config-fix-missing-SG-major-minor-for-.patch
  - s390-tools-sles15sp5-02-ziomon-ziorep_config-fix-for-SCSI-devices-of-type-di.patch
  * Removed obsolete patch for bug 1213377
  - s390-tools-sles15sp5-01-zdev-add-missing-label-in-the-udev-rules.patch
  * Removed obsolete patches for bug 1213852
  - s390-tools-sles15sp5-01-zdev-add-proper-value-input-for-the-ZDEV_SITE_ID-key.patch
  - s390-tools-sles15sp5-02-zdev-use-rename-file-to-avoid-any-symlinks-created.patch
  * Removed obsolete patch for bug 1214114
  - s390-tools-sles15sp5-dasdfmt-Fall-back-to-full-format-if-space-release-fa.patch
  * Removed obsolete patch
  - s390-tools-sles15sp5-fix-chown-commands-syntax.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1700049600">- Fixed a logic error in read_values.c</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1700827200">- Provide s390-tools on x86_64 to enable Secure Execution in the Cloud
    (jsc#PED-578, jsc#PED-7136, and jsc#PED-7138)
  * Selected tools from the s390-tools package need to be made available on x86_64.
    This will enable the integration of IBM Z machines running Secure Execution in a
    cloud environment where users don't necessarily need to have an s390x environment.
  - genprotimg    - (for building secure images)
  - pvsecret      -
  - pvattest      - (for external attestation)
  - pvextract-hdr -</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1701691200">- Upgrade s390-tools to version 2.30
    (jsc#PED-5783, jsc#PED-6785, jsc#PED-7136, jsc#PED-6539, jsc#PED-4604,
    jsc#PED-6649, jsc#PED-7138 )
- Add new tools / libraries:
  * lspai: Tool to display PAI counter sets
  * s390-tools: Provide a ShellCheck configuration
- Changes of existing tools / libraries:
  * cpumf/pai: Add command line option for realtime scheduling
  * dbginfo.sh: enhance ethtool collection for ROCE
  * libutil/util_lockfile: add routine to return owning pid of file lock
  * lszcrypt: Improve lszcrypt output on SE guests
  * rust: Use a single workspace for all rust tools
  * zdev: limit the derivation of ZDEV_SITE_ID
  * zdump/df_s390: Update 'zgetdump -i' output with zlib info
  * zdump/dfi_s390: Support reading compressed s390_ext dumps
  * zipl/boot: Integrate zlib compression to single volume DASD dumper
  * zipl/boot: compile the bootloaders only if HOST_ARCH is s390x
  * zipl: Add --no-compress option to zipl command
  * zkey: Also check for deconfigured and check-stopped cards
- Bug Fixes:
  * ap_tools/ap-check: handle get-attributes between pre and post event
  * libutil: fix util_file_read_*() using wrong format specifiers
  * rust/pv: fix Invalid write of size
- Amended the SUSE patches for version 2.30
- Revendored vendor.tar.gz
- Removed an obsolete patch
  * s390-tools-sles15sp6-zkey-Support-EP11-AES-keys-with-prepended-header-to-.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1702814400">- Updated the .spec file to use gcc13 (bsc#1217838)
- Amended read_values for '-S' option (bsc#1217923)</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1706097600">- Updated the .spec file
  * Explicitly specified 'ExclusiveArch: s390x x86_64'</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1706788800">- Updated read_values.c (bsc#1219227)</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1712577600">- Applied patches to implement new IBM host-key subject locality (bsc#1222414)
  * s390-tools-sles15sp5-01-genprotimg-support-Armonk-in-IBM-signing-key-subject.patch
  * s390-tools-sles15sp5-02-libpv-support-Armonk-in-IBM-signing-key-subject.patch
  * s390-tools-sles15sp5-03-pvattest-Fix-root-ca-parsing.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1718971200">- Amended read_values.c (bsc#1226609)
  * Added print for 'qc_type_name', amended the layers</changelog>
</package>
<package pkgid="da9d6ab6a678ddf58efd18b3a18a4e59c66e5fac8cc7c0f40cdf0494327e0acf" name="libekmfweb1" arch="s390x">
  <version epoch="0" ver="2.31.0" rel="150500.9.19.1"/>
  <changelog author="jose.gomez@suse.com" date="1676548800">- Implemented read_values -u. The result of -u is a unique identifier composed of:
  * Machine Serial Number.
  * LPAR Name.
  * VM Name (can be optional).</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1676980800">- Applied the following patches (bsc#1208527, bsc#1206173)
  * s390-tools-sles15sp5-01-zipl-boot-discard-.eh_frame-and-.interp-input-sectio.patch
  * s390-tools-sles15sp5-02-zipl-boot-declare-that-no-executable-stack-is-requir.patch
  * s390-tools-sles15sp5-03-zipl-boot-use-no-warn-rwx-segments-linker-flag.patch
  * s390-tools-sles15sp5-04-zipl-boot-disable-build-id.patch
  * s390-tools-sles15sp5-05-zipl-boot-simplify-objcopy-commands.patch
  * s390-tools-sles15sp5-06-zipl-move-STAGE2_MAX_SIZE-and-STAGE1B_LOAD_ADDR-to-l.patch
  * s390-tools-sles15sp5-07-zipl-boot-use-linker-scripts-for-all-bootloaders.patch
  * s390-tools-sles15sp5-08-genprotimg-boot-declare-that-no-executable-stack-is-.patch
  * s390-tools-sles15sp5-09-genprotimg-boot-use-no-warn-rwx-segments-linker-flag.patch
  * s390-tools-sles15sp5-10-genprotimg-boot-disable-build-id.patch
  * s390-tools-sles15sp5-11-genprotimg-boot-Makefile-simplify-objcopy-command.patch
  * s390-tools-sles15sp5-12-genprotimg-boot-improve-linker-scripts.patch
  * s390-tools-sles15sp5-13-genprotimg-boot-stage3b-add-size-check-to-the-linker.patch
  * s390-tools-sles15sp5-14-genprotimg-boot-stage3b_reloc.bin-add-linker-script.patch
  * s390-tools-sles15sp5-15-zipl-Embed-loader-data-directly-into-boot-object.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1678276800">- Updated cputype (bsc#1208983)
  * Changed the script to avoid "/usr/bin/cputype: line xx: nnnn: command not found",
    when machine type was found more than once in the /proc/cpuinfo.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1678708800">- Applied a patch (bsc#1209196)
  * s390-tools-sles15sp5-lszcrypt-use-separate-index-for-inner-sub-device-loo.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1679572800">- Allow activation of devices at boot via kernel command line
  for live installation media (jsc#PED-2975)
  * Added a Source dracut-zdev-live-20230321.tar
  * Updated the .spec file for the new Source
-  Amended read_value.c</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1681905600">- Tailored the .spec, added a patch
  * s390-tools-ALP-zdev-live.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1683028800">- Applies a fix, splitting of rd.zdev-parameters, in
  * s390-tools-ALP-zdev-live.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1683201600">- Applied patches for ziomon: fix for SCSI devices of type disk without block dev
    (bsc#1211008)
  * s390-tools-sles15sp5-01-ziomon-ziorep_config-fix-missing-SG-major-minor-for-.patch
  * s390-tools-sles15sp5-02-ziomon-ziorep_config-fix-for-SCSI-devices-of-type-di.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1692619200">- Applies patches (bsc#1213377, bsc#1213852, bsc#1214114)
  * s390-tools-sles15sp5-01-zdev-add-missing-label-in-the-udev-rules.patch
  * s390-tools-sles15sp5-01-zdev-add-proper-value-input-for-the-ZDEV_SITE_ID-key.patch
  * s390-tools-sles15sp5-02-zdev-use-rename-file-to-avoid-any-symlinks-created.patch
  * s390-tools-sles15sp5-dasdfmt-Fall-back-to-full-format-if-space-release-fa.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1698926400">- Applied a patch (jsc#PED-6539, jsc#PED-6373)
  * s390-tools-sles15sp6-zkey-Support-EP11-AES-keys-with-prepended-header-to-.patch
- Updated read_values.c (bsc#1214466, bsc#1214534)
  * Update read_values.c to support the new IBM z Processors
- Updated SUSE's tools and their corresponding man pages (bsc#1216257)
  * ctc_configure
  * dasd_configure.opensuse
  * dasd_configure.8
  * dasd_configure.suse
  * mkdump.pl.opensuse
  * mkdump.pl.suse
  * qeth_configure
  * qeth_configure.8
  * zfcp_disk_configure
  * zfcp_disk_configure.8
  * zfcp_host_configure.8
  * zfcp_host_configure
- Updated cputype script
  * Amended cputype to support the new IBM z Processors</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1699876800">* Upgrade 390-tools from version 2.25.0 to version v2.29.0 (Latest)
  * * * *
  - General:
  - s390-tools now supports tools written in Rust.
  - Add compdb Makefile target to create 'compile_commands.json' to support LSP
  - backends in IDEs and editors
  - Add new tools / libraries:
  * rust/pv: Library for pv tools written in rust
  * rust/pvsecret: Tool to manage UV-secrets
  * Changes of existing tools:
  - dbginfo.sh: Global IFS variable
  - genprotimg: Add support for add-secret requests
  - genprotimg: Build debuginfo files for bootloader
  - hyptop: Add real SMT utilization field
  - hyptop: Allow users to set speedup factor
  - pvattest: Add yaml-output for verify command
  - zipl: Build debuginfo files for bootloader
  * Bug Fixes:
  - dump2tar: Fix truncated paths
  - zdev/dracut: fix kdump build to integrate with site support
  * * * *
  * v2.28.0
  - Changes of existing tools:
  - chzcrypt: Support for SE AP pass-through support
  - genprotimg: Add support for non-s390x architectures
  - lszcrypt: Support for SE AP pass-through support
  - zdev: Add support for autoquiesce related sysfs attributes
  * Bug Fixes:
  - ap_tools/ap-check: Handle missing 'matrix' and 'control_domains' attrs
  - ap_tools/ap-check: Hold ap config file lock over get attributes
  - s390-tools: Fix build for ppc64le
  - zdev: Add missing label in the udev-rules
  - zdev: Add proper value input for the ZDEV_SITE_ID key
  - zdev: Use rename-file to avoid any symlinks created
  - zipl/dump: fix ngdump dracut helper script
  * * * *
  * v2.27.0
  * Changes of existing tools:
  - s390-tools cross-compile and non-s390x support:
  - pkg-config is now mandatory for the build process
  - Add PKG_CONFIG Makefile variable to select pkg-config program;
  - default pkg-config or $(CROSS_COMPILE)pkg-config if
  - CROSS_COMPILE is set
  - Rename Makefile variable ARCH to HOST_ARCH. HOST_ARCH is the
    architecture that will run the produced (executable) objects
  - Add the Makefile variable BUILD_ARCH. BUILD_ARCH is the
    architecture of the build system. For each Makefile variable like
    CC, LINK, CPP, ... there is a suffixed version of it - e.g.
    CC_FOR_BUILD. This is useful for cross compiling, and this naming
    convention is very similar to the Meson convention (see
    https://mesonbuild.com/Reference-tables.html#environment-variables-per-machine).
  - Limit build targets for non-s390x architectures (pvattest)
  - dasdfmt: Fall back to full format if space release fails
  - dbginfo.sh: Add nstat for network and SNMP stats
  - dbginfo.sh: Rework crypto data collection
  - hyptop: Show thread util by default
  - zipl: Add support for list-directed IPL dump from ECKD DASD
  * Bug Fixes:
  - lszcrypt: Fix argument parsing
  - zdev/dracut: Fix out-of-memory (OOM) situations in the kdump crashkernel environment
  - ziomon/ziorep_config: Fix for SCSI devices of type disk without block dev
  - pvextract-hdr: Fix parsing issues on little-endian systems
  * * * *
  * v2.26.0
  * Remove tools / libraries:
  - Remove vmconvert and libvmdump in favor of vmdump file support in zdump
  * Changes of existing tools:
  - ipl_tools: Add support for list-directed IPL from ECKD DASD
  - lszcrypt: Display hardware filtering support capability
  - vmur: Remove option -c for dump file conversion (See zdump changes)
  - zdev: Add zfcp ber_stop parameter handling
  - zdump: Add vmdump dfi for vmdump format to elf format
  - zkey: Support EP11 host library version
  * Bug Fixes:
  - zipl: Move dump parmline processing and verification
  - zipl/genprotimg: Various build improvements
  * * * *
  * Removed obsolete IBM patches
  - s390-tools-sles15sp5-zipl-boot-disable-Warray-bounds-for-now.patch
  - s390-tools-sles15sp5-zkey-Support-EP11-host-library-version-4.patch
  * Removed obsolete patches for bug 1208527, and bug 1206173
  - s390-tools-sles15sp5-01-zipl-boot-discard-.eh_frame-and-.interp-input-sectio.patch
  - s390-tools-sles15sp5-02-zipl-boot-declare-that-no-executable-stack-is-requir.patch
  - s390-tools-sles15sp5-03-zipl-boot-use-no-warn-rwx-segments-linker-flag.patch
  - s390-tools-sles15sp5-04-zipl-boot-disable-build-id.patch
  - s390-tools-sles15sp5-05-zipl-boot-simplify-objcopy-commands.patch
  - s390-tools-sles15sp5-06-zipl-move-STAGE2_MAX_SIZE-and-STAGE1B_LOAD_ADDR-to-l.patch
  - s390-tools-sles15sp5-07-zipl-boot-use-linker-scripts-for-all-bootloaders.patch
  - s390-tools-sles15sp5-08-genprotimg-boot-declare-that-no-executable-stack-is-.patch
  - s390-tools-sles15sp5-09-genprotimg-boot-use-no-warn-rwx-segments-linker-flag.patch
  - s390-tools-sles15sp5-10-genprotimg-boot-disable-build-id.patch
  - s390-tools-sles15sp5-11-genprotimg-boot-Makefile-simplify-objcopy-command.patch
  - s390-tools-sles15sp5-12-genprotimg-boot-improve-linker-scripts.patch
  - s390-tools-sles15sp5-13-genprotimg-boot-stage3b-add-size-check-to-the-linker.patch
  - s390-tools-sles15sp5-14-genprotimg-boot-stage3b_reloc.bin-add-linker-script.patch
  - s390-tools-sles15sp5-15-zipl-Embed-loader-data-directly-into-boot-object.patch
  * Removed obsolete patch for bug 1209196
  - s390-tools-sles15sp5-lszcrypt-use-separate-index-for-inner-sub-device-loo.patch
  * Removed obsolete patches for bug 1211008
  - s390-tools-sles15sp5-01-ziomon-ziorep_config-fix-missing-SG-major-minor-for-.patch
  - s390-tools-sles15sp5-02-ziomon-ziorep_config-fix-for-SCSI-devices-of-type-di.patch
  * Removed obsolete patch for bug 1213377
  - s390-tools-sles15sp5-01-zdev-add-missing-label-in-the-udev-rules.patch
  * Removed obsolete patches for bug 1213852
  - s390-tools-sles15sp5-01-zdev-add-proper-value-input-for-the-ZDEV_SITE_ID-key.patch
  - s390-tools-sles15sp5-02-zdev-use-rename-file-to-avoid-any-symlinks-created.patch
  * Removed obsolete patch for bug 1214114
  - s390-tools-sles15sp5-dasdfmt-Fall-back-to-full-format-if-space-release-fa.patch
  * Removed obsolete patch
  - s390-tools-sles15sp5-fix-chown-commands-syntax.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1700049600">- Fixed a logic error in read_values.c</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1700827200">- Provide s390-tools on x86_64 to enable Secure Execution in the Cloud
    (jsc#PED-578, jsc#PED-7136, and jsc#PED-7138)
  * Selected tools from the s390-tools package need to be made available on x86_64.
    This will enable the integration of IBM Z machines running Secure Execution in a
    cloud environment where users don't necessarily need to have an s390x environment.
  - genprotimg    - (for building secure images)
  - pvsecret      -
  - pvattest      - (for external attestation)
  - pvextract-hdr -</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1701691200">- Upgrade s390-tools to version 2.30
    (jsc#PED-5783, jsc#PED-6785, jsc#PED-7136, jsc#PED-6539, jsc#PED-4604,
    jsc#PED-6649, jsc#PED-7138 )
- Add new tools / libraries:
  * lspai: Tool to display PAI counter sets
  * s390-tools: Provide a ShellCheck configuration
- Changes of existing tools / libraries:
  * cpumf/pai: Add command line option for realtime scheduling
  * dbginfo.sh: enhance ethtool collection for ROCE
  * libutil/util_lockfile: add routine to return owning pid of file lock
  * lszcrypt: Improve lszcrypt output on SE guests
  * rust: Use a single workspace for all rust tools
  * zdev: limit the derivation of ZDEV_SITE_ID
  * zdump/df_s390: Update 'zgetdump -i' output with zlib info
  * zdump/dfi_s390: Support reading compressed s390_ext dumps
  * zipl/boot: Integrate zlib compression to single volume DASD dumper
  * zipl/boot: compile the bootloaders only if HOST_ARCH is s390x
  * zipl: Add --no-compress option to zipl command
  * zkey: Also check for deconfigured and check-stopped cards
- Bug Fixes:
  * ap_tools/ap-check: handle get-attributes between pre and post event
  * libutil: fix util_file_read_*() using wrong format specifiers
  * rust/pv: fix Invalid write of size
- Amended the SUSE patches for version 2.30
- Revendored vendor.tar.gz
- Removed an obsolete patch
  * s390-tools-sles15sp6-zkey-Support-EP11-AES-keys-with-prepended-header-to-.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1702814400">- Updated the .spec file to use gcc13 (bsc#1217838)
- Amended read_values for '-S' option (bsc#1217923)</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1706097600">- Updated the .spec file
  * Explicitly specified 'ExclusiveArch: s390x x86_64'</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1706788800">- Updated read_values.c (bsc#1219227)</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1712577600">- Applied patches to implement new IBM host-key subject locality (bsc#1222414)
  * s390-tools-sles15sp5-01-genprotimg-support-Armonk-in-IBM-signing-key-subject.patch
  * s390-tools-sles15sp5-02-libpv-support-Armonk-in-IBM-signing-key-subject.patch
  * s390-tools-sles15sp5-03-pvattest-Fix-root-ca-parsing.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1718971200">- Amended read_values.c (bsc#1226609)
  * Added print for 'qc_type_name', amended the layers</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1720180800">- Upgrade s390-tools to version 2.31 (jsc#PED-7139)
- General:
  * common.mak: Set default C/C++ standard to gnu11/gnu++11
- Add new tools / libraries:
  * pvapconfig: Tool to automatically configure APQNs in SE KVM guests
  * s390-tools: Provide pre-commit configuration
- Changes of existing tools:
  * cpuplugd: Adjust to CPU 0 being no longer hotpluggable
  * dbginfo.sh: Check for Dynamic Partition Mode
  * dbginfo.sh: Update man page and copyright
  * rust/pv: Add user-data signing and verifying
  * rust/pvsecret: Add user defined signatures and verifications
  * zdev/dracut: Consolidate device configuration
- Bug Fixes:
  * dbginfo.sh: Fix relative path on script copy
  * libkmipclient: Fix build with libxml2-2.12.0
  * pvsecret: Fix panic if empty file is used as host key document
  * rust/pv: Fix 'elided_lifetimes_in_associated_constant' warning
- Provide groups as required by RPM 4.19
- Amended the .spec file for x86_64
- Updated the .spec file to enable Secure Execution in the Cloud (bsc#1222675)
- BuildRequires:  qclib-devel-static &gt;= 2.4.1 (bsc#1227365)
- Applied additional patches
  * s390-tools-sles15sp5-01-rust-pv-support-Armonk-in-IBM-signing-key-subject.patch
  * s390-tools-sles15sp5-genprotimg-makefile.patch
  * s390-tools-sles15sp5-kdump-initrd-59-zfcp-compat-rules.patch
- Applied an updated patch
  * s390-tools-sles15sp5-01-parse-ipl-device-for-activation.patch</changelog>
</package>
<package pkgid="870037caf635d2019aad2fb7e675ba454d060df63b617d83b247c7146243b007" name="libexpat1" arch="aarch64">
  <version epoch="0" ver="2.4.4" rel="150400.3.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1562068800">- Version update to 2.2.7 (CVE-2018-20843, bsc#1139937)
  * Security fixes:
  - CVE-2018-20843 - Fix extraction of namespace prefixes from
    XML names; XML names with multiple colons could end up in
    the wrong namespace, and take a high amount of RAM and CPU
    resources while processing, opening the door to use for
    denial-of-service attacks
  * Other changes:
  - Autotools/CMake: Utilize -fvisibility=hidden to stop
    exporting non-API symbols
  - Autotools: Add --without-examples and --without-tests
  - Autotools: Modernize configure.ac
  - Autotools: Fix check for -fvisibility=hidden for Clang
  - Autotools: Fix compilation for lack of docbook2x-man
  - CMake: Make libdir of pkgconfig expat.pc support multilib
  - CMake: Build man page in PROJECT_BINARY_DIR not _SOURCE_DIR
  - Remove fallback to bcopy, assume that memmove(3) exists
- Removed expat-2.2.6-fix-make-clean.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567598400">- Security fix (CVE-2019-15903, bsc#1149429)
  * Crafted XML input results in heap-based buffer over-read by fooling
    the parser into changing from DTD parsing to document parsing
  * Added patches:
  - expat-CVE-2019-15903.patch
  - expat-CVE-2019-15903-tests.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568635200">- Version update to 2.2.8
  * Security fixes: (CVE-2019-15903, bsc#1149429)
  - CVE-2019-15903 -- Fix heap overflow triggered by XML_GetCurrentLineNumber
    (or XML_GetCurrentColumnNumber), and deny internal entities closing the doctype;
  * Bug fixes:
  - Fix cases where XML_StopParser did not have any effect
    when called from inside of an end element handler
  - xmlwf: Fix exit code for operation without "-d DIRECTORY";
    previously, only "-d DIRECTORY" would give you a proper exit code:
    Now both cases return exit code 2.
  * Other changes:
  - examples: Improve elements.c
  - Autotools: Add argument --enable-xml-attr-info
  - Autotools: Add arguments --with-getrandom --without-getrandom --with-sys-getrandom --without-sys-getrandom
  - Autotools: Fix linking issues with "./configure LD=clang"
  - Autotools: Fix "make run-xmltest" for out-of-source builds
  - CMake: Pull all options from Expat &lt;=2.2.7 into namespace
  - CMake: Add argument -DEXPAT_ATTR_INFO=(ON|OFF), default OFF
  - CMake: Add argument -DEXPAT_LARGE_SIZE=(ON|OFF), default OFF
  - CMake: Add argument -DEXPAT_MIN_SIZE=(ON|OFF), default OFF
  - CMake: Add arguments -DEXPAT_WITH_GETRANDOM=(ON|OFF|AUTO), default AUTO
  - CMake: Add arguments -DEXPAT_WITH_SYS_GETRANDOM=(ON|OFF|AUTO), default AUTO
  - CMake: Install expat_config.h to include directory
  - CMake: Generate and install configuration files for future find_package(expat [..] CONFIG [..])
  - CMake: Now produces a summary of applied configuration
  - CMake: Require C++ compiler only when tests are enabled
  - CMake: Fix compilation for 16bit character types, i.e. ex -DXML_UNICODE=ON (and ex -DXML_UNICODE_WCHAR_T=ON)
  - CMake: Port "make run-xmltest" from GNU Autotools to CMake
  - CMake: Integrate OSS-Fuzz fuzzers, option -DEXPAT_BUILD_FUZZERS=(ON|OFF), default OFF
- Removed patches fixed in the update:
  * expat-CVE-2019-15903.patch
  * expat-CVE-2019-15903-tests.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1575028800">- Version update to 2.2.9
  * Other changes:
  - examples: Drop executable bits from elements.c
    [#349]  Windows: Change the name of the Windows DLLs from expat*.dll
    to libexpat*.dll once more (regression from 2.2.8, first
    fixed in 1.95.3, issue #61 on SourceForge today,
    was issue #432456 back then); needs a fix due
    case-insensitive file systems on Windows and the fact that
    Perl's XML::Parser::Expat compiles into Expat.dll.
    [#347]  Windows: Only define _CRT_RAND_S if not defined
    Version info bumped from 7:10:6 to 7:11:6</changelog>
  <changelog author="pmonreal@suse.com" date="1601812800">- Update to 2.2.10:
  * Bug fixes:
  - Fix undefined behavior during parsing caused by pointer
    arithmetic with NULL pointers
  - Fix reading uninitialized variable during parsing
  - xmlwf: Add missing check for malloc NULL return
  * Other changes:
  - xmlwf: Document exit codes in xmlwf manpage and exit with code 3
    (rather than code 1) for output errors when used with "-d DIRECTORY"
  - Autotools: Use -Werror while configure tests the compiler for
    supported compile flags to avoid false positives
  - Autotools: Improve handling of user (C|CPP|CXX|LD)FLAGS, e.g.
    ensure that they have the last word over flags added while
    running ./configure
  - CMake: Create libexpatw.{dll,so} and expatw.pc (with emphasis
    on suffix "w") with -DEXPAT_CHAR_TYPE=(ushort|wchar_t)
  - CMake: Detect and deny unsupported build combinations
    involving -DEXPAT_CHAR_TYPE=(ushort|wchar_t)
  - CMake: Install pre-compiled shipped xmlwf.1 manpage in case
    of -DEXPAT_BUILD_DOCS=OFF
  - CMake: Fix use of Expat by means of add_subdirectory
  - CMake: Keep expat target name constant at "expat" (i.e. refrain
    from using the target name to control build artifact filenames)
  - CMake: Expose man page compilation as target "xmlwf-manpage"
  - CMake: Introduce option EXPAT_BUILD_PKGCONFIG to control
    generation of pkg-config file "expat.pc"
  - CMake: Add minimalistic support for building binary packages
    with CMake target "package"; based on CPack
  - CMake: Add option -DEXPAT_OSSFUZZ_BUILD=(ON|OFF) with default
    OFF to build fuzzer code against OSS-Fuzz and related
    environment variable LIB_FUZZING_ENGINE
  - Fix testsuite for -DEXPAT_DTD=OFF and -DEXPAT_NS=OFF
  - Address compiler warnings
  - Address pngcheck warnings with doc/*.png images: Version info
    bumped from 7:11:6 to 7:12:6</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- update to 2.3.0:
  * When calling XML_ParseBuffer without a prior successful call to
    XML_GetBuffer as a user, no longer trigger undefined behavior
    (by adding an integer to a NULL pointer) but rather return
    XML_STATUS_ERROR and set the error code to (new) code
    XML_ERROR_NO_BUFFER. Found by UBSan (UndefinedBehaviorSanitizer)
    of Clang 11 (but not Clang 9).
  * xmlwf: Exit status 2 was used for both:
  - malformed input files (documented) and
  - invalid command-line arguments (undocumented).
    case of invalid command-line arguments now
    has its own exit status 4, resolving the ambiguity.
  * Other changes</changelog>
  <changelog author="dimstar@opensuse.org" date="1618315200">- Do not BuildRequire cmake: expat is part of the distro bootstrap
  cycle and any additional dependency makes the ring larger. In
  this case here, cmake was even only used to own a directory.</changelog>
  <changelog author="pmonreal@suse.com" date="1621857600">- Update to 2.4.0: [CVE-2013-0340 "Billion Laughs"]
  * Security fixes:
  - CVE-2013-0340/CWE-776 -- Protect against billion laughs attacks
    (denial-of-service; flavors targeting CPU time or RAM or both,
    leveraging general entities or parameter entities or both)
    by tracking and limiting the input amplification factor
    (&lt;amplification&gt; := (&lt;direct&gt; + &lt;indirect&gt;) / &lt;direct&gt;).
    By conservative default, amplification up to a factor of 100.0
    is tolerated and rejection only starts after 8 MiB of output bytes
    (=&lt;direct&gt; + &lt;indirect&gt;) have been processed.
    The fix adds the following to the API:
  - A new error code XML_ERROR_AMPLIFICATION_LIMIT_BREACH to
    signals this specific condition.
  - Two new API functions ..
  - XML_SetBillionLaughsAttackProtectionMaximumAmplification and
  - XML_SetBillionLaughsAttackProtectionActivationThreshold
    .. to further tighten billion laughs protection parameters
    when desired.  Please see file "doc/reference.html" for details.
    If you ever need to increase the defaults for non-attack XML
    payload, please file a bug report with libexpat.
  - Two new XML_FEATURE_* constants ..
  - that can be queried using the XML_GetFeatureList function, and
  - that are shown in "xmlwf -v" output.
  - Two new environment variable switches ..
  - EXPAT_ACCOUNTING_DEBUG=(0|1|2|3) and
  - EXPAT_ENTITY_DEBUG=(0|1)
    .. for runtime debugging of accounting and entity processing.
    Specific behavior of these values may change in the future.
  - Two new command line arguments "-a FACTOR" and "-b BYTES"
    for xmlwf to further tighten billion laughs protection
    parameters when desired.
    If you ever need to increase the defaults for non-attack XML
    payload, please file a bug report with libexpat.
  * Bug fixes:
  - For (non-default) compilation with -DEXPAT_MIN_SIZE=ON (CMake)
    or CPPFLAGS=-DXML_MIN_SIZE (GNU Autotools): Fix segfault
    for UTF-16 payloads containing CDATA sections.
  - Autotools: Fix generated CMake files for non-64bit and
    non-Linux platforms (e.g. macOS and MinGW in particular)
    that were introduced with release 2.3.0
  * Other changes:
  - xmlwf: Improve help output and the xmlwf man page
  - xmlwf: Improve maintainability through some refactoring
  - xmlwf: Fix man page DocBook validity
  - CMake: Support absolute paths for both CMAKE_INSTALL_LIBDIR
    and CMAKE_INSTALL_INCLUDEDIR
  - CMake: Add support for standard variable BUILD_SHARED_LIBS
  - Unexpose symbol _INTERNAL_trim_to_complete_utf8_characters
  - Resolve macro HAVE_EXPAT_CONFIG_H
  - Delete unused legacy helper file "conftools/PrintPath"
  - doc/reference.html: Fix XHTML validity
  - doc/reference.html: Replace the 90s look by OK.css
  - Version info bumped from 8:0:7 to 9:0:8 due to addition of
    new symbols and error codes; see https://verbump.de/ for
    what these numbers do</changelog>
  <changelog author="pmonreal@suse.com" date="1621857601">- Update to 2.4.1:
  * Bug fixes:
  - Autotools: Fix installed header expat_config.h for multilib
    systems; regression introduced in 2.4.0 by pull request #486
  * Other changes:
  - Version info bumped from 9:0:8 to 9:1:8; see
    https://verbump.de/ for what these numbers do</changelog>
  <changelog author="pmonreal@suse.com" date="1631016000">- Update to 2.4.1 in SLE-15-SP4 [jsc#SLE-21253]
  * Remove expat-CVE-2018-20843.patch upstream</changelog>
  <changelog author="dmueller@suse.com" date="1640606400">- update to 2.4.2:
  * Link againgst libm for function "isnan"
  * Include expat_config.h as early as possible
  * Autotools: Include files with release archives:
  - buildconf.sh
  - fuzz/*.c
  * Autotools: Sync CMake templates
  * docs: Document that function XML_GetBuffer may return NULL
    when asking for a buffer of 0 (zero) bytes size
  * docs: Fix return value docs for both
    XML_SetBillionLaughsAttackProtection* functions
  * Version info bumped from 9:1:8 to 9:2:8</changelog>
  <changelog author="dmueller@suse.com" date="1642420800">- update to 2.4.3 (bsc#1194251, bsc#1194362, bsc#1194474,
    bsc#1194476, bsc#1194477, bsc#1194478, bsc#1194479, bsc#1194480):
  * CVE-2021-45960 -- Fix issues with left shifts by &gt;=29 places
    resulting in
    a) realloc acting as free
    b) realloc allocating too few bytes
    c) undefined behavior
    depending on architecture and precise value
    for XML documents with &gt;=2^27+1 prefixed attributes
    on a single XML tag a la
    "&lt;r xmlns:a='[..]' a:a123='[..]' [..] /&gt;"
    where XML_ParserCreateNS is used to create the parser
    (which needs argument "-n" when running xmlwf).
    Impact is denial of service, or more.
  * CVE-2021-46143 (ZDI-CAN-16157) -- Fix integer overflow
    on variable m_groupSize in function doProlog leading
    to realloc acting as free.
    Impact is denial of service or more.
  * CVE-2022-22822 to CVE-2022-22827 -- Prevent integer overflows
    near memory allocation at multiple places.  Mitre assigned
    a dedicated CVE for each involved internal C function:
  - CVE-2022-22822 for function addBinding
  - CVE-2022-22823 for function build_model
  - CVE-2022-22824 for function defineAttribute
  - CVE-2022-22825 for function lookup
  - CVE-2022-22826 for function nextScaffoldPart
  - CVE-2022-22827 for function storeAtts
    Impact is denial of service or more.</changelog>
  <changelog author="david.anes@suse.com" date="1643630400">- update to 2.4.4 (bsc#1195217, bsc#1195054):
  * Security fixes:
  - CVE-2022-23852 -- Fix signed integer overflow
    (undefined behavior) in function XML_GetBuffer
    that is also called by function XML_Parse internally)
    for when XML_CONTEXT_BYTES is defined to &gt;0 (which is both
    common and default).
    Impact is denial of service or more.
  - CVE-2022-23990 -- Fix unsigned integer overflow in function
    doProlog triggered by large content in element type
    declarations when there is an element declaration handler
    present (from a prior call to XML_SetElementDeclHandler).
    Impact is denial of service or more.
  * Bug fixes:
  - xmlwf: Fix a memory leak on output file opening error
  * Other changes:
  - Version info bumped from 9:3:8 to 9:4:8;
    see https://verbump.de/ for what these numbers do
  * Drop unused file valid-xhtml10.png</changelog>
  <changelog author="david.anes@suse.com" date="1643716800">- Update to latest version 2.4.4 in SLE-15-SP4 [jsc#SLE-21253]</changelog>
  <changelog author="david.anes@suse.com" date="1645444800">- Security fixes:
  * (CVE-2022-25236, bsc#1196025) Expat before 2.4.5 allows
    attackers to insert namespace-separator characters into
    namespace URIs
  - Added expat-CVE-2022-25236.patch
  * (CVE-2022-25235, bsc#1196026) xmltok_impl.c in Expat before
    2.4.5 does not check whether a UTF-8 character is valid in a
    certain context.
  - Added expat-CVE-2022-25235.patch
  * (CVE-2022-25313, bsc#1196168) Stack exhaustion in
    build_model() via uncontrolled recursion
  - Added expat-CVE-2022-25313.patch
  - The fix upstream introduced a regression that was later
    amended in 2.4.6 version
    + Added expat-CVE-2022-25313-fix-regression.patch
  * (CVE-2022-25314, bsc#1196169) Integer overflow in copyString
  - Added expat-CVE-2022-25314.patch
  * (CVE-2022-25315, bsc#1196171) Integer overflow in storeRawNames
  - Added expat-CVE-2022-25315.patch</changelog>
  <changelog author="david.anes@suse.com" date="1646481600">- Security fixes:
  * (CVE-2022-25236, bsc#1196784) [&gt;=2.4.5] Fix to CVE-2022-25236
    breaks biboumi, ClairMeta, jxmlease, libwbxml,
    openleadr-python, rnv, xmltodict
  - Added expat-CVE-2022-25236-relax-fix.patch</changelog>
  <changelog author="david.anes@suse.com" date="1664193600">- Security fix:
  * (CVE-2022-40674, bsc#1203438) use-after-free in the doContent
    function in xmlparse.c
  - Added patch expat-CVE-2022-40674.patch</changelog>
  <changelog author="david.anes@suse.com" date="1666785600">- Security fix:
  * (CVE-2022-43680, bsc#1204708) use-after free caused by overeager
    destruction of a shared DTD in XML_ExternalEntityParserCreate in
    out-of-memory situations
  - Added patch expat-CVE-2022-43680.patch</changelog>
  <changelog author="david.anes@suse.com" date="1708084800">- Security fix:
  * (CVE-2023-52425, bsc#1219559) denial of service (resource
    consumption) caused by processing large tokens.
  - Added patch expat-CVE-2023-52425-1.patch
  - Added patch expat-CVE-2023-52425-2.patch
  - Added patch expat-CVE-2023-52425-backport-parser-changes.patch
  - Added patch expat-CVE-2023-52425-fix-tests.patch</changelog>
  <changelog author="david.anes@suse.com" date="1710763200">- Security fix (boo#1221289, CVE-2024-28757): XML Entity Expansion
  attack when there is isolated use of external parsers.
  * Added expat-CVE-2024-28757.patch</changelog>
</package>
<package pkgid="8ab613a433bed504a7b7b774f9c202658229a09f200f86cbd85a70d560cd95ca" name="libexpat1" arch="s390x">
  <version epoch="0" ver="2.4.4" rel="150400.3.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1562068800">- Version update to 2.2.7 (CVE-2018-20843, bsc#1139937)
  * Security fixes:
  - CVE-2018-20843 - Fix extraction of namespace prefixes from
    XML names; XML names with multiple colons could end up in
    the wrong namespace, and take a high amount of RAM and CPU
    resources while processing, opening the door to use for
    denial-of-service attacks
  * Other changes:
  - Autotools/CMake: Utilize -fvisibility=hidden to stop
    exporting non-API symbols
  - Autotools: Add --without-examples and --without-tests
  - Autotools: Modernize configure.ac
  - Autotools: Fix check for -fvisibility=hidden for Clang
  - Autotools: Fix compilation for lack of docbook2x-man
  - CMake: Make libdir of pkgconfig expat.pc support multilib
  - CMake: Build man page in PROJECT_BINARY_DIR not _SOURCE_DIR
  - Remove fallback to bcopy, assume that memmove(3) exists
- Removed expat-2.2.6-fix-make-clean.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567598400">- Security fix (CVE-2019-15903, bsc#1149429)
  * Crafted XML input results in heap-based buffer over-read by fooling
    the parser into changing from DTD parsing to document parsing
  * Added patches:
  - expat-CVE-2019-15903.patch
  - expat-CVE-2019-15903-tests.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568635200">- Version update to 2.2.8
  * Security fixes: (CVE-2019-15903, bsc#1149429)
  - CVE-2019-15903 -- Fix heap overflow triggered by XML_GetCurrentLineNumber
    (or XML_GetCurrentColumnNumber), and deny internal entities closing the doctype;
  * Bug fixes:
  - Fix cases where XML_StopParser did not have any effect
    when called from inside of an end element handler
  - xmlwf: Fix exit code for operation without "-d DIRECTORY";
    previously, only "-d DIRECTORY" would give you a proper exit code:
    Now both cases return exit code 2.
  * Other changes:
  - examples: Improve elements.c
  - Autotools: Add argument --enable-xml-attr-info
  - Autotools: Add arguments --with-getrandom --without-getrandom --with-sys-getrandom --without-sys-getrandom
  - Autotools: Fix linking issues with "./configure LD=clang"
  - Autotools: Fix "make run-xmltest" for out-of-source builds
  - CMake: Pull all options from Expat &lt;=2.2.7 into namespace
  - CMake: Add argument -DEXPAT_ATTR_INFO=(ON|OFF), default OFF
  - CMake: Add argument -DEXPAT_LARGE_SIZE=(ON|OFF), default OFF
  - CMake: Add argument -DEXPAT_MIN_SIZE=(ON|OFF), default OFF
  - CMake: Add arguments -DEXPAT_WITH_GETRANDOM=(ON|OFF|AUTO), default AUTO
  - CMake: Add arguments -DEXPAT_WITH_SYS_GETRANDOM=(ON|OFF|AUTO), default AUTO
  - CMake: Install expat_config.h to include directory
  - CMake: Generate and install configuration files for future find_package(expat [..] CONFIG [..])
  - CMake: Now produces a summary of applied configuration
  - CMake: Require C++ compiler only when tests are enabled
  - CMake: Fix compilation for 16bit character types, i.e. ex -DXML_UNICODE=ON (and ex -DXML_UNICODE_WCHAR_T=ON)
  - CMake: Port "make run-xmltest" from GNU Autotools to CMake
  - CMake: Integrate OSS-Fuzz fuzzers, option -DEXPAT_BUILD_FUZZERS=(ON|OFF), default OFF
- Removed patches fixed in the update:
  * expat-CVE-2019-15903.patch
  * expat-CVE-2019-15903-tests.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1575028800">- Version update to 2.2.9
  * Other changes:
  - examples: Drop executable bits from elements.c
    [#349]  Windows: Change the name of the Windows DLLs from expat*.dll
    to libexpat*.dll once more (regression from 2.2.8, first
    fixed in 1.95.3, issue #61 on SourceForge today,
    was issue #432456 back then); needs a fix due
    case-insensitive file systems on Windows and the fact that
    Perl's XML::Parser::Expat compiles into Expat.dll.
    [#347]  Windows: Only define _CRT_RAND_S if not defined
    Version info bumped from 7:10:6 to 7:11:6</changelog>
  <changelog author="pmonreal@suse.com" date="1601812800">- Update to 2.2.10:
  * Bug fixes:
  - Fix undefined behavior during parsing caused by pointer
    arithmetic with NULL pointers
  - Fix reading uninitialized variable during parsing
  - xmlwf: Add missing check for malloc NULL return
  * Other changes:
  - xmlwf: Document exit codes in xmlwf manpage and exit with code 3
    (rather than code 1) for output errors when used with "-d DIRECTORY"
  - Autotools: Use -Werror while configure tests the compiler for
    supported compile flags to avoid false positives
  - Autotools: Improve handling of user (C|CPP|CXX|LD)FLAGS, e.g.
    ensure that they have the last word over flags added while
    running ./configure
  - CMake: Create libexpatw.{dll,so} and expatw.pc (with emphasis
    on suffix "w") with -DEXPAT_CHAR_TYPE=(ushort|wchar_t)
  - CMake: Detect and deny unsupported build combinations
    involving -DEXPAT_CHAR_TYPE=(ushort|wchar_t)
  - CMake: Install pre-compiled shipped xmlwf.1 manpage in case
    of -DEXPAT_BUILD_DOCS=OFF
  - CMake: Fix use of Expat by means of add_subdirectory
  - CMake: Keep expat target name constant at "expat" (i.e. refrain
    from using the target name to control build artifact filenames)
  - CMake: Expose man page compilation as target "xmlwf-manpage"
  - CMake: Introduce option EXPAT_BUILD_PKGCONFIG to control
    generation of pkg-config file "expat.pc"
  - CMake: Add minimalistic support for building binary packages
    with CMake target "package"; based on CPack
  - CMake: Add option -DEXPAT_OSSFUZZ_BUILD=(ON|OFF) with default
    OFF to build fuzzer code against OSS-Fuzz and related
    environment variable LIB_FUZZING_ENGINE
  - Fix testsuite for -DEXPAT_DTD=OFF and -DEXPAT_NS=OFF
  - Address compiler warnings
  - Address pngcheck warnings with doc/*.png images: Version info
    bumped from 7:11:6 to 7:12:6</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- update to 2.3.0:
  * When calling XML_ParseBuffer without a prior successful call to
    XML_GetBuffer as a user, no longer trigger undefined behavior
    (by adding an integer to a NULL pointer) but rather return
    XML_STATUS_ERROR and set the error code to (new) code
    XML_ERROR_NO_BUFFER. Found by UBSan (UndefinedBehaviorSanitizer)
    of Clang 11 (but not Clang 9).
  * xmlwf: Exit status 2 was used for both:
  - malformed input files (documented) and
  - invalid command-line arguments (undocumented).
    case of invalid command-line arguments now
    has its own exit status 4, resolving the ambiguity.
  * Other changes</changelog>
  <changelog author="dimstar@opensuse.org" date="1618315200">- Do not BuildRequire cmake: expat is part of the distro bootstrap
  cycle and any additional dependency makes the ring larger. In
  this case here, cmake was even only used to own a directory.</changelog>
  <changelog author="pmonreal@suse.com" date="1621857600">- Update to 2.4.0: [CVE-2013-0340 "Billion Laughs"]
  * Security fixes:
  - CVE-2013-0340/CWE-776 -- Protect against billion laughs attacks
    (denial-of-service; flavors targeting CPU time or RAM or both,
    leveraging general entities or parameter entities or both)
    by tracking and limiting the input amplification factor
    (&lt;amplification&gt; := (&lt;direct&gt; + &lt;indirect&gt;) / &lt;direct&gt;).
    By conservative default, amplification up to a factor of 100.0
    is tolerated and rejection only starts after 8 MiB of output bytes
    (=&lt;direct&gt; + &lt;indirect&gt;) have been processed.
    The fix adds the following to the API:
  - A new error code XML_ERROR_AMPLIFICATION_LIMIT_BREACH to
    signals this specific condition.
  - Two new API functions ..
  - XML_SetBillionLaughsAttackProtectionMaximumAmplification and
  - XML_SetBillionLaughsAttackProtectionActivationThreshold
    .. to further tighten billion laughs protection parameters
    when desired.  Please see file "doc/reference.html" for details.
    If you ever need to increase the defaults for non-attack XML
    payload, please file a bug report with libexpat.
  - Two new XML_FEATURE_* constants ..
  - that can be queried using the XML_GetFeatureList function, and
  - that are shown in "xmlwf -v" output.
  - Two new environment variable switches ..
  - EXPAT_ACCOUNTING_DEBUG=(0|1|2|3) and
  - EXPAT_ENTITY_DEBUG=(0|1)
    .. for runtime debugging of accounting and entity processing.
    Specific behavior of these values may change in the future.
  - Two new command line arguments "-a FACTOR" and "-b BYTES"
    for xmlwf to further tighten billion laughs protection
    parameters when desired.
    If you ever need to increase the defaults for non-attack XML
    payload, please file a bug report with libexpat.
  * Bug fixes:
  - For (non-default) compilation with -DEXPAT_MIN_SIZE=ON (CMake)
    or CPPFLAGS=-DXML_MIN_SIZE (GNU Autotools): Fix segfault
    for UTF-16 payloads containing CDATA sections.
  - Autotools: Fix generated CMake files for non-64bit and
    non-Linux platforms (e.g. macOS and MinGW in particular)
    that were introduced with release 2.3.0
  * Other changes:
  - xmlwf: Improve help output and the xmlwf man page
  - xmlwf: Improve maintainability through some refactoring
  - xmlwf: Fix man page DocBook validity
  - CMake: Support absolute paths for both CMAKE_INSTALL_LIBDIR
    and CMAKE_INSTALL_INCLUDEDIR
  - CMake: Add support for standard variable BUILD_SHARED_LIBS
  - Unexpose symbol _INTERNAL_trim_to_complete_utf8_characters
  - Resolve macro HAVE_EXPAT_CONFIG_H
  - Delete unused legacy helper file "conftools/PrintPath"
  - doc/reference.html: Fix XHTML validity
  - doc/reference.html: Replace the 90s look by OK.css
  - Version info bumped from 8:0:7 to 9:0:8 due to addition of
    new symbols and error codes; see https://verbump.de/ for
    what these numbers do</changelog>
  <changelog author="pmonreal@suse.com" date="1621857601">- Update to 2.4.1:
  * Bug fixes:
  - Autotools: Fix installed header expat_config.h for multilib
    systems; regression introduced in 2.4.0 by pull request #486
  * Other changes:
  - Version info bumped from 9:0:8 to 9:1:8; see
    https://verbump.de/ for what these numbers do</changelog>
  <changelog author="pmonreal@suse.com" date="1631016000">- Update to 2.4.1 in SLE-15-SP4 [jsc#SLE-21253]
  * Remove expat-CVE-2018-20843.patch upstream</changelog>
  <changelog author="dmueller@suse.com" date="1640606400">- update to 2.4.2:
  * Link againgst libm for function "isnan"
  * Include expat_config.h as early as possible
  * Autotools: Include files with release archives:
  - buildconf.sh
  - fuzz/*.c
  * Autotools: Sync CMake templates
  * docs: Document that function XML_GetBuffer may return NULL
    when asking for a buffer of 0 (zero) bytes size
  * docs: Fix return value docs for both
    XML_SetBillionLaughsAttackProtection* functions
  * Version info bumped from 9:1:8 to 9:2:8</changelog>
  <changelog author="dmueller@suse.com" date="1642420800">- update to 2.4.3 (bsc#1194251, bsc#1194362, bsc#1194474,
    bsc#1194476, bsc#1194477, bsc#1194478, bsc#1194479, bsc#1194480):
  * CVE-2021-45960 -- Fix issues with left shifts by &gt;=29 places
    resulting in
    a) realloc acting as free
    b) realloc allocating too few bytes
    c) undefined behavior
    depending on architecture and precise value
    for XML documents with &gt;=2^27+1 prefixed attributes
    on a single XML tag a la
    "&lt;r xmlns:a='[..]' a:a123='[..]' [..] /&gt;"
    where XML_ParserCreateNS is used to create the parser
    (which needs argument "-n" when running xmlwf).
    Impact is denial of service, or more.
  * CVE-2021-46143 (ZDI-CAN-16157) -- Fix integer overflow
    on variable m_groupSize in function doProlog leading
    to realloc acting as free.
    Impact is denial of service or more.
  * CVE-2022-22822 to CVE-2022-22827 -- Prevent integer overflows
    near memory allocation at multiple places.  Mitre assigned
    a dedicated CVE for each involved internal C function:
  - CVE-2022-22822 for function addBinding
  - CVE-2022-22823 for function build_model
  - CVE-2022-22824 for function defineAttribute
  - CVE-2022-22825 for function lookup
  - CVE-2022-22826 for function nextScaffoldPart
  - CVE-2022-22827 for function storeAtts
    Impact is denial of service or more.</changelog>
  <changelog author="david.anes@suse.com" date="1643630400">- update to 2.4.4 (bsc#1195217, bsc#1195054):
  * Security fixes:
  - CVE-2022-23852 -- Fix signed integer overflow
    (undefined behavior) in function XML_GetBuffer
    that is also called by function XML_Parse internally)
    for when XML_CONTEXT_BYTES is defined to &gt;0 (which is both
    common and default).
    Impact is denial of service or more.
  - CVE-2022-23990 -- Fix unsigned integer overflow in function
    doProlog triggered by large content in element type
    declarations when there is an element declaration handler
    present (from a prior call to XML_SetElementDeclHandler).
    Impact is denial of service or more.
  * Bug fixes:
  - xmlwf: Fix a memory leak on output file opening error
  * Other changes:
  - Version info bumped from 9:3:8 to 9:4:8;
    see https://verbump.de/ for what these numbers do
  * Drop unused file valid-xhtml10.png</changelog>
  <changelog author="david.anes@suse.com" date="1643716800">- Update to latest version 2.4.4 in SLE-15-SP4 [jsc#SLE-21253]</changelog>
  <changelog author="david.anes@suse.com" date="1645444800">- Security fixes:
  * (CVE-2022-25236, bsc#1196025) Expat before 2.4.5 allows
    attackers to insert namespace-separator characters into
    namespace URIs
  - Added expat-CVE-2022-25236.patch
  * (CVE-2022-25235, bsc#1196026) xmltok_impl.c in Expat before
    2.4.5 does not check whether a UTF-8 character is valid in a
    certain context.
  - Added expat-CVE-2022-25235.patch
  * (CVE-2022-25313, bsc#1196168) Stack exhaustion in
    build_model() via uncontrolled recursion
  - Added expat-CVE-2022-25313.patch
  - The fix upstream introduced a regression that was later
    amended in 2.4.6 version
    + Added expat-CVE-2022-25313-fix-regression.patch
  * (CVE-2022-25314, bsc#1196169) Integer overflow in copyString
  - Added expat-CVE-2022-25314.patch
  * (CVE-2022-25315, bsc#1196171) Integer overflow in storeRawNames
  - Added expat-CVE-2022-25315.patch</changelog>
  <changelog author="david.anes@suse.com" date="1646481600">- Security fixes:
  * (CVE-2022-25236, bsc#1196784) [&gt;=2.4.5] Fix to CVE-2022-25236
    breaks biboumi, ClairMeta, jxmlease, libwbxml,
    openleadr-python, rnv, xmltodict
  - Added expat-CVE-2022-25236-relax-fix.patch</changelog>
  <changelog author="david.anes@suse.com" date="1664193600">- Security fix:
  * (CVE-2022-40674, bsc#1203438) use-after-free in the doContent
    function in xmlparse.c
  - Added patch expat-CVE-2022-40674.patch</changelog>
  <changelog author="david.anes@suse.com" date="1666785600">- Security fix:
  * (CVE-2022-43680, bsc#1204708) use-after free caused by overeager
    destruction of a shared DTD in XML_ExternalEntityParserCreate in
    out-of-memory situations
  - Added patch expat-CVE-2022-43680.patch</changelog>
  <changelog author="david.anes@suse.com" date="1708084800">- Security fix:
  * (CVE-2023-52425, bsc#1219559) denial of service (resource
    consumption) caused by processing large tokens.
  - Added patch expat-CVE-2023-52425-1.patch
  - Added patch expat-CVE-2023-52425-2.patch
  - Added patch expat-CVE-2023-52425-backport-parser-changes.patch
  - Added patch expat-CVE-2023-52425-fix-tests.patch</changelog>
  <changelog author="david.anes@suse.com" date="1710763200">- Security fix (boo#1221289, CVE-2024-28757): XML Entity Expansion
  attack when there is isolated use of external parsers.
  * Added expat-CVE-2024-28757.patch</changelog>
</package>
<package pkgid="ed3e9801533256baeee3ec2cd60619c3cf423f87834a4d7acbd47a3b32d3671d" name="libexpat1" arch="x86_64">
  <version epoch="0" ver="2.4.4" rel="150400.3.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1562068800">- Version update to 2.2.7 (CVE-2018-20843, bsc#1139937)
  * Security fixes:
  - CVE-2018-20843 - Fix extraction of namespace prefixes from
    XML names; XML names with multiple colons could end up in
    the wrong namespace, and take a high amount of RAM and CPU
    resources while processing, opening the door to use for
    denial-of-service attacks
  * Other changes:
  - Autotools/CMake: Utilize -fvisibility=hidden to stop
    exporting non-API symbols
  - Autotools: Add --without-examples and --without-tests
  - Autotools: Modernize configure.ac
  - Autotools: Fix check for -fvisibility=hidden for Clang
  - Autotools: Fix compilation for lack of docbook2x-man
  - CMake: Make libdir of pkgconfig expat.pc support multilib
  - CMake: Build man page in PROJECT_BINARY_DIR not _SOURCE_DIR
  - Remove fallback to bcopy, assume that memmove(3) exists
- Removed expat-2.2.6-fix-make-clean.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567598400">- Security fix (CVE-2019-15903, bsc#1149429)
  * Crafted XML input results in heap-based buffer over-read by fooling
    the parser into changing from DTD parsing to document parsing
  * Added patches:
  - expat-CVE-2019-15903.patch
  - expat-CVE-2019-15903-tests.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568635200">- Version update to 2.2.8
  * Security fixes: (CVE-2019-15903, bsc#1149429)
  - CVE-2019-15903 -- Fix heap overflow triggered by XML_GetCurrentLineNumber
    (or XML_GetCurrentColumnNumber), and deny internal entities closing the doctype;
  * Bug fixes:
  - Fix cases where XML_StopParser did not have any effect
    when called from inside of an end element handler
  - xmlwf: Fix exit code for operation without "-d DIRECTORY";
    previously, only "-d DIRECTORY" would give you a proper exit code:
    Now both cases return exit code 2.
  * Other changes:
  - examples: Improve elements.c
  - Autotools: Add argument --enable-xml-attr-info
  - Autotools: Add arguments --with-getrandom --without-getrandom --with-sys-getrandom --without-sys-getrandom
  - Autotools: Fix linking issues with "./configure LD=clang"
  - Autotools: Fix "make run-xmltest" for out-of-source builds
  - CMake: Pull all options from Expat &lt;=2.2.7 into namespace
  - CMake: Add argument -DEXPAT_ATTR_INFO=(ON|OFF), default OFF
  - CMake: Add argument -DEXPAT_LARGE_SIZE=(ON|OFF), default OFF
  - CMake: Add argument -DEXPAT_MIN_SIZE=(ON|OFF), default OFF
  - CMake: Add arguments -DEXPAT_WITH_GETRANDOM=(ON|OFF|AUTO), default AUTO
  - CMake: Add arguments -DEXPAT_WITH_SYS_GETRANDOM=(ON|OFF|AUTO), default AUTO
  - CMake: Install expat_config.h to include directory
  - CMake: Generate and install configuration files for future find_package(expat [..] CONFIG [..])
  - CMake: Now produces a summary of applied configuration
  - CMake: Require C++ compiler only when tests are enabled
  - CMake: Fix compilation for 16bit character types, i.e. ex -DXML_UNICODE=ON (and ex -DXML_UNICODE_WCHAR_T=ON)
  - CMake: Port "make run-xmltest" from GNU Autotools to CMake
  - CMake: Integrate OSS-Fuzz fuzzers, option -DEXPAT_BUILD_FUZZERS=(ON|OFF), default OFF
- Removed patches fixed in the update:
  * expat-CVE-2019-15903.patch
  * expat-CVE-2019-15903-tests.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1575028800">- Version update to 2.2.9
  * Other changes:
  - examples: Drop executable bits from elements.c
    [#349]  Windows: Change the name of the Windows DLLs from expat*.dll
    to libexpat*.dll once more (regression from 2.2.8, first
    fixed in 1.95.3, issue #61 on SourceForge today,
    was issue #432456 back then); needs a fix due
    case-insensitive file systems on Windows and the fact that
    Perl's XML::Parser::Expat compiles into Expat.dll.
    [#347]  Windows: Only define _CRT_RAND_S if not defined
    Version info bumped from 7:10:6 to 7:11:6</changelog>
  <changelog author="pmonreal@suse.com" date="1601812800">- Update to 2.2.10:
  * Bug fixes:
  - Fix undefined behavior during parsing caused by pointer
    arithmetic with NULL pointers
  - Fix reading uninitialized variable during parsing
  - xmlwf: Add missing check for malloc NULL return
  * Other changes:
  - xmlwf: Document exit codes in xmlwf manpage and exit with code 3
    (rather than code 1) for output errors when used with "-d DIRECTORY"
  - Autotools: Use -Werror while configure tests the compiler for
    supported compile flags to avoid false positives
  - Autotools: Improve handling of user (C|CPP|CXX|LD)FLAGS, e.g.
    ensure that they have the last word over flags added while
    running ./configure
  - CMake: Create libexpatw.{dll,so} and expatw.pc (with emphasis
    on suffix "w") with -DEXPAT_CHAR_TYPE=(ushort|wchar_t)
  - CMake: Detect and deny unsupported build combinations
    involving -DEXPAT_CHAR_TYPE=(ushort|wchar_t)
  - CMake: Install pre-compiled shipped xmlwf.1 manpage in case
    of -DEXPAT_BUILD_DOCS=OFF
  - CMake: Fix use of Expat by means of add_subdirectory
  - CMake: Keep expat target name constant at "expat" (i.e. refrain
    from using the target name to control build artifact filenames)
  - CMake: Expose man page compilation as target "xmlwf-manpage"
  - CMake: Introduce option EXPAT_BUILD_PKGCONFIG to control
    generation of pkg-config file "expat.pc"
  - CMake: Add minimalistic support for building binary packages
    with CMake target "package"; based on CPack
  - CMake: Add option -DEXPAT_OSSFUZZ_BUILD=(ON|OFF) with default
    OFF to build fuzzer code against OSS-Fuzz and related
    environment variable LIB_FUZZING_ENGINE
  - Fix testsuite for -DEXPAT_DTD=OFF and -DEXPAT_NS=OFF
  - Address compiler warnings
  - Address pngcheck warnings with doc/*.png images: Version info
    bumped from 7:11:6 to 7:12:6</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- update to 2.3.0:
  * When calling XML_ParseBuffer without a prior successful call to
    XML_GetBuffer as a user, no longer trigger undefined behavior
    (by adding an integer to a NULL pointer) but rather return
    XML_STATUS_ERROR and set the error code to (new) code
    XML_ERROR_NO_BUFFER. Found by UBSan (UndefinedBehaviorSanitizer)
    of Clang 11 (but not Clang 9).
  * xmlwf: Exit status 2 was used for both:
  - malformed input files (documented) and
  - invalid command-line arguments (undocumented).
    case of invalid command-line arguments now
    has its own exit status 4, resolving the ambiguity.
  * Other changes</changelog>
  <changelog author="dimstar@opensuse.org" date="1618315200">- Do not BuildRequire cmake: expat is part of the distro bootstrap
  cycle and any additional dependency makes the ring larger. In
  this case here, cmake was even only used to own a directory.</changelog>
  <changelog author="pmonreal@suse.com" date="1621857600">- Update to 2.4.0: [CVE-2013-0340 "Billion Laughs"]
  * Security fixes:
  - CVE-2013-0340/CWE-776 -- Protect against billion laughs attacks
    (denial-of-service; flavors targeting CPU time or RAM or both,
    leveraging general entities or parameter entities or both)
    by tracking and limiting the input amplification factor
    (&lt;amplification&gt; := (&lt;direct&gt; + &lt;indirect&gt;) / &lt;direct&gt;).
    By conservative default, amplification up to a factor of 100.0
    is tolerated and rejection only starts after 8 MiB of output bytes
    (=&lt;direct&gt; + &lt;indirect&gt;) have been processed.
    The fix adds the following to the API:
  - A new error code XML_ERROR_AMPLIFICATION_LIMIT_BREACH to
    signals this specific condition.
  - Two new API functions ..
  - XML_SetBillionLaughsAttackProtectionMaximumAmplification and
  - XML_SetBillionLaughsAttackProtectionActivationThreshold
    .. to further tighten billion laughs protection parameters
    when desired.  Please see file "doc/reference.html" for details.
    If you ever need to increase the defaults for non-attack XML
    payload, please file a bug report with libexpat.
  - Two new XML_FEATURE_* constants ..
  - that can be queried using the XML_GetFeatureList function, and
  - that are shown in "xmlwf -v" output.
  - Two new environment variable switches ..
  - EXPAT_ACCOUNTING_DEBUG=(0|1|2|3) and
  - EXPAT_ENTITY_DEBUG=(0|1)
    .. for runtime debugging of accounting and entity processing.
    Specific behavior of these values may change in the future.
  - Two new command line arguments "-a FACTOR" and "-b BYTES"
    for xmlwf to further tighten billion laughs protection
    parameters when desired.
    If you ever need to increase the defaults for non-attack XML
    payload, please file a bug report with libexpat.
  * Bug fixes:
  - For (non-default) compilation with -DEXPAT_MIN_SIZE=ON (CMake)
    or CPPFLAGS=-DXML_MIN_SIZE (GNU Autotools): Fix segfault
    for UTF-16 payloads containing CDATA sections.
  - Autotools: Fix generated CMake files for non-64bit and
    non-Linux platforms (e.g. macOS and MinGW in particular)
    that were introduced with release 2.3.0
  * Other changes:
  - xmlwf: Improve help output and the xmlwf man page
  - xmlwf: Improve maintainability through some refactoring
  - xmlwf: Fix man page DocBook validity
  - CMake: Support absolute paths for both CMAKE_INSTALL_LIBDIR
    and CMAKE_INSTALL_INCLUDEDIR
  - CMake: Add support for standard variable BUILD_SHARED_LIBS
  - Unexpose symbol _INTERNAL_trim_to_complete_utf8_characters
  - Resolve macro HAVE_EXPAT_CONFIG_H
  - Delete unused legacy helper file "conftools/PrintPath"
  - doc/reference.html: Fix XHTML validity
  - doc/reference.html: Replace the 90s look by OK.css
  - Version info bumped from 8:0:7 to 9:0:8 due to addition of
    new symbols and error codes; see https://verbump.de/ for
    what these numbers do</changelog>
  <changelog author="pmonreal@suse.com" date="1621857601">- Update to 2.4.1:
  * Bug fixes:
  - Autotools: Fix installed header expat_config.h for multilib
    systems; regression introduced in 2.4.0 by pull request #486
  * Other changes:
  - Version info bumped from 9:0:8 to 9:1:8; see
    https://verbump.de/ for what these numbers do</changelog>
  <changelog author="pmonreal@suse.com" date="1631016000">- Update to 2.4.1 in SLE-15-SP4 [jsc#SLE-21253]
  * Remove expat-CVE-2018-20843.patch upstream</changelog>
  <changelog author="dmueller@suse.com" date="1640606400">- update to 2.4.2:
  * Link againgst libm for function "isnan"
  * Include expat_config.h as early as possible
  * Autotools: Include files with release archives:
  - buildconf.sh
  - fuzz/*.c
  * Autotools: Sync CMake templates
  * docs: Document that function XML_GetBuffer may return NULL
    when asking for a buffer of 0 (zero) bytes size
  * docs: Fix return value docs for both
    XML_SetBillionLaughsAttackProtection* functions
  * Version info bumped from 9:1:8 to 9:2:8</changelog>
  <changelog author="dmueller@suse.com" date="1642420800">- update to 2.4.3 (bsc#1194251, bsc#1194362, bsc#1194474,
    bsc#1194476, bsc#1194477, bsc#1194478, bsc#1194479, bsc#1194480):
  * CVE-2021-45960 -- Fix issues with left shifts by &gt;=29 places
    resulting in
    a) realloc acting as free
    b) realloc allocating too few bytes
    c) undefined behavior
    depending on architecture and precise value
    for XML documents with &gt;=2^27+1 prefixed attributes
    on a single XML tag a la
    "&lt;r xmlns:a='[..]' a:a123='[..]' [..] /&gt;"
    where XML_ParserCreateNS is used to create the parser
    (which needs argument "-n" when running xmlwf).
    Impact is denial of service, or more.
  * CVE-2021-46143 (ZDI-CAN-16157) -- Fix integer overflow
    on variable m_groupSize in function doProlog leading
    to realloc acting as free.
    Impact is denial of service or more.
  * CVE-2022-22822 to CVE-2022-22827 -- Prevent integer overflows
    near memory allocation at multiple places.  Mitre assigned
    a dedicated CVE for each involved internal C function:
  - CVE-2022-22822 for function addBinding
  - CVE-2022-22823 for function build_model
  - CVE-2022-22824 for function defineAttribute
  - CVE-2022-22825 for function lookup
  - CVE-2022-22826 for function nextScaffoldPart
  - CVE-2022-22827 for function storeAtts
    Impact is denial of service or more.</changelog>
  <changelog author="david.anes@suse.com" date="1643630400">- update to 2.4.4 (bsc#1195217, bsc#1195054):
  * Security fixes:
  - CVE-2022-23852 -- Fix signed integer overflow
    (undefined behavior) in function XML_GetBuffer
    that is also called by function XML_Parse internally)
    for when XML_CONTEXT_BYTES is defined to &gt;0 (which is both
    common and default).
    Impact is denial of service or more.
  - CVE-2022-23990 -- Fix unsigned integer overflow in function
    doProlog triggered by large content in element type
    declarations when there is an element declaration handler
    present (from a prior call to XML_SetElementDeclHandler).
    Impact is denial of service or more.
  * Bug fixes:
  - xmlwf: Fix a memory leak on output file opening error
  * Other changes:
  - Version info bumped from 9:3:8 to 9:4:8;
    see https://verbump.de/ for what these numbers do
  * Drop unused file valid-xhtml10.png</changelog>
  <changelog author="david.anes@suse.com" date="1643716800">- Update to latest version 2.4.4 in SLE-15-SP4 [jsc#SLE-21253]</changelog>
  <changelog author="david.anes@suse.com" date="1645444800">- Security fixes:
  * (CVE-2022-25236, bsc#1196025) Expat before 2.4.5 allows
    attackers to insert namespace-separator characters into
    namespace URIs
  - Added expat-CVE-2022-25236.patch
  * (CVE-2022-25235, bsc#1196026) xmltok_impl.c in Expat before
    2.4.5 does not check whether a UTF-8 character is valid in a
    certain context.
  - Added expat-CVE-2022-25235.patch
  * (CVE-2022-25313, bsc#1196168) Stack exhaustion in
    build_model() via uncontrolled recursion
  - Added expat-CVE-2022-25313.patch
  - The fix upstream introduced a regression that was later
    amended in 2.4.6 version
    + Added expat-CVE-2022-25313-fix-regression.patch
  * (CVE-2022-25314, bsc#1196169) Integer overflow in copyString
  - Added expat-CVE-2022-25314.patch
  * (CVE-2022-25315, bsc#1196171) Integer overflow in storeRawNames
  - Added expat-CVE-2022-25315.patch</changelog>
  <changelog author="david.anes@suse.com" date="1646481600">- Security fixes:
  * (CVE-2022-25236, bsc#1196784) [&gt;=2.4.5] Fix to CVE-2022-25236
    breaks biboumi, ClairMeta, jxmlease, libwbxml,
    openleadr-python, rnv, xmltodict
  - Added expat-CVE-2022-25236-relax-fix.patch</changelog>
  <changelog author="david.anes@suse.com" date="1664193600">- Security fix:
  * (CVE-2022-40674, bsc#1203438) use-after-free in the doContent
    function in xmlparse.c
  - Added patch expat-CVE-2022-40674.patch</changelog>
  <changelog author="david.anes@suse.com" date="1666785600">- Security fix:
  * (CVE-2022-43680, bsc#1204708) use-after free caused by overeager
    destruction of a shared DTD in XML_ExternalEntityParserCreate in
    out-of-memory situations
  - Added patch expat-CVE-2022-43680.patch</changelog>
  <changelog author="david.anes@suse.com" date="1708084800">- Security fix:
  * (CVE-2023-52425, bsc#1219559) denial of service (resource
    consumption) caused by processing large tokens.
  - Added patch expat-CVE-2023-52425-1.patch
  - Added patch expat-CVE-2023-52425-2.patch
  - Added patch expat-CVE-2023-52425-backport-parser-changes.patch
  - Added patch expat-CVE-2023-52425-fix-tests.patch</changelog>
  <changelog author="david.anes@suse.com" date="1710763200">- Security fix (boo#1221289, CVE-2024-28757): XML Entity Expansion
  attack when there is isolated use of external parsers.
  * Added expat-CVE-2024-28757.patch</changelog>
</package>
<package pkgid="ec328709b5e819ff57977500d5dec2c89e0d21ab8e80cb8d758f9baab41ff0c4" name="libexpat1" arch="aarch64">
  <version epoch="0" ver="2.4.4" rel="150400.3.22.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1567598400">- Security fix (CVE-2019-15903, bsc#1149429)
  * Crafted XML input results in heap-based buffer over-read by fooling
    the parser into changing from DTD parsing to document parsing
  * Added patches:
  - expat-CVE-2019-15903.patch
  - expat-CVE-2019-15903-tests.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568635200">- Version update to 2.2.8
  * Security fixes: (CVE-2019-15903, bsc#1149429)
  - CVE-2019-15903 -- Fix heap overflow triggered by XML_GetCurrentLineNumber
    (or XML_GetCurrentColumnNumber), and deny internal entities closing the doctype;
  * Bug fixes:
  - Fix cases where XML_StopParser did not have any effect
    when called from inside of an end element handler
  - xmlwf: Fix exit code for operation without "-d DIRECTORY";
    previously, only "-d DIRECTORY" would give you a proper exit code:
    Now both cases return exit code 2.
  * Other changes:
  - examples: Improve elements.c
  - Autotools: Add argument --enable-xml-attr-info
  - Autotools: Add arguments --with-getrandom --without-getrandom --with-sys-getrandom --without-sys-getrandom
  - Autotools: Fix linking issues with "./configure LD=clang"
  - Autotools: Fix "make run-xmltest" for out-of-source builds
  - CMake: Pull all options from Expat &lt;=2.2.7 into namespace
  - CMake: Add argument -DEXPAT_ATTR_INFO=(ON|OFF), default OFF
  - CMake: Add argument -DEXPAT_LARGE_SIZE=(ON|OFF), default OFF
  - CMake: Add argument -DEXPAT_MIN_SIZE=(ON|OFF), default OFF
  - CMake: Add arguments -DEXPAT_WITH_GETRANDOM=(ON|OFF|AUTO), default AUTO
  - CMake: Add arguments -DEXPAT_WITH_SYS_GETRANDOM=(ON|OFF|AUTO), default AUTO
  - CMake: Install expat_config.h to include directory
  - CMake: Generate and install configuration files for future find_package(expat [..] CONFIG [..])
  - CMake: Now produces a summary of applied configuration
  - CMake: Require C++ compiler only when tests are enabled
  - CMake: Fix compilation for 16bit character types, i.e. ex -DXML_UNICODE=ON (and ex -DXML_UNICODE_WCHAR_T=ON)
  - CMake: Port "make run-xmltest" from GNU Autotools to CMake
  - CMake: Integrate OSS-Fuzz fuzzers, option -DEXPAT_BUILD_FUZZERS=(ON|OFF), default OFF
- Removed patches fixed in the update:
  * expat-CVE-2019-15903.patch
  * expat-CVE-2019-15903-tests.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1575028800">- Version update to 2.2.9
  * Other changes:
  - examples: Drop executable bits from elements.c
    [#349]  Windows: Change the name of the Windows DLLs from expat*.dll
    to libexpat*.dll once more (regression from 2.2.8, first
    fixed in 1.95.3, issue #61 on SourceForge today,
    was issue #432456 back then); needs a fix due
    case-insensitive file systems on Windows and the fact that
    Perl's XML::Parser::Expat compiles into Expat.dll.
    [#347]  Windows: Only define _CRT_RAND_S if not defined
    Version info bumped from 7:10:6 to 7:11:6</changelog>
  <changelog author="pmonreal@suse.com" date="1601812800">- Update to 2.2.10:
  * Bug fixes:
  - Fix undefined behavior during parsing caused by pointer
    arithmetic with NULL pointers
  - Fix reading uninitialized variable during parsing
  - xmlwf: Add missing check for malloc NULL return
  * Other changes:
  - xmlwf: Document exit codes in xmlwf manpage and exit with code 3
    (rather than code 1) for output errors when used with "-d DIRECTORY"
  - Autotools: Use -Werror while configure tests the compiler for
    supported compile flags to avoid false positives
  - Autotools: Improve handling of user (C|CPP|CXX|LD)FLAGS, e.g.
    ensure that they have the last word over flags added while
    running ./configure
  - CMake: Create libexpatw.{dll,so} and expatw.pc (with emphasis
    on suffix "w") with -DEXPAT_CHAR_TYPE=(ushort|wchar_t)
  - CMake: Detect and deny unsupported build combinations
    involving -DEXPAT_CHAR_TYPE=(ushort|wchar_t)
  - CMake: Install pre-compiled shipped xmlwf.1 manpage in case
    of -DEXPAT_BUILD_DOCS=OFF
  - CMake: Fix use of Expat by means of add_subdirectory
  - CMake: Keep expat target name constant at "expat" (i.e. refrain
    from using the target name to control build artifact filenames)
  - CMake: Expose man page compilation as target "xmlwf-manpage"
  - CMake: Introduce option EXPAT_BUILD_PKGCONFIG to control
    generation of pkg-config file "expat.pc"
  - CMake: Add minimalistic support for building binary packages
    with CMake target "package"; based on CPack
  - CMake: Add option -DEXPAT_OSSFUZZ_BUILD=(ON|OFF) with default
    OFF to build fuzzer code against OSS-Fuzz and related
    environment variable LIB_FUZZING_ENGINE
  - Fix testsuite for -DEXPAT_DTD=OFF and -DEXPAT_NS=OFF
  - Address compiler warnings
  - Address pngcheck warnings with doc/*.png images: Version info
    bumped from 7:11:6 to 7:12:6</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- update to 2.3.0:
  * When calling XML_ParseBuffer without a prior successful call to
    XML_GetBuffer as a user, no longer trigger undefined behavior
    (by adding an integer to a NULL pointer) but rather return
    XML_STATUS_ERROR and set the error code to (new) code
    XML_ERROR_NO_BUFFER. Found by UBSan (UndefinedBehaviorSanitizer)
    of Clang 11 (but not Clang 9).
  * xmlwf: Exit status 2 was used for both:
  - malformed input files (documented) and
  - invalid command-line arguments (undocumented).
    case of invalid command-line arguments now
    has its own exit status 4, resolving the ambiguity.
  * Other changes</changelog>
  <changelog author="dimstar@opensuse.org" date="1618315200">- Do not BuildRequire cmake: expat is part of the distro bootstrap
  cycle and any additional dependency makes the ring larger. In
  this case here, cmake was even only used to own a directory.</changelog>
  <changelog author="pmonreal@suse.com" date="1621857600">- Update to 2.4.0: [CVE-2013-0340 "Billion Laughs"]
  * Security fixes:
  - CVE-2013-0340/CWE-776 -- Protect against billion laughs attacks
    (denial-of-service; flavors targeting CPU time or RAM or both,
    leveraging general entities or parameter entities or both)
    by tracking and limiting the input amplification factor
    (&lt;amplification&gt; := (&lt;direct&gt; + &lt;indirect&gt;) / &lt;direct&gt;).
    By conservative default, amplification up to a factor of 100.0
    is tolerated and rejection only starts after 8 MiB of output bytes
    (=&lt;direct&gt; + &lt;indirect&gt;) have been processed.
    The fix adds the following to the API:
  - A new error code XML_ERROR_AMPLIFICATION_LIMIT_BREACH to
    signals this specific condition.
  - Two new API functions ..
  - XML_SetBillionLaughsAttackProtectionMaximumAmplification and
  - XML_SetBillionLaughsAttackProtectionActivationThreshold
    .. to further tighten billion laughs protection parameters
    when desired.  Please see file "doc/reference.html" for details.
    If you ever need to increase the defaults for non-attack XML
    payload, please file a bug report with libexpat.
  - Two new XML_FEATURE_* constants ..
  - that can be queried using the XML_GetFeatureList function, and
  - that are shown in "xmlwf -v" output.
  - Two new environment variable switches ..
  - EXPAT_ACCOUNTING_DEBUG=(0|1|2|3) and
  - EXPAT_ENTITY_DEBUG=(0|1)
    .. for runtime debugging of accounting and entity processing.
    Specific behavior of these values may change in the future.
  - Two new command line arguments "-a FACTOR" and "-b BYTES"
    for xmlwf to further tighten billion laughs protection
    parameters when desired.
    If you ever need to increase the defaults for non-attack XML
    payload, please file a bug report with libexpat.
  * Bug fixes:
  - For (non-default) compilation with -DEXPAT_MIN_SIZE=ON (CMake)
    or CPPFLAGS=-DXML_MIN_SIZE (GNU Autotools): Fix segfault
    for UTF-16 payloads containing CDATA sections.
  - Autotools: Fix generated CMake files for non-64bit and
    non-Linux platforms (e.g. macOS and MinGW in particular)
    that were introduced with release 2.3.0
  * Other changes:
  - xmlwf: Improve help output and the xmlwf man page
  - xmlwf: Improve maintainability through some refactoring
  - xmlwf: Fix man page DocBook validity
  - CMake: Support absolute paths for both CMAKE_INSTALL_LIBDIR
    and CMAKE_INSTALL_INCLUDEDIR
  - CMake: Add support for standard variable BUILD_SHARED_LIBS
  - Unexpose symbol _INTERNAL_trim_to_complete_utf8_characters
  - Resolve macro HAVE_EXPAT_CONFIG_H
  - Delete unused legacy helper file "conftools/PrintPath"
  - doc/reference.html: Fix XHTML validity
  - doc/reference.html: Replace the 90s look by OK.css
  - Version info bumped from 8:0:7 to 9:0:8 due to addition of
    new symbols and error codes; see https://verbump.de/ for
    what these numbers do</changelog>
  <changelog author="pmonreal@suse.com" date="1621857601">- Update to 2.4.1:
  * Bug fixes:
  - Autotools: Fix installed header expat_config.h for multilib
    systems; regression introduced in 2.4.0 by pull request #486
  * Other changes:
  - Version info bumped from 9:0:8 to 9:1:8; see
    https://verbump.de/ for what these numbers do</changelog>
  <changelog author="pmonreal@suse.com" date="1631016000">- Update to 2.4.1 in SLE-15-SP4 [jsc#SLE-21253]
  * Remove expat-CVE-2018-20843.patch upstream</changelog>
  <changelog author="dmueller@suse.com" date="1640606400">- update to 2.4.2:
  * Link againgst libm for function "isnan"
  * Include expat_config.h as early as possible
  * Autotools: Include files with release archives:
  - buildconf.sh
  - fuzz/*.c
  * Autotools: Sync CMake templates
  * docs: Document that function XML_GetBuffer may return NULL
    when asking for a buffer of 0 (zero) bytes size
  * docs: Fix return value docs for both
    XML_SetBillionLaughsAttackProtection* functions
  * Version info bumped from 9:1:8 to 9:2:8</changelog>
  <changelog author="dmueller@suse.com" date="1642420800">- update to 2.4.3 (bsc#1194251, bsc#1194362, bsc#1194474,
    bsc#1194476, bsc#1194477, bsc#1194478, bsc#1194479, bsc#1194480):
  * CVE-2021-45960 -- Fix issues with left shifts by &gt;=29 places
    resulting in
    a) realloc acting as free
    b) realloc allocating too few bytes
    c) undefined behavior
    depending on architecture and precise value
    for XML documents with &gt;=2^27+1 prefixed attributes
    on a single XML tag a la
    "&lt;r xmlns:a='[..]' a:a123='[..]' [..] /&gt;"
    where XML_ParserCreateNS is used to create the parser
    (which needs argument "-n" when running xmlwf).
    Impact is denial of service, or more.
  * CVE-2021-46143 (ZDI-CAN-16157) -- Fix integer overflow
    on variable m_groupSize in function doProlog leading
    to realloc acting as free.
    Impact is denial of service or more.
  * CVE-2022-22822 to CVE-2022-22827 -- Prevent integer overflows
    near memory allocation at multiple places.  Mitre assigned
    a dedicated CVE for each involved internal C function:
  - CVE-2022-22822 for function addBinding
  - CVE-2022-22823 for function build_model
  - CVE-2022-22824 for function defineAttribute
  - CVE-2022-22825 for function lookup
  - CVE-2022-22826 for function nextScaffoldPart
  - CVE-2022-22827 for function storeAtts
    Impact is denial of service or more.</changelog>
  <changelog author="david.anes@suse.com" date="1643630400">- update to 2.4.4 (bsc#1195217, bsc#1195054):
  * Security fixes:
  - CVE-2022-23852 -- Fix signed integer overflow
    (undefined behavior) in function XML_GetBuffer
    that is also called by function XML_Parse internally)
    for when XML_CONTEXT_BYTES is defined to &gt;0 (which is both
    common and default).
    Impact is denial of service or more.
  - CVE-2022-23990 -- Fix unsigned integer overflow in function
    doProlog triggered by large content in element type
    declarations when there is an element declaration handler
    present (from a prior call to XML_SetElementDeclHandler).
    Impact is denial of service or more.
  * Bug fixes:
  - xmlwf: Fix a memory leak on output file opening error
  * Other changes:
  - Version info bumped from 9:3:8 to 9:4:8;
    see https://verbump.de/ for what these numbers do
  * Drop unused file valid-xhtml10.png</changelog>
  <changelog author="david.anes@suse.com" date="1643716800">- Update to latest version 2.4.4 in SLE-15-SP4 [jsc#SLE-21253]</changelog>
  <changelog author="david.anes@suse.com" date="1645444800">- Security fixes:
  * (CVE-2022-25236, bsc#1196025) Expat before 2.4.5 allows
    attackers to insert namespace-separator characters into
    namespace URIs
  - Added expat-CVE-2022-25236.patch
  * (CVE-2022-25235, bsc#1196026) xmltok_impl.c in Expat before
    2.4.5 does not check whether a UTF-8 character is valid in a
    certain context.
  - Added expat-CVE-2022-25235.patch
  * (CVE-2022-25313, bsc#1196168) Stack exhaustion in
    build_model() via uncontrolled recursion
  - Added expat-CVE-2022-25313.patch
  - The fix upstream introduced a regression that was later
    amended in 2.4.6 version
    + Added expat-CVE-2022-25313-fix-regression.patch
  * (CVE-2022-25314, bsc#1196169) Integer overflow in copyString
  - Added expat-CVE-2022-25314.patch
  * (CVE-2022-25315, bsc#1196171) Integer overflow in storeRawNames
  - Added expat-CVE-2022-25315.patch</changelog>
  <changelog author="david.anes@suse.com" date="1646481600">- Security fixes:
  * (CVE-2022-25236, bsc#1196784) [&gt;=2.4.5] Fix to CVE-2022-25236
    breaks biboumi, ClairMeta, jxmlease, libwbxml,
    openleadr-python, rnv, xmltodict
  - Added expat-CVE-2022-25236-relax-fix.patch</changelog>
  <changelog author="david.anes@suse.com" date="1664193600">- Security fix:
  * (CVE-2022-40674, bsc#1203438) use-after-free in the doContent
    function in xmlparse.c
  - Added patch expat-CVE-2022-40674.patch</changelog>
  <changelog author="david.anes@suse.com" date="1666785600">- Security fix:
  * (CVE-2022-43680, bsc#1204708) use-after free caused by overeager
    destruction of a shared DTD in XML_ExternalEntityParserCreate in
    out-of-memory situations
  - Added patch expat-CVE-2022-43680.patch</changelog>
  <changelog author="david.anes@suse.com" date="1708084800">- Security fix:
  * (CVE-2023-52425, bsc#1219559) denial of service (resource
    consumption) caused by processing large tokens.
  - Added patch expat-CVE-2023-52425-1.patch
  - Added patch expat-CVE-2023-52425-2.patch
  - Added patch expat-CVE-2023-52425-backport-parser-changes.patch
  - Added patch expat-CVE-2023-52425-fix-tests.patch</changelog>
  <changelog author="david.anes@suse.com" date="1710763200">- Security fix (boo#1221289, CVE-2024-28757): XML Entity Expansion
  attack when there is isolated use of external parsers.
  * Added expat-CVE-2024-28757.patch</changelog>
  <changelog author="david.anes@suse.com" date="1725364800">- Security fix (bsc#1229932, CVE-2024-45492): detect integer
  overflow in function nextScaffoldPart
  * Added expat-CVE-2024-45492.patch
- Security fix (bsc#1229931, CVE-2024-45491): detect integer
  overflow in dtdCopy
  * Added expat-CVE-2024-45491.patch
- Security fix (bsc#1229930, CVE-2024-45490): reject negative
  len for XML_ParseBuffer
  * Added expat-CVE-2024-45490.patch</changelog>
</package>
<package pkgid="3cb214944ffc39b6a0a473237991559ac2eded1418091c9a6227b32f949c54e2" name="libexpat1" arch="s390x">
  <version epoch="0" ver="2.4.4" rel="150400.3.22.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1567598400">- Security fix (CVE-2019-15903, bsc#1149429)
  * Crafted XML input results in heap-based buffer over-read by fooling
    the parser into changing from DTD parsing to document parsing
  * Added patches:
  - expat-CVE-2019-15903.patch
  - expat-CVE-2019-15903-tests.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568635200">- Version update to 2.2.8
  * Security fixes: (CVE-2019-15903, bsc#1149429)
  - CVE-2019-15903 -- Fix heap overflow triggered by XML_GetCurrentLineNumber
    (or XML_GetCurrentColumnNumber), and deny internal entities closing the doctype;
  * Bug fixes:
  - Fix cases where XML_StopParser did not have any effect
    when called from inside of an end element handler
  - xmlwf: Fix exit code for operation without "-d DIRECTORY";
    previously, only "-d DIRECTORY" would give you a proper exit code:
    Now both cases return exit code 2.
  * Other changes:
  - examples: Improve elements.c
  - Autotools: Add argument --enable-xml-attr-info
  - Autotools: Add arguments --with-getrandom --without-getrandom --with-sys-getrandom --without-sys-getrandom
  - Autotools: Fix linking issues with "./configure LD=clang"
  - Autotools: Fix "make run-xmltest" for out-of-source builds
  - CMake: Pull all options from Expat &lt;=2.2.7 into namespace
  - CMake: Add argument -DEXPAT_ATTR_INFO=(ON|OFF), default OFF
  - CMake: Add argument -DEXPAT_LARGE_SIZE=(ON|OFF), default OFF
  - CMake: Add argument -DEXPAT_MIN_SIZE=(ON|OFF), default OFF
  - CMake: Add arguments -DEXPAT_WITH_GETRANDOM=(ON|OFF|AUTO), default AUTO
  - CMake: Add arguments -DEXPAT_WITH_SYS_GETRANDOM=(ON|OFF|AUTO), default AUTO
  - CMake: Install expat_config.h to include directory
  - CMake: Generate and install configuration files for future find_package(expat [..] CONFIG [..])
  - CMake: Now produces a summary of applied configuration
  - CMake: Require C++ compiler only when tests are enabled
  - CMake: Fix compilation for 16bit character types, i.e. ex -DXML_UNICODE=ON (and ex -DXML_UNICODE_WCHAR_T=ON)
  - CMake: Port "make run-xmltest" from GNU Autotools to CMake
  - CMake: Integrate OSS-Fuzz fuzzers, option -DEXPAT_BUILD_FUZZERS=(ON|OFF), default OFF
- Removed patches fixed in the update:
  * expat-CVE-2019-15903.patch
  * expat-CVE-2019-15903-tests.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1575028800">- Version update to 2.2.9
  * Other changes:
  - examples: Drop executable bits from elements.c
    [#349]  Windows: Change the name of the Windows DLLs from expat*.dll
    to libexpat*.dll once more (regression from 2.2.8, first
    fixed in 1.95.3, issue #61 on SourceForge today,
    was issue #432456 back then); needs a fix due
    case-insensitive file systems on Windows and the fact that
    Perl's XML::Parser::Expat compiles into Expat.dll.
    [#347]  Windows: Only define _CRT_RAND_S if not defined
    Version info bumped from 7:10:6 to 7:11:6</changelog>
  <changelog author="pmonreal@suse.com" date="1601812800">- Update to 2.2.10:
  * Bug fixes:
  - Fix undefined behavior during parsing caused by pointer
    arithmetic with NULL pointers
  - Fix reading uninitialized variable during parsing
  - xmlwf: Add missing check for malloc NULL return
  * Other changes:
  - xmlwf: Document exit codes in xmlwf manpage and exit with code 3
    (rather than code 1) for output errors when used with "-d DIRECTORY"
  - Autotools: Use -Werror while configure tests the compiler for
    supported compile flags to avoid false positives
  - Autotools: Improve handling of user (C|CPP|CXX|LD)FLAGS, e.g.
    ensure that they have the last word over flags added while
    running ./configure
  - CMake: Create libexpatw.{dll,so} and expatw.pc (with emphasis
    on suffix "w") with -DEXPAT_CHAR_TYPE=(ushort|wchar_t)
  - CMake: Detect and deny unsupported build combinations
    involving -DEXPAT_CHAR_TYPE=(ushort|wchar_t)
  - CMake: Install pre-compiled shipped xmlwf.1 manpage in case
    of -DEXPAT_BUILD_DOCS=OFF
  - CMake: Fix use of Expat by means of add_subdirectory
  - CMake: Keep expat target name constant at "expat" (i.e. refrain
    from using the target name to control build artifact filenames)
  - CMake: Expose man page compilation as target "xmlwf-manpage"
  - CMake: Introduce option EXPAT_BUILD_PKGCONFIG to control
    generation of pkg-config file "expat.pc"
  - CMake: Add minimalistic support for building binary packages
    with CMake target "package"; based on CPack
  - CMake: Add option -DEXPAT_OSSFUZZ_BUILD=(ON|OFF) with default
    OFF to build fuzzer code against OSS-Fuzz and related
    environment variable LIB_FUZZING_ENGINE
  - Fix testsuite for -DEXPAT_DTD=OFF and -DEXPAT_NS=OFF
  - Address compiler warnings
  - Address pngcheck warnings with doc/*.png images: Version info
    bumped from 7:11:6 to 7:12:6</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- update to 2.3.0:
  * When calling XML_ParseBuffer without a prior successful call to
    XML_GetBuffer as a user, no longer trigger undefined behavior
    (by adding an integer to a NULL pointer) but rather return
    XML_STATUS_ERROR and set the error code to (new) code
    XML_ERROR_NO_BUFFER. Found by UBSan (UndefinedBehaviorSanitizer)
    of Clang 11 (but not Clang 9).
  * xmlwf: Exit status 2 was used for both:
  - malformed input files (documented) and
  - invalid command-line arguments (undocumented).
    case of invalid command-line arguments now
    has its own exit status 4, resolving the ambiguity.
  * Other changes</changelog>
  <changelog author="dimstar@opensuse.org" date="1618315200">- Do not BuildRequire cmake: expat is part of the distro bootstrap
  cycle and any additional dependency makes the ring larger. In
  this case here, cmake was even only used to own a directory.</changelog>
  <changelog author="pmonreal@suse.com" date="1621857600">- Update to 2.4.0: [CVE-2013-0340 "Billion Laughs"]
  * Security fixes:
  - CVE-2013-0340/CWE-776 -- Protect against billion laughs attacks
    (denial-of-service; flavors targeting CPU time or RAM or both,
    leveraging general entities or parameter entities or both)
    by tracking and limiting the input amplification factor
    (&lt;amplification&gt; := (&lt;direct&gt; + &lt;indirect&gt;) / &lt;direct&gt;).
    By conservative default, amplification up to a factor of 100.0
    is tolerated and rejection only starts after 8 MiB of output bytes
    (=&lt;direct&gt; + &lt;indirect&gt;) have been processed.
    The fix adds the following to the API:
  - A new error code XML_ERROR_AMPLIFICATION_LIMIT_BREACH to
    signals this specific condition.
  - Two new API functions ..
  - XML_SetBillionLaughsAttackProtectionMaximumAmplification and
  - XML_SetBillionLaughsAttackProtectionActivationThreshold
    .. to further tighten billion laughs protection parameters
    when desired.  Please see file "doc/reference.html" for details.
    If you ever need to increase the defaults for non-attack XML
    payload, please file a bug report with libexpat.
  - Two new XML_FEATURE_* constants ..
  - that can be queried using the XML_GetFeatureList function, and
  - that are shown in "xmlwf -v" output.
  - Two new environment variable switches ..
  - EXPAT_ACCOUNTING_DEBUG=(0|1|2|3) and
  - EXPAT_ENTITY_DEBUG=(0|1)
    .. for runtime debugging of accounting and entity processing.
    Specific behavior of these values may change in the future.
  - Two new command line arguments "-a FACTOR" and "-b BYTES"
    for xmlwf to further tighten billion laughs protection
    parameters when desired.
    If you ever need to increase the defaults for non-attack XML
    payload, please file a bug report with libexpat.
  * Bug fixes:
  - For (non-default) compilation with -DEXPAT_MIN_SIZE=ON (CMake)
    or CPPFLAGS=-DXML_MIN_SIZE (GNU Autotools): Fix segfault
    for UTF-16 payloads containing CDATA sections.
  - Autotools: Fix generated CMake files for non-64bit and
    non-Linux platforms (e.g. macOS and MinGW in particular)
    that were introduced with release 2.3.0
  * Other changes:
  - xmlwf: Improve help output and the xmlwf man page
  - xmlwf: Improve maintainability through some refactoring
  - xmlwf: Fix man page DocBook validity
  - CMake: Support absolute paths for both CMAKE_INSTALL_LIBDIR
    and CMAKE_INSTALL_INCLUDEDIR
  - CMake: Add support for standard variable BUILD_SHARED_LIBS
  - Unexpose symbol _INTERNAL_trim_to_complete_utf8_characters
  - Resolve macro HAVE_EXPAT_CONFIG_H
  - Delete unused legacy helper file "conftools/PrintPath"
  - doc/reference.html: Fix XHTML validity
  - doc/reference.html: Replace the 90s look by OK.css
  - Version info bumped from 8:0:7 to 9:0:8 due to addition of
    new symbols and error codes; see https://verbump.de/ for
    what these numbers do</changelog>
  <changelog author="pmonreal@suse.com" date="1621857601">- Update to 2.4.1:
  * Bug fixes:
  - Autotools: Fix installed header expat_config.h for multilib
    systems; regression introduced in 2.4.0 by pull request #486
  * Other changes:
  - Version info bumped from 9:0:8 to 9:1:8; see
    https://verbump.de/ for what these numbers do</changelog>
  <changelog author="pmonreal@suse.com" date="1631016000">- Update to 2.4.1 in SLE-15-SP4 [jsc#SLE-21253]
  * Remove expat-CVE-2018-20843.patch upstream</changelog>
  <changelog author="dmueller@suse.com" date="1640606400">- update to 2.4.2:
  * Link againgst libm for function "isnan"
  * Include expat_config.h as early as possible
  * Autotools: Include files with release archives:
  - buildconf.sh
  - fuzz/*.c
  * Autotools: Sync CMake templates
  * docs: Document that function XML_GetBuffer may return NULL
    when asking for a buffer of 0 (zero) bytes size
  * docs: Fix return value docs for both
    XML_SetBillionLaughsAttackProtection* functions
  * Version info bumped from 9:1:8 to 9:2:8</changelog>
  <changelog author="dmueller@suse.com" date="1642420800">- update to 2.4.3 (bsc#1194251, bsc#1194362, bsc#1194474,
    bsc#1194476, bsc#1194477, bsc#1194478, bsc#1194479, bsc#1194480):
  * CVE-2021-45960 -- Fix issues with left shifts by &gt;=29 places
    resulting in
    a) realloc acting as free
    b) realloc allocating too few bytes
    c) undefined behavior
    depending on architecture and precise value
    for XML documents with &gt;=2^27+1 prefixed attributes
    on a single XML tag a la
    "&lt;r xmlns:a='[..]' a:a123='[..]' [..] /&gt;"
    where XML_ParserCreateNS is used to create the parser
    (which needs argument "-n" when running xmlwf).
    Impact is denial of service, or more.
  * CVE-2021-46143 (ZDI-CAN-16157) -- Fix integer overflow
    on variable m_groupSize in function doProlog leading
    to realloc acting as free.
    Impact is denial of service or more.
  * CVE-2022-22822 to CVE-2022-22827 -- Prevent integer overflows
    near memory allocation at multiple places.  Mitre assigned
    a dedicated CVE for each involved internal C function:
  - CVE-2022-22822 for function addBinding
  - CVE-2022-22823 for function build_model
  - CVE-2022-22824 for function defineAttribute
  - CVE-2022-22825 for function lookup
  - CVE-2022-22826 for function nextScaffoldPart
  - CVE-2022-22827 for function storeAtts
    Impact is denial of service or more.</changelog>
  <changelog author="david.anes@suse.com" date="1643630400">- update to 2.4.4 (bsc#1195217, bsc#1195054):
  * Security fixes:
  - CVE-2022-23852 -- Fix signed integer overflow
    (undefined behavior) in function XML_GetBuffer
    that is also called by function XML_Parse internally)
    for when XML_CONTEXT_BYTES is defined to &gt;0 (which is both
    common and default).
    Impact is denial of service or more.
  - CVE-2022-23990 -- Fix unsigned integer overflow in function
    doProlog triggered by large content in element type
    declarations when there is an element declaration handler
    present (from a prior call to XML_SetElementDeclHandler).
    Impact is denial of service or more.
  * Bug fixes:
  - xmlwf: Fix a memory leak on output file opening error
  * Other changes:
  - Version info bumped from 9:3:8 to 9:4:8;
    see https://verbump.de/ for what these numbers do
  * Drop unused file valid-xhtml10.png</changelog>
  <changelog author="david.anes@suse.com" date="1643716800">- Update to latest version 2.4.4 in SLE-15-SP4 [jsc#SLE-21253]</changelog>
  <changelog author="david.anes@suse.com" date="1645444800">- Security fixes:
  * (CVE-2022-25236, bsc#1196025) Expat before 2.4.5 allows
    attackers to insert namespace-separator characters into
    namespace URIs
  - Added expat-CVE-2022-25236.patch
  * (CVE-2022-25235, bsc#1196026) xmltok_impl.c in Expat before
    2.4.5 does not check whether a UTF-8 character is valid in a
    certain context.
  - Added expat-CVE-2022-25235.patch
  * (CVE-2022-25313, bsc#1196168) Stack exhaustion in
    build_model() via uncontrolled recursion
  - Added expat-CVE-2022-25313.patch
  - The fix upstream introduced a regression that was later
    amended in 2.4.6 version
    + Added expat-CVE-2022-25313-fix-regression.patch
  * (CVE-2022-25314, bsc#1196169) Integer overflow in copyString
  - Added expat-CVE-2022-25314.patch
  * (CVE-2022-25315, bsc#1196171) Integer overflow in storeRawNames
  - Added expat-CVE-2022-25315.patch</changelog>
  <changelog author="david.anes@suse.com" date="1646481600">- Security fixes:
  * (CVE-2022-25236, bsc#1196784) [&gt;=2.4.5] Fix to CVE-2022-25236
    breaks biboumi, ClairMeta, jxmlease, libwbxml,
    openleadr-python, rnv, xmltodict
  - Added expat-CVE-2022-25236-relax-fix.patch</changelog>
  <changelog author="david.anes@suse.com" date="1664193600">- Security fix:
  * (CVE-2022-40674, bsc#1203438) use-after-free in the doContent
    function in xmlparse.c
  - Added patch expat-CVE-2022-40674.patch</changelog>
  <changelog author="david.anes@suse.com" date="1666785600">- Security fix:
  * (CVE-2022-43680, bsc#1204708) use-after free caused by overeager
    destruction of a shared DTD in XML_ExternalEntityParserCreate in
    out-of-memory situations
  - Added patch expat-CVE-2022-43680.patch</changelog>
  <changelog author="david.anes@suse.com" date="1708084800">- Security fix:
  * (CVE-2023-52425, bsc#1219559) denial of service (resource
    consumption) caused by processing large tokens.
  - Added patch expat-CVE-2023-52425-1.patch
  - Added patch expat-CVE-2023-52425-2.patch
  - Added patch expat-CVE-2023-52425-backport-parser-changes.patch
  - Added patch expat-CVE-2023-52425-fix-tests.patch</changelog>
  <changelog author="david.anes@suse.com" date="1710763200">- Security fix (boo#1221289, CVE-2024-28757): XML Entity Expansion
  attack when there is isolated use of external parsers.
  * Added expat-CVE-2024-28757.patch</changelog>
  <changelog author="david.anes@suse.com" date="1725364800">- Security fix (bsc#1229932, CVE-2024-45492): detect integer
  overflow in function nextScaffoldPart
  * Added expat-CVE-2024-45492.patch
- Security fix (bsc#1229931, CVE-2024-45491): detect integer
  overflow in dtdCopy
  * Added expat-CVE-2024-45491.patch
- Security fix (bsc#1229930, CVE-2024-45490): reject negative
  len for XML_ParseBuffer
  * Added expat-CVE-2024-45490.patch</changelog>
</package>
<package pkgid="372db388086c3f4dc9057b876272f8e6f5ecfb4ecaf80719fe2dcc1b738815e9" name="libexpat1" arch="x86_64">
  <version epoch="0" ver="2.4.4" rel="150400.3.22.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1567598400">- Security fix (CVE-2019-15903, bsc#1149429)
  * Crafted XML input results in heap-based buffer over-read by fooling
    the parser into changing from DTD parsing to document parsing
  * Added patches:
  - expat-CVE-2019-15903.patch
  - expat-CVE-2019-15903-tests.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568635200">- Version update to 2.2.8
  * Security fixes: (CVE-2019-15903, bsc#1149429)
  - CVE-2019-15903 -- Fix heap overflow triggered by XML_GetCurrentLineNumber
    (or XML_GetCurrentColumnNumber), and deny internal entities closing the doctype;
  * Bug fixes:
  - Fix cases where XML_StopParser did not have any effect
    when called from inside of an end element handler
  - xmlwf: Fix exit code for operation without "-d DIRECTORY";
    previously, only "-d DIRECTORY" would give you a proper exit code:
    Now both cases return exit code 2.
  * Other changes:
  - examples: Improve elements.c
  - Autotools: Add argument --enable-xml-attr-info
  - Autotools: Add arguments --with-getrandom --without-getrandom --with-sys-getrandom --without-sys-getrandom
  - Autotools: Fix linking issues with "./configure LD=clang"
  - Autotools: Fix "make run-xmltest" for out-of-source builds
  - CMake: Pull all options from Expat &lt;=2.2.7 into namespace
  - CMake: Add argument -DEXPAT_ATTR_INFO=(ON|OFF), default OFF
  - CMake: Add argument -DEXPAT_LARGE_SIZE=(ON|OFF), default OFF
  - CMake: Add argument -DEXPAT_MIN_SIZE=(ON|OFF), default OFF
  - CMake: Add arguments -DEXPAT_WITH_GETRANDOM=(ON|OFF|AUTO), default AUTO
  - CMake: Add arguments -DEXPAT_WITH_SYS_GETRANDOM=(ON|OFF|AUTO), default AUTO
  - CMake: Install expat_config.h to include directory
  - CMake: Generate and install configuration files for future find_package(expat [..] CONFIG [..])
  - CMake: Now produces a summary of applied configuration
  - CMake: Require C++ compiler only when tests are enabled
  - CMake: Fix compilation for 16bit character types, i.e. ex -DXML_UNICODE=ON (and ex -DXML_UNICODE_WCHAR_T=ON)
  - CMake: Port "make run-xmltest" from GNU Autotools to CMake
  - CMake: Integrate OSS-Fuzz fuzzers, option -DEXPAT_BUILD_FUZZERS=(ON|OFF), default OFF
- Removed patches fixed in the update:
  * expat-CVE-2019-15903.patch
  * expat-CVE-2019-15903-tests.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1575028800">- Version update to 2.2.9
  * Other changes:
  - examples: Drop executable bits from elements.c
    [#349]  Windows: Change the name of the Windows DLLs from expat*.dll
    to libexpat*.dll once more (regression from 2.2.8, first
    fixed in 1.95.3, issue #61 on SourceForge today,
    was issue #432456 back then); needs a fix due
    case-insensitive file systems on Windows and the fact that
    Perl's XML::Parser::Expat compiles into Expat.dll.
    [#347]  Windows: Only define _CRT_RAND_S if not defined
    Version info bumped from 7:10:6 to 7:11:6</changelog>
  <changelog author="pmonreal@suse.com" date="1601812800">- Update to 2.2.10:
  * Bug fixes:
  - Fix undefined behavior during parsing caused by pointer
    arithmetic with NULL pointers
  - Fix reading uninitialized variable during parsing
  - xmlwf: Add missing check for malloc NULL return
  * Other changes:
  - xmlwf: Document exit codes in xmlwf manpage and exit with code 3
    (rather than code 1) for output errors when used with "-d DIRECTORY"
  - Autotools: Use -Werror while configure tests the compiler for
    supported compile flags to avoid false positives
  - Autotools: Improve handling of user (C|CPP|CXX|LD)FLAGS, e.g.
    ensure that they have the last word over flags added while
    running ./configure
  - CMake: Create libexpatw.{dll,so} and expatw.pc (with emphasis
    on suffix "w") with -DEXPAT_CHAR_TYPE=(ushort|wchar_t)
  - CMake: Detect and deny unsupported build combinations
    involving -DEXPAT_CHAR_TYPE=(ushort|wchar_t)
  - CMake: Install pre-compiled shipped xmlwf.1 manpage in case
    of -DEXPAT_BUILD_DOCS=OFF
  - CMake: Fix use of Expat by means of add_subdirectory
  - CMake: Keep expat target name constant at "expat" (i.e. refrain
    from using the target name to control build artifact filenames)
  - CMake: Expose man page compilation as target "xmlwf-manpage"
  - CMake: Introduce option EXPAT_BUILD_PKGCONFIG to control
    generation of pkg-config file "expat.pc"
  - CMake: Add minimalistic support for building binary packages
    with CMake target "package"; based on CPack
  - CMake: Add option -DEXPAT_OSSFUZZ_BUILD=(ON|OFF) with default
    OFF to build fuzzer code against OSS-Fuzz and related
    environment variable LIB_FUZZING_ENGINE
  - Fix testsuite for -DEXPAT_DTD=OFF and -DEXPAT_NS=OFF
  - Address compiler warnings
  - Address pngcheck warnings with doc/*.png images: Version info
    bumped from 7:11:6 to 7:12:6</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- update to 2.3.0:
  * When calling XML_ParseBuffer without a prior successful call to
    XML_GetBuffer as a user, no longer trigger undefined behavior
    (by adding an integer to a NULL pointer) but rather return
    XML_STATUS_ERROR and set the error code to (new) code
    XML_ERROR_NO_BUFFER. Found by UBSan (UndefinedBehaviorSanitizer)
    of Clang 11 (but not Clang 9).
  * xmlwf: Exit status 2 was used for both:
  - malformed input files (documented) and
  - invalid command-line arguments (undocumented).
    case of invalid command-line arguments now
    has its own exit status 4, resolving the ambiguity.
  * Other changes</changelog>
  <changelog author="dimstar@opensuse.org" date="1618315200">- Do not BuildRequire cmake: expat is part of the distro bootstrap
  cycle and any additional dependency makes the ring larger. In
  this case here, cmake was even only used to own a directory.</changelog>
  <changelog author="pmonreal@suse.com" date="1621857600">- Update to 2.4.0: [CVE-2013-0340 "Billion Laughs"]
  * Security fixes:
  - CVE-2013-0340/CWE-776 -- Protect against billion laughs attacks
    (denial-of-service; flavors targeting CPU time or RAM or both,
    leveraging general entities or parameter entities or both)
    by tracking and limiting the input amplification factor
    (&lt;amplification&gt; := (&lt;direct&gt; + &lt;indirect&gt;) / &lt;direct&gt;).
    By conservative default, amplification up to a factor of 100.0
    is tolerated and rejection only starts after 8 MiB of output bytes
    (=&lt;direct&gt; + &lt;indirect&gt;) have been processed.
    The fix adds the following to the API:
  - A new error code XML_ERROR_AMPLIFICATION_LIMIT_BREACH to
    signals this specific condition.
  - Two new API functions ..
  - XML_SetBillionLaughsAttackProtectionMaximumAmplification and
  - XML_SetBillionLaughsAttackProtectionActivationThreshold
    .. to further tighten billion laughs protection parameters
    when desired.  Please see file "doc/reference.html" for details.
    If you ever need to increase the defaults for non-attack XML
    payload, please file a bug report with libexpat.
  - Two new XML_FEATURE_* constants ..
  - that can be queried using the XML_GetFeatureList function, and
  - that are shown in "xmlwf -v" output.
  - Two new environment variable switches ..
  - EXPAT_ACCOUNTING_DEBUG=(0|1|2|3) and
  - EXPAT_ENTITY_DEBUG=(0|1)
    .. for runtime debugging of accounting and entity processing.
    Specific behavior of these values may change in the future.
  - Two new command line arguments "-a FACTOR" and "-b BYTES"
    for xmlwf to further tighten billion laughs protection
    parameters when desired.
    If you ever need to increase the defaults for non-attack XML
    payload, please file a bug report with libexpat.
  * Bug fixes:
  - For (non-default) compilation with -DEXPAT_MIN_SIZE=ON (CMake)
    or CPPFLAGS=-DXML_MIN_SIZE (GNU Autotools): Fix segfault
    for UTF-16 payloads containing CDATA sections.
  - Autotools: Fix generated CMake files for non-64bit and
    non-Linux platforms (e.g. macOS and MinGW in particular)
    that were introduced with release 2.3.0
  * Other changes:
  - xmlwf: Improve help output and the xmlwf man page
  - xmlwf: Improve maintainability through some refactoring
  - xmlwf: Fix man page DocBook validity
  - CMake: Support absolute paths for both CMAKE_INSTALL_LIBDIR
    and CMAKE_INSTALL_INCLUDEDIR
  - CMake: Add support for standard variable BUILD_SHARED_LIBS
  - Unexpose symbol _INTERNAL_trim_to_complete_utf8_characters
  - Resolve macro HAVE_EXPAT_CONFIG_H
  - Delete unused legacy helper file "conftools/PrintPath"
  - doc/reference.html: Fix XHTML validity
  - doc/reference.html: Replace the 90s look by OK.css
  - Version info bumped from 8:0:7 to 9:0:8 due to addition of
    new symbols and error codes; see https://verbump.de/ for
    what these numbers do</changelog>
  <changelog author="pmonreal@suse.com" date="1621857601">- Update to 2.4.1:
  * Bug fixes:
  - Autotools: Fix installed header expat_config.h for multilib
    systems; regression introduced in 2.4.0 by pull request #486
  * Other changes:
  - Version info bumped from 9:0:8 to 9:1:8; see
    https://verbump.de/ for what these numbers do</changelog>
  <changelog author="pmonreal@suse.com" date="1631016000">- Update to 2.4.1 in SLE-15-SP4 [jsc#SLE-21253]
  * Remove expat-CVE-2018-20843.patch upstream</changelog>
  <changelog author="dmueller@suse.com" date="1640606400">- update to 2.4.2:
  * Link againgst libm for function "isnan"
  * Include expat_config.h as early as possible
  * Autotools: Include files with release archives:
  - buildconf.sh
  - fuzz/*.c
  * Autotools: Sync CMake templates
  * docs: Document that function XML_GetBuffer may return NULL
    when asking for a buffer of 0 (zero) bytes size
  * docs: Fix return value docs for both
    XML_SetBillionLaughsAttackProtection* functions
  * Version info bumped from 9:1:8 to 9:2:8</changelog>
  <changelog author="dmueller@suse.com" date="1642420800">- update to 2.4.3 (bsc#1194251, bsc#1194362, bsc#1194474,
    bsc#1194476, bsc#1194477, bsc#1194478, bsc#1194479, bsc#1194480):
  * CVE-2021-45960 -- Fix issues with left shifts by &gt;=29 places
    resulting in
    a) realloc acting as free
    b) realloc allocating too few bytes
    c) undefined behavior
    depending on architecture and precise value
    for XML documents with &gt;=2^27+1 prefixed attributes
    on a single XML tag a la
    "&lt;r xmlns:a='[..]' a:a123='[..]' [..] /&gt;"
    where XML_ParserCreateNS is used to create the parser
    (which needs argument "-n" when running xmlwf).
    Impact is denial of service, or more.
  * CVE-2021-46143 (ZDI-CAN-16157) -- Fix integer overflow
    on variable m_groupSize in function doProlog leading
    to realloc acting as free.
    Impact is denial of service or more.
  * CVE-2022-22822 to CVE-2022-22827 -- Prevent integer overflows
    near memory allocation at multiple places.  Mitre assigned
    a dedicated CVE for each involved internal C function:
  - CVE-2022-22822 for function addBinding
  - CVE-2022-22823 for function build_model
  - CVE-2022-22824 for function defineAttribute
  - CVE-2022-22825 for function lookup
  - CVE-2022-22826 for function nextScaffoldPart
  - CVE-2022-22827 for function storeAtts
    Impact is denial of service or more.</changelog>
  <changelog author="david.anes@suse.com" date="1643630400">- update to 2.4.4 (bsc#1195217, bsc#1195054):
  * Security fixes:
  - CVE-2022-23852 -- Fix signed integer overflow
    (undefined behavior) in function XML_GetBuffer
    that is also called by function XML_Parse internally)
    for when XML_CONTEXT_BYTES is defined to &gt;0 (which is both
    common and default).
    Impact is denial of service or more.
  - CVE-2022-23990 -- Fix unsigned integer overflow in function
    doProlog triggered by large content in element type
    declarations when there is an element declaration handler
    present (from a prior call to XML_SetElementDeclHandler).
    Impact is denial of service or more.
  * Bug fixes:
  - xmlwf: Fix a memory leak on output file opening error
  * Other changes:
  - Version info bumped from 9:3:8 to 9:4:8;
    see https://verbump.de/ for what these numbers do
  * Drop unused file valid-xhtml10.png</changelog>
  <changelog author="david.anes@suse.com" date="1643716800">- Update to latest version 2.4.4 in SLE-15-SP4 [jsc#SLE-21253]</changelog>
  <changelog author="david.anes@suse.com" date="1645444800">- Security fixes:
  * (CVE-2022-25236, bsc#1196025) Expat before 2.4.5 allows
    attackers to insert namespace-separator characters into
    namespace URIs
  - Added expat-CVE-2022-25236.patch
  * (CVE-2022-25235, bsc#1196026) xmltok_impl.c in Expat before
    2.4.5 does not check whether a UTF-8 character is valid in a
    certain context.
  - Added expat-CVE-2022-25235.patch
  * (CVE-2022-25313, bsc#1196168) Stack exhaustion in
    build_model() via uncontrolled recursion
  - Added expat-CVE-2022-25313.patch
  - The fix upstream introduced a regression that was later
    amended in 2.4.6 version
    + Added expat-CVE-2022-25313-fix-regression.patch
  * (CVE-2022-25314, bsc#1196169) Integer overflow in copyString
  - Added expat-CVE-2022-25314.patch
  * (CVE-2022-25315, bsc#1196171) Integer overflow in storeRawNames
  - Added expat-CVE-2022-25315.patch</changelog>
  <changelog author="david.anes@suse.com" date="1646481600">- Security fixes:
  * (CVE-2022-25236, bsc#1196784) [&gt;=2.4.5] Fix to CVE-2022-25236
    breaks biboumi, ClairMeta, jxmlease, libwbxml,
    openleadr-python, rnv, xmltodict
  - Added expat-CVE-2022-25236-relax-fix.patch</changelog>
  <changelog author="david.anes@suse.com" date="1664193600">- Security fix:
  * (CVE-2022-40674, bsc#1203438) use-after-free in the doContent
    function in xmlparse.c
  - Added patch expat-CVE-2022-40674.patch</changelog>
  <changelog author="david.anes@suse.com" date="1666785600">- Security fix:
  * (CVE-2022-43680, bsc#1204708) use-after free caused by overeager
    destruction of a shared DTD in XML_ExternalEntityParserCreate in
    out-of-memory situations
  - Added patch expat-CVE-2022-43680.patch</changelog>
  <changelog author="david.anes@suse.com" date="1708084800">- Security fix:
  * (CVE-2023-52425, bsc#1219559) denial of service (resource
    consumption) caused by processing large tokens.
  - Added patch expat-CVE-2023-52425-1.patch
  - Added patch expat-CVE-2023-52425-2.patch
  - Added patch expat-CVE-2023-52425-backport-parser-changes.patch
  - Added patch expat-CVE-2023-52425-fix-tests.patch</changelog>
  <changelog author="david.anes@suse.com" date="1710763200">- Security fix (boo#1221289, CVE-2024-28757): XML Entity Expansion
  attack when there is isolated use of external parsers.
  * Added expat-CVE-2024-28757.patch</changelog>
  <changelog author="david.anes@suse.com" date="1725364800">- Security fix (bsc#1229932, CVE-2024-45492): detect integer
  overflow in function nextScaffoldPart
  * Added expat-CVE-2024-45492.patch
- Security fix (bsc#1229931, CVE-2024-45491): detect integer
  overflow in dtdCopy
  * Added expat-CVE-2024-45491.patch
- Security fix (bsc#1229930, CVE-2024-45490): reject negative
  len for XML_ParseBuffer
  * Added expat-CVE-2024-45490.patch</changelog>
</package>
<package pkgid="dce765e2458b71a3f927440bca15c5c1ace834ac7b92970cef1fb3a9a28477ca" name="libext2fs2" arch="aarch64">
  <version epoch="0" ver="1.46.4" rel="150400.3.6.2"/>
  <changelog author="jack@suse.cz" date="1559304000">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
  <changelog author="jack@suse.cz" date="1716552000">EA Inode handling fixes:
- ext2fs-avoid-re-reading-inode-multiple-times.patch: ext2fs: avoid re-reading
  inode multiple times (bsc#1223596)
- e2fsck-fix-potential-out-of-bounds-read-in-inc_ea_in.patch: e2fsck: fix
  potential out-of-bounds read in inc_ea_inode_refs() (bsc#1223596)
- e2fsck-add-more-checks-for-ea-inode-consistency.patch: e2fsck: add more
  checks for ea inode consistency (bsc#1223596)
- e2fsck-fix-golden-output-of-several-tests.patch: e2fsck: fix golden output of
  several tests (bsc#1223596)</changelog>
</package>
<package pkgid="7df72acc6351ef9a26f919bef73e1e4f4c8662b0c841a793d9499da8b4f7b31b" name="libext2fs2" arch="s390x">
  <version epoch="0" ver="1.46.4" rel="150400.3.6.2"/>
  <changelog author="jack@suse.cz" date="1559304000">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
  <changelog author="jack@suse.cz" date="1716552000">EA Inode handling fixes:
- ext2fs-avoid-re-reading-inode-multiple-times.patch: ext2fs: avoid re-reading
  inode multiple times (bsc#1223596)
- e2fsck-fix-potential-out-of-bounds-read-in-inc_ea_in.patch: e2fsck: fix
  potential out-of-bounds read in inc_ea_inode_refs() (bsc#1223596)
- e2fsck-add-more-checks-for-ea-inode-consistency.patch: e2fsck: add more
  checks for ea inode consistency (bsc#1223596)
- e2fsck-fix-golden-output-of-several-tests.patch: e2fsck: fix golden output of
  several tests (bsc#1223596)</changelog>
</package>
<package pkgid="315e532c7a06da0b3c9d5f052bc9dcc22f0d963e32da72a2ffb96ece94ae9315" name="libext2fs2" arch="x86_64">
  <version epoch="0" ver="1.46.4" rel="150400.3.6.2"/>
  <changelog author="jack@suse.cz" date="1559304000">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
  <changelog author="jack@suse.cz" date="1716552000">EA Inode handling fixes:
- ext2fs-avoid-re-reading-inode-multiple-times.patch: ext2fs: avoid re-reading
  inode multiple times (bsc#1223596)
- e2fsck-fix-potential-out-of-bounds-read-in-inc_ea_in.patch: e2fsck: fix
  potential out-of-bounds read in inc_ea_inode_refs() (bsc#1223596)
- e2fsck-add-more-checks-for-ea-inode-consistency.patch: e2fsck: add more
  checks for ea inode consistency (bsc#1223596)
- e2fsck-fix-golden-output-of-several-tests.patch: e2fsck: fix golden output of
  several tests (bsc#1223596)</changelog>
</package>
<package pkgid="defb850af5c18e0807ce92a48bc0b5d7ab84f570f4b6bdfeb201bde9d5ee8e54" name="libfdisk1" arch="aarch64">
  <version epoch="0" ver="2.37.4" rel="150500.9.11.1"/>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-more-ARM-cores-1.patch,
  util-linux-lscpu-add-more-ARM-cores-2.patch,
  util-linux-lscpu-add-more-ARM-cores-3.patch,
  util-linux-lscpu-add-more-ARM-cores-4.patch,
  util-linux-lscpu-add-more-ARM-cores-5.patch,
  util-linux-lscpu-add-more-ARM-cores-6.patch).</changelog>
</package>
<package pkgid="e661c43a40f5df6bed4c30f5207ccc9585b9e76af6765cb21ed9f16674713eb3" name="libfdisk1" arch="s390x">
  <version epoch="0" ver="2.37.4" rel="150500.9.11.1"/>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-more-ARM-cores-1.patch,
  util-linux-lscpu-add-more-ARM-cores-2.patch,
  util-linux-lscpu-add-more-ARM-cores-3.patch,
  util-linux-lscpu-add-more-ARM-cores-4.patch,
  util-linux-lscpu-add-more-ARM-cores-5.patch,
  util-linux-lscpu-add-more-ARM-cores-6.patch).</changelog>
</package>
<package pkgid="fde18ca9cfc56cbe16a533f46d6d0a5f4b5399a5351954a366e625be83c84258" name="libfdisk1" arch="x86_64">
  <version epoch="0" ver="2.37.4" rel="150500.9.11.1"/>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-more-ARM-cores-1.patch,
  util-linux-lscpu-add-more-ARM-cores-2.patch,
  util-linux-lscpu-add-more-ARM-cores-3.patch,
  util-linux-lscpu-add-more-ARM-cores-4.patch,
  util-linux-lscpu-add-more-ARM-cores-5.patch,
  util-linux-lscpu-add-more-ARM-cores-6.patch).</changelog>
</package>
<package pkgid="7c9748931edef401a39bfc897f3333c8b90272664a6e39914a53ae10a1286ae7" name="libfdisk1" arch="aarch64">
  <version epoch="0" ver="2.37.4" rel="150500.9.14.2"/>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-more-ARM-cores-1.patch,
  util-linux-lscpu-add-more-ARM-cores-2.patch,
  util-linux-lscpu-add-more-ARM-cores-3.patch,
  util-linux-lscpu-add-more-ARM-cores-4.patch,
  util-linux-lscpu-add-more-ARM-cores-5.patch,
  util-linux-lscpu-add-more-ARM-cores-6.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
</package>
<package pkgid="76cddd0e4b501f0aca61c5e4a09624ef7fc271a126864d5b5ec88580d6278ae4" name="libfdisk1" arch="s390x">
  <version epoch="0" ver="2.37.4" rel="150500.9.14.2"/>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-more-ARM-cores-1.patch,
  util-linux-lscpu-add-more-ARM-cores-2.patch,
  util-linux-lscpu-add-more-ARM-cores-3.patch,
  util-linux-lscpu-add-more-ARM-cores-4.patch,
  util-linux-lscpu-add-more-ARM-cores-5.patch,
  util-linux-lscpu-add-more-ARM-cores-6.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
</package>
<package pkgid="984b08f10e8874256918b471f753fe7ba037fbec37789db143925eebe7526555" name="libfdisk1" arch="x86_64">
  <version epoch="0" ver="2.37.4" rel="150500.9.14.2"/>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-more-ARM-cores-1.patch,
  util-linux-lscpu-add-more-ARM-cores-2.patch,
  util-linux-lscpu-add-more-ARM-cores-3.patch,
  util-linux-lscpu-add-more-ARM-cores-4.patch,
  util-linux-lscpu-add-more-ARM-cores-5.patch,
  util-linux-lscpu-add-more-ARM-cores-6.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
</package>
<package pkgid="ff6034b54c6846d028f9bd94ee99d3268764794ed6e7baee89c2f404a9a09212" name="libfdisk1" arch="aarch64">
  <version epoch="0" ver="2.37.4" rel="150500.9.17.2"/>
  <changelog author="sbrabec@suse.com" date="1646308800">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-more-ARM-cores-1.patch,
  util-linux-lscpu-add-more-ARM-cores-2.patch,
  util-linux-lscpu-add-more-ARM-cores-3.patch,
  util-linux-lscpu-add-more-ARM-cores-4.patch,
  util-linux-lscpu-add-more-ARM-cores-5.patch,
  util-linux-lscpu-add-more-ARM-cores-6.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1725364800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).</changelog>
</package>
<package pkgid="b6b750b577af37fbc7b76317eaf7c99b822875ee604480a575ffcaea3b7b4d52" name="libfdisk1" arch="s390x">
  <version epoch="0" ver="2.37.4" rel="150500.9.17.2"/>
  <changelog author="sbrabec@suse.com" date="1646308800">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-more-ARM-cores-1.patch,
  util-linux-lscpu-add-more-ARM-cores-2.patch,
  util-linux-lscpu-add-more-ARM-cores-3.patch,
  util-linux-lscpu-add-more-ARM-cores-4.patch,
  util-linux-lscpu-add-more-ARM-cores-5.patch,
  util-linux-lscpu-add-more-ARM-cores-6.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1725364800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).</changelog>
</package>
<package pkgid="e2f698b2ce012631ea839f50b45cc6fc26052987a7863efa11478d7bd37ec680" name="libfdisk1" arch="x86_64">
  <version epoch="0" ver="2.37.4" rel="150500.9.17.2"/>
  <changelog author="sbrabec@suse.com" date="1646308800">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-more-ARM-cores-1.patch,
  util-linux-lscpu-add-more-ARM-cores-2.patch,
  util-linux-lscpu-add-more-ARM-cores-3.patch,
  util-linux-lscpu-add-more-ARM-cores-4.patch,
  util-linux-lscpu-add-more-ARM-cores-5.patch,
  util-linux-lscpu-add-more-ARM-cores-6.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1725364800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).</changelog>
</package>
<package pkgid="a0e4dcb397325788fae59ff780f9142cad3d0d028c33e5cd51605380a1a597aa" name="libfdisk1" arch="aarch64">
  <version epoch="0" ver="2.37.4" rel="150500.9.3.1"/>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
</package>
<package pkgid="25d9fde6d4395a3e039c352328f581faf9a2e92fffd76465e32a7d2b32eeabd1" name="libfdisk1" arch="s390x">
  <version epoch="0" ver="2.37.4" rel="150500.9.3.1"/>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
</package>
<package pkgid="f8692610b45b11558486f2edf1595e5b7d6ece6ccc3925f1ab334a9b9296a1fa" name="libfdisk1" arch="x86_64">
  <version epoch="0" ver="2.37.4" rel="150500.9.3.1"/>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
</package>
<package pkgid="ac7134e25a74867665f1cbeff07e848fea792de34571295e16faa390657eed4c" name="libfdisk1" arch="aarch64">
  <version epoch="0" ver="2.37.4" rel="150500.9.6.1"/>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
</package>
<package pkgid="e15c877c5c0dec2a926d09c60d7d8163cddfca2919799da5ea06f74830502e0c" name="libfdisk1" arch="s390x">
  <version epoch="0" ver="2.37.4" rel="150500.9.6.1"/>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
</package>
<package pkgid="2628c9d0f1cc1d655b2131a5841c6f0d81dd9580da9bf11952a435da2770a0c1" name="libfdisk1" arch="x86_64">
  <version epoch="0" ver="2.37.4" rel="150500.9.6.1"/>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
</package>
<package pkgid="39fcd4f0ff1dcc16d07bcfa94fc8657c8745dc1b1b32afbbef1394118acb4c39" name="libfido2-1" arch="aarch64">
  <version epoch="0" ver="1.13.0" rel="150400.5.3.1"/>
  <changelog author="kbabioch@suse.de" date="1559044800">- Version 1.1.0 (released 2019-05-08)
  * EdDSA (Ed25519) support.
  * fido_dev_make_cred: fix order of CBOR map keys.
  * fido_dev_get_assert: plug memory leak when operating on U2F devices.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1568635200">- Version 1.2.0 (released 2019-07-26)
  * Credential management support.
  * New API reflecting FIDO’s 3-state booleans (true, false, absent):
  - fido_assert_set_up;
  - fido_assert_set_uv;
  - fido_cred_set_rk;
  - fido_cred_set_uv.
  * Command-line tools for Windows.
  * Documentation and reliability fixes.
  * fido_{assert,cred}_set_options() are now marked as deprecated.</changelog>
  <changelog author="kbabioch@suse.de" date="1575806400">- Version 1.3.0 (2019-11-28)
  * assert/hmac: encode public key as per spec, gh#60.
  * fido2-cred: fix creation of resident keys.
  * fido2-{assert,cred}: support for hmac-secret extension.
  * hid_osx: detect device removal, gh#56.
  * hid_osx: fix device detection in MacOS Catalina.
  * New API calls:
  - fido_assert_set_authdata_raw;
  - fido_assert_sigcount;
  - fido_cred_set_authdata_raw;
  - fido_dev_cancel.
  * Middleware library for use by OpenSSH.
  * Support for biometric enrollment.
  * Support for OpenBSD.
  * Support for self-attestation.</changelog>
  <changelog author="mrueckert@suse.de" date="1583064000">- Version 1.3.1
  - fix zero-ing of le1 and le2 when talking to a U2F device.
  - dropping sk-libfido2 middleware, please find it in the openssh
    tree.</changelog>
  <changelog author="idonmez@suse.com" date="1590408000">- Update to version 1.4.0
  * hid_hidapi: hidapi backend; enable with -DUSE_HIDAPI=1.
  * Fall back to U2F if the key claims to, but does not support FIDO2.
  * FIDO2 credential protection (credprot) support.
  * New API calls:
    + fido_cbor_info_fwversion;
    + fido_cred_prot;
    + fido_cred_set_prot;
    + fido_dev_set_transport_functions;
    + fido_set_log_handler.
  * Fixed EdDSA and RSA self-attestation.</changelog>
  <changelog author="idonmez@suse.com" date="1593691200">- Don't build with hidapi support to fix issues with Yubikey 5Ci
  https://github.com/Yubico/libfido2/issues/190</changelog>
  <changelog author="idonmez@suse.com" date="1593777600">- Create a udev subpackage and ship the udev rule</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595592000">- Cleanup udev rules, trying to use the Debian specific plugdev
  group fills up the journal.
- Make the udev rules package noarch, correct Summary</changelog>
  <changelog author="idonmez@suse.com" date="1598961600">- Update to version 1.5.0
  * hid_linux: return FIDO_OK if no devices are found.
  * hid_osx:
    + repair communication with U2F tokens, gh#166;
    + reliability fixes.
  * fido2-{assert,cred}: new options to explicitly toggle UP, UV.
  * Support for configurable report lengths.
  * New API calls:
    + fido_cbor_info_maxcredcntlst
    + fido_cbor_info_maxcredidlen
    + fido_cred_aaguid_len
    + fido_cred_aaguid_ptr
    + fido_dev_get_touch_begin
    + fido_dev_get_touch_status
  * Use COSE_ECDH_ES256 with CTAP_CBOR_CLIENT_PIN; gh#154.
  * Allow CTAP messages up to 2048 bytes; gh#171.
  * Ensure we only list USB devices by default.</changelog>
  <changelog author="idonmez@suse.com" date="1599652800">- Add 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch from upstream
  to fix 32bit compilation issues.</changelog>
  <changelog author="hpj@suse.com" date="1605614400">- Add Conflicts: to supersede version 1.0.0. This is needed for
  a clean upgrade path on SLE.</changelog>
  <changelog author="mpluskal@suse.com" date="1611144000">- Update to version 1.6.0:
  * Fix OpenSSL 1.0 and Cygwin builds.
  * hid_linux: fix build on 32-bit systems.
  * hid_osx: allow reads from spawned threads.
  * Documentation and reliability fixes.
  * New API calls:
    + fido_cred_authdata_raw_len;
    + fido_cred_authdata_raw_ptr;
    + fido_cred_sigcount;
    + fido_dev_get_uv_retry_count;
    + fido_dev_supports_credman.
  * Hardened Windows build.
  * Native FreeBSD and NetBSD support.
  * Use CTAP2 canonical CBOR when combining hmac-secret and credProtect.
- Drop 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch
- Do not build examples as their build fails</changelog>
  <changelog author="rpm@fthiessen.de" date="1618660800">- Update to version 1.7.0:
  * hid_win: detect devices with vendor or product IDs &gt; 0x7fff
  * Support for FIDO 2.1 authenticator configuration.
  * Support for FIDO 2.1 UV token permissions.
  * Support for FIDO 2.1 "credBlobs" and "largeBlobs" extensions.
  * New API calls
  * New fido_init flag to disable fido_dev_open’s U2F fallback
  * Experimental NFC support on Linux.
- Enabled hidapi again, issues related to hidapi are fixed upstream
  * Added fix-cmake-linking.patch to fix linking</changelog>
  <changelog author="paolo.perego@suse.com" date="1631620800">- Update to version 1.8.0:
  * Dropped 'Requires.private' entry from pkg-config file.
  * Better support for FIDO 2.1 authenticators.
  * Support for Windows's native webauthn API.
  * Support for attestation format 'none'.
  * New API calls:
  - fido_assert_set_clientdata;
  - fido_cbor_info_algorithm_cose;
  - fido_cbor_info_algorithm_count;
  - fido_cbor_info_algorithm_type;
  - fido_cbor_info_transports_len;
  - fido_cbor_info_transports_ptr;
  - fido_cred_set_clientdata;
  - fido_cred_set_id;
  - fido_credman_set_dev_rk;
  - fido_dev_is_winhello.
  * fido2-token: new -Sc option to update a resident credential.
  * Documentation and reliability fixes.
  * HID access serialisation on Linux.
- disable fix-cmake-linking.patch, not needed currently</changelog>
  <changelog author="paolo.perego@suse.com" date="1632225600">- Removed fix-cmake-linking.patch because no longer needed</changelog>
  <changelog author="simmphonie@opensuse.org" date="1635768000">- Version 1.9.0 (2021-10-27)
  * Enabled NFC support on Linux.
  * Added OpenSSL 3.0 compatibility.
  * Removed OpenSSL 1.0 compatibility.
  * Support for FIDO 2.1 "minPinLength" extension.
  * Support for COSE_EDDSA, COSE_ES256, and COSE_RS1 attestation.
  * Support for TPM 2.0 attestation.
  * Support for device timeouts; see fido_dev_set_timeout().
  * New API calls:
  - es256_pk_from_EVP_PKEY;
  - fido_cred_attstmt_len;
  - fido_cred_attstmt_ptr;
  - fido_cred_pin_minlen;
  - fido_cred_set_attstmt;
  - fido_cred_set_pin_minlen;
  - fido_dev_set_pin_minlen_rpid;
  - fido_dev_set_timeout;
  - rs256_pk_from_EVP_PKEY.
  * Reliability and portability fixes.
  * Better handling of HID devices without identification strings; gh#381.
  * Fixed detection of Windows’s native webauthn API; gh#382.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1641816000">- Use BuildRequires: openssl-devel instead of forcing 1.1 since 3.x
  is now supported.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1648468800">- Version 1.10.0 (2022-01-17)
  * hid_osx: handle devices with paths &gt; 511 bytes; gh#462.
  * bio: fix CTAP2 canonical CBOR encoding in fido_bio_dev_enroll_*(); gh#480.
  * winhello: fallback to GetTopWindow() if GetForegroundWindow() fails.
  * winhello: fallback to hid_win.c if webauthn.dll isn’t available.
  * New API calls:
  - fido_dev_info_set;
  - fido_dev_io_handle;
  - fido_dev_new_with_info;
  - fido_dev_open_with_info.
  * Cygwin and NetBSD build fixes.
  * Documentation and reliability fixes.
  * Support for TPM 2.0 attestation of COSE_ES256 credentials.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1664971200">- Version 1.12.0 (2022-09-22)
  * Support for COSE_ES384.
  * Support for hidraw(4) on FreeBSD; gh#597.
  * Improved support for FIDO 2.1 authenticators.
  * New API calls:
    + es384_pk_free;
    + es384_pk_from_EC_KEY;
    + es384_pk_from_EVP_PKEY;
    + es384_pk_from_ptr;
    + es384_pk_new;
    + es384_pk_to_EVP_PKEY;
    + fido_cbor_info_certs_len;
    + fido_cbor_info_certs_name_ptr;
    + fido_cbor_info_certs_value_ptr;
    + fido_cbor_info_maxrpid_minpinlen;
    + fido_cbor_info_minpinlen;
    + fido_cbor_info_new_pin_required;
    + fido_cbor_info_rk_remaining;
    + fido_cbor_info_uv_attempts;
    + fido_cbor_info_uv_modality.
  * Documentation and reliability fixes.
- Version 1.11.0 (2022-05-03)
  * Experimental PCSC support; enable with -DUSE_PCSC.
  * Improved OpenSSL 3.0 compatibility.
  * Use RFC1951 raw deflate to compress CTAP 2.1 largeBlobs.
  * winhello: advertise "uv" instead of "clientPin".
  * winhello: support hmac-secret in fido_dev_get_assert().
  * New API calls:
    + fido_cbor_info_maxlargeblob.
  * Documentation and reliability fixes.
  * Separate build and regress targets.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1677240000">- Version 1.13.0 (2023-02-20)
  * Support for linking against OpenSSL on Windows; gh#668.
  * New API calls:
    + fido_assert_empty_allow_list;
    + fido_cred_empty_exclude_list.
  * fido2-token: fix issue when listing large blobs.
  * Improved support for different fuzzing engines.</changelog>
</package>
<package pkgid="4d968c470af88d0d46b30ffefe4547857e1864f3f0a691b8033da07b86591c93" name="libfido2-1" arch="s390x">
  <version epoch="0" ver="1.13.0" rel="150400.5.3.1"/>
  <changelog author="kbabioch@suse.de" date="1559044800">- Version 1.1.0 (released 2019-05-08)
  * EdDSA (Ed25519) support.
  * fido_dev_make_cred: fix order of CBOR map keys.
  * fido_dev_get_assert: plug memory leak when operating on U2F devices.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1568635200">- Version 1.2.0 (released 2019-07-26)
  * Credential management support.
  * New API reflecting FIDO’s 3-state booleans (true, false, absent):
  - fido_assert_set_up;
  - fido_assert_set_uv;
  - fido_cred_set_rk;
  - fido_cred_set_uv.
  * Command-line tools for Windows.
  * Documentation and reliability fixes.
  * fido_{assert,cred}_set_options() are now marked as deprecated.</changelog>
  <changelog author="kbabioch@suse.de" date="1575806400">- Version 1.3.0 (2019-11-28)
  * assert/hmac: encode public key as per spec, gh#60.
  * fido2-cred: fix creation of resident keys.
  * fido2-{assert,cred}: support for hmac-secret extension.
  * hid_osx: detect device removal, gh#56.
  * hid_osx: fix device detection in MacOS Catalina.
  * New API calls:
  - fido_assert_set_authdata_raw;
  - fido_assert_sigcount;
  - fido_cred_set_authdata_raw;
  - fido_dev_cancel.
  * Middleware library for use by OpenSSH.
  * Support for biometric enrollment.
  * Support for OpenBSD.
  * Support for self-attestation.</changelog>
  <changelog author="mrueckert@suse.de" date="1583064000">- Version 1.3.1
  - fix zero-ing of le1 and le2 when talking to a U2F device.
  - dropping sk-libfido2 middleware, please find it in the openssh
    tree.</changelog>
  <changelog author="idonmez@suse.com" date="1590408000">- Update to version 1.4.0
  * hid_hidapi: hidapi backend; enable with -DUSE_HIDAPI=1.
  * Fall back to U2F if the key claims to, but does not support FIDO2.
  * FIDO2 credential protection (credprot) support.
  * New API calls:
    + fido_cbor_info_fwversion;
    + fido_cred_prot;
    + fido_cred_set_prot;
    + fido_dev_set_transport_functions;
    + fido_set_log_handler.
  * Fixed EdDSA and RSA self-attestation.</changelog>
  <changelog author="idonmez@suse.com" date="1593691200">- Don't build with hidapi support to fix issues with Yubikey 5Ci
  https://github.com/Yubico/libfido2/issues/190</changelog>
  <changelog author="idonmez@suse.com" date="1593777600">- Create a udev subpackage and ship the udev rule</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595592000">- Cleanup udev rules, trying to use the Debian specific plugdev
  group fills up the journal.
- Make the udev rules package noarch, correct Summary</changelog>
  <changelog author="idonmez@suse.com" date="1598961600">- Update to version 1.5.0
  * hid_linux: return FIDO_OK if no devices are found.
  * hid_osx:
    + repair communication with U2F tokens, gh#166;
    + reliability fixes.
  * fido2-{assert,cred}: new options to explicitly toggle UP, UV.
  * Support for configurable report lengths.
  * New API calls:
    + fido_cbor_info_maxcredcntlst
    + fido_cbor_info_maxcredidlen
    + fido_cred_aaguid_len
    + fido_cred_aaguid_ptr
    + fido_dev_get_touch_begin
    + fido_dev_get_touch_status
  * Use COSE_ECDH_ES256 with CTAP_CBOR_CLIENT_PIN; gh#154.
  * Allow CTAP messages up to 2048 bytes; gh#171.
  * Ensure we only list USB devices by default.</changelog>
  <changelog author="idonmez@suse.com" date="1599652800">- Add 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch from upstream
  to fix 32bit compilation issues.</changelog>
  <changelog author="hpj@suse.com" date="1605614400">- Add Conflicts: to supersede version 1.0.0. This is needed for
  a clean upgrade path on SLE.</changelog>
  <changelog author="mpluskal@suse.com" date="1611144000">- Update to version 1.6.0:
  * Fix OpenSSL 1.0 and Cygwin builds.
  * hid_linux: fix build on 32-bit systems.
  * hid_osx: allow reads from spawned threads.
  * Documentation and reliability fixes.
  * New API calls:
    + fido_cred_authdata_raw_len;
    + fido_cred_authdata_raw_ptr;
    + fido_cred_sigcount;
    + fido_dev_get_uv_retry_count;
    + fido_dev_supports_credman.
  * Hardened Windows build.
  * Native FreeBSD and NetBSD support.
  * Use CTAP2 canonical CBOR when combining hmac-secret and credProtect.
- Drop 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch
- Do not build examples as their build fails</changelog>
  <changelog author="rpm@fthiessen.de" date="1618660800">- Update to version 1.7.0:
  * hid_win: detect devices with vendor or product IDs &gt; 0x7fff
  * Support for FIDO 2.1 authenticator configuration.
  * Support for FIDO 2.1 UV token permissions.
  * Support for FIDO 2.1 "credBlobs" and "largeBlobs" extensions.
  * New API calls
  * New fido_init flag to disable fido_dev_open’s U2F fallback
  * Experimental NFC support on Linux.
- Enabled hidapi again, issues related to hidapi are fixed upstream
  * Added fix-cmake-linking.patch to fix linking</changelog>
  <changelog author="paolo.perego@suse.com" date="1631620800">- Update to version 1.8.0:
  * Dropped 'Requires.private' entry from pkg-config file.
  * Better support for FIDO 2.1 authenticators.
  * Support for Windows's native webauthn API.
  * Support for attestation format 'none'.
  * New API calls:
  - fido_assert_set_clientdata;
  - fido_cbor_info_algorithm_cose;
  - fido_cbor_info_algorithm_count;
  - fido_cbor_info_algorithm_type;
  - fido_cbor_info_transports_len;
  - fido_cbor_info_transports_ptr;
  - fido_cred_set_clientdata;
  - fido_cred_set_id;
  - fido_credman_set_dev_rk;
  - fido_dev_is_winhello.
  * fido2-token: new -Sc option to update a resident credential.
  * Documentation and reliability fixes.
  * HID access serialisation on Linux.
- disable fix-cmake-linking.patch, not needed currently</changelog>
  <changelog author="paolo.perego@suse.com" date="1632225600">- Removed fix-cmake-linking.patch because no longer needed</changelog>
  <changelog author="simmphonie@opensuse.org" date="1635768000">- Version 1.9.0 (2021-10-27)
  * Enabled NFC support on Linux.
  * Added OpenSSL 3.0 compatibility.
  * Removed OpenSSL 1.0 compatibility.
  * Support for FIDO 2.1 "minPinLength" extension.
  * Support for COSE_EDDSA, COSE_ES256, and COSE_RS1 attestation.
  * Support for TPM 2.0 attestation.
  * Support for device timeouts; see fido_dev_set_timeout().
  * New API calls:
  - es256_pk_from_EVP_PKEY;
  - fido_cred_attstmt_len;
  - fido_cred_attstmt_ptr;
  - fido_cred_pin_minlen;
  - fido_cred_set_attstmt;
  - fido_cred_set_pin_minlen;
  - fido_dev_set_pin_minlen_rpid;
  - fido_dev_set_timeout;
  - rs256_pk_from_EVP_PKEY.
  * Reliability and portability fixes.
  * Better handling of HID devices without identification strings; gh#381.
  * Fixed detection of Windows’s native webauthn API; gh#382.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1641816000">- Use BuildRequires: openssl-devel instead of forcing 1.1 since 3.x
  is now supported.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1648468800">- Version 1.10.0 (2022-01-17)
  * hid_osx: handle devices with paths &gt; 511 bytes; gh#462.
  * bio: fix CTAP2 canonical CBOR encoding in fido_bio_dev_enroll_*(); gh#480.
  * winhello: fallback to GetTopWindow() if GetForegroundWindow() fails.
  * winhello: fallback to hid_win.c if webauthn.dll isn’t available.
  * New API calls:
  - fido_dev_info_set;
  - fido_dev_io_handle;
  - fido_dev_new_with_info;
  - fido_dev_open_with_info.
  * Cygwin and NetBSD build fixes.
  * Documentation and reliability fixes.
  * Support for TPM 2.0 attestation of COSE_ES256 credentials.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1664971200">- Version 1.12.0 (2022-09-22)
  * Support for COSE_ES384.
  * Support for hidraw(4) on FreeBSD; gh#597.
  * Improved support for FIDO 2.1 authenticators.
  * New API calls:
    + es384_pk_free;
    + es384_pk_from_EC_KEY;
    + es384_pk_from_EVP_PKEY;
    + es384_pk_from_ptr;
    + es384_pk_new;
    + es384_pk_to_EVP_PKEY;
    + fido_cbor_info_certs_len;
    + fido_cbor_info_certs_name_ptr;
    + fido_cbor_info_certs_value_ptr;
    + fido_cbor_info_maxrpid_minpinlen;
    + fido_cbor_info_minpinlen;
    + fido_cbor_info_new_pin_required;
    + fido_cbor_info_rk_remaining;
    + fido_cbor_info_uv_attempts;
    + fido_cbor_info_uv_modality.
  * Documentation and reliability fixes.
- Version 1.11.0 (2022-05-03)
  * Experimental PCSC support; enable with -DUSE_PCSC.
  * Improved OpenSSL 3.0 compatibility.
  * Use RFC1951 raw deflate to compress CTAP 2.1 largeBlobs.
  * winhello: advertise "uv" instead of "clientPin".
  * winhello: support hmac-secret in fido_dev_get_assert().
  * New API calls:
    + fido_cbor_info_maxlargeblob.
  * Documentation and reliability fixes.
  * Separate build and regress targets.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1677240000">- Version 1.13.0 (2023-02-20)
  * Support for linking against OpenSSL on Windows; gh#668.
  * New API calls:
    + fido_assert_empty_allow_list;
    + fido_cred_empty_exclude_list.
  * fido2-token: fix issue when listing large blobs.
  * Improved support for different fuzzing engines.</changelog>
</package>
<package pkgid="e3549cc9533144a279bd5f755a862a4ab4ce7de719ab520e2d24563063f3418f" name="libfido2-1" arch="x86_64">
  <version epoch="0" ver="1.13.0" rel="150400.5.3.1"/>
  <changelog author="kbabioch@suse.de" date="1559044800">- Version 1.1.0 (released 2019-05-08)
  * EdDSA (Ed25519) support.
  * fido_dev_make_cred: fix order of CBOR map keys.
  * fido_dev_get_assert: plug memory leak when operating on U2F devices.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1568635200">- Version 1.2.0 (released 2019-07-26)
  * Credential management support.
  * New API reflecting FIDO’s 3-state booleans (true, false, absent):
  - fido_assert_set_up;
  - fido_assert_set_uv;
  - fido_cred_set_rk;
  - fido_cred_set_uv.
  * Command-line tools for Windows.
  * Documentation and reliability fixes.
  * fido_{assert,cred}_set_options() are now marked as deprecated.</changelog>
  <changelog author="kbabioch@suse.de" date="1575806400">- Version 1.3.0 (2019-11-28)
  * assert/hmac: encode public key as per spec, gh#60.
  * fido2-cred: fix creation of resident keys.
  * fido2-{assert,cred}: support for hmac-secret extension.
  * hid_osx: detect device removal, gh#56.
  * hid_osx: fix device detection in MacOS Catalina.
  * New API calls:
  - fido_assert_set_authdata_raw;
  - fido_assert_sigcount;
  - fido_cred_set_authdata_raw;
  - fido_dev_cancel.
  * Middleware library for use by OpenSSH.
  * Support for biometric enrollment.
  * Support for OpenBSD.
  * Support for self-attestation.</changelog>
  <changelog author="mrueckert@suse.de" date="1583064000">- Version 1.3.1
  - fix zero-ing of le1 and le2 when talking to a U2F device.
  - dropping sk-libfido2 middleware, please find it in the openssh
    tree.</changelog>
  <changelog author="idonmez@suse.com" date="1590408000">- Update to version 1.4.0
  * hid_hidapi: hidapi backend; enable with -DUSE_HIDAPI=1.
  * Fall back to U2F if the key claims to, but does not support FIDO2.
  * FIDO2 credential protection (credprot) support.
  * New API calls:
    + fido_cbor_info_fwversion;
    + fido_cred_prot;
    + fido_cred_set_prot;
    + fido_dev_set_transport_functions;
    + fido_set_log_handler.
  * Fixed EdDSA and RSA self-attestation.</changelog>
  <changelog author="idonmez@suse.com" date="1593691200">- Don't build with hidapi support to fix issues with Yubikey 5Ci
  https://github.com/Yubico/libfido2/issues/190</changelog>
  <changelog author="idonmez@suse.com" date="1593777600">- Create a udev subpackage and ship the udev rule</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595592000">- Cleanup udev rules, trying to use the Debian specific plugdev
  group fills up the journal.
- Make the udev rules package noarch, correct Summary</changelog>
  <changelog author="idonmez@suse.com" date="1598961600">- Update to version 1.5.0
  * hid_linux: return FIDO_OK if no devices are found.
  * hid_osx:
    + repair communication with U2F tokens, gh#166;
    + reliability fixes.
  * fido2-{assert,cred}: new options to explicitly toggle UP, UV.
  * Support for configurable report lengths.
  * New API calls:
    + fido_cbor_info_maxcredcntlst
    + fido_cbor_info_maxcredidlen
    + fido_cred_aaguid_len
    + fido_cred_aaguid_ptr
    + fido_dev_get_touch_begin
    + fido_dev_get_touch_status
  * Use COSE_ECDH_ES256 with CTAP_CBOR_CLIENT_PIN; gh#154.
  * Allow CTAP messages up to 2048 bytes; gh#171.
  * Ensure we only list USB devices by default.</changelog>
  <changelog author="idonmez@suse.com" date="1599652800">- Add 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch from upstream
  to fix 32bit compilation issues.</changelog>
  <changelog author="hpj@suse.com" date="1605614400">- Add Conflicts: to supersede version 1.0.0. This is needed for
  a clean upgrade path on SLE.</changelog>
  <changelog author="mpluskal@suse.com" date="1611144000">- Update to version 1.6.0:
  * Fix OpenSSL 1.0 and Cygwin builds.
  * hid_linux: fix build on 32-bit systems.
  * hid_osx: allow reads from spawned threads.
  * Documentation and reliability fixes.
  * New API calls:
    + fido_cred_authdata_raw_len;
    + fido_cred_authdata_raw_ptr;
    + fido_cred_sigcount;
    + fido_dev_get_uv_retry_count;
    + fido_dev_supports_credman.
  * Hardened Windows build.
  * Native FreeBSD and NetBSD support.
  * Use CTAP2 canonical CBOR when combining hmac-secret and credProtect.
- Drop 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch
- Do not build examples as their build fails</changelog>
  <changelog author="rpm@fthiessen.de" date="1618660800">- Update to version 1.7.0:
  * hid_win: detect devices with vendor or product IDs &gt; 0x7fff
  * Support for FIDO 2.1 authenticator configuration.
  * Support for FIDO 2.1 UV token permissions.
  * Support for FIDO 2.1 "credBlobs" and "largeBlobs" extensions.
  * New API calls
  * New fido_init flag to disable fido_dev_open’s U2F fallback
  * Experimental NFC support on Linux.
- Enabled hidapi again, issues related to hidapi are fixed upstream
  * Added fix-cmake-linking.patch to fix linking</changelog>
  <changelog author="paolo.perego@suse.com" date="1631620800">- Update to version 1.8.0:
  * Dropped 'Requires.private' entry from pkg-config file.
  * Better support for FIDO 2.1 authenticators.
  * Support for Windows's native webauthn API.
  * Support for attestation format 'none'.
  * New API calls:
  - fido_assert_set_clientdata;
  - fido_cbor_info_algorithm_cose;
  - fido_cbor_info_algorithm_count;
  - fido_cbor_info_algorithm_type;
  - fido_cbor_info_transports_len;
  - fido_cbor_info_transports_ptr;
  - fido_cred_set_clientdata;
  - fido_cred_set_id;
  - fido_credman_set_dev_rk;
  - fido_dev_is_winhello.
  * fido2-token: new -Sc option to update a resident credential.
  * Documentation and reliability fixes.
  * HID access serialisation on Linux.
- disable fix-cmake-linking.patch, not needed currently</changelog>
  <changelog author="paolo.perego@suse.com" date="1632225600">- Removed fix-cmake-linking.patch because no longer needed</changelog>
  <changelog author="simmphonie@opensuse.org" date="1635768000">- Version 1.9.0 (2021-10-27)
  * Enabled NFC support on Linux.
  * Added OpenSSL 3.0 compatibility.
  * Removed OpenSSL 1.0 compatibility.
  * Support for FIDO 2.1 "minPinLength" extension.
  * Support for COSE_EDDSA, COSE_ES256, and COSE_RS1 attestation.
  * Support for TPM 2.0 attestation.
  * Support for device timeouts; see fido_dev_set_timeout().
  * New API calls:
  - es256_pk_from_EVP_PKEY;
  - fido_cred_attstmt_len;
  - fido_cred_attstmt_ptr;
  - fido_cred_pin_minlen;
  - fido_cred_set_attstmt;
  - fido_cred_set_pin_minlen;
  - fido_dev_set_pin_minlen_rpid;
  - fido_dev_set_timeout;
  - rs256_pk_from_EVP_PKEY.
  * Reliability and portability fixes.
  * Better handling of HID devices without identification strings; gh#381.
  * Fixed detection of Windows’s native webauthn API; gh#382.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1641816000">- Use BuildRequires: openssl-devel instead of forcing 1.1 since 3.x
  is now supported.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1648468800">- Version 1.10.0 (2022-01-17)
  * hid_osx: handle devices with paths &gt; 511 bytes; gh#462.
  * bio: fix CTAP2 canonical CBOR encoding in fido_bio_dev_enroll_*(); gh#480.
  * winhello: fallback to GetTopWindow() if GetForegroundWindow() fails.
  * winhello: fallback to hid_win.c if webauthn.dll isn’t available.
  * New API calls:
  - fido_dev_info_set;
  - fido_dev_io_handle;
  - fido_dev_new_with_info;
  - fido_dev_open_with_info.
  * Cygwin and NetBSD build fixes.
  * Documentation and reliability fixes.
  * Support for TPM 2.0 attestation of COSE_ES256 credentials.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1664971200">- Version 1.12.0 (2022-09-22)
  * Support for COSE_ES384.
  * Support for hidraw(4) on FreeBSD; gh#597.
  * Improved support for FIDO 2.1 authenticators.
  * New API calls:
    + es384_pk_free;
    + es384_pk_from_EC_KEY;
    + es384_pk_from_EVP_PKEY;
    + es384_pk_from_ptr;
    + es384_pk_new;
    + es384_pk_to_EVP_PKEY;
    + fido_cbor_info_certs_len;
    + fido_cbor_info_certs_name_ptr;
    + fido_cbor_info_certs_value_ptr;
    + fido_cbor_info_maxrpid_minpinlen;
    + fido_cbor_info_minpinlen;
    + fido_cbor_info_new_pin_required;
    + fido_cbor_info_rk_remaining;
    + fido_cbor_info_uv_attempts;
    + fido_cbor_info_uv_modality.
  * Documentation and reliability fixes.
- Version 1.11.0 (2022-05-03)
  * Experimental PCSC support; enable with -DUSE_PCSC.
  * Improved OpenSSL 3.0 compatibility.
  * Use RFC1951 raw deflate to compress CTAP 2.1 largeBlobs.
  * winhello: advertise "uv" instead of "clientPin".
  * winhello: support hmac-secret in fido_dev_get_assert().
  * New API calls:
    + fido_cbor_info_maxlargeblob.
  * Documentation and reliability fixes.
  * Separate build and regress targets.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1677240000">- Version 1.13.0 (2023-02-20)
  * Support for linking against OpenSSL on Windows; gh#668.
  * New API calls:
    + fido_assert_empty_allow_list;
    + fido_cred_empty_exclude_list.
  * fido2-token: fix issue when listing large blobs.
  * Improved support for different fuzzing engines.</changelog>
</package>
<package pkgid="78efcf0dd16dd652f30d7585eac241f4c0dc40aa84254ccf098483b7e258f0ee" name="libfido2" arch="src">
  <version epoch="0" ver="1.13.0" rel="150400.5.3.1"/>
  <changelog author="kbabioch@suse.de" date="1559044800">- Version 1.1.0 (released 2019-05-08)
  * EdDSA (Ed25519) support.
  * fido_dev_make_cred: fix order of CBOR map keys.
  * fido_dev_get_assert: plug memory leak when operating on U2F devices.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1568635200">- Version 1.2.0 (released 2019-07-26)
  * Credential management support.
  * New API reflecting FIDO’s 3-state booleans (true, false, absent):
  - fido_assert_set_up;
  - fido_assert_set_uv;
  - fido_cred_set_rk;
  - fido_cred_set_uv.
  * Command-line tools for Windows.
  * Documentation and reliability fixes.
  * fido_{assert,cred}_set_options() are now marked as deprecated.</changelog>
  <changelog author="kbabioch@suse.de" date="1575806400">- Version 1.3.0 (2019-11-28)
  * assert/hmac: encode public key as per spec, gh#60.
  * fido2-cred: fix creation of resident keys.
  * fido2-{assert,cred}: support for hmac-secret extension.
  * hid_osx: detect device removal, gh#56.
  * hid_osx: fix device detection in MacOS Catalina.
  * New API calls:
  - fido_assert_set_authdata_raw;
  - fido_assert_sigcount;
  - fido_cred_set_authdata_raw;
  - fido_dev_cancel.
  * Middleware library for use by OpenSSH.
  * Support for biometric enrollment.
  * Support for OpenBSD.
  * Support for self-attestation.</changelog>
  <changelog author="mrueckert@suse.de" date="1583064000">- Version 1.3.1
  - fix zero-ing of le1 and le2 when talking to a U2F device.
  - dropping sk-libfido2 middleware, please find it in the openssh
    tree.</changelog>
  <changelog author="idonmez@suse.com" date="1590408000">- Update to version 1.4.0
  * hid_hidapi: hidapi backend; enable with -DUSE_HIDAPI=1.
  * Fall back to U2F if the key claims to, but does not support FIDO2.
  * FIDO2 credential protection (credprot) support.
  * New API calls:
    + fido_cbor_info_fwversion;
    + fido_cred_prot;
    + fido_cred_set_prot;
    + fido_dev_set_transport_functions;
    + fido_set_log_handler.
  * Fixed EdDSA and RSA self-attestation.</changelog>
  <changelog author="idonmez@suse.com" date="1593691200">- Don't build with hidapi support to fix issues with Yubikey 5Ci
  https://github.com/Yubico/libfido2/issues/190</changelog>
  <changelog author="idonmez@suse.com" date="1593777600">- Create a udev subpackage and ship the udev rule</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595592000">- Cleanup udev rules, trying to use the Debian specific plugdev
  group fills up the journal.
- Make the udev rules package noarch, correct Summary</changelog>
  <changelog author="idonmez@suse.com" date="1598961600">- Update to version 1.5.0
  * hid_linux: return FIDO_OK if no devices are found.
  * hid_osx:
    + repair communication with U2F tokens, gh#166;
    + reliability fixes.
  * fido2-{assert,cred}: new options to explicitly toggle UP, UV.
  * Support for configurable report lengths.
  * New API calls:
    + fido_cbor_info_maxcredcntlst
    + fido_cbor_info_maxcredidlen
    + fido_cred_aaguid_len
    + fido_cred_aaguid_ptr
    + fido_dev_get_touch_begin
    + fido_dev_get_touch_status
  * Use COSE_ECDH_ES256 with CTAP_CBOR_CLIENT_PIN; gh#154.
  * Allow CTAP messages up to 2048 bytes; gh#171.
  * Ensure we only list USB devices by default.</changelog>
  <changelog author="idonmez@suse.com" date="1599652800">- Add 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch from upstream
  to fix 32bit compilation issues.</changelog>
  <changelog author="hpj@suse.com" date="1605614400">- Add Conflicts: to supersede version 1.0.0. This is needed for
  a clean upgrade path on SLE.</changelog>
  <changelog author="mpluskal@suse.com" date="1611144000">- Update to version 1.6.0:
  * Fix OpenSSL 1.0 and Cygwin builds.
  * hid_linux: fix build on 32-bit systems.
  * hid_osx: allow reads from spawned threads.
  * Documentation and reliability fixes.
  * New API calls:
    + fido_cred_authdata_raw_len;
    + fido_cred_authdata_raw_ptr;
    + fido_cred_sigcount;
    + fido_dev_get_uv_retry_count;
    + fido_dev_supports_credman.
  * Hardened Windows build.
  * Native FreeBSD and NetBSD support.
  * Use CTAP2 canonical CBOR when combining hmac-secret and credProtect.
- Drop 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch
- Do not build examples as their build fails</changelog>
  <changelog author="rpm@fthiessen.de" date="1618660800">- Update to version 1.7.0:
  * hid_win: detect devices with vendor or product IDs &gt; 0x7fff
  * Support for FIDO 2.1 authenticator configuration.
  * Support for FIDO 2.1 UV token permissions.
  * Support for FIDO 2.1 "credBlobs" and "largeBlobs" extensions.
  * New API calls
  * New fido_init flag to disable fido_dev_open’s U2F fallback
  * Experimental NFC support on Linux.
- Enabled hidapi again, issues related to hidapi are fixed upstream
  * Added fix-cmake-linking.patch to fix linking</changelog>
  <changelog author="paolo.perego@suse.com" date="1631620800">- Update to version 1.8.0:
  * Dropped 'Requires.private' entry from pkg-config file.
  * Better support for FIDO 2.1 authenticators.
  * Support for Windows's native webauthn API.
  * Support for attestation format 'none'.
  * New API calls:
  - fido_assert_set_clientdata;
  - fido_cbor_info_algorithm_cose;
  - fido_cbor_info_algorithm_count;
  - fido_cbor_info_algorithm_type;
  - fido_cbor_info_transports_len;
  - fido_cbor_info_transports_ptr;
  - fido_cred_set_clientdata;
  - fido_cred_set_id;
  - fido_credman_set_dev_rk;
  - fido_dev_is_winhello.
  * fido2-token: new -Sc option to update a resident credential.
  * Documentation and reliability fixes.
  * HID access serialisation on Linux.
- disable fix-cmake-linking.patch, not needed currently</changelog>
  <changelog author="paolo.perego@suse.com" date="1632225600">- Removed fix-cmake-linking.patch because no longer needed</changelog>
  <changelog author="simmphonie@opensuse.org" date="1635768000">- Version 1.9.0 (2021-10-27)
  * Enabled NFC support on Linux.
  * Added OpenSSL 3.0 compatibility.
  * Removed OpenSSL 1.0 compatibility.
  * Support for FIDO 2.1 "minPinLength" extension.
  * Support for COSE_EDDSA, COSE_ES256, and COSE_RS1 attestation.
  * Support for TPM 2.0 attestation.
  * Support for device timeouts; see fido_dev_set_timeout().
  * New API calls:
  - es256_pk_from_EVP_PKEY;
  - fido_cred_attstmt_len;
  - fido_cred_attstmt_ptr;
  - fido_cred_pin_minlen;
  - fido_cred_set_attstmt;
  - fido_cred_set_pin_minlen;
  - fido_dev_set_pin_minlen_rpid;
  - fido_dev_set_timeout;
  - rs256_pk_from_EVP_PKEY.
  * Reliability and portability fixes.
  * Better handling of HID devices without identification strings; gh#381.
  * Fixed detection of Windows’s native webauthn API; gh#382.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1641816000">- Use BuildRequires: openssl-devel instead of forcing 1.1 since 3.x
  is now supported.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1648468800">- Version 1.10.0 (2022-01-17)
  * hid_osx: handle devices with paths &gt; 511 bytes; gh#462.
  * bio: fix CTAP2 canonical CBOR encoding in fido_bio_dev_enroll_*(); gh#480.
  * winhello: fallback to GetTopWindow() if GetForegroundWindow() fails.
  * winhello: fallback to hid_win.c if webauthn.dll isn’t available.
  * New API calls:
  - fido_dev_info_set;
  - fido_dev_io_handle;
  - fido_dev_new_with_info;
  - fido_dev_open_with_info.
  * Cygwin and NetBSD build fixes.
  * Documentation and reliability fixes.
  * Support for TPM 2.0 attestation of COSE_ES256 credentials.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1664971200">- Version 1.12.0 (2022-09-22)
  * Support for COSE_ES384.
  * Support for hidraw(4) on FreeBSD; gh#597.
  * Improved support for FIDO 2.1 authenticators.
  * New API calls:
    + es384_pk_free;
    + es384_pk_from_EC_KEY;
    + es384_pk_from_EVP_PKEY;
    + es384_pk_from_ptr;
    + es384_pk_new;
    + es384_pk_to_EVP_PKEY;
    + fido_cbor_info_certs_len;
    + fido_cbor_info_certs_name_ptr;
    + fido_cbor_info_certs_value_ptr;
    + fido_cbor_info_maxrpid_minpinlen;
    + fido_cbor_info_minpinlen;
    + fido_cbor_info_new_pin_required;
    + fido_cbor_info_rk_remaining;
    + fido_cbor_info_uv_attempts;
    + fido_cbor_info_uv_modality.
  * Documentation and reliability fixes.
- Version 1.11.0 (2022-05-03)
  * Experimental PCSC support; enable with -DUSE_PCSC.
  * Improved OpenSSL 3.0 compatibility.
  * Use RFC1951 raw deflate to compress CTAP 2.1 largeBlobs.
  * winhello: advertise "uv" instead of "clientPin".
  * winhello: support hmac-secret in fido_dev_get_assert().
  * New API calls:
    + fido_cbor_info_maxlargeblob.
  * Documentation and reliability fixes.
  * Separate build and regress targets.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1677240000">- Version 1.13.0 (2023-02-20)
  * Support for linking against OpenSSL on Windows; gh#668.
  * New API calls:
    + fido_assert_empty_allow_list;
    + fido_cred_empty_exclude_list.
  * fido2-token: fix issue when listing large blobs.
  * Improved support for different fuzzing engines.</changelog>
</package>
<package pkgid="b914993fd9830e6c4845256e32c5f47762e9b18d621bb22f33a45669d13c281a" name="libfreebl3" arch="aarch64">
  <version epoch="0" ver="3.101.2" rel="150400.3.48.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
</package>
<package pkgid="dd644ef587f7c38c5314df226feeebccb0930fee350113083950051fe742987e" name="libfreebl3" arch="s390x">
  <version epoch="0" ver="3.101.2" rel="150400.3.48.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
</package>
<package pkgid="2fe28a866a8521e1a63ee54621af7d718a6907e2dc77cc517cb409f55538f0d2" name="libfreebl3" arch="x86_64">
  <version epoch="0" ver="3.101.2" rel="150400.3.48.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
</package>
<package pkgid="723d4a91d710f4d93843a9950f449b4f2aa3d073ef16de234d02e14e9fc40e0e" name="libfreebl3" arch="aarch64">
  <version epoch="0" ver="3.101.2" rel="150400.3.51.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
</package>
<package pkgid="c3bbe43e475fcea6a53aa0869dc3546055a8936fe6996c340b9de46d6ed86fd5" name="libfreebl3" arch="s390x">
  <version epoch="0" ver="3.101.2" rel="150400.3.51.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
</package>
<package pkgid="3a19cf767c866a1a5b46fe33f21846a6c0466eb7e95ef02169778b1da8ef1fbb" name="libfreebl3" arch="x86_64">
  <version epoch="0" ver="3.101.2" rel="150400.3.51.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
</package>
<package pkgid="fa0809363ac3562a3c72b1152ee7f9837656e3cd0ce8aba91970d2364a5eb816" name="libfreebl3" arch="aarch64">
  <version epoch="0" ver="3.90.1" rel="150400.3.35.2"/>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
</package>
<package pkgid="b628c476f53f78236e279ecbeadc084cb6dab4902fffbf96de1c6a5a7d5d749a" name="libfreebl3" arch="s390x">
  <version epoch="0" ver="3.90.1" rel="150400.3.35.2"/>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
</package>
<package pkgid="119fff04cd8b7dc3f21372cc82ec1c807a1f14d2f54a2e2637faa322e70c197d" name="libfreebl3" arch="x86_64">
  <version epoch="0" ver="3.90.1" rel="150400.3.35.2"/>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
</package>
<package pkgid="833ec1e496fea1efc92bff735d90b5afe1381e3b88cdd7527c78c91116060cb1" name="libfreebl3" arch="aarch64">
  <version epoch="0" ver="3.90.2" rel="150400.3.39.1"/>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
</package>
<package pkgid="fb5754a696a7a3eb257da67fc7386e3a61520dbadb1856a31f2385c298eba85d" name="libfreebl3" arch="s390x">
  <version epoch="0" ver="3.90.2" rel="150400.3.39.1"/>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
</package>
<package pkgid="d905152d8d1e47f2485ca2fd512f64ea9e3bff769471324fc6b15536fb72a515" name="libfreebl3" arch="x86_64">
  <version epoch="0" ver="3.90.2" rel="150400.3.39.1"/>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
</package>
<package pkgid="457c67dd411afe34f6c607c7a56d067fd4f9d943b6f00c2872171b86b838e1d3" name="libfwup1" arch="x86_64">
  <version epoch="0" ver="12" rel="150100.11.15.2"/>
  <changelog author="glin@suse.com" date="1469102400">- Amend the spec file to detect SLE/openSUSE (bsc#990228)</changelog>
  <changelog author="glin@suse.com" date="1469707200">- Relax the requirement of efivar-devel and disable the efivar API
  patch for openSUSE Leap 42.x and SLE</changelog>
  <changelog author="rw@suse.com" date="1489060800">- Enable efivar API patch based on pkg-config data and require
  at least gnu-efi-3.0.2.  (ramification of FATE#322108)</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Remove the debug source and info of the EFI files when disabling
  the debug build (bsc#1031554)
  + Also remove the efi-debuginfo subpackage since the debug file
    is packaged correctly now.</changelog>
  <changelog author="glin@suse.com" date="1504008000">- Update to 9+git21.gcd8f7d7 (FATE#322805)
- Add the new BuildRequires: libsmbios-devel
- Update the so version of libfwup
- Refresh fwupdate-suse-build.patch
- Remove the upstream patches
  + fwupdate-fix-efivar-0.24-api.patch
  + fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch
  + fwupdate-unset-immutable-flag.patch
- Drop fwupdate-bsc988886-add-leading-space.patch (Need shim &gt;= 11)
- Add fwupdate-list-firmware-types.patch to list the supported
  firmware types</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Add back fwupdate-bsc988886-add-leading-space.patch due to the
  long pending shim signature request. Also drop the shim version
  requirement.</changelog>
  <changelog author="mls@suse.de" date="1513252800">- disable _unique_debug_names fow now
  fwupdate wants to install it's own debug files, but doesn't know
  about this option yet</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513339200">- EFI updates through fwupdate are also possible on Aarch64.
  smbios support is only relevant for some Dell machines, i.e.
  x86 only.</changelog>
  <changelog author="mls@suse.de" date="1513598400">- bring back accidental removed needssslcertforbuild</changelog>
  <changelog author="glin@suse.com" date="1518177600">- Remove fwupdate-bsc988886-add-leading-space.patch and bump the
  shim version requirement since we got the new signature for shim
  (bsc#1054712)</changelog>
  <changelog author="glin@suse.com" date="1523275200">- Require shim only for x86_64 (bsc#1088434)</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 11
  + lots of fixes from cov-scan and clang analyzer
  + support for Lenovo machines
  + experimental support for UI Capsules
  + Dell WMI support
  + lots of bugfixes
  + configurable EFI ESP location by setting ESPMOUNTPOINT or the git
    config property fwupdate.espmountdir during the build.
  + Lots of coverity work
  + ABI compatibility checking during the release process
  + Make subdirectory builds work
- removed fwupdate-list-firmware-types.patch</changelog>
  <changelog author="glin@suse.com" date="1530187200">- Correct the requirement of efivar-devel version</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532001600">- Update to version 12 (FATE#326702)
  + Better CI.
  + Limit how large our WMI buffer can be.
  + Add fwup_version() because fwupd wants it.
  + Fix linking on (some) platforms that need libgcc_eh.a.
  + abicheck improvements.
  + Default to creating a UX capsule, whatever it may actually do.
- Refresh fwupdate-suse-build.patch with quilt.
- Use url for source tarball and license tag for COPYING.</changelog>
  <changelog author="glin@suse.com" date="1540296000">- Amend the spec file to avoid fwup*.efi from being removed
  mistakenly (bsc#1112832)</changelog>
  <changelog author="rw@suse.com" date="1547726400">- Move 'efi'-executables to '/usr/share/efi'  (FATE#326960)</changelog>
  <changelog author="glin@suse.com" date="1548676800">- Fix the destination of 'efi'-executables for i586 (FATE#326960)</changelog>
  <changelog author="glin@suse.com" date="1571227200">- Add fwupdate-bsc1152928-update-aarch64-linker-script.patch to
  update the linker script for AArch64 to match the one in
  gnu-efi (bsc#1152928)</changelog>
  <changelog author="glin@suse.com" date="1617105600">- Add fwupdate-bsc1182057-add-sbat-support.patch to add SBAT
  section to EFI images (bsc#1182057)
  + Also specify the vendor SBAT</changelog>
  <changelog author="glin@suse.com" date="1710331200">- Update the email address of security team in SBAT (bsc#1221301)
- Update fwupdate-bsc1182057-add-sbat-support.patch for
  elf_aarch64_efi.lds to set the memory permission explicitly to
  avoid ld warning like "LOAD segment with RWX permissions"</changelog>
</package>
<package pkgid="a81e2592721bba2f97cb46e5ee1ad9cb80da4e186bf931acea8d172bb6c16483" name="libgbm1" arch="aarch64">
  <version epoch="0" ver="22.3.5" rel="150500.77.2.1"/>
  <changelog author="sndirsch@suse.com" date="1667908800">- third bugfix release
  * some regressions in CI worked out
  * a bit of everything, and nothing too crazy
- supersedes u_0001-gallivm-Fix-LLVM-optimization-with-the-new-pass-mana.patch
- supersedes u_nouveau-corrupted-colors-boo1203949.patch
- get rid of Mesa-libVulkan-devel(-32bit) package, which is no
  longer needed at all by providing/obsoleting it by
  libvulkan_intel</changelog>
  <changelog author="sndirsch@suse.com" date="1668513600">- try to fix build on ppc64le due to running OOM (boo#1205441)
  * let's request 20G of physical memory via _constraints file</changelog>
  <changelog author="dmueller@suse.com" date="1668686400">- update to 22.2.4:
  * clover: windows:  library filename has \`-1` suffix and a \`lib` prefix
    when built with mingw
  * radv, dxvk: Rendering errors in World of Tanks after "Switch to dynamic
    rendering only"
  * gen9 gt3e/gt4e skus fail dEQP-VK.pipeline.multisample.sample_locations_ext.*
  * v3d: Wrong colors (pink) in videos in Firefox (likely YUV-&gt;RGB shader issue)
  * panfrost t860 glmark-es2 regression
  * radv: Flickering in Spider-Man Remastered (Regression) (Bisected)
  * radv: Hitman 2 using Direct3D 12 has discolored squares on RDNA2 with DCC
    enabled
  * panfrost/midgard -  on Duckstation PSX emulator: segfault on GLES 3.0 and
    bad shader compilations on 3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1670068800">- spefile: removed Release lines from libxatracker2,
  libxatracker-devel packages in the hope to have reproducibly
  builds also on Tumbleweed (boo#1205998)</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1672315200">- Update to version 22.3.0:
  * See https://docs.mesa3d.org/relnotes/22.3.0.html
- Update to version 22.3.1:
  * See https://docs.mesa3d.org/relnotes/22.3.1.html
- Update to version 22.3.2:
  * See https://docs.mesa3d.org/relnotes/22.3.2.html
- Remove the libXvMC_nouveau and libXvMC_r600 packages as XVMC
  support was removed.
- Add libvdpau_virtio_gpu package for VirtIO GPU.
- Rebase n_drirc-disable-rgb10-for-chromium-on-amd.patch.
- Rebase u_dep_xcb.patch.
- Rebase U_fix-mpeg1_2-decode-mesa-20.2.patch.
- Drop n_buildfix-21.3.0.patch: fixed upstream.</changelog>
  <changelog author="sndirsch@suse.com" date="1672488000">- don't try to generate libvdpau_virtio_gpu package on ppc64le; for
  some reason this driver doesn't get built on this platform</changelog>
  <changelog author="schwab@suse.de" date="1672660800">- Update list of gallium-drivers to match default list</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1673438400">- Update to version 22.3.3:
  * See https://docs.mesa3d.org/relnotes/22.3.3.html</changelog>
  <changelog author="mardnh@gmx.de" date="1673784000">- Fix some deprecation warnings
  * WARNING: option "false" deprecated, please use "disabled" instead.
  * WARNING: option "true" deprecated, please use "enabled" instead.</changelog>
  <changelog author="hp@urpla.net" date="1673870400">- Compile with gcc12 on Leaps: building drivers fails with:
  /usr/include/dxguids/dxguids.h:70:1: internal compiler error:
  in cxx_eval_bit_field_ref, at cp/constexpr.c:2578</changelog>
  <changelog author="mardnh@gmx.de" date="1673870401">- Add support for Rusticl - Mesa's new OpenCL implementation.
  * See https://docs.mesa3d.org/rusticl
  You will need to set your environment to use it
  * See https://docs.mesa3d.org/envvars#rusticl-environment-variables</changelog>
  <changelog author="sndirsch@suse.com" date="1674475200">- re-enable build on Leap, but only for 15.5; there is no gcc12
  on Leap 15.4, which is now officially required by Mesa 22.3</changelog>
  <changelog author="manfred.h@gmx.net" date="1674561600">- Add BuildRequires for x264 and x265 in case video_codecs should
  be built.</changelog>
  <changelog author="sndirsch@suse.com" date="1674561601">- force usage of gcc 12 only on Leap 15.5; there is no gcc12 on
  Leap 15.4</changelog>
  <changelog author="sndirsch@suse.com" date="1674820800">- using gcc 12 now also on Leap 15.4; after changing build project
  to openSUSE:Leap:15.4:Update gcc 12 packages are found now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1674820801">- removing again BuildRequires for x264 and x265 in case
  video_codecs should be built (these were never needed nor used
  for build)</changelog>
  <changelog author="sndirsch@suse.com" date="1674820802">- Update to version 22.3.4
  * bug fix release which fixes bugs found since Mesa 22.3.3
  * see https://docs.mesa3d.org/relnotes/22.3.4.html for more
    details</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- Don't enable rusticl without opencl</changelog>
  <changelog author="sndirsch@suse.com" date="1675944000">- Update to version 22.3.5
  * bug fix release which fixes bugs found since Mesa 22.3.4
  * see https://docs.mesa3d.org/relnotes/22.3.5.html for more
    details
- refreshed u_dep_xcb.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1676030400">- U_ReturnME.patch
  * fixes blackscreen in Return To Monkey Island on Intel graphics
    (boo#1208145)</changelog>
</package>
<package pkgid="799ad49581ee1c65adecc04fe2e8f9ce461bcad9f7fc8528b30b3884a2ed9a22" name="libgbm1" arch="s390x">
  <version epoch="0" ver="22.3.5" rel="150500.77.2.1"/>
  <changelog author="sndirsch@suse.com" date="1667908800">- third bugfix release
  * some regressions in CI worked out
  * a bit of everything, and nothing too crazy
- supersedes u_0001-gallivm-Fix-LLVM-optimization-with-the-new-pass-mana.patch
- supersedes u_nouveau-corrupted-colors-boo1203949.patch
- get rid of Mesa-libVulkan-devel(-32bit) package, which is no
  longer needed at all by providing/obsoleting it by
  libvulkan_intel</changelog>
  <changelog author="sndirsch@suse.com" date="1668513600">- try to fix build on ppc64le due to running OOM (boo#1205441)
  * let's request 20G of physical memory via _constraints file</changelog>
  <changelog author="dmueller@suse.com" date="1668686400">- update to 22.2.4:
  * clover: windows:  library filename has \`-1` suffix and a \`lib` prefix
    when built with mingw
  * radv, dxvk: Rendering errors in World of Tanks after "Switch to dynamic
    rendering only"
  * gen9 gt3e/gt4e skus fail dEQP-VK.pipeline.multisample.sample_locations_ext.*
  * v3d: Wrong colors (pink) in videos in Firefox (likely YUV-&gt;RGB shader issue)
  * panfrost t860 glmark-es2 regression
  * radv: Flickering in Spider-Man Remastered (Regression) (Bisected)
  * radv: Hitman 2 using Direct3D 12 has discolored squares on RDNA2 with DCC
    enabled
  * panfrost/midgard -  on Duckstation PSX emulator: segfault on GLES 3.0 and
    bad shader compilations on 3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1670068800">- spefile: removed Release lines from libxatracker2,
  libxatracker-devel packages in the hope to have reproducibly
  builds also on Tumbleweed (boo#1205998)</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1672315200">- Update to version 22.3.0:
  * See https://docs.mesa3d.org/relnotes/22.3.0.html
- Update to version 22.3.1:
  * See https://docs.mesa3d.org/relnotes/22.3.1.html
- Update to version 22.3.2:
  * See https://docs.mesa3d.org/relnotes/22.3.2.html
- Remove the libXvMC_nouveau and libXvMC_r600 packages as XVMC
  support was removed.
- Add libvdpau_virtio_gpu package for VirtIO GPU.
- Rebase n_drirc-disable-rgb10-for-chromium-on-amd.patch.
- Rebase u_dep_xcb.patch.
- Rebase U_fix-mpeg1_2-decode-mesa-20.2.patch.
- Drop n_buildfix-21.3.0.patch: fixed upstream.</changelog>
  <changelog author="sndirsch@suse.com" date="1672488000">- don't try to generate libvdpau_virtio_gpu package on ppc64le; for
  some reason this driver doesn't get built on this platform</changelog>
  <changelog author="schwab@suse.de" date="1672660800">- Update list of gallium-drivers to match default list</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1673438400">- Update to version 22.3.3:
  * See https://docs.mesa3d.org/relnotes/22.3.3.html</changelog>
  <changelog author="mardnh@gmx.de" date="1673784000">- Fix some deprecation warnings
  * WARNING: option "false" deprecated, please use "disabled" instead.
  * WARNING: option "true" deprecated, please use "enabled" instead.</changelog>
  <changelog author="hp@urpla.net" date="1673870400">- Compile with gcc12 on Leaps: building drivers fails with:
  /usr/include/dxguids/dxguids.h:70:1: internal compiler error:
  in cxx_eval_bit_field_ref, at cp/constexpr.c:2578</changelog>
  <changelog author="mardnh@gmx.de" date="1673870401">- Add support for Rusticl - Mesa's new OpenCL implementation.
  * See https://docs.mesa3d.org/rusticl
  You will need to set your environment to use it
  * See https://docs.mesa3d.org/envvars#rusticl-environment-variables</changelog>
  <changelog author="sndirsch@suse.com" date="1674475200">- re-enable build on Leap, but only for 15.5; there is no gcc12
  on Leap 15.4, which is now officially required by Mesa 22.3</changelog>
  <changelog author="manfred.h@gmx.net" date="1674561600">- Add BuildRequires for x264 and x265 in case video_codecs should
  be built.</changelog>
  <changelog author="sndirsch@suse.com" date="1674561601">- force usage of gcc 12 only on Leap 15.5; there is no gcc12 on
  Leap 15.4</changelog>
  <changelog author="sndirsch@suse.com" date="1674820800">- using gcc 12 now also on Leap 15.4; after changing build project
  to openSUSE:Leap:15.4:Update gcc 12 packages are found now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1674820801">- removing again BuildRequires for x264 and x265 in case
  video_codecs should be built (these were never needed nor used
  for build)</changelog>
  <changelog author="sndirsch@suse.com" date="1674820802">- Update to version 22.3.4
  * bug fix release which fixes bugs found since Mesa 22.3.3
  * see https://docs.mesa3d.org/relnotes/22.3.4.html for more
    details</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- Don't enable rusticl without opencl</changelog>
  <changelog author="sndirsch@suse.com" date="1675944000">- Update to version 22.3.5
  * bug fix release which fixes bugs found since Mesa 22.3.4
  * see https://docs.mesa3d.org/relnotes/22.3.5.html for more
    details
- refreshed u_dep_xcb.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1676030400">- U_ReturnME.patch
  * fixes blackscreen in Return To Monkey Island on Intel graphics
    (boo#1208145)</changelog>
</package>
<package pkgid="bb7d16a1e23cbe4a0bccc8047826d6daf4e227962b53486039eb9f527ad9e9e4" name="libgbm1" arch="x86_64">
  <version epoch="0" ver="22.3.5" rel="150500.77.2.1"/>
  <changelog author="sndirsch@suse.com" date="1667908800">- third bugfix release
  * some regressions in CI worked out
  * a bit of everything, and nothing too crazy
- supersedes u_0001-gallivm-Fix-LLVM-optimization-with-the-new-pass-mana.patch
- supersedes u_nouveau-corrupted-colors-boo1203949.patch
- get rid of Mesa-libVulkan-devel(-32bit) package, which is no
  longer needed at all by providing/obsoleting it by
  libvulkan_intel</changelog>
  <changelog author="sndirsch@suse.com" date="1668513600">- try to fix build on ppc64le due to running OOM (boo#1205441)
  * let's request 20G of physical memory via _constraints file</changelog>
  <changelog author="dmueller@suse.com" date="1668686400">- update to 22.2.4:
  * clover: windows:  library filename has \`-1` suffix and a \`lib` prefix
    when built with mingw
  * radv, dxvk: Rendering errors in World of Tanks after "Switch to dynamic
    rendering only"
  * gen9 gt3e/gt4e skus fail dEQP-VK.pipeline.multisample.sample_locations_ext.*
  * v3d: Wrong colors (pink) in videos in Firefox (likely YUV-&gt;RGB shader issue)
  * panfrost t860 glmark-es2 regression
  * radv: Flickering in Spider-Man Remastered (Regression) (Bisected)
  * radv: Hitman 2 using Direct3D 12 has discolored squares on RDNA2 with DCC
    enabled
  * panfrost/midgard -  on Duckstation PSX emulator: segfault on GLES 3.0 and
    bad shader compilations on 3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1670068800">- spefile: removed Release lines from libxatracker2,
  libxatracker-devel packages in the hope to have reproducibly
  builds also on Tumbleweed (boo#1205998)</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1672315200">- Update to version 22.3.0:
  * See https://docs.mesa3d.org/relnotes/22.3.0.html
- Update to version 22.3.1:
  * See https://docs.mesa3d.org/relnotes/22.3.1.html
- Update to version 22.3.2:
  * See https://docs.mesa3d.org/relnotes/22.3.2.html
- Remove the libXvMC_nouveau and libXvMC_r600 packages as XVMC
  support was removed.
- Add libvdpau_virtio_gpu package for VirtIO GPU.
- Rebase n_drirc-disable-rgb10-for-chromium-on-amd.patch.
- Rebase u_dep_xcb.patch.
- Rebase U_fix-mpeg1_2-decode-mesa-20.2.patch.
- Drop n_buildfix-21.3.0.patch: fixed upstream.</changelog>
  <changelog author="sndirsch@suse.com" date="1672488000">- don't try to generate libvdpau_virtio_gpu package on ppc64le; for
  some reason this driver doesn't get built on this platform</changelog>
  <changelog author="schwab@suse.de" date="1672660800">- Update list of gallium-drivers to match default list</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1673438400">- Update to version 22.3.3:
  * See https://docs.mesa3d.org/relnotes/22.3.3.html</changelog>
  <changelog author="mardnh@gmx.de" date="1673784000">- Fix some deprecation warnings
  * WARNING: option "false" deprecated, please use "disabled" instead.
  * WARNING: option "true" deprecated, please use "enabled" instead.</changelog>
  <changelog author="hp@urpla.net" date="1673870400">- Compile with gcc12 on Leaps: building drivers fails with:
  /usr/include/dxguids/dxguids.h:70:1: internal compiler error:
  in cxx_eval_bit_field_ref, at cp/constexpr.c:2578</changelog>
  <changelog author="mardnh@gmx.de" date="1673870401">- Add support for Rusticl - Mesa's new OpenCL implementation.
  * See https://docs.mesa3d.org/rusticl
  You will need to set your environment to use it
  * See https://docs.mesa3d.org/envvars#rusticl-environment-variables</changelog>
  <changelog author="sndirsch@suse.com" date="1674475200">- re-enable build on Leap, but only for 15.5; there is no gcc12
  on Leap 15.4, which is now officially required by Mesa 22.3</changelog>
  <changelog author="manfred.h@gmx.net" date="1674561600">- Add BuildRequires for x264 and x265 in case video_codecs should
  be built.</changelog>
  <changelog author="sndirsch@suse.com" date="1674561601">- force usage of gcc 12 only on Leap 15.5; there is no gcc12 on
  Leap 15.4</changelog>
  <changelog author="sndirsch@suse.com" date="1674820800">- using gcc 12 now also on Leap 15.4; after changing build project
  to openSUSE:Leap:15.4:Update gcc 12 packages are found now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1674820801">- removing again BuildRequires for x264 and x265 in case
  video_codecs should be built (these were never needed nor used
  for build)</changelog>
  <changelog author="sndirsch@suse.com" date="1674820802">- Update to version 22.3.4
  * bug fix release which fixes bugs found since Mesa 22.3.3
  * see https://docs.mesa3d.org/relnotes/22.3.4.html for more
    details</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- Don't enable rusticl without opencl</changelog>
  <changelog author="sndirsch@suse.com" date="1675944000">- Update to version 22.3.5
  * bug fix release which fixes bugs found since Mesa 22.3.4
  * see https://docs.mesa3d.org/relnotes/22.3.5.html for more
    details
- refreshed u_dep_xcb.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1676030400">- U_ReturnME.patch
  * fixes blackscreen in Return To Monkey Island on Intel graphics
    (boo#1208145)</changelog>
</package>
<package pkgid="306cbfaede71db3d1fa6e519253f52f5f5c0128bacb3d227fbb9af45644cf2b4" name="libgcc_s1" arch="aarch64">
  <version epoch="0" ver="13.2.1+git7813" rel="150000.1.3.3"/>
  <changelog author="mliska@suse.cz" date="1679659200">- Use --enable-link-serialization rather that --enable-link-mutex,
  the benefit of the former one is that the linker jobs are not
  holding tokens of the make's jobserver.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1679659201">- Add %limit_build for gcc13 to avoid OOM</changelog>
  <changelog author="mliska@suse.cz" date="1680609600">- Bump to d0b961b802dd7d9d555ff4515835a479329326e9, git6995.</changelog>
  <changelog author="schwab@suse.de" date="1681214400">- riscv-atomic.patch: RISC-V: Add support for inlining subword atomic
  operations
- riscv-pthread.patch: Don't add -latomic with -pthread</changelog>
  <changelog author="mliska@suse.cz" date="1681214401">- Add new x86-related intrinsics (amxcomplexintrin.h).</changelog>
  <changelog author="mliska@suse.cz" date="1681300800">- Bump to d339e9802f758e051b0a1ef6db732ff846cbf4e3, git7162.</changelog>
  <changelog author="rguenther@suse.com" date="1682078400">- Bump to f980561c60b0446cc427595198d7f3f4f90e0924, git7231.
  * fixes compile-time issue reported in [bsc#1210557]
  * GCC 13.1 RC3
- Disable building the rust frontend.</changelog>
  <changelog author="rguenther@suse.com" date="1682596800">- Bump to 910735c5d7ce7607384fc1eec4189e90c8ae5c84, git7256.
  * Includes GCC 13.1 release and first bugfixes
- Update riscv-atomic.patch from the version committed upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1684756800">- Bump to dd36656ada05731c069ecd5b1878380294fb1f3e, git7364.
  * Includes the RISC-V atomic changes
- Remove riscv-atomic.patch and riscv-pthread.patch now included
- Make libstdc++6-devel packages own their directories since they
  can be installed standalone.  [bsc#1211427]</changelog>
  <changelog author="rguenther@suse.com" date="1686657600">- Raise architecture levels for ALP.  [PED-153]
  * Raise POWER architecture baseline to power9.  [PED-2005]
  * Raise x86-64 architecture baseline to x86-64-v2 for ALP.  [PED-252]
  * Delay raising s390x architecture baseline to z14.  [PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1687953600">- Bump to a533ded17fb13cbbb2fa5133ecd470360f66c5cf, git7489.
- Add gcc13-pr110334.patch to fix missed optimization in Skia
  resulting in Firefox crashes when building with LTO.  [boo#1212101]</changelog>
  <changelog author="rguenther@suse.com" date="1688990400">- Bump to f9781fcf733ca3afe5b5811afd8ecbb18d9d3a11, git7552
- Remove gcc13-pr110334.patch again as it breaks libreoffice build.</changelog>
  <changelog author="schwab@suse.de" date="1689076800">- Also handle -static-pie in the default-PIE specs</changelog>
  <changelog author="rguenther@suse.com" date="1689854400">- Bump to 9aac37ab8a7b919a89c6d64bc7107a8436996e93, git7597
  * GCC 13.2 RC1
- Add rpmlint filter for SLE12 complaining about invalid licenses.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- gdcflags.patch: Use substituted GDCFLAGS
- Filter out -Werror=return-type from D compile flags</changelog>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
</package>
<package pkgid="2abf1900bcf0f09242833eb5b1700d90632148464e915f7dbb8c0c9a39c908a1" name="libgcc_s1" arch="s390x">
  <version epoch="0" ver="13.2.1+git7813" rel="150000.1.3.3"/>
  <changelog author="mliska@suse.cz" date="1679659200">- Use --enable-link-serialization rather that --enable-link-mutex,
  the benefit of the former one is that the linker jobs are not
  holding tokens of the make's jobserver.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1679659201">- Add %limit_build for gcc13 to avoid OOM</changelog>
  <changelog author="mliska@suse.cz" date="1680609600">- Bump to d0b961b802dd7d9d555ff4515835a479329326e9, git6995.</changelog>
  <changelog author="schwab@suse.de" date="1681214400">- riscv-atomic.patch: RISC-V: Add support for inlining subword atomic
  operations
- riscv-pthread.patch: Don't add -latomic with -pthread</changelog>
  <changelog author="mliska@suse.cz" date="1681214401">- Add new x86-related intrinsics (amxcomplexintrin.h).</changelog>
  <changelog author="mliska@suse.cz" date="1681300800">- Bump to d339e9802f758e051b0a1ef6db732ff846cbf4e3, git7162.</changelog>
  <changelog author="rguenther@suse.com" date="1682078400">- Bump to f980561c60b0446cc427595198d7f3f4f90e0924, git7231.
  * fixes compile-time issue reported in [bsc#1210557]
  * GCC 13.1 RC3
- Disable building the rust frontend.</changelog>
  <changelog author="rguenther@suse.com" date="1682596800">- Bump to 910735c5d7ce7607384fc1eec4189e90c8ae5c84, git7256.
  * Includes GCC 13.1 release and first bugfixes
- Update riscv-atomic.patch from the version committed upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1684756800">- Bump to dd36656ada05731c069ecd5b1878380294fb1f3e, git7364.
  * Includes the RISC-V atomic changes
- Remove riscv-atomic.patch and riscv-pthread.patch now included
- Make libstdc++6-devel packages own their directories since they
  can be installed standalone.  [bsc#1211427]</changelog>
  <changelog author="rguenther@suse.com" date="1686657600">- Raise architecture levels for ALP.  [PED-153]
  * Raise POWER architecture baseline to power9.  [PED-2005]
  * Raise x86-64 architecture baseline to x86-64-v2 for ALP.  [PED-252]
  * Delay raising s390x architecture baseline to z14.  [PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1687953600">- Bump to a533ded17fb13cbbb2fa5133ecd470360f66c5cf, git7489.
- Add gcc13-pr110334.patch to fix missed optimization in Skia
  resulting in Firefox crashes when building with LTO.  [boo#1212101]</changelog>
  <changelog author="rguenther@suse.com" date="1688990400">- Bump to f9781fcf733ca3afe5b5811afd8ecbb18d9d3a11, git7552
- Remove gcc13-pr110334.patch again as it breaks libreoffice build.</changelog>
  <changelog author="schwab@suse.de" date="1689076800">- Also handle -static-pie in the default-PIE specs</changelog>
  <changelog author="rguenther@suse.com" date="1689854400">- Bump to 9aac37ab8a7b919a89c6d64bc7107a8436996e93, git7597
  * GCC 13.2 RC1
- Add rpmlint filter for SLE12 complaining about invalid licenses.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- gdcflags.patch: Use substituted GDCFLAGS
- Filter out -Werror=return-type from D compile flags</changelog>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
</package>
<package pkgid="3b5b525e46b769487d743fac4988e8490749360dab266f3f43178d3341d7bf5a" name="libgcc_s1" arch="x86_64">
  <version epoch="0" ver="13.2.1+git7813" rel="150000.1.3.3"/>
  <changelog author="mliska@suse.cz" date="1679659200">- Use --enable-link-serialization rather that --enable-link-mutex,
  the benefit of the former one is that the linker jobs are not
  holding tokens of the make's jobserver.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1679659201">- Add %limit_build for gcc13 to avoid OOM</changelog>
  <changelog author="mliska@suse.cz" date="1680609600">- Bump to d0b961b802dd7d9d555ff4515835a479329326e9, git6995.</changelog>
  <changelog author="schwab@suse.de" date="1681214400">- riscv-atomic.patch: RISC-V: Add support for inlining subword atomic
  operations
- riscv-pthread.patch: Don't add -latomic with -pthread</changelog>
  <changelog author="mliska@suse.cz" date="1681214401">- Add new x86-related intrinsics (amxcomplexintrin.h).</changelog>
  <changelog author="mliska@suse.cz" date="1681300800">- Bump to d339e9802f758e051b0a1ef6db732ff846cbf4e3, git7162.</changelog>
  <changelog author="rguenther@suse.com" date="1682078400">- Bump to f980561c60b0446cc427595198d7f3f4f90e0924, git7231.
  * fixes compile-time issue reported in [bsc#1210557]
  * GCC 13.1 RC3
- Disable building the rust frontend.</changelog>
  <changelog author="rguenther@suse.com" date="1682596800">- Bump to 910735c5d7ce7607384fc1eec4189e90c8ae5c84, git7256.
  * Includes GCC 13.1 release and first bugfixes
- Update riscv-atomic.patch from the version committed upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1684756800">- Bump to dd36656ada05731c069ecd5b1878380294fb1f3e, git7364.
  * Includes the RISC-V atomic changes
- Remove riscv-atomic.patch and riscv-pthread.patch now included
- Make libstdc++6-devel packages own their directories since they
  can be installed standalone.  [bsc#1211427]</changelog>
  <changelog author="rguenther@suse.com" date="1686657600">- Raise architecture levels for ALP.  [PED-153]
  * Raise POWER architecture baseline to power9.  [PED-2005]
  * Raise x86-64 architecture baseline to x86-64-v2 for ALP.  [PED-252]
  * Delay raising s390x architecture baseline to z14.  [PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1687953600">- Bump to a533ded17fb13cbbb2fa5133ecd470360f66c5cf, git7489.
- Add gcc13-pr110334.patch to fix missed optimization in Skia
  resulting in Firefox crashes when building with LTO.  [boo#1212101]</changelog>
  <changelog author="rguenther@suse.com" date="1688990400">- Bump to f9781fcf733ca3afe5b5811afd8ecbb18d9d3a11, git7552
- Remove gcc13-pr110334.patch again as it breaks libreoffice build.</changelog>
  <changelog author="schwab@suse.de" date="1689076800">- Also handle -static-pie in the default-PIE specs</changelog>
  <changelog author="rguenther@suse.com" date="1689854400">- Bump to 9aac37ab8a7b919a89c6d64bc7107a8436996e93, git7597
  * GCC 13.2 RC1
- Add rpmlint filter for SLE12 complaining about invalid licenses.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- gdcflags.patch: Use substituted GDCFLAGS
- Filter out -Werror=return-type from D compile flags</changelog>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
</package>
<package pkgid="17d742be36e9ba140f264d0c5c9668b90098ac1dab8e8f8ce5fddd0dc78c91f9" name="libgcc_s1" arch="aarch64">
  <version epoch="0" ver="13.2.1+git7813" rel="150000.1.6.1"/>
  <changelog author="mliska@suse.cz" date="1680609600">- Bump to d0b961b802dd7d9d555ff4515835a479329326e9, git6995.</changelog>
  <changelog author="schwab@suse.de" date="1681214400">- riscv-atomic.patch: RISC-V: Add support for inlining subword atomic
  operations
- riscv-pthread.patch: Don't add -latomic with -pthread</changelog>
  <changelog author="mliska@suse.cz" date="1681214401">- Add new x86-related intrinsics (amxcomplexintrin.h).</changelog>
  <changelog author="mliska@suse.cz" date="1681300800">- Bump to d339e9802f758e051b0a1ef6db732ff846cbf4e3, git7162.</changelog>
  <changelog author="rguenther@suse.com" date="1682078400">- Bump to f980561c60b0446cc427595198d7f3f4f90e0924, git7231.
  * fixes compile-time issue reported in [bsc#1210557]
  * GCC 13.1 RC3
- Disable building the rust frontend.</changelog>
  <changelog author="rguenther@suse.com" date="1682596800">- Bump to 910735c5d7ce7607384fc1eec4189e90c8ae5c84, git7256.
  * Includes GCC 13.1 release and first bugfixes
- Update riscv-atomic.patch from the version committed upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1684756800">- Bump to dd36656ada05731c069ecd5b1878380294fb1f3e, git7364.
  * Includes the RISC-V atomic changes
- Remove riscv-atomic.patch and riscv-pthread.patch now included
- Make libstdc++6-devel packages own their directories since they
  can be installed standalone.  [bsc#1211427]</changelog>
  <changelog author="rguenther@suse.com" date="1686657600">- Raise architecture levels for ALP.  [PED-153]
  * Raise POWER architecture baseline to power9.  [PED-2005]
  * Raise x86-64 architecture baseline to x86-64-v2 for ALP.  [PED-252]
  * Delay raising s390x architecture baseline to z14.  [PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1687953600">- Bump to a533ded17fb13cbbb2fa5133ecd470360f66c5cf, git7489.
- Add gcc13-pr110334.patch to fix missed optimization in Skia
  resulting in Firefox crashes when building with LTO.  [boo#1212101]</changelog>
  <changelog author="rguenther@suse.com" date="1688990400">- Bump to f9781fcf733ca3afe5b5811afd8ecbb18d9d3a11, git7552
- Remove gcc13-pr110334.patch again as it breaks libreoffice build.</changelog>
  <changelog author="schwab@suse.de" date="1689076800">- Also handle -static-pie in the default-PIE specs</changelog>
  <changelog author="rguenther@suse.com" date="1689854400">- Bump to 9aac37ab8a7b919a89c6d64bc7107a8436996e93, git7597
  * GCC 13.2 RC1
- Add rpmlint filter for SLE12 complaining about invalid licenses.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- gdcflags.patch: Use substituted GDCFLAGS
- Filter out -Werror=return-type from D compile flags</changelog>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
</package>
<package pkgid="351e1f38cc78a2518687e8aeb04f0767d18a7d12ea7e7ff161d3435b770633e7" name="libgcc_s1" arch="s390x">
  <version epoch="0" ver="13.2.1+git7813" rel="150000.1.6.1"/>
  <changelog author="mliska@suse.cz" date="1680609600">- Bump to d0b961b802dd7d9d555ff4515835a479329326e9, git6995.</changelog>
  <changelog author="schwab@suse.de" date="1681214400">- riscv-atomic.patch: RISC-V: Add support for inlining subword atomic
  operations
- riscv-pthread.patch: Don't add -latomic with -pthread</changelog>
  <changelog author="mliska@suse.cz" date="1681214401">- Add new x86-related intrinsics (amxcomplexintrin.h).</changelog>
  <changelog author="mliska@suse.cz" date="1681300800">- Bump to d339e9802f758e051b0a1ef6db732ff846cbf4e3, git7162.</changelog>
  <changelog author="rguenther@suse.com" date="1682078400">- Bump to f980561c60b0446cc427595198d7f3f4f90e0924, git7231.
  * fixes compile-time issue reported in [bsc#1210557]
  * GCC 13.1 RC3
- Disable building the rust frontend.</changelog>
  <changelog author="rguenther@suse.com" date="1682596800">- Bump to 910735c5d7ce7607384fc1eec4189e90c8ae5c84, git7256.
  * Includes GCC 13.1 release and first bugfixes
- Update riscv-atomic.patch from the version committed upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1684756800">- Bump to dd36656ada05731c069ecd5b1878380294fb1f3e, git7364.
  * Includes the RISC-V atomic changes
- Remove riscv-atomic.patch and riscv-pthread.patch now included
- Make libstdc++6-devel packages own their directories since they
  can be installed standalone.  [bsc#1211427]</changelog>
  <changelog author="rguenther@suse.com" date="1686657600">- Raise architecture levels for ALP.  [PED-153]
  * Raise POWER architecture baseline to power9.  [PED-2005]
  * Raise x86-64 architecture baseline to x86-64-v2 for ALP.  [PED-252]
  * Delay raising s390x architecture baseline to z14.  [PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1687953600">- Bump to a533ded17fb13cbbb2fa5133ecd470360f66c5cf, git7489.
- Add gcc13-pr110334.patch to fix missed optimization in Skia
  resulting in Firefox crashes when building with LTO.  [boo#1212101]</changelog>
  <changelog author="rguenther@suse.com" date="1688990400">- Bump to f9781fcf733ca3afe5b5811afd8ecbb18d9d3a11, git7552
- Remove gcc13-pr110334.patch again as it breaks libreoffice build.</changelog>
  <changelog author="schwab@suse.de" date="1689076800">- Also handle -static-pie in the default-PIE specs</changelog>
  <changelog author="rguenther@suse.com" date="1689854400">- Bump to 9aac37ab8a7b919a89c6d64bc7107a8436996e93, git7597
  * GCC 13.2 RC1
- Add rpmlint filter for SLE12 complaining about invalid licenses.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- gdcflags.patch: Use substituted GDCFLAGS
- Filter out -Werror=return-type from D compile flags</changelog>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
</package>
<package pkgid="a2c5137517792f9ce0984fd6c6d5ef83465dbe7453cc095484a249ae2260264d" name="libgcc_s1" arch="x86_64">
  <version epoch="0" ver="13.2.1+git7813" rel="150000.1.6.1"/>
  <changelog author="mliska@suse.cz" date="1680609600">- Bump to d0b961b802dd7d9d555ff4515835a479329326e9, git6995.</changelog>
  <changelog author="schwab@suse.de" date="1681214400">- riscv-atomic.patch: RISC-V: Add support for inlining subword atomic
  operations
- riscv-pthread.patch: Don't add -latomic with -pthread</changelog>
  <changelog author="mliska@suse.cz" date="1681214401">- Add new x86-related intrinsics (amxcomplexintrin.h).</changelog>
  <changelog author="mliska@suse.cz" date="1681300800">- Bump to d339e9802f758e051b0a1ef6db732ff846cbf4e3, git7162.</changelog>
  <changelog author="rguenther@suse.com" date="1682078400">- Bump to f980561c60b0446cc427595198d7f3f4f90e0924, git7231.
  * fixes compile-time issue reported in [bsc#1210557]
  * GCC 13.1 RC3
- Disable building the rust frontend.</changelog>
  <changelog author="rguenther@suse.com" date="1682596800">- Bump to 910735c5d7ce7607384fc1eec4189e90c8ae5c84, git7256.
  * Includes GCC 13.1 release and first bugfixes
- Update riscv-atomic.patch from the version committed upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1684756800">- Bump to dd36656ada05731c069ecd5b1878380294fb1f3e, git7364.
  * Includes the RISC-V atomic changes
- Remove riscv-atomic.patch and riscv-pthread.patch now included
- Make libstdc++6-devel packages own their directories since they
  can be installed standalone.  [bsc#1211427]</changelog>
  <changelog author="rguenther@suse.com" date="1686657600">- Raise architecture levels for ALP.  [PED-153]
  * Raise POWER architecture baseline to power9.  [PED-2005]
  * Raise x86-64 architecture baseline to x86-64-v2 for ALP.  [PED-252]
  * Delay raising s390x architecture baseline to z14.  [PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1687953600">- Bump to a533ded17fb13cbbb2fa5133ecd470360f66c5cf, git7489.
- Add gcc13-pr110334.patch to fix missed optimization in Skia
  resulting in Firefox crashes when building with LTO.  [boo#1212101]</changelog>
  <changelog author="rguenther@suse.com" date="1688990400">- Bump to f9781fcf733ca3afe5b5811afd8ecbb18d9d3a11, git7552
- Remove gcc13-pr110334.patch again as it breaks libreoffice build.</changelog>
  <changelog author="schwab@suse.de" date="1689076800">- Also handle -static-pie in the default-PIE specs</changelog>
  <changelog author="rguenther@suse.com" date="1689854400">- Bump to 9aac37ab8a7b919a89c6d64bc7107a8436996e93, git7597
  * GCC 13.2 RC1
- Add rpmlint filter for SLE12 complaining about invalid licenses.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- gdcflags.patch: Use substituted GDCFLAGS
- Filter out -Werror=return-type from D compile flags</changelog>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
</package>
<package pkgid="e71a61a37021746dfb7ff7cbeb4e59dd5a2b802c8c7dff5d1c6767724769307c" name="libgcc_s1" arch="aarch64">
  <version epoch="0" ver="13.2.1+git8285" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
</package>
<package pkgid="9ea78d1aa8034ac3de1584069d849a882183aadebd6bbc2c563bceb17cccf970" name="libgcc_s1" arch="s390x">
  <version epoch="0" ver="13.2.1+git8285" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
</package>
<package pkgid="6db0f31e97f6a32ce8061975f8ac9fa6e30b812c6851d3087097c6b7126c5f6d" name="libgcc_s1" arch="x86_64">
  <version epoch="0" ver="13.2.1+git8285" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
</package>
<package pkgid="516dfdb3f2cc654b92f48af796ea644d10f856482a475500bf50df7e52f9a47d" name="libgcc_s1" arch="aarch64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="56c8c125b5b64a43fd34e5fa943281803788a3b9dbf74810b53fe1d99697ef76" name="libgcc_s1" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="62d0de5f7c216085d5b6dbd0bcf7f13eb516c1f7e96fa04c4416e4e459b9bb21" name="libgcc_s1" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="2811797baecb4ef62665d9fb43d009c0bd72ebf892ca809b990db1e736787aa0" name="libgdk_pixbuf-2_0-0" arch="aarch64">
  <version epoch="0" ver="2.42.12" rel="150400.5.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Udpate to version 2.42.0:
  + Remove the libjasper JPEG2000 loader.
  + Split the gdk-pixbuf-xlib library to a separate repository.
  + Fix cppcheck 'shifting signed 32-bit value warning',
  + Fix memory leaks in pixops error paths,
  + Improve internal consistency of loaders,
  + Skip bytes during JPEG incremental load.
  + Check for overflows.
  + Let the test suite cope with missing loaders.
  + Check for mmap failure.
  + Fix UB in the XPM loader.
  + Speed up alpha scaling pixop.
  + Add the `gtk_doc` configuration option, and deprecate `docs`.
  + Add the `introspection` configuration option, and remove `gir`.
  + Handle truncated PNMs more gracefully.
  + Clean up GIF loader code.
  + Fix colormap handling in GIF.
- Drop gdk-pixbuf-boo1174307-io-gif-overflow.patch: fixed upstream.
- Replace meson parameters, following upstream changes:
  + -Ddocs=true =&gt; -Dgtk_doc=true.
  + -Dgir=true =&gt; -Dintrospection=enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1607428800">- Update to version 2.42.2:
  + Requre Meson 0.55.3.
  + Improve the PNG save operation.
  + Fix leak in the error path of the XPM loader.
  + Fix loading GIF without a GCE rendering color 0.
  + Fix invalid LZW codes in the GIF loader (CVE-2020-29385).</changelog>
  <changelog author="zcjia@suse.com" date="1610020800">- Add gdk-pixbuf-bsc1180393-CVE-2020-29385.patch:
  gif: Fix LZW decoder accepting invalid LZW code. (bsc#1180393)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 2.42.4:
  + Make enum type registration thread safe.
  + Do not install skipped test files.
  + Fix GIF initialization.
  + Always run GIF loader tests.
  + Fix leaks discovered via ASan.
  + Expose GdkPixbufLoader API via introspection.
  + Fix revert-to-previous first frame behaviour for GIF files.
  + Link to libintl if needed.
  + Improve support for using gdk-pixbuf as a subproject.
  + Fix build with GModule disabled.
  + Use gi-docgen to generate the API reference from introspection
    data.
- Replace gtk-doc BuildRequires with python3-gi-docgen: follow
  upstreams port.
- As a workaround to
  https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/177, delete
  the installed gi-docgen program files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616846400">- Disable building of docs: creates a cycle with python:
  + Drop python3-gi-docgen BuildRequires.
  + Pass gtk_doc=false to meson</changelog>
  <changelog author="rpm@fthiessen.de" date="1618401600">- Update to stable 2.42.6
  + Yield gtk_doc option value in subprojects
  + Always initialise locale on thumbnailer startup
  + Add fallback subproject for libjpeg
  + Use type:array for the builtin_loaders option
  + Default to using builtin png and jpeg loaders</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop gdk-pixbuf-bsc1180393-CVE-2020-29385.patch on SLE and Leap
  15.4: fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636027200">- Stop passing no longer used nor recognized options jasper=false
  and x11=false to meson, fails the build when using meson 0.60.x.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 2.42.8 (boo#1201826):
  + Clear the pixbuf's memory buffer to avoid returning
    uninitialized memory.
  + Turn GdkPixbufModule functions into typed callbacks.
  + tiff: Use non-deprecated C99 integer types.
  + gif: Check for overflow when compositing or clearing frames.
  + Change png/jpeg/tiff build options from boolean to feature.
  + jpeg: Do not rely on UB around setjmp/longjmp.
  + Build fixes.
  + Documentation fixes.
  + Security fixes: CVE-2021-46829.
  + Updated translations.
- Stop passing options to meson that just follow upstream default,
  just rely on upstream providing sane defaults, apart from where
  we want to deviate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1660046400">- Update to version 2.42.9:
  + Fix the check for maximum value of LZW initial code size
    (boo#1194633 CVE-2021-44648).
  + Use CMake for dependencies on Windows/MSVC.
  + Add option for building tests.
  + Move man pages to reStructuredText.
  + Disable relocation when built as a static libary on Windows.
  + Update wrap file for libjpeg-turbo.
  + Limit the memory size when loading image data.
- Add docutils and pkgconfig(gi-docgen) BuildRequires: New
  dependencies.</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- avoid bashism in baselibs postscript (bsc#1195391)</changelog>
  <changelog author="mgorse@suse.com" date="1661860800">- Add 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch:
  fix loading of larger images (glgo#GNOME/gdk-pixbuf#216).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666785600">- Update to version 2.42.10:
  + Search for rst2man.py.
  + Update the memory size limit for JPEG images.
  + Updated translations.
- Drop patch fixed upstream (with different limit):
  + 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- Fix path to gdk-pixbuf-query-loader in pkg-config file: we rename
  the loader to be multi-arch compatible and thus also need to
  adjust the .pc file to have build-systems find it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714651200">- Update to version 2.42.11:
  + Disable fringe loaders by default.
  + Introspection fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714996800">- Pass -Dothers=enabled to meson: enable other image loaders (most
  notably beeded seems xpm,xbm). This is in line with upstreams
  recommendation for now, but won't be working past version 2.43.x.
  The loaders will likely be split out into a separate repo.
  (boo#1223903, glgo#GNOME/gdk-pixbuf!169).
- Add 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: Fix test
  suite with other loaders enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715774400">- Update to version 2.42.12:
  + Fix a build failure,
  + Fix occasional build failures,
  + ani: Reject files with multiple INA or IART chunks,
  + ani: Reject files with multiple anih chunks (CVE-2022-48622),
  + ani: validate chunk size,
  + Updated translations.
- Drop 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Migrate package to a regular obs_scm service, no longer password
  protecting a zip file. The originally reported bsc#1159337 seems
  no longer be applicable and we prefer the easier route.
- Drop unzip BuildRequires and pre_checkin.sh script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860801">- Enable test suite on x86_64 (other arches seem too flaky for now):
  + Add %check section and call %meson_test
  + Add gdk-pixbuf-jpeg-slow.patch: allow pixbuf-jpeg to run for
    more than 30s, by marking it as a slow test
    (glgo#GNOME/gdk-pixbuf!174).</changelog>
</package>
<package pkgid="3d8220d4aa89430b9ff842a0dab9f22bd5778ff29e059332c1dc588f6516dc52" name="libgdk_pixbuf-2_0-0" arch="s390x">
  <version epoch="0" ver="2.42.12" rel="150400.5.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Udpate to version 2.42.0:
  + Remove the libjasper JPEG2000 loader.
  + Split the gdk-pixbuf-xlib library to a separate repository.
  + Fix cppcheck 'shifting signed 32-bit value warning',
  + Fix memory leaks in pixops error paths,
  + Improve internal consistency of loaders,
  + Skip bytes during JPEG incremental load.
  + Check for overflows.
  + Let the test suite cope with missing loaders.
  + Check for mmap failure.
  + Fix UB in the XPM loader.
  + Speed up alpha scaling pixop.
  + Add the `gtk_doc` configuration option, and deprecate `docs`.
  + Add the `introspection` configuration option, and remove `gir`.
  + Handle truncated PNMs more gracefully.
  + Clean up GIF loader code.
  + Fix colormap handling in GIF.
- Drop gdk-pixbuf-boo1174307-io-gif-overflow.patch: fixed upstream.
- Replace meson parameters, following upstream changes:
  + -Ddocs=true =&gt; -Dgtk_doc=true.
  + -Dgir=true =&gt; -Dintrospection=enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1607428800">- Update to version 2.42.2:
  + Requre Meson 0.55.3.
  + Improve the PNG save operation.
  + Fix leak in the error path of the XPM loader.
  + Fix loading GIF without a GCE rendering color 0.
  + Fix invalid LZW codes in the GIF loader (CVE-2020-29385).</changelog>
  <changelog author="zcjia@suse.com" date="1610020800">- Add gdk-pixbuf-bsc1180393-CVE-2020-29385.patch:
  gif: Fix LZW decoder accepting invalid LZW code. (bsc#1180393)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 2.42.4:
  + Make enum type registration thread safe.
  + Do not install skipped test files.
  + Fix GIF initialization.
  + Always run GIF loader tests.
  + Fix leaks discovered via ASan.
  + Expose GdkPixbufLoader API via introspection.
  + Fix revert-to-previous first frame behaviour for GIF files.
  + Link to libintl if needed.
  + Improve support for using gdk-pixbuf as a subproject.
  + Fix build with GModule disabled.
  + Use gi-docgen to generate the API reference from introspection
    data.
- Replace gtk-doc BuildRequires with python3-gi-docgen: follow
  upstreams port.
- As a workaround to
  https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/177, delete
  the installed gi-docgen program files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616846400">- Disable building of docs: creates a cycle with python:
  + Drop python3-gi-docgen BuildRequires.
  + Pass gtk_doc=false to meson</changelog>
  <changelog author="rpm@fthiessen.de" date="1618401600">- Update to stable 2.42.6
  + Yield gtk_doc option value in subprojects
  + Always initialise locale on thumbnailer startup
  + Add fallback subproject for libjpeg
  + Use type:array for the builtin_loaders option
  + Default to using builtin png and jpeg loaders</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop gdk-pixbuf-bsc1180393-CVE-2020-29385.patch on SLE and Leap
  15.4: fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636027200">- Stop passing no longer used nor recognized options jasper=false
  and x11=false to meson, fails the build when using meson 0.60.x.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 2.42.8 (boo#1201826):
  + Clear the pixbuf's memory buffer to avoid returning
    uninitialized memory.
  + Turn GdkPixbufModule functions into typed callbacks.
  + tiff: Use non-deprecated C99 integer types.
  + gif: Check for overflow when compositing or clearing frames.
  + Change png/jpeg/tiff build options from boolean to feature.
  + jpeg: Do not rely on UB around setjmp/longjmp.
  + Build fixes.
  + Documentation fixes.
  + Security fixes: CVE-2021-46829.
  + Updated translations.
- Stop passing options to meson that just follow upstream default,
  just rely on upstream providing sane defaults, apart from where
  we want to deviate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1660046400">- Update to version 2.42.9:
  + Fix the check for maximum value of LZW initial code size
    (boo#1194633 CVE-2021-44648).
  + Use CMake for dependencies on Windows/MSVC.
  + Add option for building tests.
  + Move man pages to reStructuredText.
  + Disable relocation when built as a static libary on Windows.
  + Update wrap file for libjpeg-turbo.
  + Limit the memory size when loading image data.
- Add docutils and pkgconfig(gi-docgen) BuildRequires: New
  dependencies.</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- avoid bashism in baselibs postscript (bsc#1195391)</changelog>
  <changelog author="mgorse@suse.com" date="1661860800">- Add 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch:
  fix loading of larger images (glgo#GNOME/gdk-pixbuf#216).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666785600">- Update to version 2.42.10:
  + Search for rst2man.py.
  + Update the memory size limit for JPEG images.
  + Updated translations.
- Drop patch fixed upstream (with different limit):
  + 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- Fix path to gdk-pixbuf-query-loader in pkg-config file: we rename
  the loader to be multi-arch compatible and thus also need to
  adjust the .pc file to have build-systems find it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714651200">- Update to version 2.42.11:
  + Disable fringe loaders by default.
  + Introspection fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714996800">- Pass -Dothers=enabled to meson: enable other image loaders (most
  notably beeded seems xpm,xbm). This is in line with upstreams
  recommendation for now, but won't be working past version 2.43.x.
  The loaders will likely be split out into a separate repo.
  (boo#1223903, glgo#GNOME/gdk-pixbuf!169).
- Add 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: Fix test
  suite with other loaders enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715774400">- Update to version 2.42.12:
  + Fix a build failure,
  + Fix occasional build failures,
  + ani: Reject files with multiple INA or IART chunks,
  + ani: Reject files with multiple anih chunks (CVE-2022-48622),
  + ani: validate chunk size,
  + Updated translations.
- Drop 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Migrate package to a regular obs_scm service, no longer password
  protecting a zip file. The originally reported bsc#1159337 seems
  no longer be applicable and we prefer the easier route.
- Drop unzip BuildRequires and pre_checkin.sh script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860801">- Enable test suite on x86_64 (other arches seem too flaky for now):
  + Add %check section and call %meson_test
  + Add gdk-pixbuf-jpeg-slow.patch: allow pixbuf-jpeg to run for
    more than 30s, by marking it as a slow test
    (glgo#GNOME/gdk-pixbuf!174).</changelog>
</package>
<package pkgid="0f0badb4771ec046a2f5482cfe5f12bb12c2808ae54f828fcc06fe06e2c48974" name="libgdk_pixbuf-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.42.12" rel="150400.5.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Udpate to version 2.42.0:
  + Remove the libjasper JPEG2000 loader.
  + Split the gdk-pixbuf-xlib library to a separate repository.
  + Fix cppcheck 'shifting signed 32-bit value warning',
  + Fix memory leaks in pixops error paths,
  + Improve internal consistency of loaders,
  + Skip bytes during JPEG incremental load.
  + Check for overflows.
  + Let the test suite cope with missing loaders.
  + Check for mmap failure.
  + Fix UB in the XPM loader.
  + Speed up alpha scaling pixop.
  + Add the `gtk_doc` configuration option, and deprecate `docs`.
  + Add the `introspection` configuration option, and remove `gir`.
  + Handle truncated PNMs more gracefully.
  + Clean up GIF loader code.
  + Fix colormap handling in GIF.
- Drop gdk-pixbuf-boo1174307-io-gif-overflow.patch: fixed upstream.
- Replace meson parameters, following upstream changes:
  + -Ddocs=true =&gt; -Dgtk_doc=true.
  + -Dgir=true =&gt; -Dintrospection=enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1607428800">- Update to version 2.42.2:
  + Requre Meson 0.55.3.
  + Improve the PNG save operation.
  + Fix leak in the error path of the XPM loader.
  + Fix loading GIF without a GCE rendering color 0.
  + Fix invalid LZW codes in the GIF loader (CVE-2020-29385).</changelog>
  <changelog author="zcjia@suse.com" date="1610020800">- Add gdk-pixbuf-bsc1180393-CVE-2020-29385.patch:
  gif: Fix LZW decoder accepting invalid LZW code. (bsc#1180393)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 2.42.4:
  + Make enum type registration thread safe.
  + Do not install skipped test files.
  + Fix GIF initialization.
  + Always run GIF loader tests.
  + Fix leaks discovered via ASan.
  + Expose GdkPixbufLoader API via introspection.
  + Fix revert-to-previous first frame behaviour for GIF files.
  + Link to libintl if needed.
  + Improve support for using gdk-pixbuf as a subproject.
  + Fix build with GModule disabled.
  + Use gi-docgen to generate the API reference from introspection
    data.
- Replace gtk-doc BuildRequires with python3-gi-docgen: follow
  upstreams port.
- As a workaround to
  https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/177, delete
  the installed gi-docgen program files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616846400">- Disable building of docs: creates a cycle with python:
  + Drop python3-gi-docgen BuildRequires.
  + Pass gtk_doc=false to meson</changelog>
  <changelog author="rpm@fthiessen.de" date="1618401600">- Update to stable 2.42.6
  + Yield gtk_doc option value in subprojects
  + Always initialise locale on thumbnailer startup
  + Add fallback subproject for libjpeg
  + Use type:array for the builtin_loaders option
  + Default to using builtin png and jpeg loaders</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop gdk-pixbuf-bsc1180393-CVE-2020-29385.patch on SLE and Leap
  15.4: fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636027200">- Stop passing no longer used nor recognized options jasper=false
  and x11=false to meson, fails the build when using meson 0.60.x.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 2.42.8 (boo#1201826):
  + Clear the pixbuf's memory buffer to avoid returning
    uninitialized memory.
  + Turn GdkPixbufModule functions into typed callbacks.
  + tiff: Use non-deprecated C99 integer types.
  + gif: Check for overflow when compositing or clearing frames.
  + Change png/jpeg/tiff build options from boolean to feature.
  + jpeg: Do not rely on UB around setjmp/longjmp.
  + Build fixes.
  + Documentation fixes.
  + Security fixes: CVE-2021-46829.
  + Updated translations.
- Stop passing options to meson that just follow upstream default,
  just rely on upstream providing sane defaults, apart from where
  we want to deviate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1660046400">- Update to version 2.42.9:
  + Fix the check for maximum value of LZW initial code size
    (boo#1194633 CVE-2021-44648).
  + Use CMake for dependencies on Windows/MSVC.
  + Add option for building tests.
  + Move man pages to reStructuredText.
  + Disable relocation when built as a static libary on Windows.
  + Update wrap file for libjpeg-turbo.
  + Limit the memory size when loading image data.
- Add docutils and pkgconfig(gi-docgen) BuildRequires: New
  dependencies.</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- avoid bashism in baselibs postscript (bsc#1195391)</changelog>
  <changelog author="mgorse@suse.com" date="1661860800">- Add 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch:
  fix loading of larger images (glgo#GNOME/gdk-pixbuf#216).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666785600">- Update to version 2.42.10:
  + Search for rst2man.py.
  + Update the memory size limit for JPEG images.
  + Updated translations.
- Drop patch fixed upstream (with different limit):
  + 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- Fix path to gdk-pixbuf-query-loader in pkg-config file: we rename
  the loader to be multi-arch compatible and thus also need to
  adjust the .pc file to have build-systems find it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714651200">- Update to version 2.42.11:
  + Disable fringe loaders by default.
  + Introspection fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714996800">- Pass -Dothers=enabled to meson: enable other image loaders (most
  notably beeded seems xpm,xbm). This is in line with upstreams
  recommendation for now, but won't be working past version 2.43.x.
  The loaders will likely be split out into a separate repo.
  (boo#1223903, glgo#GNOME/gdk-pixbuf!169).
- Add 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: Fix test
  suite with other loaders enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715774400">- Update to version 2.42.12:
  + Fix a build failure,
  + Fix occasional build failures,
  + ani: Reject files with multiple INA or IART chunks,
  + ani: Reject files with multiple anih chunks (CVE-2022-48622),
  + ani: validate chunk size,
  + Updated translations.
- Drop 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Migrate package to a regular obs_scm service, no longer password
  protecting a zip file. The originally reported bsc#1159337 seems
  no longer be applicable and we prefer the easier route.
- Drop unzip BuildRequires and pre_checkin.sh script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860801">- Enable test suite on x86_64 (other arches seem too flaky for now):
  + Add %check section and call %meson_test
  + Add gdk-pixbuf-jpeg-slow.patch: allow pixbuf-jpeg to run for
    more than 30s, by marking it as a slow test
    (glgo#GNOME/gdk-pixbuf!174).</changelog>
</package>
<package pkgid="7f41925399009332e8e9bb97828ecc903327f0d58681dae9ad8b5d2709e8c35c" name="libgio-2_0-0" arch="aarch64">
  <version epoch="0" ver="2.70.5" rel="150400.3.11.1"/>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
  <changelog author="mgorse@suse.com" date="1716292800">- Add patches to fix CVE-2024-34397 (boo#1224044):
  glib2-CVE-2024-34397.patch (glgo#GNOME/glib#3268).
  glib2-fix-ibus-regression.patch (glgo#GNOME/glib#3353)</changelog>
</package>
<package pkgid="9a0c425c8ea72d04c53d4e49c78a662f5b67f23b7ca6bd68d898b0f3969c769a" name="libgio-2_0-0" arch="s390x">
  <version epoch="0" ver="2.70.5" rel="150400.3.11.1"/>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
  <changelog author="mgorse@suse.com" date="1716292800">- Add patches to fix CVE-2024-34397 (boo#1224044):
  glib2-CVE-2024-34397.patch (glgo#GNOME/glib#3268).
  glib2-fix-ibus-regression.patch (glgo#GNOME/glib#3353)</changelog>
</package>
<package pkgid="8a784c8c4ba3c3b1ada38a61aebd3a1f13a47dcaacb33be17be25eb56bbb833f" name="libgio-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.70.5" rel="150400.3.11.1"/>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
  <changelog author="mgorse@suse.com" date="1716292800">- Add patches to fix CVE-2024-34397 (boo#1224044):
  glib2-CVE-2024-34397.patch (glgo#GNOME/glib#3268).
  glib2-fix-ibus-regression.patch (glgo#GNOME/glib#3353)</changelog>
</package>
<package pkgid="63e95c546ee7e7e4963f0c3010766c6f0e05afdc50157659be2b79c81b57f320" name="libgio-2_0-0" arch="aarch64">
  <version epoch="0" ver="2.70.5" rel="150400.3.14.1"/>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
  <changelog author="mgorse@suse.com" date="1716292800">- Add patches to fix CVE-2024-34397 (boo#1224044):
  glib2-CVE-2024-34397.patch (glgo#GNOME/glib#3268).
  glib2-fix-ibus-regression.patch (glgo#GNOME/glib#3353)</changelog>
  <changelog author="mgorse@suse.com" date="1724068800">- Add glib2-gdbusmessage-cache-arg0.patch: cache the arg0 value in
  a dbus message. Fixes a possible use after free (boo#1224044).</changelog>
</package>
<package pkgid="b31de2e55abccb2affb61c8e7c1a071b14cf7f7305f8125cf113e0960f67f39b" name="libgio-2_0-0" arch="s390x">
  <version epoch="0" ver="2.70.5" rel="150400.3.14.1"/>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
  <changelog author="mgorse@suse.com" date="1716292800">- Add patches to fix CVE-2024-34397 (boo#1224044):
  glib2-CVE-2024-34397.patch (glgo#GNOME/glib#3268).
  glib2-fix-ibus-regression.patch (glgo#GNOME/glib#3353)</changelog>
  <changelog author="mgorse@suse.com" date="1724068800">- Add glib2-gdbusmessage-cache-arg0.patch: cache the arg0 value in
  a dbus message. Fixes a possible use after free (boo#1224044).</changelog>
</package>
<package pkgid="f23fb47c344f53f38d2713891647179e1d84e10c63edcba4992338f63ad60a85" name="libgio-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.70.5" rel="150400.3.14.1"/>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
  <changelog author="mgorse@suse.com" date="1716292800">- Add patches to fix CVE-2024-34397 (boo#1224044):
  glib2-CVE-2024-34397.patch (glgo#GNOME/glib#3268).
  glib2-fix-ibus-regression.patch (glgo#GNOME/glib#3353)</changelog>
  <changelog author="mgorse@suse.com" date="1724068800">- Add glib2-gdbusmessage-cache-arg0.patch: cache the arg0 value in
  a dbus message. Fixes a possible use after free (boo#1224044).</changelog>
</package>
<package pkgid="e6961bae753c1fd8847231a60f51955f8249c968ee649e8f95baf54dce66c647" name="libglib-2_0-0" arch="aarch64">
  <version epoch="0" ver="2.70.5" rel="150400.3.11.1"/>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
  <changelog author="mgorse@suse.com" date="1716292800">- Add patches to fix CVE-2024-34397 (boo#1224044):
  glib2-CVE-2024-34397.patch (glgo#GNOME/glib#3268).
  glib2-fix-ibus-regression.patch (glgo#GNOME/glib#3353)</changelog>
</package>
<package pkgid="415c3473a937cecf81712f466879469d88f87191d182c8d30297badddbaea193" name="libglib-2_0-0" arch="s390x">
  <version epoch="0" ver="2.70.5" rel="150400.3.11.1"/>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
  <changelog author="mgorse@suse.com" date="1716292800">- Add patches to fix CVE-2024-34397 (boo#1224044):
  glib2-CVE-2024-34397.patch (glgo#GNOME/glib#3268).
  glib2-fix-ibus-regression.patch (glgo#GNOME/glib#3353)</changelog>
</package>
<package pkgid="2bc119a4c5a45930a6c4ba2a1c1fcd863db9b56102d0e1c5200f3fa10ec1a4b7" name="libglib-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.70.5" rel="150400.3.11.1"/>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
  <changelog author="mgorse@suse.com" date="1716292800">- Add patches to fix CVE-2024-34397 (boo#1224044):
  glib2-CVE-2024-34397.patch (glgo#GNOME/glib#3268).
  glib2-fix-ibus-regression.patch (glgo#GNOME/glib#3353)</changelog>
</package>
<package pkgid="df750a7d507dda90e9d1b074ae04caa4101e25373dba7e0309926a51a4af7601" name="libglib-2_0-0" arch="aarch64">
  <version epoch="0" ver="2.70.5" rel="150400.3.14.1"/>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
  <changelog author="mgorse@suse.com" date="1716292800">- Add patches to fix CVE-2024-34397 (boo#1224044):
  glib2-CVE-2024-34397.patch (glgo#GNOME/glib#3268).
  glib2-fix-ibus-regression.patch (glgo#GNOME/glib#3353)</changelog>
  <changelog author="mgorse@suse.com" date="1724068800">- Add glib2-gdbusmessage-cache-arg0.patch: cache the arg0 value in
  a dbus message. Fixes a possible use after free (boo#1224044).</changelog>
</package>
<package pkgid="0efee0f7111fddc579176721da43619f57e08bee210179d82426d849bd89d9f6" name="libglib-2_0-0" arch="s390x">
  <version epoch="0" ver="2.70.5" rel="150400.3.14.1"/>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
  <changelog author="mgorse@suse.com" date="1716292800">- Add patches to fix CVE-2024-34397 (boo#1224044):
  glib2-CVE-2024-34397.patch (glgo#GNOME/glib#3268).
  glib2-fix-ibus-regression.patch (glgo#GNOME/glib#3353)</changelog>
  <changelog author="mgorse@suse.com" date="1724068800">- Add glib2-gdbusmessage-cache-arg0.patch: cache the arg0 value in
  a dbus message. Fixes a possible use after free (boo#1224044).</changelog>
</package>
<package pkgid="32b433cfd682f2e0aee53814d68ce2a446d3e3c8412e3913c065cbca732f1bfe" name="libglib-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.70.5" rel="150400.3.14.1"/>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
  <changelog author="mgorse@suse.com" date="1716292800">- Add patches to fix CVE-2024-34397 (boo#1224044):
  glib2-CVE-2024-34397.patch (glgo#GNOME/glib#3268).
  glib2-fix-ibus-regression.patch (glgo#GNOME/glib#3353)</changelog>
  <changelog author="mgorse@suse.com" date="1724068800">- Add glib2-gdbusmessage-cache-arg0.patch: cache the arg0 value in
  a dbus message. Fixes a possible use after free (boo#1224044).</changelog>
</package>
<package pkgid="30df94de99b8fd95d1fe3a17bd6fb10dd009f9d2029f0bd404f005afe9792d56" name="libgmodule-2_0-0" arch="aarch64">
  <version epoch="0" ver="2.70.5" rel="150400.3.11.1"/>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
  <changelog author="mgorse@suse.com" date="1716292800">- Add patches to fix CVE-2024-34397 (boo#1224044):
  glib2-CVE-2024-34397.patch (glgo#GNOME/glib#3268).
  glib2-fix-ibus-regression.patch (glgo#GNOME/glib#3353)</changelog>
</package>
<package pkgid="6c4f9c1d635338b1d641f1d6a259eda3d1ce557a852bfc3cfd4965d2d1cddd31" name="libgmodule-2_0-0" arch="s390x">
  <version epoch="0" ver="2.70.5" rel="150400.3.11.1"/>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
  <changelog author="mgorse@suse.com" date="1716292800">- Add patches to fix CVE-2024-34397 (boo#1224044):
  glib2-CVE-2024-34397.patch (glgo#GNOME/glib#3268).
  glib2-fix-ibus-regression.patch (glgo#GNOME/glib#3353)</changelog>
</package>
<package pkgid="9b93d4cf2af7d970f97aaece188760fb758749360ce2e0efd775c2dc1c7d5135" name="libgmodule-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.70.5" rel="150400.3.11.1"/>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
  <changelog author="mgorse@suse.com" date="1716292800">- Add patches to fix CVE-2024-34397 (boo#1224044):
  glib2-CVE-2024-34397.patch (glgo#GNOME/glib#3268).
  glib2-fix-ibus-regression.patch (glgo#GNOME/glib#3353)</changelog>
</package>
<package pkgid="15b4cb9c1e2ab226a10099dee60d256dc64a1ad79a81ac021a88d9b02ef69b46" name="libgmodule-2_0-0" arch="aarch64">
  <version epoch="0" ver="2.70.5" rel="150400.3.14.1"/>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
  <changelog author="mgorse@suse.com" date="1716292800">- Add patches to fix CVE-2024-34397 (boo#1224044):
  glib2-CVE-2024-34397.patch (glgo#GNOME/glib#3268).
  glib2-fix-ibus-regression.patch (glgo#GNOME/glib#3353)</changelog>
  <changelog author="mgorse@suse.com" date="1724068800">- Add glib2-gdbusmessage-cache-arg0.patch: cache the arg0 value in
  a dbus message. Fixes a possible use after free (boo#1224044).</changelog>
</package>
<package pkgid="5dddd6912bebc1e98c422bea014f7ef61eac81540fdd530aae7a272e09ca4c1b" name="libgmodule-2_0-0" arch="s390x">
  <version epoch="0" ver="2.70.5" rel="150400.3.14.1"/>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
  <changelog author="mgorse@suse.com" date="1716292800">- Add patches to fix CVE-2024-34397 (boo#1224044):
  glib2-CVE-2024-34397.patch (glgo#GNOME/glib#3268).
  glib2-fix-ibus-regression.patch (glgo#GNOME/glib#3353)</changelog>
  <changelog author="mgorse@suse.com" date="1724068800">- Add glib2-gdbusmessage-cache-arg0.patch: cache the arg0 value in
  a dbus message. Fixes a possible use after free (boo#1224044).</changelog>
</package>
<package pkgid="26c51245bea82c0635783433e389bc8052e4723f06e23fa49a7da5416245a341" name="libgmodule-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.70.5" rel="150400.3.14.1"/>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
  <changelog author="mgorse@suse.com" date="1716292800">- Add patches to fix CVE-2024-34397 (boo#1224044):
  glib2-CVE-2024-34397.patch (glgo#GNOME/glib#3268).
  glib2-fix-ibus-regression.patch (glgo#GNOME/glib#3353)</changelog>
  <changelog author="mgorse@suse.com" date="1724068800">- Add glib2-gdbusmessage-cache-arg0.patch: cache the arg0 value in
  a dbus message. Fixes a possible use after free (boo#1224044).</changelog>
</package>
<package pkgid="333c58c93c60f39036ca2d77a778f9026f6abdc369dc72c52962610149717982" name="libgnutls30" arch="aarch64">
  <version epoch="0" ver="3.7.3" rel="150400.4.38.1"/>
  <changelog author="pmonreal@suse.com" date="1652097600">- FIPS: Add missing requirements for the SLI [bsc#1190698]
  * Remove 3DES from FIPS approved algorithms:
  - gnutls-Remove-3DES-from-FIPS-approved-algos.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570
  * DRBG service (gnutls_rnd) should be considered approved:
  - gnutls-Add-missing-FIPS-service-indicator-transitions.patch
  - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch
  - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569</changelog>
  <changelog author="pmonreal@suse.com" date="1652097601">- FIPS: Make sure zeroization is performed in all API functions
  * Add gnutls-zeroization-API-functions.patch [bsc#1191021]
  * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573</changelog>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
</package>
<package pkgid="e3c94e3a08f39f7fd00f5b1336d0ae227c67dca96d6ff0ae5fe5b55c26cfd27f" name="libgnutls30" arch="s390x">
  <version epoch="0" ver="3.7.3" rel="150400.4.38.1"/>
  <changelog author="pmonreal@suse.com" date="1652097600">- FIPS: Add missing requirements for the SLI [bsc#1190698]
  * Remove 3DES from FIPS approved algorithms:
  - gnutls-Remove-3DES-from-FIPS-approved-algos.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570
  * DRBG service (gnutls_rnd) should be considered approved:
  - gnutls-Add-missing-FIPS-service-indicator-transitions.patch
  - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch
  - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569</changelog>
  <changelog author="pmonreal@suse.com" date="1652097601">- FIPS: Make sure zeroization is performed in all API functions
  * Add gnutls-zeroization-API-functions.patch [bsc#1191021]
  * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573</changelog>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
</package>
<package pkgid="8a8b4cd5b07448ecce55cf5ff246970fb0754873d5537c43307ac4cfe017eb9f" name="libgnutls30" arch="x86_64">
  <version epoch="0" ver="3.7.3" rel="150400.4.38.1"/>
  <changelog author="pmonreal@suse.com" date="1652097600">- FIPS: Add missing requirements for the SLI [bsc#1190698]
  * Remove 3DES from FIPS approved algorithms:
  - gnutls-Remove-3DES-from-FIPS-approved-algos.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570
  * DRBG service (gnutls_rnd) should be considered approved:
  - gnutls-Add-missing-FIPS-service-indicator-transitions.patch
  - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch
  - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569</changelog>
  <changelog author="pmonreal@suse.com" date="1652097601">- FIPS: Make sure zeroization is performed in all API functions
  * Add gnutls-zeroization-API-functions.patch [bsc#1191021]
  * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573</changelog>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
</package>
<package pkgid="740901af5c93d8905b52bb53a06f6e1db4712cb1c583722086d36b9bb8e50932" name="libgnutls30" arch="aarch64">
  <version epoch="0" ver="3.7.3" rel="150400.4.41.3"/>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Security fix: [bsc#1218865, CVE-2024-0553]
  * Incomplete fix for CVE-2023-5981.
  * The response times to malformed ciphertexts in RSA-PSK
    ClientKeyExchange differ from response times of ciphertexts
    with correct PKCS#1 v1.5 padding.
  * Add gnutls-CVE-2024-0553.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492801">- Security fix: [bsc#1218862, CVE-2024-0567]
  * gnutls: rejects certificate chain with distributed trust
  * Cockpit (which uses gnuTLS) rejects certificate chain with
    distributed trust.
  * Add gnutls-CVE-2024-0567.patch</changelog>
</package>
<package pkgid="4433f50f77cc81339f65caf77df5637faf297fbc9cbb457a6a7a21910523ca32" name="libgnutls30" arch="s390x">
  <version epoch="0" ver="3.7.3" rel="150400.4.41.3"/>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Security fix: [bsc#1218865, CVE-2024-0553]
  * Incomplete fix for CVE-2023-5981.
  * The response times to malformed ciphertexts in RSA-PSK
    ClientKeyExchange differ from response times of ciphertexts
    with correct PKCS#1 v1.5 padding.
  * Add gnutls-CVE-2024-0553.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492801">- Security fix: [bsc#1218862, CVE-2024-0567]
  * gnutls: rejects certificate chain with distributed trust
  * Cockpit (which uses gnuTLS) rejects certificate chain with
    distributed trust.
  * Add gnutls-CVE-2024-0567.patch</changelog>
</package>
<package pkgid="ac71e08bb3176660866c52570dfd9fadfd17f18c396c17c7779b0b17465ad941" name="libgnutls30" arch="x86_64">
  <version epoch="0" ver="3.7.3" rel="150400.4.41.3"/>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Security fix: [bsc#1218865, CVE-2024-0553]
  * Incomplete fix for CVE-2023-5981.
  * The response times to malformed ciphertexts in RSA-PSK
    ClientKeyExchange differ from response times of ciphertexts
    with correct PKCS#1 v1.5 padding.
  * Add gnutls-CVE-2024-0553.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492801">- Security fix: [bsc#1218862, CVE-2024-0567]
  * gnutls: rejects certificate chain with distributed trust
  * Cockpit (which uses gnuTLS) rejects certificate chain with
    distributed trust.
  * Add gnutls-CVE-2024-0567.patch</changelog>
</package>
<package pkgid="cf9de0d5a52eabd1a4ac16c3868a2bdaae0341d81436489bd062eebfe84f69ae" name="libgnutls30" arch="aarch64">
  <version epoch="0" ver="3.7.3" rel="150400.4.44.1"/>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Security fix: [bsc#1218865, CVE-2024-0553]
  * Incomplete fix for CVE-2023-5981.
  * The response times to malformed ciphertexts in RSA-PSK
    ClientKeyExchange differ from response times of ciphertexts
    with correct PKCS#1 v1.5 padding.
  * Add gnutls-CVE-2024-0553.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492801">- Security fix: [bsc#1218862, CVE-2024-0567]
  * gnutls: rejects certificate chain with distributed trust
  * Cockpit (which uses gnuTLS) rejects certificate chain with
    distributed trust.
  * Add gnutls-CVE-2024-0567.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
</package>
<package pkgid="06bda12ba2176e0073e940d71a81cb4d9abb5766580f5b9870641332321d2c02" name="libgnutls30" arch="s390x">
  <version epoch="0" ver="3.7.3" rel="150400.4.44.1"/>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Security fix: [bsc#1218865, CVE-2024-0553]
  * Incomplete fix for CVE-2023-5981.
  * The response times to malformed ciphertexts in RSA-PSK
    ClientKeyExchange differ from response times of ciphertexts
    with correct PKCS#1 v1.5 padding.
  * Add gnutls-CVE-2024-0553.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492801">- Security fix: [bsc#1218862, CVE-2024-0567]
  * gnutls: rejects certificate chain with distributed trust
  * Cockpit (which uses gnuTLS) rejects certificate chain with
    distributed trust.
  * Add gnutls-CVE-2024-0567.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
</package>
<package pkgid="2c04db86002fbabcd3077057366c15d20ed1061805336b0c74108cace732d2bb" name="libgnutls30" arch="x86_64">
  <version epoch="0" ver="3.7.3" rel="150400.4.44.1"/>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Security fix: [bsc#1218865, CVE-2024-0553]
  * Incomplete fix for CVE-2023-5981.
  * The response times to malformed ciphertexts in RSA-PSK
    ClientKeyExchange differ from response times of ciphertexts
    with correct PKCS#1 v1.5 padding.
  * Add gnutls-CVE-2024-0553.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492801">- Security fix: [bsc#1218862, CVE-2024-0567]
  * gnutls: rejects certificate chain with distributed trust
  * Cockpit (which uses gnuTLS) rejects certificate chain with
    distributed trust.
  * Add gnutls-CVE-2024-0567.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
</package>
<package pkgid="b336378fcbcf834d28bf219b9b4a4380a85167e61287be314ee062ca9a6dc8e0" name="libgnutls30-hmac" arch="aarch64">
  <version epoch="0" ver="3.7.3" rel="150400.4.38.1"/>
  <changelog author="pmonreal@suse.com" date="1652097600">- FIPS: Add missing requirements for the SLI [bsc#1190698]
  * Remove 3DES from FIPS approved algorithms:
  - gnutls-Remove-3DES-from-FIPS-approved-algos.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570
  * DRBG service (gnutls_rnd) should be considered approved:
  - gnutls-Add-missing-FIPS-service-indicator-transitions.patch
  - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch
  - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569</changelog>
  <changelog author="pmonreal@suse.com" date="1652097601">- FIPS: Make sure zeroization is performed in all API functions
  * Add gnutls-zeroization-API-functions.patch [bsc#1191021]
  * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573</changelog>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
</package>
<package pkgid="1db88ff1441d008e673cfbf542cb884fcb62d56bcf147fe4eb65b0d24bd8f531" name="libgnutls30-hmac" arch="s390x">
  <version epoch="0" ver="3.7.3" rel="150400.4.38.1"/>
  <changelog author="pmonreal@suse.com" date="1652097600">- FIPS: Add missing requirements for the SLI [bsc#1190698]
  * Remove 3DES from FIPS approved algorithms:
  - gnutls-Remove-3DES-from-FIPS-approved-algos.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570
  * DRBG service (gnutls_rnd) should be considered approved:
  - gnutls-Add-missing-FIPS-service-indicator-transitions.patch
  - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch
  - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569</changelog>
  <changelog author="pmonreal@suse.com" date="1652097601">- FIPS: Make sure zeroization is performed in all API functions
  * Add gnutls-zeroization-API-functions.patch [bsc#1191021]
  * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573</changelog>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
</package>
<package pkgid="cf2152ac120095c3511db02cb21d650c72740c01295dc610eeeb2e31b8001891" name="libgnutls30-hmac" arch="x86_64">
  <version epoch="0" ver="3.7.3" rel="150400.4.38.1"/>
  <changelog author="pmonreal@suse.com" date="1652097600">- FIPS: Add missing requirements for the SLI [bsc#1190698]
  * Remove 3DES from FIPS approved algorithms:
  - gnutls-Remove-3DES-from-FIPS-approved-algos.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570
  * DRBG service (gnutls_rnd) should be considered approved:
  - gnutls-Add-missing-FIPS-service-indicator-transitions.patch
  - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch
  - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569</changelog>
  <changelog author="pmonreal@suse.com" date="1652097601">- FIPS: Make sure zeroization is performed in all API functions
  * Add gnutls-zeroization-API-functions.patch [bsc#1191021]
  * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573</changelog>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
</package>
<package pkgid="fca67704d249b35bb0a6c19bd9fcec3e4ca6520341fc32e805f43a4b01485322" name="libgnutls30-hmac" arch="aarch64">
  <version epoch="0" ver="3.7.3" rel="150400.4.41.3"/>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Security fix: [bsc#1218865, CVE-2024-0553]
  * Incomplete fix for CVE-2023-5981.
  * The response times to malformed ciphertexts in RSA-PSK
    ClientKeyExchange differ from response times of ciphertexts
    with correct PKCS#1 v1.5 padding.
  * Add gnutls-CVE-2024-0553.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492801">- Security fix: [bsc#1218862, CVE-2024-0567]
  * gnutls: rejects certificate chain with distributed trust
  * Cockpit (which uses gnuTLS) rejects certificate chain with
    distributed trust.
  * Add gnutls-CVE-2024-0567.patch</changelog>
</package>
<package pkgid="ba0bfcb6b4deee631f8daefb84ec7e40552bc82461782a54c47cb81cdfa7a3c1" name="libgnutls30-hmac" arch="s390x">
  <version epoch="0" ver="3.7.3" rel="150400.4.41.3"/>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Security fix: [bsc#1218865, CVE-2024-0553]
  * Incomplete fix for CVE-2023-5981.
  * The response times to malformed ciphertexts in RSA-PSK
    ClientKeyExchange differ from response times of ciphertexts
    with correct PKCS#1 v1.5 padding.
  * Add gnutls-CVE-2024-0553.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492801">- Security fix: [bsc#1218862, CVE-2024-0567]
  * gnutls: rejects certificate chain with distributed trust
  * Cockpit (which uses gnuTLS) rejects certificate chain with
    distributed trust.
  * Add gnutls-CVE-2024-0567.patch</changelog>
</package>
<package pkgid="6715043f953ba6c8178d1ba204a1dd0562ac33306badb76ebbf25aa3b78a9c4b" name="libgnutls30-hmac" arch="x86_64">
  <version epoch="0" ver="3.7.3" rel="150400.4.41.3"/>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Security fix: [bsc#1218865, CVE-2024-0553]
  * Incomplete fix for CVE-2023-5981.
  * The response times to malformed ciphertexts in RSA-PSK
    ClientKeyExchange differ from response times of ciphertexts
    with correct PKCS#1 v1.5 padding.
  * Add gnutls-CVE-2024-0553.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492801">- Security fix: [bsc#1218862, CVE-2024-0567]
  * gnutls: rejects certificate chain with distributed trust
  * Cockpit (which uses gnuTLS) rejects certificate chain with
    distributed trust.
  * Add gnutls-CVE-2024-0567.patch</changelog>
</package>
<package pkgid="d6080d366fae190f1c86e4f4fa5afe40739101a97cb6c870570e4987516eed05" name="libgnutls30-hmac" arch="aarch64">
  <version epoch="0" ver="3.7.3" rel="150400.4.44.1"/>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Security fix: [bsc#1218865, CVE-2024-0553]
  * Incomplete fix for CVE-2023-5981.
  * The response times to malformed ciphertexts in RSA-PSK
    ClientKeyExchange differ from response times of ciphertexts
    with correct PKCS#1 v1.5 padding.
  * Add gnutls-CVE-2024-0553.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492801">- Security fix: [bsc#1218862, CVE-2024-0567]
  * gnutls: rejects certificate chain with distributed trust
  * Cockpit (which uses gnuTLS) rejects certificate chain with
    distributed trust.
  * Add gnutls-CVE-2024-0567.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
</package>
<package pkgid="d1571ebb9ffc92d3ecb77c4ea06f4e76444d23694e90485c8a666a11f31fac12" name="libgnutls30-hmac" arch="s390x">
  <version epoch="0" ver="3.7.3" rel="150400.4.44.1"/>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Security fix: [bsc#1218865, CVE-2024-0553]
  * Incomplete fix for CVE-2023-5981.
  * The response times to malformed ciphertexts in RSA-PSK
    ClientKeyExchange differ from response times of ciphertexts
    with correct PKCS#1 v1.5 padding.
  * Add gnutls-CVE-2024-0553.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492801">- Security fix: [bsc#1218862, CVE-2024-0567]
  * gnutls: rejects certificate chain with distributed trust
  * Cockpit (which uses gnuTLS) rejects certificate chain with
    distributed trust.
  * Add gnutls-CVE-2024-0567.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
</package>
<package pkgid="27687786ce78846dab57c170a299d75d0b5f7eb998283594b774d5ee2f46feb3" name="libgnutls30-hmac" arch="x86_64">
  <version epoch="0" ver="3.7.3" rel="150400.4.44.1"/>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Security fix: [bsc#1218865, CVE-2024-0553]
  * Incomplete fix for CVE-2023-5981.
  * The response times to malformed ciphertexts in RSA-PSK
    ClientKeyExchange differ from response times of ciphertexts
    with correct PKCS#1 v1.5 padding.
  * Add gnutls-CVE-2024-0553.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492801">- Security fix: [bsc#1218862, CVE-2024-0567]
  * gnutls: rejects certificate chain with distributed trust
  * Cockpit (which uses gnuTLS) rejects certificate chain with
    distributed trust.
  * Add gnutls-CVE-2024-0567.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
</package>
<package pkgid="93f8ed8803db00fa30836f1dd494751536dd181fe0385a3767754e1ec7ff844a" name="libgobject-2_0-0" arch="aarch64">
  <version epoch="0" ver="2.70.5" rel="150400.3.11.1"/>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
  <changelog author="mgorse@suse.com" date="1716292800">- Add patches to fix CVE-2024-34397 (boo#1224044):
  glib2-CVE-2024-34397.patch (glgo#GNOME/glib#3268).
  glib2-fix-ibus-regression.patch (glgo#GNOME/glib#3353)</changelog>
</package>
<package pkgid="b3b9d69523a97dad06f90a478f655ed554cf9d38f1d765e35bde256a6fdb2096" name="libgobject-2_0-0" arch="s390x">
  <version epoch="0" ver="2.70.5" rel="150400.3.11.1"/>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
  <changelog author="mgorse@suse.com" date="1716292800">- Add patches to fix CVE-2024-34397 (boo#1224044):
  glib2-CVE-2024-34397.patch (glgo#GNOME/glib#3268).
  glib2-fix-ibus-regression.patch (glgo#GNOME/glib#3353)</changelog>
</package>
<package pkgid="5d2ef4afe362e009f5ead9130c488c66da901042ad3807d6dd119e67b80151b7" name="libgobject-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.70.5" rel="150400.3.11.1"/>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
  <changelog author="mgorse@suse.com" date="1716292800">- Add patches to fix CVE-2024-34397 (boo#1224044):
  glib2-CVE-2024-34397.patch (glgo#GNOME/glib#3268).
  glib2-fix-ibus-regression.patch (glgo#GNOME/glib#3353)</changelog>
</package>
<package pkgid="554d5f4110bea7753e20f8a5684d785e716fa1741a8d669827a816f4e681c4f2" name="libgobject-2_0-0" arch="aarch64">
  <version epoch="0" ver="2.70.5" rel="150400.3.14.1"/>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
  <changelog author="mgorse@suse.com" date="1716292800">- Add patches to fix CVE-2024-34397 (boo#1224044):
  glib2-CVE-2024-34397.patch (glgo#GNOME/glib#3268).
  glib2-fix-ibus-regression.patch (glgo#GNOME/glib#3353)</changelog>
  <changelog author="mgorse@suse.com" date="1724068800">- Add glib2-gdbusmessage-cache-arg0.patch: cache the arg0 value in
  a dbus message. Fixes a possible use after free (boo#1224044).</changelog>
</package>
<package pkgid="a5e385c8bbe085ec09c42382b633016d96395b0f21a61a5c73ce0500c24199e1" name="libgobject-2_0-0" arch="s390x">
  <version epoch="0" ver="2.70.5" rel="150400.3.14.1"/>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
  <changelog author="mgorse@suse.com" date="1716292800">- Add patches to fix CVE-2024-34397 (boo#1224044):
  glib2-CVE-2024-34397.patch (glgo#GNOME/glib#3268).
  glib2-fix-ibus-regression.patch (glgo#GNOME/glib#3353)</changelog>
  <changelog author="mgorse@suse.com" date="1724068800">- Add glib2-gdbusmessage-cache-arg0.patch: cache the arg0 value in
  a dbus message. Fixes a possible use after free (boo#1224044).</changelog>
</package>
<package pkgid="966d2c8d32db070a0e6c86b194e5f3633c23dbea3a5b3b403f327082f435fcf6" name="libgobject-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.70.5" rel="150400.3.14.1"/>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
  <changelog author="mgorse@suse.com" date="1716292800">- Add patches to fix CVE-2024-34397 (boo#1224044):
  glib2-CVE-2024-34397.patch (glgo#GNOME/glib#3268).
  glib2-fix-ibus-regression.patch (glgo#GNOME/glib#3353)</changelog>
  <changelog author="mgorse@suse.com" date="1724068800">- Add glib2-gdbusmessage-cache-arg0.patch: cache the arg0 value in
  a dbus message. Fixes a possible use after free (boo#1224044).</changelog>
</package>
<package pkgid="55ee36be79a5f62ff9fa5e34fe34287ba54002bc3a335706d6c73c92a8a2d011" name="libgstallocators-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.22.0" rel="150500.3.8.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix SRT subtitle parsing heap-based
  buffer overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="457e633d22596b2ce78754575ead042c8bdf1cb3117a870cc04a873ddd99a68c" name="libgstallocators-1_0-0" arch="s390x">
  <version epoch="0" ver="1.22.0" rel="150500.3.8.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix SRT subtitle parsing heap-based
  buffer overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="185a5adf03fcf0ee19989ec3309030e7ff3b469c452019cd93f0cc21e57b5a9d" name="libgstallocators-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.22.0" rel="150500.3.8.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix SRT subtitle parsing heap-based
  buffer overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="c81afd85be59b045f32f8b9cf5d56b821b591893cd3fe63f2d18c651c0182fa7" name="libgstapp-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.22.0" rel="150500.3.8.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix SRT subtitle parsing heap-based
  buffer overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="39349a15454ffb6360a25d3fc6051d2b09b92442c78d38f13bc44e7fc727bc3d" name="libgstapp-1_0-0" arch="s390x">
  <version epoch="0" ver="1.22.0" rel="150500.3.8.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix SRT subtitle parsing heap-based
  buffer overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="04141056ca06e76e29b7187b745a3124591c104ce5c65adffad0c42b876f77f1" name="libgstapp-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.22.0" rel="150500.3.8.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix SRT subtitle parsing heap-based
  buffer overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="bbf0db68970cd59703d338aa0079cb339f26b3631c551ea516f038437b80ffb2" name="libgstaudio-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.22.0" rel="150500.3.8.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix SRT subtitle parsing heap-based
  buffer overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="0048c9bdbb36179dc327108d3fa38575da2f09b70ffc9192b95b5802999ca34c" name="libgstaudio-1_0-0" arch="s390x">
  <version epoch="0" ver="1.22.0" rel="150500.3.8.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix SRT subtitle parsing heap-based
  buffer overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="42de3281e60cc4917bacd5b49f2b366ee2165de60083af6e68422c68e35aaa5a" name="libgstaudio-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.22.0" rel="150500.3.8.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix SRT subtitle parsing heap-based
  buffer overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="9afe79d9e3990ba36159d94b234c559645b37d225754c06b3d6ba96148cf2379" name="libgstgl-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.22.0" rel="150500.3.8.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix SRT subtitle parsing heap-based
  buffer overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="c6026f10bafa7aac2bd50cf7bdec0e64cc3e1fe948dcc9a737278678844ec21b" name="libgstgl-1_0-0" arch="s390x">
  <version epoch="0" ver="1.22.0" rel="150500.3.8.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix SRT subtitle parsing heap-based
  buffer overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="078fdfabc413f28f7f05b4ad4f20c73de1477b58344f7a994e840b8fcaaeeefa" name="libgstgl-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.22.0" rel="150500.3.8.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix SRT subtitle parsing heap-based
  buffer overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="e47578d68314d2de170f639dd2edffc13fd2bc38b772dcda4f13756b2aff8154" name="libgstpbutils-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.22.0" rel="150500.3.8.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix SRT subtitle parsing heap-based
  buffer overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="b869a5ad2b466c21651bf875ce6fb367b9d5bb61688cb225c18ccc49f943dfc7" name="libgstpbutils-1_0-0" arch="s390x">
  <version epoch="0" ver="1.22.0" rel="150500.3.8.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix SRT subtitle parsing heap-based
  buffer overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="1d4a5e42c3485019d5540465a119183adb1d374afcbfa0fe52faa6ac3f8394c9" name="libgstpbutils-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.22.0" rel="150500.3.8.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix SRT subtitle parsing heap-based
  buffer overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="099ced5550609aee319d8494b6f925291b3e02168df82a480dbbbba1cf9ddc53" name="libgstriff-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.22.0" rel="150500.3.8.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix SRT subtitle parsing heap-based
  buffer overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="1520a0435a4e470e7aee423240a8c8aacb8309f9e9b02b101fdb71e53c56905b" name="libgstriff-1_0-0" arch="s390x">
  <version epoch="0" ver="1.22.0" rel="150500.3.8.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix SRT subtitle parsing heap-based
  buffer overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="2328e529aaaae45369637d9d43cf0623328efcb8832fd2245a8e29adae988574" name="libgstriff-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.22.0" rel="150500.3.8.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix SRT subtitle parsing heap-based
  buffer overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="9e4fc2d417d0d4486e95ca7160dad3ca11e7a30e011f425adf22e2d78202143a" name="libgsttag-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.22.0" rel="150500.3.8.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix SRT subtitle parsing heap-based
  buffer overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="4f44029227b8ca07bda9fa3c4554af924cfef4f19589d0a967c49eccda3c03d0" name="libgsttag-1_0-0" arch="s390x">
  <version epoch="0" ver="1.22.0" rel="150500.3.8.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix SRT subtitle parsing heap-based
  buffer overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="403a730c0c91a5da2aa2930c93ff6a7337d5b89c1c64cd5ac0d565f5950ee94b" name="libgsttag-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.22.0" rel="150500.3.8.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix SRT subtitle parsing heap-based
  buffer overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="ee768734f7f5a3951a98499ade7116ed7ea3a42193cdcff65641514c11745c81" name="libgstvideo-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.22.0" rel="150500.3.8.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix SRT subtitle parsing heap-based
  buffer overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="e135b2092d56743ee51493a3b2adecd84e25ffe924a8bd2af6777e56bc18957d" name="libgstvideo-1_0-0" arch="s390x">
  <version epoch="0" ver="1.22.0" rel="150500.3.8.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix SRT subtitle parsing heap-based
  buffer overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="0b2b4cb3eff7aae9900293f870cdf47856ac484fb8db62d242259195f767e08c" name="libgstvideo-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.22.0" rel="150500.3.8.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + appsrc: Clarify buffer ref semantics in signals documentation
  + appsrc: fix annotations for bindings
  + typefind: Skip extension parsing for data:// URIs, fixing
    regression with mp4 files serialised to data uris
  + playbin3: various fixes
  + playbin3: fix missing lock when unknown stream type in
    pad-removed cb
  + decodebin3: fix collection leaks
  + decodebin3: Don't duplicate stream selections
  + discoverer: chain up to parent finalize methods in all our
    types to fix memory leaks
  + glmixerbin: slightly better pad/element creation
  + gltransformation: let graphene alloc its structures memory
    aligned
  + ogg: fix possible buffer overrun
  + rtpbasepayload: Don't write header extensions if there's no
    corresponding...
  + rtpbasepayload: always store input buffer meta before
    negotiation
  + rtpbasepayload: fix transfer annotation for push and push_list
  + subparse: don't try to index string with -1
  + riff-media: fix memory leak after usage for g_strjoin()
  + playbin/playbin3: Allow setting a NULL URI
  + playsink: Complete reconfiguration on pad release.
  + parsebin: Expose streams of unknown type
  + pbutils: Fix wmv screen description detection
  + subparse: don't deref a potentially NULL variable
  + rawvideoparse: set format from caps in
    gst_raw_video_parse_set_config_from_caps
  + videodecoder: release stream lock after handling gap events
  + videorate: fix assertion when pushing last and only buffer
    without duration
  + videorate: Revert "don't reset on segment update" to fix
    segment handling regressions
  + gst-play-1.0, gst-launch-1.0: Enable win32 high-resolution
    timer also for MinGW build
- Drop patch already included in 1.20.2:
  + 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix SRT subtitle parsing heap-based
  buffer overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
</package>
<package pkgid="f19ef4c9b5ac08e5650376012d2f06a52e4da5a5ad32ee2538e3bd9b99f513c9" name="libgtk-2_0-0" arch="aarch64">
  <version epoch="0" ver="2.24.33" rel="150400.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1513857600">- Update to version 2.24.31+20171209.61d5c82f5c:
  + Fix updating the widget accessible description when using its
    tooltip
  + Fix introspection builds on Visual Studio 2017
  + imcontextxim: Fix showing glyph in status window
  + Visual Studio builds: Improve binary security
  + Fixed: If can’t add child, don’t add to child info
  + ComboBox: Don’t let modes disconnect each other
  + Enter submenus when activating their parent item
  + ComboBox: Don’t pile up ::grab-broken handlers
  + testcombo: Test grid :row- and :column-span-column
  + Updated translations.
- Switch to git checkout via source service.
- Following the above, remove gnome-common BuildRequires and
  gnome-autogen.sh call. Replace with libtool BuildRequires and
  autogen.sh call, also add gtk-doc BuildRequires and pass
  - -enable-gtk-doc to configure.
- Clean up patch numbering.
- Drop gtk2-window-dragging.patch: Fixed upstream (bgo#554057).
- Drop bugzilla-131498-allow-xim-for-all-languages.patch: This
  patch was only applied to work around a missing recommends for
  scim-32Bit, stop doing that, as we should not fix errors in other
  packages in a toolkit.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="yfjiang@suse.com" date="1514289600">- Manually move the position of "Group System/Libraries" line,
  which was moved automatically by format_spec_file, above the
  comment of "Requires: hicolor-icon-theme":
  https://lists.opensuse.org/opensuse-packaging/2017-07/msg00062.html</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515499200">- Update to version 2.24.32:
  + Fix abicheck.
- Use the release version as revision and set versionformat to
  PARENT_TAG, ensure we build the upstream released tag.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Use SPDX3.0 license tags and package COPYING as %license</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="dimstar@opensuse.org" date="1522152000">- Add 0001-build-support-automake-1.16.patch: Support automake
  1.16.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524052800">- Update _service to point to new
  https://gitlab.gnome.org/GNOME/gtk.git home.</changelog>
  <changelog author="tchvatal@suse.com" date="1533816000">- Fix package name to be uniform immodules -&gt; immodule bsc#1104264</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1555416000">- Update to version 2.24.32+54:
  + Force redraw on Mojave and later when processing updates.
  + Fix UAC manifest RC file
  + atk key: Always convert control character events into key names
  + icontheme: Fix annotations on array arguments
  + MSVC introspection: Make more robust and avoid confusion
  + Revert "gdk: deactivation/activate window on keyboard grabs"
  + gtk/gtkiconcache.c: Fix running on GLib-2.57.3 or later on
    Windows
  + MSVC builds: Fix pkg-config file generation
  + MSVC builds: Improve pkg-config files generation
  + [gdk|gtk]/Makefile.am: Fix CFlags passed to introspecion on
    MSVC
- Switch to gitcheckout of stable branch again, upstream is not
  making releases.
- Drop 0001-build-support-automake-1.16.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="dimstar@opensuse.org" date="1568203200">- Update to version 2.24.32+62 (boo#1147106):
  * gtk-builder-convert: Update bug report URL.
  * gtk-builder-convert: Remove compat code for Python 2.3 and
  * below.
  * Make gtk-builder-convert compatible with Python 3.
  * Fix use-after-free due to unexpected unref of context-&gt;default_style.
  * Visual Studio builds: Fix previous commit.
  * Visual Studio builds: "Add" Visual Studio 2019 projects.
- Drop gtk2-converter-python3.patch: fixed upstream.
- Replace shebang in ./gtk/gtk-builder-convert using sed (use
  python3).</changelog>
  <changelog author="dimstar@opensuse.org" date="1574164800">- Update to version 2.24.32+67:
  * Do not use VIQR input method for vi locale by default
  * Add CI for gtk-2-24
  * win32: Remove extraneous changes</changelog>
  <changelog author="mvetter@suse.com" date="1575979200">- bsc#1158897: Remove dependency on jasper (due to planned removal)
  Removes JPEG2000 support.</changelog>
  <changelog author="fcrozat@suse.com" date="1576584000">- Add Obsoletes/Provides to baselibs.conf to ensure
  gtk2-immodule-tigrigna-32bit can be upgraded from old version.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1594555200">- Update to version 2.24.32+70:
  * Resolve GIMP segfault from accessing memory past end of pixbuf
    Fixes https://gitlab.gnome.org/GNOME/gtk/-/issues/2684
  * Use bundle id instead of package name for the macOS preview as
    filename is now changed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608638400">- Update to version 2.24.33:
  + This is the final GTK 2.x release. There will be no more
    updates to GTK 2. All users are encouraged to update to GTK 3
    or 4.
  + Make the output of gtk-query-immodules deterministic.
  + GtkCalendar: Use %OB if supported.
  + GtkIconTheme: prefer exact matches.
  + build:
  - Support automake 1.16.
  - Fix compiler warnings with newer gcc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1634817600">- Add gtk2-rpmlintrc (boo#1191758):
  + Filter wrong split request for libgdk-x11-2.0.so.0: the
    library shares the version info with gtk2 and is allowed to be
    in the same library package.
  + Filter libgail.so.18 split request: the error is actually
    correct, but gtk2 being a legacy package does not justify the
    extra efort. The libgtk-2_0-0 package is the only consumer.</changelog>
  <changelog author="mgorse@suse.com" date="1721649600">- Add CVE-2024-6655.patch: CVE-2024-6655 Stop looking for modules
  in cwd (bsc#1228120).</changelog>
</package>
<package pkgid="cd8d396b7568cb57d08423d377827dacd885e315f49e6558fb6d0c514b01fc38" name="libgtk-2_0-0" arch="s390x">
  <version epoch="0" ver="2.24.33" rel="150400.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1513857600">- Update to version 2.24.31+20171209.61d5c82f5c:
  + Fix updating the widget accessible description when using its
    tooltip
  + Fix introspection builds on Visual Studio 2017
  + imcontextxim: Fix showing glyph in status window
  + Visual Studio builds: Improve binary security
  + Fixed: If can’t add child, don’t add to child info
  + ComboBox: Don’t let modes disconnect each other
  + Enter submenus when activating their parent item
  + ComboBox: Don’t pile up ::grab-broken handlers
  + testcombo: Test grid :row- and :column-span-column
  + Updated translations.
- Switch to git checkout via source service.
- Following the above, remove gnome-common BuildRequires and
  gnome-autogen.sh call. Replace with libtool BuildRequires and
  autogen.sh call, also add gtk-doc BuildRequires and pass
  - -enable-gtk-doc to configure.
- Clean up patch numbering.
- Drop gtk2-window-dragging.patch: Fixed upstream (bgo#554057).
- Drop bugzilla-131498-allow-xim-for-all-languages.patch: This
  patch was only applied to work around a missing recommends for
  scim-32Bit, stop doing that, as we should not fix errors in other
  packages in a toolkit.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="yfjiang@suse.com" date="1514289600">- Manually move the position of "Group System/Libraries" line,
  which was moved automatically by format_spec_file, above the
  comment of "Requires: hicolor-icon-theme":
  https://lists.opensuse.org/opensuse-packaging/2017-07/msg00062.html</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515499200">- Update to version 2.24.32:
  + Fix abicheck.
- Use the release version as revision and set versionformat to
  PARENT_TAG, ensure we build the upstream released tag.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Use SPDX3.0 license tags and package COPYING as %license</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="dimstar@opensuse.org" date="1522152000">- Add 0001-build-support-automake-1.16.patch: Support automake
  1.16.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524052800">- Update _service to point to new
  https://gitlab.gnome.org/GNOME/gtk.git home.</changelog>
  <changelog author="tchvatal@suse.com" date="1533816000">- Fix package name to be uniform immodules -&gt; immodule bsc#1104264</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1555416000">- Update to version 2.24.32+54:
  + Force redraw on Mojave and later when processing updates.
  + Fix UAC manifest RC file
  + atk key: Always convert control character events into key names
  + icontheme: Fix annotations on array arguments
  + MSVC introspection: Make more robust and avoid confusion
  + Revert "gdk: deactivation/activate window on keyboard grabs"
  + gtk/gtkiconcache.c: Fix running on GLib-2.57.3 or later on
    Windows
  + MSVC builds: Fix pkg-config file generation
  + MSVC builds: Improve pkg-config files generation
  + [gdk|gtk]/Makefile.am: Fix CFlags passed to introspecion on
    MSVC
- Switch to gitcheckout of stable branch again, upstream is not
  making releases.
- Drop 0001-build-support-automake-1.16.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="dimstar@opensuse.org" date="1568203200">- Update to version 2.24.32+62 (boo#1147106):
  * gtk-builder-convert: Update bug report URL.
  * gtk-builder-convert: Remove compat code for Python 2.3 and
  * below.
  * Make gtk-builder-convert compatible with Python 3.
  * Fix use-after-free due to unexpected unref of context-&gt;default_style.
  * Visual Studio builds: Fix previous commit.
  * Visual Studio builds: "Add" Visual Studio 2019 projects.
- Drop gtk2-converter-python3.patch: fixed upstream.
- Replace shebang in ./gtk/gtk-builder-convert using sed (use
  python3).</changelog>
  <changelog author="dimstar@opensuse.org" date="1574164800">- Update to version 2.24.32+67:
  * Do not use VIQR input method for vi locale by default
  * Add CI for gtk-2-24
  * win32: Remove extraneous changes</changelog>
  <changelog author="mvetter@suse.com" date="1575979200">- bsc#1158897: Remove dependency on jasper (due to planned removal)
  Removes JPEG2000 support.</changelog>
  <changelog author="fcrozat@suse.com" date="1576584000">- Add Obsoletes/Provides to baselibs.conf to ensure
  gtk2-immodule-tigrigna-32bit can be upgraded from old version.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1594555200">- Update to version 2.24.32+70:
  * Resolve GIMP segfault from accessing memory past end of pixbuf
    Fixes https://gitlab.gnome.org/GNOME/gtk/-/issues/2684
  * Use bundle id instead of package name for the macOS preview as
    filename is now changed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608638400">- Update to version 2.24.33:
  + This is the final GTK 2.x release. There will be no more
    updates to GTK 2. All users are encouraged to update to GTK 3
    or 4.
  + Make the output of gtk-query-immodules deterministic.
  + GtkCalendar: Use %OB if supported.
  + GtkIconTheme: prefer exact matches.
  + build:
  - Support automake 1.16.
  - Fix compiler warnings with newer gcc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1634817600">- Add gtk2-rpmlintrc (boo#1191758):
  + Filter wrong split request for libgdk-x11-2.0.so.0: the
    library shares the version info with gtk2 and is allowed to be
    in the same library package.
  + Filter libgail.so.18 split request: the error is actually
    correct, but gtk2 being a legacy package does not justify the
    extra efort. The libgtk-2_0-0 package is the only consumer.</changelog>
  <changelog author="mgorse@suse.com" date="1721649600">- Add CVE-2024-6655.patch: CVE-2024-6655 Stop looking for modules
  in cwd (bsc#1228120).</changelog>
</package>
<package pkgid="847f842ccc7e582d14cc91d8cd8c25224f4a79753646bcc7ea48780094e24567" name="libgtk-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.24.33" rel="150400.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1513857600">- Update to version 2.24.31+20171209.61d5c82f5c:
  + Fix updating the widget accessible description when using its
    tooltip
  + Fix introspection builds on Visual Studio 2017
  + imcontextxim: Fix showing glyph in status window
  + Visual Studio builds: Improve binary security
  + Fixed: If can’t add child, don’t add to child info
  + ComboBox: Don’t let modes disconnect each other
  + Enter submenus when activating their parent item
  + ComboBox: Don’t pile up ::grab-broken handlers
  + testcombo: Test grid :row- and :column-span-column
  + Updated translations.
- Switch to git checkout via source service.
- Following the above, remove gnome-common BuildRequires and
  gnome-autogen.sh call. Replace with libtool BuildRequires and
  autogen.sh call, also add gtk-doc BuildRequires and pass
  - -enable-gtk-doc to configure.
- Clean up patch numbering.
- Drop gtk2-window-dragging.patch: Fixed upstream (bgo#554057).
- Drop bugzilla-131498-allow-xim-for-all-languages.patch: This
  patch was only applied to work around a missing recommends for
  scim-32Bit, stop doing that, as we should not fix errors in other
  packages in a toolkit.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="yfjiang@suse.com" date="1514289600">- Manually move the position of "Group System/Libraries" line,
  which was moved automatically by format_spec_file, above the
  comment of "Requires: hicolor-icon-theme":
  https://lists.opensuse.org/opensuse-packaging/2017-07/msg00062.html</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515499200">- Update to version 2.24.32:
  + Fix abicheck.
- Use the release version as revision and set versionformat to
  PARENT_TAG, ensure we build the upstream released tag.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Use SPDX3.0 license tags and package COPYING as %license</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="dimstar@opensuse.org" date="1522152000">- Add 0001-build-support-automake-1.16.patch: Support automake
  1.16.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524052800">- Update _service to point to new
  https://gitlab.gnome.org/GNOME/gtk.git home.</changelog>
  <changelog author="tchvatal@suse.com" date="1533816000">- Fix package name to be uniform immodules -&gt; immodule bsc#1104264</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1555416000">- Update to version 2.24.32+54:
  + Force redraw on Mojave and later when processing updates.
  + Fix UAC manifest RC file
  + atk key: Always convert control character events into key names
  + icontheme: Fix annotations on array arguments
  + MSVC introspection: Make more robust and avoid confusion
  + Revert "gdk: deactivation/activate window on keyboard grabs"
  + gtk/gtkiconcache.c: Fix running on GLib-2.57.3 or later on
    Windows
  + MSVC builds: Fix pkg-config file generation
  + MSVC builds: Improve pkg-config files generation
  + [gdk|gtk]/Makefile.am: Fix CFlags passed to introspecion on
    MSVC
- Switch to gitcheckout of stable branch again, upstream is not
  making releases.
- Drop 0001-build-support-automake-1.16.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="dimstar@opensuse.org" date="1568203200">- Update to version 2.24.32+62 (boo#1147106):
  * gtk-builder-convert: Update bug report URL.
  * gtk-builder-convert: Remove compat code for Python 2.3 and
  * below.
  * Make gtk-builder-convert compatible with Python 3.
  * Fix use-after-free due to unexpected unref of context-&gt;default_style.
  * Visual Studio builds: Fix previous commit.
  * Visual Studio builds: "Add" Visual Studio 2019 projects.
- Drop gtk2-converter-python3.patch: fixed upstream.
- Replace shebang in ./gtk/gtk-builder-convert using sed (use
  python3).</changelog>
  <changelog author="dimstar@opensuse.org" date="1574164800">- Update to version 2.24.32+67:
  * Do not use VIQR input method for vi locale by default
  * Add CI for gtk-2-24
  * win32: Remove extraneous changes</changelog>
  <changelog author="mvetter@suse.com" date="1575979200">- bsc#1158897: Remove dependency on jasper (due to planned removal)
  Removes JPEG2000 support.</changelog>
  <changelog author="fcrozat@suse.com" date="1576584000">- Add Obsoletes/Provides to baselibs.conf to ensure
  gtk2-immodule-tigrigna-32bit can be upgraded from old version.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1594555200">- Update to version 2.24.32+70:
  * Resolve GIMP segfault from accessing memory past end of pixbuf
    Fixes https://gitlab.gnome.org/GNOME/gtk/-/issues/2684
  * Use bundle id instead of package name for the macOS preview as
    filename is now changed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608638400">- Update to version 2.24.33:
  + This is the final GTK 2.x release. There will be no more
    updates to GTK 2. All users are encouraged to update to GTK 3
    or 4.
  + Make the output of gtk-query-immodules deterministic.
  + GtkCalendar: Use %OB if supported.
  + GtkIconTheme: prefer exact matches.
  + build:
  - Support automake 1.16.
  - Fix compiler warnings with newer gcc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1634817600">- Add gtk2-rpmlintrc (boo#1191758):
  + Filter wrong split request for libgdk-x11-2.0.so.0: the
    library shares the version info with gtk2 and is allowed to be
    in the same library package.
  + Filter libgail.so.18 split request: the error is actually
    correct, but gtk2 being a legacy package does not justify the
    extra efort. The libgtk-2_0-0 package is the only consumer.</changelog>
  <changelog author="mgorse@suse.com" date="1721649600">- Add CVE-2024-6655.patch: CVE-2024-6655 Stop looking for modules
  in cwd (bsc#1228120).</changelog>
</package>
<package pkgid="32bebf8891c5a3eee3cff930fef16c910a6d6c736ca7d2d2bc920fcfc34a26ce" name="libgtk-3-0" arch="aarch64">
  <version epoch="0" ver="3.24.34" rel="150400.3.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
  <changelog author="mgorse@suse.com" date="1721649600">- Add CVE-2024-6655.patch: CVE-2024-6655 Stop looking for modules
  in cwd (bsc#1228120).</changelog>
</package>
<package pkgid="75cbf6ce7fd89daa24b8a2362799d6160a3af887a08ebd089a91c051068dbedb" name="libgtk-3-0" arch="s390x">
  <version epoch="0" ver="3.24.34" rel="150400.3.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
  <changelog author="mgorse@suse.com" date="1721649600">- Add CVE-2024-6655.patch: CVE-2024-6655 Stop looking for modules
  in cwd (bsc#1228120).</changelog>
</package>
<package pkgid="31ac6dce54f4fb40ddecdce1e2d3d3a671afc7783f5d3f5bf77f63b1608a2cf5" name="libgtk-3-0" arch="x86_64">
  <version epoch="0" ver="3.24.34" rel="150400.3.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
  <changelog author="mgorse@suse.com" date="1721649600">- Add CVE-2024-6655.patch: CVE-2024-6655 Stop looking for modules
  in cwd (bsc#1228120).</changelog>
</package>
<package pkgid="e0f541a34dff7151c898bee0ec596adc89c0422a9d61761baea33b1c2940d1ec" name="libguestfs" arch="src">
  <version epoch="0" ver="1.48.6" rel="150500.3.8.1"/>
  <changelog author="carnold@suse.com" date="1635249600">- Fix build errors in Factory
  * Alert ocaml_deprecated_cli: Setting a warning with a sequence
    of lowercase or uppercase letters, like 'CDEFLMPSUVYZX', is
    deprecated.
  63c9cd93-m4-guestfs-ocaml.m4-Fix-deprecated-warning-format.patch
  * Error (warning 6 [labels-omitted]): label verbose was omitted
    in the application of this function.
  a4930f5f-customize-Suppress-OCaml-warning.patch</changelog>
  <changelog author="ohering@suse.de" date="1639483200">- Add python-rpm-macros (bsc#1180125)</changelog>
  <changelog author="carnold@suse.com" date="1644235200">- bsc#1195415 - libguestfs: consider dropping build requirement on
  systemd-sysvinit
  libguestfs.spec</changelog>
  <changelog author="carnold@suse.com" date="1645012800">- Update to version 1.46.2
  * This release has moved many virt tools like virt-builder,
    virt-cat, virt-customize, virt-df, etc. to the guestfs-tools
    project. This makes libguestfs a bit easier to build and manage.
  * The build now uses and requires PCRE2 (instead of PCRE).
  * This version requires libvirt ≥ 7.1.0, if libvirt is enabled.
  * gnulib is no longer bundled with libguestfs, making builds from
    git much simpler.
  * Perl Sys::Virt (libvirt bindings for Perl) are no longer
    required by libguestfs.
  * The code has been compiled with both LTO and GCC -fanalyzer and
    many bugs and warnings fixed.
  * Various fixes for qemu 6.1.
  * Update appliance packages on SUSE and several other improvements
    to the init script (Olaf Hering).
  * We now use the qemu / libvirt feature -cpu max to select the
    best CPU to run the appliance.
  * When passing the appliance filesystem UUID to supermin we now
    read it directly out of the appliance instead of using the
    file(1) program. This is more reliable.
  * The qemu -enable-fips option is no longer used. It was not
    needed and has been deprecated by qemu.
  * We no longer use qemu's sga (Serial Graphics Adapter) option
    ROM, instead using the equivalent seabios feature.
  * Various bug fixes
- Package changes
  * New libguestfs.spec file.
  * Moved guestfs-tools to a new and separate project and package
  * Renamed packages
    guestfs-winsupport -&gt; libguestfs-winsupport
    guestfsd -&gt; libguestfsd
  * New packages
    libguestfs, libguestfs-typelib-Guestfs,
    libguestfs-gobject, libguestfs-gobject-devel
    libguestfs-rescue, libguestfs-rsync, libguestfs-xfs
  * Dropped package libguestfs-test
- Dropped scripts and patches
  Pod-Simple-3.23.tar.xz
  libguestfs.test.simple.create-opensuse-guest-crypt-on-lvm.sh
  libguestfs.test.simple.create-opensuse-guest.sh
  libguestfs.test.simple.create-sles12-guest-crypt-on-lvm.sh
  libguestfs.test.simple.create-sles12-guest.sh
  libguestfs.test.simple.run-libugestfs-test-tool.sh
  0001-Introduce-a-wrapper-around-xmlParseURI.patch
  0002-common-extract-UTF-8-conversion-function.patch
  0003-inspector-rpm-summary-and-description-may-not-be-utf.patch
  489b14b7-ocaml-examples-Link-examples-to-gnulib.patch
  63c9cd93-m4-guestfs-ocaml.m4-Fix-deprecated-warning-format.patch
  68a02c2f-customize--resize--sparsify--sysprep-Link-explicitly-with-pthread.patch
  9db0c98c-appliance-enable-bashs-Process-Substitution-feature.patch
  a4930f5f-customize-Suppress-OCaml-warning.patch
  c0de4de9-appliance-add-reboot-and-netconfig-for-SUSE.patch
  e26cfa44-daemon-Build-with--pthread.patch
  f47e0bb6-appliance-reorder-mounting-of-special-filesystems-in-init.patch
  appliance.patch
  libguestfs.env.patch
  makefile-ocaml-find-guestfs.patch
  netconfig.patch</changelog>
  <changelog author="carnold@suse.com" date="1647518400">- Update to version 1.48.0
  * Fix allocation and deallocation of string lists in golang
    bindings (Laszlo Ersek).
  * Multiple fixes to the OCaml bindings:
  * Add support for Kylin (Laszlo Ersek).
  * Add support for Rocky Linux (Neil Hanlon).
  * Inspection of guests which use LUKS encryption on top of LVM
    logical volumes should now work (Laszlo Ersek).
  * "guestfs_list_9p" and "guestfs_mount_9p" are deprecated and
    now return errors.
  * "guestfs_remove_drive" has been deprecated and now returns an
    error.
  * "guestfs_add_drive" no longer supports hotplugging
  * In "guestfs_xfs_admin" the "lazycounter" parameter is deprecated
    because it is no longer supported in recent versions of XFS.
  * The User-mode Linux ("uml") backend has been removed.
  * Partition APIs now cope with the broken MBR partition tables
    created by dosfstools ≥ 4.2 (Laszlo Ersek).
  * Various bug fixes</changelog>
  <changelog author="hpj@urpla.net" date="1649851200">- Avoid useless builds, if ocaml version isn't up to the task
  libguestfs uses get_uint8(), available since ocaml 4.13.0</changelog>
  <changelog author="hpj@urpla.net" date="1649851201">- Add relevant %post{,un} sections
- Add another rpmlint filter
- Add uk man dirs</changelog>
  <changelog author="carnold@suse.com" date="1650283200">- Update to version 1.48.1
  * Updated language files
  * A few bug fixes in this release
  * Drop requirement for newer ocaml required by Bytes.get_uint8.
    It is replaced with a local implementation.</changelog>
  <changelog author="carnold@suse.com" date="1654084800">- Update to version 1.48.3
  * Several bugs fixed in this release since version 1.48.1
  * Updated language files</changelog>
  <changelog author="carnold@suse.com" date="1654257600">- bsc#1190501 - virt-builder fails to install packages when
  building an image. Add Recommends: dhcp-client for the appliance.
  libguestfs.spec</changelog>
  <changelog author="carnold@suse.com" date="1656504000">- bsc#1201064 - Libguestfs: Buffer overflow in get_keys leads
  to DOS - CVE-2022-2211
  CVE-2022-2211-options-fix-buffer-overflow-in-get_keys.patch
  CVE-2022-2211-docs-guestfs-security-document.patch</changelog>
  <changelog author="carnold@suse.com" date="1657627200">- Update to version 1.48.4
  * This is a bug fix release
- Drop patches included in new tarball
  CVE-2022-2211-docs-guestfs-security-document.patch
  CVE-2022-2211-options-fix-buffer-overflow-in-get_keys.patch</changelog>
  <changelog author="carnold@suse.com" date="1662465600">- Upstream patch to fix running configure --disable-ocaml
  f162e47e-m4-Fix-configure-disable-ocaml.patch</changelog>
  <changelog author="carnold@suse.com" date="1664884800">- jsc#PED-2113 [Virt Tools] Refresh Virtualization Tools for Xen
  and KVM Management</changelog>
  <changelog author="carnold@suse.com" date="1665748800">- Drop requirement for icoutils in SLE as this package is not
  available.
  libguestfs.spec</changelog>
  <changelog author="lnussel@suse.de" date="1666267200">- Drop reiserfs (boo#1191092)</changelog>
  <changelog author="carnold@suse.com" date="1669723200">- Update to version 1.48.6
  * jsc#PED-2113
  * This is a bug fix release. No upstream changelog.
- Drop f162e47e-m4-Fix-configure-disable-ocaml.patch</changelog>
  <changelog author="carnold@suse.com" date="1688558400">- bsc#1212972 - cannot find any suitable libguestfs supermin
  libguestfs.spec (see also bsc#1215664)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1688990400">- bsc#1213243 - KubeVirt needs libguestfs with the support of qcow2
  appliances
  Configure with --enable-appliance-format-auto to allow
  qcow2-format fixed appliances.
  libguestfs.spec</changelog>
  <changelog author="carnold@suse.com" date="1695643200">- bsc#1215543 - guestfs regression: file: Use -S option with -z
  Omit-file--S-option-on-older-distros-that-lack-support.patch
  See also bsc#1215461
- bsc#1215586 - guestfs regression: non functional network due to
  missing sysconfig-netconfig
  libguestfs.spec</changelog>
</package>
<package pkgid="2124df8c3697f953d306f5f462f5e78bef3ade11efede09853a426a9db83aa1b" name="libguestfs0" arch="aarch64">
  <version epoch="0" ver="1.48.6" rel="150500.3.8.1"/>
  <changelog author="carnold@suse.com" date="1635249600">- Fix build errors in Factory
  * Alert ocaml_deprecated_cli: Setting a warning with a sequence
    of lowercase or uppercase letters, like 'CDEFLMPSUVYZX', is
    deprecated.
  63c9cd93-m4-guestfs-ocaml.m4-Fix-deprecated-warning-format.patch
  * Error (warning 6 [labels-omitted]): label verbose was omitted
    in the application of this function.
  a4930f5f-customize-Suppress-OCaml-warning.patch</changelog>
  <changelog author="ohering@suse.de" date="1639483200">- Add python-rpm-macros (bsc#1180125)</changelog>
  <changelog author="carnold@suse.com" date="1644235200">- bsc#1195415 - libguestfs: consider dropping build requirement on
  systemd-sysvinit
  libguestfs.spec</changelog>
  <changelog author="carnold@suse.com" date="1645012800">- Update to version 1.46.2
  * This release has moved many virt tools like virt-builder,
    virt-cat, virt-customize, virt-df, etc. to the guestfs-tools
    project. This makes libguestfs a bit easier to build and manage.
  * The build now uses and requires PCRE2 (instead of PCRE).
  * This version requires libvirt ≥ 7.1.0, if libvirt is enabled.
  * gnulib is no longer bundled with libguestfs, making builds from
    git much simpler.
  * Perl Sys::Virt (libvirt bindings for Perl) are no longer
    required by libguestfs.
  * The code has been compiled with both LTO and GCC -fanalyzer and
    many bugs and warnings fixed.
  * Various fixes for qemu 6.1.
  * Update appliance packages on SUSE and several other improvements
    to the init script (Olaf Hering).
  * We now use the qemu / libvirt feature -cpu max to select the
    best CPU to run the appliance.
  * When passing the appliance filesystem UUID to supermin we now
    read it directly out of the appliance instead of using the
    file(1) program. This is more reliable.
  * The qemu -enable-fips option is no longer used. It was not
    needed and has been deprecated by qemu.
  * We no longer use qemu's sga (Serial Graphics Adapter) option
    ROM, instead using the equivalent seabios feature.
  * Various bug fixes
- Package changes
  * New libguestfs.spec file.
  * Moved guestfs-tools to a new and separate project and package
  * Renamed packages
    guestfs-winsupport -&gt; libguestfs-winsupport
    guestfsd -&gt; libguestfsd
  * New packages
    libguestfs, libguestfs-typelib-Guestfs,
    libguestfs-gobject, libguestfs-gobject-devel
    libguestfs-rescue, libguestfs-rsync, libguestfs-xfs
  * Dropped package libguestfs-test
- Dropped scripts and patches
  Pod-Simple-3.23.tar.xz
  libguestfs.test.simple.create-opensuse-guest-crypt-on-lvm.sh
  libguestfs.test.simple.create-opensuse-guest.sh
  libguestfs.test.simple.create-sles12-guest-crypt-on-lvm.sh
  libguestfs.test.simple.create-sles12-guest.sh
  libguestfs.test.simple.run-libugestfs-test-tool.sh
  0001-Introduce-a-wrapper-around-xmlParseURI.patch
  0002-common-extract-UTF-8-conversion-function.patch
  0003-inspector-rpm-summary-and-description-may-not-be-utf.patch
  489b14b7-ocaml-examples-Link-examples-to-gnulib.patch
  63c9cd93-m4-guestfs-ocaml.m4-Fix-deprecated-warning-format.patch
  68a02c2f-customize--resize--sparsify--sysprep-Link-explicitly-with-pthread.patch
  9db0c98c-appliance-enable-bashs-Process-Substitution-feature.patch
  a4930f5f-customize-Suppress-OCaml-warning.patch
  c0de4de9-appliance-add-reboot-and-netconfig-for-SUSE.patch
  e26cfa44-daemon-Build-with--pthread.patch
  f47e0bb6-appliance-reorder-mounting-of-special-filesystems-in-init.patch
  appliance.patch
  libguestfs.env.patch
  makefile-ocaml-find-guestfs.patch
  netconfig.patch</changelog>
  <changelog author="carnold@suse.com" date="1647518400">- Update to version 1.48.0
  * Fix allocation and deallocation of string lists in golang
    bindings (Laszlo Ersek).
  * Multiple fixes to the OCaml bindings:
  * Add support for Kylin (Laszlo Ersek).
  * Add support for Rocky Linux (Neil Hanlon).
  * Inspection of guests which use LUKS encryption on top of LVM
    logical volumes should now work (Laszlo Ersek).
  * "guestfs_list_9p" and "guestfs_mount_9p" are deprecated and
    now return errors.
  * "guestfs_remove_drive" has been deprecated and now returns an
    error.
  * "guestfs_add_drive" no longer supports hotplugging
  * In "guestfs_xfs_admin" the "lazycounter" parameter is deprecated
    because it is no longer supported in recent versions of XFS.
  * The User-mode Linux ("uml") backend has been removed.
  * Partition APIs now cope with the broken MBR partition tables
    created by dosfstools ≥ 4.2 (Laszlo Ersek).
  * Various bug fixes</changelog>
  <changelog author="hpj@urpla.net" date="1649851200">- Avoid useless builds, if ocaml version isn't up to the task
  libguestfs uses get_uint8(), available since ocaml 4.13.0</changelog>
  <changelog author="hpj@urpla.net" date="1649851201">- Add relevant %post{,un} sections
- Add another rpmlint filter
- Add uk man dirs</changelog>
  <changelog author="carnold@suse.com" date="1650283200">- Update to version 1.48.1
  * Updated language files
  * A few bug fixes in this release
  * Drop requirement for newer ocaml required by Bytes.get_uint8.
    It is replaced with a local implementation.</changelog>
  <changelog author="carnold@suse.com" date="1654084800">- Update to version 1.48.3
  * Several bugs fixed in this release since version 1.48.1
  * Updated language files</changelog>
  <changelog author="carnold@suse.com" date="1654257600">- bsc#1190501 - virt-builder fails to install packages when
  building an image. Add Recommends: dhcp-client for the appliance.
  libguestfs.spec</changelog>
  <changelog author="carnold@suse.com" date="1656504000">- bsc#1201064 - Libguestfs: Buffer overflow in get_keys leads
  to DOS - CVE-2022-2211
  CVE-2022-2211-options-fix-buffer-overflow-in-get_keys.patch
  CVE-2022-2211-docs-guestfs-security-document.patch</changelog>
  <changelog author="carnold@suse.com" date="1657627200">- Update to version 1.48.4
  * This is a bug fix release
- Drop patches included in new tarball
  CVE-2022-2211-docs-guestfs-security-document.patch
  CVE-2022-2211-options-fix-buffer-overflow-in-get_keys.patch</changelog>
  <changelog author="carnold@suse.com" date="1662465600">- Upstream patch to fix running configure --disable-ocaml
  f162e47e-m4-Fix-configure-disable-ocaml.patch</changelog>
  <changelog author="carnold@suse.com" date="1664884800">- jsc#PED-2113 [Virt Tools] Refresh Virtualization Tools for Xen
  and KVM Management</changelog>
  <changelog author="carnold@suse.com" date="1665748800">- Drop requirement for icoutils in SLE as this package is not
  available.
  libguestfs.spec</changelog>
  <changelog author="lnussel@suse.de" date="1666267200">- Drop reiserfs (boo#1191092)</changelog>
  <changelog author="carnold@suse.com" date="1669723200">- Update to version 1.48.6
  * jsc#PED-2113
  * This is a bug fix release. No upstream changelog.
- Drop f162e47e-m4-Fix-configure-disable-ocaml.patch</changelog>
  <changelog author="carnold@suse.com" date="1688558400">- bsc#1212972 - cannot find any suitable libguestfs supermin
  libguestfs.spec (see also bsc#1215664)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1688990400">- bsc#1213243 - KubeVirt needs libguestfs with the support of qcow2
  appliances
  Configure with --enable-appliance-format-auto to allow
  qcow2-format fixed appliances.
  libguestfs.spec</changelog>
  <changelog author="carnold@suse.com" date="1695643200">- bsc#1215543 - guestfs regression: file: Use -S option with -z
  Omit-file--S-option-on-older-distros-that-lack-support.patch
  See also bsc#1215461
- bsc#1215586 - guestfs regression: non functional network due to
  missing sysconfig-netconfig
  libguestfs.spec</changelog>
</package>
<package pkgid="53332cb126f631eacea1081d62a97e991fc3d316638cb8bc3230484f30a6a40e" name="libguestfs0" arch="s390x">
  <version epoch="0" ver="1.48.6" rel="150500.3.8.1"/>
  <changelog author="carnold@suse.com" date="1635249600">- Fix build errors in Factory
  * Alert ocaml_deprecated_cli: Setting a warning with a sequence
    of lowercase or uppercase letters, like 'CDEFLMPSUVYZX', is
    deprecated.
  63c9cd93-m4-guestfs-ocaml.m4-Fix-deprecated-warning-format.patch
  * Error (warning 6 [labels-omitted]): label verbose was omitted
    in the application of this function.
  a4930f5f-customize-Suppress-OCaml-warning.patch</changelog>
  <changelog author="ohering@suse.de" date="1639483200">- Add python-rpm-macros (bsc#1180125)</changelog>
  <changelog author="carnold@suse.com" date="1644235200">- bsc#1195415 - libguestfs: consider dropping build requirement on
  systemd-sysvinit
  libguestfs.spec</changelog>
  <changelog author="carnold@suse.com" date="1645012800">- Update to version 1.46.2
  * This release has moved many virt tools like virt-builder,
    virt-cat, virt-customize, virt-df, etc. to the guestfs-tools
    project. This makes libguestfs a bit easier to build and manage.
  * The build now uses and requires PCRE2 (instead of PCRE).
  * This version requires libvirt ≥ 7.1.0, if libvirt is enabled.
  * gnulib is no longer bundled with libguestfs, making builds from
    git much simpler.
  * Perl Sys::Virt (libvirt bindings for Perl) are no longer
    required by libguestfs.
  * The code has been compiled with both LTO and GCC -fanalyzer and
    many bugs and warnings fixed.
  * Various fixes for qemu 6.1.
  * Update appliance packages on SUSE and several other improvements
    to the init script (Olaf Hering).
  * We now use the qemu / libvirt feature -cpu max to select the
    best CPU to run the appliance.
  * When passing the appliance filesystem UUID to supermin we now
    read it directly out of the appliance instead of using the
    file(1) program. This is more reliable.
  * The qemu -enable-fips option is no longer used. It was not
    needed and has been deprecated by qemu.
  * We no longer use qemu's sga (Serial Graphics Adapter) option
    ROM, instead using the equivalent seabios feature.
  * Various bug fixes
- Package changes
  * New libguestfs.spec file.
  * Moved guestfs-tools to a new and separate project and package
  * Renamed packages
    guestfs-winsupport -&gt; libguestfs-winsupport
    guestfsd -&gt; libguestfsd
  * New packages
    libguestfs, libguestfs-typelib-Guestfs,
    libguestfs-gobject, libguestfs-gobject-devel
    libguestfs-rescue, libguestfs-rsync, libguestfs-xfs
  * Dropped package libguestfs-test
- Dropped scripts and patches
  Pod-Simple-3.23.tar.xz
  libguestfs.test.simple.create-opensuse-guest-crypt-on-lvm.sh
  libguestfs.test.simple.create-opensuse-guest.sh
  libguestfs.test.simple.create-sles12-guest-crypt-on-lvm.sh
  libguestfs.test.simple.create-sles12-guest.sh
  libguestfs.test.simple.run-libugestfs-test-tool.sh
  0001-Introduce-a-wrapper-around-xmlParseURI.patch
  0002-common-extract-UTF-8-conversion-function.patch
  0003-inspector-rpm-summary-and-description-may-not-be-utf.patch
  489b14b7-ocaml-examples-Link-examples-to-gnulib.patch
  63c9cd93-m4-guestfs-ocaml.m4-Fix-deprecated-warning-format.patch
  68a02c2f-customize--resize--sparsify--sysprep-Link-explicitly-with-pthread.patch
  9db0c98c-appliance-enable-bashs-Process-Substitution-feature.patch
  a4930f5f-customize-Suppress-OCaml-warning.patch
  c0de4de9-appliance-add-reboot-and-netconfig-for-SUSE.patch
  e26cfa44-daemon-Build-with--pthread.patch
  f47e0bb6-appliance-reorder-mounting-of-special-filesystems-in-init.patch
  appliance.patch
  libguestfs.env.patch
  makefile-ocaml-find-guestfs.patch
  netconfig.patch</changelog>
  <changelog author="carnold@suse.com" date="1647518400">- Update to version 1.48.0
  * Fix allocation and deallocation of string lists in golang
    bindings (Laszlo Ersek).
  * Multiple fixes to the OCaml bindings:
  * Add support for Kylin (Laszlo Ersek).
  * Add support for Rocky Linux (Neil Hanlon).
  * Inspection of guests which use LUKS encryption on top of LVM
    logical volumes should now work (Laszlo Ersek).
  * "guestfs_list_9p" and "guestfs_mount_9p" are deprecated and
    now return errors.
  * "guestfs_remove_drive" has been deprecated and now returns an
    error.
  * "guestfs_add_drive" no longer supports hotplugging
  * In "guestfs_xfs_admin" the "lazycounter" parameter is deprecated
    because it is no longer supported in recent versions of XFS.
  * The User-mode Linux ("uml") backend has been removed.
  * Partition APIs now cope with the broken MBR partition tables
    created by dosfstools ≥ 4.2 (Laszlo Ersek).
  * Various bug fixes</changelog>
  <changelog author="hpj@urpla.net" date="1649851200">- Avoid useless builds, if ocaml version isn't up to the task
  libguestfs uses get_uint8(), available since ocaml 4.13.0</changelog>
  <changelog author="hpj@urpla.net" date="1649851201">- Add relevant %post{,un} sections
- Add another rpmlint filter
- Add uk man dirs</changelog>
  <changelog author="carnold@suse.com" date="1650283200">- Update to version 1.48.1
  * Updated language files
  * A few bug fixes in this release
  * Drop requirement for newer ocaml required by Bytes.get_uint8.
    It is replaced with a local implementation.</changelog>
  <changelog author="carnold@suse.com" date="1654084800">- Update to version 1.48.3
  * Several bugs fixed in this release since version 1.48.1
  * Updated language files</changelog>
  <changelog author="carnold@suse.com" date="1654257600">- bsc#1190501 - virt-builder fails to install packages when
  building an image. Add Recommends: dhcp-client for the appliance.
  libguestfs.spec</changelog>
  <changelog author="carnold@suse.com" date="1656504000">- bsc#1201064 - Libguestfs: Buffer overflow in get_keys leads
  to DOS - CVE-2022-2211
  CVE-2022-2211-options-fix-buffer-overflow-in-get_keys.patch
  CVE-2022-2211-docs-guestfs-security-document.patch</changelog>
  <changelog author="carnold@suse.com" date="1657627200">- Update to version 1.48.4
  * This is a bug fix release
- Drop patches included in new tarball
  CVE-2022-2211-docs-guestfs-security-document.patch
  CVE-2022-2211-options-fix-buffer-overflow-in-get_keys.patch</changelog>
  <changelog author="carnold@suse.com" date="1662465600">- Upstream patch to fix running configure --disable-ocaml
  f162e47e-m4-Fix-configure-disable-ocaml.patch</changelog>
  <changelog author="carnold@suse.com" date="1664884800">- jsc#PED-2113 [Virt Tools] Refresh Virtualization Tools for Xen
  and KVM Management</changelog>
  <changelog author="carnold@suse.com" date="1665748800">- Drop requirement for icoutils in SLE as this package is not
  available.
  libguestfs.spec</changelog>
  <changelog author="lnussel@suse.de" date="1666267200">- Drop reiserfs (boo#1191092)</changelog>
  <changelog author="carnold@suse.com" date="1669723200">- Update to version 1.48.6
  * jsc#PED-2113
  * This is a bug fix release. No upstream changelog.
- Drop f162e47e-m4-Fix-configure-disable-ocaml.patch</changelog>
  <changelog author="carnold@suse.com" date="1688558400">- bsc#1212972 - cannot find any suitable libguestfs supermin
  libguestfs.spec (see also bsc#1215664)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1688990400">- bsc#1213243 - KubeVirt needs libguestfs with the support of qcow2
  appliances
  Configure with --enable-appliance-format-auto to allow
  qcow2-format fixed appliances.
  libguestfs.spec</changelog>
  <changelog author="carnold@suse.com" date="1695643200">- bsc#1215543 - guestfs regression: file: Use -S option with -z
  Omit-file--S-option-on-older-distros-that-lack-support.patch
  See also bsc#1215461
- bsc#1215586 - guestfs regression: non functional network due to
  missing sysconfig-netconfig
  libguestfs.spec</changelog>
</package>
<package pkgid="e802e9e795d8ced84e2c470528e287d18e18b8a61925edb2b790641b0bd24fb0" name="libguestfs0" arch="x86_64">
  <version epoch="0" ver="1.48.6" rel="150500.3.8.1"/>
  <changelog author="carnold@suse.com" date="1635249600">- Fix build errors in Factory
  * Alert ocaml_deprecated_cli: Setting a warning with a sequence
    of lowercase or uppercase letters, like 'CDEFLMPSUVYZX', is
    deprecated.
  63c9cd93-m4-guestfs-ocaml.m4-Fix-deprecated-warning-format.patch
  * Error (warning 6 [labels-omitted]): label verbose was omitted
    in the application of this function.
  a4930f5f-customize-Suppress-OCaml-warning.patch</changelog>
  <changelog author="ohering@suse.de" date="1639483200">- Add python-rpm-macros (bsc#1180125)</changelog>
  <changelog author="carnold@suse.com" date="1644235200">- bsc#1195415 - libguestfs: consider dropping build requirement on
  systemd-sysvinit
  libguestfs.spec</changelog>
  <changelog author="carnold@suse.com" date="1645012800">- Update to version 1.46.2
  * This release has moved many virt tools like virt-builder,
    virt-cat, virt-customize, virt-df, etc. to the guestfs-tools
    project. This makes libguestfs a bit easier to build and manage.
  * The build now uses and requires PCRE2 (instead of PCRE).
  * This version requires libvirt ≥ 7.1.0, if libvirt is enabled.
  * gnulib is no longer bundled with libguestfs, making builds from
    git much simpler.
  * Perl Sys::Virt (libvirt bindings for Perl) are no longer
    required by libguestfs.
  * The code has been compiled with both LTO and GCC -fanalyzer and
    many bugs and warnings fixed.
  * Various fixes for qemu 6.1.
  * Update appliance packages on SUSE and several other improvements
    to the init script (Olaf Hering).
  * We now use the qemu / libvirt feature -cpu max to select the
    best CPU to run the appliance.
  * When passing the appliance filesystem UUID to supermin we now
    read it directly out of the appliance instead of using the
    file(1) program. This is more reliable.
  * The qemu -enable-fips option is no longer used. It was not
    needed and has been deprecated by qemu.
  * We no longer use qemu's sga (Serial Graphics Adapter) option
    ROM, instead using the equivalent seabios feature.
  * Various bug fixes
- Package changes
  * New libguestfs.spec file.
  * Moved guestfs-tools to a new and separate project and package
  * Renamed packages
    guestfs-winsupport -&gt; libguestfs-winsupport
    guestfsd -&gt; libguestfsd
  * New packages
    libguestfs, libguestfs-typelib-Guestfs,
    libguestfs-gobject, libguestfs-gobject-devel
    libguestfs-rescue, libguestfs-rsync, libguestfs-xfs
  * Dropped package libguestfs-test
- Dropped scripts and patches
  Pod-Simple-3.23.tar.xz
  libguestfs.test.simple.create-opensuse-guest-crypt-on-lvm.sh
  libguestfs.test.simple.create-opensuse-guest.sh
  libguestfs.test.simple.create-sles12-guest-crypt-on-lvm.sh
  libguestfs.test.simple.create-sles12-guest.sh
  libguestfs.test.simple.run-libugestfs-test-tool.sh
  0001-Introduce-a-wrapper-around-xmlParseURI.patch
  0002-common-extract-UTF-8-conversion-function.patch
  0003-inspector-rpm-summary-and-description-may-not-be-utf.patch
  489b14b7-ocaml-examples-Link-examples-to-gnulib.patch
  63c9cd93-m4-guestfs-ocaml.m4-Fix-deprecated-warning-format.patch
  68a02c2f-customize--resize--sparsify--sysprep-Link-explicitly-with-pthread.patch
  9db0c98c-appliance-enable-bashs-Process-Substitution-feature.patch
  a4930f5f-customize-Suppress-OCaml-warning.patch
  c0de4de9-appliance-add-reboot-and-netconfig-for-SUSE.patch
  e26cfa44-daemon-Build-with--pthread.patch
  f47e0bb6-appliance-reorder-mounting-of-special-filesystems-in-init.patch
  appliance.patch
  libguestfs.env.patch
  makefile-ocaml-find-guestfs.patch
  netconfig.patch</changelog>
  <changelog author="carnold@suse.com" date="1647518400">- Update to version 1.48.0
  * Fix allocation and deallocation of string lists in golang
    bindings (Laszlo Ersek).
  * Multiple fixes to the OCaml bindings:
  * Add support for Kylin (Laszlo Ersek).
  * Add support for Rocky Linux (Neil Hanlon).
  * Inspection of guests which use LUKS encryption on top of LVM
    logical volumes should now work (Laszlo Ersek).
  * "guestfs_list_9p" and "guestfs_mount_9p" are deprecated and
    now return errors.
  * "guestfs_remove_drive" has been deprecated and now returns an
    error.
  * "guestfs_add_drive" no longer supports hotplugging
  * In "guestfs_xfs_admin" the "lazycounter" parameter is deprecated
    because it is no longer supported in recent versions of XFS.
  * The User-mode Linux ("uml") backend has been removed.
  * Partition APIs now cope with the broken MBR partition tables
    created by dosfstools ≥ 4.2 (Laszlo Ersek).
  * Various bug fixes</changelog>
  <changelog author="hpj@urpla.net" date="1649851200">- Avoid useless builds, if ocaml version isn't up to the task
  libguestfs uses get_uint8(), available since ocaml 4.13.0</changelog>
  <changelog author="hpj@urpla.net" date="1649851201">- Add relevant %post{,un} sections
- Add another rpmlint filter
- Add uk man dirs</changelog>
  <changelog author="carnold@suse.com" date="1650283200">- Update to version 1.48.1
  * Updated language files
  * A few bug fixes in this release
  * Drop requirement for newer ocaml required by Bytes.get_uint8.
    It is replaced with a local implementation.</changelog>
  <changelog author="carnold@suse.com" date="1654084800">- Update to version 1.48.3
  * Several bugs fixed in this release since version 1.48.1
  * Updated language files</changelog>
  <changelog author="carnold@suse.com" date="1654257600">- bsc#1190501 - virt-builder fails to install packages when
  building an image. Add Recommends: dhcp-client for the appliance.
  libguestfs.spec</changelog>
  <changelog author="carnold@suse.com" date="1656504000">- bsc#1201064 - Libguestfs: Buffer overflow in get_keys leads
  to DOS - CVE-2022-2211
  CVE-2022-2211-options-fix-buffer-overflow-in-get_keys.patch
  CVE-2022-2211-docs-guestfs-security-document.patch</changelog>
  <changelog author="carnold@suse.com" date="1657627200">- Update to version 1.48.4
  * This is a bug fix release
- Drop patches included in new tarball
  CVE-2022-2211-docs-guestfs-security-document.patch
  CVE-2022-2211-options-fix-buffer-overflow-in-get_keys.patch</changelog>
  <changelog author="carnold@suse.com" date="1662465600">- Upstream patch to fix running configure --disable-ocaml
  f162e47e-m4-Fix-configure-disable-ocaml.patch</changelog>
  <changelog author="carnold@suse.com" date="1664884800">- jsc#PED-2113 [Virt Tools] Refresh Virtualization Tools for Xen
  and KVM Management</changelog>
  <changelog author="carnold@suse.com" date="1665748800">- Drop requirement for icoutils in SLE as this package is not
  available.
  libguestfs.spec</changelog>
  <changelog author="lnussel@suse.de" date="1666267200">- Drop reiserfs (boo#1191092)</changelog>
  <changelog author="carnold@suse.com" date="1669723200">- Update to version 1.48.6
  * jsc#PED-2113
  * This is a bug fix release. No upstream changelog.
- Drop f162e47e-m4-Fix-configure-disable-ocaml.patch</changelog>
  <changelog author="carnold@suse.com" date="1688558400">- bsc#1212972 - cannot find any suitable libguestfs supermin
  libguestfs.spec (see also bsc#1215664)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1688990400">- bsc#1213243 - KubeVirt needs libguestfs with the support of qcow2
  appliances
  Configure with --enable-appliance-format-auto to allow
  qcow2-format fixed appliances.
  libguestfs.spec</changelog>
  <changelog author="carnold@suse.com" date="1695643200">- bsc#1215543 - guestfs regression: file: Use -S option with -z
  Omit-file--S-option-on-older-distros-that-lack-support.patch
  See also bsc#1215461
- bsc#1215586 - guestfs regression: non functional network due to
  missing sysconfig-netconfig
  libguestfs.spec</changelog>
</package>
<package pkgid="93c6e068d7e1d3d7179ba0da4b69b4eac92e3f3a4dc68a3866f1e472fdce95c2" name="libharfbuzz-gobject0" arch="aarch64">
  <version epoch="0" ver="3.4.0" rel="150400.3.8.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1591185600">- Update to version 2.6.7:
  + Update to Unicode 13.0.0
  + Fix hb_ot_layout_get_ligature_carets for fonts without lcar
    table
- includes fixes from 2.6.6:
  * A fix in AAT kerning for Geeza Pro</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1592913600">- update to 2.6.8:
  + New API to fetch glyph alternates from GSUB table
  + New API +hb_ot_layout_lookup_get_glyph_alternates()
- Drop gpg2 BuildRequires and stop verifying signature during
  build: upstream no longer signs the tarball/signature.</changelog>
  <changelog author="dmueller@suse.com" date="1600344000">- Update to version 2.7.2:
  + Fix a regression in the previous release that caused a crash
    with Kaithi.
  + More OOM fixes.
  + ot-funcs now handles variable empty glyphs better when
    hvar/vvar isn't present.
  + Reverted a GDEF processing regression.
  + A couple of fixes to handle OOM better.
  + Use an implementation for round that always rounds up, some
    minor fluctuations are expected on var font specially when
    hb-ot callback is used.
  + Fix an AAT's `kerx` issue on broken rendering of Devanagari
    Sangam MN.
  + Remove AAT's `lcar` table support from _get_ligature_carets
    API, not even much use on macOS installed fonts (only two
    files). GDEF support is the recommended one and expected to
    work properly after issues fixed two releases ago.
  - Minor memory fixes to handle OOM better specially in hb-ft.
  - Minor .so files versioning scheme change and remove
    stable/unstable scheme differences, was never used in practice
    (always default to stable scheme).
  - We are now suggesting careful packaging of the library using
    meson, https://github.com/harfbuzz/harfbuzz/wiki/Notes-on-migration-to-meson
    for more information.
  - Distribution package URL is changed, either use GitHub
    generated tarballs,
    `https://github.com/harfbuzz/harfbuzz/archive/$pkgver.tar.gz`
    or, even more preferably use commit hash of the release and git
    checkouts like,
    `git+https://github.com/harfbuzz/harfbuzz#commit=$commit`</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609070400">- Update to version 2.7.4:
  + Fix missing --enable-introspection configure option
- Changes from version 2.7.3:
  + Update USE shaper to 2020-08-13 specification, and other
    improvements
  + Don’t disable liga feature in myanmar shaper, to match
    Uniscribe
  + Improvements to language and script tags handling.
  + Update language system tag registry to OpenType 1.8.4
  + Support for serializing and deserializing Unicode buffers
  + Increase buffer work limits to handle fonts with many complex
    lookups
  + Handle more shaping operations in trace output
  + Memory access fixes
  + More OOM fixes
  + Improved documentation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610107200">- Switch to meson buildsystem:
  + Add meson BuildRequires and macros.
  + Replace gcc-c++ for generic c++_compiler BuildRequires.
  + Add meson_test macro in check section, run tests during build.
  + Drop pkgconfig(graphite2) BuildRequires: No longer build
    graphite2 support, following upstream that disables this by
    default.
  + Stop packaging gtk-docs, pass -Ddocs=disabled to meson, this
    way we might avoid a build-cycle and since we did not have a
    explicit docs subpackage, just silently drop them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1610539200">- Re-enable graphite2 support: TexLive relies on this to be
  present:
  + Pass -Dgraphite=enabled to meson.
  + Add pkgconfig(graphite2) BuildRequires.</changelog>
  <changelog author="christophe@krop.fr" date="1618315200">- Update to version 2.8.0:
  + Shape joining scripts other than Arabic/Syriac using the
    Universal Shaping Engine. Previously these were shaped using
    the generalized Arabic shaper.
  + Fix regression in shaping of U+0B55 ORIYA SIGN OVERLINE.
  + Update language tags.
  + Variations: reduce error: do not round each interpolated delta.
  + Documentation improvements.
  + Subsetter improvements: subsets most, if not all, lookup types
    now.
  + Fuzzer-found fixes and other improvements when memory failures
    happen.
  + Removed most atomic implementations now that we have C++11
    atomic impl.
  + General codebase upkeep; using more C++11 features: constexpr
    constructors, etc.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620302400">- Update to version 2.8.1:
  + Subsetter now fully supports GSUB/GPOS/GDEF tables (including
    variations); as such, layout tables are retained by subsetter
    by default
  + hb-view supports iTerm2 and kitty inline image protocols
    it can also use Chafa for terminal graphics if available
- Add  pkgconfig(chafa): new, optional depdency.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1626264000">- Update to version 2.8.2:
  + Shaping LTR digits for RTL scripts now makes the native
    direction of the digits LTR, applying shaping and positioning
    rules on the same glyph order as Uniscribe
  + Subsetting COLR v1 and CPAL tables is now supported
  + Various fixes and improvements to the subsetter
  + When applying morx table, mark glyph widths should not be zeroed
  + GPOS is preferred over kerx, if GSUB was applied
  + Regional_Indicator pairs are grouped together when clustering</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Drop pkgconfig(chafa) BuildRequires for now: causes a cycle
  between chafa and harfbuzz, and disable it in meson</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631448000">- harfbuzz 2.9.1:
  + Subsetter API close to stable
  + Various fuzzer-found bug fixes
  + hb_buffer_append() now handles the pre- and post-context which
    previously were left unchanged in the destination buffer
  + hb-view / hb-shape now accept following new arguments:
  - -unicodes: takes a list of hex numbers that represent Unicode
    codepoints.
  + Undeprecated API: hb_set_invert()
- includes changes from 2.9.0:
  + Support multiple variation axes with same tag, aka HOI
  + The coretext testing shaper now passes font variations to
    CoreText
  + hb-shape/hb-view does not break line at new lines unless text
    is read from file
  + hb-view and hb-subset has a --batch now, similar to hb-shape
  + The --batch mode now uses ; as argument separator instead of :
    used previously
  + The --batch in hb-shape does not expect 0th argument anymore.
    That is, the lines read are interpreted as argv[1:], instead
    of argv[0:].
  + The --batch option has been undocumented. We are ready to
    document it; send feedback if you find it useful
  + hb-subset got arguments revamps. Added much-requested
  - -gids-file, --glyphs, --glyphs-file, --unicodes-file,
    supporting ranges in --unicodes.
  + Various bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631966400">- harfbuzz 3.0.0:
  + Unicode 14.0 support
  + hb-subset API and harfbuzz-subset ABI now declared stable
  + hb-style API is now stable</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1636200000">- harfbuzz 3.1.0:
  * Better offset-overflow handling in the subsetter library
  * Improved Unicode 14 properties in the USE shaper, and various
    other USE shaper fixes
  * MATH and COLR v1 tables subsetting support, and various other
    subsetter fixes
  * Support for Pwo Karen / Ason Chin medial la. (Simon Cozens)
  * Apply GPOS positioning when substituting with morx table, if
    kerx is missing
  * Apply calt and clig features across syllable boundaries in
    Indic shaper
  * Meson option for enabling Graphite 2 has been renamed to
    graphite2
  * Build and documentation fixes
- add harfbuzz-3.1.0-work-around-GCC-cast-align-error-warning.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636459200">- Update to version 3.1.1:
  + Work around GCC cast-align error/warning on some platforms.
  + Documentation improvements.
- Drop patch fixed upstream:
  + harfbuzz-3.1.0-work-around-GCC-cast-align-error-warning.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639742400">- Update to 3.1.2:
  + hb-shape / hb-view: revert treating text on the commandline as
    single paragraph (was introduced in 3.0.0); add new
  - -single-par to do that
  + Subsetter bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639742401">- Update to 3.2.0:
  + Fixed shaping of Apple Color Emoji flags in right-to-left context
  + Fixed positioning of CFF fonts in HB_TINY profile
  + OpenType 1.9 language tags update
  + Add HB_NO_VERTICAL config option
  + Add HB_CONFIG_OVERRIDE_H for easier configuration
  + Improved packing of cmap, loca, and Ligature tables
  + Significantly improved overflow-resolution strategy in the repacker</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644235200">- update to 3.3.2:
  + Revert splitting of pair positioning values introduced in 3.3.0
    as it proved problematic
- includes changes from 3.3.1:
  + Fix heap-use-after-free in harfbuzz-subset introduced in
    previous release
- includes changes from 3.3.0:
  + Improved documentation, code cleanup
  + The low 16-bits of face index will be used by hb_face_create()
    to select a face inside a font collection file format, while the
    high 16-bits will be used by hb_font_create() to load the named
    instance
  + Glyph positions and other font metrics now apply synthetic slant
    set by hb_font_set_synthetic_slant(), for improved positioning
    for synthetically slanted fonts
  + Fixed unintentional locale dependency in hb_variation_to_string()
    for decimal point representation
  + When applying pair positioning (kerning) the positioning value
    is split between the two sides of the pair for improved cursor
    positioning between such pairs
  + Introduced new HB_GLYPH_FLAG_UNSAFE_TO_CONCAT, to be used in
    conjunction with HB_GLYPH_FLAG_UNSAFE_TO_BREAK for optimizing
    re-shaping during line breaking. Check the documentation for
    further details
  + Improved handling of macrolanguages when mapping BCP 47 codes
    to OpenType tags</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644753600">- update to 3.4.0:
  + Perform sanity checks on shaping results is now part of
    “harfbuzz” library and can be enabled by setting the buffer
    flag HB_BUFFER_FLAG_VERIFY
  + Arabic Mark Transient Reordering Algorithm have been updated
    to revision 6
  + ISO 15924 code for mathematical notation, ‘Zmth’, now maps to
    the OpenType ‘math’ tag
  + It is now possible to get at once all math kerning values for a
    given glyph at a given corner
  + Fix locale_t portability issues on systems the typedef’s it to
    a void pointer</changelog>
  <changelog author="mgorse@suse.com" date="1658836800">- Add harfbuzz-CVE-2022-33068.patch: sbix: limit glyph extents
  (boo#1200900 CVE-2022-33068).</changelog>
  <changelog author="mgorse@suse.com" date="1680696000">- Add CVE-2023-25193.patch: limit how far we skip when looking
  back (bsc#1207922 CVE-2023-25193).</changelog>
</package>
<package pkgid="7e60f74ebdb3c1ee7597b8726a1528ac63ad13aa2428c1dd5672e77a221c40bf" name="libharfbuzz-gobject0" arch="s390x">
  <version epoch="0" ver="3.4.0" rel="150400.3.8.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1591185600">- Update to version 2.6.7:
  + Update to Unicode 13.0.0
  + Fix hb_ot_layout_get_ligature_carets for fonts without lcar
    table
- includes fixes from 2.6.6:
  * A fix in AAT kerning for Geeza Pro</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1592913600">- update to 2.6.8:
  + New API to fetch glyph alternates from GSUB table
  + New API +hb_ot_layout_lookup_get_glyph_alternates()
- Drop gpg2 BuildRequires and stop verifying signature during
  build: upstream no longer signs the tarball/signature.</changelog>
  <changelog author="dmueller@suse.com" date="1600344000">- Update to version 2.7.2:
  + Fix a regression in the previous release that caused a crash
    with Kaithi.
  + More OOM fixes.
  + ot-funcs now handles variable empty glyphs better when
    hvar/vvar isn't present.
  + Reverted a GDEF processing regression.
  + A couple of fixes to handle OOM better.
  + Use an implementation for round that always rounds up, some
    minor fluctuations are expected on var font specially when
    hb-ot callback is used.
  + Fix an AAT's `kerx` issue on broken rendering of Devanagari
    Sangam MN.
  + Remove AAT's `lcar` table support from _get_ligature_carets
    API, not even much use on macOS installed fonts (only two
    files). GDEF support is the recommended one and expected to
    work properly after issues fixed two releases ago.
  - Minor memory fixes to handle OOM better specially in hb-ft.
  - Minor .so files versioning scheme change and remove
    stable/unstable scheme differences, was never used in practice
    (always default to stable scheme).
  - We are now suggesting careful packaging of the library using
    meson, https://github.com/harfbuzz/harfbuzz/wiki/Notes-on-migration-to-meson
    for more information.
  - Distribution package URL is changed, either use GitHub
    generated tarballs,
    `https://github.com/harfbuzz/harfbuzz/archive/$pkgver.tar.gz`
    or, even more preferably use commit hash of the release and git
    checkouts like,
    `git+https://github.com/harfbuzz/harfbuzz#commit=$commit`</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609070400">- Update to version 2.7.4:
  + Fix missing --enable-introspection configure option
- Changes from version 2.7.3:
  + Update USE shaper to 2020-08-13 specification, and other
    improvements
  + Don’t disable liga feature in myanmar shaper, to match
    Uniscribe
  + Improvements to language and script tags handling.
  + Update language system tag registry to OpenType 1.8.4
  + Support for serializing and deserializing Unicode buffers
  + Increase buffer work limits to handle fonts with many complex
    lookups
  + Handle more shaping operations in trace output
  + Memory access fixes
  + More OOM fixes
  + Improved documentation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610107200">- Switch to meson buildsystem:
  + Add meson BuildRequires and macros.
  + Replace gcc-c++ for generic c++_compiler BuildRequires.
  + Add meson_test macro in check section, run tests during build.
  + Drop pkgconfig(graphite2) BuildRequires: No longer build
    graphite2 support, following upstream that disables this by
    default.
  + Stop packaging gtk-docs, pass -Ddocs=disabled to meson, this
    way we might avoid a build-cycle and since we did not have a
    explicit docs subpackage, just silently drop them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1610539200">- Re-enable graphite2 support: TexLive relies on this to be
  present:
  + Pass -Dgraphite=enabled to meson.
  + Add pkgconfig(graphite2) BuildRequires.</changelog>
  <changelog author="christophe@krop.fr" date="1618315200">- Update to version 2.8.0:
  + Shape joining scripts other than Arabic/Syriac using the
    Universal Shaping Engine. Previously these were shaped using
    the generalized Arabic shaper.
  + Fix regression in shaping of U+0B55 ORIYA SIGN OVERLINE.
  + Update language tags.
  + Variations: reduce error: do not round each interpolated delta.
  + Documentation improvements.
  + Subsetter improvements: subsets most, if not all, lookup types
    now.
  + Fuzzer-found fixes and other improvements when memory failures
    happen.
  + Removed most atomic implementations now that we have C++11
    atomic impl.
  + General codebase upkeep; using more C++11 features: constexpr
    constructors, etc.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620302400">- Update to version 2.8.1:
  + Subsetter now fully supports GSUB/GPOS/GDEF tables (including
    variations); as such, layout tables are retained by subsetter
    by default
  + hb-view supports iTerm2 and kitty inline image protocols
    it can also use Chafa for terminal graphics if available
- Add  pkgconfig(chafa): new, optional depdency.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1626264000">- Update to version 2.8.2:
  + Shaping LTR digits for RTL scripts now makes the native
    direction of the digits LTR, applying shaping and positioning
    rules on the same glyph order as Uniscribe
  + Subsetting COLR v1 and CPAL tables is now supported
  + Various fixes and improvements to the subsetter
  + When applying morx table, mark glyph widths should not be zeroed
  + GPOS is preferred over kerx, if GSUB was applied
  + Regional_Indicator pairs are grouped together when clustering</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Drop pkgconfig(chafa) BuildRequires for now: causes a cycle
  between chafa and harfbuzz, and disable it in meson</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631448000">- harfbuzz 2.9.1:
  + Subsetter API close to stable
  + Various fuzzer-found bug fixes
  + hb_buffer_append() now handles the pre- and post-context which
    previously were left unchanged in the destination buffer
  + hb-view / hb-shape now accept following new arguments:
  - -unicodes: takes a list of hex numbers that represent Unicode
    codepoints.
  + Undeprecated API: hb_set_invert()
- includes changes from 2.9.0:
  + Support multiple variation axes with same tag, aka HOI
  + The coretext testing shaper now passes font variations to
    CoreText
  + hb-shape/hb-view does not break line at new lines unless text
    is read from file
  + hb-view and hb-subset has a --batch now, similar to hb-shape
  + The --batch mode now uses ; as argument separator instead of :
    used previously
  + The --batch in hb-shape does not expect 0th argument anymore.
    That is, the lines read are interpreted as argv[1:], instead
    of argv[0:].
  + The --batch option has been undocumented. We are ready to
    document it; send feedback if you find it useful
  + hb-subset got arguments revamps. Added much-requested
  - -gids-file, --glyphs, --glyphs-file, --unicodes-file,
    supporting ranges in --unicodes.
  + Various bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631966400">- harfbuzz 3.0.0:
  + Unicode 14.0 support
  + hb-subset API and harfbuzz-subset ABI now declared stable
  + hb-style API is now stable</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1636200000">- harfbuzz 3.1.0:
  * Better offset-overflow handling in the subsetter library
  * Improved Unicode 14 properties in the USE shaper, and various
    other USE shaper fixes
  * MATH and COLR v1 tables subsetting support, and various other
    subsetter fixes
  * Support for Pwo Karen / Ason Chin medial la. (Simon Cozens)
  * Apply GPOS positioning when substituting with morx table, if
    kerx is missing
  * Apply calt and clig features across syllable boundaries in
    Indic shaper
  * Meson option for enabling Graphite 2 has been renamed to
    graphite2
  * Build and documentation fixes
- add harfbuzz-3.1.0-work-around-GCC-cast-align-error-warning.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636459200">- Update to version 3.1.1:
  + Work around GCC cast-align error/warning on some platforms.
  + Documentation improvements.
- Drop patch fixed upstream:
  + harfbuzz-3.1.0-work-around-GCC-cast-align-error-warning.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639742400">- Update to 3.1.2:
  + hb-shape / hb-view: revert treating text on the commandline as
    single paragraph (was introduced in 3.0.0); add new
  - -single-par to do that
  + Subsetter bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639742401">- Update to 3.2.0:
  + Fixed shaping of Apple Color Emoji flags in right-to-left context
  + Fixed positioning of CFF fonts in HB_TINY profile
  + OpenType 1.9 language tags update
  + Add HB_NO_VERTICAL config option
  + Add HB_CONFIG_OVERRIDE_H for easier configuration
  + Improved packing of cmap, loca, and Ligature tables
  + Significantly improved overflow-resolution strategy in the repacker</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644235200">- update to 3.3.2:
  + Revert splitting of pair positioning values introduced in 3.3.0
    as it proved problematic
- includes changes from 3.3.1:
  + Fix heap-use-after-free in harfbuzz-subset introduced in
    previous release
- includes changes from 3.3.0:
  + Improved documentation, code cleanup
  + The low 16-bits of face index will be used by hb_face_create()
    to select a face inside a font collection file format, while the
    high 16-bits will be used by hb_font_create() to load the named
    instance
  + Glyph positions and other font metrics now apply synthetic slant
    set by hb_font_set_synthetic_slant(), for improved positioning
    for synthetically slanted fonts
  + Fixed unintentional locale dependency in hb_variation_to_string()
    for decimal point representation
  + When applying pair positioning (kerning) the positioning value
    is split between the two sides of the pair for improved cursor
    positioning between such pairs
  + Introduced new HB_GLYPH_FLAG_UNSAFE_TO_CONCAT, to be used in
    conjunction with HB_GLYPH_FLAG_UNSAFE_TO_BREAK for optimizing
    re-shaping during line breaking. Check the documentation for
    further details
  + Improved handling of macrolanguages when mapping BCP 47 codes
    to OpenType tags</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644753600">- update to 3.4.0:
  + Perform sanity checks on shaping results is now part of
    “harfbuzz” library and can be enabled by setting the buffer
    flag HB_BUFFER_FLAG_VERIFY
  + Arabic Mark Transient Reordering Algorithm have been updated
    to revision 6
  + ISO 15924 code for mathematical notation, ‘Zmth’, now maps to
    the OpenType ‘math’ tag
  + It is now possible to get at once all math kerning values for a
    given glyph at a given corner
  + Fix locale_t portability issues on systems the typedef’s it to
    a void pointer</changelog>
  <changelog author="mgorse@suse.com" date="1658836800">- Add harfbuzz-CVE-2022-33068.patch: sbix: limit glyph extents
  (boo#1200900 CVE-2022-33068).</changelog>
  <changelog author="mgorse@suse.com" date="1680696000">- Add CVE-2023-25193.patch: limit how far we skip when looking
  back (bsc#1207922 CVE-2023-25193).</changelog>
</package>
<package pkgid="599907df87599767d39f0ef35a6bb5436e8186a3e1a3012f99d8528d29a1af78" name="libharfbuzz-gobject0" arch="x86_64">
  <version epoch="0" ver="3.4.0" rel="150400.3.8.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1591185600">- Update to version 2.6.7:
  + Update to Unicode 13.0.0
  + Fix hb_ot_layout_get_ligature_carets for fonts without lcar
    table
- includes fixes from 2.6.6:
  * A fix in AAT kerning for Geeza Pro</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1592913600">- update to 2.6.8:
  + New API to fetch glyph alternates from GSUB table
  + New API +hb_ot_layout_lookup_get_glyph_alternates()
- Drop gpg2 BuildRequires and stop verifying signature during
  build: upstream no longer signs the tarball/signature.</changelog>
  <changelog author="dmueller@suse.com" date="1600344000">- Update to version 2.7.2:
  + Fix a regression in the previous release that caused a crash
    with Kaithi.
  + More OOM fixes.
  + ot-funcs now handles variable empty glyphs better when
    hvar/vvar isn't present.
  + Reverted a GDEF processing regression.
  + A couple of fixes to handle OOM better.
  + Use an implementation for round that always rounds up, some
    minor fluctuations are expected on var font specially when
    hb-ot callback is used.
  + Fix an AAT's `kerx` issue on broken rendering of Devanagari
    Sangam MN.
  + Remove AAT's `lcar` table support from _get_ligature_carets
    API, not even much use on macOS installed fonts (only two
    files). GDEF support is the recommended one and expected to
    work properly after issues fixed two releases ago.
  - Minor memory fixes to handle OOM better specially in hb-ft.
  - Minor .so files versioning scheme change and remove
    stable/unstable scheme differences, was never used in practice
    (always default to stable scheme).
  - We are now suggesting careful packaging of the library using
    meson, https://github.com/harfbuzz/harfbuzz/wiki/Notes-on-migration-to-meson
    for more information.
  - Distribution package URL is changed, either use GitHub
    generated tarballs,
    `https://github.com/harfbuzz/harfbuzz/archive/$pkgver.tar.gz`
    or, even more preferably use commit hash of the release and git
    checkouts like,
    `git+https://github.com/harfbuzz/harfbuzz#commit=$commit`</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609070400">- Update to version 2.7.4:
  + Fix missing --enable-introspection configure option
- Changes from version 2.7.3:
  + Update USE shaper to 2020-08-13 specification, and other
    improvements
  + Don’t disable liga feature in myanmar shaper, to match
    Uniscribe
  + Improvements to language and script tags handling.
  + Update language system tag registry to OpenType 1.8.4
  + Support for serializing and deserializing Unicode buffers
  + Increase buffer work limits to handle fonts with many complex
    lookups
  + Handle more shaping operations in trace output
  + Memory access fixes
  + More OOM fixes
  + Improved documentation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610107200">- Switch to meson buildsystem:
  + Add meson BuildRequires and macros.
  + Replace gcc-c++ for generic c++_compiler BuildRequires.
  + Add meson_test macro in check section, run tests during build.
  + Drop pkgconfig(graphite2) BuildRequires: No longer build
    graphite2 support, following upstream that disables this by
    default.
  + Stop packaging gtk-docs, pass -Ddocs=disabled to meson, this
    way we might avoid a build-cycle and since we did not have a
    explicit docs subpackage, just silently drop them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1610539200">- Re-enable graphite2 support: TexLive relies on this to be
  present:
  + Pass -Dgraphite=enabled to meson.
  + Add pkgconfig(graphite2) BuildRequires.</changelog>
  <changelog author="christophe@krop.fr" date="1618315200">- Update to version 2.8.0:
  + Shape joining scripts other than Arabic/Syriac using the
    Universal Shaping Engine. Previously these were shaped using
    the generalized Arabic shaper.
  + Fix regression in shaping of U+0B55 ORIYA SIGN OVERLINE.
  + Update language tags.
  + Variations: reduce error: do not round each interpolated delta.
  + Documentation improvements.
  + Subsetter improvements: subsets most, if not all, lookup types
    now.
  + Fuzzer-found fixes and other improvements when memory failures
    happen.
  + Removed most atomic implementations now that we have C++11
    atomic impl.
  + General codebase upkeep; using more C++11 features: constexpr
    constructors, etc.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620302400">- Update to version 2.8.1:
  + Subsetter now fully supports GSUB/GPOS/GDEF tables (including
    variations); as such, layout tables are retained by subsetter
    by default
  + hb-view supports iTerm2 and kitty inline image protocols
    it can also use Chafa for terminal graphics if available
- Add  pkgconfig(chafa): new, optional depdency.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1626264000">- Update to version 2.8.2:
  + Shaping LTR digits for RTL scripts now makes the native
    direction of the digits LTR, applying shaping and positioning
    rules on the same glyph order as Uniscribe
  + Subsetting COLR v1 and CPAL tables is now supported
  + Various fixes and improvements to the subsetter
  + When applying morx table, mark glyph widths should not be zeroed
  + GPOS is preferred over kerx, if GSUB was applied
  + Regional_Indicator pairs are grouped together when clustering</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Drop pkgconfig(chafa) BuildRequires for now: causes a cycle
  between chafa and harfbuzz, and disable it in meson</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631448000">- harfbuzz 2.9.1:
  + Subsetter API close to stable
  + Various fuzzer-found bug fixes
  + hb_buffer_append() now handles the pre- and post-context which
    previously were left unchanged in the destination buffer
  + hb-view / hb-shape now accept following new arguments:
  - -unicodes: takes a list of hex numbers that represent Unicode
    codepoints.
  + Undeprecated API: hb_set_invert()
- includes changes from 2.9.0:
  + Support multiple variation axes with same tag, aka HOI
  + The coretext testing shaper now passes font variations to
    CoreText
  + hb-shape/hb-view does not break line at new lines unless text
    is read from file
  + hb-view and hb-subset has a --batch now, similar to hb-shape
  + The --batch mode now uses ; as argument separator instead of :
    used previously
  + The --batch in hb-shape does not expect 0th argument anymore.
    That is, the lines read are interpreted as argv[1:], instead
    of argv[0:].
  + The --batch option has been undocumented. We are ready to
    document it; send feedback if you find it useful
  + hb-subset got arguments revamps. Added much-requested
  - -gids-file, --glyphs, --glyphs-file, --unicodes-file,
    supporting ranges in --unicodes.
  + Various bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631966400">- harfbuzz 3.0.0:
  + Unicode 14.0 support
  + hb-subset API and harfbuzz-subset ABI now declared stable
  + hb-style API is now stable</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1636200000">- harfbuzz 3.1.0:
  * Better offset-overflow handling in the subsetter library
  * Improved Unicode 14 properties in the USE shaper, and various
    other USE shaper fixes
  * MATH and COLR v1 tables subsetting support, and various other
    subsetter fixes
  * Support for Pwo Karen / Ason Chin medial la. (Simon Cozens)
  * Apply GPOS positioning when substituting with morx table, if
    kerx is missing
  * Apply calt and clig features across syllable boundaries in
    Indic shaper
  * Meson option for enabling Graphite 2 has been renamed to
    graphite2
  * Build and documentation fixes
- add harfbuzz-3.1.0-work-around-GCC-cast-align-error-warning.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636459200">- Update to version 3.1.1:
  + Work around GCC cast-align error/warning on some platforms.
  + Documentation improvements.
- Drop patch fixed upstream:
  + harfbuzz-3.1.0-work-around-GCC-cast-align-error-warning.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639742400">- Update to 3.1.2:
  + hb-shape / hb-view: revert treating text on the commandline as
    single paragraph (was introduced in 3.0.0); add new
  - -single-par to do that
  + Subsetter bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639742401">- Update to 3.2.0:
  + Fixed shaping of Apple Color Emoji flags in right-to-left context
  + Fixed positioning of CFF fonts in HB_TINY profile
  + OpenType 1.9 language tags update
  + Add HB_NO_VERTICAL config option
  + Add HB_CONFIG_OVERRIDE_H for easier configuration
  + Improved packing of cmap, loca, and Ligature tables
  + Significantly improved overflow-resolution strategy in the repacker</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644235200">- update to 3.3.2:
  + Revert splitting of pair positioning values introduced in 3.3.0
    as it proved problematic
- includes changes from 3.3.1:
  + Fix heap-use-after-free in harfbuzz-subset introduced in
    previous release
- includes changes from 3.3.0:
  + Improved documentation, code cleanup
  + The low 16-bits of face index will be used by hb_face_create()
    to select a face inside a font collection file format, while the
    high 16-bits will be used by hb_font_create() to load the named
    instance
  + Glyph positions and other font metrics now apply synthetic slant
    set by hb_font_set_synthetic_slant(), for improved positioning
    for synthetically slanted fonts
  + Fixed unintentional locale dependency in hb_variation_to_string()
    for decimal point representation
  + When applying pair positioning (kerning) the positioning value
    is split between the two sides of the pair for improved cursor
    positioning between such pairs
  + Introduced new HB_GLYPH_FLAG_UNSAFE_TO_CONCAT, to be used in
    conjunction with HB_GLYPH_FLAG_UNSAFE_TO_BREAK for optimizing
    re-shaping during line breaking. Check the documentation for
    further details
  + Improved handling of macrolanguages when mapping BCP 47 codes
    to OpenType tags</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644753600">- update to 3.4.0:
  + Perform sanity checks on shaping results is now part of
    “harfbuzz” library and can be enabled by setting the buffer
    flag HB_BUFFER_FLAG_VERIFY
  + Arabic Mark Transient Reordering Algorithm have been updated
    to revision 6
  + ISO 15924 code for mathematical notation, ‘Zmth’, now maps to
    the OpenType ‘math’ tag
  + It is now possible to get at once all math kerning values for a
    given glyph at a given corner
  + Fix locale_t portability issues on systems the typedef’s it to
    a void pointer</changelog>
  <changelog author="mgorse@suse.com" date="1658836800">- Add harfbuzz-CVE-2022-33068.patch: sbix: limit glyph extents
  (boo#1200900 CVE-2022-33068).</changelog>
  <changelog author="mgorse@suse.com" date="1680696000">- Add CVE-2023-25193.patch: limit how far we skip when looking
  back (bsc#1207922 CVE-2023-25193).</changelog>
</package>
<package pkgid="c92c23512df2313de55d8db8cc8d16c92c4b78255bf9f3322866d0a97fcb2c64" name="libharfbuzz0" arch="aarch64">
  <version epoch="0" ver="3.4.0" rel="150400.3.8.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1591185600">- Update to version 2.6.7:
  + Update to Unicode 13.0.0
  + Fix hb_ot_layout_get_ligature_carets for fonts without lcar
    table
- includes fixes from 2.6.6:
  * A fix in AAT kerning for Geeza Pro</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1592913600">- update to 2.6.8:
  + New API to fetch glyph alternates from GSUB table
  + New API +hb_ot_layout_lookup_get_glyph_alternates()
- Drop gpg2 BuildRequires and stop verifying signature during
  build: upstream no longer signs the tarball/signature.</changelog>
  <changelog author="dmueller@suse.com" date="1600344000">- Update to version 2.7.2:
  + Fix a regression in the previous release that caused a crash
    with Kaithi.
  + More OOM fixes.
  + ot-funcs now handles variable empty glyphs better when
    hvar/vvar isn't present.
  + Reverted a GDEF processing regression.
  + A couple of fixes to handle OOM better.
  + Use an implementation for round that always rounds up, some
    minor fluctuations are expected on var font specially when
    hb-ot callback is used.
  + Fix an AAT's `kerx` issue on broken rendering of Devanagari
    Sangam MN.
  + Remove AAT's `lcar` table support from _get_ligature_carets
    API, not even much use on macOS installed fonts (only two
    files). GDEF support is the recommended one and expected to
    work properly after issues fixed two releases ago.
  - Minor memory fixes to handle OOM better specially in hb-ft.
  - Minor .so files versioning scheme change and remove
    stable/unstable scheme differences, was never used in practice
    (always default to stable scheme).
  - We are now suggesting careful packaging of the library using
    meson, https://github.com/harfbuzz/harfbuzz/wiki/Notes-on-migration-to-meson
    for more information.
  - Distribution package URL is changed, either use GitHub
    generated tarballs,
    `https://github.com/harfbuzz/harfbuzz/archive/$pkgver.tar.gz`
    or, even more preferably use commit hash of the release and git
    checkouts like,
    `git+https://github.com/harfbuzz/harfbuzz#commit=$commit`</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609070400">- Update to version 2.7.4:
  + Fix missing --enable-introspection configure option
- Changes from version 2.7.3:
  + Update USE shaper to 2020-08-13 specification, and other
    improvements
  + Don’t disable liga feature in myanmar shaper, to match
    Uniscribe
  + Improvements to language and script tags handling.
  + Update language system tag registry to OpenType 1.8.4
  + Support for serializing and deserializing Unicode buffers
  + Increase buffer work limits to handle fonts with many complex
    lookups
  + Handle more shaping operations in trace output
  + Memory access fixes
  + More OOM fixes
  + Improved documentation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610107200">- Switch to meson buildsystem:
  + Add meson BuildRequires and macros.
  + Replace gcc-c++ for generic c++_compiler BuildRequires.
  + Add meson_test macro in check section, run tests during build.
  + Drop pkgconfig(graphite2) BuildRequires: No longer build
    graphite2 support, following upstream that disables this by
    default.
  + Stop packaging gtk-docs, pass -Ddocs=disabled to meson, this
    way we might avoid a build-cycle and since we did not have a
    explicit docs subpackage, just silently drop them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1610539200">- Re-enable graphite2 support: TexLive relies on this to be
  present:
  + Pass -Dgraphite=enabled to meson.
  + Add pkgconfig(graphite2) BuildRequires.</changelog>
  <changelog author="christophe@krop.fr" date="1618315200">- Update to version 2.8.0:
  + Shape joining scripts other than Arabic/Syriac using the
    Universal Shaping Engine. Previously these were shaped using
    the generalized Arabic shaper.
  + Fix regression in shaping of U+0B55 ORIYA SIGN OVERLINE.
  + Update language tags.
  + Variations: reduce error: do not round each interpolated delta.
  + Documentation improvements.
  + Subsetter improvements: subsets most, if not all, lookup types
    now.
  + Fuzzer-found fixes and other improvements when memory failures
    happen.
  + Removed most atomic implementations now that we have C++11
    atomic impl.
  + General codebase upkeep; using more C++11 features: constexpr
    constructors, etc.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620302400">- Update to version 2.8.1:
  + Subsetter now fully supports GSUB/GPOS/GDEF tables (including
    variations); as such, layout tables are retained by subsetter
    by default
  + hb-view supports iTerm2 and kitty inline image protocols
    it can also use Chafa for terminal graphics if available
- Add  pkgconfig(chafa): new, optional depdency.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1626264000">- Update to version 2.8.2:
  + Shaping LTR digits for RTL scripts now makes the native
    direction of the digits LTR, applying shaping and positioning
    rules on the same glyph order as Uniscribe
  + Subsetting COLR v1 and CPAL tables is now supported
  + Various fixes and improvements to the subsetter
  + When applying morx table, mark glyph widths should not be zeroed
  + GPOS is preferred over kerx, if GSUB was applied
  + Regional_Indicator pairs are grouped together when clustering</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Drop pkgconfig(chafa) BuildRequires for now: causes a cycle
  between chafa and harfbuzz, and disable it in meson</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631448000">- harfbuzz 2.9.1:
  + Subsetter API close to stable
  + Various fuzzer-found bug fixes
  + hb_buffer_append() now handles the pre- and post-context which
    previously were left unchanged in the destination buffer
  + hb-view / hb-shape now accept following new arguments:
  - -unicodes: takes a list of hex numbers that represent Unicode
    codepoints.
  + Undeprecated API: hb_set_invert()
- includes changes from 2.9.0:
  + Support multiple variation axes with same tag, aka HOI
  + The coretext testing shaper now passes font variations to
    CoreText
  + hb-shape/hb-view does not break line at new lines unless text
    is read from file
  + hb-view and hb-subset has a --batch now, similar to hb-shape
  + The --batch mode now uses ; as argument separator instead of :
    used previously
  + The --batch in hb-shape does not expect 0th argument anymore.
    That is, the lines read are interpreted as argv[1:], instead
    of argv[0:].
  + The --batch option has been undocumented. We are ready to
    document it; send feedback if you find it useful
  + hb-subset got arguments revamps. Added much-requested
  - -gids-file, --glyphs, --glyphs-file, --unicodes-file,
    supporting ranges in --unicodes.
  + Various bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631966400">- harfbuzz 3.0.0:
  + Unicode 14.0 support
  + hb-subset API and harfbuzz-subset ABI now declared stable
  + hb-style API is now stable</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1636200000">- harfbuzz 3.1.0:
  * Better offset-overflow handling in the subsetter library
  * Improved Unicode 14 properties in the USE shaper, and various
    other USE shaper fixes
  * MATH and COLR v1 tables subsetting support, and various other
    subsetter fixes
  * Support for Pwo Karen / Ason Chin medial la. (Simon Cozens)
  * Apply GPOS positioning when substituting with morx table, if
    kerx is missing
  * Apply calt and clig features across syllable boundaries in
    Indic shaper
  * Meson option for enabling Graphite 2 has been renamed to
    graphite2
  * Build and documentation fixes
- add harfbuzz-3.1.0-work-around-GCC-cast-align-error-warning.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636459200">- Update to version 3.1.1:
  + Work around GCC cast-align error/warning on some platforms.
  + Documentation improvements.
- Drop patch fixed upstream:
  + harfbuzz-3.1.0-work-around-GCC-cast-align-error-warning.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639742400">- Update to 3.1.2:
  + hb-shape / hb-view: revert treating text on the commandline as
    single paragraph (was introduced in 3.0.0); add new
  - -single-par to do that
  + Subsetter bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639742401">- Update to 3.2.0:
  + Fixed shaping of Apple Color Emoji flags in right-to-left context
  + Fixed positioning of CFF fonts in HB_TINY profile
  + OpenType 1.9 language tags update
  + Add HB_NO_VERTICAL config option
  + Add HB_CONFIG_OVERRIDE_H for easier configuration
  + Improved packing of cmap, loca, and Ligature tables
  + Significantly improved overflow-resolution strategy in the repacker</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644235200">- update to 3.3.2:
  + Revert splitting of pair positioning values introduced in 3.3.0
    as it proved problematic
- includes changes from 3.3.1:
  + Fix heap-use-after-free in harfbuzz-subset introduced in
    previous release
- includes changes from 3.3.0:
  + Improved documentation, code cleanup
  + The low 16-bits of face index will be used by hb_face_create()
    to select a face inside a font collection file format, while the
    high 16-bits will be used by hb_font_create() to load the named
    instance
  + Glyph positions and other font metrics now apply synthetic slant
    set by hb_font_set_synthetic_slant(), for improved positioning
    for synthetically slanted fonts
  + Fixed unintentional locale dependency in hb_variation_to_string()
    for decimal point representation
  + When applying pair positioning (kerning) the positioning value
    is split between the two sides of the pair for improved cursor
    positioning between such pairs
  + Introduced new HB_GLYPH_FLAG_UNSAFE_TO_CONCAT, to be used in
    conjunction with HB_GLYPH_FLAG_UNSAFE_TO_BREAK for optimizing
    re-shaping during line breaking. Check the documentation for
    further details
  + Improved handling of macrolanguages when mapping BCP 47 codes
    to OpenType tags</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644753600">- update to 3.4.0:
  + Perform sanity checks on shaping results is now part of
    “harfbuzz” library and can be enabled by setting the buffer
    flag HB_BUFFER_FLAG_VERIFY
  + Arabic Mark Transient Reordering Algorithm have been updated
    to revision 6
  + ISO 15924 code for mathematical notation, ‘Zmth’, now maps to
    the OpenType ‘math’ tag
  + It is now possible to get at once all math kerning values for a
    given glyph at a given corner
  + Fix locale_t portability issues on systems the typedef’s it to
    a void pointer</changelog>
  <changelog author="mgorse@suse.com" date="1658836800">- Add harfbuzz-CVE-2022-33068.patch: sbix: limit glyph extents
  (boo#1200900 CVE-2022-33068).</changelog>
  <changelog author="mgorse@suse.com" date="1680696000">- Add CVE-2023-25193.patch: limit how far we skip when looking
  back (bsc#1207922 CVE-2023-25193).</changelog>
</package>
<package pkgid="73ceb5906cf7f4ce4efaf1b7f42b5f84a2edb8b8c94e6bc4ca3885bcd4cf0708" name="libharfbuzz0" arch="s390x">
  <version epoch="0" ver="3.4.0" rel="150400.3.8.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1591185600">- Update to version 2.6.7:
  + Update to Unicode 13.0.0
  + Fix hb_ot_layout_get_ligature_carets for fonts without lcar
    table
- includes fixes from 2.6.6:
  * A fix in AAT kerning for Geeza Pro</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1592913600">- update to 2.6.8:
  + New API to fetch glyph alternates from GSUB table
  + New API +hb_ot_layout_lookup_get_glyph_alternates()
- Drop gpg2 BuildRequires and stop verifying signature during
  build: upstream no longer signs the tarball/signature.</changelog>
  <changelog author="dmueller@suse.com" date="1600344000">- Update to version 2.7.2:
  + Fix a regression in the previous release that caused a crash
    with Kaithi.
  + More OOM fixes.
  + ot-funcs now handles variable empty glyphs better when
    hvar/vvar isn't present.
  + Reverted a GDEF processing regression.
  + A couple of fixes to handle OOM better.
  + Use an implementation for round that always rounds up, some
    minor fluctuations are expected on var font specially when
    hb-ot callback is used.
  + Fix an AAT's `kerx` issue on broken rendering of Devanagari
    Sangam MN.
  + Remove AAT's `lcar` table support from _get_ligature_carets
    API, not even much use on macOS installed fonts (only two
    files). GDEF support is the recommended one and expected to
    work properly after issues fixed two releases ago.
  - Minor memory fixes to handle OOM better specially in hb-ft.
  - Minor .so files versioning scheme change and remove
    stable/unstable scheme differences, was never used in practice
    (always default to stable scheme).
  - We are now suggesting careful packaging of the library using
    meson, https://github.com/harfbuzz/harfbuzz/wiki/Notes-on-migration-to-meson
    for more information.
  - Distribution package URL is changed, either use GitHub
    generated tarballs,
    `https://github.com/harfbuzz/harfbuzz/archive/$pkgver.tar.gz`
    or, even more preferably use commit hash of the release and git
    checkouts like,
    `git+https://github.com/harfbuzz/harfbuzz#commit=$commit`</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609070400">- Update to version 2.7.4:
  + Fix missing --enable-introspection configure option
- Changes from version 2.7.3:
  + Update USE shaper to 2020-08-13 specification, and other
    improvements
  + Don’t disable liga feature in myanmar shaper, to match
    Uniscribe
  + Improvements to language and script tags handling.
  + Update language system tag registry to OpenType 1.8.4
  + Support for serializing and deserializing Unicode buffers
  + Increase buffer work limits to handle fonts with many complex
    lookups
  + Handle more shaping operations in trace output
  + Memory access fixes
  + More OOM fixes
  + Improved documentation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610107200">- Switch to meson buildsystem:
  + Add meson BuildRequires and macros.
  + Replace gcc-c++ for generic c++_compiler BuildRequires.
  + Add meson_test macro in check section, run tests during build.
  + Drop pkgconfig(graphite2) BuildRequires: No longer build
    graphite2 support, following upstream that disables this by
    default.
  + Stop packaging gtk-docs, pass -Ddocs=disabled to meson, this
    way we might avoid a build-cycle and since we did not have a
    explicit docs subpackage, just silently drop them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1610539200">- Re-enable graphite2 support: TexLive relies on this to be
  present:
  + Pass -Dgraphite=enabled to meson.
  + Add pkgconfig(graphite2) BuildRequires.</changelog>
  <changelog author="christophe@krop.fr" date="1618315200">- Update to version 2.8.0:
  + Shape joining scripts other than Arabic/Syriac using the
    Universal Shaping Engine. Previously these were shaped using
    the generalized Arabic shaper.
  + Fix regression in shaping of U+0B55 ORIYA SIGN OVERLINE.
  + Update language tags.
  + Variations: reduce error: do not round each interpolated delta.
  + Documentation improvements.
  + Subsetter improvements: subsets most, if not all, lookup types
    now.
  + Fuzzer-found fixes and other improvements when memory failures
    happen.
  + Removed most atomic implementations now that we have C++11
    atomic impl.
  + General codebase upkeep; using more C++11 features: constexpr
    constructors, etc.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620302400">- Update to version 2.8.1:
  + Subsetter now fully supports GSUB/GPOS/GDEF tables (including
    variations); as such, layout tables are retained by subsetter
    by default
  + hb-view supports iTerm2 and kitty inline image protocols
    it can also use Chafa for terminal graphics if available
- Add  pkgconfig(chafa): new, optional depdency.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1626264000">- Update to version 2.8.2:
  + Shaping LTR digits for RTL scripts now makes the native
    direction of the digits LTR, applying shaping and positioning
    rules on the same glyph order as Uniscribe
  + Subsetting COLR v1 and CPAL tables is now supported
  + Various fixes and improvements to the subsetter
  + When applying morx table, mark glyph widths should not be zeroed
  + GPOS is preferred over kerx, if GSUB was applied
  + Regional_Indicator pairs are grouped together when clustering</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Drop pkgconfig(chafa) BuildRequires for now: causes a cycle
  between chafa and harfbuzz, and disable it in meson</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631448000">- harfbuzz 2.9.1:
  + Subsetter API close to stable
  + Various fuzzer-found bug fixes
  + hb_buffer_append() now handles the pre- and post-context which
    previously were left unchanged in the destination buffer
  + hb-view / hb-shape now accept following new arguments:
  - -unicodes: takes a list of hex numbers that represent Unicode
    codepoints.
  + Undeprecated API: hb_set_invert()
- includes changes from 2.9.0:
  + Support multiple variation axes with same tag, aka HOI
  + The coretext testing shaper now passes font variations to
    CoreText
  + hb-shape/hb-view does not break line at new lines unless text
    is read from file
  + hb-view and hb-subset has a --batch now, similar to hb-shape
  + The --batch mode now uses ; as argument separator instead of :
    used previously
  + The --batch in hb-shape does not expect 0th argument anymore.
    That is, the lines read are interpreted as argv[1:], instead
    of argv[0:].
  + The --batch option has been undocumented. We are ready to
    document it; send feedback if you find it useful
  + hb-subset got arguments revamps. Added much-requested
  - -gids-file, --glyphs, --glyphs-file, --unicodes-file,
    supporting ranges in --unicodes.
  + Various bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631966400">- harfbuzz 3.0.0:
  + Unicode 14.0 support
  + hb-subset API and harfbuzz-subset ABI now declared stable
  + hb-style API is now stable</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1636200000">- harfbuzz 3.1.0:
  * Better offset-overflow handling in the subsetter library
  * Improved Unicode 14 properties in the USE shaper, and various
    other USE shaper fixes
  * MATH and COLR v1 tables subsetting support, and various other
    subsetter fixes
  * Support for Pwo Karen / Ason Chin medial la. (Simon Cozens)
  * Apply GPOS positioning when substituting with morx table, if
    kerx is missing
  * Apply calt and clig features across syllable boundaries in
    Indic shaper
  * Meson option for enabling Graphite 2 has been renamed to
    graphite2
  * Build and documentation fixes
- add harfbuzz-3.1.0-work-around-GCC-cast-align-error-warning.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636459200">- Update to version 3.1.1:
  + Work around GCC cast-align error/warning on some platforms.
  + Documentation improvements.
- Drop patch fixed upstream:
  + harfbuzz-3.1.0-work-around-GCC-cast-align-error-warning.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639742400">- Update to 3.1.2:
  + hb-shape / hb-view: revert treating text on the commandline as
    single paragraph (was introduced in 3.0.0); add new
  - -single-par to do that
  + Subsetter bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639742401">- Update to 3.2.0:
  + Fixed shaping of Apple Color Emoji flags in right-to-left context
  + Fixed positioning of CFF fonts in HB_TINY profile
  + OpenType 1.9 language tags update
  + Add HB_NO_VERTICAL config option
  + Add HB_CONFIG_OVERRIDE_H for easier configuration
  + Improved packing of cmap, loca, and Ligature tables
  + Significantly improved overflow-resolution strategy in the repacker</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644235200">- update to 3.3.2:
  + Revert splitting of pair positioning values introduced in 3.3.0
    as it proved problematic
- includes changes from 3.3.1:
  + Fix heap-use-after-free in harfbuzz-subset introduced in
    previous release
- includes changes from 3.3.0:
  + Improved documentation, code cleanup
  + The low 16-bits of face index will be used by hb_face_create()
    to select a face inside a font collection file format, while the
    high 16-bits will be used by hb_font_create() to load the named
    instance
  + Glyph positions and other font metrics now apply synthetic slant
    set by hb_font_set_synthetic_slant(), for improved positioning
    for synthetically slanted fonts
  + Fixed unintentional locale dependency in hb_variation_to_string()
    for decimal point representation
  + When applying pair positioning (kerning) the positioning value
    is split between the two sides of the pair for improved cursor
    positioning between such pairs
  + Introduced new HB_GLYPH_FLAG_UNSAFE_TO_CONCAT, to be used in
    conjunction with HB_GLYPH_FLAG_UNSAFE_TO_BREAK for optimizing
    re-shaping during line breaking. Check the documentation for
    further details
  + Improved handling of macrolanguages when mapping BCP 47 codes
    to OpenType tags</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644753600">- update to 3.4.0:
  + Perform sanity checks on shaping results is now part of
    “harfbuzz” library and can be enabled by setting the buffer
    flag HB_BUFFER_FLAG_VERIFY
  + Arabic Mark Transient Reordering Algorithm have been updated
    to revision 6
  + ISO 15924 code for mathematical notation, ‘Zmth’, now maps to
    the OpenType ‘math’ tag
  + It is now possible to get at once all math kerning values for a
    given glyph at a given corner
  + Fix locale_t portability issues on systems the typedef’s it to
    a void pointer</changelog>
  <changelog author="mgorse@suse.com" date="1658836800">- Add harfbuzz-CVE-2022-33068.patch: sbix: limit glyph extents
  (boo#1200900 CVE-2022-33068).</changelog>
  <changelog author="mgorse@suse.com" date="1680696000">- Add CVE-2023-25193.patch: limit how far we skip when looking
  back (bsc#1207922 CVE-2023-25193).</changelog>
</package>
<package pkgid="66c3f4ab064d3e5b9a8c9584c1d7151758acf3280413ee703f19d4eefda02474" name="libharfbuzz0" arch="x86_64">
  <version epoch="0" ver="3.4.0" rel="150400.3.8.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1591185600">- Update to version 2.6.7:
  + Update to Unicode 13.0.0
  + Fix hb_ot_layout_get_ligature_carets for fonts without lcar
    table
- includes fixes from 2.6.6:
  * A fix in AAT kerning for Geeza Pro</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1592913600">- update to 2.6.8:
  + New API to fetch glyph alternates from GSUB table
  + New API +hb_ot_layout_lookup_get_glyph_alternates()
- Drop gpg2 BuildRequires and stop verifying signature during
  build: upstream no longer signs the tarball/signature.</changelog>
  <changelog author="dmueller@suse.com" date="1600344000">- Update to version 2.7.2:
  + Fix a regression in the previous release that caused a crash
    with Kaithi.
  + More OOM fixes.
  + ot-funcs now handles variable empty glyphs better when
    hvar/vvar isn't present.
  + Reverted a GDEF processing regression.
  + A couple of fixes to handle OOM better.
  + Use an implementation for round that always rounds up, some
    minor fluctuations are expected on var font specially when
    hb-ot callback is used.
  + Fix an AAT's `kerx` issue on broken rendering of Devanagari
    Sangam MN.
  + Remove AAT's `lcar` table support from _get_ligature_carets
    API, not even much use on macOS installed fonts (only two
    files). GDEF support is the recommended one and expected to
    work properly after issues fixed two releases ago.
  - Minor memory fixes to handle OOM better specially in hb-ft.
  - Minor .so files versioning scheme change and remove
    stable/unstable scheme differences, was never used in practice
    (always default to stable scheme).
  - We are now suggesting careful packaging of the library using
    meson, https://github.com/harfbuzz/harfbuzz/wiki/Notes-on-migration-to-meson
    for more information.
  - Distribution package URL is changed, either use GitHub
    generated tarballs,
    `https://github.com/harfbuzz/harfbuzz/archive/$pkgver.tar.gz`
    or, even more preferably use commit hash of the release and git
    checkouts like,
    `git+https://github.com/harfbuzz/harfbuzz#commit=$commit`</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609070400">- Update to version 2.7.4:
  + Fix missing --enable-introspection configure option
- Changes from version 2.7.3:
  + Update USE shaper to 2020-08-13 specification, and other
    improvements
  + Don’t disable liga feature in myanmar shaper, to match
    Uniscribe
  + Improvements to language and script tags handling.
  + Update language system tag registry to OpenType 1.8.4
  + Support for serializing and deserializing Unicode buffers
  + Increase buffer work limits to handle fonts with many complex
    lookups
  + Handle more shaping operations in trace output
  + Memory access fixes
  + More OOM fixes
  + Improved documentation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610107200">- Switch to meson buildsystem:
  + Add meson BuildRequires and macros.
  + Replace gcc-c++ for generic c++_compiler BuildRequires.
  + Add meson_test macro in check section, run tests during build.
  + Drop pkgconfig(graphite2) BuildRequires: No longer build
    graphite2 support, following upstream that disables this by
    default.
  + Stop packaging gtk-docs, pass -Ddocs=disabled to meson, this
    way we might avoid a build-cycle and since we did not have a
    explicit docs subpackage, just silently drop them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1610539200">- Re-enable graphite2 support: TexLive relies on this to be
  present:
  + Pass -Dgraphite=enabled to meson.
  + Add pkgconfig(graphite2) BuildRequires.</changelog>
  <changelog author="christophe@krop.fr" date="1618315200">- Update to version 2.8.0:
  + Shape joining scripts other than Arabic/Syriac using the
    Universal Shaping Engine. Previously these were shaped using
    the generalized Arabic shaper.
  + Fix regression in shaping of U+0B55 ORIYA SIGN OVERLINE.
  + Update language tags.
  + Variations: reduce error: do not round each interpolated delta.
  + Documentation improvements.
  + Subsetter improvements: subsets most, if not all, lookup types
    now.
  + Fuzzer-found fixes and other improvements when memory failures
    happen.
  + Removed most atomic implementations now that we have C++11
    atomic impl.
  + General codebase upkeep; using more C++11 features: constexpr
    constructors, etc.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620302400">- Update to version 2.8.1:
  + Subsetter now fully supports GSUB/GPOS/GDEF tables (including
    variations); as such, layout tables are retained by subsetter
    by default
  + hb-view supports iTerm2 and kitty inline image protocols
    it can also use Chafa for terminal graphics if available
- Add  pkgconfig(chafa): new, optional depdency.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1626264000">- Update to version 2.8.2:
  + Shaping LTR digits for RTL scripts now makes the native
    direction of the digits LTR, applying shaping and positioning
    rules on the same glyph order as Uniscribe
  + Subsetting COLR v1 and CPAL tables is now supported
  + Various fixes and improvements to the subsetter
  + When applying morx table, mark glyph widths should not be zeroed
  + GPOS is preferred over kerx, if GSUB was applied
  + Regional_Indicator pairs are grouped together when clustering</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Drop pkgconfig(chafa) BuildRequires for now: causes a cycle
  between chafa and harfbuzz, and disable it in meson</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631448000">- harfbuzz 2.9.1:
  + Subsetter API close to stable
  + Various fuzzer-found bug fixes
  + hb_buffer_append() now handles the pre- and post-context which
    previously were left unchanged in the destination buffer
  + hb-view / hb-shape now accept following new arguments:
  - -unicodes: takes a list of hex numbers that represent Unicode
    codepoints.
  + Undeprecated API: hb_set_invert()
- includes changes from 2.9.0:
  + Support multiple variation axes with same tag, aka HOI
  + The coretext testing shaper now passes font variations to
    CoreText
  + hb-shape/hb-view does not break line at new lines unless text
    is read from file
  + hb-view and hb-subset has a --batch now, similar to hb-shape
  + The --batch mode now uses ; as argument separator instead of :
    used previously
  + The --batch in hb-shape does not expect 0th argument anymore.
    That is, the lines read are interpreted as argv[1:], instead
    of argv[0:].
  + The --batch option has been undocumented. We are ready to
    document it; send feedback if you find it useful
  + hb-subset got arguments revamps. Added much-requested
  - -gids-file, --glyphs, --glyphs-file, --unicodes-file,
    supporting ranges in --unicodes.
  + Various bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631966400">- harfbuzz 3.0.0:
  + Unicode 14.0 support
  + hb-subset API and harfbuzz-subset ABI now declared stable
  + hb-style API is now stable</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1636200000">- harfbuzz 3.1.0:
  * Better offset-overflow handling in the subsetter library
  * Improved Unicode 14 properties in the USE shaper, and various
    other USE shaper fixes
  * MATH and COLR v1 tables subsetting support, and various other
    subsetter fixes
  * Support for Pwo Karen / Ason Chin medial la. (Simon Cozens)
  * Apply GPOS positioning when substituting with morx table, if
    kerx is missing
  * Apply calt and clig features across syllable boundaries in
    Indic shaper
  * Meson option for enabling Graphite 2 has been renamed to
    graphite2
  * Build and documentation fixes
- add harfbuzz-3.1.0-work-around-GCC-cast-align-error-warning.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636459200">- Update to version 3.1.1:
  + Work around GCC cast-align error/warning on some platforms.
  + Documentation improvements.
- Drop patch fixed upstream:
  + harfbuzz-3.1.0-work-around-GCC-cast-align-error-warning.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639742400">- Update to 3.1.2:
  + hb-shape / hb-view: revert treating text on the commandline as
    single paragraph (was introduced in 3.0.0); add new
  - -single-par to do that
  + Subsetter bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639742401">- Update to 3.2.0:
  + Fixed shaping of Apple Color Emoji flags in right-to-left context
  + Fixed positioning of CFF fonts in HB_TINY profile
  + OpenType 1.9 language tags update
  + Add HB_NO_VERTICAL config option
  + Add HB_CONFIG_OVERRIDE_H for easier configuration
  + Improved packing of cmap, loca, and Ligature tables
  + Significantly improved overflow-resolution strategy in the repacker</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644235200">- update to 3.3.2:
  + Revert splitting of pair positioning values introduced in 3.3.0
    as it proved problematic
- includes changes from 3.3.1:
  + Fix heap-use-after-free in harfbuzz-subset introduced in
    previous release
- includes changes from 3.3.0:
  + Improved documentation, code cleanup
  + The low 16-bits of face index will be used by hb_face_create()
    to select a face inside a font collection file format, while the
    high 16-bits will be used by hb_font_create() to load the named
    instance
  + Glyph positions and other font metrics now apply synthetic slant
    set by hb_font_set_synthetic_slant(), for improved positioning
    for synthetically slanted fonts
  + Fixed unintentional locale dependency in hb_variation_to_string()
    for decimal point representation
  + When applying pair positioning (kerning) the positioning value
    is split between the two sides of the pair for improved cursor
    positioning between such pairs
  + Introduced new HB_GLYPH_FLAG_UNSAFE_TO_CONCAT, to be used in
    conjunction with HB_GLYPH_FLAG_UNSAFE_TO_BREAK for optimizing
    re-shaping during line breaking. Check the documentation for
    further details
  + Improved handling of macrolanguages when mapping BCP 47 codes
    to OpenType tags</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644753600">- update to 3.4.0:
  + Perform sanity checks on shaping results is now part of
    “harfbuzz” library and can be enabled by setting the buffer
    flag HB_BUFFER_FLAG_VERIFY
  + Arabic Mark Transient Reordering Algorithm have been updated
    to revision 6
  + ISO 15924 code for mathematical notation, ‘Zmth’, now maps to
    the OpenType ‘math’ tag
  + It is now possible to get at once all math kerning values for a
    given glyph at a given corner
  + Fix locale_t portability issues on systems the typedef’s it to
    a void pointer</changelog>
  <changelog author="mgorse@suse.com" date="1658836800">- Add harfbuzz-CVE-2022-33068.patch: sbix: limit glyph extents
  (boo#1200900 CVE-2022-33068).</changelog>
  <changelog author="mgorse@suse.com" date="1680696000">- Add CVE-2023-25193.patch: limit how far we skip when looking
  back (bsc#1207922 CVE-2023-25193).</changelog>
</package>
<package pkgid="640dc5537f46180fe10441a830a0d37ee0d6aed133909b55c348dc3170358784" name="libhidapi-hidraw0" arch="aarch64">
  <version epoch="0" ver="0.10.1" rel="150300.3.2.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1390824000">- Initial version</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1394798400">- Add do_not_install_docs.patch: don't let make install docs</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1395662400">- Supply LICENSE files with libraries</changelog>
  <changelog author="luca@z3ntu.xyz" date="1563796800">- Update to 0.9.0
- Switch upstream to libusb/hidapi because the original maintainer is not active anymore</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1563796801">- Use disabled services to follow Factory guidelines.</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(libudev) instead of libudev-devel: allow
  OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="jgwang@suse.com" date="1610366400">- Update to version 0.10.1
  * Add FreeBSD/macOS/MinGW/Alpine/Arch Linux/Windows CI
  * Add hid_version/hid_version_str API (#192)
  * Add podspec to support releases via cocoapods
  * Add support for HID over I2C and uhid devices (#166)
  * Fix small casting issue
  * Fix race condition on device close (#189)
  * Fix API prototype for gcc flag -Wstrict-prototypes (#207)
  * Fix strict typecast (#206)
  * Fix -Wall -Wextra -pedantic -Werror compilation (#214) ￼…
  * Drop workaround for kernel &lt; 2.6.34
  * Use pkg-config to find libusb on *freebsd
  * Reattach kernel driver in hidapi-libusb
  * Move local variable declaration to the beginning of the function</changelog>
</package>
<package pkgid="a2f8d85938caba5b11b24866bd2abe5412d2638fd18033be6fa4776712d3b1fe" name="libhidapi-hidraw0" arch="s390x">
  <version epoch="0" ver="0.10.1" rel="150300.3.2.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1390824000">- Initial version</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1394798400">- Add do_not_install_docs.patch: don't let make install docs</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1395662400">- Supply LICENSE files with libraries</changelog>
  <changelog author="luca@z3ntu.xyz" date="1563796800">- Update to 0.9.0
- Switch upstream to libusb/hidapi because the original maintainer is not active anymore</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1563796801">- Use disabled services to follow Factory guidelines.</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(libudev) instead of libudev-devel: allow
  OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="jgwang@suse.com" date="1610366400">- Update to version 0.10.1
  * Add FreeBSD/macOS/MinGW/Alpine/Arch Linux/Windows CI
  * Add hid_version/hid_version_str API (#192)
  * Add podspec to support releases via cocoapods
  * Add support for HID over I2C and uhid devices (#166)
  * Fix small casting issue
  * Fix race condition on device close (#189)
  * Fix API prototype for gcc flag -Wstrict-prototypes (#207)
  * Fix strict typecast (#206)
  * Fix -Wall -Wextra -pedantic -Werror compilation (#214) ￼…
  * Drop workaround for kernel &lt; 2.6.34
  * Use pkg-config to find libusb on *freebsd
  * Reattach kernel driver in hidapi-libusb
  * Move local variable declaration to the beginning of the function</changelog>
</package>
<package pkgid="15574cf563aa7c442ba4f7f4d11f7f53e092ed3792de808ad7cb239e0d34fb95" name="libhidapi-hidraw0" arch="x86_64">
  <version epoch="0" ver="0.10.1" rel="150300.3.2.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1390824000">- Initial version</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1394798400">- Add do_not_install_docs.patch: don't let make install docs</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1395662400">- Supply LICENSE files with libraries</changelog>
  <changelog author="luca@z3ntu.xyz" date="1563796800">- Update to 0.9.0
- Switch upstream to libusb/hidapi because the original maintainer is not active anymore</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1563796801">- Use disabled services to follow Factory guidelines.</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(libudev) instead of libudev-devel: allow
  OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="jgwang@suse.com" date="1610366400">- Update to version 0.10.1
  * Add FreeBSD/macOS/MinGW/Alpine/Arch Linux/Windows CI
  * Add hid_version/hid_version_str API (#192)
  * Add podspec to support releases via cocoapods
  * Add support for HID over I2C and uhid devices (#166)
  * Fix small casting issue
  * Fix race condition on device close (#189)
  * Fix API prototype for gcc flag -Wstrict-prototypes (#207)
  * Fix strict typecast (#206)
  * Fix -Wall -Wextra -pedantic -Werror compilation (#214) ￼…
  * Drop workaround for kernel &lt; 2.6.34
  * Use pkg-config to find libusb on *freebsd
  * Reattach kernel driver in hidapi-libusb
  * Move local variable declaration to the beginning of the function</changelog>
</package>
<package pkgid="3625187d30c7d9d8be04e5f0a8c330bc7f954a52c40fdbea72ee0811d09735f0" name="libhugetlbfs" arch="aarch64">
  <version epoch="0" ver="2.20" rel="150000.3.8.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1424433600">- update to 2.18
  to solve build failures for ppc/ppc64.
  remove following patches now included in 2.18:
    libhugetlbfs-ppc64le.patch
    libhugetlbfs.ppc64le.step2.patch
    libhugetlbfs.ppc64le.step3.patch
    libhugetlbfs.ppc64le.step4.patch
- Add fix_plt_extrasz_always_returning_0_on_ppc64le.patch
  already upstream.</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1435060800">- Add libhugelbfs-2.18-restrict-is-a-reserved-word.patch which
  fixes compilation with GCC 5 (and C99/C11 in general).
  * Add libhugetlbfs-2.18-restrict-is-a-reserved-word.patch</changelog>
  <changelog author="fvogt@suse.com" date="1446811200">- Latest version from git next branch</changelog>
  <changelog author="fvogt@suse.com" date="1446811201">- Add zero_filesize_segment.patch to fix testcase on s390x
- Fixes bnc#919680
- Patches already included mainline and now deleted:
  D libhugetlbfs-2.18-restrict-is-a-reserved-word.patch
  D fix_plt_extrasz_always_returning_0_on_ppc64le.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1489060800">- Update to 2.20
- Bug Fixes:
  * Fix keyword collisions and warnings from GCC 5
  * hugeadm output is parsed for default size in huge_page_setup_helper
  * Testsuite: fallocate tests</changelog>
  <changelog author="jengelh@inai.de" date="1492689600">- Update summary and descriptions a bit
- Move development manpages (*.3) to development subpackage
- Avoid ||/&amp;&amp; in %install because it can leave $? at non-zero
  (unlike if..fi), and %install is run with sh -x.</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Run `make install-perlmod` to install/satisfy Perl modules
  required by /usr/bin/cpupcstat, itself installed by just
  `make install` [boo#1057963]</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
  <changelog author="tabraham@suse.com" date="1698926400">- Add libhugetlbfs-increase-mount-buffer.patch for upstream issue gh#43
  (boo#1216576, bsc#1213639)</changelog>
  <changelog author="aschnell@suse.com" date="1700827200">- Add libhugetlbfs-noexecstack.patch (bsc#1213639)
- Increase buffer size in libhugetlbfs-increase-mount-buffer.patch
  as in the provided fix (bsc#1213639)</changelog>
</package>
<package pkgid="848647d3fccf472963f9a760bf901c91c40ede5f7210be8421aa1f345d7896c2" name="libhugetlbfs" arch="s390x">
  <version epoch="0" ver="2.20" rel="150000.3.8.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1424433600">- update to 2.18
  to solve build failures for ppc/ppc64.
  remove following patches now included in 2.18:
    libhugetlbfs-ppc64le.patch
    libhugetlbfs.ppc64le.step2.patch
    libhugetlbfs.ppc64le.step3.patch
    libhugetlbfs.ppc64le.step4.patch
- Add fix_plt_extrasz_always_returning_0_on_ppc64le.patch
  already upstream.</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1435060800">- Add libhugelbfs-2.18-restrict-is-a-reserved-word.patch which
  fixes compilation with GCC 5 (and C99/C11 in general).
  * Add libhugetlbfs-2.18-restrict-is-a-reserved-word.patch</changelog>
  <changelog author="fvogt@suse.com" date="1446811200">- Latest version from git next branch</changelog>
  <changelog author="fvogt@suse.com" date="1446811201">- Add zero_filesize_segment.patch to fix testcase on s390x
- Fixes bnc#919680
- Patches already included mainline and now deleted:
  D libhugetlbfs-2.18-restrict-is-a-reserved-word.patch
  D fix_plt_extrasz_always_returning_0_on_ppc64le.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1489060800">- Update to 2.20
- Bug Fixes:
  * Fix keyword collisions and warnings from GCC 5
  * hugeadm output is parsed for default size in huge_page_setup_helper
  * Testsuite: fallocate tests</changelog>
  <changelog author="jengelh@inai.de" date="1492689600">- Update summary and descriptions a bit
- Move development manpages (*.3) to development subpackage
- Avoid ||/&amp;&amp; in %install because it can leave $? at non-zero
  (unlike if..fi), and %install is run with sh -x.</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Run `make install-perlmod` to install/satisfy Perl modules
  required by /usr/bin/cpupcstat, itself installed by just
  `make install` [boo#1057963]</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
  <changelog author="tabraham@suse.com" date="1698926400">- Add libhugetlbfs-increase-mount-buffer.patch for upstream issue gh#43
  (boo#1216576, bsc#1213639)</changelog>
  <changelog author="aschnell@suse.com" date="1700827200">- Add libhugetlbfs-noexecstack.patch (bsc#1213639)
- Increase buffer size in libhugetlbfs-increase-mount-buffer.patch
  as in the provided fix (bsc#1213639)</changelog>
</package>
<package pkgid="99fa0a009a1e86201bb0650a2474fac206e67ac17baed7c8b9d6ccaf79806e02" name="libhugetlbfs" arch="src">
  <version epoch="0" ver="2.20" rel="150000.3.8.1"/>
  <changelog author="meissner@novell.com" date="1306670400">- Do not include the 268MB testcase /usr/lib/libhugetlbfs/tests/obj32/linkhuge_rw.</changelog>
  <changelog author="tabraham@novell.com" date="1318420800">- Update to version 2.12
  * libhugetlbfs usages can now be restricted to certain binary names
  * libhugetlbfs now supports static linking
  * hugeadm uses more human readable directory names for mount points
  * Fix segfault if specified user was not in passwd, failuer in
    getpwuid() is now checked
  * Added tests for static linking to testcase
  * Added missing tests to driver script</changelog>
  <changelog author="tabraham@novell.com" date="1334059200">- Update to version 2.13
  * hugeadm can now be used to control Transparent Huge Page tunables
  * New morecore mode to better support THP
  * Check permissions on hugetlbfs mount point before marking it as
    available
  * Fix shm tests to use random address instead of fixed, old address
    failed on ARM</changelog>
  <changelog author="adrian@suse.de" date="1342008000">- Add excludearch for arm due to lacking support</changelog>
  <changelog author="trenn@suse.de" date="1358942400">- Update to version 2.15
  Features:
  * Some System z functionality went into 2.15
  * Updated man pages
  * Added basic events for core_i7 to oprofile_map_events
  Fixes:
  * Disable Unable to verify address range warning when offset &lt; page_size
  * Remove sscanf in library setup to avoid heap allocation before _morecore
  override
  * Revert heap exhaustion patch
  * hugectl no longer clips LD_LIBRARY_PATH variable
  * Fix clean on failure code to avoid closing stdout</changelog>
  <changelog author="trenn@suse.de" date="1363003200">- Update to version 2.16:
  Features:
  * ARM Support
  * s390x Dynamic TASK_SIZE support
  Bug Fixes:
  * find_mounts() now properly NULL terminates mount point names</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1389441600">- Add support of ppc64le with 4 patches
  libhugetlbfs-ppc64le.patch
  libhugetlbfs.ppc64le.step2.patch
  libhugetlbfs.ppc64le.step3.patch
  libhugetlbfs.ppc64le.step4.patch</changelog>
  <changelog author="trenn@suse.de" date="1392033600">- There are no tests installed in s390(x) case, therefore there are no
  files in %{_libdir}/libhugetlbfs
  Remove the directory from the file list to fix package build for s390(x)</changelog>
  <changelog author="trenn@suse.de" date="1392120000">- Tests compile fine for s390(x), also include them in the package, the same
  way it is done for other archs as well.</changelog>
  <changelog author="dmueller@suse.com" date="1395835200">- update to 2.17:
  * PPC segement alignment restrictions can be disabled
  * Added Aarch64 support
  * Allow compiler overrides for 64 and 32 bit builds
  * hugeadm now handles /etc/mtab being a simlink properly
  * ppc64 fixes
- remove libhugetlbfs.ia64-libdir.patch:
  ia64 is no longer supported by openSUSE
- add ignore-perl-modules.diff: do not install perl modules, unused
  and are installed in the wrong place to be found anyway
- add ARM support
- add disable-rw-on-non-ldscripts.diff: Skip rw tests
- Do not install tests anymore</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1424433600">- update to 2.18
  to solve build failures for ppc/ppc64.
  remove following patches now included in 2.18:
    libhugetlbfs-ppc64le.patch
    libhugetlbfs.ppc64le.step2.patch
    libhugetlbfs.ppc64le.step3.patch
    libhugetlbfs.ppc64le.step4.patch
- Add fix_plt_extrasz_always_returning_0_on_ppc64le.patch
  already upstream.</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1435060800">- Add libhugelbfs-2.18-restrict-is-a-reserved-word.patch which
  fixes compilation with GCC 5 (and C99/C11 in general).
  * Add libhugetlbfs-2.18-restrict-is-a-reserved-word.patch</changelog>
  <changelog author="fvogt@suse.com" date="1446811200">- Latest version from git next branch</changelog>
  <changelog author="fvogt@suse.com" date="1446811201">- Add zero_filesize_segment.patch to fix testcase on s390x
- Fixes bnc#919680
- Patches already included mainline and now deleted:
  D libhugetlbfs-2.18-restrict-is-a-reserved-word.patch
  D fix_plt_extrasz_always_returning_0_on_ppc64le.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1489060800">- Update to 2.20
- Bug Fixes:
  * Fix keyword collisions and warnings from GCC 5
  * hugeadm output is parsed for default size in huge_page_setup_helper
  * Testsuite: fallocate tests</changelog>
  <changelog author="jengelh@inai.de" date="1492689600">- Update summary and descriptions a bit
- Move development manpages (*.3) to development subpackage
- Avoid ||/&amp;&amp; in %install because it can leave $? at non-zero
  (unlike if..fi), and %install is run with sh -x.</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Run `make install-perlmod` to install/satisfy Perl modules
  required by /usr/bin/cpupcstat, itself installed by just
  `make install` [boo#1057963]</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
  <changelog author="tabraham@suse.com" date="1698926400">- Add libhugetlbfs-increase-mount-buffer.patch for upstream issue gh#43
  (boo#1216576, bsc#1213639)</changelog>
  <changelog author="aschnell@suse.com" date="1700827200">- Add libhugetlbfs-noexecstack.patch (bsc#1213639)
- Increase buffer size in libhugetlbfs-increase-mount-buffer.patch
  as in the provided fix (bsc#1213639)</changelog>
</package>
<package pkgid="99f55413d4e19d3f9610c85e705c9c992523a75ab8d7c8f66c9d94a7b82cba8a" name="libhugetlbfs" arch="x86_64">
  <version epoch="0" ver="2.20" rel="150000.3.8.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1424433600">- update to 2.18
  to solve build failures for ppc/ppc64.
  remove following patches now included in 2.18:
    libhugetlbfs-ppc64le.patch
    libhugetlbfs.ppc64le.step2.patch
    libhugetlbfs.ppc64le.step3.patch
    libhugetlbfs.ppc64le.step4.patch
- Add fix_plt_extrasz_always_returning_0_on_ppc64le.patch
  already upstream.</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1435060800">- Add libhugelbfs-2.18-restrict-is-a-reserved-word.patch which
  fixes compilation with GCC 5 (and C99/C11 in general).
  * Add libhugetlbfs-2.18-restrict-is-a-reserved-word.patch</changelog>
  <changelog author="fvogt@suse.com" date="1446811200">- Latest version from git next branch</changelog>
  <changelog author="fvogt@suse.com" date="1446811201">- Add zero_filesize_segment.patch to fix testcase on s390x
- Fixes bnc#919680
- Patches already included mainline and now deleted:
  D libhugetlbfs-2.18-restrict-is-a-reserved-word.patch
  D fix_plt_extrasz_always_returning_0_on_ppc64le.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1489060800">- Update to 2.20
- Bug Fixes:
  * Fix keyword collisions and warnings from GCC 5
  * hugeadm output is parsed for default size in huge_page_setup_helper
  * Testsuite: fallocate tests</changelog>
  <changelog author="jengelh@inai.de" date="1492689600">- Update summary and descriptions a bit
- Move development manpages (*.3) to development subpackage
- Avoid ||/&amp;&amp; in %install because it can leave $? at non-zero
  (unlike if..fi), and %install is run with sh -x.</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Run `make install-perlmod` to install/satisfy Perl modules
  required by /usr/bin/cpupcstat, itself installed by just
  `make install` [boo#1057963]</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
  <changelog author="tabraham@suse.com" date="1698926400">- Add libhugetlbfs-increase-mount-buffer.patch for upstream issue gh#43
  (boo#1216576, bsc#1213639)</changelog>
  <changelog author="aschnell@suse.com" date="1700827200">- Add libhugetlbfs-noexecstack.patch (bsc#1213639)
- Increase buffer size in libhugetlbfs-increase-mount-buffer.patch
  as in the provided fix (bsc#1213639)</changelog>
</package>
<package pkgid="2699e198acfa40df132806292b93f155f25dfe4cb96a5842071db85a221a2ba8" name="libica" arch="src">
  <version epoch="0" ver="4.2.1" rel="150500.3.3.7"/>
  <changelog author="mpost@suse.com" date="1536667200">- Added "Obsoletes: libica2" to the libica-tools package to fix
  a problem with upgrading from SLES12 SP2 to either SLES12
  SP3/SP4, or SLES15. (bsc#1046435, bsc#1104638)</changelog>
  <changelog author="mpost@suse.com" date="1540209600">- Added "Obsoletes: libica-2_3_0" to the libica-tools package to
  fix a problem with upgrading from SLES12 SP2 to either SLES12
  SP3/SP4, or SLES15. (bsc#1112655)</changelog>
  <changelog author="mpost@suse.com" date="1542196800">- Upgraded to version 3.3.3 (Fate#325690)
  * v3.3.3
    [PATCH] Various bug fixes
  * v3.3.2
    [PATCH] Skip ECC tests if required HW is not available
    [PATCH] Update spec file
  * v3.3.1
    [PATCH] Fix configure.ac to honour CFLAGS
  * v3.3.0
    [FEATURE] Add CEX supported elliptic-curve crypto interfaces
    [FEATURE] Add SIMD supported multiple-precision arithmetic interfaces
    [FEATURE] Add interface to enable/disable SW fallbacks
    [FEATURE] Add 'make check' target, test-suite rework
  * v3.2.1
    [FEATURE] Use z14 PRNO-TRNG to seed SHA512-DRBG.
    [PATCH] Various bug fixes.
- Dropped obsolete patch increment-icastats-counter-for-aes-gcm.patch
- Removed COPYING from %files, since it is no longer in the tarball.
- Added Add-non-executable-gnu-stack-markings-in-the-assembl.patch
  (bsc#1103493).
- Made multiple changes to the spec file based on the output of
  spec-cleaner</changelog>
  <changelog author="mpost@suse.com" date="1542283200">- Upgraded to version 3.4.0 (Fate#325690)
  * v3.4.0
    [FEATURE] Add SHA-512/224 and SHA-512/256 support
- Dropped obsolete patch Add-non-executable-gnu-stack-markings-in-the-assembl.patch
- Made numerous updates to spec file based on spec-cleanup run.</changelog>
  <changelog author="mpluskal@suse.com" date="1563969600">- Run testsuite during build</changelog>
  <changelog author="mpost@suse.com" date="1567166400">- Upgraded to version 3.5.0 (Fate#327840)
  - [FEATURE] Add MSA9 CPACF support for ECDSA sign/verify
- Reworked how libica-tools loads and unloads kernel modules to
  avoid spurious error messages (bsc#1134004):
  * Converted the boot.z90crypt sysV init script to a systemd unit
  file.
  * Removed any references to insserv in the spec file.
  * Updated the z90crypt script itself to properly load and unload
  the kernel modules as they exist today.
  * Eliminated the obsolete libica-SuSE.tar.bz2 archive.
- Updated the README.SUSE file to reflect the change from sysV init
  style script to systemd.
- Made numerous changes to the spec file, based on the output from
  the spec-cleaner command.</changelog>
  <changelog author="mpost@suse.com" date="1571140800">- Upgraded to version 3.6.0 (jsc#SLE-7584)
  * [FEATURE] Add MSA9 CPACF support for Ed25519, Ed448, X25519 and X448</changelog>
  <changelog author="mpost@suse.com" date="1573732800">- Added libica-sles15sp2-x25519-x448-fix-handling-of-non-canonical-values.patch
  (bsc#1156768)</changelog>
  <changelog author="mpost@suse.com" date="1586347200">- Added the following patches for FIPS certification.
  * libica-sles15sp2-Fix-DES-and-TDES-key-length.patch
    (bsc#1166071) Although a DES key has only 56 effective bits,
    all 64 bits must be considered, because the parity bits are
    spread over all 8 bytes of the key.
  * libica-sles15sp2-FIPS-provide-output-iv-as-required-by-FIPS-tests.patch
    (bsc#1166210) FIPS tests require the output iv to be the iv
    resulting from decrypting the last block with a zero iv as input.
  * libica-sles15sp2-icainfo-bugfix-for-RSA-and-EC-related-info-for-softw.patch
    (bsc#1166224) The output from icainfo never shows 'yes' for
    RSA ME, RSA CRT, ECDH, ECDSA sign, ECDSA verify, and ECKGEN,
    due to the missing ICA_FLAG_SW flag in the icaList.</changelog>
  <changelog author="mpost@suse.com" date="1588852800">- Added the following patches for FIPS certification (bsc#1162533)
  * libica-sles15sp2-FIPS-introduce-HMAC-based-library-integrity-check.patch
  * libica-sles15sp2-FIPS-hmac-key.patch
- Added a BuildRequires for the fipscheck package.
- Made a couple of changes to the spec file based upon recommendations
  by spec-cleaner.</changelog>
  <changelog author="mpost@suse.com" date="1600171200">- Fix lack of SHA3 KATs in "make check" processing (bsc#1175277)
  * Added libica-sles15sp2-FIPS-add-SHA3-KATs-to-fips_powerup_tests.patch
  * Added libica-sles15sp2-FIPS-skip-SHA3-tests-if-running-on-hardware-without-.patch
- Fix FIPS hmac check (bsc#1175356).
  * Update FIPS support to upstream
  - Refresh libica-sles15sp2-FIPS-introduce-HMAC-based-library-integrity-check.patch
    from upstream.
  - Add libica-sles15sp2-Build-with-pthread-flag.patch
  - Add libica-sles15sp2-FIPS-HMAC-based-library-integrity-check-addon.patch
  - Add libica-sles15sp2-FIPS-HMAC-based-library-integrity-check-rename-variables.patch
  - Add libica-sles15sp2-FIPS-use-full-library-version-for-hmac-filename.patch
  * FIPS check should fail when hmac is missing
  - Add libica-sles15sp2-FIPS-fix-inconsistent-error-handling.patch
  - Create an hmac for the selftest
  - Check that selftest fails without a hmac
  - Hash libica.so.3 rather than libica.so.3.6.0
  * Fix hmac key format. It should be hexadecimal, not ASCII
  - Refresh libica-sles15sp2-FIPS-hmac-key.patch
- Fix Some internal variables used to store sensitive information
  (keys) were not zeroized before returning to the calling application.
  (bsc#1175357)
  * Added libica-sles15sp2-Zeroize-local-variables.patch
- Updated libica-rpmlintrc to eliminate the warning about the HMAC file
  being a hidden file. It is supposed to be hidden.</changelog>
  <changelog author="mpost@suse.com" date="1600430400">- Upgraded to version 3.7.0 (jsc#SLE-13708)
  * Version 3.7.0
  - [FEATURE] FIPS: Add HMAC based library integrity check
  - [PATCH] icainfo: bugfix for RSA and EC related info for software column.
  - [PATCH] FIPS: provide output iv in cbc-cs decrypt as required by FIPS tests
  - [PATCH] FIPS: Fix DES and TDES key length
  - [PATCH] icastats: Fix stats counter format
  * Version 3.6.1
  - [PATCH] Fix x25519 and x448 handling of non-canonical values
- Removed the following obsolete patches
  * libica-sles15sp2-x25519-x448-fix-handling-of-non-canonical-values.patch
  * libica-sles15sp2-Fix-DES-and-TDES-key-length.patch
  * libica-sles15sp2-FIPS-provide-output-iv-as-required-by-FIPS-tests.patch
  * libica-sles15sp2-icainfo-bugfix-for-RSA-and-EC-related-info-for-softw.patch
  * libica-sles15sp2-Build-with-pthread-flag.patch
  * libica-sles15sp2-FIPS-introduce-HMAC-based-library-integrity-check.patch
  * libica-sles15sp2-FIPS-HMAC-based-library-integrity-check-addon.patch
  * libica-sles15sp2-FIPS-HMAC-based-library-integrity-check-rename-variables.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1623067200">- Update to version 3.8.0 (jsc#SLE-18334)
  - [FEATURE] provide libica-cex module to satisfy special security requirements
  - [FEATURE] FIPS: enforce the HMAC check
- Remove upstreamed patches:
  - libica-sles15sp2-FIPS-add-SHA3-KATs-to-fips_powerup_tests.patch
  - libica-sles15sp2-FIPS-skip-SHA3-tests-if-running-on-hardware-without-.patch
  - libica-sles15sp2-Zeroize-local-variables.patch
- Remove patches obsoleted by upstrea developent:
  * FIPS: Find libica from phdrs.
  - libica-sles15sp2-FIPS-use-full-library-version-for-hmac-filename.patch
  * FIPS: enforce the hmac check
  - libica-sles15sp2-FIPS-fix-inconsistent-error-handling.patch
- Fix up tests and hmac generation
  + libica-FIPS-make-it-possible-to-specify-fipshmac-binary.patch
- Remove obsolete attributes from filelists</changelog>
  <changelog author="mpost@suse.com" date="1634644800">- Upgrade to version 3.9.0 (jsc#SLE-18454, jsc#SLE-18564)
  - [FEATURE] Add support for OpenSSL 3.0
  - [FEATURE] icainfo: new parm -c to display available EC curves
- Replaced the obsolete PreReq: %fillup_prereq
  with                  Requires(post): %fillup_prereq
  in the spec file.</changelog>
  <changelog author="mpost@suse.com" date="1662984000">- Upgraded to version 4.0.3 (jsc#PED-581, jsc#PED-621, jsc#PED-629)
  v4.0.3
  - [PATCH] Reduce the number of open file descriptors
  - [PATCH] Various bug fixes
  v4.0.2
  - [PATCH] Various bug fixes
  v4.0.1
  - [PATCH] Various bug fixes
  - [PATCH] Compute HMAC from installed library
  v4.0.0
  - [UPDATE] NO_SW_FALLBACKS is now the default for libica.so
    [UPDATE] Removed deprecated API functions including tests
    [UPDATE] Introduced 'const' for some API function parameters
    [FEATURE] icastats: new parm -k to display detailed counters
- Replaced libica-sles15sp2-FIPS-hmac-key.patch with an updated
  version named libica-sles15sp5-FIPS-hmac-key.patch.
- Updated the libica-rpmlintrc file to suppress warnings about the
  libica-cex hmac files being hidden.
- Updated the spec file to properly both obsolete and provide two
  older versions of the package.</changelog>
  <changelog author="mpost@suse.com" date="1665489600">- Upgrade to version 4.1.1 (jsc#PED-581, bsc#1202365).
  v4.1.1
  - [PATCH] Fix aes-xts multi-part operations
    [PATCH] Fix make dist
  v4.1.0
  - [FEATURE] FIPS: make libica FIPS 140-3 compliant
    [FEATURE] New API function ica_ecdsa_sign_ex()
    [FEATURE] New icainfo output option -r
  - [PATCH] Various bug fixes
- Removed the following obsolete files:
  baselibs.conf
  icaioctl.h</changelog>
  <changelog author="meissner@suse.com" date="1673870400">- Upgrade to version 4.2.0 (jsc#PED-581, bsc#1202365).
  - [FEATURE] Display build info via icainfo -v
  - [FEATURE] New API function ica_get_build_version()
  - [FEATURE] Display fips indication via icainfo -f
  - [FEATURE] New API function ica_get_fips_indicator()
  - [FEATURE] New API function ica_aes_gcm_initialize_fips()
  - [FEATURE] New API function ica_aes_gcm_kma_get_iv()
  - [FEATURE] New API function ica_get_msa_level()
  - [PATCH] icainfo: check for malloc error when getting functionlist</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1676635200">- Upgrade to version 4.2.1 (jsc#PED-2872)
  - [PATCH] fix regression opening shared memory</changelog>
  <changelog author="otto.hollmann@suse.com" date="1682424000">- Add multibuild flavor to provide library compiled against openssl-3
  [bsc#1207472]</changelog>
  <changelog author="pmonreal@suse.com" date="1687521600">- Rename the hmac files for the openssl3 flavor [bsc#1207472]
  * Add libica-openssl3.patch
  * Rebase libica-sles15sp5-FIPS-hmac-key.patch</changelog>
</package>
<package pkgid="b57102b916aa19fcb86c9684d2d789e4eeef9b26334cc40683f66a0ca547725c" name="libica-tools" arch="s390x">
  <version epoch="0" ver="4.2.1" rel="150500.3.3.7"/>
  <changelog author="mpost@suse.com" date="1536667200">- Added "Obsoletes: libica2" to the libica-tools package to fix
  a problem with upgrading from SLES12 SP2 to either SLES12
  SP3/SP4, or SLES15. (bsc#1046435, bsc#1104638)</changelog>
  <changelog author="mpost@suse.com" date="1540209600">- Added "Obsoletes: libica-2_3_0" to the libica-tools package to
  fix a problem with upgrading from SLES12 SP2 to either SLES12
  SP3/SP4, or SLES15. (bsc#1112655)</changelog>
  <changelog author="mpost@suse.com" date="1542196800">- Upgraded to version 3.3.3 (Fate#325690)
  * v3.3.3
    [PATCH] Various bug fixes
  * v3.3.2
    [PATCH] Skip ECC tests if required HW is not available
    [PATCH] Update spec file
  * v3.3.1
    [PATCH] Fix configure.ac to honour CFLAGS
  * v3.3.0
    [FEATURE] Add CEX supported elliptic-curve crypto interfaces
    [FEATURE] Add SIMD supported multiple-precision arithmetic interfaces
    [FEATURE] Add interface to enable/disable SW fallbacks
    [FEATURE] Add 'make check' target, test-suite rework
  * v3.2.1
    [FEATURE] Use z14 PRNO-TRNG to seed SHA512-DRBG.
    [PATCH] Various bug fixes.
- Dropped obsolete patch increment-icastats-counter-for-aes-gcm.patch
- Removed COPYING from %files, since it is no longer in the tarball.
- Added Add-non-executable-gnu-stack-markings-in-the-assembl.patch
  (bsc#1103493).
- Made multiple changes to the spec file based on the output of
  spec-cleaner</changelog>
  <changelog author="mpost@suse.com" date="1542283200">- Upgraded to version 3.4.0 (Fate#325690)
  * v3.4.0
    [FEATURE] Add SHA-512/224 and SHA-512/256 support
- Dropped obsolete patch Add-non-executable-gnu-stack-markings-in-the-assembl.patch
- Made numerous updates to spec file based on spec-cleanup run.</changelog>
  <changelog author="mpluskal@suse.com" date="1563969600">- Run testsuite during build</changelog>
  <changelog author="mpost@suse.com" date="1567166400">- Upgraded to version 3.5.0 (Fate#327840)
  - [FEATURE] Add MSA9 CPACF support for ECDSA sign/verify
- Reworked how libica-tools loads and unloads kernel modules to
  avoid spurious error messages (bsc#1134004):
  * Converted the boot.z90crypt sysV init script to a systemd unit
  file.
  * Removed any references to insserv in the spec file.
  * Updated the z90crypt script itself to properly load and unload
  the kernel modules as they exist today.
  * Eliminated the obsolete libica-SuSE.tar.bz2 archive.
- Updated the README.SUSE file to reflect the change from sysV init
  style script to systemd.
- Made numerous changes to the spec file, based on the output from
  the spec-cleaner command.</changelog>
  <changelog author="mpost@suse.com" date="1571140800">- Upgraded to version 3.6.0 (jsc#SLE-7584)
  * [FEATURE] Add MSA9 CPACF support for Ed25519, Ed448, X25519 and X448</changelog>
  <changelog author="mpost@suse.com" date="1573732800">- Added libica-sles15sp2-x25519-x448-fix-handling-of-non-canonical-values.patch
  (bsc#1156768)</changelog>
  <changelog author="mpost@suse.com" date="1586347200">- Added the following patches for FIPS certification.
  * libica-sles15sp2-Fix-DES-and-TDES-key-length.patch
    (bsc#1166071) Although a DES key has only 56 effective bits,
    all 64 bits must be considered, because the parity bits are
    spread over all 8 bytes of the key.
  * libica-sles15sp2-FIPS-provide-output-iv-as-required-by-FIPS-tests.patch
    (bsc#1166210) FIPS tests require the output iv to be the iv
    resulting from decrypting the last block with a zero iv as input.
  * libica-sles15sp2-icainfo-bugfix-for-RSA-and-EC-related-info-for-softw.patch
    (bsc#1166224) The output from icainfo never shows 'yes' for
    RSA ME, RSA CRT, ECDH, ECDSA sign, ECDSA verify, and ECKGEN,
    due to the missing ICA_FLAG_SW flag in the icaList.</changelog>
  <changelog author="mpost@suse.com" date="1588852800">- Added the following patches for FIPS certification (bsc#1162533)
  * libica-sles15sp2-FIPS-introduce-HMAC-based-library-integrity-check.patch
  * libica-sles15sp2-FIPS-hmac-key.patch
- Added a BuildRequires for the fipscheck package.
- Made a couple of changes to the spec file based upon recommendations
  by spec-cleaner.</changelog>
  <changelog author="mpost@suse.com" date="1600171200">- Fix lack of SHA3 KATs in "make check" processing (bsc#1175277)
  * Added libica-sles15sp2-FIPS-add-SHA3-KATs-to-fips_powerup_tests.patch
  * Added libica-sles15sp2-FIPS-skip-SHA3-tests-if-running-on-hardware-without-.patch
- Fix FIPS hmac check (bsc#1175356).
  * Update FIPS support to upstream
  - Refresh libica-sles15sp2-FIPS-introduce-HMAC-based-library-integrity-check.patch
    from upstream.
  - Add libica-sles15sp2-Build-with-pthread-flag.patch
  - Add libica-sles15sp2-FIPS-HMAC-based-library-integrity-check-addon.patch
  - Add libica-sles15sp2-FIPS-HMAC-based-library-integrity-check-rename-variables.patch
  - Add libica-sles15sp2-FIPS-use-full-library-version-for-hmac-filename.patch
  * FIPS check should fail when hmac is missing
  - Add libica-sles15sp2-FIPS-fix-inconsistent-error-handling.patch
  - Create an hmac for the selftest
  - Check that selftest fails without a hmac
  - Hash libica.so.3 rather than libica.so.3.6.0
  * Fix hmac key format. It should be hexadecimal, not ASCII
  - Refresh libica-sles15sp2-FIPS-hmac-key.patch
- Fix Some internal variables used to store sensitive information
  (keys) were not zeroized before returning to the calling application.
  (bsc#1175357)
  * Added libica-sles15sp2-Zeroize-local-variables.patch
- Updated libica-rpmlintrc to eliminate the warning about the HMAC file
  being a hidden file. It is supposed to be hidden.</changelog>
  <changelog author="mpost@suse.com" date="1600430400">- Upgraded to version 3.7.0 (jsc#SLE-13708)
  * Version 3.7.0
  - [FEATURE] FIPS: Add HMAC based library integrity check
  - [PATCH] icainfo: bugfix for RSA and EC related info for software column.
  - [PATCH] FIPS: provide output iv in cbc-cs decrypt as required by FIPS tests
  - [PATCH] FIPS: Fix DES and TDES key length
  - [PATCH] icastats: Fix stats counter format
  * Version 3.6.1
  - [PATCH] Fix x25519 and x448 handling of non-canonical values
- Removed the following obsolete patches
  * libica-sles15sp2-x25519-x448-fix-handling-of-non-canonical-values.patch
  * libica-sles15sp2-Fix-DES-and-TDES-key-length.patch
  * libica-sles15sp2-FIPS-provide-output-iv-as-required-by-FIPS-tests.patch
  * libica-sles15sp2-icainfo-bugfix-for-RSA-and-EC-related-info-for-softw.patch
  * libica-sles15sp2-Build-with-pthread-flag.patch
  * libica-sles15sp2-FIPS-introduce-HMAC-based-library-integrity-check.patch
  * libica-sles15sp2-FIPS-HMAC-based-library-integrity-check-addon.patch
  * libica-sles15sp2-FIPS-HMAC-based-library-integrity-check-rename-variables.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1623067200">- Update to version 3.8.0 (jsc#SLE-18334)
  - [FEATURE] provide libica-cex module to satisfy special security requirements
  - [FEATURE] FIPS: enforce the HMAC check
- Remove upstreamed patches:
  - libica-sles15sp2-FIPS-add-SHA3-KATs-to-fips_powerup_tests.patch
  - libica-sles15sp2-FIPS-skip-SHA3-tests-if-running-on-hardware-without-.patch
  - libica-sles15sp2-Zeroize-local-variables.patch
- Remove patches obsoleted by upstrea developent:
  * FIPS: Find libica from phdrs.
  - libica-sles15sp2-FIPS-use-full-library-version-for-hmac-filename.patch
  * FIPS: enforce the hmac check
  - libica-sles15sp2-FIPS-fix-inconsistent-error-handling.patch
- Fix up tests and hmac generation
  + libica-FIPS-make-it-possible-to-specify-fipshmac-binary.patch
- Remove obsolete attributes from filelists</changelog>
  <changelog author="mpost@suse.com" date="1634644800">- Upgrade to version 3.9.0 (jsc#SLE-18454, jsc#SLE-18564)
  - [FEATURE] Add support for OpenSSL 3.0
  - [FEATURE] icainfo: new parm -c to display available EC curves
- Replaced the obsolete PreReq: %fillup_prereq
  with                  Requires(post): %fillup_prereq
  in the spec file.</changelog>
  <changelog author="mpost@suse.com" date="1662984000">- Upgraded to version 4.0.3 (jsc#PED-581, jsc#PED-621, jsc#PED-629)
  v4.0.3
  - [PATCH] Reduce the number of open file descriptors
  - [PATCH] Various bug fixes
  v4.0.2
  - [PATCH] Various bug fixes
  v4.0.1
  - [PATCH] Various bug fixes
  - [PATCH] Compute HMAC from installed library
  v4.0.0
  - [UPDATE] NO_SW_FALLBACKS is now the default for libica.so
    [UPDATE] Removed deprecated API functions including tests
    [UPDATE] Introduced 'const' for some API function parameters
    [FEATURE] icastats: new parm -k to display detailed counters
- Replaced libica-sles15sp2-FIPS-hmac-key.patch with an updated
  version named libica-sles15sp5-FIPS-hmac-key.patch.
- Updated the libica-rpmlintrc file to suppress warnings about the
  libica-cex hmac files being hidden.
- Updated the spec file to properly both obsolete and provide two
  older versions of the package.</changelog>
  <changelog author="mpost@suse.com" date="1665489600">- Upgrade to version 4.1.1 (jsc#PED-581, bsc#1202365).
  v4.1.1
  - [PATCH] Fix aes-xts multi-part operations
    [PATCH] Fix make dist
  v4.1.0
  - [FEATURE] FIPS: make libica FIPS 140-3 compliant
    [FEATURE] New API function ica_ecdsa_sign_ex()
    [FEATURE] New icainfo output option -r
  - [PATCH] Various bug fixes
- Removed the following obsolete files:
  baselibs.conf
  icaioctl.h</changelog>
  <changelog author="meissner@suse.com" date="1673870400">- Upgrade to version 4.2.0 (jsc#PED-581, bsc#1202365).
  - [FEATURE] Display build info via icainfo -v
  - [FEATURE] New API function ica_get_build_version()
  - [FEATURE] Display fips indication via icainfo -f
  - [FEATURE] New API function ica_get_fips_indicator()
  - [FEATURE] New API function ica_aes_gcm_initialize_fips()
  - [FEATURE] New API function ica_aes_gcm_kma_get_iv()
  - [FEATURE] New API function ica_get_msa_level()
  - [PATCH] icainfo: check for malloc error when getting functionlist</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1676635200">- Upgrade to version 4.2.1 (jsc#PED-2872)
  - [PATCH] fix regression opening shared memory</changelog>
  <changelog author="otto.hollmann@suse.com" date="1682424000">- Add multibuild flavor to provide library compiled against openssl-3
  [bsc#1207472]</changelog>
  <changelog author="pmonreal@suse.com" date="1687521600">- Rename the hmac files for the openssl3 flavor [bsc#1207472]
  * Add libica-openssl3.patch
  * Rebase libica-sles15sp5-FIPS-hmac-key.patch</changelog>
</package>
<package pkgid="bf3f17b7bdb346be90cdbe3b4420265417578f4f5c775963df5ce4ed77f2c2cc" name="libica4" arch="s390x">
  <version epoch="0" ver="4.2.1" rel="150500.3.3.7"/>
  <changelog author="mpost@suse.com" date="1536667200">- Added "Obsoletes: libica2" to the libica-tools package to fix
  a problem with upgrading from SLES12 SP2 to either SLES12
  SP3/SP4, or SLES15. (bsc#1046435, bsc#1104638)</changelog>
  <changelog author="mpost@suse.com" date="1540209600">- Added "Obsoletes: libica-2_3_0" to the libica-tools package to
  fix a problem with upgrading from SLES12 SP2 to either SLES12
  SP3/SP4, or SLES15. (bsc#1112655)</changelog>
  <changelog author="mpost@suse.com" date="1542196800">- Upgraded to version 3.3.3 (Fate#325690)
  * v3.3.3
    [PATCH] Various bug fixes
  * v3.3.2
    [PATCH] Skip ECC tests if required HW is not available
    [PATCH] Update spec file
  * v3.3.1
    [PATCH] Fix configure.ac to honour CFLAGS
  * v3.3.0
    [FEATURE] Add CEX supported elliptic-curve crypto interfaces
    [FEATURE] Add SIMD supported multiple-precision arithmetic interfaces
    [FEATURE] Add interface to enable/disable SW fallbacks
    [FEATURE] Add 'make check' target, test-suite rework
  * v3.2.1
    [FEATURE] Use z14 PRNO-TRNG to seed SHA512-DRBG.
    [PATCH] Various bug fixes.
- Dropped obsolete patch increment-icastats-counter-for-aes-gcm.patch
- Removed COPYING from %files, since it is no longer in the tarball.
- Added Add-non-executable-gnu-stack-markings-in-the-assembl.patch
  (bsc#1103493).
- Made multiple changes to the spec file based on the output of
  spec-cleaner</changelog>
  <changelog author="mpost@suse.com" date="1542283200">- Upgraded to version 3.4.0 (Fate#325690)
  * v3.4.0
    [FEATURE] Add SHA-512/224 and SHA-512/256 support
- Dropped obsolete patch Add-non-executable-gnu-stack-markings-in-the-assembl.patch
- Made numerous updates to spec file based on spec-cleanup run.</changelog>
  <changelog author="mpluskal@suse.com" date="1563969600">- Run testsuite during build</changelog>
  <changelog author="mpost@suse.com" date="1567166400">- Upgraded to version 3.5.0 (Fate#327840)
  - [FEATURE] Add MSA9 CPACF support for ECDSA sign/verify
- Reworked how libica-tools loads and unloads kernel modules to
  avoid spurious error messages (bsc#1134004):
  * Converted the boot.z90crypt sysV init script to a systemd unit
  file.
  * Removed any references to insserv in the spec file.
  * Updated the z90crypt script itself to properly load and unload
  the kernel modules as they exist today.
  * Eliminated the obsolete libica-SuSE.tar.bz2 archive.
- Updated the README.SUSE file to reflect the change from sysV init
  style script to systemd.
- Made numerous changes to the spec file, based on the output from
  the spec-cleaner command.</changelog>
  <changelog author="mpost@suse.com" date="1571140800">- Upgraded to version 3.6.0 (jsc#SLE-7584)
  * [FEATURE] Add MSA9 CPACF support for Ed25519, Ed448, X25519 and X448</changelog>
  <changelog author="mpost@suse.com" date="1573732800">- Added libica-sles15sp2-x25519-x448-fix-handling-of-non-canonical-values.patch
  (bsc#1156768)</changelog>
  <changelog author="mpost@suse.com" date="1586347200">- Added the following patches for FIPS certification.
  * libica-sles15sp2-Fix-DES-and-TDES-key-length.patch
    (bsc#1166071) Although a DES key has only 56 effective bits,
    all 64 bits must be considered, because the parity bits are
    spread over all 8 bytes of the key.
  * libica-sles15sp2-FIPS-provide-output-iv-as-required-by-FIPS-tests.patch
    (bsc#1166210) FIPS tests require the output iv to be the iv
    resulting from decrypting the last block with a zero iv as input.
  * libica-sles15sp2-icainfo-bugfix-for-RSA-and-EC-related-info-for-softw.patch
    (bsc#1166224) The output from icainfo never shows 'yes' for
    RSA ME, RSA CRT, ECDH, ECDSA sign, ECDSA verify, and ECKGEN,
    due to the missing ICA_FLAG_SW flag in the icaList.</changelog>
  <changelog author="mpost@suse.com" date="1588852800">- Added the following patches for FIPS certification (bsc#1162533)
  * libica-sles15sp2-FIPS-introduce-HMAC-based-library-integrity-check.patch
  * libica-sles15sp2-FIPS-hmac-key.patch
- Added a BuildRequires for the fipscheck package.
- Made a couple of changes to the spec file based upon recommendations
  by spec-cleaner.</changelog>
  <changelog author="mpost@suse.com" date="1600171200">- Fix lack of SHA3 KATs in "make check" processing (bsc#1175277)
  * Added libica-sles15sp2-FIPS-add-SHA3-KATs-to-fips_powerup_tests.patch
  * Added libica-sles15sp2-FIPS-skip-SHA3-tests-if-running-on-hardware-without-.patch
- Fix FIPS hmac check (bsc#1175356).
  * Update FIPS support to upstream
  - Refresh libica-sles15sp2-FIPS-introduce-HMAC-based-library-integrity-check.patch
    from upstream.
  - Add libica-sles15sp2-Build-with-pthread-flag.patch
  - Add libica-sles15sp2-FIPS-HMAC-based-library-integrity-check-addon.patch
  - Add libica-sles15sp2-FIPS-HMAC-based-library-integrity-check-rename-variables.patch
  - Add libica-sles15sp2-FIPS-use-full-library-version-for-hmac-filename.patch
  * FIPS check should fail when hmac is missing
  - Add libica-sles15sp2-FIPS-fix-inconsistent-error-handling.patch
  - Create an hmac for the selftest
  - Check that selftest fails without a hmac
  - Hash libica.so.3 rather than libica.so.3.6.0
  * Fix hmac key format. It should be hexadecimal, not ASCII
  - Refresh libica-sles15sp2-FIPS-hmac-key.patch
- Fix Some internal variables used to store sensitive information
  (keys) were not zeroized before returning to the calling application.
  (bsc#1175357)
  * Added libica-sles15sp2-Zeroize-local-variables.patch
- Updated libica-rpmlintrc to eliminate the warning about the HMAC file
  being a hidden file. It is supposed to be hidden.</changelog>
  <changelog author="mpost@suse.com" date="1600430400">- Upgraded to version 3.7.0 (jsc#SLE-13708)
  * Version 3.7.0
  - [FEATURE] FIPS: Add HMAC based library integrity check
  - [PATCH] icainfo: bugfix for RSA and EC related info for software column.
  - [PATCH] FIPS: provide output iv in cbc-cs decrypt as required by FIPS tests
  - [PATCH] FIPS: Fix DES and TDES key length
  - [PATCH] icastats: Fix stats counter format
  * Version 3.6.1
  - [PATCH] Fix x25519 and x448 handling of non-canonical values
- Removed the following obsolete patches
  * libica-sles15sp2-x25519-x448-fix-handling-of-non-canonical-values.patch
  * libica-sles15sp2-Fix-DES-and-TDES-key-length.patch
  * libica-sles15sp2-FIPS-provide-output-iv-as-required-by-FIPS-tests.patch
  * libica-sles15sp2-icainfo-bugfix-for-RSA-and-EC-related-info-for-softw.patch
  * libica-sles15sp2-Build-with-pthread-flag.patch
  * libica-sles15sp2-FIPS-introduce-HMAC-based-library-integrity-check.patch
  * libica-sles15sp2-FIPS-HMAC-based-library-integrity-check-addon.patch
  * libica-sles15sp2-FIPS-HMAC-based-library-integrity-check-rename-variables.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1623067200">- Update to version 3.8.0 (jsc#SLE-18334)
  - [FEATURE] provide libica-cex module to satisfy special security requirements
  - [FEATURE] FIPS: enforce the HMAC check
- Remove upstreamed patches:
  - libica-sles15sp2-FIPS-add-SHA3-KATs-to-fips_powerup_tests.patch
  - libica-sles15sp2-FIPS-skip-SHA3-tests-if-running-on-hardware-without-.patch
  - libica-sles15sp2-Zeroize-local-variables.patch
- Remove patches obsoleted by upstrea developent:
  * FIPS: Find libica from phdrs.
  - libica-sles15sp2-FIPS-use-full-library-version-for-hmac-filename.patch
  * FIPS: enforce the hmac check
  - libica-sles15sp2-FIPS-fix-inconsistent-error-handling.patch
- Fix up tests and hmac generation
  + libica-FIPS-make-it-possible-to-specify-fipshmac-binary.patch
- Remove obsolete attributes from filelists</changelog>
  <changelog author="mpost@suse.com" date="1634644800">- Upgrade to version 3.9.0 (jsc#SLE-18454, jsc#SLE-18564)
  - [FEATURE] Add support for OpenSSL 3.0
  - [FEATURE] icainfo: new parm -c to display available EC curves
- Replaced the obsolete PreReq: %fillup_prereq
  with                  Requires(post): %fillup_prereq
  in the spec file.</changelog>
  <changelog author="mpost@suse.com" date="1662984000">- Upgraded to version 4.0.3 (jsc#PED-581, jsc#PED-621, jsc#PED-629)
  v4.0.3
  - [PATCH] Reduce the number of open file descriptors
  - [PATCH] Various bug fixes
  v4.0.2
  - [PATCH] Various bug fixes
  v4.0.1
  - [PATCH] Various bug fixes
  - [PATCH] Compute HMAC from installed library
  v4.0.0
  - [UPDATE] NO_SW_FALLBACKS is now the default for libica.so
    [UPDATE] Removed deprecated API functions including tests
    [UPDATE] Introduced 'const' for some API function parameters
    [FEATURE] icastats: new parm -k to display detailed counters
- Replaced libica-sles15sp2-FIPS-hmac-key.patch with an updated
  version named libica-sles15sp5-FIPS-hmac-key.patch.
- Updated the libica-rpmlintrc file to suppress warnings about the
  libica-cex hmac files being hidden.
- Updated the spec file to properly both obsolete and provide two
  older versions of the package.</changelog>
  <changelog author="mpost@suse.com" date="1665489600">- Upgrade to version 4.1.1 (jsc#PED-581, bsc#1202365).
  v4.1.1
  - [PATCH] Fix aes-xts multi-part operations
    [PATCH] Fix make dist
  v4.1.0
  - [FEATURE] FIPS: make libica FIPS 140-3 compliant
    [FEATURE] New API function ica_ecdsa_sign_ex()
    [FEATURE] New icainfo output option -r
  - [PATCH] Various bug fixes
- Removed the following obsolete files:
  baselibs.conf
  icaioctl.h</changelog>
  <changelog author="meissner@suse.com" date="1673870400">- Upgrade to version 4.2.0 (jsc#PED-581, bsc#1202365).
  - [FEATURE] Display build info via icainfo -v
  - [FEATURE] New API function ica_get_build_version()
  - [FEATURE] Display fips indication via icainfo -f
  - [FEATURE] New API function ica_get_fips_indicator()
  - [FEATURE] New API function ica_aes_gcm_initialize_fips()
  - [FEATURE] New API function ica_aes_gcm_kma_get_iv()
  - [FEATURE] New API function ica_get_msa_level()
  - [PATCH] icainfo: check for malloc error when getting functionlist</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1676635200">- Upgrade to version 4.2.1 (jsc#PED-2872)
  - [PATCH] fix regression opening shared memory</changelog>
  <changelog author="otto.hollmann@suse.com" date="1682424000">- Add multibuild flavor to provide library compiled against openssl-3
  [bsc#1207472]</changelog>
  <changelog author="pmonreal@suse.com" date="1687521600">- Rename the hmac files for the openssl3 flavor [bsc#1207472]
  * Add libica-openssl3.patch
  * Rebase libica-sles15sp5-FIPS-hmac-key.patch</changelog>
</package>
<package pkgid="0df11cd37df11130995924b90baf37b183c8b97c47bf7b400034003296f49f33" name="libindicator" arch="src">
  <version epoch="0" ver="16.10.0+bzr20171205" rel="150200.3.2.1"/>
  <changelog author="p.drouand@gmail.com" date="1361966400">- Initial release</changelog>
  <changelog author="johann.luce@wanadoo.fr" date="1379678400">- Fix System/Libraries group for lib</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1394193600">- Update to 12.10.2+14.04.20140304
  * Latest release available in Ubuntu archives - no changelog provided
- Enable build of GTK-3.0 subpackage
- Added dont-build-debug-tools.patch, tools are used only for tests
  &amp; developing indicators. Also, it pulls libido requirement, which
  does not exists on openSUSE</changelog>
  <changelog author="p.drouand@gmail.com" date="1414324800">- Update to version 12.10.2+14.04.20141007.1
  + No changelog available
- Use download Url as source</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1430827200">- Update to 12.10.2+bzr20140922:
  + No changes.
- Spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445169600">- fix-compilation.patch: fix "cannot find -lglib-2.0-lm"
  compilation error.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1451131200">- Update to 12.10.2+bzr20140922:
  * Add -lm via LDADD to resolve FTBFS in Ubuntu 16.04.
- Remove fix-compilation.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- Update to version 16.10.0+bzr20171205:
  + Fix build with GNOME 3.28.
- Rebase dont-build-debug-tools.patch.
- Add pkgconfig(libido3-0.1) BuildRequires: new dependency.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520856000">- Replace dont-build-debug-tools.patch with
  libindicator-disable-werror.patch: no need to avoid Ido.</changelog>
  <changelog author="dimstar@opensuse.org" date="1571227200">- Inject -Wno-error into CFLAGS. It's kinda ridiculous for code
  that is not maintained upstream to pass -Werror by default and
  then not catching up. So for now we accept warnings.</changelog>
  <changelog author="yfjiang@suse.com" date="1584705600">- A shared systemd target for user session is shipped with the
  source, pack it up properly.
  https://bazaar.launchpad.net/~indicator-applet-developers/libindicator/trunk.16.10/revision/534</changelog>
</package>
<package pkgid="404027fbf567d317944e5ab88178dbf9fb11335565bde8ac4e0c6692c0854826" name="libindicator3-7" arch="aarch64">
  <version epoch="0" ver="16.10.0+bzr20171205" rel="150200.3.2.1"/>
  <changelog author="johann.luce@wanadoo.fr" date="1379678400">- Fix System/Libraries group for lib</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1394193600">- Update to 12.10.2+14.04.20140304
  * Latest release available in Ubuntu archives - no changelog provided
- Enable build of GTK-3.0 subpackage
- Added dont-build-debug-tools.patch, tools are used only for tests
  &amp; developing indicators. Also, it pulls libido requirement, which
  does not exists on openSUSE</changelog>
  <changelog author="p.drouand@gmail.com" date="1414324800">- Update to version 12.10.2+14.04.20141007.1
  + No changelog available
- Use download Url as source</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1430827200">- Update to 12.10.2+bzr20140922:
  + No changes.
- Spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445169600">- fix-compilation.patch: fix "cannot find -lglib-2.0-lm"
  compilation error.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1451131200">- Update to 12.10.2+bzr20140922:
  * Add -lm via LDADD to resolve FTBFS in Ubuntu 16.04.
- Remove fix-compilation.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- Update to version 16.10.0+bzr20171205:
  + Fix build with GNOME 3.28.
- Rebase dont-build-debug-tools.patch.
- Add pkgconfig(libido3-0.1) BuildRequires: new dependency.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520856000">- Replace dont-build-debug-tools.patch with
  libindicator-disable-werror.patch: no need to avoid Ido.</changelog>
  <changelog author="dimstar@opensuse.org" date="1571227200">- Inject -Wno-error into CFLAGS. It's kinda ridiculous for code
  that is not maintained upstream to pass -Werror by default and
  then not catching up. So for now we accept warnings.</changelog>
  <changelog author="yfjiang@suse.com" date="1584705600">- A shared systemd target for user session is shipped with the
  source, pack it up properly.
  https://bazaar.launchpad.net/~indicator-applet-developers/libindicator/trunk.16.10/revision/534</changelog>
</package>
<package pkgid="b90f01575fbead0622d1a1ea60a04c41e8b7c8efbd0143327e9713a301510257" name="libindicator3-7" arch="s390x">
  <version epoch="0" ver="16.10.0+bzr20171205" rel="150200.3.2.1"/>
  <changelog author="johann.luce@wanadoo.fr" date="1379678400">- Fix System/Libraries group for lib</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1394193600">- Update to 12.10.2+14.04.20140304
  * Latest release available in Ubuntu archives - no changelog provided
- Enable build of GTK-3.0 subpackage
- Added dont-build-debug-tools.patch, tools are used only for tests
  &amp; developing indicators. Also, it pulls libido requirement, which
  does not exists on openSUSE</changelog>
  <changelog author="p.drouand@gmail.com" date="1414324800">- Update to version 12.10.2+14.04.20141007.1
  + No changelog available
- Use download Url as source</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1430827200">- Update to 12.10.2+bzr20140922:
  + No changes.
- Spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445169600">- fix-compilation.patch: fix "cannot find -lglib-2.0-lm"
  compilation error.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1451131200">- Update to 12.10.2+bzr20140922:
  * Add -lm via LDADD to resolve FTBFS in Ubuntu 16.04.
- Remove fix-compilation.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- Update to version 16.10.0+bzr20171205:
  + Fix build with GNOME 3.28.
- Rebase dont-build-debug-tools.patch.
- Add pkgconfig(libido3-0.1) BuildRequires: new dependency.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520856000">- Replace dont-build-debug-tools.patch with
  libindicator-disable-werror.patch: no need to avoid Ido.</changelog>
  <changelog author="dimstar@opensuse.org" date="1571227200">- Inject -Wno-error into CFLAGS. It's kinda ridiculous for code
  that is not maintained upstream to pass -Werror by default and
  then not catching up. So for now we accept warnings.</changelog>
  <changelog author="yfjiang@suse.com" date="1584705600">- A shared systemd target for user session is shipped with the
  source, pack it up properly.
  https://bazaar.launchpad.net/~indicator-applet-developers/libindicator/trunk.16.10/revision/534</changelog>
</package>
<package pkgid="d61f51060c1f40684279eb0caf6856795785e3ca5743829ab6917125f3e38ecb" name="libindicator3-7" arch="x86_64">
  <version epoch="0" ver="16.10.0+bzr20171205" rel="150200.3.2.1"/>
  <changelog author="johann.luce@wanadoo.fr" date="1379678400">- Fix System/Libraries group for lib</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1394193600">- Update to 12.10.2+14.04.20140304
  * Latest release available in Ubuntu archives - no changelog provided
- Enable build of GTK-3.0 subpackage
- Added dont-build-debug-tools.patch, tools are used only for tests
  &amp; developing indicators. Also, it pulls libido requirement, which
  does not exists on openSUSE</changelog>
  <changelog author="p.drouand@gmail.com" date="1414324800">- Update to version 12.10.2+14.04.20141007.1
  + No changelog available
- Use download Url as source</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1430827200">- Update to 12.10.2+bzr20140922:
  + No changes.
- Spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445169600">- fix-compilation.patch: fix "cannot find -lglib-2.0-lm"
  compilation error.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1451131200">- Update to 12.10.2+bzr20140922:
  * Add -lm via LDADD to resolve FTBFS in Ubuntu 16.04.
- Remove fix-compilation.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- Update to version 16.10.0+bzr20171205:
  + Fix build with GNOME 3.28.
- Rebase dont-build-debug-tools.patch.
- Add pkgconfig(libido3-0.1) BuildRequires: new dependency.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520856000">- Replace dont-build-debug-tools.patch with
  libindicator-disable-werror.patch: no need to avoid Ido.</changelog>
  <changelog author="dimstar@opensuse.org" date="1571227200">- Inject -Wno-error into CFLAGS. It's kinda ridiculous for code
  that is not maintained upstream to pass -Werror by default and
  then not catching up. So for now we accept warnings.</changelog>
  <changelog author="yfjiang@suse.com" date="1584705600">- A shared systemd target for user session is shipped with the
  source, pack it up properly.
  https://bazaar.launchpad.net/~indicator-applet-developers/libindicator/trunk.16.10/revision/534</changelog>
</package>
<package pkgid="db40f6143c379448448761cbad388c41b329c6fa2e49a6c1c1a4c11ff3455c86" name="libipset13" arch="aarch64">
  <version epoch="0" ver="7.15" rel="150400.12.6.4"/>
  <changelog author="jengelh@inai.de" date="1506168000">- Update to new upstream release 6.34
  * Reset state after a command failed, when multiple ones
    are issued.
  * Handle padding attribute properly in userspace.
  * Test to check the fix to add an IPv4 range containing more
    than 2^31 addresses.
- Remove ipset-6.33-export-func.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1515240000">- Update to new upstream release 6.35
  * Userspace revision handling is reworked
  * Backport patch: netfilter: ipset: use nfnl_mutex_is_locked
  * Missing nfnl_lock()/nfnl_unlock() is added to
    ip_set_net_exit()
  * netfilter: ipset: add resched points during set listing
  * Fix "don't update counters" mode when counters used at the
    matching
  * netfilter: ipset: Fix race between dump and swap</changelog>
  <changelog author="jengelh@inai.de" date="1516622400">- Add 0001-build-do-install-libipset-args.h.patch [boo#1077037].</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 6.36
  * Adding a IPv4 range x.x.x.x–255.255.255.255 could lead to
    memory exhaustion, which has been fixed.
- Drop 0001-build-do-install-libipset-args.h.patch (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1523361600">- Update to new upstream release 6.38
  * Fix parsing service names for ports.</changelog>
  <changelog author="jengelh@inai.de" date="1540900800">- Update to new upstream release 7.0
  * A new internal protocol version between the kernel and
    userspace is used. This is required in order to support two
    new functions and the extendend LIST operation, which makes
    possible to run ipset in every case entirely over netlink,
    without the need to use getsockopt().
  * The userspace library was reworked so it can be embedded
    without calling the binary.</changelog>
  <changelog author="suse+build@de-korte.org" date="1542715200">- Add ipset-file.diff [boo#1116432].</changelog>
  <changelog author="jengelh@inai.de" date="1544529600">- Update to new upstream release 7.1
  * Correct the manpage about the sort option
  * Implement sorting for hash types in the ipset tool
  * Fix to list/save into file specified by option
- Remove ipset-file.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1560168000">- Update to new upstream release 7.2
  * ipset: Fix memory accounting for hash types on resize</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 7.3
  * Fix rename concurrency with listing, which can result broken
    list/save results.
  * ipset: Copy the right MAC address in bitmap:ip,mac and
    hash:ip,mac sets.
  * ipset: Actually allow destination MAC address for hash:ip,mac
    sets too.</changelog>
  <changelog author="jengelh@inai.de" date="1572609600">- Update to release 7.4
  * Wildcard support for the "hash:net,iface" type.</changelog>
  <changelog author="jengelh@inai.de" date="1578657600">- Update to release 7.5
  * netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO
    is present.
  * netfilter: xt_set: Do not restrict --map-set to the
    mangle table.</changelog>
  <changelog author="jengelh@inai.de" date="1582545600">- Update to release 7.6
  * Add checking system_power_efficient_wq in the source tree.</changelog>
  <changelog author="jengelh@inai.de" date="1605787200">- Update to release 7.9
  * Enable memory accounting for ipset allocations
  * Expose the initval hash parameter to userspace
  * Add bucketsize parameter to all hash types
  * Support the -exist flag with the destroy command</changelog>
  <changelog author="jengelh@inai.de" date="1608465600">- Update to release 7.10
  * Fix shift-out-of-bounds in htable_bits()</changelog>
  <changelog author="jengelh@inai.de" date="1613736000">- Update to release 7.11
  * Argument parsing buffer overflow in ipset_parse_argv fixed</changelog>
  <changelog author="jengelh@inai.de" date="1627473600">- Update to release 7.14
  * Allow specifying protocols by number
  * Limit the maximum range of consecutive elements to add/delete</changelog>
  <changelog author="info@paolostivanin.com" date="1628078400">- Update to release 7.15
  * netfilter: ipset: Fix maximal range check in
    hash_ipportnet4_uadt()</changelog>
  <changelog author="danilo.spinella@suse.com" date="1667563200">- Tumbleweed is not affected by the following SLE issues:
  bsc#1122853</changelog>
  <changelog author="danilo.spinella@suse.com" date="1714737600">- Fix build with latest kernel, bsc#1223370
  * bsc1223370.patch</changelog>
</package>
<package pkgid="81b21f4bd26e41f070af1b16119f8daf1d52dceca4e97dcd361560e0f8b3f225" name="libipset13" arch="s390x">
  <version epoch="0" ver="7.15" rel="150400.12.6.4"/>
  <changelog author="jengelh@inai.de" date="1506168000">- Update to new upstream release 6.34
  * Reset state after a command failed, when multiple ones
    are issued.
  * Handle padding attribute properly in userspace.
  * Test to check the fix to add an IPv4 range containing more
    than 2^31 addresses.
- Remove ipset-6.33-export-func.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1515240000">- Update to new upstream release 6.35
  * Userspace revision handling is reworked
  * Backport patch: netfilter: ipset: use nfnl_mutex_is_locked
  * Missing nfnl_lock()/nfnl_unlock() is added to
    ip_set_net_exit()
  * netfilter: ipset: add resched points during set listing
  * Fix "don't update counters" mode when counters used at the
    matching
  * netfilter: ipset: Fix race between dump and swap</changelog>
  <changelog author="jengelh@inai.de" date="1516622400">- Add 0001-build-do-install-libipset-args.h.patch [boo#1077037].</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 6.36
  * Adding a IPv4 range x.x.x.x–255.255.255.255 could lead to
    memory exhaustion, which has been fixed.
- Drop 0001-build-do-install-libipset-args.h.patch (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1523361600">- Update to new upstream release 6.38
  * Fix parsing service names for ports.</changelog>
  <changelog author="jengelh@inai.de" date="1540900800">- Update to new upstream release 7.0
  * A new internal protocol version between the kernel and
    userspace is used. This is required in order to support two
    new functions and the extendend LIST operation, which makes
    possible to run ipset in every case entirely over netlink,
    without the need to use getsockopt().
  * The userspace library was reworked so it can be embedded
    without calling the binary.</changelog>
  <changelog author="suse+build@de-korte.org" date="1542715200">- Add ipset-file.diff [boo#1116432].</changelog>
  <changelog author="jengelh@inai.de" date="1544529600">- Update to new upstream release 7.1
  * Correct the manpage about the sort option
  * Implement sorting for hash types in the ipset tool
  * Fix to list/save into file specified by option
- Remove ipset-file.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1560168000">- Update to new upstream release 7.2
  * ipset: Fix memory accounting for hash types on resize</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 7.3
  * Fix rename concurrency with listing, which can result broken
    list/save results.
  * ipset: Copy the right MAC address in bitmap:ip,mac and
    hash:ip,mac sets.
  * ipset: Actually allow destination MAC address for hash:ip,mac
    sets too.</changelog>
  <changelog author="jengelh@inai.de" date="1572609600">- Update to release 7.4
  * Wildcard support for the "hash:net,iface" type.</changelog>
  <changelog author="jengelh@inai.de" date="1578657600">- Update to release 7.5
  * netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO
    is present.
  * netfilter: xt_set: Do not restrict --map-set to the
    mangle table.</changelog>
  <changelog author="jengelh@inai.de" date="1582545600">- Update to release 7.6
  * Add checking system_power_efficient_wq in the source tree.</changelog>
  <changelog author="jengelh@inai.de" date="1605787200">- Update to release 7.9
  * Enable memory accounting for ipset allocations
  * Expose the initval hash parameter to userspace
  * Add bucketsize parameter to all hash types
  * Support the -exist flag with the destroy command</changelog>
  <changelog author="jengelh@inai.de" date="1608465600">- Update to release 7.10
  * Fix shift-out-of-bounds in htable_bits()</changelog>
  <changelog author="jengelh@inai.de" date="1613736000">- Update to release 7.11
  * Argument parsing buffer overflow in ipset_parse_argv fixed</changelog>
  <changelog author="jengelh@inai.de" date="1627473600">- Update to release 7.14
  * Allow specifying protocols by number
  * Limit the maximum range of consecutive elements to add/delete</changelog>
  <changelog author="info@paolostivanin.com" date="1628078400">- Update to release 7.15
  * netfilter: ipset: Fix maximal range check in
    hash_ipportnet4_uadt()</changelog>
  <changelog author="danilo.spinella@suse.com" date="1667563200">- Tumbleweed is not affected by the following SLE issues:
  bsc#1122853</changelog>
  <changelog author="danilo.spinella@suse.com" date="1714737600">- Fix build with latest kernel, bsc#1223370
  * bsc1223370.patch</changelog>
</package>
<package pkgid="0712667ef5644c9a3712e4996c401bd81d35fadda0e23a7b51abb2d116e0e5e7" name="libipset13" arch="x86_64">
  <version epoch="0" ver="7.15" rel="150400.12.6.4"/>
  <changelog author="jengelh@inai.de" date="1506168000">- Update to new upstream release 6.34
  * Reset state after a command failed, when multiple ones
    are issued.
  * Handle padding attribute properly in userspace.
  * Test to check the fix to add an IPv4 range containing more
    than 2^31 addresses.
- Remove ipset-6.33-export-func.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1515240000">- Update to new upstream release 6.35
  * Userspace revision handling is reworked
  * Backport patch: netfilter: ipset: use nfnl_mutex_is_locked
  * Missing nfnl_lock()/nfnl_unlock() is added to
    ip_set_net_exit()
  * netfilter: ipset: add resched points during set listing
  * Fix "don't update counters" mode when counters used at the
    matching
  * netfilter: ipset: Fix race between dump and swap</changelog>
  <changelog author="jengelh@inai.de" date="1516622400">- Add 0001-build-do-install-libipset-args.h.patch [boo#1077037].</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 6.36
  * Adding a IPv4 range x.x.x.x–255.255.255.255 could lead to
    memory exhaustion, which has been fixed.
- Drop 0001-build-do-install-libipset-args.h.patch (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1523361600">- Update to new upstream release 6.38
  * Fix parsing service names for ports.</changelog>
  <changelog author="jengelh@inai.de" date="1540900800">- Update to new upstream release 7.0
  * A new internal protocol version between the kernel and
    userspace is used. This is required in order to support two
    new functions and the extendend LIST operation, which makes
    possible to run ipset in every case entirely over netlink,
    without the need to use getsockopt().
  * The userspace library was reworked so it can be embedded
    without calling the binary.</changelog>
  <changelog author="suse+build@de-korte.org" date="1542715200">- Add ipset-file.diff [boo#1116432].</changelog>
  <changelog author="jengelh@inai.de" date="1544529600">- Update to new upstream release 7.1
  * Correct the manpage about the sort option
  * Implement sorting for hash types in the ipset tool
  * Fix to list/save into file specified by option
- Remove ipset-file.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1560168000">- Update to new upstream release 7.2
  * ipset: Fix memory accounting for hash types on resize</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 7.3
  * Fix rename concurrency with listing, which can result broken
    list/save results.
  * ipset: Copy the right MAC address in bitmap:ip,mac and
    hash:ip,mac sets.
  * ipset: Actually allow destination MAC address for hash:ip,mac
    sets too.</changelog>
  <changelog author="jengelh@inai.de" date="1572609600">- Update to release 7.4
  * Wildcard support for the "hash:net,iface" type.</changelog>
  <changelog author="jengelh@inai.de" date="1578657600">- Update to release 7.5
  * netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO
    is present.
  * netfilter: xt_set: Do not restrict --map-set to the
    mangle table.</changelog>
  <changelog author="jengelh@inai.de" date="1582545600">- Update to release 7.6
  * Add checking system_power_efficient_wq in the source tree.</changelog>
  <changelog author="jengelh@inai.de" date="1605787200">- Update to release 7.9
  * Enable memory accounting for ipset allocations
  * Expose the initval hash parameter to userspace
  * Add bucketsize parameter to all hash types
  * Support the -exist flag with the destroy command</changelog>
  <changelog author="jengelh@inai.de" date="1608465600">- Update to release 7.10
  * Fix shift-out-of-bounds in htable_bits()</changelog>
  <changelog author="jengelh@inai.de" date="1613736000">- Update to release 7.11
  * Argument parsing buffer overflow in ipset_parse_argv fixed</changelog>
  <changelog author="jengelh@inai.de" date="1627473600">- Update to release 7.14
  * Allow specifying protocols by number
  * Limit the maximum range of consecutive elements to add/delete</changelog>
  <changelog author="info@paolostivanin.com" date="1628078400">- Update to release 7.15
  * netfilter: ipset: Fix maximal range check in
    hash_ipportnet4_uadt()</changelog>
  <changelog author="danilo.spinella@suse.com" date="1667563200">- Tumbleweed is not affected by the following SLE issues:
  bsc#1122853</changelog>
  <changelog author="danilo.spinella@suse.com" date="1714737600">- Fix build with latest kernel, bsc#1223370
  * bsc1223370.patch</changelog>
</package>
<package pkgid="27018e0819d4a9f1633d2f8a67cf284175d8b7a0da333616c30e63f172f42448" name="libjansson" arch="src">
  <version epoch="0" ver="2.14" rel="150000.3.5.1"/>
  <changelog author="fcastelli@suse.com" date="1318852800">- Create initial package (v2.2.1)</changelog>
  <changelog author="jengelh@medozas.de" date="1319198400">- Remove redundant tags/sections (cf. specfile guidelines)
- Centralize the shlib package name</changelog>
  <changelog author="jengelh@medozas.de" date="1328011200">- Provide pkgconfig symbols</changelog>
  <changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 2.3.1
  * Add support for optional object keys with the "{s?o}" syntax
  in json_unpack and the like
  * Add json_object_update_existing() and json_object_update_missing()
  for updating only existing keys or only adding missing keys to an
  object.
  * Add json_object_foreach() for more convenient iteration over
  objects.
  * When decoding JSON, write the number of bytes that were read from
  input to "error.position" also on success. This is handy with
  JSON_DISABLE_EOF_CHECK.
  * Add support for decoding any JSON value, not just arrays or
  objects. The support is enabled with the new "JSON_DECODE_ANY"
  flag.
  * Avoid problems with object's serial number growing too big.
  * Remove "+" and leading zeros from exponents in the encoder.
  * Decoding functions now return NULL if the first argument is NULL.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature.</changelog>
  <changelog author="jengelh@inai.de" date="1405857600">- Update to new upstream release 2.6
  * Fixed CVE-2013-6401: avoid bad performance in large JSON objects
  * The json_pack et al functions recognize the specifiers "s#", "+"
  and "+#"
  * Add the "JSON_DECODE_INT_AS_REAL" flag
  * Add "json_array_foreach()" function
  * Add the "json_boolean()" macro that returns the JSON true or
  false value based on its argument
  * Add "json_load_callback()" that calls a callback function
  repeatedly to read the JSON input.
  * Add JSON_ESCAPE_SLASH encoding flag to escape all occurences of
  '/' with '\/'.
- Drop defunct gpg-offline and use local source_validator instead</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1410436800">- Add baselibs.conf</changelog>
  <changelog author="efimovov@gmail.com" date="1415188800">- Update to new upstream release 2.7
  * The json_pack et al functions recognize the specifiers "s%", "+%"
  and "+#"
  * Add length-aware string constructors "json_stringn()" and
  "json_stringn_nocheck()", length-aware string mutators
  "json_string_setn()" and "json_string_setn_nocheck()",
  and a function for getting string's length "json_string_length()"
  * Support ""\u0000"" escapes in the decoder. The support can be
  enabled by using the ""JSON_ALLOW_NUL"" decoding flag
  * Add "json_boolean_value()" as an alias for "json_is_true()"
  * Add JSON_REAL_PRECISION encoding flag/macro for controlling real
  number precision
  * Define the maximum indentation as JSON_MAX_INDENT.
  * Fix cases when some malformed ""\uNNNN"" escapes could crash
  the decoder with an assertion failure
  * Avoid integer overflows with very long strings in UTF-8 decoder
  and hashtable
  * Check for *NULL* key in "json_object_get()"
  and "json_object_del()"
  * "json_unpack()": Allow mixing JSON_STRICT with optional keys.
  * Fix int/int32 mismatch
  * Parse subnormal numbers correctly</changelog>
  <changelog author="coolo@suse.com" date="1488369600">- update to new upstream release 2.9
  * New features:
    Add json_auto_t to automatically decref a value that goes out of scope.
    Available only on GCC and Clang. (#301)
  * Small documentation fixes.
- changelog from 2.8
  * New features:
  - Always preserve insertion order of object items. json_object_iter()
    and friends, json_object_foreach() and json_dumps() and friends now
    always work in the insertion order of object items (#293).
  - Add json_object_foreach_safe() macro that allows json_object_del()
    calls during iteration (#230).
  - Add json_get_alloc_funcs() to allow reading the allocation functions
    set by json_set_alloc_funcs() (#262, #264).
  - Add json_pack() format specifiers s?, o? and O? for values that can
    be null (#261, #270).
  * Bug fixes:
  - Fix a crash when parsing inputs consisting of very deeply nested
    arrays or objects (#282, #284).
  - Never convert numbers to integers in the parser when
    JSON_DECODE_INT_AS_REAL is set.
  - Fix a use-after-free in json_pack() error handling.
  - Fix subnormal number parsing on mingw32.
  - Handle out-of-memory situations gracefully in the hashtable
    implementation</changelog>
  <changelog author="pstivanin@suse.com" date="1675684800">- Update to 2.14 (boo#1201817):
  * New Features:
    + Add `json_object_getn`, `json_object_setn`, `json_object_deln`, and the
    corresponding `nocheck` functions.
    + Add jansson_version_str() and jansson_version_cmp() for runtime
    version checking
    + Add json_object_update_new(), json_object_update_existing_new()
    and json_object_update_missing_new() functions
    + Add json_object_update_recursive()
    + Add `json_pack()` format specifiers s*, o* and O* for values
    that can be omitted if null (#339).
    + Add `json_error_code()` to retrieve numeric error codes
    (#365, #380, #381).
    + Enable thread safety for `json_dump()` on all systems.
    Enable thread safe `json_decref()` and `json_incref()` for
    modern compilers (#389).
    + Add `json_sprintf()` and `json_vsprintf()` (#393).
  * Fixes:
    + Handle `sprintf` corner cases.
    + Add infinite loop check in json_deep_copy()
    + Enhance JANSSON_ATTRS macro to support earlier C standard(C89)
    + Update version detection for sphinx-build
    + Fix error message in `json_pack()` for NULL object (#409).
    + Avoid invalid memory read in `json_pack()` (#421).
    + Call va_end after va_copy in `json_vsprintf()` (#427).
    + Improve handling of formats with '?' and '*' in `json_pack()`
    (#438).
    + Remove inappropriate `jsonp_free()` which caused
    segmentation fault in error handling (#444).
    + Fix incorrect report of success from `json_dump_file()` when
    an error is returned by `fclose()` (#359).
    + Make json_equal() const-correct (#344).
    + Fix incomplete stealing of references by `json_pack()` (#374)
- Use GitHub as source URLs: Release hasn't been uploaded to digip.org.
- Add check section.</changelog>
</package>
<package pkgid="15f833d12c22bfbd27df45e7c38615fc451f193122f0a70a8fe165432e00c80b" name="libjansson4" arch="aarch64">
  <version epoch="0" ver="2.14" rel="150000.3.5.1"/>
  <changelog author="fcastelli@suse.com" date="1318852800">- Create initial package (v2.2.1)</changelog>
  <changelog author="jengelh@medozas.de" date="1319198400">- Remove redundant tags/sections (cf. specfile guidelines)
- Centralize the shlib package name</changelog>
  <changelog author="jengelh@medozas.de" date="1328011200">- Provide pkgconfig symbols</changelog>
  <changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 2.3.1
  * Add support for optional object keys with the "{s?o}" syntax
  in json_unpack and the like
  * Add json_object_update_existing() and json_object_update_missing()
  for updating only existing keys or only adding missing keys to an
  object.
  * Add json_object_foreach() for more convenient iteration over
  objects.
  * When decoding JSON, write the number of bytes that were read from
  input to "error.position" also on success. This is handy with
  JSON_DISABLE_EOF_CHECK.
  * Add support for decoding any JSON value, not just arrays or
  objects. The support is enabled with the new "JSON_DECODE_ANY"
  flag.
  * Avoid problems with object's serial number growing too big.
  * Remove "+" and leading zeros from exponents in the encoder.
  * Decoding functions now return NULL if the first argument is NULL.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature.</changelog>
  <changelog author="jengelh@inai.de" date="1405857600">- Update to new upstream release 2.6
  * Fixed CVE-2013-6401: avoid bad performance in large JSON objects
  * The json_pack et al functions recognize the specifiers "s#", "+"
  and "+#"
  * Add the "JSON_DECODE_INT_AS_REAL" flag
  * Add "json_array_foreach()" function
  * Add the "json_boolean()" macro that returns the JSON true or
  false value based on its argument
  * Add "json_load_callback()" that calls a callback function
  repeatedly to read the JSON input.
  * Add JSON_ESCAPE_SLASH encoding flag to escape all occurences of
  '/' with '\/'.
- Drop defunct gpg-offline and use local source_validator instead</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1410436800">- Add baselibs.conf</changelog>
  <changelog author="efimovov@gmail.com" date="1415188800">- Update to new upstream release 2.7
  * The json_pack et al functions recognize the specifiers "s%", "+%"
  and "+#"
  * Add length-aware string constructors "json_stringn()" and
  "json_stringn_nocheck()", length-aware string mutators
  "json_string_setn()" and "json_string_setn_nocheck()",
  and a function for getting string's length "json_string_length()"
  * Support ""\u0000"" escapes in the decoder. The support can be
  enabled by using the ""JSON_ALLOW_NUL"" decoding flag
  * Add "json_boolean_value()" as an alias for "json_is_true()"
  * Add JSON_REAL_PRECISION encoding flag/macro for controlling real
  number precision
  * Define the maximum indentation as JSON_MAX_INDENT.
  * Fix cases when some malformed ""\uNNNN"" escapes could crash
  the decoder with an assertion failure
  * Avoid integer overflows with very long strings in UTF-8 decoder
  and hashtable
  * Check for *NULL* key in "json_object_get()"
  and "json_object_del()"
  * "json_unpack()": Allow mixing JSON_STRICT with optional keys.
  * Fix int/int32 mismatch
  * Parse subnormal numbers correctly</changelog>
  <changelog author="coolo@suse.com" date="1488369600">- update to new upstream release 2.9
  * New features:
    Add json_auto_t to automatically decref a value that goes out of scope.
    Available only on GCC and Clang. (#301)
  * Small documentation fixes.
- changelog from 2.8
  * New features:
  - Always preserve insertion order of object items. json_object_iter()
    and friends, json_object_foreach() and json_dumps() and friends now
    always work in the insertion order of object items (#293).
  - Add json_object_foreach_safe() macro that allows json_object_del()
    calls during iteration (#230).
  - Add json_get_alloc_funcs() to allow reading the allocation functions
    set by json_set_alloc_funcs() (#262, #264).
  - Add json_pack() format specifiers s?, o? and O? for values that can
    be null (#261, #270).
  * Bug fixes:
  - Fix a crash when parsing inputs consisting of very deeply nested
    arrays or objects (#282, #284).
  - Never convert numbers to integers in the parser when
    JSON_DECODE_INT_AS_REAL is set.
  - Fix a use-after-free in json_pack() error handling.
  - Fix subnormal number parsing on mingw32.
  - Handle out-of-memory situations gracefully in the hashtable
    implementation</changelog>
  <changelog author="pstivanin@suse.com" date="1675684800">- Update to 2.14 (boo#1201817):
  * New Features:
    + Add `json_object_getn`, `json_object_setn`, `json_object_deln`, and the
    corresponding `nocheck` functions.
    + Add jansson_version_str() and jansson_version_cmp() for runtime
    version checking
    + Add json_object_update_new(), json_object_update_existing_new()
    and json_object_update_missing_new() functions
    + Add json_object_update_recursive()
    + Add `json_pack()` format specifiers s*, o* and O* for values
    that can be omitted if null (#339).
    + Add `json_error_code()` to retrieve numeric error codes
    (#365, #380, #381).
    + Enable thread safety for `json_dump()` on all systems.
    Enable thread safe `json_decref()` and `json_incref()` for
    modern compilers (#389).
    + Add `json_sprintf()` and `json_vsprintf()` (#393).
  * Fixes:
    + Handle `sprintf` corner cases.
    + Add infinite loop check in json_deep_copy()
    + Enhance JANSSON_ATTRS macro to support earlier C standard(C89)
    + Update version detection for sphinx-build
    + Fix error message in `json_pack()` for NULL object (#409).
    + Avoid invalid memory read in `json_pack()` (#421).
    + Call va_end after va_copy in `json_vsprintf()` (#427).
    + Improve handling of formats with '?' and '*' in `json_pack()`
    (#438).
    + Remove inappropriate `jsonp_free()` which caused
    segmentation fault in error handling (#444).
    + Fix incorrect report of success from `json_dump_file()` when
    an error is returned by `fclose()` (#359).
    + Make json_equal() const-correct (#344).
    + Fix incomplete stealing of references by `json_pack()` (#374)
- Use GitHub as source URLs: Release hasn't been uploaded to digip.org.
- Add check section.</changelog>
</package>
<package pkgid="450e7dde21198dd98567392eb47d0978b07f3fd0587f24ba443d3bd1a0bafdc8" name="libjansson4" arch="s390x">
  <version epoch="0" ver="2.14" rel="150000.3.5.1"/>
  <changelog author="fcastelli@suse.com" date="1318852800">- Create initial package (v2.2.1)</changelog>
  <changelog author="jengelh@medozas.de" date="1319198400">- Remove redundant tags/sections (cf. specfile guidelines)
- Centralize the shlib package name</changelog>
  <changelog author="jengelh@medozas.de" date="1328011200">- Provide pkgconfig symbols</changelog>
  <changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 2.3.1
  * Add support for optional object keys with the "{s?o}" syntax
  in json_unpack and the like
  * Add json_object_update_existing() and json_object_update_missing()
  for updating only existing keys or only adding missing keys to an
  object.
  * Add json_object_foreach() for more convenient iteration over
  objects.
  * When decoding JSON, write the number of bytes that were read from
  input to "error.position" also on success. This is handy with
  JSON_DISABLE_EOF_CHECK.
  * Add support for decoding any JSON value, not just arrays or
  objects. The support is enabled with the new "JSON_DECODE_ANY"
  flag.
  * Avoid problems with object's serial number growing too big.
  * Remove "+" and leading zeros from exponents in the encoder.
  * Decoding functions now return NULL if the first argument is NULL.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature.</changelog>
  <changelog author="jengelh@inai.de" date="1405857600">- Update to new upstream release 2.6
  * Fixed CVE-2013-6401: avoid bad performance in large JSON objects
  * The json_pack et al functions recognize the specifiers "s#", "+"
  and "+#"
  * Add the "JSON_DECODE_INT_AS_REAL" flag
  * Add "json_array_foreach()" function
  * Add the "json_boolean()" macro that returns the JSON true or
  false value based on its argument
  * Add "json_load_callback()" that calls a callback function
  repeatedly to read the JSON input.
  * Add JSON_ESCAPE_SLASH encoding flag to escape all occurences of
  '/' with '\/'.
- Drop defunct gpg-offline and use local source_validator instead</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1410436800">- Add baselibs.conf</changelog>
  <changelog author="efimovov@gmail.com" date="1415188800">- Update to new upstream release 2.7
  * The json_pack et al functions recognize the specifiers "s%", "+%"
  and "+#"
  * Add length-aware string constructors "json_stringn()" and
  "json_stringn_nocheck()", length-aware string mutators
  "json_string_setn()" and "json_string_setn_nocheck()",
  and a function for getting string's length "json_string_length()"
  * Support ""\u0000"" escapes in the decoder. The support can be
  enabled by using the ""JSON_ALLOW_NUL"" decoding flag
  * Add "json_boolean_value()" as an alias for "json_is_true()"
  * Add JSON_REAL_PRECISION encoding flag/macro for controlling real
  number precision
  * Define the maximum indentation as JSON_MAX_INDENT.
  * Fix cases when some malformed ""\uNNNN"" escapes could crash
  the decoder with an assertion failure
  * Avoid integer overflows with very long strings in UTF-8 decoder
  and hashtable
  * Check for *NULL* key in "json_object_get()"
  and "json_object_del()"
  * "json_unpack()": Allow mixing JSON_STRICT with optional keys.
  * Fix int/int32 mismatch
  * Parse subnormal numbers correctly</changelog>
  <changelog author="coolo@suse.com" date="1488369600">- update to new upstream release 2.9
  * New features:
    Add json_auto_t to automatically decref a value that goes out of scope.
    Available only on GCC and Clang. (#301)
  * Small documentation fixes.
- changelog from 2.8
  * New features:
  - Always preserve insertion order of object items. json_object_iter()
    and friends, json_object_foreach() and json_dumps() and friends now
    always work in the insertion order of object items (#293).
  - Add json_object_foreach_safe() macro that allows json_object_del()
    calls during iteration (#230).
  - Add json_get_alloc_funcs() to allow reading the allocation functions
    set by json_set_alloc_funcs() (#262, #264).
  - Add json_pack() format specifiers s?, o? and O? for values that can
    be null (#261, #270).
  * Bug fixes:
  - Fix a crash when parsing inputs consisting of very deeply nested
    arrays or objects (#282, #284).
  - Never convert numbers to integers in the parser when
    JSON_DECODE_INT_AS_REAL is set.
  - Fix a use-after-free in json_pack() error handling.
  - Fix subnormal number parsing on mingw32.
  - Handle out-of-memory situations gracefully in the hashtable
    implementation</changelog>
  <changelog author="pstivanin@suse.com" date="1675684800">- Update to 2.14 (boo#1201817):
  * New Features:
    + Add `json_object_getn`, `json_object_setn`, `json_object_deln`, and the
    corresponding `nocheck` functions.
    + Add jansson_version_str() and jansson_version_cmp() for runtime
    version checking
    + Add json_object_update_new(), json_object_update_existing_new()
    and json_object_update_missing_new() functions
    + Add json_object_update_recursive()
    + Add `json_pack()` format specifiers s*, o* and O* for values
    that can be omitted if null (#339).
    + Add `json_error_code()` to retrieve numeric error codes
    (#365, #380, #381).
    + Enable thread safety for `json_dump()` on all systems.
    Enable thread safe `json_decref()` and `json_incref()` for
    modern compilers (#389).
    + Add `json_sprintf()` and `json_vsprintf()` (#393).
  * Fixes:
    + Handle `sprintf` corner cases.
    + Add infinite loop check in json_deep_copy()
    + Enhance JANSSON_ATTRS macro to support earlier C standard(C89)
    + Update version detection for sphinx-build
    + Fix error message in `json_pack()` for NULL object (#409).
    + Avoid invalid memory read in `json_pack()` (#421).
    + Call va_end after va_copy in `json_vsprintf()` (#427).
    + Improve handling of formats with '?' and '*' in `json_pack()`
    (#438).
    + Remove inappropriate `jsonp_free()` which caused
    segmentation fault in error handling (#444).
    + Fix incorrect report of success from `json_dump_file()` when
    an error is returned by `fclose()` (#359).
    + Make json_equal() const-correct (#344).
    + Fix incomplete stealing of references by `json_pack()` (#374)
- Use GitHub as source URLs: Release hasn't been uploaded to digip.org.
- Add check section.</changelog>
</package>
<package pkgid="5e65fa2322926fe8510b580444a13157ba356b1523563e0c83708d0f1bbdce54" name="libjansson4" arch="x86_64">
  <version epoch="0" ver="2.14" rel="150000.3.5.1"/>
  <changelog author="fcastelli@suse.com" date="1318852800">- Create initial package (v2.2.1)</changelog>
  <changelog author="jengelh@medozas.de" date="1319198400">- Remove redundant tags/sections (cf. specfile guidelines)
- Centralize the shlib package name</changelog>
  <changelog author="jengelh@medozas.de" date="1328011200">- Provide pkgconfig symbols</changelog>
  <changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 2.3.1
  * Add support for optional object keys with the "{s?o}" syntax
  in json_unpack and the like
  * Add json_object_update_existing() and json_object_update_missing()
  for updating only existing keys or only adding missing keys to an
  object.
  * Add json_object_foreach() for more convenient iteration over
  objects.
  * When decoding JSON, write the number of bytes that were read from
  input to "error.position" also on success. This is handy with
  JSON_DISABLE_EOF_CHECK.
  * Add support for decoding any JSON value, not just arrays or
  objects. The support is enabled with the new "JSON_DECODE_ANY"
  flag.
  * Avoid problems with object's serial number growing too big.
  * Remove "+" and leading zeros from exponents in the encoder.
  * Decoding functions now return NULL if the first argument is NULL.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature.</changelog>
  <changelog author="jengelh@inai.de" date="1405857600">- Update to new upstream release 2.6
  * Fixed CVE-2013-6401: avoid bad performance in large JSON objects
  * The json_pack et al functions recognize the specifiers "s#", "+"
  and "+#"
  * Add the "JSON_DECODE_INT_AS_REAL" flag
  * Add "json_array_foreach()" function
  * Add the "json_boolean()" macro that returns the JSON true or
  false value based on its argument
  * Add "json_load_callback()" that calls a callback function
  repeatedly to read the JSON input.
  * Add JSON_ESCAPE_SLASH encoding flag to escape all occurences of
  '/' with '\/'.
- Drop defunct gpg-offline and use local source_validator instead</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1410436800">- Add baselibs.conf</changelog>
  <changelog author="efimovov@gmail.com" date="1415188800">- Update to new upstream release 2.7
  * The json_pack et al functions recognize the specifiers "s%", "+%"
  and "+#"
  * Add length-aware string constructors "json_stringn()" and
  "json_stringn_nocheck()", length-aware string mutators
  "json_string_setn()" and "json_string_setn_nocheck()",
  and a function for getting string's length "json_string_length()"
  * Support ""\u0000"" escapes in the decoder. The support can be
  enabled by using the ""JSON_ALLOW_NUL"" decoding flag
  * Add "json_boolean_value()" as an alias for "json_is_true()"
  * Add JSON_REAL_PRECISION encoding flag/macro for controlling real
  number precision
  * Define the maximum indentation as JSON_MAX_INDENT.
  * Fix cases when some malformed ""\uNNNN"" escapes could crash
  the decoder with an assertion failure
  * Avoid integer overflows with very long strings in UTF-8 decoder
  and hashtable
  * Check for *NULL* key in "json_object_get()"
  and "json_object_del()"
  * "json_unpack()": Allow mixing JSON_STRICT with optional keys.
  * Fix int/int32 mismatch
  * Parse subnormal numbers correctly</changelog>
  <changelog author="coolo@suse.com" date="1488369600">- update to new upstream release 2.9
  * New features:
    Add json_auto_t to automatically decref a value that goes out of scope.
    Available only on GCC and Clang. (#301)
  * Small documentation fixes.
- changelog from 2.8
  * New features:
  - Always preserve insertion order of object items. json_object_iter()
    and friends, json_object_foreach() and json_dumps() and friends now
    always work in the insertion order of object items (#293).
  - Add json_object_foreach_safe() macro that allows json_object_del()
    calls during iteration (#230).
  - Add json_get_alloc_funcs() to allow reading the allocation functions
    set by json_set_alloc_funcs() (#262, #264).
  - Add json_pack() format specifiers s?, o? and O? for values that can
    be null (#261, #270).
  * Bug fixes:
  - Fix a crash when parsing inputs consisting of very deeply nested
    arrays or objects (#282, #284).
  - Never convert numbers to integers in the parser when
    JSON_DECODE_INT_AS_REAL is set.
  - Fix a use-after-free in json_pack() error handling.
  - Fix subnormal number parsing on mingw32.
  - Handle out-of-memory situations gracefully in the hashtable
    implementation</changelog>
  <changelog author="pstivanin@suse.com" date="1675684800">- Update to 2.14 (boo#1201817):
  * New Features:
    + Add `json_object_getn`, `json_object_setn`, `json_object_deln`, and the
    corresponding `nocheck` functions.
    + Add jansson_version_str() and jansson_version_cmp() for runtime
    version checking
    + Add json_object_update_new(), json_object_update_existing_new()
    and json_object_update_missing_new() functions
    + Add json_object_update_recursive()
    + Add `json_pack()` format specifiers s*, o* and O* for values
    that can be omitted if null (#339).
    + Add `json_error_code()` to retrieve numeric error codes
    (#365, #380, #381).
    + Enable thread safety for `json_dump()` on all systems.
    Enable thread safe `json_decref()` and `json_incref()` for
    modern compilers (#389).
    + Add `json_sprintf()` and `json_vsprintf()` (#393).
  * Fixes:
    + Handle `sprintf` corner cases.
    + Add infinite loop check in json_deep_copy()
    + Enhance JANSSON_ATTRS macro to support earlier C standard(C89)
    + Update version detection for sphinx-build
    + Fix error message in `json_pack()` for NULL object (#409).
    + Avoid invalid memory read in `json_pack()` (#421).
    + Call va_end after va_copy in `json_vsprintf()` (#427).
    + Improve handling of formats with '?' and '*' in `json_pack()`
    (#438).
    + Remove inappropriate `jsonp_free()` which caused
    segmentation fault in error handling (#444).
    + Fix incorrect report of success from `json_dump_file()` when
    an error is returned by `fclose()` (#359).
    + Make json_equal() const-correct (#344).
    + Fix incomplete stealing of references by `json_pack()` (#374)
- Use GitHub as source URLs: Release hasn't been uploaded to digip.org.
- Add check section.</changelog>
</package>
<package pkgid="0dcc40112291b6520768918b362d1429c8cbc360b780a6477fe5b913912158d3" name="libjbig2" arch="aarch64">
  <version epoch="0" ver="2.1" rel="150000.3.5.1"/>
  <changelog author="brian@aljex.com" date="1334059200">- Initial SUSE package.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1339156800">- build -32bit packages to make libtiff5-32bit installable</changelog>
  <changelog author="coolo@suse.com" date="1339588800">- fix baselibs.conf</changelog>
  <changelog author="mmeister@suse.com" date="1364472000">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="schwab@linux-m68k.org" date="1374235200">- Don't strip binaries</changelog>
  <changelog author="brian@aljex.com" date="1397563200">- v2.1
-Fixes bnc#870855
-Fixes CVE-2013-6369</changelog>
  <changelog author="pgajdos@suse.com" date="1702987200">- security update
- added patches
  fix CVE-2022-1210 [bsc#1198146], Malicious file leads to a denial of service in TIFF File Handler
  + jbigkit-CVE-2022-1210.patch</changelog>
</package>
<package pkgid="f8fb923c5d1ec7cbe3ed163b7624cc6d8b32c5e07dc19005fd85360f65804662" name="libjbig2" arch="s390x">
  <version epoch="0" ver="2.1" rel="150000.3.5.1"/>
  <changelog author="brian@aljex.com" date="1334059200">- Initial SUSE package.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1339156800">- build -32bit packages to make libtiff5-32bit installable</changelog>
  <changelog author="coolo@suse.com" date="1339588800">- fix baselibs.conf</changelog>
  <changelog author="mmeister@suse.com" date="1364472000">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="schwab@linux-m68k.org" date="1374235200">- Don't strip binaries</changelog>
  <changelog author="brian@aljex.com" date="1397563200">- v2.1
-Fixes bnc#870855
-Fixes CVE-2013-6369</changelog>
  <changelog author="pgajdos@suse.com" date="1702987200">- security update
- added patches
  fix CVE-2022-1210 [bsc#1198146], Malicious file leads to a denial of service in TIFF File Handler
  + jbigkit-CVE-2022-1210.patch</changelog>
</package>
<package pkgid="0daf1ccf387730c39cf914239d06e147ddb46b97597d2f8171a00bfae4caf24d" name="libjbig2" arch="x86_64">
  <version epoch="0" ver="2.1" rel="150000.3.5.1"/>
  <changelog author="brian@aljex.com" date="1334059200">- Initial SUSE package.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1339156800">- build -32bit packages to make libtiff5-32bit installable</changelog>
  <changelog author="coolo@suse.com" date="1339588800">- fix baselibs.conf</changelog>
  <changelog author="mmeister@suse.com" date="1364472000">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="schwab@linux-m68k.org" date="1374235200">- Don't strip binaries</changelog>
  <changelog author="brian@aljex.com" date="1397563200">- v2.1
-Fixes bnc#870855
-Fixes CVE-2013-6369</changelog>
  <changelog author="pgajdos@suse.com" date="1702987200">- security update
- added patches
  fix CVE-2022-1210 [bsc#1198146], Malicious file leads to a denial of service in TIFF File Handler
  + jbigkit-CVE-2022-1210.patch</changelog>
</package>
<package pkgid="151c4309e2635f91e6ef4c9b76f669558fcb5e27363d4149094c34989fdd3a54" name="libjitterentropy3" arch="aarch64">
  <version epoch="0" ver="3.4.1" rel="150000.1.12.1"/>
  <changelog author="meissner@suse.com" date="1632225600">- add a userspace jitter entropy generator library</changelog>
  <changelog author="jengelh@inai.de" date="1632830400">- Trim conjecture from descriptions.</changelog>
  <changelog author="meissner@suse.com" date="1659528000">- updated to 3.4.0
  * enhancement: add API call jent_set_fips_failure_callback as requested by Daniel Ojalvo
  * fix: Change the SHA-3 integration: The entropy pool is now a SHA-3 state.
  It is filled with the time delta containing entropy and auxiliary data that does not contain entropy using a SHA update operation. The auxiliary data is calculated by a SHA-3 hashing of some varying state data. The time delta that contains entropy is measured about the SHA-3 hasing of the auxiliary data. This satisfies FIPS 140-3 IG D.K resolutions 4, 6, and 8.
  * enhancement: add CMake support by Andrew Hopkins
- updated to 3.3.1
  * fix: bug fix in initialization logic by Vladis Dronov &lt;vdronov@redhat.com&gt;
  * fix: use __asm__ instead of asm to suit the C11 standard
- added a -devel-static package to be able to link it static.</changelog>
  <changelog author="meissner@suse.com" date="1662984000">- updated to 3.4.1
  * add FIPS 140 hints to man page
  * simplify the test tool to search for optimal configurations
  * fix: jent_loop_shuffle: re-add setting the time that was lost with 3.4.0
  * enhancement: add ARM64 assembler code to read high-res timer</changelog>
  <changelog author="meissner@suse.com" date="1663070400">- jitterentropy-split-internal-header.patch:
  Hide the non-GNUC constructs that are library internal from the
  exported header. (bsc#1202870)</changelog>
  <changelog author="meissner@suse.com" date="1674734400">- jitterentropy-with-debug.patch: build with debuginfo (bsc#1207789)</changelog>
  <changelog author="pmonreal@suse.com" date="1679486400">- Fix a stack corruption on s390x: [bsc#1209627]
  * Output size of the STCKE command on s390x is 16 bytes, compared
    to 8 bytes of the STCK command. Fix a stack corruption in the
    s390x version of jent_get_nstime(). Add some more detailed
    information on the STCKE command.
  * github.com/smuellerDD/jitterentropy-library/commit/7bf9f85
  * Add jitterentropy-fix-a-stack-corruption-on-s390x.patch</changelog>
</package>
<package pkgid="6b87772c979f2777513c48e363d005d559d9820a10ad58efef6855ee5f584750" name="libjitterentropy3" arch="s390x">
  <version epoch="0" ver="3.4.1" rel="150000.1.12.1"/>
  <changelog author="meissner@suse.com" date="1632225600">- add a userspace jitter entropy generator library</changelog>
  <changelog author="jengelh@inai.de" date="1632830400">- Trim conjecture from descriptions.</changelog>
  <changelog author="meissner@suse.com" date="1659528000">- updated to 3.4.0
  * enhancement: add API call jent_set_fips_failure_callback as requested by Daniel Ojalvo
  * fix: Change the SHA-3 integration: The entropy pool is now a SHA-3 state.
  It is filled with the time delta containing entropy and auxiliary data that does not contain entropy using a SHA update operation. The auxiliary data is calculated by a SHA-3 hashing of some varying state data. The time delta that contains entropy is measured about the SHA-3 hasing of the auxiliary data. This satisfies FIPS 140-3 IG D.K resolutions 4, 6, and 8.
  * enhancement: add CMake support by Andrew Hopkins
- updated to 3.3.1
  * fix: bug fix in initialization logic by Vladis Dronov &lt;vdronov@redhat.com&gt;
  * fix: use __asm__ instead of asm to suit the C11 standard
- added a -devel-static package to be able to link it static.</changelog>
  <changelog author="meissner@suse.com" date="1662984000">- updated to 3.4.1
  * add FIPS 140 hints to man page
  * simplify the test tool to search for optimal configurations
  * fix: jent_loop_shuffle: re-add setting the time that was lost with 3.4.0
  * enhancement: add ARM64 assembler code to read high-res timer</changelog>
  <changelog author="meissner@suse.com" date="1663070400">- jitterentropy-split-internal-header.patch:
  Hide the non-GNUC constructs that are library internal from the
  exported header. (bsc#1202870)</changelog>
  <changelog author="meissner@suse.com" date="1674734400">- jitterentropy-with-debug.patch: build with debuginfo (bsc#1207789)</changelog>
  <changelog author="pmonreal@suse.com" date="1679486400">- Fix a stack corruption on s390x: [bsc#1209627]
  * Output size of the STCKE command on s390x is 16 bytes, compared
    to 8 bytes of the STCK command. Fix a stack corruption in the
    s390x version of jent_get_nstime(). Add some more detailed
    information on the STCKE command.
  * github.com/smuellerDD/jitterentropy-library/commit/7bf9f85
  * Add jitterentropy-fix-a-stack-corruption-on-s390x.patch</changelog>
</package>
<package pkgid="5ab366959ef389acb7df657dd6884f0b55cd8b1ed84b2c8d8754fe0ea0ff9d66" name="libjitterentropy3" arch="x86_64">
  <version epoch="0" ver="3.4.1" rel="150000.1.12.1"/>
  <changelog author="meissner@suse.com" date="1632225600">- add a userspace jitter entropy generator library</changelog>
  <changelog author="jengelh@inai.de" date="1632830400">- Trim conjecture from descriptions.</changelog>
  <changelog author="meissner@suse.com" date="1659528000">- updated to 3.4.0
  * enhancement: add API call jent_set_fips_failure_callback as requested by Daniel Ojalvo
  * fix: Change the SHA-3 integration: The entropy pool is now a SHA-3 state.
  It is filled with the time delta containing entropy and auxiliary data that does not contain entropy using a SHA update operation. The auxiliary data is calculated by a SHA-3 hashing of some varying state data. The time delta that contains entropy is measured about the SHA-3 hasing of the auxiliary data. This satisfies FIPS 140-3 IG D.K resolutions 4, 6, and 8.
  * enhancement: add CMake support by Andrew Hopkins
- updated to 3.3.1
  * fix: bug fix in initialization logic by Vladis Dronov &lt;vdronov@redhat.com&gt;
  * fix: use __asm__ instead of asm to suit the C11 standard
- added a -devel-static package to be able to link it static.</changelog>
  <changelog author="meissner@suse.com" date="1662984000">- updated to 3.4.1
  * add FIPS 140 hints to man page
  * simplify the test tool to search for optimal configurations
  * fix: jent_loop_shuffle: re-add setting the time that was lost with 3.4.0
  * enhancement: add ARM64 assembler code to read high-res timer</changelog>
  <changelog author="meissner@suse.com" date="1663070400">- jitterentropy-split-internal-header.patch:
  Hide the non-GNUC constructs that are library internal from the
  exported header. (bsc#1202870)</changelog>
  <changelog author="meissner@suse.com" date="1674734400">- jitterentropy-with-debug.patch: build with debuginfo (bsc#1207789)</changelog>
  <changelog author="pmonreal@suse.com" date="1679486400">- Fix a stack corruption on s390x: [bsc#1209627]
  * Output size of the STCKE command on s390x is 16 bytes, compared
    to 8 bytes of the STCK command. Fix a stack corruption in the
    s390x version of jent_get_nstime(). Add some more detailed
    information on the STCKE command.
  * github.com/smuellerDD/jitterentropy-library/commit/7bf9f85
  * Add jitterentropy-fix-a-stack-corruption-on-s390x.patch</changelog>
</package>
<package pkgid="95e89608ffd2d49ef210abaf1f633f1fc57baa97cd30736281e6aed67cef97fd" name="libkmipclient1" arch="s390x">
  <version epoch="0" ver="2.30.0" rel="150500.9.10.1"/>
  <changelog author="nikolay.gueorguiev@suse.com" date="1673352000">- Updated read_values.c for z16 machine type (bsc#1206832)</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1673438400">- Updated read_values.c for z16 machine type (bsc#1206832)
  * Added the IBM LinuxONE Emperor 4 machine type
  * Updated the z16 machine type to IBM z16 A01</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1675684800">- Added patch (bsc#1207947)
  * s390-tools-sles15sp5-zkey-Support-EP11-host-library-version-4.patch</changelog>
  <changelog author="jose.gomez@suse.com" date="1676548800">- Implemented read_values -u. The result of -u is a unique identifier composed of:
  * Machine Serial Number.
  * LPAR Name.
  * VM Name (can be optional).</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1676980800">- Applied the following patches (bsc#1208527, bsc#1206173)
  * s390-tools-sles15sp5-01-zipl-boot-discard-.eh_frame-and-.interp-input-sectio.patch
  * s390-tools-sles15sp5-02-zipl-boot-declare-that-no-executable-stack-is-requir.patch
  * s390-tools-sles15sp5-03-zipl-boot-use-no-warn-rwx-segments-linker-flag.patch
  * s390-tools-sles15sp5-04-zipl-boot-disable-build-id.patch
  * s390-tools-sles15sp5-05-zipl-boot-simplify-objcopy-commands.patch
  * s390-tools-sles15sp5-06-zipl-move-STAGE2_MAX_SIZE-and-STAGE1B_LOAD_ADDR-to-l.patch
  * s390-tools-sles15sp5-07-zipl-boot-use-linker-scripts-for-all-bootloaders.patch
  * s390-tools-sles15sp5-08-genprotimg-boot-declare-that-no-executable-stack-is-.patch
  * s390-tools-sles15sp5-09-genprotimg-boot-use-no-warn-rwx-segments-linker-flag.patch
  * s390-tools-sles15sp5-10-genprotimg-boot-disable-build-id.patch
  * s390-tools-sles15sp5-11-genprotimg-boot-Makefile-simplify-objcopy-command.patch
  * s390-tools-sles15sp5-12-genprotimg-boot-improve-linker-scripts.patch
  * s390-tools-sles15sp5-13-genprotimg-boot-stage3b-add-size-check-to-the-linker.patch
  * s390-tools-sles15sp5-14-genprotimg-boot-stage3b_reloc.bin-add-linker-script.patch
  * s390-tools-sles15sp5-15-zipl-Embed-loader-data-directly-into-boot-object.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1678276800">- Updated cputype (bsc#1208983)
  * Changed the script to avoid "/usr/bin/cputype: line xx: nnnn: command not found",
    when machine type was found more than once in the /proc/cpuinfo.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1678708800">- Applied a patch (bsc#1209196)
  * s390-tools-sles15sp5-lszcrypt-use-separate-index-for-inner-sub-device-loo.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1679572800">- Allow activation of devices at boot via kernel command line
  for live installation media (jsc#PED-2975)
  * Added a Source dracut-zdev-live-20230321.tar
  * Updated the .spec file for the new Source
-  Amended read_value.c</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1681905600">- Tailored the .spec, added a patch
  * s390-tools-ALP-zdev-live.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1683028800">- Applies a fix, splitting of rd.zdev-parameters, in
  * s390-tools-ALP-zdev-live.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1683201600">- Applied patches for ziomon: fix for SCSI devices of type disk without block dev
    (bsc#1211008)
  * s390-tools-sles15sp5-01-ziomon-ziorep_config-fix-missing-SG-major-minor-for-.patch
  * s390-tools-sles15sp5-02-ziomon-ziorep_config-fix-for-SCSI-devices-of-type-di.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1692619200">- Applies patches (bsc#1213377, bsc#1213852, bsc#1214114)
  * s390-tools-sles15sp5-01-zdev-add-missing-label-in-the-udev-rules.patch
  * s390-tools-sles15sp5-01-zdev-add-proper-value-input-for-the-ZDEV_SITE_ID-key.patch
  * s390-tools-sles15sp5-02-zdev-use-rename-file-to-avoid-any-symlinks-created.patch
  * s390-tools-sles15sp5-dasdfmt-Fall-back-to-full-format-if-space-release-fa.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1698926400">- Applied a patch (jsc#PED-6539, jsc#PED-6373)
  * s390-tools-sles15sp6-zkey-Support-EP11-AES-keys-with-prepended-header-to-.patch
- Updated read_values.c (bsc#1214466, bsc#1214534)
  * Update read_values.c to support the new IBM z Processors
- Updated SUSE's tools and their corresponding man pages (bsc#1216257)
  * ctc_configure
  * dasd_configure.opensuse
  * dasd_configure.8
  * dasd_configure.suse
  * mkdump.pl.opensuse
  * mkdump.pl.suse
  * qeth_configure
  * qeth_configure.8
  * zfcp_disk_configure
  * zfcp_disk_configure.8
  * zfcp_host_configure.8
  * zfcp_host_configure
- Updated cputype script
  * Amended cputype to support the new IBM z Processors</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1699876800">* Upgrade 390-tools from version 2.25.0 to version v2.29.0 (Latest)
  * * * *
  - General:
  - s390-tools now supports tools written in Rust.
  - Add compdb Makefile target to create 'compile_commands.json' to support LSP
  - backends in IDEs and editors
  - Add new tools / libraries:
  * rust/pv: Library for pv tools written in rust
  * rust/pvsecret: Tool to manage UV-secrets
  * Changes of existing tools:
  - dbginfo.sh: Global IFS variable
  - genprotimg: Add support for add-secret requests
  - genprotimg: Build debuginfo files for bootloader
  - hyptop: Add real SMT utilization field
  - hyptop: Allow users to set speedup factor
  - pvattest: Add yaml-output for verify command
  - zipl: Build debuginfo files for bootloader
  * Bug Fixes:
  - dump2tar: Fix truncated paths
  - zdev/dracut: fix kdump build to integrate with site support
  * * * *
  * v2.28.0
  - Changes of existing tools:
  - chzcrypt: Support for SE AP pass-through support
  - genprotimg: Add support for non-s390x architectures
  - lszcrypt: Support for SE AP pass-through support
  - zdev: Add support for autoquiesce related sysfs attributes
  * Bug Fixes:
  - ap_tools/ap-check: Handle missing 'matrix' and 'control_domains' attrs
  - ap_tools/ap-check: Hold ap config file lock over get attributes
  - s390-tools: Fix build for ppc64le
  - zdev: Add missing label in the udev-rules
  - zdev: Add proper value input for the ZDEV_SITE_ID key
  - zdev: Use rename-file to avoid any symlinks created
  - zipl/dump: fix ngdump dracut helper script
  * * * *
  * v2.27.0
  * Changes of existing tools:
  - s390-tools cross-compile and non-s390x support:
  - pkg-config is now mandatory for the build process
  - Add PKG_CONFIG Makefile variable to select pkg-config program;
  - default pkg-config or $(CROSS_COMPILE)pkg-config if
  - CROSS_COMPILE is set
  - Rename Makefile variable ARCH to HOST_ARCH. HOST_ARCH is the
    architecture that will run the produced (executable) objects
  - Add the Makefile variable BUILD_ARCH. BUILD_ARCH is the
    architecture of the build system. For each Makefile variable like
    CC, LINK, CPP, ... there is a suffixed version of it - e.g.
    CC_FOR_BUILD. This is useful for cross compiling, and this naming
    convention is very similar to the Meson convention (see
    https://mesonbuild.com/Reference-tables.html#environment-variables-per-machine).
  - Limit build targets for non-s390x architectures (pvattest)
  - dasdfmt: Fall back to full format if space release fails
  - dbginfo.sh: Add nstat for network and SNMP stats
  - dbginfo.sh: Rework crypto data collection
  - hyptop: Show thread util by default
  - zipl: Add support for list-directed IPL dump from ECKD DASD
  * Bug Fixes:
  - lszcrypt: Fix argument parsing
  - zdev/dracut: Fix out-of-memory (OOM) situations in the kdump crashkernel environment
  - ziomon/ziorep_config: Fix for SCSI devices of type disk without block dev
  - pvextract-hdr: Fix parsing issues on little-endian systems
  * * * *
  * v2.26.0
  * Remove tools / libraries:
  - Remove vmconvert and libvmdump in favor of vmdump file support in zdump
  * Changes of existing tools:
  - ipl_tools: Add support for list-directed IPL from ECKD DASD
  - lszcrypt: Display hardware filtering support capability
  - vmur: Remove option -c for dump file conversion (See zdump changes)
  - zdev: Add zfcp ber_stop parameter handling
  - zdump: Add vmdump dfi for vmdump format to elf format
  - zkey: Support EP11 host library version
  * Bug Fixes:
  - zipl: Move dump parmline processing and verification
  - zipl/genprotimg: Various build improvements
  * * * *
  * Removed obsolete IBM patches
  - s390-tools-sles15sp5-zipl-boot-disable-Warray-bounds-for-now.patch
  - s390-tools-sles15sp5-zkey-Support-EP11-host-library-version-4.patch
  * Removed obsolete patches for bug 1208527, and bug 1206173
  - s390-tools-sles15sp5-01-zipl-boot-discard-.eh_frame-and-.interp-input-sectio.patch
  - s390-tools-sles15sp5-02-zipl-boot-declare-that-no-executable-stack-is-requir.patch
  - s390-tools-sles15sp5-03-zipl-boot-use-no-warn-rwx-segments-linker-flag.patch
  - s390-tools-sles15sp5-04-zipl-boot-disable-build-id.patch
  - s390-tools-sles15sp5-05-zipl-boot-simplify-objcopy-commands.patch
  - s390-tools-sles15sp5-06-zipl-move-STAGE2_MAX_SIZE-and-STAGE1B_LOAD_ADDR-to-l.patch
  - s390-tools-sles15sp5-07-zipl-boot-use-linker-scripts-for-all-bootloaders.patch
  - s390-tools-sles15sp5-08-genprotimg-boot-declare-that-no-executable-stack-is-.patch
  - s390-tools-sles15sp5-09-genprotimg-boot-use-no-warn-rwx-segments-linker-flag.patch
  - s390-tools-sles15sp5-10-genprotimg-boot-disable-build-id.patch
  - s390-tools-sles15sp5-11-genprotimg-boot-Makefile-simplify-objcopy-command.patch
  - s390-tools-sles15sp5-12-genprotimg-boot-improve-linker-scripts.patch
  - s390-tools-sles15sp5-13-genprotimg-boot-stage3b-add-size-check-to-the-linker.patch
  - s390-tools-sles15sp5-14-genprotimg-boot-stage3b_reloc.bin-add-linker-script.patch
  - s390-tools-sles15sp5-15-zipl-Embed-loader-data-directly-into-boot-object.patch
  * Removed obsolete patch for bug 1209196
  - s390-tools-sles15sp5-lszcrypt-use-separate-index-for-inner-sub-device-loo.patch
  * Removed obsolete patches for bug 1211008
  - s390-tools-sles15sp5-01-ziomon-ziorep_config-fix-missing-SG-major-minor-for-.patch
  - s390-tools-sles15sp5-02-ziomon-ziorep_config-fix-for-SCSI-devices-of-type-di.patch
  * Removed obsolete patch for bug 1213377
  - s390-tools-sles15sp5-01-zdev-add-missing-label-in-the-udev-rules.patch
  * Removed obsolete patches for bug 1213852
  - s390-tools-sles15sp5-01-zdev-add-proper-value-input-for-the-ZDEV_SITE_ID-key.patch
  - s390-tools-sles15sp5-02-zdev-use-rename-file-to-avoid-any-symlinks-created.patch
  * Removed obsolete patch for bug 1214114
  - s390-tools-sles15sp5-dasdfmt-Fall-back-to-full-format-if-space-release-fa.patch
  * Removed obsolete patch
  - s390-tools-sles15sp5-fix-chown-commands-syntax.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1700049600">- Fixed a logic error in read_values.c</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1700827200">- Provide s390-tools on x86_64 to enable Secure Execution in the Cloud
    (jsc#PED-578, jsc#PED-7136, and jsc#PED-7138)
  * Selected tools from the s390-tools package need to be made available on x86_64.
    This will enable the integration of IBM Z machines running Secure Execution in a
    cloud environment where users don't necessarily need to have an s390x environment.
  - genprotimg    - (for building secure images)
  - pvsecret      -
  - pvattest      - (for external attestation)
  - pvextract-hdr -</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1701691200">- Upgrade s390-tools to version 2.30
    (jsc#PED-5783, jsc#PED-6785, jsc#PED-7136, jsc#PED-6539, jsc#PED-4604,
    jsc#PED-6649, jsc#PED-7138 )
- Add new tools / libraries:
  * lspai: Tool to display PAI counter sets
  * s390-tools: Provide a ShellCheck configuration
- Changes of existing tools / libraries:
  * cpumf/pai: Add command line option for realtime scheduling
  * dbginfo.sh: enhance ethtool collection for ROCE
  * libutil/util_lockfile: add routine to return owning pid of file lock
  * lszcrypt: Improve lszcrypt output on SE guests
  * rust: Use a single workspace for all rust tools
  * zdev: limit the derivation of ZDEV_SITE_ID
  * zdump/df_s390: Update 'zgetdump -i' output with zlib info
  * zdump/dfi_s390: Support reading compressed s390_ext dumps
  * zipl/boot: Integrate zlib compression to single volume DASD dumper
  * zipl/boot: compile the bootloaders only if HOST_ARCH is s390x
  * zipl: Add --no-compress option to zipl command
  * zkey: Also check for deconfigured and check-stopped cards
- Bug Fixes:
  * ap_tools/ap-check: handle get-attributes between pre and post event
  * libutil: fix util_file_read_*() using wrong format specifiers
  * rust/pv: fix Invalid write of size
- Amended the SUSE patches for version 2.30
- Revendored vendor.tar.gz
- Removed an obsolete patch
  * s390-tools-sles15sp6-zkey-Support-EP11-AES-keys-with-prepended-header-to-.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1702814400">- Updated the .spec file to use gcc13 (bsc#1217838)
- Amended read_values for '-S' option (bsc#1217923)</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1706097600">- Updated the .spec file
  * Explicitly specified 'ExclusiveArch: s390x x86_64'</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1706788800">- Updated read_values.c (bsc#1219227)</changelog>
</package>
<package pkgid="bd8a0d1aa1cd11a4117e9cac3af8d864fc132ba77c712e1cf71ecd03dbd1f898" name="libkmipclient1" arch="s390x">
  <version epoch="0" ver="2.30.0" rel="150500.9.13.1"/>
  <changelog author="nikolay.gueorguiev@suse.com" date="1673438400">- Updated read_values.c for z16 machine type (bsc#1206832)
  * Added the IBM LinuxONE Emperor 4 machine type
  * Updated the z16 machine type to IBM z16 A01</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1675684800">- Added patch (bsc#1207947)
  * s390-tools-sles15sp5-zkey-Support-EP11-host-library-version-4.patch</changelog>
  <changelog author="jose.gomez@suse.com" date="1676548800">- Implemented read_values -u. The result of -u is a unique identifier composed of:
  * Machine Serial Number.
  * LPAR Name.
  * VM Name (can be optional).</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1676980800">- Applied the following patches (bsc#1208527, bsc#1206173)
  * s390-tools-sles15sp5-01-zipl-boot-discard-.eh_frame-and-.interp-input-sectio.patch
  * s390-tools-sles15sp5-02-zipl-boot-declare-that-no-executable-stack-is-requir.patch
  * s390-tools-sles15sp5-03-zipl-boot-use-no-warn-rwx-segments-linker-flag.patch
  * s390-tools-sles15sp5-04-zipl-boot-disable-build-id.patch
  * s390-tools-sles15sp5-05-zipl-boot-simplify-objcopy-commands.patch
  * s390-tools-sles15sp5-06-zipl-move-STAGE2_MAX_SIZE-and-STAGE1B_LOAD_ADDR-to-l.patch
  * s390-tools-sles15sp5-07-zipl-boot-use-linker-scripts-for-all-bootloaders.patch
  * s390-tools-sles15sp5-08-genprotimg-boot-declare-that-no-executable-stack-is-.patch
  * s390-tools-sles15sp5-09-genprotimg-boot-use-no-warn-rwx-segments-linker-flag.patch
  * s390-tools-sles15sp5-10-genprotimg-boot-disable-build-id.patch
  * s390-tools-sles15sp5-11-genprotimg-boot-Makefile-simplify-objcopy-command.patch
  * s390-tools-sles15sp5-12-genprotimg-boot-improve-linker-scripts.patch
  * s390-tools-sles15sp5-13-genprotimg-boot-stage3b-add-size-check-to-the-linker.patch
  * s390-tools-sles15sp5-14-genprotimg-boot-stage3b_reloc.bin-add-linker-script.patch
  * s390-tools-sles15sp5-15-zipl-Embed-loader-data-directly-into-boot-object.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1678276800">- Updated cputype (bsc#1208983)
  * Changed the script to avoid "/usr/bin/cputype: line xx: nnnn: command not found",
    when machine type was found more than once in the /proc/cpuinfo.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1678708800">- Applied a patch (bsc#1209196)
  * s390-tools-sles15sp5-lszcrypt-use-separate-index-for-inner-sub-device-loo.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1679572800">- Allow activation of devices at boot via kernel command line
  for live installation media (jsc#PED-2975)
  * Added a Source dracut-zdev-live-20230321.tar
  * Updated the .spec file for the new Source
-  Amended read_value.c</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1681905600">- Tailored the .spec, added a patch
  * s390-tools-ALP-zdev-live.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1683028800">- Applies a fix, splitting of rd.zdev-parameters, in
  * s390-tools-ALP-zdev-live.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1683201600">- Applied patches for ziomon: fix for SCSI devices of type disk without block dev
    (bsc#1211008)
  * s390-tools-sles15sp5-01-ziomon-ziorep_config-fix-missing-SG-major-minor-for-.patch
  * s390-tools-sles15sp5-02-ziomon-ziorep_config-fix-for-SCSI-devices-of-type-di.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1692619200">- Applies patches (bsc#1213377, bsc#1213852, bsc#1214114)
  * s390-tools-sles15sp5-01-zdev-add-missing-label-in-the-udev-rules.patch
  * s390-tools-sles15sp5-01-zdev-add-proper-value-input-for-the-ZDEV_SITE_ID-key.patch
  * s390-tools-sles15sp5-02-zdev-use-rename-file-to-avoid-any-symlinks-created.patch
  * s390-tools-sles15sp5-dasdfmt-Fall-back-to-full-format-if-space-release-fa.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1698926400">- Applied a patch (jsc#PED-6539, jsc#PED-6373)
  * s390-tools-sles15sp6-zkey-Support-EP11-AES-keys-with-prepended-header-to-.patch
- Updated read_values.c (bsc#1214466, bsc#1214534)
  * Update read_values.c to support the new IBM z Processors
- Updated SUSE's tools and their corresponding man pages (bsc#1216257)
  * ctc_configure
  * dasd_configure.opensuse
  * dasd_configure.8
  * dasd_configure.suse
  * mkdump.pl.opensuse
  * mkdump.pl.suse
  * qeth_configure
  * qeth_configure.8
  * zfcp_disk_configure
  * zfcp_disk_configure.8
  * zfcp_host_configure.8
  * zfcp_host_configure
- Updated cputype script
  * Amended cputype to support the new IBM z Processors</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1699876800">* Upgrade 390-tools from version 2.25.0 to version v2.29.0 (Latest)
  * * * *
  - General:
  - s390-tools now supports tools written in Rust.
  - Add compdb Makefile target to create 'compile_commands.json' to support LSP
  - backends in IDEs and editors
  - Add new tools / libraries:
  * rust/pv: Library for pv tools written in rust
  * rust/pvsecret: Tool to manage UV-secrets
  * Changes of existing tools:
  - dbginfo.sh: Global IFS variable
  - genprotimg: Add support for add-secret requests
  - genprotimg: Build debuginfo files for bootloader
  - hyptop: Add real SMT utilization field
  - hyptop: Allow users to set speedup factor
  - pvattest: Add yaml-output for verify command
  - zipl: Build debuginfo files for bootloader
  * Bug Fixes:
  - dump2tar: Fix truncated paths
  - zdev/dracut: fix kdump build to integrate with site support
  * * * *
  * v2.28.0
  - Changes of existing tools:
  - chzcrypt: Support for SE AP pass-through support
  - genprotimg: Add support for non-s390x architectures
  - lszcrypt: Support for SE AP pass-through support
  - zdev: Add support for autoquiesce related sysfs attributes
  * Bug Fixes:
  - ap_tools/ap-check: Handle missing 'matrix' and 'control_domains' attrs
  - ap_tools/ap-check: Hold ap config file lock over get attributes
  - s390-tools: Fix build for ppc64le
  - zdev: Add missing label in the udev-rules
  - zdev: Add proper value input for the ZDEV_SITE_ID key
  - zdev: Use rename-file to avoid any symlinks created
  - zipl/dump: fix ngdump dracut helper script
  * * * *
  * v2.27.0
  * Changes of existing tools:
  - s390-tools cross-compile and non-s390x support:
  - pkg-config is now mandatory for the build process
  - Add PKG_CONFIG Makefile variable to select pkg-config program;
  - default pkg-config or $(CROSS_COMPILE)pkg-config if
  - CROSS_COMPILE is set
  - Rename Makefile variable ARCH to HOST_ARCH. HOST_ARCH is the
    architecture that will run the produced (executable) objects
  - Add the Makefile variable BUILD_ARCH. BUILD_ARCH is the
    architecture of the build system. For each Makefile variable like
    CC, LINK, CPP, ... there is a suffixed version of it - e.g.
    CC_FOR_BUILD. This is useful for cross compiling, and this naming
    convention is very similar to the Meson convention (see
    https://mesonbuild.com/Reference-tables.html#environment-variables-per-machine).
  - Limit build targets for non-s390x architectures (pvattest)
  - dasdfmt: Fall back to full format if space release fails
  - dbginfo.sh: Add nstat for network and SNMP stats
  - dbginfo.sh: Rework crypto data collection
  - hyptop: Show thread util by default
  - zipl: Add support for list-directed IPL dump from ECKD DASD
  * Bug Fixes:
  - lszcrypt: Fix argument parsing
  - zdev/dracut: Fix out-of-memory (OOM) situations in the kdump crashkernel environment
  - ziomon/ziorep_config: Fix for SCSI devices of type disk without block dev
  - pvextract-hdr: Fix parsing issues on little-endian systems
  * * * *
  * v2.26.0
  * Remove tools / libraries:
  - Remove vmconvert and libvmdump in favor of vmdump file support in zdump
  * Changes of existing tools:
  - ipl_tools: Add support for list-directed IPL from ECKD DASD
  - lszcrypt: Display hardware filtering support capability
  - vmur: Remove option -c for dump file conversion (See zdump changes)
  - zdev: Add zfcp ber_stop parameter handling
  - zdump: Add vmdump dfi for vmdump format to elf format
  - zkey: Support EP11 host library version
  * Bug Fixes:
  - zipl: Move dump parmline processing and verification
  - zipl/genprotimg: Various build improvements
  * * * *
  * Removed obsolete IBM patches
  - s390-tools-sles15sp5-zipl-boot-disable-Warray-bounds-for-now.patch
  - s390-tools-sles15sp5-zkey-Support-EP11-host-library-version-4.patch
  * Removed obsolete patches for bug 1208527, and bug 1206173
  - s390-tools-sles15sp5-01-zipl-boot-discard-.eh_frame-and-.interp-input-sectio.patch
  - s390-tools-sles15sp5-02-zipl-boot-declare-that-no-executable-stack-is-requir.patch
  - s390-tools-sles15sp5-03-zipl-boot-use-no-warn-rwx-segments-linker-flag.patch
  - s390-tools-sles15sp5-04-zipl-boot-disable-build-id.patch
  - s390-tools-sles15sp5-05-zipl-boot-simplify-objcopy-commands.patch
  - s390-tools-sles15sp5-06-zipl-move-STAGE2_MAX_SIZE-and-STAGE1B_LOAD_ADDR-to-l.patch
  - s390-tools-sles15sp5-07-zipl-boot-use-linker-scripts-for-all-bootloaders.patch
  - s390-tools-sles15sp5-08-genprotimg-boot-declare-that-no-executable-stack-is-.patch
  - s390-tools-sles15sp5-09-genprotimg-boot-use-no-warn-rwx-segments-linker-flag.patch
  - s390-tools-sles15sp5-10-genprotimg-boot-disable-build-id.patch
  - s390-tools-sles15sp5-11-genprotimg-boot-Makefile-simplify-objcopy-command.patch
  - s390-tools-sles15sp5-12-genprotimg-boot-improve-linker-scripts.patch
  - s390-tools-sles15sp5-13-genprotimg-boot-stage3b-add-size-check-to-the-linker.patch
  - s390-tools-sles15sp5-14-genprotimg-boot-stage3b_reloc.bin-add-linker-script.patch
  - s390-tools-sles15sp5-15-zipl-Embed-loader-data-directly-into-boot-object.patch
  * Removed obsolete patch for bug 1209196
  - s390-tools-sles15sp5-lszcrypt-use-separate-index-for-inner-sub-device-loo.patch
  * Removed obsolete patches for bug 1211008
  - s390-tools-sles15sp5-01-ziomon-ziorep_config-fix-missing-SG-major-minor-for-.patch
  - s390-tools-sles15sp5-02-ziomon-ziorep_config-fix-for-SCSI-devices-of-type-di.patch
  * Removed obsolete patch for bug 1213377
  - s390-tools-sles15sp5-01-zdev-add-missing-label-in-the-udev-rules.patch
  * Removed obsolete patches for bug 1213852
  - s390-tools-sles15sp5-01-zdev-add-proper-value-input-for-the-ZDEV_SITE_ID-key.patch
  - s390-tools-sles15sp5-02-zdev-use-rename-file-to-avoid-any-symlinks-created.patch
  * Removed obsolete patch for bug 1214114
  - s390-tools-sles15sp5-dasdfmt-Fall-back-to-full-format-if-space-release-fa.patch
  * Removed obsolete patch
  - s390-tools-sles15sp5-fix-chown-commands-syntax.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1700049600">- Fixed a logic error in read_values.c</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1700827200">- Provide s390-tools on x86_64 to enable Secure Execution in the Cloud
    (jsc#PED-578, jsc#PED-7136, and jsc#PED-7138)
  * Selected tools from the s390-tools package need to be made available on x86_64.
    This will enable the integration of IBM Z machines running Secure Execution in a
    cloud environment where users don't necessarily need to have an s390x environment.
  - genprotimg    - (for building secure images)
  - pvsecret      -
  - pvattest      - (for external attestation)
  - pvextract-hdr -</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1701691200">- Upgrade s390-tools to version 2.30
    (jsc#PED-5783, jsc#PED-6785, jsc#PED-7136, jsc#PED-6539, jsc#PED-4604,
    jsc#PED-6649, jsc#PED-7138 )
- Add new tools / libraries:
  * lspai: Tool to display PAI counter sets
  * s390-tools: Provide a ShellCheck configuration
- Changes of existing tools / libraries:
  * cpumf/pai: Add command line option for realtime scheduling
  * dbginfo.sh: enhance ethtool collection for ROCE
  * libutil/util_lockfile: add routine to return owning pid of file lock
  * lszcrypt: Improve lszcrypt output on SE guests
  * rust: Use a single workspace for all rust tools
  * zdev: limit the derivation of ZDEV_SITE_ID
  * zdump/df_s390: Update 'zgetdump -i' output with zlib info
  * zdump/dfi_s390: Support reading compressed s390_ext dumps
  * zipl/boot: Integrate zlib compression to single volume DASD dumper
  * zipl/boot: compile the bootloaders only if HOST_ARCH is s390x
  * zipl: Add --no-compress option to zipl command
  * zkey: Also check for deconfigured and check-stopped cards
- Bug Fixes:
  * ap_tools/ap-check: handle get-attributes between pre and post event
  * libutil: fix util_file_read_*() using wrong format specifiers
  * rust/pv: fix Invalid write of size
- Amended the SUSE patches for version 2.30
- Revendored vendor.tar.gz
- Removed an obsolete patch
  * s390-tools-sles15sp6-zkey-Support-EP11-AES-keys-with-prepended-header-to-.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1702814400">- Updated the .spec file to use gcc13 (bsc#1217838)
- Amended read_values for '-S' option (bsc#1217923)</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1706097600">- Updated the .spec file
  * Explicitly specified 'ExclusiveArch: s390x x86_64'</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1706788800">- Updated read_values.c (bsc#1219227)</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1712577600">- Applied patches to implement new IBM host-key subject locality (bsc#1222414)
  * s390-tools-sles15sp5-01-genprotimg-support-Armonk-in-IBM-signing-key-subject.patch
  * s390-tools-sles15sp5-02-libpv-support-Armonk-in-IBM-signing-key-subject.patch
  * s390-tools-sles15sp5-03-pvattest-Fix-root-ca-parsing.patch</changelog>
</package>
<package pkgid="fe6c69f609c53d0c05d9c91438ab08dbe02874fc108203a5ab4f46b9bb47a291" name="libkmipclient1" arch="s390x">
  <version epoch="0" ver="2.30.0" rel="150500.9.16.2"/>
  <changelog author="nikolay.gueorguiev@suse.com" date="1675684800">- Added patch (bsc#1207947)
  * s390-tools-sles15sp5-zkey-Support-EP11-host-library-version-4.patch</changelog>
  <changelog author="jose.gomez@suse.com" date="1676548800">- Implemented read_values -u. The result of -u is a unique identifier composed of:
  * Machine Serial Number.
  * LPAR Name.
  * VM Name (can be optional).</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1676980800">- Applied the following patches (bsc#1208527, bsc#1206173)
  * s390-tools-sles15sp5-01-zipl-boot-discard-.eh_frame-and-.interp-input-sectio.patch
  * s390-tools-sles15sp5-02-zipl-boot-declare-that-no-executable-stack-is-requir.patch
  * s390-tools-sles15sp5-03-zipl-boot-use-no-warn-rwx-segments-linker-flag.patch
  * s390-tools-sles15sp5-04-zipl-boot-disable-build-id.patch
  * s390-tools-sles15sp5-05-zipl-boot-simplify-objcopy-commands.patch
  * s390-tools-sles15sp5-06-zipl-move-STAGE2_MAX_SIZE-and-STAGE1B_LOAD_ADDR-to-l.patch
  * s390-tools-sles15sp5-07-zipl-boot-use-linker-scripts-for-all-bootloaders.patch
  * s390-tools-sles15sp5-08-genprotimg-boot-declare-that-no-executable-stack-is-.patch
  * s390-tools-sles15sp5-09-genprotimg-boot-use-no-warn-rwx-segments-linker-flag.patch
  * s390-tools-sles15sp5-10-genprotimg-boot-disable-build-id.patch
  * s390-tools-sles15sp5-11-genprotimg-boot-Makefile-simplify-objcopy-command.patch
  * s390-tools-sles15sp5-12-genprotimg-boot-improve-linker-scripts.patch
  * s390-tools-sles15sp5-13-genprotimg-boot-stage3b-add-size-check-to-the-linker.patch
  * s390-tools-sles15sp5-14-genprotimg-boot-stage3b_reloc.bin-add-linker-script.patch
  * s390-tools-sles15sp5-15-zipl-Embed-loader-data-directly-into-boot-object.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1678276800">- Updated cputype (bsc#1208983)
  * Changed the script to avoid "/usr/bin/cputype: line xx: nnnn: command not found",
    when machine type was found more than once in the /proc/cpuinfo.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1678708800">- Applied a patch (bsc#1209196)
  * s390-tools-sles15sp5-lszcrypt-use-separate-index-for-inner-sub-device-loo.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1679572800">- Allow activation of devices at boot via kernel command line
  for live installation media (jsc#PED-2975)
  * Added a Source dracut-zdev-live-20230321.tar
  * Updated the .spec file for the new Source
-  Amended read_value.c</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1681905600">- Tailored the .spec, added a patch
  * s390-tools-ALP-zdev-live.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1683028800">- Applies a fix, splitting of rd.zdev-parameters, in
  * s390-tools-ALP-zdev-live.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1683201600">- Applied patches for ziomon: fix for SCSI devices of type disk without block dev
    (bsc#1211008)
  * s390-tools-sles15sp5-01-ziomon-ziorep_config-fix-missing-SG-major-minor-for-.patch
  * s390-tools-sles15sp5-02-ziomon-ziorep_config-fix-for-SCSI-devices-of-type-di.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1692619200">- Applies patches (bsc#1213377, bsc#1213852, bsc#1214114)
  * s390-tools-sles15sp5-01-zdev-add-missing-label-in-the-udev-rules.patch
  * s390-tools-sles15sp5-01-zdev-add-proper-value-input-for-the-ZDEV_SITE_ID-key.patch
  * s390-tools-sles15sp5-02-zdev-use-rename-file-to-avoid-any-symlinks-created.patch
  * s390-tools-sles15sp5-dasdfmt-Fall-back-to-full-format-if-space-release-fa.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1698926400">- Applied a patch (jsc#PED-6539, jsc#PED-6373)
  * s390-tools-sles15sp6-zkey-Support-EP11-AES-keys-with-prepended-header-to-.patch
- Updated read_values.c (bsc#1214466, bsc#1214534)
  * Update read_values.c to support the new IBM z Processors
- Updated SUSE's tools and their corresponding man pages (bsc#1216257)
  * ctc_configure
  * dasd_configure.opensuse
  * dasd_configure.8
  * dasd_configure.suse
  * mkdump.pl.opensuse
  * mkdump.pl.suse
  * qeth_configure
  * qeth_configure.8
  * zfcp_disk_configure
  * zfcp_disk_configure.8
  * zfcp_host_configure.8
  * zfcp_host_configure
- Updated cputype script
  * Amended cputype to support the new IBM z Processors</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1699876800">* Upgrade 390-tools from version 2.25.0 to version v2.29.0 (Latest)
  * * * *
  - General:
  - s390-tools now supports tools written in Rust.
  - Add compdb Makefile target to create 'compile_commands.json' to support LSP
  - backends in IDEs and editors
  - Add new tools / libraries:
  * rust/pv: Library for pv tools written in rust
  * rust/pvsecret: Tool to manage UV-secrets
  * Changes of existing tools:
  - dbginfo.sh: Global IFS variable
  - genprotimg: Add support for add-secret requests
  - genprotimg: Build debuginfo files for bootloader
  - hyptop: Add real SMT utilization field
  - hyptop: Allow users to set speedup factor
  - pvattest: Add yaml-output for verify command
  - zipl: Build debuginfo files for bootloader
  * Bug Fixes:
  - dump2tar: Fix truncated paths
  - zdev/dracut: fix kdump build to integrate with site support
  * * * *
  * v2.28.0
  - Changes of existing tools:
  - chzcrypt: Support for SE AP pass-through support
  - genprotimg: Add support for non-s390x architectures
  - lszcrypt: Support for SE AP pass-through support
  - zdev: Add support for autoquiesce related sysfs attributes
  * Bug Fixes:
  - ap_tools/ap-check: Handle missing 'matrix' and 'control_domains' attrs
  - ap_tools/ap-check: Hold ap config file lock over get attributes
  - s390-tools: Fix build for ppc64le
  - zdev: Add missing label in the udev-rules
  - zdev: Add proper value input for the ZDEV_SITE_ID key
  - zdev: Use rename-file to avoid any symlinks created
  - zipl/dump: fix ngdump dracut helper script
  * * * *
  * v2.27.0
  * Changes of existing tools:
  - s390-tools cross-compile and non-s390x support:
  - pkg-config is now mandatory for the build process
  - Add PKG_CONFIG Makefile variable to select pkg-config program;
  - default pkg-config or $(CROSS_COMPILE)pkg-config if
  - CROSS_COMPILE is set
  - Rename Makefile variable ARCH to HOST_ARCH. HOST_ARCH is the
    architecture that will run the produced (executable) objects
  - Add the Makefile variable BUILD_ARCH. BUILD_ARCH is the
    architecture of the build system. For each Makefile variable like
    CC, LINK, CPP, ... there is a suffixed version of it - e.g.
    CC_FOR_BUILD. This is useful for cross compiling, and this naming
    convention is very similar to the Meson convention (see
    https://mesonbuild.com/Reference-tables.html#environment-variables-per-machine).
  - Limit build targets for non-s390x architectures (pvattest)
  - dasdfmt: Fall back to full format if space release fails
  - dbginfo.sh: Add nstat for network and SNMP stats
  - dbginfo.sh: Rework crypto data collection
  - hyptop: Show thread util by default
  - zipl: Add support for list-directed IPL dump from ECKD DASD
  * Bug Fixes:
  - lszcrypt: Fix argument parsing
  - zdev/dracut: Fix out-of-memory (OOM) situations in the kdump crashkernel environment
  - ziomon/ziorep_config: Fix for SCSI devices of type disk without block dev
  - pvextract-hdr: Fix parsing issues on little-endian systems
  * * * *
  * v2.26.0
  * Remove tools / libraries:
  - Remove vmconvert and libvmdump in favor of vmdump file support in zdump
  * Changes of existing tools:
  - ipl_tools: Add support for list-directed IPL from ECKD DASD
  - lszcrypt: Display hardware filtering support capability
  - vmur: Remove option -c for dump file conversion (See zdump changes)
  - zdev: Add zfcp ber_stop parameter handling
  - zdump: Add vmdump dfi for vmdump format to elf format
  - zkey: Support EP11 host library version
  * Bug Fixes:
  - zipl: Move dump parmline processing and verification
  - zipl/genprotimg: Various build improvements
  * * * *
  * Removed obsolete IBM patches
  - s390-tools-sles15sp5-zipl-boot-disable-Warray-bounds-for-now.patch
  - s390-tools-sles15sp5-zkey-Support-EP11-host-library-version-4.patch
  * Removed obsolete patches for bug 1208527, and bug 1206173
  - s390-tools-sles15sp5-01-zipl-boot-discard-.eh_frame-and-.interp-input-sectio.patch
  - s390-tools-sles15sp5-02-zipl-boot-declare-that-no-executable-stack-is-requir.patch
  - s390-tools-sles15sp5-03-zipl-boot-use-no-warn-rwx-segments-linker-flag.patch
  - s390-tools-sles15sp5-04-zipl-boot-disable-build-id.patch
  - s390-tools-sles15sp5-05-zipl-boot-simplify-objcopy-commands.patch
  - s390-tools-sles15sp5-06-zipl-move-STAGE2_MAX_SIZE-and-STAGE1B_LOAD_ADDR-to-l.patch
  - s390-tools-sles15sp5-07-zipl-boot-use-linker-scripts-for-all-bootloaders.patch
  - s390-tools-sles15sp5-08-genprotimg-boot-declare-that-no-executable-stack-is-.patch
  - s390-tools-sles15sp5-09-genprotimg-boot-use-no-warn-rwx-segments-linker-flag.patch
  - s390-tools-sles15sp5-10-genprotimg-boot-disable-build-id.patch
  - s390-tools-sles15sp5-11-genprotimg-boot-Makefile-simplify-objcopy-command.patch
  - s390-tools-sles15sp5-12-genprotimg-boot-improve-linker-scripts.patch
  - s390-tools-sles15sp5-13-genprotimg-boot-stage3b-add-size-check-to-the-linker.patch
  - s390-tools-sles15sp5-14-genprotimg-boot-stage3b_reloc.bin-add-linker-script.patch
  - s390-tools-sles15sp5-15-zipl-Embed-loader-data-directly-into-boot-object.patch
  * Removed obsolete patch for bug 1209196
  - s390-tools-sles15sp5-lszcrypt-use-separate-index-for-inner-sub-device-loo.patch
  * Removed obsolete patches for bug 1211008
  - s390-tools-sles15sp5-01-ziomon-ziorep_config-fix-missing-SG-major-minor-for-.patch
  - s390-tools-sles15sp5-02-ziomon-ziorep_config-fix-for-SCSI-devices-of-type-di.patch
  * Removed obsolete patch for bug 1213377
  - s390-tools-sles15sp5-01-zdev-add-missing-label-in-the-udev-rules.patch
  * Removed obsolete patches for bug 1213852
  - s390-tools-sles15sp5-01-zdev-add-proper-value-input-for-the-ZDEV_SITE_ID-key.patch
  - s390-tools-sles15sp5-02-zdev-use-rename-file-to-avoid-any-symlinks-created.patch
  * Removed obsolete patch for bug 1214114
  - s390-tools-sles15sp5-dasdfmt-Fall-back-to-full-format-if-space-release-fa.patch
  * Removed obsolete patch
  - s390-tools-sles15sp5-fix-chown-commands-syntax.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1700049600">- Fixed a logic error in read_values.c</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1700827200">- Provide s390-tools on x86_64 to enable Secure Execution in the Cloud
    (jsc#PED-578, jsc#PED-7136, and jsc#PED-7138)
  * Selected tools from the s390-tools package need to be made available on x86_64.
    This will enable the integration of IBM Z machines running Secure Execution in a
    cloud environment where users don't necessarily need to have an s390x environment.
  - genprotimg    - (for building secure images)
  - pvsecret      -
  - pvattest      - (for external attestation)
  - pvextract-hdr -</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1701691200">- Upgrade s390-tools to version 2.30
    (jsc#PED-5783, jsc#PED-6785, jsc#PED-7136, jsc#PED-6539, jsc#PED-4604,
    jsc#PED-6649, jsc#PED-7138 )
- Add new tools / libraries:
  * lspai: Tool to display PAI counter sets
  * s390-tools: Provide a ShellCheck configuration
- Changes of existing tools / libraries:
  * cpumf/pai: Add command line option for realtime scheduling
  * dbginfo.sh: enhance ethtool collection for ROCE
  * libutil/util_lockfile: add routine to return owning pid of file lock
  * lszcrypt: Improve lszcrypt output on SE guests
  * rust: Use a single workspace for all rust tools
  * zdev: limit the derivation of ZDEV_SITE_ID
  * zdump/df_s390: Update 'zgetdump -i' output with zlib info
  * zdump/dfi_s390: Support reading compressed s390_ext dumps
  * zipl/boot: Integrate zlib compression to single volume DASD dumper
  * zipl/boot: compile the bootloaders only if HOST_ARCH is s390x
  * zipl: Add --no-compress option to zipl command
  * zkey: Also check for deconfigured and check-stopped cards
- Bug Fixes:
  * ap_tools/ap-check: handle get-attributes between pre and post event
  * libutil: fix util_file_read_*() using wrong format specifiers
  * rust/pv: fix Invalid write of size
- Amended the SUSE patches for version 2.30
- Revendored vendor.tar.gz
- Removed an obsolete patch
  * s390-tools-sles15sp6-zkey-Support-EP11-AES-keys-with-prepended-header-to-.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1702814400">- Updated the .spec file to use gcc13 (bsc#1217838)
- Amended read_values for '-S' option (bsc#1217923)</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1706097600">- Updated the .spec file
  * Explicitly specified 'ExclusiveArch: s390x x86_64'</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1706788800">- Updated read_values.c (bsc#1219227)</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1712577600">- Applied patches to implement new IBM host-key subject locality (bsc#1222414)
  * s390-tools-sles15sp5-01-genprotimg-support-Armonk-in-IBM-signing-key-subject.patch
  * s390-tools-sles15sp5-02-libpv-support-Armonk-in-IBM-signing-key-subject.patch
  * s390-tools-sles15sp5-03-pvattest-Fix-root-ca-parsing.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1718971200">- Amended read_values.c (bsc#1226609)
  * Added print for 'qc_type_name', amended the layers</changelog>
</package>
<package pkgid="ec76053a667c25971d1a5de0f35a9b815cbee1976dfb54a3772c018a5b1c2607" name="libkmipclient1" arch="s390x">
  <version epoch="0" ver="2.31.0" rel="150500.9.19.1"/>
  <changelog author="jose.gomez@suse.com" date="1676548800">- Implemented read_values -u. The result of -u is a unique identifier composed of:
  * Machine Serial Number.
  * LPAR Name.
  * VM Name (can be optional).</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1676980800">- Applied the following patches (bsc#1208527, bsc#1206173)
  * s390-tools-sles15sp5-01-zipl-boot-discard-.eh_frame-and-.interp-input-sectio.patch
  * s390-tools-sles15sp5-02-zipl-boot-declare-that-no-executable-stack-is-requir.patch
  * s390-tools-sles15sp5-03-zipl-boot-use-no-warn-rwx-segments-linker-flag.patch
  * s390-tools-sles15sp5-04-zipl-boot-disable-build-id.patch
  * s390-tools-sles15sp5-05-zipl-boot-simplify-objcopy-commands.patch
  * s390-tools-sles15sp5-06-zipl-move-STAGE2_MAX_SIZE-and-STAGE1B_LOAD_ADDR-to-l.patch
  * s390-tools-sles15sp5-07-zipl-boot-use-linker-scripts-for-all-bootloaders.patch
  * s390-tools-sles15sp5-08-genprotimg-boot-declare-that-no-executable-stack-is-.patch
  * s390-tools-sles15sp5-09-genprotimg-boot-use-no-warn-rwx-segments-linker-flag.patch
  * s390-tools-sles15sp5-10-genprotimg-boot-disable-build-id.patch
  * s390-tools-sles15sp5-11-genprotimg-boot-Makefile-simplify-objcopy-command.patch
  * s390-tools-sles15sp5-12-genprotimg-boot-improve-linker-scripts.patch
  * s390-tools-sles15sp5-13-genprotimg-boot-stage3b-add-size-check-to-the-linker.patch
  * s390-tools-sles15sp5-14-genprotimg-boot-stage3b_reloc.bin-add-linker-script.patch
  * s390-tools-sles15sp5-15-zipl-Embed-loader-data-directly-into-boot-object.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1678276800">- Updated cputype (bsc#1208983)
  * Changed the script to avoid "/usr/bin/cputype: line xx: nnnn: command not found",
    when machine type was found more than once in the /proc/cpuinfo.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1678708800">- Applied a patch (bsc#1209196)
  * s390-tools-sles15sp5-lszcrypt-use-separate-index-for-inner-sub-device-loo.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1679572800">- Allow activation of devices at boot via kernel command line
  for live installation media (jsc#PED-2975)
  * Added a Source dracut-zdev-live-20230321.tar
  * Updated the .spec file for the new Source
-  Amended read_value.c</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1681905600">- Tailored the .spec, added a patch
  * s390-tools-ALP-zdev-live.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1683028800">- Applies a fix, splitting of rd.zdev-parameters, in
  * s390-tools-ALP-zdev-live.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1683201600">- Applied patches for ziomon: fix for SCSI devices of type disk without block dev
    (bsc#1211008)
  * s390-tools-sles15sp5-01-ziomon-ziorep_config-fix-missing-SG-major-minor-for-.patch
  * s390-tools-sles15sp5-02-ziomon-ziorep_config-fix-for-SCSI-devices-of-type-di.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1692619200">- Applies patches (bsc#1213377, bsc#1213852, bsc#1214114)
  * s390-tools-sles15sp5-01-zdev-add-missing-label-in-the-udev-rules.patch
  * s390-tools-sles15sp5-01-zdev-add-proper-value-input-for-the-ZDEV_SITE_ID-key.patch
  * s390-tools-sles15sp5-02-zdev-use-rename-file-to-avoid-any-symlinks-created.patch
  * s390-tools-sles15sp5-dasdfmt-Fall-back-to-full-format-if-space-release-fa.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1698926400">- Applied a patch (jsc#PED-6539, jsc#PED-6373)
  * s390-tools-sles15sp6-zkey-Support-EP11-AES-keys-with-prepended-header-to-.patch
- Updated read_values.c (bsc#1214466, bsc#1214534)
  * Update read_values.c to support the new IBM z Processors
- Updated SUSE's tools and their corresponding man pages (bsc#1216257)
  * ctc_configure
  * dasd_configure.opensuse
  * dasd_configure.8
  * dasd_configure.suse
  * mkdump.pl.opensuse
  * mkdump.pl.suse
  * qeth_configure
  * qeth_configure.8
  * zfcp_disk_configure
  * zfcp_disk_configure.8
  * zfcp_host_configure.8
  * zfcp_host_configure
- Updated cputype script
  * Amended cputype to support the new IBM z Processors</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1699876800">* Upgrade 390-tools from version 2.25.0 to version v2.29.0 (Latest)
  * * * *
  - General:
  - s390-tools now supports tools written in Rust.
  - Add compdb Makefile target to create 'compile_commands.json' to support LSP
  - backends in IDEs and editors
  - Add new tools / libraries:
  * rust/pv: Library for pv tools written in rust
  * rust/pvsecret: Tool to manage UV-secrets
  * Changes of existing tools:
  - dbginfo.sh: Global IFS variable
  - genprotimg: Add support for add-secret requests
  - genprotimg: Build debuginfo files for bootloader
  - hyptop: Add real SMT utilization field
  - hyptop: Allow users to set speedup factor
  - pvattest: Add yaml-output for verify command
  - zipl: Build debuginfo files for bootloader
  * Bug Fixes:
  - dump2tar: Fix truncated paths
  - zdev/dracut: fix kdump build to integrate with site support
  * * * *
  * v2.28.0
  - Changes of existing tools:
  - chzcrypt: Support for SE AP pass-through support
  - genprotimg: Add support for non-s390x architectures
  - lszcrypt: Support for SE AP pass-through support
  - zdev: Add support for autoquiesce related sysfs attributes
  * Bug Fixes:
  - ap_tools/ap-check: Handle missing 'matrix' and 'control_domains' attrs
  - ap_tools/ap-check: Hold ap config file lock over get attributes
  - s390-tools: Fix build for ppc64le
  - zdev: Add missing label in the udev-rules
  - zdev: Add proper value input for the ZDEV_SITE_ID key
  - zdev: Use rename-file to avoid any symlinks created
  - zipl/dump: fix ngdump dracut helper script
  * * * *
  * v2.27.0
  * Changes of existing tools:
  - s390-tools cross-compile and non-s390x support:
  - pkg-config is now mandatory for the build process
  - Add PKG_CONFIG Makefile variable to select pkg-config program;
  - default pkg-config or $(CROSS_COMPILE)pkg-config if
  - CROSS_COMPILE is set
  - Rename Makefile variable ARCH to HOST_ARCH. HOST_ARCH is the
    architecture that will run the produced (executable) objects
  - Add the Makefile variable BUILD_ARCH. BUILD_ARCH is the
    architecture of the build system. For each Makefile variable like
    CC, LINK, CPP, ... there is a suffixed version of it - e.g.
    CC_FOR_BUILD. This is useful for cross compiling, and this naming
    convention is very similar to the Meson convention (see
    https://mesonbuild.com/Reference-tables.html#environment-variables-per-machine).
  - Limit build targets for non-s390x architectures (pvattest)
  - dasdfmt: Fall back to full format if space release fails
  - dbginfo.sh: Add nstat for network and SNMP stats
  - dbginfo.sh: Rework crypto data collection
  - hyptop: Show thread util by default
  - zipl: Add support for list-directed IPL dump from ECKD DASD
  * Bug Fixes:
  - lszcrypt: Fix argument parsing
  - zdev/dracut: Fix out-of-memory (OOM) situations in the kdump crashkernel environment
  - ziomon/ziorep_config: Fix for SCSI devices of type disk without block dev
  - pvextract-hdr: Fix parsing issues on little-endian systems
  * * * *
  * v2.26.0
  * Remove tools / libraries:
  - Remove vmconvert and libvmdump in favor of vmdump file support in zdump
  * Changes of existing tools:
  - ipl_tools: Add support for list-directed IPL from ECKD DASD
  - lszcrypt: Display hardware filtering support capability
  - vmur: Remove option -c for dump file conversion (See zdump changes)
  - zdev: Add zfcp ber_stop parameter handling
  - zdump: Add vmdump dfi for vmdump format to elf format
  - zkey: Support EP11 host library version
  * Bug Fixes:
  - zipl: Move dump parmline processing and verification
  - zipl/genprotimg: Various build improvements
  * * * *
  * Removed obsolete IBM patches
  - s390-tools-sles15sp5-zipl-boot-disable-Warray-bounds-for-now.patch
  - s390-tools-sles15sp5-zkey-Support-EP11-host-library-version-4.patch
  * Removed obsolete patches for bug 1208527, and bug 1206173
  - s390-tools-sles15sp5-01-zipl-boot-discard-.eh_frame-and-.interp-input-sectio.patch
  - s390-tools-sles15sp5-02-zipl-boot-declare-that-no-executable-stack-is-requir.patch
  - s390-tools-sles15sp5-03-zipl-boot-use-no-warn-rwx-segments-linker-flag.patch
  - s390-tools-sles15sp5-04-zipl-boot-disable-build-id.patch
  - s390-tools-sles15sp5-05-zipl-boot-simplify-objcopy-commands.patch
  - s390-tools-sles15sp5-06-zipl-move-STAGE2_MAX_SIZE-and-STAGE1B_LOAD_ADDR-to-l.patch
  - s390-tools-sles15sp5-07-zipl-boot-use-linker-scripts-for-all-bootloaders.patch
  - s390-tools-sles15sp5-08-genprotimg-boot-declare-that-no-executable-stack-is-.patch
  - s390-tools-sles15sp5-09-genprotimg-boot-use-no-warn-rwx-segments-linker-flag.patch
  - s390-tools-sles15sp5-10-genprotimg-boot-disable-build-id.patch
  - s390-tools-sles15sp5-11-genprotimg-boot-Makefile-simplify-objcopy-command.patch
  - s390-tools-sles15sp5-12-genprotimg-boot-improve-linker-scripts.patch
  - s390-tools-sles15sp5-13-genprotimg-boot-stage3b-add-size-check-to-the-linker.patch
  - s390-tools-sles15sp5-14-genprotimg-boot-stage3b_reloc.bin-add-linker-script.patch
  - s390-tools-sles15sp5-15-zipl-Embed-loader-data-directly-into-boot-object.patch
  * Removed obsolete patch for bug 1209196
  - s390-tools-sles15sp5-lszcrypt-use-separate-index-for-inner-sub-device-loo.patch
  * Removed obsolete patches for bug 1211008
  - s390-tools-sles15sp5-01-ziomon-ziorep_config-fix-missing-SG-major-minor-for-.patch
  - s390-tools-sles15sp5-02-ziomon-ziorep_config-fix-for-SCSI-devices-of-type-di.patch
  * Removed obsolete patch for bug 1213377
  - s390-tools-sles15sp5-01-zdev-add-missing-label-in-the-udev-rules.patch
  * Removed obsolete patches for bug 1213852
  - s390-tools-sles15sp5-01-zdev-add-proper-value-input-for-the-ZDEV_SITE_ID-key.patch
  - s390-tools-sles15sp5-02-zdev-use-rename-file-to-avoid-any-symlinks-created.patch
  * Removed obsolete patch for bug 1214114
  - s390-tools-sles15sp5-dasdfmt-Fall-back-to-full-format-if-space-release-fa.patch
  * Removed obsolete patch
  - s390-tools-sles15sp5-fix-chown-commands-syntax.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1700049600">- Fixed a logic error in read_values.c</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1700827200">- Provide s390-tools on x86_64 to enable Secure Execution in the Cloud
    (jsc#PED-578, jsc#PED-7136, and jsc#PED-7138)
  * Selected tools from the s390-tools package need to be made available on x86_64.
    This will enable the integration of IBM Z machines running Secure Execution in a
    cloud environment where users don't necessarily need to have an s390x environment.
  - genprotimg    - (for building secure images)
  - pvsecret      -
  - pvattest      - (for external attestation)
  - pvextract-hdr -</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1701691200">- Upgrade s390-tools to version 2.30
    (jsc#PED-5783, jsc#PED-6785, jsc#PED-7136, jsc#PED-6539, jsc#PED-4604,
    jsc#PED-6649, jsc#PED-7138 )
- Add new tools / libraries:
  * lspai: Tool to display PAI counter sets
  * s390-tools: Provide a ShellCheck configuration
- Changes of existing tools / libraries:
  * cpumf/pai: Add command line option for realtime scheduling
  * dbginfo.sh: enhance ethtool collection for ROCE
  * libutil/util_lockfile: add routine to return owning pid of file lock
  * lszcrypt: Improve lszcrypt output on SE guests
  * rust: Use a single workspace for all rust tools
  * zdev: limit the derivation of ZDEV_SITE_ID
  * zdump/df_s390: Update 'zgetdump -i' output with zlib info
  * zdump/dfi_s390: Support reading compressed s390_ext dumps
  * zipl/boot: Integrate zlib compression to single volume DASD dumper
  * zipl/boot: compile the bootloaders only if HOST_ARCH is s390x
  * zipl: Add --no-compress option to zipl command
  * zkey: Also check for deconfigured and check-stopped cards
- Bug Fixes:
  * ap_tools/ap-check: handle get-attributes between pre and post event
  * libutil: fix util_file_read_*() using wrong format specifiers
  * rust/pv: fix Invalid write of size
- Amended the SUSE patches for version 2.30
- Revendored vendor.tar.gz
- Removed an obsolete patch
  * s390-tools-sles15sp6-zkey-Support-EP11-AES-keys-with-prepended-header-to-.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1702814400">- Updated the .spec file to use gcc13 (bsc#1217838)
- Amended read_values for '-S' option (bsc#1217923)</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1706097600">- Updated the .spec file
  * Explicitly specified 'ExclusiveArch: s390x x86_64'</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1706788800">- Updated read_values.c (bsc#1219227)</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1712577600">- Applied patches to implement new IBM host-key subject locality (bsc#1222414)
  * s390-tools-sles15sp5-01-genprotimg-support-Armonk-in-IBM-signing-key-subject.patch
  * s390-tools-sles15sp5-02-libpv-support-Armonk-in-IBM-signing-key-subject.patch
  * s390-tools-sles15sp5-03-pvattest-Fix-root-ca-parsing.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1718971200">- Amended read_values.c (bsc#1226609)
  * Added print for 'qc_type_name', amended the layers</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1720180800">- Upgrade s390-tools to version 2.31 (jsc#PED-7139)
- General:
  * common.mak: Set default C/C++ standard to gnu11/gnu++11
- Add new tools / libraries:
  * pvapconfig: Tool to automatically configure APQNs in SE KVM guests
  * s390-tools: Provide pre-commit configuration
- Changes of existing tools:
  * cpuplugd: Adjust to CPU 0 being no longer hotpluggable
  * dbginfo.sh: Check for Dynamic Partition Mode
  * dbginfo.sh: Update man page and copyright
  * rust/pv: Add user-data signing and verifying
  * rust/pvsecret: Add user defined signatures and verifications
  * zdev/dracut: Consolidate device configuration
- Bug Fixes:
  * dbginfo.sh: Fix relative path on script copy
  * libkmipclient: Fix build with libxml2-2.12.0
  * pvsecret: Fix panic if empty file is used as host key document
  * rust/pv: Fix 'elided_lifetimes_in_associated_constant' warning
- Provide groups as required by RPM 4.19
- Amended the .spec file for x86_64
- Updated the .spec file to enable Secure Execution in the Cloud (bsc#1222675)
- BuildRequires:  qclib-devel-static &gt;= 2.4.1 (bsc#1227365)
- Applied additional patches
  * s390-tools-sles15sp5-01-rust-pv-support-Armonk-in-IBM-signing-key-subject.patch
  * s390-tools-sles15sp5-genprotimg-makefile.patch
  * s390-tools-sles15sp5-kdump-initrd-59-zfcp-compat-rules.patch
- Applied an updated patch
  * s390-tools-sles15sp5-01-parse-ipl-device-for-activation.patch</changelog>
</package>
<package pkgid="12158c2dcb1a2f89853fc94ee5197272ec5df9dc629b03f8d02ceafecd445231" name="liblldp_clif1" arch="aarch64">
  <version epoch="0" ver="1.1+77.75e83b6" rel="150500.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1488283200">- Don't use full URL as source, as the tarball does not exist at
  that location.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Fix calling of fillup_only: it knows no -i parameter.</changelog>
  <changelog author="hare@suse.de" date="1547121600">- Update to git commit cb81e9541b5 (FATE#326034,bug#1104011)
  * 8021qaz: Remove unused variable
  * 8021qaz: Honor willing value from config file
  * lldpad: Support DSCP selectors in APP TLV's
  * Fix application tlv display
  * basman_clif: print the OID properly
  * ecp22: deinit l2_packet_data before freeing ecp22
  * DCB set state operation return value check
  * memleak on received TLVs from modules
  * Use interface index instead of name in libconfig
  * Fix 'is_valid_mac' to include mcast mac address
  * lldpad: Fix segfault in lldptool
  * Fixup disabling PG
  + open-lldp-v1.0.1+56.cb81e95.tar.xz
- Remove superseded files
  - open-lldp-1.0.1.tar.gz
  - open-lldp-git-update.patch.bz2
  - open-lldp-gcc5.patch
  - 0001-l2_linux_packet-correctly-process-return-value-of-ge.patch
  - 0002-lldpad-Only-set-Tx-adminStatus-if-interface-is-not-m.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mliska@suse.cz" date="1552996800">- Add gcc9-fix-werror.patch in order to fix bsc#1128299.
- Adjust project URL as we're using the Intel's fork.</changelog>
  <changelog author="mliska@suse.cz" date="1557403200">- Disable -Werror (boo#1128299) and remove gcc9-fix-werror.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1557835200">- Add disable-werror.patch.</changelog>
  <changelog author="hare@suse.com" date="1574164800">- Update to version v1.0.1+95.3168e11:
  * Test with newer GCC 8 and 9 versions
  * RPM build is broken, so skip
  * Place the tarball in the right place
  * A tarball needs to be built after bootstrap.sh for use with RPM
  * Added missing steps for building an RPM
  * Finish off with testing building the RPM
  * Test package installation as well
  * Test under multiple GCC releases
  * Drop requirement for Travis CI testing with Clang
  * Support checking build with Travis CI
  * vdp-netlink: account for sizes properly
  * qbg: avoid warning for extra parens
  * qbg: port name is always a valid pointer
  * dcbx-nl: drop run_cmd
  * ecp: allow for failure to create
  * lldp_util: allow for null ifa_addr element
  * lldpad: Do not enable port if already enabled
  * Silent -Werror=address-of-packed-member warnings.
  * Come up with STRNCPY_TERMINATED (#25).
  * vdptool: fixed compile error for getline()
  * Fix #23 by off by one strncpy value.
  * 8021qaz: Block lldptool set operations if read only mode is on
  * 8021qaz: Add read only option for 8021qaz module
  * lldp: Allow lldptool to modify optional TLV's content
  * 8021qaz: Print dscp2prio map
  * autoconf: Add systemd support in configure.ac
  * rpm-spec: Add vdp22 man files to lldpad.spec.in</changelog>
  <changelog author="hare@suse.com" date="1574164801">- Update to version v1.0.1+102.4c7fcc3:
  * l2_packet: Guard ETH_P_LLDP define (edit: fixes bsc#1156545)
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(systemd) instead of systemd directly:
  allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="mliska@suse.cz" date="1586174400">- Use -fcommon in order to fix boo#1160407.</changelog>
  <changelog author="hare@suse.de" date="1596542400">- Update to version v1.0.1+63.f977e67 (bsc#1171284,bsc#1170745,bsc#1153520):
  * lldp/rx.c: Reset state machine variable in process_delete_info()
  * lldp: do not call 'assert' in rxProcessFrame()
  * ecp: allow for failure to create
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="lduncan@suse.com" date="1599220800">- Moved sources from github.com/intel to github/openSUSE
  * upgrading to version v1.0.1+110.6009075a9fcc
  - merged in latest upstream (no API changes)</changelog>
  <changelog author="lduncan@suse.com" date="1599393600">- Update to version v1.0.1+69.e8f522565f5a to removed commpiler
  and rpmlint complaints:
  * Fix bash-completion dir: don't use /etc
  * Fix compiler issue with strcpy(): use memcpy
  * Fix compiler complaint argument type mismatch.
  * Fix compiler complaint declaration vs function.
  * Fix compiler complaint copying to packed member.
  * add 'lldpad.socket' to the '%service_*' macros in the SPEC
    file</changelog>
  <changelog author="lduncan@suse.com" date="1604923200">- Update to version v1.1+15.ef8495548d04, by merging
  upstream version 1.1 + latest, including:
  * Fix merge error: remove bogus line
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  This removed the need for the patch disable-werror.patch.</changelog>
  <changelog author="lduncan@suse.com" date="1607601600">- Update to version v1.1+18.0e969d0edcc4:
  * event_iface: only set rcv buf size if too small (bsc#1175570)</changelog>
  <changelog author="lduncan@suse.com" date="1610107200">- Update to version v1.1+36.e926f7172b96:
  * tx: rename variable
  * event_iface: only set rcv buf size if too small (bsc#1175570)
  * tx: when operating in rx-only mode don't send a port shutdown pdu
  * Update .travis.yml
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  * autoconf: convenience to setup asan and ubsan
  * Post 1.1 release</changelog>
  <changelog author="lduncan@suse.com" date="1632139200">- Update to version v1.1+44.0f781b4162d3:
  * agent: reset frame status on message delete
  * Avoiding null pointer dereference</changelog>
  <changelog author="lduncan@suse.com" date="1666785600">- Update to version v1.1+58.8ca361bab766:
  * clif: Include string.h for mem* function prototypes
  * basman: use return address when pulling address
  * Revert "Use interface index instead of name in libconfig"
  * 8021Qaz: check for rx block validity
  * 8021qaz: squelch initialization errors
  * macvtap: fix error condition
  * vdp22: convert command parsing to null term</changelog>
  <changelog author="tabraham@suse.com" date="1704974400">- Update to version latest Intel upstream (v1.1+77.75e83b6fb98e, jsc#PED-6852):
  * lldpad: dcbx: prevent null dereference in dcbx_free_data (bsc#1212749)
  * dcbx: Fix use-after-free
  * dcbx: Fix NULL pointer dereference
  * dcbx: Fix leak when receiving legacy TLVs with mismatched mode
  * lldp: Reject frames with duplicate TLVs
  * dcbx: Free manifest in rchange callback
  * dcbx: Avoid memory leak if ifup is called twice
  * ctrl_iface: Fix a memory leak in ctrl_iface_deinit
  * lldp: Avoid sending uninitialized data
  * lldptool: fix null pointer deference
  * Revert "Use interface index instead of name in libconfig"
  * Avoiding null pointer dereference
  * agent: reset frame status on message delete
  * basman: use return address when pulling address
  * 8021Qaz: check for rx block validity
  * 8021qaz: squelch initialization errors
  * macvtap: fix error condition
  * vdp22: convert command parsing to null term</changelog>
</package>
<package pkgid="08476910d1e2ed8c952e34aca567ee6d3e32a4110ce79bb2eb62a6b7d1c48d80" name="liblldp_clif1" arch="s390x">
  <version epoch="0" ver="1.1+77.75e83b6" rel="150500.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1488283200">- Don't use full URL as source, as the tarball does not exist at
  that location.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Fix calling of fillup_only: it knows no -i parameter.</changelog>
  <changelog author="hare@suse.de" date="1547121600">- Update to git commit cb81e9541b5 (FATE#326034,bug#1104011)
  * 8021qaz: Remove unused variable
  * 8021qaz: Honor willing value from config file
  * lldpad: Support DSCP selectors in APP TLV's
  * Fix application tlv display
  * basman_clif: print the OID properly
  * ecp22: deinit l2_packet_data before freeing ecp22
  * DCB set state operation return value check
  * memleak on received TLVs from modules
  * Use interface index instead of name in libconfig
  * Fix 'is_valid_mac' to include mcast mac address
  * lldpad: Fix segfault in lldptool
  * Fixup disabling PG
  + open-lldp-v1.0.1+56.cb81e95.tar.xz
- Remove superseded files
  - open-lldp-1.0.1.tar.gz
  - open-lldp-git-update.patch.bz2
  - open-lldp-gcc5.patch
  - 0001-l2_linux_packet-correctly-process-return-value-of-ge.patch
  - 0002-lldpad-Only-set-Tx-adminStatus-if-interface-is-not-m.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mliska@suse.cz" date="1552996800">- Add gcc9-fix-werror.patch in order to fix bsc#1128299.
- Adjust project URL as we're using the Intel's fork.</changelog>
  <changelog author="mliska@suse.cz" date="1557403200">- Disable -Werror (boo#1128299) and remove gcc9-fix-werror.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1557835200">- Add disable-werror.patch.</changelog>
  <changelog author="hare@suse.com" date="1574164800">- Update to version v1.0.1+95.3168e11:
  * Test with newer GCC 8 and 9 versions
  * RPM build is broken, so skip
  * Place the tarball in the right place
  * A tarball needs to be built after bootstrap.sh for use with RPM
  * Added missing steps for building an RPM
  * Finish off with testing building the RPM
  * Test package installation as well
  * Test under multiple GCC releases
  * Drop requirement for Travis CI testing with Clang
  * Support checking build with Travis CI
  * vdp-netlink: account for sizes properly
  * qbg: avoid warning for extra parens
  * qbg: port name is always a valid pointer
  * dcbx-nl: drop run_cmd
  * ecp: allow for failure to create
  * lldp_util: allow for null ifa_addr element
  * lldpad: Do not enable port if already enabled
  * Silent -Werror=address-of-packed-member warnings.
  * Come up with STRNCPY_TERMINATED (#25).
  * vdptool: fixed compile error for getline()
  * Fix #23 by off by one strncpy value.
  * 8021qaz: Block lldptool set operations if read only mode is on
  * 8021qaz: Add read only option for 8021qaz module
  * lldp: Allow lldptool to modify optional TLV's content
  * 8021qaz: Print dscp2prio map
  * autoconf: Add systemd support in configure.ac
  * rpm-spec: Add vdp22 man files to lldpad.spec.in</changelog>
  <changelog author="hare@suse.com" date="1574164801">- Update to version v1.0.1+102.4c7fcc3:
  * l2_packet: Guard ETH_P_LLDP define (edit: fixes bsc#1156545)
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(systemd) instead of systemd directly:
  allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="mliska@suse.cz" date="1586174400">- Use -fcommon in order to fix boo#1160407.</changelog>
  <changelog author="hare@suse.de" date="1596542400">- Update to version v1.0.1+63.f977e67 (bsc#1171284,bsc#1170745,bsc#1153520):
  * lldp/rx.c: Reset state machine variable in process_delete_info()
  * lldp: do not call 'assert' in rxProcessFrame()
  * ecp: allow for failure to create
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="lduncan@suse.com" date="1599220800">- Moved sources from github.com/intel to github/openSUSE
  * upgrading to version v1.0.1+110.6009075a9fcc
  - merged in latest upstream (no API changes)</changelog>
  <changelog author="lduncan@suse.com" date="1599393600">- Update to version v1.0.1+69.e8f522565f5a to removed commpiler
  and rpmlint complaints:
  * Fix bash-completion dir: don't use /etc
  * Fix compiler issue with strcpy(): use memcpy
  * Fix compiler complaint argument type mismatch.
  * Fix compiler complaint declaration vs function.
  * Fix compiler complaint copying to packed member.
  * add 'lldpad.socket' to the '%service_*' macros in the SPEC
    file</changelog>
  <changelog author="lduncan@suse.com" date="1604923200">- Update to version v1.1+15.ef8495548d04, by merging
  upstream version 1.1 + latest, including:
  * Fix merge error: remove bogus line
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  This removed the need for the patch disable-werror.patch.</changelog>
  <changelog author="lduncan@suse.com" date="1607601600">- Update to version v1.1+18.0e969d0edcc4:
  * event_iface: only set rcv buf size if too small (bsc#1175570)</changelog>
  <changelog author="lduncan@suse.com" date="1610107200">- Update to version v1.1+36.e926f7172b96:
  * tx: rename variable
  * event_iface: only set rcv buf size if too small (bsc#1175570)
  * tx: when operating in rx-only mode don't send a port shutdown pdu
  * Update .travis.yml
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  * autoconf: convenience to setup asan and ubsan
  * Post 1.1 release</changelog>
  <changelog author="lduncan@suse.com" date="1632139200">- Update to version v1.1+44.0f781b4162d3:
  * agent: reset frame status on message delete
  * Avoiding null pointer dereference</changelog>
  <changelog author="lduncan@suse.com" date="1666785600">- Update to version v1.1+58.8ca361bab766:
  * clif: Include string.h for mem* function prototypes
  * basman: use return address when pulling address
  * Revert "Use interface index instead of name in libconfig"
  * 8021Qaz: check for rx block validity
  * 8021qaz: squelch initialization errors
  * macvtap: fix error condition
  * vdp22: convert command parsing to null term</changelog>
  <changelog author="tabraham@suse.com" date="1704974400">- Update to version latest Intel upstream (v1.1+77.75e83b6fb98e, jsc#PED-6852):
  * lldpad: dcbx: prevent null dereference in dcbx_free_data (bsc#1212749)
  * dcbx: Fix use-after-free
  * dcbx: Fix NULL pointer dereference
  * dcbx: Fix leak when receiving legacy TLVs with mismatched mode
  * lldp: Reject frames with duplicate TLVs
  * dcbx: Free manifest in rchange callback
  * dcbx: Avoid memory leak if ifup is called twice
  * ctrl_iface: Fix a memory leak in ctrl_iface_deinit
  * lldp: Avoid sending uninitialized data
  * lldptool: fix null pointer deference
  * Revert "Use interface index instead of name in libconfig"
  * Avoiding null pointer dereference
  * agent: reset frame status on message delete
  * basman: use return address when pulling address
  * 8021Qaz: check for rx block validity
  * 8021qaz: squelch initialization errors
  * macvtap: fix error condition
  * vdp22: convert command parsing to null term</changelog>
</package>
<package pkgid="fb8e63e256651f1eb2862ba7664f2dccaed6fa38ca2a48bcc770b5673469424c" name="liblldp_clif1" arch="x86_64">
  <version epoch="0" ver="1.1+77.75e83b6" rel="150500.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1488283200">- Don't use full URL as source, as the tarball does not exist at
  that location.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Fix calling of fillup_only: it knows no -i parameter.</changelog>
  <changelog author="hare@suse.de" date="1547121600">- Update to git commit cb81e9541b5 (FATE#326034,bug#1104011)
  * 8021qaz: Remove unused variable
  * 8021qaz: Honor willing value from config file
  * lldpad: Support DSCP selectors in APP TLV's
  * Fix application tlv display
  * basman_clif: print the OID properly
  * ecp22: deinit l2_packet_data before freeing ecp22
  * DCB set state operation return value check
  * memleak on received TLVs from modules
  * Use interface index instead of name in libconfig
  * Fix 'is_valid_mac' to include mcast mac address
  * lldpad: Fix segfault in lldptool
  * Fixup disabling PG
  + open-lldp-v1.0.1+56.cb81e95.tar.xz
- Remove superseded files
  - open-lldp-1.0.1.tar.gz
  - open-lldp-git-update.patch.bz2
  - open-lldp-gcc5.patch
  - 0001-l2_linux_packet-correctly-process-return-value-of-ge.patch
  - 0002-lldpad-Only-set-Tx-adminStatus-if-interface-is-not-m.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mliska@suse.cz" date="1552996800">- Add gcc9-fix-werror.patch in order to fix bsc#1128299.
- Adjust project URL as we're using the Intel's fork.</changelog>
  <changelog author="mliska@suse.cz" date="1557403200">- Disable -Werror (boo#1128299) and remove gcc9-fix-werror.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1557835200">- Add disable-werror.patch.</changelog>
  <changelog author="hare@suse.com" date="1574164800">- Update to version v1.0.1+95.3168e11:
  * Test with newer GCC 8 and 9 versions
  * RPM build is broken, so skip
  * Place the tarball in the right place
  * A tarball needs to be built after bootstrap.sh for use with RPM
  * Added missing steps for building an RPM
  * Finish off with testing building the RPM
  * Test package installation as well
  * Test under multiple GCC releases
  * Drop requirement for Travis CI testing with Clang
  * Support checking build with Travis CI
  * vdp-netlink: account for sizes properly
  * qbg: avoid warning for extra parens
  * qbg: port name is always a valid pointer
  * dcbx-nl: drop run_cmd
  * ecp: allow for failure to create
  * lldp_util: allow for null ifa_addr element
  * lldpad: Do not enable port if already enabled
  * Silent -Werror=address-of-packed-member warnings.
  * Come up with STRNCPY_TERMINATED (#25).
  * vdptool: fixed compile error for getline()
  * Fix #23 by off by one strncpy value.
  * 8021qaz: Block lldptool set operations if read only mode is on
  * 8021qaz: Add read only option for 8021qaz module
  * lldp: Allow lldptool to modify optional TLV's content
  * 8021qaz: Print dscp2prio map
  * autoconf: Add systemd support in configure.ac
  * rpm-spec: Add vdp22 man files to lldpad.spec.in</changelog>
  <changelog author="hare@suse.com" date="1574164801">- Update to version v1.0.1+102.4c7fcc3:
  * l2_packet: Guard ETH_P_LLDP define (edit: fixes bsc#1156545)
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(systemd) instead of systemd directly:
  allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="mliska@suse.cz" date="1586174400">- Use -fcommon in order to fix boo#1160407.</changelog>
  <changelog author="hare@suse.de" date="1596542400">- Update to version v1.0.1+63.f977e67 (bsc#1171284,bsc#1170745,bsc#1153520):
  * lldp/rx.c: Reset state machine variable in process_delete_info()
  * lldp: do not call 'assert' in rxProcessFrame()
  * ecp: allow for failure to create
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="lduncan@suse.com" date="1599220800">- Moved sources from github.com/intel to github/openSUSE
  * upgrading to version v1.0.1+110.6009075a9fcc
  - merged in latest upstream (no API changes)</changelog>
  <changelog author="lduncan@suse.com" date="1599393600">- Update to version v1.0.1+69.e8f522565f5a to removed commpiler
  and rpmlint complaints:
  * Fix bash-completion dir: don't use /etc
  * Fix compiler issue with strcpy(): use memcpy
  * Fix compiler complaint argument type mismatch.
  * Fix compiler complaint declaration vs function.
  * Fix compiler complaint copying to packed member.
  * add 'lldpad.socket' to the '%service_*' macros in the SPEC
    file</changelog>
  <changelog author="lduncan@suse.com" date="1604923200">- Update to version v1.1+15.ef8495548d04, by merging
  upstream version 1.1 + latest, including:
  * Fix merge error: remove bogus line
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  This removed the need for the patch disable-werror.patch.</changelog>
  <changelog author="lduncan@suse.com" date="1607601600">- Update to version v1.1+18.0e969d0edcc4:
  * event_iface: only set rcv buf size if too small (bsc#1175570)</changelog>
  <changelog author="lduncan@suse.com" date="1610107200">- Update to version v1.1+36.e926f7172b96:
  * tx: rename variable
  * event_iface: only set rcv buf size if too small (bsc#1175570)
  * tx: when operating in rx-only mode don't send a port shutdown pdu
  * Update .travis.yml
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  * autoconf: convenience to setup asan and ubsan
  * Post 1.1 release</changelog>
  <changelog author="lduncan@suse.com" date="1632139200">- Update to version v1.1+44.0f781b4162d3:
  * agent: reset frame status on message delete
  * Avoiding null pointer dereference</changelog>
  <changelog author="lduncan@suse.com" date="1666785600">- Update to version v1.1+58.8ca361bab766:
  * clif: Include string.h for mem* function prototypes
  * basman: use return address when pulling address
  * Revert "Use interface index instead of name in libconfig"
  * 8021Qaz: check for rx block validity
  * 8021qaz: squelch initialization errors
  * macvtap: fix error condition
  * vdp22: convert command parsing to null term</changelog>
  <changelog author="tabraham@suse.com" date="1704974400">- Update to version latest Intel upstream (v1.1+77.75e83b6fb98e, jsc#PED-6852):
  * lldpad: dcbx: prevent null dereference in dcbx_free_data (bsc#1212749)
  * dcbx: Fix use-after-free
  * dcbx: Fix NULL pointer dereference
  * dcbx: Fix leak when receiving legacy TLVs with mismatched mode
  * lldp: Reject frames with duplicate TLVs
  * dcbx: Free manifest in rchange callback
  * dcbx: Avoid memory leak if ifup is called twice
  * ctrl_iface: Fix a memory leak in ctrl_iface_deinit
  * lldp: Avoid sending uninitialized data
  * lldptool: fix null pointer deference
  * Revert "Use interface index instead of name in libconfig"
  * Avoiding null pointer dereference
  * agent: reset frame status on message delete
  * basman: use return address when pulling address
  * 8021Qaz: check for rx block validity
  * 8021qaz: squelch initialization errors
  * macvtap: fix error condition
  * vdp22: convert command parsing to null term</changelog>
</package>
<package pkgid="e33a8373998ed94d923c4aeef7eba9ab4964ae660190b5782ab5c45754b2c9e5" name="libltdl7" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="150000.3.6.2"/>
  <changelog author="foss@grueninger.de" date="1415016000">- Drop patch config-guess-sub-update.patch for libltdl/config as the
  folder no longer exists.
- Drop patch libtool-ppc64le.patch for ppc handling as it is already
  part of v2.4.3
- Update to libtool 2.4.3
  * * New features:
  - Moved to gnulib release infrastructure.
  - M4 is now used for scanning the M4 macros in your configure.ac that
  'libtoolize' looks at to determine what files you want, and where you
  would like them installed.  This means that you can compose your
  version number or any other argument that Libtoolize needs to know at
  M4 time using git-version-gen from gnulib, for example.
  - Invoking 'libtoolize --ltdl' no longer maintains a separate autoconf
  macro directory in the libltdl tree, but automatically adjusts the
  installed libltdl configuration files to share whatever macro
  directory is declared by the parent project. (Note: if you were
  already sharing a macro directory with AC_CONFIG_MACRO_DIR(ltdl/m4)
  or similar, that still works as does any other directory choice).
  - Invoking 'libtoolize --ltdl' no longer maintains a separate auxiliary
  scripts directory in the libltdl tree, but automatically adjusts the
  installed libltdl configuration files to share whatever auxiliary
  scripts directory is declared by the parent project. (Note: if you
  were already sharing an auxiliary directory with subproject libltdl
  using AC_CONFIG_AUX_DIR(ltdl/config) or similar, that still works as
  does any other directory choice).
  - The legacy tests have all been migrated to the Autotest harness.
  - The Autotest testsuite can be run without the especially time consuming
  tests with:
    make check-local TESTSUITEFLAGS='-k "!expensive"'
  * * Bug fixes:
  - Fix a long-standing latent bug in autom4te include path for autotests
  with VPATH builds.
  - Fix a long-standing latent bug in libtoolize that could delete lines
  from libltdl/Makefile.am in recursive mode due to underquoting in a
  sed script.
  - Fix a long-standing bug in libtoolize, by outputting the 'putting
  auxiliary files in' header with 'libtoolize --ltdl --subproject'.
  - Fix a long-standing bug in libtoolize subproject installation, by not
  installing a set of autoconf macro files into the parent project if
  there is no configure.ac present to use them.
  - The libtoolize subproject mode selector is now named '--subproject'
  and is equivalent to the implied '--subproject' mode when no other
  mode is selected; '--standalone' never worked, and is no longer
  accepted.
  - Libtool and libtoolize no longer choke on paths with a comma in them.
  - In the case where $SHELL does not have the same enhanced features
  (e.g. the ability to parse 'var+=append') as $CONFIG_SHELL, libtool
  will now correctly fallback to using only vanilla shell features
  instead of failing with a parse at startup.
  - Correctly recognize import libraries when Microsoft dumpbin is used
  as the name lister and extend the dumpbin wrapper to find symbols
  in import libraries using the -headers option of dumpbin. Also fix a
  bug in the dumpbin wrapper that could lead to broken symbol listings
  in some corner cases.
  - Use the improved Microsoft dumpbin support to mend preloading of
  import libraries for Microsoft Visual C/C++.
  - No longer mangle module-definition (.def) files when feeding them to
  the Microsoft Visual C/C++ linker via the -export-symbols argument to
  the libtool script, thus matching how .def files are handled when
  using GNU tools.
  - Recognize more variants (e.g. those starting with a LIBRARY statement)
  of module-definitions (.def) files when using them instead of a raw
  list of symbols to export.
  - Fix a long-standing bug when using libtoolize without automake; we
  no longer remove install-sh with --force, since it's not a file
  libtoolize will reinstall without --install..
  * * Important incompatible changes:
  - GNU M4 is required to run libtoolize in a directory with a
  'configure.ac' (or 'configure.in') that needs tracing to determine
  what modes and directories have been specified.
  - The use of the idiosyncratically named 'Makefile.inc' in nonrecursive
  libltdl builds is deprecated, although it will be supported for one
  more year or until the next release, whichever takes longer.  Please
  upgrade to the more standard naming of 'ltdl.mk' in keeping with other
  GNU projects.
  - libtoolize now behaves consistenty in respect of multiple directory
  arguments to ACLOCAL_AMFLAGS and multiple invocations of AC_CONFIG-
  _MACRO_DIRS, where the first directory is always selected.  Previous
  releases took the first ACLOCAL_AMFLAGS argument, but the last
  invocation of AC_CONFIG_MACRO_DIRS.
  - The libtoolize program now advises use of the new Autoconf
  AC_CONFIG_MACRO_DIRS declaration.  If you follow that advice, all
  your developers will need at least autoconf-2.70 and automake-1.13
  to rebootstrap your probject.  If you still need to support
  bootstrap with older Autotools, then you should add the following
  to your configure.ac file:
    m4_ifndef([AC_CONFIG_MACRO_DIRS],
    [m4_define([AC_CONFIG_MACRO_DIRS],
    m4_defn([AC_CONFIG_MACRO_DIR]))])
  - Overhead of probing for a non-backslash crippled echo equivalent
  during initialization of every script has been removed in favor of
  trusting that "printf %s\n" works out of the box on all non-museum
  host architectures.  Manually setting ECHO appropriately in the
  build environment will be necessary on some ancient architectures.
  * * Changes in supported systems or compilers:
  - Support for bitrig (*-*-bitrig*).
  - Solaris 7 and earlier requires ECHO=/usr/ucb/echo in the build
  environment, to build and use libtool.</changelog>
  <changelog author="pth@suse.de" date="1416571200">- Add libtool-dont_delete_gnulib_files.patch that prevents deletion
  of files from gnulib to be deleted by libtoolize.
- BuildRequire help2man.
- Remove unneeded clean section.
- Use rpm macros where possible.
- Pass V=1 to make to make compilation verbose.</changelog>
  <changelog author="foss@grueninger.de" date="1417262400">-</changelog>
  <changelog author="foss@grueninger.de" date="1417262401">- Drop patch libtool-dont_delete_gnulib_files.patch which is
  included in 2.4.4
- Update to libtool 2.4.4
  * * New features:
  - Libltdl maintains its own fork of argz, with macros and files in
    the LT_ and lt__ namespaces (resp.) where they cannot clash with
    client projects' use of gnulib argz.
  * * Bug fixes:
  - Installation of 'libtoolize' once again obeys '--program-prefix',
    '--program-suffix' and '--program-transform-name' configure options.
  - `libtoolize` doesn't remove any files that it can't reinstall,
    including old versions of the snippet directory, and gnulib's
    version of the argz module and supporting files.
  - LT_FUNC_DLYSM_USCORE now works correctly on systems that don't
    support self dlopen()ing.
  * * Important incompatible changes:
  - LT_LIB_DLLOAD no longer prepends -ldl or -ldld to LIBS, causing
    duplicate occurrences in libltdl link lines.  If you need to
    add a library for dlopen() or shl_load() in your Makefile, then
    use $(LIBADD_DLOPEN) or $(LIBADD_SHL_LOAD) respectively.  If you
    are using libltdl, this all happens automatically, and the only
    difference you'll see is no more duplicated library names in the
    verbose link line.
  * * Changes in supported systems or compilers:
  - Preliminary support for tcc on linux*.  Although it already worked
    sometimes in previous releases, making sure to set LD correctly now
    avoids mis-matching GNU ld with tcc:
    ./configure CC=tcc LD=tcc
  - Added -os2dllname option to work around 8 character base name
    limit on OS/2.  The option has no effect on other systems.
  - Support for DLL versioning, -export-symbols and -export-symbols-regex
    on OS/2.
  - Support filename-based shared library versioning on AIX. See manual
    for details.</changelog>
  <changelog author="foss@grueninger.de" date="1417867200">- Require M4 as libtool's libtoolize requires it since 2.4.3</changelog>
  <changelog author="foss@grueninger.de" date="1421928000">- Update to libtool 2.4.5
  New features:
  - Libtoolize searches for the best available M4 on the user PATH at
    runtime, rather than settling for the first one found.
  - Support munging sys_lib_dlsearch_path_spec with LT_SYS_LIBRARY_PATH
    environment variable.
  Bug fixes:
  - Bail out at configure time if the installed M4 is not sufficient
    for the purposes of libtoolize.
  - freebsd-elf library versioning was upgraded incorrectly in 2.4.4,
    but now works properly again.
  - Fix a 2.4.4 regression so that libltdl subprojects do not warn
    about missing libltdl/libltdl directory as in prior releases.
  - When using Sun C++ on Solaris or GNU/Linux we used to set libtool's
    postdeps permanently, based on the contents of $CXX and $CXXFLAGS at
    configure time, which was brittle and error-prone.  Now, we no
    longer check for a SunCC ABI at configure time, but augment the
    postdeps at libtool time based on the current invocation flags on
    each call.
  Changes in supported systems or compilers:
  - /usr/local prefixed rpaths are now added to the link-line on
    ia64-hp-hpux*, because the default system runtime loader path does
    not contain them.
  - Previously, when using Sun C++ on Solaris or GNU/Linux, `-Cstd -Crun`
    flags were added to $postdeps unless CXX or CXXFLAGS contained
    `-library=stlport4`.  Newer releases have added other compiler flags
    that are also incompatible with `-Cstd -Crun`, so now we don't add
    them if any of `-std=c++[0-9][0-9]`, `-library=stdcxx4` or
    `-compat=g` were found in CXX or CXXFLAGS when the Sun C++ compiler
    is detected.</changelog>
  <changelog author="pth@suse.de" date="1423483200">- Add libtool-no_host_name.patch to remove the host name from
  generated scripts (bnc#916268).</changelog>
  <changelog author="pth@suse.de" date="1429272000">- Update to 2.4.6:
  Noteworthy changes in release 2.4.6 (2015-02-15) [stable]
  * New features:
  - LT_SYS_LIBRARY_PATH can be set in config.site, or at configure time
    and persists correctly in the generated libtool script.
  * Bug fixes:
  - Fix a race condition in ltdl dryrun test that would cause spurious
    random failures of that test.
  - LT_SYS_DLSEARCH_PATH is munged correctly.
- Add tarball signature.</changelog>
  <changelog author="mpluskal@suse.com" date="1429444800">- Use url for signature
- Add keyring file for automatic verification of signature
- Cleanup spec file with spec-cleaner
- Remove old ppc/ppc64 obsolete/provides
- Update info pre/post requires and replace postun with preun</changelog>
  <changelog author="pth@suse.de" date="1429531200">- Remove empty entry.</changelog>
  <changelog author="pth@suse.de" date="1430740800">- Fix call of install_info.</changelog>
  <changelog author="pth@suse.de" date="1438862400">- Remove spurious install_info_delete in postun (bsc#940773).</changelog>
  <changelog author="dimstar@opensuse.org" date="1458129600">- Fix install_info_{install,delete} usage: install-info does not
  allow file globbing.</changelog>
</package>
<package pkgid="c5738e3768e6a202cc49fe3122fd48318841a55d82c711ef8bffaf9e9d269bb1" name="libltdl7" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="150000.3.8.1"/>
  <changelog author="foss@grueninger.de" date="1415016000">- Drop patch config-guess-sub-update.patch for libltdl/config as the
  folder no longer exists.
- Drop patch libtool-ppc64le.patch for ppc handling as it is already
  part of v2.4.3
- Update to libtool 2.4.3
  * * New features:
  - Moved to gnulib release infrastructure.
  - M4 is now used for scanning the M4 macros in your configure.ac that
  'libtoolize' looks at to determine what files you want, and where you
  would like them installed.  This means that you can compose your
  version number or any other argument that Libtoolize needs to know at
  M4 time using git-version-gen from gnulib, for example.
  - Invoking 'libtoolize --ltdl' no longer maintains a separate autoconf
  macro directory in the libltdl tree, but automatically adjusts the
  installed libltdl configuration files to share whatever macro
  directory is declared by the parent project. (Note: if you were
  already sharing a macro directory with AC_CONFIG_MACRO_DIR(ltdl/m4)
  or similar, that still works as does any other directory choice).
  - Invoking 'libtoolize --ltdl' no longer maintains a separate auxiliary
  scripts directory in the libltdl tree, but automatically adjusts the
  installed libltdl configuration files to share whatever auxiliary
  scripts directory is declared by the parent project. (Note: if you
  were already sharing an auxiliary directory with subproject libltdl
  using AC_CONFIG_AUX_DIR(ltdl/config) or similar, that still works as
  does any other directory choice).
  - The legacy tests have all been migrated to the Autotest harness.
  - The Autotest testsuite can be run without the especially time consuming
  tests with:
    make check-local TESTSUITEFLAGS='-k "!expensive"'
  * * Bug fixes:
  - Fix a long-standing latent bug in autom4te include path for autotests
  with VPATH builds.
  - Fix a long-standing latent bug in libtoolize that could delete lines
  from libltdl/Makefile.am in recursive mode due to underquoting in a
  sed script.
  - Fix a long-standing bug in libtoolize, by outputting the 'putting
  auxiliary files in' header with 'libtoolize --ltdl --subproject'.
  - Fix a long-standing bug in libtoolize subproject installation, by not
  installing a set of autoconf macro files into the parent project if
  there is no configure.ac present to use them.
  - The libtoolize subproject mode selector is now named '--subproject'
  and is equivalent to the implied '--subproject' mode when no other
  mode is selected; '--standalone' never worked, and is no longer
  accepted.
  - Libtool and libtoolize no longer choke on paths with a comma in them.
  - In the case where $SHELL does not have the same enhanced features
  (e.g. the ability to parse 'var+=append') as $CONFIG_SHELL, libtool
  will now correctly fallback to using only vanilla shell features
  instead of failing with a parse at startup.
  - Correctly recognize import libraries when Microsoft dumpbin is used
  as the name lister and extend the dumpbin wrapper to find symbols
  in import libraries using the -headers option of dumpbin. Also fix a
  bug in the dumpbin wrapper that could lead to broken symbol listings
  in some corner cases.
  - Use the improved Microsoft dumpbin support to mend preloading of
  import libraries for Microsoft Visual C/C++.
  - No longer mangle module-definition (.def) files when feeding them to
  the Microsoft Visual C/C++ linker via the -export-symbols argument to
  the libtool script, thus matching how .def files are handled when
  using GNU tools.
  - Recognize more variants (e.g. those starting with a LIBRARY statement)
  of module-definitions (.def) files when using them instead of a raw
  list of symbols to export.
  - Fix a long-standing bug when using libtoolize without automake; we
  no longer remove install-sh with --force, since it's not a file
  libtoolize will reinstall without --install..
  * * Important incompatible changes:
  - GNU M4 is required to run libtoolize in a directory with a
  'configure.ac' (or 'configure.in') that needs tracing to determine
  what modes and directories have been specified.
  - The use of the idiosyncratically named 'Makefile.inc' in nonrecursive
  libltdl builds is deprecated, although it will be supported for one
  more year or until the next release, whichever takes longer.  Please
  upgrade to the more standard naming of 'ltdl.mk' in keeping with other
  GNU projects.
  - libtoolize now behaves consistenty in respect of multiple directory
  arguments to ACLOCAL_AMFLAGS and multiple invocations of AC_CONFIG-
  _MACRO_DIRS, where the first directory is always selected.  Previous
  releases took the first ACLOCAL_AMFLAGS argument, but the last
  invocation of AC_CONFIG_MACRO_DIRS.
  - The libtoolize program now advises use of the new Autoconf
  AC_CONFIG_MACRO_DIRS declaration.  If you follow that advice, all
  your developers will need at least autoconf-2.70 and automake-1.13
  to rebootstrap your probject.  If you still need to support
  bootstrap with older Autotools, then you should add the following
  to your configure.ac file:
    m4_ifndef([AC_CONFIG_MACRO_DIRS],
    [m4_define([AC_CONFIG_MACRO_DIRS],
    m4_defn([AC_CONFIG_MACRO_DIR]))])
  - Overhead of probing for a non-backslash crippled echo equivalent
  during initialization of every script has been removed in favor of
  trusting that "printf %s\n" works out of the box on all non-museum
  host architectures.  Manually setting ECHO appropriately in the
  build environment will be necessary on some ancient architectures.
  * * Changes in supported systems or compilers:
  - Support for bitrig (*-*-bitrig*).
  - Solaris 7 and earlier requires ECHO=/usr/ucb/echo in the build
  environment, to build and use libtool.</changelog>
  <changelog author="pth@suse.de" date="1416571200">- Add libtool-dont_delete_gnulib_files.patch that prevents deletion
  of files from gnulib to be deleted by libtoolize.
- BuildRequire help2man.
- Remove unneeded clean section.
- Use rpm macros where possible.
- Pass V=1 to make to make compilation verbose.</changelog>
  <changelog author="foss@grueninger.de" date="1417262400">-</changelog>
  <changelog author="foss@grueninger.de" date="1417262401">- Drop patch libtool-dont_delete_gnulib_files.patch which is
  included in 2.4.4
- Update to libtool 2.4.4
  * * New features:
  - Libltdl maintains its own fork of argz, with macros and files in
    the LT_ and lt__ namespaces (resp.) where they cannot clash with
    client projects' use of gnulib argz.
  * * Bug fixes:
  - Installation of 'libtoolize' once again obeys '--program-prefix',
    '--program-suffix' and '--program-transform-name' configure options.
  - `libtoolize` doesn't remove any files that it can't reinstall,
    including old versions of the snippet directory, and gnulib's
    version of the argz module and supporting files.
  - LT_FUNC_DLYSM_USCORE now works correctly on systems that don't
    support self dlopen()ing.
  * * Important incompatible changes:
  - LT_LIB_DLLOAD no longer prepends -ldl or -ldld to LIBS, causing
    duplicate occurrences in libltdl link lines.  If you need to
    add a library for dlopen() or shl_load() in your Makefile, then
    use $(LIBADD_DLOPEN) or $(LIBADD_SHL_LOAD) respectively.  If you
    are using libltdl, this all happens automatically, and the only
    difference you'll see is no more duplicated library names in the
    verbose link line.
  * * Changes in supported systems or compilers:
  - Preliminary support for tcc on linux*.  Although it already worked
    sometimes in previous releases, making sure to set LD correctly now
    avoids mis-matching GNU ld with tcc:
    ./configure CC=tcc LD=tcc
  - Added -os2dllname option to work around 8 character base name
    limit on OS/2.  The option has no effect on other systems.
  - Support for DLL versioning, -export-symbols and -export-symbols-regex
    on OS/2.
  - Support filename-based shared library versioning on AIX. See manual
    for details.</changelog>
  <changelog author="foss@grueninger.de" date="1417867200">- Require M4 as libtool's libtoolize requires it since 2.4.3</changelog>
  <changelog author="foss@grueninger.de" date="1421928000">- Update to libtool 2.4.5
  New features:
  - Libtoolize searches for the best available M4 on the user PATH at
    runtime, rather than settling for the first one found.
  - Support munging sys_lib_dlsearch_path_spec with LT_SYS_LIBRARY_PATH
    environment variable.
  Bug fixes:
  - Bail out at configure time if the installed M4 is not sufficient
    for the purposes of libtoolize.
  - freebsd-elf library versioning was upgraded incorrectly in 2.4.4,
    but now works properly again.
  - Fix a 2.4.4 regression so that libltdl subprojects do not warn
    about missing libltdl/libltdl directory as in prior releases.
  - When using Sun C++ on Solaris or GNU/Linux we used to set libtool's
    postdeps permanently, based on the contents of $CXX and $CXXFLAGS at
    configure time, which was brittle and error-prone.  Now, we no
    longer check for a SunCC ABI at configure time, but augment the
    postdeps at libtool time based on the current invocation flags on
    each call.
  Changes in supported systems or compilers:
  - /usr/local prefixed rpaths are now added to the link-line on
    ia64-hp-hpux*, because the default system runtime loader path does
    not contain them.
  - Previously, when using Sun C++ on Solaris or GNU/Linux, `-Cstd -Crun`
    flags were added to $postdeps unless CXX or CXXFLAGS contained
    `-library=stlport4`.  Newer releases have added other compiler flags
    that are also incompatible with `-Cstd -Crun`, so now we don't add
    them if any of `-std=c++[0-9][0-9]`, `-library=stdcxx4` or
    `-compat=g` were found in CXX or CXXFLAGS when the Sun C++ compiler
    is detected.</changelog>
  <changelog author="pth@suse.de" date="1423483200">- Add libtool-no_host_name.patch to remove the host name from
  generated scripts (bnc#916268).</changelog>
  <changelog author="pth@suse.de" date="1429272000">- Update to 2.4.6:
  Noteworthy changes in release 2.4.6 (2015-02-15) [stable]
  * New features:
  - LT_SYS_LIBRARY_PATH can be set in config.site, or at configure time
    and persists correctly in the generated libtool script.
  * Bug fixes:
  - Fix a race condition in ltdl dryrun test that would cause spurious
    random failures of that test.
  - LT_SYS_DLSEARCH_PATH is munged correctly.
- Add tarball signature.</changelog>
  <changelog author="mpluskal@suse.com" date="1429444800">- Use url for signature
- Add keyring file for automatic verification of signature
- Cleanup spec file with spec-cleaner
- Remove old ppc/ppc64 obsolete/provides
- Update info pre/post requires and replace postun with preun</changelog>
  <changelog author="pth@suse.de" date="1429531200">- Remove empty entry.</changelog>
  <changelog author="pth@suse.de" date="1430740800">- Fix call of install_info.</changelog>
  <changelog author="pth@suse.de" date="1438862400">- Remove spurious install_info_delete in postun (bsc#940773).</changelog>
  <changelog author="dimstar@opensuse.org" date="1458129600">- Fix install_info_{install,delete} usage: install-info does not
  allow file globbing.</changelog>
</package>
<package pkgid="53d02542c25a6af161e91be021664139fae7200cfce3f343a47a47b7758fb23d" name="liblttng-ctl0" arch="aarch64">
  <version epoch="0" ver="2.12.2" rel="150300.3.3.1"/>
  <changelog author="tonyj@suse.com" date="1438084800">- Update to version 2.7.0-rc1 (FATE#319273)
  Changelog for differences between 2.4.0 and this point may be found at:
    http://git.lttng.org/?p=lttng-tools.git;a=blob_plain;f=ChangeLog;hb=1808007961cfaa7f915e44424f790e616219a361</changelog>
  <changelog author="tonyj@suse.com" date="1444046400">- Upgrade to release version 2.7.0 (FATE#319273)
  http://git.lttng.org/?p=lttng-tools.git;a=blob_plain;f=ChangeLog;hb=v2.7.0
  to view changelog from v2.7.0-rc1 to v2.7.0</changelog>
  <changelog author="tonyj@suse.com" date="1453982400">- Update to bugfix release 2.7.1 for SLE12SP2
  Changelog:
    http://git.lttng.org/?p=lttng-tools.git;a=blob_plain;f=ChangeLog;hb=v2.7.1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1470139200">- add ppc64/ppc64le in ExclusiveArch</changelog>
  <changelog author="tonyj@suse.com" date="1504180800">- Update to version 3.10 for SLE15 (bsc#1055683)
- Adhere to shared library policy (new lib: liblttng-ctl$sover)
- Do not package static libraries</changelog>
  <changelog author="tonyj@suse.com" date="1507291200">- Fix typo in package summary</changelog>
  <changelog author="jengelh@inai.de" date="1507377600">- Rectify RPM groups. Remove redundant %clean section.
  Replace old RPM macros.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1509796800">- Add lttng-tools-fix-pkgconfig.patch: Add missing dependencies to
  lttng-ctl.pc.
- Build for aarch64.
- Spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521115200">- Update to version 2.10.2:
  * Do not flag consumer as disabled on relayd comm failure.
  * Cleanup inactive FDs in the consumer polling thread.
  * man: Document dead-peer detection for lttng-relayd.
  * lttng-relayd: Use the TCP keep-alive mechanism to detect a
    dead-peer.
  * Tests: race between consumer pause and trace start/stop.
  * Fix notification thread being not notified of channel creation
    on application error.
  * Fix using putenv() and free()-ing the value is invalid.
  * Fix unknown consumer type considered a libc error.
  * Fix that consumerd(64/32)_lib_dir can be NULL.
  * Fix a nonsensical message printed by lttng track/untrack.
  * Fix O_CLOEXEC being erroneously used on pipe creation.
  * Fix a wrong parameter to fcntl in pipe_set_flag.
  * Use lttng_clock_gettime instead of clock_gettime.
  * Close channel monitor pipe after killing the
    metadata_timer_thread.
  * Use file based synchronisation for python logging test.
  * Test: Add file based synchronisation point for the Python test
    application.
  * Fix wrong use of the relay_streams_sent in snapshot.
  * Fix the return code of lttcomm_send_unix_sock signed.
  * Fix a src/bin/lttng/utils.c: cast incompatible pointer warning.
  * Fix: src/common/pipe.h: include &lt;sys/types.h&gt; for ssize_t and
    mode_t.
  * Fix detect dlmopen() and disable corresponding tests if not
    available.
  * Use tmpdir for intermediary files.
  * Fix include scripts for distribution.
  * Fix a typo in lttng-consumerd file default.
  * Fix missing NULL checks in logging statements.
  * Test: Kernel testing for notification.
  * Kernel consumerd sock paths need rundir substitution.
  * Create lttng run dir regardless of user privilege.
  * Make version.h generation work with dash.
  * lttng-enable-event(1): filtering: Specify that `$ctx.cpu_id`
    is available.
  * Centralise sessiond config option handling.
  * Fix buffer overflow warning in python bindings.
  * Tests fix: BT2 does not output the metadata of a trace
    collection.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1529236800">- Update to version 2.10.4 (changes since 2.10.2):
  * Fix: Set errno with value from SO_ERROR on error.
  * Fix: Missing value handling for lttng_event_context_type.
  * Fix: Use SOL_SOCKET level for SO_KEEPALIVE on all platform.
  * Fix: Error out on leftover arguments.
  * Fix: Reply to version check even on protocol mismatch.
  * Fix: Error handling on relay version check.
  * Document add-context limitation for started session.
  * Fix: add-context cannot be performed after a session has been
    started.
  * Fix: Duplicated kernel consumer socket locking.
  * Fix: Remove unused event types in MI XML schema.
  * Tests: Cleanly exit from test apps on reception of SIGTERM.
  * Document consumer socket locking assumptions.
  * Fix: Consumer socket lock not held during snapshot record.
  * Fix: set_relayd_for_snapshot does not acquire the consumer
    socket lock.
  * Fix: send_channel_monitor_pipe does not take the consumer
    socket lock.
  * Document the locking assumptions of consumerd-relayd socket
    passing.
  * Assert that the consumer lock is held while sending FDs to
    consumerd.
  * Assert that the consumer socket lock is taken during
    communication.
  * Tests: Refuse to run test suite if lttng processes are present.
  * Fix: Metadata channel leak when using the snapshot tracing
    mode.
  * Fix build: in_git_repo is used before being set.
  * Add DBG statement for TCP keep-alive options.
  * Fix: Unprivilieged sessiond agent port clashes with root
    sessiond.
  * Fix: Erroneous use of extern keyword.
  * Fix: Failure to launch agent thread is not reported.
  * Fix: Agent may not be ready on launch.
  * Fix: Checking for existing session daemon is done after
    daemonising.
  * Fix: lttng logs nanoseconds.
  * Fix: stream_per_chan_id_ht should allow duplicates.
  * Fix: relayd send_command() util not logging on failure.
  * Fix: Create_output_path() relayd util is not
    const-correct.
  * Fix: Kernel snapshot handling of EAGAIN.
  * Fix validate_trace_empty test check.
  * Fix: Circular inclusion of lttng.h results in warning.
  * Fix: Channel lock must be taken to check for pending
    notifications.
  * Fix: Quiet option is not set in sessiond-config.
  * Fix: Hold consumer socket lock for consumer_send_msg.
  * Fix: Use off_t type for lseek function return value to avoid
    overflow.
  * Fix: Double similar condition.
- Use tarball signing.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1542196800">- Update to version 2.10.5:
  * Fix: missing context enum values in session xml schema.
  * Tests: add session auto-loading test cases.
  * Bash completion: ignore namespace for xmllint parsing.
  * Typo in ust consumer log message (channek -&gt; channel).
  * Fix: use signed variable for refcounting of
    consumer_relayd_sock_pair.
  * Fix: warning due to hash_key_str() being not const-correct.
  * Print consumerd32/64/kernel configuration.
  * Fix: calling ht_{hash, match}_enum with wrong argument.
  * Fix: probes should be compared strictly by events metadata.
  * Fix: test_ust-dl is generated at configure-time.
  * Fix: cmd line options overwrite env variable config options.
  * Fix: perform the initialization memory barrier out of loop body.
  * Port: fix format warnings on Cygwin.
  * Add missing include for ssize_t on Cygwin.
  * Fix: sessions with agent channels fail to load.
  * Fix: don't wait for the load thread before serving client
    commands.
  * Fix: sessiond fails to launch on --without-ust configuration.
  * Fix: agent thread poll set creation failure results in deadlock.
  * Fix: test uses sizeof() on the wrong operand of strncpy.
  * Fix: ret may be used uninitialized in sample_channel_positions().
- Add gpl-2.0.txt and lgpl-2.1.txt to the library packages with the
  %license tag.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1582718400">- Update to version 2.11.2:
  * See /usr/share/doc/packages/lttng-tools/ChangeLog
- Drop support for old openSUSE versions.</changelog>
  <changelog author="tonyj@suse.com" date="1604318400">- Update to version 2.12.2
  Changelog: https://git.lttng.org/?p=lttng-tools.git;a=blob_plain;f=ChangeLog;hb=v2.12.2
  - Add signed bz2 support (keyring)</changelog>
  <changelog author="ali.abdallah@suse.com" date="1706788800">- Add Fix-ust-UST-communication-can-return-EAGAIN.patch:
  Fix UST communication when -EAGAIN is returned which leads to
  lttng-sessiond abort (bsc#1218508)</changelog>
</package>
<package pkgid="b90c4bbea805542ca6ee2aa54b72b528421dd70dc81ce5a30944a7440ebef071" name="liblttng-ctl0" arch="x86_64">
  <version epoch="0" ver="2.12.2" rel="150300.3.3.1"/>
  <changelog author="tonyj@suse.com" date="1438084800">- Update to version 2.7.0-rc1 (FATE#319273)
  Changelog for differences between 2.4.0 and this point may be found at:
    http://git.lttng.org/?p=lttng-tools.git;a=blob_plain;f=ChangeLog;hb=1808007961cfaa7f915e44424f790e616219a361</changelog>
  <changelog author="tonyj@suse.com" date="1444046400">- Upgrade to release version 2.7.0 (FATE#319273)
  http://git.lttng.org/?p=lttng-tools.git;a=blob_plain;f=ChangeLog;hb=v2.7.0
  to view changelog from v2.7.0-rc1 to v2.7.0</changelog>
  <changelog author="tonyj@suse.com" date="1453982400">- Update to bugfix release 2.7.1 for SLE12SP2
  Changelog:
    http://git.lttng.org/?p=lttng-tools.git;a=blob_plain;f=ChangeLog;hb=v2.7.1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1470139200">- add ppc64/ppc64le in ExclusiveArch</changelog>
  <changelog author="tonyj@suse.com" date="1504180800">- Update to version 3.10 for SLE15 (bsc#1055683)
- Adhere to shared library policy (new lib: liblttng-ctl$sover)
- Do not package static libraries</changelog>
  <changelog author="tonyj@suse.com" date="1507291200">- Fix typo in package summary</changelog>
  <changelog author="jengelh@inai.de" date="1507377600">- Rectify RPM groups. Remove redundant %clean section.
  Replace old RPM macros.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1509796800">- Add lttng-tools-fix-pkgconfig.patch: Add missing dependencies to
  lttng-ctl.pc.
- Build for aarch64.
- Spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521115200">- Update to version 2.10.2:
  * Do not flag consumer as disabled on relayd comm failure.
  * Cleanup inactive FDs in the consumer polling thread.
  * man: Document dead-peer detection for lttng-relayd.
  * lttng-relayd: Use the TCP keep-alive mechanism to detect a
    dead-peer.
  * Tests: race between consumer pause and trace start/stop.
  * Fix notification thread being not notified of channel creation
    on application error.
  * Fix using putenv() and free()-ing the value is invalid.
  * Fix unknown consumer type considered a libc error.
  * Fix that consumerd(64/32)_lib_dir can be NULL.
  * Fix a nonsensical message printed by lttng track/untrack.
  * Fix O_CLOEXEC being erroneously used on pipe creation.
  * Fix a wrong parameter to fcntl in pipe_set_flag.
  * Use lttng_clock_gettime instead of clock_gettime.
  * Close channel monitor pipe after killing the
    metadata_timer_thread.
  * Use file based synchronisation for python logging test.
  * Test: Add file based synchronisation point for the Python test
    application.
  * Fix wrong use of the relay_streams_sent in snapshot.
  * Fix the return code of lttcomm_send_unix_sock signed.
  * Fix a src/bin/lttng/utils.c: cast incompatible pointer warning.
  * Fix: src/common/pipe.h: include &lt;sys/types.h&gt; for ssize_t and
    mode_t.
  * Fix detect dlmopen() and disable corresponding tests if not
    available.
  * Use tmpdir for intermediary files.
  * Fix include scripts for distribution.
  * Fix a typo in lttng-consumerd file default.
  * Fix missing NULL checks in logging statements.
  * Test: Kernel testing for notification.
  * Kernel consumerd sock paths need rundir substitution.
  * Create lttng run dir regardless of user privilege.
  * Make version.h generation work with dash.
  * lttng-enable-event(1): filtering: Specify that `$ctx.cpu_id`
    is available.
  * Centralise sessiond config option handling.
  * Fix buffer overflow warning in python bindings.
  * Tests fix: BT2 does not output the metadata of a trace
    collection.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1529236800">- Update to version 2.10.4 (changes since 2.10.2):
  * Fix: Set errno with value from SO_ERROR on error.
  * Fix: Missing value handling for lttng_event_context_type.
  * Fix: Use SOL_SOCKET level for SO_KEEPALIVE on all platform.
  * Fix: Error out on leftover arguments.
  * Fix: Reply to version check even on protocol mismatch.
  * Fix: Error handling on relay version check.
  * Document add-context limitation for started session.
  * Fix: add-context cannot be performed after a session has been
    started.
  * Fix: Duplicated kernel consumer socket locking.
  * Fix: Remove unused event types in MI XML schema.
  * Tests: Cleanly exit from test apps on reception of SIGTERM.
  * Document consumer socket locking assumptions.
  * Fix: Consumer socket lock not held during snapshot record.
  * Fix: set_relayd_for_snapshot does not acquire the consumer
    socket lock.
  * Fix: send_channel_monitor_pipe does not take the consumer
    socket lock.
  * Document the locking assumptions of consumerd-relayd socket
    passing.
  * Assert that the consumer lock is held while sending FDs to
    consumerd.
  * Assert that the consumer socket lock is taken during
    communication.
  * Tests: Refuse to run test suite if lttng processes are present.
  * Fix: Metadata channel leak when using the snapshot tracing
    mode.
  * Fix build: in_git_repo is used before being set.
  * Add DBG statement for TCP keep-alive options.
  * Fix: Unprivilieged sessiond agent port clashes with root
    sessiond.
  * Fix: Erroneous use of extern keyword.
  * Fix: Failure to launch agent thread is not reported.
  * Fix: Agent may not be ready on launch.
  * Fix: Checking for existing session daemon is done after
    daemonising.
  * Fix: lttng logs nanoseconds.
  * Fix: stream_per_chan_id_ht should allow duplicates.
  * Fix: relayd send_command() util not logging on failure.
  * Fix: Create_output_path() relayd util is not
    const-correct.
  * Fix: Kernel snapshot handling of EAGAIN.
  * Fix validate_trace_empty test check.
  * Fix: Circular inclusion of lttng.h results in warning.
  * Fix: Channel lock must be taken to check for pending
    notifications.
  * Fix: Quiet option is not set in sessiond-config.
  * Fix: Hold consumer socket lock for consumer_send_msg.
  * Fix: Use off_t type for lseek function return value to avoid
    overflow.
  * Fix: Double similar condition.
- Use tarball signing.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1542196800">- Update to version 2.10.5:
  * Fix: missing context enum values in session xml schema.
  * Tests: add session auto-loading test cases.
  * Bash completion: ignore namespace for xmllint parsing.
  * Typo in ust consumer log message (channek -&gt; channel).
  * Fix: use signed variable for refcounting of
    consumer_relayd_sock_pair.
  * Fix: warning due to hash_key_str() being not const-correct.
  * Print consumerd32/64/kernel configuration.
  * Fix: calling ht_{hash, match}_enum with wrong argument.
  * Fix: probes should be compared strictly by events metadata.
  * Fix: test_ust-dl is generated at configure-time.
  * Fix: cmd line options overwrite env variable config options.
  * Fix: perform the initialization memory barrier out of loop body.
  * Port: fix format warnings on Cygwin.
  * Add missing include for ssize_t on Cygwin.
  * Fix: sessions with agent channels fail to load.
  * Fix: don't wait for the load thread before serving client
    commands.
  * Fix: sessiond fails to launch on --without-ust configuration.
  * Fix: agent thread poll set creation failure results in deadlock.
  * Fix: test uses sizeof() on the wrong operand of strncpy.
  * Fix: ret may be used uninitialized in sample_channel_positions().
- Add gpl-2.0.txt and lgpl-2.1.txt to the library packages with the
  %license tag.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1582718400">- Update to version 2.11.2:
  * See /usr/share/doc/packages/lttng-tools/ChangeLog
- Drop support for old openSUSE versions.</changelog>
  <changelog author="tonyj@suse.com" date="1604318400">- Update to version 2.12.2
  Changelog: https://git.lttng.org/?p=lttng-tools.git;a=blob_plain;f=ChangeLog;hb=v2.12.2
  - Add signed bz2 support (keyring)</changelog>
  <changelog author="ali.abdallah@suse.com" date="1706788800">- Add Fix-ust-UST-communication-can-return-EAGAIN.patch:
  Fix UST communication when -EAGAIN is returned which leads to
  lttng-sessiond abort (bsc#1218508)</changelog>
</package>
<package pkgid="b5da1ad231b3b47d3b52da0f8e21bf79e824237547ed240ba9390371ce0ec6a5" name="liblvm2cmd2_03" arch="aarch64">
  <version epoch="0" ver="2.03.22" rel="150500.7.9.1"/>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6753)
  - device-mapper version upgrade to 1.02.196
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
</package>
<package pkgid="16beef4a9ec3bb396cb99ca67d923886e3f136793682a13ce66fbe18bb70f3c2" name="liblvm2cmd2_03" arch="s390x">
  <version epoch="0" ver="2.03.22" rel="150500.7.9.1"/>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6753)
  - device-mapper version upgrade to 1.02.196
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
</package>
<package pkgid="f1b7f956a64c5ad2eadff08572347f2760f60f107cc62eda4e40257e23380604" name="liblvm2cmd2_03" arch="x86_64">
  <version epoch="0" ver="2.03.22" rel="150500.7.9.1"/>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6753)
  - device-mapper version upgrade to 1.02.196
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
</package>
<package pkgid="ff1a15f71ec3bd5497644a944c029e708fb0188f4b905989454d8a13be307585" name="libmount1" arch="aarch64">
  <version epoch="0" ver="2.37.4" rel="150500.9.11.1"/>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-more-ARM-cores-1.patch,
  util-linux-lscpu-add-more-ARM-cores-2.patch,
  util-linux-lscpu-add-more-ARM-cores-3.patch,
  util-linux-lscpu-add-more-ARM-cores-4.patch,
  util-linux-lscpu-add-more-ARM-cores-5.patch,
  util-linux-lscpu-add-more-ARM-cores-6.patch).</changelog>
</package>
<package pkgid="283ca9d7e58b0472b2cd5cdca6036b5cb20e10a2d5301ff39e5d2393c08ea296" name="libmount1" arch="s390x">
  <version epoch="0" ver="2.37.4" rel="150500.9.11.1"/>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-more-ARM-cores-1.patch,
  util-linux-lscpu-add-more-ARM-cores-2.patch,
  util-linux-lscpu-add-more-ARM-cores-3.patch,
  util-linux-lscpu-add-more-ARM-cores-4.patch,
  util-linux-lscpu-add-more-ARM-cores-5.patch,
  util-linux-lscpu-add-more-ARM-cores-6.patch).</changelog>
</package>
<package pkgid="602cbb2972f0e9d307d18c95d82ada349ac74e5b09850b558eb35ec50d942f39" name="libmount1" arch="x86_64">
  <version epoch="0" ver="2.37.4" rel="150500.9.11.1"/>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-more-ARM-cores-1.patch,
  util-linux-lscpu-add-more-ARM-cores-2.patch,
  util-linux-lscpu-add-more-ARM-cores-3.patch,
  util-linux-lscpu-add-more-ARM-cores-4.patch,
  util-linux-lscpu-add-more-ARM-cores-5.patch,
  util-linux-lscpu-add-more-ARM-cores-6.patch).</changelog>
</package>
<package pkgid="1891c9ae55f7fec735a9e2a366868193cd349ec11eada38f480b36d26c4b112d" name="libmount1" arch="aarch64">
  <version epoch="0" ver="2.37.4" rel="150500.9.14.2"/>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-more-ARM-cores-1.patch,
  util-linux-lscpu-add-more-ARM-cores-2.patch,
  util-linux-lscpu-add-more-ARM-cores-3.patch,
  util-linux-lscpu-add-more-ARM-cores-4.patch,
  util-linux-lscpu-add-more-ARM-cores-5.patch,
  util-linux-lscpu-add-more-ARM-cores-6.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
</package>
<package pkgid="30d792a074a8743b01d4582e62f44295338758d869b04ed97d1ff02b48c5237b" name="libmount1" arch="s390x">
  <version epoch="0" ver="2.37.4" rel="150500.9.14.2"/>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-more-ARM-cores-1.patch,
  util-linux-lscpu-add-more-ARM-cores-2.patch,
  util-linux-lscpu-add-more-ARM-cores-3.patch,
  util-linux-lscpu-add-more-ARM-cores-4.patch,
  util-linux-lscpu-add-more-ARM-cores-5.patch,
  util-linux-lscpu-add-more-ARM-cores-6.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
</package>
<package pkgid="9282206d8548184d6119eeeb41d951812d1c2c4ed1bc09873b36da2ba037e186" name="libmount1" arch="x86_64">
  <version epoch="0" ver="2.37.4" rel="150500.9.14.2"/>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-more-ARM-cores-1.patch,
  util-linux-lscpu-add-more-ARM-cores-2.patch,
  util-linux-lscpu-add-more-ARM-cores-3.patch,
  util-linux-lscpu-add-more-ARM-cores-4.patch,
  util-linux-lscpu-add-more-ARM-cores-5.patch,
  util-linux-lscpu-add-more-ARM-cores-6.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
</package>
<package pkgid="ef16803d456406a045ec070544f11e715d5724d54c0fb804fa9b8784e6e2dc79" name="libmount1" arch="aarch64">
  <version epoch="0" ver="2.37.4" rel="150500.9.17.2"/>
  <changelog author="sbrabec@suse.com" date="1646308800">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-more-ARM-cores-1.patch,
  util-linux-lscpu-add-more-ARM-cores-2.patch,
  util-linux-lscpu-add-more-ARM-cores-3.patch,
  util-linux-lscpu-add-more-ARM-cores-4.patch,
  util-linux-lscpu-add-more-ARM-cores-5.patch,
  util-linux-lscpu-add-more-ARM-cores-6.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1725364800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).</changelog>
</package>
<package pkgid="14f661815d6eec0bd972f7583d5a75ba9e9e28a1f2c192f3deeed301a7a71a6c" name="libmount1" arch="s390x">
  <version epoch="0" ver="2.37.4" rel="150500.9.17.2"/>
  <changelog author="sbrabec@suse.com" date="1646308800">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-more-ARM-cores-1.patch,
  util-linux-lscpu-add-more-ARM-cores-2.patch,
  util-linux-lscpu-add-more-ARM-cores-3.patch,
  util-linux-lscpu-add-more-ARM-cores-4.patch,
  util-linux-lscpu-add-more-ARM-cores-5.patch,
  util-linux-lscpu-add-more-ARM-cores-6.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1725364800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).</changelog>
</package>
<package pkgid="f0bc39c767b6cda36c3fcdb9e7344414be88c4a22f05a20fb2666f4e59dcd98d" name="libmount1" arch="x86_64">
  <version epoch="0" ver="2.37.4" rel="150500.9.17.2"/>
  <changelog author="sbrabec@suse.com" date="1646308800">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-more-ARM-cores-1.patch,
  util-linux-lscpu-add-more-ARM-cores-2.patch,
  util-linux-lscpu-add-more-ARM-cores-3.patch,
  util-linux-lscpu-add-more-ARM-cores-4.patch,
  util-linux-lscpu-add-more-ARM-cores-5.patch,
  util-linux-lscpu-add-more-ARM-cores-6.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1725364800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).</changelog>
</package>
<package pkgid="0b58cfe72d0dbac8e4f81ff1000b65910fa8c3b6758838a48001996a1ddf14d3" name="libmount1" arch="aarch64">
  <version epoch="0" ver="2.37.4" rel="150500.9.3.1"/>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
</package>
<package pkgid="931127631c9f944e0b96ee70479c7bb90961df208a501aa777a96b39ee4b1d28" name="libmount1" arch="s390x">
  <version epoch="0" ver="2.37.4" rel="150500.9.3.1"/>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
</package>
<package pkgid="d4bd799db08286a3822e93843d3b87c5241bbada5e082fabe6ba74e9c5aeba04" name="libmount1" arch="x86_64">
  <version epoch="0" ver="2.37.4" rel="150500.9.3.1"/>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
</package>
<package pkgid="69bc7fbd6b6b66bad4b17bdcd63998c71af079061b26edb96d1a1f58db9735de" name="libmount1" arch="aarch64">
  <version epoch="0" ver="2.37.4" rel="150500.9.6.1"/>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
</package>
<package pkgid="d45e8393c60c152954cadf8a195c834764fceb52679a7a0d3c3cb564008740ef" name="libmount1" arch="s390x">
  <version epoch="0" ver="2.37.4" rel="150500.9.6.1"/>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
</package>
<package pkgid="aabd096ff0d7febec9e14a0ac5f48a32c2ac999d9a4c207bdaeb4467fbdec1a7" name="libmount1" arch="x86_64">
  <version epoch="0" ver="2.37.4" rel="150500.9.6.1"/>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
</package>
<package pkgid="86deb5759f3b88c3bd6f303ac165ea2ab09f155e63792304f058f64ea7e67cb4" name="libmpath0" arch="aarch64">
  <version epoch="0" ver="0.9.4+117+suse.87f2634" rel="150500.3.9.1"/>
  <changelog author="mwilck@suse.com" date="1645012800">- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus</changelog>
  <changelog author="mwilck@suse.com" date="1648468800">- If multipath-tools is newly installed, load dm-multipath
  (bsc#1196898)</changelog>
  <changelog author="mwilck@suse.com" date="1649937600">- Update to version 0.8.9+42+suse.45974f11:
  * Logging improvements
  * Fix busy loop with delayed_reconfigure (bsc#1199342)
  * multipathd: use remove_map_callback for delayed reconfigure
  * multipathd: Don't keep starting TUR threads, if they always hang.
    (bsc#1199345)
  * Fix handling of path addition in read-only arrays on NVMe
  * Updates of built-in hardware database
- Update to upstream 0.8.9
  * libmultipath: only warn once about unsupported dev_loss_tmo
  * Otherwise code-identical to 0.8.8+64</changelog>
  <changelog author="mwilck@suse.com" date="1652097600">- Update to version 0.8.9+85+suse.a9da21c:
  * This is a pre-release of multipath-tools 0.9.0
  * multipath.conf: add "protocol" subsection in "overrides" section
    This allows to set "dev_loss_tmo", "fast_io_fail_tmo", and
    "eh_deadline" on a per-protocol basis rather than per storage
  * multipath.conf: drop support for deprecated options:
    getuid_callout, pg_timeout, config_dir, multipath_dir
  * multipathd: don't switch to DAEMON_IDLE during startup
  (bsc#1199346, bsc#1197570)
  * multipathd: avoid delays during uevent processing (bsc#1199347)
  * Fixes for minor issues reported by coverity
  * Fix for memory leak with uid_attrs
  * Fix possibility to redefine -D_FORTIFY_SOURCE macro.
  * Updates for built in hardware db</changelog>
  <changelog author="mwilck@suse.com" date="1652184000">- Update to version 0.8.9+87+suse.a1eb122:
  * add ability to autodetect support for -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1652270400">- Update to version 0.8.9+90+suse.71a70fb:
  * support overriding -D_FORTIFY_SOURCE in OPTFLAGS
  * add -U_FORTIFY_SOURCE to optflags to avoid compilation errors
    on old distros</changelog>
  <changelog author="mwilck@suse.com" date="1657713600">- Update to version 0.9.0+33+suse.fdc6686
  * multipath.conf: add support for "protocol" subsection in
    "overrides" section to set certain config options by protocol.
  * Removed the previously deprecated options getuid_callout,
    config_dir, multipath_dir, pg_timeout
  * hwable fixes and additions
  * multipath.conf(5): add disclaimer about vendor support
  * libmultipath, kpartx: fix callers of dm_get_next_target()
  * Change built-in defaults for NVMe: group by prio, and immediate
    failback
  * Allow compilation with -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1657713601">- Update to version 0.9.0+39+suse.51a2ab1:
  Upstream bug fixes:
  * libmultipath: fix find_multipaths_timeout for unknown hardware
  (boo#1201483)
  * multipath-tools: fix "multipath -ll" for Native NVME Multipath devices
  (boo#1201483)</changelog>
  <changelog author="mwilck@suse.com" date="1661342400">- Update to version 0.9.0+55+suse.33d8854:
  * Avoid linking to libreadline to avoid licensing issue
    (bsc#1202616)</changelog>
  <changelog author="mwilck@suse.com" date="1662206400">- Update to version 0.9.0+134+suse.dbf2e2d:
  * Add multipathc command under GPL3.0, and split off libmpathutil
    (bsc#1202616)
  * Fix command completion in interactive mode (bsc#1201483)
  * multipathd: fix use-after-free in handle_path_wwid_change()
    (bsc#1201483)
  * Improve startup time for very large multipath.conf (bsc#1200523)
  * Avoid checker blocking event handling for huge number of devices
    (boo#1203085)
  * Cleanup sysfs accessors in libmultipath
  * Minor upstream bug fixes
  * Spelling fixes
  * Documentation: add ALUA info to README.md, delete README.alua</changelog>
  <changelog author="mwilck@suse.com" date="1662552000">- Update to version 0.9.1+48+suse.9c6c435:
  * Upstream version update
  * kpartx_id: remove bashism
  * Doc: add multipathc.8 manual page</changelog>
  <changelog author="mwilck@suse.com" date="1662724800">- Update to version 0.9.1+52+suse.be8809e:
  * Code-identical to 0.9.1+48+suse.9c6c435 (merge in git repo
    to preserve history; fix revision in _service file).</changelog>
  <changelog author="mwilck@suse.com" date="1666612800">- Update to version 0.9.2+57+suse.cf3c1e9:
  * Fix multipathd authorization bypass and symlink attack
    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
  * add multipath-dracut.conf: dracut config file to install
    tmpfiles.d/multipath.conf in initramfs
  * Use "queue_mode bio" for NVMeoF/TCP devices
  * Upstream bug fixes and hwtable updates
- Drop recompress.service, it just slows down build</changelog>
  <changelog author="mwilck@suse.com" date="1666785600">- Update to version 0.9.2+59+suse.ac8942d:
  * Fix segfault in "multipath -t" command (boo#1204731)</changelog>
  <changelog author="mwilck@suse.com" date="1674043200">- Fix "rpm --verify" (bsc#1207232)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 0.9.4+68+suse.98559ea:
  * libmultipath: bump ABI version to 18.0.0
  * libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
    (gh#opensvc/multipath-tools#56)
  * libmpathpersist: use conf-&gt;timeout for updating persistent reservations
    (gh#opensvc/multipath-tools#45)
  * libmultipath: is_path_valid(): check if device is in use
    (bsc#1203141) (added libmount dependency)
  * libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
  * multipathd: handle no active paths in update_map_pr (bsc#1207546)
  * multipathd: make pr registration consistent (bsc#1207546)
  * libmultipath: don't leak memory on invalid strings  (bsc#1207546)
  * multipath.conf(5): improve documentation of dev_loss_tmo (bsc#1207546)
  * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
  * libmultipath: fix 'show paths format' failure
  * minor bugfixes
  * hwtable fixes
  * Build system rework
  * spec file: adapt make command line to changes in build system
  * spec file: use make -Orecurse (better readable output)
  * spec file: use verbose build</changelog>
  <changelog author="mwilck@suse.com" date="1679486400">- Update to version 0.9.4+71+suse.c648a77:
  * libmultipath: avoid grouping paths wrongly with "find_multipaths smart"
    (bsc#1209623)
  * fix multipath-tools build with liburcu 0.14.0</changelog>
  <changelog author="mwilck@suse.com" date="1688472000">- Update to version 0.9.4+73+suse.a5414a6:
  * libmultipath: ignore nvme devices if nvme native multipath is enabled
    (bsc#1212854)
  * libmultipath: fix dev_loss_tmo even if not set in configuration
    (bsc#1212440)
    Note: this changes user-visible behavior. multipathd will not
    grab any nvme devices for dm-multipath if nvme native multipathing
    is on (which is the default on SLE and openSUSE).</changelog>
  <changelog author="mwilck@suse.com" date="1704456000">- Update to version 0.9.4+77+suse.1f7a63b:
  * fix ANA prioritizer enablement logic (bsc#1218326)</changelog>
  <changelog author="mwilck@suse.com" date="1709035200">- Update to version 0.9.4+117+suse.87f2634
- Backport of earlier bugfixes:
  * Fix activation of LVM volume groups during coldplug (bsc#1219142)
  * avoid changing SCSI timeouts in "multipath -d" (bsc#1213809)
  * fix dev_loss_tmo even if not set in configuration (bsc#1212440)
- Backport of upstream bug fixes (bsc#1220374):
  * avoid setting queue_if_no_path on multipath maps for which the
    no_path_retry timeout has expired
  * fixed memory and error handling for code using aio (marginal path code,
    directio path checker)
  * libmultipath: fix max_sectors_kb on adding path
  * fix warnings reported by udevadm verify
  * libmultipath: use directio checker for LIO targets
    (gh#opensvc/multipath-tools#54)
  * multipathd.service: remove "Also=multipathd.socket"
    (gh#opensvc/multipath-tools#65)
  * libmultipathd: Avoid parsing errors due to unsupported designators
  * libmultipath: return 'pending' state when port is in transition
  * multipath.rules: fix "smart" bug with failed valid path check
  * libmpathpersist: fix resource leak in update_map_pr()
  * libmultipath: keep renames from stopping other multipath actions
  * pass EXTRAVERSION to build</changelog>
</package>
<package pkgid="85c9eb51b367897173754f6f10b01b91af4d5121dbed844c5095a82ea7ca07e8" name="libmpath0" arch="s390x">
  <version epoch="0" ver="0.9.4+117+suse.87f2634" rel="150500.3.9.1"/>
  <changelog author="mwilck@suse.com" date="1645012800">- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus</changelog>
  <changelog author="mwilck@suse.com" date="1648468800">- If multipath-tools is newly installed, load dm-multipath
  (bsc#1196898)</changelog>
  <changelog author="mwilck@suse.com" date="1649937600">- Update to version 0.8.9+42+suse.45974f11:
  * Logging improvements
  * Fix busy loop with delayed_reconfigure (bsc#1199342)
  * multipathd: use remove_map_callback for delayed reconfigure
  * multipathd: Don't keep starting TUR threads, if they always hang.
    (bsc#1199345)
  * Fix handling of path addition in read-only arrays on NVMe
  * Updates of built-in hardware database
- Update to upstream 0.8.9
  * libmultipath: only warn once about unsupported dev_loss_tmo
  * Otherwise code-identical to 0.8.8+64</changelog>
  <changelog author="mwilck@suse.com" date="1652097600">- Update to version 0.8.9+85+suse.a9da21c:
  * This is a pre-release of multipath-tools 0.9.0
  * multipath.conf: add "protocol" subsection in "overrides" section
    This allows to set "dev_loss_tmo", "fast_io_fail_tmo", and
    "eh_deadline" on a per-protocol basis rather than per storage
  * multipath.conf: drop support for deprecated options:
    getuid_callout, pg_timeout, config_dir, multipath_dir
  * multipathd: don't switch to DAEMON_IDLE during startup
  (bsc#1199346, bsc#1197570)
  * multipathd: avoid delays during uevent processing (bsc#1199347)
  * Fixes for minor issues reported by coverity
  * Fix for memory leak with uid_attrs
  * Fix possibility to redefine -D_FORTIFY_SOURCE macro.
  * Updates for built in hardware db</changelog>
  <changelog author="mwilck@suse.com" date="1652184000">- Update to version 0.8.9+87+suse.a1eb122:
  * add ability to autodetect support for -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1652270400">- Update to version 0.8.9+90+suse.71a70fb:
  * support overriding -D_FORTIFY_SOURCE in OPTFLAGS
  * add -U_FORTIFY_SOURCE to optflags to avoid compilation errors
    on old distros</changelog>
  <changelog author="mwilck@suse.com" date="1657713600">- Update to version 0.9.0+33+suse.fdc6686
  * multipath.conf: add support for "protocol" subsection in
    "overrides" section to set certain config options by protocol.
  * Removed the previously deprecated options getuid_callout,
    config_dir, multipath_dir, pg_timeout
  * hwable fixes and additions
  * multipath.conf(5): add disclaimer about vendor support
  * libmultipath, kpartx: fix callers of dm_get_next_target()
  * Change built-in defaults for NVMe: group by prio, and immediate
    failback
  * Allow compilation with -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1657713601">- Update to version 0.9.0+39+suse.51a2ab1:
  Upstream bug fixes:
  * libmultipath: fix find_multipaths_timeout for unknown hardware
  (boo#1201483)
  * multipath-tools: fix "multipath -ll" for Native NVME Multipath devices
  (boo#1201483)</changelog>
  <changelog author="mwilck@suse.com" date="1661342400">- Update to version 0.9.0+55+suse.33d8854:
  * Avoid linking to libreadline to avoid licensing issue
    (bsc#1202616)</changelog>
  <changelog author="mwilck@suse.com" date="1662206400">- Update to version 0.9.0+134+suse.dbf2e2d:
  * Add multipathc command under GPL3.0, and split off libmpathutil
    (bsc#1202616)
  * Fix command completion in interactive mode (bsc#1201483)
  * multipathd: fix use-after-free in handle_path_wwid_change()
    (bsc#1201483)
  * Improve startup time for very large multipath.conf (bsc#1200523)
  * Avoid checker blocking event handling for huge number of devices
    (boo#1203085)
  * Cleanup sysfs accessors in libmultipath
  * Minor upstream bug fixes
  * Spelling fixes
  * Documentation: add ALUA info to README.md, delete README.alua</changelog>
  <changelog author="mwilck@suse.com" date="1662552000">- Update to version 0.9.1+48+suse.9c6c435:
  * Upstream version update
  * kpartx_id: remove bashism
  * Doc: add multipathc.8 manual page</changelog>
  <changelog author="mwilck@suse.com" date="1662724800">- Update to version 0.9.1+52+suse.be8809e:
  * Code-identical to 0.9.1+48+suse.9c6c435 (merge in git repo
    to preserve history; fix revision in _service file).</changelog>
  <changelog author="mwilck@suse.com" date="1666612800">- Update to version 0.9.2+57+suse.cf3c1e9:
  * Fix multipathd authorization bypass and symlink attack
    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
  * add multipath-dracut.conf: dracut config file to install
    tmpfiles.d/multipath.conf in initramfs
  * Use "queue_mode bio" for NVMeoF/TCP devices
  * Upstream bug fixes and hwtable updates
- Drop recompress.service, it just slows down build</changelog>
  <changelog author="mwilck@suse.com" date="1666785600">- Update to version 0.9.2+59+suse.ac8942d:
  * Fix segfault in "multipath -t" command (boo#1204731)</changelog>
  <changelog author="mwilck@suse.com" date="1674043200">- Fix "rpm --verify" (bsc#1207232)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 0.9.4+68+suse.98559ea:
  * libmultipath: bump ABI version to 18.0.0
  * libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
    (gh#opensvc/multipath-tools#56)
  * libmpathpersist: use conf-&gt;timeout for updating persistent reservations
    (gh#opensvc/multipath-tools#45)
  * libmultipath: is_path_valid(): check if device is in use
    (bsc#1203141) (added libmount dependency)
  * libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
  * multipathd: handle no active paths in update_map_pr (bsc#1207546)
  * multipathd: make pr registration consistent (bsc#1207546)
  * libmultipath: don't leak memory on invalid strings  (bsc#1207546)
  * multipath.conf(5): improve documentation of dev_loss_tmo (bsc#1207546)
  * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
  * libmultipath: fix 'show paths format' failure
  * minor bugfixes
  * hwtable fixes
  * Build system rework
  * spec file: adapt make command line to changes in build system
  * spec file: use make -Orecurse (better readable output)
  * spec file: use verbose build</changelog>
  <changelog author="mwilck@suse.com" date="1679486400">- Update to version 0.9.4+71+suse.c648a77:
  * libmultipath: avoid grouping paths wrongly with "find_multipaths smart"
    (bsc#1209623)
  * fix multipath-tools build with liburcu 0.14.0</changelog>
  <changelog author="mwilck@suse.com" date="1688472000">- Update to version 0.9.4+73+suse.a5414a6:
  * libmultipath: ignore nvme devices if nvme native multipath is enabled
    (bsc#1212854)
  * libmultipath: fix dev_loss_tmo even if not set in configuration
    (bsc#1212440)
    Note: this changes user-visible behavior. multipathd will not
    grab any nvme devices for dm-multipath if nvme native multipathing
    is on (which is the default on SLE and openSUSE).</changelog>
  <changelog author="mwilck@suse.com" date="1704456000">- Update to version 0.9.4+77+suse.1f7a63b:
  * fix ANA prioritizer enablement logic (bsc#1218326)</changelog>
  <changelog author="mwilck@suse.com" date="1709035200">- Update to version 0.9.4+117+suse.87f2634
- Backport of earlier bugfixes:
  * Fix activation of LVM volume groups during coldplug (bsc#1219142)
  * avoid changing SCSI timeouts in "multipath -d" (bsc#1213809)
  * fix dev_loss_tmo even if not set in configuration (bsc#1212440)
- Backport of upstream bug fixes (bsc#1220374):
  * avoid setting queue_if_no_path on multipath maps for which the
    no_path_retry timeout has expired
  * fixed memory and error handling for code using aio (marginal path code,
    directio path checker)
  * libmultipath: fix max_sectors_kb on adding path
  * fix warnings reported by udevadm verify
  * libmultipath: use directio checker for LIO targets
    (gh#opensvc/multipath-tools#54)
  * multipathd.service: remove "Also=multipathd.socket"
    (gh#opensvc/multipath-tools#65)
  * libmultipathd: Avoid parsing errors due to unsupported designators
  * libmultipath: return 'pending' state when port is in transition
  * multipath.rules: fix "smart" bug with failed valid path check
  * libmpathpersist: fix resource leak in update_map_pr()
  * libmultipath: keep renames from stopping other multipath actions
  * pass EXTRAVERSION to build</changelog>
</package>
<package pkgid="abdadc4a3188b79181e62d5d2a36ada56984067ec720faf6065fbd8bbfe497f1" name="libmpath0" arch="x86_64">
  <version epoch="0" ver="0.9.4+117+suse.87f2634" rel="150500.3.9.1"/>
  <changelog author="mwilck@suse.com" date="1645012800">- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus</changelog>
  <changelog author="mwilck@suse.com" date="1648468800">- If multipath-tools is newly installed, load dm-multipath
  (bsc#1196898)</changelog>
  <changelog author="mwilck@suse.com" date="1649937600">- Update to version 0.8.9+42+suse.45974f11:
  * Logging improvements
  * Fix busy loop with delayed_reconfigure (bsc#1199342)
  * multipathd: use remove_map_callback for delayed reconfigure
  * multipathd: Don't keep starting TUR threads, if they always hang.
    (bsc#1199345)
  * Fix handling of path addition in read-only arrays on NVMe
  * Updates of built-in hardware database
- Update to upstream 0.8.9
  * libmultipath: only warn once about unsupported dev_loss_tmo
  * Otherwise code-identical to 0.8.8+64</changelog>
  <changelog author="mwilck@suse.com" date="1652097600">- Update to version 0.8.9+85+suse.a9da21c:
  * This is a pre-release of multipath-tools 0.9.0
  * multipath.conf: add "protocol" subsection in "overrides" section
    This allows to set "dev_loss_tmo", "fast_io_fail_tmo", and
    "eh_deadline" on a per-protocol basis rather than per storage
  * multipath.conf: drop support for deprecated options:
    getuid_callout, pg_timeout, config_dir, multipath_dir
  * multipathd: don't switch to DAEMON_IDLE during startup
  (bsc#1199346, bsc#1197570)
  * multipathd: avoid delays during uevent processing (bsc#1199347)
  * Fixes for minor issues reported by coverity
  * Fix for memory leak with uid_attrs
  * Fix possibility to redefine -D_FORTIFY_SOURCE macro.
  * Updates for built in hardware db</changelog>
  <changelog author="mwilck@suse.com" date="1652184000">- Update to version 0.8.9+87+suse.a1eb122:
  * add ability to autodetect support for -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1652270400">- Update to version 0.8.9+90+suse.71a70fb:
  * support overriding -D_FORTIFY_SOURCE in OPTFLAGS
  * add -U_FORTIFY_SOURCE to optflags to avoid compilation errors
    on old distros</changelog>
  <changelog author="mwilck@suse.com" date="1657713600">- Update to version 0.9.0+33+suse.fdc6686
  * multipath.conf: add support for "protocol" subsection in
    "overrides" section to set certain config options by protocol.
  * Removed the previously deprecated options getuid_callout,
    config_dir, multipath_dir, pg_timeout
  * hwable fixes and additions
  * multipath.conf(5): add disclaimer about vendor support
  * libmultipath, kpartx: fix callers of dm_get_next_target()
  * Change built-in defaults for NVMe: group by prio, and immediate
    failback
  * Allow compilation with -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1657713601">- Update to version 0.9.0+39+suse.51a2ab1:
  Upstream bug fixes:
  * libmultipath: fix find_multipaths_timeout for unknown hardware
  (boo#1201483)
  * multipath-tools: fix "multipath -ll" for Native NVME Multipath devices
  (boo#1201483)</changelog>
  <changelog author="mwilck@suse.com" date="1661342400">- Update to version 0.9.0+55+suse.33d8854:
  * Avoid linking to libreadline to avoid licensing issue
    (bsc#1202616)</changelog>
  <changelog author="mwilck@suse.com" date="1662206400">- Update to version 0.9.0+134+suse.dbf2e2d:
  * Add multipathc command under GPL3.0, and split off libmpathutil
    (bsc#1202616)
  * Fix command completion in interactive mode (bsc#1201483)
  * multipathd: fix use-after-free in handle_path_wwid_change()
    (bsc#1201483)
  * Improve startup time for very large multipath.conf (bsc#1200523)
  * Avoid checker blocking event handling for huge number of devices
    (boo#1203085)
  * Cleanup sysfs accessors in libmultipath
  * Minor upstream bug fixes
  * Spelling fixes
  * Documentation: add ALUA info to README.md, delete README.alua</changelog>
  <changelog author="mwilck@suse.com" date="1662552000">- Update to version 0.9.1+48+suse.9c6c435:
  * Upstream version update
  * kpartx_id: remove bashism
  * Doc: add multipathc.8 manual page</changelog>
  <changelog author="mwilck@suse.com" date="1662724800">- Update to version 0.9.1+52+suse.be8809e:
  * Code-identical to 0.9.1+48+suse.9c6c435 (merge in git repo
    to preserve history; fix revision in _service file).</changelog>
  <changelog author="mwilck@suse.com" date="1666612800">- Update to version 0.9.2+57+suse.cf3c1e9:
  * Fix multipathd authorization bypass and symlink attack
    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
  * add multipath-dracut.conf: dracut config file to install
    tmpfiles.d/multipath.conf in initramfs
  * Use "queue_mode bio" for NVMeoF/TCP devices
  * Upstream bug fixes and hwtable updates
- Drop recompress.service, it just slows down build</changelog>
  <changelog author="mwilck@suse.com" date="1666785600">- Update to version 0.9.2+59+suse.ac8942d:
  * Fix segfault in "multipath -t" command (boo#1204731)</changelog>
  <changelog author="mwilck@suse.com" date="1674043200">- Fix "rpm --verify" (bsc#1207232)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 0.9.4+68+suse.98559ea:
  * libmultipath: bump ABI version to 18.0.0
  * libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
    (gh#opensvc/multipath-tools#56)
  * libmpathpersist: use conf-&gt;timeout for updating persistent reservations
    (gh#opensvc/multipath-tools#45)
  * libmultipath: is_path_valid(): check if device is in use
    (bsc#1203141) (added libmount dependency)
  * libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
  * multipathd: handle no active paths in update_map_pr (bsc#1207546)
  * multipathd: make pr registration consistent (bsc#1207546)
  * libmultipath: don't leak memory on invalid strings  (bsc#1207546)
  * multipath.conf(5): improve documentation of dev_loss_tmo (bsc#1207546)
  * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
  * libmultipath: fix 'show paths format' failure
  * minor bugfixes
  * hwtable fixes
  * Build system rework
  * spec file: adapt make command line to changes in build system
  * spec file: use make -Orecurse (better readable output)
  * spec file: use verbose build</changelog>
  <changelog author="mwilck@suse.com" date="1679486400">- Update to version 0.9.4+71+suse.c648a77:
  * libmultipath: avoid grouping paths wrongly with "find_multipaths smart"
    (bsc#1209623)
  * fix multipath-tools build with liburcu 0.14.0</changelog>
  <changelog author="mwilck@suse.com" date="1688472000">- Update to version 0.9.4+73+suse.a5414a6:
  * libmultipath: ignore nvme devices if nvme native multipath is enabled
    (bsc#1212854)
  * libmultipath: fix dev_loss_tmo even if not set in configuration
    (bsc#1212440)
    Note: this changes user-visible behavior. multipathd will not
    grab any nvme devices for dm-multipath if nvme native multipathing
    is on (which is the default on SLE and openSUSE).</changelog>
  <changelog author="mwilck@suse.com" date="1704456000">- Update to version 0.9.4+77+suse.1f7a63b:
  * fix ANA prioritizer enablement logic (bsc#1218326)</changelog>
  <changelog author="mwilck@suse.com" date="1709035200">- Update to version 0.9.4+117+suse.87f2634
- Backport of earlier bugfixes:
  * Fix activation of LVM volume groups during coldplug (bsc#1219142)
  * avoid changing SCSI timeouts in "multipath -d" (bsc#1213809)
  * fix dev_loss_tmo even if not set in configuration (bsc#1212440)
- Backport of upstream bug fixes (bsc#1220374):
  * avoid setting queue_if_no_path on multipath maps for which the
    no_path_retry timeout has expired
  * fixed memory and error handling for code using aio (marginal path code,
    directio path checker)
  * libmultipath: fix max_sectors_kb on adding path
  * fix warnings reported by udevadm verify
  * libmultipath: use directio checker for LIO targets
    (gh#opensvc/multipath-tools#54)
  * multipathd.service: remove "Also=multipathd.socket"
    (gh#opensvc/multipath-tools#65)
  * libmultipathd: Avoid parsing errors due to unsupported designators
  * libmultipath: return 'pending' state when port is in transition
  * multipath.rules: fix "smart" bug with failed valid path check
  * libmpathpersist: fix resource leak in update_map_pr()
  * libmultipath: keep renames from stopping other multipath actions
  * pass EXTRAVERSION to build</changelog>
</package>
<package pkgid="6c809c68b2f94526054eb32d9dcfbf30125d25e62c6d3a8b49b0ea73a9b53599" name="libmpath0" arch="aarch64">
  <version epoch="0" ver="0.9.4+77+suse.1f7a63b" rel="150500.3.6.1"/>
  <changelog author="mwilck@suse.com" date="1644926400">- Update to version 0.8.8+60+suse.4c5922cb:
  * multipathd: add suppport for FC Fabric Performance Impact
    Notifications (FPIN) (bsc#1195506)</changelog>
  <changelog author="mwilck@suse.com" date="1645012800">- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus</changelog>
  <changelog author="mwilck@suse.com" date="1648468800">- If multipath-tools is newly installed, load dm-multipath
  (bsc#1196898)</changelog>
  <changelog author="mwilck@suse.com" date="1649937600">- Update to version 0.8.9+42+suse.45974f11:
  * Logging improvements
  * Fix busy loop with delayed_reconfigure (bsc#1199342)
  * multipathd: use remove_map_callback for delayed reconfigure
  * multipathd: Don't keep starting TUR threads, if they always hang.
    (bsc#1199345)
  * Fix handling of path addition in read-only arrays on NVMe
  * Updates of built-in hardware database
- Update to upstream 0.8.9
  * libmultipath: only warn once about unsupported dev_loss_tmo
  * Otherwise code-identical to 0.8.8+64</changelog>
  <changelog author="mwilck@suse.com" date="1652097600">- Update to version 0.8.9+85+suse.a9da21c:
  * This is a pre-release of multipath-tools 0.9.0
  * multipath.conf: add "protocol" subsection in "overrides" section
    This allows to set "dev_loss_tmo", "fast_io_fail_tmo", and
    "eh_deadline" on a per-protocol basis rather than per storage
  * multipath.conf: drop support for deprecated options:
    getuid_callout, pg_timeout, config_dir, multipath_dir
  * multipathd: don't switch to DAEMON_IDLE during startup
  (bsc#1199346, bsc#1197570)
  * multipathd: avoid delays during uevent processing (bsc#1199347)
  * Fixes for minor issues reported by coverity
  * Fix for memory leak with uid_attrs
  * Fix possibility to redefine -D_FORTIFY_SOURCE macro.
  * Updates for built in hardware db</changelog>
  <changelog author="mwilck@suse.com" date="1652184000">- Update to version 0.8.9+87+suse.a1eb122:
  * add ability to autodetect support for -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1652270400">- Update to version 0.8.9+90+suse.71a70fb:
  * support overriding -D_FORTIFY_SOURCE in OPTFLAGS
  * add -U_FORTIFY_SOURCE to optflags to avoid compilation errors
    on old distros</changelog>
  <changelog author="mwilck@suse.com" date="1657713600">- Update to version 0.9.0+33+suse.fdc6686
  * multipath.conf: add support for "protocol" subsection in
    "overrides" section to set certain config options by protocol.
  * Removed the previously deprecated options getuid_callout,
    config_dir, multipath_dir, pg_timeout
  * hwable fixes and additions
  * multipath.conf(5): add disclaimer about vendor support
  * libmultipath, kpartx: fix callers of dm_get_next_target()
  * Change built-in defaults for NVMe: group by prio, and immediate
    failback
  * Allow compilation with -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1657713601">- Update to version 0.9.0+39+suse.51a2ab1:
  Upstream bug fixes:
  * libmultipath: fix find_multipaths_timeout for unknown hardware
  (boo#1201483)
  * multipath-tools: fix "multipath -ll" for Native NVME Multipath devices
  (boo#1201483)</changelog>
  <changelog author="mwilck@suse.com" date="1661342400">- Update to version 0.9.0+55+suse.33d8854:
  * Avoid linking to libreadline to avoid licensing issue
    (bsc#1202616)</changelog>
  <changelog author="mwilck@suse.com" date="1662206400">- Update to version 0.9.0+134+suse.dbf2e2d:
  * Add multipathc command under GPL3.0, and split off libmpathutil
    (bsc#1202616)
  * Fix command completion in interactive mode (bsc#1201483)
  * multipathd: fix use-after-free in handle_path_wwid_change()
    (bsc#1201483)
  * Improve startup time for very large multipath.conf (bsc#1200523)
  * Avoid checker blocking event handling for huge number of devices
    (boo#1203085)
  * Cleanup sysfs accessors in libmultipath
  * Minor upstream bug fixes
  * Spelling fixes
  * Documentation: add ALUA info to README.md, delete README.alua</changelog>
  <changelog author="mwilck@suse.com" date="1662552000">- Update to version 0.9.1+48+suse.9c6c435:
  * Upstream version update
  * kpartx_id: remove bashism
  * Doc: add multipathc.8 manual page</changelog>
  <changelog author="mwilck@suse.com" date="1662724800">- Update to version 0.9.1+52+suse.be8809e:
  * Code-identical to 0.9.1+48+suse.9c6c435 (merge in git repo
    to preserve history; fix revision in _service file).</changelog>
  <changelog author="mwilck@suse.com" date="1666612800">- Update to version 0.9.2+57+suse.cf3c1e9:
  * Fix multipathd authorization bypass and symlink attack
    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
  * add multipath-dracut.conf: dracut config file to install
    tmpfiles.d/multipath.conf in initramfs
  * Use "queue_mode bio" for NVMeoF/TCP devices
  * Upstream bug fixes and hwtable updates
- Drop recompress.service, it just slows down build</changelog>
  <changelog author="mwilck@suse.com" date="1666785600">- Update to version 0.9.2+59+suse.ac8942d:
  * Fix segfault in "multipath -t" command (boo#1204731)</changelog>
  <changelog author="mwilck@suse.com" date="1674043200">- Fix "rpm --verify" (bsc#1207232)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 0.9.4+68+suse.98559ea:
  * libmultipath: bump ABI version to 18.0.0
  * libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
    (gh#opensvc/multipath-tools#56)
  * libmpathpersist: use conf-&gt;timeout for updating persistent reservations
    (gh#opensvc/multipath-tools#45)
  * libmultipath: is_path_valid(): check if device is in use
    (bsc#1203141) (added libmount dependency)
  * libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
  * multipathd: handle no active paths in update_map_pr (bsc#1207546)
  * multipathd: make pr registration consistent (bsc#1207546)
  * libmultipath: don't leak memory on invalid strings  (bsc#1207546)
  * multipath.conf(5): improve documentation of dev_loss_tmo (bsc#1207546)
  * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
  * libmultipath: fix 'show paths format' failure
  * minor bugfixes
  * hwtable fixes
  * Build system rework
  * spec file: adapt make command line to changes in build system
  * spec file: use make -Orecurse (better readable output)
  * spec file: use verbose build</changelog>
  <changelog author="mwilck@suse.com" date="1679486400">- Update to version 0.9.4+71+suse.c648a77:
  * libmultipath: avoid grouping paths wrongly with "find_multipaths smart"
    (bsc#1209623)
  * fix multipath-tools build with liburcu 0.14.0</changelog>
  <changelog author="mwilck@suse.com" date="1688472000">- Update to version 0.9.4+73+suse.a5414a6:
  * libmultipath: ignore nvme devices if nvme native multipath is enabled
    (bsc#1212854)
  * libmultipath: fix dev_loss_tmo even if not set in configuration
    (bsc#1212440)
    Note: this changes user-visible behavior. multipathd will not
    grab any nvme devices for dm-multipath if nvme native multipathing
    is on (which is the default on SLE and openSUSE).</changelog>
  <changelog author="mwilck@suse.com" date="1704456000">- Update to version 0.9.4+77+suse.1f7a63b:
  * fix ANA prioritizer enablement logic (bsc#1218326)</changelog>
</package>
<package pkgid="a0514b871eab3a25036e6c9d78cadd6ab343cbaba71e8cf597f92d0ad241b497" name="libmpath0" arch="s390x">
  <version epoch="0" ver="0.9.4+77+suse.1f7a63b" rel="150500.3.6.1"/>
  <changelog author="mwilck@suse.com" date="1644926400">- Update to version 0.8.8+60+suse.4c5922cb:
  * multipathd: add suppport for FC Fabric Performance Impact
    Notifications (FPIN) (bsc#1195506)</changelog>
  <changelog author="mwilck@suse.com" date="1645012800">- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus</changelog>
  <changelog author="mwilck@suse.com" date="1648468800">- If multipath-tools is newly installed, load dm-multipath
  (bsc#1196898)</changelog>
  <changelog author="mwilck@suse.com" date="1649937600">- Update to version 0.8.9+42+suse.45974f11:
  * Logging improvements
  * Fix busy loop with delayed_reconfigure (bsc#1199342)
  * multipathd: use remove_map_callback for delayed reconfigure
  * multipathd: Don't keep starting TUR threads, if they always hang.
    (bsc#1199345)
  * Fix handling of path addition in read-only arrays on NVMe
  * Updates of built-in hardware database
- Update to upstream 0.8.9
  * libmultipath: only warn once about unsupported dev_loss_tmo
  * Otherwise code-identical to 0.8.8+64</changelog>
  <changelog author="mwilck@suse.com" date="1652097600">- Update to version 0.8.9+85+suse.a9da21c:
  * This is a pre-release of multipath-tools 0.9.0
  * multipath.conf: add "protocol" subsection in "overrides" section
    This allows to set "dev_loss_tmo", "fast_io_fail_tmo", and
    "eh_deadline" on a per-protocol basis rather than per storage
  * multipath.conf: drop support for deprecated options:
    getuid_callout, pg_timeout, config_dir, multipath_dir
  * multipathd: don't switch to DAEMON_IDLE during startup
  (bsc#1199346, bsc#1197570)
  * multipathd: avoid delays during uevent processing (bsc#1199347)
  * Fixes for minor issues reported by coverity
  * Fix for memory leak with uid_attrs
  * Fix possibility to redefine -D_FORTIFY_SOURCE macro.
  * Updates for built in hardware db</changelog>
  <changelog author="mwilck@suse.com" date="1652184000">- Update to version 0.8.9+87+suse.a1eb122:
  * add ability to autodetect support for -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1652270400">- Update to version 0.8.9+90+suse.71a70fb:
  * support overriding -D_FORTIFY_SOURCE in OPTFLAGS
  * add -U_FORTIFY_SOURCE to optflags to avoid compilation errors
    on old distros</changelog>
  <changelog author="mwilck@suse.com" date="1657713600">- Update to version 0.9.0+33+suse.fdc6686
  * multipath.conf: add support for "protocol" subsection in
    "overrides" section to set certain config options by protocol.
  * Removed the previously deprecated options getuid_callout,
    config_dir, multipath_dir, pg_timeout
  * hwable fixes and additions
  * multipath.conf(5): add disclaimer about vendor support
  * libmultipath, kpartx: fix callers of dm_get_next_target()
  * Change built-in defaults for NVMe: group by prio, and immediate
    failback
  * Allow compilation with -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1657713601">- Update to version 0.9.0+39+suse.51a2ab1:
  Upstream bug fixes:
  * libmultipath: fix find_multipaths_timeout for unknown hardware
  (boo#1201483)
  * multipath-tools: fix "multipath -ll" for Native NVME Multipath devices
  (boo#1201483)</changelog>
  <changelog author="mwilck@suse.com" date="1661342400">- Update to version 0.9.0+55+suse.33d8854:
  * Avoid linking to libreadline to avoid licensing issue
    (bsc#1202616)</changelog>
  <changelog author="mwilck@suse.com" date="1662206400">- Update to version 0.9.0+134+suse.dbf2e2d:
  * Add multipathc command under GPL3.0, and split off libmpathutil
    (bsc#1202616)
  * Fix command completion in interactive mode (bsc#1201483)
  * multipathd: fix use-after-free in handle_path_wwid_change()
    (bsc#1201483)
  * Improve startup time for very large multipath.conf (bsc#1200523)
  * Avoid checker blocking event handling for huge number of devices
    (boo#1203085)
  * Cleanup sysfs accessors in libmultipath
  * Minor upstream bug fixes
  * Spelling fixes
  * Documentation: add ALUA info to README.md, delete README.alua</changelog>
  <changelog author="mwilck@suse.com" date="1662552000">- Update to version 0.9.1+48+suse.9c6c435:
  * Upstream version update
  * kpartx_id: remove bashism
  * Doc: add multipathc.8 manual page</changelog>
  <changelog author="mwilck@suse.com" date="1662724800">- Update to version 0.9.1+52+suse.be8809e:
  * Code-identical to 0.9.1+48+suse.9c6c435 (merge in git repo
    to preserve history; fix revision in _service file).</changelog>
  <changelog author="mwilck@suse.com" date="1666612800">- Update to version 0.9.2+57+suse.cf3c1e9:
  * Fix multipathd authorization bypass and symlink attack
    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
  * add multipath-dracut.conf: dracut config file to install
    tmpfiles.d/multipath.conf in initramfs
  * Use "queue_mode bio" for NVMeoF/TCP devices
  * Upstream bug fixes and hwtable updates
- Drop recompress.service, it just slows down build</changelog>
  <changelog author="mwilck@suse.com" date="1666785600">- Update to version 0.9.2+59+suse.ac8942d:
  * Fix segfault in "multipath -t" command (boo#1204731)</changelog>
  <changelog author="mwilck@suse.com" date="1674043200">- Fix "rpm --verify" (bsc#1207232)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 0.9.4+68+suse.98559ea:
  * libmultipath: bump ABI version to 18.0.0
  * libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
    (gh#opensvc/multipath-tools#56)
  * libmpathpersist: use conf-&gt;timeout for updating persistent reservations
    (gh#opensvc/multipath-tools#45)
  * libmultipath: is_path_valid(): check if device is in use
    (bsc#1203141) (added libmount dependency)
  * libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
  * multipathd: handle no active paths in update_map_pr (bsc#1207546)
  * multipathd: make pr registration consistent (bsc#1207546)
  * libmultipath: don't leak memory on invalid strings  (bsc#1207546)
  * multipath.conf(5): improve documentation of dev_loss_tmo (bsc#1207546)
  * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
  * libmultipath: fix 'show paths format' failure
  * minor bugfixes
  * hwtable fixes
  * Build system rework
  * spec file: adapt make command line to changes in build system
  * spec file: use make -Orecurse (better readable output)
  * spec file: use verbose build</changelog>
  <changelog author="mwilck@suse.com" date="1679486400">- Update to version 0.9.4+71+suse.c648a77:
  * libmultipath: avoid grouping paths wrongly with "find_multipaths smart"
    (bsc#1209623)
  * fix multipath-tools build with liburcu 0.14.0</changelog>
  <changelog author="mwilck@suse.com" date="1688472000">- Update to version 0.9.4+73+suse.a5414a6:
  * libmultipath: ignore nvme devices if nvme native multipath is enabled
    (bsc#1212854)
  * libmultipath: fix dev_loss_tmo even if not set in configuration
    (bsc#1212440)
    Note: this changes user-visible behavior. multipathd will not
    grab any nvme devices for dm-multipath if nvme native multipathing
    is on (which is the default on SLE and openSUSE).</changelog>
  <changelog author="mwilck@suse.com" date="1704456000">- Update to version 0.9.4+77+suse.1f7a63b:
  * fix ANA prioritizer enablement logic (bsc#1218326)</changelog>
</package>
<package pkgid="957b457288164c4dc20ec7a5d56371e8eb3362a571b7e3ebfb12661c3cc7c44e" name="libmpath0" arch="x86_64">
  <version epoch="0" ver="0.9.4+77+suse.1f7a63b" rel="150500.3.6.1"/>
  <changelog author="mwilck@suse.com" date="1644926400">- Update to version 0.8.8+60+suse.4c5922cb:
  * multipathd: add suppport for FC Fabric Performance Impact
    Notifications (FPIN) (bsc#1195506)</changelog>
  <changelog author="mwilck@suse.com" date="1645012800">- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus</changelog>
  <changelog author="mwilck@suse.com" date="1648468800">- If multipath-tools is newly installed, load dm-multipath
  (bsc#1196898)</changelog>
  <changelog author="mwilck@suse.com" date="1649937600">- Update to version 0.8.9+42+suse.45974f11:
  * Logging improvements
  * Fix busy loop with delayed_reconfigure (bsc#1199342)
  * multipathd: use remove_map_callback for delayed reconfigure
  * multipathd: Don't keep starting TUR threads, if they always hang.
    (bsc#1199345)
  * Fix handling of path addition in read-only arrays on NVMe
  * Updates of built-in hardware database
- Update to upstream 0.8.9
  * libmultipath: only warn once about unsupported dev_loss_tmo
  * Otherwise code-identical to 0.8.8+64</changelog>
  <changelog author="mwilck@suse.com" date="1652097600">- Update to version 0.8.9+85+suse.a9da21c:
  * This is a pre-release of multipath-tools 0.9.0
  * multipath.conf: add "protocol" subsection in "overrides" section
    This allows to set "dev_loss_tmo", "fast_io_fail_tmo", and
    "eh_deadline" on a per-protocol basis rather than per storage
  * multipath.conf: drop support for deprecated options:
    getuid_callout, pg_timeout, config_dir, multipath_dir
  * multipathd: don't switch to DAEMON_IDLE during startup
  (bsc#1199346, bsc#1197570)
  * multipathd: avoid delays during uevent processing (bsc#1199347)
  * Fixes for minor issues reported by coverity
  * Fix for memory leak with uid_attrs
  * Fix possibility to redefine -D_FORTIFY_SOURCE macro.
  * Updates for built in hardware db</changelog>
  <changelog author="mwilck@suse.com" date="1652184000">- Update to version 0.8.9+87+suse.a1eb122:
  * add ability to autodetect support for -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1652270400">- Update to version 0.8.9+90+suse.71a70fb:
  * support overriding -D_FORTIFY_SOURCE in OPTFLAGS
  * add -U_FORTIFY_SOURCE to optflags to avoid compilation errors
    on old distros</changelog>
  <changelog author="mwilck@suse.com" date="1657713600">- Update to version 0.9.0+33+suse.fdc6686
  * multipath.conf: add support for "protocol" subsection in
    "overrides" section to set certain config options by protocol.
  * Removed the previously deprecated options getuid_callout,
    config_dir, multipath_dir, pg_timeout
  * hwable fixes and additions
  * multipath.conf(5): add disclaimer about vendor support
  * libmultipath, kpartx: fix callers of dm_get_next_target()
  * Change built-in defaults for NVMe: group by prio, and immediate
    failback
  * Allow compilation with -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1657713601">- Update to version 0.9.0+39+suse.51a2ab1:
  Upstream bug fixes:
  * libmultipath: fix find_multipaths_timeout for unknown hardware
  (boo#1201483)
  * multipath-tools: fix "multipath -ll" for Native NVME Multipath devices
  (boo#1201483)</changelog>
  <changelog author="mwilck@suse.com" date="1661342400">- Update to version 0.9.0+55+suse.33d8854:
  * Avoid linking to libreadline to avoid licensing issue
    (bsc#1202616)</changelog>
  <changelog author="mwilck@suse.com" date="1662206400">- Update to version 0.9.0+134+suse.dbf2e2d:
  * Add multipathc command under GPL3.0, and split off libmpathutil
    (bsc#1202616)
  * Fix command completion in interactive mode (bsc#1201483)
  * multipathd: fix use-after-free in handle_path_wwid_change()
    (bsc#1201483)
  * Improve startup time for very large multipath.conf (bsc#1200523)
  * Avoid checker blocking event handling for huge number of devices
    (boo#1203085)
  * Cleanup sysfs accessors in libmultipath
  * Minor upstream bug fixes
  * Spelling fixes
  * Documentation: add ALUA info to README.md, delete README.alua</changelog>
  <changelog author="mwilck@suse.com" date="1662552000">- Update to version 0.9.1+48+suse.9c6c435:
  * Upstream version update
  * kpartx_id: remove bashism
  * Doc: add multipathc.8 manual page</changelog>
  <changelog author="mwilck@suse.com" date="1662724800">- Update to version 0.9.1+52+suse.be8809e:
  * Code-identical to 0.9.1+48+suse.9c6c435 (merge in git repo
    to preserve history; fix revision in _service file).</changelog>
  <changelog author="mwilck@suse.com" date="1666612800">- Update to version 0.9.2+57+suse.cf3c1e9:
  * Fix multipathd authorization bypass and symlink attack
    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
  * add multipath-dracut.conf: dracut config file to install
    tmpfiles.d/multipath.conf in initramfs
  * Use "queue_mode bio" for NVMeoF/TCP devices
  * Upstream bug fixes and hwtable updates
- Drop recompress.service, it just slows down build</changelog>
  <changelog author="mwilck@suse.com" date="1666785600">- Update to version 0.9.2+59+suse.ac8942d:
  * Fix segfault in "multipath -t" command (boo#1204731)</changelog>
  <changelog author="mwilck@suse.com" date="1674043200">- Fix "rpm --verify" (bsc#1207232)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 0.9.4+68+suse.98559ea:
  * libmultipath: bump ABI version to 18.0.0
  * libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
    (gh#opensvc/multipath-tools#56)
  * libmpathpersist: use conf-&gt;timeout for updating persistent reservations
    (gh#opensvc/multipath-tools#45)
  * libmultipath: is_path_valid(): check if device is in use
    (bsc#1203141) (added libmount dependency)
  * libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
  * multipathd: handle no active paths in update_map_pr (bsc#1207546)
  * multipathd: make pr registration consistent (bsc#1207546)
  * libmultipath: don't leak memory on invalid strings  (bsc#1207546)
  * multipath.conf(5): improve documentation of dev_loss_tmo (bsc#1207546)
  * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
  * libmultipath: fix 'show paths format' failure
  * minor bugfixes
  * hwtable fixes
  * Build system rework
  * spec file: adapt make command line to changes in build system
  * spec file: use make -Orecurse (better readable output)
  * spec file: use verbose build</changelog>
  <changelog author="mwilck@suse.com" date="1679486400">- Update to version 0.9.4+71+suse.c648a77:
  * libmultipath: avoid grouping paths wrongly with "find_multipaths smart"
    (bsc#1209623)
  * fix multipath-tools build with liburcu 0.14.0</changelog>
  <changelog author="mwilck@suse.com" date="1688472000">- Update to version 0.9.4+73+suse.a5414a6:
  * libmultipath: ignore nvme devices if nvme native multipath is enabled
    (bsc#1212854)
  * libmultipath: fix dev_loss_tmo even if not set in configuration
    (bsc#1212440)
    Note: this changes user-visible behavior. multipathd will not
    grab any nvme devices for dm-multipath if nvme native multipathing
    is on (which is the default on SLE and openSUSE).</changelog>
  <changelog author="mwilck@suse.com" date="1704456000">- Update to version 0.9.4+77+suse.1f7a63b:
  * fix ANA prioritizer enablement logic (bsc#1218326)</changelog>
</package>
<package pkgid="e899f54706dec122505b3fff52596d818f53ce4ba45128c9068e086574f2fd3d" name="libncurses6" arch="aarch64">
  <version epoch="0" ver="6.1" rel="150000.5.20.1"/>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()</changelog>
</package>
<package pkgid="be76d861790671d4af781d109c43597cb7c02d95275a5273a4d787706858d329" name="libncurses6" arch="s390x">
  <version epoch="0" ver="6.1" rel="150000.5.20.1"/>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()</changelog>
</package>
<package pkgid="82c089cffb45d74dbb0ef918523e989d4970a349d95299f198301325abb04f71" name="libncurses6" arch="x86_64">
  <version epoch="0" ver="6.1" rel="150000.5.20.1"/>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()</changelog>
</package>
<package pkgid="29288828b3c02563f81cfb6ceee821e35a28e9b1a097f2f83308d9d4d40fe73c" name="libncurses6" arch="aarch64">
  <version epoch="0" ver="6.1" rel="150000.5.24.1"/>
  <changelog author="werner@suse.de" date="1517313600">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()
    (bsc#1218014)</changelog>
  <changelog author="werner@suse.de" date="1708344000">- Add patch ncurses-6.1-bsc1220061.patch (bsc#1220061, CVE-2023-45918)
  * Backport from ncurses-6.4-20230615.patch
    improve checks in convert_string() for corrupt terminfo entry</changelog>
</package>
<package pkgid="8b659e4ee70c66e21dd24d0ddb48f5b0cef716643015a77ac0df021bb795c439" name="libncurses6" arch="s390x">
  <version epoch="0" ver="6.1" rel="150000.5.24.1"/>
  <changelog author="werner@suse.de" date="1517313600">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()
    (bsc#1218014)</changelog>
  <changelog author="werner@suse.de" date="1708344000">- Add patch ncurses-6.1-bsc1220061.patch (bsc#1220061, CVE-2023-45918)
  * Backport from ncurses-6.4-20230615.patch
    improve checks in convert_string() for corrupt terminfo entry</changelog>
</package>
<package pkgid="def2dc5f5f98f9f455f95ed59eddf78a52f9d441cf84e3541ae31e7e21a70ef8" name="libncurses6" arch="x86_64">
  <version epoch="0" ver="6.1" rel="150000.5.24.1"/>
  <changelog author="werner@suse.de" date="1517313600">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()
    (bsc#1218014)</changelog>
  <changelog author="werner@suse.de" date="1708344000">- Add patch ncurses-6.1-bsc1220061.patch (bsc#1220061, CVE-2023-45918)
  * Backport from ncurses-6.4-20230615.patch
    improve checks in convert_string() for corrupt terminfo entry</changelog>
</package>
<package pkgid="f6a9d096209367f74e4ae4028aa2028123c42a30d3f8f3f4c82a5206191bebc6" name="libndp" arch="src">
  <version epoch="0" ver="1.6" rel="150000.3.3.1"/>
  <changelog author="meissner@suse.com" date="1391860800">- library for neighbour discovery, for later use by NetworkManager</changelog>
  <changelog author="dimstar@opensuse.org" date="1404907200">- Minor cleanups for inclusion into Factory:
  + Shared Library packages must only contain libraries (move
    binary file and man page to main package).
  + Adjust RPM Groups: Productivity/Networking/Other for the main
    package and System/Libraries for the shared library package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1404907201">- Update to version 1.3:
  + libndp: fix [cppcheck] Undefined behavior: Variable 'buf' is
    used as parameter and destination in s[n]printf().
- No longer bootstrap: the tarball is complete.
- Remove libtool, automake and autoconf BuildRequires: no longer
  needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1420459200">- Update to version 1.4:
  + libndp: fix buffer overflow in ndp_msg_opt_dnssl_domain().</changelog>
  <changelog author="mpluskal@suse.com" date="1463918400">- Update to version 1.6 (bsc#979645 CVE-2016-3698):
  * libndp: reject redirect and router advertisements from
    non-link-local
  * libndp: validate the IPv6 hop limit
- Changes for version 1.5:
  * ndptool: validate the IPv6 hop limit
- Small spec file adjustement:
  * Used spec-cleaner
  * Make building more verbose
  * Update describtion of subpackages
  * Use correct cathegory for subpackage</changelog>
  <changelog author="mgorse@suse.com" date="1719489600">- Add libndp-CVE-2024-5564.patch: add a check on the route
  information option length field (bsc#1225771 CVE-2024-5564).</changelog>
</package>
<package pkgid="eae84d3be793e7c44610d3e0ecc96afd66b0a32330f4ddc62c636d8a5c5965fb" name="libndp0" arch="aarch64">
  <version epoch="0" ver="1.6" rel="150000.3.3.1"/>
  <changelog author="meissner@suse.com" date="1391860800">- library for neighbour discovery, for later use by NetworkManager</changelog>
  <changelog author="dimstar@opensuse.org" date="1404907200">- Minor cleanups for inclusion into Factory:
  + Shared Library packages must only contain libraries (move
    binary file and man page to main package).
  + Adjust RPM Groups: Productivity/Networking/Other for the main
    package and System/Libraries for the shared library package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1404907201">- Update to version 1.3:
  + libndp: fix [cppcheck] Undefined behavior: Variable 'buf' is
    used as parameter and destination in s[n]printf().
- No longer bootstrap: the tarball is complete.
- Remove libtool, automake and autoconf BuildRequires: no longer
  needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1420459200">- Update to version 1.4:
  + libndp: fix buffer overflow in ndp_msg_opt_dnssl_domain().</changelog>
  <changelog author="mpluskal@suse.com" date="1463918400">- Update to version 1.6 (bsc#979645 CVE-2016-3698):
  * libndp: reject redirect and router advertisements from
    non-link-local
  * libndp: validate the IPv6 hop limit
- Changes for version 1.5:
  * ndptool: validate the IPv6 hop limit
- Small spec file adjustement:
  * Used spec-cleaner
  * Make building more verbose
  * Update describtion of subpackages
  * Use correct cathegory for subpackage</changelog>
  <changelog author="mgorse@suse.com" date="1719489600">- Add libndp-CVE-2024-5564.patch: add a check on the route
  information option length field (bsc#1225771 CVE-2024-5564).</changelog>
</package>
<package pkgid="85797f4748bd75d3b276584a0343528d77ef31318636c195a731658a5e311673" name="libndp0" arch="s390x">
  <version epoch="0" ver="1.6" rel="150000.3.3.1"/>
  <changelog author="meissner@suse.com" date="1391860800">- library for neighbour discovery, for later use by NetworkManager</changelog>
  <changelog author="dimstar@opensuse.org" date="1404907200">- Minor cleanups for inclusion into Factory:
  + Shared Library packages must only contain libraries (move
    binary file and man page to main package).
  + Adjust RPM Groups: Productivity/Networking/Other for the main
    package and System/Libraries for the shared library package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1404907201">- Update to version 1.3:
  + libndp: fix [cppcheck] Undefined behavior: Variable 'buf' is
    used as parameter and destination in s[n]printf().
- No longer bootstrap: the tarball is complete.
- Remove libtool, automake and autoconf BuildRequires: no longer
  needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1420459200">- Update to version 1.4:
  + libndp: fix buffer overflow in ndp_msg_opt_dnssl_domain().</changelog>
  <changelog author="mpluskal@suse.com" date="1463918400">- Update to version 1.6 (bsc#979645 CVE-2016-3698):
  * libndp: reject redirect and router advertisements from
    non-link-local
  * libndp: validate the IPv6 hop limit
- Changes for version 1.5:
  * ndptool: validate the IPv6 hop limit
- Small spec file adjustement:
  * Used spec-cleaner
  * Make building more verbose
  * Update describtion of subpackages
  * Use correct cathegory for subpackage</changelog>
  <changelog author="mgorse@suse.com" date="1719489600">- Add libndp-CVE-2024-5564.patch: add a check on the route
  information option length field (bsc#1225771 CVE-2024-5564).</changelog>
</package>
<package pkgid="03bfcbe3ac25d17f7627ae68d6ed81c78f761b8e7f5da0e1f3caf0b62ba39a23" name="libndp0" arch="x86_64">
  <version epoch="0" ver="1.6" rel="150000.3.3.1"/>
  <changelog author="meissner@suse.com" date="1391860800">- library for neighbour discovery, for later use by NetworkManager</changelog>
  <changelog author="dimstar@opensuse.org" date="1404907200">- Minor cleanups for inclusion into Factory:
  + Shared Library packages must only contain libraries (move
    binary file and man page to main package).
  + Adjust RPM Groups: Productivity/Networking/Other for the main
    package and System/Libraries for the shared library package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1404907201">- Update to version 1.3:
  + libndp: fix [cppcheck] Undefined behavior: Variable 'buf' is
    used as parameter and destination in s[n]printf().
- No longer bootstrap: the tarball is complete.
- Remove libtool, automake and autoconf BuildRequires: no longer
  needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1420459200">- Update to version 1.4:
  + libndp: fix buffer overflow in ndp_msg_opt_dnssl_domain().</changelog>
  <changelog author="mpluskal@suse.com" date="1463918400">- Update to version 1.6 (bsc#979645 CVE-2016-3698):
  * libndp: reject redirect and router advertisements from
    non-link-local
  * libndp: validate the IPv6 hop limit
- Changes for version 1.5:
  * ndptool: validate the IPv6 hop limit
- Small spec file adjustement:
  * Used spec-cleaner
  * Make building more verbose
  * Update describtion of subpackages
  * Use correct cathegory for subpackage</changelog>
  <changelog author="mgorse@suse.com" date="1719489600">- Add libndp-CVE-2024-5564.patch: add a check on the route
  information option length field (bsc#1225771 CVE-2024-5564).</changelog>
</package>
<package pkgid="79da6d7cfe92b47cf3ce19cbdb5569357621dc8213d498d10b3ee9e88db31c1b" name="libnftables1" arch="aarch64">
  <version epoch="0" ver="0.9.8" rel="150400.6.3.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 0.8
  * This release contains new features available up to the
    (upcoming) Linux 4.14 kernel release:
  * Support for stateful objects, these objects are uniquely
    identified by a user-defined name, you can refer to them from
    rules, and there is a well established interface to operate
    with them.
  * Sort set elements when listing them, from lower to largest.
  * TCP option matching and mangling support. This includes TCP
    maximum segment size mangling.
  * Add new "-s" option for listings without stateful information.
  * Add new -c/--check option for nft, to tests if your ruleset
    loads fine, into the kernel, this is a dry run mode.
  * Connection tracking helper support.
  * Add --echo option, to print the handle that the kernel
    allocates to uniquely identify rules.
  * Conntrack zone support
  * Symmetric hash support
  * Add support to include directories from nft natives scripts,
    files are loaded in alphanumerical order.
  * Allow to check if IPv6 extension header or TCP option exists
    or is missing.
  * Extend quota support to display used bytes.
  * Add ct average matching, to match average bytes per packet a
    connection has transferred so far, to map the existing
    feature available in the iptables connbytes match.
  * Allow to flush maps and flow tables.
  * Allow to embed set definition into an existing set.
  * Conntrack event filtering support via rule.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- Update to new upstream release 0.8.1
  * This release deprecates the "flow table" syntax in favor
    of "meter".</changelog>
  <changelog author="jengelh@inai.de" date="1517659200">- Update to new upstream release 0.8.2
  * add secpath support</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 0.8.3
  * raw payload support to match headers that do not yet have
    received a mnemonic.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 0.8.4
  * Support to match IPv6 segment routing headers.
  * New "meta ibrname" and "meta obrname" arguments to match the
    name of the logical bridge a packet is passing through.
    These new names replace the old (misnamed) "ibriport"/"obriport".
  * `nft -a` will now show handle identifier for all objects,
    including tables and chains.
  * nft can now delete objects by their handle number.
  * Support to update maps from the ruleset (packet path).
  * the "--echo" option now prints handle id for tables and
    object too.
  * `nft -f -` will now read from standard input
  * Support for flow tables, cf. man page or
    https://lwn.net/Articles/738214/ .</changelog>
  <changelog author="jengelh@inai.de" date="1526040000">- Update to new upstream release 0.8.5
  * support to add/insert a rule at a given index position
  * meter statement now supports a configureable upper max size
  * timeouts for sets can now be specified in milliseconds
  * re-add iptables-like empty skeleton rulesets</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 0.9.0
  * Support to check if packet matches an existing socket.
  * Support to limit number of active connections by arbitrary
    criteria, such as ip addresses, networks, conntrack zones or
    any combination thereof.
  * Added support for "audit" logging.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1651492800">- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
  crashes that could occur e.g. in firewalld (bsc#1197606).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1682424000">- add 0001-evaluate-reject-support-ethernet-as-L2-protocol-for-.patch: this
  fixes a crash in nftables if layer2 reject rules are processed (e.g.
  Ethernet MAC address based reject rich rule in firewalld, bsc#1210773).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1706616000">- port python-single-spec logic from Factory package to allow shipment of
  python311 modules as well (bsc#1219253).</changelog>
</package>
<package pkgid="f008eeb961f36d3f2d1dc2b12a53ed01bdf4293731ab8463b0b01c0bef9c6bab" name="libnftables1" arch="s390x">
  <version epoch="0" ver="0.9.8" rel="150400.6.3.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 0.8
  * This release contains new features available up to the
    (upcoming) Linux 4.14 kernel release:
  * Support for stateful objects, these objects are uniquely
    identified by a user-defined name, you can refer to them from
    rules, and there is a well established interface to operate
    with them.
  * Sort set elements when listing them, from lower to largest.
  * TCP option matching and mangling support. This includes TCP
    maximum segment size mangling.
  * Add new "-s" option for listings without stateful information.
  * Add new -c/--check option for nft, to tests if your ruleset
    loads fine, into the kernel, this is a dry run mode.
  * Connection tracking helper support.
  * Add --echo option, to print the handle that the kernel
    allocates to uniquely identify rules.
  * Conntrack zone support
  * Symmetric hash support
  * Add support to include directories from nft natives scripts,
    files are loaded in alphanumerical order.
  * Allow to check if IPv6 extension header or TCP option exists
    or is missing.
  * Extend quota support to display used bytes.
  * Add ct average matching, to match average bytes per packet a
    connection has transferred so far, to map the existing
    feature available in the iptables connbytes match.
  * Allow to flush maps and flow tables.
  * Allow to embed set definition into an existing set.
  * Conntrack event filtering support via rule.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- Update to new upstream release 0.8.1
  * This release deprecates the "flow table" syntax in favor
    of "meter".</changelog>
  <changelog author="jengelh@inai.de" date="1517659200">- Update to new upstream release 0.8.2
  * add secpath support</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 0.8.3
  * raw payload support to match headers that do not yet have
    received a mnemonic.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 0.8.4
  * Support to match IPv6 segment routing headers.
  * New "meta ibrname" and "meta obrname" arguments to match the
    name of the logical bridge a packet is passing through.
    These new names replace the old (misnamed) "ibriport"/"obriport".
  * `nft -a` will now show handle identifier for all objects,
    including tables and chains.
  * nft can now delete objects by their handle number.
  * Support to update maps from the ruleset (packet path).
  * the "--echo" option now prints handle id for tables and
    object too.
  * `nft -f -` will now read from standard input
  * Support for flow tables, cf. man page or
    https://lwn.net/Articles/738214/ .</changelog>
  <changelog author="jengelh@inai.de" date="1526040000">- Update to new upstream release 0.8.5
  * support to add/insert a rule at a given index position
  * meter statement now supports a configureable upper max size
  * timeouts for sets can now be specified in milliseconds
  * re-add iptables-like empty skeleton rulesets</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 0.9.0
  * Support to check if packet matches an existing socket.
  * Support to limit number of active connections by arbitrary
    criteria, such as ip addresses, networks, conntrack zones or
    any combination thereof.
  * Added support for "audit" logging.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1651492800">- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
  crashes that could occur e.g. in firewalld (bsc#1197606).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1682424000">- add 0001-evaluate-reject-support-ethernet-as-L2-protocol-for-.patch: this
  fixes a crash in nftables if layer2 reject rules are processed (e.g.
  Ethernet MAC address based reject rich rule in firewalld, bsc#1210773).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1706616000">- port python-single-spec logic from Factory package to allow shipment of
  python311 modules as well (bsc#1219253).</changelog>
</package>
<package pkgid="7e7a1828d3bc15963cb283eb829878f3752ba0ebe0ac1acb07f189a0b96af6ec" name="libnftables1" arch="x86_64">
  <version epoch="0" ver="0.9.8" rel="150400.6.3.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 0.8
  * This release contains new features available up to the
    (upcoming) Linux 4.14 kernel release:
  * Support for stateful objects, these objects are uniquely
    identified by a user-defined name, you can refer to them from
    rules, and there is a well established interface to operate
    with them.
  * Sort set elements when listing them, from lower to largest.
  * TCP option matching and mangling support. This includes TCP
    maximum segment size mangling.
  * Add new "-s" option for listings without stateful information.
  * Add new -c/--check option for nft, to tests if your ruleset
    loads fine, into the kernel, this is a dry run mode.
  * Connection tracking helper support.
  * Add --echo option, to print the handle that the kernel
    allocates to uniquely identify rules.
  * Conntrack zone support
  * Symmetric hash support
  * Add support to include directories from nft natives scripts,
    files are loaded in alphanumerical order.
  * Allow to check if IPv6 extension header or TCP option exists
    or is missing.
  * Extend quota support to display used bytes.
  * Add ct average matching, to match average bytes per packet a
    connection has transferred so far, to map the existing
    feature available in the iptables connbytes match.
  * Allow to flush maps and flow tables.
  * Allow to embed set definition into an existing set.
  * Conntrack event filtering support via rule.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- Update to new upstream release 0.8.1
  * This release deprecates the "flow table" syntax in favor
    of "meter".</changelog>
  <changelog author="jengelh@inai.de" date="1517659200">- Update to new upstream release 0.8.2
  * add secpath support</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 0.8.3
  * raw payload support to match headers that do not yet have
    received a mnemonic.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 0.8.4
  * Support to match IPv6 segment routing headers.
  * New "meta ibrname" and "meta obrname" arguments to match the
    name of the logical bridge a packet is passing through.
    These new names replace the old (misnamed) "ibriport"/"obriport".
  * `nft -a` will now show handle identifier for all objects,
    including tables and chains.
  * nft can now delete objects by their handle number.
  * Support to update maps from the ruleset (packet path).
  * the "--echo" option now prints handle id for tables and
    object too.
  * `nft -f -` will now read from standard input
  * Support for flow tables, cf. man page or
    https://lwn.net/Articles/738214/ .</changelog>
  <changelog author="jengelh@inai.de" date="1526040000">- Update to new upstream release 0.8.5
  * support to add/insert a rule at a given index position
  * meter statement now supports a configureable upper max size
  * timeouts for sets can now be specified in milliseconds
  * re-add iptables-like empty skeleton rulesets</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 0.9.0
  * Support to check if packet matches an existing socket.
  * Support to limit number of active connections by arbitrary
    criteria, such as ip addresses, networks, conntrack zones or
    any combination thereof.
  * Added support for "audit" logging.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1651492800">- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
  crashes that could occur e.g. in firewalld (bsc#1197606).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1682424000">- add 0001-evaluate-reject-support-ethernet-as-L2-protocol-for-.patch: this
  fixes a crash in nftables if layer2 reject rules are processed (e.g.
  Ethernet MAC address based reject rich rule in firewalld, bsc#1210773).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1706616000">- port python-single-spec logic from Factory package to allow shipment of
  python311 modules as well (bsc#1219253).</changelog>
</package>
<package pkgid="9fa4d108db22e8d288e0dcb12ab14713f39c024258c10f435557b8c94a925a42" name="libnghttp2-14" arch="aarch64">
  <version epoch="0" ver="1.40.0" rel="150200.12.1"/>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 “Data Dribble” and CVE-2019-9513
  “Resource Loop” vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695729600">- Fixes memory leak that happens when PUSH_PROMISE or HEADERS frame cannot be
  sent, and nghttp2_on_stream_close_callback fails with a fatal error.
  [CVE-2023-35945 bsc#1215713]
  + nghttp2-CVE-2023-35945.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1697716800">- security update
- added patches
  fix CVE-2023-44487 [bsc#1216123], HTTP/2 Rapid Reset Attack
  + nghttp2-CVE-2023-44487.patch</changelog>
</package>
<package pkgid="e1a8df7b3ff89df83cb20ad50618c53e82016a8962f203e267a7f406dc61b87b" name="libnghttp2-14" arch="s390x">
  <version epoch="0" ver="1.40.0" rel="150200.12.1"/>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 “Data Dribble” and CVE-2019-9513
  “Resource Loop” vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695729600">- Fixes memory leak that happens when PUSH_PROMISE or HEADERS frame cannot be
  sent, and nghttp2_on_stream_close_callback fails with a fatal error.
  [CVE-2023-35945 bsc#1215713]
  + nghttp2-CVE-2023-35945.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1697716800">- security update
- added patches
  fix CVE-2023-44487 [bsc#1216123], HTTP/2 Rapid Reset Attack
  + nghttp2-CVE-2023-44487.patch</changelog>
</package>
<package pkgid="6625e233bc93d47e048dfc9d7a6df96a473a542f95815dae87f5c0db80dd532c" name="libnghttp2-14" arch="x86_64">
  <version epoch="0" ver="1.40.0" rel="150200.12.1"/>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 “Data Dribble” and CVE-2019-9513
  “Resource Loop” vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695729600">- Fixes memory leak that happens when PUSH_PROMISE or HEADERS frame cannot be
  sent, and nghttp2_on_stream_close_callback fails with a fatal error.
  [CVE-2023-35945 bsc#1215713]
  + nghttp2-CVE-2023-35945.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1697716800">- security update
- added patches
  fix CVE-2023-44487 [bsc#1216123], HTTP/2 Rapid Reset Attack
  + nghttp2-CVE-2023-44487.patch</changelog>
</package>
<package pkgid="690cf798acd4397a1c9ab64a4e13ddd0311951837de5919b29253ef44389d058" name="libnghttp2-14" arch="aarch64">
  <version epoch="0" ver="1.40.0" rel="150200.17.1"/>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 “Data Dribble” and CVE-2019-9513
  “Resource Loop” vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695729600">- Fixes memory leak that happens when PUSH_PROMISE or HEADERS frame cannot be
  sent, and nghttp2_on_stream_close_callback fails with a fatal error.
  [CVE-2023-35945 bsc#1215713]
  + nghttp2-CVE-2023-35945.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1697716800">- security update
- added patches
  fix CVE-2023-44487 [bsc#1216123], HTTP/2 Rapid Reset Attack
  + nghttp2-CVE-2023-44487.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- security update
- added patches
  fix CVE-2024-28182 [bsc#1221399], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + nghttp2-CVE-2024-28182-1.patch
  fix CVE-2024-28182-2 [bsc#1221399], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + nghttp2-CVE-2024-28182-2.patch</changelog>
</package>
<package pkgid="8cc389527070ef5af61d9fc69d02f3b730b3b16ddb3a7905c6dcf2e08e19af38" name="libnghttp2-14" arch="s390x">
  <version epoch="0" ver="1.40.0" rel="150200.17.1"/>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 “Data Dribble” and CVE-2019-9513
  “Resource Loop” vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695729600">- Fixes memory leak that happens when PUSH_PROMISE or HEADERS frame cannot be
  sent, and nghttp2_on_stream_close_callback fails with a fatal error.
  [CVE-2023-35945 bsc#1215713]
  + nghttp2-CVE-2023-35945.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1697716800">- security update
- added patches
  fix CVE-2023-44487 [bsc#1216123], HTTP/2 Rapid Reset Attack
  + nghttp2-CVE-2023-44487.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- security update
- added patches
  fix CVE-2024-28182 [bsc#1221399], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + nghttp2-CVE-2024-28182-1.patch
  fix CVE-2024-28182-2 [bsc#1221399], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + nghttp2-CVE-2024-28182-2.patch</changelog>
</package>
<package pkgid="ae091822d9b6f339909ea933f78d3077efccdc65a4868a8c14a23c3b2e7dd7a5" name="libnghttp2-14" arch="x86_64">
  <version epoch="0" ver="1.40.0" rel="150200.17.1"/>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 “Data Dribble” and CVE-2019-9513
  “Resource Loop” vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695729600">- Fixes memory leak that happens when PUSH_PROMISE or HEADERS frame cannot be
  sent, and nghttp2_on_stream_close_callback fails with a fatal error.
  [CVE-2023-35945 bsc#1215713]
  + nghttp2-CVE-2023-35945.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1697716800">- security update
- added patches
  fix CVE-2023-44487 [bsc#1216123], HTTP/2 Rapid Reset Attack
  + nghttp2-CVE-2023-44487.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- security update
- added patches
  fix CVE-2024-28182 [bsc#1221399], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + nghttp2-CVE-2024-28182-1.patch
  fix CVE-2024-28182-2 [bsc#1221399], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + nghttp2-CVE-2024-28182-2.patch</changelog>
</package>
<package pkgid="b05ed6aeeddea15d818d13f733f8f9b67b2342608460f021cb3eea0d8802e83d" name="libnghttp2-14" arch="aarch64">
  <version epoch="0" ver="1.40.0" rel="150200.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Export PYTHON=/usr/bin/python3 before running configure: allow to
  build without (comnplete) python2 in the buildroot. In any case
  we only ship python3-bindings already.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 “Data Dribble” and CVE-2019-9513
  “Resource Loop” vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695729600">- Fixes memory leak that happens when PUSH_PROMISE or HEADERS frame cannot be
  sent, and nghttp2_on_stream_close_callback fails with a fatal error.
  [CVE-2023-35945 bsc#1215713]
  + nghttp2-CVE-2023-35945.patch</changelog>
</package>
<package pkgid="412ca9a7dd0421ac72ca85359edc606782c9545efce85a35284f3631d3474f0e" name="libnghttp2-14" arch="s390x">
  <version epoch="0" ver="1.40.0" rel="150200.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Export PYTHON=/usr/bin/python3 before running configure: allow to
  build without (comnplete) python2 in the buildroot. In any case
  we only ship python3-bindings already.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 “Data Dribble” and CVE-2019-9513
  “Resource Loop” vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695729600">- Fixes memory leak that happens when PUSH_PROMISE or HEADERS frame cannot be
  sent, and nghttp2_on_stream_close_callback fails with a fatal error.
  [CVE-2023-35945 bsc#1215713]
  + nghttp2-CVE-2023-35945.patch</changelog>
</package>
<package pkgid="f0cc94cda0cf8f7b3964eee020fd9e9afd5e9f8ee00f3e97a240c75b2bf8e572" name="libnghttp2-14" arch="x86_64">
  <version epoch="0" ver="1.40.0" rel="150200.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Export PYTHON=/usr/bin/python3 before running configure: allow to
  build without (comnplete) python2 in the buildroot. In any case
  we only ship python3-bindings already.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 “Data Dribble” and CVE-2019-9513
  “Resource Loop” vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695729600">- Fixes memory leak that happens when PUSH_PROMISE or HEADERS frame cannot be
  sent, and nghttp2_on_stream_close_callback fails with a fatal error.
  [CVE-2023-35945 bsc#1215713]
  + nghttp2-CVE-2023-35945.patch</changelog>
</package>
<package pkgid="387c0ff86d137ba5cae05c1b755d54a9d8516dbb6568aef794e2c7cef0cb7aed" name="libnm0" arch="aarch64">
  <version epoch="0" ver="1.38.6" rel="150500.3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Update to version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.
- Changes from version 1.38.4:
  + Fix DAD for DHCPv6 addresses.
  + Wi-Fi: improvements for OWE networks.
  + Support EC private keys.
  + Fix nmcli tab completion support for embedded quote characters.
  + Fix reapply for lldp/mdns/llmnr/dns-over-tls settings.
  + Various bugfixes.</changelog>
</package>
<package pkgid="514ef20a72c8bb4b93c008013e8a917a3c611acdbf6c65bf4ff5bf61ee93cb5e" name="libnm0" arch="s390x">
  <version epoch="0" ver="1.38.6" rel="150500.3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Update to version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.
- Changes from version 1.38.4:
  + Fix DAD for DHCPv6 addresses.
  + Wi-Fi: improvements for OWE networks.
  + Support EC private keys.
  + Fix nmcli tab completion support for embedded quote characters.
  + Fix reapply for lldp/mdns/llmnr/dns-over-tls settings.
  + Various bugfixes.</changelog>
</package>
<package pkgid="96110d732e8338242809c9479614abd74eaf18fb06ed415ab528f670d16c267f" name="libnm0" arch="x86_64">
  <version epoch="0" ver="1.38.6" rel="150500.3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Update to version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.
- Changes from version 1.38.4:
  + Fix DAD for DHCPv6 addresses.
  + Wi-Fi: improvements for OWE networks.
  + Support EC private keys.
  + Fix nmcli tab completion support for embedded quote characters.
  + Fix reapply for lldp/mdns/llmnr/dns-over-tls settings.
  + Various bugfixes.</changelog>
</package>
<package pkgid="2b47a16f8dd5ae1a5c5519b34f54fc172a7fc56d4a03f92612d59d697393b7cf" name="libnvme" arch="src">
  <version epoch="0" ver="1.4+29.ga3cf0a" rel="150500.4.9.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Use osc_scm to manage upstream input source.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Remove Provide for python package.
- Remove explicit tar file name for setup step.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 1.0~2:
  * Add fabrics config option 'tls'
  * Logging infrastructure reworked (API break)
  * Changed argument structs layout (API break)
  * Changed scan API (API break)
  * Fixed ctrl_loss_tmo handling concerning values of '-1'
  * Various build fixes</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v1.0-rc3:
  * Properly create manuals/documentation
  * Fix memleaks in __nvme_free_ns() and nvme_scan_subsystem()
  * nvme: get log domain id included in Log Specific Identifier
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
  * ioctl: Add identify ioctl for CNS 09h, 0Ah
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * tree: do not set dhchap_key to 'none'
  * tree: restart controller lookup
  * tree: fixup memory leak in nvme_scan_ctrl()
  * Rename nvme_path_get_subsystem()
  * Remove nvme_reset_topology()
- Use precompiled documentation instead regenerating it</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 1.0-rc4:
  * fabrics: add default port number for NVMe/TCP I/O controllers
  * linux: Update size when telemetry controller initiated data is unavailable
  * add cdw13 for set_feature_args structure
  * Add support for TP8010
  * Documentation cleanups</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 1.0-rc5:
  * ioctl: Set lsp to action in nvme_get_log_persistent_event (bsc#1196121)
  * tree: Ignore traddr case in nvme_lookup_ctrl() (bsc#1194025)
  * fabrics: Do not swap bytes for system uuid (bsc#1196565)
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646740800">- Update License information. The library is released under
  LGPL-2.1-or-later and not LGPL-2.1-only.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 1.0-rc6:
  * tree: add nvme_ctrl_get_ana_state() (bsc#1195938)
  * tree: link paths to namespaces in nvme_subsystem_scan_namespace() (bsc#1195938)
  * ioctl.h: ns list bug fix (wrong cns value)
  * types.h: Key Value Command Set Identifier added (NVME_CSI_KV)
  * types: fix status code type bug (wrong masking)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 1.0-rc7:
  * linux: fixup log page offset in nvme_get_log_page()
  * tree: Add support for default trsvcid for all controllers (bsc#1195858)
  * tree: fixup coredump during nvme discover</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 1.0-rc8:
  * types: Add support for get log - MI Command Supported
  * types: Add new Identify constant
  * types: Update persistent event entry struct added new fields
  * types: Add Host Initiated Data Gen Number to telemetry log struct
  * tree: always allocate config file in nvme_read_config()
  * tree: rework nvme_scan_subsystem()
  * tree: make subsystem name mandatory in nvme_scan_ctrl()
  * tree: move nvme_init_subsystem() into nvme_lookup_subsystem()
  * tree: do not return error when filtering out subsystems
  * tree: add debugging messages during scanning
  * tree: Handle NULL subsysname in nvme_scan_ctrl()
  * tree: Fix subsystem initialization in nvme_scan_ctrl()
  * tree: Fix leaking 'name' in nvme_subsystem_lookup_namespace()
  * tree: Avoid dereferencing nvme_subsystem_t before its check for NULL
  * tree: Clarify NULL return values from nvme_get_attr()
  * fabrics: Invoke nvmf_dim() with provided tas argument
  * fabrics: add 'nvmf_update_config()'
  * fabrics: Avoid out of bounds string chomping
  * fabrics: Free old traddr in nvmf_add_ctrl
  * fabrics: update log level for write failures
  * fabrics: Streamlining documentation
  * fabrics: Fix leaking ctrl in nvmf_connect_disc_entry()
  * fabrics: Add missing break in a switch
  * ioctl: Remove attribute packed and alignedof for args structs
  * ioctl: Align arguments indentation with braces
  * json: fix endless loop scanning for controllers
  * Remove nvme_init_id_ns
  * Add lbstm support for create-ns
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 1.0:
  * tree: Remove default port setting for TCP and RDMA ports
  * tree: add 'f_args' argument to pass user data to the filter function
  * tree: remove 'ctrl_get_ana_state()'
  * tree: add namespace path iterators
  * tree: filter out namespaces
  * tree: update nvme_scan_filter_t usage</changelog>
  <changelog author="dwagner@suse.de" date="1654257600">- Reduce log noise and export error codes (bsc#1199994 bsc#1199503)
  * add 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * add 0002-fabrics-Remove-double-connection-error-logging.patch
  * add 0003-fabrics-Introduce-connection-connect-error-mapping.patch
- Apply configuration from JSON file (bsc#1199503)
  * add 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * add 0005-tree-Factor-lookup-code-for-controller.patch
  * add 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Fixes for controller authentication (bsc#1201501 bsc#1201700 bsc#1201701 bsc#1201717)
  * add 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * add 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * add 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * add 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * add 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * add 0012-Parse-dhchap_host_key-on-controller-level.patch
  * add 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * add 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * add 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
- Subsystem scanning logic fixes
  * add 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * add 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * add 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
- Fix PowerPC build warnings
  * add 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
- Fabrics fixes
  * add 0020-fabrics-sanitize-dump-config-output.patch
  * add 0021-fabrics-Fix-build_options-return-values.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 1.2 (jsc#PED-553):
  * 64-bit Reference Tags and TP-4068 changes
  * Add more details for return code of MI admin cmds
  * Fix poll.h includes
  * Parse dhchap_host_key on controller level
  * Regenerate all documentation
  * Update json config schema for missing dhchap host key
  * build: Add support to build against LibreSSL
  * build: Drop -nostdinc for LibreSSL header checks
  * fabrics: Add new TP8010 definitions
  * fabrics: Add nvmf_get_discovery_wargs()
  * fabrics: Duplicate strings when merging configs
  * fabrics: Filter out empty strings in add_argument()
  * fabrics: Fix build_options() return values
  * fabrics: Use fallthrough statement
  * fabrics: sanitize dump-config output
  * ioctl: Honor rae in nvme_get_nsid_log
  * ioctl: Set log page offset for nvme_get_log_telemetry_host
  * json-schema: add dhchap_key details to host section
  * json: Enforce correctly formatted JSON config files
  * json: Verify JSON config file starts with an array
  * json: fixup dhchap_ctrl_key definitions
  * libnvme-mi: Introduce NVMe Managament Interface library
  * mi-mctp: Add timeout support to MCTP transport
  * mi: Add Get Log Page helpers
  * mi: Add Identify function for secondary controller list
  * mi: Add Identify helper for ns-descs and primary-ctrl-caps
  * mi: Add endpoint get/set timeout API
  * mi: Add firmware download and commit commands
  * mi: Add identify helper for nsid-capable Controller List
  * mi: Add identify helpers for namespace lists
  * mi: Add identify helpers for namespaces
  * mi: Add maximum More Processing Required limit API
  * mi: Allow Admin-message sized More Processing Required responses
  * mi: Distinguish MI status from NVMe (CDW3) status
  * mi: Fix C++ compiler errors
  * mi: Implement Format NVM command
  * mi: Implement Get &amp; Set Features Admin commands
  * mi: Implement NS attach command and helpers
  * mi: Implement Namespace Management command and create/delete helpers
  * mi: Implement Sanitize command
  * mi: Init ctrl_id within xfer
  * mi: Introduce a helper for response status, unify values with ioctls
  * mi: Set log page offset for nvme_get_log_telemetry_host
  * mi: add nvme_mi_status_to_string()
  * mi: fix a memory leak in nvme_mi_open_mctp()
  * mi: fix get_log_page chunked offset check
  * mi: unify MI Get Log Page function with ioctl API
  * nvme-tree: avoid segfault if auth keys are unavailable
  * python: Use nvmf_get_discovery_wargs()
  * python: add missing ctrl attrs to Python bindings
  * rpmbuild: Enable 'make rpm' to build rpm pkgs #408
  * tree: rename controller 'dhchap_key' to 'dhchap_ctrl_key'
  * types: Move enum nvme_data_tfr to types
  * update/cleanup of documentation
  * util: Add LINE_MAX define
  * util: Add get feature length 2 API to support direction parameter
  * util: Add simple UUID type
  * util: Do not expose fallthrough defines
  * various build fixes
  * various fixes reported by coverity
- Drop upstream patches
  * remove 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * remove 0002-fabrics-Remove-double-connection-error-logging.patch
  * remove 0003-fabrics-Introduce-connection-connect-error-mapping.patch
  * remove 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * remove 0005-tree-Factor-lookup-code-for-controller.patch
  * remove 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch
  * remove 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * remove 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * remove 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * remove 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * remove 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * remove 0012-Parse-dhchap_host_key-on-controller-level.patch
  * remove 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * remove 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * remove 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
  * remove 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * remove 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * remove 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
  * remove 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
  * remove 0020-fabrics-sanitize-dump-config-output.patch
  * remove 0021-fabrics-Fix-build_options-return-values.patch
- Make man page build conditiional. Install man page location has been
  fixed upstream.
- Mark the Python directory own by the libnvme3-python package
- Use fixed manpage build date (boo#1047218)
- Fix installation of manual pages to make them accessible</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 1.2+1.g41e1016:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Use symbol version LIBNVME_1_2_1 for nbft support options
  * 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
  * added %test section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- temporarily disable unit tests on s390x (bsc#1207687, bsc#1207686)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1685016000">- Update to version v1.4 (jsc#PED-553 jsc#PED-3884)
  - Fix invalid string lenght calculcation for UUID (bsc#1209906)
  * fabrics: Fix bad UUID size introduced in recent UUID changes
  - Fix segmentation fault during garbage collection (bsc#1209905)
  * python: Fix segmentation fault during garbage collection
  * Python: Fix crash during garbage collection
  - Always sanitize traddr and trsvcid entries (bsc#1207435)
  * fabrics: Always sanitize discovery log entries
  * util: Add ECONNECTREFUSED to enum nvme_connect_err
  - Allow tracking unique discover controllers (bsc#1186689)
  * tree: Add unique discovery controller flag
  - Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
  * test: mi: Explicitly zero args for test API invocations
- Replaced old nbft implementation with the upstream one
- Applied nbft symbol patch directly
  * remove 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
- Don't enable TLS if kernel does not support it (git-fixes)
  * fabrics: Do not pass unsupported options to kernel
- Set version-tag so that version are correctly reported</changelog>
  <changelog author="dwagner@suse.de" date="1690459200">- Update to version 1.4+27.g5ae1c3:
  * tree: Add getter for subsystem iopolicy (bsc#1124564)
  * nvme-tree: avoid warning in 'list-subsys' (bsc#bsc#1212598)
  * tree: Scan all subsystems (bsc#bsc#1212598)
  * tree: Don't open nvme devices until it's absolutely required
    (bsc#1213527 bsc#1213686)
  * tree: Use nvme_ipaddrs_eq() to compare IP addresses
  * util: rename ipaddrs_eq() to nvme_ipaddrs_eq() and make public.
  * util: Add ipaddrs_eq() to check whether two IP addresses are equal
  * fabrics: check genctr after getting discovery entries (bsc#1213618)
  * ioctl: fix RAE bit on last Get Log Page command (bsc#1213618)</changelog>
  <changelog author="dwagner@suse.de" date="1693915200">- Update to version 1.4+29.ga3cf0a:
  * tree: fix segfault in nvme_scan_subsystem() (bsc#1213993)
  * src/nvme/tree.c: make __nvme_scan_subsystem() returning bool (bsc#1213993)</changelog>
</package>
<package pkgid="7389efae7ae241e8456bd58b68b9e7539ff4e58747dc507a95ad9cc63e54aead" name="libnvme-mi1" arch="aarch64">
  <version epoch="0" ver="1.4+29.ga3cf0a" rel="150500.4.9.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Use osc_scm to manage upstream input source.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Remove Provide for python package.
- Remove explicit tar file name for setup step.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 1.0~2:
  * Add fabrics config option 'tls'
  * Logging infrastructure reworked (API break)
  * Changed argument structs layout (API break)
  * Changed scan API (API break)
  * Fixed ctrl_loss_tmo handling concerning values of '-1'
  * Various build fixes</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v1.0-rc3:
  * Properly create manuals/documentation
  * Fix memleaks in __nvme_free_ns() and nvme_scan_subsystem()
  * nvme: get log domain id included in Log Specific Identifier
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
  * ioctl: Add identify ioctl for CNS 09h, 0Ah
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * tree: do not set dhchap_key to 'none'
  * tree: restart controller lookup
  * tree: fixup memory leak in nvme_scan_ctrl()
  * Rename nvme_path_get_subsystem()
  * Remove nvme_reset_topology()
- Use precompiled documentation instead regenerating it</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 1.0-rc4:
  * fabrics: add default port number for NVMe/TCP I/O controllers
  * linux: Update size when telemetry controller initiated data is unavailable
  * add cdw13 for set_feature_args structure
  * Add support for TP8010
  * Documentation cleanups</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 1.0-rc5:
  * ioctl: Set lsp to action in nvme_get_log_persistent_event (bsc#1196121)
  * tree: Ignore traddr case in nvme_lookup_ctrl() (bsc#1194025)
  * fabrics: Do not swap bytes for system uuid (bsc#1196565)
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646740800">- Update License information. The library is released under
  LGPL-2.1-or-later and not LGPL-2.1-only.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 1.0-rc6:
  * tree: add nvme_ctrl_get_ana_state() (bsc#1195938)
  * tree: link paths to namespaces in nvme_subsystem_scan_namespace() (bsc#1195938)
  * ioctl.h: ns list bug fix (wrong cns value)
  * types.h: Key Value Command Set Identifier added (NVME_CSI_KV)
  * types: fix status code type bug (wrong masking)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 1.0-rc7:
  * linux: fixup log page offset in nvme_get_log_page()
  * tree: Add support for default trsvcid for all controllers (bsc#1195858)
  * tree: fixup coredump during nvme discover</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 1.0-rc8:
  * types: Add support for get log - MI Command Supported
  * types: Add new Identify constant
  * types: Update persistent event entry struct added new fields
  * types: Add Host Initiated Data Gen Number to telemetry log struct
  * tree: always allocate config file in nvme_read_config()
  * tree: rework nvme_scan_subsystem()
  * tree: make subsystem name mandatory in nvme_scan_ctrl()
  * tree: move nvme_init_subsystem() into nvme_lookup_subsystem()
  * tree: do not return error when filtering out subsystems
  * tree: add debugging messages during scanning
  * tree: Handle NULL subsysname in nvme_scan_ctrl()
  * tree: Fix subsystem initialization in nvme_scan_ctrl()
  * tree: Fix leaking 'name' in nvme_subsystem_lookup_namespace()
  * tree: Avoid dereferencing nvme_subsystem_t before its check for NULL
  * tree: Clarify NULL return values from nvme_get_attr()
  * fabrics: Invoke nvmf_dim() with provided tas argument
  * fabrics: add 'nvmf_update_config()'
  * fabrics: Avoid out of bounds string chomping
  * fabrics: Free old traddr in nvmf_add_ctrl
  * fabrics: update log level for write failures
  * fabrics: Streamlining documentation
  * fabrics: Fix leaking ctrl in nvmf_connect_disc_entry()
  * fabrics: Add missing break in a switch
  * ioctl: Remove attribute packed and alignedof for args structs
  * ioctl: Align arguments indentation with braces
  * json: fix endless loop scanning for controllers
  * Remove nvme_init_id_ns
  * Add lbstm support for create-ns
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 1.0:
  * tree: Remove default port setting for TCP and RDMA ports
  * tree: add 'f_args' argument to pass user data to the filter function
  * tree: remove 'ctrl_get_ana_state()'
  * tree: add namespace path iterators
  * tree: filter out namespaces
  * tree: update nvme_scan_filter_t usage</changelog>
  <changelog author="dwagner@suse.de" date="1654257600">- Reduce log noise and export error codes (bsc#1199994 bsc#1199503)
  * add 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * add 0002-fabrics-Remove-double-connection-error-logging.patch
  * add 0003-fabrics-Introduce-connection-connect-error-mapping.patch
- Apply configuration from JSON file (bsc#1199503)
  * add 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * add 0005-tree-Factor-lookup-code-for-controller.patch
  * add 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Fixes for controller authentication (bsc#1201501 bsc#1201700 bsc#1201701 bsc#1201717)
  * add 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * add 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * add 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * add 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * add 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * add 0012-Parse-dhchap_host_key-on-controller-level.patch
  * add 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * add 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * add 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
- Subsystem scanning logic fixes
  * add 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * add 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * add 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
- Fix PowerPC build warnings
  * add 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
- Fabrics fixes
  * add 0020-fabrics-sanitize-dump-config-output.patch
  * add 0021-fabrics-Fix-build_options-return-values.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 1.2 (jsc#PED-553):
  * 64-bit Reference Tags and TP-4068 changes
  * Add more details for return code of MI admin cmds
  * Fix poll.h includes
  * Parse dhchap_host_key on controller level
  * Regenerate all documentation
  * Update json config schema for missing dhchap host key
  * build: Add support to build against LibreSSL
  * build: Drop -nostdinc for LibreSSL header checks
  * fabrics: Add new TP8010 definitions
  * fabrics: Add nvmf_get_discovery_wargs()
  * fabrics: Duplicate strings when merging configs
  * fabrics: Filter out empty strings in add_argument()
  * fabrics: Fix build_options() return values
  * fabrics: Use fallthrough statement
  * fabrics: sanitize dump-config output
  * ioctl: Honor rae in nvme_get_nsid_log
  * ioctl: Set log page offset for nvme_get_log_telemetry_host
  * json-schema: add dhchap_key details to host section
  * json: Enforce correctly formatted JSON config files
  * json: Verify JSON config file starts with an array
  * json: fixup dhchap_ctrl_key definitions
  * libnvme-mi: Introduce NVMe Managament Interface library
  * mi-mctp: Add timeout support to MCTP transport
  * mi: Add Get Log Page helpers
  * mi: Add Identify function for secondary controller list
  * mi: Add Identify helper for ns-descs and primary-ctrl-caps
  * mi: Add endpoint get/set timeout API
  * mi: Add firmware download and commit commands
  * mi: Add identify helper for nsid-capable Controller List
  * mi: Add identify helpers for namespace lists
  * mi: Add identify helpers for namespaces
  * mi: Add maximum More Processing Required limit API
  * mi: Allow Admin-message sized More Processing Required responses
  * mi: Distinguish MI status from NVMe (CDW3) status
  * mi: Fix C++ compiler errors
  * mi: Implement Format NVM command
  * mi: Implement Get &amp; Set Features Admin commands
  * mi: Implement NS attach command and helpers
  * mi: Implement Namespace Management command and create/delete helpers
  * mi: Implement Sanitize command
  * mi: Init ctrl_id within xfer
  * mi: Introduce a helper for response status, unify values with ioctls
  * mi: Set log page offset for nvme_get_log_telemetry_host
  * mi: add nvme_mi_status_to_string()
  * mi: fix a memory leak in nvme_mi_open_mctp()
  * mi: fix get_log_page chunked offset check
  * mi: unify MI Get Log Page function with ioctl API
  * nvme-tree: avoid segfault if auth keys are unavailable
  * python: Use nvmf_get_discovery_wargs()
  * python: add missing ctrl attrs to Python bindings
  * rpmbuild: Enable 'make rpm' to build rpm pkgs #408
  * tree: rename controller 'dhchap_key' to 'dhchap_ctrl_key'
  * types: Move enum nvme_data_tfr to types
  * update/cleanup of documentation
  * util: Add LINE_MAX define
  * util: Add get feature length 2 API to support direction parameter
  * util: Add simple UUID type
  * util: Do not expose fallthrough defines
  * various build fixes
  * various fixes reported by coverity
- Drop upstream patches
  * remove 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * remove 0002-fabrics-Remove-double-connection-error-logging.patch
  * remove 0003-fabrics-Introduce-connection-connect-error-mapping.patch
  * remove 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * remove 0005-tree-Factor-lookup-code-for-controller.patch
  * remove 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch
  * remove 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * remove 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * remove 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * remove 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * remove 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * remove 0012-Parse-dhchap_host_key-on-controller-level.patch
  * remove 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * remove 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * remove 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
  * remove 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * remove 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * remove 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
  * remove 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
  * remove 0020-fabrics-sanitize-dump-config-output.patch
  * remove 0021-fabrics-Fix-build_options-return-values.patch
- Make man page build conditiional. Install man page location has been
  fixed upstream.
- Mark the Python directory own by the libnvme3-python package
- Use fixed manpage build date (boo#1047218)
- Fix installation of manual pages to make them accessible</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 1.2+1.g41e1016:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Use symbol version LIBNVME_1_2_1 for nbft support options
  * 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
  * added %test section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- temporarily disable unit tests on s390x (bsc#1207687, bsc#1207686)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1685016000">- Update to version v1.4 (jsc#PED-553 jsc#PED-3884)
  - Fix invalid string lenght calculcation for UUID (bsc#1209906)
  * fabrics: Fix bad UUID size introduced in recent UUID changes
  - Fix segmentation fault during garbage collection (bsc#1209905)
  * python: Fix segmentation fault during garbage collection
  * Python: Fix crash during garbage collection
  - Always sanitize traddr and trsvcid entries (bsc#1207435)
  * fabrics: Always sanitize discovery log entries
  * util: Add ECONNECTREFUSED to enum nvme_connect_err
  - Allow tracking unique discover controllers (bsc#1186689)
  * tree: Add unique discovery controller flag
  - Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
  * test: mi: Explicitly zero args for test API invocations
- Replaced old nbft implementation with the upstream one
- Applied nbft symbol patch directly
  * remove 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
- Don't enable TLS if kernel does not support it (git-fixes)
  * fabrics: Do not pass unsupported options to kernel
- Set version-tag so that version are correctly reported</changelog>
  <changelog author="dwagner@suse.de" date="1690459200">- Update to version 1.4+27.g5ae1c3:
  * tree: Add getter for subsystem iopolicy (bsc#1124564)
  * nvme-tree: avoid warning in 'list-subsys' (bsc#bsc#1212598)
  * tree: Scan all subsystems (bsc#bsc#1212598)
  * tree: Don't open nvme devices until it's absolutely required
    (bsc#1213527 bsc#1213686)
  * tree: Use nvme_ipaddrs_eq() to compare IP addresses
  * util: rename ipaddrs_eq() to nvme_ipaddrs_eq() and make public.
  * util: Add ipaddrs_eq() to check whether two IP addresses are equal
  * fabrics: check genctr after getting discovery entries (bsc#1213618)
  * ioctl: fix RAE bit on last Get Log Page command (bsc#1213618)</changelog>
  <changelog author="dwagner@suse.de" date="1693915200">- Update to version 1.4+29.ga3cf0a:
  * tree: fix segfault in nvme_scan_subsystem() (bsc#1213993)
  * src/nvme/tree.c: make __nvme_scan_subsystem() returning bool (bsc#1213993)</changelog>
</package>
<package pkgid="f55ea955a7c5d7bf882cde45251884b7cb8c592aa4c85399c13eb554e6fdc98b" name="libnvme-mi1" arch="s390x">
  <version epoch="0" ver="1.4+29.ga3cf0a" rel="150500.4.9.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Use osc_scm to manage upstream input source.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Remove Provide for python package.
- Remove explicit tar file name for setup step.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 1.0~2:
  * Add fabrics config option 'tls'
  * Logging infrastructure reworked (API break)
  * Changed argument structs layout (API break)
  * Changed scan API (API break)
  * Fixed ctrl_loss_tmo handling concerning values of '-1'
  * Various build fixes</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v1.0-rc3:
  * Properly create manuals/documentation
  * Fix memleaks in __nvme_free_ns() and nvme_scan_subsystem()
  * nvme: get log domain id included in Log Specific Identifier
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
  * ioctl: Add identify ioctl for CNS 09h, 0Ah
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * tree: do not set dhchap_key to 'none'
  * tree: restart controller lookup
  * tree: fixup memory leak in nvme_scan_ctrl()
  * Rename nvme_path_get_subsystem()
  * Remove nvme_reset_topology()
- Use precompiled documentation instead regenerating it</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 1.0-rc4:
  * fabrics: add default port number for NVMe/TCP I/O controllers
  * linux: Update size when telemetry controller initiated data is unavailable
  * add cdw13 for set_feature_args structure
  * Add support for TP8010
  * Documentation cleanups</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 1.0-rc5:
  * ioctl: Set lsp to action in nvme_get_log_persistent_event (bsc#1196121)
  * tree: Ignore traddr case in nvme_lookup_ctrl() (bsc#1194025)
  * fabrics: Do not swap bytes for system uuid (bsc#1196565)
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646740800">- Update License information. The library is released under
  LGPL-2.1-or-later and not LGPL-2.1-only.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 1.0-rc6:
  * tree: add nvme_ctrl_get_ana_state() (bsc#1195938)
  * tree: link paths to namespaces in nvme_subsystem_scan_namespace() (bsc#1195938)
  * ioctl.h: ns list bug fix (wrong cns value)
  * types.h: Key Value Command Set Identifier added (NVME_CSI_KV)
  * types: fix status code type bug (wrong masking)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 1.0-rc7:
  * linux: fixup log page offset in nvme_get_log_page()
  * tree: Add support for default trsvcid for all controllers (bsc#1195858)
  * tree: fixup coredump during nvme discover</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 1.0-rc8:
  * types: Add support for get log - MI Command Supported
  * types: Add new Identify constant
  * types: Update persistent event entry struct added new fields
  * types: Add Host Initiated Data Gen Number to telemetry log struct
  * tree: always allocate config file in nvme_read_config()
  * tree: rework nvme_scan_subsystem()
  * tree: make subsystem name mandatory in nvme_scan_ctrl()
  * tree: move nvme_init_subsystem() into nvme_lookup_subsystem()
  * tree: do not return error when filtering out subsystems
  * tree: add debugging messages during scanning
  * tree: Handle NULL subsysname in nvme_scan_ctrl()
  * tree: Fix subsystem initialization in nvme_scan_ctrl()
  * tree: Fix leaking 'name' in nvme_subsystem_lookup_namespace()
  * tree: Avoid dereferencing nvme_subsystem_t before its check for NULL
  * tree: Clarify NULL return values from nvme_get_attr()
  * fabrics: Invoke nvmf_dim() with provided tas argument
  * fabrics: add 'nvmf_update_config()'
  * fabrics: Avoid out of bounds string chomping
  * fabrics: Free old traddr in nvmf_add_ctrl
  * fabrics: update log level for write failures
  * fabrics: Streamlining documentation
  * fabrics: Fix leaking ctrl in nvmf_connect_disc_entry()
  * fabrics: Add missing break in a switch
  * ioctl: Remove attribute packed and alignedof for args structs
  * ioctl: Align arguments indentation with braces
  * json: fix endless loop scanning for controllers
  * Remove nvme_init_id_ns
  * Add lbstm support for create-ns
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 1.0:
  * tree: Remove default port setting for TCP and RDMA ports
  * tree: add 'f_args' argument to pass user data to the filter function
  * tree: remove 'ctrl_get_ana_state()'
  * tree: add namespace path iterators
  * tree: filter out namespaces
  * tree: update nvme_scan_filter_t usage</changelog>
  <changelog author="dwagner@suse.de" date="1654257600">- Reduce log noise and export error codes (bsc#1199994 bsc#1199503)
  * add 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * add 0002-fabrics-Remove-double-connection-error-logging.patch
  * add 0003-fabrics-Introduce-connection-connect-error-mapping.patch
- Apply configuration from JSON file (bsc#1199503)
  * add 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * add 0005-tree-Factor-lookup-code-for-controller.patch
  * add 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Fixes for controller authentication (bsc#1201501 bsc#1201700 bsc#1201701 bsc#1201717)
  * add 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * add 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * add 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * add 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * add 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * add 0012-Parse-dhchap_host_key-on-controller-level.patch
  * add 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * add 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * add 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
- Subsystem scanning logic fixes
  * add 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * add 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * add 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
- Fix PowerPC build warnings
  * add 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
- Fabrics fixes
  * add 0020-fabrics-sanitize-dump-config-output.patch
  * add 0021-fabrics-Fix-build_options-return-values.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 1.2 (jsc#PED-553):
  * 64-bit Reference Tags and TP-4068 changes
  * Add more details for return code of MI admin cmds
  * Fix poll.h includes
  * Parse dhchap_host_key on controller level
  * Regenerate all documentation
  * Update json config schema for missing dhchap host key
  * build: Add support to build against LibreSSL
  * build: Drop -nostdinc for LibreSSL header checks
  * fabrics: Add new TP8010 definitions
  * fabrics: Add nvmf_get_discovery_wargs()
  * fabrics: Duplicate strings when merging configs
  * fabrics: Filter out empty strings in add_argument()
  * fabrics: Fix build_options() return values
  * fabrics: Use fallthrough statement
  * fabrics: sanitize dump-config output
  * ioctl: Honor rae in nvme_get_nsid_log
  * ioctl: Set log page offset for nvme_get_log_telemetry_host
  * json-schema: add dhchap_key details to host section
  * json: Enforce correctly formatted JSON config files
  * json: Verify JSON config file starts with an array
  * json: fixup dhchap_ctrl_key definitions
  * libnvme-mi: Introduce NVMe Managament Interface library
  * mi-mctp: Add timeout support to MCTP transport
  * mi: Add Get Log Page helpers
  * mi: Add Identify function for secondary controller list
  * mi: Add Identify helper for ns-descs and primary-ctrl-caps
  * mi: Add endpoint get/set timeout API
  * mi: Add firmware download and commit commands
  * mi: Add identify helper for nsid-capable Controller List
  * mi: Add identify helpers for namespace lists
  * mi: Add identify helpers for namespaces
  * mi: Add maximum More Processing Required limit API
  * mi: Allow Admin-message sized More Processing Required responses
  * mi: Distinguish MI status from NVMe (CDW3) status
  * mi: Fix C++ compiler errors
  * mi: Implement Format NVM command
  * mi: Implement Get &amp; Set Features Admin commands
  * mi: Implement NS attach command and helpers
  * mi: Implement Namespace Management command and create/delete helpers
  * mi: Implement Sanitize command
  * mi: Init ctrl_id within xfer
  * mi: Introduce a helper for response status, unify values with ioctls
  * mi: Set log page offset for nvme_get_log_telemetry_host
  * mi: add nvme_mi_status_to_string()
  * mi: fix a memory leak in nvme_mi_open_mctp()
  * mi: fix get_log_page chunked offset check
  * mi: unify MI Get Log Page function with ioctl API
  * nvme-tree: avoid segfault if auth keys are unavailable
  * python: Use nvmf_get_discovery_wargs()
  * python: add missing ctrl attrs to Python bindings
  * rpmbuild: Enable 'make rpm' to build rpm pkgs #408
  * tree: rename controller 'dhchap_key' to 'dhchap_ctrl_key'
  * types: Move enum nvme_data_tfr to types
  * update/cleanup of documentation
  * util: Add LINE_MAX define
  * util: Add get feature length 2 API to support direction parameter
  * util: Add simple UUID type
  * util: Do not expose fallthrough defines
  * various build fixes
  * various fixes reported by coverity
- Drop upstream patches
  * remove 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * remove 0002-fabrics-Remove-double-connection-error-logging.patch
  * remove 0003-fabrics-Introduce-connection-connect-error-mapping.patch
  * remove 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * remove 0005-tree-Factor-lookup-code-for-controller.patch
  * remove 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch
  * remove 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * remove 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * remove 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * remove 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * remove 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * remove 0012-Parse-dhchap_host_key-on-controller-level.patch
  * remove 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * remove 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * remove 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
  * remove 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * remove 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * remove 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
  * remove 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
  * remove 0020-fabrics-sanitize-dump-config-output.patch
  * remove 0021-fabrics-Fix-build_options-return-values.patch
- Make man page build conditiional. Install man page location has been
  fixed upstream.
- Mark the Python directory own by the libnvme3-python package
- Use fixed manpage build date (boo#1047218)
- Fix installation of manual pages to make them accessible</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 1.2+1.g41e1016:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Use symbol version LIBNVME_1_2_1 for nbft support options
  * 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
  * added %test section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- temporarily disable unit tests on s390x (bsc#1207687, bsc#1207686)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1685016000">- Update to version v1.4 (jsc#PED-553 jsc#PED-3884)
  - Fix invalid string lenght calculcation for UUID (bsc#1209906)
  * fabrics: Fix bad UUID size introduced in recent UUID changes
  - Fix segmentation fault during garbage collection (bsc#1209905)
  * python: Fix segmentation fault during garbage collection
  * Python: Fix crash during garbage collection
  - Always sanitize traddr and trsvcid entries (bsc#1207435)
  * fabrics: Always sanitize discovery log entries
  * util: Add ECONNECTREFUSED to enum nvme_connect_err
  - Allow tracking unique discover controllers (bsc#1186689)
  * tree: Add unique discovery controller flag
  - Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
  * test: mi: Explicitly zero args for test API invocations
- Replaced old nbft implementation with the upstream one
- Applied nbft symbol patch directly
  * remove 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
- Don't enable TLS if kernel does not support it (git-fixes)
  * fabrics: Do not pass unsupported options to kernel
- Set version-tag so that version are correctly reported</changelog>
  <changelog author="dwagner@suse.de" date="1690459200">- Update to version 1.4+27.g5ae1c3:
  * tree: Add getter for subsystem iopolicy (bsc#1124564)
  * nvme-tree: avoid warning in 'list-subsys' (bsc#bsc#1212598)
  * tree: Scan all subsystems (bsc#bsc#1212598)
  * tree: Don't open nvme devices until it's absolutely required
    (bsc#1213527 bsc#1213686)
  * tree: Use nvme_ipaddrs_eq() to compare IP addresses
  * util: rename ipaddrs_eq() to nvme_ipaddrs_eq() and make public.
  * util: Add ipaddrs_eq() to check whether two IP addresses are equal
  * fabrics: check genctr after getting discovery entries (bsc#1213618)
  * ioctl: fix RAE bit on last Get Log Page command (bsc#1213618)</changelog>
  <changelog author="dwagner@suse.de" date="1693915200">- Update to version 1.4+29.ga3cf0a:
  * tree: fix segfault in nvme_scan_subsystem() (bsc#1213993)
  * src/nvme/tree.c: make __nvme_scan_subsystem() returning bool (bsc#1213993)</changelog>
</package>
<package pkgid="b47ad515fd050126c06f86f304dc0b22a98fbcc2ccaf15422629af110811d7e6" name="libnvme-mi1" arch="x86_64">
  <version epoch="0" ver="1.4+29.ga3cf0a" rel="150500.4.9.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Use osc_scm to manage upstream input source.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Remove Provide for python package.
- Remove explicit tar file name for setup step.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 1.0~2:
  * Add fabrics config option 'tls'
  * Logging infrastructure reworked (API break)
  * Changed argument structs layout (API break)
  * Changed scan API (API break)
  * Fixed ctrl_loss_tmo handling concerning values of '-1'
  * Various build fixes</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v1.0-rc3:
  * Properly create manuals/documentation
  * Fix memleaks in __nvme_free_ns() and nvme_scan_subsystem()
  * nvme: get log domain id included in Log Specific Identifier
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
  * ioctl: Add identify ioctl for CNS 09h, 0Ah
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * tree: do not set dhchap_key to 'none'
  * tree: restart controller lookup
  * tree: fixup memory leak in nvme_scan_ctrl()
  * Rename nvme_path_get_subsystem()
  * Remove nvme_reset_topology()
- Use precompiled documentation instead regenerating it</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 1.0-rc4:
  * fabrics: add default port number for NVMe/TCP I/O controllers
  * linux: Update size when telemetry controller initiated data is unavailable
  * add cdw13 for set_feature_args structure
  * Add support for TP8010
  * Documentation cleanups</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 1.0-rc5:
  * ioctl: Set lsp to action in nvme_get_log_persistent_event (bsc#1196121)
  * tree: Ignore traddr case in nvme_lookup_ctrl() (bsc#1194025)
  * fabrics: Do not swap bytes for system uuid (bsc#1196565)
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646740800">- Update License information. The library is released under
  LGPL-2.1-or-later and not LGPL-2.1-only.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 1.0-rc6:
  * tree: add nvme_ctrl_get_ana_state() (bsc#1195938)
  * tree: link paths to namespaces in nvme_subsystem_scan_namespace() (bsc#1195938)
  * ioctl.h: ns list bug fix (wrong cns value)
  * types.h: Key Value Command Set Identifier added (NVME_CSI_KV)
  * types: fix status code type bug (wrong masking)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 1.0-rc7:
  * linux: fixup log page offset in nvme_get_log_page()
  * tree: Add support for default trsvcid for all controllers (bsc#1195858)
  * tree: fixup coredump during nvme discover</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 1.0-rc8:
  * types: Add support for get log - MI Command Supported
  * types: Add new Identify constant
  * types: Update persistent event entry struct added new fields
  * types: Add Host Initiated Data Gen Number to telemetry log struct
  * tree: always allocate config file in nvme_read_config()
  * tree: rework nvme_scan_subsystem()
  * tree: make subsystem name mandatory in nvme_scan_ctrl()
  * tree: move nvme_init_subsystem() into nvme_lookup_subsystem()
  * tree: do not return error when filtering out subsystems
  * tree: add debugging messages during scanning
  * tree: Handle NULL subsysname in nvme_scan_ctrl()
  * tree: Fix subsystem initialization in nvme_scan_ctrl()
  * tree: Fix leaking 'name' in nvme_subsystem_lookup_namespace()
  * tree: Avoid dereferencing nvme_subsystem_t before its check for NULL
  * tree: Clarify NULL return values from nvme_get_attr()
  * fabrics: Invoke nvmf_dim() with provided tas argument
  * fabrics: add 'nvmf_update_config()'
  * fabrics: Avoid out of bounds string chomping
  * fabrics: Free old traddr in nvmf_add_ctrl
  * fabrics: update log level for write failures
  * fabrics: Streamlining documentation
  * fabrics: Fix leaking ctrl in nvmf_connect_disc_entry()
  * fabrics: Add missing break in a switch
  * ioctl: Remove attribute packed and alignedof for args structs
  * ioctl: Align arguments indentation with braces
  * json: fix endless loop scanning for controllers
  * Remove nvme_init_id_ns
  * Add lbstm support for create-ns
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 1.0:
  * tree: Remove default port setting for TCP and RDMA ports
  * tree: add 'f_args' argument to pass user data to the filter function
  * tree: remove 'ctrl_get_ana_state()'
  * tree: add namespace path iterators
  * tree: filter out namespaces
  * tree: update nvme_scan_filter_t usage</changelog>
  <changelog author="dwagner@suse.de" date="1654257600">- Reduce log noise and export error codes (bsc#1199994 bsc#1199503)
  * add 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * add 0002-fabrics-Remove-double-connection-error-logging.patch
  * add 0003-fabrics-Introduce-connection-connect-error-mapping.patch
- Apply configuration from JSON file (bsc#1199503)
  * add 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * add 0005-tree-Factor-lookup-code-for-controller.patch
  * add 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Fixes for controller authentication (bsc#1201501 bsc#1201700 bsc#1201701 bsc#1201717)
  * add 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * add 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * add 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * add 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * add 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * add 0012-Parse-dhchap_host_key-on-controller-level.patch
  * add 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * add 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * add 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
- Subsystem scanning logic fixes
  * add 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * add 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * add 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
- Fix PowerPC build warnings
  * add 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
- Fabrics fixes
  * add 0020-fabrics-sanitize-dump-config-output.patch
  * add 0021-fabrics-Fix-build_options-return-values.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 1.2 (jsc#PED-553):
  * 64-bit Reference Tags and TP-4068 changes
  * Add more details for return code of MI admin cmds
  * Fix poll.h includes
  * Parse dhchap_host_key on controller level
  * Regenerate all documentation
  * Update json config schema for missing dhchap host key
  * build: Add support to build against LibreSSL
  * build: Drop -nostdinc for LibreSSL header checks
  * fabrics: Add new TP8010 definitions
  * fabrics: Add nvmf_get_discovery_wargs()
  * fabrics: Duplicate strings when merging configs
  * fabrics: Filter out empty strings in add_argument()
  * fabrics: Fix build_options() return values
  * fabrics: Use fallthrough statement
  * fabrics: sanitize dump-config output
  * ioctl: Honor rae in nvme_get_nsid_log
  * ioctl: Set log page offset for nvme_get_log_telemetry_host
  * json-schema: add dhchap_key details to host section
  * json: Enforce correctly formatted JSON config files
  * json: Verify JSON config file starts with an array
  * json: fixup dhchap_ctrl_key definitions
  * libnvme-mi: Introduce NVMe Managament Interface library
  * mi-mctp: Add timeout support to MCTP transport
  * mi: Add Get Log Page helpers
  * mi: Add Identify function for secondary controller list
  * mi: Add Identify helper for ns-descs and primary-ctrl-caps
  * mi: Add endpoint get/set timeout API
  * mi: Add firmware download and commit commands
  * mi: Add identify helper for nsid-capable Controller List
  * mi: Add identify helpers for namespace lists
  * mi: Add identify helpers for namespaces
  * mi: Add maximum More Processing Required limit API
  * mi: Allow Admin-message sized More Processing Required responses
  * mi: Distinguish MI status from NVMe (CDW3) status
  * mi: Fix C++ compiler errors
  * mi: Implement Format NVM command
  * mi: Implement Get &amp; Set Features Admin commands
  * mi: Implement NS attach command and helpers
  * mi: Implement Namespace Management command and create/delete helpers
  * mi: Implement Sanitize command
  * mi: Init ctrl_id within xfer
  * mi: Introduce a helper for response status, unify values with ioctls
  * mi: Set log page offset for nvme_get_log_telemetry_host
  * mi: add nvme_mi_status_to_string()
  * mi: fix a memory leak in nvme_mi_open_mctp()
  * mi: fix get_log_page chunked offset check
  * mi: unify MI Get Log Page function with ioctl API
  * nvme-tree: avoid segfault if auth keys are unavailable
  * python: Use nvmf_get_discovery_wargs()
  * python: add missing ctrl attrs to Python bindings
  * rpmbuild: Enable 'make rpm' to build rpm pkgs #408
  * tree: rename controller 'dhchap_key' to 'dhchap_ctrl_key'
  * types: Move enum nvme_data_tfr to types
  * update/cleanup of documentation
  * util: Add LINE_MAX define
  * util: Add get feature length 2 API to support direction parameter
  * util: Add simple UUID type
  * util: Do not expose fallthrough defines
  * various build fixes
  * various fixes reported by coverity
- Drop upstream patches
  * remove 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * remove 0002-fabrics-Remove-double-connection-error-logging.patch
  * remove 0003-fabrics-Introduce-connection-connect-error-mapping.patch
  * remove 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * remove 0005-tree-Factor-lookup-code-for-controller.patch
  * remove 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch
  * remove 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * remove 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * remove 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * remove 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * remove 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * remove 0012-Parse-dhchap_host_key-on-controller-level.patch
  * remove 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * remove 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * remove 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
  * remove 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * remove 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * remove 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
  * remove 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
  * remove 0020-fabrics-sanitize-dump-config-output.patch
  * remove 0021-fabrics-Fix-build_options-return-values.patch
- Make man page build conditiional. Install man page location has been
  fixed upstream.
- Mark the Python directory own by the libnvme3-python package
- Use fixed manpage build date (boo#1047218)
- Fix installation of manual pages to make them accessible</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 1.2+1.g41e1016:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Use symbol version LIBNVME_1_2_1 for nbft support options
  * 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
  * added %test section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- temporarily disable unit tests on s390x (bsc#1207687, bsc#1207686)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1685016000">- Update to version v1.4 (jsc#PED-553 jsc#PED-3884)
  - Fix invalid string lenght calculcation for UUID (bsc#1209906)
  * fabrics: Fix bad UUID size introduced in recent UUID changes
  - Fix segmentation fault during garbage collection (bsc#1209905)
  * python: Fix segmentation fault during garbage collection
  * Python: Fix crash during garbage collection
  - Always sanitize traddr and trsvcid entries (bsc#1207435)
  * fabrics: Always sanitize discovery log entries
  * util: Add ECONNECTREFUSED to enum nvme_connect_err
  - Allow tracking unique discover controllers (bsc#1186689)
  * tree: Add unique discovery controller flag
  - Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
  * test: mi: Explicitly zero args for test API invocations
- Replaced old nbft implementation with the upstream one
- Applied nbft symbol patch directly
  * remove 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
- Don't enable TLS if kernel does not support it (git-fixes)
  * fabrics: Do not pass unsupported options to kernel
- Set version-tag so that version are correctly reported</changelog>
  <changelog author="dwagner@suse.de" date="1690459200">- Update to version 1.4+27.g5ae1c3:
  * tree: Add getter for subsystem iopolicy (bsc#1124564)
  * nvme-tree: avoid warning in 'list-subsys' (bsc#bsc#1212598)
  * tree: Scan all subsystems (bsc#bsc#1212598)
  * tree: Don't open nvme devices until it's absolutely required
    (bsc#1213527 bsc#1213686)
  * tree: Use nvme_ipaddrs_eq() to compare IP addresses
  * util: rename ipaddrs_eq() to nvme_ipaddrs_eq() and make public.
  * util: Add ipaddrs_eq() to check whether two IP addresses are equal
  * fabrics: check genctr after getting discovery entries (bsc#1213618)
  * ioctl: fix RAE bit on last Get Log Page command (bsc#1213618)</changelog>
  <changelog author="dwagner@suse.de" date="1693915200">- Update to version 1.4+29.ga3cf0a:
  * tree: fix segfault in nvme_scan_subsystem() (bsc#1213993)
  * src/nvme/tree.c: make __nvme_scan_subsystem() returning bool (bsc#1213993)</changelog>
</package>
<package pkgid="7284663085c488a8b5986a6c10dd8c14b41712efdec0d2296257d5efc1a91876" name="libnvme1" arch="aarch64">
  <version epoch="0" ver="1.4+29.ga3cf0a" rel="150500.4.9.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Use osc_scm to manage upstream input source.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Remove Provide for python package.
- Remove explicit tar file name for setup step.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 1.0~2:
  * Add fabrics config option 'tls'
  * Logging infrastructure reworked (API break)
  * Changed argument structs layout (API break)
  * Changed scan API (API break)
  * Fixed ctrl_loss_tmo handling concerning values of '-1'
  * Various build fixes</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v1.0-rc3:
  * Properly create manuals/documentation
  * Fix memleaks in __nvme_free_ns() and nvme_scan_subsystem()
  * nvme: get log domain id included in Log Specific Identifier
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
  * ioctl: Add identify ioctl for CNS 09h, 0Ah
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * tree: do not set dhchap_key to 'none'
  * tree: restart controller lookup
  * tree: fixup memory leak in nvme_scan_ctrl()
  * Rename nvme_path_get_subsystem()
  * Remove nvme_reset_topology()
- Use precompiled documentation instead regenerating it</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 1.0-rc4:
  * fabrics: add default port number for NVMe/TCP I/O controllers
  * linux: Update size when telemetry controller initiated data is unavailable
  * add cdw13 for set_feature_args structure
  * Add support for TP8010
  * Documentation cleanups</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 1.0-rc5:
  * ioctl: Set lsp to action in nvme_get_log_persistent_event (bsc#1196121)
  * tree: Ignore traddr case in nvme_lookup_ctrl() (bsc#1194025)
  * fabrics: Do not swap bytes for system uuid (bsc#1196565)
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646740800">- Update License information. The library is released under
  LGPL-2.1-or-later and not LGPL-2.1-only.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 1.0-rc6:
  * tree: add nvme_ctrl_get_ana_state() (bsc#1195938)
  * tree: link paths to namespaces in nvme_subsystem_scan_namespace() (bsc#1195938)
  * ioctl.h: ns list bug fix (wrong cns value)
  * types.h: Key Value Command Set Identifier added (NVME_CSI_KV)
  * types: fix status code type bug (wrong masking)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 1.0-rc7:
  * linux: fixup log page offset in nvme_get_log_page()
  * tree: Add support for default trsvcid for all controllers (bsc#1195858)
  * tree: fixup coredump during nvme discover</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 1.0-rc8:
  * types: Add support for get log - MI Command Supported
  * types: Add new Identify constant
  * types: Update persistent event entry struct added new fields
  * types: Add Host Initiated Data Gen Number to telemetry log struct
  * tree: always allocate config file in nvme_read_config()
  * tree: rework nvme_scan_subsystem()
  * tree: make subsystem name mandatory in nvme_scan_ctrl()
  * tree: move nvme_init_subsystem() into nvme_lookup_subsystem()
  * tree: do not return error when filtering out subsystems
  * tree: add debugging messages during scanning
  * tree: Handle NULL subsysname in nvme_scan_ctrl()
  * tree: Fix subsystem initialization in nvme_scan_ctrl()
  * tree: Fix leaking 'name' in nvme_subsystem_lookup_namespace()
  * tree: Avoid dereferencing nvme_subsystem_t before its check for NULL
  * tree: Clarify NULL return values from nvme_get_attr()
  * fabrics: Invoke nvmf_dim() with provided tas argument
  * fabrics: add 'nvmf_update_config()'
  * fabrics: Avoid out of bounds string chomping
  * fabrics: Free old traddr in nvmf_add_ctrl
  * fabrics: update log level for write failures
  * fabrics: Streamlining documentation
  * fabrics: Fix leaking ctrl in nvmf_connect_disc_entry()
  * fabrics: Add missing break in a switch
  * ioctl: Remove attribute packed and alignedof for args structs
  * ioctl: Align arguments indentation with braces
  * json: fix endless loop scanning for controllers
  * Remove nvme_init_id_ns
  * Add lbstm support for create-ns
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 1.0:
  * tree: Remove default port setting for TCP and RDMA ports
  * tree: add 'f_args' argument to pass user data to the filter function
  * tree: remove 'ctrl_get_ana_state()'
  * tree: add namespace path iterators
  * tree: filter out namespaces
  * tree: update nvme_scan_filter_t usage</changelog>
  <changelog author="dwagner@suse.de" date="1654257600">- Reduce log noise and export error codes (bsc#1199994 bsc#1199503)
  * add 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * add 0002-fabrics-Remove-double-connection-error-logging.patch
  * add 0003-fabrics-Introduce-connection-connect-error-mapping.patch
- Apply configuration from JSON file (bsc#1199503)
  * add 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * add 0005-tree-Factor-lookup-code-for-controller.patch
  * add 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Fixes for controller authentication (bsc#1201501 bsc#1201700 bsc#1201701 bsc#1201717)
  * add 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * add 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * add 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * add 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * add 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * add 0012-Parse-dhchap_host_key-on-controller-level.patch
  * add 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * add 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * add 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
- Subsystem scanning logic fixes
  * add 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * add 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * add 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
- Fix PowerPC build warnings
  * add 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
- Fabrics fixes
  * add 0020-fabrics-sanitize-dump-config-output.patch
  * add 0021-fabrics-Fix-build_options-return-values.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 1.2 (jsc#PED-553):
  * 64-bit Reference Tags and TP-4068 changes
  * Add more details for return code of MI admin cmds
  * Fix poll.h includes
  * Parse dhchap_host_key on controller level
  * Regenerate all documentation
  * Update json config schema for missing dhchap host key
  * build: Add support to build against LibreSSL
  * build: Drop -nostdinc for LibreSSL header checks
  * fabrics: Add new TP8010 definitions
  * fabrics: Add nvmf_get_discovery_wargs()
  * fabrics: Duplicate strings when merging configs
  * fabrics: Filter out empty strings in add_argument()
  * fabrics: Fix build_options() return values
  * fabrics: Use fallthrough statement
  * fabrics: sanitize dump-config output
  * ioctl: Honor rae in nvme_get_nsid_log
  * ioctl: Set log page offset for nvme_get_log_telemetry_host
  * json-schema: add dhchap_key details to host section
  * json: Enforce correctly formatted JSON config files
  * json: Verify JSON config file starts with an array
  * json: fixup dhchap_ctrl_key definitions
  * libnvme-mi: Introduce NVMe Managament Interface library
  * mi-mctp: Add timeout support to MCTP transport
  * mi: Add Get Log Page helpers
  * mi: Add Identify function for secondary controller list
  * mi: Add Identify helper for ns-descs and primary-ctrl-caps
  * mi: Add endpoint get/set timeout API
  * mi: Add firmware download and commit commands
  * mi: Add identify helper for nsid-capable Controller List
  * mi: Add identify helpers for namespace lists
  * mi: Add identify helpers for namespaces
  * mi: Add maximum More Processing Required limit API
  * mi: Allow Admin-message sized More Processing Required responses
  * mi: Distinguish MI status from NVMe (CDW3) status
  * mi: Fix C++ compiler errors
  * mi: Implement Format NVM command
  * mi: Implement Get &amp; Set Features Admin commands
  * mi: Implement NS attach command and helpers
  * mi: Implement Namespace Management command and create/delete helpers
  * mi: Implement Sanitize command
  * mi: Init ctrl_id within xfer
  * mi: Introduce a helper for response status, unify values with ioctls
  * mi: Set log page offset for nvme_get_log_telemetry_host
  * mi: add nvme_mi_status_to_string()
  * mi: fix a memory leak in nvme_mi_open_mctp()
  * mi: fix get_log_page chunked offset check
  * mi: unify MI Get Log Page function with ioctl API
  * nvme-tree: avoid segfault if auth keys are unavailable
  * python: Use nvmf_get_discovery_wargs()
  * python: add missing ctrl attrs to Python bindings
  * rpmbuild: Enable 'make rpm' to build rpm pkgs #408
  * tree: rename controller 'dhchap_key' to 'dhchap_ctrl_key'
  * types: Move enum nvme_data_tfr to types
  * update/cleanup of documentation
  * util: Add LINE_MAX define
  * util: Add get feature length 2 API to support direction parameter
  * util: Add simple UUID type
  * util: Do not expose fallthrough defines
  * various build fixes
  * various fixes reported by coverity
- Drop upstream patches
  * remove 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * remove 0002-fabrics-Remove-double-connection-error-logging.patch
  * remove 0003-fabrics-Introduce-connection-connect-error-mapping.patch
  * remove 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * remove 0005-tree-Factor-lookup-code-for-controller.patch
  * remove 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch
  * remove 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * remove 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * remove 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * remove 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * remove 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * remove 0012-Parse-dhchap_host_key-on-controller-level.patch
  * remove 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * remove 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * remove 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
  * remove 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * remove 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * remove 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
  * remove 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
  * remove 0020-fabrics-sanitize-dump-config-output.patch
  * remove 0021-fabrics-Fix-build_options-return-values.patch
- Make man page build conditiional. Install man page location has been
  fixed upstream.
- Mark the Python directory own by the libnvme3-python package
- Use fixed manpage build date (boo#1047218)
- Fix installation of manual pages to make them accessible</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 1.2+1.g41e1016:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Use symbol version LIBNVME_1_2_1 for nbft support options
  * 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
  * added %test section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- temporarily disable unit tests on s390x (bsc#1207687, bsc#1207686)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1685016000">- Update to version v1.4 (jsc#PED-553 jsc#PED-3884)
  - Fix invalid string lenght calculcation for UUID (bsc#1209906)
  * fabrics: Fix bad UUID size introduced in recent UUID changes
  - Fix segmentation fault during garbage collection (bsc#1209905)
  * python: Fix segmentation fault during garbage collection
  * Python: Fix crash during garbage collection
  - Always sanitize traddr and trsvcid entries (bsc#1207435)
  * fabrics: Always sanitize discovery log entries
  * util: Add ECONNECTREFUSED to enum nvme_connect_err
  - Allow tracking unique discover controllers (bsc#1186689)
  * tree: Add unique discovery controller flag
  - Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
  * test: mi: Explicitly zero args for test API invocations
- Replaced old nbft implementation with the upstream one
- Applied nbft symbol patch directly
  * remove 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
- Don't enable TLS if kernel does not support it (git-fixes)
  * fabrics: Do not pass unsupported options to kernel
- Set version-tag so that version are correctly reported</changelog>
  <changelog author="dwagner@suse.de" date="1690459200">- Update to version 1.4+27.g5ae1c3:
  * tree: Add getter for subsystem iopolicy (bsc#1124564)
  * nvme-tree: avoid warning in 'list-subsys' (bsc#bsc#1212598)
  * tree: Scan all subsystems (bsc#bsc#1212598)
  * tree: Don't open nvme devices until it's absolutely required
    (bsc#1213527 bsc#1213686)
  * tree: Use nvme_ipaddrs_eq() to compare IP addresses
  * util: rename ipaddrs_eq() to nvme_ipaddrs_eq() and make public.
  * util: Add ipaddrs_eq() to check whether two IP addresses are equal
  * fabrics: check genctr after getting discovery entries (bsc#1213618)
  * ioctl: fix RAE bit on last Get Log Page command (bsc#1213618)</changelog>
  <changelog author="dwagner@suse.de" date="1693915200">- Update to version 1.4+29.ga3cf0a:
  * tree: fix segfault in nvme_scan_subsystem() (bsc#1213993)
  * src/nvme/tree.c: make __nvme_scan_subsystem() returning bool (bsc#1213993)</changelog>
</package>
<package pkgid="ff6a4bd0aa557fd4e04fe049a7f91784cb7bfba28e829cae0a3dbcd956e569fd" name="libnvme1" arch="s390x">
  <version epoch="0" ver="1.4+29.ga3cf0a" rel="150500.4.9.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Use osc_scm to manage upstream input source.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Remove Provide for python package.
- Remove explicit tar file name for setup step.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 1.0~2:
  * Add fabrics config option 'tls'
  * Logging infrastructure reworked (API break)
  * Changed argument structs layout (API break)
  * Changed scan API (API break)
  * Fixed ctrl_loss_tmo handling concerning values of '-1'
  * Various build fixes</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v1.0-rc3:
  * Properly create manuals/documentation
  * Fix memleaks in __nvme_free_ns() and nvme_scan_subsystem()
  * nvme: get log domain id included in Log Specific Identifier
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
  * ioctl: Add identify ioctl for CNS 09h, 0Ah
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * tree: do not set dhchap_key to 'none'
  * tree: restart controller lookup
  * tree: fixup memory leak in nvme_scan_ctrl()
  * Rename nvme_path_get_subsystem()
  * Remove nvme_reset_topology()
- Use precompiled documentation instead regenerating it</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 1.0-rc4:
  * fabrics: add default port number for NVMe/TCP I/O controllers
  * linux: Update size when telemetry controller initiated data is unavailable
  * add cdw13 for set_feature_args structure
  * Add support for TP8010
  * Documentation cleanups</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 1.0-rc5:
  * ioctl: Set lsp to action in nvme_get_log_persistent_event (bsc#1196121)
  * tree: Ignore traddr case in nvme_lookup_ctrl() (bsc#1194025)
  * fabrics: Do not swap bytes for system uuid (bsc#1196565)
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646740800">- Update License information. The library is released under
  LGPL-2.1-or-later and not LGPL-2.1-only.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 1.0-rc6:
  * tree: add nvme_ctrl_get_ana_state() (bsc#1195938)
  * tree: link paths to namespaces in nvme_subsystem_scan_namespace() (bsc#1195938)
  * ioctl.h: ns list bug fix (wrong cns value)
  * types.h: Key Value Command Set Identifier added (NVME_CSI_KV)
  * types: fix status code type bug (wrong masking)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 1.0-rc7:
  * linux: fixup log page offset in nvme_get_log_page()
  * tree: Add support for default trsvcid for all controllers (bsc#1195858)
  * tree: fixup coredump during nvme discover</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 1.0-rc8:
  * types: Add support for get log - MI Command Supported
  * types: Add new Identify constant
  * types: Update persistent event entry struct added new fields
  * types: Add Host Initiated Data Gen Number to telemetry log struct
  * tree: always allocate config file in nvme_read_config()
  * tree: rework nvme_scan_subsystem()
  * tree: make subsystem name mandatory in nvme_scan_ctrl()
  * tree: move nvme_init_subsystem() into nvme_lookup_subsystem()
  * tree: do not return error when filtering out subsystems
  * tree: add debugging messages during scanning
  * tree: Handle NULL subsysname in nvme_scan_ctrl()
  * tree: Fix subsystem initialization in nvme_scan_ctrl()
  * tree: Fix leaking 'name' in nvme_subsystem_lookup_namespace()
  * tree: Avoid dereferencing nvme_subsystem_t before its check for NULL
  * tree: Clarify NULL return values from nvme_get_attr()
  * fabrics: Invoke nvmf_dim() with provided tas argument
  * fabrics: add 'nvmf_update_config()'
  * fabrics: Avoid out of bounds string chomping
  * fabrics: Free old traddr in nvmf_add_ctrl
  * fabrics: update log level for write failures
  * fabrics: Streamlining documentation
  * fabrics: Fix leaking ctrl in nvmf_connect_disc_entry()
  * fabrics: Add missing break in a switch
  * ioctl: Remove attribute packed and alignedof for args structs
  * ioctl: Align arguments indentation with braces
  * json: fix endless loop scanning for controllers
  * Remove nvme_init_id_ns
  * Add lbstm support for create-ns
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 1.0:
  * tree: Remove default port setting for TCP and RDMA ports
  * tree: add 'f_args' argument to pass user data to the filter function
  * tree: remove 'ctrl_get_ana_state()'
  * tree: add namespace path iterators
  * tree: filter out namespaces
  * tree: update nvme_scan_filter_t usage</changelog>
  <changelog author="dwagner@suse.de" date="1654257600">- Reduce log noise and export error codes (bsc#1199994 bsc#1199503)
  * add 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * add 0002-fabrics-Remove-double-connection-error-logging.patch
  * add 0003-fabrics-Introduce-connection-connect-error-mapping.patch
- Apply configuration from JSON file (bsc#1199503)
  * add 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * add 0005-tree-Factor-lookup-code-for-controller.patch
  * add 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Fixes for controller authentication (bsc#1201501 bsc#1201700 bsc#1201701 bsc#1201717)
  * add 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * add 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * add 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * add 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * add 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * add 0012-Parse-dhchap_host_key-on-controller-level.patch
  * add 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * add 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * add 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
- Subsystem scanning logic fixes
  * add 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * add 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * add 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
- Fix PowerPC build warnings
  * add 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
- Fabrics fixes
  * add 0020-fabrics-sanitize-dump-config-output.patch
  * add 0021-fabrics-Fix-build_options-return-values.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 1.2 (jsc#PED-553):
  * 64-bit Reference Tags and TP-4068 changes
  * Add more details for return code of MI admin cmds
  * Fix poll.h includes
  * Parse dhchap_host_key on controller level
  * Regenerate all documentation
  * Update json config schema for missing dhchap host key
  * build: Add support to build against LibreSSL
  * build: Drop -nostdinc for LibreSSL header checks
  * fabrics: Add new TP8010 definitions
  * fabrics: Add nvmf_get_discovery_wargs()
  * fabrics: Duplicate strings when merging configs
  * fabrics: Filter out empty strings in add_argument()
  * fabrics: Fix build_options() return values
  * fabrics: Use fallthrough statement
  * fabrics: sanitize dump-config output
  * ioctl: Honor rae in nvme_get_nsid_log
  * ioctl: Set log page offset for nvme_get_log_telemetry_host
  * json-schema: add dhchap_key details to host section
  * json: Enforce correctly formatted JSON config files
  * json: Verify JSON config file starts with an array
  * json: fixup dhchap_ctrl_key definitions
  * libnvme-mi: Introduce NVMe Managament Interface library
  * mi-mctp: Add timeout support to MCTP transport
  * mi: Add Get Log Page helpers
  * mi: Add Identify function for secondary controller list
  * mi: Add Identify helper for ns-descs and primary-ctrl-caps
  * mi: Add endpoint get/set timeout API
  * mi: Add firmware download and commit commands
  * mi: Add identify helper for nsid-capable Controller List
  * mi: Add identify helpers for namespace lists
  * mi: Add identify helpers for namespaces
  * mi: Add maximum More Processing Required limit API
  * mi: Allow Admin-message sized More Processing Required responses
  * mi: Distinguish MI status from NVMe (CDW3) status
  * mi: Fix C++ compiler errors
  * mi: Implement Format NVM command
  * mi: Implement Get &amp; Set Features Admin commands
  * mi: Implement NS attach command and helpers
  * mi: Implement Namespace Management command and create/delete helpers
  * mi: Implement Sanitize command
  * mi: Init ctrl_id within xfer
  * mi: Introduce a helper for response status, unify values with ioctls
  * mi: Set log page offset for nvme_get_log_telemetry_host
  * mi: add nvme_mi_status_to_string()
  * mi: fix a memory leak in nvme_mi_open_mctp()
  * mi: fix get_log_page chunked offset check
  * mi: unify MI Get Log Page function with ioctl API
  * nvme-tree: avoid segfault if auth keys are unavailable
  * python: Use nvmf_get_discovery_wargs()
  * python: add missing ctrl attrs to Python bindings
  * rpmbuild: Enable 'make rpm' to build rpm pkgs #408
  * tree: rename controller 'dhchap_key' to 'dhchap_ctrl_key'
  * types: Move enum nvme_data_tfr to types
  * update/cleanup of documentation
  * util: Add LINE_MAX define
  * util: Add get feature length 2 API to support direction parameter
  * util: Add simple UUID type
  * util: Do not expose fallthrough defines
  * various build fixes
  * various fixes reported by coverity
- Drop upstream patches
  * remove 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * remove 0002-fabrics-Remove-double-connection-error-logging.patch
  * remove 0003-fabrics-Introduce-connection-connect-error-mapping.patch
  * remove 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * remove 0005-tree-Factor-lookup-code-for-controller.patch
  * remove 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch
  * remove 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * remove 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * remove 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * remove 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * remove 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * remove 0012-Parse-dhchap_host_key-on-controller-level.patch
  * remove 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * remove 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * remove 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
  * remove 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * remove 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * remove 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
  * remove 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
  * remove 0020-fabrics-sanitize-dump-config-output.patch
  * remove 0021-fabrics-Fix-build_options-return-values.patch
- Make man page build conditiional. Install man page location has been
  fixed upstream.
- Mark the Python directory own by the libnvme3-python package
- Use fixed manpage build date (boo#1047218)
- Fix installation of manual pages to make them accessible</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 1.2+1.g41e1016:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Use symbol version LIBNVME_1_2_1 for nbft support options
  * 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
  * added %test section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- temporarily disable unit tests on s390x (bsc#1207687, bsc#1207686)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1685016000">- Update to version v1.4 (jsc#PED-553 jsc#PED-3884)
  - Fix invalid string lenght calculcation for UUID (bsc#1209906)
  * fabrics: Fix bad UUID size introduced in recent UUID changes
  - Fix segmentation fault during garbage collection (bsc#1209905)
  * python: Fix segmentation fault during garbage collection
  * Python: Fix crash during garbage collection
  - Always sanitize traddr and trsvcid entries (bsc#1207435)
  * fabrics: Always sanitize discovery log entries
  * util: Add ECONNECTREFUSED to enum nvme_connect_err
  - Allow tracking unique discover controllers (bsc#1186689)
  * tree: Add unique discovery controller flag
  - Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
  * test: mi: Explicitly zero args for test API invocations
- Replaced old nbft implementation with the upstream one
- Applied nbft symbol patch directly
  * remove 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
- Don't enable TLS if kernel does not support it (git-fixes)
  * fabrics: Do not pass unsupported options to kernel
- Set version-tag so that version are correctly reported</changelog>
  <changelog author="dwagner@suse.de" date="1690459200">- Update to version 1.4+27.g5ae1c3:
  * tree: Add getter for subsystem iopolicy (bsc#1124564)
  * nvme-tree: avoid warning in 'list-subsys' (bsc#bsc#1212598)
  * tree: Scan all subsystems (bsc#bsc#1212598)
  * tree: Don't open nvme devices until it's absolutely required
    (bsc#1213527 bsc#1213686)
  * tree: Use nvme_ipaddrs_eq() to compare IP addresses
  * util: rename ipaddrs_eq() to nvme_ipaddrs_eq() and make public.
  * util: Add ipaddrs_eq() to check whether two IP addresses are equal
  * fabrics: check genctr after getting discovery entries (bsc#1213618)
  * ioctl: fix RAE bit on last Get Log Page command (bsc#1213618)</changelog>
  <changelog author="dwagner@suse.de" date="1693915200">- Update to version 1.4+29.ga3cf0a:
  * tree: fix segfault in nvme_scan_subsystem() (bsc#1213993)
  * src/nvme/tree.c: make __nvme_scan_subsystem() returning bool (bsc#1213993)</changelog>
</package>
<package pkgid="426c27e24cb86ff6d94114219d9abeeddd4a679b43bda82c30cf8ef711a6fa3e" name="libnvme1" arch="x86_64">
  <version epoch="0" ver="1.4+29.ga3cf0a" rel="150500.4.9.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Use osc_scm to manage upstream input source.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Remove Provide for python package.
- Remove explicit tar file name for setup step.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 1.0~2:
  * Add fabrics config option 'tls'
  * Logging infrastructure reworked (API break)
  * Changed argument structs layout (API break)
  * Changed scan API (API break)
  * Fixed ctrl_loss_tmo handling concerning values of '-1'
  * Various build fixes</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v1.0-rc3:
  * Properly create manuals/documentation
  * Fix memleaks in __nvme_free_ns() and nvme_scan_subsystem()
  * nvme: get log domain id included in Log Specific Identifier
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
  * ioctl: Add identify ioctl for CNS 09h, 0Ah
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * tree: do not set dhchap_key to 'none'
  * tree: restart controller lookup
  * tree: fixup memory leak in nvme_scan_ctrl()
  * Rename nvme_path_get_subsystem()
  * Remove nvme_reset_topology()
- Use precompiled documentation instead regenerating it</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 1.0-rc4:
  * fabrics: add default port number for NVMe/TCP I/O controllers
  * linux: Update size when telemetry controller initiated data is unavailable
  * add cdw13 for set_feature_args structure
  * Add support for TP8010
  * Documentation cleanups</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 1.0-rc5:
  * ioctl: Set lsp to action in nvme_get_log_persistent_event (bsc#1196121)
  * tree: Ignore traddr case in nvme_lookup_ctrl() (bsc#1194025)
  * fabrics: Do not swap bytes for system uuid (bsc#1196565)
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646740800">- Update License information. The library is released under
  LGPL-2.1-or-later and not LGPL-2.1-only.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 1.0-rc6:
  * tree: add nvme_ctrl_get_ana_state() (bsc#1195938)
  * tree: link paths to namespaces in nvme_subsystem_scan_namespace() (bsc#1195938)
  * ioctl.h: ns list bug fix (wrong cns value)
  * types.h: Key Value Command Set Identifier added (NVME_CSI_KV)
  * types: fix status code type bug (wrong masking)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 1.0-rc7:
  * linux: fixup log page offset in nvme_get_log_page()
  * tree: Add support for default trsvcid for all controllers (bsc#1195858)
  * tree: fixup coredump during nvme discover</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 1.0-rc8:
  * types: Add support for get log - MI Command Supported
  * types: Add new Identify constant
  * types: Update persistent event entry struct added new fields
  * types: Add Host Initiated Data Gen Number to telemetry log struct
  * tree: always allocate config file in nvme_read_config()
  * tree: rework nvme_scan_subsystem()
  * tree: make subsystem name mandatory in nvme_scan_ctrl()
  * tree: move nvme_init_subsystem() into nvme_lookup_subsystem()
  * tree: do not return error when filtering out subsystems
  * tree: add debugging messages during scanning
  * tree: Handle NULL subsysname in nvme_scan_ctrl()
  * tree: Fix subsystem initialization in nvme_scan_ctrl()
  * tree: Fix leaking 'name' in nvme_subsystem_lookup_namespace()
  * tree: Avoid dereferencing nvme_subsystem_t before its check for NULL
  * tree: Clarify NULL return values from nvme_get_attr()
  * fabrics: Invoke nvmf_dim() with provided tas argument
  * fabrics: add 'nvmf_update_config()'
  * fabrics: Avoid out of bounds string chomping
  * fabrics: Free old traddr in nvmf_add_ctrl
  * fabrics: update log level for write failures
  * fabrics: Streamlining documentation
  * fabrics: Fix leaking ctrl in nvmf_connect_disc_entry()
  * fabrics: Add missing break in a switch
  * ioctl: Remove attribute packed and alignedof for args structs
  * ioctl: Align arguments indentation with braces
  * json: fix endless loop scanning for controllers
  * Remove nvme_init_id_ns
  * Add lbstm support for create-ns
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 1.0:
  * tree: Remove default port setting for TCP and RDMA ports
  * tree: add 'f_args' argument to pass user data to the filter function
  * tree: remove 'ctrl_get_ana_state()'
  * tree: add namespace path iterators
  * tree: filter out namespaces
  * tree: update nvme_scan_filter_t usage</changelog>
  <changelog author="dwagner@suse.de" date="1654257600">- Reduce log noise and export error codes (bsc#1199994 bsc#1199503)
  * add 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * add 0002-fabrics-Remove-double-connection-error-logging.patch
  * add 0003-fabrics-Introduce-connection-connect-error-mapping.patch
- Apply configuration from JSON file (bsc#1199503)
  * add 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * add 0005-tree-Factor-lookup-code-for-controller.patch
  * add 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Fixes for controller authentication (bsc#1201501 bsc#1201700 bsc#1201701 bsc#1201717)
  * add 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * add 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * add 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * add 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * add 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * add 0012-Parse-dhchap_host_key-on-controller-level.patch
  * add 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * add 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * add 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
- Subsystem scanning logic fixes
  * add 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * add 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * add 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
- Fix PowerPC build warnings
  * add 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
- Fabrics fixes
  * add 0020-fabrics-sanitize-dump-config-output.patch
  * add 0021-fabrics-Fix-build_options-return-values.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 1.2 (jsc#PED-553):
  * 64-bit Reference Tags and TP-4068 changes
  * Add more details for return code of MI admin cmds
  * Fix poll.h includes
  * Parse dhchap_host_key on controller level
  * Regenerate all documentation
  * Update json config schema for missing dhchap host key
  * build: Add support to build against LibreSSL
  * build: Drop -nostdinc for LibreSSL header checks
  * fabrics: Add new TP8010 definitions
  * fabrics: Add nvmf_get_discovery_wargs()
  * fabrics: Duplicate strings when merging configs
  * fabrics: Filter out empty strings in add_argument()
  * fabrics: Fix build_options() return values
  * fabrics: Use fallthrough statement
  * fabrics: sanitize dump-config output
  * ioctl: Honor rae in nvme_get_nsid_log
  * ioctl: Set log page offset for nvme_get_log_telemetry_host
  * json-schema: add dhchap_key details to host section
  * json: Enforce correctly formatted JSON config files
  * json: Verify JSON config file starts with an array
  * json: fixup dhchap_ctrl_key definitions
  * libnvme-mi: Introduce NVMe Managament Interface library
  * mi-mctp: Add timeout support to MCTP transport
  * mi: Add Get Log Page helpers
  * mi: Add Identify function for secondary controller list
  * mi: Add Identify helper for ns-descs and primary-ctrl-caps
  * mi: Add endpoint get/set timeout API
  * mi: Add firmware download and commit commands
  * mi: Add identify helper for nsid-capable Controller List
  * mi: Add identify helpers for namespace lists
  * mi: Add identify helpers for namespaces
  * mi: Add maximum More Processing Required limit API
  * mi: Allow Admin-message sized More Processing Required responses
  * mi: Distinguish MI status from NVMe (CDW3) status
  * mi: Fix C++ compiler errors
  * mi: Implement Format NVM command
  * mi: Implement Get &amp; Set Features Admin commands
  * mi: Implement NS attach command and helpers
  * mi: Implement Namespace Management command and create/delete helpers
  * mi: Implement Sanitize command
  * mi: Init ctrl_id within xfer
  * mi: Introduce a helper for response status, unify values with ioctls
  * mi: Set log page offset for nvme_get_log_telemetry_host
  * mi: add nvme_mi_status_to_string()
  * mi: fix a memory leak in nvme_mi_open_mctp()
  * mi: fix get_log_page chunked offset check
  * mi: unify MI Get Log Page function with ioctl API
  * nvme-tree: avoid segfault if auth keys are unavailable
  * python: Use nvmf_get_discovery_wargs()
  * python: add missing ctrl attrs to Python bindings
  * rpmbuild: Enable 'make rpm' to build rpm pkgs #408
  * tree: rename controller 'dhchap_key' to 'dhchap_ctrl_key'
  * types: Move enum nvme_data_tfr to types
  * update/cleanup of documentation
  * util: Add LINE_MAX define
  * util: Add get feature length 2 API to support direction parameter
  * util: Add simple UUID type
  * util: Do not expose fallthrough defines
  * various build fixes
  * various fixes reported by coverity
- Drop upstream patches
  * remove 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * remove 0002-fabrics-Remove-double-connection-error-logging.patch
  * remove 0003-fabrics-Introduce-connection-connect-error-mapping.patch
  * remove 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * remove 0005-tree-Factor-lookup-code-for-controller.patch
  * remove 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch
  * remove 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * remove 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * remove 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * remove 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * remove 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * remove 0012-Parse-dhchap_host_key-on-controller-level.patch
  * remove 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * remove 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * remove 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
  * remove 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * remove 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * remove 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
  * remove 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
  * remove 0020-fabrics-sanitize-dump-config-output.patch
  * remove 0021-fabrics-Fix-build_options-return-values.patch
- Make man page build conditiional. Install man page location has been
  fixed upstream.
- Mark the Python directory own by the libnvme3-python package
- Use fixed manpage build date (boo#1047218)
- Fix installation of manual pages to make them accessible</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 1.2+1.g41e1016:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Use symbol version LIBNVME_1_2_1 for nbft support options
  * 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
  * added %test section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- temporarily disable unit tests on s390x (bsc#1207687, bsc#1207686)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1685016000">- Update to version v1.4 (jsc#PED-553 jsc#PED-3884)
  - Fix invalid string lenght calculcation for UUID (bsc#1209906)
  * fabrics: Fix bad UUID size introduced in recent UUID changes
  - Fix segmentation fault during garbage collection (bsc#1209905)
  * python: Fix segmentation fault during garbage collection
  * Python: Fix crash during garbage collection
  - Always sanitize traddr and trsvcid entries (bsc#1207435)
  * fabrics: Always sanitize discovery log entries
  * util: Add ECONNECTREFUSED to enum nvme_connect_err
  - Allow tracking unique discover controllers (bsc#1186689)
  * tree: Add unique discovery controller flag
  - Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
  * test: mi: Explicitly zero args for test API invocations
- Replaced old nbft implementation with the upstream one
- Applied nbft symbol patch directly
  * remove 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
- Don't enable TLS if kernel does not support it (git-fixes)
  * fabrics: Do not pass unsupported options to kernel
- Set version-tag so that version are correctly reported</changelog>
  <changelog author="dwagner@suse.de" date="1690459200">- Update to version 1.4+27.g5ae1c3:
  * tree: Add getter for subsystem iopolicy (bsc#1124564)
  * nvme-tree: avoid warning in 'list-subsys' (bsc#bsc#1212598)
  * tree: Scan all subsystems (bsc#bsc#1212598)
  * tree: Don't open nvme devices until it's absolutely required
    (bsc#1213527 bsc#1213686)
  * tree: Use nvme_ipaddrs_eq() to compare IP addresses
  * util: rename ipaddrs_eq() to nvme_ipaddrs_eq() and make public.
  * util: Add ipaddrs_eq() to check whether two IP addresses are equal
  * fabrics: check genctr after getting discovery entries (bsc#1213618)
  * ioctl: fix RAE bit on last Get Log Page command (bsc#1213618)</changelog>
  <changelog author="dwagner@suse.de" date="1693915200">- Update to version 1.4+29.ga3cf0a:
  * tree: fix segfault in nvme_scan_subsystem() (bsc#1213993)
  * src/nvme/tree.c: make __nvme_scan_subsystem() returning bool (bsc#1213993)</changelog>
</package>
<package pkgid="c48793b50fba2eba871a9e368a2ca00334a37f4a2c0eab0fc89b4b8af064b9ac" name="libonig4" arch="aarch64">
  <version epoch="0" ver="6.7.0" rel="150000.3.6.1"/>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="mrueckert@suse.de" date="1159531200">- update to version 2.5.7:
  many fixes.</changelog>
  <changelog author="gber@opensuse.org" date="1281787200">- update to version 5.9.2:
  + many fixes
- cleanup:
  + split into liborig2 and oniguruma-devel subpackages
  + corrected license information
  + changed summary to conform with policy</changelog>
  <changelog author="i@marguerite.su" date="1410004800">- update version 5.9.5
  * [impl] escape warnings for -Wall.
  * [impl] remove unused variable.
- changes in 5.9.4
  * [dist] add oniguruma.pc.in file
- changes in 5.9.3
  * fix print_tree ENCLOSE_OPTION bug</changelog>
  <changelog author="i@marguerite.su" date="1445428800">- update version 5.9.6
  * [impl] add onigenc_end_unicode().
  * [impl] add onig_add_end_call().</changelog>
  <changelog author="mrueckert@suse.de" date="1456833600">- remove ruby build requires. seems unused.</changelog>
  <changelog author="mrueckert@suse.de" date="1502107200">- Version 6.5.0
  - [new] support Absent clear (Absent functions)
  - abolish configure option: --enable-combination-explosion-check
  - [new] support Absent functions (?~...)
  - fix #65: SIZEOF_SIZE_T doesn't exist on certain architecutres
  - [new] support \O (true anychar)
  - [new] support \K (keep)
  - add new node type: NODE_GIMMICK
  - [new] support \N (no newline)
  - [new] support \R (general newline)
  - [new] support if-then-else syntax
  - [new] support backref validity checker
- Version 6.4.0
  - fix memory leaks
  - change encoding of doc/XXXX.ja from EUC-JP to UTF-8
  - update doc/RE, and doc/RE.ja
  - fix fatal bug of endless repeat check on Windows
  - PR #62 : add check for return values
  - [new] support call zero (\g{0})
  - [new] support relative call by positive number
  - [new] support relative back-reference by positive number
  - fix #60 : check value type
  - change output format for ONIG_DEBUG_COMPILE and
    ONIG_DEBUG_MATCH
- Version 6.3.0
  - fix #60 : invalid state(CCS_VALUE) in parse_char_class()
  - fix #59 : access to invalid address by reg-&gt;dmax value
  - fix invalid increment of start position in onig_scan()
  - fix #58 : access to invalid address by reg-&gt;dmin value
  - fix #57 : DATA_ENSURE() check must be before data access
  - fix #56 : return invalid result for codepoint 0xFFFFFFFF
  - [new] add \o{17777777777} syntax.
  - fix #55 : Byte value expressed in octal must be smaller than
    256
- Version 6.2.0
  - fix: size in xmemcpy in stack_double (PR #51)
  - Initialize return value
  - NEW API: add onig_set_capture_num_limit()
  - change MemNumType from short int to int
  - fix: [0-9-a] was not allowed as [0-9\-a]
  - fix: illegal capture after recursive call
  - fix: problem with optimization of \z
  - fix: .* optimization
  - Set a limit of parser recursion
  - fix; that warnings are not shown properly
  - fix: /[a-c#]+\W/ =~ "def#" fails when encoding is UTF-16/32
  - fix: /[\x{0}-X]/i doesn't match properly when UTF-16/32 is
    used.
- Version 6.1.3
  - fix: Syntax error: redirection unexpected (expecting word) #35
- Version 6.1.2
  - allow word bound, word begin and word end in look-behind.
  - add ONIG_OPTION_CHECK_VALIDITY_OF_STRING option.
  - fix use after free node.
  - fix memory leaks after parsing regexp error.
  - implement many of is_valid_mbc_string().
- Version 6.1.1
  - fix segfault /W.?{888}{888}{888}\x00/ (found by libfuzzer)
  - fix error unmatched close parenthesis for %{(.*?)} #23
- Version 6.1.0
  - add contributed/libfuzzer-onig.cpp  (thanks hannob)
  - update LTVERSION 4:0:0
  - NEW API: onigenc_is_valid_mbc_string().
  - add is_valid_mbc_string() member into OnigEncodingType.
  - fix out of bounds read.
  - disable USE_INVALID_CODE_SCHEME.
  - doc/RE improved.
  - add onig_scan() into doc/API.
  - fix bug: Out of bounds read in onig_strcpy() #17
  - fix bug: infinite loop of backreference and group.
  - fix out of bounds read in mbc_to_code() #16
  - doc/RE refinements.
  - add onig_scan() (NEW API)
  - reimplement match stack allocation for case too many repeat
  - and too many captures in regexp.
  - number of captures &lt;= 32767 for bytecode representation.
  - don't use int_map_backward for thread-safe.
  - fix case of enclosed option in look-behind.
  - fix ignore case in look-behind.
  - fix memory leak in onig_unicode_define_user_property()
  - declare variables at the top of scope.  (thanks nmaya)
- Version 6.0.0
  - add NEW API: onig_unicode_define_user_property()
  - update Unicode data to 8.0.0
  - change OnigCodePoint type to unsigned int.
  - add doc/UNICODE_PROPERTIES.
  - add error code ONIGERR_FAIL_TO_INITIALIZE.
  - add make_win64/32.bat.
  - fix bug of uninitialized regex_t value on error.
  - reimplement Unicode case folding.
  - update LTVERSION = 3.0.0
  - remove all THREAD_ macro.
  - add init member into OnigEncoding. (add onig_initialize())
  - remove state member of regex.
  - move source files into src/
  - rename configre.in to configure.ac.
  - fix memory leak. (thanks pigzang)
  - change mail address.</changelog>
  <changelog author="avindra@opensuse.org" date="1514030400">- Version 6.7.0
  - add ONIG_SYNTAX_ONIGURUMA (default syntax)
  - restructure StackType
  - implement subexp calls (?R), (?&amp;name), (?-n), (?+n) for Perl
    syntax
  - use string pool of gperf for Unicode Property lookup function
  - fix an empty greedy regex and a word boundary (.*\b) fails
  - remove a stack type STK_POS
  - add a declaration of onig_end()
  - fix compilation failure in out-of-source build
  - [new] hexadecimal codepoint \uHHHH
- Version 6.6.1
  - fix definition of \X to (?&gt;\O(?:\Y\O)*)
- Version 6.6.0
  - rename Absent clear to Range clear
  - [new] Extended Grapheme Cluster \X and boundary \y, \Y
  - fix: invalid index(ctype) value assigned to Unicode Block
    properties
  - --enable-crnl-as-line-terminator to be deprecated
  - [new] ASCII only mode options (?WDSP)
  - [new] ONIG_OPTION_XXXX_IS_ASCII  options
  - disable OP_CCLASS_NODE
  - [spec] Absent clear restore previous range value at backtrack
  - optimize for simple one char repetition in Absent expression
  - fix: invalid impl. for reluctant repetition in Absent expression
  - remove compile switch USE_NAMED_GROUP
  - Visual Studio 2005 compilation fixed
- cleanup with spec-cleaner</changelog>
  <changelog author="mrueckert@suse.de" date="1661515200">- Added d3e402928b6eb3327f8f7d59a9edfa622fec557b.patch: (boo#1157805 CVE-2019-19246)
  oniguruma: Heap-based buffer over-read in str_lower_case_match in regexec.c
- Added 6eb4aca6a7f2f60f473580576d86686ed6a6ebec.patch: (boo#1164569 CVE-2019-19204)
  oniguruma: heap-based buffer over-read in function fetch_interval_quantifier in regparse.c
- Added aa0188eaedc056dca8374ac03d0177429b495515.patch: (boo#1164550 CVE-2019-19203)
  oniguruma: heap-based buffer over-read in function gb18030_mbc_enc_len in file gb18030.c
- Added 4097828d7cc87589864fecf452f2cd46c5f37180.patch: (boo#1150130 CVE-2019-16163)
  oniguruma: stack Exhaustion in regcomp.c because of recursion in regparse.c.
- Added cbe9f8bd9cfc6c3c87a60fbae58fa1a85db59df0.patch: (boo#1177179 CVE-2020-26159)
  oniguruma: Buffer overflow in concat_opt_exact_str could result in DoS
- Added 0f7f61ed1b7b697e283e37bd2d731d0bd57adb55.patch: (boo#1142847 CVE-2019-13224)
  oniguruma: use-after-free in onig_new_deluxe() in regext.c</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1720008000">- Added oniguruma-6.8.2-CVE-2019-13225-fix.patch (boo#1141157 CVE-2019-13225)
  oniguruma: null-pointer dereference in match_at() in regexec.c</changelog>
</package>
<package pkgid="c577f92570f205ae2d39f4750cb29ac56432ea557814942cf0adbe51481b2ab5" name="libonig4" arch="s390x">
  <version epoch="0" ver="6.7.0" rel="150000.3.6.1"/>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="mrueckert@suse.de" date="1159531200">- update to version 2.5.7:
  many fixes.</changelog>
  <changelog author="gber@opensuse.org" date="1281787200">- update to version 5.9.2:
  + many fixes
- cleanup:
  + split into liborig2 and oniguruma-devel subpackages
  + corrected license information
  + changed summary to conform with policy</changelog>
  <changelog author="i@marguerite.su" date="1410004800">- update version 5.9.5
  * [impl] escape warnings for -Wall.
  * [impl] remove unused variable.
- changes in 5.9.4
  * [dist] add oniguruma.pc.in file
- changes in 5.9.3
  * fix print_tree ENCLOSE_OPTION bug</changelog>
  <changelog author="i@marguerite.su" date="1445428800">- update version 5.9.6
  * [impl] add onigenc_end_unicode().
  * [impl] add onig_add_end_call().</changelog>
  <changelog author="mrueckert@suse.de" date="1456833600">- remove ruby build requires. seems unused.</changelog>
  <changelog author="mrueckert@suse.de" date="1502107200">- Version 6.5.0
  - [new] support Absent clear (Absent functions)
  - abolish configure option: --enable-combination-explosion-check
  - [new] support Absent functions (?~...)
  - fix #65: SIZEOF_SIZE_T doesn't exist on certain architecutres
  - [new] support \O (true anychar)
  - [new] support \K (keep)
  - add new node type: NODE_GIMMICK
  - [new] support \N (no newline)
  - [new] support \R (general newline)
  - [new] support if-then-else syntax
  - [new] support backref validity checker
- Version 6.4.0
  - fix memory leaks
  - change encoding of doc/XXXX.ja from EUC-JP to UTF-8
  - update doc/RE, and doc/RE.ja
  - fix fatal bug of endless repeat check on Windows
  - PR #62 : add check for return values
  - [new] support call zero (\g{0})
  - [new] support relative call by positive number
  - [new] support relative back-reference by positive number
  - fix #60 : check value type
  - change output format for ONIG_DEBUG_COMPILE and
    ONIG_DEBUG_MATCH
- Version 6.3.0
  - fix #60 : invalid state(CCS_VALUE) in parse_char_class()
  - fix #59 : access to invalid address by reg-&gt;dmax value
  - fix invalid increment of start position in onig_scan()
  - fix #58 : access to invalid address by reg-&gt;dmin value
  - fix #57 : DATA_ENSURE() check must be before data access
  - fix #56 : return invalid result for codepoint 0xFFFFFFFF
  - [new] add \o{17777777777} syntax.
  - fix #55 : Byte value expressed in octal must be smaller than
    256
- Version 6.2.0
  - fix: size in xmemcpy in stack_double (PR #51)
  - Initialize return value
  - NEW API: add onig_set_capture_num_limit()
  - change MemNumType from short int to int
  - fix: [0-9-a] was not allowed as [0-9\-a]
  - fix: illegal capture after recursive call
  - fix: problem with optimization of \z
  - fix: .* optimization
  - Set a limit of parser recursion
  - fix; that warnings are not shown properly
  - fix: /[a-c#]+\W/ =~ "def#" fails when encoding is UTF-16/32
  - fix: /[\x{0}-X]/i doesn't match properly when UTF-16/32 is
    used.
- Version 6.1.3
  - fix: Syntax error: redirection unexpected (expecting word) #35
- Version 6.1.2
  - allow word bound, word begin and word end in look-behind.
  - add ONIG_OPTION_CHECK_VALIDITY_OF_STRING option.
  - fix use after free node.
  - fix memory leaks after parsing regexp error.
  - implement many of is_valid_mbc_string().
- Version 6.1.1
  - fix segfault /W.?{888}{888}{888}\x00/ (found by libfuzzer)
  - fix error unmatched close parenthesis for %{(.*?)} #23
- Version 6.1.0
  - add contributed/libfuzzer-onig.cpp  (thanks hannob)
  - update LTVERSION 4:0:0
  - NEW API: onigenc_is_valid_mbc_string().
  - add is_valid_mbc_string() member into OnigEncodingType.
  - fix out of bounds read.
  - disable USE_INVALID_CODE_SCHEME.
  - doc/RE improved.
  - add onig_scan() into doc/API.
  - fix bug: Out of bounds read in onig_strcpy() #17
  - fix bug: infinite loop of backreference and group.
  - fix out of bounds read in mbc_to_code() #16
  - doc/RE refinements.
  - add onig_scan() (NEW API)
  - reimplement match stack allocation for case too many repeat
  - and too many captures in regexp.
  - number of captures &lt;= 32767 for bytecode representation.
  - don't use int_map_backward for thread-safe.
  - fix case of enclosed option in look-behind.
  - fix ignore case in look-behind.
  - fix memory leak in onig_unicode_define_user_property()
  - declare variables at the top of scope.  (thanks nmaya)
- Version 6.0.0
  - add NEW API: onig_unicode_define_user_property()
  - update Unicode data to 8.0.0
  - change OnigCodePoint type to unsigned int.
  - add doc/UNICODE_PROPERTIES.
  - add error code ONIGERR_FAIL_TO_INITIALIZE.
  - add make_win64/32.bat.
  - fix bug of uninitialized regex_t value on error.
  - reimplement Unicode case folding.
  - update LTVERSION = 3.0.0
  - remove all THREAD_ macro.
  - add init member into OnigEncoding. (add onig_initialize())
  - remove state member of regex.
  - move source files into src/
  - rename configre.in to configure.ac.
  - fix memory leak. (thanks pigzang)
  - change mail address.</changelog>
  <changelog author="avindra@opensuse.org" date="1514030400">- Version 6.7.0
  - add ONIG_SYNTAX_ONIGURUMA (default syntax)
  - restructure StackType
  - implement subexp calls (?R), (?&amp;name), (?-n), (?+n) for Perl
    syntax
  - use string pool of gperf for Unicode Property lookup function
  - fix an empty greedy regex and a word boundary (.*\b) fails
  - remove a stack type STK_POS
  - add a declaration of onig_end()
  - fix compilation failure in out-of-source build
  - [new] hexadecimal codepoint \uHHHH
- Version 6.6.1
  - fix definition of \X to (?&gt;\O(?:\Y\O)*)
- Version 6.6.0
  - rename Absent clear to Range clear
  - [new] Extended Grapheme Cluster \X and boundary \y, \Y
  - fix: invalid index(ctype) value assigned to Unicode Block
    properties
  - --enable-crnl-as-line-terminator to be deprecated
  - [new] ASCII only mode options (?WDSP)
  - [new] ONIG_OPTION_XXXX_IS_ASCII  options
  - disable OP_CCLASS_NODE
  - [spec] Absent clear restore previous range value at backtrack
  - optimize for simple one char repetition in Absent expression
  - fix: invalid impl. for reluctant repetition in Absent expression
  - remove compile switch USE_NAMED_GROUP
  - Visual Studio 2005 compilation fixed
- cleanup with spec-cleaner</changelog>
  <changelog author="mrueckert@suse.de" date="1661515200">- Added d3e402928b6eb3327f8f7d59a9edfa622fec557b.patch: (boo#1157805 CVE-2019-19246)
  oniguruma: Heap-based buffer over-read in str_lower_case_match in regexec.c
- Added 6eb4aca6a7f2f60f473580576d86686ed6a6ebec.patch: (boo#1164569 CVE-2019-19204)
  oniguruma: heap-based buffer over-read in function fetch_interval_quantifier in regparse.c
- Added aa0188eaedc056dca8374ac03d0177429b495515.patch: (boo#1164550 CVE-2019-19203)
  oniguruma: heap-based buffer over-read in function gb18030_mbc_enc_len in file gb18030.c
- Added 4097828d7cc87589864fecf452f2cd46c5f37180.patch: (boo#1150130 CVE-2019-16163)
  oniguruma: stack Exhaustion in regcomp.c because of recursion in regparse.c.
- Added cbe9f8bd9cfc6c3c87a60fbae58fa1a85db59df0.patch: (boo#1177179 CVE-2020-26159)
  oniguruma: Buffer overflow in concat_opt_exact_str could result in DoS
- Added 0f7f61ed1b7b697e283e37bd2d731d0bd57adb55.patch: (boo#1142847 CVE-2019-13224)
  oniguruma: use-after-free in onig_new_deluxe() in regext.c</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1720008000">- Added oniguruma-6.8.2-CVE-2019-13225-fix.patch (boo#1141157 CVE-2019-13225)
  oniguruma: null-pointer dereference in match_at() in regexec.c</changelog>
</package>
<package pkgid="bd0c6d331ce0c1463d27f4c79fbabaf983b23b31f4e778dfcad68b5ffcb7aca1" name="libonig4" arch="x86_64">
  <version epoch="0" ver="6.7.0" rel="150000.3.6.1"/>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="mrueckert@suse.de" date="1159531200">- update to version 2.5.7:
  many fixes.</changelog>
  <changelog author="gber@opensuse.org" date="1281787200">- update to version 5.9.2:
  + many fixes
- cleanup:
  + split into liborig2 and oniguruma-devel subpackages
  + corrected license information
  + changed summary to conform with policy</changelog>
  <changelog author="i@marguerite.su" date="1410004800">- update version 5.9.5
  * [impl] escape warnings for -Wall.
  * [impl] remove unused variable.
- changes in 5.9.4
  * [dist] add oniguruma.pc.in file
- changes in 5.9.3
  * fix print_tree ENCLOSE_OPTION bug</changelog>
  <changelog author="i@marguerite.su" date="1445428800">- update version 5.9.6
  * [impl] add onigenc_end_unicode().
  * [impl] add onig_add_end_call().</changelog>
  <changelog author="mrueckert@suse.de" date="1456833600">- remove ruby build requires. seems unused.</changelog>
  <changelog author="mrueckert@suse.de" date="1502107200">- Version 6.5.0
  - [new] support Absent clear (Absent functions)
  - abolish configure option: --enable-combination-explosion-check
  - [new] support Absent functions (?~...)
  - fix #65: SIZEOF_SIZE_T doesn't exist on certain architecutres
  - [new] support \O (true anychar)
  - [new] support \K (keep)
  - add new node type: NODE_GIMMICK
  - [new] support \N (no newline)
  - [new] support \R (general newline)
  - [new] support if-then-else syntax
  - [new] support backref validity checker
- Version 6.4.0
  - fix memory leaks
  - change encoding of doc/XXXX.ja from EUC-JP to UTF-8
  - update doc/RE, and doc/RE.ja
  - fix fatal bug of endless repeat check on Windows
  - PR #62 : add check for return values
  - [new] support call zero (\g{0})
  - [new] support relative call by positive number
  - [new] support relative back-reference by positive number
  - fix #60 : check value type
  - change output format for ONIG_DEBUG_COMPILE and
    ONIG_DEBUG_MATCH
- Version 6.3.0
  - fix #60 : invalid state(CCS_VALUE) in parse_char_class()
  - fix #59 : access to invalid address by reg-&gt;dmax value
  - fix invalid increment of start position in onig_scan()
  - fix #58 : access to invalid address by reg-&gt;dmin value
  - fix #57 : DATA_ENSURE() check must be before data access
  - fix #56 : return invalid result for codepoint 0xFFFFFFFF
  - [new] add \o{17777777777} syntax.
  - fix #55 : Byte value expressed in octal must be smaller than
    256
- Version 6.2.0
  - fix: size in xmemcpy in stack_double (PR #51)
  - Initialize return value
  - NEW API: add onig_set_capture_num_limit()
  - change MemNumType from short int to int
  - fix: [0-9-a] was not allowed as [0-9\-a]
  - fix: illegal capture after recursive call
  - fix: problem with optimization of \z
  - fix: .* optimization
  - Set a limit of parser recursion
  - fix; that warnings are not shown properly
  - fix: /[a-c#]+\W/ =~ "def#" fails when encoding is UTF-16/32
  - fix: /[\x{0}-X]/i doesn't match properly when UTF-16/32 is
    used.
- Version 6.1.3
  - fix: Syntax error: redirection unexpected (expecting word) #35
- Version 6.1.2
  - allow word bound, word begin and word end in look-behind.
  - add ONIG_OPTION_CHECK_VALIDITY_OF_STRING option.
  - fix use after free node.
  - fix memory leaks after parsing regexp error.
  - implement many of is_valid_mbc_string().
- Version 6.1.1
  - fix segfault /W.?{888}{888}{888}\x00/ (found by libfuzzer)
  - fix error unmatched close parenthesis for %{(.*?)} #23
- Version 6.1.0
  - add contributed/libfuzzer-onig.cpp  (thanks hannob)
  - update LTVERSION 4:0:0
  - NEW API: onigenc_is_valid_mbc_string().
  - add is_valid_mbc_string() member into OnigEncodingType.
  - fix out of bounds read.
  - disable USE_INVALID_CODE_SCHEME.
  - doc/RE improved.
  - add onig_scan() into doc/API.
  - fix bug: Out of bounds read in onig_strcpy() #17
  - fix bug: infinite loop of backreference and group.
  - fix out of bounds read in mbc_to_code() #16
  - doc/RE refinements.
  - add onig_scan() (NEW API)
  - reimplement match stack allocation for case too many repeat
  - and too many captures in regexp.
  - number of captures &lt;= 32767 for bytecode representation.
  - don't use int_map_backward for thread-safe.
  - fix case of enclosed option in look-behind.
  - fix ignore case in look-behind.
  - fix memory leak in onig_unicode_define_user_property()
  - declare variables at the top of scope.  (thanks nmaya)
- Version 6.0.0
  - add NEW API: onig_unicode_define_user_property()
  - update Unicode data to 8.0.0
  - change OnigCodePoint type to unsigned int.
  - add doc/UNICODE_PROPERTIES.
  - add error code ONIGERR_FAIL_TO_INITIALIZE.
  - add make_win64/32.bat.
  - fix bug of uninitialized regex_t value on error.
  - reimplement Unicode case folding.
  - update LTVERSION = 3.0.0
  - remove all THREAD_ macro.
  - add init member into OnigEncoding. (add onig_initialize())
  - remove state member of regex.
  - move source files into src/
  - rename configre.in to configure.ac.
  - fix memory leak. (thanks pigzang)
  - change mail address.</changelog>
  <changelog author="avindra@opensuse.org" date="1514030400">- Version 6.7.0
  - add ONIG_SYNTAX_ONIGURUMA (default syntax)
  - restructure StackType
  - implement subexp calls (?R), (?&amp;name), (?-n), (?+n) for Perl
    syntax
  - use string pool of gperf for Unicode Property lookup function
  - fix an empty greedy regex and a word boundary (.*\b) fails
  - remove a stack type STK_POS
  - add a declaration of onig_end()
  - fix compilation failure in out-of-source build
  - [new] hexadecimal codepoint \uHHHH
- Version 6.6.1
  - fix definition of \X to (?&gt;\O(?:\Y\O)*)
- Version 6.6.0
  - rename Absent clear to Range clear
  - [new] Extended Grapheme Cluster \X and boundary \y, \Y
  - fix: invalid index(ctype) value assigned to Unicode Block
    properties
  - --enable-crnl-as-line-terminator to be deprecated
  - [new] ASCII only mode options (?WDSP)
  - [new] ONIG_OPTION_XXXX_IS_ASCII  options
  - disable OP_CCLASS_NODE
  - [spec] Absent clear restore previous range value at backtrack
  - optimize for simple one char repetition in Absent expression
  - fix: invalid impl. for reluctant repetition in Absent expression
  - remove compile switch USE_NAMED_GROUP
  - Visual Studio 2005 compilation fixed
- cleanup with spec-cleaner</changelog>
  <changelog author="mrueckert@suse.de" date="1661515200">- Added d3e402928b6eb3327f8f7d59a9edfa622fec557b.patch: (boo#1157805 CVE-2019-19246)
  oniguruma: Heap-based buffer over-read in str_lower_case_match in regexec.c
- Added 6eb4aca6a7f2f60f473580576d86686ed6a6ebec.patch: (boo#1164569 CVE-2019-19204)
  oniguruma: heap-based buffer over-read in function fetch_interval_quantifier in regparse.c
- Added aa0188eaedc056dca8374ac03d0177429b495515.patch: (boo#1164550 CVE-2019-19203)
  oniguruma: heap-based buffer over-read in function gb18030_mbc_enc_len in file gb18030.c
- Added 4097828d7cc87589864fecf452f2cd46c5f37180.patch: (boo#1150130 CVE-2019-16163)
  oniguruma: stack Exhaustion in regcomp.c because of recursion in regparse.c.
- Added cbe9f8bd9cfc6c3c87a60fbae58fa1a85db59df0.patch: (boo#1177179 CVE-2020-26159)
  oniguruma: Buffer overflow in concat_opt_exact_str could result in DoS
- Added 0f7f61ed1b7b697e283e37bd2d731d0bd57adb55.patch: (boo#1142847 CVE-2019-13224)
  oniguruma: use-after-free in onig_new_deluxe() in regext.c</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1720008000">- Added oniguruma-6.8.2-CVE-2019-13225-fix.patch (boo#1141157 CVE-2019-13225)
  oniguruma: null-pointer dereference in match_at() in regexec.c</changelog>
</package>
<package pkgid="2688fd4080941ed52e40cdad4c2a670ef088cfafb1ccbd2bbab2e801832996fa" name="libopeniscsiusr0" arch="aarch64">
  <version epoch="0" ver="0.2.0" rel="150500.46.3.1"/>
  <changelog author="lduncan@suse.com" date="1635163200">- Fix the usr-merge changes (bsc#1192013). This includes catching
  all the places that /sbin was still used directly, as well as
  making the SPEC file build using /usr/sbin for openSUSE but
  still use /sbin for SLE, for now.</changelog>
  <changelog author="lduncan@suse.com" date="1636632000">- Merged latest upstream. Mostly cleanup, but includes a fix for
  iscsi-init.service when trying to write to the root volume too
  early (bsc#1192568), as well as an upstream fix for possible
  deadlock when dealing with sysfs.</changelog>
  <changelog author="lduncan@suse.com" date="1644840000">- Updated to latest upstream 2.1.6 as 2.1.6-suse, which contains
  bug fixes and cleanups. See the Changelog for more details.</changelog>
  <changelog author="lduncan@suse.com" date="1646481600">- Update to latest upstream, including test cleanup, minor
  bug fixes (cosmetic), and fixing iscsi-init (bsc#1195656).</changelog>
  <changelog author="lduncan@suse.com" date="1649246400">- Updated to latest upstream, including bug fixes and cleanups.
  Changes included:
  * add handling name/value pairs for firmware login (bsc#1196113),
    including man page update for same
  * Fix bug where some package parts were installed using
    DESTDIR twice
  * general build cleanup (in prep for removing DB files from
    /etc/iscsi some day soon)
  Also, now delivering a "package config" file for libopeniscsiusr.</changelog>
  <changelog author="lduncan@suse.com" date="1651838400">- Updated to latest upstream version, tagged 2.1.7. Changes
  included:
  * updated/fixed test script
  * updated build system
  * several bug fixes, including one for bsc#1199264</changelog>
  <changelog author="lduncan@suse.com" date="1652097600">- Update to latest upstream, including:
  * Added 'distclean' to Makefile targets
  * Ensure Makefile '.PHONY' targets set up correctly
  * fix an iscsid logout bug generating a false error
    and cleanup logout error messages</changelog>
  <changelog author="lduncan@suse.com" date="1652443200">- Set initiatorname in %post (at end of install), for cases
  where root is read-only at startup time (bsc#1198457)</changelog>
  <changelog author="lduncan@suse.com" date="1655467200">- For Tumbleweed, moved logrotate files from user-specific
  directory /etc/logrotate.d to vendor-specific
  /usr/etc/logrotate.d
  (for Stefan Schubert &lt;schubi@suse.com&gt;)</changelog>
  <changelog author="lduncan@suse.com" date="1657108800">- Modify SPEC file so systemd unit files are mode 644 (not 755)
  (bsc#1200570)</changelog>
  <changelog author="lduncan@suse.com" date="1664193600">- Update to upstream version 2.1.8, which includes some bug fixes,
  and adds the ability to build using meson. The SPEC file was
  updated to use meson.
  Also, some files have moved:
  * the "lock" file has moved from /etc/iscsi to /var/lock/iscsi
  * the "database files" have moved from /etc/iscsi to
    /var/lib/iscsi</changelog>
  <changelog author="lduncan@suse.com" date="1668600000">- Updated to latest upstream. Changes:
  * iscsid/iscsiuio: fix OOM adjustment (github issue #377)</changelog>
  <changelog author="lduncan@suse.com" date="1670414400">- Moving DB files from /etc/iscsi/* to /var/lib/iscsi/* for
  SLE-15-SP5 and forward, as is done in Tumbleweed.
- Added /etc/iscsi/README.DB-files-moved, and added SPEC file
  changes to support this, including a post-install script to
  move the DB files, only installed if DB files are moved.
- Renamed shared library from libopeniscsiusr0_2_0 to
  libopeniscsiusr0, to correctly match SONAME in library.</changelog>
  <changelog author="lduncan@suse.com" date="1671451200">- Updated SPEC file dependencies for libopeniscsiusr to avoid
  conflicting package installation.</changelog>
  <changelog author="lduncan@suse.com" date="1671624000">- Update iscsid.service so it starts iscsid.socket, if needed
  (bsc#1206132).</changelog>
  <changelog author="lduncan@suse.com" date="1677326400">- Build system: meson builds were ignoring optflags, and other
  passed in compiler options.</changelog>
  <changelog author="lduncan@suse.com" date="1681732800">- Remove "--strip" in SPEC file for meson build, so that
  debuginfo is generated. (from mwilck) (bsc#1210536)</changelog>
  <changelog author="lduncan@suse.com" date="1686830400">- Upgrade to upstream version 2.1.9 with tag "2.1.9-suse"
  (bsc#1210514), replacing open-iscsi-2.1.8-suse.tar.bz2 with
  open-iscsi-2.1.9-suse.tar.bz2, and resetting
  open-iscsi-SUSE-latest.diff.bz2. A summary from the ChangeLog
  file:
  * Fix discoveryd compiler warning
  * Sync iscsi_if.h with kernel
  * Handle old DB records correctly
  * Make IQN configuration for iscsi-iname
  * remove OFFLOAD_BOOT_SUPPORTED, which is always true
  * Use UUID for IPC, not "root"
  * do not support SHA3 for libressl
  * build meson cleanups, including changing default DB home
  * Updated README about NOPs
  * Remove "BindTo" in systemd service file
  * Some iscsiuio fixes, including licensing and memory leaks
    (bsc#1210514)
  * Small netlink fixes
  * Fix OOM adjustment
  * Some error recovery fixes
  * Some spelling fixes</changelog>
  <changelog author="lduncan@suse.com" date="1687262400">- Fix iscsiuio build version by updating iscsiuio/meson.build
  and RPM SPEC file (bsc#1210514), updating
  open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1698235200">- Updated to latest upstream, which includes (bsc#1210514):
  * several fixes to harden iscsiuio, including:
  - logging now uses syslog
  - shutdown now waits for helper threads to complete
  - netlink socket cleanup
  * some minor bug fixes, some helping builds on musl
  This updates iscsiuio version to 0.7.8.8.
  This updates open-iscsi-SUSE-latest.diff.bz2</changelog>
</package>
<package pkgid="a09e33bef6427dda0dcae758de3d197b4fc569188b91c691093f79d68a5ad345" name="libopeniscsiusr0" arch="s390x">
  <version epoch="0" ver="0.2.0" rel="150500.46.3.1"/>
  <changelog author="lduncan@suse.com" date="1635163200">- Fix the usr-merge changes (bsc#1192013). This includes catching
  all the places that /sbin was still used directly, as well as
  making the SPEC file build using /usr/sbin for openSUSE but
  still use /sbin for SLE, for now.</changelog>
  <changelog author="lduncan@suse.com" date="1636632000">- Merged latest upstream. Mostly cleanup, but includes a fix for
  iscsi-init.service when trying to write to the root volume too
  early (bsc#1192568), as well as an upstream fix for possible
  deadlock when dealing with sysfs.</changelog>
  <changelog author="lduncan@suse.com" date="1644840000">- Updated to latest upstream 2.1.6 as 2.1.6-suse, which contains
  bug fixes and cleanups. See the Changelog for more details.</changelog>
  <changelog author="lduncan@suse.com" date="1646481600">- Update to latest upstream, including test cleanup, minor
  bug fixes (cosmetic), and fixing iscsi-init (bsc#1195656).</changelog>
  <changelog author="lduncan@suse.com" date="1649246400">- Updated to latest upstream, including bug fixes and cleanups.
  Changes included:
  * add handling name/value pairs for firmware login (bsc#1196113),
    including man page update for same
  * Fix bug where some package parts were installed using
    DESTDIR twice
  * general build cleanup (in prep for removing DB files from
    /etc/iscsi some day soon)
  Also, now delivering a "package config" file for libopeniscsiusr.</changelog>
  <changelog author="lduncan@suse.com" date="1651838400">- Updated to latest upstream version, tagged 2.1.7. Changes
  included:
  * updated/fixed test script
  * updated build system
  * several bug fixes, including one for bsc#1199264</changelog>
  <changelog author="lduncan@suse.com" date="1652097600">- Update to latest upstream, including:
  * Added 'distclean' to Makefile targets
  * Ensure Makefile '.PHONY' targets set up correctly
  * fix an iscsid logout bug generating a false error
    and cleanup logout error messages</changelog>
  <changelog author="lduncan@suse.com" date="1652443200">- Set initiatorname in %post (at end of install), for cases
  where root is read-only at startup time (bsc#1198457)</changelog>
  <changelog author="lduncan@suse.com" date="1655467200">- For Tumbleweed, moved logrotate files from user-specific
  directory /etc/logrotate.d to vendor-specific
  /usr/etc/logrotate.d
  (for Stefan Schubert &lt;schubi@suse.com&gt;)</changelog>
  <changelog author="lduncan@suse.com" date="1657108800">- Modify SPEC file so systemd unit files are mode 644 (not 755)
  (bsc#1200570)</changelog>
  <changelog author="lduncan@suse.com" date="1664193600">- Update to upstream version 2.1.8, which includes some bug fixes,
  and adds the ability to build using meson. The SPEC file was
  updated to use meson.
  Also, some files have moved:
  * the "lock" file has moved from /etc/iscsi to /var/lock/iscsi
  * the "database files" have moved from /etc/iscsi to
    /var/lib/iscsi</changelog>
  <changelog author="lduncan@suse.com" date="1668600000">- Updated to latest upstream. Changes:
  * iscsid/iscsiuio: fix OOM adjustment (github issue #377)</changelog>
  <changelog author="lduncan@suse.com" date="1670414400">- Moving DB files from /etc/iscsi/* to /var/lib/iscsi/* for
  SLE-15-SP5 and forward, as is done in Tumbleweed.
- Added /etc/iscsi/README.DB-files-moved, and added SPEC file
  changes to support this, including a post-install script to
  move the DB files, only installed if DB files are moved.
- Renamed shared library from libopeniscsiusr0_2_0 to
  libopeniscsiusr0, to correctly match SONAME in library.</changelog>
  <changelog author="lduncan@suse.com" date="1671451200">- Updated SPEC file dependencies for libopeniscsiusr to avoid
  conflicting package installation.</changelog>
  <changelog author="lduncan@suse.com" date="1671624000">- Update iscsid.service so it starts iscsid.socket, if needed
  (bsc#1206132).</changelog>
  <changelog author="lduncan@suse.com" date="1677326400">- Build system: meson builds were ignoring optflags, and other
  passed in compiler options.</changelog>
  <changelog author="lduncan@suse.com" date="1681732800">- Remove "--strip" in SPEC file for meson build, so that
  debuginfo is generated. (from mwilck) (bsc#1210536)</changelog>
  <changelog author="lduncan@suse.com" date="1686830400">- Upgrade to upstream version 2.1.9 with tag "2.1.9-suse"
  (bsc#1210514), replacing open-iscsi-2.1.8-suse.tar.bz2 with
  open-iscsi-2.1.9-suse.tar.bz2, and resetting
  open-iscsi-SUSE-latest.diff.bz2. A summary from the ChangeLog
  file:
  * Fix discoveryd compiler warning
  * Sync iscsi_if.h with kernel
  * Handle old DB records correctly
  * Make IQN configuration for iscsi-iname
  * remove OFFLOAD_BOOT_SUPPORTED, which is always true
  * Use UUID for IPC, not "root"
  * do not support SHA3 for libressl
  * build meson cleanups, including changing default DB home
  * Updated README about NOPs
  * Remove "BindTo" in systemd service file
  * Some iscsiuio fixes, including licensing and memory leaks
    (bsc#1210514)
  * Small netlink fixes
  * Fix OOM adjustment
  * Some error recovery fixes
  * Some spelling fixes</changelog>
  <changelog author="lduncan@suse.com" date="1687262400">- Fix iscsiuio build version by updating iscsiuio/meson.build
  and RPM SPEC file (bsc#1210514), updating
  open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1698235200">- Updated to latest upstream, which includes (bsc#1210514):
  * several fixes to harden iscsiuio, including:
  - logging now uses syslog
  - shutdown now waits for helper threads to complete
  - netlink socket cleanup
  * some minor bug fixes, some helping builds on musl
  This updates iscsiuio version to 0.7.8.8.
  This updates open-iscsi-SUSE-latest.diff.bz2</changelog>
</package>
<package pkgid="b03c9337f626b74c4a1628e7c118038c6da99958930dbdc490e6645da60e7d5f" name="libopeniscsiusr0" arch="x86_64">
  <version epoch="0" ver="0.2.0" rel="150500.46.3.1"/>
  <changelog author="lduncan@suse.com" date="1635163200">- Fix the usr-merge changes (bsc#1192013). This includes catching
  all the places that /sbin was still used directly, as well as
  making the SPEC file build using /usr/sbin for openSUSE but
  still use /sbin for SLE, for now.</changelog>
  <changelog author="lduncan@suse.com" date="1636632000">- Merged latest upstream. Mostly cleanup, but includes a fix for
  iscsi-init.service when trying to write to the root volume too
  early (bsc#1192568), as well as an upstream fix for possible
  deadlock when dealing with sysfs.</changelog>
  <changelog author="lduncan@suse.com" date="1644840000">- Updated to latest upstream 2.1.6 as 2.1.6-suse, which contains
  bug fixes and cleanups. See the Changelog for more details.</changelog>
  <changelog author="lduncan@suse.com" date="1646481600">- Update to latest upstream, including test cleanup, minor
  bug fixes (cosmetic), and fixing iscsi-init (bsc#1195656).</changelog>
  <changelog author="lduncan@suse.com" date="1649246400">- Updated to latest upstream, including bug fixes and cleanups.
  Changes included:
  * add handling name/value pairs for firmware login (bsc#1196113),
    including man page update for same
  * Fix bug where some package parts were installed using
    DESTDIR twice
  * general build cleanup (in prep for removing DB files from
    /etc/iscsi some day soon)
  Also, now delivering a "package config" file for libopeniscsiusr.</changelog>
  <changelog author="lduncan@suse.com" date="1651838400">- Updated to latest upstream version, tagged 2.1.7. Changes
  included:
  * updated/fixed test script
  * updated build system
  * several bug fixes, including one for bsc#1199264</changelog>
  <changelog author="lduncan@suse.com" date="1652097600">- Update to latest upstream, including:
  * Added 'distclean' to Makefile targets
  * Ensure Makefile '.PHONY' targets set up correctly
  * fix an iscsid logout bug generating a false error
    and cleanup logout error messages</changelog>
  <changelog author="lduncan@suse.com" date="1652443200">- Set initiatorname in %post (at end of install), for cases
  where root is read-only at startup time (bsc#1198457)</changelog>
  <changelog author="lduncan@suse.com" date="1655467200">- For Tumbleweed, moved logrotate files from user-specific
  directory /etc/logrotate.d to vendor-specific
  /usr/etc/logrotate.d
  (for Stefan Schubert &lt;schubi@suse.com&gt;)</changelog>
  <changelog author="lduncan@suse.com" date="1657108800">- Modify SPEC file so systemd unit files are mode 644 (not 755)
  (bsc#1200570)</changelog>
  <changelog author="lduncan@suse.com" date="1664193600">- Update to upstream version 2.1.8, which includes some bug fixes,
  and adds the ability to build using meson. The SPEC file was
  updated to use meson.
  Also, some files have moved:
  * the "lock" file has moved from /etc/iscsi to /var/lock/iscsi
  * the "database files" have moved from /etc/iscsi to
    /var/lib/iscsi</changelog>
  <changelog author="lduncan@suse.com" date="1668600000">- Updated to latest upstream. Changes:
  * iscsid/iscsiuio: fix OOM adjustment (github issue #377)</changelog>
  <changelog author="lduncan@suse.com" date="1670414400">- Moving DB files from /etc/iscsi/* to /var/lib/iscsi/* for
  SLE-15-SP5 and forward, as is done in Tumbleweed.
- Added /etc/iscsi/README.DB-files-moved, and added SPEC file
  changes to support this, including a post-install script to
  move the DB files, only installed if DB files are moved.
- Renamed shared library from libopeniscsiusr0_2_0 to
  libopeniscsiusr0, to correctly match SONAME in library.</changelog>
  <changelog author="lduncan@suse.com" date="1671451200">- Updated SPEC file dependencies for libopeniscsiusr to avoid
  conflicting package installation.</changelog>
  <changelog author="lduncan@suse.com" date="1671624000">- Update iscsid.service so it starts iscsid.socket, if needed
  (bsc#1206132).</changelog>
  <changelog author="lduncan@suse.com" date="1677326400">- Build system: meson builds were ignoring optflags, and other
  passed in compiler options.</changelog>
  <changelog author="lduncan@suse.com" date="1681732800">- Remove "--strip" in SPEC file for meson build, so that
  debuginfo is generated. (from mwilck) (bsc#1210536)</changelog>
  <changelog author="lduncan@suse.com" date="1686830400">- Upgrade to upstream version 2.1.9 with tag "2.1.9-suse"
  (bsc#1210514), replacing open-iscsi-2.1.8-suse.tar.bz2 with
  open-iscsi-2.1.9-suse.tar.bz2, and resetting
  open-iscsi-SUSE-latest.diff.bz2. A summary from the ChangeLog
  file:
  * Fix discoveryd compiler warning
  * Sync iscsi_if.h with kernel
  * Handle old DB records correctly
  * Make IQN configuration for iscsi-iname
  * remove OFFLOAD_BOOT_SUPPORTED, which is always true
  * Use UUID for IPC, not "root"
  * do not support SHA3 for libressl
  * build meson cleanups, including changing default DB home
  * Updated README about NOPs
  * Remove "BindTo" in systemd service file
  * Some iscsiuio fixes, including licensing and memory leaks
    (bsc#1210514)
  * Small netlink fixes
  * Fix OOM adjustment
  * Some error recovery fixes
  * Some spelling fixes</changelog>
  <changelog author="lduncan@suse.com" date="1687262400">- Fix iscsiuio build version by updating iscsiuio/meson.build
  and RPM SPEC file (bsc#1210514), updating
  open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1698235200">- Updated to latest upstream, which includes (bsc#1210514):
  * several fixes to harden iscsiuio, including:
  - logging now uses syslog
  - shutdown now waits for helper threads to complete
  - netlink socket cleanup
  * some minor bug fixes, some helping builds on musl
  This updates iscsiuio version to 0.7.8.8.
  This updates open-iscsi-SUSE-latest.diff.bz2</changelog>
</package>
<package pkgid="9baa07daa9aeaf8ce3d5756c450aa6a8b745e94f6601e33e20c71739f0c236f5" name="libopenssl-1_1-devel" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.19.1"/>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
</package>
<package pkgid="d30b9b49185cc3a345e2fe79df465d94eac044df480c9793cf09f8665598aac1" name="libopenssl-1_1-devel" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150500.17.19.1"/>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
</package>
<package pkgid="0e4f535af47d0bb96b37002f7c72d4ff85f194b28866a1a790b79b0f8281484d" name="libopenssl-1_1-devel" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.19.1"/>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
</package>
<package pkgid="b07386189b1734bee02676a8df448e9584956a112ca8de2f07d624ca926b8f19" name="libopenssl-1_1-devel" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.22.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
</package>
<package pkgid="d63e313d2d393334253341e756c47f2afa681876d78c5abe170990f59b18caf4" name="libopenssl-1_1-devel" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150500.17.22.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
</package>
<package pkgid="8652ad8508b9da2cbc11effb690462257d74877c261925cfb6d85cc93c20663a" name="libopenssl-1_1-devel" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.22.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
</package>
<package pkgid="7454c34e37cffb500a781686f2aae7016394e622d66c6ae05d0855e50bd04114" name="libopenssl-1_1-devel" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.25.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
</package>
<package pkgid="cc50b48c13635c90f54f654ede710bce05bc245b498e56ef498ec37d843e850f" name="libopenssl-1_1-devel" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150500.17.25.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
</package>
<package pkgid="5eb01f90933380a3fb32d57ce4f6c704a972a774dda638cda7350e898e642062" name="libopenssl-1_1-devel" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.25.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
</package>
<package pkgid="c84b86e11a8521f3cab3c66e68004810cfc453a9775e3e6d50d44b58b677c3a7" name="libopenssl-1_1-devel" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.28.2"/>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1714996800">- Security fix: [bsc#1222548, CVE-2024-2511]
  * Fix unconstrained session cache growth in TLSv1.3
  * Add openssl-CVE-2024-2511.patch</changelog>
</package>
<package pkgid="7908fc25a6fc0bb13ddb2473da0a883f6960c4a12e973a613cf92458e394a971" name="libopenssl-1_1-devel" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150500.17.28.2"/>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1714996800">- Security fix: [bsc#1222548, CVE-2024-2511]
  * Fix unconstrained session cache growth in TLSv1.3
  * Add openssl-CVE-2024-2511.patch</changelog>
</package>
<package pkgid="2e401b72fad1e6146282f3354ac9d9746e5b99e2fae8921ad6ebf310af679206" name="libopenssl-1_1-devel" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.28.2"/>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1714996800">- Security fix: [bsc#1222548, CVE-2024-2511]
  * Fix unconstrained session cache growth in TLSv1.3
  * Add openssl-CVE-2024-2511.patch</changelog>
</package>
<package pkgid="51f79f8c21b744dee8f12c5b0281ca6ffbd44018a5edd55038c2b361c9aaf708" name="libopenssl-1_1-devel" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.31.1"/>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1714996800">- Security fix: [bsc#1222548, CVE-2024-2511]
  * Fix unconstrained session cache growth in TLSv1.3
  * Add openssl-CVE-2024-2511.patch</changelog>
  <changelog author="psimons@suse.com" date="1717675200">- Apply "openssl-CVE-2024-4741.patch" to fix a use-after-free
  security vulnerability. Calling the function SSL_free_buffers()
  potentially caused memory to be accessed that was previously
  freed in some situations and a malicious attacker could attempt
  to engineer a stituation where this occurs to facilitate a
  denial-of-service attack. [CVE-2024-4741, bsc#1225551]</changelog>
</package>
<package pkgid="c7b6924284e32f4ef26fc28813ef48092e15d7f4756881373aa7b5d89deed42b" name="libopenssl-1_1-devel" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150500.17.31.1"/>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1714996800">- Security fix: [bsc#1222548, CVE-2024-2511]
  * Fix unconstrained session cache growth in TLSv1.3
  * Add openssl-CVE-2024-2511.patch</changelog>
  <changelog author="psimons@suse.com" date="1717675200">- Apply "openssl-CVE-2024-4741.patch" to fix a use-after-free
  security vulnerability. Calling the function SSL_free_buffers()
  potentially caused memory to be accessed that was previously
  freed in some situations and a malicious attacker could attempt
  to engineer a stituation where this occurs to facilitate a
  denial-of-service attack. [CVE-2024-4741, bsc#1225551]</changelog>
</package>
<package pkgid="a55f39087011e2ae37be4545eee93e6079c995b832aa6a603b00bdff47595bf2" name="libopenssl-1_1-devel" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.31.1"/>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1714996800">- Security fix: [bsc#1222548, CVE-2024-2511]
  * Fix unconstrained session cache growth in TLSv1.3
  * Add openssl-CVE-2024-2511.patch</changelog>
  <changelog author="psimons@suse.com" date="1717675200">- Apply "openssl-CVE-2024-4741.patch" to fix a use-after-free
  security vulnerability. Calling the function SSL_free_buffers()
  potentially caused memory to be accessed that was previously
  freed in some situations and a malicious attacker could attempt
  to engineer a stituation where this occurs to facilitate a
  denial-of-service attack. [CVE-2024-4741, bsc#1225551]</changelog>
</package>
<package pkgid="49b625509c1f1c312093f5aa7b89ba6c64acb78d1664f51e718e7c86e640c4ca" name="libopenssl-1_1-devel" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.34.1"/>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1714996800">- Security fix: [bsc#1222548, CVE-2024-2511]
  * Fix unconstrained session cache growth in TLSv1.3
  * Add openssl-CVE-2024-2511.patch</changelog>
  <changelog author="psimons@suse.com" date="1717675200">- Apply "openssl-CVE-2024-4741.patch" to fix a use-after-free
  security vulnerability. Calling the function SSL_free_buffers()
  potentially caused memory to be accessed that was previously
  freed in some situations and a malicious attacker could attempt
  to engineer a stituation where this occurs to facilitate a
  denial-of-service attack. [CVE-2024-4741, bsc#1225551]</changelog>
  <changelog author="pmonreal@suse.com" date="1721649600">- Security fix: [bsc#1227138, CVE-2024-5535]
  * SSL_select_next_proto buffer overread
  * Add openssl-CVE-2024-5535.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1721649601">- Build with no-afalgeng [bsc#1226463]</changelog>
</package>
<package pkgid="9e0a20e303f65cdadad1a51bd08e338c900864e08a14c261b5c6bf0d353adea3" name="libopenssl-1_1-devel" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150500.17.34.1"/>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1714996800">- Security fix: [bsc#1222548, CVE-2024-2511]
  * Fix unconstrained session cache growth in TLSv1.3
  * Add openssl-CVE-2024-2511.patch</changelog>
  <changelog author="psimons@suse.com" date="1717675200">- Apply "openssl-CVE-2024-4741.patch" to fix a use-after-free
  security vulnerability. Calling the function SSL_free_buffers()
  potentially caused memory to be accessed that was previously
  freed in some situations and a malicious attacker could attempt
  to engineer a stituation where this occurs to facilitate a
  denial-of-service attack. [CVE-2024-4741, bsc#1225551]</changelog>
  <changelog author="pmonreal@suse.com" date="1721649600">- Security fix: [bsc#1227138, CVE-2024-5535]
  * SSL_select_next_proto buffer overread
  * Add openssl-CVE-2024-5535.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1721649601">- Build with no-afalgeng [bsc#1226463]</changelog>
</package>
<package pkgid="6187658f9550c309491072a8f780a6dcfe0f7debc2f7f417b973c8526d8df303" name="libopenssl-1_1-devel" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.34.1"/>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1714996800">- Security fix: [bsc#1222548, CVE-2024-2511]
  * Fix unconstrained session cache growth in TLSv1.3
  * Add openssl-CVE-2024-2511.patch</changelog>
  <changelog author="psimons@suse.com" date="1717675200">- Apply "openssl-CVE-2024-4741.patch" to fix a use-after-free
  security vulnerability. Calling the function SSL_free_buffers()
  potentially caused memory to be accessed that was previously
  freed in some situations and a malicious attacker could attempt
  to engineer a stituation where this occurs to facilitate a
  denial-of-service attack. [CVE-2024-4741, bsc#1225551]</changelog>
  <changelog author="pmonreal@suse.com" date="1721649600">- Security fix: [bsc#1227138, CVE-2024-5535]
  * SSL_select_next_proto buffer overread
  * Add openssl-CVE-2024-5535.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1721649601">- Build with no-afalgeng [bsc#1226463]</changelog>
</package>
<package pkgid="18da95ac39899dc7b6e7f6ab0f3b7ccde3a7cfb8d4b4570c29ad79e4dd52d443" name="libopenssl1_1" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.19.1"/>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
</package>
<package pkgid="b61b6361df1fccf626007dbc04173b32ee7c0ec4dd7f23d9512e6aa5ddc4c7be" name="libopenssl1_1" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150500.17.19.1"/>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
</package>
<package pkgid="b81fa14d871c6ef141d0ee0641c4a273c8d8e3cefee61a69cc905df9592c598f" name="libopenssl1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.19.1"/>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
</package>
<package pkgid="41dea6e14da80488e485b36195dd0771d1f980083a8db3bbc0c3a1b564656d64" name="libopenssl1_1" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.22.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
</package>
<package pkgid="6dd3fee276bd70820d8f64a7213435a868746a006b0382e5a2203a2c0c9716e7" name="libopenssl1_1" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150500.17.22.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
</package>
<package pkgid="5c4bbf68cf0f771887c8ac86bf5e5bbc574ce12adc7c8379ecefb7246eb01908" name="libopenssl1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.22.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
</package>
<package pkgid="0141ef16dbf3aca3c6ef82cbc08553939debb5f3450e506a7f49931783e9176f" name="libopenssl1_1" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.25.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
</package>
<package pkgid="abac643f9db7753d42de4d22a6830b223633663aa4dab274d791dc810b9ec9e4" name="libopenssl1_1" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150500.17.25.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
</package>
<package pkgid="86165ecafee8b62a441c526d1cbe514f30e3c1883ca16d9aadaee51da2cff844" name="libopenssl1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.25.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
</package>
<package pkgid="6bb9097915a0b8ab1c7c44b44138ceb304fe70e8937338cfad641cc8a3303bfe" name="libopenssl1_1" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.28.2"/>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1714996800">- Security fix: [bsc#1222548, CVE-2024-2511]
  * Fix unconstrained session cache growth in TLSv1.3
  * Add openssl-CVE-2024-2511.patch</changelog>
</package>
<package pkgid="976d1c0048b56580ea8c6532fe371a4688ced58c356147fffbfd1feb1d4216a4" name="libopenssl1_1" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150500.17.28.2"/>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1714996800">- Security fix: [bsc#1222548, CVE-2024-2511]
  * Fix unconstrained session cache growth in TLSv1.3
  * Add openssl-CVE-2024-2511.patch</changelog>
</package>
<package pkgid="679a98704ff3e8ffc87b562c50a82ec500aa205771929d1f49e9be02756507e0" name="libopenssl1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.28.2"/>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1714996800">- Security fix: [bsc#1222548, CVE-2024-2511]
  * Fix unconstrained session cache growth in TLSv1.3
  * Add openssl-CVE-2024-2511.patch</changelog>
</package>
<package pkgid="6bcbbb8c9f26f30c4118f9719938399e0b15d5f8b0375eb250e073c7aa01b1fb" name="libopenssl1_1" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.31.1"/>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1714996800">- Security fix: [bsc#1222548, CVE-2024-2511]
  * Fix unconstrained session cache growth in TLSv1.3
  * Add openssl-CVE-2024-2511.patch</changelog>
  <changelog author="psimons@suse.com" date="1717675200">- Apply "openssl-CVE-2024-4741.patch" to fix a use-after-free
  security vulnerability. Calling the function SSL_free_buffers()
  potentially caused memory to be accessed that was previously
  freed in some situations and a malicious attacker could attempt
  to engineer a stituation where this occurs to facilitate a
  denial-of-service attack. [CVE-2024-4741, bsc#1225551]</changelog>
</package>
<package pkgid="fd6a5ac223e2cb35b72df3f297f5f65bbf4af9b1b8c7d1d54438449b3bba5abf" name="libopenssl1_1" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150500.17.31.1"/>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1714996800">- Security fix: [bsc#1222548, CVE-2024-2511]
  * Fix unconstrained session cache growth in TLSv1.3
  * Add openssl-CVE-2024-2511.patch</changelog>
  <changelog author="psimons@suse.com" date="1717675200">- Apply "openssl-CVE-2024-4741.patch" to fix a use-after-free
  security vulnerability. Calling the function SSL_free_buffers()
  potentially caused memory to be accessed that was previously
  freed in some situations and a malicious attacker could attempt
  to engineer a stituation where this occurs to facilitate a
  denial-of-service attack. [CVE-2024-4741, bsc#1225551]</changelog>
</package>
<package pkgid="c92568c003ae1b3c3abf8dbe6c02ad23ab3c8da9779f78f4f9ed58c5ec86a8a0" name="libopenssl1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.31.1"/>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1714996800">- Security fix: [bsc#1222548, CVE-2024-2511]
  * Fix unconstrained session cache growth in TLSv1.3
  * Add openssl-CVE-2024-2511.patch</changelog>
  <changelog author="psimons@suse.com" date="1717675200">- Apply "openssl-CVE-2024-4741.patch" to fix a use-after-free
  security vulnerability. Calling the function SSL_free_buffers()
  potentially caused memory to be accessed that was previously
  freed in some situations and a malicious attacker could attempt
  to engineer a stituation where this occurs to facilitate a
  denial-of-service attack. [CVE-2024-4741, bsc#1225551]</changelog>
</package>
<package pkgid="da4d543ac5e5ed5a4aac0b7667775fab85d1c543f0ad6cff25d78f1d72250a42" name="libopenssl1_1" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.34.1"/>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1714996800">- Security fix: [bsc#1222548, CVE-2024-2511]
  * Fix unconstrained session cache growth in TLSv1.3
  * Add openssl-CVE-2024-2511.patch</changelog>
  <changelog author="psimons@suse.com" date="1717675200">- Apply "openssl-CVE-2024-4741.patch" to fix a use-after-free
  security vulnerability. Calling the function SSL_free_buffers()
  potentially caused memory to be accessed that was previously
  freed in some situations and a malicious attacker could attempt
  to engineer a stituation where this occurs to facilitate a
  denial-of-service attack. [CVE-2024-4741, bsc#1225551]</changelog>
  <changelog author="pmonreal@suse.com" date="1721649600">- Security fix: [bsc#1227138, CVE-2024-5535]
  * SSL_select_next_proto buffer overread
  * Add openssl-CVE-2024-5535.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1721649601">- Build with no-afalgeng [bsc#1226463]</changelog>
</package>
<package pkgid="f13f07fab9ef77c06cf824ed4f24181e20e25c05282fab99e7ea3113cedf6f32" name="libopenssl1_1" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150500.17.34.1"/>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1714996800">- Security fix: [bsc#1222548, CVE-2024-2511]
  * Fix unconstrained session cache growth in TLSv1.3
  * Add openssl-CVE-2024-2511.patch</changelog>
  <changelog author="psimons@suse.com" date="1717675200">- Apply "openssl-CVE-2024-4741.patch" to fix a use-after-free
  security vulnerability. Calling the function SSL_free_buffers()
  potentially caused memory to be accessed that was previously
  freed in some situations and a malicious attacker could attempt
  to engineer a stituation where this occurs to facilitate a
  denial-of-service attack. [CVE-2024-4741, bsc#1225551]</changelog>
  <changelog author="pmonreal@suse.com" date="1721649600">- Security fix: [bsc#1227138, CVE-2024-5535]
  * SSL_select_next_proto buffer overread
  * Add openssl-CVE-2024-5535.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1721649601">- Build with no-afalgeng [bsc#1226463]</changelog>
</package>
<package pkgid="c1e758c9890990ec587b9d24d00ab9cd1ad1c920b15925c17ac5e5a3ece62934" name="libopenssl1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.34.1"/>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1714996800">- Security fix: [bsc#1222548, CVE-2024-2511]
  * Fix unconstrained session cache growth in TLSv1.3
  * Add openssl-CVE-2024-2511.patch</changelog>
  <changelog author="psimons@suse.com" date="1717675200">- Apply "openssl-CVE-2024-4741.patch" to fix a use-after-free
  security vulnerability. Calling the function SSL_free_buffers()
  potentially caused memory to be accessed that was previously
  freed in some situations and a malicious attacker could attempt
  to engineer a stituation where this occurs to facilitate a
  denial-of-service attack. [CVE-2024-4741, bsc#1225551]</changelog>
  <changelog author="pmonreal@suse.com" date="1721649600">- Security fix: [bsc#1227138, CVE-2024-5535]
  * SSL_select_next_proto buffer overread
  * Add openssl-CVE-2024-5535.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1721649601">- Build with no-afalgeng [bsc#1226463]</changelog>
</package>
<package pkgid="fc4285fa6c0d66eb9990dc3ff47aa14ee9c44d7f2cb10d7cab729671ef13c772" name="libopenssl1_1-hmac" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.19.1"/>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
</package>
<package pkgid="1448e691aea58350d356489c54421036785a8bae3787ed230ea8dbeaa950a119" name="libopenssl1_1-hmac" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150500.17.19.1"/>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
</package>
<package pkgid="4c0dfa75d0cc0fa7d9acba10a18f875dd8b06b58d06473c36cadd10ca285a508" name="libopenssl1_1-hmac" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.19.1"/>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
</package>
<package pkgid="da6b9de5760848c3cbd1c86f82579ae842d757d6141b3f20bd0bc491d93a0238" name="libopenssl1_1-hmac" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.22.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
</package>
<package pkgid="371d7ad2a528c3d032a727e790be87389ae291c0ffef827dcbd58880bd29fe9c" name="libopenssl1_1-hmac" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150500.17.22.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
</package>
<package pkgid="1215d46c741e39d0e2ea5226b8a232a37347b08aabd595f858e06183c71bafa9" name="libopenssl1_1-hmac" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.22.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
</package>
<package pkgid="80cf27879cd845cfbc9be2e15fb16dd872cc05d42700574159a09c523aa47e46" name="libopenssl1_1-hmac" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.25.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
</package>
<package pkgid="2b1b92183d6d246a924ce39684dc5779f1d0ba447c5411f20026b159dd8fa847" name="libopenssl1_1-hmac" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150500.17.25.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
</package>
<package pkgid="6be80464b3038687c5a25314ca2b96a54a2edc541e7c8733bfb44c99d9613079" name="libopenssl1_1-hmac" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.25.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
</package>
<package pkgid="d1a3f00798eae128f455128016d6c991ae684670b0646507c9850855a5bf150a" name="libopenssl1_1-hmac" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.28.2"/>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1714996800">- Security fix: [bsc#1222548, CVE-2024-2511]
  * Fix unconstrained session cache growth in TLSv1.3
  * Add openssl-CVE-2024-2511.patch</changelog>
</package>
<package pkgid="8bf12f8a2434c0d64cb1c54f6e15de46a650b7be3e3e0453f62977bdadfc9e6d" name="libopenssl1_1-hmac" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150500.17.28.2"/>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1714996800">- Security fix: [bsc#1222548, CVE-2024-2511]
  * Fix unconstrained session cache growth in TLSv1.3
  * Add openssl-CVE-2024-2511.patch</changelog>
</package>
<package pkgid="0daa096ac2844a76689cfb3c52a3ab97459f53f969eb98eb4051bdf7e762db14" name="libopenssl1_1-hmac" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.28.2"/>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1714996800">- Security fix: [bsc#1222548, CVE-2024-2511]
  * Fix unconstrained session cache growth in TLSv1.3
  * Add openssl-CVE-2024-2511.patch</changelog>
</package>
<package pkgid="5e483afcd1d2655953b405821e2f95ec94fc359b4d4dab49c78e0769b395fba2" name="libopenssl1_1-hmac" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.31.1"/>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1714996800">- Security fix: [bsc#1222548, CVE-2024-2511]
  * Fix unconstrained session cache growth in TLSv1.3
  * Add openssl-CVE-2024-2511.patch</changelog>
  <changelog author="psimons@suse.com" date="1717675200">- Apply "openssl-CVE-2024-4741.patch" to fix a use-after-free
  security vulnerability. Calling the function SSL_free_buffers()
  potentially caused memory to be accessed that was previously
  freed in some situations and a malicious attacker could attempt
  to engineer a stituation where this occurs to facilitate a
  denial-of-service attack. [CVE-2024-4741, bsc#1225551]</changelog>
</package>
<package pkgid="90639fdffc780847ee5731fe912f0d22f4686c8834750a7db6dd2c651e671354" name="libopenssl1_1-hmac" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150500.17.31.1"/>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1714996800">- Security fix: [bsc#1222548, CVE-2024-2511]
  * Fix unconstrained session cache growth in TLSv1.3
  * Add openssl-CVE-2024-2511.patch</changelog>
  <changelog author="psimons@suse.com" date="1717675200">- Apply "openssl-CVE-2024-4741.patch" to fix a use-after-free
  security vulnerability. Calling the function SSL_free_buffers()
  potentially caused memory to be accessed that was previously
  freed in some situations and a malicious attacker could attempt
  to engineer a stituation where this occurs to facilitate a
  denial-of-service attack. [CVE-2024-4741, bsc#1225551]</changelog>
</package>
<package pkgid="767ccbcdb7842ad266558b5bc28b6eb196586c02f944fdb7987982e6f4e7145f" name="libopenssl1_1-hmac" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.31.1"/>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1714996800">- Security fix: [bsc#1222548, CVE-2024-2511]
  * Fix unconstrained session cache growth in TLSv1.3
  * Add openssl-CVE-2024-2511.patch</changelog>
  <changelog author="psimons@suse.com" date="1717675200">- Apply "openssl-CVE-2024-4741.patch" to fix a use-after-free
  security vulnerability. Calling the function SSL_free_buffers()
  potentially caused memory to be accessed that was previously
  freed in some situations and a malicious attacker could attempt
  to engineer a stituation where this occurs to facilitate a
  denial-of-service attack. [CVE-2024-4741, bsc#1225551]</changelog>
</package>
<package pkgid="f7f59f725779292f45976917b5ae4e2eb3141d287a5e4baebcce703a43586b2b" name="libopenssl1_1-hmac" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.34.1"/>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1714996800">- Security fix: [bsc#1222548, CVE-2024-2511]
  * Fix unconstrained session cache growth in TLSv1.3
  * Add openssl-CVE-2024-2511.patch</changelog>
  <changelog author="psimons@suse.com" date="1717675200">- Apply "openssl-CVE-2024-4741.patch" to fix a use-after-free
  security vulnerability. Calling the function SSL_free_buffers()
  potentially caused memory to be accessed that was previously
  freed in some situations and a malicious attacker could attempt
  to engineer a stituation where this occurs to facilitate a
  denial-of-service attack. [CVE-2024-4741, bsc#1225551]</changelog>
  <changelog author="pmonreal@suse.com" date="1721649600">- Security fix: [bsc#1227138, CVE-2024-5535]
  * SSL_select_next_proto buffer overread
  * Add openssl-CVE-2024-5535.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1721649601">- Build with no-afalgeng [bsc#1226463]</changelog>
</package>
<package pkgid="ba03c7d33fac66a2673f803a84b05e6fade8d7f8f85de8a8106a0096c9898e18" name="libopenssl1_1-hmac" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150500.17.34.1"/>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1714996800">- Security fix: [bsc#1222548, CVE-2024-2511]
  * Fix unconstrained session cache growth in TLSv1.3
  * Add openssl-CVE-2024-2511.patch</changelog>
  <changelog author="psimons@suse.com" date="1717675200">- Apply "openssl-CVE-2024-4741.patch" to fix a use-after-free
  security vulnerability. Calling the function SSL_free_buffers()
  potentially caused memory to be accessed that was previously
  freed in some situations and a malicious attacker could attempt
  to engineer a stituation where this occurs to facilitate a
  denial-of-service attack. [CVE-2024-4741, bsc#1225551]</changelog>
  <changelog author="pmonreal@suse.com" date="1721649600">- Security fix: [bsc#1227138, CVE-2024-5535]
  * SSL_select_next_proto buffer overread
  * Add openssl-CVE-2024-5535.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1721649601">- Build with no-afalgeng [bsc#1226463]</changelog>
</package>
<package pkgid="958666deba720678d5089ee786bd03c83564ecc903cf063d845142a4ab9741be" name="libopenssl1_1-hmac" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.34.1"/>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1714996800">- Security fix: [bsc#1222548, CVE-2024-2511]
  * Fix unconstrained session cache growth in TLSv1.3
  * Add openssl-CVE-2024-2511.patch</changelog>
  <changelog author="psimons@suse.com" date="1717675200">- Apply "openssl-CVE-2024-4741.patch" to fix a use-after-free
  security vulnerability. Calling the function SSL_free_buffers()
  potentially caused memory to be accessed that was previously
  freed in some situations and a malicious attacker could attempt
  to engineer a stituation where this occurs to facilitate a
  denial-of-service attack. [CVE-2024-4741, bsc#1225551]</changelog>
  <changelog author="pmonreal@suse.com" date="1721649600">- Security fix: [bsc#1227138, CVE-2024-5535]
  * SSL_select_next_proto buffer overread
  * Add openssl-CVE-2024-5535.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1721649601">- Build with no-afalgeng [bsc#1226463]</changelog>
</package>
<package pkgid="d18734550c31c781f56e4112f887b5c5cbfca6e688fded1d119f5daafc83009b" name="liborc-0_4-0" arch="aarch64">
  <version epoch="0" ver="0.4.28" rel="150000.3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1419595200">- Update to version 0.4.23:
  + Various improvements to the NEON backend to bring it closer to
    the SSE backend.
  + Add support for setting a custom backup function.
  + Preserve NEON/VFP registers across subroutines.
  + Fix 64 bit parameter loading on big-endian systems.
  + Improved implementations for various opcodes.
  + Various improvements and fixes to constants handling.
  + Avoid some undefined operations on signed integers.
  + Prefer user specific directories over global ones for
    intermediate files to prevent name collisions.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425038400">- disable make check for ppc64le archi
  would need changes in orcprogram-altivec.c
  and define of HAVE_POWERPC</changelog>
  <changelog author="zaitor@opensuse.org" date="1436443200">- Update to version 0.4.24:
  + Only reuse constants of the same size and value.
  + Fix reading of .orc files with Windows line endings on Windows.
  + Fix out of bounds array access in the tests.
  + Remove duplicate code path in orcc.
  + Put a limit to the memcpy test.
  + Fix mmap leak on error path.</changelog>
  <changelog author="dmueller@suse.com" date="1443441600">- disable testsuite on aarch64</changelog>
  <changelog author="zaitor@opensuse.org" date="1457179200">- Update to version 0.4.25:
  + compiler: also prefer the backup function when no target,
    instead of trying to use emulation which is usually slower.
  + executor: fix load of parameters smaller than 64 bits, fixing
    crashes on ldresnearb and friends in emulated code.
  + test-limits: improve test without target.
  + Only check for Android's liblog on Android targets, so we don't
    accidentally pick up another liblog that may exist elsewhere.
  + Don't require libtool for uninstalled setups (-uninstalled
    pkg-config file).
  + Make -Bsymbolic check in configure work with clang.
  + Coverity code analyser fixes.
  + docs: update generated opcode tables.
  + Add orc_version_string() function and make orcc check the
    liborc that is being picked up to make sure the right lib is
    being used.</changelog>
  <changelog author="zaitor@opensuse.org" date="1472644800">- Update to version 0.4.26:
  + Use 64 bit arithmetic to increment the stride if needed.
  + Fix generation of ModR/M / SIB bytes for the EBP, R12, R13
    registers on X86/X86-64.
  + Fix test_parse unit test if no executable backend is available.
  + Add orc-test path to the -uninstalled .pc file.
  + Fix compiler warnings in the tests on OS X.
- Add pkgconfig(glib-2.0) BuildRequires, the build looks for it.
- Remove obsolete bconds, they were only there for now obsolete
  versions of openSUSE.
- Drop explicit xz BuildRequires: No longer needed.
- Enable testsuite for all arches again.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486900800">- Disable make check for all arches except x86_64 again.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500292800">- Update to version 0.4.27:
  + sse: preserve non volatile sse registers, needed for MSVC.
  + x86: don't hard-code register size to 0 in orc_x86_emit_*()
    funcs.
  + Fix incorrect asm generation on 64-bit Windows with MSVC.
  + Add support for building using the Meson build system.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504526400">- Switch to the meson build system, which knows how to cope with
  GTK 1.26+:
  + Use the tarball published on github (the automake bootstrapped
    one does not contain the meson build system).
  + Add meson BuildRequires and switch configure/make/make_install
    macros to the relevant meson/meson_build/meson_install
    variants.</changelog>
  <changelog author="zaitor@opensuse.org" date="1511179200">- Update to version 0.4.28:
  + Numerous undefined behaviour fixes.
  + Ability to disable tests.
  + Fix meson dist behaviour.</changelog>
  <changelog author="idonmez@suse.com" date="1555502400">- Add relax-tests.patch to increase test timeouts to 2 minutes,
  also limit the max value for memcpy_speed.c test bsc#1130085</changelog>
  <changelog author="alarrosa@suse.com" date="1721649600">- Backport patch from upstream to fix a stack-based buffer overflow
  in the Orc compiler when formatting error messages (bsc#1228184,
  CVE-2024-40897):
  * 0001-Use-vasprintf-if-available-for-error-messages-and.patch
  * 0002-Fix-build.patch</changelog>
</package>
<package pkgid="269345b30aadd2a3ffce1d7e8d364ae6a2ab8606eb119affe6efa3341d11f097" name="liborc-0_4-0" arch="s390x">
  <version epoch="0" ver="0.4.28" rel="150000.3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1419595200">- Update to version 0.4.23:
  + Various improvements to the NEON backend to bring it closer to
    the SSE backend.
  + Add support for setting a custom backup function.
  + Preserve NEON/VFP registers across subroutines.
  + Fix 64 bit parameter loading on big-endian systems.
  + Improved implementations for various opcodes.
  + Various improvements and fixes to constants handling.
  + Avoid some undefined operations on signed integers.
  + Prefer user specific directories over global ones for
    intermediate files to prevent name collisions.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425038400">- disable make check for ppc64le archi
  would need changes in orcprogram-altivec.c
  and define of HAVE_POWERPC</changelog>
  <changelog author="zaitor@opensuse.org" date="1436443200">- Update to version 0.4.24:
  + Only reuse constants of the same size and value.
  + Fix reading of .orc files with Windows line endings on Windows.
  + Fix out of bounds array access in the tests.
  + Remove duplicate code path in orcc.
  + Put a limit to the memcpy test.
  + Fix mmap leak on error path.</changelog>
  <changelog author="dmueller@suse.com" date="1443441600">- disable testsuite on aarch64</changelog>
  <changelog author="zaitor@opensuse.org" date="1457179200">- Update to version 0.4.25:
  + compiler: also prefer the backup function when no target,
    instead of trying to use emulation which is usually slower.
  + executor: fix load of parameters smaller than 64 bits, fixing
    crashes on ldresnearb and friends in emulated code.
  + test-limits: improve test without target.
  + Only check for Android's liblog on Android targets, so we don't
    accidentally pick up another liblog that may exist elsewhere.
  + Don't require libtool for uninstalled setups (-uninstalled
    pkg-config file).
  + Make -Bsymbolic check in configure work with clang.
  + Coverity code analyser fixes.
  + docs: update generated opcode tables.
  + Add orc_version_string() function and make orcc check the
    liborc that is being picked up to make sure the right lib is
    being used.</changelog>
  <changelog author="zaitor@opensuse.org" date="1472644800">- Update to version 0.4.26:
  + Use 64 bit arithmetic to increment the stride if needed.
  + Fix generation of ModR/M / SIB bytes for the EBP, R12, R13
    registers on X86/X86-64.
  + Fix test_parse unit test if no executable backend is available.
  + Add orc-test path to the -uninstalled .pc file.
  + Fix compiler warnings in the tests on OS X.
- Add pkgconfig(glib-2.0) BuildRequires, the build looks for it.
- Remove obsolete bconds, they were only there for now obsolete
  versions of openSUSE.
- Drop explicit xz BuildRequires: No longer needed.
- Enable testsuite for all arches again.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486900800">- Disable make check for all arches except x86_64 again.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500292800">- Update to version 0.4.27:
  + sse: preserve non volatile sse registers, needed for MSVC.
  + x86: don't hard-code register size to 0 in orc_x86_emit_*()
    funcs.
  + Fix incorrect asm generation on 64-bit Windows with MSVC.
  + Add support for building using the Meson build system.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504526400">- Switch to the meson build system, which knows how to cope with
  GTK 1.26+:
  + Use the tarball published on github (the automake bootstrapped
    one does not contain the meson build system).
  + Add meson BuildRequires and switch configure/make/make_install
    macros to the relevant meson/meson_build/meson_install
    variants.</changelog>
  <changelog author="zaitor@opensuse.org" date="1511179200">- Update to version 0.4.28:
  + Numerous undefined behaviour fixes.
  + Ability to disable tests.
  + Fix meson dist behaviour.</changelog>
  <changelog author="idonmez@suse.com" date="1555502400">- Add relax-tests.patch to increase test timeouts to 2 minutes,
  also limit the max value for memcpy_speed.c test bsc#1130085</changelog>
  <changelog author="alarrosa@suse.com" date="1721649600">- Backport patch from upstream to fix a stack-based buffer overflow
  in the Orc compiler when formatting error messages (bsc#1228184,
  CVE-2024-40897):
  * 0001-Use-vasprintf-if-available-for-error-messages-and.patch
  * 0002-Fix-build.patch</changelog>
</package>
<package pkgid="f464e8bb6370b3c41b6b5e319fc1fb21aba6fe877b212f33cfcdbfd2a236a93f" name="liborc-0_4-0" arch="x86_64">
  <version epoch="0" ver="0.4.28" rel="150000.3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1419595200">- Update to version 0.4.23:
  + Various improvements to the NEON backend to bring it closer to
    the SSE backend.
  + Add support for setting a custom backup function.
  + Preserve NEON/VFP registers across subroutines.
  + Fix 64 bit parameter loading on big-endian systems.
  + Improved implementations for various opcodes.
  + Various improvements and fixes to constants handling.
  + Avoid some undefined operations on signed integers.
  + Prefer user specific directories over global ones for
    intermediate files to prevent name collisions.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425038400">- disable make check for ppc64le archi
  would need changes in orcprogram-altivec.c
  and define of HAVE_POWERPC</changelog>
  <changelog author="zaitor@opensuse.org" date="1436443200">- Update to version 0.4.24:
  + Only reuse constants of the same size and value.
  + Fix reading of .orc files with Windows line endings on Windows.
  + Fix out of bounds array access in the tests.
  + Remove duplicate code path in orcc.
  + Put a limit to the memcpy test.
  + Fix mmap leak on error path.</changelog>
  <changelog author="dmueller@suse.com" date="1443441600">- disable testsuite on aarch64</changelog>
  <changelog author="zaitor@opensuse.org" date="1457179200">- Update to version 0.4.25:
  + compiler: also prefer the backup function when no target,
    instead of trying to use emulation which is usually slower.
  + executor: fix load of parameters smaller than 64 bits, fixing
    crashes on ldresnearb and friends in emulated code.
  + test-limits: improve test without target.
  + Only check for Android's liblog on Android targets, so we don't
    accidentally pick up another liblog that may exist elsewhere.
  + Don't require libtool for uninstalled setups (-uninstalled
    pkg-config file).
  + Make -Bsymbolic check in configure work with clang.
  + Coverity code analyser fixes.
  + docs: update generated opcode tables.
  + Add orc_version_string() function and make orcc check the
    liborc that is being picked up to make sure the right lib is
    being used.</changelog>
  <changelog author="zaitor@opensuse.org" date="1472644800">- Update to version 0.4.26:
  + Use 64 bit arithmetic to increment the stride if needed.
  + Fix generation of ModR/M / SIB bytes for the EBP, R12, R13
    registers on X86/X86-64.
  + Fix test_parse unit test if no executable backend is available.
  + Add orc-test path to the -uninstalled .pc file.
  + Fix compiler warnings in the tests on OS X.
- Add pkgconfig(glib-2.0) BuildRequires, the build looks for it.
- Remove obsolete bconds, they were only there for now obsolete
  versions of openSUSE.
- Drop explicit xz BuildRequires: No longer needed.
- Enable testsuite for all arches again.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486900800">- Disable make check for all arches except x86_64 again.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500292800">- Update to version 0.4.27:
  + sse: preserve non volatile sse registers, needed for MSVC.
  + x86: don't hard-code register size to 0 in orc_x86_emit_*()
    funcs.
  + Fix incorrect asm generation on 64-bit Windows with MSVC.
  + Add support for building using the Meson build system.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504526400">- Switch to the meson build system, which knows how to cope with
  GTK 1.26+:
  + Use the tarball published on github (the automake bootstrapped
    one does not contain the meson build system).
  + Add meson BuildRequires and switch configure/make/make_install
    macros to the relevant meson/meson_build/meson_install
    variants.</changelog>
  <changelog author="zaitor@opensuse.org" date="1511179200">- Update to version 0.4.28:
  + Numerous undefined behaviour fixes.
  + Ability to disable tests.
  + Fix meson dist behaviour.</changelog>
  <changelog author="idonmez@suse.com" date="1555502400">- Add relax-tests.patch to increase test timeouts to 2 minutes,
  also limit the max value for memcpy_speed.c test bsc#1130085</changelog>
  <changelog author="alarrosa@suse.com" date="1721649600">- Backport patch from upstream to fix a stack-based buffer overflow
  in the Orc compiler when formatting error messages (bsc#1228184,
  CVE-2024-40897):
  * 0001-Use-vasprintf-if-available-for-error-messages-and.patch
  * 0002-Fix-build.patch</changelog>
</package>
<package pkgid="59531056bc3e3e9f50e3a29d2214b45fc4559c4a968a09b4361654b8314bc3f0" name="libp11-kit0" arch="aarch64">
  <version epoch="0" ver="0.23.22" rel="150500.8.3.1"/>
  <changelog author="lnussel@suse.de" date="1413201600">- remove patches:
  * trust-Print-label-of-certificate-when-complaining-.patch
  * trust-Dont-use-invalid-public-keys-for-looking-up-.patch
- new version 0.20.7 (stable)
  * New public pkcs11x.h header containing extensions [fdo#83495]
  * Export necessary defines to lookup attached extensions [fdo#83495]
  * Build fixes
- new version 0.20.6 (stable)
  * Make the p11-kit-proxy.so module respect critical = no [fdo#83651]
  * Build fix for FreeBSD [fdo#75674]
- new version 0.20.5 (stable)
  * Don't use invalid keys for looking up stapled extensions [fdo#82328]
  * Better error messages when invalid certificate extensions
  * Fix parsing of some odd OpenSSL TRUSTED CERTIFICATE files
  * Fix some leaks, and memory issues
  * Silence some clang scanner warnings
- new version 0.20.4 (stable)
  * Don't complain about C_Finalize after a fork
  * Fix typo</changelog>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Update to version 0.23.1 (stable)
  * Use new PKCS#11 URI draft fields for URIs [fdo#86474 fdo#87582]
  * Add pem-directory-hash extract format
  * Build fixes
- Remove 0001-trust-allow-to-also-add-openssl-style-hashes-to-pem-d.diff;
  fixed on upstream release
- Remove autoconf, automake and libtool require; unneeded dependencies
- Add gtk-doc require; needed to build html documentation
- Remove redundant %clean section</changelog>
  <changelog author="mpluskal@suse.com" date="1454932800">- Update to 0.23.2
  * Fix forking issues with libffi
  * Fix various crashes in corner cases
  * Updated translations
  * Build fixes
- Make building more verbose
- Enable tests
- Small spec file cleanup with spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- 32-bit compatibility fixes:
  * Add PKCS11 module to p11-kit-32bit (bsc#996047#c39)
  * Add p11-kit-nss-trust-32bit NSS module
  * Fix potential bi-arch issue with private binaries
    (fdo#98817, p11-kit-biarch.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="lnussel@suse.de" date="1573819200">- support loading NSS attribute CKA_NSS_MOZILLA_CA_POLICY so Firefox
  detects built in certificates (boo#1154871,
  0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch,
  0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch)</changelog>
  <changelog author="lnussel@suse.de" date="1577102400">- Also build documentation (boo#1013125)</changelog>
  <changelog author="scabrero@suse.de" date="1628683200">- Update to version 0.23.22 (bsc#1180064, bsc#1180065, bsc#1180066):
  * Fix memory-safety issues that affect the RPC protocol
  (CVE-2020-29361, CVE-2020-29362, and CVE-2020-29363), discovered
  and fixed by David Cook
  * anchor: Prefer persistent format when storing anchor [PR#329]
  * common: Fix infloop in p11_path_build [PR#326, PR#327]
  * proxy: C_CloseAllSessions: Make sure that calloc args are non-zero [PR#325]
  * common: Check for a NULL locale before freeing it [PR#321]
  * Build and test fixes [PR#313, PR#315, PR#317, PR#318, PR#319, PR#323,
  PR#330, PR#333, PR#334, PR#335, PR#338, PR#339]
- Changes for version 0.23.21
  * proxy: Do not assign duplicate slot IDs [PR#282]
  * common: Get program name based on executable path if possible [PR#307]
  * anchor: Exit with non-zero code, if any error occurs [PR#304]
  * Build and test fixes [PR#283, PR#290, PR#291, PR#292, PR#296, PR#299,
  PR#305, PR#306, PR#309, PR#311]
- Changes for version 0.23.20:
  * Revert "Fix RPC when length-s are 0" changes [PR#276]
- Changes for version 0.23.19:
  * common: add Russian PKCS#11 extensions to pkcs11x.h header [PR#255]
  * Add simple bash completion for provided commands [PR#258]
  * Unbreak list matching in enable-in and disable-in [PR#262]
  * Fix RPC when length-s are 0 [PR#259]
  * rpc: Add vsock transport support [PR#270]
  * trust: Support CKA_NSS_{SERVER,EMAIL}_DISTRUST_AFTER [PR#265]
  * Build fixes [PR#271, PR#272, PR#273, ...]
- Changes for version 0.23.18:
  * rpc: Allow empty CK_DATE value [PR#253]
  * build: Meson fixes [PR#245]
  * build: Adjust feature parity between meson and autotools [PR#247]
- Changes for version 0.23.17:
  * common: Fix uClibc-ng compilation [PR#237]
  * trust: do not allow daylight to invalidate date validation [PR#236]
  * build: Port to meson build system [PR#231, PR#234]
  * rpc: On UNIX wait on condition variable instead of FD if header is for a different thread [PR#232]
  * doc: Add 'server' command in help [PR#229]
  * Build and test fixes [PR#230]
- Changes for version 0.23.16:
  * proxy: Support C_WaitForSlotEvent() if CKF_DONT_BLOCK is specified [PR#225]
  * conf: Ignore user configuration if the program is running as root [PR#226]
  * proxy: Refresh slot list on every C_GetSlotList call [PR#224]
  * modules: Fix index used in call to p11_dict_remove() [PR#219]
  * Fix Win32 p11_dl_error crash [PR#218]
  * modules: check gl.modules before iterates on it when freeing [PR#217]
  * trust: Ignore unreadable content in anchors [PR#215]
  * extract-jks: Prefer _p11_extract_jks_timestamp to SOURCE_DATE_EPOCH [PR#213]
- Changes for version 0.23.15:
  * trust: Improve error handling if backed trust file is corrupted [PR#206]
  * url: Prefer upper-case letters in hex characters when encoding [PR#193]
  * trust/extract-jks.c: also honor SOURCE_DATE_EPOCH time [PR#202]
  * virtual: Prefer fixed closures to libffi closures [PR#196]
  * Fix issues spotted by coverity and cppcheck [PR#194, PR#204]
  * Build and test fixes [PR#164, PR#191, PR#199, PR#201]
- Changes for version 0.23.14:
  * proxy: Avoid invalid memory access when unloading proxy module [PR#180]
  * Update pkcs11 header to allow SoftHSMv2 to compile [PR#181]
  * build: Restore libpthread dependency [PR#183]
  * Build fixes [PR#188]
- Changes for version 0.23.13:
  * server: Enable socket activation through systemd [PR#173]
  * rpc-server: p11_kit_remote_serve_tokens: Allow exporting all modules
    [PR#174]
  * proxy: Fail early if there is no slot mapping [PR#175]
  * Remove hard dependency on libpthread [PR#177]
  * Build fixes [PR#170, PR#176]
- Changes for version 0.23.12
  * Fix compile error when PKCS#11 GNU calling convention is enabled [PR#160]
  * Fix getauxval() and secure_getenv() emulation on macOS and FreeBSD [PR#167]
  * Build and test fixes on macOS [PR#162, PR#168]
- Changes for version 0.23.11
  * trust: Add extractor for edk2/cacerts.bin [PR#139]
  * modules: Add option to control module visibility from proxy [PR#140]
  * trust: Prevent trust module being loaded by proxy module [PR#142]
  * library: Use dedicated locale object for printing error [PR#148]
  * Treat CKR_CRYPTOKI_ALREADY_INITIALIZED correctly [PR#134]
  * Improve const correctness for P11KitUri [PR#152]
  * PKCS#11 URI scheme comparison is now case insensitive [PR#156]
  * Build and test fixes [PR#151, PR#149, PR#141, PR#138, PR#135]
- Changes for version 0.23.10
  * filter: Respect "write-protected" vendor-specific attribute in
    PKCS#11 URI [PR#129]
  * server: Improve shell integration and documentation [PR#107, PR#108]
  * proxy: Reuse existing slot ID mapping in after fork() [PR#120]
  * trust: Forcibly mark "Default Trust" read-only [PR#123]
  * New function p11_kit_override_system_files() which can be used for
    testing [PR#110]
  * trust: Filter out duplicate extensions [PR#69]
  * Update translations [PR#128]
  * Bug fixes [PR#125, PR#126]
- Changes for version 0.23.9
  * Fix p11-kit server regressions [PR#103, PR#104]
  * trust: Respect anyExtendedKeyUsage in CA certificates [PR#99]
  * Build fixes related to reallocarray [PR#96, PR#98, PR#100]
- Changes for version 0.23.8
  * Improve vendor query attributes handling in PKCS#11 URI [PR#92]
  * Add OTP and GOST mechanisms to pkcs11.h [PR#90, PR#91]
  * New envvar P11_KIT_NO_USER_CONFIG to stop looking at user
    configurations [PR#87]
  * Build fixes for Solaris and 32-bit big-endian platforms [PR#81, PR#86]
- Changes for version 0.23.7
  * Fix memory issues with "p11-kit server" [PR#78]
  * Build fixes [PR#77 ...]
- Changes for version 0.23.6
  * Port "p11-kit server" to Windows and portability fixes of the RPC
    protocol [PR#67, PR#72, PR#74]
  * Recover the old behavior of "trust anchor --remove" [PR#70, PR#71]
  * Build fixes [PR#63 ...]
- Changes for version 0.23.5
  * Fix license notice of common/unix-peer.c [PR#58]
  * Remove systemd unit files for now [PR#60]
  * Build fixes for FreeBSD [PR#56]
- Changes for version 0.23.4
  * Recognize query attributes defined in PKCS#11 URI (RFC7512) [PR#31,
    PR#37, PR#52]
  * The trust policy module now recognizes CKA_NSS_MOZILLA_CA_POLICY
    attribute, used by Firefox [#99453, PR#46]
  * Add 'trust dump' command to dump all PKCS#11 objects in the
    persistence format [PR#44]
  * New experimental 'p11-kit server' command that allows PKCS#11
    forwarding through a Unix domain socket.  A client-side module
    p11-kit-client.so is also provided [PR#15]
  * Add systemd unit files for exporting the proxy module through a
    Unix domain socket [PR#35]
  * New P11KitIter API to iterate over slots, tokens, and modules in
    addition to objects [PR#28]
  * libffi dependency is now optional [PR#9]
  * Build fixes for FreeBSD, macOS, and Windows [PR#32, PR#39, PR#45]
- Changes for version 0.23.3
  * Install private executables in libexecdir [fdo#98817]
  * Fix link error of proxy module on macOS [fdo#98022]
  * Use new PKCS#11 URI specification for URIs [fdo#97245]
  * Support x-init-reserved argument of C_Initialize() in remote modules
    [fdo#80519]
  * Incorporate changes from PKCS#11 2.40 specification
  * Bump libtool library version
  * Documentation fixes
  * Build fixes [fdo#87192 ...]
- Move RPM macros to %_rpmmacrodir.
- New server subpackage
- Change keyring to new maintainer Daiki Ueno
- Avoid bareword to fix build failure
- Remove obsolete patches:
  * p11-kit-biarch.patch
  * 0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch
  * 0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch</changelog>
  <changelog author="lnussel@suse.com" date="1674648000">- Backport IBM specific mechanism and attributes (Jira#PED-584)
  0001-Add-IBM-specific-mechanism-and-attributes.patch
  0002-Add-support-for-serializing-CK_ECDH1_DERIVE_PARAMS-m.patch
  0003-client-Allow-zero-part-length-at-C_SignUpdate.patch
  0004-Fix-support-of-CKA_DERIVE_TEMPLATE.patch
  0005-Add-other-SHA-variants-also-for-RSA-and-EC-signature.patch
  0006-Add-support-for-missing-AES-and-DES-DES3-mechanisms.patch
  0007-Add-support-for-MAC-and-HMAC-general-mechanisms.patch
  0008-Add-support-for-CKM_DH_PKCS_DERIVE.patch
  0009-rpc-Handle-special-cases-for-buffer-and-length.patch
  0010-Add-support-for-CKM_AES_CTR.patch
  0011-Add-support-for-CKM_AES_GCM.patch
  0012-common-pkcs11x.h-Support-CRYPTOKI_GNU-for-IBM-vendor.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1698148800">- Ensure that programs using &lt;p11-kit/pkcs11x.h&gt; can be compiled
  with CRYPTOKI_GNU. Fixes GnuTLS builds. [jsc#PED-6705]
  * Add p11-kit-pkcs11-gnu-Enable-testing-with-p11-kit-pkcs11x.h.patch</changelog>
</package>
<package pkgid="7aae922bb9d4af0a78b597eeaefb209e2ce9e4210a1380aaf52cf8b7448ab394" name="libp11-kit0" arch="s390x">
  <version epoch="0" ver="0.23.22" rel="150500.8.3.1"/>
  <changelog author="lnussel@suse.de" date="1413201600">- remove patches:
  * trust-Print-label-of-certificate-when-complaining-.patch
  * trust-Dont-use-invalid-public-keys-for-looking-up-.patch
- new version 0.20.7 (stable)
  * New public pkcs11x.h header containing extensions [fdo#83495]
  * Export necessary defines to lookup attached extensions [fdo#83495]
  * Build fixes
- new version 0.20.6 (stable)
  * Make the p11-kit-proxy.so module respect critical = no [fdo#83651]
  * Build fix for FreeBSD [fdo#75674]
- new version 0.20.5 (stable)
  * Don't use invalid keys for looking up stapled extensions [fdo#82328]
  * Better error messages when invalid certificate extensions
  * Fix parsing of some odd OpenSSL TRUSTED CERTIFICATE files
  * Fix some leaks, and memory issues
  * Silence some clang scanner warnings
- new version 0.20.4 (stable)
  * Don't complain about C_Finalize after a fork
  * Fix typo</changelog>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Update to version 0.23.1 (stable)
  * Use new PKCS#11 URI draft fields for URIs [fdo#86474 fdo#87582]
  * Add pem-directory-hash extract format
  * Build fixes
- Remove 0001-trust-allow-to-also-add-openssl-style-hashes-to-pem-d.diff;
  fixed on upstream release
- Remove autoconf, automake and libtool require; unneeded dependencies
- Add gtk-doc require; needed to build html documentation
- Remove redundant %clean section</changelog>
  <changelog author="mpluskal@suse.com" date="1454932800">- Update to 0.23.2
  * Fix forking issues with libffi
  * Fix various crashes in corner cases
  * Updated translations
  * Build fixes
- Make building more verbose
- Enable tests
- Small spec file cleanup with spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- 32-bit compatibility fixes:
  * Add PKCS11 module to p11-kit-32bit (bsc#996047#c39)
  * Add p11-kit-nss-trust-32bit NSS module
  * Fix potential bi-arch issue with private binaries
    (fdo#98817, p11-kit-biarch.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="lnussel@suse.de" date="1573819200">- support loading NSS attribute CKA_NSS_MOZILLA_CA_POLICY so Firefox
  detects built in certificates (boo#1154871,
  0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch,
  0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch)</changelog>
  <changelog author="lnussel@suse.de" date="1577102400">- Also build documentation (boo#1013125)</changelog>
  <changelog author="scabrero@suse.de" date="1628683200">- Update to version 0.23.22 (bsc#1180064, bsc#1180065, bsc#1180066):
  * Fix memory-safety issues that affect the RPC protocol
  (CVE-2020-29361, CVE-2020-29362, and CVE-2020-29363), discovered
  and fixed by David Cook
  * anchor: Prefer persistent format when storing anchor [PR#329]
  * common: Fix infloop in p11_path_build [PR#326, PR#327]
  * proxy: C_CloseAllSessions: Make sure that calloc args are non-zero [PR#325]
  * common: Check for a NULL locale before freeing it [PR#321]
  * Build and test fixes [PR#313, PR#315, PR#317, PR#318, PR#319, PR#323,
  PR#330, PR#333, PR#334, PR#335, PR#338, PR#339]
- Changes for version 0.23.21
  * proxy: Do not assign duplicate slot IDs [PR#282]
  * common: Get program name based on executable path if possible [PR#307]
  * anchor: Exit with non-zero code, if any error occurs [PR#304]
  * Build and test fixes [PR#283, PR#290, PR#291, PR#292, PR#296, PR#299,
  PR#305, PR#306, PR#309, PR#311]
- Changes for version 0.23.20:
  * Revert "Fix RPC when length-s are 0" changes [PR#276]
- Changes for version 0.23.19:
  * common: add Russian PKCS#11 extensions to pkcs11x.h header [PR#255]
  * Add simple bash completion for provided commands [PR#258]
  * Unbreak list matching in enable-in and disable-in [PR#262]
  * Fix RPC when length-s are 0 [PR#259]
  * rpc: Add vsock transport support [PR#270]
  * trust: Support CKA_NSS_{SERVER,EMAIL}_DISTRUST_AFTER [PR#265]
  * Build fixes [PR#271, PR#272, PR#273, ...]
- Changes for version 0.23.18:
  * rpc: Allow empty CK_DATE value [PR#253]
  * build: Meson fixes [PR#245]
  * build: Adjust feature parity between meson and autotools [PR#247]
- Changes for version 0.23.17:
  * common: Fix uClibc-ng compilation [PR#237]
  * trust: do not allow daylight to invalidate date validation [PR#236]
  * build: Port to meson build system [PR#231, PR#234]
  * rpc: On UNIX wait on condition variable instead of FD if header is for a different thread [PR#232]
  * doc: Add 'server' command in help [PR#229]
  * Build and test fixes [PR#230]
- Changes for version 0.23.16:
  * proxy: Support C_WaitForSlotEvent() if CKF_DONT_BLOCK is specified [PR#225]
  * conf: Ignore user configuration if the program is running as root [PR#226]
  * proxy: Refresh slot list on every C_GetSlotList call [PR#224]
  * modules: Fix index used in call to p11_dict_remove() [PR#219]
  * Fix Win32 p11_dl_error crash [PR#218]
  * modules: check gl.modules before iterates on it when freeing [PR#217]
  * trust: Ignore unreadable content in anchors [PR#215]
  * extract-jks: Prefer _p11_extract_jks_timestamp to SOURCE_DATE_EPOCH [PR#213]
- Changes for version 0.23.15:
  * trust: Improve error handling if backed trust file is corrupted [PR#206]
  * url: Prefer upper-case letters in hex characters when encoding [PR#193]
  * trust/extract-jks.c: also honor SOURCE_DATE_EPOCH time [PR#202]
  * virtual: Prefer fixed closures to libffi closures [PR#196]
  * Fix issues spotted by coverity and cppcheck [PR#194, PR#204]
  * Build and test fixes [PR#164, PR#191, PR#199, PR#201]
- Changes for version 0.23.14:
  * proxy: Avoid invalid memory access when unloading proxy module [PR#180]
  * Update pkcs11 header to allow SoftHSMv2 to compile [PR#181]
  * build: Restore libpthread dependency [PR#183]
  * Build fixes [PR#188]
- Changes for version 0.23.13:
  * server: Enable socket activation through systemd [PR#173]
  * rpc-server: p11_kit_remote_serve_tokens: Allow exporting all modules
    [PR#174]
  * proxy: Fail early if there is no slot mapping [PR#175]
  * Remove hard dependency on libpthread [PR#177]
  * Build fixes [PR#170, PR#176]
- Changes for version 0.23.12
  * Fix compile error when PKCS#11 GNU calling convention is enabled [PR#160]
  * Fix getauxval() and secure_getenv() emulation on macOS and FreeBSD [PR#167]
  * Build and test fixes on macOS [PR#162, PR#168]
- Changes for version 0.23.11
  * trust: Add extractor for edk2/cacerts.bin [PR#139]
  * modules: Add option to control module visibility from proxy [PR#140]
  * trust: Prevent trust module being loaded by proxy module [PR#142]
  * library: Use dedicated locale object for printing error [PR#148]
  * Treat CKR_CRYPTOKI_ALREADY_INITIALIZED correctly [PR#134]
  * Improve const correctness for P11KitUri [PR#152]
  * PKCS#11 URI scheme comparison is now case insensitive [PR#156]
  * Build and test fixes [PR#151, PR#149, PR#141, PR#138, PR#135]
- Changes for version 0.23.10
  * filter: Respect "write-protected" vendor-specific attribute in
    PKCS#11 URI [PR#129]
  * server: Improve shell integration and documentation [PR#107, PR#108]
  * proxy: Reuse existing slot ID mapping in after fork() [PR#120]
  * trust: Forcibly mark "Default Trust" read-only [PR#123]
  * New function p11_kit_override_system_files() which can be used for
    testing [PR#110]
  * trust: Filter out duplicate extensions [PR#69]
  * Update translations [PR#128]
  * Bug fixes [PR#125, PR#126]
- Changes for version 0.23.9
  * Fix p11-kit server regressions [PR#103, PR#104]
  * trust: Respect anyExtendedKeyUsage in CA certificates [PR#99]
  * Build fixes related to reallocarray [PR#96, PR#98, PR#100]
- Changes for version 0.23.8
  * Improve vendor query attributes handling in PKCS#11 URI [PR#92]
  * Add OTP and GOST mechanisms to pkcs11.h [PR#90, PR#91]
  * New envvar P11_KIT_NO_USER_CONFIG to stop looking at user
    configurations [PR#87]
  * Build fixes for Solaris and 32-bit big-endian platforms [PR#81, PR#86]
- Changes for version 0.23.7
  * Fix memory issues with "p11-kit server" [PR#78]
  * Build fixes [PR#77 ...]
- Changes for version 0.23.6
  * Port "p11-kit server" to Windows and portability fixes of the RPC
    protocol [PR#67, PR#72, PR#74]
  * Recover the old behavior of "trust anchor --remove" [PR#70, PR#71]
  * Build fixes [PR#63 ...]
- Changes for version 0.23.5
  * Fix license notice of common/unix-peer.c [PR#58]
  * Remove systemd unit files for now [PR#60]
  * Build fixes for FreeBSD [PR#56]
- Changes for version 0.23.4
  * Recognize query attributes defined in PKCS#11 URI (RFC7512) [PR#31,
    PR#37, PR#52]
  * The trust policy module now recognizes CKA_NSS_MOZILLA_CA_POLICY
    attribute, used by Firefox [#99453, PR#46]
  * Add 'trust dump' command to dump all PKCS#11 objects in the
    persistence format [PR#44]
  * New experimental 'p11-kit server' command that allows PKCS#11
    forwarding through a Unix domain socket.  A client-side module
    p11-kit-client.so is also provided [PR#15]
  * Add systemd unit files for exporting the proxy module through a
    Unix domain socket [PR#35]
  * New P11KitIter API to iterate over slots, tokens, and modules in
    addition to objects [PR#28]
  * libffi dependency is now optional [PR#9]
  * Build fixes for FreeBSD, macOS, and Windows [PR#32, PR#39, PR#45]
- Changes for version 0.23.3
  * Install private executables in libexecdir [fdo#98817]
  * Fix link error of proxy module on macOS [fdo#98022]
  * Use new PKCS#11 URI specification for URIs [fdo#97245]
  * Support x-init-reserved argument of C_Initialize() in remote modules
    [fdo#80519]
  * Incorporate changes from PKCS#11 2.40 specification
  * Bump libtool library version
  * Documentation fixes
  * Build fixes [fdo#87192 ...]
- Move RPM macros to %_rpmmacrodir.
- New server subpackage
- Change keyring to new maintainer Daiki Ueno
- Avoid bareword to fix build failure
- Remove obsolete patches:
  * p11-kit-biarch.patch
  * 0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch
  * 0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch</changelog>
  <changelog author="lnussel@suse.com" date="1674648000">- Backport IBM specific mechanism and attributes (Jira#PED-584)
  0001-Add-IBM-specific-mechanism-and-attributes.patch
  0002-Add-support-for-serializing-CK_ECDH1_DERIVE_PARAMS-m.patch
  0003-client-Allow-zero-part-length-at-C_SignUpdate.patch
  0004-Fix-support-of-CKA_DERIVE_TEMPLATE.patch
  0005-Add-other-SHA-variants-also-for-RSA-and-EC-signature.patch
  0006-Add-support-for-missing-AES-and-DES-DES3-mechanisms.patch
  0007-Add-support-for-MAC-and-HMAC-general-mechanisms.patch
  0008-Add-support-for-CKM_DH_PKCS_DERIVE.patch
  0009-rpc-Handle-special-cases-for-buffer-and-length.patch
  0010-Add-support-for-CKM_AES_CTR.patch
  0011-Add-support-for-CKM_AES_GCM.patch
  0012-common-pkcs11x.h-Support-CRYPTOKI_GNU-for-IBM-vendor.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1698148800">- Ensure that programs using &lt;p11-kit/pkcs11x.h&gt; can be compiled
  with CRYPTOKI_GNU. Fixes GnuTLS builds. [jsc#PED-6705]
  * Add p11-kit-pkcs11-gnu-Enable-testing-with-p11-kit-pkcs11x.h.patch</changelog>
</package>
<package pkgid="03e72b18ec6be3e2e6671d85057c0187d7acf6ac30b018d2008247cd4aa9c36b" name="libp11-kit0" arch="x86_64">
  <version epoch="0" ver="0.23.22" rel="150500.8.3.1"/>
  <changelog author="lnussel@suse.de" date="1413201600">- remove patches:
  * trust-Print-label-of-certificate-when-complaining-.patch
  * trust-Dont-use-invalid-public-keys-for-looking-up-.patch
- new version 0.20.7 (stable)
  * New public pkcs11x.h header containing extensions [fdo#83495]
  * Export necessary defines to lookup attached extensions [fdo#83495]
  * Build fixes
- new version 0.20.6 (stable)
  * Make the p11-kit-proxy.so module respect critical = no [fdo#83651]
  * Build fix for FreeBSD [fdo#75674]
- new version 0.20.5 (stable)
  * Don't use invalid keys for looking up stapled extensions [fdo#82328]
  * Better error messages when invalid certificate extensions
  * Fix parsing of some odd OpenSSL TRUSTED CERTIFICATE files
  * Fix some leaks, and memory issues
  * Silence some clang scanner warnings
- new version 0.20.4 (stable)
  * Don't complain about C_Finalize after a fork
  * Fix typo</changelog>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Update to version 0.23.1 (stable)
  * Use new PKCS#11 URI draft fields for URIs [fdo#86474 fdo#87582]
  * Add pem-directory-hash extract format
  * Build fixes
- Remove 0001-trust-allow-to-also-add-openssl-style-hashes-to-pem-d.diff;
  fixed on upstream release
- Remove autoconf, automake and libtool require; unneeded dependencies
- Add gtk-doc require; needed to build html documentation
- Remove redundant %clean section</changelog>
  <changelog author="mpluskal@suse.com" date="1454932800">- Update to 0.23.2
  * Fix forking issues with libffi
  * Fix various crashes in corner cases
  * Updated translations
  * Build fixes
- Make building more verbose
- Enable tests
- Small spec file cleanup with spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- 32-bit compatibility fixes:
  * Add PKCS11 module to p11-kit-32bit (bsc#996047#c39)
  * Add p11-kit-nss-trust-32bit NSS module
  * Fix potential bi-arch issue with private binaries
    (fdo#98817, p11-kit-biarch.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="lnussel@suse.de" date="1573819200">- support loading NSS attribute CKA_NSS_MOZILLA_CA_POLICY so Firefox
  detects built in certificates (boo#1154871,
  0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch,
  0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch)</changelog>
  <changelog author="lnussel@suse.de" date="1577102400">- Also build documentation (boo#1013125)</changelog>
  <changelog author="scabrero@suse.de" date="1628683200">- Update to version 0.23.22 (bsc#1180064, bsc#1180065, bsc#1180066):
  * Fix memory-safety issues that affect the RPC protocol
  (CVE-2020-29361, CVE-2020-29362, and CVE-2020-29363), discovered
  and fixed by David Cook
  * anchor: Prefer persistent format when storing anchor [PR#329]
  * common: Fix infloop in p11_path_build [PR#326, PR#327]
  * proxy: C_CloseAllSessions: Make sure that calloc args are non-zero [PR#325]
  * common: Check for a NULL locale before freeing it [PR#321]
  * Build and test fixes [PR#313, PR#315, PR#317, PR#318, PR#319, PR#323,
  PR#330, PR#333, PR#334, PR#335, PR#338, PR#339]
- Changes for version 0.23.21
  * proxy: Do not assign duplicate slot IDs [PR#282]
  * common: Get program name based on executable path if possible [PR#307]
  * anchor: Exit with non-zero code, if any error occurs [PR#304]
  * Build and test fixes [PR#283, PR#290, PR#291, PR#292, PR#296, PR#299,
  PR#305, PR#306, PR#309, PR#311]
- Changes for version 0.23.20:
  * Revert "Fix RPC when length-s are 0" changes [PR#276]
- Changes for version 0.23.19:
  * common: add Russian PKCS#11 extensions to pkcs11x.h header [PR#255]
  * Add simple bash completion for provided commands [PR#258]
  * Unbreak list matching in enable-in and disable-in [PR#262]
  * Fix RPC when length-s are 0 [PR#259]
  * rpc: Add vsock transport support [PR#270]
  * trust: Support CKA_NSS_{SERVER,EMAIL}_DISTRUST_AFTER [PR#265]
  * Build fixes [PR#271, PR#272, PR#273, ...]
- Changes for version 0.23.18:
  * rpc: Allow empty CK_DATE value [PR#253]
  * build: Meson fixes [PR#245]
  * build: Adjust feature parity between meson and autotools [PR#247]
- Changes for version 0.23.17:
  * common: Fix uClibc-ng compilation [PR#237]
  * trust: do not allow daylight to invalidate date validation [PR#236]
  * build: Port to meson build system [PR#231, PR#234]
  * rpc: On UNIX wait on condition variable instead of FD if header is for a different thread [PR#232]
  * doc: Add 'server' command in help [PR#229]
  * Build and test fixes [PR#230]
- Changes for version 0.23.16:
  * proxy: Support C_WaitForSlotEvent() if CKF_DONT_BLOCK is specified [PR#225]
  * conf: Ignore user configuration if the program is running as root [PR#226]
  * proxy: Refresh slot list on every C_GetSlotList call [PR#224]
  * modules: Fix index used in call to p11_dict_remove() [PR#219]
  * Fix Win32 p11_dl_error crash [PR#218]
  * modules: check gl.modules before iterates on it when freeing [PR#217]
  * trust: Ignore unreadable content in anchors [PR#215]
  * extract-jks: Prefer _p11_extract_jks_timestamp to SOURCE_DATE_EPOCH [PR#213]
- Changes for version 0.23.15:
  * trust: Improve error handling if backed trust file is corrupted [PR#206]
  * url: Prefer upper-case letters in hex characters when encoding [PR#193]
  * trust/extract-jks.c: also honor SOURCE_DATE_EPOCH time [PR#202]
  * virtual: Prefer fixed closures to libffi closures [PR#196]
  * Fix issues spotted by coverity and cppcheck [PR#194, PR#204]
  * Build and test fixes [PR#164, PR#191, PR#199, PR#201]
- Changes for version 0.23.14:
  * proxy: Avoid invalid memory access when unloading proxy module [PR#180]
  * Update pkcs11 header to allow SoftHSMv2 to compile [PR#181]
  * build: Restore libpthread dependency [PR#183]
  * Build fixes [PR#188]
- Changes for version 0.23.13:
  * server: Enable socket activation through systemd [PR#173]
  * rpc-server: p11_kit_remote_serve_tokens: Allow exporting all modules
    [PR#174]
  * proxy: Fail early if there is no slot mapping [PR#175]
  * Remove hard dependency on libpthread [PR#177]
  * Build fixes [PR#170, PR#176]
- Changes for version 0.23.12
  * Fix compile error when PKCS#11 GNU calling convention is enabled [PR#160]
  * Fix getauxval() and secure_getenv() emulation on macOS and FreeBSD [PR#167]
  * Build and test fixes on macOS [PR#162, PR#168]
- Changes for version 0.23.11
  * trust: Add extractor for edk2/cacerts.bin [PR#139]
  * modules: Add option to control module visibility from proxy [PR#140]
  * trust: Prevent trust module being loaded by proxy module [PR#142]
  * library: Use dedicated locale object for printing error [PR#148]
  * Treat CKR_CRYPTOKI_ALREADY_INITIALIZED correctly [PR#134]
  * Improve const correctness for P11KitUri [PR#152]
  * PKCS#11 URI scheme comparison is now case insensitive [PR#156]
  * Build and test fixes [PR#151, PR#149, PR#141, PR#138, PR#135]
- Changes for version 0.23.10
  * filter: Respect "write-protected" vendor-specific attribute in
    PKCS#11 URI [PR#129]
  * server: Improve shell integration and documentation [PR#107, PR#108]
  * proxy: Reuse existing slot ID mapping in after fork() [PR#120]
  * trust: Forcibly mark "Default Trust" read-only [PR#123]
  * New function p11_kit_override_system_files() which can be used for
    testing [PR#110]
  * trust: Filter out duplicate extensions [PR#69]
  * Update translations [PR#128]
  * Bug fixes [PR#125, PR#126]
- Changes for version 0.23.9
  * Fix p11-kit server regressions [PR#103, PR#104]
  * trust: Respect anyExtendedKeyUsage in CA certificates [PR#99]
  * Build fixes related to reallocarray [PR#96, PR#98, PR#100]
- Changes for version 0.23.8
  * Improve vendor query attributes handling in PKCS#11 URI [PR#92]
  * Add OTP and GOST mechanisms to pkcs11.h [PR#90, PR#91]
  * New envvar P11_KIT_NO_USER_CONFIG to stop looking at user
    configurations [PR#87]
  * Build fixes for Solaris and 32-bit big-endian platforms [PR#81, PR#86]
- Changes for version 0.23.7
  * Fix memory issues with "p11-kit server" [PR#78]
  * Build fixes [PR#77 ...]
- Changes for version 0.23.6
  * Port "p11-kit server" to Windows and portability fixes of the RPC
    protocol [PR#67, PR#72, PR#74]
  * Recover the old behavior of "trust anchor --remove" [PR#70, PR#71]
  * Build fixes [PR#63 ...]
- Changes for version 0.23.5
  * Fix license notice of common/unix-peer.c [PR#58]
  * Remove systemd unit files for now [PR#60]
  * Build fixes for FreeBSD [PR#56]
- Changes for version 0.23.4
  * Recognize query attributes defined in PKCS#11 URI (RFC7512) [PR#31,
    PR#37, PR#52]
  * The trust policy module now recognizes CKA_NSS_MOZILLA_CA_POLICY
    attribute, used by Firefox [#99453, PR#46]
  * Add 'trust dump' command to dump all PKCS#11 objects in the
    persistence format [PR#44]
  * New experimental 'p11-kit server' command that allows PKCS#11
    forwarding through a Unix domain socket.  A client-side module
    p11-kit-client.so is also provided [PR#15]
  * Add systemd unit files for exporting the proxy module through a
    Unix domain socket [PR#35]
  * New P11KitIter API to iterate over slots, tokens, and modules in
    addition to objects [PR#28]
  * libffi dependency is now optional [PR#9]
  * Build fixes for FreeBSD, macOS, and Windows [PR#32, PR#39, PR#45]
- Changes for version 0.23.3
  * Install private executables in libexecdir [fdo#98817]
  * Fix link error of proxy module on macOS [fdo#98022]
  * Use new PKCS#11 URI specification for URIs [fdo#97245]
  * Support x-init-reserved argument of C_Initialize() in remote modules
    [fdo#80519]
  * Incorporate changes from PKCS#11 2.40 specification
  * Bump libtool library version
  * Documentation fixes
  * Build fixes [fdo#87192 ...]
- Move RPM macros to %_rpmmacrodir.
- New server subpackage
- Change keyring to new maintainer Daiki Ueno
- Avoid bareword to fix build failure
- Remove obsolete patches:
  * p11-kit-biarch.patch
  * 0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch
  * 0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch</changelog>
  <changelog author="lnussel@suse.com" date="1674648000">- Backport IBM specific mechanism and attributes (Jira#PED-584)
  0001-Add-IBM-specific-mechanism-and-attributes.patch
  0002-Add-support-for-serializing-CK_ECDH1_DERIVE_PARAMS-m.patch
  0003-client-Allow-zero-part-length-at-C_SignUpdate.patch
  0004-Fix-support-of-CKA_DERIVE_TEMPLATE.patch
  0005-Add-other-SHA-variants-also-for-RSA-and-EC-signature.patch
  0006-Add-support-for-missing-AES-and-DES-DES3-mechanisms.patch
  0007-Add-support-for-MAC-and-HMAC-general-mechanisms.patch
  0008-Add-support-for-CKM_DH_PKCS_DERIVE.patch
  0009-rpc-Handle-special-cases-for-buffer-and-length.patch
  0010-Add-support-for-CKM_AES_CTR.patch
  0011-Add-support-for-CKM_AES_GCM.patch
  0012-common-pkcs11x.h-Support-CRYPTOKI_GNU-for-IBM-vendor.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1698148800">- Ensure that programs using &lt;p11-kit/pkcs11x.h&gt; can be compiled
  with CRYPTOKI_GNU. Fixes GnuTLS builds. [jsc#PED-6705]
  * Add p11-kit-pkcs11-gnu-Enable-testing-with-p11-kit-pkcs11x.h.patch</changelog>
</package>
<package pkgid="fbc787eeac8355df44ea7bdfd296e3e8aaee3ce612ad52e93126f8ce911d3458" name="libpcap" arch="src">
  <version epoch="0" ver="1.10.1" rel="150400.3.3.2"/>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="vcizek@suse.com" date="1426248000">- update to 1.7.2
  * Support for filtering Geneve encapsulated packets.
  * Fix handling of zones for BPF on Solaris
  * new DLT for ZWAVE
  * clarifications for read timeouts.
  * added bpf_filter1() with extensions
  * some fixes to compilation without stdint.h
  * EBUSY can now be returned by SNFv3 code.
- refreshed libpcap-ocloexec.patch</changelog>
  <changelog author="astieger@suse.com" date="1430049600">- libpcap 1.7.3:
  * work around a Linux bonding driver bug.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434888000">- remove dependency on libusb-devel, only libusb-1.0 is used for
  build.
- split a -devel-static subpackage that contains the static
  libraries and all the extra dependencies which are not needed
  for dynamic linking.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1460894400">- libpcap-no-old-socket.patch: never fallback to the obsolete
  SOCK_PACKET (kernel &lt; 2.2) interface, this still happens
  for example, when you update the kernel, run iftop and
  the old kernel af_packet module wasn't loaded, program fails
  and the kernel prints "iftop uses obsolete (PF_INET,SOCK_PACKET)"</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036800">- update to 1.8.1
  * Clean up the name-to-DLT mapping table.
  * Add some newer DLT_ values:
  IPMI_HPM_2,ZWAVE_R1_R2,ZWAVE_R3,WATTSTOPPER_DLM,ISO_14443,RDS
  * Fix handling of packet count in the TPACKET_V3 inner loop: GitHub issue
  [#493].
  * Filter out duplicate looped back CAN frames.
  * Fix the handling of loopback filters for IPv6 packets.
  * Add a link-layer header type for RDS (IEC 62106) groups.
  * On Linux, handle all CAN captures with pcap-linux.c, in cooked mode.
  * Removes the need for the "host-endian" link-layer header type.
  * Compile with '-Wused-but-marked-unused' in devel mode if supported
  * Have separate DLTs for big-endian and host-endian SocketCAN headers.
  * Require that version.h be generated: all build procedures we support generate version.h (autoconf, CMake, MSVC)!
  * Properly check for sock_recv() errors.
  * Re-impose some of Winsock's limitations on sock_recv().
  * Replace sprintf() with pcap_snprintf().
  * Fix signature of pcap_stats_ex_remote().
  * Have rpcap_remoteact_getsock() return a SOCKET and supply an "is active" flag.
  * Clean up {DAG, Septel, Myricom SNF}-only builds.
  * pcap_create_interface() needs the interface name on Linux.
  * Clean up hardware time stamp support: the "any" device does not support any time stamp types.
  * Recognize 802.1ad nested VLAN tag in vlan filter.
- dropped libpcap-ocloexec.patch, never upstreamed.
- refreshed libpcap-1.0.0-ppp.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036801">- Allow bluetooth monitoring support unconditionally.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036802">- Formatted the specs file using spec-cleaner.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1487160000">- Dropped patches not required after review
  * libpcap-1.0.0-pcap-bpf.patch
  * libpcap-1.5.2-filter-fix.patch
- Reference of the pull request for the rest of the patches
  * https://github.com/the-tcpdump-group/libpcap/issues/196
- Changed libpcap-1.0.0-s390.patch to the git formatted one</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Do not put conditions about the provides for &lt; 11.0</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- Restore section setting $pic</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1505217600">- Added a patch (disable-remote.diff) to fix applications to FTBFS
  if they define HAVE_REMOTE (deb#843384). Patch taken from Debian.</changelog>
  <changelog author="jengelh@inai.de" date="1519905600">- Fix SRPM group</changelog>
  <changelog author="mkubecek@suse.cz" date="1537790400">- update to 1.9.0
  * add testing system to libpcap, independent of tcpdump
  * changes to how pcap_t is activated
  * update included copies of BSD 4-clause license to 3-clause
  * additions to TCP header parsing, per RFC3168
  * support setting non-blocking mode before activating
  * fixes so that non-AF_INET addresses, are not ==AF_INET6 addresses
  * pcap_compile() in 1.8.0 and later is newly thread-safe
  * bound snaplen for linux tpacket_v2 to ~64k
  * make VLAN filter handle both metadata and inline tags
    (bsc#874131 bsc#993691 fate#321405)
  * D-Bus captures can now be up to 128MB in size
  * add DLT_LORATAP and DLT_VSOCK
  * allow specifying a specific capture protocol
  * RDMA sniffing support for pcap
  * increase minimum autoconf version requirement to 2.64
  * rpcapd: support for xinetd.conf and systemd units
  * provide pkgconfig file
- add BuildRequires for autoconf &gt;= 2.64
- package (newly added) pkgconfig file
- Check-only-VID-in-VLAN-test-issue-461.patch:
  fix "vlan &lt;id&gt;" test to check only VID, not complete TCI
- drop disable-remote.diff (superseded by upstream changes)</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="pmonreal@suse.com" date="1570017600">- Update to 1.9.1 [bsc#1153332]
  * Five CVE-2019-15161, CVE-2019-15162, CVE-2019-15163, CVE-2019-15164, CVE-2019-15165
  * Fixes for CVE-2018-16301, errors in pcapng reading.
  * Mention pcap_get_required_select_timeout() in the main pcap man page
  * Fix pcap-usb-linux.c build on systems with musl
  * Fix assorted man page and other documentation issues
  * Plug assorted memory leaks
  * Documentation changes to use https:
  * Changes to how time stamp calculations are done
  * Lots of tweaks to make newer compilers happier and warning-free and
    to fix instances of C undefined behavior
  * Warn if AC_PROG_CC_C99 can't enable C99 support
  * Rename pcap_set_protocol() to  pcap_set_protocol_linux().
  * Align pcap_t private data on an 8-byte boundary.
  * Fix various error messages
  * Use 64-bit clean API in dag_findalldevs()
  * Fix cleaning up after some errors
  * Work around some ethtool ioctl bugs in newer Linux kernels
  * Add backwards compatibility sections to some man pages
  * Fix autotool configuration on AIX and macOS
  * Don't export bpf_filter_with_aux_data() or struct bpf_aux_data;
    they're internal-only and subject to change
  * Fix pcapng block size checking
  * Fix reading of capture statistics for Linux USB
  * Fix packet size values for Linux USB packets
  * Check only VID in VLAN test in filterss
  * Fix pcap_list_datalinks on 802.11 devices on macOS
  * Fix overflows with very large snapshot length in pcap file
  * Improve parsing of rpcapd configuration file
  * Handle systems without strlcpy() or strlcat() better
  * Fix crashes and other errors with invalid filter expressions
  * Fix use of uninitialized file descriptor in remote capture
  * Fix some CMake issues
  * Fix some divide-by-zero issues with the filter compiler
  * Work around a GNU libc bug in pcap_nametonetaddr()
  * Add support for DLT_LINUX_SLL2
  * Fix handling of the packet-count argument for Myricom SNF devices
  * Fix --disable-rdma in configure script
  * Fix compilation of TurboCap support
  * Constify first argument to pcap_findalldevs_ex()
  * Fix a number of issues when running rpcapd as an inetd-style daemon
  * Fix CMake issues with D-Bus libraries
  * In rpcapd, clean up termination of a capture session
  * Redo remote capture protocol negotiation
  * In rpcapd, report the same error for "invalid user name" and
    "invalid password", to make brute-forcing harder
  * For remote captures, add an error code for "the server requires TLS"
  * Fix building as part of Npcap
  * Allow rpcapd to rebind more rapidly
  * Fix building shared libpcap library on midipix (midipix.org)
  * Fix hack to detect UTF-16LE adapter names on Windows not to go past
    the end of the string
  * Have pcap_dump_open_append() create the dump file if it doesn't exists
  * Fix the maxmum snapshot length for DLT_USBPCAP
  * Use -fPIC when building for 64-bit SPARC on Linux
  * Fix CMake 64-bit library installation directory on some Linux distributions
  * Boost the TPACKET_V3 timeout to the maximum if a timeout of 0 was specified
  * PCAPNG reader applies some sanity checks before doing malloc().
- Drop patch fixed upstream:
  * Check-only-VID-in-VLAN-test-issue-461.patch
- Rebase patch:
  * libpcap-1.0.0-ppp.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1613304000">- Update to 1.10.0
  * Require, and assume, some level of C99 support in the C compiler
  * Add support for capturing on DPDK devices
  * rpcap: support rpcap-over-TLS
  * Fix some memory leaks, including in pcap_compile()
  * Linux: handle systems without AF_INET or AF_UNIX socket support
  * Catch invalid IPv4 addresses in filters
  * Show special Linux BPF offsets symbolically in bpf_image()
    and bpf_dump()
  * Linux: get rid of Wireless Extensions for turning monitor mode on
  * Linux: proper memory sync for PACKET_MMAP
  * Linux: drop support for libnl 1 and 2.
  * Linux: Require PF_PACKET support, and kernel 2.6.27 or later
  * Add DLT_LINUX_SLL2
  * Add a new filter "ifindex" for DLT_LINUX_SLL2 files and live
    Linux captures
  * optimizer: add a hack to try to catch certain optimizer loops
  * Probe CONFIGURATION descriptor of connected USB devices
  * Linux: return error on interface going away, but not if it just
    went down
  * Linux: set socket protocol only after packet ring configured,
    reducing bogus packet drop reports
  * Linux: get ifdrop stats from sysfs.
  * Fix various security issues reported by Charles Smith at
    Tangible Security
  * Fix various security issues reported by Include Security
  * rpcapd: on UN*X, don't tell the client why authentication failed
  * Linux: when adjusting BPF programs, do not subtract the
    SLL[2]_HDR_LEN if the location is negative (special
    metadata offset)
  * Linux: with a timeout of zero, wait indefinitely
  * Linux: clean up support for some non-GNU libc C libraries
  * Increase the maximum snaplen for LINKTYPE_USBPCAP/DLT_USBPCAP
  * Fix handling of some ioctls that fail with "permission denied"
    even when the ioctl isn't supported at all
  * Added support for ICMPv6 types 1-4 as tokens in filters
  * Report the DLT description in error messages
  * Linux: Add support for DSA data link types
  * Linux USB: use the snapshot length to set the buffer size,
    and set the len field to reflect the length in the URB
  * rpcapd: allow rpcapd to rebind more rapidly
  * Add Haiku pcap implementation
  * rpcap: redo protocol version negotiation to avoid problems
    with old servers (it still works with servers using the old
    negotiation, as well as servers not supporting negotiation)
  * Remove (unused) SITA support here.
  * Correctly handle pcapng captures with more than one IDB with a
    snspshot length greater than the supported maximum
- Remove libpcap-no-old-socket.patch
- Rebase libpcap-1.0.0-s390.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1623412800">- Update to 1.10.1
  * Fix "type XXX subtype YYY" giving a parse error
  * Add PCAP_AVAILABLE_1_11.
  * Rename struct bpf_aux_data to avoid NetBSD compile errors
  * Fix cross-builds with older kernels lacking BPF_MOD and BPF_XOR
  * Fix Bison detection for minor version 0.
  * Fix parallel build with FreeBSD make.
  * Get DLT_MATCHING_MAX right in gencode.c on NetBSD.
  * Define timeradd() and timersub() if necessary.
  * Fix Cygwin/MSYS target directories.
  * Fix symlinking with DESTDIR.
  * Fix generation of libpcap.pc with CMake when not building
    a shared library.
  * Support reading version 1.2, which some writers produce,
    and which is the same as 1.0
  * Drop support for text-mode USB captures, as we require a 2.6.27
    or later kernel
  * Bluetooth: fix non-blocking mode. Don't assume that all compilers
    used to build for Linux support the __atomic builtins</changelog>
  <changelog author="pmonreal@suse.com" date="1725624000">- Security fix: [bsc#1230020, CVE-2023-7256]
  * libpcap: double free via addrinfo in sock_initaddress()
  * Add libpcap-CVE-2023-7256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725624001">- Security fix: [bsc#1230034, CVE-2024-8006]
  * libpcap: NULL pointer derefence in pcap_findalldevs_ex()
  * Add libpcap-CVE-2024-8006.patch</changelog>
</package>
<package pkgid="6b8833dd77ecc19d8669eb8425abcec51d801db46ee016e1648473013c907c56" name="libpcap1" arch="aarch64">
  <version epoch="0" ver="1.10.1" rel="150400.3.3.2"/>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="vcizek@suse.com" date="1426248000">- update to 1.7.2
  * Support for filtering Geneve encapsulated packets.
  * Fix handling of zones for BPF on Solaris
  * new DLT for ZWAVE
  * clarifications for read timeouts.
  * added bpf_filter1() with extensions
  * some fixes to compilation without stdint.h
  * EBUSY can now be returned by SNFv3 code.
- refreshed libpcap-ocloexec.patch</changelog>
  <changelog author="astieger@suse.com" date="1430049600">- libpcap 1.7.3:
  * work around a Linux bonding driver bug.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434888000">- remove dependency on libusb-devel, only libusb-1.0 is used for
  build.
- split a -devel-static subpackage that contains the static
  libraries and all the extra dependencies which are not needed
  for dynamic linking.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1460894400">- libpcap-no-old-socket.patch: never fallback to the obsolete
  SOCK_PACKET (kernel &lt; 2.2) interface, this still happens
  for example, when you update the kernel, run iftop and
  the old kernel af_packet module wasn't loaded, program fails
  and the kernel prints "iftop uses obsolete (PF_INET,SOCK_PACKET)"</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036800">- update to 1.8.1
  * Clean up the name-to-DLT mapping table.
  * Add some newer DLT_ values:
  IPMI_HPM_2,ZWAVE_R1_R2,ZWAVE_R3,WATTSTOPPER_DLM,ISO_14443,RDS
  * Fix handling of packet count in the TPACKET_V3 inner loop: GitHub issue
  [#493].
  * Filter out duplicate looped back CAN frames.
  * Fix the handling of loopback filters for IPv6 packets.
  * Add a link-layer header type for RDS (IEC 62106) groups.
  * On Linux, handle all CAN captures with pcap-linux.c, in cooked mode.
  * Removes the need for the "host-endian" link-layer header type.
  * Compile with '-Wused-but-marked-unused' in devel mode if supported
  * Have separate DLTs for big-endian and host-endian SocketCAN headers.
  * Require that version.h be generated: all build procedures we support generate version.h (autoconf, CMake, MSVC)!
  * Properly check for sock_recv() errors.
  * Re-impose some of Winsock's limitations on sock_recv().
  * Replace sprintf() with pcap_snprintf().
  * Fix signature of pcap_stats_ex_remote().
  * Have rpcap_remoteact_getsock() return a SOCKET and supply an "is active" flag.
  * Clean up {DAG, Septel, Myricom SNF}-only builds.
  * pcap_create_interface() needs the interface name on Linux.
  * Clean up hardware time stamp support: the "any" device does not support any time stamp types.
  * Recognize 802.1ad nested VLAN tag in vlan filter.
- dropped libpcap-ocloexec.patch, never upstreamed.
- refreshed libpcap-1.0.0-ppp.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036801">- Allow bluetooth monitoring support unconditionally.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036802">- Formatted the specs file using spec-cleaner.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1487160000">- Dropped patches not required after review
  * libpcap-1.0.0-pcap-bpf.patch
  * libpcap-1.5.2-filter-fix.patch
- Reference of the pull request for the rest of the patches
  * https://github.com/the-tcpdump-group/libpcap/issues/196
- Changed libpcap-1.0.0-s390.patch to the git formatted one</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Do not put conditions about the provides for &lt; 11.0</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- Restore section setting $pic</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1505217600">- Added a patch (disable-remote.diff) to fix applications to FTBFS
  if they define HAVE_REMOTE (deb#843384). Patch taken from Debian.</changelog>
  <changelog author="jengelh@inai.de" date="1519905600">- Fix SRPM group</changelog>
  <changelog author="mkubecek@suse.cz" date="1537790400">- update to 1.9.0
  * add testing system to libpcap, independent of tcpdump
  * changes to how pcap_t is activated
  * update included copies of BSD 4-clause license to 3-clause
  * additions to TCP header parsing, per RFC3168
  * support setting non-blocking mode before activating
  * fixes so that non-AF_INET addresses, are not ==AF_INET6 addresses
  * pcap_compile() in 1.8.0 and later is newly thread-safe
  * bound snaplen for linux tpacket_v2 to ~64k
  * make VLAN filter handle both metadata and inline tags
    (bsc#874131 bsc#993691 fate#321405)
  * D-Bus captures can now be up to 128MB in size
  * add DLT_LORATAP and DLT_VSOCK
  * allow specifying a specific capture protocol
  * RDMA sniffing support for pcap
  * increase minimum autoconf version requirement to 2.64
  * rpcapd: support for xinetd.conf and systemd units
  * provide pkgconfig file
- add BuildRequires for autoconf &gt;= 2.64
- package (newly added) pkgconfig file
- Check-only-VID-in-VLAN-test-issue-461.patch:
  fix "vlan &lt;id&gt;" test to check only VID, not complete TCI
- drop disable-remote.diff (superseded by upstream changes)</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="pmonreal@suse.com" date="1570017600">- Update to 1.9.1 [bsc#1153332]
  * Five CVE-2019-15161, CVE-2019-15162, CVE-2019-15163, CVE-2019-15164, CVE-2019-15165
  * Fixes for CVE-2018-16301, errors in pcapng reading.
  * Mention pcap_get_required_select_timeout() in the main pcap man page
  * Fix pcap-usb-linux.c build on systems with musl
  * Fix assorted man page and other documentation issues
  * Plug assorted memory leaks
  * Documentation changes to use https:
  * Changes to how time stamp calculations are done
  * Lots of tweaks to make newer compilers happier and warning-free and
    to fix instances of C undefined behavior
  * Warn if AC_PROG_CC_C99 can't enable C99 support
  * Rename pcap_set_protocol() to  pcap_set_protocol_linux().
  * Align pcap_t private data on an 8-byte boundary.
  * Fix various error messages
  * Use 64-bit clean API in dag_findalldevs()
  * Fix cleaning up after some errors
  * Work around some ethtool ioctl bugs in newer Linux kernels
  * Add backwards compatibility sections to some man pages
  * Fix autotool configuration on AIX and macOS
  * Don't export bpf_filter_with_aux_data() or struct bpf_aux_data;
    they're internal-only and subject to change
  * Fix pcapng block size checking
  * Fix reading of capture statistics for Linux USB
  * Fix packet size values for Linux USB packets
  * Check only VID in VLAN test in filterss
  * Fix pcap_list_datalinks on 802.11 devices on macOS
  * Fix overflows with very large snapshot length in pcap file
  * Improve parsing of rpcapd configuration file
  * Handle systems without strlcpy() or strlcat() better
  * Fix crashes and other errors with invalid filter expressions
  * Fix use of uninitialized file descriptor in remote capture
  * Fix some CMake issues
  * Fix some divide-by-zero issues with the filter compiler
  * Work around a GNU libc bug in pcap_nametonetaddr()
  * Add support for DLT_LINUX_SLL2
  * Fix handling of the packet-count argument for Myricom SNF devices
  * Fix --disable-rdma in configure script
  * Fix compilation of TurboCap support
  * Constify first argument to pcap_findalldevs_ex()
  * Fix a number of issues when running rpcapd as an inetd-style daemon
  * Fix CMake issues with D-Bus libraries
  * In rpcapd, clean up termination of a capture session
  * Redo remote capture protocol negotiation
  * In rpcapd, report the same error for "invalid user name" and
    "invalid password", to make brute-forcing harder
  * For remote captures, add an error code for "the server requires TLS"
  * Fix building as part of Npcap
  * Allow rpcapd to rebind more rapidly
  * Fix building shared libpcap library on midipix (midipix.org)
  * Fix hack to detect UTF-16LE adapter names on Windows not to go past
    the end of the string
  * Have pcap_dump_open_append() create the dump file if it doesn't exists
  * Fix the maxmum snapshot length for DLT_USBPCAP
  * Use -fPIC when building for 64-bit SPARC on Linux
  * Fix CMake 64-bit library installation directory on some Linux distributions
  * Boost the TPACKET_V3 timeout to the maximum if a timeout of 0 was specified
  * PCAPNG reader applies some sanity checks before doing malloc().
- Drop patch fixed upstream:
  * Check-only-VID-in-VLAN-test-issue-461.patch
- Rebase patch:
  * libpcap-1.0.0-ppp.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1613304000">- Update to 1.10.0
  * Require, and assume, some level of C99 support in the C compiler
  * Add support for capturing on DPDK devices
  * rpcap: support rpcap-over-TLS
  * Fix some memory leaks, including in pcap_compile()
  * Linux: handle systems without AF_INET or AF_UNIX socket support
  * Catch invalid IPv4 addresses in filters
  * Show special Linux BPF offsets symbolically in bpf_image()
    and bpf_dump()
  * Linux: get rid of Wireless Extensions for turning monitor mode on
  * Linux: proper memory sync for PACKET_MMAP
  * Linux: drop support for libnl 1 and 2.
  * Linux: Require PF_PACKET support, and kernel 2.6.27 or later
  * Add DLT_LINUX_SLL2
  * Add a new filter "ifindex" for DLT_LINUX_SLL2 files and live
    Linux captures
  * optimizer: add a hack to try to catch certain optimizer loops
  * Probe CONFIGURATION descriptor of connected USB devices
  * Linux: return error on interface going away, but not if it just
    went down
  * Linux: set socket protocol only after packet ring configured,
    reducing bogus packet drop reports
  * Linux: get ifdrop stats from sysfs.
  * Fix various security issues reported by Charles Smith at
    Tangible Security
  * Fix various security issues reported by Include Security
  * rpcapd: on UN*X, don't tell the client why authentication failed
  * Linux: when adjusting BPF programs, do not subtract the
    SLL[2]_HDR_LEN if the location is negative (special
    metadata offset)
  * Linux: with a timeout of zero, wait indefinitely
  * Linux: clean up support for some non-GNU libc C libraries
  * Increase the maximum snaplen for LINKTYPE_USBPCAP/DLT_USBPCAP
  * Fix handling of some ioctls that fail with "permission denied"
    even when the ioctl isn't supported at all
  * Added support for ICMPv6 types 1-4 as tokens in filters
  * Report the DLT description in error messages
  * Linux: Add support for DSA data link types
  * Linux USB: use the snapshot length to set the buffer size,
    and set the len field to reflect the length in the URB
  * rpcapd: allow rpcapd to rebind more rapidly
  * Add Haiku pcap implementation
  * rpcap: redo protocol version negotiation to avoid problems
    with old servers (it still works with servers using the old
    negotiation, as well as servers not supporting negotiation)
  * Remove (unused) SITA support here.
  * Correctly handle pcapng captures with more than one IDB with a
    snspshot length greater than the supported maximum
- Remove libpcap-no-old-socket.patch
- Rebase libpcap-1.0.0-s390.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1623412800">- Update to 1.10.1
  * Fix "type XXX subtype YYY" giving a parse error
  * Add PCAP_AVAILABLE_1_11.
  * Rename struct bpf_aux_data to avoid NetBSD compile errors
  * Fix cross-builds with older kernels lacking BPF_MOD and BPF_XOR
  * Fix Bison detection for minor version 0.
  * Fix parallel build with FreeBSD make.
  * Get DLT_MATCHING_MAX right in gencode.c on NetBSD.
  * Define timeradd() and timersub() if necessary.
  * Fix Cygwin/MSYS target directories.
  * Fix symlinking with DESTDIR.
  * Fix generation of libpcap.pc with CMake when not building
    a shared library.
  * Support reading version 1.2, which some writers produce,
    and which is the same as 1.0
  * Drop support for text-mode USB captures, as we require a 2.6.27
    or later kernel
  * Bluetooth: fix non-blocking mode. Don't assume that all compilers
    used to build for Linux support the __atomic builtins</changelog>
  <changelog author="pmonreal@suse.com" date="1725624000">- Security fix: [bsc#1230020, CVE-2023-7256]
  * libpcap: double free via addrinfo in sock_initaddress()
  * Add libpcap-CVE-2023-7256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725624001">- Security fix: [bsc#1230034, CVE-2024-8006]
  * libpcap: NULL pointer derefence in pcap_findalldevs_ex()
  * Add libpcap-CVE-2024-8006.patch</changelog>
</package>
<package pkgid="5735e9d26bbac34199b0d2c5e324bc14f0610c477c2ec27d1b76f6f4069484dc" name="libpcap1" arch="s390x">
  <version epoch="0" ver="1.10.1" rel="150400.3.3.2"/>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="vcizek@suse.com" date="1426248000">- update to 1.7.2
  * Support for filtering Geneve encapsulated packets.
  * Fix handling of zones for BPF on Solaris
  * new DLT for ZWAVE
  * clarifications for read timeouts.
  * added bpf_filter1() with extensions
  * some fixes to compilation without stdint.h
  * EBUSY can now be returned by SNFv3 code.
- refreshed libpcap-ocloexec.patch</changelog>
  <changelog author="astieger@suse.com" date="1430049600">- libpcap 1.7.3:
  * work around a Linux bonding driver bug.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434888000">- remove dependency on libusb-devel, only libusb-1.0 is used for
  build.
- split a -devel-static subpackage that contains the static
  libraries and all the extra dependencies which are not needed
  for dynamic linking.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1460894400">- libpcap-no-old-socket.patch: never fallback to the obsolete
  SOCK_PACKET (kernel &lt; 2.2) interface, this still happens
  for example, when you update the kernel, run iftop and
  the old kernel af_packet module wasn't loaded, program fails
  and the kernel prints "iftop uses obsolete (PF_INET,SOCK_PACKET)"</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036800">- update to 1.8.1
  * Clean up the name-to-DLT mapping table.
  * Add some newer DLT_ values:
  IPMI_HPM_2,ZWAVE_R1_R2,ZWAVE_R3,WATTSTOPPER_DLM,ISO_14443,RDS
  * Fix handling of packet count in the TPACKET_V3 inner loop: GitHub issue
  [#493].
  * Filter out duplicate looped back CAN frames.
  * Fix the handling of loopback filters for IPv6 packets.
  * Add a link-layer header type for RDS (IEC 62106) groups.
  * On Linux, handle all CAN captures with pcap-linux.c, in cooked mode.
  * Removes the need for the "host-endian" link-layer header type.
  * Compile with '-Wused-but-marked-unused' in devel mode if supported
  * Have separate DLTs for big-endian and host-endian SocketCAN headers.
  * Require that version.h be generated: all build procedures we support generate version.h (autoconf, CMake, MSVC)!
  * Properly check for sock_recv() errors.
  * Re-impose some of Winsock's limitations on sock_recv().
  * Replace sprintf() with pcap_snprintf().
  * Fix signature of pcap_stats_ex_remote().
  * Have rpcap_remoteact_getsock() return a SOCKET and supply an "is active" flag.
  * Clean up {DAG, Septel, Myricom SNF}-only builds.
  * pcap_create_interface() needs the interface name on Linux.
  * Clean up hardware time stamp support: the "any" device does not support any time stamp types.
  * Recognize 802.1ad nested VLAN tag in vlan filter.
- dropped libpcap-ocloexec.patch, never upstreamed.
- refreshed libpcap-1.0.0-ppp.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036801">- Allow bluetooth monitoring support unconditionally.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036802">- Formatted the specs file using spec-cleaner.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1487160000">- Dropped patches not required after review
  * libpcap-1.0.0-pcap-bpf.patch
  * libpcap-1.5.2-filter-fix.patch
- Reference of the pull request for the rest of the patches
  * https://github.com/the-tcpdump-group/libpcap/issues/196
- Changed libpcap-1.0.0-s390.patch to the git formatted one</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Do not put conditions about the provides for &lt; 11.0</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- Restore section setting $pic</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1505217600">- Added a patch (disable-remote.diff) to fix applications to FTBFS
  if they define HAVE_REMOTE (deb#843384). Patch taken from Debian.</changelog>
  <changelog author="jengelh@inai.de" date="1519905600">- Fix SRPM group</changelog>
  <changelog author="mkubecek@suse.cz" date="1537790400">- update to 1.9.0
  * add testing system to libpcap, independent of tcpdump
  * changes to how pcap_t is activated
  * update included copies of BSD 4-clause license to 3-clause
  * additions to TCP header parsing, per RFC3168
  * support setting non-blocking mode before activating
  * fixes so that non-AF_INET addresses, are not ==AF_INET6 addresses
  * pcap_compile() in 1.8.0 and later is newly thread-safe
  * bound snaplen for linux tpacket_v2 to ~64k
  * make VLAN filter handle both metadata and inline tags
    (bsc#874131 bsc#993691 fate#321405)
  * D-Bus captures can now be up to 128MB in size
  * add DLT_LORATAP and DLT_VSOCK
  * allow specifying a specific capture protocol
  * RDMA sniffing support for pcap
  * increase minimum autoconf version requirement to 2.64
  * rpcapd: support for xinetd.conf and systemd units
  * provide pkgconfig file
- add BuildRequires for autoconf &gt;= 2.64
- package (newly added) pkgconfig file
- Check-only-VID-in-VLAN-test-issue-461.patch:
  fix "vlan &lt;id&gt;" test to check only VID, not complete TCI
- drop disable-remote.diff (superseded by upstream changes)</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="pmonreal@suse.com" date="1570017600">- Update to 1.9.1 [bsc#1153332]
  * Five CVE-2019-15161, CVE-2019-15162, CVE-2019-15163, CVE-2019-15164, CVE-2019-15165
  * Fixes for CVE-2018-16301, errors in pcapng reading.
  * Mention pcap_get_required_select_timeout() in the main pcap man page
  * Fix pcap-usb-linux.c build on systems with musl
  * Fix assorted man page and other documentation issues
  * Plug assorted memory leaks
  * Documentation changes to use https:
  * Changes to how time stamp calculations are done
  * Lots of tweaks to make newer compilers happier and warning-free and
    to fix instances of C undefined behavior
  * Warn if AC_PROG_CC_C99 can't enable C99 support
  * Rename pcap_set_protocol() to  pcap_set_protocol_linux().
  * Align pcap_t private data on an 8-byte boundary.
  * Fix various error messages
  * Use 64-bit clean API in dag_findalldevs()
  * Fix cleaning up after some errors
  * Work around some ethtool ioctl bugs in newer Linux kernels
  * Add backwards compatibility sections to some man pages
  * Fix autotool configuration on AIX and macOS
  * Don't export bpf_filter_with_aux_data() or struct bpf_aux_data;
    they're internal-only and subject to change
  * Fix pcapng block size checking
  * Fix reading of capture statistics for Linux USB
  * Fix packet size values for Linux USB packets
  * Check only VID in VLAN test in filterss
  * Fix pcap_list_datalinks on 802.11 devices on macOS
  * Fix overflows with very large snapshot length in pcap file
  * Improve parsing of rpcapd configuration file
  * Handle systems without strlcpy() or strlcat() better
  * Fix crashes and other errors with invalid filter expressions
  * Fix use of uninitialized file descriptor in remote capture
  * Fix some CMake issues
  * Fix some divide-by-zero issues with the filter compiler
  * Work around a GNU libc bug in pcap_nametonetaddr()
  * Add support for DLT_LINUX_SLL2
  * Fix handling of the packet-count argument for Myricom SNF devices
  * Fix --disable-rdma in configure script
  * Fix compilation of TurboCap support
  * Constify first argument to pcap_findalldevs_ex()
  * Fix a number of issues when running rpcapd as an inetd-style daemon
  * Fix CMake issues with D-Bus libraries
  * In rpcapd, clean up termination of a capture session
  * Redo remote capture protocol negotiation
  * In rpcapd, report the same error for "invalid user name" and
    "invalid password", to make brute-forcing harder
  * For remote captures, add an error code for "the server requires TLS"
  * Fix building as part of Npcap
  * Allow rpcapd to rebind more rapidly
  * Fix building shared libpcap library on midipix (midipix.org)
  * Fix hack to detect UTF-16LE adapter names on Windows not to go past
    the end of the string
  * Have pcap_dump_open_append() create the dump file if it doesn't exists
  * Fix the maxmum snapshot length for DLT_USBPCAP
  * Use -fPIC when building for 64-bit SPARC on Linux
  * Fix CMake 64-bit library installation directory on some Linux distributions
  * Boost the TPACKET_V3 timeout to the maximum if a timeout of 0 was specified
  * PCAPNG reader applies some sanity checks before doing malloc().
- Drop patch fixed upstream:
  * Check-only-VID-in-VLAN-test-issue-461.patch
- Rebase patch:
  * libpcap-1.0.0-ppp.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1613304000">- Update to 1.10.0
  * Require, and assume, some level of C99 support in the C compiler
  * Add support for capturing on DPDK devices
  * rpcap: support rpcap-over-TLS
  * Fix some memory leaks, including in pcap_compile()
  * Linux: handle systems without AF_INET or AF_UNIX socket support
  * Catch invalid IPv4 addresses in filters
  * Show special Linux BPF offsets symbolically in bpf_image()
    and bpf_dump()
  * Linux: get rid of Wireless Extensions for turning monitor mode on
  * Linux: proper memory sync for PACKET_MMAP
  * Linux: drop support for libnl 1 and 2.
  * Linux: Require PF_PACKET support, and kernel 2.6.27 or later
  * Add DLT_LINUX_SLL2
  * Add a new filter "ifindex" for DLT_LINUX_SLL2 files and live
    Linux captures
  * optimizer: add a hack to try to catch certain optimizer loops
  * Probe CONFIGURATION descriptor of connected USB devices
  * Linux: return error on interface going away, but not if it just
    went down
  * Linux: set socket protocol only after packet ring configured,
    reducing bogus packet drop reports
  * Linux: get ifdrop stats from sysfs.
  * Fix various security issues reported by Charles Smith at
    Tangible Security
  * Fix various security issues reported by Include Security
  * rpcapd: on UN*X, don't tell the client why authentication failed
  * Linux: when adjusting BPF programs, do not subtract the
    SLL[2]_HDR_LEN if the location is negative (special
    metadata offset)
  * Linux: with a timeout of zero, wait indefinitely
  * Linux: clean up support for some non-GNU libc C libraries
  * Increase the maximum snaplen for LINKTYPE_USBPCAP/DLT_USBPCAP
  * Fix handling of some ioctls that fail with "permission denied"
    even when the ioctl isn't supported at all
  * Added support for ICMPv6 types 1-4 as tokens in filters
  * Report the DLT description in error messages
  * Linux: Add support for DSA data link types
  * Linux USB: use the snapshot length to set the buffer size,
    and set the len field to reflect the length in the URB
  * rpcapd: allow rpcapd to rebind more rapidly
  * Add Haiku pcap implementation
  * rpcap: redo protocol version negotiation to avoid problems
    with old servers (it still works with servers using the old
    negotiation, as well as servers not supporting negotiation)
  * Remove (unused) SITA support here.
  * Correctly handle pcapng captures with more than one IDB with a
    snspshot length greater than the supported maximum
- Remove libpcap-no-old-socket.patch
- Rebase libpcap-1.0.0-s390.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1623412800">- Update to 1.10.1
  * Fix "type XXX subtype YYY" giving a parse error
  * Add PCAP_AVAILABLE_1_11.
  * Rename struct bpf_aux_data to avoid NetBSD compile errors
  * Fix cross-builds with older kernels lacking BPF_MOD and BPF_XOR
  * Fix Bison detection for minor version 0.
  * Fix parallel build with FreeBSD make.
  * Get DLT_MATCHING_MAX right in gencode.c on NetBSD.
  * Define timeradd() and timersub() if necessary.
  * Fix Cygwin/MSYS target directories.
  * Fix symlinking with DESTDIR.
  * Fix generation of libpcap.pc with CMake when not building
    a shared library.
  * Support reading version 1.2, which some writers produce,
    and which is the same as 1.0
  * Drop support for text-mode USB captures, as we require a 2.6.27
    or later kernel
  * Bluetooth: fix non-blocking mode. Don't assume that all compilers
    used to build for Linux support the __atomic builtins</changelog>
  <changelog author="pmonreal@suse.com" date="1725624000">- Security fix: [bsc#1230020, CVE-2023-7256]
  * libpcap: double free via addrinfo in sock_initaddress()
  * Add libpcap-CVE-2023-7256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725624001">- Security fix: [bsc#1230034, CVE-2024-8006]
  * libpcap: NULL pointer derefence in pcap_findalldevs_ex()
  * Add libpcap-CVE-2024-8006.patch</changelog>
</package>
<package pkgid="c24bc478f6e1aefa5448451ea68ef9e0802cfe78a74578e2e5f5aa5ee4a3bea5" name="libpcap1" arch="x86_64">
  <version epoch="0" ver="1.10.1" rel="150400.3.3.2"/>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="vcizek@suse.com" date="1426248000">- update to 1.7.2
  * Support for filtering Geneve encapsulated packets.
  * Fix handling of zones for BPF on Solaris
  * new DLT for ZWAVE
  * clarifications for read timeouts.
  * added bpf_filter1() with extensions
  * some fixes to compilation without stdint.h
  * EBUSY can now be returned by SNFv3 code.
- refreshed libpcap-ocloexec.patch</changelog>
  <changelog author="astieger@suse.com" date="1430049600">- libpcap 1.7.3:
  * work around a Linux bonding driver bug.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434888000">- remove dependency on libusb-devel, only libusb-1.0 is used for
  build.
- split a -devel-static subpackage that contains the static
  libraries and all the extra dependencies which are not needed
  for dynamic linking.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1460894400">- libpcap-no-old-socket.patch: never fallback to the obsolete
  SOCK_PACKET (kernel &lt; 2.2) interface, this still happens
  for example, when you update the kernel, run iftop and
  the old kernel af_packet module wasn't loaded, program fails
  and the kernel prints "iftop uses obsolete (PF_INET,SOCK_PACKET)"</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036800">- update to 1.8.1
  * Clean up the name-to-DLT mapping table.
  * Add some newer DLT_ values:
  IPMI_HPM_2,ZWAVE_R1_R2,ZWAVE_R3,WATTSTOPPER_DLM,ISO_14443,RDS
  * Fix handling of packet count in the TPACKET_V3 inner loop: GitHub issue
  [#493].
  * Filter out duplicate looped back CAN frames.
  * Fix the handling of loopback filters for IPv6 packets.
  * Add a link-layer header type for RDS (IEC 62106) groups.
  * On Linux, handle all CAN captures with pcap-linux.c, in cooked mode.
  * Removes the need for the "host-endian" link-layer header type.
  * Compile with '-Wused-but-marked-unused' in devel mode if supported
  * Have separate DLTs for big-endian and host-endian SocketCAN headers.
  * Require that version.h be generated: all build procedures we support generate version.h (autoconf, CMake, MSVC)!
  * Properly check for sock_recv() errors.
  * Re-impose some of Winsock's limitations on sock_recv().
  * Replace sprintf() with pcap_snprintf().
  * Fix signature of pcap_stats_ex_remote().
  * Have rpcap_remoteact_getsock() return a SOCKET and supply an "is active" flag.
  * Clean up {DAG, Septel, Myricom SNF}-only builds.
  * pcap_create_interface() needs the interface name on Linux.
  * Clean up hardware time stamp support: the "any" device does not support any time stamp types.
  * Recognize 802.1ad nested VLAN tag in vlan filter.
- dropped libpcap-ocloexec.patch, never upstreamed.
- refreshed libpcap-1.0.0-ppp.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036801">- Allow bluetooth monitoring support unconditionally.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036802">- Formatted the specs file using spec-cleaner.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1487160000">- Dropped patches not required after review
  * libpcap-1.0.0-pcap-bpf.patch
  * libpcap-1.5.2-filter-fix.patch
- Reference of the pull request for the rest of the patches
  * https://github.com/the-tcpdump-group/libpcap/issues/196
- Changed libpcap-1.0.0-s390.patch to the git formatted one</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Do not put conditions about the provides for &lt; 11.0</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- Restore section setting $pic</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1505217600">- Added a patch (disable-remote.diff) to fix applications to FTBFS
  if they define HAVE_REMOTE (deb#843384). Patch taken from Debian.</changelog>
  <changelog author="jengelh@inai.de" date="1519905600">- Fix SRPM group</changelog>
  <changelog author="mkubecek@suse.cz" date="1537790400">- update to 1.9.0
  * add testing system to libpcap, independent of tcpdump
  * changes to how pcap_t is activated
  * update included copies of BSD 4-clause license to 3-clause
  * additions to TCP header parsing, per RFC3168
  * support setting non-blocking mode before activating
  * fixes so that non-AF_INET addresses, are not ==AF_INET6 addresses
  * pcap_compile() in 1.8.0 and later is newly thread-safe
  * bound snaplen for linux tpacket_v2 to ~64k
  * make VLAN filter handle both metadata and inline tags
    (bsc#874131 bsc#993691 fate#321405)
  * D-Bus captures can now be up to 128MB in size
  * add DLT_LORATAP and DLT_VSOCK
  * allow specifying a specific capture protocol
  * RDMA sniffing support for pcap
  * increase minimum autoconf version requirement to 2.64
  * rpcapd: support for xinetd.conf and systemd units
  * provide pkgconfig file
- add BuildRequires for autoconf &gt;= 2.64
- package (newly added) pkgconfig file
- Check-only-VID-in-VLAN-test-issue-461.patch:
  fix "vlan &lt;id&gt;" test to check only VID, not complete TCI
- drop disable-remote.diff (superseded by upstream changes)</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="pmonreal@suse.com" date="1570017600">- Update to 1.9.1 [bsc#1153332]
  * Five CVE-2019-15161, CVE-2019-15162, CVE-2019-15163, CVE-2019-15164, CVE-2019-15165
  * Fixes for CVE-2018-16301, errors in pcapng reading.
  * Mention pcap_get_required_select_timeout() in the main pcap man page
  * Fix pcap-usb-linux.c build on systems with musl
  * Fix assorted man page and other documentation issues
  * Plug assorted memory leaks
  * Documentation changes to use https:
  * Changes to how time stamp calculations are done
  * Lots of tweaks to make newer compilers happier and warning-free and
    to fix instances of C undefined behavior
  * Warn if AC_PROG_CC_C99 can't enable C99 support
  * Rename pcap_set_protocol() to  pcap_set_protocol_linux().
  * Align pcap_t private data on an 8-byte boundary.
  * Fix various error messages
  * Use 64-bit clean API in dag_findalldevs()
  * Fix cleaning up after some errors
  * Work around some ethtool ioctl bugs in newer Linux kernels
  * Add backwards compatibility sections to some man pages
  * Fix autotool configuration on AIX and macOS
  * Don't export bpf_filter_with_aux_data() or struct bpf_aux_data;
    they're internal-only and subject to change
  * Fix pcapng block size checking
  * Fix reading of capture statistics for Linux USB
  * Fix packet size values for Linux USB packets
  * Check only VID in VLAN test in filterss
  * Fix pcap_list_datalinks on 802.11 devices on macOS
  * Fix overflows with very large snapshot length in pcap file
  * Improve parsing of rpcapd configuration file
  * Handle systems without strlcpy() or strlcat() better
  * Fix crashes and other errors with invalid filter expressions
  * Fix use of uninitialized file descriptor in remote capture
  * Fix some CMake issues
  * Fix some divide-by-zero issues with the filter compiler
  * Work around a GNU libc bug in pcap_nametonetaddr()
  * Add support for DLT_LINUX_SLL2
  * Fix handling of the packet-count argument for Myricom SNF devices
  * Fix --disable-rdma in configure script
  * Fix compilation of TurboCap support
  * Constify first argument to pcap_findalldevs_ex()
  * Fix a number of issues when running rpcapd as an inetd-style daemon
  * Fix CMake issues with D-Bus libraries
  * In rpcapd, clean up termination of a capture session
  * Redo remote capture protocol negotiation
  * In rpcapd, report the same error for "invalid user name" and
    "invalid password", to make brute-forcing harder
  * For remote captures, add an error code for "the server requires TLS"
  * Fix building as part of Npcap
  * Allow rpcapd to rebind more rapidly
  * Fix building shared libpcap library on midipix (midipix.org)
  * Fix hack to detect UTF-16LE adapter names on Windows not to go past
    the end of the string
  * Have pcap_dump_open_append() create the dump file if it doesn't exists
  * Fix the maxmum snapshot length for DLT_USBPCAP
  * Use -fPIC when building for 64-bit SPARC on Linux
  * Fix CMake 64-bit library installation directory on some Linux distributions
  * Boost the TPACKET_V3 timeout to the maximum if a timeout of 0 was specified
  * PCAPNG reader applies some sanity checks before doing malloc().
- Drop patch fixed upstream:
  * Check-only-VID-in-VLAN-test-issue-461.patch
- Rebase patch:
  * libpcap-1.0.0-ppp.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1613304000">- Update to 1.10.0
  * Require, and assume, some level of C99 support in the C compiler
  * Add support for capturing on DPDK devices
  * rpcap: support rpcap-over-TLS
  * Fix some memory leaks, including in pcap_compile()
  * Linux: handle systems without AF_INET or AF_UNIX socket support
  * Catch invalid IPv4 addresses in filters
  * Show special Linux BPF offsets symbolically in bpf_image()
    and bpf_dump()
  * Linux: get rid of Wireless Extensions for turning monitor mode on
  * Linux: proper memory sync for PACKET_MMAP
  * Linux: drop support for libnl 1 and 2.
  * Linux: Require PF_PACKET support, and kernel 2.6.27 or later
  * Add DLT_LINUX_SLL2
  * Add a new filter "ifindex" for DLT_LINUX_SLL2 files and live
    Linux captures
  * optimizer: add a hack to try to catch certain optimizer loops
  * Probe CONFIGURATION descriptor of connected USB devices
  * Linux: return error on interface going away, but not if it just
    went down
  * Linux: set socket protocol only after packet ring configured,
    reducing bogus packet drop reports
  * Linux: get ifdrop stats from sysfs.
  * Fix various security issues reported by Charles Smith at
    Tangible Security
  * Fix various security issues reported by Include Security
  * rpcapd: on UN*X, don't tell the client why authentication failed
  * Linux: when adjusting BPF programs, do not subtract the
    SLL[2]_HDR_LEN if the location is negative (special
    metadata offset)
  * Linux: with a timeout of zero, wait indefinitely
  * Linux: clean up support for some non-GNU libc C libraries
  * Increase the maximum snaplen for LINKTYPE_USBPCAP/DLT_USBPCAP
  * Fix handling of some ioctls that fail with "permission denied"
    even when the ioctl isn't supported at all
  * Added support for ICMPv6 types 1-4 as tokens in filters
  * Report the DLT description in error messages
  * Linux: Add support for DSA data link types
  * Linux USB: use the snapshot length to set the buffer size,
    and set the len field to reflect the length in the URB
  * rpcapd: allow rpcapd to rebind more rapidly
  * Add Haiku pcap implementation
  * rpcap: redo protocol version negotiation to avoid problems
    with old servers (it still works with servers using the old
    negotiation, as well as servers not supporting negotiation)
  * Remove (unused) SITA support here.
  * Correctly handle pcapng captures with more than one IDB with a
    snspshot length greater than the supported maximum
- Remove libpcap-no-old-socket.patch
- Rebase libpcap-1.0.0-s390.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1623412800">- Update to 1.10.1
  * Fix "type XXX subtype YYY" giving a parse error
  * Add PCAP_AVAILABLE_1_11.
  * Rename struct bpf_aux_data to avoid NetBSD compile errors
  * Fix cross-builds with older kernels lacking BPF_MOD and BPF_XOR
  * Fix Bison detection for minor version 0.
  * Fix parallel build with FreeBSD make.
  * Get DLT_MATCHING_MAX right in gencode.c on NetBSD.
  * Define timeradd() and timersub() if necessary.
  * Fix Cygwin/MSYS target directories.
  * Fix symlinking with DESTDIR.
  * Fix generation of libpcap.pc with CMake when not building
    a shared library.
  * Support reading version 1.2, which some writers produce,
    and which is the same as 1.0
  * Drop support for text-mode USB captures, as we require a 2.6.27
    or later kernel
  * Bluetooth: fix non-blocking mode. Don't assume that all compilers
    used to build for Linux support the __atomic builtins</changelog>
  <changelog author="pmonreal@suse.com" date="1725624000">- Security fix: [bsc#1230020, CVE-2023-7256]
  * libpcap: double free via addrinfo in sock_initaddress()
  * Add libpcap-CVE-2023-7256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725624001">- Security fix: [bsc#1230034, CVE-2024-8006]
  * libpcap: NULL pointer derefence in pcap_findalldevs_ex()
  * Add libpcap-CVE-2024-8006.patch</changelog>
</package>
<package pkgid="35d69831aa18dc7537c8a096587adf88792e6abe1ce8d04055f3b48dd0161d17" name="libpci3" arch="aarch64">
  <version epoch="0" ver="3.5.6" rel="150300.13.6.1"/>
  <changelog author="tchvatal@suse.com" date="1416312000">- Version bump to 3.3.0:
  * Device names exported by BIOS are displayed on Linux.
  * On Linux systems, HWDB is used to look up device names
    when our ID database gives no match. (More precisely,
    HWDB is consulted after local pci.ids, but before using
    network to query online pci.ids.) Thanks to Tom Gundersen
    for the initial patch.
  * Added experimental back-end for OS X / Darwin. Thanks to
    Richard Yao for providing it.
  * Filters now support matching by device class. Original
    patch by Matthew Wilcox, wrappers for ABI compatibility
    by me.
  * Interrupt Pin and Interrupt Line registers are displayed
    for bridge devices, too.
  * Several portability bugs have been fixed.
  * Several typos have been fixed. Also, use of questionable
    constructs in man pages has been reduced.
  * PCIe link capabilities now include the ASPMOptComp bit.
  * The "CRS Software Visibility" bit is now decoded properly.
  * Updated pci.ids to the current snapshot of the database.
- Refresh patch:
  * pciutils-endianh.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1441540800">- Update to 3.3.1
  * Removed hacks for backward compatibility with Linux libc5,
    which were breaking newer non-glibc Linux systems. Thanks
    to Felix Janda.
  * Display VirtIO vendor-specific capability. Patch by Gerd
    Hoffmann.
  * Fixed memory leak in name cache.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="mpluskal@suse.com" date="1447416000">- Update to 3.4.0
  * On Linux, we report NUMA nodes of devices.
  * The sysfs back-end does not die on read errors
    of optional attributes. Instead, a warning is produced.
  * Fixed several minor bugs.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="jengelh@inai.de" date="1448107200">- Summary update</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 3.4.1:
  * New capabilities decoded: Process Address Space, Page Request
    Interface, Enhanced Allocation. Thanks to David Daney and
    David Woodhouse.
  * DevCap SlotPowerLimit is now decoded for all components with
    upstream ports.</changelog>
  <changelog author="mpluskal@suse.com" date="1463745600">- Update to version 3.5.0:
  * New capabilities decoded: Downstream Port Containment,
    Precision Time Measurement. Thanks to Keith Busch and
    Jonathan Yong.
  * Domain numbers extended to 31 bits. This will be used by the
    Linux kernel on some machines in near future.
  * Enhanced allocation regions are now decoded on Linux.
  * The NetBSD back-end supports PCIe extended configuration space.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="mpluskal@suse.com" date="1464177600">- Update to version 3.5.1:
  * Fixed symbol versioning of pci_init().</changelog>
  <changelog author="mpluskal@suse.com" date="1488196800">- Update to version 3.5.4:
  * Previous version broke compilation on systems, for which
    lib/types.h did not provide a 64-bit integer type. It is
    provided everywhere now.
- Changes for version 3.5.3:
  * When lspci looks for Linux kernel modules, it uses the default
  path to module directory provided by libkmod. Previously,
  it tried to construct the path explicitly, which need not
  work on all systems.
  * Improved formatting of memory and I/O ranges behind a bridge.
  * PCIe link capabilities now display GEN4 speed (16GT/s).
  * PCIe device capabilities now show bits related to atomic
    operations.
- Changes for version 3.5.2:
  * The L1 power management capability is now decoded more
  thoroughly. Thanks to Rajat Jain for the patch.
  * The table of configuration registers used by setpci
  had a bug in the definition of SUBSYSTEM_VENDOR_ID.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to version 3.5.5
  * Better decoding of AER capability.
  * "Slot Implemented" flag is decoded for PCI/PCI-X to PCIe bridges.
  * Minor fixes of decoding other capabilities.
  * As usual, updated pci.ids to the current snapshot of the
    database.
- cleanup with spec-cleaner
- switch from ftp to https
- track signature</changelog>
  <changelog author="aavindraa@gmail.com" date="1511092800">- Update to version 3.5.6
  * MN VPD keyword is decoded correctly.
  * As usual, updated pci.ids to the current snapshot of the
    database.
  * FreeBSD back-end: read-only access for non-root, support
    DragonFly BSD, support extended config space.</changelog>
  <changelog author="msuchanek@suse.com" date="1590062400">- Fix lspci outputs few of the VPD data fields are displayed as unknown (bsc#1170554, ltc#185587).
  Added:
  * pciutils-VPD-When-printing-item-IDs-escape-non-ASCII-characte.patch
  * pciutils-VPD-Cleanup.patch
  * pciutils-Add-decoding-of-vendor-specific-VPD-fields.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603972800">- Add decode support for RCECs [jsc#SLE-13735]
- added patches
  https://github.com/pciutils/pciutils/commit/e12bd01eea67ca8cf539263124843ba281eb6ecc
  + pciutils-add-decode-support-for-RCECs.patch</changelog>
  <changelog author="vliaskovitis@suse.com" date="1643025600">- Add pciutils-Add-PCIe-5.0-data-rate-32-GT-s-support.patch
  Add pciutils-Add-PCIe-6.0-data-rate-64-GT-s-support.patch
  (bsc#1192862)</changelog>
  <changelog author="psimons@suse.com" date="1696420800">- Apply "lspci-Fixed-buffer-overflows-in-ls-tree.c.patch" to fix a
  buffer overflow error that would cause lspci to crash on systems
  with complex topologies. [bsc#1215265]
- Add "pciutils.keyring" so that the tarball's signature can be
  verified at build time.
- Use "%license" tag instead of "%doc" to install the package's
  license file.</changelog>
</package>
<package pkgid="e3d199d1397a78dbe612f534d6818657fb5cd9ebc2b591e2107c44586f7f2470" name="libpci3" arch="s390x">
  <version epoch="0" ver="3.5.6" rel="150300.13.6.1"/>
  <changelog author="tchvatal@suse.com" date="1416312000">- Version bump to 3.3.0:
  * Device names exported by BIOS are displayed on Linux.
  * On Linux systems, HWDB is used to look up device names
    when our ID database gives no match. (More precisely,
    HWDB is consulted after local pci.ids, but before using
    network to query online pci.ids.) Thanks to Tom Gundersen
    for the initial patch.
  * Added experimental back-end for OS X / Darwin. Thanks to
    Richard Yao for providing it.
  * Filters now support matching by device class. Original
    patch by Matthew Wilcox, wrappers for ABI compatibility
    by me.
  * Interrupt Pin and Interrupt Line registers are displayed
    for bridge devices, too.
  * Several portability bugs have been fixed.
  * Several typos have been fixed. Also, use of questionable
    constructs in man pages has been reduced.
  * PCIe link capabilities now include the ASPMOptComp bit.
  * The "CRS Software Visibility" bit is now decoded properly.
  * Updated pci.ids to the current snapshot of the database.
- Refresh patch:
  * pciutils-endianh.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1441540800">- Update to 3.3.1
  * Removed hacks for backward compatibility with Linux libc5,
    which were breaking newer non-glibc Linux systems. Thanks
    to Felix Janda.
  * Display VirtIO vendor-specific capability. Patch by Gerd
    Hoffmann.
  * Fixed memory leak in name cache.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="mpluskal@suse.com" date="1447416000">- Update to 3.4.0
  * On Linux, we report NUMA nodes of devices.
  * The sysfs back-end does not die on read errors
    of optional attributes. Instead, a warning is produced.
  * Fixed several minor bugs.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="jengelh@inai.de" date="1448107200">- Summary update</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 3.4.1:
  * New capabilities decoded: Process Address Space, Page Request
    Interface, Enhanced Allocation. Thanks to David Daney and
    David Woodhouse.
  * DevCap SlotPowerLimit is now decoded for all components with
    upstream ports.</changelog>
  <changelog author="mpluskal@suse.com" date="1463745600">- Update to version 3.5.0:
  * New capabilities decoded: Downstream Port Containment,
    Precision Time Measurement. Thanks to Keith Busch and
    Jonathan Yong.
  * Domain numbers extended to 31 bits. This will be used by the
    Linux kernel on some machines in near future.
  * Enhanced allocation regions are now decoded on Linux.
  * The NetBSD back-end supports PCIe extended configuration space.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="mpluskal@suse.com" date="1464177600">- Update to version 3.5.1:
  * Fixed symbol versioning of pci_init().</changelog>
  <changelog author="mpluskal@suse.com" date="1488196800">- Update to version 3.5.4:
  * Previous version broke compilation on systems, for which
    lib/types.h did not provide a 64-bit integer type. It is
    provided everywhere now.
- Changes for version 3.5.3:
  * When lspci looks for Linux kernel modules, it uses the default
  path to module directory provided by libkmod. Previously,
  it tried to construct the path explicitly, which need not
  work on all systems.
  * Improved formatting of memory and I/O ranges behind a bridge.
  * PCIe link capabilities now display GEN4 speed (16GT/s).
  * PCIe device capabilities now show bits related to atomic
    operations.
- Changes for version 3.5.2:
  * The L1 power management capability is now decoded more
  thoroughly. Thanks to Rajat Jain for the patch.
  * The table of configuration registers used by setpci
  had a bug in the definition of SUBSYSTEM_VENDOR_ID.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to version 3.5.5
  * Better decoding of AER capability.
  * "Slot Implemented" flag is decoded for PCI/PCI-X to PCIe bridges.
  * Minor fixes of decoding other capabilities.
  * As usual, updated pci.ids to the current snapshot of the
    database.
- cleanup with spec-cleaner
- switch from ftp to https
- track signature</changelog>
  <changelog author="aavindraa@gmail.com" date="1511092800">- Update to version 3.5.6
  * MN VPD keyword is decoded correctly.
  * As usual, updated pci.ids to the current snapshot of the
    database.
  * FreeBSD back-end: read-only access for non-root, support
    DragonFly BSD, support extended config space.</changelog>
  <changelog author="msuchanek@suse.com" date="1590062400">- Fix lspci outputs few of the VPD data fields are displayed as unknown (bsc#1170554, ltc#185587).
  Added:
  * pciutils-VPD-When-printing-item-IDs-escape-non-ASCII-characte.patch
  * pciutils-VPD-Cleanup.patch
  * pciutils-Add-decoding-of-vendor-specific-VPD-fields.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603972800">- Add decode support for RCECs [jsc#SLE-13735]
- added patches
  https://github.com/pciutils/pciutils/commit/e12bd01eea67ca8cf539263124843ba281eb6ecc
  + pciutils-add-decode-support-for-RCECs.patch</changelog>
  <changelog author="vliaskovitis@suse.com" date="1643025600">- Add pciutils-Add-PCIe-5.0-data-rate-32-GT-s-support.patch
  Add pciutils-Add-PCIe-6.0-data-rate-64-GT-s-support.patch
  (bsc#1192862)</changelog>
  <changelog author="psimons@suse.com" date="1696420800">- Apply "lspci-Fixed-buffer-overflows-in-ls-tree.c.patch" to fix a
  buffer overflow error that would cause lspci to crash on systems
  with complex topologies. [bsc#1215265]
- Add "pciutils.keyring" so that the tarball's signature can be
  verified at build time.
- Use "%license" tag instead of "%doc" to install the package's
  license file.</changelog>
</package>
<package pkgid="da2c4916f7a7352e8c0426e4fc12b9bb803773e1b6e09ca63f7443cd16e0b935" name="libpci3" arch="x86_64">
  <version epoch="0" ver="3.5.6" rel="150300.13.6.1"/>
  <changelog author="tchvatal@suse.com" date="1416312000">- Version bump to 3.3.0:
  * Device names exported by BIOS are displayed on Linux.
  * On Linux systems, HWDB is used to look up device names
    when our ID database gives no match. (More precisely,
    HWDB is consulted after local pci.ids, but before using
    network to query online pci.ids.) Thanks to Tom Gundersen
    for the initial patch.
  * Added experimental back-end for OS X / Darwin. Thanks to
    Richard Yao for providing it.
  * Filters now support matching by device class. Original
    patch by Matthew Wilcox, wrappers for ABI compatibility
    by me.
  * Interrupt Pin and Interrupt Line registers are displayed
    for bridge devices, too.
  * Several portability bugs have been fixed.
  * Several typos have been fixed. Also, use of questionable
    constructs in man pages has been reduced.
  * PCIe link capabilities now include the ASPMOptComp bit.
  * The "CRS Software Visibility" bit is now decoded properly.
  * Updated pci.ids to the current snapshot of the database.
- Refresh patch:
  * pciutils-endianh.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1441540800">- Update to 3.3.1
  * Removed hacks for backward compatibility with Linux libc5,
    which were breaking newer non-glibc Linux systems. Thanks
    to Felix Janda.
  * Display VirtIO vendor-specific capability. Patch by Gerd
    Hoffmann.
  * Fixed memory leak in name cache.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="mpluskal@suse.com" date="1447416000">- Update to 3.4.0
  * On Linux, we report NUMA nodes of devices.
  * The sysfs back-end does not die on read errors
    of optional attributes. Instead, a warning is produced.
  * Fixed several minor bugs.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="jengelh@inai.de" date="1448107200">- Summary update</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 3.4.1:
  * New capabilities decoded: Process Address Space, Page Request
    Interface, Enhanced Allocation. Thanks to David Daney and
    David Woodhouse.
  * DevCap SlotPowerLimit is now decoded for all components with
    upstream ports.</changelog>
  <changelog author="mpluskal@suse.com" date="1463745600">- Update to version 3.5.0:
  * New capabilities decoded: Downstream Port Containment,
    Precision Time Measurement. Thanks to Keith Busch and
    Jonathan Yong.
  * Domain numbers extended to 31 bits. This will be used by the
    Linux kernel on some machines in near future.
  * Enhanced allocation regions are now decoded on Linux.
  * The NetBSD back-end supports PCIe extended configuration space.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="mpluskal@suse.com" date="1464177600">- Update to version 3.5.1:
  * Fixed symbol versioning of pci_init().</changelog>
  <changelog author="mpluskal@suse.com" date="1488196800">- Update to version 3.5.4:
  * Previous version broke compilation on systems, for which
    lib/types.h did not provide a 64-bit integer type. It is
    provided everywhere now.
- Changes for version 3.5.3:
  * When lspci looks for Linux kernel modules, it uses the default
  path to module directory provided by libkmod. Previously,
  it tried to construct the path explicitly, which need not
  work on all systems.
  * Improved formatting of memory and I/O ranges behind a bridge.
  * PCIe link capabilities now display GEN4 speed (16GT/s).
  * PCIe device capabilities now show bits related to atomic
    operations.
- Changes for version 3.5.2:
  * The L1 power management capability is now decoded more
  thoroughly. Thanks to Rajat Jain for the patch.
  * The table of configuration registers used by setpci
  had a bug in the definition of SUBSYSTEM_VENDOR_ID.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to version 3.5.5
  * Better decoding of AER capability.
  * "Slot Implemented" flag is decoded for PCI/PCI-X to PCIe bridges.
  * Minor fixes of decoding other capabilities.
  * As usual, updated pci.ids to the current snapshot of the
    database.
- cleanup with spec-cleaner
- switch from ftp to https
- track signature</changelog>
  <changelog author="aavindraa@gmail.com" date="1511092800">- Update to version 3.5.6
  * MN VPD keyword is decoded correctly.
  * As usual, updated pci.ids to the current snapshot of the
    database.
  * FreeBSD back-end: read-only access for non-root, support
    DragonFly BSD, support extended config space.</changelog>
  <changelog author="msuchanek@suse.com" date="1590062400">- Fix lspci outputs few of the VPD data fields are displayed as unknown (bsc#1170554, ltc#185587).
  Added:
  * pciutils-VPD-When-printing-item-IDs-escape-non-ASCII-characte.patch
  * pciutils-VPD-Cleanup.patch
  * pciutils-Add-decoding-of-vendor-specific-VPD-fields.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603972800">- Add decode support for RCECs [jsc#SLE-13735]
- added patches
  https://github.com/pciutils/pciutils/commit/e12bd01eea67ca8cf539263124843ba281eb6ecc
  + pciutils-add-decode-support-for-RCECs.patch</changelog>
  <changelog author="vliaskovitis@suse.com" date="1643025600">- Add pciutils-Add-PCIe-5.0-data-rate-32-GT-s-support.patch
  Add pciutils-Add-PCIe-6.0-data-rate-64-GT-s-support.patch
  (bsc#1192862)</changelog>
  <changelog author="psimons@suse.com" date="1696420800">- Apply "lspci-Fixed-buffer-overflows-in-ls-tree.c.patch" to fix a
  buffer overflow error that would cause lspci to crash on systems
  with complex topologies. [bsc#1215265]
- Add "pciutils.keyring" so that the tarball's signature can be
  verified at build time.
- Use "%license" tag instead of "%doc" to install the package's
  license file.</changelog>
</package>
<package pkgid="598585cbbb82bf825511d4e2b55206f96d713ff92b191a01ca8a0cfeabba6278" name="libpcsclite1" arch="aarch64">
  <version epoch="0" ver="1.9.4" rel="150400.3.2.1"/>
  <changelog author="wr@rosenauer.org" date="1481284800">- Updated to version 1.8.19:
  * SCardGetStatusChange(): Fix a (rare) race condition
  * Doxygen updates
  * pcsc-spy:
  - fix display of execution time
  - log the thread number in the results
  * Some other minor improvements</changelog>
  <changelog author="wr@rosenauer.org" date="1483099200">- Updated to version 1.8.20
  * Fix a crash and potential security issue in pcscd (bsc#1017902,
    CVE-2016-10109, CWE-415, CWE-416)</changelog>
  <changelog author="wr@rosenauer.org" date="1495454400">- Updated to version 1.8.21
  * SCardCancel():
  - fix a race condition bug
  - fix a possible use after free
  - improve Doxygen documentation
  * SCardGetStatusChange(): fix a race condition when a reader is removed
  * SCardDisconnect(): fix status update for SCARD_UNPOWER_CARD
  * pcsc_stringify_error(): use Thread-local storage
  * pcsc_stringify_error() now returns a const char *
  * SCardControl() may return SCARD_E_INSUFFICIENT_BUFFER when
    pbRecvBuffer is not big enough to receive the card response.
  * Fix compilation error with GCC 4.9
  * UnitaryTests: add support of Python 3
  * pcsc-spy: add support of Python 3
  * Some other minor improvements</changelog>
  <changelog author="wr@rosenauer.org" date="1497700800">- Updated to version 1.8.22
  * SCardCancel() was broken in 1.8.21. The call was blocking.
  * Enable use of info level logging for pcscd using -i/--info</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Rename local defines USER/GROUP to PKG_USER/PKG_GROUP: the
  variable GROUP (call caps) has been claimed by RPM 4.14.</changelog>
  <changelog author="wr@rosenauer.org" date="1514808000">- Updated to version 1.8.23
  * use libsystemd instead sd-daemon.{c,h}
  * spy: add support SCardStatus() with NULL pcbAtrLen
  * Some other minor improvements
- remove --auto-exit from service start even if we have
  socket activation in place
  (using it as a lightweight approach to unconditional service
  enablement (reference boo#1063983 and to help workaround boo#1063985)</changelog>
  <changelog author="sbrabec@suse.com" date="1519992000">- Use python3 (bsc#1082129, pcsc-lite-python3.patch).</changelog>
  <changelog author="wr@rosenauer.org" date="1535976000">- extended sysconfig template to include
  PCSCLITE_FILTER_IGNORE_READER_NAMES env variable which is used
  by pcscd to ignore certain readers
  (patch by Eric Garreau)</changelog>
  <changelog author="wr@rosenauer.org" date="1539432000">- Updated to version 1.8.24
  * SCardGetStatusChange(): Fix a rare race condition
  * SCardReleaseContext(): do not release a lock owned by another context
  * SCardReconnect(): suspend card auto power off
  * Allow "=" in serial driver filenames
  * Add the thread id in the pcscd log lines
  * pcsc-spy: correctly handle incomplete log file
  * Simclist: avoid to divide by zero in list_findpos()
  * Some other minor improvements</changelog>
  <changelog author="jengelh@inai.de" date="1549108800">- Trim filler wording from description.</changelog>
  <changelog author="wr@rosenauer.org" date="1554206400">- Updated to version 1.8.25
  * Fix a socket issue when pcscd is used inside LXC container
  * pcsc-spy: always provide a total time of execution
  * Fix resource leak if SCardEstablishContext() fails
  * Fix realloc(3) error handling (possible memory leak)
  * Remove usage of function chmod(2) to use fchmod(2) (fix race condition)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="wr@rosenauer.org" date="1578657600">- Updated to version 1.8.26
  * Use poll() instead of select() to allow file descriptor higher
    than FD_SETSIZE
  * Enable reader filtering by default
  * pcsc-spy:
  - Do not read output buffer after error
  - Adjust code to handle autoallocated buffers
  - fix year-2038 issue by using long instead of int
  * Android: fix compilation
  * polkit: log the error message if polkit_authority_get_sync() fails
  * Exit with EXIT_SUCCESS on shutdown to please systemd
  * Fix a minor memory leak</changelog>
  <changelog author="dimstar@opensuse.org" date="1579780800">- BuildRequire pkgconfig(libudev) instead of libudev-devel: allow
  OBS to shortcut through -mini flavors.</changelog>
  <changelog author="wr@rosenauer.org" date="1592136000">- Updated to version 1.9.0
  * SCardEndTransaction(): greatly improve performances (x300)
  * tokenparser: accept any Unicode character in a reader name
  * Use /run instead of /var/run by default
  * Fix a memory leak from a polkit call
  * Some other minor improvements</changelog>
  <changelog author="axel.braun@gmx.de" date="1613563200">- version 1.9.1
  * Do not (possibly) lock a reader if allocating hCard fails
  * Fix a hang in SCardTransmit()
  * Do not report an error if the wrong interface is used by the driver
  * Update reader state when a card is removed during an exchange
  * readerfactory: Make sure a freed Reader Context is not accessed
  * PHSetProtocol(): supports T=0&amp;1 cards on T=0 reader
  * hotplug-libusb:
  . support CCIDCLASSDRIVER
  . add interface name to reader name
  . remove obsolete libhal scheme
  * Some other minor improvements</changelog>
  <changelog author="axel.braun@gmx.de" date="1628337600">- version 1.9.3
  * fix a stupid regression with systemd introduced in the previous version
- version 1.9.2
  * improve NetBSD support
  * pcsc-spy: version 1.1
  . add option -t|--thread
  . x10 speed increase
  . correctly exit at end-of-file
  . remove, now useless, support of macOS
  * SetProtocol: Handle IFD_NOT_SUPPORTED from the driver
  * hotplug_libudev.c: sanitize interface name
  * pcsc_demo: change licence from GPLv3 to BSD
  * use Python 3 for Python scripts (psc-spy, UnitaryTests)
  * Some other minor improvements
- remove obsolete pcsc-lite-python3.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1633608000">- version 1.9.4
  * fix a memory leak when libusb is used for hotplug
    (i.e. non-Linux systems)</changelog>
  <changelog author="jsegitz@suse.com" date="1634558400">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_pcscd.service.patch</changelog>
</package>
<package pkgid="a0a971ed87f3c22f91990e4d6803b428730dd8f9e03a65d2f5b876ff40cf2aac" name="libpcsclite1" arch="s390x">
  <version epoch="0" ver="1.9.4" rel="150400.3.2.1"/>
  <changelog author="wr@rosenauer.org" date="1481284800">- Updated to version 1.8.19:
  * SCardGetStatusChange(): Fix a (rare) race condition
  * Doxygen updates
  * pcsc-spy:
  - fix display of execution time
  - log the thread number in the results
  * Some other minor improvements</changelog>
  <changelog author="wr@rosenauer.org" date="1483099200">- Updated to version 1.8.20
  * Fix a crash and potential security issue in pcscd (bsc#1017902,
    CVE-2016-10109, CWE-415, CWE-416)</changelog>
  <changelog author="wr@rosenauer.org" date="1495454400">- Updated to version 1.8.21
  * SCardCancel():
  - fix a race condition bug
  - fix a possible use after free
  - improve Doxygen documentation
  * SCardGetStatusChange(): fix a race condition when a reader is removed
  * SCardDisconnect(): fix status update for SCARD_UNPOWER_CARD
  * pcsc_stringify_error(): use Thread-local storage
  * pcsc_stringify_error() now returns a const char *
  * SCardControl() may return SCARD_E_INSUFFICIENT_BUFFER when
    pbRecvBuffer is not big enough to receive the card response.
  * Fix compilation error with GCC 4.9
  * UnitaryTests: add support of Python 3
  * pcsc-spy: add support of Python 3
  * Some other minor improvements</changelog>
  <changelog author="wr@rosenauer.org" date="1497700800">- Updated to version 1.8.22
  * SCardCancel() was broken in 1.8.21. The call was blocking.
  * Enable use of info level logging for pcscd using -i/--info</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Rename local defines USER/GROUP to PKG_USER/PKG_GROUP: the
  variable GROUP (call caps) has been claimed by RPM 4.14.</changelog>
  <changelog author="wr@rosenauer.org" date="1514808000">- Updated to version 1.8.23
  * use libsystemd instead sd-daemon.{c,h}
  * spy: add support SCardStatus() with NULL pcbAtrLen
  * Some other minor improvements
- remove --auto-exit from service start even if we have
  socket activation in place
  (using it as a lightweight approach to unconditional service
  enablement (reference boo#1063983 and to help workaround boo#1063985)</changelog>
  <changelog author="sbrabec@suse.com" date="1519992000">- Use python3 (bsc#1082129, pcsc-lite-python3.patch).</changelog>
  <changelog author="wr@rosenauer.org" date="1535976000">- extended sysconfig template to include
  PCSCLITE_FILTER_IGNORE_READER_NAMES env variable which is used
  by pcscd to ignore certain readers
  (patch by Eric Garreau)</changelog>
  <changelog author="wr@rosenauer.org" date="1539432000">- Updated to version 1.8.24
  * SCardGetStatusChange(): Fix a rare race condition
  * SCardReleaseContext(): do not release a lock owned by another context
  * SCardReconnect(): suspend card auto power off
  * Allow "=" in serial driver filenames
  * Add the thread id in the pcscd log lines
  * pcsc-spy: correctly handle incomplete log file
  * Simclist: avoid to divide by zero in list_findpos()
  * Some other minor improvements</changelog>
  <changelog author="jengelh@inai.de" date="1549108800">- Trim filler wording from description.</changelog>
  <changelog author="wr@rosenauer.org" date="1554206400">- Updated to version 1.8.25
  * Fix a socket issue when pcscd is used inside LXC container
  * pcsc-spy: always provide a total time of execution
  * Fix resource leak if SCardEstablishContext() fails
  * Fix realloc(3) error handling (possible memory leak)
  * Remove usage of function chmod(2) to use fchmod(2) (fix race condition)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="wr@rosenauer.org" date="1578657600">- Updated to version 1.8.26
  * Use poll() instead of select() to allow file descriptor higher
    than FD_SETSIZE
  * Enable reader filtering by default
  * pcsc-spy:
  - Do not read output buffer after error
  - Adjust code to handle autoallocated buffers
  - fix year-2038 issue by using long instead of int
  * Android: fix compilation
  * polkit: log the error message if polkit_authority_get_sync() fails
  * Exit with EXIT_SUCCESS on shutdown to please systemd
  * Fix a minor memory leak</changelog>
  <changelog author="dimstar@opensuse.org" date="1579780800">- BuildRequire pkgconfig(libudev) instead of libudev-devel: allow
  OBS to shortcut through -mini flavors.</changelog>
  <changelog author="wr@rosenauer.org" date="1592136000">- Updated to version 1.9.0
  * SCardEndTransaction(): greatly improve performances (x300)
  * tokenparser: accept any Unicode character in a reader name
  * Use /run instead of /var/run by default
  * Fix a memory leak from a polkit call
  * Some other minor improvements</changelog>
  <changelog author="axel.braun@gmx.de" date="1613563200">- version 1.9.1
  * Do not (possibly) lock a reader if allocating hCard fails
  * Fix a hang in SCardTransmit()
  * Do not report an error if the wrong interface is used by the driver
  * Update reader state when a card is removed during an exchange
  * readerfactory: Make sure a freed Reader Context is not accessed
  * PHSetProtocol(): supports T=0&amp;1 cards on T=0 reader
  * hotplug-libusb:
  . support CCIDCLASSDRIVER
  . add interface name to reader name
  . remove obsolete libhal scheme
  * Some other minor improvements</changelog>
  <changelog author="axel.braun@gmx.de" date="1628337600">- version 1.9.3
  * fix a stupid regression with systemd introduced in the previous version
- version 1.9.2
  * improve NetBSD support
  * pcsc-spy: version 1.1
  . add option -t|--thread
  . x10 speed increase
  . correctly exit at end-of-file
  . remove, now useless, support of macOS
  * SetProtocol: Handle IFD_NOT_SUPPORTED from the driver
  * hotplug_libudev.c: sanitize interface name
  * pcsc_demo: change licence from GPLv3 to BSD
  * use Python 3 for Python scripts (psc-spy, UnitaryTests)
  * Some other minor improvements
- remove obsolete pcsc-lite-python3.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1633608000">- version 1.9.4
  * fix a memory leak when libusb is used for hotplug
    (i.e. non-Linux systems)</changelog>
  <changelog author="jsegitz@suse.com" date="1634558400">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_pcscd.service.patch</changelog>
</package>
<package pkgid="1e5934494118ae929445f87f1d485ad83d820437f390ec8e834ff0f95e3f3a8d" name="libpcsclite1" arch="x86_64">
  <version epoch="0" ver="1.9.4" rel="150400.3.2.1"/>
  <changelog author="wr@rosenauer.org" date="1481284800">- Updated to version 1.8.19:
  * SCardGetStatusChange(): Fix a (rare) race condition
  * Doxygen updates
  * pcsc-spy:
  - fix display of execution time
  - log the thread number in the results
  * Some other minor improvements</changelog>
  <changelog author="wr@rosenauer.org" date="1483099200">- Updated to version 1.8.20
  * Fix a crash and potential security issue in pcscd (bsc#1017902,
    CVE-2016-10109, CWE-415, CWE-416)</changelog>
  <changelog author="wr@rosenauer.org" date="1495454400">- Updated to version 1.8.21
  * SCardCancel():
  - fix a race condition bug
  - fix a possible use after free
  - improve Doxygen documentation
  * SCardGetStatusChange(): fix a race condition when a reader is removed
  * SCardDisconnect(): fix status update for SCARD_UNPOWER_CARD
  * pcsc_stringify_error(): use Thread-local storage
  * pcsc_stringify_error() now returns a const char *
  * SCardControl() may return SCARD_E_INSUFFICIENT_BUFFER when
    pbRecvBuffer is not big enough to receive the card response.
  * Fix compilation error with GCC 4.9
  * UnitaryTests: add support of Python 3
  * pcsc-spy: add support of Python 3
  * Some other minor improvements</changelog>
  <changelog author="wr@rosenauer.org" date="1497700800">- Updated to version 1.8.22
  * SCardCancel() was broken in 1.8.21. The call was blocking.
  * Enable use of info level logging for pcscd using -i/--info</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Rename local defines USER/GROUP to PKG_USER/PKG_GROUP: the
  variable GROUP (call caps) has been claimed by RPM 4.14.</changelog>
  <changelog author="wr@rosenauer.org" date="1514808000">- Updated to version 1.8.23
  * use libsystemd instead sd-daemon.{c,h}
  * spy: add support SCardStatus() with NULL pcbAtrLen
  * Some other minor improvements
- remove --auto-exit from service start even if we have
  socket activation in place
  (using it as a lightweight approach to unconditional service
  enablement (reference boo#1063983 and to help workaround boo#1063985)</changelog>
  <changelog author="sbrabec@suse.com" date="1519992000">- Use python3 (bsc#1082129, pcsc-lite-python3.patch).</changelog>
  <changelog author="wr@rosenauer.org" date="1535976000">- extended sysconfig template to include
  PCSCLITE_FILTER_IGNORE_READER_NAMES env variable which is used
  by pcscd to ignore certain readers
  (patch by Eric Garreau)</changelog>
  <changelog author="wr@rosenauer.org" date="1539432000">- Updated to version 1.8.24
  * SCardGetStatusChange(): Fix a rare race condition
  * SCardReleaseContext(): do not release a lock owned by another context
  * SCardReconnect(): suspend card auto power off
  * Allow "=" in serial driver filenames
  * Add the thread id in the pcscd log lines
  * pcsc-spy: correctly handle incomplete log file
  * Simclist: avoid to divide by zero in list_findpos()
  * Some other minor improvements</changelog>
  <changelog author="jengelh@inai.de" date="1549108800">- Trim filler wording from description.</changelog>
  <changelog author="wr@rosenauer.org" date="1554206400">- Updated to version 1.8.25
  * Fix a socket issue when pcscd is used inside LXC container
  * pcsc-spy: always provide a total time of execution
  * Fix resource leak if SCardEstablishContext() fails
  * Fix realloc(3) error handling (possible memory leak)
  * Remove usage of function chmod(2) to use fchmod(2) (fix race condition)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="wr@rosenauer.org" date="1578657600">- Updated to version 1.8.26
  * Use poll() instead of select() to allow file descriptor higher
    than FD_SETSIZE
  * Enable reader filtering by default
  * pcsc-spy:
  - Do not read output buffer after error
  - Adjust code to handle autoallocated buffers
  - fix year-2038 issue by using long instead of int
  * Android: fix compilation
  * polkit: log the error message if polkit_authority_get_sync() fails
  * Exit with EXIT_SUCCESS on shutdown to please systemd
  * Fix a minor memory leak</changelog>
  <changelog author="dimstar@opensuse.org" date="1579780800">- BuildRequire pkgconfig(libudev) instead of libudev-devel: allow
  OBS to shortcut through -mini flavors.</changelog>
  <changelog author="wr@rosenauer.org" date="1592136000">- Updated to version 1.9.0
  * SCardEndTransaction(): greatly improve performances (x300)
  * tokenparser: accept any Unicode character in a reader name
  * Use /run instead of /var/run by default
  * Fix a memory leak from a polkit call
  * Some other minor improvements</changelog>
  <changelog author="axel.braun@gmx.de" date="1613563200">- version 1.9.1
  * Do not (possibly) lock a reader if allocating hCard fails
  * Fix a hang in SCardTransmit()
  * Do not report an error if the wrong interface is used by the driver
  * Update reader state when a card is removed during an exchange
  * readerfactory: Make sure a freed Reader Context is not accessed
  * PHSetProtocol(): supports T=0&amp;1 cards on T=0 reader
  * hotplug-libusb:
  . support CCIDCLASSDRIVER
  . add interface name to reader name
  . remove obsolete libhal scheme
  * Some other minor improvements</changelog>
  <changelog author="axel.braun@gmx.de" date="1628337600">- version 1.9.3
  * fix a stupid regression with systemd introduced in the previous version
- version 1.9.2
  * improve NetBSD support
  * pcsc-spy: version 1.1
  . add option -t|--thread
  . x10 speed increase
  . correctly exit at end-of-file
  . remove, now useless, support of macOS
  * SetProtocol: Handle IFD_NOT_SUPPORTED from the driver
  * hotplug_libudev.c: sanitize interface name
  * pcsc_demo: change licence from GPLv3 to BSD
  * use Python 3 for Python scripts (psc-spy, UnitaryTests)
  * Some other minor improvements
- remove obsolete pcsc-lite-python3.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1633608000">- version 1.9.4
  * fix a memory leak when libusb is used for hotplug
    (i.e. non-Linux systems)</changelog>
  <changelog author="jsegitz@suse.com" date="1634558400">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_pcscd.service.patch</changelog>
</package>
<package pkgid="0ec1d630075243fd6b3f15374cd716cd993be8f843f2cb271063fdf4294ae22e" name="libpolkit-agent-1-0" arch="aarch64">
  <version epoch="0" ver="121" rel="150500.3.3.1"/>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1596196800">- Update to version 0.117:
  + Activated Gitlab CI.
  + Updated dependency to mozjs68.
  + Memory management fixes.
  + Updated translations.
- Replace pkgconfig(mozjs-60) for pkgconfig(mozjs-68)
  BuildRequires following upstreams port.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1603454400">- Update to version 0.118:
  + Updated dependency to mozjs78.
  + Tarball fixes.
- Replace pkgconfig(mozjs-68) for pkgconfig(mozjs-78)
  BuildRequires following upstreams port.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1609243200">- also set libprivdir during build, otherwhise systemd and D-Bus service files
  contain the wrong path and we'll get runtime errors.</changelog>
  <changelog author="kukuk@suse.com" date="1615464000">- Move /etc/dbus-1/system.d to /usr/share/dbus-1/system.d, the
  first location is only for admin changes
- Move pam configuration to /usr/etc/pam.d</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com" date="1625659200">- Move /etc/polkit-1/rules.d/50-default.rules to
  /usr/share/polkit-1/rules.d/50-default.rules. The first location
  is only for admin changes.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626609600">- Change to using systemd-sysusers
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Fix 50-default.rules file-parent-ownership-mismatch warning
- Remove --with-pic, no effect with --disable-static</changelog>
  <changelog author="meissner@suse.com" date="1634731200">- fork libpolkit0 package into libpolkit-agent-1-0 and libpolkit-gobject-1-0
  as mandated. bsc#1191781</changelog>
  <changelog author="dmueller@suse.com" date="1638792000">- update to 0.120:
  * transition from Intltool to gettext
  * several tarball, meson and pipeline fixups
  * Portuguese translation
  * Romanian translation
  * meson build system added
  * CVE-2021-3560 mitigation
  * properties in text listener
  * typos fixups
  * Update Hungarian translation
- drop CVE-2021-3560.patch  (upstream)</changelog>
  <changelog author="meissner@suse.com" date="1643112000">- Fixed pkexec Local Privilege Escalation aka pwnkit (CVE-2021-4034 bsc#1194568)
  CVE-2021-4034-pkexec-fix.patch</changelog>
  <changelog author="fvogt@suse.com" date="1643198400">- Switch from mozjs to duktape:
  * Add duktape-support.patch</changelog>
  <changelog author="meissner@suse.com" date="1645531200">- Fixed denial of service via file descriptor leak (bsc#1195542 CVE-2021-4115)
  0001-CVE-2021-4115-GHSL-2021-077-fix.patch</changelog>
  <changelog author="meissner@suse.com" date="1658145600">- split out pkexec into seperate package to make system hardening
  easier (to avoid installing it jsc#PED-132 jsc#PED-148).</changelog>
  <changelog author="meissner@suse.com" date="1659528000">- add split-provides for polkit:/usr/bin/pkexec. (bsc#1202070)</changelog>
  <changelog author="kukuk@suse.com" date="1659960000">- Use %_pam_vendordir</changelog>
  <changelog author="luc14n0@opensuse.org" date="1660046400">- Update to version 121:
  + Addition of duktape as a JS engine backend.
  + Other small fixes and improvements. For more details, visit:
    gitlab.freedesktop.org/polkit/polkit/-/blob/121/NEWS.md
  + Updated translations.
- Drop merged-upstream patches:
  + CVE-2021-4034-pkexec-fix.patch;
  + 0001-CVE-2021-4115-GHSL-2021-077-fix.patch;
  + duktape-support.patch;
  + pkexec.patch.
- Replace Intltool with Gettext as a build requirement following
  the migration from last release (0.120).
- Add Meson as a build requirement while dropping Libtool and
  replace all Autotools macros with Meson ones. And pass the
  following options to Meson: session_tracking=libsystemd-login;
  systemdsystemunitdir=%{_unitdir}; os_type=suse;
  pam_module_dir=%{_pam_moduledir}; pam_prefix=%{_pam_vendordir};
  examples=true; tests=true; gtk_doc=true; man=true and
  js_engine=duktape.
- Drop no longer needed Libtool as a build requirement, following
  Autotools replacement.
- Add explicit pkgconfig module build requirements for glib-2.0 and
  gobject-2.0 that are searched by the build scripts. They were
  already being pulled by their siblings [pkgconfig(gio-2.0) and
  pkgconfig(gio-unix-2.0)].
- Drop conditional macro, which was wrapping "BuildArch: noarch"
  for the doc subpackage, based on long gone EOLed (open)SUSE
  release (11.2).
- Add missing 'Requires(post): permissions' for the pkexec
  subpackage.
- Add python3-dbus-python and python3-python-dbusmock as build
  requirements in order to run test in the check section.
- Add polkit-fix-pam-prefix.patch to use the value of pam_prefix
  Meson option, like it was designed to, rather than hard-coded
  path for pam configuration files.
- Remove unneeded executable bit from 50-default.rules file.</changelog>
  <changelog author="meissner@suse.com" date="1663243200">- obsolete libpolkit0 also from baselibs.</changelog>
  <changelog author="jsegitz@suse.com" date="1680091200">- Change permissions for rules folders (bsc#1209282)</changelog>
</package>
<package pkgid="389e7ae4fae4cfa5129b463c121e94b1a02d2f35990b5de3a10e50b93f9b3e33" name="libpolkit-agent-1-0" arch="s390x">
  <version epoch="0" ver="121" rel="150500.3.3.1"/>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1596196800">- Update to version 0.117:
  + Activated Gitlab CI.
  + Updated dependency to mozjs68.
  + Memory management fixes.
  + Updated translations.
- Replace pkgconfig(mozjs-60) for pkgconfig(mozjs-68)
  BuildRequires following upstreams port.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1603454400">- Update to version 0.118:
  + Updated dependency to mozjs78.
  + Tarball fixes.
- Replace pkgconfig(mozjs-68) for pkgconfig(mozjs-78)
  BuildRequires following upstreams port.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1609243200">- also set libprivdir during build, otherwhise systemd and D-Bus service files
  contain the wrong path and we'll get runtime errors.</changelog>
  <changelog author="kukuk@suse.com" date="1615464000">- Move /etc/dbus-1/system.d to /usr/share/dbus-1/system.d, the
  first location is only for admin changes
- Move pam configuration to /usr/etc/pam.d</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com" date="1625659200">- Move /etc/polkit-1/rules.d/50-default.rules to
  /usr/share/polkit-1/rules.d/50-default.rules. The first location
  is only for admin changes.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626609600">- Change to using systemd-sysusers
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Fix 50-default.rules file-parent-ownership-mismatch warning
- Remove --with-pic, no effect with --disable-static</changelog>
  <changelog author="meissner@suse.com" date="1634731200">- fork libpolkit0 package into libpolkit-agent-1-0 and libpolkit-gobject-1-0
  as mandated. bsc#1191781</changelog>
  <changelog author="dmueller@suse.com" date="1638792000">- update to 0.120:
  * transition from Intltool to gettext
  * several tarball, meson and pipeline fixups
  * Portuguese translation
  * Romanian translation
  * meson build system added
  * CVE-2021-3560 mitigation
  * properties in text listener
  * typos fixups
  * Update Hungarian translation
- drop CVE-2021-3560.patch  (upstream)</changelog>
  <changelog author="meissner@suse.com" date="1643112000">- Fixed pkexec Local Privilege Escalation aka pwnkit (CVE-2021-4034 bsc#1194568)
  CVE-2021-4034-pkexec-fix.patch</changelog>
  <changelog author="fvogt@suse.com" date="1643198400">- Switch from mozjs to duktape:
  * Add duktape-support.patch</changelog>
  <changelog author="meissner@suse.com" date="1645531200">- Fixed denial of service via file descriptor leak (bsc#1195542 CVE-2021-4115)
  0001-CVE-2021-4115-GHSL-2021-077-fix.patch</changelog>
  <changelog author="meissner@suse.com" date="1658145600">- split out pkexec into seperate package to make system hardening
  easier (to avoid installing it jsc#PED-132 jsc#PED-148).</changelog>
  <changelog author="meissner@suse.com" date="1659528000">- add split-provides for polkit:/usr/bin/pkexec. (bsc#1202070)</changelog>
  <changelog author="kukuk@suse.com" date="1659960000">- Use %_pam_vendordir</changelog>
  <changelog author="luc14n0@opensuse.org" date="1660046400">- Update to version 121:
  + Addition of duktape as a JS engine backend.
  + Other small fixes and improvements. For more details, visit:
    gitlab.freedesktop.org/polkit/polkit/-/blob/121/NEWS.md
  + Updated translations.
- Drop merged-upstream patches:
  + CVE-2021-4034-pkexec-fix.patch;
  + 0001-CVE-2021-4115-GHSL-2021-077-fix.patch;
  + duktape-support.patch;
  + pkexec.patch.
- Replace Intltool with Gettext as a build requirement following
  the migration from last release (0.120).
- Add Meson as a build requirement while dropping Libtool and
  replace all Autotools macros with Meson ones. And pass the
  following options to Meson: session_tracking=libsystemd-login;
  systemdsystemunitdir=%{_unitdir}; os_type=suse;
  pam_module_dir=%{_pam_moduledir}; pam_prefix=%{_pam_vendordir};
  examples=true; tests=true; gtk_doc=true; man=true and
  js_engine=duktape.
- Drop no longer needed Libtool as a build requirement, following
  Autotools replacement.
- Add explicit pkgconfig module build requirements for glib-2.0 and
  gobject-2.0 that are searched by the build scripts. They were
  already being pulled by their siblings [pkgconfig(gio-2.0) and
  pkgconfig(gio-unix-2.0)].
- Drop conditional macro, which was wrapping "BuildArch: noarch"
  for the doc subpackage, based on long gone EOLed (open)SUSE
  release (11.2).
- Add missing 'Requires(post): permissions' for the pkexec
  subpackage.
- Add python3-dbus-python and python3-python-dbusmock as build
  requirements in order to run test in the check section.
- Add polkit-fix-pam-prefix.patch to use the value of pam_prefix
  Meson option, like it was designed to, rather than hard-coded
  path for pam configuration files.
- Remove unneeded executable bit from 50-default.rules file.</changelog>
  <changelog author="meissner@suse.com" date="1663243200">- obsolete libpolkit0 also from baselibs.</changelog>
  <changelog author="jsegitz@suse.com" date="1680091200">- Change permissions for rules folders (bsc#1209282)</changelog>
</package>
<package pkgid="8d84ffdb3510675b4486d7d49a6af780a5dc2c1540eda5f44d80753368e883b0" name="libpolkit-agent-1-0" arch="x86_64">
  <version epoch="0" ver="121" rel="150500.3.3.1"/>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1596196800">- Update to version 0.117:
  + Activated Gitlab CI.
  + Updated dependency to mozjs68.
  + Memory management fixes.
  + Updated translations.
- Replace pkgconfig(mozjs-60) for pkgconfig(mozjs-68)
  BuildRequires following upstreams port.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1603454400">- Update to version 0.118:
  + Updated dependency to mozjs78.
  + Tarball fixes.
- Replace pkgconfig(mozjs-68) for pkgconfig(mozjs-78)
  BuildRequires following upstreams port.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1609243200">- also set libprivdir during build, otherwhise systemd and D-Bus service files
  contain the wrong path and we'll get runtime errors.</changelog>
  <changelog author="kukuk@suse.com" date="1615464000">- Move /etc/dbus-1/system.d to /usr/share/dbus-1/system.d, the
  first location is only for admin changes
- Move pam configuration to /usr/etc/pam.d</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com" date="1625659200">- Move /etc/polkit-1/rules.d/50-default.rules to
  /usr/share/polkit-1/rules.d/50-default.rules. The first location
  is only for admin changes.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626609600">- Change to using systemd-sysusers
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Fix 50-default.rules file-parent-ownership-mismatch warning
- Remove --with-pic, no effect with --disable-static</changelog>
  <changelog author="meissner@suse.com" date="1634731200">- fork libpolkit0 package into libpolkit-agent-1-0 and libpolkit-gobject-1-0
  as mandated. bsc#1191781</changelog>
  <changelog author="dmueller@suse.com" date="1638792000">- update to 0.120:
  * transition from Intltool to gettext
  * several tarball, meson and pipeline fixups
  * Portuguese translation
  * Romanian translation
  * meson build system added
  * CVE-2021-3560 mitigation
  * properties in text listener
  * typos fixups
  * Update Hungarian translation
- drop CVE-2021-3560.patch  (upstream)</changelog>
  <changelog author="meissner@suse.com" date="1643112000">- Fixed pkexec Local Privilege Escalation aka pwnkit (CVE-2021-4034 bsc#1194568)
  CVE-2021-4034-pkexec-fix.patch</changelog>
  <changelog author="fvogt@suse.com" date="1643198400">- Switch from mozjs to duktape:
  * Add duktape-support.patch</changelog>
  <changelog author="meissner@suse.com" date="1645531200">- Fixed denial of service via file descriptor leak (bsc#1195542 CVE-2021-4115)
  0001-CVE-2021-4115-GHSL-2021-077-fix.patch</changelog>
  <changelog author="meissner@suse.com" date="1658145600">- split out pkexec into seperate package to make system hardening
  easier (to avoid installing it jsc#PED-132 jsc#PED-148).</changelog>
  <changelog author="meissner@suse.com" date="1659528000">- add split-provides for polkit:/usr/bin/pkexec. (bsc#1202070)</changelog>
  <changelog author="kukuk@suse.com" date="1659960000">- Use %_pam_vendordir</changelog>
  <changelog author="luc14n0@opensuse.org" date="1660046400">- Update to version 121:
  + Addition of duktape as a JS engine backend.
  + Other small fixes and improvements. For more details, visit:
    gitlab.freedesktop.org/polkit/polkit/-/blob/121/NEWS.md
  + Updated translations.
- Drop merged-upstream patches:
  + CVE-2021-4034-pkexec-fix.patch;
  + 0001-CVE-2021-4115-GHSL-2021-077-fix.patch;
  + duktape-support.patch;
  + pkexec.patch.
- Replace Intltool with Gettext as a build requirement following
  the migration from last release (0.120).
- Add Meson as a build requirement while dropping Libtool and
  replace all Autotools macros with Meson ones. And pass the
  following options to Meson: session_tracking=libsystemd-login;
  systemdsystemunitdir=%{_unitdir}; os_type=suse;
  pam_module_dir=%{_pam_moduledir}; pam_prefix=%{_pam_vendordir};
  examples=true; tests=true; gtk_doc=true; man=true and
  js_engine=duktape.
- Drop no longer needed Libtool as a build requirement, following
  Autotools replacement.
- Add explicit pkgconfig module build requirements for glib-2.0 and
  gobject-2.0 that are searched by the build scripts. They were
  already being pulled by their siblings [pkgconfig(gio-2.0) and
  pkgconfig(gio-unix-2.0)].
- Drop conditional macro, which was wrapping "BuildArch: noarch"
  for the doc subpackage, based on long gone EOLed (open)SUSE
  release (11.2).
- Add missing 'Requires(post): permissions' for the pkexec
  subpackage.
- Add python3-dbus-python and python3-python-dbusmock as build
  requirements in order to run test in the check section.
- Add polkit-fix-pam-prefix.patch to use the value of pam_prefix
  Meson option, like it was designed to, rather than hard-coded
  path for pam configuration files.
- Remove unneeded executable bit from 50-default.rules file.</changelog>
  <changelog author="meissner@suse.com" date="1663243200">- obsolete libpolkit0 also from baselibs.</changelog>
  <changelog author="jsegitz@suse.com" date="1680091200">- Change permissions for rules folders (bsc#1209282)</changelog>
</package>
<package pkgid="d805a3f7f61a95f3d18f801636ec78fd5731aed043bdce9b21fadc9ed4210a48" name="libpolkit-gobject-1-0" arch="aarch64">
  <version epoch="0" ver="121" rel="150500.3.3.1"/>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1596196800">- Update to version 0.117:
  + Activated Gitlab CI.
  + Updated dependency to mozjs68.
  + Memory management fixes.
  + Updated translations.
- Replace pkgconfig(mozjs-60) for pkgconfig(mozjs-68)
  BuildRequires following upstreams port.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1603454400">- Update to version 0.118:
  + Updated dependency to mozjs78.
  + Tarball fixes.
- Replace pkgconfig(mozjs-68) for pkgconfig(mozjs-78)
  BuildRequires following upstreams port.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1609243200">- also set libprivdir during build, otherwhise systemd and D-Bus service files
  contain the wrong path and we'll get runtime errors.</changelog>
  <changelog author="kukuk@suse.com" date="1615464000">- Move /etc/dbus-1/system.d to /usr/share/dbus-1/system.d, the
  first location is only for admin changes
- Move pam configuration to /usr/etc/pam.d</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com" date="1625659200">- Move /etc/polkit-1/rules.d/50-default.rules to
  /usr/share/polkit-1/rules.d/50-default.rules. The first location
  is only for admin changes.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626609600">- Change to using systemd-sysusers
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Fix 50-default.rules file-parent-ownership-mismatch warning
- Remove --with-pic, no effect with --disable-static</changelog>
  <changelog author="meissner@suse.com" date="1634731200">- fork libpolkit0 package into libpolkit-agent-1-0 and libpolkit-gobject-1-0
  as mandated. bsc#1191781</changelog>
  <changelog author="dmueller@suse.com" date="1638792000">- update to 0.120:
  * transition from Intltool to gettext
  * several tarball, meson and pipeline fixups
  * Portuguese translation
  * Romanian translation
  * meson build system added
  * CVE-2021-3560 mitigation
  * properties in text listener
  * typos fixups
  * Update Hungarian translation
- drop CVE-2021-3560.patch  (upstream)</changelog>
  <changelog author="meissner@suse.com" date="1643112000">- Fixed pkexec Local Privilege Escalation aka pwnkit (CVE-2021-4034 bsc#1194568)
  CVE-2021-4034-pkexec-fix.patch</changelog>
  <changelog author="fvogt@suse.com" date="1643198400">- Switch from mozjs to duktape:
  * Add duktape-support.patch</changelog>
  <changelog author="meissner@suse.com" date="1645531200">- Fixed denial of service via file descriptor leak (bsc#1195542 CVE-2021-4115)
  0001-CVE-2021-4115-GHSL-2021-077-fix.patch</changelog>
  <changelog author="meissner@suse.com" date="1658145600">- split out pkexec into seperate package to make system hardening
  easier (to avoid installing it jsc#PED-132 jsc#PED-148).</changelog>
  <changelog author="meissner@suse.com" date="1659528000">- add split-provides for polkit:/usr/bin/pkexec. (bsc#1202070)</changelog>
  <changelog author="kukuk@suse.com" date="1659960000">- Use %_pam_vendordir</changelog>
  <changelog author="luc14n0@opensuse.org" date="1660046400">- Update to version 121:
  + Addition of duktape as a JS engine backend.
  + Other small fixes and improvements. For more details, visit:
    gitlab.freedesktop.org/polkit/polkit/-/blob/121/NEWS.md
  + Updated translations.
- Drop merged-upstream patches:
  + CVE-2021-4034-pkexec-fix.patch;
  + 0001-CVE-2021-4115-GHSL-2021-077-fix.patch;
  + duktape-support.patch;
  + pkexec.patch.
- Replace Intltool with Gettext as a build requirement following
  the migration from last release (0.120).
- Add Meson as a build requirement while dropping Libtool and
  replace all Autotools macros with Meson ones. And pass the
  following options to Meson: session_tracking=libsystemd-login;
  systemdsystemunitdir=%{_unitdir}; os_type=suse;
  pam_module_dir=%{_pam_moduledir}; pam_prefix=%{_pam_vendordir};
  examples=true; tests=true; gtk_doc=true; man=true and
  js_engine=duktape.
- Drop no longer needed Libtool as a build requirement, following
  Autotools replacement.
- Add explicit pkgconfig module build requirements for glib-2.0 and
  gobject-2.0 that are searched by the build scripts. They were
  already being pulled by their siblings [pkgconfig(gio-2.0) and
  pkgconfig(gio-unix-2.0)].
- Drop conditional macro, which was wrapping "BuildArch: noarch"
  for the doc subpackage, based on long gone EOLed (open)SUSE
  release (11.2).
- Add missing 'Requires(post): permissions' for the pkexec
  subpackage.
- Add python3-dbus-python and python3-python-dbusmock as build
  requirements in order to run test in the check section.
- Add polkit-fix-pam-prefix.patch to use the value of pam_prefix
  Meson option, like it was designed to, rather than hard-coded
  path for pam configuration files.
- Remove unneeded executable bit from 50-default.rules file.</changelog>
  <changelog author="meissner@suse.com" date="1663243200">- obsolete libpolkit0 also from baselibs.</changelog>
  <changelog author="jsegitz@suse.com" date="1680091200">- Change permissions for rules folders (bsc#1209282)</changelog>
</package>
<package pkgid="f95baaa09ade5f7118ab7dcc0f1d081411d26486155b9a1aa41743254ff3dc95" name="libpolkit-gobject-1-0" arch="s390x">
  <version epoch="0" ver="121" rel="150500.3.3.1"/>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1596196800">- Update to version 0.117:
  + Activated Gitlab CI.
  + Updated dependency to mozjs68.
  + Memory management fixes.
  + Updated translations.
- Replace pkgconfig(mozjs-60) for pkgconfig(mozjs-68)
  BuildRequires following upstreams port.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1603454400">- Update to version 0.118:
  + Updated dependency to mozjs78.
  + Tarball fixes.
- Replace pkgconfig(mozjs-68) for pkgconfig(mozjs-78)
  BuildRequires following upstreams port.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1609243200">- also set libprivdir during build, otherwhise systemd and D-Bus service files
  contain the wrong path and we'll get runtime errors.</changelog>
  <changelog author="kukuk@suse.com" date="1615464000">- Move /etc/dbus-1/system.d to /usr/share/dbus-1/system.d, the
  first location is only for admin changes
- Move pam configuration to /usr/etc/pam.d</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com" date="1625659200">- Move /etc/polkit-1/rules.d/50-default.rules to
  /usr/share/polkit-1/rules.d/50-default.rules. The first location
  is only for admin changes.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626609600">- Change to using systemd-sysusers
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Fix 50-default.rules file-parent-ownership-mismatch warning
- Remove --with-pic, no effect with --disable-static</changelog>
  <changelog author="meissner@suse.com" date="1634731200">- fork libpolkit0 package into libpolkit-agent-1-0 and libpolkit-gobject-1-0
  as mandated. bsc#1191781</changelog>
  <changelog author="dmueller@suse.com" date="1638792000">- update to 0.120:
  * transition from Intltool to gettext
  * several tarball, meson and pipeline fixups
  * Portuguese translation
  * Romanian translation
  * meson build system added
  * CVE-2021-3560 mitigation
  * properties in text listener
  * typos fixups
  * Update Hungarian translation
- drop CVE-2021-3560.patch  (upstream)</changelog>
  <changelog author="meissner@suse.com" date="1643112000">- Fixed pkexec Local Privilege Escalation aka pwnkit (CVE-2021-4034 bsc#1194568)
  CVE-2021-4034-pkexec-fix.patch</changelog>
  <changelog author="fvogt@suse.com" date="1643198400">- Switch from mozjs to duktape:
  * Add duktape-support.patch</changelog>
  <changelog author="meissner@suse.com" date="1645531200">- Fixed denial of service via file descriptor leak (bsc#1195542 CVE-2021-4115)
  0001-CVE-2021-4115-GHSL-2021-077-fix.patch</changelog>
  <changelog author="meissner@suse.com" date="1658145600">- split out pkexec into seperate package to make system hardening
  easier (to avoid installing it jsc#PED-132 jsc#PED-148).</changelog>
  <changelog author="meissner@suse.com" date="1659528000">- add split-provides for polkit:/usr/bin/pkexec. (bsc#1202070)</changelog>
  <changelog author="kukuk@suse.com" date="1659960000">- Use %_pam_vendordir</changelog>
  <changelog author="luc14n0@opensuse.org" date="1660046400">- Update to version 121:
  + Addition of duktape as a JS engine backend.
  + Other small fixes and improvements. For more details, visit:
    gitlab.freedesktop.org/polkit/polkit/-/blob/121/NEWS.md
  + Updated translations.
- Drop merged-upstream patches:
  + CVE-2021-4034-pkexec-fix.patch;
  + 0001-CVE-2021-4115-GHSL-2021-077-fix.patch;
  + duktape-support.patch;
  + pkexec.patch.
- Replace Intltool with Gettext as a build requirement following
  the migration from last release (0.120).
- Add Meson as a build requirement while dropping Libtool and
  replace all Autotools macros with Meson ones. And pass the
  following options to Meson: session_tracking=libsystemd-login;
  systemdsystemunitdir=%{_unitdir}; os_type=suse;
  pam_module_dir=%{_pam_moduledir}; pam_prefix=%{_pam_vendordir};
  examples=true; tests=true; gtk_doc=true; man=true and
  js_engine=duktape.
- Drop no longer needed Libtool as a build requirement, following
  Autotools replacement.
- Add explicit pkgconfig module build requirements for glib-2.0 and
  gobject-2.0 that are searched by the build scripts. They were
  already being pulled by their siblings [pkgconfig(gio-2.0) and
  pkgconfig(gio-unix-2.0)].
- Drop conditional macro, which was wrapping "BuildArch: noarch"
  for the doc subpackage, based on long gone EOLed (open)SUSE
  release (11.2).
- Add missing 'Requires(post): permissions' for the pkexec
  subpackage.
- Add python3-dbus-python and python3-python-dbusmock as build
  requirements in order to run test in the check section.
- Add polkit-fix-pam-prefix.patch to use the value of pam_prefix
  Meson option, like it was designed to, rather than hard-coded
  path for pam configuration files.
- Remove unneeded executable bit from 50-default.rules file.</changelog>
  <changelog author="meissner@suse.com" date="1663243200">- obsolete libpolkit0 also from baselibs.</changelog>
  <changelog author="jsegitz@suse.com" date="1680091200">- Change permissions for rules folders (bsc#1209282)</changelog>
</package>
<package pkgid="d3d3865d29a1b02e1a32bf695b7decf7e2465ed1b1106059d7d0594ca0604628" name="libpolkit-gobject-1-0" arch="x86_64">
  <version epoch="0" ver="121" rel="150500.3.3.1"/>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1596196800">- Update to version 0.117:
  + Activated Gitlab CI.
  + Updated dependency to mozjs68.
  + Memory management fixes.
  + Updated translations.
- Replace pkgconfig(mozjs-60) for pkgconfig(mozjs-68)
  BuildRequires following upstreams port.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1603454400">- Update to version 0.118:
  + Updated dependency to mozjs78.
  + Tarball fixes.
- Replace pkgconfig(mozjs-68) for pkgconfig(mozjs-78)
  BuildRequires following upstreams port.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1609243200">- also set libprivdir during build, otherwhise systemd and D-Bus service files
  contain the wrong path and we'll get runtime errors.</changelog>
  <changelog author="kukuk@suse.com" date="1615464000">- Move /etc/dbus-1/system.d to /usr/share/dbus-1/system.d, the
  first location is only for admin changes
- Move pam configuration to /usr/etc/pam.d</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com" date="1625659200">- Move /etc/polkit-1/rules.d/50-default.rules to
  /usr/share/polkit-1/rules.d/50-default.rules. The first location
  is only for admin changes.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626609600">- Change to using systemd-sysusers
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Fix 50-default.rules file-parent-ownership-mismatch warning
- Remove --with-pic, no effect with --disable-static</changelog>
  <changelog author="meissner@suse.com" date="1634731200">- fork libpolkit0 package into libpolkit-agent-1-0 and libpolkit-gobject-1-0
  as mandated. bsc#1191781</changelog>
  <changelog author="dmueller@suse.com" date="1638792000">- update to 0.120:
  * transition from Intltool to gettext
  * several tarball, meson and pipeline fixups
  * Portuguese translation
  * Romanian translation
  * meson build system added
  * CVE-2021-3560 mitigation
  * properties in text listener
  * typos fixups
  * Update Hungarian translation
- drop CVE-2021-3560.patch  (upstream)</changelog>
  <changelog author="meissner@suse.com" date="1643112000">- Fixed pkexec Local Privilege Escalation aka pwnkit (CVE-2021-4034 bsc#1194568)
  CVE-2021-4034-pkexec-fix.patch</changelog>
  <changelog author="fvogt@suse.com" date="1643198400">- Switch from mozjs to duktape:
  * Add duktape-support.patch</changelog>
  <changelog author="meissner@suse.com" date="1645531200">- Fixed denial of service via file descriptor leak (bsc#1195542 CVE-2021-4115)
  0001-CVE-2021-4115-GHSL-2021-077-fix.patch</changelog>
  <changelog author="meissner@suse.com" date="1658145600">- split out pkexec into seperate package to make system hardening
  easier (to avoid installing it jsc#PED-132 jsc#PED-148).</changelog>
  <changelog author="meissner@suse.com" date="1659528000">- add split-provides for polkit:/usr/bin/pkexec. (bsc#1202070)</changelog>
  <changelog author="kukuk@suse.com" date="1659960000">- Use %_pam_vendordir</changelog>
  <changelog author="luc14n0@opensuse.org" date="1660046400">- Update to version 121:
  + Addition of duktape as a JS engine backend.
  + Other small fixes and improvements. For more details, visit:
    gitlab.freedesktop.org/polkit/polkit/-/blob/121/NEWS.md
  + Updated translations.
- Drop merged-upstream patches:
  + CVE-2021-4034-pkexec-fix.patch;
  + 0001-CVE-2021-4115-GHSL-2021-077-fix.patch;
  + duktape-support.patch;
  + pkexec.patch.
- Replace Intltool with Gettext as a build requirement following
  the migration from last release (0.120).
- Add Meson as a build requirement while dropping Libtool and
  replace all Autotools macros with Meson ones. And pass the
  following options to Meson: session_tracking=libsystemd-login;
  systemdsystemunitdir=%{_unitdir}; os_type=suse;
  pam_module_dir=%{_pam_moduledir}; pam_prefix=%{_pam_vendordir};
  examples=true; tests=true; gtk_doc=true; man=true and
  js_engine=duktape.
- Drop no longer needed Libtool as a build requirement, following
  Autotools replacement.
- Add explicit pkgconfig module build requirements for glib-2.0 and
  gobject-2.0 that are searched by the build scripts. They were
  already being pulled by their siblings [pkgconfig(gio-2.0) and
  pkgconfig(gio-unix-2.0)].
- Drop conditional macro, which was wrapping "BuildArch: noarch"
  for the doc subpackage, based on long gone EOLed (open)SUSE
  release (11.2).
- Add missing 'Requires(post): permissions' for the pkexec
  subpackage.
- Add python3-dbus-python and python3-python-dbusmock as build
  requirements in order to run test in the check section.
- Add polkit-fix-pam-prefix.patch to use the value of pam_prefix
  Meson option, like it was designed to, rather than hard-coded
  path for pam configuration files.
- Remove unneeded executable bit from 50-default.rules file.</changelog>
  <changelog author="meissner@suse.com" date="1663243200">- obsolete libpolkit0 also from baselibs.</changelog>
  <changelog author="jsegitz@suse.com" date="1680091200">- Change permissions for rules folders (bsc#1209282)</changelog>
</package>
<package pkgid="096da2248c0d95d101dcf99378a5c78fa80ffaac0ae414a4e7e186ef6cf5eef2" name="libprocps8" arch="aarch64">
  <version epoch="0" ver="3.3.17" rel="150000.7.37.1"/>
  <changelog author="mliska@suse.cz" date="1602072000">- Add upstream procps-check-sanity-of-SC_ARG_MAX.patch in order to fix
  pgrep: cannot allocate 4611686018427387903 bytes when ulimit -s is unlimited.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612267200">- Package translations in procps-lang.</changelog>
  <changelog author="werner@suse.de" date="1612958400">- Update to procps-ng-3.3.17
  * library: Incremented to 8:3:0
    (no removals or additions, internal changes only)
  * all: properly handle utf8 cmdline translations         issue #176
  * kill: Pass int to signalled process                    merge #32
  * pgrep: Pass int to signalled process                   merge #32
  * pgrep: Check sanity of SG_ARG_MAX                      issue #152
  * pgrep: Add older than selection                        merge #79
  * pidof: Quiet mode                                      merge #83
  * pidof: show worker threads                             Redhat #1803640
  * ps.1: Mention stime alias                              issue #164
  * ps: check also match on truncated 16 char comm names
  * ps: Add exe output option                              Redhat #1399206
  * ps: A lot more sorting available                       merge #99
  * pwait: New command waits for a process                 merge #97
  * sysctl: Match systemd directory order                  Debian #950788
  * sysctl: Document directory order                       Debian #951550
  * top: ensure config file backward compatibility         Debian #951335
  * top: add command line 'e' for symmetry with 'E'        issue #165
  * top: add '4' toggle for two abreast cpu display        issue #172
  * top: add '!' toggle for combining multiple cpus
  * top: fix potential SEGV involving -p switch            merge #114
  * vmstat: Wide mode gives wider proc columns             merge #48
  * watch: Add environment variable for interval           merge #62
  * watch: Add no linewrap option                          issue #182
  * watch: Support more colors                             merge #106,#109
  * free,uptime,slabtop: complain about extra ops          issue #181
- Remove now obsolete upstream patches
  * procps-check-sanity-of-SC_ARG_MAX.patch
  * procps-ng-3e1c00d0.patch
- Port patches
  * procps-ng-3.3.10-integer-overflow.patch
  * procps-ng-3.3.10-large_pcpu.patch
  * procps-ng-3.3.8-accuracy.dif
  * procps-ng-3.3.8-bnc634840.patch
  * procps-ng-3.3.8-petabytes.patch
  * procps-ng-3.3.8-tinfo.dif
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612958401">- Fix directory for Ukrainian man pages translations.
- Move localized man pages to lang package.
- Remove obsolete conditionals.
- Remove obsolete --enable-oomem option.
- Run spec-cleaner.</changelog>
  <changelog author="werner@suse.de" date="1613044800">- Add /usr/share/man/uk dir to file list for lang sub package</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1613995200">- Remove /usr/share/man/uk dir to file list for lang sub package:
  It's now provided by filesystem.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1615377600">- Don't install translated man pages for non-installed binaries
  (uptime, kill).</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1625227200">- Skip test suite on emulated riscv64 systems as the qemu process
  is unexpected on the command lines of processes</changelog>
  <changelog author="werner@suse.de" date="1642680000">- Correct used URLs</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Some older products do not know about /usr/share/man/uk</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="werner@suse.de" date="1692100800">- Add patch CVE-2023-4016.patch
  * CVE-2023-4016: ps buffer overflow (bsc#1214290)</changelog>
  <changelog author="kukuk@suse.com" date="1692187200">- procps-ng-3.3.17-logind.patch: Backport from 4.x git, prefer
  logind over utmp (jsc#PED-3144)</changelog>
  <changelog author="werner@suse.de" date="1692360000">- Modify patches
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-ng-3.3.17-logind.patch
  to real to not truncate output of w with option -n</changelog>
  <changelog author="werner@suse.de" date="1695211200">- Submit latest procps 3.3.17 to SLE-15 tree for jira#PED-3244
  and jira#PED-6369
- The patches now upstream had been dropped meanwhile
  * procps-vmstat-1b9ea611.patch (bsc#1185417)
  - For support up to 2048 CPU as well
  * bsc1209122-a6c0795d.patch (bnc#1209122)
  - allow `-´ as leading character to ignore possible errors
    on systctl entries
  * patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753)
  - was a backport of an upstream fix to get the first CPU
    summary correct
- Enable pidof for SLE-15 as this is provided by sysvinit-tools
- Use a check on syscall __NR_pidfd_open to decide if
  the pwait tool and its manual page will be build</changelog>
</package>
<package pkgid="9e08e84a6160c20e016b8aa769e3b9ff3e86823804d24002af6c2a2b4fb9b460" name="libprocps8" arch="ppc64le">
  <version epoch="0" ver="3.3.17" rel="150000.7.37.1"/>
  <changelog author="mliska@suse.cz" date="1602072000">- Add upstream procps-check-sanity-of-SC_ARG_MAX.patch in order to fix
  pgrep: cannot allocate 4611686018427387903 bytes when ulimit -s is unlimited.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612267200">- Package translations in procps-lang.</changelog>
  <changelog author="werner@suse.de" date="1612958400">- Update to procps-ng-3.3.17
  * library: Incremented to 8:3:0
    (no removals or additions, internal changes only)
  * all: properly handle utf8 cmdline translations         issue #176
  * kill: Pass int to signalled process                    merge #32
  * pgrep: Pass int to signalled process                   merge #32
  * pgrep: Check sanity of SG_ARG_MAX                      issue #152
  * pgrep: Add older than selection                        merge #79
  * pidof: Quiet mode                                      merge #83
  * pidof: show worker threads                             Redhat #1803640
  * ps.1: Mention stime alias                              issue #164
  * ps: check also match on truncated 16 char comm names
  * ps: Add exe output option                              Redhat #1399206
  * ps: A lot more sorting available                       merge #99
  * pwait: New command waits for a process                 merge #97
  * sysctl: Match systemd directory order                  Debian #950788
  * sysctl: Document directory order                       Debian #951550
  * top: ensure config file backward compatibility         Debian #951335
  * top: add command line 'e' for symmetry with 'E'        issue #165
  * top: add '4' toggle for two abreast cpu display        issue #172
  * top: add '!' toggle for combining multiple cpus
  * top: fix potential SEGV involving -p switch            merge #114
  * vmstat: Wide mode gives wider proc columns             merge #48
  * watch: Add environment variable for interval           merge #62
  * watch: Add no linewrap option                          issue #182
  * watch: Support more colors                             merge #106,#109
  * free,uptime,slabtop: complain about extra ops          issue #181
- Remove now obsolete upstream patches
  * procps-check-sanity-of-SC_ARG_MAX.patch
  * procps-ng-3e1c00d0.patch
- Port patches
  * procps-ng-3.3.10-integer-overflow.patch
  * procps-ng-3.3.10-large_pcpu.patch
  * procps-ng-3.3.8-accuracy.dif
  * procps-ng-3.3.8-bnc634840.patch
  * procps-ng-3.3.8-petabytes.patch
  * procps-ng-3.3.8-tinfo.dif
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612958401">- Fix directory for Ukrainian man pages translations.
- Move localized man pages to lang package.
- Remove obsolete conditionals.
- Remove obsolete --enable-oomem option.
- Run spec-cleaner.</changelog>
  <changelog author="werner@suse.de" date="1613044800">- Add /usr/share/man/uk dir to file list for lang sub package</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1613995200">- Remove /usr/share/man/uk dir to file list for lang sub package:
  It's now provided by filesystem.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1615377600">- Don't install translated man pages for non-installed binaries
  (uptime, kill).</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1625227200">- Skip test suite on emulated riscv64 systems as the qemu process
  is unexpected on the command lines of processes</changelog>
  <changelog author="werner@suse.de" date="1642680000">- Correct used URLs</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Some older products do not know about /usr/share/man/uk</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="werner@suse.de" date="1692100800">- Add patch CVE-2023-4016.patch
  * CVE-2023-4016: ps buffer overflow (bsc#1214290)</changelog>
  <changelog author="kukuk@suse.com" date="1692187200">- procps-ng-3.3.17-logind.patch: Backport from 4.x git, prefer
  logind over utmp (jsc#PED-3144)</changelog>
  <changelog author="werner@suse.de" date="1692360000">- Modify patches
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-ng-3.3.17-logind.patch
  to real to not truncate output of w with option -n</changelog>
  <changelog author="werner@suse.de" date="1695211200">- Submit latest procps 3.3.17 to SLE-15 tree for jira#PED-3244
  and jira#PED-6369
- The patches now upstream had been dropped meanwhile
  * procps-vmstat-1b9ea611.patch (bsc#1185417)
  - For support up to 2048 CPU as well
  * bsc1209122-a6c0795d.patch (bnc#1209122)
  - allow `-´ as leading character to ignore possible errors
    on systctl entries
  * patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753)
  - was a backport of an upstream fix to get the first CPU
    summary correct
- Enable pidof for SLE-15 as this is provided by sysvinit-tools
- Use a check on syscall __NR_pidfd_open to decide if
  the pwait tool and its manual page will be build</changelog>
</package>
<package pkgid="6ca0c667c705991456719b928a78d683db074b4b9c6a690bb451c218eff1d45b" name="libprocps8" arch="s390x">
  <version epoch="0" ver="3.3.17" rel="150000.7.37.1"/>
  <changelog author="mliska@suse.cz" date="1602072000">- Add upstream procps-check-sanity-of-SC_ARG_MAX.patch in order to fix
  pgrep: cannot allocate 4611686018427387903 bytes when ulimit -s is unlimited.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612267200">- Package translations in procps-lang.</changelog>
  <changelog author="werner@suse.de" date="1612958400">- Update to procps-ng-3.3.17
  * library: Incremented to 8:3:0
    (no removals or additions, internal changes only)
  * all: properly handle utf8 cmdline translations         issue #176
  * kill: Pass int to signalled process                    merge #32
  * pgrep: Pass int to signalled process                   merge #32
  * pgrep: Check sanity of SG_ARG_MAX                      issue #152
  * pgrep: Add older than selection                        merge #79
  * pidof: Quiet mode                                      merge #83
  * pidof: show worker threads                             Redhat #1803640
  * ps.1: Mention stime alias                              issue #164
  * ps: check also match on truncated 16 char comm names
  * ps: Add exe output option                              Redhat #1399206
  * ps: A lot more sorting available                       merge #99
  * pwait: New command waits for a process                 merge #97
  * sysctl: Match systemd directory order                  Debian #950788
  * sysctl: Document directory order                       Debian #951550
  * top: ensure config file backward compatibility         Debian #951335
  * top: add command line 'e' for symmetry with 'E'        issue #165
  * top: add '4' toggle for two abreast cpu display        issue #172
  * top: add '!' toggle for combining multiple cpus
  * top: fix potential SEGV involving -p switch            merge #114
  * vmstat: Wide mode gives wider proc columns             merge #48
  * watch: Add environment variable for interval           merge #62
  * watch: Add no linewrap option                          issue #182
  * watch: Support more colors                             merge #106,#109
  * free,uptime,slabtop: complain about extra ops          issue #181
- Remove now obsolete upstream patches
  * procps-check-sanity-of-SC_ARG_MAX.patch
  * procps-ng-3e1c00d0.patch
- Port patches
  * procps-ng-3.3.10-integer-overflow.patch
  * procps-ng-3.3.10-large_pcpu.patch
  * procps-ng-3.3.8-accuracy.dif
  * procps-ng-3.3.8-bnc634840.patch
  * procps-ng-3.3.8-petabytes.patch
  * procps-ng-3.3.8-tinfo.dif
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612958401">- Fix directory for Ukrainian man pages translations.
- Move localized man pages to lang package.
- Remove obsolete conditionals.
- Remove obsolete --enable-oomem option.
- Run spec-cleaner.</changelog>
  <changelog author="werner@suse.de" date="1613044800">- Add /usr/share/man/uk dir to file list for lang sub package</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1613995200">- Remove /usr/share/man/uk dir to file list for lang sub package:
  It's now provided by filesystem.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1615377600">- Don't install translated man pages for non-installed binaries
  (uptime, kill).</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1625227200">- Skip test suite on emulated riscv64 systems as the qemu process
  is unexpected on the command lines of processes</changelog>
  <changelog author="werner@suse.de" date="1642680000">- Correct used URLs</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Some older products do not know about /usr/share/man/uk</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="werner@suse.de" date="1692100800">- Add patch CVE-2023-4016.patch
  * CVE-2023-4016: ps buffer overflow (bsc#1214290)</changelog>
  <changelog author="kukuk@suse.com" date="1692187200">- procps-ng-3.3.17-logind.patch: Backport from 4.x git, prefer
  logind over utmp (jsc#PED-3144)</changelog>
  <changelog author="werner@suse.de" date="1692360000">- Modify patches
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-ng-3.3.17-logind.patch
  to real to not truncate output of w with option -n</changelog>
  <changelog author="werner@suse.de" date="1695211200">- Submit latest procps 3.3.17 to SLE-15 tree for jira#PED-3244
  and jira#PED-6369
- The patches now upstream had been dropped meanwhile
  * procps-vmstat-1b9ea611.patch (bsc#1185417)
  - For support up to 2048 CPU as well
  * bsc1209122-a6c0795d.patch (bnc#1209122)
  - allow `-´ as leading character to ignore possible errors
    on systctl entries
  * patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753)
  - was a backport of an upstream fix to get the first CPU
    summary correct
- Enable pidof for SLE-15 as this is provided by sysvinit-tools
- Use a check on syscall __NR_pidfd_open to decide if
  the pwait tool and its manual page will be build</changelog>
</package>
<package pkgid="6feb6a642a83b70bbb015f173290e529667b6b1fc233a62dba7eac1374a41f5c" name="libprocps8" arch="x86_64">
  <version epoch="0" ver="3.3.17" rel="150000.7.37.1"/>
  <changelog author="mliska@suse.cz" date="1602072000">- Add upstream procps-check-sanity-of-SC_ARG_MAX.patch in order to fix
  pgrep: cannot allocate 4611686018427387903 bytes when ulimit -s is unlimited.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612267200">- Package translations in procps-lang.</changelog>
  <changelog author="werner@suse.de" date="1612958400">- Update to procps-ng-3.3.17
  * library: Incremented to 8:3:0
    (no removals or additions, internal changes only)
  * all: properly handle utf8 cmdline translations         issue #176
  * kill: Pass int to signalled process                    merge #32
  * pgrep: Pass int to signalled process                   merge #32
  * pgrep: Check sanity of SG_ARG_MAX                      issue #152
  * pgrep: Add older than selection                        merge #79
  * pidof: Quiet mode                                      merge #83
  * pidof: show worker threads                             Redhat #1803640
  * ps.1: Mention stime alias                              issue #164
  * ps: check also match on truncated 16 char comm names
  * ps: Add exe output option                              Redhat #1399206
  * ps: A lot more sorting available                       merge #99
  * pwait: New command waits for a process                 merge #97
  * sysctl: Match systemd directory order                  Debian #950788
  * sysctl: Document directory order                       Debian #951550
  * top: ensure config file backward compatibility         Debian #951335
  * top: add command line 'e' for symmetry with 'E'        issue #165
  * top: add '4' toggle for two abreast cpu display        issue #172
  * top: add '!' toggle for combining multiple cpus
  * top: fix potential SEGV involving -p switch            merge #114
  * vmstat: Wide mode gives wider proc columns             merge #48
  * watch: Add environment variable for interval           merge #62
  * watch: Add no linewrap option                          issue #182
  * watch: Support more colors                             merge #106,#109
  * free,uptime,slabtop: complain about extra ops          issue #181
- Remove now obsolete upstream patches
  * procps-check-sanity-of-SC_ARG_MAX.patch
  * procps-ng-3e1c00d0.patch
- Port patches
  * procps-ng-3.3.10-integer-overflow.patch
  * procps-ng-3.3.10-large_pcpu.patch
  * procps-ng-3.3.8-accuracy.dif
  * procps-ng-3.3.8-bnc634840.patch
  * procps-ng-3.3.8-petabytes.patch
  * procps-ng-3.3.8-tinfo.dif
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612958401">- Fix directory for Ukrainian man pages translations.
- Move localized man pages to lang package.
- Remove obsolete conditionals.
- Remove obsolete --enable-oomem option.
- Run spec-cleaner.</changelog>
  <changelog author="werner@suse.de" date="1613044800">- Add /usr/share/man/uk dir to file list for lang sub package</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1613995200">- Remove /usr/share/man/uk dir to file list for lang sub package:
  It's now provided by filesystem.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1615377600">- Don't install translated man pages for non-installed binaries
  (uptime, kill).</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1625227200">- Skip test suite on emulated riscv64 systems as the qemu process
  is unexpected on the command lines of processes</changelog>
  <changelog author="werner@suse.de" date="1642680000">- Correct used URLs</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Some older products do not know about /usr/share/man/uk</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="werner@suse.de" date="1692100800">- Add patch CVE-2023-4016.patch
  * CVE-2023-4016: ps buffer overflow (bsc#1214290)</changelog>
  <changelog author="kukuk@suse.com" date="1692187200">- procps-ng-3.3.17-logind.patch: Backport from 4.x git, prefer
  logind over utmp (jsc#PED-3144)</changelog>
  <changelog author="werner@suse.de" date="1692360000">- Modify patches
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-ng-3.3.17-logind.patch
  to real to not truncate output of w with option -n</changelog>
  <changelog author="werner@suse.de" date="1695211200">- Submit latest procps 3.3.17 to SLE-15 tree for jira#PED-3244
  and jira#PED-6369
- The patches now upstream had been dropped meanwhile
  * procps-vmstat-1b9ea611.patch (bsc#1185417)
  - For support up to 2048 CPU as well
  * bsc1209122-a6c0795d.patch (bnc#1209122)
  - allow `-´ as leading character to ignore possible errors
    on systctl entries
  * patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753)
  - was a backport of an upstream fix to get the first CPU
    summary correct
- Enable pidof for SLE-15 as this is provided by sysvinit-tools
- Use a check on syscall __NR_pidfd_open to decide if
  the pwait tool and its manual page will be build</changelog>
</package>
<package pkgid="f3397ce6054b065e853455fba6933527945a03d101ccf7b811e35ce77d050a16" name="libprocps8" arch="aarch64">
  <version epoch="0" ver="3.3.17" rel="150000.7.39.1"/>
  <changelog author="mliska@suse.cz" date="1602072000">- Add upstream procps-check-sanity-of-SC_ARG_MAX.patch in order to fix
  pgrep: cannot allocate 4611686018427387903 bytes when ulimit -s is unlimited.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612267200">- Package translations in procps-lang.</changelog>
  <changelog author="werner@suse.de" date="1612958400">- Update to procps-ng-3.3.17
  * library: Incremented to 8:3:0
    (no removals or additions, internal changes only)
  * all: properly handle utf8 cmdline translations         issue #176
  * kill: Pass int to signalled process                    merge #32
  * pgrep: Pass int to signalled process                   merge #32
  * pgrep: Check sanity of SG_ARG_MAX                      issue #152
  * pgrep: Add older than selection                        merge #79
  * pidof: Quiet mode                                      merge #83
  * pidof: show worker threads                             Redhat #1803640
  * ps.1: Mention stime alias                              issue #164
  * ps: check also match on truncated 16 char comm names
  * ps: Add exe output option                              Redhat #1399206
  * ps: A lot more sorting available                       merge #99
  * pwait: New command waits for a process                 merge #97
  * sysctl: Match systemd directory order                  Debian #950788
  * sysctl: Document directory order                       Debian #951550
  * top: ensure config file backward compatibility         Debian #951335
  * top: add command line 'e' for symmetry with 'E'        issue #165
  * top: add '4' toggle for two abreast cpu display        issue #172
  * top: add '!' toggle for combining multiple cpus
  * top: fix potential SEGV involving -p switch            merge #114
  * vmstat: Wide mode gives wider proc columns             merge #48
  * watch: Add environment variable for interval           merge #62
  * watch: Add no linewrap option                          issue #182
  * watch: Support more colors                             merge #106,#109
  * free,uptime,slabtop: complain about extra ops          issue #181
- Remove now obsolete upstream patches
  * procps-check-sanity-of-SC_ARG_MAX.patch
  * procps-ng-3e1c00d0.patch
- Port patches
  * procps-ng-3.3.10-integer-overflow.patch
  * procps-ng-3.3.10-large_pcpu.patch
  * procps-ng-3.3.8-accuracy.dif
  * procps-ng-3.3.8-bnc634840.patch
  * procps-ng-3.3.8-petabytes.patch
  * procps-ng-3.3.8-tinfo.dif
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612958401">- Fix directory for Ukrainian man pages translations.
- Move localized man pages to lang package.
- Remove obsolete conditionals.
- Remove obsolete --enable-oomem option.
- Run spec-cleaner.</changelog>
  <changelog author="werner@suse.de" date="1613044800">- Add /usr/share/man/uk dir to file list for lang sub package</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1613995200">- Remove /usr/share/man/uk dir to file list for lang sub package:
  It's now provided by filesystem.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1615377600">- Don't install translated man pages for non-installed binaries
  (uptime, kill).</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1625227200">- Skip test suite on emulated riscv64 systems as the qemu process
  is unexpected on the command lines of processes</changelog>
  <changelog author="werner@suse.de" date="1642680000">- Correct used URLs</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Some older products do not know about /usr/share/man/uk</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="werner@suse.de" date="1692100800">- Add patch CVE-2023-4016.patch
  * CVE-2023-4016: ps buffer overflow (bsc#1214290)</changelog>
  <changelog author="kukuk@suse.com" date="1692187200">- procps-ng-3.3.17-logind.patch: Backport from 4.x git, prefer
  logind over utmp (jsc#PED-3144)</changelog>
  <changelog author="werner@suse.de" date="1692360000">- Modify patches
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-ng-3.3.17-logind.patch
  to real to not truncate output of w with option -n</changelog>
  <changelog author="werner@suse.de" date="1695211200">- Submit latest procps 3.3.17 to SLE-15 tree for jira#PED-3244
  and jira#PED-6369
- The patches now upstream had been dropped meanwhile
  * procps-vmstat-1b9ea611.patch (bsc#1185417)
  - For support up to 2048 CPU as well
  * bsc1209122-a6c0795d.patch (bnc#1209122)
  - allow `-´ as leading character to ignore possible errors
    on systctl entries
  * patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753)
  - was a backport of an upstream fix to get the first CPU
    summary correct
- Enable pidof for SLE-15 as this is provided by sysvinit-tools
- Use a check on syscall __NR_pidfd_open to decide if
  the pwait tool and its manual page will be build</changelog>
</package>
<package pkgid="795520c6629693a541eb62bb76244649621d867093d2ce8923b968a674510894" name="libprocps8" arch="ppc64le">
  <version epoch="0" ver="3.3.17" rel="150000.7.39.1"/>
  <changelog author="mliska@suse.cz" date="1602072000">- Add upstream procps-check-sanity-of-SC_ARG_MAX.patch in order to fix
  pgrep: cannot allocate 4611686018427387903 bytes when ulimit -s is unlimited.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612267200">- Package translations in procps-lang.</changelog>
  <changelog author="werner@suse.de" date="1612958400">- Update to procps-ng-3.3.17
  * library: Incremented to 8:3:0
    (no removals or additions, internal changes only)
  * all: properly handle utf8 cmdline translations         issue #176
  * kill: Pass int to signalled process                    merge #32
  * pgrep: Pass int to signalled process                   merge #32
  * pgrep: Check sanity of SG_ARG_MAX                      issue #152
  * pgrep: Add older than selection                        merge #79
  * pidof: Quiet mode                                      merge #83
  * pidof: show worker threads                             Redhat #1803640
  * ps.1: Mention stime alias                              issue #164
  * ps: check also match on truncated 16 char comm names
  * ps: Add exe output option                              Redhat #1399206
  * ps: A lot more sorting available                       merge #99
  * pwait: New command waits for a process                 merge #97
  * sysctl: Match systemd directory order                  Debian #950788
  * sysctl: Document directory order                       Debian #951550
  * top: ensure config file backward compatibility         Debian #951335
  * top: add command line 'e' for symmetry with 'E'        issue #165
  * top: add '4' toggle for two abreast cpu display        issue #172
  * top: add '!' toggle for combining multiple cpus
  * top: fix potential SEGV involving -p switch            merge #114
  * vmstat: Wide mode gives wider proc columns             merge #48
  * watch: Add environment variable for interval           merge #62
  * watch: Add no linewrap option                          issue #182
  * watch: Support more colors                             merge #106,#109
  * free,uptime,slabtop: complain about extra ops          issue #181
- Remove now obsolete upstream patches
  * procps-check-sanity-of-SC_ARG_MAX.patch
  * procps-ng-3e1c00d0.patch
- Port patches
  * procps-ng-3.3.10-integer-overflow.patch
  * procps-ng-3.3.10-large_pcpu.patch
  * procps-ng-3.3.8-accuracy.dif
  * procps-ng-3.3.8-bnc634840.patch
  * procps-ng-3.3.8-petabytes.patch
  * procps-ng-3.3.8-tinfo.dif
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612958401">- Fix directory for Ukrainian man pages translations.
- Move localized man pages to lang package.
- Remove obsolete conditionals.
- Remove obsolete --enable-oomem option.
- Run spec-cleaner.</changelog>
  <changelog author="werner@suse.de" date="1613044800">- Add /usr/share/man/uk dir to file list for lang sub package</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1613995200">- Remove /usr/share/man/uk dir to file list for lang sub package:
  It's now provided by filesystem.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1615377600">- Don't install translated man pages for non-installed binaries
  (uptime, kill).</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1625227200">- Skip test suite on emulated riscv64 systems as the qemu process
  is unexpected on the command lines of processes</changelog>
  <changelog author="werner@suse.de" date="1642680000">- Correct used URLs</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Some older products do not know about /usr/share/man/uk</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="werner@suse.de" date="1692100800">- Add patch CVE-2023-4016.patch
  * CVE-2023-4016: ps buffer overflow (bsc#1214290)</changelog>
  <changelog author="kukuk@suse.com" date="1692187200">- procps-ng-3.3.17-logind.patch: Backport from 4.x git, prefer
  logind over utmp (jsc#PED-3144)</changelog>
  <changelog author="werner@suse.de" date="1692360000">- Modify patches
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-ng-3.3.17-logind.patch
  to real to not truncate output of w with option -n</changelog>
  <changelog author="werner@suse.de" date="1695211200">- Submit latest procps 3.3.17 to SLE-15 tree for jira#PED-3244
  and jira#PED-6369
- The patches now upstream had been dropped meanwhile
  * procps-vmstat-1b9ea611.patch (bsc#1185417)
  - For support up to 2048 CPU as well
  * bsc1209122-a6c0795d.patch (bnc#1209122)
  - allow `-´ as leading character to ignore possible errors
    on systctl entries
  * patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753)
  - was a backport of an upstream fix to get the first CPU
    summary correct
- Enable pidof for SLE-15 as this is provided by sysvinit-tools
- Use a check on syscall __NR_pidfd_open to decide if
  the pwait tool and its manual page will be build</changelog>
</package>
<package pkgid="5a0978bc7041c08bb219cc60d5720d473b49b7cf9673b9401b29749d93abfc2d" name="libprocps8" arch="s390x">
  <version epoch="0" ver="3.3.17" rel="150000.7.39.1"/>
  <changelog author="mliska@suse.cz" date="1602072000">- Add upstream procps-check-sanity-of-SC_ARG_MAX.patch in order to fix
  pgrep: cannot allocate 4611686018427387903 bytes when ulimit -s is unlimited.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612267200">- Package translations in procps-lang.</changelog>
  <changelog author="werner@suse.de" date="1612958400">- Update to procps-ng-3.3.17
  * library: Incremented to 8:3:0
    (no removals or additions, internal changes only)
  * all: properly handle utf8 cmdline translations         issue #176
  * kill: Pass int to signalled process                    merge #32
  * pgrep: Pass int to signalled process                   merge #32
  * pgrep: Check sanity of SG_ARG_MAX                      issue #152
  * pgrep: Add older than selection                        merge #79
  * pidof: Quiet mode                                      merge #83
  * pidof: show worker threads                             Redhat #1803640
  * ps.1: Mention stime alias                              issue #164
  * ps: check also match on truncated 16 char comm names
  * ps: Add exe output option                              Redhat #1399206
  * ps: A lot more sorting available                       merge #99
  * pwait: New command waits for a process                 merge #97
  * sysctl: Match systemd directory order                  Debian #950788
  * sysctl: Document directory order                       Debian #951550
  * top: ensure config file backward compatibility         Debian #951335
  * top: add command line 'e' for symmetry with 'E'        issue #165
  * top: add '4' toggle for two abreast cpu display        issue #172
  * top: add '!' toggle for combining multiple cpus
  * top: fix potential SEGV involving -p switch            merge #114
  * vmstat: Wide mode gives wider proc columns             merge #48
  * watch: Add environment variable for interval           merge #62
  * watch: Add no linewrap option                          issue #182
  * watch: Support more colors                             merge #106,#109
  * free,uptime,slabtop: complain about extra ops          issue #181
- Remove now obsolete upstream patches
  * procps-check-sanity-of-SC_ARG_MAX.patch
  * procps-ng-3e1c00d0.patch
- Port patches
  * procps-ng-3.3.10-integer-overflow.patch
  * procps-ng-3.3.10-large_pcpu.patch
  * procps-ng-3.3.8-accuracy.dif
  * procps-ng-3.3.8-bnc634840.patch
  * procps-ng-3.3.8-petabytes.patch
  * procps-ng-3.3.8-tinfo.dif
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612958401">- Fix directory for Ukrainian man pages translations.
- Move localized man pages to lang package.
- Remove obsolete conditionals.
- Remove obsolete --enable-oomem option.
- Run spec-cleaner.</changelog>
  <changelog author="werner@suse.de" date="1613044800">- Add /usr/share/man/uk dir to file list for lang sub package</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1613995200">- Remove /usr/share/man/uk dir to file list for lang sub package:
  It's now provided by filesystem.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1615377600">- Don't install translated man pages for non-installed binaries
  (uptime, kill).</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1625227200">- Skip test suite on emulated riscv64 systems as the qemu process
  is unexpected on the command lines of processes</changelog>
  <changelog author="werner@suse.de" date="1642680000">- Correct used URLs</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Some older products do not know about /usr/share/man/uk</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="werner@suse.de" date="1692100800">- Add patch CVE-2023-4016.patch
  * CVE-2023-4016: ps buffer overflow (bsc#1214290)</changelog>
  <changelog author="kukuk@suse.com" date="1692187200">- procps-ng-3.3.17-logind.patch: Backport from 4.x git, prefer
  logind over utmp (jsc#PED-3144)</changelog>
  <changelog author="werner@suse.de" date="1692360000">- Modify patches
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-ng-3.3.17-logind.patch
  to real to not truncate output of w with option -n</changelog>
  <changelog author="werner@suse.de" date="1695211200">- Submit latest procps 3.3.17 to SLE-15 tree for jira#PED-3244
  and jira#PED-6369
- The patches now upstream had been dropped meanwhile
  * procps-vmstat-1b9ea611.patch (bsc#1185417)
  - For support up to 2048 CPU as well
  * bsc1209122-a6c0795d.patch (bnc#1209122)
  - allow `-´ as leading character to ignore possible errors
    on systctl entries
  * patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753)
  - was a backport of an upstream fix to get the first CPU
    summary correct
- Enable pidof for SLE-15 as this is provided by sysvinit-tools
- Use a check on syscall __NR_pidfd_open to decide if
  the pwait tool and its manual page will be build</changelog>
</package>
<package pkgid="6ac4cf2d545ce71f29887d12b8a31d64255dcddbc33329e89c20748039304a44" name="libprocps8" arch="x86_64">
  <version epoch="0" ver="3.3.17" rel="150000.7.39.1"/>
  <changelog author="mliska@suse.cz" date="1602072000">- Add upstream procps-check-sanity-of-SC_ARG_MAX.patch in order to fix
  pgrep: cannot allocate 4611686018427387903 bytes when ulimit -s is unlimited.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612267200">- Package translations in procps-lang.</changelog>
  <changelog author="werner@suse.de" date="1612958400">- Update to procps-ng-3.3.17
  * library: Incremented to 8:3:0
    (no removals or additions, internal changes only)
  * all: properly handle utf8 cmdline translations         issue #176
  * kill: Pass int to signalled process                    merge #32
  * pgrep: Pass int to signalled process                   merge #32
  * pgrep: Check sanity of SG_ARG_MAX                      issue #152
  * pgrep: Add older than selection                        merge #79
  * pidof: Quiet mode                                      merge #83
  * pidof: show worker threads                             Redhat #1803640
  * ps.1: Mention stime alias                              issue #164
  * ps: check also match on truncated 16 char comm names
  * ps: Add exe output option                              Redhat #1399206
  * ps: A lot more sorting available                       merge #99
  * pwait: New command waits for a process                 merge #97
  * sysctl: Match systemd directory order                  Debian #950788
  * sysctl: Document directory order                       Debian #951550
  * top: ensure config file backward compatibility         Debian #951335
  * top: add command line 'e' for symmetry with 'E'        issue #165
  * top: add '4' toggle for two abreast cpu display        issue #172
  * top: add '!' toggle for combining multiple cpus
  * top: fix potential SEGV involving -p switch            merge #114
  * vmstat: Wide mode gives wider proc columns             merge #48
  * watch: Add environment variable for interval           merge #62
  * watch: Add no linewrap option                          issue #182
  * watch: Support more colors                             merge #106,#109
  * free,uptime,slabtop: complain about extra ops          issue #181
- Remove now obsolete upstream patches
  * procps-check-sanity-of-SC_ARG_MAX.patch
  * procps-ng-3e1c00d0.patch
- Port patches
  * procps-ng-3.3.10-integer-overflow.patch
  * procps-ng-3.3.10-large_pcpu.patch
  * procps-ng-3.3.8-accuracy.dif
  * procps-ng-3.3.8-bnc634840.patch
  * procps-ng-3.3.8-petabytes.patch
  * procps-ng-3.3.8-tinfo.dif
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612958401">- Fix directory for Ukrainian man pages translations.
- Move localized man pages to lang package.
- Remove obsolete conditionals.
- Remove obsolete --enable-oomem option.
- Run spec-cleaner.</changelog>
  <changelog author="werner@suse.de" date="1613044800">- Add /usr/share/man/uk dir to file list for lang sub package</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1613995200">- Remove /usr/share/man/uk dir to file list for lang sub package:
  It's now provided by filesystem.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1615377600">- Don't install translated man pages for non-installed binaries
  (uptime, kill).</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1625227200">- Skip test suite on emulated riscv64 systems as the qemu process
  is unexpected on the command lines of processes</changelog>
  <changelog author="werner@suse.de" date="1642680000">- Correct used URLs</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Some older products do not know about /usr/share/man/uk</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="werner@suse.de" date="1692100800">- Add patch CVE-2023-4016.patch
  * CVE-2023-4016: ps buffer overflow (bsc#1214290)</changelog>
  <changelog author="kukuk@suse.com" date="1692187200">- procps-ng-3.3.17-logind.patch: Backport from 4.x git, prefer
  logind over utmp (jsc#PED-3144)</changelog>
  <changelog author="werner@suse.de" date="1692360000">- Modify patches
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-ng-3.3.17-logind.patch
  to real to not truncate output of w with option -n</changelog>
  <changelog author="werner@suse.de" date="1695211200">- Submit latest procps 3.3.17 to SLE-15 tree for jira#PED-3244
  and jira#PED-6369
- The patches now upstream had been dropped meanwhile
  * procps-vmstat-1b9ea611.patch (bsc#1185417)
  - For support up to 2048 CPU as well
  * bsc1209122-a6c0795d.patch (bnc#1209122)
  - allow `-´ as leading character to ignore possible errors
    on systctl entries
  * patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753)
  - was a backport of an upstream fix to get the first CPU
    summary correct
- Enable pidof for SLE-15 as this is provided by sysvinit-tools
- Use a check on syscall __NR_pidfd_open to decide if
  the pwait tool and its manual page will be build</changelog>
</package>
<package pkgid="0146f765267f05969100322510f156d8bc66b5c80a9b6387ed06c95313b20d53" name="libprotobuf-lite25_1_0" arch="aarch64">
  <version epoch="0" ver="25.1" rel="150400.9.3.1"/>
  <changelog author="dmueller@suse.com" date="1659614400">- add 10355.patch to fix soversioning</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 21.5:
  PHP
  * Added getContainingOneof and getRealContainingOneof to descriptor.
  * fix PHP readonly legacy files for nested messages
  Python
  * Fixed comparison of maps in Python.</changelog>
  <changelog author="dmueller@suse.com" date="1663588800">- update to 21.6:
  C++:
  * Reduce memory consumption of MessageSet parsing</changelog>
  <changelog author="dmueller@suse.com" date="1667044800">- update to 21.9:
  * Ruby
  * Replace libc strdup usage with internal impl to restore musl compat (#10818)
  * Auto capitalize enums name in Ruby (#10454) (#10763)
  * Other
  * Fix for grpc.tools #17995 &amp; protobuf #7474 (handle UTF-8 paths in argumentfile) (#10721)
  * C++
  * 21.x No longer define no_threadlocal on OpenBSD (#10743)
  * Java
  * Mark default instance as immutable first to avoid race during static initialization of default instances (#10771)
  * Refactoring java full runtime to reuse sub-message builders and prepare to
    migrate parsing logic from parse constructor to builder.
  * Move proto wireformat parsing functionality from the private "parsing
    constructor" to the Builder class.
  * Change the Lite runtime to prefer merging from the wireformat into mutable
    messages rather than building up a new immutable object before merging. This
    way results in fewer allocations and copy operations.
  * Make message-type extensions merge from wire-format instead of building up
    instances and merging afterwards. This has much better performance.
  * Fix TextFormat parser to build up recurring (but supposedly not repeated)
    sub-messages directly from text rather than building a new sub-message and
    merging the fully formed message into the existing field.</changelog>
  <changelog author="dmueller@suse.com" date="1670241600">- update to 21.10:
  * Java
  * Use bit-field int values in buildPartial to skip work on unset groups of
    fields. (#10960)
  * Mark nested builder as clean after clear is called (#10984)</changelog>
  <changelog author="dmueller@suse.com" date="1670500800">- update to 21.11:
  * Python
  * Add license file to pypi wheels (#10936)
  * Fix round-trip bug (#10158)</changelog>
  <changelog author="dmueller@suse.com" date="1671105600">- update to v21.12:
  * Python
  * Fix broken enum ranges (#11171)
  * Stop requiring extension fields to have a sythetic oneof (#11091)
  * Python runtime 4.21.10 not works generated code can not load valid
    proto.</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO (boo#1133277).</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to v22.3
  UPB (Python/PHP/Ruby C-Extension)
  * Remove src prefix from proto import
  * Fix .gitmodules to use the correct absl branch
  * Remove erroneous dependency on googletest
- update to 22.2:
  Java
  * Add version to intra proto dependencies and add kotlin stdlib
    dependency
  * Add $ back for osgi header
  * Remove $ in pom files
- update to 22.1:
  * Add visibility of plugin.proto to python directory
  * Strip "src" from file name of plugin.proto
  * Add OSGi headers to pom files.
  * Remove errorprone dependency from kotlin protos.
  * Version protoc according to the compiler version number.
- update to 22.0:
  * This version includes breaking changes to: Cpp.
    Please refer to the migration guide for information:
    https://protobuf.dev/support/migration/#compiler-22
  * [Cpp] Migrate to Abseil's logging library.
  * [Cpp] `proto2::Map::value_type` changes to `std::pair`.
  * [Cpp] Mark final ZeroCopyInputStream, ZeroCopyOutputStream,
    and DefaultFieldComparator classes.
  * [Cpp] Add a dependency on Abseil (#10416)
  * [Cpp] Remove all autotools usage (#10132)
  * [Cpp] Add C++20 reserved keywords
  * [Cpp] Dropped C++11 Support
  * [Cpp] Delete Arena::Init
  * [Cpp] Replace JSON parser with new implementation
  * [Cpp] Make RepeatedField::GetArena non-const in order to
    support split RepeatedFields.
  * long list of bindings specific fixes see
    https://github.com/protocolbuffers/protobuf/releases/tag/v22.0
- python sub packages version is set 4.22.3 as defined in
  python/google/protobuf/__init__.py to stay compatible
- skip python2 builds by default
- drop patches:
  * 10355.patch,
  * gcc12-disable-__constinit-with-c++-11.patch (merged upstream)
- added patches:
  * add-missing-stdint-header.patch   added for compile fixes</changelog>
  <changelog author="fstrba@suse.com" date="1682596800">- Make possible to build on older systems, like SLE12 that miss
  some of the used macros.</changelog>
  <changelog author="fstrba@suse.com" date="1682683200">- Mention the rpmlintrc file in the spec.</changelog>
  <changelog author="mpluskal@suse.com" date="1683633600">- Fix confusion in versions</changelog>
  <changelog author="dmueller@suse.com" date="1686484800">- drop python2 handling
- fix version handling and package the private libs again</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 22.5:
  C++
  * Add missing cstdint header
  * Fix: missing -DPROTOBUF_USE_DLLS in pkg-config (#12700)
  * Avoid using string(JOIN..., which requires cmake 3.12
  * Explicitly include GTest package in examples
  * Bump Abseil submodule to 20230125.3 (#12660)
- update to 22.4:
  C++
  * Fix libprotoc: export useful symbols from .so
  * Fix btree issue in map tests.
  Python
  * Fix bug in _internal_copy_files where the rule would fail in
    downstream repositories.
  Other
  * Bump utf8_range to version with working pkg-config (#12584)
  * Fix declared dependencies for pkg-config
  * Update abseil dependency and reorder dependencies to ensure
    we use the version specified in protobuf_deps.
  * Turn off clang::musttail on i386</changelog>
  <changelog author="fvogt@suse.com" date="1686744000">- Add patch to fix linking ThreadSafeArena:
  * 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch
- Drop the protobuf-source package, no longer used</changelog>
  <changelog author="dmueller@suse.com" date="1688385600">- update to 23.3:
  C++
  * Regenerate stale files
  * Use the same ABI for static and shared libraries on non-
    Windows platforms
  * Add a workaround for GCC constexpr bug
  Objective-C
  * Regenerate stale files
  UPB (Python/PHP/Ruby C-Extension)
  * Fixed a bug in `upb_Map_Delete()` that caused crashes in
    map.delete(k) for Ruby when string-keyed maps were in use.
  Compiler
  * Add missing header to Objective-c generator
  * Add a workaround for GCC constexpr bug
  Java
  * Rollback of: Simplify protobuf Java message builder by
    removing methods that calls the super class only.
  Csharp
  * [C#] Replace regex that validates descriptor names
- drop 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1688731200">- update to 23.4:
  * Add dllexport_decl for generated default instance.
  * Deps: Update Guava to 32.0.1</changelog>
  <changelog author="fstrba@suse.com" date="1698667200">- Build with source and target levels 8
  * fixes build with JDK21
- Install the pom file with the new %%mvn_install_pom macro
- Do not install the pom-only artifacts, since the %%mvn_install_pom
  macro resolves the variables at the install time</changelog>
  <changelog author="dmueller@suse.com" date="1703160000">- build against modern python on sle15</changelog>
  <changelog author="dmueller@suse.com" date="1704196800">- update to 25.1:
  * Raise warnings for deprecated python syntax usages
  * Add support for extensions in CRuby, JRuby, and FFI Ruby
  * Add support for options in CRuby, JRuby and FFI (#14594)
- update to 25.0:
  * Implement proto2/proto3 with editions
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Editions: Introduce functionality to protoc for generating
    edition feature set defaults.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Publish extension declarations with declaration
    verifications.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Protoc: parser rejects explicit use of map_entry option
  * Protoc: validate that reserved range start is before end
  * Protoc: support identifiers as reserved names in addition to
    string literals (only in editions)
  * Drop support for Bazel 5.
  * Allow code generators to specify whether or not they support
    editions.
  [#] C++
  * Set `PROTOBUF_EXPORT` on
    `InternalOutOfLineDeleteMessageLite()`
  * Update stale checked-in files
  * Apply PROTOBUF_NOINLINE to declarations of some functions
    that want it.
  * Implement proto2/proto3 with editions
  * Make JSON UTF-8 boundary check inclusive of the largest
    possible UTF-8 character.
  * Reduce `Map::size_type` to 32-bits. Protobuf containers can't
    have more than that
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Fix bug in reflection based Swap of map fields.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Add prefetching to arena allocations.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    repeated and map field accessors.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    string field accessors.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Fixes for 32-bit MSVC.
  * Publish extension declarations with declaration
    verifications.
  * Export the constants in protobuf's any.h to support DLL
    builds.
  * Implement AbslStringify for the Descriptor family of types.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    message field accessors.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Introduce C++ feature for UTF8 validation.
  * Protoc: validate that reserved range start is before end
  * Remove option to disable the table-driven parser in protoc.
  * Lock down ctype=CORD in proto file.
  * Support split repeated fields.
  * In OSS mode omit some extern template specializations.
  * Allow code generators to specify whether or not they support
    editions.
  [#] Java
  * Implement proto2/proto3 with editions
  * Remove synthetic oneofs from Java gencode field accessor
    tables.
  * Timestamps.parse: Add error handling for invalid
    hours/minutes in the timezone offset.
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Add missing debugging version info to Protobuf Java gencode
    when multiple files are generated.
  * Fix a bad cast in putBuilderIfAbsent when already present due
    to using the result of put() directly (which is null if it
    currently has no value)
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Fix a NPE in putBuilderIfAbsent due to using the result of
    put() directly (which is null if it currently has no value)
  * Update Kotlin compiler to escape package names
  * Add MapFieldBuilder and change codegen to generate it and the
    put{field}BuilderIfAbsent method.
  * Introduce recursion limit in Java text format parsing
  * Consider the protobuf.Any invalid if typeUrl.split("/")
    returns an empty array.
  * Mark `FieldDescriptor.hasOptionalKeyword()` as deprecated.
  * Fixed Python memory leak in map lookup.
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Ensure Timestamp.ToDatetime(tz) has correct offset
  * Do not check required field for upb python MergeFrom
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Emit __slots__ in pyi output as a tuple rather than a list
    for --pyi_out.
  * Fix a bug that strips options from descriptor.proto in
    Python.
  * Raise warings for message.UnknownFields() usages and navigate
    to the new add
  * Add protobuf python keyword support in path for stub
    generator.
  * Add tuple support to set Struct
  * ### Python C-Extension (Default)
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Check that ffi-compiler loads before using it to define
    tasks.
  [#] UPB (Python/PHP/Ruby C-Extension)
  * Include .inc files directly instead of through a filegroup
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Add utf8_validation feature back to the global feature set.
  * Do not check required field for upb python MergeFrom
  * Merge the protobuf and upb Bazel repos
  * Added malloc_trim() calls to Python allocator so RSS will
    decrease when memory is freed
  * Upb: fix a Python memory leak in ByteSize()
  * Support ASAN detection on clang
  * Upb: bugfix for importing a proto3 enum from within a proto2
    file
  * Expose methods needed by Ruby FFI using UPB_API
  * Fix `PyUpb_Message_MergeInternal` segfault</changelog>
</package>
<package pkgid="752b8162fdb52957ef09056c7f771fb4dbc55c70beff70e6279b08432b7f502d" name="libprotobuf-lite25_1_0" arch="ppc64le">
  <version epoch="0" ver="25.1" rel="150400.9.3.1"/>
  <changelog author="dmueller@suse.com" date="1659614400">- add 10355.patch to fix soversioning</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 21.5:
  PHP
  * Added getContainingOneof and getRealContainingOneof to descriptor.
  * fix PHP readonly legacy files for nested messages
  Python
  * Fixed comparison of maps in Python.</changelog>
  <changelog author="dmueller@suse.com" date="1663588800">- update to 21.6:
  C++:
  * Reduce memory consumption of MessageSet parsing</changelog>
  <changelog author="dmueller@suse.com" date="1667044800">- update to 21.9:
  * Ruby
  * Replace libc strdup usage with internal impl to restore musl compat (#10818)
  * Auto capitalize enums name in Ruby (#10454) (#10763)
  * Other
  * Fix for grpc.tools #17995 &amp; protobuf #7474 (handle UTF-8 paths in argumentfile) (#10721)
  * C++
  * 21.x No longer define no_threadlocal on OpenBSD (#10743)
  * Java
  * Mark default instance as immutable first to avoid race during static initialization of default instances (#10771)
  * Refactoring java full runtime to reuse sub-message builders and prepare to
    migrate parsing logic from parse constructor to builder.
  * Move proto wireformat parsing functionality from the private "parsing
    constructor" to the Builder class.
  * Change the Lite runtime to prefer merging from the wireformat into mutable
    messages rather than building up a new immutable object before merging. This
    way results in fewer allocations and copy operations.
  * Make message-type extensions merge from wire-format instead of building up
    instances and merging afterwards. This has much better performance.
  * Fix TextFormat parser to build up recurring (but supposedly not repeated)
    sub-messages directly from text rather than building a new sub-message and
    merging the fully formed message into the existing field.</changelog>
  <changelog author="dmueller@suse.com" date="1670241600">- update to 21.10:
  * Java
  * Use bit-field int values in buildPartial to skip work on unset groups of
    fields. (#10960)
  * Mark nested builder as clean after clear is called (#10984)</changelog>
  <changelog author="dmueller@suse.com" date="1670500800">- update to 21.11:
  * Python
  * Add license file to pypi wheels (#10936)
  * Fix round-trip bug (#10158)</changelog>
  <changelog author="dmueller@suse.com" date="1671105600">- update to v21.12:
  * Python
  * Fix broken enum ranges (#11171)
  * Stop requiring extension fields to have a sythetic oneof (#11091)
  * Python runtime 4.21.10 not works generated code can not load valid
    proto.</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO (boo#1133277).</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to v22.3
  UPB (Python/PHP/Ruby C-Extension)
  * Remove src prefix from proto import
  * Fix .gitmodules to use the correct absl branch
  * Remove erroneous dependency on googletest
- update to 22.2:
  Java
  * Add version to intra proto dependencies and add kotlin stdlib
    dependency
  * Add $ back for osgi header
  * Remove $ in pom files
- update to 22.1:
  * Add visibility of plugin.proto to python directory
  * Strip "src" from file name of plugin.proto
  * Add OSGi headers to pom files.
  * Remove errorprone dependency from kotlin protos.
  * Version protoc according to the compiler version number.
- update to 22.0:
  * This version includes breaking changes to: Cpp.
    Please refer to the migration guide for information:
    https://protobuf.dev/support/migration/#compiler-22
  * [Cpp] Migrate to Abseil's logging library.
  * [Cpp] `proto2::Map::value_type` changes to `std::pair`.
  * [Cpp] Mark final ZeroCopyInputStream, ZeroCopyOutputStream,
    and DefaultFieldComparator classes.
  * [Cpp] Add a dependency on Abseil (#10416)
  * [Cpp] Remove all autotools usage (#10132)
  * [Cpp] Add C++20 reserved keywords
  * [Cpp] Dropped C++11 Support
  * [Cpp] Delete Arena::Init
  * [Cpp] Replace JSON parser with new implementation
  * [Cpp] Make RepeatedField::GetArena non-const in order to
    support split RepeatedFields.
  * long list of bindings specific fixes see
    https://github.com/protocolbuffers/protobuf/releases/tag/v22.0
- python sub packages version is set 4.22.3 as defined in
  python/google/protobuf/__init__.py to stay compatible
- skip python2 builds by default
- drop patches:
  * 10355.patch,
  * gcc12-disable-__constinit-with-c++-11.patch (merged upstream)
- added patches:
  * add-missing-stdint-header.patch   added for compile fixes</changelog>
  <changelog author="fstrba@suse.com" date="1682596800">- Make possible to build on older systems, like SLE12 that miss
  some of the used macros.</changelog>
  <changelog author="fstrba@suse.com" date="1682683200">- Mention the rpmlintrc file in the spec.</changelog>
  <changelog author="mpluskal@suse.com" date="1683633600">- Fix confusion in versions</changelog>
  <changelog author="dmueller@suse.com" date="1686484800">- drop python2 handling
- fix version handling and package the private libs again</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 22.5:
  C++
  * Add missing cstdint header
  * Fix: missing -DPROTOBUF_USE_DLLS in pkg-config (#12700)
  * Avoid using string(JOIN..., which requires cmake 3.12
  * Explicitly include GTest package in examples
  * Bump Abseil submodule to 20230125.3 (#12660)
- update to 22.4:
  C++
  * Fix libprotoc: export useful symbols from .so
  * Fix btree issue in map tests.
  Python
  * Fix bug in _internal_copy_files where the rule would fail in
    downstream repositories.
  Other
  * Bump utf8_range to version with working pkg-config (#12584)
  * Fix declared dependencies for pkg-config
  * Update abseil dependency and reorder dependencies to ensure
    we use the version specified in protobuf_deps.
  * Turn off clang::musttail on i386</changelog>
  <changelog author="fvogt@suse.com" date="1686744000">- Add patch to fix linking ThreadSafeArena:
  * 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch
- Drop the protobuf-source package, no longer used</changelog>
  <changelog author="dmueller@suse.com" date="1688385600">- update to 23.3:
  C++
  * Regenerate stale files
  * Use the same ABI for static and shared libraries on non-
    Windows platforms
  * Add a workaround for GCC constexpr bug
  Objective-C
  * Regenerate stale files
  UPB (Python/PHP/Ruby C-Extension)
  * Fixed a bug in `upb_Map_Delete()` that caused crashes in
    map.delete(k) for Ruby when string-keyed maps were in use.
  Compiler
  * Add missing header to Objective-c generator
  * Add a workaround for GCC constexpr bug
  Java
  * Rollback of: Simplify protobuf Java message builder by
    removing methods that calls the super class only.
  Csharp
  * [C#] Replace regex that validates descriptor names
- drop 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1688731200">- update to 23.4:
  * Add dllexport_decl for generated default instance.
  * Deps: Update Guava to 32.0.1</changelog>
  <changelog author="fstrba@suse.com" date="1698667200">- Build with source and target levels 8
  * fixes build with JDK21
- Install the pom file with the new %%mvn_install_pom macro
- Do not install the pom-only artifacts, since the %%mvn_install_pom
  macro resolves the variables at the install time</changelog>
  <changelog author="dmueller@suse.com" date="1703160000">- build against modern python on sle15</changelog>
  <changelog author="dmueller@suse.com" date="1704196800">- update to 25.1:
  * Raise warnings for deprecated python syntax usages
  * Add support for extensions in CRuby, JRuby, and FFI Ruby
  * Add support for options in CRuby, JRuby and FFI (#14594)
- update to 25.0:
  * Implement proto2/proto3 with editions
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Editions: Introduce functionality to protoc for generating
    edition feature set defaults.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Publish extension declarations with declaration
    verifications.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Protoc: parser rejects explicit use of map_entry option
  * Protoc: validate that reserved range start is before end
  * Protoc: support identifiers as reserved names in addition to
    string literals (only in editions)
  * Drop support for Bazel 5.
  * Allow code generators to specify whether or not they support
    editions.
  [#] C++
  * Set `PROTOBUF_EXPORT` on
    `InternalOutOfLineDeleteMessageLite()`
  * Update stale checked-in files
  * Apply PROTOBUF_NOINLINE to declarations of some functions
    that want it.
  * Implement proto2/proto3 with editions
  * Make JSON UTF-8 boundary check inclusive of the largest
    possible UTF-8 character.
  * Reduce `Map::size_type` to 32-bits. Protobuf containers can't
    have more than that
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Fix bug in reflection based Swap of map fields.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Add prefetching to arena allocations.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    repeated and map field accessors.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    string field accessors.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Fixes for 32-bit MSVC.
  * Publish extension declarations with declaration
    verifications.
  * Export the constants in protobuf's any.h to support DLL
    builds.
  * Implement AbslStringify for the Descriptor family of types.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    message field accessors.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Introduce C++ feature for UTF8 validation.
  * Protoc: validate that reserved range start is before end
  * Remove option to disable the table-driven parser in protoc.
  * Lock down ctype=CORD in proto file.
  * Support split repeated fields.
  * In OSS mode omit some extern template specializations.
  * Allow code generators to specify whether or not they support
    editions.
  [#] Java
  * Implement proto2/proto3 with editions
  * Remove synthetic oneofs from Java gencode field accessor
    tables.
  * Timestamps.parse: Add error handling for invalid
    hours/minutes in the timezone offset.
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Add missing debugging version info to Protobuf Java gencode
    when multiple files are generated.
  * Fix a bad cast in putBuilderIfAbsent when already present due
    to using the result of put() directly (which is null if it
    currently has no value)
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Fix a NPE in putBuilderIfAbsent due to using the result of
    put() directly (which is null if it currently has no value)
  * Update Kotlin compiler to escape package names
  * Add MapFieldBuilder and change codegen to generate it and the
    put{field}BuilderIfAbsent method.
  * Introduce recursion limit in Java text format parsing
  * Consider the protobuf.Any invalid if typeUrl.split("/")
    returns an empty array.
  * Mark `FieldDescriptor.hasOptionalKeyword()` as deprecated.
  * Fixed Python memory leak in map lookup.
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Ensure Timestamp.ToDatetime(tz) has correct offset
  * Do not check required field for upb python MergeFrom
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Emit __slots__ in pyi output as a tuple rather than a list
    for --pyi_out.
  * Fix a bug that strips options from descriptor.proto in
    Python.
  * Raise warings for message.UnknownFields() usages and navigate
    to the new add
  * Add protobuf python keyword support in path for stub
    generator.
  * Add tuple support to set Struct
  * ### Python C-Extension (Default)
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Check that ffi-compiler loads before using it to define
    tasks.
  [#] UPB (Python/PHP/Ruby C-Extension)
  * Include .inc files directly instead of through a filegroup
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Add utf8_validation feature back to the global feature set.
  * Do not check required field for upb python MergeFrom
  * Merge the protobuf and upb Bazel repos
  * Added malloc_trim() calls to Python allocator so RSS will
    decrease when memory is freed
  * Upb: fix a Python memory leak in ByteSize()
  * Support ASAN detection on clang
  * Upb: bugfix for importing a proto3 enum from within a proto2
    file
  * Expose methods needed by Ruby FFI using UPB_API
  * Fix `PyUpb_Message_MergeInternal` segfault</changelog>
</package>
<package pkgid="c6a1491c4f12383bf302e53868fc49cf525652e8e1dc48ba4c89c821c743eff9" name="libprotobuf-lite25_1_0" arch="s390x">
  <version epoch="0" ver="25.1" rel="150400.9.3.1"/>
  <changelog author="dmueller@suse.com" date="1659614400">- add 10355.patch to fix soversioning</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 21.5:
  PHP
  * Added getContainingOneof and getRealContainingOneof to descriptor.
  * fix PHP readonly legacy files for nested messages
  Python
  * Fixed comparison of maps in Python.</changelog>
  <changelog author="dmueller@suse.com" date="1663588800">- update to 21.6:
  C++:
  * Reduce memory consumption of MessageSet parsing</changelog>
  <changelog author="dmueller@suse.com" date="1667044800">- update to 21.9:
  * Ruby
  * Replace libc strdup usage with internal impl to restore musl compat (#10818)
  * Auto capitalize enums name in Ruby (#10454) (#10763)
  * Other
  * Fix for grpc.tools #17995 &amp; protobuf #7474 (handle UTF-8 paths in argumentfile) (#10721)
  * C++
  * 21.x No longer define no_threadlocal on OpenBSD (#10743)
  * Java
  * Mark default instance as immutable first to avoid race during static initialization of default instances (#10771)
  * Refactoring java full runtime to reuse sub-message builders and prepare to
    migrate parsing logic from parse constructor to builder.
  * Move proto wireformat parsing functionality from the private "parsing
    constructor" to the Builder class.
  * Change the Lite runtime to prefer merging from the wireformat into mutable
    messages rather than building up a new immutable object before merging. This
    way results in fewer allocations and copy operations.
  * Make message-type extensions merge from wire-format instead of building up
    instances and merging afterwards. This has much better performance.
  * Fix TextFormat parser to build up recurring (but supposedly not repeated)
    sub-messages directly from text rather than building a new sub-message and
    merging the fully formed message into the existing field.</changelog>
  <changelog author="dmueller@suse.com" date="1670241600">- update to 21.10:
  * Java
  * Use bit-field int values in buildPartial to skip work on unset groups of
    fields. (#10960)
  * Mark nested builder as clean after clear is called (#10984)</changelog>
  <changelog author="dmueller@suse.com" date="1670500800">- update to 21.11:
  * Python
  * Add license file to pypi wheels (#10936)
  * Fix round-trip bug (#10158)</changelog>
  <changelog author="dmueller@suse.com" date="1671105600">- update to v21.12:
  * Python
  * Fix broken enum ranges (#11171)
  * Stop requiring extension fields to have a sythetic oneof (#11091)
  * Python runtime 4.21.10 not works generated code can not load valid
    proto.</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO (boo#1133277).</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to v22.3
  UPB (Python/PHP/Ruby C-Extension)
  * Remove src prefix from proto import
  * Fix .gitmodules to use the correct absl branch
  * Remove erroneous dependency on googletest
- update to 22.2:
  Java
  * Add version to intra proto dependencies and add kotlin stdlib
    dependency
  * Add $ back for osgi header
  * Remove $ in pom files
- update to 22.1:
  * Add visibility of plugin.proto to python directory
  * Strip "src" from file name of plugin.proto
  * Add OSGi headers to pom files.
  * Remove errorprone dependency from kotlin protos.
  * Version protoc according to the compiler version number.
- update to 22.0:
  * This version includes breaking changes to: Cpp.
    Please refer to the migration guide for information:
    https://protobuf.dev/support/migration/#compiler-22
  * [Cpp] Migrate to Abseil's logging library.
  * [Cpp] `proto2::Map::value_type` changes to `std::pair`.
  * [Cpp] Mark final ZeroCopyInputStream, ZeroCopyOutputStream,
    and DefaultFieldComparator classes.
  * [Cpp] Add a dependency on Abseil (#10416)
  * [Cpp] Remove all autotools usage (#10132)
  * [Cpp] Add C++20 reserved keywords
  * [Cpp] Dropped C++11 Support
  * [Cpp] Delete Arena::Init
  * [Cpp] Replace JSON parser with new implementation
  * [Cpp] Make RepeatedField::GetArena non-const in order to
    support split RepeatedFields.
  * long list of bindings specific fixes see
    https://github.com/protocolbuffers/protobuf/releases/tag/v22.0
- python sub packages version is set 4.22.3 as defined in
  python/google/protobuf/__init__.py to stay compatible
- skip python2 builds by default
- drop patches:
  * 10355.patch,
  * gcc12-disable-__constinit-with-c++-11.patch (merged upstream)
- added patches:
  * add-missing-stdint-header.patch   added for compile fixes</changelog>
  <changelog author="fstrba@suse.com" date="1682596800">- Make possible to build on older systems, like SLE12 that miss
  some of the used macros.</changelog>
  <changelog author="fstrba@suse.com" date="1682683200">- Mention the rpmlintrc file in the spec.</changelog>
  <changelog author="mpluskal@suse.com" date="1683633600">- Fix confusion in versions</changelog>
  <changelog author="dmueller@suse.com" date="1686484800">- drop python2 handling
- fix version handling and package the private libs again</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 22.5:
  C++
  * Add missing cstdint header
  * Fix: missing -DPROTOBUF_USE_DLLS in pkg-config (#12700)
  * Avoid using string(JOIN..., which requires cmake 3.12
  * Explicitly include GTest package in examples
  * Bump Abseil submodule to 20230125.3 (#12660)
- update to 22.4:
  C++
  * Fix libprotoc: export useful symbols from .so
  * Fix btree issue in map tests.
  Python
  * Fix bug in _internal_copy_files where the rule would fail in
    downstream repositories.
  Other
  * Bump utf8_range to version with working pkg-config (#12584)
  * Fix declared dependencies for pkg-config
  * Update abseil dependency and reorder dependencies to ensure
    we use the version specified in protobuf_deps.
  * Turn off clang::musttail on i386</changelog>
  <changelog author="fvogt@suse.com" date="1686744000">- Add patch to fix linking ThreadSafeArena:
  * 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch
- Drop the protobuf-source package, no longer used</changelog>
  <changelog author="dmueller@suse.com" date="1688385600">- update to 23.3:
  C++
  * Regenerate stale files
  * Use the same ABI for static and shared libraries on non-
    Windows platforms
  * Add a workaround for GCC constexpr bug
  Objective-C
  * Regenerate stale files
  UPB (Python/PHP/Ruby C-Extension)
  * Fixed a bug in `upb_Map_Delete()` that caused crashes in
    map.delete(k) for Ruby when string-keyed maps were in use.
  Compiler
  * Add missing header to Objective-c generator
  * Add a workaround for GCC constexpr bug
  Java
  * Rollback of: Simplify protobuf Java message builder by
    removing methods that calls the super class only.
  Csharp
  * [C#] Replace regex that validates descriptor names
- drop 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1688731200">- update to 23.4:
  * Add dllexport_decl for generated default instance.
  * Deps: Update Guava to 32.0.1</changelog>
  <changelog author="fstrba@suse.com" date="1698667200">- Build with source and target levels 8
  * fixes build with JDK21
- Install the pom file with the new %%mvn_install_pom macro
- Do not install the pom-only artifacts, since the %%mvn_install_pom
  macro resolves the variables at the install time</changelog>
  <changelog author="dmueller@suse.com" date="1703160000">- build against modern python on sle15</changelog>
  <changelog author="dmueller@suse.com" date="1704196800">- update to 25.1:
  * Raise warnings for deprecated python syntax usages
  * Add support for extensions in CRuby, JRuby, and FFI Ruby
  * Add support for options in CRuby, JRuby and FFI (#14594)
- update to 25.0:
  * Implement proto2/proto3 with editions
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Editions: Introduce functionality to protoc for generating
    edition feature set defaults.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Publish extension declarations with declaration
    verifications.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Protoc: parser rejects explicit use of map_entry option
  * Protoc: validate that reserved range start is before end
  * Protoc: support identifiers as reserved names in addition to
    string literals (only in editions)
  * Drop support for Bazel 5.
  * Allow code generators to specify whether or not they support
    editions.
  [#] C++
  * Set `PROTOBUF_EXPORT` on
    `InternalOutOfLineDeleteMessageLite()`
  * Update stale checked-in files
  * Apply PROTOBUF_NOINLINE to declarations of some functions
    that want it.
  * Implement proto2/proto3 with editions
  * Make JSON UTF-8 boundary check inclusive of the largest
    possible UTF-8 character.
  * Reduce `Map::size_type` to 32-bits. Protobuf containers can't
    have more than that
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Fix bug in reflection based Swap of map fields.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Add prefetching to arena allocations.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    repeated and map field accessors.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    string field accessors.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Fixes for 32-bit MSVC.
  * Publish extension declarations with declaration
    verifications.
  * Export the constants in protobuf's any.h to support DLL
    builds.
  * Implement AbslStringify for the Descriptor family of types.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    message field accessors.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Introduce C++ feature for UTF8 validation.
  * Protoc: validate that reserved range start is before end
  * Remove option to disable the table-driven parser in protoc.
  * Lock down ctype=CORD in proto file.
  * Support split repeated fields.
  * In OSS mode omit some extern template specializations.
  * Allow code generators to specify whether or not they support
    editions.
  [#] Java
  * Implement proto2/proto3 with editions
  * Remove synthetic oneofs from Java gencode field accessor
    tables.
  * Timestamps.parse: Add error handling for invalid
    hours/minutes in the timezone offset.
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Add missing debugging version info to Protobuf Java gencode
    when multiple files are generated.
  * Fix a bad cast in putBuilderIfAbsent when already present due
    to using the result of put() directly (which is null if it
    currently has no value)
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Fix a NPE in putBuilderIfAbsent due to using the result of
    put() directly (which is null if it currently has no value)
  * Update Kotlin compiler to escape package names
  * Add MapFieldBuilder and change codegen to generate it and the
    put{field}BuilderIfAbsent method.
  * Introduce recursion limit in Java text format parsing
  * Consider the protobuf.Any invalid if typeUrl.split("/")
    returns an empty array.
  * Mark `FieldDescriptor.hasOptionalKeyword()` as deprecated.
  * Fixed Python memory leak in map lookup.
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Ensure Timestamp.ToDatetime(tz) has correct offset
  * Do not check required field for upb python MergeFrom
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Emit __slots__ in pyi output as a tuple rather than a list
    for --pyi_out.
  * Fix a bug that strips options from descriptor.proto in
    Python.
  * Raise warings for message.UnknownFields() usages and navigate
    to the new add
  * Add protobuf python keyword support in path for stub
    generator.
  * Add tuple support to set Struct
  * ### Python C-Extension (Default)
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Check that ffi-compiler loads before using it to define
    tasks.
  [#] UPB (Python/PHP/Ruby C-Extension)
  * Include .inc files directly instead of through a filegroup
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Add utf8_validation feature back to the global feature set.
  * Do not check required field for upb python MergeFrom
  * Merge the protobuf and upb Bazel repos
  * Added malloc_trim() calls to Python allocator so RSS will
    decrease when memory is freed
  * Upb: fix a Python memory leak in ByteSize()
  * Support ASAN detection on clang
  * Upb: bugfix for importing a proto3 enum from within a proto2
    file
  * Expose methods needed by Ruby FFI using UPB_API
  * Fix `PyUpb_Message_MergeInternal` segfault</changelog>
</package>
<package pkgid="99accaea3c59a4a07bffda5e37a3c4707d3f1569410b652dc80312dc90888640" name="libprotobuf-lite25_1_0" arch="x86_64">
  <version epoch="0" ver="25.1" rel="150400.9.3.1"/>
  <changelog author="dmueller@suse.com" date="1659614400">- add 10355.patch to fix soversioning</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 21.5:
  PHP
  * Added getContainingOneof and getRealContainingOneof to descriptor.
  * fix PHP readonly legacy files for nested messages
  Python
  * Fixed comparison of maps in Python.</changelog>
  <changelog author="dmueller@suse.com" date="1663588800">- update to 21.6:
  C++:
  * Reduce memory consumption of MessageSet parsing</changelog>
  <changelog author="dmueller@suse.com" date="1667044800">- update to 21.9:
  * Ruby
  * Replace libc strdup usage with internal impl to restore musl compat (#10818)
  * Auto capitalize enums name in Ruby (#10454) (#10763)
  * Other
  * Fix for grpc.tools #17995 &amp; protobuf #7474 (handle UTF-8 paths in argumentfile) (#10721)
  * C++
  * 21.x No longer define no_threadlocal on OpenBSD (#10743)
  * Java
  * Mark default instance as immutable first to avoid race during static initialization of default instances (#10771)
  * Refactoring java full runtime to reuse sub-message builders and prepare to
    migrate parsing logic from parse constructor to builder.
  * Move proto wireformat parsing functionality from the private "parsing
    constructor" to the Builder class.
  * Change the Lite runtime to prefer merging from the wireformat into mutable
    messages rather than building up a new immutable object before merging. This
    way results in fewer allocations and copy operations.
  * Make message-type extensions merge from wire-format instead of building up
    instances and merging afterwards. This has much better performance.
  * Fix TextFormat parser to build up recurring (but supposedly not repeated)
    sub-messages directly from text rather than building a new sub-message and
    merging the fully formed message into the existing field.</changelog>
  <changelog author="dmueller@suse.com" date="1670241600">- update to 21.10:
  * Java
  * Use bit-field int values in buildPartial to skip work on unset groups of
    fields. (#10960)
  * Mark nested builder as clean after clear is called (#10984)</changelog>
  <changelog author="dmueller@suse.com" date="1670500800">- update to 21.11:
  * Python
  * Add license file to pypi wheels (#10936)
  * Fix round-trip bug (#10158)</changelog>
  <changelog author="dmueller@suse.com" date="1671105600">- update to v21.12:
  * Python
  * Fix broken enum ranges (#11171)
  * Stop requiring extension fields to have a sythetic oneof (#11091)
  * Python runtime 4.21.10 not works generated code can not load valid
    proto.</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO (boo#1133277).</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to v22.3
  UPB (Python/PHP/Ruby C-Extension)
  * Remove src prefix from proto import
  * Fix .gitmodules to use the correct absl branch
  * Remove erroneous dependency on googletest
- update to 22.2:
  Java
  * Add version to intra proto dependencies and add kotlin stdlib
    dependency
  * Add $ back for osgi header
  * Remove $ in pom files
- update to 22.1:
  * Add visibility of plugin.proto to python directory
  * Strip "src" from file name of plugin.proto
  * Add OSGi headers to pom files.
  * Remove errorprone dependency from kotlin protos.
  * Version protoc according to the compiler version number.
- update to 22.0:
  * This version includes breaking changes to: Cpp.
    Please refer to the migration guide for information:
    https://protobuf.dev/support/migration/#compiler-22
  * [Cpp] Migrate to Abseil's logging library.
  * [Cpp] `proto2::Map::value_type` changes to `std::pair`.
  * [Cpp] Mark final ZeroCopyInputStream, ZeroCopyOutputStream,
    and DefaultFieldComparator classes.
  * [Cpp] Add a dependency on Abseil (#10416)
  * [Cpp] Remove all autotools usage (#10132)
  * [Cpp] Add C++20 reserved keywords
  * [Cpp] Dropped C++11 Support
  * [Cpp] Delete Arena::Init
  * [Cpp] Replace JSON parser with new implementation
  * [Cpp] Make RepeatedField::GetArena non-const in order to
    support split RepeatedFields.
  * long list of bindings specific fixes see
    https://github.com/protocolbuffers/protobuf/releases/tag/v22.0
- python sub packages version is set 4.22.3 as defined in
  python/google/protobuf/__init__.py to stay compatible
- skip python2 builds by default
- drop patches:
  * 10355.patch,
  * gcc12-disable-__constinit-with-c++-11.patch (merged upstream)
- added patches:
  * add-missing-stdint-header.patch   added for compile fixes</changelog>
  <changelog author="fstrba@suse.com" date="1682596800">- Make possible to build on older systems, like SLE12 that miss
  some of the used macros.</changelog>
  <changelog author="fstrba@suse.com" date="1682683200">- Mention the rpmlintrc file in the spec.</changelog>
  <changelog author="mpluskal@suse.com" date="1683633600">- Fix confusion in versions</changelog>
  <changelog author="dmueller@suse.com" date="1686484800">- drop python2 handling
- fix version handling and package the private libs again</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 22.5:
  C++
  * Add missing cstdint header
  * Fix: missing -DPROTOBUF_USE_DLLS in pkg-config (#12700)
  * Avoid using string(JOIN..., which requires cmake 3.12
  * Explicitly include GTest package in examples
  * Bump Abseil submodule to 20230125.3 (#12660)
- update to 22.4:
  C++
  * Fix libprotoc: export useful symbols from .so
  * Fix btree issue in map tests.
  Python
  * Fix bug in _internal_copy_files where the rule would fail in
    downstream repositories.
  Other
  * Bump utf8_range to version with working pkg-config (#12584)
  * Fix declared dependencies for pkg-config
  * Update abseil dependency and reorder dependencies to ensure
    we use the version specified in protobuf_deps.
  * Turn off clang::musttail on i386</changelog>
  <changelog author="fvogt@suse.com" date="1686744000">- Add patch to fix linking ThreadSafeArena:
  * 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch
- Drop the protobuf-source package, no longer used</changelog>
  <changelog author="dmueller@suse.com" date="1688385600">- update to 23.3:
  C++
  * Regenerate stale files
  * Use the same ABI for static and shared libraries on non-
    Windows platforms
  * Add a workaround for GCC constexpr bug
  Objective-C
  * Regenerate stale files
  UPB (Python/PHP/Ruby C-Extension)
  * Fixed a bug in `upb_Map_Delete()` that caused crashes in
    map.delete(k) for Ruby when string-keyed maps were in use.
  Compiler
  * Add missing header to Objective-c generator
  * Add a workaround for GCC constexpr bug
  Java
  * Rollback of: Simplify protobuf Java message builder by
    removing methods that calls the super class only.
  Csharp
  * [C#] Replace regex that validates descriptor names
- drop 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1688731200">- update to 23.4:
  * Add dllexport_decl for generated default instance.
  * Deps: Update Guava to 32.0.1</changelog>
  <changelog author="fstrba@suse.com" date="1698667200">- Build with source and target levels 8
  * fixes build with JDK21
- Install the pom file with the new %%mvn_install_pom macro
- Do not install the pom-only artifacts, since the %%mvn_install_pom
  macro resolves the variables at the install time</changelog>
  <changelog author="dmueller@suse.com" date="1703160000">- build against modern python on sle15</changelog>
  <changelog author="dmueller@suse.com" date="1704196800">- update to 25.1:
  * Raise warnings for deprecated python syntax usages
  * Add support for extensions in CRuby, JRuby, and FFI Ruby
  * Add support for options in CRuby, JRuby and FFI (#14594)
- update to 25.0:
  * Implement proto2/proto3 with editions
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Editions: Introduce functionality to protoc for generating
    edition feature set defaults.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Publish extension declarations with declaration
    verifications.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Protoc: parser rejects explicit use of map_entry option
  * Protoc: validate that reserved range start is before end
  * Protoc: support identifiers as reserved names in addition to
    string literals (only in editions)
  * Drop support for Bazel 5.
  * Allow code generators to specify whether or not they support
    editions.
  [#] C++
  * Set `PROTOBUF_EXPORT` on
    `InternalOutOfLineDeleteMessageLite()`
  * Update stale checked-in files
  * Apply PROTOBUF_NOINLINE to declarations of some functions
    that want it.
  * Implement proto2/proto3 with editions
  * Make JSON UTF-8 boundary check inclusive of the largest
    possible UTF-8 character.
  * Reduce `Map::size_type` to 32-bits. Protobuf containers can't
    have more than that
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Fix bug in reflection based Swap of map fields.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Add prefetching to arena allocations.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    repeated and map field accessors.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    string field accessors.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Fixes for 32-bit MSVC.
  * Publish extension declarations with declaration
    verifications.
  * Export the constants in protobuf's any.h to support DLL
    builds.
  * Implement AbslStringify for the Descriptor family of types.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    message field accessors.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Introduce C++ feature for UTF8 validation.
  * Protoc: validate that reserved range start is before end
  * Remove option to disable the table-driven parser in protoc.
  * Lock down ctype=CORD in proto file.
  * Support split repeated fields.
  * In OSS mode omit some extern template specializations.
  * Allow code generators to specify whether or not they support
    editions.
  [#] Java
  * Implement proto2/proto3 with editions
  * Remove synthetic oneofs from Java gencode field accessor
    tables.
  * Timestamps.parse: Add error handling for invalid
    hours/minutes in the timezone offset.
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Add missing debugging version info to Protobuf Java gencode
    when multiple files are generated.
  * Fix a bad cast in putBuilderIfAbsent when already present due
    to using the result of put() directly (which is null if it
    currently has no value)
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Fix a NPE in putBuilderIfAbsent due to using the result of
    put() directly (which is null if it currently has no value)
  * Update Kotlin compiler to escape package names
  * Add MapFieldBuilder and change codegen to generate it and the
    put{field}BuilderIfAbsent method.
  * Introduce recursion limit in Java text format parsing
  * Consider the protobuf.Any invalid if typeUrl.split("/")
    returns an empty array.
  * Mark `FieldDescriptor.hasOptionalKeyword()` as deprecated.
  * Fixed Python memory leak in map lookup.
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Ensure Timestamp.ToDatetime(tz) has correct offset
  * Do not check required field for upb python MergeFrom
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Emit __slots__ in pyi output as a tuple rather than a list
    for --pyi_out.
  * Fix a bug that strips options from descriptor.proto in
    Python.
  * Raise warings for message.UnknownFields() usages and navigate
    to the new add
  * Add protobuf python keyword support in path for stub
    generator.
  * Add tuple support to set Struct
  * ### Python C-Extension (Default)
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Check that ffi-compiler loads before using it to define
    tasks.
  [#] UPB (Python/PHP/Ruby C-Extension)
  * Include .inc files directly instead of through a filegroup
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Add utf8_validation feature back to the global feature set.
  * Do not check required field for upb python MergeFrom
  * Merge the protobuf and upb Bazel repos
  * Added malloc_trim() calls to Python allocator so RSS will
    decrease when memory is freed
  * Upb: fix a Python memory leak in ByteSize()
  * Support ASAN detection on clang
  * Upb: bugfix for importing a proto3 enum from within a proto2
    file
  * Expose methods needed by Ruby FFI using UPB_API
  * Fix `PyUpb_Message_MergeInternal` segfault</changelog>
</package>
<package pkgid="ca590369d4ac0ab696e40c642a2e9d42ce9862bfc679f76d4a49f11f2c9d6e81" name="libprotobuf-lite25_1_0" arch="aarch64">
  <version epoch="0" ver="25.1" rel="150400.9.6.1"/>
  <changelog author="dmueller@suse.com" date="1659614400">- add 10355.patch to fix soversioning</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 21.5:
  PHP
  * Added getContainingOneof and getRealContainingOneof to descriptor.
  * fix PHP readonly legacy files for nested messages
  Python
  * Fixed comparison of maps in Python.</changelog>
  <changelog author="dmueller@suse.com" date="1663588800">- update to 21.6:
  C++:
  * Reduce memory consumption of MessageSet parsing</changelog>
  <changelog author="dmueller@suse.com" date="1667044800">- update to 21.9:
  * Ruby
  * Replace libc strdup usage with internal impl to restore musl compat (#10818)
  * Auto capitalize enums name in Ruby (#10454) (#10763)
  * Other
  * Fix for grpc.tools #17995 &amp; protobuf #7474 (handle UTF-8 paths in argumentfile) (#10721)
  * C++
  * 21.x No longer define no_threadlocal on OpenBSD (#10743)
  * Java
  * Mark default instance as immutable first to avoid race during static initialization of default instances (#10771)
  * Refactoring java full runtime to reuse sub-message builders and prepare to
    migrate parsing logic from parse constructor to builder.
  * Move proto wireformat parsing functionality from the private "parsing
    constructor" to the Builder class.
  * Change the Lite runtime to prefer merging from the wireformat into mutable
    messages rather than building up a new immutable object before merging. This
    way results in fewer allocations and copy operations.
  * Make message-type extensions merge from wire-format instead of building up
    instances and merging afterwards. This has much better performance.
  * Fix TextFormat parser to build up recurring (but supposedly not repeated)
    sub-messages directly from text rather than building a new sub-message and
    merging the fully formed message into the existing field.</changelog>
  <changelog author="dmueller@suse.com" date="1670241600">- update to 21.10:
  * Java
  * Use bit-field int values in buildPartial to skip work on unset groups of
    fields. (#10960)
  * Mark nested builder as clean after clear is called (#10984)</changelog>
  <changelog author="dmueller@suse.com" date="1670500800">- update to 21.11:
  * Python
  * Add license file to pypi wheels (#10936)
  * Fix round-trip bug (#10158)</changelog>
  <changelog author="dmueller@suse.com" date="1671105600">- update to v21.12:
  * Python
  * Fix broken enum ranges (#11171)
  * Stop requiring extension fields to have a sythetic oneof (#11091)
  * Python runtime 4.21.10 not works generated code can not load valid
    proto.</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO (boo#1133277).</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to v22.3
  UPB (Python/PHP/Ruby C-Extension)
  * Remove src prefix from proto import
  * Fix .gitmodules to use the correct absl branch
  * Remove erroneous dependency on googletest
- update to 22.2:
  Java
  * Add version to intra proto dependencies and add kotlin stdlib
    dependency
  * Add $ back for osgi header
  * Remove $ in pom files
- update to 22.1:
  * Add visibility of plugin.proto to python directory
  * Strip "src" from file name of plugin.proto
  * Add OSGi headers to pom files.
  * Remove errorprone dependency from kotlin protos.
  * Version protoc according to the compiler version number.
- update to 22.0:
  * This version includes breaking changes to: Cpp.
    Please refer to the migration guide for information:
    https://protobuf.dev/support/migration/#compiler-22
  * [Cpp] Migrate to Abseil's logging library.
  * [Cpp] `proto2::Map::value_type` changes to `std::pair`.
  * [Cpp] Mark final ZeroCopyInputStream, ZeroCopyOutputStream,
    and DefaultFieldComparator classes.
  * [Cpp] Add a dependency on Abseil (#10416)
  * [Cpp] Remove all autotools usage (#10132)
  * [Cpp] Add C++20 reserved keywords
  * [Cpp] Dropped C++11 Support
  * [Cpp] Delete Arena::Init
  * [Cpp] Replace JSON parser with new implementation
  * [Cpp] Make RepeatedField::GetArena non-const in order to
    support split RepeatedFields.
  * long list of bindings specific fixes see
    https://github.com/protocolbuffers/protobuf/releases/tag/v22.0
- python sub packages version is set 4.22.3 as defined in
  python/google/protobuf/__init__.py to stay compatible
- skip python2 builds by default
- drop patches:
  * 10355.patch,
  * gcc12-disable-__constinit-with-c++-11.patch (merged upstream)
- added patches:
  * add-missing-stdint-header.patch   added for compile fixes</changelog>
  <changelog author="fstrba@suse.com" date="1682596800">- Make possible to build on older systems, like SLE12 that miss
  some of the used macros.</changelog>
  <changelog author="fstrba@suse.com" date="1682683200">- Mention the rpmlintrc file in the spec.</changelog>
  <changelog author="mpluskal@suse.com" date="1683633600">- Fix confusion in versions</changelog>
  <changelog author="dmueller@suse.com" date="1686484800">- drop python2 handling
- fix version handling and package the private libs again</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 22.5:
  C++
  * Add missing cstdint header
  * Fix: missing -DPROTOBUF_USE_DLLS in pkg-config (#12700)
  * Avoid using string(JOIN..., which requires cmake 3.12
  * Explicitly include GTest package in examples
  * Bump Abseil submodule to 20230125.3 (#12660)
- update to 22.4:
  C++
  * Fix libprotoc: export useful symbols from .so
  * Fix btree issue in map tests.
  Python
  * Fix bug in _internal_copy_files where the rule would fail in
    downstream repositories.
  Other
  * Bump utf8_range to version with working pkg-config (#12584)
  * Fix declared dependencies for pkg-config
  * Update abseil dependency and reorder dependencies to ensure
    we use the version specified in protobuf_deps.
  * Turn off clang::musttail on i386</changelog>
  <changelog author="fvogt@suse.com" date="1686744000">- Add patch to fix linking ThreadSafeArena:
  * 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch
- Drop the protobuf-source package, no longer used</changelog>
  <changelog author="dmueller@suse.com" date="1688385600">- update to 23.3:
  C++
  * Regenerate stale files
  * Use the same ABI for static and shared libraries on non-
    Windows platforms
  * Add a workaround for GCC constexpr bug
  Objective-C
  * Regenerate stale files
  UPB (Python/PHP/Ruby C-Extension)
  * Fixed a bug in `upb_Map_Delete()` that caused crashes in
    map.delete(k) for Ruby when string-keyed maps were in use.
  Compiler
  * Add missing header to Objective-c generator
  * Add a workaround for GCC constexpr bug
  Java
  * Rollback of: Simplify protobuf Java message builder by
    removing methods that calls the super class only.
  Csharp
  * [C#] Replace regex that validates descriptor names
- drop 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1688731200">- update to 23.4:
  * Add dllexport_decl for generated default instance.
  * Deps: Update Guava to 32.0.1</changelog>
  <changelog author="fstrba@suse.com" date="1698667200">- Build with source and target levels 8
  * fixes build with JDK21
- Install the pom file with the new %%mvn_install_pom macro
- Do not install the pom-only artifacts, since the %%mvn_install_pom
  macro resolves the variables at the install time</changelog>
  <changelog author="dmueller@suse.com" date="1703160000">- build against modern python on sle15</changelog>
  <changelog author="dmueller@suse.com" date="1704196800">- update to 25.1:
  * Raise warnings for deprecated python syntax usages
  * Add support for extensions in CRuby, JRuby, and FFI Ruby
  * Add support for options in CRuby, JRuby and FFI (#14594)
- update to 25.0:
  * Implement proto2/proto3 with editions
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Editions: Introduce functionality to protoc for generating
    edition feature set defaults.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Publish extension declarations with declaration
    verifications.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Protoc: parser rejects explicit use of map_entry option
  * Protoc: validate that reserved range start is before end
  * Protoc: support identifiers as reserved names in addition to
    string literals (only in editions)
  * Drop support for Bazel 5.
  * Allow code generators to specify whether or not they support
    editions.
  [#] C++
  * Set `PROTOBUF_EXPORT` on
    `InternalOutOfLineDeleteMessageLite()`
  * Update stale checked-in files
  * Apply PROTOBUF_NOINLINE to declarations of some functions
    that want it.
  * Implement proto2/proto3 with editions
  * Make JSON UTF-8 boundary check inclusive of the largest
    possible UTF-8 character.
  * Reduce `Map::size_type` to 32-bits. Protobuf containers can't
    have more than that
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Fix bug in reflection based Swap of map fields.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Add prefetching to arena allocations.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    repeated and map field accessors.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    string field accessors.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Fixes for 32-bit MSVC.
  * Publish extension declarations with declaration
    verifications.
  * Export the constants in protobuf's any.h to support DLL
    builds.
  * Implement AbslStringify for the Descriptor family of types.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    message field accessors.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Introduce C++ feature for UTF8 validation.
  * Protoc: validate that reserved range start is before end
  * Remove option to disable the table-driven parser in protoc.
  * Lock down ctype=CORD in proto file.
  * Support split repeated fields.
  * In OSS mode omit some extern template specializations.
  * Allow code generators to specify whether or not they support
    editions.
  [#] Java
  * Implement proto2/proto3 with editions
  * Remove synthetic oneofs from Java gencode field accessor
    tables.
  * Timestamps.parse: Add error handling for invalid
    hours/minutes in the timezone offset.
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Add missing debugging version info to Protobuf Java gencode
    when multiple files are generated.
  * Fix a bad cast in putBuilderIfAbsent when already present due
    to using the result of put() directly (which is null if it
    currently has no value)
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Fix a NPE in putBuilderIfAbsent due to using the result of
    put() directly (which is null if it currently has no value)
  * Update Kotlin compiler to escape package names
  * Add MapFieldBuilder and change codegen to generate it and the
    put{field}BuilderIfAbsent method.
  * Introduce recursion limit in Java text format parsing
  * Consider the protobuf.Any invalid if typeUrl.split("/")
    returns an empty array.
  * Mark `FieldDescriptor.hasOptionalKeyword()` as deprecated.
  * Fixed Python memory leak in map lookup.
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Ensure Timestamp.ToDatetime(tz) has correct offset
  * Do not check required field for upb python MergeFrom
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Emit __slots__ in pyi output as a tuple rather than a list
    for --pyi_out.
  * Fix a bug that strips options from descriptor.proto in
    Python.
  * Raise warings for message.UnknownFields() usages and navigate
    to the new add
  * Add protobuf python keyword support in path for stub
    generator.
  * Add tuple support to set Struct
  * ### Python C-Extension (Default)
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Check that ffi-compiler loads before using it to define
    tasks.
  [#] UPB (Python/PHP/Ruby C-Extension)
  * Include .inc files directly instead of through a filegroup
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Add utf8_validation feature back to the global feature set.
  * Do not check required field for upb python MergeFrom
  * Merge the protobuf and upb Bazel repos
  * Added malloc_trim() calls to Python allocator so RSS will
    decrease when memory is freed
  * Upb: fix a Python memory leak in ByteSize()
  * Support ASAN detection on clang
  * Upb: bugfix for importing a proto3 enum from within a proto2
    file
  * Expose methods needed by Ruby FFI using UPB_API
  * Fix `PyUpb_Message_MergeInternal` segfault</changelog>
</package>
<package pkgid="185e7503950d3c1bf2abea2ae4e02b64267f02bef655afc9db0108cefc16696a" name="libprotobuf-lite25_1_0" arch="ppc64le">
  <version epoch="0" ver="25.1" rel="150400.9.6.1"/>
  <changelog author="dmueller@suse.com" date="1659614400">- add 10355.patch to fix soversioning</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 21.5:
  PHP
  * Added getContainingOneof and getRealContainingOneof to descriptor.
  * fix PHP readonly legacy files for nested messages
  Python
  * Fixed comparison of maps in Python.</changelog>
  <changelog author="dmueller@suse.com" date="1663588800">- update to 21.6:
  C++:
  * Reduce memory consumption of MessageSet parsing</changelog>
  <changelog author="dmueller@suse.com" date="1667044800">- update to 21.9:
  * Ruby
  * Replace libc strdup usage with internal impl to restore musl compat (#10818)
  * Auto capitalize enums name in Ruby (#10454) (#10763)
  * Other
  * Fix for grpc.tools #17995 &amp; protobuf #7474 (handle UTF-8 paths in argumentfile) (#10721)
  * C++
  * 21.x No longer define no_threadlocal on OpenBSD (#10743)
  * Java
  * Mark default instance as immutable first to avoid race during static initialization of default instances (#10771)
  * Refactoring java full runtime to reuse sub-message builders and prepare to
    migrate parsing logic from parse constructor to builder.
  * Move proto wireformat parsing functionality from the private "parsing
    constructor" to the Builder class.
  * Change the Lite runtime to prefer merging from the wireformat into mutable
    messages rather than building up a new immutable object before merging. This
    way results in fewer allocations and copy operations.
  * Make message-type extensions merge from wire-format instead of building up
    instances and merging afterwards. This has much better performance.
  * Fix TextFormat parser to build up recurring (but supposedly not repeated)
    sub-messages directly from text rather than building a new sub-message and
    merging the fully formed message into the existing field.</changelog>
  <changelog author="dmueller@suse.com" date="1670241600">- update to 21.10:
  * Java
  * Use bit-field int values in buildPartial to skip work on unset groups of
    fields. (#10960)
  * Mark nested builder as clean after clear is called (#10984)</changelog>
  <changelog author="dmueller@suse.com" date="1670500800">- update to 21.11:
  * Python
  * Add license file to pypi wheels (#10936)
  * Fix round-trip bug (#10158)</changelog>
  <changelog author="dmueller@suse.com" date="1671105600">- update to v21.12:
  * Python
  * Fix broken enum ranges (#11171)
  * Stop requiring extension fields to have a sythetic oneof (#11091)
  * Python runtime 4.21.10 not works generated code can not load valid
    proto.</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO (boo#1133277).</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to v22.3
  UPB (Python/PHP/Ruby C-Extension)
  * Remove src prefix from proto import
  * Fix .gitmodules to use the correct absl branch
  * Remove erroneous dependency on googletest
- update to 22.2:
  Java
  * Add version to intra proto dependencies and add kotlin stdlib
    dependency
  * Add $ back for osgi header
  * Remove $ in pom files
- update to 22.1:
  * Add visibility of plugin.proto to python directory
  * Strip "src" from file name of plugin.proto
  * Add OSGi headers to pom files.
  * Remove errorprone dependency from kotlin protos.
  * Version protoc according to the compiler version number.
- update to 22.0:
  * This version includes breaking changes to: Cpp.
    Please refer to the migration guide for information:
    https://protobuf.dev/support/migration/#compiler-22
  * [Cpp] Migrate to Abseil's logging library.
  * [Cpp] `proto2::Map::value_type` changes to `std::pair`.
  * [Cpp] Mark final ZeroCopyInputStream, ZeroCopyOutputStream,
    and DefaultFieldComparator classes.
  * [Cpp] Add a dependency on Abseil (#10416)
  * [Cpp] Remove all autotools usage (#10132)
  * [Cpp] Add C++20 reserved keywords
  * [Cpp] Dropped C++11 Support
  * [Cpp] Delete Arena::Init
  * [Cpp] Replace JSON parser with new implementation
  * [Cpp] Make RepeatedField::GetArena non-const in order to
    support split RepeatedFields.
  * long list of bindings specific fixes see
    https://github.com/protocolbuffers/protobuf/releases/tag/v22.0
- python sub packages version is set 4.22.3 as defined in
  python/google/protobuf/__init__.py to stay compatible
- skip python2 builds by default
- drop patches:
  * 10355.patch,
  * gcc12-disable-__constinit-with-c++-11.patch (merged upstream)
- added patches:
  * add-missing-stdint-header.patch   added for compile fixes</changelog>
  <changelog author="fstrba@suse.com" date="1682596800">- Make possible to build on older systems, like SLE12 that miss
  some of the used macros.</changelog>
  <changelog author="fstrba@suse.com" date="1682683200">- Mention the rpmlintrc file in the spec.</changelog>
  <changelog author="mpluskal@suse.com" date="1683633600">- Fix confusion in versions</changelog>
  <changelog author="dmueller@suse.com" date="1686484800">- drop python2 handling
- fix version handling and package the private libs again</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 22.5:
  C++
  * Add missing cstdint header
  * Fix: missing -DPROTOBUF_USE_DLLS in pkg-config (#12700)
  * Avoid using string(JOIN..., which requires cmake 3.12
  * Explicitly include GTest package in examples
  * Bump Abseil submodule to 20230125.3 (#12660)
- update to 22.4:
  C++
  * Fix libprotoc: export useful symbols from .so
  * Fix btree issue in map tests.
  Python
  * Fix bug in _internal_copy_files where the rule would fail in
    downstream repositories.
  Other
  * Bump utf8_range to version with working pkg-config (#12584)
  * Fix declared dependencies for pkg-config
  * Update abseil dependency and reorder dependencies to ensure
    we use the version specified in protobuf_deps.
  * Turn off clang::musttail on i386</changelog>
  <changelog author="fvogt@suse.com" date="1686744000">- Add patch to fix linking ThreadSafeArena:
  * 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch
- Drop the protobuf-source package, no longer used</changelog>
  <changelog author="dmueller@suse.com" date="1688385600">- update to 23.3:
  C++
  * Regenerate stale files
  * Use the same ABI for static and shared libraries on non-
    Windows platforms
  * Add a workaround for GCC constexpr bug
  Objective-C
  * Regenerate stale files
  UPB (Python/PHP/Ruby C-Extension)
  * Fixed a bug in `upb_Map_Delete()` that caused crashes in
    map.delete(k) for Ruby when string-keyed maps were in use.
  Compiler
  * Add missing header to Objective-c generator
  * Add a workaround for GCC constexpr bug
  Java
  * Rollback of: Simplify protobuf Java message builder by
    removing methods that calls the super class only.
  Csharp
  * [C#] Replace regex that validates descriptor names
- drop 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1688731200">- update to 23.4:
  * Add dllexport_decl for generated default instance.
  * Deps: Update Guava to 32.0.1</changelog>
  <changelog author="fstrba@suse.com" date="1698667200">- Build with source and target levels 8
  * fixes build with JDK21
- Install the pom file with the new %%mvn_install_pom macro
- Do not install the pom-only artifacts, since the %%mvn_install_pom
  macro resolves the variables at the install time</changelog>
  <changelog author="dmueller@suse.com" date="1703160000">- build against modern python on sle15</changelog>
  <changelog author="dmueller@suse.com" date="1704196800">- update to 25.1:
  * Raise warnings for deprecated python syntax usages
  * Add support for extensions in CRuby, JRuby, and FFI Ruby
  * Add support for options in CRuby, JRuby and FFI (#14594)
- update to 25.0:
  * Implement proto2/proto3 with editions
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Editions: Introduce functionality to protoc for generating
    edition feature set defaults.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Publish extension declarations with declaration
    verifications.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Protoc: parser rejects explicit use of map_entry option
  * Protoc: validate that reserved range start is before end
  * Protoc: support identifiers as reserved names in addition to
    string literals (only in editions)
  * Drop support for Bazel 5.
  * Allow code generators to specify whether or not they support
    editions.
  [#] C++
  * Set `PROTOBUF_EXPORT` on
    `InternalOutOfLineDeleteMessageLite()`
  * Update stale checked-in files
  * Apply PROTOBUF_NOINLINE to declarations of some functions
    that want it.
  * Implement proto2/proto3 with editions
  * Make JSON UTF-8 boundary check inclusive of the largest
    possible UTF-8 character.
  * Reduce `Map::size_type` to 32-bits. Protobuf containers can't
    have more than that
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Fix bug in reflection based Swap of map fields.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Add prefetching to arena allocations.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    repeated and map field accessors.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    string field accessors.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Fixes for 32-bit MSVC.
  * Publish extension declarations with declaration
    verifications.
  * Export the constants in protobuf's any.h to support DLL
    builds.
  * Implement AbslStringify for the Descriptor family of types.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    message field accessors.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Introduce C++ feature for UTF8 validation.
  * Protoc: validate that reserved range start is before end
  * Remove option to disable the table-driven parser in protoc.
  * Lock down ctype=CORD in proto file.
  * Support split repeated fields.
  * In OSS mode omit some extern template specializations.
  * Allow code generators to specify whether or not they support
    editions.
  [#] Java
  * Implement proto2/proto3 with editions
  * Remove synthetic oneofs from Java gencode field accessor
    tables.
  * Timestamps.parse: Add error handling for invalid
    hours/minutes in the timezone offset.
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Add missing debugging version info to Protobuf Java gencode
    when multiple files are generated.
  * Fix a bad cast in putBuilderIfAbsent when already present due
    to using the result of put() directly (which is null if it
    currently has no value)
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Fix a NPE in putBuilderIfAbsent due to using the result of
    put() directly (which is null if it currently has no value)
  * Update Kotlin compiler to escape package names
  * Add MapFieldBuilder and change codegen to generate it and the
    put{field}BuilderIfAbsent method.
  * Introduce recursion limit in Java text format parsing
  * Consider the protobuf.Any invalid if typeUrl.split("/")
    returns an empty array.
  * Mark `FieldDescriptor.hasOptionalKeyword()` as deprecated.
  * Fixed Python memory leak in map lookup.
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Ensure Timestamp.ToDatetime(tz) has correct offset
  * Do not check required field for upb python MergeFrom
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Emit __slots__ in pyi output as a tuple rather than a list
    for --pyi_out.
  * Fix a bug that strips options from descriptor.proto in
    Python.
  * Raise warings for message.UnknownFields() usages and navigate
    to the new add
  * Add protobuf python keyword support in path for stub
    generator.
  * Add tuple support to set Struct
  * ### Python C-Extension (Default)
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Check that ffi-compiler loads before using it to define
    tasks.
  [#] UPB (Python/PHP/Ruby C-Extension)
  * Include .inc files directly instead of through a filegroup
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Add utf8_validation feature back to the global feature set.
  * Do not check required field for upb python MergeFrom
  * Merge the protobuf and upb Bazel repos
  * Added malloc_trim() calls to Python allocator so RSS will
    decrease when memory is freed
  * Upb: fix a Python memory leak in ByteSize()
  * Support ASAN detection on clang
  * Upb: bugfix for importing a proto3 enum from within a proto2
    file
  * Expose methods needed by Ruby FFI using UPB_API
  * Fix `PyUpb_Message_MergeInternal` segfault</changelog>
</package>
<package pkgid="4433ae9e5ce37e600047de03d9f4bb802fad48940b9313b10544cb7469718d32" name="libprotobuf-lite25_1_0" arch="s390x">
  <version epoch="0" ver="25.1" rel="150400.9.6.1"/>
  <changelog author="dmueller@suse.com" date="1659614400">- add 10355.patch to fix soversioning</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 21.5:
  PHP
  * Added getContainingOneof and getRealContainingOneof to descriptor.
  * fix PHP readonly legacy files for nested messages
  Python
  * Fixed comparison of maps in Python.</changelog>
  <changelog author="dmueller@suse.com" date="1663588800">- update to 21.6:
  C++:
  * Reduce memory consumption of MessageSet parsing</changelog>
  <changelog author="dmueller@suse.com" date="1667044800">- update to 21.9:
  * Ruby
  * Replace libc strdup usage with internal impl to restore musl compat (#10818)
  * Auto capitalize enums name in Ruby (#10454) (#10763)
  * Other
  * Fix for grpc.tools #17995 &amp; protobuf #7474 (handle UTF-8 paths in argumentfile) (#10721)
  * C++
  * 21.x No longer define no_threadlocal on OpenBSD (#10743)
  * Java
  * Mark default instance as immutable first to avoid race during static initialization of default instances (#10771)
  * Refactoring java full runtime to reuse sub-message builders and prepare to
    migrate parsing logic from parse constructor to builder.
  * Move proto wireformat parsing functionality from the private "parsing
    constructor" to the Builder class.
  * Change the Lite runtime to prefer merging from the wireformat into mutable
    messages rather than building up a new immutable object before merging. This
    way results in fewer allocations and copy operations.
  * Make message-type extensions merge from wire-format instead of building up
    instances and merging afterwards. This has much better performance.
  * Fix TextFormat parser to build up recurring (but supposedly not repeated)
    sub-messages directly from text rather than building a new sub-message and
    merging the fully formed message into the existing field.</changelog>
  <changelog author="dmueller@suse.com" date="1670241600">- update to 21.10:
  * Java
  * Use bit-field int values in buildPartial to skip work on unset groups of
    fields. (#10960)
  * Mark nested builder as clean after clear is called (#10984)</changelog>
  <changelog author="dmueller@suse.com" date="1670500800">- update to 21.11:
  * Python
  * Add license file to pypi wheels (#10936)
  * Fix round-trip bug (#10158)</changelog>
  <changelog author="dmueller@suse.com" date="1671105600">- update to v21.12:
  * Python
  * Fix broken enum ranges (#11171)
  * Stop requiring extension fields to have a sythetic oneof (#11091)
  * Python runtime 4.21.10 not works generated code can not load valid
    proto.</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO (boo#1133277).</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to v22.3
  UPB (Python/PHP/Ruby C-Extension)
  * Remove src prefix from proto import
  * Fix .gitmodules to use the correct absl branch
  * Remove erroneous dependency on googletest
- update to 22.2:
  Java
  * Add version to intra proto dependencies and add kotlin stdlib
    dependency
  * Add $ back for osgi header
  * Remove $ in pom files
- update to 22.1:
  * Add visibility of plugin.proto to python directory
  * Strip "src" from file name of plugin.proto
  * Add OSGi headers to pom files.
  * Remove errorprone dependency from kotlin protos.
  * Version protoc according to the compiler version number.
- update to 22.0:
  * This version includes breaking changes to: Cpp.
    Please refer to the migration guide for information:
    https://protobuf.dev/support/migration/#compiler-22
  * [Cpp] Migrate to Abseil's logging library.
  * [Cpp] `proto2::Map::value_type` changes to `std::pair`.
  * [Cpp] Mark final ZeroCopyInputStream, ZeroCopyOutputStream,
    and DefaultFieldComparator classes.
  * [Cpp] Add a dependency on Abseil (#10416)
  * [Cpp] Remove all autotools usage (#10132)
  * [Cpp] Add C++20 reserved keywords
  * [Cpp] Dropped C++11 Support
  * [Cpp] Delete Arena::Init
  * [Cpp] Replace JSON parser with new implementation
  * [Cpp] Make RepeatedField::GetArena non-const in order to
    support split RepeatedFields.
  * long list of bindings specific fixes see
    https://github.com/protocolbuffers/protobuf/releases/tag/v22.0
- python sub packages version is set 4.22.3 as defined in
  python/google/protobuf/__init__.py to stay compatible
- skip python2 builds by default
- drop patches:
  * 10355.patch,
  * gcc12-disable-__constinit-with-c++-11.patch (merged upstream)
- added patches:
  * add-missing-stdint-header.patch   added for compile fixes</changelog>
  <changelog author="fstrba@suse.com" date="1682596800">- Make possible to build on older systems, like SLE12 that miss
  some of the used macros.</changelog>
  <changelog author="fstrba@suse.com" date="1682683200">- Mention the rpmlintrc file in the spec.</changelog>
  <changelog author="mpluskal@suse.com" date="1683633600">- Fix confusion in versions</changelog>
  <changelog author="dmueller@suse.com" date="1686484800">- drop python2 handling
- fix version handling and package the private libs again</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 22.5:
  C++
  * Add missing cstdint header
  * Fix: missing -DPROTOBUF_USE_DLLS in pkg-config (#12700)
  * Avoid using string(JOIN..., which requires cmake 3.12
  * Explicitly include GTest package in examples
  * Bump Abseil submodule to 20230125.3 (#12660)
- update to 22.4:
  C++
  * Fix libprotoc: export useful symbols from .so
  * Fix btree issue in map tests.
  Python
  * Fix bug in _internal_copy_files where the rule would fail in
    downstream repositories.
  Other
  * Bump utf8_range to version with working pkg-config (#12584)
  * Fix declared dependencies for pkg-config
  * Update abseil dependency and reorder dependencies to ensure
    we use the version specified in protobuf_deps.
  * Turn off clang::musttail on i386</changelog>
  <changelog author="fvogt@suse.com" date="1686744000">- Add patch to fix linking ThreadSafeArena:
  * 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch
- Drop the protobuf-source package, no longer used</changelog>
  <changelog author="dmueller@suse.com" date="1688385600">- update to 23.3:
  C++
  * Regenerate stale files
  * Use the same ABI for static and shared libraries on non-
    Windows platforms
  * Add a workaround for GCC constexpr bug
  Objective-C
  * Regenerate stale files
  UPB (Python/PHP/Ruby C-Extension)
  * Fixed a bug in `upb_Map_Delete()` that caused crashes in
    map.delete(k) for Ruby when string-keyed maps were in use.
  Compiler
  * Add missing header to Objective-c generator
  * Add a workaround for GCC constexpr bug
  Java
  * Rollback of: Simplify protobuf Java message builder by
    removing methods that calls the super class only.
  Csharp
  * [C#] Replace regex that validates descriptor names
- drop 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1688731200">- update to 23.4:
  * Add dllexport_decl for generated default instance.
  * Deps: Update Guava to 32.0.1</changelog>
  <changelog author="fstrba@suse.com" date="1698667200">- Build with source and target levels 8
  * fixes build with JDK21
- Install the pom file with the new %%mvn_install_pom macro
- Do not install the pom-only artifacts, since the %%mvn_install_pom
  macro resolves the variables at the install time</changelog>
  <changelog author="dmueller@suse.com" date="1703160000">- build against modern python on sle15</changelog>
  <changelog author="dmueller@suse.com" date="1704196800">- update to 25.1:
  * Raise warnings for deprecated python syntax usages
  * Add support for extensions in CRuby, JRuby, and FFI Ruby
  * Add support for options in CRuby, JRuby and FFI (#14594)
- update to 25.0:
  * Implement proto2/proto3 with editions
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Editions: Introduce functionality to protoc for generating
    edition feature set defaults.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Publish extension declarations with declaration
    verifications.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Protoc: parser rejects explicit use of map_entry option
  * Protoc: validate that reserved range start is before end
  * Protoc: support identifiers as reserved names in addition to
    string literals (only in editions)
  * Drop support for Bazel 5.
  * Allow code generators to specify whether or not they support
    editions.
  [#] C++
  * Set `PROTOBUF_EXPORT` on
    `InternalOutOfLineDeleteMessageLite()`
  * Update stale checked-in files
  * Apply PROTOBUF_NOINLINE to declarations of some functions
    that want it.
  * Implement proto2/proto3 with editions
  * Make JSON UTF-8 boundary check inclusive of the largest
    possible UTF-8 character.
  * Reduce `Map::size_type` to 32-bits. Protobuf containers can't
    have more than that
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Fix bug in reflection based Swap of map fields.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Add prefetching to arena allocations.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    repeated and map field accessors.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    string field accessors.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Fixes for 32-bit MSVC.
  * Publish extension declarations with declaration
    verifications.
  * Export the constants in protobuf's any.h to support DLL
    builds.
  * Implement AbslStringify for the Descriptor family of types.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    message field accessors.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Introduce C++ feature for UTF8 validation.
  * Protoc: validate that reserved range start is before end
  * Remove option to disable the table-driven parser in protoc.
  * Lock down ctype=CORD in proto file.
  * Support split repeated fields.
  * In OSS mode omit some extern template specializations.
  * Allow code generators to specify whether or not they support
    editions.
  [#] Java
  * Implement proto2/proto3 with editions
  * Remove synthetic oneofs from Java gencode field accessor
    tables.
  * Timestamps.parse: Add error handling for invalid
    hours/minutes in the timezone offset.
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Add missing debugging version info to Protobuf Java gencode
    when multiple files are generated.
  * Fix a bad cast in putBuilderIfAbsent when already present due
    to using the result of put() directly (which is null if it
    currently has no value)
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Fix a NPE in putBuilderIfAbsent due to using the result of
    put() directly (which is null if it currently has no value)
  * Update Kotlin compiler to escape package names
  * Add MapFieldBuilder and change codegen to generate it and the
    put{field}BuilderIfAbsent method.
  * Introduce recursion limit in Java text format parsing
  * Consider the protobuf.Any invalid if typeUrl.split("/")
    returns an empty array.
  * Mark `FieldDescriptor.hasOptionalKeyword()` as deprecated.
  * Fixed Python memory leak in map lookup.
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Ensure Timestamp.ToDatetime(tz) has correct offset
  * Do not check required field for upb python MergeFrom
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Emit __slots__ in pyi output as a tuple rather than a list
    for --pyi_out.
  * Fix a bug that strips options from descriptor.proto in
    Python.
  * Raise warings for message.UnknownFields() usages and navigate
    to the new add
  * Add protobuf python keyword support in path for stub
    generator.
  * Add tuple support to set Struct
  * ### Python C-Extension (Default)
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Check that ffi-compiler loads before using it to define
    tasks.
  [#] UPB (Python/PHP/Ruby C-Extension)
  * Include .inc files directly instead of through a filegroup
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Add utf8_validation feature back to the global feature set.
  * Do not check required field for upb python MergeFrom
  * Merge the protobuf and upb Bazel repos
  * Added malloc_trim() calls to Python allocator so RSS will
    decrease when memory is freed
  * Upb: fix a Python memory leak in ByteSize()
  * Support ASAN detection on clang
  * Upb: bugfix for importing a proto3 enum from within a proto2
    file
  * Expose methods needed by Ruby FFI using UPB_API
  * Fix `PyUpb_Message_MergeInternal` segfault</changelog>
</package>
<package pkgid="1d90755daf7158375888e94bc554277c9d6733764f191907c9ff368064a11025" name="libprotobuf-lite25_1_0" arch="x86_64">
  <version epoch="0" ver="25.1" rel="150400.9.6.1"/>
  <changelog author="dmueller@suse.com" date="1659614400">- add 10355.patch to fix soversioning</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 21.5:
  PHP
  * Added getContainingOneof and getRealContainingOneof to descriptor.
  * fix PHP readonly legacy files for nested messages
  Python
  * Fixed comparison of maps in Python.</changelog>
  <changelog author="dmueller@suse.com" date="1663588800">- update to 21.6:
  C++:
  * Reduce memory consumption of MessageSet parsing</changelog>
  <changelog author="dmueller@suse.com" date="1667044800">- update to 21.9:
  * Ruby
  * Replace libc strdup usage with internal impl to restore musl compat (#10818)
  * Auto capitalize enums name in Ruby (#10454) (#10763)
  * Other
  * Fix for grpc.tools #17995 &amp; protobuf #7474 (handle UTF-8 paths in argumentfile) (#10721)
  * C++
  * 21.x No longer define no_threadlocal on OpenBSD (#10743)
  * Java
  * Mark default instance as immutable first to avoid race during static initialization of default instances (#10771)
  * Refactoring java full runtime to reuse sub-message builders and prepare to
    migrate parsing logic from parse constructor to builder.
  * Move proto wireformat parsing functionality from the private "parsing
    constructor" to the Builder class.
  * Change the Lite runtime to prefer merging from the wireformat into mutable
    messages rather than building up a new immutable object before merging. This
    way results in fewer allocations and copy operations.
  * Make message-type extensions merge from wire-format instead of building up
    instances and merging afterwards. This has much better performance.
  * Fix TextFormat parser to build up recurring (but supposedly not repeated)
    sub-messages directly from text rather than building a new sub-message and
    merging the fully formed message into the existing field.</changelog>
  <changelog author="dmueller@suse.com" date="1670241600">- update to 21.10:
  * Java
  * Use bit-field int values in buildPartial to skip work on unset groups of
    fields. (#10960)
  * Mark nested builder as clean after clear is called (#10984)</changelog>
  <changelog author="dmueller@suse.com" date="1670500800">- update to 21.11:
  * Python
  * Add license file to pypi wheels (#10936)
  * Fix round-trip bug (#10158)</changelog>
  <changelog author="dmueller@suse.com" date="1671105600">- update to v21.12:
  * Python
  * Fix broken enum ranges (#11171)
  * Stop requiring extension fields to have a sythetic oneof (#11091)
  * Python runtime 4.21.10 not works generated code can not load valid
    proto.</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO (boo#1133277).</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to v22.3
  UPB (Python/PHP/Ruby C-Extension)
  * Remove src prefix from proto import
  * Fix .gitmodules to use the correct absl branch
  * Remove erroneous dependency on googletest
- update to 22.2:
  Java
  * Add version to intra proto dependencies and add kotlin stdlib
    dependency
  * Add $ back for osgi header
  * Remove $ in pom files
- update to 22.1:
  * Add visibility of plugin.proto to python directory
  * Strip "src" from file name of plugin.proto
  * Add OSGi headers to pom files.
  * Remove errorprone dependency from kotlin protos.
  * Version protoc according to the compiler version number.
- update to 22.0:
  * This version includes breaking changes to: Cpp.
    Please refer to the migration guide for information:
    https://protobuf.dev/support/migration/#compiler-22
  * [Cpp] Migrate to Abseil's logging library.
  * [Cpp] `proto2::Map::value_type` changes to `std::pair`.
  * [Cpp] Mark final ZeroCopyInputStream, ZeroCopyOutputStream,
    and DefaultFieldComparator classes.
  * [Cpp] Add a dependency on Abseil (#10416)
  * [Cpp] Remove all autotools usage (#10132)
  * [Cpp] Add C++20 reserved keywords
  * [Cpp] Dropped C++11 Support
  * [Cpp] Delete Arena::Init
  * [Cpp] Replace JSON parser with new implementation
  * [Cpp] Make RepeatedField::GetArena non-const in order to
    support split RepeatedFields.
  * long list of bindings specific fixes see
    https://github.com/protocolbuffers/protobuf/releases/tag/v22.0
- python sub packages version is set 4.22.3 as defined in
  python/google/protobuf/__init__.py to stay compatible
- skip python2 builds by default
- drop patches:
  * 10355.patch,
  * gcc12-disable-__constinit-with-c++-11.patch (merged upstream)
- added patches:
  * add-missing-stdint-header.patch   added for compile fixes</changelog>
  <changelog author="fstrba@suse.com" date="1682596800">- Make possible to build on older systems, like SLE12 that miss
  some of the used macros.</changelog>
  <changelog author="fstrba@suse.com" date="1682683200">- Mention the rpmlintrc file in the spec.</changelog>
  <changelog author="mpluskal@suse.com" date="1683633600">- Fix confusion in versions</changelog>
  <changelog author="dmueller@suse.com" date="1686484800">- drop python2 handling
- fix version handling and package the private libs again</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 22.5:
  C++
  * Add missing cstdint header
  * Fix: missing -DPROTOBUF_USE_DLLS in pkg-config (#12700)
  * Avoid using string(JOIN..., which requires cmake 3.12
  * Explicitly include GTest package in examples
  * Bump Abseil submodule to 20230125.3 (#12660)
- update to 22.4:
  C++
  * Fix libprotoc: export useful symbols from .so
  * Fix btree issue in map tests.
  Python
  * Fix bug in _internal_copy_files where the rule would fail in
    downstream repositories.
  Other
  * Bump utf8_range to version with working pkg-config (#12584)
  * Fix declared dependencies for pkg-config
  * Update abseil dependency and reorder dependencies to ensure
    we use the version specified in protobuf_deps.
  * Turn off clang::musttail on i386</changelog>
  <changelog author="fvogt@suse.com" date="1686744000">- Add patch to fix linking ThreadSafeArena:
  * 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch
- Drop the protobuf-source package, no longer used</changelog>
  <changelog author="dmueller@suse.com" date="1688385600">- update to 23.3:
  C++
  * Regenerate stale files
  * Use the same ABI for static and shared libraries on non-
    Windows platforms
  * Add a workaround for GCC constexpr bug
  Objective-C
  * Regenerate stale files
  UPB (Python/PHP/Ruby C-Extension)
  * Fixed a bug in `upb_Map_Delete()` that caused crashes in
    map.delete(k) for Ruby when string-keyed maps were in use.
  Compiler
  * Add missing header to Objective-c generator
  * Add a workaround for GCC constexpr bug
  Java
  * Rollback of: Simplify protobuf Java message builder by
    removing methods that calls the super class only.
  Csharp
  * [C#] Replace regex that validates descriptor names
- drop 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1688731200">- update to 23.4:
  * Add dllexport_decl for generated default instance.
  * Deps: Update Guava to 32.0.1</changelog>
  <changelog author="fstrba@suse.com" date="1698667200">- Build with source and target levels 8
  * fixes build with JDK21
- Install the pom file with the new %%mvn_install_pom macro
- Do not install the pom-only artifacts, since the %%mvn_install_pom
  macro resolves the variables at the install time</changelog>
  <changelog author="dmueller@suse.com" date="1703160000">- build against modern python on sle15</changelog>
  <changelog author="dmueller@suse.com" date="1704196800">- update to 25.1:
  * Raise warnings for deprecated python syntax usages
  * Add support for extensions in CRuby, JRuby, and FFI Ruby
  * Add support for options in CRuby, JRuby and FFI (#14594)
- update to 25.0:
  * Implement proto2/proto3 with editions
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Editions: Introduce functionality to protoc for generating
    edition feature set defaults.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Publish extension declarations with declaration
    verifications.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Protoc: parser rejects explicit use of map_entry option
  * Protoc: validate that reserved range start is before end
  * Protoc: support identifiers as reserved names in addition to
    string literals (only in editions)
  * Drop support for Bazel 5.
  * Allow code generators to specify whether or not they support
    editions.
  [#] C++
  * Set `PROTOBUF_EXPORT` on
    `InternalOutOfLineDeleteMessageLite()`
  * Update stale checked-in files
  * Apply PROTOBUF_NOINLINE to declarations of some functions
    that want it.
  * Implement proto2/proto3 with editions
  * Make JSON UTF-8 boundary check inclusive of the largest
    possible UTF-8 character.
  * Reduce `Map::size_type` to 32-bits. Protobuf containers can't
    have more than that
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Fix bug in reflection based Swap of map fields.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Add prefetching to arena allocations.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    repeated and map field accessors.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    string field accessors.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Fixes for 32-bit MSVC.
  * Publish extension declarations with declaration
    verifications.
  * Export the constants in protobuf's any.h to support DLL
    builds.
  * Implement AbslStringify for the Descriptor family of types.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    message field accessors.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Introduce C++ feature for UTF8 validation.
  * Protoc: validate that reserved range start is before end
  * Remove option to disable the table-driven parser in protoc.
  * Lock down ctype=CORD in proto file.
  * Support split repeated fields.
  * In OSS mode omit some extern template specializations.
  * Allow code generators to specify whether or not they support
    editions.
  [#] Java
  * Implement proto2/proto3 with editions
  * Remove synthetic oneofs from Java gencode field accessor
    tables.
  * Timestamps.parse: Add error handling for invalid
    hours/minutes in the timezone offset.
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Add missing debugging version info to Protobuf Java gencode
    when multiple files are generated.
  * Fix a bad cast in putBuilderIfAbsent when already present due
    to using the result of put() directly (which is null if it
    currently has no value)
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Fix a NPE in putBuilderIfAbsent due to using the result of
    put() directly (which is null if it currently has no value)
  * Update Kotlin compiler to escape package names
  * Add MapFieldBuilder and change codegen to generate it and the
    put{field}BuilderIfAbsent method.
  * Introduce recursion limit in Java text format parsing
  * Consider the protobuf.Any invalid if typeUrl.split("/")
    returns an empty array.
  * Mark `FieldDescriptor.hasOptionalKeyword()` as deprecated.
  * Fixed Python memory leak in map lookup.
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Ensure Timestamp.ToDatetime(tz) has correct offset
  * Do not check required field for upb python MergeFrom
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Emit __slots__ in pyi output as a tuple rather than a list
    for --pyi_out.
  * Fix a bug that strips options from descriptor.proto in
    Python.
  * Raise warings for message.UnknownFields() usages and navigate
    to the new add
  * Add protobuf python keyword support in path for stub
    generator.
  * Add tuple support to set Struct
  * ### Python C-Extension (Default)
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Check that ffi-compiler loads before using it to define
    tasks.
  [#] UPB (Python/PHP/Ruby C-Extension)
  * Include .inc files directly instead of through a filegroup
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Add utf8_validation feature back to the global feature set.
  * Do not check required field for upb python MergeFrom
  * Merge the protobuf and upb Bazel repos
  * Added malloc_trim() calls to Python allocator so RSS will
    decrease when memory is freed
  * Upb: fix a Python memory leak in ByteSize()
  * Support ASAN detection on clang
  * Upb: bugfix for importing a proto3 enum from within a proto2
    file
  * Expose methods needed by Ruby FFI using UPB_API
  * Fix `PyUpb_Message_MergeInternal` segfault</changelog>
</package>
<package pkgid="832d64ce677c1e50b49ab3c127a5e5a762d95fcac5b1074362cf99a2a93c69f4" name="libprotobuf-lite25_1_0" arch="aarch64">
  <version epoch="0" ver="25.1" rel="150500.12.2.2"/>
  <changelog author="dmueller@suse.com" date="1659614400">- add 10355.patch to fix soversioning</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 21.5:
  PHP
  * Added getContainingOneof and getRealContainingOneof to descriptor.
  * fix PHP readonly legacy files for nested messages
  Python
  * Fixed comparison of maps in Python.</changelog>
  <changelog author="dmueller@suse.com" date="1663588800">- update to 21.6:
  C++:
  * Reduce memory consumption of MessageSet parsing</changelog>
  <changelog author="dmueller@suse.com" date="1667044800">- update to 21.9:
  * Ruby
  * Replace libc strdup usage with internal impl to restore musl compat (#10818)
  * Auto capitalize enums name in Ruby (#10454) (#10763)
  * Other
  * Fix for grpc.tools #17995 &amp; protobuf #7474 (handle UTF-8 paths in argumentfile) (#10721)
  * C++
  * 21.x No longer define no_threadlocal on OpenBSD (#10743)
  * Java
  * Mark default instance as immutable first to avoid race during static initialization of default instances (#10771)
  * Refactoring java full runtime to reuse sub-message builders and prepare to
    migrate parsing logic from parse constructor to builder.
  * Move proto wireformat parsing functionality from the private "parsing
    constructor" to the Builder class.
  * Change the Lite runtime to prefer merging from the wireformat into mutable
    messages rather than building up a new immutable object before merging. This
    way results in fewer allocations and copy operations.
  * Make message-type extensions merge from wire-format instead of building up
    instances and merging afterwards. This has much better performance.
  * Fix TextFormat parser to build up recurring (but supposedly not repeated)
    sub-messages directly from text rather than building a new sub-message and
    merging the fully formed message into the existing field.</changelog>
  <changelog author="dmueller@suse.com" date="1670241600">- update to 21.10:
  * Java
  * Use bit-field int values in buildPartial to skip work on unset groups of
    fields. (#10960)
  * Mark nested builder as clean after clear is called (#10984)</changelog>
  <changelog author="dmueller@suse.com" date="1670500800">- update to 21.11:
  * Python
  * Add license file to pypi wheels (#10936)
  * Fix round-trip bug (#10158)</changelog>
  <changelog author="dmueller@suse.com" date="1671105600">- update to v21.12:
  * Python
  * Fix broken enum ranges (#11171)
  * Stop requiring extension fields to have a sythetic oneof (#11091)
  * Python runtime 4.21.10 not works generated code can not load valid
    proto.</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO (boo#1133277).</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to v22.3
  UPB (Python/PHP/Ruby C-Extension)
  * Remove src prefix from proto import
  * Fix .gitmodules to use the correct absl branch
  * Remove erroneous dependency on googletest
- update to 22.2:
  Java
  * Add version to intra proto dependencies and add kotlin stdlib
    dependency
  * Add $ back for osgi header
  * Remove $ in pom files
- update to 22.1:
  * Add visibility of plugin.proto to python directory
  * Strip "src" from file name of plugin.proto
  * Add OSGi headers to pom files.
  * Remove errorprone dependency from kotlin protos.
  * Version protoc according to the compiler version number.
- update to 22.0:
  * This version includes breaking changes to: Cpp.
    Please refer to the migration guide for information:
    https://protobuf.dev/support/migration/#compiler-22
  * [Cpp] Migrate to Abseil's logging library.
  * [Cpp] `proto2::Map::value_type` changes to `std::pair`.
  * [Cpp] Mark final ZeroCopyInputStream, ZeroCopyOutputStream,
    and DefaultFieldComparator classes.
  * [Cpp] Add a dependency on Abseil (#10416)
  * [Cpp] Remove all autotools usage (#10132)
  * [Cpp] Add C++20 reserved keywords
  * [Cpp] Dropped C++11 Support
  * [Cpp] Delete Arena::Init
  * [Cpp] Replace JSON parser with new implementation
  * [Cpp] Make RepeatedField::GetArena non-const in order to
    support split RepeatedFields.
  * long list of bindings specific fixes see
    https://github.com/protocolbuffers/protobuf/releases/tag/v22.0
- python sub packages version is set 4.22.3 as defined in
  python/google/protobuf/__init__.py to stay compatible
- skip python2 builds by default
- drop patches:
  * 10355.patch,
  * gcc12-disable-__constinit-with-c++-11.patch (merged upstream)
- added patches:
  * add-missing-stdint-header.patch   added for compile fixes</changelog>
  <changelog author="fstrba@suse.com" date="1682596800">- Make possible to build on older systems, like SLE12 that miss
  some of the used macros.</changelog>
  <changelog author="fstrba@suse.com" date="1682683200">- Mention the rpmlintrc file in the spec.</changelog>
  <changelog author="mpluskal@suse.com" date="1683633600">- Fix confusion in versions</changelog>
  <changelog author="dmueller@suse.com" date="1686484800">- drop python2 handling
- fix version handling and package the private libs again</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 22.5:
  C++
  * Add missing cstdint header
  * Fix: missing -DPROTOBUF_USE_DLLS in pkg-config (#12700)
  * Avoid using string(JOIN..., which requires cmake 3.12
  * Explicitly include GTest package in examples
  * Bump Abseil submodule to 20230125.3 (#12660)
- update to 22.4:
  C++
  * Fix libprotoc: export useful symbols from .so
  * Fix btree issue in map tests.
  Python
  * Fix bug in _internal_copy_files where the rule would fail in
    downstream repositories.
  Other
  * Bump utf8_range to version with working pkg-config (#12584)
  * Fix declared dependencies for pkg-config
  * Update abseil dependency and reorder dependencies to ensure
    we use the version specified in protobuf_deps.
  * Turn off clang::musttail on i386</changelog>
  <changelog author="fvogt@suse.com" date="1686744000">- Add patch to fix linking ThreadSafeArena:
  * 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch
- Drop the protobuf-source package, no longer used</changelog>
  <changelog author="dmueller@suse.com" date="1688385600">- update to 23.3:
  C++
  * Regenerate stale files
  * Use the same ABI for static and shared libraries on non-
    Windows platforms
  * Add a workaround for GCC constexpr bug
  Objective-C
  * Regenerate stale files
  UPB (Python/PHP/Ruby C-Extension)
  * Fixed a bug in `upb_Map_Delete()` that caused crashes in
    map.delete(k) for Ruby when string-keyed maps were in use.
  Compiler
  * Add missing header to Objective-c generator
  * Add a workaround for GCC constexpr bug
  Java
  * Rollback of: Simplify protobuf Java message builder by
    removing methods that calls the super class only.
  Csharp
  * [C#] Replace regex that validates descriptor names
- drop 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1688731200">- update to 23.4:
  * Add dllexport_decl for generated default instance.
  * Deps: Update Guava to 32.0.1</changelog>
  <changelog author="fstrba@suse.com" date="1698667200">- Build with source and target levels 8
  * fixes build with JDK21
- Install the pom file with the new %%mvn_install_pom macro
- Do not install the pom-only artifacts, since the %%mvn_install_pom
  macro resolves the variables at the install time</changelog>
  <changelog author="dmueller@suse.com" date="1703160000">- build against modern python on sle15</changelog>
  <changelog author="dmueller@suse.com" date="1704196800">- update to 25.1:
  * Raise warnings for deprecated python syntax usages
  * Add support for extensions in CRuby, JRuby, and FFI Ruby
  * Add support for options in CRuby, JRuby and FFI (#14594)
- update to 25.0:
  * Implement proto2/proto3 with editions
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Editions: Introduce functionality to protoc for generating
    edition feature set defaults.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Publish extension declarations with declaration
    verifications.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Protoc: parser rejects explicit use of map_entry option
  * Protoc: validate that reserved range start is before end
  * Protoc: support identifiers as reserved names in addition to
    string literals (only in editions)
  * Drop support for Bazel 5.
  * Allow code generators to specify whether or not they support
    editions.
  [#] C++
  * Set `PROTOBUF_EXPORT` on
    `InternalOutOfLineDeleteMessageLite()`
  * Update stale checked-in files
  * Apply PROTOBUF_NOINLINE to declarations of some functions
    that want it.
  * Implement proto2/proto3 with editions
  * Make JSON UTF-8 boundary check inclusive of the largest
    possible UTF-8 character.
  * Reduce `Map::size_type` to 32-bits. Protobuf containers can't
    have more than that
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Fix bug in reflection based Swap of map fields.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Add prefetching to arena allocations.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    repeated and map field accessors.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    string field accessors.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Fixes for 32-bit MSVC.
  * Publish extension declarations with declaration
    verifications.
  * Export the constants in protobuf's any.h to support DLL
    builds.
  * Implement AbslStringify for the Descriptor family of types.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    message field accessors.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Introduce C++ feature for UTF8 validation.
  * Protoc: validate that reserved range start is before end
  * Remove option to disable the table-driven parser in protoc.
  * Lock down ctype=CORD in proto file.
  * Support split repeated fields.
  * In OSS mode omit some extern template specializations.
  * Allow code generators to specify whether or not they support
    editions.
  [#] Java
  * Implement proto2/proto3 with editions
  * Remove synthetic oneofs from Java gencode field accessor
    tables.
  * Timestamps.parse: Add error handling for invalid
    hours/minutes in the timezone offset.
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Add missing debugging version info to Protobuf Java gencode
    when multiple files are generated.
  * Fix a bad cast in putBuilderIfAbsent when already present due
    to using the result of put() directly (which is null if it
    currently has no value)
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Fix a NPE in putBuilderIfAbsent due to using the result of
    put() directly (which is null if it currently has no value)
  * Update Kotlin compiler to escape package names
  * Add MapFieldBuilder and change codegen to generate it and the
    put{field}BuilderIfAbsent method.
  * Introduce recursion limit in Java text format parsing
  * Consider the protobuf.Any invalid if typeUrl.split("/")
    returns an empty array.
  * Mark `FieldDescriptor.hasOptionalKeyword()` as deprecated.
  * Fixed Python memory leak in map lookup.
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Ensure Timestamp.ToDatetime(tz) has correct offset
  * Do not check required field for upb python MergeFrom
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Emit __slots__ in pyi output as a tuple rather than a list
    for --pyi_out.
  * Fix a bug that strips options from descriptor.proto in
    Python.
  * Raise warings for message.UnknownFields() usages and navigate
    to the new add
  * Add protobuf python keyword support in path for stub
    generator.
  * Add tuple support to set Struct
  * ### Python C-Extension (Default)
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Check that ffi-compiler loads before using it to define
    tasks.
  [#] UPB (Python/PHP/Ruby C-Extension)
  * Include .inc files directly instead of through a filegroup
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Add utf8_validation feature back to the global feature set.
  * Do not check required field for upb python MergeFrom
  * Merge the protobuf and upb Bazel repos
  * Added malloc_trim() calls to Python allocator so RSS will
    decrease when memory is freed
  * Upb: fix a Python memory leak in ByteSize()
  * Support ASAN detection on clang
  * Upb: bugfix for importing a proto3 enum from within a proto2
    file
  * Expose methods needed by Ruby FFI using UPB_API
  * Fix `PyUpb_Message_MergeInternal` segfault</changelog>
</package>
<package pkgid="4f8cee5cff8ebb213f2222a18c1176198c1be1c09cb8e21a96d17cc8c8f52fd8" name="libprotobuf-lite25_1_0" arch="ppc64le">
  <version epoch="0" ver="25.1" rel="150500.12.2.2"/>
  <changelog author="dmueller@suse.com" date="1659614400">- add 10355.patch to fix soversioning</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 21.5:
  PHP
  * Added getContainingOneof and getRealContainingOneof to descriptor.
  * fix PHP readonly legacy files for nested messages
  Python
  * Fixed comparison of maps in Python.</changelog>
  <changelog author="dmueller@suse.com" date="1663588800">- update to 21.6:
  C++:
  * Reduce memory consumption of MessageSet parsing</changelog>
  <changelog author="dmueller@suse.com" date="1667044800">- update to 21.9:
  * Ruby
  * Replace libc strdup usage with internal impl to restore musl compat (#10818)
  * Auto capitalize enums name in Ruby (#10454) (#10763)
  * Other
  * Fix for grpc.tools #17995 &amp; protobuf #7474 (handle UTF-8 paths in argumentfile) (#10721)
  * C++
  * 21.x No longer define no_threadlocal on OpenBSD (#10743)
  * Java
  * Mark default instance as immutable first to avoid race during static initialization of default instances (#10771)
  * Refactoring java full runtime to reuse sub-message builders and prepare to
    migrate parsing logic from parse constructor to builder.
  * Move proto wireformat parsing functionality from the private "parsing
    constructor" to the Builder class.
  * Change the Lite runtime to prefer merging from the wireformat into mutable
    messages rather than building up a new immutable object before merging. This
    way results in fewer allocations and copy operations.
  * Make message-type extensions merge from wire-format instead of building up
    instances and merging afterwards. This has much better performance.
  * Fix TextFormat parser to build up recurring (but supposedly not repeated)
    sub-messages directly from text rather than building a new sub-message and
    merging the fully formed message into the existing field.</changelog>
  <changelog author="dmueller@suse.com" date="1670241600">- update to 21.10:
  * Java
  * Use bit-field int values in buildPartial to skip work on unset groups of
    fields. (#10960)
  * Mark nested builder as clean after clear is called (#10984)</changelog>
  <changelog author="dmueller@suse.com" date="1670500800">- update to 21.11:
  * Python
  * Add license file to pypi wheels (#10936)
  * Fix round-trip bug (#10158)</changelog>
  <changelog author="dmueller@suse.com" date="1671105600">- update to v21.12:
  * Python
  * Fix broken enum ranges (#11171)
  * Stop requiring extension fields to have a sythetic oneof (#11091)
  * Python runtime 4.21.10 not works generated code can not load valid
    proto.</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO (boo#1133277).</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to v22.3
  UPB (Python/PHP/Ruby C-Extension)
  * Remove src prefix from proto import
  * Fix .gitmodules to use the correct absl branch
  * Remove erroneous dependency on googletest
- update to 22.2:
  Java
  * Add version to intra proto dependencies and add kotlin stdlib
    dependency
  * Add $ back for osgi header
  * Remove $ in pom files
- update to 22.1:
  * Add visibility of plugin.proto to python directory
  * Strip "src" from file name of plugin.proto
  * Add OSGi headers to pom files.
  * Remove errorprone dependency from kotlin protos.
  * Version protoc according to the compiler version number.
- update to 22.0:
  * This version includes breaking changes to: Cpp.
    Please refer to the migration guide for information:
    https://protobuf.dev/support/migration/#compiler-22
  * [Cpp] Migrate to Abseil's logging library.
  * [Cpp] `proto2::Map::value_type` changes to `std::pair`.
  * [Cpp] Mark final ZeroCopyInputStream, ZeroCopyOutputStream,
    and DefaultFieldComparator classes.
  * [Cpp] Add a dependency on Abseil (#10416)
  * [Cpp] Remove all autotools usage (#10132)
  * [Cpp] Add C++20 reserved keywords
  * [Cpp] Dropped C++11 Support
  * [Cpp] Delete Arena::Init
  * [Cpp] Replace JSON parser with new implementation
  * [Cpp] Make RepeatedField::GetArena non-const in order to
    support split RepeatedFields.
  * long list of bindings specific fixes see
    https://github.com/protocolbuffers/protobuf/releases/tag/v22.0
- python sub packages version is set 4.22.3 as defined in
  python/google/protobuf/__init__.py to stay compatible
- skip python2 builds by default
- drop patches:
  * 10355.patch,
  * gcc12-disable-__constinit-with-c++-11.patch (merged upstream)
- added patches:
  * add-missing-stdint-header.patch   added for compile fixes</changelog>
  <changelog author="fstrba@suse.com" date="1682596800">- Make possible to build on older systems, like SLE12 that miss
  some of the used macros.</changelog>
  <changelog author="fstrba@suse.com" date="1682683200">- Mention the rpmlintrc file in the spec.</changelog>
  <changelog author="mpluskal@suse.com" date="1683633600">- Fix confusion in versions</changelog>
  <changelog author="dmueller@suse.com" date="1686484800">- drop python2 handling
- fix version handling and package the private libs again</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 22.5:
  C++
  * Add missing cstdint header
  * Fix: missing -DPROTOBUF_USE_DLLS in pkg-config (#12700)
  * Avoid using string(JOIN..., which requires cmake 3.12
  * Explicitly include GTest package in examples
  * Bump Abseil submodule to 20230125.3 (#12660)
- update to 22.4:
  C++
  * Fix libprotoc: export useful symbols from .so
  * Fix btree issue in map tests.
  Python
  * Fix bug in _internal_copy_files where the rule would fail in
    downstream repositories.
  Other
  * Bump utf8_range to version with working pkg-config (#12584)
  * Fix declared dependencies for pkg-config
  * Update abseil dependency and reorder dependencies to ensure
    we use the version specified in protobuf_deps.
  * Turn off clang::musttail on i386</changelog>
  <changelog author="fvogt@suse.com" date="1686744000">- Add patch to fix linking ThreadSafeArena:
  * 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch
- Drop the protobuf-source package, no longer used</changelog>
  <changelog author="dmueller@suse.com" date="1688385600">- update to 23.3:
  C++
  * Regenerate stale files
  * Use the same ABI for static and shared libraries on non-
    Windows platforms
  * Add a workaround for GCC constexpr bug
  Objective-C
  * Regenerate stale files
  UPB (Python/PHP/Ruby C-Extension)
  * Fixed a bug in `upb_Map_Delete()` that caused crashes in
    map.delete(k) for Ruby when string-keyed maps were in use.
  Compiler
  * Add missing header to Objective-c generator
  * Add a workaround for GCC constexpr bug
  Java
  * Rollback of: Simplify protobuf Java message builder by
    removing methods that calls the super class only.
  Csharp
  * [C#] Replace regex that validates descriptor names
- drop 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1688731200">- update to 23.4:
  * Add dllexport_decl for generated default instance.
  * Deps: Update Guava to 32.0.1</changelog>
  <changelog author="fstrba@suse.com" date="1698667200">- Build with source and target levels 8
  * fixes build with JDK21
- Install the pom file with the new %%mvn_install_pom macro
- Do not install the pom-only artifacts, since the %%mvn_install_pom
  macro resolves the variables at the install time</changelog>
  <changelog author="dmueller@suse.com" date="1703160000">- build against modern python on sle15</changelog>
  <changelog author="dmueller@suse.com" date="1704196800">- update to 25.1:
  * Raise warnings for deprecated python syntax usages
  * Add support for extensions in CRuby, JRuby, and FFI Ruby
  * Add support for options in CRuby, JRuby and FFI (#14594)
- update to 25.0:
  * Implement proto2/proto3 with editions
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Editions: Introduce functionality to protoc for generating
    edition feature set defaults.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Publish extension declarations with declaration
    verifications.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Protoc: parser rejects explicit use of map_entry option
  * Protoc: validate that reserved range start is before end
  * Protoc: support identifiers as reserved names in addition to
    string literals (only in editions)
  * Drop support for Bazel 5.
  * Allow code generators to specify whether or not they support
    editions.
  [#] C++
  * Set `PROTOBUF_EXPORT` on
    `InternalOutOfLineDeleteMessageLite()`
  * Update stale checked-in files
  * Apply PROTOBUF_NOINLINE to declarations of some functions
    that want it.
  * Implement proto2/proto3 with editions
  * Make JSON UTF-8 boundary check inclusive of the largest
    possible UTF-8 character.
  * Reduce `Map::size_type` to 32-bits. Protobuf containers can't
    have more than that
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Fix bug in reflection based Swap of map fields.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Add prefetching to arena allocations.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    repeated and map field accessors.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    string field accessors.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Fixes for 32-bit MSVC.
  * Publish extension declarations with declaration
    verifications.
  * Export the constants in protobuf's any.h to support DLL
    builds.
  * Implement AbslStringify for the Descriptor family of types.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    message field accessors.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Introduce C++ feature for UTF8 validation.
  * Protoc: validate that reserved range start is before end
  * Remove option to disable the table-driven parser in protoc.
  * Lock down ctype=CORD in proto file.
  * Support split repeated fields.
  * In OSS mode omit some extern template specializations.
  * Allow code generators to specify whether or not they support
    editions.
  [#] Java
  * Implement proto2/proto3 with editions
  * Remove synthetic oneofs from Java gencode field accessor
    tables.
  * Timestamps.parse: Add error handling for invalid
    hours/minutes in the timezone offset.
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Add missing debugging version info to Protobuf Java gencode
    when multiple files are generated.
  * Fix a bad cast in putBuilderIfAbsent when already present due
    to using the result of put() directly (which is null if it
    currently has no value)
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Fix a NPE in putBuilderIfAbsent due to using the result of
    put() directly (which is null if it currently has no value)
  * Update Kotlin compiler to escape package names
  * Add MapFieldBuilder and change codegen to generate it and the
    put{field}BuilderIfAbsent method.
  * Introduce recursion limit in Java text format parsing
  * Consider the protobuf.Any invalid if typeUrl.split("/")
    returns an empty array.
  * Mark `FieldDescriptor.hasOptionalKeyword()` as deprecated.
  * Fixed Python memory leak in map lookup.
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Ensure Timestamp.ToDatetime(tz) has correct offset
  * Do not check required field for upb python MergeFrom
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Emit __slots__ in pyi output as a tuple rather than a list
    for --pyi_out.
  * Fix a bug that strips options from descriptor.proto in
    Python.
  * Raise warings for message.UnknownFields() usages and navigate
    to the new add
  * Add protobuf python keyword support in path for stub
    generator.
  * Add tuple support to set Struct
  * ### Python C-Extension (Default)
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Check that ffi-compiler loads before using it to define
    tasks.
  [#] UPB (Python/PHP/Ruby C-Extension)
  * Include .inc files directly instead of through a filegroup
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Add utf8_validation feature back to the global feature set.
  * Do not check required field for upb python MergeFrom
  * Merge the protobuf and upb Bazel repos
  * Added malloc_trim() calls to Python allocator so RSS will
    decrease when memory is freed
  * Upb: fix a Python memory leak in ByteSize()
  * Support ASAN detection on clang
  * Upb: bugfix for importing a proto3 enum from within a proto2
    file
  * Expose methods needed by Ruby FFI using UPB_API
  * Fix `PyUpb_Message_MergeInternal` segfault</changelog>
</package>
<package pkgid="bfa5dc5cb304320a0afa115953b69ae9dc7639d80bcf40ab45423c7a62fa0c70" name="libprotobuf-lite25_1_0" arch="s390x">
  <version epoch="0" ver="25.1" rel="150500.12.2.2"/>
  <changelog author="dmueller@suse.com" date="1659614400">- add 10355.patch to fix soversioning</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 21.5:
  PHP
  * Added getContainingOneof and getRealContainingOneof to descriptor.
  * fix PHP readonly legacy files for nested messages
  Python
  * Fixed comparison of maps in Python.</changelog>
  <changelog author="dmueller@suse.com" date="1663588800">- update to 21.6:
  C++:
  * Reduce memory consumption of MessageSet parsing</changelog>
  <changelog author="dmueller@suse.com" date="1667044800">- update to 21.9:
  * Ruby
  * Replace libc strdup usage with internal impl to restore musl compat (#10818)
  * Auto capitalize enums name in Ruby (#10454) (#10763)
  * Other
  * Fix for grpc.tools #17995 &amp; protobuf #7474 (handle UTF-8 paths in argumentfile) (#10721)
  * C++
  * 21.x No longer define no_threadlocal on OpenBSD (#10743)
  * Java
  * Mark default instance as immutable first to avoid race during static initialization of default instances (#10771)
  * Refactoring java full runtime to reuse sub-message builders and prepare to
    migrate parsing logic from parse constructor to builder.
  * Move proto wireformat parsing functionality from the private "parsing
    constructor" to the Builder class.
  * Change the Lite runtime to prefer merging from the wireformat into mutable
    messages rather than building up a new immutable object before merging. This
    way results in fewer allocations and copy operations.
  * Make message-type extensions merge from wire-format instead of building up
    instances and merging afterwards. This has much better performance.
  * Fix TextFormat parser to build up recurring (but supposedly not repeated)
    sub-messages directly from text rather than building a new sub-message and
    merging the fully formed message into the existing field.</changelog>
  <changelog author="dmueller@suse.com" date="1670241600">- update to 21.10:
  * Java
  * Use bit-field int values in buildPartial to skip work on unset groups of
    fields. (#10960)
  * Mark nested builder as clean after clear is called (#10984)</changelog>
  <changelog author="dmueller@suse.com" date="1670500800">- update to 21.11:
  * Python
  * Add license file to pypi wheels (#10936)
  * Fix round-trip bug (#10158)</changelog>
  <changelog author="dmueller@suse.com" date="1671105600">- update to v21.12:
  * Python
  * Fix broken enum ranges (#11171)
  * Stop requiring extension fields to have a sythetic oneof (#11091)
  * Python runtime 4.21.10 not works generated code can not load valid
    proto.</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO (boo#1133277).</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to v22.3
  UPB (Python/PHP/Ruby C-Extension)
  * Remove src prefix from proto import
  * Fix .gitmodules to use the correct absl branch
  * Remove erroneous dependency on googletest
- update to 22.2:
  Java
  * Add version to intra proto dependencies and add kotlin stdlib
    dependency
  * Add $ back for osgi header
  * Remove $ in pom files
- update to 22.1:
  * Add visibility of plugin.proto to python directory
  * Strip "src" from file name of plugin.proto
  * Add OSGi headers to pom files.
  * Remove errorprone dependency from kotlin protos.
  * Version protoc according to the compiler version number.
- update to 22.0:
  * This version includes breaking changes to: Cpp.
    Please refer to the migration guide for information:
    https://protobuf.dev/support/migration/#compiler-22
  * [Cpp] Migrate to Abseil's logging library.
  * [Cpp] `proto2::Map::value_type` changes to `std::pair`.
  * [Cpp] Mark final ZeroCopyInputStream, ZeroCopyOutputStream,
    and DefaultFieldComparator classes.
  * [Cpp] Add a dependency on Abseil (#10416)
  * [Cpp] Remove all autotools usage (#10132)
  * [Cpp] Add C++20 reserved keywords
  * [Cpp] Dropped C++11 Support
  * [Cpp] Delete Arena::Init
  * [Cpp] Replace JSON parser with new implementation
  * [Cpp] Make RepeatedField::GetArena non-const in order to
    support split RepeatedFields.
  * long list of bindings specific fixes see
    https://github.com/protocolbuffers/protobuf/releases/tag/v22.0
- python sub packages version is set 4.22.3 as defined in
  python/google/protobuf/__init__.py to stay compatible
- skip python2 builds by default
- drop patches:
  * 10355.patch,
  * gcc12-disable-__constinit-with-c++-11.patch (merged upstream)
- added patches:
  * add-missing-stdint-header.patch   added for compile fixes</changelog>
  <changelog author="fstrba@suse.com" date="1682596800">- Make possible to build on older systems, like SLE12 that miss
  some of the used macros.</changelog>
  <changelog author="fstrba@suse.com" date="1682683200">- Mention the rpmlintrc file in the spec.</changelog>
  <changelog author="mpluskal@suse.com" date="1683633600">- Fix confusion in versions</changelog>
  <changelog author="dmueller@suse.com" date="1686484800">- drop python2 handling
- fix version handling and package the private libs again</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 22.5:
  C++
  * Add missing cstdint header
  * Fix: missing -DPROTOBUF_USE_DLLS in pkg-config (#12700)
  * Avoid using string(JOIN..., which requires cmake 3.12
  * Explicitly include GTest package in examples
  * Bump Abseil submodule to 20230125.3 (#12660)
- update to 22.4:
  C++
  * Fix libprotoc: export useful symbols from .so
  * Fix btree issue in map tests.
  Python
  * Fix bug in _internal_copy_files where the rule would fail in
    downstream repositories.
  Other
  * Bump utf8_range to version with working pkg-config (#12584)
  * Fix declared dependencies for pkg-config
  * Update abseil dependency and reorder dependencies to ensure
    we use the version specified in protobuf_deps.
  * Turn off clang::musttail on i386</changelog>
  <changelog author="fvogt@suse.com" date="1686744000">- Add patch to fix linking ThreadSafeArena:
  * 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch
- Drop the protobuf-source package, no longer used</changelog>
  <changelog author="dmueller@suse.com" date="1688385600">- update to 23.3:
  C++
  * Regenerate stale files
  * Use the same ABI for static and shared libraries on non-
    Windows platforms
  * Add a workaround for GCC constexpr bug
  Objective-C
  * Regenerate stale files
  UPB (Python/PHP/Ruby C-Extension)
  * Fixed a bug in `upb_Map_Delete()` that caused crashes in
    map.delete(k) for Ruby when string-keyed maps were in use.
  Compiler
  * Add missing header to Objective-c generator
  * Add a workaround for GCC constexpr bug
  Java
  * Rollback of: Simplify protobuf Java message builder by
    removing methods that calls the super class only.
  Csharp
  * [C#] Replace regex that validates descriptor names
- drop 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1688731200">- update to 23.4:
  * Add dllexport_decl for generated default instance.
  * Deps: Update Guava to 32.0.1</changelog>
  <changelog author="fstrba@suse.com" date="1698667200">- Build with source and target levels 8
  * fixes build with JDK21
- Install the pom file with the new %%mvn_install_pom macro
- Do not install the pom-only artifacts, since the %%mvn_install_pom
  macro resolves the variables at the install time</changelog>
  <changelog author="dmueller@suse.com" date="1703160000">- build against modern python on sle15</changelog>
  <changelog author="dmueller@suse.com" date="1704196800">- update to 25.1:
  * Raise warnings for deprecated python syntax usages
  * Add support for extensions in CRuby, JRuby, and FFI Ruby
  * Add support for options in CRuby, JRuby and FFI (#14594)
- update to 25.0:
  * Implement proto2/proto3 with editions
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Editions: Introduce functionality to protoc for generating
    edition feature set defaults.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Publish extension declarations with declaration
    verifications.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Protoc: parser rejects explicit use of map_entry option
  * Protoc: validate that reserved range start is before end
  * Protoc: support identifiers as reserved names in addition to
    string literals (only in editions)
  * Drop support for Bazel 5.
  * Allow code generators to specify whether or not they support
    editions.
  [#] C++
  * Set `PROTOBUF_EXPORT` on
    `InternalOutOfLineDeleteMessageLite()`
  * Update stale checked-in files
  * Apply PROTOBUF_NOINLINE to declarations of some functions
    that want it.
  * Implement proto2/proto3 with editions
  * Make JSON UTF-8 boundary check inclusive of the largest
    possible UTF-8 character.
  * Reduce `Map::size_type` to 32-bits. Protobuf containers can't
    have more than that
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Fix bug in reflection based Swap of map fields.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Add prefetching to arena allocations.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    repeated and map field accessors.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    string field accessors.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Fixes for 32-bit MSVC.
  * Publish extension declarations with declaration
    verifications.
  * Export the constants in protobuf's any.h to support DLL
    builds.
  * Implement AbslStringify for the Descriptor family of types.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    message field accessors.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Introduce C++ feature for UTF8 validation.
  * Protoc: validate that reserved range start is before end
  * Remove option to disable the table-driven parser in protoc.
  * Lock down ctype=CORD in proto file.
  * Support split repeated fields.
  * In OSS mode omit some extern template specializations.
  * Allow code generators to specify whether or not they support
    editions.
  [#] Java
  * Implement proto2/proto3 with editions
  * Remove synthetic oneofs from Java gencode field accessor
    tables.
  * Timestamps.parse: Add error handling for invalid
    hours/minutes in the timezone offset.
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Add missing debugging version info to Protobuf Java gencode
    when multiple files are generated.
  * Fix a bad cast in putBuilderIfAbsent when already present due
    to using the result of put() directly (which is null if it
    currently has no value)
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Fix a NPE in putBuilderIfAbsent due to using the result of
    put() directly (which is null if it currently has no value)
  * Update Kotlin compiler to escape package names
  * Add MapFieldBuilder and change codegen to generate it and the
    put{field}BuilderIfAbsent method.
  * Introduce recursion limit in Java text format parsing
  * Consider the protobuf.Any invalid if typeUrl.split("/")
    returns an empty array.
  * Mark `FieldDescriptor.hasOptionalKeyword()` as deprecated.
  * Fixed Python memory leak in map lookup.
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Ensure Timestamp.ToDatetime(tz) has correct offset
  * Do not check required field for upb python MergeFrom
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Emit __slots__ in pyi output as a tuple rather than a list
    for --pyi_out.
  * Fix a bug that strips options from descriptor.proto in
    Python.
  * Raise warings for message.UnknownFields() usages and navigate
    to the new add
  * Add protobuf python keyword support in path for stub
    generator.
  * Add tuple support to set Struct
  * ### Python C-Extension (Default)
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Check that ffi-compiler loads before using it to define
    tasks.
  [#] UPB (Python/PHP/Ruby C-Extension)
  * Include .inc files directly instead of through a filegroup
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Add utf8_validation feature back to the global feature set.
  * Do not check required field for upb python MergeFrom
  * Merge the protobuf and upb Bazel repos
  * Added malloc_trim() calls to Python allocator so RSS will
    decrease when memory is freed
  * Upb: fix a Python memory leak in ByteSize()
  * Support ASAN detection on clang
  * Upb: bugfix for importing a proto3 enum from within a proto2
    file
  * Expose methods needed by Ruby FFI using UPB_API
  * Fix `PyUpb_Message_MergeInternal` segfault</changelog>
</package>
<package pkgid="76dc5887e633b7eb8018c987b80ace9f1b28f8e72958a91ce0f6a5f302e91f3c" name="libprotobuf-lite25_1_0" arch="x86_64">
  <version epoch="0" ver="25.1" rel="150500.12.2.2"/>
  <changelog author="dmueller@suse.com" date="1659614400">- add 10355.patch to fix soversioning</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 21.5:
  PHP
  * Added getContainingOneof and getRealContainingOneof to descriptor.
  * fix PHP readonly legacy files for nested messages
  Python
  * Fixed comparison of maps in Python.</changelog>
  <changelog author="dmueller@suse.com" date="1663588800">- update to 21.6:
  C++:
  * Reduce memory consumption of MessageSet parsing</changelog>
  <changelog author="dmueller@suse.com" date="1667044800">- update to 21.9:
  * Ruby
  * Replace libc strdup usage with internal impl to restore musl compat (#10818)
  * Auto capitalize enums name in Ruby (#10454) (#10763)
  * Other
  * Fix for grpc.tools #17995 &amp; protobuf #7474 (handle UTF-8 paths in argumentfile) (#10721)
  * C++
  * 21.x No longer define no_threadlocal on OpenBSD (#10743)
  * Java
  * Mark default instance as immutable first to avoid race during static initialization of default instances (#10771)
  * Refactoring java full runtime to reuse sub-message builders and prepare to
    migrate parsing logic from parse constructor to builder.
  * Move proto wireformat parsing functionality from the private "parsing
    constructor" to the Builder class.
  * Change the Lite runtime to prefer merging from the wireformat into mutable
    messages rather than building up a new immutable object before merging. This
    way results in fewer allocations and copy operations.
  * Make message-type extensions merge from wire-format instead of building up
    instances and merging afterwards. This has much better performance.
  * Fix TextFormat parser to build up recurring (but supposedly not repeated)
    sub-messages directly from text rather than building a new sub-message and
    merging the fully formed message into the existing field.</changelog>
  <changelog author="dmueller@suse.com" date="1670241600">- update to 21.10:
  * Java
  * Use bit-field int values in buildPartial to skip work on unset groups of
    fields. (#10960)
  * Mark nested builder as clean after clear is called (#10984)</changelog>
  <changelog author="dmueller@suse.com" date="1670500800">- update to 21.11:
  * Python
  * Add license file to pypi wheels (#10936)
  * Fix round-trip bug (#10158)</changelog>
  <changelog author="dmueller@suse.com" date="1671105600">- update to v21.12:
  * Python
  * Fix broken enum ranges (#11171)
  * Stop requiring extension fields to have a sythetic oneof (#11091)
  * Python runtime 4.21.10 not works generated code can not load valid
    proto.</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO (boo#1133277).</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to v22.3
  UPB (Python/PHP/Ruby C-Extension)
  * Remove src prefix from proto import
  * Fix .gitmodules to use the correct absl branch
  * Remove erroneous dependency on googletest
- update to 22.2:
  Java
  * Add version to intra proto dependencies and add kotlin stdlib
    dependency
  * Add $ back for osgi header
  * Remove $ in pom files
- update to 22.1:
  * Add visibility of plugin.proto to python directory
  * Strip "src" from file name of plugin.proto
  * Add OSGi headers to pom files.
  * Remove errorprone dependency from kotlin protos.
  * Version protoc according to the compiler version number.
- update to 22.0:
  * This version includes breaking changes to: Cpp.
    Please refer to the migration guide for information:
    https://protobuf.dev/support/migration/#compiler-22
  * [Cpp] Migrate to Abseil's logging library.
  * [Cpp] `proto2::Map::value_type` changes to `std::pair`.
  * [Cpp] Mark final ZeroCopyInputStream, ZeroCopyOutputStream,
    and DefaultFieldComparator classes.
  * [Cpp] Add a dependency on Abseil (#10416)
  * [Cpp] Remove all autotools usage (#10132)
  * [Cpp] Add C++20 reserved keywords
  * [Cpp] Dropped C++11 Support
  * [Cpp] Delete Arena::Init
  * [Cpp] Replace JSON parser with new implementation
  * [Cpp] Make RepeatedField::GetArena non-const in order to
    support split RepeatedFields.
  * long list of bindings specific fixes see
    https://github.com/protocolbuffers/protobuf/releases/tag/v22.0
- python sub packages version is set 4.22.3 as defined in
  python/google/protobuf/__init__.py to stay compatible
- skip python2 builds by default
- drop patches:
  * 10355.patch,
  * gcc12-disable-__constinit-with-c++-11.patch (merged upstream)
- added patches:
  * add-missing-stdint-header.patch   added for compile fixes</changelog>
  <changelog author="fstrba@suse.com" date="1682596800">- Make possible to build on older systems, like SLE12 that miss
  some of the used macros.</changelog>
  <changelog author="fstrba@suse.com" date="1682683200">- Mention the rpmlintrc file in the spec.</changelog>
  <changelog author="mpluskal@suse.com" date="1683633600">- Fix confusion in versions</changelog>
  <changelog author="dmueller@suse.com" date="1686484800">- drop python2 handling
- fix version handling and package the private libs again</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 22.5:
  C++
  * Add missing cstdint header
  * Fix: missing -DPROTOBUF_USE_DLLS in pkg-config (#12700)
  * Avoid using string(JOIN..., which requires cmake 3.12
  * Explicitly include GTest package in examples
  * Bump Abseil submodule to 20230125.3 (#12660)
- update to 22.4:
  C++
  * Fix libprotoc: export useful symbols from .so
  * Fix btree issue in map tests.
  Python
  * Fix bug in _internal_copy_files where the rule would fail in
    downstream repositories.
  Other
  * Bump utf8_range to version with working pkg-config (#12584)
  * Fix declared dependencies for pkg-config
  * Update abseil dependency and reorder dependencies to ensure
    we use the version specified in protobuf_deps.
  * Turn off clang::musttail on i386</changelog>
  <changelog author="fvogt@suse.com" date="1686744000">- Add patch to fix linking ThreadSafeArena:
  * 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch
- Drop the protobuf-source package, no longer used</changelog>
  <changelog author="dmueller@suse.com" date="1688385600">- update to 23.3:
  C++
  * Regenerate stale files
  * Use the same ABI for static and shared libraries on non-
    Windows platforms
  * Add a workaround for GCC constexpr bug
  Objective-C
  * Regenerate stale files
  UPB (Python/PHP/Ruby C-Extension)
  * Fixed a bug in `upb_Map_Delete()` that caused crashes in
    map.delete(k) for Ruby when string-keyed maps were in use.
  Compiler
  * Add missing header to Objective-c generator
  * Add a workaround for GCC constexpr bug
  Java
  * Rollback of: Simplify protobuf Java message builder by
    removing methods that calls the super class only.
  Csharp
  * [C#] Replace regex that validates descriptor names
- drop 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1688731200">- update to 23.4:
  * Add dllexport_decl for generated default instance.
  * Deps: Update Guava to 32.0.1</changelog>
  <changelog author="fstrba@suse.com" date="1698667200">- Build with source and target levels 8
  * fixes build with JDK21
- Install the pom file with the new %%mvn_install_pom macro
- Do not install the pom-only artifacts, since the %%mvn_install_pom
  macro resolves the variables at the install time</changelog>
  <changelog author="dmueller@suse.com" date="1703160000">- build against modern python on sle15</changelog>
  <changelog author="dmueller@suse.com" date="1704196800">- update to 25.1:
  * Raise warnings for deprecated python syntax usages
  * Add support for extensions in CRuby, JRuby, and FFI Ruby
  * Add support for options in CRuby, JRuby and FFI (#14594)
- update to 25.0:
  * Implement proto2/proto3 with editions
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Editions: Introduce functionality to protoc for generating
    edition feature set defaults.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Publish extension declarations with declaration
    verifications.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Protoc: parser rejects explicit use of map_entry option
  * Protoc: validate that reserved range start is before end
  * Protoc: support identifiers as reserved names in addition to
    string literals (only in editions)
  * Drop support for Bazel 5.
  * Allow code generators to specify whether or not they support
    editions.
  [#] C++
  * Set `PROTOBUF_EXPORT` on
    `InternalOutOfLineDeleteMessageLite()`
  * Update stale checked-in files
  * Apply PROTOBUF_NOINLINE to declarations of some functions
    that want it.
  * Implement proto2/proto3 with editions
  * Make JSON UTF-8 boundary check inclusive of the largest
    possible UTF-8 character.
  * Reduce `Map::size_type` to 32-bits. Protobuf containers can't
    have more than that
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Fix bug in reflection based Swap of map fields.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Add prefetching to arena allocations.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    repeated and map field accessors.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    string field accessors.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Fixes for 32-bit MSVC.
  * Publish extension declarations with declaration
    verifications.
  * Export the constants in protobuf's any.h to support DLL
    builds.
  * Implement AbslStringify for the Descriptor family of types.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    message field accessors.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Introduce C++ feature for UTF8 validation.
  * Protoc: validate that reserved range start is before end
  * Remove option to disable the table-driven parser in protoc.
  * Lock down ctype=CORD in proto file.
  * Support split repeated fields.
  * In OSS mode omit some extern template specializations.
  * Allow code generators to specify whether or not they support
    editions.
  [#] Java
  * Implement proto2/proto3 with editions
  * Remove synthetic oneofs from Java gencode field accessor
    tables.
  * Timestamps.parse: Add error handling for invalid
    hours/minutes in the timezone offset.
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Add missing debugging version info to Protobuf Java gencode
    when multiple files are generated.
  * Fix a bad cast in putBuilderIfAbsent when already present due
    to using the result of put() directly (which is null if it
    currently has no value)
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Fix a NPE in putBuilderIfAbsent due to using the result of
    put() directly (which is null if it currently has no value)
  * Update Kotlin compiler to escape package names
  * Add MapFieldBuilder and change codegen to generate it and the
    put{field}BuilderIfAbsent method.
  * Introduce recursion limit in Java text format parsing
  * Consider the protobuf.Any invalid if typeUrl.split("/")
    returns an empty array.
  * Mark `FieldDescriptor.hasOptionalKeyword()` as deprecated.
  * Fixed Python memory leak in map lookup.
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Ensure Timestamp.ToDatetime(tz) has correct offset
  * Do not check required field for upb python MergeFrom
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Emit __slots__ in pyi output as a tuple rather than a list
    for --pyi_out.
  * Fix a bug that strips options from descriptor.proto in
    Python.
  * Raise warings for message.UnknownFields() usages and navigate
    to the new add
  * Add protobuf python keyword support in path for stub
    generator.
  * Add tuple support to set Struct
  * ### Python C-Extension (Default)
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Check that ffi-compiler loads before using it to define
    tasks.
  [#] UPB (Python/PHP/Ruby C-Extension)
  * Include .inc files directly instead of through a filegroup
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Add utf8_validation feature back to the global feature set.
  * Do not check required field for upb python MergeFrom
  * Merge the protobuf and upb Bazel repos
  * Added malloc_trim() calls to Python allocator so RSS will
    decrease when memory is freed
  * Upb: fix a Python memory leak in ByteSize()
  * Support ASAN detection on clang
  * Upb: bugfix for importing a proto3 enum from within a proto2
    file
  * Expose methods needed by Ruby FFI using UPB_API
  * Fix `PyUpb_Message_MergeInternal` segfault</changelog>
</package>
<package pkgid="af49a0c42313d763841cfcf321ff545a3377ccdd712bb5b3a2e3032cbd14502d" name="libpython3_6m1_0" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.51.1"/>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
</package>
<package pkgid="7d73e4f72000198897e733a59de0d6b37d5e2dd0f379dbd1b5b60096c10b76f1" name="libpython3_6m1_0" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.51.1"/>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
</package>
<package pkgid="d4065caa31a1a86fcc5d761c6cd78e334ea074b8c281e70784ec27d640423fd7" name="libpython3_6m1_0" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.51.1"/>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
</package>
<package pkgid="2390da5290018b2eecddc57d0d0cd7abccfe87bda5089cdddaa00ee5472db504" name="libpython3_6m1_0" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.54.1"/>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
</package>
<package pkgid="97bd62787bab3d0c3ec31b297ffcd2fdaf8fd07343874aba444a4bb18e4bbf01" name="libpython3_6m1_0" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.54.1"/>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
</package>
<package pkgid="35627dd68e7b5841030dc089a66e7a8f9dc88c1d5fe9859493422e69cdf70a4d" name="libpython3_6m1_0" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.54.1"/>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
</package>
<package pkgid="51b7404af6211d4cc233e8f49afd216457ae250b1cd381ba72d094b8f1a47ea5" name="libpython3_6m1_0" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.57.1"/>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
</package>
<package pkgid="f72d0ae9f779498c7db32b9dab04a87b87800cd4e9c539689ce6a08635995e23" name="libpython3_6m1_0" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.57.1"/>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
</package>
<package pkgid="8b816a719b8a74fb9a7a9d22c4d8a3d0a009ee9ecf78f2e17bb9968fc467e1e7" name="libpython3_6m1_0" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.57.1"/>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
</package>
<package pkgid="dab8288609a84e1e12a0e02bd81f48ba459ab8bfbbbdb0981103a3a4c5ffd152" name="libpython3_6m1_0" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.60.1"/>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
  <changelog author="mcepl@suse.com" date="1712059200">- Add bpo38361-syslog-no-slash-ident.patch (bsc#1222109,
  gh#python/cpython!16557) fixes syslog making default "ident"
  from sys.argv[0].</changelog>
</package>
<package pkgid="6b671abd13d10fda0e71b46bfbd9445153bdc2d3e810a1223cf94e4795cb3a80" name="libpython3_6m1_0" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.60.1"/>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
  <changelog author="mcepl@suse.com" date="1712059200">- Add bpo38361-syslog-no-slash-ident.patch (bsc#1222109,
  gh#python/cpython!16557) fixes syslog making default "ident"
  from sys.argv[0].</changelog>
</package>
<package pkgid="4f8eb9a3d25e58ed2cd920ac7ef6f8ca7747cdd042433ec78853e43d1ecbd501" name="libpython3_6m1_0" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.60.1"/>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
  <changelog author="mcepl@suse.com" date="1712059200">- Add bpo38361-syslog-no-slash-ident.patch (bsc#1222109,
  gh#python/cpython!16557) fixes syslog making default "ident"
  from sys.argv[0].</changelog>
</package>
<package pkgid="5c36bb4bc5dd4a4f32178cb776bbc93a5664069f3e5ece6a5a3d000f13448f1a" name="libpython3_6m1_0" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.65.1"/>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
  <changelog author="mcepl@cepl.eu" date="1714046400">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).
- Add bh42369-thread-safety-zipfile-SharedFile.patch (from
  gh#python/cpython!26974) required by the previous patch.
- Add expat-260-test_xml_etree-reparse-deferral.patch to make the
  interpreter work with patched libexpat in our distros.
- Move all patches from locally sourced to the branch
  opensuse-3.6 branch at GitHub repo, and move all metadata to
  commits themselves (readable in the headers of each patch).
- Add bpo-41675-modernize-siginterrupt.patch to make Python build
  cleanly even on more recent SPs of SLE-15
  (gh#python/cpython#85841).
- Remove patches:
  - bpo36263-Fix_hashlib_scrypt.patch - fix against bug in
    OpenSSL fixed in 1.1.1c (gh#openssl/openssl!8483), so this
    patch is redundant on all SUSE-supported distros
  - python-3.3.0b1-test-posix_fadvise.patch - protection
    against the kernel issues which has been fixed in
    gh#torvalds/linux@3d3727cdb07f, which has been included in
    all our kernels more recent than SLE-11.
  - python-3.3.3-skip-distutils-test_sysconfig_module.patch -
    skips a test, which should be relevant only for testing on
    Mac OS X systems with universal builds. I have no valid
    record, that this test would be ever problematic on Linux.
  - bpo-36576-skip_tests_for_OpenSSL-111.patch, which was
    included already in Python 3.5.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715083200">- Add bpo38361-syslog-no-slash-ident.patch (bsc#1222109,
  gh#python/cpython!16557) fixes syslog making default "ident"
  from sys.argv[0].
- Update CVE-2023-52425-libexpat-2.6.0-backport.patch so that
  it uses features sniffing, not just comparing version number
  (bsc#1220664, bsc#1219559, bsc#1221563, bsc#1222075).
- Remove support-expat-CVE-2022-25236-patched.patch, which was
  the previous name of this patch.
- Add CVE-2023-52425-remove-reparse_deferral-tests.patch skipping
  failing tests.
- Refresh patches:
  - CVE-2023-27043-email-parsing-errors.patch
  - fix_configure_rst.patch
  - skip_if_buildbot-extend.patch</changelog>
  <changelog author="mcepl@cepl.eu" date="1718971200">- Add CVE-2024-0397-memrace_ssl.SSLContext_cert_store.patch
  fixing bsc#1226447 (CVE-2024-0397) by removing memory race
  condition in ssl.SSLContext certificate store methods.</changelog>
  <changelog author="mcepl@cepl.eu" date="1719316800">- Add CVE-2024-4032-private-IP-addrs.patch to fix bsc#1226448
  (CVE-2024-4032) rearranging definition of private v global IP
  addresses.</changelog>
</package>
<package pkgid="561a473910bdc9a3a3196e5a9f621a23d7523601cce10f9cff8f8d0a16cb6cfd" name="libpython3_6m1_0" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.65.1"/>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
  <changelog author="mcepl@cepl.eu" date="1714046400">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).
- Add bh42369-thread-safety-zipfile-SharedFile.patch (from
  gh#python/cpython!26974) required by the previous patch.
- Add expat-260-test_xml_etree-reparse-deferral.patch to make the
  interpreter work with patched libexpat in our distros.
- Move all patches from locally sourced to the branch
  opensuse-3.6 branch at GitHub repo, and move all metadata to
  commits themselves (readable in the headers of each patch).
- Add bpo-41675-modernize-siginterrupt.patch to make Python build
  cleanly even on more recent SPs of SLE-15
  (gh#python/cpython#85841).
- Remove patches:
  - bpo36263-Fix_hashlib_scrypt.patch - fix against bug in
    OpenSSL fixed in 1.1.1c (gh#openssl/openssl!8483), so this
    patch is redundant on all SUSE-supported distros
  - python-3.3.0b1-test-posix_fadvise.patch - protection
    against the kernel issues which has been fixed in
    gh#torvalds/linux@3d3727cdb07f, which has been included in
    all our kernels more recent than SLE-11.
  - python-3.3.3-skip-distutils-test_sysconfig_module.patch -
    skips a test, which should be relevant only for testing on
    Mac OS X systems with universal builds. I have no valid
    record, that this test would be ever problematic on Linux.
  - bpo-36576-skip_tests_for_OpenSSL-111.patch, which was
    included already in Python 3.5.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715083200">- Add bpo38361-syslog-no-slash-ident.patch (bsc#1222109,
  gh#python/cpython!16557) fixes syslog making default "ident"
  from sys.argv[0].
- Update CVE-2023-52425-libexpat-2.6.0-backport.patch so that
  it uses features sniffing, not just comparing version number
  (bsc#1220664, bsc#1219559, bsc#1221563, bsc#1222075).
- Remove support-expat-CVE-2022-25236-patched.patch, which was
  the previous name of this patch.
- Add CVE-2023-52425-remove-reparse_deferral-tests.patch skipping
  failing tests.
- Refresh patches:
  - CVE-2023-27043-email-parsing-errors.patch
  - fix_configure_rst.patch
  - skip_if_buildbot-extend.patch</changelog>
  <changelog author="mcepl@cepl.eu" date="1718971200">- Add CVE-2024-0397-memrace_ssl.SSLContext_cert_store.patch
  fixing bsc#1226447 (CVE-2024-0397) by removing memory race
  condition in ssl.SSLContext certificate store methods.</changelog>
  <changelog author="mcepl@cepl.eu" date="1719316800">- Add CVE-2024-4032-private-IP-addrs.patch to fix bsc#1226448
  (CVE-2024-4032) rearranging definition of private v global IP
  addresses.</changelog>
</package>
<package pkgid="01ff80d5270ebaea1e49887aac9f8351d24fc6a675af1526e9a5256152e3a1cf" name="libpython3_6m1_0" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.65.1"/>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
  <changelog author="mcepl@cepl.eu" date="1714046400">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).
- Add bh42369-thread-safety-zipfile-SharedFile.patch (from
  gh#python/cpython!26974) required by the previous patch.
- Add expat-260-test_xml_etree-reparse-deferral.patch to make the
  interpreter work with patched libexpat in our distros.
- Move all patches from locally sourced to the branch
  opensuse-3.6 branch at GitHub repo, and move all metadata to
  commits themselves (readable in the headers of each patch).
- Add bpo-41675-modernize-siginterrupt.patch to make Python build
  cleanly even on more recent SPs of SLE-15
  (gh#python/cpython#85841).
- Remove patches:
  - bpo36263-Fix_hashlib_scrypt.patch - fix against bug in
    OpenSSL fixed in 1.1.1c (gh#openssl/openssl!8483), so this
    patch is redundant on all SUSE-supported distros
  - python-3.3.0b1-test-posix_fadvise.patch - protection
    against the kernel issues which has been fixed in
    gh#torvalds/linux@3d3727cdb07f, which has been included in
    all our kernels more recent than SLE-11.
  - python-3.3.3-skip-distutils-test_sysconfig_module.patch -
    skips a test, which should be relevant only for testing on
    Mac OS X systems with universal builds. I have no valid
    record, that this test would be ever problematic on Linux.
  - bpo-36576-skip_tests_for_OpenSSL-111.patch, which was
    included already in Python 3.5.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715083200">- Add bpo38361-syslog-no-slash-ident.patch (bsc#1222109,
  gh#python/cpython!16557) fixes syslog making default "ident"
  from sys.argv[0].
- Update CVE-2023-52425-libexpat-2.6.0-backport.patch so that
  it uses features sniffing, not just comparing version number
  (bsc#1220664, bsc#1219559, bsc#1221563, bsc#1222075).
- Remove support-expat-CVE-2022-25236-patched.patch, which was
  the previous name of this patch.
- Add CVE-2023-52425-remove-reparse_deferral-tests.patch skipping
  failing tests.
- Refresh patches:
  - CVE-2023-27043-email-parsing-errors.patch
  - fix_configure_rst.patch
  - skip_if_buildbot-extend.patch</changelog>
  <changelog author="mcepl@cepl.eu" date="1718971200">- Add CVE-2024-0397-memrace_ssl.SSLContext_cert_store.patch
  fixing bsc#1226447 (CVE-2024-0397) by removing memory race
  condition in ssl.SSLContext certificate store methods.</changelog>
  <changelog author="mcepl@cepl.eu" date="1719316800">- Add CVE-2024-4032-private-IP-addrs.patch to fix bsc#1226448
  (CVE-2024-4032) rearranging definition of private v global IP
  addresses.</changelog>
</package>
<package pkgid="c8e01bfdddc8cd7ceac2c4681a0e775c27fcc63ad530c59c02ef2e037dcf567f" name="librados2" arch="aarch64">
  <version epoch="0" ver="16.2.13.66+g54799ee0666" rel="150400.3.9.2"/>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit
  + (bsc#1187748) When an RBD is mapped, it is attempted to be deployed as an OSD.</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)
  + (bsc#1196046) mgr/cephadm: try to get FQDN for configuration files</changelog>
  <changelog author="tserong@suse.com" date="1658836800">- Update to 16.2.9-538-g9de83fa4064:
  + (bsc#1201604) cephfs-shell: move source to separate subdirectory</changelog>
  <changelog author="tserong@suse.com" date="1665057600">- Update to 16.2.9-539-gea74dd900cd:
  + (bsc#1202292) ceph.spec.in: Add -DFMT_DEPRECATED_OSTREAM to CXXFLAGS</changelog>
  <changelog author="michael.fritch@suse.com" date="1674820800">- Update to 16.2.11-56-gc067055f8f5:
  + (bsc#1199183) osd, tools, kv: non-aggressive, on-line trimming of accumulated dups
  + (bsc#1200262) ceph-volume: fix fast device alloc size on mulitple device
  + (bsc#1200501) cephadm: update monitoring container images
  + (bsc#1200978) mgr/dashboard: prevent alert redirect
  + (bsc#1201797) mgr/volumes: Add subvolumegroup resize cmd
  + (bsc#1201837) mgr/volumes: Fix subvolume discover during upgrade (CVE-2022-0670)
  + (bsc#1201976) monitoring/ceph-mixin: add RGW host to label info
  + (bsc#1202077) mgr/dashboard: enable addition of custom Prometheus alerts
  + (bsc#1203375) python-common: Add 'KB' to supported suffixes in SizeMatcher
  + (bsc#1204430) ceph-crash: drop privleges to run as "ceph" user, rather than root (CVE-2022-3650)
  + (bsc#1205025) rgw: Guard against malformed bucket URLs (CVE-2022-3854)
  + (bsc#1205436) mgr/dashboard: fix rgw connect when using ssl</changelog>
  <changelog author="tserong@suse.com" date="1674820801">- Update to 16.2.11-57-g9be7fb44a33:
  + ceph.spec.in: Replace %usrmerged macro with regular version check
- checkin.sh: default to ses7p branch</changelog>
  <changelog author="tserong@suse.com" date="1675771200">- Update to 16.2.11-58-g38d6afd3b78:
  + test/CMakeLists.txt: move 'APPEND rgw_libs Boost::filesystem' to top level</changelog>
  <changelog author="tserong@suse.com" date="1678449600">- Update to 16.2.11-62-gce6291a3463:
  + (bsc#1201088) fix FTBFS on gcc 13</changelog>
  <changelog author="tserong@suse.com" date="1680004800">- Update to 16.2.11-65-g8b7e6fc0182:
  + (bsc#1201088) test/librados: fix FTBFS on gcc 13
  + (bsc#1208820) mgr/dashboard: allow to pass controls on iscsi disk create</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="tserong@suse.com" date="1683806400">- Update to 16.2.13-66-g54799ee0666:
  + (bsc#1199880) mgr: don't dump global config holding gil
  + (bsc#1209621) cephadm: fix NFS haproxy failover if active node disappears
  + (bsc#1210153) mgr/cephadm: fix handling of mgr upgrades with 3 or more mgrs
  + (bsc#1210243, bsc#1210314) ceph-volume: fix regression in activate
  + (bsc#1210719) cephadm: mount host /etc/hosts for daemon containers in podman deployments
  + (bsc#1210784) mgr/dashboard: Fix SSO error: 'str' object has no attribute 'decode'
  + (bsc#1210944) cmake: patch boost source to support python 3.11
  + (bsc#1211090) fix FTBFS on s390x</changelog>
  <changelog author="tserong@suse.com" date="1684929600">- Add "#!BuildConstraint" to spec files for compatibility with _multibuild</changelog>
  <changelog author="tserong@suse.com" date="1687867200">- Remove _constraints file, add README-constraints.txt and pre_checkin.env</changelog>
</package>
<package pkgid="706ed669da0b19f8e71429a31f600b95e5bb2803e57feb9cee25cb929aee2e09" name="librados2" arch="x86_64">
  <version epoch="0" ver="16.2.13.66+g54799ee0666" rel="150400.3.9.2"/>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit
  + (bsc#1187748) When an RBD is mapped, it is attempted to be deployed as an OSD.</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)
  + (bsc#1196046) mgr/cephadm: try to get FQDN for configuration files</changelog>
  <changelog author="tserong@suse.com" date="1658836800">- Update to 16.2.9-538-g9de83fa4064:
  + (bsc#1201604) cephfs-shell: move source to separate subdirectory</changelog>
  <changelog author="tserong@suse.com" date="1665057600">- Update to 16.2.9-539-gea74dd900cd:
  + (bsc#1202292) ceph.spec.in: Add -DFMT_DEPRECATED_OSTREAM to CXXFLAGS</changelog>
  <changelog author="michael.fritch@suse.com" date="1674820800">- Update to 16.2.11-56-gc067055f8f5:
  + (bsc#1199183) osd, tools, kv: non-aggressive, on-line trimming of accumulated dups
  + (bsc#1200262) ceph-volume: fix fast device alloc size on mulitple device
  + (bsc#1200501) cephadm: update monitoring container images
  + (bsc#1200978) mgr/dashboard: prevent alert redirect
  + (bsc#1201797) mgr/volumes: Add subvolumegroup resize cmd
  + (bsc#1201837) mgr/volumes: Fix subvolume discover during upgrade (CVE-2022-0670)
  + (bsc#1201976) monitoring/ceph-mixin: add RGW host to label info
  + (bsc#1202077) mgr/dashboard: enable addition of custom Prometheus alerts
  + (bsc#1203375) python-common: Add 'KB' to supported suffixes in SizeMatcher
  + (bsc#1204430) ceph-crash: drop privleges to run as "ceph" user, rather than root (CVE-2022-3650)
  + (bsc#1205025) rgw: Guard against malformed bucket URLs (CVE-2022-3854)
  + (bsc#1205436) mgr/dashboard: fix rgw connect when using ssl</changelog>
  <changelog author="tserong@suse.com" date="1674820801">- Update to 16.2.11-57-g9be7fb44a33:
  + ceph.spec.in: Replace %usrmerged macro with regular version check
- checkin.sh: default to ses7p branch</changelog>
  <changelog author="tserong@suse.com" date="1675771200">- Update to 16.2.11-58-g38d6afd3b78:
  + test/CMakeLists.txt: move 'APPEND rgw_libs Boost::filesystem' to top level</changelog>
  <changelog author="tserong@suse.com" date="1678449600">- Update to 16.2.11-62-gce6291a3463:
  + (bsc#1201088) fix FTBFS on gcc 13</changelog>
  <changelog author="tserong@suse.com" date="1680004800">- Update to 16.2.11-65-g8b7e6fc0182:
  + (bsc#1201088) test/librados: fix FTBFS on gcc 13
  + (bsc#1208820) mgr/dashboard: allow to pass controls on iscsi disk create</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="tserong@suse.com" date="1683806400">- Update to 16.2.13-66-g54799ee0666:
  + (bsc#1199880) mgr: don't dump global config holding gil
  + (bsc#1209621) cephadm: fix NFS haproxy failover if active node disappears
  + (bsc#1210153) mgr/cephadm: fix handling of mgr upgrades with 3 or more mgrs
  + (bsc#1210243, bsc#1210314) ceph-volume: fix regression in activate
  + (bsc#1210719) cephadm: mount host /etc/hosts for daemon containers in podman deployments
  + (bsc#1210784) mgr/dashboard: Fix SSO error: 'str' object has no attribute 'decode'
  + (bsc#1210944) cmake: patch boost source to support python 3.11
  + (bsc#1211090) fix FTBFS on s390x</changelog>
  <changelog author="tserong@suse.com" date="1684929600">- Add "#!BuildConstraint" to spec files for compatibility with _multibuild</changelog>
  <changelog author="tserong@suse.com" date="1687867200">- Remove _constraints file, add README-constraints.txt and pre_checkin.env</changelog>
</package>
<package pkgid="9360962f2c866cee0859f2340688008f9ebac9d27af3f1d7cddcd0ca5eb508a1" name="librbd1" arch="aarch64">
  <version epoch="0" ver="16.2.13.66+g54799ee0666" rel="150400.3.9.2"/>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit
  + (bsc#1187748) When an RBD is mapped, it is attempted to be deployed as an OSD.</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)
  + (bsc#1196046) mgr/cephadm: try to get FQDN for configuration files</changelog>
  <changelog author="tserong@suse.com" date="1658836800">- Update to 16.2.9-538-g9de83fa4064:
  + (bsc#1201604) cephfs-shell: move source to separate subdirectory</changelog>
  <changelog author="tserong@suse.com" date="1665057600">- Update to 16.2.9-539-gea74dd900cd:
  + (bsc#1202292) ceph.spec.in: Add -DFMT_DEPRECATED_OSTREAM to CXXFLAGS</changelog>
  <changelog author="michael.fritch@suse.com" date="1674820800">- Update to 16.2.11-56-gc067055f8f5:
  + (bsc#1199183) osd, tools, kv: non-aggressive, on-line trimming of accumulated dups
  + (bsc#1200262) ceph-volume: fix fast device alloc size on mulitple device
  + (bsc#1200501) cephadm: update monitoring container images
  + (bsc#1200978) mgr/dashboard: prevent alert redirect
  + (bsc#1201797) mgr/volumes: Add subvolumegroup resize cmd
  + (bsc#1201837) mgr/volumes: Fix subvolume discover during upgrade (CVE-2022-0670)
  + (bsc#1201976) monitoring/ceph-mixin: add RGW host to label info
  + (bsc#1202077) mgr/dashboard: enable addition of custom Prometheus alerts
  + (bsc#1203375) python-common: Add 'KB' to supported suffixes in SizeMatcher
  + (bsc#1204430) ceph-crash: drop privleges to run as "ceph" user, rather than root (CVE-2022-3650)
  + (bsc#1205025) rgw: Guard against malformed bucket URLs (CVE-2022-3854)
  + (bsc#1205436) mgr/dashboard: fix rgw connect when using ssl</changelog>
  <changelog author="tserong@suse.com" date="1674820801">- Update to 16.2.11-57-g9be7fb44a33:
  + ceph.spec.in: Replace %usrmerged macro with regular version check
- checkin.sh: default to ses7p branch</changelog>
  <changelog author="tserong@suse.com" date="1675771200">- Update to 16.2.11-58-g38d6afd3b78:
  + test/CMakeLists.txt: move 'APPEND rgw_libs Boost::filesystem' to top level</changelog>
  <changelog author="tserong@suse.com" date="1678449600">- Update to 16.2.11-62-gce6291a3463:
  + (bsc#1201088) fix FTBFS on gcc 13</changelog>
  <changelog author="tserong@suse.com" date="1680004800">- Update to 16.2.11-65-g8b7e6fc0182:
  + (bsc#1201088) test/librados: fix FTBFS on gcc 13
  + (bsc#1208820) mgr/dashboard: allow to pass controls on iscsi disk create</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="tserong@suse.com" date="1683806400">- Update to 16.2.13-66-g54799ee0666:
  + (bsc#1199880) mgr: don't dump global config holding gil
  + (bsc#1209621) cephadm: fix NFS haproxy failover if active node disappears
  + (bsc#1210153) mgr/cephadm: fix handling of mgr upgrades with 3 or more mgrs
  + (bsc#1210243, bsc#1210314) ceph-volume: fix regression in activate
  + (bsc#1210719) cephadm: mount host /etc/hosts for daemon containers in podman deployments
  + (bsc#1210784) mgr/dashboard: Fix SSO error: 'str' object has no attribute 'decode'
  + (bsc#1210944) cmake: patch boost source to support python 3.11
  + (bsc#1211090) fix FTBFS on s390x</changelog>
  <changelog author="tserong@suse.com" date="1684929600">- Add "#!BuildConstraint" to spec files for compatibility with _multibuild</changelog>
  <changelog author="tserong@suse.com" date="1687867200">- Remove _constraints file, add README-constraints.txt and pre_checkin.env</changelog>
</package>
<package pkgid="1a303310bc09b06ee162ee5d18a8fdb5ca0dd787c30d46ad177bfc925b2e3c33" name="librbd1" arch="x86_64">
  <version epoch="0" ver="16.2.13.66+g54799ee0666" rel="150400.3.9.2"/>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit
  + (bsc#1187748) When an RBD is mapped, it is attempted to be deployed as an OSD.</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)
  + (bsc#1196046) mgr/cephadm: try to get FQDN for configuration files</changelog>
  <changelog author="tserong@suse.com" date="1658836800">- Update to 16.2.9-538-g9de83fa4064:
  + (bsc#1201604) cephfs-shell: move source to separate subdirectory</changelog>
  <changelog author="tserong@suse.com" date="1665057600">- Update to 16.2.9-539-gea74dd900cd:
  + (bsc#1202292) ceph.spec.in: Add -DFMT_DEPRECATED_OSTREAM to CXXFLAGS</changelog>
  <changelog author="michael.fritch@suse.com" date="1674820800">- Update to 16.2.11-56-gc067055f8f5:
  + (bsc#1199183) osd, tools, kv: non-aggressive, on-line trimming of accumulated dups
  + (bsc#1200262) ceph-volume: fix fast device alloc size on mulitple device
  + (bsc#1200501) cephadm: update monitoring container images
  + (bsc#1200978) mgr/dashboard: prevent alert redirect
  + (bsc#1201797) mgr/volumes: Add subvolumegroup resize cmd
  + (bsc#1201837) mgr/volumes: Fix subvolume discover during upgrade (CVE-2022-0670)
  + (bsc#1201976) monitoring/ceph-mixin: add RGW host to label info
  + (bsc#1202077) mgr/dashboard: enable addition of custom Prometheus alerts
  + (bsc#1203375) python-common: Add 'KB' to supported suffixes in SizeMatcher
  + (bsc#1204430) ceph-crash: drop privleges to run as "ceph" user, rather than root (CVE-2022-3650)
  + (bsc#1205025) rgw: Guard against malformed bucket URLs (CVE-2022-3854)
  + (bsc#1205436) mgr/dashboard: fix rgw connect when using ssl</changelog>
  <changelog author="tserong@suse.com" date="1674820801">- Update to 16.2.11-57-g9be7fb44a33:
  + ceph.spec.in: Replace %usrmerged macro with regular version check
- checkin.sh: default to ses7p branch</changelog>
  <changelog author="tserong@suse.com" date="1675771200">- Update to 16.2.11-58-g38d6afd3b78:
  + test/CMakeLists.txt: move 'APPEND rgw_libs Boost::filesystem' to top level</changelog>
  <changelog author="tserong@suse.com" date="1678449600">- Update to 16.2.11-62-gce6291a3463:
  + (bsc#1201088) fix FTBFS on gcc 13</changelog>
  <changelog author="tserong@suse.com" date="1680004800">- Update to 16.2.11-65-g8b7e6fc0182:
  + (bsc#1201088) test/librados: fix FTBFS on gcc 13
  + (bsc#1208820) mgr/dashboard: allow to pass controls on iscsi disk create</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="tserong@suse.com" date="1683806400">- Update to 16.2.13-66-g54799ee0666:
  + (bsc#1199880) mgr: don't dump global config holding gil
  + (bsc#1209621) cephadm: fix NFS haproxy failover if active node disappears
  + (bsc#1210153) mgr/cephadm: fix handling of mgr upgrades with 3 or more mgrs
  + (bsc#1210243, bsc#1210314) ceph-volume: fix regression in activate
  + (bsc#1210719) cephadm: mount host /etc/hosts for daemon containers in podman deployments
  + (bsc#1210784) mgr/dashboard: Fix SSO error: 'str' object has no attribute 'decode'
  + (bsc#1210944) cmake: patch boost source to support python 3.11
  + (bsc#1211090) fix FTBFS on s390x</changelog>
  <changelog author="tserong@suse.com" date="1684929600">- Add "#!BuildConstraint" to spec files for compatibility with _multibuild</changelog>
  <changelog author="tserong@suse.com" date="1687867200">- Remove _constraints file, add README-constraints.txt and pre_checkin.env</changelog>
</package>
<package pkgid="0fb719c4673a769d49c43533c92e1a31564dbb6b0b38b0eaf32e2cf3626ea8ba" name="libsgutils2-1_47-2" arch="aarch64">
  <version epoch="0" ver="1.47+15.b6898b8" rel="150400.3.11.1"/>
  <changelog author="hare@suse.de" date="1511956800">- Update to svn r730:
  * Move testing utilities to 'testing' directory
  * sg_opcode: check resid and trim response
  * sg_rep_zones: expand --help option
  * sg_mode: Add Out-of-band management control page
  * sg_ses: filer join output on dpage element presence
  * documentation cleanup
- rescan-scsi-bus.sh: Add '--ignore-rev' option
- Supplement SCSI modaliases (bsc#1065212)</changelog>
  <changelog author="hare@suse.de" date="1513598400">- sg_inq: decode standard INQUIRY for CD-ROMs correctly (bsc#1070431)
- rescan-scsi-bus.sh: new option for ignore rev change
- rescan-scsi-bus.sh: Remove white space
- Add 'coreutils' to Requires (bsc#1072744)
- Add 'posttrans' to rpm spec (bsc#1071972)</changelog>
  <changelog author="hare@suse.de" date="1513944000">- sg_inq: check VPD page 0x0 before reading serial number
  (bsc#1067839)
- sg_inq: add option '-o/--only' to skip reading VPD pages
  (bsc#1067839)
- Revert 'postun' rpm spec changes after review</changelog>
  <changelog author="hare@suse.de" date="1518004800">- Update to svn r744:
  * sg_write_x: new command for normal/atomic/orwrite etc
    SCSI WRITE variants
  * sg_ses: add NVMe support
  * sg_inq: decode NVMe controller / NSIDs
- rescan_scsi_bus.sh: Fix manpage for --forcerescan
- 55-scsi-sg3_id.rules: fixes for scsi_id compability (bsc#1079873)
- 55-scsi-sg3_id.rules: run sg_inq for SPC devices (bsc#1079873)</changelog>
  <changelog author="hare@suse.de" date="1518091200">- Merge local patch with git repository
  * Delete sgut-libversioning.diff</changelog>
  <changelog author="hare@suse.de" date="1518177600">- Update to svn r751:
  * NVMe bugfixes
  * sg_seek: new utility
  * sg_stream_ctl: new utility program
- 54-before-scsi-sg3_id.rules: compability rule for systemd
  (bsc#1079873)
- Add dracut.conf to install new rule with dracut</changelog>
  <changelog author="mwilck@suse.com" date="1518436800">- dracut.conf: add whitespace at end of line (bsc#1080562)</changelog>
  <changelog author="hare@suse.de" date="1523016000">- Update to svn r763:
  * More NVMe bugfixes
  * sg_vpd: add device constituents vpd
  * sg_raw: add --raw option
  * sg_turs: add --low option
  * sg_ses: decoding dpage fixes; add --quiet option
- rescan-scsi-bus.sh: Fixup syntax error (bsc#1087008)
- rescan-scsi-bus.sh: Fixes from shellcheck</changelog>
  <changelog author="mwilck@suse.com" date="1553601600">- Spec file:
  * add fc_wwpn_id (bsc#1005063)
  * add lun masking service (bsc#954600)
  * drop BuildRequires on udev
  * replace unversioned "Provides: scsi" with versioned
- Update to version sg3_utils-1.45~803+31.564be3d:
  * New versioning scheme for upstream pre-release:
    1.45 - upstream release target, 803 - upstream svn id,
    +31: SUSE commits on top of svn, 564be3d - git hash
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008)
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212)
  * Add scsi-enable-target-scan.sh (bsc#954600)
- Update to svn r803:
  * sg_opcodes: expand MLU (18-102r0)
  * sg_format: add --dcrt used twice (FOV=1 DCRT=0)
  * rescan-scsi-bus: widen LUN 0 only scanning
  (bsc#1069384)
- Earlier SUSE fixes included in 1.45:
  * rescan-scsi-bus.sh: use LUN wildcard in idlist (bsc#1069384)
  [svn: r795]
  * sg_ses: fixup page decoding (bsc#1077787) [svn: r795]
  * sg_ses: allow to decode raw data instead of reading from a device
  (bsc#1050943) [svn: r795]
- Update to sg3_utils-1.44 [20180912] [svn: r791]
  * rescan-scsi-bus.sh: harden code
  - bump version to 20180615
  - add --ignore-rev to ignore revision change
  * introduce SG3_UTILS_DSENSE environment variable
  * sginfo: don't open /dev/snapshot
  * sg_timestamp: add '--no-timestamp' option
  - add --elapsed and --hex options
  * sg_wr_mode: add --rtd option for RTD bi
  * sg_unmap: add --all=ST,RN[,LA] option
  * sgm_dd, sg_dd: add --dry-run and --verbose options
  * sg_inq+sg_vpd: update Extended inquiry data vpd page
  * sg_ses: add 'hw_reset' and 'sw_reset' to enclosure services
    controller electronics element type (18-047r1)
  * sg_decode sense: add --cdb and --err=ES options
  * sg_format: add --dry-run option
  - extend --wait timeout for &gt; 4TB disks
  * sg_sanitize: add --dry-run option
- Earlier SUSE fixes included in 1.44:
  * sg_inq: decode standard INQUIRY for CD-ROMs correctly
  (bsc#1065448, bsc#1070431) [svn: r742]
  * sg_inq: export all NAA values (bsc#1050767) [svn: r715]
  * Add fc_wwpn_id to generate by-path links for fibrechannel
  (bsc#1005063) (svn@715)
  * sg_vpd: struct opts_t misaligment (bsc#1050943) [svn: r707]</changelog>
  <changelog author="jengelh@inai.de" date="1555588800">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="mwilck@suse.com" date="1556193600">- Update to version 1.45~815+5.6aa67ed:
  * 59-fc-wwpn-id.rules: fix rule syntax (bsc#1133418)
- Update to svn r815:
  * sg_opcodes: expand MLU (spc5r20)
  * sg_inq: update version descriptors to spc5r21
  * sg_vpd: 3pc VPD page add copy group descriptor
  * sg_xcopy: add --fco (fast copy only) (spc5r20) and --app=1
  * add nanosecond durations with SG3_UTILS_LINUX_NANO
- Earlier SUSE fixes now included upstream:
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212) [r815]
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008) [r815]
  * Add scsi-enable-target-scan.sh (bsc#954600) [r814]
  * shellcheck cleanups for rescan-scsi-bus.sh [r814]</changelog>
  <changelog author="info@paolostivanin.com" date="1618920000">- Update to version 1.46:
  * sg_rep_pip: new utility: report provisioning initialization
    pattern command
  * sg_turs: estimated time-to-ready [spc6r03]
  - add --delay=MS option
  * sg_requests: substantial cleanup
  * sg_vpd: add Format presets and Concurrent positioning ranges
  - add hot-pluggable field in standard Inquiry [spc6r05]
  - fix vendor struct opts_t alignment
  * sg_inq: add hot-pluggable field in standard Inquiry
  * sg_dd: --verify : separate category for miscompare errors
  - --verify : oflag=coe continue on miscompares, counts them
  - add cdl= operand for command duration limit indexes
  - add oflag=nocreat and conv=nocreat : OFILE must exist
  - add iflag=00, ff, random flags
  - setup conditional auto rule for getrandom()
  - add command timeout after comma in time= operand
  * sg_get_elem_status: add ralwd bit sbc4r20a
  * sg_write_x: add dld bits to write(32) [sbc4r19a]
  * sg_rep_zones: print invalid write pointer LBA as -1 rather
    than 16 "f"s
  * sg_opcodes: improve handling of RWCDLP field
  * sg_ses: use fan speed factor field for calculation [ses4r04]
  - add --all (-a) option, same action as --join
  * sg_compare_and_write: add examples section to its manpage
  * sg_modes: document '-s' option (same as '-6')
  * sg_sanitize + sg_format: when --verbose given once report
    probable success; without --verbose 'no news is good news'
  * sg_zone: add Remove element and modify zones command
  * sg_raw: increase maximum data-in and data-out buffer size
    from 64 KB to 1 MB
  - fix --cmdfile= handling
  - add --nvm option to send commands from the NVM command set
  - add --cmdset option to bypass cdb heuristic
  - add --scan= first_opcode,last_opcode
  * sg_pt_freebsd: allow device names without leading /dev/
    thus fix for regression introduced in rev 731 (ver: 1.43)
  * sg_pt_solaris+sg_pt_osf1: fix problem with clear_scsi_pt_obj()
    which needs to remember is_nvme and dev_fd values
  * sg_lib: add ZBC (2020) feature set entries
  * sg_lib: restore elements and rebuild command added
  * sg_lib,sg_pt: add partial_clear_scsi_pt_obj(),
    get_scsi_pt_cdb_len() and get_scsi_pt_cdb_buf()
  - add do_nvm_pt() for the NVM (sub-)command set
  - tweak transport error handling in Linux
  * sg_lib: Linux NVMe SNTL: add read, write and verify;
    synchronize cache and write same translations
  - add dummy start stop unit and test unit ready commands
  - wire cache mpage's WCE to nvme 'volatile write cache'
  - fix crash in sg_f2hex_arr() when fname not found
  * sg_lib: reprint cdb with illegal request sense key
  - asc/ascq match asc-num.txt @t10 20200708 [spc6r02]
  * gcc-10: suppress warnings
  * autoconf: upgrade version 2.69 to 2.70
  * remove space from end of source lines for git-svn
  * testing/sg_mrq_testing: new, for blocking mrq usage
  * testing/sgs_dd: add evfd flags and eventfd processing
  * testing: remove master-slave terminology for sgv4
  * examples: add nvme_read_ctl.hex and nvme_write_ctl.hex
- Earlier SUSE fixes included in 1.46:
  * 40-usb-blacklist.rules: use ID_SCSI_INQUIRY
    (bsc#840054, bsc#1131482)</changelog>
  <changelog author="mwilck@suse.com" date="1636632000">- Update to version 1.47:
  * sg_rep_zones: add support for REPORT ZONE DOMAINS and
    REPORT REALMS in this utility
  * sg_raw: fix prints of NVMe NVM command names
  * sg_logs: additions to Volume statistics lpage [ssc5r05c]
  - additions to Command duration limits statistics log
    page [spc6r06]
  * sg_vpd: fix do_hex type on some recent pages
  - zoned block dev char vpd: add zone alignment mode and
    zone starting LBA granularity [zbc2r11]
  * sg_read_buffer: fix --length= problem
  * sg_dd, sgm_dd, sgp_dd: don't close negative file descriptors
  * sg_dd: srand48_r() and mrand48_r() are GNU libc specific,
    put conditional in so non-reentrant version used otherwise
  - 'iflag=00,ff' places the 32 bit block address (big endian)
    into each block
  * sgp_dd: major rework, fix issue with error being ignored
  - new: --chkaddr which checks for block address in each block
  - add check for stdatomic.h presence in configure.ac
  * sg_xcopy: tweak CSCD identification descriptor
  * sg_get_elem_status: fix issue with '--maxlen=' option
  - add 2 depopulation revocation health attributes [sbc5r01]
  * transport error handling improved. To fix report of a
    BAD_TARGET transport error but the utility still continued.
  - introduce SG_LIB_TRANSPORT_ERROR [35] exit status
  * several utilities: override '--maxlen=LEN' when LEN
    is &lt; 16 (or 4), take default (or 4) instead
  * scripts: 55-scsi-sg3_id.rules remove outdated rule (bsc#1189297)
  * sg_lib: add sg_scsi_status_is_good(),
    sg_scsi_status_is_bad() and sg_get_zone_type_str()
  * pt_linux: fix verify(BytChk=0) which Linux SNTL translated
    to write, other SNTL cleanups
  * pt_linux_nvme: fix fua setting
  * pt: check_pt_file_handle() add return value of 5 for
- _service updates:
  * re-enable service, hadn't been used for 1.46 release
  * use upstream author's git repository, simplify versioning scheme
  * use obscpio format</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 1.47+2.388b767:
  * rescan-scsi-bus.sh: apply fix for '-r' (boo#1194293)
  * _service: use openSUSE github repo again (with cherry-picks
    from upstream)
  * spec file: suppress commit ID in library version</changelog>
  <changelog author="mwilck@suse.com" date="1644321600">- Update to version 1.47+3.adb7276:
  * rescan-scsi-bus.sh: fix garbled output (bsc#1195621)</changelog>
  <changelog author="mwilck@suse.com" date="1645444800">- Update to version 1.47+4.82fb156:
  * rescan_scsi_bus.sh: restore numeric ordering of hosts (bsc#1196244)</changelog>
  <changelog author="mwilck@suse.com" date="1654084800">- Update to version 1.47+5.d13bc56:
  * rescan-scsi-bus.sh: add timeout parameter (bsc#1199248)</changelog>
  <changelog author="mwilck@suse.com" date="1674820800">- Update to version 1.47+13.75d23ac:
  * rescan-scsi-bus: speed large multipath scans (bsc#1207706)
  * rescan-scsi-bus.sh speed testonline()
  * rescan-scsi-bus.sh: add option --no-lip-scan
  * rescan-scsi-bus: sgdevice26: do not traverse sg class if scsi_device isnot added
  * rescan-scsi-bus.sh: fix handling of '-I &lt;secs&gt;' option</changelog>
  <changelog author="mwilck@suse.com" date="1697803200">- Update to version 1.47+15.b6898b8:
  * rescan-scsi-bus.sh: remove /tmp/rescan-scsi-mpath-info.txt
  (gh#doug-gilbert/sg3_utils#44)
  * rescan_scsi_bus.sh: fix multipath issue when called with -s and
  without -u (bsc#1215720, bsc#1216355)</changelog>
  <changelog author="mwilck@suse.com" date="1698408000">- Make sure initrd is rebuilt when sg3_utils is updated
  (bsc#1215772)</changelog>
</package>
<package pkgid="4c71a8aeda80ed84c77159a844d555f56d849a8e13dd830fc99115c075db38f1" name="libsgutils2-1_47-2" arch="s390x">
  <version epoch="0" ver="1.47+15.b6898b8" rel="150400.3.11.1"/>
  <changelog author="hare@suse.de" date="1511956800">- Update to svn r730:
  * Move testing utilities to 'testing' directory
  * sg_opcode: check resid and trim response
  * sg_rep_zones: expand --help option
  * sg_mode: Add Out-of-band management control page
  * sg_ses: filer join output on dpage element presence
  * documentation cleanup
- rescan-scsi-bus.sh: Add '--ignore-rev' option
- Supplement SCSI modaliases (bsc#1065212)</changelog>
  <changelog author="hare@suse.de" date="1513598400">- sg_inq: decode standard INQUIRY for CD-ROMs correctly (bsc#1070431)
- rescan-scsi-bus.sh: new option for ignore rev change
- rescan-scsi-bus.sh: Remove white space
- Add 'coreutils' to Requires (bsc#1072744)
- Add 'posttrans' to rpm spec (bsc#1071972)</changelog>
  <changelog author="hare@suse.de" date="1513944000">- sg_inq: check VPD page 0x0 before reading serial number
  (bsc#1067839)
- sg_inq: add option '-o/--only' to skip reading VPD pages
  (bsc#1067839)
- Revert 'postun' rpm spec changes after review</changelog>
  <changelog author="hare@suse.de" date="1518004800">- Update to svn r744:
  * sg_write_x: new command for normal/atomic/orwrite etc
    SCSI WRITE variants
  * sg_ses: add NVMe support
  * sg_inq: decode NVMe controller / NSIDs
- rescan_scsi_bus.sh: Fix manpage for --forcerescan
- 55-scsi-sg3_id.rules: fixes for scsi_id compability (bsc#1079873)
- 55-scsi-sg3_id.rules: run sg_inq for SPC devices (bsc#1079873)</changelog>
  <changelog author="hare@suse.de" date="1518091200">- Merge local patch with git repository
  * Delete sgut-libversioning.diff</changelog>
  <changelog author="hare@suse.de" date="1518177600">- Update to svn r751:
  * NVMe bugfixes
  * sg_seek: new utility
  * sg_stream_ctl: new utility program
- 54-before-scsi-sg3_id.rules: compability rule for systemd
  (bsc#1079873)
- Add dracut.conf to install new rule with dracut</changelog>
  <changelog author="mwilck@suse.com" date="1518436800">- dracut.conf: add whitespace at end of line (bsc#1080562)</changelog>
  <changelog author="hare@suse.de" date="1523016000">- Update to svn r763:
  * More NVMe bugfixes
  * sg_vpd: add device constituents vpd
  * sg_raw: add --raw option
  * sg_turs: add --low option
  * sg_ses: decoding dpage fixes; add --quiet option
- rescan-scsi-bus.sh: Fixup syntax error (bsc#1087008)
- rescan-scsi-bus.sh: Fixes from shellcheck</changelog>
  <changelog author="mwilck@suse.com" date="1553601600">- Spec file:
  * add fc_wwpn_id (bsc#1005063)
  * add lun masking service (bsc#954600)
  * drop BuildRequires on udev
  * replace unversioned "Provides: scsi" with versioned
- Update to version sg3_utils-1.45~803+31.564be3d:
  * New versioning scheme for upstream pre-release:
    1.45 - upstream release target, 803 - upstream svn id,
    +31: SUSE commits on top of svn, 564be3d - git hash
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008)
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212)
  * Add scsi-enable-target-scan.sh (bsc#954600)
- Update to svn r803:
  * sg_opcodes: expand MLU (18-102r0)
  * sg_format: add --dcrt used twice (FOV=1 DCRT=0)
  * rescan-scsi-bus: widen LUN 0 only scanning
  (bsc#1069384)
- Earlier SUSE fixes included in 1.45:
  * rescan-scsi-bus.sh: use LUN wildcard in idlist (bsc#1069384)
  [svn: r795]
  * sg_ses: fixup page decoding (bsc#1077787) [svn: r795]
  * sg_ses: allow to decode raw data instead of reading from a device
  (bsc#1050943) [svn: r795]
- Update to sg3_utils-1.44 [20180912] [svn: r791]
  * rescan-scsi-bus.sh: harden code
  - bump version to 20180615
  - add --ignore-rev to ignore revision change
  * introduce SG3_UTILS_DSENSE environment variable
  * sginfo: don't open /dev/snapshot
  * sg_timestamp: add '--no-timestamp' option
  - add --elapsed and --hex options
  * sg_wr_mode: add --rtd option for RTD bi
  * sg_unmap: add --all=ST,RN[,LA] option
  * sgm_dd, sg_dd: add --dry-run and --verbose options
  * sg_inq+sg_vpd: update Extended inquiry data vpd page
  * sg_ses: add 'hw_reset' and 'sw_reset' to enclosure services
    controller electronics element type (18-047r1)
  * sg_decode sense: add --cdb and --err=ES options
  * sg_format: add --dry-run option
  - extend --wait timeout for &gt; 4TB disks
  * sg_sanitize: add --dry-run option
- Earlier SUSE fixes included in 1.44:
  * sg_inq: decode standard INQUIRY for CD-ROMs correctly
  (bsc#1065448, bsc#1070431) [svn: r742]
  * sg_inq: export all NAA values (bsc#1050767) [svn: r715]
  * Add fc_wwpn_id to generate by-path links for fibrechannel
  (bsc#1005063) (svn@715)
  * sg_vpd: struct opts_t misaligment (bsc#1050943) [svn: r707]</changelog>
  <changelog author="jengelh@inai.de" date="1555588800">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="mwilck@suse.com" date="1556193600">- Update to version 1.45~815+5.6aa67ed:
  * 59-fc-wwpn-id.rules: fix rule syntax (bsc#1133418)
- Update to svn r815:
  * sg_opcodes: expand MLU (spc5r20)
  * sg_inq: update version descriptors to spc5r21
  * sg_vpd: 3pc VPD page add copy group descriptor
  * sg_xcopy: add --fco (fast copy only) (spc5r20) and --app=1
  * add nanosecond durations with SG3_UTILS_LINUX_NANO
- Earlier SUSE fixes now included upstream:
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212) [r815]
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008) [r815]
  * Add scsi-enable-target-scan.sh (bsc#954600) [r814]
  * shellcheck cleanups for rescan-scsi-bus.sh [r814]</changelog>
  <changelog author="info@paolostivanin.com" date="1618920000">- Update to version 1.46:
  * sg_rep_pip: new utility: report provisioning initialization
    pattern command
  * sg_turs: estimated time-to-ready [spc6r03]
  - add --delay=MS option
  * sg_requests: substantial cleanup
  * sg_vpd: add Format presets and Concurrent positioning ranges
  - add hot-pluggable field in standard Inquiry [spc6r05]
  - fix vendor struct opts_t alignment
  * sg_inq: add hot-pluggable field in standard Inquiry
  * sg_dd: --verify : separate category for miscompare errors
  - --verify : oflag=coe continue on miscompares, counts them
  - add cdl= operand for command duration limit indexes
  - add oflag=nocreat and conv=nocreat : OFILE must exist
  - add iflag=00, ff, random flags
  - setup conditional auto rule for getrandom()
  - add command timeout after comma in time= operand
  * sg_get_elem_status: add ralwd bit sbc4r20a
  * sg_write_x: add dld bits to write(32) [sbc4r19a]
  * sg_rep_zones: print invalid write pointer LBA as -1 rather
    than 16 "f"s
  * sg_opcodes: improve handling of RWCDLP field
  * sg_ses: use fan speed factor field for calculation [ses4r04]
  - add --all (-a) option, same action as --join
  * sg_compare_and_write: add examples section to its manpage
  * sg_modes: document '-s' option (same as '-6')
  * sg_sanitize + sg_format: when --verbose given once report
    probable success; without --verbose 'no news is good news'
  * sg_zone: add Remove element and modify zones command
  * sg_raw: increase maximum data-in and data-out buffer size
    from 64 KB to 1 MB
  - fix --cmdfile= handling
  - add --nvm option to send commands from the NVM command set
  - add --cmdset option to bypass cdb heuristic
  - add --scan= first_opcode,last_opcode
  * sg_pt_freebsd: allow device names without leading /dev/
    thus fix for regression introduced in rev 731 (ver: 1.43)
  * sg_pt_solaris+sg_pt_osf1: fix problem with clear_scsi_pt_obj()
    which needs to remember is_nvme and dev_fd values
  * sg_lib: add ZBC (2020) feature set entries
  * sg_lib: restore elements and rebuild command added
  * sg_lib,sg_pt: add partial_clear_scsi_pt_obj(),
    get_scsi_pt_cdb_len() and get_scsi_pt_cdb_buf()
  - add do_nvm_pt() for the NVM (sub-)command set
  - tweak transport error handling in Linux
  * sg_lib: Linux NVMe SNTL: add read, write and verify;
    synchronize cache and write same translations
  - add dummy start stop unit and test unit ready commands
  - wire cache mpage's WCE to nvme 'volatile write cache'
  - fix crash in sg_f2hex_arr() when fname not found
  * sg_lib: reprint cdb with illegal request sense key
  - asc/ascq match asc-num.txt @t10 20200708 [spc6r02]
  * gcc-10: suppress warnings
  * autoconf: upgrade version 2.69 to 2.70
  * remove space from end of source lines for git-svn
  * testing/sg_mrq_testing: new, for blocking mrq usage
  * testing/sgs_dd: add evfd flags and eventfd processing
  * testing: remove master-slave terminology for sgv4
  * examples: add nvme_read_ctl.hex and nvme_write_ctl.hex
- Earlier SUSE fixes included in 1.46:
  * 40-usb-blacklist.rules: use ID_SCSI_INQUIRY
    (bsc#840054, bsc#1131482)</changelog>
  <changelog author="mwilck@suse.com" date="1636632000">- Update to version 1.47:
  * sg_rep_zones: add support for REPORT ZONE DOMAINS and
    REPORT REALMS in this utility
  * sg_raw: fix prints of NVMe NVM command names
  * sg_logs: additions to Volume statistics lpage [ssc5r05c]
  - additions to Command duration limits statistics log
    page [spc6r06]
  * sg_vpd: fix do_hex type on some recent pages
  - zoned block dev char vpd: add zone alignment mode and
    zone starting LBA granularity [zbc2r11]
  * sg_read_buffer: fix --length= problem
  * sg_dd, sgm_dd, sgp_dd: don't close negative file descriptors
  * sg_dd: srand48_r() and mrand48_r() are GNU libc specific,
    put conditional in so non-reentrant version used otherwise
  - 'iflag=00,ff' places the 32 bit block address (big endian)
    into each block
  * sgp_dd: major rework, fix issue with error being ignored
  - new: --chkaddr which checks for block address in each block
  - add check for stdatomic.h presence in configure.ac
  * sg_xcopy: tweak CSCD identification descriptor
  * sg_get_elem_status: fix issue with '--maxlen=' option
  - add 2 depopulation revocation health attributes [sbc5r01]
  * transport error handling improved. To fix report of a
    BAD_TARGET transport error but the utility still continued.
  - introduce SG_LIB_TRANSPORT_ERROR [35] exit status
  * several utilities: override '--maxlen=LEN' when LEN
    is &lt; 16 (or 4), take default (or 4) instead
  * scripts: 55-scsi-sg3_id.rules remove outdated rule (bsc#1189297)
  * sg_lib: add sg_scsi_status_is_good(),
    sg_scsi_status_is_bad() and sg_get_zone_type_str()
  * pt_linux: fix verify(BytChk=0) which Linux SNTL translated
    to write, other SNTL cleanups
  * pt_linux_nvme: fix fua setting
  * pt: check_pt_file_handle() add return value of 5 for
- _service updates:
  * re-enable service, hadn't been used for 1.46 release
  * use upstream author's git repository, simplify versioning scheme
  * use obscpio format</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 1.47+2.388b767:
  * rescan-scsi-bus.sh: apply fix for '-r' (boo#1194293)
  * _service: use openSUSE github repo again (with cherry-picks
    from upstream)
  * spec file: suppress commit ID in library version</changelog>
  <changelog author="mwilck@suse.com" date="1644321600">- Update to version 1.47+3.adb7276:
  * rescan-scsi-bus.sh: fix garbled output (bsc#1195621)</changelog>
  <changelog author="mwilck@suse.com" date="1645444800">- Update to version 1.47+4.82fb156:
  * rescan_scsi_bus.sh: restore numeric ordering of hosts (bsc#1196244)</changelog>
  <changelog author="mwilck@suse.com" date="1654084800">- Update to version 1.47+5.d13bc56:
  * rescan-scsi-bus.sh: add timeout parameter (bsc#1199248)</changelog>
  <changelog author="mwilck@suse.com" date="1674820800">- Update to version 1.47+13.75d23ac:
  * rescan-scsi-bus: speed large multipath scans (bsc#1207706)
  * rescan-scsi-bus.sh speed testonline()
  * rescan-scsi-bus.sh: add option --no-lip-scan
  * rescan-scsi-bus: sgdevice26: do not traverse sg class if scsi_device isnot added
  * rescan-scsi-bus.sh: fix handling of '-I &lt;secs&gt;' option</changelog>
  <changelog author="mwilck@suse.com" date="1697803200">- Update to version 1.47+15.b6898b8:
  * rescan-scsi-bus.sh: remove /tmp/rescan-scsi-mpath-info.txt
  (gh#doug-gilbert/sg3_utils#44)
  * rescan_scsi_bus.sh: fix multipath issue when called with -s and
  without -u (bsc#1215720, bsc#1216355)</changelog>
  <changelog author="mwilck@suse.com" date="1698408000">- Make sure initrd is rebuilt when sg3_utils is updated
  (bsc#1215772)</changelog>
</package>
<package pkgid="23e8f71bd50734a66b1884f918020891b9cd4e6dbd762ade826c7b6c3a1e1f63" name="libsgutils2-1_47-2" arch="x86_64">
  <version epoch="0" ver="1.47+15.b6898b8" rel="150400.3.11.1"/>
  <changelog author="hare@suse.de" date="1511956800">- Update to svn r730:
  * Move testing utilities to 'testing' directory
  * sg_opcode: check resid and trim response
  * sg_rep_zones: expand --help option
  * sg_mode: Add Out-of-band management control page
  * sg_ses: filer join output on dpage element presence
  * documentation cleanup
- rescan-scsi-bus.sh: Add '--ignore-rev' option
- Supplement SCSI modaliases (bsc#1065212)</changelog>
  <changelog author="hare@suse.de" date="1513598400">- sg_inq: decode standard INQUIRY for CD-ROMs correctly (bsc#1070431)
- rescan-scsi-bus.sh: new option for ignore rev change
- rescan-scsi-bus.sh: Remove white space
- Add 'coreutils' to Requires (bsc#1072744)
- Add 'posttrans' to rpm spec (bsc#1071972)</changelog>
  <changelog author="hare@suse.de" date="1513944000">- sg_inq: check VPD page 0x0 before reading serial number
  (bsc#1067839)
- sg_inq: add option '-o/--only' to skip reading VPD pages
  (bsc#1067839)
- Revert 'postun' rpm spec changes after review</changelog>
  <changelog author="hare@suse.de" date="1518004800">- Update to svn r744:
  * sg_write_x: new command for normal/atomic/orwrite etc
    SCSI WRITE variants
  * sg_ses: add NVMe support
  * sg_inq: decode NVMe controller / NSIDs
- rescan_scsi_bus.sh: Fix manpage for --forcerescan
- 55-scsi-sg3_id.rules: fixes for scsi_id compability (bsc#1079873)
- 55-scsi-sg3_id.rules: run sg_inq for SPC devices (bsc#1079873)</changelog>
  <changelog author="hare@suse.de" date="1518091200">- Merge local patch with git repository
  * Delete sgut-libversioning.diff</changelog>
  <changelog author="hare@suse.de" date="1518177600">- Update to svn r751:
  * NVMe bugfixes
  * sg_seek: new utility
  * sg_stream_ctl: new utility program
- 54-before-scsi-sg3_id.rules: compability rule for systemd
  (bsc#1079873)
- Add dracut.conf to install new rule with dracut</changelog>
  <changelog author="mwilck@suse.com" date="1518436800">- dracut.conf: add whitespace at end of line (bsc#1080562)</changelog>
  <changelog author="hare@suse.de" date="1523016000">- Update to svn r763:
  * More NVMe bugfixes
  * sg_vpd: add device constituents vpd
  * sg_raw: add --raw option
  * sg_turs: add --low option
  * sg_ses: decoding dpage fixes; add --quiet option
- rescan-scsi-bus.sh: Fixup syntax error (bsc#1087008)
- rescan-scsi-bus.sh: Fixes from shellcheck</changelog>
  <changelog author="mwilck@suse.com" date="1553601600">- Spec file:
  * add fc_wwpn_id (bsc#1005063)
  * add lun masking service (bsc#954600)
  * drop BuildRequires on udev
  * replace unversioned "Provides: scsi" with versioned
- Update to version sg3_utils-1.45~803+31.564be3d:
  * New versioning scheme for upstream pre-release:
    1.45 - upstream release target, 803 - upstream svn id,
    +31: SUSE commits on top of svn, 564be3d - git hash
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008)
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212)
  * Add scsi-enable-target-scan.sh (bsc#954600)
- Update to svn r803:
  * sg_opcodes: expand MLU (18-102r0)
  * sg_format: add --dcrt used twice (FOV=1 DCRT=0)
  * rescan-scsi-bus: widen LUN 0 only scanning
  (bsc#1069384)
- Earlier SUSE fixes included in 1.45:
  * rescan-scsi-bus.sh: use LUN wildcard in idlist (bsc#1069384)
  [svn: r795]
  * sg_ses: fixup page decoding (bsc#1077787) [svn: r795]
  * sg_ses: allow to decode raw data instead of reading from a device
  (bsc#1050943) [svn: r795]
- Update to sg3_utils-1.44 [20180912] [svn: r791]
  * rescan-scsi-bus.sh: harden code
  - bump version to 20180615
  - add --ignore-rev to ignore revision change
  * introduce SG3_UTILS_DSENSE environment variable
  * sginfo: don't open /dev/snapshot
  * sg_timestamp: add '--no-timestamp' option
  - add --elapsed and --hex options
  * sg_wr_mode: add --rtd option for RTD bi
  * sg_unmap: add --all=ST,RN[,LA] option
  * sgm_dd, sg_dd: add --dry-run and --verbose options
  * sg_inq+sg_vpd: update Extended inquiry data vpd page
  * sg_ses: add 'hw_reset' and 'sw_reset' to enclosure services
    controller electronics element type (18-047r1)
  * sg_decode sense: add --cdb and --err=ES options
  * sg_format: add --dry-run option
  - extend --wait timeout for &gt; 4TB disks
  * sg_sanitize: add --dry-run option
- Earlier SUSE fixes included in 1.44:
  * sg_inq: decode standard INQUIRY for CD-ROMs correctly
  (bsc#1065448, bsc#1070431) [svn: r742]
  * sg_inq: export all NAA values (bsc#1050767) [svn: r715]
  * Add fc_wwpn_id to generate by-path links for fibrechannel
  (bsc#1005063) (svn@715)
  * sg_vpd: struct opts_t misaligment (bsc#1050943) [svn: r707]</changelog>
  <changelog author="jengelh@inai.de" date="1555588800">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="mwilck@suse.com" date="1556193600">- Update to version 1.45~815+5.6aa67ed:
  * 59-fc-wwpn-id.rules: fix rule syntax (bsc#1133418)
- Update to svn r815:
  * sg_opcodes: expand MLU (spc5r20)
  * sg_inq: update version descriptors to spc5r21
  * sg_vpd: 3pc VPD page add copy group descriptor
  * sg_xcopy: add --fco (fast copy only) (spc5r20) and --app=1
  * add nanosecond durations with SG3_UTILS_LINUX_NANO
- Earlier SUSE fixes now included upstream:
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212) [r815]
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008) [r815]
  * Add scsi-enable-target-scan.sh (bsc#954600) [r814]
  * shellcheck cleanups for rescan-scsi-bus.sh [r814]</changelog>
  <changelog author="info@paolostivanin.com" date="1618920000">- Update to version 1.46:
  * sg_rep_pip: new utility: report provisioning initialization
    pattern command
  * sg_turs: estimated time-to-ready [spc6r03]
  - add --delay=MS option
  * sg_requests: substantial cleanup
  * sg_vpd: add Format presets and Concurrent positioning ranges
  - add hot-pluggable field in standard Inquiry [spc6r05]
  - fix vendor struct opts_t alignment
  * sg_inq: add hot-pluggable field in standard Inquiry
  * sg_dd: --verify : separate category for miscompare errors
  - --verify : oflag=coe continue on miscompares, counts them
  - add cdl= operand for command duration limit indexes
  - add oflag=nocreat and conv=nocreat : OFILE must exist
  - add iflag=00, ff, random flags
  - setup conditional auto rule for getrandom()
  - add command timeout after comma in time= operand
  * sg_get_elem_status: add ralwd bit sbc4r20a
  * sg_write_x: add dld bits to write(32) [sbc4r19a]
  * sg_rep_zones: print invalid write pointer LBA as -1 rather
    than 16 "f"s
  * sg_opcodes: improve handling of RWCDLP field
  * sg_ses: use fan speed factor field for calculation [ses4r04]
  - add --all (-a) option, same action as --join
  * sg_compare_and_write: add examples section to its manpage
  * sg_modes: document '-s' option (same as '-6')
  * sg_sanitize + sg_format: when --verbose given once report
    probable success; without --verbose 'no news is good news'
  * sg_zone: add Remove element and modify zones command
  * sg_raw: increase maximum data-in and data-out buffer size
    from 64 KB to 1 MB
  - fix --cmdfile= handling
  - add --nvm option to send commands from the NVM command set
  - add --cmdset option to bypass cdb heuristic
  - add --scan= first_opcode,last_opcode
  * sg_pt_freebsd: allow device names without leading /dev/
    thus fix for regression introduced in rev 731 (ver: 1.43)
  * sg_pt_solaris+sg_pt_osf1: fix problem with clear_scsi_pt_obj()
    which needs to remember is_nvme and dev_fd values
  * sg_lib: add ZBC (2020) feature set entries
  * sg_lib: restore elements and rebuild command added
  * sg_lib,sg_pt: add partial_clear_scsi_pt_obj(),
    get_scsi_pt_cdb_len() and get_scsi_pt_cdb_buf()
  - add do_nvm_pt() for the NVM (sub-)command set
  - tweak transport error handling in Linux
  * sg_lib: Linux NVMe SNTL: add read, write and verify;
    synchronize cache and write same translations
  - add dummy start stop unit and test unit ready commands
  - wire cache mpage's WCE to nvme 'volatile write cache'
  - fix crash in sg_f2hex_arr() when fname not found
  * sg_lib: reprint cdb with illegal request sense key
  - asc/ascq match asc-num.txt @t10 20200708 [spc6r02]
  * gcc-10: suppress warnings
  * autoconf: upgrade version 2.69 to 2.70
  * remove space from end of source lines for git-svn
  * testing/sg_mrq_testing: new, for blocking mrq usage
  * testing/sgs_dd: add evfd flags and eventfd processing
  * testing: remove master-slave terminology for sgv4
  * examples: add nvme_read_ctl.hex and nvme_write_ctl.hex
- Earlier SUSE fixes included in 1.46:
  * 40-usb-blacklist.rules: use ID_SCSI_INQUIRY
    (bsc#840054, bsc#1131482)</changelog>
  <changelog author="mwilck@suse.com" date="1636632000">- Update to version 1.47:
  * sg_rep_zones: add support for REPORT ZONE DOMAINS and
    REPORT REALMS in this utility
  * sg_raw: fix prints of NVMe NVM command names
  * sg_logs: additions to Volume statistics lpage [ssc5r05c]
  - additions to Command duration limits statistics log
    page [spc6r06]
  * sg_vpd: fix do_hex type on some recent pages
  - zoned block dev char vpd: add zone alignment mode and
    zone starting LBA granularity [zbc2r11]
  * sg_read_buffer: fix --length= problem
  * sg_dd, sgm_dd, sgp_dd: don't close negative file descriptors
  * sg_dd: srand48_r() and mrand48_r() are GNU libc specific,
    put conditional in so non-reentrant version used otherwise
  - 'iflag=00,ff' places the 32 bit block address (big endian)
    into each block
  * sgp_dd: major rework, fix issue with error being ignored
  - new: --chkaddr which checks for block address in each block
  - add check for stdatomic.h presence in configure.ac
  * sg_xcopy: tweak CSCD identification descriptor
  * sg_get_elem_status: fix issue with '--maxlen=' option
  - add 2 depopulation revocation health attributes [sbc5r01]
  * transport error handling improved. To fix report of a
    BAD_TARGET transport error but the utility still continued.
  - introduce SG_LIB_TRANSPORT_ERROR [35] exit status
  * several utilities: override '--maxlen=LEN' when LEN
    is &lt; 16 (or 4), take default (or 4) instead
  * scripts: 55-scsi-sg3_id.rules remove outdated rule (bsc#1189297)
  * sg_lib: add sg_scsi_status_is_good(),
    sg_scsi_status_is_bad() and sg_get_zone_type_str()
  * pt_linux: fix verify(BytChk=0) which Linux SNTL translated
    to write, other SNTL cleanups
  * pt_linux_nvme: fix fua setting
  * pt: check_pt_file_handle() add return value of 5 for
- _service updates:
  * re-enable service, hadn't been used for 1.46 release
  * use upstream author's git repository, simplify versioning scheme
  * use obscpio format</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 1.47+2.388b767:
  * rescan-scsi-bus.sh: apply fix for '-r' (boo#1194293)
  * _service: use openSUSE github repo again (with cherry-picks
    from upstream)
  * spec file: suppress commit ID in library version</changelog>
  <changelog author="mwilck@suse.com" date="1644321600">- Update to version 1.47+3.adb7276:
  * rescan-scsi-bus.sh: fix garbled output (bsc#1195621)</changelog>
  <changelog author="mwilck@suse.com" date="1645444800">- Update to version 1.47+4.82fb156:
  * rescan_scsi_bus.sh: restore numeric ordering of hosts (bsc#1196244)</changelog>
  <changelog author="mwilck@suse.com" date="1654084800">- Update to version 1.47+5.d13bc56:
  * rescan-scsi-bus.sh: add timeout parameter (bsc#1199248)</changelog>
  <changelog author="mwilck@suse.com" date="1674820800">- Update to version 1.47+13.75d23ac:
  * rescan-scsi-bus: speed large multipath scans (bsc#1207706)
  * rescan-scsi-bus.sh speed testonline()
  * rescan-scsi-bus.sh: add option --no-lip-scan
  * rescan-scsi-bus: sgdevice26: do not traverse sg class if scsi_device isnot added
  * rescan-scsi-bus.sh: fix handling of '-I &lt;secs&gt;' option</changelog>
  <changelog author="mwilck@suse.com" date="1697803200">- Update to version 1.47+15.b6898b8:
  * rescan-scsi-bus.sh: remove /tmp/rescan-scsi-mpath-info.txt
  (gh#doug-gilbert/sg3_utils#44)
  * rescan_scsi_bus.sh: fix multipath issue when called with -s and
  without -u (bsc#1215720, bsc#1216355)</changelog>
  <changelog author="mwilck@suse.com" date="1698408000">- Make sure initrd is rebuilt when sg3_utils is updated
  (bsc#1215772)</changelog>
</package>
<package pkgid="e8408ea3730da1ad4511f69e427e8cbab3c11830c6acce6b1ff9cf2d436de585" name="libsmartcols1" arch="aarch64">
  <version epoch="0" ver="2.37.4" rel="150500.9.11.1"/>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-more-ARM-cores-1.patch,
  util-linux-lscpu-add-more-ARM-cores-2.patch,
  util-linux-lscpu-add-more-ARM-cores-3.patch,
  util-linux-lscpu-add-more-ARM-cores-4.patch,
  util-linux-lscpu-add-more-ARM-cores-5.patch,
  util-linux-lscpu-add-more-ARM-cores-6.patch).</changelog>
</package>
<package pkgid="8cae11608935aa3cad3aea7e8ebcc8021f2a7b144b1681009eb097dab056ee0a" name="libsmartcols1" arch="s390x">
  <version epoch="0" ver="2.37.4" rel="150500.9.11.1"/>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-more-ARM-cores-1.patch,
  util-linux-lscpu-add-more-ARM-cores-2.patch,
  util-linux-lscpu-add-more-ARM-cores-3.patch,
  util-linux-lscpu-add-more-ARM-cores-4.patch,
  util-linux-lscpu-add-more-ARM-cores-5.patch,
  util-linux-lscpu-add-more-ARM-cores-6.patch).</changelog>
</package>
<package pkgid="7769deaf1abee8bb5bfe25549430dbd86d598ed5cc7ba48499d4e855d6d01809" name="libsmartcols1" arch="x86_64">
  <version epoch="0" ver="2.37.4" rel="150500.9.11.1"/>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-more-ARM-cores-1.patch,
  util-linux-lscpu-add-more-ARM-cores-2.patch,
  util-linux-lscpu-add-more-ARM-cores-3.patch,
  util-linux-lscpu-add-more-ARM-cores-4.patch,
  util-linux-lscpu-add-more-ARM-cores-5.patch,
  util-linux-lscpu-add-more-ARM-cores-6.patch).</changelog>
</package>
<package pkgid="bab47d33987aba6a7f40d641cdbc02338e2ae073338df86d222e28d33889d3a3" name="libsmartcols1" arch="aarch64">
  <version epoch="0" ver="2.37.4" rel="150500.9.14.2"/>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-more-ARM-cores-1.patch,
  util-linux-lscpu-add-more-ARM-cores-2.patch,
  util-linux-lscpu-add-more-ARM-cores-3.patch,
  util-linux-lscpu-add-more-ARM-cores-4.patch,
  util-linux-lscpu-add-more-ARM-cores-5.patch,
  util-linux-lscpu-add-more-ARM-cores-6.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
</package>
<package pkgid="5beb76961559ecce6e5b61a170b9258fae6652f0ca53af53fc7685355f748f31" name="libsmartcols1" arch="s390x">
  <version epoch="0" ver="2.37.4" rel="150500.9.14.2"/>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-more-ARM-cores-1.patch,
  util-linux-lscpu-add-more-ARM-cores-2.patch,
  util-linux-lscpu-add-more-ARM-cores-3.patch,
  util-linux-lscpu-add-more-ARM-cores-4.patch,
  util-linux-lscpu-add-more-ARM-cores-5.patch,
  util-linux-lscpu-add-more-ARM-cores-6.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
</package>
<package pkgid="16da1e4057db288e15229cb6ed678834b952f39c25bab547e0ebcf462080180e" name="libsmartcols1" arch="x86_64">
  <version epoch="0" ver="2.37.4" rel="150500.9.14.2"/>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-more-ARM-cores-1.patch,
  util-linux-lscpu-add-more-ARM-cores-2.patch,
  util-linux-lscpu-add-more-ARM-cores-3.patch,
  util-linux-lscpu-add-more-ARM-cores-4.patch,
  util-linux-lscpu-add-more-ARM-cores-5.patch,
  util-linux-lscpu-add-more-ARM-cores-6.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
</package>
<package pkgid="47e54a6e9d22d3762227a3fed740a64e9b6cf70e684fa3d00e7e92db0a417e7b" name="libsmartcols1" arch="aarch64">
  <version epoch="0" ver="2.37.4" rel="150500.9.17.2"/>
  <changelog author="sbrabec@suse.com" date="1646308800">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-more-ARM-cores-1.patch,
  util-linux-lscpu-add-more-ARM-cores-2.patch,
  util-linux-lscpu-add-more-ARM-cores-3.patch,
  util-linux-lscpu-add-more-ARM-cores-4.patch,
  util-linux-lscpu-add-more-ARM-cores-5.patch,
  util-linux-lscpu-add-more-ARM-cores-6.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1725364800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).</changelog>
</package>
<package pkgid="1124b3fa9ea88777455dcaa2b7428c4a3acdc843855e211cbeb8b696c30d695f" name="libsmartcols1" arch="s390x">
  <version epoch="0" ver="2.37.4" rel="150500.9.17.2"/>
  <changelog author="sbrabec@suse.com" date="1646308800">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-more-ARM-cores-1.patch,
  util-linux-lscpu-add-more-ARM-cores-2.patch,
  util-linux-lscpu-add-more-ARM-cores-3.patch,
  util-linux-lscpu-add-more-ARM-cores-4.patch,
  util-linux-lscpu-add-more-ARM-cores-5.patch,
  util-linux-lscpu-add-more-ARM-cores-6.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1725364800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).</changelog>
</package>
<package pkgid="45c9da2652d48b0771ac81ef626c42bdb57d38b8a5bf89af6f381baa59cffcaf" name="libsmartcols1" arch="x86_64">
  <version epoch="0" ver="2.37.4" rel="150500.9.17.2"/>
  <changelog author="sbrabec@suse.com" date="1646308800">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-more-ARM-cores-1.patch,
  util-linux-lscpu-add-more-ARM-cores-2.patch,
  util-linux-lscpu-add-more-ARM-cores-3.patch,
  util-linux-lscpu-add-more-ARM-cores-4.patch,
  util-linux-lscpu-add-more-ARM-cores-5.patch,
  util-linux-lscpu-add-more-ARM-cores-6.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1725364800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).</changelog>
</package>
<package pkgid="beabb109de155167f431a46a4ebbb711378dcd327c4a70c81869c3a5ea2bed55" name="libsmartcols1" arch="aarch64">
  <version epoch="0" ver="2.37.4" rel="150500.9.3.1"/>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
</package>
<package pkgid="3b0342c59b4461e33aa92400f094000d3bc20dd25014c798458da4f286290278" name="libsmartcols1" arch="s390x">
  <version epoch="0" ver="2.37.4" rel="150500.9.3.1"/>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
</package>
<package pkgid="38f40107d770b0603b6d33d3041264f2b3fcb8bcbe0cc79615547e99378760d0" name="libsmartcols1" arch="x86_64">
  <version epoch="0" ver="2.37.4" rel="150500.9.3.1"/>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
</package>
<package pkgid="7638e8b8c7a9b7bed1b5d9236ec6bcfa38ed65148372b43ab0d058da79f94bd9" name="libsmartcols1" arch="aarch64">
  <version epoch="0" ver="2.37.4" rel="150500.9.6.1"/>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
</package>
<package pkgid="1f73b4c38360ef11b7121bc9ae0d60f73986ccd860339dee7d24ebcb869f7631" name="libsmartcols1" arch="s390x">
  <version epoch="0" ver="2.37.4" rel="150500.9.6.1"/>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
</package>
<package pkgid="4eb5db5358580d52b27c1b2b57067541b275eaec41e993c828baf23dbe40e486" name="libsmartcols1" arch="x86_64">
  <version epoch="0" ver="2.37.4" rel="150500.9.6.1"/>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
</package>
<package pkgid="3112bcc693db995b8c84c0b43ad2d3c87354d5c2a533b7b1d949e1364b93939a" name="libsnapper5" arch="aarch64">
  <version epoch="0" ver="0.8.16" rel="150300.3.9.1"/>
  <changelog author="aschnell@suse.com" date="1594641600">- added error handing for failed ambit detection (bsc#1174038)
- version 0.8.11</changelog>
  <changelog author="aschnell@suse.com" date="1595505600">- fixed error when using mksubvolume to create /tmp (bsc#1174401)
- version 0.8.12</changelog>
  <changelog author="aschnell@suse.com" date="1598529600">- call fsync after writing snapshot info file (bsc#1078336)
- version 0.8.13</changelog>
  <changelog author="aschnell@suse.com" date="1598616000">- improved error messages for wrong command line options and
  arguments (bsc#1150156)</changelog>
  <changelog author="aschnell@suse.com" date="1598875200">- fix LVM setup for volume groups and logical volumes with one
  character long names (gh#openSUSE/snapper#465)</changelog>
  <changelog author="lnussel@suse.com" date="1598961600">- activate snapperd using systemd service</changelog>
  <changelog author="aschnell@suse.com" date="1599220800">- package new snapperd.service file on Debian based distributions
  (gh#openSUSE/snapper#557)</changelog>
  <changelog author="aschnell@suse.com" date="1600776000">- added option to cleanup to make requested free space available
  (jsc#SLE-15765)
- version 0.8.14</changelog>
  <changelog author="aschnell@suse.com" date="1605700800">- use C++11 regexes instead of own regcomp/regexec wrapper class
  (see gh#openSUSE/snapper#583)</changelog>
  <changelog author="aschnell@suse.com" date="1605787200">- state in man-pages that ext4 support is discontinued
  (gh#openSUSE/snapper#331)</changelog>
  <changelog author="aschnell@suse.com" date="1606219200">- do not override passwd after getpwuid_r et.al. calls
  (gh#openSUSE/snapper#589)</changelog>
  <changelog author="aschnell@suse.com" date="1606996800">- fixed compilation with --disable-btrfs (gh#openSUSE/snapper#505)</changelog>
  <changelog author="aschnell@suse.com" date="1607083200">- in systemd-helper continue with other configs if one config is
  broken (gh#openSUSE/snapper#495)</changelog>
  <changelog author="aschnell@suse.com" date="1608206400">- added option to abbreviate columns in table (see
  gh#openSUSE/snapper#268)
- version 0.8.15</changelog>
  <changelog author="aschnell@suse.com" date="1611576000">- fixed testsuite for equal-date (gh#openSUSE/snapper#526)</changelog>
  <changelog author="aschnell@suse.com" date="1615377600">- updated translations (bsc#1149754)</changelog>
  <changelog author="aschnell@suse.com" date="1616155200">- fixed creating root config (root prefix handling)
  (gh#openSUSE/snapper#627)</changelog>
  <changelog author="aschnell@suse.com" date="1681387200">- avoid stale btrfs qgroups on transactional systems (bsc#1210151)
  * added pr805.patch
- wait for existing btrfs quota rescans to finish (bsc#1210150)
  * added pr790.patch</changelog>
  <changelog author="aschnell@suse.com" date="1686916800">- improved responsiveness of snapperd when a btrfs quota rescan
  is running (see bsc#1211459)
  * added pr821.patch</changelog>
  <changelog author="aschnell@suse.com" date="1724846400">- handle content-length of stomp in zypper plugin
  (gh#openSUSE/snapper#918) (bsc#1229142)
  * added pr919.patch
  * added pr920.patch</changelog>
</package>
<package pkgid="6890cada58106eb4dd66ea6a0ab9a2e4660989ec76c15644b601fc463a696901" name="libsnapper5" arch="s390x">
  <version epoch="0" ver="0.8.16" rel="150300.3.9.1"/>
  <changelog author="aschnell@suse.com" date="1594641600">- added error handing for failed ambit detection (bsc#1174038)
- version 0.8.11</changelog>
  <changelog author="aschnell@suse.com" date="1595505600">- fixed error when using mksubvolume to create /tmp (bsc#1174401)
- version 0.8.12</changelog>
  <changelog author="aschnell@suse.com" date="1598529600">- call fsync after writing snapshot info file (bsc#1078336)
- version 0.8.13</changelog>
  <changelog author="aschnell@suse.com" date="1598616000">- improved error messages for wrong command line options and
  arguments (bsc#1150156)</changelog>
  <changelog author="aschnell@suse.com" date="1598875200">- fix LVM setup for volume groups and logical volumes with one
  character long names (gh#openSUSE/snapper#465)</changelog>
  <changelog author="lnussel@suse.com" date="1598961600">- activate snapperd using systemd service</changelog>
  <changelog author="aschnell@suse.com" date="1599220800">- package new snapperd.service file on Debian based distributions
  (gh#openSUSE/snapper#557)</changelog>
  <changelog author="aschnell@suse.com" date="1600776000">- added option to cleanup to make requested free space available
  (jsc#SLE-15765)
- version 0.8.14</changelog>
  <changelog author="aschnell@suse.com" date="1605700800">- use C++11 regexes instead of own regcomp/regexec wrapper class
  (see gh#openSUSE/snapper#583)</changelog>
  <changelog author="aschnell@suse.com" date="1605787200">- state in man-pages that ext4 support is discontinued
  (gh#openSUSE/snapper#331)</changelog>
  <changelog author="aschnell@suse.com" date="1606219200">- do not override passwd after getpwuid_r et.al. calls
  (gh#openSUSE/snapper#589)</changelog>
  <changelog author="aschnell@suse.com" date="1606996800">- fixed compilation with --disable-btrfs (gh#openSUSE/snapper#505)</changelog>
  <changelog author="aschnell@suse.com" date="1607083200">- in systemd-helper continue with other configs if one config is
  broken (gh#openSUSE/snapper#495)</changelog>
  <changelog author="aschnell@suse.com" date="1608206400">- added option to abbreviate columns in table (see
  gh#openSUSE/snapper#268)
- version 0.8.15</changelog>
  <changelog author="aschnell@suse.com" date="1611576000">- fixed testsuite for equal-date (gh#openSUSE/snapper#526)</changelog>
  <changelog author="aschnell@suse.com" date="1615377600">- updated translations (bsc#1149754)</changelog>
  <changelog author="aschnell@suse.com" date="1616155200">- fixed creating root config (root prefix handling)
  (gh#openSUSE/snapper#627)</changelog>
  <changelog author="aschnell@suse.com" date="1681387200">- avoid stale btrfs qgroups on transactional systems (bsc#1210151)
  * added pr805.patch
- wait for existing btrfs quota rescans to finish (bsc#1210150)
  * added pr790.patch</changelog>
  <changelog author="aschnell@suse.com" date="1686916800">- improved responsiveness of snapperd when a btrfs quota rescan
  is running (see bsc#1211459)
  * added pr821.patch</changelog>
  <changelog author="aschnell@suse.com" date="1724846400">- handle content-length of stomp in zypper plugin
  (gh#openSUSE/snapper#918) (bsc#1229142)
  * added pr919.patch
  * added pr920.patch</changelog>
</package>
<package pkgid="fffc3664dbc06272cf3fe24d5af41cfcb8556ee0fadc81d54a0a90e8a4df7146" name="libsnapper5" arch="x86_64">
  <version epoch="0" ver="0.8.16" rel="150300.3.9.1"/>
  <changelog author="aschnell@suse.com" date="1594641600">- added error handing for failed ambit detection (bsc#1174038)
- version 0.8.11</changelog>
  <changelog author="aschnell@suse.com" date="1595505600">- fixed error when using mksubvolume to create /tmp (bsc#1174401)
- version 0.8.12</changelog>
  <changelog author="aschnell@suse.com" date="1598529600">- call fsync after writing snapshot info file (bsc#1078336)
- version 0.8.13</changelog>
  <changelog author="aschnell@suse.com" date="1598616000">- improved error messages for wrong command line options and
  arguments (bsc#1150156)</changelog>
  <changelog author="aschnell@suse.com" date="1598875200">- fix LVM setup for volume groups and logical volumes with one
  character long names (gh#openSUSE/snapper#465)</changelog>
  <changelog author="lnussel@suse.com" date="1598961600">- activate snapperd using systemd service</changelog>
  <changelog author="aschnell@suse.com" date="1599220800">- package new snapperd.service file on Debian based distributions
  (gh#openSUSE/snapper#557)</changelog>
  <changelog author="aschnell@suse.com" date="1600776000">- added option to cleanup to make requested free space available
  (jsc#SLE-15765)
- version 0.8.14</changelog>
  <changelog author="aschnell@suse.com" date="1605700800">- use C++11 regexes instead of own regcomp/regexec wrapper class
  (see gh#openSUSE/snapper#583)</changelog>
  <changelog author="aschnell@suse.com" date="1605787200">- state in man-pages that ext4 support is discontinued
  (gh#openSUSE/snapper#331)</changelog>
  <changelog author="aschnell@suse.com" date="1606219200">- do not override passwd after getpwuid_r et.al. calls
  (gh#openSUSE/snapper#589)</changelog>
  <changelog author="aschnell@suse.com" date="1606996800">- fixed compilation with --disable-btrfs (gh#openSUSE/snapper#505)</changelog>
  <changelog author="aschnell@suse.com" date="1607083200">- in systemd-helper continue with other configs if one config is
  broken (gh#openSUSE/snapper#495)</changelog>
  <changelog author="aschnell@suse.com" date="1608206400">- added option to abbreviate columns in table (see
  gh#openSUSE/snapper#268)
- version 0.8.15</changelog>
  <changelog author="aschnell@suse.com" date="1611576000">- fixed testsuite for equal-date (gh#openSUSE/snapper#526)</changelog>
  <changelog author="aschnell@suse.com" date="1615377600">- updated translations (bsc#1149754)</changelog>
  <changelog author="aschnell@suse.com" date="1616155200">- fixed creating root config (root prefix handling)
  (gh#openSUSE/snapper#627)</changelog>
  <changelog author="aschnell@suse.com" date="1681387200">- avoid stale btrfs qgroups on transactional systems (bsc#1210151)
  * added pr805.patch
- wait for existing btrfs quota rescans to finish (bsc#1210150)
  * added pr790.patch</changelog>
  <changelog author="aschnell@suse.com" date="1686916800">- improved responsiveness of snapperd when a btrfs quota rescan
  is running (see bsc#1211459)
  * added pr821.patch</changelog>
  <changelog author="aschnell@suse.com" date="1724846400">- handle content-length of stomp in zypper plugin
  (gh#openSUSE/snapper#918) (bsc#1229142)
  * added pr919.patch
  * added pr920.patch</changelog>
</package>
<package pkgid="23db2391cf1316850aa08f58fd2f67e2b2f86cbba58fd8b8e057f9c80387ff8f" name="libsnmp40" arch="aarch64">
  <version epoch="0" ver="5.9.4" rel="150300.15.11.1"/>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Add net-snmp-5.7.3-modern-rpm-api.patch: Supprt modern RPM (&gt;=
  4.6) API. In RPM 4.14, the RPM 4.4 compatibility APIs are being
  removed.</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Format with spec-cleaner
- Drop sle11 support as it fails to build anyway for ages
- Rename python packages to be python-%{name} with obsoletes
  * Use new singlespec macros
  * Add patch converting the py files to python3/2 compat mode
    net-snmp-python3.patch
- Run full autoreconf instead of partial
- Build with threads by building few targets first</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Take systemd service files from fedora to replace sysV scripts
- Also convert the sysconfig files to match fedora ones, they
  get bit more terse but it works seamlessly with systemd</changelog>
  <changelog author="tchvatal@suse.com" date="1516795200">- Add patch from Fedora to support natively systemd:
  * net-snmp-5.7.2-systemd.patch
- Drop the check phase as whole 90% of the tests fail it makes
  more sense to run them somewhere localy</changelog>
  <changelog author="tchvatal@suse.com" date="1516795201">- Properly conditionalize the py2 build</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Fix RPM group for shlib subpackage.</changelog>
  <changelog author="abergmann@suse.com" date="1523880000">- Remove executable flags from systemd service files (bsc#1089295).</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Fix permissions on unit files wrt bsc#1087977
- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1529323200">- Create /var/agentx via systemd tmpfiles in case of rollback,
  snapshots and transactional updates [bsc#1098032]</changelog>
  <changelog author="abergmann@suse.com" date="1539086400">- Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065)
  Add net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
- swintst_rpm: Protect against unspecified Group name (bsc#1102775)
  Add net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
- Add tsm and tlstm MIBs and the USM security module. (bsc#1081164)
- Fix agentx freezing on timeout (bsc#1027353)
  Add net-snmp-fix-agentx-freezing-on-timeout.patch</changelog>
  <changelog author="abergmann@suse.com" date="1562328000">- Add Lustre filesystem support (bsc#1140341, jsc#SLE-6120).
  Add net-snmp-5.7.3-add-lustre-fs-support.patch
- Add info about the original agent which triggered the trap.
  When the trap is forwarded there was no info about the original
  agent (bsc#1116807).
  Add net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
- Fix missing sysconfig files creation (bsc#1108471).</changelog>
  <changelog author="abergmann@suse.com" date="1639742400">- Make extended MIB read-only (bsc#1174961, CVE-2020-15862).
  Add net-snmp-5.7.3-make-extended-mib-read-only.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640001600">- Fix output for high memTotalReal RAM values (bsc#1152968).
  Add net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640174400">- Fix hrStorage autofs objects timeout problems (bsc#1179699, bsc#1145864).
  Add net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  Add net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
- Fix NSS mounted volumes in hrStorageDescr (bsc#1100146).
  Add net-snmp-5.7.3-recognize-nss-pools-and-nss-volumes-oes.patch
- Fix subagent crash at save_set_var() (bsc#1178021).
  Add net-snmp-5.7.3-subagent-set-response.patch
- Fix subagent data corruption (bsc#1178351, bsc#1179009).
  Add net-snmp-5.7.3-fix-subagent-data-corruption.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640260800">- Fix LFH violation during v3 user creation (bsc#1181591).
  Add net-snmp-5.7.3-fix-create-v3-user-outfile.patch</changelog>
  <changelog author="abergmann@suse.com" date="1646827200">- Decouple snmp-mibs from net-snmp version to allow major version
  upgrade (bsc#1196955).</changelog>
  <changelog author="abergmann@suse.com" date="1665057600">- update to 5.9.3 (bsc#1201103, jsc#SLE-11203):
  - security:
  - These two CVEs can be exploited by a user with read-only credentials:
  - CVE-2022-24805 A buffer overflow in the handling of the INDEX of
    NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
  - CVE-2022-24809 A malformed OID in a GET-NEXT to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - These CVEs can be exploited by a user with read-write credentials:
  - CVE-2022-24806 Improper Input Validation when SETing malformed
    OIDs in master agent and subagent simultaneously
  - CVE-2022-24807 A malformed OID in a SET request to
    SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an
    out-of-bounds memory access.
  - CVE-2022-24808 A malformed OID in a SET request to
    NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
  - CVE-2022-24810 A malformed OID in a SET to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - Fixed library versioning bug found in 5.9.2.
  - Library version change to libsnmp40.
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Fixed python2 backward compability.
  add:
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Change to use systemd service files directly from net-snmp package.
  add:
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch
  remove:
  * snmpd.service
  * snmptrapd.service
  * harden_snmpd.service.patch
  * harden_snmptrapd.service.patch
- Refactor and remove obsolete patches to work with version number 5.9.3:
  add:
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  remove:
  * net-snmp-5.9.1-pie.patch
  * net-snmp-5.9.1-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-add-lustre-fs-support.patch
  * net-snmp-5.7.3-Fix-Makefile.PL.patch
  * net-snmp-5.7.3-modern-rpm-api.patch
  * net-snmp-5.7.3-net-snmp-config-headercheck.patch
  * net-snmp-5.7.3-perl-tk-warning.patch
  * net-snmp-5.7.3-snmpstatus-suppress-output.patch
  * net-snmp-5.7.3-socket-path.patch
  * net-snmp-5.7.3-subagent-set-response.patch
  * net-snmp-5.7.3-testing-empty-arptable.patch
  * net-snmp-5.7.3-velocity-mib.patch
  * net-snmp-5.7.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-pie.patch
  * net-snmp-4.7.2-systemd.patch
  * net-snmp-5.7.3-build-with-openssl-1.1.patch
  * net-snmp-5.7.3-fix-agentx-freezing-on-timeout.patch
  * net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
  * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch
  * net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch
  * net-snmp-5.7.3-fix-subagent-data-corruption.patch
  * net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
  * net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  * net-snmp-5.7.3-make-extended-mib-read-only.patch
  * net-snmp-5.7.3-netgroups.patch
  * net-snmp-5.7.3-Remove-U64-typedef.patch
  * net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
  * net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
  * net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch
  * net-snmp-python3.patch</changelog>
  <changelog author="abergmann@suse.com" date="1672920000">- Fixed NULL pointer exception issue when handling ipDefaultTTL or
  pv6IpForwarding (bsc#1205148, CVE-2022-44793, bsc#1205150, CVE-2022-44792).
  add:
  * net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch
- Enable AES-192 and AES-256 privacy protocol (bsc#1206828).</changelog>
  <changelog author="abergmann@suse.com" date="1673265600">- Hardening systemd services setting "ProtectHome=true" caused home directory
  size and allocation to be listed incorrectly (bsc#1206044).
  add:
  * net-snmp-5.9.3-harden_snmpd.service.patch
  * net-snmp-5.9.3-harden_snmptrapd.service.patch
  delete:
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch</changelog>
  <changelog author="abergmann@suse.com" date="1697544000">- Update to net-snmp-5.9.4 (bsc#1214364).
  add (rename):
  * net-snmp-5.9.4-add-lustre-fs-support.patch
  * net-snmp-5.9.4-add-netgroups-functionality.patch
  * net-snmp-5.9.4-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.4-fixed-python2-bindings.patch
  * net-snmp-5.9.4-fix-Makefile.PL.patch
  * net-snmp-5.9.4-modern-rpm-api.patch
  * net-snmp-5.9.4-net-snmp-config-headercheck.patch
  * net-snmp-5.9.4-perl-tk-warning.patch
  * net-snmp-5.9.4-pie.patch
  * net-snmp-5.9.4-snmpstatus-suppress-output.patch
  * net-snmp-5.9.4-socket-path.patch
  * net-snmp-5.9.4-subagent-set-response.patch
  * net-snmp-5.9.4-suse-systemd-service-files.patch
  * net-snmp-5.9.4-testing-empty-arptable.patch
  delete (now part of v5.9.4):
  * net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch
  delete (rename):
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Removing legacy MIBs used by Velocity Software (jira#PED-6416).
- Re-add support for hostname netgroups that was removed accidentally and
  previously added with FATE#316305 (bsc#1207697).
  '@hostgroup' can be specified for multiple hosts
- Hardening systemd services setting "ProtectHome=true" caused home directory
  size and allocation to be listed incorrectly (bsc#1206044).
  add (rename):
  * net-snmp-5.9.4-harden_snmpd.service.patch
  * net-snmp-5.9.4-harden_snmptrapd.service.patch
  delete (rename):
  * net-snmp-5.9.3-harden_snmpd.service.patch
  * net-snmp-5.9.3-harden_snmptrapd.service.patch</changelog>
</package>
<package pkgid="185457179b6e38ae6b69a25b704d2ef1c4f78934116f4055263f2256ab6ebddf" name="libsnmp40" arch="s390x">
  <version epoch="0" ver="5.9.4" rel="150300.15.11.1"/>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Add net-snmp-5.7.3-modern-rpm-api.patch: Supprt modern RPM (&gt;=
  4.6) API. In RPM 4.14, the RPM 4.4 compatibility APIs are being
  removed.</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Format with spec-cleaner
- Drop sle11 support as it fails to build anyway for ages
- Rename python packages to be python-%{name} with obsoletes
  * Use new singlespec macros
  * Add patch converting the py files to python3/2 compat mode
    net-snmp-python3.patch
- Run full autoreconf instead of partial
- Build with threads by building few targets first</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Take systemd service files from fedora to replace sysV scripts
- Also convert the sysconfig files to match fedora ones, they
  get bit more terse but it works seamlessly with systemd</changelog>
  <changelog author="tchvatal@suse.com" date="1516795200">- Add patch from Fedora to support natively systemd:
  * net-snmp-5.7.2-systemd.patch
- Drop the check phase as whole 90% of the tests fail it makes
  more sense to run them somewhere localy</changelog>
  <changelog author="tchvatal@suse.com" date="1516795201">- Properly conditionalize the py2 build</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Fix RPM group for shlib subpackage.</changelog>
  <changelog author="abergmann@suse.com" date="1523880000">- Remove executable flags from systemd service files (bsc#1089295).</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Fix permissions on unit files wrt bsc#1087977
- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1529323200">- Create /var/agentx via systemd tmpfiles in case of rollback,
  snapshots and transactional updates [bsc#1098032]</changelog>
  <changelog author="abergmann@suse.com" date="1539086400">- Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065)
  Add net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
- swintst_rpm: Protect against unspecified Group name (bsc#1102775)
  Add net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
- Add tsm and tlstm MIBs and the USM security module. (bsc#1081164)
- Fix agentx freezing on timeout (bsc#1027353)
  Add net-snmp-fix-agentx-freezing-on-timeout.patch</changelog>
  <changelog author="abergmann@suse.com" date="1562328000">- Add Lustre filesystem support (bsc#1140341, jsc#SLE-6120).
  Add net-snmp-5.7.3-add-lustre-fs-support.patch
- Add info about the original agent which triggered the trap.
  When the trap is forwarded there was no info about the original
  agent (bsc#1116807).
  Add net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
- Fix missing sysconfig files creation (bsc#1108471).</changelog>
  <changelog author="abergmann@suse.com" date="1639742400">- Make extended MIB read-only (bsc#1174961, CVE-2020-15862).
  Add net-snmp-5.7.3-make-extended-mib-read-only.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640001600">- Fix output for high memTotalReal RAM values (bsc#1152968).
  Add net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640174400">- Fix hrStorage autofs objects timeout problems (bsc#1179699, bsc#1145864).
  Add net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  Add net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
- Fix NSS mounted volumes in hrStorageDescr (bsc#1100146).
  Add net-snmp-5.7.3-recognize-nss-pools-and-nss-volumes-oes.patch
- Fix subagent crash at save_set_var() (bsc#1178021).
  Add net-snmp-5.7.3-subagent-set-response.patch
- Fix subagent data corruption (bsc#1178351, bsc#1179009).
  Add net-snmp-5.7.3-fix-subagent-data-corruption.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640260800">- Fix LFH violation during v3 user creation (bsc#1181591).
  Add net-snmp-5.7.3-fix-create-v3-user-outfile.patch</changelog>
  <changelog author="abergmann@suse.com" date="1646827200">- Decouple snmp-mibs from net-snmp version to allow major version
  upgrade (bsc#1196955).</changelog>
  <changelog author="abergmann@suse.com" date="1665057600">- update to 5.9.3 (bsc#1201103, jsc#SLE-11203):
  - security:
  - These two CVEs can be exploited by a user with read-only credentials:
  - CVE-2022-24805 A buffer overflow in the handling of the INDEX of
    NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
  - CVE-2022-24809 A malformed OID in a GET-NEXT to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - These CVEs can be exploited by a user with read-write credentials:
  - CVE-2022-24806 Improper Input Validation when SETing malformed
    OIDs in master agent and subagent simultaneously
  - CVE-2022-24807 A malformed OID in a SET request to
    SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an
    out-of-bounds memory access.
  - CVE-2022-24808 A malformed OID in a SET request to
    NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
  - CVE-2022-24810 A malformed OID in a SET to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - Fixed library versioning bug found in 5.9.2.
  - Library version change to libsnmp40.
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Fixed python2 backward compability.
  add:
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Change to use systemd service files directly from net-snmp package.
  add:
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch
  remove:
  * snmpd.service
  * snmptrapd.service
  * harden_snmpd.service.patch
  * harden_snmptrapd.service.patch
- Refactor and remove obsolete patches to work with version number 5.9.3:
  add:
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  remove:
  * net-snmp-5.9.1-pie.patch
  * net-snmp-5.9.1-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-add-lustre-fs-support.patch
  * net-snmp-5.7.3-Fix-Makefile.PL.patch
  * net-snmp-5.7.3-modern-rpm-api.patch
  * net-snmp-5.7.3-net-snmp-config-headercheck.patch
  * net-snmp-5.7.3-perl-tk-warning.patch
  * net-snmp-5.7.3-snmpstatus-suppress-output.patch
  * net-snmp-5.7.3-socket-path.patch
  * net-snmp-5.7.3-subagent-set-response.patch
  * net-snmp-5.7.3-testing-empty-arptable.patch
  * net-snmp-5.7.3-velocity-mib.patch
  * net-snmp-5.7.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-pie.patch
  * net-snmp-4.7.2-systemd.patch
  * net-snmp-5.7.3-build-with-openssl-1.1.patch
  * net-snmp-5.7.3-fix-agentx-freezing-on-timeout.patch
  * net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
  * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch
  * net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch
  * net-snmp-5.7.3-fix-subagent-data-corruption.patch
  * net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
  * net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  * net-snmp-5.7.3-make-extended-mib-read-only.patch
  * net-snmp-5.7.3-netgroups.patch
  * net-snmp-5.7.3-Remove-U64-typedef.patch
  * net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
  * net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
  * net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch
  * net-snmp-python3.patch</changelog>
  <changelog author="abergmann@suse.com" date="1672920000">- Fixed NULL pointer exception issue when handling ipDefaultTTL or
  pv6IpForwarding (bsc#1205148, CVE-2022-44793, bsc#1205150, CVE-2022-44792).
  add:
  * net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch
- Enable AES-192 and AES-256 privacy protocol (bsc#1206828).</changelog>
  <changelog author="abergmann@suse.com" date="1673265600">- Hardening systemd services setting "ProtectHome=true" caused home directory
  size and allocation to be listed incorrectly (bsc#1206044).
  add:
  * net-snmp-5.9.3-harden_snmpd.service.patch
  * net-snmp-5.9.3-harden_snmptrapd.service.patch
  delete:
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch</changelog>
  <changelog author="abergmann@suse.com" date="1697544000">- Update to net-snmp-5.9.4 (bsc#1214364).
  add (rename):
  * net-snmp-5.9.4-add-lustre-fs-support.patch
  * net-snmp-5.9.4-add-netgroups-functionality.patch
  * net-snmp-5.9.4-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.4-fixed-python2-bindings.patch
  * net-snmp-5.9.4-fix-Makefile.PL.patch
  * net-snmp-5.9.4-modern-rpm-api.patch
  * net-snmp-5.9.4-net-snmp-config-headercheck.patch
  * net-snmp-5.9.4-perl-tk-warning.patch
  * net-snmp-5.9.4-pie.patch
  * net-snmp-5.9.4-snmpstatus-suppress-output.patch
  * net-snmp-5.9.4-socket-path.patch
  * net-snmp-5.9.4-subagent-set-response.patch
  * net-snmp-5.9.4-suse-systemd-service-files.patch
  * net-snmp-5.9.4-testing-empty-arptable.patch
  delete (now part of v5.9.4):
  * net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch
  delete (rename):
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Removing legacy MIBs used by Velocity Software (jira#PED-6416).
- Re-add support for hostname netgroups that was removed accidentally and
  previously added with FATE#316305 (bsc#1207697).
  '@hostgroup' can be specified for multiple hosts
- Hardening systemd services setting "ProtectHome=true" caused home directory
  size and allocation to be listed incorrectly (bsc#1206044).
  add (rename):
  * net-snmp-5.9.4-harden_snmpd.service.patch
  * net-snmp-5.9.4-harden_snmptrapd.service.patch
  delete (rename):
  * net-snmp-5.9.3-harden_snmpd.service.patch
  * net-snmp-5.9.3-harden_snmptrapd.service.patch</changelog>
</package>
<package pkgid="f68288386bd207c48fde4a6619c4535c03f418ab1eeaa87e9218bc146ffafd90" name="libsnmp40" arch="x86_64">
  <version epoch="0" ver="5.9.4" rel="150300.15.11.1"/>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Add net-snmp-5.7.3-modern-rpm-api.patch: Supprt modern RPM (&gt;=
  4.6) API. In RPM 4.14, the RPM 4.4 compatibility APIs are being
  removed.</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Format with spec-cleaner
- Drop sle11 support as it fails to build anyway for ages
- Rename python packages to be python-%{name} with obsoletes
  * Use new singlespec macros
  * Add patch converting the py files to python3/2 compat mode
    net-snmp-python3.patch
- Run full autoreconf instead of partial
- Build with threads by building few targets first</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Take systemd service files from fedora to replace sysV scripts
- Also convert the sysconfig files to match fedora ones, they
  get bit more terse but it works seamlessly with systemd</changelog>
  <changelog author="tchvatal@suse.com" date="1516795200">- Add patch from Fedora to support natively systemd:
  * net-snmp-5.7.2-systemd.patch
- Drop the check phase as whole 90% of the tests fail it makes
  more sense to run them somewhere localy</changelog>
  <changelog author="tchvatal@suse.com" date="1516795201">- Properly conditionalize the py2 build</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Fix RPM group for shlib subpackage.</changelog>
  <changelog author="abergmann@suse.com" date="1523880000">- Remove executable flags from systemd service files (bsc#1089295).</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Fix permissions on unit files wrt bsc#1087977
- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1529323200">- Create /var/agentx via systemd tmpfiles in case of rollback,
  snapshots and transactional updates [bsc#1098032]</changelog>
  <changelog author="abergmann@suse.com" date="1539086400">- Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065)
  Add net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
- swintst_rpm: Protect against unspecified Group name (bsc#1102775)
  Add net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
- Add tsm and tlstm MIBs and the USM security module. (bsc#1081164)
- Fix agentx freezing on timeout (bsc#1027353)
  Add net-snmp-fix-agentx-freezing-on-timeout.patch</changelog>
  <changelog author="abergmann@suse.com" date="1562328000">- Add Lustre filesystem support (bsc#1140341, jsc#SLE-6120).
  Add net-snmp-5.7.3-add-lustre-fs-support.patch
- Add info about the original agent which triggered the trap.
  When the trap is forwarded there was no info about the original
  agent (bsc#1116807).
  Add net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
- Fix missing sysconfig files creation (bsc#1108471).</changelog>
  <changelog author="abergmann@suse.com" date="1639742400">- Make extended MIB read-only (bsc#1174961, CVE-2020-15862).
  Add net-snmp-5.7.3-make-extended-mib-read-only.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640001600">- Fix output for high memTotalReal RAM values (bsc#1152968).
  Add net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640174400">- Fix hrStorage autofs objects timeout problems (bsc#1179699, bsc#1145864).
  Add net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  Add net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
- Fix NSS mounted volumes in hrStorageDescr (bsc#1100146).
  Add net-snmp-5.7.3-recognize-nss-pools-and-nss-volumes-oes.patch
- Fix subagent crash at save_set_var() (bsc#1178021).
  Add net-snmp-5.7.3-subagent-set-response.patch
- Fix subagent data corruption (bsc#1178351, bsc#1179009).
  Add net-snmp-5.7.3-fix-subagent-data-corruption.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640260800">- Fix LFH violation during v3 user creation (bsc#1181591).
  Add net-snmp-5.7.3-fix-create-v3-user-outfile.patch</changelog>
  <changelog author="abergmann@suse.com" date="1646827200">- Decouple snmp-mibs from net-snmp version to allow major version
  upgrade (bsc#1196955).</changelog>
  <changelog author="abergmann@suse.com" date="1665057600">- update to 5.9.3 (bsc#1201103, jsc#SLE-11203):
  - security:
  - These two CVEs can be exploited by a user with read-only credentials:
  - CVE-2022-24805 A buffer overflow in the handling of the INDEX of
    NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
  - CVE-2022-24809 A malformed OID in a GET-NEXT to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - These CVEs can be exploited by a user with read-write credentials:
  - CVE-2022-24806 Improper Input Validation when SETing malformed
    OIDs in master agent and subagent simultaneously
  - CVE-2022-24807 A malformed OID in a SET request to
    SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an
    out-of-bounds memory access.
  - CVE-2022-24808 A malformed OID in a SET request to
    NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
  - CVE-2022-24810 A malformed OID in a SET to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - Fixed library versioning bug found in 5.9.2.
  - Library version change to libsnmp40.
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Fixed python2 backward compability.
  add:
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Change to use systemd service files directly from net-snmp package.
  add:
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch
  remove:
  * snmpd.service
  * snmptrapd.service
  * harden_snmpd.service.patch
  * harden_snmptrapd.service.patch
- Refactor and remove obsolete patches to work with version number 5.9.3:
  add:
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  remove:
  * net-snmp-5.9.1-pie.patch
  * net-snmp-5.9.1-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-add-lustre-fs-support.patch
  * net-snmp-5.7.3-Fix-Makefile.PL.patch
  * net-snmp-5.7.3-modern-rpm-api.patch
  * net-snmp-5.7.3-net-snmp-config-headercheck.patch
  * net-snmp-5.7.3-perl-tk-warning.patch
  * net-snmp-5.7.3-snmpstatus-suppress-output.patch
  * net-snmp-5.7.3-socket-path.patch
  * net-snmp-5.7.3-subagent-set-response.patch
  * net-snmp-5.7.3-testing-empty-arptable.patch
  * net-snmp-5.7.3-velocity-mib.patch
  * net-snmp-5.7.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-pie.patch
  * net-snmp-4.7.2-systemd.patch
  * net-snmp-5.7.3-build-with-openssl-1.1.patch
  * net-snmp-5.7.3-fix-agentx-freezing-on-timeout.patch
  * net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
  * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch
  * net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch
  * net-snmp-5.7.3-fix-subagent-data-corruption.patch
  * net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
  * net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  * net-snmp-5.7.3-make-extended-mib-read-only.patch
  * net-snmp-5.7.3-netgroups.patch
  * net-snmp-5.7.3-Remove-U64-typedef.patch
  * net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
  * net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
  * net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch
  * net-snmp-python3.patch</changelog>
  <changelog author="abergmann@suse.com" date="1672920000">- Fixed NULL pointer exception issue when handling ipDefaultTTL or
  pv6IpForwarding (bsc#1205148, CVE-2022-44793, bsc#1205150, CVE-2022-44792).
  add:
  * net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch
- Enable AES-192 and AES-256 privacy protocol (bsc#1206828).</changelog>
  <changelog author="abergmann@suse.com" date="1673265600">- Hardening systemd services setting "ProtectHome=true" caused home directory
  size and allocation to be listed incorrectly (bsc#1206044).
  add:
  * net-snmp-5.9.3-harden_snmpd.service.patch
  * net-snmp-5.9.3-harden_snmptrapd.service.patch
  delete:
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch</changelog>
  <changelog author="abergmann@suse.com" date="1697544000">- Update to net-snmp-5.9.4 (bsc#1214364).
  add (rename):
  * net-snmp-5.9.4-add-lustre-fs-support.patch
  * net-snmp-5.9.4-add-netgroups-functionality.patch
  * net-snmp-5.9.4-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.4-fixed-python2-bindings.patch
  * net-snmp-5.9.4-fix-Makefile.PL.patch
  * net-snmp-5.9.4-modern-rpm-api.patch
  * net-snmp-5.9.4-net-snmp-config-headercheck.patch
  * net-snmp-5.9.4-perl-tk-warning.patch
  * net-snmp-5.9.4-pie.patch
  * net-snmp-5.9.4-snmpstatus-suppress-output.patch
  * net-snmp-5.9.4-socket-path.patch
  * net-snmp-5.9.4-subagent-set-response.patch
  * net-snmp-5.9.4-suse-systemd-service-files.patch
  * net-snmp-5.9.4-testing-empty-arptable.patch
  delete (now part of v5.9.4):
  * net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch
  delete (rename):
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Removing legacy MIBs used by Velocity Software (jira#PED-6416).
- Re-add support for hostname netgroups that was removed accidentally and
  previously added with FATE#316305 (bsc#1207697).
  '@hostgroup' can be specified for multiple hosts
- Hardening systemd services setting "ProtectHome=true" caused home directory
  size and allocation to be listed incorrectly (bsc#1206044).
  add (rename):
  * net-snmp-5.9.4-harden_snmpd.service.patch
  * net-snmp-5.9.4-harden_snmptrapd.service.patch
  delete (rename):
  * net-snmp-5.9.3-harden_snmpd.service.patch
  * net-snmp-5.9.3-harden_snmptrapd.service.patch</changelog>
</package>
<package pkgid="2ac405e2f7044faaa6a374775030eb85d21471d21dd7759017c009f4bd47086a" name="libsoftokn3" arch="aarch64">
  <version epoch="0" ver="3.101.2" rel="150400.3.48.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
</package>
<package pkgid="2520d64250b7271aa3bb190a81f7aceba74d5377bd5fce71c74ec319e3976098" name="libsoftokn3" arch="s390x">
  <version epoch="0" ver="3.101.2" rel="150400.3.48.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
</package>
<package pkgid="31ae03824215864c60d3a00b1d2e26f6e74c8c69928b340395d22d4a72e20c16" name="libsoftokn3" arch="x86_64">
  <version epoch="0" ver="3.101.2" rel="150400.3.48.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
</package>
<package pkgid="79e665ecd1e9539aa92e95b1c3284908c0910357180793f7f6945304f785260e" name="libsoftokn3" arch="aarch64">
  <version epoch="0" ver="3.101.2" rel="150400.3.51.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
</package>
<package pkgid="bcbd304340a0ad94f96cb693286d3079f69779711c79e415d1873bbb2490c5bf" name="libsoftokn3" arch="s390x">
  <version epoch="0" ver="3.101.2" rel="150400.3.51.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
</package>
<package pkgid="e8d0d7de26d670ec863c2bdc7f7d04d5b14defb3b09cc1da6d7822de8dca57c2" name="libsoftokn3" arch="x86_64">
  <version epoch="0" ver="3.101.2" rel="150400.3.51.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
</package>
<package pkgid="36a3221e819a22b23b63a057374b9a3dc4a1ebb74966822add9a25bde62acdb7" name="libsoftokn3" arch="aarch64">
  <version epoch="0" ver="3.90.1" rel="150400.3.35.2"/>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
</package>
<package pkgid="d1b914581a545fc87ac00a8fe17d7b8afd63ff26e2ddfc51ed1cefc334b7dd64" name="libsoftokn3" arch="s390x">
  <version epoch="0" ver="3.90.1" rel="150400.3.35.2"/>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
</package>
<package pkgid="055b225311a325d8f5b20fda22237e14b40c64e12e606607b77f316c1a4dc2e0" name="libsoftokn3" arch="x86_64">
  <version epoch="0" ver="3.90.1" rel="150400.3.35.2"/>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
</package>
<package pkgid="8cc7d7572bd8a0b878e9b42b6f0c55067bc96e2c1c22eb712f157a6ba4a9e1cb" name="libsoftokn3" arch="aarch64">
  <version epoch="0" ver="3.90.2" rel="150400.3.39.1"/>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
</package>
<package pkgid="a1389297f6c276d335fbbd7e3cb947e5e46efeca64b7efe6503f958e4f92aa34" name="libsoftokn3" arch="s390x">
  <version epoch="0" ver="3.90.2" rel="150400.3.39.1"/>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
</package>
<package pkgid="04001384cdf5103853f227b4688935e338c3755ecd7c2b564afbd0d0e5970f36" name="libsoftokn3" arch="x86_64">
  <version epoch="0" ver="3.90.2" rel="150400.3.39.1"/>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
</package>
<package pkgid="cf829c93297e2b56c7ee5c741d6646d665e73d5c613ef85bb14098af5e4602ff" name="libsolv" arch="src">
  <version epoch="0" ver="0.7.27" rel="150400.3.11.2"/>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
</package>
<package pkgid="5e1bdb996ba450c01addfeace7e8cba826c1e3bbdffaee7528ef06de8a4b90dd" name="libsolv" arch="src">
  <version epoch="0" ver="0.7.28" rel="150400.3.16.2"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
  <changelog author="mls@suse.de" date="1706270400">- build for multiple python versions [jsc#PED-6218]
- bump version to 0.7.28</changelog>
</package>
<package pkgid="27aa4ee9d94546d757d798ecff306962baf47ca06ea4196a4e26e60668d1ed50" name="libsolv" arch="src">
  <version epoch="0" ver="0.7.29" rel="150400.3.22.4"/>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
  <changelog author="mls@suse.de" date="1706270400">- build for multiple python versions [jsc#PED-6218]
- bump version to 0.7.28</changelog>
  <changelog author="dmueller@suse.com" date="1713787200">- split libsolv-tools into libsolv-tools-base [jsc#PED-8153]</changelog>
  <changelog author="mls@suse.de" date="1714478400">- improve updating of installed multiversion packages
- fix decision introspection going into an endless loop in some
  cases
- added experimental lua bindings
- bump version to 0.7.29</changelog>
  <changelog author="mls@suse.de" date="1717761600">- add a conflict to older libsolv-tools to libsolv-tools-base</changelog>
</package>
<package pkgid="b5fd07af853f5a4837a3e0866acf5301e424f55bd7e77bda0bcf3edb03ddb08d" name="libsolv" arch="src">
  <version epoch="0" ver="0.7.30" rel="150400.3.27.2"/>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
  <changelog author="mls@suse.de" date="1706270400">- build for multiple python versions [jsc#PED-6218]
- bump version to 0.7.28</changelog>
  <changelog author="dmueller@suse.com" date="1713787200">- split libsolv-tools into libsolv-tools-base [jsc#PED-8153]</changelog>
  <changelog author="mls@suse.de" date="1714478400">- improve updating of installed multiversion packages
- fix decision introspection going into an endless loop in some
  cases
- added experimental lua bindings
- bump version to 0.7.29</changelog>
  <changelog author="mls@suse.de" date="1717761600">- add a conflict to older libsolv-tools to libsolv-tools-base
- report unsupported compression in solv_xfopen() with errno
- fix return value of repodata.add_solv() in the bindings
- fix SHA-224 oid in solv_pgpvrfy</changelog>
  <changelog author="mls@suse.de" date="1720699200">- removed dependency on external find program in the repo2solv tool
- bindings: fix return value of repodata.add_solv()
- new SOLVER_FLAG_FOCUS_NEW flag
- bump version to 0.7.30</changelog>
</package>
<package pkgid="4f0852d9b9ff48741c3da8d7b44bad8f672de52f5eb3156210b8a4a675e76bb0" name="libsolv-tools" arch="aarch64">
  <version epoch="0" ver="0.7.27" rel="150400.3.11.2"/>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
</package>
<package pkgid="aa4364228ebbb4754410bdf9060636b46c0e26162d70cd97cfef17fcca981fd6" name="libsolv-tools" arch="s390x">
  <version epoch="0" ver="0.7.27" rel="150400.3.11.2"/>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
</package>
<package pkgid="98f58c71f9032133705c17ee474ac35a66a4280de77df4b9ae70f5322e82f534" name="libsolv-tools" arch="x86_64">
  <version epoch="0" ver="0.7.27" rel="150400.3.11.2"/>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
</package>
<package pkgid="c590fc076bd5c11e879b6e7498752ee67a83b5b7994ff20dd142035ccb763885" name="libsolv-tools" arch="aarch64">
  <version epoch="0" ver="0.7.28" rel="150400.3.16.2"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
  <changelog author="mls@suse.de" date="1706270400">- build for multiple python versions [jsc#PED-6218]
- bump version to 0.7.28</changelog>
</package>
<package pkgid="407d260d012f8f84cf1ab51689c7d16a5da553e368fc31f72a4a45dcc7bdbbab" name="libsolv-tools" arch="s390x">
  <version epoch="0" ver="0.7.28" rel="150400.3.16.2"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
  <changelog author="mls@suse.de" date="1706270400">- build for multiple python versions [jsc#PED-6218]
- bump version to 0.7.28</changelog>
</package>
<package pkgid="5ae410f51c1b21a2b7ff385e932f9b9495fa3ead3cd744dc6a91b6b697bea7b8" name="libsolv-tools" arch="x86_64">
  <version epoch="0" ver="0.7.28" rel="150400.3.16.2"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
  <changelog author="mls@suse.de" date="1706270400">- build for multiple python versions [jsc#PED-6218]
- bump version to 0.7.28</changelog>
</package>
<package pkgid="7d48ee629286b5eed2bb43a3977ac0e6b2eeda7d685b1c7ba7b738e1a26a6060" name="libsolv-tools" arch="aarch64">
  <version epoch="0" ver="0.7.29" rel="150400.3.22.4"/>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
  <changelog author="mls@suse.de" date="1706270400">- build for multiple python versions [jsc#PED-6218]
- bump version to 0.7.28</changelog>
  <changelog author="dmueller@suse.com" date="1713787200">- split libsolv-tools into libsolv-tools-base [jsc#PED-8153]</changelog>
  <changelog author="mls@suse.de" date="1714478400">- improve updating of installed multiversion packages
- fix decision introspection going into an endless loop in some
  cases
- added experimental lua bindings
- bump version to 0.7.29</changelog>
  <changelog author="mls@suse.de" date="1717761600">- add a conflict to older libsolv-tools to libsolv-tools-base</changelog>
</package>
<package pkgid="c8f962a80b11113dd9b7cc6a42b4bb86527e58a142b759d9156343a0b87f2a76" name="libsolv-tools" arch="s390x">
  <version epoch="0" ver="0.7.29" rel="150400.3.22.4"/>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
  <changelog author="mls@suse.de" date="1706270400">- build for multiple python versions [jsc#PED-6218]
- bump version to 0.7.28</changelog>
  <changelog author="dmueller@suse.com" date="1713787200">- split libsolv-tools into libsolv-tools-base [jsc#PED-8153]</changelog>
  <changelog author="mls@suse.de" date="1714478400">- improve updating of installed multiversion packages
- fix decision introspection going into an endless loop in some
  cases
- added experimental lua bindings
- bump version to 0.7.29</changelog>
  <changelog author="mls@suse.de" date="1717761600">- add a conflict to older libsolv-tools to libsolv-tools-base</changelog>
</package>
<package pkgid="032edfba80c4095845a4f9e24e5e5b45cf962f5fa402975644757876707dfbf4" name="libsolv-tools" arch="x86_64">
  <version epoch="0" ver="0.7.29" rel="150400.3.22.4"/>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
  <changelog author="mls@suse.de" date="1706270400">- build for multiple python versions [jsc#PED-6218]
- bump version to 0.7.28</changelog>
  <changelog author="dmueller@suse.com" date="1713787200">- split libsolv-tools into libsolv-tools-base [jsc#PED-8153]</changelog>
  <changelog author="mls@suse.de" date="1714478400">- improve updating of installed multiversion packages
- fix decision introspection going into an endless loop in some
  cases
- added experimental lua bindings
- bump version to 0.7.29</changelog>
  <changelog author="mls@suse.de" date="1717761600">- add a conflict to older libsolv-tools to libsolv-tools-base</changelog>
</package>
<package pkgid="46eb94dac6f46acc26d1e3803360aafdec9977a9b7b33ad503fd24be11c8cea8" name="libsolv-tools" arch="aarch64">
  <version epoch="0" ver="0.7.30" rel="150400.3.27.2"/>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
  <changelog author="mls@suse.de" date="1706270400">- build for multiple python versions [jsc#PED-6218]
- bump version to 0.7.28</changelog>
  <changelog author="dmueller@suse.com" date="1713787200">- split libsolv-tools into libsolv-tools-base [jsc#PED-8153]</changelog>
  <changelog author="mls@suse.de" date="1714478400">- improve updating of installed multiversion packages
- fix decision introspection going into an endless loop in some
  cases
- added experimental lua bindings
- bump version to 0.7.29</changelog>
  <changelog author="mls@suse.de" date="1717761600">- add a conflict to older libsolv-tools to libsolv-tools-base
- report unsupported compression in solv_xfopen() with errno
- fix return value of repodata.add_solv() in the bindings
- fix SHA-224 oid in solv_pgpvrfy</changelog>
  <changelog author="mls@suse.de" date="1720699200">- removed dependency on external find program in the repo2solv tool
- bindings: fix return value of repodata.add_solv()
- new SOLVER_FLAG_FOCUS_NEW flag
- bump version to 0.7.30</changelog>
</package>
<package pkgid="0c82d0d39425228a5df05a1bd5f418d4589b2a377ce08454e936490797ba0c3e" name="libsolv-tools" arch="s390x">
  <version epoch="0" ver="0.7.30" rel="150400.3.27.2"/>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
  <changelog author="mls@suse.de" date="1706270400">- build for multiple python versions [jsc#PED-6218]
- bump version to 0.7.28</changelog>
  <changelog author="dmueller@suse.com" date="1713787200">- split libsolv-tools into libsolv-tools-base [jsc#PED-8153]</changelog>
  <changelog author="mls@suse.de" date="1714478400">- improve updating of installed multiversion packages
- fix decision introspection going into an endless loop in some
  cases
- added experimental lua bindings
- bump version to 0.7.29</changelog>
  <changelog author="mls@suse.de" date="1717761600">- add a conflict to older libsolv-tools to libsolv-tools-base
- report unsupported compression in solv_xfopen() with errno
- fix return value of repodata.add_solv() in the bindings
- fix SHA-224 oid in solv_pgpvrfy</changelog>
  <changelog author="mls@suse.de" date="1720699200">- removed dependency on external find program in the repo2solv tool
- bindings: fix return value of repodata.add_solv()
- new SOLVER_FLAG_FOCUS_NEW flag
- bump version to 0.7.30</changelog>
</package>
<package pkgid="335653ad5dfcfdd79ffd61b4f39943233b13dfae78b0c036b2c359e37283bfd3" name="libsolv-tools" arch="x86_64">
  <version epoch="0" ver="0.7.30" rel="150400.3.27.2"/>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
  <changelog author="mls@suse.de" date="1706270400">- build for multiple python versions [jsc#PED-6218]
- bump version to 0.7.28</changelog>
  <changelog author="dmueller@suse.com" date="1713787200">- split libsolv-tools into libsolv-tools-base [jsc#PED-8153]</changelog>
  <changelog author="mls@suse.de" date="1714478400">- improve updating of installed multiversion packages
- fix decision introspection going into an endless loop in some
  cases
- added experimental lua bindings
- bump version to 0.7.29</changelog>
  <changelog author="mls@suse.de" date="1717761600">- add a conflict to older libsolv-tools to libsolv-tools-base
- report unsupported compression in solv_xfopen() with errno
- fix return value of repodata.add_solv() in the bindings
- fix SHA-224 oid in solv_pgpvrfy</changelog>
  <changelog author="mls@suse.de" date="1720699200">- removed dependency on external find program in the repo2solv tool
- bindings: fix return value of repodata.add_solv()
- new SOLVER_FLAG_FOCUS_NEW flag
- bump version to 0.7.30</changelog>
</package>
<package pkgid="eacea36d2fc71887bc7c0c1f17f3fcdb98b8778b8d3984ff6072ed584aee1199" name="libsolv-tools-base" arch="aarch64">
  <version epoch="0" ver="0.7.29" rel="150400.3.22.4"/>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
  <changelog author="mls@suse.de" date="1706270400">- build for multiple python versions [jsc#PED-6218]
- bump version to 0.7.28</changelog>
  <changelog author="dmueller@suse.com" date="1713787200">- split libsolv-tools into libsolv-tools-base [jsc#PED-8153]</changelog>
  <changelog author="mls@suse.de" date="1714478400">- improve updating of installed multiversion packages
- fix decision introspection going into an endless loop in some
  cases
- added experimental lua bindings
- bump version to 0.7.29</changelog>
  <changelog author="mls@suse.de" date="1717761600">- add a conflict to older libsolv-tools to libsolv-tools-base</changelog>
</package>
<package pkgid="f06f374914008e726bfabce9cc39b2108032e011543eed97fe1a0d3b3aff39c5" name="libsolv-tools-base" arch="ppc64le">
  <version epoch="0" ver="0.7.29" rel="150400.3.22.4"/>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
  <changelog author="mls@suse.de" date="1706270400">- build for multiple python versions [jsc#PED-6218]
- bump version to 0.7.28</changelog>
  <changelog author="dmueller@suse.com" date="1713787200">- split libsolv-tools into libsolv-tools-base [jsc#PED-8153]</changelog>
  <changelog author="mls@suse.de" date="1714478400">- improve updating of installed multiversion packages
- fix decision introspection going into an endless loop in some
  cases
- added experimental lua bindings
- bump version to 0.7.29</changelog>
  <changelog author="mls@suse.de" date="1717761600">- add a conflict to older libsolv-tools to libsolv-tools-base</changelog>
</package>
<package pkgid="b3585c94d787021c1a6a5f8a09d9a7076590d83f220b6b96aa414550514960cf" name="libsolv-tools-base" arch="s390x">
  <version epoch="0" ver="0.7.29" rel="150400.3.22.4"/>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
  <changelog author="mls@suse.de" date="1706270400">- build for multiple python versions [jsc#PED-6218]
- bump version to 0.7.28</changelog>
  <changelog author="dmueller@suse.com" date="1713787200">- split libsolv-tools into libsolv-tools-base [jsc#PED-8153]</changelog>
  <changelog author="mls@suse.de" date="1714478400">- improve updating of installed multiversion packages
- fix decision introspection going into an endless loop in some
  cases
- added experimental lua bindings
- bump version to 0.7.29</changelog>
  <changelog author="mls@suse.de" date="1717761600">- add a conflict to older libsolv-tools to libsolv-tools-base</changelog>
</package>
<package pkgid="e0154507cc2d728a2671f6978128ebc835db72fb7a97aa218d01adfd38865a97" name="libsolv-tools-base" arch="x86_64">
  <version epoch="0" ver="0.7.29" rel="150400.3.22.4"/>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
  <changelog author="mls@suse.de" date="1706270400">- build for multiple python versions [jsc#PED-6218]
- bump version to 0.7.28</changelog>
  <changelog author="dmueller@suse.com" date="1713787200">- split libsolv-tools into libsolv-tools-base [jsc#PED-8153]</changelog>
  <changelog author="mls@suse.de" date="1714478400">- improve updating of installed multiversion packages
- fix decision introspection going into an endless loop in some
  cases
- added experimental lua bindings
- bump version to 0.7.29</changelog>
  <changelog author="mls@suse.de" date="1717761600">- add a conflict to older libsolv-tools to libsolv-tools-base</changelog>
</package>
<package pkgid="3de09ffe875633132b17607e013424e434c8c3635ab25fd621950363327ddee0" name="libsolv-tools-base" arch="aarch64">
  <version epoch="0" ver="0.7.30" rel="150400.3.27.2"/>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
  <changelog author="mls@suse.de" date="1706270400">- build for multiple python versions [jsc#PED-6218]
- bump version to 0.7.28</changelog>
  <changelog author="dmueller@suse.com" date="1713787200">- split libsolv-tools into libsolv-tools-base [jsc#PED-8153]</changelog>
  <changelog author="mls@suse.de" date="1714478400">- improve updating of installed multiversion packages
- fix decision introspection going into an endless loop in some
  cases
- added experimental lua bindings
- bump version to 0.7.29</changelog>
  <changelog author="mls@suse.de" date="1717761600">- add a conflict to older libsolv-tools to libsolv-tools-base
- report unsupported compression in solv_xfopen() with errno
- fix return value of repodata.add_solv() in the bindings
- fix SHA-224 oid in solv_pgpvrfy</changelog>
  <changelog author="mls@suse.de" date="1720699200">- removed dependency on external find program in the repo2solv tool
- bindings: fix return value of repodata.add_solv()
- new SOLVER_FLAG_FOCUS_NEW flag
- bump version to 0.7.30</changelog>
</package>
<package pkgid="3f53ef9550c09e5ab628dc7c23189d0c40981864bae2e011ab9cbb8e180a91cb" name="libsolv-tools-base" arch="ppc64le">
  <version epoch="0" ver="0.7.30" rel="150400.3.27.2"/>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
  <changelog author="mls@suse.de" date="1706270400">- build for multiple python versions [jsc#PED-6218]
- bump version to 0.7.28</changelog>
  <changelog author="dmueller@suse.com" date="1713787200">- split libsolv-tools into libsolv-tools-base [jsc#PED-8153]</changelog>
  <changelog author="mls@suse.de" date="1714478400">- improve updating of installed multiversion packages
- fix decision introspection going into an endless loop in some
  cases
- added experimental lua bindings
- bump version to 0.7.29</changelog>
  <changelog author="mls@suse.de" date="1717761600">- add a conflict to older libsolv-tools to libsolv-tools-base
- report unsupported compression in solv_xfopen() with errno
- fix return value of repodata.add_solv() in the bindings
- fix SHA-224 oid in solv_pgpvrfy</changelog>
  <changelog author="mls@suse.de" date="1720699200">- removed dependency on external find program in the repo2solv tool
- bindings: fix return value of repodata.add_solv()
- new SOLVER_FLAG_FOCUS_NEW flag
- bump version to 0.7.30</changelog>
</package>
<package pkgid="48cd1d7a627df5e67080d04da94b634690687bbde3d79159de8361728302dbd3" name="libsolv-tools-base" arch="s390x">
  <version epoch="0" ver="0.7.30" rel="150400.3.27.2"/>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
  <changelog author="mls@suse.de" date="1706270400">- build for multiple python versions [jsc#PED-6218]
- bump version to 0.7.28</changelog>
  <changelog author="dmueller@suse.com" date="1713787200">- split libsolv-tools into libsolv-tools-base [jsc#PED-8153]</changelog>
  <changelog author="mls@suse.de" date="1714478400">- improve updating of installed multiversion packages
- fix decision introspection going into an endless loop in some
  cases
- added experimental lua bindings
- bump version to 0.7.29</changelog>
  <changelog author="mls@suse.de" date="1717761600">- add a conflict to older libsolv-tools to libsolv-tools-base
- report unsupported compression in solv_xfopen() with errno
- fix return value of repodata.add_solv() in the bindings
- fix SHA-224 oid in solv_pgpvrfy</changelog>
  <changelog author="mls@suse.de" date="1720699200">- removed dependency on external find program in the repo2solv tool
- bindings: fix return value of repodata.add_solv()
- new SOLVER_FLAG_FOCUS_NEW flag
- bump version to 0.7.30</changelog>
</package>
<package pkgid="adaf473897707959fa5afa6e3287fd215f787657de555865d05438320f1316a3" name="libsolv-tools-base" arch="x86_64">
  <version epoch="0" ver="0.7.30" rel="150400.3.27.2"/>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
  <changelog author="mls@suse.de" date="1706270400">- build for multiple python versions [jsc#PED-6218]
- bump version to 0.7.28</changelog>
  <changelog author="dmueller@suse.com" date="1713787200">- split libsolv-tools into libsolv-tools-base [jsc#PED-8153]</changelog>
  <changelog author="mls@suse.de" date="1714478400">- improve updating of installed multiversion packages
- fix decision introspection going into an endless loop in some
  cases
- added experimental lua bindings
- bump version to 0.7.29</changelog>
  <changelog author="mls@suse.de" date="1717761600">- add a conflict to older libsolv-tools to libsolv-tools-base
- report unsupported compression in solv_xfopen() with errno
- fix return value of repodata.add_solv() in the bindings
- fix SHA-224 oid in solv_pgpvrfy</changelog>
  <changelog author="mls@suse.de" date="1720699200">- removed dependency on external find program in the repo2solv tool
- bindings: fix return value of repodata.add_solv()
- new SOLVER_FLAG_FOCUS_NEW flag
- bump version to 0.7.30</changelog>
</package>
<package pkgid="c8f42c3b8cd99fa476f5118dde44f94f9dd3eb325b5c8b5c2799f8386eeb9d3d" name="libsqlite3-0" arch="aarch64">
  <version epoch="0" ver="3.44.0" rel="150000.3.23.1"/>
  <changelog author="astieger@suse.com" date="1523448000">- update to 3.23.1:
  * Fix two problems in the new LEFT JOIN strength reduction
    optimization
  * Fix misbehavior of the FTS5 xBestIndex method
  * Fix a harmless reference to an uninitialized virtual machine
    register
  * Fix the eval.c extension so that it works with PRAGMA
    empty_result_callbacks=ON
  * Fix the generate_series virtual table so that it correctly
    returns no rows if any of its constraints are NULL
  * Performance enhancements in the parser</changelog>
  <changelog author="max@suse.com" date="1552996800">- CVE-2018-20346, bsc#1119687: Upgrade to the most recent version
  to fix a remote code execution vulnerability in FTS3 (Magellan).
- Drop sqlite-fts5-link.patch and do it in the spec file instead.
- Version 3.27.2:
  * Add the VACUUM INTO command
  * Issue an SQLITE_WARNING message on the error log if a
    double-quoted string literal is used
  * Add the remove_diacritics=2 option to FTS3 and FTS5.
  * Add  the SQLITE_PREPARE_NO_VTAB option to sqlite3_prepare_v3().
    Use that option to prevent circular references to shadow tables
    from causing resource leaks.
  * Enhancements to the sqlite3_deserialize() interface
  * Enhancements to the CLI, mostly to support testing and debugging
    of the SQLite library itself
  * Increased robustness against malicious SQL that is run against
    a maliciously corrupted database
- Version 3.26.0:
  * Optimization: When doing an UPDATE on a table with indexes on
    expressions, do not update the expression indexes if they do
    not refer to any of the columns of the table being updated.
  * Allow the xBestIndex() method of virtual table implementations
    to return SQLITE_CONSTRAINT to indicate that the proposed query
    plan is unusable and should not be given further consideration.
  * Added the SQLITE_DBCONFIG_DEFENSIVE option which disables the
    ability to create corrupt database files using ordinary SQL.
  * Added support for read-only shadow tables when the
    SQLITE_DBCONFIG_DEFENSIVE option is enabled.
  * Added the PRAGMA legacy_alter_table command, which if enabled
    causes the ALTER TABLE command to behave like older version of
    SQLite (prior to version 3.25.0) for compatibility.
  * Added PRAGMA table_xinfo that works just like PRAGMA table_info
    except that it also shows hidden columns in virtual tables.
  * Added the explain virtual table as a run-time loadable
    extension.
  * Add a limit counter to the query planner to prevent excessive
    sqlite3_prepare() times for certain pathological SQL inputs.
  * Added support for the sqlite3_normalized_sql() interface, when
    compiling with SQLITE_ENABLE_NORMALIZE.
  * Enhanced triggers so that they can use table-valued functions
    that exist in schemas other than the schema where the trigger
    is defined.
  * Improvements to the ".help" command in the CLI.
  * The SQLITE_HISTORY environment variable, if it exists,
    specifies the name of the command-line editing history file.
  * The --deserialize option associated with opening a new database
    in the CLI cause the database file to be read into memory and
    accessed using the sqlite3_deserialize() API. This simplifies
    running tests on a database without modifying the file on disk.
- Version 3.25.2:
  * Add the PRAGMA legacy_alter_table=ON command that causes the
    "ALTER TABLE RENAME" command to behave as in 3.24.0 and earlier
  * Fix issue with some expressions with windows functions in views
- Version 3.25.1:
  * Avoid false-positive error checks on ALTER TABLE
  * Further ORDER BY LIMIT optimization fixes for window functions
- Version 3.25.0:
  * Add support for window functions
  * Add support for renaming columns within a table
  * Query optimizer improvements
  * slightly better concurrency in multi-threaded environments
  * The ORDER BY LIMIT optimization might have caused an infinite
    loop in the byte code of the prepared statement under very
    obscure circumstances, due to a confluence of minor defects in
    the query optimizer
- Version 3.24.0:
  * Add support for PostgreSQL-style UPSERT
  * Add support for auxiliary columns in r-tree tables
  * Add C-language APIs for discovering SQL keywords used by SQLite
  * Add C-language APIs for dynamic strings based on sqlite3_str
  * Enhance ALTER TABLE so that it recognizes "true" and "false" as
    valid arguments to DEFAULT
  * Add the sorter-reference optimization as a compile-time option
  * Improve the format of the EXPLAIN QUERY PLAN raw output, so that
  it gives better information about the query plan and about the
    relationships between the various components of the plan
  * Added the SQLITE_DBCONFIG_RESET_DATABASE option to the
    sqlite3_db_config() API.
  * Automatically intercept the raw EXPLAIN QUERY PLAN output an
    reformat it into an ASCII-art graph.
  * Lines that begin with "#" and that are not in the middle of an
    SQL statement are interpreted as comments
  * Add the --append option to the ".backup" command
  * Add the ".dbconfig" command
  * various performance improvements
  * various bug fixes</changelog>
  <changelog author="max@suse.com" date="1555502400">- Upgrade to 3.28.0:
  * CVE-2019-9936, bsc#1130326: running fts5 prefix queries inside
    a transaction could trigger a heap-based buffer over-read.
  * CVE-2019-9937, bsc#1130325: interleaving reads and writes in a
    single transaction with an fts5 virtual table will lead to a
    NULL Pointer Dereference.
  * Enhanced window functions
  * Enhanced VACUUM INTO so that it works for read-only databases.
  * New query optimizations.
  * Added the sqlite3_value_frombind() API for determining if the
    argument to an SQL function is from a bound parameter.
  * Security and compatibilities enhancements to fts3_tokenizer().
  * Improved robustness against corrupt database files.</changelog>
  <changelog author="max@suse.com" date="1568116800">- bsc#1150137, CVE-2019-16168, sqlite3-CVE-2019-16168.patch:
  Improper validation of qlite_stat1 sz field leads to division by
  zero.</changelog>
  <changelog author="max@suse.com" date="1625054400">- Sync version 3.36.0 from Factory to implement jsc#SLE-16032.
- Obsoletes sqlite3-CVE-2019-16168.patch.
- The following CVEs have been fixed in upstream releases up to
  this point, but were not mentioned in the change log so far:
  * bsc#1173641, CVE-2020-15358: heap-based buffer overflow in
    multiSelectOrderBy due to mishandling of query-flattener
    optimization
  * bsc#1164719, CVE-2020-9327: NULL pointer dereference and
    segmentation fault because of generated column optimizations in
    isAuxiliaryVtabOperator
  * bsc#1160439, CVE-2019-20218: selectExpander in select.c proceeds
    with WITH stack unwinding even after a parsing error
  * bsc#1160438, CVE-2019-19959: memory-management error via
    ext/misc/zipfile.c involving embedded '\0' input
  * bsc#1160309, CVE-2019-19923: improper handling  of  certain uses
    of SELECT DISTINCT in flattenSubquery may lead to null pointer
    dereference
  * bsc#1159850, CVE-2019-19924: improper error handling in
    sqlite3WindowRewrite()
  * bsc#1159847, CVE-2019-19925: improper handling of NULL pathname
    during an update of a ZIP archive
  * bsc#1159715, CVE-2019-19926: improper handling  of certain
    errors during parsing  multiSelect in select.c
  * bsc#1159491, CVE-2019-19880: exprListAppendList in window.c
    allows attackers to trigger an invalid pointer dereference
  * bsc#1158960, CVE-2019-19603: during handling of CREATE TABLE
    and CREATE VIEW statements, does not consider confusion with
    a shadow table name
  * bsc#1158959, CVE-2019-19646: pragma.c mishandles NOT NULL in an
    integrity_check PRAGMA command in certain cases of generated
    columns
  * bsc#1158958, CVE-2019-19645: alter.c allows attackers to trigger
    infinite recursion via certain types of self-referential views
    in conjunction with ALTER TABLE statements
  * bsc#1158812, CVE-2019-19317: lookupName in resolve.c omits bits
    from the colUsed bitmask in the case of a generated column,
    which allows attackers to cause a denial of service
  * bsc#1157818, CVE-2019-19244: sqlite3,sqlite2,sqlite: The
    function sqlite3Select in select.c allows a crash if a
    sub-select uses both DISTINCT and window functions, and also
    has certain ORDER BY usage
  * bsc#928701, CVE-2015-3415: sqlite3VdbeExec comparison operator
    vulnerability
  * bsc#928700, CVE-2015-3414: sqlite3,sqlite2: dequoting of
    collation-sequence names
  * CVE-2020-13434 boo#1172115: integer overflow in
    sqlite3_str_vappendf
  * CVE-2020-13630 boo#1172234: use-after-free in fts3EvalNextRow
  * CVE-2020-13631 boo#1172236: virtual table allowed to be renamed
    to one of its shadow tables
  * CVE-2020-13632 boo#1172240: NULL pointer dereference via
    crafted matchinfo() query
  * CVE-2020-13435: Malicious SQL statements could have crashed the
    process that is running SQLite (boo#1172091)</changelog>
  <changelog author="max@suse.com" date="1638273600">- SQLite3 3.37.0:
  * STRICT tables provide a prescriptive style of data type
    management, for developers who prefer that kind of thing.
  * When adding columns that contain a CHECK constraint or a
    generated column containing a NOT NULL constraint, the
    ALTER TABLE ADD COLUMN now checks new constraints against
    preexisting rows in the database and will only proceed if no
    constraints are violated.
  * Added the PRAGMA table_list statement.
  * Add the .connection command, allowing the CLI to keep multiple
    database connections open at the same time.
  * Add the --safe command-line option that disables dot-commands
    and SQL statements that might cause side-effects that extend
    beyond the single database file named on the command-line.
  * CLI: Performance improvements when reading SQL statements that
    span many lines.
  * Added the sqlite3_autovacuum_pages() interface.
  * The sqlite3_deserialize() does not and has never worked
    for the TEMP database. That limitation is now noted in the
    documentation.
  * The query planner now omits ORDER BY clauses on subqueries and
    views if removing those clauses does not change the semantics
    of the query.
  * The generate_series table-valued function extension is modified
    so that the first parameter ("START") is now required. This is
    done as a way to demonstrate how to write table-valued
    functions with required parameters. The legacy behavior is
    available using the -DZERO_ARGUMENT_GENERATE_SERIES
    compile-time option.
  * Added new sqlite3_changes64() and sqlite3_total_changes64()
    interfaces.
  * Added the SQLITE_OPEN_EXRESCODE flag option to sqlite3_open_v2().
  * Use less memory to hold the database schema.
  * bsc#1189802, CVE-2021-36690: Fix an issue with the SQLite Expert
    extension when a column has no collating sequence.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1641124800">- update to 3.37.1:
  * Fix a bug introduced by the UPSERT enhancements of version
    3.35.0 that can cause incorrect byte-code to be generated for
    some obscure but valid SQL, possibly resulting in a NULL-
    pointer dereference.
  * Fix an OOB read that can occur in FTS5 when reading corrupt
    database files.
  * Improved robustness of the --safe option in the CLI.
  * Other minor fixes to assert() statements and test cases.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1641988800">- update to 3.37.2:
  * Fix a bug introduced in version 3.35.0 (2021-03-12) that can
    cause database corruption if a SAVEPOINT is rolled back while
    in PRAGMA temp_store=MEMORY mode, and other changes are made,
    and then the outer transaction commits
  * Fix a long-standing problem with ON DELETE CASCADE and ON
    UPDATE CASCADE in which a cache of the bytecode used to
    implement the cascading change was not being reset following a
    local DDL change</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1645876800">- update to 3.38.0
  * Add the -&gt; and -&gt;&gt; operators for easier processing of JSON
  * The JSON functions are now built-ins
  * Enhancements to date and time functions
  * Rename the printf() SQL function to format() for better
    compatibility, with alias for backwards compatibility.
  * Add the sqlite3_error_offset() interface for helping localize
    an SQL error to a specific character in the input SQL text
  * Enhance the interface to virtual tables
  * CLI columnar output modes are enhanced to correctly handle tabs
    and newlines embedded in text, and add options like "--wrap N",
    "--wordwrap on", and "--quote" to the columnar output modes.
  * Query planner enhancements using a Bloom filter to speed up
    large analytic queries, and a balanced merge tree to evaluate
    UNION or UNION ALL compound SELECT statements that have an
    ORDER BY clause.
  * The ALTER TABLE statement is changed to silently ignores
    entries in the sqlite_schema table that do not parse when
    PRAGMA writable_schema=ON</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1647172800">- update to 3.38.1:
  * Fix problems with the new Bloom filter optimization that might
    cause some obscure queries to get an incorrect answer.
  * Fix the localtime modifier of the date and time functions so
    that it preserves fractional seconds.
  * Fix the sqlite_offset SQL function so that it works correctly
    even in corner cases such as when the argument is a virtual
    column or the column of a view.
  * Fix row value IN operator constraints on virtual tables so that
    they work correctly even if the virtual table implementation
    relies on bytecode to filter rows that do not satisfy the
    constraint.
  * Other minor fixes to assert() statements, test cases, and
    documentation. See the source code timeline for details.
- add upstream patch to run atof1 tests only on x86_64
  sqlite-src-3380100-atof1.patch</changelog>
  <changelog author="max@suse.com" date="1647432000">- Remove obsolete configure flags
- Package the Tcl bindings here again so that we only ship one copy
  of SQLite (bsc#1195773).</changelog>
  <changelog author="max@suse.com" date="1648555200">- update to 3.38.2:
  * Fix a problem with the Bloom filter optimization that might
    cause an incorrect answer when doing a LEFT JOIN with a WHERE
    clause constraint that says that one of the columns on the
    right table of the LEFT JOIN is NULL.
  * Other minor patches.</changelog>
  <changelog author="info@paolostivanin.com" date="1651147200">- update to 3.38.3:
  * Fix a case of the query planner be overly aggressive with
    optimizing automatic-index and Bloom-filter construction,
    using inappropriate ON clause terms to restrict the size of the
    automatic-index or Bloom filter, and resulting in missing rows
    in the output.
  * Other minor patches. See the timeline for details.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1652011200">- update to 3.38.5:
  * Fix a blunder in the CLI of the 3.38.4 release
- includes changes from 3.38.4:
  * fix a byte-code problem in the Bloom filter pull-down
    optimization added by release 3.38.0 in which an error in the
    byte code causes the byte code engine to enter an infinite loop
    when the pull-down optimization encounters a NULL key</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1656676800">- update to 3.39.0:
  * Add (long overdue) support for RIGHT and FULL OUTER JOIN
  * Add new binary comparison operators IS NOT DISTINCT FROM and
    IS DISTINCT FROM that are equivalent to IS and IS NOT,
    respective, for compatibility with PostgreSQL and SQL standards
  * Add a new return code (value "3") from the sqlite3_vtab_distinct()
    interface that indicates a query that has both DISTINCT and
    ORDER BY clauses
  * Added the sqlite3_db_name() interface
  * The unix os interface resolves all symbolic links in database
    filenames to create a canonical name for the database before
    the file is opened
  * Defer materializing views until the materialization is actually
    needed, thus avoiding unnecessary work if the materialization
    turns out to never be used
  * The HAVING clause of a SELECT statement is now allowed on any
    aggregate query, even queries that do not have a GROUP BY
    clause
  * Many microoptimizations collectively reduce CPU cycles by about
    2.3%.
- drop sqlite-src-3380100-atof1.patch, included upstream
- add sqlite-src-3390000-func7-pg-181.patch to skip float precision
  related test failures on 32 bit</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1657886400">- update to 3.39.1:
  * Fix an incorrect result from a query that uses a view that
    contains a compound SELECT in which only one arm contains a
    RIGHT JOIN and where the view is not the first FROM clause term
    of the query that contains the view
  * Fix a long-standing problem with ALTER TABLE RENAME that can
    only arise if the sqlite3_limit(SQLITE_LIMIT_SQL_LENGTH) is set
    to a very small value.
  * Fix a long-standing problem in FTS3 that can only arise when
    compiled with the SQLITE_ENABLE_FTS3_PARENTHESIS compile-time
    option.
  * Fix the initial-prefix optimization for the REGEXP extension so
    that it works correctly even if the prefix contains characters
    that require a 3-byte UTF8 encoding.
  * Enhance the sqlite_stmt virtual table so that it buffers all of
    its output.</changelog>
  <changelog author="max@suse.com" date="1658404800">- update to 3.39.2:
  * Fix a performance regression in the query planner associated
    with rearranging the order of FROM clause terms in the
    presences of a LEFT JOIN.
  * Apply fixes for CVE-2022-35737, Chromium bugs 1343348 and
    1345947, forum post 3607259d3c, and other minor problems
    discovered by internal testing. [boo#1201783]</changelog>
  <changelog author="max@suse.com" date="1662379200">- update to 3.39.3:
  * Use a statement journal on DML statement affecting two or more
    database rows if the statement makes use of a SQL functions
    that might abort.
  * Use a mutex to protect the PRAGMA temp_store_directory and
    PRAGMA data_store_directory statements, even though they are
    decremented and documented as not being threadsafe.</changelog>
  <changelog author="max@suse.com" date="1670932800">- bsc#1206337, CVE-2022-46908, sqlite-CVE-2022-46908.patch:
  relying on --safe for execution of an untrusted CLI script</changelog>
  <changelog author="max@suse.com" date="1700481600">- Sync version 3.44.0 from Factory
  * Fixes bsc#1210660, CVE-2023-2137: Heap buffer overflow
  * sqlite3-rtree-i686.patch: temporary build fix for 32-bit x86.
  * Obsoletes sqlite-CVE-2022-46908.patch
  * Obsoletes sqlite-src-3390000-func7-pg-181.patch</changelog>
</package>
<package pkgid="50c5018e9bf269b5a33e397723ff50e05b51cb3b879f142680c93c228c5aa03b" name="libsqlite3-0" arch="s390x">
  <version epoch="0" ver="3.44.0" rel="150000.3.23.1"/>
  <changelog author="astieger@suse.com" date="1523448000">- update to 3.23.1:
  * Fix two problems in the new LEFT JOIN strength reduction
    optimization
  * Fix misbehavior of the FTS5 xBestIndex method
  * Fix a harmless reference to an uninitialized virtual machine
    register
  * Fix the eval.c extension so that it works with PRAGMA
    empty_result_callbacks=ON
  * Fix the generate_series virtual table so that it correctly
    returns no rows if any of its constraints are NULL
  * Performance enhancements in the parser</changelog>
  <changelog author="max@suse.com" date="1552996800">- CVE-2018-20346, bsc#1119687: Upgrade to the most recent version
  to fix a remote code execution vulnerability in FTS3 (Magellan).
- Drop sqlite-fts5-link.patch and do it in the spec file instead.
- Version 3.27.2:
  * Add the VACUUM INTO command
  * Issue an SQLITE_WARNING message on the error log if a
    double-quoted string literal is used
  * Add the remove_diacritics=2 option to FTS3 and FTS5.
  * Add  the SQLITE_PREPARE_NO_VTAB option to sqlite3_prepare_v3().
    Use that option to prevent circular references to shadow tables
    from causing resource leaks.
  * Enhancements to the sqlite3_deserialize() interface
  * Enhancements to the CLI, mostly to support testing and debugging
    of the SQLite library itself
  * Increased robustness against malicious SQL that is run against
    a maliciously corrupted database
- Version 3.26.0:
  * Optimization: When doing an UPDATE on a table with indexes on
    expressions, do not update the expression indexes if they do
    not refer to any of the columns of the table being updated.
  * Allow the xBestIndex() method of virtual table implementations
    to return SQLITE_CONSTRAINT to indicate that the proposed query
    plan is unusable and should not be given further consideration.
  * Added the SQLITE_DBCONFIG_DEFENSIVE option which disables the
    ability to create corrupt database files using ordinary SQL.
  * Added support for read-only shadow tables when the
    SQLITE_DBCONFIG_DEFENSIVE option is enabled.
  * Added the PRAGMA legacy_alter_table command, which if enabled
    causes the ALTER TABLE command to behave like older version of
    SQLite (prior to version 3.25.0) for compatibility.
  * Added PRAGMA table_xinfo that works just like PRAGMA table_info
    except that it also shows hidden columns in virtual tables.
  * Added the explain virtual table as a run-time loadable
    extension.
  * Add a limit counter to the query planner to prevent excessive
    sqlite3_prepare() times for certain pathological SQL inputs.
  * Added support for the sqlite3_normalized_sql() interface, when
    compiling with SQLITE_ENABLE_NORMALIZE.
  * Enhanced triggers so that they can use table-valued functions
    that exist in schemas other than the schema where the trigger
    is defined.
  * Improvements to the ".help" command in the CLI.
  * The SQLITE_HISTORY environment variable, if it exists,
    specifies the name of the command-line editing history file.
  * The --deserialize option associated with opening a new database
    in the CLI cause the database file to be read into memory and
    accessed using the sqlite3_deserialize() API. This simplifies
    running tests on a database without modifying the file on disk.
- Version 3.25.2:
  * Add the PRAGMA legacy_alter_table=ON command that causes the
    "ALTER TABLE RENAME" command to behave as in 3.24.0 and earlier
  * Fix issue with some expressions with windows functions in views
- Version 3.25.1:
  * Avoid false-positive error checks on ALTER TABLE
  * Further ORDER BY LIMIT optimization fixes for window functions
- Version 3.25.0:
  * Add support for window functions
  * Add support for renaming columns within a table
  * Query optimizer improvements
  * slightly better concurrency in multi-threaded environments
  * The ORDER BY LIMIT optimization might have caused an infinite
    loop in the byte code of the prepared statement under very
    obscure circumstances, due to a confluence of minor defects in
    the query optimizer
- Version 3.24.0:
  * Add support for PostgreSQL-style UPSERT
  * Add support for auxiliary columns in r-tree tables
  * Add C-language APIs for discovering SQL keywords used by SQLite
  * Add C-language APIs for dynamic strings based on sqlite3_str
  * Enhance ALTER TABLE so that it recognizes "true" and "false" as
    valid arguments to DEFAULT
  * Add the sorter-reference optimization as a compile-time option
  * Improve the format of the EXPLAIN QUERY PLAN raw output, so that
  it gives better information about the query plan and about the
    relationships between the various components of the plan
  * Added the SQLITE_DBCONFIG_RESET_DATABASE option to the
    sqlite3_db_config() API.
  * Automatically intercept the raw EXPLAIN QUERY PLAN output an
    reformat it into an ASCII-art graph.
  * Lines that begin with "#" and that are not in the middle of an
    SQL statement are interpreted as comments
  * Add the --append option to the ".backup" command
  * Add the ".dbconfig" command
  * various performance improvements
  * various bug fixes</changelog>
  <changelog author="max@suse.com" date="1555502400">- Upgrade to 3.28.0:
  * CVE-2019-9936, bsc#1130326: running fts5 prefix queries inside
    a transaction could trigger a heap-based buffer over-read.
  * CVE-2019-9937, bsc#1130325: interleaving reads and writes in a
    single transaction with an fts5 virtual table will lead to a
    NULL Pointer Dereference.
  * Enhanced window functions
  * Enhanced VACUUM INTO so that it works for read-only databases.
  * New query optimizations.
  * Added the sqlite3_value_frombind() API for determining if the
    argument to an SQL function is from a bound parameter.
  * Security and compatibilities enhancements to fts3_tokenizer().
  * Improved robustness against corrupt database files.</changelog>
  <changelog author="max@suse.com" date="1568116800">- bsc#1150137, CVE-2019-16168, sqlite3-CVE-2019-16168.patch:
  Improper validation of qlite_stat1 sz field leads to division by
  zero.</changelog>
  <changelog author="max@suse.com" date="1625054400">- Sync version 3.36.0 from Factory to implement jsc#SLE-16032.
- Obsoletes sqlite3-CVE-2019-16168.patch.
- The following CVEs have been fixed in upstream releases up to
  this point, but were not mentioned in the change log so far:
  * bsc#1173641, CVE-2020-15358: heap-based buffer overflow in
    multiSelectOrderBy due to mishandling of query-flattener
    optimization
  * bsc#1164719, CVE-2020-9327: NULL pointer dereference and
    segmentation fault because of generated column optimizations in
    isAuxiliaryVtabOperator
  * bsc#1160439, CVE-2019-20218: selectExpander in select.c proceeds
    with WITH stack unwinding even after a parsing error
  * bsc#1160438, CVE-2019-19959: memory-management error via
    ext/misc/zipfile.c involving embedded '\0' input
  * bsc#1160309, CVE-2019-19923: improper handling  of  certain uses
    of SELECT DISTINCT in flattenSubquery may lead to null pointer
    dereference
  * bsc#1159850, CVE-2019-19924: improper error handling in
    sqlite3WindowRewrite()
  * bsc#1159847, CVE-2019-19925: improper handling of NULL pathname
    during an update of a ZIP archive
  * bsc#1159715, CVE-2019-19926: improper handling  of certain
    errors during parsing  multiSelect in select.c
  * bsc#1159491, CVE-2019-19880: exprListAppendList in window.c
    allows attackers to trigger an invalid pointer dereference
  * bsc#1158960, CVE-2019-19603: during handling of CREATE TABLE
    and CREATE VIEW statements, does not consider confusion with
    a shadow table name
  * bsc#1158959, CVE-2019-19646: pragma.c mishandles NOT NULL in an
    integrity_check PRAGMA command in certain cases of generated
    columns
  * bsc#1158958, CVE-2019-19645: alter.c allows attackers to trigger
    infinite recursion via certain types of self-referential views
    in conjunction with ALTER TABLE statements
  * bsc#1158812, CVE-2019-19317: lookupName in resolve.c omits bits
    from the colUsed bitmask in the case of a generated column,
    which allows attackers to cause a denial of service
  * bsc#1157818, CVE-2019-19244: sqlite3,sqlite2,sqlite: The
    function sqlite3Select in select.c allows a crash if a
    sub-select uses both DISTINCT and window functions, and also
    has certain ORDER BY usage
  * bsc#928701, CVE-2015-3415: sqlite3VdbeExec comparison operator
    vulnerability
  * bsc#928700, CVE-2015-3414: sqlite3,sqlite2: dequoting of
    collation-sequence names
  * CVE-2020-13434 boo#1172115: integer overflow in
    sqlite3_str_vappendf
  * CVE-2020-13630 boo#1172234: use-after-free in fts3EvalNextRow
  * CVE-2020-13631 boo#1172236: virtual table allowed to be renamed
    to one of its shadow tables
  * CVE-2020-13632 boo#1172240: NULL pointer dereference via
    crafted matchinfo() query
  * CVE-2020-13435: Malicious SQL statements could have crashed the
    process that is running SQLite (boo#1172091)</changelog>
  <changelog author="max@suse.com" date="1638273600">- SQLite3 3.37.0:
  * STRICT tables provide a prescriptive style of data type
    management, for developers who prefer that kind of thing.
  * When adding columns that contain a CHECK constraint or a
    generated column containing a NOT NULL constraint, the
    ALTER TABLE ADD COLUMN now checks new constraints against
    preexisting rows in the database and will only proceed if no
    constraints are violated.
  * Added the PRAGMA table_list statement.
  * Add the .connection command, allowing the CLI to keep multiple
    database connections open at the same time.
  * Add the --safe command-line option that disables dot-commands
    and SQL statements that might cause side-effects that extend
    beyond the single database file named on the command-line.
  * CLI: Performance improvements when reading SQL statements that
    span many lines.
  * Added the sqlite3_autovacuum_pages() interface.
  * The sqlite3_deserialize() does not and has never worked
    for the TEMP database. That limitation is now noted in the
    documentation.
  * The query planner now omits ORDER BY clauses on subqueries and
    views if removing those clauses does not change the semantics
    of the query.
  * The generate_series table-valued function extension is modified
    so that the first parameter ("START") is now required. This is
    done as a way to demonstrate how to write table-valued
    functions with required parameters. The legacy behavior is
    available using the -DZERO_ARGUMENT_GENERATE_SERIES
    compile-time option.
  * Added new sqlite3_changes64() and sqlite3_total_changes64()
    interfaces.
  * Added the SQLITE_OPEN_EXRESCODE flag option to sqlite3_open_v2().
  * Use less memory to hold the database schema.
  * bsc#1189802, CVE-2021-36690: Fix an issue with the SQLite Expert
    extension when a column has no collating sequence.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1641124800">- update to 3.37.1:
  * Fix a bug introduced by the UPSERT enhancements of version
    3.35.0 that can cause incorrect byte-code to be generated for
    some obscure but valid SQL, possibly resulting in a NULL-
    pointer dereference.
  * Fix an OOB read that can occur in FTS5 when reading corrupt
    database files.
  * Improved robustness of the --safe option in the CLI.
  * Other minor fixes to assert() statements and test cases.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1641988800">- update to 3.37.2:
  * Fix a bug introduced in version 3.35.0 (2021-03-12) that can
    cause database corruption if a SAVEPOINT is rolled back while
    in PRAGMA temp_store=MEMORY mode, and other changes are made,
    and then the outer transaction commits
  * Fix a long-standing problem with ON DELETE CASCADE and ON
    UPDATE CASCADE in which a cache of the bytecode used to
    implement the cascading change was not being reset following a
    local DDL change</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1645876800">- update to 3.38.0
  * Add the -&gt; and -&gt;&gt; operators for easier processing of JSON
  * The JSON functions are now built-ins
  * Enhancements to date and time functions
  * Rename the printf() SQL function to format() for better
    compatibility, with alias for backwards compatibility.
  * Add the sqlite3_error_offset() interface for helping localize
    an SQL error to a specific character in the input SQL text
  * Enhance the interface to virtual tables
  * CLI columnar output modes are enhanced to correctly handle tabs
    and newlines embedded in text, and add options like "--wrap N",
    "--wordwrap on", and "--quote" to the columnar output modes.
  * Query planner enhancements using a Bloom filter to speed up
    large analytic queries, and a balanced merge tree to evaluate
    UNION or UNION ALL compound SELECT statements that have an
    ORDER BY clause.
  * The ALTER TABLE statement is changed to silently ignores
    entries in the sqlite_schema table that do not parse when
    PRAGMA writable_schema=ON</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1647172800">- update to 3.38.1:
  * Fix problems with the new Bloom filter optimization that might
    cause some obscure queries to get an incorrect answer.
  * Fix the localtime modifier of the date and time functions so
    that it preserves fractional seconds.
  * Fix the sqlite_offset SQL function so that it works correctly
    even in corner cases such as when the argument is a virtual
    column or the column of a view.
  * Fix row value IN operator constraints on virtual tables so that
    they work correctly even if the virtual table implementation
    relies on bytecode to filter rows that do not satisfy the
    constraint.
  * Other minor fixes to assert() statements, test cases, and
    documentation. See the source code timeline for details.
- add upstream patch to run atof1 tests only on x86_64
  sqlite-src-3380100-atof1.patch</changelog>
  <changelog author="max@suse.com" date="1647432000">- Remove obsolete configure flags
- Package the Tcl bindings here again so that we only ship one copy
  of SQLite (bsc#1195773).</changelog>
  <changelog author="max@suse.com" date="1648555200">- update to 3.38.2:
  * Fix a problem with the Bloom filter optimization that might
    cause an incorrect answer when doing a LEFT JOIN with a WHERE
    clause constraint that says that one of the columns on the
    right table of the LEFT JOIN is NULL.
  * Other minor patches.</changelog>
  <changelog author="info@paolostivanin.com" date="1651147200">- update to 3.38.3:
  * Fix a case of the query planner be overly aggressive with
    optimizing automatic-index and Bloom-filter construction,
    using inappropriate ON clause terms to restrict the size of the
    automatic-index or Bloom filter, and resulting in missing rows
    in the output.
  * Other minor patches. See the timeline for details.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1652011200">- update to 3.38.5:
  * Fix a blunder in the CLI of the 3.38.4 release
- includes changes from 3.38.4:
  * fix a byte-code problem in the Bloom filter pull-down
    optimization added by release 3.38.0 in which an error in the
    byte code causes the byte code engine to enter an infinite loop
    when the pull-down optimization encounters a NULL key</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1656676800">- update to 3.39.0:
  * Add (long overdue) support for RIGHT and FULL OUTER JOIN
  * Add new binary comparison operators IS NOT DISTINCT FROM and
    IS DISTINCT FROM that are equivalent to IS and IS NOT,
    respective, for compatibility with PostgreSQL and SQL standards
  * Add a new return code (value "3") from the sqlite3_vtab_distinct()
    interface that indicates a query that has both DISTINCT and
    ORDER BY clauses
  * Added the sqlite3_db_name() interface
  * The unix os interface resolves all symbolic links in database
    filenames to create a canonical name for the database before
    the file is opened
  * Defer materializing views until the materialization is actually
    needed, thus avoiding unnecessary work if the materialization
    turns out to never be used
  * The HAVING clause of a SELECT statement is now allowed on any
    aggregate query, even queries that do not have a GROUP BY
    clause
  * Many microoptimizations collectively reduce CPU cycles by about
    2.3%.
- drop sqlite-src-3380100-atof1.patch, included upstream
- add sqlite-src-3390000-func7-pg-181.patch to skip float precision
  related test failures on 32 bit</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1657886400">- update to 3.39.1:
  * Fix an incorrect result from a query that uses a view that
    contains a compound SELECT in which only one arm contains a
    RIGHT JOIN and where the view is not the first FROM clause term
    of the query that contains the view
  * Fix a long-standing problem with ALTER TABLE RENAME that can
    only arise if the sqlite3_limit(SQLITE_LIMIT_SQL_LENGTH) is set
    to a very small value.
  * Fix a long-standing problem in FTS3 that can only arise when
    compiled with the SQLITE_ENABLE_FTS3_PARENTHESIS compile-time
    option.
  * Fix the initial-prefix optimization for the REGEXP extension so
    that it works correctly even if the prefix contains characters
    that require a 3-byte UTF8 encoding.
  * Enhance the sqlite_stmt virtual table so that it buffers all of
    its output.</changelog>
  <changelog author="max@suse.com" date="1658404800">- update to 3.39.2:
  * Fix a performance regression in the query planner associated
    with rearranging the order of FROM clause terms in the
    presences of a LEFT JOIN.
  * Apply fixes for CVE-2022-35737, Chromium bugs 1343348 and
    1345947, forum post 3607259d3c, and other minor problems
    discovered by internal testing. [boo#1201783]</changelog>
  <changelog author="max@suse.com" date="1662379200">- update to 3.39.3:
  * Use a statement journal on DML statement affecting two or more
    database rows if the statement makes use of a SQL functions
    that might abort.
  * Use a mutex to protect the PRAGMA temp_store_directory and
    PRAGMA data_store_directory statements, even though they are
    decremented and documented as not being threadsafe.</changelog>
  <changelog author="max@suse.com" date="1670932800">- bsc#1206337, CVE-2022-46908, sqlite-CVE-2022-46908.patch:
  relying on --safe for execution of an untrusted CLI script</changelog>
  <changelog author="max@suse.com" date="1700481600">- Sync version 3.44.0 from Factory
  * Fixes bsc#1210660, CVE-2023-2137: Heap buffer overflow
  * sqlite3-rtree-i686.patch: temporary build fix for 32-bit x86.
  * Obsoletes sqlite-CVE-2022-46908.patch
  * Obsoletes sqlite-src-3390000-func7-pg-181.patch</changelog>
</package>
<package pkgid="58729b4c3252f5a5dd9567356397b0df83c604d8ba8c462ae34821f5e00691fa" name="libsqlite3-0" arch="x86_64">
  <version epoch="0" ver="3.44.0" rel="150000.3.23.1"/>
  <changelog author="astieger@suse.com" date="1523448000">- update to 3.23.1:
  * Fix two problems in the new LEFT JOIN strength reduction
    optimization
  * Fix misbehavior of the FTS5 xBestIndex method
  * Fix a harmless reference to an uninitialized virtual machine
    register
  * Fix the eval.c extension so that it works with PRAGMA
    empty_result_callbacks=ON
  * Fix the generate_series virtual table so that it correctly
    returns no rows if any of its constraints are NULL
  * Performance enhancements in the parser</changelog>
  <changelog author="max@suse.com" date="1552996800">- CVE-2018-20346, bsc#1119687: Upgrade to the most recent version
  to fix a remote code execution vulnerability in FTS3 (Magellan).
- Drop sqlite-fts5-link.patch and do it in the spec file instead.
- Version 3.27.2:
  * Add the VACUUM INTO command
  * Issue an SQLITE_WARNING message on the error log if a
    double-quoted string literal is used
  * Add the remove_diacritics=2 option to FTS3 and FTS5.
  * Add  the SQLITE_PREPARE_NO_VTAB option to sqlite3_prepare_v3().
    Use that option to prevent circular references to shadow tables
    from causing resource leaks.
  * Enhancements to the sqlite3_deserialize() interface
  * Enhancements to the CLI, mostly to support testing and debugging
    of the SQLite library itself
  * Increased robustness against malicious SQL that is run against
    a maliciously corrupted database
- Version 3.26.0:
  * Optimization: When doing an UPDATE on a table with indexes on
    expressions, do not update the expression indexes if they do
    not refer to any of the columns of the table being updated.
  * Allow the xBestIndex() method of virtual table implementations
    to return SQLITE_CONSTRAINT to indicate that the proposed query
    plan is unusable and should not be given further consideration.
  * Added the SQLITE_DBCONFIG_DEFENSIVE option which disables the
    ability to create corrupt database files using ordinary SQL.
  * Added support for read-only shadow tables when the
    SQLITE_DBCONFIG_DEFENSIVE option is enabled.
  * Added the PRAGMA legacy_alter_table command, which if enabled
    causes the ALTER TABLE command to behave like older version of
    SQLite (prior to version 3.25.0) for compatibility.
  * Added PRAGMA table_xinfo that works just like PRAGMA table_info
    except that it also shows hidden columns in virtual tables.
  * Added the explain virtual table as a run-time loadable
    extension.
  * Add a limit counter to the query planner to prevent excessive
    sqlite3_prepare() times for certain pathological SQL inputs.
  * Added support for the sqlite3_normalized_sql() interface, when
    compiling with SQLITE_ENABLE_NORMALIZE.
  * Enhanced triggers so that they can use table-valued functions
    that exist in schemas other than the schema where the trigger
    is defined.
  * Improvements to the ".help" command in the CLI.
  * The SQLITE_HISTORY environment variable, if it exists,
    specifies the name of the command-line editing history file.
  * The --deserialize option associated with opening a new database
    in the CLI cause the database file to be read into memory and
    accessed using the sqlite3_deserialize() API. This simplifies
    running tests on a database without modifying the file on disk.
- Version 3.25.2:
  * Add the PRAGMA legacy_alter_table=ON command that causes the
    "ALTER TABLE RENAME" command to behave as in 3.24.0 and earlier
  * Fix issue with some expressions with windows functions in views
- Version 3.25.1:
  * Avoid false-positive error checks on ALTER TABLE
  * Further ORDER BY LIMIT optimization fixes for window functions
- Version 3.25.0:
  * Add support for window functions
  * Add support for renaming columns within a table
  * Query optimizer improvements
  * slightly better concurrency in multi-threaded environments
  * The ORDER BY LIMIT optimization might have caused an infinite
    loop in the byte code of the prepared statement under very
    obscure circumstances, due to a confluence of minor defects in
    the query optimizer
- Version 3.24.0:
  * Add support for PostgreSQL-style UPSERT
  * Add support for auxiliary columns in r-tree tables
  * Add C-language APIs for discovering SQL keywords used by SQLite
  * Add C-language APIs for dynamic strings based on sqlite3_str
  * Enhance ALTER TABLE so that it recognizes "true" and "false" as
    valid arguments to DEFAULT
  * Add the sorter-reference optimization as a compile-time option
  * Improve the format of the EXPLAIN QUERY PLAN raw output, so that
  it gives better information about the query plan and about the
    relationships between the various components of the plan
  * Added the SQLITE_DBCONFIG_RESET_DATABASE option to the
    sqlite3_db_config() API.
  * Automatically intercept the raw EXPLAIN QUERY PLAN output an
    reformat it into an ASCII-art graph.
  * Lines that begin with "#" and that are not in the middle of an
    SQL statement are interpreted as comments
  * Add the --append option to the ".backup" command
  * Add the ".dbconfig" command
  * various performance improvements
  * various bug fixes</changelog>
  <changelog author="max@suse.com" date="1555502400">- Upgrade to 3.28.0:
  * CVE-2019-9936, bsc#1130326: running fts5 prefix queries inside
    a transaction could trigger a heap-based buffer over-read.
  * CVE-2019-9937, bsc#1130325: interleaving reads and writes in a
    single transaction with an fts5 virtual table will lead to a
    NULL Pointer Dereference.
  * Enhanced window functions
  * Enhanced VACUUM INTO so that it works for read-only databases.
  * New query optimizations.
  * Added the sqlite3_value_frombind() API for determining if the
    argument to an SQL function is from a bound parameter.
  * Security and compatibilities enhancements to fts3_tokenizer().
  * Improved robustness against corrupt database files.</changelog>
  <changelog author="max@suse.com" date="1568116800">- bsc#1150137, CVE-2019-16168, sqlite3-CVE-2019-16168.patch:
  Improper validation of qlite_stat1 sz field leads to division by
  zero.</changelog>
  <changelog author="max@suse.com" date="1625054400">- Sync version 3.36.0 from Factory to implement jsc#SLE-16032.
- Obsoletes sqlite3-CVE-2019-16168.patch.
- The following CVEs have been fixed in upstream releases up to
  this point, but were not mentioned in the change log so far:
  * bsc#1173641, CVE-2020-15358: heap-based buffer overflow in
    multiSelectOrderBy due to mishandling of query-flattener
    optimization
  * bsc#1164719, CVE-2020-9327: NULL pointer dereference and
    segmentation fault because of generated column optimizations in
    isAuxiliaryVtabOperator
  * bsc#1160439, CVE-2019-20218: selectExpander in select.c proceeds
    with WITH stack unwinding even after a parsing error
  * bsc#1160438, CVE-2019-19959: memory-management error via
    ext/misc/zipfile.c involving embedded '\0' input
  * bsc#1160309, CVE-2019-19923: improper handling  of  certain uses
    of SELECT DISTINCT in flattenSubquery may lead to null pointer
    dereference
  * bsc#1159850, CVE-2019-19924: improper error handling in
    sqlite3WindowRewrite()
  * bsc#1159847, CVE-2019-19925: improper handling of NULL pathname
    during an update of a ZIP archive
  * bsc#1159715, CVE-2019-19926: improper handling  of certain
    errors during parsing  multiSelect in select.c
  * bsc#1159491, CVE-2019-19880: exprListAppendList in window.c
    allows attackers to trigger an invalid pointer dereference
  * bsc#1158960, CVE-2019-19603: during handling of CREATE TABLE
    and CREATE VIEW statements, does not consider confusion with
    a shadow table name
  * bsc#1158959, CVE-2019-19646: pragma.c mishandles NOT NULL in an
    integrity_check PRAGMA command in certain cases of generated
    columns
  * bsc#1158958, CVE-2019-19645: alter.c allows attackers to trigger
    infinite recursion via certain types of self-referential views
    in conjunction with ALTER TABLE statements
  * bsc#1158812, CVE-2019-19317: lookupName in resolve.c omits bits
    from the colUsed bitmask in the case of a generated column,
    which allows attackers to cause a denial of service
  * bsc#1157818, CVE-2019-19244: sqlite3,sqlite2,sqlite: The
    function sqlite3Select in select.c allows a crash if a
    sub-select uses both DISTINCT and window functions, and also
    has certain ORDER BY usage
  * bsc#928701, CVE-2015-3415: sqlite3VdbeExec comparison operator
    vulnerability
  * bsc#928700, CVE-2015-3414: sqlite3,sqlite2: dequoting of
    collation-sequence names
  * CVE-2020-13434 boo#1172115: integer overflow in
    sqlite3_str_vappendf
  * CVE-2020-13630 boo#1172234: use-after-free in fts3EvalNextRow
  * CVE-2020-13631 boo#1172236: virtual table allowed to be renamed
    to one of its shadow tables
  * CVE-2020-13632 boo#1172240: NULL pointer dereference via
    crafted matchinfo() query
  * CVE-2020-13435: Malicious SQL statements could have crashed the
    process that is running SQLite (boo#1172091)</changelog>
  <changelog author="max@suse.com" date="1638273600">- SQLite3 3.37.0:
  * STRICT tables provide a prescriptive style of data type
    management, for developers who prefer that kind of thing.
  * When adding columns that contain a CHECK constraint or a
    generated column containing a NOT NULL constraint, the
    ALTER TABLE ADD COLUMN now checks new constraints against
    preexisting rows in the database and will only proceed if no
    constraints are violated.
  * Added the PRAGMA table_list statement.
  * Add the .connection command, allowing the CLI to keep multiple
    database connections open at the same time.
  * Add the --safe command-line option that disables dot-commands
    and SQL statements that might cause side-effects that extend
    beyond the single database file named on the command-line.
  * CLI: Performance improvements when reading SQL statements that
    span many lines.
  * Added the sqlite3_autovacuum_pages() interface.
  * The sqlite3_deserialize() does not and has never worked
    for the TEMP database. That limitation is now noted in the
    documentation.
  * The query planner now omits ORDER BY clauses on subqueries and
    views if removing those clauses does not change the semantics
    of the query.
  * The generate_series table-valued function extension is modified
    so that the first parameter ("START") is now required. This is
    done as a way to demonstrate how to write table-valued
    functions with required parameters. The legacy behavior is
    available using the -DZERO_ARGUMENT_GENERATE_SERIES
    compile-time option.
  * Added new sqlite3_changes64() and sqlite3_total_changes64()
    interfaces.
  * Added the SQLITE_OPEN_EXRESCODE flag option to sqlite3_open_v2().
  * Use less memory to hold the database schema.
  * bsc#1189802, CVE-2021-36690: Fix an issue with the SQLite Expert
    extension when a column has no collating sequence.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1641124800">- update to 3.37.1:
  * Fix a bug introduced by the UPSERT enhancements of version
    3.35.0 that can cause incorrect byte-code to be generated for
    some obscure but valid SQL, possibly resulting in a NULL-
    pointer dereference.
  * Fix an OOB read that can occur in FTS5 when reading corrupt
    database files.
  * Improved robustness of the --safe option in the CLI.
  * Other minor fixes to assert() statements and test cases.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1641988800">- update to 3.37.2:
  * Fix a bug introduced in version 3.35.0 (2021-03-12) that can
    cause database corruption if a SAVEPOINT is rolled back while
    in PRAGMA temp_store=MEMORY mode, and other changes are made,
    and then the outer transaction commits
  * Fix a long-standing problem with ON DELETE CASCADE and ON
    UPDATE CASCADE in which a cache of the bytecode used to
    implement the cascading change was not being reset following a
    local DDL change</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1645876800">- update to 3.38.0
  * Add the -&gt; and -&gt;&gt; operators for easier processing of JSON
  * The JSON functions are now built-ins
  * Enhancements to date and time functions
  * Rename the printf() SQL function to format() for better
    compatibility, with alias for backwards compatibility.
  * Add the sqlite3_error_offset() interface for helping localize
    an SQL error to a specific character in the input SQL text
  * Enhance the interface to virtual tables
  * CLI columnar output modes are enhanced to correctly handle tabs
    and newlines embedded in text, and add options like "--wrap N",
    "--wordwrap on", and "--quote" to the columnar output modes.
  * Query planner enhancements using a Bloom filter to speed up
    large analytic queries, and a balanced merge tree to evaluate
    UNION or UNION ALL compound SELECT statements that have an
    ORDER BY clause.
  * The ALTER TABLE statement is changed to silently ignores
    entries in the sqlite_schema table that do not parse when
    PRAGMA writable_schema=ON</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1647172800">- update to 3.38.1:
  * Fix problems with the new Bloom filter optimization that might
    cause some obscure queries to get an incorrect answer.
  * Fix the localtime modifier of the date and time functions so
    that it preserves fractional seconds.
  * Fix the sqlite_offset SQL function so that it works correctly
    even in corner cases such as when the argument is a virtual
    column or the column of a view.
  * Fix row value IN operator constraints on virtual tables so that
    they work correctly even if the virtual table implementation
    relies on bytecode to filter rows that do not satisfy the
    constraint.
  * Other minor fixes to assert() statements, test cases, and
    documentation. See the source code timeline for details.
- add upstream patch to run atof1 tests only on x86_64
  sqlite-src-3380100-atof1.patch</changelog>
  <changelog author="max@suse.com" date="1647432000">- Remove obsolete configure flags
- Package the Tcl bindings here again so that we only ship one copy
  of SQLite (bsc#1195773).</changelog>
  <changelog author="max@suse.com" date="1648555200">- update to 3.38.2:
  * Fix a problem with the Bloom filter optimization that might
    cause an incorrect answer when doing a LEFT JOIN with a WHERE
    clause constraint that says that one of the columns on the
    right table of the LEFT JOIN is NULL.
  * Other minor patches.</changelog>
  <changelog author="info@paolostivanin.com" date="1651147200">- update to 3.38.3:
  * Fix a case of the query planner be overly aggressive with
    optimizing automatic-index and Bloom-filter construction,
    using inappropriate ON clause terms to restrict the size of the
    automatic-index or Bloom filter, and resulting in missing rows
    in the output.
  * Other minor patches. See the timeline for details.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1652011200">- update to 3.38.5:
  * Fix a blunder in the CLI of the 3.38.4 release
- includes changes from 3.38.4:
  * fix a byte-code problem in the Bloom filter pull-down
    optimization added by release 3.38.0 in which an error in the
    byte code causes the byte code engine to enter an infinite loop
    when the pull-down optimization encounters a NULL key</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1656676800">- update to 3.39.0:
  * Add (long overdue) support for RIGHT and FULL OUTER JOIN
  * Add new binary comparison operators IS NOT DISTINCT FROM and
    IS DISTINCT FROM that are equivalent to IS and IS NOT,
    respective, for compatibility with PostgreSQL and SQL standards
  * Add a new return code (value "3") from the sqlite3_vtab_distinct()
    interface that indicates a query that has both DISTINCT and
    ORDER BY clauses
  * Added the sqlite3_db_name() interface
  * The unix os interface resolves all symbolic links in database
    filenames to create a canonical name for the database before
    the file is opened
  * Defer materializing views until the materialization is actually
    needed, thus avoiding unnecessary work if the materialization
    turns out to never be used
  * The HAVING clause of a SELECT statement is now allowed on any
    aggregate query, even queries that do not have a GROUP BY
    clause
  * Many microoptimizations collectively reduce CPU cycles by about
    2.3%.
- drop sqlite-src-3380100-atof1.patch, included upstream
- add sqlite-src-3390000-func7-pg-181.patch to skip float precision
  related test failures on 32 bit</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1657886400">- update to 3.39.1:
  * Fix an incorrect result from a query that uses a view that
    contains a compound SELECT in which only one arm contains a
    RIGHT JOIN and where the view is not the first FROM clause term
    of the query that contains the view
  * Fix a long-standing problem with ALTER TABLE RENAME that can
    only arise if the sqlite3_limit(SQLITE_LIMIT_SQL_LENGTH) is set
    to a very small value.
  * Fix a long-standing problem in FTS3 that can only arise when
    compiled with the SQLITE_ENABLE_FTS3_PARENTHESIS compile-time
    option.
  * Fix the initial-prefix optimization for the REGEXP extension so
    that it works correctly even if the prefix contains characters
    that require a 3-byte UTF8 encoding.
  * Enhance the sqlite_stmt virtual table so that it buffers all of
    its output.</changelog>
  <changelog author="max@suse.com" date="1658404800">- update to 3.39.2:
  * Fix a performance regression in the query planner associated
    with rearranging the order of FROM clause terms in the
    presences of a LEFT JOIN.
  * Apply fixes for CVE-2022-35737, Chromium bugs 1343348 and
    1345947, forum post 3607259d3c, and other minor problems
    discovered by internal testing. [boo#1201783]</changelog>
  <changelog author="max@suse.com" date="1662379200">- update to 3.39.3:
  * Use a statement journal on DML statement affecting two or more
    database rows if the statement makes use of a SQL functions
    that might abort.
  * Use a mutex to protect the PRAGMA temp_store_directory and
    PRAGMA data_store_directory statements, even though they are
    decremented and documented as not being threadsafe.</changelog>
  <changelog author="max@suse.com" date="1670932800">- bsc#1206337, CVE-2022-46908, sqlite-CVE-2022-46908.patch:
  relying on --safe for execution of an untrusted CLI script</changelog>
  <changelog author="max@suse.com" date="1700481600">- Sync version 3.44.0 from Factory
  * Fixes bsc#1210660, CVE-2023-2137: Heap buffer overflow
  * sqlite3-rtree-i686.patch: temporary build fix for 32-bit x86.
  * Obsoletes sqlite-CVE-2022-46908.patch
  * Obsoletes sqlite-src-3390000-func7-pg-181.patch</changelog>
</package>
<package pkgid="fbcb7305c6a953eb83e53734a25adb86ca18e63c2a4be99d3071a2fb6e9f5a02" name="libssh" arch="src">
  <version epoch="0" ver="0.9.8" rel="150400.3.3.1"/>
  <changelog author="asn@cryptomilk.org" date="1540814400">- Update to version 0.8.5
  * Added support to get known_hosts locations with ssh_options_get()
  * Fixed preferred algorithm for known hosts negotiations
  * Fixed KEX with some server implementations (e.g. Cisco)
  * Fixed issues with MSVC
  * Fixed keyboard-interactive auth in server mode
    (regression from CVE-2018-10933)
  * Fixed gssapi auth in server mode (regression from CVE-2018-10933)
  * Fixed socket fd handling with proxy command
  * Fixed a memory leak with OpenSSL</changelog>
  <changelog author="asn@cryptomilk.org" date="1546171200">- Update to version 0.8.6
  * Fixed compilation issues with different OpenSSL versions
  * Fixed StrictHostKeyChecking in new knownhosts API
  * Fixed ssh_send_keepalive() with packet filter
  * Fixed possible crash with knownhosts options
  * Fixed issus with rekeying
  * Fixed strong ECDSA keys
  * Fixed some issues with rsa-sha2 extentions
  * Fixed access violation in ssh_init() (static linking)
  * Fixed ssh_channel_close() handling</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1546948800">- Added the tests in a multiple build description file *test* to
  break the cycle for cmocka, curl, doxygen and libssh.</changelog>
  <changelog author="tchvatal@suse.com" date="1549886400">- Drop doxygen from dependencies to avoid buildcycle
  * the documentation is available online anyway for anyone to
    consume and consult http://api.libssh.org</changelog>
  <changelog author="asn@cryptomilk.org" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
</package>
<package pkgid="2037512b729cae9bdba217cc6e48f11f5997915b1216084394ec32289370b132" name="libssh" arch="src">
  <version epoch="0" ver="0.9.8" rel="150400.3.6.1"/>
  <changelog author="asn@cryptomilk.org" date="1546171200">- Update to version 0.8.6
  * Fixed compilation issues with different OpenSSL versions
  * Fixed StrictHostKeyChecking in new knownhosts API
  * Fixed ssh_send_keepalive() with packet filter
  * Fixed possible crash with knownhosts options
  * Fixed issus with rekeying
  * Fixed strong ECDSA keys
  * Fixed some issues with rsa-sha2 extentions
  * Fixed access violation in ssh_init() (static linking)
  * Fixed ssh_channel_close() handling</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1546948800">- Added the tests in a multiple build description file *test* to
  break the cycle for cmocka, curl, doxygen and libssh.</changelog>
  <changelog author="tchvatal@suse.com" date="1549886400">- Drop doxygen from dependencies to avoid buildcycle
  * the documentation is available online anyway for anyone to
    consume and consult http://api.libssh.org</changelog>
  <changelog author="asn@cryptomilk.org" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
  <changelog author="adam.majer@suse.de" date="1709208000">- Fix regression parsing IPv6 addresses provided as hostname (bsc#1220385)
  * Added libssh-fix-ipv6-hostname-regression.patch</changelog>
</package>
<package pkgid="29ab8d3cd43c5643966f137070dd26cfe0d958691e0094a7657b84089a39a4ff" name="libssh-config" arch="aarch64">
  <version epoch="0" ver="0.9.8" rel="150400.3.3.1"/>
  <changelog author="asn@cryptomilk.org" date="1540814400">- Update to version 0.8.5
  * Added support to get known_hosts locations with ssh_options_get()
  * Fixed preferred algorithm for known hosts negotiations
  * Fixed KEX with some server implementations (e.g. Cisco)
  * Fixed issues with MSVC
  * Fixed keyboard-interactive auth in server mode
    (regression from CVE-2018-10933)
  * Fixed gssapi auth in server mode (regression from CVE-2018-10933)
  * Fixed socket fd handling with proxy command
  * Fixed a memory leak with OpenSSL</changelog>
  <changelog author="asn@cryptomilk.org" date="1546171200">- Update to version 0.8.6
  * Fixed compilation issues with different OpenSSL versions
  * Fixed StrictHostKeyChecking in new knownhosts API
  * Fixed ssh_send_keepalive() with packet filter
  * Fixed possible crash with knownhosts options
  * Fixed issus with rekeying
  * Fixed strong ECDSA keys
  * Fixed some issues with rsa-sha2 extentions
  * Fixed access violation in ssh_init() (static linking)
  * Fixed ssh_channel_close() handling</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1546948800">- Added the tests in a multiple build description file *test* to
  break the cycle for cmocka, curl, doxygen and libssh.</changelog>
  <changelog author="tchvatal@suse.com" date="1549886400">- Drop doxygen from dependencies to avoid buildcycle
  * the documentation is available online anyway for anyone to
    consume and consult http://api.libssh.org</changelog>
  <changelog author="asn@cryptomilk.org" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
</package>
<package pkgid="d5f8a412f802010d8e896bb6d47bdc69bca79b476ceb90320693209cd3c335c5" name="libssh-config" arch="s390x">
  <version epoch="0" ver="0.9.8" rel="150400.3.3.1"/>
  <changelog author="asn@cryptomilk.org" date="1540814400">- Update to version 0.8.5
  * Added support to get known_hosts locations with ssh_options_get()
  * Fixed preferred algorithm for known hosts negotiations
  * Fixed KEX with some server implementations (e.g. Cisco)
  * Fixed issues with MSVC
  * Fixed keyboard-interactive auth in server mode
    (regression from CVE-2018-10933)
  * Fixed gssapi auth in server mode (regression from CVE-2018-10933)
  * Fixed socket fd handling with proxy command
  * Fixed a memory leak with OpenSSL</changelog>
  <changelog author="asn@cryptomilk.org" date="1546171200">- Update to version 0.8.6
  * Fixed compilation issues with different OpenSSL versions
  * Fixed StrictHostKeyChecking in new knownhosts API
  * Fixed ssh_send_keepalive() with packet filter
  * Fixed possible crash with knownhosts options
  * Fixed issus with rekeying
  * Fixed strong ECDSA keys
  * Fixed some issues with rsa-sha2 extentions
  * Fixed access violation in ssh_init() (static linking)
  * Fixed ssh_channel_close() handling</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1546948800">- Added the tests in a multiple build description file *test* to
  break the cycle for cmocka, curl, doxygen and libssh.</changelog>
  <changelog author="tchvatal@suse.com" date="1549886400">- Drop doxygen from dependencies to avoid buildcycle
  * the documentation is available online anyway for anyone to
    consume and consult http://api.libssh.org</changelog>
  <changelog author="asn@cryptomilk.org" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
</package>
<package pkgid="f1015a3707a964cf2e1364920fe8d176d18a73670fc6b9e189df752ed4301cdb" name="libssh-config" arch="x86_64">
  <version epoch="0" ver="0.9.8" rel="150400.3.3.1"/>
  <changelog author="asn@cryptomilk.org" date="1540814400">- Update to version 0.8.5
  * Added support to get known_hosts locations with ssh_options_get()
  * Fixed preferred algorithm for known hosts negotiations
  * Fixed KEX with some server implementations (e.g. Cisco)
  * Fixed issues with MSVC
  * Fixed keyboard-interactive auth in server mode
    (regression from CVE-2018-10933)
  * Fixed gssapi auth in server mode (regression from CVE-2018-10933)
  * Fixed socket fd handling with proxy command
  * Fixed a memory leak with OpenSSL</changelog>
  <changelog author="asn@cryptomilk.org" date="1546171200">- Update to version 0.8.6
  * Fixed compilation issues with different OpenSSL versions
  * Fixed StrictHostKeyChecking in new knownhosts API
  * Fixed ssh_send_keepalive() with packet filter
  * Fixed possible crash with knownhosts options
  * Fixed issus with rekeying
  * Fixed strong ECDSA keys
  * Fixed some issues with rsa-sha2 extentions
  * Fixed access violation in ssh_init() (static linking)
  * Fixed ssh_channel_close() handling</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1546948800">- Added the tests in a multiple build description file *test* to
  break the cycle for cmocka, curl, doxygen and libssh.</changelog>
  <changelog author="tchvatal@suse.com" date="1549886400">- Drop doxygen from dependencies to avoid buildcycle
  * the documentation is available online anyway for anyone to
    consume and consult http://api.libssh.org</changelog>
  <changelog author="asn@cryptomilk.org" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
</package>
<package pkgid="4bfb34d9bcfcd16a4427af030614b5607c1da9f9d272cbc60528eec5b40a12ce" name="libssh-config" arch="aarch64">
  <version epoch="0" ver="0.9.8" rel="150400.3.6.1"/>
  <changelog author="asn@cryptomilk.org" date="1546171200">- Update to version 0.8.6
  * Fixed compilation issues with different OpenSSL versions
  * Fixed StrictHostKeyChecking in new knownhosts API
  * Fixed ssh_send_keepalive() with packet filter
  * Fixed possible crash with knownhosts options
  * Fixed issus with rekeying
  * Fixed strong ECDSA keys
  * Fixed some issues with rsa-sha2 extentions
  * Fixed access violation in ssh_init() (static linking)
  * Fixed ssh_channel_close() handling</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1546948800">- Added the tests in a multiple build description file *test* to
  break the cycle for cmocka, curl, doxygen and libssh.</changelog>
  <changelog author="tchvatal@suse.com" date="1549886400">- Drop doxygen from dependencies to avoid buildcycle
  * the documentation is available online anyway for anyone to
    consume and consult http://api.libssh.org</changelog>
  <changelog author="asn@cryptomilk.org" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
  <changelog author="adam.majer@suse.de" date="1709208000">- Fix regression parsing IPv6 addresses provided as hostname (bsc#1220385)
  * Added libssh-fix-ipv6-hostname-regression.patch</changelog>
</package>
<package pkgid="c827b3b829bf7104407abbbf709971acc1d660ec9ca9637a67e85206340415b5" name="libssh-config" arch="s390x">
  <version epoch="0" ver="0.9.8" rel="150400.3.6.1"/>
  <changelog author="asn@cryptomilk.org" date="1546171200">- Update to version 0.8.6
  * Fixed compilation issues with different OpenSSL versions
  * Fixed StrictHostKeyChecking in new knownhosts API
  * Fixed ssh_send_keepalive() with packet filter
  * Fixed possible crash with knownhosts options
  * Fixed issus with rekeying
  * Fixed strong ECDSA keys
  * Fixed some issues with rsa-sha2 extentions
  * Fixed access violation in ssh_init() (static linking)
  * Fixed ssh_channel_close() handling</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1546948800">- Added the tests in a multiple build description file *test* to
  break the cycle for cmocka, curl, doxygen and libssh.</changelog>
  <changelog author="tchvatal@suse.com" date="1549886400">- Drop doxygen from dependencies to avoid buildcycle
  * the documentation is available online anyway for anyone to
    consume and consult http://api.libssh.org</changelog>
  <changelog author="asn@cryptomilk.org" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
  <changelog author="adam.majer@suse.de" date="1709208000">- Fix regression parsing IPv6 addresses provided as hostname (bsc#1220385)
  * Added libssh-fix-ipv6-hostname-regression.patch</changelog>
</package>
<package pkgid="adb061595e2ad0178a49e7965ffa22855900c7899c1578e457abd141aaf01f4d" name="libssh-config" arch="x86_64">
  <version epoch="0" ver="0.9.8" rel="150400.3.6.1"/>
  <changelog author="asn@cryptomilk.org" date="1546171200">- Update to version 0.8.6
  * Fixed compilation issues with different OpenSSL versions
  * Fixed StrictHostKeyChecking in new knownhosts API
  * Fixed ssh_send_keepalive() with packet filter
  * Fixed possible crash with knownhosts options
  * Fixed issus with rekeying
  * Fixed strong ECDSA keys
  * Fixed some issues with rsa-sha2 extentions
  * Fixed access violation in ssh_init() (static linking)
  * Fixed ssh_channel_close() handling</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1546948800">- Added the tests in a multiple build description file *test* to
  break the cycle for cmocka, curl, doxygen and libssh.</changelog>
  <changelog author="tchvatal@suse.com" date="1549886400">- Drop doxygen from dependencies to avoid buildcycle
  * the documentation is available online anyway for anyone to
    consume and consult http://api.libssh.org</changelog>
  <changelog author="asn@cryptomilk.org" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
  <changelog author="adam.majer@suse.de" date="1709208000">- Fix regression parsing IPv6 addresses provided as hostname (bsc#1220385)
  * Added libssh-fix-ipv6-hostname-regression.patch</changelog>
</package>
<package pkgid="1f53591e0037846b0a8f935dd0c2ef0a3b60888204ed5037ed38f82bc3449368" name="libssh2-1" arch="aarch64">
  <version epoch="0" ver="1.11.0" rel="150000.4.19.1"/>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695038400">- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]
  * Add the keyring file: libssh2_org.keyring
  * Rebase libssh2-ocloexec.patch
  * Remove libssh2_org-CVE-2020-22218.patch</changelog>
</package>
<package pkgid="eaa68c1cf7161593c0a7bb7e09329652795ad8966935a4c4c1457a5d766469c8" name="libssh2-1" arch="s390x">
  <version epoch="0" ver="1.11.0" rel="150000.4.19.1"/>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695038400">- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]
  * Add the keyring file: libssh2_org.keyring
  * Rebase libssh2-ocloexec.patch
  * Remove libssh2_org-CVE-2020-22218.patch</changelog>
</package>
<package pkgid="291590f6d5e84f8ad50960aa756501984c9fff723159d3533577fcec5735aec6" name="libssh2-1" arch="x86_64">
  <version epoch="0" ver="1.11.0" rel="150000.4.19.1"/>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695038400">- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]
  * Add the keyring file: libssh2_org.keyring
  * Rebase libssh2-ocloexec.patch
  * Remove libssh2_org-CVE-2020-22218.patch</changelog>
</package>
<package pkgid="d50e14381a7e064b8e3751890a541aab546261899f34c6517dd1817d150c4ae8" name="libssh2-1" arch="aarch64">
  <version epoch="0" ver="1.11.0" rel="150000.4.22.1"/>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695038400">- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]
  * Add the keyring file: libssh2_org.keyring
  * Rebase libssh2-ocloexec.patch
  * Remove libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1702987200">- Security fix: [bsc#1218127, CVE-2023-48795]
  * Add 'strict KEX' to fix CVE-2023-48795 "Terrapin Attack"
  * Add libssh2_org-CVE-2023-48795.patch</changelog>
</package>
<package pkgid="f87bfd399827ba6d97f6866325ac1e0824179cf1d82fbb096eacb77959d33f25" name="libssh2-1" arch="s390x">
  <version epoch="0" ver="1.11.0" rel="150000.4.22.1"/>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695038400">- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]
  * Add the keyring file: libssh2_org.keyring
  * Rebase libssh2-ocloexec.patch
  * Remove libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1702987200">- Security fix: [bsc#1218127, CVE-2023-48795]
  * Add 'strict KEX' to fix CVE-2023-48795 "Terrapin Attack"
  * Add libssh2_org-CVE-2023-48795.patch</changelog>
</package>
<package pkgid="758ca4b281efcc174b9555a0e51e8412cb3e4cc1208e73f082c7013799a3b44f" name="libssh2-1" arch="x86_64">
  <version epoch="0" ver="1.11.0" rel="150000.4.22.1"/>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695038400">- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]
  * Add the keyring file: libssh2_org.keyring
  * Rebase libssh2-ocloexec.patch
  * Remove libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1702987200">- Security fix: [bsc#1218127, CVE-2023-48795]
  * Add 'strict KEX' to fix CVE-2023-48795 "Terrapin Attack"
  * Add libssh2_org-CVE-2023-48795.patch</changelog>
</package>
<package pkgid="001cda92ad35a0ffbb129a15d1180d935fcaebfb20790e42e553e0186a0df7cc" name="libssh2-1" arch="aarch64">
  <version epoch="0" ver="1.11.0" rel="150000.4.25.1"/>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695038400">- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]
  * Add the keyring file: libssh2_org.keyring
  * Rebase libssh2-ocloexec.patch
  * Remove libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1702987200">- Security fix: [bsc#1218127, CVE-2023-48795]
  * Add 'strict KEX' to fix CVE-2023-48795 "Terrapin Attack"
  * Add libssh2_org-CVE-2023-48795.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1707480000">- Always add the KEX pseudo-methods "ext-info-c" and "kex-strict-c-v00@openssh.com"
  when configuring custom method list. [bsc#1218971, CVE-2023-48795]
  * The strict-kex extension is announced in the list of available
    KEX methods. However, when the default KEX method list is modified
    or replaced, the extension is not added back automatically.
  * Add libssh2_org-CVE-2023-48795-ext.patch</changelog>
</package>
<package pkgid="c302b3f2983b4e6a96062b1a7fdd64b085ba2109845944f8009f52ef16825c83" name="libssh2-1" arch="s390x">
  <version epoch="0" ver="1.11.0" rel="150000.4.25.1"/>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695038400">- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]
  * Add the keyring file: libssh2_org.keyring
  * Rebase libssh2-ocloexec.patch
  * Remove libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1702987200">- Security fix: [bsc#1218127, CVE-2023-48795]
  * Add 'strict KEX' to fix CVE-2023-48795 "Terrapin Attack"
  * Add libssh2_org-CVE-2023-48795.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1707480000">- Always add the KEX pseudo-methods "ext-info-c" and "kex-strict-c-v00@openssh.com"
  when configuring custom method list. [bsc#1218971, CVE-2023-48795]
  * The strict-kex extension is announced in the list of available
    KEX methods. However, when the default KEX method list is modified
    or replaced, the extension is not added back automatically.
  * Add libssh2_org-CVE-2023-48795-ext.patch</changelog>
</package>
<package pkgid="3098ac9ee81c3447b0c812780bd731e83450709db8db0fc90ee7bc2f7b7181ec" name="libssh2-1" arch="x86_64">
  <version epoch="0" ver="1.11.0" rel="150000.4.25.1"/>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695038400">- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]
  * Add the keyring file: libssh2_org.keyring
  * Rebase libssh2-ocloexec.patch
  * Remove libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1702987200">- Security fix: [bsc#1218127, CVE-2023-48795]
  * Add 'strict KEX' to fix CVE-2023-48795 "Terrapin Attack"
  * Add libssh2_org-CVE-2023-48795.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1707480000">- Always add the KEX pseudo-methods "ext-info-c" and "kex-strict-c-v00@openssh.com"
  when configuring custom method list. [bsc#1218971, CVE-2023-48795]
  * The strict-kex extension is announced in the list of available
    KEX methods. However, when the default KEX method list is modified
    or replaced, the extension is not added back automatically.
  * Add libssh2_org-CVE-2023-48795-ext.patch</changelog>
</package>
<package pkgid="548eaad4eec62da678d17a22aae5b766697b06c9e36e96729e72de9767ad7f1d" name="libssh2-1" arch="aarch64">
  <version epoch="0" ver="1.11.0" rel="150000.4.29.1"/>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695038400">- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]
  * Add the keyring file: libssh2_org.keyring
  * Rebase libssh2-ocloexec.patch
  * Remove libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1702987200">- Security fix: [bsc#1218127, CVE-2023-48795]
  * Add 'strict KEX' to fix CVE-2023-48795 "Terrapin Attack"
  * Add libssh2_org-CVE-2023-48795.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1707480000">- Always add the KEX pseudo-methods "ext-info-c" and "kex-strict-c-v00@openssh.com"
  when configuring custom method list. [bsc#1218971, CVE-2023-48795]
  * The strict-kex extension is announced in the list of available
    KEX methods. However, when the default KEX method list is modified
    or replaced, the extension is not added back automatically.
  * Add libssh2_org-CVE-2023-48795-ext.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712059200">- Fix an issue with Encrypt-then-MAC family. [bsc#1221622]
  * Test the ETM feature in the remote end's configuration when
    receiving data. Upstream issue: #1331.
  * Add libssh2_org-ETM-remote.patch</changelog>
</package>
<package pkgid="e76353067054a537af86fc939b300a97a5734c9713434964f2bfb5039162e0f6" name="libssh2-1" arch="s390x">
  <version epoch="0" ver="1.11.0" rel="150000.4.29.1"/>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695038400">- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]
  * Add the keyring file: libssh2_org.keyring
  * Rebase libssh2-ocloexec.patch
  * Remove libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1702987200">- Security fix: [bsc#1218127, CVE-2023-48795]
  * Add 'strict KEX' to fix CVE-2023-48795 "Terrapin Attack"
  * Add libssh2_org-CVE-2023-48795.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1707480000">- Always add the KEX pseudo-methods "ext-info-c" and "kex-strict-c-v00@openssh.com"
  when configuring custom method list. [bsc#1218971, CVE-2023-48795]
  * The strict-kex extension is announced in the list of available
    KEX methods. However, when the default KEX method list is modified
    or replaced, the extension is not added back automatically.
  * Add libssh2_org-CVE-2023-48795-ext.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712059200">- Fix an issue with Encrypt-then-MAC family. [bsc#1221622]
  * Test the ETM feature in the remote end's configuration when
    receiving data. Upstream issue: #1331.
  * Add libssh2_org-ETM-remote.patch</changelog>
</package>
<package pkgid="54af8b0a58d2baf3152e4b3fdc6aca604fdc3f523c77e7ce8e5ea8a1e0e5a5a9" name="libssh2-1" arch="x86_64">
  <version epoch="0" ver="1.11.0" rel="150000.4.29.1"/>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695038400">- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]
  * Add the keyring file: libssh2_org.keyring
  * Rebase libssh2-ocloexec.patch
  * Remove libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1702987200">- Security fix: [bsc#1218127, CVE-2023-48795]
  * Add 'strict KEX' to fix CVE-2023-48795 "Terrapin Attack"
  * Add libssh2_org-CVE-2023-48795.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1707480000">- Always add the KEX pseudo-methods "ext-info-c" and "kex-strict-c-v00@openssh.com"
  when configuring custom method list. [bsc#1218971, CVE-2023-48795]
  * The strict-kex extension is announced in the list of available
    KEX methods. However, when the default KEX method list is modified
    or replaced, the extension is not added back automatically.
  * Add libssh2_org-CVE-2023-48795-ext.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712059200">- Fix an issue with Encrypt-then-MAC family. [bsc#1221622]
  * Test the ETM feature in the remote end's configuration when
    receiving data. Upstream issue: #1331.
  * Add libssh2_org-ETM-remote.patch</changelog>
</package>
<package pkgid="32e56502586f81117b8653f394fba3e159f7aa27ef50540716c28eb3ffd26ef6" name="libssh2-1" arch="aarch64">
  <version epoch="0" ver="1.11.0" rel="150200.9.2.1"/>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695038400">- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]
  * Add the keyring file: libssh2_org.keyring
  * Rebase libssh2-ocloexec.patch
  * Remove libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1702987200">- Security fix: [bsc#1218127, CVE-2023-48795]
  * Add 'strict KEX' to fix CVE-2023-48795 "Terrapin Attack"
  * Add libssh2_org-CVE-2023-48795.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1707480000">- Always add the KEX pseudo-methods "ext-info-c" and "kex-strict-c-v00@openssh.com"
  when configuring custom method list. [bsc#1218971, CVE-2023-48795]
  * The strict-kex extension is announced in the list of available
    KEX methods. However, when the default KEX method list is modified
    or replaced, the extension is not added back automatically.
  * Add libssh2_org-CVE-2023-48795-ext.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712059200">- Fix an issue with Encrypt-then-MAC family. [bsc#1221622]
  * Test the ETM feature in the remote end's configuration when
    receiving data. Upstream issue: #1331.
  * Add libssh2_org-ETM-remote.patch</changelog>
</package>
<package pkgid="939d4c746ce9a04b51a1b3f45daf18616f1fe2a62379d68937581d73fe54ba7a" name="libssh2-1" arch="s390x">
  <version epoch="0" ver="1.11.0" rel="150200.9.2.1"/>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695038400">- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]
  * Add the keyring file: libssh2_org.keyring
  * Rebase libssh2-ocloexec.patch
  * Remove libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1702987200">- Security fix: [bsc#1218127, CVE-2023-48795]
  * Add 'strict KEX' to fix CVE-2023-48795 "Terrapin Attack"
  * Add libssh2_org-CVE-2023-48795.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1707480000">- Always add the KEX pseudo-methods "ext-info-c" and "kex-strict-c-v00@openssh.com"
  when configuring custom method list. [bsc#1218971, CVE-2023-48795]
  * The strict-kex extension is announced in the list of available
    KEX methods. However, when the default KEX method list is modified
    or replaced, the extension is not added back automatically.
  * Add libssh2_org-CVE-2023-48795-ext.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712059200">- Fix an issue with Encrypt-then-MAC family. [bsc#1221622]
  * Test the ETM feature in the remote end's configuration when
    receiving data. Upstream issue: #1331.
  * Add libssh2_org-ETM-remote.patch</changelog>
</package>
<package pkgid="8b4adef799d2044b90f3d39946faeaeab92da6aec42185f5c57cc4c315cebd61" name="libssh2-1" arch="x86_64">
  <version epoch="0" ver="1.11.0" rel="150200.9.2.1"/>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695038400">- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]
  * Add the keyring file: libssh2_org.keyring
  * Rebase libssh2-ocloexec.patch
  * Remove libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1702987200">- Security fix: [bsc#1218127, CVE-2023-48795]
  * Add 'strict KEX' to fix CVE-2023-48795 "Terrapin Attack"
  * Add libssh2_org-CVE-2023-48795.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1707480000">- Always add the KEX pseudo-methods "ext-info-c" and "kex-strict-c-v00@openssh.com"
  when configuring custom method list. [bsc#1218971, CVE-2023-48795]
  * The strict-kex extension is announced in the list of available
    KEX methods. However, when the default KEX method list is modified
    or replaced, the extension is not added back automatically.
  * Add libssh2_org-CVE-2023-48795-ext.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712059200">- Fix an issue with Encrypt-then-MAC family. [bsc#1221622]
  * Test the ETM feature in the remote end's configuration when
    receiving data. Upstream issue: #1331.
  * Add libssh2_org-ETM-remote.patch</changelog>
</package>
<package pkgid="981d9b751518735b9128b870fb6af52aa03cca1da19c5455bc074444bedab6a9" name="libssh2_org" arch="src">
  <version epoch="0" ver="1.11.0" rel="150000.4.19.1"/>
  <changelog author="vcizek@suse.com" date="1357646400">- update to 1.4.3
    compression: add support for zlib@openssh.com
    Bug fixes:
    sftp_read: return error if a too large package arrives
    libssh2_hostkey_hash.3: update the description of return value
    examples: use stderr for messages, stdout for data
    openssl: do not leak memory when handling errors
    improved handling of disabled MD5 algorithm in OpenSSL
    known_hosts: Fail when parsing unknown keys in known_hosts file
    configure: gcrypt doesn't come with pkg-config support
    session_free: wrong variable used for keeping state
    libssh2_userauth_publickey_fromfile_ex.3: mention publickey == NULL
    comp_method_zlib_decomp: handle Z_BUF_ERROR when inflating
    Return LIBSSH2_ERROR_SOCKET_DISCONNECT on EOF when reading banner
    userauth.c: fread() from public key file to correctly detect any errors
    configure.ac: Add option to disable build of the example applications
    Added 'Requires.private:' line to libssh2.pc
    SFTP: filter off incoming "zombie" responses
    gettimeofday: no need for a replacement under cygwin
    SSH_MSG_CHANNEL_REQUEST: default to want_reply
    win32/libssh2_config.h: Remove hardcoded #define LIBSSH2_HAVE_ZLIB
    build error with gcrypt backend
    always do "forced" window updates to avoid corner case stalls
    aes: the init function fails when OpenSSL has AES support
    transport_send: Finish in-progress key exchange before sending data
    channel_write: acknowledge transport errors
    examples/x11.c: Make sure sizeof passed to read operation is correct
    examples/x11.c:,Fix suspicious sizeof usage
    sftp_packet_add: verify the packet before accepting it
    SFTP: preserve the original error code more
    sftp_packet_read: adjust window size as necessary
    Use safer snprintf rather then sprintf in several places
    Define and use LIBSSH2_INVALID_SOCKET instead of INVALID_SOCKET
    sftp_write: cannot return acked data *and* EAGAIN
    sftp_read: avoid data *and* EAGAIN
    libssh2.h: Add missing prototype for libssh2_session_banner_set()
- dropped patches (already in the upstream)
  0004-libssh2.h-Add-missing-prototype-for-libssh2_session_.patch
  0005-Add-symbol-versioning.patch
  0006-missing-libssh2_session_banner_set.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1362052800">- Use AC_CONFIG_HEADERS instead of AM_CONFIG_HEADER, fixes
  build with new automake</changelog>
  <changelog author="boris@steki.net" date="1366804800">- fix building on older kernels and older OS / SLE</changelog>
  <changelog author="mvyskocil@suse.com" date="1372075200">- ignore groff-full to remove factory build cycle
- add groff to build requires to make tests passing</changelog>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695038400">- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]
  * Add the keyring file: libssh2_org.keyring
  * Rebase libssh2-ocloexec.patch
  * Remove libssh2_org-CVE-2020-22218.patch</changelog>
</package>
<package pkgid="2247acddb2c44e3b696240937ca726ef48c8da7a76a9899ee36ec0b5626954a2" name="libssh2_org" arch="src">
  <version epoch="0" ver="1.11.0" rel="150000.4.22.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1362052800">- Use AC_CONFIG_HEADERS instead of AM_CONFIG_HEADER, fixes
  build with new automake</changelog>
  <changelog author="boris@steki.net" date="1366804800">- fix building on older kernels and older OS / SLE</changelog>
  <changelog author="mvyskocil@suse.com" date="1372075200">- ignore groff-full to remove factory build cycle
- add groff to build requires to make tests passing</changelog>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695038400">- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]
  * Add the keyring file: libssh2_org.keyring
  * Rebase libssh2-ocloexec.patch
  * Remove libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1702987200">- Security fix: [bsc#1218127, CVE-2023-48795]
  * Add 'strict KEX' to fix CVE-2023-48795 "Terrapin Attack"
  * Add libssh2_org-CVE-2023-48795.patch</changelog>
</package>
<package pkgid="b8d2baca9c57e724aaaed9a16e6deccde799a4774cb5e7454f5d12195ccac049" name="libssh2_org" arch="src">
  <version epoch="0" ver="1.11.0" rel="150000.4.25.1"/>
  <changelog author="boris@steki.net" date="1366804800">- fix building on older kernels and older OS / SLE</changelog>
  <changelog author="mvyskocil@suse.com" date="1372075200">- ignore groff-full to remove factory build cycle
- add groff to build requires to make tests passing</changelog>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695038400">- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]
  * Add the keyring file: libssh2_org.keyring
  * Rebase libssh2-ocloexec.patch
  * Remove libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1702987200">- Security fix: [bsc#1218127, CVE-2023-48795]
  * Add 'strict KEX' to fix CVE-2023-48795 "Terrapin Attack"
  * Add libssh2_org-CVE-2023-48795.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1707480000">- Always add the KEX pseudo-methods "ext-info-c" and "kex-strict-c-v00@openssh.com"
  when configuring custom method list. [bsc#1218971, CVE-2023-48795]
  * The strict-kex extension is announced in the list of available
    KEX methods. However, when the default KEX method list is modified
    or replaced, the extension is not added back automatically.
  * Add libssh2_org-CVE-2023-48795-ext.patch</changelog>
</package>
<package pkgid="c0e29e12394cba16240bd30e6017037d6a7dd57bbee17ce2c4f9523e517db323" name="libssh2_org" arch="src">
  <version epoch="0" ver="1.11.0" rel="150000.4.29.1"/>
  <changelog author="mvyskocil@suse.com" date="1372075200">- ignore groff-full to remove factory build cycle
- add groff to build requires to make tests passing</changelog>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695038400">- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]
  * Add the keyring file: libssh2_org.keyring
  * Rebase libssh2-ocloexec.patch
  * Remove libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1702987200">- Security fix: [bsc#1218127, CVE-2023-48795]
  * Add 'strict KEX' to fix CVE-2023-48795 "Terrapin Attack"
  * Add libssh2_org-CVE-2023-48795.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1707480000">- Always add the KEX pseudo-methods "ext-info-c" and "kex-strict-c-v00@openssh.com"
  when configuring custom method list. [bsc#1218971, CVE-2023-48795]
  * The strict-kex extension is announced in the list of available
    KEX methods. However, when the default KEX method list is modified
    or replaced, the extension is not added back automatically.
  * Add libssh2_org-CVE-2023-48795-ext.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712059200">- Fix an issue with Encrypt-then-MAC family. [bsc#1221622]
  * Test the ETM feature in the remote end's configuration when
    receiving data. Upstream issue: #1331.
  * Add libssh2_org-ETM-remote.patch</changelog>
</package>
<package pkgid="931e737b8951f10e38796bdfea2c6e2fbb86a939b773e8ac85723a049f896bfc" name="libssh2_org" arch="src">
  <version epoch="0" ver="1.11.0" rel="150200.9.2.1"/>
  <changelog author="mvyskocil@suse.com" date="1372075200">- ignore groff-full to remove factory build cycle
- add groff to build requires to make tests passing</changelog>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695038400">- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]
  * Add the keyring file: libssh2_org.keyring
  * Rebase libssh2-ocloexec.patch
  * Remove libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1702987200">- Security fix: [bsc#1218127, CVE-2023-48795]
  * Add 'strict KEX' to fix CVE-2023-48795 "Terrapin Attack"
  * Add libssh2_org-CVE-2023-48795.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1707480000">- Always add the KEX pseudo-methods "ext-info-c" and "kex-strict-c-v00@openssh.com"
  when configuring custom method list. [bsc#1218971, CVE-2023-48795]
  * The strict-kex extension is announced in the list of available
    KEX methods. However, when the default KEX method list is modified
    or replaced, the extension is not added back automatically.
  * Add libssh2_org-CVE-2023-48795-ext.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712059200">- Fix an issue with Encrypt-then-MAC family. [bsc#1221622]
  * Test the ETM feature in the remote end's configuration when
    receiving data. Upstream issue: #1331.
  * Add libssh2_org-ETM-remote.patch</changelog>
</package>
<package pkgid="4f2024ac3c6d8840770a455a20451fe09c7f038ef445132be92304ceb2721da5" name="libssh4" arch="aarch64">
  <version epoch="0" ver="0.9.8" rel="150400.3.3.1"/>
  <changelog author="asn@cryptomilk.org" date="1540814400">- Update to version 0.8.5
  * Added support to get known_hosts locations with ssh_options_get()
  * Fixed preferred algorithm for known hosts negotiations
  * Fixed KEX with some server implementations (e.g. Cisco)
  * Fixed issues with MSVC
  * Fixed keyboard-interactive auth in server mode
    (regression from CVE-2018-10933)
  * Fixed gssapi auth in server mode (regression from CVE-2018-10933)
  * Fixed socket fd handling with proxy command
  * Fixed a memory leak with OpenSSL</changelog>
  <changelog author="asn@cryptomilk.org" date="1546171200">- Update to version 0.8.6
  * Fixed compilation issues with different OpenSSL versions
  * Fixed StrictHostKeyChecking in new knownhosts API
  * Fixed ssh_send_keepalive() with packet filter
  * Fixed possible crash with knownhosts options
  * Fixed issus with rekeying
  * Fixed strong ECDSA keys
  * Fixed some issues with rsa-sha2 extentions
  * Fixed access violation in ssh_init() (static linking)
  * Fixed ssh_channel_close() handling</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1546948800">- Added the tests in a multiple build description file *test* to
  break the cycle for cmocka, curl, doxygen and libssh.</changelog>
  <changelog author="tchvatal@suse.com" date="1549886400">- Drop doxygen from dependencies to avoid buildcycle
  * the documentation is available online anyway for anyone to
    consume and consult http://api.libssh.org</changelog>
  <changelog author="asn@cryptomilk.org" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
</package>
<package pkgid="261483db30063e0d3dadf2bfcaea36c9c90aff4d4527a45a3b817eafb1251216" name="libssh4" arch="s390x">
  <version epoch="0" ver="0.9.8" rel="150400.3.3.1"/>
  <changelog author="asn@cryptomilk.org" date="1540814400">- Update to version 0.8.5
  * Added support to get known_hosts locations with ssh_options_get()
  * Fixed preferred algorithm for known hosts negotiations
  * Fixed KEX with some server implementations (e.g. Cisco)
  * Fixed issues with MSVC
  * Fixed keyboard-interactive auth in server mode
    (regression from CVE-2018-10933)
  * Fixed gssapi auth in server mode (regression from CVE-2018-10933)
  * Fixed socket fd handling with proxy command
  * Fixed a memory leak with OpenSSL</changelog>
  <changelog author="asn@cryptomilk.org" date="1546171200">- Update to version 0.8.6
  * Fixed compilation issues with different OpenSSL versions
  * Fixed StrictHostKeyChecking in new knownhosts API
  * Fixed ssh_send_keepalive() with packet filter
  * Fixed possible crash with knownhosts options
  * Fixed issus with rekeying
  * Fixed strong ECDSA keys
  * Fixed some issues with rsa-sha2 extentions
  * Fixed access violation in ssh_init() (static linking)
  * Fixed ssh_channel_close() handling</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1546948800">- Added the tests in a multiple build description file *test* to
  break the cycle for cmocka, curl, doxygen and libssh.</changelog>
  <changelog author="tchvatal@suse.com" date="1549886400">- Drop doxygen from dependencies to avoid buildcycle
  * the documentation is available online anyway for anyone to
    consume and consult http://api.libssh.org</changelog>
  <changelog author="asn@cryptomilk.org" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
</package>
<package pkgid="289c06d27de10c601370c13e528f7e810694036655add182547c56cdde2f7379" name="libssh4" arch="x86_64">
  <version epoch="0" ver="0.9.8" rel="150400.3.3.1"/>
  <changelog author="asn@cryptomilk.org" date="1540814400">- Update to version 0.8.5
  * Added support to get known_hosts locations with ssh_options_get()
  * Fixed preferred algorithm for known hosts negotiations
  * Fixed KEX with some server implementations (e.g. Cisco)
  * Fixed issues with MSVC
  * Fixed keyboard-interactive auth in server mode
    (regression from CVE-2018-10933)
  * Fixed gssapi auth in server mode (regression from CVE-2018-10933)
  * Fixed socket fd handling with proxy command
  * Fixed a memory leak with OpenSSL</changelog>
  <changelog author="asn@cryptomilk.org" date="1546171200">- Update to version 0.8.6
  * Fixed compilation issues with different OpenSSL versions
  * Fixed StrictHostKeyChecking in new knownhosts API
  * Fixed ssh_send_keepalive() with packet filter
  * Fixed possible crash with knownhosts options
  * Fixed issus with rekeying
  * Fixed strong ECDSA keys
  * Fixed some issues with rsa-sha2 extentions
  * Fixed access violation in ssh_init() (static linking)
  * Fixed ssh_channel_close() handling</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1546948800">- Added the tests in a multiple build description file *test* to
  break the cycle for cmocka, curl, doxygen and libssh.</changelog>
  <changelog author="tchvatal@suse.com" date="1549886400">- Drop doxygen from dependencies to avoid buildcycle
  * the documentation is available online anyway for anyone to
    consume and consult http://api.libssh.org</changelog>
  <changelog author="asn@cryptomilk.org" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
</package>
<package pkgid="17ba48fee1294edf74b55a25094667ab448c1a220bab0c6eff640108587dda8f" name="libssh4" arch="aarch64">
  <version epoch="0" ver="0.9.8" rel="150400.3.6.1"/>
  <changelog author="asn@cryptomilk.org" date="1546171200">- Update to version 0.8.6
  * Fixed compilation issues with different OpenSSL versions
  * Fixed StrictHostKeyChecking in new knownhosts API
  * Fixed ssh_send_keepalive() with packet filter
  * Fixed possible crash with knownhosts options
  * Fixed issus with rekeying
  * Fixed strong ECDSA keys
  * Fixed some issues with rsa-sha2 extentions
  * Fixed access violation in ssh_init() (static linking)
  * Fixed ssh_channel_close() handling</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1546948800">- Added the tests in a multiple build description file *test* to
  break the cycle for cmocka, curl, doxygen and libssh.</changelog>
  <changelog author="tchvatal@suse.com" date="1549886400">- Drop doxygen from dependencies to avoid buildcycle
  * the documentation is available online anyway for anyone to
    consume and consult http://api.libssh.org</changelog>
  <changelog author="asn@cryptomilk.org" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
  <changelog author="adam.majer@suse.de" date="1709208000">- Fix regression parsing IPv6 addresses provided as hostname (bsc#1220385)
  * Added libssh-fix-ipv6-hostname-regression.patch</changelog>
</package>
<package pkgid="e3d4d03bf435c7bb81c023e511f8483fa60be16c2f9605d096192a56d8bc6062" name="libssh4" arch="s390x">
  <version epoch="0" ver="0.9.8" rel="150400.3.6.1"/>
  <changelog author="asn@cryptomilk.org" date="1546171200">- Update to version 0.8.6
  * Fixed compilation issues with different OpenSSL versions
  * Fixed StrictHostKeyChecking in new knownhosts API
  * Fixed ssh_send_keepalive() with packet filter
  * Fixed possible crash with knownhosts options
  * Fixed issus with rekeying
  * Fixed strong ECDSA keys
  * Fixed some issues with rsa-sha2 extentions
  * Fixed access violation in ssh_init() (static linking)
  * Fixed ssh_channel_close() handling</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1546948800">- Added the tests in a multiple build description file *test* to
  break the cycle for cmocka, curl, doxygen and libssh.</changelog>
  <changelog author="tchvatal@suse.com" date="1549886400">- Drop doxygen from dependencies to avoid buildcycle
  * the documentation is available online anyway for anyone to
    consume and consult http://api.libssh.org</changelog>
  <changelog author="asn@cryptomilk.org" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
  <changelog author="adam.majer@suse.de" date="1709208000">- Fix regression parsing IPv6 addresses provided as hostname (bsc#1220385)
  * Added libssh-fix-ipv6-hostname-regression.patch</changelog>
</package>
<package pkgid="d6fa3ed18459b1bc4bf43d209aefa3d56031c0af461ef7a661fdb40ab91d5110" name="libssh4" arch="x86_64">
  <version epoch="0" ver="0.9.8" rel="150400.3.6.1"/>
  <changelog author="asn@cryptomilk.org" date="1546171200">- Update to version 0.8.6
  * Fixed compilation issues with different OpenSSL versions
  * Fixed StrictHostKeyChecking in new knownhosts API
  * Fixed ssh_send_keepalive() with packet filter
  * Fixed possible crash with knownhosts options
  * Fixed issus with rekeying
  * Fixed strong ECDSA keys
  * Fixed some issues with rsa-sha2 extentions
  * Fixed access violation in ssh_init() (static linking)
  * Fixed ssh_channel_close() handling</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1546948800">- Added the tests in a multiple build description file *test* to
  break the cycle for cmocka, curl, doxygen and libssh.</changelog>
  <changelog author="tchvatal@suse.com" date="1549886400">- Drop doxygen from dependencies to avoid buildcycle
  * the documentation is available online anyway for anyone to
    consume and consult http://api.libssh.org</changelog>
  <changelog author="asn@cryptomilk.org" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
  <changelog author="adam.majer@suse.de" date="1709208000">- Fix regression parsing IPv6 addresses provided as hostname (bsc#1220385)
  * Added libssh-fix-ipv6-hostname-regression.patch</changelog>
</package>
<package pkgid="fd1a36f31ec1a4421e1a3efc20b6db82d8ef1ead828f20ab64114688b696d948" name="libsss_certmap0" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="150500.10.11.1"/>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
</package>
<package pkgid="9bfbb8c8cd60b0c5e7a158cd0ded7c543afba4dbea7172c24361d22f4d405372" name="libsss_certmap0" arch="s390x">
  <version epoch="0" ver="2.5.2" rel="150500.10.11.1"/>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
</package>
<package pkgid="5039e37e416c31c0365928588ef85f96eeab8bb9e7af11e91b37ceaa2c070ae3" name="libsss_certmap0" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="150500.10.11.1"/>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
</package>
<package pkgid="7f52275667889a6f58c7f73a95e7b428f179c1fcc358ebedaf9c8b62eef7ee05" name="libsss_certmap0" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="150500.10.14.1"/>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0009-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
</package>
<package pkgid="3dc6401175c050e6cbe34f3517643e0a4cb615c8c7759eb56b4ce50923e42c87" name="libsss_certmap0" arch="s390x">
  <version epoch="0" ver="2.5.2" rel="150500.10.14.1"/>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0009-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
</package>
<package pkgid="e4a2855ba227c2f76615165730e3a124e12a05afdcc047f747cf447451ea46f4" name="libsss_certmap0" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="150500.10.14.1"/>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0009-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
</package>
<package pkgid="3de701730f03bef13cb900446cdb742185ba552c0ead4dba02056bf0a4d251bb" name="libsss_certmap0" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="150500.10.17.1"/>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0009-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0010-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
</package>
<package pkgid="ab59f141cd20d5c9967dfb78e1f89f293a21c54696a6fef7afd1530368f727b1" name="libsss_certmap0" arch="s390x">
  <version epoch="0" ver="2.5.2" rel="150500.10.17.1"/>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0009-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0010-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
</package>
<package pkgid="7257e8d5065af316fe44342c5f5abb7d9e83f1ba912ac10de288088c8b678371" name="libsss_certmap0" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="150500.10.17.1"/>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0009-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0010-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
</package>
<package pkgid="ff5e30718ea623fec24df6246120eeac8a7ecb4a809571eaf863f99178a47660" name="libsss_certmap0" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="150500.10.20.2"/>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0009-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0010-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0011-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="4d3ae2b7b1b0563b952832a9446ce714ef6e537c61357d5a8d3daad4b1f913ef" name="libsss_certmap0" arch="s390x">
  <version epoch="0" ver="2.5.2" rel="150500.10.20.2"/>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0009-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0010-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0011-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="373dab9a2ab5ba378ff902a0a02e6d91fd08326e6e3c08570439f70a1a0dfdc7" name="libsss_certmap0" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="150500.10.20.2"/>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0009-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0010-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0011-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="efe936ffc7cce4db20d76cc008f49305b39da45720b82285487eceb31efc2f64" name="libsss_certmap0" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="150500.10.6.1"/>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
</package>
<package pkgid="9796a1e88a9bd72d9c304ced8a7ea7f749e8868dabc3855340e2b07bcb36bfaf" name="libsss_certmap0" arch="s390x">
  <version epoch="0" ver="2.5.2" rel="150500.10.6.1"/>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
</package>
<package pkgid="47cac0ceda4abc2b269e96a93102c75bc74f6bcfa58b3ab72e1db672f40bed06" name="libsss_certmap0" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="150500.10.6.1"/>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
</package>
<package pkgid="8f088bcf789763192ef7c4ddd7da6e413cb97336e18b494d02257007d9889d8c" name="libsss_idmap0" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="150500.10.11.1"/>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
</package>
<package pkgid="389074f92b1bdf94760554c982f963787467a5108b4b536b6bf5ec0ba8e40c86" name="libsss_idmap0" arch="s390x">
  <version epoch="0" ver="2.5.2" rel="150500.10.11.1"/>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
</package>
<package pkgid="887ddf58ae0dd20d082dde7aa365f4c299bd1c2adbae9a9c36b445635f5eaa9b" name="libsss_idmap0" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="150500.10.11.1"/>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
</package>
<package pkgid="7afbbdd91e9cf6fbc87788ed818835c573ba6cefec20a93b2f002ad1b6c01d26" name="libsss_idmap0" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="150500.10.14.1"/>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0009-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
</package>
<package pkgid="e3196dff9d7c242d3adf4bc72bcd34b7048e3fc4b008d8a45a15b1b27434d393" name="libsss_idmap0" arch="s390x">
  <version epoch="0" ver="2.5.2" rel="150500.10.14.1"/>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0009-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
</package>
<package pkgid="a0ad12c3a7bc1450dc991e260c8701ef7d44166f5d2c33db6c00b14043b1053c" name="libsss_idmap0" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="150500.10.14.1"/>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0009-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
</package>
<package pkgid="b1466559fdaa70b222c63bdd6025a6a8fd0da3145618ae80b498f1048a508c0b" name="libsss_idmap0" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="150500.10.17.1"/>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0009-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0010-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
</package>
<package pkgid="24ca8a7e5e41efd2b8ffc644959e336922e8263ac8b6e3a3b6b22e5b895652ea" name="libsss_idmap0" arch="s390x">
  <version epoch="0" ver="2.5.2" rel="150500.10.17.1"/>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0009-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0010-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
</package>
<package pkgid="5210d99651dbaad943eadcc70aafcc35f75125941c9bc40d3856c5e1af538076" name="libsss_idmap0" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="150500.10.17.1"/>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0009-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0010-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
</package>
<package pkgid="6f320077e1b770bb70738eb219a32368aa0d030f501b4fb3e13c0be6c18ba32a" name="libsss_idmap0" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="150500.10.20.2"/>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0009-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0010-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0011-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="886a2631838186054cad76bca1712e15da87b2a6fcd5a4a751921b901d2b7af2" name="libsss_idmap0" arch="s390x">
  <version epoch="0" ver="2.5.2" rel="150500.10.20.2"/>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0009-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0010-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0011-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="99826a017fa3da612e58279275821263eddf70de319482a9ef4a8c8489826f21" name="libsss_idmap0" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="150500.10.20.2"/>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0009-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0010-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0011-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="0a353683f4b68c8702f9895bfb16b4b2e0c393095e27f7df7a3fdd8560f6869e" name="libsss_idmap0" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="150500.10.6.1"/>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
</package>
<package pkgid="455883246011a199f9a6f80b1a44ac3e9fbeeb097f4289e1e7f0bda413d64e04" name="libsss_idmap0" arch="s390x">
  <version epoch="0" ver="2.5.2" rel="150500.10.6.1"/>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
</package>
<package pkgid="9e69c6f7a0cf10a9fd23f46c7a019c79824340fbefd03461a4f8e569d78eeaf5" name="libsss_idmap0" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="150500.10.6.1"/>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
</package>
<package pkgid="298a2390930f1da208225f41ba2f503c77c84b5d3304b80677650cd95499f69c" name="libsss_nss_idmap0" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="150500.10.11.1"/>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
</package>
<package pkgid="98be9d23614039e621e51ae66bc5486a7f28d42b07e7856d0a62d5cc665dfdce" name="libsss_nss_idmap0" arch="s390x">
  <version epoch="0" ver="2.5.2" rel="150500.10.11.1"/>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
</package>
<package pkgid="9fa5b94237c7579a2316501e809b79201e72b9a23b226c3f937548750a081eb0" name="libsss_nss_idmap0" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="150500.10.11.1"/>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
</package>
<package pkgid="7dbfafefe2973456ceb649bbb49b422c9072923a4c7bfb7952aa6180ad80366c" name="libsss_nss_idmap0" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="150500.10.14.1"/>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0009-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
</package>
<package pkgid="cc4480c7963f279787fd07e2b5d256a99ddb218fd1c7a2135dcf09a2b41691a5" name="libsss_nss_idmap0" arch="s390x">
  <version epoch="0" ver="2.5.2" rel="150500.10.14.1"/>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0009-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
</package>
<package pkgid="6cb195a82c641b8413139f4e3b68224afc21b534a125c6f6bc7ecda940e0ecf1" name="libsss_nss_idmap0" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="150500.10.14.1"/>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0009-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
</package>
<package pkgid="d527cfad21df2bd4564c75bfcbd7f89a282a154f144980d28b919b6771d2ec32" name="libsss_nss_idmap0" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="150500.10.17.1"/>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0009-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0010-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
</package>
<package pkgid="507877825d3766253ed99037549cbaabaaa58c22bb59a43c97c0f6b40d22c7da" name="libsss_nss_idmap0" arch="s390x">
  <version epoch="0" ver="2.5.2" rel="150500.10.17.1"/>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0009-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0010-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
</package>
<package pkgid="8ed46e38421d911dd61f7bb184d018fbe8ff00f5c972c0011b97c9f278cb97c4" name="libsss_nss_idmap0" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="150500.10.17.1"/>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0009-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0010-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
</package>
<package pkgid="c937cefe2939fca8e3a66bdcf53bc0d020d34fca82a8706b5de6d4dca819be51" name="libsss_nss_idmap0" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="150500.10.20.2"/>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0009-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0010-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0011-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="a7c0cf24d3ff92e271914d52d636e1f759455d609b6ff9124ac7dbccd4046a8d" name="libsss_nss_idmap0" arch="s390x">
  <version epoch="0" ver="2.5.2" rel="150500.10.20.2"/>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0009-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0010-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0011-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="28e6d4e9c27761f8bb7807c43713b927110746fe3b58777dcbdbb3dc18864a60" name="libsss_nss_idmap0" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="150500.10.20.2"/>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0007-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0008-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0009-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0010-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0011-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
</package>
<package pkgid="721a4fac7c586f4a248a1c8cb5cb90ba47620cdbbae7eecb94e217301bcf1696" name="libsss_nss_idmap0" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="150500.10.6.1"/>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
</package>
<package pkgid="9173f1c32ebc67b6df78454779be2a8b47c1cae69774db8b322c96d085e28994" name="libsss_nss_idmap0" arch="s390x">
  <version epoch="0" ver="2.5.2" rel="150500.10.6.1"/>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
</package>
<package pkgid="910b8a5db27dc7391f970061dee675f810661de7c1f399ac02bcf7af01959603" name="libsss_nss_idmap0" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="150500.10.6.1"/>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1675944000">- Fix build with MIT 1.20; Add patch
  0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
</package>
<package pkgid="bef4355b201cfb6ce68d32843281bde86a0d1a09346eaf3a89a786e7d2acab98" name="libstdc++6" arch="aarch64">
  <version epoch="0" ver="13.2.1+git7813" rel="150000.1.3.3"/>
  <changelog author="mliska@suse.cz" date="1679659200">- Use --enable-link-serialization rather that --enable-link-mutex,
  the benefit of the former one is that the linker jobs are not
  holding tokens of the make's jobserver.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1679659201">- Add %limit_build for gcc13 to avoid OOM</changelog>
  <changelog author="mliska@suse.cz" date="1680609600">- Bump to d0b961b802dd7d9d555ff4515835a479329326e9, git6995.</changelog>
  <changelog author="schwab@suse.de" date="1681214400">- riscv-atomic.patch: RISC-V: Add support for inlining subword atomic
  operations
- riscv-pthread.patch: Don't add -latomic with -pthread</changelog>
  <changelog author="mliska@suse.cz" date="1681214401">- Add new x86-related intrinsics (amxcomplexintrin.h).</changelog>
  <changelog author="mliska@suse.cz" date="1681300800">- Bump to d339e9802f758e051b0a1ef6db732ff846cbf4e3, git7162.</changelog>
  <changelog author="rguenther@suse.com" date="1682078400">- Bump to f980561c60b0446cc427595198d7f3f4f90e0924, git7231.
  * fixes compile-time issue reported in [bsc#1210557]
  * GCC 13.1 RC3
- Disable building the rust frontend.</changelog>
  <changelog author="rguenther@suse.com" date="1682596800">- Bump to 910735c5d7ce7607384fc1eec4189e90c8ae5c84, git7256.
  * Includes GCC 13.1 release and first bugfixes
- Update riscv-atomic.patch from the version committed upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1684756800">- Bump to dd36656ada05731c069ecd5b1878380294fb1f3e, git7364.
  * Includes the RISC-V atomic changes
- Remove riscv-atomic.patch and riscv-pthread.patch now included
- Make libstdc++6-devel packages own their directories since they
  can be installed standalone.  [bsc#1211427]</changelog>
  <changelog author="rguenther@suse.com" date="1686657600">- Raise architecture levels for ALP.  [PED-153]
  * Raise POWER architecture baseline to power9.  [PED-2005]
  * Raise x86-64 architecture baseline to x86-64-v2 for ALP.  [PED-252]
  * Delay raising s390x architecture baseline to z14.  [PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1687953600">- Bump to a533ded17fb13cbbb2fa5133ecd470360f66c5cf, git7489.
- Add gcc13-pr110334.patch to fix missed optimization in Skia
  resulting in Firefox crashes when building with LTO.  [boo#1212101]</changelog>
  <changelog author="rguenther@suse.com" date="1688990400">- Bump to f9781fcf733ca3afe5b5811afd8ecbb18d9d3a11, git7552
- Remove gcc13-pr110334.patch again as it breaks libreoffice build.</changelog>
  <changelog author="schwab@suse.de" date="1689076800">- Also handle -static-pie in the default-PIE specs</changelog>
  <changelog author="rguenther@suse.com" date="1689854400">- Bump to 9aac37ab8a7b919a89c6d64bc7107a8436996e93, git7597
  * GCC 13.2 RC1
- Add rpmlint filter for SLE12 complaining about invalid licenses.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- gdcflags.patch: Use substituted GDCFLAGS
- Filter out -Werror=return-type from D compile flags</changelog>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
</package>
<package pkgid="f41cae9fa57f23c34e4f653fe800fbce42ef8d51f9e75944d490677904ee00f2" name="libstdc++6" arch="s390x">
  <version epoch="0" ver="13.2.1+git7813" rel="150000.1.3.3"/>
  <changelog author="mliska@suse.cz" date="1679659200">- Use --enable-link-serialization rather that --enable-link-mutex,
  the benefit of the former one is that the linker jobs are not
  holding tokens of the make's jobserver.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1679659201">- Add %limit_build for gcc13 to avoid OOM</changelog>
  <changelog author="mliska@suse.cz" date="1680609600">- Bump to d0b961b802dd7d9d555ff4515835a479329326e9, git6995.</changelog>
  <changelog author="schwab@suse.de" date="1681214400">- riscv-atomic.patch: RISC-V: Add support for inlining subword atomic
  operations
- riscv-pthread.patch: Don't add -latomic with -pthread</changelog>
  <changelog author="mliska@suse.cz" date="1681214401">- Add new x86-related intrinsics (amxcomplexintrin.h).</changelog>
  <changelog author="mliska@suse.cz" date="1681300800">- Bump to d339e9802f758e051b0a1ef6db732ff846cbf4e3, git7162.</changelog>
  <changelog author="rguenther@suse.com" date="1682078400">- Bump to f980561c60b0446cc427595198d7f3f4f90e0924, git7231.
  * fixes compile-time issue reported in [bsc#1210557]
  * GCC 13.1 RC3
- Disable building the rust frontend.</changelog>
  <changelog author="rguenther@suse.com" date="1682596800">- Bump to 910735c5d7ce7607384fc1eec4189e90c8ae5c84, git7256.
  * Includes GCC 13.1 release and first bugfixes
- Update riscv-atomic.patch from the version committed upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1684756800">- Bump to dd36656ada05731c069ecd5b1878380294fb1f3e, git7364.
  * Includes the RISC-V atomic changes
- Remove riscv-atomic.patch and riscv-pthread.patch now included
- Make libstdc++6-devel packages own their directories since they
  can be installed standalone.  [bsc#1211427]</changelog>
  <changelog author="rguenther@suse.com" date="1686657600">- Raise architecture levels for ALP.  [PED-153]
  * Raise POWER architecture baseline to power9.  [PED-2005]
  * Raise x86-64 architecture baseline to x86-64-v2 for ALP.  [PED-252]
  * Delay raising s390x architecture baseline to z14.  [PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1687953600">- Bump to a533ded17fb13cbbb2fa5133ecd470360f66c5cf, git7489.
- Add gcc13-pr110334.patch to fix missed optimization in Skia
  resulting in Firefox crashes when building with LTO.  [boo#1212101]</changelog>
  <changelog author="rguenther@suse.com" date="1688990400">- Bump to f9781fcf733ca3afe5b5811afd8ecbb18d9d3a11, git7552
- Remove gcc13-pr110334.patch again as it breaks libreoffice build.</changelog>
  <changelog author="schwab@suse.de" date="1689076800">- Also handle -static-pie in the default-PIE specs</changelog>
  <changelog author="rguenther@suse.com" date="1689854400">- Bump to 9aac37ab8a7b919a89c6d64bc7107a8436996e93, git7597
  * GCC 13.2 RC1
- Add rpmlint filter for SLE12 complaining about invalid licenses.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- gdcflags.patch: Use substituted GDCFLAGS
- Filter out -Werror=return-type from D compile flags</changelog>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
</package>
<package pkgid="7590b7360d613712900026e0240e94952e484e7af6d76dd3239a935176911f9e" name="libstdc++6" arch="x86_64">
  <version epoch="0" ver="13.2.1+git7813" rel="150000.1.3.3"/>
  <changelog author="mliska@suse.cz" date="1679659200">- Use --enable-link-serialization rather that --enable-link-mutex,
  the benefit of the former one is that the linker jobs are not
  holding tokens of the make's jobserver.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1679659201">- Add %limit_build for gcc13 to avoid OOM</changelog>
  <changelog author="mliska@suse.cz" date="1680609600">- Bump to d0b961b802dd7d9d555ff4515835a479329326e9, git6995.</changelog>
  <changelog author="schwab@suse.de" date="1681214400">- riscv-atomic.patch: RISC-V: Add support for inlining subword atomic
  operations
- riscv-pthread.patch: Don't add -latomic with -pthread</changelog>
  <changelog author="mliska@suse.cz" date="1681214401">- Add new x86-related intrinsics (amxcomplexintrin.h).</changelog>
  <changelog author="mliska@suse.cz" date="1681300800">- Bump to d339e9802f758e051b0a1ef6db732ff846cbf4e3, git7162.</changelog>
  <changelog author="rguenther@suse.com" date="1682078400">- Bump to f980561c60b0446cc427595198d7f3f4f90e0924, git7231.
  * fixes compile-time issue reported in [bsc#1210557]
  * GCC 13.1 RC3
- Disable building the rust frontend.</changelog>
  <changelog author="rguenther@suse.com" date="1682596800">- Bump to 910735c5d7ce7607384fc1eec4189e90c8ae5c84, git7256.
  * Includes GCC 13.1 release and first bugfixes
- Update riscv-atomic.patch from the version committed upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1684756800">- Bump to dd36656ada05731c069ecd5b1878380294fb1f3e, git7364.
  * Includes the RISC-V atomic changes
- Remove riscv-atomic.patch and riscv-pthread.patch now included
- Make libstdc++6-devel packages own their directories since they
  can be installed standalone.  [bsc#1211427]</changelog>
  <changelog author="rguenther@suse.com" date="1686657600">- Raise architecture levels for ALP.  [PED-153]
  * Raise POWER architecture baseline to power9.  [PED-2005]
  * Raise x86-64 architecture baseline to x86-64-v2 for ALP.  [PED-252]
  * Delay raising s390x architecture baseline to z14.  [PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1687953600">- Bump to a533ded17fb13cbbb2fa5133ecd470360f66c5cf, git7489.
- Add gcc13-pr110334.patch to fix missed optimization in Skia
  resulting in Firefox crashes when building with LTO.  [boo#1212101]</changelog>
  <changelog author="rguenther@suse.com" date="1688990400">- Bump to f9781fcf733ca3afe5b5811afd8ecbb18d9d3a11, git7552
- Remove gcc13-pr110334.patch again as it breaks libreoffice build.</changelog>
  <changelog author="schwab@suse.de" date="1689076800">- Also handle -static-pie in the default-PIE specs</changelog>
  <changelog author="rguenther@suse.com" date="1689854400">- Bump to 9aac37ab8a7b919a89c6d64bc7107a8436996e93, git7597
  * GCC 13.2 RC1
- Add rpmlint filter for SLE12 complaining about invalid licenses.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- gdcflags.patch: Use substituted GDCFLAGS
- Filter out -Werror=return-type from D compile flags</changelog>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
</package>
<package pkgid="e52aee15913ebcbd655b65c38021d92da48ddd11697d9583e7b34f7466abe671" name="libstdc++6" arch="aarch64">
  <version epoch="0" ver="13.2.1+git7813" rel="150000.1.6.1"/>
  <changelog author="mliska@suse.cz" date="1680609600">- Bump to d0b961b802dd7d9d555ff4515835a479329326e9, git6995.</changelog>
  <changelog author="schwab@suse.de" date="1681214400">- riscv-atomic.patch: RISC-V: Add support for inlining subword atomic
  operations
- riscv-pthread.patch: Don't add -latomic with -pthread</changelog>
  <changelog author="mliska@suse.cz" date="1681214401">- Add new x86-related intrinsics (amxcomplexintrin.h).</changelog>
  <changelog author="mliska@suse.cz" date="1681300800">- Bump to d339e9802f758e051b0a1ef6db732ff846cbf4e3, git7162.</changelog>
  <changelog author="rguenther@suse.com" date="1682078400">- Bump to f980561c60b0446cc427595198d7f3f4f90e0924, git7231.
  * fixes compile-time issue reported in [bsc#1210557]
  * GCC 13.1 RC3
- Disable building the rust frontend.</changelog>
  <changelog author="rguenther@suse.com" date="1682596800">- Bump to 910735c5d7ce7607384fc1eec4189e90c8ae5c84, git7256.
  * Includes GCC 13.1 release and first bugfixes
- Update riscv-atomic.patch from the version committed upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1684756800">- Bump to dd36656ada05731c069ecd5b1878380294fb1f3e, git7364.
  * Includes the RISC-V atomic changes
- Remove riscv-atomic.patch and riscv-pthread.patch now included
- Make libstdc++6-devel packages own their directories since they
  can be installed standalone.  [bsc#1211427]</changelog>
  <changelog author="rguenther@suse.com" date="1686657600">- Raise architecture levels for ALP.  [PED-153]
  * Raise POWER architecture baseline to power9.  [PED-2005]
  * Raise x86-64 architecture baseline to x86-64-v2 for ALP.  [PED-252]
  * Delay raising s390x architecture baseline to z14.  [PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1687953600">- Bump to a533ded17fb13cbbb2fa5133ecd470360f66c5cf, git7489.
- Add gcc13-pr110334.patch to fix missed optimization in Skia
  resulting in Firefox crashes when building with LTO.  [boo#1212101]</changelog>
  <changelog author="rguenther@suse.com" date="1688990400">- Bump to f9781fcf733ca3afe5b5811afd8ecbb18d9d3a11, git7552
- Remove gcc13-pr110334.patch again as it breaks libreoffice build.</changelog>
  <changelog author="schwab@suse.de" date="1689076800">- Also handle -static-pie in the default-PIE specs</changelog>
  <changelog author="rguenther@suse.com" date="1689854400">- Bump to 9aac37ab8a7b919a89c6d64bc7107a8436996e93, git7597
  * GCC 13.2 RC1
- Add rpmlint filter for SLE12 complaining about invalid licenses.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- gdcflags.patch: Use substituted GDCFLAGS
- Filter out -Werror=return-type from D compile flags</changelog>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
</package>
<package pkgid="7138fd54816c4a19d3a3498f6049b29e307ad14796c265dc848ed0b86dd19ec5" name="libstdc++6" arch="s390x">
  <version epoch="0" ver="13.2.1+git7813" rel="150000.1.6.1"/>
  <changelog author="mliska@suse.cz" date="1680609600">- Bump to d0b961b802dd7d9d555ff4515835a479329326e9, git6995.</changelog>
  <changelog author="schwab@suse.de" date="1681214400">- riscv-atomic.patch: RISC-V: Add support for inlining subword atomic
  operations
- riscv-pthread.patch: Don't add -latomic with -pthread</changelog>
  <changelog author="mliska@suse.cz" date="1681214401">- Add new x86-related intrinsics (amxcomplexintrin.h).</changelog>
  <changelog author="mliska@suse.cz" date="1681300800">- Bump to d339e9802f758e051b0a1ef6db732ff846cbf4e3, git7162.</changelog>
  <changelog author="rguenther@suse.com" date="1682078400">- Bump to f980561c60b0446cc427595198d7f3f4f90e0924, git7231.
  * fixes compile-time issue reported in [bsc#1210557]
  * GCC 13.1 RC3
- Disable building the rust frontend.</changelog>
  <changelog author="rguenther@suse.com" date="1682596800">- Bump to 910735c5d7ce7607384fc1eec4189e90c8ae5c84, git7256.
  * Includes GCC 13.1 release and first bugfixes
- Update riscv-atomic.patch from the version committed upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1684756800">- Bump to dd36656ada05731c069ecd5b1878380294fb1f3e, git7364.
  * Includes the RISC-V atomic changes
- Remove riscv-atomic.patch and riscv-pthread.patch now included
- Make libstdc++6-devel packages own their directories since they
  can be installed standalone.  [bsc#1211427]</changelog>
  <changelog author="rguenther@suse.com" date="1686657600">- Raise architecture levels for ALP.  [PED-153]
  * Raise POWER architecture baseline to power9.  [PED-2005]
  * Raise x86-64 architecture baseline to x86-64-v2 for ALP.  [PED-252]
  * Delay raising s390x architecture baseline to z14.  [PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1687953600">- Bump to a533ded17fb13cbbb2fa5133ecd470360f66c5cf, git7489.
- Add gcc13-pr110334.patch to fix missed optimization in Skia
  resulting in Firefox crashes when building with LTO.  [boo#1212101]</changelog>
  <changelog author="rguenther@suse.com" date="1688990400">- Bump to f9781fcf733ca3afe5b5811afd8ecbb18d9d3a11, git7552
- Remove gcc13-pr110334.patch again as it breaks libreoffice build.</changelog>
  <changelog author="schwab@suse.de" date="1689076800">- Also handle -static-pie in the default-PIE specs</changelog>
  <changelog author="rguenther@suse.com" date="1689854400">- Bump to 9aac37ab8a7b919a89c6d64bc7107a8436996e93, git7597
  * GCC 13.2 RC1
- Add rpmlint filter for SLE12 complaining about invalid licenses.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- gdcflags.patch: Use substituted GDCFLAGS
- Filter out -Werror=return-type from D compile flags</changelog>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
</package>
<package pkgid="a9200cb66263a1c7af89bdb24c54799056fdeeff8dc77d6307a361a1822663e4" name="libstdc++6" arch="x86_64">
  <version epoch="0" ver="13.2.1+git7813" rel="150000.1.6.1"/>
  <changelog author="mliska@suse.cz" date="1680609600">- Bump to d0b961b802dd7d9d555ff4515835a479329326e9, git6995.</changelog>
  <changelog author="schwab@suse.de" date="1681214400">- riscv-atomic.patch: RISC-V: Add support for inlining subword atomic
  operations
- riscv-pthread.patch: Don't add -latomic with -pthread</changelog>
  <changelog author="mliska@suse.cz" date="1681214401">- Add new x86-related intrinsics (amxcomplexintrin.h).</changelog>
  <changelog author="mliska@suse.cz" date="1681300800">- Bump to d339e9802f758e051b0a1ef6db732ff846cbf4e3, git7162.</changelog>
  <changelog author="rguenther@suse.com" date="1682078400">- Bump to f980561c60b0446cc427595198d7f3f4f90e0924, git7231.
  * fixes compile-time issue reported in [bsc#1210557]
  * GCC 13.1 RC3
- Disable building the rust frontend.</changelog>
  <changelog author="rguenther@suse.com" date="1682596800">- Bump to 910735c5d7ce7607384fc1eec4189e90c8ae5c84, git7256.
  * Includes GCC 13.1 release and first bugfixes
- Update riscv-atomic.patch from the version committed upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1684756800">- Bump to dd36656ada05731c069ecd5b1878380294fb1f3e, git7364.
  * Includes the RISC-V atomic changes
- Remove riscv-atomic.patch and riscv-pthread.patch now included
- Make libstdc++6-devel packages own their directories since they
  can be installed standalone.  [bsc#1211427]</changelog>
  <changelog author="rguenther@suse.com" date="1686657600">- Raise architecture levels for ALP.  [PED-153]
  * Raise POWER architecture baseline to power9.  [PED-2005]
  * Raise x86-64 architecture baseline to x86-64-v2 for ALP.  [PED-252]
  * Delay raising s390x architecture baseline to z14.  [PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1687953600">- Bump to a533ded17fb13cbbb2fa5133ecd470360f66c5cf, git7489.
- Add gcc13-pr110334.patch to fix missed optimization in Skia
  resulting in Firefox crashes when building with LTO.  [boo#1212101]</changelog>
  <changelog author="rguenther@suse.com" date="1688990400">- Bump to f9781fcf733ca3afe5b5811afd8ecbb18d9d3a11, git7552
- Remove gcc13-pr110334.patch again as it breaks libreoffice build.</changelog>
  <changelog author="schwab@suse.de" date="1689076800">- Also handle -static-pie in the default-PIE specs</changelog>
  <changelog author="rguenther@suse.com" date="1689854400">- Bump to 9aac37ab8a7b919a89c6d64bc7107a8436996e93, git7597
  * GCC 13.2 RC1
- Add rpmlint filter for SLE12 complaining about invalid licenses.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- gdcflags.patch: Use substituted GDCFLAGS
- Filter out -Werror=return-type from D compile flags</changelog>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
</package>
<package pkgid="1a0fd3a722f2249af8d7a923683c5f6b9ed0f8175ed03d13730979dc38a332ba" name="libstdc++6" arch="aarch64">
  <version epoch="0" ver="13.2.1+git8285" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
</package>
<package pkgid="64e9a0826a7c31b969cba3ab8b600dd10604de5092e0339112539dd094189c5a" name="libstdc++6" arch="s390x">
  <version epoch="0" ver="13.2.1+git8285" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
</package>
<package pkgid="e76f8a955ab848f718c3117d8e5dab775d23adf94396afb372b9eda820e49b2f" name="libstdc++6" arch="x86_64">
  <version epoch="0" ver="13.2.1+git8285" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
</package>
<package pkgid="979c5d7884be4436c1c14db39a58c4a2bc87ffb93609b3a47d65dfebb3af30f3" name="libstdc++6" arch="aarch64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="21242b25222799dc380932f856c828c0be755ea14a9354419f0fcf1a8d398b3c" name="libstdc++6" arch="s390x">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="f0bcef1e89b3f51b7d2d4f0f2e4242cf86c450b9c0aecda3a44d5c324d7c7035" name="libstdc++6" arch="x86_64">
  <version epoch="0" ver="13.3.0+git8781" rel="150000.1.12.1"/>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
  <changelog author="rguenther@suse.com" date="1711540800">- Make requirement to lld version specific to avoid requiring the
  meta-package.</changelog>
  <changelog author="rguenther@suse.com" date="1712232000">- Add gcc13-pr101523.patch to avoid combine spending too much
  compile-time and memory doing nothing on s390x.  [boo#1188441]</changelog>
  <changelog author="rguenther@suse.com" date="1714651200">- Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from
  the GCN offload compiler as that is requiring Code Object version 3
  which is no longer supported by llvm18.</changelog>
  <changelog author="rguenther@suse.com" date="1715342400">- Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761
- Removed gcc13-pr111731.patch now included upstream</changelog>
  <changelog author="rguenther@suse.com" date="1716292800">- Update to GCC 13.3 release</changelog>
</package>
<package pkgid="eb5b5a502916bf9031f59defc16768a3bf73dc59d347cbc48efc4778d2bd21d1" name="libsystemd0" arch="aarch64">
  <version epoch="0" ver="249.16" rel="150400.8.35.5"/>
  <changelog author="fbui@suse.com" date="1675771200">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
</package>
<package pkgid="0722bbd672b17ad3e69cb21fb1e3bd3db3f333afddc96b4430cd3b1af312ae49" name="libsystemd0" arch="s390x">
  <version epoch="0" ver="249.16" rel="150400.8.35.5"/>
  <changelog author="fbui@suse.com" date="1675771200">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
</package>
<package pkgid="a4edda3110a9a6a68697333345fab4d4590ee56aa28d8d14eb011e3253d30e62" name="libsystemd0" arch="x86_64">
  <version epoch="0" ver="249.16" rel="150400.8.35.5"/>
  <changelog author="fbui@suse.com" date="1675771200">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
</package>
<package pkgid="abd12a4046a13b802662bd15d92c45a6dcddfb85464964fcd8208cc2f3c2c517" name="libsystemd0" arch="aarch64">
  <version epoch="0" ver="249.17" rel="150400.8.40.1"/>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
  <changelog author="fbui@suse.com" date="1693396800">- Rename 0001-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch into
  1013-strip-the-domain-part-from-etc-hostname-when-setting.patch
- Rename 0003-strip-the-domain-part-from-etc-hostname-when-setting.patch into
  1014-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
- Rename 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch into
  1015-networkd-make-network.service-an-alias-of-systemd-ne.patch
- Rename 0007-networkd-make-network.service-an-alias-of-systemd-ne.patch into
  1016-core-disable-session-keyring-per-system-sevice-entir.patch
- Rename 0011-core-disable-session-keyring-per-system-sevice-entir.patch into
  1017-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch
  Hence these patch files can be easily identified as SLE specific ones.</changelog>
  <changelog author="fbui@suse.com" date="1695902400">- systemd.spec: add missing `%tmpfiles_create systemd-resolve.conf`</changelog>
  <changelog author="fbui@suse.com" date="1695902401">- Import commit e677079182c975ecdad88a76f657fecb4de523d9
  7692c5bda8 utmp-wtmp: handle EINTR gracefully when waiting to write to tty
  29c3eb4681 utmp-wtmp: fix error in case isatty() fails
  98970eb90b homed: handle EINTR gracefully when waiting for device node
  0305809edd resolved: handle -EINTR returned from fd_wait_for_event() better
  40db4d6abe sd-netlink: handle EINTR from poll() gracefully, as success
  5e681711c6 varlink: also handle EINTR gracefully when waiting for EIO via ppoll()
  6bbd70f092 stdio-bridge: don't be bothered with EINTR
  f978feb591 sd-bus: handle -EINTR return from bus_poll() (bsc#1215241)
  746962ff40 core: replace slice dependencies as they get added (bsc#1214668)</changelog>
  <changelog author="fbui@suse.com" date="1702641600">- Import commit 86f0670d3a01c1a2d4df17f1c68d03f1586195e3
  ba7f1df7a5 vconsole-setup: simplify error handling
  94f4eaea77 Introduce RET_GATHER and use it in src/shared/
  e02406fcc1 mount: replace UNIT_DEPENDENCY_MOUNTINFO_OR_FILE with UNIT_DEPENDENCY_MOUNTINFO/UNIT_DEPENDENCY_MOUNT_FILE
  0b8db54511 mount: drop UNIT_DEPENDENCY_MOUNTINFO_IMPLICIT and UNIT_DEPENDENCY_MOUNTINFO_DEFAULT
  98ba536bd1 mount: always use UNIT_DEPENDENCY_FILE in mount_add_quota_dependencies()
  73c7b2bb48 core/mount: make device deps from /proc/self/mountinfo and .mount unit file exclusive
  ba585a28d7 core: Add trace logging to mount_add_device_dependencies()
  36e0a4f80f core/mount: also remove default deps from /proc/self/mountinfo when it is updated (bsc#1217460)
  bc107c86c3 core/mount: set Mount.from_proc_self_mountinfo flag before adding default dependencies
  ce4907c7c3 core: wrap some long comment</changelog>
  <changelog author="fbui@suse.com" date="1704715200">- Import commit 2cb4d40f1c6a388706af8a83d5344fc0de3c6f4d (merge of v249.17)
  c8578cef7f resolved: actually check authenticated flag of SOA transaction</changelog>
</package>
<package pkgid="5d24c054faa5b6821879d1ccb629334007b9aafb59a1de03d363143c85dab7b1" name="libsystemd0" arch="s390x">
  <version epoch="0" ver="249.17" rel="150400.8.40.1"/>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
  <changelog author="fbui@suse.com" date="1693396800">- Rename 0001-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch into
  1013-strip-the-domain-part-from-etc-hostname-when-setting.patch
- Rename 0003-strip-the-domain-part-from-etc-hostname-when-setting.patch into
  1014-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
- Rename 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch into
  1015-networkd-make-network.service-an-alias-of-systemd-ne.patch
- Rename 0007-networkd-make-network.service-an-alias-of-systemd-ne.patch into
  1016-core-disable-session-keyring-per-system-sevice-entir.patch
- Rename 0011-core-disable-session-keyring-per-system-sevice-entir.patch into
  1017-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch
  Hence these patch files can be easily identified as SLE specific ones.</changelog>
  <changelog author="fbui@suse.com" date="1695902400">- systemd.spec: add missing `%tmpfiles_create systemd-resolve.conf`</changelog>
  <changelog author="fbui@suse.com" date="1695902401">- Import commit e677079182c975ecdad88a76f657fecb4de523d9
  7692c5bda8 utmp-wtmp: handle EINTR gracefully when waiting to write to tty
  29c3eb4681 utmp-wtmp: fix error in case isatty() fails
  98970eb90b homed: handle EINTR gracefully when waiting for device node
  0305809edd resolved: handle -EINTR returned from fd_wait_for_event() better
  40db4d6abe sd-netlink: handle EINTR from poll() gracefully, as success
  5e681711c6 varlink: also handle EINTR gracefully when waiting for EIO via ppoll()
  6bbd70f092 stdio-bridge: don't be bothered with EINTR
  f978feb591 sd-bus: handle -EINTR return from bus_poll() (bsc#1215241)
  746962ff40 core: replace slice dependencies as they get added (bsc#1214668)</changelog>
  <changelog author="fbui@suse.com" date="1702641600">- Import commit 86f0670d3a01c1a2d4df17f1c68d03f1586195e3
  ba7f1df7a5 vconsole-setup: simplify error handling
  94f4eaea77 Introduce RET_GATHER and use it in src/shared/
  e02406fcc1 mount: replace UNIT_DEPENDENCY_MOUNTINFO_OR_FILE with UNIT_DEPENDENCY_MOUNTINFO/UNIT_DEPENDENCY_MOUNT_FILE
  0b8db54511 mount: drop UNIT_DEPENDENCY_MOUNTINFO_IMPLICIT and UNIT_DEPENDENCY_MOUNTINFO_DEFAULT
  98ba536bd1 mount: always use UNIT_DEPENDENCY_FILE in mount_add_quota_dependencies()
  73c7b2bb48 core/mount: make device deps from /proc/self/mountinfo and .mount unit file exclusive
  ba585a28d7 core: Add trace logging to mount_add_device_dependencies()
  36e0a4f80f core/mount: also remove default deps from /proc/self/mountinfo when it is updated (bsc#1217460)
  bc107c86c3 core/mount: set Mount.from_proc_self_mountinfo flag before adding default dependencies
  ce4907c7c3 core: wrap some long comment</changelog>
  <changelog author="fbui@suse.com" date="1704715200">- Import commit 2cb4d40f1c6a388706af8a83d5344fc0de3c6f4d (merge of v249.17)
  c8578cef7f resolved: actually check authenticated flag of SOA transaction</changelog>
</package>
<package pkgid="abcf2c4d08ef5b8dc4cd7b02036ab2fea9aa884baf5fbb1e5da7197831767fc9" name="libsystemd0" arch="x86_64">
  <version epoch="0" ver="249.17" rel="150400.8.40.1"/>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
  <changelog author="fbui@suse.com" date="1693396800">- Rename 0001-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch into
  1013-strip-the-domain-part-from-etc-hostname-when-setting.patch
- Rename 0003-strip-the-domain-part-from-etc-hostname-when-setting.patch into
  1014-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
- Rename 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch into
  1015-networkd-make-network.service-an-alias-of-systemd-ne.patch
- Rename 0007-networkd-make-network.service-an-alias-of-systemd-ne.patch into
  1016-core-disable-session-keyring-per-system-sevice-entir.patch
- Rename 0011-core-disable-session-keyring-per-system-sevice-entir.patch into
  1017-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch
  Hence these patch files can be easily identified as SLE specific ones.</changelog>
  <changelog author="fbui@suse.com" date="1695902400">- systemd.spec: add missing `%tmpfiles_create systemd-resolve.conf`</changelog>
  <changelog author="fbui@suse.com" date="1695902401">- Import commit e677079182c975ecdad88a76f657fecb4de523d9
  7692c5bda8 utmp-wtmp: handle EINTR gracefully when waiting to write to tty
  29c3eb4681 utmp-wtmp: fix error in case isatty() fails
  98970eb90b homed: handle EINTR gracefully when waiting for device node
  0305809edd resolved: handle -EINTR returned from fd_wait_for_event() better
  40db4d6abe sd-netlink: handle EINTR from poll() gracefully, as success
  5e681711c6 varlink: also handle EINTR gracefully when waiting for EIO via ppoll()
  6bbd70f092 stdio-bridge: don't be bothered with EINTR
  f978feb591 sd-bus: handle -EINTR return from bus_poll() (bsc#1215241)
  746962ff40 core: replace slice dependencies as they get added (bsc#1214668)</changelog>
  <changelog author="fbui@suse.com" date="1702641600">- Import commit 86f0670d3a01c1a2d4df17f1c68d03f1586195e3
  ba7f1df7a5 vconsole-setup: simplify error handling
  94f4eaea77 Introduce RET_GATHER and use it in src/shared/
  e02406fcc1 mount: replace UNIT_DEPENDENCY_MOUNTINFO_OR_FILE with UNIT_DEPENDENCY_MOUNTINFO/UNIT_DEPENDENCY_MOUNT_FILE
  0b8db54511 mount: drop UNIT_DEPENDENCY_MOUNTINFO_IMPLICIT and UNIT_DEPENDENCY_MOUNTINFO_DEFAULT
  98ba536bd1 mount: always use UNIT_DEPENDENCY_FILE in mount_add_quota_dependencies()
  73c7b2bb48 core/mount: make device deps from /proc/self/mountinfo and .mount unit file exclusive
  ba585a28d7 core: Add trace logging to mount_add_device_dependencies()
  36e0a4f80f core/mount: also remove default deps from /proc/self/mountinfo when it is updated (bsc#1217460)
  bc107c86c3 core/mount: set Mount.from_proc_self_mountinfo flag before adding default dependencies
  ce4907c7c3 core: wrap some long comment</changelog>
  <changelog author="fbui@suse.com" date="1704715200">- Import commit 2cb4d40f1c6a388706af8a83d5344fc0de3c6f4d (merge of v249.17)
  c8578cef7f resolved: actually check authenticated flag of SOA transaction</changelog>
</package>
<package pkgid="fd252833eb477b466f00aaac7ba6fdbeacbfb4ee75d3418bf67cd3d041e4a116" name="libsystemd0" arch="aarch64">
  <version epoch="0" ver="249.17" rel="150400.8.43.1"/>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
  <changelog author="fbui@suse.com" date="1693396800">- Rename 0001-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch into
  1013-strip-the-domain-part-from-etc-hostname-when-setting.patch
- Rename 0003-strip-the-domain-part-from-etc-hostname-when-setting.patch into
  1014-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
- Rename 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch into
  1015-networkd-make-network.service-an-alias-of-systemd-ne.patch
- Rename 0007-networkd-make-network.service-an-alias-of-systemd-ne.patch into
  1016-core-disable-session-keyring-per-system-sevice-entir.patch
- Rename 0011-core-disable-session-keyring-per-system-sevice-entir.patch into
  1017-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch
  Hence these patch files can be easily identified as SLE specific ones.</changelog>
  <changelog author="fbui@suse.com" date="1695902400">- systemd.spec: add missing `%tmpfiles_create systemd-resolve.conf`</changelog>
  <changelog author="fbui@suse.com" date="1695902401">- Import commit e677079182c975ecdad88a76f657fecb4de523d9
  7692c5bda8 utmp-wtmp: handle EINTR gracefully when waiting to write to tty
  29c3eb4681 utmp-wtmp: fix error in case isatty() fails
  98970eb90b homed: handle EINTR gracefully when waiting for device node
  0305809edd resolved: handle -EINTR returned from fd_wait_for_event() better
  40db4d6abe sd-netlink: handle EINTR from poll() gracefully, as success
  5e681711c6 varlink: also handle EINTR gracefully when waiting for EIO via ppoll()
  6bbd70f092 stdio-bridge: don't be bothered with EINTR
  f978feb591 sd-bus: handle -EINTR return from bus_poll() (bsc#1215241)
  746962ff40 core: replace slice dependencies as they get added (bsc#1214668)</changelog>
  <changelog author="fbui@suse.com" date="1702641600">- Import commit 86f0670d3a01c1a2d4df17f1c68d03f1586195e3
  ba7f1df7a5 vconsole-setup: simplify error handling
  94f4eaea77 Introduce RET_GATHER and use it in src/shared/
  e02406fcc1 mount: replace UNIT_DEPENDENCY_MOUNTINFO_OR_FILE with UNIT_DEPENDENCY_MOUNTINFO/UNIT_DEPENDENCY_MOUNT_FILE
  0b8db54511 mount: drop UNIT_DEPENDENCY_MOUNTINFO_IMPLICIT and UNIT_DEPENDENCY_MOUNTINFO_DEFAULT
  98ba536bd1 mount: always use UNIT_DEPENDENCY_FILE in mount_add_quota_dependencies()
  73c7b2bb48 core/mount: make device deps from /proc/self/mountinfo and .mount unit file exclusive
  ba585a28d7 core: Add trace logging to mount_add_device_dependencies()
  36e0a4f80f core/mount: also remove default deps from /proc/self/mountinfo when it is updated (bsc#1217460)
  bc107c86c3 core/mount: set Mount.from_proc_self_mountinfo flag before adding default dependencies
  ce4907c7c3 core: wrap some long comment</changelog>
  <changelog author="fbui@suse.com" date="1704715200">- Import commit 2cb4d40f1c6a388706af8a83d5344fc0de3c6f4d (merge of v249.17)
  c8578cef7f resolved: actually check authenticated flag of SOA transaction (bsc#1218297 CVE-2023-7008)</changelog>
  <changelog author="fbui@suse.com" date="1710936000">- Update 1011-sysv-generator-add-back-support-for-SysV-scripts-for.patch
  Really skip redundant dependencies specified the LSB description that
  references the file name of the service itself for early boot scripts (noticed
  in bsc#1221479).</changelog>
  <changelog author="fbui@suse.com" date="1721649600">- Don't mention any rpm macros inside comments, even if escaped (bsc#1228091)
  Otherwise pesign-obs-integration ends up re-packaging systemd with all macros
  inside comments unescaped leading to unpredictable behavior. Now why rpm
  expands rpm macros inside comments is the question...</changelog>
  <changelog author="fbui@suse.com" date="1721736000">- Import commit a57a6d239c5d6b91fb3dcd269705e60804a03ae1
  cd0c9ac4f4 unit: drop ProtectClock=yes from systemd-udevd.service (bsc#1226414)
  e1eaa86a49 udev: do not set ID_PATH and by-path symlink for nvmf disks
  a85d211874 man: Document ranges for distributions config files and local config files</changelog>
</package>
<package pkgid="02b95009b294660ea64b89eeae4632e8f35b663931cbb2224a1941ee29504897" name="libsystemd0" arch="s390x">
  <version epoch="0" ver="249.17" rel="150400.8.43.1"/>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
  <changelog author="fbui@suse.com" date="1693396800">- Rename 0001-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch into
  1013-strip-the-domain-part-from-etc-hostname-when-setting.patch
- Rename 0003-strip-the-domain-part-from-etc-hostname-when-setting.patch into
  1014-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
- Rename 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch into
  1015-networkd-make-network.service-an-alias-of-systemd-ne.patch
- Rename 0007-networkd-make-network.service-an-alias-of-systemd-ne.patch into
  1016-core-disable-session-keyring-per-system-sevice-entir.patch
- Rename 0011-core-disable-session-keyring-per-system-sevice-entir.patch into
  1017-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch
  Hence these patch files can be easily identified as SLE specific ones.</changelog>
  <changelog author="fbui@suse.com" date="1695902400">- systemd.spec: add missing `%tmpfiles_create systemd-resolve.conf`</changelog>
  <changelog author="fbui@suse.com" date="1695902401">- Import commit e677079182c975ecdad88a76f657fecb4de523d9
  7692c5bda8 utmp-wtmp: handle EINTR gracefully when waiting to write to tty
  29c3eb4681 utmp-wtmp: fix error in case isatty() fails
  98970eb90b homed: handle EINTR gracefully when waiting for device node
  0305809edd resolved: handle -EINTR returned from fd_wait_for_event() better
  40db4d6abe sd-netlink: handle EINTR from poll() gracefully, as success
  5e681711c6 varlink: also handle EINTR gracefully when waiting for EIO via ppoll()
  6bbd70f092 stdio-bridge: don't be bothered with EINTR
  f978feb591 sd-bus: handle -EINTR return from bus_poll() (bsc#1215241)
  746962ff40 core: replace slice dependencies as they get added (bsc#1214668)</changelog>
  <changelog author="fbui@suse.com" date="1702641600">- Import commit 86f0670d3a01c1a2d4df17f1c68d03f1586195e3
  ba7f1df7a5 vconsole-setup: simplify error handling
  94f4eaea77 Introduce RET_GATHER and use it in src/shared/
  e02406fcc1 mount: replace UNIT_DEPENDENCY_MOUNTINFO_OR_FILE with UNIT_DEPENDENCY_MOUNTINFO/UNIT_DEPENDENCY_MOUNT_FILE
  0b8db54511 mount: drop UNIT_DEPENDENCY_MOUNTINFO_IMPLICIT and UNIT_DEPENDENCY_MOUNTINFO_DEFAULT
  98ba536bd1 mount: always use UNIT_DEPENDENCY_FILE in mount_add_quota_dependencies()
  73c7b2bb48 core/mount: make device deps from /proc/self/mountinfo and .mount unit file exclusive
  ba585a28d7 core: Add trace logging to mount_add_device_dependencies()
  36e0a4f80f core/mount: also remove default deps from /proc/self/mountinfo when it is updated (bsc#1217460)
  bc107c86c3 core/mount: set Mount.from_proc_self_mountinfo flag before adding default dependencies
  ce4907c7c3 core: wrap some long comment</changelog>
  <changelog author="fbui@suse.com" date="1704715200">- Import commit 2cb4d40f1c6a388706af8a83d5344fc0de3c6f4d (merge of v249.17)
  c8578cef7f resolved: actually check authenticated flag of SOA transaction (bsc#1218297 CVE-2023-7008)</changelog>
  <changelog author="fbui@suse.com" date="1710936000">- Update 1011-sysv-generator-add-back-support-for-SysV-scripts-for.patch
  Really skip redundant dependencies specified the LSB description that
  references the file name of the service itself for early boot scripts (noticed
  in bsc#1221479).</changelog>
  <changelog author="fbui@suse.com" date="1721649600">- Don't mention any rpm macros inside comments, even if escaped (bsc#1228091)
  Otherwise pesign-obs-integration ends up re-packaging systemd with all macros
  inside comments unescaped leading to unpredictable behavior. Now why rpm
  expands rpm macros inside comments is the question...</changelog>
  <changelog author="fbui@suse.com" date="1721736000">- Import commit a57a6d239c5d6b91fb3dcd269705e60804a03ae1
  cd0c9ac4f4 unit: drop ProtectClock=yes from systemd-udevd.service (bsc#1226414)
  e1eaa86a49 udev: do not set ID_PATH and by-path symlink for nvmf disks
  a85d211874 man: Document ranges for distributions config files and local config files</changelog>
</package>
<package pkgid="e0562bb6d1ea26416ca545dcd80a92c2356981ba93898237642580b86cc9a574" name="libsystemd0" arch="x86_64">
  <version epoch="0" ver="249.17" rel="150400.8.43.1"/>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
  <changelog author="fbui@suse.com" date="1693396800">- Rename 0001-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch into
  1013-strip-the-domain-part-from-etc-hostname-when-setting.patch
- Rename 0003-strip-the-domain-part-from-etc-hostname-when-setting.patch into
  1014-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
- Rename 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch into
  1015-networkd-make-network.service-an-alias-of-systemd-ne.patch
- Rename 0007-networkd-make-network.service-an-alias-of-systemd-ne.patch into
  1016-core-disable-session-keyring-per-system-sevice-entir.patch
- Rename 0011-core-disable-session-keyring-per-system-sevice-entir.patch into
  1017-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch
  Hence these patch files can be easily identified as SLE specific ones.</changelog>
  <changelog author="fbui@suse.com" date="1695902400">- systemd.spec: add missing `%tmpfiles_create systemd-resolve.conf`</changelog>
  <changelog author="fbui@suse.com" date="1695902401">- Import commit e677079182c975ecdad88a76f657fecb4de523d9
  7692c5bda8 utmp-wtmp: handle EINTR gracefully when waiting to write to tty
  29c3eb4681 utmp-wtmp: fix error in case isatty() fails
  98970eb90b homed: handle EINTR gracefully when waiting for device node
  0305809edd resolved: handle -EINTR returned from fd_wait_for_event() better
  40db4d6abe sd-netlink: handle EINTR from poll() gracefully, as success
  5e681711c6 varlink: also handle EINTR gracefully when waiting for EIO via ppoll()
  6bbd70f092 stdio-bridge: don't be bothered with EINTR
  f978feb591 sd-bus: handle -EINTR return from bus_poll() (bsc#1215241)
  746962ff40 core: replace slice dependencies as they get added (bsc#1214668)</changelog>
  <changelog author="fbui@suse.com" date="1702641600">- Import commit 86f0670d3a01c1a2d4df17f1c68d03f1586195e3
  ba7f1df7a5 vconsole-setup: simplify error handling
  94f4eaea77 Introduce RET_GATHER and use it in src/shared/
  e02406fcc1 mount: replace UNIT_DEPENDENCY_MOUNTINFO_OR_FILE with UNIT_DEPENDENCY_MOUNTINFO/UNIT_DEPENDENCY_MOUNT_FILE
  0b8db54511 mount: drop UNIT_DEPENDENCY_MOUNTINFO_IMPLICIT and UNIT_DEPENDENCY_MOUNTINFO_DEFAULT
  98ba536bd1 mount: always use UNIT_DEPENDENCY_FILE in mount_add_quota_dependencies()
  73c7b2bb48 core/mount: make device deps from /proc/self/mountinfo and .mount unit file exclusive
  ba585a28d7 core: Add trace logging to mount_add_device_dependencies()
  36e0a4f80f core/mount: also remove default deps from /proc/self/mountinfo when it is updated (bsc#1217460)
  bc107c86c3 core/mount: set Mount.from_proc_self_mountinfo flag before adding default dependencies
  ce4907c7c3 core: wrap some long comment</changelog>
  <changelog author="fbui@suse.com" date="1704715200">- Import commit 2cb4d40f1c6a388706af8a83d5344fc0de3c6f4d (merge of v249.17)
  c8578cef7f resolved: actually check authenticated flag of SOA transaction (bsc#1218297 CVE-2023-7008)</changelog>
  <changelog author="fbui@suse.com" date="1710936000">- Update 1011-sysv-generator-add-back-support-for-SysV-scripts-for.patch
  Really skip redundant dependencies specified the LSB description that
  references the file name of the service itself for early boot scripts (noticed
  in bsc#1221479).</changelog>
  <changelog author="fbui@suse.com" date="1721649600">- Don't mention any rpm macros inside comments, even if escaped (bsc#1228091)
  Otherwise pesign-obs-integration ends up re-packaging systemd with all macros
  inside comments unescaped leading to unpredictable behavior. Now why rpm
  expands rpm macros inside comments is the question...</changelog>
  <changelog author="fbui@suse.com" date="1721736000">- Import commit a57a6d239c5d6b91fb3dcd269705e60804a03ae1
  cd0c9ac4f4 unit: drop ProtectClock=yes from systemd-udevd.service (bsc#1226414)
  e1eaa86a49 udev: do not set ID_PATH and by-path symlink for nvmf disks
  a85d211874 man: Document ranges for distributions config files and local config files</changelog>
</package>
<package pkgid="5afc04acdd99ed909e39c29a04d5b83e217343bbbcd5ed0723e6e1854915ec67" name="libtiff5" arch="aarch64">
  <version epoch="0" ver="4.0.9" rel="150000.45.32.1"/>
  <changelog author="pgajdos@suse.com" date="1542024000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1542024001">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
</package>
<package pkgid="64b6126bb13cb09f3196073b60bc45731e0b34d4254c2a3909160504fe5c3f4e" name="libtiff5" arch="s390x">
  <version epoch="0" ver="4.0.9" rel="150000.45.32.1"/>
  <changelog author="pgajdos@suse.com" date="1542024000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1542024001">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
</package>
<package pkgid="450d9b39625ae067a25bfb8b82f3a18dcf2a0f456e1241e8c3f96dd7d99f197a" name="libtiff5" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="150000.45.32.1"/>
  <changelog author="pgajdos@suse.com" date="1542024000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1542024001">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
</package>
<package pkgid="9176dcdecb3c1b72bc2364baa4bb50452fe0df4c10dbe10e834065d027564457" name="libtiff5" arch="aarch64">
  <version epoch="0" ver="4.0.9" rel="150000.45.35.1"/>
  <changelog author="pgajdos@suse.com" date="1542024000">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
  <changelog author="mvetter@suse.com" date="1701864000">- security update:
  * CVE-2023-2731 [bsc#1211478]
    Fix null pointer deference in LZWDecode()
    This patch also contains a required commit which is marked
    to fix CVE-2022-1622 [bsc#1199483] but we are not vulnerable
    to that CVE because relevant code is not present.
    + tiff-CVE-2023-2731.patch
  * CVE-2023-26965 [bsc#1212398]
    Fix heap-based use after free in loadImage()
    + tiff-CVE-2023-26965.patch
  * CVE-2022-40090 [bsc#1214680]
    Fix infinite loop in TIFFReadDirectory()
    + tiff-CVE-2022-40090.patch
  * CVE-2023-1916 [bsc#1210231]
    Fix out-of-bounds read in extractImageSection()
    + tiff-CVE-2023-1916.patch</changelog>
</package>
<package pkgid="0c8d64d251804403af8ecf4f8e1fb659e08ad9e13fbbc9ebbd70a377b58776eb" name="libtiff5" arch="s390x">
  <version epoch="0" ver="4.0.9" rel="150000.45.35.1"/>
  <changelog author="pgajdos@suse.com" date="1542024000">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
  <changelog author="mvetter@suse.com" date="1701864000">- security update:
  * CVE-2023-2731 [bsc#1211478]
    Fix null pointer deference in LZWDecode()
    This patch also contains a required commit which is marked
    to fix CVE-2022-1622 [bsc#1199483] but we are not vulnerable
    to that CVE because relevant code is not present.
    + tiff-CVE-2023-2731.patch
  * CVE-2023-26965 [bsc#1212398]
    Fix heap-based use after free in loadImage()
    + tiff-CVE-2023-26965.patch
  * CVE-2022-40090 [bsc#1214680]
    Fix infinite loop in TIFFReadDirectory()
    + tiff-CVE-2022-40090.patch
  * CVE-2023-1916 [bsc#1210231]
    Fix out-of-bounds read in extractImageSection()
    + tiff-CVE-2023-1916.patch</changelog>
</package>
<package pkgid="2f1c5b5e2a44f844293b7c508826efb92a3ec8973844905d58d95ae4668b41d6" name="libtiff5" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="150000.45.35.1"/>
  <changelog author="pgajdos@suse.com" date="1542024000">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
  <changelog author="mvetter@suse.com" date="1701864000">- security update:
  * CVE-2023-2731 [bsc#1211478]
    Fix null pointer deference in LZWDecode()
    This patch also contains a required commit which is marked
    to fix CVE-2022-1622 [bsc#1199483] but we are not vulnerable
    to that CVE because relevant code is not present.
    + tiff-CVE-2023-2731.patch
  * CVE-2023-26965 [bsc#1212398]
    Fix heap-based use after free in loadImage()
    + tiff-CVE-2023-26965.patch
  * CVE-2022-40090 [bsc#1214680]
    Fix infinite loop in TIFFReadDirectory()
    + tiff-CVE-2022-40090.patch
  * CVE-2023-1916 [bsc#1210231]
    Fix out-of-bounds read in extractImageSection()
    + tiff-CVE-2023-1916.patch</changelog>
</package>
<package pkgid="712447a8c2e6d19449e143d08911890b3af1b4eb46aa352f15b662bdfa1c09ac" name="libtiff5" arch="aarch64">
  <version epoch="0" ver="4.0.9" rel="150000.45.38.1"/>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
  <changelog author="mvetter@suse.com" date="1701864000">- security update:
  * CVE-2023-2731 [bsc#1211478]
    Fix null pointer deference in LZWDecode()
    This patch also contains a required commit which is marked
    to fix CVE-2022-1622 [bsc#1199483] but we are not vulnerable
    to that CVE because relevant code is not present.
    + tiff-CVE-2023-2731.patch
  * CVE-2023-26965 [bsc#1212398]
    Fix heap-based use after free in loadImage()
    + tiff-CVE-2023-26965.patch
  * CVE-2022-40090 [bsc#1214680]
    Fix infinite loop in TIFFReadDirectory()
    + tiff-CVE-2022-40090.patch
  * CVE-2023-1916 [bsc#1210231]
    Fix out-of-bounds read in extractImageSection()
    + tiff-CVE-2023-1916.patch</changelog>
  <changelog author="mvetter@suse.com" date="1706270400">- security update:
  * CVE-2023-52356 [bsc#1219213]
    Fix segfault in TIFFReadRGBATileExt()
    + tiff-CVE-2023-52356.patch</changelog>
</package>
<package pkgid="fa696969eb3b397029da7bc622a2307ac0907043aa949526b08bc39f25666a47" name="libtiff5" arch="s390x">
  <version epoch="0" ver="4.0.9" rel="150000.45.38.1"/>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
  <changelog author="mvetter@suse.com" date="1701864000">- security update:
  * CVE-2023-2731 [bsc#1211478]
    Fix null pointer deference in LZWDecode()
    This patch also contains a required commit which is marked
    to fix CVE-2022-1622 [bsc#1199483] but we are not vulnerable
    to that CVE because relevant code is not present.
    + tiff-CVE-2023-2731.patch
  * CVE-2023-26965 [bsc#1212398]
    Fix heap-based use after free in loadImage()
    + tiff-CVE-2023-26965.patch
  * CVE-2022-40090 [bsc#1214680]
    Fix infinite loop in TIFFReadDirectory()
    + tiff-CVE-2022-40090.patch
  * CVE-2023-1916 [bsc#1210231]
    Fix out-of-bounds read in extractImageSection()
    + tiff-CVE-2023-1916.patch</changelog>
  <changelog author="mvetter@suse.com" date="1706270400">- security update:
  * CVE-2023-52356 [bsc#1219213]
    Fix segfault in TIFFReadRGBATileExt()
    + tiff-CVE-2023-52356.patch</changelog>
</package>
<package pkgid="c7b1e0c1661a396cb24b5ee7822e0ccd74131e9296bd465bbb852d093a28901a" name="libtiff5" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="150000.45.38.1"/>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
  <changelog author="mvetter@suse.com" date="1701864000">- security update:
  * CVE-2023-2731 [bsc#1211478]
    Fix null pointer deference in LZWDecode()
    This patch also contains a required commit which is marked
    to fix CVE-2022-1622 [bsc#1199483] but we are not vulnerable
    to that CVE because relevant code is not present.
    + tiff-CVE-2023-2731.patch
  * CVE-2023-26965 [bsc#1212398]
    Fix heap-based use after free in loadImage()
    + tiff-CVE-2023-26965.patch
  * CVE-2022-40090 [bsc#1214680]
    Fix infinite loop in TIFFReadDirectory()
    + tiff-CVE-2022-40090.patch
  * CVE-2023-1916 [bsc#1210231]
    Fix out-of-bounds read in extractImageSection()
    + tiff-CVE-2023-1916.patch</changelog>
  <changelog author="mvetter@suse.com" date="1706270400">- security update:
  * CVE-2023-52356 [bsc#1219213]
    Fix segfault in TIFFReadRGBATileExt()
    + tiff-CVE-2023-52356.patch</changelog>
</package>
<package pkgid="d7fbde52a4f5d643546dd61561829949eef319401989365322013a82978ccb0c" name="libtiff5" arch="aarch64">
  <version epoch="0" ver="4.0.9" rel="150000.45.41.1"/>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
  <changelog author="mvetter@suse.com" date="1701864000">- security update:
  * CVE-2023-2731 [bsc#1211478]
    Fix null pointer deference in LZWDecode()
    This patch also contains a required commit which is marked
    to fix CVE-2022-1622 [bsc#1199483] but we are not vulnerable
    to that CVE because relevant code is not present.
    + tiff-CVE-2023-2731.patch
  * CVE-2023-26965 [bsc#1212398]
    Fix heap-based use after free in loadImage()
    + tiff-CVE-2023-26965.patch
  * CVE-2022-40090 [bsc#1214680]
    Fix infinite loop in TIFFReadDirectory()
    + tiff-CVE-2022-40090.patch
  * CVE-2023-1916 [bsc#1210231]
    Fix out-of-bounds read in extractImageSection()
    + tiff-CVE-2023-1916.patch</changelog>
  <changelog author="mvetter@suse.com" date="1706270400">- security update:
  * CVE-2023-52356 [bsc#1219213]
    Fix segfault in TIFFReadRGBATileExt()
    + tiff-CVE-2023-52356.patch</changelog>
  <changelog author="mvetter@suse.com" date="1710331200">- security update:
  * CVE-2023-40745[bsc#1214687] CVE-2023-41175[bsc#1214686] [bsc#1221187]
    CVE-2023-38288[bsc#1213590]
    Fix potential int overflow in raw2tiff.c and tiffcp.c
    Rename tiff-CVE-2023-38288.patch into
    tiff-CVE-2023-38288,CVE-2023-40745,CVE-2023-41175.patch</changelog>
</package>
<package pkgid="e06824b70767823122765ffed6b9a9b4f3f8bf5615415531fb995313cf9313de" name="libtiff5" arch="s390x">
  <version epoch="0" ver="4.0.9" rel="150000.45.41.1"/>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
  <changelog author="mvetter@suse.com" date="1701864000">- security update:
  * CVE-2023-2731 [bsc#1211478]
    Fix null pointer deference in LZWDecode()
    This patch also contains a required commit which is marked
    to fix CVE-2022-1622 [bsc#1199483] but we are not vulnerable
    to that CVE because relevant code is not present.
    + tiff-CVE-2023-2731.patch
  * CVE-2023-26965 [bsc#1212398]
    Fix heap-based use after free in loadImage()
    + tiff-CVE-2023-26965.patch
  * CVE-2022-40090 [bsc#1214680]
    Fix infinite loop in TIFFReadDirectory()
    + tiff-CVE-2022-40090.patch
  * CVE-2023-1916 [bsc#1210231]
    Fix out-of-bounds read in extractImageSection()
    + tiff-CVE-2023-1916.patch</changelog>
  <changelog author="mvetter@suse.com" date="1706270400">- security update:
  * CVE-2023-52356 [bsc#1219213]
    Fix segfault in TIFFReadRGBATileExt()
    + tiff-CVE-2023-52356.patch</changelog>
  <changelog author="mvetter@suse.com" date="1710331200">- security update:
  * CVE-2023-40745[bsc#1214687] CVE-2023-41175[bsc#1214686] [bsc#1221187]
    CVE-2023-38288[bsc#1213590]
    Fix potential int overflow in raw2tiff.c and tiffcp.c
    Rename tiff-CVE-2023-38288.patch into
    tiff-CVE-2023-38288,CVE-2023-40745,CVE-2023-41175.patch</changelog>
</package>
<package pkgid="a0f6a79c1dcea73e5959c269d95d7d044ce4c9e095abcf8d5b8420cc83c1f22d" name="libtiff5" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="150000.45.41.1"/>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
  <changelog author="mvetter@suse.com" date="1701864000">- security update:
  * CVE-2023-2731 [bsc#1211478]
    Fix null pointer deference in LZWDecode()
    This patch also contains a required commit which is marked
    to fix CVE-2022-1622 [bsc#1199483] but we are not vulnerable
    to that CVE because relevant code is not present.
    + tiff-CVE-2023-2731.patch
  * CVE-2023-26965 [bsc#1212398]
    Fix heap-based use after free in loadImage()
    + tiff-CVE-2023-26965.patch
  * CVE-2022-40090 [bsc#1214680]
    Fix infinite loop in TIFFReadDirectory()
    + tiff-CVE-2022-40090.patch
  * CVE-2023-1916 [bsc#1210231]
    Fix out-of-bounds read in extractImageSection()
    + tiff-CVE-2023-1916.patch</changelog>
  <changelog author="mvetter@suse.com" date="1706270400">- security update:
  * CVE-2023-52356 [bsc#1219213]
    Fix segfault in TIFFReadRGBATileExt()
    + tiff-CVE-2023-52356.patch</changelog>
  <changelog author="mvetter@suse.com" date="1710331200">- security update:
  * CVE-2023-40745[bsc#1214687] CVE-2023-41175[bsc#1214686] [bsc#1221187]
    CVE-2023-38288[bsc#1213590]
    Fix potential int overflow in raw2tiff.c and tiffcp.c
    Rename tiff-CVE-2023-38288.patch into
    tiff-CVE-2023-38288,CVE-2023-40745,CVE-2023-41175.patch</changelog>
</package>
<package pkgid="6eb0021f590545cd99998006a2fd59cc0ca6e7f49bce63fdd097d2a9c56e8b70" name="libtiff5" arch="aarch64">
  <version epoch="0" ver="4.0.9" rel="150000.45.44.1"/>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
  <changelog author="mvetter@suse.com" date="1701864000">- security update:
  * CVE-2023-2731 [bsc#1211478]
    Fix null pointer deference in LZWDecode()
    This patch also contains a required commit which is marked
    to fix CVE-2022-1622 [bsc#1199483] but we are not vulnerable
    to that CVE because relevant code is not present.
    + tiff-CVE-2023-2731.patch
  * CVE-2023-26965 [bsc#1212398]
    Fix heap-based use after free in loadImage()
    + tiff-CVE-2023-26965.patch
  * CVE-2022-40090 [bsc#1214680]
    Fix infinite loop in TIFFReadDirectory()
    + tiff-CVE-2022-40090.patch
  * CVE-2023-1916 [bsc#1210231]
    Fix out-of-bounds read in extractImageSection()
    + tiff-CVE-2023-1916.patch</changelog>
  <changelog author="mvetter@suse.com" date="1706270400">- security update:
  * CVE-2023-52356 [bsc#1219213]
    Fix segfault in TIFFReadRGBATileExt()
    + tiff-CVE-2023-52356.patch</changelog>
  <changelog author="mvetter@suse.com" date="1710331200">- security update:
  * CVE-2023-40745[bsc#1214687] CVE-2023-41175[bsc#1214686] [bsc#1221187]
    CVE-2023-38288[bsc#1213590]
    Fix potential int overflow in raw2tiff.c and tiffcp.c
    Rename tiff-CVE-2023-38288.patch into
    tiff-CVE-2023-38288,CVE-2023-40745,CVE-2023-41175.patch</changelog>
  <changelog author="mvetter@suse.com" date="1716984000">- security update:
  * CVE-2023-3164 [bsc#1212233]
    Fix heap buffer overflow in tiffcrop
    + tiff-CVE-2023-3164.patch</changelog>
</package>
<package pkgid="0a037e4a5b0a57bfe350bbad4e2ea074c6beba6f24852ce857a5cc6712283e45" name="libtiff5" arch="s390x">
  <version epoch="0" ver="4.0.9" rel="150000.45.44.1"/>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
  <changelog author="mvetter@suse.com" date="1701864000">- security update:
  * CVE-2023-2731 [bsc#1211478]
    Fix null pointer deference in LZWDecode()
    This patch also contains a required commit which is marked
    to fix CVE-2022-1622 [bsc#1199483] but we are not vulnerable
    to that CVE because relevant code is not present.
    + tiff-CVE-2023-2731.patch
  * CVE-2023-26965 [bsc#1212398]
    Fix heap-based use after free in loadImage()
    + tiff-CVE-2023-26965.patch
  * CVE-2022-40090 [bsc#1214680]
    Fix infinite loop in TIFFReadDirectory()
    + tiff-CVE-2022-40090.patch
  * CVE-2023-1916 [bsc#1210231]
    Fix out-of-bounds read in extractImageSection()
    + tiff-CVE-2023-1916.patch</changelog>
  <changelog author="mvetter@suse.com" date="1706270400">- security update:
  * CVE-2023-52356 [bsc#1219213]
    Fix segfault in TIFFReadRGBATileExt()
    + tiff-CVE-2023-52356.patch</changelog>
  <changelog author="mvetter@suse.com" date="1710331200">- security update:
  * CVE-2023-40745[bsc#1214687] CVE-2023-41175[bsc#1214686] [bsc#1221187]
    CVE-2023-38288[bsc#1213590]
    Fix potential int overflow in raw2tiff.c and tiffcp.c
    Rename tiff-CVE-2023-38288.patch into
    tiff-CVE-2023-38288,CVE-2023-40745,CVE-2023-41175.patch</changelog>
  <changelog author="mvetter@suse.com" date="1716984000">- security update:
  * CVE-2023-3164 [bsc#1212233]
    Fix heap buffer overflow in tiffcrop
    + tiff-CVE-2023-3164.patch</changelog>
</package>
<package pkgid="6f3e5d8ed2f6091131c6ec539d35316918a5507d36016afe2ef92225ab45816d" name="libtiff5" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="150000.45.44.1"/>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
  <changelog author="mvetter@suse.com" date="1701864000">- security update:
  * CVE-2023-2731 [bsc#1211478]
    Fix null pointer deference in LZWDecode()
    This patch also contains a required commit which is marked
    to fix CVE-2022-1622 [bsc#1199483] but we are not vulnerable
    to that CVE because relevant code is not present.
    + tiff-CVE-2023-2731.patch
  * CVE-2023-26965 [bsc#1212398]
    Fix heap-based use after free in loadImage()
    + tiff-CVE-2023-26965.patch
  * CVE-2022-40090 [bsc#1214680]
    Fix infinite loop in TIFFReadDirectory()
    + tiff-CVE-2022-40090.patch
  * CVE-2023-1916 [bsc#1210231]
    Fix out-of-bounds read in extractImageSection()
    + tiff-CVE-2023-1916.patch</changelog>
  <changelog author="mvetter@suse.com" date="1706270400">- security update:
  * CVE-2023-52356 [bsc#1219213]
    Fix segfault in TIFFReadRGBATileExt()
    + tiff-CVE-2023-52356.patch</changelog>
  <changelog author="mvetter@suse.com" date="1710331200">- security update:
  * CVE-2023-40745[bsc#1214687] CVE-2023-41175[bsc#1214686] [bsc#1221187]
    CVE-2023-38288[bsc#1213590]
    Fix potential int overflow in raw2tiff.c and tiffcp.c
    Rename tiff-CVE-2023-38288.patch into
    tiff-CVE-2023-38288,CVE-2023-40745,CVE-2023-41175.patch</changelog>
  <changelog author="mvetter@suse.com" date="1716984000">- security update:
  * CVE-2023-3164 [bsc#1212233]
    Fix heap buffer overflow in tiffcrop
    + tiff-CVE-2023-3164.patch</changelog>
</package>
<package pkgid="ddebd3eb1e02f3f2eadc3ac2e76b6e2bc367f014f2df1bd5534dcae8d5ff8559" name="libtiff5" arch="aarch64">
  <version epoch="0" ver="4.0.9" rel="150000.45.47.1"/>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
  <changelog author="mvetter@suse.com" date="1701864000">- security update:
  * CVE-2023-2731 [bsc#1211478]
    Fix null pointer deference in LZWDecode()
    This patch also contains a required commit which is marked
    to fix CVE-2022-1622 [bsc#1199483] but we are not vulnerable
    to that CVE because relevant code is not present.
    + tiff-CVE-2023-2731.patch
  * CVE-2023-26965 [bsc#1212398]
    Fix heap-based use after free in loadImage()
    + tiff-CVE-2023-26965.patch
  * CVE-2022-40090 [bsc#1214680]
    Fix infinite loop in TIFFReadDirectory()
    + tiff-CVE-2022-40090.patch
  * CVE-2023-1916 [bsc#1210231]
    Fix out-of-bounds read in extractImageSection()
    + tiff-CVE-2023-1916.patch</changelog>
  <changelog author="mvetter@suse.com" date="1706270400">- security update:
  * CVE-2023-52356 [bsc#1219213]
    Fix segfault in TIFFReadRGBATileExt()
    + tiff-CVE-2023-52356.patch</changelog>
  <changelog author="mvetter@suse.com" date="1710331200">- security update:
  * CVE-2023-40745[bsc#1214687] CVE-2023-41175[bsc#1214686] [bsc#1221187]
    CVE-2023-38288[bsc#1213590]
    Fix potential int overflow in raw2tiff.c and tiffcp.c
    Rename tiff-CVE-2023-38288.patch into
    tiff-CVE-2023-38288,CVE-2023-40745,CVE-2023-41175.patch</changelog>
  <changelog author="mvetter@suse.com" date="1716984000">- security update:
  * CVE-2023-3164 [bsc#1212233]
    Fix heap buffer overflow in tiffcrop
    + tiff-CVE-2023-3164.patch</changelog>
  <changelog author="mvetter@suse.com" date="1724068800">- security update:
  * CVE-2024-7006 [bsc#1228924]
    Fix pointer deref in tif_dirinfo.c
    + tiff-CVE-2024-7006.patch</changelog>
</package>
<package pkgid="429a5098e6e0d338c31af1b363a503454c31c9711dd7557a0dcbbd427a16dce8" name="libtiff5" arch="s390x">
  <version epoch="0" ver="4.0.9" rel="150000.45.47.1"/>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
  <changelog author="mvetter@suse.com" date="1701864000">- security update:
  * CVE-2023-2731 [bsc#1211478]
    Fix null pointer deference in LZWDecode()
    This patch also contains a required commit which is marked
    to fix CVE-2022-1622 [bsc#1199483] but we are not vulnerable
    to that CVE because relevant code is not present.
    + tiff-CVE-2023-2731.patch
  * CVE-2023-26965 [bsc#1212398]
    Fix heap-based use after free in loadImage()
    + tiff-CVE-2023-26965.patch
  * CVE-2022-40090 [bsc#1214680]
    Fix infinite loop in TIFFReadDirectory()
    + tiff-CVE-2022-40090.patch
  * CVE-2023-1916 [bsc#1210231]
    Fix out-of-bounds read in extractImageSection()
    + tiff-CVE-2023-1916.patch</changelog>
  <changelog author="mvetter@suse.com" date="1706270400">- security update:
  * CVE-2023-52356 [bsc#1219213]
    Fix segfault in TIFFReadRGBATileExt()
    + tiff-CVE-2023-52356.patch</changelog>
  <changelog author="mvetter@suse.com" date="1710331200">- security update:
  * CVE-2023-40745[bsc#1214687] CVE-2023-41175[bsc#1214686] [bsc#1221187]
    CVE-2023-38288[bsc#1213590]
    Fix potential int overflow in raw2tiff.c and tiffcp.c
    Rename tiff-CVE-2023-38288.patch into
    tiff-CVE-2023-38288,CVE-2023-40745,CVE-2023-41175.patch</changelog>
  <changelog author="mvetter@suse.com" date="1716984000">- security update:
  * CVE-2023-3164 [bsc#1212233]
    Fix heap buffer overflow in tiffcrop
    + tiff-CVE-2023-3164.patch</changelog>
  <changelog author="mvetter@suse.com" date="1724068800">- security update:
  * CVE-2024-7006 [bsc#1228924]
    Fix pointer deref in tif_dirinfo.c
    + tiff-CVE-2024-7006.patch</changelog>
</package>
<package pkgid="68728b1c4a8f166a8feb5a4795a6fb7873d668f376c2bb288020a76d0fc015fa" name="libtiff5" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="150000.45.47.1"/>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
  <changelog author="mvetter@suse.com" date="1701864000">- security update:
  * CVE-2023-2731 [bsc#1211478]
    Fix null pointer deference in LZWDecode()
    This patch also contains a required commit which is marked
    to fix CVE-2022-1622 [bsc#1199483] but we are not vulnerable
    to that CVE because relevant code is not present.
    + tiff-CVE-2023-2731.patch
  * CVE-2023-26965 [bsc#1212398]
    Fix heap-based use after free in loadImage()
    + tiff-CVE-2023-26965.patch
  * CVE-2022-40090 [bsc#1214680]
    Fix infinite loop in TIFFReadDirectory()
    + tiff-CVE-2022-40090.patch
  * CVE-2023-1916 [bsc#1210231]
    Fix out-of-bounds read in extractImageSection()
    + tiff-CVE-2023-1916.patch</changelog>
  <changelog author="mvetter@suse.com" date="1706270400">- security update:
  * CVE-2023-52356 [bsc#1219213]
    Fix segfault in TIFFReadRGBATileExt()
    + tiff-CVE-2023-52356.patch</changelog>
  <changelog author="mvetter@suse.com" date="1710331200">- security update:
  * CVE-2023-40745[bsc#1214687] CVE-2023-41175[bsc#1214686] [bsc#1221187]
    CVE-2023-38288[bsc#1213590]
    Fix potential int overflow in raw2tiff.c and tiffcp.c
    Rename tiff-CVE-2023-38288.patch into
    tiff-CVE-2023-38288,CVE-2023-40745,CVE-2023-41175.patch</changelog>
  <changelog author="mvetter@suse.com" date="1716984000">- security update:
  * CVE-2023-3164 [bsc#1212233]
    Fix heap buffer overflow in tiffcrop
    + tiff-CVE-2023-3164.patch</changelog>
  <changelog author="mvetter@suse.com" date="1724068800">- security update:
  * CVE-2024-7006 [bsc#1228924]
    Fix pointer deref in tif_dirinfo.c
    + tiff-CVE-2024-7006.patch</changelog>
</package>
<package pkgid="c0f8341e8e6b626ec382448c5e0b80aaad89ea4b0dd501b319a78606a647eead" name="libtirpc" arch="src">
  <version epoch="0" ver="1.3.4" rel="150300.3.20.1"/>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1652184000">- fix memory leak in params.r_addr assignement (bsc#1198752)
  - add 0001-fix-parms.r_addr-memory-leak.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1658491200">-exclude ipv6 addresses in client protocol 2 code (bsc#1200800)
  - update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1662724800">- fix CVE-2021-46828: libtirpc: DoS vulnerability with lots of
  connections (bsc#1201680)
  - add 0001-Fix-DoS-vulnerability-in-libtirpc.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669723200">- consider /proc/sys/net/ipv4/ip_local_reserved_ports, before binding
  to a random port (bsc#1199467)
  - add binddynport-honor-ip_local_reserved_ports.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1697198400">-  update to 1.3.4 (bsc#1199467)
  * binddynport.c honor ip_local_reserved_ports
  - replaces: binddynport-honor-ip_local_reserved_ports.patch
  * gss-api: expose gss major/minor error in authgss_refresh()
  * rpcb_clnt.c: Eliminate double frees in delete_cache()
  * rpcb_clnt.c: memory leak in destroy_addr
  * portmapper: allow TCP-only portmapper
  * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep
  * clnt_raw.c: fix a possible null pointer dereference
  * bindresvport.c: fix a potential resource leakage
- update to 1.3.3 (bsc#1201680, CVE-2021-46828):
  * Fix DoS vulnerability in libtirpc
  - replaces: 0001-Fix-DoS-vulnerability-in-libtirpc.patch
  * _rpc_dtablesize: use portable system call
  * libtirpc: Fix use-after-free accessing the error number
  * Fix potential memory leak of parms.r_addr
  - replaces 0001-fix-parms.r_addr-memory-leak.patch
  * rpcb_clnt.c add mechanism to try v2 protocol first
  - preplaces: 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  * Eliminate deadlocks in connects with an MT environment
  * clnt_dg_freeres() uncleared set active state may deadlock
  * thread safe clnt destruction
  * SUNRPC: mutexed access blacklist_read state variable
  * SUNRPC: MT-safe overhaul of address cache management in rpcb_clnt.c
- drop 0001-Fix-DoS-vulnerability-in-libtirpc.patch (upstream)
- update to 1.3.2:
  * Replace the final SunRPC licenses with BSD licenses
  * blacklist: Add a few more well known ports
  * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS
- Update to libtirpc 1.3.1
  * Remove AUTH_DES interfaces from auth_des.h
    The unsupported  AUTH_DES authentication has be
    compiled out since commit d918e41d889 (Wed Oct 9 2019)
    replaced by API routines that return errors.
  * svc_dg: Free xp_netid during destroy
  * Fix memory management issues of fd locks
  * libtirpc: replace array with list for per-fd locks
  * __svc_vc_dodestroy: fix double free of xp_ltaddr.buf
  * __rpc_dtbsize: rlim_cur instead of rlim_max
  * pkg-config: use the correct replacements for libdir/includedir
  Patches replaced by update:
  binddynport-honor-ip_local_reserved_ports.patch (bsc#1199467)
  0001-Fix-DoS-vulnerability-in-libtirpc.patch (bsc#1201680)
  0001-fix-parms.r_addr-memory-leak.patch (bsc#1198752)
  0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  (bsc#1196647), (bsc#1200800), (bsc#1198176)
  * replaces /etc/netconfig-try-2-first by the environment variable
  RPCB_V2FIRST</changelog>
</package>
<package pkgid="85e5265752f2f2926c806d88ad918a4802a192e5fdd7c9863bd9a72b0fe7f3b0" name="libtirpc" arch="src">
  <version epoch="0" ver="1.3.4" rel="150300.3.23.1"/>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1652184000">- fix memory leak in params.r_addr assignement (bsc#1198752)
  - add 0001-fix-parms.r_addr-memory-leak.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1658491200">-exclude ipv6 addresses in client protocol 2 code (bsc#1200800)
  - update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1662724800">- fix CVE-2021-46828: libtirpc: DoS vulnerability with lots of
  connections (bsc#1201680)
  - add 0001-Fix-DoS-vulnerability-in-libtirpc.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669723200">- consider /proc/sys/net/ipv4/ip_local_reserved_ports, before binding
  to a random port (bsc#1199467)
  - add binddynport-honor-ip_local_reserved_ports.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1697198400">-  update to 1.3.4 (bsc#1199467)
  * binddynport.c honor ip_local_reserved_ports
  - replaces: binddynport-honor-ip_local_reserved_ports.patch
  * gss-api: expose gss major/minor error in authgss_refresh()
  * rpcb_clnt.c: Eliminate double frees in delete_cache()
  * rpcb_clnt.c: memory leak in destroy_addr
  * portmapper: allow TCP-only portmapper
  * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep
  * clnt_raw.c: fix a possible null pointer dereference
  * bindresvport.c: fix a potential resource leakage
- update to 1.3.3 (bsc#1201680, CVE-2021-46828):
  * Fix DoS vulnerability in libtirpc
  - replaces: 0001-Fix-DoS-vulnerability-in-libtirpc.patch
  * _rpc_dtablesize: use portable system call
  * libtirpc: Fix use-after-free accessing the error number
  * Fix potential memory leak of parms.r_addr
  - replaces 0001-fix-parms.r_addr-memory-leak.patch
  * rpcb_clnt.c add mechanism to try v2 protocol first
  - preplaces: 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  * Eliminate deadlocks in connects with an MT environment
  * clnt_dg_freeres() uncleared set active state may deadlock
  * thread safe clnt destruction
  * SUNRPC: mutexed access blacklist_read state variable
  * SUNRPC: MT-safe overhaul of address cache management in rpcb_clnt.c
- drop 0001-Fix-DoS-vulnerability-in-libtirpc.patch (upstream)
- update to 1.3.2:
  * Replace the final SunRPC licenses with BSD licenses
  * blacklist: Add a few more well known ports
  * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS
- Update to libtirpc 1.3.1
  * Remove AUTH_DES interfaces from auth_des.h
    The unsupported  AUTH_DES authentication has be
    compiled out since commit d918e41d889 (Wed Oct 9 2019)
    replaced by API routines that return errors.
  * svc_dg: Free xp_netid during destroy
  * Fix memory management issues of fd locks
  * libtirpc: replace array with list for per-fd locks
  * __svc_vc_dodestroy: fix double free of xp_ltaddr.buf
  * __rpc_dtbsize: rlim_cur instead of rlim_max
  * pkg-config: use the correct replacements for libdir/includedir
  Patches replaced by update:
  binddynport-honor-ip_local_reserved_ports.patch (bsc#1199467)
  0001-Fix-DoS-vulnerability-in-libtirpc.patch (bsc#1201680)
  0001-fix-parms.r_addr-memory-leak.patch (bsc#1198752)
  0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  (bsc#1196647), (bsc#1200800), (bsc#1198176)
  * replaces /etc/netconfig-try-2-first by the environment variable
  RPCB_V2FIRST</changelog>
  <changelog author="thomas.blume@suse.com" date="1699272000">- fix sed parsing for libtirpc.pc.in in specfile (boo#1216862)</changelog>
</package>
<package pkgid="84a52092f2f8ac159ec372cff55eeee3d0d04b38a55d1be2b7f235855952e81b" name="libtirpc-netconfig" arch="aarch64">
  <version epoch="0" ver="1.3.4" rel="150300.3.20.1"/>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1652184000">- fix memory leak in params.r_addr assignement (bsc#1198752)
  - add 0001-fix-parms.r_addr-memory-leak.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1658491200">-exclude ipv6 addresses in client protocol 2 code (bsc#1200800)
  - update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1662724800">- fix CVE-2021-46828: libtirpc: DoS vulnerability with lots of
  connections (bsc#1201680)
  - add 0001-Fix-DoS-vulnerability-in-libtirpc.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669723200">- consider /proc/sys/net/ipv4/ip_local_reserved_ports, before binding
  to a random port (bsc#1199467)
  - add binddynport-honor-ip_local_reserved_ports.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1697198400">-  update to 1.3.4 (bsc#1199467)
  * binddynport.c honor ip_local_reserved_ports
  - replaces: binddynport-honor-ip_local_reserved_ports.patch
  * gss-api: expose gss major/minor error in authgss_refresh()
  * rpcb_clnt.c: Eliminate double frees in delete_cache()
  * rpcb_clnt.c: memory leak in destroy_addr
  * portmapper: allow TCP-only portmapper
  * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep
  * clnt_raw.c: fix a possible null pointer dereference
  * bindresvport.c: fix a potential resource leakage
- update to 1.3.3 (bsc#1201680, CVE-2021-46828):
  * Fix DoS vulnerability in libtirpc
  - replaces: 0001-Fix-DoS-vulnerability-in-libtirpc.patch
  * _rpc_dtablesize: use portable system call
  * libtirpc: Fix use-after-free accessing the error number
  * Fix potential memory leak of parms.r_addr
  - replaces 0001-fix-parms.r_addr-memory-leak.patch
  * rpcb_clnt.c add mechanism to try v2 protocol first
  - preplaces: 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  * Eliminate deadlocks in connects with an MT environment
  * clnt_dg_freeres() uncleared set active state may deadlock
  * thread safe clnt destruction
  * SUNRPC: mutexed access blacklist_read state variable
  * SUNRPC: MT-safe overhaul of address cache management in rpcb_clnt.c
- drop 0001-Fix-DoS-vulnerability-in-libtirpc.patch (upstream)
- update to 1.3.2:
  * Replace the final SunRPC licenses with BSD licenses
  * blacklist: Add a few more well known ports
  * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS
- Update to libtirpc 1.3.1
  * Remove AUTH_DES interfaces from auth_des.h
    The unsupported  AUTH_DES authentication has be
    compiled out since commit d918e41d889 (Wed Oct 9 2019)
    replaced by API routines that return errors.
  * svc_dg: Free xp_netid during destroy
  * Fix memory management issues of fd locks
  * libtirpc: replace array with list for per-fd locks
  * __svc_vc_dodestroy: fix double free of xp_ltaddr.buf
  * __rpc_dtbsize: rlim_cur instead of rlim_max
  * pkg-config: use the correct replacements for libdir/includedir
  Patches replaced by update:
  binddynport-honor-ip_local_reserved_ports.patch (bsc#1199467)
  0001-Fix-DoS-vulnerability-in-libtirpc.patch (bsc#1201680)
  0001-fix-parms.r_addr-memory-leak.patch (bsc#1198752)
  0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  (bsc#1196647), (bsc#1200800), (bsc#1198176)
  * replaces /etc/netconfig-try-2-first by the environment variable
  RPCB_V2FIRST</changelog>
</package>
<package pkgid="a4a30e8e4394655710865b55f575d520e8689b2ac66038378d947c5faf1ec981" name="libtirpc-netconfig" arch="s390x">
  <version epoch="0" ver="1.3.4" rel="150300.3.20.1"/>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1652184000">- fix memory leak in params.r_addr assignement (bsc#1198752)
  - add 0001-fix-parms.r_addr-memory-leak.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1658491200">-exclude ipv6 addresses in client protocol 2 code (bsc#1200800)
  - update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1662724800">- fix CVE-2021-46828: libtirpc: DoS vulnerability with lots of
  connections (bsc#1201680)
  - add 0001-Fix-DoS-vulnerability-in-libtirpc.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669723200">- consider /proc/sys/net/ipv4/ip_local_reserved_ports, before binding
  to a random port (bsc#1199467)
  - add binddynport-honor-ip_local_reserved_ports.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1697198400">-  update to 1.3.4 (bsc#1199467)
  * binddynport.c honor ip_local_reserved_ports
  - replaces: binddynport-honor-ip_local_reserved_ports.patch
  * gss-api: expose gss major/minor error in authgss_refresh()
  * rpcb_clnt.c: Eliminate double frees in delete_cache()
  * rpcb_clnt.c: memory leak in destroy_addr
  * portmapper: allow TCP-only portmapper
  * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep
  * clnt_raw.c: fix a possible null pointer dereference
  * bindresvport.c: fix a potential resource leakage
- update to 1.3.3 (bsc#1201680, CVE-2021-46828):
  * Fix DoS vulnerability in libtirpc
  - replaces: 0001-Fix-DoS-vulnerability-in-libtirpc.patch
  * _rpc_dtablesize: use portable system call
  * libtirpc: Fix use-after-free accessing the error number
  * Fix potential memory leak of parms.r_addr
  - replaces 0001-fix-parms.r_addr-memory-leak.patch
  * rpcb_clnt.c add mechanism to try v2 protocol first
  - preplaces: 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  * Eliminate deadlocks in connects with an MT environment
  * clnt_dg_freeres() uncleared set active state may deadlock
  * thread safe clnt destruction
  * SUNRPC: mutexed access blacklist_read state variable
  * SUNRPC: MT-safe overhaul of address cache management in rpcb_clnt.c
- drop 0001-Fix-DoS-vulnerability-in-libtirpc.patch (upstream)
- update to 1.3.2:
  * Replace the final SunRPC licenses with BSD licenses
  * blacklist: Add a few more well known ports
  * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS
- Update to libtirpc 1.3.1
  * Remove AUTH_DES interfaces from auth_des.h
    The unsupported  AUTH_DES authentication has be
    compiled out since commit d918e41d889 (Wed Oct 9 2019)
    replaced by API routines that return errors.
  * svc_dg: Free xp_netid during destroy
  * Fix memory management issues of fd locks
  * libtirpc: replace array with list for per-fd locks
  * __svc_vc_dodestroy: fix double free of xp_ltaddr.buf
  * __rpc_dtbsize: rlim_cur instead of rlim_max
  * pkg-config: use the correct replacements for libdir/includedir
  Patches replaced by update:
  binddynport-honor-ip_local_reserved_ports.patch (bsc#1199467)
  0001-Fix-DoS-vulnerability-in-libtirpc.patch (bsc#1201680)
  0001-fix-parms.r_addr-memory-leak.patch (bsc#1198752)
  0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  (bsc#1196647), (bsc#1200800), (bsc#1198176)
  * replaces /etc/netconfig-try-2-first by the environment variable
  RPCB_V2FIRST</changelog>
</package>
<package pkgid="ad01059eba7c87d88d7bf2dc6a808337d690fe15d58d57c2ba10f70e1700f14e" name="libtirpc-netconfig" arch="x86_64">
  <version epoch="0" ver="1.3.4" rel="150300.3.20.1"/>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1652184000">- fix memory leak in params.r_addr assignement (bsc#1198752)
  - add 0001-fix-parms.r_addr-memory-leak.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1658491200">-exclude ipv6 addresses in client protocol 2 code (bsc#1200800)
  - update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1662724800">- fix CVE-2021-46828: libtirpc: DoS vulnerability with lots of
  connections (bsc#1201680)
  - add 0001-Fix-DoS-vulnerability-in-libtirpc.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669723200">- consider /proc/sys/net/ipv4/ip_local_reserved_ports, before binding
  to a random port (bsc#1199467)
  - add binddynport-honor-ip_local_reserved_ports.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1697198400">-  update to 1.3.4 (bsc#1199467)
  * binddynport.c honor ip_local_reserved_ports
  - replaces: binddynport-honor-ip_local_reserved_ports.patch
  * gss-api: expose gss major/minor error in authgss_refresh()
  * rpcb_clnt.c: Eliminate double frees in delete_cache()
  * rpcb_clnt.c: memory leak in destroy_addr
  * portmapper: allow TCP-only portmapper
  * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep
  * clnt_raw.c: fix a possible null pointer dereference
  * bindresvport.c: fix a potential resource leakage
- update to 1.3.3 (bsc#1201680, CVE-2021-46828):
  * Fix DoS vulnerability in libtirpc
  - replaces: 0001-Fix-DoS-vulnerability-in-libtirpc.patch
  * _rpc_dtablesize: use portable system call
  * libtirpc: Fix use-after-free accessing the error number
  * Fix potential memory leak of parms.r_addr
  - replaces 0001-fix-parms.r_addr-memory-leak.patch
  * rpcb_clnt.c add mechanism to try v2 protocol first
  - preplaces: 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  * Eliminate deadlocks in connects with an MT environment
  * clnt_dg_freeres() uncleared set active state may deadlock
  * thread safe clnt destruction
  * SUNRPC: mutexed access blacklist_read state variable
  * SUNRPC: MT-safe overhaul of address cache management in rpcb_clnt.c
- drop 0001-Fix-DoS-vulnerability-in-libtirpc.patch (upstream)
- update to 1.3.2:
  * Replace the final SunRPC licenses with BSD licenses
  * blacklist: Add a few more well known ports
  * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS
- Update to libtirpc 1.3.1
  * Remove AUTH_DES interfaces from auth_des.h
    The unsupported  AUTH_DES authentication has be
    compiled out since commit d918e41d889 (Wed Oct 9 2019)
    replaced by API routines that return errors.
  * svc_dg: Free xp_netid during destroy
  * Fix memory management issues of fd locks
  * libtirpc: replace array with list for per-fd locks
  * __svc_vc_dodestroy: fix double free of xp_ltaddr.buf
  * __rpc_dtbsize: rlim_cur instead of rlim_max
  * pkg-config: use the correct replacements for libdir/includedir
  Patches replaced by update:
  binddynport-honor-ip_local_reserved_ports.patch (bsc#1199467)
  0001-Fix-DoS-vulnerability-in-libtirpc.patch (bsc#1201680)
  0001-fix-parms.r_addr-memory-leak.patch (bsc#1198752)
  0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  (bsc#1196647), (bsc#1200800), (bsc#1198176)
  * replaces /etc/netconfig-try-2-first by the environment variable
  RPCB_V2FIRST</changelog>
</package>
<package pkgid="0886d8d15afa22ae01a0c5ef492b904eebd30dc9a41464b9b3837db4bd92dab7" name="libtirpc-netconfig" arch="aarch64">
  <version epoch="0" ver="1.3.4" rel="150300.3.23.1"/>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1652184000">- fix memory leak in params.r_addr assignement (bsc#1198752)
  - add 0001-fix-parms.r_addr-memory-leak.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1658491200">-exclude ipv6 addresses in client protocol 2 code (bsc#1200800)
  - update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1662724800">- fix CVE-2021-46828: libtirpc: DoS vulnerability with lots of
  connections (bsc#1201680)
  - add 0001-Fix-DoS-vulnerability-in-libtirpc.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669723200">- consider /proc/sys/net/ipv4/ip_local_reserved_ports, before binding
  to a random port (bsc#1199467)
  - add binddynport-honor-ip_local_reserved_ports.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1697198400">-  update to 1.3.4 (bsc#1199467)
  * binddynport.c honor ip_local_reserved_ports
  - replaces: binddynport-honor-ip_local_reserved_ports.patch
  * gss-api: expose gss major/minor error in authgss_refresh()
  * rpcb_clnt.c: Eliminate double frees in delete_cache()
  * rpcb_clnt.c: memory leak in destroy_addr
  * portmapper: allow TCP-only portmapper
  * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep
  * clnt_raw.c: fix a possible null pointer dereference
  * bindresvport.c: fix a potential resource leakage
- update to 1.3.3 (bsc#1201680, CVE-2021-46828):
  * Fix DoS vulnerability in libtirpc
  - replaces: 0001-Fix-DoS-vulnerability-in-libtirpc.patch
  * _rpc_dtablesize: use portable system call
  * libtirpc: Fix use-after-free accessing the error number
  * Fix potential memory leak of parms.r_addr
  - replaces 0001-fix-parms.r_addr-memory-leak.patch
  * rpcb_clnt.c add mechanism to try v2 protocol first
  - preplaces: 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  * Eliminate deadlocks in connects with an MT environment
  * clnt_dg_freeres() uncleared set active state may deadlock
  * thread safe clnt destruction
  * SUNRPC: mutexed access blacklist_read state variable
  * SUNRPC: MT-safe overhaul of address cache management in rpcb_clnt.c
- drop 0001-Fix-DoS-vulnerability-in-libtirpc.patch (upstream)
- update to 1.3.2:
  * Replace the final SunRPC licenses with BSD licenses
  * blacklist: Add a few more well known ports
  * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS
- Update to libtirpc 1.3.1
  * Remove AUTH_DES interfaces from auth_des.h
    The unsupported  AUTH_DES authentication has be
    compiled out since commit d918e41d889 (Wed Oct 9 2019)
    replaced by API routines that return errors.
  * svc_dg: Free xp_netid during destroy
  * Fix memory management issues of fd locks
  * libtirpc: replace array with list for per-fd locks
  * __svc_vc_dodestroy: fix double free of xp_ltaddr.buf
  * __rpc_dtbsize: rlim_cur instead of rlim_max
  * pkg-config: use the correct replacements for libdir/includedir
  Patches replaced by update:
  binddynport-honor-ip_local_reserved_ports.patch (bsc#1199467)
  0001-Fix-DoS-vulnerability-in-libtirpc.patch (bsc#1201680)
  0001-fix-parms.r_addr-memory-leak.patch (bsc#1198752)
  0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  (bsc#1196647), (bsc#1200800), (bsc#1198176)
  * replaces /etc/netconfig-try-2-first by the environment variable
  RPCB_V2FIRST</changelog>
  <changelog author="thomas.blume@suse.com" date="1699272000">- fix sed parsing for libtirpc.pc.in in specfile (boo#1216862)</changelog>
</package>
<package pkgid="56e02407dd95cc4c492181e59950743d9a1bea57c0153a2c361c91a7537cca66" name="libtirpc-netconfig" arch="s390x">
  <version epoch="0" ver="1.3.4" rel="150300.3.23.1"/>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1652184000">- fix memory leak in params.r_addr assignement (bsc#1198752)
  - add 0001-fix-parms.r_addr-memory-leak.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1658491200">-exclude ipv6 addresses in client protocol 2 code (bsc#1200800)
  - update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1662724800">- fix CVE-2021-46828: libtirpc: DoS vulnerability with lots of
  connections (bsc#1201680)
  - add 0001-Fix-DoS-vulnerability-in-libtirpc.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669723200">- consider /proc/sys/net/ipv4/ip_local_reserved_ports, before binding
  to a random port (bsc#1199467)
  - add binddynport-honor-ip_local_reserved_ports.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1697198400">-  update to 1.3.4 (bsc#1199467)
  * binddynport.c honor ip_local_reserved_ports
  - replaces: binddynport-honor-ip_local_reserved_ports.patch
  * gss-api: expose gss major/minor error in authgss_refresh()
  * rpcb_clnt.c: Eliminate double frees in delete_cache()
  * rpcb_clnt.c: memory leak in destroy_addr
  * portmapper: allow TCP-only portmapper
  * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep
  * clnt_raw.c: fix a possible null pointer dereference
  * bindresvport.c: fix a potential resource leakage
- update to 1.3.3 (bsc#1201680, CVE-2021-46828):
  * Fix DoS vulnerability in libtirpc
  - replaces: 0001-Fix-DoS-vulnerability-in-libtirpc.patch
  * _rpc_dtablesize: use portable system call
  * libtirpc: Fix use-after-free accessing the error number
  * Fix potential memory leak of parms.r_addr
  - replaces 0001-fix-parms.r_addr-memory-leak.patch
  * rpcb_clnt.c add mechanism to try v2 protocol first
  - preplaces: 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  * Eliminate deadlocks in connects with an MT environment
  * clnt_dg_freeres() uncleared set active state may deadlock
  * thread safe clnt destruction
  * SUNRPC: mutexed access blacklist_read state variable
  * SUNRPC: MT-safe overhaul of address cache management in rpcb_clnt.c
- drop 0001-Fix-DoS-vulnerability-in-libtirpc.patch (upstream)
- update to 1.3.2:
  * Replace the final SunRPC licenses with BSD licenses
  * blacklist: Add a few more well known ports
  * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS
- Update to libtirpc 1.3.1
  * Remove AUTH_DES interfaces from auth_des.h
    The unsupported  AUTH_DES authentication has be
    compiled out since commit d918e41d889 (Wed Oct 9 2019)
    replaced by API routines that return errors.
  * svc_dg: Free xp_netid during destroy
  * Fix memory management issues of fd locks
  * libtirpc: replace array with list for per-fd locks
  * __svc_vc_dodestroy: fix double free of xp_ltaddr.buf
  * __rpc_dtbsize: rlim_cur instead of rlim_max
  * pkg-config: use the correct replacements for libdir/includedir
  Patches replaced by update:
  binddynport-honor-ip_local_reserved_ports.patch (bsc#1199467)
  0001-Fix-DoS-vulnerability-in-libtirpc.patch (bsc#1201680)
  0001-fix-parms.r_addr-memory-leak.patch (bsc#1198752)
  0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  (bsc#1196647), (bsc#1200800), (bsc#1198176)
  * replaces /etc/netconfig-try-2-first by the environment variable
  RPCB_V2FIRST</changelog>
  <changelog author="thomas.blume@suse.com" date="1699272000">- fix sed parsing for libtirpc.pc.in in specfile (boo#1216862)</changelog>
</package>
<package pkgid="63350e9e5e3c34343a57bdef59e6cc38b5f6a82668543a21d4312c8ceeeae7e8" name="libtirpc-netconfig" arch="x86_64">
  <version epoch="0" ver="1.3.4" rel="150300.3.23.1"/>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1652184000">- fix memory leak in params.r_addr assignement (bsc#1198752)
  - add 0001-fix-parms.r_addr-memory-leak.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1658491200">-exclude ipv6 addresses in client protocol 2 code (bsc#1200800)
  - update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1662724800">- fix CVE-2021-46828: libtirpc: DoS vulnerability with lots of
  connections (bsc#1201680)
  - add 0001-Fix-DoS-vulnerability-in-libtirpc.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669723200">- consider /proc/sys/net/ipv4/ip_local_reserved_ports, before binding
  to a random port (bsc#1199467)
  - add binddynport-honor-ip_local_reserved_ports.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1697198400">-  update to 1.3.4 (bsc#1199467)
  * binddynport.c honor ip_local_reserved_ports
  - replaces: binddynport-honor-ip_local_reserved_ports.patch
  * gss-api: expose gss major/minor error in authgss_refresh()
  * rpcb_clnt.c: Eliminate double frees in delete_cache()
  * rpcb_clnt.c: memory leak in destroy_addr
  * portmapper: allow TCP-only portmapper
  * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep
  * clnt_raw.c: fix a possible null pointer dereference
  * bindresvport.c: fix a potential resource leakage
- update to 1.3.3 (bsc#1201680, CVE-2021-46828):
  * Fix DoS vulnerability in libtirpc
  - replaces: 0001-Fix-DoS-vulnerability-in-libtirpc.patch
  * _rpc_dtablesize: use portable system call
  * libtirpc: Fix use-after-free accessing the error number
  * Fix potential memory leak of parms.r_addr
  - replaces 0001-fix-parms.r_addr-memory-leak.patch
  * rpcb_clnt.c add mechanism to try v2 protocol first
  - preplaces: 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  * Eliminate deadlocks in connects with an MT environment
  * clnt_dg_freeres() uncleared set active state may deadlock
  * thread safe clnt destruction
  * SUNRPC: mutexed access blacklist_read state variable
  * SUNRPC: MT-safe overhaul of address cache management in rpcb_clnt.c
- drop 0001-Fix-DoS-vulnerability-in-libtirpc.patch (upstream)
- update to 1.3.2:
  * Replace the final SunRPC licenses with BSD licenses
  * blacklist: Add a few more well known ports
  * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS
- Update to libtirpc 1.3.1
  * Remove AUTH_DES interfaces from auth_des.h
    The unsupported  AUTH_DES authentication has be
    compiled out since commit d918e41d889 (Wed Oct 9 2019)
    replaced by API routines that return errors.
  * svc_dg: Free xp_netid during destroy
  * Fix memory management issues of fd locks
  * libtirpc: replace array with list for per-fd locks
  * __svc_vc_dodestroy: fix double free of xp_ltaddr.buf
  * __rpc_dtbsize: rlim_cur instead of rlim_max
  * pkg-config: use the correct replacements for libdir/includedir
  Patches replaced by update:
  binddynport-honor-ip_local_reserved_ports.patch (bsc#1199467)
  0001-Fix-DoS-vulnerability-in-libtirpc.patch (bsc#1201680)
  0001-fix-parms.r_addr-memory-leak.patch (bsc#1198752)
  0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  (bsc#1196647), (bsc#1200800), (bsc#1198176)
  * replaces /etc/netconfig-try-2-first by the environment variable
  RPCB_V2FIRST</changelog>
  <changelog author="thomas.blume@suse.com" date="1699272000">- fix sed parsing for libtirpc.pc.in in specfile (boo#1216862)</changelog>
</package>
<package pkgid="54298f3dd6e231045ef2b7bb0d16ba6fdc40815d6dd80aa3e3e94589ada7213c" name="libtirpc3" arch="aarch64">
  <version epoch="0" ver="1.3.4" rel="150300.3.20.1"/>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1652184000">- fix memory leak in params.r_addr assignement (bsc#1198752)
  - add 0001-fix-parms.r_addr-memory-leak.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1658491200">-exclude ipv6 addresses in client protocol 2 code (bsc#1200800)
  - update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1662724800">- fix CVE-2021-46828: libtirpc: DoS vulnerability with lots of
  connections (bsc#1201680)
  - add 0001-Fix-DoS-vulnerability-in-libtirpc.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669723200">- consider /proc/sys/net/ipv4/ip_local_reserved_ports, before binding
  to a random port (bsc#1199467)
  - add binddynport-honor-ip_local_reserved_ports.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1697198400">-  update to 1.3.4 (bsc#1199467)
  * binddynport.c honor ip_local_reserved_ports
  - replaces: binddynport-honor-ip_local_reserved_ports.patch
  * gss-api: expose gss major/minor error in authgss_refresh()
  * rpcb_clnt.c: Eliminate double frees in delete_cache()
  * rpcb_clnt.c: memory leak in destroy_addr
  * portmapper: allow TCP-only portmapper
  * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep
  * clnt_raw.c: fix a possible null pointer dereference
  * bindresvport.c: fix a potential resource leakage
- update to 1.3.3 (bsc#1201680, CVE-2021-46828):
  * Fix DoS vulnerability in libtirpc
  - replaces: 0001-Fix-DoS-vulnerability-in-libtirpc.patch
  * _rpc_dtablesize: use portable system call
  * libtirpc: Fix use-after-free accessing the error number
  * Fix potential memory leak of parms.r_addr
  - replaces 0001-fix-parms.r_addr-memory-leak.patch
  * rpcb_clnt.c add mechanism to try v2 protocol first
  - preplaces: 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  * Eliminate deadlocks in connects with an MT environment
  * clnt_dg_freeres() uncleared set active state may deadlock
  * thread safe clnt destruction
  * SUNRPC: mutexed access blacklist_read state variable
  * SUNRPC: MT-safe overhaul of address cache management in rpcb_clnt.c
- drop 0001-Fix-DoS-vulnerability-in-libtirpc.patch (upstream)
- update to 1.3.2:
  * Replace the final SunRPC licenses with BSD licenses
  * blacklist: Add a few more well known ports
  * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS
- Update to libtirpc 1.3.1
  * Remove AUTH_DES interfaces from auth_des.h
    The unsupported  AUTH_DES authentication has be
    compiled out since commit d918e41d889 (Wed Oct 9 2019)
    replaced by API routines that return errors.
  * svc_dg: Free xp_netid during destroy
  * Fix memory management issues of fd locks
  * libtirpc: replace array with list for per-fd locks
  * __svc_vc_dodestroy: fix double free of xp_ltaddr.buf
  * __rpc_dtbsize: rlim_cur instead of rlim_max
  * pkg-config: use the correct replacements for libdir/includedir
  Patches replaced by update:
  binddynport-honor-ip_local_reserved_ports.patch (bsc#1199467)
  0001-Fix-DoS-vulnerability-in-libtirpc.patch (bsc#1201680)
  0001-fix-parms.r_addr-memory-leak.patch (bsc#1198752)
  0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  (bsc#1196647), (bsc#1200800), (bsc#1198176)
  * replaces /etc/netconfig-try-2-first by the environment variable
  RPCB_V2FIRST</changelog>
</package>
<package pkgid="46817297bf97a346b5defa5438579b57e9a9d835dee62b7904ce04d534bd6fc3" name="libtirpc3" arch="s390x">
  <version epoch="0" ver="1.3.4" rel="150300.3.20.1"/>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1652184000">- fix memory leak in params.r_addr assignement (bsc#1198752)
  - add 0001-fix-parms.r_addr-memory-leak.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1658491200">-exclude ipv6 addresses in client protocol 2 code (bsc#1200800)
  - update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1662724800">- fix CVE-2021-46828: libtirpc: DoS vulnerability with lots of
  connections (bsc#1201680)
  - add 0001-Fix-DoS-vulnerability-in-libtirpc.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669723200">- consider /proc/sys/net/ipv4/ip_local_reserved_ports, before binding
  to a random port (bsc#1199467)
  - add binddynport-honor-ip_local_reserved_ports.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1697198400">-  update to 1.3.4 (bsc#1199467)
  * binddynport.c honor ip_local_reserved_ports
  - replaces: binddynport-honor-ip_local_reserved_ports.patch
  * gss-api: expose gss major/minor error in authgss_refresh()
  * rpcb_clnt.c: Eliminate double frees in delete_cache()
  * rpcb_clnt.c: memory leak in destroy_addr
  * portmapper: allow TCP-only portmapper
  * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep
  * clnt_raw.c: fix a possible null pointer dereference
  * bindresvport.c: fix a potential resource leakage
- update to 1.3.3 (bsc#1201680, CVE-2021-46828):
  * Fix DoS vulnerability in libtirpc
  - replaces: 0001-Fix-DoS-vulnerability-in-libtirpc.patch
  * _rpc_dtablesize: use portable system call
  * libtirpc: Fix use-after-free accessing the error number
  * Fix potential memory leak of parms.r_addr
  - replaces 0001-fix-parms.r_addr-memory-leak.patch
  * rpcb_clnt.c add mechanism to try v2 protocol first
  - preplaces: 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  * Eliminate deadlocks in connects with an MT environment
  * clnt_dg_freeres() uncleared set active state may deadlock
  * thread safe clnt destruction
  * SUNRPC: mutexed access blacklist_read state variable
  * SUNRPC: MT-safe overhaul of address cache management in rpcb_clnt.c
- drop 0001-Fix-DoS-vulnerability-in-libtirpc.patch (upstream)
- update to 1.3.2:
  * Replace the final SunRPC licenses with BSD licenses
  * blacklist: Add a few more well known ports
  * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS
- Update to libtirpc 1.3.1
  * Remove AUTH_DES interfaces from auth_des.h
    The unsupported  AUTH_DES authentication has be
    compiled out since commit d918e41d889 (Wed Oct 9 2019)
    replaced by API routines that return errors.
  * svc_dg: Free xp_netid during destroy
  * Fix memory management issues of fd locks
  * libtirpc: replace array with list for per-fd locks
  * __svc_vc_dodestroy: fix double free of xp_ltaddr.buf
  * __rpc_dtbsize: rlim_cur instead of rlim_max
  * pkg-config: use the correct replacements for libdir/includedir
  Patches replaced by update:
  binddynport-honor-ip_local_reserved_ports.patch (bsc#1199467)
  0001-Fix-DoS-vulnerability-in-libtirpc.patch (bsc#1201680)
  0001-fix-parms.r_addr-memory-leak.patch (bsc#1198752)
  0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  (bsc#1196647), (bsc#1200800), (bsc#1198176)
  * replaces /etc/netconfig-try-2-first by the environment variable
  RPCB_V2FIRST</changelog>
</package>
<package pkgid="8943d7bf9fa0ab95382455410a88b77ad83deedb0de51d80682176b1ffa7db64" name="libtirpc3" arch="x86_64">
  <version epoch="0" ver="1.3.4" rel="150300.3.20.1"/>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1652184000">- fix memory leak in params.r_addr assignement (bsc#1198752)
  - add 0001-fix-parms.r_addr-memory-leak.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1658491200">-exclude ipv6 addresses in client protocol 2 code (bsc#1200800)
  - update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1662724800">- fix CVE-2021-46828: libtirpc: DoS vulnerability with lots of
  connections (bsc#1201680)
  - add 0001-Fix-DoS-vulnerability-in-libtirpc.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669723200">- consider /proc/sys/net/ipv4/ip_local_reserved_ports, before binding
  to a random port (bsc#1199467)
  - add binddynport-honor-ip_local_reserved_ports.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1697198400">-  update to 1.3.4 (bsc#1199467)
  * binddynport.c honor ip_local_reserved_ports
  - replaces: binddynport-honor-ip_local_reserved_ports.patch
  * gss-api: expose gss major/minor error in authgss_refresh()
  * rpcb_clnt.c: Eliminate double frees in delete_cache()
  * rpcb_clnt.c: memory leak in destroy_addr
  * portmapper: allow TCP-only portmapper
  * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep
  * clnt_raw.c: fix a possible null pointer dereference
  * bindresvport.c: fix a potential resource leakage
- update to 1.3.3 (bsc#1201680, CVE-2021-46828):
  * Fix DoS vulnerability in libtirpc
  - replaces: 0001-Fix-DoS-vulnerability-in-libtirpc.patch
  * _rpc_dtablesize: use portable system call
  * libtirpc: Fix use-after-free accessing the error number
  * Fix potential memory leak of parms.r_addr
  - replaces 0001-fix-parms.r_addr-memory-leak.patch
  * rpcb_clnt.c add mechanism to try v2 protocol first
  - preplaces: 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  * Eliminate deadlocks in connects with an MT environment
  * clnt_dg_freeres() uncleared set active state may deadlock
  * thread safe clnt destruction
  * SUNRPC: mutexed access blacklist_read state variable
  * SUNRPC: MT-safe overhaul of address cache management in rpcb_clnt.c
- drop 0001-Fix-DoS-vulnerability-in-libtirpc.patch (upstream)
- update to 1.3.2:
  * Replace the final SunRPC licenses with BSD licenses
  * blacklist: Add a few more well known ports
  * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS
- Update to libtirpc 1.3.1
  * Remove AUTH_DES interfaces from auth_des.h
    The unsupported  AUTH_DES authentication has be
    compiled out since commit d918e41d889 (Wed Oct 9 2019)
    replaced by API routines that return errors.
  * svc_dg: Free xp_netid during destroy
  * Fix memory management issues of fd locks
  * libtirpc: replace array with list for per-fd locks
  * __svc_vc_dodestroy: fix double free of xp_ltaddr.buf
  * __rpc_dtbsize: rlim_cur instead of rlim_max
  * pkg-config: use the correct replacements for libdir/includedir
  Patches replaced by update:
  binddynport-honor-ip_local_reserved_ports.patch (bsc#1199467)
  0001-Fix-DoS-vulnerability-in-libtirpc.patch (bsc#1201680)
  0001-fix-parms.r_addr-memory-leak.patch (bsc#1198752)
  0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  (bsc#1196647), (bsc#1200800), (bsc#1198176)
  * replaces /etc/netconfig-try-2-first by the environment variable
  RPCB_V2FIRST</changelog>
</package>
<package pkgid="00eee553dbd49a939e21865cd9d65074b06dbaf9aa071cd2ccaa1ba55dceb8b7" name="libtirpc3" arch="aarch64">
  <version epoch="0" ver="1.3.4" rel="150300.3.23.1"/>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1652184000">- fix memory leak in params.r_addr assignement (bsc#1198752)
  - add 0001-fix-parms.r_addr-memory-leak.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1658491200">-exclude ipv6 addresses in client protocol 2 code (bsc#1200800)
  - update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1662724800">- fix CVE-2021-46828: libtirpc: DoS vulnerability with lots of
  connections (bsc#1201680)
  - add 0001-Fix-DoS-vulnerability-in-libtirpc.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669723200">- consider /proc/sys/net/ipv4/ip_local_reserved_ports, before binding
  to a random port (bsc#1199467)
  - add binddynport-honor-ip_local_reserved_ports.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1697198400">-  update to 1.3.4 (bsc#1199467)
  * binddynport.c honor ip_local_reserved_ports
  - replaces: binddynport-honor-ip_local_reserved_ports.patch
  * gss-api: expose gss major/minor error in authgss_refresh()
  * rpcb_clnt.c: Eliminate double frees in delete_cache()
  * rpcb_clnt.c: memory leak in destroy_addr
  * portmapper: allow TCP-only portmapper
  * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep
  * clnt_raw.c: fix a possible null pointer dereference
  * bindresvport.c: fix a potential resource leakage
- update to 1.3.3 (bsc#1201680, CVE-2021-46828):
  * Fix DoS vulnerability in libtirpc
  - replaces: 0001-Fix-DoS-vulnerability-in-libtirpc.patch
  * _rpc_dtablesize: use portable system call
  * libtirpc: Fix use-after-free accessing the error number
  * Fix potential memory leak of parms.r_addr
  - replaces 0001-fix-parms.r_addr-memory-leak.patch
  * rpcb_clnt.c add mechanism to try v2 protocol first
  - preplaces: 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  * Eliminate deadlocks in connects with an MT environment
  * clnt_dg_freeres() uncleared set active state may deadlock
  * thread safe clnt destruction
  * SUNRPC: mutexed access blacklist_read state variable
  * SUNRPC: MT-safe overhaul of address cache management in rpcb_clnt.c
- drop 0001-Fix-DoS-vulnerability-in-libtirpc.patch (upstream)
- update to 1.3.2:
  * Replace the final SunRPC licenses with BSD licenses
  * blacklist: Add a few more well known ports
  * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS
- Update to libtirpc 1.3.1
  * Remove AUTH_DES interfaces from auth_des.h
    The unsupported  AUTH_DES authentication has be
    compiled out since commit d918e41d889 (Wed Oct 9 2019)
    replaced by API routines that return errors.
  * svc_dg: Free xp_netid during destroy
  * Fix memory management issues of fd locks
  * libtirpc: replace array with list for per-fd locks
  * __svc_vc_dodestroy: fix double free of xp_ltaddr.buf
  * __rpc_dtbsize: rlim_cur instead of rlim_max
  * pkg-config: use the correct replacements for libdir/includedir
  Patches replaced by update:
  binddynport-honor-ip_local_reserved_ports.patch (bsc#1199467)
  0001-Fix-DoS-vulnerability-in-libtirpc.patch (bsc#1201680)
  0001-fix-parms.r_addr-memory-leak.patch (bsc#1198752)
  0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  (bsc#1196647), (bsc#1200800), (bsc#1198176)
  * replaces /etc/netconfig-try-2-first by the environment variable
  RPCB_V2FIRST</changelog>
  <changelog author="thomas.blume@suse.com" date="1699272000">- fix sed parsing for libtirpc.pc.in in specfile (boo#1216862)</changelog>
</package>
<package pkgid="84295e15637455ef2bb5613eeb5a113b527d9c884f007fcf8115b7aecd370293" name="libtirpc3" arch="s390x">
  <version epoch="0" ver="1.3.4" rel="150300.3.23.1"/>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1652184000">- fix memory leak in params.r_addr assignement (bsc#1198752)
  - add 0001-fix-parms.r_addr-memory-leak.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1658491200">-exclude ipv6 addresses in client protocol 2 code (bsc#1200800)
  - update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1662724800">- fix CVE-2021-46828: libtirpc: DoS vulnerability with lots of
  connections (bsc#1201680)
  - add 0001-Fix-DoS-vulnerability-in-libtirpc.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669723200">- consider /proc/sys/net/ipv4/ip_local_reserved_ports, before binding
  to a random port (bsc#1199467)
  - add binddynport-honor-ip_local_reserved_ports.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1697198400">-  update to 1.3.4 (bsc#1199467)
  * binddynport.c honor ip_local_reserved_ports
  - replaces: binddynport-honor-ip_local_reserved_ports.patch
  * gss-api: expose gss major/minor error in authgss_refresh()
  * rpcb_clnt.c: Eliminate double frees in delete_cache()
  * rpcb_clnt.c: memory leak in destroy_addr
  * portmapper: allow TCP-only portmapper
  * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep
  * clnt_raw.c: fix a possible null pointer dereference
  * bindresvport.c: fix a potential resource leakage
- update to 1.3.3 (bsc#1201680, CVE-2021-46828):
  * Fix DoS vulnerability in libtirpc
  - replaces: 0001-Fix-DoS-vulnerability-in-libtirpc.patch
  * _rpc_dtablesize: use portable system call
  * libtirpc: Fix use-after-free accessing the error number
  * Fix potential memory leak of parms.r_addr
  - replaces 0001-fix-parms.r_addr-memory-leak.patch
  * rpcb_clnt.c add mechanism to try v2 protocol first
  - preplaces: 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  * Eliminate deadlocks in connects with an MT environment
  * clnt_dg_freeres() uncleared set active state may deadlock
  * thread safe clnt destruction
  * SUNRPC: mutexed access blacklist_read state variable
  * SUNRPC: MT-safe overhaul of address cache management in rpcb_clnt.c
- drop 0001-Fix-DoS-vulnerability-in-libtirpc.patch (upstream)
- update to 1.3.2:
  * Replace the final SunRPC licenses with BSD licenses
  * blacklist: Add a few more well known ports
  * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS
- Update to libtirpc 1.3.1
  * Remove AUTH_DES interfaces from auth_des.h
    The unsupported  AUTH_DES authentication has be
    compiled out since commit d918e41d889 (Wed Oct 9 2019)
    replaced by API routines that return errors.
  * svc_dg: Free xp_netid during destroy
  * Fix memory management issues of fd locks
  * libtirpc: replace array with list for per-fd locks
  * __svc_vc_dodestroy: fix double free of xp_ltaddr.buf
  * __rpc_dtbsize: rlim_cur instead of rlim_max
  * pkg-config: use the correct replacements for libdir/includedir
  Patches replaced by update:
  binddynport-honor-ip_local_reserved_ports.patch (bsc#1199467)
  0001-Fix-DoS-vulnerability-in-libtirpc.patch (bsc#1201680)
  0001-fix-parms.r_addr-memory-leak.patch (bsc#1198752)
  0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  (bsc#1196647), (bsc#1200800), (bsc#1198176)
  * replaces /etc/netconfig-try-2-first by the environment variable
  RPCB_V2FIRST</changelog>
  <changelog author="thomas.blume@suse.com" date="1699272000">- fix sed parsing for libtirpc.pc.in in specfile (boo#1216862)</changelog>
</package>
<package pkgid="e24629a7bd078f4f2fb0a855985ff80b44d77e4e4ad8d441bdb0cbbece0706e3" name="libtirpc3" arch="x86_64">
  <version epoch="0" ver="1.3.4" rel="150300.3.23.1"/>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1652184000">- fix memory leak in params.r_addr assignement (bsc#1198752)
  - add 0001-fix-parms.r_addr-memory-leak.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1658491200">-exclude ipv6 addresses in client protocol 2 code (bsc#1200800)
  - update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1662724800">- fix CVE-2021-46828: libtirpc: DoS vulnerability with lots of
  connections (bsc#1201680)
  - add 0001-Fix-DoS-vulnerability-in-libtirpc.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669723200">- consider /proc/sys/net/ipv4/ip_local_reserved_ports, before binding
  to a random port (bsc#1199467)
  - add binddynport-honor-ip_local_reserved_ports.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1697198400">-  update to 1.3.4 (bsc#1199467)
  * binddynport.c honor ip_local_reserved_ports
  - replaces: binddynport-honor-ip_local_reserved_ports.patch
  * gss-api: expose gss major/minor error in authgss_refresh()
  * rpcb_clnt.c: Eliminate double frees in delete_cache()
  * rpcb_clnt.c: memory leak in destroy_addr
  * portmapper: allow TCP-only portmapper
  * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep
  * clnt_raw.c: fix a possible null pointer dereference
  * bindresvport.c: fix a potential resource leakage
- update to 1.3.3 (bsc#1201680, CVE-2021-46828):
  * Fix DoS vulnerability in libtirpc
  - replaces: 0001-Fix-DoS-vulnerability-in-libtirpc.patch
  * _rpc_dtablesize: use portable system call
  * libtirpc: Fix use-after-free accessing the error number
  * Fix potential memory leak of parms.r_addr
  - replaces 0001-fix-parms.r_addr-memory-leak.patch
  * rpcb_clnt.c add mechanism to try v2 protocol first
  - preplaces: 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  * Eliminate deadlocks in connects with an MT environment
  * clnt_dg_freeres() uncleared set active state may deadlock
  * thread safe clnt destruction
  * SUNRPC: mutexed access blacklist_read state variable
  * SUNRPC: MT-safe overhaul of address cache management in rpcb_clnt.c
- drop 0001-Fix-DoS-vulnerability-in-libtirpc.patch (upstream)
- update to 1.3.2:
  * Replace the final SunRPC licenses with BSD licenses
  * blacklist: Add a few more well known ports
  * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS
- Update to libtirpc 1.3.1
  * Remove AUTH_DES interfaces from auth_des.h
    The unsupported  AUTH_DES authentication has be
    compiled out since commit d918e41d889 (Wed Oct 9 2019)
    replaced by API routines that return errors.
  * svc_dg: Free xp_netid during destroy
  * Fix memory management issues of fd locks
  * libtirpc: replace array with list for per-fd locks
  * __svc_vc_dodestroy: fix double free of xp_ltaddr.buf
  * __rpc_dtbsize: rlim_cur instead of rlim_max
  * pkg-config: use the correct replacements for libdir/includedir
  Patches replaced by update:
  binddynport-honor-ip_local_reserved_ports.patch (bsc#1199467)
  0001-Fix-DoS-vulnerability-in-libtirpc.patch (bsc#1201680)
  0001-fix-parms.r_addr-memory-leak.patch (bsc#1198752)
  0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  (bsc#1196647), (bsc#1200800), (bsc#1198176)
  * replaces /etc/netconfig-try-2-first by the environment variable
  RPCB_V2FIRST</changelog>
  <changelog author="thomas.blume@suse.com" date="1699272000">- fix sed parsing for libtirpc.pc.in in specfile (boo#1216862)</changelog>
</package>
<package pkgid="c24dcd4e448fc274913160db6558b0912f3a0f9b36f514abdfef1b9d8123ae4d" name="libtool" arch="src">
  <version epoch="0" ver="2.4.6" rel="150000.3.6.2"/>
  <changelog author="dmueller@suse.de" date="1320926400">- update to 2.4.2:
  - The generic approximation of the command line length limit (when getconf is
    not available) works again.  Regression introduced in v2.2.6-39-g9c3d4d8.
  - The bug that leaked developer tool paths into the release tarballs
    from ./bootstrap is fixed.
  - Improved support for the Cuda Compiler Driver (nvcc) on Darwin.
  - For GCC LTO support, the -fuse-linker-plugin switch is now also removed
    when computing compiler postdeps.
  - The undocumented hardcode_libdir_flag_spec_ld tag variable has been
    removed in favor of using hardcode_libdir_flag_spec with $wl set to empty.</changelog>
  <changelog author="coolo@suse.com" date="1322568000">- buildrequire automake for file list check</changelog>
  <changelog author="pth@suse.de" date="1342699200">- buildrequire makeinfo which is a seperate package now.</changelog>
  <changelog author="schwab@suse.de" date="1359806400">- Add config-guess-sub-update.patch:
  Update config.guess/sub for aarch64</changelog>
  <changelog author="pth@suse.de" date="1385467200">- Change License as described in bnc#818958.</changelog>
  <changelog author="dvaleev@suse.com" date="1405339200">- Add libtool-ppc64le.patch to fix libtool-testsuite tests</changelog>
  <changelog author="coolo@suse.com" date="1410264000">- install COPYING as %doc</changelog>
  <changelog author="foss@grueninger.de" date="1415016000">- Drop patch config-guess-sub-update.patch for libltdl/config as the
  folder no longer exists.
- Drop patch libtool-ppc64le.patch for ppc handling as it is already
  part of v2.4.3
- Update to libtool 2.4.3
  * * New features:
  - Moved to gnulib release infrastructure.
  - M4 is now used for scanning the M4 macros in your configure.ac that
  'libtoolize' looks at to determine what files you want, and where you
  would like them installed.  This means that you can compose your
  version number or any other argument that Libtoolize needs to know at
  M4 time using git-version-gen from gnulib, for example.
  - Invoking 'libtoolize --ltdl' no longer maintains a separate autoconf
  macro directory in the libltdl tree, but automatically adjusts the
  installed libltdl configuration files to share whatever macro
  directory is declared by the parent project. (Note: if you were
  already sharing a macro directory with AC_CONFIG_MACRO_DIR(ltdl/m4)
  or similar, that still works as does any other directory choice).
  - Invoking 'libtoolize --ltdl' no longer maintains a separate auxiliary
  scripts directory in the libltdl tree, but automatically adjusts the
  installed libltdl configuration files to share whatever auxiliary
  scripts directory is declared by the parent project. (Note: if you
  were already sharing an auxiliary directory with subproject libltdl
  using AC_CONFIG_AUX_DIR(ltdl/config) or similar, that still works as
  does any other directory choice).
  - The legacy tests have all been migrated to the Autotest harness.
  - The Autotest testsuite can be run without the especially time consuming
  tests with:
    make check-local TESTSUITEFLAGS='-k "!expensive"'
  * * Bug fixes:
  - Fix a long-standing latent bug in autom4te include path for autotests
  with VPATH builds.
  - Fix a long-standing latent bug in libtoolize that could delete lines
  from libltdl/Makefile.am in recursive mode due to underquoting in a
  sed script.
  - Fix a long-standing bug in libtoolize, by outputting the 'putting
  auxiliary files in' header with 'libtoolize --ltdl --subproject'.
  - Fix a long-standing bug in libtoolize subproject installation, by not
  installing a set of autoconf macro files into the parent project if
  there is no configure.ac present to use them.
  - The libtoolize subproject mode selector is now named '--subproject'
  and is equivalent to the implied '--subproject' mode when no other
  mode is selected; '--standalone' never worked, and is no longer
  accepted.
  - Libtool and libtoolize no longer choke on paths with a comma in them.
  - In the case where $SHELL does not have the same enhanced features
  (e.g. the ability to parse 'var+=append') as $CONFIG_SHELL, libtool
  will now correctly fallback to using only vanilla shell features
  instead of failing with a parse at startup.
  - Correctly recognize import libraries when Microsoft dumpbin is used
  as the name lister and extend the dumpbin wrapper to find symbols
  in import libraries using the -headers option of dumpbin. Also fix a
  bug in the dumpbin wrapper that could lead to broken symbol listings
  in some corner cases.
  - Use the improved Microsoft dumpbin support to mend preloading of
  import libraries for Microsoft Visual C/C++.
  - No longer mangle module-definition (.def) files when feeding them to
  the Microsoft Visual C/C++ linker via the -export-symbols argument to
  the libtool script, thus matching how .def files are handled when
  using GNU tools.
  - Recognize more variants (e.g. those starting with a LIBRARY statement)
  of module-definitions (.def) files when using them instead of a raw
  list of symbols to export.
  - Fix a long-standing bug when using libtoolize without automake; we
  no longer remove install-sh with --force, since it's not a file
  libtoolize will reinstall without --install..
  * * Important incompatible changes:
  - GNU M4 is required to run libtoolize in a directory with a
  'configure.ac' (or 'configure.in') that needs tracing to determine
  what modes and directories have been specified.
  - The use of the idiosyncratically named 'Makefile.inc' in nonrecursive
  libltdl builds is deprecated, although it will be supported for one
  more year or until the next release, whichever takes longer.  Please
  upgrade to the more standard naming of 'ltdl.mk' in keeping with other
  GNU projects.
  - libtoolize now behaves consistenty in respect of multiple directory
  arguments to ACLOCAL_AMFLAGS and multiple invocations of AC_CONFIG-
  _MACRO_DIRS, where the first directory is always selected.  Previous
  releases took the first ACLOCAL_AMFLAGS argument, but the last
  invocation of AC_CONFIG_MACRO_DIRS.
  - The libtoolize program now advises use of the new Autoconf
  AC_CONFIG_MACRO_DIRS declaration.  If you follow that advice, all
  your developers will need at least autoconf-2.70 and automake-1.13
  to rebootstrap your probject.  If you still need to support
  bootstrap with older Autotools, then you should add the following
  to your configure.ac file:
    m4_ifndef([AC_CONFIG_MACRO_DIRS],
    [m4_define([AC_CONFIG_MACRO_DIRS],
    m4_defn([AC_CONFIG_MACRO_DIR]))])
  - Overhead of probing for a non-backslash crippled echo equivalent
  during initialization of every script has been removed in favor of
  trusting that "printf %s\n" works out of the box on all non-museum
  host architectures.  Manually setting ECHO appropriately in the
  build environment will be necessary on some ancient architectures.
  * * Changes in supported systems or compilers:
  - Support for bitrig (*-*-bitrig*).
  - Solaris 7 and earlier requires ECHO=/usr/ucb/echo in the build
  environment, to build and use libtool.</changelog>
  <changelog author="pth@suse.de" date="1416571200">- Add libtool-dont_delete_gnulib_files.patch that prevents deletion
  of files from gnulib to be deleted by libtoolize.
- BuildRequire help2man.
- Remove unneeded clean section.
- Use rpm macros where possible.
- Pass V=1 to make to make compilation verbose.</changelog>
  <changelog author="foss@grueninger.de" date="1417262400">-</changelog>
  <changelog author="foss@grueninger.de" date="1417262401">- Drop patch libtool-dont_delete_gnulib_files.patch which is
  included in 2.4.4
- Update to libtool 2.4.4
  * * New features:
  - Libltdl maintains its own fork of argz, with macros and files in
    the LT_ and lt__ namespaces (resp.) where they cannot clash with
    client projects' use of gnulib argz.
  * * Bug fixes:
  - Installation of 'libtoolize' once again obeys '--program-prefix',
    '--program-suffix' and '--program-transform-name' configure options.
  - `libtoolize` doesn't remove any files that it can't reinstall,
    including old versions of the snippet directory, and gnulib's
    version of the argz module and supporting files.
  - LT_FUNC_DLYSM_USCORE now works correctly on systems that don't
    support self dlopen()ing.
  * * Important incompatible changes:
  - LT_LIB_DLLOAD no longer prepends -ldl or -ldld to LIBS, causing
    duplicate occurrences in libltdl link lines.  If you need to
    add a library for dlopen() or shl_load() in your Makefile, then
    use $(LIBADD_DLOPEN) or $(LIBADD_SHL_LOAD) respectively.  If you
    are using libltdl, this all happens automatically, and the only
    difference you'll see is no more duplicated library names in the
    verbose link line.
  * * Changes in supported systems or compilers:
  - Preliminary support for tcc on linux*.  Although it already worked
    sometimes in previous releases, making sure to set LD correctly now
    avoids mis-matching GNU ld with tcc:
    ./configure CC=tcc LD=tcc
  - Added -os2dllname option to work around 8 character base name
    limit on OS/2.  The option has no effect on other systems.
  - Support for DLL versioning, -export-symbols and -export-symbols-regex
    on OS/2.
  - Support filename-based shared library versioning on AIX. See manual
    for details.</changelog>
  <changelog author="foss@grueninger.de" date="1417867200">- Require M4 as libtool's libtoolize requires it since 2.4.3</changelog>
  <changelog author="foss@grueninger.de" date="1421928000">- Update to libtool 2.4.5
  New features:
  - Libtoolize searches for the best available M4 on the user PATH at
    runtime, rather than settling for the first one found.
  - Support munging sys_lib_dlsearch_path_spec with LT_SYS_LIBRARY_PATH
    environment variable.
  Bug fixes:
  - Bail out at configure time if the installed M4 is not sufficient
    for the purposes of libtoolize.
  - freebsd-elf library versioning was upgraded incorrectly in 2.4.4,
    but now works properly again.
  - Fix a 2.4.4 regression so that libltdl subprojects do not warn
    about missing libltdl/libltdl directory as in prior releases.
  - When using Sun C++ on Solaris or GNU/Linux we used to set libtool's
    postdeps permanently, based on the contents of $CXX and $CXXFLAGS at
    configure time, which was brittle and error-prone.  Now, we no
    longer check for a SunCC ABI at configure time, but augment the
    postdeps at libtool time based on the current invocation flags on
    each call.
  Changes in supported systems or compilers:
  - /usr/local prefixed rpaths are now added to the link-line on
    ia64-hp-hpux*, because the default system runtime loader path does
    not contain them.
  - Previously, when using Sun C++ on Solaris or GNU/Linux, `-Cstd -Crun`
    flags were added to $postdeps unless CXX or CXXFLAGS contained
    `-library=stlport4`.  Newer releases have added other compiler flags
    that are also incompatible with `-Cstd -Crun`, so now we don't add
    them if any of `-std=c++[0-9][0-9]`, `-library=stdcxx4` or
    `-compat=g` were found in CXX or CXXFLAGS when the Sun C++ compiler
    is detected.</changelog>
  <changelog author="pth@suse.de" date="1423483200">- Add libtool-no_host_name.patch to remove the host name from
  generated scripts (bnc#916268).</changelog>
  <changelog author="pth@suse.de" date="1429272000">- Update to 2.4.6:
  Noteworthy changes in release 2.4.6 (2015-02-15) [stable]
  * New features:
  - LT_SYS_LIBRARY_PATH can be set in config.site, or at configure time
    and persists correctly in the generated libtool script.
  * Bug fixes:
  - Fix a race condition in ltdl dryrun test that would cause spurious
    random failures of that test.
  - LT_SYS_DLSEARCH_PATH is munged correctly.
- Add tarball signature.</changelog>
  <changelog author="mpluskal@suse.com" date="1429444800">- Use url for signature
- Add keyring file for automatic verification of signature
- Cleanup spec file with spec-cleaner
- Remove old ppc/ppc64 obsolete/provides
- Update info pre/post requires and replace postun with preun</changelog>
  <changelog author="pth@suse.de" date="1429531200">- Remove empty entry.</changelog>
  <changelog author="pth@suse.de" date="1430740800">- Fix call of install_info.</changelog>
  <changelog author="pth@suse.de" date="1438862400">- Remove spurious install_info_delete in postun (bsc#940773).</changelog>
  <changelog author="dimstar@opensuse.org" date="1458129600">- Fix install_info_{install,delete} usage: install-info does not
  allow file globbing.</changelog>
</package>
<package pkgid="c6bd49de475b3d796cc0ca5c934ae78359220b7a2480e02c30cc5d9cf52206f6" name="libtool" arch="src">
  <version epoch="0" ver="2.4.6" rel="150000.3.8.1"/>
  <changelog author="dmueller@suse.de" date="1320926400">- update to 2.4.2:
  - The generic approximation of the command line length limit (when getconf is
    not available) works again.  Regression introduced in v2.2.6-39-g9c3d4d8.
  - The bug that leaked developer tool paths into the release tarballs
    from ./bootstrap is fixed.
  - Improved support for the Cuda Compiler Driver (nvcc) on Darwin.
  - For GCC LTO support, the -fuse-linker-plugin switch is now also removed
    when computing compiler postdeps.
  - The undocumented hardcode_libdir_flag_spec_ld tag variable has been
    removed in favor of using hardcode_libdir_flag_spec with $wl set to empty.</changelog>
  <changelog author="coolo@suse.com" date="1322568000">- buildrequire automake for file list check</changelog>
  <changelog author="pth@suse.de" date="1342699200">- buildrequire makeinfo which is a seperate package now.</changelog>
  <changelog author="schwab@suse.de" date="1359806400">- Add config-guess-sub-update.patch:
  Update config.guess/sub for aarch64</changelog>
  <changelog author="pth@suse.de" date="1385467200">- Change License as described in bnc#818958.</changelog>
  <changelog author="dvaleev@suse.com" date="1405339200">- Add libtool-ppc64le.patch to fix libtool-testsuite tests</changelog>
  <changelog author="coolo@suse.com" date="1410264000">- install COPYING as %doc</changelog>
  <changelog author="foss@grueninger.de" date="1415016000">- Drop patch config-guess-sub-update.patch for libltdl/config as the
  folder no longer exists.
- Drop patch libtool-ppc64le.patch for ppc handling as it is already
  part of v2.4.3
- Update to libtool 2.4.3
  * * New features:
  - Moved to gnulib release infrastructure.
  - M4 is now used for scanning the M4 macros in your configure.ac that
  'libtoolize' looks at to determine what files you want, and where you
  would like them installed.  This means that you can compose your
  version number or any other argument that Libtoolize needs to know at
  M4 time using git-version-gen from gnulib, for example.
  - Invoking 'libtoolize --ltdl' no longer maintains a separate autoconf
  macro directory in the libltdl tree, but automatically adjusts the
  installed libltdl configuration files to share whatever macro
  directory is declared by the parent project. (Note: if you were
  already sharing a macro directory with AC_CONFIG_MACRO_DIR(ltdl/m4)
  or similar, that still works as does any other directory choice).
  - Invoking 'libtoolize --ltdl' no longer maintains a separate auxiliary
  scripts directory in the libltdl tree, but automatically adjusts the
  installed libltdl configuration files to share whatever auxiliary
  scripts directory is declared by the parent project. (Note: if you
  were already sharing an auxiliary directory with subproject libltdl
  using AC_CONFIG_AUX_DIR(ltdl/config) or similar, that still works as
  does any other directory choice).
  - The legacy tests have all been migrated to the Autotest harness.
  - The Autotest testsuite can be run without the especially time consuming
  tests with:
    make check-local TESTSUITEFLAGS='-k "!expensive"'
  * * Bug fixes:
  - Fix a long-standing latent bug in autom4te include path for autotests
  with VPATH builds.
  - Fix a long-standing latent bug in libtoolize that could delete lines
  from libltdl/Makefile.am in recursive mode due to underquoting in a
  sed script.
  - Fix a long-standing bug in libtoolize, by outputting the 'putting
  auxiliary files in' header with 'libtoolize --ltdl --subproject'.
  - Fix a long-standing bug in libtoolize subproject installation, by not
  installing a set of autoconf macro files into the parent project if
  there is no configure.ac present to use them.
  - The libtoolize subproject mode selector is now named '--subproject'
  and is equivalent to the implied '--subproject' mode when no other
  mode is selected; '--standalone' never worked, and is no longer
  accepted.
  - Libtool and libtoolize no longer choke on paths with a comma in them.
  - In the case where $SHELL does not have the same enhanced features
  (e.g. the ability to parse 'var+=append') as $CONFIG_SHELL, libtool
  will now correctly fallback to using only vanilla shell features
  instead of failing with a parse at startup.
  - Correctly recognize import libraries when Microsoft dumpbin is used
  as the name lister and extend the dumpbin wrapper to find symbols
  in import libraries using the -headers option of dumpbin. Also fix a
  bug in the dumpbin wrapper that could lead to broken symbol listings
  in some corner cases.
  - Use the improved Microsoft dumpbin support to mend preloading of
  import libraries for Microsoft Visual C/C++.
  - No longer mangle module-definition (.def) files when feeding them to
  the Microsoft Visual C/C++ linker via the -export-symbols argument to
  the libtool script, thus matching how .def files are handled when
  using GNU tools.
  - Recognize more variants (e.g. those starting with a LIBRARY statement)
  of module-definitions (.def) files when using them instead of a raw
  list of symbols to export.
  - Fix a long-standing bug when using libtoolize without automake; we
  no longer remove install-sh with --force, since it's not a file
  libtoolize will reinstall without --install..
  * * Important incompatible changes:
  - GNU M4 is required to run libtoolize in a directory with a
  'configure.ac' (or 'configure.in') that needs tracing to determine
  what modes and directories have been specified.
  - The use of the idiosyncratically named 'Makefile.inc' in nonrecursive
  libltdl builds is deprecated, although it will be supported for one
  more year or until the next release, whichever takes longer.  Please
  upgrade to the more standard naming of 'ltdl.mk' in keeping with other
  GNU projects.
  - libtoolize now behaves consistenty in respect of multiple directory
  arguments to ACLOCAL_AMFLAGS and multiple invocations of AC_CONFIG-
  _MACRO_DIRS, where the first directory is always selected.  Previous
  releases took the first ACLOCAL_AMFLAGS argument, but the last
  invocation of AC_CONFIG_MACRO_DIRS.
  - The libtoolize program now advises use of the new Autoconf
  AC_CONFIG_MACRO_DIRS declaration.  If you follow that advice, all
  your developers will need at least autoconf-2.70 and automake-1.13
  to rebootstrap your probject.  If you still need to support
  bootstrap with older Autotools, then you should add the following
  to your configure.ac file:
    m4_ifndef([AC_CONFIG_MACRO_DIRS],
    [m4_define([AC_CONFIG_MACRO_DIRS],
    m4_defn([AC_CONFIG_MACRO_DIR]))])
  - Overhead of probing for a non-backslash crippled echo equivalent
  during initialization of every script has been removed in favor of
  trusting that "printf %s\n" works out of the box on all non-museum
  host architectures.  Manually setting ECHO appropriately in the
  build environment will be necessary on some ancient architectures.
  * * Changes in supported systems or compilers:
  - Support for bitrig (*-*-bitrig*).
  - Solaris 7 and earlier requires ECHO=/usr/ucb/echo in the build
  environment, to build and use libtool.</changelog>
  <changelog author="pth@suse.de" date="1416571200">- Add libtool-dont_delete_gnulib_files.patch that prevents deletion
  of files from gnulib to be deleted by libtoolize.
- BuildRequire help2man.
- Remove unneeded clean section.
- Use rpm macros where possible.
- Pass V=1 to make to make compilation verbose.</changelog>
  <changelog author="foss@grueninger.de" date="1417262400">-</changelog>
  <changelog author="foss@grueninger.de" date="1417262401">- Drop patch libtool-dont_delete_gnulib_files.patch which is
  included in 2.4.4
- Update to libtool 2.4.4
  * * New features:
  - Libltdl maintains its own fork of argz, with macros and files in
    the LT_ and lt__ namespaces (resp.) where they cannot clash with
    client projects' use of gnulib argz.
  * * Bug fixes:
  - Installation of 'libtoolize' once again obeys '--program-prefix',
    '--program-suffix' and '--program-transform-name' configure options.
  - `libtoolize` doesn't remove any files that it can't reinstall,
    including old versions of the snippet directory, and gnulib's
    version of the argz module and supporting files.
  - LT_FUNC_DLYSM_USCORE now works correctly on systems that don't
    support self dlopen()ing.
  * * Important incompatible changes:
  - LT_LIB_DLLOAD no longer prepends -ldl or -ldld to LIBS, causing
    duplicate occurrences in libltdl link lines.  If you need to
    add a library for dlopen() or shl_load() in your Makefile, then
    use $(LIBADD_DLOPEN) or $(LIBADD_SHL_LOAD) respectively.  If you
    are using libltdl, this all happens automatically, and the only
    difference you'll see is no more duplicated library names in the
    verbose link line.
  * * Changes in supported systems or compilers:
  - Preliminary support for tcc on linux*.  Although it already worked
    sometimes in previous releases, making sure to set LD correctly now
    avoids mis-matching GNU ld with tcc:
    ./configure CC=tcc LD=tcc
  - Added -os2dllname option to work around 8 character base name
    limit on OS/2.  The option has no effect on other systems.
  - Support for DLL versioning, -export-symbols and -export-symbols-regex
    on OS/2.
  - Support filename-based shared library versioning on AIX. See manual
    for details.</changelog>
  <changelog author="foss@grueninger.de" date="1417867200">- Require M4 as libtool's libtoolize requires it since 2.4.3</changelog>
  <changelog author="foss@grueninger.de" date="1421928000">- Update to libtool 2.4.5
  New features:
  - Libtoolize searches for the best available M4 on the user PATH at
    runtime, rather than settling for the first one found.
  - Support munging sys_lib_dlsearch_path_spec with LT_SYS_LIBRARY_PATH
    environment variable.
  Bug fixes:
  - Bail out at configure time if the installed M4 is not sufficient
    for the purposes of libtoolize.
  - freebsd-elf library versioning was upgraded incorrectly in 2.4.4,
    but now works properly again.
  - Fix a 2.4.4 regression so that libltdl subprojects do not warn
    about missing libltdl/libltdl directory as in prior releases.
  - When using Sun C++ on Solaris or GNU/Linux we used to set libtool's
    postdeps permanently, based on the contents of $CXX and $CXXFLAGS at
    configure time, which was brittle and error-prone.  Now, we no
    longer check for a SunCC ABI at configure time, but augment the
    postdeps at libtool time based on the current invocation flags on
    each call.
  Changes in supported systems or compilers:
  - /usr/local prefixed rpaths are now added to the link-line on
    ia64-hp-hpux*, because the default system runtime loader path does
    not contain them.
  - Previously, when using Sun C++ on Solaris or GNU/Linux, `-Cstd -Crun`
    flags were added to $postdeps unless CXX or CXXFLAGS contained
    `-library=stlport4`.  Newer releases have added other compiler flags
    that are also incompatible with `-Cstd -Crun`, so now we don't add
    them if any of `-std=c++[0-9][0-9]`, `-library=stdcxx4` or
    `-compat=g` were found in CXX or CXXFLAGS when the Sun C++ compiler
    is detected.</changelog>
  <changelog author="pth@suse.de" date="1423483200">- Add libtool-no_host_name.patch to remove the host name from
  generated scripts (bnc#916268).</changelog>
  <changelog author="pth@suse.de" date="1429272000">- Update to 2.4.6:
  Noteworthy changes in release 2.4.6 (2015-02-15) [stable]
  * New features:
  - LT_SYS_LIBRARY_PATH can be set in config.site, or at configure time
    and persists correctly in the generated libtool script.
  * Bug fixes:
  - Fix a race condition in ltdl dryrun test that would cause spurious
    random failures of that test.
  - LT_SYS_DLSEARCH_PATH is munged correctly.
- Add tarball signature.</changelog>
  <changelog author="mpluskal@suse.com" date="1429444800">- Use url for signature
- Add keyring file for automatic verification of signature
- Cleanup spec file with spec-cleaner
- Remove old ppc/ppc64 obsolete/provides
- Update info pre/post requires and replace postun with preun</changelog>
  <changelog author="pth@suse.de" date="1429531200">- Remove empty entry.</changelog>
  <changelog author="pth@suse.de" date="1430740800">- Fix call of install_info.</changelog>
  <changelog author="pth@suse.de" date="1438862400">- Remove spurious install_info_delete in postun (bsc#940773).</changelog>
  <changelog author="dimstar@opensuse.org" date="1458129600">- Fix install_info_{install,delete} usage: install-info does not
  allow file globbing.</changelog>
</package>
<package pkgid="3b4104147691b841ac4efbc766e78fc988501057cfe0150e4127cbfdd6979070" name="libtss2-esys0" arch="aarch64">
  <version epoch="0" ver="3.1.0" rel="150400.3.6.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1530792000">- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0
  and sys0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537272000">- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't
  properly updated (at least on SLES-12-SP4)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
</package>
<package pkgid="63cbd4a65a11a85283c4ec5ffc4fac681a4b32843f5c60a00dd60a159567c6f1" name="libtss2-esys0" arch="s390x">
  <version epoch="0" ver="3.1.0" rel="150400.3.6.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1530792000">- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0
  and sys0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537272000">- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't
  properly updated (at least on SLES-12-SP4)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
</package>
<package pkgid="2abbd8a50b4c16100b6e7a2c0da19dacf9d56b402d2122744ad50374f60f069d" name="libtss2-esys0" arch="x86_64">
  <version epoch="0" ver="3.1.0" rel="150400.3.6.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1530792000">- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0
  and sys0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537272000">- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't
  properly updated (at least on SLES-12-SP4)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
</package>
<package pkgid="7aa5a1e7a7c53334e6e36aa6eecc94162d408d406720baadba74a922f31a4375" name="libtss2-fapi1" arch="aarch64">
  <version epoch="0" ver="3.1.0" rel="150400.3.6.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1530792000">- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0
  and sys0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537272000">- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't
  properly updated (at least on SLES-12-SP4)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
</package>
<package pkgid="47f32314d779eba6e7ae4b78f2d330bc1939caae6ab480971b6817a7d5ba9e23" name="libtss2-fapi1" arch="s390x">
  <version epoch="0" ver="3.1.0" rel="150400.3.6.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1530792000">- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0
  and sys0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537272000">- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't
  properly updated (at least on SLES-12-SP4)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
</package>
<package pkgid="16c49352f9a06b4f684c359c7f00f916e9fab0cb37b7acff6582d30e292ea0f1" name="libtss2-fapi1" arch="x86_64">
  <version epoch="0" ver="3.1.0" rel="150400.3.6.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1530792000">- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0
  and sys0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537272000">- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't
  properly updated (at least on SLES-12-SP4)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
</package>
<package pkgid="b1e0603a79df4192c58f4ede7c23c0973f9137896c2d823ff7960779dc4c0da5" name="libtss2-mu0" arch="aarch64">
  <version epoch="0" ver="3.1.0" rel="150400.3.6.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1530792000">- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0
  and sys0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537272000">- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't
  properly updated (at least on SLES-12-SP4)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
</package>
<package pkgid="f862300ed0fef585cf126289ec38322cba80e9058d443b234f6ade66f51d24b9" name="libtss2-mu0" arch="s390x">
  <version epoch="0" ver="3.1.0" rel="150400.3.6.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1530792000">- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0
  and sys0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537272000">- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't
  properly updated (at least on SLES-12-SP4)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
</package>
<package pkgid="7b969614cea92211acabc8e8ea7ca8af3886d09109529ccc8fbc6904ada33cc4" name="libtss2-mu0" arch="x86_64">
  <version epoch="0" ver="3.1.0" rel="150400.3.6.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1530792000">- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0
  and sys0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537272000">- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't
  properly updated (at least on SLES-12-SP4)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
</package>
<package pkgid="15dd7e9dac4556ebda1057c05eb62961c2c34c54bda295050e0b057ba78fdf1c" name="libtss2-rc0" arch="aarch64">
  <version epoch="0" ver="3.1.0" rel="150400.3.6.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1530792000">- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0
  and sys0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537272000">- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't
  properly updated (at least on SLES-12-SP4)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
</package>
<package pkgid="026e229da7858698ad7998703d2a41eac64f87266580a8892269a76a8c48d504" name="libtss2-rc0" arch="s390x">
  <version epoch="0" ver="3.1.0" rel="150400.3.6.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1530792000">- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0
  and sys0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537272000">- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't
  properly updated (at least on SLES-12-SP4)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
</package>
<package pkgid="82be47d513e07d4b1ecd3736609dd4ac1a79b2b40c3a8fa854c19b9ec5de5a25" name="libtss2-rc0" arch="x86_64">
  <version epoch="0" ver="3.1.0" rel="150400.3.6.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1530792000">- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0
  and sys0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537272000">- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't
  properly updated (at least on SLES-12-SP4)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
</package>
<package pkgid="2b39803dec9ba769147c0d013bf823c413cfde70078900bff89dd84486f65ffc" name="libtss2-sys1" arch="aarch64">
  <version epoch="0" ver="3.1.0" rel="150400.3.6.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1530792000">- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0
  and sys0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537272000">- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't
  properly updated (at least on SLES-12-SP4)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
</package>
<package pkgid="aea8a917ca68c584988ee2deb3df808087f6de5cd4f9f44c8e037a9408612c53" name="libtss2-sys1" arch="s390x">
  <version epoch="0" ver="3.1.0" rel="150400.3.6.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1530792000">- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0
  and sys0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537272000">- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't
  properly updated (at least on SLES-12-SP4)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
</package>
<package pkgid="bc8a0a1654e8e129fb7215ace108fb23af5c6f43b0bfb473b91557479f8f136f" name="libtss2-sys1" arch="x86_64">
  <version epoch="0" ver="3.1.0" rel="150400.3.6.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1530792000">- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0
  and sys0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537272000">- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't
  properly updated (at least on SLES-12-SP4)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
</package>
<package pkgid="ab2a365c854bd5845c6c19d1c39270689cdccb95b2a3da43d8231785821df4e6" name="libtss2-tcti-device0" arch="aarch64">
  <version epoch="0" ver="3.1.0" rel="150400.3.6.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1530792000">- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0
  and sys0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537272000">- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't
  properly updated (at least on SLES-12-SP4)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
</package>
<package pkgid="255f584441c364fbd9c2f81c51ee584398b6d79d0d00653bfb398d83bb7a3be4" name="libtss2-tcti-device0" arch="s390x">
  <version epoch="0" ver="3.1.0" rel="150400.3.6.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1530792000">- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0
  and sys0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537272000">- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't
  properly updated (at least on SLES-12-SP4)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
</package>
<package pkgid="6b7f868ca660c885e6c6e2dc5dc554daae08531d0b39c6b245d592ac1e9ac9e2" name="libtss2-tcti-device0" arch="x86_64">
  <version epoch="0" ver="3.1.0" rel="150400.3.6.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1530792000">- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0
  and sys0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537272000">- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't
  properly updated (at least on SLES-12-SP4)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
</package>
<package pkgid="45693d9e3b4b34917286f2d06d5824e7746a9d0c7c74a04f5ec30083c7c8d481" name="libtss2-tctildr0" arch="aarch64">
  <version epoch="0" ver="3.1.0" rel="150400.3.6.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1530792000">- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0
  and sys0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537272000">- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't
  properly updated (at least on SLES-12-SP4)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
</package>
<package pkgid="65f45796133a738b29bfc74359ccf26af4d3f6bc0b57fa037e262f39b5e846d6" name="libtss2-tctildr0" arch="s390x">
  <version epoch="0" ver="3.1.0" rel="150400.3.6.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1530792000">- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0
  and sys0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537272000">- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't
  properly updated (at least on SLES-12-SP4)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
</package>
<package pkgid="5b6e0a291c523dee76e7a1604cfb6ea9ede21bc1f8049f28c1dc0886a9c56887" name="libtss2-tctildr0" arch="x86_64">
  <version epoch="0" ver="3.1.0" rel="150400.3.6.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1530792000">- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0
  and sys0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537272000">- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't
  properly updated (at least on SLES-12-SP4)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
</package>
<package pkgid="480885eb4153c28ac793c8cd91e4a23f80799181482cc5d8bf9ca3e5a7e31891" name="libtukit4" arch="aarch64">
  <version epoch="0" ver="4.1.6" rel="150500.3.3.1"/>
  <changelog author="iforster@suse.com" date="1631880000">- Version 3.5.5
  - t-u: Use tukit for SUSEConnect call [bsc#1190574]
    Correctly registers repositories</changelog>
  <changelog author="iforster@suse.com" date="1632398400">- Version 3.5.6
  - tukit: Add S/390 bootloader support [bsc#1189807]
  - t-u: support purge-kernels with t-u patch [bsc#1190788]</changelog>
  <changelog author="iforster@suse.com" date="1634040000">- Version 3.5.7
  Various fixes affecting Salt support:
  - t-u: Don't squash stderr messages into stdout
  - t-u: Correctly handle case when the snapshot has been deleted due to
    using --drop-if-no-change: Don't show reboot messages and avoid an awk
    error message [bsc#1191475]
  - tukit: Make inotify handler less sensitive / ignore more directories
    [bsc#1191475]</changelog>
  <changelog author="iforster@suse.com" date="1634904000">- Version 3.6.0
  - Simplify mount hierarchy by just using a single slave bind
    mount as the root of the update environment; this may avoid the
    error messages of failed unmounts
    May fix [boo#1191945]</changelog>
  <changelog author="iforster@suse.com" date="1636545600">- Version 3.6.1
  - Fix rsyncing /etc into the running system with
  - -drop-if-no-change [bsc#1192242]</changelog>
  <changelog author="iforster@suse.com" date="1637323200">- Version 3.6.2
  - Bind mount root file system snapshot on itself, this makes the
    temporary directory in /tmp unnecessary; also fixes [boo#1188110]
    to return the correct snapshot's working directory via API call.
  - Use separate mount namespace for transactional-update; this should
    fix several applications that fail to run if a mount point has the
    'unbindable' mount flag set</changelog>
  <changelog author="iforster@suse.com" date="1637582400">- Version 4.0.0~rc1
  This release is API, but not ABI compatible with previous releases;
  existing applications will have to be recompiled against this new version.
  Major features:
  - Introduces a D-Bus service to access the libtukit API via the
    org.opensuse.tukit.Transaction interface
  - Introduces a C binding via libtukit.h.
  Other changes:
  - t-u: Rework --quiet handling to make sure no output is shown even in
    error cases; this is necessary for automation, e.g. with Salt.
    [gh#openSUSE/transactional-update#73]
  - tukit: Allow storing command output into variable by introducing a new
    optional parameter for "execute" and "callExt".
  - Replace multiple and non-standalone occurenses of {} in "callExt"
    argument.
  - Split transactional-update.timer into transactional-update.timer
    and transactional-update-cleanup.timer; the later will clean up
    old snapshots even when the system does not do automatic updates.
  - tukit: Remove legacy alias "setDiscard" for "setDiscardIfUnchanged".
  - Throw exception if snapshot is not found.
  - Fix various compiler warnings
- Update spec file:
  - Include tukitd D-Bus daemon
  - Only install one version of the library (as there are no breaking API
    changes yet)
  - Add %pre scriplets for systemd services
  - Replace %systemd_postun scriptlets with %systemd_postun_with_restart
    to satisfy rpmlint checks
  - Add transactional-update log file as %ghost file</changelog>
  <changelog author="iforster@suse.com" date="1646568000">- Version 4.0.0~rc2
  - Fix missing prompt in "shell" command [bsc#1196580]
  - Add output of tukit commands to log file
  - Fix compilation error with GCC12 [boo#1194876]
  - Fixed (non-critical) security review comments [boo#1196149]
  - Fixed selfupdate
  - Code cleanup</changelog>
  <changelog author="iforster@suse.com" date="1651579200">- Version 4.0.0~rc3
  - Add Snapshot interface
  - Reworked signal handling: All public signals are sent from the
    main thread now, keeping the same sender for everything
  - Implement D-Bus call "Execute" for Transactions
  - Implement interface for listing Snapshots
  - Implement Reboot interface
  - Fix bug when using --continue on old snapshots
  - Fix hypothetical integer overflow in snapshot list [bsc#1196826]
  - Fix wrong sort order in status command
    [gh#openSUSE/transactional-update#80]</changelog>
  <changelog author="iforster@suse.com" date="1652788800">- Version 4.0.0~rc4
  - Fix building with GCC 12
  - Fix stack overflow with very long commands / ids [bsc#1196149]
  - Use separate mount namespace for chroot, allowing overwriting
    the bind mounts from the update environment - this could have
    lead to data loss of the bind mount previously
  - Fix C error and exception handling for snapshots</changelog>
  <changelog author="schubi@suse.com" date="1655812800">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="iforster@suse.com" date="1659441600">- Version 4.0.0
  - Last minute interface change: Changed "List" method of Snapshot D-Bus
    interface to return a map of properties instead of a comma separated
    list of strings; this will allow retrieving the snapshot properties
    even if they contain a comma in their value [boo#1202147]
  - Remove "Snapshot.hpp" as a public API for now - all public
    functionality is part of SnapshotManager.hpp
  - Add header file documentation for SnapshotManager.hpp
  - Add method to delete snapshot
    [gh#openSUSE/transactional-update#52]
  - Allow setting description of snapshot
    [gh#openSUSE/transactional-update#55]
  - create_dirs_from_rpmdb: set SELinux file context of missing directories
    [gh#openSUSE/transactional-update#84], [bsc#1197242]
  - Fix broken logrotate due to typo in config file
    [gh#openSUSE/transactional-update#87]
  - create_dirs_from_rpmdb: Fix handling return code of create_dirs()
    [gh#openSUSE/transactional-update#86]
  - Fix broken "shell" prompt after selfupdate
  - Add documented D-Bus interface definition files
  - Add tukit_sm_get_current and tukit_sm_get_default to C interface
  - Fixed typos</changelog>
  <changelog author="fvogt@suse.com" date="1661169600">- Version 4.0.1
  - create_dirs_from_rpmdb: Just warn if no default SELinux context found
    [gh#openSUSE/transactional-update#88], [bsc#1188215]
  - create_dirs_from_rpmdb: Don't update the rpmdb cookie on failure
    [gh#openSUSE/transactional-update#88]
  - Handle directories owned by multiple packages
    [gh#openSUSE/transactional-update#90], [bsc#1188215]</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration of logrotate configuration to /usr/etc: Saving user
  changed configuration files in /etc and restoring them while
  an RPM update.</changelog>
  <changelog author="iforster@suse.com" date="1664539200">- Version 4.1.0
  - t-u: Add a "setup-kdump" command; implements [jsc#PED-1441]
  - Export TRANSACTIONAL_UPDATE_ROOT (the path to the snapshot) in
    the update environment; implements [jsc#PED-1078]
  - Add support for "notify" reboot method for desktop use
    [gh#openSUSE/transactional-update#93]
  - Fix kdump initrd recreation detection; the check was performed in the
    active snapshot instead of the target snapshot
  - Document register command [bsc#1202900]
  - Avoid unnecessary snapshots for register command [bsc#1202901]
  - Various optimizations for register command
  - Remove bogus error message when triggering reboot
  - Rework /etc overlay documentation in "The Transactional Update Guide"
  - Fix incorrect manpage formatting
  - Remove leftover "salt" reboot method in configuration example file
  - Replace deprecated std::mem_fn with lambdas</changelog>
  <changelog author="iforster@suse.com" date="1674043200">- Version 4.1.1
  - Mount user specific binddirs last: Prevously the internal mounts would
    potentially overwrite user bind mounts [boo#1205011]
  - selinux: Relabel shadowed /var files during update to make sure they
    don't interfere with the update [boo#1205937]
  - Clean up /var/lib/overlay more aggressively [boo#1206947]
  - tukit: Merge /etc overlay into parent if --discard is used together
    with --continue - previously the files were incorrectly always merged
    with the currently running system
  - status: do not execute the status command if experimental
  - Don't delete created mount point dirs any more
  - Small code optimizations</changelog>
  <changelog author="iforster@suse.com" date="1674475200">- Version 4.1.2
  - Don't try to mount user mounts if they don't exist [boo#1207366]</changelog>
  <changelog author="iforster@suse.com" date="1675857600">- Version 4.1.3
  - Suppress SELinux relabelling output in quiet mode
  - Documentation readability improvements</changelog>
  <changelog author="iforster@suse.com" date="1678449600">- Version 4.1.4
  - Workaround for broken Tumbleweed package libfdisk1</changelog>
  <changelog author="iforster@suse.com" date="1696507200">- Version 4.1.6
  - Use permissions of real /etc when creating overlay
    [bsc#1215878]
- Version 4.1.5
  - Add support for configuration file snippets</changelog>
</package>
<package pkgid="8c5293a42ae82f7eef9a68bf467d7199ab286f18cba4ed85576a8b9f6dd44361" name="libtukit4" arch="s390x">
  <version epoch="0" ver="4.1.6" rel="150500.3.3.1"/>
  <changelog author="iforster@suse.com" date="1631880000">- Version 3.5.5
  - t-u: Use tukit for SUSEConnect call [bsc#1190574]
    Correctly registers repositories</changelog>
  <changelog author="iforster@suse.com" date="1632398400">- Version 3.5.6
  - tukit: Add S/390 bootloader support [bsc#1189807]
  - t-u: support purge-kernels with t-u patch [bsc#1190788]</changelog>
  <changelog author="iforster@suse.com" date="1634040000">- Version 3.5.7
  Various fixes affecting Salt support:
  - t-u: Don't squash stderr messages into stdout
  - t-u: Correctly handle case when the snapshot has been deleted due to
    using --drop-if-no-change: Don't show reboot messages and avoid an awk
    error message [bsc#1191475]
  - tukit: Make inotify handler less sensitive / ignore more directories
    [bsc#1191475]</changelog>
  <changelog author="iforster@suse.com" date="1634904000">- Version 3.6.0
  - Simplify mount hierarchy by just using a single slave bind
    mount as the root of the update environment; this may avoid the
    error messages of failed unmounts
    May fix [boo#1191945]</changelog>
  <changelog author="iforster@suse.com" date="1636545600">- Version 3.6.1
  - Fix rsyncing /etc into the running system with
  - -drop-if-no-change [bsc#1192242]</changelog>
  <changelog author="iforster@suse.com" date="1637323200">- Version 3.6.2
  - Bind mount root file system snapshot on itself, this makes the
    temporary directory in /tmp unnecessary; also fixes [boo#1188110]
    to return the correct snapshot's working directory via API call.
  - Use separate mount namespace for transactional-update; this should
    fix several applications that fail to run if a mount point has the
    'unbindable' mount flag set</changelog>
  <changelog author="iforster@suse.com" date="1637582400">- Version 4.0.0~rc1
  This release is API, but not ABI compatible with previous releases;
  existing applications will have to be recompiled against this new version.
  Major features:
  - Introduces a D-Bus service to access the libtukit API via the
    org.opensuse.tukit.Transaction interface
  - Introduces a C binding via libtukit.h.
  Other changes:
  - t-u: Rework --quiet handling to make sure no output is shown even in
    error cases; this is necessary for automation, e.g. with Salt.
    [gh#openSUSE/transactional-update#73]
  - tukit: Allow storing command output into variable by introducing a new
    optional parameter for "execute" and "callExt".
  - Replace multiple and non-standalone occurenses of {} in "callExt"
    argument.
  - Split transactional-update.timer into transactional-update.timer
    and transactional-update-cleanup.timer; the later will clean up
    old snapshots even when the system does not do automatic updates.
  - tukit: Remove legacy alias "setDiscard" for "setDiscardIfUnchanged".
  - Throw exception if snapshot is not found.
  - Fix various compiler warnings
- Update spec file:
  - Include tukitd D-Bus daemon
  - Only install one version of the library (as there are no breaking API
    changes yet)
  - Add %pre scriplets for systemd services
  - Replace %systemd_postun scriptlets with %systemd_postun_with_restart
    to satisfy rpmlint checks
  - Add transactional-update log file as %ghost file</changelog>
  <changelog author="iforster@suse.com" date="1646568000">- Version 4.0.0~rc2
  - Fix missing prompt in "shell" command [bsc#1196580]
  - Add output of tukit commands to log file
  - Fix compilation error with GCC12 [boo#1194876]
  - Fixed (non-critical) security review comments [boo#1196149]
  - Fixed selfupdate
  - Code cleanup</changelog>
  <changelog author="iforster@suse.com" date="1651579200">- Version 4.0.0~rc3
  - Add Snapshot interface
  - Reworked signal handling: All public signals are sent from the
    main thread now, keeping the same sender for everything
  - Implement D-Bus call "Execute" for Transactions
  - Implement interface for listing Snapshots
  - Implement Reboot interface
  - Fix bug when using --continue on old snapshots
  - Fix hypothetical integer overflow in snapshot list [bsc#1196826]
  - Fix wrong sort order in status command
    [gh#openSUSE/transactional-update#80]</changelog>
  <changelog author="iforster@suse.com" date="1652788800">- Version 4.0.0~rc4
  - Fix building with GCC 12
  - Fix stack overflow with very long commands / ids [bsc#1196149]
  - Use separate mount namespace for chroot, allowing overwriting
    the bind mounts from the update environment - this could have
    lead to data loss of the bind mount previously
  - Fix C error and exception handling for snapshots</changelog>
  <changelog author="schubi@suse.com" date="1655812800">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="iforster@suse.com" date="1659441600">- Version 4.0.0
  - Last minute interface change: Changed "List" method of Snapshot D-Bus
    interface to return a map of properties instead of a comma separated
    list of strings; this will allow retrieving the snapshot properties
    even if they contain a comma in their value [boo#1202147]
  - Remove "Snapshot.hpp" as a public API for now - all public
    functionality is part of SnapshotManager.hpp
  - Add header file documentation for SnapshotManager.hpp
  - Add method to delete snapshot
    [gh#openSUSE/transactional-update#52]
  - Allow setting description of snapshot
    [gh#openSUSE/transactional-update#55]
  - create_dirs_from_rpmdb: set SELinux file context of missing directories
    [gh#openSUSE/transactional-update#84], [bsc#1197242]
  - Fix broken logrotate due to typo in config file
    [gh#openSUSE/transactional-update#87]
  - create_dirs_from_rpmdb: Fix handling return code of create_dirs()
    [gh#openSUSE/transactional-update#86]
  - Fix broken "shell" prompt after selfupdate
  - Add documented D-Bus interface definition files
  - Add tukit_sm_get_current and tukit_sm_get_default to C interface
  - Fixed typos</changelog>
  <changelog author="fvogt@suse.com" date="1661169600">- Version 4.0.1
  - create_dirs_from_rpmdb: Just warn if no default SELinux context found
    [gh#openSUSE/transactional-update#88], [bsc#1188215]
  - create_dirs_from_rpmdb: Don't update the rpmdb cookie on failure
    [gh#openSUSE/transactional-update#88]
  - Handle directories owned by multiple packages
    [gh#openSUSE/transactional-update#90], [bsc#1188215]</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration of logrotate configuration to /usr/etc: Saving user
  changed configuration files in /etc and restoring them while
  an RPM update.</changelog>
  <changelog author="iforster@suse.com" date="1664539200">- Version 4.1.0
  - t-u: Add a "setup-kdump" command; implements [jsc#PED-1441]
  - Export TRANSACTIONAL_UPDATE_ROOT (the path to the snapshot) in
    the update environment; implements [jsc#PED-1078]
  - Add support for "notify" reboot method for desktop use
    [gh#openSUSE/transactional-update#93]
  - Fix kdump initrd recreation detection; the check was performed in the
    active snapshot instead of the target snapshot
  - Document register command [bsc#1202900]
  - Avoid unnecessary snapshots for register command [bsc#1202901]
  - Various optimizations for register command
  - Remove bogus error message when triggering reboot
  - Rework /etc overlay documentation in "The Transactional Update Guide"
  - Fix incorrect manpage formatting
  - Remove leftover "salt" reboot method in configuration example file
  - Replace deprecated std::mem_fn with lambdas</changelog>
  <changelog author="iforster@suse.com" date="1674043200">- Version 4.1.1
  - Mount user specific binddirs last: Prevously the internal mounts would
    potentially overwrite user bind mounts [boo#1205011]
  - selinux: Relabel shadowed /var files during update to make sure they
    don't interfere with the update [boo#1205937]
  - Clean up /var/lib/overlay more aggressively [boo#1206947]
  - tukit: Merge /etc overlay into parent if --discard is used together
    with --continue - previously the files were incorrectly always merged
    with the currently running system
  - status: do not execute the status command if experimental
  - Don't delete created mount point dirs any more
  - Small code optimizations</changelog>
  <changelog author="iforster@suse.com" date="1674475200">- Version 4.1.2
  - Don't try to mount user mounts if they don't exist [boo#1207366]</changelog>
  <changelog author="iforster@suse.com" date="1675857600">- Version 4.1.3
  - Suppress SELinux relabelling output in quiet mode
  - Documentation readability improvements</changelog>
  <changelog author="iforster@suse.com" date="1678449600">- Version 4.1.4
  - Workaround for broken Tumbleweed package libfdisk1</changelog>
  <changelog author="iforster@suse.com" date="1696507200">- Version 4.1.6
  - Use permissions of real /etc when creating overlay
    [bsc#1215878]
- Version 4.1.5
  - Add support for configuration file snippets</changelog>
</package>
<package pkgid="02f5f76df9a6b719fd417dd0b56aa6bd840c2262b9c40ff9724ba8efc32af28f" name="libtukit4" arch="x86_64">
  <version epoch="0" ver="4.1.6" rel="150500.3.3.1"/>
  <changelog author="iforster@suse.com" date="1631880000">- Version 3.5.5
  - t-u: Use tukit for SUSEConnect call [bsc#1190574]
    Correctly registers repositories</changelog>
  <changelog author="iforster@suse.com" date="1632398400">- Version 3.5.6
  - tukit: Add S/390 bootloader support [bsc#1189807]
  - t-u: support purge-kernels with t-u patch [bsc#1190788]</changelog>
  <changelog author="iforster@suse.com" date="1634040000">- Version 3.5.7
  Various fixes affecting Salt support:
  - t-u: Don't squash stderr messages into stdout
  - t-u: Correctly handle case when the snapshot has been deleted due to
    using --drop-if-no-change: Don't show reboot messages and avoid an awk
    error message [bsc#1191475]
  - tukit: Make inotify handler less sensitive / ignore more directories
    [bsc#1191475]</changelog>
  <changelog author="iforster@suse.com" date="1634904000">- Version 3.6.0
  - Simplify mount hierarchy by just using a single slave bind
    mount as the root of the update environment; this may avoid the
    error messages of failed unmounts
    May fix [boo#1191945]</changelog>
  <changelog author="iforster@suse.com" date="1636545600">- Version 3.6.1
  - Fix rsyncing /etc into the running system with
  - -drop-if-no-change [bsc#1192242]</changelog>
  <changelog author="iforster@suse.com" date="1637323200">- Version 3.6.2
  - Bind mount root file system snapshot on itself, this makes the
    temporary directory in /tmp unnecessary; also fixes [boo#1188110]
    to return the correct snapshot's working directory via API call.
  - Use separate mount namespace for transactional-update; this should
    fix several applications that fail to run if a mount point has the
    'unbindable' mount flag set</changelog>
  <changelog author="iforster@suse.com" date="1637582400">- Version 4.0.0~rc1
  This release is API, but not ABI compatible with previous releases;
  existing applications will have to be recompiled against this new version.
  Major features:
  - Introduces a D-Bus service to access the libtukit API via the
    org.opensuse.tukit.Transaction interface
  - Introduces a C binding via libtukit.h.
  Other changes:
  - t-u: Rework --quiet handling to make sure no output is shown even in
    error cases; this is necessary for automation, e.g. with Salt.
    [gh#openSUSE/transactional-update#73]
  - tukit: Allow storing command output into variable by introducing a new
    optional parameter for "execute" and "callExt".
  - Replace multiple and non-standalone occurenses of {} in "callExt"
    argument.
  - Split transactional-update.timer into transactional-update.timer
    and transactional-update-cleanup.timer; the later will clean up
    old snapshots even when the system does not do automatic updates.
  - tukit: Remove legacy alias "setDiscard" for "setDiscardIfUnchanged".
  - Throw exception if snapshot is not found.
  - Fix various compiler warnings
- Update spec file:
  - Include tukitd D-Bus daemon
  - Only install one version of the library (as there are no breaking API
    changes yet)
  - Add %pre scriplets for systemd services
  - Replace %systemd_postun scriptlets with %systemd_postun_with_restart
    to satisfy rpmlint checks
  - Add transactional-update log file as %ghost file</changelog>
  <changelog author="iforster@suse.com" date="1646568000">- Version 4.0.0~rc2
  - Fix missing prompt in "shell" command [bsc#1196580]
  - Add output of tukit commands to log file
  - Fix compilation error with GCC12 [boo#1194876]
  - Fixed (non-critical) security review comments [boo#1196149]
  - Fixed selfupdate
  - Code cleanup</changelog>
  <changelog author="iforster@suse.com" date="1651579200">- Version 4.0.0~rc3
  - Add Snapshot interface
  - Reworked signal handling: All public signals are sent from the
    main thread now, keeping the same sender for everything
  - Implement D-Bus call "Execute" for Transactions
  - Implement interface for listing Snapshots
  - Implement Reboot interface
  - Fix bug when using --continue on old snapshots
  - Fix hypothetical integer overflow in snapshot list [bsc#1196826]
  - Fix wrong sort order in status command
    [gh#openSUSE/transactional-update#80]</changelog>
  <changelog author="iforster@suse.com" date="1652788800">- Version 4.0.0~rc4
  - Fix building with GCC 12
  - Fix stack overflow with very long commands / ids [bsc#1196149]
  - Use separate mount namespace for chroot, allowing overwriting
    the bind mounts from the update environment - this could have
    lead to data loss of the bind mount previously
  - Fix C error and exception handling for snapshots</changelog>
  <changelog author="schubi@suse.com" date="1655812800">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="iforster@suse.com" date="1659441600">- Version 4.0.0
  - Last minute interface change: Changed "List" method of Snapshot D-Bus
    interface to return a map of properties instead of a comma separated
    list of strings; this will allow retrieving the snapshot properties
    even if they contain a comma in their value [boo#1202147]
  - Remove "Snapshot.hpp" as a public API for now - all public
    functionality is part of SnapshotManager.hpp
  - Add header file documentation for SnapshotManager.hpp
  - Add method to delete snapshot
    [gh#openSUSE/transactional-update#52]
  - Allow setting description of snapshot
    [gh#openSUSE/transactional-update#55]
  - create_dirs_from_rpmdb: set SELinux file context of missing directories
    [gh#openSUSE/transactional-update#84], [bsc#1197242]
  - Fix broken logrotate due to typo in config file
    [gh#openSUSE/transactional-update#87]
  - create_dirs_from_rpmdb: Fix handling return code of create_dirs()
    [gh#openSUSE/transactional-update#86]
  - Fix broken "shell" prompt after selfupdate
  - Add documented D-Bus interface definition files
  - Add tukit_sm_get_current and tukit_sm_get_default to C interface
  - Fixed typos</changelog>
  <changelog author="fvogt@suse.com" date="1661169600">- Version 4.0.1
  - create_dirs_from_rpmdb: Just warn if no default SELinux context found
    [gh#openSUSE/transactional-update#88], [bsc#1188215]
  - create_dirs_from_rpmdb: Don't update the rpmdb cookie on failure
    [gh#openSUSE/transactional-update#88]
  - Handle directories owned by multiple packages
    [gh#openSUSE/transactional-update#90], [bsc#1188215]</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration of logrotate configuration to /usr/etc: Saving user
  changed configuration files in /etc and restoring them while
  an RPM update.</changelog>
  <changelog author="iforster@suse.com" date="1664539200">- Version 4.1.0
  - t-u: Add a "setup-kdump" command; implements [jsc#PED-1441]
  - Export TRANSACTIONAL_UPDATE_ROOT (the path to the snapshot) in
    the update environment; implements [jsc#PED-1078]
  - Add support for "notify" reboot method for desktop use
    [gh#openSUSE/transactional-update#93]
  - Fix kdump initrd recreation detection; the check was performed in the
    active snapshot instead of the target snapshot
  - Document register command [bsc#1202900]
  - Avoid unnecessary snapshots for register command [bsc#1202901]
  - Various optimizations for register command
  - Remove bogus error message when triggering reboot
  - Rework /etc overlay documentation in "The Transactional Update Guide"
  - Fix incorrect manpage formatting
  - Remove leftover "salt" reboot method in configuration example file
  - Replace deprecated std::mem_fn with lambdas</changelog>
  <changelog author="iforster@suse.com" date="1674043200">- Version 4.1.1
  - Mount user specific binddirs last: Prevously the internal mounts would
    potentially overwrite user bind mounts [boo#1205011]
  - selinux: Relabel shadowed /var files during update to make sure they
    don't interfere with the update [boo#1205937]
  - Clean up /var/lib/overlay more aggressively [boo#1206947]
  - tukit: Merge /etc overlay into parent if --discard is used together
    with --continue - previously the files were incorrectly always merged
    with the currently running system
  - status: do not execute the status command if experimental
  - Don't delete created mount point dirs any more
  - Small code optimizations</changelog>
  <changelog author="iforster@suse.com" date="1674475200">- Version 4.1.2
  - Don't try to mount user mounts if they don't exist [boo#1207366]</changelog>
  <changelog author="iforster@suse.com" date="1675857600">- Version 4.1.3
  - Suppress SELinux relabelling output in quiet mode
  - Documentation readability improvements</changelog>
  <changelog author="iforster@suse.com" date="1678449600">- Version 4.1.4
  - Workaround for broken Tumbleweed package libfdisk1</changelog>
  <changelog author="iforster@suse.com" date="1696507200">- Version 4.1.6
  - Use permissions of real /etc when creating overlay
    [bsc#1215878]
- Version 4.1.5
  - Add support for configuration file snippets</changelog>
</package>
<package pkgid="c3e03e7ddfad1a6c41a973fba7e95522ecf08c3966595ae782fa8219a468cd86" name="libtukit4" arch="aarch64">
  <version epoch="0" ver="4.1.7" rel="150500.3.6.2"/>
  <changelog author="iforster@suse.com" date="1632398400">- Version 3.5.6
  - tukit: Add S/390 bootloader support [bsc#1189807]
  - t-u: support purge-kernels with t-u patch [bsc#1190788]</changelog>
  <changelog author="iforster@suse.com" date="1634040000">- Version 3.5.7
  Various fixes affecting Salt support:
  - t-u: Don't squash stderr messages into stdout
  - t-u: Correctly handle case when the snapshot has been deleted due to
    using --drop-if-no-change: Don't show reboot messages and avoid an awk
    error message [bsc#1191475]
  - tukit: Make inotify handler less sensitive / ignore more directories
    [bsc#1191475]</changelog>
  <changelog author="iforster@suse.com" date="1634904000">- Version 3.6.0
  - Simplify mount hierarchy by just using a single slave bind
    mount as the root of the update environment; this may avoid the
    error messages of failed unmounts
    May fix [boo#1191945]</changelog>
  <changelog author="iforster@suse.com" date="1636545600">- Version 3.6.1
  - Fix rsyncing /etc into the running system with
  - -drop-if-no-change [bsc#1192242]</changelog>
  <changelog author="iforster@suse.com" date="1637323200">- Version 3.6.2
  - Bind mount root file system snapshot on itself, this makes the
    temporary directory in /tmp unnecessary; also fixes [boo#1188110]
    to return the correct snapshot's working directory via API call.
  - Use separate mount namespace for transactional-update; this should
    fix several applications that fail to run if a mount point has the
    'unbindable' mount flag set</changelog>
  <changelog author="iforster@suse.com" date="1637582400">- Version 4.0.0~rc1
  This release is API, but not ABI compatible with previous releases;
  existing applications will have to be recompiled against this new version.
  Major features:
  - Introduces a D-Bus service to access the libtukit API via the
    org.opensuse.tukit.Transaction interface
  - Introduces a C binding via libtukit.h.
  Other changes:
  - t-u: Rework --quiet handling to make sure no output is shown even in
    error cases; this is necessary for automation, e.g. with Salt.
    [gh#openSUSE/transactional-update#73]
  - tukit: Allow storing command output into variable by introducing a new
    optional parameter for "execute" and "callExt".
  - Replace multiple and non-standalone occurenses of {} in "callExt"
    argument.
  - Split transactional-update.timer into transactional-update.timer
    and transactional-update-cleanup.timer; the later will clean up
    old snapshots even when the system does not do automatic updates.
  - tukit: Remove legacy alias "setDiscard" for "setDiscardIfUnchanged".
  - Throw exception if snapshot is not found.
  - Fix various compiler warnings
- Update spec file:
  - Include tukitd D-Bus daemon
  - Only install one version of the library (as there are no breaking API
    changes yet)
  - Add %pre scriplets for systemd services
  - Replace %systemd_postun scriptlets with %systemd_postun_with_restart
    to satisfy rpmlint checks
  - Add transactional-update log file as %ghost file</changelog>
  <changelog author="iforster@suse.com" date="1646568000">- Version 4.0.0~rc2
  - Fix missing prompt in "shell" command [bsc#1196580]
  - Add output of tukit commands to log file
  - Fix compilation error with GCC12 [boo#1194876]
  - Fixed (non-critical) security review comments [boo#1196149]
  - Fixed selfupdate
  - Code cleanup</changelog>
  <changelog author="iforster@suse.com" date="1651579200">- Version 4.0.0~rc3
  - Add Snapshot interface
  - Reworked signal handling: All public signals are sent from the
    main thread now, keeping the same sender for everything
  - Implement D-Bus call "Execute" for Transactions
  - Implement interface for listing Snapshots
  - Implement Reboot interface
  - Fix bug when using --continue on old snapshots
  - Fix hypothetical integer overflow in snapshot list [bsc#1196826]
  - Fix wrong sort order in status command
    [gh#openSUSE/transactional-update#80]</changelog>
  <changelog author="iforster@suse.com" date="1652788800">- Version 4.0.0~rc4
  - Fix building with GCC 12
  - Fix stack overflow with very long commands / ids [bsc#1196149]
  - Use separate mount namespace for chroot, allowing overwriting
    the bind mounts from the update environment - this could have
    lead to data loss of the bind mount previously
  - Fix C error and exception handling for snapshots</changelog>
  <changelog author="schubi@suse.com" date="1655812800">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="iforster@suse.com" date="1659441600">- Version 4.0.0
  - Last minute interface change: Changed "List" method of Snapshot D-Bus
    interface to return a map of properties instead of a comma separated
    list of strings; this will allow retrieving the snapshot properties
    even if they contain a comma in their value [boo#1202147]
  - Remove "Snapshot.hpp" as a public API for now - all public
    functionality is part of SnapshotManager.hpp
  - Add header file documentation for SnapshotManager.hpp
  - Add method to delete snapshot
    [gh#openSUSE/transactional-update#52]
  - Allow setting description of snapshot
    [gh#openSUSE/transactional-update#55]
  - create_dirs_from_rpmdb: set SELinux file context of missing directories
    [gh#openSUSE/transactional-update#84], [bsc#1197242]
  - Fix broken logrotate due to typo in config file
    [gh#openSUSE/transactional-update#87]
  - create_dirs_from_rpmdb: Fix handling return code of create_dirs()
    [gh#openSUSE/transactional-update#86]
  - Fix broken "shell" prompt after selfupdate
  - Add documented D-Bus interface definition files
  - Add tukit_sm_get_current and tukit_sm_get_default to C interface
  - Fixed typos</changelog>
  <changelog author="fvogt@suse.com" date="1661169600">- Version 4.0.1
  - create_dirs_from_rpmdb: Just warn if no default SELinux context found
    [gh#openSUSE/transactional-update#88], [bsc#1188215]
  - create_dirs_from_rpmdb: Don't update the rpmdb cookie on failure
    [gh#openSUSE/transactional-update#88]
  - Handle directories owned by multiple packages
    [gh#openSUSE/transactional-update#90], [bsc#1188215]</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration of logrotate configuration to /usr/etc: Saving user
  changed configuration files in /etc and restoring them while
  an RPM update.</changelog>
  <changelog author="iforster@suse.com" date="1664539200">- Version 4.1.0
  - t-u: Add a "setup-kdump" command; implements [jsc#PED-1441]
  - Export TRANSACTIONAL_UPDATE_ROOT (the path to the snapshot) in
    the update environment; implements [jsc#PED-1078]
  - Add support for "notify" reboot method for desktop use
    [gh#openSUSE/transactional-update#93]
  - Fix kdump initrd recreation detection; the check was performed in the
    active snapshot instead of the target snapshot
  - Document register command [bsc#1202900]
  - Avoid unnecessary snapshots for register command [bsc#1202901]
  - Various optimizations for register command
  - Remove bogus error message when triggering reboot
  - Rework /etc overlay documentation in "The Transactional Update Guide"
  - Fix incorrect manpage formatting
  - Remove leftover "salt" reboot method in configuration example file
  - Replace deprecated std::mem_fn with lambdas</changelog>
  <changelog author="iforster@suse.com" date="1674043200">- Version 4.1.1
  - Mount user specific binddirs last: Prevously the internal mounts would
    potentially overwrite user bind mounts [boo#1205011]
  - selinux: Relabel shadowed /var files during update to make sure they
    don't interfere with the update [boo#1205937]
  - Clean up /var/lib/overlay more aggressively [boo#1206947]
  - tukit: Merge /etc overlay into parent if --discard is used together
    with --continue - previously the files were incorrectly always merged
    with the currently running system
  - status: do not execute the status command if experimental
  - Don't delete created mount point dirs any more
  - Small code optimizations</changelog>
  <changelog author="iforster@suse.com" date="1674475200">- Version 4.1.2
  - Don't try to mount user mounts if they don't exist [boo#1207366]</changelog>
  <changelog author="iforster@suse.com" date="1675857600">- Version 4.1.3
  - Suppress SELinux relabelling output in quiet mode
  - Documentation readability improvements</changelog>
  <changelog author="iforster@suse.com" date="1678449600">- Version 4.1.4
  - Workaround for broken Tumbleweed package libfdisk1</changelog>
  <changelog author="iforster@suse.com" date="1696507200">- Version 4.1.6
  - Use permissions of real /etc when creating overlay
    [bsc#1215878]
- Version 4.1.5
  - Add support for configuration file snippets</changelog>
  <changelog author="iforster@suse.com" date="1710417600">- Version 4.1.7
  - Always use zypper of installed system [bsc#1221346]</changelog>
</package>
<package pkgid="78b17c32b6bd149fd6b638610c278f6d3dfeff2af4afa139ddfe97ceac50bb33" name="libtukit4" arch="s390x">
  <version epoch="0" ver="4.1.7" rel="150500.3.6.2"/>
  <changelog author="iforster@suse.com" date="1632398400">- Version 3.5.6
  - tukit: Add S/390 bootloader support [bsc#1189807]
  - t-u: support purge-kernels with t-u patch [bsc#1190788]</changelog>
  <changelog author="iforster@suse.com" date="1634040000">- Version 3.5.7
  Various fixes affecting Salt support:
  - t-u: Don't squash stderr messages into stdout
  - t-u: Correctly handle case when the snapshot has been deleted due to
    using --drop-if-no-change: Don't show reboot messages and avoid an awk
    error message [bsc#1191475]
  - tukit: Make inotify handler less sensitive / ignore more directories
    [bsc#1191475]</changelog>
  <changelog author="iforster@suse.com" date="1634904000">- Version 3.6.0
  - Simplify mount hierarchy by just using a single slave bind
    mount as the root of the update environment; this may avoid the
    error messages of failed unmounts
    May fix [boo#1191945]</changelog>
  <changelog author="iforster@suse.com" date="1636545600">- Version 3.6.1
  - Fix rsyncing /etc into the running system with
  - -drop-if-no-change [bsc#1192242]</changelog>
  <changelog author="iforster@suse.com" date="1637323200">- Version 3.6.2
  - Bind mount root file system snapshot on itself, this makes the
    temporary directory in /tmp unnecessary; also fixes [boo#1188110]
    to return the correct snapshot's working directory via API call.
  - Use separate mount namespace for transactional-update; this should
    fix several applications that fail to run if a mount point has the
    'unbindable' mount flag set</changelog>
  <changelog author="iforster@suse.com" date="1637582400">- Version 4.0.0~rc1
  This release is API, but not ABI compatible with previous releases;
  existing applications will have to be recompiled against this new version.
  Major features:
  - Introduces a D-Bus service to access the libtukit API via the
    org.opensuse.tukit.Transaction interface
  - Introduces a C binding via libtukit.h.
  Other changes:
  - t-u: Rework --quiet handling to make sure no output is shown even in
    error cases; this is necessary for automation, e.g. with Salt.
    [gh#openSUSE/transactional-update#73]
  - tukit: Allow storing command output into variable by introducing a new
    optional parameter for "execute" and "callExt".
  - Replace multiple and non-standalone occurenses of {} in "callExt"
    argument.
  - Split transactional-update.timer into transactional-update.timer
    and transactional-update-cleanup.timer; the later will clean up
    old snapshots even when the system does not do automatic updates.
  - tukit: Remove legacy alias "setDiscard" for "setDiscardIfUnchanged".
  - Throw exception if snapshot is not found.
  - Fix various compiler warnings
- Update spec file:
  - Include tukitd D-Bus daemon
  - Only install one version of the library (as there are no breaking API
    changes yet)
  - Add %pre scriplets for systemd services
  - Replace %systemd_postun scriptlets with %systemd_postun_with_restart
    to satisfy rpmlint checks
  - Add transactional-update log file as %ghost file</changelog>
  <changelog author="iforster@suse.com" date="1646568000">- Version 4.0.0~rc2
  - Fix missing prompt in "shell" command [bsc#1196580]
  - Add output of tukit commands to log file
  - Fix compilation error with GCC12 [boo#1194876]
  - Fixed (non-critical) security review comments [boo#1196149]
  - Fixed selfupdate
  - Code cleanup</changelog>
  <changelog author="iforster@suse.com" date="1651579200">- Version 4.0.0~rc3
  - Add Snapshot interface
  - Reworked signal handling: All public signals are sent from the
    main thread now, keeping the same sender for everything
  - Implement D-Bus call "Execute" for Transactions
  - Implement interface for listing Snapshots
  - Implement Reboot interface
  - Fix bug when using --continue on old snapshots
  - Fix hypothetical integer overflow in snapshot list [bsc#1196826]
  - Fix wrong sort order in status command
    [gh#openSUSE/transactional-update#80]</changelog>
  <changelog author="iforster@suse.com" date="1652788800">- Version 4.0.0~rc4
  - Fix building with GCC 12
  - Fix stack overflow with very long commands / ids [bsc#1196149]
  - Use separate mount namespace for chroot, allowing overwriting
    the bind mounts from the update environment - this could have
    lead to data loss of the bind mount previously
  - Fix C error and exception handling for snapshots</changelog>
  <changelog author="schubi@suse.com" date="1655812800">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="iforster@suse.com" date="1659441600">- Version 4.0.0
  - Last minute interface change: Changed "List" method of Snapshot D-Bus
    interface to return a map of properties instead of a comma separated
    list of strings; this will allow retrieving the snapshot properties
    even if they contain a comma in their value [boo#1202147]
  - Remove "Snapshot.hpp" as a public API for now - all public
    functionality is part of SnapshotManager.hpp
  - Add header file documentation for SnapshotManager.hpp
  - Add method to delete snapshot
    [gh#openSUSE/transactional-update#52]
  - Allow setting description of snapshot
    [gh#openSUSE/transactional-update#55]
  - create_dirs_from_rpmdb: set SELinux file context of missing directories
    [gh#openSUSE/transactional-update#84], [bsc#1197242]
  - Fix broken logrotate due to typo in config file
    [gh#openSUSE/transactional-update#87]
  - create_dirs_from_rpmdb: Fix handling return code of create_dirs()
    [gh#openSUSE/transactional-update#86]
  - Fix broken "shell" prompt after selfupdate
  - Add documented D-Bus interface definition files
  - Add tukit_sm_get_current and tukit_sm_get_default to C interface
  - Fixed typos</changelog>
  <changelog author="fvogt@suse.com" date="1661169600">- Version 4.0.1
  - create_dirs_from_rpmdb: Just warn if no default SELinux context found
    [gh#openSUSE/transactional-update#88], [bsc#1188215]
  - create_dirs_from_rpmdb: Don't update the rpmdb cookie on failure
    [gh#openSUSE/transactional-update#88]
  - Handle directories owned by multiple packages
    [gh#openSUSE/transactional-update#90], [bsc#1188215]</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration of logrotate configuration to /usr/etc: Saving user
  changed configuration files in /etc and restoring them while
  an RPM update.</changelog>
  <changelog author="iforster@suse.com" date="1664539200">- Version 4.1.0
  - t-u: Add a "setup-kdump" command; implements [jsc#PED-1441]
  - Export TRANSACTIONAL_UPDATE_ROOT (the path to the snapshot) in
    the update environment; implements [jsc#PED-1078]
  - Add support for "notify" reboot method for desktop use
    [gh#openSUSE/transactional-update#93]
  - Fix kdump initrd recreation detection; the check was performed in the
    active snapshot instead of the target snapshot
  - Document register command [bsc#1202900]
  - Avoid unnecessary snapshots for register command [bsc#1202901]
  - Various optimizations for register command
  - Remove bogus error message when triggering reboot
  - Rework /etc overlay documentation in "The Transactional Update Guide"
  - Fix incorrect manpage formatting
  - Remove leftover "salt" reboot method in configuration example file
  - Replace deprecated std::mem_fn with lambdas</changelog>
  <changelog author="iforster@suse.com" date="1674043200">- Version 4.1.1
  - Mount user specific binddirs last: Prevously the internal mounts would
    potentially overwrite user bind mounts [boo#1205011]
  - selinux: Relabel shadowed /var files during update to make sure they
    don't interfere with the update [boo#1205937]
  - Clean up /var/lib/overlay more aggressively [boo#1206947]
  - tukit: Merge /etc overlay into parent if --discard is used together
    with --continue - previously the files were incorrectly always merged
    with the currently running system
  - status: do not execute the status command if experimental
  - Don't delete created mount point dirs any more
  - Small code optimizations</changelog>
  <changelog author="iforster@suse.com" date="1674475200">- Version 4.1.2
  - Don't try to mount user mounts if they don't exist [boo#1207366]</changelog>
  <changelog author="iforster@suse.com" date="1675857600">- Version 4.1.3
  - Suppress SELinux relabelling output in quiet mode
  - Documentation readability improvements</changelog>
  <changelog author="iforster@suse.com" date="1678449600">- Version 4.1.4
  - Workaround for broken Tumbleweed package libfdisk1</changelog>
  <changelog author="iforster@suse.com" date="1696507200">- Version 4.1.6
  - Use permissions of real /etc when creating overlay
    [bsc#1215878]
- Version 4.1.5
  - Add support for configuration file snippets</changelog>
  <changelog author="iforster@suse.com" date="1710417600">- Version 4.1.7
  - Always use zypper of installed system [bsc#1221346]</changelog>
</package>
<package pkgid="9b69201be1446406620c1e1b866c1b54e1f87b3d0a3504cbf7f92e206161381a" name="libtukit4" arch="x86_64">
  <version epoch="0" ver="4.1.7" rel="150500.3.6.2"/>
  <changelog author="iforster@suse.com" date="1632398400">- Version 3.5.6
  - tukit: Add S/390 bootloader support [bsc#1189807]
  - t-u: support purge-kernels with t-u patch [bsc#1190788]</changelog>
  <changelog author="iforster@suse.com" date="1634040000">- Version 3.5.7
  Various fixes affecting Salt support:
  - t-u: Don't squash stderr messages into stdout
  - t-u: Correctly handle case when the snapshot has been deleted due to
    using --drop-if-no-change: Don't show reboot messages and avoid an awk
    error message [bsc#1191475]
  - tukit: Make inotify handler less sensitive / ignore more directories
    [bsc#1191475]</changelog>
  <changelog author="iforster@suse.com" date="1634904000">- Version 3.6.0
  - Simplify mount hierarchy by just using a single slave bind
    mount as the root of the update environment; this may avoid the
    error messages of failed unmounts
    May fix [boo#1191945]</changelog>
  <changelog author="iforster@suse.com" date="1636545600">- Version 3.6.1
  - Fix rsyncing /etc into the running system with
  - -drop-if-no-change [bsc#1192242]</changelog>
  <changelog author="iforster@suse.com" date="1637323200">- Version 3.6.2
  - Bind mount root file system snapshot on itself, this makes the
    temporary directory in /tmp unnecessary; also fixes [boo#1188110]
    to return the correct snapshot's working directory via API call.
  - Use separate mount namespace for transactional-update; this should
    fix several applications that fail to run if a mount point has the
    'unbindable' mount flag set</changelog>
  <changelog author="iforster@suse.com" date="1637582400">- Version 4.0.0~rc1
  This release is API, but not ABI compatible with previous releases;
  existing applications will have to be recompiled against this new version.
  Major features:
  - Introduces a D-Bus service to access the libtukit API via the
    org.opensuse.tukit.Transaction interface
  - Introduces a C binding via libtukit.h.
  Other changes:
  - t-u: Rework --quiet handling to make sure no output is shown even in
    error cases; this is necessary for automation, e.g. with Salt.
    [gh#openSUSE/transactional-update#73]
  - tukit: Allow storing command output into variable by introducing a new
    optional parameter for "execute" and "callExt".
  - Replace multiple and non-standalone occurenses of {} in "callExt"
    argument.
  - Split transactional-update.timer into transactional-update.timer
    and transactional-update-cleanup.timer; the later will clean up
    old snapshots even when the system does not do automatic updates.
  - tukit: Remove legacy alias "setDiscard" for "setDiscardIfUnchanged".
  - Throw exception if snapshot is not found.
  - Fix various compiler warnings
- Update spec file:
  - Include tukitd D-Bus daemon
  - Only install one version of the library (as there are no breaking API
    changes yet)
  - Add %pre scriplets for systemd services
  - Replace %systemd_postun scriptlets with %systemd_postun_with_restart
    to satisfy rpmlint checks
  - Add transactional-update log file as %ghost file</changelog>
  <changelog author="iforster@suse.com" date="1646568000">- Version 4.0.0~rc2
  - Fix missing prompt in "shell" command [bsc#1196580]
  - Add output of tukit commands to log file
  - Fix compilation error with GCC12 [boo#1194876]
  - Fixed (non-critical) security review comments [boo#1196149]
  - Fixed selfupdate
  - Code cleanup</changelog>
  <changelog author="iforster@suse.com" date="1651579200">- Version 4.0.0~rc3
  - Add Snapshot interface
  - Reworked signal handling: All public signals are sent from the
    main thread now, keeping the same sender for everything
  - Implement D-Bus call "Execute" for Transactions
  - Implement interface for listing Snapshots
  - Implement Reboot interface
  - Fix bug when using --continue on old snapshots
  - Fix hypothetical integer overflow in snapshot list [bsc#1196826]
  - Fix wrong sort order in status command
    [gh#openSUSE/transactional-update#80]</changelog>
  <changelog author="iforster@suse.com" date="1652788800">- Version 4.0.0~rc4
  - Fix building with GCC 12
  - Fix stack overflow with very long commands / ids [bsc#1196149]
  - Use separate mount namespace for chroot, allowing overwriting
    the bind mounts from the update environment - this could have
    lead to data loss of the bind mount previously
  - Fix C error and exception handling for snapshots</changelog>
  <changelog author="schubi@suse.com" date="1655812800">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="iforster@suse.com" date="1659441600">- Version 4.0.0
  - Last minute interface change: Changed "List" method of Snapshot D-Bus
    interface to return a map of properties instead of a comma separated
    list of strings; this will allow retrieving the snapshot properties
    even if they contain a comma in their value [boo#1202147]
  - Remove "Snapshot.hpp" as a public API for now - all public
    functionality is part of SnapshotManager.hpp
  - Add header file documentation for SnapshotManager.hpp
  - Add method to delete snapshot
    [gh#openSUSE/transactional-update#52]
  - Allow setting description of snapshot
    [gh#openSUSE/transactional-update#55]
  - create_dirs_from_rpmdb: set SELinux file context of missing directories
    [gh#openSUSE/transactional-update#84], [bsc#1197242]
  - Fix broken logrotate due to typo in config file
    [gh#openSUSE/transactional-update#87]
  - create_dirs_from_rpmdb: Fix handling return code of create_dirs()
    [gh#openSUSE/transactional-update#86]
  - Fix broken "shell" prompt after selfupdate
  - Add documented D-Bus interface definition files
  - Add tukit_sm_get_current and tukit_sm_get_default to C interface
  - Fixed typos</changelog>
  <changelog author="fvogt@suse.com" date="1661169600">- Version 4.0.1
  - create_dirs_from_rpmdb: Just warn if no default SELinux context found
    [gh#openSUSE/transactional-update#88], [bsc#1188215]
  - create_dirs_from_rpmdb: Don't update the rpmdb cookie on failure
    [gh#openSUSE/transactional-update#88]
  - Handle directories owned by multiple packages
    [gh#openSUSE/transactional-update#90], [bsc#1188215]</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration of logrotate configuration to /usr/etc: Saving user
  changed configuration files in /etc and restoring them while
  an RPM update.</changelog>
  <changelog author="iforster@suse.com" date="1664539200">- Version 4.1.0
  - t-u: Add a "setup-kdump" command; implements [jsc#PED-1441]
  - Export TRANSACTIONAL_UPDATE_ROOT (the path to the snapshot) in
    the update environment; implements [jsc#PED-1078]
  - Add support for "notify" reboot method for desktop use
    [gh#openSUSE/transactional-update#93]
  - Fix kdump initrd recreation detection; the check was performed in the
    active snapshot instead of the target snapshot
  - Document register command [bsc#1202900]
  - Avoid unnecessary snapshots for register command [bsc#1202901]
  - Various optimizations for register command
  - Remove bogus error message when triggering reboot
  - Rework /etc overlay documentation in "The Transactional Update Guide"
  - Fix incorrect manpage formatting
  - Remove leftover "salt" reboot method in configuration example file
  - Replace deprecated std::mem_fn with lambdas</changelog>
  <changelog author="iforster@suse.com" date="1674043200">- Version 4.1.1
  - Mount user specific binddirs last: Prevously the internal mounts would
    potentially overwrite user bind mounts [boo#1205011]
  - selinux: Relabel shadowed /var files during update to make sure they
    don't interfere with the update [boo#1205937]
  - Clean up /var/lib/overlay more aggressively [boo#1206947]
  - tukit: Merge /etc overlay into parent if --discard is used together
    with --continue - previously the files were incorrectly always merged
    with the currently running system
  - status: do not execute the status command if experimental
  - Don't delete created mount point dirs any more
  - Small code optimizations</changelog>
  <changelog author="iforster@suse.com" date="1674475200">- Version 4.1.2
  - Don't try to mount user mounts if they don't exist [boo#1207366]</changelog>
  <changelog author="iforster@suse.com" date="1675857600">- Version 4.1.3
  - Suppress SELinux relabelling output in quiet mode
  - Documentation readability improvements</changelog>
  <changelog author="iforster@suse.com" date="1678449600">- Version 4.1.4
  - Workaround for broken Tumbleweed package libfdisk1</changelog>
  <changelog author="iforster@suse.com" date="1696507200">- Version 4.1.6
  - Use permissions of real /etc when creating overlay
    [bsc#1215878]
- Version 4.1.5
  - Add support for configuration file snippets</changelog>
  <changelog author="iforster@suse.com" date="1710417600">- Version 4.1.7
  - Always use zypper of installed system [bsc#1221346]</changelog>
</package>
<package pkgid="68a6d5acf6cd03aafe5f38a663d76bb21d3798b724a1572427c7c1588d929b53" name="libtukit4" arch="aarch64">
  <version epoch="0" ver="4.1.8" rel="150500.3.9.2"/>
  <changelog author="iforster@suse.com" date="1634040000">- Version 3.5.7
  Various fixes affecting Salt support:
  - t-u: Don't squash stderr messages into stdout
  - t-u: Correctly handle case when the snapshot has been deleted due to
    using --drop-if-no-change: Don't show reboot messages and avoid an awk
    error message [bsc#1191475]
  - tukit: Make inotify handler less sensitive / ignore more directories
    [bsc#1191475]</changelog>
  <changelog author="iforster@suse.com" date="1634904000">- Version 3.6.0
  - Simplify mount hierarchy by just using a single slave bind
    mount as the root of the update environment; this may avoid the
    error messages of failed unmounts
    May fix [boo#1191945]</changelog>
  <changelog author="iforster@suse.com" date="1636545600">- Version 3.6.1
  - Fix rsyncing /etc into the running system with
  - -drop-if-no-change [bsc#1192242]</changelog>
  <changelog author="iforster@suse.com" date="1637323200">- Version 3.6.2
  - Bind mount root file system snapshot on itself, this makes the
    temporary directory in /tmp unnecessary; also fixes [boo#1188110]
    to return the correct snapshot's working directory via API call.
  - Use separate mount namespace for transactional-update; this should
    fix several applications that fail to run if a mount point has the
    'unbindable' mount flag set</changelog>
  <changelog author="iforster@suse.com" date="1637582400">- Version 4.0.0~rc1
  This release is API, but not ABI compatible with previous releases;
  existing applications will have to be recompiled against this new version.
  Major features:
  - Introduces a D-Bus service to access the libtukit API via the
    org.opensuse.tukit.Transaction interface
  - Introduces a C binding via libtukit.h.
  Other changes:
  - t-u: Rework --quiet handling to make sure no output is shown even in
    error cases; this is necessary for automation, e.g. with Salt.
    [gh#openSUSE/transactional-update#73]
  - tukit: Allow storing command output into variable by introducing a new
    optional parameter for "execute" and "callExt".
  - Replace multiple and non-standalone occurenses of {} in "callExt"
    argument.
  - Split transactional-update.timer into transactional-update.timer
    and transactional-update-cleanup.timer; the later will clean up
    old snapshots even when the system does not do automatic updates.
  - tukit: Remove legacy alias "setDiscard" for "setDiscardIfUnchanged".
  - Throw exception if snapshot is not found.
  - Fix various compiler warnings
- Update spec file:
  - Include tukitd D-Bus daemon
  - Only install one version of the library (as there are no breaking API
    changes yet)
  - Add %pre scriplets for systemd services
  - Replace %systemd_postun scriptlets with %systemd_postun_with_restart
    to satisfy rpmlint checks
  - Add transactional-update log file as %ghost file</changelog>
  <changelog author="iforster@suse.com" date="1646568000">- Version 4.0.0~rc2
  - Fix missing prompt in "shell" command [bsc#1196580]
  - Add output of tukit commands to log file
  - Fix compilation error with GCC12 [boo#1194876]
  - Fixed (non-critical) security review comments [boo#1196149]
  - Fixed selfupdate
  - Code cleanup</changelog>
  <changelog author="iforster@suse.com" date="1651579200">- Version 4.0.0~rc3
  - Add Snapshot interface
  - Reworked signal handling: All public signals are sent from the
    main thread now, keeping the same sender for everything
  - Implement D-Bus call "Execute" for Transactions
  - Implement interface for listing Snapshots
  - Implement Reboot interface
  - Fix bug when using --continue on old snapshots
  - Fix hypothetical integer overflow in snapshot list [bsc#1196826]
  - Fix wrong sort order in status command
    [gh#openSUSE/transactional-update#80]</changelog>
  <changelog author="iforster@suse.com" date="1652788800">- Version 4.0.0~rc4
  - Fix building with GCC 12
  - Fix stack overflow with very long commands / ids [bsc#1196149]
  - Use separate mount namespace for chroot, allowing overwriting
    the bind mounts from the update environment - this could have
    lead to data loss of the bind mount previously
  - Fix C error and exception handling for snapshots</changelog>
  <changelog author="schubi@suse.com" date="1655812800">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="iforster@suse.com" date="1659441600">- Version 4.0.0
  - Last minute interface change: Changed "List" method of Snapshot D-Bus
    interface to return a map of properties instead of a comma separated
    list of strings; this will allow retrieving the snapshot properties
    even if they contain a comma in their value [boo#1202147]
  - Remove "Snapshot.hpp" as a public API for now - all public
    functionality is part of SnapshotManager.hpp
  - Add header file documentation for SnapshotManager.hpp
  - Add method to delete snapshot
    [gh#openSUSE/transactional-update#52]
  - Allow setting description of snapshot
    [gh#openSUSE/transactional-update#55]
  - create_dirs_from_rpmdb: set SELinux file context of missing directories
    [gh#openSUSE/transactional-update#84], [bsc#1197242]
  - Fix broken logrotate due to typo in config file
    [gh#openSUSE/transactional-update#87]
  - create_dirs_from_rpmdb: Fix handling return code of create_dirs()
    [gh#openSUSE/transactional-update#86]
  - Fix broken "shell" prompt after selfupdate
  - Add documented D-Bus interface definition files
  - Add tukit_sm_get_current and tukit_sm_get_default to C interface
  - Fixed typos</changelog>
  <changelog author="fvogt@suse.com" date="1661169600">- Version 4.0.1
  - create_dirs_from_rpmdb: Just warn if no default SELinux context found
    [gh#openSUSE/transactional-update#88], [bsc#1188215]
  - create_dirs_from_rpmdb: Don't update the rpmdb cookie on failure
    [gh#openSUSE/transactional-update#88]
  - Handle directories owned by multiple packages
    [gh#openSUSE/transactional-update#90], [bsc#1188215]</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration of logrotate configuration to /usr/etc: Saving user
  changed configuration files in /etc and restoring them while
  an RPM update.</changelog>
  <changelog author="iforster@suse.com" date="1664539200">- Version 4.1.0
  - t-u: Add a "setup-kdump" command; implements [jsc#PED-1441]
  - Export TRANSACTIONAL_UPDATE_ROOT (the path to the snapshot) in
    the update environment; implements [jsc#PED-1078]
  - Add support for "notify" reboot method for desktop use
    [gh#openSUSE/transactional-update#93]
  - Fix kdump initrd recreation detection; the check was performed in the
    active snapshot instead of the target snapshot
  - Document register command [bsc#1202900]
  - Avoid unnecessary snapshots for register command [bsc#1202901]
  - Various optimizations for register command
  - Remove bogus error message when triggering reboot
  - Rework /etc overlay documentation in "The Transactional Update Guide"
  - Fix incorrect manpage formatting
  - Remove leftover "salt" reboot method in configuration example file
  - Replace deprecated std::mem_fn with lambdas</changelog>
  <changelog author="iforster@suse.com" date="1674043200">- Version 4.1.1
  - Mount user specific binddirs last: Prevously the internal mounts would
    potentially overwrite user bind mounts [boo#1205011]
  - selinux: Relabel shadowed /var files during update to make sure they
    don't interfere with the update [boo#1205937]
  - Clean up /var/lib/overlay more aggressively [boo#1206947]
  - tukit: Merge /etc overlay into parent if --discard is used together
    with --continue - previously the files were incorrectly always merged
    with the currently running system
  - status: do not execute the status command if experimental
  - Don't delete created mount point dirs any more
  - Small code optimizations</changelog>
  <changelog author="iforster@suse.com" date="1674475200">- Version 4.1.2
  - Don't try to mount user mounts if they don't exist [boo#1207366]</changelog>
  <changelog author="iforster@suse.com" date="1675857600">- Version 4.1.3
  - Suppress SELinux relabelling output in quiet mode
  - Documentation readability improvements</changelog>
  <changelog author="iforster@suse.com" date="1678449600">- Version 4.1.4
  - Workaround for broken Tumbleweed package libfdisk1</changelog>
  <changelog author="iforster@suse.com" date="1696507200">- Version 4.1.6
  - Use permissions of real /etc when creating overlay
    [bsc#1215878]
- Version 4.1.5
  - Add support for configuration file snippets</changelog>
  <changelog author="iforster@suse.com" date="1710417600">- Version 4.1.7
  - Always use zypper of installed system [bsc#1221346]</changelog>
  <changelog author="iforster@suse.com" date="1718020800">- Version 4.1.8
  - tukit: Properly handle overlay syncing failures: If the system
    would not be rebooted and several snapshots accumulated in the
    meantime, it was possible that the previous base snapshot -
    required for /etc syncing - was deleted already. In that case
    changes in /etc might have been reset.
    [gh#openSUSE/transactional-update#116]
    [gh#kube-hetzner/terraform-hcloud-kube-hetzner#1287]</changelog>
</package>
<package pkgid="4277a967706892fe52304886db3756157a82ddb5b53fc0a740637c4ffd766186" name="libtukit4" arch="s390x">
  <version epoch="0" ver="4.1.8" rel="150500.3.9.2"/>
  <changelog author="iforster@suse.com" date="1634040000">- Version 3.5.7
  Various fixes affecting Salt support:
  - t-u: Don't squash stderr messages into stdout
  - t-u: Correctly handle case when the snapshot has been deleted due to
    using --drop-if-no-change: Don't show reboot messages and avoid an awk
    error message [bsc#1191475]
  - tukit: Make inotify handler less sensitive / ignore more directories
    [bsc#1191475]</changelog>
  <changelog author="iforster@suse.com" date="1634904000">- Version 3.6.0
  - Simplify mount hierarchy by just using a single slave bind
    mount as the root of the update environment; this may avoid the
    error messages of failed unmounts
    May fix [boo#1191945]</changelog>
  <changelog author="iforster@suse.com" date="1636545600">- Version 3.6.1
  - Fix rsyncing /etc into the running system with
  - -drop-if-no-change [bsc#1192242]</changelog>
  <changelog author="iforster@suse.com" date="1637323200">- Version 3.6.2
  - Bind mount root file system snapshot on itself, this makes the
    temporary directory in /tmp unnecessary; also fixes [boo#1188110]
    to return the correct snapshot's working directory via API call.
  - Use separate mount namespace for transactional-update; this should
    fix several applications that fail to run if a mount point has the
    'unbindable' mount flag set</changelog>
  <changelog author="iforster@suse.com" date="1637582400">- Version 4.0.0~rc1
  This release is API, but not ABI compatible with previous releases;
  existing applications will have to be recompiled against this new version.
  Major features:
  - Introduces a D-Bus service to access the libtukit API via the
    org.opensuse.tukit.Transaction interface
  - Introduces a C binding via libtukit.h.
  Other changes:
  - t-u: Rework --quiet handling to make sure no output is shown even in
    error cases; this is necessary for automation, e.g. with Salt.
    [gh#openSUSE/transactional-update#73]
  - tukit: Allow storing command output into variable by introducing a new
    optional parameter for "execute" and "callExt".
  - Replace multiple and non-standalone occurenses of {} in "callExt"
    argument.
  - Split transactional-update.timer into transactional-update.timer
    and transactional-update-cleanup.timer; the later will clean up
    old snapshots even when the system does not do automatic updates.
  - tukit: Remove legacy alias "setDiscard" for "setDiscardIfUnchanged".
  - Throw exception if snapshot is not found.
  - Fix various compiler warnings
- Update spec file:
  - Include tukitd D-Bus daemon
  - Only install one version of the library (as there are no breaking API
    changes yet)
  - Add %pre scriplets for systemd services
  - Replace %systemd_postun scriptlets with %systemd_postun_with_restart
    to satisfy rpmlint checks
  - Add transactional-update log file as %ghost file</changelog>
  <changelog author="iforster@suse.com" date="1646568000">- Version 4.0.0~rc2
  - Fix missing prompt in "shell" command [bsc#1196580]
  - Add output of tukit commands to log file
  - Fix compilation error with GCC12 [boo#1194876]
  - Fixed (non-critical) security review comments [boo#1196149]
  - Fixed selfupdate
  - Code cleanup</changelog>
  <changelog author="iforster@suse.com" date="1651579200">- Version 4.0.0~rc3
  - Add Snapshot interface
  - Reworked signal handling: All public signals are sent from the
    main thread now, keeping the same sender for everything
  - Implement D-Bus call "Execute" for Transactions
  - Implement interface for listing Snapshots
  - Implement Reboot interface
  - Fix bug when using --continue on old snapshots
  - Fix hypothetical integer overflow in snapshot list [bsc#1196826]
  - Fix wrong sort order in status command
    [gh#openSUSE/transactional-update#80]</changelog>
  <changelog author="iforster@suse.com" date="1652788800">- Version 4.0.0~rc4
  - Fix building with GCC 12
  - Fix stack overflow with very long commands / ids [bsc#1196149]
  - Use separate mount namespace for chroot, allowing overwriting
    the bind mounts from the update environment - this could have
    lead to data loss of the bind mount previously
  - Fix C error and exception handling for snapshots</changelog>
  <changelog author="schubi@suse.com" date="1655812800">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="iforster@suse.com" date="1659441600">- Version 4.0.0
  - Last minute interface change: Changed "List" method of Snapshot D-Bus
    interface to return a map of properties instead of a comma separated
    list of strings; this will allow retrieving the snapshot properties
    even if they contain a comma in their value [boo#1202147]
  - Remove "Snapshot.hpp" as a public API for now - all public
    functionality is part of SnapshotManager.hpp
  - Add header file documentation for SnapshotManager.hpp
  - Add method to delete snapshot
    [gh#openSUSE/transactional-update#52]
  - Allow setting description of snapshot
    [gh#openSUSE/transactional-update#55]
  - create_dirs_from_rpmdb: set SELinux file context of missing directories
    [gh#openSUSE/transactional-update#84], [bsc#1197242]
  - Fix broken logrotate due to typo in config file
    [gh#openSUSE/transactional-update#87]
  - create_dirs_from_rpmdb: Fix handling return code of create_dirs()
    [gh#openSUSE/transactional-update#86]
  - Fix broken "shell" prompt after selfupdate
  - Add documented D-Bus interface definition files
  - Add tukit_sm_get_current and tukit_sm_get_default to C interface
  - Fixed typos</changelog>
  <changelog author="fvogt@suse.com" date="1661169600">- Version 4.0.1
  - create_dirs_from_rpmdb: Just warn if no default SELinux context found
    [gh#openSUSE/transactional-update#88], [bsc#1188215]
  - create_dirs_from_rpmdb: Don't update the rpmdb cookie on failure
    [gh#openSUSE/transactional-update#88]
  - Handle directories owned by multiple packages
    [gh#openSUSE/transactional-update#90], [bsc#1188215]</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration of logrotate configuration to /usr/etc: Saving user
  changed configuration files in /etc and restoring them while
  an RPM update.</changelog>
  <changelog author="iforster@suse.com" date="1664539200">- Version 4.1.0
  - t-u: Add a "setup-kdump" command; implements [jsc#PED-1441]
  - Export TRANSACTIONAL_UPDATE_ROOT (the path to the snapshot) in
    the update environment; implements [jsc#PED-1078]
  - Add support for "notify" reboot method for desktop use
    [gh#openSUSE/transactional-update#93]
  - Fix kdump initrd recreation detection; the check was performed in the
    active snapshot instead of the target snapshot
  - Document register command [bsc#1202900]
  - Avoid unnecessary snapshots for register command [bsc#1202901]
  - Various optimizations for register command
  - Remove bogus error message when triggering reboot
  - Rework /etc overlay documentation in "The Transactional Update Guide"
  - Fix incorrect manpage formatting
  - Remove leftover "salt" reboot method in configuration example file
  - Replace deprecated std::mem_fn with lambdas</changelog>
  <changelog author="iforster@suse.com" date="1674043200">- Version 4.1.1
  - Mount user specific binddirs last: Prevously the internal mounts would
    potentially overwrite user bind mounts [boo#1205011]
  - selinux: Relabel shadowed /var files during update to make sure they
    don't interfere with the update [boo#1205937]
  - Clean up /var/lib/overlay more aggressively [boo#1206947]
  - tukit: Merge /etc overlay into parent if --discard is used together
    with --continue - previously the files were incorrectly always merged
    with the currently running system
  - status: do not execute the status command if experimental
  - Don't delete created mount point dirs any more
  - Small code optimizations</changelog>
  <changelog author="iforster@suse.com" date="1674475200">- Version 4.1.2
  - Don't try to mount user mounts if they don't exist [boo#1207366]</changelog>
  <changelog author="iforster@suse.com" date="1675857600">- Version 4.1.3
  - Suppress SELinux relabelling output in quiet mode
  - Documentation readability improvements</changelog>
  <changelog author="iforster@suse.com" date="1678449600">- Version 4.1.4
  - Workaround for broken Tumbleweed package libfdisk1</changelog>
  <changelog author="iforster@suse.com" date="1696507200">- Version 4.1.6
  - Use permissions of real /etc when creating overlay
    [bsc#1215878]
- Version 4.1.5
  - Add support for configuration file snippets</changelog>
  <changelog author="iforster@suse.com" date="1710417600">- Version 4.1.7
  - Always use zypper of installed system [bsc#1221346]</changelog>
  <changelog author="iforster@suse.com" date="1718020800">- Version 4.1.8
  - tukit: Properly handle overlay syncing failures: If the system
    would not be rebooted and several snapshots accumulated in the
    meantime, it was possible that the previous base snapshot -
    required for /etc syncing - was deleted already. In that case
    changes in /etc might have been reset.
    [gh#openSUSE/transactional-update#116]
    [gh#kube-hetzner/terraform-hcloud-kube-hetzner#1287]</changelog>
</package>
<package pkgid="c428a7389cba83368d414c5f46987484db488b7a8a8bc944588147ea9af9219a" name="libtukit4" arch="x86_64">
  <version epoch="0" ver="4.1.8" rel="150500.3.9.2"/>
  <changelog author="iforster@suse.com" date="1634040000">- Version 3.5.7
  Various fixes affecting Salt support:
  - t-u: Don't squash stderr messages into stdout
  - t-u: Correctly handle case when the snapshot has been deleted due to
    using --drop-if-no-change: Don't show reboot messages and avoid an awk
    error message [bsc#1191475]
  - tukit: Make inotify handler less sensitive / ignore more directories
    [bsc#1191475]</changelog>
  <changelog author="iforster@suse.com" date="1634904000">- Version 3.6.0
  - Simplify mount hierarchy by just using a single slave bind
    mount as the root of the update environment; this may avoid the
    error messages of failed unmounts
    May fix [boo#1191945]</changelog>
  <changelog author="iforster@suse.com" date="1636545600">- Version 3.6.1
  - Fix rsyncing /etc into the running system with
  - -drop-if-no-change [bsc#1192242]</changelog>
  <changelog author="iforster@suse.com" date="1637323200">- Version 3.6.2
  - Bind mount root file system snapshot on itself, this makes the
    temporary directory in /tmp unnecessary; also fixes [boo#1188110]
    to return the correct snapshot's working directory via API call.
  - Use separate mount namespace for transactional-update; this should
    fix several applications that fail to run if a mount point has the
    'unbindable' mount flag set</changelog>
  <changelog author="iforster@suse.com" date="1637582400">- Version 4.0.0~rc1
  This release is API, but not ABI compatible with previous releases;
  existing applications will have to be recompiled against this new version.
  Major features:
  - Introduces a D-Bus service to access the libtukit API via the
    org.opensuse.tukit.Transaction interface
  - Introduces a C binding via libtukit.h.
  Other changes:
  - t-u: Rework --quiet handling to make sure no output is shown even in
    error cases; this is necessary for automation, e.g. with Salt.
    [gh#openSUSE/transactional-update#73]
  - tukit: Allow storing command output into variable by introducing a new
    optional parameter for "execute" and "callExt".
  - Replace multiple and non-standalone occurenses of {} in "callExt"
    argument.
  - Split transactional-update.timer into transactional-update.timer
    and transactional-update-cleanup.timer; the later will clean up
    old snapshots even when the system does not do automatic updates.
  - tukit: Remove legacy alias "setDiscard" for "setDiscardIfUnchanged".
  - Throw exception if snapshot is not found.
  - Fix various compiler warnings
- Update spec file:
  - Include tukitd D-Bus daemon
  - Only install one version of the library (as there are no breaking API
    changes yet)
  - Add %pre scriplets for systemd services
  - Replace %systemd_postun scriptlets with %systemd_postun_with_restart
    to satisfy rpmlint checks
  - Add transactional-update log file as %ghost file</changelog>
  <changelog author="iforster@suse.com" date="1646568000">- Version 4.0.0~rc2
  - Fix missing prompt in "shell" command [bsc#1196580]
  - Add output of tukit commands to log file
  - Fix compilation error with GCC12 [boo#1194876]
  - Fixed (non-critical) security review comments [boo#1196149]
  - Fixed selfupdate
  - Code cleanup</changelog>
  <changelog author="iforster@suse.com" date="1651579200">- Version 4.0.0~rc3
  - Add Snapshot interface
  - Reworked signal handling: All public signals are sent from the
    main thread now, keeping the same sender for everything
  - Implement D-Bus call "Execute" for Transactions
  - Implement interface for listing Snapshots
  - Implement Reboot interface
  - Fix bug when using --continue on old snapshots
  - Fix hypothetical integer overflow in snapshot list [bsc#1196826]
  - Fix wrong sort order in status command
    [gh#openSUSE/transactional-update#80]</changelog>
  <changelog author="iforster@suse.com" date="1652788800">- Version 4.0.0~rc4
  - Fix building with GCC 12
  - Fix stack overflow with very long commands / ids [bsc#1196149]
  - Use separate mount namespace for chroot, allowing overwriting
    the bind mounts from the update environment - this could have
    lead to data loss of the bind mount previously
  - Fix C error and exception handling for snapshots</changelog>
  <changelog author="schubi@suse.com" date="1655812800">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="iforster@suse.com" date="1659441600">- Version 4.0.0
  - Last minute interface change: Changed "List" method of Snapshot D-Bus
    interface to return a map of properties instead of a comma separated
    list of strings; this will allow retrieving the snapshot properties
    even if they contain a comma in their value [boo#1202147]
  - Remove "Snapshot.hpp" as a public API for now - all public
    functionality is part of SnapshotManager.hpp
  - Add header file documentation for SnapshotManager.hpp
  - Add method to delete snapshot
    [gh#openSUSE/transactional-update#52]
  - Allow setting description of snapshot
    [gh#openSUSE/transactional-update#55]
  - create_dirs_from_rpmdb: set SELinux file context of missing directories
    [gh#openSUSE/transactional-update#84], [bsc#1197242]
  - Fix broken logrotate due to typo in config file
    [gh#openSUSE/transactional-update#87]
  - create_dirs_from_rpmdb: Fix handling return code of create_dirs()
    [gh#openSUSE/transactional-update#86]
  - Fix broken "shell" prompt after selfupdate
  - Add documented D-Bus interface definition files
  - Add tukit_sm_get_current and tukit_sm_get_default to C interface
  - Fixed typos</changelog>
  <changelog author="fvogt@suse.com" date="1661169600">- Version 4.0.1
  - create_dirs_from_rpmdb: Just warn if no default SELinux context found
    [gh#openSUSE/transactional-update#88], [bsc#1188215]
  - create_dirs_from_rpmdb: Don't update the rpmdb cookie on failure
    [gh#openSUSE/transactional-update#88]
  - Handle directories owned by multiple packages
    [gh#openSUSE/transactional-update#90], [bsc#1188215]</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration of logrotate configuration to /usr/etc: Saving user
  changed configuration files in /etc and restoring them while
  an RPM update.</changelog>
  <changelog author="iforster@suse.com" date="1664539200">- Version 4.1.0
  - t-u: Add a "setup-kdump" command; implements [jsc#PED-1441]
  - Export TRANSACTIONAL_UPDATE_ROOT (the path to the snapshot) in
    the update environment; implements [jsc#PED-1078]
  - Add support for "notify" reboot method for desktop use
    [gh#openSUSE/transactional-update#93]
  - Fix kdump initrd recreation detection; the check was performed in the
    active snapshot instead of the target snapshot
  - Document register command [bsc#1202900]
  - Avoid unnecessary snapshots for register command [bsc#1202901]
  - Various optimizations for register command
  - Remove bogus error message when triggering reboot
  - Rework /etc overlay documentation in "The Transactional Update Guide"
  - Fix incorrect manpage formatting
  - Remove leftover "salt" reboot method in configuration example file
  - Replace deprecated std::mem_fn with lambdas</changelog>
  <changelog author="iforster@suse.com" date="1674043200">- Version 4.1.1
  - Mount user specific binddirs last: Prevously the internal mounts would
    potentially overwrite user bind mounts [boo#1205011]
  - selinux: Relabel shadowed /var files during update to make sure they
    don't interfere with the update [boo#1205937]
  - Clean up /var/lib/overlay more aggressively [boo#1206947]
  - tukit: Merge /etc overlay into parent if --discard is used together
    with --continue - previously the files were incorrectly always merged
    with the currently running system
  - status: do not execute the status command if experimental
  - Don't delete created mount point dirs any more
  - Small code optimizations</changelog>
  <changelog author="iforster@suse.com" date="1674475200">- Version 4.1.2
  - Don't try to mount user mounts if they don't exist [boo#1207366]</changelog>
  <changelog author="iforster@suse.com" date="1675857600">- Version 4.1.3
  - Suppress SELinux relabelling output in quiet mode
  - Documentation readability improvements</changelog>
  <changelog author="iforster@suse.com" date="1678449600">- Version 4.1.4
  - Workaround for broken Tumbleweed package libfdisk1</changelog>
  <changelog author="iforster@suse.com" date="1696507200">- Version 4.1.6
  - Use permissions of real /etc when creating overlay
    [bsc#1215878]
- Version 4.1.5
  - Add support for configuration file snippets</changelog>
  <changelog author="iforster@suse.com" date="1710417600">- Version 4.1.7
  - Always use zypper of installed system [bsc#1221346]</changelog>
  <changelog author="iforster@suse.com" date="1718020800">- Version 4.1.8
  - tukit: Properly handle overlay syncing failures: If the system
    would not be rebooted and several snapshots accumulated in the
    meantime, it was possible that the previous base snapshot -
    required for /etc syncing - was deleted already. In that case
    changes in /etc might have been reset.
    [gh#openSUSE/transactional-update#116]
    [gh#kube-hetzner/terraform-hcloud-kube-hetzner#1287]</changelog>
</package>
<package pkgid="af5984d6fcb815b6e9f1e6e1e9e86b1db73e2ac3b3b9ef6422a17526b657b763" name="libtukit4" arch="aarch64">
  <version epoch="0" ver="4.1.9" rel="150500.3.12.2"/>
  <changelog author="iforster@suse.com" date="1634904000">- Version 3.6.0
  - Simplify mount hierarchy by just using a single slave bind
    mount as the root of the update environment; this may avoid the
    error messages of failed unmounts
    May fix [boo#1191945]</changelog>
  <changelog author="iforster@suse.com" date="1636545600">- Version 3.6.1
  - Fix rsyncing /etc into the running system with
  - -drop-if-no-change [bsc#1192242]</changelog>
  <changelog author="iforster@suse.com" date="1637323200">- Version 3.6.2
  - Bind mount root file system snapshot on itself, this makes the
    temporary directory in /tmp unnecessary; also fixes [boo#1188110]
    to return the correct snapshot's working directory via API call.
  - Use separate mount namespace for transactional-update; this should
    fix several applications that fail to run if a mount point has the
    'unbindable' mount flag set</changelog>
  <changelog author="iforster@suse.com" date="1637582400">- Version 4.0.0~rc1
  This release is API, but not ABI compatible with previous releases;
  existing applications will have to be recompiled against this new version.
  Major features:
  - Introduces a D-Bus service to access the libtukit API via the
    org.opensuse.tukit.Transaction interface
  - Introduces a C binding via libtukit.h.
  Other changes:
  - t-u: Rework --quiet handling to make sure no output is shown even in
    error cases; this is necessary for automation, e.g. with Salt.
    [gh#openSUSE/transactional-update#73]
  - tukit: Allow storing command output into variable by introducing a new
    optional parameter for "execute" and "callExt".
  - Replace multiple and non-standalone occurenses of {} in "callExt"
    argument.
  - Split transactional-update.timer into transactional-update.timer
    and transactional-update-cleanup.timer; the later will clean up
    old snapshots even when the system does not do automatic updates.
  - tukit: Remove legacy alias "setDiscard" for "setDiscardIfUnchanged".
  - Throw exception if snapshot is not found.
  - Fix various compiler warnings
- Update spec file:
  - Include tukitd D-Bus daemon
  - Only install one version of the library (as there are no breaking API
    changes yet)
  - Add %pre scriplets for systemd services
  - Replace %systemd_postun scriptlets with %systemd_postun_with_restart
    to satisfy rpmlint checks
  - Add transactional-update log file as %ghost file</changelog>
  <changelog author="iforster@suse.com" date="1646568000">- Version 4.0.0~rc2
  - Fix missing prompt in "shell" command [bsc#1196580]
  - Add output of tukit commands to log file
  - Fix compilation error with GCC12 [boo#1194876]
  - Fixed (non-critical) security review comments [boo#1196149]
  - Fixed selfupdate
  - Code cleanup</changelog>
  <changelog author="iforster@suse.com" date="1651579200">- Version 4.0.0~rc3
  - Add Snapshot interface
  - Reworked signal handling: All public signals are sent from the
    main thread now, keeping the same sender for everything
  - Implement D-Bus call "Execute" for Transactions
  - Implement interface for listing Snapshots
  - Implement Reboot interface
  - Fix bug when using --continue on old snapshots
  - Fix hypothetical integer overflow in snapshot list [bsc#1196826]
  - Fix wrong sort order in status command
    [gh#openSUSE/transactional-update#80]</changelog>
  <changelog author="iforster@suse.com" date="1652788800">- Version 4.0.0~rc4
  - Fix building with GCC 12
  - Fix stack overflow with very long commands / ids [bsc#1196149]
  - Use separate mount namespace for chroot, allowing overwriting
    the bind mounts from the update environment - this could have
    lead to data loss of the bind mount previously
  - Fix C error and exception handling for snapshots</changelog>
  <changelog author="schubi@suse.com" date="1655812800">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="iforster@suse.com" date="1659441600">- Version 4.0.0
  - Last minute interface change: Changed "List" method of Snapshot D-Bus
    interface to return a map of properties instead of a comma separated
    list of strings; this will allow retrieving the snapshot properties
    even if they contain a comma in their value [boo#1202147]
  - Remove "Snapshot.hpp" as a public API for now - all public
    functionality is part of SnapshotManager.hpp
  - Add header file documentation for SnapshotManager.hpp
  - Add method to delete snapshot
    [gh#openSUSE/transactional-update#52]
  - Allow setting description of snapshot
    [gh#openSUSE/transactional-update#55]
  - create_dirs_from_rpmdb: set SELinux file context of missing directories
    [gh#openSUSE/transactional-update#84], [bsc#1197242]
  - Fix broken logrotate due to typo in config file
    [gh#openSUSE/transactional-update#87]
  - create_dirs_from_rpmdb: Fix handling return code of create_dirs()
    [gh#openSUSE/transactional-update#86]
  - Fix broken "shell" prompt after selfupdate
  - Add documented D-Bus interface definition files
  - Add tukit_sm_get_current and tukit_sm_get_default to C interface
  - Fixed typos</changelog>
  <changelog author="fvogt@suse.com" date="1661169600">- Version 4.0.1
  - create_dirs_from_rpmdb: Just warn if no default SELinux context found
    [gh#openSUSE/transactional-update#88], [bsc#1188215]
  - create_dirs_from_rpmdb: Don't update the rpmdb cookie on failure
    [gh#openSUSE/transactional-update#88]
  - Handle directories owned by multiple packages
    [gh#openSUSE/transactional-update#90], [bsc#1188215]</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration of logrotate configuration to /usr/etc: Saving user
  changed configuration files in /etc and restoring them while
  an RPM update.</changelog>
  <changelog author="iforster@suse.com" date="1664539200">- Version 4.1.0
  - t-u: Add a "setup-kdump" command; implements [jsc#PED-1441]
  - Export TRANSACTIONAL_UPDATE_ROOT (the path to the snapshot) in
    the update environment; implements [jsc#PED-1078]
  - Add support for "notify" reboot method for desktop use
    [gh#openSUSE/transactional-update#93]
  - Fix kdump initrd recreation detection; the check was performed in the
    active snapshot instead of the target snapshot
  - Document register command [bsc#1202900]
  - Avoid unnecessary snapshots for register command [bsc#1202901]
  - Various optimizations for register command
  - Remove bogus error message when triggering reboot
  - Rework /etc overlay documentation in "The Transactional Update Guide"
  - Fix incorrect manpage formatting
  - Remove leftover "salt" reboot method in configuration example file
  - Replace deprecated std::mem_fn with lambdas</changelog>
  <changelog author="iforster@suse.com" date="1674043200">- Version 4.1.1
  - Mount user specific binddirs last: Prevously the internal mounts would
    potentially overwrite user bind mounts [boo#1205011]
  - selinux: Relabel shadowed /var files during update to make sure they
    don't interfere with the update [boo#1205937]
  - Clean up /var/lib/overlay more aggressively [boo#1206947]
  - tukit: Merge /etc overlay into parent if --discard is used together
    with --continue - previously the files were incorrectly always merged
    with the currently running system
  - status: do not execute the status command if experimental
  - Don't delete created mount point dirs any more
  - Small code optimizations</changelog>
  <changelog author="iforster@suse.com" date="1674475200">- Version 4.1.2
  - Don't try to mount user mounts if they don't exist [boo#1207366]</changelog>
  <changelog author="iforster@suse.com" date="1675857600">- Version 4.1.3
  - Suppress SELinux relabelling output in quiet mode
  - Documentation readability improvements</changelog>
  <changelog author="iforster@suse.com" date="1678449600">- Version 4.1.4
  - Workaround for broken Tumbleweed package libfdisk1</changelog>
  <changelog author="iforster@suse.com" date="1696507200">- Version 4.1.6
  - Use permissions of real /etc when creating overlay
    [bsc#1215878]
- Version 4.1.5
  - Add support for configuration file snippets</changelog>
  <changelog author="iforster@suse.com" date="1710417600">- Version 4.1.7
  - Always use zypper of installed system [bsc#1221346]</changelog>
  <changelog author="iforster@suse.com" date="1718020800">- Version 4.1.8
  - tukit: Properly handle overlay syncing failures: If the system
    would not be rebooted and several snapshots accumulated in the
    meantime, it was possible that the previous base snapshot -
    required for /etc syncing - was deleted already. In that case
    changes in /etc might have been reset.
    [gh#openSUSE/transactional-update#116]
    [gh#kube-hetzner/terraform-hcloud-kube-hetzner#1287]</changelog>
  <changelog author="iforster@suse.com" date="1725364800">- Version 4.1.9
  - Adding support for specifying migration arguments</changelog>
</package>
<package pkgid="4cabf6c45d4565cd22f8b4634166682015a1adbffcdaafc7c37684c1f78b1363" name="libtukit4" arch="s390x">
  <version epoch="0" ver="4.1.9" rel="150500.3.12.2"/>
  <changelog author="iforster@suse.com" date="1634904000">- Version 3.6.0
  - Simplify mount hierarchy by just using a single slave bind
    mount as the root of the update environment; this may avoid the
    error messages of failed unmounts
    May fix [boo#1191945]</changelog>
  <changelog author="iforster@suse.com" date="1636545600">- Version 3.6.1
  - Fix rsyncing /etc into the running system with
  - -drop-if-no-change [bsc#1192242]</changelog>
  <changelog author="iforster@suse.com" date="1637323200">- Version 3.6.2
  - Bind mount root file system snapshot on itself, this makes the
    temporary directory in /tmp unnecessary; also fixes [boo#1188110]
    to return the correct snapshot's working directory via API call.
  - Use separate mount namespace for transactional-update; this should
    fix several applications that fail to run if a mount point has the
    'unbindable' mount flag set</changelog>
  <changelog author="iforster@suse.com" date="1637582400">- Version 4.0.0~rc1
  This release is API, but not ABI compatible with previous releases;
  existing applications will have to be recompiled against this new version.
  Major features:
  - Introduces a D-Bus service to access the libtukit API via the
    org.opensuse.tukit.Transaction interface
  - Introduces a C binding via libtukit.h.
  Other changes:
  - t-u: Rework --quiet handling to make sure no output is shown even in
    error cases; this is necessary for automation, e.g. with Salt.
    [gh#openSUSE/transactional-update#73]
  - tukit: Allow storing command output into variable by introducing a new
    optional parameter for "execute" and "callExt".
  - Replace multiple and non-standalone occurenses of {} in "callExt"
    argument.
  - Split transactional-update.timer into transactional-update.timer
    and transactional-update-cleanup.timer; the later will clean up
    old snapshots even when the system does not do automatic updates.
  - tukit: Remove legacy alias "setDiscard" for "setDiscardIfUnchanged".
  - Throw exception if snapshot is not found.
  - Fix various compiler warnings
- Update spec file:
  - Include tukitd D-Bus daemon
  - Only install one version of the library (as there are no breaking API
    changes yet)
  - Add %pre scriplets for systemd services
  - Replace %systemd_postun scriptlets with %systemd_postun_with_restart
    to satisfy rpmlint checks
  - Add transactional-update log file as %ghost file</changelog>
  <changelog author="iforster@suse.com" date="1646568000">- Version 4.0.0~rc2
  - Fix missing prompt in "shell" command [bsc#1196580]
  - Add output of tukit commands to log file
  - Fix compilation error with GCC12 [boo#1194876]
  - Fixed (non-critical) security review comments [boo#1196149]
  - Fixed selfupdate
  - Code cleanup</changelog>
  <changelog author="iforster@suse.com" date="1651579200">- Version 4.0.0~rc3
  - Add Snapshot interface
  - Reworked signal handling: All public signals are sent from the
    main thread now, keeping the same sender for everything
  - Implement D-Bus call "Execute" for Transactions
  - Implement interface for listing Snapshots
  - Implement Reboot interface
  - Fix bug when using --continue on old snapshots
  - Fix hypothetical integer overflow in snapshot list [bsc#1196826]
  - Fix wrong sort order in status command
    [gh#openSUSE/transactional-update#80]</changelog>
  <changelog author="iforster@suse.com" date="1652788800">- Version 4.0.0~rc4
  - Fix building with GCC 12
  - Fix stack overflow with very long commands / ids [bsc#1196149]
  - Use separate mount namespace for chroot, allowing overwriting
    the bind mounts from the update environment - this could have
    lead to data loss of the bind mount previously
  - Fix C error and exception handling for snapshots</changelog>
  <changelog author="schubi@suse.com" date="1655812800">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="iforster@suse.com" date="1659441600">- Version 4.0.0
  - Last minute interface change: Changed "List" method of Snapshot D-Bus
    interface to return a map of properties instead of a comma separated
    list of strings; this will allow retrieving the snapshot properties
    even if they contain a comma in their value [boo#1202147]
  - Remove "Snapshot.hpp" as a public API for now - all public
    functionality is part of SnapshotManager.hpp
  - Add header file documentation for SnapshotManager.hpp
  - Add method to delete snapshot
    [gh#openSUSE/transactional-update#52]
  - Allow setting description of snapshot
    [gh#openSUSE/transactional-update#55]
  - create_dirs_from_rpmdb: set SELinux file context of missing directories
    [gh#openSUSE/transactional-update#84], [bsc#1197242]
  - Fix broken logrotate due to typo in config file
    [gh#openSUSE/transactional-update#87]
  - create_dirs_from_rpmdb: Fix handling return code of create_dirs()
    [gh#openSUSE/transactional-update#86]
  - Fix broken "shell" prompt after selfupdate
  - Add documented D-Bus interface definition files
  - Add tukit_sm_get_current and tukit_sm_get_default to C interface
  - Fixed typos</changelog>
  <changelog author="fvogt@suse.com" date="1661169600">- Version 4.0.1
  - create_dirs_from_rpmdb: Just warn if no default SELinux context found
    [gh#openSUSE/transactional-update#88], [bsc#1188215]
  - create_dirs_from_rpmdb: Don't update the rpmdb cookie on failure
    [gh#openSUSE/transactional-update#88]
  - Handle directories owned by multiple packages
    [gh#openSUSE/transactional-update#90], [bsc#1188215]</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration of logrotate configuration to /usr/etc: Saving user
  changed configuration files in /etc and restoring them while
  an RPM update.</changelog>
  <changelog author="iforster@suse.com" date="1664539200">- Version 4.1.0
  - t-u: Add a "setup-kdump" command; implements [jsc#PED-1441]
  - Export TRANSACTIONAL_UPDATE_ROOT (the path to the snapshot) in
    the update environment; implements [jsc#PED-1078]
  - Add support for "notify" reboot method for desktop use
    [gh#openSUSE/transactional-update#93]
  - Fix kdump initrd recreation detection; the check was performed in the
    active snapshot instead of the target snapshot
  - Document register command [bsc#1202900]
  - Avoid unnecessary snapshots for register command [bsc#1202901]
  - Various optimizations for register command
  - Remove bogus error message when triggering reboot
  - Rework /etc overlay documentation in "The Transactional Update Guide"
  - Fix incorrect manpage formatting
  - Remove leftover "salt" reboot method in configuration example file
  - Replace deprecated std::mem_fn with lambdas</changelog>
  <changelog author="iforster@suse.com" date="1674043200">- Version 4.1.1
  - Mount user specific binddirs last: Prevously the internal mounts would
    potentially overwrite user bind mounts [boo#1205011]
  - selinux: Relabel shadowed /var files during update to make sure they
    don't interfere with the update [boo#1205937]
  - Clean up /var/lib/overlay more aggressively [boo#1206947]
  - tukit: Merge /etc overlay into parent if --discard is used together
    with --continue - previously the files were incorrectly always merged
    with the currently running system
  - status: do not execute the status command if experimental
  - Don't delete created mount point dirs any more
  - Small code optimizations</changelog>
  <changelog author="iforster@suse.com" date="1674475200">- Version 4.1.2
  - Don't try to mount user mounts if they don't exist [boo#1207366]</changelog>
  <changelog author="iforster@suse.com" date="1675857600">- Version 4.1.3
  - Suppress SELinux relabelling output in quiet mode
  - Documentation readability improvements</changelog>
  <changelog author="iforster@suse.com" date="1678449600">- Version 4.1.4
  - Workaround for broken Tumbleweed package libfdisk1</changelog>
  <changelog author="iforster@suse.com" date="1696507200">- Version 4.1.6
  - Use permissions of real /etc when creating overlay
    [bsc#1215878]
- Version 4.1.5
  - Add support for configuration file snippets</changelog>
  <changelog author="iforster@suse.com" date="1710417600">- Version 4.1.7
  - Always use zypper of installed system [bsc#1221346]</changelog>
  <changelog author="iforster@suse.com" date="1718020800">- Version 4.1.8
  - tukit: Properly handle overlay syncing failures: If the system
    would not be rebooted and several snapshots accumulated in the
    meantime, it was possible that the previous base snapshot -
    required for /etc syncing - was deleted already. In that case
    changes in /etc might have been reset.
    [gh#openSUSE/transactional-update#116]
    [gh#kube-hetzner/terraform-hcloud-kube-hetzner#1287]</changelog>
  <changelog author="iforster@suse.com" date="1725364800">- Version 4.1.9
  - Adding support for specifying migration arguments</changelog>
</package>
<package pkgid="e7911df8fdb07f186e4840e9d2ef4c11683a47e7f0511e9f0fcf4be47e988eac" name="libtukit4" arch="x86_64">
  <version epoch="0" ver="4.1.9" rel="150500.3.12.2"/>
  <changelog author="iforster@suse.com" date="1634904000">- Version 3.6.0
  - Simplify mount hierarchy by just using a single slave bind
    mount as the root of the update environment; this may avoid the
    error messages of failed unmounts
    May fix [boo#1191945]</changelog>
  <changelog author="iforster@suse.com" date="1636545600">- Version 3.6.1
  - Fix rsyncing /etc into the running system with
  - -drop-if-no-change [bsc#1192242]</changelog>
  <changelog author="iforster@suse.com" date="1637323200">- Version 3.6.2
  - Bind mount root file system snapshot on itself, this makes the
    temporary directory in /tmp unnecessary; also fixes [boo#1188110]
    to return the correct snapshot's working directory via API call.
  - Use separate mount namespace for transactional-update; this should
    fix several applications that fail to run if a mount point has the
    'unbindable' mount flag set</changelog>
  <changelog author="iforster@suse.com" date="1637582400">- Version 4.0.0~rc1
  This release is API, but not ABI compatible with previous releases;
  existing applications will have to be recompiled against this new version.
  Major features:
  - Introduces a D-Bus service to access the libtukit API via the
    org.opensuse.tukit.Transaction interface
  - Introduces a C binding via libtukit.h.
  Other changes:
  - t-u: Rework --quiet handling to make sure no output is shown even in
    error cases; this is necessary for automation, e.g. with Salt.
    [gh#openSUSE/transactional-update#73]
  - tukit: Allow storing command output into variable by introducing a new
    optional parameter for "execute" and "callExt".
  - Replace multiple and non-standalone occurenses of {} in "callExt"
    argument.
  - Split transactional-update.timer into transactional-update.timer
    and transactional-update-cleanup.timer; the later will clean up
    old snapshots even when the system does not do automatic updates.
  - tukit: Remove legacy alias "setDiscard" for "setDiscardIfUnchanged".
  - Throw exception if snapshot is not found.
  - Fix various compiler warnings
- Update spec file:
  - Include tukitd D-Bus daemon
  - Only install one version of the library (as there are no breaking API
    changes yet)
  - Add %pre scriplets for systemd services
  - Replace %systemd_postun scriptlets with %systemd_postun_with_restart
    to satisfy rpmlint checks
  - Add transactional-update log file as %ghost file</changelog>
  <changelog author="iforster@suse.com" date="1646568000">- Version 4.0.0~rc2
  - Fix missing prompt in "shell" command [bsc#1196580]
  - Add output of tukit commands to log file
  - Fix compilation error with GCC12 [boo#1194876]
  - Fixed (non-critical) security review comments [boo#1196149]
  - Fixed selfupdate
  - Code cleanup</changelog>
  <changelog author="iforster@suse.com" date="1651579200">- Version 4.0.0~rc3
  - Add Snapshot interface
  - Reworked signal handling: All public signals are sent from the
    main thread now, keeping the same sender for everything
  - Implement D-Bus call "Execute" for Transactions
  - Implement interface for listing Snapshots
  - Implement Reboot interface
  - Fix bug when using --continue on old snapshots
  - Fix hypothetical integer overflow in snapshot list [bsc#1196826]
  - Fix wrong sort order in status command
    [gh#openSUSE/transactional-update#80]</changelog>
  <changelog author="iforster@suse.com" date="1652788800">- Version 4.0.0~rc4
  - Fix building with GCC 12
  - Fix stack overflow with very long commands / ids [bsc#1196149]
  - Use separate mount namespace for chroot, allowing overwriting
    the bind mounts from the update environment - this could have
    lead to data loss of the bind mount previously
  - Fix C error and exception handling for snapshots</changelog>
  <changelog author="schubi@suse.com" date="1655812800">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="iforster@suse.com" date="1659441600">- Version 4.0.0
  - Last minute interface change: Changed "List" method of Snapshot D-Bus
    interface to return a map of properties instead of a comma separated
    list of strings; this will allow retrieving the snapshot properties
    even if they contain a comma in their value [boo#1202147]
  - Remove "Snapshot.hpp" as a public API for now - all public
    functionality is part of SnapshotManager.hpp
  - Add header file documentation for SnapshotManager.hpp
  - Add method to delete snapshot
    [gh#openSUSE/transactional-update#52]
  - Allow setting description of snapshot
    [gh#openSUSE/transactional-update#55]
  - create_dirs_from_rpmdb: set SELinux file context of missing directories
    [gh#openSUSE/transactional-update#84], [bsc#1197242]
  - Fix broken logrotate due to typo in config file
    [gh#openSUSE/transactional-update#87]
  - create_dirs_from_rpmdb: Fix handling return code of create_dirs()
    [gh#openSUSE/transactional-update#86]
  - Fix broken "shell" prompt after selfupdate
  - Add documented D-Bus interface definition files
  - Add tukit_sm_get_current and tukit_sm_get_default to C interface
  - Fixed typos</changelog>
  <changelog author="fvogt@suse.com" date="1661169600">- Version 4.0.1
  - create_dirs_from_rpmdb: Just warn if no default SELinux context found
    [gh#openSUSE/transactional-update#88], [bsc#1188215]
  - create_dirs_from_rpmdb: Don't update the rpmdb cookie on failure
    [gh#openSUSE/transactional-update#88]
  - Handle directories owned by multiple packages
    [gh#openSUSE/transactional-update#90], [bsc#1188215]</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration of logrotate configuration to /usr/etc: Saving user
  changed configuration files in /etc and restoring them while
  an RPM update.</changelog>
  <changelog author="iforster@suse.com" date="1664539200">- Version 4.1.0
  - t-u: Add a "setup-kdump" command; implements [jsc#PED-1441]
  - Export TRANSACTIONAL_UPDATE_ROOT (the path to the snapshot) in
    the update environment; implements [jsc#PED-1078]
  - Add support for "notify" reboot method for desktop use
    [gh#openSUSE/transactional-update#93]
  - Fix kdump initrd recreation detection; the check was performed in the
    active snapshot instead of the target snapshot
  - Document register command [bsc#1202900]
  - Avoid unnecessary snapshots for register command [bsc#1202901]
  - Various optimizations for register command
  - Remove bogus error message when triggering reboot
  - Rework /etc overlay documentation in "The Transactional Update Guide"
  - Fix incorrect manpage formatting
  - Remove leftover "salt" reboot method in configuration example file
  - Replace deprecated std::mem_fn with lambdas</changelog>
  <changelog author="iforster@suse.com" date="1674043200">- Version 4.1.1
  - Mount user specific binddirs last: Prevously the internal mounts would
    potentially overwrite user bind mounts [boo#1205011]
  - selinux: Relabel shadowed /var files during update to make sure they
    don't interfere with the update [boo#1205937]
  - Clean up /var/lib/overlay more aggressively [boo#1206947]
  - tukit: Merge /etc overlay into parent if --discard is used together
    with --continue - previously the files were incorrectly always merged
    with the currently running system
  - status: do not execute the status command if experimental
  - Don't delete created mount point dirs any more
  - Small code optimizations</changelog>
  <changelog author="iforster@suse.com" date="1674475200">- Version 4.1.2
  - Don't try to mount user mounts if they don't exist [boo#1207366]</changelog>
  <changelog author="iforster@suse.com" date="1675857600">- Version 4.1.3
  - Suppress SELinux relabelling output in quiet mode
  - Documentation readability improvements</changelog>
  <changelog author="iforster@suse.com" date="1678449600">- Version 4.1.4
  - Workaround for broken Tumbleweed package libfdisk1</changelog>
  <changelog author="iforster@suse.com" date="1696507200">- Version 4.1.6
  - Use permissions of real /etc when creating overlay
    [bsc#1215878]
- Version 4.1.5
  - Add support for configuration file snippets</changelog>
  <changelog author="iforster@suse.com" date="1710417600">- Version 4.1.7
  - Always use zypper of installed system [bsc#1221346]</changelog>
  <changelog author="iforster@suse.com" date="1718020800">- Version 4.1.8
  - tukit: Properly handle overlay syncing failures: If the system
    would not be rebooted and several snapshots accumulated in the
    meantime, it was possible that the previous base snapshot -
    required for /etc syncing - was deleted already. In that case
    changes in /etc might have been reset.
    [gh#openSUSE/transactional-update#116]
    [gh#kube-hetzner/terraform-hcloud-kube-hetzner#1287]</changelog>
  <changelog author="iforster@suse.com" date="1725364800">- Version 4.1.9
  - Adding support for specifying migration arguments</changelog>
</package>
<package pkgid="af8747e655a384e2fd7d9e675e235750912f501480d7ea7726708be9ed11157f" name="libudev1" arch="aarch64">
  <version epoch="0" ver="249.16" rel="150400.8.35.5"/>
  <changelog author="fbui@suse.com" date="1675771200">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
</package>
<package pkgid="18b4de885b310def0440b80b07d8ee6628e245802592dc53b408932426b0c5fc" name="libudev1" arch="s390x">
  <version epoch="0" ver="249.16" rel="150400.8.35.5"/>
  <changelog author="fbui@suse.com" date="1675771200">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
</package>
<package pkgid="1db8dd870505c71d262eb13bda138c73e84585ceecc37c755d9ef67509437b75" name="libudev1" arch="x86_64">
  <version epoch="0" ver="249.16" rel="150400.8.35.5"/>
  <changelog author="fbui@suse.com" date="1675771200">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
</package>
<package pkgid="28dea0857e8244382b4e4ba1fab4b279df1c0788abe8b228b7a82251b8e29893" name="libudev1" arch="aarch64">
  <version epoch="0" ver="249.17" rel="150400.8.40.1"/>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
  <changelog author="fbui@suse.com" date="1693396800">- Rename 0001-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch into
  1013-strip-the-domain-part-from-etc-hostname-when-setting.patch
- Rename 0003-strip-the-domain-part-from-etc-hostname-when-setting.patch into
  1014-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
- Rename 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch into
  1015-networkd-make-network.service-an-alias-of-systemd-ne.patch
- Rename 0007-networkd-make-network.service-an-alias-of-systemd-ne.patch into
  1016-core-disable-session-keyring-per-system-sevice-entir.patch
- Rename 0011-core-disable-session-keyring-per-system-sevice-entir.patch into
  1017-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch
  Hence these patch files can be easily identified as SLE specific ones.</changelog>
  <changelog author="fbui@suse.com" date="1695902400">- systemd.spec: add missing `%tmpfiles_create systemd-resolve.conf`</changelog>
  <changelog author="fbui@suse.com" date="1695902401">- Import commit e677079182c975ecdad88a76f657fecb4de523d9
  7692c5bda8 utmp-wtmp: handle EINTR gracefully when waiting to write to tty
  29c3eb4681 utmp-wtmp: fix error in case isatty() fails
  98970eb90b homed: handle EINTR gracefully when waiting for device node
  0305809edd resolved: handle -EINTR returned from fd_wait_for_event() better
  40db4d6abe sd-netlink: handle EINTR from poll() gracefully, as success
  5e681711c6 varlink: also handle EINTR gracefully when waiting for EIO via ppoll()
  6bbd70f092 stdio-bridge: don't be bothered with EINTR
  f978feb591 sd-bus: handle -EINTR return from bus_poll() (bsc#1215241)
  746962ff40 core: replace slice dependencies as they get added (bsc#1214668)</changelog>
  <changelog author="fbui@suse.com" date="1702641600">- Import commit 86f0670d3a01c1a2d4df17f1c68d03f1586195e3
  ba7f1df7a5 vconsole-setup: simplify error handling
  94f4eaea77 Introduce RET_GATHER and use it in src/shared/
  e02406fcc1 mount: replace UNIT_DEPENDENCY_MOUNTINFO_OR_FILE with UNIT_DEPENDENCY_MOUNTINFO/UNIT_DEPENDENCY_MOUNT_FILE
  0b8db54511 mount: drop UNIT_DEPENDENCY_MOUNTINFO_IMPLICIT and UNIT_DEPENDENCY_MOUNTINFO_DEFAULT
  98ba536bd1 mount: always use UNIT_DEPENDENCY_FILE in mount_add_quota_dependencies()
  73c7b2bb48 core/mount: make device deps from /proc/self/mountinfo and .mount unit file exclusive
  ba585a28d7 core: Add trace logging to mount_add_device_dependencies()
  36e0a4f80f core/mount: also remove default deps from /proc/self/mountinfo when it is updated (bsc#1217460)
  bc107c86c3 core/mount: set Mount.from_proc_self_mountinfo flag before adding default dependencies
  ce4907c7c3 core: wrap some long comment</changelog>
  <changelog author="fbui@suse.com" date="1704715200">- Import commit 2cb4d40f1c6a388706af8a83d5344fc0de3c6f4d (merge of v249.17)
  c8578cef7f resolved: actually check authenticated flag of SOA transaction</changelog>
</package>
<package pkgid="d38046f5a9da8ddcf1cb08ad2ed17a23f0f85f4584a321c7a6282a42090e24ef" name="libudev1" arch="s390x">
  <version epoch="0" ver="249.17" rel="150400.8.40.1"/>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
  <changelog author="fbui@suse.com" date="1693396800">- Rename 0001-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch into
  1013-strip-the-domain-part-from-etc-hostname-when-setting.patch
- Rename 0003-strip-the-domain-part-from-etc-hostname-when-setting.patch into
  1014-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
- Rename 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch into
  1015-networkd-make-network.service-an-alias-of-systemd-ne.patch
- Rename 0007-networkd-make-network.service-an-alias-of-systemd-ne.patch into
  1016-core-disable-session-keyring-per-system-sevice-entir.patch
- Rename 0011-core-disable-session-keyring-per-system-sevice-entir.patch into
  1017-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch
  Hence these patch files can be easily identified as SLE specific ones.</changelog>
  <changelog author="fbui@suse.com" date="1695902400">- systemd.spec: add missing `%tmpfiles_create systemd-resolve.conf`</changelog>
  <changelog author="fbui@suse.com" date="1695902401">- Import commit e677079182c975ecdad88a76f657fecb4de523d9
  7692c5bda8 utmp-wtmp: handle EINTR gracefully when waiting to write to tty
  29c3eb4681 utmp-wtmp: fix error in case isatty() fails
  98970eb90b homed: handle EINTR gracefully when waiting for device node
  0305809edd resolved: handle -EINTR returned from fd_wait_for_event() better
  40db4d6abe sd-netlink: handle EINTR from poll() gracefully, as success
  5e681711c6 varlink: also handle EINTR gracefully when waiting for EIO via ppoll()
  6bbd70f092 stdio-bridge: don't be bothered with EINTR
  f978feb591 sd-bus: handle -EINTR return from bus_poll() (bsc#1215241)
  746962ff40 core: replace slice dependencies as they get added (bsc#1214668)</changelog>
  <changelog author="fbui@suse.com" date="1702641600">- Import commit 86f0670d3a01c1a2d4df17f1c68d03f1586195e3
  ba7f1df7a5 vconsole-setup: simplify error handling
  94f4eaea77 Introduce RET_GATHER and use it in src/shared/
  e02406fcc1 mount: replace UNIT_DEPENDENCY_MOUNTINFO_OR_FILE with UNIT_DEPENDENCY_MOUNTINFO/UNIT_DEPENDENCY_MOUNT_FILE
  0b8db54511 mount: drop UNIT_DEPENDENCY_MOUNTINFO_IMPLICIT and UNIT_DEPENDENCY_MOUNTINFO_DEFAULT
  98ba536bd1 mount: always use UNIT_DEPENDENCY_FILE in mount_add_quota_dependencies()
  73c7b2bb48 core/mount: make device deps from /proc/self/mountinfo and .mount unit file exclusive
  ba585a28d7 core: Add trace logging to mount_add_device_dependencies()
  36e0a4f80f core/mount: also remove default deps from /proc/self/mountinfo when it is updated (bsc#1217460)
  bc107c86c3 core/mount: set Mount.from_proc_self_mountinfo flag before adding default dependencies
  ce4907c7c3 core: wrap some long comment</changelog>
  <changelog author="fbui@suse.com" date="1704715200">- Import commit 2cb4d40f1c6a388706af8a83d5344fc0de3c6f4d (merge of v249.17)
  c8578cef7f resolved: actually check authenticated flag of SOA transaction</changelog>
</package>
<package pkgid="05102979a5899659a78401cfe18c48416b2e0ea72d09a6e3c3876bccbaa2a86c" name="libudev1" arch="x86_64">
  <version epoch="0" ver="249.17" rel="150400.8.40.1"/>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
  <changelog author="fbui@suse.com" date="1693396800">- Rename 0001-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch into
  1013-strip-the-domain-part-from-etc-hostname-when-setting.patch
- Rename 0003-strip-the-domain-part-from-etc-hostname-when-setting.patch into
  1014-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
- Rename 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch into
  1015-networkd-make-network.service-an-alias-of-systemd-ne.patch
- Rename 0007-networkd-make-network.service-an-alias-of-systemd-ne.patch into
  1016-core-disable-session-keyring-per-system-sevice-entir.patch
- Rename 0011-core-disable-session-keyring-per-system-sevice-entir.patch into
  1017-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch
  Hence these patch files can be easily identified as SLE specific ones.</changelog>
  <changelog author="fbui@suse.com" date="1695902400">- systemd.spec: add missing `%tmpfiles_create systemd-resolve.conf`</changelog>
  <changelog author="fbui@suse.com" date="1695902401">- Import commit e677079182c975ecdad88a76f657fecb4de523d9
  7692c5bda8 utmp-wtmp: handle EINTR gracefully when waiting to write to tty
  29c3eb4681 utmp-wtmp: fix error in case isatty() fails
  98970eb90b homed: handle EINTR gracefully when waiting for device node
  0305809edd resolved: handle -EINTR returned from fd_wait_for_event() better
  40db4d6abe sd-netlink: handle EINTR from poll() gracefully, as success
  5e681711c6 varlink: also handle EINTR gracefully when waiting for EIO via ppoll()
  6bbd70f092 stdio-bridge: don't be bothered with EINTR
  f978feb591 sd-bus: handle -EINTR return from bus_poll() (bsc#1215241)
  746962ff40 core: replace slice dependencies as they get added (bsc#1214668)</changelog>
  <changelog author="fbui@suse.com" date="1702641600">- Import commit 86f0670d3a01c1a2d4df17f1c68d03f1586195e3
  ba7f1df7a5 vconsole-setup: simplify error handling
  94f4eaea77 Introduce RET_GATHER and use it in src/shared/
  e02406fcc1 mount: replace UNIT_DEPENDENCY_MOUNTINFO_OR_FILE with UNIT_DEPENDENCY_MOUNTINFO/UNIT_DEPENDENCY_MOUNT_FILE
  0b8db54511 mount: drop UNIT_DEPENDENCY_MOUNTINFO_IMPLICIT and UNIT_DEPENDENCY_MOUNTINFO_DEFAULT
  98ba536bd1 mount: always use UNIT_DEPENDENCY_FILE in mount_add_quota_dependencies()
  73c7b2bb48 core/mount: make device deps from /proc/self/mountinfo and .mount unit file exclusive
  ba585a28d7 core: Add trace logging to mount_add_device_dependencies()
  36e0a4f80f core/mount: also remove default deps from /proc/self/mountinfo when it is updated (bsc#1217460)
  bc107c86c3 core/mount: set Mount.from_proc_self_mountinfo flag before adding default dependencies
  ce4907c7c3 core: wrap some long comment</changelog>
  <changelog author="fbui@suse.com" date="1704715200">- Import commit 2cb4d40f1c6a388706af8a83d5344fc0de3c6f4d (merge of v249.17)
  c8578cef7f resolved: actually check authenticated flag of SOA transaction</changelog>
</package>
<package pkgid="cab098ca8da5add7675a4af5016ae2cc1abee2aad9d9503820ee3c063fad727f" name="libudev1" arch="aarch64">
  <version epoch="0" ver="249.17" rel="150400.8.43.1"/>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
  <changelog author="fbui@suse.com" date="1693396800">- Rename 0001-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch into
  1013-strip-the-domain-part-from-etc-hostname-when-setting.patch
- Rename 0003-strip-the-domain-part-from-etc-hostname-when-setting.patch into
  1014-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
- Rename 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch into
  1015-networkd-make-network.service-an-alias-of-systemd-ne.patch
- Rename 0007-networkd-make-network.service-an-alias-of-systemd-ne.patch into
  1016-core-disable-session-keyring-per-system-sevice-entir.patch
- Rename 0011-core-disable-session-keyring-per-system-sevice-entir.patch into
  1017-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch
  Hence these patch files can be easily identified as SLE specific ones.</changelog>
  <changelog author="fbui@suse.com" date="1695902400">- systemd.spec: add missing `%tmpfiles_create systemd-resolve.conf`</changelog>
  <changelog author="fbui@suse.com" date="1695902401">- Import commit e677079182c975ecdad88a76f657fecb4de523d9
  7692c5bda8 utmp-wtmp: handle EINTR gracefully when waiting to write to tty
  29c3eb4681 utmp-wtmp: fix error in case isatty() fails
  98970eb90b homed: handle EINTR gracefully when waiting for device node
  0305809edd resolved: handle -EINTR returned from fd_wait_for_event() better
  40db4d6abe sd-netlink: handle EINTR from poll() gracefully, as success
  5e681711c6 varlink: also handle EINTR gracefully when waiting for EIO via ppoll()
  6bbd70f092 stdio-bridge: don't be bothered with EINTR
  f978feb591 sd-bus: handle -EINTR return from bus_poll() (bsc#1215241)
  746962ff40 core: replace slice dependencies as they get added (bsc#1214668)</changelog>
  <changelog author="fbui@suse.com" date="1702641600">- Import commit 86f0670d3a01c1a2d4df17f1c68d03f1586195e3
  ba7f1df7a5 vconsole-setup: simplify error handling
  94f4eaea77 Introduce RET_GATHER and use it in src/shared/
  e02406fcc1 mount: replace UNIT_DEPENDENCY_MOUNTINFO_OR_FILE with UNIT_DEPENDENCY_MOUNTINFO/UNIT_DEPENDENCY_MOUNT_FILE
  0b8db54511 mount: drop UNIT_DEPENDENCY_MOUNTINFO_IMPLICIT and UNIT_DEPENDENCY_MOUNTINFO_DEFAULT
  98ba536bd1 mount: always use UNIT_DEPENDENCY_FILE in mount_add_quota_dependencies()
  73c7b2bb48 core/mount: make device deps from /proc/self/mountinfo and .mount unit file exclusive
  ba585a28d7 core: Add trace logging to mount_add_device_dependencies()
  36e0a4f80f core/mount: also remove default deps from /proc/self/mountinfo when it is updated (bsc#1217460)
  bc107c86c3 core/mount: set Mount.from_proc_self_mountinfo flag before adding default dependencies
  ce4907c7c3 core: wrap some long comment</changelog>
  <changelog author="fbui@suse.com" date="1704715200">- Import commit 2cb4d40f1c6a388706af8a83d5344fc0de3c6f4d (merge of v249.17)
  c8578cef7f resolved: actually check authenticated flag of SOA transaction (bsc#1218297 CVE-2023-7008)</changelog>
  <changelog author="fbui@suse.com" date="1710936000">- Update 1011-sysv-generator-add-back-support-for-SysV-scripts-for.patch
  Really skip redundant dependencies specified the LSB description that
  references the file name of the service itself for early boot scripts (noticed
  in bsc#1221479).</changelog>
  <changelog author="fbui@suse.com" date="1721649600">- Don't mention any rpm macros inside comments, even if escaped (bsc#1228091)
  Otherwise pesign-obs-integration ends up re-packaging systemd with all macros
  inside comments unescaped leading to unpredictable behavior. Now why rpm
  expands rpm macros inside comments is the question...</changelog>
  <changelog author="fbui@suse.com" date="1721736000">- Import commit a57a6d239c5d6b91fb3dcd269705e60804a03ae1
  cd0c9ac4f4 unit: drop ProtectClock=yes from systemd-udevd.service (bsc#1226414)
  e1eaa86a49 udev: do not set ID_PATH and by-path symlink for nvmf disks
  a85d211874 man: Document ranges for distributions config files and local config files</changelog>
</package>
<package pkgid="c392c5034c704eae64b61d032148a3ca422e8176f8b74457ccd00a528b137604" name="libudev1" arch="s390x">
  <version epoch="0" ver="249.17" rel="150400.8.43.1"/>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
  <changelog author="fbui@suse.com" date="1693396800">- Rename 0001-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch into
  1013-strip-the-domain-part-from-etc-hostname-when-setting.patch
- Rename 0003-strip-the-domain-part-from-etc-hostname-when-setting.patch into
  1014-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
- Rename 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch into
  1015-networkd-make-network.service-an-alias-of-systemd-ne.patch
- Rename 0007-networkd-make-network.service-an-alias-of-systemd-ne.patch into
  1016-core-disable-session-keyring-per-system-sevice-entir.patch
- Rename 0011-core-disable-session-keyring-per-system-sevice-entir.patch into
  1017-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch
  Hence these patch files can be easily identified as SLE specific ones.</changelog>
  <changelog author="fbui@suse.com" date="1695902400">- systemd.spec: add missing `%tmpfiles_create systemd-resolve.conf`</changelog>
  <changelog author="fbui@suse.com" date="1695902401">- Import commit e677079182c975ecdad88a76f657fecb4de523d9
  7692c5bda8 utmp-wtmp: handle EINTR gracefully when waiting to write to tty
  29c3eb4681 utmp-wtmp: fix error in case isatty() fails
  98970eb90b homed: handle EINTR gracefully when waiting for device node
  0305809edd resolved: handle -EINTR returned from fd_wait_for_event() better
  40db4d6abe sd-netlink: handle EINTR from poll() gracefully, as success
  5e681711c6 varlink: also handle EINTR gracefully when waiting for EIO via ppoll()
  6bbd70f092 stdio-bridge: don't be bothered with EINTR
  f978feb591 sd-bus: handle -EINTR return from bus_poll() (bsc#1215241)
  746962ff40 core: replace slice dependencies as they get added (bsc#1214668)</changelog>
  <changelog author="fbui@suse.com" date="1702641600">- Import commit 86f0670d3a01c1a2d4df17f1c68d03f1586195e3
  ba7f1df7a5 vconsole-setup: simplify error handling
  94f4eaea77 Introduce RET_GATHER and use it in src/shared/
  e02406fcc1 mount: replace UNIT_DEPENDENCY_MOUNTINFO_OR_FILE with UNIT_DEPENDENCY_MOUNTINFO/UNIT_DEPENDENCY_MOUNT_FILE
  0b8db54511 mount: drop UNIT_DEPENDENCY_MOUNTINFO_IMPLICIT and UNIT_DEPENDENCY_MOUNTINFO_DEFAULT
  98ba536bd1 mount: always use UNIT_DEPENDENCY_FILE in mount_add_quota_dependencies()
  73c7b2bb48 core/mount: make device deps from /proc/self/mountinfo and .mount unit file exclusive
  ba585a28d7 core: Add trace logging to mount_add_device_dependencies()
  36e0a4f80f core/mount: also remove default deps from /proc/self/mountinfo when it is updated (bsc#1217460)
  bc107c86c3 core/mount: set Mount.from_proc_self_mountinfo flag before adding default dependencies
  ce4907c7c3 core: wrap some long comment</changelog>
  <changelog author="fbui@suse.com" date="1704715200">- Import commit 2cb4d40f1c6a388706af8a83d5344fc0de3c6f4d (merge of v249.17)
  c8578cef7f resolved: actually check authenticated flag of SOA transaction (bsc#1218297 CVE-2023-7008)</changelog>
  <changelog author="fbui@suse.com" date="1710936000">- Update 1011-sysv-generator-add-back-support-for-SysV-scripts-for.patch
  Really skip redundant dependencies specified the LSB description that
  references the file name of the service itself for early boot scripts (noticed
  in bsc#1221479).</changelog>
  <changelog author="fbui@suse.com" date="1721649600">- Don't mention any rpm macros inside comments, even if escaped (bsc#1228091)
  Otherwise pesign-obs-integration ends up re-packaging systemd with all macros
  inside comments unescaped leading to unpredictable behavior. Now why rpm
  expands rpm macros inside comments is the question...</changelog>
  <changelog author="fbui@suse.com" date="1721736000">- Import commit a57a6d239c5d6b91fb3dcd269705e60804a03ae1
  cd0c9ac4f4 unit: drop ProtectClock=yes from systemd-udevd.service (bsc#1226414)
  e1eaa86a49 udev: do not set ID_PATH and by-path symlink for nvmf disks
  a85d211874 man: Document ranges for distributions config files and local config files</changelog>
</package>
<package pkgid="c4d05c13394b3178243d04e0c24b2427eff1cae71ed14e0877c50acb683f5570" name="libudev1" arch="x86_64">
  <version epoch="0" ver="249.17" rel="150400.8.43.1"/>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
  <changelog author="fbui@suse.com" date="1693396800">- Rename 0001-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch into
  1013-strip-the-domain-part-from-etc-hostname-when-setting.patch
- Rename 0003-strip-the-domain-part-from-etc-hostname-when-setting.patch into
  1014-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
- Rename 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch into
  1015-networkd-make-network.service-an-alias-of-systemd-ne.patch
- Rename 0007-networkd-make-network.service-an-alias-of-systemd-ne.patch into
  1016-core-disable-session-keyring-per-system-sevice-entir.patch
- Rename 0011-core-disable-session-keyring-per-system-sevice-entir.patch into
  1017-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch
  Hence these patch files can be easily identified as SLE specific ones.</changelog>
  <changelog author="fbui@suse.com" date="1695902400">- systemd.spec: add missing `%tmpfiles_create systemd-resolve.conf`</changelog>
  <changelog author="fbui@suse.com" date="1695902401">- Import commit e677079182c975ecdad88a76f657fecb4de523d9
  7692c5bda8 utmp-wtmp: handle EINTR gracefully when waiting to write to tty
  29c3eb4681 utmp-wtmp: fix error in case isatty() fails
  98970eb90b homed: handle EINTR gracefully when waiting for device node
  0305809edd resolved: handle -EINTR returned from fd_wait_for_event() better
  40db4d6abe sd-netlink: handle EINTR from poll() gracefully, as success
  5e681711c6 varlink: also handle EINTR gracefully when waiting for EIO via ppoll()
  6bbd70f092 stdio-bridge: don't be bothered with EINTR
  f978feb591 sd-bus: handle -EINTR return from bus_poll() (bsc#1215241)
  746962ff40 core: replace slice dependencies as they get added (bsc#1214668)</changelog>
  <changelog author="fbui@suse.com" date="1702641600">- Import commit 86f0670d3a01c1a2d4df17f1c68d03f1586195e3
  ba7f1df7a5 vconsole-setup: simplify error handling
  94f4eaea77 Introduce RET_GATHER and use it in src/shared/
  e02406fcc1 mount: replace UNIT_DEPENDENCY_MOUNTINFO_OR_FILE with UNIT_DEPENDENCY_MOUNTINFO/UNIT_DEPENDENCY_MOUNT_FILE
  0b8db54511 mount: drop UNIT_DEPENDENCY_MOUNTINFO_IMPLICIT and UNIT_DEPENDENCY_MOUNTINFO_DEFAULT
  98ba536bd1 mount: always use UNIT_DEPENDENCY_FILE in mount_add_quota_dependencies()
  73c7b2bb48 core/mount: make device deps from /proc/self/mountinfo and .mount unit file exclusive
  ba585a28d7 core: Add trace logging to mount_add_device_dependencies()
  36e0a4f80f core/mount: also remove default deps from /proc/self/mountinfo when it is updated (bsc#1217460)
  bc107c86c3 core/mount: set Mount.from_proc_self_mountinfo flag before adding default dependencies
  ce4907c7c3 core: wrap some long comment</changelog>
  <changelog author="fbui@suse.com" date="1704715200">- Import commit 2cb4d40f1c6a388706af8a83d5344fc0de3c6f4d (merge of v249.17)
  c8578cef7f resolved: actually check authenticated flag of SOA transaction (bsc#1218297 CVE-2023-7008)</changelog>
  <changelog author="fbui@suse.com" date="1710936000">- Update 1011-sysv-generator-add-back-support-for-SysV-scripts-for.patch
  Really skip redundant dependencies specified the LSB description that
  references the file name of the service itself for early boot scripts (noticed
  in bsc#1221479).</changelog>
  <changelog author="fbui@suse.com" date="1721649600">- Don't mention any rpm macros inside comments, even if escaped (bsc#1228091)
  Otherwise pesign-obs-integration ends up re-packaging systemd with all macros
  inside comments unescaped leading to unpredictable behavior. Now why rpm
  expands rpm macros inside comments is the question...</changelog>
  <changelog author="fbui@suse.com" date="1721736000">- Import commit a57a6d239c5d6b91fb3dcd269705e60804a03ae1
  cd0c9ac4f4 unit: drop ProtectClock=yes from systemd-udevd.service (bsc#1226414)
  e1eaa86a49 udev: do not set ID_PATH and by-path symlink for nvmf disks
  a85d211874 man: Document ranges for distributions config files and local config files</changelog>
</package>
<package pkgid="adc36ba3e22d61e9557f9fbbe710a2c89f7534805d54ccf9ddbf205056883bd3" name="libudisks2-0" arch="aarch64">
  <version epoch="0" ver="2.9.2" rel="150400.3.6.2"/>
  <changelog author="jengelh@inai.de" date="1519905600">- Rectify grammar issues in summaries</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520337600">- Fix BuildRequires/Requires tags related to libblockdev and
  libatasmart dependencies.
- Drop storaged Provides tags since there is no need for them.
- Switch libconfig-devel and libstoragemgmt-devel BuildRequires by
  their pkgconfig modules counterparts.
- Add a Recommends tag for the btrfs module to offer support for
  the openSUSE's file system of choice by default.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Require specific libblockdev plugins in due udisks2's modules,
  following libblockdev's plugins split (bsc#1086447).
- Drop redundant libblockdev-devel BuildRequires: it is not needed
  once its pkgconfig module is already a requirement.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524657600">- Add missing libblockdev-loop Requires tag: it is needed by
  default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1547208000">- Update to version 2.7.8:
  + Fix string format vulnerability (CVE-2018-17336)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add explicit libblockdev-lvm-dbus-devel BuildRequires: Previously
  pulled in implicitly.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331201">- Update to version 2.8.1:
  + Mostly bugfixes.
- Changes from version 2.8.0:
  + Introduce a new VDO module that is built on top of
    libblockdev-vdo.
  + General bugfixes.
  + Support creating LUKS 2 encrypted devices and other
    LUKS-related enhancements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548849600">- Add libblockdev-vdo-devel BuildRequires: Build the new vdo
  module. Following this, add new vdo sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549972800">- Add more info to description of vdo.</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Generalize VDO description.
- Fix faulty grammar.</changelog>
  <changelog author="ro@suse.de" date="1553083200">- update to 2.8.2
  + migration from intltool to gettext, udisks no longer depends
    on gnome-common
  + added 'windows_names' as a default mount option for ntfs-3g
  + fixed an issue potentially leading to open filedescriptors
    exhaustion
- drop buildreq for intltool</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.8.3:
  + This release brings many memory leak fixes with similar work
    done in libblockdev-2.22. While libblockdev version requirement
    remains unchanged, it's strongly recommended to use both
    releases together to get full coverage of the fixes.
  + Other notable changes include:
  - Default and supported encryption types are now exposed on the
    org.freedesktop.UDisks2.Manager interface.
  - Minor org.freedesktop.UDisks2.Filesystem improvements related
    to updating properties upon method call return.
  - Various test fixes and improvements.
  - Updated translations.</changelog>
  <changelog author="thomas.blume@suse.com" date="1562673600">- don't call systemd uninstall macro for clean-mount-point@.service
  template (boo#1139996)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1573732800">- Update to version 2.8.4:
  + This udisks-2.8.4 release brings couple of bugfixes, docs and
    test fixes and translation updates. With ongoing focus on
    development towards udisks-2.9.0, this is just a small
    maintenance release.</changelog>
  <changelog author="milsav92@outlook.com" date="1599393600">- Update to version 2.9.1:
  + This is mostly a bugfix release, notable changes include:
  - active modules are now tracked in a daemon state file and
    are automatically reloaded on next startup in case of
    previous unclean daemon shutdown
  - further improvements in object property updates while
    handling method calls
  - zram module fixes:
    + compatibility improvements with existing zram generators
    and toolkits
    + the zram-setup@.service systemd unit has been renamed to
    udisks2-zram-setup@.service
    + related udev rules have been separated into
    90-udisks2-zram.rules
    + the zram.conf.d path is now configurable and defaults to
    /usr/lib/zram.conf.d
- Update to version 2.9.0:
  + This 2.9.0 release brings many changes to the daemon core,
    internal modularity and the libudisks2 library.
    No public API has been removed, there is a couple of
    deprecations however.
  + There's a major change in how and when D-Bus object properties
    are updated. As a general rule when a method call returns
    affected objects should now have their properties updated by
    that moment. This is an ongoing task and while majority of the
    daemon API has been covered, there are pending issues in some
    of the modules.
  + Configurable mount options is a new big feature for this
    release, allowing sysadmins to re-define default mount options
    for each filesystem type. Extensive documentation is available
    at http://storaged.org/doc/udisks2-api/latest/mount_options.html
  + Internal module API has been reworked, modules should now be
    enabled separately via the new EnableModule() call that also
    reports initialization failures.
    The old org.freedesktop.UDisks2.Manager.EnableModules() call
    has been deprecated.
  + Additional feature highlights:
  - building the daemon can now be disabled via configure switch,
    only libudisks2 will be built
  - removed the systemd mount cleanup service, mount state is now
    tracked separately for persistent and non-persistent mount
    points and cleanup of lingering persistent mount points is
    performed on daemon startup (e.g. on system boot)
  - new LVM-VDO integration, deprecated the standalone VDO module
  - added support for (un)locking BitLocker devices
  - libudisks2 now includes generated GDBus code for compiled-in
    modules, separate pkg-config files are provided as well</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with symlinks
  * mount options: Allow 'nosymfollow' mount option for unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent() out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- drop udisks2-Fix-memory-leaks.patch, udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream)</changelog>
  <changelog author="thomas.blume@suse.com" date="1652097600">- CVE-2021-3802: fix insecure defaults in user-accessible mount helpers
  (bsc#1190606)
  + add 0001-mount-options-Always-use-errors-remount-ro-for-ext-f.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1723118400">- fix double free inside the g_static_resource_fini() atexit handler
  (bsc#1228290)
  + add 0001-udiskslinuxmountoptions-Do-not-free-static-daemon-re.patch</changelog>
</package>
<package pkgid="d025deec5ea7c1b8a2f8516fafe24169ac31b26d67b3e34d4bf5f3502ec99bcb" name="libudisks2-0" arch="s390x">
  <version epoch="0" ver="2.9.2" rel="150400.3.6.2"/>
  <changelog author="jengelh@inai.de" date="1519905600">- Rectify grammar issues in summaries</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520337600">- Fix BuildRequires/Requires tags related to libblockdev and
  libatasmart dependencies.
- Drop storaged Provides tags since there is no need for them.
- Switch libconfig-devel and libstoragemgmt-devel BuildRequires by
  their pkgconfig modules counterparts.
- Add a Recommends tag for the btrfs module to offer support for
  the openSUSE's file system of choice by default.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Require specific libblockdev plugins in due udisks2's modules,
  following libblockdev's plugins split (bsc#1086447).
- Drop redundant libblockdev-devel BuildRequires: it is not needed
  once its pkgconfig module is already a requirement.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524657600">- Add missing libblockdev-loop Requires tag: it is needed by
  default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1547208000">- Update to version 2.7.8:
  + Fix string format vulnerability (CVE-2018-17336)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add explicit libblockdev-lvm-dbus-devel BuildRequires: Previously
  pulled in implicitly.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331201">- Update to version 2.8.1:
  + Mostly bugfixes.
- Changes from version 2.8.0:
  + Introduce a new VDO module that is built on top of
    libblockdev-vdo.
  + General bugfixes.
  + Support creating LUKS 2 encrypted devices and other
    LUKS-related enhancements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548849600">- Add libblockdev-vdo-devel BuildRequires: Build the new vdo
  module. Following this, add new vdo sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549972800">- Add more info to description of vdo.</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Generalize VDO description.
- Fix faulty grammar.</changelog>
  <changelog author="ro@suse.de" date="1553083200">- update to 2.8.2
  + migration from intltool to gettext, udisks no longer depends
    on gnome-common
  + added 'windows_names' as a default mount option for ntfs-3g
  + fixed an issue potentially leading to open filedescriptors
    exhaustion
- drop buildreq for intltool</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.8.3:
  + This release brings many memory leak fixes with similar work
    done in libblockdev-2.22. While libblockdev version requirement
    remains unchanged, it's strongly recommended to use both
    releases together to get full coverage of the fixes.
  + Other notable changes include:
  - Default and supported encryption types are now exposed on the
    org.freedesktop.UDisks2.Manager interface.
  - Minor org.freedesktop.UDisks2.Filesystem improvements related
    to updating properties upon method call return.
  - Various test fixes and improvements.
  - Updated translations.</changelog>
  <changelog author="thomas.blume@suse.com" date="1562673600">- don't call systemd uninstall macro for clean-mount-point@.service
  template (boo#1139996)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1573732800">- Update to version 2.8.4:
  + This udisks-2.8.4 release brings couple of bugfixes, docs and
    test fixes and translation updates. With ongoing focus on
    development towards udisks-2.9.0, this is just a small
    maintenance release.</changelog>
  <changelog author="milsav92@outlook.com" date="1599393600">- Update to version 2.9.1:
  + This is mostly a bugfix release, notable changes include:
  - active modules are now tracked in a daemon state file and
    are automatically reloaded on next startup in case of
    previous unclean daemon shutdown
  - further improvements in object property updates while
    handling method calls
  - zram module fixes:
    + compatibility improvements with existing zram generators
    and toolkits
    + the zram-setup@.service systemd unit has been renamed to
    udisks2-zram-setup@.service
    + related udev rules have been separated into
    90-udisks2-zram.rules
    + the zram.conf.d path is now configurable and defaults to
    /usr/lib/zram.conf.d
- Update to version 2.9.0:
  + This 2.9.0 release brings many changes to the daemon core,
    internal modularity and the libudisks2 library.
    No public API has been removed, there is a couple of
    deprecations however.
  + There's a major change in how and when D-Bus object properties
    are updated. As a general rule when a method call returns
    affected objects should now have their properties updated by
    that moment. This is an ongoing task and while majority of the
    daemon API has been covered, there are pending issues in some
    of the modules.
  + Configurable mount options is a new big feature for this
    release, allowing sysadmins to re-define default mount options
    for each filesystem type. Extensive documentation is available
    at http://storaged.org/doc/udisks2-api/latest/mount_options.html
  + Internal module API has been reworked, modules should now be
    enabled separately via the new EnableModule() call that also
    reports initialization failures.
    The old org.freedesktop.UDisks2.Manager.EnableModules() call
    has been deprecated.
  + Additional feature highlights:
  - building the daemon can now be disabled via configure switch,
    only libudisks2 will be built
  - removed the systemd mount cleanup service, mount state is now
    tracked separately for persistent and non-persistent mount
    points and cleanup of lingering persistent mount points is
    performed on daemon startup (e.g. on system boot)
  - new LVM-VDO integration, deprecated the standalone VDO module
  - added support for (un)locking BitLocker devices
  - libudisks2 now includes generated GDBus code for compiled-in
    modules, separate pkg-config files are provided as well</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with symlinks
  * mount options: Allow 'nosymfollow' mount option for unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent() out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- drop udisks2-Fix-memory-leaks.patch, udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream)</changelog>
  <changelog author="thomas.blume@suse.com" date="1652097600">- CVE-2021-3802: fix insecure defaults in user-accessible mount helpers
  (bsc#1190606)
  + add 0001-mount-options-Always-use-errors-remount-ro-for-ext-f.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1723118400">- fix double free inside the g_static_resource_fini() atexit handler
  (bsc#1228290)
  + add 0001-udiskslinuxmountoptions-Do-not-free-static-daemon-re.patch</changelog>
</package>
<package pkgid="8289448e9cf08cc91e43cf7d88e59a715f7b6cf2555edde1e4185cbc590babfd" name="libudisks2-0" arch="x86_64">
  <version epoch="0" ver="2.9.2" rel="150400.3.6.2"/>
  <changelog author="jengelh@inai.de" date="1519905600">- Rectify grammar issues in summaries</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520337600">- Fix BuildRequires/Requires tags related to libblockdev and
  libatasmart dependencies.
- Drop storaged Provides tags since there is no need for them.
- Switch libconfig-devel and libstoragemgmt-devel BuildRequires by
  their pkgconfig modules counterparts.
- Add a Recommends tag for the btrfs module to offer support for
  the openSUSE's file system of choice by default.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Require specific libblockdev plugins in due udisks2's modules,
  following libblockdev's plugins split (bsc#1086447).
- Drop redundant libblockdev-devel BuildRequires: it is not needed
  once its pkgconfig module is already a requirement.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524657600">- Add missing libblockdev-loop Requires tag: it is needed by
  default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1547208000">- Update to version 2.7.8:
  + Fix string format vulnerability (CVE-2018-17336)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add explicit libblockdev-lvm-dbus-devel BuildRequires: Previously
  pulled in implicitly.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331201">- Update to version 2.8.1:
  + Mostly bugfixes.
- Changes from version 2.8.0:
  + Introduce a new VDO module that is built on top of
    libblockdev-vdo.
  + General bugfixes.
  + Support creating LUKS 2 encrypted devices and other
    LUKS-related enhancements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548849600">- Add libblockdev-vdo-devel BuildRequires: Build the new vdo
  module. Following this, add new vdo sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549972800">- Add more info to description of vdo.</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Generalize VDO description.
- Fix faulty grammar.</changelog>
  <changelog author="ro@suse.de" date="1553083200">- update to 2.8.2
  + migration from intltool to gettext, udisks no longer depends
    on gnome-common
  + added 'windows_names' as a default mount option for ntfs-3g
  + fixed an issue potentially leading to open filedescriptors
    exhaustion
- drop buildreq for intltool</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.8.3:
  + This release brings many memory leak fixes with similar work
    done in libblockdev-2.22. While libblockdev version requirement
    remains unchanged, it's strongly recommended to use both
    releases together to get full coverage of the fixes.
  + Other notable changes include:
  - Default and supported encryption types are now exposed on the
    org.freedesktop.UDisks2.Manager interface.
  - Minor org.freedesktop.UDisks2.Filesystem improvements related
    to updating properties upon method call return.
  - Various test fixes and improvements.
  - Updated translations.</changelog>
  <changelog author="thomas.blume@suse.com" date="1562673600">- don't call systemd uninstall macro for clean-mount-point@.service
  template (boo#1139996)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1573732800">- Update to version 2.8.4:
  + This udisks-2.8.4 release brings couple of bugfixes, docs and
    test fixes and translation updates. With ongoing focus on
    development towards udisks-2.9.0, this is just a small
    maintenance release.</changelog>
  <changelog author="milsav92@outlook.com" date="1599393600">- Update to version 2.9.1:
  + This is mostly a bugfix release, notable changes include:
  - active modules are now tracked in a daemon state file and
    are automatically reloaded on next startup in case of
    previous unclean daemon shutdown
  - further improvements in object property updates while
    handling method calls
  - zram module fixes:
    + compatibility improvements with existing zram generators
    and toolkits
    + the zram-setup@.service systemd unit has been renamed to
    udisks2-zram-setup@.service
    + related udev rules have been separated into
    90-udisks2-zram.rules
    + the zram.conf.d path is now configurable and defaults to
    /usr/lib/zram.conf.d
- Update to version 2.9.0:
  + This 2.9.0 release brings many changes to the daemon core,
    internal modularity and the libudisks2 library.
    No public API has been removed, there is a couple of
    deprecations however.
  + There's a major change in how and when D-Bus object properties
    are updated. As a general rule when a method call returns
    affected objects should now have their properties updated by
    that moment. This is an ongoing task and while majority of the
    daemon API has been covered, there are pending issues in some
    of the modules.
  + Configurable mount options is a new big feature for this
    release, allowing sysadmins to re-define default mount options
    for each filesystem type. Extensive documentation is available
    at http://storaged.org/doc/udisks2-api/latest/mount_options.html
  + Internal module API has been reworked, modules should now be
    enabled separately via the new EnableModule() call that also
    reports initialization failures.
    The old org.freedesktop.UDisks2.Manager.EnableModules() call
    has been deprecated.
  + Additional feature highlights:
  - building the daemon can now be disabled via configure switch,
    only libudisks2 will be built
  - removed the systemd mount cleanup service, mount state is now
    tracked separately for persistent and non-persistent mount
    points and cleanup of lingering persistent mount points is
    performed on daemon startup (e.g. on system boot)
  - new LVM-VDO integration, deprecated the standalone VDO module
  - added support for (un)locking BitLocker devices
  - libudisks2 now includes generated GDBus code for compiled-in
    modules, separate pkg-config files are provided as well</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with symlinks
  * mount options: Allow 'nosymfollow' mount option for unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent() out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- drop udisks2-Fix-memory-leaks.patch, udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream)</changelog>
  <changelog author="thomas.blume@suse.com" date="1652097600">- CVE-2021-3802: fix insecure defaults in user-accessible mount helpers
  (bsc#1190606)
  + add 0001-mount-options-Always-use-errors-remount-ro-for-ext-f.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1723118400">- fix double free inside the g_static_resource_fini() atexit handler
  (bsc#1228290)
  + add 0001-udiskslinuxmountoptions-Do-not-free-static-daemon-re.patch</changelog>
</package>
<package pkgid="5cb3b30fe7991ee62ca95b7573f78cbc0dcae5fd9cbfa51e51673b21e7a8e6e4" name="libudisks2-0_btrfs" arch="aarch64">
  <version epoch="0" ver="2.9.2" rel="150400.3.6.2"/>
  <changelog author="jengelh@inai.de" date="1519905600">- Rectify grammar issues in summaries</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520337600">- Fix BuildRequires/Requires tags related to libblockdev and
  libatasmart dependencies.
- Drop storaged Provides tags since there is no need for them.
- Switch libconfig-devel and libstoragemgmt-devel BuildRequires by
  their pkgconfig modules counterparts.
- Add a Recommends tag for the btrfs module to offer support for
  the openSUSE's file system of choice by default.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Require specific libblockdev plugins in due udisks2's modules,
  following libblockdev's plugins split (bsc#1086447).
- Drop redundant libblockdev-devel BuildRequires: it is not needed
  once its pkgconfig module is already a requirement.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524657600">- Add missing libblockdev-loop Requires tag: it is needed by
  default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1547208000">- Update to version 2.7.8:
  + Fix string format vulnerability (CVE-2018-17336)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add explicit libblockdev-lvm-dbus-devel BuildRequires: Previously
  pulled in implicitly.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331201">- Update to version 2.8.1:
  + Mostly bugfixes.
- Changes from version 2.8.0:
  + Introduce a new VDO module that is built on top of
    libblockdev-vdo.
  + General bugfixes.
  + Support creating LUKS 2 encrypted devices and other
    LUKS-related enhancements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548849600">- Add libblockdev-vdo-devel BuildRequires: Build the new vdo
  module. Following this, add new vdo sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549972800">- Add more info to description of vdo.</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Generalize VDO description.
- Fix faulty grammar.</changelog>
  <changelog author="ro@suse.de" date="1553083200">- update to 2.8.2
  + migration from intltool to gettext, udisks no longer depends
    on gnome-common
  + added 'windows_names' as a default mount option for ntfs-3g
  + fixed an issue potentially leading to open filedescriptors
    exhaustion
- drop buildreq for intltool</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.8.3:
  + This release brings many memory leak fixes with similar work
    done in libblockdev-2.22. While libblockdev version requirement
    remains unchanged, it's strongly recommended to use both
    releases together to get full coverage of the fixes.
  + Other notable changes include:
  - Default and supported encryption types are now exposed on the
    org.freedesktop.UDisks2.Manager interface.
  - Minor org.freedesktop.UDisks2.Filesystem improvements related
    to updating properties upon method call return.
  - Various test fixes and improvements.
  - Updated translations.</changelog>
  <changelog author="thomas.blume@suse.com" date="1562673600">- don't call systemd uninstall macro for clean-mount-point@.service
  template (boo#1139996)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1573732800">- Update to version 2.8.4:
  + This udisks-2.8.4 release brings couple of bugfixes, docs and
    test fixes and translation updates. With ongoing focus on
    development towards udisks-2.9.0, this is just a small
    maintenance release.</changelog>
  <changelog author="milsav92@outlook.com" date="1599393600">- Update to version 2.9.1:
  + This is mostly a bugfix release, notable changes include:
  - active modules are now tracked in a daemon state file and
    are automatically reloaded on next startup in case of
    previous unclean daemon shutdown
  - further improvements in object property updates while
    handling method calls
  - zram module fixes:
    + compatibility improvements with existing zram generators
    and toolkits
    + the zram-setup@.service systemd unit has been renamed to
    udisks2-zram-setup@.service
    + related udev rules have been separated into
    90-udisks2-zram.rules
    + the zram.conf.d path is now configurable and defaults to
    /usr/lib/zram.conf.d
- Update to version 2.9.0:
  + This 2.9.0 release brings many changes to the daemon core,
    internal modularity and the libudisks2 library.
    No public API has been removed, there is a couple of
    deprecations however.
  + There's a major change in how and when D-Bus object properties
    are updated. As a general rule when a method call returns
    affected objects should now have their properties updated by
    that moment. This is an ongoing task and while majority of the
    daemon API has been covered, there are pending issues in some
    of the modules.
  + Configurable mount options is a new big feature for this
    release, allowing sysadmins to re-define default mount options
    for each filesystem type. Extensive documentation is available
    at http://storaged.org/doc/udisks2-api/latest/mount_options.html
  + Internal module API has been reworked, modules should now be
    enabled separately via the new EnableModule() call that also
    reports initialization failures.
    The old org.freedesktop.UDisks2.Manager.EnableModules() call
    has been deprecated.
  + Additional feature highlights:
  - building the daemon can now be disabled via configure switch,
    only libudisks2 will be built
  - removed the systemd mount cleanup service, mount state is now
    tracked separately for persistent and non-persistent mount
    points and cleanup of lingering persistent mount points is
    performed on daemon startup (e.g. on system boot)
  - new LVM-VDO integration, deprecated the standalone VDO module
  - added support for (un)locking BitLocker devices
  - libudisks2 now includes generated GDBus code for compiled-in
    modules, separate pkg-config files are provided as well</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with symlinks
  * mount options: Allow 'nosymfollow' mount option for unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent() out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- drop udisks2-Fix-memory-leaks.patch, udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream)</changelog>
  <changelog author="thomas.blume@suse.com" date="1652097600">- CVE-2021-3802: fix insecure defaults in user-accessible mount helpers
  (bsc#1190606)
  + add 0001-mount-options-Always-use-errors-remount-ro-for-ext-f.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1723118400">- fix double free inside the g_static_resource_fini() atexit handler
  (bsc#1228290)
  + add 0001-udiskslinuxmountoptions-Do-not-free-static-daemon-re.patch</changelog>
</package>
<package pkgid="96f2aa27c5bbf6179cae372a5f4a8c689b6f2e8e87f1727d8af4fc8737ad2c69" name="libudisks2-0_btrfs" arch="s390x">
  <version epoch="0" ver="2.9.2" rel="150400.3.6.2"/>
  <changelog author="jengelh@inai.de" date="1519905600">- Rectify grammar issues in summaries</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520337600">- Fix BuildRequires/Requires tags related to libblockdev and
  libatasmart dependencies.
- Drop storaged Provides tags since there is no need for them.
- Switch libconfig-devel and libstoragemgmt-devel BuildRequires by
  their pkgconfig modules counterparts.
- Add a Recommends tag for the btrfs module to offer support for
  the openSUSE's file system of choice by default.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Require specific libblockdev plugins in due udisks2's modules,
  following libblockdev's plugins split (bsc#1086447).
- Drop redundant libblockdev-devel BuildRequires: it is not needed
  once its pkgconfig module is already a requirement.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524657600">- Add missing libblockdev-loop Requires tag: it is needed by
  default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1547208000">- Update to version 2.7.8:
  + Fix string format vulnerability (CVE-2018-17336)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add explicit libblockdev-lvm-dbus-devel BuildRequires: Previously
  pulled in implicitly.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331201">- Update to version 2.8.1:
  + Mostly bugfixes.
- Changes from version 2.8.0:
  + Introduce a new VDO module that is built on top of
    libblockdev-vdo.
  + General bugfixes.
  + Support creating LUKS 2 encrypted devices and other
    LUKS-related enhancements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548849600">- Add libblockdev-vdo-devel BuildRequires: Build the new vdo
  module. Following this, add new vdo sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549972800">- Add more info to description of vdo.</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Generalize VDO description.
- Fix faulty grammar.</changelog>
  <changelog author="ro@suse.de" date="1553083200">- update to 2.8.2
  + migration from intltool to gettext, udisks no longer depends
    on gnome-common
  + added 'windows_names' as a default mount option for ntfs-3g
  + fixed an issue potentially leading to open filedescriptors
    exhaustion
- drop buildreq for intltool</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.8.3:
  + This release brings many memory leak fixes with similar work
    done in libblockdev-2.22. While libblockdev version requirement
    remains unchanged, it's strongly recommended to use both
    releases together to get full coverage of the fixes.
  + Other notable changes include:
  - Default and supported encryption types are now exposed on the
    org.freedesktop.UDisks2.Manager interface.
  - Minor org.freedesktop.UDisks2.Filesystem improvements related
    to updating properties upon method call return.
  - Various test fixes and improvements.
  - Updated translations.</changelog>
  <changelog author="thomas.blume@suse.com" date="1562673600">- don't call systemd uninstall macro for clean-mount-point@.service
  template (boo#1139996)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1573732800">- Update to version 2.8.4:
  + This udisks-2.8.4 release brings couple of bugfixes, docs and
    test fixes and translation updates. With ongoing focus on
    development towards udisks-2.9.0, this is just a small
    maintenance release.</changelog>
  <changelog author="milsav92@outlook.com" date="1599393600">- Update to version 2.9.1:
  + This is mostly a bugfix release, notable changes include:
  - active modules are now tracked in a daemon state file and
    are automatically reloaded on next startup in case of
    previous unclean daemon shutdown
  - further improvements in object property updates while
    handling method calls
  - zram module fixes:
    + compatibility improvements with existing zram generators
    and toolkits
    + the zram-setup@.service systemd unit has been renamed to
    udisks2-zram-setup@.service
    + related udev rules have been separated into
    90-udisks2-zram.rules
    + the zram.conf.d path is now configurable and defaults to
    /usr/lib/zram.conf.d
- Update to version 2.9.0:
  + This 2.9.0 release brings many changes to the daemon core,
    internal modularity and the libudisks2 library.
    No public API has been removed, there is a couple of
    deprecations however.
  + There's a major change in how and when D-Bus object properties
    are updated. As a general rule when a method call returns
    affected objects should now have their properties updated by
    that moment. This is an ongoing task and while majority of the
    daemon API has been covered, there are pending issues in some
    of the modules.
  + Configurable mount options is a new big feature for this
    release, allowing sysadmins to re-define default mount options
    for each filesystem type. Extensive documentation is available
    at http://storaged.org/doc/udisks2-api/latest/mount_options.html
  + Internal module API has been reworked, modules should now be
    enabled separately via the new EnableModule() call that also
    reports initialization failures.
    The old org.freedesktop.UDisks2.Manager.EnableModules() call
    has been deprecated.
  + Additional feature highlights:
  - building the daemon can now be disabled via configure switch,
    only libudisks2 will be built
  - removed the systemd mount cleanup service, mount state is now
    tracked separately for persistent and non-persistent mount
    points and cleanup of lingering persistent mount points is
    performed on daemon startup (e.g. on system boot)
  - new LVM-VDO integration, deprecated the standalone VDO module
  - added support for (un)locking BitLocker devices
  - libudisks2 now includes generated GDBus code for compiled-in
    modules, separate pkg-config files are provided as well</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with symlinks
  * mount options: Allow 'nosymfollow' mount option for unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent() out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- drop udisks2-Fix-memory-leaks.patch, udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream)</changelog>
  <changelog author="thomas.blume@suse.com" date="1652097600">- CVE-2021-3802: fix insecure defaults in user-accessible mount helpers
  (bsc#1190606)
  + add 0001-mount-options-Always-use-errors-remount-ro-for-ext-f.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1723118400">- fix double free inside the g_static_resource_fini() atexit handler
  (bsc#1228290)
  + add 0001-udiskslinuxmountoptions-Do-not-free-static-daemon-re.patch</changelog>
</package>
<package pkgid="ccc213b6ad9f66d1637d4b1b3c0abc2305337f3805df4ed4a7bbc66eb9af71df" name="libudisks2-0_btrfs" arch="x86_64">
  <version epoch="0" ver="2.9.2" rel="150400.3.6.2"/>
  <changelog author="jengelh@inai.de" date="1519905600">- Rectify grammar issues in summaries</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520337600">- Fix BuildRequires/Requires tags related to libblockdev and
  libatasmart dependencies.
- Drop storaged Provides tags since there is no need for them.
- Switch libconfig-devel and libstoragemgmt-devel BuildRequires by
  their pkgconfig modules counterparts.
- Add a Recommends tag for the btrfs module to offer support for
  the openSUSE's file system of choice by default.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Require specific libblockdev plugins in due udisks2's modules,
  following libblockdev's plugins split (bsc#1086447).
- Drop redundant libblockdev-devel BuildRequires: it is not needed
  once its pkgconfig module is already a requirement.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524657600">- Add missing libblockdev-loop Requires tag: it is needed by
  default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1547208000">- Update to version 2.7.8:
  + Fix string format vulnerability (CVE-2018-17336)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add explicit libblockdev-lvm-dbus-devel BuildRequires: Previously
  pulled in implicitly.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331201">- Update to version 2.8.1:
  + Mostly bugfixes.
- Changes from version 2.8.0:
  + Introduce a new VDO module that is built on top of
    libblockdev-vdo.
  + General bugfixes.
  + Support creating LUKS 2 encrypted devices and other
    LUKS-related enhancements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548849600">- Add libblockdev-vdo-devel BuildRequires: Build the new vdo
  module. Following this, add new vdo sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549972800">- Add more info to description of vdo.</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Generalize VDO description.
- Fix faulty grammar.</changelog>
  <changelog author="ro@suse.de" date="1553083200">- update to 2.8.2
  + migration from intltool to gettext, udisks no longer depends
    on gnome-common
  + added 'windows_names' as a default mount option for ntfs-3g
  + fixed an issue potentially leading to open filedescriptors
    exhaustion
- drop buildreq for intltool</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.8.3:
  + This release brings many memory leak fixes with similar work
    done in libblockdev-2.22. While libblockdev version requirement
    remains unchanged, it's strongly recommended to use both
    releases together to get full coverage of the fixes.
  + Other notable changes include:
  - Default and supported encryption types are now exposed on the
    org.freedesktop.UDisks2.Manager interface.
  - Minor org.freedesktop.UDisks2.Filesystem improvements related
    to updating properties upon method call return.
  - Various test fixes and improvements.
  - Updated translations.</changelog>
  <changelog author="thomas.blume@suse.com" date="1562673600">- don't call systemd uninstall macro for clean-mount-point@.service
  template (boo#1139996)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1573732800">- Update to version 2.8.4:
  + This udisks-2.8.4 release brings couple of bugfixes, docs and
    test fixes and translation updates. With ongoing focus on
    development towards udisks-2.9.0, this is just a small
    maintenance release.</changelog>
  <changelog author="milsav92@outlook.com" date="1599393600">- Update to version 2.9.1:
  + This is mostly a bugfix release, notable changes include:
  - active modules are now tracked in a daemon state file and
    are automatically reloaded on next startup in case of
    previous unclean daemon shutdown
  - further improvements in object property updates while
    handling method calls
  - zram module fixes:
    + compatibility improvements with existing zram generators
    and toolkits
    + the zram-setup@.service systemd unit has been renamed to
    udisks2-zram-setup@.service
    + related udev rules have been separated into
    90-udisks2-zram.rules
    + the zram.conf.d path is now configurable and defaults to
    /usr/lib/zram.conf.d
- Update to version 2.9.0:
  + This 2.9.0 release brings many changes to the daemon core,
    internal modularity and the libudisks2 library.
    No public API has been removed, there is a couple of
    deprecations however.
  + There's a major change in how and when D-Bus object properties
    are updated. As a general rule when a method call returns
    affected objects should now have their properties updated by
    that moment. This is an ongoing task and while majority of the
    daemon API has been covered, there are pending issues in some
    of the modules.
  + Configurable mount options is a new big feature for this
    release, allowing sysadmins to re-define default mount options
    for each filesystem type. Extensive documentation is available
    at http://storaged.org/doc/udisks2-api/latest/mount_options.html
  + Internal module API has been reworked, modules should now be
    enabled separately via the new EnableModule() call that also
    reports initialization failures.
    The old org.freedesktop.UDisks2.Manager.EnableModules() call
    has been deprecated.
  + Additional feature highlights:
  - building the daemon can now be disabled via configure switch,
    only libudisks2 will be built
  - removed the systemd mount cleanup service, mount state is now
    tracked separately for persistent and non-persistent mount
    points and cleanup of lingering persistent mount points is
    performed on daemon startup (e.g. on system boot)
  - new LVM-VDO integration, deprecated the standalone VDO module
  - added support for (un)locking BitLocker devices
  - libudisks2 now includes generated GDBus code for compiled-in
    modules, separate pkg-config files are provided as well</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with symlinks
  * mount options: Allow 'nosymfollow' mount option for unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent() out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- drop udisks2-Fix-memory-leaks.patch, udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream)</changelog>
  <changelog author="thomas.blume@suse.com" date="1652097600">- CVE-2021-3802: fix insecure defaults in user-accessible mount helpers
  (bsc#1190606)
  + add 0001-mount-options-Always-use-errors-remount-ro-for-ext-f.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1723118400">- fix double free inside the g_static_resource_fini() atexit handler
  (bsc#1228290)
  + add 0001-udiskslinuxmountoptions-Do-not-free-static-daemon-re.patch</changelog>
</package>
<package pkgid="022ccaca0e29f080de991171593084405258e1f795281cb2cae4d4ae16fe632b" name="libudisks2-0_lvm2" arch="aarch64">
  <version epoch="0" ver="2.9.2" rel="150400.3.6.2"/>
  <changelog author="jengelh@inai.de" date="1519905600">- Rectify grammar issues in summaries</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520337600">- Fix BuildRequires/Requires tags related to libblockdev and
  libatasmart dependencies.
- Drop storaged Provides tags since there is no need for them.
- Switch libconfig-devel and libstoragemgmt-devel BuildRequires by
  their pkgconfig modules counterparts.
- Add a Recommends tag for the btrfs module to offer support for
  the openSUSE's file system of choice by default.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Require specific libblockdev plugins in due udisks2's modules,
  following libblockdev's plugins split (bsc#1086447).
- Drop redundant libblockdev-devel BuildRequires: it is not needed
  once its pkgconfig module is already a requirement.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524657600">- Add missing libblockdev-loop Requires tag: it is needed by
  default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1547208000">- Update to version 2.7.8:
  + Fix string format vulnerability (CVE-2018-17336)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add explicit libblockdev-lvm-dbus-devel BuildRequires: Previously
  pulled in implicitly.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331201">- Update to version 2.8.1:
  + Mostly bugfixes.
- Changes from version 2.8.0:
  + Introduce a new VDO module that is built on top of
    libblockdev-vdo.
  + General bugfixes.
  + Support creating LUKS 2 encrypted devices and other
    LUKS-related enhancements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548849600">- Add libblockdev-vdo-devel BuildRequires: Build the new vdo
  module. Following this, add new vdo sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549972800">- Add more info to description of vdo.</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Generalize VDO description.
- Fix faulty grammar.</changelog>
  <changelog author="ro@suse.de" date="1553083200">- update to 2.8.2
  + migration from intltool to gettext, udisks no longer depends
    on gnome-common
  + added 'windows_names' as a default mount option for ntfs-3g
  + fixed an issue potentially leading to open filedescriptors
    exhaustion
- drop buildreq for intltool</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.8.3:
  + This release brings many memory leak fixes with similar work
    done in libblockdev-2.22. While libblockdev version requirement
    remains unchanged, it's strongly recommended to use both
    releases together to get full coverage of the fixes.
  + Other notable changes include:
  - Default and supported encryption types are now exposed on the
    org.freedesktop.UDisks2.Manager interface.
  - Minor org.freedesktop.UDisks2.Filesystem improvements related
    to updating properties upon method call return.
  - Various test fixes and improvements.
  - Updated translations.</changelog>
  <changelog author="thomas.blume@suse.com" date="1562673600">- don't call systemd uninstall macro for clean-mount-point@.service
  template (boo#1139996)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1573732800">- Update to version 2.8.4:
  + This udisks-2.8.4 release brings couple of bugfixes, docs and
    test fixes and translation updates. With ongoing focus on
    development towards udisks-2.9.0, this is just a small
    maintenance release.</changelog>
  <changelog author="milsav92@outlook.com" date="1599393600">- Update to version 2.9.1:
  + This is mostly a bugfix release, notable changes include:
  - active modules are now tracked in a daemon state file and
    are automatically reloaded on next startup in case of
    previous unclean daemon shutdown
  - further improvements in object property updates while
    handling method calls
  - zram module fixes:
    + compatibility improvements with existing zram generators
    and toolkits
    + the zram-setup@.service systemd unit has been renamed to
    udisks2-zram-setup@.service
    + related udev rules have been separated into
    90-udisks2-zram.rules
    + the zram.conf.d path is now configurable and defaults to
    /usr/lib/zram.conf.d
- Update to version 2.9.0:
  + This 2.9.0 release brings many changes to the daemon core,
    internal modularity and the libudisks2 library.
    No public API has been removed, there is a couple of
    deprecations however.
  + There's a major change in how and when D-Bus object properties
    are updated. As a general rule when a method call returns
    affected objects should now have their properties updated by
    that moment. This is an ongoing task and while majority of the
    daemon API has been covered, there are pending issues in some
    of the modules.
  + Configurable mount options is a new big feature for this
    release, allowing sysadmins to re-define default mount options
    for each filesystem type. Extensive documentation is available
    at http://storaged.org/doc/udisks2-api/latest/mount_options.html
  + Internal module API has been reworked, modules should now be
    enabled separately via the new EnableModule() call that also
    reports initialization failures.
    The old org.freedesktop.UDisks2.Manager.EnableModules() call
    has been deprecated.
  + Additional feature highlights:
  - building the daemon can now be disabled via configure switch,
    only libudisks2 will be built
  - removed the systemd mount cleanup service, mount state is now
    tracked separately for persistent and non-persistent mount
    points and cleanup of lingering persistent mount points is
    performed on daemon startup (e.g. on system boot)
  - new LVM-VDO integration, deprecated the standalone VDO module
  - added support for (un)locking BitLocker devices
  - libudisks2 now includes generated GDBus code for compiled-in
    modules, separate pkg-config files are provided as well</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with symlinks
  * mount options: Allow 'nosymfollow' mount option for unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent() out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- drop udisks2-Fix-memory-leaks.patch, udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream)</changelog>
  <changelog author="thomas.blume@suse.com" date="1652097600">- CVE-2021-3802: fix insecure defaults in user-accessible mount helpers
  (bsc#1190606)
  + add 0001-mount-options-Always-use-errors-remount-ro-for-ext-f.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1723118400">- fix double free inside the g_static_resource_fini() atexit handler
  (bsc#1228290)
  + add 0001-udiskslinuxmountoptions-Do-not-free-static-daemon-re.patch</changelog>
</package>
<package pkgid="77ac21aa2bdf0f8671e039a3a987c72ed46257e623f64aec3c1f63ea0149d49b" name="libudisks2-0_lvm2" arch="s390x">
  <version epoch="0" ver="2.9.2" rel="150400.3.6.2"/>
  <changelog author="jengelh@inai.de" date="1519905600">- Rectify grammar issues in summaries</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520337600">- Fix BuildRequires/Requires tags related to libblockdev and
  libatasmart dependencies.
- Drop storaged Provides tags since there is no need for them.
- Switch libconfig-devel and libstoragemgmt-devel BuildRequires by
  their pkgconfig modules counterparts.
- Add a Recommends tag for the btrfs module to offer support for
  the openSUSE's file system of choice by default.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Require specific libblockdev plugins in due udisks2's modules,
  following libblockdev's plugins split (bsc#1086447).
- Drop redundant libblockdev-devel BuildRequires: it is not needed
  once its pkgconfig module is already a requirement.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524657600">- Add missing libblockdev-loop Requires tag: it is needed by
  default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1547208000">- Update to version 2.7.8:
  + Fix string format vulnerability (CVE-2018-17336)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add explicit libblockdev-lvm-dbus-devel BuildRequires: Previously
  pulled in implicitly.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331201">- Update to version 2.8.1:
  + Mostly bugfixes.
- Changes from version 2.8.0:
  + Introduce a new VDO module that is built on top of
    libblockdev-vdo.
  + General bugfixes.
  + Support creating LUKS 2 encrypted devices and other
    LUKS-related enhancements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548849600">- Add libblockdev-vdo-devel BuildRequires: Build the new vdo
  module. Following this, add new vdo sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549972800">- Add more info to description of vdo.</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Generalize VDO description.
- Fix faulty grammar.</changelog>
  <changelog author="ro@suse.de" date="1553083200">- update to 2.8.2
  + migration from intltool to gettext, udisks no longer depends
    on gnome-common
  + added 'windows_names' as a default mount option for ntfs-3g
  + fixed an issue potentially leading to open filedescriptors
    exhaustion
- drop buildreq for intltool</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.8.3:
  + This release brings many memory leak fixes with similar work
    done in libblockdev-2.22. While libblockdev version requirement
    remains unchanged, it's strongly recommended to use both
    releases together to get full coverage of the fixes.
  + Other notable changes include:
  - Default and supported encryption types are now exposed on the
    org.freedesktop.UDisks2.Manager interface.
  - Minor org.freedesktop.UDisks2.Filesystem improvements related
    to updating properties upon method call return.
  - Various test fixes and improvements.
  - Updated translations.</changelog>
  <changelog author="thomas.blume@suse.com" date="1562673600">- don't call systemd uninstall macro for clean-mount-point@.service
  template (boo#1139996)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1573732800">- Update to version 2.8.4:
  + This udisks-2.8.4 release brings couple of bugfixes, docs and
    test fixes and translation updates. With ongoing focus on
    development towards udisks-2.9.0, this is just a small
    maintenance release.</changelog>
  <changelog author="milsav92@outlook.com" date="1599393600">- Update to version 2.9.1:
  + This is mostly a bugfix release, notable changes include:
  - active modules are now tracked in a daemon state file and
    are automatically reloaded on next startup in case of
    previous unclean daemon shutdown
  - further improvements in object property updates while
    handling method calls
  - zram module fixes:
    + compatibility improvements with existing zram generators
    and toolkits
    + the zram-setup@.service systemd unit has been renamed to
    udisks2-zram-setup@.service
    + related udev rules have been separated into
    90-udisks2-zram.rules
    + the zram.conf.d path is now configurable and defaults to
    /usr/lib/zram.conf.d
- Update to version 2.9.0:
  + This 2.9.0 release brings many changes to the daemon core,
    internal modularity and the libudisks2 library.
    No public API has been removed, there is a couple of
    deprecations however.
  + There's a major change in how and when D-Bus object properties
    are updated. As a general rule when a method call returns
    affected objects should now have their properties updated by
    that moment. This is an ongoing task and while majority of the
    daemon API has been covered, there are pending issues in some
    of the modules.
  + Configurable mount options is a new big feature for this
    release, allowing sysadmins to re-define default mount options
    for each filesystem type. Extensive documentation is available
    at http://storaged.org/doc/udisks2-api/latest/mount_options.html
  + Internal module API has been reworked, modules should now be
    enabled separately via the new EnableModule() call that also
    reports initialization failures.
    The old org.freedesktop.UDisks2.Manager.EnableModules() call
    has been deprecated.
  + Additional feature highlights:
  - building the daemon can now be disabled via configure switch,
    only libudisks2 will be built
  - removed the systemd mount cleanup service, mount state is now
    tracked separately for persistent and non-persistent mount
    points and cleanup of lingering persistent mount points is
    performed on daemon startup (e.g. on system boot)
  - new LVM-VDO integration, deprecated the standalone VDO module
  - added support for (un)locking BitLocker devices
  - libudisks2 now includes generated GDBus code for compiled-in
    modules, separate pkg-config files are provided as well</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with symlinks
  * mount options: Allow 'nosymfollow' mount option for unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent() out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- drop udisks2-Fix-memory-leaks.patch, udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream)</changelog>
  <changelog author="thomas.blume@suse.com" date="1652097600">- CVE-2021-3802: fix insecure defaults in user-accessible mount helpers
  (bsc#1190606)
  + add 0001-mount-options-Always-use-errors-remount-ro-for-ext-f.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1723118400">- fix double free inside the g_static_resource_fini() atexit handler
  (bsc#1228290)
  + add 0001-udiskslinuxmountoptions-Do-not-free-static-daemon-re.patch</changelog>
</package>
<package pkgid="e35267876c502aa87c0d0c4b508c726316482a62016c7c7609612f78556b8add" name="libudisks2-0_lvm2" arch="x86_64">
  <version epoch="0" ver="2.9.2" rel="150400.3.6.2"/>
  <changelog author="jengelh@inai.de" date="1519905600">- Rectify grammar issues in summaries</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520337600">- Fix BuildRequires/Requires tags related to libblockdev and
  libatasmart dependencies.
- Drop storaged Provides tags since there is no need for them.
- Switch libconfig-devel and libstoragemgmt-devel BuildRequires by
  their pkgconfig modules counterparts.
- Add a Recommends tag for the btrfs module to offer support for
  the openSUSE's file system of choice by default.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Require specific libblockdev plugins in due udisks2's modules,
  following libblockdev's plugins split (bsc#1086447).
- Drop redundant libblockdev-devel BuildRequires: it is not needed
  once its pkgconfig module is already a requirement.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524657600">- Add missing libblockdev-loop Requires tag: it is needed by
  default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1547208000">- Update to version 2.7.8:
  + Fix string format vulnerability (CVE-2018-17336)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add explicit libblockdev-lvm-dbus-devel BuildRequires: Previously
  pulled in implicitly.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331201">- Update to version 2.8.1:
  + Mostly bugfixes.
- Changes from version 2.8.0:
  + Introduce a new VDO module that is built on top of
    libblockdev-vdo.
  + General bugfixes.
  + Support creating LUKS 2 encrypted devices and other
    LUKS-related enhancements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548849600">- Add libblockdev-vdo-devel BuildRequires: Build the new vdo
  module. Following this, add new vdo sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549972800">- Add more info to description of vdo.</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Generalize VDO description.
- Fix faulty grammar.</changelog>
  <changelog author="ro@suse.de" date="1553083200">- update to 2.8.2
  + migration from intltool to gettext, udisks no longer depends
    on gnome-common
  + added 'windows_names' as a default mount option for ntfs-3g
  + fixed an issue potentially leading to open filedescriptors
    exhaustion
- drop buildreq for intltool</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.8.3:
  + This release brings many memory leak fixes with similar work
    done in libblockdev-2.22. While libblockdev version requirement
    remains unchanged, it's strongly recommended to use both
    releases together to get full coverage of the fixes.
  + Other notable changes include:
  - Default and supported encryption types are now exposed on the
    org.freedesktop.UDisks2.Manager interface.
  - Minor org.freedesktop.UDisks2.Filesystem improvements related
    to updating properties upon method call return.
  - Various test fixes and improvements.
  - Updated translations.</changelog>
  <changelog author="thomas.blume@suse.com" date="1562673600">- don't call systemd uninstall macro for clean-mount-point@.service
  template (boo#1139996)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1573732800">- Update to version 2.8.4:
  + This udisks-2.8.4 release brings couple of bugfixes, docs and
    test fixes and translation updates. With ongoing focus on
    development towards udisks-2.9.0, this is just a small
    maintenance release.</changelog>
  <changelog author="milsav92@outlook.com" date="1599393600">- Update to version 2.9.1:
  + This is mostly a bugfix release, notable changes include:
  - active modules are now tracked in a daemon state file and
    are automatically reloaded on next startup in case of
    previous unclean daemon shutdown
  - further improvements in object property updates while
    handling method calls
  - zram module fixes:
    + compatibility improvements with existing zram generators
    and toolkits
    + the zram-setup@.service systemd unit has been renamed to
    udisks2-zram-setup@.service
    + related udev rules have been separated into
    90-udisks2-zram.rules
    + the zram.conf.d path is now configurable and defaults to
    /usr/lib/zram.conf.d
- Update to version 2.9.0:
  + This 2.9.0 release brings many changes to the daemon core,
    internal modularity and the libudisks2 library.
    No public API has been removed, there is a couple of
    deprecations however.
  + There's a major change in how and when D-Bus object properties
    are updated. As a general rule when a method call returns
    affected objects should now have their properties updated by
    that moment. This is an ongoing task and while majority of the
    daemon API has been covered, there are pending issues in some
    of the modules.
  + Configurable mount options is a new big feature for this
    release, allowing sysadmins to re-define default mount options
    for each filesystem type. Extensive documentation is available
    at http://storaged.org/doc/udisks2-api/latest/mount_options.html
  + Internal module API has been reworked, modules should now be
    enabled separately via the new EnableModule() call that also
    reports initialization failures.
    The old org.freedesktop.UDisks2.Manager.EnableModules() call
    has been deprecated.
  + Additional feature highlights:
  - building the daemon can now be disabled via configure switch,
    only libudisks2 will be built
  - removed the systemd mount cleanup service, mount state is now
    tracked separately for persistent and non-persistent mount
    points and cleanup of lingering persistent mount points is
    performed on daemon startup (e.g. on system boot)
  - new LVM-VDO integration, deprecated the standalone VDO module
  - added support for (un)locking BitLocker devices
  - libudisks2 now includes generated GDBus code for compiled-in
    modules, separate pkg-config files are provided as well</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with symlinks
  * mount options: Allow 'nosymfollow' mount option for unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent() out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- drop udisks2-Fix-memory-leaks.patch, udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream)</changelog>
  <changelog author="thomas.blume@suse.com" date="1652097600">- CVE-2021-3802: fix insecure defaults in user-accessible mount helpers
  (bsc#1190606)
  + add 0001-mount-options-Always-use-errors-remount-ro-for-ext-f.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1723118400">- fix double free inside the g_static_resource_fini() atexit handler
  (bsc#1228290)
  + add 0001-udiskslinuxmountoptions-Do-not-free-static-daemon-re.patch</changelog>
</package>
<package pkgid="e0f90332a2db2a991617e80c11da42d5ce8e45d2e747a9446c8446dfd75fe995" name="libuuid1" arch="aarch64">
  <version epoch="0" ver="2.37.4" rel="150500.9.11.1"/>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-more-ARM-cores-1.patch,
  util-linux-lscpu-add-more-ARM-cores-2.patch,
  util-linux-lscpu-add-more-ARM-cores-3.patch,
  util-linux-lscpu-add-more-ARM-cores-4.patch,
  util-linux-lscpu-add-more-ARM-cores-5.patch,
  util-linux-lscpu-add-more-ARM-cores-6.patch).</changelog>
</package>
<package pkgid="a8e036f8fdb80d88d45d5fa2bdc46326691cc2a5ba296e21176150ed44f12956" name="libuuid1" arch="s390x">
  <version epoch="0" ver="2.37.4" rel="150500.9.11.1"/>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-more-ARM-cores-1.patch,
  util-linux-lscpu-add-more-ARM-cores-2.patch,
  util-linux-lscpu-add-more-ARM-cores-3.patch,
  util-linux-lscpu-add-more-ARM-cores-4.patch,
  util-linux-lscpu-add-more-ARM-cores-5.patch,
  util-linux-lscpu-add-more-ARM-cores-6.patch).</changelog>
</package>
<package pkgid="51b2f6fd9c615988669838884460f0d6e2d6092b1e94f320c50ac2c925564847" name="libuuid1" arch="x86_64">
  <version epoch="0" ver="2.37.4" rel="150500.9.11.1"/>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-more-ARM-cores-1.patch,
  util-linux-lscpu-add-more-ARM-cores-2.patch,
  util-linux-lscpu-add-more-ARM-cores-3.patch,
  util-linux-lscpu-add-more-ARM-cores-4.patch,
  util-linux-lscpu-add-more-ARM-cores-5.patch,
  util-linux-lscpu-add-more-ARM-cores-6.patch).</changelog>
</package>
<package pkgid="51f97a5fb098689f85d6349a40be04a2130223f51e1cc0e125222871843eb381" name="libuuid1" arch="aarch64">
  <version epoch="0" ver="2.37.4" rel="150500.9.14.2"/>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-more-ARM-cores-1.patch,
  util-linux-lscpu-add-more-ARM-cores-2.patch,
  util-linux-lscpu-add-more-ARM-cores-3.patch,
  util-linux-lscpu-add-more-ARM-cores-4.patch,
  util-linux-lscpu-add-more-ARM-cores-5.patch,
  util-linux-lscpu-add-more-ARM-cores-6.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
</package>
<package pkgid="72709dd34f1c20220aaeac3e1cf5a69bed5fd85cd001a52ddd9942c61f90a718" name="libuuid1" arch="s390x">
  <version epoch="0" ver="2.37.4" rel="150500.9.14.2"/>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-more-ARM-cores-1.patch,
  util-linux-lscpu-add-more-ARM-cores-2.patch,
  util-linux-lscpu-add-more-ARM-cores-3.patch,
  util-linux-lscpu-add-more-ARM-cores-4.patch,
  util-linux-lscpu-add-more-ARM-cores-5.patch,
  util-linux-lscpu-add-more-ARM-cores-6.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
</package>
<package pkgid="c18e8d84074bbf504f76e03701adab63a2adb760905a19ec35520d9b466f2393" name="libuuid1" arch="x86_64">
  <version epoch="0" ver="2.37.4" rel="150500.9.14.2"/>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-more-ARM-cores-1.patch,
  util-linux-lscpu-add-more-ARM-cores-2.patch,
  util-linux-lscpu-add-more-ARM-cores-3.patch,
  util-linux-lscpu-add-more-ARM-cores-4.patch,
  util-linux-lscpu-add-more-ARM-cores-5.patch,
  util-linux-lscpu-add-more-ARM-cores-6.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
</package>
<package pkgid="511d6ab771e3b8388a257b8ada56454d5af08a63027fa5dafd7fd07182b72490" name="libuuid1" arch="aarch64">
  <version epoch="0" ver="2.37.4" rel="150500.9.17.2"/>
  <changelog author="sbrabec@suse.com" date="1646308800">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-more-ARM-cores-1.patch,
  util-linux-lscpu-add-more-ARM-cores-2.patch,
  util-linux-lscpu-add-more-ARM-cores-3.patch,
  util-linux-lscpu-add-more-ARM-cores-4.patch,
  util-linux-lscpu-add-more-ARM-cores-5.patch,
  util-linux-lscpu-add-more-ARM-cores-6.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1725364800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).</changelog>
</package>
<package pkgid="347f0747dc57622e4a104c00dcb03c153605c765e0ed8a3805a132c0e582f1ed" name="libuuid1" arch="s390x">
  <version epoch="0" ver="2.37.4" rel="150500.9.17.2"/>
  <changelog author="sbrabec@suse.com" date="1646308800">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-more-ARM-cores-1.patch,
  util-linux-lscpu-add-more-ARM-cores-2.patch,
  util-linux-lscpu-add-more-ARM-cores-3.patch,
  util-linux-lscpu-add-more-ARM-cores-4.patch,
  util-linux-lscpu-add-more-ARM-cores-5.patch,
  util-linux-lscpu-add-more-ARM-cores-6.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1725364800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).</changelog>
</package>
<package pkgid="23bc9d19b4b35db2d8653b0d63d75af67ad2143299cc6d833255e5c8ce310e5b" name="libuuid1" arch="x86_64">
  <version epoch="0" ver="2.37.4" rel="150500.9.17.2"/>
  <changelog author="sbrabec@suse.com" date="1646308800">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-more-ARM-cores-1.patch,
  util-linux-lscpu-add-more-ARM-cores-2.patch,
  util-linux-lscpu-add-more-ARM-cores-3.patch,
  util-linux-lscpu-add-more-ARM-cores-4.patch,
  util-linux-lscpu-add-more-ARM-cores-5.patch,
  util-linux-lscpu-add-more-ARM-cores-6.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1725364800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).</changelog>
</package>
<package pkgid="98aa6eccc5f504e14786d2ee4213820a60b3f699b25e59ab45e2d034dea88958" name="libuuid1" arch="aarch64">
  <version epoch="0" ver="2.37.4" rel="150500.9.3.1"/>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
</package>
<package pkgid="a45aca585535e2ddb4bcc36e94a7c19fa4622c2c0d35a728c790c1e39d5658d8" name="libuuid1" arch="s390x">
  <version epoch="0" ver="2.37.4" rel="150500.9.3.1"/>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
</package>
<package pkgid="670c9a66b2fbf62490997ceabcf754c71e845b679f7c749ddd8e03d16d3114af" name="libuuid1" arch="x86_64">
  <version epoch="0" ver="2.37.4" rel="150500.9.3.1"/>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
</package>
<package pkgid="57227fc872b4128d53cd19e3ef2d11590e4f8b4eb8b09b40fc20b6faf0a4a642" name="libuuid1" arch="aarch64">
  <version epoch="0" ver="2.37.4" rel="150500.9.6.1"/>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
</package>
<package pkgid="e3992f6840f7a56ed9d4696c44fcfc79483cb9c3a85f781a5b0f054e1c2b6046" name="libuuid1" arch="s390x">
  <version epoch="0" ver="2.37.4" rel="150500.9.6.1"/>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
</package>
<package pkgid="0a116b9064193603a61d5e04b86aed01b4b83f4b2424a9b35e891039ecfc2ced" name="libuuid1" arch="x86_64">
  <version epoch="0" ver="2.37.4" rel="150500.9.6.1"/>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588801">- Update to version 2.37.4 (PED-1869):
  * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
    SUSE is not affected (bsc#1196241).
  * CVE-2021-3996 (bsc#1194976, obsoletes
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
    Improper UID check in libmount allows an unprivileged user to unmount FUSE
    filesystems of users with similar UID.
  * CVE-2021-3995 (bsc#1194976, obsoletes
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
    This issue is related to parsing the /proc/self/mountinfo file allows an
    unprivileged user to unmount other user's filesystems that are either
    world-writable themselves or mounted in a world-writable directory.
- linux-fs.patch: Fix conflict between &lt;linux/fs.h&gt; and &lt;sys/mount.h&gt;</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="david.anes@suse.com" date="1672747200">- Disable broken test in IBS (builds fine locally) (bsc#1206740)</changelog>
  <changelog author="pgajdos@suse.com" date="1674561600">- added patches [bsc#1197437]
  fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
  + util-linux-flock-limitations.patch</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
</package>
<package pkgid="5f3d3812427d2b83e1774208ad43acd081dfd047f8a0ffcf15c03fcc30719bb9" name="libvirt" arch="src">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="59792bb992f2c2ab64bba729eea1e85ef44bb5dee14d1f7d12796c75f8531848" name="libvirt" arch="src">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="e6d4363fc5b662091b6c6c61b5ab978192cae0500788398265b7517a38be1137" name="libvirt-client" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="085400203146d9b49e3f9846cbeda2fff9422dbeeacfc53fb399b8cde63de20f" name="libvirt-client" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="951c0cced2655145cf588c17a4228a4c3f4f634fb5eb4c74099e15ebf5883f4c" name="libvirt-client" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="bfe5dbbe0fe462c85a4116e953cae38773c92650903af529ec868169caefe2f8" name="libvirt-client" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="7c6412df3d69b2523e7bddd88fa2212bc0c579c4776d0641d8d19f159fee5daf" name="libvirt-client" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="6cfabd451c30e81061ce5e814b96fd42c71c32fea677c0093ba7c2a88c762ab3" name="libvirt-client" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="4f16e633d730b6b13b6e445b21847e1f7c5a9972af476f56c63e8a7a1666831e" name="libvirt-daemon" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="c3375c44532f8a7c72755bbd816d0591270efefee969f22b1fd6c84f5e135c7f" name="libvirt-daemon" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="563e1e710296a688490d69e6d96b054546144cc2ba29d0be69d8bec6ed00cb19" name="libvirt-daemon" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="8ece7440e2a8c2320b78e7476285015c5b0da1f24333bf16f5c09b71c67729b1" name="libvirt-daemon" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="2e7aa2a6dacd22a8f9e1182ef8962dae352ed19bbff0724ba8fb9bb13cd80b02" name="libvirt-daemon" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="943bb5221452f672ca5afa485508756498fef62f3ad20333bdb096e7edd5ba17" name="libvirt-daemon" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="159b167e0a36dd03bbf00796d6477f6abeb3769bdd23cef0cbfaf8561686a0c4" name="libvirt-daemon-driver-interface" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="565925d5482e6d120256e9f279f3aa864146b55260b5857c775cec432d5079c7" name="libvirt-daemon-driver-interface" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="81ed3053a76339445c3132a56981e31bbf406c60e40ff70d9437353cedb45d51" name="libvirt-daemon-driver-interface" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="33bd0fa6dea9c0756f5743ac2106a0888406f980541847b489a4154a64e06e34" name="libvirt-daemon-driver-interface" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="3dd30f2394d7bb5fe6f7940d5a20c001c68ba8a9c980bf5dc4bceca68fae5c40" name="libvirt-daemon-driver-interface" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="f7c764c11e9e80fa8a0a1070b78c26ef6c37ac277a90e5083dd6ebabfcd8ab06" name="libvirt-daemon-driver-interface" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="296ce9917bc3627b212ca9d4f965b38123777a6a9cd217588eaf69bca87af297" name="libvirt-daemon-driver-network" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="d7dd3ac59044b4aaabb62899a58f766af618ef619d13f03323544260573aaefb" name="libvirt-daemon-driver-network" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="9da68e060aeaee2274ff6a6eca052b73445db1bfeaaee1a9d5d87dcdbdabb2be" name="libvirt-daemon-driver-network" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="5580217c94c35a554630621ab879cafef7da4bfb2fc4d89d054b7956e77f372e" name="libvirt-daemon-driver-network" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="a0c28df202764ba7f97a26d33dc1c653e4b99ce07b513dbe0aa7134fa726deaf" name="libvirt-daemon-driver-network" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="00d3119ebf3c5ee17b652ae669b69b393681ddc12f77fa949a297eeefda58264" name="libvirt-daemon-driver-network" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="c45449c098801905a05d7d021ed3265033d4a93f303a7764c4d8eb42b044182b" name="libvirt-daemon-driver-nodedev" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="4ad98ac09433a04b0750117e7507acc1afca559f91a0eb518bda9f8b2f4c6939" name="libvirt-daemon-driver-nodedev" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="eae5d20d148228e28cba04be60f5c33d0a83b324934ef27a2908f853b5c0f7cc" name="libvirt-daemon-driver-nodedev" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="62540ce4845731a34fc0d4b23bf0e3875415558194df429581e94285ae83f198" name="libvirt-daemon-driver-nodedev" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="0b0951e6c3c9dd07bde50af3600fbd74e261bc84c6ecaf6b9d69f071df6570e1" name="libvirt-daemon-driver-nodedev" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="512af4525e6293bcab8de0301bd105ac26d7463fbca8fd2de651ce1fdf036788" name="libvirt-daemon-driver-nodedev" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="fe537f7aa1d85c7ef69270279d3669ec666c9eb4a3fbb2c6fe54632b507b9042" name="libvirt-daemon-driver-nwfilter" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="3ff86f3a292cbb091813f5f08f877e735653bdb0ce1ce5053194d4fc9ba0c43f" name="libvirt-daemon-driver-nwfilter" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="ceec131315b6b74f004e718ef383b51538cab5adadaa1242dce858b057a9d5e8" name="libvirt-daemon-driver-nwfilter" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="ef4f04d6e7a429c6f4b7d99b210bac7a99fe6d4a35a35e24026ededf876d77c9" name="libvirt-daemon-driver-nwfilter" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="55acb653db4f3325d9977ea05241598b274ecad4648358eb6af42a16aa0698d8" name="libvirt-daemon-driver-nwfilter" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="7125c866feeeb31c1fb282e185aa1bc8643c28ef804da5257cc1363a71597044" name="libvirt-daemon-driver-nwfilter" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="f14b873e40769c6700e1ffe49bfe940f6f58e3139a3857978bfaa305343e6cd0" name="libvirt-daemon-driver-qemu" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="c6008d1a53db2f23eec1a2a999f5fcb082e90ec9da1d24d0c1223cf1d4f15cf6" name="libvirt-daemon-driver-qemu" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="ab0cc820bdda0fcdef2aff880245387d66e72368d1b25e45452b9e474790dbf0" name="libvirt-daemon-driver-qemu" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="9c270fcac40b5b1b814c305d7fc958b606f8b5abefe43fb666b86e1414d79ea7" name="libvirt-daemon-driver-qemu" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="26a793a29934cd4aa08e61b1174f26034060258869de173044bb8a681902b026" name="libvirt-daemon-driver-qemu" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="a626f442c3c6a8812356ea008c1b248e3af08ce56f6c56b4dd8c24156ff29a82" name="libvirt-daemon-driver-qemu" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="ac1fa5a03e8a340147eaaab6b60252c7ca612e9a5e8abecbeb4773fb597cb326" name="libvirt-daemon-driver-secret" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="5888f7bae902851346dbe696f0287843fd4d128919ad850ad826cfc21f1e42ad" name="libvirt-daemon-driver-secret" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="238cc9d13540d2226864a1a76a0f7475bb1f2e3a1e072eb9bc8b7a26e625e286" name="libvirt-daemon-driver-secret" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="a1106455c1c5503ae273d0f6ed1f511b65280ad6c4241f509527e33984a59099" name="libvirt-daemon-driver-secret" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="0d31c3f7afc95eb8034745ffe40a6227acdc990342a6aedcb1ea1f0d6fa56c08" name="libvirt-daemon-driver-secret" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="ae21ded629448b7f96ed51631d3fadd31bb5e282f8872f4818ef26e7ca82b392" name="libvirt-daemon-driver-secret" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="47d37831eaa2e7eb77340ef71019a45ef8c922a4b691b11ed0698898e4c82fe1" name="libvirt-daemon-driver-storage" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="cf4dcb7de56e634d5e71a494345729971c489f8c3b716719c5382cbf204ad9ca" name="libvirt-daemon-driver-storage" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="c3ccdadfcf9a93a3c8fca9f1314e9d56095e22c41367f5c120f447180cf45324" name="libvirt-daemon-driver-storage" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="c7b966f44b138f4b8f8d58ca6e128d686dab2938e803de77a7765f3100c40b37" name="libvirt-daemon-driver-storage" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="de39318f682ca7b4ba3e9e5a4f01916db2f41020e27c41acb33762fab33584e3" name="libvirt-daemon-driver-storage" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="e53edd878e0f58b42bdccdaf2faab20a8646466b4e6a1f9b4ad1fc3767468704" name="libvirt-daemon-driver-storage" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="4252adaffd530de54407dc53b36c8fe6b6d37197218ccc1ac406e5c53db0dc70" name="libvirt-daemon-driver-storage-core" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="5f66c62f7c1e2623a8f4be441c8b6269cead04c98186de79c823da74a8cbf1ef" name="libvirt-daemon-driver-storage-core" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="7426d6e4c72ab5c8ea9ebf5fec7849376b2b9342a81a380bb873a1675f275b67" name="libvirt-daemon-driver-storage-core" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="81b465e89cbf96537561c0b300fe6afe33f6afb0d14a81d6212f96acb63b00bc" name="libvirt-daemon-driver-storage-core" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="e565631402321b060fbdc0335343f9fd2d5a4feab93763a154ec45f1fb0d24d7" name="libvirt-daemon-driver-storage-core" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="33fdb350a7622dc8ba213d990830c35d294449d2f1bda3a251c015bc2d7a90ba" name="libvirt-daemon-driver-storage-core" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="de8b6fb479abce7b42dd374a1f304b73bb3c364a194665a299083e62b6da109d" name="libvirt-daemon-driver-storage-disk" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="1474da279363221a7ab312cd65d57439b67cbbe0083ae1215f1d79d424e04a65" name="libvirt-daemon-driver-storage-disk" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="09a158849d36be93c1ee48923c03911b53e783c87c4a0dd19079a15acea2f090" name="libvirt-daemon-driver-storage-disk" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="ecc0b9115714e3deecd5cc4ff44cc024d445b420e6477a355951cab64d293fd2" name="libvirt-daemon-driver-storage-disk" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="5aed61152b0c89014b633e2ca3430dfe65edba57aba5bc025caca4349239495f" name="libvirt-daemon-driver-storage-disk" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="ee31d812dad40611d044ab43335dc6b6ccf63f2b4021babcc667f50fcc4fe256" name="libvirt-daemon-driver-storage-disk" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="e270a145e8689bb6c5a717efa0d6042f71c12ae8298b30297d78bfa9a9ab635e" name="libvirt-daemon-driver-storage-iscsi" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="de7b38f4ecd5c878a64c888922ececbfca59dfa8e2c67e5e86e76bef96f47ee0" name="libvirt-daemon-driver-storage-iscsi" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="2abd9a37cbcf61f78faa165c032d9cd1b6a36ac860e9d8ba13508e705dbf453e" name="libvirt-daemon-driver-storage-iscsi" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="42a364954f3584f72c3f216e540180176e5c9605f7bac6287307a9d256a1f1bf" name="libvirt-daemon-driver-storage-iscsi" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="fe5fa1da346eda7823e377d69f49c80e5749126706a8287e4692b6e375977fe8" name="libvirt-daemon-driver-storage-iscsi" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="a234342bce38c7cd8bafa4609b99de46e0dbb65ff14b6ce1f476f01a65babf2b" name="libvirt-daemon-driver-storage-iscsi" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="eded91dc6a921f83011f4737bdda8a378992563a7d0e7c0b222eff3a5d32a328" name="libvirt-daemon-driver-storage-iscsi-direct" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="af4b12a8993ffadb41c6d99dad5e2ff3ea15489e6560c694c3635cda3e0f1708" name="libvirt-daemon-driver-storage-iscsi-direct" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="824b375040b8fc1e386ba0f882aa5b2ea7a32f1d5c77621e8e5d73676b1f84df" name="libvirt-daemon-driver-storage-iscsi-direct" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="937109ccd7e7d6b103c281aa234abcf781b73a7ae97b3e723c27cf25c83b0567" name="libvirt-daemon-driver-storage-iscsi-direct" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="43ee6bf5ecaf55d9d9eca8d659d086ad71ca21573b4a1684215fce93c4437992" name="libvirt-daemon-driver-storage-iscsi-direct" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="8ed6bb50f988c3eaaf9af5e85cb3593b384a7b816f3af6675a6439b5d84cd833" name="libvirt-daemon-driver-storage-iscsi-direct" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="84620103a42efdaf54ed20594d894e68cf7acb2477d87433c52d0f57057a7db7" name="libvirt-daemon-driver-storage-logical" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="06735085977183a386460eaad06a68f97e0bd829bd50a9f7dbdd8be798f14554" name="libvirt-daemon-driver-storage-logical" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="8574e9f093ec03cb860e39118bff2888cae46a81fd64f55feb98d103bfd77030" name="libvirt-daemon-driver-storage-logical" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="2d5ca74130015df7b54a43eba95e011c5f96f61d0ca8a19a22cb9cdc378c7ff4" name="libvirt-daemon-driver-storage-logical" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="8037922519b6a2f6b90febd1be53c1285349436954e525ecbb838c9bbd124133" name="libvirt-daemon-driver-storage-logical" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="3a12d42bd4254f656d9b297bc76d5f63a7d33cb039387073fc30ca5832765ac7" name="libvirt-daemon-driver-storage-logical" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="a9f24877207b41cbd73a0a89ff32c0f33ce56a296d3e6910f6aa996a5a8bcbc0" name="libvirt-daemon-driver-storage-mpath" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="9c27ee14932de7600181c7f1706450e4ee510de3de32ae4320ddb5d827f884fb" name="libvirt-daemon-driver-storage-mpath" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="62fdf90af85cb65729320d0081d3c9092b3a7257e269d53a45e3455415de19d9" name="libvirt-daemon-driver-storage-mpath" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="daae5484755eece5bf97a73d15c858eb4b7329816c7bb2ab5f212e646d36d777" name="libvirt-daemon-driver-storage-mpath" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="cb47f2d3fa9e374344f187d7ec7036650b7e0017ca467021b30387943b878304" name="libvirt-daemon-driver-storage-mpath" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="443a119a8e1ff23646d384cb9d53cb2d6bc0f61a156e6630be8cd748171df19c" name="libvirt-daemon-driver-storage-mpath" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="c18cd4376b9d0fc21340ecf5d2f921bc155ff994955530e0420e6ebc0ff0f35c" name="libvirt-daemon-driver-storage-rbd" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="bc781fa790e8e6a46951c2daff642df27bb809b2d71a990f50f8373fa7b00bbe" name="libvirt-daemon-driver-storage-rbd" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="c395029d33d1f30e6a1bb30e4100de3226a35314b724f2af2ae244a12cccbb78" name="libvirt-daemon-driver-storage-rbd" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="a2064949dd60bc0cdeab75bdd9b8377c6ef7c64402789d542e2485e0f478db9a" name="libvirt-daemon-driver-storage-rbd" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="28c89f4431a72fa27fa0e282ff84d588df7ac840a0007be2599e2baafc0baf61" name="libvirt-daemon-driver-storage-scsi" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="fceb2f4cc2b17a190a60947ddcc847ec9797b7bf9a6cc59442bb86d3921e4327" name="libvirt-daemon-driver-storage-scsi" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="7a1eabefa8772f15e3072bdf7e203b654821365580c917176633a63dccc6381e" name="libvirt-daemon-driver-storage-scsi" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="0652ea90643fd11e464bbce1ffccb2d284d89b89edc1c6f68abae7aad48f59c6" name="libvirt-daemon-driver-storage-scsi" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="53358bf15ff584b9a64af8f105a91eddb2fe777243dd80cd945c01e191ae956e" name="libvirt-daemon-driver-storage-scsi" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="c02c83ea320c84348bc6067ccf61bca99bebc1a297805886e295204e1634d404" name="libvirt-daemon-driver-storage-scsi" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="96bcffbff66a163fa2be467567721889f9ff39c71d554ce52ea3306ea34c81a3" name="libvirt-daemon-qemu" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="9438bed5b94c3f5f5e845e6bd467416a71551385258cc52db266e84507a65eaf" name="libvirt-daemon-qemu" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="d49764c3a3a5103bda8bd3fbafee782aef02708356b975226bcbf2c4b7412236" name="libvirt-daemon-qemu" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="be124212925763075238d8b04cf0988076ee5567a9ce4057dde08951707127a3" name="libvirt-daemon-qemu" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="ac608c71755127605663d4ac2d52fa251fd561e7fcd79c4227700ac41fe9803d" name="libvirt-daemon-qemu" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="9d42c3cacc5970f0733693779278b0d3cb1d4da72cb152f3dcd8cc6490bec538" name="libvirt-daemon-qemu" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="4971ee8f19b907c43ec0addab194b3e1efaa3d95125f50ebdab18cde2b6cc68e" name="libvirt-libs" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="de78a39c2418f84f4596dd3dc13e7f22d8853dae2c6c61a93017b487bf382a06" name="libvirt-libs" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="0cc2af259f573e57a57507485d0feb6f8b3eae942abac74badc53efad09930c3" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.20.1"/>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
</package>
<package pkgid="e47b9c8a652e9af29cbfd176d2b35c56003f68cb9a708e770f7ccec0cf186310" name="libvirt-libs" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="f360f7328eb19e2715ba692e94f5894edf5096765fdcab406a2588fea1771403" name="libvirt-libs" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="2ff0ab390a2ea7e29a81beb1391ab21c9d1e932e0ba9f5aff2409a9e1c6efa9f" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.23.1"/>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689336000">- libxl: Improve handling of errors across migration phases
  f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
  b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch
  bsc#1213186
  spec: Don't replace /etc/apparmor.d/&lt;profile&gt; on package upgrade
  spec: Stop packaging empty /etc/apparmor.d/local/* files
  bsc#1211472</changelog>
  <changelog author="jfehlig@suse.com" date="1689854400">- CVE-2023-3750: storage: Fix returning of locked objects from
  'virStoragePoolObjListSearch'
  bsc#1213447
- Move to a more git-centric packaging workflow using tar_scm
  instead of download_files
  - New source README.packaging.txt
  - Drop now unused signature file and libvirt.keyring
  - Patches dropped and now maintained in git
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
    c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
    697c16e3-qemu_process-better-debug-message.patch,
    5155ab4b-qemu_namespace-nested-mounts-when-umount.patch,
    4959490e-support-SUSE-edk2-firmware-paths.patch,
    0f350a4d-virt-qemu-sev-validate-remote-detect.patch,
    bf3be5b7-libxl-Support-custom-firmware-path.patch,
    705525cb-libxl-Support-custom-firmware-path-conversion.patch,
    15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch,
    86cfe93e-qemuProcessRefreshDisks-fix-info.patch,
    6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch,
    9b743ee1-apparmor-support-local-profile-customizations.patch,
    f3ed5c27-libxl-dont-resume-domain-on-canceled-mig.patch,
    b9eeeebd-libxl-support-MIGRATE_CHANGE_PROTECTION.patch,
    libxl-dom-reset.patch,
    network-don-t-use-dhcp-authoritative-on-static-netwo.patch,
    0001-util-Don-t-spawn-pkttyagent-when-stdin-is-not-a-tty.patch,
    libvirt-power8-models.patch,
    ppc64le-canonical-name.patch,
    libxl-set-migration-constraints.patch,
    libxl-set-cach-mode.patch,
    0001-libxl-add-support-for-BlockResize-API.patch,
    suse-libvirtd-disable-tls.patch,
    suse-libvirt-guests-service.patch,
    suse-qemu-conf.patch,
    suse-qemu-ovmf-paths.patch,
    libxl-support-block-script.patch,
    qemu-apparmor-screenshot.patch,
    libvirt-suse-netcontrol.patch,
    lxc-wait-after-eth-del.patch,
    suse-libxl-disable-autoballoon.patch,
    suse-xen-ovmf-paths.patch,
    virt-create-rootfs.patch,
    suse-fix-lxc-container-init.patch
- Drop old, unused SUSEfirewall2 config file
  libvirtd-relocation-server.fw
- spec: Remove unneeded use of ldconfig
- spec: Remove libvirt_sysconfig_{pre,posttrans} macros. They are
  noops on SUSE distros since files in /etc/sysconfig/ are not
  owned by rpm.</changelog>
  <changelog author="jfehlig@suse.com" date="1690286400">- spec: Build library with support for modular daemons
  bsc#1213352</changelog>
  <changelog author="jfehlig@suse.com" date="1696248000">- libxl: Fix connection to modular network daemon
  bsc#1214223</changelog>
  <changelog author="jfehlig@suse.com" date="1706788800">- conf: Remove some firmware validation checks
  bsc#1216980</changelog>
  <changelog author="jfehlig@suse.com" date="1709553600">- qemu: domain: Fix logic when tainting domain
  bsc#1220512</changelog>
  <changelog author="jfehlig@suse.com" date="1710244800">- Fix off-by-one error in udevListInterfacesByStatus
  CVE-2024-1441
  bsc#1221237</changelog>
  <changelog author="jfehlig@suse.com" date="1710504000">- interface: fix udev_device_get_sysattr_value return value check
  CVE-2024-2496
  bsc#1221468</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1712664000">- security: Ensure file exists before attempting to restore label
  bsc#1220714</changelog>
  <changelog author="jfehlig@suse.com" date="1716897600">- rpc: Don't warn about "max_client_requests" in single-threaded
  daemons
  boo#1224327</changelog>
</package>
<package pkgid="186b8689f8d2e24fb4d1d91c149a37954771a2605cb96ffae4472882563476f2" name="libvmtools0" arch="x86_64">
  <version epoch="0" ver="12.3.0" rel="150300.40.1"/>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add open-vm-tools-glib-2.67.patch: Fix build with glib 2.67.
  Patch has been borrowed by Fedora, upstream is still busy working
  out a patch (I'd not be surprised if they end up merging this
  finally.
  https://github.com/vmware/open-vm-tools/issues/500</changelog>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- limit to protobuf &lt; 22 for now until build failures have been fixed</changelog>
  <changelog author="kallan@suse.com" date="1693224000">- Fix (bsc#1214566) - (CVE-2023-20900) - VUL-0: CVE-2023-20900:
  open-vm-tools: SAML token signature bypass vulnerability
  + Add patch: CVE-20230-20900.patch</changelog>
  <changelog author="kallan@suse.com" date="1694001600">- Update to 12.3.0 (build 22234872) (boo#1214850)
  - There are no new features in the open-vm-tools 12.3.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release integrates CVE-2023-20900 without the need for a patch.
    For more information on this vulnerability and its impact on VMware
    products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0019.html.
  - A tools.conf configuration setting is available to temporaily direct
    Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
    of ignoring file systems already frozen.
  - Building of the VMware Guest Authentication Service (VGAuth) using
    "xml-security-c" and "xerces-c" is being deprecated.
  - A number of Coverity reported issues have been addressed.
  - A number of GitHub issues and pull requests have been handled.
    Please see the Resolves Issues section of the Release Notes.
  - For issues resolved in this release, see the Resolved Issues section
    of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.0 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog
- Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests
- jsc-PED-1344 - reinable building containerinfo plugin for SLES 15 SP4.
- Drop patch now contained in 12.3.0:
  + 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch
  + 0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  + 2023-20867-Remove-some-dead-code.patch
  + CVE-20230-20900.patch</changelog>
  <changelog author="meissner@suse.com" date="1695297600">- open-vm-tools is built with containerinfo plugin from 15 sp3 onwards</changelog>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
</package>
<package pkgid="31dd6658df7ec95b4f49f7cbf77ed659f01bc7af0f4227a78399c40831498359" name="libvmtools0" arch="x86_64">
  <version epoch="0" ver="12.3.0" rel="150300.43.1"/>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- limit to protobuf &lt; 22 for now until build failures have been fixed</changelog>
  <changelog author="kallan@suse.com" date="1693224000">- Fix (bsc#1214566) - (CVE-2023-20900) - VUL-0: CVE-2023-20900:
  open-vm-tools: SAML token signature bypass vulnerability
  + Add patch: CVE-20230-20900.patch</changelog>
  <changelog author="kallan@suse.com" date="1694001600">- Update to 12.3.0 (build 22234872) (boo#1214850)
  - There are no new features in the open-vm-tools 12.3.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release integrates CVE-2023-20900 without the need for a patch.
    For more information on this vulnerability and its impact on VMware
    products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0019.html.
  - A tools.conf configuration setting is available to temporaily direct
    Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
    of ignoring file systems already frozen.
  - Building of the VMware Guest Authentication Service (VGAuth) using
    "xml-security-c" and "xerces-c" is being deprecated.
  - A number of Coverity reported issues have been addressed.
  - A number of GitHub issues and pull requests have been handled.
    Please see the Resolves Issues section of the Release Notes.
  - For issues resolved in this release, see the Resolved Issues section
    of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.0 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog
- Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests
- jsc-PED-1344 - reinable building containerinfo plugin for SLES 15 SP4.
- Drop patch now contained in 12.3.0:
  + 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch
  + 0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  + 2023-20867-Remove-some-dead-code.patch
  + CVE-20230-20900.patch</changelog>
  <changelog author="meissner@suse.com" date="1695297600">- open-vm-tools is built with containerinfo plugin from 15 sp3 onwards</changelog>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
</package>
<package pkgid="96941eca5837a0b52c68353985dd0833c86a12289dd3e650b8fa5c8b4da88e1c" name="libvmtools0" arch="x86_64">
  <version epoch="0" ver="12.3.5" rel="150300.46.1"/>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- limit to protobuf &lt; 22 for now until build failures have been fixed</changelog>
  <changelog author="kallan@suse.com" date="1693224000">- Fix (bsc#1214566) - (CVE-2023-20900) - VUL-0: CVE-2023-20900:
  open-vm-tools: SAML token signature bypass vulnerability
  + Add patch: CVE-20230-20900.patch</changelog>
  <changelog author="kallan@suse.com" date="1694001600">- Update to 12.3.0 (build 22234872) (boo#1214850)
  - There are no new features in the open-vm-tools 12.3.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release integrates CVE-2023-20900 without the need for a patch.
    For more information on this vulnerability and its impact on VMware
    products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0019.html.
  - A tools.conf configuration setting is available to temporaily direct
    Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
    of ignoring file systems already frozen.
  - Building of the VMware Guest Authentication Service (VGAuth) using
    "xml-security-c" and "xerces-c" is being deprecated.
  - A number of Coverity reported issues have been addressed.
  - A number of GitHub issues and pull requests have been handled.
    Please see the Resolves Issues section of the Release Notes.
  - For issues resolved in this release, see the Resolved Issues section
    of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.0 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog
- Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests
- jsc-PED-1344 - reinable building containerinfo plugin for SLES 15 SP4.
- Drop patch now contained in 12.3.0:
  + 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch
  + 0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  + 2023-20867-Remove-some-dead-code.patch
  + CVE-20230-20900.patch</changelog>
  <changelog author="meissner@suse.com" date="1695297600">- open-vm-tools is built with containerinfo plugin from 15 sp3 onwards</changelog>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697976000">- Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer
  needed, nor used (since 12.3.0 release).</changelog>
  <changelog author="kallan@suse.com" date="1698667200">- Update to 12.3.5 (build 22544099) (boo#1216670)
  - There are no new features in the open-vm-tools 12.3.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release resolves CVE-2023-34058. For more information on this
    vulnerability and its impact on VMware products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0024.html.
  - This release resolves CVE-2023-34059 which only affects open-vm-tools.
    For more information on this vulnerability, please see the Resolved
    Issues section of the Release Notes.
  - A GitHub issue has been handled. Please see the Resolved Issues section
    of the Release Notes.
  - An update to the deployPkg plugin to coordinate with recent releases
    of cloud-init for improvement for guest VM customization.
  - For issues resolved in this release, see the Resolved Issues
    &lt;https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md#resolved-issues&gt;
    section of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.5 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/ChangeLog
- Drop patch now contained in 12.3.5:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
</package>
<package pkgid="cbc50a32d9a857b767383c5b1304fa60411a1ea75df04cac9bf806135acf596e" name="libvmtools0" arch="x86_64">
  <version epoch="0" ver="12.4.0" rel="150300.49.11"/>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- limit to protobuf &lt; 22 for now until build failures have been fixed</changelog>
  <changelog author="kallan@suse.com" date="1693224000">- Fix (bsc#1214566) - (CVE-2023-20900) - VUL-0: CVE-2023-20900:
  open-vm-tools: SAML token signature bypass vulnerability
  + Add patch: CVE-20230-20900.patch</changelog>
  <changelog author="kallan@suse.com" date="1694001600">- Update to 12.3.0 (build 22234872) (boo#1214850)
  - There are no new features in the open-vm-tools 12.3.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release integrates CVE-2023-20900 without the need for a patch.
    For more information on this vulnerability and its impact on VMware
    products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0019.html.
  - A tools.conf configuration setting is available to temporaily direct
    Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
    of ignoring file systems already frozen.
  - Building of the VMware Guest Authentication Service (VGAuth) using
    "xml-security-c" and "xerces-c" is being deprecated.
  - A number of Coverity reported issues have been addressed.
  - A number of GitHub issues and pull requests have been handled.
    Please see the Resolves Issues section of the Release Notes.
  - For issues resolved in this release, see the Resolved Issues section
    of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.0 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog
- Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests
- jsc-PED-1344 - reinable building containerinfo plugin for SLES 15 SP4.
- Drop patch now contained in 12.3.0:
  + 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch
  + 0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  + 2023-20867-Remove-some-dead-code.patch
  + CVE-20230-20900.patch</changelog>
  <changelog author="meissner@suse.com" date="1695297600">- open-vm-tools is built with containerinfo plugin from 15 sp3 onwards</changelog>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697976000">- Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer
  needed, nor used (since 12.3.0 release).</changelog>
  <changelog author="kallan@suse.com" date="1698667200">- Update to 12.3.5 (build 22544099) (boo#1216670)
  - There are no new features in the open-vm-tools 12.3.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release resolves CVE-2023-34058. For more information on this
    vulnerability and its impact on VMware products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0024.html.
  - This release resolves CVE-2023-34059 which only affects open-vm-tools.
    For more information on this vulnerability, please see the Resolved
    Issues section of the Release Notes.
  - A GitHub issue has been handled. Please see the Resolved Issues section
    of the Release Notes.
  - An update to the deployPkg plugin to coordinate with recent releases
    of cloud-init for improvement for guest VM customization.
  - For issues resolved in this release, see the Resolved Issues
    &lt;https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md#resolved-issues&gt;
    section of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.5 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/ChangeLog
- Drop patch now contained in 12.3.5:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="kallan@suse.com" date="1702296000">- Fix (bsc#1217796) - Fix outdated libxmlsec1 dependency version.
  Updates to open-vm-tools for SLES 12 SP4 and SP5 are now being built
  againt against libxmlsec1-1-1.2.37. Update the spec file to now require
  libxmlsec1-openssl1 &gt;= 1.2.37.</changelog>
  <changelog author="dimstar@opensuse.org" date="1703073600">- Own %{_modulesloaddir}: used to be present via udev-mini -&gt; kmod
  - &gt; suse-module-tools dependency before.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1711195200">- update to 12.4.0:
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/open-vm-tools/ChangeLog
  There are no new features in the open-vm-tools 12.4.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been handled. Please see the Resolved
    Issues section of the Release Notes.
  * A number of issues flagged by Coverity have been addressed.
  * For issues resolved in this release, see the Resolved Issues
    section of the Release Notes.</changelog>
  <changelog author="kallan@suse.com" date="1711540800">- Remove protobuf &lt; 22 dependency from spec file (bsc#1217478)
  Required linking with additional absl libraries for sle_version &gt; 150400.
- Use (boo#1222089) for updating open-vm-tools to version 12.4.0.</changelog>
</package>
<package pkgid="a65241f1549415e4297994b6ba9c7fb739d78ce2d30208f53104a09902088075" name="libvmtools0" arch="x86_64">
  <version epoch="0" ver="12.4.5" rel="150300.52.6"/>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- limit to protobuf &lt; 22 for now until build failures have been fixed</changelog>
  <changelog author="kallan@suse.com" date="1693224000">- Fix (bsc#1214566) - (CVE-2023-20900) - VUL-0: CVE-2023-20900:
  open-vm-tools: SAML token signature bypass vulnerability
  + Add patch: CVE-20230-20900.patch</changelog>
  <changelog author="kallan@suse.com" date="1694001600">- Update to 12.3.0 (build 22234872) (boo#1214850)
  - There are no new features in the open-vm-tools 12.3.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release integrates CVE-2023-20900 without the need for a patch.
    For more information on this vulnerability and its impact on VMware
    products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0019.html.
  - A tools.conf configuration setting is available to temporaily direct
    Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
    of ignoring file systems already frozen.
  - Building of the VMware Guest Authentication Service (VGAuth) using
    "xml-security-c" and "xerces-c" is being deprecated.
  - A number of Coverity reported issues have been addressed.
  - A number of GitHub issues and pull requests have been handled.
    Please see the Resolves Issues section of the Release Notes.
  - For issues resolved in this release, see the Resolved Issues section
    of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.0 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog
- Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests
- jsc-PED-1344 - reinable building containerinfo plugin for SLES 15 SP4.
- Drop patch now contained in 12.3.0:
  + 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch
  + 0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  + 2023-20867-Remove-some-dead-code.patch
  + CVE-20230-20900.patch</changelog>
  <changelog author="meissner@suse.com" date="1695297600">- open-vm-tools is built with containerinfo plugin from 15 sp3 onwards</changelog>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697976000">- Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer
  needed, nor used (since 12.3.0 release).</changelog>
  <changelog author="kallan@suse.com" date="1698667200">- Update to 12.3.5 (build 22544099) (boo#1216670)
  - There are no new features in the open-vm-tools 12.3.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release resolves CVE-2023-34058. For more information on this
    vulnerability and its impact on VMware products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0024.html.
  - This release resolves CVE-2023-34059 which only affects open-vm-tools.
    For more information on this vulnerability, please see the Resolved
    Issues section of the Release Notes.
  - A GitHub issue has been handled. Please see the Resolved Issues section
    of the Release Notes.
  - An update to the deployPkg plugin to coordinate with recent releases
    of cloud-init for improvement for guest VM customization.
  - For issues resolved in this release, see the Resolved Issues
    &lt;https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md#resolved-issues&gt;
    section of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.5 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/ChangeLog
- Drop patch now contained in 12.3.5:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="kallan@suse.com" date="1702296000">- Fix (bsc#1217796) - Fix outdated libxmlsec1 dependency version.
  Updates to open-vm-tools for SLES 12 SP4 and SP5 are now being built
  againt against libxmlsec1-1-1.2.37. Update the spec file to now require
  libxmlsec1-openssl1 &gt;= 1.2.37.</changelog>
  <changelog author="dimstar@opensuse.org" date="1703073600">- Own %{_modulesloaddir}: used to be present via udev-mini -&gt; kmod
  - &gt; suse-module-tools dependency before.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1711195200">- update to 12.4.0:
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/open-vm-tools/ChangeLog
  There are no new features in the open-vm-tools 12.4.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been handled. Please see the Resolved
    Issues section of the Release Notes.
  * A number of issues flagged by Coverity have been addressed.
  * For issues resolved in this release, see the Resolved Issues
    section of the Release Notes.</changelog>
  <changelog author="kallan@suse.com" date="1711540800">- Remove protobuf &lt; 22 dependency from spec file (bsc#1217478)
  Required linking with additional absl libraries for sle_version &gt; 150400.
- Use (boo#1222089) for updating open-vm-tools to version 12.4.0.</changelog>
  <changelog author="kallan@suse.com" date="1719835200">- Update to 12.4.5 (build 23787635) (boo#1227181)
  - There are no new features in the open-vm-tools 12.4.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - A Github pull request and associated issue has been handled. Please
    see the Resolved Issues section of the Release Notes.
  - A number of issues flagged by Coverity and ShellCheck have been
    addressed.
  - A vmtoolsd process hang related to nested logging from an RPC Channel
    error has been fixed.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see: https://github.com/vmware/open-vm-tools/releases/tag/stable-12.4.5
  Release Notes are available at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/ReleaseNotes.md
  The granular changes that have gone into the 12.4.5 release are in the ChangeLog at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/open-vm-tools/ChangeLog</changelog>
</package>
<package pkgid="eac76ecabcdb62f6ea5a2fb5bf00ea9867df0ba254417c9d4be0895a7e9e0142" name="libxcb" arch="src">
  <version epoch="0" ver="1.13" rel="150000.3.11.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
  <changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
  <changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
  <changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="6f9e9b0ae023b2e37cc9c7f70c879d416b656e4dc88e89b526bfccc01f305ab5" name="libxcb-dri2-0" arch="aarch64">
  <version epoch="0" ver="1.13" rel="150000.3.11.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="beaf6a7ba74d1bae292f0e659deaeb84a3f970037e11038120de704698ac4437" name="libxcb-dri2-0" arch="s390x">
  <version epoch="0" ver="1.13" rel="150000.3.11.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="35bca35fd356fde5be3db8954613777062ee2e4780f7ff4777ef11db7ed3543b" name="libxcb-dri2-0" arch="x86_64">
  <version epoch="0" ver="1.13" rel="150000.3.11.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="67e28ad9901e61492eaceefd2865ae124a15037b342c47f5b6366f90c3e6edbe" name="libxcb-dri3-0" arch="aarch64">
  <version epoch="0" ver="1.13" rel="150000.3.11.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="8555203c04cba352cc33c9ac32be04fc08675aba4388d8b88539346205337a20" name="libxcb-dri3-0" arch="s390x">
  <version epoch="0" ver="1.13" rel="150000.3.11.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="12ff3f5f6f7d035cbfae3ae4084aa60cef6dd3226ed6d96b7812f216b0f48065" name="libxcb-dri3-0" arch="x86_64">
  <version epoch="0" ver="1.13" rel="150000.3.11.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="a91f328fec82a75e69567a2af9de0d7a8361233aac77f8607eadc885441daa9c" name="libxcb-glx0" arch="aarch64">
  <version epoch="0" ver="1.13" rel="150000.3.11.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="45e38011164fe9daa164ccbc1a0f6834d9318d8412d305dd5aa4c6d09db92003" name="libxcb-glx0" arch="s390x">
  <version epoch="0" ver="1.13" rel="150000.3.11.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="2a2f5ebd2cde6c3a9093feaa96ae4936f9bf3e1adf96067496dc65ea56dd100c" name="libxcb-glx0" arch="x86_64">
  <version epoch="0" ver="1.13" rel="150000.3.11.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="d105a1a53cc017a68003df41dbb36b44778221289cc8ce357fd4f6da50d525ec" name="libxcb-present0" arch="aarch64">
  <version epoch="0" ver="1.13" rel="150000.3.11.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="24afa3022994d8db111da2e31cc40a98ce53c091472d2e4b243cf7b151270135" name="libxcb-present0" arch="s390x">
  <version epoch="0" ver="1.13" rel="150000.3.11.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="01b53254f080215b11c505f1af556ee3df1456ebafcfdfb70a5a9f5c4aa43a98" name="libxcb-present0" arch="x86_64">
  <version epoch="0" ver="1.13" rel="150000.3.11.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="4ce6954551dac9a42cada4fecb9763bb1cb16a35caef0fad1c55357dd7ec4f43" name="libxcb-randr0" arch="aarch64">
  <version epoch="0" ver="1.13" rel="150000.3.11.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="070c39319620d03ede7cdb865f37af952ed77c0a370bbeb969703a9e6da5e8f1" name="libxcb-randr0" arch="s390x">
  <version epoch="0" ver="1.13" rel="150000.3.11.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="be8c8acadaa39e3c61017cb2c5a38fc6660aedf5d7044c93581e195ae99ca609" name="libxcb-randr0" arch="x86_64">
  <version epoch="0" ver="1.13" rel="150000.3.11.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="4711f00f5ebca7e3706dba7d9a6746d233811005d34e2f931603a4bf1c5546a0" name="libxcb-render0" arch="aarch64">
  <version epoch="0" ver="1.13" rel="150000.3.11.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="33b42e966a0536cac59b4248bb4f614ff50faa8c93bec5806c458bbf36e71f4b" name="libxcb-render0" arch="s390x">
  <version epoch="0" ver="1.13" rel="150000.3.11.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="0005f91eacc61b62a54f6da4c5860cfbe59e4c616fc0db88e55217f36dcb650d" name="libxcb-render0" arch="x86_64">
  <version epoch="0" ver="1.13" rel="150000.3.11.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="a565f3fe1d337f6bdb0b8dfe425a7cd6eeb646366de8862eed4594d1c11edb53" name="libxcb-shm0" arch="aarch64">
  <version epoch="0" ver="1.13" rel="150000.3.11.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="564858a9acb2e345020019891feac787c39f3f445bf612dc6d882d85523bd065" name="libxcb-shm0" arch="s390x">
  <version epoch="0" ver="1.13" rel="150000.3.11.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="22554b458e0a9f1035c92593645493ec5e42a2d19b7d16aece1e5c9985419db6" name="libxcb-shm0" arch="x86_64">
  <version epoch="0" ver="1.13" rel="150000.3.11.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="3ca72e90b76c4aa59edef8ba7d8ce620feb456d7bdd70ac113e07ee1b03b8994" name="libxcb-sync1" arch="aarch64">
  <version epoch="0" ver="1.13" rel="150000.3.11.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="cca85d93925521cd744559cfe15be423626a9766de45bd545fbdfb9dfcc53787" name="libxcb-sync1" arch="s390x">
  <version epoch="0" ver="1.13" rel="150000.3.11.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="cc5896205293964c394eb496fee18357acdd7e28596034242324aec746d60a77" name="libxcb-sync1" arch="x86_64">
  <version epoch="0" ver="1.13" rel="150000.3.11.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="470f4fff715a33518875101e1bb0736e7e3d67204ee540241abe214159a6e97b" name="libxcb-xfixes0" arch="aarch64">
  <version epoch="0" ver="1.13" rel="150000.3.11.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="e66d950626a55db8b43f69963b8278ae131899b230a3f2a381f811ef496d4930" name="libxcb-xfixes0" arch="s390x">
  <version epoch="0" ver="1.13" rel="150000.3.11.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="e3282cf8b4bd9024e4bfd639930c8ff2a675452d358948e9b8d85858d3d1410c" name="libxcb-xfixes0" arch="x86_64">
  <version epoch="0" ver="1.13" rel="150000.3.11.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="67d25b2bd3b66e658b27e1f1d2a1757f71e2711b8f950aac19c689377fc68f06" name="libxcb1" arch="aarch64">
  <version epoch="0" ver="1.13" rel="150000.3.11.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="e8b8e69efa6f368a41b621d1af23978aaceb4378484ee38c87833801afc8c9df" name="libxcb1" arch="s390x">
  <version epoch="0" ver="1.13" rel="150000.3.11.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="dea1d3a5e0ae0b6404f0999ea53066b9b93a2658a4022ede2804ddc7e0dc30fa" name="libxcb1" arch="x86_64">
  <version epoch="0" ver="1.13" rel="150000.3.11.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="6c4f68f84040cea619795a144acbc09a9ad0a8ccfdf64a2151293b02855f5bff" name="libxcrypt" arch="src">
  <version epoch="0" ver="4.4.15" rel="150300.4.7.1"/>
  <changelog author="schwab@suse.de" date="1525867200">- ABI compatible replacement for libcypt from glibc</changelog>
  <changelog author="schwab@suse.de" date="1527076800">- Update to libxcrypt 4.0.1</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- Update to libxcrypt 4.1.0
  * Fix spelling of SUSE.
  * Lower the minimum required automake version to 1.14.
  * Fix build with USE_SWAPCONTEXT turned off.
  * Extend --enable-weak-hashes configure option to accept optional
    "glibc" parameter.
  * Fix the leak of obtained random bytes.
  * Check expected output strings for deterministic methods.
  * Fix memory leak in crypt_sha1_rn.
  * Fix read of random bytes out of bounds in gensalt_sha1_rn.
  * Make it possible to disable individual hashes at configure time.
  * Make salt validation pickier.
  * Replace crypt-sunmd5.c with BSD-licensed cleanroom reimplementation.
  * Make crypt_gensalt for $sha1 deterministic.
  * Fix incorrect output-size computation in crypt_sha1_rn.
  * Add docs for SHA1, MD5/Sun, NTHASH.
  * Introduce CRYPT_GENSALT_IMPLEMENTS_* feature test macros.
  * Install libcrypt.pc symlink along with libxcrypt.pc.
  * Extend --enable-obsolete-api configure option.
  * Extend overall test coverage.</changelog>
  <changelog author="jengelh@inai.de" date="1533556800">- Fix RPM groups for Factory.</changelog>
  <changelog author="schwab@suse.de" date="1533729600">- Add conflicts with glibc-devel &lt; 2.28</changelog>
  <changelog author="schwab@suse.de" date="1539086400">- Set compatibility level to suse</changelog>
  <changelog author="mliska@suse.cz" date="1550145600">- Update to version 4.4.3:
  * Add libxcrypt.so, libxcrypt.a and xcrypt.h.
  * Add new man3 manual pages.</changelog>
  <changelog author="schwab@suse.de" date="1550577600">- format-overflow.patch: Fix -Werror=format-overflow</changelog>
  <changelog author="mliska@suse.cz" date="1561032000">- Disable LTO due to symbol versioning (boo#1138833).</changelog>
  <changelog author="schwab@suse.de" date="1575720000">- Update to version 4.4.10
  * Fix alignment problem for GOST 34.11 (Streebog) in gost-yestcrypt.
  * The crypt_* functions will now all fail and set errno to ERANGE if
    their 'phrase' argument is longer than CRYPT_MAX_PASSPHRASE_SIZE
    characters (this is currently 512)
  * The NT hashing method no longer truncates passphrases at 128
    characters; Windows does not do this.
- format-overflow.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1576152000">- gcc10.patch: fix build with gcc10 (bsc#1158192)</changelog>
  <changelog author="schwab@suse.de" date="1579694400">- Update to version 4.4.11
  * Fixes for GCC v10.x
  * Change how the known-answer tests are parallelized
- gcc10.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1580385600">- Update to version 4.4.12
  * Another fix for GCC v10.x, which occurs on s390 architectures only.</changelog>
  <changelog author="schwab@suse.de" date="1583150400">- Update to version 4.4.15
  * The compatibility symbols crypt_gensalt_r, xcrypt, xcrypt_r,
    xcrypt_gensalt, and xcrypt_gensalt_r are deprecated further
  * Speed up ka-sunmd5 by skipping most of the test phrases
- Package README.md and TODO.md (bsc#1165389)</changelog>
  <changelog author="schwab@suse.de" date="1598961600">- Add compatibility provides for SLE15</changelog>
  <changelog author="dmueller@suse.com" date="1612612800">- add compatibility provides for Step 15 as well (bsc#1181571)</changelog>
  <changelog author="pgajdos@suse.com" date="1702382400">- fix variable name for datamember in 'struct crypt_data' [bsc#1215496]
- added patches
  fix https://github.com/besser82/libxcrypt/commit/b212d601549a0fc84cbbcaf21b931f903787d7e2
  + libxcrypt-man-fix-variable-name.patch</changelog>
</package>
<package pkgid="4549acde4fe2154fd01709cf3995614c28bcb07035a20b2663c75776749a32ed" name="libxcrypt-devel" arch="aarch64">
  <version epoch="0" ver="4.4.15" rel="150300.4.7.1"/>
  <changelog author="schwab@suse.de" date="1525867200">- ABI compatible replacement for libcypt from glibc</changelog>
  <changelog author="schwab@suse.de" date="1527076800">- Update to libxcrypt 4.0.1</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- Update to libxcrypt 4.1.0
  * Fix spelling of SUSE.
  * Lower the minimum required automake version to 1.14.
  * Fix build with USE_SWAPCONTEXT turned off.
  * Extend --enable-weak-hashes configure option to accept optional
    "glibc" parameter.
  * Fix the leak of obtained random bytes.
  * Check expected output strings for deterministic methods.
  * Fix memory leak in crypt_sha1_rn.
  * Fix read of random bytes out of bounds in gensalt_sha1_rn.
  * Make it possible to disable individual hashes at configure time.
  * Make salt validation pickier.
  * Replace crypt-sunmd5.c with BSD-licensed cleanroom reimplementation.
  * Make crypt_gensalt for $sha1 deterministic.
  * Fix incorrect output-size computation in crypt_sha1_rn.
  * Add docs for SHA1, MD5/Sun, NTHASH.
  * Introduce CRYPT_GENSALT_IMPLEMENTS_* feature test macros.
  * Install libcrypt.pc symlink along with libxcrypt.pc.
  * Extend --enable-obsolete-api configure option.
  * Extend overall test coverage.</changelog>
  <changelog author="jengelh@inai.de" date="1533556800">- Fix RPM groups for Factory.</changelog>
  <changelog author="schwab@suse.de" date="1533729600">- Add conflicts with glibc-devel &lt; 2.28</changelog>
  <changelog author="schwab@suse.de" date="1539086400">- Set compatibility level to suse</changelog>
  <changelog author="mliska@suse.cz" date="1550145600">- Update to version 4.4.3:
  * Add libxcrypt.so, libxcrypt.a and xcrypt.h.
  * Add new man3 manual pages.</changelog>
  <changelog author="schwab@suse.de" date="1550577600">- format-overflow.patch: Fix -Werror=format-overflow</changelog>
  <changelog author="mliska@suse.cz" date="1561032000">- Disable LTO due to symbol versioning (boo#1138833).</changelog>
  <changelog author="schwab@suse.de" date="1575720000">- Update to version 4.4.10
  * Fix alignment problem for GOST 34.11 (Streebog) in gost-yestcrypt.
  * The crypt_* functions will now all fail and set errno to ERANGE if
    their 'phrase' argument is longer than CRYPT_MAX_PASSPHRASE_SIZE
    characters (this is currently 512)
  * The NT hashing method no longer truncates passphrases at 128
    characters; Windows does not do this.
- format-overflow.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1576152000">- gcc10.patch: fix build with gcc10 (bsc#1158192)</changelog>
  <changelog author="schwab@suse.de" date="1579694400">- Update to version 4.4.11
  * Fixes for GCC v10.x
  * Change how the known-answer tests are parallelized
- gcc10.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1580385600">- Update to version 4.4.12
  * Another fix for GCC v10.x, which occurs on s390 architectures only.</changelog>
  <changelog author="schwab@suse.de" date="1583150400">- Update to version 4.4.15
  * The compatibility symbols crypt_gensalt_r, xcrypt, xcrypt_r,
    xcrypt_gensalt, and xcrypt_gensalt_r are deprecated further
  * Speed up ka-sunmd5 by skipping most of the test phrases
- Package README.md and TODO.md (bsc#1165389)</changelog>
  <changelog author="schwab@suse.de" date="1598961600">- Add compatibility provides for SLE15</changelog>
  <changelog author="dmueller@suse.com" date="1612612800">- add compatibility provides for Step 15 as well (bsc#1181571)</changelog>
  <changelog author="pgajdos@suse.com" date="1702382400">- fix variable name for datamember in 'struct crypt_data' [bsc#1215496]
- added patches
  fix https://github.com/besser82/libxcrypt/commit/b212d601549a0fc84cbbcaf21b931f903787d7e2
  + libxcrypt-man-fix-variable-name.patch</changelog>
</package>
<package pkgid="da5fff4ba50f79949492f7938735a3883eea5b92309d42d582239e61882b562f" name="libxcrypt-devel" arch="s390x">
  <version epoch="0" ver="4.4.15" rel="150300.4.7.1"/>
  <changelog author="schwab@suse.de" date="1525867200">- ABI compatible replacement for libcypt from glibc</changelog>
  <changelog author="schwab@suse.de" date="1527076800">- Update to libxcrypt 4.0.1</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- Update to libxcrypt 4.1.0
  * Fix spelling of SUSE.
  * Lower the minimum required automake version to 1.14.
  * Fix build with USE_SWAPCONTEXT turned off.
  * Extend --enable-weak-hashes configure option to accept optional
    "glibc" parameter.
  * Fix the leak of obtained random bytes.
  * Check expected output strings for deterministic methods.
  * Fix memory leak in crypt_sha1_rn.
  * Fix read of random bytes out of bounds in gensalt_sha1_rn.
  * Make it possible to disable individual hashes at configure time.
  * Make salt validation pickier.
  * Replace crypt-sunmd5.c with BSD-licensed cleanroom reimplementation.
  * Make crypt_gensalt for $sha1 deterministic.
  * Fix incorrect output-size computation in crypt_sha1_rn.
  * Add docs for SHA1, MD5/Sun, NTHASH.
  * Introduce CRYPT_GENSALT_IMPLEMENTS_* feature test macros.
  * Install libcrypt.pc symlink along with libxcrypt.pc.
  * Extend --enable-obsolete-api configure option.
  * Extend overall test coverage.</changelog>
  <changelog author="jengelh@inai.de" date="1533556800">- Fix RPM groups for Factory.</changelog>
  <changelog author="schwab@suse.de" date="1533729600">- Add conflicts with glibc-devel &lt; 2.28</changelog>
  <changelog author="schwab@suse.de" date="1539086400">- Set compatibility level to suse</changelog>
  <changelog author="mliska@suse.cz" date="1550145600">- Update to version 4.4.3:
  * Add libxcrypt.so, libxcrypt.a and xcrypt.h.
  * Add new man3 manual pages.</changelog>
  <changelog author="schwab@suse.de" date="1550577600">- format-overflow.patch: Fix -Werror=format-overflow</changelog>
  <changelog author="mliska@suse.cz" date="1561032000">- Disable LTO due to symbol versioning (boo#1138833).</changelog>
  <changelog author="schwab@suse.de" date="1575720000">- Update to version 4.4.10
  * Fix alignment problem for GOST 34.11 (Streebog) in gost-yestcrypt.
  * The crypt_* functions will now all fail and set errno to ERANGE if
    their 'phrase' argument is longer than CRYPT_MAX_PASSPHRASE_SIZE
    characters (this is currently 512)
  * The NT hashing method no longer truncates passphrases at 128
    characters; Windows does not do this.
- format-overflow.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1576152000">- gcc10.patch: fix build with gcc10 (bsc#1158192)</changelog>
  <changelog author="schwab@suse.de" date="1579694400">- Update to version 4.4.11
  * Fixes for GCC v10.x
  * Change how the known-answer tests are parallelized
- gcc10.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1580385600">- Update to version 4.4.12
  * Another fix for GCC v10.x, which occurs on s390 architectures only.</changelog>
  <changelog author="schwab@suse.de" date="1583150400">- Update to version 4.4.15
  * The compatibility symbols crypt_gensalt_r, xcrypt, xcrypt_r,
    xcrypt_gensalt, and xcrypt_gensalt_r are deprecated further
  * Speed up ka-sunmd5 by skipping most of the test phrases
- Package README.md and TODO.md (bsc#1165389)</changelog>
  <changelog author="schwab@suse.de" date="1598961600">- Add compatibility provides for SLE15</changelog>
  <changelog author="dmueller@suse.com" date="1612612800">- add compatibility provides for Step 15 as well (bsc#1181571)</changelog>
  <changelog author="pgajdos@suse.com" date="1702382400">- fix variable name for datamember in 'struct crypt_data' [bsc#1215496]
- added patches
  fix https://github.com/besser82/libxcrypt/commit/b212d601549a0fc84cbbcaf21b931f903787d7e2
  + libxcrypt-man-fix-variable-name.patch</changelog>
</package>
<package pkgid="b1753a8f7588c795cb5ba9cae4fcfa7230ce315ba1fab64a77f5aefdb62ead08" name="libxcrypt-devel" arch="x86_64">
  <version epoch="0" ver="4.4.15" rel="150300.4.7.1"/>
  <changelog author="schwab@suse.de" date="1525867200">- ABI compatible replacement for libcypt from glibc</changelog>
  <changelog author="schwab@suse.de" date="1527076800">- Update to libxcrypt 4.0.1</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- Update to libxcrypt 4.1.0
  * Fix spelling of SUSE.
  * Lower the minimum required automake version to 1.14.
  * Fix build with USE_SWAPCONTEXT turned off.
  * Extend --enable-weak-hashes configure option to accept optional
    "glibc" parameter.
  * Fix the leak of obtained random bytes.
  * Check expected output strings for deterministic methods.
  * Fix memory leak in crypt_sha1_rn.
  * Fix read of random bytes out of bounds in gensalt_sha1_rn.
  * Make it possible to disable individual hashes at configure time.
  * Make salt validation pickier.
  * Replace crypt-sunmd5.c with BSD-licensed cleanroom reimplementation.
  * Make crypt_gensalt for $sha1 deterministic.
  * Fix incorrect output-size computation in crypt_sha1_rn.
  * Add docs for SHA1, MD5/Sun, NTHASH.
  * Introduce CRYPT_GENSALT_IMPLEMENTS_* feature test macros.
  * Install libcrypt.pc symlink along with libxcrypt.pc.
  * Extend --enable-obsolete-api configure option.
  * Extend overall test coverage.</changelog>
  <changelog author="jengelh@inai.de" date="1533556800">- Fix RPM groups for Factory.</changelog>
  <changelog author="schwab@suse.de" date="1533729600">- Add conflicts with glibc-devel &lt; 2.28</changelog>
  <changelog author="schwab@suse.de" date="1539086400">- Set compatibility level to suse</changelog>
  <changelog author="mliska@suse.cz" date="1550145600">- Update to version 4.4.3:
  * Add libxcrypt.so, libxcrypt.a and xcrypt.h.
  * Add new man3 manual pages.</changelog>
  <changelog author="schwab@suse.de" date="1550577600">- format-overflow.patch: Fix -Werror=format-overflow</changelog>
  <changelog author="mliska@suse.cz" date="1561032000">- Disable LTO due to symbol versioning (boo#1138833).</changelog>
  <changelog author="schwab@suse.de" date="1575720000">- Update to version 4.4.10
  * Fix alignment problem for GOST 34.11 (Streebog) in gost-yestcrypt.
  * The crypt_* functions will now all fail and set errno to ERANGE if
    their 'phrase' argument is longer than CRYPT_MAX_PASSPHRASE_SIZE
    characters (this is currently 512)
  * The NT hashing method no longer truncates passphrases at 128
    characters; Windows does not do this.
- format-overflow.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1576152000">- gcc10.patch: fix build with gcc10 (bsc#1158192)</changelog>
  <changelog author="schwab@suse.de" date="1579694400">- Update to version 4.4.11
  * Fixes for GCC v10.x
  * Change how the known-answer tests are parallelized
- gcc10.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1580385600">- Update to version 4.4.12
  * Another fix for GCC v10.x, which occurs on s390 architectures only.</changelog>
  <changelog author="schwab@suse.de" date="1583150400">- Update to version 4.4.15
  * The compatibility symbols crypt_gensalt_r, xcrypt, xcrypt_r,
    xcrypt_gensalt, and xcrypt_gensalt_r are deprecated further
  * Speed up ka-sunmd5 by skipping most of the test phrases
- Package README.md and TODO.md (bsc#1165389)</changelog>
  <changelog author="schwab@suse.de" date="1598961600">- Add compatibility provides for SLE15</changelog>
  <changelog author="dmueller@suse.com" date="1612612800">- add compatibility provides for Step 15 as well (bsc#1181571)</changelog>
  <changelog author="pgajdos@suse.com" date="1702382400">- fix variable name for datamember in 'struct crypt_data' [bsc#1215496]
- added patches
  fix https://github.com/besser82/libxcrypt/commit/b212d601549a0fc84cbbcaf21b931f903787d7e2
  + libxcrypt-man-fix-variable-name.patch</changelog>
</package>
<package pkgid="46b12512ae31a7a7f40da659b180c44f97f9ca6178f6406e2aa897ccc6ee500a" name="libxkbcommon" arch="src">
  <version epoch="0" ver="1.3.0" rel="150400.3.2.2"/>
  <changelog author="jengelh@inai.de" date="1478865600">- Update to new upstream release 0.7.0
  * Added support for different "modes" of calculating consumed
    modifiers. The existing mode, based on the XKB standard, has
    proven to be unintuitive in various shortcut implementations.
  * A new mode, based on the calculation used by the GTK toolkit,
    is added. This mode is less eager to declare a modifier as
    consumed.</changelog>
  <changelog author="jengelh@inai.de" date="1484740800">- Update to new upstream release 0.7.1
  * Fixed various reported problems when the current locale is
    tr_TR.UTF-8.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 0.7.2
  * Added new keysym definitions from xproto.
  * New APIs: XKB_KEY_XF86Keyboard, XKB_KEY_XF86WWAN,
    XKB_KEY_XF86RFKill, XKB_KEY_XF86AudioPreset.</changelog>
  <changelog author="jayvdb@gmail.com" date="1508414400">- Allow building x11 subpackage on any distribution</changelog>
  <changelog author="jengelh@inai.de" date="1513339200">- Update to new upstream release 0.8.0
  * Added xkb_keysym_to_{upper,lower} to perform case-conversion
    directly on keysyms. This is useful in some odd cases, but
    working with the Unicode representations should be preferred
    when possible.
  * Added Unicode conversion rules for the signifblank and
    permille keysyms.
  * Fixed a bug in the parsing of XKB key type definitions where
    the number of levels were determined by the number of level
  * names*. Keymaps which omit level names were hence
    miscompiled. This regressed in version 0.4.3. Keymaps from
    xkeyboard-config were not affected since they don't omit
    level names.</changelog>
  <changelog author="jengelh@inai.de" date="1533643200">- Update to new upstream release 0.8.2 (boo#1105832)
  * Fix a few NULL-dereferences, out-of-bounds access and undefined
    behavior in the XKB text format parser.
  * CVEs fixed:     CVE-2018-15853, CVE-2018-15854, CVE-2018-15855,
    CVE-2018-15856, CVE-2018-15857, CVE-2018-15858, CVE-2018-15859,
    CVE-2018-15861, CVE-2018-15862, CVE-2018-15863, CVE-2018-15864
- run make check</changelog>
  <changelog author="jengelh@inai.de" date="1549627200">- Update to new upstream release 0.8.3
  * New APIs: XKB_KEY_XF86MonBrightnessCycle,
    XKB_KEY_XF86RotationLockToggle.</changelog>
  <changelog author="jengelh@inai.de" date="1550836800">- Update to new upstream release 0.8.4
  * Only changes to the build procedure.</changelog>
  <changelog author="jengelh@inai.de" date="1571572800">- Update to release 0.9.0
  * Move ~/.xkb to before XKB_CONFIG_ROOT. This enables the user
    to have full control of the keymap definitions, instead of
    only augmenting them.</changelog>
  <changelog author="jengelh@inai.de" date="1571659200">- Update to release 0.9.1
  * Fix context creation failing when run in privileged processes
    as defined by `secure_getenv(3)`, e.g. GDM.</changelog>
  <changelog author="jengelh@inai.de" date="1579435200">- Update to release 0.10.0
  * Fix quadratic complexity in the XKB file parser.
  * Add $XDG_CONFIG_HOME/xkb to the default search path. If
    $XDG_CONFIG_HOME is not set, $HOME/.config/xkb is used. If
    $HOME is not set, the path is not added. The XDG path is
    looked up before the existing default search path $HOME/.xkb.
  * Add support for include statements in XKB rules files.
  * Fix bug where the merge mode only applied to the first vmod
    in a "virtual_modifiers" statement.
  * Reject interpret modifier predicate with more than one value.
  * Correctly handle capitalization of the ssharp keysym.</changelog>
  <changelog author="jengelh@inai.de" date="1599393600">- Update to release 1.0.0
  * Now it is possible to add custom layouts and options at the
    system (/etc) and user (~/.config) level, at least when
    libxkbcommon is in use.
  * libxkbregistry is a C library that lists available XKB
    models, layouts and variants for a given ruleset. This is a
    separate library (.so/.pc files) and aimed at tools that
    provide a listing of available keyboard layouts to the user.
  * Add an `xkbcli` command-line utility.</changelog>
  <changelog author="jengelh@inai.de" date="1599912000">- Update to release 1.0.1
  * Make the table output of `xkbcli how-to-type` aligned.</changelog>
  <changelog author="jengelh@inai.de" date="1605873600">- Update to release 1.0.2
  * Fix a bug where a keysym that cannot be resolved in a keymap
    gets compiled to a garbage keysym. Now it is set to
    XKB_KEY_NoSymbol instead.
  * Improve the speed of xkb_x11_keymap_new_from_device() on
    repeated calls in the same xkb_context().</changelog>
  <changelog author="jengelh@inai.de" date="1606132800">- Update to release 1.0.3
  * Fix (hopefully) a segfault in xkb_x11_keymap_new_from_device()
    in some unclear situation (bug introduced in 1.0.2).
  * Fix keymaps created with xkb_x11_keymap_new_from_device() do
    not have level names (bug introduced in 0.8.0).</changelog>
  <changelog author="dimstar@opensuse.org" date="1611144000">- Fix dependency of libxkbregistry-devel: the devel package must
  require the library libxkbregistry0.</changelog>
  <changelog author="jengelh@inai.de" date="1614859200">- Update to release 1.1.0
  * Update keysym definitions to latest xorgproto. In particular,
    this adds many special keysyms corresponding to Linux evdev
    keycodes.
  * New XKB_KEY_* definitions.</changelog>
  <changelog author="jengelh@inai.de" date="1617451200">- Update to release 1.2.0
  * `xkb_x11_keymap_new_from_device()` is much faster. It now
    performs only 2 roundtrips to the X server, instead of dozens
    (in first-time calls).
  * Case-sensitive `xkb_keysym_from_name()` is much faster.
  * Keysym names of the form `0x12AB` and `U12AB` are parsed more
    strictly.
  * Compose files now have a size limit (65535 internal nodes).
  * Compose table loading (`xkb_compose_table_new_from_locale()`
    and similar) is much faster.</changelog>
  <changelog author="jengelh@inai.de" date="1618401600">- Update to release 1.2.1 [boo#1184688]
  * Fix `xkb_x11_keymap_new_from_device()` failing when the
    keymap contains key types with missing level names, like the
    one used by the `numpad:mac` option in xkeyboard-config.
    (Regressed in 1.2.0.)</changelog>
  <changelog author="jengelh@inai.de" date="1619870400">- Update to release 1.3.0
  * `xkbcli list` was changed to output YAML instead of a
    custom format.
  * Fix segmentation fault in case-insensitive
    `xkb_keysym_from_name` for certain values like the empty
    string.</changelog>
</package>
<package pkgid="0fdf15a9cae691e18859552ab45780c29fec5e3152a39ae8d02b0a02b1181f18" name="libxkbcommon" arch="src">
  <version epoch="0" ver="1.3.0" rel="150400.3.5.1"/>
  <changelog author="jengelh@inai.de" date="1484740800">- Update to new upstream release 0.7.1
  * Fixed various reported problems when the current locale is
    tr_TR.UTF-8.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 0.7.2
  * Added new keysym definitions from xproto.
  * New APIs: XKB_KEY_XF86Keyboard, XKB_KEY_XF86WWAN,
    XKB_KEY_XF86RFKill, XKB_KEY_XF86AudioPreset.</changelog>
  <changelog author="jayvdb@gmail.com" date="1508414400">- Allow building x11 subpackage on any distribution</changelog>
  <changelog author="jengelh@inai.de" date="1513339200">- Update to new upstream release 0.8.0
  * Added xkb_keysym_to_{upper,lower} to perform case-conversion
    directly on keysyms. This is useful in some odd cases, but
    working with the Unicode representations should be preferred
    when possible.
  * Added Unicode conversion rules for the signifblank and
    permille keysyms.
  * Fixed a bug in the parsing of XKB key type definitions where
    the number of levels were determined by the number of level
  * names*. Keymaps which omit level names were hence
    miscompiled. This regressed in version 0.4.3. Keymaps from
    xkeyboard-config were not affected since they don't omit
    level names.</changelog>
  <changelog author="jengelh@inai.de" date="1533643200">- Update to new upstream release 0.8.2 (boo#1105832)
  * Fix a few NULL-dereferences, out-of-bounds access and undefined
    behavior in the XKB text format parser.
  * CVEs fixed:     CVE-2018-15853, CVE-2018-15854, CVE-2018-15855,
    CVE-2018-15856, CVE-2018-15857, CVE-2018-15858, CVE-2018-15859,
    CVE-2018-15861, CVE-2018-15862, CVE-2018-15863, CVE-2018-15864
- run make check</changelog>
  <changelog author="jengelh@inai.de" date="1549627200">- Update to new upstream release 0.8.3
  * New APIs: XKB_KEY_XF86MonBrightnessCycle,
    XKB_KEY_XF86RotationLockToggle.</changelog>
  <changelog author="jengelh@inai.de" date="1550836800">- Update to new upstream release 0.8.4
  * Only changes to the build procedure.</changelog>
  <changelog author="jengelh@inai.de" date="1571572800">- Update to release 0.9.0
  * Move ~/.xkb to before XKB_CONFIG_ROOT. This enables the user
    to have full control of the keymap definitions, instead of
    only augmenting them.</changelog>
  <changelog author="jengelh@inai.de" date="1571659200">- Update to release 0.9.1
  * Fix context creation failing when run in privileged processes
    as defined by `secure_getenv(3)`, e.g. GDM.</changelog>
  <changelog author="jengelh@inai.de" date="1579435200">- Update to release 0.10.0
  * Fix quadratic complexity in the XKB file parser.
  * Add $XDG_CONFIG_HOME/xkb to the default search path. If
    $XDG_CONFIG_HOME is not set, $HOME/.config/xkb is used. If
    $HOME is not set, the path is not added. The XDG path is
    looked up before the existing default search path $HOME/.xkb.
  * Add support for include statements in XKB rules files.
  * Fix bug where the merge mode only applied to the first vmod
    in a "virtual_modifiers" statement.
  * Reject interpret modifier predicate with more than one value.
  * Correctly handle capitalization of the ssharp keysym.</changelog>
  <changelog author="jengelh@inai.de" date="1599393600">- Update to release 1.0.0
  * Now it is possible to add custom layouts and options at the
    system (/etc) and user (~/.config) level, at least when
    libxkbcommon is in use.
  * libxkbregistry is a C library that lists available XKB
    models, layouts and variants for a given ruleset. This is a
    separate library (.so/.pc files) and aimed at tools that
    provide a listing of available keyboard layouts to the user.
  * Add an `xkbcli` command-line utility.</changelog>
  <changelog author="jengelh@inai.de" date="1599912000">- Update to release 1.0.1
  * Make the table output of `xkbcli how-to-type` aligned.</changelog>
  <changelog author="jengelh@inai.de" date="1605873600">- Update to release 1.0.2
  * Fix a bug where a keysym that cannot be resolved in a keymap
    gets compiled to a garbage keysym. Now it is set to
    XKB_KEY_NoSymbol instead.
  * Improve the speed of xkb_x11_keymap_new_from_device() on
    repeated calls in the same xkb_context().</changelog>
  <changelog author="jengelh@inai.de" date="1606132800">- Update to release 1.0.3
  * Fix (hopefully) a segfault in xkb_x11_keymap_new_from_device()
    in some unclear situation (bug introduced in 1.0.2).
  * Fix keymaps created with xkb_x11_keymap_new_from_device() do
    not have level names (bug introduced in 0.8.0).</changelog>
  <changelog author="dimstar@opensuse.org" date="1611144000">- Fix dependency of libxkbregistry-devel: the devel package must
  require the library libxkbregistry0.</changelog>
  <changelog author="jengelh@inai.de" date="1614859200">- Update to release 1.1.0
  * Update keysym definitions to latest xorgproto. In particular,
    this adds many special keysyms corresponding to Linux evdev
    keycodes.
  * New XKB_KEY_* definitions.</changelog>
  <changelog author="jengelh@inai.de" date="1617451200">- Update to release 1.2.0
  * `xkb_x11_keymap_new_from_device()` is much faster. It now
    performs only 2 roundtrips to the X server, instead of dozens
    (in first-time calls).
  * Case-sensitive `xkb_keysym_from_name()` is much faster.
  * Keysym names of the form `0x12AB` and `U12AB` are parsed more
    strictly.
  * Compose files now have a size limit (65535 internal nodes).
  * Compose table loading (`xkb_compose_table_new_from_locale()`
    and similar) is much faster.</changelog>
  <changelog author="jengelh@inai.de" date="1618401600">- Update to release 1.2.1 [boo#1184688]
  * Fix `xkb_x11_keymap_new_from_device()` failing when the
    keymap contains key types with missing level names, like the
    one used by the `numpad:mac` option in xkeyboard-config.
    (Regressed in 1.2.0.)</changelog>
  <changelog author="jengelh@inai.de" date="1619870400">- Update to release 1.3.0
  * `xkbcli list` was changed to output YAML instead of a
    custom format.
  * Fix segmentation fault in case-insensitive
    `xkb_keysym_from_name` for certain values like the empty
    string.</changelog>
  <changelog author="meissner@suse.com" date="1704801600">- enable 32bit libxkbregistry0 and libxkbregistry0-devel
  for use by Wine. (bsc#1218639)</changelog>
</package>
<package pkgid="5dbabe85ad7b95c1ce1d29187fc1389d38960858444e3511e6f18620ae034cbb" name="libxkbcommon0" arch="aarch64">
  <version epoch="0" ver="1.3.0" rel="150400.3.2.2"/>
  <changelog author="jengelh@inai.de" date="1478865600">- Update to new upstream release 0.7.0
  * Added support for different "modes" of calculating consumed
    modifiers. The existing mode, based on the XKB standard, has
    proven to be unintuitive in various shortcut implementations.
  * A new mode, based on the calculation used by the GTK toolkit,
    is added. This mode is less eager to declare a modifier as
    consumed.</changelog>
  <changelog author="jengelh@inai.de" date="1484740800">- Update to new upstream release 0.7.1
  * Fixed various reported problems when the current locale is
    tr_TR.UTF-8.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 0.7.2
  * Added new keysym definitions from xproto.
  * New APIs: XKB_KEY_XF86Keyboard, XKB_KEY_XF86WWAN,
    XKB_KEY_XF86RFKill, XKB_KEY_XF86AudioPreset.</changelog>
  <changelog author="jayvdb@gmail.com" date="1508414400">- Allow building x11 subpackage on any distribution</changelog>
  <changelog author="jengelh@inai.de" date="1513339200">- Update to new upstream release 0.8.0
  * Added xkb_keysym_to_{upper,lower} to perform case-conversion
    directly on keysyms. This is useful in some odd cases, but
    working with the Unicode representations should be preferred
    when possible.
  * Added Unicode conversion rules for the signifblank and
    permille keysyms.
  * Fixed a bug in the parsing of XKB key type definitions where
    the number of levels were determined by the number of level
  * names*. Keymaps which omit level names were hence
    miscompiled. This regressed in version 0.4.3. Keymaps from
    xkeyboard-config were not affected since they don't omit
    level names.</changelog>
  <changelog author="jengelh@inai.de" date="1533643200">- Update to new upstream release 0.8.2 (boo#1105832)
  * Fix a few NULL-dereferences, out-of-bounds access and undefined
    behavior in the XKB text format parser.
  * CVEs fixed:     CVE-2018-15853, CVE-2018-15854, CVE-2018-15855,
    CVE-2018-15856, CVE-2018-15857, CVE-2018-15858, CVE-2018-15859,
    CVE-2018-15861, CVE-2018-15862, CVE-2018-15863, CVE-2018-15864
- run make check</changelog>
  <changelog author="jengelh@inai.de" date="1549627200">- Update to new upstream release 0.8.3
  * New APIs: XKB_KEY_XF86MonBrightnessCycle,
    XKB_KEY_XF86RotationLockToggle.</changelog>
  <changelog author="jengelh@inai.de" date="1550836800">- Update to new upstream release 0.8.4
  * Only changes to the build procedure.</changelog>
  <changelog author="jengelh@inai.de" date="1571572800">- Update to release 0.9.0
  * Move ~/.xkb to before XKB_CONFIG_ROOT. This enables the user
    to have full control of the keymap definitions, instead of
    only augmenting them.</changelog>
  <changelog author="jengelh@inai.de" date="1571659200">- Update to release 0.9.1
  * Fix context creation failing when run in privileged processes
    as defined by `secure_getenv(3)`, e.g. GDM.</changelog>
  <changelog author="jengelh@inai.de" date="1579435200">- Update to release 0.10.0
  * Fix quadratic complexity in the XKB file parser.
  * Add $XDG_CONFIG_HOME/xkb to the default search path. If
    $XDG_CONFIG_HOME is not set, $HOME/.config/xkb is used. If
    $HOME is not set, the path is not added. The XDG path is
    looked up before the existing default search path $HOME/.xkb.
  * Add support for include statements in XKB rules files.
  * Fix bug where the merge mode only applied to the first vmod
    in a "virtual_modifiers" statement.
  * Reject interpret modifier predicate with more than one value.
  * Correctly handle capitalization of the ssharp keysym.</changelog>
  <changelog author="jengelh@inai.de" date="1599393600">- Update to release 1.0.0
  * Now it is possible to add custom layouts and options at the
    system (/etc) and user (~/.config) level, at least when
    libxkbcommon is in use.
  * libxkbregistry is a C library that lists available XKB
    models, layouts and variants for a given ruleset. This is a
    separate library (.so/.pc files) and aimed at tools that
    provide a listing of available keyboard layouts to the user.
  * Add an `xkbcli` command-line utility.</changelog>
  <changelog author="jengelh@inai.de" date="1599912000">- Update to release 1.0.1
  * Make the table output of `xkbcli how-to-type` aligned.</changelog>
  <changelog author="jengelh@inai.de" date="1605873600">- Update to release 1.0.2
  * Fix a bug where a keysym that cannot be resolved in a keymap
    gets compiled to a garbage keysym. Now it is set to
    XKB_KEY_NoSymbol instead.
  * Improve the speed of xkb_x11_keymap_new_from_device() on
    repeated calls in the same xkb_context().</changelog>
  <changelog author="jengelh@inai.de" date="1606132800">- Update to release 1.0.3
  * Fix (hopefully) a segfault in xkb_x11_keymap_new_from_device()
    in some unclear situation (bug introduced in 1.0.2).
  * Fix keymaps created with xkb_x11_keymap_new_from_device() do
    not have level names (bug introduced in 0.8.0).</changelog>
  <changelog author="dimstar@opensuse.org" date="1611144000">- Fix dependency of libxkbregistry-devel: the devel package must
  require the library libxkbregistry0.</changelog>
  <changelog author="jengelh@inai.de" date="1614859200">- Update to release 1.1.0
  * Update keysym definitions to latest xorgproto. In particular,
    this adds many special keysyms corresponding to Linux evdev
    keycodes.
  * New XKB_KEY_* definitions.</changelog>
  <changelog author="jengelh@inai.de" date="1617451200">- Update to release 1.2.0
  * `xkb_x11_keymap_new_from_device()` is much faster. It now
    performs only 2 roundtrips to the X server, instead of dozens
    (in first-time calls).
  * Case-sensitive `xkb_keysym_from_name()` is much faster.
  * Keysym names of the form `0x12AB` and `U12AB` are parsed more
    strictly.
  * Compose files now have a size limit (65535 internal nodes).
  * Compose table loading (`xkb_compose_table_new_from_locale()`
    and similar) is much faster.</changelog>
  <changelog author="jengelh@inai.de" date="1618401600">- Update to release 1.2.1 [boo#1184688]
  * Fix `xkb_x11_keymap_new_from_device()` failing when the
    keymap contains key types with missing level names, like the
    one used by the `numpad:mac` option in xkeyboard-config.
    (Regressed in 1.2.0.)</changelog>
  <changelog author="jengelh@inai.de" date="1619870400">- Update to release 1.3.0
  * `xkbcli list` was changed to output YAML instead of a
    custom format.
  * Fix segmentation fault in case-insensitive
    `xkb_keysym_from_name` for certain values like the empty
    string.</changelog>
</package>
<package pkgid="1abe6db607b61999611b997cda238ff062a43c9afc9bbef10320e3ebd4398f3d" name="libxkbcommon0" arch="s390x">
  <version epoch="0" ver="1.3.0" rel="150400.3.2.2"/>
  <changelog author="jengelh@inai.de" date="1478865600">- Update to new upstream release 0.7.0
  * Added support for different "modes" of calculating consumed
    modifiers. The existing mode, based on the XKB standard, has
    proven to be unintuitive in various shortcut implementations.
  * A new mode, based on the calculation used by the GTK toolkit,
    is added. This mode is less eager to declare a modifier as
    consumed.</changelog>
  <changelog author="jengelh@inai.de" date="1484740800">- Update to new upstream release 0.7.1
  * Fixed various reported problems when the current locale is
    tr_TR.UTF-8.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 0.7.2
  * Added new keysym definitions from xproto.
  * New APIs: XKB_KEY_XF86Keyboard, XKB_KEY_XF86WWAN,
    XKB_KEY_XF86RFKill, XKB_KEY_XF86AudioPreset.</changelog>
  <changelog author="jayvdb@gmail.com" date="1508414400">- Allow building x11 subpackage on any distribution</changelog>
  <changelog author="jengelh@inai.de" date="1513339200">- Update to new upstream release 0.8.0
  * Added xkb_keysym_to_{upper,lower} to perform case-conversion
    directly on keysyms. This is useful in some odd cases, but
    working with the Unicode representations should be preferred
    when possible.
  * Added Unicode conversion rules for the signifblank and
    permille keysyms.
  * Fixed a bug in the parsing of XKB key type definitions where
    the number of levels were determined by the number of level
  * names*. Keymaps which omit level names were hence
    miscompiled. This regressed in version 0.4.3. Keymaps from
    xkeyboard-config were not affected since they don't omit
    level names.</changelog>
  <changelog author="jengelh@inai.de" date="1533643200">- Update to new upstream release 0.8.2 (boo#1105832)
  * Fix a few NULL-dereferences, out-of-bounds access and undefined
    behavior in the XKB text format parser.
  * CVEs fixed:     CVE-2018-15853, CVE-2018-15854, CVE-2018-15855,
    CVE-2018-15856, CVE-2018-15857, CVE-2018-15858, CVE-2018-15859,
    CVE-2018-15861, CVE-2018-15862, CVE-2018-15863, CVE-2018-15864
- run make check</changelog>
  <changelog author="jengelh@inai.de" date="1549627200">- Update to new upstream release 0.8.3
  * New APIs: XKB_KEY_XF86MonBrightnessCycle,
    XKB_KEY_XF86RotationLockToggle.</changelog>
  <changelog author="jengelh@inai.de" date="1550836800">- Update to new upstream release 0.8.4
  * Only changes to the build procedure.</changelog>
  <changelog author="jengelh@inai.de" date="1571572800">- Update to release 0.9.0
  * Move ~/.xkb to before XKB_CONFIG_ROOT. This enables the user
    to have full control of the keymap definitions, instead of
    only augmenting them.</changelog>
  <changelog author="jengelh@inai.de" date="1571659200">- Update to release 0.9.1
  * Fix context creation failing when run in privileged processes
    as defined by `secure_getenv(3)`, e.g. GDM.</changelog>
  <changelog author="jengelh@inai.de" date="1579435200">- Update to release 0.10.0
  * Fix quadratic complexity in the XKB file parser.
  * Add $XDG_CONFIG_HOME/xkb to the default search path. If
    $XDG_CONFIG_HOME is not set, $HOME/.config/xkb is used. If
    $HOME is not set, the path is not added. The XDG path is
    looked up before the existing default search path $HOME/.xkb.
  * Add support for include statements in XKB rules files.
  * Fix bug where the merge mode only applied to the first vmod
    in a "virtual_modifiers" statement.
  * Reject interpret modifier predicate with more than one value.
  * Correctly handle capitalization of the ssharp keysym.</changelog>
  <changelog author="jengelh@inai.de" date="1599393600">- Update to release 1.0.0
  * Now it is possible to add custom layouts and options at the
    system (/etc) and user (~/.config) level, at least when
    libxkbcommon is in use.
  * libxkbregistry is a C library that lists available XKB
    models, layouts and variants for a given ruleset. This is a
    separate library (.so/.pc files) and aimed at tools that
    provide a listing of available keyboard layouts to the user.
  * Add an `xkbcli` command-line utility.</changelog>
  <changelog author="jengelh@inai.de" date="1599912000">- Update to release 1.0.1
  * Make the table output of `xkbcli how-to-type` aligned.</changelog>
  <changelog author="jengelh@inai.de" date="1605873600">- Update to release 1.0.2
  * Fix a bug where a keysym that cannot be resolved in a keymap
    gets compiled to a garbage keysym. Now it is set to
    XKB_KEY_NoSymbol instead.
  * Improve the speed of xkb_x11_keymap_new_from_device() on
    repeated calls in the same xkb_context().</changelog>
  <changelog author="jengelh@inai.de" date="1606132800">- Update to release 1.0.3
  * Fix (hopefully) a segfault in xkb_x11_keymap_new_from_device()
    in some unclear situation (bug introduced in 1.0.2).
  * Fix keymaps created with xkb_x11_keymap_new_from_device() do
    not have level names (bug introduced in 0.8.0).</changelog>
  <changelog author="dimstar@opensuse.org" date="1611144000">- Fix dependency of libxkbregistry-devel: the devel package must
  require the library libxkbregistry0.</changelog>
  <changelog author="jengelh@inai.de" date="1614859200">- Update to release 1.1.0
  * Update keysym definitions to latest xorgproto. In particular,
    this adds many special keysyms corresponding to Linux evdev
    keycodes.
  * New XKB_KEY_* definitions.</changelog>
  <changelog author="jengelh@inai.de" date="1617451200">- Update to release 1.2.0
  * `xkb_x11_keymap_new_from_device()` is much faster. It now
    performs only 2 roundtrips to the X server, instead of dozens
    (in first-time calls).
  * Case-sensitive `xkb_keysym_from_name()` is much faster.
  * Keysym names of the form `0x12AB` and `U12AB` are parsed more
    strictly.
  * Compose files now have a size limit (65535 internal nodes).
  * Compose table loading (`xkb_compose_table_new_from_locale()`
    and similar) is much faster.</changelog>
  <changelog author="jengelh@inai.de" date="1618401600">- Update to release 1.2.1 [boo#1184688]
  * Fix `xkb_x11_keymap_new_from_device()` failing when the
    keymap contains key types with missing level names, like the
    one used by the `numpad:mac` option in xkeyboard-config.
    (Regressed in 1.2.0.)</changelog>
  <changelog author="jengelh@inai.de" date="1619870400">- Update to release 1.3.0
  * `xkbcli list` was changed to output YAML instead of a
    custom format.
  * Fix segmentation fault in case-insensitive
    `xkb_keysym_from_name` for certain values like the empty
    string.</changelog>
</package>
<package pkgid="c3792c33b70e3dd9afb6f0859c60cd62f148a9492f1dd78bc412d4e49b72de61" name="libxkbcommon0" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="150400.3.2.2"/>
  <changelog author="jengelh@inai.de" date="1478865600">- Update to new upstream release 0.7.0
  * Added support for different "modes" of calculating consumed
    modifiers. The existing mode, based on the XKB standard, has
    proven to be unintuitive in various shortcut implementations.
  * A new mode, based on the calculation used by the GTK toolkit,
    is added. This mode is less eager to declare a modifier as
    consumed.</changelog>
  <changelog author="jengelh@inai.de" date="1484740800">- Update to new upstream release 0.7.1
  * Fixed various reported problems when the current locale is
    tr_TR.UTF-8.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 0.7.2
  * Added new keysym definitions from xproto.
  * New APIs: XKB_KEY_XF86Keyboard, XKB_KEY_XF86WWAN,
    XKB_KEY_XF86RFKill, XKB_KEY_XF86AudioPreset.</changelog>
  <changelog author="jayvdb@gmail.com" date="1508414400">- Allow building x11 subpackage on any distribution</changelog>
  <changelog author="jengelh@inai.de" date="1513339200">- Update to new upstream release 0.8.0
  * Added xkb_keysym_to_{upper,lower} to perform case-conversion
    directly on keysyms. This is useful in some odd cases, but
    working with the Unicode representations should be preferred
    when possible.
  * Added Unicode conversion rules for the signifblank and
    permille keysyms.
  * Fixed a bug in the parsing of XKB key type definitions where
    the number of levels were determined by the number of level
  * names*. Keymaps which omit level names were hence
    miscompiled. This regressed in version 0.4.3. Keymaps from
    xkeyboard-config were not affected since they don't omit
    level names.</changelog>
  <changelog author="jengelh@inai.de" date="1533643200">- Update to new upstream release 0.8.2 (boo#1105832)
  * Fix a few NULL-dereferences, out-of-bounds access and undefined
    behavior in the XKB text format parser.
  * CVEs fixed:     CVE-2018-15853, CVE-2018-15854, CVE-2018-15855,
    CVE-2018-15856, CVE-2018-15857, CVE-2018-15858, CVE-2018-15859,
    CVE-2018-15861, CVE-2018-15862, CVE-2018-15863, CVE-2018-15864
- run make check</changelog>
  <changelog author="jengelh@inai.de" date="1549627200">- Update to new upstream release 0.8.3
  * New APIs: XKB_KEY_XF86MonBrightnessCycle,
    XKB_KEY_XF86RotationLockToggle.</changelog>
  <changelog author="jengelh@inai.de" date="1550836800">- Update to new upstream release 0.8.4
  * Only changes to the build procedure.</changelog>
  <changelog author="jengelh@inai.de" date="1571572800">- Update to release 0.9.0
  * Move ~/.xkb to before XKB_CONFIG_ROOT. This enables the user
    to have full control of the keymap definitions, instead of
    only augmenting them.</changelog>
  <changelog author="jengelh@inai.de" date="1571659200">- Update to release 0.9.1
  * Fix context creation failing when run in privileged processes
    as defined by `secure_getenv(3)`, e.g. GDM.</changelog>
  <changelog author="jengelh@inai.de" date="1579435200">- Update to release 0.10.0
  * Fix quadratic complexity in the XKB file parser.
  * Add $XDG_CONFIG_HOME/xkb to the default search path. If
    $XDG_CONFIG_HOME is not set, $HOME/.config/xkb is used. If
    $HOME is not set, the path is not added. The XDG path is
    looked up before the existing default search path $HOME/.xkb.
  * Add support for include statements in XKB rules files.
  * Fix bug where the merge mode only applied to the first vmod
    in a "virtual_modifiers" statement.
  * Reject interpret modifier predicate with more than one value.
  * Correctly handle capitalization of the ssharp keysym.</changelog>
  <changelog author="jengelh@inai.de" date="1599393600">- Update to release 1.0.0
  * Now it is possible to add custom layouts and options at the
    system (/etc) and user (~/.config) level, at least when
    libxkbcommon is in use.
  * libxkbregistry is a C library that lists available XKB
    models, layouts and variants for a given ruleset. This is a
    separate library (.so/.pc files) and aimed at tools that
    provide a listing of available keyboard layouts to the user.
  * Add an `xkbcli` command-line utility.</changelog>
  <changelog author="jengelh@inai.de" date="1599912000">- Update to release 1.0.1
  * Make the table output of `xkbcli how-to-type` aligned.</changelog>
  <changelog author="jengelh@inai.de" date="1605873600">- Update to release 1.0.2
  * Fix a bug where a keysym that cannot be resolved in a keymap
    gets compiled to a garbage keysym. Now it is set to
    XKB_KEY_NoSymbol instead.
  * Improve the speed of xkb_x11_keymap_new_from_device() on
    repeated calls in the same xkb_context().</changelog>
  <changelog author="jengelh@inai.de" date="1606132800">- Update to release 1.0.3
  * Fix (hopefully) a segfault in xkb_x11_keymap_new_from_device()
    in some unclear situation (bug introduced in 1.0.2).
  * Fix keymaps created with xkb_x11_keymap_new_from_device() do
    not have level names (bug introduced in 0.8.0).</changelog>
  <changelog author="dimstar@opensuse.org" date="1611144000">- Fix dependency of libxkbregistry-devel: the devel package must
  require the library libxkbregistry0.</changelog>
  <changelog author="jengelh@inai.de" date="1614859200">- Update to release 1.1.0
  * Update keysym definitions to latest xorgproto. In particular,
    this adds many special keysyms corresponding to Linux evdev
    keycodes.
  * New XKB_KEY_* definitions.</changelog>
  <changelog author="jengelh@inai.de" date="1617451200">- Update to release 1.2.0
  * `xkb_x11_keymap_new_from_device()` is much faster. It now
    performs only 2 roundtrips to the X server, instead of dozens
    (in first-time calls).
  * Case-sensitive `xkb_keysym_from_name()` is much faster.
  * Keysym names of the form `0x12AB` and `U12AB` are parsed more
    strictly.
  * Compose files now have a size limit (65535 internal nodes).
  * Compose table loading (`xkb_compose_table_new_from_locale()`
    and similar) is much faster.</changelog>
  <changelog author="jengelh@inai.de" date="1618401600">- Update to release 1.2.1 [boo#1184688]
  * Fix `xkb_x11_keymap_new_from_device()` failing when the
    keymap contains key types with missing level names, like the
    one used by the `numpad:mac` option in xkeyboard-config.
    (Regressed in 1.2.0.)</changelog>
  <changelog author="jengelh@inai.de" date="1619870400">- Update to release 1.3.0
  * `xkbcli list` was changed to output YAML instead of a
    custom format.
  * Fix segmentation fault in case-insensitive
    `xkb_keysym_from_name` for certain values like the empty
    string.</changelog>
</package>
<package pkgid="aea0fadbafdb37aecf888d7a9beb54f54258e8f5eba864b6b70d5e1ccb034dc2" name="libxkbcommon0" arch="aarch64">
  <version epoch="0" ver="1.3.0" rel="150400.3.5.1"/>
  <changelog author="jengelh@inai.de" date="1484740800">- Update to new upstream release 0.7.1
  * Fixed various reported problems when the current locale is
    tr_TR.UTF-8.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 0.7.2
  * Added new keysym definitions from xproto.
  * New APIs: XKB_KEY_XF86Keyboard, XKB_KEY_XF86WWAN,
    XKB_KEY_XF86RFKill, XKB_KEY_XF86AudioPreset.</changelog>
  <changelog author="jayvdb@gmail.com" date="1508414400">- Allow building x11 subpackage on any distribution</changelog>
  <changelog author="jengelh@inai.de" date="1513339200">- Update to new upstream release 0.8.0
  * Added xkb_keysym_to_{upper,lower} to perform case-conversion
    directly on keysyms. This is useful in some odd cases, but
    working with the Unicode representations should be preferred
    when possible.
  * Added Unicode conversion rules for the signifblank and
    permille keysyms.
  * Fixed a bug in the parsing of XKB key type definitions where
    the number of levels were determined by the number of level
  * names*. Keymaps which omit level names were hence
    miscompiled. This regressed in version 0.4.3. Keymaps from
    xkeyboard-config were not affected since they don't omit
    level names.</changelog>
  <changelog author="jengelh@inai.de" date="1533643200">- Update to new upstream release 0.8.2 (boo#1105832)
  * Fix a few NULL-dereferences, out-of-bounds access and undefined
    behavior in the XKB text format parser.
  * CVEs fixed:     CVE-2018-15853, CVE-2018-15854, CVE-2018-15855,
    CVE-2018-15856, CVE-2018-15857, CVE-2018-15858, CVE-2018-15859,
    CVE-2018-15861, CVE-2018-15862, CVE-2018-15863, CVE-2018-15864
- run make check</changelog>
  <changelog author="jengelh@inai.de" date="1549627200">- Update to new upstream release 0.8.3
  * New APIs: XKB_KEY_XF86MonBrightnessCycle,
    XKB_KEY_XF86RotationLockToggle.</changelog>
  <changelog author="jengelh@inai.de" date="1550836800">- Update to new upstream release 0.8.4
  * Only changes to the build procedure.</changelog>
  <changelog author="jengelh@inai.de" date="1571572800">- Update to release 0.9.0
  * Move ~/.xkb to before XKB_CONFIG_ROOT. This enables the user
    to have full control of the keymap definitions, instead of
    only augmenting them.</changelog>
  <changelog author="jengelh@inai.de" date="1571659200">- Update to release 0.9.1
  * Fix context creation failing when run in privileged processes
    as defined by `secure_getenv(3)`, e.g. GDM.</changelog>
  <changelog author="jengelh@inai.de" date="1579435200">- Update to release 0.10.0
  * Fix quadratic complexity in the XKB file parser.
  * Add $XDG_CONFIG_HOME/xkb to the default search path. If
    $XDG_CONFIG_HOME is not set, $HOME/.config/xkb is used. If
    $HOME is not set, the path is not added. The XDG path is
    looked up before the existing default search path $HOME/.xkb.
  * Add support for include statements in XKB rules files.
  * Fix bug where the merge mode only applied to the first vmod
    in a "virtual_modifiers" statement.
  * Reject interpret modifier predicate with more than one value.
  * Correctly handle capitalization of the ssharp keysym.</changelog>
  <changelog author="jengelh@inai.de" date="1599393600">- Update to release 1.0.0
  * Now it is possible to add custom layouts and options at the
    system (/etc) and user (~/.config) level, at least when
    libxkbcommon is in use.
  * libxkbregistry is a C library that lists available XKB
    models, layouts and variants for a given ruleset. This is a
    separate library (.so/.pc files) and aimed at tools that
    provide a listing of available keyboard layouts to the user.
  * Add an `xkbcli` command-line utility.</changelog>
  <changelog author="jengelh@inai.de" date="1599912000">- Update to release 1.0.1
  * Make the table output of `xkbcli how-to-type` aligned.</changelog>
  <changelog author="jengelh@inai.de" date="1605873600">- Update to release 1.0.2
  * Fix a bug where a keysym that cannot be resolved in a keymap
    gets compiled to a garbage keysym. Now it is set to
    XKB_KEY_NoSymbol instead.
  * Improve the speed of xkb_x11_keymap_new_from_device() on
    repeated calls in the same xkb_context().</changelog>
  <changelog author="jengelh@inai.de" date="1606132800">- Update to release 1.0.3
  * Fix (hopefully) a segfault in xkb_x11_keymap_new_from_device()
    in some unclear situation (bug introduced in 1.0.2).
  * Fix keymaps created with xkb_x11_keymap_new_from_device() do
    not have level names (bug introduced in 0.8.0).</changelog>
  <changelog author="dimstar@opensuse.org" date="1611144000">- Fix dependency of libxkbregistry-devel: the devel package must
  require the library libxkbregistry0.</changelog>
  <changelog author="jengelh@inai.de" date="1614859200">- Update to release 1.1.0
  * Update keysym definitions to latest xorgproto. In particular,
    this adds many special keysyms corresponding to Linux evdev
    keycodes.
  * New XKB_KEY_* definitions.</changelog>
  <changelog author="jengelh@inai.de" date="1617451200">- Update to release 1.2.0
  * `xkb_x11_keymap_new_from_device()` is much faster. It now
    performs only 2 roundtrips to the X server, instead of dozens
    (in first-time calls).
  * Case-sensitive `xkb_keysym_from_name()` is much faster.
  * Keysym names of the form `0x12AB` and `U12AB` are parsed more
    strictly.
  * Compose files now have a size limit (65535 internal nodes).
  * Compose table loading (`xkb_compose_table_new_from_locale()`
    and similar) is much faster.</changelog>
  <changelog author="jengelh@inai.de" date="1618401600">- Update to release 1.2.1 [boo#1184688]
  * Fix `xkb_x11_keymap_new_from_device()` failing when the
    keymap contains key types with missing level names, like the
    one used by the `numpad:mac` option in xkeyboard-config.
    (Regressed in 1.2.0.)</changelog>
  <changelog author="jengelh@inai.de" date="1619870400">- Update to release 1.3.0
  * `xkbcli list` was changed to output YAML instead of a
    custom format.
  * Fix segmentation fault in case-insensitive
    `xkb_keysym_from_name` for certain values like the empty
    string.</changelog>
  <changelog author="meissner@suse.com" date="1704801600">- enable 32bit libxkbregistry0 and libxkbregistry0-devel
  for use by Wine. (bsc#1218639)</changelog>
</package>
<package pkgid="c7dcd6970c885878f400d77ca82f281e1d03762494b6ae835319226e698671f9" name="libxkbcommon0" arch="s390x">
  <version epoch="0" ver="1.3.0" rel="150400.3.5.1"/>
  <changelog author="jengelh@inai.de" date="1484740800">- Update to new upstream release 0.7.1
  * Fixed various reported problems when the current locale is
    tr_TR.UTF-8.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 0.7.2
  * Added new keysym definitions from xproto.
  * New APIs: XKB_KEY_XF86Keyboard, XKB_KEY_XF86WWAN,
    XKB_KEY_XF86RFKill, XKB_KEY_XF86AudioPreset.</changelog>
  <changelog author="jayvdb@gmail.com" date="1508414400">- Allow building x11 subpackage on any distribution</changelog>
  <changelog author="jengelh@inai.de" date="1513339200">- Update to new upstream release 0.8.0
  * Added xkb_keysym_to_{upper,lower} to perform case-conversion
    directly on keysyms. This is useful in some odd cases, but
    working with the Unicode representations should be preferred
    when possible.
  * Added Unicode conversion rules for the signifblank and
    permille keysyms.
  * Fixed a bug in the parsing of XKB key type definitions where
    the number of levels were determined by the number of level
  * names*. Keymaps which omit level names were hence
    miscompiled. This regressed in version 0.4.3. Keymaps from
    xkeyboard-config were not affected since they don't omit
    level names.</changelog>
  <changelog author="jengelh@inai.de" date="1533643200">- Update to new upstream release 0.8.2 (boo#1105832)
  * Fix a few NULL-dereferences, out-of-bounds access and undefined
    behavior in the XKB text format parser.
  * CVEs fixed:     CVE-2018-15853, CVE-2018-15854, CVE-2018-15855,
    CVE-2018-15856, CVE-2018-15857, CVE-2018-15858, CVE-2018-15859,
    CVE-2018-15861, CVE-2018-15862, CVE-2018-15863, CVE-2018-15864
- run make check</changelog>
  <changelog author="jengelh@inai.de" date="1549627200">- Update to new upstream release 0.8.3
  * New APIs: XKB_KEY_XF86MonBrightnessCycle,
    XKB_KEY_XF86RotationLockToggle.</changelog>
  <changelog author="jengelh@inai.de" date="1550836800">- Update to new upstream release 0.8.4
  * Only changes to the build procedure.</changelog>
  <changelog author="jengelh@inai.de" date="1571572800">- Update to release 0.9.0
  * Move ~/.xkb to before XKB_CONFIG_ROOT. This enables the user
    to have full control of the keymap definitions, instead of
    only augmenting them.</changelog>
  <changelog author="jengelh@inai.de" date="1571659200">- Update to release 0.9.1
  * Fix context creation failing when run in privileged processes
    as defined by `secure_getenv(3)`, e.g. GDM.</changelog>
  <changelog author="jengelh@inai.de" date="1579435200">- Update to release 0.10.0
  * Fix quadratic complexity in the XKB file parser.
  * Add $XDG_CONFIG_HOME/xkb to the default search path. If
    $XDG_CONFIG_HOME is not set, $HOME/.config/xkb is used. If
    $HOME is not set, the path is not added. The XDG path is
    looked up before the existing default search path $HOME/.xkb.
  * Add support for include statements in XKB rules files.
  * Fix bug where the merge mode only applied to the first vmod
    in a "virtual_modifiers" statement.
  * Reject interpret modifier predicate with more than one value.
  * Correctly handle capitalization of the ssharp keysym.</changelog>
  <changelog author="jengelh@inai.de" date="1599393600">- Update to release 1.0.0
  * Now it is possible to add custom layouts and options at the
    system (/etc) and user (~/.config) level, at least when
    libxkbcommon is in use.
  * libxkbregistry is a C library that lists available XKB
    models, layouts and variants for a given ruleset. This is a
    separate library (.so/.pc files) and aimed at tools that
    provide a listing of available keyboard layouts to the user.
  * Add an `xkbcli` command-line utility.</changelog>
  <changelog author="jengelh@inai.de" date="1599912000">- Update to release 1.0.1
  * Make the table output of `xkbcli how-to-type` aligned.</changelog>
  <changelog author="jengelh@inai.de" date="1605873600">- Update to release 1.0.2
  * Fix a bug where a keysym that cannot be resolved in a keymap
    gets compiled to a garbage keysym. Now it is set to
    XKB_KEY_NoSymbol instead.
  * Improve the speed of xkb_x11_keymap_new_from_device() on
    repeated calls in the same xkb_context().</changelog>
  <changelog author="jengelh@inai.de" date="1606132800">- Update to release 1.0.3
  * Fix (hopefully) a segfault in xkb_x11_keymap_new_from_device()
    in some unclear situation (bug introduced in 1.0.2).
  * Fix keymaps created with xkb_x11_keymap_new_from_device() do
    not have level names (bug introduced in 0.8.0).</changelog>
  <changelog author="dimstar@opensuse.org" date="1611144000">- Fix dependency of libxkbregistry-devel: the devel package must
  require the library libxkbregistry0.</changelog>
  <changelog author="jengelh@inai.de" date="1614859200">- Update to release 1.1.0
  * Update keysym definitions to latest xorgproto. In particular,
    this adds many special keysyms corresponding to Linux evdev
    keycodes.
  * New XKB_KEY_* definitions.</changelog>
  <changelog author="jengelh@inai.de" date="1617451200">- Update to release 1.2.0
  * `xkb_x11_keymap_new_from_device()` is much faster. It now
    performs only 2 roundtrips to the X server, instead of dozens
    (in first-time calls).
  * Case-sensitive `xkb_keysym_from_name()` is much faster.
  * Keysym names of the form `0x12AB` and `U12AB` are parsed more
    strictly.
  * Compose files now have a size limit (65535 internal nodes).
  * Compose table loading (`xkb_compose_table_new_from_locale()`
    and similar) is much faster.</changelog>
  <changelog author="jengelh@inai.de" date="1618401600">- Update to release 1.2.1 [boo#1184688]
  * Fix `xkb_x11_keymap_new_from_device()` failing when the
    keymap contains key types with missing level names, like the
    one used by the `numpad:mac` option in xkeyboard-config.
    (Regressed in 1.2.0.)</changelog>
  <changelog author="jengelh@inai.de" date="1619870400">- Update to release 1.3.0
  * `xkbcli list` was changed to output YAML instead of a
    custom format.
  * Fix segmentation fault in case-insensitive
    `xkb_keysym_from_name` for certain values like the empty
    string.</changelog>
  <changelog author="meissner@suse.com" date="1704801600">- enable 32bit libxkbregistry0 and libxkbregistry0-devel
  for use by Wine. (bsc#1218639)</changelog>
</package>
<package pkgid="10d866df199515d20d7e65f582e510d6384a7fa299bb0e86a7bbdf4f716a2636" name="libxkbcommon0" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="150400.3.5.1"/>
  <changelog author="jengelh@inai.de" date="1484740800">- Update to new upstream release 0.7.1
  * Fixed various reported problems when the current locale is
    tr_TR.UTF-8.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 0.7.2
  * Added new keysym definitions from xproto.
  * New APIs: XKB_KEY_XF86Keyboard, XKB_KEY_XF86WWAN,
    XKB_KEY_XF86RFKill, XKB_KEY_XF86AudioPreset.</changelog>
  <changelog author="jayvdb@gmail.com" date="1508414400">- Allow building x11 subpackage on any distribution</changelog>
  <changelog author="jengelh@inai.de" date="1513339200">- Update to new upstream release 0.8.0
  * Added xkb_keysym_to_{upper,lower} to perform case-conversion
    directly on keysyms. This is useful in some odd cases, but
    working with the Unicode representations should be preferred
    when possible.
  * Added Unicode conversion rules for the signifblank and
    permille keysyms.
  * Fixed a bug in the parsing of XKB key type definitions where
    the number of levels were determined by the number of level
  * names*. Keymaps which omit level names were hence
    miscompiled. This regressed in version 0.4.3. Keymaps from
    xkeyboard-config were not affected since they don't omit
    level names.</changelog>
  <changelog author="jengelh@inai.de" date="1533643200">- Update to new upstream release 0.8.2 (boo#1105832)
  * Fix a few NULL-dereferences, out-of-bounds access and undefined
    behavior in the XKB text format parser.
  * CVEs fixed:     CVE-2018-15853, CVE-2018-15854, CVE-2018-15855,
    CVE-2018-15856, CVE-2018-15857, CVE-2018-15858, CVE-2018-15859,
    CVE-2018-15861, CVE-2018-15862, CVE-2018-15863, CVE-2018-15864
- run make check</changelog>
  <changelog author="jengelh@inai.de" date="1549627200">- Update to new upstream release 0.8.3
  * New APIs: XKB_KEY_XF86MonBrightnessCycle,
    XKB_KEY_XF86RotationLockToggle.</changelog>
  <changelog author="jengelh@inai.de" date="1550836800">- Update to new upstream release 0.8.4
  * Only changes to the build procedure.</changelog>
  <changelog author="jengelh@inai.de" date="1571572800">- Update to release 0.9.0
  * Move ~/.xkb to before XKB_CONFIG_ROOT. This enables the user
    to have full control of the keymap definitions, instead of
    only augmenting them.</changelog>
  <changelog author="jengelh@inai.de" date="1571659200">- Update to release 0.9.1
  * Fix context creation failing when run in privileged processes
    as defined by `secure_getenv(3)`, e.g. GDM.</changelog>
  <changelog author="jengelh@inai.de" date="1579435200">- Update to release 0.10.0
  * Fix quadratic complexity in the XKB file parser.
  * Add $XDG_CONFIG_HOME/xkb to the default search path. If
    $XDG_CONFIG_HOME is not set, $HOME/.config/xkb is used. If
    $HOME is not set, the path is not added. The XDG path is
    looked up before the existing default search path $HOME/.xkb.
  * Add support for include statements in XKB rules files.
  * Fix bug where the merge mode only applied to the first vmod
    in a "virtual_modifiers" statement.
  * Reject interpret modifier predicate with more than one value.
  * Correctly handle capitalization of the ssharp keysym.</changelog>
  <changelog author="jengelh@inai.de" date="1599393600">- Update to release 1.0.0
  * Now it is possible to add custom layouts and options at the
    system (/etc) and user (~/.config) level, at least when
    libxkbcommon is in use.
  * libxkbregistry is a C library that lists available XKB
    models, layouts and variants for a given ruleset. This is a
    separate library (.so/.pc files) and aimed at tools that
    provide a listing of available keyboard layouts to the user.
  * Add an `xkbcli` command-line utility.</changelog>
  <changelog author="jengelh@inai.de" date="1599912000">- Update to release 1.0.1
  * Make the table output of `xkbcli how-to-type` aligned.</changelog>
  <changelog author="jengelh@inai.de" date="1605873600">- Update to release 1.0.2
  * Fix a bug where a keysym that cannot be resolved in a keymap
    gets compiled to a garbage keysym. Now it is set to
    XKB_KEY_NoSymbol instead.
  * Improve the speed of xkb_x11_keymap_new_from_device() on
    repeated calls in the same xkb_context().</changelog>
  <changelog author="jengelh@inai.de" date="1606132800">- Update to release 1.0.3
  * Fix (hopefully) a segfault in xkb_x11_keymap_new_from_device()
    in some unclear situation (bug introduced in 1.0.2).
  * Fix keymaps created with xkb_x11_keymap_new_from_device() do
    not have level names (bug introduced in 0.8.0).</changelog>
  <changelog author="dimstar@opensuse.org" date="1611144000">- Fix dependency of libxkbregistry-devel: the devel package must
  require the library libxkbregistry0.</changelog>
  <changelog author="jengelh@inai.de" date="1614859200">- Update to release 1.1.0
  * Update keysym definitions to latest xorgproto. In particular,
    this adds many special keysyms corresponding to Linux evdev
    keycodes.
  * New XKB_KEY_* definitions.</changelog>
  <changelog author="jengelh@inai.de" date="1617451200">- Update to release 1.2.0
  * `xkb_x11_keymap_new_from_device()` is much faster. It now
    performs only 2 roundtrips to the X server, instead of dozens
    (in first-time calls).
  * Case-sensitive `xkb_keysym_from_name()` is much faster.
  * Keysym names of the form `0x12AB` and `U12AB` are parsed more
    strictly.
  * Compose files now have a size limit (65535 internal nodes).
  * Compose table loading (`xkb_compose_table_new_from_locale()`
    and similar) is much faster.</changelog>
  <changelog author="jengelh@inai.de" date="1618401600">- Update to release 1.2.1 [boo#1184688]
  * Fix `xkb_x11_keymap_new_from_device()` failing when the
    keymap contains key types with missing level names, like the
    one used by the `numpad:mac` option in xkeyboard-config.
    (Regressed in 1.2.0.)</changelog>
  <changelog author="jengelh@inai.de" date="1619870400">- Update to release 1.3.0
  * `xkbcli list` was changed to output YAML instead of a
    custom format.
  * Fix segmentation fault in case-insensitive
    `xkb_keysym_from_name` for certain values like the empty
    string.</changelog>
  <changelog author="meissner@suse.com" date="1704801600">- enable 32bit libxkbregistry0 and libxkbregistry0-devel
  for use by Wine. (bsc#1218639)</changelog>
</package>
<package pkgid="0c91b2e89515263fcaa7dc2e72d6b2e6c6e5ccb0326df8edbf48c0d63057343b" name="libxml2-2" arch="aarch64">
  <version epoch="0" ver="2.10.3" rel="150500.5.11.1"/>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
</package>
<package pkgid="2884ed99015948606084418d3156297025c045276c851dcb6b7a4b543d28b5c4" name="libxml2-2" arch="s390x">
  <version epoch="0" ver="2.10.3" rel="150500.5.11.1"/>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
</package>
<package pkgid="c0fdc5f56ea25c96ee6889b04677364b89deafaea5b7181c1022f3e45a07890a" name="libxml2-2" arch="x86_64">
  <version epoch="0" ver="2.10.3" rel="150500.5.11.1"/>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
</package>
<package pkgid="0968ae12f249434479971d795dfc965939f7a0c131161483b9b28090576e6fef" name="libxml2-2" arch="aarch64">
  <version epoch="0" ver="2.10.3" rel="150500.5.14.1"/>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
</package>
<package pkgid="4e02a9846f10b52b2c93742ec013a62b5848c089bcda5f285205f1374e51fe38" name="libxml2-2" arch="s390x">
  <version epoch="0" ver="2.10.3" rel="150500.5.14.1"/>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
</package>
<package pkgid="56637a1b406c68da030032da1191a063bf56df7fd4f99ec2ae4ec6431bf1ee4f" name="libxml2-2" arch="x86_64">
  <version epoch="0" ver="2.10.3" rel="150500.5.14.1"/>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
</package>
<package pkgid="c9207609e64d1c518162ca03c8c6aea3eb659fc932fa49c5273ac2b449b670e6" name="libxml2-2" arch="aarch64">
  <version epoch="0" ver="2.10.3" rel="150500.5.17.1"/>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
  <changelog author="david.anes@suse.com" date="1719403200">- Security fix (CVE-2024-34459, bsc#1224282) buffer over-read in
  xmlHTMLPrintFileContext in xmllint.c
  * Added libxml2-CVE-2024-34459.patch</changelog>
</package>
<package pkgid="38241970a3f9636d0027391f966ec3f03b91ccd4b35db0b6c5fa77592574bed6" name="libxml2-2" arch="s390x">
  <version epoch="0" ver="2.10.3" rel="150500.5.17.1"/>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
  <changelog author="david.anes@suse.com" date="1719403200">- Security fix (CVE-2024-34459, bsc#1224282) buffer over-read in
  xmlHTMLPrintFileContext in xmllint.c
  * Added libxml2-CVE-2024-34459.patch</changelog>
</package>
<package pkgid="0af4cfcf3c24a2bdad2ae399b9e3575dcd2c40d70bb5e0d8f32d36597fcdebc8" name="libxml2-2" arch="x86_64">
  <version epoch="0" ver="2.10.3" rel="150500.5.17.1"/>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
  <changelog author="david.anes@suse.com" date="1719403200">- Security fix (CVE-2024-34459, bsc#1224282) buffer over-read in
  xmlHTMLPrintFileContext in xmllint.c
  * Added libxml2-CVE-2024-34459.patch</changelog>
</package>
<package pkgid="59a9be44f564c5e93b42c3a29e0618a25393e6f383a912e714f45c1f5a094b07" name="libxml2-2" arch="aarch64">
  <version epoch="0" ver="2.10.3" rel="150500.5.8.1"/>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
</package>
<package pkgid="50ddcae1dfb04e293832cdc86b5fca3a46844e8b7138dd75301e4d2568483f67" name="libxml2-2" arch="s390x">
  <version epoch="0" ver="2.10.3" rel="150500.5.8.1"/>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
</package>
<package pkgid="70facfd37535d56a8e679991d4fe67aa121c021e141a7caa6917552267128cbe" name="libxml2-2" arch="x86_64">
  <version epoch="0" ver="2.10.3" rel="150500.5.8.1"/>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
</package>
<package pkgid="ad95b97af04a26e311e343b2f8dcc8d329e2aafe14df0d748b24688bf199154b" name="libxml2" arch="src">
  <version epoch="0" ver="2.10.3" rel="150500.5.11.1"/>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
</package>
<package pkgid="a98cfe63b5009bcb969b8e97f4041c58f32a8a30bcb423cf171d2fb05d4b26e1" name="libxml2" arch="src">
  <version epoch="0" ver="2.10.3" rel="150500.5.14.1"/>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
</package>
<package pkgid="0c5c6f05aeaeb0af43ef97e8c6fb65cd42259366765ea74aa63830c456b3488f" name="libxml2" arch="src">
  <version epoch="0" ver="2.10.3" rel="150500.5.17.1"/>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
  <changelog author="david.anes@suse.com" date="1719403200">- Security fix (CVE-2024-34459, bsc#1224282) buffer over-read in
  xmlHTMLPrintFileContext in xmllint.c
  * Added libxml2-CVE-2024-34459.patch</changelog>
</package>
<package pkgid="ffd8d5656c2b78a95469549b0cc01d61e7d1a63d1206d6cbb45d3082cb3ef213" name="libxml2" arch="src">
  <version epoch="0" ver="2.10.3" rel="150500.5.8.1"/>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
</package>
<package pkgid="1aae8eed628ed6224a200c2c7da4a37a6ae6e5345c3fd525e63579b06f3fcfd6" name="libxml2-python" arch="src">
  <version epoch="0" ver="2.10.3" rel="150500.5.11.1"/>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
</package>
<package pkgid="226915cc9bf251265bb05ccc6d0aa828c5568e2a0de0b1c191c7517fab711f9f" name="libxml2-python" arch="src">
  <version epoch="0" ver="2.10.3" rel="150500.5.14.1"/>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
</package>
<package pkgid="59d0c63efabd658a127d92dde23f852e5008ddebabf2e258e31b0d163f1ae833" name="libxml2-python" arch="src">
  <version epoch="0" ver="2.10.3" rel="150500.5.17.1"/>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
  <changelog author="david.anes@suse.com" date="1719403200">- Security fix (CVE-2024-34459, bsc#1224282) buffer over-read in
  xmlHTMLPrintFileContext in xmllint.c
  * Added libxml2-CVE-2024-34459.patch</changelog>
</package>
<package pkgid="4406294c2f62774b3284d209b7f042376fa688cd98676a0fbfdf8b0916839176" name="libxml2-python" arch="src">
  <version epoch="0" ver="2.10.3" rel="150500.5.8.1"/>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
</package>
<package pkgid="987b2f4b80670ef720c6386b856383811bb2cbd5c45e42264d02e9936bd182b3" name="libxml2-tools" arch="aarch64">
  <version epoch="0" ver="2.10.3" rel="150500.5.11.1"/>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
</package>
<package pkgid="69473c66dab9a1c8b8c6b48eb8a7fc3effe3eaf50eddc6780bb69a3a9c5ed50c" name="libxml2-tools" arch="s390x">
  <version epoch="0" ver="2.10.3" rel="150500.5.11.1"/>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
</package>
<package pkgid="916a6abd219a4d89a555e2b31d0e348d8da66a933bc65552a698b45f55ee057d" name="libxml2-tools" arch="x86_64">
  <version epoch="0" ver="2.10.3" rel="150500.5.11.1"/>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
</package>
<package pkgid="bf8fcc91d80c3a62ce8704296e0ed7f1e7b79b32916ec4fcf56ba4d4dbbc7f44" name="libxml2-tools" arch="aarch64">
  <version epoch="0" ver="2.10.3" rel="150500.5.14.1"/>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
</package>
<package pkgid="5738c5a85d18ee1cf87d9a047de4206c413907c9b843fb3f62b0620d6aa4c2ea" name="libxml2-tools" arch="s390x">
  <version epoch="0" ver="2.10.3" rel="150500.5.14.1"/>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
</package>
<package pkgid="2410c324f0203d3c5e69efd7173fd7ca4c1a637df510ef2a7aca930482584b21" name="libxml2-tools" arch="x86_64">
  <version epoch="0" ver="2.10.3" rel="150500.5.14.1"/>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
</package>
<package pkgid="4fc22cc549221ed948da2be49f4c5190303419d1a2c2023735842f1f378bebf4" name="libxml2-tools" arch="aarch64">
  <version epoch="0" ver="2.10.3" rel="150500.5.17.1"/>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
  <changelog author="david.anes@suse.com" date="1719403200">- Security fix (CVE-2024-34459, bsc#1224282) buffer over-read in
  xmlHTMLPrintFileContext in xmllint.c
  * Added libxml2-CVE-2024-34459.patch</changelog>
</package>
<package pkgid="020f6aeb8a9ec7d6f6377cad05e020b3ba7d6ef34b0b13f5b1264edc54fc485b" name="libxml2-tools" arch="s390x">
  <version epoch="0" ver="2.10.3" rel="150500.5.17.1"/>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
  <changelog author="david.anes@suse.com" date="1719403200">- Security fix (CVE-2024-34459, bsc#1224282) buffer over-read in
  xmlHTMLPrintFileContext in xmllint.c
  * Added libxml2-CVE-2024-34459.patch</changelog>
</package>
<package pkgid="a81346e2179a11e2a3325836e833fed8d3377255f652dc652c5b398967557156" name="libxml2-tools" arch="x86_64">
  <version epoch="0" ver="2.10.3" rel="150500.5.17.1"/>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
  <changelog author="david.anes@suse.com" date="1719403200">- Security fix (CVE-2024-34459, bsc#1224282) buffer over-read in
  xmlHTMLPrintFileContext in xmllint.c
  * Added libxml2-CVE-2024-34459.patch</changelog>
</package>
<package pkgid="23947581059509d63efdc0b4d02cea96b7138df001da75975851808d2fa3feb9" name="libxml2-tools" arch="aarch64">
  <version epoch="0" ver="2.10.3" rel="150500.5.8.1"/>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
</package>
<package pkgid="15c31ebe3fafec8acd22f039d7085dd6a99c9196a09574f727bfb19bb9cf98de" name="libxml2-tools" arch="s390x">
  <version epoch="0" ver="2.10.3" rel="150500.5.8.1"/>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
</package>
<package pkgid="6d24eb7dab0a50a06f6aa87316876b30efa9ad1ce5974452ae985e303557cfdd" name="libxml2-tools" arch="x86_64">
  <version epoch="0" ver="2.10.3" rel="150500.5.8.1"/>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
</package>
<package pkgid="6c49201a0b79c33e70e60b73385a82816bd491d98f6a95a4d85cd5b8fd030072" name="libxmlsec1-1" arch="x86_64">
  <version epoch="0" ver="1.2.37" rel="150400.14.5.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1490270400">- Fixed dependencies with libraries (bsc#1012246):
  * libxmlsec1-openssl.so
  * libxmlsec1-gcrypt.so
  * libxmlsec1-gnutls.so
  * libxmlsec1-nss.so</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1492689600">- Version update to 1.2.24:
  * Added ECDSA-SHA1, ECDSA-SHA256, ECDSA-SHA512 support
  for xmlsec-nss.
  * Fixed XMLSEC_KEYINFO_FLAGS_X509DATA_DONT_VERIFY_CERTS
  handling.
  * Disabled external entities loading by xmlsec utility app by
  default to prevent XXE attacks.
  * Improved OpenSSL version and features detection.
  * Cleaned up, simplified, and standardized internal error
  reporting.
  * Fixed a few Coverity-discovered bugs.
  * Marked as deprecated all the functions in xmlsec/soap.h file
  and a couple other functions no longer required by xmlsec.
  These functions will be removed in the future releases.
  * Several other small fixes (see commit log for more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1512043200">- Version update to 1.2.25:
  * Various small fixes
  * Coverity cleanups
  * Removed support for old openssl</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1528200000">- Version update to 1.2.26:
  * Added xmlsec-mscng module based on Microsoft Cryptography API: Next
    Generation
  * Added support for GOST 2012 and fixed CryptoPro CSP provider for GOST R
    34.10-2001 in xmlsec-mscrypto
  * Added LibreSSL 2.7 support
  * Upgraded documentation build process to support the latest gtk-doc</changelog>
  <changelog author="kallan@suse.com" date="1534248000">- Fixed (bsc#1104876).  Added: Requires: %{libname} = %{version} to each module
  in the spec file. This will ensure that when one of the modules is installed
  the corresponding version of libxmlsec1-1 will also be installed/upgraded.</changelog>
  <changelog author="tchvatal@suse.com" date="1534420800">- Add rplintrc to avoid bogus errors:
  * xmlsec1-rpmlintrc</changelog>
  <changelog author="tchvatal@suse.com" date="1540987200">- Version update to 1.2.27:
  * Added AES-GCM support for OpenSSL and MSCNG (snargit).
  * Added DSA-SHA256 and ECDSA-SHA384 support for NSS (vmiklos).
  * Added RSA-OAEP support for MSCNG (vmiklos).
  * Continuous build integration in Travis and Appveyor.
  * Several other small fixes (more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1540987201">- Drop the gnutls backend as based on the tests it is quite borked:
  * We still have nss and openssl backend for people to use</changelog>
  <changelog author="tchvatal@suse.com" date="1544184000">- Make sure to recommend at least one backend when you install
  just xmlsec1</changelog>
  <changelog author="tchvatal@suse.com" date="1556193600">- Update to 1.2.28:
  * Added BoringSSL support (chenbd).
  * Added gnutls-3.6.x support (alonbl).
  * Added DSA and ECDSA key size getter for MSCNG (vmiklos).
  * Added --enable-mans configuration option (alonbl).
  * Added coninuous build integration for MacOSX (vmiklos).
  * Several other small fixes (more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1592481600">- Update to 1.2.30:
  * Enabled XML_PARSE_HUGE for all xml parsers.
  * Various build and tests fixes and improvements.
  * Move remaining private header files away from xmlsec/include/ folder.</changelog>
  <changelog author="dimstar@opensuse.org" date="1608206400">- Update to version 1.2.31:
  + Unload error strings in OpenSSL shutdown.
  + Make userData available when executing preExecCallback
    function.
  + Add an option to use secure memset.
- Pass --disable-md5 to configure: The cryptographic strength of
  the MD5 algorithm is sufficiently doubtful that its use is
  discouraged at this time. It is not listed as an algorithm in
  [XMLDSIG-CORE1]
  https://www.w3.org/TR/xmlsec-algorithms/#bib-XMLDSIG-CORE1</changelog>
  <changelog author="pmonreal@suse.com" date="1613563200">- Relax the crypto policies for the test-suite. This allows the
  tests using certificates with small key lengths to pass.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620561600">- update to 1.2.32:
  + Remove MD5 for NSS 3.59 and above
  + Fix PKCS12_parse return code handling
  + Fix OpenSSL lookup
  + xmlSecX509DataGetNodeContent(): don't return 0 for non-empty
    elements - fix for LibreOffice
- add upstream signing key and validate source signature
- put license text into all subpackages
- treat all compiler warnings as errors</changelog>
  <changelog author="dmueller@suse.com" date="1638100800">- update to 1.2.33:
  * Fix decrypting session key for two recipients
  * Added --privkey-openssl-engine option to enhance openssl engine support</changelog>
  <changelog author="dmueller@suse.com" date="1653307200">- update to 1.2.34:
  * Support for OpenSSL compiled with OPENSSL_NO_ERR.
  * Full support for LibreSSL 3.5.0 and above
  * Several other small fixes</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662638400">- Add export CFLAGS/CXXFLAGS="-Wno-error=deprecated-declarations"
  inbefore configure. We pass --enable-werror to configure, and
  that leads to warnings about deprecations failing build. As
  deprecations is mainly a consern for upstream, stop failing on
  those.</changelog>
  <changelog author="pmonreal@suse.com" date="1667563200">- Update to 1.2.36:
  * Retired the XMLSec mailing list "xmlsec@aleksey.com" and the
    XMLSec Online Signature Verifier.
- Update to 1.2.35:
  * Migration to OpenSSL 3.0 API (based on PR by @snargit). Note
    that OpenSSL engines are disabled by default when XMLSec
    library is compiled against OpenSSL 3.0. To re-enable OpenSSL
    engines, use "--enable-openssl3-engines" configure flag (there
    will be a lot of deprecation warnings).
  * The OpenSSL before 1.1.0 and LibreSSL before 2.7.0 are now
    deprecated and will be removed in the future versions of
    XMLSec Library.
  * Refactored all the integer casts to ensure cast-safety. Fixed
    all warnings and enabled "-Werror" and "-pedantic" flags on
    CI builds.
  * Added configure flag to use size_t for xmlSecSize (currently
    disabled by default for backward compatibility).
  * Moved all CI builds to GitHub actions.</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 1.2.37:
  Fixed two regressions from 1.2.36 release</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- switch to pkgconfig(zlib) to allow alternative providers as well</changelog>
</package>
<package pkgid="90f68f0a258a51114e16777e64930937d7f23916f419c7dd0d375ffa01dde42e" name="libxmlsec1-openssl1" arch="x86_64">
  <version epoch="0" ver="1.2.37" rel="150400.14.5.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1490270400">- Fixed dependencies with libraries (bsc#1012246):
  * libxmlsec1-openssl.so
  * libxmlsec1-gcrypt.so
  * libxmlsec1-gnutls.so
  * libxmlsec1-nss.so</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1492689600">- Version update to 1.2.24:
  * Added ECDSA-SHA1, ECDSA-SHA256, ECDSA-SHA512 support
  for xmlsec-nss.
  * Fixed XMLSEC_KEYINFO_FLAGS_X509DATA_DONT_VERIFY_CERTS
  handling.
  * Disabled external entities loading by xmlsec utility app by
  default to prevent XXE attacks.
  * Improved OpenSSL version and features detection.
  * Cleaned up, simplified, and standardized internal error
  reporting.
  * Fixed a few Coverity-discovered bugs.
  * Marked as deprecated all the functions in xmlsec/soap.h file
  and a couple other functions no longer required by xmlsec.
  These functions will be removed in the future releases.
  * Several other small fixes (see commit log for more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1512043200">- Version update to 1.2.25:
  * Various small fixes
  * Coverity cleanups
  * Removed support for old openssl</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1528200000">- Version update to 1.2.26:
  * Added xmlsec-mscng module based on Microsoft Cryptography API: Next
    Generation
  * Added support for GOST 2012 and fixed CryptoPro CSP provider for GOST R
    34.10-2001 in xmlsec-mscrypto
  * Added LibreSSL 2.7 support
  * Upgraded documentation build process to support the latest gtk-doc</changelog>
  <changelog author="kallan@suse.com" date="1534248000">- Fixed (bsc#1104876).  Added: Requires: %{libname} = %{version} to each module
  in the spec file. This will ensure that when one of the modules is installed
  the corresponding version of libxmlsec1-1 will also be installed/upgraded.</changelog>
  <changelog author="tchvatal@suse.com" date="1534420800">- Add rplintrc to avoid bogus errors:
  * xmlsec1-rpmlintrc</changelog>
  <changelog author="tchvatal@suse.com" date="1540987200">- Version update to 1.2.27:
  * Added AES-GCM support for OpenSSL and MSCNG (snargit).
  * Added DSA-SHA256 and ECDSA-SHA384 support for NSS (vmiklos).
  * Added RSA-OAEP support for MSCNG (vmiklos).
  * Continuous build integration in Travis and Appveyor.
  * Several other small fixes (more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1540987201">- Drop the gnutls backend as based on the tests it is quite borked:
  * We still have nss and openssl backend for people to use</changelog>
  <changelog author="tchvatal@suse.com" date="1544184000">- Make sure to recommend at least one backend when you install
  just xmlsec1</changelog>
  <changelog author="tchvatal@suse.com" date="1556193600">- Update to 1.2.28:
  * Added BoringSSL support (chenbd).
  * Added gnutls-3.6.x support (alonbl).
  * Added DSA and ECDSA key size getter for MSCNG (vmiklos).
  * Added --enable-mans configuration option (alonbl).
  * Added coninuous build integration for MacOSX (vmiklos).
  * Several other small fixes (more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1592481600">- Update to 1.2.30:
  * Enabled XML_PARSE_HUGE for all xml parsers.
  * Various build and tests fixes and improvements.
  * Move remaining private header files away from xmlsec/include/ folder.</changelog>
  <changelog author="dimstar@opensuse.org" date="1608206400">- Update to version 1.2.31:
  + Unload error strings in OpenSSL shutdown.
  + Make userData available when executing preExecCallback
    function.
  + Add an option to use secure memset.
- Pass --disable-md5 to configure: The cryptographic strength of
  the MD5 algorithm is sufficiently doubtful that its use is
  discouraged at this time. It is not listed as an algorithm in
  [XMLDSIG-CORE1]
  https://www.w3.org/TR/xmlsec-algorithms/#bib-XMLDSIG-CORE1</changelog>
  <changelog author="pmonreal@suse.com" date="1613563200">- Relax the crypto policies for the test-suite. This allows the
  tests using certificates with small key lengths to pass.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620561600">- update to 1.2.32:
  + Remove MD5 for NSS 3.59 and above
  + Fix PKCS12_parse return code handling
  + Fix OpenSSL lookup
  + xmlSecX509DataGetNodeContent(): don't return 0 for non-empty
    elements - fix for LibreOffice
- add upstream signing key and validate source signature
- put license text into all subpackages
- treat all compiler warnings as errors</changelog>
  <changelog author="dmueller@suse.com" date="1638100800">- update to 1.2.33:
  * Fix decrypting session key for two recipients
  * Added --privkey-openssl-engine option to enhance openssl engine support</changelog>
  <changelog author="dmueller@suse.com" date="1653307200">- update to 1.2.34:
  * Support for OpenSSL compiled with OPENSSL_NO_ERR.
  * Full support for LibreSSL 3.5.0 and above
  * Several other small fixes</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662638400">- Add export CFLAGS/CXXFLAGS="-Wno-error=deprecated-declarations"
  inbefore configure. We pass --enable-werror to configure, and
  that leads to warnings about deprecations failing build. As
  deprecations is mainly a consern for upstream, stop failing on
  those.</changelog>
  <changelog author="pmonreal@suse.com" date="1667563200">- Update to 1.2.36:
  * Retired the XMLSec mailing list "xmlsec@aleksey.com" and the
    XMLSec Online Signature Verifier.
- Update to 1.2.35:
  * Migration to OpenSSL 3.0 API (based on PR by @snargit). Note
    that OpenSSL engines are disabled by default when XMLSec
    library is compiled against OpenSSL 3.0. To re-enable OpenSSL
    engines, use "--enable-openssl3-engines" configure flag (there
    will be a lot of deprecation warnings).
  * The OpenSSL before 1.1.0 and LibreSSL before 2.7.0 are now
    deprecated and will be removed in the future versions of
    XMLSec Library.
  * Refactored all the integer casts to ensure cast-safety. Fixed
    all warnings and enabled "-Werror" and "-pedantic" flags on
    CI builds.
  * Added configure flag to use size_t for xmlSecSize (currently
    disabled by default for backward compatibility).
  * Moved all CI builds to GitHub actions.</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 1.2.37:
  Fixed two regressions from 1.2.36 release</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- switch to pkgconfig(zlib) to allow alternative providers as well</changelog>
</package>
<package pkgid="9d2620141b82d98836a7ebc163a797fd8c956cc7955915f53f8e3c664b921b49" name="libz1" arch="aarch64">
  <version epoch="0" ver="1.2.13" rel="150500.4.3.1"/>
  <changelog author="brogers@suse.com" date="1562846400">- Tweak zlib-power8-fate325307.patch to have type of crc32_vpmsum
  conform to usage
  bsc#1141059</changelog>
  <changelog author="tchvatal@suse.com" date="1563364800">- Update the s390 patchset bsc#1137624:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1571659200">- Add SUSE specific patch to fix bsc#1138793, we simply don't want
  to test if the app was linked with exactly same version of zlib
  like the one that is present on the runtime:
  * zlib-no-version-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1572350400">- Update the zlib-no-version-check.patch to be even more forgiving
  with the versions on the zlib to allow updates without rebuilds</changelog>
  <changelog author="tchvatal@suse.com" date="1587643200">- Update 410.patch to contain latest fixes from IBM bsc#1166260
  * The build behaviour changed</changelog>
  <changelog author="lidong.zhong@suse.com" date="1596715200">- Permit a deflateParams() parameter change as soon as possible(bsc#1174736)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  Fix DFLTCC not flushing EOBS when creating raw streams(bsc#1174551)
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1598529600">- Set -DDFLTCC_LEVEL_MASK=0x7e on s390/s390x jsc#13776</changelog>
  <changelog author="tchvatal@suse.com" date="1598616000">- Add patch to fix compression level switching
  bsc#1175811 bsc#1175830 bsc#1175831
  * zlib-compression-switching.patch</changelog>
  <changelog author="coolo@suse.com" date="1600257600">- Provide a testsuite subpackage to run post-build validation</changelog>
  <changelog author="lnussel@suse.de" date="1603886400">- install to /usr (boo#1029961)</changelog>
  <changelog author="ali.abdallah@suse.com" date="1604923200">- Fix hw compression on z15 bsc#1176201
- Add zlib-s390x-z15-fix-hw-compression.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1647000000">- Don't install (internal) crypt.h header in minizip
  * minizip-dont-install-crypt-header.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1648209600">- Fix memory corruption on deflate, bsc#1197459
  * bsc1197459.patch - CVE-2018-25032
- Update 410.patch
  * Remove included patches:
    bsc1174551-fxi-imcomplete-raw-streams.patch
    zlib-compression-switching.patch
    zlib-s390x-z15-fix-hw-compression.patch
- Refresh bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch</changelog>
  <changelog author="meissner@suse.com" date="1656763200">- switch to https urls</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661256000">- Update to 1.2.12:
  * A lot of bug fixes
  * Improve speed of crc32 functions
  * Use ARM crc32 instructions if the ARM architecture has them
  For the complete changes, see ChangeLog
- Fixes CVE-2022-37434,  heap-based buffer over-read or buffer overflow in
  inflate.c via a large gzip header extra field
  (CVE-2022-37434, bsc#1202175)
- Added patches:
  * zlib-1.2.11-covscan-issues-rhel9.patch
  * zlib-1.2.11-covscan-issues.patch
  * zlib-1.2.12-s390-vectorize-crc32.patch
  * zlib-1.2.12-optimized-crc32-power8.patch
  * zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.12-fix-configure.patch
  * zlib-1.2.12-correct-inputs-provided-to-crc-func.patch
  * zlib-1.2.12-fix-CVE-2022-37434.patch
  * zlib-1.2.5-minizip-fixuncrypt.patch
- Removed patches:
  * bsc1197459.patch (upstreamed)
  * zlib-power8-fate325307.patch
    (replaced by zlib-1.2.12-optimized-crc32-power8.patch)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
    (replaced by zlib-1.2.12-IBM-Z-hw-accelrated-deflate-s390x.patch)
  * 410.patch
    (replaced by zlib-1.2.12-IBM-Z-hw-accelrated-deflate-s390x.patch)
- Refreshed patches:
  * zlib-format.patch
  * zlib-no-version-check.patch
- Disable profiling since it breaks tests
- Update zlib-rpmlintrc</changelog>
  <changelog author="danilo.spinella@suse.com" date="1665403200">- Add Power8 optimizations:
  * zlib-1.2.12-add-optimized-slide_hash-for-power.patch
  * zlib-1.2.12-add-vectorized-longest_match-for-power.patch
  * zlib-1.2.12-adler32-vector-optimizations-for-power.patch
  * zlib-1.2.12-fix-invalid-memory-access-on-ppc-and-ppc64.patch
- Update zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch</changelog>
  <changelog author="dmueller@suse.com" date="1670760000">- build zlib with optflags again</changelog>
  <changelog author="danilo.spinella@suse.com" date="1674129600">- Update to 1.13:
  * Fix configure issue that discarded provided CC definition
  * Correct incorrect inputs provided to the CRC functions
  * Repair prototypes and exporting of new CRC functions
  * Fix inflateBack to detect invalid input with distances too far
  * Have infback() deliver all of the available output up to any error
  * Fix a bug when getting a gzip header extra field with inflate()
  * Fix bug in block type selection when Z_FIXED used
  * Tighten deflateBound bounds
  * Remove deleted assembler code references
  * Various portability and appearance improvements
- Added patches:
  * zlib-1.2.13-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.13-fix-bug-deflateBound.patch
  * zlib-1.2.13-optimized-s390.patch
- Refreshed patches:
  * zlib-1.2.12-add-optimized-slide_hash-for-power.patch
  * zlib-1.2.12-add-vectorized-longest_match-for-power.patch
  * zlib-1.2.12-s390-vectorize-crc32.patch
- Removed patches:
  * zlib-1.2.12-fix-configure.patch
  * zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.12-optimized-crc32-power8.patch
  * zlib-1.2.12-correct-inputs-provided-to-crc-func.patch
  * zlib-1.2.12-fix-CVE-2022-37434.patch
  * zlib-1.2.11-optimized-s390.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1683201600">- Fix deflateBound() before deflateInit(), bsc#1210593, bsc#1211005
  bsc1210593.patch</changelog>
  <changelog author="oss@danyspin97.org" date="1697716800">- Fix CVE-2023-45853, integer overflow and resultant heap-based buffer
  overflow in zipOpenNewFileInZip4_6, bsc#1216378
  * CVE-2023-45853.patch</changelog>
</package>
<package pkgid="703487f8a21a5828e12fa1837e68e74baa38f0f029addf317a17be6f3b248aa4" name="libz1" arch="s390x">
  <version epoch="0" ver="1.2.13" rel="150500.4.3.1"/>
  <changelog author="brogers@suse.com" date="1562846400">- Tweak zlib-power8-fate325307.patch to have type of crc32_vpmsum
  conform to usage
  bsc#1141059</changelog>
  <changelog author="tchvatal@suse.com" date="1563364800">- Update the s390 patchset bsc#1137624:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1571659200">- Add SUSE specific patch to fix bsc#1138793, we simply don't want
  to test if the app was linked with exactly same version of zlib
  like the one that is present on the runtime:
  * zlib-no-version-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1572350400">- Update the zlib-no-version-check.patch to be even more forgiving
  with the versions on the zlib to allow updates without rebuilds</changelog>
  <changelog author="tchvatal@suse.com" date="1587643200">- Update 410.patch to contain latest fixes from IBM bsc#1166260
  * The build behaviour changed</changelog>
  <changelog author="lidong.zhong@suse.com" date="1596715200">- Permit a deflateParams() parameter change as soon as possible(bsc#1174736)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  Fix DFLTCC not flushing EOBS when creating raw streams(bsc#1174551)
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1598529600">- Set -DDFLTCC_LEVEL_MASK=0x7e on s390/s390x jsc#13776</changelog>
  <changelog author="tchvatal@suse.com" date="1598616000">- Add patch to fix compression level switching
  bsc#1175811 bsc#1175830 bsc#1175831
  * zlib-compression-switching.patch</changelog>
  <changelog author="coolo@suse.com" date="1600257600">- Provide a testsuite subpackage to run post-build validation</changelog>
  <changelog author="lnussel@suse.de" date="1603886400">- install to /usr (boo#1029961)</changelog>
  <changelog author="ali.abdallah@suse.com" date="1604923200">- Fix hw compression on z15 bsc#1176201
- Add zlib-s390x-z15-fix-hw-compression.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1647000000">- Don't install (internal) crypt.h header in minizip
  * minizip-dont-install-crypt-header.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1648209600">- Fix memory corruption on deflate, bsc#1197459
  * bsc1197459.patch - CVE-2018-25032
- Update 410.patch
  * Remove included patches:
    bsc1174551-fxi-imcomplete-raw-streams.patch
    zlib-compression-switching.patch
    zlib-s390x-z15-fix-hw-compression.patch
- Refresh bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch</changelog>
  <changelog author="meissner@suse.com" date="1656763200">- switch to https urls</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661256000">- Update to 1.2.12:
  * A lot of bug fixes
  * Improve speed of crc32 functions
  * Use ARM crc32 instructions if the ARM architecture has them
  For the complete changes, see ChangeLog
- Fixes CVE-2022-37434,  heap-based buffer over-read or buffer overflow in
  inflate.c via a large gzip header extra field
  (CVE-2022-37434, bsc#1202175)
- Added patches:
  * zlib-1.2.11-covscan-issues-rhel9.patch
  * zlib-1.2.11-covscan-issues.patch
  * zlib-1.2.12-s390-vectorize-crc32.patch
  * zlib-1.2.12-optimized-crc32-power8.patch
  * zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.12-fix-configure.patch
  * zlib-1.2.12-correct-inputs-provided-to-crc-func.patch
  * zlib-1.2.12-fix-CVE-2022-37434.patch
  * zlib-1.2.5-minizip-fixuncrypt.patch
- Removed patches:
  * bsc1197459.patch (upstreamed)
  * zlib-power8-fate325307.patch
    (replaced by zlib-1.2.12-optimized-crc32-power8.patch)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
    (replaced by zlib-1.2.12-IBM-Z-hw-accelrated-deflate-s390x.patch)
  * 410.patch
    (replaced by zlib-1.2.12-IBM-Z-hw-accelrated-deflate-s390x.patch)
- Refreshed patches:
  * zlib-format.patch
  * zlib-no-version-check.patch
- Disable profiling since it breaks tests
- Update zlib-rpmlintrc</changelog>
  <changelog author="danilo.spinella@suse.com" date="1665403200">- Add Power8 optimizations:
  * zlib-1.2.12-add-optimized-slide_hash-for-power.patch
  * zlib-1.2.12-add-vectorized-longest_match-for-power.patch
  * zlib-1.2.12-adler32-vector-optimizations-for-power.patch
  * zlib-1.2.12-fix-invalid-memory-access-on-ppc-and-ppc64.patch
- Update zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch</changelog>
  <changelog author="dmueller@suse.com" date="1670760000">- build zlib with optflags again</changelog>
  <changelog author="danilo.spinella@suse.com" date="1674129600">- Update to 1.13:
  * Fix configure issue that discarded provided CC definition
  * Correct incorrect inputs provided to the CRC functions
  * Repair prototypes and exporting of new CRC functions
  * Fix inflateBack to detect invalid input with distances too far
  * Have infback() deliver all of the available output up to any error
  * Fix a bug when getting a gzip header extra field with inflate()
  * Fix bug in block type selection when Z_FIXED used
  * Tighten deflateBound bounds
  * Remove deleted assembler code references
  * Various portability and appearance improvements
- Added patches:
  * zlib-1.2.13-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.13-fix-bug-deflateBound.patch
  * zlib-1.2.13-optimized-s390.patch
- Refreshed patches:
  * zlib-1.2.12-add-optimized-slide_hash-for-power.patch
  * zlib-1.2.12-add-vectorized-longest_match-for-power.patch
  * zlib-1.2.12-s390-vectorize-crc32.patch
- Removed patches:
  * zlib-1.2.12-fix-configure.patch
  * zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.12-optimized-crc32-power8.patch
  * zlib-1.2.12-correct-inputs-provided-to-crc-func.patch
  * zlib-1.2.12-fix-CVE-2022-37434.patch
  * zlib-1.2.11-optimized-s390.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1683201600">- Fix deflateBound() before deflateInit(), bsc#1210593, bsc#1211005
  bsc1210593.patch</changelog>
  <changelog author="oss@danyspin97.org" date="1697716800">- Fix CVE-2023-45853, integer overflow and resultant heap-based buffer
  overflow in zipOpenNewFileInZip4_6, bsc#1216378
  * CVE-2023-45853.patch</changelog>
</package>
<package pkgid="1f273509bd76f485a289e23791a3d9c5fec7b982fe91f59000d191d40375840d" name="libz1" arch="x86_64">
  <version epoch="0" ver="1.2.13" rel="150500.4.3.1"/>
  <changelog author="brogers@suse.com" date="1562846400">- Tweak zlib-power8-fate325307.patch to have type of crc32_vpmsum
  conform to usage
  bsc#1141059</changelog>
  <changelog author="tchvatal@suse.com" date="1563364800">- Update the s390 patchset bsc#1137624:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1571659200">- Add SUSE specific patch to fix bsc#1138793, we simply don't want
  to test if the app was linked with exactly same version of zlib
  like the one that is present on the runtime:
  * zlib-no-version-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1572350400">- Update the zlib-no-version-check.patch to be even more forgiving
  with the versions on the zlib to allow updates without rebuilds</changelog>
  <changelog author="tchvatal@suse.com" date="1587643200">- Update 410.patch to contain latest fixes from IBM bsc#1166260
  * The build behaviour changed</changelog>
  <changelog author="lidong.zhong@suse.com" date="1596715200">- Permit a deflateParams() parameter change as soon as possible(bsc#1174736)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  Fix DFLTCC not flushing EOBS when creating raw streams(bsc#1174551)
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1598529600">- Set -DDFLTCC_LEVEL_MASK=0x7e on s390/s390x jsc#13776</changelog>
  <changelog author="tchvatal@suse.com" date="1598616000">- Add patch to fix compression level switching
  bsc#1175811 bsc#1175830 bsc#1175831
  * zlib-compression-switching.patch</changelog>
  <changelog author="coolo@suse.com" date="1600257600">- Provide a testsuite subpackage to run post-build validation</changelog>
  <changelog author="lnussel@suse.de" date="1603886400">- install to /usr (boo#1029961)</changelog>
  <changelog author="ali.abdallah@suse.com" date="1604923200">- Fix hw compression on z15 bsc#1176201
- Add zlib-s390x-z15-fix-hw-compression.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1647000000">- Don't install (internal) crypt.h header in minizip
  * minizip-dont-install-crypt-header.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1648209600">- Fix memory corruption on deflate, bsc#1197459
  * bsc1197459.patch - CVE-2018-25032
- Update 410.patch
  * Remove included patches:
    bsc1174551-fxi-imcomplete-raw-streams.patch
    zlib-compression-switching.patch
    zlib-s390x-z15-fix-hw-compression.patch
- Refresh bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch</changelog>
  <changelog author="meissner@suse.com" date="1656763200">- switch to https urls</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661256000">- Update to 1.2.12:
  * A lot of bug fixes
  * Improve speed of crc32 functions
  * Use ARM crc32 instructions if the ARM architecture has them
  For the complete changes, see ChangeLog
- Fixes CVE-2022-37434,  heap-based buffer over-read or buffer overflow in
  inflate.c via a large gzip header extra field
  (CVE-2022-37434, bsc#1202175)
- Added patches:
  * zlib-1.2.11-covscan-issues-rhel9.patch
  * zlib-1.2.11-covscan-issues.patch
  * zlib-1.2.12-s390-vectorize-crc32.patch
  * zlib-1.2.12-optimized-crc32-power8.patch
  * zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.12-fix-configure.patch
  * zlib-1.2.12-correct-inputs-provided-to-crc-func.patch
  * zlib-1.2.12-fix-CVE-2022-37434.patch
  * zlib-1.2.5-minizip-fixuncrypt.patch
- Removed patches:
  * bsc1197459.patch (upstreamed)
  * zlib-power8-fate325307.patch
    (replaced by zlib-1.2.12-optimized-crc32-power8.patch)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
    (replaced by zlib-1.2.12-IBM-Z-hw-accelrated-deflate-s390x.patch)
  * 410.patch
    (replaced by zlib-1.2.12-IBM-Z-hw-accelrated-deflate-s390x.patch)
- Refreshed patches:
  * zlib-format.patch
  * zlib-no-version-check.patch
- Disable profiling since it breaks tests
- Update zlib-rpmlintrc</changelog>
  <changelog author="danilo.spinella@suse.com" date="1665403200">- Add Power8 optimizations:
  * zlib-1.2.12-add-optimized-slide_hash-for-power.patch
  * zlib-1.2.12-add-vectorized-longest_match-for-power.patch
  * zlib-1.2.12-adler32-vector-optimizations-for-power.patch
  * zlib-1.2.12-fix-invalid-memory-access-on-ppc-and-ppc64.patch
- Update zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch</changelog>
  <changelog author="dmueller@suse.com" date="1670760000">- build zlib with optflags again</changelog>
  <changelog author="danilo.spinella@suse.com" date="1674129600">- Update to 1.13:
  * Fix configure issue that discarded provided CC definition
  * Correct incorrect inputs provided to the CRC functions
  * Repair prototypes and exporting of new CRC functions
  * Fix inflateBack to detect invalid input with distances too far
  * Have infback() deliver all of the available output up to any error
  * Fix a bug when getting a gzip header extra field with inflate()
  * Fix bug in block type selection when Z_FIXED used
  * Tighten deflateBound bounds
  * Remove deleted assembler code references
  * Various portability and appearance improvements
- Added patches:
  * zlib-1.2.13-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.13-fix-bug-deflateBound.patch
  * zlib-1.2.13-optimized-s390.patch
- Refreshed patches:
  * zlib-1.2.12-add-optimized-slide_hash-for-power.patch
  * zlib-1.2.12-add-vectorized-longest_match-for-power.patch
  * zlib-1.2.12-s390-vectorize-crc32.patch
- Removed patches:
  * zlib-1.2.12-fix-configure.patch
  * zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.12-optimized-crc32-power8.patch
  * zlib-1.2.12-correct-inputs-provided-to-crc-func.patch
  * zlib-1.2.12-fix-CVE-2022-37434.patch
  * zlib-1.2.11-optimized-s390.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1683201600">- Fix deflateBound() before deflateInit(), bsc#1210593, bsc#1211005
  bsc1210593.patch</changelog>
  <changelog author="oss@danyspin97.org" date="1697716800">- Fix CVE-2023-45853, integer overflow and resultant heap-based buffer
  overflow in zipOpenNewFileInZip4_6, bsc#1216378
  * CVE-2023-45853.patch</changelog>
</package>
<package pkgid="b1e1194a07b15def9ad047df1c35b5b696e0cda319c9bf8a2734e2c06530d060" name="libzck1" arch="aarch64">
  <version epoch="0" ver="1.1.16" rel="150400.3.7.1"/>
  <changelog author="ngompa13@gmail.com" date="1530792000">- Initial packaging based on Mageia package</changelog>
  <changelog author="ngompa13@gmail.com" date="1531828800">- Update to 0.7.6
  + SHA-512 and SHA-512/128 support
  + New default chunk checksum type SHA-512/128
  + Automatic chunking moved into libzck and is now default
  + New option to disable automatic chunking
  + Bugfixes</changelog>
  <changelog author="mpluskal@suse.com" date="1531915200">- Do not manually specify dependencies which are automatically
  generated
- Make requirements of devel package less strict</changelog>
  <changelog author="ngompa13@gmail.com" date="1538222400">- Rebase to 0.9.11
  + Fix small bug where creating a zck_dl context fails when zck
    context is NULL
  + Fix security bugs found by Coverity
  + Fix test failures for zstd &lt;= 1.3.4
  + Add gen_xml_dictionary to libexecdir with zck_ prefix
  + Fix intermittent bug where auto-chunking wasn't deterministic
  + ABI (but not API change) - Use bool from stdbool.h
  + Allow specification of output file in zck
  + Set minimum and maximum chunk sizes for both automatic and
    manual chunking
  + New error handling functions
  + File format changes
  + API changes
- Make requirements between subpackages stricter to avoid issues
  due to inter-subpackage ABI/API changes</changelog>
  <changelog author="ngompa13@gmail.com" date="1538222401">- Bump meson build dependency to match meson.build requirement</changelog>
  <changelog author="aloisio@gmx.com" date="1540814400">- Update to version 0.9.13
  * Add read support for zchunk files with optional flags
  * Fix tests for zstd-1.3.6</changelog>
  <changelog author="ngompa13@gmail.com" date="1545048000">- Update to version 0.9.17
  + Turn off some tests for big-endian architectures since zstd
    isn't deterministic on them
  + Add zck_gen_zdict binary to generate optimal zdict for a zchunk file
  + Add functions to API to simplify extracting a single chunk
  + Change default zstd compression to 9 for a 6x speed increase in
    compression speed for a 5% increase in compression size
  + Switch from optional flags to more robust optional elements
  + Sanity check hex hashes passed in as an option</changelog>
  <changelog author="ngompa13@gmail.com" date="1548244800">- Update to version 1.0.2
  + Use hash table for finding identical chunks, speeding up process
    considerably
  + Add test case to verify that identical chunk checking is working</changelog>
  <changelog author="ngompa13@gmail.com" date="1548331200">- Backport patch from upstream to fix bugs discovered by Coverity
  + Add patch: 0001-Fix-some-small-bugs-found-by-Coverity.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1548331201">- Update to version 1.0.3
  + Fix some small bugs found by Coverity
  + Fix memory leak and off-by-one errors
- Drop patches part of 1.0.3 release
  + 0001-Fix-some-small-bugs-found-by-Coverity.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1554033600">- Update to version 1.1.0
  + Fix multipart boundary bug when dealing with lighttpd servers
  + Optimize chunk matching while downloading, significantly reducing CPU usage</changelog>
  <changelog author="mpluskal@suse.com" date="1576670400">- Update to version 1.1.4:
  * Simplify regex for detecting part header info
  * Fix coverity warnings
  * Open files with permissions 0666 and let umask(2) do its job.
  * Multipart boundary field can be quoted.</changelog>
  <changelog author="ngompa13@gmail.com" date="1579435200">- Update to version 1.1.5
  + Handle write errors correctly</changelog>
  <changelog author="dimstar@opensuse.org" date="1609761600">- Add d2eae512bee09a4047cfe586de12f644d73b0736.patch: Fix build
  with zstd 1.4.7+.</changelog>
  <changelog author="rpm@fthiessen.de" date="1619438400">- Update to version 1.1.9
  * Handle zstd 1.4.7+
  * Update documentation
  * unzck: require a *.zck extension
  * General bug fixes
- Dropped upstream merged
  d2eae512bee09a4047cfe586de12f644d73b0736.patch
- Add fix-test-argp.patch: Fix argp detection</changelog>
  <changelog author="rpm@fthiessen.de" date="1620043200">- Update to version 1.1.11
  * Fix memory leak of zck-&gt;prep_digest
  * Fix argp detection
  * Handle certain rare web servers that don't start with \r\n
- Drop upstream merged fix-test-argp.patch</changelog>
  <changelog author="ismail@i10z.com" date="1621080000">- Update to version 1.1.12
  * Update testsuite for zstd 1.5</changelog>
  <changelog author="ismail@i10z.com" date="1621598400">- Update to version 1.1.14
  * Final fixes for zstd 1.5 support</changelog>
  <changelog author="rpm@fthiessen.de" date="1624536000">- Update to version 1.1.16
  * Fix major bug when compressing with dictionary</changelog>
  <changelog author="ali.abdallah@suse.com" date="1697716800">- Fix CVE-2023-46228, bsc#1216268
  * Handle overflow errors in malformed zchunk files.
- Added patch:
  * CVE-2023-46228.patch</changelog>
</package>
<package pkgid="3bf8a4ae69befc7ff94157d51adbc143d93c11e12ee56fcde8c7929f0d06850e" name="libzck1" arch="s390x">
  <version epoch="0" ver="1.1.16" rel="150400.3.7.1"/>
  <changelog author="ngompa13@gmail.com" date="1530792000">- Initial packaging based on Mageia package</changelog>
  <changelog author="ngompa13@gmail.com" date="1531828800">- Update to 0.7.6
  + SHA-512 and SHA-512/128 support
  + New default chunk checksum type SHA-512/128
  + Automatic chunking moved into libzck and is now default
  + New option to disable automatic chunking
  + Bugfixes</changelog>
  <changelog author="mpluskal@suse.com" date="1531915200">- Do not manually specify dependencies which are automatically
  generated
- Make requirements of devel package less strict</changelog>
  <changelog author="ngompa13@gmail.com" date="1538222400">- Rebase to 0.9.11
  + Fix small bug where creating a zck_dl context fails when zck
    context is NULL
  + Fix security bugs found by Coverity
  + Fix test failures for zstd &lt;= 1.3.4
  + Add gen_xml_dictionary to libexecdir with zck_ prefix
  + Fix intermittent bug where auto-chunking wasn't deterministic
  + ABI (but not API change) - Use bool from stdbool.h
  + Allow specification of output file in zck
  + Set minimum and maximum chunk sizes for both automatic and
    manual chunking
  + New error handling functions
  + File format changes
  + API changes
- Make requirements between subpackages stricter to avoid issues
  due to inter-subpackage ABI/API changes</changelog>
  <changelog author="ngompa13@gmail.com" date="1538222401">- Bump meson build dependency to match meson.build requirement</changelog>
  <changelog author="aloisio@gmx.com" date="1540814400">- Update to version 0.9.13
  * Add read support for zchunk files with optional flags
  * Fix tests for zstd-1.3.6</changelog>
  <changelog author="ngompa13@gmail.com" date="1545048000">- Update to version 0.9.17
  + Turn off some tests for big-endian architectures since zstd
    isn't deterministic on them
  + Add zck_gen_zdict binary to generate optimal zdict for a zchunk file
  + Add functions to API to simplify extracting a single chunk
  + Change default zstd compression to 9 for a 6x speed increase in
    compression speed for a 5% increase in compression size
  + Switch from optional flags to more robust optional elements
  + Sanity check hex hashes passed in as an option</changelog>
  <changelog author="ngompa13@gmail.com" date="1548244800">- Update to version 1.0.2
  + Use hash table for finding identical chunks, speeding up process
    considerably
  + Add test case to verify that identical chunk checking is working</changelog>
  <changelog author="ngompa13@gmail.com" date="1548331200">- Backport patch from upstream to fix bugs discovered by Coverity
  + Add patch: 0001-Fix-some-small-bugs-found-by-Coverity.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1548331201">- Update to version 1.0.3
  + Fix some small bugs found by Coverity
  + Fix memory leak and off-by-one errors
- Drop patches part of 1.0.3 release
  + 0001-Fix-some-small-bugs-found-by-Coverity.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1554033600">- Update to version 1.1.0
  + Fix multipart boundary bug when dealing with lighttpd servers
  + Optimize chunk matching while downloading, significantly reducing CPU usage</changelog>
  <changelog author="mpluskal@suse.com" date="1576670400">- Update to version 1.1.4:
  * Simplify regex for detecting part header info
  * Fix coverity warnings
  * Open files with permissions 0666 and let umask(2) do its job.
  * Multipart boundary field can be quoted.</changelog>
  <changelog author="ngompa13@gmail.com" date="1579435200">- Update to version 1.1.5
  + Handle write errors correctly</changelog>
  <changelog author="dimstar@opensuse.org" date="1609761600">- Add d2eae512bee09a4047cfe586de12f644d73b0736.patch: Fix build
  with zstd 1.4.7+.</changelog>
  <changelog author="rpm@fthiessen.de" date="1619438400">- Update to version 1.1.9
  * Handle zstd 1.4.7+
  * Update documentation
  * unzck: require a *.zck extension
  * General bug fixes
- Dropped upstream merged
  d2eae512bee09a4047cfe586de12f644d73b0736.patch
- Add fix-test-argp.patch: Fix argp detection</changelog>
  <changelog author="rpm@fthiessen.de" date="1620043200">- Update to version 1.1.11
  * Fix memory leak of zck-&gt;prep_digest
  * Fix argp detection
  * Handle certain rare web servers that don't start with \r\n
- Drop upstream merged fix-test-argp.patch</changelog>
  <changelog author="ismail@i10z.com" date="1621080000">- Update to version 1.1.12
  * Update testsuite for zstd 1.5</changelog>
  <changelog author="ismail@i10z.com" date="1621598400">- Update to version 1.1.14
  * Final fixes for zstd 1.5 support</changelog>
  <changelog author="rpm@fthiessen.de" date="1624536000">- Update to version 1.1.16
  * Fix major bug when compressing with dictionary</changelog>
  <changelog author="ali.abdallah@suse.com" date="1697716800">- Fix CVE-2023-46228, bsc#1216268
  * Handle overflow errors in malformed zchunk files.
- Added patch:
  * CVE-2023-46228.patch</changelog>
</package>
<package pkgid="2bcb4da09db4f7ce96345a1b6c7226d417f5983857b16eec0f529ad325299de5" name="libzck1" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="150400.3.7.1"/>
  <changelog author="ngompa13@gmail.com" date="1530792000">- Initial packaging based on Mageia package</changelog>
  <changelog author="ngompa13@gmail.com" date="1531828800">- Update to 0.7.6
  + SHA-512 and SHA-512/128 support
  + New default chunk checksum type SHA-512/128
  + Automatic chunking moved into libzck and is now default
  + New option to disable automatic chunking
  + Bugfixes</changelog>
  <changelog author="mpluskal@suse.com" date="1531915200">- Do not manually specify dependencies which are automatically
  generated
- Make requirements of devel package less strict</changelog>
  <changelog author="ngompa13@gmail.com" date="1538222400">- Rebase to 0.9.11
  + Fix small bug where creating a zck_dl context fails when zck
    context is NULL
  + Fix security bugs found by Coverity
  + Fix test failures for zstd &lt;= 1.3.4
  + Add gen_xml_dictionary to libexecdir with zck_ prefix
  + Fix intermittent bug where auto-chunking wasn't deterministic
  + ABI (but not API change) - Use bool from stdbool.h
  + Allow specification of output file in zck
  + Set minimum and maximum chunk sizes for both automatic and
    manual chunking
  + New error handling functions
  + File format changes
  + API changes
- Make requirements between subpackages stricter to avoid issues
  due to inter-subpackage ABI/API changes</changelog>
  <changelog author="ngompa13@gmail.com" date="1538222401">- Bump meson build dependency to match meson.build requirement</changelog>
  <changelog author="aloisio@gmx.com" date="1540814400">- Update to version 0.9.13
  * Add read support for zchunk files with optional flags
  * Fix tests for zstd-1.3.6</changelog>
  <changelog author="ngompa13@gmail.com" date="1545048000">- Update to version 0.9.17
  + Turn off some tests for big-endian architectures since zstd
    isn't deterministic on them
  + Add zck_gen_zdict binary to generate optimal zdict for a zchunk file
  + Add functions to API to simplify extracting a single chunk
  + Change default zstd compression to 9 for a 6x speed increase in
    compression speed for a 5% increase in compression size
  + Switch from optional flags to more robust optional elements
  + Sanity check hex hashes passed in as an option</changelog>
  <changelog author="ngompa13@gmail.com" date="1548244800">- Update to version 1.0.2
  + Use hash table for finding identical chunks, speeding up process
    considerably
  + Add test case to verify that identical chunk checking is working</changelog>
  <changelog author="ngompa13@gmail.com" date="1548331200">- Backport patch from upstream to fix bugs discovered by Coverity
  + Add patch: 0001-Fix-some-small-bugs-found-by-Coverity.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1548331201">- Update to version 1.0.3
  + Fix some small bugs found by Coverity
  + Fix memory leak and off-by-one errors
- Drop patches part of 1.0.3 release
  + 0001-Fix-some-small-bugs-found-by-Coverity.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1554033600">- Update to version 1.1.0
  + Fix multipart boundary bug when dealing with lighttpd servers
  + Optimize chunk matching while downloading, significantly reducing CPU usage</changelog>
  <changelog author="mpluskal@suse.com" date="1576670400">- Update to version 1.1.4:
  * Simplify regex for detecting part header info
  * Fix coverity warnings
  * Open files with permissions 0666 and let umask(2) do its job.
  * Multipart boundary field can be quoted.</changelog>
  <changelog author="ngompa13@gmail.com" date="1579435200">- Update to version 1.1.5
  + Handle write errors correctly</changelog>
  <changelog author="dimstar@opensuse.org" date="1609761600">- Add d2eae512bee09a4047cfe586de12f644d73b0736.patch: Fix build
  with zstd 1.4.7+.</changelog>
  <changelog author="rpm@fthiessen.de" date="1619438400">- Update to version 1.1.9
  * Handle zstd 1.4.7+
  * Update documentation
  * unzck: require a *.zck extension
  * General bug fixes
- Dropped upstream merged
  d2eae512bee09a4047cfe586de12f644d73b0736.patch
- Add fix-test-argp.patch: Fix argp detection</changelog>
  <changelog author="rpm@fthiessen.de" date="1620043200">- Update to version 1.1.11
  * Fix memory leak of zck-&gt;prep_digest
  * Fix argp detection
  * Handle certain rare web servers that don't start with \r\n
- Drop upstream merged fix-test-argp.patch</changelog>
  <changelog author="ismail@i10z.com" date="1621080000">- Update to version 1.1.12
  * Update testsuite for zstd 1.5</changelog>
  <changelog author="ismail@i10z.com" date="1621598400">- Update to version 1.1.14
  * Final fixes for zstd 1.5 support</changelog>
  <changelog author="rpm@fthiessen.de" date="1624536000">- Update to version 1.1.16
  * Fix major bug when compressing with dictionary</changelog>
  <changelog author="ali.abdallah@suse.com" date="1697716800">- Fix CVE-2023-46228, bsc#1216268
  * Handle overflow errors in malformed zchunk files.
- Added patch:
  * CVE-2023-46228.patch</changelog>
</package>
<package pkgid="0a2dda9365101da0fddf9380e9b041b09705cbab8434ca42b84bec9bb9a4e933" name="libzypp" arch="aarch64">
  <version epoch="0" ver="17.31.22" rel="150400.3.43.1"/>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
  <changelog author="ma@suse.de" date="1687953600">- Fix build against protobuf &gt;= 22 (fixes #465, closes #466)
  Port away from protobuf_generate_cpp. Upstream protobuf does not
  export protobuf_generate_cpp by default anymore.
  Use protobuf_generate instead, which is also available on older
  versions.
- Remove SUSE &lt; SLE11 constructs (fixes #464).
- version 17.31.15 (22)</changelog>
  <changelog author="ma@suse.de" date="1690200000">- Fix negative ZYPP_LOCK_TIMEOUT not waiting forever (bsc#1213231)
- Don't cleanup orphaned dirs if read-only mode was promised
  (bsc#1210740)
- version 17.31.16 (22)</changelog>
  <changelog author="ma@suse.de" date="1690545600">- Fix wrong filesize exceeded dl abort in zyppng::Downloader
  (bsc#1213673)
  In some cases when downloading very small files we can run into
  issues when the URL is protected by credentials.
- version 17.31.17 (22)</changelog>
  <changelog author="ma@suse.de" date="1691150400">- SINGLE_RPMTRANS: Respect ZYPP_READONLY_HACK when checking the
  zypp-rpm lock (fixes openSUSE/openSUSE-repos#29)
- version 17.31.18 (22)</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
</package>
<package pkgid="85caf8c38b1a3a921e6541f72fd5c314e5c5a8eb4a1df1bcfdc91af71bd93fef" name="libzypp" arch="s390x">
  <version epoch="0" ver="17.31.22" rel="150400.3.43.1"/>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
  <changelog author="ma@suse.de" date="1687953600">- Fix build against protobuf &gt;= 22 (fixes #465, closes #466)
  Port away from protobuf_generate_cpp. Upstream protobuf does not
  export protobuf_generate_cpp by default anymore.
  Use protobuf_generate instead, which is also available on older
  versions.
- Remove SUSE &lt; SLE11 constructs (fixes #464).
- version 17.31.15 (22)</changelog>
  <changelog author="ma@suse.de" date="1690200000">- Fix negative ZYPP_LOCK_TIMEOUT not waiting forever (bsc#1213231)
- Don't cleanup orphaned dirs if read-only mode was promised
  (bsc#1210740)
- version 17.31.16 (22)</changelog>
  <changelog author="ma@suse.de" date="1690545600">- Fix wrong filesize exceeded dl abort in zyppng::Downloader
  (bsc#1213673)
  In some cases when downloading very small files we can run into
  issues when the URL is protected by credentials.
- version 17.31.17 (22)</changelog>
  <changelog author="ma@suse.de" date="1691150400">- SINGLE_RPMTRANS: Respect ZYPP_READONLY_HACK when checking the
  zypp-rpm lock (fixes openSUSE/openSUSE-repos#29)
- version 17.31.18 (22)</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
</package>
<package pkgid="8b49afae239983438bd38763e487d0440d1d1a511d5265588be0e71b4db74d36" name="libzypp" arch="src">
  <version epoch="0" ver="17.31.22" rel="150400.3.43.1"/>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
  <changelog author="ma@suse.de" date="1687953600">- Fix build against protobuf &gt;= 22 (fixes #465, closes #466)
  Port away from protobuf_generate_cpp. Upstream protobuf does not
  export protobuf_generate_cpp by default anymore.
  Use protobuf_generate instead, which is also available on older
  versions.
- Remove SUSE &lt; SLE11 constructs (fixes #464).
- version 17.31.15 (22)</changelog>
  <changelog author="ma@suse.de" date="1690200000">- Fix negative ZYPP_LOCK_TIMEOUT not waiting forever (bsc#1213231)
- Don't cleanup orphaned dirs if read-only mode was promised
  (bsc#1210740)
- version 17.31.16 (22)</changelog>
  <changelog author="ma@suse.de" date="1690545600">- Fix wrong filesize exceeded dl abort in zyppng::Downloader
  (bsc#1213673)
  In some cases when downloading very small files we can run into
  issues when the URL is protected by credentials.
- version 17.31.17 (22)</changelog>
  <changelog author="ma@suse.de" date="1691150400">- SINGLE_RPMTRANS: Respect ZYPP_READONLY_HACK when checking the
  zypp-rpm lock (fixes openSUSE/openSUSE-repos#29)
- version 17.31.18 (22)</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
</package>
<package pkgid="b02fdd271fa5facd65451534b2a1775e52537f26f368f4014a44b58a0d3b49e6" name="libzypp" arch="x86_64">
  <version epoch="0" ver="17.31.22" rel="150400.3.43.1"/>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
  <changelog author="ma@suse.de" date="1687953600">- Fix build against protobuf &gt;= 22 (fixes #465, closes #466)
  Port away from protobuf_generate_cpp. Upstream protobuf does not
  export protobuf_generate_cpp by default anymore.
  Use protobuf_generate instead, which is also available on older
  versions.
- Remove SUSE &lt; SLE11 constructs (fixes #464).
- version 17.31.15 (22)</changelog>
  <changelog author="ma@suse.de" date="1690200000">- Fix negative ZYPP_LOCK_TIMEOUT not waiting forever (bsc#1213231)
- Don't cleanup orphaned dirs if read-only mode was promised
  (bsc#1210740)
- version 17.31.16 (22)</changelog>
  <changelog author="ma@suse.de" date="1690545600">- Fix wrong filesize exceeded dl abort in zyppng::Downloader
  (bsc#1213673)
  In some cases when downloading very small files we can run into
  issues when the URL is protected by credentials.
- version 17.31.17 (22)</changelog>
  <changelog author="ma@suse.de" date="1691150400">- SINGLE_RPMTRANS: Respect ZYPP_READONLY_HACK when checking the
  zypp-rpm lock (fixes openSUSE/openSUSE-repos#29)
- version 17.31.18 (22)</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
</package>
<package pkgid="4f1cbb991ba722f5f616bef4fbc019fe32be449e32b0f08269d51c2257ad64ac" name="libzypp" arch="aarch64">
  <version epoch="0" ver="17.31.27" rel="150400.3.49.1"/>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
  <changelog author="ma@suse.de" date="1687953600">- Fix build against protobuf &gt;= 22 (fixes #465, closes #466)
  Port away from protobuf_generate_cpp. Upstream protobuf does not
  export protobuf_generate_cpp by default anymore.
  Use protobuf_generate instead, which is also available on older
  versions.
- Remove SUSE &lt; SLE11 constructs (fixes #464).
- version 17.31.15 (22)</changelog>
  <changelog author="ma@suse.de" date="1690200000">- Fix negative ZYPP_LOCK_TIMEOUT not waiting forever (bsc#1213231)
- Don't cleanup orphaned dirs if read-only mode was promised
  (bsc#1210740)
- version 17.31.16 (22)</changelog>
  <changelog author="ma@suse.de" date="1690545600">- Fix wrong filesize exceeded dl abort in zyppng::Downloader
  (bsc#1213673)
  In some cases when downloading very small files we can run into
  issues when the URL is protected by credentials.
- version 17.31.17 (22)</changelog>
  <changelog author="ma@suse.de" date="1691150400">- SINGLE_RPMTRANS: Respect ZYPP_READONLY_HACK when checking the
  zypp-rpm lock (fixes openSUSE/openSUSE-repos#29)
- version 17.31.18 (22)</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
  <changelog author="ma@suse.de" date="1698235200">- Stop using boost version 1 timer library (fixes #489,
  bsc#1215294)
- version 17.31.23 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555200">- Open rpmdb just once during execution of %posttrans scripts
  (bsc#1216412)
- Avoid using select() since it does not support fd numbers &gt;
  1024 (fixes #447)
- tools/DownloadFiles: use standard zypp progress bar (fixes #489)
- Revert "Color download progress bar" (fixes #475)
  Cyan is already used for the output of RPM scriptlets. Avoid this
  colorific collision between download progress bar and scriptlet
  output.
- Fix ProgressBar's calculation of the printed tag position (fixes #494)
- Switch zypp::Digest to Openssl 3.0 Provider API (fixes #144)
- Fix usage of deprecated CURL features (fixes #486)
- version 17.31.24 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555201">- Fix build issue with zchunk build flags (fixes #500)
- version 17.31.25 (22)</changelog>
  <changelog author="ma@suse.de" date="1703160000">- Call zypp commit plugins during transactional update (fixes #506)
- Add support for loongarch64 (fixes #504)
- Teach MediaMultiCurl to download HTTP Multibyte ranges.
- Teach zsync downloads to MultiCurl.
- Expand RepoVars in URLs downloading a .repo file (bsc#1212160)
  Convenient and helps documentation as it may refer to a single
  command for a bunch of distributions. Like e.g. "zypper ar
  'https://server.my/$releasever/my.repo'".
- version 17.31.26 (22)</changelog>
  <changelog author="ma@suse.de" date="1703246400">- CheckAccessDeleted: fix 'running in container' filter
  (bsc#1218291)
- version 17.31.27 (22)</changelog>
</package>
<package pkgid="50d714e255864e27e828688f1f97e4178d04c199a9e1f726623c32b716cc3229" name="libzypp" arch="s390x">
  <version epoch="0" ver="17.31.27" rel="150400.3.49.1"/>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
  <changelog author="ma@suse.de" date="1687953600">- Fix build against protobuf &gt;= 22 (fixes #465, closes #466)
  Port away from protobuf_generate_cpp. Upstream protobuf does not
  export protobuf_generate_cpp by default anymore.
  Use protobuf_generate instead, which is also available on older
  versions.
- Remove SUSE &lt; SLE11 constructs (fixes #464).
- version 17.31.15 (22)</changelog>
  <changelog author="ma@suse.de" date="1690200000">- Fix negative ZYPP_LOCK_TIMEOUT not waiting forever (bsc#1213231)
- Don't cleanup orphaned dirs if read-only mode was promised
  (bsc#1210740)
- version 17.31.16 (22)</changelog>
  <changelog author="ma@suse.de" date="1690545600">- Fix wrong filesize exceeded dl abort in zyppng::Downloader
  (bsc#1213673)
  In some cases when downloading very small files we can run into
  issues when the URL is protected by credentials.
- version 17.31.17 (22)</changelog>
  <changelog author="ma@suse.de" date="1691150400">- SINGLE_RPMTRANS: Respect ZYPP_READONLY_HACK when checking the
  zypp-rpm lock (fixes openSUSE/openSUSE-repos#29)
- version 17.31.18 (22)</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
  <changelog author="ma@suse.de" date="1698235200">- Stop using boost version 1 timer library (fixes #489,
  bsc#1215294)
- version 17.31.23 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555200">- Open rpmdb just once during execution of %posttrans scripts
  (bsc#1216412)
- Avoid using select() since it does not support fd numbers &gt;
  1024 (fixes #447)
- tools/DownloadFiles: use standard zypp progress bar (fixes #489)
- Revert "Color download progress bar" (fixes #475)
  Cyan is already used for the output of RPM scriptlets. Avoid this
  colorific collision between download progress bar and scriptlet
  output.
- Fix ProgressBar's calculation of the printed tag position (fixes #494)
- Switch zypp::Digest to Openssl 3.0 Provider API (fixes #144)
- Fix usage of deprecated CURL features (fixes #486)
- version 17.31.24 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555201">- Fix build issue with zchunk build flags (fixes #500)
- version 17.31.25 (22)</changelog>
  <changelog author="ma@suse.de" date="1703160000">- Call zypp commit plugins during transactional update (fixes #506)
- Add support for loongarch64 (fixes #504)
- Teach MediaMultiCurl to download HTTP Multibyte ranges.
- Teach zsync downloads to MultiCurl.
- Expand RepoVars in URLs downloading a .repo file (bsc#1212160)
  Convenient and helps documentation as it may refer to a single
  command for a bunch of distributions. Like e.g. "zypper ar
  'https://server.my/$releasever/my.repo'".
- version 17.31.26 (22)</changelog>
  <changelog author="ma@suse.de" date="1703246400">- CheckAccessDeleted: fix 'running in container' filter
  (bsc#1218291)
- version 17.31.27 (22)</changelog>
</package>
<package pkgid="036cad81d2ccad0b755ee6906a7961b8c352db9447c2c3369a38cc35d8b5eced" name="libzypp" arch="src">
  <version epoch="0" ver="17.31.27" rel="150400.3.49.1"/>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
  <changelog author="ma@suse.de" date="1687953600">- Fix build against protobuf &gt;= 22 (fixes #465, closes #466)
  Port away from protobuf_generate_cpp. Upstream protobuf does not
  export protobuf_generate_cpp by default anymore.
  Use protobuf_generate instead, which is also available on older
  versions.
- Remove SUSE &lt; SLE11 constructs (fixes #464).
- version 17.31.15 (22)</changelog>
  <changelog author="ma@suse.de" date="1690200000">- Fix negative ZYPP_LOCK_TIMEOUT not waiting forever (bsc#1213231)
- Don't cleanup orphaned dirs if read-only mode was promised
  (bsc#1210740)
- version 17.31.16 (22)</changelog>
  <changelog author="ma@suse.de" date="1690545600">- Fix wrong filesize exceeded dl abort in zyppng::Downloader
  (bsc#1213673)
  In some cases when downloading very small files we can run into
  issues when the URL is protected by credentials.
- version 17.31.17 (22)</changelog>
  <changelog author="ma@suse.de" date="1691150400">- SINGLE_RPMTRANS: Respect ZYPP_READONLY_HACK when checking the
  zypp-rpm lock (fixes openSUSE/openSUSE-repos#29)
- version 17.31.18 (22)</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
  <changelog author="ma@suse.de" date="1698235200">- Stop using boost version 1 timer library (fixes #489,
  bsc#1215294)
- version 17.31.23 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555200">- Open rpmdb just once during execution of %posttrans scripts
  (bsc#1216412)
- Avoid using select() since it does not support fd numbers &gt;
  1024 (fixes #447)
- tools/DownloadFiles: use standard zypp progress bar (fixes #489)
- Revert "Color download progress bar" (fixes #475)
  Cyan is already used for the output of RPM scriptlets. Avoid this
  colorific collision between download progress bar and scriptlet
  output.
- Fix ProgressBar's calculation of the printed tag position (fixes #494)
- Switch zypp::Digest to Openssl 3.0 Provider API (fixes #144)
- Fix usage of deprecated CURL features (fixes #486)
- version 17.31.24 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555201">- Fix build issue with zchunk build flags (fixes #500)
- version 17.31.25 (22)</changelog>
  <changelog author="ma@suse.de" date="1703160000">- Call zypp commit plugins during transactional update (fixes #506)
- Add support for loongarch64 (fixes #504)
- Teach MediaMultiCurl to download HTTP Multibyte ranges.
- Teach zsync downloads to MultiCurl.
- Expand RepoVars in URLs downloading a .repo file (bsc#1212160)
  Convenient and helps documentation as it may refer to a single
  command for a bunch of distributions. Like e.g. "zypper ar
  'https://server.my/$releasever/my.repo'".
- version 17.31.26 (22)</changelog>
  <changelog author="ma@suse.de" date="1703246400">- CheckAccessDeleted: fix 'running in container' filter
  (bsc#1218291)
- version 17.31.27 (22)</changelog>
</package>
<package pkgid="42006bd229abae16ede14f5a60032f33924c10f30bc4619289e632b7502fcbf8" name="libzypp" arch="x86_64">
  <version epoch="0" ver="17.31.27" rel="150400.3.49.1"/>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
  <changelog author="ma@suse.de" date="1687953600">- Fix build against protobuf &gt;= 22 (fixes #465, closes #466)
  Port away from protobuf_generate_cpp. Upstream protobuf does not
  export protobuf_generate_cpp by default anymore.
  Use protobuf_generate instead, which is also available on older
  versions.
- Remove SUSE &lt; SLE11 constructs (fixes #464).
- version 17.31.15 (22)</changelog>
  <changelog author="ma@suse.de" date="1690200000">- Fix negative ZYPP_LOCK_TIMEOUT not waiting forever (bsc#1213231)
- Don't cleanup orphaned dirs if read-only mode was promised
  (bsc#1210740)
- version 17.31.16 (22)</changelog>
  <changelog author="ma@suse.de" date="1690545600">- Fix wrong filesize exceeded dl abort in zyppng::Downloader
  (bsc#1213673)
  In some cases when downloading very small files we can run into
  issues when the URL is protected by credentials.
- version 17.31.17 (22)</changelog>
  <changelog author="ma@suse.de" date="1691150400">- SINGLE_RPMTRANS: Respect ZYPP_READONLY_HACK when checking the
  zypp-rpm lock (fixes openSUSE/openSUSE-repos#29)
- version 17.31.18 (22)</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
  <changelog author="ma@suse.de" date="1698235200">- Stop using boost version 1 timer library (fixes #489,
  bsc#1215294)
- version 17.31.23 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555200">- Open rpmdb just once during execution of %posttrans scripts
  (bsc#1216412)
- Avoid using select() since it does not support fd numbers &gt;
  1024 (fixes #447)
- tools/DownloadFiles: use standard zypp progress bar (fixes #489)
- Revert "Color download progress bar" (fixes #475)
  Cyan is already used for the output of RPM scriptlets. Avoid this
  colorific collision between download progress bar and scriptlet
  output.
- Fix ProgressBar's calculation of the printed tag position (fixes #494)
- Switch zypp::Digest to Openssl 3.0 Provider API (fixes #144)
- Fix usage of deprecated CURL features (fixes #486)
- version 17.31.24 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555201">- Fix build issue with zchunk build flags (fixes #500)
- version 17.31.25 (22)</changelog>
  <changelog author="ma@suse.de" date="1703160000">- Call zypp commit plugins during transactional update (fixes #506)
- Add support for loongarch64 (fixes #504)
- Teach MediaMultiCurl to download HTTP Multibyte ranges.
- Teach zsync downloads to MultiCurl.
- Expand RepoVars in URLs downloading a .repo file (bsc#1212160)
  Convenient and helps documentation as it may refer to a single
  command for a bunch of distributions. Like e.g. "zypper ar
  'https://server.my/$releasever/my.repo'".
- version 17.31.26 (22)</changelog>
  <changelog author="ma@suse.de" date="1703246400">- CheckAccessDeleted: fix 'running in container' filter
  (bsc#1218291)
- version 17.31.27 (22)</changelog>
</package>
<package pkgid="c92b51adbbd0e515d91a61e30211a8c6ed1ef4591742db08375aa8c6990da349" name="libzypp" arch="aarch64">
  <version epoch="0" ver="17.31.31" rel="150400.3.52.2"/>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
  <changelog author="ma@suse.de" date="1687953600">- Fix build against protobuf &gt;= 22 (fixes #465, closes #466)
  Port away from protobuf_generate_cpp. Upstream protobuf does not
  export protobuf_generate_cpp by default anymore.
  Use protobuf_generate instead, which is also available on older
  versions.
- Remove SUSE &lt; SLE11 constructs (fixes #464).
- version 17.31.15 (22)</changelog>
  <changelog author="ma@suse.de" date="1690200000">- Fix negative ZYPP_LOCK_TIMEOUT not waiting forever (bsc#1213231)
- Don't cleanup orphaned dirs if read-only mode was promised
  (bsc#1210740)
- version 17.31.16 (22)</changelog>
  <changelog author="ma@suse.de" date="1690545600">- Fix wrong filesize exceeded dl abort in zyppng::Downloader
  (bsc#1213673)
  In some cases when downloading very small files we can run into
  issues when the URL is protected by credentials.
- version 17.31.17 (22)</changelog>
  <changelog author="ma@suse.de" date="1691150400">- SINGLE_RPMTRANS: Respect ZYPP_READONLY_HACK when checking the
  zypp-rpm lock (fixes openSUSE/openSUSE-repos#29)
- version 17.31.18 (22)</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
  <changelog author="ma@suse.de" date="1698235200">- Stop using boost version 1 timer library (fixes #489,
  bsc#1215294)
- version 17.31.23 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555200">- Open rpmdb just once during execution of %posttrans scripts
  (bsc#1216412)
- Avoid using select() since it does not support fd numbers &gt;
  1024 (fixes #447)
- tools/DownloadFiles: use standard zypp progress bar (fixes #489)
- Revert "Color download progress bar" (fixes #475)
  Cyan is already used for the output of RPM scriptlets. Avoid this
  colorific collision between download progress bar and scriptlet
  output.
- Fix ProgressBar's calculation of the printed tag position (fixes #494)
- Switch zypp::Digest to Openssl 3.0 Provider API (fixes #144)
- Fix usage of deprecated CURL features (fixes #486)
- version 17.31.24 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555201">- Fix build issue with zchunk build flags (fixes #500)
- version 17.31.25 (22)</changelog>
  <changelog author="ma@suse.de" date="1703160000">- Call zypp commit plugins during transactional update (fixes #506)
- Add support for loongarch64 (fixes #504)
- Teach MediaMultiCurl to download HTTP Multibyte ranges.
- Teach zsync downloads to MultiCurl.
- Expand RepoVars in URLs downloading a .repo file (bsc#1212160)
  Convenient and helps documentation as it may refer to a single
  command for a bunch of distributions. Like e.g. "zypper ar
  'https://server.my/$releasever/my.repo'".
- version 17.31.26 (22)</changelog>
  <changelog author="ma@suse.de" date="1703246400">- CheckAccessDeleted: fix 'running in container' filter
  (bsc#1218291)
- version 17.31.27 (22)</changelog>
  <changelog author="ma@suse.de" date="1704801600">- Fix to build with libxml 2.12.x (fixes #505)
- version 17.31.28 (22)</changelog>
  <changelog author="ma@suse.de" date="1706011200">- CheckAccessDeleted: fix running_in_container detection
  (bsc#1218782)
- Detect CURLOPT_REDIR_PROTOCOLS_STR availability at runtime
  (bsc#1218831)
- Make Wakeup class EINTR safe.
- Add a way to cancel media operations on shutdown
  (openSUSE/zypper#522)
  This patch adds a mechanism to signal libzypp that a shutdown was
  requested, usually when CTRL+C was pressed by the user. Currently
  only the media backend will utilize this, but can be extended to
  all code paths that use g_poll() to wait for events.
- Manually poll fds for curl in MediaCurl.
  Using curl_easy_perform does not give us the required control on
  when we want to cancel a download. Switching to the MultiCurl
  implementation with a external poll() event loop will give us
  much more freedom and helps us to improve our Ctrl+C handling.
- Move reusable curl poll code to curlhelper.h.
- version 17.31.29 (22)</changelog>
  <changelog author="ma@suse.de" date="1707220800">- applydeltaprm: Create target directory if it does not exist
  (bsc#1219442)
- Add ProblemSolution::skipsPatchesOnly (for openSUSE/zypper#514)
- Fix problems with EINTR in ExternalDataSource::getline (fixes
  bsc#1215698)
- version 17.31.30 (22)</changelog>
  <changelog author="ma@suse.de" date="1707307200">- tui: allow to access the underlying ostream of out::Info.
- Add MLSep: Helper to produce not-NL-terminated multi line
  output.
- version 17.31.31 (22)</changelog>
</package>
<package pkgid="ceb75ba8dba04ca7fd2317e35b45dd7365056e25e26039e56a74fb36bedb5e58" name="libzypp" arch="s390x">
  <version epoch="0" ver="17.31.31" rel="150400.3.52.2"/>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
  <changelog author="ma@suse.de" date="1687953600">- Fix build against protobuf &gt;= 22 (fixes #465, closes #466)
  Port away from protobuf_generate_cpp. Upstream protobuf does not
  export protobuf_generate_cpp by default anymore.
  Use protobuf_generate instead, which is also available on older
  versions.
- Remove SUSE &lt; SLE11 constructs (fixes #464).
- version 17.31.15 (22)</changelog>
  <changelog author="ma@suse.de" date="1690200000">- Fix negative ZYPP_LOCK_TIMEOUT not waiting forever (bsc#1213231)
- Don't cleanup orphaned dirs if read-only mode was promised
  (bsc#1210740)
- version 17.31.16 (22)</changelog>
  <changelog author="ma@suse.de" date="1690545600">- Fix wrong filesize exceeded dl abort in zyppng::Downloader
  (bsc#1213673)
  In some cases when downloading very small files we can run into
  issues when the URL is protected by credentials.
- version 17.31.17 (22)</changelog>
  <changelog author="ma@suse.de" date="1691150400">- SINGLE_RPMTRANS: Respect ZYPP_READONLY_HACK when checking the
  zypp-rpm lock (fixes openSUSE/openSUSE-repos#29)
- version 17.31.18 (22)</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
  <changelog author="ma@suse.de" date="1698235200">- Stop using boost version 1 timer library (fixes #489,
  bsc#1215294)
- version 17.31.23 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555200">- Open rpmdb just once during execution of %posttrans scripts
  (bsc#1216412)
- Avoid using select() since it does not support fd numbers &gt;
  1024 (fixes #447)
- tools/DownloadFiles: use standard zypp progress bar (fixes #489)
- Revert "Color download progress bar" (fixes #475)
  Cyan is already used for the output of RPM scriptlets. Avoid this
  colorific collision between download progress bar and scriptlet
  output.
- Fix ProgressBar's calculation of the printed tag position (fixes #494)
- Switch zypp::Digest to Openssl 3.0 Provider API (fixes #144)
- Fix usage of deprecated CURL features (fixes #486)
- version 17.31.24 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555201">- Fix build issue with zchunk build flags (fixes #500)
- version 17.31.25 (22)</changelog>
  <changelog author="ma@suse.de" date="1703160000">- Call zypp commit plugins during transactional update (fixes #506)
- Add support for loongarch64 (fixes #504)
- Teach MediaMultiCurl to download HTTP Multibyte ranges.
- Teach zsync downloads to MultiCurl.
- Expand RepoVars in URLs downloading a .repo file (bsc#1212160)
  Convenient and helps documentation as it may refer to a single
  command for a bunch of distributions. Like e.g. "zypper ar
  'https://server.my/$releasever/my.repo'".
- version 17.31.26 (22)</changelog>
  <changelog author="ma@suse.de" date="1703246400">- CheckAccessDeleted: fix 'running in container' filter
  (bsc#1218291)
- version 17.31.27 (22)</changelog>
  <changelog author="ma@suse.de" date="1704801600">- Fix to build with libxml 2.12.x (fixes #505)
- version 17.31.28 (22)</changelog>
  <changelog author="ma@suse.de" date="1706011200">- CheckAccessDeleted: fix running_in_container detection
  (bsc#1218782)
- Detect CURLOPT_REDIR_PROTOCOLS_STR availability at runtime
  (bsc#1218831)
- Make Wakeup class EINTR safe.
- Add a way to cancel media operations on shutdown
  (openSUSE/zypper#522)
  This patch adds a mechanism to signal libzypp that a shutdown was
  requested, usually when CTRL+C was pressed by the user. Currently
  only the media backend will utilize this, but can be extended to
  all code paths that use g_poll() to wait for events.
- Manually poll fds for curl in MediaCurl.
  Using curl_easy_perform does not give us the required control on
  when we want to cancel a download. Switching to the MultiCurl
  implementation with a external poll() event loop will give us
  much more freedom and helps us to improve our Ctrl+C handling.
- Move reusable curl poll code to curlhelper.h.
- version 17.31.29 (22)</changelog>
  <changelog author="ma@suse.de" date="1707220800">- applydeltaprm: Create target directory if it does not exist
  (bsc#1219442)
- Add ProblemSolution::skipsPatchesOnly (for openSUSE/zypper#514)
- Fix problems with EINTR in ExternalDataSource::getline (fixes
  bsc#1215698)
- version 17.31.30 (22)</changelog>
  <changelog author="ma@suse.de" date="1707307200">- tui: allow to access the underlying ostream of out::Info.
- Add MLSep: Helper to produce not-NL-terminated multi line
  output.
- version 17.31.31 (22)</changelog>
</package>
<package pkgid="910953ec6f4146a5b98e2622a5590ec8c1e6139c56dfad8d37d45525eb0a0b48" name="libzypp" arch="src">
  <version epoch="0" ver="17.31.31" rel="150400.3.52.2"/>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
  <changelog author="ma@suse.de" date="1687953600">- Fix build against protobuf &gt;= 22 (fixes #465, closes #466)
  Port away from protobuf_generate_cpp. Upstream protobuf does not
  export protobuf_generate_cpp by default anymore.
  Use protobuf_generate instead, which is also available on older
  versions.
- Remove SUSE &lt; SLE11 constructs (fixes #464).
- version 17.31.15 (22)</changelog>
  <changelog author="ma@suse.de" date="1690200000">- Fix negative ZYPP_LOCK_TIMEOUT not waiting forever (bsc#1213231)
- Don't cleanup orphaned dirs if read-only mode was promised
  (bsc#1210740)
- version 17.31.16 (22)</changelog>
  <changelog author="ma@suse.de" date="1690545600">- Fix wrong filesize exceeded dl abort in zyppng::Downloader
  (bsc#1213673)
  In some cases when downloading very small files we can run into
  issues when the URL is protected by credentials.
- version 17.31.17 (22)</changelog>
  <changelog author="ma@suse.de" date="1691150400">- SINGLE_RPMTRANS: Respect ZYPP_READONLY_HACK when checking the
  zypp-rpm lock (fixes openSUSE/openSUSE-repos#29)
- version 17.31.18 (22)</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
  <changelog author="ma@suse.de" date="1698235200">- Stop using boost version 1 timer library (fixes #489,
  bsc#1215294)
- version 17.31.23 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555200">- Open rpmdb just once during execution of %posttrans scripts
  (bsc#1216412)
- Avoid using select() since it does not support fd numbers &gt;
  1024 (fixes #447)
- tools/DownloadFiles: use standard zypp progress bar (fixes #489)
- Revert "Color download progress bar" (fixes #475)
  Cyan is already used for the output of RPM scriptlets. Avoid this
  colorific collision between download progress bar and scriptlet
  output.
- Fix ProgressBar's calculation of the printed tag position (fixes #494)
- Switch zypp::Digest to Openssl 3.0 Provider API (fixes #144)
- Fix usage of deprecated CURL features (fixes #486)
- version 17.31.24 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555201">- Fix build issue with zchunk build flags (fixes #500)
- version 17.31.25 (22)</changelog>
  <changelog author="ma@suse.de" date="1703160000">- Call zypp commit plugins during transactional update (fixes #506)
- Add support for loongarch64 (fixes #504)
- Teach MediaMultiCurl to download HTTP Multibyte ranges.
- Teach zsync downloads to MultiCurl.
- Expand RepoVars in URLs downloading a .repo file (bsc#1212160)
  Convenient and helps documentation as it may refer to a single
  command for a bunch of distributions. Like e.g. "zypper ar
  'https://server.my/$releasever/my.repo'".
- version 17.31.26 (22)</changelog>
  <changelog author="ma@suse.de" date="1703246400">- CheckAccessDeleted: fix 'running in container' filter
  (bsc#1218291)
- version 17.31.27 (22)</changelog>
  <changelog author="ma@suse.de" date="1704801600">- Fix to build with libxml 2.12.x (fixes #505)
- version 17.31.28 (22)</changelog>
  <changelog author="ma@suse.de" date="1706011200">- CheckAccessDeleted: fix running_in_container detection
  (bsc#1218782)
- Detect CURLOPT_REDIR_PROTOCOLS_STR availability at runtime
  (bsc#1218831)
- Make Wakeup class EINTR safe.
- Add a way to cancel media operations on shutdown
  (openSUSE/zypper#522)
  This patch adds a mechanism to signal libzypp that a shutdown was
  requested, usually when CTRL+C was pressed by the user. Currently
  only the media backend will utilize this, but can be extended to
  all code paths that use g_poll() to wait for events.
- Manually poll fds for curl in MediaCurl.
  Using curl_easy_perform does not give us the required control on
  when we want to cancel a download. Switching to the MultiCurl
  implementation with a external poll() event loop will give us
  much more freedom and helps us to improve our Ctrl+C handling.
- Move reusable curl poll code to curlhelper.h.
- version 17.31.29 (22)</changelog>
  <changelog author="ma@suse.de" date="1707220800">- applydeltaprm: Create target directory if it does not exist
  (bsc#1219442)
- Add ProblemSolution::skipsPatchesOnly (for openSUSE/zypper#514)
- Fix problems with EINTR in ExternalDataSource::getline (fixes
  bsc#1215698)
- version 17.31.30 (22)</changelog>
  <changelog author="ma@suse.de" date="1707307200">- tui: allow to access the underlying ostream of out::Info.
- Add MLSep: Helper to produce not-NL-terminated multi line
  output.
- version 17.31.31 (22)</changelog>
</package>
<package pkgid="b0236be039516713673c03c2ff3c3e0435b28046484d08cfceb7df26b097a4e8" name="libzypp" arch="x86_64">
  <version epoch="0" ver="17.31.31" rel="150400.3.52.2"/>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
  <changelog author="ma@suse.de" date="1687953600">- Fix build against protobuf &gt;= 22 (fixes #465, closes #466)
  Port away from protobuf_generate_cpp. Upstream protobuf does not
  export protobuf_generate_cpp by default anymore.
  Use protobuf_generate instead, which is also available on older
  versions.
- Remove SUSE &lt; SLE11 constructs (fixes #464).
- version 17.31.15 (22)</changelog>
  <changelog author="ma@suse.de" date="1690200000">- Fix negative ZYPP_LOCK_TIMEOUT not waiting forever (bsc#1213231)
- Don't cleanup orphaned dirs if read-only mode was promised
  (bsc#1210740)
- version 17.31.16 (22)</changelog>
  <changelog author="ma@suse.de" date="1690545600">- Fix wrong filesize exceeded dl abort in zyppng::Downloader
  (bsc#1213673)
  In some cases when downloading very small files we can run into
  issues when the URL is protected by credentials.
- version 17.31.17 (22)</changelog>
  <changelog author="ma@suse.de" date="1691150400">- SINGLE_RPMTRANS: Respect ZYPP_READONLY_HACK when checking the
  zypp-rpm lock (fixes openSUSE/openSUSE-repos#29)
- version 17.31.18 (22)</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
  <changelog author="ma@suse.de" date="1698235200">- Stop using boost version 1 timer library (fixes #489,
  bsc#1215294)
- version 17.31.23 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555200">- Open rpmdb just once during execution of %posttrans scripts
  (bsc#1216412)
- Avoid using select() since it does not support fd numbers &gt;
  1024 (fixes #447)
- tools/DownloadFiles: use standard zypp progress bar (fixes #489)
- Revert "Color download progress bar" (fixes #475)
  Cyan is already used for the output of RPM scriptlets. Avoid this
  colorific collision between download progress bar and scriptlet
  output.
- Fix ProgressBar's calculation of the printed tag position (fixes #494)
- Switch zypp::Digest to Openssl 3.0 Provider API (fixes #144)
- Fix usage of deprecated CURL features (fixes #486)
- version 17.31.24 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555201">- Fix build issue with zchunk build flags (fixes #500)
- version 17.31.25 (22)</changelog>
  <changelog author="ma@suse.de" date="1703160000">- Call zypp commit plugins during transactional update (fixes #506)
- Add support for loongarch64 (fixes #504)
- Teach MediaMultiCurl to download HTTP Multibyte ranges.
- Teach zsync downloads to MultiCurl.
- Expand RepoVars in URLs downloading a .repo file (bsc#1212160)
  Convenient and helps documentation as it may refer to a single
  command for a bunch of distributions. Like e.g. "zypper ar
  'https://server.my/$releasever/my.repo'".
- version 17.31.26 (22)</changelog>
  <changelog author="ma@suse.de" date="1703246400">- CheckAccessDeleted: fix 'running in container' filter
  (bsc#1218291)
- version 17.31.27 (22)</changelog>
  <changelog author="ma@suse.de" date="1704801600">- Fix to build with libxml 2.12.x (fixes #505)
- version 17.31.28 (22)</changelog>
  <changelog author="ma@suse.de" date="1706011200">- CheckAccessDeleted: fix running_in_container detection
  (bsc#1218782)
- Detect CURLOPT_REDIR_PROTOCOLS_STR availability at runtime
  (bsc#1218831)
- Make Wakeup class EINTR safe.
- Add a way to cancel media operations on shutdown
  (openSUSE/zypper#522)
  This patch adds a mechanism to signal libzypp that a shutdown was
  requested, usually when CTRL+C was pressed by the user. Currently
  only the media backend will utilize this, but can be extended to
  all code paths that use g_poll() to wait for events.
- Manually poll fds for curl in MediaCurl.
  Using curl_easy_perform does not give us the required control on
  when we want to cancel a download. Switching to the MultiCurl
  implementation with a external poll() event loop will give us
  much more freedom and helps us to improve our Ctrl+C handling.
- Move reusable curl poll code to curlhelper.h.
- version 17.31.29 (22)</changelog>
  <changelog author="ma@suse.de" date="1707220800">- applydeltaprm: Create target directory if it does not exist
  (bsc#1219442)
- Add ProblemSolution::skipsPatchesOnly (for openSUSE/zypper#514)
- Fix problems with EINTR in ExternalDataSource::getline (fixes
  bsc#1215698)
- version 17.31.30 (22)</changelog>
  <changelog author="ma@suse.de" date="1707307200">- tui: allow to access the underlying ostream of out::Info.
- Add MLSep: Helper to produce not-NL-terminated multi line
  output.
- version 17.31.31 (22)</changelog>
</package>
<package pkgid="69552df4666eec03b818a24a4d600d548d1b125ed4947942e787bf1e9dc92cf4" name="libzypp" arch="aarch64">
  <version epoch="0" ver="17.32.4" rel="150400.3.61.1"/>
  <changelog author="ma@suse.de" date="1691150400">- SINGLE_RPMTRANS: Respect ZYPP_READONLY_HACK when checking the
  zypp-rpm lock (fixes openSUSE/openSUSE-repos#29)
- version 17.31.18 (22)</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
  <changelog author="ma@suse.de" date="1698235200">- Stop using boost version 1 timer library (fixes #489,
  bsc#1215294)
- version 17.31.23 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555200">- Open rpmdb just once during execution of %posttrans scripts
  (bsc#1216412)
- Avoid using select() since it does not support fd numbers &gt;
  1024 (fixes #447)
- tools/DownloadFiles: use standard zypp progress bar (fixes #489)
- Revert "Color download progress bar" (fixes #475)
  Cyan is already used for the output of RPM scriptlets. Avoid this
  colorific collision between download progress bar and scriptlet
  output.
- Fix ProgressBar's calculation of the printed tag position (fixes #494)
- Switch zypp::Digest to Openssl 3.0 Provider API (fixes #144)
- Fix usage of deprecated CURL features (fixes #486)
- version 17.31.24 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555201">- Fix build issue with zchunk build flags (fixes #500)
- version 17.31.25 (22)</changelog>
  <changelog author="ma@suse.de" date="1703160000">- Call zypp commit plugins during transactional update (fixes #506)
- Add support for loongarch64 (fixes #504)
- Teach MediaMultiCurl to download HTTP Multibyte ranges.
- Teach zsync downloads to MultiCurl.
- Expand RepoVars in URLs downloading a .repo file (bsc#1212160)
  Convenient and helps documentation as it may refer to a single
  command for a bunch of distributions. Like e.g. "zypper ar
  'https://server.my/$releasever/my.repo'".
- version 17.31.26 (22)</changelog>
  <changelog author="ma@suse.de" date="1703246400">- CheckAccessDeleted: fix 'running in container' filter
  (bsc#1218291)
- version 17.31.27 (22)</changelog>
  <changelog author="ma@suse.de" date="1704801600">- Fix to build with libxml 2.12.x (fixes #505)
- version 17.31.28 (22)</changelog>
  <changelog author="ma@suse.de" date="1706011200">- CheckAccessDeleted: fix running_in_container detection
  (bsc#1218782)
- Detect CURLOPT_REDIR_PROTOCOLS_STR availability at runtime
  (bsc#1218831)
- Make Wakeup class EINTR safe.
- Add a way to cancel media operations on shutdown
  (openSUSE/zypper#522)
  This patch adds a mechanism to signal libzypp that a shutdown was
  requested, usually when CTRL+C was pressed by the user. Currently
  only the media backend will utilize this, but can be extended to
  all code paths that use g_poll() to wait for events.
- Manually poll fds for curl in MediaCurl.
  Using curl_easy_perform does not give us the required control on
  when we want to cancel a download. Switching to the MultiCurl
  implementation with a external poll() event loop will give us
  much more freedom and helps us to improve our Ctrl+C handling.
- Move reusable curl poll code to curlhelper.h.
- version 17.31.29 (22)</changelog>
  <changelog author="ma@suse.de" date="1707220800">- applydeltaprm: Create target directory if it does not exist
  (bsc#1219442)
- Add ProblemSolution::skipsPatchesOnly (for openSUSE/zypper#514)
- Fix problems with EINTR in ExternalDataSource::getline (fixes
  bsc#1215698)
- version 17.31.30 (22)</changelog>
  <changelog author="ma@suse.de" date="1707307200">- tui: allow to access the underlying ostream of out::Info.
- Add MLSep: Helper to produce not-NL-terminated multi line
  output.
- version 17.31.31 (22)</changelog>
  <changelog author="ma@suse.de" date="1708430400">- ProblemSolution::skipsPatchesOnly overload to handout the
  patches.
- Remove https-&gt;http redirection exceptions for
  download.opensuse.org.
- version 17.31.32 (22)</changelog>
  <changelog author="ma@suse.de" date="1711108800">- Add resolver option 'removeOrphaned' for distupgrade
  (bsc#1221525)
- New VendorSupportOption flag VendorSupportSuperseded
  (jsc#OBS-301, jsc#PED-8014)
- Tests: fix vsftpd.conf where SUSE and Fedora use different
  defaults (fixes #522)
- Add default stripe minimum (#529)
- Don't expose std::optional where YAST/PK explicitly use c++11.
- Digest: Avoid using the deprecated OPENSSL_config.
- version 17.32.0 (32)</changelog>
  <changelog author="ma@suse.de" date="1711627200">- Add resolver option 'removeUnneeded' to file weak remove jobs
  for unneeded packages (bsc#1175678)
- version 17.32.1 (32)</changelog>
  <changelog author="ma@suse.de" date="1712059200">- Fixup New VendorSupportOption flag VendorSupportSuperseded
  (jsc#OBS-301, jsc#PED-8014)
  Fixed the name of the keyword to "support_superseded" as it was
  agreed on in jsc#OBS-301.
- version 17.32.2 (32)</changelog>
  <changelog author="ma@suse.de" date="1712836800">- Update RepoStatus fromCookieFile according to the files mtime
  (bsc#1222086)
- TmpFile: Don't call chmod if makeSibling failed.
- version 17.32.3 (32)</changelog>
  <changelog author="ma@suse.de" date="1713355200">- Fix creation of sibling cache dirs with too restrictive mode
  (bsc#1222398)
  Some install workflows in YAST may lead to too restrictive (0700)
  raw cache directories in case of newly created repos. Later
  commands running with user privileges may not be able to access
  these repos.
- version 17.32.4 (32)</changelog>
</package>
<package pkgid="23944f0d2395d1a516f0dc2edfdb74d25f239b86f8ae4a8bfa92384232e43035" name="libzypp" arch="s390x">
  <version epoch="0" ver="17.32.4" rel="150400.3.61.1"/>
  <changelog author="ma@suse.de" date="1691150400">- SINGLE_RPMTRANS: Respect ZYPP_READONLY_HACK when checking the
  zypp-rpm lock (fixes openSUSE/openSUSE-repos#29)
- version 17.31.18 (22)</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
  <changelog author="ma@suse.de" date="1698235200">- Stop using boost version 1 timer library (fixes #489,
  bsc#1215294)
- version 17.31.23 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555200">- Open rpmdb just once during execution of %posttrans scripts
  (bsc#1216412)
- Avoid using select() since it does not support fd numbers &gt;
  1024 (fixes #447)
- tools/DownloadFiles: use standard zypp progress bar (fixes #489)
- Revert "Color download progress bar" (fixes #475)
  Cyan is already used for the output of RPM scriptlets. Avoid this
  colorific collision between download progress bar and scriptlet
  output.
- Fix ProgressBar's calculation of the printed tag position (fixes #494)
- Switch zypp::Digest to Openssl 3.0 Provider API (fixes #144)
- Fix usage of deprecated CURL features (fixes #486)
- version 17.31.24 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555201">- Fix build issue with zchunk build flags (fixes #500)
- version 17.31.25 (22)</changelog>
  <changelog author="ma@suse.de" date="1703160000">- Call zypp commit plugins during transactional update (fixes #506)
- Add support for loongarch64 (fixes #504)
- Teach MediaMultiCurl to download HTTP Multibyte ranges.
- Teach zsync downloads to MultiCurl.
- Expand RepoVars in URLs downloading a .repo file (bsc#1212160)
  Convenient and helps documentation as it may refer to a single
  command for a bunch of distributions. Like e.g. "zypper ar
  'https://server.my/$releasever/my.repo'".
- version 17.31.26 (22)</changelog>
  <changelog author="ma@suse.de" date="1703246400">- CheckAccessDeleted: fix 'running in container' filter
  (bsc#1218291)
- version 17.31.27 (22)</changelog>
  <changelog author="ma@suse.de" date="1704801600">- Fix to build with libxml 2.12.x (fixes #505)
- version 17.31.28 (22)</changelog>
  <changelog author="ma@suse.de" date="1706011200">- CheckAccessDeleted: fix running_in_container detection
  (bsc#1218782)
- Detect CURLOPT_REDIR_PROTOCOLS_STR availability at runtime
  (bsc#1218831)
- Make Wakeup class EINTR safe.
- Add a way to cancel media operations on shutdown
  (openSUSE/zypper#522)
  This patch adds a mechanism to signal libzypp that a shutdown was
  requested, usually when CTRL+C was pressed by the user. Currently
  only the media backend will utilize this, but can be extended to
  all code paths that use g_poll() to wait for events.
- Manually poll fds for curl in MediaCurl.
  Using curl_easy_perform does not give us the required control on
  when we want to cancel a download. Switching to the MultiCurl
  implementation with a external poll() event loop will give us
  much more freedom and helps us to improve our Ctrl+C handling.
- Move reusable curl poll code to curlhelper.h.
- version 17.31.29 (22)</changelog>
  <changelog author="ma@suse.de" date="1707220800">- applydeltaprm: Create target directory if it does not exist
  (bsc#1219442)
- Add ProblemSolution::skipsPatchesOnly (for openSUSE/zypper#514)
- Fix problems with EINTR in ExternalDataSource::getline (fixes
  bsc#1215698)
- version 17.31.30 (22)</changelog>
  <changelog author="ma@suse.de" date="1707307200">- tui: allow to access the underlying ostream of out::Info.
- Add MLSep: Helper to produce not-NL-terminated multi line
  output.
- version 17.31.31 (22)</changelog>
  <changelog author="ma@suse.de" date="1708430400">- ProblemSolution::skipsPatchesOnly overload to handout the
  patches.
- Remove https-&gt;http redirection exceptions for
  download.opensuse.org.
- version 17.31.32 (22)</changelog>
  <changelog author="ma@suse.de" date="1711108800">- Add resolver option 'removeOrphaned' for distupgrade
  (bsc#1221525)
- New VendorSupportOption flag VendorSupportSuperseded
  (jsc#OBS-301, jsc#PED-8014)
- Tests: fix vsftpd.conf where SUSE and Fedora use different
  defaults (fixes #522)
- Add default stripe minimum (#529)
- Don't expose std::optional where YAST/PK explicitly use c++11.
- Digest: Avoid using the deprecated OPENSSL_config.
- version 17.32.0 (32)</changelog>
  <changelog author="ma@suse.de" date="1711627200">- Add resolver option 'removeUnneeded' to file weak remove jobs
  for unneeded packages (bsc#1175678)
- version 17.32.1 (32)</changelog>
  <changelog author="ma@suse.de" date="1712059200">- Fixup New VendorSupportOption flag VendorSupportSuperseded
  (jsc#OBS-301, jsc#PED-8014)
  Fixed the name of the keyword to "support_superseded" as it was
  agreed on in jsc#OBS-301.
- version 17.32.2 (32)</changelog>
  <changelog author="ma@suse.de" date="1712836800">- Update RepoStatus fromCookieFile according to the files mtime
  (bsc#1222086)
- TmpFile: Don't call chmod if makeSibling failed.
- version 17.32.3 (32)</changelog>
  <changelog author="ma@suse.de" date="1713355200">- Fix creation of sibling cache dirs with too restrictive mode
  (bsc#1222398)
  Some install workflows in YAST may lead to too restrictive (0700)
  raw cache directories in case of newly created repos. Later
  commands running with user privileges may not be able to access
  these repos.
- version 17.32.4 (32)</changelog>
</package>
<package pkgid="4c95e732e08187d5dc27fb7f0b1b4b639daa8a0cb2ee722cba1630837f7b7b8a" name="libzypp" arch="src">
  <version epoch="0" ver="17.32.4" rel="150400.3.61.1"/>
  <changelog author="ma@suse.de" date="1691150400">- SINGLE_RPMTRANS: Respect ZYPP_READONLY_HACK when checking the
  zypp-rpm lock (fixes openSUSE/openSUSE-repos#29)
- version 17.31.18 (22)</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
  <changelog author="ma@suse.de" date="1698235200">- Stop using boost version 1 timer library (fixes #489,
  bsc#1215294)
- version 17.31.23 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555200">- Open rpmdb just once during execution of %posttrans scripts
  (bsc#1216412)
- Avoid using select() since it does not support fd numbers &gt;
  1024 (fixes #447)
- tools/DownloadFiles: use standard zypp progress bar (fixes #489)
- Revert "Color download progress bar" (fixes #475)
  Cyan is already used for the output of RPM scriptlets. Avoid this
  colorific collision between download progress bar and scriptlet
  output.
- Fix ProgressBar's calculation of the printed tag position (fixes #494)
- Switch zypp::Digest to Openssl 3.0 Provider API (fixes #144)
- Fix usage of deprecated CURL features (fixes #486)
- version 17.31.24 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555201">- Fix build issue with zchunk build flags (fixes #500)
- version 17.31.25 (22)</changelog>
  <changelog author="ma@suse.de" date="1703160000">- Call zypp commit plugins during transactional update (fixes #506)
- Add support for loongarch64 (fixes #504)
- Teach MediaMultiCurl to download HTTP Multibyte ranges.
- Teach zsync downloads to MultiCurl.
- Expand RepoVars in URLs downloading a .repo file (bsc#1212160)
  Convenient and helps documentation as it may refer to a single
  command for a bunch of distributions. Like e.g. "zypper ar
  'https://server.my/$releasever/my.repo'".
- version 17.31.26 (22)</changelog>
  <changelog author="ma@suse.de" date="1703246400">- CheckAccessDeleted: fix 'running in container' filter
  (bsc#1218291)
- version 17.31.27 (22)</changelog>
  <changelog author="ma@suse.de" date="1704801600">- Fix to build with libxml 2.12.x (fixes #505)
- version 17.31.28 (22)</changelog>
  <changelog author="ma@suse.de" date="1706011200">- CheckAccessDeleted: fix running_in_container detection
  (bsc#1218782)
- Detect CURLOPT_REDIR_PROTOCOLS_STR availability at runtime
  (bsc#1218831)
- Make Wakeup class EINTR safe.
- Add a way to cancel media operations on shutdown
  (openSUSE/zypper#522)
  This patch adds a mechanism to signal libzypp that a shutdown was
  requested, usually when CTRL+C was pressed by the user. Currently
  only the media backend will utilize this, but can be extended to
  all code paths that use g_poll() to wait for events.
- Manually poll fds for curl in MediaCurl.
  Using curl_easy_perform does not give us the required control on
  when we want to cancel a download. Switching to the MultiCurl
  implementation with a external poll() event loop will give us
  much more freedom and helps us to improve our Ctrl+C handling.
- Move reusable curl poll code to curlhelper.h.
- version 17.31.29 (22)</changelog>
  <changelog author="ma@suse.de" date="1707220800">- applydeltaprm: Create target directory if it does not exist
  (bsc#1219442)
- Add ProblemSolution::skipsPatchesOnly (for openSUSE/zypper#514)
- Fix problems with EINTR in ExternalDataSource::getline (fixes
  bsc#1215698)
- version 17.31.30 (22)</changelog>
  <changelog author="ma@suse.de" date="1707307200">- tui: allow to access the underlying ostream of out::Info.
- Add MLSep: Helper to produce not-NL-terminated multi line
  output.
- version 17.31.31 (22)</changelog>
  <changelog author="ma@suse.de" date="1708430400">- ProblemSolution::skipsPatchesOnly overload to handout the
  patches.
- Remove https-&gt;http redirection exceptions for
  download.opensuse.org.
- version 17.31.32 (22)</changelog>
  <changelog author="ma@suse.de" date="1711108800">- Add resolver option 'removeOrphaned' for distupgrade
  (bsc#1221525)
- New VendorSupportOption flag VendorSupportSuperseded
  (jsc#OBS-301, jsc#PED-8014)
- Tests: fix vsftpd.conf where SUSE and Fedora use different
  defaults (fixes #522)
- Add default stripe minimum (#529)
- Don't expose std::optional where YAST/PK explicitly use c++11.
- Digest: Avoid using the deprecated OPENSSL_config.
- version 17.32.0 (32)</changelog>
  <changelog author="ma@suse.de" date="1711627200">- Add resolver option 'removeUnneeded' to file weak remove jobs
  for unneeded packages (bsc#1175678)
- version 17.32.1 (32)</changelog>
  <changelog author="ma@suse.de" date="1712059200">- Fixup New VendorSupportOption flag VendorSupportSuperseded
  (jsc#OBS-301, jsc#PED-8014)
  Fixed the name of the keyword to "support_superseded" as it was
  agreed on in jsc#OBS-301.
- version 17.32.2 (32)</changelog>
  <changelog author="ma@suse.de" date="1712836800">- Update RepoStatus fromCookieFile according to the files mtime
  (bsc#1222086)
- TmpFile: Don't call chmod if makeSibling failed.
- version 17.32.3 (32)</changelog>
  <changelog author="ma@suse.de" date="1713355200">- Fix creation of sibling cache dirs with too restrictive mode
  (bsc#1222398)
  Some install workflows in YAST may lead to too restrictive (0700)
  raw cache directories in case of newly created repos. Later
  commands running with user privileges may not be able to access
  these repos.
- version 17.32.4 (32)</changelog>
</package>
<package pkgid="62b554dbed5a151ea9d03a5b4f7729026404de87ad03e22551e1e525ce46cf34" name="libzypp" arch="x86_64">
  <version epoch="0" ver="17.32.4" rel="150400.3.61.1"/>
  <changelog author="ma@suse.de" date="1691150400">- SINGLE_RPMTRANS: Respect ZYPP_READONLY_HACK when checking the
  zypp-rpm lock (fixes openSUSE/openSUSE-repos#29)
- version 17.31.18 (22)</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
  <changelog author="ma@suse.de" date="1698235200">- Stop using boost version 1 timer library (fixes #489,
  bsc#1215294)
- version 17.31.23 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555200">- Open rpmdb just once during execution of %posttrans scripts
  (bsc#1216412)
- Avoid using select() since it does not support fd numbers &gt;
  1024 (fixes #447)
- tools/DownloadFiles: use standard zypp progress bar (fixes #489)
- Revert "Color download progress bar" (fixes #475)
  Cyan is already used for the output of RPM scriptlets. Avoid this
  colorific collision between download progress bar and scriptlet
  output.
- Fix ProgressBar's calculation of the printed tag position (fixes #494)
- Switch zypp::Digest to Openssl 3.0 Provider API (fixes #144)
- Fix usage of deprecated CURL features (fixes #486)
- version 17.31.24 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555201">- Fix build issue with zchunk build flags (fixes #500)
- version 17.31.25 (22)</changelog>
  <changelog author="ma@suse.de" date="1703160000">- Call zypp commit plugins during transactional update (fixes #506)
- Add support for loongarch64 (fixes #504)
- Teach MediaMultiCurl to download HTTP Multibyte ranges.
- Teach zsync downloads to MultiCurl.
- Expand RepoVars in URLs downloading a .repo file (bsc#1212160)
  Convenient and helps documentation as it may refer to a single
  command for a bunch of distributions. Like e.g. "zypper ar
  'https://server.my/$releasever/my.repo'".
- version 17.31.26 (22)</changelog>
  <changelog author="ma@suse.de" date="1703246400">- CheckAccessDeleted: fix 'running in container' filter
  (bsc#1218291)
- version 17.31.27 (22)</changelog>
  <changelog author="ma@suse.de" date="1704801600">- Fix to build with libxml 2.12.x (fixes #505)
- version 17.31.28 (22)</changelog>
  <changelog author="ma@suse.de" date="1706011200">- CheckAccessDeleted: fix running_in_container detection
  (bsc#1218782)
- Detect CURLOPT_REDIR_PROTOCOLS_STR availability at runtime
  (bsc#1218831)
- Make Wakeup class EINTR safe.
- Add a way to cancel media operations on shutdown
  (openSUSE/zypper#522)
  This patch adds a mechanism to signal libzypp that a shutdown was
  requested, usually when CTRL+C was pressed by the user. Currently
  only the media backend will utilize this, but can be extended to
  all code paths that use g_poll() to wait for events.
- Manually poll fds for curl in MediaCurl.
  Using curl_easy_perform does not give us the required control on
  when we want to cancel a download. Switching to the MultiCurl
  implementation with a external poll() event loop will give us
  much more freedom and helps us to improve our Ctrl+C handling.
- Move reusable curl poll code to curlhelper.h.
- version 17.31.29 (22)</changelog>
  <changelog author="ma@suse.de" date="1707220800">- applydeltaprm: Create target directory if it does not exist
  (bsc#1219442)
- Add ProblemSolution::skipsPatchesOnly (for openSUSE/zypper#514)
- Fix problems with EINTR in ExternalDataSource::getline (fixes
  bsc#1215698)
- version 17.31.30 (22)</changelog>
  <changelog author="ma@suse.de" date="1707307200">- tui: allow to access the underlying ostream of out::Info.
- Add MLSep: Helper to produce not-NL-terminated multi line
  output.
- version 17.31.31 (22)</changelog>
  <changelog author="ma@suse.de" date="1708430400">- ProblemSolution::skipsPatchesOnly overload to handout the
  patches.
- Remove https-&gt;http redirection exceptions for
  download.opensuse.org.
- version 17.31.32 (22)</changelog>
  <changelog author="ma@suse.de" date="1711108800">- Add resolver option 'removeOrphaned' for distupgrade
  (bsc#1221525)
- New VendorSupportOption flag VendorSupportSuperseded
  (jsc#OBS-301, jsc#PED-8014)
- Tests: fix vsftpd.conf where SUSE and Fedora use different
  defaults (fixes #522)
- Add default stripe minimum (#529)
- Don't expose std::optional where YAST/PK explicitly use c++11.
- Digest: Avoid using the deprecated OPENSSL_config.
- version 17.32.0 (32)</changelog>
  <changelog author="ma@suse.de" date="1711627200">- Add resolver option 'removeUnneeded' to file weak remove jobs
  for unneeded packages (bsc#1175678)
- version 17.32.1 (32)</changelog>
  <changelog author="ma@suse.de" date="1712059200">- Fixup New VendorSupportOption flag VendorSupportSuperseded
  (jsc#OBS-301, jsc#PED-8014)
  Fixed the name of the keyword to "support_superseded" as it was
  agreed on in jsc#OBS-301.
- version 17.32.2 (32)</changelog>
  <changelog author="ma@suse.de" date="1712836800">- Update RepoStatus fromCookieFile according to the files mtime
  (bsc#1222086)
- TmpFile: Don't call chmod if makeSibling failed.
- version 17.32.3 (32)</changelog>
  <changelog author="ma@suse.de" date="1713355200">- Fix creation of sibling cache dirs with too restrictive mode
  (bsc#1222398)
  Some install workflows in YAST may lead to too restrictive (0700)
  raw cache directories in case of newly created repos. Later
  commands running with user privileges may not be able to access
  these repos.
- version 17.32.4 (32)</changelog>
</package>
<package pkgid="8f56cbeb9a2d54a73df98f5c0c8015ab1351d53fcd6f4211b9512e1d65134b3b" name="libzypp" arch="aarch64">
  <version epoch="0" ver="17.32.5" rel="150400.3.64.1"/>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
  <changelog author="ma@suse.de" date="1698235200">- Stop using boost version 1 timer library (fixes #489,
  bsc#1215294)
- version 17.31.23 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555200">- Open rpmdb just once during execution of %posttrans scripts
  (bsc#1216412)
- Avoid using select() since it does not support fd numbers &gt;
  1024 (fixes #447)
- tools/DownloadFiles: use standard zypp progress bar (fixes #489)
- Revert "Color download progress bar" (fixes #475)
  Cyan is already used for the output of RPM scriptlets. Avoid this
  colorific collision between download progress bar and scriptlet
  output.
- Fix ProgressBar's calculation of the printed tag position (fixes #494)
- Switch zypp::Digest to Openssl 3.0 Provider API (fixes #144)
- Fix usage of deprecated CURL features (fixes #486)
- version 17.31.24 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555201">- Fix build issue with zchunk build flags (fixes #500)
- version 17.31.25 (22)</changelog>
  <changelog author="ma@suse.de" date="1703160000">- Call zypp commit plugins during transactional update (fixes #506)
- Add support for loongarch64 (fixes #504)
- Teach MediaMultiCurl to download HTTP Multibyte ranges.
- Teach zsync downloads to MultiCurl.
- Expand RepoVars in URLs downloading a .repo file (bsc#1212160)
  Convenient and helps documentation as it may refer to a single
  command for a bunch of distributions. Like e.g. "zypper ar
  'https://server.my/$releasever/my.repo'".
- version 17.31.26 (22)</changelog>
  <changelog author="ma@suse.de" date="1703246400">- CheckAccessDeleted: fix 'running in container' filter
  (bsc#1218291)
- version 17.31.27 (22)</changelog>
  <changelog author="ma@suse.de" date="1704801600">- Fix to build with libxml 2.12.x (fixes #505)
- version 17.31.28 (22)</changelog>
  <changelog author="ma@suse.de" date="1706011200">- CheckAccessDeleted: fix running_in_container detection
  (bsc#1218782)
- Detect CURLOPT_REDIR_PROTOCOLS_STR availability at runtime
  (bsc#1218831)
- Make Wakeup class EINTR safe.
- Add a way to cancel media operations on shutdown
  (openSUSE/zypper#522)
  This patch adds a mechanism to signal libzypp that a shutdown was
  requested, usually when CTRL+C was pressed by the user. Currently
  only the media backend will utilize this, but can be extended to
  all code paths that use g_poll() to wait for events.
- Manually poll fds for curl in MediaCurl.
  Using curl_easy_perform does not give us the required control on
  when we want to cancel a download. Switching to the MultiCurl
  implementation with a external poll() event loop will give us
  much more freedom and helps us to improve our Ctrl+C handling.
- Move reusable curl poll code to curlhelper.h.
- version 17.31.29 (22)</changelog>
  <changelog author="ma@suse.de" date="1707220800">- applydeltaprm: Create target directory if it does not exist
  (bsc#1219442)
- Add ProblemSolution::skipsPatchesOnly (for openSUSE/zypper#514)
- Fix problems with EINTR in ExternalDataSource::getline (fixes
  bsc#1215698)
- version 17.31.30 (22)</changelog>
  <changelog author="ma@suse.de" date="1707307200">- tui: allow to access the underlying ostream of out::Info.
- Add MLSep: Helper to produce not-NL-terminated multi line
  output.
- version 17.31.31 (22)</changelog>
  <changelog author="ma@suse.de" date="1708430400">- ProblemSolution::skipsPatchesOnly overload to handout the
  patches.
- Remove https-&gt;http redirection exceptions for
  download.opensuse.org.
- version 17.31.32 (22)</changelog>
  <changelog author="ma@suse.de" date="1711108800">- Add resolver option 'removeOrphaned' for distupgrade
  (bsc#1221525)
- New VendorSupportOption flag VendorSupportSuperseded
  (jsc#OBS-301, jsc#PED-8014)
- Tests: fix vsftpd.conf where SUSE and Fedora use different
  defaults (fixes #522)
- Add default stripe minimum (#529)
- Don't expose std::optional where YAST/PK explicitly use c++11.
- Digest: Avoid using the deprecated OPENSSL_config.
- version 17.32.0 (32)</changelog>
  <changelog author="ma@suse.de" date="1711627200">- Add resolver option 'removeUnneeded' to file weak remove jobs
  for unneeded packages (bsc#1175678)
- version 17.32.1 (32)</changelog>
  <changelog author="ma@suse.de" date="1712059200">- Fixup New VendorSupportOption flag VendorSupportSuperseded
  (jsc#OBS-301, jsc#PED-8014)
  Fixed the name of the keyword to "support_superseded" as it was
  agreed on in jsc#OBS-301.
- version 17.32.2 (32)</changelog>
  <changelog author="ma@suse.de" date="1712836800">- Update RepoStatus fromCookieFile according to the files mtime
  (bsc#1222086)
- TmpFile: Don't call chmod if makeSibling failed.
- version 17.32.3 (32)</changelog>
  <changelog author="ma@suse.de" date="1713355200">- Fix creation of sibling cache dirs with too restrictive mode
  (bsc#1222398)
  Some install workflows in YAST may lead to too restrictive (0700)
  raw cache directories in case of newly created repos. Later
  commands running with user privileges may not be able to access
  these repos.
- version 17.32.4 (32)</changelog>
  <changelog author="ma@suse.de" date="1713528000">- Don't try to refresh volatile media as long as raw metadata are
  present (bsc#1223094)
- version 17.32.5 (32)</changelog>
</package>
<package pkgid="a028748a54b4e97cd279baf064ac55cf3e5545708ecbdb594c1820a9428f17f5" name="libzypp" arch="s390x">
  <version epoch="0" ver="17.32.5" rel="150400.3.64.1"/>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
  <changelog author="ma@suse.de" date="1698235200">- Stop using boost version 1 timer library (fixes #489,
  bsc#1215294)
- version 17.31.23 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555200">- Open rpmdb just once during execution of %posttrans scripts
  (bsc#1216412)
- Avoid using select() since it does not support fd numbers &gt;
  1024 (fixes #447)
- tools/DownloadFiles: use standard zypp progress bar (fixes #489)
- Revert "Color download progress bar" (fixes #475)
  Cyan is already used for the output of RPM scriptlets. Avoid this
  colorific collision between download progress bar and scriptlet
  output.
- Fix ProgressBar's calculation of the printed tag position (fixes #494)
- Switch zypp::Digest to Openssl 3.0 Provider API (fixes #144)
- Fix usage of deprecated CURL features (fixes #486)
- version 17.31.24 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555201">- Fix build issue with zchunk build flags (fixes #500)
- version 17.31.25 (22)</changelog>
  <changelog author="ma@suse.de" date="1703160000">- Call zypp commit plugins during transactional update (fixes #506)
- Add support for loongarch64 (fixes #504)
- Teach MediaMultiCurl to download HTTP Multibyte ranges.
- Teach zsync downloads to MultiCurl.
- Expand RepoVars in URLs downloading a .repo file (bsc#1212160)
  Convenient and helps documentation as it may refer to a single
  command for a bunch of distributions. Like e.g. "zypper ar
  'https://server.my/$releasever/my.repo'".
- version 17.31.26 (22)</changelog>
  <changelog author="ma@suse.de" date="1703246400">- CheckAccessDeleted: fix 'running in container' filter
  (bsc#1218291)
- version 17.31.27 (22)</changelog>
  <changelog author="ma@suse.de" date="1704801600">- Fix to build with libxml 2.12.x (fixes #505)
- version 17.31.28 (22)</changelog>
  <changelog author="ma@suse.de" date="1706011200">- CheckAccessDeleted: fix running_in_container detection
  (bsc#1218782)
- Detect CURLOPT_REDIR_PROTOCOLS_STR availability at runtime
  (bsc#1218831)
- Make Wakeup class EINTR safe.
- Add a way to cancel media operations on shutdown
  (openSUSE/zypper#522)
  This patch adds a mechanism to signal libzypp that a shutdown was
  requested, usually when CTRL+C was pressed by the user. Currently
  only the media backend will utilize this, but can be extended to
  all code paths that use g_poll() to wait for events.
- Manually poll fds for curl in MediaCurl.
  Using curl_easy_perform does not give us the required control on
  when we want to cancel a download. Switching to the MultiCurl
  implementation with a external poll() event loop will give us
  much more freedom and helps us to improve our Ctrl+C handling.
- Move reusable curl poll code to curlhelper.h.
- version 17.31.29 (22)</changelog>
  <changelog author="ma@suse.de" date="1707220800">- applydeltaprm: Create target directory if it does not exist
  (bsc#1219442)
- Add ProblemSolution::skipsPatchesOnly (for openSUSE/zypper#514)
- Fix problems with EINTR in ExternalDataSource::getline (fixes
  bsc#1215698)
- version 17.31.30 (22)</changelog>
  <changelog author="ma@suse.de" date="1707307200">- tui: allow to access the underlying ostream of out::Info.
- Add MLSep: Helper to produce not-NL-terminated multi line
  output.
- version 17.31.31 (22)</changelog>
  <changelog author="ma@suse.de" date="1708430400">- ProblemSolution::skipsPatchesOnly overload to handout the
  patches.
- Remove https-&gt;http redirection exceptions for
  download.opensuse.org.
- version 17.31.32 (22)</changelog>
  <changelog author="ma@suse.de" date="1711108800">- Add resolver option 'removeOrphaned' for distupgrade
  (bsc#1221525)
- New VendorSupportOption flag VendorSupportSuperseded
  (jsc#OBS-301, jsc#PED-8014)
- Tests: fix vsftpd.conf where SUSE and Fedora use different
  defaults (fixes #522)
- Add default stripe minimum (#529)
- Don't expose std::optional where YAST/PK explicitly use c++11.
- Digest: Avoid using the deprecated OPENSSL_config.
- version 17.32.0 (32)</changelog>
  <changelog author="ma@suse.de" date="1711627200">- Add resolver option 'removeUnneeded' to file weak remove jobs
  for unneeded packages (bsc#1175678)
- version 17.32.1 (32)</changelog>
  <changelog author="ma@suse.de" date="1712059200">- Fixup New VendorSupportOption flag VendorSupportSuperseded
  (jsc#OBS-301, jsc#PED-8014)
  Fixed the name of the keyword to "support_superseded" as it was
  agreed on in jsc#OBS-301.
- version 17.32.2 (32)</changelog>
  <changelog author="ma@suse.de" date="1712836800">- Update RepoStatus fromCookieFile according to the files mtime
  (bsc#1222086)
- TmpFile: Don't call chmod if makeSibling failed.
- version 17.32.3 (32)</changelog>
  <changelog author="ma@suse.de" date="1713355200">- Fix creation of sibling cache dirs with too restrictive mode
  (bsc#1222398)
  Some install workflows in YAST may lead to too restrictive (0700)
  raw cache directories in case of newly created repos. Later
  commands running with user privileges may not be able to access
  these repos.
- version 17.32.4 (32)</changelog>
  <changelog author="ma@suse.de" date="1713528000">- Don't try to refresh volatile media as long as raw metadata are
  present (bsc#1223094)
- version 17.32.5 (32)</changelog>
</package>
<package pkgid="409511ce32ec01b71ded98d2e773fd339c985595601b25689a98ca72c7131b6e" name="libzypp" arch="src">
  <version epoch="0" ver="17.32.5" rel="150400.3.64.1"/>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
  <changelog author="ma@suse.de" date="1698235200">- Stop using boost version 1 timer library (fixes #489,
  bsc#1215294)
- version 17.31.23 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555200">- Open rpmdb just once during execution of %posttrans scripts
  (bsc#1216412)
- Avoid using select() since it does not support fd numbers &gt;
  1024 (fixes #447)
- tools/DownloadFiles: use standard zypp progress bar (fixes #489)
- Revert "Color download progress bar" (fixes #475)
  Cyan is already used for the output of RPM scriptlets. Avoid this
  colorific collision between download progress bar and scriptlet
  output.
- Fix ProgressBar's calculation of the printed tag position (fixes #494)
- Switch zypp::Digest to Openssl 3.0 Provider API (fixes #144)
- Fix usage of deprecated CURL features (fixes #486)
- version 17.31.24 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555201">- Fix build issue with zchunk build flags (fixes #500)
- version 17.31.25 (22)</changelog>
  <changelog author="ma@suse.de" date="1703160000">- Call zypp commit plugins during transactional update (fixes #506)
- Add support for loongarch64 (fixes #504)
- Teach MediaMultiCurl to download HTTP Multibyte ranges.
- Teach zsync downloads to MultiCurl.
- Expand RepoVars in URLs downloading a .repo file (bsc#1212160)
  Convenient and helps documentation as it may refer to a single
  command for a bunch of distributions. Like e.g. "zypper ar
  'https://server.my/$releasever/my.repo'".
- version 17.31.26 (22)</changelog>
  <changelog author="ma@suse.de" date="1703246400">- CheckAccessDeleted: fix 'running in container' filter
  (bsc#1218291)
- version 17.31.27 (22)</changelog>
  <changelog author="ma@suse.de" date="1704801600">- Fix to build with libxml 2.12.x (fixes #505)
- version 17.31.28 (22)</changelog>
  <changelog author="ma@suse.de" date="1706011200">- CheckAccessDeleted: fix running_in_container detection
  (bsc#1218782)
- Detect CURLOPT_REDIR_PROTOCOLS_STR availability at runtime
  (bsc#1218831)
- Make Wakeup class EINTR safe.
- Add a way to cancel media operations on shutdown
  (openSUSE/zypper#522)
  This patch adds a mechanism to signal libzypp that a shutdown was
  requested, usually when CTRL+C was pressed by the user. Currently
  only the media backend will utilize this, but can be extended to
  all code paths that use g_poll() to wait for events.
- Manually poll fds for curl in MediaCurl.
  Using curl_easy_perform does not give us the required control on
  when we want to cancel a download. Switching to the MultiCurl
  implementation with a external poll() event loop will give us
  much more freedom and helps us to improve our Ctrl+C handling.
- Move reusable curl poll code to curlhelper.h.
- version 17.31.29 (22)</changelog>
  <changelog author="ma@suse.de" date="1707220800">- applydeltaprm: Create target directory if it does not exist
  (bsc#1219442)
- Add ProblemSolution::skipsPatchesOnly (for openSUSE/zypper#514)
- Fix problems with EINTR in ExternalDataSource::getline (fixes
  bsc#1215698)
- version 17.31.30 (22)</changelog>
  <changelog author="ma@suse.de" date="1707307200">- tui: allow to access the underlying ostream of out::Info.
- Add MLSep: Helper to produce not-NL-terminated multi line
  output.
- version 17.31.31 (22)</changelog>
  <changelog author="ma@suse.de" date="1708430400">- ProblemSolution::skipsPatchesOnly overload to handout the
  patches.
- Remove https-&gt;http redirection exceptions for
  download.opensuse.org.
- version 17.31.32 (22)</changelog>
  <changelog author="ma@suse.de" date="1711108800">- Add resolver option 'removeOrphaned' for distupgrade
  (bsc#1221525)
- New VendorSupportOption flag VendorSupportSuperseded
  (jsc#OBS-301, jsc#PED-8014)
- Tests: fix vsftpd.conf where SUSE and Fedora use different
  defaults (fixes #522)
- Add default stripe minimum (#529)
- Don't expose std::optional where YAST/PK explicitly use c++11.
- Digest: Avoid using the deprecated OPENSSL_config.
- version 17.32.0 (32)</changelog>
  <changelog author="ma@suse.de" date="1711627200">- Add resolver option 'removeUnneeded' to file weak remove jobs
  for unneeded packages (bsc#1175678)
- version 17.32.1 (32)</changelog>
  <changelog author="ma@suse.de" date="1712059200">- Fixup New VendorSupportOption flag VendorSupportSuperseded
  (jsc#OBS-301, jsc#PED-8014)
  Fixed the name of the keyword to "support_superseded" as it was
  agreed on in jsc#OBS-301.
- version 17.32.2 (32)</changelog>
  <changelog author="ma@suse.de" date="1712836800">- Update RepoStatus fromCookieFile according to the files mtime
  (bsc#1222086)
- TmpFile: Don't call chmod if makeSibling failed.
- version 17.32.3 (32)</changelog>
  <changelog author="ma@suse.de" date="1713355200">- Fix creation of sibling cache dirs with too restrictive mode
  (bsc#1222398)
  Some install workflows in YAST may lead to too restrictive (0700)
  raw cache directories in case of newly created repos. Later
  commands running with user privileges may not be able to access
  these repos.
- version 17.32.4 (32)</changelog>
  <changelog author="ma@suse.de" date="1713528000">- Don't try to refresh volatile media as long as raw metadata are
  present (bsc#1223094)
- version 17.32.5 (32)</changelog>
</package>
<package pkgid="b0a3460c66cce8b854d6ac9984265350e8dfbc7ddbbe20711afd5dc39523f31b" name="libzypp" arch="x86_64">
  <version epoch="0" ver="17.32.5" rel="150400.3.64.1"/>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
  <changelog author="ma@suse.de" date="1698235200">- Stop using boost version 1 timer library (fixes #489,
  bsc#1215294)
- version 17.31.23 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555200">- Open rpmdb just once during execution of %posttrans scripts
  (bsc#1216412)
- Avoid using select() since it does not support fd numbers &gt;
  1024 (fixes #447)
- tools/DownloadFiles: use standard zypp progress bar (fixes #489)
- Revert "Color download progress bar" (fixes #475)
  Cyan is already used for the output of RPM scriptlets. Avoid this
  colorific collision between download progress bar and scriptlet
  output.
- Fix ProgressBar's calculation of the printed tag position (fixes #494)
- Switch zypp::Digest to Openssl 3.0 Provider API (fixes #144)
- Fix usage of deprecated CURL features (fixes #486)
- version 17.31.24 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555201">- Fix build issue with zchunk build flags (fixes #500)
- version 17.31.25 (22)</changelog>
  <changelog author="ma@suse.de" date="1703160000">- Call zypp commit plugins during transactional update (fixes #506)
- Add support for loongarch64 (fixes #504)
- Teach MediaMultiCurl to download HTTP Multibyte ranges.
- Teach zsync downloads to MultiCurl.
- Expand RepoVars in URLs downloading a .repo file (bsc#1212160)
  Convenient and helps documentation as it may refer to a single
  command for a bunch of distributions. Like e.g. "zypper ar
  'https://server.my/$releasever/my.repo'".
- version 17.31.26 (22)</changelog>
  <changelog author="ma@suse.de" date="1703246400">- CheckAccessDeleted: fix 'running in container' filter
  (bsc#1218291)
- version 17.31.27 (22)</changelog>
  <changelog author="ma@suse.de" date="1704801600">- Fix to build with libxml 2.12.x (fixes #505)
- version 17.31.28 (22)</changelog>
  <changelog author="ma@suse.de" date="1706011200">- CheckAccessDeleted: fix running_in_container detection
  (bsc#1218782)
- Detect CURLOPT_REDIR_PROTOCOLS_STR availability at runtime
  (bsc#1218831)
- Make Wakeup class EINTR safe.
- Add a way to cancel media operations on shutdown
  (openSUSE/zypper#522)
  This patch adds a mechanism to signal libzypp that a shutdown was
  requested, usually when CTRL+C was pressed by the user. Currently
  only the media backend will utilize this, but can be extended to
  all code paths that use g_poll() to wait for events.
- Manually poll fds for curl in MediaCurl.
  Using curl_easy_perform does not give us the required control on
  when we want to cancel a download. Switching to the MultiCurl
  implementation with a external poll() event loop will give us
  much more freedom and helps us to improve our Ctrl+C handling.
- Move reusable curl poll code to curlhelper.h.
- version 17.31.29 (22)</changelog>
  <changelog author="ma@suse.de" date="1707220800">- applydeltaprm: Create target directory if it does not exist
  (bsc#1219442)
- Add ProblemSolution::skipsPatchesOnly (for openSUSE/zypper#514)
- Fix problems with EINTR in ExternalDataSource::getline (fixes
  bsc#1215698)
- version 17.31.30 (22)</changelog>
  <changelog author="ma@suse.de" date="1707307200">- tui: allow to access the underlying ostream of out::Info.
- Add MLSep: Helper to produce not-NL-terminated multi line
  output.
- version 17.31.31 (22)</changelog>
  <changelog author="ma@suse.de" date="1708430400">- ProblemSolution::skipsPatchesOnly overload to handout the
  patches.
- Remove https-&gt;http redirection exceptions for
  download.opensuse.org.
- version 17.31.32 (22)</changelog>
  <changelog author="ma@suse.de" date="1711108800">- Add resolver option 'removeOrphaned' for distupgrade
  (bsc#1221525)
- New VendorSupportOption flag VendorSupportSuperseded
  (jsc#OBS-301, jsc#PED-8014)
- Tests: fix vsftpd.conf where SUSE and Fedora use different
  defaults (fixes #522)
- Add default stripe minimum (#529)
- Don't expose std::optional where YAST/PK explicitly use c++11.
- Digest: Avoid using the deprecated OPENSSL_config.
- version 17.32.0 (32)</changelog>
  <changelog author="ma@suse.de" date="1711627200">- Add resolver option 'removeUnneeded' to file weak remove jobs
  for unneeded packages (bsc#1175678)
- version 17.32.1 (32)</changelog>
  <changelog author="ma@suse.de" date="1712059200">- Fixup New VendorSupportOption flag VendorSupportSuperseded
  (jsc#OBS-301, jsc#PED-8014)
  Fixed the name of the keyword to "support_superseded" as it was
  agreed on in jsc#OBS-301.
- version 17.32.2 (32)</changelog>
  <changelog author="ma@suse.de" date="1712836800">- Update RepoStatus fromCookieFile according to the files mtime
  (bsc#1222086)
- TmpFile: Don't call chmod if makeSibling failed.
- version 17.32.3 (32)</changelog>
  <changelog author="ma@suse.de" date="1713355200">- Fix creation of sibling cache dirs with too restrictive mode
  (bsc#1222398)
  Some install workflows in YAST may lead to too restrictive (0700)
  raw cache directories in case of newly created repos. Later
  commands running with user privileges may not be able to access
  these repos.
- version 17.32.4 (32)</changelog>
  <changelog author="ma@suse.de" date="1713528000">- Don't try to refresh volatile media as long as raw metadata are
  present (bsc#1223094)
- version 17.32.5 (32)</changelog>
</package>
<package pkgid="5fcc8ce1d00e3853adab3da395f35ce29c1170a8d1ac6d6ac0fd926ec575b6b2" name="libzypp" arch="aarch64">
  <version epoch="0" ver="17.34.1" rel="150400.3.71.7"/>
  <changelog author="ma@suse.de" date="1707220800">- applydeltaprm: Create target directory if it does not exist
  (bsc#1219442)
- Add ProblemSolution::skipsPatchesOnly (for openSUSE/zypper#514)
- Fix problems with EINTR in ExternalDataSource::getline (fixes
  bsc#1215698)
- version 17.31.30 (22)</changelog>
  <changelog author="ma@suse.de" date="1707307200">- tui: allow to access the underlying ostream of out::Info.
- Add MLSep: Helper to produce not-NL-terminated multi line
  output.
- version 17.31.31 (22)</changelog>
  <changelog author="ma@suse.de" date="1708430400">- ProblemSolution::skipsPatchesOnly overload to handout the
  patches.
- Remove https-&gt;http redirection exceptions for
  download.opensuse.org.
- version 17.31.32 (22)</changelog>
  <changelog author="ma@suse.de" date="1711108800">- Add resolver option 'removeOrphaned' for distupgrade
  (bsc#1221525)
- New VendorSupportOption flag VendorSupportSuperseded
  (jsc#OBS-301, jsc#PED-8014)
- Tests: fix vsftpd.conf where SUSE and Fedora use different
  defaults (fixes #522)
- Add default stripe minimum (#529)
- Don't expose std::optional where YAST/PK explicitly use c++11.
- Digest: Avoid using the deprecated OPENSSL_config.
- version 17.32.0 (32)</changelog>
  <changelog author="ma@suse.de" date="1711627200">- Add resolver option 'removeUnneeded' to file weak remove jobs
  for unneeded packages (bsc#1175678)
- version 17.32.1 (32)</changelog>
  <changelog author="ma@suse.de" date="1712059200">- Fixup New VendorSupportOption flag VendorSupportSuperseded
  (jsc#OBS-301, jsc#PED-8014)
  Fixed the name of the keyword to "support_superseded" as it was
  agreed on in jsc#OBS-301.
- version 17.32.2 (32)</changelog>
  <changelog author="ma@suse.de" date="1712836800">- Update RepoStatus fromCookieFile according to the files mtime
  (bsc#1222086)
- TmpFile: Don't call chmod if makeSibling failed.
- version 17.32.3 (32)</changelog>
  <changelog author="ma@suse.de" date="1713355200">- Fix creation of sibling cache dirs with too restrictive mode
  (bsc#1222398)
  Some install workflows in YAST may lead to too restrictive (0700)
  raw cache directories in case of newly created repos. Later
  commands running with user privileges may not be able to access
  these repos.
- version 17.32.4 (32)</changelog>
  <changelog author="ma@suse.de" date="1713528000">- Don't try to refresh volatile media as long as raw metadata are
  present (bsc#1223094)
- version 17.32.5 (32)</changelog>
  <changelog author="ma@suse.de" date="1714392000">- Fix download from gpgkey URL (bsc#1223430, fixes openSUSE/zypper#546)
- version 17.32.6 (32)</changelog>
  <changelog author="ma@suse.de" date="1714737600">- Fixed check for outdated repo metadata as non-root user
  (bsc#1222086)
- Add ZYPP_API for exported functions and switch to
  visibility=hidden (jsc#PED-8153)
- Dynamically resolve libproxy (jsc#PED-8153)
- version 17.33.0 (33)</changelog>
  <changelog author="dmueller@suse.com" date="1714737601">- switch to reduced size libsolv-tools-base (jsc#PED-8153)</changelog>
  <changelog author="ma@suse.de" date="1714737602">- version 17.33.1 (33)</changelog>
  <changelog author="dmueller@suse.com" date="1714996800">- fix up requires_eq usage for libsolv-tools-base
- add one more missing export for PackageKit
- version 17.33.2</changelog>
  <changelog author="bzeller@suse.de" date="1715169600">- Revert eintrSafeCall behavior to setting errno to 0.
- version 17.33.3 (34)</changelog>
  <changelog author="dmueller@suse.com" date="1715256000">- add one more missing export for libyui-qt-pkg</changelog>
  <changelog author="bzeller@suse.de" date="1715601600">- version 17.33.4 (35)</changelog>
  <changelog author="bzeller@suse.de" date="1715688000">- version 17.34.0 (34)
- Fix versioning scheme</changelog>
  <changelog author="dmueller@suse.com" date="1715688001">- don't require libproxy1 on tumbleweed, it is optional now</changelog>
  <changelog author="ma@suse.de" date="1717156800">- zypp-tui: Make sure translated texts use the correct textdomain
  (fixes #551)
- Skip libproxy1 requires for tumbleweed.
- version 17.34.1 (34)</changelog>
</package>
<package pkgid="e54b1f404d9483e5ffbdbe69f62eaa5b543462314528485ba6570efd57275c7d" name="libzypp" arch="s390x">
  <version epoch="0" ver="17.34.1" rel="150400.3.71.7"/>
  <changelog author="ma@suse.de" date="1707220800">- applydeltaprm: Create target directory if it does not exist
  (bsc#1219442)
- Add ProblemSolution::skipsPatchesOnly (for openSUSE/zypper#514)
- Fix problems with EINTR in ExternalDataSource::getline (fixes
  bsc#1215698)
- version 17.31.30 (22)</changelog>
  <changelog author="ma@suse.de" date="1707307200">- tui: allow to access the underlying ostream of out::Info.
- Add MLSep: Helper to produce not-NL-terminated multi line
  output.
- version 17.31.31 (22)</changelog>
  <changelog author="ma@suse.de" date="1708430400">- ProblemSolution::skipsPatchesOnly overload to handout the
  patches.
- Remove https-&gt;http redirection exceptions for
  download.opensuse.org.
- version 17.31.32 (22)</changelog>
  <changelog author="ma@suse.de" date="1711108800">- Add resolver option 'removeOrphaned' for distupgrade
  (bsc#1221525)
- New VendorSupportOption flag VendorSupportSuperseded
  (jsc#OBS-301, jsc#PED-8014)
- Tests: fix vsftpd.conf where SUSE and Fedora use different
  defaults (fixes #522)
- Add default stripe minimum (#529)
- Don't expose std::optional where YAST/PK explicitly use c++11.
- Digest: Avoid using the deprecated OPENSSL_config.
- version 17.32.0 (32)</changelog>
  <changelog author="ma@suse.de" date="1711627200">- Add resolver option 'removeUnneeded' to file weak remove jobs
  for unneeded packages (bsc#1175678)
- version 17.32.1 (32)</changelog>
  <changelog author="ma@suse.de" date="1712059200">- Fixup New VendorSupportOption flag VendorSupportSuperseded
  (jsc#OBS-301, jsc#PED-8014)
  Fixed the name of the keyword to "support_superseded" as it was
  agreed on in jsc#OBS-301.
- version 17.32.2 (32)</changelog>
  <changelog author="ma@suse.de" date="1712836800">- Update RepoStatus fromCookieFile according to the files mtime
  (bsc#1222086)
- TmpFile: Don't call chmod if makeSibling failed.
- version 17.32.3 (32)</changelog>
  <changelog author="ma@suse.de" date="1713355200">- Fix creation of sibling cache dirs with too restrictive mode
  (bsc#1222398)
  Some install workflows in YAST may lead to too restrictive (0700)
  raw cache directories in case of newly created repos. Later
  commands running with user privileges may not be able to access
  these repos.
- version 17.32.4 (32)</changelog>
  <changelog author="ma@suse.de" date="1713528000">- Don't try to refresh volatile media as long as raw metadata are
  present (bsc#1223094)
- version 17.32.5 (32)</changelog>
  <changelog author="ma@suse.de" date="1714392000">- Fix download from gpgkey URL (bsc#1223430, fixes openSUSE/zypper#546)
- version 17.32.6 (32)</changelog>
  <changelog author="ma@suse.de" date="1714737600">- Fixed check for outdated repo metadata as non-root user
  (bsc#1222086)
- Add ZYPP_API for exported functions and switch to
  visibility=hidden (jsc#PED-8153)
- Dynamically resolve libproxy (jsc#PED-8153)
- version 17.33.0 (33)</changelog>
  <changelog author="dmueller@suse.com" date="1714737601">- switch to reduced size libsolv-tools-base (jsc#PED-8153)</changelog>
  <changelog author="ma@suse.de" date="1714737602">- version 17.33.1 (33)</changelog>
  <changelog author="dmueller@suse.com" date="1714996800">- fix up requires_eq usage for libsolv-tools-base
- add one more missing export for PackageKit
- version 17.33.2</changelog>
  <changelog author="bzeller@suse.de" date="1715169600">- Revert eintrSafeCall behavior to setting errno to 0.
- version 17.33.3 (34)</changelog>
  <changelog author="dmueller@suse.com" date="1715256000">- add one more missing export for libyui-qt-pkg</changelog>
  <changelog author="bzeller@suse.de" date="1715601600">- version 17.33.4 (35)</changelog>
  <changelog author="bzeller@suse.de" date="1715688000">- version 17.34.0 (34)
- Fix versioning scheme</changelog>
  <changelog author="dmueller@suse.com" date="1715688001">- don't require libproxy1 on tumbleweed, it is optional now</changelog>
  <changelog author="ma@suse.de" date="1717156800">- zypp-tui: Make sure translated texts use the correct textdomain
  (fixes #551)
- Skip libproxy1 requires for tumbleweed.
- version 17.34.1 (34)</changelog>
</package>
<package pkgid="8ef53128a2cbd6759241b50652244f98ad6d8d37a81801d97b003ab75de43beb" name="libzypp" arch="src">
  <version epoch="0" ver="17.34.1" rel="150400.3.71.7"/>
  <changelog author="ma@suse.de" date="1707220800">- applydeltaprm: Create target directory if it does not exist
  (bsc#1219442)
- Add ProblemSolution::skipsPatchesOnly (for openSUSE/zypper#514)
- Fix problems with EINTR in ExternalDataSource::getline (fixes
  bsc#1215698)
- version 17.31.30 (22)</changelog>
  <changelog author="ma@suse.de" date="1707307200">- tui: allow to access the underlying ostream of out::Info.
- Add MLSep: Helper to produce not-NL-terminated multi line
  output.
- version 17.31.31 (22)</changelog>
  <changelog author="ma@suse.de" date="1708430400">- ProblemSolution::skipsPatchesOnly overload to handout the
  patches.
- Remove https-&gt;http redirection exceptions for
  download.opensuse.org.
- version 17.31.32 (22)</changelog>
  <changelog author="ma@suse.de" date="1711108800">- Add resolver option 'removeOrphaned' for distupgrade
  (bsc#1221525)
- New VendorSupportOption flag VendorSupportSuperseded
  (jsc#OBS-301, jsc#PED-8014)
- Tests: fix vsftpd.conf where SUSE and Fedora use different
  defaults (fixes #522)
- Add default stripe minimum (#529)
- Don't expose std::optional where YAST/PK explicitly use c++11.
- Digest: Avoid using the deprecated OPENSSL_config.
- version 17.32.0 (32)</changelog>
  <changelog author="ma@suse.de" date="1711627200">- Add resolver option 'removeUnneeded' to file weak remove jobs
  for unneeded packages (bsc#1175678)
- version 17.32.1 (32)</changelog>
  <changelog author="ma@suse.de" date="1712059200">- Fixup New VendorSupportOption flag VendorSupportSuperseded
  (jsc#OBS-301, jsc#PED-8014)
  Fixed the name of the keyword to "support_superseded" as it was
  agreed on in jsc#OBS-301.
- version 17.32.2 (32)</changelog>
  <changelog author="ma@suse.de" date="1712836800">- Update RepoStatus fromCookieFile according to the files mtime
  (bsc#1222086)
- TmpFile: Don't call chmod if makeSibling failed.
- version 17.32.3 (32)</changelog>
  <changelog author="ma@suse.de" date="1713355200">- Fix creation of sibling cache dirs with too restrictive mode
  (bsc#1222398)
  Some install workflows in YAST may lead to too restrictive (0700)
  raw cache directories in case of newly created repos. Later
  commands running with user privileges may not be able to access
  these repos.
- version 17.32.4 (32)</changelog>
  <changelog author="ma@suse.de" date="1713528000">- Don't try to refresh volatile media as long as raw metadata are
  present (bsc#1223094)
- version 17.32.5 (32)</changelog>
  <changelog author="ma@suse.de" date="1714392000">- Fix download from gpgkey URL (bsc#1223430, fixes openSUSE/zypper#546)
- version 17.32.6 (32)</changelog>
  <changelog author="ma@suse.de" date="1714737600">- Fixed check for outdated repo metadata as non-root user
  (bsc#1222086)
- Add ZYPP_API for exported functions and switch to
  visibility=hidden (jsc#PED-8153)
- Dynamically resolve libproxy (jsc#PED-8153)
- version 17.33.0 (33)</changelog>
  <changelog author="dmueller@suse.com" date="1714737601">- switch to reduced size libsolv-tools-base (jsc#PED-8153)</changelog>
  <changelog author="ma@suse.de" date="1714737602">- version 17.33.1 (33)</changelog>
  <changelog author="dmueller@suse.com" date="1714996800">- fix up requires_eq usage for libsolv-tools-base
- add one more missing export for PackageKit
- version 17.33.2</changelog>
  <changelog author="bzeller@suse.de" date="1715169600">- Revert eintrSafeCall behavior to setting errno to 0.
- version 17.33.3 (34)</changelog>
  <changelog author="dmueller@suse.com" date="1715256000">- add one more missing export for libyui-qt-pkg</changelog>
  <changelog author="bzeller@suse.de" date="1715601600">- version 17.33.4 (35)</changelog>
  <changelog author="bzeller@suse.de" date="1715688000">- version 17.34.0 (34)
- Fix versioning scheme</changelog>
  <changelog author="dmueller@suse.com" date="1715688001">- don't require libproxy1 on tumbleweed, it is optional now</changelog>
  <changelog author="ma@suse.de" date="1717156800">- zypp-tui: Make sure translated texts use the correct textdomain
  (fixes #551)
- Skip libproxy1 requires for tumbleweed.
- version 17.34.1 (34)</changelog>
</package>
<package pkgid="8f9b9286acc66ec9e347e0161622b80f23e82a9bff55da8c25d70e17fa42d189" name="libzypp" arch="x86_64">
  <version epoch="0" ver="17.34.1" rel="150400.3.71.7"/>
  <changelog author="ma@suse.de" date="1707220800">- applydeltaprm: Create target directory if it does not exist
  (bsc#1219442)
- Add ProblemSolution::skipsPatchesOnly (for openSUSE/zypper#514)
- Fix problems with EINTR in ExternalDataSource::getline (fixes
  bsc#1215698)
- version 17.31.30 (22)</changelog>
  <changelog author="ma@suse.de" date="1707307200">- tui: allow to access the underlying ostream of out::Info.
- Add MLSep: Helper to produce not-NL-terminated multi line
  output.
- version 17.31.31 (22)</changelog>
  <changelog author="ma@suse.de" date="1708430400">- ProblemSolution::skipsPatchesOnly overload to handout the
  patches.
- Remove https-&gt;http redirection exceptions for
  download.opensuse.org.
- version 17.31.32 (22)</changelog>
  <changelog author="ma@suse.de" date="1711108800">- Add resolver option 'removeOrphaned' for distupgrade
  (bsc#1221525)
- New VendorSupportOption flag VendorSupportSuperseded
  (jsc#OBS-301, jsc#PED-8014)
- Tests: fix vsftpd.conf where SUSE and Fedora use different
  defaults (fixes #522)
- Add default stripe minimum (#529)
- Don't expose std::optional where YAST/PK explicitly use c++11.
- Digest: Avoid using the deprecated OPENSSL_config.
- version 17.32.0 (32)</changelog>
  <changelog author="ma@suse.de" date="1711627200">- Add resolver option 'removeUnneeded' to file weak remove jobs
  for unneeded packages (bsc#1175678)
- version 17.32.1 (32)</changelog>
  <changelog author="ma@suse.de" date="1712059200">- Fixup New VendorSupportOption flag VendorSupportSuperseded
  (jsc#OBS-301, jsc#PED-8014)
  Fixed the name of the keyword to "support_superseded" as it was
  agreed on in jsc#OBS-301.
- version 17.32.2 (32)</changelog>
  <changelog author="ma@suse.de" date="1712836800">- Update RepoStatus fromCookieFile according to the files mtime
  (bsc#1222086)
- TmpFile: Don't call chmod if makeSibling failed.
- version 17.32.3 (32)</changelog>
  <changelog author="ma@suse.de" date="1713355200">- Fix creation of sibling cache dirs with too restrictive mode
  (bsc#1222398)
  Some install workflows in YAST may lead to too restrictive (0700)
  raw cache directories in case of newly created repos. Later
  commands running with user privileges may not be able to access
  these repos.
- version 17.32.4 (32)</changelog>
  <changelog author="ma@suse.de" date="1713528000">- Don't try to refresh volatile media as long as raw metadata are
  present (bsc#1223094)
- version 17.32.5 (32)</changelog>
  <changelog author="ma@suse.de" date="1714392000">- Fix download from gpgkey URL (bsc#1223430, fixes openSUSE/zypper#546)
- version 17.32.6 (32)</changelog>
  <changelog author="ma@suse.de" date="1714737600">- Fixed check for outdated repo metadata as non-root user
  (bsc#1222086)
- Add ZYPP_API for exported functions and switch to
  visibility=hidden (jsc#PED-8153)
- Dynamically resolve libproxy (jsc#PED-8153)
- version 17.33.0 (33)</changelog>
  <changelog author="dmueller@suse.com" date="1714737601">- switch to reduced size libsolv-tools-base (jsc#PED-8153)</changelog>
  <changelog author="ma@suse.de" date="1714737602">- version 17.33.1 (33)</changelog>
  <changelog author="dmueller@suse.com" date="1714996800">- fix up requires_eq usage for libsolv-tools-base
- add one more missing export for PackageKit
- version 17.33.2</changelog>
  <changelog author="bzeller@suse.de" date="1715169600">- Revert eintrSafeCall behavior to setting errno to 0.
- version 17.33.3 (34)</changelog>
  <changelog author="dmueller@suse.com" date="1715256000">- add one more missing export for libyui-qt-pkg</changelog>
  <changelog author="bzeller@suse.de" date="1715601600">- version 17.33.4 (35)</changelog>
  <changelog author="bzeller@suse.de" date="1715688000">- version 17.34.0 (34)
- Fix versioning scheme</changelog>
  <changelog author="dmueller@suse.com" date="1715688001">- don't require libproxy1 on tumbleweed, it is optional now</changelog>
  <changelog author="ma@suse.de" date="1717156800">- zypp-tui: Make sure translated texts use the correct textdomain
  (fixes #551)
- Skip libproxy1 requires for tumbleweed.
- version 17.34.1 (34)</changelog>
</package>
<package pkgid="9aa933d722a2bd3116cd03ccd4f4dda0235cb0046ee543d25cbb2c2c3939cd8c" name="libzypp" arch="aarch64">
  <version epoch="0" ver="17.34.1" rel="150500.6.2.1"/>
  <changelog author="ma@suse.de" date="1707220800">- applydeltaprm: Create target directory if it does not exist
  (bsc#1219442)
- Add ProblemSolution::skipsPatchesOnly (for openSUSE/zypper#514)
- Fix problems with EINTR in ExternalDataSource::getline (fixes
  bsc#1215698)
- version 17.31.30 (22)</changelog>
  <changelog author="ma@suse.de" date="1707307200">- tui: allow to access the underlying ostream of out::Info.
- Add MLSep: Helper to produce not-NL-terminated multi line
  output.
- version 17.31.31 (22)</changelog>
  <changelog author="ma@suse.de" date="1708430400">- ProblemSolution::skipsPatchesOnly overload to handout the
  patches.
- Remove https-&gt;http redirection exceptions for
  download.opensuse.org.
- version 17.31.32 (22)</changelog>
  <changelog author="ma@suse.de" date="1711108800">- Add resolver option 'removeOrphaned' for distupgrade
  (bsc#1221525)
- New VendorSupportOption flag VendorSupportSuperseded
  (jsc#OBS-301, jsc#PED-8014)
- Tests: fix vsftpd.conf where SUSE and Fedora use different
  defaults (fixes #522)
- Add default stripe minimum (#529)
- Don't expose std::optional where YAST/PK explicitly use c++11.
- Digest: Avoid using the deprecated OPENSSL_config.
- version 17.32.0 (32)</changelog>
  <changelog author="ma@suse.de" date="1711627200">- Add resolver option 'removeUnneeded' to file weak remove jobs
  for unneeded packages (bsc#1175678)
- version 17.32.1 (32)</changelog>
  <changelog author="ma@suse.de" date="1712059200">- Fixup New VendorSupportOption flag VendorSupportSuperseded
  (jsc#OBS-301, jsc#PED-8014)
  Fixed the name of the keyword to "support_superseded" as it was
  agreed on in jsc#OBS-301.
- version 17.32.2 (32)</changelog>
  <changelog author="ma@suse.de" date="1712836800">- Update RepoStatus fromCookieFile according to the files mtime
  (bsc#1222086)
- TmpFile: Don't call chmod if makeSibling failed.
- version 17.32.3 (32)</changelog>
  <changelog author="ma@suse.de" date="1713355200">- Fix creation of sibling cache dirs with too restrictive mode
  (bsc#1222398)
  Some install workflows in YAST may lead to too restrictive (0700)
  raw cache directories in case of newly created repos. Later
  commands running with user privileges may not be able to access
  these repos.
- version 17.32.4 (32)</changelog>
  <changelog author="ma@suse.de" date="1713528000">- Don't try to refresh volatile media as long as raw metadata are
  present (bsc#1223094)
- version 17.32.5 (32)</changelog>
  <changelog author="ma@suse.de" date="1714392000">- Fix download from gpgkey URL (bsc#1223430, fixes openSUSE/zypper#546)
- version 17.32.6 (32)</changelog>
  <changelog author="ma@suse.de" date="1714737600">- Fixed check for outdated repo metadata as non-root user
  (bsc#1222086)
- Add ZYPP_API for exported functions and switch to
  visibility=hidden (jsc#PED-8153)
- Dynamically resolve libproxy (jsc#PED-8153)
- version 17.33.0 (33)</changelog>
  <changelog author="dmueller@suse.com" date="1714737601">- switch to reduced size libsolv-tools-base (jsc#PED-8153)</changelog>
  <changelog author="ma@suse.de" date="1714737602">- version 17.33.1 (33)</changelog>
  <changelog author="dmueller@suse.com" date="1714996800">- fix up requires_eq usage for libsolv-tools-base
- add one more missing export for PackageKit
- version 17.33.2</changelog>
  <changelog author="bzeller@suse.de" date="1715169600">- Revert eintrSafeCall behavior to setting errno to 0.
- version 17.33.3 (34)</changelog>
  <changelog author="dmueller@suse.com" date="1715256000">- add one more missing export for libyui-qt-pkg</changelog>
  <changelog author="bzeller@suse.de" date="1715601600">- version 17.33.4 (35)</changelog>
  <changelog author="bzeller@suse.de" date="1715688000">- version 17.34.0 (34)
- Fix versioning scheme</changelog>
  <changelog author="dmueller@suse.com" date="1715688001">- don't require libproxy1 on tumbleweed, it is optional now</changelog>
  <changelog author="ma@suse.de" date="1717156800">- zypp-tui: Make sure translated texts use the correct textdomain
  (fixes #551)
- Skip libproxy1 requires for tumbleweed.
- version 17.34.1 (34)</changelog>
</package>
<package pkgid="71e4304f035a75015a67a6c3eeb2ad5411cd1fca9f2b6f47754d47df3e09bf30" name="libzypp" arch="s390x">
  <version epoch="0" ver="17.34.1" rel="150500.6.2.1"/>
  <changelog author="ma@suse.de" date="1707220800">- applydeltaprm: Create target directory if it does not exist
  (bsc#1219442)
- Add ProblemSolution::skipsPatchesOnly (for openSUSE/zypper#514)
- Fix problems with EINTR in ExternalDataSource::getline (fixes
  bsc#1215698)
- version 17.31.30 (22)</changelog>
  <changelog author="ma@suse.de" date="1707307200">- tui: allow to access the underlying ostream of out::Info.
- Add MLSep: Helper to produce not-NL-terminated multi line
  output.
- version 17.31.31 (22)</changelog>
  <changelog author="ma@suse.de" date="1708430400">- ProblemSolution::skipsPatchesOnly overload to handout the
  patches.
- Remove https-&gt;http redirection exceptions for
  download.opensuse.org.
- version 17.31.32 (22)</changelog>
  <changelog author="ma@suse.de" date="1711108800">- Add resolver option 'removeOrphaned' for distupgrade
  (bsc#1221525)
- New VendorSupportOption flag VendorSupportSuperseded
  (jsc#OBS-301, jsc#PED-8014)
- Tests: fix vsftpd.conf where SUSE and Fedora use different
  defaults (fixes #522)
- Add default stripe minimum (#529)
- Don't expose std::optional where YAST/PK explicitly use c++11.
- Digest: Avoid using the deprecated OPENSSL_config.
- version 17.32.0 (32)</changelog>
  <changelog author="ma@suse.de" date="1711627200">- Add resolver option 'removeUnneeded' to file weak remove jobs
  for unneeded packages (bsc#1175678)
- version 17.32.1 (32)</changelog>
  <changelog author="ma@suse.de" date="1712059200">- Fixup New VendorSupportOption flag VendorSupportSuperseded
  (jsc#OBS-301, jsc#PED-8014)
  Fixed the name of the keyword to "support_superseded" as it was
  agreed on in jsc#OBS-301.
- version 17.32.2 (32)</changelog>
  <changelog author="ma@suse.de" date="1712836800">- Update RepoStatus fromCookieFile according to the files mtime
  (bsc#1222086)
- TmpFile: Don't call chmod if makeSibling failed.
- version 17.32.3 (32)</changelog>
  <changelog author="ma@suse.de" date="1713355200">- Fix creation of sibling cache dirs with too restrictive mode
  (bsc#1222398)
  Some install workflows in YAST may lead to too restrictive (0700)
  raw cache directories in case of newly created repos. Later
  commands running with user privileges may not be able to access
  these repos.
- version 17.32.4 (32)</changelog>
  <changelog author="ma@suse.de" date="1713528000">- Don't try to refresh volatile media as long as raw metadata are
  present (bsc#1223094)
- version 17.32.5 (32)</changelog>
  <changelog author="ma@suse.de" date="1714392000">- Fix download from gpgkey URL (bsc#1223430, fixes openSUSE/zypper#546)
- version 17.32.6 (32)</changelog>
  <changelog author="ma@suse.de" date="1714737600">- Fixed check for outdated repo metadata as non-root user
  (bsc#1222086)
- Add ZYPP_API for exported functions and switch to
  visibility=hidden (jsc#PED-8153)
- Dynamically resolve libproxy (jsc#PED-8153)
- version 17.33.0 (33)</changelog>
  <changelog author="dmueller@suse.com" date="1714737601">- switch to reduced size libsolv-tools-base (jsc#PED-8153)</changelog>
  <changelog author="ma@suse.de" date="1714737602">- version 17.33.1 (33)</changelog>
  <changelog author="dmueller@suse.com" date="1714996800">- fix up requires_eq usage for libsolv-tools-base
- add one more missing export for PackageKit
- version 17.33.2</changelog>
  <changelog author="bzeller@suse.de" date="1715169600">- Revert eintrSafeCall behavior to setting errno to 0.
- version 17.33.3 (34)</changelog>
  <changelog author="dmueller@suse.com" date="1715256000">- add one more missing export for libyui-qt-pkg</changelog>
  <changelog author="bzeller@suse.de" date="1715601600">- version 17.33.4 (35)</changelog>
  <changelog author="bzeller@suse.de" date="1715688000">- version 17.34.0 (34)
- Fix versioning scheme</changelog>
  <changelog author="dmueller@suse.com" date="1715688001">- don't require libproxy1 on tumbleweed, it is optional now</changelog>
  <changelog author="ma@suse.de" date="1717156800">- zypp-tui: Make sure translated texts use the correct textdomain
  (fixes #551)
- Skip libproxy1 requires for tumbleweed.
- version 17.34.1 (34)</changelog>
</package>
<package pkgid="c6da2f69daf9ec251a27d0e9cc872233e39d82c0ca62531f9ace1e3fc17ec934" name="libzypp" arch="src">
  <version epoch="0" ver="17.34.1" rel="150500.6.2.1"/>
  <changelog author="ma@suse.de" date="1707220800">- applydeltaprm: Create target directory if it does not exist
  (bsc#1219442)
- Add ProblemSolution::skipsPatchesOnly (for openSUSE/zypper#514)
- Fix problems with EINTR in ExternalDataSource::getline (fixes
  bsc#1215698)
- version 17.31.30 (22)</changelog>
  <changelog author="ma@suse.de" date="1707307200">- tui: allow to access the underlying ostream of out::Info.
- Add MLSep: Helper to produce not-NL-terminated multi line
  output.
- version 17.31.31 (22)</changelog>
  <changelog author="ma@suse.de" date="1708430400">- ProblemSolution::skipsPatchesOnly overload to handout the
  patches.
- Remove https-&gt;http redirection exceptions for
  download.opensuse.org.
- version 17.31.32 (22)</changelog>
  <changelog author="ma@suse.de" date="1711108800">- Add resolver option 'removeOrphaned' for distupgrade
  (bsc#1221525)
- New VendorSupportOption flag VendorSupportSuperseded
  (jsc#OBS-301, jsc#PED-8014)
- Tests: fix vsftpd.conf where SUSE and Fedora use different
  defaults (fixes #522)
- Add default stripe minimum (#529)
- Don't expose std::optional where YAST/PK explicitly use c++11.
- Digest: Avoid using the deprecated OPENSSL_config.
- version 17.32.0 (32)</changelog>
  <changelog author="ma@suse.de" date="1711627200">- Add resolver option 'removeUnneeded' to file weak remove jobs
  for unneeded packages (bsc#1175678)
- version 17.32.1 (32)</changelog>
  <changelog author="ma@suse.de" date="1712059200">- Fixup New VendorSupportOption flag VendorSupportSuperseded
  (jsc#OBS-301, jsc#PED-8014)
  Fixed the name of the keyword to "support_superseded" as it was
  agreed on in jsc#OBS-301.
- version 17.32.2 (32)</changelog>
  <changelog author="ma@suse.de" date="1712836800">- Update RepoStatus fromCookieFile according to the files mtime
  (bsc#1222086)
- TmpFile: Don't call chmod if makeSibling failed.
- version 17.32.3 (32)</changelog>
  <changelog author="ma@suse.de" date="1713355200">- Fix creation of sibling cache dirs with too restrictive mode
  (bsc#1222398)
  Some install workflows in YAST may lead to too restrictive (0700)
  raw cache directories in case of newly created repos. Later
  commands running with user privileges may not be able to access
  these repos.
- version 17.32.4 (32)</changelog>
  <changelog author="ma@suse.de" date="1713528000">- Don't try to refresh volatile media as long as raw metadata are
  present (bsc#1223094)
- version 17.32.5 (32)</changelog>
  <changelog author="ma@suse.de" date="1714392000">- Fix download from gpgkey URL (bsc#1223430, fixes openSUSE/zypper#546)
- version 17.32.6 (32)</changelog>
  <changelog author="ma@suse.de" date="1714737600">- Fixed check for outdated repo metadata as non-root user
  (bsc#1222086)
- Add ZYPP_API for exported functions and switch to
  visibility=hidden (jsc#PED-8153)
- Dynamically resolve libproxy (jsc#PED-8153)
- version 17.33.0 (33)</changelog>
  <changelog author="dmueller@suse.com" date="1714737601">- switch to reduced size libsolv-tools-base (jsc#PED-8153)</changelog>
  <changelog author="ma@suse.de" date="1714737602">- version 17.33.1 (33)</changelog>
  <changelog author="dmueller@suse.com" date="1714996800">- fix up requires_eq usage for libsolv-tools-base
- add one more missing export for PackageKit
- version 17.33.2</changelog>
  <changelog author="bzeller@suse.de" date="1715169600">- Revert eintrSafeCall behavior to setting errno to 0.
- version 17.33.3 (34)</changelog>
  <changelog author="dmueller@suse.com" date="1715256000">- add one more missing export for libyui-qt-pkg</changelog>
  <changelog author="bzeller@suse.de" date="1715601600">- version 17.33.4 (35)</changelog>
  <changelog author="bzeller@suse.de" date="1715688000">- version 17.34.0 (34)
- Fix versioning scheme</changelog>
  <changelog author="dmueller@suse.com" date="1715688001">- don't require libproxy1 on tumbleweed, it is optional now</changelog>
  <changelog author="ma@suse.de" date="1717156800">- zypp-tui: Make sure translated texts use the correct textdomain
  (fixes #551)
- Skip libproxy1 requires for tumbleweed.
- version 17.34.1 (34)</changelog>
</package>
<package pkgid="69827efd6101e34273ae51a2a6335158174801b4eb1abff70bcb635c12542510" name="libzypp" arch="x86_64">
  <version epoch="0" ver="17.34.1" rel="150500.6.2.1"/>
  <changelog author="ma@suse.de" date="1707220800">- applydeltaprm: Create target directory if it does not exist
  (bsc#1219442)
- Add ProblemSolution::skipsPatchesOnly (for openSUSE/zypper#514)
- Fix problems with EINTR in ExternalDataSource::getline (fixes
  bsc#1215698)
- version 17.31.30 (22)</changelog>
  <changelog author="ma@suse.de" date="1707307200">- tui: allow to access the underlying ostream of out::Info.
- Add MLSep: Helper to produce not-NL-terminated multi line
  output.
- version 17.31.31 (22)</changelog>
  <changelog author="ma@suse.de" date="1708430400">- ProblemSolution::skipsPatchesOnly overload to handout the
  patches.
- Remove https-&gt;http redirection exceptions for
  download.opensuse.org.
- version 17.31.32 (22)</changelog>
  <changelog author="ma@suse.de" date="1711108800">- Add resolver option 'removeOrphaned' for distupgrade
  (bsc#1221525)
- New VendorSupportOption flag VendorSupportSuperseded
  (jsc#OBS-301, jsc#PED-8014)
- Tests: fix vsftpd.conf where SUSE and Fedora use different
  defaults (fixes #522)
- Add default stripe minimum (#529)
- Don't expose std::optional where YAST/PK explicitly use c++11.
- Digest: Avoid using the deprecated OPENSSL_config.
- version 17.32.0 (32)</changelog>
  <changelog author="ma@suse.de" date="1711627200">- Add resolver option 'removeUnneeded' to file weak remove jobs
  for unneeded packages (bsc#1175678)
- version 17.32.1 (32)</changelog>
  <changelog author="ma@suse.de" date="1712059200">- Fixup New VendorSupportOption flag VendorSupportSuperseded
  (jsc#OBS-301, jsc#PED-8014)
  Fixed the name of the keyword to "support_superseded" as it was
  agreed on in jsc#OBS-301.
- version 17.32.2 (32)</changelog>
  <changelog author="ma@suse.de" date="1712836800">- Update RepoStatus fromCookieFile according to the files mtime
  (bsc#1222086)
- TmpFile: Don't call chmod if makeSibling failed.
- version 17.32.3 (32)</changelog>
  <changelog author="ma@suse.de" date="1713355200">- Fix creation of sibling cache dirs with too restrictive mode
  (bsc#1222398)
  Some install workflows in YAST may lead to too restrictive (0700)
  raw cache directories in case of newly created repos. Later
  commands running with user privileges may not be able to access
  these repos.
- version 17.32.4 (32)</changelog>
  <changelog author="ma@suse.de" date="1713528000">- Don't try to refresh volatile media as long as raw metadata are
  present (bsc#1223094)
- version 17.32.5 (32)</changelog>
  <changelog author="ma@suse.de" date="1714392000">- Fix download from gpgkey URL (bsc#1223430, fixes openSUSE/zypper#546)
- version 17.32.6 (32)</changelog>
  <changelog author="ma@suse.de" date="1714737600">- Fixed check for outdated repo metadata as non-root user
  (bsc#1222086)
- Add ZYPP_API for exported functions and switch to
  visibility=hidden (jsc#PED-8153)
- Dynamically resolve libproxy (jsc#PED-8153)
- version 17.33.0 (33)</changelog>
  <changelog author="dmueller@suse.com" date="1714737601">- switch to reduced size libsolv-tools-base (jsc#PED-8153)</changelog>
  <changelog author="ma@suse.de" date="1714737602">- version 17.33.1 (33)</changelog>
  <changelog author="dmueller@suse.com" date="1714996800">- fix up requires_eq usage for libsolv-tools-base
- add one more missing export for PackageKit
- version 17.33.2</changelog>
  <changelog author="bzeller@suse.de" date="1715169600">- Revert eintrSafeCall behavior to setting errno to 0.
- version 17.33.3 (34)</changelog>
  <changelog author="dmueller@suse.com" date="1715256000">- add one more missing export for libyui-qt-pkg</changelog>
  <changelog author="bzeller@suse.de" date="1715601600">- version 17.33.4 (35)</changelog>
  <changelog author="bzeller@suse.de" date="1715688000">- version 17.34.0 (34)
- Fix versioning scheme</changelog>
  <changelog author="dmueller@suse.com" date="1715688001">- don't require libproxy1 on tumbleweed, it is optional now</changelog>
  <changelog author="ma@suse.de" date="1717156800">- zypp-tui: Make sure translated texts use the correct textdomain
  (fixes #551)
- Skip libproxy1 requires for tumbleweed.
- version 17.34.1 (34)</changelog>
</package>
<package pkgid="9983fa69e1bf2396baa33ca1be7f712dd97ccdb54854a488aa19bb33b2cb9d8a" name="libzypp" arch="aarch64">
  <version epoch="0" ver="17.35.8" rel="150500.6.13.1"/>
  <changelog author="ma@suse.de" date="1714737600">- Fixed check for outdated repo metadata as non-root user
  (bsc#1222086)
- Add ZYPP_API for exported functions and switch to
  visibility=hidden (jsc#PED-8153)
- Dynamically resolve libproxy (jsc#PED-8153)
- version 17.33.0 (33)</changelog>
  <changelog author="dmueller@suse.com" date="1714737601">- switch to reduced size libsolv-tools-base (jsc#PED-8153)</changelog>
  <changelog author="ma@suse.de" date="1714737602">- version 17.33.1 (33)</changelog>
  <changelog author="dmueller@suse.com" date="1714996800">- fix up requires_eq usage for libsolv-tools-base
- add one more missing export for PackageKit
- version 17.33.2</changelog>
  <changelog author="bzeller@suse.de" date="1715169600">- Revert eintrSafeCall behavior to setting errno to 0.
- version 17.33.3 (34)</changelog>
  <changelog author="dmueller@suse.com" date="1715256000">- add one more missing export for libyui-qt-pkg</changelog>
  <changelog author="bzeller@suse.de" date="1715601600">- version 17.33.4 (35)</changelog>
  <changelog author="bzeller@suse.de" date="1715688000">- version 17.34.0 (34)
- Fix versioning scheme</changelog>
  <changelog author="dmueller@suse.com" date="1715688001">- don't require libproxy1 on tumbleweed, it is optional now</changelog>
  <changelog author="ma@suse.de" date="1717156800">- zypp-tui: Make sure translated texts use the correct textdomain
  (fixes #551)
- Skip libproxy1 requires for tumbleweed.
- version 17.34.1 (34)</changelog>
  <changelog author="ma@suse.de" date="1719230400">- Workaround broken libsolv-tools-base requirements (fixes
  openSUSE/zypper#551)
- Strip ssl_clientkey from repo urls (bsc#1226030)
- Remove protobuf build dependency.
- Lazily attach medium during refresh workflows (bsc#1223094)
- Refactor RepoManager and add Service workflows.
- version 17.34.2 (34)</changelog>
  <changelog author="ma@suse.de" date="1719576000">- Update soname due to RepoManager refactoring and cleanup.
- version 17.35.0 (35)</changelog>
  <changelog author="ma@suse.de" date="1719921600">- Install zypp/APIConfig.h legacy include (fixes #557)
- version 17.35.1 (35)</changelog>
  <changelog author="ma@suse.de" date="1720526400">- Keep UrlResolverPlugin API public (fixes #560)
- Blacklist /snap executables for 'zypper ps' (bsc#1226014)
- Fix handling of buddies when applying locks (bsc#1225267)
  Buddy pairs (like -release package and product) internally share
  the same status object. When applying locks from query results
  the locked bit must be set if either item is locked.
- version 17.35.2 (35)</changelog>
  <changelog author="ma@suse.de" date="1721044800">- Translation: updated .pot file.
- Conflict with python zypp-plugin &lt; 0.6.4 (bsc#1227793)
  Older zypp-plugins reject stomp headers including a '-'. Like the
  'content-length' header we may send.
- Fix int overflow in Provider (fixes #559)
  This patch fixes an issue in safe_strtonum which caused
  timestamps to overflow in the Provider message parser.
- Fix error reporting on repoindex.xml parse error (bsc#1227625)
- version 17.35.3 (35)</changelog>
  <changelog author="ma@suse.de" date="1721736000">- Fix typo in the geoip update pipeline (bsc#1228206)
- Export RepoVariablesStringReplacer for yast2 (bsc#1228138)
- version 17.35.4 (35)</changelog>
  <changelog author="ma@suse.de" date="1722340800">- Export asSolvable for YAST (bsc#1228420)
- Fix 4 typos in zypp.conf.
- version 17.35.5 (35)</changelog>
  <changelog author="ma@suse.de" date="1722340801">- Export CredentialManager for legacy YAST versions (bsc#1228420)
- version 17.35.6 (35)</changelog>
  <changelog author="ma@suse.de" date="1722513600">- MediaPluginType must be resolved to a valid MediaHandler
  (bsc#1228208)
- version 17.35.7 (35)</changelog>
  <changelog author="ma@suse.de" date="1722600000">- Make sure not to statically linked installed tools (bsc#1228787)
- version 17.35.8 (35)</changelog>
</package>
<package pkgid="2eb16e9feee638451d1f6a560fa9422f0149a98844bbb7cec0ea04ddc3e364bb" name="libzypp" arch="s390x">
  <version epoch="0" ver="17.35.8" rel="150500.6.13.1"/>
  <changelog author="ma@suse.de" date="1714737600">- Fixed check for outdated repo metadata as non-root user
  (bsc#1222086)
- Add ZYPP_API for exported functions and switch to
  visibility=hidden (jsc#PED-8153)
- Dynamically resolve libproxy (jsc#PED-8153)
- version 17.33.0 (33)</changelog>
  <changelog author="dmueller@suse.com" date="1714737601">- switch to reduced size libsolv-tools-base (jsc#PED-8153)</changelog>
  <changelog author="ma@suse.de" date="1714737602">- version 17.33.1 (33)</changelog>
  <changelog author="dmueller@suse.com" date="1714996800">- fix up requires_eq usage for libsolv-tools-base
- add one more missing export for PackageKit
- version 17.33.2</changelog>
  <changelog author="bzeller@suse.de" date="1715169600">- Revert eintrSafeCall behavior to setting errno to 0.
- version 17.33.3 (34)</changelog>
  <changelog author="dmueller@suse.com" date="1715256000">- add one more missing export for libyui-qt-pkg</changelog>
  <changelog author="bzeller@suse.de" date="1715601600">- version 17.33.4 (35)</changelog>
  <changelog author="bzeller@suse.de" date="1715688000">- version 17.34.0 (34)
- Fix versioning scheme</changelog>
  <changelog author="dmueller@suse.com" date="1715688001">- don't require libproxy1 on tumbleweed, it is optional now</changelog>
  <changelog author="ma@suse.de" date="1717156800">- zypp-tui: Make sure translated texts use the correct textdomain
  (fixes #551)
- Skip libproxy1 requires for tumbleweed.
- version 17.34.1 (34)</changelog>
  <changelog author="ma@suse.de" date="1719230400">- Workaround broken libsolv-tools-base requirements (fixes
  openSUSE/zypper#551)
- Strip ssl_clientkey from repo urls (bsc#1226030)
- Remove protobuf build dependency.
- Lazily attach medium during refresh workflows (bsc#1223094)
- Refactor RepoManager and add Service workflows.
- version 17.34.2 (34)</changelog>
  <changelog author="ma@suse.de" date="1719576000">- Update soname due to RepoManager refactoring and cleanup.
- version 17.35.0 (35)</changelog>
  <changelog author="ma@suse.de" date="1719921600">- Install zypp/APIConfig.h legacy include (fixes #557)
- version 17.35.1 (35)</changelog>
  <changelog author="ma@suse.de" date="1720526400">- Keep UrlResolverPlugin API public (fixes #560)
- Blacklist /snap executables for 'zypper ps' (bsc#1226014)
- Fix handling of buddies when applying locks (bsc#1225267)
  Buddy pairs (like -release package and product) internally share
  the same status object. When applying locks from query results
  the locked bit must be set if either item is locked.
- version 17.35.2 (35)</changelog>
  <changelog author="ma@suse.de" date="1721044800">- Translation: updated .pot file.
- Conflict with python zypp-plugin &lt; 0.6.4 (bsc#1227793)
  Older zypp-plugins reject stomp headers including a '-'. Like the
  'content-length' header we may send.
- Fix int overflow in Provider (fixes #559)
  This patch fixes an issue in safe_strtonum which caused
  timestamps to overflow in the Provider message parser.
- Fix error reporting on repoindex.xml parse error (bsc#1227625)
- version 17.35.3 (35)</changelog>
  <changelog author="ma@suse.de" date="1721736000">- Fix typo in the geoip update pipeline (bsc#1228206)
- Export RepoVariablesStringReplacer for yast2 (bsc#1228138)
- version 17.35.4 (35)</changelog>
  <changelog author="ma@suse.de" date="1722340800">- Export asSolvable for YAST (bsc#1228420)
- Fix 4 typos in zypp.conf.
- version 17.35.5 (35)</changelog>
  <changelog author="ma@suse.de" date="1722340801">- Export CredentialManager for legacy YAST versions (bsc#1228420)
- version 17.35.6 (35)</changelog>
  <changelog author="ma@suse.de" date="1722513600">- MediaPluginType must be resolved to a valid MediaHandler
  (bsc#1228208)
- version 17.35.7 (35)</changelog>
  <changelog author="ma@suse.de" date="1722600000">- Make sure not to statically linked installed tools (bsc#1228787)
- version 17.35.8 (35)</changelog>
</package>
<package pkgid="1fee59187e604686fc45d8cfe5f9c8ef2fec22defb67240caeb6e2288c664cc1" name="libzypp" arch="src">
  <version epoch="0" ver="17.35.8" rel="150500.6.13.1"/>
  <changelog author="ma@suse.de" date="1714737600">- Fixed check for outdated repo metadata as non-root user
  (bsc#1222086)
- Add ZYPP_API for exported functions and switch to
  visibility=hidden (jsc#PED-8153)
- Dynamically resolve libproxy (jsc#PED-8153)
- version 17.33.0 (33)</changelog>
  <changelog author="dmueller@suse.com" date="1714737601">- switch to reduced size libsolv-tools-base (jsc#PED-8153)</changelog>
  <changelog author="ma@suse.de" date="1714737602">- version 17.33.1 (33)</changelog>
  <changelog author="dmueller@suse.com" date="1714996800">- fix up requires_eq usage for libsolv-tools-base
- add one more missing export for PackageKit
- version 17.33.2</changelog>
  <changelog author="bzeller@suse.de" date="1715169600">- Revert eintrSafeCall behavior to setting errno to 0.
- version 17.33.3 (34)</changelog>
  <changelog author="dmueller@suse.com" date="1715256000">- add one more missing export for libyui-qt-pkg</changelog>
  <changelog author="bzeller@suse.de" date="1715601600">- version 17.33.4 (35)</changelog>
  <changelog author="bzeller@suse.de" date="1715688000">- version 17.34.0 (34)
- Fix versioning scheme</changelog>
  <changelog author="dmueller@suse.com" date="1715688001">- don't require libproxy1 on tumbleweed, it is optional now</changelog>
  <changelog author="ma@suse.de" date="1717156800">- zypp-tui: Make sure translated texts use the correct textdomain
  (fixes #551)
- Skip libproxy1 requires for tumbleweed.
- version 17.34.1 (34)</changelog>
  <changelog author="ma@suse.de" date="1719230400">- Workaround broken libsolv-tools-base requirements (fixes
  openSUSE/zypper#551)
- Strip ssl_clientkey from repo urls (bsc#1226030)
- Remove protobuf build dependency.
- Lazily attach medium during refresh workflows (bsc#1223094)
- Refactor RepoManager and add Service workflows.
- version 17.34.2 (34)</changelog>
  <changelog author="ma@suse.de" date="1719576000">- Update soname due to RepoManager refactoring and cleanup.
- version 17.35.0 (35)</changelog>
  <changelog author="ma@suse.de" date="1719921600">- Install zypp/APIConfig.h legacy include (fixes #557)
- version 17.35.1 (35)</changelog>
  <changelog author="ma@suse.de" date="1720526400">- Keep UrlResolverPlugin API public (fixes #560)
- Blacklist /snap executables for 'zypper ps' (bsc#1226014)
- Fix handling of buddies when applying locks (bsc#1225267)
  Buddy pairs (like -release package and product) internally share
  the same status object. When applying locks from query results
  the locked bit must be set if either item is locked.
- version 17.35.2 (35)</changelog>
  <changelog author="ma@suse.de" date="1721044800">- Translation: updated .pot file.
- Conflict with python zypp-plugin &lt; 0.6.4 (bsc#1227793)
  Older zypp-plugins reject stomp headers including a '-'. Like the
  'content-length' header we may send.
- Fix int overflow in Provider (fixes #559)
  This patch fixes an issue in safe_strtonum which caused
  timestamps to overflow in the Provider message parser.
- Fix error reporting on repoindex.xml parse error (bsc#1227625)
- version 17.35.3 (35)</changelog>
  <changelog author="ma@suse.de" date="1721736000">- Fix typo in the geoip update pipeline (bsc#1228206)
- Export RepoVariablesStringReplacer for yast2 (bsc#1228138)
- version 17.35.4 (35)</changelog>
  <changelog author="ma@suse.de" date="1722340800">- Export asSolvable for YAST (bsc#1228420)
- Fix 4 typos in zypp.conf.
- version 17.35.5 (35)</changelog>
  <changelog author="ma@suse.de" date="1722340801">- Export CredentialManager for legacy YAST versions (bsc#1228420)
- version 17.35.6 (35)</changelog>
  <changelog author="ma@suse.de" date="1722513600">- MediaPluginType must be resolved to a valid MediaHandler
  (bsc#1228208)
- version 17.35.7 (35)</changelog>
  <changelog author="ma@suse.de" date="1722600000">- Make sure not to statically linked installed tools (bsc#1228787)
- version 17.35.8 (35)</changelog>
</package>
<package pkgid="bb69c70a82d8e30849ba27c48e97f2e9fe00adaff2460bf1b17f82b0d2233626" name="libzypp" arch="x86_64">
  <version epoch="0" ver="17.35.8" rel="150500.6.13.1"/>
  <changelog author="ma@suse.de" date="1714737600">- Fixed check for outdated repo metadata as non-root user
  (bsc#1222086)
- Add ZYPP_API for exported functions and switch to
  visibility=hidden (jsc#PED-8153)
- Dynamically resolve libproxy (jsc#PED-8153)
- version 17.33.0 (33)</changelog>
  <changelog author="dmueller@suse.com" date="1714737601">- switch to reduced size libsolv-tools-base (jsc#PED-8153)</changelog>
  <changelog author="ma@suse.de" date="1714737602">- version 17.33.1 (33)</changelog>
  <changelog author="dmueller@suse.com" date="1714996800">- fix up requires_eq usage for libsolv-tools-base
- add one more missing export for PackageKit
- version 17.33.2</changelog>
  <changelog author="bzeller@suse.de" date="1715169600">- Revert eintrSafeCall behavior to setting errno to 0.
- version 17.33.3 (34)</changelog>
  <changelog author="dmueller@suse.com" date="1715256000">- add one more missing export for libyui-qt-pkg</changelog>
  <changelog author="bzeller@suse.de" date="1715601600">- version 17.33.4 (35)</changelog>
  <changelog author="bzeller@suse.de" date="1715688000">- version 17.34.0 (34)
- Fix versioning scheme</changelog>
  <changelog author="dmueller@suse.com" date="1715688001">- don't require libproxy1 on tumbleweed, it is optional now</changelog>
  <changelog author="ma@suse.de" date="1717156800">- zypp-tui: Make sure translated texts use the correct textdomain
  (fixes #551)
- Skip libproxy1 requires for tumbleweed.
- version 17.34.1 (34)</changelog>
  <changelog author="ma@suse.de" date="1719230400">- Workaround broken libsolv-tools-base requirements (fixes
  openSUSE/zypper#551)
- Strip ssl_clientkey from repo urls (bsc#1226030)
- Remove protobuf build dependency.
- Lazily attach medium during refresh workflows (bsc#1223094)
- Refactor RepoManager and add Service workflows.
- version 17.34.2 (34)</changelog>
  <changelog author="ma@suse.de" date="1719576000">- Update soname due to RepoManager refactoring and cleanup.
- version 17.35.0 (35)</changelog>
  <changelog author="ma@suse.de" date="1719921600">- Install zypp/APIConfig.h legacy include (fixes #557)
- version 17.35.1 (35)</changelog>
  <changelog author="ma@suse.de" date="1720526400">- Keep UrlResolverPlugin API public (fixes #560)
- Blacklist /snap executables for 'zypper ps' (bsc#1226014)
- Fix handling of buddies when applying locks (bsc#1225267)
  Buddy pairs (like -release package and product) internally share
  the same status object. When applying locks from query results
  the locked bit must be set if either item is locked.
- version 17.35.2 (35)</changelog>
  <changelog author="ma@suse.de" date="1721044800">- Translation: updated .pot file.
- Conflict with python zypp-plugin &lt; 0.6.4 (bsc#1227793)
  Older zypp-plugins reject stomp headers including a '-'. Like the
  'content-length' header we may send.
- Fix int overflow in Provider (fixes #559)
  This patch fixes an issue in safe_strtonum which caused
  timestamps to overflow in the Provider message parser.
- Fix error reporting on repoindex.xml parse error (bsc#1227625)
- version 17.35.3 (35)</changelog>
  <changelog author="ma@suse.de" date="1721736000">- Fix typo in the geoip update pipeline (bsc#1228206)
- Export RepoVariablesStringReplacer for yast2 (bsc#1228138)
- version 17.35.4 (35)</changelog>
  <changelog author="ma@suse.de" date="1722340800">- Export asSolvable for YAST (bsc#1228420)
- Fix 4 typos in zypp.conf.
- version 17.35.5 (35)</changelog>
  <changelog author="ma@suse.de" date="1722340801">- Export CredentialManager for legacy YAST versions (bsc#1228420)
- version 17.35.6 (35)</changelog>
  <changelog author="ma@suse.de" date="1722513600">- MediaPluginType must be resolved to a valid MediaHandler
  (bsc#1228208)
- version 17.35.7 (35)</changelog>
  <changelog author="ma@suse.de" date="1722600000">- Make sure not to statically linked installed tools (bsc#1228787)
- version 17.35.8 (35)</changelog>
</package>
<package pkgid="58b9616d2ef940f6d888fed37c1e177f708e92805aace33721d23e83adc47eb3" name="llvm15" arch="src">
  <version epoch="0" ver="15.0.7" rel="150500.4.11.1"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1655380800">- Update to version 14.0.5.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1656936000">- Update to version 14.0.6.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1660046400">- Add llvm-glibc-2-36.patch in order to address boo#1202215.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1660132800">- Add WebAssembly support for all architectures.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1660392000">- Use black RPM macro magic to deduplicate binary lists. This
  should have no effect on the generated RPM but shaves ~400 lines
  off the specfile and hopefully makes future maintenance easier.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1661256000">- Don't declare python3-clang as noarch: Python packages are
  installed into %{_libdir}.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1661515200">- Add llvm-lifetime-for-rust.patch to have Rust memory management
  functions considered as lifetime markers. This should aid dead
  store elimination to dynamically allocated memory in Rust code.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1662206400">- Make sure we keep -DNDEBUG. At some point %{optflags} must have
  lost it, perhaps because CMake usually adds it on top. So when
  overriding CMAKE_{C,CXX}_FLAGS_RELWITHDEBINFO, we make sure to
  take over the other flags. We drop LLVM_ENABLE_ASSERTIONS=OFF,
  because that's the default anyway and hasn't helped here.
- Add llvm-scev-fix-isImpliedViaMerge.patch: fixes a miscompilation
  caused by mixing up values of the current and previous iteration.
  (See gh#llvm/llvm-project#56242.)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1662465600">- Update to version 15.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/15.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools:
  - llvm-debuginfod: Provides debug info to remote hosts.
  - llvm-dwarfutil: Can copy and manipulate debug info.
  - llvm-remark-size-diff: Compute diff between remark files.
  * New Clang tools:
  - clang-offload-packager: Bundle multiple objects into single
    fat binaries including offload code.
  - clang-pseudo: Approximate heuristic parser for C++.
- Rebase patches:
  * check-no-llvm-exegesis.patch
  * link-clang-tools-extra-shared.patch
  * lld-default-sha1.patch
  * llvm-do-not-install-static-libraries.patch
  * lto-disable-cache.patch
- Drop patches that have landed upstream:
  * clang-repl-private-deps.patch
  * llvm-glibc-2-36.patch
  * llvm-scev-fix-isImpliedViaMerge.patch
- Drop llvm-lifetime-for-rust.patch: this is now solved via
  attributes and LLVM doesn't need a hardcoded list of allocation
  functions anymore.
- Add llvm-link-atomic.patch to fix build on ppc.
- Add libcxx-test-library-path.patch to fix libc++ tests failing
  without RUNPATH on libc++.so.
- Add libcxxabi-fix-armv7-test.patch to fix tests on armv7l.
- Thanks to Andreas Schwab for most of the rebasing!</changelog>
  <changelog author="schwab@suse.de" date="1662984000">- Use correct LLVM_HOST_TRIPLE for riscv64</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663761600">- Always drop -gnu from triple for consistency. Patch a test that
  was looking for -linux- in clang-test-xfail-gnuless-triple.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Update to version 15.0.1.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1664884800">- Update to version 15.0.2.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1666872000">- Update to version 15.0.3.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Add llvm-armv7-fix-vector-compare-with-zero-lowering.patch: Fix
  lowering of non-canonical vector comparison with zero on armv7,
  preventing a crash (boo#1204267, gh#llvm/llvm-project#58514).
- Add lldb-swig-4.1.0-build-fix.patch: Fix build with Swig 4.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1667736000">- Update to version 15.0.4.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1668600000">- Update to version 15.0.5.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Remove obsolete lldb-swig-4.1.0-build-fix.patch.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1670155200">- Update to version 15.0.6.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1673697600">- Update to version 15.0.7.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Build stage 2 with -fno-plt on x86_64: since building with
  - Wl,-z,now the PLT stubs are basically dead code, so eliminating
  the indirection reduces the number of branches and improves code
  locality for the quite frequent cross-DSO calls.
- Add llvm-workaround-superfluous-branches.patch: hints LLVM to
  eliminate branches until gh#llvm/llvm-project#28804 is solved.</changelog>
  <changelog author="dmueller@suse.com" date="1678363200">- update constraints to exclude workers with very slow CPU</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1701345600">- Manage clang-cpp with update-alternatives like other binaries.
  Solves upgrade issues from Leap 15.5 to 15.6.  [boo#1221183]</changelog>
</package>
<package pkgid="d900497a6d2eb7cd07671e0c70968419493dad87b51d94fb13995b7204adcf8c" name="llvm15" arch="src">
  <version epoch="0" ver="15.0.7" rel="150500.4.4.1"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1653739200">- Update to version 14.0.4.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Don't use gold for linking anymore: on s390x we use ld.bfd with
  LLVMgold.so, on ppc64 we disable ThinLTO for now.
- Using ld.bfd on s390x exposed an issue with the existing
  llvm_build_tablegen_component_as_shared_library.patch: linking
  llvm-tblgen with libLLVM.so means we also have to link libraries
  used for that (like LLVMTableGenGlobalISel) with libLLVM.so.
- Rewrite summary and description for llvm-gold to point out that
  it can also be used with ld.bfd, recommend with binutils.
- Prefer RPM macros over shell scripting, so that we can better
  inspect the build script with substitutions in place.
- More memory for stage 1 build jobs due to recent OOMs.
- Add %_libclang_sonum RPM macro to llvm-devel, since that might
  now diverge from %_llvm_sonum.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1655380800">- Update to version 14.0.5.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1656936000">- Update to version 14.0.6.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1660046400">- Add llvm-glibc-2-36.patch in order to address boo#1202215.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1660132800">- Add WebAssembly support for all architectures.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1660392000">- Use black RPM macro magic to deduplicate binary lists. This
  should have no effect on the generated RPM but shaves ~400 lines
  off the specfile and hopefully makes future maintenance easier.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1661256000">- Don't declare python3-clang as noarch: Python packages are
  installed into %{_libdir}.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1661515200">- Add llvm-lifetime-for-rust.patch to have Rust memory management
  functions considered as lifetime markers. This should aid dead
  store elimination to dynamically allocated memory in Rust code.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1662206400">- Make sure we keep -DNDEBUG. At some point %{optflags} must have
  lost it, perhaps because CMake usually adds it on top. So when
  overriding CMAKE_{C,CXX}_FLAGS_RELWITHDEBINFO, we make sure to
  take over the other flags. We drop LLVM_ENABLE_ASSERTIONS=OFF,
  because that's the default anyway and hasn't helped here.
- Add llvm-scev-fix-isImpliedViaMerge.patch: fixes a miscompilation
  caused by mixing up values of the current and previous iteration.
  (See gh#llvm/llvm-project#56242.)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1662465600">- Update to version 15.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/15.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools:
  - llvm-debuginfod: Provides debug info to remote hosts.
  - llvm-dwarfutil: Can copy and manipulate debug info.
  - llvm-remark-size-diff: Compute diff between remark files.
  * New Clang tools:
  - clang-offload-packager: Bundle multiple objects into single
    fat binaries including offload code.
  - clang-pseudo: Approximate heuristic parser for C++.
- Rebase patches:
  * check-no-llvm-exegesis.patch
  * link-clang-tools-extra-shared.patch
  * lld-default-sha1.patch
  * llvm-do-not-install-static-libraries.patch
  * lto-disable-cache.patch
- Drop patches that have landed upstream:
  * clang-repl-private-deps.patch
  * llvm-glibc-2-36.patch
  * llvm-scev-fix-isImpliedViaMerge.patch
- Drop llvm-lifetime-for-rust.patch: this is now solved via
  attributes and LLVM doesn't need a hardcoded list of allocation
  functions anymore.
- Add llvm-link-atomic.patch to fix build on ppc.
- Add libcxx-test-library-path.patch to fix libc++ tests failing
  without RUNPATH on libc++.so.
- Add libcxxabi-fix-armv7-test.patch to fix tests on armv7l.
- Thanks to Andreas Schwab for most of the rebasing!</changelog>
  <changelog author="schwab@suse.de" date="1662984000">- Use correct LLVM_HOST_TRIPLE for riscv64</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663761600">- Always drop -gnu from triple for consistency. Patch a test that
  was looking for -linux- in clang-test-xfail-gnuless-triple.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Update to version 15.0.1.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1664884800">- Update to version 15.0.2.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1666872000">- Update to version 15.0.3.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Add llvm-armv7-fix-vector-compare-with-zero-lowering.patch: Fix
  lowering of non-canonical vector comparison with zero on armv7,
  preventing a crash (boo#1204267, gh#llvm/llvm-project#58514).
- Add lldb-swig-4.1.0-build-fix.patch: Fix build with Swig 4.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1667736000">- Update to version 15.0.4.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1668600000">- Update to version 15.0.5.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Remove obsolete lldb-swig-4.1.0-build-fix.patch.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1670155200">- Update to version 15.0.6.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1673697600">- Update to version 15.0.7.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Build stage 2 with -fno-plt on x86_64: since building with
  - Wl,-z,now the PLT stubs are basically dead code, so eliminating
  the indirection reduces the number of branches and improves code
  locality for the quite frequent cross-DSO calls.
- Add llvm-workaround-superfluous-branches.patch: hints LLVM to
  eliminate branches until gh#llvm/llvm-project#28804 is solved.</changelog>
  <changelog author="dmueller@suse.com" date="1678363200">- update constraints to exclude workers with very slow CPU</changelog>
</package>
<package pkgid="c8eb4c2a318762c244638a1e4a005a52350880c0394d76c20d156dd4ce013430" name="llvm15" arch="src">
  <version epoch="0" ver="15.0.7" rel="150500.4.6.2"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1653739200">- Update to version 14.0.4.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Don't use gold for linking anymore: on s390x we use ld.bfd with
  LLVMgold.so, on ppc64 we disable ThinLTO for now.
- Using ld.bfd on s390x exposed an issue with the existing
  llvm_build_tablegen_component_as_shared_library.patch: linking
  llvm-tblgen with libLLVM.so means we also have to link libraries
  used for that (like LLVMTableGenGlobalISel) with libLLVM.so.
- Rewrite summary and description for llvm-gold to point out that
  it can also be used with ld.bfd, recommend with binutils.
- Prefer RPM macros over shell scripting, so that we can better
  inspect the build script with substitutions in place.
- More memory for stage 1 build jobs due to recent OOMs.
- Add %_libclang_sonum RPM macro to llvm-devel, since that might
  now diverge from %_llvm_sonum.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1655380800">- Update to version 14.0.5.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1656936000">- Update to version 14.0.6.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1660046400">- Add llvm-glibc-2-36.patch in order to address boo#1202215.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1660132800">- Add WebAssembly support for all architectures.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1660392000">- Use black RPM macro magic to deduplicate binary lists. This
  should have no effect on the generated RPM but shaves ~400 lines
  off the specfile and hopefully makes future maintenance easier.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1661256000">- Don't declare python3-clang as noarch: Python packages are
  installed into %{_libdir}.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1661515200">- Add llvm-lifetime-for-rust.patch to have Rust memory management
  functions considered as lifetime markers. This should aid dead
  store elimination to dynamically allocated memory in Rust code.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1662206400">- Make sure we keep -DNDEBUG. At some point %{optflags} must have
  lost it, perhaps because CMake usually adds it on top. So when
  overriding CMAKE_{C,CXX}_FLAGS_RELWITHDEBINFO, we make sure to
  take over the other flags. We drop LLVM_ENABLE_ASSERTIONS=OFF,
  because that's the default anyway and hasn't helped here.
- Add llvm-scev-fix-isImpliedViaMerge.patch: fixes a miscompilation
  caused by mixing up values of the current and previous iteration.
  (See gh#llvm/llvm-project#56242.)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1662465600">- Update to version 15.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/15.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools:
  - llvm-debuginfod: Provides debug info to remote hosts.
  - llvm-dwarfutil: Can copy and manipulate debug info.
  - llvm-remark-size-diff: Compute diff between remark files.
  * New Clang tools:
  - clang-offload-packager: Bundle multiple objects into single
    fat binaries including offload code.
  - clang-pseudo: Approximate heuristic parser for C++.
- Rebase patches:
  * check-no-llvm-exegesis.patch
  * link-clang-tools-extra-shared.patch
  * lld-default-sha1.patch
  * llvm-do-not-install-static-libraries.patch
  * lto-disable-cache.patch
- Drop patches that have landed upstream:
  * clang-repl-private-deps.patch
  * llvm-glibc-2-36.patch
  * llvm-scev-fix-isImpliedViaMerge.patch
- Drop llvm-lifetime-for-rust.patch: this is now solved via
  attributes and LLVM doesn't need a hardcoded list of allocation
  functions anymore.
- Add llvm-link-atomic.patch to fix build on ppc.
- Add libcxx-test-library-path.patch to fix libc++ tests failing
  without RUNPATH on libc++.so.
- Add libcxxabi-fix-armv7-test.patch to fix tests on armv7l.
- Thanks to Andreas Schwab for most of the rebasing!</changelog>
  <changelog author="schwab@suse.de" date="1662984000">- Use correct LLVM_HOST_TRIPLE for riscv64</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663761600">- Always drop -gnu from triple for consistency. Patch a test that
  was looking for -linux- in clang-test-xfail-gnuless-triple.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Update to version 15.0.1.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1664884800">- Update to version 15.0.2.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1666872000">- Update to version 15.0.3.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Add llvm-armv7-fix-vector-compare-with-zero-lowering.patch: Fix
  lowering of non-canonical vector comparison with zero on armv7,
  preventing a crash (boo#1204267, gh#llvm/llvm-project#58514).
- Add lldb-swig-4.1.0-build-fix.patch: Fix build with Swig 4.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1667736000">- Update to version 15.0.4.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1668600000">- Update to version 15.0.5.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Remove obsolete lldb-swig-4.1.0-build-fix.patch.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1670155200">- Update to version 15.0.6.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1673697600">- Update to version 15.0.7.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Build stage 2 with -fno-plt on x86_64: since building with
  - Wl,-z,now the PLT stubs are basically dead code, so eliminating
  the indirection reduces the number of branches and improves code
  locality for the quite frequent cross-DSO calls.
- Add llvm-workaround-superfluous-branches.patch: hints LLVM to
  eliminate branches until gh#llvm/llvm-project#28804 is solved.</changelog>
  <changelog author="dmueller@suse.com" date="1678363200">- update constraints to exclude workers with very slow CPU</changelog>
</package>
<package pkgid="bd1eba6ec733f8bf25127f4813c1b05aa1a0d3c996660e43335114a2d5601e1c" name="llvm15" arch="src">
  <version epoch="0" ver="15.0.7" rel="150500.4.9.6"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1655380800">- Update to version 14.0.5.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1656936000">- Update to version 14.0.6.
  * This release contains bug-fixes for the LLVM 14.0.0 release.
    This release is API and ABI compatible with 14.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1660046400">- Add llvm-glibc-2-36.patch in order to address boo#1202215.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1660132800">- Add WebAssembly support for all architectures.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1660392000">- Use black RPM macro magic to deduplicate binary lists. This
  should have no effect on the generated RPM but shaves ~400 lines
  off the specfile and hopefully makes future maintenance easier.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1661256000">- Don't declare python3-clang as noarch: Python packages are
  installed into %{_libdir}.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1661515200">- Add llvm-lifetime-for-rust.patch to have Rust memory management
  functions considered as lifetime markers. This should aid dead
  store elimination to dynamically allocated memory in Rust code.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1662206400">- Make sure we keep -DNDEBUG. At some point %{optflags} must have
  lost it, perhaps because CMake usually adds it on top. So when
  overriding CMAKE_{C,CXX}_FLAGS_RELWITHDEBINFO, we make sure to
  take over the other flags. We drop LLVM_ENABLE_ASSERTIONS=OFF,
  because that's the default anyway and hasn't helped here.
- Add llvm-scev-fix-isImpliedViaMerge.patch: fixes a miscompilation
  caused by mixing up values of the current and previous iteration.
  (See gh#llvm/llvm-project#56242.)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1662465600">- Update to version 15.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/15.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/15.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools:
  - llvm-debuginfod: Provides debug info to remote hosts.
  - llvm-dwarfutil: Can copy and manipulate debug info.
  - llvm-remark-size-diff: Compute diff between remark files.
  * New Clang tools:
  - clang-offload-packager: Bundle multiple objects into single
    fat binaries including offload code.
  - clang-pseudo: Approximate heuristic parser for C++.
- Rebase patches:
  * check-no-llvm-exegesis.patch
  * link-clang-tools-extra-shared.patch
  * lld-default-sha1.patch
  * llvm-do-not-install-static-libraries.patch
  * lto-disable-cache.patch
- Drop patches that have landed upstream:
  * clang-repl-private-deps.patch
  * llvm-glibc-2-36.patch
  * llvm-scev-fix-isImpliedViaMerge.patch
- Drop llvm-lifetime-for-rust.patch: this is now solved via
  attributes and LLVM doesn't need a hardcoded list of allocation
  functions anymore.
- Add llvm-link-atomic.patch to fix build on ppc.
- Add libcxx-test-library-path.patch to fix libc++ tests failing
  without RUNPATH on libc++.so.
- Add libcxxabi-fix-armv7-test.patch to fix tests on armv7l.
- Thanks to Andreas Schwab for most of the rebasing!</changelog>
  <changelog author="schwab@suse.de" date="1662984000">- Use correct LLVM_HOST_TRIPLE for riscv64</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663761600">- Always drop -gnu from triple for consistency. Patch a test that
  was looking for -linux- in clang-test-xfail-gnuless-triple.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1663848000">- Update to version 15.0.1.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1664884800">- Update to version 15.0.2.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1666872000">- Update to version 15.0.3.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Add llvm-armv7-fix-vector-compare-with-zero-lowering.patch: Fix
  lowering of non-canonical vector comparison with zero on armv7,
  preventing a crash (boo#1204267, gh#llvm/llvm-project#58514).
- Add lldb-swig-4.1.0-build-fix.patch: Fix build with Swig 4.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1667736000">- Update to version 15.0.4.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1668600000">- Update to version 15.0.5.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Remove obsolete lldb-swig-4.1.0-build-fix.patch.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1670155200">- Update to version 15.0.6.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1673697600">- Update to version 15.0.7.
  * This release contains bug-fixes for the LLVM 15.0.0 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Build stage 2 with -fno-plt on x86_64: since building with
  - Wl,-z,now the PLT stubs are basically dead code, so eliminating
  the indirection reduces the number of branches and improves code
  locality for the quite frequent cross-DSO calls.
- Add llvm-workaround-superfluous-branches.patch: hints LLVM to
  eliminate branches until gh#llvm/llvm-project#28804 is solved.</changelog>
  <changelog author="dmueller@suse.com" date="1678363200">- update constraints to exclude workers with very slow CPU</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1701345600">- Manage clang-cpp with update-alternatives like other binaries.
  Solves upgrade issues from Leap 15.5 to 15.6.  [boo#1221183]</changelog>
</package>
<package pkgid="bbfe735a4b95223ef0cb148cfd52a96b8ce63b8c390ced732065aea70cbb1c5b" name="login_defs" arch="noarch">
  <version epoch="0" ver="4.8.1" rel="150500.3.3.1"/>
  <changelog author="mvetter@suse.com" date="1579176000">- bsc#1160729: Make valid shell check only a warning
  * Add shadow-4.8-shell-check.patch</changelog>
  <changelog author="mvetter@suse.com" date="1579521600">- Set 0755 for chpasswd, groupadd, groupdel, groupmod, newusers,
  useradd, userdel, usermod explicitly.</changelog>
  <changelog author="mvetter@suse.com" date="1579867200">- Update to 4.8.1:
  * selinux: include stdio
  * man: don't suggest making groupmems user-writeable
  * Makefile: bail out on error in for loops
  * Adding logging of SSH_ORIGINAL_COMMAND to nologin
  * add new HOME_MODE login.defs option
  * Add tty logging to useradd
  * Useradd: make non-executable shell check only a warning
  * Update Dutch translation
  * user_busy: Do not mistake a regular user process for a namespaced one
  * Revert "Honor --sbindir and --bindir for binary installation"
- Remove shadow-4.8-shell-check.patch: included
- Remove shadow-4.8-selinux-include.patch: upstreamed</changelog>
  <changelog author="fvogt@suse.com" date="1590148800">- Use pure #!/bin/sh in:
  * useradd.local
  * userdel-post.local
  * userdel-pre.local</changelog>
  <changelog author="sbrabec@suse.com" date="1599566400">- login.defs: Add support for new util-linux-2.36 login variable
  MOTD_FIRSTONLY (shadow-util-linux.patch).
- shadow-login_defs-comments.patch: Remove duplicated
  LASTLOG_UID_MAX.
- shadow-login_defs-check.sh: Update for new build system.
- shadow-util-linux.patch: Restore lost chunk: SYSLOG_SU_ENAB is
  not used in SUSE Linux.
- Refresh shadow-login_defs-suse.patch and
  shadow-login_defs-comments.patch.</changelog>
  <changelog author="sbrabec@suse.com" date="1602158400">- shadow-login_defs-check.sh: Fix the regexp to get a real variable
  list (boo#1164274).</changelog>
  <changelog author="werner@suse.de" date="1602244800">- Add support for /usr/etc/skel to useradd.local script (boo#1173321)</changelog>
  <changelog author="werner@suse.de" date="1604318400">- Change again useradd.local script to let it work even for system
  accounts and work together with SELinux (bsc#1178296)
- Change patch useradd-script.patch to support the four arguments
  used by the useradd.local script (bsc#1178296)</changelog>
  <changelog author="werner@suse.de" date="1605096000">- Add patch useradd-userkeleton.patch to extend original C code
  of useradd to handle /usr/etc/skel (boo#1173321)
- Remove /usr/etc/skel support in useradd.local script</changelog>
  <changelog author="fvogt@suse.com" date="1605096001">- Amend patches/useradd-userkeleton.patch to also write into
  existing directories and prefer files from /etc</changelog>
  <changelog author="kukuk@suse.com" date="1611230400">- Split login.defs configuration file into own sub-package, which
  allows to install util-linux or pam on small embedded/edge
  systems or container without the need to pull in the full shadow
  suite.</changelog>
  <changelog author="sbrabec@suse.com" date="1611835200">- Do not require libeconf-devel on products without /usr/etc.</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- shadow-util-linux.patch:
  * Add support for LOGIN_KEEP_USERNAME from util-linux &gt;= 2.37.
- Refresh shadow-login_defs-suse.patch.</changelog>
  <changelog author="sbrabec@suse.com" date="1641988800">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- Added patch:
  * shadow-4.8.1-AUDIT_NO_ID.patch
    + fix bsc#1205502: useradd audit event user id field cannot
    be interpreted</changelog>
  <changelog author="mvetter@suse.com" date="1681819200">- bsc#1210507 (CVE-2023-29383):
  Check for control characters
- Add shadow-CVE-2023-29383.patch</changelog>
  <changelog author="mvetter@suse.com" date="1688472000">- bsc#1206627: Add --prefix support to passwd, chpasswd and chage
  Needed for YaST
- Add shadow-4.8.1-add-prefix-passwd-chpasswd-chage.patch</changelog>
  <changelog author="mvetter@suse.com" date="1689076800">- bsc#1213189: Change lock mechanism to file locking to prevent
  lock files after power interruptions
- Add shadow-4.8.1-lock-mechanism.patch</changelog>
  <changelog author="mvetter@suse.com" date="1694174400">- bsc#1214806 (CVE-2023-4641):
  Fix potential password leak
- Add shadow-CVE-2023-4641.patch</changelog>
  <changelog author="mvetter@suse.com" date="1709726400">- bsc#1176006: Fix chage date miscalculation
  Add shadow-bsc1176006-chage-date.patch
- bsc#1188307: Fix passwd segfault
  Add shadow-bsc1188307-passwd-segfault.patch
- bsc#1203823: Remove pam_keyinit from PAM config files
  Remove pam_keyinit from PAM configuration.
  This was introduced for bsc#1144060.</changelog>
</package>
<package pkgid="9bd9cf94fe524e14e136d151ad06714f49b6ee9adfb22fd358bebe58bb799d39" name="login_defs" arch="noarch">
  <version epoch="0" ver="4.8.1" rel="150500.3.6.1"/>
  <changelog author="mvetter@suse.com" date="1579521600">- Set 0755 for chpasswd, groupadd, groupdel, groupmod, newusers,
  useradd, userdel, usermod explicitly.</changelog>
  <changelog author="mvetter@suse.com" date="1579867200">- Update to 4.8.1:
  * selinux: include stdio
  * man: don't suggest making groupmems user-writeable
  * Makefile: bail out on error in for loops
  * Adding logging of SSH_ORIGINAL_COMMAND to nologin
  * add new HOME_MODE login.defs option
  * Add tty logging to useradd
  * Useradd: make non-executable shell check only a warning
  * Update Dutch translation
  * user_busy: Do not mistake a regular user process for a namespaced one
  * Revert "Honor --sbindir and --bindir for binary installation"
- Remove shadow-4.8-shell-check.patch: included
- Remove shadow-4.8-selinux-include.patch: upstreamed</changelog>
  <changelog author="fvogt@suse.com" date="1590148800">- Use pure #!/bin/sh in:
  * useradd.local
  * userdel-post.local
  * userdel-pre.local</changelog>
  <changelog author="sbrabec@suse.com" date="1599566400">- login.defs: Add support for new util-linux-2.36 login variable
  MOTD_FIRSTONLY (shadow-util-linux.patch).
- shadow-login_defs-comments.patch: Remove duplicated
  LASTLOG_UID_MAX.
- shadow-login_defs-check.sh: Update for new build system.
- shadow-util-linux.patch: Restore lost chunk: SYSLOG_SU_ENAB is
  not used in SUSE Linux.
- Refresh shadow-login_defs-suse.patch and
  shadow-login_defs-comments.patch.</changelog>
  <changelog author="sbrabec@suse.com" date="1602158400">- shadow-login_defs-check.sh: Fix the regexp to get a real variable
  list (boo#1164274).</changelog>
  <changelog author="werner@suse.de" date="1602244800">- Add support for /usr/etc/skel to useradd.local script (boo#1173321)</changelog>
  <changelog author="werner@suse.de" date="1604318400">- Change again useradd.local script to let it work even for system
  accounts and work together with SELinux (bsc#1178296)
- Change patch useradd-script.patch to support the four arguments
  used by the useradd.local script (bsc#1178296)</changelog>
  <changelog author="werner@suse.de" date="1605096000">- Add patch useradd-userkeleton.patch to extend original C code
  of useradd to handle /usr/etc/skel (boo#1173321)
- Remove /usr/etc/skel support in useradd.local script</changelog>
  <changelog author="fvogt@suse.com" date="1605096001">- Amend patches/useradd-userkeleton.patch to also write into
  existing directories and prefer files from /etc</changelog>
  <changelog author="kukuk@suse.com" date="1611230400">- Split login.defs configuration file into own sub-package, which
  allows to install util-linux or pam on small embedded/edge
  systems or container without the need to pull in the full shadow
  suite.</changelog>
  <changelog author="sbrabec@suse.com" date="1611835200">- Do not require libeconf-devel on products without /usr/etc.</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- shadow-util-linux.patch:
  * Add support for LOGIN_KEEP_USERNAME from util-linux &gt;= 2.37.
- Refresh shadow-login_defs-suse.patch.</changelog>
  <changelog author="sbrabec@suse.com" date="1641988800">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- Added patch:
  * shadow-4.8.1-AUDIT_NO_ID.patch
    + fix bsc#1205502: useradd audit event user id field cannot
    be interpreted</changelog>
  <changelog author="mvetter@suse.com" date="1681819200">- bsc#1210507 (CVE-2023-29383):
  Check for control characters
- Add shadow-CVE-2023-29383.patch</changelog>
  <changelog author="mvetter@suse.com" date="1688472000">- bsc#1206627: Add --prefix support to passwd, chpasswd and chage
  Needed for YaST
- Add shadow-4.8.1-add-prefix-passwd-chpasswd-chage.patch</changelog>
  <changelog author="mvetter@suse.com" date="1689076800">- bsc#1213189: Change lock mechanism to file locking to prevent
  lock files after power interruptions
- Add shadow-4.8.1-lock-mechanism.patch</changelog>
  <changelog author="mvetter@suse.com" date="1694174400">- bsc#1214806 (CVE-2023-4641):
  Fix potential password leak
- Add shadow-CVE-2023-4641.patch</changelog>
  <changelog author="mvetter@suse.com" date="1709726400">- bsc#1176006: Fix chage date miscalculation
  Add shadow-bsc1176006-chage-date.patch
- bsc#1188307: Fix passwd segfault
  Add shadow-bsc1188307-passwd-segfault.patch
- bsc#1203823: Remove pam_keyinit from PAM config files
  Remove pam_keyinit from PAM configuration.
  This was introduced for bsc#1144060.</changelog>
  <changelog author="mvetter@suse.com" date="1721649600">- bsc#916845 (CVE-2013-4235): Fix TOCTOU race condition
  Add shadow-CVE-2013-4235.patch</changelog>
</package>
<package pkgid="f505358d354ab97094a011d663cc18cf4bfebaf5060ea9a0286d3f9ab52b8cba" name="login_defs" arch="noarch">
  <version epoch="0" ver="4.8.1" rel="150500.3.9.1"/>
  <changelog author="mvetter@suse.com" date="1579867200">- Update to 4.8.1:
  * selinux: include stdio
  * man: don't suggest making groupmems user-writeable
  * Makefile: bail out on error in for loops
  * Adding logging of SSH_ORIGINAL_COMMAND to nologin
  * add new HOME_MODE login.defs option
  * Add tty logging to useradd
  * Useradd: make non-executable shell check only a warning
  * Update Dutch translation
  * user_busy: Do not mistake a regular user process for a namespaced one
  * Revert "Honor --sbindir and --bindir for binary installation"
- Remove shadow-4.8-shell-check.patch: included
- Remove shadow-4.8-selinux-include.patch: upstreamed</changelog>
  <changelog author="fvogt@suse.com" date="1590148800">- Use pure #!/bin/sh in:
  * useradd.local
  * userdel-post.local
  * userdel-pre.local</changelog>
  <changelog author="sbrabec@suse.com" date="1599566400">- login.defs: Add support for new util-linux-2.36 login variable
  MOTD_FIRSTONLY (shadow-util-linux.patch).
- shadow-login_defs-comments.patch: Remove duplicated
  LASTLOG_UID_MAX.
- shadow-login_defs-check.sh: Update for new build system.
- shadow-util-linux.patch: Restore lost chunk: SYSLOG_SU_ENAB is
  not used in SUSE Linux.
- Refresh shadow-login_defs-suse.patch and
  shadow-login_defs-comments.patch.</changelog>
  <changelog author="sbrabec@suse.com" date="1602158400">- shadow-login_defs-check.sh: Fix the regexp to get a real variable
  list (boo#1164274).</changelog>
  <changelog author="werner@suse.de" date="1602244800">- Add support for /usr/etc/skel to useradd.local script (boo#1173321)</changelog>
  <changelog author="werner@suse.de" date="1604318400">- Change again useradd.local script to let it work even for system
  accounts and work together with SELinux (bsc#1178296)
- Change patch useradd-script.patch to support the four arguments
  used by the useradd.local script (bsc#1178296)</changelog>
  <changelog author="werner@suse.de" date="1605096000">- Add patch useradd-userkeleton.patch to extend original C code
  of useradd to handle /usr/etc/skel (boo#1173321)
- Remove /usr/etc/skel support in useradd.local script</changelog>
  <changelog author="fvogt@suse.com" date="1605096001">- Amend patches/useradd-userkeleton.patch to also write into
  existing directories and prefer files from /etc</changelog>
  <changelog author="kukuk@suse.com" date="1611230400">- Split login.defs configuration file into own sub-package, which
  allows to install util-linux or pam on small embedded/edge
  systems or container without the need to pull in the full shadow
  suite.</changelog>
  <changelog author="sbrabec@suse.com" date="1611835200">- Do not require libeconf-devel on products without /usr/etc.</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- shadow-util-linux.patch:
  * Add support for LOGIN_KEEP_USERNAME from util-linux &gt;= 2.37.
- Refresh shadow-login_defs-suse.patch.</changelog>
  <changelog author="sbrabec@suse.com" date="1641988800">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- Added patch:
  * shadow-4.8.1-AUDIT_NO_ID.patch
    + fix bsc#1205502: useradd audit event user id field cannot
    be interpreted</changelog>
  <changelog author="mvetter@suse.com" date="1681819200">- bsc#1210507 (CVE-2023-29383):
  Check for control characters
- Add shadow-CVE-2023-29383.patch</changelog>
  <changelog author="mvetter@suse.com" date="1688472000">- bsc#1206627: Add --prefix support to passwd, chpasswd and chage
  Needed for YaST
- Add shadow-4.8.1-add-prefix-passwd-chpasswd-chage.patch</changelog>
  <changelog author="mvetter@suse.com" date="1689076800">- bsc#1213189: Change lock mechanism to file locking to prevent
  lock files after power interruptions
- Add shadow-4.8.1-lock-mechanism.patch</changelog>
  <changelog author="mvetter@suse.com" date="1694174400">- bsc#1214806 (CVE-2023-4641):
  Fix potential password leak
- Add shadow-CVE-2023-4641.patch</changelog>
  <changelog author="mvetter@suse.com" date="1709726400">- bsc#1176006: Fix chage date miscalculation
  Add shadow-bsc1176006-chage-date.patch
- bsc#1188307: Fix passwd segfault
  Add shadow-bsc1188307-passwd-segfault.patch
- bsc#1203823: Remove pam_keyinit from PAM config files
  Remove pam_keyinit from PAM configuration.
  This was introduced for bsc#1144060.</changelog>
  <changelog author="mvetter@suse.com" date="1721649600">- bsc#916845 (CVE-2013-4235): Fix TOCTOU race condition
  Add shadow-CVE-2013-4235.patch</changelog>
  <changelog author="mvetter@suse.com" date="1722600000">- bsc#1228770: Fix not copying of skel files
  Update shadow-CVE-2013-4235.patch</changelog>
</package>
<package pkgid="6b515271a02acf89a4ee861ee6d2a4006a181119f2f29f0a20575df8af4f979d" name="lttng-tools" arch="aarch64">
  <version epoch="0" ver="2.12.2" rel="150300.3.3.1"/>
  <changelog author="tonyj@suse.com" date="1438084800">- Update to version 2.7.0-rc1 (FATE#319273)
  Changelog for differences between 2.4.0 and this point may be found at:
    http://git.lttng.org/?p=lttng-tools.git;a=blob_plain;f=ChangeLog;hb=1808007961cfaa7f915e44424f790e616219a361</changelog>
  <changelog author="tonyj@suse.com" date="1444046400">- Upgrade to release version 2.7.0 (FATE#319273)
  http://git.lttng.org/?p=lttng-tools.git;a=blob_plain;f=ChangeLog;hb=v2.7.0
  to view changelog from v2.7.0-rc1 to v2.7.0</changelog>
  <changelog author="tonyj@suse.com" date="1453982400">- Update to bugfix release 2.7.1 for SLE12SP2
  Changelog:
    http://git.lttng.org/?p=lttng-tools.git;a=blob_plain;f=ChangeLog;hb=v2.7.1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1470139200">- add ppc64/ppc64le in ExclusiveArch</changelog>
  <changelog author="tonyj@suse.com" date="1504180800">- Update to version 3.10 for SLE15 (bsc#1055683)
- Adhere to shared library policy (new lib: liblttng-ctl$sover)
- Do not package static libraries</changelog>
  <changelog author="tonyj@suse.com" date="1507291200">- Fix typo in package summary</changelog>
  <changelog author="jengelh@inai.de" date="1507377600">- Rectify RPM groups. Remove redundant %clean section.
  Replace old RPM macros.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1509796800">- Add lttng-tools-fix-pkgconfig.patch: Add missing dependencies to
  lttng-ctl.pc.
- Build for aarch64.
- Spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521115200">- Update to version 2.10.2:
  * Do not flag consumer as disabled on relayd comm failure.
  * Cleanup inactive FDs in the consumer polling thread.
  * man: Document dead-peer detection for lttng-relayd.
  * lttng-relayd: Use the TCP keep-alive mechanism to detect a
    dead-peer.
  * Tests: race between consumer pause and trace start/stop.
  * Fix notification thread being not notified of channel creation
    on application error.
  * Fix using putenv() and free()-ing the value is invalid.
  * Fix unknown consumer type considered a libc error.
  * Fix that consumerd(64/32)_lib_dir can be NULL.
  * Fix a nonsensical message printed by lttng track/untrack.
  * Fix O_CLOEXEC being erroneously used on pipe creation.
  * Fix a wrong parameter to fcntl in pipe_set_flag.
  * Use lttng_clock_gettime instead of clock_gettime.
  * Close channel monitor pipe after killing the
    metadata_timer_thread.
  * Use file based synchronisation for python logging test.
  * Test: Add file based synchronisation point for the Python test
    application.
  * Fix wrong use of the relay_streams_sent in snapshot.
  * Fix the return code of lttcomm_send_unix_sock signed.
  * Fix a src/bin/lttng/utils.c: cast incompatible pointer warning.
  * Fix: src/common/pipe.h: include &lt;sys/types.h&gt; for ssize_t and
    mode_t.
  * Fix detect dlmopen() and disable corresponding tests if not
    available.
  * Use tmpdir for intermediary files.
  * Fix include scripts for distribution.
  * Fix a typo in lttng-consumerd file default.
  * Fix missing NULL checks in logging statements.
  * Test: Kernel testing for notification.
  * Kernel consumerd sock paths need rundir substitution.
  * Create lttng run dir regardless of user privilege.
  * Make version.h generation work with dash.
  * lttng-enable-event(1): filtering: Specify that `$ctx.cpu_id`
    is available.
  * Centralise sessiond config option handling.
  * Fix buffer overflow warning in python bindings.
  * Tests fix: BT2 does not output the metadata of a trace
    collection.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1529236800">- Update to version 2.10.4 (changes since 2.10.2):
  * Fix: Set errno with value from SO_ERROR on error.
  * Fix: Missing value handling for lttng_event_context_type.
  * Fix: Use SOL_SOCKET level for SO_KEEPALIVE on all platform.
  * Fix: Error out on leftover arguments.
  * Fix: Reply to version check even on protocol mismatch.
  * Fix: Error handling on relay version check.
  * Document add-context limitation for started session.
  * Fix: add-context cannot be performed after a session has been
    started.
  * Fix: Duplicated kernel consumer socket locking.
  * Fix: Remove unused event types in MI XML schema.
  * Tests: Cleanly exit from test apps on reception of SIGTERM.
  * Document consumer socket locking assumptions.
  * Fix: Consumer socket lock not held during snapshot record.
  * Fix: set_relayd_for_snapshot does not acquire the consumer
    socket lock.
  * Fix: send_channel_monitor_pipe does not take the consumer
    socket lock.
  * Document the locking assumptions of consumerd-relayd socket
    passing.
  * Assert that the consumer lock is held while sending FDs to
    consumerd.
  * Assert that the consumer socket lock is taken during
    communication.
  * Tests: Refuse to run test suite if lttng processes are present.
  * Fix: Metadata channel leak when using the snapshot tracing
    mode.
  * Fix build: in_git_repo is used before being set.
  * Add DBG statement for TCP keep-alive options.
  * Fix: Unprivilieged sessiond agent port clashes with root
    sessiond.
  * Fix: Erroneous use of extern keyword.
  * Fix: Failure to launch agent thread is not reported.
  * Fix: Agent may not be ready on launch.
  * Fix: Checking for existing session daemon is done after
    daemonising.
  * Fix: lttng logs nanoseconds.
  * Fix: stream_per_chan_id_ht should allow duplicates.
  * Fix: relayd send_command() util not logging on failure.
  * Fix: Create_output_path() relayd util is not
    const-correct.
  * Fix: Kernel snapshot handling of EAGAIN.
  * Fix validate_trace_empty test check.
  * Fix: Circular inclusion of lttng.h results in warning.
  * Fix: Channel lock must be taken to check for pending
    notifications.
  * Fix: Quiet option is not set in sessiond-config.
  * Fix: Hold consumer socket lock for consumer_send_msg.
  * Fix: Use off_t type for lseek function return value to avoid
    overflow.
  * Fix: Double similar condition.
- Use tarball signing.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1542196800">- Update to version 2.10.5:
  * Fix: missing context enum values in session xml schema.
  * Tests: add session auto-loading test cases.
  * Bash completion: ignore namespace for xmllint parsing.
  * Typo in ust consumer log message (channek -&gt; channel).
  * Fix: use signed variable for refcounting of
    consumer_relayd_sock_pair.
  * Fix: warning due to hash_key_str() being not const-correct.
  * Print consumerd32/64/kernel configuration.
  * Fix: calling ht_{hash, match}_enum with wrong argument.
  * Fix: probes should be compared strictly by events metadata.
  * Fix: test_ust-dl is generated at configure-time.
  * Fix: cmd line options overwrite env variable config options.
  * Fix: perform the initialization memory barrier out of loop body.
  * Port: fix format warnings on Cygwin.
  * Add missing include for ssize_t on Cygwin.
  * Fix: sessions with agent channels fail to load.
  * Fix: don't wait for the load thread before serving client
    commands.
  * Fix: sessiond fails to launch on --without-ust configuration.
  * Fix: agent thread poll set creation failure results in deadlock.
  * Fix: test uses sizeof() on the wrong operand of strncpy.
  * Fix: ret may be used uninitialized in sample_channel_positions().
- Add gpl-2.0.txt and lgpl-2.1.txt to the library packages with the
  %license tag.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1582718400">- Update to version 2.11.2:
  * See /usr/share/doc/packages/lttng-tools/ChangeLog
- Drop support for old openSUSE versions.</changelog>
  <changelog author="tonyj@suse.com" date="1604318400">- Update to version 2.12.2
  Changelog: https://git.lttng.org/?p=lttng-tools.git;a=blob_plain;f=ChangeLog;hb=v2.12.2
  - Add signed bz2 support (keyring)</changelog>
  <changelog author="ali.abdallah@suse.com" date="1706788800">- Add Fix-ust-UST-communication-can-return-EAGAIN.patch:
  Fix UST communication when -EAGAIN is returned which leads to
  lttng-sessiond abort (bsc#1218508)</changelog>
</package>
<package pkgid="10bf5d7370fb6913f5fc7599d5c5756c437d645b6fa942c108f8a10f9df92295" name="lttng-tools" arch="src">
  <version epoch="0" ver="2.12.2" rel="150300.3.3.1"/>
  <changelog author="tonyj@suse.com" date="1340280000">- Update to release 2.0.2</changelog>
  <changelog author="tonyj@suse.com" date="1340971200">- Update to release 2.0.3</changelog>
  <changelog author="tonyj@suse.com" date="1363003200">- Upgrade to version 2.1.1 (FATE#314846)
  Changelog 2.1.1:
  * Fix: update next_net_seq_num after sending header
  * Fix: wrong loop continuation in metadata thread
  * Fix: lttng create session memleaks
  * Fix: remove unused session id map
  * Fix: wrong session id used on relayd lookup
  * Fix: add missing UST abi header for make dist
  * Fix: add missing rcu read side lock/unlock
  Changelog 2.1.0:
  * STABLE VERSION 2.1.0-stable - "Basse Messe"
  * Multiple minor fixes
  * Multiple memory and fd leaks
  * Fix: Off by one in seq num for data pending command
  * Fix: flag metadata stream on quiescent control cmd
  * Fix: prioritize control socket communication in relayd
  * Fix: poll and epoll fd set reallocation
  * Fix: add missing goto pending if data is inflight
  * Fix: remove ua_sess-&gt;started assert on stop trace
  * Set classes of traffic in high_throughput_limit
  * Fix: use the poll wait ret value when iterating on fd(s)
  * Fix: force the poll() return value to be nb_fd
  * Fix: Wrong check of node when cleaning up ht
  * Fix: set started flag of ust app after ustctl
  * Fix: memory leak in add relayd socket error path
  * Fix: add packed attribute to filter structure
  * Fix: Add missing health code update for consumer command
  * Add LTTNG_PACKED macro
  * Fix data pending for inflight streaming
  * Map session id of relayd and sessiond in consumer
  * Add the relayd create session command
  * Make the consumer sends a ACK after each command
  * Remove MSG_WAITALL on every recvmsg() socket typ
  * Fix: Add missing relayd ht cleanup and ht destroy
  * Fix: Relayd and sessiond version check
  * Fix: protect consumer_find_channel with rcu locking
  * Fix: don't steal key when adding a metadata stream
  * Consumer hold stream mutex for add stream
  Changelog 2.1.0-rc9:
  * Fix: set the stream ht static in consumer file
  * Update sessiond man page with new env var
  * Update lttng.1 man page
  * Fix: enable-consumer for all domains missing dir
  * Fix: Add missing fct prototypes when disabling UST
  * Fix a typo in lttng-probe-module name
  * Assign values to enum lttcomm_sessiond_command
  * Fix: run health test only if root
  * Clarify empty string/NULL filter errors
  * Fix: add missing padding for UST filter
  Changelog 2.1.0-rc8:
  * Fix: Uninit. variable in lttng view
  * Add already enabled UST event error code
  * lttng.h API update: set filter becomes enable event with filter
  * Change the UST event hash table match function
  * Pass lttng_event struct to the set_filter API call
  * Adding context to an event is no longer possible
  * Add UST overlap tests
  * Add filter sequence number to UST
  * Fix: Typo from a previous patch in an assert()
  * Fix: Warn if session is running with lttng view
  * Fix: Add bash requirement to README for make check
  * Fix: add the notion of domain to lttng.1 man page
  * Enable additional kernel probes
  * Update CodingStyle
  * Use the new functions for default subbuf sizes
  * Add default subbuf sizes getter functions
  * Add max() and min() macro in common
  Changelog 2.1.0-rc7:
  * Fix: Add pointer check when freeing poll events
  * Fix: FD leak on thread error
  * Fix: Wrong fd used by kernel_wait_quiescent
  * Support new lttng-ust error code
  * Fix: Don't set filter if enable event fails
  * Fix: Wrong data port when listing session
  * Fix: Enable event after start command
  * Fix: Teardown of thread_manage_clients on failure of listen/create_poll
  * Add a timeout to UST application socket
  * Fix: Consumerd error socket connect race
  * Fix: Set CLOEXEC flag on every created sockets
  * Remove consumer poll timeout in data thread
  * Fix: RCU hash table seed
  * Fix: Do not install health tests helper libraries
  * Fix: Create default channel on add-context if none
  * Support new liblttng-ust-ctl error code
  * Fix: Add EPIPE error handling on buffer splice
  * Fix: Channel creation error return code was not set
  * Fix: Wrong poll events on UST application socket
  * Fix: Remove dependency to urcu-cds in tools tests
  * Fix: Missing librt dependency in configure check for lttng-ust-ctl
  * Fix: Don't append datetime to default session name
  * Fix: Deny session creation name 'auto'
  * Fix: Add space for stream name CPU number
  * Fix: Add output option to enable-channel command
  Changelog 2.1.0-rc6:
  * Tests: Add filtering tests for uncovered cases
  * Fix: Sync issue when deleting a data stream
  * Rename data_available to data_pending
  * Fix: consumer health state
  * Fix: Add the ACCOUNTING flag to ht creation and set bucket size to 0
  * Fix: Bad return error code handling
  * Fix: Use after free() of the rundir string
  * Fix: Cleanup UST app session on ustctl create session error
  * Fix: add missing pthread_join in sessiond
  * Fix: free running directory string
  * Fix: UST app clean list node usage
  * Add liblttng-ctl destructor to cleanup memory
  * Fix: Cleanup URIs on teardown
  * Fix: relayd memleaks
  * Fix: Memory leaks of allocated URIs
  * Fix: consumer output memory leak on creation
  * Fix: missing addrlen initialization before accept(2)
  * Fix: relayd trace file padding memleak
  * Fix: Remove useless consumer subdir string concatenation
  * Fix: lttng create allocated path memleak
  * Fix: Cppcheck memleakOnRealloc mistake
  * Fix: Synchronization issue for data available command
  * Fix: consumer relayd cleanup on disconnect
  * Fix: Handle the unary bitwise negation operator (~) in the XML printer
  * Fix: Possible memory leaks when creating filter IR root node
  * Fix: Delete stream on write error in consumer
  * Fix: Error handling when sending relayd sockets to consumer
  * Add stream lock comment for nesting
  * Fix: Mutex and RCU lock nesting in consumer
  * Fix: Uninitialized ret code
  * Fix: Remove bad condition and fix overflow issue
  * Fix: consumerd pthread error flow
  * Fix: Set a single return point and mutex unlock
  * Fix: Remove useless NULL and zero assignment
  * Fix: segfault on create session with two URLs
  Changelog 2.1.0-rc5:
  * Fix: Remove network stream ID ABI calls
  * Tests: Add filtering tests
  * Wait for data availability when stopping a session
  * Relayd data available command support
  * Lib lttng-ctl data available command support
  * Consumer daemon data available command support
  * Add data structure for the data available command
  * Change the metadata hash table node
  * Make stream hash tables global to the consumer
  * Move add data stream to the data thread
  * Rename consumer threads and spawn them in daemon
  * Fix: relayd close stream command was not working
  * Fix: Relayd and consumerd socket leaks
  * Fix: Missing -ENODATA handling in the consumer
  * Fix: Empty metadata buffer(s) on HUP|ERR
  * ABI with support for compat 32/64 bits
  * Fix: Stream allocation and insertion consistency
  * Fix: output number of bytes written by relayd
  * Add hash table argument to helper functions
  * Fix: Add missing call rcu and read side lock
  * Tests: Fix LD_PRELOAD library lookup path for health tests
  * Fix: Add arbitrary wait period for kernel streaming test
  * Fix coding style and add/change debug statements
  * Fix: Build out of src tree
  * Tests: Add health check tests to configure
  * Tests: Add health check thread stall test
  * Tests: Add health check thread exit test
  * Tests: Add a health check utility program
  * Add testpoints in lttng-sessiond for each threads
  * New testpoint mechanism to instrument binaries for testing
  * Fix: off-by-one in comm proto between lttng-ctl and sessiond
  * Fix: Metadata stream leak when received in consumer
  * Fix: consumer_allocate_stream error handling
  * Fix: consumer should await for initial streams
  * Fix: Missing rcu read side lock in consumer
  Changelog 2.1.0-rc4:
  * Fix: Change sempahore to pthread conditions
  * Fix: relayd relay_send_version: handle sscanf return code
  * Fix relayd: NULL ptr deref
  * Fix: relayd: possible NULL ptr deref, memory leak, accept fd leak
  * Tests: add print bytecode to filter grammar test
  * Cleanup: assign values to bytecode opcodes
  * Fix: Filter: Fix allocation length error
  * Fix: Filter: add missing ast free
  * Tests: Add high throughput with bandwidth limits test
  * Fix: Returned code when listing kernel channel
  * Tests: Rename helper functions to have consistent names
  * Tests: Cleanup redundant code and use printing helper functions
  * Tests: Add helper functions for printing status and banner
  * Tests: Add a check for color support when printing status
  * Fix: Lib lttng-ctl on error returns lttng code
  * Fix: lttng_set_event_filter() was returning bad error code
  * Fix: printing [no write] on lttng list -uf
  * Fix: Disable event on filter error with lttng
  * Fix: Wrong returned error code on UST enable event
  * Add consumer commands to lttng.1 man page
  * Add lttng_health_check(3) man page
  * Fix: Remove LPOLLNVAL from consumer metadata revents
  * Fix: Mismatch of field name between ust and tools
  * Add the written value when listing fields
  * Fix: Consumer return value check after mmap/splice
  * Don't send the subbuffer padding for streaming
  * Fix: Returned error code in consumer on read buffer
  Changelog 2.1.0-rc3:
  * Fix: Relayd fix ret value when adding a connection
  * Add new thread in consumer for metadata handling
  * Fix: consumer recv command error path
  * Fix filter: fix recent regressions
  * Update lttng-ust-abi.h from upstream lttng-ust
  * Fix: Accept bytecode of length 65536 bytes
  * Fix: Generation of bytecode longer than 32768 bytes fails
  * Fix: Filter bytecode alloc buffer size must be a power of 2
  * Add lttng-ctl SWIG python bindings
  * Add C++ support to API header files
  * Librarify filter in liblttng-ctl and hide symbols
  * Set hidden visibility for calls used in lttng-ctl
  * Notify the user if a filter is already enabled
  * Install lttng-error.h and include it in lttng.h
  * Add lttng-error.h containing every API err. code
  * Fix: missing hostname context
  Changelog 2.1.0-rc2:
  * Fix: put back 2.0 output text for lttng create cmd
  * Fix: remove set subdir call that uses bad ptr
  * Filter: Handle the unary bitwise not operator (~) with an unsupported
  * Fix: missing mutex unlock on register consumer err
  * Remove underscore from ifndef of lttng.h
  * Remove unused define in lttng.h
  * Standardize lttng command line usage text
  * Merge duplicate code in consumer for destroy relayd
  * Merge duplicate code in consumer for add relayd
  * Fix: Possible buffer overflows in strncat() usage
  * Move code out of main.c and fix some issues
  Changelog 2.1.0-rc1:
  * Feature: Network Streaming
  * Add the lttng-relayd binary for network streaming
  * Support user space tracer filtering
  * Multiple fixes</changelog>
  <changelog author="tonyj@suse.com" date="1392033600">- Update to version 2.3.1</changelog>
  <changelog author="tonyj@suse.com" date="1393588800">- Update to version 2.4.0. Changelog for changes between 2.3.0 and 2.4.0
  may be found at: http://git.lttng.org/?p=lttng-tools.git;a=blob_plain;f=ChangeLog;hb=refs/heads/stable-2.4</changelog>
  <changelog author="tonyj@suse.com" date="1397563200">- Update to version 2.4.1
  Changelog:
  * Fix: don't delete stream from connection recv list
  * Fix: use after free of a relayd stream
  * Fix: don't print stream name in error message
  * Fix: take session list lock when listing tp
  * Fix: add consumer wake up pipe to avoid race
  * Fix: don't spawn relayd if URL is provided
  * Fix: don't ask data pending if session was not started
  * Fix: missing test file in EXTRA dist
  * Fix: allow empty URL for live session creation
  * Fix: missing valid return code when adding an URI to consumer
  * Fix: syntax error in lttng.1
  * Fix: check relayd fd leak in lttng cmdline
  * Fix: remove unused tp in high-throughput test
  * Use autoconf AM_MAINTAINER_MODE.
  * Fix: clang 'constant-out-of-range-compare' warning
  * Fix: Unchecked session pointer when destroying a connection in relayd
- Add dependancy on babeltrace and recommend kmps (bnc#872688)</changelog>
  <changelog author="tonyj@suse.com" date="1438084800">- Update to version 2.7.0-rc1 (FATE#319273)
  Changelog for differences between 2.4.0 and this point may be found at:
    http://git.lttng.org/?p=lttng-tools.git;a=blob_plain;f=ChangeLog;hb=1808007961cfaa7f915e44424f790e616219a361</changelog>
  <changelog author="tonyj@suse.com" date="1444046400">- Upgrade to release version 2.7.0 (FATE#319273)
  http://git.lttng.org/?p=lttng-tools.git;a=blob_plain;f=ChangeLog;hb=v2.7.0
  to view changelog from v2.7.0-rc1 to v2.7.0</changelog>
  <changelog author="tonyj@suse.com" date="1453982400">- Update to bugfix release 2.7.1 for SLE12SP2
  Changelog:
    http://git.lttng.org/?p=lttng-tools.git;a=blob_plain;f=ChangeLog;hb=v2.7.1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1470139200">- add ppc64/ppc64le in ExclusiveArch</changelog>
  <changelog author="tonyj@suse.com" date="1504180800">- Update to version 3.10 for SLE15 (bsc#1055683)
- Adhere to shared library policy (new lib: liblttng-ctl$sover)
- Do not package static libraries</changelog>
  <changelog author="tonyj@suse.com" date="1507291200">- Fix typo in package summary</changelog>
  <changelog author="jengelh@inai.de" date="1507377600">- Rectify RPM groups. Remove redundant %clean section.
  Replace old RPM macros.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1509796800">- Add lttng-tools-fix-pkgconfig.patch: Add missing dependencies to
  lttng-ctl.pc.
- Build for aarch64.
- Spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521115200">- Update to version 2.10.2:
  * Do not flag consumer as disabled on relayd comm failure.
  * Cleanup inactive FDs in the consumer polling thread.
  * man: Document dead-peer detection for lttng-relayd.
  * lttng-relayd: Use the TCP keep-alive mechanism to detect a
    dead-peer.
  * Tests: race between consumer pause and trace start/stop.
  * Fix notification thread being not notified of channel creation
    on application error.
  * Fix using putenv() and free()-ing the value is invalid.
  * Fix unknown consumer type considered a libc error.
  * Fix that consumerd(64/32)_lib_dir can be NULL.
  * Fix a nonsensical message printed by lttng track/untrack.
  * Fix O_CLOEXEC being erroneously used on pipe creation.
  * Fix a wrong parameter to fcntl in pipe_set_flag.
  * Use lttng_clock_gettime instead of clock_gettime.
  * Close channel monitor pipe after killing the
    metadata_timer_thread.
  * Use file based synchronisation for python logging test.
  * Test: Add file based synchronisation point for the Python test
    application.
  * Fix wrong use of the relay_streams_sent in snapshot.
  * Fix the return code of lttcomm_send_unix_sock signed.
  * Fix a src/bin/lttng/utils.c: cast incompatible pointer warning.
  * Fix: src/common/pipe.h: include &lt;sys/types.h&gt; for ssize_t and
    mode_t.
  * Fix detect dlmopen() and disable corresponding tests if not
    available.
  * Use tmpdir for intermediary files.
  * Fix include scripts for distribution.
  * Fix a typo in lttng-consumerd file default.
  * Fix missing NULL checks in logging statements.
  * Test: Kernel testing for notification.
  * Kernel consumerd sock paths need rundir substitution.
  * Create lttng run dir regardless of user privilege.
  * Make version.h generation work with dash.
  * lttng-enable-event(1): filtering: Specify that `$ctx.cpu_id`
    is available.
  * Centralise sessiond config option handling.
  * Fix buffer overflow warning in python bindings.
  * Tests fix: BT2 does not output the metadata of a trace
    collection.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1529236800">- Update to version 2.10.4 (changes since 2.10.2):
  * Fix: Set errno with value from SO_ERROR on error.
  * Fix: Missing value handling for lttng_event_context_type.
  * Fix: Use SOL_SOCKET level for SO_KEEPALIVE on all platform.
  * Fix: Error out on leftover arguments.
  * Fix: Reply to version check even on protocol mismatch.
  * Fix: Error handling on relay version check.
  * Document add-context limitation for started session.
  * Fix: add-context cannot be performed after a session has been
    started.
  * Fix: Duplicated kernel consumer socket locking.
  * Fix: Remove unused event types in MI XML schema.
  * Tests: Cleanly exit from test apps on reception of SIGTERM.
  * Document consumer socket locking assumptions.
  * Fix: Consumer socket lock not held during snapshot record.
  * Fix: set_relayd_for_snapshot does not acquire the consumer
    socket lock.
  * Fix: send_channel_monitor_pipe does not take the consumer
    socket lock.
  * Document the locking assumptions of consumerd-relayd socket
    passing.
  * Assert that the consumer lock is held while sending FDs to
    consumerd.
  * Assert that the consumer socket lock is taken during
    communication.
  * Tests: Refuse to run test suite if lttng processes are present.
  * Fix: Metadata channel leak when using the snapshot tracing
    mode.
  * Fix build: in_git_repo is used before being set.
  * Add DBG statement for TCP keep-alive options.
  * Fix: Unprivilieged sessiond agent port clashes with root
    sessiond.
  * Fix: Erroneous use of extern keyword.
  * Fix: Failure to launch agent thread is not reported.
  * Fix: Agent may not be ready on launch.
  * Fix: Checking for existing session daemon is done after
    daemonising.
  * Fix: lttng logs nanoseconds.
  * Fix: stream_per_chan_id_ht should allow duplicates.
  * Fix: relayd send_command() util not logging on failure.
  * Fix: Create_output_path() relayd util is not
    const-correct.
  * Fix: Kernel snapshot handling of EAGAIN.
  * Fix validate_trace_empty test check.
  * Fix: Circular inclusion of lttng.h results in warning.
  * Fix: Channel lock must be taken to check for pending
    notifications.
  * Fix: Quiet option is not set in sessiond-config.
  * Fix: Hold consumer socket lock for consumer_send_msg.
  * Fix: Use off_t type for lseek function return value to avoid
    overflow.
  * Fix: Double similar condition.
- Use tarball signing.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1542196800">- Update to version 2.10.5:
  * Fix: missing context enum values in session xml schema.
  * Tests: add session auto-loading test cases.
  * Bash completion: ignore namespace for xmllint parsing.
  * Typo in ust consumer log message (channek -&gt; channel).
  * Fix: use signed variable for refcounting of
    consumer_relayd_sock_pair.
  * Fix: warning due to hash_key_str() being not const-correct.
  * Print consumerd32/64/kernel configuration.
  * Fix: calling ht_{hash, match}_enum with wrong argument.
  * Fix: probes should be compared strictly by events metadata.
  * Fix: test_ust-dl is generated at configure-time.
  * Fix: cmd line options overwrite env variable config options.
  * Fix: perform the initialization memory barrier out of loop body.
  * Port: fix format warnings on Cygwin.
  * Add missing include for ssize_t on Cygwin.
  * Fix: sessions with agent channels fail to load.
  * Fix: don't wait for the load thread before serving client
    commands.
  * Fix: sessiond fails to launch on --without-ust configuration.
  * Fix: agent thread poll set creation failure results in deadlock.
  * Fix: test uses sizeof() on the wrong operand of strncpy.
  * Fix: ret may be used uninitialized in sample_channel_positions().
- Add gpl-2.0.txt and lgpl-2.1.txt to the library packages with the
  %license tag.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1582718400">- Update to version 2.11.2:
  * See /usr/share/doc/packages/lttng-tools/ChangeLog
- Drop support for old openSUSE versions.</changelog>
  <changelog author="tonyj@suse.com" date="1604318400">- Update to version 2.12.2
  Changelog: https://git.lttng.org/?p=lttng-tools.git;a=blob_plain;f=ChangeLog;hb=v2.12.2
  - Add signed bz2 support (keyring)</changelog>
  <changelog author="ali.abdallah@suse.com" date="1706788800">- Add Fix-ust-UST-communication-can-return-EAGAIN.patch:
  Fix UST communication when -EAGAIN is returned which leads to
  lttng-sessiond abort (bsc#1218508)</changelog>
</package>
<package pkgid="3a0544ccd95a703027cc5e954d9b3e5592f0efcf3b76db81e6486a0d4b57ebc1" name="lttng-tools" arch="x86_64">
  <version epoch="0" ver="2.12.2" rel="150300.3.3.1"/>
  <changelog author="tonyj@suse.com" date="1438084800">- Update to version 2.7.0-rc1 (FATE#319273)
  Changelog for differences between 2.4.0 and this point may be found at:
    http://git.lttng.org/?p=lttng-tools.git;a=blob_plain;f=ChangeLog;hb=1808007961cfaa7f915e44424f790e616219a361</changelog>
  <changelog author="tonyj@suse.com" date="1444046400">- Upgrade to release version 2.7.0 (FATE#319273)
  http://git.lttng.org/?p=lttng-tools.git;a=blob_plain;f=ChangeLog;hb=v2.7.0
  to view changelog from v2.7.0-rc1 to v2.7.0</changelog>
  <changelog author="tonyj@suse.com" date="1453982400">- Update to bugfix release 2.7.1 for SLE12SP2
  Changelog:
    http://git.lttng.org/?p=lttng-tools.git;a=blob_plain;f=ChangeLog;hb=v2.7.1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1470139200">- add ppc64/ppc64le in ExclusiveArch</changelog>
  <changelog author="tonyj@suse.com" date="1504180800">- Update to version 3.10 for SLE15 (bsc#1055683)
- Adhere to shared library policy (new lib: liblttng-ctl$sover)
- Do not package static libraries</changelog>
  <changelog author="tonyj@suse.com" date="1507291200">- Fix typo in package summary</changelog>
  <changelog author="jengelh@inai.de" date="1507377600">- Rectify RPM groups. Remove redundant %clean section.
  Replace old RPM macros.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1509796800">- Add lttng-tools-fix-pkgconfig.patch: Add missing dependencies to
  lttng-ctl.pc.
- Build for aarch64.
- Spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521115200">- Update to version 2.10.2:
  * Do not flag consumer as disabled on relayd comm failure.
  * Cleanup inactive FDs in the consumer polling thread.
  * man: Document dead-peer detection for lttng-relayd.
  * lttng-relayd: Use the TCP keep-alive mechanism to detect a
    dead-peer.
  * Tests: race between consumer pause and trace start/stop.
  * Fix notification thread being not notified of channel creation
    on application error.
  * Fix using putenv() and free()-ing the value is invalid.
  * Fix unknown consumer type considered a libc error.
  * Fix that consumerd(64/32)_lib_dir can be NULL.
  * Fix a nonsensical message printed by lttng track/untrack.
  * Fix O_CLOEXEC being erroneously used on pipe creation.
  * Fix a wrong parameter to fcntl in pipe_set_flag.
  * Use lttng_clock_gettime instead of clock_gettime.
  * Close channel monitor pipe after killing the
    metadata_timer_thread.
  * Use file based synchronisation for python logging test.
  * Test: Add file based synchronisation point for the Python test
    application.
  * Fix wrong use of the relay_streams_sent in snapshot.
  * Fix the return code of lttcomm_send_unix_sock signed.
  * Fix a src/bin/lttng/utils.c: cast incompatible pointer warning.
  * Fix: src/common/pipe.h: include &lt;sys/types.h&gt; for ssize_t and
    mode_t.
  * Fix detect dlmopen() and disable corresponding tests if not
    available.
  * Use tmpdir for intermediary files.
  * Fix include scripts for distribution.
  * Fix a typo in lttng-consumerd file default.
  * Fix missing NULL checks in logging statements.
  * Test: Kernel testing for notification.
  * Kernel consumerd sock paths need rundir substitution.
  * Create lttng run dir regardless of user privilege.
  * Make version.h generation work with dash.
  * lttng-enable-event(1): filtering: Specify that `$ctx.cpu_id`
    is available.
  * Centralise sessiond config option handling.
  * Fix buffer overflow warning in python bindings.
  * Tests fix: BT2 does not output the metadata of a trace
    collection.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1529236800">- Update to version 2.10.4 (changes since 2.10.2):
  * Fix: Set errno with value from SO_ERROR on error.
  * Fix: Missing value handling for lttng_event_context_type.
  * Fix: Use SOL_SOCKET level for SO_KEEPALIVE on all platform.
  * Fix: Error out on leftover arguments.
  * Fix: Reply to version check even on protocol mismatch.
  * Fix: Error handling on relay version check.
  * Document add-context limitation for started session.
  * Fix: add-context cannot be performed after a session has been
    started.
  * Fix: Duplicated kernel consumer socket locking.
  * Fix: Remove unused event types in MI XML schema.
  * Tests: Cleanly exit from test apps on reception of SIGTERM.
  * Document consumer socket locking assumptions.
  * Fix: Consumer socket lock not held during snapshot record.
  * Fix: set_relayd_for_snapshot does not acquire the consumer
    socket lock.
  * Fix: send_channel_monitor_pipe does not take the consumer
    socket lock.
  * Document the locking assumptions of consumerd-relayd socket
    passing.
  * Assert that the consumer lock is held while sending FDs to
    consumerd.
  * Assert that the consumer socket lock is taken during
    communication.
  * Tests: Refuse to run test suite if lttng processes are present.
  * Fix: Metadata channel leak when using the snapshot tracing
    mode.
  * Fix build: in_git_repo is used before being set.
  * Add DBG statement for TCP keep-alive options.
  * Fix: Unprivilieged sessiond agent port clashes with root
    sessiond.
  * Fix: Erroneous use of extern keyword.
  * Fix: Failure to launch agent thread is not reported.
  * Fix: Agent may not be ready on launch.
  * Fix: Checking for existing session daemon is done after
    daemonising.
  * Fix: lttng logs nanoseconds.
  * Fix: stream_per_chan_id_ht should allow duplicates.
  * Fix: relayd send_command() util not logging on failure.
  * Fix: Create_output_path() relayd util is not
    const-correct.
  * Fix: Kernel snapshot handling of EAGAIN.
  * Fix validate_trace_empty test check.
  * Fix: Circular inclusion of lttng.h results in warning.
  * Fix: Channel lock must be taken to check for pending
    notifications.
  * Fix: Quiet option is not set in sessiond-config.
  * Fix: Hold consumer socket lock for consumer_send_msg.
  * Fix: Use off_t type for lseek function return value to avoid
    overflow.
  * Fix: Double similar condition.
- Use tarball signing.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1542196800">- Update to version 2.10.5:
  * Fix: missing context enum values in session xml schema.
  * Tests: add session auto-loading test cases.
  * Bash completion: ignore namespace for xmllint parsing.
  * Typo in ust consumer log message (channek -&gt; channel).
  * Fix: use signed variable for refcounting of
    consumer_relayd_sock_pair.
  * Fix: warning due to hash_key_str() being not const-correct.
  * Print consumerd32/64/kernel configuration.
  * Fix: calling ht_{hash, match}_enum with wrong argument.
  * Fix: probes should be compared strictly by events metadata.
  * Fix: test_ust-dl is generated at configure-time.
  * Fix: cmd line options overwrite env variable config options.
  * Fix: perform the initialization memory barrier out of loop body.
  * Port: fix format warnings on Cygwin.
  * Add missing include for ssize_t on Cygwin.
  * Fix: sessions with agent channels fail to load.
  * Fix: don't wait for the load thread before serving client
    commands.
  * Fix: sessiond fails to launch on --without-ust configuration.
  * Fix: agent thread poll set creation failure results in deadlock.
  * Fix: test uses sizeof() on the wrong operand of strncpy.
  * Fix: ret may be used uninitialized in sample_channel_positions().
- Add gpl-2.0.txt and lgpl-2.1.txt to the library packages with the
  %license tag.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1582718400">- Update to version 2.11.2:
  * See /usr/share/doc/packages/lttng-tools/ChangeLog
- Drop support for old openSUSE versions.</changelog>
  <changelog author="tonyj@suse.com" date="1604318400">- Update to version 2.12.2
  Changelog: https://git.lttng.org/?p=lttng-tools.git;a=blob_plain;f=ChangeLog;hb=v2.12.2
  - Add signed bz2 support (keyring)</changelog>
  <changelog author="ali.abdallah@suse.com" date="1706788800">- Add Fix-ust-UST-communication-can-return-EAGAIN.patch:
  Fix UST communication when -EAGAIN is returned which leads to
  lttng-sessiond abort (bsc#1218508)</changelog>
</package>
<package pkgid="344789cad0ad3ddc4fa65ac58d19070b2649c8de7d212c91b5533a0ef463a773" name="lvm2" arch="aarch64">
  <version epoch="0" ver="2.03.22" rel="150500.7.9.1"/>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6753)
  - device-mapper version upgrade to 1.02.196
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
</package>
<package pkgid="6ae596f919c553ec24c8a269b57fe8b26d7643fe0ff0e67e7a3e96ee978faf32" name="lvm2" arch="s390x">
  <version epoch="0" ver="2.03.22" rel="150500.7.9.1"/>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6753)
  - device-mapper version upgrade to 1.02.196
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
</package>
<package pkgid="32bf6f4b57db787a8b02f30cfa3a42193b06b2d832d8ff499c1c30db190cd85e" name="lvm2" arch="src">
  <version epoch="0" ver="2.03.22" rel="150500.7.9.1"/>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6753)
  - device-mapper version upgrade to 1.02.196
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
</package>
<package pkgid="c0c43e0117b563fe29661e8ba4d010138e180d3a264e3eb8a3427bc376a7b812" name="lvm2" arch="x86_64">
  <version epoch="0" ver="2.03.22" rel="150500.7.9.1"/>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6753)
  - device-mapper version upgrade to 1.02.196
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
</package>
<package pkgid="036dfeca1f6bcba3d0a853baae39a727186b5d7d8a3d896391ae92d806915158" name="lvm2-device-mapper" arch="src">
  <version epoch="0" ver="2.03.22" rel="150500.7.9.1"/>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6753)
  - device-mapper version upgrade to 1.02.196
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
</package>
<package pkgid="e4295469064bbe1bea73a470b6ad70d95008b2b1a3a4c1459e5a78094cdb4bf2" name="mozilla-nss" arch="aarch64">
  <version epoch="0" ver="3.101.2" rel="150400.3.48.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
</package>
<package pkgid="8a7cc193f688c08f105c190ee9f6969f3751e3f64dea06ca2c01ccec790151a8" name="mozilla-nss" arch="s390x">
  <version epoch="0" ver="3.101.2" rel="150400.3.48.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
</package>
<package pkgid="c81d5f6dbf3d9872c162fb339962f312be04bc881bb64c64b9f8a93f75007045" name="mozilla-nss" arch="src">
  <version epoch="0" ver="3.101.2" rel="150400.3.48.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
</package>
<package pkgid="0629d215e5ced1bb1a06045f3e5227048c7eea1f76b06bbb3e03e37d19d84258" name="mozilla-nss" arch="x86_64">
  <version epoch="0" ver="3.101.2" rel="150400.3.48.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
</package>
<package pkgid="739cc88a8d3aee37c99c50d4b365927b91b42253ffea637eb8d460dc43845910" name="mozilla-nss" arch="aarch64">
  <version epoch="0" ver="3.101.2" rel="150400.3.51.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
</package>
<package pkgid="e87957e3801b1576b8624cff80f422a8585a0a1fbeaf6a8fd5fe2b80ab7962a7" name="mozilla-nss" arch="s390x">
  <version epoch="0" ver="3.101.2" rel="150400.3.51.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
</package>
<package pkgid="474e84d704a51dbb29117bda20abed2152d1c2cb617e9e1ad7a968871cd8f4bd" name="mozilla-nss" arch="src">
  <version epoch="0" ver="3.101.2" rel="150400.3.51.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
</package>
<package pkgid="815a9560b0ae7db57c5b9455e46c0785d762ebd314151bca6573e8a35afc52a8" name="mozilla-nss" arch="x86_64">
  <version epoch="0" ver="3.101.2" rel="150400.3.51.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
</package>
<package pkgid="4e5b62452261b37195d6a546199f6323c16a5b090b7d94e2e69ebd978119aaea" name="mozilla-nss" arch="aarch64">
  <version epoch="0" ver="3.90.1" rel="150400.3.35.2"/>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
</package>
<package pkgid="13cddbec19683e7a0463c93acd2abec5ee64d38ee838132f35bf3cf2f933955a" name="mozilla-nss" arch="s390x">
  <version epoch="0" ver="3.90.1" rel="150400.3.35.2"/>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
</package>
<package pkgid="b5fbb6853db3b304f7195fbdaef951f9bc9654ccfa24938f1ed00551cbe328da" name="mozilla-nss" arch="src">
  <version epoch="0" ver="3.90.1" rel="150400.3.35.2"/>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
</package>
<package pkgid="734dee4f068ee71c3867eda71cc54fe68c324d3ca5e4bc4f88b41ba2ec07cbf0" name="mozilla-nss" arch="x86_64">
  <version epoch="0" ver="3.90.1" rel="150400.3.35.2"/>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
</package>
<package pkgid="c2a5074ea910ab968b41944d1445a593a85edc37ed9b15f8e594aaae6e99406d" name="mozilla-nss" arch="aarch64">
  <version epoch="0" ver="3.90.2" rel="150400.3.39.1"/>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
</package>
<package pkgid="85fe6c331a5b76426a8f0f86c9494d2f2d821173328e2b44551103171b7a95ae" name="mozilla-nss" arch="s390x">
  <version epoch="0" ver="3.90.2" rel="150400.3.39.1"/>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
</package>
<package pkgid="a9863b53baef761067394d4e91165389dce7de4f8dd6096fcd3af076aac865e0" name="mozilla-nss" arch="src">
  <version epoch="0" ver="3.90.2" rel="150400.3.39.1"/>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
</package>
<package pkgid="6b41ef95c3870c859c30c5ff3a8db289784e11fb70c0d4b2672a3e6fad628302" name="mozilla-nss" arch="x86_64">
  <version epoch="0" ver="3.90.2" rel="150400.3.39.1"/>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
</package>
<package pkgid="736708ddb82cc7000aefdef89dabec73a76ad7b695509fed16566a4f77874f18" name="mozilla-nss-certs" arch="aarch64">
  <version epoch="0" ver="3.101.2" rel="150400.3.48.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
</package>
<package pkgid="c8e057a83403d3b75f9369484f6076ec9ae299f6a5344004fe3401d0e6d13bc2" name="mozilla-nss-certs" arch="s390x">
  <version epoch="0" ver="3.101.2" rel="150400.3.48.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
</package>
<package pkgid="bada8aac5c79779adcc624dd41988c556fba9775c2922afca09441941c6b80b8" name="mozilla-nss-certs" arch="x86_64">
  <version epoch="0" ver="3.101.2" rel="150400.3.48.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
</package>
<package pkgid="bb50e93cb1eca435fd4ef5c5d7a6b4d7253e373bfc0a1052b4dd6c71f2661f77" name="mozilla-nss-certs" arch="aarch64">
  <version epoch="0" ver="3.101.2" rel="150400.3.51.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
</package>
<package pkgid="979a3d60d7d7519605f54c3c5b8e27e75b410a1d7f7e2065027d710caa2613da" name="mozilla-nss-certs" arch="s390x">
  <version epoch="0" ver="3.101.2" rel="150400.3.51.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
</package>
<package pkgid="bda9c321cc6939b005b72ea9e34451afbc611222516cecf33db666675234f89c" name="mozilla-nss-certs" arch="x86_64">
  <version epoch="0" ver="3.101.2" rel="150400.3.51.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
</package>
<package pkgid="ce15d7ac1a68cee85ab04605a93859daefc1ee445f0d344a17ca9f9663b43703" name="mozilla-nss-certs" arch="aarch64">
  <version epoch="0" ver="3.90.1" rel="150400.3.35.2"/>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
</package>
<package pkgid="924088bf2bfd35aea140bcae535bc5a78f6745f0ea33117d3b15003c1ad639bf" name="mozilla-nss-certs" arch="s390x">
  <version epoch="0" ver="3.90.1" rel="150400.3.35.2"/>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
</package>
<package pkgid="9e627f73d2c0eb233b257788dace10e1b6f39a86446a36d0bf1fe9092df1012e" name="mozilla-nss-certs" arch="x86_64">
  <version epoch="0" ver="3.90.1" rel="150400.3.35.2"/>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
</package>
<package pkgid="50739c02ab9524f7e81991faadbda03a7d9652080c0ad6e6d2fa82901d58f40d" name="mozilla-nss-certs" arch="aarch64">
  <version epoch="0" ver="3.90.2" rel="150400.3.39.1"/>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
</package>
<package pkgid="e9c0d36f4d6360996e305c9068ec471e7fbaa41c32342d1857b7d3dbb92f9293" name="mozilla-nss-certs" arch="s390x">
  <version epoch="0" ver="3.90.2" rel="150400.3.39.1"/>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
</package>
<package pkgid="dccbb825df0e2b6617c0e7d76c5df798ae09fe12c907565b788a60c76323b349" name="mozilla-nss-certs" arch="x86_64">
  <version epoch="0" ver="3.90.2" rel="150400.3.39.1"/>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
</package>
<package pkgid="a5127590c68962dae0cee865385522d3eea751cc7a6efe369a6d48e01f4691ba" name="mozilla-nss-tools" arch="aarch64">
  <version epoch="0" ver="3.101.2" rel="150400.3.48.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
</package>
<package pkgid="52723de595d8a34070aa453b9e0655fc846c42bc836c497aae47dd65986b76b3" name="mozilla-nss-tools" arch="s390x">
  <version epoch="0" ver="3.101.2" rel="150400.3.48.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
</package>
<package pkgid="dcd955ad11d754b75c4852ca439f98f866dd6d2b891b2df5b9503b14ce227696" name="mozilla-nss-tools" arch="x86_64">
  <version epoch="0" ver="3.101.2" rel="150400.3.48.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
</package>
<package pkgid="a2de4a92faf737ee9e551ca801d61e9d9aaf9c5eb3750b13f8d6733ae303bede" name="mozilla-nss-tools" arch="aarch64">
  <version epoch="0" ver="3.101.2" rel="150400.3.51.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
</package>
<package pkgid="a1ee1cf45b8309214771f4c3c1e355b8ced8ad99a5419a3726aa40b278feb5ae" name="mozilla-nss-tools" arch="s390x">
  <version epoch="0" ver="3.101.2" rel="150400.3.51.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
</package>
<package pkgid="bd60510d23998e3e2000536b0e803280ed810bf77fd9388ca92d07f0c1e50150" name="mozilla-nss-tools" arch="x86_64">
  <version epoch="0" ver="3.101.2" rel="150400.3.51.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
</package>
<package pkgid="4d47dd714da4adb3f865ee6bc13e3eba32909100fd1f93a27b6e9e373ebcac4f" name="mozilla-nss-tools" arch="aarch64">
  <version epoch="0" ver="3.90.1" rel="150400.3.35.2"/>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
</package>
<package pkgid="6898c7b9fe2de81dc997b39a284cac4ed99efc5a8b8946cc12b8fb2fa9311667" name="mozilla-nss-tools" arch="s390x">
  <version epoch="0" ver="3.90.1" rel="150400.3.35.2"/>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
</package>
<package pkgid="8130fdcb7d02f252d85df1aaee55b14b6207b4dcfc47fc9c420c4ca2a6413b4f" name="mozilla-nss-tools" arch="x86_64">
  <version epoch="0" ver="3.90.1" rel="150400.3.35.2"/>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
</package>
<package pkgid="0b25966b12b9f99193d3813857220347290e0297a540e8b422e9a4f98a7d2074" name="mozilla-nss-tools" arch="aarch64">
  <version epoch="0" ver="3.90.2" rel="150400.3.39.1"/>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
</package>
<package pkgid="8fb06e82223557aabbde132b254c41aa1cef11cb37dd90484d2bb72ed1f74b85" name="mozilla-nss-tools" arch="s390x">
  <version epoch="0" ver="3.90.2" rel="150400.3.39.1"/>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
</package>
<package pkgid="a47214615a7e7bcf25d3ad4d086a9b5a2dc53898142712d53a5a96f76681cf33" name="mozilla-nss-tools" arch="x86_64">
  <version epoch="0" ver="3.90.2" rel="150400.3.39.1"/>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
</package>
<package pkgid="3a09170beba3a8c20332592bdb1ed7628518dd43511398bf305402b019c32463" name="multipath-tools" arch="aarch64">
  <version epoch="0" ver="0.9.4+117+suse.87f2634" rel="150500.3.9.1"/>
  <changelog author="mwilck@suse.com" date="1645012800">- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus</changelog>
  <changelog author="mwilck@suse.com" date="1648468800">- If multipath-tools is newly installed, load dm-multipath
  (bsc#1196898)</changelog>
  <changelog author="mwilck@suse.com" date="1649937600">- Update to version 0.8.9+42+suse.45974f11:
  * Logging improvements
  * Fix busy loop with delayed_reconfigure (bsc#1199342)
  * multipathd: use remove_map_callback for delayed reconfigure
  * multipathd: Don't keep starting TUR threads, if they always hang.
    (bsc#1199345)
  * Fix handling of path addition in read-only arrays on NVMe
  * Updates of built-in hardware database
- Update to upstream 0.8.9
  * libmultipath: only warn once about unsupported dev_loss_tmo
  * Otherwise code-identical to 0.8.8+64</changelog>
  <changelog author="mwilck@suse.com" date="1652097600">- Update to version 0.8.9+85+suse.a9da21c:
  * This is a pre-release of multipath-tools 0.9.0
  * multipath.conf: add "protocol" subsection in "overrides" section
    This allows to set "dev_loss_tmo", "fast_io_fail_tmo", and
    "eh_deadline" on a per-protocol basis rather than per storage
  * multipath.conf: drop support for deprecated options:
    getuid_callout, pg_timeout, config_dir, multipath_dir
  * multipathd: don't switch to DAEMON_IDLE during startup
  (bsc#1199346, bsc#1197570)
  * multipathd: avoid delays during uevent processing (bsc#1199347)
  * Fixes for minor issues reported by coverity
  * Fix for memory leak with uid_attrs
  * Fix possibility to redefine -D_FORTIFY_SOURCE macro.
  * Updates for built in hardware db</changelog>
  <changelog author="mwilck@suse.com" date="1652184000">- Update to version 0.8.9+87+suse.a1eb122:
  * add ability to autodetect support for -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1652270400">- Update to version 0.8.9+90+suse.71a70fb:
  * support overriding -D_FORTIFY_SOURCE in OPTFLAGS
  * add -U_FORTIFY_SOURCE to optflags to avoid compilation errors
    on old distros</changelog>
  <changelog author="mwilck@suse.com" date="1657713600">- Update to version 0.9.0+33+suse.fdc6686
  * multipath.conf: add support for "protocol" subsection in
    "overrides" section to set certain config options by protocol.
  * Removed the previously deprecated options getuid_callout,
    config_dir, multipath_dir, pg_timeout
  * hwable fixes and additions
  * multipath.conf(5): add disclaimer about vendor support
  * libmultipath, kpartx: fix callers of dm_get_next_target()
  * Change built-in defaults for NVMe: group by prio, and immediate
    failback
  * Allow compilation with -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1657713601">- Update to version 0.9.0+39+suse.51a2ab1:
  Upstream bug fixes:
  * libmultipath: fix find_multipaths_timeout for unknown hardware
  (boo#1201483)
  * multipath-tools: fix "multipath -ll" for Native NVME Multipath devices
  (boo#1201483)</changelog>
  <changelog author="mwilck@suse.com" date="1661342400">- Update to version 0.9.0+55+suse.33d8854:
  * Avoid linking to libreadline to avoid licensing issue
    (bsc#1202616)</changelog>
  <changelog author="mwilck@suse.com" date="1662206400">- Update to version 0.9.0+134+suse.dbf2e2d:
  * Add multipathc command under GPL3.0, and split off libmpathutil
    (bsc#1202616)
  * Fix command completion in interactive mode (bsc#1201483)
  * multipathd: fix use-after-free in handle_path_wwid_change()
    (bsc#1201483)
  * Improve startup time for very large multipath.conf (bsc#1200523)
  * Avoid checker blocking event handling for huge number of devices
    (boo#1203085)
  * Cleanup sysfs accessors in libmultipath
  * Minor upstream bug fixes
  * Spelling fixes
  * Documentation: add ALUA info to README.md, delete README.alua</changelog>
  <changelog author="mwilck@suse.com" date="1662552000">- Update to version 0.9.1+48+suse.9c6c435:
  * Upstream version update
  * kpartx_id: remove bashism
  * Doc: add multipathc.8 manual page</changelog>
  <changelog author="mwilck@suse.com" date="1662724800">- Update to version 0.9.1+52+suse.be8809e:
  * Code-identical to 0.9.1+48+suse.9c6c435 (merge in git repo
    to preserve history; fix revision in _service file).</changelog>
  <changelog author="mwilck@suse.com" date="1666612800">- Update to version 0.9.2+57+suse.cf3c1e9:
  * Fix multipathd authorization bypass and symlink attack
    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
  * add multipath-dracut.conf: dracut config file to install
    tmpfiles.d/multipath.conf in initramfs
  * Use "queue_mode bio" for NVMeoF/TCP devices
  * Upstream bug fixes and hwtable updates
- Drop recompress.service, it just slows down build</changelog>
  <changelog author="mwilck@suse.com" date="1666785600">- Update to version 0.9.2+59+suse.ac8942d:
  * Fix segfault in "multipath -t" command (boo#1204731)</changelog>
  <changelog author="mwilck@suse.com" date="1674043200">- Fix "rpm --verify" (bsc#1207232)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 0.9.4+68+suse.98559ea:
  * libmultipath: bump ABI version to 18.0.0
  * libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
    (gh#opensvc/multipath-tools#56)
  * libmpathpersist: use conf-&gt;timeout for updating persistent reservations
    (gh#opensvc/multipath-tools#45)
  * libmultipath: is_path_valid(): check if device is in use
    (bsc#1203141) (added libmount dependency)
  * libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
  * multipathd: handle no active paths in update_map_pr (bsc#1207546)
  * multipathd: make pr registration consistent (bsc#1207546)
  * libmultipath: don't leak memory on invalid strings  (bsc#1207546)
  * multipath.conf(5): improve documentation of dev_loss_tmo (bsc#1207546)
  * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
  * libmultipath: fix 'show paths format' failure
  * minor bugfixes
  * hwtable fixes
  * Build system rework
  * spec file: adapt make command line to changes in build system
  * spec file: use make -Orecurse (better readable output)
  * spec file: use verbose build</changelog>
  <changelog author="mwilck@suse.com" date="1679486400">- Update to version 0.9.4+71+suse.c648a77:
  * libmultipath: avoid grouping paths wrongly with "find_multipaths smart"
    (bsc#1209623)
  * fix multipath-tools build with liburcu 0.14.0</changelog>
  <changelog author="mwilck@suse.com" date="1688472000">- Update to version 0.9.4+73+suse.a5414a6:
  * libmultipath: ignore nvme devices if nvme native multipath is enabled
    (bsc#1212854)
  * libmultipath: fix dev_loss_tmo even if not set in configuration
    (bsc#1212440)
    Note: this changes user-visible behavior. multipathd will not
    grab any nvme devices for dm-multipath if nvme native multipathing
    is on (which is the default on SLE and openSUSE).</changelog>
  <changelog author="mwilck@suse.com" date="1704456000">- Update to version 0.9.4+77+suse.1f7a63b:
  * fix ANA prioritizer enablement logic (bsc#1218326)</changelog>
  <changelog author="mwilck@suse.com" date="1709035200">- Update to version 0.9.4+117+suse.87f2634
- Backport of earlier bugfixes:
  * Fix activation of LVM volume groups during coldplug (bsc#1219142)
  * avoid changing SCSI timeouts in "multipath -d" (bsc#1213809)
  * fix dev_loss_tmo even if not set in configuration (bsc#1212440)
- Backport of upstream bug fixes (bsc#1220374):
  * avoid setting queue_if_no_path on multipath maps for which the
    no_path_retry timeout has expired
  * fixed memory and error handling for code using aio (marginal path code,
    directio path checker)
  * libmultipath: fix max_sectors_kb on adding path
  * fix warnings reported by udevadm verify
  * libmultipath: use directio checker for LIO targets
    (gh#opensvc/multipath-tools#54)
  * multipathd.service: remove "Also=multipathd.socket"
    (gh#opensvc/multipath-tools#65)
  * libmultipathd: Avoid parsing errors due to unsupported designators
  * libmultipath: return 'pending' state when port is in transition
  * multipath.rules: fix "smart" bug with failed valid path check
  * libmpathpersist: fix resource leak in update_map_pr()
  * libmultipath: keep renames from stopping other multipath actions
  * pass EXTRAVERSION to build</changelog>
</package>
<package pkgid="af3260dd0b3781d51837c3897c80ff6081f2d4e7cfb528e2b2fe899a27cdc18e" name="multipath-tools" arch="s390x">
  <version epoch="0" ver="0.9.4+117+suse.87f2634" rel="150500.3.9.1"/>
  <changelog author="mwilck@suse.com" date="1645012800">- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus</changelog>
  <changelog author="mwilck@suse.com" date="1648468800">- If multipath-tools is newly installed, load dm-multipath
  (bsc#1196898)</changelog>
  <changelog author="mwilck@suse.com" date="1649937600">- Update to version 0.8.9+42+suse.45974f11:
  * Logging improvements
  * Fix busy loop with delayed_reconfigure (bsc#1199342)
  * multipathd: use remove_map_callback for delayed reconfigure
  * multipathd: Don't keep starting TUR threads, if they always hang.
    (bsc#1199345)
  * Fix handling of path addition in read-only arrays on NVMe
  * Updates of built-in hardware database
- Update to upstream 0.8.9
  * libmultipath: only warn once about unsupported dev_loss_tmo
  * Otherwise code-identical to 0.8.8+64</changelog>
  <changelog author="mwilck@suse.com" date="1652097600">- Update to version 0.8.9+85+suse.a9da21c:
  * This is a pre-release of multipath-tools 0.9.0
  * multipath.conf: add "protocol" subsection in "overrides" section
    This allows to set "dev_loss_tmo", "fast_io_fail_tmo", and
    "eh_deadline" on a per-protocol basis rather than per storage
  * multipath.conf: drop support for deprecated options:
    getuid_callout, pg_timeout, config_dir, multipath_dir
  * multipathd: don't switch to DAEMON_IDLE during startup
  (bsc#1199346, bsc#1197570)
  * multipathd: avoid delays during uevent processing (bsc#1199347)
  * Fixes for minor issues reported by coverity
  * Fix for memory leak with uid_attrs
  * Fix possibility to redefine -D_FORTIFY_SOURCE macro.
  * Updates for built in hardware db</changelog>
  <changelog author="mwilck@suse.com" date="1652184000">- Update to version 0.8.9+87+suse.a1eb122:
  * add ability to autodetect support for -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1652270400">- Update to version 0.8.9+90+suse.71a70fb:
  * support overriding -D_FORTIFY_SOURCE in OPTFLAGS
  * add -U_FORTIFY_SOURCE to optflags to avoid compilation errors
    on old distros</changelog>
  <changelog author="mwilck@suse.com" date="1657713600">- Update to version 0.9.0+33+suse.fdc6686
  * multipath.conf: add support for "protocol" subsection in
    "overrides" section to set certain config options by protocol.
  * Removed the previously deprecated options getuid_callout,
    config_dir, multipath_dir, pg_timeout
  * hwable fixes and additions
  * multipath.conf(5): add disclaimer about vendor support
  * libmultipath, kpartx: fix callers of dm_get_next_target()
  * Change built-in defaults for NVMe: group by prio, and immediate
    failback
  * Allow compilation with -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1657713601">- Update to version 0.9.0+39+suse.51a2ab1:
  Upstream bug fixes:
  * libmultipath: fix find_multipaths_timeout for unknown hardware
  (boo#1201483)
  * multipath-tools: fix "multipath -ll" for Native NVME Multipath devices
  (boo#1201483)</changelog>
  <changelog author="mwilck@suse.com" date="1661342400">- Update to version 0.9.0+55+suse.33d8854:
  * Avoid linking to libreadline to avoid licensing issue
    (bsc#1202616)</changelog>
  <changelog author="mwilck@suse.com" date="1662206400">- Update to version 0.9.0+134+suse.dbf2e2d:
  * Add multipathc command under GPL3.0, and split off libmpathutil
    (bsc#1202616)
  * Fix command completion in interactive mode (bsc#1201483)
  * multipathd: fix use-after-free in handle_path_wwid_change()
    (bsc#1201483)
  * Improve startup time for very large multipath.conf (bsc#1200523)
  * Avoid checker blocking event handling for huge number of devices
    (boo#1203085)
  * Cleanup sysfs accessors in libmultipath
  * Minor upstream bug fixes
  * Spelling fixes
  * Documentation: add ALUA info to README.md, delete README.alua</changelog>
  <changelog author="mwilck@suse.com" date="1662552000">- Update to version 0.9.1+48+suse.9c6c435:
  * Upstream version update
  * kpartx_id: remove bashism
  * Doc: add multipathc.8 manual page</changelog>
  <changelog author="mwilck@suse.com" date="1662724800">- Update to version 0.9.1+52+suse.be8809e:
  * Code-identical to 0.9.1+48+suse.9c6c435 (merge in git repo
    to preserve history; fix revision in _service file).</changelog>
  <changelog author="mwilck@suse.com" date="1666612800">- Update to version 0.9.2+57+suse.cf3c1e9:
  * Fix multipathd authorization bypass and symlink attack
    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
  * add multipath-dracut.conf: dracut config file to install
    tmpfiles.d/multipath.conf in initramfs
  * Use "queue_mode bio" for NVMeoF/TCP devices
  * Upstream bug fixes and hwtable updates
- Drop recompress.service, it just slows down build</changelog>
  <changelog author="mwilck@suse.com" date="1666785600">- Update to version 0.9.2+59+suse.ac8942d:
  * Fix segfault in "multipath -t" command (boo#1204731)</changelog>
  <changelog author="mwilck@suse.com" date="1674043200">- Fix "rpm --verify" (bsc#1207232)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 0.9.4+68+suse.98559ea:
  * libmultipath: bump ABI version to 18.0.0
  * libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
    (gh#opensvc/multipath-tools#56)
  * libmpathpersist: use conf-&gt;timeout for updating persistent reservations
    (gh#opensvc/multipath-tools#45)
  * libmultipath: is_path_valid(): check if device is in use
    (bsc#1203141) (added libmount dependency)
  * libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
  * multipathd: handle no active paths in update_map_pr (bsc#1207546)
  * multipathd: make pr registration consistent (bsc#1207546)
  * libmultipath: don't leak memory on invalid strings  (bsc#1207546)
  * multipath.conf(5): improve documentation of dev_loss_tmo (bsc#1207546)
  * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
  * libmultipath: fix 'show paths format' failure
  * minor bugfixes
  * hwtable fixes
  * Build system rework
  * spec file: adapt make command line to changes in build system
  * spec file: use make -Orecurse (better readable output)
  * spec file: use verbose build</changelog>
  <changelog author="mwilck@suse.com" date="1679486400">- Update to version 0.9.4+71+suse.c648a77:
  * libmultipath: avoid grouping paths wrongly with "find_multipaths smart"
    (bsc#1209623)
  * fix multipath-tools build with liburcu 0.14.0</changelog>
  <changelog author="mwilck@suse.com" date="1688472000">- Update to version 0.9.4+73+suse.a5414a6:
  * libmultipath: ignore nvme devices if nvme native multipath is enabled
    (bsc#1212854)
  * libmultipath: fix dev_loss_tmo even if not set in configuration
    (bsc#1212440)
    Note: this changes user-visible behavior. multipathd will not
    grab any nvme devices for dm-multipath if nvme native multipathing
    is on (which is the default on SLE and openSUSE).</changelog>
  <changelog author="mwilck@suse.com" date="1704456000">- Update to version 0.9.4+77+suse.1f7a63b:
  * fix ANA prioritizer enablement logic (bsc#1218326)</changelog>
  <changelog author="mwilck@suse.com" date="1709035200">- Update to version 0.9.4+117+suse.87f2634
- Backport of earlier bugfixes:
  * Fix activation of LVM volume groups during coldplug (bsc#1219142)
  * avoid changing SCSI timeouts in "multipath -d" (bsc#1213809)
  * fix dev_loss_tmo even if not set in configuration (bsc#1212440)
- Backport of upstream bug fixes (bsc#1220374):
  * avoid setting queue_if_no_path on multipath maps for which the
    no_path_retry timeout has expired
  * fixed memory and error handling for code using aio (marginal path code,
    directio path checker)
  * libmultipath: fix max_sectors_kb on adding path
  * fix warnings reported by udevadm verify
  * libmultipath: use directio checker for LIO targets
    (gh#opensvc/multipath-tools#54)
  * multipathd.service: remove "Also=multipathd.socket"
    (gh#opensvc/multipath-tools#65)
  * libmultipathd: Avoid parsing errors due to unsupported designators
  * libmultipath: return 'pending' state when port is in transition
  * multipath.rules: fix "smart" bug with failed valid path check
  * libmpathpersist: fix resource leak in update_map_pr()
  * libmultipath: keep renames from stopping other multipath actions
  * pass EXTRAVERSION to build</changelog>
</package>
<package pkgid="b93485bf3336f87ab208514f58b22d769628ad425843c2d84da77f4c48c643bd" name="multipath-tools" arch="src">
  <version epoch="0" ver="0.9.4+117+suse.87f2634" rel="150500.3.9.1"/>
  <changelog author="mwilck@suse.com" date="1645012800">- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus</changelog>
  <changelog author="mwilck@suse.com" date="1648468800">- If multipath-tools is newly installed, load dm-multipath
  (bsc#1196898)</changelog>
  <changelog author="mwilck@suse.com" date="1649937600">- Update to version 0.8.9+42+suse.45974f11:
  * Logging improvements
  * Fix busy loop with delayed_reconfigure (bsc#1199342)
  * multipathd: use remove_map_callback for delayed reconfigure
  * multipathd: Don't keep starting TUR threads, if they always hang.
    (bsc#1199345)
  * Fix handling of path addition in read-only arrays on NVMe
  * Updates of built-in hardware database
- Update to upstream 0.8.9
  * libmultipath: only warn once about unsupported dev_loss_tmo
  * Otherwise code-identical to 0.8.8+64</changelog>
  <changelog author="mwilck@suse.com" date="1652097600">- Update to version 0.8.9+85+suse.a9da21c:
  * This is a pre-release of multipath-tools 0.9.0
  * multipath.conf: add "protocol" subsection in "overrides" section
    This allows to set "dev_loss_tmo", "fast_io_fail_tmo", and
    "eh_deadline" on a per-protocol basis rather than per storage
  * multipath.conf: drop support for deprecated options:
    getuid_callout, pg_timeout, config_dir, multipath_dir
  * multipathd: don't switch to DAEMON_IDLE during startup
  (bsc#1199346, bsc#1197570)
  * multipathd: avoid delays during uevent processing (bsc#1199347)
  * Fixes for minor issues reported by coverity
  * Fix for memory leak with uid_attrs
  * Fix possibility to redefine -D_FORTIFY_SOURCE macro.
  * Updates for built in hardware db</changelog>
  <changelog author="mwilck@suse.com" date="1652184000">- Update to version 0.8.9+87+suse.a1eb122:
  * add ability to autodetect support for -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1652270400">- Update to version 0.8.9+90+suse.71a70fb:
  * support overriding -D_FORTIFY_SOURCE in OPTFLAGS
  * add -U_FORTIFY_SOURCE to optflags to avoid compilation errors
    on old distros</changelog>
  <changelog author="mwilck@suse.com" date="1657713600">- Update to version 0.9.0+33+suse.fdc6686
  * multipath.conf: add support for "protocol" subsection in
    "overrides" section to set certain config options by protocol.
  * Removed the previously deprecated options getuid_callout,
    config_dir, multipath_dir, pg_timeout
  * hwable fixes and additions
  * multipath.conf(5): add disclaimer about vendor support
  * libmultipath, kpartx: fix callers of dm_get_next_target()
  * Change built-in defaults for NVMe: group by prio, and immediate
    failback
  * Allow compilation with -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1657713601">- Update to version 0.9.0+39+suse.51a2ab1:
  Upstream bug fixes:
  * libmultipath: fix find_multipaths_timeout for unknown hardware
  (boo#1201483)
  * multipath-tools: fix "multipath -ll" for Native NVME Multipath devices
  (boo#1201483)</changelog>
  <changelog author="mwilck@suse.com" date="1661342400">- Update to version 0.9.0+55+suse.33d8854:
  * Avoid linking to libreadline to avoid licensing issue
    (bsc#1202616)</changelog>
  <changelog author="mwilck@suse.com" date="1662206400">- Update to version 0.9.0+134+suse.dbf2e2d:
  * Add multipathc command under GPL3.0, and split off libmpathutil
    (bsc#1202616)
  * Fix command completion in interactive mode (bsc#1201483)
  * multipathd: fix use-after-free in handle_path_wwid_change()
    (bsc#1201483)
  * Improve startup time for very large multipath.conf (bsc#1200523)
  * Avoid checker blocking event handling for huge number of devices
    (boo#1203085)
  * Cleanup sysfs accessors in libmultipath
  * Minor upstream bug fixes
  * Spelling fixes
  * Documentation: add ALUA info to README.md, delete README.alua</changelog>
  <changelog author="mwilck@suse.com" date="1662552000">- Update to version 0.9.1+48+suse.9c6c435:
  * Upstream version update
  * kpartx_id: remove bashism
  * Doc: add multipathc.8 manual page</changelog>
  <changelog author="mwilck@suse.com" date="1662724800">- Update to version 0.9.1+52+suse.be8809e:
  * Code-identical to 0.9.1+48+suse.9c6c435 (merge in git repo
    to preserve history; fix revision in _service file).</changelog>
  <changelog author="mwilck@suse.com" date="1666612800">- Update to version 0.9.2+57+suse.cf3c1e9:
  * Fix multipathd authorization bypass and symlink attack
    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
  * add multipath-dracut.conf: dracut config file to install
    tmpfiles.d/multipath.conf in initramfs
  * Use "queue_mode bio" for NVMeoF/TCP devices
  * Upstream bug fixes and hwtable updates
- Drop recompress.service, it just slows down build</changelog>
  <changelog author="mwilck@suse.com" date="1666785600">- Update to version 0.9.2+59+suse.ac8942d:
  * Fix segfault in "multipath -t" command (boo#1204731)</changelog>
  <changelog author="mwilck@suse.com" date="1674043200">- Fix "rpm --verify" (bsc#1207232)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 0.9.4+68+suse.98559ea:
  * libmultipath: bump ABI version to 18.0.0
  * libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
    (gh#opensvc/multipath-tools#56)
  * libmpathpersist: use conf-&gt;timeout for updating persistent reservations
    (gh#opensvc/multipath-tools#45)
  * libmultipath: is_path_valid(): check if device is in use
    (bsc#1203141) (added libmount dependency)
  * libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
  * multipathd: handle no active paths in update_map_pr (bsc#1207546)
  * multipathd: make pr registration consistent (bsc#1207546)
  * libmultipath: don't leak memory on invalid strings  (bsc#1207546)
  * multipath.conf(5): improve documentation of dev_loss_tmo (bsc#1207546)
  * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
  * libmultipath: fix 'show paths format' failure
  * minor bugfixes
  * hwtable fixes
  * Build system rework
  * spec file: adapt make command line to changes in build system
  * spec file: use make -Orecurse (better readable output)
  * spec file: use verbose build</changelog>
  <changelog author="mwilck@suse.com" date="1679486400">- Update to version 0.9.4+71+suse.c648a77:
  * libmultipath: avoid grouping paths wrongly with "find_multipaths smart"
    (bsc#1209623)
  * fix multipath-tools build with liburcu 0.14.0</changelog>
  <changelog author="mwilck@suse.com" date="1688472000">- Update to version 0.9.4+73+suse.a5414a6:
  * libmultipath: ignore nvme devices if nvme native multipath is enabled
    (bsc#1212854)
  * libmultipath: fix dev_loss_tmo even if not set in configuration
    (bsc#1212440)
    Note: this changes user-visible behavior. multipathd will not
    grab any nvme devices for dm-multipath if nvme native multipathing
    is on (which is the default on SLE and openSUSE).</changelog>
  <changelog author="mwilck@suse.com" date="1704456000">- Update to version 0.9.4+77+suse.1f7a63b:
  * fix ANA prioritizer enablement logic (bsc#1218326)</changelog>
  <changelog author="mwilck@suse.com" date="1709035200">- Update to version 0.9.4+117+suse.87f2634
- Backport of earlier bugfixes:
  * Fix activation of LVM volume groups during coldplug (bsc#1219142)
  * avoid changing SCSI timeouts in "multipath -d" (bsc#1213809)
  * fix dev_loss_tmo even if not set in configuration (bsc#1212440)
- Backport of upstream bug fixes (bsc#1220374):
  * avoid setting queue_if_no_path on multipath maps for which the
    no_path_retry timeout has expired
  * fixed memory and error handling for code using aio (marginal path code,
    directio path checker)
  * libmultipath: fix max_sectors_kb on adding path
  * fix warnings reported by udevadm verify
  * libmultipath: use directio checker for LIO targets
    (gh#opensvc/multipath-tools#54)
  * multipathd.service: remove "Also=multipathd.socket"
    (gh#opensvc/multipath-tools#65)
  * libmultipathd: Avoid parsing errors due to unsupported designators
  * libmultipath: return 'pending' state when port is in transition
  * multipath.rules: fix "smart" bug with failed valid path check
  * libmpathpersist: fix resource leak in update_map_pr()
  * libmultipath: keep renames from stopping other multipath actions
  * pass EXTRAVERSION to build</changelog>
</package>
<package pkgid="62d974e8a6fe5a7bff09442c1ac7895e1e7493112ca385baf29be4890280e91b" name="multipath-tools" arch="x86_64">
  <version epoch="0" ver="0.9.4+117+suse.87f2634" rel="150500.3.9.1"/>
  <changelog author="mwilck@suse.com" date="1645012800">- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus</changelog>
  <changelog author="mwilck@suse.com" date="1648468800">- If multipath-tools is newly installed, load dm-multipath
  (bsc#1196898)</changelog>
  <changelog author="mwilck@suse.com" date="1649937600">- Update to version 0.8.9+42+suse.45974f11:
  * Logging improvements
  * Fix busy loop with delayed_reconfigure (bsc#1199342)
  * multipathd: use remove_map_callback for delayed reconfigure
  * multipathd: Don't keep starting TUR threads, if they always hang.
    (bsc#1199345)
  * Fix handling of path addition in read-only arrays on NVMe
  * Updates of built-in hardware database
- Update to upstream 0.8.9
  * libmultipath: only warn once about unsupported dev_loss_tmo
  * Otherwise code-identical to 0.8.8+64</changelog>
  <changelog author="mwilck@suse.com" date="1652097600">- Update to version 0.8.9+85+suse.a9da21c:
  * This is a pre-release of multipath-tools 0.9.0
  * multipath.conf: add "protocol" subsection in "overrides" section
    This allows to set "dev_loss_tmo", "fast_io_fail_tmo", and
    "eh_deadline" on a per-protocol basis rather than per storage
  * multipath.conf: drop support for deprecated options:
    getuid_callout, pg_timeout, config_dir, multipath_dir
  * multipathd: don't switch to DAEMON_IDLE during startup
  (bsc#1199346, bsc#1197570)
  * multipathd: avoid delays during uevent processing (bsc#1199347)
  * Fixes for minor issues reported by coverity
  * Fix for memory leak with uid_attrs
  * Fix possibility to redefine -D_FORTIFY_SOURCE macro.
  * Updates for built in hardware db</changelog>
  <changelog author="mwilck@suse.com" date="1652184000">- Update to version 0.8.9+87+suse.a1eb122:
  * add ability to autodetect support for -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1652270400">- Update to version 0.8.9+90+suse.71a70fb:
  * support overriding -D_FORTIFY_SOURCE in OPTFLAGS
  * add -U_FORTIFY_SOURCE to optflags to avoid compilation errors
    on old distros</changelog>
  <changelog author="mwilck@suse.com" date="1657713600">- Update to version 0.9.0+33+suse.fdc6686
  * multipath.conf: add support for "protocol" subsection in
    "overrides" section to set certain config options by protocol.
  * Removed the previously deprecated options getuid_callout,
    config_dir, multipath_dir, pg_timeout
  * hwable fixes and additions
  * multipath.conf(5): add disclaimer about vendor support
  * libmultipath, kpartx: fix callers of dm_get_next_target()
  * Change built-in defaults for NVMe: group by prio, and immediate
    failback
  * Allow compilation with -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1657713601">- Update to version 0.9.0+39+suse.51a2ab1:
  Upstream bug fixes:
  * libmultipath: fix find_multipaths_timeout for unknown hardware
  (boo#1201483)
  * multipath-tools: fix "multipath -ll" for Native NVME Multipath devices
  (boo#1201483)</changelog>
  <changelog author="mwilck@suse.com" date="1661342400">- Update to version 0.9.0+55+suse.33d8854:
  * Avoid linking to libreadline to avoid licensing issue
    (bsc#1202616)</changelog>
  <changelog author="mwilck@suse.com" date="1662206400">- Update to version 0.9.0+134+suse.dbf2e2d:
  * Add multipathc command under GPL3.0, and split off libmpathutil
    (bsc#1202616)
  * Fix command completion in interactive mode (bsc#1201483)
  * multipathd: fix use-after-free in handle_path_wwid_change()
    (bsc#1201483)
  * Improve startup time for very large multipath.conf (bsc#1200523)
  * Avoid checker blocking event handling for huge number of devices
    (boo#1203085)
  * Cleanup sysfs accessors in libmultipath
  * Minor upstream bug fixes
  * Spelling fixes
  * Documentation: add ALUA info to README.md, delete README.alua</changelog>
  <changelog author="mwilck@suse.com" date="1662552000">- Update to version 0.9.1+48+suse.9c6c435:
  * Upstream version update
  * kpartx_id: remove bashism
  * Doc: add multipathc.8 manual page</changelog>
  <changelog author="mwilck@suse.com" date="1662724800">- Update to version 0.9.1+52+suse.be8809e:
  * Code-identical to 0.9.1+48+suse.9c6c435 (merge in git repo
    to preserve history; fix revision in _service file).</changelog>
  <changelog author="mwilck@suse.com" date="1666612800">- Update to version 0.9.2+57+suse.cf3c1e9:
  * Fix multipathd authorization bypass and symlink attack
    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
  * add multipath-dracut.conf: dracut config file to install
    tmpfiles.d/multipath.conf in initramfs
  * Use "queue_mode bio" for NVMeoF/TCP devices
  * Upstream bug fixes and hwtable updates
- Drop recompress.service, it just slows down build</changelog>
  <changelog author="mwilck@suse.com" date="1666785600">- Update to version 0.9.2+59+suse.ac8942d:
  * Fix segfault in "multipath -t" command (boo#1204731)</changelog>
  <changelog author="mwilck@suse.com" date="1674043200">- Fix "rpm --verify" (bsc#1207232)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 0.9.4+68+suse.98559ea:
  * libmultipath: bump ABI version to 18.0.0
  * libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
    (gh#opensvc/multipath-tools#56)
  * libmpathpersist: use conf-&gt;timeout for updating persistent reservations
    (gh#opensvc/multipath-tools#45)
  * libmultipath: is_path_valid(): check if device is in use
    (bsc#1203141) (added libmount dependency)
  * libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
  * multipathd: handle no active paths in update_map_pr (bsc#1207546)
  * multipathd: make pr registration consistent (bsc#1207546)
  * libmultipath: don't leak memory on invalid strings  (bsc#1207546)
  * multipath.conf(5): improve documentation of dev_loss_tmo (bsc#1207546)
  * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
  * libmultipath: fix 'show paths format' failure
  * minor bugfixes
  * hwtable fixes
  * Build system rework
  * spec file: adapt make command line to changes in build system
  * spec file: use make -Orecurse (better readable output)
  * spec file: use verbose build</changelog>
  <changelog author="mwilck@suse.com" date="1679486400">- Update to version 0.9.4+71+suse.c648a77:
  * libmultipath: avoid grouping paths wrongly with "find_multipaths smart"
    (bsc#1209623)
  * fix multipath-tools build with liburcu 0.14.0</changelog>
  <changelog author="mwilck@suse.com" date="1688472000">- Update to version 0.9.4+73+suse.a5414a6:
  * libmultipath: ignore nvme devices if nvme native multipath is enabled
    (bsc#1212854)
  * libmultipath: fix dev_loss_tmo even if not set in configuration
    (bsc#1212440)
    Note: this changes user-visible behavior. multipathd will not
    grab any nvme devices for dm-multipath if nvme native multipathing
    is on (which is the default on SLE and openSUSE).</changelog>
  <changelog author="mwilck@suse.com" date="1704456000">- Update to version 0.9.4+77+suse.1f7a63b:
  * fix ANA prioritizer enablement logic (bsc#1218326)</changelog>
  <changelog author="mwilck@suse.com" date="1709035200">- Update to version 0.9.4+117+suse.87f2634
- Backport of earlier bugfixes:
  * Fix activation of LVM volume groups during coldplug (bsc#1219142)
  * avoid changing SCSI timeouts in "multipath -d" (bsc#1213809)
  * fix dev_loss_tmo even if not set in configuration (bsc#1212440)
- Backport of upstream bug fixes (bsc#1220374):
  * avoid setting queue_if_no_path on multipath maps for which the
    no_path_retry timeout has expired
  * fixed memory and error handling for code using aio (marginal path code,
    directio path checker)
  * libmultipath: fix max_sectors_kb on adding path
  * fix warnings reported by udevadm verify
  * libmultipath: use directio checker for LIO targets
    (gh#opensvc/multipath-tools#54)
  * multipathd.service: remove "Also=multipathd.socket"
    (gh#opensvc/multipath-tools#65)
  * libmultipathd: Avoid parsing errors due to unsupported designators
  * libmultipath: return 'pending' state when port is in transition
  * multipath.rules: fix "smart" bug with failed valid path check
  * libmpathpersist: fix resource leak in update_map_pr()
  * libmultipath: keep renames from stopping other multipath actions
  * pass EXTRAVERSION to build</changelog>
</package>
<package pkgid="10b04ce5eb749d80e859123613597626a7964984ba9c53e9cda3c551fbd05cb1" name="multipath-tools" arch="aarch64">
  <version epoch="0" ver="0.9.4+77+suse.1f7a63b" rel="150500.3.6.1"/>
  <changelog author="mwilck@suse.com" date="1644926400">- Update to version 0.8.8+60+suse.4c5922cb:
  * multipathd: add suppport for FC Fabric Performance Impact
    Notifications (FPIN) (bsc#1195506)</changelog>
  <changelog author="mwilck@suse.com" date="1645012800">- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus</changelog>
  <changelog author="mwilck@suse.com" date="1648468800">- If multipath-tools is newly installed, load dm-multipath
  (bsc#1196898)</changelog>
  <changelog author="mwilck@suse.com" date="1649937600">- Update to version 0.8.9+42+suse.45974f11:
  * Logging improvements
  * Fix busy loop with delayed_reconfigure (bsc#1199342)
  * multipathd: use remove_map_callback for delayed reconfigure
  * multipathd: Don't keep starting TUR threads, if they always hang.
    (bsc#1199345)
  * Fix handling of path addition in read-only arrays on NVMe
  * Updates of built-in hardware database
- Update to upstream 0.8.9
  * libmultipath: only warn once about unsupported dev_loss_tmo
  * Otherwise code-identical to 0.8.8+64</changelog>
  <changelog author="mwilck@suse.com" date="1652097600">- Update to version 0.8.9+85+suse.a9da21c:
  * This is a pre-release of multipath-tools 0.9.0
  * multipath.conf: add "protocol" subsection in "overrides" section
    This allows to set "dev_loss_tmo", "fast_io_fail_tmo", and
    "eh_deadline" on a per-protocol basis rather than per storage
  * multipath.conf: drop support for deprecated options:
    getuid_callout, pg_timeout, config_dir, multipath_dir
  * multipathd: don't switch to DAEMON_IDLE during startup
  (bsc#1199346, bsc#1197570)
  * multipathd: avoid delays during uevent processing (bsc#1199347)
  * Fixes for minor issues reported by coverity
  * Fix for memory leak with uid_attrs
  * Fix possibility to redefine -D_FORTIFY_SOURCE macro.
  * Updates for built in hardware db</changelog>
  <changelog author="mwilck@suse.com" date="1652184000">- Update to version 0.8.9+87+suse.a1eb122:
  * add ability to autodetect support for -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1652270400">- Update to version 0.8.9+90+suse.71a70fb:
  * support overriding -D_FORTIFY_SOURCE in OPTFLAGS
  * add -U_FORTIFY_SOURCE to optflags to avoid compilation errors
    on old distros</changelog>
  <changelog author="mwilck@suse.com" date="1657713600">- Update to version 0.9.0+33+suse.fdc6686
  * multipath.conf: add support for "protocol" subsection in
    "overrides" section to set certain config options by protocol.
  * Removed the previously deprecated options getuid_callout,
    config_dir, multipath_dir, pg_timeout
  * hwable fixes and additions
  * multipath.conf(5): add disclaimer about vendor support
  * libmultipath, kpartx: fix callers of dm_get_next_target()
  * Change built-in defaults for NVMe: group by prio, and immediate
    failback
  * Allow compilation with -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1657713601">- Update to version 0.9.0+39+suse.51a2ab1:
  Upstream bug fixes:
  * libmultipath: fix find_multipaths_timeout for unknown hardware
  (boo#1201483)
  * multipath-tools: fix "multipath -ll" for Native NVME Multipath devices
  (boo#1201483)</changelog>
  <changelog author="mwilck@suse.com" date="1661342400">- Update to version 0.9.0+55+suse.33d8854:
  * Avoid linking to libreadline to avoid licensing issue
    (bsc#1202616)</changelog>
  <changelog author="mwilck@suse.com" date="1662206400">- Update to version 0.9.0+134+suse.dbf2e2d:
  * Add multipathc command under GPL3.0, and split off libmpathutil
    (bsc#1202616)
  * Fix command completion in interactive mode (bsc#1201483)
  * multipathd: fix use-after-free in handle_path_wwid_change()
    (bsc#1201483)
  * Improve startup time for very large multipath.conf (bsc#1200523)
  * Avoid checker blocking event handling for huge number of devices
    (boo#1203085)
  * Cleanup sysfs accessors in libmultipath
  * Minor upstream bug fixes
  * Spelling fixes
  * Documentation: add ALUA info to README.md, delete README.alua</changelog>
  <changelog author="mwilck@suse.com" date="1662552000">- Update to version 0.9.1+48+suse.9c6c435:
  * Upstream version update
  * kpartx_id: remove bashism
  * Doc: add multipathc.8 manual page</changelog>
  <changelog author="mwilck@suse.com" date="1662724800">- Update to version 0.9.1+52+suse.be8809e:
  * Code-identical to 0.9.1+48+suse.9c6c435 (merge in git repo
    to preserve history; fix revision in _service file).</changelog>
  <changelog author="mwilck@suse.com" date="1666612800">- Update to version 0.9.2+57+suse.cf3c1e9:
  * Fix multipathd authorization bypass and symlink attack
    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
  * add multipath-dracut.conf: dracut config file to install
    tmpfiles.d/multipath.conf in initramfs
  * Use "queue_mode bio" for NVMeoF/TCP devices
  * Upstream bug fixes and hwtable updates
- Drop recompress.service, it just slows down build</changelog>
  <changelog author="mwilck@suse.com" date="1666785600">- Update to version 0.9.2+59+suse.ac8942d:
  * Fix segfault in "multipath -t" command (boo#1204731)</changelog>
  <changelog author="mwilck@suse.com" date="1674043200">- Fix "rpm --verify" (bsc#1207232)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 0.9.4+68+suse.98559ea:
  * libmultipath: bump ABI version to 18.0.0
  * libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
    (gh#opensvc/multipath-tools#56)
  * libmpathpersist: use conf-&gt;timeout for updating persistent reservations
    (gh#opensvc/multipath-tools#45)
  * libmultipath: is_path_valid(): check if device is in use
    (bsc#1203141) (added libmount dependency)
  * libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
  * multipathd: handle no active paths in update_map_pr (bsc#1207546)
  * multipathd: make pr registration consistent (bsc#1207546)
  * libmultipath: don't leak memory on invalid strings  (bsc#1207546)
  * multipath.conf(5): improve documentation of dev_loss_tmo (bsc#1207546)
  * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
  * libmultipath: fix 'show paths format' failure
  * minor bugfixes
  * hwtable fixes
  * Build system rework
  * spec file: adapt make command line to changes in build system
  * spec file: use make -Orecurse (better readable output)
  * spec file: use verbose build</changelog>
  <changelog author="mwilck@suse.com" date="1679486400">- Update to version 0.9.4+71+suse.c648a77:
  * libmultipath: avoid grouping paths wrongly with "find_multipaths smart"
    (bsc#1209623)
  * fix multipath-tools build with liburcu 0.14.0</changelog>
  <changelog author="mwilck@suse.com" date="1688472000">- Update to version 0.9.4+73+suse.a5414a6:
  * libmultipath: ignore nvme devices if nvme native multipath is enabled
    (bsc#1212854)
  * libmultipath: fix dev_loss_tmo even if not set in configuration
    (bsc#1212440)
    Note: this changes user-visible behavior. multipathd will not
    grab any nvme devices for dm-multipath if nvme native multipathing
    is on (which is the default on SLE and openSUSE).</changelog>
  <changelog author="mwilck@suse.com" date="1704456000">- Update to version 0.9.4+77+suse.1f7a63b:
  * fix ANA prioritizer enablement logic (bsc#1218326)</changelog>
</package>
<package pkgid="1a264f2d8f5989311b33e956628c39194a4ed88b5013ab4a612d87f5306b05ae" name="multipath-tools" arch="s390x">
  <version epoch="0" ver="0.9.4+77+suse.1f7a63b" rel="150500.3.6.1"/>
  <changelog author="mwilck@suse.com" date="1644926400">- Update to version 0.8.8+60+suse.4c5922cb:
  * multipathd: add suppport for FC Fabric Performance Impact
    Notifications (FPIN) (bsc#1195506)</changelog>
  <changelog author="mwilck@suse.com" date="1645012800">- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus</changelog>
  <changelog author="mwilck@suse.com" date="1648468800">- If multipath-tools is newly installed, load dm-multipath
  (bsc#1196898)</changelog>
  <changelog author="mwilck@suse.com" date="1649937600">- Update to version 0.8.9+42+suse.45974f11:
  * Logging improvements
  * Fix busy loop with delayed_reconfigure (bsc#1199342)
  * multipathd: use remove_map_callback for delayed reconfigure
  * multipathd: Don't keep starting TUR threads, if they always hang.
    (bsc#1199345)
  * Fix handling of path addition in read-only arrays on NVMe
  * Updates of built-in hardware database
- Update to upstream 0.8.9
  * libmultipath: only warn once about unsupported dev_loss_tmo
  * Otherwise code-identical to 0.8.8+64</changelog>
  <changelog author="mwilck@suse.com" date="1652097600">- Update to version 0.8.9+85+suse.a9da21c:
  * This is a pre-release of multipath-tools 0.9.0
  * multipath.conf: add "protocol" subsection in "overrides" section
    This allows to set "dev_loss_tmo", "fast_io_fail_tmo", and
    "eh_deadline" on a per-protocol basis rather than per storage
  * multipath.conf: drop support for deprecated options:
    getuid_callout, pg_timeout, config_dir, multipath_dir
  * multipathd: don't switch to DAEMON_IDLE during startup
  (bsc#1199346, bsc#1197570)
  * multipathd: avoid delays during uevent processing (bsc#1199347)
  * Fixes for minor issues reported by coverity
  * Fix for memory leak with uid_attrs
  * Fix possibility to redefine -D_FORTIFY_SOURCE macro.
  * Updates for built in hardware db</changelog>
  <changelog author="mwilck@suse.com" date="1652184000">- Update to version 0.8.9+87+suse.a1eb122:
  * add ability to autodetect support for -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1652270400">- Update to version 0.8.9+90+suse.71a70fb:
  * support overriding -D_FORTIFY_SOURCE in OPTFLAGS
  * add -U_FORTIFY_SOURCE to optflags to avoid compilation errors
    on old distros</changelog>
  <changelog author="mwilck@suse.com" date="1657713600">- Update to version 0.9.0+33+suse.fdc6686
  * multipath.conf: add support for "protocol" subsection in
    "overrides" section to set certain config options by protocol.
  * Removed the previously deprecated options getuid_callout,
    config_dir, multipath_dir, pg_timeout
  * hwable fixes and additions
  * multipath.conf(5): add disclaimer about vendor support
  * libmultipath, kpartx: fix callers of dm_get_next_target()
  * Change built-in defaults for NVMe: group by prio, and immediate
    failback
  * Allow compilation with -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1657713601">- Update to version 0.9.0+39+suse.51a2ab1:
  Upstream bug fixes:
  * libmultipath: fix find_multipaths_timeout for unknown hardware
  (boo#1201483)
  * multipath-tools: fix "multipath -ll" for Native NVME Multipath devices
  (boo#1201483)</changelog>
  <changelog author="mwilck@suse.com" date="1661342400">- Update to version 0.9.0+55+suse.33d8854:
  * Avoid linking to libreadline to avoid licensing issue
    (bsc#1202616)</changelog>
  <changelog author="mwilck@suse.com" date="1662206400">- Update to version 0.9.0+134+suse.dbf2e2d:
  * Add multipathc command under GPL3.0, and split off libmpathutil
    (bsc#1202616)
  * Fix command completion in interactive mode (bsc#1201483)
  * multipathd: fix use-after-free in handle_path_wwid_change()
    (bsc#1201483)
  * Improve startup time for very large multipath.conf (bsc#1200523)
  * Avoid checker blocking event handling for huge number of devices
    (boo#1203085)
  * Cleanup sysfs accessors in libmultipath
  * Minor upstream bug fixes
  * Spelling fixes
  * Documentation: add ALUA info to README.md, delete README.alua</changelog>
  <changelog author="mwilck@suse.com" date="1662552000">- Update to version 0.9.1+48+suse.9c6c435:
  * Upstream version update
  * kpartx_id: remove bashism
  * Doc: add multipathc.8 manual page</changelog>
  <changelog author="mwilck@suse.com" date="1662724800">- Update to version 0.9.1+52+suse.be8809e:
  * Code-identical to 0.9.1+48+suse.9c6c435 (merge in git repo
    to preserve history; fix revision in _service file).</changelog>
  <changelog author="mwilck@suse.com" date="1666612800">- Update to version 0.9.2+57+suse.cf3c1e9:
  * Fix multipathd authorization bypass and symlink attack
    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
  * add multipath-dracut.conf: dracut config file to install
    tmpfiles.d/multipath.conf in initramfs
  * Use "queue_mode bio" for NVMeoF/TCP devices
  * Upstream bug fixes and hwtable updates
- Drop recompress.service, it just slows down build</changelog>
  <changelog author="mwilck@suse.com" date="1666785600">- Update to version 0.9.2+59+suse.ac8942d:
  * Fix segfault in "multipath -t" command (boo#1204731)</changelog>
  <changelog author="mwilck@suse.com" date="1674043200">- Fix "rpm --verify" (bsc#1207232)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 0.9.4+68+suse.98559ea:
  * libmultipath: bump ABI version to 18.0.0
  * libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
    (gh#opensvc/multipath-tools#56)
  * libmpathpersist: use conf-&gt;timeout for updating persistent reservations
    (gh#opensvc/multipath-tools#45)
  * libmultipath: is_path_valid(): check if device is in use
    (bsc#1203141) (added libmount dependency)
  * libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
  * multipathd: handle no active paths in update_map_pr (bsc#1207546)
  * multipathd: make pr registration consistent (bsc#1207546)
  * libmultipath: don't leak memory on invalid strings  (bsc#1207546)
  * multipath.conf(5): improve documentation of dev_loss_tmo (bsc#1207546)
  * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
  * libmultipath: fix 'show paths format' failure
  * minor bugfixes
  * hwtable fixes
  * Build system rework
  * spec file: adapt make command line to changes in build system
  * spec file: use make -Orecurse (better readable output)
  * spec file: use verbose build</changelog>
  <changelog author="mwilck@suse.com" date="1679486400">- Update to version 0.9.4+71+suse.c648a77:
  * libmultipath: avoid grouping paths wrongly with "find_multipaths smart"
    (bsc#1209623)
  * fix multipath-tools build with liburcu 0.14.0</changelog>
  <changelog author="mwilck@suse.com" date="1688472000">- Update to version 0.9.4+73+suse.a5414a6:
  * libmultipath: ignore nvme devices if nvme native multipath is enabled
    (bsc#1212854)
  * libmultipath: fix dev_loss_tmo even if not set in configuration
    (bsc#1212440)
    Note: this changes user-visible behavior. multipathd will not
    grab any nvme devices for dm-multipath if nvme native multipathing
    is on (which is the default on SLE and openSUSE).</changelog>
  <changelog author="mwilck@suse.com" date="1704456000">- Update to version 0.9.4+77+suse.1f7a63b:
  * fix ANA prioritizer enablement logic (bsc#1218326)</changelog>
</package>
<package pkgid="32969686217f82d8f85f149f69045a4cff38fd6f7ddec9ee9f6c01d210be877f" name="multipath-tools" arch="src">
  <version epoch="0" ver="0.9.4+77+suse.1f7a63b" rel="150500.3.6.1"/>
  <changelog author="mwilck@suse.com" date="1644926400">- Update to version 0.8.8+60+suse.4c5922cb:
  * multipathd: add suppport for FC Fabric Performance Impact
    Notifications (FPIN) (bsc#1195506)</changelog>
  <changelog author="mwilck@suse.com" date="1645012800">- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus</changelog>
  <changelog author="mwilck@suse.com" date="1648468800">- If multipath-tools is newly installed, load dm-multipath
  (bsc#1196898)</changelog>
  <changelog author="mwilck@suse.com" date="1649937600">- Update to version 0.8.9+42+suse.45974f11:
  * Logging improvements
  * Fix busy loop with delayed_reconfigure (bsc#1199342)
  * multipathd: use remove_map_callback for delayed reconfigure
  * multipathd: Don't keep starting TUR threads, if they always hang.
    (bsc#1199345)
  * Fix handling of path addition in read-only arrays on NVMe
  * Updates of built-in hardware database
- Update to upstream 0.8.9
  * libmultipath: only warn once about unsupported dev_loss_tmo
  * Otherwise code-identical to 0.8.8+64</changelog>
  <changelog author="mwilck@suse.com" date="1652097600">- Update to version 0.8.9+85+suse.a9da21c:
  * This is a pre-release of multipath-tools 0.9.0
  * multipath.conf: add "protocol" subsection in "overrides" section
    This allows to set "dev_loss_tmo", "fast_io_fail_tmo", and
    "eh_deadline" on a per-protocol basis rather than per storage
  * multipath.conf: drop support for deprecated options:
    getuid_callout, pg_timeout, config_dir, multipath_dir
  * multipathd: don't switch to DAEMON_IDLE during startup
  (bsc#1199346, bsc#1197570)
  * multipathd: avoid delays during uevent processing (bsc#1199347)
  * Fixes for minor issues reported by coverity
  * Fix for memory leak with uid_attrs
  * Fix possibility to redefine -D_FORTIFY_SOURCE macro.
  * Updates for built in hardware db</changelog>
  <changelog author="mwilck@suse.com" date="1652184000">- Update to version 0.8.9+87+suse.a1eb122:
  * add ability to autodetect support for -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1652270400">- Update to version 0.8.9+90+suse.71a70fb:
  * support overriding -D_FORTIFY_SOURCE in OPTFLAGS
  * add -U_FORTIFY_SOURCE to optflags to avoid compilation errors
    on old distros</changelog>
  <changelog author="mwilck@suse.com" date="1657713600">- Update to version 0.9.0+33+suse.fdc6686
  * multipath.conf: add support for "protocol" subsection in
    "overrides" section to set certain config options by protocol.
  * Removed the previously deprecated options getuid_callout,
    config_dir, multipath_dir, pg_timeout
  * hwable fixes and additions
  * multipath.conf(5): add disclaimer about vendor support
  * libmultipath, kpartx: fix callers of dm_get_next_target()
  * Change built-in defaults for NVMe: group by prio, and immediate
    failback
  * Allow compilation with -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1657713601">- Update to version 0.9.0+39+suse.51a2ab1:
  Upstream bug fixes:
  * libmultipath: fix find_multipaths_timeout for unknown hardware
  (boo#1201483)
  * multipath-tools: fix "multipath -ll" for Native NVME Multipath devices
  (boo#1201483)</changelog>
  <changelog author="mwilck@suse.com" date="1661342400">- Update to version 0.9.0+55+suse.33d8854:
  * Avoid linking to libreadline to avoid licensing issue
    (bsc#1202616)</changelog>
  <changelog author="mwilck@suse.com" date="1662206400">- Update to version 0.9.0+134+suse.dbf2e2d:
  * Add multipathc command under GPL3.0, and split off libmpathutil
    (bsc#1202616)
  * Fix command completion in interactive mode (bsc#1201483)
  * multipathd: fix use-after-free in handle_path_wwid_change()
    (bsc#1201483)
  * Improve startup time for very large multipath.conf (bsc#1200523)
  * Avoid checker blocking event handling for huge number of devices
    (boo#1203085)
  * Cleanup sysfs accessors in libmultipath
  * Minor upstream bug fixes
  * Spelling fixes
  * Documentation: add ALUA info to README.md, delete README.alua</changelog>
  <changelog author="mwilck@suse.com" date="1662552000">- Update to version 0.9.1+48+suse.9c6c435:
  * Upstream version update
  * kpartx_id: remove bashism
  * Doc: add multipathc.8 manual page</changelog>
  <changelog author="mwilck@suse.com" date="1662724800">- Update to version 0.9.1+52+suse.be8809e:
  * Code-identical to 0.9.1+48+suse.9c6c435 (merge in git repo
    to preserve history; fix revision in _service file).</changelog>
  <changelog author="mwilck@suse.com" date="1666612800">- Update to version 0.9.2+57+suse.cf3c1e9:
  * Fix multipathd authorization bypass and symlink attack
    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
  * add multipath-dracut.conf: dracut config file to install
    tmpfiles.d/multipath.conf in initramfs
  * Use "queue_mode bio" for NVMeoF/TCP devices
  * Upstream bug fixes and hwtable updates
- Drop recompress.service, it just slows down build</changelog>
  <changelog author="mwilck@suse.com" date="1666785600">- Update to version 0.9.2+59+suse.ac8942d:
  * Fix segfault in "multipath -t" command (boo#1204731)</changelog>
  <changelog author="mwilck@suse.com" date="1674043200">- Fix "rpm --verify" (bsc#1207232)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 0.9.4+68+suse.98559ea:
  * libmultipath: bump ABI version to 18.0.0
  * libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
    (gh#opensvc/multipath-tools#56)
  * libmpathpersist: use conf-&gt;timeout for updating persistent reservations
    (gh#opensvc/multipath-tools#45)
  * libmultipath: is_path_valid(): check if device is in use
    (bsc#1203141) (added libmount dependency)
  * libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
  * multipathd: handle no active paths in update_map_pr (bsc#1207546)
  * multipathd: make pr registration consistent (bsc#1207546)
  * libmultipath: don't leak memory on invalid strings  (bsc#1207546)
  * multipath.conf(5): improve documentation of dev_loss_tmo (bsc#1207546)
  * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
  * libmultipath: fix 'show paths format' failure
  * minor bugfixes
  * hwtable fixes
  * Build system rework
  * spec file: adapt make command line to changes in build system
  * spec file: use make -Orecurse (better readable output)
  * spec file: use verbose build</changelog>
  <changelog author="mwilck@suse.com" date="1679486400">- Update to version 0.9.4+71+suse.c648a77:
  * libmultipath: avoid grouping paths wrongly with "find_multipaths smart"
    (bsc#1209623)
  * fix multipath-tools build with liburcu 0.14.0</changelog>
  <changelog author="mwilck@suse.com" date="1688472000">- Update to version 0.9.4+73+suse.a5414a6:
  * libmultipath: ignore nvme devices if nvme native multipath is enabled
    (bsc#1212854)
  * libmultipath: fix dev_loss_tmo even if not set in configuration
    (bsc#1212440)
    Note: this changes user-visible behavior. multipathd will not
    grab any nvme devices for dm-multipath if nvme native multipathing
    is on (which is the default on SLE and openSUSE).</changelog>
  <changelog author="mwilck@suse.com" date="1704456000">- Update to version 0.9.4+77+suse.1f7a63b:
  * fix ANA prioritizer enablement logic (bsc#1218326)</changelog>
</package>
<package pkgid="b2e62bbca21bf8d2894108059cae93ea8ce4d35ce32b03af065d4928b9915bc3" name="multipath-tools" arch="x86_64">
  <version epoch="0" ver="0.9.4+77+suse.1f7a63b" rel="150500.3.6.1"/>
  <changelog author="mwilck@suse.com" date="1644926400">- Update to version 0.8.8+60+suse.4c5922cb:
  * multipathd: add suppport for FC Fabric Performance Impact
    Notifications (FPIN) (bsc#1195506)</changelog>
  <changelog author="mwilck@suse.com" date="1645012800">- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus</changelog>
  <changelog author="mwilck@suse.com" date="1648468800">- If multipath-tools is newly installed, load dm-multipath
  (bsc#1196898)</changelog>
  <changelog author="mwilck@suse.com" date="1649937600">- Update to version 0.8.9+42+suse.45974f11:
  * Logging improvements
  * Fix busy loop with delayed_reconfigure (bsc#1199342)
  * multipathd: use remove_map_callback for delayed reconfigure
  * multipathd: Don't keep starting TUR threads, if they always hang.
    (bsc#1199345)
  * Fix handling of path addition in read-only arrays on NVMe
  * Updates of built-in hardware database
- Update to upstream 0.8.9
  * libmultipath: only warn once about unsupported dev_loss_tmo
  * Otherwise code-identical to 0.8.8+64</changelog>
  <changelog author="mwilck@suse.com" date="1652097600">- Update to version 0.8.9+85+suse.a9da21c:
  * This is a pre-release of multipath-tools 0.9.0
  * multipath.conf: add "protocol" subsection in "overrides" section
    This allows to set "dev_loss_tmo", "fast_io_fail_tmo", and
    "eh_deadline" on a per-protocol basis rather than per storage
  * multipath.conf: drop support for deprecated options:
    getuid_callout, pg_timeout, config_dir, multipath_dir
  * multipathd: don't switch to DAEMON_IDLE during startup
  (bsc#1199346, bsc#1197570)
  * multipathd: avoid delays during uevent processing (bsc#1199347)
  * Fixes for minor issues reported by coverity
  * Fix for memory leak with uid_attrs
  * Fix possibility to redefine -D_FORTIFY_SOURCE macro.
  * Updates for built in hardware db</changelog>
  <changelog author="mwilck@suse.com" date="1652184000">- Update to version 0.8.9+87+suse.a1eb122:
  * add ability to autodetect support for -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1652270400">- Update to version 0.8.9+90+suse.71a70fb:
  * support overriding -D_FORTIFY_SOURCE in OPTFLAGS
  * add -U_FORTIFY_SOURCE to optflags to avoid compilation errors
    on old distros</changelog>
  <changelog author="mwilck@suse.com" date="1657713600">- Update to version 0.9.0+33+suse.fdc6686
  * multipath.conf: add support for "protocol" subsection in
    "overrides" section to set certain config options by protocol.
  * Removed the previously deprecated options getuid_callout,
    config_dir, multipath_dir, pg_timeout
  * hwable fixes and additions
  * multipath.conf(5): add disclaimer about vendor support
  * libmultipath, kpartx: fix callers of dm_get_next_target()
  * Change built-in defaults for NVMe: group by prio, and immediate
    failback
  * Allow compilation with -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1657713601">- Update to version 0.9.0+39+suse.51a2ab1:
  Upstream bug fixes:
  * libmultipath: fix find_multipaths_timeout for unknown hardware
  (boo#1201483)
  * multipath-tools: fix "multipath -ll" for Native NVME Multipath devices
  (boo#1201483)</changelog>
  <changelog author="mwilck@suse.com" date="1661342400">- Update to version 0.9.0+55+suse.33d8854:
  * Avoid linking to libreadline to avoid licensing issue
    (bsc#1202616)</changelog>
  <changelog author="mwilck@suse.com" date="1662206400">- Update to version 0.9.0+134+suse.dbf2e2d:
  * Add multipathc command under GPL3.0, and split off libmpathutil
    (bsc#1202616)
  * Fix command completion in interactive mode (bsc#1201483)
  * multipathd: fix use-after-free in handle_path_wwid_change()
    (bsc#1201483)
  * Improve startup time for very large multipath.conf (bsc#1200523)
  * Avoid checker blocking event handling for huge number of devices
    (boo#1203085)
  * Cleanup sysfs accessors in libmultipath
  * Minor upstream bug fixes
  * Spelling fixes
  * Documentation: add ALUA info to README.md, delete README.alua</changelog>
  <changelog author="mwilck@suse.com" date="1662552000">- Update to version 0.9.1+48+suse.9c6c435:
  * Upstream version update
  * kpartx_id: remove bashism
  * Doc: add multipathc.8 manual page</changelog>
  <changelog author="mwilck@suse.com" date="1662724800">- Update to version 0.9.1+52+suse.be8809e:
  * Code-identical to 0.9.1+48+suse.9c6c435 (merge in git repo
    to preserve history; fix revision in _service file).</changelog>
  <changelog author="mwilck@suse.com" date="1666612800">- Update to version 0.9.2+57+suse.cf3c1e9:
  * Fix multipathd authorization bypass and symlink attack
    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
  * add multipath-dracut.conf: dracut config file to install
    tmpfiles.d/multipath.conf in initramfs
  * Use "queue_mode bio" for NVMeoF/TCP devices
  * Upstream bug fixes and hwtable updates
- Drop recompress.service, it just slows down build</changelog>
  <changelog author="mwilck@suse.com" date="1666785600">- Update to version 0.9.2+59+suse.ac8942d:
  * Fix segfault in "multipath -t" command (boo#1204731)</changelog>
  <changelog author="mwilck@suse.com" date="1674043200">- Fix "rpm --verify" (bsc#1207232)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 0.9.4+68+suse.98559ea:
  * libmultipath: bump ABI version to 18.0.0
  * libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
    (gh#opensvc/multipath-tools#56)
  * libmpathpersist: use conf-&gt;timeout for updating persistent reservations
    (gh#opensvc/multipath-tools#45)
  * libmultipath: is_path_valid(): check if device is in use
    (bsc#1203141) (added libmount dependency)
  * libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
  * multipathd: handle no active paths in update_map_pr (bsc#1207546)
  * multipathd: make pr registration consistent (bsc#1207546)
  * libmultipath: don't leak memory on invalid strings  (bsc#1207546)
  * multipath.conf(5): improve documentation of dev_loss_tmo (bsc#1207546)
  * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
  * libmultipath: fix 'show paths format' failure
  * minor bugfixes
  * hwtable fixes
  * Build system rework
  * spec file: adapt make command line to changes in build system
  * spec file: use make -Orecurse (better readable output)
  * spec file: use verbose build</changelog>
  <changelog author="mwilck@suse.com" date="1679486400">- Update to version 0.9.4+71+suse.c648a77:
  * libmultipath: avoid grouping paths wrongly with "find_multipaths smart"
    (bsc#1209623)
  * fix multipath-tools build with liburcu 0.14.0</changelog>
  <changelog author="mwilck@suse.com" date="1688472000">- Update to version 0.9.4+73+suse.a5414a6:
  * libmultipath: ignore nvme devices if nvme native multipath is enabled
    (bsc#1212854)
  * libmultipath: fix dev_loss_tmo even if not set in configuration
    (bsc#1212440)
    Note: this changes user-visible behavior. multipathd will not
    grab any nvme devices for dm-multipath if nvme native multipathing
    is on (which is the default on SLE and openSUSE).</changelog>
  <changelog author="mwilck@suse.com" date="1704456000">- Update to version 0.9.4+77+suse.1f7a63b:
  * fix ANA prioritizer enablement logic (bsc#1218326)</changelog>
</package>
<package pkgid="f1f1364c29e2dcc1c937e595c481bbfe774d04ee26a5235d91b131a4cbc603ae" name="ncurses" arch="src">
  <version epoch="0" ver="6.1" rel="150000.5.20.1"/>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()</changelog>
</package>
<package pkgid="ddbf5732e42476eda86f5f60eb74d830710fb51d59700269c45dfb8bc658257e" name="ncurses" arch="src">
  <version epoch="0" ver="6.1" rel="150000.5.24.1"/>
  <changelog author="werner@suse.de" date="1517313600">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()
    (bsc#1218014)</changelog>
  <changelog author="werner@suse.de" date="1708344000">- Add patch ncurses-6.1-bsc1220061.patch (bsc#1220061, CVE-2023-45918)
  * Backport from ncurses-6.4-20230615.patch
    improve checks in convert_string() for corrupt terminfo entry</changelog>
</package>
<package pkgid="ac6b5c74af595ad9574537bf9faf099b818bfe49b373c70df5c759c77b931709" name="ncurses-utils" arch="aarch64">
  <version epoch="0" ver="6.1" rel="150000.5.20.1"/>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()</changelog>
</package>
<package pkgid="0ba032772d126efbe854da109a007d5fd98a439f2ae17b0c59d86dda63b03ed2" name="ncurses-utils" arch="s390x">
  <version epoch="0" ver="6.1" rel="150000.5.20.1"/>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()</changelog>
</package>
<package pkgid="eeb9c73ea845c95a76025a8bb6c086d1fbd2bc224543ede9549e4c89a71d17bf" name="ncurses-utils" arch="x86_64">
  <version epoch="0" ver="6.1" rel="150000.5.20.1"/>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()</changelog>
</package>
<package pkgid="1a92a428f0da86a6fa178efa8fc29134e0f1552f2c5dfe5b1eadf3d588487886" name="ncurses-utils" arch="aarch64">
  <version epoch="0" ver="6.1" rel="150000.5.24.1"/>
  <changelog author="werner@suse.de" date="1517313600">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()
    (bsc#1218014)</changelog>
  <changelog author="werner@suse.de" date="1708344000">- Add patch ncurses-6.1-bsc1220061.patch (bsc#1220061, CVE-2023-45918)
  * Backport from ncurses-6.4-20230615.patch
    improve checks in convert_string() for corrupt terminfo entry</changelog>
</package>
<package pkgid="37544ccae50a533a1bed40e4adc6c387e4b42ebac9712b1902e631d753259d92" name="ncurses-utils" arch="s390x">
  <version epoch="0" ver="6.1" rel="150000.5.24.1"/>
  <changelog author="werner@suse.de" date="1517313600">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()
    (bsc#1218014)</changelog>
  <changelog author="werner@suse.de" date="1708344000">- Add patch ncurses-6.1-bsc1220061.patch (bsc#1220061, CVE-2023-45918)
  * Backport from ncurses-6.4-20230615.patch
    improve checks in convert_string() for corrupt terminfo entry</changelog>
</package>
<package pkgid="3d0498a5005f2198a1a3aee77c3366d59daf7147803ea6fc69f57f7eaa6a45e7" name="ncurses-utils" arch="x86_64">
  <version epoch="0" ver="6.1" rel="150000.5.24.1"/>
  <changelog author="werner@suse.de" date="1517313600">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()
    (bsc#1218014)</changelog>
  <changelog author="werner@suse.de" date="1708344000">- Add patch ncurses-6.1-bsc1220061.patch (bsc#1220061, CVE-2023-45918)
  * Backport from ncurses-6.4-20230615.patch
    improve checks in convert_string() for corrupt terminfo entry</changelog>
</package>
<package pkgid="1b56b7810bf06f0cbb0e01098bcc57ad5877890d43fcc977422eaff2a4435938" name="net-snmp" arch="src">
  <version epoch="0" ver="5.9.4" rel="150300.15.11.1"/>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Add net-snmp-5.7.3-modern-rpm-api.patch: Supprt modern RPM (&gt;=
  4.6) API. In RPM 4.14, the RPM 4.4 compatibility APIs are being
  removed.</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Format with spec-cleaner
- Drop sle11 support as it fails to build anyway for ages
- Rename python packages to be python-%{name} with obsoletes
  * Use new singlespec macros
  * Add patch converting the py files to python3/2 compat mode
    net-snmp-python3.patch
- Run full autoreconf instead of partial
- Build with threads by building few targets first</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Take systemd service files from fedora to replace sysV scripts
- Also convert the sysconfig files to match fedora ones, they
  get bit more terse but it works seamlessly with systemd</changelog>
  <changelog author="tchvatal@suse.com" date="1516795200">- Add patch from Fedora to support natively systemd:
  * net-snmp-5.7.2-systemd.patch
- Drop the check phase as whole 90% of the tests fail it makes
  more sense to run them somewhere localy</changelog>
  <changelog author="tchvatal@suse.com" date="1516795201">- Properly conditionalize the py2 build</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Fix RPM group for shlib subpackage.</changelog>
  <changelog author="abergmann@suse.com" date="1523880000">- Remove executable flags from systemd service files (bsc#1089295).</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Fix permissions on unit files wrt bsc#1087977
- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1529323200">- Create /var/agentx via systemd tmpfiles in case of rollback,
  snapshots and transactional updates [bsc#1098032]</changelog>
  <changelog author="abergmann@suse.com" date="1539086400">- Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065)
  Add net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
- swintst_rpm: Protect against unspecified Group name (bsc#1102775)
  Add net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
- Add tsm and tlstm MIBs and the USM security module. (bsc#1081164)
- Fix agentx freezing on timeout (bsc#1027353)
  Add net-snmp-fix-agentx-freezing-on-timeout.patch</changelog>
  <changelog author="abergmann@suse.com" date="1562328000">- Add Lustre filesystem support (bsc#1140341, jsc#SLE-6120).
  Add net-snmp-5.7.3-add-lustre-fs-support.patch
- Add info about the original agent which triggered the trap.
  When the trap is forwarded there was no info about the original
  agent (bsc#1116807).
  Add net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
- Fix missing sysconfig files creation (bsc#1108471).</changelog>
  <changelog author="abergmann@suse.com" date="1639742400">- Make extended MIB read-only (bsc#1174961, CVE-2020-15862).
  Add net-snmp-5.7.3-make-extended-mib-read-only.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640001600">- Fix output for high memTotalReal RAM values (bsc#1152968).
  Add net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640174400">- Fix hrStorage autofs objects timeout problems (bsc#1179699, bsc#1145864).
  Add net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  Add net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
- Fix NSS mounted volumes in hrStorageDescr (bsc#1100146).
  Add net-snmp-5.7.3-recognize-nss-pools-and-nss-volumes-oes.patch
- Fix subagent crash at save_set_var() (bsc#1178021).
  Add net-snmp-5.7.3-subagent-set-response.patch
- Fix subagent data corruption (bsc#1178351, bsc#1179009).
  Add net-snmp-5.7.3-fix-subagent-data-corruption.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640260800">- Fix LFH violation during v3 user creation (bsc#1181591).
  Add net-snmp-5.7.3-fix-create-v3-user-outfile.patch</changelog>
  <changelog author="abergmann@suse.com" date="1646827200">- Decouple snmp-mibs from net-snmp version to allow major version
  upgrade (bsc#1196955).</changelog>
  <changelog author="abergmann@suse.com" date="1665057600">- update to 5.9.3 (bsc#1201103, jsc#SLE-11203):
  - security:
  - These two CVEs can be exploited by a user with read-only credentials:
  - CVE-2022-24805 A buffer overflow in the handling of the INDEX of
    NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
  - CVE-2022-24809 A malformed OID in a GET-NEXT to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - These CVEs can be exploited by a user with read-write credentials:
  - CVE-2022-24806 Improper Input Validation when SETing malformed
    OIDs in master agent and subagent simultaneously
  - CVE-2022-24807 A malformed OID in a SET request to
    SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an
    out-of-bounds memory access.
  - CVE-2022-24808 A malformed OID in a SET request to
    NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
  - CVE-2022-24810 A malformed OID in a SET to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - Fixed library versioning bug found in 5.9.2.
  - Library version change to libsnmp40.
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Fixed python2 backward compability.
  add:
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Change to use systemd service files directly from net-snmp package.
  add:
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch
  remove:
  * snmpd.service
  * snmptrapd.service
  * harden_snmpd.service.patch
  * harden_snmptrapd.service.patch
- Refactor and remove obsolete patches to work with version number 5.9.3:
  add:
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  remove:
  * net-snmp-5.9.1-pie.patch
  * net-snmp-5.9.1-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-add-lustre-fs-support.patch
  * net-snmp-5.7.3-Fix-Makefile.PL.patch
  * net-snmp-5.7.3-modern-rpm-api.patch
  * net-snmp-5.7.3-net-snmp-config-headercheck.patch
  * net-snmp-5.7.3-perl-tk-warning.patch
  * net-snmp-5.7.3-snmpstatus-suppress-output.patch
  * net-snmp-5.7.3-socket-path.patch
  * net-snmp-5.7.3-subagent-set-response.patch
  * net-snmp-5.7.3-testing-empty-arptable.patch
  * net-snmp-5.7.3-velocity-mib.patch
  * net-snmp-5.7.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-pie.patch
  * net-snmp-4.7.2-systemd.patch
  * net-snmp-5.7.3-build-with-openssl-1.1.patch
  * net-snmp-5.7.3-fix-agentx-freezing-on-timeout.patch
  * net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
  * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch
  * net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch
  * net-snmp-5.7.3-fix-subagent-data-corruption.patch
  * net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
  * net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  * net-snmp-5.7.3-make-extended-mib-read-only.patch
  * net-snmp-5.7.3-netgroups.patch
  * net-snmp-5.7.3-Remove-U64-typedef.patch
  * net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
  * net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
  * net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch
  * net-snmp-python3.patch</changelog>
  <changelog author="abergmann@suse.com" date="1672920000">- Fixed NULL pointer exception issue when handling ipDefaultTTL or
  pv6IpForwarding (bsc#1205148, CVE-2022-44793, bsc#1205150, CVE-2022-44792).
  add:
  * net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch
- Enable AES-192 and AES-256 privacy protocol (bsc#1206828).</changelog>
  <changelog author="abergmann@suse.com" date="1673265600">- Hardening systemd services setting "ProtectHome=true" caused home directory
  size and allocation to be listed incorrectly (bsc#1206044).
  add:
  * net-snmp-5.9.3-harden_snmpd.service.patch
  * net-snmp-5.9.3-harden_snmptrapd.service.patch
  delete:
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch</changelog>
  <changelog author="abergmann@suse.com" date="1697544000">- Update to net-snmp-5.9.4 (bsc#1214364).
  add (rename):
  * net-snmp-5.9.4-add-lustre-fs-support.patch
  * net-snmp-5.9.4-add-netgroups-functionality.patch
  * net-snmp-5.9.4-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.4-fixed-python2-bindings.patch
  * net-snmp-5.9.4-fix-Makefile.PL.patch
  * net-snmp-5.9.4-modern-rpm-api.patch
  * net-snmp-5.9.4-net-snmp-config-headercheck.patch
  * net-snmp-5.9.4-perl-tk-warning.patch
  * net-snmp-5.9.4-pie.patch
  * net-snmp-5.9.4-snmpstatus-suppress-output.patch
  * net-snmp-5.9.4-socket-path.patch
  * net-snmp-5.9.4-subagent-set-response.patch
  * net-snmp-5.9.4-suse-systemd-service-files.patch
  * net-snmp-5.9.4-testing-empty-arptable.patch
  delete (now part of v5.9.4):
  * net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch
  delete (rename):
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Removing legacy MIBs used by Velocity Software (jira#PED-6416).
- Re-add support for hostname netgroups that was removed accidentally and
  previously added with FATE#316305 (bsc#1207697).
  '@hostgroup' can be specified for multiple hosts
- Hardening systemd services setting "ProtectHome=true" caused home directory
  size and allocation to be listed incorrectly (bsc#1206044).
  add (rename):
  * net-snmp-5.9.4-harden_snmpd.service.patch
  * net-snmp-5.9.4-harden_snmptrapd.service.patch
  delete (rename):
  * net-snmp-5.9.3-harden_snmpd.service.patch
  * net-snmp-5.9.3-harden_snmptrapd.service.patch</changelog>
</package>
<package pkgid="3fd10195147e9f41ccea7ebc5c821ea3aaf3c9026efeebad730a6edb8d8ce7b2" name="netavark" arch="aarch64">
  <version epoch="0" ver="1.10.2" rel="150500.3.3.3"/>
  <changelog author="dcermak@suse.com" date="1676030400">- First version of netavark</changelog>
  <changelog author="dcermak@suse.com" date="1678968000">- Bump required rust version &amp; fix libexecdir</changelog>
  <changelog author="danish.prakash@suse.com" date="1681300800">- Update to version 1.6.0:
  * v1.6.0 release
  * Update release notes for v1.6.0
  * dhcp-proxy: fix typo for --activity-timeout
  * chore(deps): update dependency containers/automation_images to v20230405
  * dhcp-proxy: use better error when connection fails
  * add documentation for netavark plugins
  * add stderr example plugin to test stderr passthrough
  * add netavark plugin driver
  * add example error plugin
  * add host-device example plugin
  * plugin: add simple plugin interface
  * netlink: add dump_addresses
  * netlink: add set_link_ns
  * dhcp-proxy: correctly exit &gt; 0 on errors
  * fix(deps): update rust crate tonic to 0.9
  * fix(deps): update rust crate mozim to 0.2.2
  * fix(deps): update rust crate serde to 1.0.159
  * fix(deps): update rust crate netlink-sys to 0.8.5
  * dhcp-proxy: create socket directory only when used
  * dhcp-proxy: do not remove socket when running under systemd
  * Makefile: netavark-dhcp-proxy.service use correct path
  * fix(deps): update rust crate http to 0.2.9
  * chore(deps): update rust crate once_cell to 1.17.1
  * fix(deps): update rust-futures monorepo to 0.3.28
  * fix(deps): update rust crate serde_json to 1.0.95
  * chore(deps): update dependency containers/automation_images to v20230330
  * Disable Dependabot in favor of Renovate
  * chore(deps): update rust crate chrono to 0.4.24
  * build(deps): bump ipnet from 2.7.1 to 2.7.2
  * build(deps): bump serde from 1.0.158 to 1.0.159
  * build(deps): bump serde_json from 1.0.94 to 1.0.95
  * update,main: dont write empty space when no network_dns_servers is given
  * fix(deps): update rust crate tokio to 1.27
  * Quit Leasing when Client disconnects
  * build(deps): bump mozim from 0.2.1 to 0.2.2
  * iptables: fix incorrect debug statement
  * build(deps): bump serde from 1.0.156 to 1.0.158
  * iptables: port fw handle wildcard address correctly
  * chore(deps): update dependency containers/automation_images to v20230320
  * build(deps): bump zbus from 3.11.0 to 3.11.1
  * build(deps): bump anyhow from 1.0.69 to 1.0.70
  * [CI:BUILD] Packit: trigger builds on commit to main branch
  * Cirrus: Invalidate v2 bin cache
  * Include Systemd Files in RPM Package
  * Cirrus: Fix success failing on artifact extraction
  * fix lint issue with new rust version 1.68
  * Cirrus: Update to newer CI VM images
  * build(deps): bump serde from 1.0.152 to 1.0.156
  * combine dhcp-proxy and netavark into one binary
  * update: should allow empty network_dns_servers
  * build(deps): bump libc from 0.2.139 to 0.2.140
  * fix aarch64 ncat flake
  * update to mozim 0.2.1
  * build(deps): bump zbus from 3.10.0 to 3.11.0
  * packit: Update build release tag correctly
  * test: move proto option into run_nc_test()
  * test: add netns pid param to port checks
  * test: import podman code to check for ports
  * cirrus.yaml: add new binaries in art_prep_script
  * fix netavark-dhcp-proxy binary in system unit
  * import netavark-proxy-dhcp tests
  * add build_proxy_client target
  * add netavark-dhcp-proxy to rpm
  * Fix dhcp-proxy build
  * Merge nv-dhcp-proxy into nv
  * fix default route metric test name
  * build(deps): bump tokio from 1.25.0 to 1.26.0
  * Support none parameter on NETAVARK_FW
  * build(deps): bump anyhow from 1.0.68 to 1.0.69
  * Fix typos
  * update netlink-packet-{route,core} to 0.15 and 0.5
  * build(deps): bump serde_json from 1.0.92 to 1.0.93
  * build(deps): bump zbus from 3.8.0 to 3.10.0
  * [CI:BUILD] Packit: initial enablement
  * Allow custom cargo binary path
  * build(deps): bump serde_json from 1.0.91 to 1.0.92
  * Cirrus: Reduce requested CPUs for compile-tasks
  * bump to version 1.0.6-dev
  * build(deps): bump netlink-sys from 0.8.3 to 0.8.4
  * Add renovate.json5</changelog>
  <changelog author="danish.prakash@suse.com" date="1687521600">- Add aardvark-dns as Requires for netavark</changelog>
  <changelog author="danish.prakash@suse.com" date="1688385600">- Update to version 1.7.0:
  * release v1.7.0
  * Update release notes for v1.7.0
  * fix(deps): update rust crate tokio to 1.29
  * netavark: make --config required for dns
  * fix(deps): update rust crate serde_json to 1.0.99
  * fix(deps): update rust crate clap to 4.3.8
  * [CI:BUILD] Packit: add Fedora downstream tasks
  * run cargo update
  * fix(deps): update rust crate serde_json to 1.0.97
  * fix(deps): update rust crate sha2 to 0.10.7
  * fix(deps): update rust crate clap to 4.3.4
  * chore(deps): update dependency containers/automation_images to v20230614
  * fix(deps): update rust crate clap to 4.3.3
  * fix(deps): update rust crate log to 0.4.19
  * aardvark: fix missleading dns disabled log
  * firewall: add NETAVARK_ISOLATION_3 chain for strict isolation
  * docs: fix link to getting started
  * fix(deps): update rust crate serde to 1.0.164
  * netlink: fix incorrect info log for del_route
  * dhcp-proxy: apply new ip address/gateway
  * test-dhcp: fix broekn has_ip() check
  * dhcp-proxy: actually implement renewing leases
  * dhcp-proxy: simplify code
  * dhcp-proxy: drop macaddr dependency
  * dhcp-proxy: remove some unused traits
  * fix(deps): update rust crate zbus to 3.13.1
  * fix(deps): update rust crate clap to 4.3.2
  * chore(deps): update rust crate once_cell to 1.18.0
  * fix(deps): update rust crate url to 2.4.0
  * fix(deps): update rust crate clap to 4.3.1
  * chore(deps): update dependency containers/automation_images to v20230601
  * chore(deps): update rust crate chrono to 0.4.26
  * chore(deps): update rust crate chrono to 0.4.25
  * fix(deps): update rust crate log to 0.4.18
  * chore(deps): update rust crate once_cell to 1.17.2
  * macvlan: add bclim option
  * parse_option(): return option instead of default
  * add no_default_gateway option
  * fix(deps): update rust crate clap to 4.3.0
  * chore(deps): update dependency containers/automation_images to v20230517
  * fix(deps): update rust crate serde to 1.0.163
  * Add ability to add static route
  * fix(deps): update rust crate serde to 1.0.162
  * Cirrus: Update fedora name to match image
  * fix(deps): update rust crate clap to 4.2.7
  * chore(deps): update dependency containers/automation_images to v20230426
  * correct typo in Makefile
  * simplify path printing
  * fix(deps): update rust crate tokio to 1.28
  * aardvark-dns pid: return better errors
  * fix comment in Subnet definition
  * aardvark: no error when aardvark config is not there
  * fix(deps): update rust crate zbus to 3.12.0
  * fix(deps): update rust crate clap to 4.2.4
  * fix(deps): update rust crate clap to 4.2.2
  * fix(deps): update rust crate serde_json to 1.0.96
  * update clap to v4
  * fix(deps): update rust crate serde to 1.0.160
  * bump to v1.7.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1689076800">- Disable restricting builds only for tier1 platforms
  i.e. only for x86_64 and aarch64 and enable for all.</changelog>
  <changelog author="danish.prakash@suse.com" date="1695902400">- Update to version 1.8.0:
  * Release v1.8.0
  * update release notes for v1.8.0
  * run cargo update
  * Add vrf support for bridges
  * Packit: switch to @containers/packit-build team for copr failure notification comments
  * fix(deps): update rust crate nispor to 1.2.14
  * [CI:BUILD] Packit: tag @lsm5 on copr build failures
  * chore(deps): update rust crate chrono to 0.4.31
  * fix(deps): update rust crate serde_json to 1.0.107
  * rust io safety: convert RawFd to BorrowedFd&lt;&gt;
  * bump nix to 0.27.1
  * chore(deps): update rust crate chrono to 0.4.30
  * fix(deps): update rust crate serde_json to 1.0.106
  * chore(deps): update rust crate chrono to 0.4.29
  * fix(deps): update rust crate netlink-packet-route to 0.17.1
  * Bump tonic and prost
  * Update container image to F38
  * Add ACCEPT rules in firewall for bridge network with internal dns.
  * chore(deps): update rust crate tonic-build to 0.10
  * fix(deps): update rust crate nispor to 1.2.13
  * fix(deps): update rust crate serde to 1.0.188
  * Fix clippy warnings about formatting
  * update chrono crate
  * fix(deps): update rust crate url to 2.4.1
  * Add protoc dependency to README
  * [CI:BUILD] rpm: spdx compatible license field
  * fix(deps): update rust crate tokio to 1.32
  * chore(deps): update dependency containers/automation_images to v20230816
  * fix(deps): update rust crate serde_json to 1.0.105
  * fix(deps): update rust crate tokio to 1.31
  * fix(deps): update rust crate log to 0.4.20
  * run cargo update
  * update tonic-build to 0.9.2
  * bump rust edition to 2021
  * iptables: drop invalid packages
  * fix(deps): update rust crate tokio to 1.30
  * docs: Convert markdown with go-md2man instead of mandown
  * fix(deps): update rust crate clap to 4.3.21
  * packit: Build PRs into default packit COPRs
  * chore(deps): update dependency containers/automation_images to v20230807
  * fix(deps): update rust crate serde to 1.0.183
  * fix(deps): update rust crate serde to 1.0.181
  * fix(deps): update rust crate serde to 1.0.180
  * fix(deps): update rust crate serde_json to 1.0.104
  * fix(deps): update rust crate serde to 1.0.179
  * fix(deps): update rust crate serde to 1.0.176
  * fix(deps): update rust crate clap to 4.3.19
  * fix(deps): update rust crate serde to 1.0.175
  * fix(deps): update rust crate clap to 4.3.17
  * fix(deps): update rust crate clap to 4.3.15
  * fix(deps): update rust crate clap to 4.3.12
  * fix(deps): update rust crate serde_json to 1.0.103
  * [CI:BUILD] Packit: remove pre-sync action
  * fix(deps): update rust crate serde_json to 1.0.102
  * fix(deps): update rust crate nispor to 1.2.12
  * macvlan: use netlink type for bclim
  * bump netlink deps
  * fix(deps): update rust crate serde to 1.0.171
  * fix(deps): update rust crate serde to 1.0.167
  * fix(deps): update rust crate clap to 4.3.11
  * fix(deps): update rust crate serde to 1.0.166
  * fix(deps): update rust crate serde_json to 1.0.100
  * iptables: improve error when ip6?tables commands are missing
  * fix(deps): update rust crate clap to 4.3.10
  * fix(deps): update rust crate zbus to 3.14.1
  * [CI:BUILD] RPM: Fix ELN build and cleanup spec
  * bump to v1.8.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701345600">- Update to version 1.9.0:
  * v1.9.0 Release
  * v1.9.0 Release notes
  * test: fix syntax problem in helpers.bash
  * run cargo update
  * use OsString/Path over String for file paths
  * chore(deps): update dependency containers/automation_images to v20231116
  * firewalld-reload: fix CI tests
  * firewalld-reload: prevent race which could leak fw rules
  * fix(deps): update rust crate clap to ~4.4.8
  * CI: skip broken firewalld test
  * fix(deps): update rust crate http to 0.2.11
  * rpm: add netavark-firewalld-reload.service to spec
  * firewalld-reload: add integration tests
  * firewall/state: make sure to ignore enoent on read
  * firewall-reload: integrate actual logic to reload rules
  * firewall/state: improve error messages
  * firewall: add state functions to serialize configs
  * firewalld: fix lint errors with rust v1.73
  * firewall: do not use full Network in NetworkStruct
  * firewall: add dns_port to SetupNetwork
  * add firewalld-reload subcommand
  * fix(deps): update rust crate http to 0.2.10
  * fix(deps): update rust crate env_logger to 0.10.1
  * fix(deps): update rust crate tokio to 1.34
  * Update rust container build files
  * bridge: force static mac on bridge interface
  * fix(deps): update rust crate futures-core to 0.3.29
  * fix(deps): update rust crate serde to 1.0.190
  * fix(deps): update rust crate serde_json to 1.0.108
  * fix(deps): update rust crate sysctl to 0.5.5
  * fix(deps): update rust-futures monorepo to 0.3.29
  * CI: Drop CI VM distro name
  * chore(deps): update dependency containers/automation_images to v20231004
  * fix(deps): update rust crate tokio to 1.33
  * build-sys: Filter to tier 2 Linux declaratively
  * fix(deps): update rust crate sha2 to 0.10.8
  * fix podman.io community link
  * Bump to v1.9.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1706788800">- Update to version 1.10.2:
  * Release v1.10.2
  * Release notes for v1.10.2
  * [CI:BUILD] Packit/rpm: fix aardvark-dns handling
  * Do not perform network namespace detection on AV update
  * Release v1.10.1
  * Updated release notes for v1.10.1
  * update to nftables release 0.3 from crates.io
  * DISTRO_PACKAGE: fix incorrect vendored tar archive URL
  * Bump to 1.11.0-dev
  * Release 1.10.0
  * Release notes for 1.10.0
  * RPM: update .cargo/config before building
  * Add support for isolation to the nftables driver
  * build(deps): bump h2 from 0.3.22 to 0.3.24
  * chore(deps): update rust crate chrono to 0.4.32
  * fix(deps): update rust crate env_logger to 0.11.0
  * chore(deps): update dependency containers/automation_images to v20240102
  * Bump nftables-rs to latest commit
  * Netavark: nftables support
  * fix(deps): update rust crate serde_json to 1.0.111
  * feat: added the --firewall-driver option
  * Document how to generate a code coverage report for netavark
  * fix(deps): update rust crate clap to ~4.4.12
  * fix(deps): update rust crate serde_json to 1.0.110
  * fix(deps): update rust-futures monorepo to 0.3.30
  * fix(deps): update rust crate nispor to 1.2.16
  * chore(deps): update rust crate tempfile to 3.9.0
  * Use tonic::transport::Uri instead of HTTP
  * chore(deps): update dependency containers/automation_images to v20231208
  * fix(deps): update rust crate tokio to 1.35
  * dhcp-proxy: return actual error instead of generic one
  * dhcp-proxy: skip set gateway if missing
  * bump netlink-packet-route to 0.18.1
  * chore(deps): update rust crate once_cell to 1.19.0
  * fix(deps): update rust crate nispor to 1.2.15
  * fix(deps): update rust crate serde to 1.0.193
  * fix(deps): update rust crate clap to ~4.4.10
  * aardvark: show error if process is in wrong netns
  * aardvark: remove unessesary unlock lockfile calls
  * fix(deps): update rust crate url to 2.5.0
  * Bump working version to v1.10.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1707220800">- Rely only on &lt;major&gt;.&lt;minor&gt; for aardvark-dns requires, even though
  it is released in sync with netavark, relying on patch version is brittle.</changelog>
</package>
<package pkgid="6a6488a5eced76547b0f42df2d6fe96ee5efbf357bb203542f0e07351c3893d9" name="netavark" arch="s390x">
  <version epoch="0" ver="1.10.2" rel="150500.3.3.3"/>
  <changelog author="dcermak@suse.com" date="1676030400">- First version of netavark</changelog>
  <changelog author="dcermak@suse.com" date="1678968000">- Bump required rust version &amp; fix libexecdir</changelog>
  <changelog author="danish.prakash@suse.com" date="1681300800">- Update to version 1.6.0:
  * v1.6.0 release
  * Update release notes for v1.6.0
  * dhcp-proxy: fix typo for --activity-timeout
  * chore(deps): update dependency containers/automation_images to v20230405
  * dhcp-proxy: use better error when connection fails
  * add documentation for netavark plugins
  * add stderr example plugin to test stderr passthrough
  * add netavark plugin driver
  * add example error plugin
  * add host-device example plugin
  * plugin: add simple plugin interface
  * netlink: add dump_addresses
  * netlink: add set_link_ns
  * dhcp-proxy: correctly exit &gt; 0 on errors
  * fix(deps): update rust crate tonic to 0.9
  * fix(deps): update rust crate mozim to 0.2.2
  * fix(deps): update rust crate serde to 1.0.159
  * fix(deps): update rust crate netlink-sys to 0.8.5
  * dhcp-proxy: create socket directory only when used
  * dhcp-proxy: do not remove socket when running under systemd
  * Makefile: netavark-dhcp-proxy.service use correct path
  * fix(deps): update rust crate http to 0.2.9
  * chore(deps): update rust crate once_cell to 1.17.1
  * fix(deps): update rust-futures monorepo to 0.3.28
  * fix(deps): update rust crate serde_json to 1.0.95
  * chore(deps): update dependency containers/automation_images to v20230330
  * Disable Dependabot in favor of Renovate
  * chore(deps): update rust crate chrono to 0.4.24
  * build(deps): bump ipnet from 2.7.1 to 2.7.2
  * build(deps): bump serde from 1.0.158 to 1.0.159
  * build(deps): bump serde_json from 1.0.94 to 1.0.95
  * update,main: dont write empty space when no network_dns_servers is given
  * fix(deps): update rust crate tokio to 1.27
  * Quit Leasing when Client disconnects
  * build(deps): bump mozim from 0.2.1 to 0.2.2
  * iptables: fix incorrect debug statement
  * build(deps): bump serde from 1.0.156 to 1.0.158
  * iptables: port fw handle wildcard address correctly
  * chore(deps): update dependency containers/automation_images to v20230320
  * build(deps): bump zbus from 3.11.0 to 3.11.1
  * build(deps): bump anyhow from 1.0.69 to 1.0.70
  * [CI:BUILD] Packit: trigger builds on commit to main branch
  * Cirrus: Invalidate v2 bin cache
  * Include Systemd Files in RPM Package
  * Cirrus: Fix success failing on artifact extraction
  * fix lint issue with new rust version 1.68
  * Cirrus: Update to newer CI VM images
  * build(deps): bump serde from 1.0.152 to 1.0.156
  * combine dhcp-proxy and netavark into one binary
  * update: should allow empty network_dns_servers
  * build(deps): bump libc from 0.2.139 to 0.2.140
  * fix aarch64 ncat flake
  * update to mozim 0.2.1
  * build(deps): bump zbus from 3.10.0 to 3.11.0
  * packit: Update build release tag correctly
  * test: move proto option into run_nc_test()
  * test: add netns pid param to port checks
  * test: import podman code to check for ports
  * cirrus.yaml: add new binaries in art_prep_script
  * fix netavark-dhcp-proxy binary in system unit
  * import netavark-proxy-dhcp tests
  * add build_proxy_client target
  * add netavark-dhcp-proxy to rpm
  * Fix dhcp-proxy build
  * Merge nv-dhcp-proxy into nv
  * fix default route metric test name
  * build(deps): bump tokio from 1.25.0 to 1.26.0
  * Support none parameter on NETAVARK_FW
  * build(deps): bump anyhow from 1.0.68 to 1.0.69
  * Fix typos
  * update netlink-packet-{route,core} to 0.15 and 0.5
  * build(deps): bump serde_json from 1.0.92 to 1.0.93
  * build(deps): bump zbus from 3.8.0 to 3.10.0
  * [CI:BUILD] Packit: initial enablement
  * Allow custom cargo binary path
  * build(deps): bump serde_json from 1.0.91 to 1.0.92
  * Cirrus: Reduce requested CPUs for compile-tasks
  * bump to version 1.0.6-dev
  * build(deps): bump netlink-sys from 0.8.3 to 0.8.4
  * Add renovate.json5</changelog>
  <changelog author="danish.prakash@suse.com" date="1687521600">- Add aardvark-dns as Requires for netavark</changelog>
  <changelog author="danish.prakash@suse.com" date="1688385600">- Update to version 1.7.0:
  * release v1.7.0
  * Update release notes for v1.7.0
  * fix(deps): update rust crate tokio to 1.29
  * netavark: make --config required for dns
  * fix(deps): update rust crate serde_json to 1.0.99
  * fix(deps): update rust crate clap to 4.3.8
  * [CI:BUILD] Packit: add Fedora downstream tasks
  * run cargo update
  * fix(deps): update rust crate serde_json to 1.0.97
  * fix(deps): update rust crate sha2 to 0.10.7
  * fix(deps): update rust crate clap to 4.3.4
  * chore(deps): update dependency containers/automation_images to v20230614
  * fix(deps): update rust crate clap to 4.3.3
  * fix(deps): update rust crate log to 0.4.19
  * aardvark: fix missleading dns disabled log
  * firewall: add NETAVARK_ISOLATION_3 chain for strict isolation
  * docs: fix link to getting started
  * fix(deps): update rust crate serde to 1.0.164
  * netlink: fix incorrect info log for del_route
  * dhcp-proxy: apply new ip address/gateway
  * test-dhcp: fix broekn has_ip() check
  * dhcp-proxy: actually implement renewing leases
  * dhcp-proxy: simplify code
  * dhcp-proxy: drop macaddr dependency
  * dhcp-proxy: remove some unused traits
  * fix(deps): update rust crate zbus to 3.13.1
  * fix(deps): update rust crate clap to 4.3.2
  * chore(deps): update rust crate once_cell to 1.18.0
  * fix(deps): update rust crate url to 2.4.0
  * fix(deps): update rust crate clap to 4.3.1
  * chore(deps): update dependency containers/automation_images to v20230601
  * chore(deps): update rust crate chrono to 0.4.26
  * chore(deps): update rust crate chrono to 0.4.25
  * fix(deps): update rust crate log to 0.4.18
  * chore(deps): update rust crate once_cell to 1.17.2
  * macvlan: add bclim option
  * parse_option(): return option instead of default
  * add no_default_gateway option
  * fix(deps): update rust crate clap to 4.3.0
  * chore(deps): update dependency containers/automation_images to v20230517
  * fix(deps): update rust crate serde to 1.0.163
  * Add ability to add static route
  * fix(deps): update rust crate serde to 1.0.162
  * Cirrus: Update fedora name to match image
  * fix(deps): update rust crate clap to 4.2.7
  * chore(deps): update dependency containers/automation_images to v20230426
  * correct typo in Makefile
  * simplify path printing
  * fix(deps): update rust crate tokio to 1.28
  * aardvark-dns pid: return better errors
  * fix comment in Subnet definition
  * aardvark: no error when aardvark config is not there
  * fix(deps): update rust crate zbus to 3.12.0
  * fix(deps): update rust crate clap to 4.2.4
  * fix(deps): update rust crate clap to 4.2.2
  * fix(deps): update rust crate serde_json to 1.0.96
  * update clap to v4
  * fix(deps): update rust crate serde to 1.0.160
  * bump to v1.7.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1689076800">- Disable restricting builds only for tier1 platforms
  i.e. only for x86_64 and aarch64 and enable for all.</changelog>
  <changelog author="danish.prakash@suse.com" date="1695902400">- Update to version 1.8.0:
  * Release v1.8.0
  * update release notes for v1.8.0
  * run cargo update
  * Add vrf support for bridges
  * Packit: switch to @containers/packit-build team for copr failure notification comments
  * fix(deps): update rust crate nispor to 1.2.14
  * [CI:BUILD] Packit: tag @lsm5 on copr build failures
  * chore(deps): update rust crate chrono to 0.4.31
  * fix(deps): update rust crate serde_json to 1.0.107
  * rust io safety: convert RawFd to BorrowedFd&lt;&gt;
  * bump nix to 0.27.1
  * chore(deps): update rust crate chrono to 0.4.30
  * fix(deps): update rust crate serde_json to 1.0.106
  * chore(deps): update rust crate chrono to 0.4.29
  * fix(deps): update rust crate netlink-packet-route to 0.17.1
  * Bump tonic and prost
  * Update container image to F38
  * Add ACCEPT rules in firewall for bridge network with internal dns.
  * chore(deps): update rust crate tonic-build to 0.10
  * fix(deps): update rust crate nispor to 1.2.13
  * fix(deps): update rust crate serde to 1.0.188
  * Fix clippy warnings about formatting
  * update chrono crate
  * fix(deps): update rust crate url to 2.4.1
  * Add protoc dependency to README
  * [CI:BUILD] rpm: spdx compatible license field
  * fix(deps): update rust crate tokio to 1.32
  * chore(deps): update dependency containers/automation_images to v20230816
  * fix(deps): update rust crate serde_json to 1.0.105
  * fix(deps): update rust crate tokio to 1.31
  * fix(deps): update rust crate log to 0.4.20
  * run cargo update
  * update tonic-build to 0.9.2
  * bump rust edition to 2021
  * iptables: drop invalid packages
  * fix(deps): update rust crate tokio to 1.30
  * docs: Convert markdown with go-md2man instead of mandown
  * fix(deps): update rust crate clap to 4.3.21
  * packit: Build PRs into default packit COPRs
  * chore(deps): update dependency containers/automation_images to v20230807
  * fix(deps): update rust crate serde to 1.0.183
  * fix(deps): update rust crate serde to 1.0.181
  * fix(deps): update rust crate serde to 1.0.180
  * fix(deps): update rust crate serde_json to 1.0.104
  * fix(deps): update rust crate serde to 1.0.179
  * fix(deps): update rust crate serde to 1.0.176
  * fix(deps): update rust crate clap to 4.3.19
  * fix(deps): update rust crate serde to 1.0.175
  * fix(deps): update rust crate clap to 4.3.17
  * fix(deps): update rust crate clap to 4.3.15
  * fix(deps): update rust crate clap to 4.3.12
  * fix(deps): update rust crate serde_json to 1.0.103
  * [CI:BUILD] Packit: remove pre-sync action
  * fix(deps): update rust crate serde_json to 1.0.102
  * fix(deps): update rust crate nispor to 1.2.12
  * macvlan: use netlink type for bclim
  * bump netlink deps
  * fix(deps): update rust crate serde to 1.0.171
  * fix(deps): update rust crate serde to 1.0.167
  * fix(deps): update rust crate clap to 4.3.11
  * fix(deps): update rust crate serde to 1.0.166
  * fix(deps): update rust crate serde_json to 1.0.100
  * iptables: improve error when ip6?tables commands are missing
  * fix(deps): update rust crate clap to 4.3.10
  * fix(deps): update rust crate zbus to 3.14.1
  * [CI:BUILD] RPM: Fix ELN build and cleanup spec
  * bump to v1.8.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701345600">- Update to version 1.9.0:
  * v1.9.0 Release
  * v1.9.0 Release notes
  * test: fix syntax problem in helpers.bash
  * run cargo update
  * use OsString/Path over String for file paths
  * chore(deps): update dependency containers/automation_images to v20231116
  * firewalld-reload: fix CI tests
  * firewalld-reload: prevent race which could leak fw rules
  * fix(deps): update rust crate clap to ~4.4.8
  * CI: skip broken firewalld test
  * fix(deps): update rust crate http to 0.2.11
  * rpm: add netavark-firewalld-reload.service to spec
  * firewalld-reload: add integration tests
  * firewall/state: make sure to ignore enoent on read
  * firewall-reload: integrate actual logic to reload rules
  * firewall/state: improve error messages
  * firewall: add state functions to serialize configs
  * firewalld: fix lint errors with rust v1.73
  * firewall: do not use full Network in NetworkStruct
  * firewall: add dns_port to SetupNetwork
  * add firewalld-reload subcommand
  * fix(deps): update rust crate http to 0.2.10
  * fix(deps): update rust crate env_logger to 0.10.1
  * fix(deps): update rust crate tokio to 1.34
  * Update rust container build files
  * bridge: force static mac on bridge interface
  * fix(deps): update rust crate futures-core to 0.3.29
  * fix(deps): update rust crate serde to 1.0.190
  * fix(deps): update rust crate serde_json to 1.0.108
  * fix(deps): update rust crate sysctl to 0.5.5
  * fix(deps): update rust-futures monorepo to 0.3.29
  * CI: Drop CI VM distro name
  * chore(deps): update dependency containers/automation_images to v20231004
  * fix(deps): update rust crate tokio to 1.33
  * build-sys: Filter to tier 2 Linux declaratively
  * fix(deps): update rust crate sha2 to 0.10.8
  * fix podman.io community link
  * Bump to v1.9.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1706788800">- Update to version 1.10.2:
  * Release v1.10.2
  * Release notes for v1.10.2
  * [CI:BUILD] Packit/rpm: fix aardvark-dns handling
  * Do not perform network namespace detection on AV update
  * Release v1.10.1
  * Updated release notes for v1.10.1
  * update to nftables release 0.3 from crates.io
  * DISTRO_PACKAGE: fix incorrect vendored tar archive URL
  * Bump to 1.11.0-dev
  * Release 1.10.0
  * Release notes for 1.10.0
  * RPM: update .cargo/config before building
  * Add support for isolation to the nftables driver
  * build(deps): bump h2 from 0.3.22 to 0.3.24
  * chore(deps): update rust crate chrono to 0.4.32
  * fix(deps): update rust crate env_logger to 0.11.0
  * chore(deps): update dependency containers/automation_images to v20240102
  * Bump nftables-rs to latest commit
  * Netavark: nftables support
  * fix(deps): update rust crate serde_json to 1.0.111
  * feat: added the --firewall-driver option
  * Document how to generate a code coverage report for netavark
  * fix(deps): update rust crate clap to ~4.4.12
  * fix(deps): update rust crate serde_json to 1.0.110
  * fix(deps): update rust-futures monorepo to 0.3.30
  * fix(deps): update rust crate nispor to 1.2.16
  * chore(deps): update rust crate tempfile to 3.9.0
  * Use tonic::transport::Uri instead of HTTP
  * chore(deps): update dependency containers/automation_images to v20231208
  * fix(deps): update rust crate tokio to 1.35
  * dhcp-proxy: return actual error instead of generic one
  * dhcp-proxy: skip set gateway if missing
  * bump netlink-packet-route to 0.18.1
  * chore(deps): update rust crate once_cell to 1.19.0
  * fix(deps): update rust crate nispor to 1.2.15
  * fix(deps): update rust crate serde to 1.0.193
  * fix(deps): update rust crate clap to ~4.4.10
  * aardvark: show error if process is in wrong netns
  * aardvark: remove unessesary unlock lockfile calls
  * fix(deps): update rust crate url to 2.5.0
  * Bump working version to v1.10.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1707220800">- Rely only on &lt;major&gt;.&lt;minor&gt; for aardvark-dns requires, even though
  it is released in sync with netavark, relying on patch version is brittle.</changelog>
</package>
<package pkgid="91b86bbfdca90d5bb1db4f44fd96e50cd922011a3483c7805d85aa07d508940a" name="netavark" arch="src">
  <version epoch="0" ver="1.10.2" rel="150500.3.3.3"/>
  <changelog author="dcermak@suse.com" date="1676030400">- First version of netavark</changelog>
  <changelog author="dcermak@suse.com" date="1678968000">- Bump required rust version &amp; fix libexecdir</changelog>
  <changelog author="danish.prakash@suse.com" date="1681300800">- Update to version 1.6.0:
  * v1.6.0 release
  * Update release notes for v1.6.0
  * dhcp-proxy: fix typo for --activity-timeout
  * chore(deps): update dependency containers/automation_images to v20230405
  * dhcp-proxy: use better error when connection fails
  * add documentation for netavark plugins
  * add stderr example plugin to test stderr passthrough
  * add netavark plugin driver
  * add example error plugin
  * add host-device example plugin
  * plugin: add simple plugin interface
  * netlink: add dump_addresses
  * netlink: add set_link_ns
  * dhcp-proxy: correctly exit &gt; 0 on errors
  * fix(deps): update rust crate tonic to 0.9
  * fix(deps): update rust crate mozim to 0.2.2
  * fix(deps): update rust crate serde to 1.0.159
  * fix(deps): update rust crate netlink-sys to 0.8.5
  * dhcp-proxy: create socket directory only when used
  * dhcp-proxy: do not remove socket when running under systemd
  * Makefile: netavark-dhcp-proxy.service use correct path
  * fix(deps): update rust crate http to 0.2.9
  * chore(deps): update rust crate once_cell to 1.17.1
  * fix(deps): update rust-futures monorepo to 0.3.28
  * fix(deps): update rust crate serde_json to 1.0.95
  * chore(deps): update dependency containers/automation_images to v20230330
  * Disable Dependabot in favor of Renovate
  * chore(deps): update rust crate chrono to 0.4.24
  * build(deps): bump ipnet from 2.7.1 to 2.7.2
  * build(deps): bump serde from 1.0.158 to 1.0.159
  * build(deps): bump serde_json from 1.0.94 to 1.0.95
  * update,main: dont write empty space when no network_dns_servers is given
  * fix(deps): update rust crate tokio to 1.27
  * Quit Leasing when Client disconnects
  * build(deps): bump mozim from 0.2.1 to 0.2.2
  * iptables: fix incorrect debug statement
  * build(deps): bump serde from 1.0.156 to 1.0.158
  * iptables: port fw handle wildcard address correctly
  * chore(deps): update dependency containers/automation_images to v20230320
  * build(deps): bump zbus from 3.11.0 to 3.11.1
  * build(deps): bump anyhow from 1.0.69 to 1.0.70
  * [CI:BUILD] Packit: trigger builds on commit to main branch
  * Cirrus: Invalidate v2 bin cache
  * Include Systemd Files in RPM Package
  * Cirrus: Fix success failing on artifact extraction
  * fix lint issue with new rust version 1.68
  * Cirrus: Update to newer CI VM images
  * build(deps): bump serde from 1.0.152 to 1.0.156
  * combine dhcp-proxy and netavark into one binary
  * update: should allow empty network_dns_servers
  * build(deps): bump libc from 0.2.139 to 0.2.140
  * fix aarch64 ncat flake
  * update to mozim 0.2.1
  * build(deps): bump zbus from 3.10.0 to 3.11.0
  * packit: Update build release tag correctly
  * test: move proto option into run_nc_test()
  * test: add netns pid param to port checks
  * test: import podman code to check for ports
  * cirrus.yaml: add new binaries in art_prep_script
  * fix netavark-dhcp-proxy binary in system unit
  * import netavark-proxy-dhcp tests
  * add build_proxy_client target
  * add netavark-dhcp-proxy to rpm
  * Fix dhcp-proxy build
  * Merge nv-dhcp-proxy into nv
  * fix default route metric test name
  * build(deps): bump tokio from 1.25.0 to 1.26.0
  * Support none parameter on NETAVARK_FW
  * build(deps): bump anyhow from 1.0.68 to 1.0.69
  * Fix typos
  * update netlink-packet-{route,core} to 0.15 and 0.5
  * build(deps): bump serde_json from 1.0.92 to 1.0.93
  * build(deps): bump zbus from 3.8.0 to 3.10.0
  * [CI:BUILD] Packit: initial enablement
  * Allow custom cargo binary path
  * build(deps): bump serde_json from 1.0.91 to 1.0.92
  * Cirrus: Reduce requested CPUs for compile-tasks
  * bump to version 1.0.6-dev
  * build(deps): bump netlink-sys from 0.8.3 to 0.8.4
  * Add renovate.json5</changelog>
  <changelog author="danish.prakash@suse.com" date="1687521600">- Add aardvark-dns as Requires for netavark</changelog>
  <changelog author="danish.prakash@suse.com" date="1688385600">- Update to version 1.7.0:
  * release v1.7.0
  * Update release notes for v1.7.0
  * fix(deps): update rust crate tokio to 1.29
  * netavark: make --config required for dns
  * fix(deps): update rust crate serde_json to 1.0.99
  * fix(deps): update rust crate clap to 4.3.8
  * [CI:BUILD] Packit: add Fedora downstream tasks
  * run cargo update
  * fix(deps): update rust crate serde_json to 1.0.97
  * fix(deps): update rust crate sha2 to 0.10.7
  * fix(deps): update rust crate clap to 4.3.4
  * chore(deps): update dependency containers/automation_images to v20230614
  * fix(deps): update rust crate clap to 4.3.3
  * fix(deps): update rust crate log to 0.4.19
  * aardvark: fix missleading dns disabled log
  * firewall: add NETAVARK_ISOLATION_3 chain for strict isolation
  * docs: fix link to getting started
  * fix(deps): update rust crate serde to 1.0.164
  * netlink: fix incorrect info log for del_route
  * dhcp-proxy: apply new ip address/gateway
  * test-dhcp: fix broekn has_ip() check
  * dhcp-proxy: actually implement renewing leases
  * dhcp-proxy: simplify code
  * dhcp-proxy: drop macaddr dependency
  * dhcp-proxy: remove some unused traits
  * fix(deps): update rust crate zbus to 3.13.1
  * fix(deps): update rust crate clap to 4.3.2
  * chore(deps): update rust crate once_cell to 1.18.0
  * fix(deps): update rust crate url to 2.4.0
  * fix(deps): update rust crate clap to 4.3.1
  * chore(deps): update dependency containers/automation_images to v20230601
  * chore(deps): update rust crate chrono to 0.4.26
  * chore(deps): update rust crate chrono to 0.4.25
  * fix(deps): update rust crate log to 0.4.18
  * chore(deps): update rust crate once_cell to 1.17.2
  * macvlan: add bclim option
  * parse_option(): return option instead of default
  * add no_default_gateway option
  * fix(deps): update rust crate clap to 4.3.0
  * chore(deps): update dependency containers/automation_images to v20230517
  * fix(deps): update rust crate serde to 1.0.163
  * Add ability to add static route
  * fix(deps): update rust crate serde to 1.0.162
  * Cirrus: Update fedora name to match image
  * fix(deps): update rust crate clap to 4.2.7
  * chore(deps): update dependency containers/automation_images to v20230426
  * correct typo in Makefile
  * simplify path printing
  * fix(deps): update rust crate tokio to 1.28
  * aardvark-dns pid: return better errors
  * fix comment in Subnet definition
  * aardvark: no error when aardvark config is not there
  * fix(deps): update rust crate zbus to 3.12.0
  * fix(deps): update rust crate clap to 4.2.4
  * fix(deps): update rust crate clap to 4.2.2
  * fix(deps): update rust crate serde_json to 1.0.96
  * update clap to v4
  * fix(deps): update rust crate serde to 1.0.160
  * bump to v1.7.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1689076800">- Disable restricting builds only for tier1 platforms
  i.e. only for x86_64 and aarch64 and enable for all.</changelog>
  <changelog author="danish.prakash@suse.com" date="1695902400">- Update to version 1.8.0:
  * Release v1.8.0
  * update release notes for v1.8.0
  * run cargo update
  * Add vrf support for bridges
  * Packit: switch to @containers/packit-build team for copr failure notification comments
  * fix(deps): update rust crate nispor to 1.2.14
  * [CI:BUILD] Packit: tag @lsm5 on copr build failures
  * chore(deps): update rust crate chrono to 0.4.31
  * fix(deps): update rust crate serde_json to 1.0.107
  * rust io safety: convert RawFd to BorrowedFd&lt;&gt;
  * bump nix to 0.27.1
  * chore(deps): update rust crate chrono to 0.4.30
  * fix(deps): update rust crate serde_json to 1.0.106
  * chore(deps): update rust crate chrono to 0.4.29
  * fix(deps): update rust crate netlink-packet-route to 0.17.1
  * Bump tonic and prost
  * Update container image to F38
  * Add ACCEPT rules in firewall for bridge network with internal dns.
  * chore(deps): update rust crate tonic-build to 0.10
  * fix(deps): update rust crate nispor to 1.2.13
  * fix(deps): update rust crate serde to 1.0.188
  * Fix clippy warnings about formatting
  * update chrono crate
  * fix(deps): update rust crate url to 2.4.1
  * Add protoc dependency to README
  * [CI:BUILD] rpm: spdx compatible license field
  * fix(deps): update rust crate tokio to 1.32
  * chore(deps): update dependency containers/automation_images to v20230816
  * fix(deps): update rust crate serde_json to 1.0.105
  * fix(deps): update rust crate tokio to 1.31
  * fix(deps): update rust crate log to 0.4.20
  * run cargo update
  * update tonic-build to 0.9.2
  * bump rust edition to 2021
  * iptables: drop invalid packages
  * fix(deps): update rust crate tokio to 1.30
  * docs: Convert markdown with go-md2man instead of mandown
  * fix(deps): update rust crate clap to 4.3.21
  * packit: Build PRs into default packit COPRs
  * chore(deps): update dependency containers/automation_images to v20230807
  * fix(deps): update rust crate serde to 1.0.183
  * fix(deps): update rust crate serde to 1.0.181
  * fix(deps): update rust crate serde to 1.0.180
  * fix(deps): update rust crate serde_json to 1.0.104
  * fix(deps): update rust crate serde to 1.0.179
  * fix(deps): update rust crate serde to 1.0.176
  * fix(deps): update rust crate clap to 4.3.19
  * fix(deps): update rust crate serde to 1.0.175
  * fix(deps): update rust crate clap to 4.3.17
  * fix(deps): update rust crate clap to 4.3.15
  * fix(deps): update rust crate clap to 4.3.12
  * fix(deps): update rust crate serde_json to 1.0.103
  * [CI:BUILD] Packit: remove pre-sync action
  * fix(deps): update rust crate serde_json to 1.0.102
  * fix(deps): update rust crate nispor to 1.2.12
  * macvlan: use netlink type for bclim
  * bump netlink deps
  * fix(deps): update rust crate serde to 1.0.171
  * fix(deps): update rust crate serde to 1.0.167
  * fix(deps): update rust crate clap to 4.3.11
  * fix(deps): update rust crate serde to 1.0.166
  * fix(deps): update rust crate serde_json to 1.0.100
  * iptables: improve error when ip6?tables commands are missing
  * fix(deps): update rust crate clap to 4.3.10
  * fix(deps): update rust crate zbus to 3.14.1
  * [CI:BUILD] RPM: Fix ELN build and cleanup spec
  * bump to v1.8.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701345600">- Update to version 1.9.0:
  * v1.9.0 Release
  * v1.9.0 Release notes
  * test: fix syntax problem in helpers.bash
  * run cargo update
  * use OsString/Path over String for file paths
  * chore(deps): update dependency containers/automation_images to v20231116
  * firewalld-reload: fix CI tests
  * firewalld-reload: prevent race which could leak fw rules
  * fix(deps): update rust crate clap to ~4.4.8
  * CI: skip broken firewalld test
  * fix(deps): update rust crate http to 0.2.11
  * rpm: add netavark-firewalld-reload.service to spec
  * firewalld-reload: add integration tests
  * firewall/state: make sure to ignore enoent on read
  * firewall-reload: integrate actual logic to reload rules
  * firewall/state: improve error messages
  * firewall: add state functions to serialize configs
  * firewalld: fix lint errors with rust v1.73
  * firewall: do not use full Network in NetworkStruct
  * firewall: add dns_port to SetupNetwork
  * add firewalld-reload subcommand
  * fix(deps): update rust crate http to 0.2.10
  * fix(deps): update rust crate env_logger to 0.10.1
  * fix(deps): update rust crate tokio to 1.34
  * Update rust container build files
  * bridge: force static mac on bridge interface
  * fix(deps): update rust crate futures-core to 0.3.29
  * fix(deps): update rust crate serde to 1.0.190
  * fix(deps): update rust crate serde_json to 1.0.108
  * fix(deps): update rust crate sysctl to 0.5.5
  * fix(deps): update rust-futures monorepo to 0.3.29
  * CI: Drop CI VM distro name
  * chore(deps): update dependency containers/automation_images to v20231004
  * fix(deps): update rust crate tokio to 1.33
  * build-sys: Filter to tier 2 Linux declaratively
  * fix(deps): update rust crate sha2 to 0.10.8
  * fix podman.io community link
  * Bump to v1.9.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1706788800">- Update to version 1.10.2:
  * Release v1.10.2
  * Release notes for v1.10.2
  * [CI:BUILD] Packit/rpm: fix aardvark-dns handling
  * Do not perform network namespace detection on AV update
  * Release v1.10.1
  * Updated release notes for v1.10.1
  * update to nftables release 0.3 from crates.io
  * DISTRO_PACKAGE: fix incorrect vendored tar archive URL
  * Bump to 1.11.0-dev
  * Release 1.10.0
  * Release notes for 1.10.0
  * RPM: update .cargo/config before building
  * Add support for isolation to the nftables driver
  * build(deps): bump h2 from 0.3.22 to 0.3.24
  * chore(deps): update rust crate chrono to 0.4.32
  * fix(deps): update rust crate env_logger to 0.11.0
  * chore(deps): update dependency containers/automation_images to v20240102
  * Bump nftables-rs to latest commit
  * Netavark: nftables support
  * fix(deps): update rust crate serde_json to 1.0.111
  * feat: added the --firewall-driver option
  * Document how to generate a code coverage report for netavark
  * fix(deps): update rust crate clap to ~4.4.12
  * fix(deps): update rust crate serde_json to 1.0.110
  * fix(deps): update rust-futures monorepo to 0.3.30
  * fix(deps): update rust crate nispor to 1.2.16
  * chore(deps): update rust crate tempfile to 3.9.0
  * Use tonic::transport::Uri instead of HTTP
  * chore(deps): update dependency containers/automation_images to v20231208
  * fix(deps): update rust crate tokio to 1.35
  * dhcp-proxy: return actual error instead of generic one
  * dhcp-proxy: skip set gateway if missing
  * bump netlink-packet-route to 0.18.1
  * chore(deps): update rust crate once_cell to 1.19.0
  * fix(deps): update rust crate nispor to 1.2.15
  * fix(deps): update rust crate serde to 1.0.193
  * fix(deps): update rust crate clap to ~4.4.10
  * aardvark: show error if process is in wrong netns
  * aardvark: remove unessesary unlock lockfile calls
  * fix(deps): update rust crate url to 2.5.0
  * Bump working version to v1.10.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1707220800">- Rely only on &lt;major&gt;.&lt;minor&gt; for aardvark-dns requires, even though
  it is released in sync with netavark, relying on patch version is brittle.</changelog>
</package>
<package pkgid="e677fde70294a4d122132bda56b757ceb8b14e2271a407885657095dd6fe32e0" name="netavark" arch="x86_64">
  <version epoch="0" ver="1.10.2" rel="150500.3.3.3"/>
  <changelog author="dcermak@suse.com" date="1676030400">- First version of netavark</changelog>
  <changelog author="dcermak@suse.com" date="1678968000">- Bump required rust version &amp; fix libexecdir</changelog>
  <changelog author="danish.prakash@suse.com" date="1681300800">- Update to version 1.6.0:
  * v1.6.0 release
  * Update release notes for v1.6.0
  * dhcp-proxy: fix typo for --activity-timeout
  * chore(deps): update dependency containers/automation_images to v20230405
  * dhcp-proxy: use better error when connection fails
  * add documentation for netavark plugins
  * add stderr example plugin to test stderr passthrough
  * add netavark plugin driver
  * add example error plugin
  * add host-device example plugin
  * plugin: add simple plugin interface
  * netlink: add dump_addresses
  * netlink: add set_link_ns
  * dhcp-proxy: correctly exit &gt; 0 on errors
  * fix(deps): update rust crate tonic to 0.9
  * fix(deps): update rust crate mozim to 0.2.2
  * fix(deps): update rust crate serde to 1.0.159
  * fix(deps): update rust crate netlink-sys to 0.8.5
  * dhcp-proxy: create socket directory only when used
  * dhcp-proxy: do not remove socket when running under systemd
  * Makefile: netavark-dhcp-proxy.service use correct path
  * fix(deps): update rust crate http to 0.2.9
  * chore(deps): update rust crate once_cell to 1.17.1
  * fix(deps): update rust-futures monorepo to 0.3.28
  * fix(deps): update rust crate serde_json to 1.0.95
  * chore(deps): update dependency containers/automation_images to v20230330
  * Disable Dependabot in favor of Renovate
  * chore(deps): update rust crate chrono to 0.4.24
  * build(deps): bump ipnet from 2.7.1 to 2.7.2
  * build(deps): bump serde from 1.0.158 to 1.0.159
  * build(deps): bump serde_json from 1.0.94 to 1.0.95
  * update,main: dont write empty space when no network_dns_servers is given
  * fix(deps): update rust crate tokio to 1.27
  * Quit Leasing when Client disconnects
  * build(deps): bump mozim from 0.2.1 to 0.2.2
  * iptables: fix incorrect debug statement
  * build(deps): bump serde from 1.0.156 to 1.0.158
  * iptables: port fw handle wildcard address correctly
  * chore(deps): update dependency containers/automation_images to v20230320
  * build(deps): bump zbus from 3.11.0 to 3.11.1
  * build(deps): bump anyhow from 1.0.69 to 1.0.70
  * [CI:BUILD] Packit: trigger builds on commit to main branch
  * Cirrus: Invalidate v2 bin cache
  * Include Systemd Files in RPM Package
  * Cirrus: Fix success failing on artifact extraction
  * fix lint issue with new rust version 1.68
  * Cirrus: Update to newer CI VM images
  * build(deps): bump serde from 1.0.152 to 1.0.156
  * combine dhcp-proxy and netavark into one binary
  * update: should allow empty network_dns_servers
  * build(deps): bump libc from 0.2.139 to 0.2.140
  * fix aarch64 ncat flake
  * update to mozim 0.2.1
  * build(deps): bump zbus from 3.10.0 to 3.11.0
  * packit: Update build release tag correctly
  * test: move proto option into run_nc_test()
  * test: add netns pid param to port checks
  * test: import podman code to check for ports
  * cirrus.yaml: add new binaries in art_prep_script
  * fix netavark-dhcp-proxy binary in system unit
  * import netavark-proxy-dhcp tests
  * add build_proxy_client target
  * add netavark-dhcp-proxy to rpm
  * Fix dhcp-proxy build
  * Merge nv-dhcp-proxy into nv
  * fix default route metric test name
  * build(deps): bump tokio from 1.25.0 to 1.26.0
  * Support none parameter on NETAVARK_FW
  * build(deps): bump anyhow from 1.0.68 to 1.0.69
  * Fix typos
  * update netlink-packet-{route,core} to 0.15 and 0.5
  * build(deps): bump serde_json from 1.0.92 to 1.0.93
  * build(deps): bump zbus from 3.8.0 to 3.10.0
  * [CI:BUILD] Packit: initial enablement
  * Allow custom cargo binary path
  * build(deps): bump serde_json from 1.0.91 to 1.0.92
  * Cirrus: Reduce requested CPUs for compile-tasks
  * bump to version 1.0.6-dev
  * build(deps): bump netlink-sys from 0.8.3 to 0.8.4
  * Add renovate.json5</changelog>
  <changelog author="danish.prakash@suse.com" date="1687521600">- Add aardvark-dns as Requires for netavark</changelog>
  <changelog author="danish.prakash@suse.com" date="1688385600">- Update to version 1.7.0:
  * release v1.7.0
  * Update release notes for v1.7.0
  * fix(deps): update rust crate tokio to 1.29
  * netavark: make --config required for dns
  * fix(deps): update rust crate serde_json to 1.0.99
  * fix(deps): update rust crate clap to 4.3.8
  * [CI:BUILD] Packit: add Fedora downstream tasks
  * run cargo update
  * fix(deps): update rust crate serde_json to 1.0.97
  * fix(deps): update rust crate sha2 to 0.10.7
  * fix(deps): update rust crate clap to 4.3.4
  * chore(deps): update dependency containers/automation_images to v20230614
  * fix(deps): update rust crate clap to 4.3.3
  * fix(deps): update rust crate log to 0.4.19
  * aardvark: fix missleading dns disabled log
  * firewall: add NETAVARK_ISOLATION_3 chain for strict isolation
  * docs: fix link to getting started
  * fix(deps): update rust crate serde to 1.0.164
  * netlink: fix incorrect info log for del_route
  * dhcp-proxy: apply new ip address/gateway
  * test-dhcp: fix broekn has_ip() check
  * dhcp-proxy: actually implement renewing leases
  * dhcp-proxy: simplify code
  * dhcp-proxy: drop macaddr dependency
  * dhcp-proxy: remove some unused traits
  * fix(deps): update rust crate zbus to 3.13.1
  * fix(deps): update rust crate clap to 4.3.2
  * chore(deps): update rust crate once_cell to 1.18.0
  * fix(deps): update rust crate url to 2.4.0
  * fix(deps): update rust crate clap to 4.3.1
  * chore(deps): update dependency containers/automation_images to v20230601
  * chore(deps): update rust crate chrono to 0.4.26
  * chore(deps): update rust crate chrono to 0.4.25
  * fix(deps): update rust crate log to 0.4.18
  * chore(deps): update rust crate once_cell to 1.17.2
  * macvlan: add bclim option
  * parse_option(): return option instead of default
  * add no_default_gateway option
  * fix(deps): update rust crate clap to 4.3.0
  * chore(deps): update dependency containers/automation_images to v20230517
  * fix(deps): update rust crate serde to 1.0.163
  * Add ability to add static route
  * fix(deps): update rust crate serde to 1.0.162
  * Cirrus: Update fedora name to match image
  * fix(deps): update rust crate clap to 4.2.7
  * chore(deps): update dependency containers/automation_images to v20230426
  * correct typo in Makefile
  * simplify path printing
  * fix(deps): update rust crate tokio to 1.28
  * aardvark-dns pid: return better errors
  * fix comment in Subnet definition
  * aardvark: no error when aardvark config is not there
  * fix(deps): update rust crate zbus to 3.12.0
  * fix(deps): update rust crate clap to 4.2.4
  * fix(deps): update rust crate clap to 4.2.2
  * fix(deps): update rust crate serde_json to 1.0.96
  * update clap to v4
  * fix(deps): update rust crate serde to 1.0.160
  * bump to v1.7.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1689076800">- Disable restricting builds only for tier1 platforms
  i.e. only for x86_64 and aarch64 and enable for all.</changelog>
  <changelog author="danish.prakash@suse.com" date="1695902400">- Update to version 1.8.0:
  * Release v1.8.0
  * update release notes for v1.8.0
  * run cargo update
  * Add vrf support for bridges
  * Packit: switch to @containers/packit-build team for copr failure notification comments
  * fix(deps): update rust crate nispor to 1.2.14
  * [CI:BUILD] Packit: tag @lsm5 on copr build failures
  * chore(deps): update rust crate chrono to 0.4.31
  * fix(deps): update rust crate serde_json to 1.0.107
  * rust io safety: convert RawFd to BorrowedFd&lt;&gt;
  * bump nix to 0.27.1
  * chore(deps): update rust crate chrono to 0.4.30
  * fix(deps): update rust crate serde_json to 1.0.106
  * chore(deps): update rust crate chrono to 0.4.29
  * fix(deps): update rust crate netlink-packet-route to 0.17.1
  * Bump tonic and prost
  * Update container image to F38
  * Add ACCEPT rules in firewall for bridge network with internal dns.
  * chore(deps): update rust crate tonic-build to 0.10
  * fix(deps): update rust crate nispor to 1.2.13
  * fix(deps): update rust crate serde to 1.0.188
  * Fix clippy warnings about formatting
  * update chrono crate
  * fix(deps): update rust crate url to 2.4.1
  * Add protoc dependency to README
  * [CI:BUILD] rpm: spdx compatible license field
  * fix(deps): update rust crate tokio to 1.32
  * chore(deps): update dependency containers/automation_images to v20230816
  * fix(deps): update rust crate serde_json to 1.0.105
  * fix(deps): update rust crate tokio to 1.31
  * fix(deps): update rust crate log to 0.4.20
  * run cargo update
  * update tonic-build to 0.9.2
  * bump rust edition to 2021
  * iptables: drop invalid packages
  * fix(deps): update rust crate tokio to 1.30
  * docs: Convert markdown with go-md2man instead of mandown
  * fix(deps): update rust crate clap to 4.3.21
  * packit: Build PRs into default packit COPRs
  * chore(deps): update dependency containers/automation_images to v20230807
  * fix(deps): update rust crate serde to 1.0.183
  * fix(deps): update rust crate serde to 1.0.181
  * fix(deps): update rust crate serde to 1.0.180
  * fix(deps): update rust crate serde_json to 1.0.104
  * fix(deps): update rust crate serde to 1.0.179
  * fix(deps): update rust crate serde to 1.0.176
  * fix(deps): update rust crate clap to 4.3.19
  * fix(deps): update rust crate serde to 1.0.175
  * fix(deps): update rust crate clap to 4.3.17
  * fix(deps): update rust crate clap to 4.3.15
  * fix(deps): update rust crate clap to 4.3.12
  * fix(deps): update rust crate serde_json to 1.0.103
  * [CI:BUILD] Packit: remove pre-sync action
  * fix(deps): update rust crate serde_json to 1.0.102
  * fix(deps): update rust crate nispor to 1.2.12
  * macvlan: use netlink type for bclim
  * bump netlink deps
  * fix(deps): update rust crate serde to 1.0.171
  * fix(deps): update rust crate serde to 1.0.167
  * fix(deps): update rust crate clap to 4.3.11
  * fix(deps): update rust crate serde to 1.0.166
  * fix(deps): update rust crate serde_json to 1.0.100
  * iptables: improve error when ip6?tables commands are missing
  * fix(deps): update rust crate clap to 4.3.10
  * fix(deps): update rust crate zbus to 3.14.1
  * [CI:BUILD] RPM: Fix ELN build and cleanup spec
  * bump to v1.8.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701345600">- Update to version 1.9.0:
  * v1.9.0 Release
  * v1.9.0 Release notes
  * test: fix syntax problem in helpers.bash
  * run cargo update
  * use OsString/Path over String for file paths
  * chore(deps): update dependency containers/automation_images to v20231116
  * firewalld-reload: fix CI tests
  * firewalld-reload: prevent race which could leak fw rules
  * fix(deps): update rust crate clap to ~4.4.8
  * CI: skip broken firewalld test
  * fix(deps): update rust crate http to 0.2.11
  * rpm: add netavark-firewalld-reload.service to spec
  * firewalld-reload: add integration tests
  * firewall/state: make sure to ignore enoent on read
  * firewall-reload: integrate actual logic to reload rules
  * firewall/state: improve error messages
  * firewall: add state functions to serialize configs
  * firewalld: fix lint errors with rust v1.73
  * firewall: do not use full Network in NetworkStruct
  * firewall: add dns_port to SetupNetwork
  * add firewalld-reload subcommand
  * fix(deps): update rust crate http to 0.2.10
  * fix(deps): update rust crate env_logger to 0.10.1
  * fix(deps): update rust crate tokio to 1.34
  * Update rust container build files
  * bridge: force static mac on bridge interface
  * fix(deps): update rust crate futures-core to 0.3.29
  * fix(deps): update rust crate serde to 1.0.190
  * fix(deps): update rust crate serde_json to 1.0.108
  * fix(deps): update rust crate sysctl to 0.5.5
  * fix(deps): update rust-futures monorepo to 0.3.29
  * CI: Drop CI VM distro name
  * chore(deps): update dependency containers/automation_images to v20231004
  * fix(deps): update rust crate tokio to 1.33
  * build-sys: Filter to tier 2 Linux declaratively
  * fix(deps): update rust crate sha2 to 0.10.8
  * fix podman.io community link
  * Bump to v1.9.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1706788800">- Update to version 1.10.2:
  * Release v1.10.2
  * Release notes for v1.10.2
  * [CI:BUILD] Packit/rpm: fix aardvark-dns handling
  * Do not perform network namespace detection on AV update
  * Release v1.10.1
  * Updated release notes for v1.10.1
  * update to nftables release 0.3 from crates.io
  * DISTRO_PACKAGE: fix incorrect vendored tar archive URL
  * Bump to 1.11.0-dev
  * Release 1.10.0
  * Release notes for 1.10.0
  * RPM: update .cargo/config before building
  * Add support for isolation to the nftables driver
  * build(deps): bump h2 from 0.3.22 to 0.3.24
  * chore(deps): update rust crate chrono to 0.4.32
  * fix(deps): update rust crate env_logger to 0.11.0
  * chore(deps): update dependency containers/automation_images to v20240102
  * Bump nftables-rs to latest commit
  * Netavark: nftables support
  * fix(deps): update rust crate serde_json to 1.0.111
  * feat: added the --firewall-driver option
  * Document how to generate a code coverage report for netavark
  * fix(deps): update rust crate clap to ~4.4.12
  * fix(deps): update rust crate serde_json to 1.0.110
  * fix(deps): update rust-futures monorepo to 0.3.30
  * fix(deps): update rust crate nispor to 1.2.16
  * chore(deps): update rust crate tempfile to 3.9.0
  * Use tonic::transport::Uri instead of HTTP
  * chore(deps): update dependency containers/automation_images to v20231208
  * fix(deps): update rust crate tokio to 1.35
  * dhcp-proxy: return actual error instead of generic one
  * dhcp-proxy: skip set gateway if missing
  * bump netlink-packet-route to 0.18.1
  * chore(deps): update rust crate once_cell to 1.19.0
  * fix(deps): update rust crate nispor to 1.2.15
  * fix(deps): update rust crate serde to 1.0.193
  * fix(deps): update rust crate clap to ~4.4.10
  * aardvark: show error if process is in wrong netns
  * aardvark: remove unessesary unlock lockfile calls
  * fix(deps): update rust crate url to 2.5.0
  * Bump working version to v1.10.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1707220800">- Rely only on &lt;major&gt;.&lt;minor&gt; for aardvark-dns requires, even though
  it is released in sync with netavark, relying on patch version is brittle.</changelog>
</package>
<package pkgid="32eed0eb7a08781b67a8c5e202aa6aeb0c03d08c7b71bb3c04d76a959e15495d" name="netavark" arch="aarch64">
  <version epoch="0" ver="1.11.0" rel="150500.3.6.1"/>
  <changelog author="dcermak@suse.com" date="1676030400">- First version of netavark</changelog>
  <changelog author="dcermak@suse.com" date="1678968000">- Bump required rust version &amp; fix libexecdir</changelog>
  <changelog author="danish.prakash@suse.com" date="1681300800">- Update to version 1.6.0:
  * v1.6.0 release
  * Update release notes for v1.6.0
  * dhcp-proxy: fix typo for --activity-timeout
  * chore(deps): update dependency containers/automation_images to v20230405
  * dhcp-proxy: use better error when connection fails
  * add documentation for netavark plugins
  * add stderr example plugin to test stderr passthrough
  * add netavark plugin driver
  * add example error plugin
  * add host-device example plugin
  * plugin: add simple plugin interface
  * netlink: add dump_addresses
  * netlink: add set_link_ns
  * dhcp-proxy: correctly exit &gt; 0 on errors
  * fix(deps): update rust crate tonic to 0.9
  * fix(deps): update rust crate mozim to 0.2.2
  * fix(deps): update rust crate serde to 1.0.159
  * fix(deps): update rust crate netlink-sys to 0.8.5
  * dhcp-proxy: create socket directory only when used
  * dhcp-proxy: do not remove socket when running under systemd
  * Makefile: netavark-dhcp-proxy.service use correct path
  * fix(deps): update rust crate http to 0.2.9
  * chore(deps): update rust crate once_cell to 1.17.1
  * fix(deps): update rust-futures monorepo to 0.3.28
  * fix(deps): update rust crate serde_json to 1.0.95
  * chore(deps): update dependency containers/automation_images to v20230330
  * Disable Dependabot in favor of Renovate
  * chore(deps): update rust crate chrono to 0.4.24
  * build(deps): bump ipnet from 2.7.1 to 2.7.2
  * build(deps): bump serde from 1.0.158 to 1.0.159
  * build(deps): bump serde_json from 1.0.94 to 1.0.95
  * update,main: dont write empty space when no network_dns_servers is given
  * fix(deps): update rust crate tokio to 1.27
  * Quit Leasing when Client disconnects
  * build(deps): bump mozim from 0.2.1 to 0.2.2
  * iptables: fix incorrect debug statement
  * build(deps): bump serde from 1.0.156 to 1.0.158
  * iptables: port fw handle wildcard address correctly
  * chore(deps): update dependency containers/automation_images to v20230320
  * build(deps): bump zbus from 3.11.0 to 3.11.1
  * build(deps): bump anyhow from 1.0.69 to 1.0.70
  * [CI:BUILD] Packit: trigger builds on commit to main branch
  * Cirrus: Invalidate v2 bin cache
  * Include Systemd Files in RPM Package
  * Cirrus: Fix success failing on artifact extraction
  * fix lint issue with new rust version 1.68
  * Cirrus: Update to newer CI VM images
  * build(deps): bump serde from 1.0.152 to 1.0.156
  * combine dhcp-proxy and netavark into one binary
  * update: should allow empty network_dns_servers
  * build(deps): bump libc from 0.2.139 to 0.2.140
  * fix aarch64 ncat flake
  * update to mozim 0.2.1
  * build(deps): bump zbus from 3.10.0 to 3.11.0
  * packit: Update build release tag correctly
  * test: move proto option into run_nc_test()
  * test: add netns pid param to port checks
  * test: import podman code to check for ports
  * cirrus.yaml: add new binaries in art_prep_script
  * fix netavark-dhcp-proxy binary in system unit
  * import netavark-proxy-dhcp tests
  * add build_proxy_client target
  * add netavark-dhcp-proxy to rpm
  * Fix dhcp-proxy build
  * Merge nv-dhcp-proxy into nv
  * fix default route metric test name
  * build(deps): bump tokio from 1.25.0 to 1.26.0
  * Support none parameter on NETAVARK_FW
  * build(deps): bump anyhow from 1.0.68 to 1.0.69
  * Fix typos
  * update netlink-packet-{route,core} to 0.15 and 0.5
  * build(deps): bump serde_json from 1.0.92 to 1.0.93
  * build(deps): bump zbus from 3.8.0 to 3.10.0
  * [CI:BUILD] Packit: initial enablement
  * Allow custom cargo binary path
  * build(deps): bump serde_json from 1.0.91 to 1.0.92
  * Cirrus: Reduce requested CPUs for compile-tasks
  * bump to version 1.0.6-dev
  * build(deps): bump netlink-sys from 0.8.3 to 0.8.4
  * Add renovate.json5</changelog>
  <changelog author="danish.prakash@suse.com" date="1687521600">- Add aardvark-dns as Requires for netavark</changelog>
  <changelog author="danish.prakash@suse.com" date="1688385600">- Update to version 1.7.0:
  * release v1.7.0
  * Update release notes for v1.7.0
  * fix(deps): update rust crate tokio to 1.29
  * netavark: make --config required for dns
  * fix(deps): update rust crate serde_json to 1.0.99
  * fix(deps): update rust crate clap to 4.3.8
  * [CI:BUILD] Packit: add Fedora downstream tasks
  * run cargo update
  * fix(deps): update rust crate serde_json to 1.0.97
  * fix(deps): update rust crate sha2 to 0.10.7
  * fix(deps): update rust crate clap to 4.3.4
  * chore(deps): update dependency containers/automation_images to v20230614
  * fix(deps): update rust crate clap to 4.3.3
  * fix(deps): update rust crate log to 0.4.19
  * aardvark: fix missleading dns disabled log
  * firewall: add NETAVARK_ISOLATION_3 chain for strict isolation
  * docs: fix link to getting started
  * fix(deps): update rust crate serde to 1.0.164
  * netlink: fix incorrect info log for del_route
  * dhcp-proxy: apply new ip address/gateway
  * test-dhcp: fix broekn has_ip() check
  * dhcp-proxy: actually implement renewing leases
  * dhcp-proxy: simplify code
  * dhcp-proxy: drop macaddr dependency
  * dhcp-proxy: remove some unused traits
  * fix(deps): update rust crate zbus to 3.13.1
  * fix(deps): update rust crate clap to 4.3.2
  * chore(deps): update rust crate once_cell to 1.18.0
  * fix(deps): update rust crate url to 2.4.0
  * fix(deps): update rust crate clap to 4.3.1
  * chore(deps): update dependency containers/automation_images to v20230601
  * chore(deps): update rust crate chrono to 0.4.26
  * chore(deps): update rust crate chrono to 0.4.25
  * fix(deps): update rust crate log to 0.4.18
  * chore(deps): update rust crate once_cell to 1.17.2
  * macvlan: add bclim option
  * parse_option(): return option instead of default
  * add no_default_gateway option
  * fix(deps): update rust crate clap to 4.3.0
  * chore(deps): update dependency containers/automation_images to v20230517
  * fix(deps): update rust crate serde to 1.0.163
  * Add ability to add static route
  * fix(deps): update rust crate serde to 1.0.162
  * Cirrus: Update fedora name to match image
  * fix(deps): update rust crate clap to 4.2.7
  * chore(deps): update dependency containers/automation_images to v20230426
  * correct typo in Makefile
  * simplify path printing
  * fix(deps): update rust crate tokio to 1.28
  * aardvark-dns pid: return better errors
  * fix comment in Subnet definition
  * aardvark: no error when aardvark config is not there
  * fix(deps): update rust crate zbus to 3.12.0
  * fix(deps): update rust crate clap to 4.2.4
  * fix(deps): update rust crate clap to 4.2.2
  * fix(deps): update rust crate serde_json to 1.0.96
  * update clap to v4
  * fix(deps): update rust crate serde to 1.0.160
  * bump to v1.7.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1689076800">- Disable restricting builds only for tier1 platforms
  i.e. only for x86_64 and aarch64 and enable for all.</changelog>
  <changelog author="danish.prakash@suse.com" date="1695902400">- Update to version 1.8.0:
  * Release v1.8.0
  * update release notes for v1.8.0
  * run cargo update
  * Add vrf support for bridges
  * Packit: switch to @containers/packit-build team for copr failure notification comments
  * fix(deps): update rust crate nispor to 1.2.14
  * [CI:BUILD] Packit: tag @lsm5 on copr build failures
  * chore(deps): update rust crate chrono to 0.4.31
  * fix(deps): update rust crate serde_json to 1.0.107
  * rust io safety: convert RawFd to BorrowedFd&lt;&gt;
  * bump nix to 0.27.1
  * chore(deps): update rust crate chrono to 0.4.30
  * fix(deps): update rust crate serde_json to 1.0.106
  * chore(deps): update rust crate chrono to 0.4.29
  * fix(deps): update rust crate netlink-packet-route to 0.17.1
  * Bump tonic and prost
  * Update container image to F38
  * Add ACCEPT rules in firewall for bridge network with internal dns.
  * chore(deps): update rust crate tonic-build to 0.10
  * fix(deps): update rust crate nispor to 1.2.13
  * fix(deps): update rust crate serde to 1.0.188
  * Fix clippy warnings about formatting
  * update chrono crate
  * fix(deps): update rust crate url to 2.4.1
  * Add protoc dependency to README
  * [CI:BUILD] rpm: spdx compatible license field
  * fix(deps): update rust crate tokio to 1.32
  * chore(deps): update dependency containers/automation_images to v20230816
  * fix(deps): update rust crate serde_json to 1.0.105
  * fix(deps): update rust crate tokio to 1.31
  * fix(deps): update rust crate log to 0.4.20
  * run cargo update
  * update tonic-build to 0.9.2
  * bump rust edition to 2021
  * iptables: drop invalid packages
  * fix(deps): update rust crate tokio to 1.30
  * docs: Convert markdown with go-md2man instead of mandown
  * fix(deps): update rust crate clap to 4.3.21
  * packit: Build PRs into default packit COPRs
  * chore(deps): update dependency containers/automation_images to v20230807
  * fix(deps): update rust crate serde to 1.0.183
  * fix(deps): update rust crate serde to 1.0.181
  * fix(deps): update rust crate serde to 1.0.180
  * fix(deps): update rust crate serde_json to 1.0.104
  * fix(deps): update rust crate serde to 1.0.179
  * fix(deps): update rust crate serde to 1.0.176
  * fix(deps): update rust crate clap to 4.3.19
  * fix(deps): update rust crate serde to 1.0.175
  * fix(deps): update rust crate clap to 4.3.17
  * fix(deps): update rust crate clap to 4.3.15
  * fix(deps): update rust crate clap to 4.3.12
  * fix(deps): update rust crate serde_json to 1.0.103
  * [CI:BUILD] Packit: remove pre-sync action
  * fix(deps): update rust crate serde_json to 1.0.102
  * fix(deps): update rust crate nispor to 1.2.12
  * macvlan: use netlink type for bclim
  * bump netlink deps
  * fix(deps): update rust crate serde to 1.0.171
  * fix(deps): update rust crate serde to 1.0.167
  * fix(deps): update rust crate clap to 4.3.11
  * fix(deps): update rust crate serde to 1.0.166
  * fix(deps): update rust crate serde_json to 1.0.100
  * iptables: improve error when ip6?tables commands are missing
  * fix(deps): update rust crate clap to 4.3.10
  * fix(deps): update rust crate zbus to 3.14.1
  * [CI:BUILD] RPM: Fix ELN build and cleanup spec
  * bump to v1.8.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701345600">- Update to version 1.9.0:
  * v1.9.0 Release
  * v1.9.0 Release notes
  * test: fix syntax problem in helpers.bash
  * run cargo update
  * use OsString/Path over String for file paths
  * chore(deps): update dependency containers/automation_images to v20231116
  * firewalld-reload: fix CI tests
  * firewalld-reload: prevent race which could leak fw rules
  * fix(deps): update rust crate clap to ~4.4.8
  * CI: skip broken firewalld test
  * fix(deps): update rust crate http to 0.2.11
  * rpm: add netavark-firewalld-reload.service to spec
  * firewalld-reload: add integration tests
  * firewall/state: make sure to ignore enoent on read
  * firewall-reload: integrate actual logic to reload rules
  * firewall/state: improve error messages
  * firewall: add state functions to serialize configs
  * firewalld: fix lint errors with rust v1.73
  * firewall: do not use full Network in NetworkStruct
  * firewall: add dns_port to SetupNetwork
  * add firewalld-reload subcommand
  * fix(deps): update rust crate http to 0.2.10
  * fix(deps): update rust crate env_logger to 0.10.1
  * fix(deps): update rust crate tokio to 1.34
  * Update rust container build files
  * bridge: force static mac on bridge interface
  * fix(deps): update rust crate futures-core to 0.3.29
  * fix(deps): update rust crate serde to 1.0.190
  * fix(deps): update rust crate serde_json to 1.0.108
  * fix(deps): update rust crate sysctl to 0.5.5
  * fix(deps): update rust-futures monorepo to 0.3.29
  * CI: Drop CI VM distro name
  * chore(deps): update dependency containers/automation_images to v20231004
  * fix(deps): update rust crate tokio to 1.33
  * build-sys: Filter to tier 2 Linux declaratively
  * fix(deps): update rust crate sha2 to 0.10.8
  * fix podman.io community link
  * Bump to v1.9.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1706788800">- Update to version 1.10.2:
  * Release v1.10.2
  * Release notes for v1.10.2
  * [CI:BUILD] Packit/rpm: fix aardvark-dns handling
  * Do not perform network namespace detection on AV update
  * Release v1.10.1
  * Updated release notes for v1.10.1
  * update to nftables release 0.3 from crates.io
  * DISTRO_PACKAGE: fix incorrect vendored tar archive URL
  * Bump to 1.11.0-dev
  * Release 1.10.0
  * Release notes for 1.10.0
  * RPM: update .cargo/config before building
  * Add support for isolation to the nftables driver
  * build(deps): bump h2 from 0.3.22 to 0.3.24
  * chore(deps): update rust crate chrono to 0.4.32
  * fix(deps): update rust crate env_logger to 0.11.0
  * chore(deps): update dependency containers/automation_images to v20240102
  * Bump nftables-rs to latest commit
  * Netavark: nftables support
  * fix(deps): update rust crate serde_json to 1.0.111
  * feat: added the --firewall-driver option
  * Document how to generate a code coverage report for netavark
  * fix(deps): update rust crate clap to ~4.4.12
  * fix(deps): update rust crate serde_json to 1.0.110
  * fix(deps): update rust-futures monorepo to 0.3.30
  * fix(deps): update rust crate nispor to 1.2.16
  * chore(deps): update rust crate tempfile to 3.9.0
  * Use tonic::transport::Uri instead of HTTP
  * chore(deps): update dependency containers/automation_images to v20231208
  * fix(deps): update rust crate tokio to 1.35
  * dhcp-proxy: return actual error instead of generic one
  * dhcp-proxy: skip set gateway if missing
  * bump netlink-packet-route to 0.18.1
  * chore(deps): update rust crate once_cell to 1.19.0
  * fix(deps): update rust crate nispor to 1.2.15
  * fix(deps): update rust crate serde to 1.0.193
  * fix(deps): update rust crate clap to ~4.4.10
  * aardvark: show error if process is in wrong netns
  * aardvark: remove unessesary unlock lockfile calls
  * fix(deps): update rust crate url to 2.5.0
  * Bump working version to v1.10.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1707220800">- Rely only on &lt;major&gt;.&lt;minor&gt; for aardvark-dns requires, even though
  it is released in sync with netavark, relying on patch version is brittle.</changelog>
  <changelog author="danish.prakash@suse.com" date="1707825600">- Update to version 1.10.3:
  * v1.10.3
  * fix netavark update to not start a new aardvark-dns</changelog>
  <changelog author="danish.prakash@suse.com" date="1717416000">- Remove redundant source: cargo_config
- Update to version 1.11.0:
  * Release v1.11.0
  * Update release notes for 1.11.0
  * update netlink-packet-route to 0.20.0
  * run cargo update
  * fix: remove extra / in make install and uninstall
  * chore(deps): update dependency containers/automation_images to v20240529
  * fix(deps): update rust crate nix to 0.29.0
  * fix(deps): update rust crate nispor to 1.2.19
  * fix(deps): update rust crate anyhow to 1.0.86
  * fix(deps): update rust crate anyhow to 1.0.85
  * [skip-ci] Packit: do not create dup jobs on podman-next
  * fix(deps): update rust crate anyhow to 1.0.84
  * [skip-ci] RPM: use default __cargo macro across all envs
  * [skip-ci] RPM: switch default firewall to nftables on EL10+
  * chore(deps): update dependency containers/automation_images to v20240513
  * Add conditional compilation of default firewall driver
  * fix(deps): update rust crate serde_json to 1.0.117
  * fix new clippy warnings
  * Update CI image to fedora 40
  * fix ncat sctp tests
  * fix(deps): update rust crate anyhow to 1.0.83
  * build(deps): bump h2 from 0.3.25 to 0.3.26
  * [skip-ci] Packit: distinct `-rhel` packages value
  * [skip-ci] Packit: enable c10s downstream sync
  * fix(deps): update rust crate libc to 0.2.154
  * fix(deps): update rust crate ipnet to 2.9.0
  * fix(deps): update rust crate tower to 0.4.13
  * fix(deps): update rust crate tokio-stream to 0.1.15
  * fix(deps): update rust crate prost to 0.12.4
  * fix(deps): update rust crate iptables to 0.5.1
  * [skip-ci] Packit: remove el8 jobs
  * fix(deps): update rust crate anyhow to 1.0.82
  * fix(deps): update rust crate serde to 1.0.199
  * Add suffix to Aardvark internal network filenames
  * fix port forward with strict RPF and multi networks
  * renovate: stop rebasing PRs automatically
  * chore(deps): update rust crate chrono to 0.4.38
  * fix(deps): update rust crate serde_json to 1.0.116
  * fix(deps): update rust crate netlink-sys to 0.8.6
  * nftables: only dump netavark table rules
  * update nftables to 0.4
  * fix aardvark-dns netns check
  * fix(deps): update rust crate tokio to 1.37
  * fix(deps): update rust crate netlink-packet-route to 0.19.0
  * Update to nix-0.28.0
  * fix(deps): update rust crate mozim to 0.2.3
  * fix(deps): update rust crate nispor to 1.2.18
  * Update chrono
  * fix(deps): update rust crate serde_json to 1.0.115
  * build(deps): bump mio from 0.8.9 to 0.8.11
  * [skip-ci] rpm: aardvark-dns is a hard dep across the board
  * Update Rust crate env_logger to 0.11.3
  * Update Rust crate serde to 1.0.197
  * Update Rust crate tempfile to 3.10.1
  * Update Rust crate log to 0.4.21
  * Update Rust crate zbus to 3.15.2
  * Update Rust crate serde_json to 1.0.114
  * Update Rust crate env_logger to 0.11.2
  * Update Rust crate chrono to 0.4.34
  * Update Rust crate tonic-build to 0.11
  * Update Rust crate tonic to 0.11
  * fix netavark update to not start a new aardvark-dns
  * Update Rust crate tempfile to 3.10.0
  * Update Rust crate zbus to 3.15.0
  * Update Rust crate tokio to 1.36
  * Update Rust crate chrono to 0.4.33
  * Do not perform network namespace detection on AV update
  * [CI:BUILD] Packit/rpm: fix aardvark-dns handling
  * Update Rust crate serde_json to 1.0.113
  * Update Rust crate serde_json to 1.0.112
  * Update Rust crate env_logger to 0.11.1
  * update README with nftables support
  * Bump to v1.11.0-dev
  * perf-netavark: accept fw driver as argument
  * perf-netavark: fix missing --config arg</changelog>
</package>
<package pkgid="25f1c279a70440cf215822115fd20e65ae4d4210379da2a8dba9108daed615a2" name="netavark" arch="s390x">
  <version epoch="0" ver="1.11.0" rel="150500.3.6.1"/>
  <changelog author="dcermak@suse.com" date="1676030400">- First version of netavark</changelog>
  <changelog author="dcermak@suse.com" date="1678968000">- Bump required rust version &amp; fix libexecdir</changelog>
  <changelog author="danish.prakash@suse.com" date="1681300800">- Update to version 1.6.0:
  * v1.6.0 release
  * Update release notes for v1.6.0
  * dhcp-proxy: fix typo for --activity-timeout
  * chore(deps): update dependency containers/automation_images to v20230405
  * dhcp-proxy: use better error when connection fails
  * add documentation for netavark plugins
  * add stderr example plugin to test stderr passthrough
  * add netavark plugin driver
  * add example error plugin
  * add host-device example plugin
  * plugin: add simple plugin interface
  * netlink: add dump_addresses
  * netlink: add set_link_ns
  * dhcp-proxy: correctly exit &gt; 0 on errors
  * fix(deps): update rust crate tonic to 0.9
  * fix(deps): update rust crate mozim to 0.2.2
  * fix(deps): update rust crate serde to 1.0.159
  * fix(deps): update rust crate netlink-sys to 0.8.5
  * dhcp-proxy: create socket directory only when used
  * dhcp-proxy: do not remove socket when running under systemd
  * Makefile: netavark-dhcp-proxy.service use correct path
  * fix(deps): update rust crate http to 0.2.9
  * chore(deps): update rust crate once_cell to 1.17.1
  * fix(deps): update rust-futures monorepo to 0.3.28
  * fix(deps): update rust crate serde_json to 1.0.95
  * chore(deps): update dependency containers/automation_images to v20230330
  * Disable Dependabot in favor of Renovate
  * chore(deps): update rust crate chrono to 0.4.24
  * build(deps): bump ipnet from 2.7.1 to 2.7.2
  * build(deps): bump serde from 1.0.158 to 1.0.159
  * build(deps): bump serde_json from 1.0.94 to 1.0.95
  * update,main: dont write empty space when no network_dns_servers is given
  * fix(deps): update rust crate tokio to 1.27
  * Quit Leasing when Client disconnects
  * build(deps): bump mozim from 0.2.1 to 0.2.2
  * iptables: fix incorrect debug statement
  * build(deps): bump serde from 1.0.156 to 1.0.158
  * iptables: port fw handle wildcard address correctly
  * chore(deps): update dependency containers/automation_images to v20230320
  * build(deps): bump zbus from 3.11.0 to 3.11.1
  * build(deps): bump anyhow from 1.0.69 to 1.0.70
  * [CI:BUILD] Packit: trigger builds on commit to main branch
  * Cirrus: Invalidate v2 bin cache
  * Include Systemd Files in RPM Package
  * Cirrus: Fix success failing on artifact extraction
  * fix lint issue with new rust version 1.68
  * Cirrus: Update to newer CI VM images
  * build(deps): bump serde from 1.0.152 to 1.0.156
  * combine dhcp-proxy and netavark into one binary
  * update: should allow empty network_dns_servers
  * build(deps): bump libc from 0.2.139 to 0.2.140
  * fix aarch64 ncat flake
  * update to mozim 0.2.1
  * build(deps): bump zbus from 3.10.0 to 3.11.0
  * packit: Update build release tag correctly
  * test: move proto option into run_nc_test()
  * test: add netns pid param to port checks
  * test: import podman code to check for ports
  * cirrus.yaml: add new binaries in art_prep_script
  * fix netavark-dhcp-proxy binary in system unit
  * import netavark-proxy-dhcp tests
  * add build_proxy_client target
  * add netavark-dhcp-proxy to rpm
  * Fix dhcp-proxy build
  * Merge nv-dhcp-proxy into nv
  * fix default route metric test name
  * build(deps): bump tokio from 1.25.0 to 1.26.0
  * Support none parameter on NETAVARK_FW
  * build(deps): bump anyhow from 1.0.68 to 1.0.69
  * Fix typos
  * update netlink-packet-{route,core} to 0.15 and 0.5
  * build(deps): bump serde_json from 1.0.92 to 1.0.93
  * build(deps): bump zbus from 3.8.0 to 3.10.0
  * [CI:BUILD] Packit: initial enablement
  * Allow custom cargo binary path
  * build(deps): bump serde_json from 1.0.91 to 1.0.92
  * Cirrus: Reduce requested CPUs for compile-tasks
  * bump to version 1.0.6-dev
  * build(deps): bump netlink-sys from 0.8.3 to 0.8.4
  * Add renovate.json5</changelog>
  <changelog author="danish.prakash@suse.com" date="1687521600">- Add aardvark-dns as Requires for netavark</changelog>
  <changelog author="danish.prakash@suse.com" date="1688385600">- Update to version 1.7.0:
  * release v1.7.0
  * Update release notes for v1.7.0
  * fix(deps): update rust crate tokio to 1.29
  * netavark: make --config required for dns
  * fix(deps): update rust crate serde_json to 1.0.99
  * fix(deps): update rust crate clap to 4.3.8
  * [CI:BUILD] Packit: add Fedora downstream tasks
  * run cargo update
  * fix(deps): update rust crate serde_json to 1.0.97
  * fix(deps): update rust crate sha2 to 0.10.7
  * fix(deps): update rust crate clap to 4.3.4
  * chore(deps): update dependency containers/automation_images to v20230614
  * fix(deps): update rust crate clap to 4.3.3
  * fix(deps): update rust crate log to 0.4.19
  * aardvark: fix missleading dns disabled log
  * firewall: add NETAVARK_ISOLATION_3 chain for strict isolation
  * docs: fix link to getting started
  * fix(deps): update rust crate serde to 1.0.164
  * netlink: fix incorrect info log for del_route
  * dhcp-proxy: apply new ip address/gateway
  * test-dhcp: fix broekn has_ip() check
  * dhcp-proxy: actually implement renewing leases
  * dhcp-proxy: simplify code
  * dhcp-proxy: drop macaddr dependency
  * dhcp-proxy: remove some unused traits
  * fix(deps): update rust crate zbus to 3.13.1
  * fix(deps): update rust crate clap to 4.3.2
  * chore(deps): update rust crate once_cell to 1.18.0
  * fix(deps): update rust crate url to 2.4.0
  * fix(deps): update rust crate clap to 4.3.1
  * chore(deps): update dependency containers/automation_images to v20230601
  * chore(deps): update rust crate chrono to 0.4.26
  * chore(deps): update rust crate chrono to 0.4.25
  * fix(deps): update rust crate log to 0.4.18
  * chore(deps): update rust crate once_cell to 1.17.2
  * macvlan: add bclim option
  * parse_option(): return option instead of default
  * add no_default_gateway option
  * fix(deps): update rust crate clap to 4.3.0
  * chore(deps): update dependency containers/automation_images to v20230517
  * fix(deps): update rust crate serde to 1.0.163
  * Add ability to add static route
  * fix(deps): update rust crate serde to 1.0.162
  * Cirrus: Update fedora name to match image
  * fix(deps): update rust crate clap to 4.2.7
  * chore(deps): update dependency containers/automation_images to v20230426
  * correct typo in Makefile
  * simplify path printing
  * fix(deps): update rust crate tokio to 1.28
  * aardvark-dns pid: return better errors
  * fix comment in Subnet definition
  * aardvark: no error when aardvark config is not there
  * fix(deps): update rust crate zbus to 3.12.0
  * fix(deps): update rust crate clap to 4.2.4
  * fix(deps): update rust crate clap to 4.2.2
  * fix(deps): update rust crate serde_json to 1.0.96
  * update clap to v4
  * fix(deps): update rust crate serde to 1.0.160
  * bump to v1.7.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1689076800">- Disable restricting builds only for tier1 platforms
  i.e. only for x86_64 and aarch64 and enable for all.</changelog>
  <changelog author="danish.prakash@suse.com" date="1695902400">- Update to version 1.8.0:
  * Release v1.8.0
  * update release notes for v1.8.0
  * run cargo update
  * Add vrf support for bridges
  * Packit: switch to @containers/packit-build team for copr failure notification comments
  * fix(deps): update rust crate nispor to 1.2.14
  * [CI:BUILD] Packit: tag @lsm5 on copr build failures
  * chore(deps): update rust crate chrono to 0.4.31
  * fix(deps): update rust crate serde_json to 1.0.107
  * rust io safety: convert RawFd to BorrowedFd&lt;&gt;
  * bump nix to 0.27.1
  * chore(deps): update rust crate chrono to 0.4.30
  * fix(deps): update rust crate serde_json to 1.0.106
  * chore(deps): update rust crate chrono to 0.4.29
  * fix(deps): update rust crate netlink-packet-route to 0.17.1
  * Bump tonic and prost
  * Update container image to F38
  * Add ACCEPT rules in firewall for bridge network with internal dns.
  * chore(deps): update rust crate tonic-build to 0.10
  * fix(deps): update rust crate nispor to 1.2.13
  * fix(deps): update rust crate serde to 1.0.188
  * Fix clippy warnings about formatting
  * update chrono crate
  * fix(deps): update rust crate url to 2.4.1
  * Add protoc dependency to README
  * [CI:BUILD] rpm: spdx compatible license field
  * fix(deps): update rust crate tokio to 1.32
  * chore(deps): update dependency containers/automation_images to v20230816
  * fix(deps): update rust crate serde_json to 1.0.105
  * fix(deps): update rust crate tokio to 1.31
  * fix(deps): update rust crate log to 0.4.20
  * run cargo update
  * update tonic-build to 0.9.2
  * bump rust edition to 2021
  * iptables: drop invalid packages
  * fix(deps): update rust crate tokio to 1.30
  * docs: Convert markdown with go-md2man instead of mandown
  * fix(deps): update rust crate clap to 4.3.21
  * packit: Build PRs into default packit COPRs
  * chore(deps): update dependency containers/automation_images to v20230807
  * fix(deps): update rust crate serde to 1.0.183
  * fix(deps): update rust crate serde to 1.0.181
  * fix(deps): update rust crate serde to 1.0.180
  * fix(deps): update rust crate serde_json to 1.0.104
  * fix(deps): update rust crate serde to 1.0.179
  * fix(deps): update rust crate serde to 1.0.176
  * fix(deps): update rust crate clap to 4.3.19
  * fix(deps): update rust crate serde to 1.0.175
  * fix(deps): update rust crate clap to 4.3.17
  * fix(deps): update rust crate clap to 4.3.15
  * fix(deps): update rust crate clap to 4.3.12
  * fix(deps): update rust crate serde_json to 1.0.103
  * [CI:BUILD] Packit: remove pre-sync action
  * fix(deps): update rust crate serde_json to 1.0.102
  * fix(deps): update rust crate nispor to 1.2.12
  * macvlan: use netlink type for bclim
  * bump netlink deps
  * fix(deps): update rust crate serde to 1.0.171
  * fix(deps): update rust crate serde to 1.0.167
  * fix(deps): update rust crate clap to 4.3.11
  * fix(deps): update rust crate serde to 1.0.166
  * fix(deps): update rust crate serde_json to 1.0.100
  * iptables: improve error when ip6?tables commands are missing
  * fix(deps): update rust crate clap to 4.3.10
  * fix(deps): update rust crate zbus to 3.14.1
  * [CI:BUILD] RPM: Fix ELN build and cleanup spec
  * bump to v1.8.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701345600">- Update to version 1.9.0:
  * v1.9.0 Release
  * v1.9.0 Release notes
  * test: fix syntax problem in helpers.bash
  * run cargo update
  * use OsString/Path over String for file paths
  * chore(deps): update dependency containers/automation_images to v20231116
  * firewalld-reload: fix CI tests
  * firewalld-reload: prevent race which could leak fw rules
  * fix(deps): update rust crate clap to ~4.4.8
  * CI: skip broken firewalld test
  * fix(deps): update rust crate http to 0.2.11
  * rpm: add netavark-firewalld-reload.service to spec
  * firewalld-reload: add integration tests
  * firewall/state: make sure to ignore enoent on read
  * firewall-reload: integrate actual logic to reload rules
  * firewall/state: improve error messages
  * firewall: add state functions to serialize configs
  * firewalld: fix lint errors with rust v1.73
  * firewall: do not use full Network in NetworkStruct
  * firewall: add dns_port to SetupNetwork
  * add firewalld-reload subcommand
  * fix(deps): update rust crate http to 0.2.10
  * fix(deps): update rust crate env_logger to 0.10.1
  * fix(deps): update rust crate tokio to 1.34
  * Update rust container build files
  * bridge: force static mac on bridge interface
  * fix(deps): update rust crate futures-core to 0.3.29
  * fix(deps): update rust crate serde to 1.0.190
  * fix(deps): update rust crate serde_json to 1.0.108
  * fix(deps): update rust crate sysctl to 0.5.5
  * fix(deps): update rust-futures monorepo to 0.3.29
  * CI: Drop CI VM distro name
  * chore(deps): update dependency containers/automation_images to v20231004
  * fix(deps): update rust crate tokio to 1.33
  * build-sys: Filter to tier 2 Linux declaratively
  * fix(deps): update rust crate sha2 to 0.10.8
  * fix podman.io community link
  * Bump to v1.9.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1706788800">- Update to version 1.10.2:
  * Release v1.10.2
  * Release notes for v1.10.2
  * [CI:BUILD] Packit/rpm: fix aardvark-dns handling
  * Do not perform network namespace detection on AV update
  * Release v1.10.1
  * Updated release notes for v1.10.1
  * update to nftables release 0.3 from crates.io
  * DISTRO_PACKAGE: fix incorrect vendored tar archive URL
  * Bump to 1.11.0-dev
  * Release 1.10.0
  * Release notes for 1.10.0
  * RPM: update .cargo/config before building
  * Add support for isolation to the nftables driver
  * build(deps): bump h2 from 0.3.22 to 0.3.24
  * chore(deps): update rust crate chrono to 0.4.32
  * fix(deps): update rust crate env_logger to 0.11.0
  * chore(deps): update dependency containers/automation_images to v20240102
  * Bump nftables-rs to latest commit
  * Netavark: nftables support
  * fix(deps): update rust crate serde_json to 1.0.111
  * feat: added the --firewall-driver option
  * Document how to generate a code coverage report for netavark
  * fix(deps): update rust crate clap to ~4.4.12
  * fix(deps): update rust crate serde_json to 1.0.110
  * fix(deps): update rust-futures monorepo to 0.3.30
  * fix(deps): update rust crate nispor to 1.2.16
  * chore(deps): update rust crate tempfile to 3.9.0
  * Use tonic::transport::Uri instead of HTTP
  * chore(deps): update dependency containers/automation_images to v20231208
  * fix(deps): update rust crate tokio to 1.35
  * dhcp-proxy: return actual error instead of generic one
  * dhcp-proxy: skip set gateway if missing
  * bump netlink-packet-route to 0.18.1
  * chore(deps): update rust crate once_cell to 1.19.0
  * fix(deps): update rust crate nispor to 1.2.15
  * fix(deps): update rust crate serde to 1.0.193
  * fix(deps): update rust crate clap to ~4.4.10
  * aardvark: show error if process is in wrong netns
  * aardvark: remove unessesary unlock lockfile calls
  * fix(deps): update rust crate url to 2.5.0
  * Bump working version to v1.10.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1707220800">- Rely only on &lt;major&gt;.&lt;minor&gt; for aardvark-dns requires, even though
  it is released in sync with netavark, relying on patch version is brittle.</changelog>
  <changelog author="danish.prakash@suse.com" date="1707825600">- Update to version 1.10.3:
  * v1.10.3
  * fix netavark update to not start a new aardvark-dns</changelog>
  <changelog author="danish.prakash@suse.com" date="1717416000">- Remove redundant source: cargo_config
- Update to version 1.11.0:
  * Release v1.11.0
  * Update release notes for 1.11.0
  * update netlink-packet-route to 0.20.0
  * run cargo update
  * fix: remove extra / in make install and uninstall
  * chore(deps): update dependency containers/automation_images to v20240529
  * fix(deps): update rust crate nix to 0.29.0
  * fix(deps): update rust crate nispor to 1.2.19
  * fix(deps): update rust crate anyhow to 1.0.86
  * fix(deps): update rust crate anyhow to 1.0.85
  * [skip-ci] Packit: do not create dup jobs on podman-next
  * fix(deps): update rust crate anyhow to 1.0.84
  * [skip-ci] RPM: use default __cargo macro across all envs
  * [skip-ci] RPM: switch default firewall to nftables on EL10+
  * chore(deps): update dependency containers/automation_images to v20240513
  * Add conditional compilation of default firewall driver
  * fix(deps): update rust crate serde_json to 1.0.117
  * fix new clippy warnings
  * Update CI image to fedora 40
  * fix ncat sctp tests
  * fix(deps): update rust crate anyhow to 1.0.83
  * build(deps): bump h2 from 0.3.25 to 0.3.26
  * [skip-ci] Packit: distinct `-rhel` packages value
  * [skip-ci] Packit: enable c10s downstream sync
  * fix(deps): update rust crate libc to 0.2.154
  * fix(deps): update rust crate ipnet to 2.9.0
  * fix(deps): update rust crate tower to 0.4.13
  * fix(deps): update rust crate tokio-stream to 0.1.15
  * fix(deps): update rust crate prost to 0.12.4
  * fix(deps): update rust crate iptables to 0.5.1
  * [skip-ci] Packit: remove el8 jobs
  * fix(deps): update rust crate anyhow to 1.0.82
  * fix(deps): update rust crate serde to 1.0.199
  * Add suffix to Aardvark internal network filenames
  * fix port forward with strict RPF and multi networks
  * renovate: stop rebasing PRs automatically
  * chore(deps): update rust crate chrono to 0.4.38
  * fix(deps): update rust crate serde_json to 1.0.116
  * fix(deps): update rust crate netlink-sys to 0.8.6
  * nftables: only dump netavark table rules
  * update nftables to 0.4
  * fix aardvark-dns netns check
  * fix(deps): update rust crate tokio to 1.37
  * fix(deps): update rust crate netlink-packet-route to 0.19.0
  * Update to nix-0.28.0
  * fix(deps): update rust crate mozim to 0.2.3
  * fix(deps): update rust crate nispor to 1.2.18
  * Update chrono
  * fix(deps): update rust crate serde_json to 1.0.115
  * build(deps): bump mio from 0.8.9 to 0.8.11
  * [skip-ci] rpm: aardvark-dns is a hard dep across the board
  * Update Rust crate env_logger to 0.11.3
  * Update Rust crate serde to 1.0.197
  * Update Rust crate tempfile to 3.10.1
  * Update Rust crate log to 0.4.21
  * Update Rust crate zbus to 3.15.2
  * Update Rust crate serde_json to 1.0.114
  * Update Rust crate env_logger to 0.11.2
  * Update Rust crate chrono to 0.4.34
  * Update Rust crate tonic-build to 0.11
  * Update Rust crate tonic to 0.11
  * fix netavark update to not start a new aardvark-dns
  * Update Rust crate tempfile to 3.10.0
  * Update Rust crate zbus to 3.15.0
  * Update Rust crate tokio to 1.36
  * Update Rust crate chrono to 0.4.33
  * Do not perform network namespace detection on AV update
  * [CI:BUILD] Packit/rpm: fix aardvark-dns handling
  * Update Rust crate serde_json to 1.0.113
  * Update Rust crate serde_json to 1.0.112
  * Update Rust crate env_logger to 0.11.1
  * update README with nftables support
  * Bump to v1.11.0-dev
  * perf-netavark: accept fw driver as argument
  * perf-netavark: fix missing --config arg</changelog>
</package>
<package pkgid="3f72c7d4168dd872bc5099236408bda619bec8b08f0d12dc78cdb40686089334" name="netavark" arch="src">
  <version epoch="0" ver="1.11.0" rel="150500.3.6.1"/>
  <changelog author="dcermak@suse.com" date="1676030400">- First version of netavark</changelog>
  <changelog author="dcermak@suse.com" date="1678968000">- Bump required rust version &amp; fix libexecdir</changelog>
  <changelog author="danish.prakash@suse.com" date="1681300800">- Update to version 1.6.0:
  * v1.6.0 release
  * Update release notes for v1.6.0
  * dhcp-proxy: fix typo for --activity-timeout
  * chore(deps): update dependency containers/automation_images to v20230405
  * dhcp-proxy: use better error when connection fails
  * add documentation for netavark plugins
  * add stderr example plugin to test stderr passthrough
  * add netavark plugin driver
  * add example error plugin
  * add host-device example plugin
  * plugin: add simple plugin interface
  * netlink: add dump_addresses
  * netlink: add set_link_ns
  * dhcp-proxy: correctly exit &gt; 0 on errors
  * fix(deps): update rust crate tonic to 0.9
  * fix(deps): update rust crate mozim to 0.2.2
  * fix(deps): update rust crate serde to 1.0.159
  * fix(deps): update rust crate netlink-sys to 0.8.5
  * dhcp-proxy: create socket directory only when used
  * dhcp-proxy: do not remove socket when running under systemd
  * Makefile: netavark-dhcp-proxy.service use correct path
  * fix(deps): update rust crate http to 0.2.9
  * chore(deps): update rust crate once_cell to 1.17.1
  * fix(deps): update rust-futures monorepo to 0.3.28
  * fix(deps): update rust crate serde_json to 1.0.95
  * chore(deps): update dependency containers/automation_images to v20230330
  * Disable Dependabot in favor of Renovate
  * chore(deps): update rust crate chrono to 0.4.24
  * build(deps): bump ipnet from 2.7.1 to 2.7.2
  * build(deps): bump serde from 1.0.158 to 1.0.159
  * build(deps): bump serde_json from 1.0.94 to 1.0.95
  * update,main: dont write empty space when no network_dns_servers is given
  * fix(deps): update rust crate tokio to 1.27
  * Quit Leasing when Client disconnects
  * build(deps): bump mozim from 0.2.1 to 0.2.2
  * iptables: fix incorrect debug statement
  * build(deps): bump serde from 1.0.156 to 1.0.158
  * iptables: port fw handle wildcard address correctly
  * chore(deps): update dependency containers/automation_images to v20230320
  * build(deps): bump zbus from 3.11.0 to 3.11.1
  * build(deps): bump anyhow from 1.0.69 to 1.0.70
  * [CI:BUILD] Packit: trigger builds on commit to main branch
  * Cirrus: Invalidate v2 bin cache
  * Include Systemd Files in RPM Package
  * Cirrus: Fix success failing on artifact extraction
  * fix lint issue with new rust version 1.68
  * Cirrus: Update to newer CI VM images
  * build(deps): bump serde from 1.0.152 to 1.0.156
  * combine dhcp-proxy and netavark into one binary
  * update: should allow empty network_dns_servers
  * build(deps): bump libc from 0.2.139 to 0.2.140
  * fix aarch64 ncat flake
  * update to mozim 0.2.1
  * build(deps): bump zbus from 3.10.0 to 3.11.0
  * packit: Update build release tag correctly
  * test: move proto option into run_nc_test()
  * test: add netns pid param to port checks
  * test: import podman code to check for ports
  * cirrus.yaml: add new binaries in art_prep_script
  * fix netavark-dhcp-proxy binary in system unit
  * import netavark-proxy-dhcp tests
  * add build_proxy_client target
  * add netavark-dhcp-proxy to rpm
  * Fix dhcp-proxy build
  * Merge nv-dhcp-proxy into nv
  * fix default route metric test name
  * build(deps): bump tokio from 1.25.0 to 1.26.0
  * Support none parameter on NETAVARK_FW
  * build(deps): bump anyhow from 1.0.68 to 1.0.69
  * Fix typos
  * update netlink-packet-{route,core} to 0.15 and 0.5
  * build(deps): bump serde_json from 1.0.92 to 1.0.93
  * build(deps): bump zbus from 3.8.0 to 3.10.0
  * [CI:BUILD] Packit: initial enablement
  * Allow custom cargo binary path
  * build(deps): bump serde_json from 1.0.91 to 1.0.92
  * Cirrus: Reduce requested CPUs for compile-tasks
  * bump to version 1.0.6-dev
  * build(deps): bump netlink-sys from 0.8.3 to 0.8.4
  * Add renovate.json5</changelog>
  <changelog author="danish.prakash@suse.com" date="1687521600">- Add aardvark-dns as Requires for netavark</changelog>
  <changelog author="danish.prakash@suse.com" date="1688385600">- Update to version 1.7.0:
  * release v1.7.0
  * Update release notes for v1.7.0
  * fix(deps): update rust crate tokio to 1.29
  * netavark: make --config required for dns
  * fix(deps): update rust crate serde_json to 1.0.99
  * fix(deps): update rust crate clap to 4.3.8
  * [CI:BUILD] Packit: add Fedora downstream tasks
  * run cargo update
  * fix(deps): update rust crate serde_json to 1.0.97
  * fix(deps): update rust crate sha2 to 0.10.7
  * fix(deps): update rust crate clap to 4.3.4
  * chore(deps): update dependency containers/automation_images to v20230614
  * fix(deps): update rust crate clap to 4.3.3
  * fix(deps): update rust crate log to 0.4.19
  * aardvark: fix missleading dns disabled log
  * firewall: add NETAVARK_ISOLATION_3 chain for strict isolation
  * docs: fix link to getting started
  * fix(deps): update rust crate serde to 1.0.164
  * netlink: fix incorrect info log for del_route
  * dhcp-proxy: apply new ip address/gateway
  * test-dhcp: fix broekn has_ip() check
  * dhcp-proxy: actually implement renewing leases
  * dhcp-proxy: simplify code
  * dhcp-proxy: drop macaddr dependency
  * dhcp-proxy: remove some unused traits
  * fix(deps): update rust crate zbus to 3.13.1
  * fix(deps): update rust crate clap to 4.3.2
  * chore(deps): update rust crate once_cell to 1.18.0
  * fix(deps): update rust crate url to 2.4.0
  * fix(deps): update rust crate clap to 4.3.1
  * chore(deps): update dependency containers/automation_images to v20230601
  * chore(deps): update rust crate chrono to 0.4.26
  * chore(deps): update rust crate chrono to 0.4.25
  * fix(deps): update rust crate log to 0.4.18
  * chore(deps): update rust crate once_cell to 1.17.2
  * macvlan: add bclim option
  * parse_option(): return option instead of default
  * add no_default_gateway option
  * fix(deps): update rust crate clap to 4.3.0
  * chore(deps): update dependency containers/automation_images to v20230517
  * fix(deps): update rust crate serde to 1.0.163
  * Add ability to add static route
  * fix(deps): update rust crate serde to 1.0.162
  * Cirrus: Update fedora name to match image
  * fix(deps): update rust crate clap to 4.2.7
  * chore(deps): update dependency containers/automation_images to v20230426
  * correct typo in Makefile
  * simplify path printing
  * fix(deps): update rust crate tokio to 1.28
  * aardvark-dns pid: return better errors
  * fix comment in Subnet definition
  * aardvark: no error when aardvark config is not there
  * fix(deps): update rust crate zbus to 3.12.0
  * fix(deps): update rust crate clap to 4.2.4
  * fix(deps): update rust crate clap to 4.2.2
  * fix(deps): update rust crate serde_json to 1.0.96
  * update clap to v4
  * fix(deps): update rust crate serde to 1.0.160
  * bump to v1.7.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1689076800">- Disable restricting builds only for tier1 platforms
  i.e. only for x86_64 and aarch64 and enable for all.</changelog>
  <changelog author="danish.prakash@suse.com" date="1695902400">- Update to version 1.8.0:
  * Release v1.8.0
  * update release notes for v1.8.0
  * run cargo update
  * Add vrf support for bridges
  * Packit: switch to @containers/packit-build team for copr failure notification comments
  * fix(deps): update rust crate nispor to 1.2.14
  * [CI:BUILD] Packit: tag @lsm5 on copr build failures
  * chore(deps): update rust crate chrono to 0.4.31
  * fix(deps): update rust crate serde_json to 1.0.107
  * rust io safety: convert RawFd to BorrowedFd&lt;&gt;
  * bump nix to 0.27.1
  * chore(deps): update rust crate chrono to 0.4.30
  * fix(deps): update rust crate serde_json to 1.0.106
  * chore(deps): update rust crate chrono to 0.4.29
  * fix(deps): update rust crate netlink-packet-route to 0.17.1
  * Bump tonic and prost
  * Update container image to F38
  * Add ACCEPT rules in firewall for bridge network with internal dns.
  * chore(deps): update rust crate tonic-build to 0.10
  * fix(deps): update rust crate nispor to 1.2.13
  * fix(deps): update rust crate serde to 1.0.188
  * Fix clippy warnings about formatting
  * update chrono crate
  * fix(deps): update rust crate url to 2.4.1
  * Add protoc dependency to README
  * [CI:BUILD] rpm: spdx compatible license field
  * fix(deps): update rust crate tokio to 1.32
  * chore(deps): update dependency containers/automation_images to v20230816
  * fix(deps): update rust crate serde_json to 1.0.105
  * fix(deps): update rust crate tokio to 1.31
  * fix(deps): update rust crate log to 0.4.20
  * run cargo update
  * update tonic-build to 0.9.2
  * bump rust edition to 2021
  * iptables: drop invalid packages
  * fix(deps): update rust crate tokio to 1.30
  * docs: Convert markdown with go-md2man instead of mandown
  * fix(deps): update rust crate clap to 4.3.21
  * packit: Build PRs into default packit COPRs
  * chore(deps): update dependency containers/automation_images to v20230807
  * fix(deps): update rust crate serde to 1.0.183
  * fix(deps): update rust crate serde to 1.0.181
  * fix(deps): update rust crate serde to 1.0.180
  * fix(deps): update rust crate serde_json to 1.0.104
  * fix(deps): update rust crate serde to 1.0.179
  * fix(deps): update rust crate serde to 1.0.176
  * fix(deps): update rust crate clap to 4.3.19
  * fix(deps): update rust crate serde to 1.0.175
  * fix(deps): update rust crate clap to 4.3.17
  * fix(deps): update rust crate clap to 4.3.15
  * fix(deps): update rust crate clap to 4.3.12
  * fix(deps): update rust crate serde_json to 1.0.103
  * [CI:BUILD] Packit: remove pre-sync action
  * fix(deps): update rust crate serde_json to 1.0.102
  * fix(deps): update rust crate nispor to 1.2.12
  * macvlan: use netlink type for bclim
  * bump netlink deps
  * fix(deps): update rust crate serde to 1.0.171
  * fix(deps): update rust crate serde to 1.0.167
  * fix(deps): update rust crate clap to 4.3.11
  * fix(deps): update rust crate serde to 1.0.166
  * fix(deps): update rust crate serde_json to 1.0.100
  * iptables: improve error when ip6?tables commands are missing
  * fix(deps): update rust crate clap to 4.3.10
  * fix(deps): update rust crate zbus to 3.14.1
  * [CI:BUILD] RPM: Fix ELN build and cleanup spec
  * bump to v1.8.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701345600">- Update to version 1.9.0:
  * v1.9.0 Release
  * v1.9.0 Release notes
  * test: fix syntax problem in helpers.bash
  * run cargo update
  * use OsString/Path over String for file paths
  * chore(deps): update dependency containers/automation_images to v20231116
  * firewalld-reload: fix CI tests
  * firewalld-reload: prevent race which could leak fw rules
  * fix(deps): update rust crate clap to ~4.4.8
  * CI: skip broken firewalld test
  * fix(deps): update rust crate http to 0.2.11
  * rpm: add netavark-firewalld-reload.service to spec
  * firewalld-reload: add integration tests
  * firewall/state: make sure to ignore enoent on read
  * firewall-reload: integrate actual logic to reload rules
  * firewall/state: improve error messages
  * firewall: add state functions to serialize configs
  * firewalld: fix lint errors with rust v1.73
  * firewall: do not use full Network in NetworkStruct
  * firewall: add dns_port to SetupNetwork
  * add firewalld-reload subcommand
  * fix(deps): update rust crate http to 0.2.10
  * fix(deps): update rust crate env_logger to 0.10.1
  * fix(deps): update rust crate tokio to 1.34
  * Update rust container build files
  * bridge: force static mac on bridge interface
  * fix(deps): update rust crate futures-core to 0.3.29
  * fix(deps): update rust crate serde to 1.0.190
  * fix(deps): update rust crate serde_json to 1.0.108
  * fix(deps): update rust crate sysctl to 0.5.5
  * fix(deps): update rust-futures monorepo to 0.3.29
  * CI: Drop CI VM distro name
  * chore(deps): update dependency containers/automation_images to v20231004
  * fix(deps): update rust crate tokio to 1.33
  * build-sys: Filter to tier 2 Linux declaratively
  * fix(deps): update rust crate sha2 to 0.10.8
  * fix podman.io community link
  * Bump to v1.9.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1706788800">- Update to version 1.10.2:
  * Release v1.10.2
  * Release notes for v1.10.2
  * [CI:BUILD] Packit/rpm: fix aardvark-dns handling
  * Do not perform network namespace detection on AV update
  * Release v1.10.1
  * Updated release notes for v1.10.1
  * update to nftables release 0.3 from crates.io
  * DISTRO_PACKAGE: fix incorrect vendored tar archive URL
  * Bump to 1.11.0-dev
  * Release 1.10.0
  * Release notes for 1.10.0
  * RPM: update .cargo/config before building
  * Add support for isolation to the nftables driver
  * build(deps): bump h2 from 0.3.22 to 0.3.24
  * chore(deps): update rust crate chrono to 0.4.32
  * fix(deps): update rust crate env_logger to 0.11.0
  * chore(deps): update dependency containers/automation_images to v20240102
  * Bump nftables-rs to latest commit
  * Netavark: nftables support
  * fix(deps): update rust crate serde_json to 1.0.111
  * feat: added the --firewall-driver option
  * Document how to generate a code coverage report for netavark
  * fix(deps): update rust crate clap to ~4.4.12
  * fix(deps): update rust crate serde_json to 1.0.110
  * fix(deps): update rust-futures monorepo to 0.3.30
  * fix(deps): update rust crate nispor to 1.2.16
  * chore(deps): update rust crate tempfile to 3.9.0
  * Use tonic::transport::Uri instead of HTTP
  * chore(deps): update dependency containers/automation_images to v20231208
  * fix(deps): update rust crate tokio to 1.35
  * dhcp-proxy: return actual error instead of generic one
  * dhcp-proxy: skip set gateway if missing
  * bump netlink-packet-route to 0.18.1
  * chore(deps): update rust crate once_cell to 1.19.0
  * fix(deps): update rust crate nispor to 1.2.15
  * fix(deps): update rust crate serde to 1.0.193
  * fix(deps): update rust crate clap to ~4.4.10
  * aardvark: show error if process is in wrong netns
  * aardvark: remove unessesary unlock lockfile calls
  * fix(deps): update rust crate url to 2.5.0
  * Bump working version to v1.10.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1707220800">- Rely only on &lt;major&gt;.&lt;minor&gt; for aardvark-dns requires, even though
  it is released in sync with netavark, relying on patch version is brittle.</changelog>
  <changelog author="danish.prakash@suse.com" date="1707825600">- Update to version 1.10.3:
  * v1.10.3
  * fix netavark update to not start a new aardvark-dns</changelog>
  <changelog author="danish.prakash@suse.com" date="1717416000">- Remove redundant source: cargo_config
- Update to version 1.11.0:
  * Release v1.11.0
  * Update release notes for 1.11.0
  * update netlink-packet-route to 0.20.0
  * run cargo update
  * fix: remove extra / in make install and uninstall
  * chore(deps): update dependency containers/automation_images to v20240529
  * fix(deps): update rust crate nix to 0.29.0
  * fix(deps): update rust crate nispor to 1.2.19
  * fix(deps): update rust crate anyhow to 1.0.86
  * fix(deps): update rust crate anyhow to 1.0.85
  * [skip-ci] Packit: do not create dup jobs on podman-next
  * fix(deps): update rust crate anyhow to 1.0.84
  * [skip-ci] RPM: use default __cargo macro across all envs
  * [skip-ci] RPM: switch default firewall to nftables on EL10+
  * chore(deps): update dependency containers/automation_images to v20240513
  * Add conditional compilation of default firewall driver
  * fix(deps): update rust crate serde_json to 1.0.117
  * fix new clippy warnings
  * Update CI image to fedora 40
  * fix ncat sctp tests
  * fix(deps): update rust crate anyhow to 1.0.83
  * build(deps): bump h2 from 0.3.25 to 0.3.26
  * [skip-ci] Packit: distinct `-rhel` packages value
  * [skip-ci] Packit: enable c10s downstream sync
  * fix(deps): update rust crate libc to 0.2.154
  * fix(deps): update rust crate ipnet to 2.9.0
  * fix(deps): update rust crate tower to 0.4.13
  * fix(deps): update rust crate tokio-stream to 0.1.15
  * fix(deps): update rust crate prost to 0.12.4
  * fix(deps): update rust crate iptables to 0.5.1
  * [skip-ci] Packit: remove el8 jobs
  * fix(deps): update rust crate anyhow to 1.0.82
  * fix(deps): update rust crate serde to 1.0.199
  * Add suffix to Aardvark internal network filenames
  * fix port forward with strict RPF and multi networks
  * renovate: stop rebasing PRs automatically
  * chore(deps): update rust crate chrono to 0.4.38
  * fix(deps): update rust crate serde_json to 1.0.116
  * fix(deps): update rust crate netlink-sys to 0.8.6
  * nftables: only dump netavark table rules
  * update nftables to 0.4
  * fix aardvark-dns netns check
  * fix(deps): update rust crate tokio to 1.37
  * fix(deps): update rust crate netlink-packet-route to 0.19.0
  * Update to nix-0.28.0
  * fix(deps): update rust crate mozim to 0.2.3
  * fix(deps): update rust crate nispor to 1.2.18
  * Update chrono
  * fix(deps): update rust crate serde_json to 1.0.115
  * build(deps): bump mio from 0.8.9 to 0.8.11
  * [skip-ci] rpm: aardvark-dns is a hard dep across the board
  * Update Rust crate env_logger to 0.11.3
  * Update Rust crate serde to 1.0.197
  * Update Rust crate tempfile to 3.10.1
  * Update Rust crate log to 0.4.21
  * Update Rust crate zbus to 3.15.2
  * Update Rust crate serde_json to 1.0.114
  * Update Rust crate env_logger to 0.11.2
  * Update Rust crate chrono to 0.4.34
  * Update Rust crate tonic-build to 0.11
  * Update Rust crate tonic to 0.11
  * fix netavark update to not start a new aardvark-dns
  * Update Rust crate tempfile to 3.10.0
  * Update Rust crate zbus to 3.15.0
  * Update Rust crate tokio to 1.36
  * Update Rust crate chrono to 0.4.33
  * Do not perform network namespace detection on AV update
  * [CI:BUILD] Packit/rpm: fix aardvark-dns handling
  * Update Rust crate serde_json to 1.0.113
  * Update Rust crate serde_json to 1.0.112
  * Update Rust crate env_logger to 0.11.1
  * update README with nftables support
  * Bump to v1.11.0-dev
  * perf-netavark: accept fw driver as argument
  * perf-netavark: fix missing --config arg</changelog>
</package>
<package pkgid="c5f8fb5a276e828a9aee705839ecaccbda210ae25893b05bce0764695a3ac11b" name="netavark" arch="x86_64">
  <version epoch="0" ver="1.11.0" rel="150500.3.6.1"/>
  <changelog author="dcermak@suse.com" date="1676030400">- First version of netavark</changelog>
  <changelog author="dcermak@suse.com" date="1678968000">- Bump required rust version &amp; fix libexecdir</changelog>
  <changelog author="danish.prakash@suse.com" date="1681300800">- Update to version 1.6.0:
  * v1.6.0 release
  * Update release notes for v1.6.0
  * dhcp-proxy: fix typo for --activity-timeout
  * chore(deps): update dependency containers/automation_images to v20230405
  * dhcp-proxy: use better error when connection fails
  * add documentation for netavark plugins
  * add stderr example plugin to test stderr passthrough
  * add netavark plugin driver
  * add example error plugin
  * add host-device example plugin
  * plugin: add simple plugin interface
  * netlink: add dump_addresses
  * netlink: add set_link_ns
  * dhcp-proxy: correctly exit &gt; 0 on errors
  * fix(deps): update rust crate tonic to 0.9
  * fix(deps): update rust crate mozim to 0.2.2
  * fix(deps): update rust crate serde to 1.0.159
  * fix(deps): update rust crate netlink-sys to 0.8.5
  * dhcp-proxy: create socket directory only when used
  * dhcp-proxy: do not remove socket when running under systemd
  * Makefile: netavark-dhcp-proxy.service use correct path
  * fix(deps): update rust crate http to 0.2.9
  * chore(deps): update rust crate once_cell to 1.17.1
  * fix(deps): update rust-futures monorepo to 0.3.28
  * fix(deps): update rust crate serde_json to 1.0.95
  * chore(deps): update dependency containers/automation_images to v20230330
  * Disable Dependabot in favor of Renovate
  * chore(deps): update rust crate chrono to 0.4.24
  * build(deps): bump ipnet from 2.7.1 to 2.7.2
  * build(deps): bump serde from 1.0.158 to 1.0.159
  * build(deps): bump serde_json from 1.0.94 to 1.0.95
  * update,main: dont write empty space when no network_dns_servers is given
  * fix(deps): update rust crate tokio to 1.27
  * Quit Leasing when Client disconnects
  * build(deps): bump mozim from 0.2.1 to 0.2.2
  * iptables: fix incorrect debug statement
  * build(deps): bump serde from 1.0.156 to 1.0.158
  * iptables: port fw handle wildcard address correctly
  * chore(deps): update dependency containers/automation_images to v20230320
  * build(deps): bump zbus from 3.11.0 to 3.11.1
  * build(deps): bump anyhow from 1.0.69 to 1.0.70
  * [CI:BUILD] Packit: trigger builds on commit to main branch
  * Cirrus: Invalidate v2 bin cache
  * Include Systemd Files in RPM Package
  * Cirrus: Fix success failing on artifact extraction
  * fix lint issue with new rust version 1.68
  * Cirrus: Update to newer CI VM images
  * build(deps): bump serde from 1.0.152 to 1.0.156
  * combine dhcp-proxy and netavark into one binary
  * update: should allow empty network_dns_servers
  * build(deps): bump libc from 0.2.139 to 0.2.140
  * fix aarch64 ncat flake
  * update to mozim 0.2.1
  * build(deps): bump zbus from 3.10.0 to 3.11.0
  * packit: Update build release tag correctly
  * test: move proto option into run_nc_test()
  * test: add netns pid param to port checks
  * test: import podman code to check for ports
  * cirrus.yaml: add new binaries in art_prep_script
  * fix netavark-dhcp-proxy binary in system unit
  * import netavark-proxy-dhcp tests
  * add build_proxy_client target
  * add netavark-dhcp-proxy to rpm
  * Fix dhcp-proxy build
  * Merge nv-dhcp-proxy into nv
  * fix default route metric test name
  * build(deps): bump tokio from 1.25.0 to 1.26.0
  * Support none parameter on NETAVARK_FW
  * build(deps): bump anyhow from 1.0.68 to 1.0.69
  * Fix typos
  * update netlink-packet-{route,core} to 0.15 and 0.5
  * build(deps): bump serde_json from 1.0.92 to 1.0.93
  * build(deps): bump zbus from 3.8.0 to 3.10.0
  * [CI:BUILD] Packit: initial enablement
  * Allow custom cargo binary path
  * build(deps): bump serde_json from 1.0.91 to 1.0.92
  * Cirrus: Reduce requested CPUs for compile-tasks
  * bump to version 1.0.6-dev
  * build(deps): bump netlink-sys from 0.8.3 to 0.8.4
  * Add renovate.json5</changelog>
  <changelog author="danish.prakash@suse.com" date="1687521600">- Add aardvark-dns as Requires for netavark</changelog>
  <changelog author="danish.prakash@suse.com" date="1688385600">- Update to version 1.7.0:
  * release v1.7.0
  * Update release notes for v1.7.0
  * fix(deps): update rust crate tokio to 1.29
  * netavark: make --config required for dns
  * fix(deps): update rust crate serde_json to 1.0.99
  * fix(deps): update rust crate clap to 4.3.8
  * [CI:BUILD] Packit: add Fedora downstream tasks
  * run cargo update
  * fix(deps): update rust crate serde_json to 1.0.97
  * fix(deps): update rust crate sha2 to 0.10.7
  * fix(deps): update rust crate clap to 4.3.4
  * chore(deps): update dependency containers/automation_images to v20230614
  * fix(deps): update rust crate clap to 4.3.3
  * fix(deps): update rust crate log to 0.4.19
  * aardvark: fix missleading dns disabled log
  * firewall: add NETAVARK_ISOLATION_3 chain for strict isolation
  * docs: fix link to getting started
  * fix(deps): update rust crate serde to 1.0.164
  * netlink: fix incorrect info log for del_route
  * dhcp-proxy: apply new ip address/gateway
  * test-dhcp: fix broekn has_ip() check
  * dhcp-proxy: actually implement renewing leases
  * dhcp-proxy: simplify code
  * dhcp-proxy: drop macaddr dependency
  * dhcp-proxy: remove some unused traits
  * fix(deps): update rust crate zbus to 3.13.1
  * fix(deps): update rust crate clap to 4.3.2
  * chore(deps): update rust crate once_cell to 1.18.0
  * fix(deps): update rust crate url to 2.4.0
  * fix(deps): update rust crate clap to 4.3.1
  * chore(deps): update dependency containers/automation_images to v20230601
  * chore(deps): update rust crate chrono to 0.4.26
  * chore(deps): update rust crate chrono to 0.4.25
  * fix(deps): update rust crate log to 0.4.18
  * chore(deps): update rust crate once_cell to 1.17.2
  * macvlan: add bclim option
  * parse_option(): return option instead of default
  * add no_default_gateway option
  * fix(deps): update rust crate clap to 4.3.0
  * chore(deps): update dependency containers/automation_images to v20230517
  * fix(deps): update rust crate serde to 1.0.163
  * Add ability to add static route
  * fix(deps): update rust crate serde to 1.0.162
  * Cirrus: Update fedora name to match image
  * fix(deps): update rust crate clap to 4.2.7
  * chore(deps): update dependency containers/automation_images to v20230426
  * correct typo in Makefile
  * simplify path printing
  * fix(deps): update rust crate tokio to 1.28
  * aardvark-dns pid: return better errors
  * fix comment in Subnet definition
  * aardvark: no error when aardvark config is not there
  * fix(deps): update rust crate zbus to 3.12.0
  * fix(deps): update rust crate clap to 4.2.4
  * fix(deps): update rust crate clap to 4.2.2
  * fix(deps): update rust crate serde_json to 1.0.96
  * update clap to v4
  * fix(deps): update rust crate serde to 1.0.160
  * bump to v1.7.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1689076800">- Disable restricting builds only for tier1 platforms
  i.e. only for x86_64 and aarch64 and enable for all.</changelog>
  <changelog author="danish.prakash@suse.com" date="1695902400">- Update to version 1.8.0:
  * Release v1.8.0
  * update release notes for v1.8.0
  * run cargo update
  * Add vrf support for bridges
  * Packit: switch to @containers/packit-build team for copr failure notification comments
  * fix(deps): update rust crate nispor to 1.2.14
  * [CI:BUILD] Packit: tag @lsm5 on copr build failures
  * chore(deps): update rust crate chrono to 0.4.31
  * fix(deps): update rust crate serde_json to 1.0.107
  * rust io safety: convert RawFd to BorrowedFd&lt;&gt;
  * bump nix to 0.27.1
  * chore(deps): update rust crate chrono to 0.4.30
  * fix(deps): update rust crate serde_json to 1.0.106
  * chore(deps): update rust crate chrono to 0.4.29
  * fix(deps): update rust crate netlink-packet-route to 0.17.1
  * Bump tonic and prost
  * Update container image to F38
  * Add ACCEPT rules in firewall for bridge network with internal dns.
  * chore(deps): update rust crate tonic-build to 0.10
  * fix(deps): update rust crate nispor to 1.2.13
  * fix(deps): update rust crate serde to 1.0.188
  * Fix clippy warnings about formatting
  * update chrono crate
  * fix(deps): update rust crate url to 2.4.1
  * Add protoc dependency to README
  * [CI:BUILD] rpm: spdx compatible license field
  * fix(deps): update rust crate tokio to 1.32
  * chore(deps): update dependency containers/automation_images to v20230816
  * fix(deps): update rust crate serde_json to 1.0.105
  * fix(deps): update rust crate tokio to 1.31
  * fix(deps): update rust crate log to 0.4.20
  * run cargo update
  * update tonic-build to 0.9.2
  * bump rust edition to 2021
  * iptables: drop invalid packages
  * fix(deps): update rust crate tokio to 1.30
  * docs: Convert markdown with go-md2man instead of mandown
  * fix(deps): update rust crate clap to 4.3.21
  * packit: Build PRs into default packit COPRs
  * chore(deps): update dependency containers/automation_images to v20230807
  * fix(deps): update rust crate serde to 1.0.183
  * fix(deps): update rust crate serde to 1.0.181
  * fix(deps): update rust crate serde to 1.0.180
  * fix(deps): update rust crate serde_json to 1.0.104
  * fix(deps): update rust crate serde to 1.0.179
  * fix(deps): update rust crate serde to 1.0.176
  * fix(deps): update rust crate clap to 4.3.19
  * fix(deps): update rust crate serde to 1.0.175
  * fix(deps): update rust crate clap to 4.3.17
  * fix(deps): update rust crate clap to 4.3.15
  * fix(deps): update rust crate clap to 4.3.12
  * fix(deps): update rust crate serde_json to 1.0.103
  * [CI:BUILD] Packit: remove pre-sync action
  * fix(deps): update rust crate serde_json to 1.0.102
  * fix(deps): update rust crate nispor to 1.2.12
  * macvlan: use netlink type for bclim
  * bump netlink deps
  * fix(deps): update rust crate serde to 1.0.171
  * fix(deps): update rust crate serde to 1.0.167
  * fix(deps): update rust crate clap to 4.3.11
  * fix(deps): update rust crate serde to 1.0.166
  * fix(deps): update rust crate serde_json to 1.0.100
  * iptables: improve error when ip6?tables commands are missing
  * fix(deps): update rust crate clap to 4.3.10
  * fix(deps): update rust crate zbus to 3.14.1
  * [CI:BUILD] RPM: Fix ELN build and cleanup spec
  * bump to v1.8.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701345600">- Update to version 1.9.0:
  * v1.9.0 Release
  * v1.9.0 Release notes
  * test: fix syntax problem in helpers.bash
  * run cargo update
  * use OsString/Path over String for file paths
  * chore(deps): update dependency containers/automation_images to v20231116
  * firewalld-reload: fix CI tests
  * firewalld-reload: prevent race which could leak fw rules
  * fix(deps): update rust crate clap to ~4.4.8
  * CI: skip broken firewalld test
  * fix(deps): update rust crate http to 0.2.11
  * rpm: add netavark-firewalld-reload.service to spec
  * firewalld-reload: add integration tests
  * firewall/state: make sure to ignore enoent on read
  * firewall-reload: integrate actual logic to reload rules
  * firewall/state: improve error messages
  * firewall: add state functions to serialize configs
  * firewalld: fix lint errors with rust v1.73
  * firewall: do not use full Network in NetworkStruct
  * firewall: add dns_port to SetupNetwork
  * add firewalld-reload subcommand
  * fix(deps): update rust crate http to 0.2.10
  * fix(deps): update rust crate env_logger to 0.10.1
  * fix(deps): update rust crate tokio to 1.34
  * Update rust container build files
  * bridge: force static mac on bridge interface
  * fix(deps): update rust crate futures-core to 0.3.29
  * fix(deps): update rust crate serde to 1.0.190
  * fix(deps): update rust crate serde_json to 1.0.108
  * fix(deps): update rust crate sysctl to 0.5.5
  * fix(deps): update rust-futures monorepo to 0.3.29
  * CI: Drop CI VM distro name
  * chore(deps): update dependency containers/automation_images to v20231004
  * fix(deps): update rust crate tokio to 1.33
  * build-sys: Filter to tier 2 Linux declaratively
  * fix(deps): update rust crate sha2 to 0.10.8
  * fix podman.io community link
  * Bump to v1.9.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1706788800">- Update to version 1.10.2:
  * Release v1.10.2
  * Release notes for v1.10.2
  * [CI:BUILD] Packit/rpm: fix aardvark-dns handling
  * Do not perform network namespace detection on AV update
  * Release v1.10.1
  * Updated release notes for v1.10.1
  * update to nftables release 0.3 from crates.io
  * DISTRO_PACKAGE: fix incorrect vendored tar archive URL
  * Bump to 1.11.0-dev
  * Release 1.10.0
  * Release notes for 1.10.0
  * RPM: update .cargo/config before building
  * Add support for isolation to the nftables driver
  * build(deps): bump h2 from 0.3.22 to 0.3.24
  * chore(deps): update rust crate chrono to 0.4.32
  * fix(deps): update rust crate env_logger to 0.11.0
  * chore(deps): update dependency containers/automation_images to v20240102
  * Bump nftables-rs to latest commit
  * Netavark: nftables support
  * fix(deps): update rust crate serde_json to 1.0.111
  * feat: added the --firewall-driver option
  * Document how to generate a code coverage report for netavark
  * fix(deps): update rust crate clap to ~4.4.12
  * fix(deps): update rust crate serde_json to 1.0.110
  * fix(deps): update rust-futures monorepo to 0.3.30
  * fix(deps): update rust crate nispor to 1.2.16
  * chore(deps): update rust crate tempfile to 3.9.0
  * Use tonic::transport::Uri instead of HTTP
  * chore(deps): update dependency containers/automation_images to v20231208
  * fix(deps): update rust crate tokio to 1.35
  * dhcp-proxy: return actual error instead of generic one
  * dhcp-proxy: skip set gateway if missing
  * bump netlink-packet-route to 0.18.1
  * chore(deps): update rust crate once_cell to 1.19.0
  * fix(deps): update rust crate nispor to 1.2.15
  * fix(deps): update rust crate serde to 1.0.193
  * fix(deps): update rust crate clap to ~4.4.10
  * aardvark: show error if process is in wrong netns
  * aardvark: remove unessesary unlock lockfile calls
  * fix(deps): update rust crate url to 2.5.0
  * Bump working version to v1.10.0-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1707220800">- Rely only on &lt;major&gt;.&lt;minor&gt; for aardvark-dns requires, even though
  it is released in sync with netavark, relying on patch version is brittle.</changelog>
  <changelog author="danish.prakash@suse.com" date="1707825600">- Update to version 1.10.3:
  * v1.10.3
  * fix netavark update to not start a new aardvark-dns</changelog>
  <changelog author="danish.prakash@suse.com" date="1717416000">- Remove redundant source: cargo_config
- Update to version 1.11.0:
  * Release v1.11.0
  * Update release notes for 1.11.0
  * update netlink-packet-route to 0.20.0
  * run cargo update
  * fix: remove extra / in make install and uninstall
  * chore(deps): update dependency containers/automation_images to v20240529
  * fix(deps): update rust crate nix to 0.29.0
  * fix(deps): update rust crate nispor to 1.2.19
  * fix(deps): update rust crate anyhow to 1.0.86
  * fix(deps): update rust crate anyhow to 1.0.85
  * [skip-ci] Packit: do not create dup jobs on podman-next
  * fix(deps): update rust crate anyhow to 1.0.84
  * [skip-ci] RPM: use default __cargo macro across all envs
  * [skip-ci] RPM: switch default firewall to nftables on EL10+
  * chore(deps): update dependency containers/automation_images to v20240513
  * Add conditional compilation of default firewall driver
  * fix(deps): update rust crate serde_json to 1.0.117
  * fix new clippy warnings
  * Update CI image to fedora 40
  * fix ncat sctp tests
  * fix(deps): update rust crate anyhow to 1.0.83
  * build(deps): bump h2 from 0.3.25 to 0.3.26
  * [skip-ci] Packit: distinct `-rhel` packages value
  * [skip-ci] Packit: enable c10s downstream sync
  * fix(deps): update rust crate libc to 0.2.154
  * fix(deps): update rust crate ipnet to 2.9.0
  * fix(deps): update rust crate tower to 0.4.13
  * fix(deps): update rust crate tokio-stream to 0.1.15
  * fix(deps): update rust crate prost to 0.12.4
  * fix(deps): update rust crate iptables to 0.5.1
  * [skip-ci] Packit: remove el8 jobs
  * fix(deps): update rust crate anyhow to 1.0.82
  * fix(deps): update rust crate serde to 1.0.199
  * Add suffix to Aardvark internal network filenames
  * fix port forward with strict RPF and multi networks
  * renovate: stop rebasing PRs automatically
  * chore(deps): update rust crate chrono to 0.4.38
  * fix(deps): update rust crate serde_json to 1.0.116
  * fix(deps): update rust crate netlink-sys to 0.8.6
  * nftables: only dump netavark table rules
  * update nftables to 0.4
  * fix aardvark-dns netns check
  * fix(deps): update rust crate tokio to 1.37
  * fix(deps): update rust crate netlink-packet-route to 0.19.0
  * Update to nix-0.28.0
  * fix(deps): update rust crate mozim to 0.2.3
  * fix(deps): update rust crate nispor to 1.2.18
  * Update chrono
  * fix(deps): update rust crate serde_json to 1.0.115
  * build(deps): bump mio from 0.8.9 to 0.8.11
  * [skip-ci] rpm: aardvark-dns is a hard dep across the board
  * Update Rust crate env_logger to 0.11.3
  * Update Rust crate serde to 1.0.197
  * Update Rust crate tempfile to 3.10.1
  * Update Rust crate log to 0.4.21
  * Update Rust crate zbus to 3.15.2
  * Update Rust crate serde_json to 1.0.114
  * Update Rust crate env_logger to 0.11.2
  * Update Rust crate chrono to 0.4.34
  * Update Rust crate tonic-build to 0.11
  * Update Rust crate tonic to 0.11
  * fix netavark update to not start a new aardvark-dns
  * Update Rust crate tempfile to 3.10.0
  * Update Rust crate zbus to 3.15.0
  * Update Rust crate tokio to 1.36
  * Update Rust crate chrono to 0.4.33
  * Do not perform network namespace detection on AV update
  * [CI:BUILD] Packit/rpm: fix aardvark-dns handling
  * Update Rust crate serde_json to 1.0.113
  * Update Rust crate serde_json to 1.0.112
  * Update Rust crate env_logger to 0.11.1
  * update README with nftables support
  * Bump to v1.11.0-dev
  * perf-netavark: accept fw driver as argument
  * perf-netavark: fix missing --config arg</changelog>
</package>
<package pkgid="cb90987f02fe5cc521bf1bd43f502fd77761d24b8f4d9e275a7d5e33d598e12a" name="netcfg" arch="noarch">
  <version epoch="0" ver="11.6" rel="150000.3.6.1"/>
  <changelog author="tchvatal@suse.com" date="1417435200">- Drop the scriptlet for the netgroup handling. It was caused by
  the aaa_base -&gt; netcfg move, which I guess after 12 years is moot</changelog>
  <changelog author="tchvatal@suse.com" date="1417435201">- Remove the socket check from the defaultdomain checker as it was
  always false and thus not needed
  - Add comment explaining the reason for the code</changelog>
  <changelog author="tchvatal@suse.com" date="1417435202">- Redo the HOSTNAME -&gt; hostname migration to support smallest
  possible step. Thus ensuring the migration is done just once and
  finished:
  [#] HOSTNAME migration supported scenarios [bnc#858908]:
  [#] /etc/HOSTNAME -&gt; /etc/hostname content preservation.
  [#] If hostname and HOSTNAME both exist HOSTNAME wins.
  [#] Nothing apart from content of the document is preserved
- Solves bnc#858908 and bnc#899506 while moves bnc#887039 to
  unsupported scenarios.</changelog>
  <changelog author="tchvatal@suse.com" date="1417435203">- Spec-cleanify the previous commit.</changelog>
  <changelog author="tchvatal@suse.com" date="1418817600">- Keep the condition posix as it is shorter :)</changelog>
  <changelog author="tchvatal@suse.com" date="1418817601">- Try different approach to fix failing migration from 13.1.
  This one is from locilka</changelog>
  <changelog author="tchvatal@suse.com" date="1434024000">- Keep /etc/hostname empty and %ghost it. bnc#934056</changelog>
  <changelog author="tchvatal@suse.com" date="1438689600">- Do not ghost the empty /etc/hostname to not break installationimages
  pkg.</changelog>
  <changelog author="tchvatal@suse.com" date="1440504000">- Do not actually replace the hostname if user already has something
  in there. Thanks to Takashi Iwai for spotting this</changelog>
  <changelog author="tchvatal@suse.com" date="1451995200">- Repack services.bz2 with latest from upstream and adjust the script
  to not add all the names+emails at the bottom bnc#959693</changelog>
  <changelog author="tchvatal@suse.com" date="1488888000">- Update script to generage services to use UTF8 by default bsc#1028305
- Update the services list with latest content</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1519300801">- Include /etc/ethertypes to resolve a conflict between
  security:netfilter/ebtables and security:netfilter/iptables-nft. This
  ethertypes version comes from iptables, because it contains an additional
  entry over the ebtables one. Increased minor version to allow a suitable
  Requires statement in ebtables/iptables. FATE#320520</changelog>
  <changelog author="pgajdos@suse.com" date="1629720000">- add submissions port number [bsc#1189683]
- modified patches
  % services-suse.diff</changelog>
  <changelog author="martin.schreiner@suse.com" date="1704110400">- Add krb-prop entry, fix for bsc#1211886.</changelog>
</package>
<package pkgid="373593fd2d4943cac515bc99e0bcbcccf57e50d0ed9ffa004b3c28131253839a" name="netcfg" arch="src">
  <version epoch="0" ver="11.6" rel="150000.3.6.1"/>
  <changelog author="pgajdos@suse.com" date="1391688000">- added helper scripts and doc for creating services file to
  Sources</changelog>
  <changelog author="pgajdos@suse.com" date="1401883200">- HOSTNAME renamed to hostname [bnc#858908]</changelog>
  <changelog author="pgajdos@suse.com" date="1402488000">- move /etc/HOSTNAME to /etc/hostname during update</changelog>
  <changelog author="pgajdos@suse.com" date="1406289600">- resolve some update scenarios [bnc#883999], [bnc#886443] (private)
  with regard to /etc/HOSTNAME -&gt; /etc/hostname change</changelog>
  <changelog author="pgajdos@suse.com" date="1412251200">- fix %pre scriptlet [bnc#899506] (thanks to mls for the fix)</changelog>
  <changelog author="tchvatal@suse.com" date="1417435200">- Drop the scriptlet for the netgroup handling. It was caused by
  the aaa_base -&gt; netcfg move, which I guess after 12 years is moot</changelog>
  <changelog author="tchvatal@suse.com" date="1417435201">- Remove the socket check from the defaultdomain checker as it was
  always false and thus not needed
  - Add comment explaining the reason for the code</changelog>
  <changelog author="tchvatal@suse.com" date="1417435202">- Redo the HOSTNAME -&gt; hostname migration to support smallest
  possible step. Thus ensuring the migration is done just once and
  finished:
  [#] HOSTNAME migration supported scenarios [bnc#858908]:
  [#] /etc/HOSTNAME -&gt; /etc/hostname content preservation.
  [#] If hostname and HOSTNAME both exist HOSTNAME wins.
  [#] Nothing apart from content of the document is preserved
- Solves bnc#858908 and bnc#899506 while moves bnc#887039 to
  unsupported scenarios.</changelog>
  <changelog author="tchvatal@suse.com" date="1417435203">- Spec-cleanify the previous commit.</changelog>
  <changelog author="tchvatal@suse.com" date="1418817600">- Keep the condition posix as it is shorter :)</changelog>
  <changelog author="tchvatal@suse.com" date="1418817601">- Try different approach to fix failing migration from 13.1.
  This one is from locilka</changelog>
  <changelog author="tchvatal@suse.com" date="1434024000">- Keep /etc/hostname empty and %ghost it. bnc#934056</changelog>
  <changelog author="tchvatal@suse.com" date="1438689600">- Do not ghost the empty /etc/hostname to not break installationimages
  pkg.</changelog>
  <changelog author="tchvatal@suse.com" date="1440504000">- Do not actually replace the hostname if user already has something
  in there. Thanks to Takashi Iwai for spotting this</changelog>
  <changelog author="tchvatal@suse.com" date="1451995200">- Repack services.bz2 with latest from upstream and adjust the script
  to not add all the names+emails at the bottom bnc#959693</changelog>
  <changelog author="tchvatal@suse.com" date="1488888000">- Update script to generage services to use UTF8 by default bsc#1028305
- Update the services list with latest content</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1519300801">- Include /etc/ethertypes to resolve a conflict between
  security:netfilter/ebtables and security:netfilter/iptables-nft. This
  ethertypes version comes from iptables, because it contains an additional
  entry over the ebtables one. Increased minor version to allow a suitable
  Requires statement in ebtables/iptables. FATE#320520</changelog>
  <changelog author="pgajdos@suse.com" date="1629720000">- add submissions port number [bsc#1189683]
- modified patches
  % services-suse.diff</changelog>
  <changelog author="martin.schreiner@suse.com" date="1704110400">- Add krb-prop entry, fix for bsc#1211886.</changelog>
</package>
<package pkgid="4aff597cefc9da2305a4a4b57ac9458b9fe6c84a284c20e3ebf915acd0c731da" name="nfs-client" arch="aarch64">
  <version epoch="0" ver="2.1.1" rel="150500.22.3.1"/>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
  <changelog author="nfbrown@suse.com" date="1648123200">- Add 0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
  Add 0022-mount.nfs-Fix-the-sloppy-option-processing.patch
  Ensure "sloppy" is added correctly for newer kernels.  Particularly
  required for kernels since 5.6 (so SLE15-SP4), and safe for all kernels.
  (boo#1197297)</changelog>
  <changelog author="nfbrown@suse.com" date="1648814400">- Add 0023-cache.c-removed-a-couple-warning.patch
  Fix compilation with new glibc (SLE15-SP4)
  (bsc#1197788)</changelog>
  <changelog author="nfbrown@suse.com" date="1655208000">- 0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)</changelog>
  <changelog author="nfbrown@suse.com" date="1662379200">- add 0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
  Fix nfsdcltrack bug that affected non-x86 archs.
  (bsc#1202627)</changelog>
  <changelog author="nfbrown@suse.com" date="1673697600">- 0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Avoid modprobe errors when sysctl is not installed.
  (bsc#1200710 bsc#1207022 bsc#1206781)
- 0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Add "-S scope" option to rpc.nfsd to simplify fail-over cluster
  config.
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
  <changelog author="nfbrown@suse.com" date="1680091200">- Add 0028-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
  boo#1157881
- Add 0029-nfsd.man-fix-typo-in-section-on-scope.patch
  bsc#1209859
- Allow scope to be set in sysconfig: NFSD_SCOPE</changelog>
  <changelog author="nfbrown@suse.com" date="1686052800">- Add 0030-systemd-use-correct-modprobe-d-directory
  SLE15-SP5 an earlier don't use /usr/lib/modprobe.d
  (bsc#1200710)
- Add 0031-mountd-don-t-advertise-krb5-for-v4root-when-not-conf.patch
  Avoid unhelpful warning if rpcsec_gss_krb5.ko not installed</changelog>
  <changelog author="nfbrown@suse.com" date="1687867200">- Add 0032-exportfs-Ingnore-export-failures-in-nfs-server.seriv.patch
  Inconsistencies in /etc/exports shouldn't be fatal.
  (bsc#1212594)</changelog>
</package>
<package pkgid="b708a92f85866ac4e3e9be335ec6c4c30524f324ff9fb62dcaac7ef7ace52c67" name="nfs-client" arch="s390x">
  <version epoch="0" ver="2.1.1" rel="150500.22.3.1"/>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
  <changelog author="nfbrown@suse.com" date="1648123200">- Add 0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
  Add 0022-mount.nfs-Fix-the-sloppy-option-processing.patch
  Ensure "sloppy" is added correctly for newer kernels.  Particularly
  required for kernels since 5.6 (so SLE15-SP4), and safe for all kernels.
  (boo#1197297)</changelog>
  <changelog author="nfbrown@suse.com" date="1648814400">- Add 0023-cache.c-removed-a-couple-warning.patch
  Fix compilation with new glibc (SLE15-SP4)
  (bsc#1197788)</changelog>
  <changelog author="nfbrown@suse.com" date="1655208000">- 0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)</changelog>
  <changelog author="nfbrown@suse.com" date="1662379200">- add 0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
  Fix nfsdcltrack bug that affected non-x86 archs.
  (bsc#1202627)</changelog>
  <changelog author="nfbrown@suse.com" date="1673697600">- 0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Avoid modprobe errors when sysctl is not installed.
  (bsc#1200710 bsc#1207022 bsc#1206781)
- 0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Add "-S scope" option to rpc.nfsd to simplify fail-over cluster
  config.
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
  <changelog author="nfbrown@suse.com" date="1680091200">- Add 0028-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
  boo#1157881
- Add 0029-nfsd.man-fix-typo-in-section-on-scope.patch
  bsc#1209859
- Allow scope to be set in sysconfig: NFSD_SCOPE</changelog>
  <changelog author="nfbrown@suse.com" date="1686052800">- Add 0030-systemd-use-correct-modprobe-d-directory
  SLE15-SP5 an earlier don't use /usr/lib/modprobe.d
  (bsc#1200710)
- Add 0031-mountd-don-t-advertise-krb5-for-v4root-when-not-conf.patch
  Avoid unhelpful warning if rpcsec_gss_krb5.ko not installed</changelog>
  <changelog author="nfbrown@suse.com" date="1687867200">- Add 0032-exportfs-Ingnore-export-failures-in-nfs-server.seriv.patch
  Inconsistencies in /etc/exports shouldn't be fatal.
  (bsc#1212594)</changelog>
</package>
<package pkgid="4bde9e6d6934aa3d28c5d16309bffae675e6ad48f98285d9fac2ebd7c6685ec5" name="nfs-client" arch="x86_64">
  <version epoch="0" ver="2.1.1" rel="150500.22.3.1"/>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
  <changelog author="nfbrown@suse.com" date="1648123200">- Add 0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
  Add 0022-mount.nfs-Fix-the-sloppy-option-processing.patch
  Ensure "sloppy" is added correctly for newer kernels.  Particularly
  required for kernels since 5.6 (so SLE15-SP4), and safe for all kernels.
  (boo#1197297)</changelog>
  <changelog author="nfbrown@suse.com" date="1648814400">- Add 0023-cache.c-removed-a-couple-warning.patch
  Fix compilation with new glibc (SLE15-SP4)
  (bsc#1197788)</changelog>
  <changelog author="nfbrown@suse.com" date="1655208000">- 0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)</changelog>
  <changelog author="nfbrown@suse.com" date="1662379200">- add 0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
  Fix nfsdcltrack bug that affected non-x86 archs.
  (bsc#1202627)</changelog>
  <changelog author="nfbrown@suse.com" date="1673697600">- 0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Avoid modprobe errors when sysctl is not installed.
  (bsc#1200710 bsc#1207022 bsc#1206781)
- 0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Add "-S scope" option to rpc.nfsd to simplify fail-over cluster
  config.
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
  <changelog author="nfbrown@suse.com" date="1680091200">- Add 0028-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
  boo#1157881
- Add 0029-nfsd.man-fix-typo-in-section-on-scope.patch
  bsc#1209859
- Allow scope to be set in sysconfig: NFSD_SCOPE</changelog>
  <changelog author="nfbrown@suse.com" date="1686052800">- Add 0030-systemd-use-correct-modprobe-d-directory
  SLE15-SP5 an earlier don't use /usr/lib/modprobe.d
  (bsc#1200710)
- Add 0031-mountd-don-t-advertise-krb5-for-v4root-when-not-conf.patch
  Avoid unhelpful warning if rpcsec_gss_krb5.ko not installed</changelog>
  <changelog author="nfbrown@suse.com" date="1687867200">- Add 0032-exportfs-Ingnore-export-failures-in-nfs-server.seriv.patch
  Inconsistencies in /etc/exports shouldn't be fatal.
  (bsc#1212594)</changelog>
</package>
<package pkgid="f6ddd3f48b416ef7a9cd78b0c4063a45367d1afb6b5d0ab9397d1ef0b389fd9c" name="nfs-kernel-server" arch="aarch64">
  <version epoch="0" ver="2.1.1" rel="150500.22.3.1"/>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
  <changelog author="nfbrown@suse.com" date="1648123200">- Add 0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
  Add 0022-mount.nfs-Fix-the-sloppy-option-processing.patch
  Ensure "sloppy" is added correctly for newer kernels.  Particularly
  required for kernels since 5.6 (so SLE15-SP4), and safe for all kernels.
  (boo#1197297)</changelog>
  <changelog author="nfbrown@suse.com" date="1648814400">- Add 0023-cache.c-removed-a-couple-warning.patch
  Fix compilation with new glibc (SLE15-SP4)
  (bsc#1197788)</changelog>
  <changelog author="nfbrown@suse.com" date="1655208000">- 0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)</changelog>
  <changelog author="nfbrown@suse.com" date="1662379200">- add 0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
  Fix nfsdcltrack bug that affected non-x86 archs.
  (bsc#1202627)</changelog>
  <changelog author="nfbrown@suse.com" date="1673697600">- 0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Avoid modprobe errors when sysctl is not installed.
  (bsc#1200710 bsc#1207022 bsc#1206781)
- 0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Add "-S scope" option to rpc.nfsd to simplify fail-over cluster
  config.
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
  <changelog author="nfbrown@suse.com" date="1680091200">- Add 0028-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
  boo#1157881
- Add 0029-nfsd.man-fix-typo-in-section-on-scope.patch
  bsc#1209859
- Allow scope to be set in sysconfig: NFSD_SCOPE</changelog>
  <changelog author="nfbrown@suse.com" date="1686052800">- Add 0030-systemd-use-correct-modprobe-d-directory
  SLE15-SP5 an earlier don't use /usr/lib/modprobe.d
  (bsc#1200710)
- Add 0031-mountd-don-t-advertise-krb5-for-v4root-when-not-conf.patch
  Avoid unhelpful warning if rpcsec_gss_krb5.ko not installed</changelog>
  <changelog author="nfbrown@suse.com" date="1687867200">- Add 0032-exportfs-Ingnore-export-failures-in-nfs-server.seriv.patch
  Inconsistencies in /etc/exports shouldn't be fatal.
  (bsc#1212594)</changelog>
</package>
<package pkgid="92789ee536199f5fc6b6667083fb8e98c6bf8ecabc791e3bfc6bff2bc1fc5382" name="nfs-kernel-server" arch="s390x">
  <version epoch="0" ver="2.1.1" rel="150500.22.3.1"/>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
  <changelog author="nfbrown@suse.com" date="1648123200">- Add 0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
  Add 0022-mount.nfs-Fix-the-sloppy-option-processing.patch
  Ensure "sloppy" is added correctly for newer kernels.  Particularly
  required for kernels since 5.6 (so SLE15-SP4), and safe for all kernels.
  (boo#1197297)</changelog>
  <changelog author="nfbrown@suse.com" date="1648814400">- Add 0023-cache.c-removed-a-couple-warning.patch
  Fix compilation with new glibc (SLE15-SP4)
  (bsc#1197788)</changelog>
  <changelog author="nfbrown@suse.com" date="1655208000">- 0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)</changelog>
  <changelog author="nfbrown@suse.com" date="1662379200">- add 0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
  Fix nfsdcltrack bug that affected non-x86 archs.
  (bsc#1202627)</changelog>
  <changelog author="nfbrown@suse.com" date="1673697600">- 0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Avoid modprobe errors when sysctl is not installed.
  (bsc#1200710 bsc#1207022 bsc#1206781)
- 0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Add "-S scope" option to rpc.nfsd to simplify fail-over cluster
  config.
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
  <changelog author="nfbrown@suse.com" date="1680091200">- Add 0028-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
  boo#1157881
- Add 0029-nfsd.man-fix-typo-in-section-on-scope.patch
  bsc#1209859
- Allow scope to be set in sysconfig: NFSD_SCOPE</changelog>
  <changelog author="nfbrown@suse.com" date="1686052800">- Add 0030-systemd-use-correct-modprobe-d-directory
  SLE15-SP5 an earlier don't use /usr/lib/modprobe.d
  (bsc#1200710)
- Add 0031-mountd-don-t-advertise-krb5-for-v4root-when-not-conf.patch
  Avoid unhelpful warning if rpcsec_gss_krb5.ko not installed</changelog>
  <changelog author="nfbrown@suse.com" date="1687867200">- Add 0032-exportfs-Ingnore-export-failures-in-nfs-server.seriv.patch
  Inconsistencies in /etc/exports shouldn't be fatal.
  (bsc#1212594)</changelog>
</package>
<package pkgid="961612894aac14ca813daa362af927139fb7d64bfd030b3222643c26eee488cb" name="nfs-kernel-server" arch="x86_64">
  <version epoch="0" ver="2.1.1" rel="150500.22.3.1"/>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
  <changelog author="nfbrown@suse.com" date="1648123200">- Add 0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
  Add 0022-mount.nfs-Fix-the-sloppy-option-processing.patch
  Ensure "sloppy" is added correctly for newer kernels.  Particularly
  required for kernels since 5.6 (so SLE15-SP4), and safe for all kernels.
  (boo#1197297)</changelog>
  <changelog author="nfbrown@suse.com" date="1648814400">- Add 0023-cache.c-removed-a-couple-warning.patch
  Fix compilation with new glibc (SLE15-SP4)
  (bsc#1197788)</changelog>
  <changelog author="nfbrown@suse.com" date="1655208000">- 0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)</changelog>
  <changelog author="nfbrown@suse.com" date="1662379200">- add 0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
  Fix nfsdcltrack bug that affected non-x86 archs.
  (bsc#1202627)</changelog>
  <changelog author="nfbrown@suse.com" date="1673697600">- 0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Avoid modprobe errors when sysctl is not installed.
  (bsc#1200710 bsc#1207022 bsc#1206781)
- 0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Add "-S scope" option to rpc.nfsd to simplify fail-over cluster
  config.
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
  <changelog author="nfbrown@suse.com" date="1680091200">- Add 0028-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
  boo#1157881
- Add 0029-nfsd.man-fix-typo-in-section-on-scope.patch
  bsc#1209859
- Allow scope to be set in sysconfig: NFSD_SCOPE</changelog>
  <changelog author="nfbrown@suse.com" date="1686052800">- Add 0030-systemd-use-correct-modprobe-d-directory
  SLE15-SP5 an earlier don't use /usr/lib/modprobe.d
  (bsc#1200710)
- Add 0031-mountd-don-t-advertise-krb5-for-v4root-when-not-conf.patch
  Avoid unhelpful warning if rpcsec_gss_krb5.ko not installed</changelog>
  <changelog author="nfbrown@suse.com" date="1687867200">- Add 0032-exportfs-Ingnore-export-failures-in-nfs-server.seriv.patch
  Inconsistencies in /etc/exports shouldn't be fatal.
  (bsc#1212594)</changelog>
</package>
<package pkgid="5c6d59c5bc22a115a911b2ac8c357fe59d0021215f482c2a6c1cf3dffe7aae8f" name="nfs-utils" arch="src">
  <version epoch="0" ver="2.1.1" rel="150500.22.3.1"/>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
  <changelog author="nfbrown@suse.com" date="1648123200">- Add 0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
  Add 0022-mount.nfs-Fix-the-sloppy-option-processing.patch
  Ensure "sloppy" is added correctly for newer kernels.  Particularly
  required for kernels since 5.6 (so SLE15-SP4), and safe for all kernels.
  (boo#1197297)</changelog>
  <changelog author="nfbrown@suse.com" date="1648814400">- Add 0023-cache.c-removed-a-couple-warning.patch
  Fix compilation with new glibc (SLE15-SP4)
  (bsc#1197788)</changelog>
  <changelog author="nfbrown@suse.com" date="1655208000">- 0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)</changelog>
  <changelog author="nfbrown@suse.com" date="1662379200">- add 0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
  Fix nfsdcltrack bug that affected non-x86 archs.
  (bsc#1202627)</changelog>
  <changelog author="nfbrown@suse.com" date="1673697600">- 0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Avoid modprobe errors when sysctl is not installed.
  (bsc#1200710 bsc#1207022 bsc#1206781)
- 0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Add "-S scope" option to rpc.nfsd to simplify fail-over cluster
  config.
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
  <changelog author="nfbrown@suse.com" date="1680091200">- Add 0028-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
  boo#1157881
- Add 0029-nfsd.man-fix-typo-in-section-on-scope.patch
  bsc#1209859
- Allow scope to be set in sysconfig: NFSD_SCOPE</changelog>
  <changelog author="nfbrown@suse.com" date="1686052800">- Add 0030-systemd-use-correct-modprobe-d-directory
  SLE15-SP5 an earlier don't use /usr/lib/modprobe.d
  (bsc#1200710)
- Add 0031-mountd-don-t-advertise-krb5-for-v4root-when-not-conf.patch
  Avoid unhelpful warning if rpcsec_gss_krb5.ko not installed</changelog>
  <changelog author="nfbrown@suse.com" date="1687867200">- Add 0032-exportfs-Ingnore-export-failures-in-nfs-server.seriv.patch
  Inconsistencies in /etc/exports shouldn't be fatal.
  (bsc#1212594)</changelog>
</package>
<package pkgid="27a90a1ead793d049315bb7dc54a1b5607a7e09857319b46e001202b40a10cb2" name="nftables" arch="aarch64">
  <version epoch="0" ver="0.9.8" rel="150400.6.3.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 0.8
  * This release contains new features available up to the
    (upcoming) Linux 4.14 kernel release:
  * Support for stateful objects, these objects are uniquely
    identified by a user-defined name, you can refer to them from
    rules, and there is a well established interface to operate
    with them.
  * Sort set elements when listing them, from lower to largest.
  * TCP option matching and mangling support. This includes TCP
    maximum segment size mangling.
  * Add new "-s" option for listings without stateful information.
  * Add new -c/--check option for nft, to tests if your ruleset
    loads fine, into the kernel, this is a dry run mode.
  * Connection tracking helper support.
  * Add --echo option, to print the handle that the kernel
    allocates to uniquely identify rules.
  * Conntrack zone support
  * Symmetric hash support
  * Add support to include directories from nft natives scripts,
    files are loaded in alphanumerical order.
  * Allow to check if IPv6 extension header or TCP option exists
    or is missing.
  * Extend quota support to display used bytes.
  * Add ct average matching, to match average bytes per packet a
    connection has transferred so far, to map the existing
    feature available in the iptables connbytes match.
  * Allow to flush maps and flow tables.
  * Allow to embed set definition into an existing set.
  * Conntrack event filtering support via rule.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- Update to new upstream release 0.8.1
  * This release deprecates the "flow table" syntax in favor
    of "meter".</changelog>
  <changelog author="jengelh@inai.de" date="1517659200">- Update to new upstream release 0.8.2
  * add secpath support</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 0.8.3
  * raw payload support to match headers that do not yet have
    received a mnemonic.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 0.8.4
  * Support to match IPv6 segment routing headers.
  * New "meta ibrname" and "meta obrname" arguments to match the
    name of the logical bridge a packet is passing through.
    These new names replace the old (misnamed) "ibriport"/"obriport".
  * `nft -a` will now show handle identifier for all objects,
    including tables and chains.
  * nft can now delete objects by their handle number.
  * Support to update maps from the ruleset (packet path).
  * the "--echo" option now prints handle id for tables and
    object too.
  * `nft -f -` will now read from standard input
  * Support for flow tables, cf. man page or
    https://lwn.net/Articles/738214/ .</changelog>
  <changelog author="jengelh@inai.de" date="1526040000">- Update to new upstream release 0.8.5
  * support to add/insert a rule at a given index position
  * meter statement now supports a configureable upper max size
  * timeouts for sets can now be specified in milliseconds
  * re-add iptables-like empty skeleton rulesets</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 0.9.0
  * Support to check if packet matches an existing socket.
  * Support to limit number of active connections by arbitrary
    criteria, such as ip addresses, networks, conntrack zones or
    any combination thereof.
  * Added support for "audit" logging.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1651492800">- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
  crashes that could occur e.g. in firewalld (bsc#1197606).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1682424000">- add 0001-evaluate-reject-support-ethernet-as-L2-protocol-for-.patch: this
  fixes a crash in nftables if layer2 reject rules are processed (e.g.
  Ethernet MAC address based reject rich rule in firewalld, bsc#1210773).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1706616000">- port python-single-spec logic from Factory package to allow shipment of
  python311 modules as well (bsc#1219253).</changelog>
</package>
<package pkgid="a100e6b09375d51d7b2047f21f0b9c905fe3db7e8f2f3ffded243a6cbb2df0e4" name="nftables" arch="s390x">
  <version epoch="0" ver="0.9.8" rel="150400.6.3.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 0.8
  * This release contains new features available up to the
    (upcoming) Linux 4.14 kernel release:
  * Support for stateful objects, these objects are uniquely
    identified by a user-defined name, you can refer to them from
    rules, and there is a well established interface to operate
    with them.
  * Sort set elements when listing them, from lower to largest.
  * TCP option matching and mangling support. This includes TCP
    maximum segment size mangling.
  * Add new "-s" option for listings without stateful information.
  * Add new -c/--check option for nft, to tests if your ruleset
    loads fine, into the kernel, this is a dry run mode.
  * Connection tracking helper support.
  * Add --echo option, to print the handle that the kernel
    allocates to uniquely identify rules.
  * Conntrack zone support
  * Symmetric hash support
  * Add support to include directories from nft natives scripts,
    files are loaded in alphanumerical order.
  * Allow to check if IPv6 extension header or TCP option exists
    or is missing.
  * Extend quota support to display used bytes.
  * Add ct average matching, to match average bytes per packet a
    connection has transferred so far, to map the existing
    feature available in the iptables connbytes match.
  * Allow to flush maps and flow tables.
  * Allow to embed set definition into an existing set.
  * Conntrack event filtering support via rule.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- Update to new upstream release 0.8.1
  * This release deprecates the "flow table" syntax in favor
    of "meter".</changelog>
  <changelog author="jengelh@inai.de" date="1517659200">- Update to new upstream release 0.8.2
  * add secpath support</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 0.8.3
  * raw payload support to match headers that do not yet have
    received a mnemonic.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 0.8.4
  * Support to match IPv6 segment routing headers.
  * New "meta ibrname" and "meta obrname" arguments to match the
    name of the logical bridge a packet is passing through.
    These new names replace the old (misnamed) "ibriport"/"obriport".
  * `nft -a` will now show handle identifier for all objects,
    including tables and chains.
  * nft can now delete objects by their handle number.
  * Support to update maps from the ruleset (packet path).
  * the "--echo" option now prints handle id for tables and
    object too.
  * `nft -f -` will now read from standard input
  * Support for flow tables, cf. man page or
    https://lwn.net/Articles/738214/ .</changelog>
  <changelog author="jengelh@inai.de" date="1526040000">- Update to new upstream release 0.8.5
  * support to add/insert a rule at a given index position
  * meter statement now supports a configureable upper max size
  * timeouts for sets can now be specified in milliseconds
  * re-add iptables-like empty skeleton rulesets</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 0.9.0
  * Support to check if packet matches an existing socket.
  * Support to limit number of active connections by arbitrary
    criteria, such as ip addresses, networks, conntrack zones or
    any combination thereof.
  * Added support for "audit" logging.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1651492800">- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
  crashes that could occur e.g. in firewalld (bsc#1197606).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1682424000">- add 0001-evaluate-reject-support-ethernet-as-L2-protocol-for-.patch: this
  fixes a crash in nftables if layer2 reject rules are processed (e.g.
  Ethernet MAC address based reject rich rule in firewalld, bsc#1210773).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1706616000">- port python-single-spec logic from Factory package to allow shipment of
  python311 modules as well (bsc#1219253).</changelog>
</package>
<package pkgid="c7bdd1c39de58f35679c7290174d8699d40ac684117aae0c0acd8300d67feb38" name="nftables" arch="src">
  <version epoch="0" ver="0.9.8" rel="150400.6.3.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 0.8
  * This release contains new features available up to the
    (upcoming) Linux 4.14 kernel release:
  * Support for stateful objects, these objects are uniquely
    identified by a user-defined name, you can refer to them from
    rules, and there is a well established interface to operate
    with them.
  * Sort set elements when listing them, from lower to largest.
  * TCP option matching and mangling support. This includes TCP
    maximum segment size mangling.
  * Add new "-s" option for listings without stateful information.
  * Add new -c/--check option for nft, to tests if your ruleset
    loads fine, into the kernel, this is a dry run mode.
  * Connection tracking helper support.
  * Add --echo option, to print the handle that the kernel
    allocates to uniquely identify rules.
  * Conntrack zone support
  * Symmetric hash support
  * Add support to include directories from nft natives scripts,
    files are loaded in alphanumerical order.
  * Allow to check if IPv6 extension header or TCP option exists
    or is missing.
  * Extend quota support to display used bytes.
  * Add ct average matching, to match average bytes per packet a
    connection has transferred so far, to map the existing
    feature available in the iptables connbytes match.
  * Allow to flush maps and flow tables.
  * Allow to embed set definition into an existing set.
  * Conntrack event filtering support via rule.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- Update to new upstream release 0.8.1
  * This release deprecates the "flow table" syntax in favor
    of "meter".</changelog>
  <changelog author="jengelh@inai.de" date="1517659200">- Update to new upstream release 0.8.2
  * add secpath support</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 0.8.3
  * raw payload support to match headers that do not yet have
    received a mnemonic.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 0.8.4
  * Support to match IPv6 segment routing headers.
  * New "meta ibrname" and "meta obrname" arguments to match the
    name of the logical bridge a packet is passing through.
    These new names replace the old (misnamed) "ibriport"/"obriport".
  * `nft -a` will now show handle identifier for all objects,
    including tables and chains.
  * nft can now delete objects by their handle number.
  * Support to update maps from the ruleset (packet path).
  * the "--echo" option now prints handle id for tables and
    object too.
  * `nft -f -` will now read from standard input
  * Support for flow tables, cf. man page or
    https://lwn.net/Articles/738214/ .</changelog>
  <changelog author="jengelh@inai.de" date="1526040000">- Update to new upstream release 0.8.5
  * support to add/insert a rule at a given index position
  * meter statement now supports a configureable upper max size
  * timeouts for sets can now be specified in milliseconds
  * re-add iptables-like empty skeleton rulesets</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 0.9.0
  * Support to check if packet matches an existing socket.
  * Support to limit number of active connections by arbitrary
    criteria, such as ip addresses, networks, conntrack zones or
    any combination thereof.
  * Added support for "audit" logging.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1651492800">- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
  crashes that could occur e.g. in firewalld (bsc#1197606).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1682424000">- add 0001-evaluate-reject-support-ethernet-as-L2-protocol-for-.patch: this
  fixes a crash in nftables if layer2 reject rules are processed (e.g.
  Ethernet MAC address based reject rich rule in firewalld, bsc#1210773).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1706616000">- port python-single-spec logic from Factory package to allow shipment of
  python311 modules as well (bsc#1219253).</changelog>
</package>
<package pkgid="78e2daf5c8b9cd7e6c92640aa8ffdb56e9806f7211bd760df17d309540d9a558" name="nftables" arch="x86_64">
  <version epoch="0" ver="0.9.8" rel="150400.6.3.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 0.8
  * This release contains new features available up to the
    (upcoming) Linux 4.14 kernel release:
  * Support for stateful objects, these objects are uniquely
    identified by a user-defined name, you can refer to them from
    rules, and there is a well established interface to operate
    with them.
  * Sort set elements when listing them, from lower to largest.
  * TCP option matching and mangling support. This includes TCP
    maximum segment size mangling.
  * Add new "-s" option for listings without stateful information.
  * Add new -c/--check option for nft, to tests if your ruleset
    loads fine, into the kernel, this is a dry run mode.
  * Connection tracking helper support.
  * Add --echo option, to print the handle that the kernel
    allocates to uniquely identify rules.
  * Conntrack zone support
  * Symmetric hash support
  * Add support to include directories from nft natives scripts,
    files are loaded in alphanumerical order.
  * Allow to check if IPv6 extension header or TCP option exists
    or is missing.
  * Extend quota support to display used bytes.
  * Add ct average matching, to match average bytes per packet a
    connection has transferred so far, to map the existing
    feature available in the iptables connbytes match.
  * Allow to flush maps and flow tables.
  * Allow to embed set definition into an existing set.
  * Conntrack event filtering support via rule.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- Update to new upstream release 0.8.1
  * This release deprecates the "flow table" syntax in favor
    of "meter".</changelog>
  <changelog author="jengelh@inai.de" date="1517659200">- Update to new upstream release 0.8.2
  * add secpath support</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 0.8.3
  * raw payload support to match headers that do not yet have
    received a mnemonic.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 0.8.4
  * Support to match IPv6 segment routing headers.
  * New "meta ibrname" and "meta obrname" arguments to match the
    name of the logical bridge a packet is passing through.
    These new names replace the old (misnamed) "ibriport"/"obriport".
  * `nft -a` will now show handle identifier for all objects,
    including tables and chains.
  * nft can now delete objects by their handle number.
  * Support to update maps from the ruleset (packet path).
  * the "--echo" option now prints handle id for tables and
    object too.
  * `nft -f -` will now read from standard input
  * Support for flow tables, cf. man page or
    https://lwn.net/Articles/738214/ .</changelog>
  <changelog author="jengelh@inai.de" date="1526040000">- Update to new upstream release 0.8.5
  * support to add/insert a rule at a given index position
  * meter statement now supports a configureable upper max size
  * timeouts for sets can now be specified in milliseconds
  * re-add iptables-like empty skeleton rulesets</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 0.9.0
  * Support to check if packet matches an existing socket.
  * Support to limit number of active connections by arbitrary
    criteria, such as ip addresses, networks, conntrack zones or
    any combination thereof.
  * Added support for "audit" logging.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1651492800">- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
  crashes that could occur e.g. in firewalld (bsc#1197606).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1682424000">- add 0001-evaluate-reject-support-ethernet-as-L2-protocol-for-.patch: this
  fixes a crash in nftables if layer2 reject rules are processed (e.g.
  Ethernet MAC address based reject rich rule in firewalld, bsc#1210773).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1706616000">- port python-single-spec logic from Factory package to allow shipment of
  python311 modules as well (bsc#1219253).</changelog>
</package>
<package pkgid="9a698f8dcc67d8b37293a5bfa9420cd3c27d50af72a108e51187cfb6819fa746" name="nghttp2" arch="src">
  <version epoch="0" ver="1.40.0" rel="150200.12.1"/>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 “Data Dribble” and CVE-2019-9513
  “Resource Loop” vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695729600">- Fixes memory leak that happens when PUSH_PROMISE or HEADERS frame cannot be
  sent, and nghttp2_on_stream_close_callback fails with a fatal error.
  [CVE-2023-35945 bsc#1215713]
  + nghttp2-CVE-2023-35945.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1697716800">- security update
- added patches
  fix CVE-2023-44487 [bsc#1216123], HTTP/2 Rapid Reset Attack
  + nghttp2-CVE-2023-44487.patch</changelog>
</package>
<package pkgid="83d9402c0f0761a2202d7b3153e35d46a8b6f22538450ada51a824be426b4f61" name="nghttp2" arch="src">
  <version epoch="0" ver="1.40.0" rel="150200.17.1"/>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 “Data Dribble” and CVE-2019-9513
  “Resource Loop” vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695729600">- Fixes memory leak that happens when PUSH_PROMISE or HEADERS frame cannot be
  sent, and nghttp2_on_stream_close_callback fails with a fatal error.
  [CVE-2023-35945 bsc#1215713]
  + nghttp2-CVE-2023-35945.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1697716800">- security update
- added patches
  fix CVE-2023-44487 [bsc#1216123], HTTP/2 Rapid Reset Attack
  + nghttp2-CVE-2023-44487.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- security update
- added patches
  fix CVE-2024-28182 [bsc#1221399], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + nghttp2-CVE-2024-28182-1.patch
  fix CVE-2024-28182-2 [bsc#1221399], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + nghttp2-CVE-2024-28182-2.patch</changelog>
</package>
<package pkgid="fc44b45cd1919a729d4eb44ecb31d35175e57fdf0525e12669acfe067950da11" name="nghttp2" arch="src">
  <version epoch="0" ver="1.40.0" rel="150200.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Export PYTHON=/usr/bin/python3 before running configure: allow to
  build without (comnplete) python2 in the buildroot. In any case
  we only ship python3-bindings already.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 “Data Dribble” and CVE-2019-9513
  “Resource Loop” vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695729600">- Fixes memory leak that happens when PUSH_PROMISE or HEADERS frame cannot be
  sent, and nghttp2_on_stream_close_callback fails with a fatal error.
  [CVE-2023-35945 bsc#1215713]
  + nghttp2-CVE-2023-35945.patch</changelog>
</package>
<package pkgid="8965cc46c77c344aac7a5c39ee071bc480fe4941f32517c0a14ef56edabb2626" name="nv-prefer-signed-open-driver" arch="aarch64">
  <version epoch="0" ver="555.42.06" rel="150500.3.52.1"/>
  <changelog author="sndirsch@suse.com" date="1706184000">- mistakenly moved dracut config file from 60-nvidia-%1.conf to
  61-nvidia-%1.conf --&gt; reverted!</changelog>
  <changelog author="sndirsch@suse.com" date="1706184001">- splitted up 61-nvidia-$flavor.conf to 59-nvidia-$flavor.conf
  and 61-nvidia-$flavor.conf, because 'install' line cannot be
  overwritten with higher config number ...</changelog>
  <changelog author="sndirsch@suse.com" date="1707393600">- provide nvidia-open-driver-G06-kmp = %version (jsc#PED-7117)
  * this makes it easy to replace the package from nVidia's
    CUDA repository with this presigned package</changelog>
  <changelog author="sndirsch@suse.com" date="1708344000">- kernel-syms-azure is not available on ALP</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="sndirsch@suse.com" date="1708603201">- remove conflicts to nvidia-open-driver-G06-kmp, since it's now
  provided instead (OMG!); add obsoletes to it as well to make
  sure it gets replaced (bsc#1220196)</changelog>
  <changelog author="sndirsch@suse.com" date="1708689600">- re-enable build of -azure kernel flavor; syntax check was wrong</changelog>
  <changelog author="sndirsch@suse.com" date="1708776000">- Update to 550.54.14
  * Added vGPU Host and vGPU Guest support. For vGPU Host, please
    refer to the README.vgpu packaged in the vGPU Host Package for
    more details.
- supersedes the following patches:
  * 0001-Don-t-override-INSTALL_MOD_DIR.patch
  * kernel-6.7.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1709121600">- let's provide/obsolete nvidia-open-driver-G06 instead of
  nvidia-open-driver-G06-kmp since older versions still had
  conflicts to nvidia-open-driver-G06-kmp ...</changelog>
  <changelog author="sndirsch@suse.com" date="1710849600">- Update to 550.67
- rename pci_ids-unsupported* to pci_ids-supported* files</changelog>
  <changelog author="sndirsch@suse.com" date="1713355200">- Update to 550.76
  * addresses boo#1222972</changelog>
  <changelog author="sndirsch@suse.com" date="1714392000">- Update to 550.78
  * addresses boo#1223454</changelog>
  <changelog author="sndirsch@suse.com" date="1717502400">- Security Update 550.90.07 (boo#1223356) [CVE-2024-0090,
  CVE-2024-0091, CVE-2024-0092]</changelog>
  <changelog author="eich@suse.com" date="1720008000">- Add a second flavor for building the kernel module versions
  used by CUDA. The kmp targetting CUDA contains '-cuda' in
  its name to track its versions separately from the graphics
  kmp. (bsc#1227417)
- Provide the meta package nv-prefer-signed-open-driver to
  make sure the latest available SUSE-build open driver is
  installed - independent of the latest available open driver
  version in he CUDA repository.
  Rationale:
  The package cuda-runtime provides the link between CUDA and
  the kernel driver version through a
  Requires: cuda-drivers &gt;= %version
  This implies that a CUDA version will run withany kernel driver
  version equal or higher than a base version.
  nvidia-compute-G06 provides the glue layer between CUDA and
  a specific version of he kernel driver both by providing
  a set of base libraries and by requiring a specific kernel
  version. 'cuda-drivers' (provided by nvidia-compute-utils-G06)
  requires an unversioned nvidia-compute-G06. With this, the
  resolver will install the latest available and applicable
  nvidia-compute-G06.
  nv-prefer-signed-open-driver then represents the latest available
  open driver version and restricts the nvidia-compute-G06 version
  to it. (bsc#1227419)</changelog>
  <changelog author="sndirsch@suse.com" date="1720094400">- preamble: let the -cuda flavor KMP require the -cuda flavor
  firmware</changelog>
  <changelog author="eich@suse.com" date="1720094401">- To avoid issues with missing dependencies when no CUDA repo
  is present make the dependecy to nvidia-compute-G06 conditional.
- CUDA is not available for Tumbleweed, exclude the build of the
  cuda flavor.</changelog>
  <changelog author="sndirsch@suse.com" date="1720180800">- make buildservice happy; all sources need to be mentioned as such
  in specfile</changelog>
  <changelog author="eich@suse.com" date="1720440000">- Use macro which is set during build but not when running
  `osc service run download_files` to make sure both source versions
  are visible for download. This way, only the correct source
  tarball will be included in the source package of its respective
  flavor but both can be downloaded (updated) simultaniously.</changelog>
  <changelog author="sndirsch@suse.com" date="1720526400">- Update to 550.100 (boo#1227575)
  * Fixed a bug that caused OpenGL triple buffering to behave like
    double buffering.</changelog>
  <changelog author="eich@suse.com" date="1720699200">- Update to version 555.42.06 for CUDA. This tag has become
  available in github, now.</changelog>
</package>
<package pkgid="2fd57da434335044939f2f82e2ebba1993dadf8e59218f5df495a781bd948f30" name="nv-prefer-signed-open-driver" arch="x86_64">
  <version epoch="0" ver="555.42.06" rel="150500.3.52.1"/>
  <changelog author="sndirsch@suse.com" date="1706184000">- mistakenly moved dracut config file from 60-nvidia-%1.conf to
  61-nvidia-%1.conf --&gt; reverted!</changelog>
  <changelog author="sndirsch@suse.com" date="1706184001">- splitted up 61-nvidia-$flavor.conf to 59-nvidia-$flavor.conf
  and 61-nvidia-$flavor.conf, because 'install' line cannot be
  overwritten with higher config number ...</changelog>
  <changelog author="sndirsch@suse.com" date="1707393600">- provide nvidia-open-driver-G06-kmp = %version (jsc#PED-7117)
  * this makes it easy to replace the package from nVidia's
    CUDA repository with this presigned package</changelog>
  <changelog author="sndirsch@suse.com" date="1708344000">- kernel-syms-azure is not available on ALP</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="sndirsch@suse.com" date="1708603201">- remove conflicts to nvidia-open-driver-G06-kmp, since it's now
  provided instead (OMG!); add obsoletes to it as well to make
  sure it gets replaced (bsc#1220196)</changelog>
  <changelog author="sndirsch@suse.com" date="1708689600">- re-enable build of -azure kernel flavor; syntax check was wrong</changelog>
  <changelog author="sndirsch@suse.com" date="1708776000">- Update to 550.54.14
  * Added vGPU Host and vGPU Guest support. For vGPU Host, please
    refer to the README.vgpu packaged in the vGPU Host Package for
    more details.
- supersedes the following patches:
  * 0001-Don-t-override-INSTALL_MOD_DIR.patch
  * kernel-6.7.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1709121600">- let's provide/obsolete nvidia-open-driver-G06 instead of
  nvidia-open-driver-G06-kmp since older versions still had
  conflicts to nvidia-open-driver-G06-kmp ...</changelog>
  <changelog author="sndirsch@suse.com" date="1710849600">- Update to 550.67
- rename pci_ids-unsupported* to pci_ids-supported* files</changelog>
  <changelog author="sndirsch@suse.com" date="1713355200">- Update to 550.76
  * addresses boo#1222972</changelog>
  <changelog author="sndirsch@suse.com" date="1714392000">- Update to 550.78
  * addresses boo#1223454</changelog>
  <changelog author="sndirsch@suse.com" date="1717502400">- Security Update 550.90.07 (boo#1223356) [CVE-2024-0090,
  CVE-2024-0091, CVE-2024-0092]</changelog>
  <changelog author="eich@suse.com" date="1720008000">- Add a second flavor for building the kernel module versions
  used by CUDA. The kmp targetting CUDA contains '-cuda' in
  its name to track its versions separately from the graphics
  kmp. (bsc#1227417)
- Provide the meta package nv-prefer-signed-open-driver to
  make sure the latest available SUSE-build open driver is
  installed - independent of the latest available open driver
  version in he CUDA repository.
  Rationale:
  The package cuda-runtime provides the link between CUDA and
  the kernel driver version through a
  Requires: cuda-drivers &gt;= %version
  This implies that a CUDA version will run withany kernel driver
  version equal or higher than a base version.
  nvidia-compute-G06 provides the glue layer between CUDA and
  a specific version of he kernel driver both by providing
  a set of base libraries and by requiring a specific kernel
  version. 'cuda-drivers' (provided by nvidia-compute-utils-G06)
  requires an unversioned nvidia-compute-G06. With this, the
  resolver will install the latest available and applicable
  nvidia-compute-G06.
  nv-prefer-signed-open-driver then represents the latest available
  open driver version and restricts the nvidia-compute-G06 version
  to it. (bsc#1227419)</changelog>
  <changelog author="sndirsch@suse.com" date="1720094400">- preamble: let the -cuda flavor KMP require the -cuda flavor
  firmware</changelog>
  <changelog author="eich@suse.com" date="1720094401">- To avoid issues with missing dependencies when no CUDA repo
  is present make the dependecy to nvidia-compute-G06 conditional.
- CUDA is not available for Tumbleweed, exclude the build of the
  cuda flavor.</changelog>
  <changelog author="sndirsch@suse.com" date="1720180800">- make buildservice happy; all sources need to be mentioned as such
  in specfile</changelog>
  <changelog author="eich@suse.com" date="1720440000">- Use macro which is set during build but not when running
  `osc service run download_files` to make sure both source versions
  are visible for download. This way, only the correct source
  tarball will be included in the source package of its respective
  flavor but both can be downloaded (updated) simultaniously.</changelog>
  <changelog author="sndirsch@suse.com" date="1720526400">- Update to 550.100 (boo#1227575)
  * Fixed a bug that caused OpenGL triple buffering to behave like
    double buffering.</changelog>
  <changelog author="eich@suse.com" date="1720699200">- Update to version 555.42.06 for CUDA. This tag has become
  available in github, now.</changelog>
</package>
<package pkgid="4426943c4e7723d495369e8b5c8250aaa349bba3be17903290a090e6ef74015e" name="nvidia-open-driver-G06-signed" arch="src">
  <version epoch="0" ver="535.129.03" rel="150500.3.13.1"/>
  <changelog author="sndirsch@suse.com" date="1675080000">- no longer use %hardcode_pci_list macro on TW, since the issue
  with generating wrong PCI ID modaliases for Supplements
  has been fixed now in pesign-obs-integration package for TW
  (boo#1207520)</changelog>
  <changelog author="sndirsch@suse.com" date="1675857600">- Update to version 525.89.02</changelog>
  <changelog author="sndirsch@suse.com" date="1676030400">- no longer use %hardcode_pci_list macro on sle15/Leap15, since the
  issue with generating wrong PCI ID modaliases for Supplements
  has been fixed meanwhile also in pesign-obs-integration package
  for sle15/Leap15 (boo#1207520)</changelog>
  <changelog author="sndirsch@suse.com" date="1680177600">- Update to version 525.105.17</changelog>
  <changelog author="sndirsch@suse.com" date="1682424000">-  Update to version 525.116.03</changelog>
  <changelog author="sndirsch@suse.com" date="1683633600">- Update to version 525.116.04</changelog>
  <changelog author="sndirsch@suse.com" date="1686830400">- Update to version 535.54.03</changelog>
  <changelog author="sndirsch@suse.com" date="1686916800">- _constraints: reserve 4GB of disk space for building in the hope
  that this will be also sufficient when building for sle15-sp5</changelog>
  <changelog author="sndirsch@suse.com" date="1686916801">- _constraints: 4GB wasn't enough; trying 8GB now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1689768000">- Update to version 535.86.05</changelog>
  <changelog author="lnussel@suse.com" date="1690200000">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="sndirsch@suse.com" date="1690286400">- require one-time renamed package kernel-firmware-nvidia-gspx-G06
  from now on (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- Update to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1693915200">- kmp-post.sh/kmp-postun.sh:
  * add/remove nosimplefb=1 kernel option in order to fix Linux
    console also on sle15-sp6/Leap 15.6 kernel, which will come
    with simpledrm support</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- Update to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1696248000">- preamble: added conflict to nvidia-gfxG05-kmp to prevent users
  from accidently installing conflicting proprietary kernelspace
  drivers from CUDA repository</changelog>
  <changelog author="sndirsch@suse.com" date="1697025600">- disabled build of nvidia-peermem module; it's no longer needed
  and never worked anyway (it was only a stub) [boo#1211892]</changelog>
  <changelog author="eich@suse.com" date="1697025601">- Add a devel package so other modules can be built against this
  one. [jira#PED-4964]</changelog>
  <changelog author="sndirsch@suse.com" date="1697544000">- cleanup: get rid of possibiliy to hardcode pci list; it's no
  longer required anyway; secureboot signing has been fixed ...
- removed pci-table.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- Update to version 535.129.03</changelog>
</package>
<package pkgid="991939d171d07e353ed22dd17bbf02ed51e1da78d0c385b12372071e75300417" name="nvidia-open-driver-G06-signed" arch="src">
  <version epoch="0" ver="545.29.02" rel="150500.3.18.1"/>
  <changelog author="sndirsch@suse.com" date="1682424000">-  Update to version 525.116.03</changelog>
  <changelog author="sndirsch@suse.com" date="1683633600">- Update to version 525.116.04</changelog>
  <changelog author="sndirsch@suse.com" date="1686830400">- Update to version 535.54.03</changelog>
  <changelog author="sndirsch@suse.com" date="1686916800">- _constraints: reserve 4GB of disk space for building in the hope
  that this will be also sufficient when building for sle15-sp5</changelog>
  <changelog author="sndirsch@suse.com" date="1686916801">- _constraints: 4GB wasn't enough; trying 8GB now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1689768000">- Update to version 535.86.05</changelog>
  <changelog author="lnussel@suse.com" date="1690200000">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="sndirsch@suse.com" date="1690286400">- require one-time renamed package kernel-firmware-nvidia-gspx-G06
  from now on (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- Update to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1693915200">- kmp-post.sh/kmp-postun.sh:
  * add/remove nosimplefb=1 kernel option in order to fix Linux
    console also on sle15-sp6/Leap 15.6 kernel, which will come
    with simpledrm support</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- Update to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1696248000">- preamble: added conflict to nvidia-gfxG05-kmp to prevent users
  from accidently installing conflicting proprietary kernelspace
  drivers from CUDA repository</changelog>
  <changelog author="sndirsch@suse.com" date="1697025600">- disabled build of nvidia-peermem module; it's no longer needed
  and never worked anyway (it was only a stub) [boo#1211892]</changelog>
  <changelog author="eich@suse.com" date="1697025601">- Add a devel package so other modules can be built against this
  one. [jira#PED-4964]</changelog>
  <changelog author="sndirsch@suse.com" date="1697544000">- cleanup: get rid of possibiliy to hardcode pci list; it's no
  longer required anyway; secureboot signing has been fixed ...
- removed pci-table.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- Update to version 535.129.03</changelog>
  <changelog author="sndirsch@suse.com" date="1699012800">- cleanup; sle12 no longer supported</changelog>
  <changelog author="sndirsch@suse.com" date="1699876800">- Update to 545.29.02
- added fbdev=1 option for nvidia-drm module, which gives us a proper
  framebuffer console now ...
- nosimplefb kernel option no longer needed with usage of nvidia-drm's
  fbdev=1 option
- nvidia's NVreg_OpenRmEnableUnsupportedGpus=1 option no longer
  needed; GeForce and Workstation GPUs now officially supported
- support added for H100/H800 GPUs (Hopper)</changelog>
  <changelog author="sndirsch@suse.com" date="1700568000">- use different modprobe.d config file to resolve conflict with
  older driver package (boo#1217370); overwrite
  NVreg_OpenRMEnableSupporteGpus driver option setting (disable it),
  since letting it enabled is supposed to break booting (boo#1215981,
  comment#23)</changelog>
  <changelog author="sndirsch@suse.com" date="1700654400">- no longer try to overwrite NVreg_OpenRMEnableSupporteGpus driver
  option setting; apparently it's ignored by the driver (boo#1215981,
  comment#26)</changelog>
</package>
<package pkgid="f060d0f2c30be49e9e6fb88ffd38e185873152513fe0121f3447084635f86918" name="nvidia-open-driver-G06-signed" arch="src">
  <version epoch="0" ver="545.29.06" rel="150500.3.21.5"/>
  <changelog author="sndirsch@suse.com" date="1686830400">- Update to version 535.54.03</changelog>
  <changelog author="sndirsch@suse.com" date="1686916800">- _constraints: reserve 4GB of disk space for building in the hope
  that this will be also sufficient when building for sle15-sp5</changelog>
  <changelog author="sndirsch@suse.com" date="1686916801">- _constraints: 4GB wasn't enough; trying 8GB now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1689768000">- Update to version 535.86.05</changelog>
  <changelog author="lnussel@suse.com" date="1690200000">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="sndirsch@suse.com" date="1690286400">- require one-time renamed package kernel-firmware-nvidia-gspx-G06
  from now on (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- Update to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1693915200">- kmp-post.sh/kmp-postun.sh:
  * add/remove nosimplefb=1 kernel option in order to fix Linux
    console also on sle15-sp6/Leap 15.6 kernel, which will come
    with simpledrm support</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- Update to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1696248000">- preamble: added conflict to nvidia-gfxG05-kmp to prevent users
  from accidently installing conflicting proprietary kernelspace
  drivers from CUDA repository</changelog>
  <changelog author="sndirsch@suse.com" date="1697025600">- disabled build of nvidia-peermem module; it's no longer needed
  and never worked anyway (it was only a stub) [boo#1211892]</changelog>
  <changelog author="eich@suse.com" date="1697025601">- Add a devel package so other modules can be built against this
  one. [jira#PED-4964]</changelog>
  <changelog author="sndirsch@suse.com" date="1697544000">- cleanup: get rid of possibiliy to hardcode pci list; it's no
  longer required anyway; secureboot signing has been fixed ...
- removed pci-table.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- Update to version 535.129.03</changelog>
  <changelog author="sndirsch@suse.com" date="1699012800">- cleanup; sle12 no longer supported</changelog>
  <changelog author="sndirsch@suse.com" date="1699876800">- Update to 545.29.02
- added fbdev=1 option for nvidia-drm module, which gives us a proper
  framebuffer console now ...
- nosimplefb kernel option no longer needed with usage of nvidia-drm's
  fbdev=1 option
- nvidia's NVreg_OpenRmEnableUnsupportedGpus=1 option no longer
  needed; GeForce and Workstation GPUs now officially supported
- support added for H100/H800 GPUs (Hopper)</changelog>
  <changelog author="sndirsch@suse.com" date="1700568000">- use different modprobe.d config file to resolve conflict with
  older driver package (boo#1217370); overwrite
  NVreg_OpenRmEnableUnsupportedGpus driver option setting (disable it),
  since letting it enabled is supposed to break booting (boo#1215981,
  comment#23)</changelog>
  <changelog author="sndirsch@suse.com" date="1700654400">- no longer try to overwrite NVreg_OpenRmEnableUnsupportedGpus driver
  option setting; apparently it's ignored by the driver (boo#1215981,
  comment#26)</changelog>
  <changelog author="sndirsch@suse.com" date="1700740800">- Update to 545.29.06</changelog>
  <changelog author="sndirsch@suse.com" date="1701777600">- fix typo in changelog:
  * NVreg_OpenRMEnableSupporteGpus -&gt; NVreg_OpenRmEnableUnsupportedGpus
    (boo#1215981, comment#33)</changelog>
</package>
<package pkgid="8b8256e81bea6701ca855d67b98a22979ff6163a39987e633585fb6c9a3815bf" name="nvidia-open-driver-G06-signed" arch="src">
  <version epoch="0" ver="550.100" rel="150500.3.52.1"/>
  <changelog author="sndirsch@suse.com" date="1706184000">- mistakenly moved dracut config file from 60-nvidia-%1.conf to
  61-nvidia-%1.conf --&gt; reverted!</changelog>
  <changelog author="sndirsch@suse.com" date="1706184001">- splitted up 61-nvidia-$flavor.conf to 59-nvidia-$flavor.conf
  and 61-nvidia-$flavor.conf, because 'install' line cannot be
  overwritten with higher config number ...</changelog>
  <changelog author="sndirsch@suse.com" date="1707393600">- provide nvidia-open-driver-G06-kmp = %version (jsc#PED-7117)
  * this makes it easy to replace the package from nVidia's
    CUDA repository with this presigned package</changelog>
  <changelog author="sndirsch@suse.com" date="1708344000">- kernel-syms-azure is not available on ALP</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="sndirsch@suse.com" date="1708603201">- remove conflicts to nvidia-open-driver-G06-kmp, since it's now
  provided instead (OMG!); add obsoletes to it as well to make
  sure it gets replaced (bsc#1220196)</changelog>
  <changelog author="sndirsch@suse.com" date="1708689600">- re-enable build of -azure kernel flavor; syntax check was wrong</changelog>
  <changelog author="sndirsch@suse.com" date="1708776000">- Update to 550.54.14
  * Added vGPU Host and vGPU Guest support. For vGPU Host, please
    refer to the README.vgpu packaged in the vGPU Host Package for
    more details.
- supersedes the following patches:
  * 0001-Don-t-override-INSTALL_MOD_DIR.patch
  * kernel-6.7.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1709121600">- let's provide/obsolete nvidia-open-driver-G06 instead of
  nvidia-open-driver-G06-kmp since older versions still had
  conflicts to nvidia-open-driver-G06-kmp ...</changelog>
  <changelog author="sndirsch@suse.com" date="1710849600">- Update to 550.67
- rename pci_ids-unsupported* to pci_ids-supported* files</changelog>
  <changelog author="sndirsch@suse.com" date="1713355200">- Update to 550.76
  * addresses boo#1222972</changelog>
  <changelog author="sndirsch@suse.com" date="1714392000">- Update to 550.78
  * addresses boo#1223454</changelog>
  <changelog author="sndirsch@suse.com" date="1717502400">- Security Update 550.90.07 (boo#1223356) [CVE-2024-0090,
  CVE-2024-0091, CVE-2024-0092]</changelog>
  <changelog author="eich@suse.com" date="1720008000">- Add a second flavor for building the kernel module versions
  used by CUDA. The kmp targetting CUDA contains '-cuda' in
  its name to track its versions separately from the graphics
  kmp. (bsc#1227417)
- Provide the meta package nv-prefer-signed-open-driver to
  make sure the latest available SUSE-build open driver is
  installed - independent of the latest available open driver
  version in he CUDA repository.
  Rationale:
  The package cuda-runtime provides the link between CUDA and
  the kernel driver version through a
  Requires: cuda-drivers &gt;= %version
  This implies that a CUDA version will run withany kernel driver
  version equal or higher than a base version.
  nvidia-compute-G06 provides the glue layer between CUDA and
  a specific version of he kernel driver both by providing
  a set of base libraries and by requiring a specific kernel
  version. 'cuda-drivers' (provided by nvidia-compute-utils-G06)
  requires an unversioned nvidia-compute-G06. With this, the
  resolver will install the latest available and applicable
  nvidia-compute-G06.
  nv-prefer-signed-open-driver then represents the latest available
  open driver version and restricts the nvidia-compute-G06 version
  to it. (bsc#1227419)</changelog>
  <changelog author="sndirsch@suse.com" date="1720094400">- preamble: let the -cuda flavor KMP require the -cuda flavor
  firmware</changelog>
  <changelog author="eich@suse.com" date="1720094401">- To avoid issues with missing dependencies when no CUDA repo
  is present make the dependecy to nvidia-compute-G06 conditional.
- CUDA is not available for Tumbleweed, exclude the build of the
  cuda flavor.</changelog>
  <changelog author="sndirsch@suse.com" date="1720180800">- make buildservice happy; all sources need to be mentioned as such
  in specfile</changelog>
  <changelog author="eich@suse.com" date="1720440000">- Use macro which is set during build but not when running
  `osc service run download_files` to make sure both source versions
  are visible for download. This way, only the correct source
  tarball will be included in the source package of its respective
  flavor but both can be downloaded (updated) simultaniously.</changelog>
  <changelog author="sndirsch@suse.com" date="1720526400">- Update to 550.100 (boo#1227575)
  * Fixed a bug that caused OpenGL triple buffering to behave like
    double buffering.</changelog>
  <changelog author="eich@suse.com" date="1720699200">- Update to version 555.42.06 for CUDA. This tag has become
  available in github, now.</changelog>
</package>
<package pkgid="0e4387f4a46c90f6837bf01425423f83e17b0e1ad315bb716df2de483f0333cb" name="nvidia-open-driver-G06-signed" arch="src">
  <version epoch="0" ver="550.54.14" rel="150500.3.36.1"/>
  <changelog author="sndirsch@suse.com" date="1697544000">- cleanup: get rid of possibiliy to hardcode pci list; it's no
  longer required anyway; secureboot signing has been fixed ...
- removed pci-table.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- Update to version 535.129.03</changelog>
  <changelog author="sndirsch@suse.com" date="1699012800">- cleanup; sle12 no longer supported</changelog>
  <changelog author="sndirsch@suse.com" date="1699876800">- Update to 545.29.02
- added fbdev=1 option for nvidia-drm module, which gives us a proper
  framebuffer console now ...
- nosimplefb kernel option no longer needed with usage of nvidia-drm's
  fbdev=1 option
- nvidia's NVreg_OpenRmEnableUnsupportedGpus=1 option no longer
  needed; GeForce and Workstation GPUs now officially supported
- support added for H100/H800 GPUs (Hopper)</changelog>
  <changelog author="sndirsch@suse.com" date="1700568000">- use different modprobe.d config file to resolve conflict with
  older driver package (boo#1217370); overwrite
  NVreg_OpenRmEnableUnsupportedGpus driver option setting (disable it),
  since letting it enabled is supposed to break booting (boo#1215981,
  comment#23)</changelog>
  <changelog author="sndirsch@suse.com" date="1700654400">- no longer try to overwrite NVreg_OpenRmEnableUnsupportedGpus driver
  option setting; apparently it's ignored by the driver (boo#1215981,
  comment#26)</changelog>
  <changelog author="sndirsch@suse.com" date="1700740800">- Update to 545.29.06</changelog>
  <changelog author="sndirsch@suse.com" date="1701777600">- fix typo in changelog:
  * NVreg_OpenRMEnableSupporteGpus -&gt; NVreg_OpenRmEnableUnsupportedGpus
    (boo#1215981, comment#33)</changelog>
  <changelog author="sndirsch@suse.com" date="1704801600">- create /run/udev/static_node-tags/uaccess/nvidia${devid} symlinks
  also during modprobing the nvidia module; this changes the issue
  of not having access to /dev/nvidia${devid}, when gfxcard has
  been replaced by a different gfx card after installing the driver</changelog>
  <changelog author="sndirsch@suse.com" date="1706097600">- kernel-6.7.patch
  * fixes build against kernel 6.7 (boo#1219117)</changelog>
  <changelog author="sndirsch@suse.com" date="1706184000">- switched from 60-nvidia-$flavor.conf to 61-nvidia-$flavor.conf in
  modprobe.d to resolve conflict with older package, which can be
  installed in parallel</changelog>
  <changelog author="sndirsch@suse.com" date="1706184001">- mistakenly moved dracut config file from 60-nvidia-%1.conf to
  61-nvidia-%1.conf --&gt; reverted!</changelog>
  <changelog author="sndirsch@suse.com" date="1706184002">- splitted up 61-nvidia-$flavor.conf to 59-nvidia-$flavor.conf
  and 61-nvidia-$flavor.conf, because 'install' line cannot be
  overwritten with higher config number ...</changelog>
  <changelog author="sndirsch@suse.com" date="1707393600">- provide nvidia-open-driver-G06-kmp = %version (jsc#PED-7117)
  * this makes it easy to replace the package from nVidia's
    CUDA repository with this presigned package</changelog>
  <changelog author="sndirsch@suse.com" date="1708344000">- kernel-syms-azure is not available on ALP</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="sndirsch@suse.com" date="1708603201">- remove conflicts to nvidia-open-driver-G06-kmp, since it's now
  provided instead (OMG!); add obsoletes to it as well to make
  sure it gets replaced (bsc#1220196)</changelog>
  <changelog author="sndirsch@suse.com" date="1708689600">- re-enable build of -azure kernel flavor; syntax check was wrong</changelog>
  <changelog author="sndirsch@suse.com" date="1708776000">- Update to 550.54.14
  * Added vGPU Host and vGPU Guest support. For vGPU Host, please
    refer to the README.vgpu packaged in the vGPU Host Package for
    more details.
- supersedes the following patches:
  * 0001-Don-t-override-INSTALL_MOD_DIR.patch
  * kernel-6.7.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1709121600">- let's provide/obsolete nvidia-open-driver-G06 instead of
  nvidia-open-driver-G06-kmp since older versions still had
  conflicts to nvidia-open-driver-G06-kmp ...</changelog>
</package>
<package pkgid="a4242816b6d057e04e49b47856459c2744ed01f3b4e6e1f7f779f6415d838df2" name="nvidia-open-driver-G06-signed" arch="src">
  <version epoch="0" ver="550.67" rel="150500.3.39.1"/>
  <changelog author="sndirsch@suse.com" date="1698840000">- Update to version 535.129.03</changelog>
  <changelog author="sndirsch@suse.com" date="1699012800">- cleanup; sle12 no longer supported</changelog>
  <changelog author="sndirsch@suse.com" date="1699876800">- Update to 545.29.02
- added fbdev=1 option for nvidia-drm module, which gives us a proper
  framebuffer console now ...
- nosimplefb kernel option no longer needed with usage of nvidia-drm's
  fbdev=1 option
- nvidia's NVreg_OpenRmEnableUnsupportedGpus=1 option no longer
  needed; GeForce and Workstation GPUs now officially supported
- support added for H100/H800 GPUs (Hopper)</changelog>
  <changelog author="sndirsch@suse.com" date="1700568000">- use different modprobe.d config file to resolve conflict with
  older driver package (boo#1217370); overwrite
  NVreg_OpenRmEnableUnsupportedGpus driver option setting (disable it),
  since letting it enabled is supposed to break booting (boo#1215981,
  comment#23)</changelog>
  <changelog author="sndirsch@suse.com" date="1700654400">- no longer try to overwrite NVreg_OpenRmEnableUnsupportedGpus driver
  option setting; apparently it's ignored by the driver (boo#1215981,
  comment#26)</changelog>
  <changelog author="sndirsch@suse.com" date="1700740800">- Update to 545.29.06</changelog>
  <changelog author="sndirsch@suse.com" date="1701777600">- fix typo in changelog:
  * NVreg_OpenRMEnableSupporteGpus -&gt; NVreg_OpenRmEnableUnsupportedGpus
    (boo#1215981, comment#33)</changelog>
  <changelog author="sndirsch@suse.com" date="1704801600">- create /run/udev/static_node-tags/uaccess/nvidia${devid} symlinks
  also during modprobing the nvidia module; this changes the issue
  of not having access to /dev/nvidia${devid}, when gfxcard has
  been replaced by a different gfx card after installing the driver</changelog>
  <changelog author="sndirsch@suse.com" date="1706097600">- kernel-6.7.patch
  * fixes build against kernel 6.7 (boo#1219117)</changelog>
  <changelog author="sndirsch@suse.com" date="1706184000">- switched from 60-nvidia-$flavor.conf to 61-nvidia-$flavor.conf in
  modprobe.d to resolve conflict with older package, which can be
  installed in parallel</changelog>
  <changelog author="sndirsch@suse.com" date="1706184001">- mistakenly moved dracut config file from 60-nvidia-%1.conf to
  61-nvidia-%1.conf --&gt; reverted!</changelog>
  <changelog author="sndirsch@suse.com" date="1706184002">- splitted up 61-nvidia-$flavor.conf to 59-nvidia-$flavor.conf
  and 61-nvidia-$flavor.conf, because 'install' line cannot be
  overwritten with higher config number ...</changelog>
  <changelog author="sndirsch@suse.com" date="1707393600">- provide nvidia-open-driver-G06-kmp = %version (jsc#PED-7117)
  * this makes it easy to replace the package from nVidia's
    CUDA repository with this presigned package</changelog>
  <changelog author="sndirsch@suse.com" date="1708344000">- kernel-syms-azure is not available on ALP</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="sndirsch@suse.com" date="1708603201">- remove conflicts to nvidia-open-driver-G06-kmp, since it's now
  provided instead (OMG!); add obsoletes to it as well to make
  sure it gets replaced (bsc#1220196)</changelog>
  <changelog author="sndirsch@suse.com" date="1708689600">- re-enable build of -azure kernel flavor; syntax check was wrong</changelog>
  <changelog author="sndirsch@suse.com" date="1708776000">- Update to 550.54.14
  * Added vGPU Host and vGPU Guest support. For vGPU Host, please
    refer to the README.vgpu packaged in the vGPU Host Package for
    more details.
- supersedes the following patches:
  * 0001-Don-t-override-INSTALL_MOD_DIR.patch
  * kernel-6.7.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1709121600">- let's provide/obsolete nvidia-open-driver-G06 instead of
  nvidia-open-driver-G06-kmp since older versions still had
  conflicts to nvidia-open-driver-G06-kmp ...</changelog>
  <changelog author="sndirsch@suse.com" date="1710849600">- Update to 550.67
- rename pci_ids-unsupported* to pci_ids-supported* files</changelog>
</package>
<package pkgid="f581c5497150fe9206fad25b3dd9f91cc85ca2f182a08d255b05a5a5afaecad5" name="nvidia-open-driver-G06-signed" arch="src">
  <version epoch="0" ver="550.78" rel="150500.3.44.1"/>
  <changelog author="sndirsch@suse.com" date="1699876800">- Update to 545.29.02
- added fbdev=1 option for nvidia-drm module, which gives us a proper
  framebuffer console now ...
- nosimplefb kernel option no longer needed with usage of nvidia-drm's
  fbdev=1 option
- nvidia's NVreg_OpenRmEnableUnsupportedGpus=1 option no longer
  needed; GeForce and Workstation GPUs now officially supported
- support added for H100/H800 GPUs (Hopper)</changelog>
  <changelog author="sndirsch@suse.com" date="1700568000">- use different modprobe.d config file to resolve conflict with
  older driver package (boo#1217370); overwrite
  NVreg_OpenRmEnableUnsupportedGpus driver option setting (disable it),
  since letting it enabled is supposed to break booting (boo#1215981,
  comment#23)</changelog>
  <changelog author="sndirsch@suse.com" date="1700654400">- no longer try to overwrite NVreg_OpenRmEnableUnsupportedGpus driver
  option setting; apparently it's ignored by the driver (boo#1215981,
  comment#26)</changelog>
  <changelog author="sndirsch@suse.com" date="1700740800">- Update to 545.29.06</changelog>
  <changelog author="sndirsch@suse.com" date="1701777600">- fix typo in changelog:
  * NVreg_OpenRMEnableSupporteGpus -&gt; NVreg_OpenRmEnableUnsupportedGpus
    (boo#1215981, comment#33)</changelog>
  <changelog author="sndirsch@suse.com" date="1704801600">- create /run/udev/static_node-tags/uaccess/nvidia${devid} symlinks
  also during modprobing the nvidia module; this changes the issue
  of not having access to /dev/nvidia${devid}, when gfxcard has
  been replaced by a different gfx card after installing the driver</changelog>
  <changelog author="sndirsch@suse.com" date="1706097600">- kernel-6.7.patch
  * fixes build against kernel 6.7 (boo#1219117)</changelog>
  <changelog author="sndirsch@suse.com" date="1706184000">- switched from 60-nvidia-$flavor.conf to 61-nvidia-$flavor.conf in
  modprobe.d to resolve conflict with older package, which can be
  installed in parallel</changelog>
  <changelog author="sndirsch@suse.com" date="1706184001">- mistakenly moved dracut config file from 60-nvidia-%1.conf to
  61-nvidia-%1.conf --&gt; reverted!</changelog>
  <changelog author="sndirsch@suse.com" date="1706184002">- splitted up 61-nvidia-$flavor.conf to 59-nvidia-$flavor.conf
  and 61-nvidia-$flavor.conf, because 'install' line cannot be
  overwritten with higher config number ...</changelog>
  <changelog author="sndirsch@suse.com" date="1707393600">- provide nvidia-open-driver-G06-kmp = %version (jsc#PED-7117)
  * this makes it easy to replace the package from nVidia's
    CUDA repository with this presigned package</changelog>
  <changelog author="sndirsch@suse.com" date="1708344000">- kernel-syms-azure is not available on ALP</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="sndirsch@suse.com" date="1708603201">- remove conflicts to nvidia-open-driver-G06-kmp, since it's now
  provided instead (OMG!); add obsoletes to it as well to make
  sure it gets replaced (bsc#1220196)</changelog>
  <changelog author="sndirsch@suse.com" date="1708689600">- re-enable build of -azure kernel flavor; syntax check was wrong</changelog>
  <changelog author="sndirsch@suse.com" date="1708776000">- Update to 550.54.14
  * Added vGPU Host and vGPU Guest support. For vGPU Host, please
    refer to the README.vgpu packaged in the vGPU Host Package for
    more details.
- supersedes the following patches:
  * 0001-Don-t-override-INSTALL_MOD_DIR.patch
  * kernel-6.7.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1709121600">- let's provide/obsolete nvidia-open-driver-G06 instead of
  nvidia-open-driver-G06-kmp since older versions still had
  conflicts to nvidia-open-driver-G06-kmp ...</changelog>
  <changelog author="sndirsch@suse.com" date="1710849600">- Update to 550.67
- rename pci_ids-unsupported* to pci_ids-supported* files</changelog>
  <changelog author="sndirsch@suse.com" date="1713355200">- Update to 550.76
  * addresses boo#1222972</changelog>
  <changelog author="sndirsch@suse.com" date="1714392000">- Update to 550.78
  * addresses boo#1223454</changelog>
</package>
<package pkgid="78f45a22b6db7e4b84a374f5f53e7fac7733feda98deee1a89f5e4e2ef4656da" name="nvidia-open-driver-G06-signed" arch="src">
  <version epoch="0" ver="550.90.07" rel="150500.3.47.1"/>
  <changelog author="sndirsch@suse.com" date="1700568000">- use different modprobe.d config file to resolve conflict with
  older driver package (boo#1217370); overwrite
  NVreg_OpenRmEnableUnsupportedGpus driver option setting (disable it),
  since letting it enabled is supposed to break booting (boo#1215981,
  comment#23)</changelog>
  <changelog author="sndirsch@suse.com" date="1700654400">- no longer try to overwrite NVreg_OpenRmEnableUnsupportedGpus driver
  option setting; apparently it's ignored by the driver (boo#1215981,
  comment#26)</changelog>
  <changelog author="sndirsch@suse.com" date="1700740800">- Update to 545.29.06</changelog>
  <changelog author="sndirsch@suse.com" date="1701777600">- fix typo in changelog:
  * NVreg_OpenRMEnableSupporteGpus -&gt; NVreg_OpenRmEnableUnsupportedGpus
    (boo#1215981, comment#33)</changelog>
  <changelog author="sndirsch@suse.com" date="1704801600">- create /run/udev/static_node-tags/uaccess/nvidia${devid} symlinks
  also during modprobing the nvidia module; this changes the issue
  of not having access to /dev/nvidia${devid}, when gfxcard has
  been replaced by a different gfx card after installing the driver</changelog>
  <changelog author="sndirsch@suse.com" date="1706097600">- kernel-6.7.patch
  * fixes build against kernel 6.7 (boo#1219117)</changelog>
  <changelog author="sndirsch@suse.com" date="1706184000">- switched from 60-nvidia-$flavor.conf to 61-nvidia-$flavor.conf in
  modprobe.d to resolve conflict with older package, which can be
  installed in parallel</changelog>
  <changelog author="sndirsch@suse.com" date="1706184001">- mistakenly moved dracut config file from 60-nvidia-%1.conf to
  61-nvidia-%1.conf --&gt; reverted!</changelog>
  <changelog author="sndirsch@suse.com" date="1706184002">- splitted up 61-nvidia-$flavor.conf to 59-nvidia-$flavor.conf
  and 61-nvidia-$flavor.conf, because 'install' line cannot be
  overwritten with higher config number ...</changelog>
  <changelog author="sndirsch@suse.com" date="1707393600">- provide nvidia-open-driver-G06-kmp = %version (jsc#PED-7117)
  * this makes it easy to replace the package from nVidia's
    CUDA repository with this presigned package</changelog>
  <changelog author="sndirsch@suse.com" date="1708344000">- kernel-syms-azure is not available on ALP</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="sndirsch@suse.com" date="1708603201">- remove conflicts to nvidia-open-driver-G06-kmp, since it's now
  provided instead (OMG!); add obsoletes to it as well to make
  sure it gets replaced (bsc#1220196)</changelog>
  <changelog author="sndirsch@suse.com" date="1708689600">- re-enable build of -azure kernel flavor; syntax check was wrong</changelog>
  <changelog author="sndirsch@suse.com" date="1708776000">- Update to 550.54.14
  * Added vGPU Host and vGPU Guest support. For vGPU Host, please
    refer to the README.vgpu packaged in the vGPU Host Package for
    more details.
- supersedes the following patches:
  * 0001-Don-t-override-INSTALL_MOD_DIR.patch
  * kernel-6.7.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1709121600">- let's provide/obsolete nvidia-open-driver-G06 instead of
  nvidia-open-driver-G06-kmp since older versions still had
  conflicts to nvidia-open-driver-G06-kmp ...</changelog>
  <changelog author="sndirsch@suse.com" date="1710849600">- Update to 550.67
- rename pci_ids-unsupported* to pci_ids-supported* files</changelog>
  <changelog author="sndirsch@suse.com" date="1713355200">- Update to 550.76
  * addresses boo#1222972</changelog>
  <changelog author="sndirsch@suse.com" date="1714392000">- Update to 550.78
  * addresses boo#1223454</changelog>
  <changelog author="sndirsch@suse.com" date="1717502400">- Security Update 550.90.07 (boo#1223356) [CVE-2024-0090,
  CVE-2024-0091, CVE-2024-0092]</changelog>
</package>
<package pkgid="0b63212b52c1423c2f5fea4f7672bf6a3deba36e2d4d71ba17ad6c654663f8b9" name="nvidia-open-driver-G06-signed-cuda" arch="src">
  <version epoch="0" ver="555.42.06" rel="150500.3.52.1"/>
  <changelog author="sndirsch@suse.com" date="1706184000">- mistakenly moved dracut config file from 60-nvidia-%1.conf to
  61-nvidia-%1.conf --&gt; reverted!</changelog>
  <changelog author="sndirsch@suse.com" date="1706184001">- splitted up 61-nvidia-$flavor.conf to 59-nvidia-$flavor.conf
  and 61-nvidia-$flavor.conf, because 'install' line cannot be
  overwritten with higher config number ...</changelog>
  <changelog author="sndirsch@suse.com" date="1707393600">- provide nvidia-open-driver-G06-kmp = %version (jsc#PED-7117)
  * this makes it easy to replace the package from nVidia's
    CUDA repository with this presigned package</changelog>
  <changelog author="sndirsch@suse.com" date="1708344000">- kernel-syms-azure is not available on ALP</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="sndirsch@suse.com" date="1708603201">- remove conflicts to nvidia-open-driver-G06-kmp, since it's now
  provided instead (OMG!); add obsoletes to it as well to make
  sure it gets replaced (bsc#1220196)</changelog>
  <changelog author="sndirsch@suse.com" date="1708689600">- re-enable build of -azure kernel flavor; syntax check was wrong</changelog>
  <changelog author="sndirsch@suse.com" date="1708776000">- Update to 550.54.14
  * Added vGPU Host and vGPU Guest support. For vGPU Host, please
    refer to the README.vgpu packaged in the vGPU Host Package for
    more details.
- supersedes the following patches:
  * 0001-Don-t-override-INSTALL_MOD_DIR.patch
  * kernel-6.7.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1709121600">- let's provide/obsolete nvidia-open-driver-G06 instead of
  nvidia-open-driver-G06-kmp since older versions still had
  conflicts to nvidia-open-driver-G06-kmp ...</changelog>
  <changelog author="sndirsch@suse.com" date="1710849600">- Update to 550.67
- rename pci_ids-unsupported* to pci_ids-supported* files</changelog>
  <changelog author="sndirsch@suse.com" date="1713355200">- Update to 550.76
  * addresses boo#1222972</changelog>
  <changelog author="sndirsch@suse.com" date="1714392000">- Update to 550.78
  * addresses boo#1223454</changelog>
  <changelog author="sndirsch@suse.com" date="1717502400">- Security Update 550.90.07 (boo#1223356) [CVE-2024-0090,
  CVE-2024-0091, CVE-2024-0092]</changelog>
  <changelog author="eich@suse.com" date="1720008000">- Add a second flavor for building the kernel module versions
  used by CUDA. The kmp targetting CUDA contains '-cuda' in
  its name to track its versions separately from the graphics
  kmp. (bsc#1227417)
- Provide the meta package nv-prefer-signed-open-driver to
  make sure the latest available SUSE-build open driver is
  installed - independent of the latest available open driver
  version in he CUDA repository.
  Rationale:
  The package cuda-runtime provides the link between CUDA and
  the kernel driver version through a
  Requires: cuda-drivers &gt;= %version
  This implies that a CUDA version will run withany kernel driver
  version equal or higher than a base version.
  nvidia-compute-G06 provides the glue layer between CUDA and
  a specific version of he kernel driver both by providing
  a set of base libraries and by requiring a specific kernel
  version. 'cuda-drivers' (provided by nvidia-compute-utils-G06)
  requires an unversioned nvidia-compute-G06. With this, the
  resolver will install the latest available and applicable
  nvidia-compute-G06.
  nv-prefer-signed-open-driver then represents the latest available
  open driver version and restricts the nvidia-compute-G06 version
  to it. (bsc#1227419)</changelog>
  <changelog author="sndirsch@suse.com" date="1720094400">- preamble: let the -cuda flavor KMP require the -cuda flavor
  firmware</changelog>
  <changelog author="eich@suse.com" date="1720094401">- To avoid issues with missing dependencies when no CUDA repo
  is present make the dependecy to nvidia-compute-G06 conditional.
- CUDA is not available for Tumbleweed, exclude the build of the
  cuda flavor.</changelog>
  <changelog author="sndirsch@suse.com" date="1720180800">- make buildservice happy; all sources need to be mentioned as such
  in specfile</changelog>
  <changelog author="eich@suse.com" date="1720440000">- Use macro which is set during build but not when running
  `osc service run download_files` to make sure both source versions
  are visible for download. This way, only the correct source
  tarball will be included in the source package of its respective
  flavor but both can be downloaded (updated) simultaniously.</changelog>
  <changelog author="sndirsch@suse.com" date="1720526400">- Update to 550.100 (boo#1227575)
  * Fixed a bug that caused OpenGL triple buffering to behave like
    double buffering.</changelog>
  <changelog author="eich@suse.com" date="1720699200">- Update to version 555.42.06 for CUDA. This tag has become
  available in github, now.</changelog>
</package>
<package pkgid="abadf6c9569a423f5436487f379b9fe44ca6673a1dcbdc92b5d8fa1539fb134b" name="nvidia-open-driver-G06-signed-cuda-default-devel" arch="aarch64">
  <version epoch="0" ver="555.42.06" rel="150500.3.52.1"/>
  <changelog author="sndirsch@suse.com" date="1706184000">- mistakenly moved dracut config file from 60-nvidia-%1.conf to
  61-nvidia-%1.conf --&gt; reverted!</changelog>
  <changelog author="sndirsch@suse.com" date="1706184001">- splitted up 61-nvidia-$flavor.conf to 59-nvidia-$flavor.conf
  and 61-nvidia-$flavor.conf, because 'install' line cannot be
  overwritten with higher config number ...</changelog>
  <changelog author="sndirsch@suse.com" date="1707393600">- provide nvidia-open-driver-G06-kmp = %version (jsc#PED-7117)
  * this makes it easy to replace the package from nVidia's
    CUDA repository with this presigned package</changelog>
  <changelog author="sndirsch@suse.com" date="1708344000">- kernel-syms-azure is not available on ALP</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="sndirsch@suse.com" date="1708603201">- remove conflicts to nvidia-open-driver-G06-kmp, since it's now
  provided instead (OMG!); add obsoletes to it as well to make
  sure it gets replaced (bsc#1220196)</changelog>
  <changelog author="sndirsch@suse.com" date="1708689600">- re-enable build of -azure kernel flavor; syntax check was wrong</changelog>
  <changelog author="sndirsch@suse.com" date="1708776000">- Update to 550.54.14
  * Added vGPU Host and vGPU Guest support. For vGPU Host, please
    refer to the README.vgpu packaged in the vGPU Host Package for
    more details.
- supersedes the following patches:
  * 0001-Don-t-override-INSTALL_MOD_DIR.patch
  * kernel-6.7.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1709121600">- let's provide/obsolete nvidia-open-driver-G06 instead of
  nvidia-open-driver-G06-kmp since older versions still had
  conflicts to nvidia-open-driver-G06-kmp ...</changelog>
  <changelog author="sndirsch@suse.com" date="1710849600">- Update to 550.67
- rename pci_ids-unsupported* to pci_ids-supported* files</changelog>
  <changelog author="sndirsch@suse.com" date="1713355200">- Update to 550.76
  * addresses boo#1222972</changelog>
  <changelog author="sndirsch@suse.com" date="1714392000">- Update to 550.78
  * addresses boo#1223454</changelog>
  <changelog author="sndirsch@suse.com" date="1717502400">- Security Update 550.90.07 (boo#1223356) [CVE-2024-0090,
  CVE-2024-0091, CVE-2024-0092]</changelog>
  <changelog author="eich@suse.com" date="1720008000">- Add a second flavor for building the kernel module versions
  used by CUDA. The kmp targetting CUDA contains '-cuda' in
  its name to track its versions separately from the graphics
  kmp. (bsc#1227417)
- Provide the meta package nv-prefer-signed-open-driver to
  make sure the latest available SUSE-build open driver is
  installed - independent of the latest available open driver
  version in he CUDA repository.
  Rationale:
  The package cuda-runtime provides the link between CUDA and
  the kernel driver version through a
  Requires: cuda-drivers &gt;= %version
  This implies that a CUDA version will run withany kernel driver
  version equal or higher than a base version.
  nvidia-compute-G06 provides the glue layer between CUDA and
  a specific version of he kernel driver both by providing
  a set of base libraries and by requiring a specific kernel
  version. 'cuda-drivers' (provided by nvidia-compute-utils-G06)
  requires an unversioned nvidia-compute-G06. With this, the
  resolver will install the latest available and applicable
  nvidia-compute-G06.
  nv-prefer-signed-open-driver then represents the latest available
  open driver version and restricts the nvidia-compute-G06 version
  to it. (bsc#1227419)</changelog>
  <changelog author="sndirsch@suse.com" date="1720094400">- preamble: let the -cuda flavor KMP require the -cuda flavor
  firmware</changelog>
  <changelog author="eich@suse.com" date="1720094401">- To avoid issues with missing dependencies when no CUDA repo
  is present make the dependecy to nvidia-compute-G06 conditional.
- CUDA is not available for Tumbleweed, exclude the build of the
  cuda flavor.</changelog>
  <changelog author="sndirsch@suse.com" date="1720180800">- make buildservice happy; all sources need to be mentioned as such
  in specfile</changelog>
  <changelog author="eich@suse.com" date="1720440000">- Use macro which is set during build but not when running
  `osc service run download_files` to make sure both source versions
  are visible for download. This way, only the correct source
  tarball will be included in the source package of its respective
  flavor but both can be downloaded (updated) simultaniously.</changelog>
  <changelog author="sndirsch@suse.com" date="1720526400">- Update to 550.100 (boo#1227575)
  * Fixed a bug that caused OpenGL triple buffering to behave like
    double buffering.</changelog>
  <changelog author="eich@suse.com" date="1720699200">- Update to version 555.42.06 for CUDA. This tag has become
  available in github, now.</changelog>
</package>
<package pkgid="a797dd30c49e454bebd76ffe1cb7cbbe9926e1d8acc9a15e7b527ff40498886f" name="nvidia-open-driver-G06-signed-cuda-default-devel" arch="x86_64">
  <version epoch="0" ver="555.42.06" rel="150500.3.52.1"/>
  <changelog author="sndirsch@suse.com" date="1706184000">- mistakenly moved dracut config file from 60-nvidia-%1.conf to
  61-nvidia-%1.conf --&gt; reverted!</changelog>
  <changelog author="sndirsch@suse.com" date="1706184001">- splitted up 61-nvidia-$flavor.conf to 59-nvidia-$flavor.conf
  and 61-nvidia-$flavor.conf, because 'install' line cannot be
  overwritten with higher config number ...</changelog>
  <changelog author="sndirsch@suse.com" date="1707393600">- provide nvidia-open-driver-G06-kmp = %version (jsc#PED-7117)
  * this makes it easy to replace the package from nVidia's
    CUDA repository with this presigned package</changelog>
  <changelog author="sndirsch@suse.com" date="1708344000">- kernel-syms-azure is not available on ALP</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="sndirsch@suse.com" date="1708603201">- remove conflicts to nvidia-open-driver-G06-kmp, since it's now
  provided instead (OMG!); add obsoletes to it as well to make
  sure it gets replaced (bsc#1220196)</changelog>
  <changelog author="sndirsch@suse.com" date="1708689600">- re-enable build of -azure kernel flavor; syntax check was wrong</changelog>
  <changelog author="sndirsch@suse.com" date="1708776000">- Update to 550.54.14
  * Added vGPU Host and vGPU Guest support. For vGPU Host, please
    refer to the README.vgpu packaged in the vGPU Host Package for
    more details.
- supersedes the following patches:
  * 0001-Don-t-override-INSTALL_MOD_DIR.patch
  * kernel-6.7.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1709121600">- let's provide/obsolete nvidia-open-driver-G06 instead of
  nvidia-open-driver-G06-kmp since older versions still had
  conflicts to nvidia-open-driver-G06-kmp ...</changelog>
  <changelog author="sndirsch@suse.com" date="1710849600">- Update to 550.67
- rename pci_ids-unsupported* to pci_ids-supported* files</changelog>
  <changelog author="sndirsch@suse.com" date="1713355200">- Update to 550.76
  * addresses boo#1222972</changelog>
  <changelog author="sndirsch@suse.com" date="1714392000">- Update to 550.78
  * addresses boo#1223454</changelog>
  <changelog author="sndirsch@suse.com" date="1717502400">- Security Update 550.90.07 (boo#1223356) [CVE-2024-0090,
  CVE-2024-0091, CVE-2024-0092]</changelog>
  <changelog author="eich@suse.com" date="1720008000">- Add a second flavor for building the kernel module versions
  used by CUDA. The kmp targetting CUDA contains '-cuda' in
  its name to track its versions separately from the graphics
  kmp. (bsc#1227417)
- Provide the meta package nv-prefer-signed-open-driver to
  make sure the latest available SUSE-build open driver is
  installed - independent of the latest available open driver
  version in he CUDA repository.
  Rationale:
  The package cuda-runtime provides the link between CUDA and
  the kernel driver version through a
  Requires: cuda-drivers &gt;= %version
  This implies that a CUDA version will run withany kernel driver
  version equal or higher than a base version.
  nvidia-compute-G06 provides the glue layer between CUDA and
  a specific version of he kernel driver both by providing
  a set of base libraries and by requiring a specific kernel
  version. 'cuda-drivers' (provided by nvidia-compute-utils-G06)
  requires an unversioned nvidia-compute-G06. With this, the
  resolver will install the latest available and applicable
  nvidia-compute-G06.
  nv-prefer-signed-open-driver then represents the latest available
  open driver version and restricts the nvidia-compute-G06 version
  to it. (bsc#1227419)</changelog>
  <changelog author="sndirsch@suse.com" date="1720094400">- preamble: let the -cuda flavor KMP require the -cuda flavor
  firmware</changelog>
  <changelog author="eich@suse.com" date="1720094401">- To avoid issues with missing dependencies when no CUDA repo
  is present make the dependecy to nvidia-compute-G06 conditional.
- CUDA is not available for Tumbleweed, exclude the build of the
  cuda flavor.</changelog>
  <changelog author="sndirsch@suse.com" date="1720180800">- make buildservice happy; all sources need to be mentioned as such
  in specfile</changelog>
  <changelog author="eich@suse.com" date="1720440000">- Use macro which is set during build but not when running
  `osc service run download_files` to make sure both source versions
  are visible for download. This way, only the correct source
  tarball will be included in the source package of its respective
  flavor but both can be downloaded (updated) simultaniously.</changelog>
  <changelog author="sndirsch@suse.com" date="1720526400">- Update to 550.100 (boo#1227575)
  * Fixed a bug that caused OpenGL triple buffering to behave like
    double buffering.</changelog>
  <changelog author="eich@suse.com" date="1720699200">- Update to version 555.42.06 for CUDA. This tag has become
  available in github, now.</changelog>
</package>
<package pkgid="9eab94a2c6a664ea1359388189c6350e635af216e85b5cff73348c8e996774b9" name="nvidia-open-driver-G06-signed-cuda-kmp-default" arch="aarch64">
  <version epoch="0" ver="555.42.06_k5.14.21_150500.55.68" rel="150500.3.52.1"/>
  <changelog author="sndirsch@suse.com" date="1706184000">- mistakenly moved dracut config file from 60-nvidia-%1.conf to
  61-nvidia-%1.conf --&gt; reverted!</changelog>
  <changelog author="sndirsch@suse.com" date="1706184001">- splitted up 61-nvidia-$flavor.conf to 59-nvidia-$flavor.conf
  and 61-nvidia-$flavor.conf, because 'install' line cannot be
  overwritten with higher config number ...</changelog>
  <changelog author="sndirsch@suse.com" date="1707393600">- provide nvidia-open-driver-G06-kmp = %version (jsc#PED-7117)
  * this makes it easy to replace the package from nVidia's
    CUDA repository with this presigned package</changelog>
  <changelog author="sndirsch@suse.com" date="1708344000">- kernel-syms-azure is not available on ALP</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="sndirsch@suse.com" date="1708603201">- remove conflicts to nvidia-open-driver-G06-kmp, since it's now
  provided instead (OMG!); add obsoletes to it as well to make
  sure it gets replaced (bsc#1220196)</changelog>
  <changelog author="sndirsch@suse.com" date="1708689600">- re-enable build of -azure kernel flavor; syntax check was wrong</changelog>
  <changelog author="sndirsch@suse.com" date="1708776000">- Update to 550.54.14
  * Added vGPU Host and vGPU Guest support. For vGPU Host, please
    refer to the README.vgpu packaged in the vGPU Host Package for
    more details.
- supersedes the following patches:
  * 0001-Don-t-override-INSTALL_MOD_DIR.patch
  * kernel-6.7.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1709121600">- let's provide/obsolete nvidia-open-driver-G06 instead of
  nvidia-open-driver-G06-kmp since older versions still had
  conflicts to nvidia-open-driver-G06-kmp ...</changelog>
  <changelog author="sndirsch@suse.com" date="1710849600">- Update to 550.67
- rename pci_ids-unsupported* to pci_ids-supported* files</changelog>
  <changelog author="sndirsch@suse.com" date="1713355200">- Update to 550.76
  * addresses boo#1222972</changelog>
  <changelog author="sndirsch@suse.com" date="1714392000">- Update to 550.78
  * addresses boo#1223454</changelog>
  <changelog author="sndirsch@suse.com" date="1717502400">- Security Update 550.90.07 (boo#1223356) [CVE-2024-0090,
  CVE-2024-0091, CVE-2024-0092]</changelog>
  <changelog author="eich@suse.com" date="1720008000">- Add a second flavor for building the kernel module versions
  used by CUDA. The kmp targetting CUDA contains '-cuda' in
  its name to track its versions separately from the graphics
  kmp. (bsc#1227417)
- Provide the meta package nv-prefer-signed-open-driver to
  make sure the latest available SUSE-build open driver is
  installed - independent of the latest available open driver
  version in he CUDA repository.
  Rationale:
  The package cuda-runtime provides the link between CUDA and
  the kernel driver version through a
  Requires: cuda-drivers &gt;= %version
  This implies that a CUDA version will run withany kernel driver
  version equal or higher than a base version.
  nvidia-compute-G06 provides the glue layer between CUDA and
  a specific version of he kernel driver both by providing
  a set of base libraries and by requiring a specific kernel
  version. 'cuda-drivers' (provided by nvidia-compute-utils-G06)
  requires an unversioned nvidia-compute-G06. With this, the
  resolver will install the latest available and applicable
  nvidia-compute-G06.
  nv-prefer-signed-open-driver then represents the latest available
  open driver version and restricts the nvidia-compute-G06 version
  to it. (bsc#1227419)</changelog>
  <changelog author="sndirsch@suse.com" date="1720094400">- preamble: let the -cuda flavor KMP require the -cuda flavor
  firmware</changelog>
  <changelog author="eich@suse.com" date="1720094401">- To avoid issues with missing dependencies when no CUDA repo
  is present make the dependecy to nvidia-compute-G06 conditional.
- CUDA is not available for Tumbleweed, exclude the build of the
  cuda flavor.</changelog>
  <changelog author="sndirsch@suse.com" date="1720180800">- make buildservice happy; all sources need to be mentioned as such
  in specfile</changelog>
  <changelog author="eich@suse.com" date="1720440000">- Use macro which is set during build but not when running
  `osc service run download_files` to make sure both source versions
  are visible for download. This way, only the correct source
  tarball will be included in the source package of its respective
  flavor but both can be downloaded (updated) simultaniously.</changelog>
  <changelog author="sndirsch@suse.com" date="1720526400">- Update to 550.100 (boo#1227575)
  * Fixed a bug that caused OpenGL triple buffering to behave like
    double buffering.</changelog>
  <changelog author="eich@suse.com" date="1720699200">- Update to version 555.42.06 for CUDA. This tag has become
  available in github, now.</changelog>
</package>
<package pkgid="33621921896ae05a22dd7cd5831cab757e5d0af083a76bf9effe402f3a8755f3" name="nvidia-open-driver-G06-signed-cuda-kmp-default" arch="x86_64">
  <version epoch="0" ver="555.42.06_k5.14.21_150500.55.68" rel="150500.3.52.1"/>
  <changelog author="sndirsch@suse.com" date="1706184000">- mistakenly moved dracut config file from 60-nvidia-%1.conf to
  61-nvidia-%1.conf --&gt; reverted!</changelog>
  <changelog author="sndirsch@suse.com" date="1706184001">- splitted up 61-nvidia-$flavor.conf to 59-nvidia-$flavor.conf
  and 61-nvidia-$flavor.conf, because 'install' line cannot be
  overwritten with higher config number ...</changelog>
  <changelog author="sndirsch@suse.com" date="1707393600">- provide nvidia-open-driver-G06-kmp = %version (jsc#PED-7117)
  * this makes it easy to replace the package from nVidia's
    CUDA repository with this presigned package</changelog>
  <changelog author="sndirsch@suse.com" date="1708344000">- kernel-syms-azure is not available on ALP</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="sndirsch@suse.com" date="1708603201">- remove conflicts to nvidia-open-driver-G06-kmp, since it's now
  provided instead (OMG!); add obsoletes to it as well to make
  sure it gets replaced (bsc#1220196)</changelog>
  <changelog author="sndirsch@suse.com" date="1708689600">- re-enable build of -azure kernel flavor; syntax check was wrong</changelog>
  <changelog author="sndirsch@suse.com" date="1708776000">- Update to 550.54.14
  * Added vGPU Host and vGPU Guest support. For vGPU Host, please
    refer to the README.vgpu packaged in the vGPU Host Package for
    more details.
- supersedes the following patches:
  * 0001-Don-t-override-INSTALL_MOD_DIR.patch
  * kernel-6.7.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1709121600">- let's provide/obsolete nvidia-open-driver-G06 instead of
  nvidia-open-driver-G06-kmp since older versions still had
  conflicts to nvidia-open-driver-G06-kmp ...</changelog>
  <changelog author="sndirsch@suse.com" date="1710849600">- Update to 550.67
- rename pci_ids-unsupported* to pci_ids-supported* files</changelog>
  <changelog author="sndirsch@suse.com" date="1713355200">- Update to 550.76
  * addresses boo#1222972</changelog>
  <changelog author="sndirsch@suse.com" date="1714392000">- Update to 550.78
  * addresses boo#1223454</changelog>
  <changelog author="sndirsch@suse.com" date="1717502400">- Security Update 550.90.07 (boo#1223356) [CVE-2024-0090,
  CVE-2024-0091, CVE-2024-0092]</changelog>
  <changelog author="eich@suse.com" date="1720008000">- Add a second flavor for building the kernel module versions
  used by CUDA. The kmp targetting CUDA contains '-cuda' in
  its name to track its versions separately from the graphics
  kmp. (bsc#1227417)
- Provide the meta package nv-prefer-signed-open-driver to
  make sure the latest available SUSE-build open driver is
  installed - independent of the latest available open driver
  version in he CUDA repository.
  Rationale:
  The package cuda-runtime provides the link between CUDA and
  the kernel driver version through a
  Requires: cuda-drivers &gt;= %version
  This implies that a CUDA version will run withany kernel driver
  version equal or higher than a base version.
  nvidia-compute-G06 provides the glue layer between CUDA and
  a specific version of he kernel driver both by providing
  a set of base libraries and by requiring a specific kernel
  version. 'cuda-drivers' (provided by nvidia-compute-utils-G06)
  requires an unversioned nvidia-compute-G06. With this, the
  resolver will install the latest available and applicable
  nvidia-compute-G06.
  nv-prefer-signed-open-driver then represents the latest available
  open driver version and restricts the nvidia-compute-G06 version
  to it. (bsc#1227419)</changelog>
  <changelog author="sndirsch@suse.com" date="1720094400">- preamble: let the -cuda flavor KMP require the -cuda flavor
  firmware</changelog>
  <changelog author="eich@suse.com" date="1720094401">- To avoid issues with missing dependencies when no CUDA repo
  is present make the dependecy to nvidia-compute-G06 conditional.
- CUDA is not available for Tumbleweed, exclude the build of the
  cuda flavor.</changelog>
  <changelog author="sndirsch@suse.com" date="1720180800">- make buildservice happy; all sources need to be mentioned as such
  in specfile</changelog>
  <changelog author="eich@suse.com" date="1720440000">- Use macro which is set during build but not when running
  `osc service run download_files` to make sure both source versions
  are visible for download. This way, only the correct source
  tarball will be included in the source package of its respective
  flavor but both can be downloaded (updated) simultaniously.</changelog>
  <changelog author="sndirsch@suse.com" date="1720526400">- Update to 550.100 (boo#1227575)
  * Fixed a bug that caused OpenGL triple buffering to behave like
    double buffering.</changelog>
  <changelog author="eich@suse.com" date="1720699200">- Update to version 555.42.06 for CUDA. This tag has become
  available in github, now.</changelog>
</package>
<package pkgid="2b4d171eedf5127994908286b5cb65743a1a9ba1d54f15e20a0ebc967807466a" name="nvidia-open-driver-G06-signed-default-devel" arch="aarch64">
  <version epoch="0" ver="550.100" rel="150500.3.52.1"/>
  <changelog author="sndirsch@suse.com" date="1706184000">- mistakenly moved dracut config file from 60-nvidia-%1.conf to
  61-nvidia-%1.conf --&gt; reverted!</changelog>
  <changelog author="sndirsch@suse.com" date="1706184001">- splitted up 61-nvidia-$flavor.conf to 59-nvidia-$flavor.conf
  and 61-nvidia-$flavor.conf, because 'install' line cannot be
  overwritten with higher config number ...</changelog>
  <changelog author="sndirsch@suse.com" date="1707393600">- provide nvidia-open-driver-G06-kmp = %version (jsc#PED-7117)
  * this makes it easy to replace the package from nVidia's
    CUDA repository with this presigned package</changelog>
  <changelog author="sndirsch@suse.com" date="1708344000">- kernel-syms-azure is not available on ALP</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="sndirsch@suse.com" date="1708603201">- remove conflicts to nvidia-open-driver-G06-kmp, since it's now
  provided instead (OMG!); add obsoletes to it as well to make
  sure it gets replaced (bsc#1220196)</changelog>
  <changelog author="sndirsch@suse.com" date="1708689600">- re-enable build of -azure kernel flavor; syntax check was wrong</changelog>
  <changelog author="sndirsch@suse.com" date="1708776000">- Update to 550.54.14
  * Added vGPU Host and vGPU Guest support. For vGPU Host, please
    refer to the README.vgpu packaged in the vGPU Host Package for
    more details.
- supersedes the following patches:
  * 0001-Don-t-override-INSTALL_MOD_DIR.patch
  * kernel-6.7.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1709121600">- let's provide/obsolete nvidia-open-driver-G06 instead of
  nvidia-open-driver-G06-kmp since older versions still had
  conflicts to nvidia-open-driver-G06-kmp ...</changelog>
  <changelog author="sndirsch@suse.com" date="1710849600">- Update to 550.67
- rename pci_ids-unsupported* to pci_ids-supported* files</changelog>
  <changelog author="sndirsch@suse.com" date="1713355200">- Update to 550.76
  * addresses boo#1222972</changelog>
  <changelog author="sndirsch@suse.com" date="1714392000">- Update to 550.78
  * addresses boo#1223454</changelog>
  <changelog author="sndirsch@suse.com" date="1717502400">- Security Update 550.90.07 (boo#1223356) [CVE-2024-0090,
  CVE-2024-0091, CVE-2024-0092]</changelog>
  <changelog author="eich@suse.com" date="1720008000">- Add a second flavor for building the kernel module versions
  used by CUDA. The kmp targetting CUDA contains '-cuda' in
  its name to track its versions separately from the graphics
  kmp. (bsc#1227417)
- Provide the meta package nv-prefer-signed-open-driver to
  make sure the latest available SUSE-build open driver is
  installed - independent of the latest available open driver
  version in he CUDA repository.
  Rationale:
  The package cuda-runtime provides the link between CUDA and
  the kernel driver version through a
  Requires: cuda-drivers &gt;= %version
  This implies that a CUDA version will run withany kernel driver
  version equal or higher than a base version.
  nvidia-compute-G06 provides the glue layer between CUDA and
  a specific version of he kernel driver both by providing
  a set of base libraries and by requiring a specific kernel
  version. 'cuda-drivers' (provided by nvidia-compute-utils-G06)
  requires an unversioned nvidia-compute-G06. With this, the
  resolver will install the latest available and applicable
  nvidia-compute-G06.
  nv-prefer-signed-open-driver then represents the latest available
  open driver version and restricts the nvidia-compute-G06 version
  to it. (bsc#1227419)</changelog>
  <changelog author="sndirsch@suse.com" date="1720094400">- preamble: let the -cuda flavor KMP require the -cuda flavor
  firmware</changelog>
  <changelog author="eich@suse.com" date="1720094401">- To avoid issues with missing dependencies when no CUDA repo
  is present make the dependecy to nvidia-compute-G06 conditional.
- CUDA is not available for Tumbleweed, exclude the build of the
  cuda flavor.</changelog>
  <changelog author="sndirsch@suse.com" date="1720180800">- make buildservice happy; all sources need to be mentioned as such
  in specfile</changelog>
  <changelog author="eich@suse.com" date="1720440000">- Use macro which is set during build but not when running
  `osc service run download_files` to make sure both source versions
  are visible for download. This way, only the correct source
  tarball will be included in the source package of its respective
  flavor but both can be downloaded (updated) simultaniously.</changelog>
  <changelog author="sndirsch@suse.com" date="1720526400">- Update to 550.100 (boo#1227575)
  * Fixed a bug that caused OpenGL triple buffering to behave like
    double buffering.</changelog>
  <changelog author="eich@suse.com" date="1720699200">- Update to version 555.42.06 for CUDA. This tag has become
  available in github, now.</changelog>
</package>
<package pkgid="89e1c67cd9110034f1a882d6ee752d52ecc0960934a298baab3c0343f8964f0d" name="nvidia-open-driver-G06-signed-default-devel" arch="x86_64">
  <version epoch="0" ver="550.100" rel="150500.3.52.1"/>
  <changelog author="sndirsch@suse.com" date="1706184000">- mistakenly moved dracut config file from 60-nvidia-%1.conf to
  61-nvidia-%1.conf --&gt; reverted!</changelog>
  <changelog author="sndirsch@suse.com" date="1706184001">- splitted up 61-nvidia-$flavor.conf to 59-nvidia-$flavor.conf
  and 61-nvidia-$flavor.conf, because 'install' line cannot be
  overwritten with higher config number ...</changelog>
  <changelog author="sndirsch@suse.com" date="1707393600">- provide nvidia-open-driver-G06-kmp = %version (jsc#PED-7117)
  * this makes it easy to replace the package from nVidia's
    CUDA repository with this presigned package</changelog>
  <changelog author="sndirsch@suse.com" date="1708344000">- kernel-syms-azure is not available on ALP</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="sndirsch@suse.com" date="1708603201">- remove conflicts to nvidia-open-driver-G06-kmp, since it's now
  provided instead (OMG!); add obsoletes to it as well to make
  sure it gets replaced (bsc#1220196)</changelog>
  <changelog author="sndirsch@suse.com" date="1708689600">- re-enable build of -azure kernel flavor; syntax check was wrong</changelog>
  <changelog author="sndirsch@suse.com" date="1708776000">- Update to 550.54.14
  * Added vGPU Host and vGPU Guest support. For vGPU Host, please
    refer to the README.vgpu packaged in the vGPU Host Package for
    more details.
- supersedes the following patches:
  * 0001-Don-t-override-INSTALL_MOD_DIR.patch
  * kernel-6.7.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1709121600">- let's provide/obsolete nvidia-open-driver-G06 instead of
  nvidia-open-driver-G06-kmp since older versions still had
  conflicts to nvidia-open-driver-G06-kmp ...</changelog>
  <changelog author="sndirsch@suse.com" date="1710849600">- Update to 550.67
- rename pci_ids-unsupported* to pci_ids-supported* files</changelog>
  <changelog author="sndirsch@suse.com" date="1713355200">- Update to 550.76
  * addresses boo#1222972</changelog>
  <changelog author="sndirsch@suse.com" date="1714392000">- Update to 550.78
  * addresses boo#1223454</changelog>
  <changelog author="sndirsch@suse.com" date="1717502400">- Security Update 550.90.07 (boo#1223356) [CVE-2024-0090,
  CVE-2024-0091, CVE-2024-0092]</changelog>
  <changelog author="eich@suse.com" date="1720008000">- Add a second flavor for building the kernel module versions
  used by CUDA. The kmp targetting CUDA contains '-cuda' in
  its name to track its versions separately from the graphics
  kmp. (bsc#1227417)
- Provide the meta package nv-prefer-signed-open-driver to
  make sure the latest available SUSE-build open driver is
  installed - independent of the latest available open driver
  version in he CUDA repository.
  Rationale:
  The package cuda-runtime provides the link between CUDA and
  the kernel driver version through a
  Requires: cuda-drivers &gt;= %version
  This implies that a CUDA version will run withany kernel driver
  version equal or higher than a base version.
  nvidia-compute-G06 provides the glue layer between CUDA and
  a specific version of he kernel driver both by providing
  a set of base libraries and by requiring a specific kernel
  version. 'cuda-drivers' (provided by nvidia-compute-utils-G06)
  requires an unversioned nvidia-compute-G06. With this, the
  resolver will install the latest available and applicable
  nvidia-compute-G06.
  nv-prefer-signed-open-driver then represents the latest available
  open driver version and restricts the nvidia-compute-G06 version
  to it. (bsc#1227419)</changelog>
  <changelog author="sndirsch@suse.com" date="1720094400">- preamble: let the -cuda flavor KMP require the -cuda flavor
  firmware</changelog>
  <changelog author="eich@suse.com" date="1720094401">- To avoid issues with missing dependencies when no CUDA repo
  is present make the dependecy to nvidia-compute-G06 conditional.
- CUDA is not available for Tumbleweed, exclude the build of the
  cuda flavor.</changelog>
  <changelog author="sndirsch@suse.com" date="1720180800">- make buildservice happy; all sources need to be mentioned as such
  in specfile</changelog>
  <changelog author="eich@suse.com" date="1720440000">- Use macro which is set during build but not when running
  `osc service run download_files` to make sure both source versions
  are visible for download. This way, only the correct source
  tarball will be included in the source package of its respective
  flavor but both can be downloaded (updated) simultaniously.</changelog>
  <changelog author="sndirsch@suse.com" date="1720526400">- Update to 550.100 (boo#1227575)
  * Fixed a bug that caused OpenGL triple buffering to behave like
    double buffering.</changelog>
  <changelog author="eich@suse.com" date="1720699200">- Update to version 555.42.06 for CUDA. This tag has become
  available in github, now.</changelog>
</package>
<package pkgid="f4f3a029ad4ceba5eb295824cff3a55eb25dfa6da65c5e5000128f4d1665dcaa" name="nvidia-open-driver-G06-signed-kmp-default" arch="aarch64">
  <version epoch="0" ver="535.129.03_k5.14.21_150500.55.31" rel="150500.3.13.1"/>
  <changelog author="sndirsch@suse.com" date="1675080000">- no longer use %hardcode_pci_list macro on TW, since the issue
  with generating wrong PCI ID modaliases for Supplements
  has been fixed now in pesign-obs-integration package for TW
  (boo#1207520)</changelog>
  <changelog author="sndirsch@suse.com" date="1675857600">- Update to version 525.89.02</changelog>
  <changelog author="sndirsch@suse.com" date="1676030400">- no longer use %hardcode_pci_list macro on sle15/Leap15, since the
  issue with generating wrong PCI ID modaliases for Supplements
  has been fixed meanwhile also in pesign-obs-integration package
  for sle15/Leap15 (boo#1207520)</changelog>
  <changelog author="sndirsch@suse.com" date="1680177600">- Update to version 525.105.17</changelog>
  <changelog author="sndirsch@suse.com" date="1682424000">-  Update to version 525.116.03</changelog>
  <changelog author="sndirsch@suse.com" date="1683633600">- Update to version 525.116.04</changelog>
  <changelog author="sndirsch@suse.com" date="1686830400">- Update to version 535.54.03</changelog>
  <changelog author="sndirsch@suse.com" date="1686916800">- _constraints: reserve 4GB of disk space for building in the hope
  that this will be also sufficient when building for sle15-sp5</changelog>
  <changelog author="sndirsch@suse.com" date="1686916801">- _constraints: 4GB wasn't enough; trying 8GB now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1689768000">- Update to version 535.86.05</changelog>
  <changelog author="lnussel@suse.com" date="1690200000">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="sndirsch@suse.com" date="1690286400">- require one-time renamed package kernel-firmware-nvidia-gspx-G06
  from now on (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- Update to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1693915200">- kmp-post.sh/kmp-postun.sh:
  * add/remove nosimplefb=1 kernel option in order to fix Linux
    console also on sle15-sp6/Leap 15.6 kernel, which will come
    with simpledrm support</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- Update to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1696248000">- preamble: added conflict to nvidia-gfxG05-kmp to prevent users
  from accidently installing conflicting proprietary kernelspace
  drivers from CUDA repository</changelog>
  <changelog author="sndirsch@suse.com" date="1697025600">- disabled build of nvidia-peermem module; it's no longer needed
  and never worked anyway (it was only a stub) [boo#1211892]</changelog>
  <changelog author="eich@suse.com" date="1697025601">- Add a devel package so other modules can be built against this
  one. [jira#PED-4964]</changelog>
  <changelog author="sndirsch@suse.com" date="1697544000">- cleanup: get rid of possibiliy to hardcode pci list; it's no
  longer required anyway; secureboot signing has been fixed ...
- removed pci-table.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- Update to version 535.129.03</changelog>
</package>
<package pkgid="aaab2a83472a74258611b862b9d4b8db9804fe3947de8de280b1485afd565110" name="nvidia-open-driver-G06-signed-kmp-default" arch="x86_64">
  <version epoch="0" ver="535.129.03_k5.14.21_150500.55.31" rel="150500.3.13.1"/>
  <changelog author="sndirsch@suse.com" date="1675080000">- no longer use %hardcode_pci_list macro on TW, since the issue
  with generating wrong PCI ID modaliases for Supplements
  has been fixed now in pesign-obs-integration package for TW
  (boo#1207520)</changelog>
  <changelog author="sndirsch@suse.com" date="1675857600">- Update to version 525.89.02</changelog>
  <changelog author="sndirsch@suse.com" date="1676030400">- no longer use %hardcode_pci_list macro on sle15/Leap15, since the
  issue with generating wrong PCI ID modaliases for Supplements
  has been fixed meanwhile also in pesign-obs-integration package
  for sle15/Leap15 (boo#1207520)</changelog>
  <changelog author="sndirsch@suse.com" date="1680177600">- Update to version 525.105.17</changelog>
  <changelog author="sndirsch@suse.com" date="1682424000">-  Update to version 525.116.03</changelog>
  <changelog author="sndirsch@suse.com" date="1683633600">- Update to version 525.116.04</changelog>
  <changelog author="sndirsch@suse.com" date="1686830400">- Update to version 535.54.03</changelog>
  <changelog author="sndirsch@suse.com" date="1686916800">- _constraints: reserve 4GB of disk space for building in the hope
  that this will be also sufficient when building for sle15-sp5</changelog>
  <changelog author="sndirsch@suse.com" date="1686916801">- _constraints: 4GB wasn't enough; trying 8GB now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1689768000">- Update to version 535.86.05</changelog>
  <changelog author="lnussel@suse.com" date="1690200000">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="sndirsch@suse.com" date="1690286400">- require one-time renamed package kernel-firmware-nvidia-gspx-G06
  from now on (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- Update to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1693915200">- kmp-post.sh/kmp-postun.sh:
  * add/remove nosimplefb=1 kernel option in order to fix Linux
    console also on sle15-sp6/Leap 15.6 kernel, which will come
    with simpledrm support</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- Update to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1696248000">- preamble: added conflict to nvidia-gfxG05-kmp to prevent users
  from accidently installing conflicting proprietary kernelspace
  drivers from CUDA repository</changelog>
  <changelog author="sndirsch@suse.com" date="1697025600">- disabled build of nvidia-peermem module; it's no longer needed
  and never worked anyway (it was only a stub) [boo#1211892]</changelog>
  <changelog author="eich@suse.com" date="1697025601">- Add a devel package so other modules can be built against this
  one. [jira#PED-4964]</changelog>
  <changelog author="sndirsch@suse.com" date="1697544000">- cleanup: get rid of possibiliy to hardcode pci list; it's no
  longer required anyway; secureboot signing has been fixed ...
- removed pci-table.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- Update to version 535.129.03</changelog>
</package>
<package pkgid="93efb3a94bb57aca741bf8db499730dce60a304785cb8c97d549a2552ddc105b" name="nvidia-open-driver-G06-signed-kmp-default" arch="aarch64">
  <version epoch="0" ver="545.29.02_k5.14.21_150500.55.36" rel="150500.3.18.1"/>
  <changelog author="sndirsch@suse.com" date="1682424000">-  Update to version 525.116.03</changelog>
  <changelog author="sndirsch@suse.com" date="1683633600">- Update to version 525.116.04</changelog>
  <changelog author="sndirsch@suse.com" date="1686830400">- Update to version 535.54.03</changelog>
  <changelog author="sndirsch@suse.com" date="1686916800">- _constraints: reserve 4GB of disk space for building in the hope
  that this will be also sufficient when building for sle15-sp5</changelog>
  <changelog author="sndirsch@suse.com" date="1686916801">- _constraints: 4GB wasn't enough; trying 8GB now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1689768000">- Update to version 535.86.05</changelog>
  <changelog author="lnussel@suse.com" date="1690200000">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="sndirsch@suse.com" date="1690286400">- require one-time renamed package kernel-firmware-nvidia-gspx-G06
  from now on (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- Update to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1693915200">- kmp-post.sh/kmp-postun.sh:
  * add/remove nosimplefb=1 kernel option in order to fix Linux
    console also on sle15-sp6/Leap 15.6 kernel, which will come
    with simpledrm support</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- Update to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1696248000">- preamble: added conflict to nvidia-gfxG05-kmp to prevent users
  from accidently installing conflicting proprietary kernelspace
  drivers from CUDA repository</changelog>
  <changelog author="sndirsch@suse.com" date="1697025600">- disabled build of nvidia-peermem module; it's no longer needed
  and never worked anyway (it was only a stub) [boo#1211892]</changelog>
  <changelog author="eich@suse.com" date="1697025601">- Add a devel package so other modules can be built against this
  one. [jira#PED-4964]</changelog>
  <changelog author="sndirsch@suse.com" date="1697544000">- cleanup: get rid of possibiliy to hardcode pci list; it's no
  longer required anyway; secureboot signing has been fixed ...
- removed pci-table.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- Update to version 535.129.03</changelog>
  <changelog author="sndirsch@suse.com" date="1699012800">- cleanup; sle12 no longer supported</changelog>
  <changelog author="sndirsch@suse.com" date="1699876800">- Update to 545.29.02
- added fbdev=1 option for nvidia-drm module, which gives us a proper
  framebuffer console now ...
- nosimplefb kernel option no longer needed with usage of nvidia-drm's
  fbdev=1 option
- nvidia's NVreg_OpenRmEnableUnsupportedGpus=1 option no longer
  needed; GeForce and Workstation GPUs now officially supported
- support added for H100/H800 GPUs (Hopper)</changelog>
  <changelog author="sndirsch@suse.com" date="1700568000">- use different modprobe.d config file to resolve conflict with
  older driver package (boo#1217370); overwrite
  NVreg_OpenRMEnableSupporteGpus driver option setting (disable it),
  since letting it enabled is supposed to break booting (boo#1215981,
  comment#23)</changelog>
  <changelog author="sndirsch@suse.com" date="1700654400">- no longer try to overwrite NVreg_OpenRMEnableSupporteGpus driver
  option setting; apparently it's ignored by the driver (boo#1215981,
  comment#26)</changelog>
</package>
<package pkgid="7add42f98d9865c7bb023d6be024a441fddada9b7159604f37228bdef9cfe58c" name="nvidia-open-driver-G06-signed-kmp-default" arch="x86_64">
  <version epoch="0" ver="545.29.02_k5.14.21_150500.55.36" rel="150500.3.18.1"/>
  <changelog author="sndirsch@suse.com" date="1682424000">-  Update to version 525.116.03</changelog>
  <changelog author="sndirsch@suse.com" date="1683633600">- Update to version 525.116.04</changelog>
  <changelog author="sndirsch@suse.com" date="1686830400">- Update to version 535.54.03</changelog>
  <changelog author="sndirsch@suse.com" date="1686916800">- _constraints: reserve 4GB of disk space for building in the hope
  that this will be also sufficient when building for sle15-sp5</changelog>
  <changelog author="sndirsch@suse.com" date="1686916801">- _constraints: 4GB wasn't enough; trying 8GB now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1689768000">- Update to version 535.86.05</changelog>
  <changelog author="lnussel@suse.com" date="1690200000">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="sndirsch@suse.com" date="1690286400">- require one-time renamed package kernel-firmware-nvidia-gspx-G06
  from now on (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- Update to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1693915200">- kmp-post.sh/kmp-postun.sh:
  * add/remove nosimplefb=1 kernel option in order to fix Linux
    console also on sle15-sp6/Leap 15.6 kernel, which will come
    with simpledrm support</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- Update to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1696248000">- preamble: added conflict to nvidia-gfxG05-kmp to prevent users
  from accidently installing conflicting proprietary kernelspace
  drivers from CUDA repository</changelog>
  <changelog author="sndirsch@suse.com" date="1697025600">- disabled build of nvidia-peermem module; it's no longer needed
  and never worked anyway (it was only a stub) [boo#1211892]</changelog>
  <changelog author="eich@suse.com" date="1697025601">- Add a devel package so other modules can be built against this
  one. [jira#PED-4964]</changelog>
  <changelog author="sndirsch@suse.com" date="1697544000">- cleanup: get rid of possibiliy to hardcode pci list; it's no
  longer required anyway; secureboot signing has been fixed ...
- removed pci-table.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- Update to version 535.129.03</changelog>
  <changelog author="sndirsch@suse.com" date="1699012800">- cleanup; sle12 no longer supported</changelog>
  <changelog author="sndirsch@suse.com" date="1699876800">- Update to 545.29.02
- added fbdev=1 option for nvidia-drm module, which gives us a proper
  framebuffer console now ...
- nosimplefb kernel option no longer needed with usage of nvidia-drm's
  fbdev=1 option
- nvidia's NVreg_OpenRmEnableUnsupportedGpus=1 option no longer
  needed; GeForce and Workstation GPUs now officially supported
- support added for H100/H800 GPUs (Hopper)</changelog>
  <changelog author="sndirsch@suse.com" date="1700568000">- use different modprobe.d config file to resolve conflict with
  older driver package (boo#1217370); overwrite
  NVreg_OpenRMEnableSupporteGpus driver option setting (disable it),
  since letting it enabled is supposed to break booting (boo#1215981,
  comment#23)</changelog>
  <changelog author="sndirsch@suse.com" date="1700654400">- no longer try to overwrite NVreg_OpenRMEnableSupporteGpus driver
  option setting; apparently it's ignored by the driver (boo#1215981,
  comment#26)</changelog>
</package>
<package pkgid="523a84388592b78360549d7e727c5e58aa9194c6f26333f9fe502814b1885bf5" name="nvidia-open-driver-G06-signed-kmp-default" arch="aarch64">
  <version epoch="0" ver="545.29.06_k5.14.21_150500.55.39" rel="150500.3.21.5"/>
  <changelog author="sndirsch@suse.com" date="1686830400">- Update to version 535.54.03</changelog>
  <changelog author="sndirsch@suse.com" date="1686916800">- _constraints: reserve 4GB of disk space for building in the hope
  that this will be also sufficient when building for sle15-sp5</changelog>
  <changelog author="sndirsch@suse.com" date="1686916801">- _constraints: 4GB wasn't enough; trying 8GB now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1689768000">- Update to version 535.86.05</changelog>
  <changelog author="lnussel@suse.com" date="1690200000">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="sndirsch@suse.com" date="1690286400">- require one-time renamed package kernel-firmware-nvidia-gspx-G06
  from now on (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- Update to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1693915200">- kmp-post.sh/kmp-postun.sh:
  * add/remove nosimplefb=1 kernel option in order to fix Linux
    console also on sle15-sp6/Leap 15.6 kernel, which will come
    with simpledrm support</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- Update to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1696248000">- preamble: added conflict to nvidia-gfxG05-kmp to prevent users
  from accidently installing conflicting proprietary kernelspace
  drivers from CUDA repository</changelog>
  <changelog author="sndirsch@suse.com" date="1697025600">- disabled build of nvidia-peermem module; it's no longer needed
  and never worked anyway (it was only a stub) [boo#1211892]</changelog>
  <changelog author="eich@suse.com" date="1697025601">- Add a devel package so other modules can be built against this
  one. [jira#PED-4964]</changelog>
  <changelog author="sndirsch@suse.com" date="1697544000">- cleanup: get rid of possibiliy to hardcode pci list; it's no
  longer required anyway; secureboot signing has been fixed ...
- removed pci-table.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- Update to version 535.129.03</changelog>
  <changelog author="sndirsch@suse.com" date="1699012800">- cleanup; sle12 no longer supported</changelog>
  <changelog author="sndirsch@suse.com" date="1699876800">- Update to 545.29.02
- added fbdev=1 option for nvidia-drm module, which gives us a proper
  framebuffer console now ...
- nosimplefb kernel option no longer needed with usage of nvidia-drm's
  fbdev=1 option
- nvidia's NVreg_OpenRmEnableUnsupportedGpus=1 option no longer
  needed; GeForce and Workstation GPUs now officially supported
- support added for H100/H800 GPUs (Hopper)</changelog>
  <changelog author="sndirsch@suse.com" date="1700568000">- use different modprobe.d config file to resolve conflict with
  older driver package (boo#1217370); overwrite
  NVreg_OpenRmEnableUnsupportedGpus driver option setting (disable it),
  since letting it enabled is supposed to break booting (boo#1215981,
  comment#23)</changelog>
  <changelog author="sndirsch@suse.com" date="1700654400">- no longer try to overwrite NVreg_OpenRmEnableUnsupportedGpus driver
  option setting; apparently it's ignored by the driver (boo#1215981,
  comment#26)</changelog>
  <changelog author="sndirsch@suse.com" date="1700740800">- Update to 545.29.06</changelog>
  <changelog author="sndirsch@suse.com" date="1701777600">- fix typo in changelog:
  * NVreg_OpenRMEnableSupporteGpus -&gt; NVreg_OpenRmEnableUnsupportedGpus
    (boo#1215981, comment#33)</changelog>
</package>
<package pkgid="3ac59cf7a64ad075122794a6f148ccfbf9545dd678a12fe4cbf3b15ff0fd75f1" name="nvidia-open-driver-G06-signed-kmp-default" arch="x86_64">
  <version epoch="0" ver="545.29.06_k5.14.21_150500.55.39" rel="150500.3.21.5"/>
  <changelog author="sndirsch@suse.com" date="1686830400">- Update to version 535.54.03</changelog>
  <changelog author="sndirsch@suse.com" date="1686916800">- _constraints: reserve 4GB of disk space for building in the hope
  that this will be also sufficient when building for sle15-sp5</changelog>
  <changelog author="sndirsch@suse.com" date="1686916801">- _constraints: 4GB wasn't enough; trying 8GB now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1689768000">- Update to version 535.86.05</changelog>
  <changelog author="lnussel@suse.com" date="1690200000">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="sndirsch@suse.com" date="1690286400">- require one-time renamed package kernel-firmware-nvidia-gspx-G06
  from now on (boo#1212724)</changelog>
  <changelog author="sndirsch@suse.com" date="1693224000">- Update to version 535.104.05</changelog>
  <changelog author="sndirsch@suse.com" date="1693915200">- kmp-post.sh/kmp-postun.sh:
  * add/remove nosimplefb=1 kernel option in order to fix Linux
    console also on sle15-sp6/Leap 15.6 kernel, which will come
    with simpledrm support</changelog>
  <changelog author="sndirsch@suse.com" date="1695384000">- Update to version 535.113.01</changelog>
  <changelog author="sndirsch@suse.com" date="1696248000">- preamble: added conflict to nvidia-gfxG05-kmp to prevent users
  from accidently installing conflicting proprietary kernelspace
  drivers from CUDA repository</changelog>
  <changelog author="sndirsch@suse.com" date="1697025600">- disabled build of nvidia-peermem module; it's no longer needed
  and never worked anyway (it was only a stub) [boo#1211892]</changelog>
  <changelog author="eich@suse.com" date="1697025601">- Add a devel package so other modules can be built against this
  one. [jira#PED-4964]</changelog>
  <changelog author="sndirsch@suse.com" date="1697544000">- cleanup: get rid of possibiliy to hardcode pci list; it's no
  longer required anyway; secureboot signing has been fixed ...
- removed pci-table.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- Update to version 535.129.03</changelog>
  <changelog author="sndirsch@suse.com" date="1699012800">- cleanup; sle12 no longer supported</changelog>
  <changelog author="sndirsch@suse.com" date="1699876800">- Update to 545.29.02
- added fbdev=1 option for nvidia-drm module, which gives us a proper
  framebuffer console now ...
- nosimplefb kernel option no longer needed with usage of nvidia-drm's
  fbdev=1 option
- nvidia's NVreg_OpenRmEnableUnsupportedGpus=1 option no longer
  needed; GeForce and Workstation GPUs now officially supported
- support added for H100/H800 GPUs (Hopper)</changelog>
  <changelog author="sndirsch@suse.com" date="1700568000">- use different modprobe.d config file to resolve conflict with
  older driver package (boo#1217370); overwrite
  NVreg_OpenRmEnableUnsupportedGpus driver option setting (disable it),
  since letting it enabled is supposed to break booting (boo#1215981,
  comment#23)</changelog>
  <changelog author="sndirsch@suse.com" date="1700654400">- no longer try to overwrite NVreg_OpenRmEnableUnsupportedGpus driver
  option setting; apparently it's ignored by the driver (boo#1215981,
  comment#26)</changelog>
  <changelog author="sndirsch@suse.com" date="1700740800">- Update to 545.29.06</changelog>
  <changelog author="sndirsch@suse.com" date="1701777600">- fix typo in changelog:
  * NVreg_OpenRMEnableSupporteGpus -&gt; NVreg_OpenRmEnableUnsupportedGpus
    (boo#1215981, comment#33)</changelog>
</package>
<package pkgid="7d04f985652e9d9b7eb2e3f771aaf199d14c296bdf68bc7ba72f052a1eb0287f" name="nvidia-open-driver-G06-signed-kmp-default" arch="aarch64">
  <version epoch="0" ver="550.100_k5.14.21_150500.55.68" rel="150500.3.52.1"/>
  <changelog author="sndirsch@suse.com" date="1706184000">- mistakenly moved dracut config file from 60-nvidia-%1.conf to
  61-nvidia-%1.conf --&gt; reverted!</changelog>
  <changelog author="sndirsch@suse.com" date="1706184001">- splitted up 61-nvidia-$flavor.conf to 59-nvidia-$flavor.conf
  and 61-nvidia-$flavor.conf, because 'install' line cannot be
  overwritten with higher config number ...</changelog>
  <changelog author="sndirsch@suse.com" date="1707393600">- provide nvidia-open-driver-G06-kmp = %version (jsc#PED-7117)
  * this makes it easy to replace the package from nVidia's
    CUDA repository with this presigned package</changelog>
  <changelog author="sndirsch@suse.com" date="1708344000">- kernel-syms-azure is not available on ALP</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="sndirsch@suse.com" date="1708603201">- remove conflicts to nvidia-open-driver-G06-kmp, since it's now
  provided instead (OMG!); add obsoletes to it as well to make
  sure it gets replaced (bsc#1220196)</changelog>
  <changelog author="sndirsch@suse.com" date="1708689600">- re-enable build of -azure kernel flavor; syntax check was wrong</changelog>
  <changelog author="sndirsch@suse.com" date="1708776000">- Update to 550.54.14
  * Added vGPU Host and vGPU Guest support. For vGPU Host, please
    refer to the README.vgpu packaged in the vGPU Host Package for
    more details.
- supersedes the following patches:
  * 0001-Don-t-override-INSTALL_MOD_DIR.patch
  * kernel-6.7.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1709121600">- let's provide/obsolete nvidia-open-driver-G06 instead of
  nvidia-open-driver-G06-kmp since older versions still had
  conflicts to nvidia-open-driver-G06-kmp ...</changelog>
  <changelog author="sndirsch@suse.com" date="1710849600">- Update to 550.67
- rename pci_ids-unsupported* to pci_ids-supported* files</changelog>
  <changelog author="sndirsch@suse.com" date="1713355200">- Update to 550.76
  * addresses boo#1222972</changelog>
  <changelog author="sndirsch@suse.com" date="1714392000">- Update to 550.78
  * addresses boo#1223454</changelog>
  <changelog author="sndirsch@suse.com" date="1717502400">- Security Update 550.90.07 (boo#1223356) [CVE-2024-0090,
  CVE-2024-0091, CVE-2024-0092]</changelog>
  <changelog author="eich@suse.com" date="1720008000">- Add a second flavor for building the kernel module versions
  used by CUDA. The kmp targetting CUDA contains '-cuda' in
  its name to track its versions separately from the graphics
  kmp. (bsc#1227417)
- Provide the meta package nv-prefer-signed-open-driver to
  make sure the latest available SUSE-build open driver is
  installed - independent of the latest available open driver
  version in he CUDA repository.
  Rationale:
  The package cuda-runtime provides the link between CUDA and
  the kernel driver version through a
  Requires: cuda-drivers &gt;= %version
  This implies that a CUDA version will run withany kernel driver
  version equal or higher than a base version.
  nvidia-compute-G06 provides the glue layer between CUDA and
  a specific version of he kernel driver both by providing
  a set of base libraries and by requiring a specific kernel
  version. 'cuda-drivers' (provided by nvidia-compute-utils-G06)
  requires an unversioned nvidia-compute-G06. With this, the
  resolver will install the latest available and applicable
  nvidia-compute-G06.
  nv-prefer-signed-open-driver then represents the latest available
  open driver version and restricts the nvidia-compute-G06 version
  to it. (bsc#1227419)</changelog>
  <changelog author="sndirsch@suse.com" date="1720094400">- preamble: let the -cuda flavor KMP require the -cuda flavor
  firmware</changelog>
  <changelog author="eich@suse.com" date="1720094401">- To avoid issues with missing dependencies when no CUDA repo
  is present make the dependecy to nvidia-compute-G06 conditional.
- CUDA is not available for Tumbleweed, exclude the build of the
  cuda flavor.</changelog>
  <changelog author="sndirsch@suse.com" date="1720180800">- make buildservice happy; all sources need to be mentioned as such
  in specfile</changelog>
  <changelog author="eich@suse.com" date="1720440000">- Use macro which is set during build but not when running
  `osc service run download_files` to make sure both source versions
  are visible for download. This way, only the correct source
  tarball will be included in the source package of its respective
  flavor but both can be downloaded (updated) simultaniously.</changelog>
  <changelog author="sndirsch@suse.com" date="1720526400">- Update to 550.100 (boo#1227575)
  * Fixed a bug that caused OpenGL triple buffering to behave like
    double buffering.</changelog>
  <changelog author="eich@suse.com" date="1720699200">- Update to version 555.42.06 for CUDA. This tag has become
  available in github, now.</changelog>
</package>
<package pkgid="6252839357d0501307b7687c004bd383d139b5787bf87a183c64692eb755a363" name="nvidia-open-driver-G06-signed-kmp-default" arch="x86_64">
  <version epoch="0" ver="550.100_k5.14.21_150500.55.68" rel="150500.3.52.1"/>
  <changelog author="sndirsch@suse.com" date="1706184000">- mistakenly moved dracut config file from 60-nvidia-%1.conf to
  61-nvidia-%1.conf --&gt; reverted!</changelog>
  <changelog author="sndirsch@suse.com" date="1706184001">- splitted up 61-nvidia-$flavor.conf to 59-nvidia-$flavor.conf
  and 61-nvidia-$flavor.conf, because 'install' line cannot be
  overwritten with higher config number ...</changelog>
  <changelog author="sndirsch@suse.com" date="1707393600">- provide nvidia-open-driver-G06-kmp = %version (jsc#PED-7117)
  * this makes it easy to replace the package from nVidia's
    CUDA repository with this presigned package</changelog>
  <changelog author="sndirsch@suse.com" date="1708344000">- kernel-syms-azure is not available on ALP</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="sndirsch@suse.com" date="1708603201">- remove conflicts to nvidia-open-driver-G06-kmp, since it's now
  provided instead (OMG!); add obsoletes to it as well to make
  sure it gets replaced (bsc#1220196)</changelog>
  <changelog author="sndirsch@suse.com" date="1708689600">- re-enable build of -azure kernel flavor; syntax check was wrong</changelog>
  <changelog author="sndirsch@suse.com" date="1708776000">- Update to 550.54.14
  * Added vGPU Host and vGPU Guest support. For vGPU Host, please
    refer to the README.vgpu packaged in the vGPU Host Package for
    more details.
- supersedes the following patches:
  * 0001-Don-t-override-INSTALL_MOD_DIR.patch
  * kernel-6.7.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1709121600">- let's provide/obsolete nvidia-open-driver-G06 instead of
  nvidia-open-driver-G06-kmp since older versions still had
  conflicts to nvidia-open-driver-G06-kmp ...</changelog>
  <changelog author="sndirsch@suse.com" date="1710849600">- Update to 550.67
- rename pci_ids-unsupported* to pci_ids-supported* files</changelog>
  <changelog author="sndirsch@suse.com" date="1713355200">- Update to 550.76
  * addresses boo#1222972</changelog>
  <changelog author="sndirsch@suse.com" date="1714392000">- Update to 550.78
  * addresses boo#1223454</changelog>
  <changelog author="sndirsch@suse.com" date="1717502400">- Security Update 550.90.07 (boo#1223356) [CVE-2024-0090,
  CVE-2024-0091, CVE-2024-0092]</changelog>
  <changelog author="eich@suse.com" date="1720008000">- Add a second flavor for building the kernel module versions
  used by CUDA. The kmp targetting CUDA contains '-cuda' in
  its name to track its versions separately from the graphics
  kmp. (bsc#1227417)
- Provide the meta package nv-prefer-signed-open-driver to
  make sure the latest available SUSE-build open driver is
  installed - independent of the latest available open driver
  version in he CUDA repository.
  Rationale:
  The package cuda-runtime provides the link between CUDA and
  the kernel driver version through a
  Requires: cuda-drivers &gt;= %version
  This implies that a CUDA version will run withany kernel driver
  version equal or higher than a base version.
  nvidia-compute-G06 provides the glue layer between CUDA and
  a specific version of he kernel driver both by providing
  a set of base libraries and by requiring a specific kernel
  version. 'cuda-drivers' (provided by nvidia-compute-utils-G06)
  requires an unversioned nvidia-compute-G06. With this, the
  resolver will install the latest available and applicable
  nvidia-compute-G06.
  nv-prefer-signed-open-driver then represents the latest available
  open driver version and restricts the nvidia-compute-G06 version
  to it. (bsc#1227419)</changelog>
  <changelog author="sndirsch@suse.com" date="1720094400">- preamble: let the -cuda flavor KMP require the -cuda flavor
  firmware</changelog>
  <changelog author="eich@suse.com" date="1720094401">- To avoid issues with missing dependencies when no CUDA repo
  is present make the dependecy to nvidia-compute-G06 conditional.
- CUDA is not available for Tumbleweed, exclude the build of the
  cuda flavor.</changelog>
  <changelog author="sndirsch@suse.com" date="1720180800">- make buildservice happy; all sources need to be mentioned as such
  in specfile</changelog>
  <changelog author="eich@suse.com" date="1720440000">- Use macro which is set during build but not when running
  `osc service run download_files` to make sure both source versions
  are visible for download. This way, only the correct source
  tarball will be included in the source package of its respective
  flavor but both can be downloaded (updated) simultaniously.</changelog>
  <changelog author="sndirsch@suse.com" date="1720526400">- Update to 550.100 (boo#1227575)
  * Fixed a bug that caused OpenGL triple buffering to behave like
    double buffering.</changelog>
  <changelog author="eich@suse.com" date="1720699200">- Update to version 555.42.06 for CUDA. This tag has become
  available in github, now.</changelog>
</package>
<package pkgid="828f400929fa7ac94ceb8c8dac0a1be0bef4a742903ab1d9242e87be57485015" name="nvidia-open-driver-G06-signed-kmp-default" arch="aarch64">
  <version epoch="0" ver="550.54.14_k5.14.21_150500.55.49" rel="150500.3.36.1"/>
  <changelog author="sndirsch@suse.com" date="1697544000">- cleanup: get rid of possibiliy to hardcode pci list; it's no
  longer required anyway; secureboot signing has been fixed ...
- removed pci-table.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- Update to version 535.129.03</changelog>
  <changelog author="sndirsch@suse.com" date="1699012800">- cleanup; sle12 no longer supported</changelog>
  <changelog author="sndirsch@suse.com" date="1699876800">- Update to 545.29.02
- added fbdev=1 option for nvidia-drm module, which gives us a proper
  framebuffer console now ...
- nosimplefb kernel option no longer needed with usage of nvidia-drm's
  fbdev=1 option
- nvidia's NVreg_OpenRmEnableUnsupportedGpus=1 option no longer
  needed; GeForce and Workstation GPUs now officially supported
- support added for H100/H800 GPUs (Hopper)</changelog>
  <changelog author="sndirsch@suse.com" date="1700568000">- use different modprobe.d config file to resolve conflict with
  older driver package (boo#1217370); overwrite
  NVreg_OpenRmEnableUnsupportedGpus driver option setting (disable it),
  since letting it enabled is supposed to break booting (boo#1215981,
  comment#23)</changelog>
  <changelog author="sndirsch@suse.com" date="1700654400">- no longer try to overwrite NVreg_OpenRmEnableUnsupportedGpus driver
  option setting; apparently it's ignored by the driver (boo#1215981,
  comment#26)</changelog>
  <changelog author="sndirsch@suse.com" date="1700740800">- Update to 545.29.06</changelog>
  <changelog author="sndirsch@suse.com" date="1701777600">- fix typo in changelog:
  * NVreg_OpenRMEnableSupporteGpus -&gt; NVreg_OpenRmEnableUnsupportedGpus
    (boo#1215981, comment#33)</changelog>
  <changelog author="sndirsch@suse.com" date="1704801600">- create /run/udev/static_node-tags/uaccess/nvidia${devid} symlinks
  also during modprobing the nvidia module; this changes the issue
  of not having access to /dev/nvidia${devid}, when gfxcard has
  been replaced by a different gfx card after installing the driver</changelog>
  <changelog author="sndirsch@suse.com" date="1706097600">- kernel-6.7.patch
  * fixes build against kernel 6.7 (boo#1219117)</changelog>
  <changelog author="sndirsch@suse.com" date="1706184000">- switched from 60-nvidia-$flavor.conf to 61-nvidia-$flavor.conf in
  modprobe.d to resolve conflict with older package, which can be
  installed in parallel</changelog>
  <changelog author="sndirsch@suse.com" date="1706184001">- mistakenly moved dracut config file from 60-nvidia-%1.conf to
  61-nvidia-%1.conf --&gt; reverted!</changelog>
  <changelog author="sndirsch@suse.com" date="1706184002">- splitted up 61-nvidia-$flavor.conf to 59-nvidia-$flavor.conf
  and 61-nvidia-$flavor.conf, because 'install' line cannot be
  overwritten with higher config number ...</changelog>
  <changelog author="sndirsch@suse.com" date="1707393600">- provide nvidia-open-driver-G06-kmp = %version (jsc#PED-7117)
  * this makes it easy to replace the package from nVidia's
    CUDA repository with this presigned package</changelog>
  <changelog author="sndirsch@suse.com" date="1708344000">- kernel-syms-azure is not available on ALP</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="sndirsch@suse.com" date="1708603201">- remove conflicts to nvidia-open-driver-G06-kmp, since it's now
  provided instead (OMG!); add obsoletes to it as well to make
  sure it gets replaced (bsc#1220196)</changelog>
  <changelog author="sndirsch@suse.com" date="1708689600">- re-enable build of -azure kernel flavor; syntax check was wrong</changelog>
  <changelog author="sndirsch@suse.com" date="1708776000">- Update to 550.54.14
  * Added vGPU Host and vGPU Guest support. For vGPU Host, please
    refer to the README.vgpu packaged in the vGPU Host Package for
    more details.
- supersedes the following patches:
  * 0001-Don-t-override-INSTALL_MOD_DIR.patch
  * kernel-6.7.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1709121600">- let's provide/obsolete nvidia-open-driver-G06 instead of
  nvidia-open-driver-G06-kmp since older versions still had
  conflicts to nvidia-open-driver-G06-kmp ...</changelog>
</package>
<package pkgid="695d24c9ebcde797e666b58dfa43da730846718ef17ad117194be145703aa766" name="nvidia-open-driver-G06-signed-kmp-default" arch="x86_64">
  <version epoch="0" ver="550.54.14_k5.14.21_150500.55.49" rel="150500.3.36.1"/>
  <changelog author="sndirsch@suse.com" date="1697544000">- cleanup: get rid of possibiliy to hardcode pci list; it's no
  longer required anyway; secureboot signing has been fixed ...
- removed pci-table.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1698840000">- Update to version 535.129.03</changelog>
  <changelog author="sndirsch@suse.com" date="1699012800">- cleanup; sle12 no longer supported</changelog>
  <changelog author="sndirsch@suse.com" date="1699876800">- Update to 545.29.02
- added fbdev=1 option for nvidia-drm module, which gives us a proper
  framebuffer console now ...
- nosimplefb kernel option no longer needed with usage of nvidia-drm's
  fbdev=1 option
- nvidia's NVreg_OpenRmEnableUnsupportedGpus=1 option no longer
  needed; GeForce and Workstation GPUs now officially supported
- support added for H100/H800 GPUs (Hopper)</changelog>
  <changelog author="sndirsch@suse.com" date="1700568000">- use different modprobe.d config file to resolve conflict with
  older driver package (boo#1217370); overwrite
  NVreg_OpenRmEnableUnsupportedGpus driver option setting (disable it),
  since letting it enabled is supposed to break booting (boo#1215981,
  comment#23)</changelog>
  <changelog author="sndirsch@suse.com" date="1700654400">- no longer try to overwrite NVreg_OpenRmEnableUnsupportedGpus driver
  option setting; apparently it's ignored by the driver (boo#1215981,
  comment#26)</changelog>
  <changelog author="sndirsch@suse.com" date="1700740800">- Update to 545.29.06</changelog>
  <changelog author="sndirsch@suse.com" date="1701777600">- fix typo in changelog:
  * NVreg_OpenRMEnableSupporteGpus -&gt; NVreg_OpenRmEnableUnsupportedGpus
    (boo#1215981, comment#33)</changelog>
  <changelog author="sndirsch@suse.com" date="1704801600">- create /run/udev/static_node-tags/uaccess/nvidia${devid} symlinks
  also during modprobing the nvidia module; this changes the issue
  of not having access to /dev/nvidia${devid}, when gfxcard has
  been replaced by a different gfx card after installing the driver</changelog>
  <changelog author="sndirsch@suse.com" date="1706097600">- kernel-6.7.patch
  * fixes build against kernel 6.7 (boo#1219117)</changelog>
  <changelog author="sndirsch@suse.com" date="1706184000">- switched from 60-nvidia-$flavor.conf to 61-nvidia-$flavor.conf in
  modprobe.d to resolve conflict with older package, which can be
  installed in parallel</changelog>
  <changelog author="sndirsch@suse.com" date="1706184001">- mistakenly moved dracut config file from 60-nvidia-%1.conf to
  61-nvidia-%1.conf --&gt; reverted!</changelog>
  <changelog author="sndirsch@suse.com" date="1706184002">- splitted up 61-nvidia-$flavor.conf to 59-nvidia-$flavor.conf
  and 61-nvidia-$flavor.conf, because 'install' line cannot be
  overwritten with higher config number ...</changelog>
  <changelog author="sndirsch@suse.com" date="1707393600">- provide nvidia-open-driver-G06-kmp = %version (jsc#PED-7117)
  * this makes it easy to replace the package from nVidia's
    CUDA repository with this presigned package</changelog>
  <changelog author="sndirsch@suse.com" date="1708344000">- kernel-syms-azure is not available on ALP</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="sndirsch@suse.com" date="1708603201">- remove conflicts to nvidia-open-driver-G06-kmp, since it's now
  provided instead (OMG!); add obsoletes to it as well to make
  sure it gets replaced (bsc#1220196)</changelog>
  <changelog author="sndirsch@suse.com" date="1708689600">- re-enable build of -azure kernel flavor; syntax check was wrong</changelog>
  <changelog author="sndirsch@suse.com" date="1708776000">- Update to 550.54.14
  * Added vGPU Host and vGPU Guest support. For vGPU Host, please
    refer to the README.vgpu packaged in the vGPU Host Package for
    more details.
- supersedes the following patches:
  * 0001-Don-t-override-INSTALL_MOD_DIR.patch
  * kernel-6.7.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1709121600">- let's provide/obsolete nvidia-open-driver-G06 instead of
  nvidia-open-driver-G06-kmp since older versions still had
  conflicts to nvidia-open-driver-G06-kmp ...</changelog>
</package>
<package pkgid="b39b497bee26c4ea86c4f1df44a68da65337f15dc9d755eae6220e016ad608b1" name="nvidia-open-driver-G06-signed-kmp-default" arch="aarch64">
  <version epoch="0" ver="550.67_k5.14.21_150500.55.52" rel="150500.3.39.1"/>
  <changelog author="sndirsch@suse.com" date="1698840000">- Update to version 535.129.03</changelog>
  <changelog author="sndirsch@suse.com" date="1699012800">- cleanup; sle12 no longer supported</changelog>
  <changelog author="sndirsch@suse.com" date="1699876800">- Update to 545.29.02
- added fbdev=1 option for nvidia-drm module, which gives us a proper
  framebuffer console now ...
- nosimplefb kernel option no longer needed with usage of nvidia-drm's
  fbdev=1 option
- nvidia's NVreg_OpenRmEnableUnsupportedGpus=1 option no longer
  needed; GeForce and Workstation GPUs now officially supported
- support added for H100/H800 GPUs (Hopper)</changelog>
  <changelog author="sndirsch@suse.com" date="1700568000">- use different modprobe.d config file to resolve conflict with
  older driver package (boo#1217370); overwrite
  NVreg_OpenRmEnableUnsupportedGpus driver option setting (disable it),
  since letting it enabled is supposed to break booting (boo#1215981,
  comment#23)</changelog>
  <changelog author="sndirsch@suse.com" date="1700654400">- no longer try to overwrite NVreg_OpenRmEnableUnsupportedGpus driver
  option setting; apparently it's ignored by the driver (boo#1215981,
  comment#26)</changelog>
  <changelog author="sndirsch@suse.com" date="1700740800">- Update to 545.29.06</changelog>
  <changelog author="sndirsch@suse.com" date="1701777600">- fix typo in changelog:
  * NVreg_OpenRMEnableSupporteGpus -&gt; NVreg_OpenRmEnableUnsupportedGpus
    (boo#1215981, comment#33)</changelog>
  <changelog author="sndirsch@suse.com" date="1704801600">- create /run/udev/static_node-tags/uaccess/nvidia${devid} symlinks
  also during modprobing the nvidia module; this changes the issue
  of not having access to /dev/nvidia${devid}, when gfxcard has
  been replaced by a different gfx card after installing the driver</changelog>
  <changelog author="sndirsch@suse.com" date="1706097600">- kernel-6.7.patch
  * fixes build against kernel 6.7 (boo#1219117)</changelog>
  <changelog author="sndirsch@suse.com" date="1706184000">- switched from 60-nvidia-$flavor.conf to 61-nvidia-$flavor.conf in
  modprobe.d to resolve conflict with older package, which can be
  installed in parallel</changelog>
  <changelog author="sndirsch@suse.com" date="1706184001">- mistakenly moved dracut config file from 60-nvidia-%1.conf to
  61-nvidia-%1.conf --&gt; reverted!</changelog>
  <changelog author="sndirsch@suse.com" date="1706184002">- splitted up 61-nvidia-$flavor.conf to 59-nvidia-$flavor.conf
  and 61-nvidia-$flavor.conf, because 'install' line cannot be
  overwritten with higher config number ...</changelog>
  <changelog author="sndirsch@suse.com" date="1707393600">- provide nvidia-open-driver-G06-kmp = %version (jsc#PED-7117)
  * this makes it easy to replace the package from nVidia's
    CUDA repository with this presigned package</changelog>
  <changelog author="sndirsch@suse.com" date="1708344000">- kernel-syms-azure is not available on ALP</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="sndirsch@suse.com" date="1708603201">- remove conflicts to nvidia-open-driver-G06-kmp, since it's now
  provided instead (OMG!); add obsoletes to it as well to make
  sure it gets replaced (bsc#1220196)</changelog>
  <changelog author="sndirsch@suse.com" date="1708689600">- re-enable build of -azure kernel flavor; syntax check was wrong</changelog>
  <changelog author="sndirsch@suse.com" date="1708776000">- Update to 550.54.14
  * Added vGPU Host and vGPU Guest support. For vGPU Host, please
    refer to the README.vgpu packaged in the vGPU Host Package for
    more details.
- supersedes the following patches:
  * 0001-Don-t-override-INSTALL_MOD_DIR.patch
  * kernel-6.7.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1709121600">- let's provide/obsolete nvidia-open-driver-G06 instead of
  nvidia-open-driver-G06-kmp since older versions still had
  conflicts to nvidia-open-driver-G06-kmp ...</changelog>
  <changelog author="sndirsch@suse.com" date="1710849600">- Update to 550.67
- rename pci_ids-unsupported* to pci_ids-supported* files</changelog>
</package>
<package pkgid="3594a8574276b19e563801f25cef271b3a5300a9f133171d946ff5be631f7b3c" name="nvidia-open-driver-G06-signed-kmp-default" arch="x86_64">
  <version epoch="0" ver="550.67_k5.14.21_150500.55.52" rel="150500.3.39.1"/>
  <changelog author="sndirsch@suse.com" date="1698840000">- Update to version 535.129.03</changelog>
  <changelog author="sndirsch@suse.com" date="1699012800">- cleanup; sle12 no longer supported</changelog>
  <changelog author="sndirsch@suse.com" date="1699876800">- Update to 545.29.02
- added fbdev=1 option for nvidia-drm module, which gives us a proper
  framebuffer console now ...
- nosimplefb kernel option no longer needed with usage of nvidia-drm's
  fbdev=1 option
- nvidia's NVreg_OpenRmEnableUnsupportedGpus=1 option no longer
  needed; GeForce and Workstation GPUs now officially supported
- support added for H100/H800 GPUs (Hopper)</changelog>
  <changelog author="sndirsch@suse.com" date="1700568000">- use different modprobe.d config file to resolve conflict with
  older driver package (boo#1217370); overwrite
  NVreg_OpenRmEnableUnsupportedGpus driver option setting (disable it),
  since letting it enabled is supposed to break booting (boo#1215981,
  comment#23)</changelog>
  <changelog author="sndirsch@suse.com" date="1700654400">- no longer try to overwrite NVreg_OpenRmEnableUnsupportedGpus driver
  option setting; apparently it's ignored by the driver (boo#1215981,
  comment#26)</changelog>
  <changelog author="sndirsch@suse.com" date="1700740800">- Update to 545.29.06</changelog>
  <changelog author="sndirsch@suse.com" date="1701777600">- fix typo in changelog:
  * NVreg_OpenRMEnableSupporteGpus -&gt; NVreg_OpenRmEnableUnsupportedGpus
    (boo#1215981, comment#33)</changelog>
  <changelog author="sndirsch@suse.com" date="1704801600">- create /run/udev/static_node-tags/uaccess/nvidia${devid} symlinks
  also during modprobing the nvidia module; this changes the issue
  of not having access to /dev/nvidia${devid}, when gfxcard has
  been replaced by a different gfx card after installing the driver</changelog>
  <changelog author="sndirsch@suse.com" date="1706097600">- kernel-6.7.patch
  * fixes build against kernel 6.7 (boo#1219117)</changelog>
  <changelog author="sndirsch@suse.com" date="1706184000">- switched from 60-nvidia-$flavor.conf to 61-nvidia-$flavor.conf in
  modprobe.d to resolve conflict with older package, which can be
  installed in parallel</changelog>
  <changelog author="sndirsch@suse.com" date="1706184001">- mistakenly moved dracut config file from 60-nvidia-%1.conf to
  61-nvidia-%1.conf --&gt; reverted!</changelog>
  <changelog author="sndirsch@suse.com" date="1706184002">- splitted up 61-nvidia-$flavor.conf to 59-nvidia-$flavor.conf
  and 61-nvidia-$flavor.conf, because 'install' line cannot be
  overwritten with higher config number ...</changelog>
  <changelog author="sndirsch@suse.com" date="1707393600">- provide nvidia-open-driver-G06-kmp = %version (jsc#PED-7117)
  * this makes it easy to replace the package from nVidia's
    CUDA repository with this presigned package</changelog>
  <changelog author="sndirsch@suse.com" date="1708344000">- kernel-syms-azure is not available on ALP</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="sndirsch@suse.com" date="1708603201">- remove conflicts to nvidia-open-driver-G06-kmp, since it's now
  provided instead (OMG!); add obsoletes to it as well to make
  sure it gets replaced (bsc#1220196)</changelog>
  <changelog author="sndirsch@suse.com" date="1708689600">- re-enable build of -azure kernel flavor; syntax check was wrong</changelog>
  <changelog author="sndirsch@suse.com" date="1708776000">- Update to 550.54.14
  * Added vGPU Host and vGPU Guest support. For vGPU Host, please
    refer to the README.vgpu packaged in the vGPU Host Package for
    more details.
- supersedes the following patches:
  * 0001-Don-t-override-INSTALL_MOD_DIR.patch
  * kernel-6.7.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1709121600">- let's provide/obsolete nvidia-open-driver-G06 instead of
  nvidia-open-driver-G06-kmp since older versions still had
  conflicts to nvidia-open-driver-G06-kmp ...</changelog>
  <changelog author="sndirsch@suse.com" date="1710849600">- Update to 550.67
- rename pci_ids-unsupported* to pci_ids-supported* files</changelog>
</package>
<package pkgid="92b33a7f41c3d4e3954bba432b0243b6889fd4f5cb233c696a6e2ecbf5db5f6b" name="nvidia-open-driver-G06-signed-kmp-default" arch="aarch64">
  <version epoch="0" ver="550.78_k5.14.21_150500.55.52" rel="150500.3.44.1"/>
  <changelog author="sndirsch@suse.com" date="1699876800">- Update to 545.29.02
- added fbdev=1 option for nvidia-drm module, which gives us a proper
  framebuffer console now ...
- nosimplefb kernel option no longer needed with usage of nvidia-drm's
  fbdev=1 option
- nvidia's NVreg_OpenRmEnableUnsupportedGpus=1 option no longer
  needed; GeForce and Workstation GPUs now officially supported
- support added for H100/H800 GPUs (Hopper)</changelog>
  <changelog author="sndirsch@suse.com" date="1700568000">- use different modprobe.d config file to resolve conflict with
  older driver package (boo#1217370); overwrite
  NVreg_OpenRmEnableUnsupportedGpus driver option setting (disable it),
  since letting it enabled is supposed to break booting (boo#1215981,
  comment#23)</changelog>
  <changelog author="sndirsch@suse.com" date="1700654400">- no longer try to overwrite NVreg_OpenRmEnableUnsupportedGpus driver
  option setting; apparently it's ignored by the driver (boo#1215981,
  comment#26)</changelog>
  <changelog author="sndirsch@suse.com" date="1700740800">- Update to 545.29.06</changelog>
  <changelog author="sndirsch@suse.com" date="1701777600">- fix typo in changelog:
  * NVreg_OpenRMEnableSupporteGpus -&gt; NVreg_OpenRmEnableUnsupportedGpus
    (boo#1215981, comment#33)</changelog>
  <changelog author="sndirsch@suse.com" date="1704801600">- create /run/udev/static_node-tags/uaccess/nvidia${devid} symlinks
  also during modprobing the nvidia module; this changes the issue
  of not having access to /dev/nvidia${devid}, when gfxcard has
  been replaced by a different gfx card after installing the driver</changelog>
  <changelog author="sndirsch@suse.com" date="1706097600">- kernel-6.7.patch
  * fixes build against kernel 6.7 (boo#1219117)</changelog>
  <changelog author="sndirsch@suse.com" date="1706184000">- switched from 60-nvidia-$flavor.conf to 61-nvidia-$flavor.conf in
  modprobe.d to resolve conflict with older package, which can be
  installed in parallel</changelog>
  <changelog author="sndirsch@suse.com" date="1706184001">- mistakenly moved dracut config file from 60-nvidia-%1.conf to
  61-nvidia-%1.conf --&gt; reverted!</changelog>
  <changelog author="sndirsch@suse.com" date="1706184002">- splitted up 61-nvidia-$flavor.conf to 59-nvidia-$flavor.conf
  and 61-nvidia-$flavor.conf, because 'install' line cannot be
  overwritten with higher config number ...</changelog>
  <changelog author="sndirsch@suse.com" date="1707393600">- provide nvidia-open-driver-G06-kmp = %version (jsc#PED-7117)
  * this makes it easy to replace the package from nVidia's
    CUDA repository with this presigned package</changelog>
  <changelog author="sndirsch@suse.com" date="1708344000">- kernel-syms-azure is not available on ALP</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="sndirsch@suse.com" date="1708603201">- remove conflicts to nvidia-open-driver-G06-kmp, since it's now
  provided instead (OMG!); add obsoletes to it as well to make
  sure it gets replaced (bsc#1220196)</changelog>
  <changelog author="sndirsch@suse.com" date="1708689600">- re-enable build of -azure kernel flavor; syntax check was wrong</changelog>
  <changelog author="sndirsch@suse.com" date="1708776000">- Update to 550.54.14
  * Added vGPU Host and vGPU Guest support. For vGPU Host, please
    refer to the README.vgpu packaged in the vGPU Host Package for
    more details.
- supersedes the following patches:
  * 0001-Don-t-override-INSTALL_MOD_DIR.patch
  * kernel-6.7.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1709121600">- let's provide/obsolete nvidia-open-driver-G06 instead of
  nvidia-open-driver-G06-kmp since older versions still had
  conflicts to nvidia-open-driver-G06-kmp ...</changelog>
  <changelog author="sndirsch@suse.com" date="1710849600">- Update to 550.67
- rename pci_ids-unsupported* to pci_ids-supported* files</changelog>
  <changelog author="sndirsch@suse.com" date="1713355200">- Update to 550.76
  * addresses boo#1222972</changelog>
  <changelog author="sndirsch@suse.com" date="1714392000">- Update to 550.78
  * addresses boo#1223454</changelog>
</package>
<package pkgid="4e1ec9463401b517a8f10324af9a55408609d6e6e5ee150a0cecd9db11b84729" name="nvidia-open-driver-G06-signed-kmp-default" arch="x86_64">
  <version epoch="0" ver="550.78_k5.14.21_150500.55.52" rel="150500.3.44.1"/>
  <changelog author="sndirsch@suse.com" date="1699876800">- Update to 545.29.02
- added fbdev=1 option for nvidia-drm module, which gives us a proper
  framebuffer console now ...
- nosimplefb kernel option no longer needed with usage of nvidia-drm's
  fbdev=1 option
- nvidia's NVreg_OpenRmEnableUnsupportedGpus=1 option no longer
  needed; GeForce and Workstation GPUs now officially supported
- support added for H100/H800 GPUs (Hopper)</changelog>
  <changelog author="sndirsch@suse.com" date="1700568000">- use different modprobe.d config file to resolve conflict with
  older driver package (boo#1217370); overwrite
  NVreg_OpenRmEnableUnsupportedGpus driver option setting (disable it),
  since letting it enabled is supposed to break booting (boo#1215981,
  comment#23)</changelog>
  <changelog author="sndirsch@suse.com" date="1700654400">- no longer try to overwrite NVreg_OpenRmEnableUnsupportedGpus driver
  option setting; apparently it's ignored by the driver (boo#1215981,
  comment#26)</changelog>
  <changelog author="sndirsch@suse.com" date="1700740800">- Update to 545.29.06</changelog>
  <changelog author="sndirsch@suse.com" date="1701777600">- fix typo in changelog:
  * NVreg_OpenRMEnableSupporteGpus -&gt; NVreg_OpenRmEnableUnsupportedGpus
    (boo#1215981, comment#33)</changelog>
  <changelog author="sndirsch@suse.com" date="1704801600">- create /run/udev/static_node-tags/uaccess/nvidia${devid} symlinks
  also during modprobing the nvidia module; this changes the issue
  of not having access to /dev/nvidia${devid}, when gfxcard has
  been replaced by a different gfx card after installing the driver</changelog>
  <changelog author="sndirsch@suse.com" date="1706097600">- kernel-6.7.patch
  * fixes build against kernel 6.7 (boo#1219117)</changelog>
  <changelog author="sndirsch@suse.com" date="1706184000">- switched from 60-nvidia-$flavor.conf to 61-nvidia-$flavor.conf in
  modprobe.d to resolve conflict with older package, which can be
  installed in parallel</changelog>
  <changelog author="sndirsch@suse.com" date="1706184001">- mistakenly moved dracut config file from 60-nvidia-%1.conf to
  61-nvidia-%1.conf --&gt; reverted!</changelog>
  <changelog author="sndirsch@suse.com" date="1706184002">- splitted up 61-nvidia-$flavor.conf to 59-nvidia-$flavor.conf
  and 61-nvidia-$flavor.conf, because 'install' line cannot be
  overwritten with higher config number ...</changelog>
  <changelog author="sndirsch@suse.com" date="1707393600">- provide nvidia-open-driver-G06-kmp = %version (jsc#PED-7117)
  * this makes it easy to replace the package from nVidia's
    CUDA repository with this presigned package</changelog>
  <changelog author="sndirsch@suse.com" date="1708344000">- kernel-syms-azure is not available on ALP</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="sndirsch@suse.com" date="1708603201">- remove conflicts to nvidia-open-driver-G06-kmp, since it's now
  provided instead (OMG!); add obsoletes to it as well to make
  sure it gets replaced (bsc#1220196)</changelog>
  <changelog author="sndirsch@suse.com" date="1708689600">- re-enable build of -azure kernel flavor; syntax check was wrong</changelog>
  <changelog author="sndirsch@suse.com" date="1708776000">- Update to 550.54.14
  * Added vGPU Host and vGPU Guest support. For vGPU Host, please
    refer to the README.vgpu packaged in the vGPU Host Package for
    more details.
- supersedes the following patches:
  * 0001-Don-t-override-INSTALL_MOD_DIR.patch
  * kernel-6.7.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1709121600">- let's provide/obsolete nvidia-open-driver-G06 instead of
  nvidia-open-driver-G06-kmp since older versions still had
  conflicts to nvidia-open-driver-G06-kmp ...</changelog>
  <changelog author="sndirsch@suse.com" date="1710849600">- Update to 550.67
- rename pci_ids-unsupported* to pci_ids-supported* files</changelog>
  <changelog author="sndirsch@suse.com" date="1713355200">- Update to 550.76
  * addresses boo#1222972</changelog>
  <changelog author="sndirsch@suse.com" date="1714392000">- Update to 550.78
  * addresses boo#1223454</changelog>
</package>
<package pkgid="d39bc51ae839652a780e9512b5dde760b8ef9af661a0abfba5a42f81df05ea6d" name="nvidia-open-driver-G06-signed-kmp-default" arch="aarch64">
  <version epoch="0" ver="550.90.07_k5.14.21_150500.55.65" rel="150500.3.47.1"/>
  <changelog author="sndirsch@suse.com" date="1700568000">- use different modprobe.d config file to resolve conflict with
  older driver package (boo#1217370); overwrite
  NVreg_OpenRmEnableUnsupportedGpus driver option setting (disable it),
  since letting it enabled is supposed to break booting (boo#1215981,
  comment#23)</changelog>
  <changelog author="sndirsch@suse.com" date="1700654400">- no longer try to overwrite NVreg_OpenRmEnableUnsupportedGpus driver
  option setting; apparently it's ignored by the driver (boo#1215981,
  comment#26)</changelog>
  <changelog author="sndirsch@suse.com" date="1700740800">- Update to 545.29.06</changelog>
  <changelog author="sndirsch@suse.com" date="1701777600">- fix typo in changelog:
  * NVreg_OpenRMEnableSupporteGpus -&gt; NVreg_OpenRmEnableUnsupportedGpus
    (boo#1215981, comment#33)</changelog>
  <changelog author="sndirsch@suse.com" date="1704801600">- create /run/udev/static_node-tags/uaccess/nvidia${devid} symlinks
  also during modprobing the nvidia module; this changes the issue
  of not having access to /dev/nvidia${devid}, when gfxcard has
  been replaced by a different gfx card after installing the driver</changelog>
  <changelog author="sndirsch@suse.com" date="1706097600">- kernel-6.7.patch
  * fixes build against kernel 6.7 (boo#1219117)</changelog>
  <changelog author="sndirsch@suse.com" date="1706184000">- switched from 60-nvidia-$flavor.conf to 61-nvidia-$flavor.conf in
  modprobe.d to resolve conflict with older package, which can be
  installed in parallel</changelog>
  <changelog author="sndirsch@suse.com" date="1706184001">- mistakenly moved dracut config file from 60-nvidia-%1.conf to
  61-nvidia-%1.conf --&gt; reverted!</changelog>
  <changelog author="sndirsch@suse.com" date="1706184002">- splitted up 61-nvidia-$flavor.conf to 59-nvidia-$flavor.conf
  and 61-nvidia-$flavor.conf, because 'install' line cannot be
  overwritten with higher config number ...</changelog>
  <changelog author="sndirsch@suse.com" date="1707393600">- provide nvidia-open-driver-G06-kmp = %version (jsc#PED-7117)
  * this makes it easy to replace the package from nVidia's
    CUDA repository with this presigned package</changelog>
  <changelog author="sndirsch@suse.com" date="1708344000">- kernel-syms-azure is not available on ALP</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="sndirsch@suse.com" date="1708603201">- remove conflicts to nvidia-open-driver-G06-kmp, since it's now
  provided instead (OMG!); add obsoletes to it as well to make
  sure it gets replaced (bsc#1220196)</changelog>
  <changelog author="sndirsch@suse.com" date="1708689600">- re-enable build of -azure kernel flavor; syntax check was wrong</changelog>
  <changelog author="sndirsch@suse.com" date="1708776000">- Update to 550.54.14
  * Added vGPU Host and vGPU Guest support. For vGPU Host, please
    refer to the README.vgpu packaged in the vGPU Host Package for
    more details.
- supersedes the following patches:
  * 0001-Don-t-override-INSTALL_MOD_DIR.patch
  * kernel-6.7.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1709121600">- let's provide/obsolete nvidia-open-driver-G06 instead of
  nvidia-open-driver-G06-kmp since older versions still had
  conflicts to nvidia-open-driver-G06-kmp ...</changelog>
  <changelog author="sndirsch@suse.com" date="1710849600">- Update to 550.67
- rename pci_ids-unsupported* to pci_ids-supported* files</changelog>
  <changelog author="sndirsch@suse.com" date="1713355200">- Update to 550.76
  * addresses boo#1222972</changelog>
  <changelog author="sndirsch@suse.com" date="1714392000">- Update to 550.78
  * addresses boo#1223454</changelog>
  <changelog author="sndirsch@suse.com" date="1717502400">- Security Update 550.90.07 (boo#1223356) [CVE-2024-0090,
  CVE-2024-0091, CVE-2024-0092]</changelog>
</package>
<package pkgid="045f448f7a841810e3dcba558b3f5284e2eabaccde911058b56b4cb271284f4c" name="nvidia-open-driver-G06-signed-kmp-default" arch="x86_64">
  <version epoch="0" ver="550.90.07_k5.14.21_150500.55.65" rel="150500.3.47.1"/>
  <changelog author="sndirsch@suse.com" date="1700568000">- use different modprobe.d config file to resolve conflict with
  older driver package (boo#1217370); overwrite
  NVreg_OpenRmEnableUnsupportedGpus driver option setting (disable it),
  since letting it enabled is supposed to break booting (boo#1215981,
  comment#23)</changelog>
  <changelog author="sndirsch@suse.com" date="1700654400">- no longer try to overwrite NVreg_OpenRmEnableUnsupportedGpus driver
  option setting; apparently it's ignored by the driver (boo#1215981,
  comment#26)</changelog>
  <changelog author="sndirsch@suse.com" date="1700740800">- Update to 545.29.06</changelog>
  <changelog author="sndirsch@suse.com" date="1701777600">- fix typo in changelog:
  * NVreg_OpenRMEnableSupporteGpus -&gt; NVreg_OpenRmEnableUnsupportedGpus
    (boo#1215981, comment#33)</changelog>
  <changelog author="sndirsch@suse.com" date="1704801600">- create /run/udev/static_node-tags/uaccess/nvidia${devid} symlinks
  also during modprobing the nvidia module; this changes the issue
  of not having access to /dev/nvidia${devid}, when gfxcard has
  been replaced by a different gfx card after installing the driver</changelog>
  <changelog author="sndirsch@suse.com" date="1706097600">- kernel-6.7.patch
  * fixes build against kernel 6.7 (boo#1219117)</changelog>
  <changelog author="sndirsch@suse.com" date="1706184000">- switched from 60-nvidia-$flavor.conf to 61-nvidia-$flavor.conf in
  modprobe.d to resolve conflict with older package, which can be
  installed in parallel</changelog>
  <changelog author="sndirsch@suse.com" date="1706184001">- mistakenly moved dracut config file from 60-nvidia-%1.conf to
  61-nvidia-%1.conf --&gt; reverted!</changelog>
  <changelog author="sndirsch@suse.com" date="1706184002">- splitted up 61-nvidia-$flavor.conf to 59-nvidia-$flavor.conf
  and 61-nvidia-$flavor.conf, because 'install' line cannot be
  overwritten with higher config number ...</changelog>
  <changelog author="sndirsch@suse.com" date="1707393600">- provide nvidia-open-driver-G06-kmp = %version (jsc#PED-7117)
  * this makes it easy to replace the package from nVidia's
    CUDA repository with this presigned package</changelog>
  <changelog author="sndirsch@suse.com" date="1708344000">- kernel-syms-azure is not available on ALP</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="sndirsch@suse.com" date="1708603201">- remove conflicts to nvidia-open-driver-G06-kmp, since it's now
  provided instead (OMG!); add obsoletes to it as well to make
  sure it gets replaced (bsc#1220196)</changelog>
  <changelog author="sndirsch@suse.com" date="1708689600">- re-enable build of -azure kernel flavor; syntax check was wrong</changelog>
  <changelog author="sndirsch@suse.com" date="1708776000">- Update to 550.54.14
  * Added vGPU Host and vGPU Guest support. For vGPU Host, please
    refer to the README.vgpu packaged in the vGPU Host Package for
    more details.
- supersedes the following patches:
  * 0001-Don-t-override-INSTALL_MOD_DIR.patch
  * kernel-6.7.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1709121600">- let's provide/obsolete nvidia-open-driver-G06 instead of
  nvidia-open-driver-G06-kmp since older versions still had
  conflicts to nvidia-open-driver-G06-kmp ...</changelog>
  <changelog author="sndirsch@suse.com" date="1710849600">- Update to 550.67
- rename pci_ids-unsupported* to pci_ids-supported* files</changelog>
  <changelog author="sndirsch@suse.com" date="1713355200">- Update to 550.76
  * addresses boo#1222972</changelog>
  <changelog author="sndirsch@suse.com" date="1714392000">- Update to 550.78
  * addresses boo#1223454</changelog>
  <changelog author="sndirsch@suse.com" date="1717502400">- Security Update 550.90.07 (boo#1223356) [CVE-2024-0090,
  CVE-2024-0091, CVE-2024-0092]</changelog>
</package>
<package pkgid="3e56afb4d345d0a6c07e35329500effb8bd155af029257044a99e334677f44f9" name="nvme-cli" arch="aarch64">
  <version epoch="0" ver="2.4+25.g367eb9" rel="150500.4.9.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Use osc_scm to manage upstream input source.
- Fix version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Fix zsh completion package depenedencies.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 2.0~2:
  * Adapt to logging API changes in libnvme
  * Adapt to scan API changes in libnvme
  * Reworked error message handling
  * Fix 'list-ns' (bsc#1195151)
  * Add 'gen-tls-key' and 'check-tls-key'
  * Add Media Unit Status log page support
  * Cleanups and build fixes
- Fix path to systemctl (bsc#1193699)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v2.0-rc3:
  * nvme-print: Fix json output for list-subsys
  * nvme: Allow --verbose flag to increase log level
  * Added telemetry log fetch support for SN810, SN530 and SN740 series NVMe SSDs through wdc vs-internal-log command
  * nvmf: Remove --matching from systemd service file (bsc#1195665)
  * nvme: Fix --force flag inversion (bsc#1195637)
  * nvme: Add support for data area 4 to get-telemetry-log
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme-print: Add NVME_FEAT_FID_ENH_CTRL_METADATA to nvme_feature_to_string
  * nvme-print: remove unused nvme_show_id_ctrl function
  * nvme: Add nvm-id-ns-lba-format(CNS 0Ah) command from TP4095
  * nvme: Add NVM Command Set specific identify namespace command
  * nvme: Add id-ns-lba-format(CNS 09h) command from TP4095
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
- Include precompiled documentation</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 2.0-rc4:
  * netapp-nvme: free the nsdescs pointer after use
  * netapp-nvme: fix ontapdevices segfault in json output
  * nvme-print: fix 'nvme list -o json' segfault
  * nvme: get_ns_id command fails on nvme device
  * wdc: updated products list for telemetry (--type) argument
  * docs: fix typo in Data Set Management section
  * Fix ctrlist for attach-ns and detach-ns
  * netapp-nvme: fix nvme ns desc uuid handling for ontapdevices
  * wdc: Fix use-after-free access of cbs_data
  * Fixed regression with 'open namespace exclusive' (bsc#1195945)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 2.0-rc5:
  * nvme: passthru bugfix(wrong jump, wrong file descriptor)
  * nvme-cli: Ignore traddr case (bsc#1194025)
  * nvme: fix segfault in nvme telemetry-log error handling
  * fabrics: ensure zero kato for non-persistent controllers
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 2.0-rc6:
  * nvme: print out ANA state for 'list-subsys' (bsc#1195938)
  * nvme: Explicit initialize all command line options (bsc#1195945)
  * nvme: Explicit initialize passthru command line options
  * nvme: list_ns bug fix (csi option enable)
  * nvme: nvme write bug fix (no parse for option)
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 2.0-rc7:
  * netapp-nvme: fix smdevices segfault in json output (bsc#1195937)
  * fabrics: keep the backward compatibility
  * nvme: Do not slash escape strings in JSON output (bsc#1195937)
  * nvme: Print full device path
  * nvme-print: Make JSON keys consistent with nvme-cli 1.x
  * nvme-print: print generic device in list command
  * fabrics: check for discovery controller instead of subsystem NQN (bsc#1197061)
  * connect: Set errno to zero on nvmf_add_ctrl() success
  * documenation updates
- Set path to systemctl via newly introduced config option
- Update 0100-harden_nvmf-connect@.service.patch due to upstream file rename
- Moved bash completion script to /usr/share/bash-completion/completions/nvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647950400">- Fix install conflict caused by new bash completion script
  location (bsc#1197365).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 2.0-rc8:
  * fabrics: Add DIM command
  * fabrics: Introduce force flag to overwrite persistence logic (bsc#1197076)
  * fabrics: Free non-matching controller during discovery
  * fabrics: add 'nvme config' command
  * fabrics: Correctly stringify discovery.conf and config.json paths
  * nvme-print: Add human readable print for nsattr field
  * nvme-print: Update Persistent Event log fields
  * nvme-print: print discovery async event support
  * nvme-rpmb: Fix spelling for 'Partition'
  * nvme-copy: add missing field to the command
  * nvme: add get_mi_cmd_support_effects_log command
  * nvme: Fixup namespace filtering yet again
  * nvme: Use type bool for OPT_FLAG
  * nvme: use filter for 'list-subsys &lt;devname&gt;' (bsc#1195938)
  * Add lbstm option to create-ns
  * argconfig: Do not use default value loading by getopt_long_only
  * argconfig: Rename CFG_NONE to CFG_FLAG
  * plugins: Use type bool for OPT_FLAG
  * documenation updates
- Drop 'ProtectKernelTunables=true' (bsc#1197076)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 2.0:
  * fabrics: Create persistent controller using unique subsystem NQN (bsc#1198243)
  * fabrics: Set KATO for discovery controller when connecting
  * fabrics: Do no modify default config for discovery controller
  * fabrics: Set default trsvcid ports for TCP and RDMA (bsc#1195858)
  * fabrics: Support connect even when no /etc/nvme/hostnqn file exists
  * nvme: update to nvme_scan_filter_t modifications (bsc#1195938)
  * plugins/intel: make 'buckets' a json array
  * plugins: Update WDC capabilities command with new commmands
  * plugins: Add OCP plugin</changelog>
  <changelog author="dwagner@suse.de" date="1654603200">- fabrics: Already connected uses a different error code (bsc#1199994)
  * add 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
- fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * add 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
- nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)
  * add 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * add 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
- fabrics: Honor config file for connect-all (bsc#1199504)
  * add 0005-fabrics-Honor-config-file-for-connect-all.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * add 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
- Fabrics related bug fixes
  * add 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * add 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * add 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * add 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * add 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * add 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * add 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * add 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * add 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 2.2.1 (jsc#ped-553):
  * Added parsing for Solidigm telemetry observable data.
  * Revert "udev: re-read the discovery log page when a discovery controller reconnected"
  * add item ddr_ecc_err_cnt in smart-log-add
  * build and install fixes/improvements
  * build: Add minimum build requirement on libnvme
  * build: Drop dependency on libuuid
  * build: Extend release script to support micro version releases
  * build: Fix endian check for cross build
  * build: Remove unused uuid.wrap file
  * build: Remove unusned uuid.h include
  * build: Update release version rules
  * build: Update version before regenerating docs
  * completions: Add show-topology tab completion
  * documentation fixes
  * fabrics: Avoid nvme_scan_ctrl when disconnecting
  * fabrics: Honor JSON config file in connect-all command
  * fabrics: Remove dhchap-ctrl-secret from discover/connect-all
  * fabrics: Trigger auto connect if config.json exists
  * fabrics: fix 'persistent' handling during connect-all with JSON file
  * fabrics: nvme config --modify depends on -n and -t argument
  * fabrics: re-read the discovery log page when a discovery controller reconnected
  * json: Support uint64 types serialization for older json-c versions
  * meson: we don't need a c++ compiler
  * new solidigm plugin
  * nvme, plugins: fix __u64 -&gt; unsigned long long assumptions
  * nvme-print: Add missing values in id-ctrl for JSON output
  * nvme-print: Handle NULL hostid in JSON output
  * nvme-print: Output 128bit values as uint128 type instead of double
  * nvme-print: Print fguid as a UUID
  * nvme-print: Use uint128 JSON function for media_units_written
  * nvme-print: decode MI status values
  * nvme-print: decode status types
  * nvme-print: fix wrong json key
  * nvme-print: sanitize the get-feature async event config output
  * nvme: Add helper function to parse 16-bit comma separated list
  * nvme: Add nvme_cmd wrapper for get_features
  * nvme: Add show-topology command
  * nvme: Add wrapper for Format NVM
  * nvme: Add wrapper for Sanitize NVM
  * nvme: Add wrappers for Get Log page helpers
  * nvme: Add wrappers for Identify controller lists
  * nvme: Add wrappers for NS attach/detach
  * nvme: Add wrappers for NS management functions
  * nvme: Add wrappers for basic NS identify
  * nvme: Add wrappers for firmware commands
  * nvme: Do not print error message in collect_effects_log helper
  * nvme: Fix set feature command to get feature identifier 0Dh length as zero
  * nvme: Introduce a union in struct nvme_dev for different transport types
  * nvme: Introduce nvme_cli_ wrappers, wrap identify and identify_ctrl
  * nvme: Make static nvme_dev private to open_dev(), use locals elsewhere
  * nvme: Masks SSTAT in sanize-log output
  * nvme: Remove static nvme_dev, allocate on open instead
  * nvme: Set default rae value for nvme_get_nsid_log users
  * nvme: Simplify ns list identify
  * nvme: Use correct print format specifier for sizeof arguments
  * nvme: Use local struct nvme_dev for show_registers &amp; map_registers
  * nvme: check if cfg.metadata is NULL before passing it to strlen()
  * nvme: use helpers for checking status types
  * plugins/innogrit: Include timer.h
  * plugins/innogrit: add smart items for smart-log-add
  * plugins/micron-nvme: Use correct print format specifier for sizeof arguments
  * plugins/ocp: Include timer.h
  * plugins/ocp: Output 128bit values as uint128 type instead of double
  * plugins/ocp: drop unused fd argument
  * plugins/ocp: pass struct nvme_dev to internal functions
  * plugins/seagate: Add support for OCP
  * plugins/solidigm: fix return value on format parse failure
  * plugins/toshiba: pass struct nvme_dev rather than fd + name
  * plugins/virtium: Output 128bit values as uint128 type instead of double
  * plugins/wdc: Add support for SN660 drive
  * plugins/wdc: Add type case for feature id
  * plugins/wdc: Output 128bit values as uint128 type instead of double
  * plugins/wdc: fix memset() on the address of a pointer
  * plugins/wdc: pass a struct nvme_dev around rather than a fd
  * plugins/wdc: pass struct nvme_dev rather than using global nvme_dev
  * plugins/wdc: prevent duplicate close on NVMe device
  * plugins/wdc: remove fd argument from print functions
  * plugins/ytmc: pass struct nvme_dev rather than fd + name
  * plugins: Use PRIu64 format specifier for 64bit types
  * print: Add Controller Ready Timeout Exceeded HW error code
  * print: Fix nvme_id_uuid_list
  * solidgm: fix initialization warning
  * solidigm: Added parsing for telemetry customer screenable data
  * solidigm: Fix printf format for size_t variable
  * solidigm: Updated Telemetry parsing code to MIT license.
  * subprojects/libnvme: update for MI admin command coverage
  * tests: Update license to GPL-2.0-or-later
  * tree: Add NVMe-MI support
  * tree: Add dev_fd() helper
  * tree: Change nvme_dev from global to static
  * tree: Combine NVMe file descriptor into struct nvme_dev
  * tree: Move global device info to a single struct
  * tree: fail on non-negative return values from parse_and_open
  * udev: Add HOST_IFACE to udev rule
  * util/json.h: Add json_object_get_uint64 fallback implementation
  * util/json: Add 128 bit JSON helpers
  * util/types: Add 128 bit conversion helpers
  * util: Fix le128_to_cpu on big-endian
  * util: Fix le128_to_cpu on little-endian
  * util: Move common type conversion helpers into util section
  * utils/json: Add json_object_new_uint64 for json-c &lt; 0.14
  * utils: Fix uint128_t usage
  * various fixes reported by coverity
  * version reporting includes library version
  * wdc:  OCP Log page updates and fixes
  * wrapper: Add weak nvme_init_copy_range_f1 symbol
  * wrapper: Call library version of nvme_init_copy_range_f1
  * wrapper: Update SPDIX license
  * zns.c: report zones should be started after retrieved zone
- Drop upsreamp patches
  * remove 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
  * remove 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
  * remove 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * remove 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
  * remove 0005-fabrics-Honor-config-file-for-connect-all.patch
  * remove 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
  * remove 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * remove 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * remove 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * remove 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * remove 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * remove 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * remove 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * remove 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * remove 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch
- Handle suse-missing-rclink lint warnings by providing the symlinks
- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- Mark no binaries rpms as noarch</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 2.2.1+3.gd028407:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Add %check section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- spec file: fix "check" section (bsc#1207686)
- add "Provides: nvmeof-boot-support = 0.1"</changelog>
  <changelog author="daniel.wagner@suse.com" date="1684929600">- Update to version v2.4 (jsc#PED-553 jsc#PED-3884)
  - Sanitize traddr and trsvcid avoid buffer overrun (bsc#1207435)
  * json_discovery_log: avoid buffer overrun
  - Extend udev rule to pass --host-interface argument to nvme-cli (bsc#1208001)
  * udev: Add HOST_IFACE to udev rule
  - Build documentation to be up to date
  - Fix build warning (git-fixes)
  * fabrics: 'e-&gt;traddr' is static
  - Improvements for supported-log-pages (bsc#1209550)
  * nvme-doc: update man page for supported-log-pages
  * nvme-print: sanitize supported-log-pages output
  - Fix read command (bsc#1209564)
  * nvme: fix block count and data size logic
  - Fix mounting filesystems via fstab (bsc#1208075)
  * fabrics: Fix ordering for auto connect services
  - Update host_traddr when using config.json file (bsc#1210089)
  * fabrics: fix fc config JSON file handling
  - remove 0100-harden_nvmf-connect@.service.patch
- Added compat commands for nbft back
- Changed default behavior of connect-all to match with old nbft
  behavior
- Replaced old nbft implementation with upstream one
- Rebuild documentation on package update
- Set version-tag so that version are correctly reported
- Fix connect nbft regressions (bsc#1209905)
  * fabrics: fix argc in show_nbft_compat_cmd()
- Fix auto connect conditions (bsc#1210105)
  * fabrics: fix conditions in nvmf-autoconnect.service
- Fix auto boot for NBFT connections (bsc#1211647)
  * fabrics: add udev rule to avoid renaming nbft interfaces
  * fabrics: autoconnect: add service unit for connecting NBFT subsystems</changelog>
  <changelog author="dwagner@suse.de" date="1690459200">- Update to version 2.4+24.ga1ee20:
  * nvme-print-stdout: Do not show non reachable ns in namespace topology (bsc#1212598)
  * nvme-print-stdout: List only ctrls which are part of ns bsc#1212598)
  * nvme-print-stdout: Support subsys reachable from several hosts bsc#1212598)
  * ccan: Add htable, strset and dependencies bsc#1212598)
  * ccan: Remove unused documentation bsc#1212598)
  * nvme-print: fix counter while looping through uuid_list (bsc#bsc#1212598)
  * nvme-print: Show subsystem iopolicy (bsc#1124564)</changelog>
  <changelog author="dwagner@suse.de" date="1693915200">- Update to version 2.4+25.g367eb9:
  * json: fix seg. fault converting NULL to JSON string (bsc#1213762)</changelog>
</package>
<package pkgid="a8ec7bfe1eb51e2b1ae97558ee9863fbad1e0030b96b104ba254b0b4104434f2" name="nvme-cli" arch="s390x">
  <version epoch="0" ver="2.4+25.g367eb9" rel="150500.4.9.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Use osc_scm to manage upstream input source.
- Fix version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Fix zsh completion package depenedencies.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 2.0~2:
  * Adapt to logging API changes in libnvme
  * Adapt to scan API changes in libnvme
  * Reworked error message handling
  * Fix 'list-ns' (bsc#1195151)
  * Add 'gen-tls-key' and 'check-tls-key'
  * Add Media Unit Status log page support
  * Cleanups and build fixes
- Fix path to systemctl (bsc#1193699)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v2.0-rc3:
  * nvme-print: Fix json output for list-subsys
  * nvme: Allow --verbose flag to increase log level
  * Added telemetry log fetch support for SN810, SN530 and SN740 series NVMe SSDs through wdc vs-internal-log command
  * nvmf: Remove --matching from systemd service file (bsc#1195665)
  * nvme: Fix --force flag inversion (bsc#1195637)
  * nvme: Add support for data area 4 to get-telemetry-log
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme-print: Add NVME_FEAT_FID_ENH_CTRL_METADATA to nvme_feature_to_string
  * nvme-print: remove unused nvme_show_id_ctrl function
  * nvme: Add nvm-id-ns-lba-format(CNS 0Ah) command from TP4095
  * nvme: Add NVM Command Set specific identify namespace command
  * nvme: Add id-ns-lba-format(CNS 09h) command from TP4095
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
- Include precompiled documentation</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 2.0-rc4:
  * netapp-nvme: free the nsdescs pointer after use
  * netapp-nvme: fix ontapdevices segfault in json output
  * nvme-print: fix 'nvme list -o json' segfault
  * nvme: get_ns_id command fails on nvme device
  * wdc: updated products list for telemetry (--type) argument
  * docs: fix typo in Data Set Management section
  * Fix ctrlist for attach-ns and detach-ns
  * netapp-nvme: fix nvme ns desc uuid handling for ontapdevices
  * wdc: Fix use-after-free access of cbs_data
  * Fixed regression with 'open namespace exclusive' (bsc#1195945)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 2.0-rc5:
  * nvme: passthru bugfix(wrong jump, wrong file descriptor)
  * nvme-cli: Ignore traddr case (bsc#1194025)
  * nvme: fix segfault in nvme telemetry-log error handling
  * fabrics: ensure zero kato for non-persistent controllers
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 2.0-rc6:
  * nvme: print out ANA state for 'list-subsys' (bsc#1195938)
  * nvme: Explicit initialize all command line options (bsc#1195945)
  * nvme: Explicit initialize passthru command line options
  * nvme: list_ns bug fix (csi option enable)
  * nvme: nvme write bug fix (no parse for option)
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 2.0-rc7:
  * netapp-nvme: fix smdevices segfault in json output (bsc#1195937)
  * fabrics: keep the backward compatibility
  * nvme: Do not slash escape strings in JSON output (bsc#1195937)
  * nvme: Print full device path
  * nvme-print: Make JSON keys consistent with nvme-cli 1.x
  * nvme-print: print generic device in list command
  * fabrics: check for discovery controller instead of subsystem NQN (bsc#1197061)
  * connect: Set errno to zero on nvmf_add_ctrl() success
  * documenation updates
- Set path to systemctl via newly introduced config option
- Update 0100-harden_nvmf-connect@.service.patch due to upstream file rename
- Moved bash completion script to /usr/share/bash-completion/completions/nvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647950400">- Fix install conflict caused by new bash completion script
  location (bsc#1197365).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 2.0-rc8:
  * fabrics: Add DIM command
  * fabrics: Introduce force flag to overwrite persistence logic (bsc#1197076)
  * fabrics: Free non-matching controller during discovery
  * fabrics: add 'nvme config' command
  * fabrics: Correctly stringify discovery.conf and config.json paths
  * nvme-print: Add human readable print for nsattr field
  * nvme-print: Update Persistent Event log fields
  * nvme-print: print discovery async event support
  * nvme-rpmb: Fix spelling for 'Partition'
  * nvme-copy: add missing field to the command
  * nvme: add get_mi_cmd_support_effects_log command
  * nvme: Fixup namespace filtering yet again
  * nvme: Use type bool for OPT_FLAG
  * nvme: use filter for 'list-subsys &lt;devname&gt;' (bsc#1195938)
  * Add lbstm option to create-ns
  * argconfig: Do not use default value loading by getopt_long_only
  * argconfig: Rename CFG_NONE to CFG_FLAG
  * plugins: Use type bool for OPT_FLAG
  * documenation updates
- Drop 'ProtectKernelTunables=true' (bsc#1197076)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 2.0:
  * fabrics: Create persistent controller using unique subsystem NQN (bsc#1198243)
  * fabrics: Set KATO for discovery controller when connecting
  * fabrics: Do no modify default config for discovery controller
  * fabrics: Set default trsvcid ports for TCP and RDMA (bsc#1195858)
  * fabrics: Support connect even when no /etc/nvme/hostnqn file exists
  * nvme: update to nvme_scan_filter_t modifications (bsc#1195938)
  * plugins/intel: make 'buckets' a json array
  * plugins: Update WDC capabilities command with new commmands
  * plugins: Add OCP plugin</changelog>
  <changelog author="dwagner@suse.de" date="1654603200">- fabrics: Already connected uses a different error code (bsc#1199994)
  * add 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
- fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * add 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
- nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)
  * add 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * add 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
- fabrics: Honor config file for connect-all (bsc#1199504)
  * add 0005-fabrics-Honor-config-file-for-connect-all.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * add 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
- Fabrics related bug fixes
  * add 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * add 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * add 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * add 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * add 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * add 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * add 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * add 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * add 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 2.2.1 (jsc#ped-553):
  * Added parsing for Solidigm telemetry observable data.
  * Revert "udev: re-read the discovery log page when a discovery controller reconnected"
  * add item ddr_ecc_err_cnt in smart-log-add
  * build and install fixes/improvements
  * build: Add minimum build requirement on libnvme
  * build: Drop dependency on libuuid
  * build: Extend release script to support micro version releases
  * build: Fix endian check for cross build
  * build: Remove unused uuid.wrap file
  * build: Remove unusned uuid.h include
  * build: Update release version rules
  * build: Update version before regenerating docs
  * completions: Add show-topology tab completion
  * documentation fixes
  * fabrics: Avoid nvme_scan_ctrl when disconnecting
  * fabrics: Honor JSON config file in connect-all command
  * fabrics: Remove dhchap-ctrl-secret from discover/connect-all
  * fabrics: Trigger auto connect if config.json exists
  * fabrics: fix 'persistent' handling during connect-all with JSON file
  * fabrics: nvme config --modify depends on -n and -t argument
  * fabrics: re-read the discovery log page when a discovery controller reconnected
  * json: Support uint64 types serialization for older json-c versions
  * meson: we don't need a c++ compiler
  * new solidigm plugin
  * nvme, plugins: fix __u64 -&gt; unsigned long long assumptions
  * nvme-print: Add missing values in id-ctrl for JSON output
  * nvme-print: Handle NULL hostid in JSON output
  * nvme-print: Output 128bit values as uint128 type instead of double
  * nvme-print: Print fguid as a UUID
  * nvme-print: Use uint128 JSON function for media_units_written
  * nvme-print: decode MI status values
  * nvme-print: decode status types
  * nvme-print: fix wrong json key
  * nvme-print: sanitize the get-feature async event config output
  * nvme: Add helper function to parse 16-bit comma separated list
  * nvme: Add nvme_cmd wrapper for get_features
  * nvme: Add show-topology command
  * nvme: Add wrapper for Format NVM
  * nvme: Add wrapper for Sanitize NVM
  * nvme: Add wrappers for Get Log page helpers
  * nvme: Add wrappers for Identify controller lists
  * nvme: Add wrappers for NS attach/detach
  * nvme: Add wrappers for NS management functions
  * nvme: Add wrappers for basic NS identify
  * nvme: Add wrappers for firmware commands
  * nvme: Do not print error message in collect_effects_log helper
  * nvme: Fix set feature command to get feature identifier 0Dh length as zero
  * nvme: Introduce a union in struct nvme_dev for different transport types
  * nvme: Introduce nvme_cli_ wrappers, wrap identify and identify_ctrl
  * nvme: Make static nvme_dev private to open_dev(), use locals elsewhere
  * nvme: Masks SSTAT in sanize-log output
  * nvme: Remove static nvme_dev, allocate on open instead
  * nvme: Set default rae value for nvme_get_nsid_log users
  * nvme: Simplify ns list identify
  * nvme: Use correct print format specifier for sizeof arguments
  * nvme: Use local struct nvme_dev for show_registers &amp; map_registers
  * nvme: check if cfg.metadata is NULL before passing it to strlen()
  * nvme: use helpers for checking status types
  * plugins/innogrit: Include timer.h
  * plugins/innogrit: add smart items for smart-log-add
  * plugins/micron-nvme: Use correct print format specifier for sizeof arguments
  * plugins/ocp: Include timer.h
  * plugins/ocp: Output 128bit values as uint128 type instead of double
  * plugins/ocp: drop unused fd argument
  * plugins/ocp: pass struct nvme_dev to internal functions
  * plugins/seagate: Add support for OCP
  * plugins/solidigm: fix return value on format parse failure
  * plugins/toshiba: pass struct nvme_dev rather than fd + name
  * plugins/virtium: Output 128bit values as uint128 type instead of double
  * plugins/wdc: Add support for SN660 drive
  * plugins/wdc: Add type case for feature id
  * plugins/wdc: Output 128bit values as uint128 type instead of double
  * plugins/wdc: fix memset() on the address of a pointer
  * plugins/wdc: pass a struct nvme_dev around rather than a fd
  * plugins/wdc: pass struct nvme_dev rather than using global nvme_dev
  * plugins/wdc: prevent duplicate close on NVMe device
  * plugins/wdc: remove fd argument from print functions
  * plugins/ytmc: pass struct nvme_dev rather than fd + name
  * plugins: Use PRIu64 format specifier for 64bit types
  * print: Add Controller Ready Timeout Exceeded HW error code
  * print: Fix nvme_id_uuid_list
  * solidgm: fix initialization warning
  * solidigm: Added parsing for telemetry customer screenable data
  * solidigm: Fix printf format for size_t variable
  * solidigm: Updated Telemetry parsing code to MIT license.
  * subprojects/libnvme: update for MI admin command coverage
  * tests: Update license to GPL-2.0-or-later
  * tree: Add NVMe-MI support
  * tree: Add dev_fd() helper
  * tree: Change nvme_dev from global to static
  * tree: Combine NVMe file descriptor into struct nvme_dev
  * tree: Move global device info to a single struct
  * tree: fail on non-negative return values from parse_and_open
  * udev: Add HOST_IFACE to udev rule
  * util/json.h: Add json_object_get_uint64 fallback implementation
  * util/json: Add 128 bit JSON helpers
  * util/types: Add 128 bit conversion helpers
  * util: Fix le128_to_cpu on big-endian
  * util: Fix le128_to_cpu on little-endian
  * util: Move common type conversion helpers into util section
  * utils/json: Add json_object_new_uint64 for json-c &lt; 0.14
  * utils: Fix uint128_t usage
  * various fixes reported by coverity
  * version reporting includes library version
  * wdc:  OCP Log page updates and fixes
  * wrapper: Add weak nvme_init_copy_range_f1 symbol
  * wrapper: Call library version of nvme_init_copy_range_f1
  * wrapper: Update SPDIX license
  * zns.c: report zones should be started after retrieved zone
- Drop upsreamp patches
  * remove 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
  * remove 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
  * remove 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * remove 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
  * remove 0005-fabrics-Honor-config-file-for-connect-all.patch
  * remove 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
  * remove 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * remove 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * remove 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * remove 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * remove 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * remove 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * remove 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * remove 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * remove 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch
- Handle suse-missing-rclink lint warnings by providing the symlinks
- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- Mark no binaries rpms as noarch</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 2.2.1+3.gd028407:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Add %check section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- spec file: fix "check" section (bsc#1207686)
- add "Provides: nvmeof-boot-support = 0.1"</changelog>
  <changelog author="daniel.wagner@suse.com" date="1684929600">- Update to version v2.4 (jsc#PED-553 jsc#PED-3884)
  - Sanitize traddr and trsvcid avoid buffer overrun (bsc#1207435)
  * json_discovery_log: avoid buffer overrun
  - Extend udev rule to pass --host-interface argument to nvme-cli (bsc#1208001)
  * udev: Add HOST_IFACE to udev rule
  - Build documentation to be up to date
  - Fix build warning (git-fixes)
  * fabrics: 'e-&gt;traddr' is static
  - Improvements for supported-log-pages (bsc#1209550)
  * nvme-doc: update man page for supported-log-pages
  * nvme-print: sanitize supported-log-pages output
  - Fix read command (bsc#1209564)
  * nvme: fix block count and data size logic
  - Fix mounting filesystems via fstab (bsc#1208075)
  * fabrics: Fix ordering for auto connect services
  - Update host_traddr when using config.json file (bsc#1210089)
  * fabrics: fix fc config JSON file handling
  - remove 0100-harden_nvmf-connect@.service.patch
- Added compat commands for nbft back
- Changed default behavior of connect-all to match with old nbft
  behavior
- Replaced old nbft implementation with upstream one
- Rebuild documentation on package update
- Set version-tag so that version are correctly reported
- Fix connect nbft regressions (bsc#1209905)
  * fabrics: fix argc in show_nbft_compat_cmd()
- Fix auto connect conditions (bsc#1210105)
  * fabrics: fix conditions in nvmf-autoconnect.service
- Fix auto boot for NBFT connections (bsc#1211647)
  * fabrics: add udev rule to avoid renaming nbft interfaces
  * fabrics: autoconnect: add service unit for connecting NBFT subsystems</changelog>
  <changelog author="dwagner@suse.de" date="1690459200">- Update to version 2.4+24.ga1ee20:
  * nvme-print-stdout: Do not show non reachable ns in namespace topology (bsc#1212598)
  * nvme-print-stdout: List only ctrls which are part of ns bsc#1212598)
  * nvme-print-stdout: Support subsys reachable from several hosts bsc#1212598)
  * ccan: Add htable, strset and dependencies bsc#1212598)
  * ccan: Remove unused documentation bsc#1212598)
  * nvme-print: fix counter while looping through uuid_list (bsc#bsc#1212598)
  * nvme-print: Show subsystem iopolicy (bsc#1124564)</changelog>
  <changelog author="dwagner@suse.de" date="1693915200">- Update to version 2.4+25.g367eb9:
  * json: fix seg. fault converting NULL to JSON string (bsc#1213762)</changelog>
</package>
<package pkgid="2ae828163a748d48a77c98dbcb2663b19ea0cea430b9d3a4ec66c96d868ae075" name="nvme-cli" arch="src">
  <version epoch="0" ver="2.4+25.g367eb9" rel="150500.4.9.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Use osc_scm to manage upstream input source.
- Fix version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Fix zsh completion package depenedencies.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 2.0~2:
  * Adapt to logging API changes in libnvme
  * Adapt to scan API changes in libnvme
  * Reworked error message handling
  * Fix 'list-ns' (bsc#1195151)
  * Add 'gen-tls-key' and 'check-tls-key'
  * Add Media Unit Status log page support
  * Cleanups and build fixes
- Fix path to systemctl (bsc#1193699)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v2.0-rc3:
  * nvme-print: Fix json output for list-subsys
  * nvme: Allow --verbose flag to increase log level
  * Added telemetry log fetch support for SN810, SN530 and SN740 series NVMe SSDs through wdc vs-internal-log command
  * nvmf: Remove --matching from systemd service file (bsc#1195665)
  * nvme: Fix --force flag inversion (bsc#1195637)
  * nvme: Add support for data area 4 to get-telemetry-log
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme-print: Add NVME_FEAT_FID_ENH_CTRL_METADATA to nvme_feature_to_string
  * nvme-print: remove unused nvme_show_id_ctrl function
  * nvme: Add nvm-id-ns-lba-format(CNS 0Ah) command from TP4095
  * nvme: Add NVM Command Set specific identify namespace command
  * nvme: Add id-ns-lba-format(CNS 09h) command from TP4095
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
- Include precompiled documentation</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 2.0-rc4:
  * netapp-nvme: free the nsdescs pointer after use
  * netapp-nvme: fix ontapdevices segfault in json output
  * nvme-print: fix 'nvme list -o json' segfault
  * nvme: get_ns_id command fails on nvme device
  * wdc: updated products list for telemetry (--type) argument
  * docs: fix typo in Data Set Management section
  * Fix ctrlist for attach-ns and detach-ns
  * netapp-nvme: fix nvme ns desc uuid handling for ontapdevices
  * wdc: Fix use-after-free access of cbs_data
  * Fixed regression with 'open namespace exclusive' (bsc#1195945)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 2.0-rc5:
  * nvme: passthru bugfix(wrong jump, wrong file descriptor)
  * nvme-cli: Ignore traddr case (bsc#1194025)
  * nvme: fix segfault in nvme telemetry-log error handling
  * fabrics: ensure zero kato for non-persistent controllers
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 2.0-rc6:
  * nvme: print out ANA state for 'list-subsys' (bsc#1195938)
  * nvme: Explicit initialize all command line options (bsc#1195945)
  * nvme: Explicit initialize passthru command line options
  * nvme: list_ns bug fix (csi option enable)
  * nvme: nvme write bug fix (no parse for option)
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 2.0-rc7:
  * netapp-nvme: fix smdevices segfault in json output (bsc#1195937)
  * fabrics: keep the backward compatibility
  * nvme: Do not slash escape strings in JSON output (bsc#1195937)
  * nvme: Print full device path
  * nvme-print: Make JSON keys consistent with nvme-cli 1.x
  * nvme-print: print generic device in list command
  * fabrics: check for discovery controller instead of subsystem NQN (bsc#1197061)
  * connect: Set errno to zero on nvmf_add_ctrl() success
  * documenation updates
- Set path to systemctl via newly introduced config option
- Update 0100-harden_nvmf-connect@.service.patch due to upstream file rename
- Moved bash completion script to /usr/share/bash-completion/completions/nvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647950400">- Fix install conflict caused by new bash completion script
  location (bsc#1197365).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 2.0-rc8:
  * fabrics: Add DIM command
  * fabrics: Introduce force flag to overwrite persistence logic (bsc#1197076)
  * fabrics: Free non-matching controller during discovery
  * fabrics: add 'nvme config' command
  * fabrics: Correctly stringify discovery.conf and config.json paths
  * nvme-print: Add human readable print for nsattr field
  * nvme-print: Update Persistent Event log fields
  * nvme-print: print discovery async event support
  * nvme-rpmb: Fix spelling for 'Partition'
  * nvme-copy: add missing field to the command
  * nvme: add get_mi_cmd_support_effects_log command
  * nvme: Fixup namespace filtering yet again
  * nvme: Use type bool for OPT_FLAG
  * nvme: use filter for 'list-subsys &lt;devname&gt;' (bsc#1195938)
  * Add lbstm option to create-ns
  * argconfig: Do not use default value loading by getopt_long_only
  * argconfig: Rename CFG_NONE to CFG_FLAG
  * plugins: Use type bool for OPT_FLAG
  * documenation updates
- Drop 'ProtectKernelTunables=true' (bsc#1197076)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 2.0:
  * fabrics: Create persistent controller using unique subsystem NQN (bsc#1198243)
  * fabrics: Set KATO for discovery controller when connecting
  * fabrics: Do no modify default config for discovery controller
  * fabrics: Set default trsvcid ports for TCP and RDMA (bsc#1195858)
  * fabrics: Support connect even when no /etc/nvme/hostnqn file exists
  * nvme: update to nvme_scan_filter_t modifications (bsc#1195938)
  * plugins/intel: make 'buckets' a json array
  * plugins: Update WDC capabilities command with new commmands
  * plugins: Add OCP plugin</changelog>
  <changelog author="dwagner@suse.de" date="1654603200">- fabrics: Already connected uses a different error code (bsc#1199994)
  * add 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
- fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * add 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
- nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)
  * add 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * add 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
- fabrics: Honor config file for connect-all (bsc#1199504)
  * add 0005-fabrics-Honor-config-file-for-connect-all.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * add 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
- Fabrics related bug fixes
  * add 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * add 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * add 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * add 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * add 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * add 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * add 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * add 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * add 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 2.2.1 (jsc#ped-553):
  * Added parsing for Solidigm telemetry observable data.
  * Revert "udev: re-read the discovery log page when a discovery controller reconnected"
  * add item ddr_ecc_err_cnt in smart-log-add
  * build and install fixes/improvements
  * build: Add minimum build requirement on libnvme
  * build: Drop dependency on libuuid
  * build: Extend release script to support micro version releases
  * build: Fix endian check for cross build
  * build: Remove unused uuid.wrap file
  * build: Remove unusned uuid.h include
  * build: Update release version rules
  * build: Update version before regenerating docs
  * completions: Add show-topology tab completion
  * documentation fixes
  * fabrics: Avoid nvme_scan_ctrl when disconnecting
  * fabrics: Honor JSON config file in connect-all command
  * fabrics: Remove dhchap-ctrl-secret from discover/connect-all
  * fabrics: Trigger auto connect if config.json exists
  * fabrics: fix 'persistent' handling during connect-all with JSON file
  * fabrics: nvme config --modify depends on -n and -t argument
  * fabrics: re-read the discovery log page when a discovery controller reconnected
  * json: Support uint64 types serialization for older json-c versions
  * meson: we don't need a c++ compiler
  * new solidigm plugin
  * nvme, plugins: fix __u64 -&gt; unsigned long long assumptions
  * nvme-print: Add missing values in id-ctrl for JSON output
  * nvme-print: Handle NULL hostid in JSON output
  * nvme-print: Output 128bit values as uint128 type instead of double
  * nvme-print: Print fguid as a UUID
  * nvme-print: Use uint128 JSON function for media_units_written
  * nvme-print: decode MI status values
  * nvme-print: decode status types
  * nvme-print: fix wrong json key
  * nvme-print: sanitize the get-feature async event config output
  * nvme: Add helper function to parse 16-bit comma separated list
  * nvme: Add nvme_cmd wrapper for get_features
  * nvme: Add show-topology command
  * nvme: Add wrapper for Format NVM
  * nvme: Add wrapper for Sanitize NVM
  * nvme: Add wrappers for Get Log page helpers
  * nvme: Add wrappers for Identify controller lists
  * nvme: Add wrappers for NS attach/detach
  * nvme: Add wrappers for NS management functions
  * nvme: Add wrappers for basic NS identify
  * nvme: Add wrappers for firmware commands
  * nvme: Do not print error message in collect_effects_log helper
  * nvme: Fix set feature command to get feature identifier 0Dh length as zero
  * nvme: Introduce a union in struct nvme_dev for different transport types
  * nvme: Introduce nvme_cli_ wrappers, wrap identify and identify_ctrl
  * nvme: Make static nvme_dev private to open_dev(), use locals elsewhere
  * nvme: Masks SSTAT in sanize-log output
  * nvme: Remove static nvme_dev, allocate on open instead
  * nvme: Set default rae value for nvme_get_nsid_log users
  * nvme: Simplify ns list identify
  * nvme: Use correct print format specifier for sizeof arguments
  * nvme: Use local struct nvme_dev for show_registers &amp; map_registers
  * nvme: check if cfg.metadata is NULL before passing it to strlen()
  * nvme: use helpers for checking status types
  * plugins/innogrit: Include timer.h
  * plugins/innogrit: add smart items for smart-log-add
  * plugins/micron-nvme: Use correct print format specifier for sizeof arguments
  * plugins/ocp: Include timer.h
  * plugins/ocp: Output 128bit values as uint128 type instead of double
  * plugins/ocp: drop unused fd argument
  * plugins/ocp: pass struct nvme_dev to internal functions
  * plugins/seagate: Add support for OCP
  * plugins/solidigm: fix return value on format parse failure
  * plugins/toshiba: pass struct nvme_dev rather than fd + name
  * plugins/virtium: Output 128bit values as uint128 type instead of double
  * plugins/wdc: Add support for SN660 drive
  * plugins/wdc: Add type case for feature id
  * plugins/wdc: Output 128bit values as uint128 type instead of double
  * plugins/wdc: fix memset() on the address of a pointer
  * plugins/wdc: pass a struct nvme_dev around rather than a fd
  * plugins/wdc: pass struct nvme_dev rather than using global nvme_dev
  * plugins/wdc: prevent duplicate close on NVMe device
  * plugins/wdc: remove fd argument from print functions
  * plugins/ytmc: pass struct nvme_dev rather than fd + name
  * plugins: Use PRIu64 format specifier for 64bit types
  * print: Add Controller Ready Timeout Exceeded HW error code
  * print: Fix nvme_id_uuid_list
  * solidgm: fix initialization warning
  * solidigm: Added parsing for telemetry customer screenable data
  * solidigm: Fix printf format for size_t variable
  * solidigm: Updated Telemetry parsing code to MIT license.
  * subprojects/libnvme: update for MI admin command coverage
  * tests: Update license to GPL-2.0-or-later
  * tree: Add NVMe-MI support
  * tree: Add dev_fd() helper
  * tree: Change nvme_dev from global to static
  * tree: Combine NVMe file descriptor into struct nvme_dev
  * tree: Move global device info to a single struct
  * tree: fail on non-negative return values from parse_and_open
  * udev: Add HOST_IFACE to udev rule
  * util/json.h: Add json_object_get_uint64 fallback implementation
  * util/json: Add 128 bit JSON helpers
  * util/types: Add 128 bit conversion helpers
  * util: Fix le128_to_cpu on big-endian
  * util: Fix le128_to_cpu on little-endian
  * util: Move common type conversion helpers into util section
  * utils/json: Add json_object_new_uint64 for json-c &lt; 0.14
  * utils: Fix uint128_t usage
  * various fixes reported by coverity
  * version reporting includes library version
  * wdc:  OCP Log page updates and fixes
  * wrapper: Add weak nvme_init_copy_range_f1 symbol
  * wrapper: Call library version of nvme_init_copy_range_f1
  * wrapper: Update SPDIX license
  * zns.c: report zones should be started after retrieved zone
- Drop upsreamp patches
  * remove 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
  * remove 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
  * remove 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * remove 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
  * remove 0005-fabrics-Honor-config-file-for-connect-all.patch
  * remove 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
  * remove 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * remove 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * remove 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * remove 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * remove 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * remove 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * remove 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * remove 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * remove 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch
- Handle suse-missing-rclink lint warnings by providing the symlinks
- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- Mark no binaries rpms as noarch</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 2.2.1+3.gd028407:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Add %check section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- spec file: fix "check" section (bsc#1207686)
- add "Provides: nvmeof-boot-support = 0.1"</changelog>
  <changelog author="daniel.wagner@suse.com" date="1684929600">- Update to version v2.4 (jsc#PED-553 jsc#PED-3884)
  - Sanitize traddr and trsvcid avoid buffer overrun (bsc#1207435)
  * json_discovery_log: avoid buffer overrun
  - Extend udev rule to pass --host-interface argument to nvme-cli (bsc#1208001)
  * udev: Add HOST_IFACE to udev rule
  - Build documentation to be up to date
  - Fix build warning (git-fixes)
  * fabrics: 'e-&gt;traddr' is static
  - Improvements for supported-log-pages (bsc#1209550)
  * nvme-doc: update man page for supported-log-pages
  * nvme-print: sanitize supported-log-pages output
  - Fix read command (bsc#1209564)
  * nvme: fix block count and data size logic
  - Fix mounting filesystems via fstab (bsc#1208075)
  * fabrics: Fix ordering for auto connect services
  - Update host_traddr when using config.json file (bsc#1210089)
  * fabrics: fix fc config JSON file handling
  - remove 0100-harden_nvmf-connect@.service.patch
- Added compat commands for nbft back
- Changed default behavior of connect-all to match with old nbft
  behavior
- Replaced old nbft implementation with upstream one
- Rebuild documentation on package update
- Set version-tag so that version are correctly reported
- Fix connect nbft regressions (bsc#1209905)
  * fabrics: fix argc in show_nbft_compat_cmd()
- Fix auto connect conditions (bsc#1210105)
  * fabrics: fix conditions in nvmf-autoconnect.service
- Fix auto boot for NBFT connections (bsc#1211647)
  * fabrics: add udev rule to avoid renaming nbft interfaces
  * fabrics: autoconnect: add service unit for connecting NBFT subsystems</changelog>
  <changelog author="dwagner@suse.de" date="1690459200">- Update to version 2.4+24.ga1ee20:
  * nvme-print-stdout: Do not show non reachable ns in namespace topology (bsc#1212598)
  * nvme-print-stdout: List only ctrls which are part of ns bsc#1212598)
  * nvme-print-stdout: Support subsys reachable from several hosts bsc#1212598)
  * ccan: Add htable, strset and dependencies bsc#1212598)
  * ccan: Remove unused documentation bsc#1212598)
  * nvme-print: fix counter while looping through uuid_list (bsc#bsc#1212598)
  * nvme-print: Show subsystem iopolicy (bsc#1124564)</changelog>
  <changelog author="dwagner@suse.de" date="1693915200">- Update to version 2.4+25.g367eb9:
  * json: fix seg. fault converting NULL to JSON string (bsc#1213762)</changelog>
</package>
<package pkgid="2a6bcdbf7e415805dd2c35e683b9873b73bdc4f48b155b2374b7005798b19269" name="nvme-cli" arch="x86_64">
  <version epoch="0" ver="2.4+25.g367eb9" rel="150500.4.9.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Use osc_scm to manage upstream input source.
- Fix version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Fix zsh completion package depenedencies.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 2.0~2:
  * Adapt to logging API changes in libnvme
  * Adapt to scan API changes in libnvme
  * Reworked error message handling
  * Fix 'list-ns' (bsc#1195151)
  * Add 'gen-tls-key' and 'check-tls-key'
  * Add Media Unit Status log page support
  * Cleanups and build fixes
- Fix path to systemctl (bsc#1193699)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v2.0-rc3:
  * nvme-print: Fix json output for list-subsys
  * nvme: Allow --verbose flag to increase log level
  * Added telemetry log fetch support for SN810, SN530 and SN740 series NVMe SSDs through wdc vs-internal-log command
  * nvmf: Remove --matching from systemd service file (bsc#1195665)
  * nvme: Fix --force flag inversion (bsc#1195637)
  * nvme: Add support for data area 4 to get-telemetry-log
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme-print: Add NVME_FEAT_FID_ENH_CTRL_METADATA to nvme_feature_to_string
  * nvme-print: remove unused nvme_show_id_ctrl function
  * nvme: Add nvm-id-ns-lba-format(CNS 0Ah) command from TP4095
  * nvme: Add NVM Command Set specific identify namespace command
  * nvme: Add id-ns-lba-format(CNS 09h) command from TP4095
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
- Include precompiled documentation</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 2.0-rc4:
  * netapp-nvme: free the nsdescs pointer after use
  * netapp-nvme: fix ontapdevices segfault in json output
  * nvme-print: fix 'nvme list -o json' segfault
  * nvme: get_ns_id command fails on nvme device
  * wdc: updated products list for telemetry (--type) argument
  * docs: fix typo in Data Set Management section
  * Fix ctrlist for attach-ns and detach-ns
  * netapp-nvme: fix nvme ns desc uuid handling for ontapdevices
  * wdc: Fix use-after-free access of cbs_data
  * Fixed regression with 'open namespace exclusive' (bsc#1195945)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 2.0-rc5:
  * nvme: passthru bugfix(wrong jump, wrong file descriptor)
  * nvme-cli: Ignore traddr case (bsc#1194025)
  * nvme: fix segfault in nvme telemetry-log error handling
  * fabrics: ensure zero kato for non-persistent controllers
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 2.0-rc6:
  * nvme: print out ANA state for 'list-subsys' (bsc#1195938)
  * nvme: Explicit initialize all command line options (bsc#1195945)
  * nvme: Explicit initialize passthru command line options
  * nvme: list_ns bug fix (csi option enable)
  * nvme: nvme write bug fix (no parse for option)
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 2.0-rc7:
  * netapp-nvme: fix smdevices segfault in json output (bsc#1195937)
  * fabrics: keep the backward compatibility
  * nvme: Do not slash escape strings in JSON output (bsc#1195937)
  * nvme: Print full device path
  * nvme-print: Make JSON keys consistent with nvme-cli 1.x
  * nvme-print: print generic device in list command
  * fabrics: check for discovery controller instead of subsystem NQN (bsc#1197061)
  * connect: Set errno to zero on nvmf_add_ctrl() success
  * documenation updates
- Set path to systemctl via newly introduced config option
- Update 0100-harden_nvmf-connect@.service.patch due to upstream file rename
- Moved bash completion script to /usr/share/bash-completion/completions/nvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647950400">- Fix install conflict caused by new bash completion script
  location (bsc#1197365).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 2.0-rc8:
  * fabrics: Add DIM command
  * fabrics: Introduce force flag to overwrite persistence logic (bsc#1197076)
  * fabrics: Free non-matching controller during discovery
  * fabrics: add 'nvme config' command
  * fabrics: Correctly stringify discovery.conf and config.json paths
  * nvme-print: Add human readable print for nsattr field
  * nvme-print: Update Persistent Event log fields
  * nvme-print: print discovery async event support
  * nvme-rpmb: Fix spelling for 'Partition'
  * nvme-copy: add missing field to the command
  * nvme: add get_mi_cmd_support_effects_log command
  * nvme: Fixup namespace filtering yet again
  * nvme: Use type bool for OPT_FLAG
  * nvme: use filter for 'list-subsys &lt;devname&gt;' (bsc#1195938)
  * Add lbstm option to create-ns
  * argconfig: Do not use default value loading by getopt_long_only
  * argconfig: Rename CFG_NONE to CFG_FLAG
  * plugins: Use type bool for OPT_FLAG
  * documenation updates
- Drop 'ProtectKernelTunables=true' (bsc#1197076)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 2.0:
  * fabrics: Create persistent controller using unique subsystem NQN (bsc#1198243)
  * fabrics: Set KATO for discovery controller when connecting
  * fabrics: Do no modify default config for discovery controller
  * fabrics: Set default trsvcid ports for TCP and RDMA (bsc#1195858)
  * fabrics: Support connect even when no /etc/nvme/hostnqn file exists
  * nvme: update to nvme_scan_filter_t modifications (bsc#1195938)
  * plugins/intel: make 'buckets' a json array
  * plugins: Update WDC capabilities command with new commmands
  * plugins: Add OCP plugin</changelog>
  <changelog author="dwagner@suse.de" date="1654603200">- fabrics: Already connected uses a different error code (bsc#1199994)
  * add 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
- fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * add 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
- nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)
  * add 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * add 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
- fabrics: Honor config file for connect-all (bsc#1199504)
  * add 0005-fabrics-Honor-config-file-for-connect-all.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * add 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
- Fabrics related bug fixes
  * add 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * add 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * add 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * add 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * add 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * add 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * add 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * add 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * add 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 2.2.1 (jsc#ped-553):
  * Added parsing for Solidigm telemetry observable data.
  * Revert "udev: re-read the discovery log page when a discovery controller reconnected"
  * add item ddr_ecc_err_cnt in smart-log-add
  * build and install fixes/improvements
  * build: Add minimum build requirement on libnvme
  * build: Drop dependency on libuuid
  * build: Extend release script to support micro version releases
  * build: Fix endian check for cross build
  * build: Remove unused uuid.wrap file
  * build: Remove unusned uuid.h include
  * build: Update release version rules
  * build: Update version before regenerating docs
  * completions: Add show-topology tab completion
  * documentation fixes
  * fabrics: Avoid nvme_scan_ctrl when disconnecting
  * fabrics: Honor JSON config file in connect-all command
  * fabrics: Remove dhchap-ctrl-secret from discover/connect-all
  * fabrics: Trigger auto connect if config.json exists
  * fabrics: fix 'persistent' handling during connect-all with JSON file
  * fabrics: nvme config --modify depends on -n and -t argument
  * fabrics: re-read the discovery log page when a discovery controller reconnected
  * json: Support uint64 types serialization for older json-c versions
  * meson: we don't need a c++ compiler
  * new solidigm plugin
  * nvme, plugins: fix __u64 -&gt; unsigned long long assumptions
  * nvme-print: Add missing values in id-ctrl for JSON output
  * nvme-print: Handle NULL hostid in JSON output
  * nvme-print: Output 128bit values as uint128 type instead of double
  * nvme-print: Print fguid as a UUID
  * nvme-print: Use uint128 JSON function for media_units_written
  * nvme-print: decode MI status values
  * nvme-print: decode status types
  * nvme-print: fix wrong json key
  * nvme-print: sanitize the get-feature async event config output
  * nvme: Add helper function to parse 16-bit comma separated list
  * nvme: Add nvme_cmd wrapper for get_features
  * nvme: Add show-topology command
  * nvme: Add wrapper for Format NVM
  * nvme: Add wrapper for Sanitize NVM
  * nvme: Add wrappers for Get Log page helpers
  * nvme: Add wrappers for Identify controller lists
  * nvme: Add wrappers for NS attach/detach
  * nvme: Add wrappers for NS management functions
  * nvme: Add wrappers for basic NS identify
  * nvme: Add wrappers for firmware commands
  * nvme: Do not print error message in collect_effects_log helper
  * nvme: Fix set feature command to get feature identifier 0Dh length as zero
  * nvme: Introduce a union in struct nvme_dev for different transport types
  * nvme: Introduce nvme_cli_ wrappers, wrap identify and identify_ctrl
  * nvme: Make static nvme_dev private to open_dev(), use locals elsewhere
  * nvme: Masks SSTAT in sanize-log output
  * nvme: Remove static nvme_dev, allocate on open instead
  * nvme: Set default rae value for nvme_get_nsid_log users
  * nvme: Simplify ns list identify
  * nvme: Use correct print format specifier for sizeof arguments
  * nvme: Use local struct nvme_dev for show_registers &amp; map_registers
  * nvme: check if cfg.metadata is NULL before passing it to strlen()
  * nvme: use helpers for checking status types
  * plugins/innogrit: Include timer.h
  * plugins/innogrit: add smart items for smart-log-add
  * plugins/micron-nvme: Use correct print format specifier for sizeof arguments
  * plugins/ocp: Include timer.h
  * plugins/ocp: Output 128bit values as uint128 type instead of double
  * plugins/ocp: drop unused fd argument
  * plugins/ocp: pass struct nvme_dev to internal functions
  * plugins/seagate: Add support for OCP
  * plugins/solidigm: fix return value on format parse failure
  * plugins/toshiba: pass struct nvme_dev rather than fd + name
  * plugins/virtium: Output 128bit values as uint128 type instead of double
  * plugins/wdc: Add support for SN660 drive
  * plugins/wdc: Add type case for feature id
  * plugins/wdc: Output 128bit values as uint128 type instead of double
  * plugins/wdc: fix memset() on the address of a pointer
  * plugins/wdc: pass a struct nvme_dev around rather than a fd
  * plugins/wdc: pass struct nvme_dev rather than using global nvme_dev
  * plugins/wdc: prevent duplicate close on NVMe device
  * plugins/wdc: remove fd argument from print functions
  * plugins/ytmc: pass struct nvme_dev rather than fd + name
  * plugins: Use PRIu64 format specifier for 64bit types
  * print: Add Controller Ready Timeout Exceeded HW error code
  * print: Fix nvme_id_uuid_list
  * solidgm: fix initialization warning
  * solidigm: Added parsing for telemetry customer screenable data
  * solidigm: Fix printf format for size_t variable
  * solidigm: Updated Telemetry parsing code to MIT license.
  * subprojects/libnvme: update for MI admin command coverage
  * tests: Update license to GPL-2.0-or-later
  * tree: Add NVMe-MI support
  * tree: Add dev_fd() helper
  * tree: Change nvme_dev from global to static
  * tree: Combine NVMe file descriptor into struct nvme_dev
  * tree: Move global device info to a single struct
  * tree: fail on non-negative return values from parse_and_open
  * udev: Add HOST_IFACE to udev rule
  * util/json.h: Add json_object_get_uint64 fallback implementation
  * util/json: Add 128 bit JSON helpers
  * util/types: Add 128 bit conversion helpers
  * util: Fix le128_to_cpu on big-endian
  * util: Fix le128_to_cpu on little-endian
  * util: Move common type conversion helpers into util section
  * utils/json: Add json_object_new_uint64 for json-c &lt; 0.14
  * utils: Fix uint128_t usage
  * various fixes reported by coverity
  * version reporting includes library version
  * wdc:  OCP Log page updates and fixes
  * wrapper: Add weak nvme_init_copy_range_f1 symbol
  * wrapper: Call library version of nvme_init_copy_range_f1
  * wrapper: Update SPDIX license
  * zns.c: report zones should be started after retrieved zone
- Drop upsreamp patches
  * remove 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
  * remove 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
  * remove 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * remove 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
  * remove 0005-fabrics-Honor-config-file-for-connect-all.patch
  * remove 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
  * remove 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * remove 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * remove 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * remove 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * remove 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * remove 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * remove 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * remove 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * remove 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch
- Handle suse-missing-rclink lint warnings by providing the symlinks
- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- Mark no binaries rpms as noarch</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 2.2.1+3.gd028407:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Add %check section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- spec file: fix "check" section (bsc#1207686)
- add "Provides: nvmeof-boot-support = 0.1"</changelog>
  <changelog author="daniel.wagner@suse.com" date="1684929600">- Update to version v2.4 (jsc#PED-553 jsc#PED-3884)
  - Sanitize traddr and trsvcid avoid buffer overrun (bsc#1207435)
  * json_discovery_log: avoid buffer overrun
  - Extend udev rule to pass --host-interface argument to nvme-cli (bsc#1208001)
  * udev: Add HOST_IFACE to udev rule
  - Build documentation to be up to date
  - Fix build warning (git-fixes)
  * fabrics: 'e-&gt;traddr' is static
  - Improvements for supported-log-pages (bsc#1209550)
  * nvme-doc: update man page for supported-log-pages
  * nvme-print: sanitize supported-log-pages output
  - Fix read command (bsc#1209564)
  * nvme: fix block count and data size logic
  - Fix mounting filesystems via fstab (bsc#1208075)
  * fabrics: Fix ordering for auto connect services
  - Update host_traddr when using config.json file (bsc#1210089)
  * fabrics: fix fc config JSON file handling
  - remove 0100-harden_nvmf-connect@.service.patch
- Added compat commands for nbft back
- Changed default behavior of connect-all to match with old nbft
  behavior
- Replaced old nbft implementation with upstream one
- Rebuild documentation on package update
- Set version-tag so that version are correctly reported
- Fix connect nbft regressions (bsc#1209905)
  * fabrics: fix argc in show_nbft_compat_cmd()
- Fix auto connect conditions (bsc#1210105)
  * fabrics: fix conditions in nvmf-autoconnect.service
- Fix auto boot for NBFT connections (bsc#1211647)
  * fabrics: add udev rule to avoid renaming nbft interfaces
  * fabrics: autoconnect: add service unit for connecting NBFT subsystems</changelog>
  <changelog author="dwagner@suse.de" date="1690459200">- Update to version 2.4+24.ga1ee20:
  * nvme-print-stdout: Do not show non reachable ns in namespace topology (bsc#1212598)
  * nvme-print-stdout: List only ctrls which are part of ns bsc#1212598)
  * nvme-print-stdout: Support subsys reachable from several hosts bsc#1212598)
  * ccan: Add htable, strset and dependencies bsc#1212598)
  * ccan: Remove unused documentation bsc#1212598)
  * nvme-print: fix counter while looping through uuid_list (bsc#bsc#1212598)
  * nvme-print: Show subsystem iopolicy (bsc#1124564)</changelog>
  <changelog author="dwagner@suse.de" date="1693915200">- Update to version 2.4+25.g367eb9:
  * json: fix seg. fault converting NULL to JSON string (bsc#1213762)</changelog>
</package>
<package pkgid="e39bc8ad0eb1204b6dc659f13c3a2b0dd7750fef64fe79e57c3620727021a1f1" name="nvme-cli" arch="aarch64">
  <version epoch="0" ver="2.4+31.gf7ec09" rel="150500.4.12.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Fix zsh completion package depenedencies.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 2.0~2:
  * Adapt to logging API changes in libnvme
  * Adapt to scan API changes in libnvme
  * Reworked error message handling
  * Fix 'list-ns' (bsc#1195151)
  * Add 'gen-tls-key' and 'check-tls-key'
  * Add Media Unit Status log page support
  * Cleanups and build fixes
- Fix path to systemctl (bsc#1193699)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v2.0-rc3:
  * nvme-print: Fix json output for list-subsys
  * nvme: Allow --verbose flag to increase log level
  * Added telemetry log fetch support for SN810, SN530 and SN740 series NVMe SSDs through wdc vs-internal-log command
  * nvmf: Remove --matching from systemd service file (bsc#1195665)
  * nvme: Fix --force flag inversion (bsc#1195637)
  * nvme: Add support for data area 4 to get-telemetry-log
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme-print: Add NVME_FEAT_FID_ENH_CTRL_METADATA to nvme_feature_to_string
  * nvme-print: remove unused nvme_show_id_ctrl function
  * nvme: Add nvm-id-ns-lba-format(CNS 0Ah) command from TP4095
  * nvme: Add NVM Command Set specific identify namespace command
  * nvme: Add id-ns-lba-format(CNS 09h) command from TP4095
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
- Include precompiled documentation</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 2.0-rc4:
  * netapp-nvme: free the nsdescs pointer after use
  * netapp-nvme: fix ontapdevices segfault in json output
  * nvme-print: fix 'nvme list -o json' segfault
  * nvme: get_ns_id command fails on nvme device
  * wdc: updated products list for telemetry (--type) argument
  * docs: fix typo in Data Set Management section
  * Fix ctrlist for attach-ns and detach-ns
  * netapp-nvme: fix nvme ns desc uuid handling for ontapdevices
  * wdc: Fix use-after-free access of cbs_data
  * Fixed regression with 'open namespace exclusive' (bsc#1195945)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 2.0-rc5:
  * nvme: passthru bugfix(wrong jump, wrong file descriptor)
  * nvme-cli: Ignore traddr case (bsc#1194025)
  * nvme: fix segfault in nvme telemetry-log error handling
  * fabrics: ensure zero kato for non-persistent controllers
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 2.0-rc6:
  * nvme: print out ANA state for 'list-subsys' (bsc#1195938)
  * nvme: Explicit initialize all command line options (bsc#1195945)
  * nvme: Explicit initialize passthru command line options
  * nvme: list_ns bug fix (csi option enable)
  * nvme: nvme write bug fix (no parse for option)
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 2.0-rc7:
  * netapp-nvme: fix smdevices segfault in json output (bsc#1195937)
  * fabrics: keep the backward compatibility
  * nvme: Do not slash escape strings in JSON output (bsc#1195937)
  * nvme: Print full device path
  * nvme-print: Make JSON keys consistent with nvme-cli 1.x
  * nvme-print: print generic device in list command
  * fabrics: check for discovery controller instead of subsystem NQN (bsc#1197061)
  * connect: Set errno to zero on nvmf_add_ctrl() success
  * documenation updates
- Set path to systemctl via newly introduced config option
- Update 0100-harden_nvmf-connect@.service.patch due to upstream file rename
- Moved bash completion script to /usr/share/bash-completion/completions/nvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647950400">- Fix install conflict caused by new bash completion script
  location (bsc#1197365).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 2.0-rc8:
  * fabrics: Add DIM command
  * fabrics: Introduce force flag to overwrite persistence logic (bsc#1197076)
  * fabrics: Free non-matching controller during discovery
  * fabrics: add 'nvme config' command
  * fabrics: Correctly stringify discovery.conf and config.json paths
  * nvme-print: Add human readable print for nsattr field
  * nvme-print: Update Persistent Event log fields
  * nvme-print: print discovery async event support
  * nvme-rpmb: Fix spelling for 'Partition'
  * nvme-copy: add missing field to the command
  * nvme: add get_mi_cmd_support_effects_log command
  * nvme: Fixup namespace filtering yet again
  * nvme: Use type bool for OPT_FLAG
  * nvme: use filter for 'list-subsys &lt;devname&gt;' (bsc#1195938)
  * Add lbstm option to create-ns
  * argconfig: Do not use default value loading by getopt_long_only
  * argconfig: Rename CFG_NONE to CFG_FLAG
  * plugins: Use type bool for OPT_FLAG
  * documenation updates
- Drop 'ProtectKernelTunables=true' (bsc#1197076)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 2.0:
  * fabrics: Create persistent controller using unique subsystem NQN (bsc#1198243)
  * fabrics: Set KATO for discovery controller when connecting
  * fabrics: Do no modify default config for discovery controller
  * fabrics: Set default trsvcid ports for TCP and RDMA (bsc#1195858)
  * fabrics: Support connect even when no /etc/nvme/hostnqn file exists
  * nvme: update to nvme_scan_filter_t modifications (bsc#1195938)
  * plugins/intel: make 'buckets' a json array
  * plugins: Update WDC capabilities command with new commmands
  * plugins: Add OCP plugin</changelog>
  <changelog author="dwagner@suse.de" date="1654603200">- fabrics: Already connected uses a different error code (bsc#1199994)
  * add 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
- fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * add 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
- nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)
  * add 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * add 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
- fabrics: Honor config file for connect-all (bsc#1199504)
  * add 0005-fabrics-Honor-config-file-for-connect-all.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * add 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
- Fabrics related bug fixes
  * add 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * add 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * add 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * add 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * add 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * add 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * add 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * add 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * add 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 2.2.1 (jsc#ped-553):
  * Added parsing for Solidigm telemetry observable data.
  * Revert "udev: re-read the discovery log page when a discovery controller reconnected"
  * add item ddr_ecc_err_cnt in smart-log-add
  * build and install fixes/improvements
  * build: Add minimum build requirement on libnvme
  * build: Drop dependency on libuuid
  * build: Extend release script to support micro version releases
  * build: Fix endian check for cross build
  * build: Remove unused uuid.wrap file
  * build: Remove unusned uuid.h include
  * build: Update release version rules
  * build: Update version before regenerating docs
  * completions: Add show-topology tab completion
  * documentation fixes
  * fabrics: Avoid nvme_scan_ctrl when disconnecting
  * fabrics: Honor JSON config file in connect-all command
  * fabrics: Remove dhchap-ctrl-secret from discover/connect-all
  * fabrics: Trigger auto connect if config.json exists
  * fabrics: fix 'persistent' handling during connect-all with JSON file
  * fabrics: nvme config --modify depends on -n and -t argument
  * fabrics: re-read the discovery log page when a discovery controller reconnected
  * json: Support uint64 types serialization for older json-c versions
  * meson: we don't need a c++ compiler
  * new solidigm plugin
  * nvme, plugins: fix __u64 -&gt; unsigned long long assumptions
  * nvme-print: Add missing values in id-ctrl for JSON output
  * nvme-print: Handle NULL hostid in JSON output
  * nvme-print: Output 128bit values as uint128 type instead of double
  * nvme-print: Print fguid as a UUID
  * nvme-print: Use uint128 JSON function for media_units_written
  * nvme-print: decode MI status values
  * nvme-print: decode status types
  * nvme-print: fix wrong json key
  * nvme-print: sanitize the get-feature async event config output
  * nvme: Add helper function to parse 16-bit comma separated list
  * nvme: Add nvme_cmd wrapper for get_features
  * nvme: Add show-topology command
  * nvme: Add wrapper for Format NVM
  * nvme: Add wrapper for Sanitize NVM
  * nvme: Add wrappers for Get Log page helpers
  * nvme: Add wrappers for Identify controller lists
  * nvme: Add wrappers for NS attach/detach
  * nvme: Add wrappers for NS management functions
  * nvme: Add wrappers for basic NS identify
  * nvme: Add wrappers for firmware commands
  * nvme: Do not print error message in collect_effects_log helper
  * nvme: Fix set feature command to get feature identifier 0Dh length as zero
  * nvme: Introduce a union in struct nvme_dev for different transport types
  * nvme: Introduce nvme_cli_ wrappers, wrap identify and identify_ctrl
  * nvme: Make static nvme_dev private to open_dev(), use locals elsewhere
  * nvme: Masks SSTAT in sanize-log output
  * nvme: Remove static nvme_dev, allocate on open instead
  * nvme: Set default rae value for nvme_get_nsid_log users
  * nvme: Simplify ns list identify
  * nvme: Use correct print format specifier for sizeof arguments
  * nvme: Use local struct nvme_dev for show_registers &amp; map_registers
  * nvme: check if cfg.metadata is NULL before passing it to strlen()
  * nvme: use helpers for checking status types
  * plugins/innogrit: Include timer.h
  * plugins/innogrit: add smart items for smart-log-add
  * plugins/micron-nvme: Use correct print format specifier for sizeof arguments
  * plugins/ocp: Include timer.h
  * plugins/ocp: Output 128bit values as uint128 type instead of double
  * plugins/ocp: drop unused fd argument
  * plugins/ocp: pass struct nvme_dev to internal functions
  * plugins/seagate: Add support for OCP
  * plugins/solidigm: fix return value on format parse failure
  * plugins/toshiba: pass struct nvme_dev rather than fd + name
  * plugins/virtium: Output 128bit values as uint128 type instead of double
  * plugins/wdc: Add support for SN660 drive
  * plugins/wdc: Add type case for feature id
  * plugins/wdc: Output 128bit values as uint128 type instead of double
  * plugins/wdc: fix memset() on the address of a pointer
  * plugins/wdc: pass a struct nvme_dev around rather than a fd
  * plugins/wdc: pass struct nvme_dev rather than using global nvme_dev
  * plugins/wdc: prevent duplicate close on NVMe device
  * plugins/wdc: remove fd argument from print functions
  * plugins/ytmc: pass struct nvme_dev rather than fd + name
  * plugins: Use PRIu64 format specifier for 64bit types
  * print: Add Controller Ready Timeout Exceeded HW error code
  * print: Fix nvme_id_uuid_list
  * solidgm: fix initialization warning
  * solidigm: Added parsing for telemetry customer screenable data
  * solidigm: Fix printf format for size_t variable
  * solidigm: Updated Telemetry parsing code to MIT license.
  * subprojects/libnvme: update for MI admin command coverage
  * tests: Update license to GPL-2.0-or-later
  * tree: Add NVMe-MI support
  * tree: Add dev_fd() helper
  * tree: Change nvme_dev from global to static
  * tree: Combine NVMe file descriptor into struct nvme_dev
  * tree: Move global device info to a single struct
  * tree: fail on non-negative return values from parse_and_open
  * udev: Add HOST_IFACE to udev rule
  * util/json.h: Add json_object_get_uint64 fallback implementation
  * util/json: Add 128 bit JSON helpers
  * util/types: Add 128 bit conversion helpers
  * util: Fix le128_to_cpu on big-endian
  * util: Fix le128_to_cpu on little-endian
  * util: Move common type conversion helpers into util section
  * utils/json: Add json_object_new_uint64 for json-c &lt; 0.14
  * utils: Fix uint128_t usage
  * various fixes reported by coverity
  * version reporting includes library version
  * wdc:  OCP Log page updates and fixes
  * wrapper: Add weak nvme_init_copy_range_f1 symbol
  * wrapper: Call library version of nvme_init_copy_range_f1
  * wrapper: Update SPDIX license
  * zns.c: report zones should be started after retrieved zone
- Drop upsreamp patches
  * remove 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
  * remove 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
  * remove 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * remove 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
  * remove 0005-fabrics-Honor-config-file-for-connect-all.patch
  * remove 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
  * remove 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * remove 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * remove 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * remove 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * remove 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * remove 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * remove 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * remove 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * remove 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch
- Handle suse-missing-rclink lint warnings by providing the symlinks
- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- Mark no binaries rpms as noarch</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 2.2.1+3.gd028407:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Add %check section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- spec file: fix "check" section (bsc#1207686)
- add "Provides: nvmeof-boot-support = 0.1"</changelog>
  <changelog author="daniel.wagner@suse.com" date="1684929600">- Update to version v2.4 (jsc#PED-553 jsc#PED-3884)
  - Sanitize traddr and trsvcid avoid buffer overrun (bsc#1207435)
  * json_discovery_log: avoid buffer overrun
  - Extend udev rule to pass --host-interface argument to nvme-cli (bsc#1208001)
  * udev: Add HOST_IFACE to udev rule
  - Build documentation to be up to date
  - Fix build warning (git-fixes)
  * fabrics: 'e-&gt;traddr' is static
  - Improvements for supported-log-pages (bsc#1209550)
  * nvme-doc: update man page for supported-log-pages
  * nvme-print: sanitize supported-log-pages output
  - Fix read command (bsc#1209564)
  * nvme: fix block count and data size logic
  - Fix mounting filesystems via fstab (bsc#1208075)
  * fabrics: Fix ordering for auto connect services
  - Update host_traddr when using config.json file (bsc#1210089)
  * fabrics: fix fc config JSON file handling
  - remove 0100-harden_nvmf-connect@.service.patch
- Added compat commands for nbft back
- Changed default behavior of connect-all to match with old nbft
  behavior
- Replaced old nbft implementation with upstream one
- Rebuild documentation on package update
- Set version-tag so that version are correctly reported
- Fix connect nbft regressions (bsc#1209905)
  * fabrics: fix argc in show_nbft_compat_cmd()
- Fix auto connect conditions (bsc#1210105)
  * fabrics: fix conditions in nvmf-autoconnect.service
- Fix auto boot for NBFT connections (bsc#1211647)
  * fabrics: add udev rule to avoid renaming nbft interfaces
  * fabrics: autoconnect: add service unit for connecting NBFT subsystems</changelog>
  <changelog author="dwagner@suse.de" date="1690459200">- Update to version 2.4+24.ga1ee20:
  * nvme-print-stdout: Do not show non reachable ns in namespace topology (bsc#1212598)
  * nvme-print-stdout: List only ctrls which are part of ns bsc#1212598)
  * nvme-print-stdout: Support subsys reachable from several hosts bsc#1212598)
  * ccan: Add htable, strset and dependencies bsc#1212598)
  * ccan: Remove unused documentation bsc#1212598)
  * nvme-print: fix counter while looping through uuid_list (bsc#bsc#1212598)
  * nvme-print: Show subsystem iopolicy (bsc#1124564)</changelog>
  <changelog author="dwagner@suse.de" date="1693915200">- Update to version 2.4+25.g367eb9:
  * json: fix seg. fault converting NULL to JSON string (bsc#1213762)</changelog>
  <changelog author="dwagner@suse.de" date="1699012800">- Update to version 2.4+31.gf7ec09:
  * udev-rules: rename netapp udev rule (bsc#1215994)
  * udev-rules: set ctrl_loss_tmo to -1 for ONTAP NVMe/TCP (bsc#1215994)
  * udev-rule: apply round-robin iopolicy on i/o subsystems alone (bsc#1215994)
  * fabrics: For TCP/RDMA, compare IP addresses with nvme_ipaddrs_eq() (bsc#1213768)
  * fabrics: lookup_discovery_ctrl() must look under host and not root (bsc#1213768)
  * fabrics: only look for matching ctrl on same host (bsc#1213768)</changelog>
</package>
<package pkgid="e7ca75214eefcd88f5e2dae78a8c9ed58bd4e6ff08953b6e6c2d0d6bf02cdedb" name="nvme-cli" arch="s390x">
  <version epoch="0" ver="2.4+31.gf7ec09" rel="150500.4.12.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Fix zsh completion package depenedencies.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 2.0~2:
  * Adapt to logging API changes in libnvme
  * Adapt to scan API changes in libnvme
  * Reworked error message handling
  * Fix 'list-ns' (bsc#1195151)
  * Add 'gen-tls-key' and 'check-tls-key'
  * Add Media Unit Status log page support
  * Cleanups and build fixes
- Fix path to systemctl (bsc#1193699)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v2.0-rc3:
  * nvme-print: Fix json output for list-subsys
  * nvme: Allow --verbose flag to increase log level
  * Added telemetry log fetch support for SN810, SN530 and SN740 series NVMe SSDs through wdc vs-internal-log command
  * nvmf: Remove --matching from systemd service file (bsc#1195665)
  * nvme: Fix --force flag inversion (bsc#1195637)
  * nvme: Add support for data area 4 to get-telemetry-log
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme-print: Add NVME_FEAT_FID_ENH_CTRL_METADATA to nvme_feature_to_string
  * nvme-print: remove unused nvme_show_id_ctrl function
  * nvme: Add nvm-id-ns-lba-format(CNS 0Ah) command from TP4095
  * nvme: Add NVM Command Set specific identify namespace command
  * nvme: Add id-ns-lba-format(CNS 09h) command from TP4095
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
- Include precompiled documentation</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 2.0-rc4:
  * netapp-nvme: free the nsdescs pointer after use
  * netapp-nvme: fix ontapdevices segfault in json output
  * nvme-print: fix 'nvme list -o json' segfault
  * nvme: get_ns_id command fails on nvme device
  * wdc: updated products list for telemetry (--type) argument
  * docs: fix typo in Data Set Management section
  * Fix ctrlist for attach-ns and detach-ns
  * netapp-nvme: fix nvme ns desc uuid handling for ontapdevices
  * wdc: Fix use-after-free access of cbs_data
  * Fixed regression with 'open namespace exclusive' (bsc#1195945)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 2.0-rc5:
  * nvme: passthru bugfix(wrong jump, wrong file descriptor)
  * nvme-cli: Ignore traddr case (bsc#1194025)
  * nvme: fix segfault in nvme telemetry-log error handling
  * fabrics: ensure zero kato for non-persistent controllers
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 2.0-rc6:
  * nvme: print out ANA state for 'list-subsys' (bsc#1195938)
  * nvme: Explicit initialize all command line options (bsc#1195945)
  * nvme: Explicit initialize passthru command line options
  * nvme: list_ns bug fix (csi option enable)
  * nvme: nvme write bug fix (no parse for option)
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 2.0-rc7:
  * netapp-nvme: fix smdevices segfault in json output (bsc#1195937)
  * fabrics: keep the backward compatibility
  * nvme: Do not slash escape strings in JSON output (bsc#1195937)
  * nvme: Print full device path
  * nvme-print: Make JSON keys consistent with nvme-cli 1.x
  * nvme-print: print generic device in list command
  * fabrics: check for discovery controller instead of subsystem NQN (bsc#1197061)
  * connect: Set errno to zero on nvmf_add_ctrl() success
  * documenation updates
- Set path to systemctl via newly introduced config option
- Update 0100-harden_nvmf-connect@.service.patch due to upstream file rename
- Moved bash completion script to /usr/share/bash-completion/completions/nvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647950400">- Fix install conflict caused by new bash completion script
  location (bsc#1197365).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 2.0-rc8:
  * fabrics: Add DIM command
  * fabrics: Introduce force flag to overwrite persistence logic (bsc#1197076)
  * fabrics: Free non-matching controller during discovery
  * fabrics: add 'nvme config' command
  * fabrics: Correctly stringify discovery.conf and config.json paths
  * nvme-print: Add human readable print for nsattr field
  * nvme-print: Update Persistent Event log fields
  * nvme-print: print discovery async event support
  * nvme-rpmb: Fix spelling for 'Partition'
  * nvme-copy: add missing field to the command
  * nvme: add get_mi_cmd_support_effects_log command
  * nvme: Fixup namespace filtering yet again
  * nvme: Use type bool for OPT_FLAG
  * nvme: use filter for 'list-subsys &lt;devname&gt;' (bsc#1195938)
  * Add lbstm option to create-ns
  * argconfig: Do not use default value loading by getopt_long_only
  * argconfig: Rename CFG_NONE to CFG_FLAG
  * plugins: Use type bool for OPT_FLAG
  * documenation updates
- Drop 'ProtectKernelTunables=true' (bsc#1197076)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 2.0:
  * fabrics: Create persistent controller using unique subsystem NQN (bsc#1198243)
  * fabrics: Set KATO for discovery controller when connecting
  * fabrics: Do no modify default config for discovery controller
  * fabrics: Set default trsvcid ports for TCP and RDMA (bsc#1195858)
  * fabrics: Support connect even when no /etc/nvme/hostnqn file exists
  * nvme: update to nvme_scan_filter_t modifications (bsc#1195938)
  * plugins/intel: make 'buckets' a json array
  * plugins: Update WDC capabilities command with new commmands
  * plugins: Add OCP plugin</changelog>
  <changelog author="dwagner@suse.de" date="1654603200">- fabrics: Already connected uses a different error code (bsc#1199994)
  * add 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
- fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * add 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
- nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)
  * add 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * add 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
- fabrics: Honor config file for connect-all (bsc#1199504)
  * add 0005-fabrics-Honor-config-file-for-connect-all.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * add 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
- Fabrics related bug fixes
  * add 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * add 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * add 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * add 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * add 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * add 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * add 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * add 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * add 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 2.2.1 (jsc#ped-553):
  * Added parsing for Solidigm telemetry observable data.
  * Revert "udev: re-read the discovery log page when a discovery controller reconnected"
  * add item ddr_ecc_err_cnt in smart-log-add
  * build and install fixes/improvements
  * build: Add minimum build requirement on libnvme
  * build: Drop dependency on libuuid
  * build: Extend release script to support micro version releases
  * build: Fix endian check for cross build
  * build: Remove unused uuid.wrap file
  * build: Remove unusned uuid.h include
  * build: Update release version rules
  * build: Update version before regenerating docs
  * completions: Add show-topology tab completion
  * documentation fixes
  * fabrics: Avoid nvme_scan_ctrl when disconnecting
  * fabrics: Honor JSON config file in connect-all command
  * fabrics: Remove dhchap-ctrl-secret from discover/connect-all
  * fabrics: Trigger auto connect if config.json exists
  * fabrics: fix 'persistent' handling during connect-all with JSON file
  * fabrics: nvme config --modify depends on -n and -t argument
  * fabrics: re-read the discovery log page when a discovery controller reconnected
  * json: Support uint64 types serialization for older json-c versions
  * meson: we don't need a c++ compiler
  * new solidigm plugin
  * nvme, plugins: fix __u64 -&gt; unsigned long long assumptions
  * nvme-print: Add missing values in id-ctrl for JSON output
  * nvme-print: Handle NULL hostid in JSON output
  * nvme-print: Output 128bit values as uint128 type instead of double
  * nvme-print: Print fguid as a UUID
  * nvme-print: Use uint128 JSON function for media_units_written
  * nvme-print: decode MI status values
  * nvme-print: decode status types
  * nvme-print: fix wrong json key
  * nvme-print: sanitize the get-feature async event config output
  * nvme: Add helper function to parse 16-bit comma separated list
  * nvme: Add nvme_cmd wrapper for get_features
  * nvme: Add show-topology command
  * nvme: Add wrapper for Format NVM
  * nvme: Add wrapper for Sanitize NVM
  * nvme: Add wrappers for Get Log page helpers
  * nvme: Add wrappers for Identify controller lists
  * nvme: Add wrappers for NS attach/detach
  * nvme: Add wrappers for NS management functions
  * nvme: Add wrappers for basic NS identify
  * nvme: Add wrappers for firmware commands
  * nvme: Do not print error message in collect_effects_log helper
  * nvme: Fix set feature command to get feature identifier 0Dh length as zero
  * nvme: Introduce a union in struct nvme_dev for different transport types
  * nvme: Introduce nvme_cli_ wrappers, wrap identify and identify_ctrl
  * nvme: Make static nvme_dev private to open_dev(), use locals elsewhere
  * nvme: Masks SSTAT in sanize-log output
  * nvme: Remove static nvme_dev, allocate on open instead
  * nvme: Set default rae value for nvme_get_nsid_log users
  * nvme: Simplify ns list identify
  * nvme: Use correct print format specifier for sizeof arguments
  * nvme: Use local struct nvme_dev for show_registers &amp; map_registers
  * nvme: check if cfg.metadata is NULL before passing it to strlen()
  * nvme: use helpers for checking status types
  * plugins/innogrit: Include timer.h
  * plugins/innogrit: add smart items for smart-log-add
  * plugins/micron-nvme: Use correct print format specifier for sizeof arguments
  * plugins/ocp: Include timer.h
  * plugins/ocp: Output 128bit values as uint128 type instead of double
  * plugins/ocp: drop unused fd argument
  * plugins/ocp: pass struct nvme_dev to internal functions
  * plugins/seagate: Add support for OCP
  * plugins/solidigm: fix return value on format parse failure
  * plugins/toshiba: pass struct nvme_dev rather than fd + name
  * plugins/virtium: Output 128bit values as uint128 type instead of double
  * plugins/wdc: Add support for SN660 drive
  * plugins/wdc: Add type case for feature id
  * plugins/wdc: Output 128bit values as uint128 type instead of double
  * plugins/wdc: fix memset() on the address of a pointer
  * plugins/wdc: pass a struct nvme_dev around rather than a fd
  * plugins/wdc: pass struct nvme_dev rather than using global nvme_dev
  * plugins/wdc: prevent duplicate close on NVMe device
  * plugins/wdc: remove fd argument from print functions
  * plugins/ytmc: pass struct nvme_dev rather than fd + name
  * plugins: Use PRIu64 format specifier for 64bit types
  * print: Add Controller Ready Timeout Exceeded HW error code
  * print: Fix nvme_id_uuid_list
  * solidgm: fix initialization warning
  * solidigm: Added parsing for telemetry customer screenable data
  * solidigm: Fix printf format for size_t variable
  * solidigm: Updated Telemetry parsing code to MIT license.
  * subprojects/libnvme: update for MI admin command coverage
  * tests: Update license to GPL-2.0-or-later
  * tree: Add NVMe-MI support
  * tree: Add dev_fd() helper
  * tree: Change nvme_dev from global to static
  * tree: Combine NVMe file descriptor into struct nvme_dev
  * tree: Move global device info to a single struct
  * tree: fail on non-negative return values from parse_and_open
  * udev: Add HOST_IFACE to udev rule
  * util/json.h: Add json_object_get_uint64 fallback implementation
  * util/json: Add 128 bit JSON helpers
  * util/types: Add 128 bit conversion helpers
  * util: Fix le128_to_cpu on big-endian
  * util: Fix le128_to_cpu on little-endian
  * util: Move common type conversion helpers into util section
  * utils/json: Add json_object_new_uint64 for json-c &lt; 0.14
  * utils: Fix uint128_t usage
  * various fixes reported by coverity
  * version reporting includes library version
  * wdc:  OCP Log page updates and fixes
  * wrapper: Add weak nvme_init_copy_range_f1 symbol
  * wrapper: Call library version of nvme_init_copy_range_f1
  * wrapper: Update SPDIX license
  * zns.c: report zones should be started after retrieved zone
- Drop upsreamp patches
  * remove 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
  * remove 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
  * remove 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * remove 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
  * remove 0005-fabrics-Honor-config-file-for-connect-all.patch
  * remove 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
  * remove 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * remove 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * remove 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * remove 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * remove 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * remove 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * remove 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * remove 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * remove 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch
- Handle suse-missing-rclink lint warnings by providing the symlinks
- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- Mark no binaries rpms as noarch</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 2.2.1+3.gd028407:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Add %check section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- spec file: fix "check" section (bsc#1207686)
- add "Provides: nvmeof-boot-support = 0.1"</changelog>
  <changelog author="daniel.wagner@suse.com" date="1684929600">- Update to version v2.4 (jsc#PED-553 jsc#PED-3884)
  - Sanitize traddr and trsvcid avoid buffer overrun (bsc#1207435)
  * json_discovery_log: avoid buffer overrun
  - Extend udev rule to pass --host-interface argument to nvme-cli (bsc#1208001)
  * udev: Add HOST_IFACE to udev rule
  - Build documentation to be up to date
  - Fix build warning (git-fixes)
  * fabrics: 'e-&gt;traddr' is static
  - Improvements for supported-log-pages (bsc#1209550)
  * nvme-doc: update man page for supported-log-pages
  * nvme-print: sanitize supported-log-pages output
  - Fix read command (bsc#1209564)
  * nvme: fix block count and data size logic
  - Fix mounting filesystems via fstab (bsc#1208075)
  * fabrics: Fix ordering for auto connect services
  - Update host_traddr when using config.json file (bsc#1210089)
  * fabrics: fix fc config JSON file handling
  - remove 0100-harden_nvmf-connect@.service.patch
- Added compat commands for nbft back
- Changed default behavior of connect-all to match with old nbft
  behavior
- Replaced old nbft implementation with upstream one
- Rebuild documentation on package update
- Set version-tag so that version are correctly reported
- Fix connect nbft regressions (bsc#1209905)
  * fabrics: fix argc in show_nbft_compat_cmd()
- Fix auto connect conditions (bsc#1210105)
  * fabrics: fix conditions in nvmf-autoconnect.service
- Fix auto boot for NBFT connections (bsc#1211647)
  * fabrics: add udev rule to avoid renaming nbft interfaces
  * fabrics: autoconnect: add service unit for connecting NBFT subsystems</changelog>
  <changelog author="dwagner@suse.de" date="1690459200">- Update to version 2.4+24.ga1ee20:
  * nvme-print-stdout: Do not show non reachable ns in namespace topology (bsc#1212598)
  * nvme-print-stdout: List only ctrls which are part of ns bsc#1212598)
  * nvme-print-stdout: Support subsys reachable from several hosts bsc#1212598)
  * ccan: Add htable, strset and dependencies bsc#1212598)
  * ccan: Remove unused documentation bsc#1212598)
  * nvme-print: fix counter while looping through uuid_list (bsc#bsc#1212598)
  * nvme-print: Show subsystem iopolicy (bsc#1124564)</changelog>
  <changelog author="dwagner@suse.de" date="1693915200">- Update to version 2.4+25.g367eb9:
  * json: fix seg. fault converting NULL to JSON string (bsc#1213762)</changelog>
  <changelog author="dwagner@suse.de" date="1699012800">- Update to version 2.4+31.gf7ec09:
  * udev-rules: rename netapp udev rule (bsc#1215994)
  * udev-rules: set ctrl_loss_tmo to -1 for ONTAP NVMe/TCP (bsc#1215994)
  * udev-rule: apply round-robin iopolicy on i/o subsystems alone (bsc#1215994)
  * fabrics: For TCP/RDMA, compare IP addresses with nvme_ipaddrs_eq() (bsc#1213768)
  * fabrics: lookup_discovery_ctrl() must look under host and not root (bsc#1213768)
  * fabrics: only look for matching ctrl on same host (bsc#1213768)</changelog>
</package>
<package pkgid="314c8a3fac25805ed051f9ee3db2431a2e773dcd09903afe9f317519e63c45a6" name="nvme-cli" arch="src">
  <version epoch="0" ver="2.4+31.gf7ec09" rel="150500.4.12.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Fix zsh completion package depenedencies.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 2.0~2:
  * Adapt to logging API changes in libnvme
  * Adapt to scan API changes in libnvme
  * Reworked error message handling
  * Fix 'list-ns' (bsc#1195151)
  * Add 'gen-tls-key' and 'check-tls-key'
  * Add Media Unit Status log page support
  * Cleanups and build fixes
- Fix path to systemctl (bsc#1193699)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v2.0-rc3:
  * nvme-print: Fix json output for list-subsys
  * nvme: Allow --verbose flag to increase log level
  * Added telemetry log fetch support for SN810, SN530 and SN740 series NVMe SSDs through wdc vs-internal-log command
  * nvmf: Remove --matching from systemd service file (bsc#1195665)
  * nvme: Fix --force flag inversion (bsc#1195637)
  * nvme: Add support for data area 4 to get-telemetry-log
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme-print: Add NVME_FEAT_FID_ENH_CTRL_METADATA to nvme_feature_to_string
  * nvme-print: remove unused nvme_show_id_ctrl function
  * nvme: Add nvm-id-ns-lba-format(CNS 0Ah) command from TP4095
  * nvme: Add NVM Command Set specific identify namespace command
  * nvme: Add id-ns-lba-format(CNS 09h) command from TP4095
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
- Include precompiled documentation</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 2.0-rc4:
  * netapp-nvme: free the nsdescs pointer after use
  * netapp-nvme: fix ontapdevices segfault in json output
  * nvme-print: fix 'nvme list -o json' segfault
  * nvme: get_ns_id command fails on nvme device
  * wdc: updated products list for telemetry (--type) argument
  * docs: fix typo in Data Set Management section
  * Fix ctrlist for attach-ns and detach-ns
  * netapp-nvme: fix nvme ns desc uuid handling for ontapdevices
  * wdc: Fix use-after-free access of cbs_data
  * Fixed regression with 'open namespace exclusive' (bsc#1195945)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 2.0-rc5:
  * nvme: passthru bugfix(wrong jump, wrong file descriptor)
  * nvme-cli: Ignore traddr case (bsc#1194025)
  * nvme: fix segfault in nvme telemetry-log error handling
  * fabrics: ensure zero kato for non-persistent controllers
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 2.0-rc6:
  * nvme: print out ANA state for 'list-subsys' (bsc#1195938)
  * nvme: Explicit initialize all command line options (bsc#1195945)
  * nvme: Explicit initialize passthru command line options
  * nvme: list_ns bug fix (csi option enable)
  * nvme: nvme write bug fix (no parse for option)
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 2.0-rc7:
  * netapp-nvme: fix smdevices segfault in json output (bsc#1195937)
  * fabrics: keep the backward compatibility
  * nvme: Do not slash escape strings in JSON output (bsc#1195937)
  * nvme: Print full device path
  * nvme-print: Make JSON keys consistent with nvme-cli 1.x
  * nvme-print: print generic device in list command
  * fabrics: check for discovery controller instead of subsystem NQN (bsc#1197061)
  * connect: Set errno to zero on nvmf_add_ctrl() success
  * documenation updates
- Set path to systemctl via newly introduced config option
- Update 0100-harden_nvmf-connect@.service.patch due to upstream file rename
- Moved bash completion script to /usr/share/bash-completion/completions/nvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647950400">- Fix install conflict caused by new bash completion script
  location (bsc#1197365).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 2.0-rc8:
  * fabrics: Add DIM command
  * fabrics: Introduce force flag to overwrite persistence logic (bsc#1197076)
  * fabrics: Free non-matching controller during discovery
  * fabrics: add 'nvme config' command
  * fabrics: Correctly stringify discovery.conf and config.json paths
  * nvme-print: Add human readable print for nsattr field
  * nvme-print: Update Persistent Event log fields
  * nvme-print: print discovery async event support
  * nvme-rpmb: Fix spelling for 'Partition'
  * nvme-copy: add missing field to the command
  * nvme: add get_mi_cmd_support_effects_log command
  * nvme: Fixup namespace filtering yet again
  * nvme: Use type bool for OPT_FLAG
  * nvme: use filter for 'list-subsys &lt;devname&gt;' (bsc#1195938)
  * Add lbstm option to create-ns
  * argconfig: Do not use default value loading by getopt_long_only
  * argconfig: Rename CFG_NONE to CFG_FLAG
  * plugins: Use type bool for OPT_FLAG
  * documenation updates
- Drop 'ProtectKernelTunables=true' (bsc#1197076)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 2.0:
  * fabrics: Create persistent controller using unique subsystem NQN (bsc#1198243)
  * fabrics: Set KATO for discovery controller when connecting
  * fabrics: Do no modify default config for discovery controller
  * fabrics: Set default trsvcid ports for TCP and RDMA (bsc#1195858)
  * fabrics: Support connect even when no /etc/nvme/hostnqn file exists
  * nvme: update to nvme_scan_filter_t modifications (bsc#1195938)
  * plugins/intel: make 'buckets' a json array
  * plugins: Update WDC capabilities command with new commmands
  * plugins: Add OCP plugin</changelog>
  <changelog author="dwagner@suse.de" date="1654603200">- fabrics: Already connected uses a different error code (bsc#1199994)
  * add 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
- fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * add 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
- nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)
  * add 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * add 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
- fabrics: Honor config file for connect-all (bsc#1199504)
  * add 0005-fabrics-Honor-config-file-for-connect-all.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * add 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
- Fabrics related bug fixes
  * add 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * add 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * add 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * add 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * add 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * add 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * add 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * add 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * add 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 2.2.1 (jsc#ped-553):
  * Added parsing for Solidigm telemetry observable data.
  * Revert "udev: re-read the discovery log page when a discovery controller reconnected"
  * add item ddr_ecc_err_cnt in smart-log-add
  * build and install fixes/improvements
  * build: Add minimum build requirement on libnvme
  * build: Drop dependency on libuuid
  * build: Extend release script to support micro version releases
  * build: Fix endian check for cross build
  * build: Remove unused uuid.wrap file
  * build: Remove unusned uuid.h include
  * build: Update release version rules
  * build: Update version before regenerating docs
  * completions: Add show-topology tab completion
  * documentation fixes
  * fabrics: Avoid nvme_scan_ctrl when disconnecting
  * fabrics: Honor JSON config file in connect-all command
  * fabrics: Remove dhchap-ctrl-secret from discover/connect-all
  * fabrics: Trigger auto connect if config.json exists
  * fabrics: fix 'persistent' handling during connect-all with JSON file
  * fabrics: nvme config --modify depends on -n and -t argument
  * fabrics: re-read the discovery log page when a discovery controller reconnected
  * json: Support uint64 types serialization for older json-c versions
  * meson: we don't need a c++ compiler
  * new solidigm plugin
  * nvme, plugins: fix __u64 -&gt; unsigned long long assumptions
  * nvme-print: Add missing values in id-ctrl for JSON output
  * nvme-print: Handle NULL hostid in JSON output
  * nvme-print: Output 128bit values as uint128 type instead of double
  * nvme-print: Print fguid as a UUID
  * nvme-print: Use uint128 JSON function for media_units_written
  * nvme-print: decode MI status values
  * nvme-print: decode status types
  * nvme-print: fix wrong json key
  * nvme-print: sanitize the get-feature async event config output
  * nvme: Add helper function to parse 16-bit comma separated list
  * nvme: Add nvme_cmd wrapper for get_features
  * nvme: Add show-topology command
  * nvme: Add wrapper for Format NVM
  * nvme: Add wrapper for Sanitize NVM
  * nvme: Add wrappers for Get Log page helpers
  * nvme: Add wrappers for Identify controller lists
  * nvme: Add wrappers for NS attach/detach
  * nvme: Add wrappers for NS management functions
  * nvme: Add wrappers for basic NS identify
  * nvme: Add wrappers for firmware commands
  * nvme: Do not print error message in collect_effects_log helper
  * nvme: Fix set feature command to get feature identifier 0Dh length as zero
  * nvme: Introduce a union in struct nvme_dev for different transport types
  * nvme: Introduce nvme_cli_ wrappers, wrap identify and identify_ctrl
  * nvme: Make static nvme_dev private to open_dev(), use locals elsewhere
  * nvme: Masks SSTAT in sanize-log output
  * nvme: Remove static nvme_dev, allocate on open instead
  * nvme: Set default rae value for nvme_get_nsid_log users
  * nvme: Simplify ns list identify
  * nvme: Use correct print format specifier for sizeof arguments
  * nvme: Use local struct nvme_dev for show_registers &amp; map_registers
  * nvme: check if cfg.metadata is NULL before passing it to strlen()
  * nvme: use helpers for checking status types
  * plugins/innogrit: Include timer.h
  * plugins/innogrit: add smart items for smart-log-add
  * plugins/micron-nvme: Use correct print format specifier for sizeof arguments
  * plugins/ocp: Include timer.h
  * plugins/ocp: Output 128bit values as uint128 type instead of double
  * plugins/ocp: drop unused fd argument
  * plugins/ocp: pass struct nvme_dev to internal functions
  * plugins/seagate: Add support for OCP
  * plugins/solidigm: fix return value on format parse failure
  * plugins/toshiba: pass struct nvme_dev rather than fd + name
  * plugins/virtium: Output 128bit values as uint128 type instead of double
  * plugins/wdc: Add support for SN660 drive
  * plugins/wdc: Add type case for feature id
  * plugins/wdc: Output 128bit values as uint128 type instead of double
  * plugins/wdc: fix memset() on the address of a pointer
  * plugins/wdc: pass a struct nvme_dev around rather than a fd
  * plugins/wdc: pass struct nvme_dev rather than using global nvme_dev
  * plugins/wdc: prevent duplicate close on NVMe device
  * plugins/wdc: remove fd argument from print functions
  * plugins/ytmc: pass struct nvme_dev rather than fd + name
  * plugins: Use PRIu64 format specifier for 64bit types
  * print: Add Controller Ready Timeout Exceeded HW error code
  * print: Fix nvme_id_uuid_list
  * solidgm: fix initialization warning
  * solidigm: Added parsing for telemetry customer screenable data
  * solidigm: Fix printf format for size_t variable
  * solidigm: Updated Telemetry parsing code to MIT license.
  * subprojects/libnvme: update for MI admin command coverage
  * tests: Update license to GPL-2.0-or-later
  * tree: Add NVMe-MI support
  * tree: Add dev_fd() helper
  * tree: Change nvme_dev from global to static
  * tree: Combine NVMe file descriptor into struct nvme_dev
  * tree: Move global device info to a single struct
  * tree: fail on non-negative return values from parse_and_open
  * udev: Add HOST_IFACE to udev rule
  * util/json.h: Add json_object_get_uint64 fallback implementation
  * util/json: Add 128 bit JSON helpers
  * util/types: Add 128 bit conversion helpers
  * util: Fix le128_to_cpu on big-endian
  * util: Fix le128_to_cpu on little-endian
  * util: Move common type conversion helpers into util section
  * utils/json: Add json_object_new_uint64 for json-c &lt; 0.14
  * utils: Fix uint128_t usage
  * various fixes reported by coverity
  * version reporting includes library version
  * wdc:  OCP Log page updates and fixes
  * wrapper: Add weak nvme_init_copy_range_f1 symbol
  * wrapper: Call library version of nvme_init_copy_range_f1
  * wrapper: Update SPDIX license
  * zns.c: report zones should be started after retrieved zone
- Drop upsreamp patches
  * remove 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
  * remove 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
  * remove 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * remove 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
  * remove 0005-fabrics-Honor-config-file-for-connect-all.patch
  * remove 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
  * remove 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * remove 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * remove 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * remove 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * remove 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * remove 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * remove 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * remove 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * remove 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch
- Handle suse-missing-rclink lint warnings by providing the symlinks
- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- Mark no binaries rpms as noarch</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 2.2.1+3.gd028407:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Add %check section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- spec file: fix "check" section (bsc#1207686)
- add "Provides: nvmeof-boot-support = 0.1"</changelog>
  <changelog author="daniel.wagner@suse.com" date="1684929600">- Update to version v2.4 (jsc#PED-553 jsc#PED-3884)
  - Sanitize traddr and trsvcid avoid buffer overrun (bsc#1207435)
  * json_discovery_log: avoid buffer overrun
  - Extend udev rule to pass --host-interface argument to nvme-cli (bsc#1208001)
  * udev: Add HOST_IFACE to udev rule
  - Build documentation to be up to date
  - Fix build warning (git-fixes)
  * fabrics: 'e-&gt;traddr' is static
  - Improvements for supported-log-pages (bsc#1209550)
  * nvme-doc: update man page for supported-log-pages
  * nvme-print: sanitize supported-log-pages output
  - Fix read command (bsc#1209564)
  * nvme: fix block count and data size logic
  - Fix mounting filesystems via fstab (bsc#1208075)
  * fabrics: Fix ordering for auto connect services
  - Update host_traddr when using config.json file (bsc#1210089)
  * fabrics: fix fc config JSON file handling
  - remove 0100-harden_nvmf-connect@.service.patch
- Added compat commands for nbft back
- Changed default behavior of connect-all to match with old nbft
  behavior
- Replaced old nbft implementation with upstream one
- Rebuild documentation on package update
- Set version-tag so that version are correctly reported
- Fix connect nbft regressions (bsc#1209905)
  * fabrics: fix argc in show_nbft_compat_cmd()
- Fix auto connect conditions (bsc#1210105)
  * fabrics: fix conditions in nvmf-autoconnect.service
- Fix auto boot for NBFT connections (bsc#1211647)
  * fabrics: add udev rule to avoid renaming nbft interfaces
  * fabrics: autoconnect: add service unit for connecting NBFT subsystems</changelog>
  <changelog author="dwagner@suse.de" date="1690459200">- Update to version 2.4+24.ga1ee20:
  * nvme-print-stdout: Do not show non reachable ns in namespace topology (bsc#1212598)
  * nvme-print-stdout: List only ctrls which are part of ns bsc#1212598)
  * nvme-print-stdout: Support subsys reachable from several hosts bsc#1212598)
  * ccan: Add htable, strset and dependencies bsc#1212598)
  * ccan: Remove unused documentation bsc#1212598)
  * nvme-print: fix counter while looping through uuid_list (bsc#bsc#1212598)
  * nvme-print: Show subsystem iopolicy (bsc#1124564)</changelog>
  <changelog author="dwagner@suse.de" date="1693915200">- Update to version 2.4+25.g367eb9:
  * json: fix seg. fault converting NULL to JSON string (bsc#1213762)</changelog>
  <changelog author="dwagner@suse.de" date="1699012800">- Update to version 2.4+31.gf7ec09:
  * udev-rules: rename netapp udev rule (bsc#1215994)
  * udev-rules: set ctrl_loss_tmo to -1 for ONTAP NVMe/TCP (bsc#1215994)
  * udev-rule: apply round-robin iopolicy on i/o subsystems alone (bsc#1215994)
  * fabrics: For TCP/RDMA, compare IP addresses with nvme_ipaddrs_eq() (bsc#1213768)
  * fabrics: lookup_discovery_ctrl() must look under host and not root (bsc#1213768)
  * fabrics: only look for matching ctrl on same host (bsc#1213768)</changelog>
</package>
<package pkgid="fa97e32b7c7b9f60b914b039de7a58eadecfaba844273102cb414131b2e649c2" name="nvme-cli" arch="x86_64">
  <version epoch="0" ver="2.4+31.gf7ec09" rel="150500.4.12.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Fix zsh completion package depenedencies.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 2.0~2:
  * Adapt to logging API changes in libnvme
  * Adapt to scan API changes in libnvme
  * Reworked error message handling
  * Fix 'list-ns' (bsc#1195151)
  * Add 'gen-tls-key' and 'check-tls-key'
  * Add Media Unit Status log page support
  * Cleanups and build fixes
- Fix path to systemctl (bsc#1193699)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v2.0-rc3:
  * nvme-print: Fix json output for list-subsys
  * nvme: Allow --verbose flag to increase log level
  * Added telemetry log fetch support for SN810, SN530 and SN740 series NVMe SSDs through wdc vs-internal-log command
  * nvmf: Remove --matching from systemd service file (bsc#1195665)
  * nvme: Fix --force flag inversion (bsc#1195637)
  * nvme: Add support for data area 4 to get-telemetry-log
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme-print: Add NVME_FEAT_FID_ENH_CTRL_METADATA to nvme_feature_to_string
  * nvme-print: remove unused nvme_show_id_ctrl function
  * nvme: Add nvm-id-ns-lba-format(CNS 0Ah) command from TP4095
  * nvme: Add NVM Command Set specific identify namespace command
  * nvme: Add id-ns-lba-format(CNS 09h) command from TP4095
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
- Include precompiled documentation</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 2.0-rc4:
  * netapp-nvme: free the nsdescs pointer after use
  * netapp-nvme: fix ontapdevices segfault in json output
  * nvme-print: fix 'nvme list -o json' segfault
  * nvme: get_ns_id command fails on nvme device
  * wdc: updated products list for telemetry (--type) argument
  * docs: fix typo in Data Set Management section
  * Fix ctrlist for attach-ns and detach-ns
  * netapp-nvme: fix nvme ns desc uuid handling for ontapdevices
  * wdc: Fix use-after-free access of cbs_data
  * Fixed regression with 'open namespace exclusive' (bsc#1195945)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 2.0-rc5:
  * nvme: passthru bugfix(wrong jump, wrong file descriptor)
  * nvme-cli: Ignore traddr case (bsc#1194025)
  * nvme: fix segfault in nvme telemetry-log error handling
  * fabrics: ensure zero kato for non-persistent controllers
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 2.0-rc6:
  * nvme: print out ANA state for 'list-subsys' (bsc#1195938)
  * nvme: Explicit initialize all command line options (bsc#1195945)
  * nvme: Explicit initialize passthru command line options
  * nvme: list_ns bug fix (csi option enable)
  * nvme: nvme write bug fix (no parse for option)
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 2.0-rc7:
  * netapp-nvme: fix smdevices segfault in json output (bsc#1195937)
  * fabrics: keep the backward compatibility
  * nvme: Do not slash escape strings in JSON output (bsc#1195937)
  * nvme: Print full device path
  * nvme-print: Make JSON keys consistent with nvme-cli 1.x
  * nvme-print: print generic device in list command
  * fabrics: check for discovery controller instead of subsystem NQN (bsc#1197061)
  * connect: Set errno to zero on nvmf_add_ctrl() success
  * documenation updates
- Set path to systemctl via newly introduced config option
- Update 0100-harden_nvmf-connect@.service.patch due to upstream file rename
- Moved bash completion script to /usr/share/bash-completion/completions/nvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647950400">- Fix install conflict caused by new bash completion script
  location (bsc#1197365).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 2.0-rc8:
  * fabrics: Add DIM command
  * fabrics: Introduce force flag to overwrite persistence logic (bsc#1197076)
  * fabrics: Free non-matching controller during discovery
  * fabrics: add 'nvme config' command
  * fabrics: Correctly stringify discovery.conf and config.json paths
  * nvme-print: Add human readable print for nsattr field
  * nvme-print: Update Persistent Event log fields
  * nvme-print: print discovery async event support
  * nvme-rpmb: Fix spelling for 'Partition'
  * nvme-copy: add missing field to the command
  * nvme: add get_mi_cmd_support_effects_log command
  * nvme: Fixup namespace filtering yet again
  * nvme: Use type bool for OPT_FLAG
  * nvme: use filter for 'list-subsys &lt;devname&gt;' (bsc#1195938)
  * Add lbstm option to create-ns
  * argconfig: Do not use default value loading by getopt_long_only
  * argconfig: Rename CFG_NONE to CFG_FLAG
  * plugins: Use type bool for OPT_FLAG
  * documenation updates
- Drop 'ProtectKernelTunables=true' (bsc#1197076)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 2.0:
  * fabrics: Create persistent controller using unique subsystem NQN (bsc#1198243)
  * fabrics: Set KATO for discovery controller when connecting
  * fabrics: Do no modify default config for discovery controller
  * fabrics: Set default trsvcid ports for TCP and RDMA (bsc#1195858)
  * fabrics: Support connect even when no /etc/nvme/hostnqn file exists
  * nvme: update to nvme_scan_filter_t modifications (bsc#1195938)
  * plugins/intel: make 'buckets' a json array
  * plugins: Update WDC capabilities command with new commmands
  * plugins: Add OCP plugin</changelog>
  <changelog author="dwagner@suse.de" date="1654603200">- fabrics: Already connected uses a different error code (bsc#1199994)
  * add 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
- fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * add 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
- nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)
  * add 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * add 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
- fabrics: Honor config file for connect-all (bsc#1199504)
  * add 0005-fabrics-Honor-config-file-for-connect-all.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * add 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
- Fabrics related bug fixes
  * add 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * add 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * add 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * add 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * add 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * add 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * add 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * add 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * add 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 2.2.1 (jsc#ped-553):
  * Added parsing for Solidigm telemetry observable data.
  * Revert "udev: re-read the discovery log page when a discovery controller reconnected"
  * add item ddr_ecc_err_cnt in smart-log-add
  * build and install fixes/improvements
  * build: Add minimum build requirement on libnvme
  * build: Drop dependency on libuuid
  * build: Extend release script to support micro version releases
  * build: Fix endian check for cross build
  * build: Remove unused uuid.wrap file
  * build: Remove unusned uuid.h include
  * build: Update release version rules
  * build: Update version before regenerating docs
  * completions: Add show-topology tab completion
  * documentation fixes
  * fabrics: Avoid nvme_scan_ctrl when disconnecting
  * fabrics: Honor JSON config file in connect-all command
  * fabrics: Remove dhchap-ctrl-secret from discover/connect-all
  * fabrics: Trigger auto connect if config.json exists
  * fabrics: fix 'persistent' handling during connect-all with JSON file
  * fabrics: nvme config --modify depends on -n and -t argument
  * fabrics: re-read the discovery log page when a discovery controller reconnected
  * json: Support uint64 types serialization for older json-c versions
  * meson: we don't need a c++ compiler
  * new solidigm plugin
  * nvme, plugins: fix __u64 -&gt; unsigned long long assumptions
  * nvme-print: Add missing values in id-ctrl for JSON output
  * nvme-print: Handle NULL hostid in JSON output
  * nvme-print: Output 128bit values as uint128 type instead of double
  * nvme-print: Print fguid as a UUID
  * nvme-print: Use uint128 JSON function for media_units_written
  * nvme-print: decode MI status values
  * nvme-print: decode status types
  * nvme-print: fix wrong json key
  * nvme-print: sanitize the get-feature async event config output
  * nvme: Add helper function to parse 16-bit comma separated list
  * nvme: Add nvme_cmd wrapper for get_features
  * nvme: Add show-topology command
  * nvme: Add wrapper for Format NVM
  * nvme: Add wrapper for Sanitize NVM
  * nvme: Add wrappers for Get Log page helpers
  * nvme: Add wrappers for Identify controller lists
  * nvme: Add wrappers for NS attach/detach
  * nvme: Add wrappers for NS management functions
  * nvme: Add wrappers for basic NS identify
  * nvme: Add wrappers for firmware commands
  * nvme: Do not print error message in collect_effects_log helper
  * nvme: Fix set feature command to get feature identifier 0Dh length as zero
  * nvme: Introduce a union in struct nvme_dev for different transport types
  * nvme: Introduce nvme_cli_ wrappers, wrap identify and identify_ctrl
  * nvme: Make static nvme_dev private to open_dev(), use locals elsewhere
  * nvme: Masks SSTAT in sanize-log output
  * nvme: Remove static nvme_dev, allocate on open instead
  * nvme: Set default rae value for nvme_get_nsid_log users
  * nvme: Simplify ns list identify
  * nvme: Use correct print format specifier for sizeof arguments
  * nvme: Use local struct nvme_dev for show_registers &amp; map_registers
  * nvme: check if cfg.metadata is NULL before passing it to strlen()
  * nvme: use helpers for checking status types
  * plugins/innogrit: Include timer.h
  * plugins/innogrit: add smart items for smart-log-add
  * plugins/micron-nvme: Use correct print format specifier for sizeof arguments
  * plugins/ocp: Include timer.h
  * plugins/ocp: Output 128bit values as uint128 type instead of double
  * plugins/ocp: drop unused fd argument
  * plugins/ocp: pass struct nvme_dev to internal functions
  * plugins/seagate: Add support for OCP
  * plugins/solidigm: fix return value on format parse failure
  * plugins/toshiba: pass struct nvme_dev rather than fd + name
  * plugins/virtium: Output 128bit values as uint128 type instead of double
  * plugins/wdc: Add support for SN660 drive
  * plugins/wdc: Add type case for feature id
  * plugins/wdc: Output 128bit values as uint128 type instead of double
  * plugins/wdc: fix memset() on the address of a pointer
  * plugins/wdc: pass a struct nvme_dev around rather than a fd
  * plugins/wdc: pass struct nvme_dev rather than using global nvme_dev
  * plugins/wdc: prevent duplicate close on NVMe device
  * plugins/wdc: remove fd argument from print functions
  * plugins/ytmc: pass struct nvme_dev rather than fd + name
  * plugins: Use PRIu64 format specifier for 64bit types
  * print: Add Controller Ready Timeout Exceeded HW error code
  * print: Fix nvme_id_uuid_list
  * solidgm: fix initialization warning
  * solidigm: Added parsing for telemetry customer screenable data
  * solidigm: Fix printf format for size_t variable
  * solidigm: Updated Telemetry parsing code to MIT license.
  * subprojects/libnvme: update for MI admin command coverage
  * tests: Update license to GPL-2.0-or-later
  * tree: Add NVMe-MI support
  * tree: Add dev_fd() helper
  * tree: Change nvme_dev from global to static
  * tree: Combine NVMe file descriptor into struct nvme_dev
  * tree: Move global device info to a single struct
  * tree: fail on non-negative return values from parse_and_open
  * udev: Add HOST_IFACE to udev rule
  * util/json.h: Add json_object_get_uint64 fallback implementation
  * util/json: Add 128 bit JSON helpers
  * util/types: Add 128 bit conversion helpers
  * util: Fix le128_to_cpu on big-endian
  * util: Fix le128_to_cpu on little-endian
  * util: Move common type conversion helpers into util section
  * utils/json: Add json_object_new_uint64 for json-c &lt; 0.14
  * utils: Fix uint128_t usage
  * various fixes reported by coverity
  * version reporting includes library version
  * wdc:  OCP Log page updates and fixes
  * wrapper: Add weak nvme_init_copy_range_f1 symbol
  * wrapper: Call library version of nvme_init_copy_range_f1
  * wrapper: Update SPDIX license
  * zns.c: report zones should be started after retrieved zone
- Drop upsreamp patches
  * remove 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
  * remove 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
  * remove 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * remove 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
  * remove 0005-fabrics-Honor-config-file-for-connect-all.patch
  * remove 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
  * remove 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * remove 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * remove 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * remove 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * remove 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * remove 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * remove 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * remove 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * remove 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch
- Handle suse-missing-rclink lint warnings by providing the symlinks
- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- Mark no binaries rpms as noarch</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 2.2.1+3.gd028407:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Add %check section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- spec file: fix "check" section (bsc#1207686)
- add "Provides: nvmeof-boot-support = 0.1"</changelog>
  <changelog author="daniel.wagner@suse.com" date="1684929600">- Update to version v2.4 (jsc#PED-553 jsc#PED-3884)
  - Sanitize traddr and trsvcid avoid buffer overrun (bsc#1207435)
  * json_discovery_log: avoid buffer overrun
  - Extend udev rule to pass --host-interface argument to nvme-cli (bsc#1208001)
  * udev: Add HOST_IFACE to udev rule
  - Build documentation to be up to date
  - Fix build warning (git-fixes)
  * fabrics: 'e-&gt;traddr' is static
  - Improvements for supported-log-pages (bsc#1209550)
  * nvme-doc: update man page for supported-log-pages
  * nvme-print: sanitize supported-log-pages output
  - Fix read command (bsc#1209564)
  * nvme: fix block count and data size logic
  - Fix mounting filesystems via fstab (bsc#1208075)
  * fabrics: Fix ordering for auto connect services
  - Update host_traddr when using config.json file (bsc#1210089)
  * fabrics: fix fc config JSON file handling
  - remove 0100-harden_nvmf-connect@.service.patch
- Added compat commands for nbft back
- Changed default behavior of connect-all to match with old nbft
  behavior
- Replaced old nbft implementation with upstream one
- Rebuild documentation on package update
- Set version-tag so that version are correctly reported
- Fix connect nbft regressions (bsc#1209905)
  * fabrics: fix argc in show_nbft_compat_cmd()
- Fix auto connect conditions (bsc#1210105)
  * fabrics: fix conditions in nvmf-autoconnect.service
- Fix auto boot for NBFT connections (bsc#1211647)
  * fabrics: add udev rule to avoid renaming nbft interfaces
  * fabrics: autoconnect: add service unit for connecting NBFT subsystems</changelog>
  <changelog author="dwagner@suse.de" date="1690459200">- Update to version 2.4+24.ga1ee20:
  * nvme-print-stdout: Do not show non reachable ns in namespace topology (bsc#1212598)
  * nvme-print-stdout: List only ctrls which are part of ns bsc#1212598)
  * nvme-print-stdout: Support subsys reachable from several hosts bsc#1212598)
  * ccan: Add htable, strset and dependencies bsc#1212598)
  * ccan: Remove unused documentation bsc#1212598)
  * nvme-print: fix counter while looping through uuid_list (bsc#bsc#1212598)
  * nvme-print: Show subsystem iopolicy (bsc#1124564)</changelog>
  <changelog author="dwagner@suse.de" date="1693915200">- Update to version 2.4+25.g367eb9:
  * json: fix seg. fault converting NULL to JSON string (bsc#1213762)</changelog>
  <changelog author="dwagner@suse.de" date="1699012800">- Update to version 2.4+31.gf7ec09:
  * udev-rules: rename netapp udev rule (bsc#1215994)
  * udev-rules: set ctrl_loss_tmo to -1 for ONTAP NVMe/TCP (bsc#1215994)
  * udev-rule: apply round-robin iopolicy on i/o subsystems alone (bsc#1215994)
  * fabrics: For TCP/RDMA, compare IP addresses with nvme_ipaddrs_eq() (bsc#1213768)
  * fabrics: lookup_discovery_ctrl() must look under host and not root (bsc#1213768)
  * fabrics: only look for matching ctrl on same host (bsc#1213768)</changelog>
</package>
<package pkgid="7c7dc00f7443d48d00a5074b2310780ba1e3f0fec00e3f95ea1114eaad527959" name="nvme-cli" arch="aarch64">
  <version epoch="0" ver="2.4+32.g2e2531a" rel="150500.4.15.3"/>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 2.0~2:
  * Adapt to logging API changes in libnvme
  * Adapt to scan API changes in libnvme
  * Reworked error message handling
  * Fix 'list-ns' (bsc#1195151)
  * Add 'gen-tls-key' and 'check-tls-key'
  * Add Media Unit Status log page support
  * Cleanups and build fixes
- Fix path to systemctl (bsc#1193699)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v2.0-rc3:
  * nvme-print: Fix json output for list-subsys
  * nvme: Allow --verbose flag to increase log level
  * Added telemetry log fetch support for SN810, SN530 and SN740 series NVMe SSDs through wdc vs-internal-log command
  * nvmf: Remove --matching from systemd service file (bsc#1195665)
  * nvme: Fix --force flag inversion (bsc#1195637)
  * nvme: Add support for data area 4 to get-telemetry-log
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme-print: Add NVME_FEAT_FID_ENH_CTRL_METADATA to nvme_feature_to_string
  * nvme-print: remove unused nvme_show_id_ctrl function
  * nvme: Add nvm-id-ns-lba-format(CNS 0Ah) command from TP4095
  * nvme: Add NVM Command Set specific identify namespace command
  * nvme: Add id-ns-lba-format(CNS 09h) command from TP4095
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
- Include precompiled documentation</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 2.0-rc4:
  * netapp-nvme: free the nsdescs pointer after use
  * netapp-nvme: fix ontapdevices segfault in json output
  * nvme-print: fix 'nvme list -o json' segfault
  * nvme: get_ns_id command fails on nvme device
  * wdc: updated products list for telemetry (--type) argument
  * docs: fix typo in Data Set Management section
  * Fix ctrlist for attach-ns and detach-ns
  * netapp-nvme: fix nvme ns desc uuid handling for ontapdevices
  * wdc: Fix use-after-free access of cbs_data
  * Fixed regression with 'open namespace exclusive' (bsc#1195945)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 2.0-rc5:
  * nvme: passthru bugfix(wrong jump, wrong file descriptor)
  * nvme-cli: Ignore traddr case (bsc#1194025)
  * nvme: fix segfault in nvme telemetry-log error handling
  * fabrics: ensure zero kato for non-persistent controllers
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 2.0-rc6:
  * nvme: print out ANA state for 'list-subsys' (bsc#1195938)
  * nvme: Explicit initialize all command line options (bsc#1195945)
  * nvme: Explicit initialize passthru command line options
  * nvme: list_ns bug fix (csi option enable)
  * nvme: nvme write bug fix (no parse for option)
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 2.0-rc7:
  * netapp-nvme: fix smdevices segfault in json output (bsc#1195937)
  * fabrics: keep the backward compatibility
  * nvme: Do not slash escape strings in JSON output (bsc#1195937)
  * nvme: Print full device path
  * nvme-print: Make JSON keys consistent with nvme-cli 1.x
  * nvme-print: print generic device in list command
  * fabrics: check for discovery controller instead of subsystem NQN (bsc#1197061)
  * connect: Set errno to zero on nvmf_add_ctrl() success
  * documenation updates
- Set path to systemctl via newly introduced config option
- Update 0100-harden_nvmf-connect@.service.patch due to upstream file rename
- Moved bash completion script to /usr/share/bash-completion/completions/nvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647950400">- Fix install conflict caused by new bash completion script
  location (bsc#1197365).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 2.0-rc8:
  * fabrics: Add DIM command
  * fabrics: Introduce force flag to overwrite persistence logic (bsc#1197076)
  * fabrics: Free non-matching controller during discovery
  * fabrics: add 'nvme config' command
  * fabrics: Correctly stringify discovery.conf and config.json paths
  * nvme-print: Add human readable print for nsattr field
  * nvme-print: Update Persistent Event log fields
  * nvme-print: print discovery async event support
  * nvme-rpmb: Fix spelling for 'Partition'
  * nvme-copy: add missing field to the command
  * nvme: add get_mi_cmd_support_effects_log command
  * nvme: Fixup namespace filtering yet again
  * nvme: Use type bool for OPT_FLAG
  * nvme: use filter for 'list-subsys &lt;devname&gt;' (bsc#1195938)
  * Add lbstm option to create-ns
  * argconfig: Do not use default value loading by getopt_long_only
  * argconfig: Rename CFG_NONE to CFG_FLAG
  * plugins: Use type bool for OPT_FLAG
  * documenation updates
- Drop 'ProtectKernelTunables=true' (bsc#1197076)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 2.0:
  * fabrics: Create persistent controller using unique subsystem NQN (bsc#1198243)
  * fabrics: Set KATO for discovery controller when connecting
  * fabrics: Do no modify default config for discovery controller
  * fabrics: Set default trsvcid ports for TCP and RDMA (bsc#1195858)
  * fabrics: Support connect even when no /etc/nvme/hostnqn file exists
  * nvme: update to nvme_scan_filter_t modifications (bsc#1195938)
  * plugins/intel: make 'buckets' a json array
  * plugins: Update WDC capabilities command with new commmands
  * plugins: Add OCP plugin</changelog>
  <changelog author="dwagner@suse.de" date="1654603200">- fabrics: Already connected uses a different error code (bsc#1199994)
  * add 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
- fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * add 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
- nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)
  * add 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * add 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
- fabrics: Honor config file for connect-all (bsc#1199504)
  * add 0005-fabrics-Honor-config-file-for-connect-all.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * add 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
- Fabrics related bug fixes
  * add 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * add 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * add 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * add 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * add 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * add 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * add 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * add 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * add 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 2.2.1 (jsc#ped-553):
  * Added parsing for Solidigm telemetry observable data.
  * Revert "udev: re-read the discovery log page when a discovery controller reconnected"
  * add item ddr_ecc_err_cnt in smart-log-add
  * build and install fixes/improvements
  * build: Add minimum build requirement on libnvme
  * build: Drop dependency on libuuid
  * build: Extend release script to support micro version releases
  * build: Fix endian check for cross build
  * build: Remove unused uuid.wrap file
  * build: Remove unusned uuid.h include
  * build: Update release version rules
  * build: Update version before regenerating docs
  * completions: Add show-topology tab completion
  * documentation fixes
  * fabrics: Avoid nvme_scan_ctrl when disconnecting
  * fabrics: Honor JSON config file in connect-all command
  * fabrics: Remove dhchap-ctrl-secret from discover/connect-all
  * fabrics: Trigger auto connect if config.json exists
  * fabrics: fix 'persistent' handling during connect-all with JSON file
  * fabrics: nvme config --modify depends on -n and -t argument
  * fabrics: re-read the discovery log page when a discovery controller reconnected
  * json: Support uint64 types serialization for older json-c versions
  * meson: we don't need a c++ compiler
  * new solidigm plugin
  * nvme, plugins: fix __u64 -&gt; unsigned long long assumptions
  * nvme-print: Add missing values in id-ctrl for JSON output
  * nvme-print: Handle NULL hostid in JSON output
  * nvme-print: Output 128bit values as uint128 type instead of double
  * nvme-print: Print fguid as a UUID
  * nvme-print: Use uint128 JSON function for media_units_written
  * nvme-print: decode MI status values
  * nvme-print: decode status types
  * nvme-print: fix wrong json key
  * nvme-print: sanitize the get-feature async event config output
  * nvme: Add helper function to parse 16-bit comma separated list
  * nvme: Add nvme_cmd wrapper for get_features
  * nvme: Add show-topology command
  * nvme: Add wrapper for Format NVM
  * nvme: Add wrapper for Sanitize NVM
  * nvme: Add wrappers for Get Log page helpers
  * nvme: Add wrappers for Identify controller lists
  * nvme: Add wrappers for NS attach/detach
  * nvme: Add wrappers for NS management functions
  * nvme: Add wrappers for basic NS identify
  * nvme: Add wrappers for firmware commands
  * nvme: Do not print error message in collect_effects_log helper
  * nvme: Fix set feature command to get feature identifier 0Dh length as zero
  * nvme: Introduce a union in struct nvme_dev for different transport types
  * nvme: Introduce nvme_cli_ wrappers, wrap identify and identify_ctrl
  * nvme: Make static nvme_dev private to open_dev(), use locals elsewhere
  * nvme: Masks SSTAT in sanize-log output
  * nvme: Remove static nvme_dev, allocate on open instead
  * nvme: Set default rae value for nvme_get_nsid_log users
  * nvme: Simplify ns list identify
  * nvme: Use correct print format specifier for sizeof arguments
  * nvme: Use local struct nvme_dev for show_registers &amp; map_registers
  * nvme: check if cfg.metadata is NULL before passing it to strlen()
  * nvme: use helpers for checking status types
  * plugins/innogrit: Include timer.h
  * plugins/innogrit: add smart items for smart-log-add
  * plugins/micron-nvme: Use correct print format specifier for sizeof arguments
  * plugins/ocp: Include timer.h
  * plugins/ocp: Output 128bit values as uint128 type instead of double
  * plugins/ocp: drop unused fd argument
  * plugins/ocp: pass struct nvme_dev to internal functions
  * plugins/seagate: Add support for OCP
  * plugins/solidigm: fix return value on format parse failure
  * plugins/toshiba: pass struct nvme_dev rather than fd + name
  * plugins/virtium: Output 128bit values as uint128 type instead of double
  * plugins/wdc: Add support for SN660 drive
  * plugins/wdc: Add type case for feature id
  * plugins/wdc: Output 128bit values as uint128 type instead of double
  * plugins/wdc: fix memset() on the address of a pointer
  * plugins/wdc: pass a struct nvme_dev around rather than a fd
  * plugins/wdc: pass struct nvme_dev rather than using global nvme_dev
  * plugins/wdc: prevent duplicate close on NVMe device
  * plugins/wdc: remove fd argument from print functions
  * plugins/ytmc: pass struct nvme_dev rather than fd + name
  * plugins: Use PRIu64 format specifier for 64bit types
  * print: Add Controller Ready Timeout Exceeded HW error code
  * print: Fix nvme_id_uuid_list
  * solidgm: fix initialization warning
  * solidigm: Added parsing for telemetry customer screenable data
  * solidigm: Fix printf format for size_t variable
  * solidigm: Updated Telemetry parsing code to MIT license.
  * subprojects/libnvme: update for MI admin command coverage
  * tests: Update license to GPL-2.0-or-later
  * tree: Add NVMe-MI support
  * tree: Add dev_fd() helper
  * tree: Change nvme_dev from global to static
  * tree: Combine NVMe file descriptor into struct nvme_dev
  * tree: Move global device info to a single struct
  * tree: fail on non-negative return values from parse_and_open
  * udev: Add HOST_IFACE to udev rule
  * util/json.h: Add json_object_get_uint64 fallback implementation
  * util/json: Add 128 bit JSON helpers
  * util/types: Add 128 bit conversion helpers
  * util: Fix le128_to_cpu on big-endian
  * util: Fix le128_to_cpu on little-endian
  * util: Move common type conversion helpers into util section
  * utils/json: Add json_object_new_uint64 for json-c &lt; 0.14
  * utils: Fix uint128_t usage
  * various fixes reported by coverity
  * version reporting includes library version
  * wdc:  OCP Log page updates and fixes
  * wrapper: Add weak nvme_init_copy_range_f1 symbol
  * wrapper: Call library version of nvme_init_copy_range_f1
  * wrapper: Update SPDIX license
  * zns.c: report zones should be started after retrieved zone
- Drop upsreamp patches
  * remove 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
  * remove 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
  * remove 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * remove 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
  * remove 0005-fabrics-Honor-config-file-for-connect-all.patch
  * remove 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
  * remove 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * remove 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * remove 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * remove 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * remove 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * remove 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * remove 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * remove 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * remove 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch
- Handle suse-missing-rclink lint warnings by providing the symlinks
- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- Mark no binaries rpms as noarch</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 2.2.1+3.gd028407:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Add %check section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- spec file: fix "check" section (bsc#1207686)
- add "Provides: nvmeof-boot-support = 0.1"</changelog>
  <changelog author="daniel.wagner@suse.com" date="1684929600">- Update to version v2.4 (jsc#PED-553 jsc#PED-3884)
  - Sanitize traddr and trsvcid avoid buffer overrun (bsc#1207435)
  * json_discovery_log: avoid buffer overrun
  - Extend udev rule to pass --host-interface argument to nvme-cli (bsc#1208001)
  * udev: Add HOST_IFACE to udev rule
  - Build documentation to be up to date
  - Fix build warning (git-fixes)
  * fabrics: 'e-&gt;traddr' is static
  - Improvements for supported-log-pages (bsc#1209550)
  * nvme-doc: update man page for supported-log-pages
  * nvme-print: sanitize supported-log-pages output
  - Fix read command (bsc#1209564)
  * nvme: fix block count and data size logic
  - Fix mounting filesystems via fstab (bsc#1208075)
  * fabrics: Fix ordering for auto connect services
  - Update host_traddr when using config.json file (bsc#1210089)
  * fabrics: fix fc config JSON file handling
  - remove 0100-harden_nvmf-connect@.service.patch
- Added compat commands for nbft back
- Changed default behavior of connect-all to match with old nbft
  behavior
- Replaced old nbft implementation with upstream one
- Rebuild documentation on package update
- Set version-tag so that version are correctly reported
- Fix connect nbft regressions (bsc#1209905)
  * fabrics: fix argc in show_nbft_compat_cmd()
- Fix auto connect conditions (bsc#1210105)
  * fabrics: fix conditions in nvmf-autoconnect.service
- Fix auto boot for NBFT connections (bsc#1211647)
  * fabrics: add udev rule to avoid renaming nbft interfaces
  * fabrics: autoconnect: add service unit for connecting NBFT subsystems</changelog>
  <changelog author="dwagner@suse.de" date="1690459200">- Update to version 2.4+24.ga1ee20:
  * nvme-print-stdout: Do not show non reachable ns in namespace topology (bsc#1212598)
  * nvme-print-stdout: List only ctrls which are part of ns bsc#1212598)
  * nvme-print-stdout: Support subsys reachable from several hosts bsc#1212598)
  * ccan: Add htable, strset and dependencies bsc#1212598)
  * ccan: Remove unused documentation bsc#1212598)
  * nvme-print: fix counter while looping through uuid_list (bsc#bsc#1212598)
  * nvme-print: Show subsystem iopolicy (bsc#1124564)</changelog>
  <changelog author="dwagner@suse.de" date="1693915200">- Update to version 2.4+25.g367eb9:
  * json: fix seg. fault converting NULL to JSON string (bsc#1213762)</changelog>
  <changelog author="dwagner@suse.de" date="1699012800">- Update to version 2.4+31.gf7ec09:
  * udev-rules: rename netapp udev rule (bsc#1215994)
  * udev-rules: set ctrl_loss_tmo to -1 for ONTAP NVMe/TCP (bsc#1215994)
  * udev-rule: apply round-robin iopolicy on i/o subsystems alone (bsc#1215994)
  * fabrics: For TCP/RDMA, compare IP addresses with nvme_ipaddrs_eq() (bsc#1213768)
  * fabrics: lookup_discovery_ctrl() must look under host and not root (bsc#1213768)
  * fabrics: only look for matching ctrl on same host (bsc#1213768)</changelog>
  <changelog author="dwagner@suse.de" date="1712232000">- Update to version 2.4+32.g2e2531a:
  * nvme-netapp: add nspath tlv handling (bsc#1220971)</changelog>
</package>
<package pkgid="eda73190cb721e888f7812e092575c0986511220d1f17a3b6ecfa8b1127aabdf" name="nvme-cli" arch="s390x">
  <version epoch="0" ver="2.4+32.g2e2531a" rel="150500.4.15.3"/>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 2.0~2:
  * Adapt to logging API changes in libnvme
  * Adapt to scan API changes in libnvme
  * Reworked error message handling
  * Fix 'list-ns' (bsc#1195151)
  * Add 'gen-tls-key' and 'check-tls-key'
  * Add Media Unit Status log page support
  * Cleanups and build fixes
- Fix path to systemctl (bsc#1193699)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v2.0-rc3:
  * nvme-print: Fix json output for list-subsys
  * nvme: Allow --verbose flag to increase log level
  * Added telemetry log fetch support for SN810, SN530 and SN740 series NVMe SSDs through wdc vs-internal-log command
  * nvmf: Remove --matching from systemd service file (bsc#1195665)
  * nvme: Fix --force flag inversion (bsc#1195637)
  * nvme: Add support for data area 4 to get-telemetry-log
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme-print: Add NVME_FEAT_FID_ENH_CTRL_METADATA to nvme_feature_to_string
  * nvme-print: remove unused nvme_show_id_ctrl function
  * nvme: Add nvm-id-ns-lba-format(CNS 0Ah) command from TP4095
  * nvme: Add NVM Command Set specific identify namespace command
  * nvme: Add id-ns-lba-format(CNS 09h) command from TP4095
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
- Include precompiled documentation</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 2.0-rc4:
  * netapp-nvme: free the nsdescs pointer after use
  * netapp-nvme: fix ontapdevices segfault in json output
  * nvme-print: fix 'nvme list -o json' segfault
  * nvme: get_ns_id command fails on nvme device
  * wdc: updated products list for telemetry (--type) argument
  * docs: fix typo in Data Set Management section
  * Fix ctrlist for attach-ns and detach-ns
  * netapp-nvme: fix nvme ns desc uuid handling for ontapdevices
  * wdc: Fix use-after-free access of cbs_data
  * Fixed regression with 'open namespace exclusive' (bsc#1195945)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 2.0-rc5:
  * nvme: passthru bugfix(wrong jump, wrong file descriptor)
  * nvme-cli: Ignore traddr case (bsc#1194025)
  * nvme: fix segfault in nvme telemetry-log error handling
  * fabrics: ensure zero kato for non-persistent controllers
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 2.0-rc6:
  * nvme: print out ANA state for 'list-subsys' (bsc#1195938)
  * nvme: Explicit initialize all command line options (bsc#1195945)
  * nvme: Explicit initialize passthru command line options
  * nvme: list_ns bug fix (csi option enable)
  * nvme: nvme write bug fix (no parse for option)
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 2.0-rc7:
  * netapp-nvme: fix smdevices segfault in json output (bsc#1195937)
  * fabrics: keep the backward compatibility
  * nvme: Do not slash escape strings in JSON output (bsc#1195937)
  * nvme: Print full device path
  * nvme-print: Make JSON keys consistent with nvme-cli 1.x
  * nvme-print: print generic device in list command
  * fabrics: check for discovery controller instead of subsystem NQN (bsc#1197061)
  * connect: Set errno to zero on nvmf_add_ctrl() success
  * documenation updates
- Set path to systemctl via newly introduced config option
- Update 0100-harden_nvmf-connect@.service.patch due to upstream file rename
- Moved bash completion script to /usr/share/bash-completion/completions/nvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647950400">- Fix install conflict caused by new bash completion script
  location (bsc#1197365).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 2.0-rc8:
  * fabrics: Add DIM command
  * fabrics: Introduce force flag to overwrite persistence logic (bsc#1197076)
  * fabrics: Free non-matching controller during discovery
  * fabrics: add 'nvme config' command
  * fabrics: Correctly stringify discovery.conf and config.json paths
  * nvme-print: Add human readable print for nsattr field
  * nvme-print: Update Persistent Event log fields
  * nvme-print: print discovery async event support
  * nvme-rpmb: Fix spelling for 'Partition'
  * nvme-copy: add missing field to the command
  * nvme: add get_mi_cmd_support_effects_log command
  * nvme: Fixup namespace filtering yet again
  * nvme: Use type bool for OPT_FLAG
  * nvme: use filter for 'list-subsys &lt;devname&gt;' (bsc#1195938)
  * Add lbstm option to create-ns
  * argconfig: Do not use default value loading by getopt_long_only
  * argconfig: Rename CFG_NONE to CFG_FLAG
  * plugins: Use type bool for OPT_FLAG
  * documenation updates
- Drop 'ProtectKernelTunables=true' (bsc#1197076)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 2.0:
  * fabrics: Create persistent controller using unique subsystem NQN (bsc#1198243)
  * fabrics: Set KATO for discovery controller when connecting
  * fabrics: Do no modify default config for discovery controller
  * fabrics: Set default trsvcid ports for TCP and RDMA (bsc#1195858)
  * fabrics: Support connect even when no /etc/nvme/hostnqn file exists
  * nvme: update to nvme_scan_filter_t modifications (bsc#1195938)
  * plugins/intel: make 'buckets' a json array
  * plugins: Update WDC capabilities command with new commmands
  * plugins: Add OCP plugin</changelog>
  <changelog author="dwagner@suse.de" date="1654603200">- fabrics: Already connected uses a different error code (bsc#1199994)
  * add 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
- fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * add 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
- nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)
  * add 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * add 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
- fabrics: Honor config file for connect-all (bsc#1199504)
  * add 0005-fabrics-Honor-config-file-for-connect-all.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * add 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
- Fabrics related bug fixes
  * add 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * add 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * add 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * add 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * add 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * add 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * add 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * add 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * add 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 2.2.1 (jsc#ped-553):
  * Added parsing for Solidigm telemetry observable data.
  * Revert "udev: re-read the discovery log page when a discovery controller reconnected"
  * add item ddr_ecc_err_cnt in smart-log-add
  * build and install fixes/improvements
  * build: Add minimum build requirement on libnvme
  * build: Drop dependency on libuuid
  * build: Extend release script to support micro version releases
  * build: Fix endian check for cross build
  * build: Remove unused uuid.wrap file
  * build: Remove unusned uuid.h include
  * build: Update release version rules
  * build: Update version before regenerating docs
  * completions: Add show-topology tab completion
  * documentation fixes
  * fabrics: Avoid nvme_scan_ctrl when disconnecting
  * fabrics: Honor JSON config file in connect-all command
  * fabrics: Remove dhchap-ctrl-secret from discover/connect-all
  * fabrics: Trigger auto connect if config.json exists
  * fabrics: fix 'persistent' handling during connect-all with JSON file
  * fabrics: nvme config --modify depends on -n and -t argument
  * fabrics: re-read the discovery log page when a discovery controller reconnected
  * json: Support uint64 types serialization for older json-c versions
  * meson: we don't need a c++ compiler
  * new solidigm plugin
  * nvme, plugins: fix __u64 -&gt; unsigned long long assumptions
  * nvme-print: Add missing values in id-ctrl for JSON output
  * nvme-print: Handle NULL hostid in JSON output
  * nvme-print: Output 128bit values as uint128 type instead of double
  * nvme-print: Print fguid as a UUID
  * nvme-print: Use uint128 JSON function for media_units_written
  * nvme-print: decode MI status values
  * nvme-print: decode status types
  * nvme-print: fix wrong json key
  * nvme-print: sanitize the get-feature async event config output
  * nvme: Add helper function to parse 16-bit comma separated list
  * nvme: Add nvme_cmd wrapper for get_features
  * nvme: Add show-topology command
  * nvme: Add wrapper for Format NVM
  * nvme: Add wrapper for Sanitize NVM
  * nvme: Add wrappers for Get Log page helpers
  * nvme: Add wrappers for Identify controller lists
  * nvme: Add wrappers for NS attach/detach
  * nvme: Add wrappers for NS management functions
  * nvme: Add wrappers for basic NS identify
  * nvme: Add wrappers for firmware commands
  * nvme: Do not print error message in collect_effects_log helper
  * nvme: Fix set feature command to get feature identifier 0Dh length as zero
  * nvme: Introduce a union in struct nvme_dev for different transport types
  * nvme: Introduce nvme_cli_ wrappers, wrap identify and identify_ctrl
  * nvme: Make static nvme_dev private to open_dev(), use locals elsewhere
  * nvme: Masks SSTAT in sanize-log output
  * nvme: Remove static nvme_dev, allocate on open instead
  * nvme: Set default rae value for nvme_get_nsid_log users
  * nvme: Simplify ns list identify
  * nvme: Use correct print format specifier for sizeof arguments
  * nvme: Use local struct nvme_dev for show_registers &amp; map_registers
  * nvme: check if cfg.metadata is NULL before passing it to strlen()
  * nvme: use helpers for checking status types
  * plugins/innogrit: Include timer.h
  * plugins/innogrit: add smart items for smart-log-add
  * plugins/micron-nvme: Use correct print format specifier for sizeof arguments
  * plugins/ocp: Include timer.h
  * plugins/ocp: Output 128bit values as uint128 type instead of double
  * plugins/ocp: drop unused fd argument
  * plugins/ocp: pass struct nvme_dev to internal functions
  * plugins/seagate: Add support for OCP
  * plugins/solidigm: fix return value on format parse failure
  * plugins/toshiba: pass struct nvme_dev rather than fd + name
  * plugins/virtium: Output 128bit values as uint128 type instead of double
  * plugins/wdc: Add support for SN660 drive
  * plugins/wdc: Add type case for feature id
  * plugins/wdc: Output 128bit values as uint128 type instead of double
  * plugins/wdc: fix memset() on the address of a pointer
  * plugins/wdc: pass a struct nvme_dev around rather than a fd
  * plugins/wdc: pass struct nvme_dev rather than using global nvme_dev
  * plugins/wdc: prevent duplicate close on NVMe device
  * plugins/wdc: remove fd argument from print functions
  * plugins/ytmc: pass struct nvme_dev rather than fd + name
  * plugins: Use PRIu64 format specifier for 64bit types
  * print: Add Controller Ready Timeout Exceeded HW error code
  * print: Fix nvme_id_uuid_list
  * solidgm: fix initialization warning
  * solidigm: Added parsing for telemetry customer screenable data
  * solidigm: Fix printf format for size_t variable
  * solidigm: Updated Telemetry parsing code to MIT license.
  * subprojects/libnvme: update for MI admin command coverage
  * tests: Update license to GPL-2.0-or-later
  * tree: Add NVMe-MI support
  * tree: Add dev_fd() helper
  * tree: Change nvme_dev from global to static
  * tree: Combine NVMe file descriptor into struct nvme_dev
  * tree: Move global device info to a single struct
  * tree: fail on non-negative return values from parse_and_open
  * udev: Add HOST_IFACE to udev rule
  * util/json.h: Add json_object_get_uint64 fallback implementation
  * util/json: Add 128 bit JSON helpers
  * util/types: Add 128 bit conversion helpers
  * util: Fix le128_to_cpu on big-endian
  * util: Fix le128_to_cpu on little-endian
  * util: Move common type conversion helpers into util section
  * utils/json: Add json_object_new_uint64 for json-c &lt; 0.14
  * utils: Fix uint128_t usage
  * various fixes reported by coverity
  * version reporting includes library version
  * wdc:  OCP Log page updates and fixes
  * wrapper: Add weak nvme_init_copy_range_f1 symbol
  * wrapper: Call library version of nvme_init_copy_range_f1
  * wrapper: Update SPDIX license
  * zns.c: report zones should be started after retrieved zone
- Drop upsreamp patches
  * remove 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
  * remove 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
  * remove 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * remove 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
  * remove 0005-fabrics-Honor-config-file-for-connect-all.patch
  * remove 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
  * remove 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * remove 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * remove 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * remove 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * remove 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * remove 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * remove 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * remove 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * remove 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch
- Handle suse-missing-rclink lint warnings by providing the symlinks
- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- Mark no binaries rpms as noarch</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 2.2.1+3.gd028407:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Add %check section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- spec file: fix "check" section (bsc#1207686)
- add "Provides: nvmeof-boot-support = 0.1"</changelog>
  <changelog author="daniel.wagner@suse.com" date="1684929600">- Update to version v2.4 (jsc#PED-553 jsc#PED-3884)
  - Sanitize traddr and trsvcid avoid buffer overrun (bsc#1207435)
  * json_discovery_log: avoid buffer overrun
  - Extend udev rule to pass --host-interface argument to nvme-cli (bsc#1208001)
  * udev: Add HOST_IFACE to udev rule
  - Build documentation to be up to date
  - Fix build warning (git-fixes)
  * fabrics: 'e-&gt;traddr' is static
  - Improvements for supported-log-pages (bsc#1209550)
  * nvme-doc: update man page for supported-log-pages
  * nvme-print: sanitize supported-log-pages output
  - Fix read command (bsc#1209564)
  * nvme: fix block count and data size logic
  - Fix mounting filesystems via fstab (bsc#1208075)
  * fabrics: Fix ordering for auto connect services
  - Update host_traddr when using config.json file (bsc#1210089)
  * fabrics: fix fc config JSON file handling
  - remove 0100-harden_nvmf-connect@.service.patch
- Added compat commands for nbft back
- Changed default behavior of connect-all to match with old nbft
  behavior
- Replaced old nbft implementation with upstream one
- Rebuild documentation on package update
- Set version-tag so that version are correctly reported
- Fix connect nbft regressions (bsc#1209905)
  * fabrics: fix argc in show_nbft_compat_cmd()
- Fix auto connect conditions (bsc#1210105)
  * fabrics: fix conditions in nvmf-autoconnect.service
- Fix auto boot for NBFT connections (bsc#1211647)
  * fabrics: add udev rule to avoid renaming nbft interfaces
  * fabrics: autoconnect: add service unit for connecting NBFT subsystems</changelog>
  <changelog author="dwagner@suse.de" date="1690459200">- Update to version 2.4+24.ga1ee20:
  * nvme-print-stdout: Do not show non reachable ns in namespace topology (bsc#1212598)
  * nvme-print-stdout: List only ctrls which are part of ns bsc#1212598)
  * nvme-print-stdout: Support subsys reachable from several hosts bsc#1212598)
  * ccan: Add htable, strset and dependencies bsc#1212598)
  * ccan: Remove unused documentation bsc#1212598)
  * nvme-print: fix counter while looping through uuid_list (bsc#bsc#1212598)
  * nvme-print: Show subsystem iopolicy (bsc#1124564)</changelog>
  <changelog author="dwagner@suse.de" date="1693915200">- Update to version 2.4+25.g367eb9:
  * json: fix seg. fault converting NULL to JSON string (bsc#1213762)</changelog>
  <changelog author="dwagner@suse.de" date="1699012800">- Update to version 2.4+31.gf7ec09:
  * udev-rules: rename netapp udev rule (bsc#1215994)
  * udev-rules: set ctrl_loss_tmo to -1 for ONTAP NVMe/TCP (bsc#1215994)
  * udev-rule: apply round-robin iopolicy on i/o subsystems alone (bsc#1215994)
  * fabrics: For TCP/RDMA, compare IP addresses with nvme_ipaddrs_eq() (bsc#1213768)
  * fabrics: lookup_discovery_ctrl() must look under host and not root (bsc#1213768)
  * fabrics: only look for matching ctrl on same host (bsc#1213768)</changelog>
  <changelog author="dwagner@suse.de" date="1712232000">- Update to version 2.4+32.g2e2531a:
  * nvme-netapp: add nspath tlv handling (bsc#1220971)</changelog>
</package>
<package pkgid="80fc2bf2405f3d55483f7ec76e96a2c6654fc3d91322b7bdcf4cafe646fa48c4" name="nvme-cli" arch="src">
  <version epoch="0" ver="2.4+32.g2e2531a" rel="150500.4.15.3"/>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 2.0~2:
  * Adapt to logging API changes in libnvme
  * Adapt to scan API changes in libnvme
  * Reworked error message handling
  * Fix 'list-ns' (bsc#1195151)
  * Add 'gen-tls-key' and 'check-tls-key'
  * Add Media Unit Status log page support
  * Cleanups and build fixes
- Fix path to systemctl (bsc#1193699)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v2.0-rc3:
  * nvme-print: Fix json output for list-subsys
  * nvme: Allow --verbose flag to increase log level
  * Added telemetry log fetch support for SN810, SN530 and SN740 series NVMe SSDs through wdc vs-internal-log command
  * nvmf: Remove --matching from systemd service file (bsc#1195665)
  * nvme: Fix --force flag inversion (bsc#1195637)
  * nvme: Add support for data area 4 to get-telemetry-log
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme-print: Add NVME_FEAT_FID_ENH_CTRL_METADATA to nvme_feature_to_string
  * nvme-print: remove unused nvme_show_id_ctrl function
  * nvme: Add nvm-id-ns-lba-format(CNS 0Ah) command from TP4095
  * nvme: Add NVM Command Set specific identify namespace command
  * nvme: Add id-ns-lba-format(CNS 09h) command from TP4095
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
- Include precompiled documentation</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 2.0-rc4:
  * netapp-nvme: free the nsdescs pointer after use
  * netapp-nvme: fix ontapdevices segfault in json output
  * nvme-print: fix 'nvme list -o json' segfault
  * nvme: get_ns_id command fails on nvme device
  * wdc: updated products list for telemetry (--type) argument
  * docs: fix typo in Data Set Management section
  * Fix ctrlist for attach-ns and detach-ns
  * netapp-nvme: fix nvme ns desc uuid handling for ontapdevices
  * wdc: Fix use-after-free access of cbs_data
  * Fixed regression with 'open namespace exclusive' (bsc#1195945)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 2.0-rc5:
  * nvme: passthru bugfix(wrong jump, wrong file descriptor)
  * nvme-cli: Ignore traddr case (bsc#1194025)
  * nvme: fix segfault in nvme telemetry-log error handling
  * fabrics: ensure zero kato for non-persistent controllers
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 2.0-rc6:
  * nvme: print out ANA state for 'list-subsys' (bsc#1195938)
  * nvme: Explicit initialize all command line options (bsc#1195945)
  * nvme: Explicit initialize passthru command line options
  * nvme: list_ns bug fix (csi option enable)
  * nvme: nvme write bug fix (no parse for option)
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 2.0-rc7:
  * netapp-nvme: fix smdevices segfault in json output (bsc#1195937)
  * fabrics: keep the backward compatibility
  * nvme: Do not slash escape strings in JSON output (bsc#1195937)
  * nvme: Print full device path
  * nvme-print: Make JSON keys consistent with nvme-cli 1.x
  * nvme-print: print generic device in list command
  * fabrics: check for discovery controller instead of subsystem NQN (bsc#1197061)
  * connect: Set errno to zero on nvmf_add_ctrl() success
  * documenation updates
- Set path to systemctl via newly introduced config option
- Update 0100-harden_nvmf-connect@.service.patch due to upstream file rename
- Moved bash completion script to /usr/share/bash-completion/completions/nvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647950400">- Fix install conflict caused by new bash completion script
  location (bsc#1197365).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 2.0-rc8:
  * fabrics: Add DIM command
  * fabrics: Introduce force flag to overwrite persistence logic (bsc#1197076)
  * fabrics: Free non-matching controller during discovery
  * fabrics: add 'nvme config' command
  * fabrics: Correctly stringify discovery.conf and config.json paths
  * nvme-print: Add human readable print for nsattr field
  * nvme-print: Update Persistent Event log fields
  * nvme-print: print discovery async event support
  * nvme-rpmb: Fix spelling for 'Partition'
  * nvme-copy: add missing field to the command
  * nvme: add get_mi_cmd_support_effects_log command
  * nvme: Fixup namespace filtering yet again
  * nvme: Use type bool for OPT_FLAG
  * nvme: use filter for 'list-subsys &lt;devname&gt;' (bsc#1195938)
  * Add lbstm option to create-ns
  * argconfig: Do not use default value loading by getopt_long_only
  * argconfig: Rename CFG_NONE to CFG_FLAG
  * plugins: Use type bool for OPT_FLAG
  * documenation updates
- Drop 'ProtectKernelTunables=true' (bsc#1197076)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 2.0:
  * fabrics: Create persistent controller using unique subsystem NQN (bsc#1198243)
  * fabrics: Set KATO for discovery controller when connecting
  * fabrics: Do no modify default config for discovery controller
  * fabrics: Set default trsvcid ports for TCP and RDMA (bsc#1195858)
  * fabrics: Support connect even when no /etc/nvme/hostnqn file exists
  * nvme: update to nvme_scan_filter_t modifications (bsc#1195938)
  * plugins/intel: make 'buckets' a json array
  * plugins: Update WDC capabilities command with new commmands
  * plugins: Add OCP plugin</changelog>
  <changelog author="dwagner@suse.de" date="1654603200">- fabrics: Already connected uses a different error code (bsc#1199994)
  * add 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
- fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * add 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
- nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)
  * add 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * add 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
- fabrics: Honor config file for connect-all (bsc#1199504)
  * add 0005-fabrics-Honor-config-file-for-connect-all.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * add 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
- Fabrics related bug fixes
  * add 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * add 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * add 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * add 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * add 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * add 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * add 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * add 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * add 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 2.2.1 (jsc#ped-553):
  * Added parsing for Solidigm telemetry observable data.
  * Revert "udev: re-read the discovery log page when a discovery controller reconnected"
  * add item ddr_ecc_err_cnt in smart-log-add
  * build and install fixes/improvements
  * build: Add minimum build requirement on libnvme
  * build: Drop dependency on libuuid
  * build: Extend release script to support micro version releases
  * build: Fix endian check for cross build
  * build: Remove unused uuid.wrap file
  * build: Remove unusned uuid.h include
  * build: Update release version rules
  * build: Update version before regenerating docs
  * completions: Add show-topology tab completion
  * documentation fixes
  * fabrics: Avoid nvme_scan_ctrl when disconnecting
  * fabrics: Honor JSON config file in connect-all command
  * fabrics: Remove dhchap-ctrl-secret from discover/connect-all
  * fabrics: Trigger auto connect if config.json exists
  * fabrics: fix 'persistent' handling during connect-all with JSON file
  * fabrics: nvme config --modify depends on -n and -t argument
  * fabrics: re-read the discovery log page when a discovery controller reconnected
  * json: Support uint64 types serialization for older json-c versions
  * meson: we don't need a c++ compiler
  * new solidigm plugin
  * nvme, plugins: fix __u64 -&gt; unsigned long long assumptions
  * nvme-print: Add missing values in id-ctrl for JSON output
  * nvme-print: Handle NULL hostid in JSON output
  * nvme-print: Output 128bit values as uint128 type instead of double
  * nvme-print: Print fguid as a UUID
  * nvme-print: Use uint128 JSON function for media_units_written
  * nvme-print: decode MI status values
  * nvme-print: decode status types
  * nvme-print: fix wrong json key
  * nvme-print: sanitize the get-feature async event config output
  * nvme: Add helper function to parse 16-bit comma separated list
  * nvme: Add nvme_cmd wrapper for get_features
  * nvme: Add show-topology command
  * nvme: Add wrapper for Format NVM
  * nvme: Add wrapper for Sanitize NVM
  * nvme: Add wrappers for Get Log page helpers
  * nvme: Add wrappers for Identify controller lists
  * nvme: Add wrappers for NS attach/detach
  * nvme: Add wrappers for NS management functions
  * nvme: Add wrappers for basic NS identify
  * nvme: Add wrappers for firmware commands
  * nvme: Do not print error message in collect_effects_log helper
  * nvme: Fix set feature command to get feature identifier 0Dh length as zero
  * nvme: Introduce a union in struct nvme_dev for different transport types
  * nvme: Introduce nvme_cli_ wrappers, wrap identify and identify_ctrl
  * nvme: Make static nvme_dev private to open_dev(), use locals elsewhere
  * nvme: Masks SSTAT in sanize-log output
  * nvme: Remove static nvme_dev, allocate on open instead
  * nvme: Set default rae value for nvme_get_nsid_log users
  * nvme: Simplify ns list identify
  * nvme: Use correct print format specifier for sizeof arguments
  * nvme: Use local struct nvme_dev for show_registers &amp; map_registers
  * nvme: check if cfg.metadata is NULL before passing it to strlen()
  * nvme: use helpers for checking status types
  * plugins/innogrit: Include timer.h
  * plugins/innogrit: add smart items for smart-log-add
  * plugins/micron-nvme: Use correct print format specifier for sizeof arguments
  * plugins/ocp: Include timer.h
  * plugins/ocp: Output 128bit values as uint128 type instead of double
  * plugins/ocp: drop unused fd argument
  * plugins/ocp: pass struct nvme_dev to internal functions
  * plugins/seagate: Add support for OCP
  * plugins/solidigm: fix return value on format parse failure
  * plugins/toshiba: pass struct nvme_dev rather than fd + name
  * plugins/virtium: Output 128bit values as uint128 type instead of double
  * plugins/wdc: Add support for SN660 drive
  * plugins/wdc: Add type case for feature id
  * plugins/wdc: Output 128bit values as uint128 type instead of double
  * plugins/wdc: fix memset() on the address of a pointer
  * plugins/wdc: pass a struct nvme_dev around rather than a fd
  * plugins/wdc: pass struct nvme_dev rather than using global nvme_dev
  * plugins/wdc: prevent duplicate close on NVMe device
  * plugins/wdc: remove fd argument from print functions
  * plugins/ytmc: pass struct nvme_dev rather than fd + name
  * plugins: Use PRIu64 format specifier for 64bit types
  * print: Add Controller Ready Timeout Exceeded HW error code
  * print: Fix nvme_id_uuid_list
  * solidgm: fix initialization warning
  * solidigm: Added parsing for telemetry customer screenable data
  * solidigm: Fix printf format for size_t variable
  * solidigm: Updated Telemetry parsing code to MIT license.
  * subprojects/libnvme: update for MI admin command coverage
  * tests: Update license to GPL-2.0-or-later
  * tree: Add NVMe-MI support
  * tree: Add dev_fd() helper
  * tree: Change nvme_dev from global to static
  * tree: Combine NVMe file descriptor into struct nvme_dev
  * tree: Move global device info to a single struct
  * tree: fail on non-negative return values from parse_and_open
  * udev: Add HOST_IFACE to udev rule
  * util/json.h: Add json_object_get_uint64 fallback implementation
  * util/json: Add 128 bit JSON helpers
  * util/types: Add 128 bit conversion helpers
  * util: Fix le128_to_cpu on big-endian
  * util: Fix le128_to_cpu on little-endian
  * util: Move common type conversion helpers into util section
  * utils/json: Add json_object_new_uint64 for json-c &lt; 0.14
  * utils: Fix uint128_t usage
  * various fixes reported by coverity
  * version reporting includes library version
  * wdc:  OCP Log page updates and fixes
  * wrapper: Add weak nvme_init_copy_range_f1 symbol
  * wrapper: Call library version of nvme_init_copy_range_f1
  * wrapper: Update SPDIX license
  * zns.c: report zones should be started after retrieved zone
- Drop upsreamp patches
  * remove 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
  * remove 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
  * remove 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * remove 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
  * remove 0005-fabrics-Honor-config-file-for-connect-all.patch
  * remove 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
  * remove 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * remove 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * remove 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * remove 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * remove 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * remove 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * remove 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * remove 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * remove 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch
- Handle suse-missing-rclink lint warnings by providing the symlinks
- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- Mark no binaries rpms as noarch</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 2.2.1+3.gd028407:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Add %check section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- spec file: fix "check" section (bsc#1207686)
- add "Provides: nvmeof-boot-support = 0.1"</changelog>
  <changelog author="daniel.wagner@suse.com" date="1684929600">- Update to version v2.4 (jsc#PED-553 jsc#PED-3884)
  - Sanitize traddr and trsvcid avoid buffer overrun (bsc#1207435)
  * json_discovery_log: avoid buffer overrun
  - Extend udev rule to pass --host-interface argument to nvme-cli (bsc#1208001)
  * udev: Add HOST_IFACE to udev rule
  - Build documentation to be up to date
  - Fix build warning (git-fixes)
  * fabrics: 'e-&gt;traddr' is static
  - Improvements for supported-log-pages (bsc#1209550)
  * nvme-doc: update man page for supported-log-pages
  * nvme-print: sanitize supported-log-pages output
  - Fix read command (bsc#1209564)
  * nvme: fix block count and data size logic
  - Fix mounting filesystems via fstab (bsc#1208075)
  * fabrics: Fix ordering for auto connect services
  - Update host_traddr when using config.json file (bsc#1210089)
  * fabrics: fix fc config JSON file handling
  - remove 0100-harden_nvmf-connect@.service.patch
- Added compat commands for nbft back
- Changed default behavior of connect-all to match with old nbft
  behavior
- Replaced old nbft implementation with upstream one
- Rebuild documentation on package update
- Set version-tag so that version are correctly reported
- Fix connect nbft regressions (bsc#1209905)
  * fabrics: fix argc in show_nbft_compat_cmd()
- Fix auto connect conditions (bsc#1210105)
  * fabrics: fix conditions in nvmf-autoconnect.service
- Fix auto boot for NBFT connections (bsc#1211647)
  * fabrics: add udev rule to avoid renaming nbft interfaces
  * fabrics: autoconnect: add service unit for connecting NBFT subsystems</changelog>
  <changelog author="dwagner@suse.de" date="1690459200">- Update to version 2.4+24.ga1ee20:
  * nvme-print-stdout: Do not show non reachable ns in namespace topology (bsc#1212598)
  * nvme-print-stdout: List only ctrls which are part of ns bsc#1212598)
  * nvme-print-stdout: Support subsys reachable from several hosts bsc#1212598)
  * ccan: Add htable, strset and dependencies bsc#1212598)
  * ccan: Remove unused documentation bsc#1212598)
  * nvme-print: fix counter while looping through uuid_list (bsc#bsc#1212598)
  * nvme-print: Show subsystem iopolicy (bsc#1124564)</changelog>
  <changelog author="dwagner@suse.de" date="1693915200">- Update to version 2.4+25.g367eb9:
  * json: fix seg. fault converting NULL to JSON string (bsc#1213762)</changelog>
  <changelog author="dwagner@suse.de" date="1699012800">- Update to version 2.4+31.gf7ec09:
  * udev-rules: rename netapp udev rule (bsc#1215994)
  * udev-rules: set ctrl_loss_tmo to -1 for ONTAP NVMe/TCP (bsc#1215994)
  * udev-rule: apply round-robin iopolicy on i/o subsystems alone (bsc#1215994)
  * fabrics: For TCP/RDMA, compare IP addresses with nvme_ipaddrs_eq() (bsc#1213768)
  * fabrics: lookup_discovery_ctrl() must look under host and not root (bsc#1213768)
  * fabrics: only look for matching ctrl on same host (bsc#1213768)</changelog>
  <changelog author="dwagner@suse.de" date="1712232000">- Update to version 2.4+32.g2e2531a:
  * nvme-netapp: add nspath tlv handling (bsc#1220971)</changelog>
</package>
<package pkgid="9c8522610c04acfdcce1acdc6f7cb940bd33601569bc2a9f3b6edba792b0fcfb" name="nvme-cli" arch="x86_64">
  <version epoch="0" ver="2.4+32.g2e2531a" rel="150500.4.15.3"/>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 2.0~2:
  * Adapt to logging API changes in libnvme
  * Adapt to scan API changes in libnvme
  * Reworked error message handling
  * Fix 'list-ns' (bsc#1195151)
  * Add 'gen-tls-key' and 'check-tls-key'
  * Add Media Unit Status log page support
  * Cleanups and build fixes
- Fix path to systemctl (bsc#1193699)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v2.0-rc3:
  * nvme-print: Fix json output for list-subsys
  * nvme: Allow --verbose flag to increase log level
  * Added telemetry log fetch support for SN810, SN530 and SN740 series NVMe SSDs through wdc vs-internal-log command
  * nvmf: Remove --matching from systemd service file (bsc#1195665)
  * nvme: Fix --force flag inversion (bsc#1195637)
  * nvme: Add support for data area 4 to get-telemetry-log
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme-print: Add NVME_FEAT_FID_ENH_CTRL_METADATA to nvme_feature_to_string
  * nvme-print: remove unused nvme_show_id_ctrl function
  * nvme: Add nvm-id-ns-lba-format(CNS 0Ah) command from TP4095
  * nvme: Add NVM Command Set specific identify namespace command
  * nvme: Add id-ns-lba-format(CNS 09h) command from TP4095
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
- Include precompiled documentation</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 2.0-rc4:
  * netapp-nvme: free the nsdescs pointer after use
  * netapp-nvme: fix ontapdevices segfault in json output
  * nvme-print: fix 'nvme list -o json' segfault
  * nvme: get_ns_id command fails on nvme device
  * wdc: updated products list for telemetry (--type) argument
  * docs: fix typo in Data Set Management section
  * Fix ctrlist for attach-ns and detach-ns
  * netapp-nvme: fix nvme ns desc uuid handling for ontapdevices
  * wdc: Fix use-after-free access of cbs_data
  * Fixed regression with 'open namespace exclusive' (bsc#1195945)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 2.0-rc5:
  * nvme: passthru bugfix(wrong jump, wrong file descriptor)
  * nvme-cli: Ignore traddr case (bsc#1194025)
  * nvme: fix segfault in nvme telemetry-log error handling
  * fabrics: ensure zero kato for non-persistent controllers
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 2.0-rc6:
  * nvme: print out ANA state for 'list-subsys' (bsc#1195938)
  * nvme: Explicit initialize all command line options (bsc#1195945)
  * nvme: Explicit initialize passthru command line options
  * nvme: list_ns bug fix (csi option enable)
  * nvme: nvme write bug fix (no parse for option)
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 2.0-rc7:
  * netapp-nvme: fix smdevices segfault in json output (bsc#1195937)
  * fabrics: keep the backward compatibility
  * nvme: Do not slash escape strings in JSON output (bsc#1195937)
  * nvme: Print full device path
  * nvme-print: Make JSON keys consistent with nvme-cli 1.x
  * nvme-print: print generic device in list command
  * fabrics: check for discovery controller instead of subsystem NQN (bsc#1197061)
  * connect: Set errno to zero on nvmf_add_ctrl() success
  * documenation updates
- Set path to systemctl via newly introduced config option
- Update 0100-harden_nvmf-connect@.service.patch due to upstream file rename
- Moved bash completion script to /usr/share/bash-completion/completions/nvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647950400">- Fix install conflict caused by new bash completion script
  location (bsc#1197365).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 2.0-rc8:
  * fabrics: Add DIM command
  * fabrics: Introduce force flag to overwrite persistence logic (bsc#1197076)
  * fabrics: Free non-matching controller during discovery
  * fabrics: add 'nvme config' command
  * fabrics: Correctly stringify discovery.conf and config.json paths
  * nvme-print: Add human readable print for nsattr field
  * nvme-print: Update Persistent Event log fields
  * nvme-print: print discovery async event support
  * nvme-rpmb: Fix spelling for 'Partition'
  * nvme-copy: add missing field to the command
  * nvme: add get_mi_cmd_support_effects_log command
  * nvme: Fixup namespace filtering yet again
  * nvme: Use type bool for OPT_FLAG
  * nvme: use filter for 'list-subsys &lt;devname&gt;' (bsc#1195938)
  * Add lbstm option to create-ns
  * argconfig: Do not use default value loading by getopt_long_only
  * argconfig: Rename CFG_NONE to CFG_FLAG
  * plugins: Use type bool for OPT_FLAG
  * documenation updates
- Drop 'ProtectKernelTunables=true' (bsc#1197076)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 2.0:
  * fabrics: Create persistent controller using unique subsystem NQN (bsc#1198243)
  * fabrics: Set KATO for discovery controller when connecting
  * fabrics: Do no modify default config for discovery controller
  * fabrics: Set default trsvcid ports for TCP and RDMA (bsc#1195858)
  * fabrics: Support connect even when no /etc/nvme/hostnqn file exists
  * nvme: update to nvme_scan_filter_t modifications (bsc#1195938)
  * plugins/intel: make 'buckets' a json array
  * plugins: Update WDC capabilities command with new commmands
  * plugins: Add OCP plugin</changelog>
  <changelog author="dwagner@suse.de" date="1654603200">- fabrics: Already connected uses a different error code (bsc#1199994)
  * add 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
- fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * add 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
- nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)
  * add 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * add 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
- fabrics: Honor config file for connect-all (bsc#1199504)
  * add 0005-fabrics-Honor-config-file-for-connect-all.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * add 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
- Fabrics related bug fixes
  * add 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * add 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * add 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * add 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * add 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * add 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * add 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * add 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * add 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 2.2.1 (jsc#ped-553):
  * Added parsing for Solidigm telemetry observable data.
  * Revert "udev: re-read the discovery log page when a discovery controller reconnected"
  * add item ddr_ecc_err_cnt in smart-log-add
  * build and install fixes/improvements
  * build: Add minimum build requirement on libnvme
  * build: Drop dependency on libuuid
  * build: Extend release script to support micro version releases
  * build: Fix endian check for cross build
  * build: Remove unused uuid.wrap file
  * build: Remove unusned uuid.h include
  * build: Update release version rules
  * build: Update version before regenerating docs
  * completions: Add show-topology tab completion
  * documentation fixes
  * fabrics: Avoid nvme_scan_ctrl when disconnecting
  * fabrics: Honor JSON config file in connect-all command
  * fabrics: Remove dhchap-ctrl-secret from discover/connect-all
  * fabrics: Trigger auto connect if config.json exists
  * fabrics: fix 'persistent' handling during connect-all with JSON file
  * fabrics: nvme config --modify depends on -n and -t argument
  * fabrics: re-read the discovery log page when a discovery controller reconnected
  * json: Support uint64 types serialization for older json-c versions
  * meson: we don't need a c++ compiler
  * new solidigm plugin
  * nvme, plugins: fix __u64 -&gt; unsigned long long assumptions
  * nvme-print: Add missing values in id-ctrl for JSON output
  * nvme-print: Handle NULL hostid in JSON output
  * nvme-print: Output 128bit values as uint128 type instead of double
  * nvme-print: Print fguid as a UUID
  * nvme-print: Use uint128 JSON function for media_units_written
  * nvme-print: decode MI status values
  * nvme-print: decode status types
  * nvme-print: fix wrong json key
  * nvme-print: sanitize the get-feature async event config output
  * nvme: Add helper function to parse 16-bit comma separated list
  * nvme: Add nvme_cmd wrapper for get_features
  * nvme: Add show-topology command
  * nvme: Add wrapper for Format NVM
  * nvme: Add wrapper for Sanitize NVM
  * nvme: Add wrappers for Get Log page helpers
  * nvme: Add wrappers for Identify controller lists
  * nvme: Add wrappers for NS attach/detach
  * nvme: Add wrappers for NS management functions
  * nvme: Add wrappers for basic NS identify
  * nvme: Add wrappers for firmware commands
  * nvme: Do not print error message in collect_effects_log helper
  * nvme: Fix set feature command to get feature identifier 0Dh length as zero
  * nvme: Introduce a union in struct nvme_dev for different transport types
  * nvme: Introduce nvme_cli_ wrappers, wrap identify and identify_ctrl
  * nvme: Make static nvme_dev private to open_dev(), use locals elsewhere
  * nvme: Masks SSTAT in sanize-log output
  * nvme: Remove static nvme_dev, allocate on open instead
  * nvme: Set default rae value for nvme_get_nsid_log users
  * nvme: Simplify ns list identify
  * nvme: Use correct print format specifier for sizeof arguments
  * nvme: Use local struct nvme_dev for show_registers &amp; map_registers
  * nvme: check if cfg.metadata is NULL before passing it to strlen()
  * nvme: use helpers for checking status types
  * plugins/innogrit: Include timer.h
  * plugins/innogrit: add smart items for smart-log-add
  * plugins/micron-nvme: Use correct print format specifier for sizeof arguments
  * plugins/ocp: Include timer.h
  * plugins/ocp: Output 128bit values as uint128 type instead of double
  * plugins/ocp: drop unused fd argument
  * plugins/ocp: pass struct nvme_dev to internal functions
  * plugins/seagate: Add support for OCP
  * plugins/solidigm: fix return value on format parse failure
  * plugins/toshiba: pass struct nvme_dev rather than fd + name
  * plugins/virtium: Output 128bit values as uint128 type instead of double
  * plugins/wdc: Add support for SN660 drive
  * plugins/wdc: Add type case for feature id
  * plugins/wdc: Output 128bit values as uint128 type instead of double
  * plugins/wdc: fix memset() on the address of a pointer
  * plugins/wdc: pass a struct nvme_dev around rather than a fd
  * plugins/wdc: pass struct nvme_dev rather than using global nvme_dev
  * plugins/wdc: prevent duplicate close on NVMe device
  * plugins/wdc: remove fd argument from print functions
  * plugins/ytmc: pass struct nvme_dev rather than fd + name
  * plugins: Use PRIu64 format specifier for 64bit types
  * print: Add Controller Ready Timeout Exceeded HW error code
  * print: Fix nvme_id_uuid_list
  * solidgm: fix initialization warning
  * solidigm: Added parsing for telemetry customer screenable data
  * solidigm: Fix printf format for size_t variable
  * solidigm: Updated Telemetry parsing code to MIT license.
  * subprojects/libnvme: update for MI admin command coverage
  * tests: Update license to GPL-2.0-or-later
  * tree: Add NVMe-MI support
  * tree: Add dev_fd() helper
  * tree: Change nvme_dev from global to static
  * tree: Combine NVMe file descriptor into struct nvme_dev
  * tree: Move global device info to a single struct
  * tree: fail on non-negative return values from parse_and_open
  * udev: Add HOST_IFACE to udev rule
  * util/json.h: Add json_object_get_uint64 fallback implementation
  * util/json: Add 128 bit JSON helpers
  * util/types: Add 128 bit conversion helpers
  * util: Fix le128_to_cpu on big-endian
  * util: Fix le128_to_cpu on little-endian
  * util: Move common type conversion helpers into util section
  * utils/json: Add json_object_new_uint64 for json-c &lt; 0.14
  * utils: Fix uint128_t usage
  * various fixes reported by coverity
  * version reporting includes library version
  * wdc:  OCP Log page updates and fixes
  * wrapper: Add weak nvme_init_copy_range_f1 symbol
  * wrapper: Call library version of nvme_init_copy_range_f1
  * wrapper: Update SPDIX license
  * zns.c: report zones should be started after retrieved zone
- Drop upsreamp patches
  * remove 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
  * remove 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
  * remove 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * remove 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
  * remove 0005-fabrics-Honor-config-file-for-connect-all.patch
  * remove 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
  * remove 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * remove 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * remove 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * remove 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * remove 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * remove 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * remove 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * remove 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * remove 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch
- Handle suse-missing-rclink lint warnings by providing the symlinks
- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- Mark no binaries rpms as noarch</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 2.2.1+3.gd028407:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Add %check section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- spec file: fix "check" section (bsc#1207686)
- add "Provides: nvmeof-boot-support = 0.1"</changelog>
  <changelog author="daniel.wagner@suse.com" date="1684929600">- Update to version v2.4 (jsc#PED-553 jsc#PED-3884)
  - Sanitize traddr and trsvcid avoid buffer overrun (bsc#1207435)
  * json_discovery_log: avoid buffer overrun
  - Extend udev rule to pass --host-interface argument to nvme-cli (bsc#1208001)
  * udev: Add HOST_IFACE to udev rule
  - Build documentation to be up to date
  - Fix build warning (git-fixes)
  * fabrics: 'e-&gt;traddr' is static
  - Improvements for supported-log-pages (bsc#1209550)
  * nvme-doc: update man page for supported-log-pages
  * nvme-print: sanitize supported-log-pages output
  - Fix read command (bsc#1209564)
  * nvme: fix block count and data size logic
  - Fix mounting filesystems via fstab (bsc#1208075)
  * fabrics: Fix ordering for auto connect services
  - Update host_traddr when using config.json file (bsc#1210089)
  * fabrics: fix fc config JSON file handling
  - remove 0100-harden_nvmf-connect@.service.patch
- Added compat commands for nbft back
- Changed default behavior of connect-all to match with old nbft
  behavior
- Replaced old nbft implementation with upstream one
- Rebuild documentation on package update
- Set version-tag so that version are correctly reported
- Fix connect nbft regressions (bsc#1209905)
  * fabrics: fix argc in show_nbft_compat_cmd()
- Fix auto connect conditions (bsc#1210105)
  * fabrics: fix conditions in nvmf-autoconnect.service
- Fix auto boot for NBFT connections (bsc#1211647)
  * fabrics: add udev rule to avoid renaming nbft interfaces
  * fabrics: autoconnect: add service unit for connecting NBFT subsystems</changelog>
  <changelog author="dwagner@suse.de" date="1690459200">- Update to version 2.4+24.ga1ee20:
  * nvme-print-stdout: Do not show non reachable ns in namespace topology (bsc#1212598)
  * nvme-print-stdout: List only ctrls which are part of ns bsc#1212598)
  * nvme-print-stdout: Support subsys reachable from several hosts bsc#1212598)
  * ccan: Add htable, strset and dependencies bsc#1212598)
  * ccan: Remove unused documentation bsc#1212598)
  * nvme-print: fix counter while looping through uuid_list (bsc#bsc#1212598)
  * nvme-print: Show subsystem iopolicy (bsc#1124564)</changelog>
  <changelog author="dwagner@suse.de" date="1693915200">- Update to version 2.4+25.g367eb9:
  * json: fix seg. fault converting NULL to JSON string (bsc#1213762)</changelog>
  <changelog author="dwagner@suse.de" date="1699012800">- Update to version 2.4+31.gf7ec09:
  * udev-rules: rename netapp udev rule (bsc#1215994)
  * udev-rules: set ctrl_loss_tmo to -1 for ONTAP NVMe/TCP (bsc#1215994)
  * udev-rule: apply round-robin iopolicy on i/o subsystems alone (bsc#1215994)
  * fabrics: For TCP/RDMA, compare IP addresses with nvme_ipaddrs_eq() (bsc#1213768)
  * fabrics: lookup_discovery_ctrl() must look under host and not root (bsc#1213768)
  * fabrics: only look for matching ctrl on same host (bsc#1213768)</changelog>
  <changelog author="dwagner@suse.de" date="1712232000">- Update to version 2.4+32.g2e2531a:
  * nvme-netapp: add nspath tlv handling (bsc#1220971)</changelog>
</package>
<package pkgid="6f29b339f177015b38a9e225f446ab4ea7bd4281cadce43cffe3acc26fcc583b" name="oniguruma" arch="src">
  <version epoch="0" ver="6.7.0" rel="150000.3.6.1"/>
  <changelog author="mrueckert@suse.de" date="1135684800">- Initial package of version 2.5.1</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="mrueckert@suse.de" date="1159531200">- update to version 2.5.7:
  many fixes.</changelog>
  <changelog author="gber@opensuse.org" date="1281787200">- update to version 5.9.2:
  + many fixes
- cleanup:
  + split into liborig2 and oniguruma-devel subpackages
  + corrected license information
  + changed summary to conform with policy</changelog>
  <changelog author="i@marguerite.su" date="1410004800">- update version 5.9.5
  * [impl] escape warnings for -Wall.
  * [impl] remove unused variable.
- changes in 5.9.4
  * [dist] add oniguruma.pc.in file
- changes in 5.9.3
  * fix print_tree ENCLOSE_OPTION bug</changelog>
  <changelog author="i@marguerite.su" date="1445428800">- update version 5.9.6
  * [impl] add onigenc_end_unicode().
  * [impl] add onig_add_end_call().</changelog>
  <changelog author="mrueckert@suse.de" date="1456833600">- remove ruby build requires. seems unused.</changelog>
  <changelog author="mrueckert@suse.de" date="1502107200">- Version 6.5.0
  - [new] support Absent clear (Absent functions)
  - abolish configure option: --enable-combination-explosion-check
  - [new] support Absent functions (?~...)
  - fix #65: SIZEOF_SIZE_T doesn't exist on certain architecutres
  - [new] support \O (true anychar)
  - [new] support \K (keep)
  - add new node type: NODE_GIMMICK
  - [new] support \N (no newline)
  - [new] support \R (general newline)
  - [new] support if-then-else syntax
  - [new] support backref validity checker
- Version 6.4.0
  - fix memory leaks
  - change encoding of doc/XXXX.ja from EUC-JP to UTF-8
  - update doc/RE, and doc/RE.ja
  - fix fatal bug of endless repeat check on Windows
  - PR #62 : add check for return values
  - [new] support call zero (\g{0})
  - [new] support relative call by positive number
  - [new] support relative back-reference by positive number
  - fix #60 : check value type
  - change output format for ONIG_DEBUG_COMPILE and
    ONIG_DEBUG_MATCH
- Version 6.3.0
  - fix #60 : invalid state(CCS_VALUE) in parse_char_class()
  - fix #59 : access to invalid address by reg-&gt;dmax value
  - fix invalid increment of start position in onig_scan()
  - fix #58 : access to invalid address by reg-&gt;dmin value
  - fix #57 : DATA_ENSURE() check must be before data access
  - fix #56 : return invalid result for codepoint 0xFFFFFFFF
  - [new] add \o{17777777777} syntax.
  - fix #55 : Byte value expressed in octal must be smaller than
    256
- Version 6.2.0
  - fix: size in xmemcpy in stack_double (PR #51)
  - Initialize return value
  - NEW API: add onig_set_capture_num_limit()
  - change MemNumType from short int to int
  - fix: [0-9-a] was not allowed as [0-9\-a]
  - fix: illegal capture after recursive call
  - fix: problem with optimization of \z
  - fix: .* optimization
  - Set a limit of parser recursion
  - fix; that warnings are not shown properly
  - fix: /[a-c#]+\W/ =~ "def#" fails when encoding is UTF-16/32
  - fix: /[\x{0}-X]/i doesn't match properly when UTF-16/32 is
    used.
- Version 6.1.3
  - fix: Syntax error: redirection unexpected (expecting word) #35
- Version 6.1.2
  - allow word bound, word begin and word end in look-behind.
  - add ONIG_OPTION_CHECK_VALIDITY_OF_STRING option.
  - fix use after free node.
  - fix memory leaks after parsing regexp error.
  - implement many of is_valid_mbc_string().
- Version 6.1.1
  - fix segfault /W.?{888}{888}{888}\x00/ (found by libfuzzer)
  - fix error unmatched close parenthesis for %{(.*?)} #23
- Version 6.1.0
  - add contributed/libfuzzer-onig.cpp  (thanks hannob)
  - update LTVERSION 4:0:0
  - NEW API: onigenc_is_valid_mbc_string().
  - add is_valid_mbc_string() member into OnigEncodingType.
  - fix out of bounds read.
  - disable USE_INVALID_CODE_SCHEME.
  - doc/RE improved.
  - add onig_scan() into doc/API.
  - fix bug: Out of bounds read in onig_strcpy() #17
  - fix bug: infinite loop of backreference and group.
  - fix out of bounds read in mbc_to_code() #16
  - doc/RE refinements.
  - add onig_scan() (NEW API)
  - reimplement match stack allocation for case too many repeat
  - and too many captures in regexp.
  - number of captures &lt;= 32767 for bytecode representation.
  - don't use int_map_backward for thread-safe.
  - fix case of enclosed option in look-behind.
  - fix ignore case in look-behind.
  - fix memory leak in onig_unicode_define_user_property()
  - declare variables at the top of scope.  (thanks nmaya)
- Version 6.0.0
  - add NEW API: onig_unicode_define_user_property()
  - update Unicode data to 8.0.0
  - change OnigCodePoint type to unsigned int.
  - add doc/UNICODE_PROPERTIES.
  - add error code ONIGERR_FAIL_TO_INITIALIZE.
  - add make_win64/32.bat.
  - fix bug of uninitialized regex_t value on error.
  - reimplement Unicode case folding.
  - update LTVERSION = 3.0.0
  - remove all THREAD_ macro.
  - add init member into OnigEncoding. (add onig_initialize())
  - remove state member of regex.
  - move source files into src/
  - rename configre.in to configure.ac.
  - fix memory leak. (thanks pigzang)
  - change mail address.</changelog>
  <changelog author="avindra@opensuse.org" date="1514030400">- Version 6.7.0
  - add ONIG_SYNTAX_ONIGURUMA (default syntax)
  - restructure StackType
  - implement subexp calls (?R), (?&amp;name), (?-n), (?+n) for Perl
    syntax
  - use string pool of gperf for Unicode Property lookup function
  - fix an empty greedy regex and a word boundary (.*\b) fails
  - remove a stack type STK_POS
  - add a declaration of onig_end()
  - fix compilation failure in out-of-source build
  - [new] hexadecimal codepoint \uHHHH
- Version 6.6.1
  - fix definition of \X to (?&gt;\O(?:\Y\O)*)
- Version 6.6.0
  - rename Absent clear to Range clear
  - [new] Extended Grapheme Cluster \X and boundary \y, \Y
  - fix: invalid index(ctype) value assigned to Unicode Block
    properties
  - --enable-crnl-as-line-terminator to be deprecated
  - [new] ASCII only mode options (?WDSP)
  - [new] ONIG_OPTION_XXXX_IS_ASCII  options
  - disable OP_CCLASS_NODE
  - [spec] Absent clear restore previous range value at backtrack
  - optimize for simple one char repetition in Absent expression
  - fix: invalid impl. for reluctant repetition in Absent expression
  - remove compile switch USE_NAMED_GROUP
  - Visual Studio 2005 compilation fixed
- cleanup with spec-cleaner</changelog>
  <changelog author="mrueckert@suse.de" date="1661515200">- Added d3e402928b6eb3327f8f7d59a9edfa622fec557b.patch: (boo#1157805 CVE-2019-19246)
  oniguruma: Heap-based buffer over-read in str_lower_case_match in regexec.c
- Added 6eb4aca6a7f2f60f473580576d86686ed6a6ebec.patch: (boo#1164569 CVE-2019-19204)
  oniguruma: heap-based buffer over-read in function fetch_interval_quantifier in regparse.c
- Added aa0188eaedc056dca8374ac03d0177429b495515.patch: (boo#1164550 CVE-2019-19203)
  oniguruma: heap-based buffer over-read in function gb18030_mbc_enc_len in file gb18030.c
- Added 4097828d7cc87589864fecf452f2cd46c5f37180.patch: (boo#1150130 CVE-2019-16163)
  oniguruma: stack Exhaustion in regcomp.c because of recursion in regparse.c.
- Added cbe9f8bd9cfc6c3c87a60fbae58fa1a85db59df0.patch: (boo#1177179 CVE-2020-26159)
  oniguruma: Buffer overflow in concat_opt_exact_str could result in DoS
- Added 0f7f61ed1b7b697e283e37bd2d731d0bd57adb55.patch: (boo#1142847 CVE-2019-13224)
  oniguruma: use-after-free in onig_new_deluxe() in regext.c</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1720008000">- Added oniguruma-6.8.2-CVE-2019-13225-fix.patch (boo#1141157 CVE-2019-13225)
  oniguruma: null-pointer dereference in match_at() in regexec.c</changelog>
</package>
<package pkgid="409d892ce467410bced8c04d25721b8a5135a2293d08acd8ba1b4f7fc4e7175a" name="open-iscsi" arch="aarch64">
  <version epoch="0" ver="2.1.9" rel="150500.46.3.1"/>
  <changelog author="lduncan@suse.com" date="1635163200">- Fix the usr-merge changes (bsc#1192013). This includes catching
  all the places that /sbin was still used directly, as well as
  making the SPEC file build using /usr/sbin for openSUSE but
  still use /sbin for SLE, for now.</changelog>
  <changelog author="lduncan@suse.com" date="1636632000">- Merged latest upstream. Mostly cleanup, but includes a fix for
  iscsi-init.service when trying to write to the root volume too
  early (bsc#1192568), as well as an upstream fix for possible
  deadlock when dealing with sysfs.</changelog>
  <changelog author="lduncan@suse.com" date="1644840000">- Updated to latest upstream 2.1.6 as 2.1.6-suse, which contains
  bug fixes and cleanups. See the Changelog for more details.</changelog>
  <changelog author="lduncan@suse.com" date="1646481600">- Update to latest upstream, including test cleanup, minor
  bug fixes (cosmetic), and fixing iscsi-init (bsc#1195656).</changelog>
  <changelog author="lduncan@suse.com" date="1649246400">- Updated to latest upstream, including bug fixes and cleanups.
  Changes included:
  * add handling name/value pairs for firmware login (bsc#1196113),
    including man page update for same
  * Fix bug where some package parts were installed using
    DESTDIR twice
  * general build cleanup (in prep for removing DB files from
    /etc/iscsi some day soon)
  Also, now delivering a "package config" file for libopeniscsiusr.</changelog>
  <changelog author="lduncan@suse.com" date="1651838400">- Updated to latest upstream version, tagged 2.1.7. Changes
  included:
  * updated/fixed test script
  * updated build system
  * several bug fixes, including one for bsc#1199264</changelog>
  <changelog author="lduncan@suse.com" date="1652097600">- Update to latest upstream, including:
  * Added 'distclean' to Makefile targets
  * Ensure Makefile '.PHONY' targets set up correctly
  * fix an iscsid logout bug generating a false error
    and cleanup logout error messages</changelog>
  <changelog author="lduncan@suse.com" date="1652443200">- Set initiatorname in %post (at end of install), for cases
  where root is read-only at startup time (bsc#1198457)</changelog>
  <changelog author="lduncan@suse.com" date="1655467200">- For Tumbleweed, moved logrotate files from user-specific
  directory /etc/logrotate.d to vendor-specific
  /usr/etc/logrotate.d
  (for Stefan Schubert &lt;schubi@suse.com&gt;)</changelog>
  <changelog author="lduncan@suse.com" date="1657108800">- Modify SPEC file so systemd unit files are mode 644 (not 755)
  (bsc#1200570)</changelog>
  <changelog author="lduncan@suse.com" date="1664193600">- Update to upstream version 2.1.8, which includes some bug fixes,
  and adds the ability to build using meson. The SPEC file was
  updated to use meson.
  Also, some files have moved:
  * the "lock" file has moved from /etc/iscsi to /var/lock/iscsi
  * the "database files" have moved from /etc/iscsi to
    /var/lib/iscsi</changelog>
  <changelog author="lduncan@suse.com" date="1668600000">- Updated to latest upstream. Changes:
  * iscsid/iscsiuio: fix OOM adjustment (github issue #377)</changelog>
  <changelog author="lduncan@suse.com" date="1670414400">- Moving DB files from /etc/iscsi/* to /var/lib/iscsi/* for
  SLE-15-SP5 and forward, as is done in Tumbleweed.
- Added /etc/iscsi/README.DB-files-moved, and added SPEC file
  changes to support this, including a post-install script to
  move the DB files, only installed if DB files are moved.
- Renamed shared library from libopeniscsiusr0_2_0 to
  libopeniscsiusr0, to correctly match SONAME in library.</changelog>
  <changelog author="lduncan@suse.com" date="1671451200">- Updated SPEC file dependencies for libopeniscsiusr to avoid
  conflicting package installation.</changelog>
  <changelog author="lduncan@suse.com" date="1671624000">- Update iscsid.service so it starts iscsid.socket, if needed
  (bsc#1206132).</changelog>
  <changelog author="lduncan@suse.com" date="1677326400">- Build system: meson builds were ignoring optflags, and other
  passed in compiler options.</changelog>
  <changelog author="lduncan@suse.com" date="1681732800">- Remove "--strip" in SPEC file for meson build, so that
  debuginfo is generated. (from mwilck) (bsc#1210536)</changelog>
  <changelog author="lduncan@suse.com" date="1686830400">- Upgrade to upstream version 2.1.9 with tag "2.1.9-suse"
  (bsc#1210514), replacing open-iscsi-2.1.8-suse.tar.bz2 with
  open-iscsi-2.1.9-suse.tar.bz2, and resetting
  open-iscsi-SUSE-latest.diff.bz2. A summary from the ChangeLog
  file:
  * Fix discoveryd compiler warning
  * Sync iscsi_if.h with kernel
  * Handle old DB records correctly
  * Make IQN configuration for iscsi-iname
  * remove OFFLOAD_BOOT_SUPPORTED, which is always true
  * Use UUID for IPC, not "root"
  * do not support SHA3 for libressl
  * build meson cleanups, including changing default DB home
  * Updated README about NOPs
  * Remove "BindTo" in systemd service file
  * Some iscsiuio fixes, including licensing and memory leaks
    (bsc#1210514)
  * Small netlink fixes
  * Fix OOM adjustment
  * Some error recovery fixes
  * Some spelling fixes</changelog>
  <changelog author="lduncan@suse.com" date="1687262400">- Fix iscsiuio build version by updating iscsiuio/meson.build
  and RPM SPEC file (bsc#1210514), updating
  open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1698235200">- Updated to latest upstream, which includes (bsc#1210514):
  * several fixes to harden iscsiuio, including:
  - logging now uses syslog
  - shutdown now waits for helper threads to complete
  - netlink socket cleanup
  * some minor bug fixes, some helping builds on musl
  This updates iscsiuio version to 0.7.8.8.
  This updates open-iscsi-SUSE-latest.diff.bz2</changelog>
</package>
<package pkgid="b1760cc08916986596504e81ffa31cb8b39e3bfa7be7ab40a20f48d20c88f0b9" name="open-iscsi" arch="s390x">
  <version epoch="0" ver="2.1.9" rel="150500.46.3.1"/>
  <changelog author="lduncan@suse.com" date="1635163200">- Fix the usr-merge changes (bsc#1192013). This includes catching
  all the places that /sbin was still used directly, as well as
  making the SPEC file build using /usr/sbin for openSUSE but
  still use /sbin for SLE, for now.</changelog>
  <changelog author="lduncan@suse.com" date="1636632000">- Merged latest upstream. Mostly cleanup, but includes a fix for
  iscsi-init.service when trying to write to the root volume too
  early (bsc#1192568), as well as an upstream fix for possible
  deadlock when dealing with sysfs.</changelog>
  <changelog author="lduncan@suse.com" date="1644840000">- Updated to latest upstream 2.1.6 as 2.1.6-suse, which contains
  bug fixes and cleanups. See the Changelog for more details.</changelog>
  <changelog author="lduncan@suse.com" date="1646481600">- Update to latest upstream, including test cleanup, minor
  bug fixes (cosmetic), and fixing iscsi-init (bsc#1195656).</changelog>
  <changelog author="lduncan@suse.com" date="1649246400">- Updated to latest upstream, including bug fixes and cleanups.
  Changes included:
  * add handling name/value pairs for firmware login (bsc#1196113),
    including man page update for same
  * Fix bug where some package parts were installed using
    DESTDIR twice
  * general build cleanup (in prep for removing DB files from
    /etc/iscsi some day soon)
  Also, now delivering a "package config" file for libopeniscsiusr.</changelog>
  <changelog author="lduncan@suse.com" date="1651838400">- Updated to latest upstream version, tagged 2.1.7. Changes
  included:
  * updated/fixed test script
  * updated build system
  * several bug fixes, including one for bsc#1199264</changelog>
  <changelog author="lduncan@suse.com" date="1652097600">- Update to latest upstream, including:
  * Added 'distclean' to Makefile targets
  * Ensure Makefile '.PHONY' targets set up correctly
  * fix an iscsid logout bug generating a false error
    and cleanup logout error messages</changelog>
  <changelog author="lduncan@suse.com" date="1652443200">- Set initiatorname in %post (at end of install), for cases
  where root is read-only at startup time (bsc#1198457)</changelog>
  <changelog author="lduncan@suse.com" date="1655467200">- For Tumbleweed, moved logrotate files from user-specific
  directory /etc/logrotate.d to vendor-specific
  /usr/etc/logrotate.d
  (for Stefan Schubert &lt;schubi@suse.com&gt;)</changelog>
  <changelog author="lduncan@suse.com" date="1657108800">- Modify SPEC file so systemd unit files are mode 644 (not 755)
  (bsc#1200570)</changelog>
  <changelog author="lduncan@suse.com" date="1664193600">- Update to upstream version 2.1.8, which includes some bug fixes,
  and adds the ability to build using meson. The SPEC file was
  updated to use meson.
  Also, some files have moved:
  * the "lock" file has moved from /etc/iscsi to /var/lock/iscsi
  * the "database files" have moved from /etc/iscsi to
    /var/lib/iscsi</changelog>
  <changelog author="lduncan@suse.com" date="1668600000">- Updated to latest upstream. Changes:
  * iscsid/iscsiuio: fix OOM adjustment (github issue #377)</changelog>
  <changelog author="lduncan@suse.com" date="1670414400">- Moving DB files from /etc/iscsi/* to /var/lib/iscsi/* for
  SLE-15-SP5 and forward, as is done in Tumbleweed.
- Added /etc/iscsi/README.DB-files-moved, and added SPEC file
  changes to support this, including a post-install script to
  move the DB files, only installed if DB files are moved.
- Renamed shared library from libopeniscsiusr0_2_0 to
  libopeniscsiusr0, to correctly match SONAME in library.</changelog>
  <changelog author="lduncan@suse.com" date="1671451200">- Updated SPEC file dependencies for libopeniscsiusr to avoid
  conflicting package installation.</changelog>
  <changelog author="lduncan@suse.com" date="1671624000">- Update iscsid.service so it starts iscsid.socket, if needed
  (bsc#1206132).</changelog>
  <changelog author="lduncan@suse.com" date="1677326400">- Build system: meson builds were ignoring optflags, and other
  passed in compiler options.</changelog>
  <changelog author="lduncan@suse.com" date="1681732800">- Remove "--strip" in SPEC file for meson build, so that
  debuginfo is generated. (from mwilck) (bsc#1210536)</changelog>
  <changelog author="lduncan@suse.com" date="1686830400">- Upgrade to upstream version 2.1.9 with tag "2.1.9-suse"
  (bsc#1210514), replacing open-iscsi-2.1.8-suse.tar.bz2 with
  open-iscsi-2.1.9-suse.tar.bz2, and resetting
  open-iscsi-SUSE-latest.diff.bz2. A summary from the ChangeLog
  file:
  * Fix discoveryd compiler warning
  * Sync iscsi_if.h with kernel
  * Handle old DB records correctly
  * Make IQN configuration for iscsi-iname
  * remove OFFLOAD_BOOT_SUPPORTED, which is always true
  * Use UUID for IPC, not "root"
  * do not support SHA3 for libressl
  * build meson cleanups, including changing default DB home
  * Updated README about NOPs
  * Remove "BindTo" in systemd service file
  * Some iscsiuio fixes, including licensing and memory leaks
    (bsc#1210514)
  * Small netlink fixes
  * Fix OOM adjustment
  * Some error recovery fixes
  * Some spelling fixes</changelog>
  <changelog author="lduncan@suse.com" date="1687262400">- Fix iscsiuio build version by updating iscsiuio/meson.build
  and RPM SPEC file (bsc#1210514), updating
  open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1698235200">- Updated to latest upstream, which includes (bsc#1210514):
  * several fixes to harden iscsiuio, including:
  - logging now uses syslog
  - shutdown now waits for helper threads to complete
  - netlink socket cleanup
  * some minor bug fixes, some helping builds on musl
  This updates iscsiuio version to 0.7.8.8.
  This updates open-iscsi-SUSE-latest.diff.bz2</changelog>
</package>
<package pkgid="73ca81c5cae7602cde7267e52c28ffb7fb7480ba9215a8c4a24a87645c152d63" name="open-iscsi" arch="src">
  <version epoch="0" ver="2.1.9" rel="150500.46.3.1"/>
  <changelog author="lduncan@suse.com" date="1635163200">- Fix the usr-merge changes (bsc#1192013). This includes catching
  all the places that /sbin was still used directly, as well as
  making the SPEC file build using /usr/sbin for openSUSE but
  still use /sbin for SLE, for now.</changelog>
  <changelog author="lduncan@suse.com" date="1636632000">- Merged latest upstream. Mostly cleanup, but includes a fix for
  iscsi-init.service when trying to write to the root volume too
  early (bsc#1192568), as well as an upstream fix for possible
  deadlock when dealing with sysfs.</changelog>
  <changelog author="lduncan@suse.com" date="1644840000">- Updated to latest upstream 2.1.6 as 2.1.6-suse, which contains
  bug fixes and cleanups. See the Changelog for more details.</changelog>
  <changelog author="lduncan@suse.com" date="1646481600">- Update to latest upstream, including test cleanup, minor
  bug fixes (cosmetic), and fixing iscsi-init (bsc#1195656).</changelog>
  <changelog author="lduncan@suse.com" date="1649246400">- Updated to latest upstream, including bug fixes and cleanups.
  Changes included:
  * add handling name/value pairs for firmware login (bsc#1196113),
    including man page update for same
  * Fix bug where some package parts were installed using
    DESTDIR twice
  * general build cleanup (in prep for removing DB files from
    /etc/iscsi some day soon)
  Also, now delivering a "package config" file for libopeniscsiusr.</changelog>
  <changelog author="lduncan@suse.com" date="1651838400">- Updated to latest upstream version, tagged 2.1.7. Changes
  included:
  * updated/fixed test script
  * updated build system
  * several bug fixes, including one for bsc#1199264</changelog>
  <changelog author="lduncan@suse.com" date="1652097600">- Update to latest upstream, including:
  * Added 'distclean' to Makefile targets
  * Ensure Makefile '.PHONY' targets set up correctly
  * fix an iscsid logout bug generating a false error
    and cleanup logout error messages</changelog>
  <changelog author="lduncan@suse.com" date="1652443200">- Set initiatorname in %post (at end of install), for cases
  where root is read-only at startup time (bsc#1198457)</changelog>
  <changelog author="lduncan@suse.com" date="1655467200">- For Tumbleweed, moved logrotate files from user-specific
  directory /etc/logrotate.d to vendor-specific
  /usr/etc/logrotate.d
  (for Stefan Schubert &lt;schubi@suse.com&gt;)</changelog>
  <changelog author="lduncan@suse.com" date="1657108800">- Modify SPEC file so systemd unit files are mode 644 (not 755)
  (bsc#1200570)</changelog>
  <changelog author="lduncan@suse.com" date="1664193600">- Update to upstream version 2.1.8, which includes some bug fixes,
  and adds the ability to build using meson. The SPEC file was
  updated to use meson.
  Also, some files have moved:
  * the "lock" file has moved from /etc/iscsi to /var/lock/iscsi
  * the "database files" have moved from /etc/iscsi to
    /var/lib/iscsi</changelog>
  <changelog author="lduncan@suse.com" date="1668600000">- Updated to latest upstream. Changes:
  * iscsid/iscsiuio: fix OOM adjustment (github issue #377)</changelog>
  <changelog author="lduncan@suse.com" date="1670414400">- Moving DB files from /etc/iscsi/* to /var/lib/iscsi/* for
  SLE-15-SP5 and forward, as is done in Tumbleweed.
- Added /etc/iscsi/README.DB-files-moved, and added SPEC file
  changes to support this, including a post-install script to
  move the DB files, only installed if DB files are moved.
- Renamed shared library from libopeniscsiusr0_2_0 to
  libopeniscsiusr0, to correctly match SONAME in library.</changelog>
  <changelog author="lduncan@suse.com" date="1671451200">- Updated SPEC file dependencies for libopeniscsiusr to avoid
  conflicting package installation.</changelog>
  <changelog author="lduncan@suse.com" date="1671624000">- Update iscsid.service so it starts iscsid.socket, if needed
  (bsc#1206132).</changelog>
  <changelog author="lduncan@suse.com" date="1677326400">- Build system: meson builds were ignoring optflags, and other
  passed in compiler options.</changelog>
  <changelog author="lduncan@suse.com" date="1681732800">- Remove "--strip" in SPEC file for meson build, so that
  debuginfo is generated. (from mwilck) (bsc#1210536)</changelog>
  <changelog author="lduncan@suse.com" date="1686830400">- Upgrade to upstream version 2.1.9 with tag "2.1.9-suse"
  (bsc#1210514), replacing open-iscsi-2.1.8-suse.tar.bz2 with
  open-iscsi-2.1.9-suse.tar.bz2, and resetting
  open-iscsi-SUSE-latest.diff.bz2. A summary from the ChangeLog
  file:
  * Fix discoveryd compiler warning
  * Sync iscsi_if.h with kernel
  * Handle old DB records correctly
  * Make IQN configuration for iscsi-iname
  * remove OFFLOAD_BOOT_SUPPORTED, which is always true
  * Use UUID for IPC, not "root"
  * do not support SHA3 for libressl
  * build meson cleanups, including changing default DB home
  * Updated README about NOPs
  * Remove "BindTo" in systemd service file
  * Some iscsiuio fixes, including licensing and memory leaks
    (bsc#1210514)
  * Small netlink fixes
  * Fix OOM adjustment
  * Some error recovery fixes
  * Some spelling fixes</changelog>
  <changelog author="lduncan@suse.com" date="1687262400">- Fix iscsiuio build version by updating iscsiuio/meson.build
  and RPM SPEC file (bsc#1210514), updating
  open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1698235200">- Updated to latest upstream, which includes (bsc#1210514):
  * several fixes to harden iscsiuio, including:
  - logging now uses syslog
  - shutdown now waits for helper threads to complete
  - netlink socket cleanup
  * some minor bug fixes, some helping builds on musl
  This updates iscsiuio version to 0.7.8.8.
  This updates open-iscsi-SUSE-latest.diff.bz2</changelog>
</package>
<package pkgid="2b83243cca6dce2e04054a29d8d194fb9ff5f46ca249dac99fbedb7f61065aff" name="open-iscsi" arch="x86_64">
  <version epoch="0" ver="2.1.9" rel="150500.46.3.1"/>
  <changelog author="lduncan@suse.com" date="1635163200">- Fix the usr-merge changes (bsc#1192013). This includes catching
  all the places that /sbin was still used directly, as well as
  making the SPEC file build using /usr/sbin for openSUSE but
  still use /sbin for SLE, for now.</changelog>
  <changelog author="lduncan@suse.com" date="1636632000">- Merged latest upstream. Mostly cleanup, but includes a fix for
  iscsi-init.service when trying to write to the root volume too
  early (bsc#1192568), as well as an upstream fix for possible
  deadlock when dealing with sysfs.</changelog>
  <changelog author="lduncan@suse.com" date="1644840000">- Updated to latest upstream 2.1.6 as 2.1.6-suse, which contains
  bug fixes and cleanups. See the Changelog for more details.</changelog>
  <changelog author="lduncan@suse.com" date="1646481600">- Update to latest upstream, including test cleanup, minor
  bug fixes (cosmetic), and fixing iscsi-init (bsc#1195656).</changelog>
  <changelog author="lduncan@suse.com" date="1649246400">- Updated to latest upstream, including bug fixes and cleanups.
  Changes included:
  * add handling name/value pairs for firmware login (bsc#1196113),
    including man page update for same
  * Fix bug where some package parts were installed using
    DESTDIR twice
  * general build cleanup (in prep for removing DB files from
    /etc/iscsi some day soon)
  Also, now delivering a "package config" file for libopeniscsiusr.</changelog>
  <changelog author="lduncan@suse.com" date="1651838400">- Updated to latest upstream version, tagged 2.1.7. Changes
  included:
  * updated/fixed test script
  * updated build system
  * several bug fixes, including one for bsc#1199264</changelog>
  <changelog author="lduncan@suse.com" date="1652097600">- Update to latest upstream, including:
  * Added 'distclean' to Makefile targets
  * Ensure Makefile '.PHONY' targets set up correctly
  * fix an iscsid logout bug generating a false error
    and cleanup logout error messages</changelog>
  <changelog author="lduncan@suse.com" date="1652443200">- Set initiatorname in %post (at end of install), for cases
  where root is read-only at startup time (bsc#1198457)</changelog>
  <changelog author="lduncan@suse.com" date="1655467200">- For Tumbleweed, moved logrotate files from user-specific
  directory /etc/logrotate.d to vendor-specific
  /usr/etc/logrotate.d
  (for Stefan Schubert &lt;schubi@suse.com&gt;)</changelog>
  <changelog author="lduncan@suse.com" date="1657108800">- Modify SPEC file so systemd unit files are mode 644 (not 755)
  (bsc#1200570)</changelog>
  <changelog author="lduncan@suse.com" date="1664193600">- Update to upstream version 2.1.8, which includes some bug fixes,
  and adds the ability to build using meson. The SPEC file was
  updated to use meson.
  Also, some files have moved:
  * the "lock" file has moved from /etc/iscsi to /var/lock/iscsi
  * the "database files" have moved from /etc/iscsi to
    /var/lib/iscsi</changelog>
  <changelog author="lduncan@suse.com" date="1668600000">- Updated to latest upstream. Changes:
  * iscsid/iscsiuio: fix OOM adjustment (github issue #377)</changelog>
  <changelog author="lduncan@suse.com" date="1670414400">- Moving DB files from /etc/iscsi/* to /var/lib/iscsi/* for
  SLE-15-SP5 and forward, as is done in Tumbleweed.
- Added /etc/iscsi/README.DB-files-moved, and added SPEC file
  changes to support this, including a post-install script to
  move the DB files, only installed if DB files are moved.
- Renamed shared library from libopeniscsiusr0_2_0 to
  libopeniscsiusr0, to correctly match SONAME in library.</changelog>
  <changelog author="lduncan@suse.com" date="1671451200">- Updated SPEC file dependencies for libopeniscsiusr to avoid
  conflicting package installation.</changelog>
  <changelog author="lduncan@suse.com" date="1671624000">- Update iscsid.service so it starts iscsid.socket, if needed
  (bsc#1206132).</changelog>
  <changelog author="lduncan@suse.com" date="1677326400">- Build system: meson builds were ignoring optflags, and other
  passed in compiler options.</changelog>
  <changelog author="lduncan@suse.com" date="1681732800">- Remove "--strip" in SPEC file for meson build, so that
  debuginfo is generated. (from mwilck) (bsc#1210536)</changelog>
  <changelog author="lduncan@suse.com" date="1686830400">- Upgrade to upstream version 2.1.9 with tag "2.1.9-suse"
  (bsc#1210514), replacing open-iscsi-2.1.8-suse.tar.bz2 with
  open-iscsi-2.1.9-suse.tar.bz2, and resetting
  open-iscsi-SUSE-latest.diff.bz2. A summary from the ChangeLog
  file:
  * Fix discoveryd compiler warning
  * Sync iscsi_if.h with kernel
  * Handle old DB records correctly
  * Make IQN configuration for iscsi-iname
  * remove OFFLOAD_BOOT_SUPPORTED, which is always true
  * Use UUID for IPC, not "root"
  * do not support SHA3 for libressl
  * build meson cleanups, including changing default DB home
  * Updated README about NOPs
  * Remove "BindTo" in systemd service file
  * Some iscsiuio fixes, including licensing and memory leaks
    (bsc#1210514)
  * Small netlink fixes
  * Fix OOM adjustment
  * Some error recovery fixes
  * Some spelling fixes</changelog>
  <changelog author="lduncan@suse.com" date="1687262400">- Fix iscsiuio build version by updating iscsiuio/meson.build
  and RPM SPEC file (bsc#1210514), updating
  open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1698235200">- Updated to latest upstream, which includes (bsc#1210514):
  * several fixes to harden iscsiuio, including:
  - logging now uses syslog
  - shutdown now waits for helper threads to complete
  - netlink socket cleanup
  * some minor bug fixes, some helping builds on musl
  This updates iscsiuio version to 0.7.8.8.
  This updates open-iscsi-SUSE-latest.diff.bz2</changelog>
</package>
<package pkgid="9e7597f36a0b6d1367e6413b7fbd71bd02fc03002bd4e90a07b33142f5fb15d9" name="open-lldp" arch="aarch64">
  <version epoch="0" ver="1.1+77.75e83b6" rel="150500.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1488283200">- Don't use full URL as source, as the tarball does not exist at
  that location.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Fix calling of fillup_only: it knows no -i parameter.</changelog>
  <changelog author="hare@suse.de" date="1547121600">- Update to git commit cb81e9541b5 (FATE#326034,bug#1104011)
  * 8021qaz: Remove unused variable
  * 8021qaz: Honor willing value from config file
  * lldpad: Support DSCP selectors in APP TLV's
  * Fix application tlv display
  * basman_clif: print the OID properly
  * ecp22: deinit l2_packet_data before freeing ecp22
  * DCB set state operation return value check
  * memleak on received TLVs from modules
  * Use interface index instead of name in libconfig
  * Fix 'is_valid_mac' to include mcast mac address
  * lldpad: Fix segfault in lldptool
  * Fixup disabling PG
  + open-lldp-v1.0.1+56.cb81e95.tar.xz
- Remove superseded files
  - open-lldp-1.0.1.tar.gz
  - open-lldp-git-update.patch.bz2
  - open-lldp-gcc5.patch
  - 0001-l2_linux_packet-correctly-process-return-value-of-ge.patch
  - 0002-lldpad-Only-set-Tx-adminStatus-if-interface-is-not-m.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mliska@suse.cz" date="1552996800">- Add gcc9-fix-werror.patch in order to fix bsc#1128299.
- Adjust project URL as we're using the Intel's fork.</changelog>
  <changelog author="mliska@suse.cz" date="1557403200">- Disable -Werror (boo#1128299) and remove gcc9-fix-werror.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1557835200">- Add disable-werror.patch.</changelog>
  <changelog author="hare@suse.com" date="1574164800">- Update to version v1.0.1+95.3168e11:
  * Test with newer GCC 8 and 9 versions
  * RPM build is broken, so skip
  * Place the tarball in the right place
  * A tarball needs to be built after bootstrap.sh for use with RPM
  * Added missing steps for building an RPM
  * Finish off with testing building the RPM
  * Test package installation as well
  * Test under multiple GCC releases
  * Drop requirement for Travis CI testing with Clang
  * Support checking build with Travis CI
  * vdp-netlink: account for sizes properly
  * qbg: avoid warning for extra parens
  * qbg: port name is always a valid pointer
  * dcbx-nl: drop run_cmd
  * ecp: allow for failure to create
  * lldp_util: allow for null ifa_addr element
  * lldpad: Do not enable port if already enabled
  * Silent -Werror=address-of-packed-member warnings.
  * Come up with STRNCPY_TERMINATED (#25).
  * vdptool: fixed compile error for getline()
  * Fix #23 by off by one strncpy value.
  * 8021qaz: Block lldptool set operations if read only mode is on
  * 8021qaz: Add read only option for 8021qaz module
  * lldp: Allow lldptool to modify optional TLV's content
  * 8021qaz: Print dscp2prio map
  * autoconf: Add systemd support in configure.ac
  * rpm-spec: Add vdp22 man files to lldpad.spec.in</changelog>
  <changelog author="hare@suse.com" date="1574164801">- Update to version v1.0.1+102.4c7fcc3:
  * l2_packet: Guard ETH_P_LLDP define (edit: fixes bsc#1156545)
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(systemd) instead of systemd directly:
  allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="mliska@suse.cz" date="1586174400">- Use -fcommon in order to fix boo#1160407.</changelog>
  <changelog author="hare@suse.de" date="1596542400">- Update to version v1.0.1+63.f977e67 (bsc#1171284,bsc#1170745,bsc#1153520):
  * lldp/rx.c: Reset state machine variable in process_delete_info()
  * lldp: do not call 'assert' in rxProcessFrame()
  * ecp: allow for failure to create
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="lduncan@suse.com" date="1599220800">- Moved sources from github.com/intel to github/openSUSE
  * upgrading to version v1.0.1+110.6009075a9fcc
  - merged in latest upstream (no API changes)</changelog>
  <changelog author="lduncan@suse.com" date="1599393600">- Update to version v1.0.1+69.e8f522565f5a to removed commpiler
  and rpmlint complaints:
  * Fix bash-completion dir: don't use /etc
  * Fix compiler issue with strcpy(): use memcpy
  * Fix compiler complaint argument type mismatch.
  * Fix compiler complaint declaration vs function.
  * Fix compiler complaint copying to packed member.
  * add 'lldpad.socket' to the '%service_*' macros in the SPEC
    file</changelog>
  <changelog author="lduncan@suse.com" date="1604923200">- Update to version v1.1+15.ef8495548d04, by merging
  upstream version 1.1 + latest, including:
  * Fix merge error: remove bogus line
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  This removed the need for the patch disable-werror.patch.</changelog>
  <changelog author="lduncan@suse.com" date="1607601600">- Update to version v1.1+18.0e969d0edcc4:
  * event_iface: only set rcv buf size if too small (bsc#1175570)</changelog>
  <changelog author="lduncan@suse.com" date="1610107200">- Update to version v1.1+36.e926f7172b96:
  * tx: rename variable
  * event_iface: only set rcv buf size if too small (bsc#1175570)
  * tx: when operating in rx-only mode don't send a port shutdown pdu
  * Update .travis.yml
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  * autoconf: convenience to setup asan and ubsan
  * Post 1.1 release</changelog>
  <changelog author="lduncan@suse.com" date="1632139200">- Update to version v1.1+44.0f781b4162d3:
  * agent: reset frame status on message delete
  * Avoiding null pointer dereference</changelog>
  <changelog author="lduncan@suse.com" date="1666785600">- Update to version v1.1+58.8ca361bab766:
  * clif: Include string.h for mem* function prototypes
  * basman: use return address when pulling address
  * Revert "Use interface index instead of name in libconfig"
  * 8021Qaz: check for rx block validity
  * 8021qaz: squelch initialization errors
  * macvtap: fix error condition
  * vdp22: convert command parsing to null term</changelog>
  <changelog author="tabraham@suse.com" date="1704974400">- Update to version latest Intel upstream (v1.1+77.75e83b6fb98e, jsc#PED-6852):
  * lldpad: dcbx: prevent null dereference in dcbx_free_data (bsc#1212749)
  * dcbx: Fix use-after-free
  * dcbx: Fix NULL pointer dereference
  * dcbx: Fix leak when receiving legacy TLVs with mismatched mode
  * lldp: Reject frames with duplicate TLVs
  * dcbx: Free manifest in rchange callback
  * dcbx: Avoid memory leak if ifup is called twice
  * ctrl_iface: Fix a memory leak in ctrl_iface_deinit
  * lldp: Avoid sending uninitialized data
  * lldptool: fix null pointer deference
  * Revert "Use interface index instead of name in libconfig"
  * Avoiding null pointer dereference
  * agent: reset frame status on message delete
  * basman: use return address when pulling address
  * 8021Qaz: check for rx block validity
  * 8021qaz: squelch initialization errors
  * macvtap: fix error condition
  * vdp22: convert command parsing to null term</changelog>
</package>
<package pkgid="e89ea265c2fc9767f95eedd0994741300bd023aeba7f51751b824642cc2e86cd" name="open-lldp" arch="s390x">
  <version epoch="0" ver="1.1+77.75e83b6" rel="150500.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1488283200">- Don't use full URL as source, as the tarball does not exist at
  that location.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Fix calling of fillup_only: it knows no -i parameter.</changelog>
  <changelog author="hare@suse.de" date="1547121600">- Update to git commit cb81e9541b5 (FATE#326034,bug#1104011)
  * 8021qaz: Remove unused variable
  * 8021qaz: Honor willing value from config file
  * lldpad: Support DSCP selectors in APP TLV's
  * Fix application tlv display
  * basman_clif: print the OID properly
  * ecp22: deinit l2_packet_data before freeing ecp22
  * DCB set state operation return value check
  * memleak on received TLVs from modules
  * Use interface index instead of name in libconfig
  * Fix 'is_valid_mac' to include mcast mac address
  * lldpad: Fix segfault in lldptool
  * Fixup disabling PG
  + open-lldp-v1.0.1+56.cb81e95.tar.xz
- Remove superseded files
  - open-lldp-1.0.1.tar.gz
  - open-lldp-git-update.patch.bz2
  - open-lldp-gcc5.patch
  - 0001-l2_linux_packet-correctly-process-return-value-of-ge.patch
  - 0002-lldpad-Only-set-Tx-adminStatus-if-interface-is-not-m.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mliska@suse.cz" date="1552996800">- Add gcc9-fix-werror.patch in order to fix bsc#1128299.
- Adjust project URL as we're using the Intel's fork.</changelog>
  <changelog author="mliska@suse.cz" date="1557403200">- Disable -Werror (boo#1128299) and remove gcc9-fix-werror.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1557835200">- Add disable-werror.patch.</changelog>
  <changelog author="hare@suse.com" date="1574164800">- Update to version v1.0.1+95.3168e11:
  * Test with newer GCC 8 and 9 versions
  * RPM build is broken, so skip
  * Place the tarball in the right place
  * A tarball needs to be built after bootstrap.sh for use with RPM
  * Added missing steps for building an RPM
  * Finish off with testing building the RPM
  * Test package installation as well
  * Test under multiple GCC releases
  * Drop requirement for Travis CI testing with Clang
  * Support checking build with Travis CI
  * vdp-netlink: account for sizes properly
  * qbg: avoid warning for extra parens
  * qbg: port name is always a valid pointer
  * dcbx-nl: drop run_cmd
  * ecp: allow for failure to create
  * lldp_util: allow for null ifa_addr element
  * lldpad: Do not enable port if already enabled
  * Silent -Werror=address-of-packed-member warnings.
  * Come up with STRNCPY_TERMINATED (#25).
  * vdptool: fixed compile error for getline()
  * Fix #23 by off by one strncpy value.
  * 8021qaz: Block lldptool set operations if read only mode is on
  * 8021qaz: Add read only option for 8021qaz module
  * lldp: Allow lldptool to modify optional TLV's content
  * 8021qaz: Print dscp2prio map
  * autoconf: Add systemd support in configure.ac
  * rpm-spec: Add vdp22 man files to lldpad.spec.in</changelog>
  <changelog author="hare@suse.com" date="1574164801">- Update to version v1.0.1+102.4c7fcc3:
  * l2_packet: Guard ETH_P_LLDP define (edit: fixes bsc#1156545)
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(systemd) instead of systemd directly:
  allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="mliska@suse.cz" date="1586174400">- Use -fcommon in order to fix boo#1160407.</changelog>
  <changelog author="hare@suse.de" date="1596542400">- Update to version v1.0.1+63.f977e67 (bsc#1171284,bsc#1170745,bsc#1153520):
  * lldp/rx.c: Reset state machine variable in process_delete_info()
  * lldp: do not call 'assert' in rxProcessFrame()
  * ecp: allow for failure to create
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="lduncan@suse.com" date="1599220800">- Moved sources from github.com/intel to github/openSUSE
  * upgrading to version v1.0.1+110.6009075a9fcc
  - merged in latest upstream (no API changes)</changelog>
  <changelog author="lduncan@suse.com" date="1599393600">- Update to version v1.0.1+69.e8f522565f5a to removed commpiler
  and rpmlint complaints:
  * Fix bash-completion dir: don't use /etc
  * Fix compiler issue with strcpy(): use memcpy
  * Fix compiler complaint argument type mismatch.
  * Fix compiler complaint declaration vs function.
  * Fix compiler complaint copying to packed member.
  * add 'lldpad.socket' to the '%service_*' macros in the SPEC
    file</changelog>
  <changelog author="lduncan@suse.com" date="1604923200">- Update to version v1.1+15.ef8495548d04, by merging
  upstream version 1.1 + latest, including:
  * Fix merge error: remove bogus line
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  This removed the need for the patch disable-werror.patch.</changelog>
  <changelog author="lduncan@suse.com" date="1607601600">- Update to version v1.1+18.0e969d0edcc4:
  * event_iface: only set rcv buf size if too small (bsc#1175570)</changelog>
  <changelog author="lduncan@suse.com" date="1610107200">- Update to version v1.1+36.e926f7172b96:
  * tx: rename variable
  * event_iface: only set rcv buf size if too small (bsc#1175570)
  * tx: when operating in rx-only mode don't send a port shutdown pdu
  * Update .travis.yml
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  * autoconf: convenience to setup asan and ubsan
  * Post 1.1 release</changelog>
  <changelog author="lduncan@suse.com" date="1632139200">- Update to version v1.1+44.0f781b4162d3:
  * agent: reset frame status on message delete
  * Avoiding null pointer dereference</changelog>
  <changelog author="lduncan@suse.com" date="1666785600">- Update to version v1.1+58.8ca361bab766:
  * clif: Include string.h for mem* function prototypes
  * basman: use return address when pulling address
  * Revert "Use interface index instead of name in libconfig"
  * 8021Qaz: check for rx block validity
  * 8021qaz: squelch initialization errors
  * macvtap: fix error condition
  * vdp22: convert command parsing to null term</changelog>
  <changelog author="tabraham@suse.com" date="1704974400">- Update to version latest Intel upstream (v1.1+77.75e83b6fb98e, jsc#PED-6852):
  * lldpad: dcbx: prevent null dereference in dcbx_free_data (bsc#1212749)
  * dcbx: Fix use-after-free
  * dcbx: Fix NULL pointer dereference
  * dcbx: Fix leak when receiving legacy TLVs with mismatched mode
  * lldp: Reject frames with duplicate TLVs
  * dcbx: Free manifest in rchange callback
  * dcbx: Avoid memory leak if ifup is called twice
  * ctrl_iface: Fix a memory leak in ctrl_iface_deinit
  * lldp: Avoid sending uninitialized data
  * lldptool: fix null pointer deference
  * Revert "Use interface index instead of name in libconfig"
  * Avoiding null pointer dereference
  * agent: reset frame status on message delete
  * basman: use return address when pulling address
  * 8021Qaz: check for rx block validity
  * 8021qaz: squelch initialization errors
  * macvtap: fix error condition
  * vdp22: convert command parsing to null term</changelog>
</package>
<package pkgid="5026cd59f1a783e3a933cac83e955b3c76c65059cf576035e5eaa5610338d03d" name="open-lldp" arch="src">
  <version epoch="0" ver="1.1+77.75e83b6" rel="150500.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1488283200">- Don't use full URL as source, as the tarball does not exist at
  that location.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Fix calling of fillup_only: it knows no -i parameter.</changelog>
  <changelog author="hare@suse.de" date="1547121600">- Update to git commit cb81e9541b5 (FATE#326034,bug#1104011)
  * 8021qaz: Remove unused variable
  * 8021qaz: Honor willing value from config file
  * lldpad: Support DSCP selectors in APP TLV's
  * Fix application tlv display
  * basman_clif: print the OID properly
  * ecp22: deinit l2_packet_data before freeing ecp22
  * DCB set state operation return value check
  * memleak on received TLVs from modules
  * Use interface index instead of name in libconfig
  * Fix 'is_valid_mac' to include mcast mac address
  * lldpad: Fix segfault in lldptool
  * Fixup disabling PG
  + open-lldp-v1.0.1+56.cb81e95.tar.xz
- Remove superseded files
  - open-lldp-1.0.1.tar.gz
  - open-lldp-git-update.patch.bz2
  - open-lldp-gcc5.patch
  - 0001-l2_linux_packet-correctly-process-return-value-of-ge.patch
  - 0002-lldpad-Only-set-Tx-adminStatus-if-interface-is-not-m.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mliska@suse.cz" date="1552996800">- Add gcc9-fix-werror.patch in order to fix bsc#1128299.
- Adjust project URL as we're using the Intel's fork.</changelog>
  <changelog author="mliska@suse.cz" date="1557403200">- Disable -Werror (boo#1128299) and remove gcc9-fix-werror.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1557835200">- Add disable-werror.patch.</changelog>
  <changelog author="hare@suse.com" date="1574164800">- Update to version v1.0.1+95.3168e11:
  * Test with newer GCC 8 and 9 versions
  * RPM build is broken, so skip
  * Place the tarball in the right place
  * A tarball needs to be built after bootstrap.sh for use with RPM
  * Added missing steps for building an RPM
  * Finish off with testing building the RPM
  * Test package installation as well
  * Test under multiple GCC releases
  * Drop requirement for Travis CI testing with Clang
  * Support checking build with Travis CI
  * vdp-netlink: account for sizes properly
  * qbg: avoid warning for extra parens
  * qbg: port name is always a valid pointer
  * dcbx-nl: drop run_cmd
  * ecp: allow for failure to create
  * lldp_util: allow for null ifa_addr element
  * lldpad: Do not enable port if already enabled
  * Silent -Werror=address-of-packed-member warnings.
  * Come up with STRNCPY_TERMINATED (#25).
  * vdptool: fixed compile error for getline()
  * Fix #23 by off by one strncpy value.
  * 8021qaz: Block lldptool set operations if read only mode is on
  * 8021qaz: Add read only option for 8021qaz module
  * lldp: Allow lldptool to modify optional TLV's content
  * 8021qaz: Print dscp2prio map
  * autoconf: Add systemd support in configure.ac
  * rpm-spec: Add vdp22 man files to lldpad.spec.in</changelog>
  <changelog author="hare@suse.com" date="1574164801">- Update to version v1.0.1+102.4c7fcc3:
  * l2_packet: Guard ETH_P_LLDP define (edit: fixes bsc#1156545)
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(systemd) instead of systemd directly:
  allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="mliska@suse.cz" date="1586174400">- Use -fcommon in order to fix boo#1160407.</changelog>
  <changelog author="hare@suse.de" date="1596542400">- Update to version v1.0.1+63.f977e67 (bsc#1171284,bsc#1170745,bsc#1153520):
  * lldp/rx.c: Reset state machine variable in process_delete_info()
  * lldp: do not call 'assert' in rxProcessFrame()
  * ecp: allow for failure to create
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="lduncan@suse.com" date="1599220800">- Moved sources from github.com/intel to github/openSUSE
  * upgrading to version v1.0.1+110.6009075a9fcc
  - merged in latest upstream (no API changes)</changelog>
  <changelog author="lduncan@suse.com" date="1599393600">- Update to version v1.0.1+69.e8f522565f5a to removed commpiler
  and rpmlint complaints:
  * Fix bash-completion dir: don't use /etc
  * Fix compiler issue with strcpy(): use memcpy
  * Fix compiler complaint argument type mismatch.
  * Fix compiler complaint declaration vs function.
  * Fix compiler complaint copying to packed member.
  * add 'lldpad.socket' to the '%service_*' macros in the SPEC
    file</changelog>
  <changelog author="lduncan@suse.com" date="1604923200">- Update to version v1.1+15.ef8495548d04, by merging
  upstream version 1.1 + latest, including:
  * Fix merge error: remove bogus line
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  This removed the need for the patch disable-werror.patch.</changelog>
  <changelog author="lduncan@suse.com" date="1607601600">- Update to version v1.1+18.0e969d0edcc4:
  * event_iface: only set rcv buf size if too small (bsc#1175570)</changelog>
  <changelog author="lduncan@suse.com" date="1610107200">- Update to version v1.1+36.e926f7172b96:
  * tx: rename variable
  * event_iface: only set rcv buf size if too small (bsc#1175570)
  * tx: when operating in rx-only mode don't send a port shutdown pdu
  * Update .travis.yml
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  * autoconf: convenience to setup asan and ubsan
  * Post 1.1 release</changelog>
  <changelog author="lduncan@suse.com" date="1632139200">- Update to version v1.1+44.0f781b4162d3:
  * agent: reset frame status on message delete
  * Avoiding null pointer dereference</changelog>
  <changelog author="lduncan@suse.com" date="1666785600">- Update to version v1.1+58.8ca361bab766:
  * clif: Include string.h for mem* function prototypes
  * basman: use return address when pulling address
  * Revert "Use interface index instead of name in libconfig"
  * 8021Qaz: check for rx block validity
  * 8021qaz: squelch initialization errors
  * macvtap: fix error condition
  * vdp22: convert command parsing to null term</changelog>
  <changelog author="tabraham@suse.com" date="1704974400">- Update to version latest Intel upstream (v1.1+77.75e83b6fb98e, jsc#PED-6852):
  * lldpad: dcbx: prevent null dereference in dcbx_free_data (bsc#1212749)
  * dcbx: Fix use-after-free
  * dcbx: Fix NULL pointer dereference
  * dcbx: Fix leak when receiving legacy TLVs with mismatched mode
  * lldp: Reject frames with duplicate TLVs
  * dcbx: Free manifest in rchange callback
  * dcbx: Avoid memory leak if ifup is called twice
  * ctrl_iface: Fix a memory leak in ctrl_iface_deinit
  * lldp: Avoid sending uninitialized data
  * lldptool: fix null pointer deference
  * Revert "Use interface index instead of name in libconfig"
  * Avoiding null pointer dereference
  * agent: reset frame status on message delete
  * basman: use return address when pulling address
  * 8021Qaz: check for rx block validity
  * 8021qaz: squelch initialization errors
  * macvtap: fix error condition
  * vdp22: convert command parsing to null term</changelog>
</package>
<package pkgid="b64499e008cb73ff1a5cd1c9ccf087266fb0d73b0c73abad24d2f4b3454a4ce3" name="open-lldp" arch="x86_64">
  <version epoch="0" ver="1.1+77.75e83b6" rel="150500.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1488283200">- Don't use full URL as source, as the tarball does not exist at
  that location.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Fix calling of fillup_only: it knows no -i parameter.</changelog>
  <changelog author="hare@suse.de" date="1547121600">- Update to git commit cb81e9541b5 (FATE#326034,bug#1104011)
  * 8021qaz: Remove unused variable
  * 8021qaz: Honor willing value from config file
  * lldpad: Support DSCP selectors in APP TLV's
  * Fix application tlv display
  * basman_clif: print the OID properly
  * ecp22: deinit l2_packet_data before freeing ecp22
  * DCB set state operation return value check
  * memleak on received TLVs from modules
  * Use interface index instead of name in libconfig
  * Fix 'is_valid_mac' to include mcast mac address
  * lldpad: Fix segfault in lldptool
  * Fixup disabling PG
  + open-lldp-v1.0.1+56.cb81e95.tar.xz
- Remove superseded files
  - open-lldp-1.0.1.tar.gz
  - open-lldp-git-update.patch.bz2
  - open-lldp-gcc5.patch
  - 0001-l2_linux_packet-correctly-process-return-value-of-ge.patch
  - 0002-lldpad-Only-set-Tx-adminStatus-if-interface-is-not-m.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mliska@suse.cz" date="1552996800">- Add gcc9-fix-werror.patch in order to fix bsc#1128299.
- Adjust project URL as we're using the Intel's fork.</changelog>
  <changelog author="mliska@suse.cz" date="1557403200">- Disable -Werror (boo#1128299) and remove gcc9-fix-werror.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1557835200">- Add disable-werror.patch.</changelog>
  <changelog author="hare@suse.com" date="1574164800">- Update to version v1.0.1+95.3168e11:
  * Test with newer GCC 8 and 9 versions
  * RPM build is broken, so skip
  * Place the tarball in the right place
  * A tarball needs to be built after bootstrap.sh for use with RPM
  * Added missing steps for building an RPM
  * Finish off with testing building the RPM
  * Test package installation as well
  * Test under multiple GCC releases
  * Drop requirement for Travis CI testing with Clang
  * Support checking build with Travis CI
  * vdp-netlink: account for sizes properly
  * qbg: avoid warning for extra parens
  * qbg: port name is always a valid pointer
  * dcbx-nl: drop run_cmd
  * ecp: allow for failure to create
  * lldp_util: allow for null ifa_addr element
  * lldpad: Do not enable port if already enabled
  * Silent -Werror=address-of-packed-member warnings.
  * Come up with STRNCPY_TERMINATED (#25).
  * vdptool: fixed compile error for getline()
  * Fix #23 by off by one strncpy value.
  * 8021qaz: Block lldptool set operations if read only mode is on
  * 8021qaz: Add read only option for 8021qaz module
  * lldp: Allow lldptool to modify optional TLV's content
  * 8021qaz: Print dscp2prio map
  * autoconf: Add systemd support in configure.ac
  * rpm-spec: Add vdp22 man files to lldpad.spec.in</changelog>
  <changelog author="hare@suse.com" date="1574164801">- Update to version v1.0.1+102.4c7fcc3:
  * l2_packet: Guard ETH_P_LLDP define (edit: fixes bsc#1156545)
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(systemd) instead of systemd directly:
  allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="mliska@suse.cz" date="1586174400">- Use -fcommon in order to fix boo#1160407.</changelog>
  <changelog author="hare@suse.de" date="1596542400">- Update to version v1.0.1+63.f977e67 (bsc#1171284,bsc#1170745,bsc#1153520):
  * lldp/rx.c: Reset state machine variable in process_delete_info()
  * lldp: do not call 'assert' in rxProcessFrame()
  * ecp: allow for failure to create
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="lduncan@suse.com" date="1599220800">- Moved sources from github.com/intel to github/openSUSE
  * upgrading to version v1.0.1+110.6009075a9fcc
  - merged in latest upstream (no API changes)</changelog>
  <changelog author="lduncan@suse.com" date="1599393600">- Update to version v1.0.1+69.e8f522565f5a to removed commpiler
  and rpmlint complaints:
  * Fix bash-completion dir: don't use /etc
  * Fix compiler issue with strcpy(): use memcpy
  * Fix compiler complaint argument type mismatch.
  * Fix compiler complaint declaration vs function.
  * Fix compiler complaint copying to packed member.
  * add 'lldpad.socket' to the '%service_*' macros in the SPEC
    file</changelog>
  <changelog author="lduncan@suse.com" date="1604923200">- Update to version v1.1+15.ef8495548d04, by merging
  upstream version 1.1 + latest, including:
  * Fix merge error: remove bogus line
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  This removed the need for the patch disable-werror.patch.</changelog>
  <changelog author="lduncan@suse.com" date="1607601600">- Update to version v1.1+18.0e969d0edcc4:
  * event_iface: only set rcv buf size if too small (bsc#1175570)</changelog>
  <changelog author="lduncan@suse.com" date="1610107200">- Update to version v1.1+36.e926f7172b96:
  * tx: rename variable
  * event_iface: only set rcv buf size if too small (bsc#1175570)
  * tx: when operating in rx-only mode don't send a port shutdown pdu
  * Update .travis.yml
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  * autoconf: convenience to setup asan and ubsan
  * Post 1.1 release</changelog>
  <changelog author="lduncan@suse.com" date="1632139200">- Update to version v1.1+44.0f781b4162d3:
  * agent: reset frame status on message delete
  * Avoiding null pointer dereference</changelog>
  <changelog author="lduncan@suse.com" date="1666785600">- Update to version v1.1+58.8ca361bab766:
  * clif: Include string.h for mem* function prototypes
  * basman: use return address when pulling address
  * Revert "Use interface index instead of name in libconfig"
  * 8021Qaz: check for rx block validity
  * 8021qaz: squelch initialization errors
  * macvtap: fix error condition
  * vdp22: convert command parsing to null term</changelog>
  <changelog author="tabraham@suse.com" date="1704974400">- Update to version latest Intel upstream (v1.1+77.75e83b6fb98e, jsc#PED-6852):
  * lldpad: dcbx: prevent null dereference in dcbx_free_data (bsc#1212749)
  * dcbx: Fix use-after-free
  * dcbx: Fix NULL pointer dereference
  * dcbx: Fix leak when receiving legacy TLVs with mismatched mode
  * lldp: Reject frames with duplicate TLVs
  * dcbx: Free manifest in rchange callback
  * dcbx: Avoid memory leak if ifup is called twice
  * ctrl_iface: Fix a memory leak in ctrl_iface_deinit
  * lldp: Avoid sending uninitialized data
  * lldptool: fix null pointer deference
  * Revert "Use interface index instead of name in libconfig"
  * Avoiding null pointer dereference
  * agent: reset frame status on message delete
  * basman: use return address when pulling address
  * 8021Qaz: check for rx block validity
  * 8021qaz: squelch initialization errors
  * macvtap: fix error condition
  * vdp22: convert command parsing to null term</changelog>
</package>
<package pkgid="6dd1eb15087fd6f4fec849d60becd881be2e9640218aed1ac4cba2eb8045064a" name="open-vm-tools" arch="src">
  <version epoch="0" ver="12.3.0" rel="150300.40.1"/>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add open-vm-tools-glib-2.67.patch: Fix build with glib 2.67.
  Patch has been borrowed by Fedora, upstream is still busy working
  out a patch (I'd not be surprised if they end up merging this
  finally.
  https://github.com/vmware/open-vm-tools/issues/500</changelog>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- limit to protobuf &lt; 22 for now until build failures have been fixed</changelog>
  <changelog author="kallan@suse.com" date="1693224000">- Fix (bsc#1214566) - (CVE-2023-20900) - VUL-0: CVE-2023-20900:
  open-vm-tools: SAML token signature bypass vulnerability
  + Add patch: CVE-20230-20900.patch</changelog>
  <changelog author="kallan@suse.com" date="1694001600">- Update to 12.3.0 (build 22234872) (boo#1214850)
  - There are no new features in the open-vm-tools 12.3.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release integrates CVE-2023-20900 without the need for a patch.
    For more information on this vulnerability and its impact on VMware
    products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0019.html.
  - A tools.conf configuration setting is available to temporaily direct
    Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
    of ignoring file systems already frozen.
  - Building of the VMware Guest Authentication Service (VGAuth) using
    "xml-security-c" and "xerces-c" is being deprecated.
  - A number of Coverity reported issues have been addressed.
  - A number of GitHub issues and pull requests have been handled.
    Please see the Resolves Issues section of the Release Notes.
  - For issues resolved in this release, see the Resolved Issues section
    of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.0 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog
- Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests
- jsc-PED-1344 - reinable building containerinfo plugin for SLES 15 SP4.
- Drop patch now contained in 12.3.0:
  + 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch
  + 0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  + 2023-20867-Remove-some-dead-code.patch
  + CVE-20230-20900.patch</changelog>
  <changelog author="meissner@suse.com" date="1695297600">- open-vm-tools is built with containerinfo plugin from 15 sp3 onwards</changelog>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
</package>
<package pkgid="074b3782faa8af65d3f018bdc1da4882b0fb4ea3cd14ff1e1fc7dc5518cddbd7" name="open-vm-tools" arch="x86_64">
  <version epoch="0" ver="12.3.0" rel="150300.40.1"/>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add open-vm-tools-glib-2.67.patch: Fix build with glib 2.67.
  Patch has been borrowed by Fedora, upstream is still busy working
  out a patch (I'd not be surprised if they end up merging this
  finally.
  https://github.com/vmware/open-vm-tools/issues/500</changelog>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- limit to protobuf &lt; 22 for now until build failures have been fixed</changelog>
  <changelog author="kallan@suse.com" date="1693224000">- Fix (bsc#1214566) - (CVE-2023-20900) - VUL-0: CVE-2023-20900:
  open-vm-tools: SAML token signature bypass vulnerability
  + Add patch: CVE-20230-20900.patch</changelog>
  <changelog author="kallan@suse.com" date="1694001600">- Update to 12.3.0 (build 22234872) (boo#1214850)
  - There are no new features in the open-vm-tools 12.3.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release integrates CVE-2023-20900 without the need for a patch.
    For more information on this vulnerability and its impact on VMware
    products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0019.html.
  - A tools.conf configuration setting is available to temporaily direct
    Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
    of ignoring file systems already frozen.
  - Building of the VMware Guest Authentication Service (VGAuth) using
    "xml-security-c" and "xerces-c" is being deprecated.
  - A number of Coverity reported issues have been addressed.
  - A number of GitHub issues and pull requests have been handled.
    Please see the Resolves Issues section of the Release Notes.
  - For issues resolved in this release, see the Resolved Issues section
    of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.0 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog
- Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests
- jsc-PED-1344 - reinable building containerinfo plugin for SLES 15 SP4.
- Drop patch now contained in 12.3.0:
  + 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch
  + 0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  + 2023-20867-Remove-some-dead-code.patch
  + CVE-20230-20900.patch</changelog>
  <changelog author="meissner@suse.com" date="1695297600">- open-vm-tools is built with containerinfo plugin from 15 sp3 onwards</changelog>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
</package>
<package pkgid="89dbcb6e0279ce2bd921ae279c049f4c3002672adfeafd097321bff693a741b5" name="open-vm-tools" arch="src">
  <version epoch="0" ver="12.3.0" rel="150300.43.1"/>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- limit to protobuf &lt; 22 for now until build failures have been fixed</changelog>
  <changelog author="kallan@suse.com" date="1693224000">- Fix (bsc#1214566) - (CVE-2023-20900) - VUL-0: CVE-2023-20900:
  open-vm-tools: SAML token signature bypass vulnerability
  + Add patch: CVE-20230-20900.patch</changelog>
  <changelog author="kallan@suse.com" date="1694001600">- Update to 12.3.0 (build 22234872) (boo#1214850)
  - There are no new features in the open-vm-tools 12.3.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release integrates CVE-2023-20900 without the need for a patch.
    For more information on this vulnerability and its impact on VMware
    products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0019.html.
  - A tools.conf configuration setting is available to temporaily direct
    Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
    of ignoring file systems already frozen.
  - Building of the VMware Guest Authentication Service (VGAuth) using
    "xml-security-c" and "xerces-c" is being deprecated.
  - A number of Coverity reported issues have been addressed.
  - A number of GitHub issues and pull requests have been handled.
    Please see the Resolves Issues section of the Release Notes.
  - For issues resolved in this release, see the Resolved Issues section
    of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.0 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog
- Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests
- jsc-PED-1344 - reinable building containerinfo plugin for SLES 15 SP4.
- Drop patch now contained in 12.3.0:
  + 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch
  + 0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  + 2023-20867-Remove-some-dead-code.patch
  + CVE-20230-20900.patch</changelog>
  <changelog author="meissner@suse.com" date="1695297600">- open-vm-tools is built with containerinfo plugin from 15 sp3 onwards</changelog>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
</package>
<package pkgid="a5d51aa3d61016e60ba79464c7af260a6853af21040e1bd0698b94a7b6001348" name="open-vm-tools" arch="x86_64">
  <version epoch="0" ver="12.3.0" rel="150300.43.1"/>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- limit to protobuf &lt; 22 for now until build failures have been fixed</changelog>
  <changelog author="kallan@suse.com" date="1693224000">- Fix (bsc#1214566) - (CVE-2023-20900) - VUL-0: CVE-2023-20900:
  open-vm-tools: SAML token signature bypass vulnerability
  + Add patch: CVE-20230-20900.patch</changelog>
  <changelog author="kallan@suse.com" date="1694001600">- Update to 12.3.0 (build 22234872) (boo#1214850)
  - There are no new features in the open-vm-tools 12.3.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release integrates CVE-2023-20900 without the need for a patch.
    For more information on this vulnerability and its impact on VMware
    products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0019.html.
  - A tools.conf configuration setting is available to temporaily direct
    Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
    of ignoring file systems already frozen.
  - Building of the VMware Guest Authentication Service (VGAuth) using
    "xml-security-c" and "xerces-c" is being deprecated.
  - A number of Coverity reported issues have been addressed.
  - A number of GitHub issues and pull requests have been handled.
    Please see the Resolves Issues section of the Release Notes.
  - For issues resolved in this release, see the Resolved Issues section
    of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.0 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog
- Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests
- jsc-PED-1344 - reinable building containerinfo plugin for SLES 15 SP4.
- Drop patch now contained in 12.3.0:
  + 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch
  + 0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  + 2023-20867-Remove-some-dead-code.patch
  + CVE-20230-20900.patch</changelog>
  <changelog author="meissner@suse.com" date="1695297600">- open-vm-tools is built with containerinfo plugin from 15 sp3 onwards</changelog>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
</package>
<package pkgid="83465ccabfb43714140929fcaac01b11a3f62fe22fd07bce08f6fa0cacfacd96" name="open-vm-tools" arch="src">
  <version epoch="0" ver="12.3.5" rel="150300.46.1"/>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- limit to protobuf &lt; 22 for now until build failures have been fixed</changelog>
  <changelog author="kallan@suse.com" date="1693224000">- Fix (bsc#1214566) - (CVE-2023-20900) - VUL-0: CVE-2023-20900:
  open-vm-tools: SAML token signature bypass vulnerability
  + Add patch: CVE-20230-20900.patch</changelog>
  <changelog author="kallan@suse.com" date="1694001600">- Update to 12.3.0 (build 22234872) (boo#1214850)
  - There are no new features in the open-vm-tools 12.3.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release integrates CVE-2023-20900 without the need for a patch.
    For more information on this vulnerability and its impact on VMware
    products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0019.html.
  - A tools.conf configuration setting is available to temporaily direct
    Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
    of ignoring file systems already frozen.
  - Building of the VMware Guest Authentication Service (VGAuth) using
    "xml-security-c" and "xerces-c" is being deprecated.
  - A number of Coverity reported issues have been addressed.
  - A number of GitHub issues and pull requests have been handled.
    Please see the Resolves Issues section of the Release Notes.
  - For issues resolved in this release, see the Resolved Issues section
    of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.0 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog
- Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests
- jsc-PED-1344 - reinable building containerinfo plugin for SLES 15 SP4.
- Drop patch now contained in 12.3.0:
  + 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch
  + 0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  + 2023-20867-Remove-some-dead-code.patch
  + CVE-20230-20900.patch</changelog>
  <changelog author="meissner@suse.com" date="1695297600">- open-vm-tools is built with containerinfo plugin from 15 sp3 onwards</changelog>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697976000">- Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer
  needed, nor used (since 12.3.0 release).</changelog>
  <changelog author="kallan@suse.com" date="1698667200">- Update to 12.3.5 (build 22544099) (boo#1216670)
  - There are no new features in the open-vm-tools 12.3.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release resolves CVE-2023-34058. For more information on this
    vulnerability and its impact on VMware products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0024.html.
  - This release resolves CVE-2023-34059 which only affects open-vm-tools.
    For more information on this vulnerability, please see the Resolved
    Issues section of the Release Notes.
  - A GitHub issue has been handled. Please see the Resolved Issues section
    of the Release Notes.
  - An update to the deployPkg plugin to coordinate with recent releases
    of cloud-init for improvement for guest VM customization.
  - For issues resolved in this release, see the Resolved Issues
    &lt;https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md#resolved-issues&gt;
    section of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.5 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/ChangeLog
- Drop patch now contained in 12.3.5:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
</package>
<package pkgid="3a2e53de84ccb724b8241bef9e10346dd483ad3e3d2ac15a541f1a2f7b259ffc" name="open-vm-tools" arch="x86_64">
  <version epoch="0" ver="12.3.5" rel="150300.46.1"/>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- limit to protobuf &lt; 22 for now until build failures have been fixed</changelog>
  <changelog author="kallan@suse.com" date="1693224000">- Fix (bsc#1214566) - (CVE-2023-20900) - VUL-0: CVE-2023-20900:
  open-vm-tools: SAML token signature bypass vulnerability
  + Add patch: CVE-20230-20900.patch</changelog>
  <changelog author="kallan@suse.com" date="1694001600">- Update to 12.3.0 (build 22234872) (boo#1214850)
  - There are no new features in the open-vm-tools 12.3.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release integrates CVE-2023-20900 without the need for a patch.
    For more information on this vulnerability and its impact on VMware
    products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0019.html.
  - A tools.conf configuration setting is available to temporaily direct
    Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
    of ignoring file systems already frozen.
  - Building of the VMware Guest Authentication Service (VGAuth) using
    "xml-security-c" and "xerces-c" is being deprecated.
  - A number of Coverity reported issues have been addressed.
  - A number of GitHub issues and pull requests have been handled.
    Please see the Resolves Issues section of the Release Notes.
  - For issues resolved in this release, see the Resolved Issues section
    of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.0 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog
- Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests
- jsc-PED-1344 - reinable building containerinfo plugin for SLES 15 SP4.
- Drop patch now contained in 12.3.0:
  + 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch
  + 0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  + 2023-20867-Remove-some-dead-code.patch
  + CVE-20230-20900.patch</changelog>
  <changelog author="meissner@suse.com" date="1695297600">- open-vm-tools is built with containerinfo plugin from 15 sp3 onwards</changelog>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697976000">- Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer
  needed, nor used (since 12.3.0 release).</changelog>
  <changelog author="kallan@suse.com" date="1698667200">- Update to 12.3.5 (build 22544099) (boo#1216670)
  - There are no new features in the open-vm-tools 12.3.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release resolves CVE-2023-34058. For more information on this
    vulnerability and its impact on VMware products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0024.html.
  - This release resolves CVE-2023-34059 which only affects open-vm-tools.
    For more information on this vulnerability, please see the Resolved
    Issues section of the Release Notes.
  - A GitHub issue has been handled. Please see the Resolved Issues section
    of the Release Notes.
  - An update to the deployPkg plugin to coordinate with recent releases
    of cloud-init for improvement for guest VM customization.
  - For issues resolved in this release, see the Resolved Issues
    &lt;https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md#resolved-issues&gt;
    section of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.5 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/ChangeLog
- Drop patch now contained in 12.3.5:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
</package>
<package pkgid="e6838214a617262087cedb34a2ae92a0e0a734633a2653166b4e28f41e184340" name="open-vm-tools" arch="src">
  <version epoch="0" ver="12.4.0" rel="150300.49.11"/>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- limit to protobuf &lt; 22 for now until build failures have been fixed</changelog>
  <changelog author="kallan@suse.com" date="1693224000">- Fix (bsc#1214566) - (CVE-2023-20900) - VUL-0: CVE-2023-20900:
  open-vm-tools: SAML token signature bypass vulnerability
  + Add patch: CVE-20230-20900.patch</changelog>
  <changelog author="kallan@suse.com" date="1694001600">- Update to 12.3.0 (build 22234872) (boo#1214850)
  - There are no new features in the open-vm-tools 12.3.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release integrates CVE-2023-20900 without the need for a patch.
    For more information on this vulnerability and its impact on VMware
    products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0019.html.
  - A tools.conf configuration setting is available to temporaily direct
    Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
    of ignoring file systems already frozen.
  - Building of the VMware Guest Authentication Service (VGAuth) using
    "xml-security-c" and "xerces-c" is being deprecated.
  - A number of Coverity reported issues have been addressed.
  - A number of GitHub issues and pull requests have been handled.
    Please see the Resolves Issues section of the Release Notes.
  - For issues resolved in this release, see the Resolved Issues section
    of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.0 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog
- Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests
- jsc-PED-1344 - reinable building containerinfo plugin for SLES 15 SP4.
- Drop patch now contained in 12.3.0:
  + 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch
  + 0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  + 2023-20867-Remove-some-dead-code.patch
  + CVE-20230-20900.patch</changelog>
  <changelog author="meissner@suse.com" date="1695297600">- open-vm-tools is built with containerinfo plugin from 15 sp3 onwards</changelog>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697976000">- Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer
  needed, nor used (since 12.3.0 release).</changelog>
  <changelog author="kallan@suse.com" date="1698667200">- Update to 12.3.5 (build 22544099) (boo#1216670)
  - There are no new features in the open-vm-tools 12.3.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release resolves CVE-2023-34058. For more information on this
    vulnerability and its impact on VMware products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0024.html.
  - This release resolves CVE-2023-34059 which only affects open-vm-tools.
    For more information on this vulnerability, please see the Resolved
    Issues section of the Release Notes.
  - A GitHub issue has been handled. Please see the Resolved Issues section
    of the Release Notes.
  - An update to the deployPkg plugin to coordinate with recent releases
    of cloud-init for improvement for guest VM customization.
  - For issues resolved in this release, see the Resolved Issues
    &lt;https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md#resolved-issues&gt;
    section of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.5 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/ChangeLog
- Drop patch now contained in 12.3.5:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="kallan@suse.com" date="1702296000">- Fix (bsc#1217796) - Fix outdated libxmlsec1 dependency version.
  Updates to open-vm-tools for SLES 12 SP4 and SP5 are now being built
  againt against libxmlsec1-1-1.2.37. Update the spec file to now require
  libxmlsec1-openssl1 &gt;= 1.2.37.</changelog>
  <changelog author="dimstar@opensuse.org" date="1703073600">- Own %{_modulesloaddir}: used to be present via udev-mini -&gt; kmod
  - &gt; suse-module-tools dependency before.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1711195200">- update to 12.4.0:
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/open-vm-tools/ChangeLog
  There are no new features in the open-vm-tools 12.4.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been handled. Please see the Resolved
    Issues section of the Release Notes.
  * A number of issues flagged by Coverity have been addressed.
  * For issues resolved in this release, see the Resolved Issues
    section of the Release Notes.</changelog>
  <changelog author="kallan@suse.com" date="1711540800">- Remove protobuf &lt; 22 dependency from spec file (bsc#1217478)
  Required linking with additional absl libraries for sle_version &gt; 150400.
- Use (boo#1222089) for updating open-vm-tools to version 12.4.0.</changelog>
</package>
<package pkgid="c948cb4e108e6145dd19189c723a773e4bf950d5b9be64910a63d2ed90e94322" name="open-vm-tools" arch="x86_64">
  <version epoch="0" ver="12.4.0" rel="150300.49.11"/>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- limit to protobuf &lt; 22 for now until build failures have been fixed</changelog>
  <changelog author="kallan@suse.com" date="1693224000">- Fix (bsc#1214566) - (CVE-2023-20900) - VUL-0: CVE-2023-20900:
  open-vm-tools: SAML token signature bypass vulnerability
  + Add patch: CVE-20230-20900.patch</changelog>
  <changelog author="kallan@suse.com" date="1694001600">- Update to 12.3.0 (build 22234872) (boo#1214850)
  - There are no new features in the open-vm-tools 12.3.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release integrates CVE-2023-20900 without the need for a patch.
    For more information on this vulnerability and its impact on VMware
    products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0019.html.
  - A tools.conf configuration setting is available to temporaily direct
    Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
    of ignoring file systems already frozen.
  - Building of the VMware Guest Authentication Service (VGAuth) using
    "xml-security-c" and "xerces-c" is being deprecated.
  - A number of Coverity reported issues have been addressed.
  - A number of GitHub issues and pull requests have been handled.
    Please see the Resolves Issues section of the Release Notes.
  - For issues resolved in this release, see the Resolved Issues section
    of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.0 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog
- Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests
- jsc-PED-1344 - reinable building containerinfo plugin for SLES 15 SP4.
- Drop patch now contained in 12.3.0:
  + 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch
  + 0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  + 2023-20867-Remove-some-dead-code.patch
  + CVE-20230-20900.patch</changelog>
  <changelog author="meissner@suse.com" date="1695297600">- open-vm-tools is built with containerinfo plugin from 15 sp3 onwards</changelog>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697976000">- Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer
  needed, nor used (since 12.3.0 release).</changelog>
  <changelog author="kallan@suse.com" date="1698667200">- Update to 12.3.5 (build 22544099) (boo#1216670)
  - There are no new features in the open-vm-tools 12.3.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release resolves CVE-2023-34058. For more information on this
    vulnerability and its impact on VMware products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0024.html.
  - This release resolves CVE-2023-34059 which only affects open-vm-tools.
    For more information on this vulnerability, please see the Resolved
    Issues section of the Release Notes.
  - A GitHub issue has been handled. Please see the Resolved Issues section
    of the Release Notes.
  - An update to the deployPkg plugin to coordinate with recent releases
    of cloud-init for improvement for guest VM customization.
  - For issues resolved in this release, see the Resolved Issues
    &lt;https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md#resolved-issues&gt;
    section of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.5 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/ChangeLog
- Drop patch now contained in 12.3.5:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="kallan@suse.com" date="1702296000">- Fix (bsc#1217796) - Fix outdated libxmlsec1 dependency version.
  Updates to open-vm-tools for SLES 12 SP4 and SP5 are now being built
  againt against libxmlsec1-1-1.2.37. Update the spec file to now require
  libxmlsec1-openssl1 &gt;= 1.2.37.</changelog>
  <changelog author="dimstar@opensuse.org" date="1703073600">- Own %{_modulesloaddir}: used to be present via udev-mini -&gt; kmod
  - &gt; suse-module-tools dependency before.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1711195200">- update to 12.4.0:
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/open-vm-tools/ChangeLog
  There are no new features in the open-vm-tools 12.4.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been handled. Please see the Resolved
    Issues section of the Release Notes.
  * A number of issues flagged by Coverity have been addressed.
  * For issues resolved in this release, see the Resolved Issues
    section of the Release Notes.</changelog>
  <changelog author="kallan@suse.com" date="1711540800">- Remove protobuf &lt; 22 dependency from spec file (bsc#1217478)
  Required linking with additional absl libraries for sle_version &gt; 150400.
- Use (boo#1222089) for updating open-vm-tools to version 12.4.0.</changelog>
</package>
<package pkgid="5394f5e6b088a30ccd981e7cff19ab81c21d96893121e139c01c3b141705559b" name="open-vm-tools" arch="src">
  <version epoch="0" ver="12.4.5" rel="150300.52.6"/>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- limit to protobuf &lt; 22 for now until build failures have been fixed</changelog>
  <changelog author="kallan@suse.com" date="1693224000">- Fix (bsc#1214566) - (CVE-2023-20900) - VUL-0: CVE-2023-20900:
  open-vm-tools: SAML token signature bypass vulnerability
  + Add patch: CVE-20230-20900.patch</changelog>
  <changelog author="kallan@suse.com" date="1694001600">- Update to 12.3.0 (build 22234872) (boo#1214850)
  - There are no new features in the open-vm-tools 12.3.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release integrates CVE-2023-20900 without the need for a patch.
    For more information on this vulnerability and its impact on VMware
    products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0019.html.
  - A tools.conf configuration setting is available to temporaily direct
    Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
    of ignoring file systems already frozen.
  - Building of the VMware Guest Authentication Service (VGAuth) using
    "xml-security-c" and "xerces-c" is being deprecated.
  - A number of Coverity reported issues have been addressed.
  - A number of GitHub issues and pull requests have been handled.
    Please see the Resolves Issues section of the Release Notes.
  - For issues resolved in this release, see the Resolved Issues section
    of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.0 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog
- Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests
- jsc-PED-1344 - reinable building containerinfo plugin for SLES 15 SP4.
- Drop patch now contained in 12.3.0:
  + 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch
  + 0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  + 2023-20867-Remove-some-dead-code.patch
  + CVE-20230-20900.patch</changelog>
  <changelog author="meissner@suse.com" date="1695297600">- open-vm-tools is built with containerinfo plugin from 15 sp3 onwards</changelog>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697976000">- Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer
  needed, nor used (since 12.3.0 release).</changelog>
  <changelog author="kallan@suse.com" date="1698667200">- Update to 12.3.5 (build 22544099) (boo#1216670)
  - There are no new features in the open-vm-tools 12.3.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release resolves CVE-2023-34058. For more information on this
    vulnerability and its impact on VMware products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0024.html.
  - This release resolves CVE-2023-34059 which only affects open-vm-tools.
    For more information on this vulnerability, please see the Resolved
    Issues section of the Release Notes.
  - A GitHub issue has been handled. Please see the Resolved Issues section
    of the Release Notes.
  - An update to the deployPkg plugin to coordinate with recent releases
    of cloud-init for improvement for guest VM customization.
  - For issues resolved in this release, see the Resolved Issues
    &lt;https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md#resolved-issues&gt;
    section of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.5 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/ChangeLog
- Drop patch now contained in 12.3.5:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="kallan@suse.com" date="1702296000">- Fix (bsc#1217796) - Fix outdated libxmlsec1 dependency version.
  Updates to open-vm-tools for SLES 12 SP4 and SP5 are now being built
  againt against libxmlsec1-1-1.2.37. Update the spec file to now require
  libxmlsec1-openssl1 &gt;= 1.2.37.</changelog>
  <changelog author="dimstar@opensuse.org" date="1703073600">- Own %{_modulesloaddir}: used to be present via udev-mini -&gt; kmod
  - &gt; suse-module-tools dependency before.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1711195200">- update to 12.4.0:
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/open-vm-tools/ChangeLog
  There are no new features in the open-vm-tools 12.4.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been handled. Please see the Resolved
    Issues section of the Release Notes.
  * A number of issues flagged by Coverity have been addressed.
  * For issues resolved in this release, see the Resolved Issues
    section of the Release Notes.</changelog>
  <changelog author="kallan@suse.com" date="1711540800">- Remove protobuf &lt; 22 dependency from spec file (bsc#1217478)
  Required linking with additional absl libraries for sle_version &gt; 150400.
- Use (boo#1222089) for updating open-vm-tools to version 12.4.0.</changelog>
  <changelog author="kallan@suse.com" date="1719835200">- Update to 12.4.5 (build 23787635) (boo#1227181)
  - There are no new features in the open-vm-tools 12.4.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - A Github pull request and associated issue has been handled. Please
    see the Resolved Issues section of the Release Notes.
  - A number of issues flagged by Coverity and ShellCheck have been
    addressed.
  - A vmtoolsd process hang related to nested logging from an RPC Channel
    error has been fixed.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see: https://github.com/vmware/open-vm-tools/releases/tag/stable-12.4.5
  Release Notes are available at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/ReleaseNotes.md
  The granular changes that have gone into the 12.4.5 release are in the ChangeLog at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/open-vm-tools/ChangeLog</changelog>
</package>
<package pkgid="d07555319880683eaf3e61b18a29e5b82a3fe350e6fc2f16b4530ce4fc62f205" name="open-vm-tools" arch="x86_64">
  <version epoch="0" ver="12.4.5" rel="150300.52.6"/>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- limit to protobuf &lt; 22 for now until build failures have been fixed</changelog>
  <changelog author="kallan@suse.com" date="1693224000">- Fix (bsc#1214566) - (CVE-2023-20900) - VUL-0: CVE-2023-20900:
  open-vm-tools: SAML token signature bypass vulnerability
  + Add patch: CVE-20230-20900.patch</changelog>
  <changelog author="kallan@suse.com" date="1694001600">- Update to 12.3.0 (build 22234872) (boo#1214850)
  - There are no new features in the open-vm-tools 12.3.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release integrates CVE-2023-20900 without the need for a patch.
    For more information on this vulnerability and its impact on VMware
    products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0019.html.
  - A tools.conf configuration setting is available to temporaily direct
    Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
    of ignoring file systems already frozen.
  - Building of the VMware Guest Authentication Service (VGAuth) using
    "xml-security-c" and "xerces-c" is being deprecated.
  - A number of Coverity reported issues have been addressed.
  - A number of GitHub issues and pull requests have been handled.
    Please see the Resolves Issues section of the Release Notes.
  - For issues resolved in this release, see the Resolved Issues section
    of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.0 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog
- Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests
- jsc-PED-1344 - reinable building containerinfo plugin for SLES 15 SP4.
- Drop patch now contained in 12.3.0:
  + 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch
  + 0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  + 2023-20867-Remove-some-dead-code.patch
  + CVE-20230-20900.patch</changelog>
  <changelog author="meissner@suse.com" date="1695297600">- open-vm-tools is built with containerinfo plugin from 15 sp3 onwards</changelog>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697976000">- Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer
  needed, nor used (since 12.3.0 release).</changelog>
  <changelog author="kallan@suse.com" date="1698667200">- Update to 12.3.5 (build 22544099) (boo#1216670)
  - There are no new features in the open-vm-tools 12.3.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release resolves CVE-2023-34058. For more information on this
    vulnerability and its impact on VMware products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0024.html.
  - This release resolves CVE-2023-34059 which only affects open-vm-tools.
    For more information on this vulnerability, please see the Resolved
    Issues section of the Release Notes.
  - A GitHub issue has been handled. Please see the Resolved Issues section
    of the Release Notes.
  - An update to the deployPkg plugin to coordinate with recent releases
    of cloud-init for improvement for guest VM customization.
  - For issues resolved in this release, see the Resolved Issues
    &lt;https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md#resolved-issues&gt;
    section of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.5 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/ChangeLog
- Drop patch now contained in 12.3.5:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="kallan@suse.com" date="1702296000">- Fix (bsc#1217796) - Fix outdated libxmlsec1 dependency version.
  Updates to open-vm-tools for SLES 12 SP4 and SP5 are now being built
  againt against libxmlsec1-1-1.2.37. Update the spec file to now require
  libxmlsec1-openssl1 &gt;= 1.2.37.</changelog>
  <changelog author="dimstar@opensuse.org" date="1703073600">- Own %{_modulesloaddir}: used to be present via udev-mini -&gt; kmod
  - &gt; suse-module-tools dependency before.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1711195200">- update to 12.4.0:
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/open-vm-tools/ChangeLog
  There are no new features in the open-vm-tools 12.4.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been handled. Please see the Resolved
    Issues section of the Release Notes.
  * A number of issues flagged by Coverity have been addressed.
  * For issues resolved in this release, see the Resolved Issues
    section of the Release Notes.</changelog>
  <changelog author="kallan@suse.com" date="1711540800">- Remove protobuf &lt; 22 dependency from spec file (bsc#1217478)
  Required linking with additional absl libraries for sle_version &gt; 150400.
- Use (boo#1222089) for updating open-vm-tools to version 12.4.0.</changelog>
  <changelog author="kallan@suse.com" date="1719835200">- Update to 12.4.5 (build 23787635) (boo#1227181)
  - There are no new features in the open-vm-tools 12.4.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - A Github pull request and associated issue has been handled. Please
    see the Resolved Issues section of the Release Notes.
  - A number of issues flagged by Coverity and ShellCheck have been
    addressed.
  - A vmtoolsd process hang related to nested logging from an RPC Channel
    error has been fixed.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see: https://github.com/vmware/open-vm-tools/releases/tag/stable-12.4.5
  Release Notes are available at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/ReleaseNotes.md
  The granular changes that have gone into the 12.4.5 release are in the ChangeLog at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/open-vm-tools/ChangeLog</changelog>
</package>
<package pkgid="f7c0722e8c6aca95ded8c30a9a2a78b9a6ee783f8ff6d95ef9d79ec341d26ae9" name="openCryptoki" arch="s390x">
  <version epoch="0" ver="3.23.0" rel="150500.3.3.13"/>
  <changelog author="kukuk@suse.com" date="1611230400">- Don't require pwdutils for build, dropped long ago and not needed</changelog>
  <changelog author="mpost@suse.com" date="1611576000">- Added the following patches for bsc#1179319
  * Fix compiling with C++:
    ocki-3.15.1-Fix-compiling-with-c.patch
  * Added error message handling for p11sak remove-key command.
    ocki-3.15.1-Added-error-message-handling-for-p11sak-remove-key-c.patch</changelog>
  <changelog author="mpost@suse.com" date="1613476800">- Added ocki-3.15.1-A-slot-ID-has-nothing-to-do-with-the-number-of-slots.patch
  (bsc#1182120)
  Fix pkcscca migration fails with usr/sb2 is not a valid slot ID
- Added ocki-3.15.1-SOFT-Fix-problem-with-C_Get-SetOperationState-and-di.patch
  (bsc#1182190)
  Fix a segmentation fault of the sess_opstate test on the Soft Token</changelog>
  <changelog author="mpost@suse.com" date="1623758400">- Added ocki-3.15.1-SOFT-Check-the-EC-Key-on-C_CreateObject-and-C_Derive.patch
  When constructing an OpenSSL EC public or private key from PKCS#11
  attributes or ECDH public data, check that the key is valid, i.e. that
  the point is on the curve.
  (bsc#1185976)</changelog>
  <changelog author="mpost@suse.com" date="1624363200">- Added the following patches for bsc#1182726 " p11sak list-key segfault"
  * ocki-3.15.1-Added-NULL-pointer-to-avoid-double-free-for-the-list.patch
    Added NULL pointer to avoid double free() for the list-key and
    remove-key commands.
  * ocki-3.15.1-Fixed-p11sak-and-corresponding-test-case.patch
    Note that two hunks that were unrelated to fixing the running
    code were removed from this patch.
  * ocki-3.15.1-p11sak-Fix-CKA_LABEL-handling.patch</changelog>
  <changelog author="mpost@suse.com" date="1628164800">- Added the following patches for bsc#1188879:
  * ocki-3.15.1-pkcstok_migrate-Quote-strings-with-spaces-in-opencry.patch
    When modifying opencryptoki.conf during token migration, put quotes
    around strings that contain spaces, e.g. for the slot description and
    manufacturer.
  * ocki-3.15.1-pkcstok_migrate-Don-t-remove-tokversion-x.y-during-m.patch
    When migrating a slot the opencryptoki.conf file is modified. If it
    contains slots that already contain the 'tokversion = x.y' keyword,
    this is accidentally removed when migrating another slot.
  * ocki-3.15.1-pkcstok_migrate-Fix-detection-if-pkcsslotd-is-still-.patch
    Change the code to use the pid file that pkcsslotd creates, and check
    if the process with the pid contained in the pid file still exists and
    runs pkcsslotd.
  * ocki-3.15.1-pkcstok_migrate-Rework-string-quoting-for-opencrypto.patch
    Always quote the value of 'description' and 'manufacturer'. Quote the
    value of 'stdll', 'confname', and 'tokname' if it contains spaces, and
    never quote the value of 'hwversion', 'firmwareversion', and 'tokversion'.</changelog>
  <changelog author="mpost@suse.com" date="1634817600">- Upgraded to version 3.17.0 (jsc#SLE-18326)
  + openCryptoki 3.17
  - tools: added function to list keys to p11sak
  - common: added support for OpenSSL 3.0
  - common: added support for event notifications
  - ICA: added SW fallbacks
  * openCryptoki 3.16
  - EP11: protected-key option
  - EP11: support attribute-bound keys
  - CCA: import and export of secure key objects
  - Bug fixes
- Removed the following obsolete patches:
  ocki-3.15.1-Added-error-message-handling-for-p11sak-remove-key-c.patch
  ocki-3.15.1-Fix-compiling-with-c.patch
  ocki-3.15.1-A-slot-ID-has-nothing-to-do-with-the-number-of-slots.patch
  ocki-3.15.1-SOFT-Fix-problem-with-C_Get-SetOperationState-and-di.patch
  ocki-3.15.1-Added-NULL-pointer-to-avoid-double-free-for-the-list.patch
  ocki-3.15.1-SOFT-Check-the-EC-Key-on-C_CreateObject-and-C_Derive.patch
  ocki-3.15.1-Fixed-p11sak-and-corresponding-test-case.patch
  ocki-3.15.1-p11sak-Fix-CKA_LABEL-handling.patch
  ocki-3.15.1-pkcstok_migrate-Quote-strings-with-spaces-in-opencry.patch
  ocki-3.15.1-pkcstok_migrate-Don-t-remove-tokversion-x.y-during-m.patch
  ocki-3.15.1-pkcstok_migrate-Fix-detection-if-pkcsslotd-is-still-.patch
  ocki-3.15.1-pkcstok_migrate-Rework-string-quoting-for-opencrypto.patch</changelog>
  <changelog author="mpost@suse.com" date="1648036800">- Added the following two patches for bac#1197395. The CKM_IBM_DILITHIUM
  mechanism does not show up as supported by the EP11 token when an
  upgraded EP11 host library is used.
  * openCryptoki-sles15-sp4-EP11-Dilithium-Specify-OID-of-key-strength-at-key-ge.patch
  * openCryptoki-sles15-sp4-EP11-Fix-host-library-version-query.patch</changelog>
  <changelog author="mpost@suse.com" date="1654171200">- Made the following changes for bsc#1199862 "Please install
  p11sak_defined_attrs.conf."
  * Replaced ocki-3.11-remove-make-install-chgrp.patch with
    ocki-3.17-remove-make-install-chgrp.patch to remove the
    "-g pkcs11" parameter from the install command in the Makefile
  * Updated the spec file to include
    /etc/opencryptoki/p11sak_defined_attrs.conf as a %config file
    with the necessary permissions and group ownership.</changelog>
  <changelog author="mpost@suse.com" date="1660132800">- Added ocki-3.17-EP11-Fix-C_GetMechanismList-returning-CKR_BUFFER_TOO.patch
  for bsc#1202106. One test of the gen_purpose test cases fails with
  C_GetMechanismList #2 rc=CKR_BUFFER_TOO_SMALL" error on the EP11 Token.</changelog>
  <changelog author="mpost@suse.com" date="1664539200">- Upgrade to version 3.19.0 (jsc#PED-616)
  + openCryptoki 3.19
  - CCA: check for expected master key verification patterns at token init
  - CCA: check master key verification pattern of created keys to be as expected
  - EP11: check for expected wrapping key verification pattern at token init
  - EP11: check wrapping key verification pattern of created keys to be as expected
  - p11sak/pkcsconf: display PKCS#11 URIs
  - p11sak: add support for IBM specific Dilithium keys
  - p11sak: allow to list keys filtered by label
  - common: add support for dual-function cryptographic functions
  - Add support for C_SessionCancel function (PKCS#11 v3.0)
  - EP11: add support for schnorr signatures (mechanism CKM_IBM_ECDSA_OTHER)
  - EP11: add support for Bitcoin key derivation (mechanism CKM_IBM_BTC_DERIVE)
  - Bug fixes
  + openCryptoki 3.18
  - Default to FIPS compliant token data format (tokversion = 3.12)
  - Add support for restricting usage of mechanisms and keys via a global policy
  - Add support for statistics counting of mechanism usage
  - ICA/EP11: Support libica version 4
  - p11sak tool: Allow to set different attributes for public and private keys
- Replaced ocki-3.17-remove-make-install-chgrp.patch with an updated
  version named ocki-3.19-remove-make-install-chgrp.patch to fit
  the current state of the source.
- Removed the following obsolete patches:
  openCryptoki-sles15-sp4-EP11-Dilithium-Specify-OID-of-key-strength-at-key-ge.patch
  openCryptoki-sles15-sp4-EP11-Fix-host-library-version-query.patch
  ocki-3.17-EP11-Fix-C_GetMechanismList-returning-CKR_BUFFER_TOO.patch</changelog>
  <changelog author="mpost@suse.com" date="1669636800">- Updated spec file to set permissions on /etc/opencryptoki/strength.conf
  to be owned by root:pkcs11 with permissions of 640. (bsc#1205566)</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1675684800">- Updated the package openCryptoki 3.19.0 (jsc#PED-616, bsc#1207760), added the
  following patches:
  * ocki-3.19.0-0001-EP11-Unify-key-pair-generation-functions.patch
  * ocki-3.19.0-0002-EP11-Do-not-report-DSA-DH-parameter-generation-as-be.patch
  * ocki-3.19.0-0003-EP11-Do-not-pass-empty-CKA_PUBLIC_KEY_INFO-to-EP11-h.patch
  * ocki-3.19.0-0004-Mechtable-CKM_IBM_DILITHIUM-can-also-be-used-for-key.patch
  * ocki-3.19.0-0005-EP11-Remove-DSA-DH-parameter-generation-mechanisms-f.patch
  * ocki-3.19.0-0006-EP11-Pass-back-chain-code-for-CKM_IBM_BTC_DERIVE.patch
  * ocki-3.19.0-0007-EP11-Supply-CKA_PUBLIC_KEY_INFO-with-CKM_IBM_BTC_DER.patch
  * ocki-3.19.0-0008-EP11-Supply-CKA_PUBLIC_KEY_INFO-when-importing-priva.patch
  * ocki-3.19.0-0009-EP11-Fix-memory-leak-introduced-with-recent-commit.patch
  * ocki-3.19.0-0010-p11sak-Fix-segfault-when-dilithium-version-is-not-sp.patch
  * ocki-3.19.0-0011-EP11-remove-dead-code-and-unused-variables.patch
  * ocki-3.19.0-0012-EP11-Update-EP11-host-library-header-files.patch
  * ocki-3.19.0-0013-EP11-Support-EP11-host-library-version-4.patch
  * ocki-3.19.0-0014-EP11-Add-new-control-points.patch
  * ocki-3.19.0-0015-EP11-Default-unknown-CPs-to-ON.patch
  * ocki-3.19.0-0016-COMMON-Add-defines-for-Dilithium-round-2-and-3-varia.patch
  * ocki-3.19.0-0017-COMMON-Add-defines-for-Kyber.patch
  * ocki-3.19.0-0018-COMMON-Add-post-quantum-algorithm-OIDs.patch
  * ocki-3.19.0-0019-COMMON-Dilithium-key-BER-encoding-decoding-allow-dif.patch
  * ocki-3.19.0-0020-COMMON-EP11-Add-CKA_VALUE-holding-SPKI-PKCS-8-of-key.patch
  * ocki-3.19.0-0021-COMMON-EP11-Allow-to-select-Dilithium-variant-via-mo.patch
  * ocki-3.19.0-0022-EP11-Query-supported-PQC-variants-and-restrict-usage.patch
  * ocki-3.19.0-0023-POLICY-Dilithium-strength-and-signature-size-depends.patch
  * ocki-3.19.0-0024-TESTCASES-Test-Dilithium-variants.patch
  * ocki-3.19.0-0025-COMMON-EP11-Add-Kyber-key-type-and-mechanism.patch
  * ocki-3.19.0-0026-EP11-Add-support-for-generating-and-importing-Kyber-.patch
  * ocki-3.19.0-0027-EP11-Add-support-for-encrypt-decrypt-and-KEM-operati.patch
  * ocki-3.19.0-0028-POLICY-STATISTICS-Check-for-Kyber-KEM-KDFs-and-count.patch
  * ocki-3.19.0-0029-TESTCASES-Add-tests-for-CKM_IBM_KYBER.patch
  * ocki-3.19.0-0030-p11sak-Support-additional-Dilithium-variants.patch
  * ocki-3.19.0-0031-p11sak-Add-support-for-IBM-Kyber-key-type.patch
  * ocki-3.19.0-0032-testcase-Enhance-p11sak-testcase-to-generate-IBM-Kyb.patch
  * ocki-3.19.0-0033-EP11-Supply-CKA_PUBLIC_KEY_INFO-with-CKM_IBM_BTC_DER.patch
  * ocki-3.19.0-0034-EP11-Fix-setting-unknown-CPs-to-ON.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1675771200">- Added patch for compile errors
  * ocki-3.19.0-0035-Fix-compile-error-error-initializer-element-is-not-c.patch
-- Changed spec file to use %autosetup instead of %setup.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1676462400">- Updated package to openCryptoki 3.20 (bsc#1207760,
    jsc#PED-3376, jsc#PED-2870, jsc#PED-2869 )
- Removed the following obsolite patches:
  * ocki-3.19.0-0001-EP11-Unify-key-pair-generation-functions.patch
  * ocki-3.19.0-0002-EP11-Do-not-report-DSA-DH-parameter-generation-as-be.patch
  * ocki-3.19.0-0003-EP11-Do-not-pass-empty-CKA_PUBLIC_KEY_INFO-to-EP11-h.patch
  * ocki-3.19.0-0004-Mechtable-CKM_IBM_DILITHIUM-can-also-be-used-for-key.patch
  * ocki-3.19.0-0005-EP11-Remove-DSA-DH-parameter-generation-mechanisms-f.patch
  * ocki-3.19.0-0006-EP11-Pass-back-chain-code-for-CKM_IBM_BTC_DERIVE.patch
  * ocki-3.19.0-0007-EP11-Supply-CKA_PUBLIC_KEY_INFO-with-CKM_IBM_BTC_DER.patch
  * ocki-3.19.0-0008-EP11-Supply-CKA_PUBLIC_KEY_INFO-when-importing-priva.patch
  * ocki-3.19.0-0009-EP11-Fix-memory-leak-introduced-with-recent-commit.patch
  * ocki-3.19.0-0010-p11sak-Fix-segfault-when-dilithium-version-is-not-sp.patch
  * ocki-3.19.0-0011-EP11-remove-dead-code-and-unused-variables.patch
  * ocki-3.19.0-0012-EP11-Update-EP11-host-library-header-files.patch
  * ocki-3.19.0-0013-EP11-Support-EP11-host-library-version-4.patch
  * ocki-3.19.0-0014-EP11-Add-new-control-points.patch
  * ocki-3.19.0-0015-EP11-Default-unknown-CPs-to-ON.patch
  * ocki-3.19.0-0016-COMMON-Add-defines-for-Dilithium-round-2-and-3-varia.patch
  * ocki-3.19.0-0017-COMMON-Add-defines-for-Kyber.patch
  * ocki-3.19.0-0018-COMMON-Add-post-quantum-algorithm-OIDs.patch
  * ocki-3.19.0-0019-COMMON-Dilithium-key-BER-encoding-decoding-allow-dif.patch
  * ocki-3.19.0-0020-COMMON-EP11-Add-CKA_VALUE-holding-SPKI-PKCS-8-of-key.patch
  * ocki-3.19.0-0021-COMMON-EP11-Allow-to-select-Dilithium-variant-via-mo.patch
  * ocki-3.19.0-0022-EP11-Query-supported-PQC-variants-and-restrict-usage.patch
  * ocki-3.19.0-0023-POLICY-Dilithium-strength-and-signature-size-depends.patch
  * ocki-3.19.0-0024-TESTCASES-Test-Dilithium-variants.patch
  * ocki-3.19.0-0025-COMMON-EP11-Add-Kyber-key-type-and-mechanism.patch
  * ocki-3.19.0-0026-EP11-Add-support-for-generating-and-importing-Kyber-.patch
  * ocki-3.19.0-0027-EP11-Add-support-for-encrypt-decrypt-and-KEM-operati.patch
  * ocki-3.19.0-0028-POLICY-STATISTICS-Check-for-Kyber-KEM-KDFs-and-count.patch
  * ocki-3.19.0-0029-TESTCASES-Add-tests-for-CKM_IBM_KYBER.patch
  * ocki-3.19.0-0030-p11sak-Support-additional-Dilithium-variants.patch
  * ocki-3.19.0-0031-p11sak-Add-support-for-IBM-Kyber-key-type.patch
  * ocki-3.19.0-0032-testcase-Enhance-p11sak-testcase-to-generate-IBM-Kyb.patch
  * ocki-3.19.0-0033-EP11-Supply-CKA_PUBLIC_KEY_INFO-with-CKM_IBM_BTC_DER.patch
  * ocki-3.19.0-0034-EP11-Fix-setting-unknown-CPs-to-ON.patch
  * ocki-3.19.0-0035-Fix-compile-error-error-initializer-element-is-not-c.patch
- Reworked ocki-3.19-remove-make-install-chgrp.patch to fit the current version of
  the package and renamed it to  ocki-3.20-remove-make-install-chgrp.patch.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1685102400">- Update to version 3.21 (jsc#PED-3360, jsc#PED-3361)
  * openCryptoki 3.21
  - EP11 and CCA: Support concurrent HSM master key changes
  - CCA: protected-key option
  - pkcsslotd: no longer run as root user and further hardening
  - p11sak: Add support for additional key types (DH, DSA, generic secret)
  - p11sak: Allow wildcards in label filter
  - p11sak: Allow to specify hex value for CKA_ID attribute
  - p11sak: Support sorting when listing keys
  - p11sak: New commands: set-key-attr, copy-key to modify and copy keys
  - p11sak: New commands: import-key, export-key to import and export keys
  - Remove support for --disable-locks (transactional memory)
  - Updates to harden against RSA timing attacks
  - Bug fixes
- Amended a new patch to fit the version 3.21
  * ocki-3.21-remove-make-install-chgrp.patch
- Removed the old patch for the version 3.20
  * ocki-3.20-remove-make-install-chgrp.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1695297600">- Upgrade to version 3.22 (jsc#PED-3361)
  * openCryptoki 3.22
  - CCA: Add support for the AES-XTS key type using CPACF protected keys
  - p11sak: Add support for managing certificate objects
  - p11sak: Add support for public sessions (no-login option)
  - p11sak: Add support for logging in as SO (security Officer)
  - p11sak: Add support for importing/exporting Edwards and Montgomery keys
  - p11sak: Add support for importing of RSA-PSS keys and certificates
  - CCA/EP11/Soft/ICA: Ensure that the 2 key parts of an AES-XTS key are different
  * Bug fixes</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1701691200">- Amended the .spec file  for pkcsslotd (jsc#1217703)
  * Renamed the patch ocki-3.21-remove-make-install-chgrp.patch to
    ocki-3.22-remove-make-install-chgrp.patch</changelog>
  <changelog author="meissner@suse.com" date="1707134400">- provide user(pkcs11) and group(pkcs11)</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1708948800">- Upgrade openCryptoki to version 3.23 (jsc#PED-3360, jsc#PED-3361)
  * EP11: Add support for FIPS-session mode
  * Updates to harden against RSA timing attacks (bsc#1219217)
  * Bug fixes
- Renamed ocki-3.22-remove-make-install-chgrp.patch to
    ocki-3.23-remove-make-install-chgrp.patch</changelog>
</package>
<package pkgid="b7cf4f8ae2932eaa3a8bf4b5f0cfa7f10551370660108115c1e90820bfe76528" name="openCryptoki" arch="src">
  <version epoch="0" ver="3.23.0" rel="150500.3.3.13"/>
  <changelog author="kukuk@suse.com" date="1611230400">- Don't require pwdutils for build, dropped long ago and not needed</changelog>
  <changelog author="mpost@suse.com" date="1611576000">- Added the following patches for bsc#1179319
  * Fix compiling with C++:
    ocki-3.15.1-Fix-compiling-with-c.patch
  * Added error message handling for p11sak remove-key command.
    ocki-3.15.1-Added-error-message-handling-for-p11sak-remove-key-c.patch</changelog>
  <changelog author="mpost@suse.com" date="1613476800">- Added ocki-3.15.1-A-slot-ID-has-nothing-to-do-with-the-number-of-slots.patch
  (bsc#1182120)
  Fix pkcscca migration fails with usr/sb2 is not a valid slot ID
- Added ocki-3.15.1-SOFT-Fix-problem-with-C_Get-SetOperationState-and-di.patch
  (bsc#1182190)
  Fix a segmentation fault of the sess_opstate test on the Soft Token</changelog>
  <changelog author="mpost@suse.com" date="1623758400">- Added ocki-3.15.1-SOFT-Check-the-EC-Key-on-C_CreateObject-and-C_Derive.patch
  When constructing an OpenSSL EC public or private key from PKCS#11
  attributes or ECDH public data, check that the key is valid, i.e. that
  the point is on the curve.
  (bsc#1185976)</changelog>
  <changelog author="mpost@suse.com" date="1624363200">- Added the following patches for bsc#1182726 " p11sak list-key segfault"
  * ocki-3.15.1-Added-NULL-pointer-to-avoid-double-free-for-the-list.patch
    Added NULL pointer to avoid double free() for the list-key and
    remove-key commands.
  * ocki-3.15.1-Fixed-p11sak-and-corresponding-test-case.patch
    Note that two hunks that were unrelated to fixing the running
    code were removed from this patch.
  * ocki-3.15.1-p11sak-Fix-CKA_LABEL-handling.patch</changelog>
  <changelog author="mpost@suse.com" date="1628164800">- Added the following patches for bsc#1188879:
  * ocki-3.15.1-pkcstok_migrate-Quote-strings-with-spaces-in-opencry.patch
    When modifying opencryptoki.conf during token migration, put quotes
    around strings that contain spaces, e.g. for the slot description and
    manufacturer.
  * ocki-3.15.1-pkcstok_migrate-Don-t-remove-tokversion-x.y-during-m.patch
    When migrating a slot the opencryptoki.conf file is modified. If it
    contains slots that already contain the 'tokversion = x.y' keyword,
    this is accidentally removed when migrating another slot.
  * ocki-3.15.1-pkcstok_migrate-Fix-detection-if-pkcsslotd-is-still-.patch
    Change the code to use the pid file that pkcsslotd creates, and check
    if the process with the pid contained in the pid file still exists and
    runs pkcsslotd.
  * ocki-3.15.1-pkcstok_migrate-Rework-string-quoting-for-opencrypto.patch
    Always quote the value of 'description' and 'manufacturer'. Quote the
    value of 'stdll', 'confname', and 'tokname' if it contains spaces, and
    never quote the value of 'hwversion', 'firmwareversion', and 'tokversion'.</changelog>
  <changelog author="mpost@suse.com" date="1634817600">- Upgraded to version 3.17.0 (jsc#SLE-18326)
  + openCryptoki 3.17
  - tools: added function to list keys to p11sak
  - common: added support for OpenSSL 3.0
  - common: added support for event notifications
  - ICA: added SW fallbacks
  * openCryptoki 3.16
  - EP11: protected-key option
  - EP11: support attribute-bound keys
  - CCA: import and export of secure key objects
  - Bug fixes
- Removed the following obsolete patches:
  ocki-3.15.1-Added-error-message-handling-for-p11sak-remove-key-c.patch
  ocki-3.15.1-Fix-compiling-with-c.patch
  ocki-3.15.1-A-slot-ID-has-nothing-to-do-with-the-number-of-slots.patch
  ocki-3.15.1-SOFT-Fix-problem-with-C_Get-SetOperationState-and-di.patch
  ocki-3.15.1-Added-NULL-pointer-to-avoid-double-free-for-the-list.patch
  ocki-3.15.1-SOFT-Check-the-EC-Key-on-C_CreateObject-and-C_Derive.patch
  ocki-3.15.1-Fixed-p11sak-and-corresponding-test-case.patch
  ocki-3.15.1-p11sak-Fix-CKA_LABEL-handling.patch
  ocki-3.15.1-pkcstok_migrate-Quote-strings-with-spaces-in-opencry.patch
  ocki-3.15.1-pkcstok_migrate-Don-t-remove-tokversion-x.y-during-m.patch
  ocki-3.15.1-pkcstok_migrate-Fix-detection-if-pkcsslotd-is-still-.patch
  ocki-3.15.1-pkcstok_migrate-Rework-string-quoting-for-opencrypto.patch</changelog>
  <changelog author="mpost@suse.com" date="1648036800">- Added the following two patches for bac#1197395. The CKM_IBM_DILITHIUM
  mechanism does not show up as supported by the EP11 token when an
  upgraded EP11 host library is used.
  * openCryptoki-sles15-sp4-EP11-Dilithium-Specify-OID-of-key-strength-at-key-ge.patch
  * openCryptoki-sles15-sp4-EP11-Fix-host-library-version-query.patch</changelog>
  <changelog author="mpost@suse.com" date="1654171200">- Made the following changes for bsc#1199862 "Please install
  p11sak_defined_attrs.conf."
  * Replaced ocki-3.11-remove-make-install-chgrp.patch with
    ocki-3.17-remove-make-install-chgrp.patch to remove the
    "-g pkcs11" parameter from the install command in the Makefile
  * Updated the spec file to include
    /etc/opencryptoki/p11sak_defined_attrs.conf as a %config file
    with the necessary permissions and group ownership.</changelog>
  <changelog author="mpost@suse.com" date="1660132800">- Added ocki-3.17-EP11-Fix-C_GetMechanismList-returning-CKR_BUFFER_TOO.patch
  for bsc#1202106. One test of the gen_purpose test cases fails with
  C_GetMechanismList #2 rc=CKR_BUFFER_TOO_SMALL" error on the EP11 Token.</changelog>
  <changelog author="mpost@suse.com" date="1664539200">- Upgrade to version 3.19.0 (jsc#PED-616)
  + openCryptoki 3.19
  - CCA: check for expected master key verification patterns at token init
  - CCA: check master key verification pattern of created keys to be as expected
  - EP11: check for expected wrapping key verification pattern at token init
  - EP11: check wrapping key verification pattern of created keys to be as expected
  - p11sak/pkcsconf: display PKCS#11 URIs
  - p11sak: add support for IBM specific Dilithium keys
  - p11sak: allow to list keys filtered by label
  - common: add support for dual-function cryptographic functions
  - Add support for C_SessionCancel function (PKCS#11 v3.0)
  - EP11: add support for schnorr signatures (mechanism CKM_IBM_ECDSA_OTHER)
  - EP11: add support for Bitcoin key derivation (mechanism CKM_IBM_BTC_DERIVE)
  - Bug fixes
  + openCryptoki 3.18
  - Default to FIPS compliant token data format (tokversion = 3.12)
  - Add support for restricting usage of mechanisms and keys via a global policy
  - Add support for statistics counting of mechanism usage
  - ICA/EP11: Support libica version 4
  - p11sak tool: Allow to set different attributes for public and private keys
- Replaced ocki-3.17-remove-make-install-chgrp.patch with an updated
  version named ocki-3.19-remove-make-install-chgrp.patch to fit
  the current state of the source.
- Removed the following obsolete patches:
  openCryptoki-sles15-sp4-EP11-Dilithium-Specify-OID-of-key-strength-at-key-ge.patch
  openCryptoki-sles15-sp4-EP11-Fix-host-library-version-query.patch
  ocki-3.17-EP11-Fix-C_GetMechanismList-returning-CKR_BUFFER_TOO.patch</changelog>
  <changelog author="mpost@suse.com" date="1669636800">- Updated spec file to set permissions on /etc/opencryptoki/strength.conf
  to be owned by root:pkcs11 with permissions of 640. (bsc#1205566)</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1675684800">- Updated the package openCryptoki 3.19.0 (jsc#PED-616, bsc#1207760), added the
  following patches:
  * ocki-3.19.0-0001-EP11-Unify-key-pair-generation-functions.patch
  * ocki-3.19.0-0002-EP11-Do-not-report-DSA-DH-parameter-generation-as-be.patch
  * ocki-3.19.0-0003-EP11-Do-not-pass-empty-CKA_PUBLIC_KEY_INFO-to-EP11-h.patch
  * ocki-3.19.0-0004-Mechtable-CKM_IBM_DILITHIUM-can-also-be-used-for-key.patch
  * ocki-3.19.0-0005-EP11-Remove-DSA-DH-parameter-generation-mechanisms-f.patch
  * ocki-3.19.0-0006-EP11-Pass-back-chain-code-for-CKM_IBM_BTC_DERIVE.patch
  * ocki-3.19.0-0007-EP11-Supply-CKA_PUBLIC_KEY_INFO-with-CKM_IBM_BTC_DER.patch
  * ocki-3.19.0-0008-EP11-Supply-CKA_PUBLIC_KEY_INFO-when-importing-priva.patch
  * ocki-3.19.0-0009-EP11-Fix-memory-leak-introduced-with-recent-commit.patch
  * ocki-3.19.0-0010-p11sak-Fix-segfault-when-dilithium-version-is-not-sp.patch
  * ocki-3.19.0-0011-EP11-remove-dead-code-and-unused-variables.patch
  * ocki-3.19.0-0012-EP11-Update-EP11-host-library-header-files.patch
  * ocki-3.19.0-0013-EP11-Support-EP11-host-library-version-4.patch
  * ocki-3.19.0-0014-EP11-Add-new-control-points.patch
  * ocki-3.19.0-0015-EP11-Default-unknown-CPs-to-ON.patch
  * ocki-3.19.0-0016-COMMON-Add-defines-for-Dilithium-round-2-and-3-varia.patch
  * ocki-3.19.0-0017-COMMON-Add-defines-for-Kyber.patch
  * ocki-3.19.0-0018-COMMON-Add-post-quantum-algorithm-OIDs.patch
  * ocki-3.19.0-0019-COMMON-Dilithium-key-BER-encoding-decoding-allow-dif.patch
  * ocki-3.19.0-0020-COMMON-EP11-Add-CKA_VALUE-holding-SPKI-PKCS-8-of-key.patch
  * ocki-3.19.0-0021-COMMON-EP11-Allow-to-select-Dilithium-variant-via-mo.patch
  * ocki-3.19.0-0022-EP11-Query-supported-PQC-variants-and-restrict-usage.patch
  * ocki-3.19.0-0023-POLICY-Dilithium-strength-and-signature-size-depends.patch
  * ocki-3.19.0-0024-TESTCASES-Test-Dilithium-variants.patch
  * ocki-3.19.0-0025-COMMON-EP11-Add-Kyber-key-type-and-mechanism.patch
  * ocki-3.19.0-0026-EP11-Add-support-for-generating-and-importing-Kyber-.patch
  * ocki-3.19.0-0027-EP11-Add-support-for-encrypt-decrypt-and-KEM-operati.patch
  * ocki-3.19.0-0028-POLICY-STATISTICS-Check-for-Kyber-KEM-KDFs-and-count.patch
  * ocki-3.19.0-0029-TESTCASES-Add-tests-for-CKM_IBM_KYBER.patch
  * ocki-3.19.0-0030-p11sak-Support-additional-Dilithium-variants.patch
  * ocki-3.19.0-0031-p11sak-Add-support-for-IBM-Kyber-key-type.patch
  * ocki-3.19.0-0032-testcase-Enhance-p11sak-testcase-to-generate-IBM-Kyb.patch
  * ocki-3.19.0-0033-EP11-Supply-CKA_PUBLIC_KEY_INFO-with-CKM_IBM_BTC_DER.patch
  * ocki-3.19.0-0034-EP11-Fix-setting-unknown-CPs-to-ON.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1675771200">- Added patch for compile errors
  * ocki-3.19.0-0035-Fix-compile-error-error-initializer-element-is-not-c.patch
-- Changed spec file to use %autosetup instead of %setup.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1676462400">- Updated package to openCryptoki 3.20 (bsc#1207760,
    jsc#PED-3376, jsc#PED-2870, jsc#PED-2869 )
- Removed the following obsolite patches:
  * ocki-3.19.0-0001-EP11-Unify-key-pair-generation-functions.patch
  * ocki-3.19.0-0002-EP11-Do-not-report-DSA-DH-parameter-generation-as-be.patch
  * ocki-3.19.0-0003-EP11-Do-not-pass-empty-CKA_PUBLIC_KEY_INFO-to-EP11-h.patch
  * ocki-3.19.0-0004-Mechtable-CKM_IBM_DILITHIUM-can-also-be-used-for-key.patch
  * ocki-3.19.0-0005-EP11-Remove-DSA-DH-parameter-generation-mechanisms-f.patch
  * ocki-3.19.0-0006-EP11-Pass-back-chain-code-for-CKM_IBM_BTC_DERIVE.patch
  * ocki-3.19.0-0007-EP11-Supply-CKA_PUBLIC_KEY_INFO-with-CKM_IBM_BTC_DER.patch
  * ocki-3.19.0-0008-EP11-Supply-CKA_PUBLIC_KEY_INFO-when-importing-priva.patch
  * ocki-3.19.0-0009-EP11-Fix-memory-leak-introduced-with-recent-commit.patch
  * ocki-3.19.0-0010-p11sak-Fix-segfault-when-dilithium-version-is-not-sp.patch
  * ocki-3.19.0-0011-EP11-remove-dead-code-and-unused-variables.patch
  * ocki-3.19.0-0012-EP11-Update-EP11-host-library-header-files.patch
  * ocki-3.19.0-0013-EP11-Support-EP11-host-library-version-4.patch
  * ocki-3.19.0-0014-EP11-Add-new-control-points.patch
  * ocki-3.19.0-0015-EP11-Default-unknown-CPs-to-ON.patch
  * ocki-3.19.0-0016-COMMON-Add-defines-for-Dilithium-round-2-and-3-varia.patch
  * ocki-3.19.0-0017-COMMON-Add-defines-for-Kyber.patch
  * ocki-3.19.0-0018-COMMON-Add-post-quantum-algorithm-OIDs.patch
  * ocki-3.19.0-0019-COMMON-Dilithium-key-BER-encoding-decoding-allow-dif.patch
  * ocki-3.19.0-0020-COMMON-EP11-Add-CKA_VALUE-holding-SPKI-PKCS-8-of-key.patch
  * ocki-3.19.0-0021-COMMON-EP11-Allow-to-select-Dilithium-variant-via-mo.patch
  * ocki-3.19.0-0022-EP11-Query-supported-PQC-variants-and-restrict-usage.patch
  * ocki-3.19.0-0023-POLICY-Dilithium-strength-and-signature-size-depends.patch
  * ocki-3.19.0-0024-TESTCASES-Test-Dilithium-variants.patch
  * ocki-3.19.0-0025-COMMON-EP11-Add-Kyber-key-type-and-mechanism.patch
  * ocki-3.19.0-0026-EP11-Add-support-for-generating-and-importing-Kyber-.patch
  * ocki-3.19.0-0027-EP11-Add-support-for-encrypt-decrypt-and-KEM-operati.patch
  * ocki-3.19.0-0028-POLICY-STATISTICS-Check-for-Kyber-KEM-KDFs-and-count.patch
  * ocki-3.19.0-0029-TESTCASES-Add-tests-for-CKM_IBM_KYBER.patch
  * ocki-3.19.0-0030-p11sak-Support-additional-Dilithium-variants.patch
  * ocki-3.19.0-0031-p11sak-Add-support-for-IBM-Kyber-key-type.patch
  * ocki-3.19.0-0032-testcase-Enhance-p11sak-testcase-to-generate-IBM-Kyb.patch
  * ocki-3.19.0-0033-EP11-Supply-CKA_PUBLIC_KEY_INFO-with-CKM_IBM_BTC_DER.patch
  * ocki-3.19.0-0034-EP11-Fix-setting-unknown-CPs-to-ON.patch
  * ocki-3.19.0-0035-Fix-compile-error-error-initializer-element-is-not-c.patch
- Reworked ocki-3.19-remove-make-install-chgrp.patch to fit the current version of
  the package and renamed it to  ocki-3.20-remove-make-install-chgrp.patch.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1685102400">- Update to version 3.21 (jsc#PED-3360, jsc#PED-3361)
  * openCryptoki 3.21
  - EP11 and CCA: Support concurrent HSM master key changes
  - CCA: protected-key option
  - pkcsslotd: no longer run as root user and further hardening
  - p11sak: Add support for additional key types (DH, DSA, generic secret)
  - p11sak: Allow wildcards in label filter
  - p11sak: Allow to specify hex value for CKA_ID attribute
  - p11sak: Support sorting when listing keys
  - p11sak: New commands: set-key-attr, copy-key to modify and copy keys
  - p11sak: New commands: import-key, export-key to import and export keys
  - Remove support for --disable-locks (transactional memory)
  - Updates to harden against RSA timing attacks
  - Bug fixes
- Amended a new patch to fit the version 3.21
  * ocki-3.21-remove-make-install-chgrp.patch
- Removed the old patch for the version 3.20
  * ocki-3.20-remove-make-install-chgrp.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1695297600">- Upgrade to version 3.22 (jsc#PED-3361)
  * openCryptoki 3.22
  - CCA: Add support for the AES-XTS key type using CPACF protected keys
  - p11sak: Add support for managing certificate objects
  - p11sak: Add support for public sessions (no-login option)
  - p11sak: Add support for logging in as SO (security Officer)
  - p11sak: Add support for importing/exporting Edwards and Montgomery keys
  - p11sak: Add support for importing of RSA-PSS keys and certificates
  - CCA/EP11/Soft/ICA: Ensure that the 2 key parts of an AES-XTS key are different
  * Bug fixes</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1701691200">- Amended the .spec file  for pkcsslotd (jsc#1217703)
  * Renamed the patch ocki-3.21-remove-make-install-chgrp.patch to
    ocki-3.22-remove-make-install-chgrp.patch</changelog>
  <changelog author="meissner@suse.com" date="1707134400">- provide user(pkcs11) and group(pkcs11)</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1708948800">- Upgrade openCryptoki to version 3.23 (jsc#PED-3360, jsc#PED-3361)
  * EP11: Add support for FIPS-session mode
  * Updates to harden against RSA timing attacks (bsc#1219217)
  * Bug fixes
- Renamed ocki-3.22-remove-make-install-chgrp.patch to
    ocki-3.23-remove-make-install-chgrp.patch</changelog>
</package>
<package pkgid="5c0e98d39e12747dab2b2bfa5e9b9547435f1a09564a44f416c203d2444a9a6b" name="openCryptoki" arch="s390x">
  <version epoch="0" ver="3.23.0" rel="150500.3.6.1"/>
  <changelog author="mpost@suse.com" date="1611576000">- Added the following patches for bsc#1179319
  * Fix compiling with C++:
    ocki-3.15.1-Fix-compiling-with-c.patch
  * Added error message handling for p11sak remove-key command.
    ocki-3.15.1-Added-error-message-handling-for-p11sak-remove-key-c.patch</changelog>
  <changelog author="mpost@suse.com" date="1613476800">- Added ocki-3.15.1-A-slot-ID-has-nothing-to-do-with-the-number-of-slots.patch
  (bsc#1182120)
  Fix pkcscca migration fails with usr/sb2 is not a valid slot ID
- Added ocki-3.15.1-SOFT-Fix-problem-with-C_Get-SetOperationState-and-di.patch
  (bsc#1182190)
  Fix a segmentation fault of the sess_opstate test on the Soft Token</changelog>
  <changelog author="mpost@suse.com" date="1623758400">- Added ocki-3.15.1-SOFT-Check-the-EC-Key-on-C_CreateObject-and-C_Derive.patch
  When constructing an OpenSSL EC public or private key from PKCS#11
  attributes or ECDH public data, check that the key is valid, i.e. that
  the point is on the curve.
  (bsc#1185976)</changelog>
  <changelog author="mpost@suse.com" date="1624363200">- Added the following patches for bsc#1182726 " p11sak list-key segfault"
  * ocki-3.15.1-Added-NULL-pointer-to-avoid-double-free-for-the-list.patch
    Added NULL pointer to avoid double free() for the list-key and
    remove-key commands.
  * ocki-3.15.1-Fixed-p11sak-and-corresponding-test-case.patch
    Note that two hunks that were unrelated to fixing the running
    code were removed from this patch.
  * ocki-3.15.1-p11sak-Fix-CKA_LABEL-handling.patch</changelog>
  <changelog author="mpost@suse.com" date="1628164800">- Added the following patches for bsc#1188879:
  * ocki-3.15.1-pkcstok_migrate-Quote-strings-with-spaces-in-opencry.patch
    When modifying opencryptoki.conf during token migration, put quotes
    around strings that contain spaces, e.g. for the slot description and
    manufacturer.
  * ocki-3.15.1-pkcstok_migrate-Don-t-remove-tokversion-x.y-during-m.patch
    When migrating a slot the opencryptoki.conf file is modified. If it
    contains slots that already contain the 'tokversion = x.y' keyword,
    this is accidentally removed when migrating another slot.
  * ocki-3.15.1-pkcstok_migrate-Fix-detection-if-pkcsslotd-is-still-.patch
    Change the code to use the pid file that pkcsslotd creates, and check
    if the process with the pid contained in the pid file still exists and
    runs pkcsslotd.
  * ocki-3.15.1-pkcstok_migrate-Rework-string-quoting-for-opencrypto.patch
    Always quote the value of 'description' and 'manufacturer'. Quote the
    value of 'stdll', 'confname', and 'tokname' if it contains spaces, and
    never quote the value of 'hwversion', 'firmwareversion', and 'tokversion'.</changelog>
  <changelog author="mpost@suse.com" date="1634817600">- Upgraded to version 3.17.0 (jsc#SLE-18326)
  + openCryptoki 3.17
  - tools: added function to list keys to p11sak
  - common: added support for OpenSSL 3.0
  - common: added support for event notifications
  - ICA: added SW fallbacks
  * openCryptoki 3.16
  - EP11: protected-key option
  - EP11: support attribute-bound keys
  - CCA: import and export of secure key objects
  - Bug fixes
- Removed the following obsolete patches:
  ocki-3.15.1-Added-error-message-handling-for-p11sak-remove-key-c.patch
  ocki-3.15.1-Fix-compiling-with-c.patch
  ocki-3.15.1-A-slot-ID-has-nothing-to-do-with-the-number-of-slots.patch
  ocki-3.15.1-SOFT-Fix-problem-with-C_Get-SetOperationState-and-di.patch
  ocki-3.15.1-Added-NULL-pointer-to-avoid-double-free-for-the-list.patch
  ocki-3.15.1-SOFT-Check-the-EC-Key-on-C_CreateObject-and-C_Derive.patch
  ocki-3.15.1-Fixed-p11sak-and-corresponding-test-case.patch
  ocki-3.15.1-p11sak-Fix-CKA_LABEL-handling.patch
  ocki-3.15.1-pkcstok_migrate-Quote-strings-with-spaces-in-opencry.patch
  ocki-3.15.1-pkcstok_migrate-Don-t-remove-tokversion-x.y-during-m.patch
  ocki-3.15.1-pkcstok_migrate-Fix-detection-if-pkcsslotd-is-still-.patch
  ocki-3.15.1-pkcstok_migrate-Rework-string-quoting-for-opencrypto.patch</changelog>
  <changelog author="mpost@suse.com" date="1648036800">- Added the following two patches for bac#1197395. The CKM_IBM_DILITHIUM
  mechanism does not show up as supported by the EP11 token when an
  upgraded EP11 host library is used.
  * openCryptoki-sles15-sp4-EP11-Dilithium-Specify-OID-of-key-strength-at-key-ge.patch
  * openCryptoki-sles15-sp4-EP11-Fix-host-library-version-query.patch</changelog>
  <changelog author="mpost@suse.com" date="1654171200">- Made the following changes for bsc#1199862 "Please install
  p11sak_defined_attrs.conf."
  * Replaced ocki-3.11-remove-make-install-chgrp.patch with
    ocki-3.17-remove-make-install-chgrp.patch to remove the
    "-g pkcs11" parameter from the install command in the Makefile
  * Updated the spec file to include
    /etc/opencryptoki/p11sak_defined_attrs.conf as a %config file
    with the necessary permissions and group ownership.</changelog>
  <changelog author="mpost@suse.com" date="1660132800">- Added ocki-3.17-EP11-Fix-C_GetMechanismList-returning-CKR_BUFFER_TOO.patch
  for bsc#1202106. One test of the gen_purpose test cases fails with
  C_GetMechanismList #2 rc=CKR_BUFFER_TOO_SMALL" error on the EP11 Token.</changelog>
  <changelog author="mpost@suse.com" date="1664539200">- Upgrade to version 3.19.0 (jsc#PED-616)
  + openCryptoki 3.19
  - CCA: check for expected master key verification patterns at token init
  - CCA: check master key verification pattern of created keys to be as expected
  - EP11: check for expected wrapping key verification pattern at token init
  - EP11: check wrapping key verification pattern of created keys to be as expected
  - p11sak/pkcsconf: display PKCS#11 URIs
  - p11sak: add support for IBM specific Dilithium keys
  - p11sak: allow to list keys filtered by label
  - common: add support for dual-function cryptographic functions
  - Add support for C_SessionCancel function (PKCS#11 v3.0)
  - EP11: add support for schnorr signatures (mechanism CKM_IBM_ECDSA_OTHER)
  - EP11: add support for Bitcoin key derivation (mechanism CKM_IBM_BTC_DERIVE)
  - Bug fixes
  + openCryptoki 3.18
  - Default to FIPS compliant token data format (tokversion = 3.12)
  - Add support for restricting usage of mechanisms and keys via a global policy
  - Add support for statistics counting of mechanism usage
  - ICA/EP11: Support libica version 4
  - p11sak tool: Allow to set different attributes for public and private keys
- Replaced ocki-3.17-remove-make-install-chgrp.patch with an updated
  version named ocki-3.19-remove-make-install-chgrp.patch to fit
  the current state of the source.
- Removed the following obsolete patches:
  openCryptoki-sles15-sp4-EP11-Dilithium-Specify-OID-of-key-strength-at-key-ge.patch
  openCryptoki-sles15-sp4-EP11-Fix-host-library-version-query.patch
  ocki-3.17-EP11-Fix-C_GetMechanismList-returning-CKR_BUFFER_TOO.patch</changelog>
  <changelog author="mpost@suse.com" date="1669636800">- Updated spec file to set permissions on /etc/opencryptoki/strength.conf
  to be owned by root:pkcs11 with permissions of 640. (bsc#1205566)</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1675684800">- Updated the package openCryptoki 3.19.0 (jsc#PED-616, bsc#1207760), added the
  following patches:
  * ocki-3.19.0-0001-EP11-Unify-key-pair-generation-functions.patch
  * ocki-3.19.0-0002-EP11-Do-not-report-DSA-DH-parameter-generation-as-be.patch
  * ocki-3.19.0-0003-EP11-Do-not-pass-empty-CKA_PUBLIC_KEY_INFO-to-EP11-h.patch
  * ocki-3.19.0-0004-Mechtable-CKM_IBM_DILITHIUM-can-also-be-used-for-key.patch
  * ocki-3.19.0-0005-EP11-Remove-DSA-DH-parameter-generation-mechanisms-f.patch
  * ocki-3.19.0-0006-EP11-Pass-back-chain-code-for-CKM_IBM_BTC_DERIVE.patch
  * ocki-3.19.0-0007-EP11-Supply-CKA_PUBLIC_KEY_INFO-with-CKM_IBM_BTC_DER.patch
  * ocki-3.19.0-0008-EP11-Supply-CKA_PUBLIC_KEY_INFO-when-importing-priva.patch
  * ocki-3.19.0-0009-EP11-Fix-memory-leak-introduced-with-recent-commit.patch
  * ocki-3.19.0-0010-p11sak-Fix-segfault-when-dilithium-version-is-not-sp.patch
  * ocki-3.19.0-0011-EP11-remove-dead-code-and-unused-variables.patch
  * ocki-3.19.0-0012-EP11-Update-EP11-host-library-header-files.patch
  * ocki-3.19.0-0013-EP11-Support-EP11-host-library-version-4.patch
  * ocki-3.19.0-0014-EP11-Add-new-control-points.patch
  * ocki-3.19.0-0015-EP11-Default-unknown-CPs-to-ON.patch
  * ocki-3.19.0-0016-COMMON-Add-defines-for-Dilithium-round-2-and-3-varia.patch
  * ocki-3.19.0-0017-COMMON-Add-defines-for-Kyber.patch
  * ocki-3.19.0-0018-COMMON-Add-post-quantum-algorithm-OIDs.patch
  * ocki-3.19.0-0019-COMMON-Dilithium-key-BER-encoding-decoding-allow-dif.patch
  * ocki-3.19.0-0020-COMMON-EP11-Add-CKA_VALUE-holding-SPKI-PKCS-8-of-key.patch
  * ocki-3.19.0-0021-COMMON-EP11-Allow-to-select-Dilithium-variant-via-mo.patch
  * ocki-3.19.0-0022-EP11-Query-supported-PQC-variants-and-restrict-usage.patch
  * ocki-3.19.0-0023-POLICY-Dilithium-strength-and-signature-size-depends.patch
  * ocki-3.19.0-0024-TESTCASES-Test-Dilithium-variants.patch
  * ocki-3.19.0-0025-COMMON-EP11-Add-Kyber-key-type-and-mechanism.patch
  * ocki-3.19.0-0026-EP11-Add-support-for-generating-and-importing-Kyber-.patch
  * ocki-3.19.0-0027-EP11-Add-support-for-encrypt-decrypt-and-KEM-operati.patch
  * ocki-3.19.0-0028-POLICY-STATISTICS-Check-for-Kyber-KEM-KDFs-and-count.patch
  * ocki-3.19.0-0029-TESTCASES-Add-tests-for-CKM_IBM_KYBER.patch
  * ocki-3.19.0-0030-p11sak-Support-additional-Dilithium-variants.patch
  * ocki-3.19.0-0031-p11sak-Add-support-for-IBM-Kyber-key-type.patch
  * ocki-3.19.0-0032-testcase-Enhance-p11sak-testcase-to-generate-IBM-Kyb.patch
  * ocki-3.19.0-0033-EP11-Supply-CKA_PUBLIC_KEY_INFO-with-CKM_IBM_BTC_DER.patch
  * ocki-3.19.0-0034-EP11-Fix-setting-unknown-CPs-to-ON.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1675771200">- Added patch for compile errors
  * ocki-3.19.0-0035-Fix-compile-error-error-initializer-element-is-not-c.patch
-- Changed spec file to use %autosetup instead of %setup.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1676548800">- Updated package to openCryptoki 3.20 (bsc#1207760,
    jsc#PED-3376, jsc#PED-2870, jsc#PED-2869 )
- Removed the following obsolite patches:
  * ocki-3.19.0-0001-EP11-Unify-key-pair-generation-functions.patch
  * ocki-3.19.0-0002-EP11-Do-not-report-DSA-DH-parameter-generation-as-be.patch
  * ocki-3.19.0-0003-EP11-Do-not-pass-empty-CKA_PUBLIC_KEY_INFO-to-EP11-h.patch
  * ocki-3.19.0-0004-Mechtable-CKM_IBM_DILITHIUM-can-also-be-used-for-key.patch
  * ocki-3.19.0-0005-EP11-Remove-DSA-DH-parameter-generation-mechanisms-f.patch
  * ocki-3.19.0-0006-EP11-Pass-back-chain-code-for-CKM_IBM_BTC_DERIVE.patch
  * ocki-3.19.0-0007-EP11-Supply-CKA_PUBLIC_KEY_INFO-with-CKM_IBM_BTC_DER.patch
  * ocki-3.19.0-0008-EP11-Supply-CKA_PUBLIC_KEY_INFO-when-importing-priva.patch
  * ocki-3.19.0-0009-EP11-Fix-memory-leak-introduced-with-recent-commit.patch
  * ocki-3.19.0-0010-p11sak-Fix-segfault-when-dilithium-version-is-not-sp.patch
  * ocki-3.19.0-0011-EP11-remove-dead-code-and-unused-variables.patch
  * ocki-3.19.0-0012-EP11-Update-EP11-host-library-header-files.patch
  * ocki-3.19.0-0013-EP11-Support-EP11-host-library-version-4.patch
  * ocki-3.19.0-0014-EP11-Add-new-control-points.patch
  * ocki-3.19.0-0015-EP11-Default-unknown-CPs-to-ON.patch
  * ocki-3.19.0-0016-COMMON-Add-defines-for-Dilithium-round-2-and-3-varia.patch
  * ocki-3.19.0-0017-COMMON-Add-defines-for-Kyber.patch
  * ocki-3.19.0-0018-COMMON-Add-post-quantum-algorithm-OIDs.patch
  * ocki-3.19.0-0019-COMMON-Dilithium-key-BER-encoding-decoding-allow-dif.patch
  * ocki-3.19.0-0020-COMMON-EP11-Add-CKA_VALUE-holding-SPKI-PKCS-8-of-key.patch
  * ocki-3.19.0-0021-COMMON-EP11-Allow-to-select-Dilithium-variant-via-mo.patch
  * ocki-3.19.0-0022-EP11-Query-supported-PQC-variants-and-restrict-usage.patch
  * ocki-3.19.0-0023-POLICY-Dilithium-strength-and-signature-size-depends.patch
  * ocki-3.19.0-0024-TESTCASES-Test-Dilithium-variants.patch
  * ocki-3.19.0-0025-COMMON-EP11-Add-Kyber-key-type-and-mechanism.patch
  * ocki-3.19.0-0026-EP11-Add-support-for-generating-and-importing-Kyber-.patch
  * ocki-3.19.0-0027-EP11-Add-support-for-encrypt-decrypt-and-KEM-operati.patch
  * ocki-3.19.0-0028-POLICY-STATISTICS-Check-for-Kyber-KEM-KDFs-and-count.patch
  * ocki-3.19.0-0029-TESTCASES-Add-tests-for-CKM_IBM_KYBER.patch
  * ocki-3.19.0-0030-p11sak-Support-additional-Dilithium-variants.patch
  * ocki-3.19.0-0031-p11sak-Add-support-for-IBM-Kyber-key-type.patch
  * ocki-3.19.0-0032-testcase-Enhance-p11sak-testcase-to-generate-IBM-Kyb.patch
  * ocki-3.19.0-0033-EP11-Supply-CKA_PUBLIC_KEY_INFO-with-CKM_IBM_BTC_DER.patch
  * ocki-3.19.0-0034-EP11-Fix-setting-unknown-CPs-to-ON.patch
  * ocki-3.19.0-0035-Fix-compile-error-error-initializer-element-is-not-c.patch
- Reworked ocki-3.19-remove-make-install-chgrp.patch to fit the current version of
  the package and renamed it to  ocki-3.20-remove-make-install-chgrp.patch.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1685102400">- Update to version 3.21 (jsc#PED-3360, jsc#PED-3361)
  * openCryptoki 3.21
  - EP11 and CCA: Support concurrent HSM master key changes
  - CCA: protected-key option
  - pkcsslotd: no longer run as root user and further hardening
  - p11sak: Add support for additional key types (DH, DSA, generic secret)
  - p11sak: Allow wildcards in label filter
  - p11sak: Allow to specify hex value for CKA_ID attribute
  - p11sak: Support sorting when listing keys
  - p11sak: New commands: set-key-attr, copy-key to modify and copy keys
  - p11sak: New commands: import-key, export-key to import and export keys
  - Remove support for --disable-locks (transactional memory)
  - Updates to harden against RSA timing attacks
  - Bug fixes
- Amended a new patch to fit the version 3.21
  * ocki-3.21-remove-make-install-chgrp.patch
- Removed the old patch for the version 3.20
  * ocki-3.20-remove-make-install-chgrp.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1695297600">- Upgrade to version 3.22 (jsc#PED-3361)
  * openCryptoki 3.22
  - CCA: Add support for the AES-XTS key type using CPACF protected keys
  - p11sak: Add support for managing certificate objects
  - p11sak: Add support for public sessions (no-login option)
  - p11sak: Add support for logging in as SO (security Officer)
  - p11sak: Add support for importing/exporting Edwards and Montgomery keys
  - p11sak: Add support for importing of RSA-PSS keys and certificates
  - CCA/EP11/Soft/ICA: Ensure that the 2 key parts of an AES-XTS key are different
  * Bug fixes</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1701691200">- Amended the .spec file  for pkcsslotd (jsc#1217703)
  * Renamed the patch ocki-3.21-remove-make-install-chgrp.patch to
    ocki-3.22-remove-make-install-chgrp.patch</changelog>
  <changelog author="meissner@suse.com" date="1707134400">- provide user(pkcs11) and group(pkcs11)</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1707307200">- Upgrade openCryptoki to version 3.23 (jsc#PED-3360, jsc#PED-3361)
  * EP11: Add support for FIPS-session mode
  * Updates to harden against RSA timing attacks (bsc#1219217,CVE-2024-0914)
  * Bug fixes
- Renamed ocki-3.22-remove-make-install-chgrp.patch to
    ocki-3.23-remove-make-install-chgrp.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1720699200">- Updated the .spec file (bsc#1225876, bsc#1227280)
  * Amended for group %{pkcs_group} and user pkcsslotd
  * Copying example script files from /usr/share/doc/opencryptoki to
    /usr/share/opencryptoki (policy-example.conf and strength-example.conf)
    in case that there is 'rpm.install.excludedocs=yes' set in the
    zypper.conf(zypp.conf)</changelog>
</package>
<package pkgid="28d5d3732e5d2de0f9b927233dfb915dd63ff4ff59b74ac8655d99fa025f86b5" name="openCryptoki" arch="src">
  <version epoch="0" ver="3.23.0" rel="150500.3.6.1"/>
  <changelog author="mpost@suse.com" date="1611576000">- Added the following patches for bsc#1179319
  * Fix compiling with C++:
    ocki-3.15.1-Fix-compiling-with-c.patch
  * Added error message handling for p11sak remove-key command.
    ocki-3.15.1-Added-error-message-handling-for-p11sak-remove-key-c.patch</changelog>
  <changelog author="mpost@suse.com" date="1613476800">- Added ocki-3.15.1-A-slot-ID-has-nothing-to-do-with-the-number-of-slots.patch
  (bsc#1182120)
  Fix pkcscca migration fails with usr/sb2 is not a valid slot ID
- Added ocki-3.15.1-SOFT-Fix-problem-with-C_Get-SetOperationState-and-di.patch
  (bsc#1182190)
  Fix a segmentation fault of the sess_opstate test on the Soft Token</changelog>
  <changelog author="mpost@suse.com" date="1623758400">- Added ocki-3.15.1-SOFT-Check-the-EC-Key-on-C_CreateObject-and-C_Derive.patch
  When constructing an OpenSSL EC public or private key from PKCS#11
  attributes or ECDH public data, check that the key is valid, i.e. that
  the point is on the curve.
  (bsc#1185976)</changelog>
  <changelog author="mpost@suse.com" date="1624363200">- Added the following patches for bsc#1182726 " p11sak list-key segfault"
  * ocki-3.15.1-Added-NULL-pointer-to-avoid-double-free-for-the-list.patch
    Added NULL pointer to avoid double free() for the list-key and
    remove-key commands.
  * ocki-3.15.1-Fixed-p11sak-and-corresponding-test-case.patch
    Note that two hunks that were unrelated to fixing the running
    code were removed from this patch.
  * ocki-3.15.1-p11sak-Fix-CKA_LABEL-handling.patch</changelog>
  <changelog author="mpost@suse.com" date="1628164800">- Added the following patches for bsc#1188879:
  * ocki-3.15.1-pkcstok_migrate-Quote-strings-with-spaces-in-opencry.patch
    When modifying opencryptoki.conf during token migration, put quotes
    around strings that contain spaces, e.g. for the slot description and
    manufacturer.
  * ocki-3.15.1-pkcstok_migrate-Don-t-remove-tokversion-x.y-during-m.patch
    When migrating a slot the opencryptoki.conf file is modified. If it
    contains slots that already contain the 'tokversion = x.y' keyword,
    this is accidentally removed when migrating another slot.
  * ocki-3.15.1-pkcstok_migrate-Fix-detection-if-pkcsslotd-is-still-.patch
    Change the code to use the pid file that pkcsslotd creates, and check
    if the process with the pid contained in the pid file still exists and
    runs pkcsslotd.
  * ocki-3.15.1-pkcstok_migrate-Rework-string-quoting-for-opencrypto.patch
    Always quote the value of 'description' and 'manufacturer'. Quote the
    value of 'stdll', 'confname', and 'tokname' if it contains spaces, and
    never quote the value of 'hwversion', 'firmwareversion', and 'tokversion'.</changelog>
  <changelog author="mpost@suse.com" date="1634817600">- Upgraded to version 3.17.0 (jsc#SLE-18326)
  + openCryptoki 3.17
  - tools: added function to list keys to p11sak
  - common: added support for OpenSSL 3.0
  - common: added support for event notifications
  - ICA: added SW fallbacks
  * openCryptoki 3.16
  - EP11: protected-key option
  - EP11: support attribute-bound keys
  - CCA: import and export of secure key objects
  - Bug fixes
- Removed the following obsolete patches:
  ocki-3.15.1-Added-error-message-handling-for-p11sak-remove-key-c.patch
  ocki-3.15.1-Fix-compiling-with-c.patch
  ocki-3.15.1-A-slot-ID-has-nothing-to-do-with-the-number-of-slots.patch
  ocki-3.15.1-SOFT-Fix-problem-with-C_Get-SetOperationState-and-di.patch
  ocki-3.15.1-Added-NULL-pointer-to-avoid-double-free-for-the-list.patch
  ocki-3.15.1-SOFT-Check-the-EC-Key-on-C_CreateObject-and-C_Derive.patch
  ocki-3.15.1-Fixed-p11sak-and-corresponding-test-case.patch
  ocki-3.15.1-p11sak-Fix-CKA_LABEL-handling.patch
  ocki-3.15.1-pkcstok_migrate-Quote-strings-with-spaces-in-opencry.patch
  ocki-3.15.1-pkcstok_migrate-Don-t-remove-tokversion-x.y-during-m.patch
  ocki-3.15.1-pkcstok_migrate-Fix-detection-if-pkcsslotd-is-still-.patch
  ocki-3.15.1-pkcstok_migrate-Rework-string-quoting-for-opencrypto.patch</changelog>
  <changelog author="mpost@suse.com" date="1648036800">- Added the following two patches for bac#1197395. The CKM_IBM_DILITHIUM
  mechanism does not show up as supported by the EP11 token when an
  upgraded EP11 host library is used.
  * openCryptoki-sles15-sp4-EP11-Dilithium-Specify-OID-of-key-strength-at-key-ge.patch
  * openCryptoki-sles15-sp4-EP11-Fix-host-library-version-query.patch</changelog>
  <changelog author="mpost@suse.com" date="1654171200">- Made the following changes for bsc#1199862 "Please install
  p11sak_defined_attrs.conf."
  * Replaced ocki-3.11-remove-make-install-chgrp.patch with
    ocki-3.17-remove-make-install-chgrp.patch to remove the
    "-g pkcs11" parameter from the install command in the Makefile
  * Updated the spec file to include
    /etc/opencryptoki/p11sak_defined_attrs.conf as a %config file
    with the necessary permissions and group ownership.</changelog>
  <changelog author="mpost@suse.com" date="1660132800">- Added ocki-3.17-EP11-Fix-C_GetMechanismList-returning-CKR_BUFFER_TOO.patch
  for bsc#1202106. One test of the gen_purpose test cases fails with
  C_GetMechanismList #2 rc=CKR_BUFFER_TOO_SMALL" error on the EP11 Token.</changelog>
  <changelog author="mpost@suse.com" date="1664539200">- Upgrade to version 3.19.0 (jsc#PED-616)
  + openCryptoki 3.19
  - CCA: check for expected master key verification patterns at token init
  - CCA: check master key verification pattern of created keys to be as expected
  - EP11: check for expected wrapping key verification pattern at token init
  - EP11: check wrapping key verification pattern of created keys to be as expected
  - p11sak/pkcsconf: display PKCS#11 URIs
  - p11sak: add support for IBM specific Dilithium keys
  - p11sak: allow to list keys filtered by label
  - common: add support for dual-function cryptographic functions
  - Add support for C_SessionCancel function (PKCS#11 v3.0)
  - EP11: add support for schnorr signatures (mechanism CKM_IBM_ECDSA_OTHER)
  - EP11: add support for Bitcoin key derivation (mechanism CKM_IBM_BTC_DERIVE)
  - Bug fixes
  + openCryptoki 3.18
  - Default to FIPS compliant token data format (tokversion = 3.12)
  - Add support for restricting usage of mechanisms and keys via a global policy
  - Add support for statistics counting of mechanism usage
  - ICA/EP11: Support libica version 4
  - p11sak tool: Allow to set different attributes for public and private keys
- Replaced ocki-3.17-remove-make-install-chgrp.patch with an updated
  version named ocki-3.19-remove-make-install-chgrp.patch to fit
  the current state of the source.
- Removed the following obsolete patches:
  openCryptoki-sles15-sp4-EP11-Dilithium-Specify-OID-of-key-strength-at-key-ge.patch
  openCryptoki-sles15-sp4-EP11-Fix-host-library-version-query.patch
  ocki-3.17-EP11-Fix-C_GetMechanismList-returning-CKR_BUFFER_TOO.patch</changelog>
  <changelog author="mpost@suse.com" date="1669636800">- Updated spec file to set permissions on /etc/opencryptoki/strength.conf
  to be owned by root:pkcs11 with permissions of 640. (bsc#1205566)</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1675684800">- Updated the package openCryptoki 3.19.0 (jsc#PED-616, bsc#1207760), added the
  following patches:
  * ocki-3.19.0-0001-EP11-Unify-key-pair-generation-functions.patch
  * ocki-3.19.0-0002-EP11-Do-not-report-DSA-DH-parameter-generation-as-be.patch
  * ocki-3.19.0-0003-EP11-Do-not-pass-empty-CKA_PUBLIC_KEY_INFO-to-EP11-h.patch
  * ocki-3.19.0-0004-Mechtable-CKM_IBM_DILITHIUM-can-also-be-used-for-key.patch
  * ocki-3.19.0-0005-EP11-Remove-DSA-DH-parameter-generation-mechanisms-f.patch
  * ocki-3.19.0-0006-EP11-Pass-back-chain-code-for-CKM_IBM_BTC_DERIVE.patch
  * ocki-3.19.0-0007-EP11-Supply-CKA_PUBLIC_KEY_INFO-with-CKM_IBM_BTC_DER.patch
  * ocki-3.19.0-0008-EP11-Supply-CKA_PUBLIC_KEY_INFO-when-importing-priva.patch
  * ocki-3.19.0-0009-EP11-Fix-memory-leak-introduced-with-recent-commit.patch
  * ocki-3.19.0-0010-p11sak-Fix-segfault-when-dilithium-version-is-not-sp.patch
  * ocki-3.19.0-0011-EP11-remove-dead-code-and-unused-variables.patch
  * ocki-3.19.0-0012-EP11-Update-EP11-host-library-header-files.patch
  * ocki-3.19.0-0013-EP11-Support-EP11-host-library-version-4.patch
  * ocki-3.19.0-0014-EP11-Add-new-control-points.patch
  * ocki-3.19.0-0015-EP11-Default-unknown-CPs-to-ON.patch
  * ocki-3.19.0-0016-COMMON-Add-defines-for-Dilithium-round-2-and-3-varia.patch
  * ocki-3.19.0-0017-COMMON-Add-defines-for-Kyber.patch
  * ocki-3.19.0-0018-COMMON-Add-post-quantum-algorithm-OIDs.patch
  * ocki-3.19.0-0019-COMMON-Dilithium-key-BER-encoding-decoding-allow-dif.patch
  * ocki-3.19.0-0020-COMMON-EP11-Add-CKA_VALUE-holding-SPKI-PKCS-8-of-key.patch
  * ocki-3.19.0-0021-COMMON-EP11-Allow-to-select-Dilithium-variant-via-mo.patch
  * ocki-3.19.0-0022-EP11-Query-supported-PQC-variants-and-restrict-usage.patch
  * ocki-3.19.0-0023-POLICY-Dilithium-strength-and-signature-size-depends.patch
  * ocki-3.19.0-0024-TESTCASES-Test-Dilithium-variants.patch
  * ocki-3.19.0-0025-COMMON-EP11-Add-Kyber-key-type-and-mechanism.patch
  * ocki-3.19.0-0026-EP11-Add-support-for-generating-and-importing-Kyber-.patch
  * ocki-3.19.0-0027-EP11-Add-support-for-encrypt-decrypt-and-KEM-operati.patch
  * ocki-3.19.0-0028-POLICY-STATISTICS-Check-for-Kyber-KEM-KDFs-and-count.patch
  * ocki-3.19.0-0029-TESTCASES-Add-tests-for-CKM_IBM_KYBER.patch
  * ocki-3.19.0-0030-p11sak-Support-additional-Dilithium-variants.patch
  * ocki-3.19.0-0031-p11sak-Add-support-for-IBM-Kyber-key-type.patch
  * ocki-3.19.0-0032-testcase-Enhance-p11sak-testcase-to-generate-IBM-Kyb.patch
  * ocki-3.19.0-0033-EP11-Supply-CKA_PUBLIC_KEY_INFO-with-CKM_IBM_BTC_DER.patch
  * ocki-3.19.0-0034-EP11-Fix-setting-unknown-CPs-to-ON.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1675771200">- Added patch for compile errors
  * ocki-3.19.0-0035-Fix-compile-error-error-initializer-element-is-not-c.patch
-- Changed spec file to use %autosetup instead of %setup.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1676548800">- Updated package to openCryptoki 3.20 (bsc#1207760,
    jsc#PED-3376, jsc#PED-2870, jsc#PED-2869 )
- Removed the following obsolite patches:
  * ocki-3.19.0-0001-EP11-Unify-key-pair-generation-functions.patch
  * ocki-3.19.0-0002-EP11-Do-not-report-DSA-DH-parameter-generation-as-be.patch
  * ocki-3.19.0-0003-EP11-Do-not-pass-empty-CKA_PUBLIC_KEY_INFO-to-EP11-h.patch
  * ocki-3.19.0-0004-Mechtable-CKM_IBM_DILITHIUM-can-also-be-used-for-key.patch
  * ocki-3.19.0-0005-EP11-Remove-DSA-DH-parameter-generation-mechanisms-f.patch
  * ocki-3.19.0-0006-EP11-Pass-back-chain-code-for-CKM_IBM_BTC_DERIVE.patch
  * ocki-3.19.0-0007-EP11-Supply-CKA_PUBLIC_KEY_INFO-with-CKM_IBM_BTC_DER.patch
  * ocki-3.19.0-0008-EP11-Supply-CKA_PUBLIC_KEY_INFO-when-importing-priva.patch
  * ocki-3.19.0-0009-EP11-Fix-memory-leak-introduced-with-recent-commit.patch
  * ocki-3.19.0-0010-p11sak-Fix-segfault-when-dilithium-version-is-not-sp.patch
  * ocki-3.19.0-0011-EP11-remove-dead-code-and-unused-variables.patch
  * ocki-3.19.0-0012-EP11-Update-EP11-host-library-header-files.patch
  * ocki-3.19.0-0013-EP11-Support-EP11-host-library-version-4.patch
  * ocki-3.19.0-0014-EP11-Add-new-control-points.patch
  * ocki-3.19.0-0015-EP11-Default-unknown-CPs-to-ON.patch
  * ocki-3.19.0-0016-COMMON-Add-defines-for-Dilithium-round-2-and-3-varia.patch
  * ocki-3.19.0-0017-COMMON-Add-defines-for-Kyber.patch
  * ocki-3.19.0-0018-COMMON-Add-post-quantum-algorithm-OIDs.patch
  * ocki-3.19.0-0019-COMMON-Dilithium-key-BER-encoding-decoding-allow-dif.patch
  * ocki-3.19.0-0020-COMMON-EP11-Add-CKA_VALUE-holding-SPKI-PKCS-8-of-key.patch
  * ocki-3.19.0-0021-COMMON-EP11-Allow-to-select-Dilithium-variant-via-mo.patch
  * ocki-3.19.0-0022-EP11-Query-supported-PQC-variants-and-restrict-usage.patch
  * ocki-3.19.0-0023-POLICY-Dilithium-strength-and-signature-size-depends.patch
  * ocki-3.19.0-0024-TESTCASES-Test-Dilithium-variants.patch
  * ocki-3.19.0-0025-COMMON-EP11-Add-Kyber-key-type-and-mechanism.patch
  * ocki-3.19.0-0026-EP11-Add-support-for-generating-and-importing-Kyber-.patch
  * ocki-3.19.0-0027-EP11-Add-support-for-encrypt-decrypt-and-KEM-operati.patch
  * ocki-3.19.0-0028-POLICY-STATISTICS-Check-for-Kyber-KEM-KDFs-and-count.patch
  * ocki-3.19.0-0029-TESTCASES-Add-tests-for-CKM_IBM_KYBER.patch
  * ocki-3.19.0-0030-p11sak-Support-additional-Dilithium-variants.patch
  * ocki-3.19.0-0031-p11sak-Add-support-for-IBM-Kyber-key-type.patch
  * ocki-3.19.0-0032-testcase-Enhance-p11sak-testcase-to-generate-IBM-Kyb.patch
  * ocki-3.19.0-0033-EP11-Supply-CKA_PUBLIC_KEY_INFO-with-CKM_IBM_BTC_DER.patch
  * ocki-3.19.0-0034-EP11-Fix-setting-unknown-CPs-to-ON.patch
  * ocki-3.19.0-0035-Fix-compile-error-error-initializer-element-is-not-c.patch
- Reworked ocki-3.19-remove-make-install-chgrp.patch to fit the current version of
  the package and renamed it to  ocki-3.20-remove-make-install-chgrp.patch.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1685102400">- Update to version 3.21 (jsc#PED-3360, jsc#PED-3361)
  * openCryptoki 3.21
  - EP11 and CCA: Support concurrent HSM master key changes
  - CCA: protected-key option
  - pkcsslotd: no longer run as root user and further hardening
  - p11sak: Add support for additional key types (DH, DSA, generic secret)
  - p11sak: Allow wildcards in label filter
  - p11sak: Allow to specify hex value for CKA_ID attribute
  - p11sak: Support sorting when listing keys
  - p11sak: New commands: set-key-attr, copy-key to modify and copy keys
  - p11sak: New commands: import-key, export-key to import and export keys
  - Remove support for --disable-locks (transactional memory)
  - Updates to harden against RSA timing attacks
  - Bug fixes
- Amended a new patch to fit the version 3.21
  * ocki-3.21-remove-make-install-chgrp.patch
- Removed the old patch for the version 3.20
  * ocki-3.20-remove-make-install-chgrp.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1695297600">- Upgrade to version 3.22 (jsc#PED-3361)
  * openCryptoki 3.22
  - CCA: Add support for the AES-XTS key type using CPACF protected keys
  - p11sak: Add support for managing certificate objects
  - p11sak: Add support for public sessions (no-login option)
  - p11sak: Add support for logging in as SO (security Officer)
  - p11sak: Add support for importing/exporting Edwards and Montgomery keys
  - p11sak: Add support for importing of RSA-PSS keys and certificates
  - CCA/EP11/Soft/ICA: Ensure that the 2 key parts of an AES-XTS key are different
  * Bug fixes</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1701691200">- Amended the .spec file  for pkcsslotd (jsc#1217703)
  * Renamed the patch ocki-3.21-remove-make-install-chgrp.patch to
    ocki-3.22-remove-make-install-chgrp.patch</changelog>
  <changelog author="meissner@suse.com" date="1707134400">- provide user(pkcs11) and group(pkcs11)</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1707307200">- Upgrade openCryptoki to version 3.23 (jsc#PED-3360, jsc#PED-3361)
  * EP11: Add support for FIPS-session mode
  * Updates to harden against RSA timing attacks (bsc#1219217,CVE-2024-0914)
  * Bug fixes
- Renamed ocki-3.22-remove-make-install-chgrp.patch to
    ocki-3.23-remove-make-install-chgrp.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1720699200">- Updated the .spec file (bsc#1225876, bsc#1227280)
  * Amended for group %{pkcs_group} and user pkcsslotd
  * Copying example script files from /usr/share/doc/opencryptoki to
    /usr/share/opencryptoki (policy-example.conf and strength-example.conf)
    in case that there is 'rpm.install.excludedocs=yes' set in the
    zypper.conf(zypp.conf)</changelog>
</package>
<package pkgid="80e844f720c01772bfefc35fff9c7040bf1797a72616695fc383e5de157da7b9" name="opensc" arch="aarch64">
  <version epoch="0" ver="0.22.0" rel="150400.3.6.1"/>
  <changelog author="michael@stroeder.com" date="1424088000">- update to version 0.14.0</changelog>
  <changelog author="bwachter-pkg@lart.info" date="1438257600">- update to version 0.15.0
- register with p11-kit
  (https://www.opensc-project.org/opensc/ticket/390)</changelog>
  <changelog author="t.gruner@katodev.de" date="1467720000">- update to version 0.16.0
- remove fix (issue 505)
- clean up spec-file</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Add baselibs.conf to provide 32-bit PKCS11 plugins (bsc#996047).
- Drop opensc-ADVISORIES. There is no new advisory since 2009.</changelog>
  <changelog author="tchvatal@suse.com" date="1500379200">- Switch to tarball fetching from github
- Few small cleanups</changelog>
  <changelog author="michael@stroeder.com" date="1514808000">- update to version 0.17.0:
  * support for new cards
  * PIN support enhancemets
  * added .pc file
  * builds with OpenSSL 1.1.0 (1074799)
  * See /usr/share/doc/packages/opensc/NEWS for complete list.</changelog>
  <changelog author="sbrabec@suse.com" date="1531224000">- Update to version 0.18.0:
  * Further improvements of PIN support.
  * Large number of improvements and fixes
    (boo#1097951, boo#1100501).
  * See /usr/share/doc/packages/opensc/NEWS for complete list.
- Add opensc-desktop.patch, opensc-desktop2.patch and
  opensc-bash-completions.patch.</changelog>
  <changelog author="kbabioch@suse.com" date="1536840000">- Update to version 0.19.0
  * Fixed multiple security problems (out of bound writes/reads):
  * bsc#1104812
  * CVE-2018-16391 (bsc#1106998)
  * CVE-2018-16392 (bsc#1106999)
  * CVE-2018-16393 (bsc#1108318)
  * CVE-2018-16418 (bsc#1107039)
  * CVE-2018-16419 (bsc#1107107)
  * CVE-2018-16420 (bsc#1107097)
  * CVE-2018-16421 (bsc#1107049)
  * CVE-2018-16422 (bsc#1107038)
  * CVE-2018-16423 (bsc#1107037)
  * CVE-2018-16424 (bsc#1107036)
  * CVE-2018-16425 (bsc#1107035)
  * CVE-2018-16426 (bsc#1107034)
  * CVE-2018-16427 (bsc#1107033)
  * Workaround cards returning short signatures without leading zeroes
  * Distribute minimal opensc.conf
  * `pkcs11_enable_InitToken made` global configuration option
  * Modify behavior of `OPENSC_DRIVER` environment variable to restrict driver
    list instead of forcing one driver and skipping vital parts of
    configuration
  * Removed configuration options `zero_ckaid_for_ca_certs`,
    `force_card_driver`, `reopen_debug_file`, `paranoid-memory`
  * Generalized configuration option `ignored_readers`
  * If card initialization fails, continue card detection with other card
    drivers
  * reader-pcsc: allow fixing the length of a PIN
  * fixed crash during `C_WaitForSlotEvent`
  * Allow cancelling the PIN pad prompt before starting the reader transaction.
    Whether to start the transaction immediately or not is user-configurable
    for each application
  * opensc-notify
  * add Exit button to tray icon
  * User better description (GenericName) and a generic application icon
  * Do not display in the application list
- Removed patches included upstream now:
  * opensc-desktop.patch
  * opensc-desktop2.patch
  * opensc-bash-completions.patch
- Applied spec-cleaner</changelog>
  <changelog author="code@bnavigator.de" date="1563883200">- add explicit BuildRequires: zlib-devel</changelog>
  <changelog author="jsikes@suse.de" date="1564488000">- added opensc-0.19.0-rsa-pss.patch
  * Fixes the pkcs11-tool example
  * Added missing CKM_SHA224_RSA_PKCS_PSS
  * Add support for PSS padding to RSA signatures
  * Support for signature verification in pkcs11-tool
  * Switch cleanup steps to avoid segfaults on errors and more sanity checking
- added opensc-0.19.0-redundant_logging.patch
  * Remove redundant debug output</changelog>
  <changelog author="jsikes@suse.com" date="1566129600">- added opensc-0.19.0-piv_card_matching.patch
  * Improve Card Matching for Dual CAC/PIV and PIVKEY cards.
  * sourced from https://github.com/OpenSC/OpenSC/pull/1549</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606478400">- OpenSC 0.21.0:
  * CVE-2020-26571: stack-based buffer overflow in the gemsafe GPK
    smart card software driver (boo#1177380)
  * CVE-2020-26572: stack-based buffer overflow in the TCOS smart
    card software driver (boo#1177378)
  * CVE-2020-26570: heap-based buffer overflow in the Oberthur
    smart card software driver (boo#1177364)
  * CardOS 5.x support boo#1179291
  * Support for OAEP encryption, make SHA256 default
  * New separate debug level for PIN commands
  * Fix handling of card/reader insertion/removal events in pcscd
  * Fixes of removed readers handling
  * Fix Firefox crash because of invalid pcsc context
  * PKCS#11: Return CKR_TOKEN_NOT_RECOGNIZED for not recognized cards
  * Propagate ignore_user_content to PKCS#11 layer not to confuse applications
  * Minidriver: Fix check of ATR length (2-to 33 characters inclusive)
  * pkcs11-tool: allow using SW tokens
  * opensc-explorer asn1 accepts offsets and decode records
  * opensc-explorer cat accepts records
  * OpenPGP: Add new ec curves supported by GNUK
  * First steps supporting OpenPGP 3.4
  * OpenPGP: Add support for EC key import
  * Rutoken: Add ATR for Rutoken ECP SC NFC
  * Improve detection of various CardOS 5 configurations
  * DNIe: Add new DNIe CA structure for the secure channel
  * ePass2003: Improve ECC support
  * ePass2003: Fix erase sequence
  * IAS-ECC: Fix support for Idemia Cosmo cards
  * IAS-ECC: PIN padding settings are now used from PKCS#15 info when available
  * IAS-ECC: Added PIN-pad support for PIN unblock
  * New driver for Gemalto IDPrime (only some types)
  * eDo: New driver with initial support for Polish eID card (e-dowód, eDO)
  * MCRD: Remove unused and broken RSA EstEID support
  * TCOS: Add missing encryption certificates
  * PIV: Add ATR of DOD Yubikey
  * fixed PIV global pin bug
  * CAC1: Support changing PIN with CAC Alt tokens
- includes changes from 0.20.0
  * CVE-2019-6502: memory leak in libopensc (boo#1122756)
  * CVE-2019-15946: out-of-bounds access of an ASN.1 Octet string (boo#1149747)
  * CVE-2019-15945: out-of-bounds access of an ASN.1 Bitstring (boo#1149746)
  * CVE-2019-19479: incorrect read operation during parsing of a SETCOS file attribute (boo#1158256)
  * CVE-2019-19480: improper free operation in sc_pkcs15_decode_prkdf_entry (boo#1158307)
  * CVE-2019-20792: double free in coolkey_free_private_dat (bsc#1170809)
  * Support RSA-PSS signature mechanisms using RSA-RAW
  * Added memory locking for secrets
  * added support for terminal colors
  * PC/SC driver: Fixed error handling in case of changing or removing the card reader
  * rename md_read_only to read_only and use it for PKCS#11 and Minidriver
  * allow global use of ignore_private_certificate
  * PKCS#11: Implement write protection (CKF_WRITE_PROTECTED) based on the card profile
  * PKCS#11: Add C_WrapKey and C_UnwrapKey implementations
  * PKCS#11: Handle CKA_ALWAYS_AUTHENTICATE when creating key objects
  * PKCS#11: Truncate long PKCS#11 labels with ...
  * PKCS#11: Fixed recognition of a token when being unplugged and reinserted
  * Minidriver: Register for CardOS5 cards
  * Minidriver: Add support for RSA-PSS
  * tools: Harmonize the use of option -r/--reader
  * goid-tool: GoID personalization with fingerprint
  * openpgp-tool: replace the options -L/--key-length with -t/--key-type
  * openpgp-tool: add options -C/--card-info and -K/--key-info
  * opensc-explorer: add command pin_info, extend random
  * pkcs11-register: Auto-configuration of applications for use of OpenSC PKCS#11
  * pkcd11-register: Autostart
  * opensc-tool: Show ATR also for cards not recognized by OpenSC
  * pkcs11-spy: parse CKM_AES_GCM, EC Derive parameters
  * pkcs11-spy: Add support for CKA_OTP_* and CKM_*_PSS values
  * pkcs11-tool: Support for signature verification via --verify
  * pkcs11-tool: Add object type secrkey for --type option
  * pkcs11-tool: Implement Secret Key write object
  * pkcs11-tool: Add GOSTR3410-2012 support
  * pkcs11-tool: Add support for testing CKM_RSA_PKCS_OAEP
  * pkcs11-tool: Add extractable option to key import
  * pkcs11-tool: list more key access flags when listing keys
  * pkcs11-tool: Add support for CKA_ALLOWED_MECHANISMS when creating new objects and listing keys
  * pkcs15-crypt: *Handle keys with user consent
  * New separate CAC1 driver using the old CAC specification (#1502)
  * CardOS: Add support for 4K RSA keys in CardOS 5
  * CardOS: Fixed decryption with CardOS 5
  * Enable CoolKey driver to handle 2048-bit keys
  * EstEID: add support for a minimalistic, small and fast card profile based on IAS-ECC issued since December 2018
  * GIDS Decipher fix (#1881)
  * GIDS: Allow RSA 4K support
  * MICARDO: Remove long expired EstEID 1.0/1.1 card support
  * MyEID: Add support for unwrapping a secret key with an RSA key or secret key
  * MyEID Add support for wrapping a secret key with a secret key
  * Support for MyEID 4K RSA
  * Support for OsEID
  * Gemalto GemSafe: add new PTeID ATRs, add support for 4K RSA keys
  * OpenPGP Card v3 ECC support
  * Add Rutoken ECP SC
  * Add Rutoken Lite
  * Add SmartCard-HSM 4K ATR
  * Add missing secp384r1 curve parameter
  * Stacros: Fix decipher with 2.3
  * Stacros: Add ATR for 2nd gen. eGK
  * Stacros: Add new ATR for 3.5
  * Stacros: Detect and allow Globalplatform PIN encoding
  * Fix TCOS IDKey support
  * TCOS: add encryption certificate for IDKey
  * Infocamere, Postecert, Cnipa: Remove profiles
  * Remove incomplete acos5 driver
- drop patches now upstream:
  * opensc-0.19.0-piv_card_matching.patch
  * opensc-0.19.0-redundant_logging.patch
  * opensc-0.19.0-rsa-pss.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move licenses to licensedir</changelog>
  <changelog author="predivan@mts.rs" date="1624795200">- Fix build on GCC11
  * Add opensc-gcc11.patch from Fedora
    (https://github.com/OpenSC/OpenSC/pull/2241/)</changelog>
  <changelog author="daniel.donisa@suse.com" date="1633348800">- Update to OpenSC 0.22.0:
  * Removed changes in opensc-gcc11.patch already present in upstream.
  - See https://github.com/OpenSC/OpenSC/pull/2241/commits/e549e9c62eb4fcd2260800e2665071e4dd9bbbda
  * Removed some false positives from the openrc-rpmlintrc file.
  * Use standard paths for file cache on Linux (#2148) and OSX (#2214)
  * Various issues of memory/buffer handling in legacy drivers mostly reported by oss-fuzz and coverity (tcos, oberthur, isoapplet, iasecc, westcos, gpk, flex, dnie, mcrd, authentic, belpic)
  * Add threading test to `pkcs11-tool` (#2067)
  * Add support to generate generic secret keys (#2140)
  * `opensc-explorer`: Print information about LCS (Life cycle status byte) (#2195)
  * Add support for Apple's arm64 (M1) binaries, removed TokenD. A seperate installer with TokenD (and without arm64 binaries) will be available (#2179).
  * Support for gcc11 and its new strict aliasing rules (#2241, #2260)
  * Initial support for building with OpenSSL 3.0 (#2343)
  * pkcs15-tool: Write data objects in binary mode (#2324)
  * Avoid limited size of log messages (#2352)
  * Support for ECDSA verification (#2211)
  * Support for ECDSA with different SHA hashes (#2190)
  * Prevent issues in p11-kit by not returning unexpected return codes (#2207)
  * Add support for PKCS#11 3.0: The new interfaces, profile objects and functions (#2096, #2293)
  * Standardize the version 2 on 2.20 in the code (#2096)
  * Fix CKA_MODIFIABLE and CKA_EXTRACTABLE  (#2176)
  * Copy arguments of C_Initialize (#2350)
  * Fix RSA-PSS signing (#2234)
  * Fix DO deletion (#2215)
  * Add support for (X)EdDSA keys (#1960)
  * Add support for applet version 3 and fix RSA-PSS mechanisms (#2205)
  * Add support for applet version 4 (#2332)
  * New configuration option for opensc.conf to disable pkcs1_padding (#2193)
  * Add support for ECDSA with different hashes (#2190)
  * Enable more mechanisms (#2178)
  * Fixed asking for a user pin when formatting a card (#1737)
  * Added support for French CPx Healthcare cards (#2217)
  * Added ATR for new CardOS 5.4 version (#2296)
  * Fixes security issues:
  * tcos: use after return (bsc#1192005, CVE-2021-42780)
  * oberthur: use after free (bsc#1191992, CVE-2021-42779)
  * oberthur: multiple heap buffer overflows (bsc#1192000,
    CVE-2021-42781)
  * multiple stack buffer overflow issues (bsc#1191957,
    CVE-2021-42782)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685620800">- Security Fix: [CVE-2023-2977, bsc#1211894]
  * opensc: out of bounds read in pkcs15 cardos_have_verifyrc_package()
  * Add opensc-CVE-2023-2977.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Security Fix: [CVE-2023-40660, bsc#1215762]
  * opensc: PIN bypass when card tracks its own login state
  * Add patches:
  - patches/opensc-0_22_0-CVE-2023-40660-1of2.patch
  - patches/opensc-0_22_0-CVE-2023-40660-2of2.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696593600">- Security Fix: [CVE-2023-40661, bsc#1215761]
  * opensc: multiple memory issues with pkcs15-init (enrollment tool)
  * Add patches:
  - opensc-CVE-2023-40661-1of12.patch
  - opensc-CVE-2023-40661-2of12.patch
  - opensc-CVE-2023-40661-3of12.patch
  - opensc-CVE-2023-40661-4of12.patch
  - opensc-CVE-2023-40661-5of12.patch
  - opensc-CVE-2023-40661-6of12.patch
  - opensc-CVE-2023-40661-7of12.patch
  - opensc-CVE-2023-40661-8of12.patch
  - opensc-CVE-2023-40661-9of12.patch
  - opensc-CVE-2023-40661-10of12.patch
  - opensc-CVE-2023-40661-11of12.patch
  - opensc-CVE-2023-40661-12of12.patch</changelog>
</package>
<package pkgid="9ce6d260f3651309d75c7e21501cea4973ec12582bcd92e73ceb831688724a16" name="opensc" arch="s390x">
  <version epoch="0" ver="0.22.0" rel="150400.3.6.1"/>
  <changelog author="michael@stroeder.com" date="1424088000">- update to version 0.14.0</changelog>
  <changelog author="bwachter-pkg@lart.info" date="1438257600">- update to version 0.15.0
- register with p11-kit
  (https://www.opensc-project.org/opensc/ticket/390)</changelog>
  <changelog author="t.gruner@katodev.de" date="1467720000">- update to version 0.16.0
- remove fix (issue 505)
- clean up spec-file</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Add baselibs.conf to provide 32-bit PKCS11 plugins (bsc#996047).
- Drop opensc-ADVISORIES. There is no new advisory since 2009.</changelog>
  <changelog author="tchvatal@suse.com" date="1500379200">- Switch to tarball fetching from github
- Few small cleanups</changelog>
  <changelog author="michael@stroeder.com" date="1514808000">- update to version 0.17.0:
  * support for new cards
  * PIN support enhancemets
  * added .pc file
  * builds with OpenSSL 1.1.0 (1074799)
  * See /usr/share/doc/packages/opensc/NEWS for complete list.</changelog>
  <changelog author="sbrabec@suse.com" date="1531224000">- Update to version 0.18.0:
  * Further improvements of PIN support.
  * Large number of improvements and fixes
    (boo#1097951, boo#1100501).
  * See /usr/share/doc/packages/opensc/NEWS for complete list.
- Add opensc-desktop.patch, opensc-desktop2.patch and
  opensc-bash-completions.patch.</changelog>
  <changelog author="kbabioch@suse.com" date="1536840000">- Update to version 0.19.0
  * Fixed multiple security problems (out of bound writes/reads):
  * bsc#1104812
  * CVE-2018-16391 (bsc#1106998)
  * CVE-2018-16392 (bsc#1106999)
  * CVE-2018-16393 (bsc#1108318)
  * CVE-2018-16418 (bsc#1107039)
  * CVE-2018-16419 (bsc#1107107)
  * CVE-2018-16420 (bsc#1107097)
  * CVE-2018-16421 (bsc#1107049)
  * CVE-2018-16422 (bsc#1107038)
  * CVE-2018-16423 (bsc#1107037)
  * CVE-2018-16424 (bsc#1107036)
  * CVE-2018-16425 (bsc#1107035)
  * CVE-2018-16426 (bsc#1107034)
  * CVE-2018-16427 (bsc#1107033)
  * Workaround cards returning short signatures without leading zeroes
  * Distribute minimal opensc.conf
  * `pkcs11_enable_InitToken made` global configuration option
  * Modify behavior of `OPENSC_DRIVER` environment variable to restrict driver
    list instead of forcing one driver and skipping vital parts of
    configuration
  * Removed configuration options `zero_ckaid_for_ca_certs`,
    `force_card_driver`, `reopen_debug_file`, `paranoid-memory`
  * Generalized configuration option `ignored_readers`
  * If card initialization fails, continue card detection with other card
    drivers
  * reader-pcsc: allow fixing the length of a PIN
  * fixed crash during `C_WaitForSlotEvent`
  * Allow cancelling the PIN pad prompt before starting the reader transaction.
    Whether to start the transaction immediately or not is user-configurable
    for each application
  * opensc-notify
  * add Exit button to tray icon
  * User better description (GenericName) and a generic application icon
  * Do not display in the application list
- Removed patches included upstream now:
  * opensc-desktop.patch
  * opensc-desktop2.patch
  * opensc-bash-completions.patch
- Applied spec-cleaner</changelog>
  <changelog author="code@bnavigator.de" date="1563883200">- add explicit BuildRequires: zlib-devel</changelog>
  <changelog author="jsikes@suse.de" date="1564488000">- added opensc-0.19.0-rsa-pss.patch
  * Fixes the pkcs11-tool example
  * Added missing CKM_SHA224_RSA_PKCS_PSS
  * Add support for PSS padding to RSA signatures
  * Support for signature verification in pkcs11-tool
  * Switch cleanup steps to avoid segfaults on errors and more sanity checking
- added opensc-0.19.0-redundant_logging.patch
  * Remove redundant debug output</changelog>
  <changelog author="jsikes@suse.com" date="1566129600">- added opensc-0.19.0-piv_card_matching.patch
  * Improve Card Matching for Dual CAC/PIV and PIVKEY cards.
  * sourced from https://github.com/OpenSC/OpenSC/pull/1549</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606478400">- OpenSC 0.21.0:
  * CVE-2020-26571: stack-based buffer overflow in the gemsafe GPK
    smart card software driver (boo#1177380)
  * CVE-2020-26572: stack-based buffer overflow in the TCOS smart
    card software driver (boo#1177378)
  * CVE-2020-26570: heap-based buffer overflow in the Oberthur
    smart card software driver (boo#1177364)
  * CardOS 5.x support boo#1179291
  * Support for OAEP encryption, make SHA256 default
  * New separate debug level for PIN commands
  * Fix handling of card/reader insertion/removal events in pcscd
  * Fixes of removed readers handling
  * Fix Firefox crash because of invalid pcsc context
  * PKCS#11: Return CKR_TOKEN_NOT_RECOGNIZED for not recognized cards
  * Propagate ignore_user_content to PKCS#11 layer not to confuse applications
  * Minidriver: Fix check of ATR length (2-to 33 characters inclusive)
  * pkcs11-tool: allow using SW tokens
  * opensc-explorer asn1 accepts offsets and decode records
  * opensc-explorer cat accepts records
  * OpenPGP: Add new ec curves supported by GNUK
  * First steps supporting OpenPGP 3.4
  * OpenPGP: Add support for EC key import
  * Rutoken: Add ATR for Rutoken ECP SC NFC
  * Improve detection of various CardOS 5 configurations
  * DNIe: Add new DNIe CA structure for the secure channel
  * ePass2003: Improve ECC support
  * ePass2003: Fix erase sequence
  * IAS-ECC: Fix support for Idemia Cosmo cards
  * IAS-ECC: PIN padding settings are now used from PKCS#15 info when available
  * IAS-ECC: Added PIN-pad support for PIN unblock
  * New driver for Gemalto IDPrime (only some types)
  * eDo: New driver with initial support for Polish eID card (e-dowód, eDO)
  * MCRD: Remove unused and broken RSA EstEID support
  * TCOS: Add missing encryption certificates
  * PIV: Add ATR of DOD Yubikey
  * fixed PIV global pin bug
  * CAC1: Support changing PIN with CAC Alt tokens
- includes changes from 0.20.0
  * CVE-2019-6502: memory leak in libopensc (boo#1122756)
  * CVE-2019-15946: out-of-bounds access of an ASN.1 Octet string (boo#1149747)
  * CVE-2019-15945: out-of-bounds access of an ASN.1 Bitstring (boo#1149746)
  * CVE-2019-19479: incorrect read operation during parsing of a SETCOS file attribute (boo#1158256)
  * CVE-2019-19480: improper free operation in sc_pkcs15_decode_prkdf_entry (boo#1158307)
  * CVE-2019-20792: double free in coolkey_free_private_dat (bsc#1170809)
  * Support RSA-PSS signature mechanisms using RSA-RAW
  * Added memory locking for secrets
  * added support for terminal colors
  * PC/SC driver: Fixed error handling in case of changing or removing the card reader
  * rename md_read_only to read_only and use it for PKCS#11 and Minidriver
  * allow global use of ignore_private_certificate
  * PKCS#11: Implement write protection (CKF_WRITE_PROTECTED) based on the card profile
  * PKCS#11: Add C_WrapKey and C_UnwrapKey implementations
  * PKCS#11: Handle CKA_ALWAYS_AUTHENTICATE when creating key objects
  * PKCS#11: Truncate long PKCS#11 labels with ...
  * PKCS#11: Fixed recognition of a token when being unplugged and reinserted
  * Minidriver: Register for CardOS5 cards
  * Minidriver: Add support for RSA-PSS
  * tools: Harmonize the use of option -r/--reader
  * goid-tool: GoID personalization with fingerprint
  * openpgp-tool: replace the options -L/--key-length with -t/--key-type
  * openpgp-tool: add options -C/--card-info and -K/--key-info
  * opensc-explorer: add command pin_info, extend random
  * pkcs11-register: Auto-configuration of applications for use of OpenSC PKCS#11
  * pkcd11-register: Autostart
  * opensc-tool: Show ATR also for cards not recognized by OpenSC
  * pkcs11-spy: parse CKM_AES_GCM, EC Derive parameters
  * pkcs11-spy: Add support for CKA_OTP_* and CKM_*_PSS values
  * pkcs11-tool: Support for signature verification via --verify
  * pkcs11-tool: Add object type secrkey for --type option
  * pkcs11-tool: Implement Secret Key write object
  * pkcs11-tool: Add GOSTR3410-2012 support
  * pkcs11-tool: Add support for testing CKM_RSA_PKCS_OAEP
  * pkcs11-tool: Add extractable option to key import
  * pkcs11-tool: list more key access flags when listing keys
  * pkcs11-tool: Add support for CKA_ALLOWED_MECHANISMS when creating new objects and listing keys
  * pkcs15-crypt: *Handle keys with user consent
  * New separate CAC1 driver using the old CAC specification (#1502)
  * CardOS: Add support for 4K RSA keys in CardOS 5
  * CardOS: Fixed decryption with CardOS 5
  * Enable CoolKey driver to handle 2048-bit keys
  * EstEID: add support for a minimalistic, small and fast card profile based on IAS-ECC issued since December 2018
  * GIDS Decipher fix (#1881)
  * GIDS: Allow RSA 4K support
  * MICARDO: Remove long expired EstEID 1.0/1.1 card support
  * MyEID: Add support for unwrapping a secret key with an RSA key or secret key
  * MyEID Add support for wrapping a secret key with a secret key
  * Support for MyEID 4K RSA
  * Support for OsEID
  * Gemalto GemSafe: add new PTeID ATRs, add support for 4K RSA keys
  * OpenPGP Card v3 ECC support
  * Add Rutoken ECP SC
  * Add Rutoken Lite
  * Add SmartCard-HSM 4K ATR
  * Add missing secp384r1 curve parameter
  * Stacros: Fix decipher with 2.3
  * Stacros: Add ATR for 2nd gen. eGK
  * Stacros: Add new ATR for 3.5
  * Stacros: Detect and allow Globalplatform PIN encoding
  * Fix TCOS IDKey support
  * TCOS: add encryption certificate for IDKey
  * Infocamere, Postecert, Cnipa: Remove profiles
  * Remove incomplete acos5 driver
- drop patches now upstream:
  * opensc-0.19.0-piv_card_matching.patch
  * opensc-0.19.0-redundant_logging.patch
  * opensc-0.19.0-rsa-pss.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move licenses to licensedir</changelog>
  <changelog author="predivan@mts.rs" date="1624795200">- Fix build on GCC11
  * Add opensc-gcc11.patch from Fedora
    (https://github.com/OpenSC/OpenSC/pull/2241/)</changelog>
  <changelog author="daniel.donisa@suse.com" date="1633348800">- Update to OpenSC 0.22.0:
  * Removed changes in opensc-gcc11.patch already present in upstream.
  - See https://github.com/OpenSC/OpenSC/pull/2241/commits/e549e9c62eb4fcd2260800e2665071e4dd9bbbda
  * Removed some false positives from the openrc-rpmlintrc file.
  * Use standard paths for file cache on Linux (#2148) and OSX (#2214)
  * Various issues of memory/buffer handling in legacy drivers mostly reported by oss-fuzz and coverity (tcos, oberthur, isoapplet, iasecc, westcos, gpk, flex, dnie, mcrd, authentic, belpic)
  * Add threading test to `pkcs11-tool` (#2067)
  * Add support to generate generic secret keys (#2140)
  * `opensc-explorer`: Print information about LCS (Life cycle status byte) (#2195)
  * Add support for Apple's arm64 (M1) binaries, removed TokenD. A seperate installer with TokenD (and without arm64 binaries) will be available (#2179).
  * Support for gcc11 and its new strict aliasing rules (#2241, #2260)
  * Initial support for building with OpenSSL 3.0 (#2343)
  * pkcs15-tool: Write data objects in binary mode (#2324)
  * Avoid limited size of log messages (#2352)
  * Support for ECDSA verification (#2211)
  * Support for ECDSA with different SHA hashes (#2190)
  * Prevent issues in p11-kit by not returning unexpected return codes (#2207)
  * Add support for PKCS#11 3.0: The new interfaces, profile objects and functions (#2096, #2293)
  * Standardize the version 2 on 2.20 in the code (#2096)
  * Fix CKA_MODIFIABLE and CKA_EXTRACTABLE  (#2176)
  * Copy arguments of C_Initialize (#2350)
  * Fix RSA-PSS signing (#2234)
  * Fix DO deletion (#2215)
  * Add support for (X)EdDSA keys (#1960)
  * Add support for applet version 3 and fix RSA-PSS mechanisms (#2205)
  * Add support for applet version 4 (#2332)
  * New configuration option for opensc.conf to disable pkcs1_padding (#2193)
  * Add support for ECDSA with different hashes (#2190)
  * Enable more mechanisms (#2178)
  * Fixed asking for a user pin when formatting a card (#1737)
  * Added support for French CPx Healthcare cards (#2217)
  * Added ATR for new CardOS 5.4 version (#2296)
  * Fixes security issues:
  * tcos: use after return (bsc#1192005, CVE-2021-42780)
  * oberthur: use after free (bsc#1191992, CVE-2021-42779)
  * oberthur: multiple heap buffer overflows (bsc#1192000,
    CVE-2021-42781)
  * multiple stack buffer overflow issues (bsc#1191957,
    CVE-2021-42782)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685620800">- Security Fix: [CVE-2023-2977, bsc#1211894]
  * opensc: out of bounds read in pkcs15 cardos_have_verifyrc_package()
  * Add opensc-CVE-2023-2977.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Security Fix: [CVE-2023-40660, bsc#1215762]
  * opensc: PIN bypass when card tracks its own login state
  * Add patches:
  - patches/opensc-0_22_0-CVE-2023-40660-1of2.patch
  - patches/opensc-0_22_0-CVE-2023-40660-2of2.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696593600">- Security Fix: [CVE-2023-40661, bsc#1215761]
  * opensc: multiple memory issues with pkcs15-init (enrollment tool)
  * Add patches:
  - opensc-CVE-2023-40661-1of12.patch
  - opensc-CVE-2023-40661-2of12.patch
  - opensc-CVE-2023-40661-3of12.patch
  - opensc-CVE-2023-40661-4of12.patch
  - opensc-CVE-2023-40661-5of12.patch
  - opensc-CVE-2023-40661-6of12.patch
  - opensc-CVE-2023-40661-7of12.patch
  - opensc-CVE-2023-40661-8of12.patch
  - opensc-CVE-2023-40661-9of12.patch
  - opensc-CVE-2023-40661-10of12.patch
  - opensc-CVE-2023-40661-11of12.patch
  - opensc-CVE-2023-40661-12of12.patch</changelog>
</package>
<package pkgid="a92abbecd97b743968bef98078c7ee1ab42e453128ef9729a4ecd8b19b0f8dc5" name="opensc" arch="src">
  <version epoch="0" ver="0.22.0" rel="150400.3.6.1"/>
  <changelog author="mgorse@suse.com" date="1339502400">- make needed directories before running make install</changelog>
  <changelog author="luizluca@tre-sc.gov.br" date="1386072000">- update to version 0.13.0</changelog>
  <changelog author="michael@stroeder.com" date="1424088000">- update to version 0.14.0</changelog>
  <changelog author="bwachter-pkg@lart.info" date="1438257600">- update to version 0.15.0
- register with p11-kit
  (https://www.opensc-project.org/opensc/ticket/390)</changelog>
  <changelog author="t.gruner@katodev.de" date="1467720000">- update to version 0.16.0
- remove fix (issue 505)
- clean up spec-file</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Add baselibs.conf to provide 32-bit PKCS11 plugins (bsc#996047).
- Drop opensc-ADVISORIES. There is no new advisory since 2009.</changelog>
  <changelog author="tchvatal@suse.com" date="1500379200">- Switch to tarball fetching from github
- Few small cleanups</changelog>
  <changelog author="michael@stroeder.com" date="1514808000">- update to version 0.17.0:
  * support for new cards
  * PIN support enhancemets
  * added .pc file
  * builds with OpenSSL 1.1.0 (1074799)
  * See /usr/share/doc/packages/opensc/NEWS for complete list.</changelog>
  <changelog author="sbrabec@suse.com" date="1531224000">- Update to version 0.18.0:
  * Further improvements of PIN support.
  * Large number of improvements and fixes
    (boo#1097951, boo#1100501).
  * See /usr/share/doc/packages/opensc/NEWS for complete list.
- Add opensc-desktop.patch, opensc-desktop2.patch and
  opensc-bash-completions.patch.</changelog>
  <changelog author="kbabioch@suse.com" date="1536840000">- Update to version 0.19.0
  * Fixed multiple security problems (out of bound writes/reads):
  * bsc#1104812
  * CVE-2018-16391 (bsc#1106998)
  * CVE-2018-16392 (bsc#1106999)
  * CVE-2018-16393 (bsc#1108318)
  * CVE-2018-16418 (bsc#1107039)
  * CVE-2018-16419 (bsc#1107107)
  * CVE-2018-16420 (bsc#1107097)
  * CVE-2018-16421 (bsc#1107049)
  * CVE-2018-16422 (bsc#1107038)
  * CVE-2018-16423 (bsc#1107037)
  * CVE-2018-16424 (bsc#1107036)
  * CVE-2018-16425 (bsc#1107035)
  * CVE-2018-16426 (bsc#1107034)
  * CVE-2018-16427 (bsc#1107033)
  * Workaround cards returning short signatures without leading zeroes
  * Distribute minimal opensc.conf
  * `pkcs11_enable_InitToken made` global configuration option
  * Modify behavior of `OPENSC_DRIVER` environment variable to restrict driver
    list instead of forcing one driver and skipping vital parts of
    configuration
  * Removed configuration options `zero_ckaid_for_ca_certs`,
    `force_card_driver`, `reopen_debug_file`, `paranoid-memory`
  * Generalized configuration option `ignored_readers`
  * If card initialization fails, continue card detection with other card
    drivers
  * reader-pcsc: allow fixing the length of a PIN
  * fixed crash during `C_WaitForSlotEvent`
  * Allow cancelling the PIN pad prompt before starting the reader transaction.
    Whether to start the transaction immediately or not is user-configurable
    for each application
  * opensc-notify
  * add Exit button to tray icon
  * User better description (GenericName) and a generic application icon
  * Do not display in the application list
- Removed patches included upstream now:
  * opensc-desktop.patch
  * opensc-desktop2.patch
  * opensc-bash-completions.patch
- Applied spec-cleaner</changelog>
  <changelog author="code@bnavigator.de" date="1563883200">- add explicit BuildRequires: zlib-devel</changelog>
  <changelog author="jsikes@suse.de" date="1564488000">- added opensc-0.19.0-rsa-pss.patch
  * Fixes the pkcs11-tool example
  * Added missing CKM_SHA224_RSA_PKCS_PSS
  * Add support for PSS padding to RSA signatures
  * Support for signature verification in pkcs11-tool
  * Switch cleanup steps to avoid segfaults on errors and more sanity checking
- added opensc-0.19.0-redundant_logging.patch
  * Remove redundant debug output</changelog>
  <changelog author="jsikes@suse.com" date="1566129600">- added opensc-0.19.0-piv_card_matching.patch
  * Improve Card Matching for Dual CAC/PIV and PIVKEY cards.
  * sourced from https://github.com/OpenSC/OpenSC/pull/1549</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606478400">- OpenSC 0.21.0:
  * CVE-2020-26571: stack-based buffer overflow in the gemsafe GPK
    smart card software driver (boo#1177380)
  * CVE-2020-26572: stack-based buffer overflow in the TCOS smart
    card software driver (boo#1177378)
  * CVE-2020-26570: heap-based buffer overflow in the Oberthur
    smart card software driver (boo#1177364)
  * CardOS 5.x support boo#1179291
  * Support for OAEP encryption, make SHA256 default
  * New separate debug level for PIN commands
  * Fix handling of card/reader insertion/removal events in pcscd
  * Fixes of removed readers handling
  * Fix Firefox crash because of invalid pcsc context
  * PKCS#11: Return CKR_TOKEN_NOT_RECOGNIZED for not recognized cards
  * Propagate ignore_user_content to PKCS#11 layer not to confuse applications
  * Minidriver: Fix check of ATR length (2-to 33 characters inclusive)
  * pkcs11-tool: allow using SW tokens
  * opensc-explorer asn1 accepts offsets and decode records
  * opensc-explorer cat accepts records
  * OpenPGP: Add new ec curves supported by GNUK
  * First steps supporting OpenPGP 3.4
  * OpenPGP: Add support for EC key import
  * Rutoken: Add ATR for Rutoken ECP SC NFC
  * Improve detection of various CardOS 5 configurations
  * DNIe: Add new DNIe CA structure for the secure channel
  * ePass2003: Improve ECC support
  * ePass2003: Fix erase sequence
  * IAS-ECC: Fix support for Idemia Cosmo cards
  * IAS-ECC: PIN padding settings are now used from PKCS#15 info when available
  * IAS-ECC: Added PIN-pad support for PIN unblock
  * New driver for Gemalto IDPrime (only some types)
  * eDo: New driver with initial support for Polish eID card (e-dowód, eDO)
  * MCRD: Remove unused and broken RSA EstEID support
  * TCOS: Add missing encryption certificates
  * PIV: Add ATR of DOD Yubikey
  * fixed PIV global pin bug
  * CAC1: Support changing PIN with CAC Alt tokens
- includes changes from 0.20.0
  * CVE-2019-6502: memory leak in libopensc (boo#1122756)
  * CVE-2019-15946: out-of-bounds access of an ASN.1 Octet string (boo#1149747)
  * CVE-2019-15945: out-of-bounds access of an ASN.1 Bitstring (boo#1149746)
  * CVE-2019-19479: incorrect read operation during parsing of a SETCOS file attribute (boo#1158256)
  * CVE-2019-19480: improper free operation in sc_pkcs15_decode_prkdf_entry (boo#1158307)
  * CVE-2019-20792: double free in coolkey_free_private_dat (bsc#1170809)
  * Support RSA-PSS signature mechanisms using RSA-RAW
  * Added memory locking for secrets
  * added support for terminal colors
  * PC/SC driver: Fixed error handling in case of changing or removing the card reader
  * rename md_read_only to read_only and use it for PKCS#11 and Minidriver
  * allow global use of ignore_private_certificate
  * PKCS#11: Implement write protection (CKF_WRITE_PROTECTED) based on the card profile
  * PKCS#11: Add C_WrapKey and C_UnwrapKey implementations
  * PKCS#11: Handle CKA_ALWAYS_AUTHENTICATE when creating key objects
  * PKCS#11: Truncate long PKCS#11 labels with ...
  * PKCS#11: Fixed recognition of a token when being unplugged and reinserted
  * Minidriver: Register for CardOS5 cards
  * Minidriver: Add support for RSA-PSS
  * tools: Harmonize the use of option -r/--reader
  * goid-tool: GoID personalization with fingerprint
  * openpgp-tool: replace the options -L/--key-length with -t/--key-type
  * openpgp-tool: add options -C/--card-info and -K/--key-info
  * opensc-explorer: add command pin_info, extend random
  * pkcs11-register: Auto-configuration of applications for use of OpenSC PKCS#11
  * pkcd11-register: Autostart
  * opensc-tool: Show ATR also for cards not recognized by OpenSC
  * pkcs11-spy: parse CKM_AES_GCM, EC Derive parameters
  * pkcs11-spy: Add support for CKA_OTP_* and CKM_*_PSS values
  * pkcs11-tool: Support for signature verification via --verify
  * pkcs11-tool: Add object type secrkey for --type option
  * pkcs11-tool: Implement Secret Key write object
  * pkcs11-tool: Add GOSTR3410-2012 support
  * pkcs11-tool: Add support for testing CKM_RSA_PKCS_OAEP
  * pkcs11-tool: Add extractable option to key import
  * pkcs11-tool: list more key access flags when listing keys
  * pkcs11-tool: Add support for CKA_ALLOWED_MECHANISMS when creating new objects and listing keys
  * pkcs15-crypt: *Handle keys with user consent
  * New separate CAC1 driver using the old CAC specification (#1502)
  * CardOS: Add support for 4K RSA keys in CardOS 5
  * CardOS: Fixed decryption with CardOS 5
  * Enable CoolKey driver to handle 2048-bit keys
  * EstEID: add support for a minimalistic, small and fast card profile based on IAS-ECC issued since December 2018
  * GIDS Decipher fix (#1881)
  * GIDS: Allow RSA 4K support
  * MICARDO: Remove long expired EstEID 1.0/1.1 card support
  * MyEID: Add support for unwrapping a secret key with an RSA key or secret key
  * MyEID Add support for wrapping a secret key with a secret key
  * Support for MyEID 4K RSA
  * Support for OsEID
  * Gemalto GemSafe: add new PTeID ATRs, add support for 4K RSA keys
  * OpenPGP Card v3 ECC support
  * Add Rutoken ECP SC
  * Add Rutoken Lite
  * Add SmartCard-HSM 4K ATR
  * Add missing secp384r1 curve parameter
  * Stacros: Fix decipher with 2.3
  * Stacros: Add ATR for 2nd gen. eGK
  * Stacros: Add new ATR for 3.5
  * Stacros: Detect and allow Globalplatform PIN encoding
  * Fix TCOS IDKey support
  * TCOS: add encryption certificate for IDKey
  * Infocamere, Postecert, Cnipa: Remove profiles
  * Remove incomplete acos5 driver
- drop patches now upstream:
  * opensc-0.19.0-piv_card_matching.patch
  * opensc-0.19.0-redundant_logging.patch
  * opensc-0.19.0-rsa-pss.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move licenses to licensedir</changelog>
  <changelog author="predivan@mts.rs" date="1624795200">- Fix build on GCC11
  * Add opensc-gcc11.patch from Fedora
    (https://github.com/OpenSC/OpenSC/pull/2241/)</changelog>
  <changelog author="daniel.donisa@suse.com" date="1633348800">- Update to OpenSC 0.22.0:
  * Removed changes in opensc-gcc11.patch already present in upstream.
  - See https://github.com/OpenSC/OpenSC/pull/2241/commits/e549e9c62eb4fcd2260800e2665071e4dd9bbbda
  * Removed some false positives from the openrc-rpmlintrc file.
  * Use standard paths for file cache on Linux (#2148) and OSX (#2214)
  * Various issues of memory/buffer handling in legacy drivers mostly reported by oss-fuzz and coverity (tcos, oberthur, isoapplet, iasecc, westcos, gpk, flex, dnie, mcrd, authentic, belpic)
  * Add threading test to `pkcs11-tool` (#2067)
  * Add support to generate generic secret keys (#2140)
  * `opensc-explorer`: Print information about LCS (Life cycle status byte) (#2195)
  * Add support for Apple's arm64 (M1) binaries, removed TokenD. A seperate installer with TokenD (and without arm64 binaries) will be available (#2179).
  * Support for gcc11 and its new strict aliasing rules (#2241, #2260)
  * Initial support for building with OpenSSL 3.0 (#2343)
  * pkcs15-tool: Write data objects in binary mode (#2324)
  * Avoid limited size of log messages (#2352)
  * Support for ECDSA verification (#2211)
  * Support for ECDSA with different SHA hashes (#2190)
  * Prevent issues in p11-kit by not returning unexpected return codes (#2207)
  * Add support for PKCS#11 3.0: The new interfaces, profile objects and functions (#2096, #2293)
  * Standardize the version 2 on 2.20 in the code (#2096)
  * Fix CKA_MODIFIABLE and CKA_EXTRACTABLE  (#2176)
  * Copy arguments of C_Initialize (#2350)
  * Fix RSA-PSS signing (#2234)
  * Fix DO deletion (#2215)
  * Add support for (X)EdDSA keys (#1960)
  * Add support for applet version 3 and fix RSA-PSS mechanisms (#2205)
  * Add support for applet version 4 (#2332)
  * New configuration option for opensc.conf to disable pkcs1_padding (#2193)
  * Add support for ECDSA with different hashes (#2190)
  * Enable more mechanisms (#2178)
  * Fixed asking for a user pin when formatting a card (#1737)
  * Added support for French CPx Healthcare cards (#2217)
  * Added ATR for new CardOS 5.4 version (#2296)
  * Fixes security issues:
  * tcos: use after return (bsc#1192005, CVE-2021-42780)
  * oberthur: use after free (bsc#1191992, CVE-2021-42779)
  * oberthur: multiple heap buffer overflows (bsc#1192000,
    CVE-2021-42781)
  * multiple stack buffer overflow issues (bsc#1191957,
    CVE-2021-42782)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685620800">- Security Fix: [CVE-2023-2977, bsc#1211894]
  * opensc: out of bounds read in pkcs15 cardos_have_verifyrc_package()
  * Add opensc-CVE-2023-2977.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Security Fix: [CVE-2023-40660, bsc#1215762]
  * opensc: PIN bypass when card tracks its own login state
  * Add patches:
  - patches/opensc-0_22_0-CVE-2023-40660-1of2.patch
  - patches/opensc-0_22_0-CVE-2023-40660-2of2.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696593600">- Security Fix: [CVE-2023-40661, bsc#1215761]
  * opensc: multiple memory issues with pkcs15-init (enrollment tool)
  * Add patches:
  - opensc-CVE-2023-40661-1of12.patch
  - opensc-CVE-2023-40661-2of12.patch
  - opensc-CVE-2023-40661-3of12.patch
  - opensc-CVE-2023-40661-4of12.patch
  - opensc-CVE-2023-40661-5of12.patch
  - opensc-CVE-2023-40661-6of12.patch
  - opensc-CVE-2023-40661-7of12.patch
  - opensc-CVE-2023-40661-8of12.patch
  - opensc-CVE-2023-40661-9of12.patch
  - opensc-CVE-2023-40661-10of12.patch
  - opensc-CVE-2023-40661-11of12.patch
  - opensc-CVE-2023-40661-12of12.patch</changelog>
</package>
<package pkgid="6d46e2a2a305fb1f77c52a01f983f45af0c541ff8ff568f5b4cb3a3582ac9d93" name="opensc" arch="x86_64">
  <version epoch="0" ver="0.22.0" rel="150400.3.6.1"/>
  <changelog author="michael@stroeder.com" date="1424088000">- update to version 0.14.0</changelog>
  <changelog author="bwachter-pkg@lart.info" date="1438257600">- update to version 0.15.0
- register with p11-kit
  (https://www.opensc-project.org/opensc/ticket/390)</changelog>
  <changelog author="t.gruner@katodev.de" date="1467720000">- update to version 0.16.0
- remove fix (issue 505)
- clean up spec-file</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Add baselibs.conf to provide 32-bit PKCS11 plugins (bsc#996047).
- Drop opensc-ADVISORIES. There is no new advisory since 2009.</changelog>
  <changelog author="tchvatal@suse.com" date="1500379200">- Switch to tarball fetching from github
- Few small cleanups</changelog>
  <changelog author="michael@stroeder.com" date="1514808000">- update to version 0.17.0:
  * support for new cards
  * PIN support enhancemets
  * added .pc file
  * builds with OpenSSL 1.1.0 (1074799)
  * See /usr/share/doc/packages/opensc/NEWS for complete list.</changelog>
  <changelog author="sbrabec@suse.com" date="1531224000">- Update to version 0.18.0:
  * Further improvements of PIN support.
  * Large number of improvements and fixes
    (boo#1097951, boo#1100501).
  * See /usr/share/doc/packages/opensc/NEWS for complete list.
- Add opensc-desktop.patch, opensc-desktop2.patch and
  opensc-bash-completions.patch.</changelog>
  <changelog author="kbabioch@suse.com" date="1536840000">- Update to version 0.19.0
  * Fixed multiple security problems (out of bound writes/reads):
  * bsc#1104812
  * CVE-2018-16391 (bsc#1106998)
  * CVE-2018-16392 (bsc#1106999)
  * CVE-2018-16393 (bsc#1108318)
  * CVE-2018-16418 (bsc#1107039)
  * CVE-2018-16419 (bsc#1107107)
  * CVE-2018-16420 (bsc#1107097)
  * CVE-2018-16421 (bsc#1107049)
  * CVE-2018-16422 (bsc#1107038)
  * CVE-2018-16423 (bsc#1107037)
  * CVE-2018-16424 (bsc#1107036)
  * CVE-2018-16425 (bsc#1107035)
  * CVE-2018-16426 (bsc#1107034)
  * CVE-2018-16427 (bsc#1107033)
  * Workaround cards returning short signatures without leading zeroes
  * Distribute minimal opensc.conf
  * `pkcs11_enable_InitToken made` global configuration option
  * Modify behavior of `OPENSC_DRIVER` environment variable to restrict driver
    list instead of forcing one driver and skipping vital parts of
    configuration
  * Removed configuration options `zero_ckaid_for_ca_certs`,
    `force_card_driver`, `reopen_debug_file`, `paranoid-memory`
  * Generalized configuration option `ignored_readers`
  * If card initialization fails, continue card detection with other card
    drivers
  * reader-pcsc: allow fixing the length of a PIN
  * fixed crash during `C_WaitForSlotEvent`
  * Allow cancelling the PIN pad prompt before starting the reader transaction.
    Whether to start the transaction immediately or not is user-configurable
    for each application
  * opensc-notify
  * add Exit button to tray icon
  * User better description (GenericName) and a generic application icon
  * Do not display in the application list
- Removed patches included upstream now:
  * opensc-desktop.patch
  * opensc-desktop2.patch
  * opensc-bash-completions.patch
- Applied spec-cleaner</changelog>
  <changelog author="code@bnavigator.de" date="1563883200">- add explicit BuildRequires: zlib-devel</changelog>
  <changelog author="jsikes@suse.de" date="1564488000">- added opensc-0.19.0-rsa-pss.patch
  * Fixes the pkcs11-tool example
  * Added missing CKM_SHA224_RSA_PKCS_PSS
  * Add support for PSS padding to RSA signatures
  * Support for signature verification in pkcs11-tool
  * Switch cleanup steps to avoid segfaults on errors and more sanity checking
- added opensc-0.19.0-redundant_logging.patch
  * Remove redundant debug output</changelog>
  <changelog author="jsikes@suse.com" date="1566129600">- added opensc-0.19.0-piv_card_matching.patch
  * Improve Card Matching for Dual CAC/PIV and PIVKEY cards.
  * sourced from https://github.com/OpenSC/OpenSC/pull/1549</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606478400">- OpenSC 0.21.0:
  * CVE-2020-26571: stack-based buffer overflow in the gemsafe GPK
    smart card software driver (boo#1177380)
  * CVE-2020-26572: stack-based buffer overflow in the TCOS smart
    card software driver (boo#1177378)
  * CVE-2020-26570: heap-based buffer overflow in the Oberthur
    smart card software driver (boo#1177364)
  * CardOS 5.x support boo#1179291
  * Support for OAEP encryption, make SHA256 default
  * New separate debug level for PIN commands
  * Fix handling of card/reader insertion/removal events in pcscd
  * Fixes of removed readers handling
  * Fix Firefox crash because of invalid pcsc context
  * PKCS#11: Return CKR_TOKEN_NOT_RECOGNIZED for not recognized cards
  * Propagate ignore_user_content to PKCS#11 layer not to confuse applications
  * Minidriver: Fix check of ATR length (2-to 33 characters inclusive)
  * pkcs11-tool: allow using SW tokens
  * opensc-explorer asn1 accepts offsets and decode records
  * opensc-explorer cat accepts records
  * OpenPGP: Add new ec curves supported by GNUK
  * First steps supporting OpenPGP 3.4
  * OpenPGP: Add support for EC key import
  * Rutoken: Add ATR for Rutoken ECP SC NFC
  * Improve detection of various CardOS 5 configurations
  * DNIe: Add new DNIe CA structure for the secure channel
  * ePass2003: Improve ECC support
  * ePass2003: Fix erase sequence
  * IAS-ECC: Fix support for Idemia Cosmo cards
  * IAS-ECC: PIN padding settings are now used from PKCS#15 info when available
  * IAS-ECC: Added PIN-pad support for PIN unblock
  * New driver for Gemalto IDPrime (only some types)
  * eDo: New driver with initial support for Polish eID card (e-dowód, eDO)
  * MCRD: Remove unused and broken RSA EstEID support
  * TCOS: Add missing encryption certificates
  * PIV: Add ATR of DOD Yubikey
  * fixed PIV global pin bug
  * CAC1: Support changing PIN with CAC Alt tokens
- includes changes from 0.20.0
  * CVE-2019-6502: memory leak in libopensc (boo#1122756)
  * CVE-2019-15946: out-of-bounds access of an ASN.1 Octet string (boo#1149747)
  * CVE-2019-15945: out-of-bounds access of an ASN.1 Bitstring (boo#1149746)
  * CVE-2019-19479: incorrect read operation during parsing of a SETCOS file attribute (boo#1158256)
  * CVE-2019-19480: improper free operation in sc_pkcs15_decode_prkdf_entry (boo#1158307)
  * CVE-2019-20792: double free in coolkey_free_private_dat (bsc#1170809)
  * Support RSA-PSS signature mechanisms using RSA-RAW
  * Added memory locking for secrets
  * added support for terminal colors
  * PC/SC driver: Fixed error handling in case of changing or removing the card reader
  * rename md_read_only to read_only and use it for PKCS#11 and Minidriver
  * allow global use of ignore_private_certificate
  * PKCS#11: Implement write protection (CKF_WRITE_PROTECTED) based on the card profile
  * PKCS#11: Add C_WrapKey and C_UnwrapKey implementations
  * PKCS#11: Handle CKA_ALWAYS_AUTHENTICATE when creating key objects
  * PKCS#11: Truncate long PKCS#11 labels with ...
  * PKCS#11: Fixed recognition of a token when being unplugged and reinserted
  * Minidriver: Register for CardOS5 cards
  * Minidriver: Add support for RSA-PSS
  * tools: Harmonize the use of option -r/--reader
  * goid-tool: GoID personalization with fingerprint
  * openpgp-tool: replace the options -L/--key-length with -t/--key-type
  * openpgp-tool: add options -C/--card-info and -K/--key-info
  * opensc-explorer: add command pin_info, extend random
  * pkcs11-register: Auto-configuration of applications for use of OpenSC PKCS#11
  * pkcd11-register: Autostart
  * opensc-tool: Show ATR also for cards not recognized by OpenSC
  * pkcs11-spy: parse CKM_AES_GCM, EC Derive parameters
  * pkcs11-spy: Add support for CKA_OTP_* and CKM_*_PSS values
  * pkcs11-tool: Support for signature verification via --verify
  * pkcs11-tool: Add object type secrkey for --type option
  * pkcs11-tool: Implement Secret Key write object
  * pkcs11-tool: Add GOSTR3410-2012 support
  * pkcs11-tool: Add support for testing CKM_RSA_PKCS_OAEP
  * pkcs11-tool: Add extractable option to key import
  * pkcs11-tool: list more key access flags when listing keys
  * pkcs11-tool: Add support for CKA_ALLOWED_MECHANISMS when creating new objects and listing keys
  * pkcs15-crypt: *Handle keys with user consent
  * New separate CAC1 driver using the old CAC specification (#1502)
  * CardOS: Add support for 4K RSA keys in CardOS 5
  * CardOS: Fixed decryption with CardOS 5
  * Enable CoolKey driver to handle 2048-bit keys
  * EstEID: add support for a minimalistic, small and fast card profile based on IAS-ECC issued since December 2018
  * GIDS Decipher fix (#1881)
  * GIDS: Allow RSA 4K support
  * MICARDO: Remove long expired EstEID 1.0/1.1 card support
  * MyEID: Add support for unwrapping a secret key with an RSA key or secret key
  * MyEID Add support for wrapping a secret key with a secret key
  * Support for MyEID 4K RSA
  * Support for OsEID
  * Gemalto GemSafe: add new PTeID ATRs, add support for 4K RSA keys
  * OpenPGP Card v3 ECC support
  * Add Rutoken ECP SC
  * Add Rutoken Lite
  * Add SmartCard-HSM 4K ATR
  * Add missing secp384r1 curve parameter
  * Stacros: Fix decipher with 2.3
  * Stacros: Add ATR for 2nd gen. eGK
  * Stacros: Add new ATR for 3.5
  * Stacros: Detect and allow Globalplatform PIN encoding
  * Fix TCOS IDKey support
  * TCOS: add encryption certificate for IDKey
  * Infocamere, Postecert, Cnipa: Remove profiles
  * Remove incomplete acos5 driver
- drop patches now upstream:
  * opensc-0.19.0-piv_card_matching.patch
  * opensc-0.19.0-redundant_logging.patch
  * opensc-0.19.0-rsa-pss.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move licenses to licensedir</changelog>
  <changelog author="predivan@mts.rs" date="1624795200">- Fix build on GCC11
  * Add opensc-gcc11.patch from Fedora
    (https://github.com/OpenSC/OpenSC/pull/2241/)</changelog>
  <changelog author="daniel.donisa@suse.com" date="1633348800">- Update to OpenSC 0.22.0:
  * Removed changes in opensc-gcc11.patch already present in upstream.
  - See https://github.com/OpenSC/OpenSC/pull/2241/commits/e549e9c62eb4fcd2260800e2665071e4dd9bbbda
  * Removed some false positives from the openrc-rpmlintrc file.
  * Use standard paths for file cache on Linux (#2148) and OSX (#2214)
  * Various issues of memory/buffer handling in legacy drivers mostly reported by oss-fuzz and coverity (tcos, oberthur, isoapplet, iasecc, westcos, gpk, flex, dnie, mcrd, authentic, belpic)
  * Add threading test to `pkcs11-tool` (#2067)
  * Add support to generate generic secret keys (#2140)
  * `opensc-explorer`: Print information about LCS (Life cycle status byte) (#2195)
  * Add support for Apple's arm64 (M1) binaries, removed TokenD. A seperate installer with TokenD (and without arm64 binaries) will be available (#2179).
  * Support for gcc11 and its new strict aliasing rules (#2241, #2260)
  * Initial support for building with OpenSSL 3.0 (#2343)
  * pkcs15-tool: Write data objects in binary mode (#2324)
  * Avoid limited size of log messages (#2352)
  * Support for ECDSA verification (#2211)
  * Support for ECDSA with different SHA hashes (#2190)
  * Prevent issues in p11-kit by not returning unexpected return codes (#2207)
  * Add support for PKCS#11 3.0: The new interfaces, profile objects and functions (#2096, #2293)
  * Standardize the version 2 on 2.20 in the code (#2096)
  * Fix CKA_MODIFIABLE and CKA_EXTRACTABLE  (#2176)
  * Copy arguments of C_Initialize (#2350)
  * Fix RSA-PSS signing (#2234)
  * Fix DO deletion (#2215)
  * Add support for (X)EdDSA keys (#1960)
  * Add support for applet version 3 and fix RSA-PSS mechanisms (#2205)
  * Add support for applet version 4 (#2332)
  * New configuration option for opensc.conf to disable pkcs1_padding (#2193)
  * Add support for ECDSA with different hashes (#2190)
  * Enable more mechanisms (#2178)
  * Fixed asking for a user pin when formatting a card (#1737)
  * Added support for French CPx Healthcare cards (#2217)
  * Added ATR for new CardOS 5.4 version (#2296)
  * Fixes security issues:
  * tcos: use after return (bsc#1192005, CVE-2021-42780)
  * oberthur: use after free (bsc#1191992, CVE-2021-42779)
  * oberthur: multiple heap buffer overflows (bsc#1192000,
    CVE-2021-42781)
  * multiple stack buffer overflow issues (bsc#1191957,
    CVE-2021-42782)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685620800">- Security Fix: [CVE-2023-2977, bsc#1211894]
  * opensc: out of bounds read in pkcs15 cardos_have_verifyrc_package()
  * Add opensc-CVE-2023-2977.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Security Fix: [CVE-2023-40660, bsc#1215762]
  * opensc: PIN bypass when card tracks its own login state
  * Add patches:
  - patches/opensc-0_22_0-CVE-2023-40660-1of2.patch
  - patches/opensc-0_22_0-CVE-2023-40660-2of2.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696593600">- Security Fix: [CVE-2023-40661, bsc#1215761]
  * opensc: multiple memory issues with pkcs15-init (enrollment tool)
  * Add patches:
  - opensc-CVE-2023-40661-1of12.patch
  - opensc-CVE-2023-40661-2of12.patch
  - opensc-CVE-2023-40661-3of12.patch
  - opensc-CVE-2023-40661-4of12.patch
  - opensc-CVE-2023-40661-5of12.patch
  - opensc-CVE-2023-40661-6of12.patch
  - opensc-CVE-2023-40661-7of12.patch
  - opensc-CVE-2023-40661-8of12.patch
  - opensc-CVE-2023-40661-9of12.patch
  - opensc-CVE-2023-40661-10of12.patch
  - opensc-CVE-2023-40661-11of12.patch
  - opensc-CVE-2023-40661-12of12.patch</changelog>
</package>
<package pkgid="afc41a4a086dfba0893409b4b6d943e432bcb15a61ca597dc914ebbd55bd8254" name="opensc" arch="aarch64">
  <version epoch="0" ver="0.22.0" rel="150400.3.9.1"/>
  <changelog author="michael@stroeder.com" date="1424088000">- update to version 0.14.0</changelog>
  <changelog author="bwachter-pkg@lart.info" date="1438257600">- update to version 0.15.0
- register with p11-kit
  (https://www.opensc-project.org/opensc/ticket/390)</changelog>
  <changelog author="t.gruner@katodev.de" date="1467720000">- update to version 0.16.0
- remove fix (issue 505)
- clean up spec-file</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Add baselibs.conf to provide 32-bit PKCS11 plugins (bsc#996047).
- Drop opensc-ADVISORIES. There is no new advisory since 2009.</changelog>
  <changelog author="tchvatal@suse.com" date="1500379200">- Switch to tarball fetching from github
- Few small cleanups</changelog>
  <changelog author="michael@stroeder.com" date="1514808000">- update to version 0.17.0:
  * support for new cards
  * PIN support enhancemets
  * added .pc file
  * builds with OpenSSL 1.1.0 (1074799)
  * See /usr/share/doc/packages/opensc/NEWS for complete list.</changelog>
  <changelog author="sbrabec@suse.com" date="1531224000">- Update to version 0.18.0:
  * Further improvements of PIN support.
  * Large number of improvements and fixes
    (boo#1097951, boo#1100501).
  * See /usr/share/doc/packages/opensc/NEWS for complete list.
- Add opensc-desktop.patch, opensc-desktop2.patch and
  opensc-bash-completions.patch.</changelog>
  <changelog author="kbabioch@suse.com" date="1536840000">- Update to version 0.19.0
  * Fixed multiple security problems (out of bound writes/reads):
  * bsc#1104812
  * CVE-2018-16391 (bsc#1106998)
  * CVE-2018-16392 (bsc#1106999)
  * CVE-2018-16393 (bsc#1108318)
  * CVE-2018-16418 (bsc#1107039)
  * CVE-2018-16419 (bsc#1107107)
  * CVE-2018-16420 (bsc#1107097)
  * CVE-2018-16421 (bsc#1107049)
  * CVE-2018-16422 (bsc#1107038)
  * CVE-2018-16423 (bsc#1107037)
  * CVE-2018-16424 (bsc#1107036)
  * CVE-2018-16425 (bsc#1107035)
  * CVE-2018-16426 (bsc#1107034)
  * CVE-2018-16427 (bsc#1107033)
  * Workaround cards returning short signatures without leading zeroes
  * Distribute minimal opensc.conf
  * `pkcs11_enable_InitToken made` global configuration option
  * Modify behavior of `OPENSC_DRIVER` environment variable to restrict driver
    list instead of forcing one driver and skipping vital parts of
    configuration
  * Removed configuration options `zero_ckaid_for_ca_certs`,
    `force_card_driver`, `reopen_debug_file`, `paranoid-memory`
  * Generalized configuration option `ignored_readers`
  * If card initialization fails, continue card detection with other card
    drivers
  * reader-pcsc: allow fixing the length of a PIN
  * fixed crash during `C_WaitForSlotEvent`
  * Allow cancelling the PIN pad prompt before starting the reader transaction.
    Whether to start the transaction immediately or not is user-configurable
    for each application
  * opensc-notify
  * add Exit button to tray icon
  * User better description (GenericName) and a generic application icon
  * Do not display in the application list
- Removed patches included upstream now:
  * opensc-desktop.patch
  * opensc-desktop2.patch
  * opensc-bash-completions.patch
- Applied spec-cleaner</changelog>
  <changelog author="code@bnavigator.de" date="1563883200">- add explicit BuildRequires: zlib-devel</changelog>
  <changelog author="jsikes@suse.de" date="1564488000">- added opensc-0.19.0-rsa-pss.patch
  * Fixes the pkcs11-tool example
  * Added missing CKM_SHA224_RSA_PKCS_PSS
  * Add support for PSS padding to RSA signatures
  * Support for signature verification in pkcs11-tool
  * Switch cleanup steps to avoid segfaults on errors and more sanity checking
- added opensc-0.19.0-redundant_logging.patch
  * Remove redundant debug output</changelog>
  <changelog author="jsikes@suse.com" date="1566129600">- added opensc-0.19.0-piv_card_matching.patch
  * Improve Card Matching for Dual CAC/PIV and PIVKEY cards.
  * sourced from https://github.com/OpenSC/OpenSC/pull/1549</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606478400">- OpenSC 0.21.0:
  * CVE-2020-26571: stack-based buffer overflow in the gemsafe GPK
    smart card software driver (boo#1177380)
  * CVE-2020-26572: stack-based buffer overflow in the TCOS smart
    card software driver (boo#1177378)
  * CVE-2020-26570: heap-based buffer overflow in the Oberthur
    smart card software driver (boo#1177364)
  * CardOS 5.x support boo#1179291
  * Support for OAEP encryption, make SHA256 default
  * New separate debug level for PIN commands
  * Fix handling of card/reader insertion/removal events in pcscd
  * Fixes of removed readers handling
  * Fix Firefox crash because of invalid pcsc context
  * PKCS#11: Return CKR_TOKEN_NOT_RECOGNIZED for not recognized cards
  * Propagate ignore_user_content to PKCS#11 layer not to confuse applications
  * Minidriver: Fix check of ATR length (2-to 33 characters inclusive)
  * pkcs11-tool: allow using SW tokens
  * opensc-explorer asn1 accepts offsets and decode records
  * opensc-explorer cat accepts records
  * OpenPGP: Add new ec curves supported by GNUK
  * First steps supporting OpenPGP 3.4
  * OpenPGP: Add support for EC key import
  * Rutoken: Add ATR for Rutoken ECP SC NFC
  * Improve detection of various CardOS 5 configurations
  * DNIe: Add new DNIe CA structure for the secure channel
  * ePass2003: Improve ECC support
  * ePass2003: Fix erase sequence
  * IAS-ECC: Fix support for Idemia Cosmo cards
  * IAS-ECC: PIN padding settings are now used from PKCS#15 info when available
  * IAS-ECC: Added PIN-pad support for PIN unblock
  * New driver for Gemalto IDPrime (only some types)
  * eDo: New driver with initial support for Polish eID card (e-dowód, eDO)
  * MCRD: Remove unused and broken RSA EstEID support
  * TCOS: Add missing encryption certificates
  * PIV: Add ATR of DOD Yubikey
  * fixed PIV global pin bug
  * CAC1: Support changing PIN with CAC Alt tokens
- includes changes from 0.20.0
  * CVE-2019-6502: memory leak in libopensc (boo#1122756)
  * CVE-2019-15946: out-of-bounds access of an ASN.1 Octet string (boo#1149747)
  * CVE-2019-15945: out-of-bounds access of an ASN.1 Bitstring (boo#1149746)
  * CVE-2019-19479: incorrect read operation during parsing of a SETCOS file attribute (boo#1158256)
  * CVE-2019-19480: improper free operation in sc_pkcs15_decode_prkdf_entry (boo#1158307)
  * CVE-2019-20792: double free in coolkey_free_private_dat (bsc#1170809)
  * Support RSA-PSS signature mechanisms using RSA-RAW
  * Added memory locking for secrets
  * added support for terminal colors
  * PC/SC driver: Fixed error handling in case of changing or removing the card reader
  * rename md_read_only to read_only and use it for PKCS#11 and Minidriver
  * allow global use of ignore_private_certificate
  * PKCS#11: Implement write protection (CKF_WRITE_PROTECTED) based on the card profile
  * PKCS#11: Add C_WrapKey and C_UnwrapKey implementations
  * PKCS#11: Handle CKA_ALWAYS_AUTHENTICATE when creating key objects
  * PKCS#11: Truncate long PKCS#11 labels with ...
  * PKCS#11: Fixed recognition of a token when being unplugged and reinserted
  * Minidriver: Register for CardOS5 cards
  * Minidriver: Add support for RSA-PSS
  * tools: Harmonize the use of option -r/--reader
  * goid-tool: GoID personalization with fingerprint
  * openpgp-tool: replace the options -L/--key-length with -t/--key-type
  * openpgp-tool: add options -C/--card-info and -K/--key-info
  * opensc-explorer: add command pin_info, extend random
  * pkcs11-register: Auto-configuration of applications for use of OpenSC PKCS#11
  * pkcd11-register: Autostart
  * opensc-tool: Show ATR also for cards not recognized by OpenSC
  * pkcs11-spy: parse CKM_AES_GCM, EC Derive parameters
  * pkcs11-spy: Add support for CKA_OTP_* and CKM_*_PSS values
  * pkcs11-tool: Support for signature verification via --verify
  * pkcs11-tool: Add object type secrkey for --type option
  * pkcs11-tool: Implement Secret Key write object
  * pkcs11-tool: Add GOSTR3410-2012 support
  * pkcs11-tool: Add support for testing CKM_RSA_PKCS_OAEP
  * pkcs11-tool: Add extractable option to key import
  * pkcs11-tool: list more key access flags when listing keys
  * pkcs11-tool: Add support for CKA_ALLOWED_MECHANISMS when creating new objects and listing keys
  * pkcs15-crypt: *Handle keys with user consent
  * New separate CAC1 driver using the old CAC specification (#1502)
  * CardOS: Add support for 4K RSA keys in CardOS 5
  * CardOS: Fixed decryption with CardOS 5
  * Enable CoolKey driver to handle 2048-bit keys
  * EstEID: add support for a minimalistic, small and fast card profile based on IAS-ECC issued since December 2018
  * GIDS Decipher fix (#1881)
  * GIDS: Allow RSA 4K support
  * MICARDO: Remove long expired EstEID 1.0/1.1 card support
  * MyEID: Add support for unwrapping a secret key with an RSA key or secret key
  * MyEID Add support for wrapping a secret key with a secret key
  * Support for MyEID 4K RSA
  * Support for OsEID
  * Gemalto GemSafe: add new PTeID ATRs, add support for 4K RSA keys
  * OpenPGP Card v3 ECC support
  * Add Rutoken ECP SC
  * Add Rutoken Lite
  * Add SmartCard-HSM 4K ATR
  * Add missing secp384r1 curve parameter
  * Stacros: Fix decipher with 2.3
  * Stacros: Add ATR for 2nd gen. eGK
  * Stacros: Add new ATR for 3.5
  * Stacros: Detect and allow Globalplatform PIN encoding
  * Fix TCOS IDKey support
  * TCOS: add encryption certificate for IDKey
  * Infocamere, Postecert, Cnipa: Remove profiles
  * Remove incomplete acos5 driver
- drop patches now upstream:
  * opensc-0.19.0-piv_card_matching.patch
  * opensc-0.19.0-redundant_logging.patch
  * opensc-0.19.0-rsa-pss.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move licenses to licensedir</changelog>
  <changelog author="predivan@mts.rs" date="1624795200">- Fix build on GCC11
  * Add opensc-gcc11.patch from Fedora
    (https://github.com/OpenSC/OpenSC/pull/2241/)</changelog>
  <changelog author="daniel.donisa@suse.com" date="1633348800">- Update to OpenSC 0.22.0:
  * Removed changes in opensc-gcc11.patch already present in upstream.
  - See https://github.com/OpenSC/OpenSC/pull/2241/commits/e549e9c62eb4fcd2260800e2665071e4dd9bbbda
  * Removed some false positives from the openrc-rpmlintrc file.
  * Use standard paths for file cache on Linux (#2148) and OSX (#2214)
  * Various issues of memory/buffer handling in legacy drivers mostly reported by oss-fuzz and coverity (tcos, oberthur, isoapplet, iasecc, westcos, gpk, flex, dnie, mcrd, authentic, belpic)
  * Add threading test to `pkcs11-tool` (#2067)
  * Add support to generate generic secret keys (#2140)
  * `opensc-explorer`: Print information about LCS (Life cycle status byte) (#2195)
  * Add support for Apple's arm64 (M1) binaries, removed TokenD. A seperate installer with TokenD (and without arm64 binaries) will be available (#2179).
  * Support for gcc11 and its new strict aliasing rules (#2241, #2260)
  * Initial support for building with OpenSSL 3.0 (#2343)
  * pkcs15-tool: Write data objects in binary mode (#2324)
  * Avoid limited size of log messages (#2352)
  * Support for ECDSA verification (#2211)
  * Support for ECDSA with different SHA hashes (#2190)
  * Prevent issues in p11-kit by not returning unexpected return codes (#2207)
  * Add support for PKCS#11 3.0: The new interfaces, profile objects and functions (#2096, #2293)
  * Standardize the version 2 on 2.20 in the code (#2096)
  * Fix CKA_MODIFIABLE and CKA_EXTRACTABLE  (#2176)
  * Copy arguments of C_Initialize (#2350)
  * Fix RSA-PSS signing (#2234)
  * Fix DO deletion (#2215)
  * Add support for (X)EdDSA keys (#1960)
  * Add support for applet version 3 and fix RSA-PSS mechanisms (#2205)
  * Add support for applet version 4 (#2332)
  * New configuration option for opensc.conf to disable pkcs1_padding (#2193)
  * Add support for ECDSA with different hashes (#2190)
  * Enable more mechanisms (#2178)
  * Fixed asking for a user pin when formatting a card (#1737)
  * Added support for French CPx Healthcare cards (#2217)
  * Added ATR for new CardOS 5.4 version (#2296)
  * Fixes security issues:
  * tcos: use after return (bsc#1192005, CVE-2021-42780)
  * oberthur: use after free (bsc#1191992, CVE-2021-42779)
  * oberthur: multiple heap buffer overflows (bsc#1192000,
    CVE-2021-42781)
  * multiple stack buffer overflow issues (bsc#1191957,
    CVE-2021-42782)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685620800">- Security Fix: [CVE-2023-2977, bsc#1211894]
  * opensc: out of bounds read in pkcs15 cardos_have_verifyrc_package()
  * Add opensc-CVE-2023-2977.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Security Fix: [CVE-2023-40660, bsc#1215762]
  * opensc: PIN bypass when card tracks its own login state
  * Add patches:
  - patches/opensc-0_22_0-CVE-2023-40660-1of2.patch
  - patches/opensc-0_22_0-CVE-2023-40660-2of2.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696593600">- Security Fix: [CVE-2023-40661, bsc#1215761]
  * opensc: multiple memory issues with pkcs15-init (enrollment tool)
  * Add patches:
  - opensc-CVE-2023-40661-1of12.patch
  - opensc-CVE-2023-40661-2of12.patch
  - opensc-CVE-2023-40661-3of12.patch
  - opensc-CVE-2023-40661-4of12.patch
  - opensc-CVE-2023-40661-5of12.patch
  - opensc-CVE-2023-40661-6of12.patch
  - opensc-CVE-2023-40661-7of12.patch
  - opensc-CVE-2023-40661-8of12.patch
  - opensc-CVE-2023-40661-9of12.patch
  - opensc-CVE-2023-40661-10of12.patch
  - opensc-CVE-2023-40661-11of12.patch
  - opensc-CVE-2023-40661-12of12.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1713268800">- Security fix: [CVE-2023-5992, bsc#1219386]
  * Add patch:
  - opensc-CVE-2023-5992.patch</changelog>
</package>
<package pkgid="55ae82907a8a82650df085603ca9d890c9db4a6e51a8c867037a2ac060181ed6" name="opensc" arch="s390x">
  <version epoch="0" ver="0.22.0" rel="150400.3.9.1"/>
  <changelog author="michael@stroeder.com" date="1424088000">- update to version 0.14.0</changelog>
  <changelog author="bwachter-pkg@lart.info" date="1438257600">- update to version 0.15.0
- register with p11-kit
  (https://www.opensc-project.org/opensc/ticket/390)</changelog>
  <changelog author="t.gruner@katodev.de" date="1467720000">- update to version 0.16.0
- remove fix (issue 505)
- clean up spec-file</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Add baselibs.conf to provide 32-bit PKCS11 plugins (bsc#996047).
- Drop opensc-ADVISORIES. There is no new advisory since 2009.</changelog>
  <changelog author="tchvatal@suse.com" date="1500379200">- Switch to tarball fetching from github
- Few small cleanups</changelog>
  <changelog author="michael@stroeder.com" date="1514808000">- update to version 0.17.0:
  * support for new cards
  * PIN support enhancemets
  * added .pc file
  * builds with OpenSSL 1.1.0 (1074799)
  * See /usr/share/doc/packages/opensc/NEWS for complete list.</changelog>
  <changelog author="sbrabec@suse.com" date="1531224000">- Update to version 0.18.0:
  * Further improvements of PIN support.
  * Large number of improvements and fixes
    (boo#1097951, boo#1100501).
  * See /usr/share/doc/packages/opensc/NEWS for complete list.
- Add opensc-desktop.patch, opensc-desktop2.patch and
  opensc-bash-completions.patch.</changelog>
  <changelog author="kbabioch@suse.com" date="1536840000">- Update to version 0.19.0
  * Fixed multiple security problems (out of bound writes/reads):
  * bsc#1104812
  * CVE-2018-16391 (bsc#1106998)
  * CVE-2018-16392 (bsc#1106999)
  * CVE-2018-16393 (bsc#1108318)
  * CVE-2018-16418 (bsc#1107039)
  * CVE-2018-16419 (bsc#1107107)
  * CVE-2018-16420 (bsc#1107097)
  * CVE-2018-16421 (bsc#1107049)
  * CVE-2018-16422 (bsc#1107038)
  * CVE-2018-16423 (bsc#1107037)
  * CVE-2018-16424 (bsc#1107036)
  * CVE-2018-16425 (bsc#1107035)
  * CVE-2018-16426 (bsc#1107034)
  * CVE-2018-16427 (bsc#1107033)
  * Workaround cards returning short signatures without leading zeroes
  * Distribute minimal opensc.conf
  * `pkcs11_enable_InitToken made` global configuration option
  * Modify behavior of `OPENSC_DRIVER` environment variable to restrict driver
    list instead of forcing one driver and skipping vital parts of
    configuration
  * Removed configuration options `zero_ckaid_for_ca_certs`,
    `force_card_driver`, `reopen_debug_file`, `paranoid-memory`
  * Generalized configuration option `ignored_readers`
  * If card initialization fails, continue card detection with other card
    drivers
  * reader-pcsc: allow fixing the length of a PIN
  * fixed crash during `C_WaitForSlotEvent`
  * Allow cancelling the PIN pad prompt before starting the reader transaction.
    Whether to start the transaction immediately or not is user-configurable
    for each application
  * opensc-notify
  * add Exit button to tray icon
  * User better description (GenericName) and a generic application icon
  * Do not display in the application list
- Removed patches included upstream now:
  * opensc-desktop.patch
  * opensc-desktop2.patch
  * opensc-bash-completions.patch
- Applied spec-cleaner</changelog>
  <changelog author="code@bnavigator.de" date="1563883200">- add explicit BuildRequires: zlib-devel</changelog>
  <changelog author="jsikes@suse.de" date="1564488000">- added opensc-0.19.0-rsa-pss.patch
  * Fixes the pkcs11-tool example
  * Added missing CKM_SHA224_RSA_PKCS_PSS
  * Add support for PSS padding to RSA signatures
  * Support for signature verification in pkcs11-tool
  * Switch cleanup steps to avoid segfaults on errors and more sanity checking
- added opensc-0.19.0-redundant_logging.patch
  * Remove redundant debug output</changelog>
  <changelog author="jsikes@suse.com" date="1566129600">- added opensc-0.19.0-piv_card_matching.patch
  * Improve Card Matching for Dual CAC/PIV and PIVKEY cards.
  * sourced from https://github.com/OpenSC/OpenSC/pull/1549</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606478400">- OpenSC 0.21.0:
  * CVE-2020-26571: stack-based buffer overflow in the gemsafe GPK
    smart card software driver (boo#1177380)
  * CVE-2020-26572: stack-based buffer overflow in the TCOS smart
    card software driver (boo#1177378)
  * CVE-2020-26570: heap-based buffer overflow in the Oberthur
    smart card software driver (boo#1177364)
  * CardOS 5.x support boo#1179291
  * Support for OAEP encryption, make SHA256 default
  * New separate debug level for PIN commands
  * Fix handling of card/reader insertion/removal events in pcscd
  * Fixes of removed readers handling
  * Fix Firefox crash because of invalid pcsc context
  * PKCS#11: Return CKR_TOKEN_NOT_RECOGNIZED for not recognized cards
  * Propagate ignore_user_content to PKCS#11 layer not to confuse applications
  * Minidriver: Fix check of ATR length (2-to 33 characters inclusive)
  * pkcs11-tool: allow using SW tokens
  * opensc-explorer asn1 accepts offsets and decode records
  * opensc-explorer cat accepts records
  * OpenPGP: Add new ec curves supported by GNUK
  * First steps supporting OpenPGP 3.4
  * OpenPGP: Add support for EC key import
  * Rutoken: Add ATR for Rutoken ECP SC NFC
  * Improve detection of various CardOS 5 configurations
  * DNIe: Add new DNIe CA structure for the secure channel
  * ePass2003: Improve ECC support
  * ePass2003: Fix erase sequence
  * IAS-ECC: Fix support for Idemia Cosmo cards
  * IAS-ECC: PIN padding settings are now used from PKCS#15 info when available
  * IAS-ECC: Added PIN-pad support for PIN unblock
  * New driver for Gemalto IDPrime (only some types)
  * eDo: New driver with initial support for Polish eID card (e-dowód, eDO)
  * MCRD: Remove unused and broken RSA EstEID support
  * TCOS: Add missing encryption certificates
  * PIV: Add ATR of DOD Yubikey
  * fixed PIV global pin bug
  * CAC1: Support changing PIN with CAC Alt tokens
- includes changes from 0.20.0
  * CVE-2019-6502: memory leak in libopensc (boo#1122756)
  * CVE-2019-15946: out-of-bounds access of an ASN.1 Octet string (boo#1149747)
  * CVE-2019-15945: out-of-bounds access of an ASN.1 Bitstring (boo#1149746)
  * CVE-2019-19479: incorrect read operation during parsing of a SETCOS file attribute (boo#1158256)
  * CVE-2019-19480: improper free operation in sc_pkcs15_decode_prkdf_entry (boo#1158307)
  * CVE-2019-20792: double free in coolkey_free_private_dat (bsc#1170809)
  * Support RSA-PSS signature mechanisms using RSA-RAW
  * Added memory locking for secrets
  * added support for terminal colors
  * PC/SC driver: Fixed error handling in case of changing or removing the card reader
  * rename md_read_only to read_only and use it for PKCS#11 and Minidriver
  * allow global use of ignore_private_certificate
  * PKCS#11: Implement write protection (CKF_WRITE_PROTECTED) based on the card profile
  * PKCS#11: Add C_WrapKey and C_UnwrapKey implementations
  * PKCS#11: Handle CKA_ALWAYS_AUTHENTICATE when creating key objects
  * PKCS#11: Truncate long PKCS#11 labels with ...
  * PKCS#11: Fixed recognition of a token when being unplugged and reinserted
  * Minidriver: Register for CardOS5 cards
  * Minidriver: Add support for RSA-PSS
  * tools: Harmonize the use of option -r/--reader
  * goid-tool: GoID personalization with fingerprint
  * openpgp-tool: replace the options -L/--key-length with -t/--key-type
  * openpgp-tool: add options -C/--card-info and -K/--key-info
  * opensc-explorer: add command pin_info, extend random
  * pkcs11-register: Auto-configuration of applications for use of OpenSC PKCS#11
  * pkcd11-register: Autostart
  * opensc-tool: Show ATR also for cards not recognized by OpenSC
  * pkcs11-spy: parse CKM_AES_GCM, EC Derive parameters
  * pkcs11-spy: Add support for CKA_OTP_* and CKM_*_PSS values
  * pkcs11-tool: Support for signature verification via --verify
  * pkcs11-tool: Add object type secrkey for --type option
  * pkcs11-tool: Implement Secret Key write object
  * pkcs11-tool: Add GOSTR3410-2012 support
  * pkcs11-tool: Add support for testing CKM_RSA_PKCS_OAEP
  * pkcs11-tool: Add extractable option to key import
  * pkcs11-tool: list more key access flags when listing keys
  * pkcs11-tool: Add support for CKA_ALLOWED_MECHANISMS when creating new objects and listing keys
  * pkcs15-crypt: *Handle keys with user consent
  * New separate CAC1 driver using the old CAC specification (#1502)
  * CardOS: Add support for 4K RSA keys in CardOS 5
  * CardOS: Fixed decryption with CardOS 5
  * Enable CoolKey driver to handle 2048-bit keys
  * EstEID: add support for a minimalistic, small and fast card profile based on IAS-ECC issued since December 2018
  * GIDS Decipher fix (#1881)
  * GIDS: Allow RSA 4K support
  * MICARDO: Remove long expired EstEID 1.0/1.1 card support
  * MyEID: Add support for unwrapping a secret key with an RSA key or secret key
  * MyEID Add support for wrapping a secret key with a secret key
  * Support for MyEID 4K RSA
  * Support for OsEID
  * Gemalto GemSafe: add new PTeID ATRs, add support for 4K RSA keys
  * OpenPGP Card v3 ECC support
  * Add Rutoken ECP SC
  * Add Rutoken Lite
  * Add SmartCard-HSM 4K ATR
  * Add missing secp384r1 curve parameter
  * Stacros: Fix decipher with 2.3
  * Stacros: Add ATR for 2nd gen. eGK
  * Stacros: Add new ATR for 3.5
  * Stacros: Detect and allow Globalplatform PIN encoding
  * Fix TCOS IDKey support
  * TCOS: add encryption certificate for IDKey
  * Infocamere, Postecert, Cnipa: Remove profiles
  * Remove incomplete acos5 driver
- drop patches now upstream:
  * opensc-0.19.0-piv_card_matching.patch
  * opensc-0.19.0-redundant_logging.patch
  * opensc-0.19.0-rsa-pss.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move licenses to licensedir</changelog>
  <changelog author="predivan@mts.rs" date="1624795200">- Fix build on GCC11
  * Add opensc-gcc11.patch from Fedora
    (https://github.com/OpenSC/OpenSC/pull/2241/)</changelog>
  <changelog author="daniel.donisa@suse.com" date="1633348800">- Update to OpenSC 0.22.0:
  * Removed changes in opensc-gcc11.patch already present in upstream.
  - See https://github.com/OpenSC/OpenSC/pull/2241/commits/e549e9c62eb4fcd2260800e2665071e4dd9bbbda
  * Removed some false positives from the openrc-rpmlintrc file.
  * Use standard paths for file cache on Linux (#2148) and OSX (#2214)
  * Various issues of memory/buffer handling in legacy drivers mostly reported by oss-fuzz and coverity (tcos, oberthur, isoapplet, iasecc, westcos, gpk, flex, dnie, mcrd, authentic, belpic)
  * Add threading test to `pkcs11-tool` (#2067)
  * Add support to generate generic secret keys (#2140)
  * `opensc-explorer`: Print information about LCS (Life cycle status byte) (#2195)
  * Add support for Apple's arm64 (M1) binaries, removed TokenD. A seperate installer with TokenD (and without arm64 binaries) will be available (#2179).
  * Support for gcc11 and its new strict aliasing rules (#2241, #2260)
  * Initial support for building with OpenSSL 3.0 (#2343)
  * pkcs15-tool: Write data objects in binary mode (#2324)
  * Avoid limited size of log messages (#2352)
  * Support for ECDSA verification (#2211)
  * Support for ECDSA with different SHA hashes (#2190)
  * Prevent issues in p11-kit by not returning unexpected return codes (#2207)
  * Add support for PKCS#11 3.0: The new interfaces, profile objects and functions (#2096, #2293)
  * Standardize the version 2 on 2.20 in the code (#2096)
  * Fix CKA_MODIFIABLE and CKA_EXTRACTABLE  (#2176)
  * Copy arguments of C_Initialize (#2350)
  * Fix RSA-PSS signing (#2234)
  * Fix DO deletion (#2215)
  * Add support for (X)EdDSA keys (#1960)
  * Add support for applet version 3 and fix RSA-PSS mechanisms (#2205)
  * Add support for applet version 4 (#2332)
  * New configuration option for opensc.conf to disable pkcs1_padding (#2193)
  * Add support for ECDSA with different hashes (#2190)
  * Enable more mechanisms (#2178)
  * Fixed asking for a user pin when formatting a card (#1737)
  * Added support for French CPx Healthcare cards (#2217)
  * Added ATR for new CardOS 5.4 version (#2296)
  * Fixes security issues:
  * tcos: use after return (bsc#1192005, CVE-2021-42780)
  * oberthur: use after free (bsc#1191992, CVE-2021-42779)
  * oberthur: multiple heap buffer overflows (bsc#1192000,
    CVE-2021-42781)
  * multiple stack buffer overflow issues (bsc#1191957,
    CVE-2021-42782)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685620800">- Security Fix: [CVE-2023-2977, bsc#1211894]
  * opensc: out of bounds read in pkcs15 cardos_have_verifyrc_package()
  * Add opensc-CVE-2023-2977.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Security Fix: [CVE-2023-40660, bsc#1215762]
  * opensc: PIN bypass when card tracks its own login state
  * Add patches:
  - patches/opensc-0_22_0-CVE-2023-40660-1of2.patch
  - patches/opensc-0_22_0-CVE-2023-40660-2of2.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696593600">- Security Fix: [CVE-2023-40661, bsc#1215761]
  * opensc: multiple memory issues with pkcs15-init (enrollment tool)
  * Add patches:
  - opensc-CVE-2023-40661-1of12.patch
  - opensc-CVE-2023-40661-2of12.patch
  - opensc-CVE-2023-40661-3of12.patch
  - opensc-CVE-2023-40661-4of12.patch
  - opensc-CVE-2023-40661-5of12.patch
  - opensc-CVE-2023-40661-6of12.patch
  - opensc-CVE-2023-40661-7of12.patch
  - opensc-CVE-2023-40661-8of12.patch
  - opensc-CVE-2023-40661-9of12.patch
  - opensc-CVE-2023-40661-10of12.patch
  - opensc-CVE-2023-40661-11of12.patch
  - opensc-CVE-2023-40661-12of12.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1713268800">- Security fix: [CVE-2023-5992, bsc#1219386]
  * Add patch:
  - opensc-CVE-2023-5992.patch</changelog>
</package>
<package pkgid="9b34c6c981179d745b5d55f916c4ed7b238f0169486bee3a6b06a722d0d83731" name="opensc" arch="src">
  <version epoch="0" ver="0.22.0" rel="150400.3.9.1"/>
  <changelog author="luizluca@tre-sc.gov.br" date="1386072000">- update to version 0.13.0</changelog>
  <changelog author="michael@stroeder.com" date="1424088000">- update to version 0.14.0</changelog>
  <changelog author="bwachter-pkg@lart.info" date="1438257600">- update to version 0.15.0
- register with p11-kit
  (https://www.opensc-project.org/opensc/ticket/390)</changelog>
  <changelog author="t.gruner@katodev.de" date="1467720000">- update to version 0.16.0
- remove fix (issue 505)
- clean up spec-file</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Add baselibs.conf to provide 32-bit PKCS11 plugins (bsc#996047).
- Drop opensc-ADVISORIES. There is no new advisory since 2009.</changelog>
  <changelog author="tchvatal@suse.com" date="1500379200">- Switch to tarball fetching from github
- Few small cleanups</changelog>
  <changelog author="michael@stroeder.com" date="1514808000">- update to version 0.17.0:
  * support for new cards
  * PIN support enhancemets
  * added .pc file
  * builds with OpenSSL 1.1.0 (1074799)
  * See /usr/share/doc/packages/opensc/NEWS for complete list.</changelog>
  <changelog author="sbrabec@suse.com" date="1531224000">- Update to version 0.18.0:
  * Further improvements of PIN support.
  * Large number of improvements and fixes
    (boo#1097951, boo#1100501).
  * See /usr/share/doc/packages/opensc/NEWS for complete list.
- Add opensc-desktop.patch, opensc-desktop2.patch and
  opensc-bash-completions.patch.</changelog>
  <changelog author="kbabioch@suse.com" date="1536840000">- Update to version 0.19.0
  * Fixed multiple security problems (out of bound writes/reads):
  * bsc#1104812
  * CVE-2018-16391 (bsc#1106998)
  * CVE-2018-16392 (bsc#1106999)
  * CVE-2018-16393 (bsc#1108318)
  * CVE-2018-16418 (bsc#1107039)
  * CVE-2018-16419 (bsc#1107107)
  * CVE-2018-16420 (bsc#1107097)
  * CVE-2018-16421 (bsc#1107049)
  * CVE-2018-16422 (bsc#1107038)
  * CVE-2018-16423 (bsc#1107037)
  * CVE-2018-16424 (bsc#1107036)
  * CVE-2018-16425 (bsc#1107035)
  * CVE-2018-16426 (bsc#1107034)
  * CVE-2018-16427 (bsc#1107033)
  * Workaround cards returning short signatures without leading zeroes
  * Distribute minimal opensc.conf
  * `pkcs11_enable_InitToken made` global configuration option
  * Modify behavior of `OPENSC_DRIVER` environment variable to restrict driver
    list instead of forcing one driver and skipping vital parts of
    configuration
  * Removed configuration options `zero_ckaid_for_ca_certs`,
    `force_card_driver`, `reopen_debug_file`, `paranoid-memory`
  * Generalized configuration option `ignored_readers`
  * If card initialization fails, continue card detection with other card
    drivers
  * reader-pcsc: allow fixing the length of a PIN
  * fixed crash during `C_WaitForSlotEvent`
  * Allow cancelling the PIN pad prompt before starting the reader transaction.
    Whether to start the transaction immediately or not is user-configurable
    for each application
  * opensc-notify
  * add Exit button to tray icon
  * User better description (GenericName) and a generic application icon
  * Do not display in the application list
- Removed patches included upstream now:
  * opensc-desktop.patch
  * opensc-desktop2.patch
  * opensc-bash-completions.patch
- Applied spec-cleaner</changelog>
  <changelog author="code@bnavigator.de" date="1563883200">- add explicit BuildRequires: zlib-devel</changelog>
  <changelog author="jsikes@suse.de" date="1564488000">- added opensc-0.19.0-rsa-pss.patch
  * Fixes the pkcs11-tool example
  * Added missing CKM_SHA224_RSA_PKCS_PSS
  * Add support for PSS padding to RSA signatures
  * Support for signature verification in pkcs11-tool
  * Switch cleanup steps to avoid segfaults on errors and more sanity checking
- added opensc-0.19.0-redundant_logging.patch
  * Remove redundant debug output</changelog>
  <changelog author="jsikes@suse.com" date="1566129600">- added opensc-0.19.0-piv_card_matching.patch
  * Improve Card Matching for Dual CAC/PIV and PIVKEY cards.
  * sourced from https://github.com/OpenSC/OpenSC/pull/1549</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606478400">- OpenSC 0.21.0:
  * CVE-2020-26571: stack-based buffer overflow in the gemsafe GPK
    smart card software driver (boo#1177380)
  * CVE-2020-26572: stack-based buffer overflow in the TCOS smart
    card software driver (boo#1177378)
  * CVE-2020-26570: heap-based buffer overflow in the Oberthur
    smart card software driver (boo#1177364)
  * CardOS 5.x support boo#1179291
  * Support for OAEP encryption, make SHA256 default
  * New separate debug level for PIN commands
  * Fix handling of card/reader insertion/removal events in pcscd
  * Fixes of removed readers handling
  * Fix Firefox crash because of invalid pcsc context
  * PKCS#11: Return CKR_TOKEN_NOT_RECOGNIZED for not recognized cards
  * Propagate ignore_user_content to PKCS#11 layer not to confuse applications
  * Minidriver: Fix check of ATR length (2-to 33 characters inclusive)
  * pkcs11-tool: allow using SW tokens
  * opensc-explorer asn1 accepts offsets and decode records
  * opensc-explorer cat accepts records
  * OpenPGP: Add new ec curves supported by GNUK
  * First steps supporting OpenPGP 3.4
  * OpenPGP: Add support for EC key import
  * Rutoken: Add ATR for Rutoken ECP SC NFC
  * Improve detection of various CardOS 5 configurations
  * DNIe: Add new DNIe CA structure for the secure channel
  * ePass2003: Improve ECC support
  * ePass2003: Fix erase sequence
  * IAS-ECC: Fix support for Idemia Cosmo cards
  * IAS-ECC: PIN padding settings are now used from PKCS#15 info when available
  * IAS-ECC: Added PIN-pad support for PIN unblock
  * New driver for Gemalto IDPrime (only some types)
  * eDo: New driver with initial support for Polish eID card (e-dowód, eDO)
  * MCRD: Remove unused and broken RSA EstEID support
  * TCOS: Add missing encryption certificates
  * PIV: Add ATR of DOD Yubikey
  * fixed PIV global pin bug
  * CAC1: Support changing PIN with CAC Alt tokens
- includes changes from 0.20.0
  * CVE-2019-6502: memory leak in libopensc (boo#1122756)
  * CVE-2019-15946: out-of-bounds access of an ASN.1 Octet string (boo#1149747)
  * CVE-2019-15945: out-of-bounds access of an ASN.1 Bitstring (boo#1149746)
  * CVE-2019-19479: incorrect read operation during parsing of a SETCOS file attribute (boo#1158256)
  * CVE-2019-19480: improper free operation in sc_pkcs15_decode_prkdf_entry (boo#1158307)
  * CVE-2019-20792: double free in coolkey_free_private_dat (bsc#1170809)
  * Support RSA-PSS signature mechanisms using RSA-RAW
  * Added memory locking for secrets
  * added support for terminal colors
  * PC/SC driver: Fixed error handling in case of changing or removing the card reader
  * rename md_read_only to read_only and use it for PKCS#11 and Minidriver
  * allow global use of ignore_private_certificate
  * PKCS#11: Implement write protection (CKF_WRITE_PROTECTED) based on the card profile
  * PKCS#11: Add C_WrapKey and C_UnwrapKey implementations
  * PKCS#11: Handle CKA_ALWAYS_AUTHENTICATE when creating key objects
  * PKCS#11: Truncate long PKCS#11 labels with ...
  * PKCS#11: Fixed recognition of a token when being unplugged and reinserted
  * Minidriver: Register for CardOS5 cards
  * Minidriver: Add support for RSA-PSS
  * tools: Harmonize the use of option -r/--reader
  * goid-tool: GoID personalization with fingerprint
  * openpgp-tool: replace the options -L/--key-length with -t/--key-type
  * openpgp-tool: add options -C/--card-info and -K/--key-info
  * opensc-explorer: add command pin_info, extend random
  * pkcs11-register: Auto-configuration of applications for use of OpenSC PKCS#11
  * pkcd11-register: Autostart
  * opensc-tool: Show ATR also for cards not recognized by OpenSC
  * pkcs11-spy: parse CKM_AES_GCM, EC Derive parameters
  * pkcs11-spy: Add support for CKA_OTP_* and CKM_*_PSS values
  * pkcs11-tool: Support for signature verification via --verify
  * pkcs11-tool: Add object type secrkey for --type option
  * pkcs11-tool: Implement Secret Key write object
  * pkcs11-tool: Add GOSTR3410-2012 support
  * pkcs11-tool: Add support for testing CKM_RSA_PKCS_OAEP
  * pkcs11-tool: Add extractable option to key import
  * pkcs11-tool: list more key access flags when listing keys
  * pkcs11-tool: Add support for CKA_ALLOWED_MECHANISMS when creating new objects and listing keys
  * pkcs15-crypt: *Handle keys with user consent
  * New separate CAC1 driver using the old CAC specification (#1502)
  * CardOS: Add support for 4K RSA keys in CardOS 5
  * CardOS: Fixed decryption with CardOS 5
  * Enable CoolKey driver to handle 2048-bit keys
  * EstEID: add support for a minimalistic, small and fast card profile based on IAS-ECC issued since December 2018
  * GIDS Decipher fix (#1881)
  * GIDS: Allow RSA 4K support
  * MICARDO: Remove long expired EstEID 1.0/1.1 card support
  * MyEID: Add support for unwrapping a secret key with an RSA key or secret key
  * MyEID Add support for wrapping a secret key with a secret key
  * Support for MyEID 4K RSA
  * Support for OsEID
  * Gemalto GemSafe: add new PTeID ATRs, add support for 4K RSA keys
  * OpenPGP Card v3 ECC support
  * Add Rutoken ECP SC
  * Add Rutoken Lite
  * Add SmartCard-HSM 4K ATR
  * Add missing secp384r1 curve parameter
  * Stacros: Fix decipher with 2.3
  * Stacros: Add ATR for 2nd gen. eGK
  * Stacros: Add new ATR for 3.5
  * Stacros: Detect and allow Globalplatform PIN encoding
  * Fix TCOS IDKey support
  * TCOS: add encryption certificate for IDKey
  * Infocamere, Postecert, Cnipa: Remove profiles
  * Remove incomplete acos5 driver
- drop patches now upstream:
  * opensc-0.19.0-piv_card_matching.patch
  * opensc-0.19.0-redundant_logging.patch
  * opensc-0.19.0-rsa-pss.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move licenses to licensedir</changelog>
  <changelog author="predivan@mts.rs" date="1624795200">- Fix build on GCC11
  * Add opensc-gcc11.patch from Fedora
    (https://github.com/OpenSC/OpenSC/pull/2241/)</changelog>
  <changelog author="daniel.donisa@suse.com" date="1633348800">- Update to OpenSC 0.22.0:
  * Removed changes in opensc-gcc11.patch already present in upstream.
  - See https://github.com/OpenSC/OpenSC/pull/2241/commits/e549e9c62eb4fcd2260800e2665071e4dd9bbbda
  * Removed some false positives from the openrc-rpmlintrc file.
  * Use standard paths for file cache on Linux (#2148) and OSX (#2214)
  * Various issues of memory/buffer handling in legacy drivers mostly reported by oss-fuzz and coverity (tcos, oberthur, isoapplet, iasecc, westcos, gpk, flex, dnie, mcrd, authentic, belpic)
  * Add threading test to `pkcs11-tool` (#2067)
  * Add support to generate generic secret keys (#2140)
  * `opensc-explorer`: Print information about LCS (Life cycle status byte) (#2195)
  * Add support for Apple's arm64 (M1) binaries, removed TokenD. A seperate installer with TokenD (and without arm64 binaries) will be available (#2179).
  * Support for gcc11 and its new strict aliasing rules (#2241, #2260)
  * Initial support for building with OpenSSL 3.0 (#2343)
  * pkcs15-tool: Write data objects in binary mode (#2324)
  * Avoid limited size of log messages (#2352)
  * Support for ECDSA verification (#2211)
  * Support for ECDSA with different SHA hashes (#2190)
  * Prevent issues in p11-kit by not returning unexpected return codes (#2207)
  * Add support for PKCS#11 3.0: The new interfaces, profile objects and functions (#2096, #2293)
  * Standardize the version 2 on 2.20 in the code (#2096)
  * Fix CKA_MODIFIABLE and CKA_EXTRACTABLE  (#2176)
  * Copy arguments of C_Initialize (#2350)
  * Fix RSA-PSS signing (#2234)
  * Fix DO deletion (#2215)
  * Add support for (X)EdDSA keys (#1960)
  * Add support for applet version 3 and fix RSA-PSS mechanisms (#2205)
  * Add support for applet version 4 (#2332)
  * New configuration option for opensc.conf to disable pkcs1_padding (#2193)
  * Add support for ECDSA with different hashes (#2190)
  * Enable more mechanisms (#2178)
  * Fixed asking for a user pin when formatting a card (#1737)
  * Added support for French CPx Healthcare cards (#2217)
  * Added ATR for new CardOS 5.4 version (#2296)
  * Fixes security issues:
  * tcos: use after return (bsc#1192005, CVE-2021-42780)
  * oberthur: use after free (bsc#1191992, CVE-2021-42779)
  * oberthur: multiple heap buffer overflows (bsc#1192000,
    CVE-2021-42781)
  * multiple stack buffer overflow issues (bsc#1191957,
    CVE-2021-42782)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685620800">- Security Fix: [CVE-2023-2977, bsc#1211894]
  * opensc: out of bounds read in pkcs15 cardos_have_verifyrc_package()
  * Add opensc-CVE-2023-2977.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Security Fix: [CVE-2023-40660, bsc#1215762]
  * opensc: PIN bypass when card tracks its own login state
  * Add patches:
  - patches/opensc-0_22_0-CVE-2023-40660-1of2.patch
  - patches/opensc-0_22_0-CVE-2023-40660-2of2.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696593600">- Security Fix: [CVE-2023-40661, bsc#1215761]
  * opensc: multiple memory issues with pkcs15-init (enrollment tool)
  * Add patches:
  - opensc-CVE-2023-40661-1of12.patch
  - opensc-CVE-2023-40661-2of12.patch
  - opensc-CVE-2023-40661-3of12.patch
  - opensc-CVE-2023-40661-4of12.patch
  - opensc-CVE-2023-40661-5of12.patch
  - opensc-CVE-2023-40661-6of12.patch
  - opensc-CVE-2023-40661-7of12.patch
  - opensc-CVE-2023-40661-8of12.patch
  - opensc-CVE-2023-40661-9of12.patch
  - opensc-CVE-2023-40661-10of12.patch
  - opensc-CVE-2023-40661-11of12.patch
  - opensc-CVE-2023-40661-12of12.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1713268800">- Security fix: [CVE-2023-5992, bsc#1219386]
  * Add patch:
  - opensc-CVE-2023-5992.patch</changelog>
</package>
<package pkgid="a57b7092685f73e0884ec2b9a5cad43758a575e7cf8fd9f3bb27a16efef0880b" name="opensc" arch="x86_64">
  <version epoch="0" ver="0.22.0" rel="150400.3.9.1"/>
  <changelog author="michael@stroeder.com" date="1424088000">- update to version 0.14.0</changelog>
  <changelog author="bwachter-pkg@lart.info" date="1438257600">- update to version 0.15.0
- register with p11-kit
  (https://www.opensc-project.org/opensc/ticket/390)</changelog>
  <changelog author="t.gruner@katodev.de" date="1467720000">- update to version 0.16.0
- remove fix (issue 505)
- clean up spec-file</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Add baselibs.conf to provide 32-bit PKCS11 plugins (bsc#996047).
- Drop opensc-ADVISORIES. There is no new advisory since 2009.</changelog>
  <changelog author="tchvatal@suse.com" date="1500379200">- Switch to tarball fetching from github
- Few small cleanups</changelog>
  <changelog author="michael@stroeder.com" date="1514808000">- update to version 0.17.0:
  * support for new cards
  * PIN support enhancemets
  * added .pc file
  * builds with OpenSSL 1.1.0 (1074799)
  * See /usr/share/doc/packages/opensc/NEWS for complete list.</changelog>
  <changelog author="sbrabec@suse.com" date="1531224000">- Update to version 0.18.0:
  * Further improvements of PIN support.
  * Large number of improvements and fixes
    (boo#1097951, boo#1100501).
  * See /usr/share/doc/packages/opensc/NEWS for complete list.
- Add opensc-desktop.patch, opensc-desktop2.patch and
  opensc-bash-completions.patch.</changelog>
  <changelog author="kbabioch@suse.com" date="1536840000">- Update to version 0.19.0
  * Fixed multiple security problems (out of bound writes/reads):
  * bsc#1104812
  * CVE-2018-16391 (bsc#1106998)
  * CVE-2018-16392 (bsc#1106999)
  * CVE-2018-16393 (bsc#1108318)
  * CVE-2018-16418 (bsc#1107039)
  * CVE-2018-16419 (bsc#1107107)
  * CVE-2018-16420 (bsc#1107097)
  * CVE-2018-16421 (bsc#1107049)
  * CVE-2018-16422 (bsc#1107038)
  * CVE-2018-16423 (bsc#1107037)
  * CVE-2018-16424 (bsc#1107036)
  * CVE-2018-16425 (bsc#1107035)
  * CVE-2018-16426 (bsc#1107034)
  * CVE-2018-16427 (bsc#1107033)
  * Workaround cards returning short signatures without leading zeroes
  * Distribute minimal opensc.conf
  * `pkcs11_enable_InitToken made` global configuration option
  * Modify behavior of `OPENSC_DRIVER` environment variable to restrict driver
    list instead of forcing one driver and skipping vital parts of
    configuration
  * Removed configuration options `zero_ckaid_for_ca_certs`,
    `force_card_driver`, `reopen_debug_file`, `paranoid-memory`
  * Generalized configuration option `ignored_readers`
  * If card initialization fails, continue card detection with other card
    drivers
  * reader-pcsc: allow fixing the length of a PIN
  * fixed crash during `C_WaitForSlotEvent`
  * Allow cancelling the PIN pad prompt before starting the reader transaction.
    Whether to start the transaction immediately or not is user-configurable
    for each application
  * opensc-notify
  * add Exit button to tray icon
  * User better description (GenericName) and a generic application icon
  * Do not display in the application list
- Removed patches included upstream now:
  * opensc-desktop.patch
  * opensc-desktop2.patch
  * opensc-bash-completions.patch
- Applied spec-cleaner</changelog>
  <changelog author="code@bnavigator.de" date="1563883200">- add explicit BuildRequires: zlib-devel</changelog>
  <changelog author="jsikes@suse.de" date="1564488000">- added opensc-0.19.0-rsa-pss.patch
  * Fixes the pkcs11-tool example
  * Added missing CKM_SHA224_RSA_PKCS_PSS
  * Add support for PSS padding to RSA signatures
  * Support for signature verification in pkcs11-tool
  * Switch cleanup steps to avoid segfaults on errors and more sanity checking
- added opensc-0.19.0-redundant_logging.patch
  * Remove redundant debug output</changelog>
  <changelog author="jsikes@suse.com" date="1566129600">- added opensc-0.19.0-piv_card_matching.patch
  * Improve Card Matching for Dual CAC/PIV and PIVKEY cards.
  * sourced from https://github.com/OpenSC/OpenSC/pull/1549</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606478400">- OpenSC 0.21.0:
  * CVE-2020-26571: stack-based buffer overflow in the gemsafe GPK
    smart card software driver (boo#1177380)
  * CVE-2020-26572: stack-based buffer overflow in the TCOS smart
    card software driver (boo#1177378)
  * CVE-2020-26570: heap-based buffer overflow in the Oberthur
    smart card software driver (boo#1177364)
  * CardOS 5.x support boo#1179291
  * Support for OAEP encryption, make SHA256 default
  * New separate debug level for PIN commands
  * Fix handling of card/reader insertion/removal events in pcscd
  * Fixes of removed readers handling
  * Fix Firefox crash because of invalid pcsc context
  * PKCS#11: Return CKR_TOKEN_NOT_RECOGNIZED for not recognized cards
  * Propagate ignore_user_content to PKCS#11 layer not to confuse applications
  * Minidriver: Fix check of ATR length (2-to 33 characters inclusive)
  * pkcs11-tool: allow using SW tokens
  * opensc-explorer asn1 accepts offsets and decode records
  * opensc-explorer cat accepts records
  * OpenPGP: Add new ec curves supported by GNUK
  * First steps supporting OpenPGP 3.4
  * OpenPGP: Add support for EC key import
  * Rutoken: Add ATR for Rutoken ECP SC NFC
  * Improve detection of various CardOS 5 configurations
  * DNIe: Add new DNIe CA structure for the secure channel
  * ePass2003: Improve ECC support
  * ePass2003: Fix erase sequence
  * IAS-ECC: Fix support for Idemia Cosmo cards
  * IAS-ECC: PIN padding settings are now used from PKCS#15 info when available
  * IAS-ECC: Added PIN-pad support for PIN unblock
  * New driver for Gemalto IDPrime (only some types)
  * eDo: New driver with initial support for Polish eID card (e-dowód, eDO)
  * MCRD: Remove unused and broken RSA EstEID support
  * TCOS: Add missing encryption certificates
  * PIV: Add ATR of DOD Yubikey
  * fixed PIV global pin bug
  * CAC1: Support changing PIN with CAC Alt tokens
- includes changes from 0.20.0
  * CVE-2019-6502: memory leak in libopensc (boo#1122756)
  * CVE-2019-15946: out-of-bounds access of an ASN.1 Octet string (boo#1149747)
  * CVE-2019-15945: out-of-bounds access of an ASN.1 Bitstring (boo#1149746)
  * CVE-2019-19479: incorrect read operation during parsing of a SETCOS file attribute (boo#1158256)
  * CVE-2019-19480: improper free operation in sc_pkcs15_decode_prkdf_entry (boo#1158307)
  * CVE-2019-20792: double free in coolkey_free_private_dat (bsc#1170809)
  * Support RSA-PSS signature mechanisms using RSA-RAW
  * Added memory locking for secrets
  * added support for terminal colors
  * PC/SC driver: Fixed error handling in case of changing or removing the card reader
  * rename md_read_only to read_only and use it for PKCS#11 and Minidriver
  * allow global use of ignore_private_certificate
  * PKCS#11: Implement write protection (CKF_WRITE_PROTECTED) based on the card profile
  * PKCS#11: Add C_WrapKey and C_UnwrapKey implementations
  * PKCS#11: Handle CKA_ALWAYS_AUTHENTICATE when creating key objects
  * PKCS#11: Truncate long PKCS#11 labels with ...
  * PKCS#11: Fixed recognition of a token when being unplugged and reinserted
  * Minidriver: Register for CardOS5 cards
  * Minidriver: Add support for RSA-PSS
  * tools: Harmonize the use of option -r/--reader
  * goid-tool: GoID personalization with fingerprint
  * openpgp-tool: replace the options -L/--key-length with -t/--key-type
  * openpgp-tool: add options -C/--card-info and -K/--key-info
  * opensc-explorer: add command pin_info, extend random
  * pkcs11-register: Auto-configuration of applications for use of OpenSC PKCS#11
  * pkcd11-register: Autostart
  * opensc-tool: Show ATR also for cards not recognized by OpenSC
  * pkcs11-spy: parse CKM_AES_GCM, EC Derive parameters
  * pkcs11-spy: Add support for CKA_OTP_* and CKM_*_PSS values
  * pkcs11-tool: Support for signature verification via --verify
  * pkcs11-tool: Add object type secrkey for --type option
  * pkcs11-tool: Implement Secret Key write object
  * pkcs11-tool: Add GOSTR3410-2012 support
  * pkcs11-tool: Add support for testing CKM_RSA_PKCS_OAEP
  * pkcs11-tool: Add extractable option to key import
  * pkcs11-tool: list more key access flags when listing keys
  * pkcs11-tool: Add support for CKA_ALLOWED_MECHANISMS when creating new objects and listing keys
  * pkcs15-crypt: *Handle keys with user consent
  * New separate CAC1 driver using the old CAC specification (#1502)
  * CardOS: Add support for 4K RSA keys in CardOS 5
  * CardOS: Fixed decryption with CardOS 5
  * Enable CoolKey driver to handle 2048-bit keys
  * EstEID: add support for a minimalistic, small and fast card profile based on IAS-ECC issued since December 2018
  * GIDS Decipher fix (#1881)
  * GIDS: Allow RSA 4K support
  * MICARDO: Remove long expired EstEID 1.0/1.1 card support
  * MyEID: Add support for unwrapping a secret key with an RSA key or secret key
  * MyEID Add support for wrapping a secret key with a secret key
  * Support for MyEID 4K RSA
  * Support for OsEID
  * Gemalto GemSafe: add new PTeID ATRs, add support for 4K RSA keys
  * OpenPGP Card v3 ECC support
  * Add Rutoken ECP SC
  * Add Rutoken Lite
  * Add SmartCard-HSM 4K ATR
  * Add missing secp384r1 curve parameter
  * Stacros: Fix decipher with 2.3
  * Stacros: Add ATR for 2nd gen. eGK
  * Stacros: Add new ATR for 3.5
  * Stacros: Detect and allow Globalplatform PIN encoding
  * Fix TCOS IDKey support
  * TCOS: add encryption certificate for IDKey
  * Infocamere, Postecert, Cnipa: Remove profiles
  * Remove incomplete acos5 driver
- drop patches now upstream:
  * opensc-0.19.0-piv_card_matching.patch
  * opensc-0.19.0-redundant_logging.patch
  * opensc-0.19.0-rsa-pss.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move licenses to licensedir</changelog>
  <changelog author="predivan@mts.rs" date="1624795200">- Fix build on GCC11
  * Add opensc-gcc11.patch from Fedora
    (https://github.com/OpenSC/OpenSC/pull/2241/)</changelog>
  <changelog author="daniel.donisa@suse.com" date="1633348800">- Update to OpenSC 0.22.0:
  * Removed changes in opensc-gcc11.patch already present in upstream.
  - See https://github.com/OpenSC/OpenSC/pull/2241/commits/e549e9c62eb4fcd2260800e2665071e4dd9bbbda
  * Removed some false positives from the openrc-rpmlintrc file.
  * Use standard paths for file cache on Linux (#2148) and OSX (#2214)
  * Various issues of memory/buffer handling in legacy drivers mostly reported by oss-fuzz and coverity (tcos, oberthur, isoapplet, iasecc, westcos, gpk, flex, dnie, mcrd, authentic, belpic)
  * Add threading test to `pkcs11-tool` (#2067)
  * Add support to generate generic secret keys (#2140)
  * `opensc-explorer`: Print information about LCS (Life cycle status byte) (#2195)
  * Add support for Apple's arm64 (M1) binaries, removed TokenD. A seperate installer with TokenD (and without arm64 binaries) will be available (#2179).
  * Support for gcc11 and its new strict aliasing rules (#2241, #2260)
  * Initial support for building with OpenSSL 3.0 (#2343)
  * pkcs15-tool: Write data objects in binary mode (#2324)
  * Avoid limited size of log messages (#2352)
  * Support for ECDSA verification (#2211)
  * Support for ECDSA with different SHA hashes (#2190)
  * Prevent issues in p11-kit by not returning unexpected return codes (#2207)
  * Add support for PKCS#11 3.0: The new interfaces, profile objects and functions (#2096, #2293)
  * Standardize the version 2 on 2.20 in the code (#2096)
  * Fix CKA_MODIFIABLE and CKA_EXTRACTABLE  (#2176)
  * Copy arguments of C_Initialize (#2350)
  * Fix RSA-PSS signing (#2234)
  * Fix DO deletion (#2215)
  * Add support for (X)EdDSA keys (#1960)
  * Add support for applet version 3 and fix RSA-PSS mechanisms (#2205)
  * Add support for applet version 4 (#2332)
  * New configuration option for opensc.conf to disable pkcs1_padding (#2193)
  * Add support for ECDSA with different hashes (#2190)
  * Enable more mechanisms (#2178)
  * Fixed asking for a user pin when formatting a card (#1737)
  * Added support for French CPx Healthcare cards (#2217)
  * Added ATR for new CardOS 5.4 version (#2296)
  * Fixes security issues:
  * tcos: use after return (bsc#1192005, CVE-2021-42780)
  * oberthur: use after free (bsc#1191992, CVE-2021-42779)
  * oberthur: multiple heap buffer overflows (bsc#1192000,
    CVE-2021-42781)
  * multiple stack buffer overflow issues (bsc#1191957,
    CVE-2021-42782)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685620800">- Security Fix: [CVE-2023-2977, bsc#1211894]
  * opensc: out of bounds read in pkcs15 cardos_have_verifyrc_package()
  * Add opensc-CVE-2023-2977.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Security Fix: [CVE-2023-40660, bsc#1215762]
  * opensc: PIN bypass when card tracks its own login state
  * Add patches:
  - patches/opensc-0_22_0-CVE-2023-40660-1of2.patch
  - patches/opensc-0_22_0-CVE-2023-40660-2of2.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696593600">- Security Fix: [CVE-2023-40661, bsc#1215761]
  * opensc: multiple memory issues with pkcs15-init (enrollment tool)
  * Add patches:
  - opensc-CVE-2023-40661-1of12.patch
  - opensc-CVE-2023-40661-2of12.patch
  - opensc-CVE-2023-40661-3of12.patch
  - opensc-CVE-2023-40661-4of12.patch
  - opensc-CVE-2023-40661-5of12.patch
  - opensc-CVE-2023-40661-6of12.patch
  - opensc-CVE-2023-40661-7of12.patch
  - opensc-CVE-2023-40661-8of12.patch
  - opensc-CVE-2023-40661-9of12.patch
  - opensc-CVE-2023-40661-10of12.patch
  - opensc-CVE-2023-40661-11of12.patch
  - opensc-CVE-2023-40661-12of12.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1713268800">- Security fix: [CVE-2023-5992, bsc#1219386]
  * Add patch:
  - opensc-CVE-2023-5992.patch</changelog>
</package>
<package pkgid="8e20099833ab94dcfb82ea0d818ad85b0023f512bcb7b4b078fad8410c3a84b5" name="openslp" arch="aarch64">
  <version epoch="0" ver="2.0.0" rel="150000.6.17.1"/>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Do not depend on fillup and insserv if the package build with
  systemd support; the dependencies are not needed in that case</changelog>
  <changelog author="mls@suse.de" date="1473681600">- remove convenience code as changes bytes in the message
  buffer breaking the verification code [bnc#994989]
  new patch: openslp.noconvenience.diff
- fix storage handling in predicate code, it clashed with gcc's
  fortify_source extension [bnc#909195]
  new patch: openslp.predicatestorage.diff
- bring back allowDoubleEqualInPredicate option
  new patch: openslp.doubleequal.diff
- fix bug in openslp.initda.diff patch
- fix rcopenslp helper
- fix _xrealloc not checking the malloc return value
  [bnc#980722] [CVE-2016-4912]
  new patch: openslp.xrealloc.diff</changelog>
  <changelog author="mls@suse.de" date="1476273600">- Fix bounds check in SLPFoldWhiteSpace
  [bnc#1001600] [CVE-2016-7567]
  new patch: openslp.foldws.diff</changelog>
  <changelog author="fbui@suse.com" date="1481544000">- Replace pkgconfig(libsystemd-*) with pkgconfig(libsystemd)
  Nowadays pkgconfig(libsystemd) replaces all libsystemd-* libs, which
  are obsolete.</changelog>
  <changelog author="fbui@suse.com" date="1483963200">- Also update openslp.sd_notify.diff to use the new systemd lib</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497355200">- Add support for OpenSSL 1.1. Commit from upstream [bsc#1042665]
  new patch: openslp.openssl-1.1.diff</changelog>
  <changelog author="ro@suse.de" date="1511956800">- add separate source openslp.logrotate.systemd to
  use systemctl reload for logrotate configuration</changelog>
  <changelog author="mls@suse.de" date="1519905600">- Use %license (boo#1082318)
- fix slpd using the peer address as local address for TCP
  connections [bnc#1076035]
  new patch: openslp.localaddr.diff
- use tcp connections for unicast requests [bnc#1080964]
  new patch: openslp.tcpunicast.diff</changelog>
  <changelog author="mls@suse.de" date="1523448000">- move systemd notification before the chroot() call, otherwise
  the notify function cannot reach systend's unix domain socket
  [bnc#1089097]</changelog>
  <changelog author="mls@suse.de" date="1530187200">- Fix memory corruption when the sendbuf gets reallocated
  [bnc#1090638] [CVE-2017-17833]
  new patch: openslp.sendbuf_move.diff
- Fix out of bounds reads in message parsing
  new patch: openslp.parseoob.diff</changelog>
  <changelog author="mls@suse.de" date="1559908800">- Use tcp connects to talk with other DAs [bnc#1117969]
  new patch: openslp.tcpknownda.diff
- Fix segfault in predicate match if a registered service has
  a malformed attribute list [bnc#1136136]
  new patch: openslp.nullattr.diff</changelog>
  <changelog author="vcizek@suse.com" date="1568289600">- Add missing zlib build dependency, which used to be pulled in
  by libopenssl-devel. The package fails to build since the openssl
  upgrade to 1.1.1 (bsc#1149792)</changelog>
  <changelog author="mls@suse.de" date="1585051200">- Add missing group(daemon) prerequires to the openslp-server
  package [bnc#1165050]
- Add missing openslp requires to the openslp-server package
  [bnc#1165121]</changelog>
  <changelog author="mls@suse.de" date="1618401600">- Implement automatic active discovery retries so that DAs do
  not get dropped if they are not reachable for some time
  [bnc#1166637] [bnc#1184008]
  new patch: openslp.unicastactivediscovery.diff</changelog>
</package>
<package pkgid="d472c4dce38fe8d62311447e8ed75aa8292c0155e140b5505a2fa3cc23d46915" name="openslp" arch="s390x">
  <version epoch="0" ver="2.0.0" rel="150000.6.17.1"/>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Do not depend on fillup and insserv if the package build with
  systemd support; the dependencies are not needed in that case</changelog>
  <changelog author="mls@suse.de" date="1473681600">- remove convenience code as changes bytes in the message
  buffer breaking the verification code [bnc#994989]
  new patch: openslp.noconvenience.diff
- fix storage handling in predicate code, it clashed with gcc's
  fortify_source extension [bnc#909195]
  new patch: openslp.predicatestorage.diff
- bring back allowDoubleEqualInPredicate option
  new patch: openslp.doubleequal.diff
- fix bug in openslp.initda.diff patch
- fix rcopenslp helper
- fix _xrealloc not checking the malloc return value
  [bnc#980722] [CVE-2016-4912]
  new patch: openslp.xrealloc.diff</changelog>
  <changelog author="mls@suse.de" date="1476273600">- Fix bounds check in SLPFoldWhiteSpace
  [bnc#1001600] [CVE-2016-7567]
  new patch: openslp.foldws.diff</changelog>
  <changelog author="fbui@suse.com" date="1481544000">- Replace pkgconfig(libsystemd-*) with pkgconfig(libsystemd)
  Nowadays pkgconfig(libsystemd) replaces all libsystemd-* libs, which
  are obsolete.</changelog>
  <changelog author="fbui@suse.com" date="1483963200">- Also update openslp.sd_notify.diff to use the new systemd lib</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497355200">- Add support for OpenSSL 1.1. Commit from upstream [bsc#1042665]
  new patch: openslp.openssl-1.1.diff</changelog>
  <changelog author="ro@suse.de" date="1511956800">- add separate source openslp.logrotate.systemd to
  use systemctl reload for logrotate configuration</changelog>
  <changelog author="mls@suse.de" date="1519905600">- Use %license (boo#1082318)
- fix slpd using the peer address as local address for TCP
  connections [bnc#1076035]
  new patch: openslp.localaddr.diff
- use tcp connections for unicast requests [bnc#1080964]
  new patch: openslp.tcpunicast.diff</changelog>
  <changelog author="mls@suse.de" date="1523448000">- move systemd notification before the chroot() call, otherwise
  the notify function cannot reach systend's unix domain socket
  [bnc#1089097]</changelog>
  <changelog author="mls@suse.de" date="1530187200">- Fix memory corruption when the sendbuf gets reallocated
  [bnc#1090638] [CVE-2017-17833]
  new patch: openslp.sendbuf_move.diff
- Fix out of bounds reads in message parsing
  new patch: openslp.parseoob.diff</changelog>
  <changelog author="mls@suse.de" date="1559908800">- Use tcp connects to talk with other DAs [bnc#1117969]
  new patch: openslp.tcpknownda.diff
- Fix segfault in predicate match if a registered service has
  a malformed attribute list [bnc#1136136]
  new patch: openslp.nullattr.diff</changelog>
  <changelog author="vcizek@suse.com" date="1568289600">- Add missing zlib build dependency, which used to be pulled in
  by libopenssl-devel. The package fails to build since the openssl
  upgrade to 1.1.1 (bsc#1149792)</changelog>
  <changelog author="mls@suse.de" date="1585051200">- Add missing group(daemon) prerequires to the openslp-server
  package [bnc#1165050]
- Add missing openslp requires to the openslp-server package
  [bnc#1165121]</changelog>
  <changelog author="mls@suse.de" date="1618401600">- Implement automatic active discovery retries so that DAs do
  not get dropped if they are not reachable for some time
  [bnc#1166637] [bnc#1184008]
  new patch: openslp.unicastactivediscovery.diff</changelog>
</package>
<package pkgid="c468323afe151a024e13dda59700d62d9dff35900c3f2ae1ddb0229703607d99" name="openslp" arch="src">
  <version epoch="0" ver="2.0.0" rel="150000.6.17.1"/>
  <changelog author="mls@suse.de" date="1392292800">- frontport SLE11 patches:
  * add hardMTU option to limit the datagram package size to
    1400 bytes [bnc#648384].
    patch: openslp.hardmtu.diff
  * fix double free in SLPDKnownDAAdd error case [bnc#667953]
    patch: openslp.knowndafree.diff
  * fix libslp socket handling, check if socket is still alive
    and fix socket close code [bnc#693756]
    patch: openslp.loopbacksocket.diff
  * make openslpd reconnect to DAs if they closed the connection
    [bnc#723385]
    patch: openslp.slpdreconnect.diff
  * fixup lifetime of registrations a bit so that they
    don't get removed too early [bnc#658972]
    patch: openslp.lifetime.diff</changelog>
  <changelog author="mls@suse.de" date="1392811200">- update to openslp-2.0.0 to get IPv6 support
  * dropped patches:
    v1dadiscovery.diff, openslp.clrflags.diff
    openslp.fixdsareturn.diff, openslp.dereg.diff,
    openslp.tcpclearovr.diff, openslp.lifetime.diff,
    slptool-timeout.diff, openslp.poll.diff,
    openslp.ignorespaces.diff, openslp.checkovr.diff,
    openslp.fixaddrcheck.diff, openslp.loopbacksocket.diff,
    openslp.diff, openslp.doubleequal.diff, openslp.discovery.diff,
    openslp.parseext.diff, openslp.knowndafree.diff,
    openslp.emptyanswer.diff, openslp.v1sladdr.diff, hppa.diff
  * renamed patches:
    openslp-1.2.0-visibility.patch -&gt; openslp.visibility.diff
    openslp-1.2.0-daemon.diff -&gt; openslp.daemon.diff
    openslp.use-TCPDIAG-for-checking-listeners -&gt; openslp.netlink.diff
    openslp-ocloexec.patch -&gt; openslp.cloexec.diff
- always use localtime in the log file [bnc#855385]
  patch: openslp.localtime.diff
- use tcp to connect to the local SA
  patch: openslp.tcplocal.diff
- drop unused mdns support
- rename README.SuSE to README.SUSE</changelog>
  <changelog author="mls@suse.de" date="1397131200">- use AI_CANONNAME when looking up the canonical name</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1406462400">- openslp.sd_notify.diff make slpd systemd service of type
  notify instead of simple, to avoid startup races.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1406548800">- Do not apply previous patch to distros without systemd.
- Limit init script usage only to legacy products.</changelog>
  <changelog author="mls@suse.de" date="1409572800">- fix last commit</changelog>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Do not depend on fillup and insserv if the package build with
  systemd support; the dependencies are not needed in that case</changelog>
  <changelog author="mls@suse.de" date="1473681600">- remove convenience code as changes bytes in the message
  buffer breaking the verification code [bnc#994989]
  new patch: openslp.noconvenience.diff
- fix storage handling in predicate code, it clashed with gcc's
  fortify_source extension [bnc#909195]
  new patch: openslp.predicatestorage.diff
- bring back allowDoubleEqualInPredicate option
  new patch: openslp.doubleequal.diff
- fix bug in openslp.initda.diff patch
- fix rcopenslp helper
- fix _xrealloc not checking the malloc return value
  [bnc#980722] [CVE-2016-4912]
  new patch: openslp.xrealloc.diff</changelog>
  <changelog author="mls@suse.de" date="1476273600">- Fix bounds check in SLPFoldWhiteSpace
  [bnc#1001600] [CVE-2016-7567]
  new patch: openslp.foldws.diff</changelog>
  <changelog author="fbui@suse.com" date="1481544000">- Replace pkgconfig(libsystemd-*) with pkgconfig(libsystemd)
  Nowadays pkgconfig(libsystemd) replaces all libsystemd-* libs, which
  are obsolete.</changelog>
  <changelog author="fbui@suse.com" date="1483963200">- Also update openslp.sd_notify.diff to use the new systemd lib</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497355200">- Add support for OpenSSL 1.1. Commit from upstream [bsc#1042665]
  new patch: openslp.openssl-1.1.diff</changelog>
  <changelog author="ro@suse.de" date="1511956800">- add separate source openslp.logrotate.systemd to
  use systemctl reload for logrotate configuration</changelog>
  <changelog author="mls@suse.de" date="1519905600">- Use %license (boo#1082318)
- fix slpd using the peer address as local address for TCP
  connections [bnc#1076035]
  new patch: openslp.localaddr.diff
- use tcp connections for unicast requests [bnc#1080964]
  new patch: openslp.tcpunicast.diff</changelog>
  <changelog author="mls@suse.de" date="1523448000">- move systemd notification before the chroot() call, otherwise
  the notify function cannot reach systend's unix domain socket
  [bnc#1089097]</changelog>
  <changelog author="mls@suse.de" date="1530187200">- Fix memory corruption when the sendbuf gets reallocated
  [bnc#1090638] [CVE-2017-17833]
  new patch: openslp.sendbuf_move.diff
- Fix out of bounds reads in message parsing
  new patch: openslp.parseoob.diff</changelog>
  <changelog author="mls@suse.de" date="1559908800">- Use tcp connects to talk with other DAs [bnc#1117969]
  new patch: openslp.tcpknownda.diff
- Fix segfault in predicate match if a registered service has
  a malformed attribute list [bnc#1136136]
  new patch: openslp.nullattr.diff</changelog>
  <changelog author="vcizek@suse.com" date="1568289600">- Add missing zlib build dependency, which used to be pulled in
  by libopenssl-devel. The package fails to build since the openssl
  upgrade to 1.1.1 (bsc#1149792)</changelog>
  <changelog author="mls@suse.de" date="1585051200">- Add missing group(daemon) prerequires to the openslp-server
  package [bnc#1165050]
- Add missing openslp requires to the openslp-server package
  [bnc#1165121]</changelog>
  <changelog author="mls@suse.de" date="1618401600">- Implement automatic active discovery retries so that DAs do
  not get dropped if they are not reachable for some time
  [bnc#1166637] [bnc#1184008]
  new patch: openslp.unicastactivediscovery.diff</changelog>
</package>
<package pkgid="d40096c5a33fd2dbe46e8ca65003f098015b10cc2d2070bc858c3f4d6c866513" name="openslp" arch="x86_64">
  <version epoch="0" ver="2.0.0" rel="150000.6.17.1"/>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Do not depend on fillup and insserv if the package build with
  systemd support; the dependencies are not needed in that case</changelog>
  <changelog author="mls@suse.de" date="1473681600">- remove convenience code as changes bytes in the message
  buffer breaking the verification code [bnc#994989]
  new patch: openslp.noconvenience.diff
- fix storage handling in predicate code, it clashed with gcc's
  fortify_source extension [bnc#909195]
  new patch: openslp.predicatestorage.diff
- bring back allowDoubleEqualInPredicate option
  new patch: openslp.doubleequal.diff
- fix bug in openslp.initda.diff patch
- fix rcopenslp helper
- fix _xrealloc not checking the malloc return value
  [bnc#980722] [CVE-2016-4912]
  new patch: openslp.xrealloc.diff</changelog>
  <changelog author="mls@suse.de" date="1476273600">- Fix bounds check in SLPFoldWhiteSpace
  [bnc#1001600] [CVE-2016-7567]
  new patch: openslp.foldws.diff</changelog>
  <changelog author="fbui@suse.com" date="1481544000">- Replace pkgconfig(libsystemd-*) with pkgconfig(libsystemd)
  Nowadays pkgconfig(libsystemd) replaces all libsystemd-* libs, which
  are obsolete.</changelog>
  <changelog author="fbui@suse.com" date="1483963200">- Also update openslp.sd_notify.diff to use the new systemd lib</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497355200">- Add support for OpenSSL 1.1. Commit from upstream [bsc#1042665]
  new patch: openslp.openssl-1.1.diff</changelog>
  <changelog author="ro@suse.de" date="1511956800">- add separate source openslp.logrotate.systemd to
  use systemctl reload for logrotate configuration</changelog>
  <changelog author="mls@suse.de" date="1519905600">- Use %license (boo#1082318)
- fix slpd using the peer address as local address for TCP
  connections [bnc#1076035]
  new patch: openslp.localaddr.diff
- use tcp connections for unicast requests [bnc#1080964]
  new patch: openslp.tcpunicast.diff</changelog>
  <changelog author="mls@suse.de" date="1523448000">- move systemd notification before the chroot() call, otherwise
  the notify function cannot reach systend's unix domain socket
  [bnc#1089097]</changelog>
  <changelog author="mls@suse.de" date="1530187200">- Fix memory corruption when the sendbuf gets reallocated
  [bnc#1090638] [CVE-2017-17833]
  new patch: openslp.sendbuf_move.diff
- Fix out of bounds reads in message parsing
  new patch: openslp.parseoob.diff</changelog>
  <changelog author="mls@suse.de" date="1559908800">- Use tcp connects to talk with other DAs [bnc#1117969]
  new patch: openslp.tcpknownda.diff
- Fix segfault in predicate match if a registered service has
  a malformed attribute list [bnc#1136136]
  new patch: openslp.nullattr.diff</changelog>
  <changelog author="vcizek@suse.com" date="1568289600">- Add missing zlib build dependency, which used to be pulled in
  by libopenssl-devel. The package fails to build since the openssl
  upgrade to 1.1.1 (bsc#1149792)</changelog>
  <changelog author="mls@suse.de" date="1585051200">- Add missing group(daemon) prerequires to the openslp-server
  package [bnc#1165050]
- Add missing openslp requires to the openslp-server package
  [bnc#1165121]</changelog>
  <changelog author="mls@suse.de" date="1618401600">- Implement automatic active discovery retries so that DAs do
  not get dropped if they are not reachable for some time
  [bnc#1166637] [bnc#1184008]
  new patch: openslp.unicastactivediscovery.diff</changelog>
</package>
<package pkgid="1104096e66a7617b4730351722d1c0f07fef6c58ffc992ef444e3178fc73cf5b" name="openssh" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.27.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
</package>
<package pkgid="d447a944ec7a86d2df650f8fddda71d63e7fc6b342cf3c0382bc6e82ee5d94bf" name="openssh" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.27.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
</package>
<package pkgid="f5ac4473915013fb48d265ff501133aa381310a1f304b4d2271297484d0668e3" name="openssh" arch="src">
  <version epoch="0" ver="8.4p1" rel="150300.3.27.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
</package>
<package pkgid="0d8d47dd676699b626b9ded1933437ab9859b4d9bdb8c070bcd9c670a0f0d498" name="openssh" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.27.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
</package>
<package pkgid="7af80bcd939f084fb561a4c03ce5f8d9689b2140f730bb01069d2b9b5ea31406" name="openssh" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.30.1"/>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
</package>
<package pkgid="6316264b1e432b462e70870acae1bdee29667de1cb8e2ebe204c57913f44c4da" name="openssh" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.30.1"/>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
</package>
<package pkgid="2f7c774ef16abe43f78406e8d7ce1ff7e1b3027adcf87f2f31116108e074d3bf" name="openssh" arch="src">
  <version epoch="0" ver="8.4p1" rel="150300.3.30.1"/>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
</package>
<package pkgid="78fc2ef8016f732d4ff05374ce41d68eb061c4d218827b10f7f7e65746e16b7f" name="openssh" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.30.1"/>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
</package>
<package pkgid="63c35f18f1fdd28f8c99ceb64fc1bedb47233aa57256ba1f9bbf1bcb7473bb4e" name="openssh" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.37.1"/>
  <changelog author="kukuk@suse.com" date="1610971200">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
  <changelog author="alarrosa@suse.com" date="1712059200">- Fix hostbased ssh login failing occasionally with "signature
  unverified: incorrect signature" by fixing a typo in patch
  (bsc#1221123):
  * openssh-7.8p1-role-mls.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712750400">- Add patches openssh-7.7p1-seccomp_getuid.patch and
  openssh-bsc1216474-s390-leave-fds-open.patch
  (bsc#1216474, bsc#1218871)</changelog>
  <changelog author="alarrosa@suse.com" date="1713182400">- Add patches from upstream to change the default value of
  UpdateHostKeys to Yes (unless VerifyHostKeyDNS is enabled).
  This makes ssh update the known_hosts stored keys with all
  published versions by the server (after it's authenticated
  with an existing key), which will allow to identify the
  server with a different key if the existing key is considered
  insecure at some point in the future (bsc#1222831).
  * 0001-upstream-enable-UpdateHostkeys-by-default-when-the.patch
  * 0002-upstream-disable-UpdateHostkeys-by-default-if.patch</changelog>
</package>
<package pkgid="931cbd00f0b466793992e4ac82c9c2403d39d5cb915bb1ba675f5c73153623ec" name="openssh" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.37.1"/>
  <changelog author="kukuk@suse.com" date="1610971200">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
  <changelog author="alarrosa@suse.com" date="1712059200">- Fix hostbased ssh login failing occasionally with "signature
  unverified: incorrect signature" by fixing a typo in patch
  (bsc#1221123):
  * openssh-7.8p1-role-mls.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712750400">- Add patches openssh-7.7p1-seccomp_getuid.patch and
  openssh-bsc1216474-s390-leave-fds-open.patch
  (bsc#1216474, bsc#1218871)</changelog>
  <changelog author="alarrosa@suse.com" date="1713182400">- Add patches from upstream to change the default value of
  UpdateHostKeys to Yes (unless VerifyHostKeyDNS is enabled).
  This makes ssh update the known_hosts stored keys with all
  published versions by the server (after it's authenticated
  with an existing key), which will allow to identify the
  server with a different key if the existing key is considered
  insecure at some point in the future (bsc#1222831).
  * 0001-upstream-enable-UpdateHostkeys-by-default-when-the.patch
  * 0002-upstream-disable-UpdateHostkeys-by-default-if.patch</changelog>
</package>
<package pkgid="86a55065b6cd8700a2916dfe36444ce07287e3874cd3843f2197098dbedc6044" name="openssh" arch="src">
  <version epoch="0" ver="8.4p1" rel="150300.3.37.1"/>
  <changelog author="kukuk@suse.com" date="1610971200">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
  <changelog author="alarrosa@suse.com" date="1712059200">- Fix hostbased ssh login failing occasionally with "signature
  unverified: incorrect signature" by fixing a typo in patch
  (bsc#1221123):
  * openssh-7.8p1-role-mls.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712750400">- Add patches openssh-7.7p1-seccomp_getuid.patch and
  openssh-bsc1216474-s390-leave-fds-open.patch
  (bsc#1216474, bsc#1218871)</changelog>
  <changelog author="alarrosa@suse.com" date="1713182400">- Add patches from upstream to change the default value of
  UpdateHostKeys to Yes (unless VerifyHostKeyDNS is enabled).
  This makes ssh update the known_hosts stored keys with all
  published versions by the server (after it's authenticated
  with an existing key), which will allow to identify the
  server with a different key if the existing key is considered
  insecure at some point in the future (bsc#1222831).
  * 0001-upstream-enable-UpdateHostkeys-by-default-when-the.patch
  * 0002-upstream-disable-UpdateHostkeys-by-default-if.patch</changelog>
</package>
<package pkgid="0c1f7f67e58f24d3b1d8e8c921cf35a8c3b70c37839f285478db0acc80000711" name="openssh" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.37.1"/>
  <changelog author="kukuk@suse.com" date="1610971200">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
  <changelog author="alarrosa@suse.com" date="1712059200">- Fix hostbased ssh login failing occasionally with "signature
  unverified: incorrect signature" by fixing a typo in patch
  (bsc#1221123):
  * openssh-7.8p1-role-mls.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712750400">- Add patches openssh-7.7p1-seccomp_getuid.patch and
  openssh-bsc1216474-s390-leave-fds-open.patch
  (bsc#1216474, bsc#1218871)</changelog>
  <changelog author="alarrosa@suse.com" date="1713182400">- Add patches from upstream to change the default value of
  UpdateHostKeys to Yes (unless VerifyHostKeyDNS is enabled).
  This makes ssh update the known_hosts stored keys with all
  published versions by the server (after it's authenticated
  with an existing key), which will allow to identify the
  server with a different key if the existing key is considered
  insecure at some point in the future (bsc#1222831).
  * 0001-upstream-enable-UpdateHostkeys-by-default-when-the.patch
  * 0002-upstream-disable-UpdateHostkeys-by-default-if.patch</changelog>
</package>
<package pkgid="fa8a67a714d3ebfb9e66c1a4b91cf6a9d6926f0b761a1ed9aca5412ca1b45ab1" name="openssh-clients" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.27.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
</package>
<package pkgid="7a15f371c5a7776ebfccea5aaab0e2a3945fdbc54db4c5f04786a93f01ea5918" name="openssh-clients" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.27.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
</package>
<package pkgid="169de9762b96bff3272d8ec3ed4c83fc09be278321874e4774736ce8773dd150" name="openssh-clients" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.27.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
</package>
<package pkgid="77d9cbece1d805f1fc6386babbfd30d1fe593fe6793613a46a0707e6323da158" name="openssh-clients" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.30.1"/>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
</package>
<package pkgid="5dbb5c29a43aba7f9e62dd89e6d408596de718372c4e981603e054a3b1f07a8e" name="openssh-clients" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.30.1"/>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
</package>
<package pkgid="46b125f87eba645be860ce206689354c8ddf47e07209394d412c6994965b4d7b" name="openssh-clients" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.30.1"/>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
</package>
<package pkgid="6974574a12bdc3b8decb1e16b7e09ae7fe68e610a39b6f2812ee9ec6fbbf629f" name="openssh-clients" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.37.1"/>
  <changelog author="kukuk@suse.com" date="1610971200">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
  <changelog author="alarrosa@suse.com" date="1712059200">- Fix hostbased ssh login failing occasionally with "signature
  unverified: incorrect signature" by fixing a typo in patch
  (bsc#1221123):
  * openssh-7.8p1-role-mls.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712750400">- Add patches openssh-7.7p1-seccomp_getuid.patch and
  openssh-bsc1216474-s390-leave-fds-open.patch
  (bsc#1216474, bsc#1218871)</changelog>
  <changelog author="alarrosa@suse.com" date="1713182400">- Add patches from upstream to change the default value of
  UpdateHostKeys to Yes (unless VerifyHostKeyDNS is enabled).
  This makes ssh update the known_hosts stored keys with all
  published versions by the server (after it's authenticated
  with an existing key), which will allow to identify the
  server with a different key if the existing key is considered
  insecure at some point in the future (bsc#1222831).
  * 0001-upstream-enable-UpdateHostkeys-by-default-when-the.patch
  * 0002-upstream-disable-UpdateHostkeys-by-default-if.patch</changelog>
</package>
<package pkgid="b8df65c9b36f4ac39b685f8d667f5c8299bccc79fa908ae150c1238a1e0ef702" name="openssh-clients" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.37.1"/>
  <changelog author="kukuk@suse.com" date="1610971200">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
  <changelog author="alarrosa@suse.com" date="1712059200">- Fix hostbased ssh login failing occasionally with "signature
  unverified: incorrect signature" by fixing a typo in patch
  (bsc#1221123):
  * openssh-7.8p1-role-mls.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712750400">- Add patches openssh-7.7p1-seccomp_getuid.patch and
  openssh-bsc1216474-s390-leave-fds-open.patch
  (bsc#1216474, bsc#1218871)</changelog>
  <changelog author="alarrosa@suse.com" date="1713182400">- Add patches from upstream to change the default value of
  UpdateHostKeys to Yes (unless VerifyHostKeyDNS is enabled).
  This makes ssh update the known_hosts stored keys with all
  published versions by the server (after it's authenticated
  with an existing key), which will allow to identify the
  server with a different key if the existing key is considered
  insecure at some point in the future (bsc#1222831).
  * 0001-upstream-enable-UpdateHostkeys-by-default-when-the.patch
  * 0002-upstream-disable-UpdateHostkeys-by-default-if.patch</changelog>
</package>
<package pkgid="de7672662be524aa38968dd33f95d4ad3c034c803b82490f8a2a7172e5f0b344" name="openssh-clients" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.37.1"/>
  <changelog author="kukuk@suse.com" date="1610971200">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
  <changelog author="alarrosa@suse.com" date="1712059200">- Fix hostbased ssh login failing occasionally with "signature
  unverified: incorrect signature" by fixing a typo in patch
  (bsc#1221123):
  * openssh-7.8p1-role-mls.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712750400">- Add patches openssh-7.7p1-seccomp_getuid.patch and
  openssh-bsc1216474-s390-leave-fds-open.patch
  (bsc#1216474, bsc#1218871)</changelog>
  <changelog author="alarrosa@suse.com" date="1713182400">- Add patches from upstream to change the default value of
  UpdateHostKeys to Yes (unless VerifyHostKeyDNS is enabled).
  This makes ssh update the known_hosts stored keys with all
  published versions by the server (after it's authenticated
  with an existing key), which will allow to identify the
  server with a different key if the existing key is considered
  insecure at some point in the future (bsc#1222831).
  * 0001-upstream-enable-UpdateHostkeys-by-default-when-the.patch
  * 0002-upstream-disable-UpdateHostkeys-by-default-if.patch</changelog>
</package>
<package pkgid="a32350bcfed0deaa4b5b519d6b9276c87975c38f43a17680d8e19e4b7b99640d" name="openssh-common" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.27.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
</package>
<package pkgid="cf97dd88fe632f4ee89d3e4eb456c708ccb63aaef3e7716029174f86b69b0147" name="openssh-common" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.27.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
</package>
<package pkgid="2fae7dfd8b50c699710be4f0e242ba6f81c0ab9410045c01da911bd6d8c24621" name="openssh-common" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.27.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
</package>
<package pkgid="e8dfc1b215680a17ad7a2ad69ff9fba26d2a4b61cb2915123445bebf5f3bfdd5" name="openssh-common" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.30.1"/>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
</package>
<package pkgid="3e90f35c1fe16d30c248537a5aaff38b28d7cc01441f71e7997c6df693c8c327" name="openssh-common" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.30.1"/>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
</package>
<package pkgid="836daf382c178e49939012b4ac7834bbb8a30107ad46fafde921e7081d14e042" name="openssh-common" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.30.1"/>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
</package>
<package pkgid="7946dd2a6f99483350dca48cdf655f8f7bc9a441d73114c5e8bb776dd36529b3" name="openssh-common" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.37.1"/>
  <changelog author="kukuk@suse.com" date="1610971200">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
  <changelog author="alarrosa@suse.com" date="1712059200">- Fix hostbased ssh login failing occasionally with "signature
  unverified: incorrect signature" by fixing a typo in patch
  (bsc#1221123):
  * openssh-7.8p1-role-mls.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712750400">- Add patches openssh-7.7p1-seccomp_getuid.patch and
  openssh-bsc1216474-s390-leave-fds-open.patch
  (bsc#1216474, bsc#1218871)</changelog>
  <changelog author="alarrosa@suse.com" date="1713182400">- Add patches from upstream to change the default value of
  UpdateHostKeys to Yes (unless VerifyHostKeyDNS is enabled).
  This makes ssh update the known_hosts stored keys with all
  published versions by the server (after it's authenticated
  with an existing key), which will allow to identify the
  server with a different key if the existing key is considered
  insecure at some point in the future (bsc#1222831).
  * 0001-upstream-enable-UpdateHostkeys-by-default-when-the.patch
  * 0002-upstream-disable-UpdateHostkeys-by-default-if.patch</changelog>
</package>
<package pkgid="50da3268cae483435558dccaf48f581c32ff198b47f8e556612c27a8181dbe94" name="openssh-common" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.37.1"/>
  <changelog author="kukuk@suse.com" date="1610971200">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
  <changelog author="alarrosa@suse.com" date="1712059200">- Fix hostbased ssh login failing occasionally with "signature
  unverified: incorrect signature" by fixing a typo in patch
  (bsc#1221123):
  * openssh-7.8p1-role-mls.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712750400">- Add patches openssh-7.7p1-seccomp_getuid.patch and
  openssh-bsc1216474-s390-leave-fds-open.patch
  (bsc#1216474, bsc#1218871)</changelog>
  <changelog author="alarrosa@suse.com" date="1713182400">- Add patches from upstream to change the default value of
  UpdateHostKeys to Yes (unless VerifyHostKeyDNS is enabled).
  This makes ssh update the known_hosts stored keys with all
  published versions by the server (after it's authenticated
  with an existing key), which will allow to identify the
  server with a different key if the existing key is considered
  insecure at some point in the future (bsc#1222831).
  * 0001-upstream-enable-UpdateHostkeys-by-default-when-the.patch
  * 0002-upstream-disable-UpdateHostkeys-by-default-if.patch</changelog>
</package>
<package pkgid="98c044b5cee1a2769b081bf00483aa12218e21e244b3cb1f60b4ca68c332d452" name="openssh-common" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.37.1"/>
  <changelog author="kukuk@suse.com" date="1610971200">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
  <changelog author="alarrosa@suse.com" date="1712059200">- Fix hostbased ssh login failing occasionally with "signature
  unverified: incorrect signature" by fixing a typo in patch
  (bsc#1221123):
  * openssh-7.8p1-role-mls.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712750400">- Add patches openssh-7.7p1-seccomp_getuid.patch and
  openssh-bsc1216474-s390-leave-fds-open.patch
  (bsc#1216474, bsc#1218871)</changelog>
  <changelog author="alarrosa@suse.com" date="1713182400">- Add patches from upstream to change the default value of
  UpdateHostKeys to Yes (unless VerifyHostKeyDNS is enabled).
  This makes ssh update the known_hosts stored keys with all
  published versions by the server (after it's authenticated
  with an existing key), which will allow to identify the
  server with a different key if the existing key is considered
  insecure at some point in the future (bsc#1222831).
  * 0001-upstream-enable-UpdateHostkeys-by-default-when-the.patch
  * 0002-upstream-disable-UpdateHostkeys-by-default-if.patch</changelog>
</package>
<package pkgid="f98bb9ca74797f27abef73d168283aa189603e6063bd4358768d344cf74d0ccd" name="openssh-fips" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.27.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
</package>
<package pkgid="cebc784cabcdb4b2256c927c02522a6d8fda9f9cd97716d7539356d5f91dc303" name="openssh-fips" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.27.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
</package>
<package pkgid="914b6fb5fe05776e363991012a20c2fab24d56e9037f83f467e49c32ffb24516" name="openssh-fips" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.27.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
</package>
<package pkgid="9990ed87ab9a2236246d8ebb145f5cbea62cec9fc55cd5534f28f6646196d3a4" name="openssh-fips" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.30.1"/>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
</package>
<package pkgid="dfee18ebeb6f6ef64bd60dc65cc64fbf3a7f9b962685f4ad46efbdb751647b10" name="openssh-fips" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.30.1"/>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
</package>
<package pkgid="ece5dbaa481500adb5a1b1555bf652dfd826a84addc1f7b292d235092b0f3b9b" name="openssh-fips" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.30.1"/>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
</package>
<package pkgid="c4d64bbe1667fd1898a95ffb2a247850ef12af54036ff6b57c65e4726a2f2977" name="openssh-fips" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.37.1"/>
  <changelog author="kukuk@suse.com" date="1610971200">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
  <changelog author="alarrosa@suse.com" date="1712059200">- Fix hostbased ssh login failing occasionally with "signature
  unverified: incorrect signature" by fixing a typo in patch
  (bsc#1221123):
  * openssh-7.8p1-role-mls.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712750400">- Add patches openssh-7.7p1-seccomp_getuid.patch and
  openssh-bsc1216474-s390-leave-fds-open.patch
  (bsc#1216474, bsc#1218871)</changelog>
  <changelog author="alarrosa@suse.com" date="1713182400">- Add patches from upstream to change the default value of
  UpdateHostKeys to Yes (unless VerifyHostKeyDNS is enabled).
  This makes ssh update the known_hosts stored keys with all
  published versions by the server (after it's authenticated
  with an existing key), which will allow to identify the
  server with a different key if the existing key is considered
  insecure at some point in the future (bsc#1222831).
  * 0001-upstream-enable-UpdateHostkeys-by-default-when-the.patch
  * 0002-upstream-disable-UpdateHostkeys-by-default-if.patch</changelog>
</package>
<package pkgid="0b02a5485287ef1356353650d24bcdad72dc1a033ba04313d2d24467da49bf1c" name="openssh-fips" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.37.1"/>
  <changelog author="kukuk@suse.com" date="1610971200">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
  <changelog author="alarrosa@suse.com" date="1712059200">- Fix hostbased ssh login failing occasionally with "signature
  unverified: incorrect signature" by fixing a typo in patch
  (bsc#1221123):
  * openssh-7.8p1-role-mls.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712750400">- Add patches openssh-7.7p1-seccomp_getuid.patch and
  openssh-bsc1216474-s390-leave-fds-open.patch
  (bsc#1216474, bsc#1218871)</changelog>
  <changelog author="alarrosa@suse.com" date="1713182400">- Add patches from upstream to change the default value of
  UpdateHostKeys to Yes (unless VerifyHostKeyDNS is enabled).
  This makes ssh update the known_hosts stored keys with all
  published versions by the server (after it's authenticated
  with an existing key), which will allow to identify the
  server with a different key if the existing key is considered
  insecure at some point in the future (bsc#1222831).
  * 0001-upstream-enable-UpdateHostkeys-by-default-when-the.patch
  * 0002-upstream-disable-UpdateHostkeys-by-default-if.patch</changelog>
</package>
<package pkgid="4abd7c04daec3f8cc6b1861f7d9f519943cd43a2e6fee5835c462c426be77278" name="openssh-fips" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.37.1"/>
  <changelog author="kukuk@suse.com" date="1610971200">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
  <changelog author="alarrosa@suse.com" date="1712059200">- Fix hostbased ssh login failing occasionally with "signature
  unverified: incorrect signature" by fixing a typo in patch
  (bsc#1221123):
  * openssh-7.8p1-role-mls.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712750400">- Add patches openssh-7.7p1-seccomp_getuid.patch and
  openssh-bsc1216474-s390-leave-fds-open.patch
  (bsc#1216474, bsc#1218871)</changelog>
  <changelog author="alarrosa@suse.com" date="1713182400">- Add patches from upstream to change the default value of
  UpdateHostKeys to Yes (unless VerifyHostKeyDNS is enabled).
  This makes ssh update the known_hosts stored keys with all
  published versions by the server (after it's authenticated
  with an existing key), which will allow to identify the
  server with a different key if the existing key is considered
  insecure at some point in the future (bsc#1222831).
  * 0001-upstream-enable-UpdateHostkeys-by-default-when-the.patch
  * 0002-upstream-disable-UpdateHostkeys-by-default-if.patch</changelog>
</package>
<package pkgid="be7e7805300040e3392aa52dbedbafc532bd41b6fccc5ebca79dd20a164462cc" name="openssh-server" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.27.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
</package>
<package pkgid="0d86c32de5e7509fc3be0f4be3fa1ab6a1c59e0b8c5e0acc31cca52f16afa4b7" name="openssh-server" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.27.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
</package>
<package pkgid="04156c333b32d3c9fe2244663775958181fdbdf05cb12038e60e78e4e0974402" name="openssh-server" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.27.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
</package>
<package pkgid="04bd1806b9c09d0871bdcd4788e905c82b88072ba7a5b86d8beaa0ee2a878fec" name="openssh-server" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.30.1"/>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
</package>
<package pkgid="353347c1025ad23a94fcc71ededb1e3434533c0c11f7748e3859f4dcddeaab29" name="openssh-server" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.30.1"/>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
</package>
<package pkgid="32f47a47d046d1e8c88426bcfd5dbaa1f66231c4741240c4e2149a81128dffca" name="openssh-server" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.30.1"/>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
</package>
<package pkgid="de104a43f5f7cc3ad01ea500857638b992e03b3bc29dcaa47d2cd66e703efea8" name="openssh-server" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.37.1"/>
  <changelog author="kukuk@suse.com" date="1610971200">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
  <changelog author="alarrosa@suse.com" date="1712059200">- Fix hostbased ssh login failing occasionally with "signature
  unverified: incorrect signature" by fixing a typo in patch
  (bsc#1221123):
  * openssh-7.8p1-role-mls.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712750400">- Add patches openssh-7.7p1-seccomp_getuid.patch and
  openssh-bsc1216474-s390-leave-fds-open.patch
  (bsc#1216474, bsc#1218871)</changelog>
  <changelog author="alarrosa@suse.com" date="1713182400">- Add patches from upstream to change the default value of
  UpdateHostKeys to Yes (unless VerifyHostKeyDNS is enabled).
  This makes ssh update the known_hosts stored keys with all
  published versions by the server (after it's authenticated
  with an existing key), which will allow to identify the
  server with a different key if the existing key is considered
  insecure at some point in the future (bsc#1222831).
  * 0001-upstream-enable-UpdateHostkeys-by-default-when-the.patch
  * 0002-upstream-disable-UpdateHostkeys-by-default-if.patch</changelog>
</package>
<package pkgid="0073000747920fb20664c9564e16704451a393ad937a222deff77123f8ce0570" name="openssh-server" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.37.1"/>
  <changelog author="kukuk@suse.com" date="1610971200">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
  <changelog author="alarrosa@suse.com" date="1712059200">- Fix hostbased ssh login failing occasionally with "signature
  unverified: incorrect signature" by fixing a typo in patch
  (bsc#1221123):
  * openssh-7.8p1-role-mls.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712750400">- Add patches openssh-7.7p1-seccomp_getuid.patch and
  openssh-bsc1216474-s390-leave-fds-open.patch
  (bsc#1216474, bsc#1218871)</changelog>
  <changelog author="alarrosa@suse.com" date="1713182400">- Add patches from upstream to change the default value of
  UpdateHostKeys to Yes (unless VerifyHostKeyDNS is enabled).
  This makes ssh update the known_hosts stored keys with all
  published versions by the server (after it's authenticated
  with an existing key), which will allow to identify the
  server with a different key if the existing key is considered
  insecure at some point in the future (bsc#1222831).
  * 0001-upstream-enable-UpdateHostkeys-by-default-when-the.patch
  * 0002-upstream-disable-UpdateHostkeys-by-default-if.patch</changelog>
</package>
<package pkgid="cbe4d68c1daf57a18142d4e9157fdf8a40c4d9ebb917388591f5a9ef4da30ef8" name="openssh-server" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.37.1"/>
  <changelog author="kukuk@suse.com" date="1610971200">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
  <changelog author="alarrosa@suse.com" date="1712059200">- Fix hostbased ssh login failing occasionally with "signature
  unverified: incorrect signature" by fixing a typo in patch
  (bsc#1221123):
  * openssh-7.8p1-role-mls.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712750400">- Add patches openssh-7.7p1-seccomp_getuid.patch and
  openssh-bsc1216474-s390-leave-fds-open.patch
  (bsc#1216474, bsc#1218871)</changelog>
  <changelog author="alarrosa@suse.com" date="1713182400">- Add patches from upstream to change the default value of
  UpdateHostKeys to Yes (unless VerifyHostKeyDNS is enabled).
  This makes ssh update the known_hosts stored keys with all
  published versions by the server (after it's authenticated
  with an existing key), which will allow to identify the
  server with a different key if the existing key is considered
  insecure at some point in the future (bsc#1222831).
  * 0001-upstream-enable-UpdateHostkeys-by-default-when-the.patch
  * 0002-upstream-disable-UpdateHostkeys-by-default-if.patch</changelog>
</package>
<package pkgid="9032de71e0e75bc38314d7318bbee57a365aa1ac31114b1c039f85af93171183" name="openssl-1_1" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.19.1"/>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
</package>
<package pkgid="0cc8b2f67ff94cbc6e0526a898b165c4e0665f220f503152be1e0e4375b0c6f5" name="openssl-1_1" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150500.17.19.1"/>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
</package>
<package pkgid="a71cf6cb9b91442ae5dc138421db7a3543a922dccbb02a8978b06e9fb8a451cb" name="openssl-1_1" arch="src">
  <version epoch="0" ver="1.1.1l" rel="150500.17.19.1"/>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
</package>
<package pkgid="0278e98c4f9029345ff0e764315524f3ddc993e30ec6f1c59db6958d66a614dc" name="openssl-1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.19.1"/>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
</package>
<package pkgid="40f40b5d281f13dcebfe4860cfc400736b665b13d1734d269c906909172b324f" name="openssl-1_1" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.22.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
</package>
<package pkgid="156838d3f0c2a9499a86c7ecadb3b0c3c835db82991e608fc84869e6902e138f" name="openssl-1_1" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150500.17.22.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
</package>
<package pkgid="b935e314f40cb22d07b59e3f55abbdf57e2bcdd52ca79f3d481dacdbcf714792" name="openssl-1_1" arch="src">
  <version epoch="0" ver="1.1.1l" rel="150500.17.22.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
</package>
<package pkgid="cf74dd0a770c8f9c0a2efbd753d48d80ab39a0c36ae9f536da35a0610864026d" name="openssl-1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.22.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
</package>
<package pkgid="500ce27948aecfa4a935008f4852b413d68f0a7c2695e4b704b14adb4e1d11b1" name="openssl-1_1" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.25.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
</package>
<package pkgid="257be61328e181070970bde83cf901b8765edf932ed3ca02cf206b391507299b" name="openssl-1_1" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150500.17.25.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
</package>
<package pkgid="bcb90dc5859b5262b9bc64f1a48c88dd0bff59600ee785d0614ed27c78db9170" name="openssl-1_1" arch="src">
  <version epoch="0" ver="1.1.1l" rel="150500.17.25.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
</package>
<package pkgid="f5589826153cf13a4918d82e4aadbb48082997822f9f8891c6afd988f6b8c3bf" name="openssl-1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.25.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
</package>
<package pkgid="0b61a06dc3ba3949f7f28df0c64d0fe3b1ee889f7fc62d45516b88ab885fdad9" name="openssl-1_1" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.28.2"/>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1714996800">- Security fix: [bsc#1222548, CVE-2024-2511]
  * Fix unconstrained session cache growth in TLSv1.3
  * Add openssl-CVE-2024-2511.patch</changelog>
</package>
<package pkgid="f629a37b3ddcba843b37aa081156aa3164f1b2887238d76dbd4f9b30e8d2149c" name="openssl-1_1" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150500.17.28.2"/>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1714996800">- Security fix: [bsc#1222548, CVE-2024-2511]
  * Fix unconstrained session cache growth in TLSv1.3
  * Add openssl-CVE-2024-2511.patch</changelog>
</package>
<package pkgid="37d390ca3408cc0bcf4b43ebb6b0183f21e1c6789cac98c44222b63cbfdc3ad6" name="openssl-1_1" arch="src">
  <version epoch="0" ver="1.1.1l" rel="150500.17.28.2"/>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1714996800">- Security fix: [bsc#1222548, CVE-2024-2511]
  * Fix unconstrained session cache growth in TLSv1.3
  * Add openssl-CVE-2024-2511.patch</changelog>
</package>
<package pkgid="308621e25884d6849c3eb2ffce79eaff6bd76983ddc4f07d615d0f4e529176ea" name="openssl-1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.28.2"/>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1714996800">- Security fix: [bsc#1222548, CVE-2024-2511]
  * Fix unconstrained session cache growth in TLSv1.3
  * Add openssl-CVE-2024-2511.patch</changelog>
</package>
<package pkgid="dc030c67e1c1eee3cc27ee0b982c6597bd5b4cd0c1efbbd40f3609a9854fdb99" name="openssl-1_1" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.31.1"/>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1714996800">- Security fix: [bsc#1222548, CVE-2024-2511]
  * Fix unconstrained session cache growth in TLSv1.3
  * Add openssl-CVE-2024-2511.patch</changelog>
  <changelog author="psimons@suse.com" date="1717675200">- Apply "openssl-CVE-2024-4741.patch" to fix a use-after-free
  security vulnerability. Calling the function SSL_free_buffers()
  potentially caused memory to be accessed that was previously
  freed in some situations and a malicious attacker could attempt
  to engineer a stituation where this occurs to facilitate a
  denial-of-service attack. [CVE-2024-4741, bsc#1225551]</changelog>
</package>
<package pkgid="96ed9a972dcde811086e1b0b0f2a99f0a3f638300b4ce87b6c4067d6aa45ec6c" name="openssl-1_1" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150500.17.31.1"/>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1714996800">- Security fix: [bsc#1222548, CVE-2024-2511]
  * Fix unconstrained session cache growth in TLSv1.3
  * Add openssl-CVE-2024-2511.patch</changelog>
  <changelog author="psimons@suse.com" date="1717675200">- Apply "openssl-CVE-2024-4741.patch" to fix a use-after-free
  security vulnerability. Calling the function SSL_free_buffers()
  potentially caused memory to be accessed that was previously
  freed in some situations and a malicious attacker could attempt
  to engineer a stituation where this occurs to facilitate a
  denial-of-service attack. [CVE-2024-4741, bsc#1225551]</changelog>
</package>
<package pkgid="b53eb0b115197553f746a8c134bba91246eafc8fcbf5276e519ed77ce6600630" name="openssl-1_1" arch="src">
  <version epoch="0" ver="1.1.1l" rel="150500.17.31.1"/>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1714996800">- Security fix: [bsc#1222548, CVE-2024-2511]
  * Fix unconstrained session cache growth in TLSv1.3
  * Add openssl-CVE-2024-2511.patch</changelog>
  <changelog author="psimons@suse.com" date="1717675200">- Apply "openssl-CVE-2024-4741.patch" to fix a use-after-free
  security vulnerability. Calling the function SSL_free_buffers()
  potentially caused memory to be accessed that was previously
  freed in some situations and a malicious attacker could attempt
  to engineer a stituation where this occurs to facilitate a
  denial-of-service attack. [CVE-2024-4741, bsc#1225551]</changelog>
</package>
<package pkgid="e00988b6ff03b7d985fa2c005acb2249a188e049daf3a349f2a0d36c37be48fb" name="openssl-1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.31.1"/>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1714996800">- Security fix: [bsc#1222548, CVE-2024-2511]
  * Fix unconstrained session cache growth in TLSv1.3
  * Add openssl-CVE-2024-2511.patch</changelog>
  <changelog author="psimons@suse.com" date="1717675200">- Apply "openssl-CVE-2024-4741.patch" to fix a use-after-free
  security vulnerability. Calling the function SSL_free_buffers()
  potentially caused memory to be accessed that was previously
  freed in some situations and a malicious attacker could attempt
  to engineer a stituation where this occurs to facilitate a
  denial-of-service attack. [CVE-2024-4741, bsc#1225551]</changelog>
</package>
<package pkgid="dda7988975bee0a01e45db9d1e44d88ed64c98797c2c68741c211c1bac7f3ba5" name="openssl-1_1" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.34.1"/>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1714996800">- Security fix: [bsc#1222548, CVE-2024-2511]
  * Fix unconstrained session cache growth in TLSv1.3
  * Add openssl-CVE-2024-2511.patch</changelog>
  <changelog author="psimons@suse.com" date="1717675200">- Apply "openssl-CVE-2024-4741.patch" to fix a use-after-free
  security vulnerability. Calling the function SSL_free_buffers()
  potentially caused memory to be accessed that was previously
  freed in some situations and a malicious attacker could attempt
  to engineer a stituation where this occurs to facilitate a
  denial-of-service attack. [CVE-2024-4741, bsc#1225551]</changelog>
  <changelog author="pmonreal@suse.com" date="1721649600">- Security fix: [bsc#1227138, CVE-2024-5535]
  * SSL_select_next_proto buffer overread
  * Add openssl-CVE-2024-5535.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1721649601">- Build with no-afalgeng [bsc#1226463]</changelog>
</package>
<package pkgid="916e4eec7b37a1d8812aba31497b32a248f48836c5d84f809a3d807752639819" name="openssl-1_1" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150500.17.34.1"/>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1714996800">- Security fix: [bsc#1222548, CVE-2024-2511]
  * Fix unconstrained session cache growth in TLSv1.3
  * Add openssl-CVE-2024-2511.patch</changelog>
  <changelog author="psimons@suse.com" date="1717675200">- Apply "openssl-CVE-2024-4741.patch" to fix a use-after-free
  security vulnerability. Calling the function SSL_free_buffers()
  potentially caused memory to be accessed that was previously
  freed in some situations and a malicious attacker could attempt
  to engineer a stituation where this occurs to facilitate a
  denial-of-service attack. [CVE-2024-4741, bsc#1225551]</changelog>
  <changelog author="pmonreal@suse.com" date="1721649600">- Security fix: [bsc#1227138, CVE-2024-5535]
  * SSL_select_next_proto buffer overread
  * Add openssl-CVE-2024-5535.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1721649601">- Build with no-afalgeng [bsc#1226463]</changelog>
</package>
<package pkgid="c4121231d46bf23002fe76f284b95c15409a68d2e3f4e5bc4ef13bf4c8e6f87e" name="openssl-1_1" arch="src">
  <version epoch="0" ver="1.1.1l" rel="150500.17.34.1"/>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1714996800">- Security fix: [bsc#1222548, CVE-2024-2511]
  * Fix unconstrained session cache growth in TLSv1.3
  * Add openssl-CVE-2024-2511.patch</changelog>
  <changelog author="psimons@suse.com" date="1717675200">- Apply "openssl-CVE-2024-4741.patch" to fix a use-after-free
  security vulnerability. Calling the function SSL_free_buffers()
  potentially caused memory to be accessed that was previously
  freed in some situations and a malicious attacker could attempt
  to engineer a stituation where this occurs to facilitate a
  denial-of-service attack. [CVE-2024-4741, bsc#1225551]</changelog>
  <changelog author="pmonreal@suse.com" date="1721649600">- Security fix: [bsc#1227138, CVE-2024-5535]
  * SSL_select_next_proto buffer overread
  * Add openssl-CVE-2024-5535.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1721649601">- Build with no-afalgeng [bsc#1226463]</changelog>
</package>
<package pkgid="85fdf8c463df4e43e4c1a77ff4dfba291f3677d849d25e90c58b7a9781848267" name="openssl-1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.34.1"/>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1714996800">- Security fix: [bsc#1222548, CVE-2024-2511]
  * Fix unconstrained session cache growth in TLSv1.3
  * Add openssl-CVE-2024-2511.patch</changelog>
  <changelog author="psimons@suse.com" date="1717675200">- Apply "openssl-CVE-2024-4741.patch" to fix a use-after-free
  security vulnerability. Calling the function SSL_free_buffers()
  potentially caused memory to be accessed that was previously
  freed in some situations and a malicious attacker could attempt
  to engineer a stituation where this occurs to facilitate a
  denial-of-service attack. [CVE-2024-4741, bsc#1225551]</changelog>
  <changelog author="pmonreal@suse.com" date="1721649600">- Security fix: [bsc#1227138, CVE-2024-5535]
  * SSL_select_next_proto buffer overread
  * Add openssl-CVE-2024-5535.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1721649601">- Build with no-afalgeng [bsc#1226463]</changelog>
</package>
<package pkgid="e234a0c57f6ec0a2ca68c7f19389b9062673d274004506073e276a15aac183c3" name="openssl-ibmca" arch="s390x">
  <version epoch="0" ver="2.4.0" rel="150500.6.3.1"/>
  <changelog author="mpost@suse.com" date="1535716800">- Added the following patches for bsc#1097463
  * openssl-ibmca-sles15-Switch-to-ibmca.so-filename-to-allow-a-standalone-us.patch
  * openssl-ibmca-sles15-Fix-lib-name-in-test-code.patch
  * openssl-ibmca-sles15-Update-lib-name-in-documentation.patch</changelog>
  <changelog author="mpost@suse.com" date="1542196800">- Upgraded to version 2.0.0 (Fate#325688)
  * openssl-ibmca 2.0.0
    Add ECC support.
    Add check and distcheck make-targets.
    Project cleanup, code was broken into multiple files and coding style cleanup.
    Improvements to compat macros for openssl.
    Don't disable libica sw fallbacks.
    Fix dlclose logic.
  * openssl-ibmca 1.4.1
    Fix structure size for aes-256-ecb/cbc/cfb/ofb
    Update man page
    Switch to ibmca.so filename to allow standalone use
    Switch off Libica fallback mode if available
    Make sure ibmca_init only runs once
    Provide simple macro for DEBUG_PRINTF possibility
    Cleanup and slight rework of function set_supported_meths
- Did some cleanup to the spec file, based on spec-cleanup.
- Removed the following obsolete patches:
  * openssl-ibmca-sles15-Switch-to-ibmca.so-filename-to-allow-a-standalone-us.patch
  * openssl-ibmca-sles15-Fix-lib-name-in-test-code.patch
  * openssl-ibmca-sles15-Update-lib-name-in-documentation.patch</changelog>
  <changelog author="mpost@suse.com" date="1542283200">- Upgraded to version 2.0.1 (Fate#325688)
  * openssl-ibmca 2.0.1
    Dont fail when a libica symbol cannot be resolved.
- Made multiple changes to the spec file based on spec-cleaner output.</changelog>
  <changelog author="mpost@suse.com" date="1543320000">- Upgraded to version 2.0.2 (Fate#325688)
  * openssl-ibmca 2.0.2
    Fix doing rsa-me, altough rsa-crt would be possible.</changelog>
  <changelog author="mpost@suse.com" date="1561723200">- Added openssl-ibmca-sles15sp1-Move-ERR_load-unload-to-bind_helper-resp-destroy-fun.patch
  An Apache HTTP Server was set up with mod_ssl and the openssl
  ibmca engine using libica and a CEX6A card. Whenever a worker
  process is cleaned up a segmentation fault occurs.
  (bsc#1138517)</changelog>
  <changelog author="mpost@suse.com" date="1566993600">- Upgraded to version 2.0.3 (jsc#SLE-6123, jsc#SLE-6424)
  * openssl-ibmca 2.0.3
    Add MSA9 CPACF support for ECDSA sign/verify
- Dropped obsolete openssl-ibmca-sles15sp1-Move-ERR_load-unload-to-bind_helper-resp-destroy-fun.patch
- Changed the ExclusiveArch directive to include s390x only.
- The code in e_ibmca.c does a dlopen for libica.so.3, instead of
  linking against the shared library. As a result, if the package
  containing libica.so.3 isn't installed, problems occur. Added
  a "Requires: libica3" to the spec file to fix this. (bsc#1142286)
- Made a couple of changes to the spec file based on the output
  from spec-cleaner.</changelog>
  <changelog author="mpost@suse.com" date="1568116800">- Upgrade to version 2.1.0 (jsc#SLE-7852, jsc#SLE-7882)
  Add MSA9 CPACF support for X25519, X448, Ed25519 and Ed448</changelog>
  <changelog author="mpost@suse.com" date="1600257600">- Upgrade to version 2.1.1 (jsc#SLE-13709)
  * Bug fixes</changelog>
  <changelog author="mpost@suse.com" date="1631880000">- Upgraded to version 2.2.1 (jsc#SLE-18333)
  * openssl-ibmca 2.2.1
    Bug fixes
  * openssl-ibmca 2.2.0
    Implement fallbacks based on OpenSSL
    Disable software fallbacks from libica
    Allow to specify default library (libica vs. libica-cex) to use
    Provide "libica" engine ctrl to switch library at load time
    Update README.md
    Remove libica link dependency
    Generate sample configuration files from system configuration
    Restructure registration global data
  * openssl-ibmca 2.1.3
    Bug fix
  * openssl-ibmca 2.1.2
    Bug fixes
- Modified spec file to
  * Define a global variable enginesdir the same was as IBM does
    instead of _ENGINE_DIR as we had been doing.
  * Implemented %make_build macro according to spec-cleaner
  * Changed the package description to match IBM's.
  * Removed the redundant "autoreconf --force --install"</changelog>
  <changelog author="mpost@suse.com" date="1647345600">- Completely revamped the postinstall scriptlet so that it doesn't
  need to know or care about how many lines are in either
  /etc/ssl/openssl.cnf, or the sample file at
  /usr/share/doc/packages/openssl-ibmca/openssl.cnf.sample
  We're now using the ".include" directive for the openssl.cnf
  file, and only modifying that file the minimum necessary to
  implement the change. (bsc#1004463)</changelog>
  <changelog author="mpost@suse.com" date="1664884800">- Upgraded to version 2.3.1 (jsc#PED-597)
  * openssl-ibmca 2.3.1
  - Adjustments for libica 4.1.0
  * openssl-ibmca 2.3.0
  - First version including the provider
  - Fix for engine build without OpenSSL 3.0 sources
  * openssl-ibmca 2.2.3
  - Fix PKEY segfault with OpenSSL 3.0
  * openssl-ibmca 2.2.2
  - Fix tests with OpenSSL 3.0
  - Build against libica 4.0
- Removed a Requires for libica from the specfile.
- Removed the obsolete baselibs.conf file</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1678449600">- Updated .spec file removed '#' from the line containing
  'sed -e 's/^dynamic_path/#dynamic_path/' (bsc#1209038)
- Added in %files
  * /usr/lib64/engines-3/ibmca-provider.la
  * /usr/lib64/engines-3/ibmca-provider.so</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1680696000">- Upgraded openssl-ibmca to version 2.4.0 (bsc#1210059)
  * openssl-ibmca 2.4.0
  - Provider: Adjustments for OpenSSL versions 3.1 and 3.2
  - Provider: Support RSA blinding
  - Provider: Constant-time fixes for RSA PKCS#1 v1.5 and OAEP padding
  - Provider: Support "implicit rejection" option for RSA PKCS#1 v1.5 padding
  - Provider: Adjustments in OpenSSL config generator and example configs
  - Engine: EC: Cache ICA key in EC_KEY object (performance improvement)
  - Engine: Enable RSA blinding</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1681992000">- Applies a patch (bsc#1210359)
  * openssl-ibmca-engine-noregister.patch
- Updated the '#dynamic_path' line, as it was before, with the comment '#'.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1682424000">- Added dependency on libica4 (bsc#1209038)
  * BuildRequires and Requires statements in .spec file for libica4</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1682596800">- Updated the .spec file as follow:
  * BuildRequires:  libica-devel &gt;= 4.0.0
  * BuildRequires:  libica-tools &gt;= 4.0.0</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1683028800">- Updated the .spec file
  * uses a flag openssl3 (1 or 0) to include or not the openssl3 libraries</changelog>
  <changelog author="otto.hollmann@suse.com" date="1683201600">- Add multibuild flavor to provide library compiled against openssl-3
  [bsc#1207472]</changelog>
  <changelog author="pmonreal@suse.com" date="1687435200">- Adjust dlopen() for the new ibmca-openssl3.so for the multibuild
  flavor. This allows to install in parallel a version compiled
  against openssl 1.1.1 and another with openssl 3.0. [bsc#1207472]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1693569600">- Adjust configure and Makefile to require libica-openssl3 when
  building wiht openssl3 flavor. [bsc#1207472]
  * Add openssl3-rename-libica-files.patch</changelog>
</package>
<package pkgid="4fcf427a662e9687af26a6d8007fd6007aa440beaec5bff644a460cbdeba48ec" name="openssl-ibmca" arch="src">
  <version epoch="0" ver="2.4.0" rel="150500.6.3.1"/>
  <changelog author="mpost@suse.com" date="1535716800">- Added the following patches for bsc#1097463
  * openssl-ibmca-sles15-Switch-to-ibmca.so-filename-to-allow-a-standalone-us.patch
  * openssl-ibmca-sles15-Fix-lib-name-in-test-code.patch
  * openssl-ibmca-sles15-Update-lib-name-in-documentation.patch</changelog>
  <changelog author="mpost@suse.com" date="1542196800">- Upgraded to version 2.0.0 (Fate#325688)
  * openssl-ibmca 2.0.0
    Add ECC support.
    Add check and distcheck make-targets.
    Project cleanup, code was broken into multiple files and coding style cleanup.
    Improvements to compat macros for openssl.
    Don't disable libica sw fallbacks.
    Fix dlclose logic.
  * openssl-ibmca 1.4.1
    Fix structure size for aes-256-ecb/cbc/cfb/ofb
    Update man page
    Switch to ibmca.so filename to allow standalone use
    Switch off Libica fallback mode if available
    Make sure ibmca_init only runs once
    Provide simple macro for DEBUG_PRINTF possibility
    Cleanup and slight rework of function set_supported_meths
- Did some cleanup to the spec file, based on spec-cleanup.
- Removed the following obsolete patches:
  * openssl-ibmca-sles15-Switch-to-ibmca.so-filename-to-allow-a-standalone-us.patch
  * openssl-ibmca-sles15-Fix-lib-name-in-test-code.patch
  * openssl-ibmca-sles15-Update-lib-name-in-documentation.patch</changelog>
  <changelog author="mpost@suse.com" date="1542283200">- Upgraded to version 2.0.1 (Fate#325688)
  * openssl-ibmca 2.0.1
    Dont fail when a libica symbol cannot be resolved.
- Made multiple changes to the spec file based on spec-cleaner output.</changelog>
  <changelog author="mpost@suse.com" date="1543320000">- Upgraded to version 2.0.2 (Fate#325688)
  * openssl-ibmca 2.0.2
    Fix doing rsa-me, altough rsa-crt would be possible.</changelog>
  <changelog author="mpost@suse.com" date="1561723200">- Added openssl-ibmca-sles15sp1-Move-ERR_load-unload-to-bind_helper-resp-destroy-fun.patch
  An Apache HTTP Server was set up with mod_ssl and the openssl
  ibmca engine using libica and a CEX6A card. Whenever a worker
  process is cleaned up a segmentation fault occurs.
  (bsc#1138517)</changelog>
  <changelog author="mpost@suse.com" date="1566993600">- Upgraded to version 2.0.3 (jsc#SLE-6123, jsc#SLE-6424)
  * openssl-ibmca 2.0.3
    Add MSA9 CPACF support for ECDSA sign/verify
- Dropped obsolete openssl-ibmca-sles15sp1-Move-ERR_load-unload-to-bind_helper-resp-destroy-fun.patch
- Changed the ExclusiveArch directive to include s390x only.
- The code in e_ibmca.c does a dlopen for libica.so.3, instead of
  linking against the shared library. As a result, if the package
  containing libica.so.3 isn't installed, problems occur. Added
  a "Requires: libica3" to the spec file to fix this. (bsc#1142286)
- Made a couple of changes to the spec file based on the output
  from spec-cleaner.</changelog>
  <changelog author="mpost@suse.com" date="1568116800">- Upgrade to version 2.1.0 (jsc#SLE-7852, jsc#SLE-7882)
  Add MSA9 CPACF support for X25519, X448, Ed25519 and Ed448</changelog>
  <changelog author="mpost@suse.com" date="1600257600">- Upgrade to version 2.1.1 (jsc#SLE-13709)
  * Bug fixes</changelog>
  <changelog author="mpost@suse.com" date="1631880000">- Upgraded to version 2.2.1 (jsc#SLE-18333)
  * openssl-ibmca 2.2.1
    Bug fixes
  * openssl-ibmca 2.2.0
    Implement fallbacks based on OpenSSL
    Disable software fallbacks from libica
    Allow to specify default library (libica vs. libica-cex) to use
    Provide "libica" engine ctrl to switch library at load time
    Update README.md
    Remove libica link dependency
    Generate sample configuration files from system configuration
    Restructure registration global data
  * openssl-ibmca 2.1.3
    Bug fix
  * openssl-ibmca 2.1.2
    Bug fixes
- Modified spec file to
  * Define a global variable enginesdir the same was as IBM does
    instead of _ENGINE_DIR as we had been doing.
  * Implemented %make_build macro according to spec-cleaner
  * Changed the package description to match IBM's.
  * Removed the redundant "autoreconf --force --install"</changelog>
  <changelog author="mpost@suse.com" date="1647345600">- Completely revamped the postinstall scriptlet so that it doesn't
  need to know or care about how many lines are in either
  /etc/ssl/openssl.cnf, or the sample file at
  /usr/share/doc/packages/openssl-ibmca/openssl.cnf.sample
  We're now using the ".include" directive for the openssl.cnf
  file, and only modifying that file the minimum necessary to
  implement the change. (bsc#1004463)</changelog>
  <changelog author="mpost@suse.com" date="1664884800">- Upgraded to version 2.3.1 (jsc#PED-597)
  * openssl-ibmca 2.3.1
  - Adjustments for libica 4.1.0
  * openssl-ibmca 2.3.0
  - First version including the provider
  - Fix for engine build without OpenSSL 3.0 sources
  * openssl-ibmca 2.2.3
  - Fix PKEY segfault with OpenSSL 3.0
  * openssl-ibmca 2.2.2
  - Fix tests with OpenSSL 3.0
  - Build against libica 4.0
- Removed a Requires for libica from the specfile.
- Removed the obsolete baselibs.conf file</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1678449600">- Updated .spec file removed '#' from the line containing
  'sed -e 's/^dynamic_path/#dynamic_path/' (bsc#1209038)
- Added in %files
  * /usr/lib64/engines-3/ibmca-provider.la
  * /usr/lib64/engines-3/ibmca-provider.so</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1680696000">- Upgraded openssl-ibmca to version 2.4.0 (bsc#1210059)
  * openssl-ibmca 2.4.0
  - Provider: Adjustments for OpenSSL versions 3.1 and 3.2
  - Provider: Support RSA blinding
  - Provider: Constant-time fixes for RSA PKCS#1 v1.5 and OAEP padding
  - Provider: Support "implicit rejection" option for RSA PKCS#1 v1.5 padding
  - Provider: Adjustments in OpenSSL config generator and example configs
  - Engine: EC: Cache ICA key in EC_KEY object (performance improvement)
  - Engine: Enable RSA blinding</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1681992000">- Applies a patch (bsc#1210359)
  * openssl-ibmca-engine-noregister.patch
- Updated the '#dynamic_path' line, as it was before, with the comment '#'.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1682424000">- Added dependency on libica4 (bsc#1209038)
  * BuildRequires and Requires statements in .spec file for libica4</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1682596800">- Updated the .spec file as follow:
  * BuildRequires:  libica-devel &gt;= 4.0.0
  * BuildRequires:  libica-tools &gt;= 4.0.0</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1683028800">- Updated the .spec file
  * uses a flag openssl3 (1 or 0) to include or not the openssl3 libraries</changelog>
  <changelog author="otto.hollmann@suse.com" date="1683201600">- Add multibuild flavor to provide library compiled against openssl-3
  [bsc#1207472]</changelog>
  <changelog author="pmonreal@suse.com" date="1687435200">- Adjust dlopen() for the new ibmca-openssl3.so for the multibuild
  flavor. This allows to install in parallel a version compiled
  against openssl 1.1.1 and another with openssl 3.0. [bsc#1207472]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1693569600">- Adjust configure and Makefile to require libica-openssl3 when
  building wiht openssl3 flavor. [bsc#1207472]
  * Add openssl3-rename-libica-files.patch</changelog>
</package>
<package pkgid="104e615b04e2111e0e76fcd676370e50b49d1a432c068925ce381fb166169451" name="orc" arch="src">
  <version epoch="0" ver="0.4.28" rel="150000.3.6.1"/>
  <changelog author="schwab@linux-m68k.org" date="1347883200">- ppc64.patch: Add support for PowerPC64
- altivec.patch: Fix altivec implementation of cmpltf and cmplef operations
- Reenable check on ppc and ppc64</changelog>
  <changelog author="dimstar@opensuse.org" date="1368619200">- Update to version 0.4.17:
  + Merged known distro patches.
  + Added MIPS backend.
  + Disabled ARM backend because of poor coverage.
  + Added bytecode parsing and writing. This can be used instead of
    manual creation of OrcPrograms.
- Drop altivec.patch and ppc64.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1387540800">- Update to version 0.4.18:
  + Important bugfix in reading constants from bytecode.
  + Documentation and code cleanup.
  + Fix cache flushing on iOS.</changelog>
  <changelog author="idonmez@suse.com" date="1404475200">- Update to version 0.4.21
  + Fix memory leaks
  + Fix list corruption when splitting code memory chunks,
    causing crashes when allocating a lot of code memory and trying
    to free it later
  + Various compiler warnings, coverity warnings and static code
    analysis fixes
  + Documentation fix for mulhsw, mulhuw
- Add orc-disable-test-limits.patch to disable test-limits test,
  it only works on x86-64</changelog>
  <changelog author="zaitor@opensuse.org" date="1410955200">- Update to version 0.4.22:
  + Handle NOCONFIGURE=1 in autogen.sh.
  + Some memory leak fixes in the compiler.
  + Fixes for compiler warnings on Win64.
  + Properly detect CPU features on Android in non-debug build.
  + Use Android logging system instead of stderr for debug output.</changelog>
  <changelog author="zaitor@opensuse.org" date="1411473600">- Temp-disable testsuite on i586 until we get the random fails
  sorted out with upstream.
- Drop orc-disable-test-limits.patch, and autoreconf call, and
  corresponding BuildRequires, as testsuite is disabled, and patch
  needing them is dropped.</changelog>
  <changelog author="dimstar@opensuse.org" date="1412856000">- Add xz BuildRequires for openSUSE &lt; 11.3 (and thus also SLE11).</changelog>
  <changelog author="dimstar@opensuse.org" date="1412856001">- Fix version dependency for gtk-doc (min 1.12).
- Disable building of gtk-doc for SLE11, where this version of
  gtk-doc is not available (by means of bcond_with/without).
  The pre-built documentation, as shipped in the tarball will be
  installed in this case.</changelog>
  <changelog author="zaitor@opensuse.org" date="1419595200">- Update to version 0.4.23:
  + Various improvements to the NEON backend to bring it closer to
    the SSE backend.
  + Add support for setting a custom backup function.
  + Preserve NEON/VFP registers across subroutines.
  + Fix 64 bit parameter loading on big-endian systems.
  + Improved implementations for various opcodes.
  + Various improvements and fixes to constants handling.
  + Avoid some undefined operations on signed integers.
  + Prefer user specific directories over global ones for
    intermediate files to prevent name collisions.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425038400">- disable make check for ppc64le archi
  would need changes in orcprogram-altivec.c
  and define of HAVE_POWERPC</changelog>
  <changelog author="zaitor@opensuse.org" date="1436443200">- Update to version 0.4.24:
  + Only reuse constants of the same size and value.
  + Fix reading of .orc files with Windows line endings on Windows.
  + Fix out of bounds array access in the tests.
  + Remove duplicate code path in orcc.
  + Put a limit to the memcpy test.
  + Fix mmap leak on error path.</changelog>
  <changelog author="dmueller@suse.com" date="1443441600">- disable testsuite on aarch64</changelog>
  <changelog author="zaitor@opensuse.org" date="1457179200">- Update to version 0.4.25:
  + compiler: also prefer the backup function when no target,
    instead of trying to use emulation which is usually slower.
  + executor: fix load of parameters smaller than 64 bits, fixing
    crashes on ldresnearb and friends in emulated code.
  + test-limits: improve test without target.
  + Only check for Android's liblog on Android targets, so we don't
    accidentally pick up another liblog that may exist elsewhere.
  + Don't require libtool for uninstalled setups (-uninstalled
    pkg-config file).
  + Make -Bsymbolic check in configure work with clang.
  + Coverity code analyser fixes.
  + docs: update generated opcode tables.
  + Add orc_version_string() function and make orcc check the
    liborc that is being picked up to make sure the right lib is
    being used.</changelog>
  <changelog author="zaitor@opensuse.org" date="1472644800">- Update to version 0.4.26:
  + Use 64 bit arithmetic to increment the stride if needed.
  + Fix generation of ModR/M / SIB bytes for the EBP, R12, R13
    registers on X86/X86-64.
  + Fix test_parse unit test if no executable backend is available.
  + Add orc-test path to the -uninstalled .pc file.
  + Fix compiler warnings in the tests on OS X.
- Add pkgconfig(glib-2.0) BuildRequires, the build looks for it.
- Remove obsolete bconds, they were only there for now obsolete
  versions of openSUSE.
- Drop explicit xz BuildRequires: No longer needed.
- Enable testsuite for all arches again.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486900800">- Disable make check for all arches except x86_64 again.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500292800">- Update to version 0.4.27:
  + sse: preserve non volatile sse registers, needed for MSVC.
  + x86: don't hard-code register size to 0 in orc_x86_emit_*()
    funcs.
  + Fix incorrect asm generation on 64-bit Windows with MSVC.
  + Add support for building using the Meson build system.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504526400">- Switch to the meson build system, which knows how to cope with
  GTK 1.26+:
  + Use the tarball published on github (the automake bootstrapped
    one does not contain the meson build system).
  + Add meson BuildRequires and switch configure/make/make_install
    macros to the relevant meson/meson_build/meson_install
    variants.</changelog>
  <changelog author="zaitor@opensuse.org" date="1511179200">- Update to version 0.4.28:
  + Numerous undefined behaviour fixes.
  + Ability to disable tests.
  + Fix meson dist behaviour.</changelog>
  <changelog author="idonmez@suse.com" date="1555502400">- Add relax-tests.patch to increase test timeouts to 2 minutes,
  also limit the max value for memcpy_speed.c test bsc#1130085</changelog>
  <changelog author="alarrosa@suse.com" date="1721649600">- Backport patch from upstream to fix a stack-based buffer overflow
  in the Orc compiler when formatting error messages (bsc#1228184,
  CVE-2024-40897):
  * 0001-Use-vasprintf-if-available-for-error-messages-and.patch
  * 0002-Fix-build.patch</changelog>
</package>
<package pkgid="28d11bd7a2c580eec3cf834e834eaa05f4b9c29f07ebae64e628734360eac66f" name="p11-kit" arch="aarch64">
  <version epoch="0" ver="0.23.22" rel="150500.8.3.1"/>
  <changelog author="lnussel@suse.de" date="1413201600">- remove patches:
  * trust-Print-label-of-certificate-when-complaining-.patch
  * trust-Dont-use-invalid-public-keys-for-looking-up-.patch
- new version 0.20.7 (stable)
  * New public pkcs11x.h header containing extensions [fdo#83495]
  * Export necessary defines to lookup attached extensions [fdo#83495]
  * Build fixes
- new version 0.20.6 (stable)
  * Make the p11-kit-proxy.so module respect critical = no [fdo#83651]
  * Build fix for FreeBSD [fdo#75674]
- new version 0.20.5 (stable)
  * Don't use invalid keys for looking up stapled extensions [fdo#82328]
  * Better error messages when invalid certificate extensions
  * Fix parsing of some odd OpenSSL TRUSTED CERTIFICATE files
  * Fix some leaks, and memory issues
  * Silence some clang scanner warnings
- new version 0.20.4 (stable)
  * Don't complain about C_Finalize after a fork
  * Fix typo</changelog>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Update to version 0.23.1 (stable)
  * Use new PKCS#11 URI draft fields for URIs [fdo#86474 fdo#87582]
  * Add pem-directory-hash extract format
  * Build fixes
- Remove 0001-trust-allow-to-also-add-openssl-style-hashes-to-pem-d.diff;
  fixed on upstream release
- Remove autoconf, automake and libtool require; unneeded dependencies
- Add gtk-doc require; needed to build html documentation
- Remove redundant %clean section</changelog>
  <changelog author="mpluskal@suse.com" date="1454932800">- Update to 0.23.2
  * Fix forking issues with libffi
  * Fix various crashes in corner cases
  * Updated translations
  * Build fixes
- Make building more verbose
- Enable tests
- Small spec file cleanup with spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- 32-bit compatibility fixes:
  * Add PKCS11 module to p11-kit-32bit (bsc#996047#c39)
  * Add p11-kit-nss-trust-32bit NSS module
  * Fix potential bi-arch issue with private binaries
    (fdo#98817, p11-kit-biarch.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="lnussel@suse.de" date="1573819200">- support loading NSS attribute CKA_NSS_MOZILLA_CA_POLICY so Firefox
  detects built in certificates (boo#1154871,
  0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch,
  0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch)</changelog>
  <changelog author="lnussel@suse.de" date="1577102400">- Also build documentation (boo#1013125)</changelog>
  <changelog author="scabrero@suse.de" date="1628683200">- Update to version 0.23.22 (bsc#1180064, bsc#1180065, bsc#1180066):
  * Fix memory-safety issues that affect the RPC protocol
  (CVE-2020-29361, CVE-2020-29362, and CVE-2020-29363), discovered
  and fixed by David Cook
  * anchor: Prefer persistent format when storing anchor [PR#329]
  * common: Fix infloop in p11_path_build [PR#326, PR#327]
  * proxy: C_CloseAllSessions: Make sure that calloc args are non-zero [PR#325]
  * common: Check for a NULL locale before freeing it [PR#321]
  * Build and test fixes [PR#313, PR#315, PR#317, PR#318, PR#319, PR#323,
  PR#330, PR#333, PR#334, PR#335, PR#338, PR#339]
- Changes for version 0.23.21
  * proxy: Do not assign duplicate slot IDs [PR#282]
  * common: Get program name based on executable path if possible [PR#307]
  * anchor: Exit with non-zero code, if any error occurs [PR#304]
  * Build and test fixes [PR#283, PR#290, PR#291, PR#292, PR#296, PR#299,
  PR#305, PR#306, PR#309, PR#311]
- Changes for version 0.23.20:
  * Revert "Fix RPC when length-s are 0" changes [PR#276]
- Changes for version 0.23.19:
  * common: add Russian PKCS#11 extensions to pkcs11x.h header [PR#255]
  * Add simple bash completion for provided commands [PR#258]
  * Unbreak list matching in enable-in and disable-in [PR#262]
  * Fix RPC when length-s are 0 [PR#259]
  * rpc: Add vsock transport support [PR#270]
  * trust: Support CKA_NSS_{SERVER,EMAIL}_DISTRUST_AFTER [PR#265]
  * Build fixes [PR#271, PR#272, PR#273, ...]
- Changes for version 0.23.18:
  * rpc: Allow empty CK_DATE value [PR#253]
  * build: Meson fixes [PR#245]
  * build: Adjust feature parity between meson and autotools [PR#247]
- Changes for version 0.23.17:
  * common: Fix uClibc-ng compilation [PR#237]
  * trust: do not allow daylight to invalidate date validation [PR#236]
  * build: Port to meson build system [PR#231, PR#234]
  * rpc: On UNIX wait on condition variable instead of FD if header is for a different thread [PR#232]
  * doc: Add 'server' command in help [PR#229]
  * Build and test fixes [PR#230]
- Changes for version 0.23.16:
  * proxy: Support C_WaitForSlotEvent() if CKF_DONT_BLOCK is specified [PR#225]
  * conf: Ignore user configuration if the program is running as root [PR#226]
  * proxy: Refresh slot list on every C_GetSlotList call [PR#224]
  * modules: Fix index used in call to p11_dict_remove() [PR#219]
  * Fix Win32 p11_dl_error crash [PR#218]
  * modules: check gl.modules before iterates on it when freeing [PR#217]
  * trust: Ignore unreadable content in anchors [PR#215]
  * extract-jks: Prefer _p11_extract_jks_timestamp to SOURCE_DATE_EPOCH [PR#213]
- Changes for version 0.23.15:
  * trust: Improve error handling if backed trust file is corrupted [PR#206]
  * url: Prefer upper-case letters in hex characters when encoding [PR#193]
  * trust/extract-jks.c: also honor SOURCE_DATE_EPOCH time [PR#202]
  * virtual: Prefer fixed closures to libffi closures [PR#196]
  * Fix issues spotted by coverity and cppcheck [PR#194, PR#204]
  * Build and test fixes [PR#164, PR#191, PR#199, PR#201]
- Changes for version 0.23.14:
  * proxy: Avoid invalid memory access when unloading proxy module [PR#180]
  * Update pkcs11 header to allow SoftHSMv2 to compile [PR#181]
  * build: Restore libpthread dependency [PR#183]
  * Build fixes [PR#188]
- Changes for version 0.23.13:
  * server: Enable socket activation through systemd [PR#173]
  * rpc-server: p11_kit_remote_serve_tokens: Allow exporting all modules
    [PR#174]
  * proxy: Fail early if there is no slot mapping [PR#175]
  * Remove hard dependency on libpthread [PR#177]
  * Build fixes [PR#170, PR#176]
- Changes for version 0.23.12
  * Fix compile error when PKCS#11 GNU calling convention is enabled [PR#160]
  * Fix getauxval() and secure_getenv() emulation on macOS and FreeBSD [PR#167]
  * Build and test fixes on macOS [PR#162, PR#168]
- Changes for version 0.23.11
  * trust: Add extractor for edk2/cacerts.bin [PR#139]
  * modules: Add option to control module visibility from proxy [PR#140]
  * trust: Prevent trust module being loaded by proxy module [PR#142]
  * library: Use dedicated locale object for printing error [PR#148]
  * Treat CKR_CRYPTOKI_ALREADY_INITIALIZED correctly [PR#134]
  * Improve const correctness for P11KitUri [PR#152]
  * PKCS#11 URI scheme comparison is now case insensitive [PR#156]
  * Build and test fixes [PR#151, PR#149, PR#141, PR#138, PR#135]
- Changes for version 0.23.10
  * filter: Respect "write-protected" vendor-specific attribute in
    PKCS#11 URI [PR#129]
  * server: Improve shell integration and documentation [PR#107, PR#108]
  * proxy: Reuse existing slot ID mapping in after fork() [PR#120]
  * trust: Forcibly mark "Default Trust" read-only [PR#123]
  * New function p11_kit_override_system_files() which can be used for
    testing [PR#110]
  * trust: Filter out duplicate extensions [PR#69]
  * Update translations [PR#128]
  * Bug fixes [PR#125, PR#126]
- Changes for version 0.23.9
  * Fix p11-kit server regressions [PR#103, PR#104]
  * trust: Respect anyExtendedKeyUsage in CA certificates [PR#99]
  * Build fixes related to reallocarray [PR#96, PR#98, PR#100]
- Changes for version 0.23.8
  * Improve vendor query attributes handling in PKCS#11 URI [PR#92]
  * Add OTP and GOST mechanisms to pkcs11.h [PR#90, PR#91]
  * New envvar P11_KIT_NO_USER_CONFIG to stop looking at user
    configurations [PR#87]
  * Build fixes for Solaris and 32-bit big-endian platforms [PR#81, PR#86]
- Changes for version 0.23.7
  * Fix memory issues with "p11-kit server" [PR#78]
  * Build fixes [PR#77 ...]
- Changes for version 0.23.6
  * Port "p11-kit server" to Windows and portability fixes of the RPC
    protocol [PR#67, PR#72, PR#74]
  * Recover the old behavior of "trust anchor --remove" [PR#70, PR#71]
  * Build fixes [PR#63 ...]
- Changes for version 0.23.5
  * Fix license notice of common/unix-peer.c [PR#58]
  * Remove systemd unit files for now [PR#60]
  * Build fixes for FreeBSD [PR#56]
- Changes for version 0.23.4
  * Recognize query attributes defined in PKCS#11 URI (RFC7512) [PR#31,
    PR#37, PR#52]
  * The trust policy module now recognizes CKA_NSS_MOZILLA_CA_POLICY
    attribute, used by Firefox [#99453, PR#46]
  * Add 'trust dump' command to dump all PKCS#11 objects in the
    persistence format [PR#44]
  * New experimental 'p11-kit server' command that allows PKCS#11
    forwarding through a Unix domain socket.  A client-side module
    p11-kit-client.so is also provided [PR#15]
  * Add systemd unit files for exporting the proxy module through a
    Unix domain socket [PR#35]
  * New P11KitIter API to iterate over slots, tokens, and modules in
    addition to objects [PR#28]
  * libffi dependency is now optional [PR#9]
  * Build fixes for FreeBSD, macOS, and Windows [PR#32, PR#39, PR#45]
- Changes for version 0.23.3
  * Install private executables in libexecdir [fdo#98817]
  * Fix link error of proxy module on macOS [fdo#98022]
  * Use new PKCS#11 URI specification for URIs [fdo#97245]
  * Support x-init-reserved argument of C_Initialize() in remote modules
    [fdo#80519]
  * Incorporate changes from PKCS#11 2.40 specification
  * Bump libtool library version
  * Documentation fixes
  * Build fixes [fdo#87192 ...]
- Move RPM macros to %_rpmmacrodir.
- New server subpackage
- Change keyring to new maintainer Daiki Ueno
- Avoid bareword to fix build failure
- Remove obsolete patches:
  * p11-kit-biarch.patch
  * 0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch
  * 0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch</changelog>
  <changelog author="lnussel@suse.com" date="1674648000">- Backport IBM specific mechanism and attributes (Jira#PED-584)
  0001-Add-IBM-specific-mechanism-and-attributes.patch
  0002-Add-support-for-serializing-CK_ECDH1_DERIVE_PARAMS-m.patch
  0003-client-Allow-zero-part-length-at-C_SignUpdate.patch
  0004-Fix-support-of-CKA_DERIVE_TEMPLATE.patch
  0005-Add-other-SHA-variants-also-for-RSA-and-EC-signature.patch
  0006-Add-support-for-missing-AES-and-DES-DES3-mechanisms.patch
  0007-Add-support-for-MAC-and-HMAC-general-mechanisms.patch
  0008-Add-support-for-CKM_DH_PKCS_DERIVE.patch
  0009-rpc-Handle-special-cases-for-buffer-and-length.patch
  0010-Add-support-for-CKM_AES_CTR.patch
  0011-Add-support-for-CKM_AES_GCM.patch
  0012-common-pkcs11x.h-Support-CRYPTOKI_GNU-for-IBM-vendor.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1698148800">- Ensure that programs using &lt;p11-kit/pkcs11x.h&gt; can be compiled
  with CRYPTOKI_GNU. Fixes GnuTLS builds. [jsc#PED-6705]
  * Add p11-kit-pkcs11-gnu-Enable-testing-with-p11-kit-pkcs11x.h.patch</changelog>
</package>
<package pkgid="74ff31dda88ed2f6b172e402b46054185cf8b697c1a058508bd082a237c393fb" name="p11-kit" arch="s390x">
  <version epoch="0" ver="0.23.22" rel="150500.8.3.1"/>
  <changelog author="lnussel@suse.de" date="1413201600">- remove patches:
  * trust-Print-label-of-certificate-when-complaining-.patch
  * trust-Dont-use-invalid-public-keys-for-looking-up-.patch
- new version 0.20.7 (stable)
  * New public pkcs11x.h header containing extensions [fdo#83495]
  * Export necessary defines to lookup attached extensions [fdo#83495]
  * Build fixes
- new version 0.20.6 (stable)
  * Make the p11-kit-proxy.so module respect critical = no [fdo#83651]
  * Build fix for FreeBSD [fdo#75674]
- new version 0.20.5 (stable)
  * Don't use invalid keys for looking up stapled extensions [fdo#82328]
  * Better error messages when invalid certificate extensions
  * Fix parsing of some odd OpenSSL TRUSTED CERTIFICATE files
  * Fix some leaks, and memory issues
  * Silence some clang scanner warnings
- new version 0.20.4 (stable)
  * Don't complain about C_Finalize after a fork
  * Fix typo</changelog>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Update to version 0.23.1 (stable)
  * Use new PKCS#11 URI draft fields for URIs [fdo#86474 fdo#87582]
  * Add pem-directory-hash extract format
  * Build fixes
- Remove 0001-trust-allow-to-also-add-openssl-style-hashes-to-pem-d.diff;
  fixed on upstream release
- Remove autoconf, automake and libtool require; unneeded dependencies
- Add gtk-doc require; needed to build html documentation
- Remove redundant %clean section</changelog>
  <changelog author="mpluskal@suse.com" date="1454932800">- Update to 0.23.2
  * Fix forking issues with libffi
  * Fix various crashes in corner cases
  * Updated translations
  * Build fixes
- Make building more verbose
- Enable tests
- Small spec file cleanup with spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- 32-bit compatibility fixes:
  * Add PKCS11 module to p11-kit-32bit (bsc#996047#c39)
  * Add p11-kit-nss-trust-32bit NSS module
  * Fix potential bi-arch issue with private binaries
    (fdo#98817, p11-kit-biarch.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="lnussel@suse.de" date="1573819200">- support loading NSS attribute CKA_NSS_MOZILLA_CA_POLICY so Firefox
  detects built in certificates (boo#1154871,
  0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch,
  0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch)</changelog>
  <changelog author="lnussel@suse.de" date="1577102400">- Also build documentation (boo#1013125)</changelog>
  <changelog author="scabrero@suse.de" date="1628683200">- Update to version 0.23.22 (bsc#1180064, bsc#1180065, bsc#1180066):
  * Fix memory-safety issues that affect the RPC protocol
  (CVE-2020-29361, CVE-2020-29362, and CVE-2020-29363), discovered
  and fixed by David Cook
  * anchor: Prefer persistent format when storing anchor [PR#329]
  * common: Fix infloop in p11_path_build [PR#326, PR#327]
  * proxy: C_CloseAllSessions: Make sure that calloc args are non-zero [PR#325]
  * common: Check for a NULL locale before freeing it [PR#321]
  * Build and test fixes [PR#313, PR#315, PR#317, PR#318, PR#319, PR#323,
  PR#330, PR#333, PR#334, PR#335, PR#338, PR#339]
- Changes for version 0.23.21
  * proxy: Do not assign duplicate slot IDs [PR#282]
  * common: Get program name based on executable path if possible [PR#307]
  * anchor: Exit with non-zero code, if any error occurs [PR#304]
  * Build and test fixes [PR#283, PR#290, PR#291, PR#292, PR#296, PR#299,
  PR#305, PR#306, PR#309, PR#311]
- Changes for version 0.23.20:
  * Revert "Fix RPC when length-s are 0" changes [PR#276]
- Changes for version 0.23.19:
  * common: add Russian PKCS#11 extensions to pkcs11x.h header [PR#255]
  * Add simple bash completion for provided commands [PR#258]
  * Unbreak list matching in enable-in and disable-in [PR#262]
  * Fix RPC when length-s are 0 [PR#259]
  * rpc: Add vsock transport support [PR#270]
  * trust: Support CKA_NSS_{SERVER,EMAIL}_DISTRUST_AFTER [PR#265]
  * Build fixes [PR#271, PR#272, PR#273, ...]
- Changes for version 0.23.18:
  * rpc: Allow empty CK_DATE value [PR#253]
  * build: Meson fixes [PR#245]
  * build: Adjust feature parity between meson and autotools [PR#247]
- Changes for version 0.23.17:
  * common: Fix uClibc-ng compilation [PR#237]
  * trust: do not allow daylight to invalidate date validation [PR#236]
  * build: Port to meson build system [PR#231, PR#234]
  * rpc: On UNIX wait on condition variable instead of FD if header is for a different thread [PR#232]
  * doc: Add 'server' command in help [PR#229]
  * Build and test fixes [PR#230]
- Changes for version 0.23.16:
  * proxy: Support C_WaitForSlotEvent() if CKF_DONT_BLOCK is specified [PR#225]
  * conf: Ignore user configuration if the program is running as root [PR#226]
  * proxy: Refresh slot list on every C_GetSlotList call [PR#224]
  * modules: Fix index used in call to p11_dict_remove() [PR#219]
  * Fix Win32 p11_dl_error crash [PR#218]
  * modules: check gl.modules before iterates on it when freeing [PR#217]
  * trust: Ignore unreadable content in anchors [PR#215]
  * extract-jks: Prefer _p11_extract_jks_timestamp to SOURCE_DATE_EPOCH [PR#213]
- Changes for version 0.23.15:
  * trust: Improve error handling if backed trust file is corrupted [PR#206]
  * url: Prefer upper-case letters in hex characters when encoding [PR#193]
  * trust/extract-jks.c: also honor SOURCE_DATE_EPOCH time [PR#202]
  * virtual: Prefer fixed closures to libffi closures [PR#196]
  * Fix issues spotted by coverity and cppcheck [PR#194, PR#204]
  * Build and test fixes [PR#164, PR#191, PR#199, PR#201]
- Changes for version 0.23.14:
  * proxy: Avoid invalid memory access when unloading proxy module [PR#180]
  * Update pkcs11 header to allow SoftHSMv2 to compile [PR#181]
  * build: Restore libpthread dependency [PR#183]
  * Build fixes [PR#188]
- Changes for version 0.23.13:
  * server: Enable socket activation through systemd [PR#173]
  * rpc-server: p11_kit_remote_serve_tokens: Allow exporting all modules
    [PR#174]
  * proxy: Fail early if there is no slot mapping [PR#175]
  * Remove hard dependency on libpthread [PR#177]
  * Build fixes [PR#170, PR#176]
- Changes for version 0.23.12
  * Fix compile error when PKCS#11 GNU calling convention is enabled [PR#160]
  * Fix getauxval() and secure_getenv() emulation on macOS and FreeBSD [PR#167]
  * Build and test fixes on macOS [PR#162, PR#168]
- Changes for version 0.23.11
  * trust: Add extractor for edk2/cacerts.bin [PR#139]
  * modules: Add option to control module visibility from proxy [PR#140]
  * trust: Prevent trust module being loaded by proxy module [PR#142]
  * library: Use dedicated locale object for printing error [PR#148]
  * Treat CKR_CRYPTOKI_ALREADY_INITIALIZED correctly [PR#134]
  * Improve const correctness for P11KitUri [PR#152]
  * PKCS#11 URI scheme comparison is now case insensitive [PR#156]
  * Build and test fixes [PR#151, PR#149, PR#141, PR#138, PR#135]
- Changes for version 0.23.10
  * filter: Respect "write-protected" vendor-specific attribute in
    PKCS#11 URI [PR#129]
  * server: Improve shell integration and documentation [PR#107, PR#108]
  * proxy: Reuse existing slot ID mapping in after fork() [PR#120]
  * trust: Forcibly mark "Default Trust" read-only [PR#123]
  * New function p11_kit_override_system_files() which can be used for
    testing [PR#110]
  * trust: Filter out duplicate extensions [PR#69]
  * Update translations [PR#128]
  * Bug fixes [PR#125, PR#126]
- Changes for version 0.23.9
  * Fix p11-kit server regressions [PR#103, PR#104]
  * trust: Respect anyExtendedKeyUsage in CA certificates [PR#99]
  * Build fixes related to reallocarray [PR#96, PR#98, PR#100]
- Changes for version 0.23.8
  * Improve vendor query attributes handling in PKCS#11 URI [PR#92]
  * Add OTP and GOST mechanisms to pkcs11.h [PR#90, PR#91]
  * New envvar P11_KIT_NO_USER_CONFIG to stop looking at user
    configurations [PR#87]
  * Build fixes for Solaris and 32-bit big-endian platforms [PR#81, PR#86]
- Changes for version 0.23.7
  * Fix memory issues with "p11-kit server" [PR#78]
  * Build fixes [PR#77 ...]
- Changes for version 0.23.6
  * Port "p11-kit server" to Windows and portability fixes of the RPC
    protocol [PR#67, PR#72, PR#74]
  * Recover the old behavior of "trust anchor --remove" [PR#70, PR#71]
  * Build fixes [PR#63 ...]
- Changes for version 0.23.5
  * Fix license notice of common/unix-peer.c [PR#58]
  * Remove systemd unit files for now [PR#60]
  * Build fixes for FreeBSD [PR#56]
- Changes for version 0.23.4
  * Recognize query attributes defined in PKCS#11 URI (RFC7512) [PR#31,
    PR#37, PR#52]
  * The trust policy module now recognizes CKA_NSS_MOZILLA_CA_POLICY
    attribute, used by Firefox [#99453, PR#46]
  * Add 'trust dump' command to dump all PKCS#11 objects in the
    persistence format [PR#44]
  * New experimental 'p11-kit server' command that allows PKCS#11
    forwarding through a Unix domain socket.  A client-side module
    p11-kit-client.so is also provided [PR#15]
  * Add systemd unit files for exporting the proxy module through a
    Unix domain socket [PR#35]
  * New P11KitIter API to iterate over slots, tokens, and modules in
    addition to objects [PR#28]
  * libffi dependency is now optional [PR#9]
  * Build fixes for FreeBSD, macOS, and Windows [PR#32, PR#39, PR#45]
- Changes for version 0.23.3
  * Install private executables in libexecdir [fdo#98817]
  * Fix link error of proxy module on macOS [fdo#98022]
  * Use new PKCS#11 URI specification for URIs [fdo#97245]
  * Support x-init-reserved argument of C_Initialize() in remote modules
    [fdo#80519]
  * Incorporate changes from PKCS#11 2.40 specification
  * Bump libtool library version
  * Documentation fixes
  * Build fixes [fdo#87192 ...]
- Move RPM macros to %_rpmmacrodir.
- New server subpackage
- Change keyring to new maintainer Daiki Ueno
- Avoid bareword to fix build failure
- Remove obsolete patches:
  * p11-kit-biarch.patch
  * 0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch
  * 0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch</changelog>
  <changelog author="lnussel@suse.com" date="1674648000">- Backport IBM specific mechanism and attributes (Jira#PED-584)
  0001-Add-IBM-specific-mechanism-and-attributes.patch
  0002-Add-support-for-serializing-CK_ECDH1_DERIVE_PARAMS-m.patch
  0003-client-Allow-zero-part-length-at-C_SignUpdate.patch
  0004-Fix-support-of-CKA_DERIVE_TEMPLATE.patch
  0005-Add-other-SHA-variants-also-for-RSA-and-EC-signature.patch
  0006-Add-support-for-missing-AES-and-DES-DES3-mechanisms.patch
  0007-Add-support-for-MAC-and-HMAC-general-mechanisms.patch
  0008-Add-support-for-CKM_DH_PKCS_DERIVE.patch
  0009-rpc-Handle-special-cases-for-buffer-and-length.patch
  0010-Add-support-for-CKM_AES_CTR.patch
  0011-Add-support-for-CKM_AES_GCM.patch
  0012-common-pkcs11x.h-Support-CRYPTOKI_GNU-for-IBM-vendor.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1698148800">- Ensure that programs using &lt;p11-kit/pkcs11x.h&gt; can be compiled
  with CRYPTOKI_GNU. Fixes GnuTLS builds. [jsc#PED-6705]
  * Add p11-kit-pkcs11-gnu-Enable-testing-with-p11-kit-pkcs11x.h.patch</changelog>
</package>
<package pkgid="d2e69563a14fbccae0a623f60cb03f9e1b68d7c2313f5757ce9900b939dbae13" name="p11-kit" arch="src">
  <version epoch="0" ver="0.23.22" rel="150500.8.3.1"/>
  <changelog author="lnussel@suse.de" date="1372075200">- add p11-kit-nss-trust subpackage that serves as drop-in
  replacement for mozilla-nss-certs</changelog>
  <changelog author="lnussel@suse.de" date="1372420800">- provide libnssckbi.so to replace mozilla-nss-certs</changelog>
  <changelog author="lnussel@suse.de" date="1373025600">- fix 32bit provides of libnssckbi.so
- repace p11-kit-extract-trust with update-ca-certificates</changelog>
  <changelog author="lnussel@suse.de" date="1374753600">- new version 0.19.3
  * Fix up problems with automake testing
  * Fix a bunch of memory leaks in newly refactored code
  * Don't use _GNU_SOURCE and the unportability it brings
  * Add basic 'trust anchor' command to store a new anchor
  * Support for writing out trust token objects
  * Port to use CKA_PUBLIC_KEY_INFO and updated trust store spec
  * Add option to use freebl for hashing
  * Implement reloading of token data
  * Fix warnings and possible minor bugs higlighted by code scanners
  * Don't load configs in home directories when running setuid or setgid
  * Support treating ~/.config as $XDG_CONFIG_HOME
  * Use $XDG_DATA_HOME/pkcs11 as default user config directory
  * Use $TMPDIR instead of $TEMP while testing
  * Open files and fds with O_CLOEXEC
  * Abort initialization if a critical module fails to load
  * Don't use thread-unsafe functions: strerror, getpwuid
  * Fix p11_kit_space_strlen() result when empty string
  * Refactoring of where various components live</changelog>
  <changelog author="lnussel@suse.de" date="1377864000">- new version 0.19.4
  * 'trust anchor' now adds/removes certificate anchors
  * 'trust list' lists trust policy stuff
  * 'p11-kit extract' is now 'trust extract'
  * 'p11-kit extract-trust' is now 'trust extract-compat'
  * Workarounds for working on broken zfsonlinux.org [#68525]
  * Add --with-module-config parameter to the configure script [#68122]
  * Add support for removing stored PKCS#11 objects in trust module</changelog>
  <changelog author="lnussel@suse.de" date="1378814400">- upgrade to 0.20.1 which is 0.19 declared stable
  * Extract compat trust data after we've changes
  * Skip compat extraction if running as non-root
  * Better failure messages when removing anchors</changelog>
  <changelog author="lnussel@suse.de" date="1386331200">- trust: allow to also add openssl style hashes to pem-directory
  0001-trust-allow-to-also-add-openssl-style-hashes-to-pem-d.diff</changelog>
  <changelog author="meissner@suse.com" date="1392120000">- added .sig file. trying to locate source of the keyring.</changelog>
  <changelog author="lnussel@suse.de" date="1400500800">- New version 0.20.2
  * Fix bug where blacklist didn't affect extracted ca-anchors if the anchor
    and blacklist were not in the same trust path (regression) [fdo#73558]
  * Check for race in BasicConstraints stapled extension [fdo#69314]
  * Build fixes and cleanup</changelog>
  <changelog author="lnussel@suse.de" date="1409313600">- new version 0.20.3
  * Fix problems reinitializing managed modules after fork
  * Fix bad bookeeping when fail initializing one of the modules
  * Fix case where module would be unloaded while in use [#74919]
  * Remove assertions when module used before initialized [#74919]
  * Fix handling of mmap failure and mapping empty files [#74773]
  * Stable p11_kit_be_quiet() and p11_kit_be_loud() functions
  * Require automake 1.12 or later
  * Build fixes for Windows [#76594 #74149]
- apply patches to avoid errors from certificates with invalid public key
  (fdo#82328, bnc#890908,
  trust-Dont-use-invalid-public-keys-for-looking-up-.patch,
  trust-Print-label-of-certificate-when-complaining-.patch)</changelog>
  <changelog author="lnussel@suse.de" date="1413201600">- remove patches:
  * trust-Print-label-of-certificate-when-complaining-.patch
  * trust-Dont-use-invalid-public-keys-for-looking-up-.patch
- new version 0.20.7 (stable)
  * New public pkcs11x.h header containing extensions [fdo#83495]
  * Export necessary defines to lookup attached extensions [fdo#83495]
  * Build fixes
- new version 0.20.6 (stable)
  * Make the p11-kit-proxy.so module respect critical = no [fdo#83651]
  * Build fix for FreeBSD [fdo#75674]
- new version 0.20.5 (stable)
  * Don't use invalid keys for looking up stapled extensions [fdo#82328]
  * Better error messages when invalid certificate extensions
  * Fix parsing of some odd OpenSSL TRUSTED CERTIFICATE files
  * Fix some leaks, and memory issues
  * Silence some clang scanner warnings
- new version 0.20.4 (stable)
  * Don't complain about C_Finalize after a fork
  * Fix typo</changelog>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Update to version 0.23.1 (stable)
  * Use new PKCS#11 URI draft fields for URIs [fdo#86474 fdo#87582]
  * Add pem-directory-hash extract format
  * Build fixes
- Remove 0001-trust-allow-to-also-add-openssl-style-hashes-to-pem-d.diff;
  fixed on upstream release
- Remove autoconf, automake and libtool require; unneeded dependencies
- Add gtk-doc require; needed to build html documentation
- Remove redundant %clean section</changelog>
  <changelog author="mpluskal@suse.com" date="1454932800">- Update to 0.23.2
  * Fix forking issues with libffi
  * Fix various crashes in corner cases
  * Updated translations
  * Build fixes
- Make building more verbose
- Enable tests
- Small spec file cleanup with spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- 32-bit compatibility fixes:
  * Add PKCS11 module to p11-kit-32bit (bsc#996047#c39)
  * Add p11-kit-nss-trust-32bit NSS module
  * Fix potential bi-arch issue with private binaries
    (fdo#98817, p11-kit-biarch.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="lnussel@suse.de" date="1573819200">- support loading NSS attribute CKA_NSS_MOZILLA_CA_POLICY so Firefox
  detects built in certificates (boo#1154871,
  0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch,
  0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch)</changelog>
  <changelog author="lnussel@suse.de" date="1577102400">- Also build documentation (boo#1013125)</changelog>
  <changelog author="scabrero@suse.de" date="1628683200">- Update to version 0.23.22 (bsc#1180064, bsc#1180065, bsc#1180066):
  * Fix memory-safety issues that affect the RPC protocol
  (CVE-2020-29361, CVE-2020-29362, and CVE-2020-29363), discovered
  and fixed by David Cook
  * anchor: Prefer persistent format when storing anchor [PR#329]
  * common: Fix infloop in p11_path_build [PR#326, PR#327]
  * proxy: C_CloseAllSessions: Make sure that calloc args are non-zero [PR#325]
  * common: Check for a NULL locale before freeing it [PR#321]
  * Build and test fixes [PR#313, PR#315, PR#317, PR#318, PR#319, PR#323,
  PR#330, PR#333, PR#334, PR#335, PR#338, PR#339]
- Changes for version 0.23.21
  * proxy: Do not assign duplicate slot IDs [PR#282]
  * common: Get program name based on executable path if possible [PR#307]
  * anchor: Exit with non-zero code, if any error occurs [PR#304]
  * Build and test fixes [PR#283, PR#290, PR#291, PR#292, PR#296, PR#299,
  PR#305, PR#306, PR#309, PR#311]
- Changes for version 0.23.20:
  * Revert "Fix RPC when length-s are 0" changes [PR#276]
- Changes for version 0.23.19:
  * common: add Russian PKCS#11 extensions to pkcs11x.h header [PR#255]
  * Add simple bash completion for provided commands [PR#258]
  * Unbreak list matching in enable-in and disable-in [PR#262]
  * Fix RPC when length-s are 0 [PR#259]
  * rpc: Add vsock transport support [PR#270]
  * trust: Support CKA_NSS_{SERVER,EMAIL}_DISTRUST_AFTER [PR#265]
  * Build fixes [PR#271, PR#272, PR#273, ...]
- Changes for version 0.23.18:
  * rpc: Allow empty CK_DATE value [PR#253]
  * build: Meson fixes [PR#245]
  * build: Adjust feature parity between meson and autotools [PR#247]
- Changes for version 0.23.17:
  * common: Fix uClibc-ng compilation [PR#237]
  * trust: do not allow daylight to invalidate date validation [PR#236]
  * build: Port to meson build system [PR#231, PR#234]
  * rpc: On UNIX wait on condition variable instead of FD if header is for a different thread [PR#232]
  * doc: Add 'server' command in help [PR#229]
  * Build and test fixes [PR#230]
- Changes for version 0.23.16:
  * proxy: Support C_WaitForSlotEvent() if CKF_DONT_BLOCK is specified [PR#225]
  * conf: Ignore user configuration if the program is running as root [PR#226]
  * proxy: Refresh slot list on every C_GetSlotList call [PR#224]
  * modules: Fix index used in call to p11_dict_remove() [PR#219]
  * Fix Win32 p11_dl_error crash [PR#218]
  * modules: check gl.modules before iterates on it when freeing [PR#217]
  * trust: Ignore unreadable content in anchors [PR#215]
  * extract-jks: Prefer _p11_extract_jks_timestamp to SOURCE_DATE_EPOCH [PR#213]
- Changes for version 0.23.15:
  * trust: Improve error handling if backed trust file is corrupted [PR#206]
  * url: Prefer upper-case letters in hex characters when encoding [PR#193]
  * trust/extract-jks.c: also honor SOURCE_DATE_EPOCH time [PR#202]
  * virtual: Prefer fixed closures to libffi closures [PR#196]
  * Fix issues spotted by coverity and cppcheck [PR#194, PR#204]
  * Build and test fixes [PR#164, PR#191, PR#199, PR#201]
- Changes for version 0.23.14:
  * proxy: Avoid invalid memory access when unloading proxy module [PR#180]
  * Update pkcs11 header to allow SoftHSMv2 to compile [PR#181]
  * build: Restore libpthread dependency [PR#183]
  * Build fixes [PR#188]
- Changes for version 0.23.13:
  * server: Enable socket activation through systemd [PR#173]
  * rpc-server: p11_kit_remote_serve_tokens: Allow exporting all modules
    [PR#174]
  * proxy: Fail early if there is no slot mapping [PR#175]
  * Remove hard dependency on libpthread [PR#177]
  * Build fixes [PR#170, PR#176]
- Changes for version 0.23.12
  * Fix compile error when PKCS#11 GNU calling convention is enabled [PR#160]
  * Fix getauxval() and secure_getenv() emulation on macOS and FreeBSD [PR#167]
  * Build and test fixes on macOS [PR#162, PR#168]
- Changes for version 0.23.11
  * trust: Add extractor for edk2/cacerts.bin [PR#139]
  * modules: Add option to control module visibility from proxy [PR#140]
  * trust: Prevent trust module being loaded by proxy module [PR#142]
  * library: Use dedicated locale object for printing error [PR#148]
  * Treat CKR_CRYPTOKI_ALREADY_INITIALIZED correctly [PR#134]
  * Improve const correctness for P11KitUri [PR#152]
  * PKCS#11 URI scheme comparison is now case insensitive [PR#156]
  * Build and test fixes [PR#151, PR#149, PR#141, PR#138, PR#135]
- Changes for version 0.23.10
  * filter: Respect "write-protected" vendor-specific attribute in
    PKCS#11 URI [PR#129]
  * server: Improve shell integration and documentation [PR#107, PR#108]
  * proxy: Reuse existing slot ID mapping in after fork() [PR#120]
  * trust: Forcibly mark "Default Trust" read-only [PR#123]
  * New function p11_kit_override_system_files() which can be used for
    testing [PR#110]
  * trust: Filter out duplicate extensions [PR#69]
  * Update translations [PR#128]
  * Bug fixes [PR#125, PR#126]
- Changes for version 0.23.9
  * Fix p11-kit server regressions [PR#103, PR#104]
  * trust: Respect anyExtendedKeyUsage in CA certificates [PR#99]
  * Build fixes related to reallocarray [PR#96, PR#98, PR#100]
- Changes for version 0.23.8
  * Improve vendor query attributes handling in PKCS#11 URI [PR#92]
  * Add OTP and GOST mechanisms to pkcs11.h [PR#90, PR#91]
  * New envvar P11_KIT_NO_USER_CONFIG to stop looking at user
    configurations [PR#87]
  * Build fixes for Solaris and 32-bit big-endian platforms [PR#81, PR#86]
- Changes for version 0.23.7
  * Fix memory issues with "p11-kit server" [PR#78]
  * Build fixes [PR#77 ...]
- Changes for version 0.23.6
  * Port "p11-kit server" to Windows and portability fixes of the RPC
    protocol [PR#67, PR#72, PR#74]
  * Recover the old behavior of "trust anchor --remove" [PR#70, PR#71]
  * Build fixes [PR#63 ...]
- Changes for version 0.23.5
  * Fix license notice of common/unix-peer.c [PR#58]
  * Remove systemd unit files for now [PR#60]
  * Build fixes for FreeBSD [PR#56]
- Changes for version 0.23.4
  * Recognize query attributes defined in PKCS#11 URI (RFC7512) [PR#31,
    PR#37, PR#52]
  * The trust policy module now recognizes CKA_NSS_MOZILLA_CA_POLICY
    attribute, used by Firefox [#99453, PR#46]
  * Add 'trust dump' command to dump all PKCS#11 objects in the
    persistence format [PR#44]
  * New experimental 'p11-kit server' command that allows PKCS#11
    forwarding through a Unix domain socket.  A client-side module
    p11-kit-client.so is also provided [PR#15]
  * Add systemd unit files for exporting the proxy module through a
    Unix domain socket [PR#35]
  * New P11KitIter API to iterate over slots, tokens, and modules in
    addition to objects [PR#28]
  * libffi dependency is now optional [PR#9]
  * Build fixes for FreeBSD, macOS, and Windows [PR#32, PR#39, PR#45]
- Changes for version 0.23.3
  * Install private executables in libexecdir [fdo#98817]
  * Fix link error of proxy module on macOS [fdo#98022]
  * Use new PKCS#11 URI specification for URIs [fdo#97245]
  * Support x-init-reserved argument of C_Initialize() in remote modules
    [fdo#80519]
  * Incorporate changes from PKCS#11 2.40 specification
  * Bump libtool library version
  * Documentation fixes
  * Build fixes [fdo#87192 ...]
- Move RPM macros to %_rpmmacrodir.
- New server subpackage
- Change keyring to new maintainer Daiki Ueno
- Avoid bareword to fix build failure
- Remove obsolete patches:
  * p11-kit-biarch.patch
  * 0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch
  * 0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch</changelog>
  <changelog author="lnussel@suse.com" date="1674648000">- Backport IBM specific mechanism and attributes (Jira#PED-584)
  0001-Add-IBM-specific-mechanism-and-attributes.patch
  0002-Add-support-for-serializing-CK_ECDH1_DERIVE_PARAMS-m.patch
  0003-client-Allow-zero-part-length-at-C_SignUpdate.patch
  0004-Fix-support-of-CKA_DERIVE_TEMPLATE.patch
  0005-Add-other-SHA-variants-also-for-RSA-and-EC-signature.patch
  0006-Add-support-for-missing-AES-and-DES-DES3-mechanisms.patch
  0007-Add-support-for-MAC-and-HMAC-general-mechanisms.patch
  0008-Add-support-for-CKM_DH_PKCS_DERIVE.patch
  0009-rpc-Handle-special-cases-for-buffer-and-length.patch
  0010-Add-support-for-CKM_AES_CTR.patch
  0011-Add-support-for-CKM_AES_GCM.patch
  0012-common-pkcs11x.h-Support-CRYPTOKI_GNU-for-IBM-vendor.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1698148800">- Ensure that programs using &lt;p11-kit/pkcs11x.h&gt; can be compiled
  with CRYPTOKI_GNU. Fixes GnuTLS builds. [jsc#PED-6705]
  * Add p11-kit-pkcs11-gnu-Enable-testing-with-p11-kit-pkcs11x.h.patch</changelog>
</package>
<package pkgid="0a74d8da1df62d889f31bc41f257a7e4ddba6b75950fd2e936a1c7574de6c7f6" name="p11-kit" arch="x86_64">
  <version epoch="0" ver="0.23.22" rel="150500.8.3.1"/>
  <changelog author="lnussel@suse.de" date="1413201600">- remove patches:
  * trust-Print-label-of-certificate-when-complaining-.patch
  * trust-Dont-use-invalid-public-keys-for-looking-up-.patch
- new version 0.20.7 (stable)
  * New public pkcs11x.h header containing extensions [fdo#83495]
  * Export necessary defines to lookup attached extensions [fdo#83495]
  * Build fixes
- new version 0.20.6 (stable)
  * Make the p11-kit-proxy.so module respect critical = no [fdo#83651]
  * Build fix for FreeBSD [fdo#75674]
- new version 0.20.5 (stable)
  * Don't use invalid keys for looking up stapled extensions [fdo#82328]
  * Better error messages when invalid certificate extensions
  * Fix parsing of some odd OpenSSL TRUSTED CERTIFICATE files
  * Fix some leaks, and memory issues
  * Silence some clang scanner warnings
- new version 0.20.4 (stable)
  * Don't complain about C_Finalize after a fork
  * Fix typo</changelog>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Update to version 0.23.1 (stable)
  * Use new PKCS#11 URI draft fields for URIs [fdo#86474 fdo#87582]
  * Add pem-directory-hash extract format
  * Build fixes
- Remove 0001-trust-allow-to-also-add-openssl-style-hashes-to-pem-d.diff;
  fixed on upstream release
- Remove autoconf, automake and libtool require; unneeded dependencies
- Add gtk-doc require; needed to build html documentation
- Remove redundant %clean section</changelog>
  <changelog author="mpluskal@suse.com" date="1454932800">- Update to 0.23.2
  * Fix forking issues with libffi
  * Fix various crashes in corner cases
  * Updated translations
  * Build fixes
- Make building more verbose
- Enable tests
- Small spec file cleanup with spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- 32-bit compatibility fixes:
  * Add PKCS11 module to p11-kit-32bit (bsc#996047#c39)
  * Add p11-kit-nss-trust-32bit NSS module
  * Fix potential bi-arch issue with private binaries
    (fdo#98817, p11-kit-biarch.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="lnussel@suse.de" date="1573819200">- support loading NSS attribute CKA_NSS_MOZILLA_CA_POLICY so Firefox
  detects built in certificates (boo#1154871,
  0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch,
  0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch)</changelog>
  <changelog author="lnussel@suse.de" date="1577102400">- Also build documentation (boo#1013125)</changelog>
  <changelog author="scabrero@suse.de" date="1628683200">- Update to version 0.23.22 (bsc#1180064, bsc#1180065, bsc#1180066):
  * Fix memory-safety issues that affect the RPC protocol
  (CVE-2020-29361, CVE-2020-29362, and CVE-2020-29363), discovered
  and fixed by David Cook
  * anchor: Prefer persistent format when storing anchor [PR#329]
  * common: Fix infloop in p11_path_build [PR#326, PR#327]
  * proxy: C_CloseAllSessions: Make sure that calloc args are non-zero [PR#325]
  * common: Check for a NULL locale before freeing it [PR#321]
  * Build and test fixes [PR#313, PR#315, PR#317, PR#318, PR#319, PR#323,
  PR#330, PR#333, PR#334, PR#335, PR#338, PR#339]
- Changes for version 0.23.21
  * proxy: Do not assign duplicate slot IDs [PR#282]
  * common: Get program name based on executable path if possible [PR#307]
  * anchor: Exit with non-zero code, if any error occurs [PR#304]
  * Build and test fixes [PR#283, PR#290, PR#291, PR#292, PR#296, PR#299,
  PR#305, PR#306, PR#309, PR#311]
- Changes for version 0.23.20:
  * Revert "Fix RPC when length-s are 0" changes [PR#276]
- Changes for version 0.23.19:
  * common: add Russian PKCS#11 extensions to pkcs11x.h header [PR#255]
  * Add simple bash completion for provided commands [PR#258]
  * Unbreak list matching in enable-in and disable-in [PR#262]
  * Fix RPC when length-s are 0 [PR#259]
  * rpc: Add vsock transport support [PR#270]
  * trust: Support CKA_NSS_{SERVER,EMAIL}_DISTRUST_AFTER [PR#265]
  * Build fixes [PR#271, PR#272, PR#273, ...]
- Changes for version 0.23.18:
  * rpc: Allow empty CK_DATE value [PR#253]
  * build: Meson fixes [PR#245]
  * build: Adjust feature parity between meson and autotools [PR#247]
- Changes for version 0.23.17:
  * common: Fix uClibc-ng compilation [PR#237]
  * trust: do not allow daylight to invalidate date validation [PR#236]
  * build: Port to meson build system [PR#231, PR#234]
  * rpc: On UNIX wait on condition variable instead of FD if header is for a different thread [PR#232]
  * doc: Add 'server' command in help [PR#229]
  * Build and test fixes [PR#230]
- Changes for version 0.23.16:
  * proxy: Support C_WaitForSlotEvent() if CKF_DONT_BLOCK is specified [PR#225]
  * conf: Ignore user configuration if the program is running as root [PR#226]
  * proxy: Refresh slot list on every C_GetSlotList call [PR#224]
  * modules: Fix index used in call to p11_dict_remove() [PR#219]
  * Fix Win32 p11_dl_error crash [PR#218]
  * modules: check gl.modules before iterates on it when freeing [PR#217]
  * trust: Ignore unreadable content in anchors [PR#215]
  * extract-jks: Prefer _p11_extract_jks_timestamp to SOURCE_DATE_EPOCH [PR#213]
- Changes for version 0.23.15:
  * trust: Improve error handling if backed trust file is corrupted [PR#206]
  * url: Prefer upper-case letters in hex characters when encoding [PR#193]
  * trust/extract-jks.c: also honor SOURCE_DATE_EPOCH time [PR#202]
  * virtual: Prefer fixed closures to libffi closures [PR#196]
  * Fix issues spotted by coverity and cppcheck [PR#194, PR#204]
  * Build and test fixes [PR#164, PR#191, PR#199, PR#201]
- Changes for version 0.23.14:
  * proxy: Avoid invalid memory access when unloading proxy module [PR#180]
  * Update pkcs11 header to allow SoftHSMv2 to compile [PR#181]
  * build: Restore libpthread dependency [PR#183]
  * Build fixes [PR#188]
- Changes for version 0.23.13:
  * server: Enable socket activation through systemd [PR#173]
  * rpc-server: p11_kit_remote_serve_tokens: Allow exporting all modules
    [PR#174]
  * proxy: Fail early if there is no slot mapping [PR#175]
  * Remove hard dependency on libpthread [PR#177]
  * Build fixes [PR#170, PR#176]
- Changes for version 0.23.12
  * Fix compile error when PKCS#11 GNU calling convention is enabled [PR#160]
  * Fix getauxval() and secure_getenv() emulation on macOS and FreeBSD [PR#167]
  * Build and test fixes on macOS [PR#162, PR#168]
- Changes for version 0.23.11
  * trust: Add extractor for edk2/cacerts.bin [PR#139]
  * modules: Add option to control module visibility from proxy [PR#140]
  * trust: Prevent trust module being loaded by proxy module [PR#142]
  * library: Use dedicated locale object for printing error [PR#148]
  * Treat CKR_CRYPTOKI_ALREADY_INITIALIZED correctly [PR#134]
  * Improve const correctness for P11KitUri [PR#152]
  * PKCS#11 URI scheme comparison is now case insensitive [PR#156]
  * Build and test fixes [PR#151, PR#149, PR#141, PR#138, PR#135]
- Changes for version 0.23.10
  * filter: Respect "write-protected" vendor-specific attribute in
    PKCS#11 URI [PR#129]
  * server: Improve shell integration and documentation [PR#107, PR#108]
  * proxy: Reuse existing slot ID mapping in after fork() [PR#120]
  * trust: Forcibly mark "Default Trust" read-only [PR#123]
  * New function p11_kit_override_system_files() which can be used for
    testing [PR#110]
  * trust: Filter out duplicate extensions [PR#69]
  * Update translations [PR#128]
  * Bug fixes [PR#125, PR#126]
- Changes for version 0.23.9
  * Fix p11-kit server regressions [PR#103, PR#104]
  * trust: Respect anyExtendedKeyUsage in CA certificates [PR#99]
  * Build fixes related to reallocarray [PR#96, PR#98, PR#100]
- Changes for version 0.23.8
  * Improve vendor query attributes handling in PKCS#11 URI [PR#92]
  * Add OTP and GOST mechanisms to pkcs11.h [PR#90, PR#91]
  * New envvar P11_KIT_NO_USER_CONFIG to stop looking at user
    configurations [PR#87]
  * Build fixes for Solaris and 32-bit big-endian platforms [PR#81, PR#86]
- Changes for version 0.23.7
  * Fix memory issues with "p11-kit server" [PR#78]
  * Build fixes [PR#77 ...]
- Changes for version 0.23.6
  * Port "p11-kit server" to Windows and portability fixes of the RPC
    protocol [PR#67, PR#72, PR#74]
  * Recover the old behavior of "trust anchor --remove" [PR#70, PR#71]
  * Build fixes [PR#63 ...]
- Changes for version 0.23.5
  * Fix license notice of common/unix-peer.c [PR#58]
  * Remove systemd unit files for now [PR#60]
  * Build fixes for FreeBSD [PR#56]
- Changes for version 0.23.4
  * Recognize query attributes defined in PKCS#11 URI (RFC7512) [PR#31,
    PR#37, PR#52]
  * The trust policy module now recognizes CKA_NSS_MOZILLA_CA_POLICY
    attribute, used by Firefox [#99453, PR#46]
  * Add 'trust dump' command to dump all PKCS#11 objects in the
    persistence format [PR#44]
  * New experimental 'p11-kit server' command that allows PKCS#11
    forwarding through a Unix domain socket.  A client-side module
    p11-kit-client.so is also provided [PR#15]
  * Add systemd unit files for exporting the proxy module through a
    Unix domain socket [PR#35]
  * New P11KitIter API to iterate over slots, tokens, and modules in
    addition to objects [PR#28]
  * libffi dependency is now optional [PR#9]
  * Build fixes for FreeBSD, macOS, and Windows [PR#32, PR#39, PR#45]
- Changes for version 0.23.3
  * Install private executables in libexecdir [fdo#98817]
  * Fix link error of proxy module on macOS [fdo#98022]
  * Use new PKCS#11 URI specification for URIs [fdo#97245]
  * Support x-init-reserved argument of C_Initialize() in remote modules
    [fdo#80519]
  * Incorporate changes from PKCS#11 2.40 specification
  * Bump libtool library version
  * Documentation fixes
  * Build fixes [fdo#87192 ...]
- Move RPM macros to %_rpmmacrodir.
- New server subpackage
- Change keyring to new maintainer Daiki Ueno
- Avoid bareword to fix build failure
- Remove obsolete patches:
  * p11-kit-biarch.patch
  * 0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch
  * 0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch</changelog>
  <changelog author="lnussel@suse.com" date="1674648000">- Backport IBM specific mechanism and attributes (Jira#PED-584)
  0001-Add-IBM-specific-mechanism-and-attributes.patch
  0002-Add-support-for-serializing-CK_ECDH1_DERIVE_PARAMS-m.patch
  0003-client-Allow-zero-part-length-at-C_SignUpdate.patch
  0004-Fix-support-of-CKA_DERIVE_TEMPLATE.patch
  0005-Add-other-SHA-variants-also-for-RSA-and-EC-signature.patch
  0006-Add-support-for-missing-AES-and-DES-DES3-mechanisms.patch
  0007-Add-support-for-MAC-and-HMAC-general-mechanisms.patch
  0008-Add-support-for-CKM_DH_PKCS_DERIVE.patch
  0009-rpc-Handle-special-cases-for-buffer-and-length.patch
  0010-Add-support-for-CKM_AES_CTR.patch
  0011-Add-support-for-CKM_AES_GCM.patch
  0012-common-pkcs11x.h-Support-CRYPTOKI_GNU-for-IBM-vendor.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1698148800">- Ensure that programs using &lt;p11-kit/pkcs11x.h&gt; can be compiled
  with CRYPTOKI_GNU. Fixes GnuTLS builds. [jsc#PED-6705]
  * Add p11-kit-pkcs11-gnu-Enable-testing-with-p11-kit-pkcs11x.h.patch</changelog>
</package>
<package pkgid="95a420fff56758dde4506eb8cab333b102dc797f244b1ecf669b72230e7f9a83" name="p11-kit-tools" arch="aarch64">
  <version epoch="0" ver="0.23.22" rel="150500.8.3.1"/>
  <changelog author="lnussel@suse.de" date="1413201600">- remove patches:
  * trust-Print-label-of-certificate-when-complaining-.patch
  * trust-Dont-use-invalid-public-keys-for-looking-up-.patch
- new version 0.20.7 (stable)
  * New public pkcs11x.h header containing extensions [fdo#83495]
  * Export necessary defines to lookup attached extensions [fdo#83495]
  * Build fixes
- new version 0.20.6 (stable)
  * Make the p11-kit-proxy.so module respect critical = no [fdo#83651]
  * Build fix for FreeBSD [fdo#75674]
- new version 0.20.5 (stable)
  * Don't use invalid keys for looking up stapled extensions [fdo#82328]
  * Better error messages when invalid certificate extensions
  * Fix parsing of some odd OpenSSL TRUSTED CERTIFICATE files
  * Fix some leaks, and memory issues
  * Silence some clang scanner warnings
- new version 0.20.4 (stable)
  * Don't complain about C_Finalize after a fork
  * Fix typo</changelog>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Update to version 0.23.1 (stable)
  * Use new PKCS#11 URI draft fields for URIs [fdo#86474 fdo#87582]
  * Add pem-directory-hash extract format
  * Build fixes
- Remove 0001-trust-allow-to-also-add-openssl-style-hashes-to-pem-d.diff;
  fixed on upstream release
- Remove autoconf, automake and libtool require; unneeded dependencies
- Add gtk-doc require; needed to build html documentation
- Remove redundant %clean section</changelog>
  <changelog author="mpluskal@suse.com" date="1454932800">- Update to 0.23.2
  * Fix forking issues with libffi
  * Fix various crashes in corner cases
  * Updated translations
  * Build fixes
- Make building more verbose
- Enable tests
- Small spec file cleanup with spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- 32-bit compatibility fixes:
  * Add PKCS11 module to p11-kit-32bit (bsc#996047#c39)
  * Add p11-kit-nss-trust-32bit NSS module
  * Fix potential bi-arch issue with private binaries
    (fdo#98817, p11-kit-biarch.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="lnussel@suse.de" date="1573819200">- support loading NSS attribute CKA_NSS_MOZILLA_CA_POLICY so Firefox
  detects built in certificates (boo#1154871,
  0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch,
  0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch)</changelog>
  <changelog author="lnussel@suse.de" date="1577102400">- Also build documentation (boo#1013125)</changelog>
  <changelog author="scabrero@suse.de" date="1628683200">- Update to version 0.23.22 (bsc#1180064, bsc#1180065, bsc#1180066):
  * Fix memory-safety issues that affect the RPC protocol
  (CVE-2020-29361, CVE-2020-29362, and CVE-2020-29363), discovered
  and fixed by David Cook
  * anchor: Prefer persistent format when storing anchor [PR#329]
  * common: Fix infloop in p11_path_build [PR#326, PR#327]
  * proxy: C_CloseAllSessions: Make sure that calloc args are non-zero [PR#325]
  * common: Check for a NULL locale before freeing it [PR#321]
  * Build and test fixes [PR#313, PR#315, PR#317, PR#318, PR#319, PR#323,
  PR#330, PR#333, PR#334, PR#335, PR#338, PR#339]
- Changes for version 0.23.21
  * proxy: Do not assign duplicate slot IDs [PR#282]
  * common: Get program name based on executable path if possible [PR#307]
  * anchor: Exit with non-zero code, if any error occurs [PR#304]
  * Build and test fixes [PR#283, PR#290, PR#291, PR#292, PR#296, PR#299,
  PR#305, PR#306, PR#309, PR#311]
- Changes for version 0.23.20:
  * Revert "Fix RPC when length-s are 0" changes [PR#276]
- Changes for version 0.23.19:
  * common: add Russian PKCS#11 extensions to pkcs11x.h header [PR#255]
  * Add simple bash completion for provided commands [PR#258]
  * Unbreak list matching in enable-in and disable-in [PR#262]
  * Fix RPC when length-s are 0 [PR#259]
  * rpc: Add vsock transport support [PR#270]
  * trust: Support CKA_NSS_{SERVER,EMAIL}_DISTRUST_AFTER [PR#265]
  * Build fixes [PR#271, PR#272, PR#273, ...]
- Changes for version 0.23.18:
  * rpc: Allow empty CK_DATE value [PR#253]
  * build: Meson fixes [PR#245]
  * build: Adjust feature parity between meson and autotools [PR#247]
- Changes for version 0.23.17:
  * common: Fix uClibc-ng compilation [PR#237]
  * trust: do not allow daylight to invalidate date validation [PR#236]
  * build: Port to meson build system [PR#231, PR#234]
  * rpc: On UNIX wait on condition variable instead of FD if header is for a different thread [PR#232]
  * doc: Add 'server' command in help [PR#229]
  * Build and test fixes [PR#230]
- Changes for version 0.23.16:
  * proxy: Support C_WaitForSlotEvent() if CKF_DONT_BLOCK is specified [PR#225]
  * conf: Ignore user configuration if the program is running as root [PR#226]
  * proxy: Refresh slot list on every C_GetSlotList call [PR#224]
  * modules: Fix index used in call to p11_dict_remove() [PR#219]
  * Fix Win32 p11_dl_error crash [PR#218]
  * modules: check gl.modules before iterates on it when freeing [PR#217]
  * trust: Ignore unreadable content in anchors [PR#215]
  * extract-jks: Prefer _p11_extract_jks_timestamp to SOURCE_DATE_EPOCH [PR#213]
- Changes for version 0.23.15:
  * trust: Improve error handling if backed trust file is corrupted [PR#206]
  * url: Prefer upper-case letters in hex characters when encoding [PR#193]
  * trust/extract-jks.c: also honor SOURCE_DATE_EPOCH time [PR#202]
  * virtual: Prefer fixed closures to libffi closures [PR#196]
  * Fix issues spotted by coverity and cppcheck [PR#194, PR#204]
  * Build and test fixes [PR#164, PR#191, PR#199, PR#201]
- Changes for version 0.23.14:
  * proxy: Avoid invalid memory access when unloading proxy module [PR#180]
  * Update pkcs11 header to allow SoftHSMv2 to compile [PR#181]
  * build: Restore libpthread dependency [PR#183]
  * Build fixes [PR#188]
- Changes for version 0.23.13:
  * server: Enable socket activation through systemd [PR#173]
  * rpc-server: p11_kit_remote_serve_tokens: Allow exporting all modules
    [PR#174]
  * proxy: Fail early if there is no slot mapping [PR#175]
  * Remove hard dependency on libpthread [PR#177]
  * Build fixes [PR#170, PR#176]
- Changes for version 0.23.12
  * Fix compile error when PKCS#11 GNU calling convention is enabled [PR#160]
  * Fix getauxval() and secure_getenv() emulation on macOS and FreeBSD [PR#167]
  * Build and test fixes on macOS [PR#162, PR#168]
- Changes for version 0.23.11
  * trust: Add extractor for edk2/cacerts.bin [PR#139]
  * modules: Add option to control module visibility from proxy [PR#140]
  * trust: Prevent trust module being loaded by proxy module [PR#142]
  * library: Use dedicated locale object for printing error [PR#148]
  * Treat CKR_CRYPTOKI_ALREADY_INITIALIZED correctly [PR#134]
  * Improve const correctness for P11KitUri [PR#152]
  * PKCS#11 URI scheme comparison is now case insensitive [PR#156]
  * Build and test fixes [PR#151, PR#149, PR#141, PR#138, PR#135]
- Changes for version 0.23.10
  * filter: Respect "write-protected" vendor-specific attribute in
    PKCS#11 URI [PR#129]
  * server: Improve shell integration and documentation [PR#107, PR#108]
  * proxy: Reuse existing slot ID mapping in after fork() [PR#120]
  * trust: Forcibly mark "Default Trust" read-only [PR#123]
  * New function p11_kit_override_system_files() which can be used for
    testing [PR#110]
  * trust: Filter out duplicate extensions [PR#69]
  * Update translations [PR#128]
  * Bug fixes [PR#125, PR#126]
- Changes for version 0.23.9
  * Fix p11-kit server regressions [PR#103, PR#104]
  * trust: Respect anyExtendedKeyUsage in CA certificates [PR#99]
  * Build fixes related to reallocarray [PR#96, PR#98, PR#100]
- Changes for version 0.23.8
  * Improve vendor query attributes handling in PKCS#11 URI [PR#92]
  * Add OTP and GOST mechanisms to pkcs11.h [PR#90, PR#91]
  * New envvar P11_KIT_NO_USER_CONFIG to stop looking at user
    configurations [PR#87]
  * Build fixes for Solaris and 32-bit big-endian platforms [PR#81, PR#86]
- Changes for version 0.23.7
  * Fix memory issues with "p11-kit server" [PR#78]
  * Build fixes [PR#77 ...]
- Changes for version 0.23.6
  * Port "p11-kit server" to Windows and portability fixes of the RPC
    protocol [PR#67, PR#72, PR#74]
  * Recover the old behavior of "trust anchor --remove" [PR#70, PR#71]
  * Build fixes [PR#63 ...]
- Changes for version 0.23.5
  * Fix license notice of common/unix-peer.c [PR#58]
  * Remove systemd unit files for now [PR#60]
  * Build fixes for FreeBSD [PR#56]
- Changes for version 0.23.4
  * Recognize query attributes defined in PKCS#11 URI (RFC7512) [PR#31,
    PR#37, PR#52]
  * The trust policy module now recognizes CKA_NSS_MOZILLA_CA_POLICY
    attribute, used by Firefox [#99453, PR#46]
  * Add 'trust dump' command to dump all PKCS#11 objects in the
    persistence format [PR#44]
  * New experimental 'p11-kit server' command that allows PKCS#11
    forwarding through a Unix domain socket.  A client-side module
    p11-kit-client.so is also provided [PR#15]
  * Add systemd unit files for exporting the proxy module through a
    Unix domain socket [PR#35]
  * New P11KitIter API to iterate over slots, tokens, and modules in
    addition to objects [PR#28]
  * libffi dependency is now optional [PR#9]
  * Build fixes for FreeBSD, macOS, and Windows [PR#32, PR#39, PR#45]
- Changes for version 0.23.3
  * Install private executables in libexecdir [fdo#98817]
  * Fix link error of proxy module on macOS [fdo#98022]
  * Use new PKCS#11 URI specification for URIs [fdo#97245]
  * Support x-init-reserved argument of C_Initialize() in remote modules
    [fdo#80519]
  * Incorporate changes from PKCS#11 2.40 specification
  * Bump libtool library version
  * Documentation fixes
  * Build fixes [fdo#87192 ...]
- Move RPM macros to %_rpmmacrodir.
- New server subpackage
- Change keyring to new maintainer Daiki Ueno
- Avoid bareword to fix build failure
- Remove obsolete patches:
  * p11-kit-biarch.patch
  * 0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch
  * 0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch</changelog>
  <changelog author="lnussel@suse.com" date="1674648000">- Backport IBM specific mechanism and attributes (Jira#PED-584)
  0001-Add-IBM-specific-mechanism-and-attributes.patch
  0002-Add-support-for-serializing-CK_ECDH1_DERIVE_PARAMS-m.patch
  0003-client-Allow-zero-part-length-at-C_SignUpdate.patch
  0004-Fix-support-of-CKA_DERIVE_TEMPLATE.patch
  0005-Add-other-SHA-variants-also-for-RSA-and-EC-signature.patch
  0006-Add-support-for-missing-AES-and-DES-DES3-mechanisms.patch
  0007-Add-support-for-MAC-and-HMAC-general-mechanisms.patch
  0008-Add-support-for-CKM_DH_PKCS_DERIVE.patch
  0009-rpc-Handle-special-cases-for-buffer-and-length.patch
  0010-Add-support-for-CKM_AES_CTR.patch
  0011-Add-support-for-CKM_AES_GCM.patch
  0012-common-pkcs11x.h-Support-CRYPTOKI_GNU-for-IBM-vendor.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1698148800">- Ensure that programs using &lt;p11-kit/pkcs11x.h&gt; can be compiled
  with CRYPTOKI_GNU. Fixes GnuTLS builds. [jsc#PED-6705]
  * Add p11-kit-pkcs11-gnu-Enable-testing-with-p11-kit-pkcs11x.h.patch</changelog>
</package>
<package pkgid="b03cfc99e288d791532a9c5c651f9dbc4d777f69e422ffa7627ce0cc9b700632" name="p11-kit-tools" arch="s390x">
  <version epoch="0" ver="0.23.22" rel="150500.8.3.1"/>
  <changelog author="lnussel@suse.de" date="1413201600">- remove patches:
  * trust-Print-label-of-certificate-when-complaining-.patch
  * trust-Dont-use-invalid-public-keys-for-looking-up-.patch
- new version 0.20.7 (stable)
  * New public pkcs11x.h header containing extensions [fdo#83495]
  * Export necessary defines to lookup attached extensions [fdo#83495]
  * Build fixes
- new version 0.20.6 (stable)
  * Make the p11-kit-proxy.so module respect critical = no [fdo#83651]
  * Build fix for FreeBSD [fdo#75674]
- new version 0.20.5 (stable)
  * Don't use invalid keys for looking up stapled extensions [fdo#82328]
  * Better error messages when invalid certificate extensions
  * Fix parsing of some odd OpenSSL TRUSTED CERTIFICATE files
  * Fix some leaks, and memory issues
  * Silence some clang scanner warnings
- new version 0.20.4 (stable)
  * Don't complain about C_Finalize after a fork
  * Fix typo</changelog>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Update to version 0.23.1 (stable)
  * Use new PKCS#11 URI draft fields for URIs [fdo#86474 fdo#87582]
  * Add pem-directory-hash extract format
  * Build fixes
- Remove 0001-trust-allow-to-also-add-openssl-style-hashes-to-pem-d.diff;
  fixed on upstream release
- Remove autoconf, automake and libtool require; unneeded dependencies
- Add gtk-doc require; needed to build html documentation
- Remove redundant %clean section</changelog>
  <changelog author="mpluskal@suse.com" date="1454932800">- Update to 0.23.2
  * Fix forking issues with libffi
  * Fix various crashes in corner cases
  * Updated translations
  * Build fixes
- Make building more verbose
- Enable tests
- Small spec file cleanup with spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- 32-bit compatibility fixes:
  * Add PKCS11 module to p11-kit-32bit (bsc#996047#c39)
  * Add p11-kit-nss-trust-32bit NSS module
  * Fix potential bi-arch issue with private binaries
    (fdo#98817, p11-kit-biarch.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="lnussel@suse.de" date="1573819200">- support loading NSS attribute CKA_NSS_MOZILLA_CA_POLICY so Firefox
  detects built in certificates (boo#1154871,
  0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch,
  0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch)</changelog>
  <changelog author="lnussel@suse.de" date="1577102400">- Also build documentation (boo#1013125)</changelog>
  <changelog author="scabrero@suse.de" date="1628683200">- Update to version 0.23.22 (bsc#1180064, bsc#1180065, bsc#1180066):
  * Fix memory-safety issues that affect the RPC protocol
  (CVE-2020-29361, CVE-2020-29362, and CVE-2020-29363), discovered
  and fixed by David Cook
  * anchor: Prefer persistent format when storing anchor [PR#329]
  * common: Fix infloop in p11_path_build [PR#326, PR#327]
  * proxy: C_CloseAllSessions: Make sure that calloc args are non-zero [PR#325]
  * common: Check for a NULL locale before freeing it [PR#321]
  * Build and test fixes [PR#313, PR#315, PR#317, PR#318, PR#319, PR#323,
  PR#330, PR#333, PR#334, PR#335, PR#338, PR#339]
- Changes for version 0.23.21
  * proxy: Do not assign duplicate slot IDs [PR#282]
  * common: Get program name based on executable path if possible [PR#307]
  * anchor: Exit with non-zero code, if any error occurs [PR#304]
  * Build and test fixes [PR#283, PR#290, PR#291, PR#292, PR#296, PR#299,
  PR#305, PR#306, PR#309, PR#311]
- Changes for version 0.23.20:
  * Revert "Fix RPC when length-s are 0" changes [PR#276]
- Changes for version 0.23.19:
  * common: add Russian PKCS#11 extensions to pkcs11x.h header [PR#255]
  * Add simple bash completion for provided commands [PR#258]
  * Unbreak list matching in enable-in and disable-in [PR#262]
  * Fix RPC when length-s are 0 [PR#259]
  * rpc: Add vsock transport support [PR#270]
  * trust: Support CKA_NSS_{SERVER,EMAIL}_DISTRUST_AFTER [PR#265]
  * Build fixes [PR#271, PR#272, PR#273, ...]
- Changes for version 0.23.18:
  * rpc: Allow empty CK_DATE value [PR#253]
  * build: Meson fixes [PR#245]
  * build: Adjust feature parity between meson and autotools [PR#247]
- Changes for version 0.23.17:
  * common: Fix uClibc-ng compilation [PR#237]
  * trust: do not allow daylight to invalidate date validation [PR#236]
  * build: Port to meson build system [PR#231, PR#234]
  * rpc: On UNIX wait on condition variable instead of FD if header is for a different thread [PR#232]
  * doc: Add 'server' command in help [PR#229]
  * Build and test fixes [PR#230]
- Changes for version 0.23.16:
  * proxy: Support C_WaitForSlotEvent() if CKF_DONT_BLOCK is specified [PR#225]
  * conf: Ignore user configuration if the program is running as root [PR#226]
  * proxy: Refresh slot list on every C_GetSlotList call [PR#224]
  * modules: Fix index used in call to p11_dict_remove() [PR#219]
  * Fix Win32 p11_dl_error crash [PR#218]
  * modules: check gl.modules before iterates on it when freeing [PR#217]
  * trust: Ignore unreadable content in anchors [PR#215]
  * extract-jks: Prefer _p11_extract_jks_timestamp to SOURCE_DATE_EPOCH [PR#213]
- Changes for version 0.23.15:
  * trust: Improve error handling if backed trust file is corrupted [PR#206]
  * url: Prefer upper-case letters in hex characters when encoding [PR#193]
  * trust/extract-jks.c: also honor SOURCE_DATE_EPOCH time [PR#202]
  * virtual: Prefer fixed closures to libffi closures [PR#196]
  * Fix issues spotted by coverity and cppcheck [PR#194, PR#204]
  * Build and test fixes [PR#164, PR#191, PR#199, PR#201]
- Changes for version 0.23.14:
  * proxy: Avoid invalid memory access when unloading proxy module [PR#180]
  * Update pkcs11 header to allow SoftHSMv2 to compile [PR#181]
  * build: Restore libpthread dependency [PR#183]
  * Build fixes [PR#188]
- Changes for version 0.23.13:
  * server: Enable socket activation through systemd [PR#173]
  * rpc-server: p11_kit_remote_serve_tokens: Allow exporting all modules
    [PR#174]
  * proxy: Fail early if there is no slot mapping [PR#175]
  * Remove hard dependency on libpthread [PR#177]
  * Build fixes [PR#170, PR#176]
- Changes for version 0.23.12
  * Fix compile error when PKCS#11 GNU calling convention is enabled [PR#160]
  * Fix getauxval() and secure_getenv() emulation on macOS and FreeBSD [PR#167]
  * Build and test fixes on macOS [PR#162, PR#168]
- Changes for version 0.23.11
  * trust: Add extractor for edk2/cacerts.bin [PR#139]
  * modules: Add option to control module visibility from proxy [PR#140]
  * trust: Prevent trust module being loaded by proxy module [PR#142]
  * library: Use dedicated locale object for printing error [PR#148]
  * Treat CKR_CRYPTOKI_ALREADY_INITIALIZED correctly [PR#134]
  * Improve const correctness for P11KitUri [PR#152]
  * PKCS#11 URI scheme comparison is now case insensitive [PR#156]
  * Build and test fixes [PR#151, PR#149, PR#141, PR#138, PR#135]
- Changes for version 0.23.10
  * filter: Respect "write-protected" vendor-specific attribute in
    PKCS#11 URI [PR#129]
  * server: Improve shell integration and documentation [PR#107, PR#108]
  * proxy: Reuse existing slot ID mapping in after fork() [PR#120]
  * trust: Forcibly mark "Default Trust" read-only [PR#123]
  * New function p11_kit_override_system_files() which can be used for
    testing [PR#110]
  * trust: Filter out duplicate extensions [PR#69]
  * Update translations [PR#128]
  * Bug fixes [PR#125, PR#126]
- Changes for version 0.23.9
  * Fix p11-kit server regressions [PR#103, PR#104]
  * trust: Respect anyExtendedKeyUsage in CA certificates [PR#99]
  * Build fixes related to reallocarray [PR#96, PR#98, PR#100]
- Changes for version 0.23.8
  * Improve vendor query attributes handling in PKCS#11 URI [PR#92]
  * Add OTP and GOST mechanisms to pkcs11.h [PR#90, PR#91]
  * New envvar P11_KIT_NO_USER_CONFIG to stop looking at user
    configurations [PR#87]
  * Build fixes for Solaris and 32-bit big-endian platforms [PR#81, PR#86]
- Changes for version 0.23.7
  * Fix memory issues with "p11-kit server" [PR#78]
  * Build fixes [PR#77 ...]
- Changes for version 0.23.6
  * Port "p11-kit server" to Windows and portability fixes of the RPC
    protocol [PR#67, PR#72, PR#74]
  * Recover the old behavior of "trust anchor --remove" [PR#70, PR#71]
  * Build fixes [PR#63 ...]
- Changes for version 0.23.5
  * Fix license notice of common/unix-peer.c [PR#58]
  * Remove systemd unit files for now [PR#60]
  * Build fixes for FreeBSD [PR#56]
- Changes for version 0.23.4
  * Recognize query attributes defined in PKCS#11 URI (RFC7512) [PR#31,
    PR#37, PR#52]
  * The trust policy module now recognizes CKA_NSS_MOZILLA_CA_POLICY
    attribute, used by Firefox [#99453, PR#46]
  * Add 'trust dump' command to dump all PKCS#11 objects in the
    persistence format [PR#44]
  * New experimental 'p11-kit server' command that allows PKCS#11
    forwarding through a Unix domain socket.  A client-side module
    p11-kit-client.so is also provided [PR#15]
  * Add systemd unit files for exporting the proxy module through a
    Unix domain socket [PR#35]
  * New P11KitIter API to iterate over slots, tokens, and modules in
    addition to objects [PR#28]
  * libffi dependency is now optional [PR#9]
  * Build fixes for FreeBSD, macOS, and Windows [PR#32, PR#39, PR#45]
- Changes for version 0.23.3
  * Install private executables in libexecdir [fdo#98817]
  * Fix link error of proxy module on macOS [fdo#98022]
  * Use new PKCS#11 URI specification for URIs [fdo#97245]
  * Support x-init-reserved argument of C_Initialize() in remote modules
    [fdo#80519]
  * Incorporate changes from PKCS#11 2.40 specification
  * Bump libtool library version
  * Documentation fixes
  * Build fixes [fdo#87192 ...]
- Move RPM macros to %_rpmmacrodir.
- New server subpackage
- Change keyring to new maintainer Daiki Ueno
- Avoid bareword to fix build failure
- Remove obsolete patches:
  * p11-kit-biarch.patch
  * 0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch
  * 0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch</changelog>
  <changelog author="lnussel@suse.com" date="1674648000">- Backport IBM specific mechanism and attributes (Jira#PED-584)
  0001-Add-IBM-specific-mechanism-and-attributes.patch
  0002-Add-support-for-serializing-CK_ECDH1_DERIVE_PARAMS-m.patch
  0003-client-Allow-zero-part-length-at-C_SignUpdate.patch
  0004-Fix-support-of-CKA_DERIVE_TEMPLATE.patch
  0005-Add-other-SHA-variants-also-for-RSA-and-EC-signature.patch
  0006-Add-support-for-missing-AES-and-DES-DES3-mechanisms.patch
  0007-Add-support-for-MAC-and-HMAC-general-mechanisms.patch
  0008-Add-support-for-CKM_DH_PKCS_DERIVE.patch
  0009-rpc-Handle-special-cases-for-buffer-and-length.patch
  0010-Add-support-for-CKM_AES_CTR.patch
  0011-Add-support-for-CKM_AES_GCM.patch
  0012-common-pkcs11x.h-Support-CRYPTOKI_GNU-for-IBM-vendor.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1698148800">- Ensure that programs using &lt;p11-kit/pkcs11x.h&gt; can be compiled
  with CRYPTOKI_GNU. Fixes GnuTLS builds. [jsc#PED-6705]
  * Add p11-kit-pkcs11-gnu-Enable-testing-with-p11-kit-pkcs11x.h.patch</changelog>
</package>
<package pkgid="b722a0c558e9ec2e13643d68d073784bc607e7e63c244818cf1a953ebfbf745c" name="p11-kit-tools" arch="x86_64">
  <version epoch="0" ver="0.23.22" rel="150500.8.3.1"/>
  <changelog author="lnussel@suse.de" date="1413201600">- remove patches:
  * trust-Print-label-of-certificate-when-complaining-.patch
  * trust-Dont-use-invalid-public-keys-for-looking-up-.patch
- new version 0.20.7 (stable)
  * New public pkcs11x.h header containing extensions [fdo#83495]
  * Export necessary defines to lookup attached extensions [fdo#83495]
  * Build fixes
- new version 0.20.6 (stable)
  * Make the p11-kit-proxy.so module respect critical = no [fdo#83651]
  * Build fix for FreeBSD [fdo#75674]
- new version 0.20.5 (stable)
  * Don't use invalid keys for looking up stapled extensions [fdo#82328]
  * Better error messages when invalid certificate extensions
  * Fix parsing of some odd OpenSSL TRUSTED CERTIFICATE files
  * Fix some leaks, and memory issues
  * Silence some clang scanner warnings
- new version 0.20.4 (stable)
  * Don't complain about C_Finalize after a fork
  * Fix typo</changelog>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Update to version 0.23.1 (stable)
  * Use new PKCS#11 URI draft fields for URIs [fdo#86474 fdo#87582]
  * Add pem-directory-hash extract format
  * Build fixes
- Remove 0001-trust-allow-to-also-add-openssl-style-hashes-to-pem-d.diff;
  fixed on upstream release
- Remove autoconf, automake and libtool require; unneeded dependencies
- Add gtk-doc require; needed to build html documentation
- Remove redundant %clean section</changelog>
  <changelog author="mpluskal@suse.com" date="1454932800">- Update to 0.23.2
  * Fix forking issues with libffi
  * Fix various crashes in corner cases
  * Updated translations
  * Build fixes
- Make building more verbose
- Enable tests
- Small spec file cleanup with spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- 32-bit compatibility fixes:
  * Add PKCS11 module to p11-kit-32bit (bsc#996047#c39)
  * Add p11-kit-nss-trust-32bit NSS module
  * Fix potential bi-arch issue with private binaries
    (fdo#98817, p11-kit-biarch.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="lnussel@suse.de" date="1573819200">- support loading NSS attribute CKA_NSS_MOZILLA_CA_POLICY so Firefox
  detects built in certificates (boo#1154871,
  0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch,
  0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch)</changelog>
  <changelog author="lnussel@suse.de" date="1577102400">- Also build documentation (boo#1013125)</changelog>
  <changelog author="scabrero@suse.de" date="1628683200">- Update to version 0.23.22 (bsc#1180064, bsc#1180065, bsc#1180066):
  * Fix memory-safety issues that affect the RPC protocol
  (CVE-2020-29361, CVE-2020-29362, and CVE-2020-29363), discovered
  and fixed by David Cook
  * anchor: Prefer persistent format when storing anchor [PR#329]
  * common: Fix infloop in p11_path_build [PR#326, PR#327]
  * proxy: C_CloseAllSessions: Make sure that calloc args are non-zero [PR#325]
  * common: Check for a NULL locale before freeing it [PR#321]
  * Build and test fixes [PR#313, PR#315, PR#317, PR#318, PR#319, PR#323,
  PR#330, PR#333, PR#334, PR#335, PR#338, PR#339]
- Changes for version 0.23.21
  * proxy: Do not assign duplicate slot IDs [PR#282]
  * common: Get program name based on executable path if possible [PR#307]
  * anchor: Exit with non-zero code, if any error occurs [PR#304]
  * Build and test fixes [PR#283, PR#290, PR#291, PR#292, PR#296, PR#299,
  PR#305, PR#306, PR#309, PR#311]
- Changes for version 0.23.20:
  * Revert "Fix RPC when length-s are 0" changes [PR#276]
- Changes for version 0.23.19:
  * common: add Russian PKCS#11 extensions to pkcs11x.h header [PR#255]
  * Add simple bash completion for provided commands [PR#258]
  * Unbreak list matching in enable-in and disable-in [PR#262]
  * Fix RPC when length-s are 0 [PR#259]
  * rpc: Add vsock transport support [PR#270]
  * trust: Support CKA_NSS_{SERVER,EMAIL}_DISTRUST_AFTER [PR#265]
  * Build fixes [PR#271, PR#272, PR#273, ...]
- Changes for version 0.23.18:
  * rpc: Allow empty CK_DATE value [PR#253]
  * build: Meson fixes [PR#245]
  * build: Adjust feature parity between meson and autotools [PR#247]
- Changes for version 0.23.17:
  * common: Fix uClibc-ng compilation [PR#237]
  * trust: do not allow daylight to invalidate date validation [PR#236]
  * build: Port to meson build system [PR#231, PR#234]
  * rpc: On UNIX wait on condition variable instead of FD if header is for a different thread [PR#232]
  * doc: Add 'server' command in help [PR#229]
  * Build and test fixes [PR#230]
- Changes for version 0.23.16:
  * proxy: Support C_WaitForSlotEvent() if CKF_DONT_BLOCK is specified [PR#225]
  * conf: Ignore user configuration if the program is running as root [PR#226]
  * proxy: Refresh slot list on every C_GetSlotList call [PR#224]
  * modules: Fix index used in call to p11_dict_remove() [PR#219]
  * Fix Win32 p11_dl_error crash [PR#218]
  * modules: check gl.modules before iterates on it when freeing [PR#217]
  * trust: Ignore unreadable content in anchors [PR#215]
  * extract-jks: Prefer _p11_extract_jks_timestamp to SOURCE_DATE_EPOCH [PR#213]
- Changes for version 0.23.15:
  * trust: Improve error handling if backed trust file is corrupted [PR#206]
  * url: Prefer upper-case letters in hex characters when encoding [PR#193]
  * trust/extract-jks.c: also honor SOURCE_DATE_EPOCH time [PR#202]
  * virtual: Prefer fixed closures to libffi closures [PR#196]
  * Fix issues spotted by coverity and cppcheck [PR#194, PR#204]
  * Build and test fixes [PR#164, PR#191, PR#199, PR#201]
- Changes for version 0.23.14:
  * proxy: Avoid invalid memory access when unloading proxy module [PR#180]
  * Update pkcs11 header to allow SoftHSMv2 to compile [PR#181]
  * build: Restore libpthread dependency [PR#183]
  * Build fixes [PR#188]
- Changes for version 0.23.13:
  * server: Enable socket activation through systemd [PR#173]
  * rpc-server: p11_kit_remote_serve_tokens: Allow exporting all modules
    [PR#174]
  * proxy: Fail early if there is no slot mapping [PR#175]
  * Remove hard dependency on libpthread [PR#177]
  * Build fixes [PR#170, PR#176]
- Changes for version 0.23.12
  * Fix compile error when PKCS#11 GNU calling convention is enabled [PR#160]
  * Fix getauxval() and secure_getenv() emulation on macOS and FreeBSD [PR#167]
  * Build and test fixes on macOS [PR#162, PR#168]
- Changes for version 0.23.11
  * trust: Add extractor for edk2/cacerts.bin [PR#139]
  * modules: Add option to control module visibility from proxy [PR#140]
  * trust: Prevent trust module being loaded by proxy module [PR#142]
  * library: Use dedicated locale object for printing error [PR#148]
  * Treat CKR_CRYPTOKI_ALREADY_INITIALIZED correctly [PR#134]
  * Improve const correctness for P11KitUri [PR#152]
  * PKCS#11 URI scheme comparison is now case insensitive [PR#156]
  * Build and test fixes [PR#151, PR#149, PR#141, PR#138, PR#135]
- Changes for version 0.23.10
  * filter: Respect "write-protected" vendor-specific attribute in
    PKCS#11 URI [PR#129]
  * server: Improve shell integration and documentation [PR#107, PR#108]
  * proxy: Reuse existing slot ID mapping in after fork() [PR#120]
  * trust: Forcibly mark "Default Trust" read-only [PR#123]
  * New function p11_kit_override_system_files() which can be used for
    testing [PR#110]
  * trust: Filter out duplicate extensions [PR#69]
  * Update translations [PR#128]
  * Bug fixes [PR#125, PR#126]
- Changes for version 0.23.9
  * Fix p11-kit server regressions [PR#103, PR#104]
  * trust: Respect anyExtendedKeyUsage in CA certificates [PR#99]
  * Build fixes related to reallocarray [PR#96, PR#98, PR#100]
- Changes for version 0.23.8
  * Improve vendor query attributes handling in PKCS#11 URI [PR#92]
  * Add OTP and GOST mechanisms to pkcs11.h [PR#90, PR#91]
  * New envvar P11_KIT_NO_USER_CONFIG to stop looking at user
    configurations [PR#87]
  * Build fixes for Solaris and 32-bit big-endian platforms [PR#81, PR#86]
- Changes for version 0.23.7
  * Fix memory issues with "p11-kit server" [PR#78]
  * Build fixes [PR#77 ...]
- Changes for version 0.23.6
  * Port "p11-kit server" to Windows and portability fixes of the RPC
    protocol [PR#67, PR#72, PR#74]
  * Recover the old behavior of "trust anchor --remove" [PR#70, PR#71]
  * Build fixes [PR#63 ...]
- Changes for version 0.23.5
  * Fix license notice of common/unix-peer.c [PR#58]
  * Remove systemd unit files for now [PR#60]
  * Build fixes for FreeBSD [PR#56]
- Changes for version 0.23.4
  * Recognize query attributes defined in PKCS#11 URI (RFC7512) [PR#31,
    PR#37, PR#52]
  * The trust policy module now recognizes CKA_NSS_MOZILLA_CA_POLICY
    attribute, used by Firefox [#99453, PR#46]
  * Add 'trust dump' command to dump all PKCS#11 objects in the
    persistence format [PR#44]
  * New experimental 'p11-kit server' command that allows PKCS#11
    forwarding through a Unix domain socket.  A client-side module
    p11-kit-client.so is also provided [PR#15]
  * Add systemd unit files for exporting the proxy module through a
    Unix domain socket [PR#35]
  * New P11KitIter API to iterate over slots, tokens, and modules in
    addition to objects [PR#28]
  * libffi dependency is now optional [PR#9]
  * Build fixes for FreeBSD, macOS, and Windows [PR#32, PR#39, PR#45]
- Changes for version 0.23.3
  * Install private executables in libexecdir [fdo#98817]
  * Fix link error of proxy module on macOS [fdo#98022]
  * Use new PKCS#11 URI specification for URIs [fdo#97245]
  * Support x-init-reserved argument of C_Initialize() in remote modules
    [fdo#80519]
  * Incorporate changes from PKCS#11 2.40 specification
  * Bump libtool library version
  * Documentation fixes
  * Build fixes [fdo#87192 ...]
- Move RPM macros to %_rpmmacrodir.
- New server subpackage
- Change keyring to new maintainer Daiki Ueno
- Avoid bareword to fix build failure
- Remove obsolete patches:
  * p11-kit-biarch.patch
  * 0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch
  * 0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch</changelog>
  <changelog author="lnussel@suse.com" date="1674648000">- Backport IBM specific mechanism and attributes (Jira#PED-584)
  0001-Add-IBM-specific-mechanism-and-attributes.patch
  0002-Add-support-for-serializing-CK_ECDH1_DERIVE_PARAMS-m.patch
  0003-client-Allow-zero-part-length-at-C_SignUpdate.patch
  0004-Fix-support-of-CKA_DERIVE_TEMPLATE.patch
  0005-Add-other-SHA-variants-also-for-RSA-and-EC-signature.patch
  0006-Add-support-for-missing-AES-and-DES-DES3-mechanisms.patch
  0007-Add-support-for-MAC-and-HMAC-general-mechanisms.patch
  0008-Add-support-for-CKM_DH_PKCS_DERIVE.patch
  0009-rpc-Handle-special-cases-for-buffer-and-length.patch
  0010-Add-support-for-CKM_AES_CTR.patch
  0011-Add-support-for-CKM_AES_GCM.patch
  0012-common-pkcs11x.h-Support-CRYPTOKI_GNU-for-IBM-vendor.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1698148800">- Ensure that programs using &lt;p11-kit/pkcs11x.h&gt; can be compiled
  with CRYPTOKI_GNU. Fixes GnuTLS builds. [jsc#PED-6705]
  * Add p11-kit-pkcs11-gnu-Enable-testing-with-p11-kit-pkcs11x.h.patch</changelog>
</package>
<package pkgid="70c16505c10d0dbb414faf5127fe9f9ac94c244971f492c1bcab3b0e272b712f" name="pam" arch="aarch64">
  <version epoch="0" ver="1.3.0" rel="150000.6.66.1"/>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1629892800">- Added pam_faillock to the set of modules.
  [jsc#sle-20638, pam-sle20638-add-pam_faillock.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1630497600">- Added new file macros.pam on request of systemd.
  [bsc#1190052, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1633521600">- Corrected macros.pam entry for %_pam_moduledir
  Cleanup in pam.spec:
  * Replaced all references to ${_lib}/security in pam.spec by
  %{_pam_moduledir}
  * Removed definition of (unused) "amdir".</changelog>
  <changelog author="josef.moellers@suse.com" date="1634212800">- Added tmpfiles for pam to set up directory for pam_faillock.
  [pam.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634817600">- Corrected a bad directive file which resulted in
  the "securetty" file to be installed as "macros.pam".
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1645704000">- Define _pam_vendordir as "/%{_sysconfdir}/pam.d"
  The variable is needed by systemd and others.
  [bsc#1196093, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- Between allocating the variable "ai" and free'ing them, there are
  two "return NO" were we don't free this variable. This patch
  inserts freaddrinfo() calls before the "return NO;"s.
  [bsc#1197024, pam-bsc1197024-free-addrinfo-before-return.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1648814400">- Do not include obsolete libselinux header files flask.h and
  av_permissions.h.
  [bsc#1197794, pam-bsc1197794-do-not-include-obsolete-header-files.patch]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1662552000">- Update pam_motd to the most current version. This fixes various issues
  and adds support for mot.d directories [jsc#PED-1712].
  * Added: pam-ped1712-pam_motd-directory-feature.patch</changelog>
  <changelog author="tabraham@suse.com" date="1703851200">- pam_lastlog: check localtime_r() return value (bsc#1217000)
  * Added: pam-bsc1217000-pam_lastlog-check-localtime_r-return-value.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1704715200">- Add missing O_DIRECTORY flag in `protect_dir()` for pam_namespace module.
  [bsc#1218475, pam-bsc1218475-pam_namespace-O_DIRECTORY-flag.patch]</changelog>
</package>
<package pkgid="f0dd371c82d2850bd65bac9d62bd7f1781af6b4793ea7d3a15c69a1736454a00" name="pam" arch="s390x">
  <version epoch="0" ver="1.3.0" rel="150000.6.66.1"/>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1629892800">- Added pam_faillock to the set of modules.
  [jsc#sle-20638, pam-sle20638-add-pam_faillock.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1630497600">- Added new file macros.pam on request of systemd.
  [bsc#1190052, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1633521600">- Corrected macros.pam entry for %_pam_moduledir
  Cleanup in pam.spec:
  * Replaced all references to ${_lib}/security in pam.spec by
  %{_pam_moduledir}
  * Removed definition of (unused) "amdir".</changelog>
  <changelog author="josef.moellers@suse.com" date="1634212800">- Added tmpfiles for pam to set up directory for pam_faillock.
  [pam.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634817600">- Corrected a bad directive file which resulted in
  the "securetty" file to be installed as "macros.pam".
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1645704000">- Define _pam_vendordir as "/%{_sysconfdir}/pam.d"
  The variable is needed by systemd and others.
  [bsc#1196093, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- Between allocating the variable "ai" and free'ing them, there are
  two "return NO" were we don't free this variable. This patch
  inserts freaddrinfo() calls before the "return NO;"s.
  [bsc#1197024, pam-bsc1197024-free-addrinfo-before-return.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1648814400">- Do not include obsolete libselinux header files flask.h and
  av_permissions.h.
  [bsc#1197794, pam-bsc1197794-do-not-include-obsolete-header-files.patch]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1662552000">- Update pam_motd to the most current version. This fixes various issues
  and adds support for mot.d directories [jsc#PED-1712].
  * Added: pam-ped1712-pam_motd-directory-feature.patch</changelog>
  <changelog author="tabraham@suse.com" date="1703851200">- pam_lastlog: check localtime_r() return value (bsc#1217000)
  * Added: pam-bsc1217000-pam_lastlog-check-localtime_r-return-value.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1704715200">- Add missing O_DIRECTORY flag in `protect_dir()` for pam_namespace module.
  [bsc#1218475, pam-bsc1218475-pam_namespace-O_DIRECTORY-flag.patch]</changelog>
</package>
<package pkgid="ca4331e4069f2b3ce1e6555040a1038ebb0198490337eee6e436d78e7012e5e3" name="pam" arch="src">
  <version epoch="0" ver="1.3.0" rel="150000.6.66.1"/>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1629892800">- Added pam_faillock to the set of modules.
  [jsc#sle-20638, pam-sle20638-add-pam_faillock.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1630497600">- Added new file macros.pam on request of systemd.
  [bsc#1190052, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1633521600">- Corrected macros.pam entry for %_pam_moduledir
  Cleanup in pam.spec:
  * Replaced all references to ${_lib}/security in pam.spec by
  %{_pam_moduledir}
  * Removed definition of (unused) "amdir".</changelog>
  <changelog author="josef.moellers@suse.com" date="1634212800">- Added tmpfiles for pam to set up directory for pam_faillock.
  [pam.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634817600">- Corrected a bad directive file which resulted in
  the "securetty" file to be installed as "macros.pam".
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1645704000">- Define _pam_vendordir as "/%{_sysconfdir}/pam.d"
  The variable is needed by systemd and others.
  [bsc#1196093, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- Between allocating the variable "ai" and free'ing them, there are
  two "return NO" were we don't free this variable. This patch
  inserts freaddrinfo() calls before the "return NO;"s.
  [bsc#1197024, pam-bsc1197024-free-addrinfo-before-return.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1648814400">- Do not include obsolete libselinux header files flask.h and
  av_permissions.h.
  [bsc#1197794, pam-bsc1197794-do-not-include-obsolete-header-files.patch]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1662552000">- Update pam_motd to the most current version. This fixes various issues
  and adds support for mot.d directories [jsc#PED-1712].
  * Added: pam-ped1712-pam_motd-directory-feature.patch</changelog>
  <changelog author="tabraham@suse.com" date="1703851200">- pam_lastlog: check localtime_r() return value (bsc#1217000)
  * Added: pam-bsc1217000-pam_lastlog-check-localtime_r-return-value.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1704715200">- Add missing O_DIRECTORY flag in `protect_dir()` for pam_namespace module.
  [bsc#1218475, pam-bsc1218475-pam_namespace-O_DIRECTORY-flag.patch]</changelog>
</package>
<package pkgid="3e730b84a0cff3112c968ba6a2b42b2e63bff359b4714e757ec0befd0a70ea77" name="pam" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="150000.6.66.1"/>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1629892800">- Added pam_faillock to the set of modules.
  [jsc#sle-20638, pam-sle20638-add-pam_faillock.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1630497600">- Added new file macros.pam on request of systemd.
  [bsc#1190052, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1633521600">- Corrected macros.pam entry for %_pam_moduledir
  Cleanup in pam.spec:
  * Replaced all references to ${_lib}/security in pam.spec by
  %{_pam_moduledir}
  * Removed definition of (unused) "amdir".</changelog>
  <changelog author="josef.moellers@suse.com" date="1634212800">- Added tmpfiles for pam to set up directory for pam_faillock.
  [pam.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634817600">- Corrected a bad directive file which resulted in
  the "securetty" file to be installed as "macros.pam".
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1645704000">- Define _pam_vendordir as "/%{_sysconfdir}/pam.d"
  The variable is needed by systemd and others.
  [bsc#1196093, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- Between allocating the variable "ai" and free'ing them, there are
  two "return NO" were we don't free this variable. This patch
  inserts freaddrinfo() calls before the "return NO;"s.
  [bsc#1197024, pam-bsc1197024-free-addrinfo-before-return.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1648814400">- Do not include obsolete libselinux header files flask.h and
  av_permissions.h.
  [bsc#1197794, pam-bsc1197794-do-not-include-obsolete-header-files.patch]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1662552000">- Update pam_motd to the most current version. This fixes various issues
  and adds support for mot.d directories [jsc#PED-1712].
  * Added: pam-ped1712-pam_motd-directory-feature.patch</changelog>
  <changelog author="tabraham@suse.com" date="1703851200">- pam_lastlog: check localtime_r() return value (bsc#1217000)
  * Added: pam-bsc1217000-pam_lastlog-check-localtime_r-return-value.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1704715200">- Add missing O_DIRECTORY flag in `protect_dir()` for pam_namespace module.
  [bsc#1218475, pam-bsc1218475-pam_namespace-O_DIRECTORY-flag.patch]</changelog>
</package>
<package pkgid="b965b0b3b7c0d09854baa3d0a896404433e3ba8b187f8bea97cf89ea82b4afc0" name="pam" arch="aarch64">
  <version epoch="0" ver="1.3.0" rel="150000.6.71.2"/>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1629892800">- Added pam_faillock to the set of modules.
  [jsc#sle-20638, pam-sle20638-add-pam_faillock.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1630497600">- Added new file macros.pam on request of systemd.
  [bsc#1190052, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1633521600">- Corrected macros.pam entry for %_pam_moduledir
  Cleanup in pam.spec:
  * Replaced all references to ${_lib}/security in pam.spec by
  %{_pam_moduledir}
  * Removed definition of (unused) "amdir".</changelog>
  <changelog author="josef.moellers@suse.com" date="1634212800">- Added tmpfiles for pam to set up directory for pam_faillock.
  [pam.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634817600">- Corrected a bad directive file which resulted in
  the "securetty" file to be installed as "macros.pam".
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1645704000">- Define _pam_vendordir as "/%{_sysconfdir}/pam.d"
  The variable is needed by systemd and others.
  [bsc#1196093, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- Between allocating the variable "ai" and free'ing them, there are
  two "return NO" were we don't free this variable. This patch
  inserts freaddrinfo() calls before the "return NO;"s.
  [bsc#1197024, pam-bsc1197024-free-addrinfo-before-return.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1648814400">- Do not include obsolete libselinux header files flask.h and
  av_permissions.h.
  [bsc#1197794, pam-bsc1197794-do-not-include-obsolete-header-files.patch]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1662552000">- Update pam_motd to the most current version. This fixes various issues
  and adds support for mot.d directories [jsc#PED-1712].
  * Added: pam-ped1712-pam_motd-directory-feature.patch</changelog>
  <changelog author="tabraham@suse.com" date="1703851200">- pam_lastlog: check localtime_r() return value (bsc#1217000)
  * Added: pam-bsc1217000-pam_lastlog-check-localtime_r-return-value.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1704715200">- Add missing O_DIRECTORY flag in `protect_dir()` for pam_namespace module.
  [bsc#1218475, pam-bsc1218475-pam_namespace-O_DIRECTORY-flag.patch]</changelog>
  <changelog author="sbrabec@suse.com" date="1721649600">- Prevent cursor escape from the login prompt [bsc#1194818]
  * Added: pam-bsc1194818-cursor-escape.patch</changelog>
</package>
<package pkgid="b74fab49fa4bb1b77a47d738829310ff7e6b93266cd86221f2777b30c4f2a419" name="pam" arch="s390x">
  <version epoch="0" ver="1.3.0" rel="150000.6.71.2"/>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1629892800">- Added pam_faillock to the set of modules.
  [jsc#sle-20638, pam-sle20638-add-pam_faillock.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1630497600">- Added new file macros.pam on request of systemd.
  [bsc#1190052, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1633521600">- Corrected macros.pam entry for %_pam_moduledir
  Cleanup in pam.spec:
  * Replaced all references to ${_lib}/security in pam.spec by
  %{_pam_moduledir}
  * Removed definition of (unused) "amdir".</changelog>
  <changelog author="josef.moellers@suse.com" date="1634212800">- Added tmpfiles for pam to set up directory for pam_faillock.
  [pam.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634817600">- Corrected a bad directive file which resulted in
  the "securetty" file to be installed as "macros.pam".
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1645704000">- Define _pam_vendordir as "/%{_sysconfdir}/pam.d"
  The variable is needed by systemd and others.
  [bsc#1196093, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- Between allocating the variable "ai" and free'ing them, there are
  two "return NO" were we don't free this variable. This patch
  inserts freaddrinfo() calls before the "return NO;"s.
  [bsc#1197024, pam-bsc1197024-free-addrinfo-before-return.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1648814400">- Do not include obsolete libselinux header files flask.h and
  av_permissions.h.
  [bsc#1197794, pam-bsc1197794-do-not-include-obsolete-header-files.patch]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1662552000">- Update pam_motd to the most current version. This fixes various issues
  and adds support for mot.d directories [jsc#PED-1712].
  * Added: pam-ped1712-pam_motd-directory-feature.patch</changelog>
  <changelog author="tabraham@suse.com" date="1703851200">- pam_lastlog: check localtime_r() return value (bsc#1217000)
  * Added: pam-bsc1217000-pam_lastlog-check-localtime_r-return-value.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1704715200">- Add missing O_DIRECTORY flag in `protect_dir()` for pam_namespace module.
  [bsc#1218475, pam-bsc1218475-pam_namespace-O_DIRECTORY-flag.patch]</changelog>
  <changelog author="sbrabec@suse.com" date="1721649600">- Prevent cursor escape from the login prompt [bsc#1194818]
  * Added: pam-bsc1194818-cursor-escape.patch</changelog>
</package>
<package pkgid="85e34804d90c05e56c59582830f20cfe22694da8403cecaa3ca30e576d6836c5" name="pam" arch="src">
  <version epoch="0" ver="1.3.0" rel="150000.6.71.2"/>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1629892800">- Added pam_faillock to the set of modules.
  [jsc#sle-20638, pam-sle20638-add-pam_faillock.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1630497600">- Added new file macros.pam on request of systemd.
  [bsc#1190052, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1633521600">- Corrected macros.pam entry for %_pam_moduledir
  Cleanup in pam.spec:
  * Replaced all references to ${_lib}/security in pam.spec by
  %{_pam_moduledir}
  * Removed definition of (unused) "amdir".</changelog>
  <changelog author="josef.moellers@suse.com" date="1634212800">- Added tmpfiles for pam to set up directory for pam_faillock.
  [pam.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634817600">- Corrected a bad directive file which resulted in
  the "securetty" file to be installed as "macros.pam".
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1645704000">- Define _pam_vendordir as "/%{_sysconfdir}/pam.d"
  The variable is needed by systemd and others.
  [bsc#1196093, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- Between allocating the variable "ai" and free'ing them, there are
  two "return NO" were we don't free this variable. This patch
  inserts freaddrinfo() calls before the "return NO;"s.
  [bsc#1197024, pam-bsc1197024-free-addrinfo-before-return.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1648814400">- Do not include obsolete libselinux header files flask.h and
  av_permissions.h.
  [bsc#1197794, pam-bsc1197794-do-not-include-obsolete-header-files.patch]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1662552000">- Update pam_motd to the most current version. This fixes various issues
  and adds support for mot.d directories [jsc#PED-1712].
  * Added: pam-ped1712-pam_motd-directory-feature.patch</changelog>
  <changelog author="tabraham@suse.com" date="1703851200">- pam_lastlog: check localtime_r() return value (bsc#1217000)
  * Added: pam-bsc1217000-pam_lastlog-check-localtime_r-return-value.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1704715200">- Add missing O_DIRECTORY flag in `protect_dir()` for pam_namespace module.
  [bsc#1218475, pam-bsc1218475-pam_namespace-O_DIRECTORY-flag.patch]</changelog>
  <changelog author="sbrabec@suse.com" date="1721649600">- Prevent cursor escape from the login prompt [bsc#1194818]
  * Added: pam-bsc1194818-cursor-escape.patch</changelog>
</package>
<package pkgid="192b79422ee69016f50df711c43471ec1f73364b4e647baf2387362e4fc395bc" name="pam" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="150000.6.71.2"/>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1629892800">- Added pam_faillock to the set of modules.
  [jsc#sle-20638, pam-sle20638-add-pam_faillock.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1630497600">- Added new file macros.pam on request of systemd.
  [bsc#1190052, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1633521600">- Corrected macros.pam entry for %_pam_moduledir
  Cleanup in pam.spec:
  * Replaced all references to ${_lib}/security in pam.spec by
  %{_pam_moduledir}
  * Removed definition of (unused) "amdir".</changelog>
  <changelog author="josef.moellers@suse.com" date="1634212800">- Added tmpfiles for pam to set up directory for pam_faillock.
  [pam.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634817600">- Corrected a bad directive file which resulted in
  the "securetty" file to be installed as "macros.pam".
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1645704000">- Define _pam_vendordir as "/%{_sysconfdir}/pam.d"
  The variable is needed by systemd and others.
  [bsc#1196093, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- Between allocating the variable "ai" and free'ing them, there are
  two "return NO" were we don't free this variable. This patch
  inserts freaddrinfo() calls before the "return NO;"s.
  [bsc#1197024, pam-bsc1197024-free-addrinfo-before-return.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1648814400">- Do not include obsolete libselinux header files flask.h and
  av_permissions.h.
  [bsc#1197794, pam-bsc1197794-do-not-include-obsolete-header-files.patch]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1662552000">- Update pam_motd to the most current version. This fixes various issues
  and adds support for mot.d directories [jsc#PED-1712].
  * Added: pam-ped1712-pam_motd-directory-feature.patch</changelog>
  <changelog author="tabraham@suse.com" date="1703851200">- pam_lastlog: check localtime_r() return value (bsc#1217000)
  * Added: pam-bsc1217000-pam_lastlog-check-localtime_r-return-value.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1704715200">- Add missing O_DIRECTORY flag in `protect_dir()` for pam_namespace module.
  [bsc#1218475, pam-bsc1218475-pam_namespace-O_DIRECTORY-flag.patch]</changelog>
  <changelog author="sbrabec@suse.com" date="1721649600">- Prevent cursor escape from the login prompt [bsc#1194818]
  * Added: pam-bsc1194818-cursor-escape.patch</changelog>
</package>
<package pkgid="1078aa553f1bd08c95e7dedcbd121b05f42e591a91535ef2a133fc76bc0c8ce6" name="pam-config" arch="aarch64">
  <version epoch="0" ver="1.1" rel="150200.3.6.1"/>
  <changelog author="kukuk@suse.de" date="1415793600">- Added pam_google_authenticator.patch: support google authentiator
  [bnc#888149]</changelog>
  <changelog author="ledest@gmail.com" date="1418472000">- fix bashism in postun script</changelog>
  <changelog author="kukuk@suse.de" date="1459512000">- Update to version 0.89
  - Includes pam_google_authenticator.patch
  - Better check for dual-arch PAM stack</changelog>
  <changelog author="kukuk@suse.de" date="1466683200">- Update to version 0.91
  - Adjust for Linux-PAM 1.3.0
  - Automatically replace obsolete PAM modules no longer installed
  - Extend error messages</changelog>
  <changelog author="mliska@suse.cz" date="1483963200">- Add gcc7-Add-break-to-a-case-label.patch: fix new warning reported
  by GCC7.</changelog>
  <changelog author="kukuk@suse.de" date="1502280000">- Update to version 0.92
  - add pam_kwallet5 support
  - move pam_systemd before pam_krb5 [bsc#1014995]
  - obsoletes gcc7-Add-break-to-a-case-label.patch</changelog>
  <changelog author="kukuk@suse.de" date="1508500800">- Update to version 0.93: Teach pam_cracklib module about
  enforce_for_root [bnc#929079, FATE#312643].</changelog>
  <changelog author="kukuk@suse.de" date="1516017600">- Update to version 0.94: add support for keyinit [bsc#1045886]</changelog>
  <changelog author="kukuk@suse.de" date="1519300800">- Update to version 0.95:
  - fix migration from pam_unix2/pam_pwcheck to pam_unix/pam_cracklib</changelog>
  <changelog author="kukuk@suse.com" date="1519387200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kukuk@suse.de" date="1523448000">- Add triggerun script: update config if pam-modules is removed
  [bsc#1088863]</changelog>
  <changelog author="kukuk@suse.de" date="1544443200">- Update to version 0.96:
  * Add missing pam_cracklib options [bsc#1114835]</changelog>
  <changelog author="kukuk@suse.de" date="1553601600">- Update to version 1.0:
  - Add search in different locations for config files
  - Add support for pam_mktemp [bsc#1123878]</changelog>
  <changelog author="kukuk@suse.de" date="1563278400">- Update to version 1.1:
  - enhance comments in common-*-pc files</changelog>
  <changelog author="josef.moellers@suse.com" date="1623240000">- prior to writing an service-specific config file, the main function
  calls access() on the destination file in /etc/pam.d.
  This will fail and no config file will be written when the original
  config file was installed in /usr/etc/pam.d.
  A similar problem exists when creating the new service file:
  create_service_file() wants to give the new service file the same
  user, group and mode as the old one, but the old one may not exist.
  In that case, set these to 0(root), 0(root), and 0644.
  [pam-config-remove-bad-access-call.patch, bsc#1187091]</changelog>
  <changelog author="josef.moellers@suse.com" date="1623240001">- Add "revoke" to the option list for pam_keyinit
  (Remove some leftover debugs while we're at it)
  [pam-config-fix-pam_keyinit-options.patch]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1708430400">- Fix pam_gnome_keyring module for AUTH.
  [pam-config-fix-pam_gnome_keyring.patch, bsc#1219767]</changelog>
</package>
<package pkgid="e9681a1d171219079d0226feecbe9329c957ffdd9a66a23c0d46bb062d802f7f" name="pam-config" arch="s390x">
  <version epoch="0" ver="1.1" rel="150200.3.6.1"/>
  <changelog author="kukuk@suse.de" date="1415793600">- Added pam_google_authenticator.patch: support google authentiator
  [bnc#888149]</changelog>
  <changelog author="ledest@gmail.com" date="1418472000">- fix bashism in postun script</changelog>
  <changelog author="kukuk@suse.de" date="1459512000">- Update to version 0.89
  - Includes pam_google_authenticator.patch
  - Better check for dual-arch PAM stack</changelog>
  <changelog author="kukuk@suse.de" date="1466683200">- Update to version 0.91
  - Adjust for Linux-PAM 1.3.0
  - Automatically replace obsolete PAM modules no longer installed
  - Extend error messages</changelog>
  <changelog author="mliska@suse.cz" date="1483963200">- Add gcc7-Add-break-to-a-case-label.patch: fix new warning reported
  by GCC7.</changelog>
  <changelog author="kukuk@suse.de" date="1502280000">- Update to version 0.92
  - add pam_kwallet5 support
  - move pam_systemd before pam_krb5 [bsc#1014995]
  - obsoletes gcc7-Add-break-to-a-case-label.patch</changelog>
  <changelog author="kukuk@suse.de" date="1508500800">- Update to version 0.93: Teach pam_cracklib module about
  enforce_for_root [bnc#929079, FATE#312643].</changelog>
  <changelog author="kukuk@suse.de" date="1516017600">- Update to version 0.94: add support for keyinit [bsc#1045886]</changelog>
  <changelog author="kukuk@suse.de" date="1519300800">- Update to version 0.95:
  - fix migration from pam_unix2/pam_pwcheck to pam_unix/pam_cracklib</changelog>
  <changelog author="kukuk@suse.com" date="1519387200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kukuk@suse.de" date="1523448000">- Add triggerun script: update config if pam-modules is removed
  [bsc#1088863]</changelog>
  <changelog author="kukuk@suse.de" date="1544443200">- Update to version 0.96:
  * Add missing pam_cracklib options [bsc#1114835]</changelog>
  <changelog author="kukuk@suse.de" date="1553601600">- Update to version 1.0:
  - Add search in different locations for config files
  - Add support for pam_mktemp [bsc#1123878]</changelog>
  <changelog author="kukuk@suse.de" date="1563278400">- Update to version 1.1:
  - enhance comments in common-*-pc files</changelog>
  <changelog author="josef.moellers@suse.com" date="1623240000">- prior to writing an service-specific config file, the main function
  calls access() on the destination file in /etc/pam.d.
  This will fail and no config file will be written when the original
  config file was installed in /usr/etc/pam.d.
  A similar problem exists when creating the new service file:
  create_service_file() wants to give the new service file the same
  user, group and mode as the old one, but the old one may not exist.
  In that case, set these to 0(root), 0(root), and 0644.
  [pam-config-remove-bad-access-call.patch, bsc#1187091]</changelog>
  <changelog author="josef.moellers@suse.com" date="1623240001">- Add "revoke" to the option list for pam_keyinit
  (Remove some leftover debugs while we're at it)
  [pam-config-fix-pam_keyinit-options.patch]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1708430400">- Fix pam_gnome_keyring module for AUTH.
  [pam-config-fix-pam_gnome_keyring.patch, bsc#1219767]</changelog>
</package>
<package pkgid="6cdaba64a7fe634507aa4b884cc276a2e29912121d26f26e1953b7869a994533" name="pam-config" arch="src">
  <version epoch="0" ver="1.1" rel="150200.3.6.1"/>
  <changelog author="speilicke@suse.com" date="1395057600">- "pam-config --debug --update" in the %post section fails if any
  /etc/pam.d/common-$TYPE file is not a symlink to /etc/pam.d/common-$TYPE-pc.
  Fix that by adding '--force'. This is mainly an update issue since
  fresh configs are created appropriatly</changelog>
  <changelog author="kukuk@suse.de" date="1396440000">- Update to pam-config 0.87
  - Add support for pam_access.so
- Rervert last change, it will break manually adjusted config
  files as documented</changelog>
  <changelog author="kukuk@suse.de" date="1411646400">- Update to pam-config 0.88
  - Add pam_ecryptfs to password section [bnc#895096]</changelog>
  <changelog author="kukuk@suse.de" date="1415793600">- Added pam_google_authenticator.patch: support google authentiator
  [bnc#888149]</changelog>
  <changelog author="ledest@gmail.com" date="1418472000">- fix bashism in postun script</changelog>
  <changelog author="kukuk@suse.de" date="1459512000">- Update to version 0.89
  - Includes pam_google_authenticator.patch
  - Better check for dual-arch PAM stack</changelog>
  <changelog author="kukuk@suse.de" date="1466683200">- Update to version 0.91
  - Adjust for Linux-PAM 1.3.0
  - Automatically replace obsolete PAM modules no longer installed
  - Extend error messages</changelog>
  <changelog author="mliska@suse.cz" date="1483963200">- Add gcc7-Add-break-to-a-case-label.patch: fix new warning reported
  by GCC7.</changelog>
  <changelog author="kukuk@suse.de" date="1502280000">- Update to version 0.92
  - add pam_kwallet5 support
  - move pam_systemd before pam_krb5 [bsc#1014995]
  - obsoletes gcc7-Add-break-to-a-case-label.patch</changelog>
  <changelog author="kukuk@suse.de" date="1508500800">- Update to version 0.93: Teach pam_cracklib module about
  enforce_for_root [bnc#929079, FATE#312643].</changelog>
  <changelog author="kukuk@suse.de" date="1516017600">- Update to version 0.94: add support for keyinit [bsc#1045886]</changelog>
  <changelog author="kukuk@suse.de" date="1519300800">- Update to version 0.95:
  - fix migration from pam_unix2/pam_pwcheck to pam_unix/pam_cracklib</changelog>
  <changelog author="kukuk@suse.com" date="1519387200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kukuk@suse.de" date="1523448000">- Add triggerun script: update config if pam-modules is removed
  [bsc#1088863]</changelog>
  <changelog author="kukuk@suse.de" date="1544443200">- Update to version 0.96:
  * Add missing pam_cracklib options [bsc#1114835]</changelog>
  <changelog author="kukuk@suse.de" date="1553601600">- Update to version 1.0:
  - Add search in different locations for config files
  - Add support for pam_mktemp [bsc#1123878]</changelog>
  <changelog author="kukuk@suse.de" date="1563278400">- Update to version 1.1:
  - enhance comments in common-*-pc files</changelog>
  <changelog author="josef.moellers@suse.com" date="1623240000">- prior to writing an service-specific config file, the main function
  calls access() on the destination file in /etc/pam.d.
  This will fail and no config file will be written when the original
  config file was installed in /usr/etc/pam.d.
  A similar problem exists when creating the new service file:
  create_service_file() wants to give the new service file the same
  user, group and mode as the old one, but the old one may not exist.
  In that case, set these to 0(root), 0(root), and 0644.
  [pam-config-remove-bad-access-call.patch, bsc#1187091]</changelog>
  <changelog author="josef.moellers@suse.com" date="1623240001">- Add "revoke" to the option list for pam_keyinit
  (Remove some leftover debugs while we're at it)
  [pam-config-fix-pam_keyinit-options.patch]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1708430400">- Fix pam_gnome_keyring module for AUTH.
  [pam-config-fix-pam_gnome_keyring.patch, bsc#1219767]</changelog>
</package>
<package pkgid="7b767c2326b2ce2456dc9510294d485897d478cba1a2d5f39ab3a3b17e4c0931" name="pam-config" arch="x86_64">
  <version epoch="0" ver="1.1" rel="150200.3.6.1"/>
  <changelog author="kukuk@suse.de" date="1415793600">- Added pam_google_authenticator.patch: support google authentiator
  [bnc#888149]</changelog>
  <changelog author="ledest@gmail.com" date="1418472000">- fix bashism in postun script</changelog>
  <changelog author="kukuk@suse.de" date="1459512000">- Update to version 0.89
  - Includes pam_google_authenticator.patch
  - Better check for dual-arch PAM stack</changelog>
  <changelog author="kukuk@suse.de" date="1466683200">- Update to version 0.91
  - Adjust for Linux-PAM 1.3.0
  - Automatically replace obsolete PAM modules no longer installed
  - Extend error messages</changelog>
  <changelog author="mliska@suse.cz" date="1483963200">- Add gcc7-Add-break-to-a-case-label.patch: fix new warning reported
  by GCC7.</changelog>
  <changelog author="kukuk@suse.de" date="1502280000">- Update to version 0.92
  - add pam_kwallet5 support
  - move pam_systemd before pam_krb5 [bsc#1014995]
  - obsoletes gcc7-Add-break-to-a-case-label.patch</changelog>
  <changelog author="kukuk@suse.de" date="1508500800">- Update to version 0.93: Teach pam_cracklib module about
  enforce_for_root [bnc#929079, FATE#312643].</changelog>
  <changelog author="kukuk@suse.de" date="1516017600">- Update to version 0.94: add support for keyinit [bsc#1045886]</changelog>
  <changelog author="kukuk@suse.de" date="1519300800">- Update to version 0.95:
  - fix migration from pam_unix2/pam_pwcheck to pam_unix/pam_cracklib</changelog>
  <changelog author="kukuk@suse.com" date="1519387200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kukuk@suse.de" date="1523448000">- Add triggerun script: update config if pam-modules is removed
  [bsc#1088863]</changelog>
  <changelog author="kukuk@suse.de" date="1544443200">- Update to version 0.96:
  * Add missing pam_cracklib options [bsc#1114835]</changelog>
  <changelog author="kukuk@suse.de" date="1553601600">- Update to version 1.0:
  - Add search in different locations for config files
  - Add support for pam_mktemp [bsc#1123878]</changelog>
  <changelog author="kukuk@suse.de" date="1563278400">- Update to version 1.1:
  - enhance comments in common-*-pc files</changelog>
  <changelog author="josef.moellers@suse.com" date="1623240000">- prior to writing an service-specific config file, the main function
  calls access() on the destination file in /etc/pam.d.
  This will fail and no config file will be written when the original
  config file was installed in /usr/etc/pam.d.
  A similar problem exists when creating the new service file:
  create_service_file() wants to give the new service file the same
  user, group and mode as the old one, but the old one may not exist.
  In that case, set these to 0(root), 0(root), and 0644.
  [pam-config-remove-bad-access-call.patch, bsc#1187091]</changelog>
  <changelog author="josef.moellers@suse.com" date="1623240001">- Add "revoke" to the option list for pam_keyinit
  (Remove some leftover debugs while we're at it)
  [pam-config-fix-pam_keyinit-options.patch]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1708430400">- Fix pam_gnome_keyring module for AUTH.
  [pam-config-fix-pam_gnome_keyring.patch, bsc#1219767]</changelog>
</package>
<package pkgid="9ea8380bfb32d632d4d36d859546e789117a3665ecc4c926a78746e4c07c541c" name="pam_apparmor" arch="aarch64">
  <version epoch="0" ver="3.0.4" rel="150500.11.9.1"/>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
  <changelog author="scabrero@suse.de" date="1671796800">- Add samba-4-17.patch to update the samba profiles for samba
  version 4.17 (bsc#1206626);</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1693915200">- update zgrep profile to allow egrep helper use (bsc#1214458)
  - zgrep-profile-sync-with-master.diff</changelog>
  <changelog author="ddiss@suse.com" date="1695643200">- Fix pam_apparmor %post and %postun scripts to handle pam-config errors
  (bsc#1215596)</changelog>
</package>
<package pkgid="0161be2da89bdf0ed67c70a42f4da15e1c47b680c81303d63546417f8ac8e7b9" name="pam_apparmor" arch="s390x">
  <version epoch="0" ver="3.0.4" rel="150500.11.9.1"/>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
  <changelog author="scabrero@suse.de" date="1671796800">- Add samba-4-17.patch to update the samba profiles for samba
  version 4.17 (bsc#1206626);</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1693915200">- update zgrep profile to allow egrep helper use (bsc#1214458)
  - zgrep-profile-sync-with-master.diff</changelog>
  <changelog author="ddiss@suse.com" date="1695643200">- Fix pam_apparmor %post and %postun scripts to handle pam-config errors
  (bsc#1215596)</changelog>
</package>
<package pkgid="4906e4cbf5e3540650daadc511704014183422af0d4817fbc678643cbb302491" name="pam_apparmor" arch="x86_64">
  <version epoch="0" ver="3.0.4" rel="150500.11.9.1"/>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
  <changelog author="scabrero@suse.de" date="1671796800">- Add samba-4-17.patch to update the samba profiles for samba
  version 4.17 (bsc#1206626);</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1693915200">- update zgrep profile to allow egrep helper use (bsc#1214458)
  - zgrep-profile-sync-with-master.diff</changelog>
  <changelog author="ddiss@suse.com" date="1695643200">- Fix pam_apparmor %post and %postun scripts to handle pam-config errors
  (bsc#1215596)</changelog>
</package>
<package pkgid="edd4b545215af782b05a81b8e746296460c82eeb00360cd1e19b162ff704deb3" name="pam_pkcs11" arch="aarch64">
  <version epoch="0" ver="0.6.10" rel="150100.3.3.2"/>
  <changelog author="sbrabec@suse.cz" date="1330430400">- Change nssdb path to /etc/pki/nssdb (bnc#463469).
- Make libdir paths in pam_pkcs11.conf biarch-wise.</changelog>
  <changelog author="sbrabec@suse.cz" date="1341921600">- Updated to version 0.6.8:
  * Code cleanup.
  * Bug fixes.
  * Translation updates.</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1455019200">- Fix build for Tumbleweed:
  * Add pam_pkcs11-0.6.8-fix-crypto-cflags.patch
  * Rebuild configure with the bootstrap script (add libtool as
    build dependency)</changelog>
  <changelog author="sbrabec@suse.com" date="1500552000">- Updated to version 0.6.9:
  * Upstream web moved.
  * pkcs11_listcerts: Do not fail on certificate error.
  * Do not fail if card was already unlocked.
  * Other bug fixes.
  * Translation updates.
- Drop upstreamed pam_pkcs11-0.6.8-fix-crypto-cflags.patch.
- Work around incorrect upstream release process not calling
  "make dist".
- Split API documentation into a separate package
  pam_pkcs11-devel-doc.
- Add pam_pkcs11-fsf-address.patch.</changelog>
  <changelog author="astieger@suse.com" date="1502280000">- add service file bsc#1049219</changelog>
  <changelog author="jengelh@inai.de" date="1505044800">- Repair bulletpoint that skidded in description.
  Trim description of %name-devel-doc, it does not cotain
  the programs.</changelog>
  <changelog author="sbrabec@suse.com" date="1532347200">- Fix segfault and fetch problems when checking CRLs
  (pam_pkcs11-crl-check.patch).</changelog>
  <changelog author="vcizek@suse.com" date="1534507200">- Address security issues found by X41 D-Sec audit (bsc#1105012)
  * Authentication Replay
  * Buffer Overflow
  * Memory not cleaned properly before free()
- add patches:
  * 0001-verify-using-a-nonce-from-the-system-not-the-card.patch
  * 0002-fixed-buffer-overflow-with-long-home-directory.patch
  * 0003-fixed-wiping-secrets-with-OpenSSL_cleanse.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1548763200">- Update to version 0.6.10:
  * Fix some security issues (thx @frankmorgner):
    https://www.x41-dsec.de/lab/advisories/x41-2018-003-pam_pkcs11/
    (drop 0001-verify-using-a-nonce-from-the-system-not-the-card.patch,
    0002-fixed-buffer-overflow-with-long-home-directory.patch,
    0003-fixed-wiping-secrets-with-OpenSSL_cleanse.patch).
  * Fix buffer overflow with long home directory.
  * Fix wiping secrets (now using OpenSSL_cleanse()).
  * Verify using a nonce from the system, not the card.
  * Fix segfalt when checking CRLs
    (drop pam_pkcs11-crl-check.patch).
- Add rcpkcs11_eventmgr service symlink.</changelog>
  <changelog author="davide.benini@suse.com" date="1715083200">- Fix for bsc#1221255:
  * Add patch 0001-Set-slot_num-configuration-parameter-to-0-by-default.patch</changelog>
</package>
<package pkgid="f6a5ef02bbbe8fee2b5763832a3f812948c434357f226594a19a4e9173f9bbbf" name="pam_pkcs11" arch="s390x">
  <version epoch="0" ver="0.6.10" rel="150100.3.3.2"/>
  <changelog author="sbrabec@suse.cz" date="1330430400">- Change nssdb path to /etc/pki/nssdb (bnc#463469).
- Make libdir paths in pam_pkcs11.conf biarch-wise.</changelog>
  <changelog author="sbrabec@suse.cz" date="1341921600">- Updated to version 0.6.8:
  * Code cleanup.
  * Bug fixes.
  * Translation updates.</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1455019200">- Fix build for Tumbleweed:
  * Add pam_pkcs11-0.6.8-fix-crypto-cflags.patch
  * Rebuild configure with the bootstrap script (add libtool as
    build dependency)</changelog>
  <changelog author="sbrabec@suse.com" date="1500552000">- Updated to version 0.6.9:
  * Upstream web moved.
  * pkcs11_listcerts: Do not fail on certificate error.
  * Do not fail if card was already unlocked.
  * Other bug fixes.
  * Translation updates.
- Drop upstreamed pam_pkcs11-0.6.8-fix-crypto-cflags.patch.
- Work around incorrect upstream release process not calling
  "make dist".
- Split API documentation into a separate package
  pam_pkcs11-devel-doc.
- Add pam_pkcs11-fsf-address.patch.</changelog>
  <changelog author="astieger@suse.com" date="1502280000">- add service file bsc#1049219</changelog>
  <changelog author="jengelh@inai.de" date="1505044800">- Repair bulletpoint that skidded in description.
  Trim description of %name-devel-doc, it does not cotain
  the programs.</changelog>
  <changelog author="sbrabec@suse.com" date="1532347200">- Fix segfault and fetch problems when checking CRLs
  (pam_pkcs11-crl-check.patch).</changelog>
  <changelog author="vcizek@suse.com" date="1534507200">- Address security issues found by X41 D-Sec audit (bsc#1105012)
  * Authentication Replay
  * Buffer Overflow
  * Memory not cleaned properly before free()
- add patches:
  * 0001-verify-using-a-nonce-from-the-system-not-the-card.patch
  * 0002-fixed-buffer-overflow-with-long-home-directory.patch
  * 0003-fixed-wiping-secrets-with-OpenSSL_cleanse.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1548763200">- Update to version 0.6.10:
  * Fix some security issues (thx @frankmorgner):
    https://www.x41-dsec.de/lab/advisories/x41-2018-003-pam_pkcs11/
    (drop 0001-verify-using-a-nonce-from-the-system-not-the-card.patch,
    0002-fixed-buffer-overflow-with-long-home-directory.patch,
    0003-fixed-wiping-secrets-with-OpenSSL_cleanse.patch).
  * Fix buffer overflow with long home directory.
  * Fix wiping secrets (now using OpenSSL_cleanse()).
  * Verify using a nonce from the system, not the card.
  * Fix segfalt when checking CRLs
    (drop pam_pkcs11-crl-check.patch).
- Add rcpkcs11_eventmgr service symlink.</changelog>
  <changelog author="davide.benini@suse.com" date="1715083200">- Fix for bsc#1221255:
  * Add patch 0001-Set-slot_num-configuration-parameter-to-0-by-default.patch</changelog>
</package>
<package pkgid="3dfbdd3fcc558688610517789172acfe1d0c91ca09298ceabbe720fc985c3c9b" name="pam_pkcs11" arch="src">
  <version epoch="0" ver="0.6.10" rel="150100.3.3.2"/>
  <changelog author="sbrabec@suse.cz" date="1185451200">- Updated to version 0.6.0:
  * compiler warning fixes
  * I18N support
  * new configuration options
  * support for new environment variables
  * new tool pkcs11_setup
  * support for the NSS crypto libraries (off by default)
  * for more changes see ChangeLog.svn</changelog>
  <changelog author="sbrabec@suse.cz" date="1185883200">- Build with NSS instead of openssl.
- Applied patches from Jacob Berkman: MS UPN OID and NSS
  configuration.
- Fixed implicit declaration.</changelog>
  <changelog author="jberkman@novell.com" date="1189080000">- use the same directory for nssdb as the kerberos pkinit plugin</changelog>
  <changelog author="ro@suse.de" date="1207828800">- added baselibs.conf file to build xxbit packages
  for multilib support</changelog>
  <changelog author="sbrabec@suse.cz" date="1222171200">- Fixed uninitialized variable (bnc#351207).</changelog>
  <changelog author="sbrabec@suse.cz" date="1224072000">- Fixed all implicit declarations.</changelog>
  <changelog author="sbrabec@suse.cz" date="1245931200">- Supplement pam-32bit/pam-64bit in baselibs.conf (bnc#354164).</changelog>
  <changelog author="sbrabec@suse.cz" date="1249473600">- Updated to version 0.6.1:
  * Added functions to API.
  * Fixes from openSUSE packages upstreamed.
  * Minor fixes.
  * Translaton updates.</changelog>
  <changelog author="jengelh@medozas.de" date="1265025600">- package baselibs.conf</changelog>
  <changelog author="sbrabec@suse.cz" date="1294228800">- Updated to version 0.6.6:
  * Compatible with pcsc-lite-1.6.
  * New mapper API.
  * Minor fixes.
  * Translaton updates.</changelog>
  <changelog author="sbrabec@suse.cz" date="1330430400">- Change nssdb path to /etc/pki/nssdb (bnc#463469).
- Make libdir paths in pam_pkcs11.conf biarch-wise.</changelog>
  <changelog author="sbrabec@suse.cz" date="1341921600">- Updated to version 0.6.8:
  * Code cleanup.
  * Bug fixes.
  * Translation updates.</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1455019200">- Fix build for Tumbleweed:
  * Add pam_pkcs11-0.6.8-fix-crypto-cflags.patch
  * Rebuild configure with the bootstrap script (add libtool as
    build dependency)</changelog>
  <changelog author="sbrabec@suse.com" date="1500552000">- Updated to version 0.6.9:
  * Upstream web moved.
  * pkcs11_listcerts: Do not fail on certificate error.
  * Do not fail if card was already unlocked.
  * Other bug fixes.
  * Translation updates.
- Drop upstreamed pam_pkcs11-0.6.8-fix-crypto-cflags.patch.
- Work around incorrect upstream release process not calling
  "make dist".
- Split API documentation into a separate package
  pam_pkcs11-devel-doc.
- Add pam_pkcs11-fsf-address.patch.</changelog>
  <changelog author="astieger@suse.com" date="1502280000">- add service file bsc#1049219</changelog>
  <changelog author="jengelh@inai.de" date="1505044800">- Repair bulletpoint that skidded in description.
  Trim description of %name-devel-doc, it does not cotain
  the programs.</changelog>
  <changelog author="sbrabec@suse.com" date="1532347200">- Fix segfault and fetch problems when checking CRLs
  (pam_pkcs11-crl-check.patch).</changelog>
  <changelog author="vcizek@suse.com" date="1534507200">- Address security issues found by X41 D-Sec audit (bsc#1105012)
  * Authentication Replay
  * Buffer Overflow
  * Memory not cleaned properly before free()
- add patches:
  * 0001-verify-using-a-nonce-from-the-system-not-the-card.patch
  * 0002-fixed-buffer-overflow-with-long-home-directory.patch
  * 0003-fixed-wiping-secrets-with-OpenSSL_cleanse.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1548763200">- Update to version 0.6.10:
  * Fix some security issues (thx @frankmorgner):
    https://www.x41-dsec.de/lab/advisories/x41-2018-003-pam_pkcs11/
    (drop 0001-verify-using-a-nonce-from-the-system-not-the-card.patch,
    0002-fixed-buffer-overflow-with-long-home-directory.patch,
    0003-fixed-wiping-secrets-with-OpenSSL_cleanse.patch).
  * Fix buffer overflow with long home directory.
  * Fix wiping secrets (now using OpenSSL_cleanse()).
  * Verify using a nonce from the system, not the card.
  * Fix segfalt when checking CRLs
    (drop pam_pkcs11-crl-check.patch).
- Add rcpkcs11_eventmgr service symlink.</changelog>
  <changelog author="davide.benini@suse.com" date="1715083200">- Fix for bsc#1221255:
  * Add patch 0001-Set-slot_num-configuration-parameter-to-0-by-default.patch</changelog>
</package>
<package pkgid="32233ad8b70c2401b2bd911f6b57f53dc39f1469cf36c8e5eee5b89d8a27095b" name="pam_pkcs11" arch="x86_64">
  <version epoch="0" ver="0.6.10" rel="150100.3.3.2"/>
  <changelog author="sbrabec@suse.cz" date="1330430400">- Change nssdb path to /etc/pki/nssdb (bnc#463469).
- Make libdir paths in pam_pkcs11.conf biarch-wise.</changelog>
  <changelog author="sbrabec@suse.cz" date="1341921600">- Updated to version 0.6.8:
  * Code cleanup.
  * Bug fixes.
  * Translation updates.</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1455019200">- Fix build for Tumbleweed:
  * Add pam_pkcs11-0.6.8-fix-crypto-cflags.patch
  * Rebuild configure with the bootstrap script (add libtool as
    build dependency)</changelog>
  <changelog author="sbrabec@suse.com" date="1500552000">- Updated to version 0.6.9:
  * Upstream web moved.
  * pkcs11_listcerts: Do not fail on certificate error.
  * Do not fail if card was already unlocked.
  * Other bug fixes.
  * Translation updates.
- Drop upstreamed pam_pkcs11-0.6.8-fix-crypto-cflags.patch.
- Work around incorrect upstream release process not calling
  "make dist".
- Split API documentation into a separate package
  pam_pkcs11-devel-doc.
- Add pam_pkcs11-fsf-address.patch.</changelog>
  <changelog author="astieger@suse.com" date="1502280000">- add service file bsc#1049219</changelog>
  <changelog author="jengelh@inai.de" date="1505044800">- Repair bulletpoint that skidded in description.
  Trim description of %name-devel-doc, it does not cotain
  the programs.</changelog>
  <changelog author="sbrabec@suse.com" date="1532347200">- Fix segfault and fetch problems when checking CRLs
  (pam_pkcs11-crl-check.patch).</changelog>
  <changelog author="vcizek@suse.com" date="1534507200">- Address security issues found by X41 D-Sec audit (bsc#1105012)
  * Authentication Replay
  * Buffer Overflow
  * Memory not cleaned properly before free()
- add patches:
  * 0001-verify-using-a-nonce-from-the-system-not-the-card.patch
  * 0002-fixed-buffer-overflow-with-long-home-directory.patch
  * 0003-fixed-wiping-secrets-with-OpenSSL_cleanse.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1548763200">- Update to version 0.6.10:
  * Fix some security issues (thx @frankmorgner):
    https://www.x41-dsec.de/lab/advisories/x41-2018-003-pam_pkcs11/
    (drop 0001-verify-using-a-nonce-from-the-system-not-the-card.patch,
    0002-fixed-buffer-overflow-with-long-home-directory.patch,
    0003-fixed-wiping-secrets-with-OpenSSL_cleanse.patch).
  * Fix buffer overflow with long home directory.
  * Fix wiping secrets (now using OpenSSL_cleanse()).
  * Verify using a nonce from the system, not the card.
  * Fix segfalt when checking CRLs
    (drop pam_pkcs11-crl-check.patch).
- Add rcpkcs11_eventmgr service symlink.</changelog>
  <changelog author="davide.benini@suse.com" date="1715083200">- Fix for bsc#1221255:
  * Add patch 0001-Set-slot_num-configuration-parameter-to-0-by-default.patch</changelog>
</package>
<package pkgid="5490df4cc18bcd2dd6a8a486666dc34261a3b8e25d2e54259a0cfec17a8e2e4f" name="pciutils" arch="aarch64">
  <version epoch="0" ver="3.5.6" rel="150300.13.6.1"/>
  <changelog author="tchvatal@suse.com" date="1416312000">- Version bump to 3.3.0:
  * Device names exported by BIOS are displayed on Linux.
  * On Linux systems, HWDB is used to look up device names
    when our ID database gives no match. (More precisely,
    HWDB is consulted after local pci.ids, but before using
    network to query online pci.ids.) Thanks to Tom Gundersen
    for the initial patch.
  * Added experimental back-end for OS X / Darwin. Thanks to
    Richard Yao for providing it.
  * Filters now support matching by device class. Original
    patch by Matthew Wilcox, wrappers for ABI compatibility
    by me.
  * Interrupt Pin and Interrupt Line registers are displayed
    for bridge devices, too.
  * Several portability bugs have been fixed.
  * Several typos have been fixed. Also, use of questionable
    constructs in man pages has been reduced.
  * PCIe link capabilities now include the ASPMOptComp bit.
  * The "CRS Software Visibility" bit is now decoded properly.
  * Updated pci.ids to the current snapshot of the database.
- Refresh patch:
  * pciutils-endianh.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1441540800">- Update to 3.3.1
  * Removed hacks for backward compatibility with Linux libc5,
    which were breaking newer non-glibc Linux systems. Thanks
    to Felix Janda.
  * Display VirtIO vendor-specific capability. Patch by Gerd
    Hoffmann.
  * Fixed memory leak in name cache.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="mpluskal@suse.com" date="1447416000">- Update to 3.4.0
  * On Linux, we report NUMA nodes of devices.
  * The sysfs back-end does not die on read errors
    of optional attributes. Instead, a warning is produced.
  * Fixed several minor bugs.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="jengelh@inai.de" date="1448107200">- Summary update</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 3.4.1:
  * New capabilities decoded: Process Address Space, Page Request
    Interface, Enhanced Allocation. Thanks to David Daney and
    David Woodhouse.
  * DevCap SlotPowerLimit is now decoded for all components with
    upstream ports.</changelog>
  <changelog author="mpluskal@suse.com" date="1463745600">- Update to version 3.5.0:
  * New capabilities decoded: Downstream Port Containment,
    Precision Time Measurement. Thanks to Keith Busch and
    Jonathan Yong.
  * Domain numbers extended to 31 bits. This will be used by the
    Linux kernel on some machines in near future.
  * Enhanced allocation regions are now decoded on Linux.
  * The NetBSD back-end supports PCIe extended configuration space.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="mpluskal@suse.com" date="1464177600">- Update to version 3.5.1:
  * Fixed symbol versioning of pci_init().</changelog>
  <changelog author="mpluskal@suse.com" date="1488196800">- Update to version 3.5.4:
  * Previous version broke compilation on systems, for which
    lib/types.h did not provide a 64-bit integer type. It is
    provided everywhere now.
- Changes for version 3.5.3:
  * When lspci looks for Linux kernel modules, it uses the default
  path to module directory provided by libkmod. Previously,
  it tried to construct the path explicitly, which need not
  work on all systems.
  * Improved formatting of memory and I/O ranges behind a bridge.
  * PCIe link capabilities now display GEN4 speed (16GT/s).
  * PCIe device capabilities now show bits related to atomic
    operations.
- Changes for version 3.5.2:
  * The L1 power management capability is now decoded more
  thoroughly. Thanks to Rajat Jain for the patch.
  * The table of configuration registers used by setpci
  had a bug in the definition of SUBSYSTEM_VENDOR_ID.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to version 3.5.5
  * Better decoding of AER capability.
  * "Slot Implemented" flag is decoded for PCI/PCI-X to PCIe bridges.
  * Minor fixes of decoding other capabilities.
  * As usual, updated pci.ids to the current snapshot of the
    database.
- cleanup with spec-cleaner
- switch from ftp to https
- track signature</changelog>
  <changelog author="aavindraa@gmail.com" date="1511092800">- Update to version 3.5.6
  * MN VPD keyword is decoded correctly.
  * As usual, updated pci.ids to the current snapshot of the
    database.
  * FreeBSD back-end: read-only access for non-root, support
    DragonFly BSD, support extended config space.</changelog>
  <changelog author="msuchanek@suse.com" date="1590062400">- Fix lspci outputs few of the VPD data fields are displayed as unknown (bsc#1170554, ltc#185587).
  Added:
  * pciutils-VPD-When-printing-item-IDs-escape-non-ASCII-characte.patch
  * pciutils-VPD-Cleanup.patch
  * pciutils-Add-decoding-of-vendor-specific-VPD-fields.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603972800">- Add decode support for RCECs [jsc#SLE-13735]
- added patches
  https://github.com/pciutils/pciutils/commit/e12bd01eea67ca8cf539263124843ba281eb6ecc
  + pciutils-add-decode-support-for-RCECs.patch</changelog>
  <changelog author="vliaskovitis@suse.com" date="1643025600">- Add pciutils-Add-PCIe-5.0-data-rate-32-GT-s-support.patch
  Add pciutils-Add-PCIe-6.0-data-rate-64-GT-s-support.patch
  (bsc#1192862)</changelog>
  <changelog author="psimons@suse.com" date="1696420800">- Apply "lspci-Fixed-buffer-overflows-in-ls-tree.c.patch" to fix a
  buffer overflow error that would cause lspci to crash on systems
  with complex topologies. [bsc#1215265]
- Add "pciutils.keyring" so that the tarball's signature can be
  verified at build time.
- Use "%license" tag instead of "%doc" to install the package's
  license file.</changelog>
</package>
<package pkgid="9f79d397feeab25ba1ed2d5199d83760ac930d375656d95374f3b8ef48311ce8" name="pciutils" arch="s390x">
  <version epoch="0" ver="3.5.6" rel="150300.13.6.1"/>
  <changelog author="tchvatal@suse.com" date="1416312000">- Version bump to 3.3.0:
  * Device names exported by BIOS are displayed on Linux.
  * On Linux systems, HWDB is used to look up device names
    when our ID database gives no match. (More precisely,
    HWDB is consulted after local pci.ids, but before using
    network to query online pci.ids.) Thanks to Tom Gundersen
    for the initial patch.
  * Added experimental back-end for OS X / Darwin. Thanks to
    Richard Yao for providing it.
  * Filters now support matching by device class. Original
    patch by Matthew Wilcox, wrappers for ABI compatibility
    by me.
  * Interrupt Pin and Interrupt Line registers are displayed
    for bridge devices, too.
  * Several portability bugs have been fixed.
  * Several typos have been fixed. Also, use of questionable
    constructs in man pages has been reduced.
  * PCIe link capabilities now include the ASPMOptComp bit.
  * The "CRS Software Visibility" bit is now decoded properly.
  * Updated pci.ids to the current snapshot of the database.
- Refresh patch:
  * pciutils-endianh.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1441540800">- Update to 3.3.1
  * Removed hacks for backward compatibility with Linux libc5,
    which were breaking newer non-glibc Linux systems. Thanks
    to Felix Janda.
  * Display VirtIO vendor-specific capability. Patch by Gerd
    Hoffmann.
  * Fixed memory leak in name cache.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="mpluskal@suse.com" date="1447416000">- Update to 3.4.0
  * On Linux, we report NUMA nodes of devices.
  * The sysfs back-end does not die on read errors
    of optional attributes. Instead, a warning is produced.
  * Fixed several minor bugs.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="jengelh@inai.de" date="1448107200">- Summary update</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 3.4.1:
  * New capabilities decoded: Process Address Space, Page Request
    Interface, Enhanced Allocation. Thanks to David Daney and
    David Woodhouse.
  * DevCap SlotPowerLimit is now decoded for all components with
    upstream ports.</changelog>
  <changelog author="mpluskal@suse.com" date="1463745600">- Update to version 3.5.0:
  * New capabilities decoded: Downstream Port Containment,
    Precision Time Measurement. Thanks to Keith Busch and
    Jonathan Yong.
  * Domain numbers extended to 31 bits. This will be used by the
    Linux kernel on some machines in near future.
  * Enhanced allocation regions are now decoded on Linux.
  * The NetBSD back-end supports PCIe extended configuration space.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="mpluskal@suse.com" date="1464177600">- Update to version 3.5.1:
  * Fixed symbol versioning of pci_init().</changelog>
  <changelog author="mpluskal@suse.com" date="1488196800">- Update to version 3.5.4:
  * Previous version broke compilation on systems, for which
    lib/types.h did not provide a 64-bit integer type. It is
    provided everywhere now.
- Changes for version 3.5.3:
  * When lspci looks for Linux kernel modules, it uses the default
  path to module directory provided by libkmod. Previously,
  it tried to construct the path explicitly, which need not
  work on all systems.
  * Improved formatting of memory and I/O ranges behind a bridge.
  * PCIe link capabilities now display GEN4 speed (16GT/s).
  * PCIe device capabilities now show bits related to atomic
    operations.
- Changes for version 3.5.2:
  * The L1 power management capability is now decoded more
  thoroughly. Thanks to Rajat Jain for the patch.
  * The table of configuration registers used by setpci
  had a bug in the definition of SUBSYSTEM_VENDOR_ID.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to version 3.5.5
  * Better decoding of AER capability.
  * "Slot Implemented" flag is decoded for PCI/PCI-X to PCIe bridges.
  * Minor fixes of decoding other capabilities.
  * As usual, updated pci.ids to the current snapshot of the
    database.
- cleanup with spec-cleaner
- switch from ftp to https
- track signature</changelog>
  <changelog author="aavindraa@gmail.com" date="1511092800">- Update to version 3.5.6
  * MN VPD keyword is decoded correctly.
  * As usual, updated pci.ids to the current snapshot of the
    database.
  * FreeBSD back-end: read-only access for non-root, support
    DragonFly BSD, support extended config space.</changelog>
  <changelog author="msuchanek@suse.com" date="1590062400">- Fix lspci outputs few of the VPD data fields are displayed as unknown (bsc#1170554, ltc#185587).
  Added:
  * pciutils-VPD-When-printing-item-IDs-escape-non-ASCII-characte.patch
  * pciutils-VPD-Cleanup.patch
  * pciutils-Add-decoding-of-vendor-specific-VPD-fields.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603972800">- Add decode support for RCECs [jsc#SLE-13735]
- added patches
  https://github.com/pciutils/pciutils/commit/e12bd01eea67ca8cf539263124843ba281eb6ecc
  + pciutils-add-decode-support-for-RCECs.patch</changelog>
  <changelog author="vliaskovitis@suse.com" date="1643025600">- Add pciutils-Add-PCIe-5.0-data-rate-32-GT-s-support.patch
  Add pciutils-Add-PCIe-6.0-data-rate-64-GT-s-support.patch
  (bsc#1192862)</changelog>
  <changelog author="psimons@suse.com" date="1696420800">- Apply "lspci-Fixed-buffer-overflows-in-ls-tree.c.patch" to fix a
  buffer overflow error that would cause lspci to crash on systems
  with complex topologies. [bsc#1215265]
- Add "pciutils.keyring" so that the tarball's signature can be
  verified at build time.
- Use "%license" tag instead of "%doc" to install the package's
  license file.</changelog>
</package>
<package pkgid="18c209170cbc8fabc55e9a50fd36aff3385e72d9820342f9127fdc2612505890" name="pciutils" arch="src">
  <version epoch="0" ver="3.5.6" rel="150300.13.6.1"/>
  <changelog author="jengelh@medozas.de" date="1332072000">- Shared library policy: new subpackage libpci3</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1356955200">- pciutils-endianh.patch Use the documented/optimized byteswapping
  routines from endian.h</changelog>
  <changelog author="idonmez@suse.com" date="1366027200">- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1375185600">- Update to 3.2.0
  * On newer Linux systems, we use libkmod to look up kernel
    modules (modules.pcimap no longer exists.) To facilitate this,
    libpci is able to look up module aliases in sysfs.
  * Various minor bug fixes.
  * Updated pci.ids to the today's snapshot of the database.
- Update to 3.1.10
  * Decoding of LTR/OBFF in PCIe capabilities.
  * Various minor bug fixes.
  * Updated pci.ids to the today's snapshot of the database.
- rebase patches
- require libkmod</changelog>
  <changelog author="tchvatal@suse.com" date="1399982400">- Remove COPYING from obs it is in tarball directly
- Version bump to 3.2.1:
  * CardBus bridge capabilities are displayed.
  * PCIe L1 PM substates are decoded.
  * Various bugs were fixed in decoding of PCIe capabilities.
  * The sysfs back-end does not spit out unnecessary warnings when
    empty slots report only a partial device address. This actually
    happens on IBM pSeries.
  * Updated pci.ids to the today's snapshot of the database.
- Cleanup with spec-cleaner</changelog>
  <changelog author="fcrozat@suse.com" date="1408363200">- Add obsoletes/provides to baselibs.conf.</changelog>
  <changelog author="tchvatal@suse.com" date="1416312000">- Version bump to 3.3.0:
  * Device names exported by BIOS are displayed on Linux.
  * On Linux systems, HWDB is used to look up device names
    when our ID database gives no match. (More precisely,
    HWDB is consulted after local pci.ids, but before using
    network to query online pci.ids.) Thanks to Tom Gundersen
    for the initial patch.
  * Added experimental back-end for OS X / Darwin. Thanks to
    Richard Yao for providing it.
  * Filters now support matching by device class. Original
    patch by Matthew Wilcox, wrappers for ABI compatibility
    by me.
  * Interrupt Pin and Interrupt Line registers are displayed
    for bridge devices, too.
  * Several portability bugs have been fixed.
  * Several typos have been fixed. Also, use of questionable
    constructs in man pages has been reduced.
  * PCIe link capabilities now include the ASPMOptComp bit.
  * The "CRS Software Visibility" bit is now decoded properly.
  * Updated pci.ids to the current snapshot of the database.
- Refresh patch:
  * pciutils-endianh.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1441540800">- Update to 3.3.1
  * Removed hacks for backward compatibility with Linux libc5,
    which were breaking newer non-glibc Linux systems. Thanks
    to Felix Janda.
  * Display VirtIO vendor-specific capability. Patch by Gerd
    Hoffmann.
  * Fixed memory leak in name cache.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="mpluskal@suse.com" date="1447416000">- Update to 3.4.0
  * On Linux, we report NUMA nodes of devices.
  * The sysfs back-end does not die on read errors
    of optional attributes. Instead, a warning is produced.
  * Fixed several minor bugs.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="jengelh@inai.de" date="1448107200">- Summary update</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 3.4.1:
  * New capabilities decoded: Process Address Space, Page Request
    Interface, Enhanced Allocation. Thanks to David Daney and
    David Woodhouse.
  * DevCap SlotPowerLimit is now decoded for all components with
    upstream ports.</changelog>
  <changelog author="mpluskal@suse.com" date="1463745600">- Update to version 3.5.0:
  * New capabilities decoded: Downstream Port Containment,
    Precision Time Measurement. Thanks to Keith Busch and
    Jonathan Yong.
  * Domain numbers extended to 31 bits. This will be used by the
    Linux kernel on some machines in near future.
  * Enhanced allocation regions are now decoded on Linux.
  * The NetBSD back-end supports PCIe extended configuration space.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="mpluskal@suse.com" date="1464177600">- Update to version 3.5.1:
  * Fixed symbol versioning of pci_init().</changelog>
  <changelog author="mpluskal@suse.com" date="1488196800">- Update to version 3.5.4:
  * Previous version broke compilation on systems, for which
    lib/types.h did not provide a 64-bit integer type. It is
    provided everywhere now.
- Changes for version 3.5.3:
  * When lspci looks for Linux kernel modules, it uses the default
  path to module directory provided by libkmod. Previously,
  it tried to construct the path explicitly, which need not
  work on all systems.
  * Improved formatting of memory and I/O ranges behind a bridge.
  * PCIe link capabilities now display GEN4 speed (16GT/s).
  * PCIe device capabilities now show bits related to atomic
    operations.
- Changes for version 3.5.2:
  * The L1 power management capability is now decoded more
  thoroughly. Thanks to Rajat Jain for the patch.
  * The table of configuration registers used by setpci
  had a bug in the definition of SUBSYSTEM_VENDOR_ID.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to version 3.5.5
  * Better decoding of AER capability.
  * "Slot Implemented" flag is decoded for PCI/PCI-X to PCIe bridges.
  * Minor fixes of decoding other capabilities.
  * As usual, updated pci.ids to the current snapshot of the
    database.
- cleanup with spec-cleaner
- switch from ftp to https
- track signature</changelog>
  <changelog author="aavindraa@gmail.com" date="1511092800">- Update to version 3.5.6
  * MN VPD keyword is decoded correctly.
  * As usual, updated pci.ids to the current snapshot of the
    database.
  * FreeBSD back-end: read-only access for non-root, support
    DragonFly BSD, support extended config space.</changelog>
  <changelog author="msuchanek@suse.com" date="1590062400">- Fix lspci outputs few of the VPD data fields are displayed as unknown (bsc#1170554, ltc#185587).
  Added:
  * pciutils-VPD-When-printing-item-IDs-escape-non-ASCII-characte.patch
  * pciutils-VPD-Cleanup.patch
  * pciutils-Add-decoding-of-vendor-specific-VPD-fields.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603972800">- Add decode support for RCECs [jsc#SLE-13735]
- added patches
  https://github.com/pciutils/pciutils/commit/e12bd01eea67ca8cf539263124843ba281eb6ecc
  + pciutils-add-decode-support-for-RCECs.patch</changelog>
  <changelog author="vliaskovitis@suse.com" date="1643025600">- Add pciutils-Add-PCIe-5.0-data-rate-32-GT-s-support.patch
  Add pciutils-Add-PCIe-6.0-data-rate-64-GT-s-support.patch
  (bsc#1192862)</changelog>
  <changelog author="psimons@suse.com" date="1696420800">- Apply "lspci-Fixed-buffer-overflows-in-ls-tree.c.patch" to fix a
  buffer overflow error that would cause lspci to crash on systems
  with complex topologies. [bsc#1215265]
- Add "pciutils.keyring" so that the tarball's signature can be
  verified at build time.
- Use "%license" tag instead of "%doc" to install the package's
  license file.</changelog>
</package>
<package pkgid="da051809c0150d165b146e217514ab650977e991b00bf5eb914e35c987b9e4a4" name="pciutils" arch="x86_64">
  <version epoch="0" ver="3.5.6" rel="150300.13.6.1"/>
  <changelog author="tchvatal@suse.com" date="1416312000">- Version bump to 3.3.0:
  * Device names exported by BIOS are displayed on Linux.
  * On Linux systems, HWDB is used to look up device names
    when our ID database gives no match. (More precisely,
    HWDB is consulted after local pci.ids, but before using
    network to query online pci.ids.) Thanks to Tom Gundersen
    for the initial patch.
  * Added experimental back-end for OS X / Darwin. Thanks to
    Richard Yao for providing it.
  * Filters now support matching by device class. Original
    patch by Matthew Wilcox, wrappers for ABI compatibility
    by me.
  * Interrupt Pin and Interrupt Line registers are displayed
    for bridge devices, too.
  * Several portability bugs have been fixed.
  * Several typos have been fixed. Also, use of questionable
    constructs in man pages has been reduced.
  * PCIe link capabilities now include the ASPMOptComp bit.
  * The "CRS Software Visibility" bit is now decoded properly.
  * Updated pci.ids to the current snapshot of the database.
- Refresh patch:
  * pciutils-endianh.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1441540800">- Update to 3.3.1
  * Removed hacks for backward compatibility with Linux libc5,
    which were breaking newer non-glibc Linux systems. Thanks
    to Felix Janda.
  * Display VirtIO vendor-specific capability. Patch by Gerd
    Hoffmann.
  * Fixed memory leak in name cache.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="mpluskal@suse.com" date="1447416000">- Update to 3.4.0
  * On Linux, we report NUMA nodes of devices.
  * The sysfs back-end does not die on read errors
    of optional attributes. Instead, a warning is produced.
  * Fixed several minor bugs.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="jengelh@inai.de" date="1448107200">- Summary update</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 3.4.1:
  * New capabilities decoded: Process Address Space, Page Request
    Interface, Enhanced Allocation. Thanks to David Daney and
    David Woodhouse.
  * DevCap SlotPowerLimit is now decoded for all components with
    upstream ports.</changelog>
  <changelog author="mpluskal@suse.com" date="1463745600">- Update to version 3.5.0:
  * New capabilities decoded: Downstream Port Containment,
    Precision Time Measurement. Thanks to Keith Busch and
    Jonathan Yong.
  * Domain numbers extended to 31 bits. This will be used by the
    Linux kernel on some machines in near future.
  * Enhanced allocation regions are now decoded on Linux.
  * The NetBSD back-end supports PCIe extended configuration space.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="mpluskal@suse.com" date="1464177600">- Update to version 3.5.1:
  * Fixed symbol versioning of pci_init().</changelog>
  <changelog author="mpluskal@suse.com" date="1488196800">- Update to version 3.5.4:
  * Previous version broke compilation on systems, for which
    lib/types.h did not provide a 64-bit integer type. It is
    provided everywhere now.
- Changes for version 3.5.3:
  * When lspci looks for Linux kernel modules, it uses the default
  path to module directory provided by libkmod. Previously,
  it tried to construct the path explicitly, which need not
  work on all systems.
  * Improved formatting of memory and I/O ranges behind a bridge.
  * PCIe link capabilities now display GEN4 speed (16GT/s).
  * PCIe device capabilities now show bits related to atomic
    operations.
- Changes for version 3.5.2:
  * The L1 power management capability is now decoded more
  thoroughly. Thanks to Rajat Jain for the patch.
  * The table of configuration registers used by setpci
  had a bug in the definition of SUBSYSTEM_VENDOR_ID.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to version 3.5.5
  * Better decoding of AER capability.
  * "Slot Implemented" flag is decoded for PCI/PCI-X to PCIe bridges.
  * Minor fixes of decoding other capabilities.
  * As usual, updated pci.ids to the current snapshot of the
    database.
- cleanup with spec-cleaner
- switch from ftp to https
- track signature</changelog>
  <changelog author="aavindraa@gmail.com" date="1511092800">- Update to version 3.5.6
  * MN VPD keyword is decoded correctly.
  * As usual, updated pci.ids to the current snapshot of the
    database.
  * FreeBSD back-end: read-only access for non-root, support
    DragonFly BSD, support extended config space.</changelog>
  <changelog author="msuchanek@suse.com" date="1590062400">- Fix lspci outputs few of the VPD data fields are displayed as unknown (bsc#1170554, ltc#185587).
  Added:
  * pciutils-VPD-When-printing-item-IDs-escape-non-ASCII-characte.patch
  * pciutils-VPD-Cleanup.patch
  * pciutils-Add-decoding-of-vendor-specific-VPD-fields.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603972800">- Add decode support for RCECs [jsc#SLE-13735]
- added patches
  https://github.com/pciutils/pciutils/commit/e12bd01eea67ca8cf539263124843ba281eb6ecc
  + pciutils-add-decode-support-for-RCECs.patch</changelog>
  <changelog author="vliaskovitis@suse.com" date="1643025600">- Add pciutils-Add-PCIe-5.0-data-rate-32-GT-s-support.patch
  Add pciutils-Add-PCIe-6.0-data-rate-64-GT-s-support.patch
  (bsc#1192862)</changelog>
  <changelog author="psimons@suse.com" date="1696420800">- Apply "lspci-Fixed-buffer-overflows-in-ls-tree.c.patch" to fix a
  buffer overflow error that would cause lspci to crash on systems
  with complex topologies. [bsc#1215265]
- Add "pciutils.keyring" so that the tarball's signature can be
  verified at build time.
- Use "%license" tag instead of "%doc" to install the package's
  license file.</changelog>
</package>
<package pkgid="cb9653be08a7b1eaf7d94b2bd71d6397b833f67889673349fdfc8cd827fad860" name="pcsc-lite" arch="aarch64">
  <version epoch="0" ver="1.9.4" rel="150400.3.2.1"/>
  <changelog author="wr@rosenauer.org" date="1481284800">- Updated to version 1.8.19:
  * SCardGetStatusChange(): Fix a (rare) race condition
  * Doxygen updates
  * pcsc-spy:
  - fix display of execution time
  - log the thread number in the results
  * Some other minor improvements</changelog>
  <changelog author="wr@rosenauer.org" date="1483099200">- Updated to version 1.8.20
  * Fix a crash and potential security issue in pcscd (bsc#1017902,
    CVE-2016-10109, CWE-415, CWE-416)</changelog>
  <changelog author="wr@rosenauer.org" date="1495454400">- Updated to version 1.8.21
  * SCardCancel():
  - fix a race condition bug
  - fix a possible use after free
  - improve Doxygen documentation
  * SCardGetStatusChange(): fix a race condition when a reader is removed
  * SCardDisconnect(): fix status update for SCARD_UNPOWER_CARD
  * pcsc_stringify_error(): use Thread-local storage
  * pcsc_stringify_error() now returns a const char *
  * SCardControl() may return SCARD_E_INSUFFICIENT_BUFFER when
    pbRecvBuffer is not big enough to receive the card response.
  * Fix compilation error with GCC 4.9
  * UnitaryTests: add support of Python 3
  * pcsc-spy: add support of Python 3
  * Some other minor improvements</changelog>
  <changelog author="wr@rosenauer.org" date="1497700800">- Updated to version 1.8.22
  * SCardCancel() was broken in 1.8.21. The call was blocking.
  * Enable use of info level logging for pcscd using -i/--info</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Rename local defines USER/GROUP to PKG_USER/PKG_GROUP: the
  variable GROUP (call caps) has been claimed by RPM 4.14.</changelog>
  <changelog author="wr@rosenauer.org" date="1514808000">- Updated to version 1.8.23
  * use libsystemd instead sd-daemon.{c,h}
  * spy: add support SCardStatus() with NULL pcbAtrLen
  * Some other minor improvements
- remove --auto-exit from service start even if we have
  socket activation in place
  (using it as a lightweight approach to unconditional service
  enablement (reference boo#1063983 and to help workaround boo#1063985)</changelog>
  <changelog author="sbrabec@suse.com" date="1519992000">- Use python3 (bsc#1082129, pcsc-lite-python3.patch).</changelog>
  <changelog author="wr@rosenauer.org" date="1535976000">- extended sysconfig template to include
  PCSCLITE_FILTER_IGNORE_READER_NAMES env variable which is used
  by pcscd to ignore certain readers
  (patch by Eric Garreau)</changelog>
  <changelog author="wr@rosenauer.org" date="1539432000">- Updated to version 1.8.24
  * SCardGetStatusChange(): Fix a rare race condition
  * SCardReleaseContext(): do not release a lock owned by another context
  * SCardReconnect(): suspend card auto power off
  * Allow "=" in serial driver filenames
  * Add the thread id in the pcscd log lines
  * pcsc-spy: correctly handle incomplete log file
  * Simclist: avoid to divide by zero in list_findpos()
  * Some other minor improvements</changelog>
  <changelog author="jengelh@inai.de" date="1549108800">- Trim filler wording from description.</changelog>
  <changelog author="wr@rosenauer.org" date="1554206400">- Updated to version 1.8.25
  * Fix a socket issue when pcscd is used inside LXC container
  * pcsc-spy: always provide a total time of execution
  * Fix resource leak if SCardEstablishContext() fails
  * Fix realloc(3) error handling (possible memory leak)
  * Remove usage of function chmod(2) to use fchmod(2) (fix race condition)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="wr@rosenauer.org" date="1578657600">- Updated to version 1.8.26
  * Use poll() instead of select() to allow file descriptor higher
    than FD_SETSIZE
  * Enable reader filtering by default
  * pcsc-spy:
  - Do not read output buffer after error
  - Adjust code to handle autoallocated buffers
  - fix year-2038 issue by using long instead of int
  * Android: fix compilation
  * polkit: log the error message if polkit_authority_get_sync() fails
  * Exit with EXIT_SUCCESS on shutdown to please systemd
  * Fix a minor memory leak</changelog>
  <changelog author="dimstar@opensuse.org" date="1579780800">- BuildRequire pkgconfig(libudev) instead of libudev-devel: allow
  OBS to shortcut through -mini flavors.</changelog>
  <changelog author="wr@rosenauer.org" date="1592136000">- Updated to version 1.9.0
  * SCardEndTransaction(): greatly improve performances (x300)
  * tokenparser: accept any Unicode character in a reader name
  * Use /run instead of /var/run by default
  * Fix a memory leak from a polkit call
  * Some other minor improvements</changelog>
  <changelog author="axel.braun@gmx.de" date="1613563200">- version 1.9.1
  * Do not (possibly) lock a reader if allocating hCard fails
  * Fix a hang in SCardTransmit()
  * Do not report an error if the wrong interface is used by the driver
  * Update reader state when a card is removed during an exchange
  * readerfactory: Make sure a freed Reader Context is not accessed
  * PHSetProtocol(): supports T=0&amp;1 cards on T=0 reader
  * hotplug-libusb:
  . support CCIDCLASSDRIVER
  . add interface name to reader name
  . remove obsolete libhal scheme
  * Some other minor improvements</changelog>
  <changelog author="axel.braun@gmx.de" date="1628337600">- version 1.9.3
  * fix a stupid regression with systemd introduced in the previous version
- version 1.9.2
  * improve NetBSD support
  * pcsc-spy: version 1.1
  . add option -t|--thread
  . x10 speed increase
  . correctly exit at end-of-file
  . remove, now useless, support of macOS
  * SetProtocol: Handle IFD_NOT_SUPPORTED from the driver
  * hotplug_libudev.c: sanitize interface name
  * pcsc_demo: change licence from GPLv3 to BSD
  * use Python 3 for Python scripts (psc-spy, UnitaryTests)
  * Some other minor improvements
- remove obsolete pcsc-lite-python3.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1633608000">- version 1.9.4
  * fix a memory leak when libusb is used for hotplug
    (i.e. non-Linux systems)</changelog>
  <changelog author="jsegitz@suse.com" date="1634558400">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_pcscd.service.patch</changelog>
</package>
<package pkgid="92065783f11bd4f2943580221e6f2e9f307ed573dadb3e58f9e1f3e807ada344" name="pcsc-lite" arch="s390x">
  <version epoch="0" ver="1.9.4" rel="150400.3.2.1"/>
  <changelog author="wr@rosenauer.org" date="1481284800">- Updated to version 1.8.19:
  * SCardGetStatusChange(): Fix a (rare) race condition
  * Doxygen updates
  * pcsc-spy:
  - fix display of execution time
  - log the thread number in the results
  * Some other minor improvements</changelog>
  <changelog author="wr@rosenauer.org" date="1483099200">- Updated to version 1.8.20
  * Fix a crash and potential security issue in pcscd (bsc#1017902,
    CVE-2016-10109, CWE-415, CWE-416)</changelog>
  <changelog author="wr@rosenauer.org" date="1495454400">- Updated to version 1.8.21
  * SCardCancel():
  - fix a race condition bug
  - fix a possible use after free
  - improve Doxygen documentation
  * SCardGetStatusChange(): fix a race condition when a reader is removed
  * SCardDisconnect(): fix status update for SCARD_UNPOWER_CARD
  * pcsc_stringify_error(): use Thread-local storage
  * pcsc_stringify_error() now returns a const char *
  * SCardControl() may return SCARD_E_INSUFFICIENT_BUFFER when
    pbRecvBuffer is not big enough to receive the card response.
  * Fix compilation error with GCC 4.9
  * UnitaryTests: add support of Python 3
  * pcsc-spy: add support of Python 3
  * Some other minor improvements</changelog>
  <changelog author="wr@rosenauer.org" date="1497700800">- Updated to version 1.8.22
  * SCardCancel() was broken in 1.8.21. The call was blocking.
  * Enable use of info level logging for pcscd using -i/--info</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Rename local defines USER/GROUP to PKG_USER/PKG_GROUP: the
  variable GROUP (call caps) has been claimed by RPM 4.14.</changelog>
  <changelog author="wr@rosenauer.org" date="1514808000">- Updated to version 1.8.23
  * use libsystemd instead sd-daemon.{c,h}
  * spy: add support SCardStatus() with NULL pcbAtrLen
  * Some other minor improvements
- remove --auto-exit from service start even if we have
  socket activation in place
  (using it as a lightweight approach to unconditional service
  enablement (reference boo#1063983 and to help workaround boo#1063985)</changelog>
  <changelog author="sbrabec@suse.com" date="1519992000">- Use python3 (bsc#1082129, pcsc-lite-python3.patch).</changelog>
  <changelog author="wr@rosenauer.org" date="1535976000">- extended sysconfig template to include
  PCSCLITE_FILTER_IGNORE_READER_NAMES env variable which is used
  by pcscd to ignore certain readers
  (patch by Eric Garreau)</changelog>
  <changelog author="wr@rosenauer.org" date="1539432000">- Updated to version 1.8.24
  * SCardGetStatusChange(): Fix a rare race condition
  * SCardReleaseContext(): do not release a lock owned by another context
  * SCardReconnect(): suspend card auto power off
  * Allow "=" in serial driver filenames
  * Add the thread id in the pcscd log lines
  * pcsc-spy: correctly handle incomplete log file
  * Simclist: avoid to divide by zero in list_findpos()
  * Some other minor improvements</changelog>
  <changelog author="jengelh@inai.de" date="1549108800">- Trim filler wording from description.</changelog>
  <changelog author="wr@rosenauer.org" date="1554206400">- Updated to version 1.8.25
  * Fix a socket issue when pcscd is used inside LXC container
  * pcsc-spy: always provide a total time of execution
  * Fix resource leak if SCardEstablishContext() fails
  * Fix realloc(3) error handling (possible memory leak)
  * Remove usage of function chmod(2) to use fchmod(2) (fix race condition)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="wr@rosenauer.org" date="1578657600">- Updated to version 1.8.26
  * Use poll() instead of select() to allow file descriptor higher
    than FD_SETSIZE
  * Enable reader filtering by default
  * pcsc-spy:
  - Do not read output buffer after error
  - Adjust code to handle autoallocated buffers
  - fix year-2038 issue by using long instead of int
  * Android: fix compilation
  * polkit: log the error message if polkit_authority_get_sync() fails
  * Exit with EXIT_SUCCESS on shutdown to please systemd
  * Fix a minor memory leak</changelog>
  <changelog author="dimstar@opensuse.org" date="1579780800">- BuildRequire pkgconfig(libudev) instead of libudev-devel: allow
  OBS to shortcut through -mini flavors.</changelog>
  <changelog author="wr@rosenauer.org" date="1592136000">- Updated to version 1.9.0
  * SCardEndTransaction(): greatly improve performances (x300)
  * tokenparser: accept any Unicode character in a reader name
  * Use /run instead of /var/run by default
  * Fix a memory leak from a polkit call
  * Some other minor improvements</changelog>
  <changelog author="axel.braun@gmx.de" date="1613563200">- version 1.9.1
  * Do not (possibly) lock a reader if allocating hCard fails
  * Fix a hang in SCardTransmit()
  * Do not report an error if the wrong interface is used by the driver
  * Update reader state when a card is removed during an exchange
  * readerfactory: Make sure a freed Reader Context is not accessed
  * PHSetProtocol(): supports T=0&amp;1 cards on T=0 reader
  * hotplug-libusb:
  . support CCIDCLASSDRIVER
  . add interface name to reader name
  . remove obsolete libhal scheme
  * Some other minor improvements</changelog>
  <changelog author="axel.braun@gmx.de" date="1628337600">- version 1.9.3
  * fix a stupid regression with systemd introduced in the previous version
- version 1.9.2
  * improve NetBSD support
  * pcsc-spy: version 1.1
  . add option -t|--thread
  . x10 speed increase
  . correctly exit at end-of-file
  . remove, now useless, support of macOS
  * SetProtocol: Handle IFD_NOT_SUPPORTED from the driver
  * hotplug_libudev.c: sanitize interface name
  * pcsc_demo: change licence from GPLv3 to BSD
  * use Python 3 for Python scripts (psc-spy, UnitaryTests)
  * Some other minor improvements
- remove obsolete pcsc-lite-python3.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1633608000">- version 1.9.4
  * fix a memory leak when libusb is used for hotplug
    (i.e. non-Linux systems)</changelog>
  <changelog author="jsegitz@suse.com" date="1634558400">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_pcscd.service.patch</changelog>
</package>
<package pkgid="75f4c48b312c5d9d5715f6f751968d3e056cc314def67a45e2ef21711d6091b9" name="pcsc-lite" arch="src">
  <version epoch="0" ver="1.9.4" rel="150400.3.2.1"/>
  <changelog author="wr@rosenauer.org" date="1481284800">- Updated to version 1.8.19:
  * SCardGetStatusChange(): Fix a (rare) race condition
  * Doxygen updates
  * pcsc-spy:
  - fix display of execution time
  - log the thread number in the results
  * Some other minor improvements</changelog>
  <changelog author="wr@rosenauer.org" date="1483099200">- Updated to version 1.8.20
  * Fix a crash and potential security issue in pcscd (bsc#1017902,
    CVE-2016-10109, CWE-415, CWE-416)</changelog>
  <changelog author="wr@rosenauer.org" date="1495454400">- Updated to version 1.8.21
  * SCardCancel():
  - fix a race condition bug
  - fix a possible use after free
  - improve Doxygen documentation
  * SCardGetStatusChange(): fix a race condition when a reader is removed
  * SCardDisconnect(): fix status update for SCARD_UNPOWER_CARD
  * pcsc_stringify_error(): use Thread-local storage
  * pcsc_stringify_error() now returns a const char *
  * SCardControl() may return SCARD_E_INSUFFICIENT_BUFFER when
    pbRecvBuffer is not big enough to receive the card response.
  * Fix compilation error with GCC 4.9
  * UnitaryTests: add support of Python 3
  * pcsc-spy: add support of Python 3
  * Some other minor improvements</changelog>
  <changelog author="wr@rosenauer.org" date="1497700800">- Updated to version 1.8.22
  * SCardCancel() was broken in 1.8.21. The call was blocking.
  * Enable use of info level logging for pcscd using -i/--info</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Rename local defines USER/GROUP to PKG_USER/PKG_GROUP: the
  variable GROUP (call caps) has been claimed by RPM 4.14.</changelog>
  <changelog author="wr@rosenauer.org" date="1514808000">- Updated to version 1.8.23
  * use libsystemd instead sd-daemon.{c,h}
  * spy: add support SCardStatus() with NULL pcbAtrLen
  * Some other minor improvements
- remove --auto-exit from service start even if we have
  socket activation in place
  (using it as a lightweight approach to unconditional service
  enablement (reference boo#1063983 and to help workaround boo#1063985)</changelog>
  <changelog author="sbrabec@suse.com" date="1519992000">- Use python3 (bsc#1082129, pcsc-lite-python3.patch).</changelog>
  <changelog author="wr@rosenauer.org" date="1535976000">- extended sysconfig template to include
  PCSCLITE_FILTER_IGNORE_READER_NAMES env variable which is used
  by pcscd to ignore certain readers
  (patch by Eric Garreau)</changelog>
  <changelog author="wr@rosenauer.org" date="1539432000">- Updated to version 1.8.24
  * SCardGetStatusChange(): Fix a rare race condition
  * SCardReleaseContext(): do not release a lock owned by another context
  * SCardReconnect(): suspend card auto power off
  * Allow "=" in serial driver filenames
  * Add the thread id in the pcscd log lines
  * pcsc-spy: correctly handle incomplete log file
  * Simclist: avoid to divide by zero in list_findpos()
  * Some other minor improvements</changelog>
  <changelog author="jengelh@inai.de" date="1549108800">- Trim filler wording from description.</changelog>
  <changelog author="wr@rosenauer.org" date="1554206400">- Updated to version 1.8.25
  * Fix a socket issue when pcscd is used inside LXC container
  * pcsc-spy: always provide a total time of execution
  * Fix resource leak if SCardEstablishContext() fails
  * Fix realloc(3) error handling (possible memory leak)
  * Remove usage of function chmod(2) to use fchmod(2) (fix race condition)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="wr@rosenauer.org" date="1578657600">- Updated to version 1.8.26
  * Use poll() instead of select() to allow file descriptor higher
    than FD_SETSIZE
  * Enable reader filtering by default
  * pcsc-spy:
  - Do not read output buffer after error
  - Adjust code to handle autoallocated buffers
  - fix year-2038 issue by using long instead of int
  * Android: fix compilation
  * polkit: log the error message if polkit_authority_get_sync() fails
  * Exit with EXIT_SUCCESS on shutdown to please systemd
  * Fix a minor memory leak</changelog>
  <changelog author="dimstar@opensuse.org" date="1579780800">- BuildRequire pkgconfig(libudev) instead of libudev-devel: allow
  OBS to shortcut through -mini flavors.</changelog>
  <changelog author="wr@rosenauer.org" date="1592136000">- Updated to version 1.9.0
  * SCardEndTransaction(): greatly improve performances (x300)
  * tokenparser: accept any Unicode character in a reader name
  * Use /run instead of /var/run by default
  * Fix a memory leak from a polkit call
  * Some other minor improvements</changelog>
  <changelog author="axel.braun@gmx.de" date="1613563200">- version 1.9.1
  * Do not (possibly) lock a reader if allocating hCard fails
  * Fix a hang in SCardTransmit()
  * Do not report an error if the wrong interface is used by the driver
  * Update reader state when a card is removed during an exchange
  * readerfactory: Make sure a freed Reader Context is not accessed
  * PHSetProtocol(): supports T=0&amp;1 cards on T=0 reader
  * hotplug-libusb:
  . support CCIDCLASSDRIVER
  . add interface name to reader name
  . remove obsolete libhal scheme
  * Some other minor improvements</changelog>
  <changelog author="axel.braun@gmx.de" date="1628337600">- version 1.9.3
  * fix a stupid regression with systemd introduced in the previous version
- version 1.9.2
  * improve NetBSD support
  * pcsc-spy: version 1.1
  . add option -t|--thread
  . x10 speed increase
  . correctly exit at end-of-file
  . remove, now useless, support of macOS
  * SetProtocol: Handle IFD_NOT_SUPPORTED from the driver
  * hotplug_libudev.c: sanitize interface name
  * pcsc_demo: change licence from GPLv3 to BSD
  * use Python 3 for Python scripts (psc-spy, UnitaryTests)
  * Some other minor improvements
- remove obsolete pcsc-lite-python3.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1633608000">- version 1.9.4
  * fix a memory leak when libusb is used for hotplug
    (i.e. non-Linux systems)</changelog>
  <changelog author="jsegitz@suse.com" date="1634558400">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_pcscd.service.patch</changelog>
</package>
<package pkgid="3d9c0dff6e47be0c931e720959eff43a9dabe4e0011ae0fb6122bceade805668" name="pcsc-lite" arch="x86_64">
  <version epoch="0" ver="1.9.4" rel="150400.3.2.1"/>
  <changelog author="wr@rosenauer.org" date="1481284800">- Updated to version 1.8.19:
  * SCardGetStatusChange(): Fix a (rare) race condition
  * Doxygen updates
  * pcsc-spy:
  - fix display of execution time
  - log the thread number in the results
  * Some other minor improvements</changelog>
  <changelog author="wr@rosenauer.org" date="1483099200">- Updated to version 1.8.20
  * Fix a crash and potential security issue in pcscd (bsc#1017902,
    CVE-2016-10109, CWE-415, CWE-416)</changelog>
  <changelog author="wr@rosenauer.org" date="1495454400">- Updated to version 1.8.21
  * SCardCancel():
  - fix a race condition bug
  - fix a possible use after free
  - improve Doxygen documentation
  * SCardGetStatusChange(): fix a race condition when a reader is removed
  * SCardDisconnect(): fix status update for SCARD_UNPOWER_CARD
  * pcsc_stringify_error(): use Thread-local storage
  * pcsc_stringify_error() now returns a const char *
  * SCardControl() may return SCARD_E_INSUFFICIENT_BUFFER when
    pbRecvBuffer is not big enough to receive the card response.
  * Fix compilation error with GCC 4.9
  * UnitaryTests: add support of Python 3
  * pcsc-spy: add support of Python 3
  * Some other minor improvements</changelog>
  <changelog author="wr@rosenauer.org" date="1497700800">- Updated to version 1.8.22
  * SCardCancel() was broken in 1.8.21. The call was blocking.
  * Enable use of info level logging for pcscd using -i/--info</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Rename local defines USER/GROUP to PKG_USER/PKG_GROUP: the
  variable GROUP (call caps) has been claimed by RPM 4.14.</changelog>
  <changelog author="wr@rosenauer.org" date="1514808000">- Updated to version 1.8.23
  * use libsystemd instead sd-daemon.{c,h}
  * spy: add support SCardStatus() with NULL pcbAtrLen
  * Some other minor improvements
- remove --auto-exit from service start even if we have
  socket activation in place
  (using it as a lightweight approach to unconditional service
  enablement (reference boo#1063983 and to help workaround boo#1063985)</changelog>
  <changelog author="sbrabec@suse.com" date="1519992000">- Use python3 (bsc#1082129, pcsc-lite-python3.patch).</changelog>
  <changelog author="wr@rosenauer.org" date="1535976000">- extended sysconfig template to include
  PCSCLITE_FILTER_IGNORE_READER_NAMES env variable which is used
  by pcscd to ignore certain readers
  (patch by Eric Garreau)</changelog>
  <changelog author="wr@rosenauer.org" date="1539432000">- Updated to version 1.8.24
  * SCardGetStatusChange(): Fix a rare race condition
  * SCardReleaseContext(): do not release a lock owned by another context
  * SCardReconnect(): suspend card auto power off
  * Allow "=" in serial driver filenames
  * Add the thread id in the pcscd log lines
  * pcsc-spy: correctly handle incomplete log file
  * Simclist: avoid to divide by zero in list_findpos()
  * Some other minor improvements</changelog>
  <changelog author="jengelh@inai.de" date="1549108800">- Trim filler wording from description.</changelog>
  <changelog author="wr@rosenauer.org" date="1554206400">- Updated to version 1.8.25
  * Fix a socket issue when pcscd is used inside LXC container
  * pcsc-spy: always provide a total time of execution
  * Fix resource leak if SCardEstablishContext() fails
  * Fix realloc(3) error handling (possible memory leak)
  * Remove usage of function chmod(2) to use fchmod(2) (fix race condition)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="wr@rosenauer.org" date="1578657600">- Updated to version 1.8.26
  * Use poll() instead of select() to allow file descriptor higher
    than FD_SETSIZE
  * Enable reader filtering by default
  * pcsc-spy:
  - Do not read output buffer after error
  - Adjust code to handle autoallocated buffers
  - fix year-2038 issue by using long instead of int
  * Android: fix compilation
  * polkit: log the error message if polkit_authority_get_sync() fails
  * Exit with EXIT_SUCCESS on shutdown to please systemd
  * Fix a minor memory leak</changelog>
  <changelog author="dimstar@opensuse.org" date="1579780800">- BuildRequire pkgconfig(libudev) instead of libudev-devel: allow
  OBS to shortcut through -mini flavors.</changelog>
  <changelog author="wr@rosenauer.org" date="1592136000">- Updated to version 1.9.0
  * SCardEndTransaction(): greatly improve performances (x300)
  * tokenparser: accept any Unicode character in a reader name
  * Use /run instead of /var/run by default
  * Fix a memory leak from a polkit call
  * Some other minor improvements</changelog>
  <changelog author="axel.braun@gmx.de" date="1613563200">- version 1.9.1
  * Do not (possibly) lock a reader if allocating hCard fails
  * Fix a hang in SCardTransmit()
  * Do not report an error if the wrong interface is used by the driver
  * Update reader state when a card is removed during an exchange
  * readerfactory: Make sure a freed Reader Context is not accessed
  * PHSetProtocol(): supports T=0&amp;1 cards on T=0 reader
  * hotplug-libusb:
  . support CCIDCLASSDRIVER
  . add interface name to reader name
  . remove obsolete libhal scheme
  * Some other minor improvements</changelog>
  <changelog author="axel.braun@gmx.de" date="1628337600">- version 1.9.3
  * fix a stupid regression with systemd introduced in the previous version
- version 1.9.2
  * improve NetBSD support
  * pcsc-spy: version 1.1
  . add option -t|--thread
  . x10 speed increase
  . correctly exit at end-of-file
  . remove, now useless, support of macOS
  * SetProtocol: Handle IFD_NOT_SUPPORTED from the driver
  * hotplug_libudev.c: sanitize interface name
  * pcsc_demo: change licence from GPLv3 to BSD
  * use Python 3 for Python scripts (psc-spy, UnitaryTests)
  * Some other minor improvements
- remove obsolete pcsc-lite-python3.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1633608000">- version 1.9.4
  * fix a memory leak when libusb is used for hotplug
    (i.e. non-Linux systems)</changelog>
  <changelog author="jsegitz@suse.com" date="1634558400">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_pcscd.service.patch</changelog>
</package>
<package pkgid="c98cec4be17fdb37d3421e8360d6ebe489e644f6a9983a9e7caf7f8ee0fdaee2" name="perl" arch="aarch64">
  <version epoch="0" ver="5.26.1" rel="150300.17.17.1"/>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
  <changelog author="mls@suse.de" date="1662120000">- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff</changelog>
  <changelog author="mls@suse.de" date="1688558400">- enable TLS cert verification in CPAN [bnc#1210999] [CVE-2023-31484]
  new patch: perl-cpan_verify_cert.diff</changelog>
  <changelog author="mls@suse.de" date="1715169600">- fix space calculation issues in pp_pack.c [bnc#1082216]
  [CVE-2018-6913]
  * new patch: perl-pack-overflow.diff
- fix heap buffer overflow in regexec.c [bnc#1082233]
  [CVE-2018-6798]
  new patch: perl-regexec-heap-overflow.diff
- make Net::FTP work with TLS 1.3 [bnc#1213638]
  new patch: perl-net-ftp-tls13.diff</changelog>
</package>
<package pkgid="aa3758af54b02ae7cf9403206f713d46f5573afcfb0a7c37c94e55c23f904b37" name="perl" arch="s390x">
  <version epoch="0" ver="5.26.1" rel="150300.17.17.1"/>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
  <changelog author="mls@suse.de" date="1662120000">- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff</changelog>
  <changelog author="mls@suse.de" date="1688558400">- enable TLS cert verification in CPAN [bnc#1210999] [CVE-2023-31484]
  new patch: perl-cpan_verify_cert.diff</changelog>
  <changelog author="mls@suse.de" date="1715169600">- fix space calculation issues in pp_pack.c [bnc#1082216]
  [CVE-2018-6913]
  * new patch: perl-pack-overflow.diff
- fix heap buffer overflow in regexec.c [bnc#1082233]
  [CVE-2018-6798]
  new patch: perl-regexec-heap-overflow.diff
- make Net::FTP work with TLS 1.3 [bnc#1213638]
  new patch: perl-net-ftp-tls13.diff</changelog>
</package>
<package pkgid="2be4ddcc0886c07fafb1027e82c27b8ea5a58aced9b6d0a3a593c7e8fc33c025" name="perl" arch="src">
  <version epoch="0" ver="5.26.1" rel="150300.17.17.1"/>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
  <changelog author="mls@suse.de" date="1662120000">- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff</changelog>
  <changelog author="mls@suse.de" date="1688558400">- enable TLS cert verification in CPAN [bnc#1210999] [CVE-2023-31484]
  new patch: perl-cpan_verify_cert.diff</changelog>
  <changelog author="mls@suse.de" date="1715169600">- fix space calculation issues in pp_pack.c [bnc#1082216]
  [CVE-2018-6913]
  * new patch: perl-pack-overflow.diff
- fix heap buffer overflow in regexec.c [bnc#1082233]
  [CVE-2018-6798]
  new patch: perl-regexec-heap-overflow.diff
- make Net::FTP work with TLS 1.3 [bnc#1213638]
  new patch: perl-net-ftp-tls13.diff</changelog>
</package>
<package pkgid="8e081b0dd9971b4e8e32f3fd559eb11f0cb57ca6f861329c5f871e7673b0783d" name="perl" arch="x86_64">
  <version epoch="0" ver="5.26.1" rel="150300.17.17.1"/>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
  <changelog author="mls@suse.de" date="1662120000">- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff</changelog>
  <changelog author="mls@suse.de" date="1688558400">- enable TLS cert verification in CPAN [bnc#1210999] [CVE-2023-31484]
  new patch: perl-cpan_verify_cert.diff</changelog>
  <changelog author="mls@suse.de" date="1715169600">- fix space calculation issues in pp_pack.c [bnc#1082216]
  [CVE-2018-6913]
  * new patch: perl-pack-overflow.diff
- fix heap buffer overflow in regexec.c [bnc#1082233]
  [CVE-2018-6798]
  new patch: perl-regexec-heap-overflow.diff
- make Net::FTP work with TLS 1.3 [bnc#1213638]
  new patch: perl-net-ftp-tls13.diff</changelog>
</package>
<package pkgid="b99320be850809ac61b5145f758c27b216ba248e03ab6df15945c3cf6b19d8bc" name="perl-Bootloader" arch="aarch64">
  <version epoch="0" ver="0.945" rel="150400.3.9.1"/>
  <changelog author="wfeldt@opensuse.org" date="1571054400">- merge gh#openSUSE/perl-bootloader#123
- Accept sysconfig values without quotes
- 0.926</changelog>
  <changelog author="wfeldt@opensuse.org" date="1587729600">- merge gh#openSUSE/perl-bootloader#126
- always install EFI fallback boot for aarch64 (bsc#1167015)
- 0.927</changelog>
  <changelog author="wfeldt@opensuse.org" date="1591185600">- merge gh#openSUSE/perl-bootloader#127
- use correct target name on aarch64 (bsc#1172293)
- 0.928</changelog>
  <changelog author="wfeldt@opensuse.org" date="1594728000">- merge gh#openSUSE/perl-bootloader#128
- Do not warn about missing SECURE_BOOT sysconfig
- 0.929</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595505600">- merge gh#openSUSE/perl-bootloader#130
- Throw less warnings about fstab
- 0.930</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595592000">- merge gh#openSUSE/perl-bootloader#129
- Check tpm.mod in the new grub2 directory (bsc#1174320)
- 0.931</changelog>
  <changelog author="wfeldt@opensuse.org" date="1603108800">- merge gh#openSUSE/perl-bootloader#131
- grub2 install: honor UPDATE_NVRAM in /etc/sysconfig/bootloader
  (bsc#1157550 jsc#SLE-11500).
- 0.932</changelog>
  <changelog author="wfeldt@opensuse.org" date="1613044800">- merge gh#openSUSE/perl-bootloader#133
- use shim on aarch64 (jsc#SLE-15823, jsc#SLE-15020)
- 0.933</changelog>
  <changelog author="wfeldt@opensuse.org" date="1618488000">- merge gh#openSUSE/perl-bootloader#134
- install with --removable if efivars are not writable
  (bsc#1182749, bsc#1174111, bsc#1184160)
- fix whitespace
- 0.934</changelog>
  <changelog author="wfeldt@opensuse.org" date="1627387200">- merge gh#openSUSE/perl-bootloader#135
- fix typo in update-bootloader
- 0.935</changelog>
  <changelog author="wfeldt@opensuse.org" date="1631793600">- merge gh#openSUSE/perl-bootloader#136
- report error if config file could not be updated (bsc#1188768)
- 0.936</changelog>
  <changelog author="wfeldt@opensuse.org" date="1642075200">- merge gh#openSUSE/perl-bootloader#137
- grub2 install: Support secure boot on powerpc (bsc#1192764
  jsc#SLE-18271).
- 0.937</changelog>
  <changelog author="wfeldt@opensuse.org" date="1649332800">- merge gh#openSUSE/perl-bootloader#138
- grub2/install: reset error code when passing through recover code
  (bsc#1198197)
- 0.938</changelog>
  <changelog author="wfeldt@opensuse.org" date="1651060800">- merge gh#openSUSE/perl-bootloader#139
- fix sysconfig parsing (bsc#1198828)
- 0.939</changelog>
  <changelog author="wfeldt@opensuse.org" date="1670241600">- merge gh#openSUSE/perl-bootloader#140
- add basic support for systemd-boot
- 0.940</changelog>
  <changelog author="wfeldt@opensuse.org" date="1673524800">- merge gh#openSUSE/perl-bootloader#141
- systemd-boot: easier initial setup
- 0.941</changelog>
  <changelog author="wfeldt@opensuse.org" date="1682337600">- merge gh#openSUSE/perl-bootloader#142
- use fw_platform_size to distinguish between 32 bit and 64 bit
  UEFI platforms (bsc#1208003)
- 0.942</changelog>
  <changelog author="wfeldt@opensuse.org" date="1685534400">- merge gh#openSUSE/perl-bootloader#147
- UEFI: update also default location, if it is controlled by SUSE
  (bsc#1210799, bsc#1201399)
- 0.943</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688126400">- merge gh#openSUSE/perl-bootloader#152
- use signed grub EFI binary when updating grub in default EFI
  location (bsc#1210799)
- check whether grub2-install supports --suse-force-signed option
- 0.944</changelog>
  <changelog author="wfeldt@opensuse.org" date="1694088000">- merge gh#openSUSE/perl-bootloader#157
- bootloader_entry script can have an optional 'force-default'
  argument (bsc#1215064)
- skip warning about unsupported options when in compat mode
- 0.945</changelog>
</package>
<package pkgid="093cc4162472563605e40c66a0308608485e4b7293c6fc64e98142110819234f" name="perl-Bootloader" arch="s390x">
  <version epoch="0" ver="0.945" rel="150400.3.9.1"/>
  <changelog author="wfeldt@opensuse.org" date="1571054400">- merge gh#openSUSE/perl-bootloader#123
- Accept sysconfig values without quotes
- 0.926</changelog>
  <changelog author="wfeldt@opensuse.org" date="1587729600">- merge gh#openSUSE/perl-bootloader#126
- always install EFI fallback boot for aarch64 (bsc#1167015)
- 0.927</changelog>
  <changelog author="wfeldt@opensuse.org" date="1591185600">- merge gh#openSUSE/perl-bootloader#127
- use correct target name on aarch64 (bsc#1172293)
- 0.928</changelog>
  <changelog author="wfeldt@opensuse.org" date="1594728000">- merge gh#openSUSE/perl-bootloader#128
- Do not warn about missing SECURE_BOOT sysconfig
- 0.929</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595505600">- merge gh#openSUSE/perl-bootloader#130
- Throw less warnings about fstab
- 0.930</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595592000">- merge gh#openSUSE/perl-bootloader#129
- Check tpm.mod in the new grub2 directory (bsc#1174320)
- 0.931</changelog>
  <changelog author="wfeldt@opensuse.org" date="1603108800">- merge gh#openSUSE/perl-bootloader#131
- grub2 install: honor UPDATE_NVRAM in /etc/sysconfig/bootloader
  (bsc#1157550 jsc#SLE-11500).
- 0.932</changelog>
  <changelog author="wfeldt@opensuse.org" date="1613044800">- merge gh#openSUSE/perl-bootloader#133
- use shim on aarch64 (jsc#SLE-15823, jsc#SLE-15020)
- 0.933</changelog>
  <changelog author="wfeldt@opensuse.org" date="1618488000">- merge gh#openSUSE/perl-bootloader#134
- install with --removable if efivars are not writable
  (bsc#1182749, bsc#1174111, bsc#1184160)
- fix whitespace
- 0.934</changelog>
  <changelog author="wfeldt@opensuse.org" date="1627387200">- merge gh#openSUSE/perl-bootloader#135
- fix typo in update-bootloader
- 0.935</changelog>
  <changelog author="wfeldt@opensuse.org" date="1631793600">- merge gh#openSUSE/perl-bootloader#136
- report error if config file could not be updated (bsc#1188768)
- 0.936</changelog>
  <changelog author="wfeldt@opensuse.org" date="1642075200">- merge gh#openSUSE/perl-bootloader#137
- grub2 install: Support secure boot on powerpc (bsc#1192764
  jsc#SLE-18271).
- 0.937</changelog>
  <changelog author="wfeldt@opensuse.org" date="1649332800">- merge gh#openSUSE/perl-bootloader#138
- grub2/install: reset error code when passing through recover code
  (bsc#1198197)
- 0.938</changelog>
  <changelog author="wfeldt@opensuse.org" date="1651060800">- merge gh#openSUSE/perl-bootloader#139
- fix sysconfig parsing (bsc#1198828)
- 0.939</changelog>
  <changelog author="wfeldt@opensuse.org" date="1670241600">- merge gh#openSUSE/perl-bootloader#140
- add basic support for systemd-boot
- 0.940</changelog>
  <changelog author="wfeldt@opensuse.org" date="1673524800">- merge gh#openSUSE/perl-bootloader#141
- systemd-boot: easier initial setup
- 0.941</changelog>
  <changelog author="wfeldt@opensuse.org" date="1682337600">- merge gh#openSUSE/perl-bootloader#142
- use fw_platform_size to distinguish between 32 bit and 64 bit
  UEFI platforms (bsc#1208003)
- 0.942</changelog>
  <changelog author="wfeldt@opensuse.org" date="1685534400">- merge gh#openSUSE/perl-bootloader#147
- UEFI: update also default location, if it is controlled by SUSE
  (bsc#1210799, bsc#1201399)
- 0.943</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688126400">- merge gh#openSUSE/perl-bootloader#152
- use signed grub EFI binary when updating grub in default EFI
  location (bsc#1210799)
- check whether grub2-install supports --suse-force-signed option
- 0.944</changelog>
  <changelog author="wfeldt@opensuse.org" date="1694088000">- merge gh#openSUSE/perl-bootloader#157
- bootloader_entry script can have an optional 'force-default'
  argument (bsc#1215064)
- skip warning about unsupported options when in compat mode
- 0.945</changelog>
</package>
<package pkgid="ed73bca7fdbdad353bce73043d156bcc81df05129f0deb67d3998c939c7a24af" name="perl-Bootloader" arch="src">
  <version epoch="0" ver="0.945" rel="150400.3.9.1"/>
  <changelog author="wfeldt@opensuse.org" date="1571054400">- merge gh#openSUSE/perl-bootloader#123
- Accept sysconfig values without quotes
- 0.926</changelog>
  <changelog author="wfeldt@opensuse.org" date="1587729600">- merge gh#openSUSE/perl-bootloader#126
- always install EFI fallback boot for aarch64 (bsc#1167015)
- 0.927</changelog>
  <changelog author="wfeldt@opensuse.org" date="1591185600">- merge gh#openSUSE/perl-bootloader#127
- use correct target name on aarch64 (bsc#1172293)
- 0.928</changelog>
  <changelog author="wfeldt@opensuse.org" date="1594728000">- merge gh#openSUSE/perl-bootloader#128
- Do not warn about missing SECURE_BOOT sysconfig
- 0.929</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595505600">- merge gh#openSUSE/perl-bootloader#130
- Throw less warnings about fstab
- 0.930</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595592000">- merge gh#openSUSE/perl-bootloader#129
- Check tpm.mod in the new grub2 directory (bsc#1174320)
- 0.931</changelog>
  <changelog author="wfeldt@opensuse.org" date="1603108800">- merge gh#openSUSE/perl-bootloader#131
- grub2 install: honor UPDATE_NVRAM in /etc/sysconfig/bootloader
  (bsc#1157550 jsc#SLE-11500).
- 0.932</changelog>
  <changelog author="wfeldt@opensuse.org" date="1613044800">- merge gh#openSUSE/perl-bootloader#133
- use shim on aarch64 (jsc#SLE-15823, jsc#SLE-15020)
- 0.933</changelog>
  <changelog author="wfeldt@opensuse.org" date="1618488000">- merge gh#openSUSE/perl-bootloader#134
- install with --removable if efivars are not writable
  (bsc#1182749, bsc#1174111, bsc#1184160)
- fix whitespace
- 0.934</changelog>
  <changelog author="wfeldt@opensuse.org" date="1627387200">- merge gh#openSUSE/perl-bootloader#135
- fix typo in update-bootloader
- 0.935</changelog>
  <changelog author="wfeldt@opensuse.org" date="1631793600">- merge gh#openSUSE/perl-bootloader#136
- report error if config file could not be updated (bsc#1188768)
- 0.936</changelog>
  <changelog author="wfeldt@opensuse.org" date="1642075200">- merge gh#openSUSE/perl-bootloader#137
- grub2 install: Support secure boot on powerpc (bsc#1192764
  jsc#SLE-18271).
- 0.937</changelog>
  <changelog author="wfeldt@opensuse.org" date="1649332800">- merge gh#openSUSE/perl-bootloader#138
- grub2/install: reset error code when passing through recover code
  (bsc#1198197)
- 0.938</changelog>
  <changelog author="wfeldt@opensuse.org" date="1651060800">- merge gh#openSUSE/perl-bootloader#139
- fix sysconfig parsing (bsc#1198828)
- 0.939</changelog>
  <changelog author="wfeldt@opensuse.org" date="1670241600">- merge gh#openSUSE/perl-bootloader#140
- add basic support for systemd-boot
- 0.940</changelog>
  <changelog author="wfeldt@opensuse.org" date="1673524800">- merge gh#openSUSE/perl-bootloader#141
- systemd-boot: easier initial setup
- 0.941</changelog>
  <changelog author="wfeldt@opensuse.org" date="1682337600">- merge gh#openSUSE/perl-bootloader#142
- use fw_platform_size to distinguish between 32 bit and 64 bit
  UEFI platforms (bsc#1208003)
- 0.942</changelog>
  <changelog author="wfeldt@opensuse.org" date="1685534400">- merge gh#openSUSE/perl-bootloader#147
- UEFI: update also default location, if it is controlled by SUSE
  (bsc#1210799, bsc#1201399)
- 0.943</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688126400">- merge gh#openSUSE/perl-bootloader#152
- use signed grub EFI binary when updating grub in default EFI
  location (bsc#1210799)
- check whether grub2-install supports --suse-force-signed option
- 0.944</changelog>
  <changelog author="wfeldt@opensuse.org" date="1694088000">- merge gh#openSUSE/perl-bootloader#157
- bootloader_entry script can have an optional 'force-default'
  argument (bsc#1215064)
- skip warning about unsupported options when in compat mode
- 0.945</changelog>
</package>
<package pkgid="bbf74264fe14c7f8882a3dd6365d3cd54020ffb42acde5dec5b5ed243b30821f" name="perl-Bootloader" arch="x86_64">
  <version epoch="0" ver="0.945" rel="150400.3.9.1"/>
  <changelog author="wfeldt@opensuse.org" date="1571054400">- merge gh#openSUSE/perl-bootloader#123
- Accept sysconfig values without quotes
- 0.926</changelog>
  <changelog author="wfeldt@opensuse.org" date="1587729600">- merge gh#openSUSE/perl-bootloader#126
- always install EFI fallback boot for aarch64 (bsc#1167015)
- 0.927</changelog>
  <changelog author="wfeldt@opensuse.org" date="1591185600">- merge gh#openSUSE/perl-bootloader#127
- use correct target name on aarch64 (bsc#1172293)
- 0.928</changelog>
  <changelog author="wfeldt@opensuse.org" date="1594728000">- merge gh#openSUSE/perl-bootloader#128
- Do not warn about missing SECURE_BOOT sysconfig
- 0.929</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595505600">- merge gh#openSUSE/perl-bootloader#130
- Throw less warnings about fstab
- 0.930</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595592000">- merge gh#openSUSE/perl-bootloader#129
- Check tpm.mod in the new grub2 directory (bsc#1174320)
- 0.931</changelog>
  <changelog author="wfeldt@opensuse.org" date="1603108800">- merge gh#openSUSE/perl-bootloader#131
- grub2 install: honor UPDATE_NVRAM in /etc/sysconfig/bootloader
  (bsc#1157550 jsc#SLE-11500).
- 0.932</changelog>
  <changelog author="wfeldt@opensuse.org" date="1613044800">- merge gh#openSUSE/perl-bootloader#133
- use shim on aarch64 (jsc#SLE-15823, jsc#SLE-15020)
- 0.933</changelog>
  <changelog author="wfeldt@opensuse.org" date="1618488000">- merge gh#openSUSE/perl-bootloader#134
- install with --removable if efivars are not writable
  (bsc#1182749, bsc#1174111, bsc#1184160)
- fix whitespace
- 0.934</changelog>
  <changelog author="wfeldt@opensuse.org" date="1627387200">- merge gh#openSUSE/perl-bootloader#135
- fix typo in update-bootloader
- 0.935</changelog>
  <changelog author="wfeldt@opensuse.org" date="1631793600">- merge gh#openSUSE/perl-bootloader#136
- report error if config file could not be updated (bsc#1188768)
- 0.936</changelog>
  <changelog author="wfeldt@opensuse.org" date="1642075200">- merge gh#openSUSE/perl-bootloader#137
- grub2 install: Support secure boot on powerpc (bsc#1192764
  jsc#SLE-18271).
- 0.937</changelog>
  <changelog author="wfeldt@opensuse.org" date="1649332800">- merge gh#openSUSE/perl-bootloader#138
- grub2/install: reset error code when passing through recover code
  (bsc#1198197)
- 0.938</changelog>
  <changelog author="wfeldt@opensuse.org" date="1651060800">- merge gh#openSUSE/perl-bootloader#139
- fix sysconfig parsing (bsc#1198828)
- 0.939</changelog>
  <changelog author="wfeldt@opensuse.org" date="1670241600">- merge gh#openSUSE/perl-bootloader#140
- add basic support for systemd-boot
- 0.940</changelog>
  <changelog author="wfeldt@opensuse.org" date="1673524800">- merge gh#openSUSE/perl-bootloader#141
- systemd-boot: easier initial setup
- 0.941</changelog>
  <changelog author="wfeldt@opensuse.org" date="1682337600">- merge gh#openSUSE/perl-bootloader#142
- use fw_platform_size to distinguish between 32 bit and 64 bit
  UEFI platforms (bsc#1208003)
- 0.942</changelog>
  <changelog author="wfeldt@opensuse.org" date="1685534400">- merge gh#openSUSE/perl-bootloader#147
- UEFI: update also default location, if it is controlled by SUSE
  (bsc#1210799, bsc#1201399)
- 0.943</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688126400">- merge gh#openSUSE/perl-bootloader#152
- use signed grub EFI binary when updating grub in default EFI
  location (bsc#1210799)
- check whether grub2-install supports --suse-force-signed option
- 0.944</changelog>
  <changelog author="wfeldt@opensuse.org" date="1694088000">- merge gh#openSUSE/perl-bootloader#157
- bootloader_entry script can have an optional 'force-default'
  argument (bsc#1215064)
- skip warning about unsupported options when in compat mode
- 0.945</changelog>
</package>
<package pkgid="51645148ac7fcaa3fa4a7530075c13fc462429a31280cf9cc6d399b6310f6931" name="perl-Bootloader" arch="aarch64">
  <version epoch="0" ver="0.947" rel="150400.3.12.1"/>
  <changelog author="wfeldt@opensuse.org" date="1591185600">- merge gh#openSUSE/perl-bootloader#127
- use correct target name on aarch64 (bsc#1172293)
- 0.928</changelog>
  <changelog author="wfeldt@opensuse.org" date="1594728000">- merge gh#openSUSE/perl-bootloader#128
- Do not warn about missing SECURE_BOOT sysconfig
- 0.929</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595505600">- merge gh#openSUSE/perl-bootloader#130
- Throw less warnings about fstab
- 0.930</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595592000">- merge gh#openSUSE/perl-bootloader#129
- Check tpm.mod in the new grub2 directory (bsc#1174320)
- 0.931</changelog>
  <changelog author="wfeldt@opensuse.org" date="1603108800">- merge gh#openSUSE/perl-bootloader#131
- grub2 install: honor UPDATE_NVRAM in /etc/sysconfig/bootloader
  (bsc#1157550 jsc#SLE-11500).
- 0.932</changelog>
  <changelog author="wfeldt@opensuse.org" date="1613044800">- merge gh#openSUSE/perl-bootloader#133
- use shim on aarch64 (jsc#SLE-15823, jsc#SLE-15020)
- 0.933</changelog>
  <changelog author="wfeldt@opensuse.org" date="1618488000">- merge gh#openSUSE/perl-bootloader#134
- install with --removable if efivars are not writable
  (bsc#1182749, bsc#1174111, bsc#1184160)
- fix whitespace
- 0.934</changelog>
  <changelog author="wfeldt@opensuse.org" date="1627387200">- merge gh#openSUSE/perl-bootloader#135
- fix typo in update-bootloader
- 0.935</changelog>
  <changelog author="wfeldt@opensuse.org" date="1631793600">- merge gh#openSUSE/perl-bootloader#136
- report error if config file could not be updated (bsc#1188768)
- 0.936</changelog>
  <changelog author="wfeldt@opensuse.org" date="1642075200">- merge gh#openSUSE/perl-bootloader#137
- grub2 install: Support secure boot on powerpc (bsc#1192764
  jsc#SLE-18271).
- 0.937</changelog>
  <changelog author="wfeldt@opensuse.org" date="1649332800">- merge gh#openSUSE/perl-bootloader#138
- grub2/install: reset error code when passing through recover code
  (bsc#1198197)
- 0.938</changelog>
  <changelog author="wfeldt@opensuse.org" date="1651060800">- merge gh#openSUSE/perl-bootloader#139
- fix sysconfig parsing (bsc#1198828)
- 0.939</changelog>
  <changelog author="wfeldt@opensuse.org" date="1670241600">- merge gh#openSUSE/perl-bootloader#140
- add basic support for systemd-boot
- 0.940</changelog>
  <changelog author="wfeldt@opensuse.org" date="1673524800">- merge gh#openSUSE/perl-bootloader#141
- systemd-boot: easier initial setup
- 0.941</changelog>
  <changelog author="wfeldt@opensuse.org" date="1682337600">- merge gh#openSUSE/perl-bootloader#142
- use fw_platform_size to distinguish between 32 bit and 64 bit
  UEFI platforms (bsc#1208003)
- 0.942</changelog>
  <changelog author="wfeldt@opensuse.org" date="1685534400">- merge gh#openSUSE/perl-bootloader#147
- UEFI: update also default location, if it is controlled by SUSE
  (bsc#1210799, bsc#1201399)
- 0.943</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688126400">- merge gh#openSUSE/perl-bootloader#152
- use signed grub EFI binary when updating grub in default EFI
  location (bsc#1210799)
- check whether grub2-install supports --suse-force-signed option
- 0.944</changelog>
  <changelog author="wfeldt@opensuse.org" date="1694088000">- merge gh#openSUSE/perl-bootloader#157
- bootloader_entry script can have an optional 'force-default'
  argument (bsc#1215064)
- skip warning about unsupported options when in compat mode
- 0.945</changelog>
  <changelog author="wfeldt@opensuse.org" date="1705492800">- merge gh#openSUSE/perl-bootloader#161
- support old grub versions (&lt;= 2.02) that used /usr/lib
  (bsc#1218842)
- create EFI boot fallback directory if necessary
- 0.946</changelog>
  <changelog author="wfeldt@opensuse.org" date="1710763200">- merge gh#openSUSE/perl-bootloader#166
- log grub2-install errors correctly (bsc#1221470)
- 0.947</changelog>
</package>
<package pkgid="4785d0fb34710f17261d0fb9606d8f08bb8bc8d48ca3161bb68d5b2ad18fc2c8" name="perl-Bootloader" arch="s390x">
  <version epoch="0" ver="0.947" rel="150400.3.12.1"/>
  <changelog author="wfeldt@opensuse.org" date="1591185600">- merge gh#openSUSE/perl-bootloader#127
- use correct target name on aarch64 (bsc#1172293)
- 0.928</changelog>
  <changelog author="wfeldt@opensuse.org" date="1594728000">- merge gh#openSUSE/perl-bootloader#128
- Do not warn about missing SECURE_BOOT sysconfig
- 0.929</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595505600">- merge gh#openSUSE/perl-bootloader#130
- Throw less warnings about fstab
- 0.930</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595592000">- merge gh#openSUSE/perl-bootloader#129
- Check tpm.mod in the new grub2 directory (bsc#1174320)
- 0.931</changelog>
  <changelog author="wfeldt@opensuse.org" date="1603108800">- merge gh#openSUSE/perl-bootloader#131
- grub2 install: honor UPDATE_NVRAM in /etc/sysconfig/bootloader
  (bsc#1157550 jsc#SLE-11500).
- 0.932</changelog>
  <changelog author="wfeldt@opensuse.org" date="1613044800">- merge gh#openSUSE/perl-bootloader#133
- use shim on aarch64 (jsc#SLE-15823, jsc#SLE-15020)
- 0.933</changelog>
  <changelog author="wfeldt@opensuse.org" date="1618488000">- merge gh#openSUSE/perl-bootloader#134
- install with --removable if efivars are not writable
  (bsc#1182749, bsc#1174111, bsc#1184160)
- fix whitespace
- 0.934</changelog>
  <changelog author="wfeldt@opensuse.org" date="1627387200">- merge gh#openSUSE/perl-bootloader#135
- fix typo in update-bootloader
- 0.935</changelog>
  <changelog author="wfeldt@opensuse.org" date="1631793600">- merge gh#openSUSE/perl-bootloader#136
- report error if config file could not be updated (bsc#1188768)
- 0.936</changelog>
  <changelog author="wfeldt@opensuse.org" date="1642075200">- merge gh#openSUSE/perl-bootloader#137
- grub2 install: Support secure boot on powerpc (bsc#1192764
  jsc#SLE-18271).
- 0.937</changelog>
  <changelog author="wfeldt@opensuse.org" date="1649332800">- merge gh#openSUSE/perl-bootloader#138
- grub2/install: reset error code when passing through recover code
  (bsc#1198197)
- 0.938</changelog>
  <changelog author="wfeldt@opensuse.org" date="1651060800">- merge gh#openSUSE/perl-bootloader#139
- fix sysconfig parsing (bsc#1198828)
- 0.939</changelog>
  <changelog author="wfeldt@opensuse.org" date="1670241600">- merge gh#openSUSE/perl-bootloader#140
- add basic support for systemd-boot
- 0.940</changelog>
  <changelog author="wfeldt@opensuse.org" date="1673524800">- merge gh#openSUSE/perl-bootloader#141
- systemd-boot: easier initial setup
- 0.941</changelog>
  <changelog author="wfeldt@opensuse.org" date="1682337600">- merge gh#openSUSE/perl-bootloader#142
- use fw_platform_size to distinguish between 32 bit and 64 bit
  UEFI platforms (bsc#1208003)
- 0.942</changelog>
  <changelog author="wfeldt@opensuse.org" date="1685534400">- merge gh#openSUSE/perl-bootloader#147
- UEFI: update also default location, if it is controlled by SUSE
  (bsc#1210799, bsc#1201399)
- 0.943</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688126400">- merge gh#openSUSE/perl-bootloader#152
- use signed grub EFI binary when updating grub in default EFI
  location (bsc#1210799)
- check whether grub2-install supports --suse-force-signed option
- 0.944</changelog>
  <changelog author="wfeldt@opensuse.org" date="1694088000">- merge gh#openSUSE/perl-bootloader#157
- bootloader_entry script can have an optional 'force-default'
  argument (bsc#1215064)
- skip warning about unsupported options when in compat mode
- 0.945</changelog>
  <changelog author="wfeldt@opensuse.org" date="1705492800">- merge gh#openSUSE/perl-bootloader#161
- support old grub versions (&lt;= 2.02) that used /usr/lib
  (bsc#1218842)
- create EFI boot fallback directory if necessary
- 0.946</changelog>
  <changelog author="wfeldt@opensuse.org" date="1710763200">- merge gh#openSUSE/perl-bootloader#166
- log grub2-install errors correctly (bsc#1221470)
- 0.947</changelog>
</package>
<package pkgid="2e1b0c6dd7a1236782a1ccefa64cf29aa270230f410ee4e10400f4b7d15db2ee" name="perl-Bootloader" arch="src">
  <version epoch="0" ver="0.947" rel="150400.3.12.1"/>
  <changelog author="wfeldt@opensuse.org" date="1591185600">- merge gh#openSUSE/perl-bootloader#127
- use correct target name on aarch64 (bsc#1172293)
- 0.928</changelog>
  <changelog author="wfeldt@opensuse.org" date="1594728000">- merge gh#openSUSE/perl-bootloader#128
- Do not warn about missing SECURE_BOOT sysconfig
- 0.929</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595505600">- merge gh#openSUSE/perl-bootloader#130
- Throw less warnings about fstab
- 0.930</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595592000">- merge gh#openSUSE/perl-bootloader#129
- Check tpm.mod in the new grub2 directory (bsc#1174320)
- 0.931</changelog>
  <changelog author="wfeldt@opensuse.org" date="1603108800">- merge gh#openSUSE/perl-bootloader#131
- grub2 install: honor UPDATE_NVRAM in /etc/sysconfig/bootloader
  (bsc#1157550 jsc#SLE-11500).
- 0.932</changelog>
  <changelog author="wfeldt@opensuse.org" date="1613044800">- merge gh#openSUSE/perl-bootloader#133
- use shim on aarch64 (jsc#SLE-15823, jsc#SLE-15020)
- 0.933</changelog>
  <changelog author="wfeldt@opensuse.org" date="1618488000">- merge gh#openSUSE/perl-bootloader#134
- install with --removable if efivars are not writable
  (bsc#1182749, bsc#1174111, bsc#1184160)
- fix whitespace
- 0.934</changelog>
  <changelog author="wfeldt@opensuse.org" date="1627387200">- merge gh#openSUSE/perl-bootloader#135
- fix typo in update-bootloader
- 0.935</changelog>
  <changelog author="wfeldt@opensuse.org" date="1631793600">- merge gh#openSUSE/perl-bootloader#136
- report error if config file could not be updated (bsc#1188768)
- 0.936</changelog>
  <changelog author="wfeldt@opensuse.org" date="1642075200">- merge gh#openSUSE/perl-bootloader#137
- grub2 install: Support secure boot on powerpc (bsc#1192764
  jsc#SLE-18271).
- 0.937</changelog>
  <changelog author="wfeldt@opensuse.org" date="1649332800">- merge gh#openSUSE/perl-bootloader#138
- grub2/install: reset error code when passing through recover code
  (bsc#1198197)
- 0.938</changelog>
  <changelog author="wfeldt@opensuse.org" date="1651060800">- merge gh#openSUSE/perl-bootloader#139
- fix sysconfig parsing (bsc#1198828)
- 0.939</changelog>
  <changelog author="wfeldt@opensuse.org" date="1670241600">- merge gh#openSUSE/perl-bootloader#140
- add basic support for systemd-boot
- 0.940</changelog>
  <changelog author="wfeldt@opensuse.org" date="1673524800">- merge gh#openSUSE/perl-bootloader#141
- systemd-boot: easier initial setup
- 0.941</changelog>
  <changelog author="wfeldt@opensuse.org" date="1682337600">- merge gh#openSUSE/perl-bootloader#142
- use fw_platform_size to distinguish between 32 bit and 64 bit
  UEFI platforms (bsc#1208003)
- 0.942</changelog>
  <changelog author="wfeldt@opensuse.org" date="1685534400">- merge gh#openSUSE/perl-bootloader#147
- UEFI: update also default location, if it is controlled by SUSE
  (bsc#1210799, bsc#1201399)
- 0.943</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688126400">- merge gh#openSUSE/perl-bootloader#152
- use signed grub EFI binary when updating grub in default EFI
  location (bsc#1210799)
- check whether grub2-install supports --suse-force-signed option
- 0.944</changelog>
  <changelog author="wfeldt@opensuse.org" date="1694088000">- merge gh#openSUSE/perl-bootloader#157
- bootloader_entry script can have an optional 'force-default'
  argument (bsc#1215064)
- skip warning about unsupported options when in compat mode
- 0.945</changelog>
  <changelog author="wfeldt@opensuse.org" date="1705492800">- merge gh#openSUSE/perl-bootloader#161
- support old grub versions (&lt;= 2.02) that used /usr/lib
  (bsc#1218842)
- create EFI boot fallback directory if necessary
- 0.946</changelog>
  <changelog author="wfeldt@opensuse.org" date="1710763200">- merge gh#openSUSE/perl-bootloader#166
- log grub2-install errors correctly (bsc#1221470)
- 0.947</changelog>
</package>
<package pkgid="15162fdc91b105f2233526f504b7ed04fbe3304058dd1e9b274bce94fe9d2674" name="perl-Bootloader" arch="x86_64">
  <version epoch="0" ver="0.947" rel="150400.3.12.1"/>
  <changelog author="wfeldt@opensuse.org" date="1591185600">- merge gh#openSUSE/perl-bootloader#127
- use correct target name on aarch64 (bsc#1172293)
- 0.928</changelog>
  <changelog author="wfeldt@opensuse.org" date="1594728000">- merge gh#openSUSE/perl-bootloader#128
- Do not warn about missing SECURE_BOOT sysconfig
- 0.929</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595505600">- merge gh#openSUSE/perl-bootloader#130
- Throw less warnings about fstab
- 0.930</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595592000">- merge gh#openSUSE/perl-bootloader#129
- Check tpm.mod in the new grub2 directory (bsc#1174320)
- 0.931</changelog>
  <changelog author="wfeldt@opensuse.org" date="1603108800">- merge gh#openSUSE/perl-bootloader#131
- grub2 install: honor UPDATE_NVRAM in /etc/sysconfig/bootloader
  (bsc#1157550 jsc#SLE-11500).
- 0.932</changelog>
  <changelog author="wfeldt@opensuse.org" date="1613044800">- merge gh#openSUSE/perl-bootloader#133
- use shim on aarch64 (jsc#SLE-15823, jsc#SLE-15020)
- 0.933</changelog>
  <changelog author="wfeldt@opensuse.org" date="1618488000">- merge gh#openSUSE/perl-bootloader#134
- install with --removable if efivars are not writable
  (bsc#1182749, bsc#1174111, bsc#1184160)
- fix whitespace
- 0.934</changelog>
  <changelog author="wfeldt@opensuse.org" date="1627387200">- merge gh#openSUSE/perl-bootloader#135
- fix typo in update-bootloader
- 0.935</changelog>
  <changelog author="wfeldt@opensuse.org" date="1631793600">- merge gh#openSUSE/perl-bootloader#136
- report error if config file could not be updated (bsc#1188768)
- 0.936</changelog>
  <changelog author="wfeldt@opensuse.org" date="1642075200">- merge gh#openSUSE/perl-bootloader#137
- grub2 install: Support secure boot on powerpc (bsc#1192764
  jsc#SLE-18271).
- 0.937</changelog>
  <changelog author="wfeldt@opensuse.org" date="1649332800">- merge gh#openSUSE/perl-bootloader#138
- grub2/install: reset error code when passing through recover code
  (bsc#1198197)
- 0.938</changelog>
  <changelog author="wfeldt@opensuse.org" date="1651060800">- merge gh#openSUSE/perl-bootloader#139
- fix sysconfig parsing (bsc#1198828)
- 0.939</changelog>
  <changelog author="wfeldt@opensuse.org" date="1670241600">- merge gh#openSUSE/perl-bootloader#140
- add basic support for systemd-boot
- 0.940</changelog>
  <changelog author="wfeldt@opensuse.org" date="1673524800">- merge gh#openSUSE/perl-bootloader#141
- systemd-boot: easier initial setup
- 0.941</changelog>
  <changelog author="wfeldt@opensuse.org" date="1682337600">- merge gh#openSUSE/perl-bootloader#142
- use fw_platform_size to distinguish between 32 bit and 64 bit
  UEFI platforms (bsc#1208003)
- 0.942</changelog>
  <changelog author="wfeldt@opensuse.org" date="1685534400">- merge gh#openSUSE/perl-bootloader#147
- UEFI: update also default location, if it is controlled by SUSE
  (bsc#1210799, bsc#1201399)
- 0.943</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688126400">- merge gh#openSUSE/perl-bootloader#152
- use signed grub EFI binary when updating grub in default EFI
  location (bsc#1210799)
- check whether grub2-install supports --suse-force-signed option
- 0.944</changelog>
  <changelog author="wfeldt@opensuse.org" date="1694088000">- merge gh#openSUSE/perl-bootloader#157
- bootloader_entry script can have an optional 'force-default'
  argument (bsc#1215064)
- skip warning about unsupported options when in compat mode
- 0.945</changelog>
  <changelog author="wfeldt@opensuse.org" date="1705492800">- merge gh#openSUSE/perl-bootloader#161
- support old grub versions (&lt;= 2.02) that used /usr/lib
  (bsc#1218842)
- create EFI boot fallback directory if necessary
- 0.946</changelog>
  <changelog author="wfeldt@opensuse.org" date="1710763200">- merge gh#openSUSE/perl-bootloader#166
- log grub2-install errors correctly (bsc#1221470)
- 0.947</changelog>
</package>
<package pkgid="c95a10ef698f439c890095b89c392469d76001b315c4759eace72205b6710e29" name="perl-Git" arch="aarch64">
  <version epoch="0" ver="2.35.3" rel="150300.10.30.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
</package>
<package pkgid="b25e9b58c7c6adc03087137d1a0c3f0656e095c6a091e25062db0c05a8cfaf66" name="perl-Git" arch="s390x">
  <version epoch="0" ver="2.35.3" rel="150300.10.30.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
</package>
<package pkgid="3e5d58db6b48d7153de38bcd25e186fca8c56ca8e18af940779d4d30f2756b78" name="perl-Git" arch="x86_64">
  <version epoch="0" ver="2.35.3" rel="150300.10.30.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
</package>
<package pkgid="d967964574f8602d8f440edf0f81f438bb4575c583b65929dfbeeb8b027df951" name="perl-Git" arch="aarch64">
  <version epoch="0" ver="2.35.3" rel="150300.10.33.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
</package>
<package pkgid="9854a75c4bff9c53060eca5f52391258a9a373306d12758b5de89632077b34a7" name="perl-Git" arch="s390x">
  <version epoch="0" ver="2.35.3" rel="150300.10.33.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
</package>
<package pkgid="b4816934049000f05436b5f3b85b2dfd83cc734885b70d3d58a98a7bad20b6d2" name="perl-Git" arch="x86_64">
  <version epoch="0" ver="2.35.3" rel="150300.10.33.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
</package>
<package pkgid="fc5d6e41569fbefdb46e1de77eb6caf67a328a63e7e605842bec1fd7153bab4b" name="perl-Git" arch="aarch64">
  <version epoch="0" ver="2.35.3" rel="150300.10.36.1"/>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1708430400">- Do not replace apparmor configuration, fixes bsc#1216545</changelog>
</package>
<package pkgid="3c3b3a72520b2be33569c80c8cffc107d9ece86d536bfb4edc7f1e77c805f1ab" name="perl-Git" arch="s390x">
  <version epoch="0" ver="2.35.3" rel="150300.10.36.1"/>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1708430400">- Do not replace apparmor configuration, fixes bsc#1216545</changelog>
</package>
<package pkgid="c78f3b626e669bbd8debd71dd27ef70ea1c41f0ecd06b008d878f375d770e204" name="perl-Git" arch="x86_64">
  <version epoch="0" ver="2.35.3" rel="150300.10.36.1"/>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1708430400">- Do not replace apparmor configuration, fixes bsc#1216545</changelog>
</package>
<package pkgid="eb2c73d519b98d24fc29921fdfc7094701a2a153daed139f7a094da14ebaf157" name="perl-Git" arch="aarch64">
  <version epoch="0" ver="2.35.3" rel="150300.10.39.1"/>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1708430400">- Do not replace apparmor configuration, fixes bsc#1216545</changelog>
  <changelog author="danilo.spinella@suse.com" date="1715860800">- Fix CVE-2024-32002, recursive clones on case-insensitive filesystems
  that support symbolic links are susceptible to case confusion,
  bsc#1224168
  * CVE-2024-32002.patch
- Fix CVE-2024-32004, arbitrary code execution during local clones,
  bsc#1224170
  * CVE-2024-32004.patch
- Fix CVE-2024-32020, file overwriting vulnerability during local clones,
  bsc#1224171
  * CVE-2024-32020-1.patch
  * CVE-2024-32020-2.patch
  * CVE-2024-32020-3.patch
  * CVE-2024-32020-4.patch
- Fix CVE-2024-32021, git may create hardlinks to arbitrary user-readable files,
  bsc#1224172
- Fix CVE-2024-32465, arbitrary code execution during clone operations,
  bsc#1224173
  * CVE-2024-32465.patch</changelog>
</package>
<package pkgid="67a04e0c2bd54830d473b519a5ffec9f033b33655dc96027eb85cd7a899f9fe4" name="perl-Git" arch="s390x">
  <version epoch="0" ver="2.35.3" rel="150300.10.39.1"/>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1708430400">- Do not replace apparmor configuration, fixes bsc#1216545</changelog>
  <changelog author="danilo.spinella@suse.com" date="1715860800">- Fix CVE-2024-32002, recursive clones on case-insensitive filesystems
  that support symbolic links are susceptible to case confusion,
  bsc#1224168
  * CVE-2024-32002.patch
- Fix CVE-2024-32004, arbitrary code execution during local clones,
  bsc#1224170
  * CVE-2024-32004.patch
- Fix CVE-2024-32020, file overwriting vulnerability during local clones,
  bsc#1224171
  * CVE-2024-32020-1.patch
  * CVE-2024-32020-2.patch
  * CVE-2024-32020-3.patch
  * CVE-2024-32020-4.patch
- Fix CVE-2024-32021, git may create hardlinks to arbitrary user-readable files,
  bsc#1224172
- Fix CVE-2024-32465, arbitrary code execution during clone operations,
  bsc#1224173
  * CVE-2024-32465.patch</changelog>
</package>
<package pkgid="8f794b51d7794457b6bd8e71ef346e382e6409fee6480a7c116bc8186f9059ad" name="perl-Git" arch="x86_64">
  <version epoch="0" ver="2.35.3" rel="150300.10.39.1"/>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1708430400">- Do not replace apparmor configuration, fixes bsc#1216545</changelog>
  <changelog author="danilo.spinella@suse.com" date="1715860800">- Fix CVE-2024-32002, recursive clones on case-insensitive filesystems
  that support symbolic links are susceptible to case confusion,
  bsc#1224168
  * CVE-2024-32002.patch
- Fix CVE-2024-32004, arbitrary code execution during local clones,
  bsc#1224170
  * CVE-2024-32004.patch
- Fix CVE-2024-32020, file overwriting vulnerability during local clones,
  bsc#1224171
  * CVE-2024-32020-1.patch
  * CVE-2024-32020-2.patch
  * CVE-2024-32020-3.patch
  * CVE-2024-32020-4.patch
- Fix CVE-2024-32021, git may create hardlinks to arbitrary user-readable files,
  bsc#1224172
- Fix CVE-2024-32465, arbitrary code execution during clone operations,
  bsc#1224173
  * CVE-2024-32465.patch</changelog>
</package>
<package pkgid="faf7d0cffb7ebec70d325ef17f40150fee8dadfe097a79222b447631bed831f3" name="perl-Git" arch="aarch64">
  <version epoch="0" ver="2.35.3" rel="150300.10.42.1"/>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1708430400">- Do not replace apparmor configuration, fixes bsc#1216545</changelog>
  <changelog author="danilo.spinella@suse.com" date="1715860800">- Fix CVE-2024-32002, recursive clones on case-insensitive filesystems
  that support symbolic links are susceptible to case confusion,
  bsc#1224168
  * CVE-2024-32002.patch
- Fix CVE-2024-32004, arbitrary code execution during local clones,
  bsc#1224170
  * CVE-2024-32004.patch
- Fix CVE-2024-32020, file overwriting vulnerability during local clones,
  bsc#1224171
  * CVE-2024-32020-1.patch
  * CVE-2024-32020-2.patch
  * CVE-2024-32020-3.patch
  * CVE-2024-32020-4.patch
- Fix CVE-2024-32021, git may create hardlinks to arbitrary user-readable files,
  bsc#1224172
- Fix CVE-2024-32465, arbitrary code execution during clone operations,
  bsc#1224173
  * CVE-2024-32465.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1721304000">- Add CVE-2024-24577.patch
  * CVE-2024-24577: arbitrary code execution due to heap corruption
    in git_index_add (bsc#1219660)</changelog>
</package>
<package pkgid="733b9e57a58a5bc5cd6694149aba19b2d3a1cbaa5a511d8703da18f2056cd565" name="perl-Git" arch="s390x">
  <version epoch="0" ver="2.35.3" rel="150300.10.42.1"/>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1708430400">- Do not replace apparmor configuration, fixes bsc#1216545</changelog>
  <changelog author="danilo.spinella@suse.com" date="1715860800">- Fix CVE-2024-32002, recursive clones on case-insensitive filesystems
  that support symbolic links are susceptible to case confusion,
  bsc#1224168
  * CVE-2024-32002.patch
- Fix CVE-2024-32004, arbitrary code execution during local clones,
  bsc#1224170
  * CVE-2024-32004.patch
- Fix CVE-2024-32020, file overwriting vulnerability during local clones,
  bsc#1224171
  * CVE-2024-32020-1.patch
  * CVE-2024-32020-2.patch
  * CVE-2024-32020-3.patch
  * CVE-2024-32020-4.patch
- Fix CVE-2024-32021, git may create hardlinks to arbitrary user-readable files,
  bsc#1224172
- Fix CVE-2024-32465, arbitrary code execution during clone operations,
  bsc#1224173
  * CVE-2024-32465.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1721304000">- Add CVE-2024-24577.patch
  * CVE-2024-24577: arbitrary code execution due to heap corruption
    in git_index_add (bsc#1219660)</changelog>
</package>
<package pkgid="1e65d496f553d04d679eab3b62ab08636b74b97cc27fbf0162c43ba6bd81a9ce" name="perl-Git" arch="x86_64">
  <version epoch="0" ver="2.35.3" rel="150300.10.42.1"/>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1708430400">- Do not replace apparmor configuration, fixes bsc#1216545</changelog>
  <changelog author="danilo.spinella@suse.com" date="1715860800">- Fix CVE-2024-32002, recursive clones on case-insensitive filesystems
  that support symbolic links are susceptible to case confusion,
  bsc#1224168
  * CVE-2024-32002.patch
- Fix CVE-2024-32004, arbitrary code execution during local clones,
  bsc#1224170
  * CVE-2024-32004.patch
- Fix CVE-2024-32020, file overwriting vulnerability during local clones,
  bsc#1224171
  * CVE-2024-32020-1.patch
  * CVE-2024-32020-2.patch
  * CVE-2024-32020-3.patch
  * CVE-2024-32020-4.patch
- Fix CVE-2024-32021, git may create hardlinks to arbitrary user-readable files,
  bsc#1224172
- Fix CVE-2024-32465, arbitrary code execution during clone operations,
  bsc#1224173
  * CVE-2024-32465.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1721304000">- Add CVE-2024-24577.patch
  * CVE-2024-24577: arbitrary code execution due to heap corruption
    in git_index_add (bsc#1219660)</changelog>
</package>
<package pkgid="4b29a8bdedec1fd073536f3e0eaba912c3033ee9b3d6179f8771b7b38c817b09" name="perl-Git" arch="aarch64">
  <version epoch="0" ver="2.35.3" rel="150300.10.45.2"/>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1708430400">- Do not replace apparmor configuration, fixes bsc#1216545</changelog>
  <changelog author="danilo.spinella@suse.com" date="1715860800">- Fix CVE-2024-32002, recursive clones on case-insensitive filesystems
  that support symbolic links are susceptible to case confusion,
  bsc#1224168
  * CVE-2024-32002.patch
- Fix CVE-2024-32004, arbitrary code execution during local clones,
  bsc#1224170
  * CVE-2024-32004.patch
- Fix CVE-2024-32020, file overwriting vulnerability during local clones,
  bsc#1224171
  * CVE-2024-32020-1.patch
  * CVE-2024-32020-2.patch
  * CVE-2024-32020-3.patch
  * CVE-2024-32020-4.patch
- Fix CVE-2024-32021, git may create hardlinks to arbitrary user-readable files,
  bsc#1224172
- Fix CVE-2024-32465, arbitrary code execution during clone operations,
  bsc#1224173
  * CVE-2024-32465.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1721304000">- Add CVE-2024-24577.patch
  * CVE-2024-24577: arbitrary code execution due to heap corruption
    in git_index_add (bsc#1219660)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1723636800">- usr.share.git-web.gitweb.cgi: Fix syntax error with old apparmor
  versions (bsc#1229029)</changelog>
</package>
<package pkgid="05aaf22a8247495e7a98a52f0484d0ce4b37f97a0f7949a57fc032da77601cf6" name="perl-Git" arch="s390x">
  <version epoch="0" ver="2.35.3" rel="150300.10.45.2"/>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1708430400">- Do not replace apparmor configuration, fixes bsc#1216545</changelog>
  <changelog author="danilo.spinella@suse.com" date="1715860800">- Fix CVE-2024-32002, recursive clones on case-insensitive filesystems
  that support symbolic links are susceptible to case confusion,
  bsc#1224168
  * CVE-2024-32002.patch
- Fix CVE-2024-32004, arbitrary code execution during local clones,
  bsc#1224170
  * CVE-2024-32004.patch
- Fix CVE-2024-32020, file overwriting vulnerability during local clones,
  bsc#1224171
  * CVE-2024-32020-1.patch
  * CVE-2024-32020-2.patch
  * CVE-2024-32020-3.patch
  * CVE-2024-32020-4.patch
- Fix CVE-2024-32021, git may create hardlinks to arbitrary user-readable files,
  bsc#1224172
- Fix CVE-2024-32465, arbitrary code execution during clone operations,
  bsc#1224173
  * CVE-2024-32465.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1721304000">- Add CVE-2024-24577.patch
  * CVE-2024-24577: arbitrary code execution due to heap corruption
    in git_index_add (bsc#1219660)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1723636800">- usr.share.git-web.gitweb.cgi: Fix syntax error with old apparmor
  versions (bsc#1229029)</changelog>
</package>
<package pkgid="123c3871d407a12b3b9626b2c28558187b21991c836a3ae4f5f38d00bcb9635f" name="perl-Git" arch="x86_64">
  <version epoch="0" ver="2.35.3" rel="150300.10.45.2"/>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1708430400">- Do not replace apparmor configuration, fixes bsc#1216545</changelog>
  <changelog author="danilo.spinella@suse.com" date="1715860800">- Fix CVE-2024-32002, recursive clones on case-insensitive filesystems
  that support symbolic links are susceptible to case confusion,
  bsc#1224168
  * CVE-2024-32002.patch
- Fix CVE-2024-32004, arbitrary code execution during local clones,
  bsc#1224170
  * CVE-2024-32004.patch
- Fix CVE-2024-32020, file overwriting vulnerability during local clones,
  bsc#1224171
  * CVE-2024-32020-1.patch
  * CVE-2024-32020-2.patch
  * CVE-2024-32020-3.patch
  * CVE-2024-32020-4.patch
- Fix CVE-2024-32021, git may create hardlinks to arbitrary user-readable files,
  bsc#1224172
- Fix CVE-2024-32465, arbitrary code execution during clone operations,
  bsc#1224173
  * CVE-2024-32465.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1721304000">- Add CVE-2024-24577.patch
  * CVE-2024-24577: arbitrary code execution due to heap corruption
    in git_index_add (bsc#1219660)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1723636800">- usr.share.git-web.gitweb.cgi: Fix syntax error with old apparmor
  versions (bsc#1229029)</changelog>
</package>
<package pkgid="30537f28b0d35c2feceb35f97fddd2ad1861419e8237c6d764c6c1b447056bb7" name="perl-base" arch="aarch64">
  <version epoch="0" ver="5.26.1" rel="150300.17.17.1"/>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
  <changelog author="mls@suse.de" date="1662120000">- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff</changelog>
  <changelog author="mls@suse.de" date="1688558400">- enable TLS cert verification in CPAN [bnc#1210999] [CVE-2023-31484]
  new patch: perl-cpan_verify_cert.diff</changelog>
  <changelog author="mls@suse.de" date="1715169600">- fix space calculation issues in pp_pack.c [bnc#1082216]
  [CVE-2018-6913]
  * new patch: perl-pack-overflow.diff
- fix heap buffer overflow in regexec.c [bnc#1082233]
  [CVE-2018-6798]
  new patch: perl-regexec-heap-overflow.diff
- make Net::FTP work with TLS 1.3 [bnc#1213638]
  new patch: perl-net-ftp-tls13.diff</changelog>
</package>
<package pkgid="77da2d70adda2c69f65ec969b34a498caa964790527f429ec4d102f75e5a8c56" name="perl-base" arch="s390x">
  <version epoch="0" ver="5.26.1" rel="150300.17.17.1"/>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
  <changelog author="mls@suse.de" date="1662120000">- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff</changelog>
  <changelog author="mls@suse.de" date="1688558400">- enable TLS cert verification in CPAN [bnc#1210999] [CVE-2023-31484]
  new patch: perl-cpan_verify_cert.diff</changelog>
  <changelog author="mls@suse.de" date="1715169600">- fix space calculation issues in pp_pack.c [bnc#1082216]
  [CVE-2018-6913]
  * new patch: perl-pack-overflow.diff
- fix heap buffer overflow in regexec.c [bnc#1082233]
  [CVE-2018-6798]
  new patch: perl-regexec-heap-overflow.diff
- make Net::FTP work with TLS 1.3 [bnc#1213638]
  new patch: perl-net-ftp-tls13.diff</changelog>
</package>
<package pkgid="1e9a86b3f6250c54162ef7f3f910650f498e8a73591150c9e70a904a98ae4b92" name="perl-base" arch="x86_64">
  <version epoch="0" ver="5.26.1" rel="150300.17.17.1"/>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
  <changelog author="mls@suse.de" date="1662120000">- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff</changelog>
  <changelog author="mls@suse.de" date="1688558400">- enable TLS cert verification in CPAN [bnc#1210999] [CVE-2023-31484]
  new patch: perl-cpan_verify_cert.diff</changelog>
  <changelog author="mls@suse.de" date="1715169600">- fix space calculation issues in pp_pack.c [bnc#1082216]
  [CVE-2018-6913]
  * new patch: perl-pack-overflow.diff
- fix heap buffer overflow in regexec.c [bnc#1082233]
  [CVE-2018-6798]
  new patch: perl-regexec-heap-overflow.diff
- make Net::FTP work with TLS 1.3 [bnc#1213638]
  new patch: perl-net-ftp-tls13.diff</changelog>
</package>
<package pkgid="f484ddc311159356adafe5a40fad5344dd55d67ea80dded5f2dfe83e0f8689c4" name="podman" arch="aarch64">
  <version epoch="0" ver="4.7.2" rel="150500.3.3.1"/>
  <changelog author="danish.prakash@suse.com" date="1677240000">- Update to version 4.4.2:
  * Bump to v4.4.2
  * Release notes for v4.4.2
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * kube play: only enforce passthrough in Quadlet
  * Emergency fix for man pages: check for broken includes
  * CI: Temporarily disable all AWS EC2-based tasks
  * quadlet system tests: add useful defaults, logging
  * volume,container: chroot to source before exporting content
  * install sigproxy before start/attach
  * Update to c/image 5.24.1
  * events + container inspect test: RHEL fixes
  * Bump to v4.4.2-dev
- Remove patches (merged upstream):
  * volume-container-chroot-to-source-before-exporting-content.patch
- podman.spec: add `crun` requirement for quadlet
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add patch to let quadlet use the default runtime
  Added patch:
  * Quadlet-use-the-default-runtime.patch
  =&gt; Remove dependency on crun</changelog>
  <changelog author="danish.prakash@suse.com" date="1679659200">- Update to version 4.4.3:
  * Bump to v4.4.3
  * Release notes for v4.4.3
  * compat: /auth: parse server address correctly
  * vendor github.com/containers/common@v0.51.1
  * pkginstaller: bump Qemu to version 7.2.0
  * podman machine: Adjust Chrony makestep config
  * [v4.4] fix --health-on-failure=restart in transient unit
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * journald: remove initializeJournal()
  * netavark: only use aardvark ip as nameserver
  * compat API: network create return 409 for duplicate
  * fix "podman logs --since --follow" flake
  * system service --log-level=trace: support hijack
  * podman-mac-helper: exit 1 on error
  * bump golang.org/x/net to v0.8.0
  * Fix package restore
  * Quadlet - use the default runtime
  * Bump to v4.4.3-dev
- Remove patch (merged upstream):
  * Quadlet-use-the-default-runtime.patch
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="danish.prakash@suse.com" date="1680004800">- Update to version 4.4.4:
  * Bump to v4.4.4
  * Release notes for v4.4.4
  * libpod: always use direct mapping
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * Bump to v4.4.4-dev
- spec: Bump required version for libcontainers-common (bsc#1209495)</changelog>
  <changelog author="dcermak@suse.com" date="1681473600">- Don't build against EoL go versions, fixes bsc#1210299</changelog>
  <changelog author="danish.prakash@suse.com" date="1681819200">- Update to version 4.5.0:
  * Release v4.5.0
  * [CI:DOCS] Final release notes for v4.5.0
  * Quadlet - do not set log-driver by default
  * Return title fields as a list
  * Bump to v4.5.0-dev
  * Bump to v4.5.0-RC2
  * Final release notes for v4.5.0-RC2
  * test/e2e: remove unnecessary SkipIfNetavark() calls
  * test/e2e: deduplicated network test
  * docs: update podman-network-create.1
  * network create: add --interface-name
  * test/system/252-quadlet.bats: fix flake
  * Read kube_generate_type from containers.conf
  * Debian setup: workaround for runc /dev/char/10:200 bug
  * pkg/rootless: use catatonit from /usr/libexec/podman
  * rootless: make sure we only use a single pause process
  * Use atomic config writing strategy for podman machine config files
  * Add remaining release notes for v4.5.0-RC2
  * GHA: Use version instead of SHA for actions
  * chore(deps): update dependency containers/automation_images to v20230405
  * build: pass env by reference
  * test: retrofit error message
  * test/system: expect 12 char for short id
  * vendor: bump containers/(storage, common, buildah, image)
  * [skip-ci] Update actions/upload-artifact action to v3
  * [skip-ci] Update actions/stale action to v8
  * [skip-ci] Update actions/setup-go action to v4
  * [skip-ci] Update github/issue-labeler action to v2.6
  * Fix up codespell errors
  * Capitalize all uid,gid and id words that are not options in docs
  * build(deps): bump golang.org/x/tools from 0.7.0 to 0.8.0 in /test/tools
  * Properly remove the service container during kube down
  * quadlet: add `UserNS` option key
  * [CI:DOCS] Release notes for 4.5.0 Part 1
  * "podman pull by digest and list --all" test: untag instead of rmi
  * build(deps): bump golang.org/x/text from 0.8.0 to 0.9.0
  * Add renovate.json configuration
  * CI: postbuild step: skip under nightly treadmill
  * The `--ulimit` option accepts the name with an `RLIMIT_` prefix both upper and lower case
  * test/e2e: use custom network config dir where needed
  * chore: replace `github.com/ghodss/yaml` with `sigs.k8s.io/yaml`
  * update completion scripts for cobra v1.7.0
  * libpod.storageService.CreateContainerStorage(): retrieve ID maps
  * Fix invalid pod name and hostname during kube generate
  * e2e tests: fix racy flakes
  * Cirrus: Enable labeling of EC2 VMs
  * Cirrus: Fix aarch64 clone_script 404 errors
  * e2e: GinkgoParallelNode() -&gt; ...Process()
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
  * build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0
  * [CI:DOCS] --creds and registries
  * Copr: fix build deps for /usr/bin/envsubst
  * Don't error when removing non-existant env vars
  * e2e: healthcheck on stopped container: fix flake
  * test/apiv2/80-kube.at
  * test/apiv2/80-kube.at
  * system service: do not close Body
  * rm `hack/release.sh`
  * build(deps): bump github.com/onsi/gomega from 1.27.5 to 1.27.6
  * add `quadlet -version` flag
  * add version/rawversion package
  * quadlet: use `Flag` suffix for variables
  * quadlet: implement `Tmpfs` option
  * Bump to v4.5.0-dev
  * Bump to 4.5.0-rc1
  * Update release notes from 4.4 branch
  * rootless netns: recover from invalid netns
  * System tests: unverbosify a flake log
  * Add support for secret exists
  * Fix Win install task failures with large PR bodies
  * docs: add `starting` to `HealthCheckResults.Status`
  * Add support for cgroup_config from containers.conf
  * libpod: mount safely subpaths
  * Support Deployment generation with kube generate
  * Use secret.items to create volume mounts if present
  * [CI:DOCS] fix typo in --systemd option
  * rootless: drop preexec hook error message
  * Edit the docker wrapper to use the install prefix
  * Update podman-for-windows.md
  * Quadlet: RemapUsers documentation fixes
  * speed up image listing
  * vendor containers/common@e27c30ee9b1b
  * fix volume-plugin-test flake
  * Document building Podman remote on Windows hosts
  * test/e2e: gpg keep stdout/err attached
  * auto-update: stop+start instead of restart sytemd units
  * [CI:DOCS] Improve basic tutorial
  * Update docs/source/markdown/podman-network.1.md
  * Add debug to --wait test
  * fix slirp4netns resolv.conf ip with a userns
  * Quadlet: add support for keep-id with mapping values
  * Quadlet E2E test - run quadlet as user generator
  * sqlite: do not `Ping()` after connecting
  * Quadlet - treat paths starting with systemd specifiers as absolute
  * Update docs/source/markdown/podman-kube-play.1.md.in
  * system tests: use CONTAINERS_CONF_OVERRIDE
  * implement podman machine set for hyperv
  * [CI:DOCS] Add network subnets info to network man page
  * CI: retry the golangci install
  * system tests: fix racey sdnotify test
  * hyperv: lookup machine on local filesystem first
  * fix os.IsNotExist() CI check
  * Ensure that SQLite state handles name-ID collisions
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * build(deps): bump github.com/onsi/gomega from 1.27.4 to 1.27.5
  * Fix a race around SQLite DB config validation
  * add CONTAINERS_CONF_OVERRIDE
  * vendor containers/common@main
  * docs: minor grammar fix in `--volume` description
  * sqlite: do not use shared cache
  * test: podman checkpoint/restore the latest container
  * stats compat API: return "id" lowercase
  * Run make codespell
  * Drop SQLite max connections
  * sqlite: set connection attributes on open
  * Fix database locked errors with SQLite
  * quadlet tests: skip on RHEL8 rootless
  * Kube Play Doc: Document the support for K8S Secret
  * New ulimit test: bump up minimum nfiles
  * logformatter: hide --db-backend, and friendlyize quadlet
  * Quadlet - add support for relative path in Volume key in .container file
  * Add service ctr cleanup to PlayKubeDown
  * fix --health-on-failure=restart in transient unit
  * Quadlet Doc: Suggest the kill operation for HealthOnFailure
  * Quadlet - Add support for health checks configuration in .container files
  * Makefile: allow specifying /lib dir location
  * Fix option --opts -&gt; --opt
  * basic hypverv machine implementation
  * Fix SQLite DB schema migration code
  * Add support for oom_score_adj value from containers.conf
  * Use default_ulimits field in containers.conf
  * CI: test and confirm DESIRED_DATABASE
  * build(deps): bump github.com/openshift/imagebuilder
  * logformatter: futureproof output filename
  * Vendor in latest containers/(storage, common, image)
  * build(deps): bump google.golang.org/protobuf from 1.29.0 to 1.30.0
  * test/system/255-auto-update.bats: add debug logs
  * Revert "Revert "pasta: Use two connections instead of three in TCP range forward tests""
  * Add information for secret inspect
  * Add format to podman volume ls
  * Add format to podman volume inspect
  * Add format to podman secret ls
  * Add format to podman system df
  * Add format to podman machine info
  * Add format table to podman image inspect man page
  * Cirrus: Store podman machine benchmark data
  * Update Cirrus display names, and fix get-ci-vm script
  * Ensure SQLite places uses the runroot in transient mode
  * Fix various integration test issues with SQLite state
  * Remove test for pod/container name global uniqueness
  * Improve handling of existing container names in SQLite
  * Add SQLite job to CI
  * buildah treadmill: also run rootless tests
  * build(deps): bump github.com/vbatts/git-validation in /test/tools
  * auto update: return restart error
  * fix: Document removing anonymous volumes
  * events: no duplicates when streaming during a log rotation
  * Add search --cert-dir, --creds
  * podman-mac-helper: exit 1 on error
  * system service --log-level=trace: support hijack
  * test/system: fix wait_for_port() to wait for bind
  * cgroupns: private cgroupns on cgroupv1 breaks --systemd
  * libpod: remove error stutter
  * podman events: unhide --stream
  * test/system/255-auto-update.bats: multiple services
  * 255-auto-update.bats: turn off rollback where needed
  * Use append() to add elements to a slice
  * Revert "pasta: Use two connections instead of three in TCP range forward tests"
  * Support running nested SELinux container separation
  * bud tests: rootless remote: use correct socket path
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.2.1 to 8.3.0
  * compat: /auth: parse server address correctly
  * docs: fix cmd `set DOCKER_HOST` suggestion
  * test: reenable idmap test
  * Must use mountlabel when creating builtin volumes
  * podman.spec.rpkg: distro conditionals for modulesloaddir
  * build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.29.0
  * podman inspect list network when using --net=host or none
  * pasta: Re-enable "Local forwarder, IPv4" test, accept NXDOMAIN as response
  * build(deps): bump golang.org/x/tools from 0.6.0 to 0.7.0 in /test/tools
  * CI: Switch to c20230307t192532z-f37f36d12 images
  * Cirrus: Run system &amp; integration tests in parallel
  * Update checkpointctl v0.1.0
  * Quadlet: add support for setting --ip and --ip6
  * build(deps): bump golang.org/x/net from 0.7.0 to 0.8.0
  * build(deps): bump golang.org/x/sys from 0.5.0 to 0.6.0
  * libpod: avoid nil pointer dereference in (*Container).Cleanup
  * [CI:DOCS] Add image not found info to troubleshooting
  * cmd: do not require userns for "version"
  * cmd: drop special handling for "scp"
  * cmd: clarify meaning of ParentNSRequired
  * Fix package restore
  * [CI:DOCS] Fix docs/version-check always requesting updates
  * sqlite: add a hidden --db-backend flag
  * fix: update the default machine value when the previously set default machine is deleted
  * podman machine: Adjust Chrony makestep config
  * sqlite: add container short ID to network aliases
  * sqlite: remove dead code
  * sqlite: addContainer: add named volume only once
  * sqlite: implement RewriteVolumeConfig
  * sqlite: LookupVolume: fix partial name match
  * sqlite: LookupVolume: wrap error
  * sqlite: fix type rewriting container config
  * sqlite: return correct error on pod-name conflict
  * sqlite: RewritePodConfig: update error message
  * test/system/255-auto-update.bats: wait 10 for update to finish
  * auto-update test: wait for service to be ready
  * Vendor in latest containers/(common, storage, image)
  * play kube: Add --wait option
  * Cirrus: Fix git config permission denied
  * Quadlet: Add support for the Mount key in .container files
  * build(deps): bump github.com/onsi/gomega from 1.27.1 to 1.27.2
  * fix "podman logs --since --follow" flake
  * Clarify that replicas are ignored in kubernetes deployment
  * Revert "Skip all pasta tests"
  * CI: Switch to c20230223t153813z-f37f36d12 images
  * Fix user socket path
  * pkginstaller: bump Qemu to version 7.2.0
  * Cirrus: Fix bud tests failing to apply patches
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2
  * build(deps): bump github.com/coreos/stream-metadata-go
  * Vendor in latest containers/storage
  * buildah-bud tests: don't sudo when rootless is desired
  * Temporarily disable version-check
  * CI: new rootless buildah-bud tests (cron only)
  * sqlite: fix volume lookups with partial names
  * sqlite: fix container lookups with partial IDs
  * sqlite: fix LookupPod
  * sqlite: fix pod create/rm
  * sqlite: LookupContainer: update error message
  * sqlite: AddContainerExitCode: allow to replace
  * system: add warning when running rootless on cgroupv1
  * sqlite: fix AllContainers with state
  * sqlite: fix "UPDATE TABLE" typos
  * sqlite: SaveVolume: fix syntax error updating the volumes table
  * sqlite: exit code: allow -1
  * sqlite: fix typo when removing exec sessions
  * sqlite: AllContainers: fix inner join
  * sqlite: move migration after table creation
  * sqlite: implement pod methods
  * Quadlet - use the default runtime
  * docs: context is not optional for build
  * Fix an incorrect comment on NewSqliteState
  * Add support for containers.conf database setting
  * Add support for volume operations to SQLite state
  * Implement exec session handling in SQL database
  * Various fixes from code review
  * Remove `--namespace` flag from Podman root
  * Get E2E tests to pass
  * Implement network disconnect for SQLite state
  * Implement Network Connect/Modify for SQLite state
  * Fix various lint issues
  * Some further work on SQLite state
  * Remove concept of Namespaces from BoltDB
  * Add initial SQLite-backed state implementation
  * Cirrus: Support runc testing on debian VMs
  * Skip all pasta tests
  * Skip buildah-bud test
  * Skip buildx test with VFS podman storage driver
  * Skip 'podman kube --network' test for rootless CGv1
  * Skip tests which fail with CGv1 &amp; runc
  * Skip rootless CGv1 quadlet tests due to issue
  * Makefile: Define SHELL
  * Machine refactor for QEMU/AppleHV
  * machine refactoring preparations for hyperv
  * [CI:BUILD] spec.rpkg: trim dependency list
  * Logs follow-until tests: loosen checks
  * [CI:DOCS] Windows/Mac docs link update
  * Doc update for docker network options via CLI
  * compat API: network create return 409 for duplicate
  * Apply suggestions to man page
  * vendor c/common@852ca05a1fbb
  * Quadlet: Add support for LogDriver key in container and kube units
  * machine refactoring preparations for hyperv
  * libpod: always use direct mapping
  * netavark: only use aardvark ip as nameserver
  * build(deps): bump github.com/container-orchestrated-devices/container-device-interface
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * make docs: sanity check for broken man pages
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.6 to 8.2.0
  * build(deps): bump github.com/onsi/gomega from 1.27.0 to 1.27.1
  * kube: rm secret on down, print secret on play
  * Fix spacing typo that triggered OCD &amp; indent units in podman-systemd.unit(5)
  * Update remote_client.md
  * [CI:DOCS] Add restriction to option README
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * build(deps): bump github.com/onsi/gomega from 1.26.0 to 1.27.0
  * kube play: only enforce passthrough in Quadlet
  * journald: remove initializeJournal()
  * auto-update: support pods
  * Emergency fix for man pages: check for broken includes
  * System tests: assert(): friendlier failure messages
  * Cirrus: Fix version-check to only run on `main` job
  * CI: Temporarily disable all AWS EC2-based tasks
  * build(deps): bump github.com/containerd/containerd from 1.6.16 to 1.6.18
  * volume,container: chroot to source before exporting content
  * Support sysctl configs via podman kube play
  * [CI:BUILD] copr: podman.spec.rpkg cleanups
  * quadlet system tests: add useful defaults, logging
  * libpod: support relative positions for idmaps
  * Experimental workaround for cdn03.quay.io flake
  * system tests: prevent leading tabs
  * Introduce podman machine os apply
  * create: add support for --group-entry
  * fix != filter in volume prune
  * Allow specification of podman --remote build -f -
  * Quadlet use crun specified in containers.conf
  * build(deps): bump golang.org/x/net from 0.6.0 to 0.7.0
  * Vendor c/image after https://github.com/containers/image/pull/1847
  * Don't set hostPort when generating a service
  * man page --format xref: tighten the autocompletion check
  * add support for limiting tmpfs size for systemd-specific mnts
  * build(deps): bump golang.org/x/text from 0.6.0 to 0.7.0
  * Add ulimit annotation to kube gen &amp; play
  * man page xref: validate displayed man page names
  * quadlet: add ExecStop
  * install sigproxy before start/attach
  * build(deps): bump golang.org/x/tools from 0.5.0 to 0.6.0 in /test/tools
  * Fix typos
  * Cirrus: Make benchmarks .env file easier to load
  * Cirrus: Omit functions in env. file
  * kube play: set service container as main PID when possible
  * Fix typos. Improve language.
  * events + container inspect test: RHEL fixes
  * Add ctrName to network alias during kube play
  * Run codespell on codebase
  * podman image scp: added identity for ssh.Exec
  * [CI:DOCS] Clarify nomap constrains
  * [CI:DOCS] man-page checker: include --format (Go templates)
  * Vendor c/image after https://github.com/containers/image/pull/1816
  * [CI:DOCS] Cleanup some man pages to display options with line breaks
  * [CI:DOCS] Add tables to podman-systemd.unit man page
  * github: remove prefix from bugs/features
  * Quadlet: Add support for the Secret key in Container group
  * [CI:DOCS] OWNERS: add @ygalblum and @alexlarsson
  * build(deps): bump golang.org/x/term from 0.4.0 to 0.5.0
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.1.6
  * Sort quadlet keys to make it easier to read
  * e2e: fix some tests on remote
  * kube play: do not teardown unconditionally on error
  * Fix typos in comments
  * Resolve symlink path for qemu directory if possible
  * #17363 Fix contradicting documentation podman-commit
  * Fix a potential UID/GID collision in unit tests
  * golangci-lint: show all errors at once
  * update golangci-lint to version 1.51.1
  * [CI:DOCS] events: document journald identifiers
  * Quadlet: exit 0 when there are no files to process
  * network ls: handle removed container
  * e2e: adapt play kube test on remote rootless
  * docs/podman-systemd.unit: Explicitely mention network &amp; kube units
  * docs/podman-systemd.unit: Update example to work out of the box
  * [CI:BUILD] Cirrus: Fix GraphQL ownerRepository:null error
  * Add missing return after errors
  * Revert "Cirrus: Emergency fix to un-stuck PRs"
  * pasta: Fix ICMPv6 Echo test, skip it for the moment
  * pasta: Fix ICMP Echo Request (IPv4) test
  * pasta: Use two connections instead of three in TCP range forward tests
  * Add SELinux label types support to quadlet
  * Add quadlet support for rootfs= containers
  * Cirrus: Emergency fix to un-stuck PRs
  * Move clean-binaries before podman-remote in podman-remote-docs target
  * oci: bind mount /sys with --userns=(auto|pod:)
  * Cleanup podman-systemd.unit file
  * Install podman-systemd.unit  man page, make quadlet discoverable
  * libpod: allow userns=keep-id for root
  * system-reset: use CleanCacheMount to clear build cache
  * vendor: bump buildah to v1.29.1-0.20230201192322-e56eb25575c7
  * system tests: fix noexistent labels test in the remote
  * Expose Podman named pipe in Inspect output
  * libpod: support idmap for --rootfs
  * test: adapt test to work on cgroupv1
  * Bump to v4.5.0-dev
  * Update main to reflect v4.4.0 release
  * Update from /github.com/vbauerster/mpb/v7 to /v8
  * hack/perf: cleanup after benchmarks
  * hack/perf/bz-2162111.sh: use custom network
  * Update bug_report.yaml
  * Handle filetype field in kubernetes.yaml files
  * hack/perf/bz-2162111.sh: measure stop
  * make hack/markdown-preprocess parallel-safe
  * system tests: fix volume exec/noexec test
  * system tests: minor fix for RHEL8 incompatibility
  * Cirrus: Use versionable IMAGE_SUFFIX
  * utils: new conversion method
  * libpod: use GraphRoot for overlay upper dir
  * vendor: update containers/storage
  * Do not mount /dev/tty into rootless containers
  * build(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7
  * e2e: fix run_staticip_test about no_proxy
  * docs: specify order preference for FROM
  * Fixes port collision issue on use of --publish-all
  * Support for Windows paths in the source position of the volume mounts
  * e2e tests: fix incorrect os.User.Name
  * Log data that we failed to unmarshal
  * [CI:DOCS] hack/perf: add script for BZ 216111
  * container rm: save once for exec removal and state change
  * [DOCS:CI] podman-events: document verbose create events
  * e2e: Avoid hard-coding included in quadlet test
  * e2e: Avoid hard-coding ImageCacheDir
  * Making gvproxy.exe optional for building Windows installer
  * Add gvproxy to Windows packages
  * Add comment to clarify error handling intention
  * fix #17244: use /etc/timezone where `timedatectl` is missing on Linux
  * Fix usage of absolute windows paths with --image-path
  * Match VT device paths to be blocked from mounting exactly
  * Fix default handling of pids-limit
  * Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml)
  * journald: podman logs only show logs for current user
  * journald: podman events only show events for current user
  * e2e: Remove the cache with "podman unshare rm" when a rootless user
  * Clean up more language for inclusiveness
  * e2e: Remove some directories at SynchronizedAfterSuite
  * fix: don't output "ago" when container is currently up and running
  * fix: running check error when podman is default in wsl
  * fix CI: test fail due to merge
  * Bump Bulidah to v1.29.0
  * e2e: reduce dependency on /tmp for e2e tests
  * Bump cirrus image with easier dependency management
  * quadlet: Add device support for .volume files
  * remote,build: error if containerignore is symlink
  * DB: make loading container states optional
  * ps: do not sync container
  * Set runAsNonRoot=true in gen kube
  * WSL refactoring
  * kube-play: add support for HostIPC in pod.Spec
  * Allow --device-cgroup-rule to be passed in by docker API</changelog>
  <changelog author="danish.prakash@suse.com" date="1685361600">- Update to version 4.5.1:
  * Release v4.5.1
  * [CI:DOCS] Final release notes for v4.5.1
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * Revert "Resolve symlink path for qemu directory if possible"
  * no need for podman-next rpm test on maint branch
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * network create/update: allow dns servers comma separated
  * machine: fix default connection URL to use 127.0.0.1
  * compat: accept tag in /images/create?fromSrc
  * compat container create: match duplicate mounts correctly
  * machine: qemu only remove connection after confirmation
  * windows: podman save allow the use of stdout
  * remote: exec inspect update exec session status
  * podman-remote logs: handle server error correctly
  * libpod: stop containers with --restart=always
  * Do not include image annotations when building spec
  * [v4.5] system tests: fix race in kube-play read-only
  * api: fix parsing filters
  * Support systemd optional prefix '-' for devices.
  * *: migrate image registry to registry.k8s.io
  * Makefile: include `release-artifacts` target
  * [CI:BUILD] Packit: Initial Enablement
  * Bump to v4.5.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
</package>
<package pkgid="9a1a2852b9fe625fedeb39941a9a4d5c4bc5ba022b76bf5b1ba50680aed54d9f" name="podman" arch="ppc64le">
  <version epoch="0" ver="4.7.2" rel="150500.3.3.1"/>
  <changelog author="danish.prakash@suse.com" date="1677240000">- Update to version 4.4.2:
  * Bump to v4.4.2
  * Release notes for v4.4.2
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * kube play: only enforce passthrough in Quadlet
  * Emergency fix for man pages: check for broken includes
  * CI: Temporarily disable all AWS EC2-based tasks
  * quadlet system tests: add useful defaults, logging
  * volume,container: chroot to source before exporting content
  * install sigproxy before start/attach
  * Update to c/image 5.24.1
  * events + container inspect test: RHEL fixes
  * Bump to v4.4.2-dev
- Remove patches (merged upstream):
  * volume-container-chroot-to-source-before-exporting-content.patch
- podman.spec: add `crun` requirement for quadlet
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add patch to let quadlet use the default runtime
  Added patch:
  * Quadlet-use-the-default-runtime.patch
  =&gt; Remove dependency on crun</changelog>
  <changelog author="danish.prakash@suse.com" date="1679659200">- Update to version 4.4.3:
  * Bump to v4.4.3
  * Release notes for v4.4.3
  * compat: /auth: parse server address correctly
  * vendor github.com/containers/common@v0.51.1
  * pkginstaller: bump Qemu to version 7.2.0
  * podman machine: Adjust Chrony makestep config
  * [v4.4] fix --health-on-failure=restart in transient unit
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * journald: remove initializeJournal()
  * netavark: only use aardvark ip as nameserver
  * compat API: network create return 409 for duplicate
  * fix "podman logs --since --follow" flake
  * system service --log-level=trace: support hijack
  * podman-mac-helper: exit 1 on error
  * bump golang.org/x/net to v0.8.0
  * Fix package restore
  * Quadlet - use the default runtime
  * Bump to v4.4.3-dev
- Remove patch (merged upstream):
  * Quadlet-use-the-default-runtime.patch
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="danish.prakash@suse.com" date="1680004800">- Update to version 4.4.4:
  * Bump to v4.4.4
  * Release notes for v4.4.4
  * libpod: always use direct mapping
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * Bump to v4.4.4-dev
- spec: Bump required version for libcontainers-common (bsc#1209495)</changelog>
  <changelog author="dcermak@suse.com" date="1681473600">- Don't build against EoL go versions, fixes bsc#1210299</changelog>
  <changelog author="danish.prakash@suse.com" date="1681819200">- Update to version 4.5.0:
  * Release v4.5.0
  * [CI:DOCS] Final release notes for v4.5.0
  * Quadlet - do not set log-driver by default
  * Return title fields as a list
  * Bump to v4.5.0-dev
  * Bump to v4.5.0-RC2
  * Final release notes for v4.5.0-RC2
  * test/e2e: remove unnecessary SkipIfNetavark() calls
  * test/e2e: deduplicated network test
  * docs: update podman-network-create.1
  * network create: add --interface-name
  * test/system/252-quadlet.bats: fix flake
  * Read kube_generate_type from containers.conf
  * Debian setup: workaround for runc /dev/char/10:200 bug
  * pkg/rootless: use catatonit from /usr/libexec/podman
  * rootless: make sure we only use a single pause process
  * Use atomic config writing strategy for podman machine config files
  * Add remaining release notes for v4.5.0-RC2
  * GHA: Use version instead of SHA for actions
  * chore(deps): update dependency containers/automation_images to v20230405
  * build: pass env by reference
  * test: retrofit error message
  * test/system: expect 12 char for short id
  * vendor: bump containers/(storage, common, buildah, image)
  * [skip-ci] Update actions/upload-artifact action to v3
  * [skip-ci] Update actions/stale action to v8
  * [skip-ci] Update actions/setup-go action to v4
  * [skip-ci] Update github/issue-labeler action to v2.6
  * Fix up codespell errors
  * Capitalize all uid,gid and id words that are not options in docs
  * build(deps): bump golang.org/x/tools from 0.7.0 to 0.8.0 in /test/tools
  * Properly remove the service container during kube down
  * quadlet: add `UserNS` option key
  * [CI:DOCS] Release notes for 4.5.0 Part 1
  * "podman pull by digest and list --all" test: untag instead of rmi
  * build(deps): bump golang.org/x/text from 0.8.0 to 0.9.0
  * Add renovate.json configuration
  * CI: postbuild step: skip under nightly treadmill
  * The `--ulimit` option accepts the name with an `RLIMIT_` prefix both upper and lower case
  * test/e2e: use custom network config dir where needed
  * chore: replace `github.com/ghodss/yaml` with `sigs.k8s.io/yaml`
  * update completion scripts for cobra v1.7.0
  * libpod.storageService.CreateContainerStorage(): retrieve ID maps
  * Fix invalid pod name and hostname during kube generate
  * e2e tests: fix racy flakes
  * Cirrus: Enable labeling of EC2 VMs
  * Cirrus: Fix aarch64 clone_script 404 errors
  * e2e: GinkgoParallelNode() -&gt; ...Process()
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
  * build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0
  * [CI:DOCS] --creds and registries
  * Copr: fix build deps for /usr/bin/envsubst
  * Don't error when removing non-existant env vars
  * e2e: healthcheck on stopped container: fix flake
  * test/apiv2/80-kube.at
  * test/apiv2/80-kube.at
  * system service: do not close Body
  * rm `hack/release.sh`
  * build(deps): bump github.com/onsi/gomega from 1.27.5 to 1.27.6
  * add `quadlet -version` flag
  * add version/rawversion package
  * quadlet: use `Flag` suffix for variables
  * quadlet: implement `Tmpfs` option
  * Bump to v4.5.0-dev
  * Bump to 4.5.0-rc1
  * Update release notes from 4.4 branch
  * rootless netns: recover from invalid netns
  * System tests: unverbosify a flake log
  * Add support for secret exists
  * Fix Win install task failures with large PR bodies
  * docs: add `starting` to `HealthCheckResults.Status`
  * Add support for cgroup_config from containers.conf
  * libpod: mount safely subpaths
  * Support Deployment generation with kube generate
  * Use secret.items to create volume mounts if present
  * [CI:DOCS] fix typo in --systemd option
  * rootless: drop preexec hook error message
  * Edit the docker wrapper to use the install prefix
  * Update podman-for-windows.md
  * Quadlet: RemapUsers documentation fixes
  * speed up image listing
  * vendor containers/common@e27c30ee9b1b
  * fix volume-plugin-test flake
  * Document building Podman remote on Windows hosts
  * test/e2e: gpg keep stdout/err attached
  * auto-update: stop+start instead of restart sytemd units
  * [CI:DOCS] Improve basic tutorial
  * Update docs/source/markdown/podman-network.1.md
  * Add debug to --wait test
  * fix slirp4netns resolv.conf ip with a userns
  * Quadlet: add support for keep-id with mapping values
  * Quadlet E2E test - run quadlet as user generator
  * sqlite: do not `Ping()` after connecting
  * Quadlet - treat paths starting with systemd specifiers as absolute
  * Update docs/source/markdown/podman-kube-play.1.md.in
  * system tests: use CONTAINERS_CONF_OVERRIDE
  * implement podman machine set for hyperv
  * [CI:DOCS] Add network subnets info to network man page
  * CI: retry the golangci install
  * system tests: fix racey sdnotify test
  * hyperv: lookup machine on local filesystem first
  * fix os.IsNotExist() CI check
  * Ensure that SQLite state handles name-ID collisions
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * build(deps): bump github.com/onsi/gomega from 1.27.4 to 1.27.5
  * Fix a race around SQLite DB config validation
  * add CONTAINERS_CONF_OVERRIDE
  * vendor containers/common@main
  * docs: minor grammar fix in `--volume` description
  * sqlite: do not use shared cache
  * test: podman checkpoint/restore the latest container
  * stats compat API: return "id" lowercase
  * Run make codespell
  * Drop SQLite max connections
  * sqlite: set connection attributes on open
  * Fix database locked errors with SQLite
  * quadlet tests: skip on RHEL8 rootless
  * Kube Play Doc: Document the support for K8S Secret
  * New ulimit test: bump up minimum nfiles
  * logformatter: hide --db-backend, and friendlyize quadlet
  * Quadlet - add support for relative path in Volume key in .container file
  * Add service ctr cleanup to PlayKubeDown
  * fix --health-on-failure=restart in transient unit
  * Quadlet Doc: Suggest the kill operation for HealthOnFailure
  * Quadlet - Add support for health checks configuration in .container files
  * Makefile: allow specifying /lib dir location
  * Fix option --opts -&gt; --opt
  * basic hypverv machine implementation
  * Fix SQLite DB schema migration code
  * Add support for oom_score_adj value from containers.conf
  * Use default_ulimits field in containers.conf
  * CI: test and confirm DESIRED_DATABASE
  * build(deps): bump github.com/openshift/imagebuilder
  * logformatter: futureproof output filename
  * Vendor in latest containers/(storage, common, image)
  * build(deps): bump google.golang.org/protobuf from 1.29.0 to 1.30.0
  * test/system/255-auto-update.bats: add debug logs
  * Revert "Revert "pasta: Use two connections instead of three in TCP range forward tests""
  * Add information for secret inspect
  * Add format to podman volume ls
  * Add format to podman volume inspect
  * Add format to podman secret ls
  * Add format to podman system df
  * Add format to podman machine info
  * Add format table to podman image inspect man page
  * Cirrus: Store podman machine benchmark data
  * Update Cirrus display names, and fix get-ci-vm script
  * Ensure SQLite places uses the runroot in transient mode
  * Fix various integration test issues with SQLite state
  * Remove test for pod/container name global uniqueness
  * Improve handling of existing container names in SQLite
  * Add SQLite job to CI
  * buildah treadmill: also run rootless tests
  * build(deps): bump github.com/vbatts/git-validation in /test/tools
  * auto update: return restart error
  * fix: Document removing anonymous volumes
  * events: no duplicates when streaming during a log rotation
  * Add search --cert-dir, --creds
  * podman-mac-helper: exit 1 on error
  * system service --log-level=trace: support hijack
  * test/system: fix wait_for_port() to wait for bind
  * cgroupns: private cgroupns on cgroupv1 breaks --systemd
  * libpod: remove error stutter
  * podman events: unhide --stream
  * test/system/255-auto-update.bats: multiple services
  * 255-auto-update.bats: turn off rollback where needed
  * Use append() to add elements to a slice
  * Revert "pasta: Use two connections instead of three in TCP range forward tests"
  * Support running nested SELinux container separation
  * bud tests: rootless remote: use correct socket path
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.2.1 to 8.3.0
  * compat: /auth: parse server address correctly
  * docs: fix cmd `set DOCKER_HOST` suggestion
  * test: reenable idmap test
  * Must use mountlabel when creating builtin volumes
  * podman.spec.rpkg: distro conditionals for modulesloaddir
  * build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.29.0
  * podman inspect list network when using --net=host or none
  * pasta: Re-enable "Local forwarder, IPv4" test, accept NXDOMAIN as response
  * build(deps): bump golang.org/x/tools from 0.6.0 to 0.7.0 in /test/tools
  * CI: Switch to c20230307t192532z-f37f36d12 images
  * Cirrus: Run system &amp; integration tests in parallel
  * Update checkpointctl v0.1.0
  * Quadlet: add support for setting --ip and --ip6
  * build(deps): bump golang.org/x/net from 0.7.0 to 0.8.0
  * build(deps): bump golang.org/x/sys from 0.5.0 to 0.6.0
  * libpod: avoid nil pointer dereference in (*Container).Cleanup
  * [CI:DOCS] Add image not found info to troubleshooting
  * cmd: do not require userns for "version"
  * cmd: drop special handling for "scp"
  * cmd: clarify meaning of ParentNSRequired
  * Fix package restore
  * [CI:DOCS] Fix docs/version-check always requesting updates
  * sqlite: add a hidden --db-backend flag
  * fix: update the default machine value when the previously set default machine is deleted
  * podman machine: Adjust Chrony makestep config
  * sqlite: add container short ID to network aliases
  * sqlite: remove dead code
  * sqlite: addContainer: add named volume only once
  * sqlite: implement RewriteVolumeConfig
  * sqlite: LookupVolume: fix partial name match
  * sqlite: LookupVolume: wrap error
  * sqlite: fix type rewriting container config
  * sqlite: return correct error on pod-name conflict
  * sqlite: RewritePodConfig: update error message
  * test/system/255-auto-update.bats: wait 10 for update to finish
  * auto-update test: wait for service to be ready
  * Vendor in latest containers/(common, storage, image)
  * play kube: Add --wait option
  * Cirrus: Fix git config permission denied
  * Quadlet: Add support for the Mount key in .container files
  * build(deps): bump github.com/onsi/gomega from 1.27.1 to 1.27.2
  * fix "podman logs --since --follow" flake
  * Clarify that replicas are ignored in kubernetes deployment
  * Revert "Skip all pasta tests"
  * CI: Switch to c20230223t153813z-f37f36d12 images
  * Fix user socket path
  * pkginstaller: bump Qemu to version 7.2.0
  * Cirrus: Fix bud tests failing to apply patches
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2
  * build(deps): bump github.com/coreos/stream-metadata-go
  * Vendor in latest containers/storage
  * buildah-bud tests: don't sudo when rootless is desired
  * Temporarily disable version-check
  * CI: new rootless buildah-bud tests (cron only)
  * sqlite: fix volume lookups with partial names
  * sqlite: fix container lookups with partial IDs
  * sqlite: fix LookupPod
  * sqlite: fix pod create/rm
  * sqlite: LookupContainer: update error message
  * sqlite: AddContainerExitCode: allow to replace
  * system: add warning when running rootless on cgroupv1
  * sqlite: fix AllContainers with state
  * sqlite: fix "UPDATE TABLE" typos
  * sqlite: SaveVolume: fix syntax error updating the volumes table
  * sqlite: exit code: allow -1
  * sqlite: fix typo when removing exec sessions
  * sqlite: AllContainers: fix inner join
  * sqlite: move migration after table creation
  * sqlite: implement pod methods
  * Quadlet - use the default runtime
  * docs: context is not optional for build
  * Fix an incorrect comment on NewSqliteState
  * Add support for containers.conf database setting
  * Add support for volume operations to SQLite state
  * Implement exec session handling in SQL database
  * Various fixes from code review
  * Remove `--namespace` flag from Podman root
  * Get E2E tests to pass
  * Implement network disconnect for SQLite state
  * Implement Network Connect/Modify for SQLite state
  * Fix various lint issues
  * Some further work on SQLite state
  * Remove concept of Namespaces from BoltDB
  * Add initial SQLite-backed state implementation
  * Cirrus: Support runc testing on debian VMs
  * Skip all pasta tests
  * Skip buildah-bud test
  * Skip buildx test with VFS podman storage driver
  * Skip 'podman kube --network' test for rootless CGv1
  * Skip tests which fail with CGv1 &amp; runc
  * Skip rootless CGv1 quadlet tests due to issue
  * Makefile: Define SHELL
  * Machine refactor for QEMU/AppleHV
  * machine refactoring preparations for hyperv
  * [CI:BUILD] spec.rpkg: trim dependency list
  * Logs follow-until tests: loosen checks
  * [CI:DOCS] Windows/Mac docs link update
  * Doc update for docker network options via CLI
  * compat API: network create return 409 for duplicate
  * Apply suggestions to man page
  * vendor c/common@852ca05a1fbb
  * Quadlet: Add support for LogDriver key in container and kube units
  * machine refactoring preparations for hyperv
  * libpod: always use direct mapping
  * netavark: only use aardvark ip as nameserver
  * build(deps): bump github.com/container-orchestrated-devices/container-device-interface
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * make docs: sanity check for broken man pages
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.6 to 8.2.0
  * build(deps): bump github.com/onsi/gomega from 1.27.0 to 1.27.1
  * kube: rm secret on down, print secret on play
  * Fix spacing typo that triggered OCD &amp; indent units in podman-systemd.unit(5)
  * Update remote_client.md
  * [CI:DOCS] Add restriction to option README
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * build(deps): bump github.com/onsi/gomega from 1.26.0 to 1.27.0
  * kube play: only enforce passthrough in Quadlet
  * journald: remove initializeJournal()
  * auto-update: support pods
  * Emergency fix for man pages: check for broken includes
  * System tests: assert(): friendlier failure messages
  * Cirrus: Fix version-check to only run on `main` job
  * CI: Temporarily disable all AWS EC2-based tasks
  * build(deps): bump github.com/containerd/containerd from 1.6.16 to 1.6.18
  * volume,container: chroot to source before exporting content
  * Support sysctl configs via podman kube play
  * [CI:BUILD] copr: podman.spec.rpkg cleanups
  * quadlet system tests: add useful defaults, logging
  * libpod: support relative positions for idmaps
  * Experimental workaround for cdn03.quay.io flake
  * system tests: prevent leading tabs
  * Introduce podman machine os apply
  * create: add support for --group-entry
  * fix != filter in volume prune
  * Allow specification of podman --remote build -f -
  * Quadlet use crun specified in containers.conf
  * build(deps): bump golang.org/x/net from 0.6.0 to 0.7.0
  * Vendor c/image after https://github.com/containers/image/pull/1847
  * Don't set hostPort when generating a service
  * man page --format xref: tighten the autocompletion check
  * add support for limiting tmpfs size for systemd-specific mnts
  * build(deps): bump golang.org/x/text from 0.6.0 to 0.7.0
  * Add ulimit annotation to kube gen &amp; play
  * man page xref: validate displayed man page names
  * quadlet: add ExecStop
  * install sigproxy before start/attach
  * build(deps): bump golang.org/x/tools from 0.5.0 to 0.6.0 in /test/tools
  * Fix typos
  * Cirrus: Make benchmarks .env file easier to load
  * Cirrus: Omit functions in env. file
  * kube play: set service container as main PID when possible
  * Fix typos. Improve language.
  * events + container inspect test: RHEL fixes
  * Add ctrName to network alias during kube play
  * Run codespell on codebase
  * podman image scp: added identity for ssh.Exec
  * [CI:DOCS] Clarify nomap constrains
  * [CI:DOCS] man-page checker: include --format (Go templates)
  * Vendor c/image after https://github.com/containers/image/pull/1816
  * [CI:DOCS] Cleanup some man pages to display options with line breaks
  * [CI:DOCS] Add tables to podman-systemd.unit man page
  * github: remove prefix from bugs/features
  * Quadlet: Add support for the Secret key in Container group
  * [CI:DOCS] OWNERS: add @ygalblum and @alexlarsson
  * build(deps): bump golang.org/x/term from 0.4.0 to 0.5.0
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.1.6
  * Sort quadlet keys to make it easier to read
  * e2e: fix some tests on remote
  * kube play: do not teardown unconditionally on error
  * Fix typos in comments
  * Resolve symlink path for qemu directory if possible
  * #17363 Fix contradicting documentation podman-commit
  * Fix a potential UID/GID collision in unit tests
  * golangci-lint: show all errors at once
  * update golangci-lint to version 1.51.1
  * [CI:DOCS] events: document journald identifiers
  * Quadlet: exit 0 when there are no files to process
  * network ls: handle removed container
  * e2e: adapt play kube test on remote rootless
  * docs/podman-systemd.unit: Explicitely mention network &amp; kube units
  * docs/podman-systemd.unit: Update example to work out of the box
  * [CI:BUILD] Cirrus: Fix GraphQL ownerRepository:null error
  * Add missing return after errors
  * Revert "Cirrus: Emergency fix to un-stuck PRs"
  * pasta: Fix ICMPv6 Echo test, skip it for the moment
  * pasta: Fix ICMP Echo Request (IPv4) test
  * pasta: Use two connections instead of three in TCP range forward tests
  * Add SELinux label types support to quadlet
  * Add quadlet support for rootfs= containers
  * Cirrus: Emergency fix to un-stuck PRs
  * Move clean-binaries before podman-remote in podman-remote-docs target
  * oci: bind mount /sys with --userns=(auto|pod:)
  * Cleanup podman-systemd.unit file
  * Install podman-systemd.unit  man page, make quadlet discoverable
  * libpod: allow userns=keep-id for root
  * system-reset: use CleanCacheMount to clear build cache
  * vendor: bump buildah to v1.29.1-0.20230201192322-e56eb25575c7
  * system tests: fix noexistent labels test in the remote
  * Expose Podman named pipe in Inspect output
  * libpod: support idmap for --rootfs
  * test: adapt test to work on cgroupv1
  * Bump to v4.5.0-dev
  * Update main to reflect v4.4.0 release
  * Update from /github.com/vbauerster/mpb/v7 to /v8
  * hack/perf: cleanup after benchmarks
  * hack/perf/bz-2162111.sh: use custom network
  * Update bug_report.yaml
  * Handle filetype field in kubernetes.yaml files
  * hack/perf/bz-2162111.sh: measure stop
  * make hack/markdown-preprocess parallel-safe
  * system tests: fix volume exec/noexec test
  * system tests: minor fix for RHEL8 incompatibility
  * Cirrus: Use versionable IMAGE_SUFFIX
  * utils: new conversion method
  * libpod: use GraphRoot for overlay upper dir
  * vendor: update containers/storage
  * Do not mount /dev/tty into rootless containers
  * build(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7
  * e2e: fix run_staticip_test about no_proxy
  * docs: specify order preference for FROM
  * Fixes port collision issue on use of --publish-all
  * Support for Windows paths in the source position of the volume mounts
  * e2e tests: fix incorrect os.User.Name
  * Log data that we failed to unmarshal
  * [CI:DOCS] hack/perf: add script for BZ 216111
  * container rm: save once for exec removal and state change
  * [DOCS:CI] podman-events: document verbose create events
  * e2e: Avoid hard-coding included in quadlet test
  * e2e: Avoid hard-coding ImageCacheDir
  * Making gvproxy.exe optional for building Windows installer
  * Add gvproxy to Windows packages
  * Add comment to clarify error handling intention
  * fix #17244: use /etc/timezone where `timedatectl` is missing on Linux
  * Fix usage of absolute windows paths with --image-path
  * Match VT device paths to be blocked from mounting exactly
  * Fix default handling of pids-limit
  * Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml)
  * journald: podman logs only show logs for current user
  * journald: podman events only show events for current user
  * e2e: Remove the cache with "podman unshare rm" when a rootless user
  * Clean up more language for inclusiveness
  * e2e: Remove some directories at SynchronizedAfterSuite
  * fix: don't output "ago" when container is currently up and running
  * fix: running check error when podman is default in wsl
  * fix CI: test fail due to merge
  * Bump Bulidah to v1.29.0
  * e2e: reduce dependency on /tmp for e2e tests
  * Bump cirrus image with easier dependency management
  * quadlet: Add device support for .volume files
  * remote,build: error if containerignore is symlink
  * DB: make loading container states optional
  * ps: do not sync container
  * Set runAsNonRoot=true in gen kube
  * WSL refactoring
  * kube-play: add support for HostIPC in pod.Spec
  * Allow --device-cgroup-rule to be passed in by docker API</changelog>
  <changelog author="danish.prakash@suse.com" date="1685361600">- Update to version 4.5.1:
  * Release v4.5.1
  * [CI:DOCS] Final release notes for v4.5.1
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * Revert "Resolve symlink path for qemu directory if possible"
  * no need for podman-next rpm test on maint branch
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * network create/update: allow dns servers comma separated
  * machine: fix default connection URL to use 127.0.0.1
  * compat: accept tag in /images/create?fromSrc
  * compat container create: match duplicate mounts correctly
  * machine: qemu only remove connection after confirmation
  * windows: podman save allow the use of stdout
  * remote: exec inspect update exec session status
  * podman-remote logs: handle server error correctly
  * libpod: stop containers with --restart=always
  * Do not include image annotations when building spec
  * [v4.5] system tests: fix race in kube-play read-only
  * api: fix parsing filters
  * Support systemd optional prefix '-' for devices.
  * *: migrate image registry to registry.k8s.io
  * Makefile: include `release-artifacts` target
  * [CI:BUILD] Packit: Initial Enablement
  * Bump to v4.5.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
</package>
<package pkgid="e957183df8526e4020684e8728bc61065ec7c1b2d66a2ca91825aaa901fa190e" name="podman" arch="s390x">
  <version epoch="0" ver="4.7.2" rel="150500.3.3.1"/>
  <changelog author="danish.prakash@suse.com" date="1677240000">- Update to version 4.4.2:
  * Bump to v4.4.2
  * Release notes for v4.4.2
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * kube play: only enforce passthrough in Quadlet
  * Emergency fix for man pages: check for broken includes
  * CI: Temporarily disable all AWS EC2-based tasks
  * quadlet system tests: add useful defaults, logging
  * volume,container: chroot to source before exporting content
  * install sigproxy before start/attach
  * Update to c/image 5.24.1
  * events + container inspect test: RHEL fixes
  * Bump to v4.4.2-dev
- Remove patches (merged upstream):
  * volume-container-chroot-to-source-before-exporting-content.patch
- podman.spec: add `crun` requirement for quadlet
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add patch to let quadlet use the default runtime
  Added patch:
  * Quadlet-use-the-default-runtime.patch
  =&gt; Remove dependency on crun</changelog>
  <changelog author="danish.prakash@suse.com" date="1679659200">- Update to version 4.4.3:
  * Bump to v4.4.3
  * Release notes for v4.4.3
  * compat: /auth: parse server address correctly
  * vendor github.com/containers/common@v0.51.1
  * pkginstaller: bump Qemu to version 7.2.0
  * podman machine: Adjust Chrony makestep config
  * [v4.4] fix --health-on-failure=restart in transient unit
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * journald: remove initializeJournal()
  * netavark: only use aardvark ip as nameserver
  * compat API: network create return 409 for duplicate
  * fix "podman logs --since --follow" flake
  * system service --log-level=trace: support hijack
  * podman-mac-helper: exit 1 on error
  * bump golang.org/x/net to v0.8.0
  * Fix package restore
  * Quadlet - use the default runtime
  * Bump to v4.4.3-dev
- Remove patch (merged upstream):
  * Quadlet-use-the-default-runtime.patch
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="danish.prakash@suse.com" date="1680004800">- Update to version 4.4.4:
  * Bump to v4.4.4
  * Release notes for v4.4.4
  * libpod: always use direct mapping
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * Bump to v4.4.4-dev
- spec: Bump required version for libcontainers-common (bsc#1209495)</changelog>
  <changelog author="dcermak@suse.com" date="1681473600">- Don't build against EoL go versions, fixes bsc#1210299</changelog>
  <changelog author="danish.prakash@suse.com" date="1681819200">- Update to version 4.5.0:
  * Release v4.5.0
  * [CI:DOCS] Final release notes for v4.5.0
  * Quadlet - do not set log-driver by default
  * Return title fields as a list
  * Bump to v4.5.0-dev
  * Bump to v4.5.0-RC2
  * Final release notes for v4.5.0-RC2
  * test/e2e: remove unnecessary SkipIfNetavark() calls
  * test/e2e: deduplicated network test
  * docs: update podman-network-create.1
  * network create: add --interface-name
  * test/system/252-quadlet.bats: fix flake
  * Read kube_generate_type from containers.conf
  * Debian setup: workaround for runc /dev/char/10:200 bug
  * pkg/rootless: use catatonit from /usr/libexec/podman
  * rootless: make sure we only use a single pause process
  * Use atomic config writing strategy for podman machine config files
  * Add remaining release notes for v4.5.0-RC2
  * GHA: Use version instead of SHA for actions
  * chore(deps): update dependency containers/automation_images to v20230405
  * build: pass env by reference
  * test: retrofit error message
  * test/system: expect 12 char for short id
  * vendor: bump containers/(storage, common, buildah, image)
  * [skip-ci] Update actions/upload-artifact action to v3
  * [skip-ci] Update actions/stale action to v8
  * [skip-ci] Update actions/setup-go action to v4
  * [skip-ci] Update github/issue-labeler action to v2.6
  * Fix up codespell errors
  * Capitalize all uid,gid and id words that are not options in docs
  * build(deps): bump golang.org/x/tools from 0.7.0 to 0.8.0 in /test/tools
  * Properly remove the service container during kube down
  * quadlet: add `UserNS` option key
  * [CI:DOCS] Release notes for 4.5.0 Part 1
  * "podman pull by digest and list --all" test: untag instead of rmi
  * build(deps): bump golang.org/x/text from 0.8.0 to 0.9.0
  * Add renovate.json configuration
  * CI: postbuild step: skip under nightly treadmill
  * The `--ulimit` option accepts the name with an `RLIMIT_` prefix both upper and lower case
  * test/e2e: use custom network config dir where needed
  * chore: replace `github.com/ghodss/yaml` with `sigs.k8s.io/yaml`
  * update completion scripts for cobra v1.7.0
  * libpod.storageService.CreateContainerStorage(): retrieve ID maps
  * Fix invalid pod name and hostname during kube generate
  * e2e tests: fix racy flakes
  * Cirrus: Enable labeling of EC2 VMs
  * Cirrus: Fix aarch64 clone_script 404 errors
  * e2e: GinkgoParallelNode() -&gt; ...Process()
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
  * build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0
  * [CI:DOCS] --creds and registries
  * Copr: fix build deps for /usr/bin/envsubst
  * Don't error when removing non-existant env vars
  * e2e: healthcheck on stopped container: fix flake
  * test/apiv2/80-kube.at
  * test/apiv2/80-kube.at
  * system service: do not close Body
  * rm `hack/release.sh`
  * build(deps): bump github.com/onsi/gomega from 1.27.5 to 1.27.6
  * add `quadlet -version` flag
  * add version/rawversion package
  * quadlet: use `Flag` suffix for variables
  * quadlet: implement `Tmpfs` option
  * Bump to v4.5.0-dev
  * Bump to 4.5.0-rc1
  * Update release notes from 4.4 branch
  * rootless netns: recover from invalid netns
  * System tests: unverbosify a flake log
  * Add support for secret exists
  * Fix Win install task failures with large PR bodies
  * docs: add `starting` to `HealthCheckResults.Status`
  * Add support for cgroup_config from containers.conf
  * libpod: mount safely subpaths
  * Support Deployment generation with kube generate
  * Use secret.items to create volume mounts if present
  * [CI:DOCS] fix typo in --systemd option
  * rootless: drop preexec hook error message
  * Edit the docker wrapper to use the install prefix
  * Update podman-for-windows.md
  * Quadlet: RemapUsers documentation fixes
  * speed up image listing
  * vendor containers/common@e27c30ee9b1b
  * fix volume-plugin-test flake
  * Document building Podman remote on Windows hosts
  * test/e2e: gpg keep stdout/err attached
  * auto-update: stop+start instead of restart sytemd units
  * [CI:DOCS] Improve basic tutorial
  * Update docs/source/markdown/podman-network.1.md
  * Add debug to --wait test
  * fix slirp4netns resolv.conf ip with a userns
  * Quadlet: add support for keep-id with mapping values
  * Quadlet E2E test - run quadlet as user generator
  * sqlite: do not `Ping()` after connecting
  * Quadlet - treat paths starting with systemd specifiers as absolute
  * Update docs/source/markdown/podman-kube-play.1.md.in
  * system tests: use CONTAINERS_CONF_OVERRIDE
  * implement podman machine set for hyperv
  * [CI:DOCS] Add network subnets info to network man page
  * CI: retry the golangci install
  * system tests: fix racey sdnotify test
  * hyperv: lookup machine on local filesystem first
  * fix os.IsNotExist() CI check
  * Ensure that SQLite state handles name-ID collisions
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * build(deps): bump github.com/onsi/gomega from 1.27.4 to 1.27.5
  * Fix a race around SQLite DB config validation
  * add CONTAINERS_CONF_OVERRIDE
  * vendor containers/common@main
  * docs: minor grammar fix in `--volume` description
  * sqlite: do not use shared cache
  * test: podman checkpoint/restore the latest container
  * stats compat API: return "id" lowercase
  * Run make codespell
  * Drop SQLite max connections
  * sqlite: set connection attributes on open
  * Fix database locked errors with SQLite
  * quadlet tests: skip on RHEL8 rootless
  * Kube Play Doc: Document the support for K8S Secret
  * New ulimit test: bump up minimum nfiles
  * logformatter: hide --db-backend, and friendlyize quadlet
  * Quadlet - add support for relative path in Volume key in .container file
  * Add service ctr cleanup to PlayKubeDown
  * fix --health-on-failure=restart in transient unit
  * Quadlet Doc: Suggest the kill operation for HealthOnFailure
  * Quadlet - Add support for health checks configuration in .container files
  * Makefile: allow specifying /lib dir location
  * Fix option --opts -&gt; --opt
  * basic hypverv machine implementation
  * Fix SQLite DB schema migration code
  * Add support for oom_score_adj value from containers.conf
  * Use default_ulimits field in containers.conf
  * CI: test and confirm DESIRED_DATABASE
  * build(deps): bump github.com/openshift/imagebuilder
  * logformatter: futureproof output filename
  * Vendor in latest containers/(storage, common, image)
  * build(deps): bump google.golang.org/protobuf from 1.29.0 to 1.30.0
  * test/system/255-auto-update.bats: add debug logs
  * Revert "Revert "pasta: Use two connections instead of three in TCP range forward tests""
  * Add information for secret inspect
  * Add format to podman volume ls
  * Add format to podman volume inspect
  * Add format to podman secret ls
  * Add format to podman system df
  * Add format to podman machine info
  * Add format table to podman image inspect man page
  * Cirrus: Store podman machine benchmark data
  * Update Cirrus display names, and fix get-ci-vm script
  * Ensure SQLite places uses the runroot in transient mode
  * Fix various integration test issues with SQLite state
  * Remove test for pod/container name global uniqueness
  * Improve handling of existing container names in SQLite
  * Add SQLite job to CI
  * buildah treadmill: also run rootless tests
  * build(deps): bump github.com/vbatts/git-validation in /test/tools
  * auto update: return restart error
  * fix: Document removing anonymous volumes
  * events: no duplicates when streaming during a log rotation
  * Add search --cert-dir, --creds
  * podman-mac-helper: exit 1 on error
  * system service --log-level=trace: support hijack
  * test/system: fix wait_for_port() to wait for bind
  * cgroupns: private cgroupns on cgroupv1 breaks --systemd
  * libpod: remove error stutter
  * podman events: unhide --stream
  * test/system/255-auto-update.bats: multiple services
  * 255-auto-update.bats: turn off rollback where needed
  * Use append() to add elements to a slice
  * Revert "pasta: Use two connections instead of three in TCP range forward tests"
  * Support running nested SELinux container separation
  * bud tests: rootless remote: use correct socket path
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.2.1 to 8.3.0
  * compat: /auth: parse server address correctly
  * docs: fix cmd `set DOCKER_HOST` suggestion
  * test: reenable idmap test
  * Must use mountlabel when creating builtin volumes
  * podman.spec.rpkg: distro conditionals for modulesloaddir
  * build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.29.0
  * podman inspect list network when using --net=host or none
  * pasta: Re-enable "Local forwarder, IPv4" test, accept NXDOMAIN as response
  * build(deps): bump golang.org/x/tools from 0.6.0 to 0.7.0 in /test/tools
  * CI: Switch to c20230307t192532z-f37f36d12 images
  * Cirrus: Run system &amp; integration tests in parallel
  * Update checkpointctl v0.1.0
  * Quadlet: add support for setting --ip and --ip6
  * build(deps): bump golang.org/x/net from 0.7.0 to 0.8.0
  * build(deps): bump golang.org/x/sys from 0.5.0 to 0.6.0
  * libpod: avoid nil pointer dereference in (*Container).Cleanup
  * [CI:DOCS] Add image not found info to troubleshooting
  * cmd: do not require userns for "version"
  * cmd: drop special handling for "scp"
  * cmd: clarify meaning of ParentNSRequired
  * Fix package restore
  * [CI:DOCS] Fix docs/version-check always requesting updates
  * sqlite: add a hidden --db-backend flag
  * fix: update the default machine value when the previously set default machine is deleted
  * podman machine: Adjust Chrony makestep config
  * sqlite: add container short ID to network aliases
  * sqlite: remove dead code
  * sqlite: addContainer: add named volume only once
  * sqlite: implement RewriteVolumeConfig
  * sqlite: LookupVolume: fix partial name match
  * sqlite: LookupVolume: wrap error
  * sqlite: fix type rewriting container config
  * sqlite: return correct error on pod-name conflict
  * sqlite: RewritePodConfig: update error message
  * test/system/255-auto-update.bats: wait 10 for update to finish
  * auto-update test: wait for service to be ready
  * Vendor in latest containers/(common, storage, image)
  * play kube: Add --wait option
  * Cirrus: Fix git config permission denied
  * Quadlet: Add support for the Mount key in .container files
  * build(deps): bump github.com/onsi/gomega from 1.27.1 to 1.27.2
  * fix "podman logs --since --follow" flake
  * Clarify that replicas are ignored in kubernetes deployment
  * Revert "Skip all pasta tests"
  * CI: Switch to c20230223t153813z-f37f36d12 images
  * Fix user socket path
  * pkginstaller: bump Qemu to version 7.2.0
  * Cirrus: Fix bud tests failing to apply patches
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2
  * build(deps): bump github.com/coreos/stream-metadata-go
  * Vendor in latest containers/storage
  * buildah-bud tests: don't sudo when rootless is desired
  * Temporarily disable version-check
  * CI: new rootless buildah-bud tests (cron only)
  * sqlite: fix volume lookups with partial names
  * sqlite: fix container lookups with partial IDs
  * sqlite: fix LookupPod
  * sqlite: fix pod create/rm
  * sqlite: LookupContainer: update error message
  * sqlite: AddContainerExitCode: allow to replace
  * system: add warning when running rootless on cgroupv1
  * sqlite: fix AllContainers with state
  * sqlite: fix "UPDATE TABLE" typos
  * sqlite: SaveVolume: fix syntax error updating the volumes table
  * sqlite: exit code: allow -1
  * sqlite: fix typo when removing exec sessions
  * sqlite: AllContainers: fix inner join
  * sqlite: move migration after table creation
  * sqlite: implement pod methods
  * Quadlet - use the default runtime
  * docs: context is not optional for build
  * Fix an incorrect comment on NewSqliteState
  * Add support for containers.conf database setting
  * Add support for volume operations to SQLite state
  * Implement exec session handling in SQL database
  * Various fixes from code review
  * Remove `--namespace` flag from Podman root
  * Get E2E tests to pass
  * Implement network disconnect for SQLite state
  * Implement Network Connect/Modify for SQLite state
  * Fix various lint issues
  * Some further work on SQLite state
  * Remove concept of Namespaces from BoltDB
  * Add initial SQLite-backed state implementation
  * Cirrus: Support runc testing on debian VMs
  * Skip all pasta tests
  * Skip buildah-bud test
  * Skip buildx test with VFS podman storage driver
  * Skip 'podman kube --network' test for rootless CGv1
  * Skip tests which fail with CGv1 &amp; runc
  * Skip rootless CGv1 quadlet tests due to issue
  * Makefile: Define SHELL
  * Machine refactor for QEMU/AppleHV
  * machine refactoring preparations for hyperv
  * [CI:BUILD] spec.rpkg: trim dependency list
  * Logs follow-until tests: loosen checks
  * [CI:DOCS] Windows/Mac docs link update
  * Doc update for docker network options via CLI
  * compat API: network create return 409 for duplicate
  * Apply suggestions to man page
  * vendor c/common@852ca05a1fbb
  * Quadlet: Add support for LogDriver key in container and kube units
  * machine refactoring preparations for hyperv
  * libpod: always use direct mapping
  * netavark: only use aardvark ip as nameserver
  * build(deps): bump github.com/container-orchestrated-devices/container-device-interface
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * make docs: sanity check for broken man pages
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.6 to 8.2.0
  * build(deps): bump github.com/onsi/gomega from 1.27.0 to 1.27.1
  * kube: rm secret on down, print secret on play
  * Fix spacing typo that triggered OCD &amp; indent units in podman-systemd.unit(5)
  * Update remote_client.md
  * [CI:DOCS] Add restriction to option README
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * build(deps): bump github.com/onsi/gomega from 1.26.0 to 1.27.0
  * kube play: only enforce passthrough in Quadlet
  * journald: remove initializeJournal()
  * auto-update: support pods
  * Emergency fix for man pages: check for broken includes
  * System tests: assert(): friendlier failure messages
  * Cirrus: Fix version-check to only run on `main` job
  * CI: Temporarily disable all AWS EC2-based tasks
  * build(deps): bump github.com/containerd/containerd from 1.6.16 to 1.6.18
  * volume,container: chroot to source before exporting content
  * Support sysctl configs via podman kube play
  * [CI:BUILD] copr: podman.spec.rpkg cleanups
  * quadlet system tests: add useful defaults, logging
  * libpod: support relative positions for idmaps
  * Experimental workaround for cdn03.quay.io flake
  * system tests: prevent leading tabs
  * Introduce podman machine os apply
  * create: add support for --group-entry
  * fix != filter in volume prune
  * Allow specification of podman --remote build -f -
  * Quadlet use crun specified in containers.conf
  * build(deps): bump golang.org/x/net from 0.6.0 to 0.7.0
  * Vendor c/image after https://github.com/containers/image/pull/1847
  * Don't set hostPort when generating a service
  * man page --format xref: tighten the autocompletion check
  * add support for limiting tmpfs size for systemd-specific mnts
  * build(deps): bump golang.org/x/text from 0.6.0 to 0.7.0
  * Add ulimit annotation to kube gen &amp; play
  * man page xref: validate displayed man page names
  * quadlet: add ExecStop
  * install sigproxy before start/attach
  * build(deps): bump golang.org/x/tools from 0.5.0 to 0.6.0 in /test/tools
  * Fix typos
  * Cirrus: Make benchmarks .env file easier to load
  * Cirrus: Omit functions in env. file
  * kube play: set service container as main PID when possible
  * Fix typos. Improve language.
  * events + container inspect test: RHEL fixes
  * Add ctrName to network alias during kube play
  * Run codespell on codebase
  * podman image scp: added identity for ssh.Exec
  * [CI:DOCS] Clarify nomap constrains
  * [CI:DOCS] man-page checker: include --format (Go templates)
  * Vendor c/image after https://github.com/containers/image/pull/1816
  * [CI:DOCS] Cleanup some man pages to display options with line breaks
  * [CI:DOCS] Add tables to podman-systemd.unit man page
  * github: remove prefix from bugs/features
  * Quadlet: Add support for the Secret key in Container group
  * [CI:DOCS] OWNERS: add @ygalblum and @alexlarsson
  * build(deps): bump golang.org/x/term from 0.4.0 to 0.5.0
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.1.6
  * Sort quadlet keys to make it easier to read
  * e2e: fix some tests on remote
  * kube play: do not teardown unconditionally on error
  * Fix typos in comments
  * Resolve symlink path for qemu directory if possible
  * #17363 Fix contradicting documentation podman-commit
  * Fix a potential UID/GID collision in unit tests
  * golangci-lint: show all errors at once
  * update golangci-lint to version 1.51.1
  * [CI:DOCS] events: document journald identifiers
  * Quadlet: exit 0 when there are no files to process
  * network ls: handle removed container
  * e2e: adapt play kube test on remote rootless
  * docs/podman-systemd.unit: Explicitely mention network &amp; kube units
  * docs/podman-systemd.unit: Update example to work out of the box
  * [CI:BUILD] Cirrus: Fix GraphQL ownerRepository:null error
  * Add missing return after errors
  * Revert "Cirrus: Emergency fix to un-stuck PRs"
  * pasta: Fix ICMPv6 Echo test, skip it for the moment
  * pasta: Fix ICMP Echo Request (IPv4) test
  * pasta: Use two connections instead of three in TCP range forward tests
  * Add SELinux label types support to quadlet
  * Add quadlet support for rootfs= containers
  * Cirrus: Emergency fix to un-stuck PRs
  * Move clean-binaries before podman-remote in podman-remote-docs target
  * oci: bind mount /sys with --userns=(auto|pod:)
  * Cleanup podman-systemd.unit file
  * Install podman-systemd.unit  man page, make quadlet discoverable
  * libpod: allow userns=keep-id for root
  * system-reset: use CleanCacheMount to clear build cache
  * vendor: bump buildah to v1.29.1-0.20230201192322-e56eb25575c7
  * system tests: fix noexistent labels test in the remote
  * Expose Podman named pipe in Inspect output
  * libpod: support idmap for --rootfs
  * test: adapt test to work on cgroupv1
  * Bump to v4.5.0-dev
  * Update main to reflect v4.4.0 release
  * Update from /github.com/vbauerster/mpb/v7 to /v8
  * hack/perf: cleanup after benchmarks
  * hack/perf/bz-2162111.sh: use custom network
  * Update bug_report.yaml
  * Handle filetype field in kubernetes.yaml files
  * hack/perf/bz-2162111.sh: measure stop
  * make hack/markdown-preprocess parallel-safe
  * system tests: fix volume exec/noexec test
  * system tests: minor fix for RHEL8 incompatibility
  * Cirrus: Use versionable IMAGE_SUFFIX
  * utils: new conversion method
  * libpod: use GraphRoot for overlay upper dir
  * vendor: update containers/storage
  * Do not mount /dev/tty into rootless containers
  * build(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7
  * e2e: fix run_staticip_test about no_proxy
  * docs: specify order preference for FROM
  * Fixes port collision issue on use of --publish-all
  * Support for Windows paths in the source position of the volume mounts
  * e2e tests: fix incorrect os.User.Name
  * Log data that we failed to unmarshal
  * [CI:DOCS] hack/perf: add script for BZ 216111
  * container rm: save once for exec removal and state change
  * [DOCS:CI] podman-events: document verbose create events
  * e2e: Avoid hard-coding included in quadlet test
  * e2e: Avoid hard-coding ImageCacheDir
  * Making gvproxy.exe optional for building Windows installer
  * Add gvproxy to Windows packages
  * Add comment to clarify error handling intention
  * fix #17244: use /etc/timezone where `timedatectl` is missing on Linux
  * Fix usage of absolute windows paths with --image-path
  * Match VT device paths to be blocked from mounting exactly
  * Fix default handling of pids-limit
  * Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml)
  * journald: podman logs only show logs for current user
  * journald: podman events only show events for current user
  * e2e: Remove the cache with "podman unshare rm" when a rootless user
  * Clean up more language for inclusiveness
  * e2e: Remove some directories at SynchronizedAfterSuite
  * fix: don't output "ago" when container is currently up and running
  * fix: running check error when podman is default in wsl
  * fix CI: test fail due to merge
  * Bump Bulidah to v1.29.0
  * e2e: reduce dependency on /tmp for e2e tests
  * Bump cirrus image with easier dependency management
  * quadlet: Add device support for .volume files
  * remote,build: error if containerignore is symlink
  * DB: make loading container states optional
  * ps: do not sync container
  * Set runAsNonRoot=true in gen kube
  * WSL refactoring
  * kube-play: add support for HostIPC in pod.Spec
  * Allow --device-cgroup-rule to be passed in by docker API</changelog>
  <changelog author="danish.prakash@suse.com" date="1685361600">- Update to version 4.5.1:
  * Release v4.5.1
  * [CI:DOCS] Final release notes for v4.5.1
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * Revert "Resolve symlink path for qemu directory if possible"
  * no need for podman-next rpm test on maint branch
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * network create/update: allow dns servers comma separated
  * machine: fix default connection URL to use 127.0.0.1
  * compat: accept tag in /images/create?fromSrc
  * compat container create: match duplicate mounts correctly
  * machine: qemu only remove connection after confirmation
  * windows: podman save allow the use of stdout
  * remote: exec inspect update exec session status
  * podman-remote logs: handle server error correctly
  * libpod: stop containers with --restart=always
  * Do not include image annotations when building spec
  * [v4.5] system tests: fix race in kube-play read-only
  * api: fix parsing filters
  * Support systemd optional prefix '-' for devices.
  * *: migrate image registry to registry.k8s.io
  * Makefile: include `release-artifacts` target
  * [CI:BUILD] Packit: Initial Enablement
  * Bump to v4.5.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
</package>
<package pkgid="9977648e27a3e27fa812e0e32b3f4f78f070555a8410b5d5061a7a3e0f0f7d7b" name="podman" arch="src">
  <version epoch="0" ver="4.7.2" rel="150500.3.3.1"/>
  <changelog author="danish.prakash@suse.com" date="1677240000">- Update to version 4.4.2:
  * Bump to v4.4.2
  * Release notes for v4.4.2
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * kube play: only enforce passthrough in Quadlet
  * Emergency fix for man pages: check for broken includes
  * CI: Temporarily disable all AWS EC2-based tasks
  * quadlet system tests: add useful defaults, logging
  * volume,container: chroot to source before exporting content
  * install sigproxy before start/attach
  * Update to c/image 5.24.1
  * events + container inspect test: RHEL fixes
  * Bump to v4.4.2-dev
- Remove patches (merged upstream):
  * volume-container-chroot-to-source-before-exporting-content.patch
- podman.spec: add `crun` requirement for quadlet
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add patch to let quadlet use the default runtime
  Added patch:
  * Quadlet-use-the-default-runtime.patch
  =&gt; Remove dependency on crun</changelog>
  <changelog author="danish.prakash@suse.com" date="1679659200">- Update to version 4.4.3:
  * Bump to v4.4.3
  * Release notes for v4.4.3
  * compat: /auth: parse server address correctly
  * vendor github.com/containers/common@v0.51.1
  * pkginstaller: bump Qemu to version 7.2.0
  * podman machine: Adjust Chrony makestep config
  * [v4.4] fix --health-on-failure=restart in transient unit
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * journald: remove initializeJournal()
  * netavark: only use aardvark ip as nameserver
  * compat API: network create return 409 for duplicate
  * fix "podman logs --since --follow" flake
  * system service --log-level=trace: support hijack
  * podman-mac-helper: exit 1 on error
  * bump golang.org/x/net to v0.8.0
  * Fix package restore
  * Quadlet - use the default runtime
  * Bump to v4.4.3-dev
- Remove patch (merged upstream):
  * Quadlet-use-the-default-runtime.patch
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="danish.prakash@suse.com" date="1680004800">- Update to version 4.4.4:
  * Bump to v4.4.4
  * Release notes for v4.4.4
  * libpod: always use direct mapping
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * Bump to v4.4.4-dev
- spec: Bump required version for libcontainers-common (bsc#1209495)</changelog>
  <changelog author="dcermak@suse.com" date="1681473600">- Don't build against EoL go versions, fixes bsc#1210299</changelog>
  <changelog author="danish.prakash@suse.com" date="1681819200">- Update to version 4.5.0:
  * Release v4.5.0
  * [CI:DOCS] Final release notes for v4.5.0
  * Quadlet - do not set log-driver by default
  * Return title fields as a list
  * Bump to v4.5.0-dev
  * Bump to v4.5.0-RC2
  * Final release notes for v4.5.0-RC2
  * test/e2e: remove unnecessary SkipIfNetavark() calls
  * test/e2e: deduplicated network test
  * docs: update podman-network-create.1
  * network create: add --interface-name
  * test/system/252-quadlet.bats: fix flake
  * Read kube_generate_type from containers.conf
  * Debian setup: workaround for runc /dev/char/10:200 bug
  * pkg/rootless: use catatonit from /usr/libexec/podman
  * rootless: make sure we only use a single pause process
  * Use atomic config writing strategy for podman machine config files
  * Add remaining release notes for v4.5.0-RC2
  * GHA: Use version instead of SHA for actions
  * chore(deps): update dependency containers/automation_images to v20230405
  * build: pass env by reference
  * test: retrofit error message
  * test/system: expect 12 char for short id
  * vendor: bump containers/(storage, common, buildah, image)
  * [skip-ci] Update actions/upload-artifact action to v3
  * [skip-ci] Update actions/stale action to v8
  * [skip-ci] Update actions/setup-go action to v4
  * [skip-ci] Update github/issue-labeler action to v2.6
  * Fix up codespell errors
  * Capitalize all uid,gid and id words that are not options in docs
  * build(deps): bump golang.org/x/tools from 0.7.0 to 0.8.0 in /test/tools
  * Properly remove the service container during kube down
  * quadlet: add `UserNS` option key
  * [CI:DOCS] Release notes for 4.5.0 Part 1
  * "podman pull by digest and list --all" test: untag instead of rmi
  * build(deps): bump golang.org/x/text from 0.8.0 to 0.9.0
  * Add renovate.json configuration
  * CI: postbuild step: skip under nightly treadmill
  * The `--ulimit` option accepts the name with an `RLIMIT_` prefix both upper and lower case
  * test/e2e: use custom network config dir where needed
  * chore: replace `github.com/ghodss/yaml` with `sigs.k8s.io/yaml`
  * update completion scripts for cobra v1.7.0
  * libpod.storageService.CreateContainerStorage(): retrieve ID maps
  * Fix invalid pod name and hostname during kube generate
  * e2e tests: fix racy flakes
  * Cirrus: Enable labeling of EC2 VMs
  * Cirrus: Fix aarch64 clone_script 404 errors
  * e2e: GinkgoParallelNode() -&gt; ...Process()
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
  * build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0
  * [CI:DOCS] --creds and registries
  * Copr: fix build deps for /usr/bin/envsubst
  * Don't error when removing non-existant env vars
  * e2e: healthcheck on stopped container: fix flake
  * test/apiv2/80-kube.at
  * test/apiv2/80-kube.at
  * system service: do not close Body
  * rm `hack/release.sh`
  * build(deps): bump github.com/onsi/gomega from 1.27.5 to 1.27.6
  * add `quadlet -version` flag
  * add version/rawversion package
  * quadlet: use `Flag` suffix for variables
  * quadlet: implement `Tmpfs` option
  * Bump to v4.5.0-dev
  * Bump to 4.5.0-rc1
  * Update release notes from 4.4 branch
  * rootless netns: recover from invalid netns
  * System tests: unverbosify a flake log
  * Add support for secret exists
  * Fix Win install task failures with large PR bodies
  * docs: add `starting` to `HealthCheckResults.Status`
  * Add support for cgroup_config from containers.conf
  * libpod: mount safely subpaths
  * Support Deployment generation with kube generate
  * Use secret.items to create volume mounts if present
  * [CI:DOCS] fix typo in --systemd option
  * rootless: drop preexec hook error message
  * Edit the docker wrapper to use the install prefix
  * Update podman-for-windows.md
  * Quadlet: RemapUsers documentation fixes
  * speed up image listing
  * vendor containers/common@e27c30ee9b1b
  * fix volume-plugin-test flake
  * Document building Podman remote on Windows hosts
  * test/e2e: gpg keep stdout/err attached
  * auto-update: stop+start instead of restart sytemd units
  * [CI:DOCS] Improve basic tutorial
  * Update docs/source/markdown/podman-network.1.md
  * Add debug to --wait test
  * fix slirp4netns resolv.conf ip with a userns
  * Quadlet: add support for keep-id with mapping values
  * Quadlet E2E test - run quadlet as user generator
  * sqlite: do not `Ping()` after connecting
  * Quadlet - treat paths starting with systemd specifiers as absolute
  * Update docs/source/markdown/podman-kube-play.1.md.in
  * system tests: use CONTAINERS_CONF_OVERRIDE
  * implement podman machine set for hyperv
  * [CI:DOCS] Add network subnets info to network man page
  * CI: retry the golangci install
  * system tests: fix racey sdnotify test
  * hyperv: lookup machine on local filesystem first
  * fix os.IsNotExist() CI check
  * Ensure that SQLite state handles name-ID collisions
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * build(deps): bump github.com/onsi/gomega from 1.27.4 to 1.27.5
  * Fix a race around SQLite DB config validation
  * add CONTAINERS_CONF_OVERRIDE
  * vendor containers/common@main
  * docs: minor grammar fix in `--volume` description
  * sqlite: do not use shared cache
  * test: podman checkpoint/restore the latest container
  * stats compat API: return "id" lowercase
  * Run make codespell
  * Drop SQLite max connections
  * sqlite: set connection attributes on open
  * Fix database locked errors with SQLite
  * quadlet tests: skip on RHEL8 rootless
  * Kube Play Doc: Document the support for K8S Secret
  * New ulimit test: bump up minimum nfiles
  * logformatter: hide --db-backend, and friendlyize quadlet
  * Quadlet - add support for relative path in Volume key in .container file
  * Add service ctr cleanup to PlayKubeDown
  * fix --health-on-failure=restart in transient unit
  * Quadlet Doc: Suggest the kill operation for HealthOnFailure
  * Quadlet - Add support for health checks configuration in .container files
  * Makefile: allow specifying /lib dir location
  * Fix option --opts -&gt; --opt
  * basic hypverv machine implementation
  * Fix SQLite DB schema migration code
  * Add support for oom_score_adj value from containers.conf
  * Use default_ulimits field in containers.conf
  * CI: test and confirm DESIRED_DATABASE
  * build(deps): bump github.com/openshift/imagebuilder
  * logformatter: futureproof output filename
  * Vendor in latest containers/(storage, common, image)
  * build(deps): bump google.golang.org/protobuf from 1.29.0 to 1.30.0
  * test/system/255-auto-update.bats: add debug logs
  * Revert "Revert "pasta: Use two connections instead of three in TCP range forward tests""
  * Add information for secret inspect
  * Add format to podman volume ls
  * Add format to podman volume inspect
  * Add format to podman secret ls
  * Add format to podman system df
  * Add format to podman machine info
  * Add format table to podman image inspect man page
  * Cirrus: Store podman machine benchmark data
  * Update Cirrus display names, and fix get-ci-vm script
  * Ensure SQLite places uses the runroot in transient mode
  * Fix various integration test issues with SQLite state
  * Remove test for pod/container name global uniqueness
  * Improve handling of existing container names in SQLite
  * Add SQLite job to CI
  * buildah treadmill: also run rootless tests
  * build(deps): bump github.com/vbatts/git-validation in /test/tools
  * auto update: return restart error
  * fix: Document removing anonymous volumes
  * events: no duplicates when streaming during a log rotation
  * Add search --cert-dir, --creds
  * podman-mac-helper: exit 1 on error
  * system service --log-level=trace: support hijack
  * test/system: fix wait_for_port() to wait for bind
  * cgroupns: private cgroupns on cgroupv1 breaks --systemd
  * libpod: remove error stutter
  * podman events: unhide --stream
  * test/system/255-auto-update.bats: multiple services
  * 255-auto-update.bats: turn off rollback where needed
  * Use append() to add elements to a slice
  * Revert "pasta: Use two connections instead of three in TCP range forward tests"
  * Support running nested SELinux container separation
  * bud tests: rootless remote: use correct socket path
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.2.1 to 8.3.0
  * compat: /auth: parse server address correctly
  * docs: fix cmd `set DOCKER_HOST` suggestion
  * test: reenable idmap test
  * Must use mountlabel when creating builtin volumes
  * podman.spec.rpkg: distro conditionals for modulesloaddir
  * build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.29.0
  * podman inspect list network when using --net=host or none
  * pasta: Re-enable "Local forwarder, IPv4" test, accept NXDOMAIN as response
  * build(deps): bump golang.org/x/tools from 0.6.0 to 0.7.0 in /test/tools
  * CI: Switch to c20230307t192532z-f37f36d12 images
  * Cirrus: Run system &amp; integration tests in parallel
  * Update checkpointctl v0.1.0
  * Quadlet: add support for setting --ip and --ip6
  * build(deps): bump golang.org/x/net from 0.7.0 to 0.8.0
  * build(deps): bump golang.org/x/sys from 0.5.0 to 0.6.0
  * libpod: avoid nil pointer dereference in (*Container).Cleanup
  * [CI:DOCS] Add image not found info to troubleshooting
  * cmd: do not require userns for "version"
  * cmd: drop special handling for "scp"
  * cmd: clarify meaning of ParentNSRequired
  * Fix package restore
  * [CI:DOCS] Fix docs/version-check always requesting updates
  * sqlite: add a hidden --db-backend flag
  * fix: update the default machine value when the previously set default machine is deleted
  * podman machine: Adjust Chrony makestep config
  * sqlite: add container short ID to network aliases
  * sqlite: remove dead code
  * sqlite: addContainer: add named volume only once
  * sqlite: implement RewriteVolumeConfig
  * sqlite: LookupVolume: fix partial name match
  * sqlite: LookupVolume: wrap error
  * sqlite: fix type rewriting container config
  * sqlite: return correct error on pod-name conflict
  * sqlite: RewritePodConfig: update error message
  * test/system/255-auto-update.bats: wait 10 for update to finish
  * auto-update test: wait for service to be ready
  * Vendor in latest containers/(common, storage, image)
  * play kube: Add --wait option
  * Cirrus: Fix git config permission denied
  * Quadlet: Add support for the Mount key in .container files
  * build(deps): bump github.com/onsi/gomega from 1.27.1 to 1.27.2
  * fix "podman logs --since --follow" flake
  * Clarify that replicas are ignored in kubernetes deployment
  * Revert "Skip all pasta tests"
  * CI: Switch to c20230223t153813z-f37f36d12 images
  * Fix user socket path
  * pkginstaller: bump Qemu to version 7.2.0
  * Cirrus: Fix bud tests failing to apply patches
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2
  * build(deps): bump github.com/coreos/stream-metadata-go
  * Vendor in latest containers/storage
  * buildah-bud tests: don't sudo when rootless is desired
  * Temporarily disable version-check
  * CI: new rootless buildah-bud tests (cron only)
  * sqlite: fix volume lookups with partial names
  * sqlite: fix container lookups with partial IDs
  * sqlite: fix LookupPod
  * sqlite: fix pod create/rm
  * sqlite: LookupContainer: update error message
  * sqlite: AddContainerExitCode: allow to replace
  * system: add warning when running rootless on cgroupv1
  * sqlite: fix AllContainers with state
  * sqlite: fix "UPDATE TABLE" typos
  * sqlite: SaveVolume: fix syntax error updating the volumes table
  * sqlite: exit code: allow -1
  * sqlite: fix typo when removing exec sessions
  * sqlite: AllContainers: fix inner join
  * sqlite: move migration after table creation
  * sqlite: implement pod methods
  * Quadlet - use the default runtime
  * docs: context is not optional for build
  * Fix an incorrect comment on NewSqliteState
  * Add support for containers.conf database setting
  * Add support for volume operations to SQLite state
  * Implement exec session handling in SQL database
  * Various fixes from code review
  * Remove `--namespace` flag from Podman root
  * Get E2E tests to pass
  * Implement network disconnect for SQLite state
  * Implement Network Connect/Modify for SQLite state
  * Fix various lint issues
  * Some further work on SQLite state
  * Remove concept of Namespaces from BoltDB
  * Add initial SQLite-backed state implementation
  * Cirrus: Support runc testing on debian VMs
  * Skip all pasta tests
  * Skip buildah-bud test
  * Skip buildx test with VFS podman storage driver
  * Skip 'podman kube --network' test for rootless CGv1
  * Skip tests which fail with CGv1 &amp; runc
  * Skip rootless CGv1 quadlet tests due to issue
  * Makefile: Define SHELL
  * Machine refactor for QEMU/AppleHV
  * machine refactoring preparations for hyperv
  * [CI:BUILD] spec.rpkg: trim dependency list
  * Logs follow-until tests: loosen checks
  * [CI:DOCS] Windows/Mac docs link update
  * Doc update for docker network options via CLI
  * compat API: network create return 409 for duplicate
  * Apply suggestions to man page
  * vendor c/common@852ca05a1fbb
  * Quadlet: Add support for LogDriver key in container and kube units
  * machine refactoring preparations for hyperv
  * libpod: always use direct mapping
  * netavark: only use aardvark ip as nameserver
  * build(deps): bump github.com/container-orchestrated-devices/container-device-interface
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * make docs: sanity check for broken man pages
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.6 to 8.2.0
  * build(deps): bump github.com/onsi/gomega from 1.27.0 to 1.27.1
  * kube: rm secret on down, print secret on play
  * Fix spacing typo that triggered OCD &amp; indent units in podman-systemd.unit(5)
  * Update remote_client.md
  * [CI:DOCS] Add restriction to option README
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * build(deps): bump github.com/onsi/gomega from 1.26.0 to 1.27.0
  * kube play: only enforce passthrough in Quadlet
  * journald: remove initializeJournal()
  * auto-update: support pods
  * Emergency fix for man pages: check for broken includes
  * System tests: assert(): friendlier failure messages
  * Cirrus: Fix version-check to only run on `main` job
  * CI: Temporarily disable all AWS EC2-based tasks
  * build(deps): bump github.com/containerd/containerd from 1.6.16 to 1.6.18
  * volume,container: chroot to source before exporting content
  * Support sysctl configs via podman kube play
  * [CI:BUILD] copr: podman.spec.rpkg cleanups
  * quadlet system tests: add useful defaults, logging
  * libpod: support relative positions for idmaps
  * Experimental workaround for cdn03.quay.io flake
  * system tests: prevent leading tabs
  * Introduce podman machine os apply
  * create: add support for --group-entry
  * fix != filter in volume prune
  * Allow specification of podman --remote build -f -
  * Quadlet use crun specified in containers.conf
  * build(deps): bump golang.org/x/net from 0.6.0 to 0.7.0
  * Vendor c/image after https://github.com/containers/image/pull/1847
  * Don't set hostPort when generating a service
  * man page --format xref: tighten the autocompletion check
  * add support for limiting tmpfs size for systemd-specific mnts
  * build(deps): bump golang.org/x/text from 0.6.0 to 0.7.0
  * Add ulimit annotation to kube gen &amp; play
  * man page xref: validate displayed man page names
  * quadlet: add ExecStop
  * install sigproxy before start/attach
  * build(deps): bump golang.org/x/tools from 0.5.0 to 0.6.0 in /test/tools
  * Fix typos
  * Cirrus: Make benchmarks .env file easier to load
  * Cirrus: Omit functions in env. file
  * kube play: set service container as main PID when possible
  * Fix typos. Improve language.
  * events + container inspect test: RHEL fixes
  * Add ctrName to network alias during kube play
  * Run codespell on codebase
  * podman image scp: added identity for ssh.Exec
  * [CI:DOCS] Clarify nomap constrains
  * [CI:DOCS] man-page checker: include --format (Go templates)
  * Vendor c/image after https://github.com/containers/image/pull/1816
  * [CI:DOCS] Cleanup some man pages to display options with line breaks
  * [CI:DOCS] Add tables to podman-systemd.unit man page
  * github: remove prefix from bugs/features
  * Quadlet: Add support for the Secret key in Container group
  * [CI:DOCS] OWNERS: add @ygalblum and @alexlarsson
  * build(deps): bump golang.org/x/term from 0.4.0 to 0.5.0
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.1.6
  * Sort quadlet keys to make it easier to read
  * e2e: fix some tests on remote
  * kube play: do not teardown unconditionally on error
  * Fix typos in comments
  * Resolve symlink path for qemu directory if possible
  * #17363 Fix contradicting documentation podman-commit
  * Fix a potential UID/GID collision in unit tests
  * golangci-lint: show all errors at once
  * update golangci-lint to version 1.51.1
  * [CI:DOCS] events: document journald identifiers
  * Quadlet: exit 0 when there are no files to process
  * network ls: handle removed container
  * e2e: adapt play kube test on remote rootless
  * docs/podman-systemd.unit: Explicitely mention network &amp; kube units
  * docs/podman-systemd.unit: Update example to work out of the box
  * [CI:BUILD] Cirrus: Fix GraphQL ownerRepository:null error
  * Add missing return after errors
  * Revert "Cirrus: Emergency fix to un-stuck PRs"
  * pasta: Fix ICMPv6 Echo test, skip it for the moment
  * pasta: Fix ICMP Echo Request (IPv4) test
  * pasta: Use two connections instead of three in TCP range forward tests
  * Add SELinux label types support to quadlet
  * Add quadlet support for rootfs= containers
  * Cirrus: Emergency fix to un-stuck PRs
  * Move clean-binaries before podman-remote in podman-remote-docs target
  * oci: bind mount /sys with --userns=(auto|pod:)
  * Cleanup podman-systemd.unit file
  * Install podman-systemd.unit  man page, make quadlet discoverable
  * libpod: allow userns=keep-id for root
  * system-reset: use CleanCacheMount to clear build cache
  * vendor: bump buildah to v1.29.1-0.20230201192322-e56eb25575c7
  * system tests: fix noexistent labels test in the remote
  * Expose Podman named pipe in Inspect output
  * libpod: support idmap for --rootfs
  * test: adapt test to work on cgroupv1
  * Bump to v4.5.0-dev
  * Update main to reflect v4.4.0 release
  * Update from /github.com/vbauerster/mpb/v7 to /v8
  * hack/perf: cleanup after benchmarks
  * hack/perf/bz-2162111.sh: use custom network
  * Update bug_report.yaml
  * Handle filetype field in kubernetes.yaml files
  * hack/perf/bz-2162111.sh: measure stop
  * make hack/markdown-preprocess parallel-safe
  * system tests: fix volume exec/noexec test
  * system tests: minor fix for RHEL8 incompatibility
  * Cirrus: Use versionable IMAGE_SUFFIX
  * utils: new conversion method
  * libpod: use GraphRoot for overlay upper dir
  * vendor: update containers/storage
  * Do not mount /dev/tty into rootless containers
  * build(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7
  * e2e: fix run_staticip_test about no_proxy
  * docs: specify order preference for FROM
  * Fixes port collision issue on use of --publish-all
  * Support for Windows paths in the source position of the volume mounts
  * e2e tests: fix incorrect os.User.Name
  * Log data that we failed to unmarshal
  * [CI:DOCS] hack/perf: add script for BZ 216111
  * container rm: save once for exec removal and state change
  * [DOCS:CI] podman-events: document verbose create events
  * e2e: Avoid hard-coding included in quadlet test
  * e2e: Avoid hard-coding ImageCacheDir
  * Making gvproxy.exe optional for building Windows installer
  * Add gvproxy to Windows packages
  * Add comment to clarify error handling intention
  * fix #17244: use /etc/timezone where `timedatectl` is missing on Linux
  * Fix usage of absolute windows paths with --image-path
  * Match VT device paths to be blocked from mounting exactly
  * Fix default handling of pids-limit
  * Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml)
  * journald: podman logs only show logs for current user
  * journald: podman events only show events for current user
  * e2e: Remove the cache with "podman unshare rm" when a rootless user
  * Clean up more language for inclusiveness
  * e2e: Remove some directories at SynchronizedAfterSuite
  * fix: don't output "ago" when container is currently up and running
  * fix: running check error when podman is default in wsl
  * fix CI: test fail due to merge
  * Bump Bulidah to v1.29.0
  * e2e: reduce dependency on /tmp for e2e tests
  * Bump cirrus image with easier dependency management
  * quadlet: Add device support for .volume files
  * remote,build: error if containerignore is symlink
  * DB: make loading container states optional
  * ps: do not sync container
  * Set runAsNonRoot=true in gen kube
  * WSL refactoring
  * kube-play: add support for HostIPC in pod.Spec
  * Allow --device-cgroup-rule to be passed in by docker API</changelog>
  <changelog author="danish.prakash@suse.com" date="1685361600">- Update to version 4.5.1:
  * Release v4.5.1
  * [CI:DOCS] Final release notes for v4.5.1
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * Revert "Resolve symlink path for qemu directory if possible"
  * no need for podman-next rpm test on maint branch
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * network create/update: allow dns servers comma separated
  * machine: fix default connection URL to use 127.0.0.1
  * compat: accept tag in /images/create?fromSrc
  * compat container create: match duplicate mounts correctly
  * machine: qemu only remove connection after confirmation
  * windows: podman save allow the use of stdout
  * remote: exec inspect update exec session status
  * podman-remote logs: handle server error correctly
  * libpod: stop containers with --restart=always
  * Do not include image annotations when building spec
  * [v4.5] system tests: fix race in kube-play read-only
  * api: fix parsing filters
  * Support systemd optional prefix '-' for devices.
  * *: migrate image registry to registry.k8s.io
  * Makefile: include `release-artifacts` target
  * [CI:BUILD] Packit: Initial Enablement
  * Bump to v4.5.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
</package>
<package pkgid="6a01ba3ba75afd26c0d7ec9f04ae2d340aaa096bd932f74d9ba909e1f908115b" name="podman" arch="x86_64">
  <version epoch="0" ver="4.7.2" rel="150500.3.3.1"/>
  <changelog author="danish.prakash@suse.com" date="1677240000">- Update to version 4.4.2:
  * Bump to v4.4.2
  * Release notes for v4.4.2
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * kube play: only enforce passthrough in Quadlet
  * Emergency fix for man pages: check for broken includes
  * CI: Temporarily disable all AWS EC2-based tasks
  * quadlet system tests: add useful defaults, logging
  * volume,container: chroot to source before exporting content
  * install sigproxy before start/attach
  * Update to c/image 5.24.1
  * events + container inspect test: RHEL fixes
  * Bump to v4.4.2-dev
- Remove patches (merged upstream):
  * volume-container-chroot-to-source-before-exporting-content.patch
- podman.spec: add `crun` requirement for quadlet
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add patch to let quadlet use the default runtime
  Added patch:
  * Quadlet-use-the-default-runtime.patch
  =&gt; Remove dependency on crun</changelog>
  <changelog author="danish.prakash@suse.com" date="1679659200">- Update to version 4.4.3:
  * Bump to v4.4.3
  * Release notes for v4.4.3
  * compat: /auth: parse server address correctly
  * vendor github.com/containers/common@v0.51.1
  * pkginstaller: bump Qemu to version 7.2.0
  * podman machine: Adjust Chrony makestep config
  * [v4.4] fix --health-on-failure=restart in transient unit
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * journald: remove initializeJournal()
  * netavark: only use aardvark ip as nameserver
  * compat API: network create return 409 for duplicate
  * fix "podman logs --since --follow" flake
  * system service --log-level=trace: support hijack
  * podman-mac-helper: exit 1 on error
  * bump golang.org/x/net to v0.8.0
  * Fix package restore
  * Quadlet - use the default runtime
  * Bump to v4.4.3-dev
- Remove patch (merged upstream):
  * Quadlet-use-the-default-runtime.patch
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="danish.prakash@suse.com" date="1680004800">- Update to version 4.4.4:
  * Bump to v4.4.4
  * Release notes for v4.4.4
  * libpod: always use direct mapping
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * Bump to v4.4.4-dev
- spec: Bump required version for libcontainers-common (bsc#1209495)</changelog>
  <changelog author="dcermak@suse.com" date="1681473600">- Don't build against EoL go versions, fixes bsc#1210299</changelog>
  <changelog author="danish.prakash@suse.com" date="1681819200">- Update to version 4.5.0:
  * Release v4.5.0
  * [CI:DOCS] Final release notes for v4.5.0
  * Quadlet - do not set log-driver by default
  * Return title fields as a list
  * Bump to v4.5.0-dev
  * Bump to v4.5.0-RC2
  * Final release notes for v4.5.0-RC2
  * test/e2e: remove unnecessary SkipIfNetavark() calls
  * test/e2e: deduplicated network test
  * docs: update podman-network-create.1
  * network create: add --interface-name
  * test/system/252-quadlet.bats: fix flake
  * Read kube_generate_type from containers.conf
  * Debian setup: workaround for runc /dev/char/10:200 bug
  * pkg/rootless: use catatonit from /usr/libexec/podman
  * rootless: make sure we only use a single pause process
  * Use atomic config writing strategy for podman machine config files
  * Add remaining release notes for v4.5.0-RC2
  * GHA: Use version instead of SHA for actions
  * chore(deps): update dependency containers/automation_images to v20230405
  * build: pass env by reference
  * test: retrofit error message
  * test/system: expect 12 char for short id
  * vendor: bump containers/(storage, common, buildah, image)
  * [skip-ci] Update actions/upload-artifact action to v3
  * [skip-ci] Update actions/stale action to v8
  * [skip-ci] Update actions/setup-go action to v4
  * [skip-ci] Update github/issue-labeler action to v2.6
  * Fix up codespell errors
  * Capitalize all uid,gid and id words that are not options in docs
  * build(deps): bump golang.org/x/tools from 0.7.0 to 0.8.0 in /test/tools
  * Properly remove the service container during kube down
  * quadlet: add `UserNS` option key
  * [CI:DOCS] Release notes for 4.5.0 Part 1
  * "podman pull by digest and list --all" test: untag instead of rmi
  * build(deps): bump golang.org/x/text from 0.8.0 to 0.9.0
  * Add renovate.json configuration
  * CI: postbuild step: skip under nightly treadmill
  * The `--ulimit` option accepts the name with an `RLIMIT_` prefix both upper and lower case
  * test/e2e: use custom network config dir where needed
  * chore: replace `github.com/ghodss/yaml` with `sigs.k8s.io/yaml`
  * update completion scripts for cobra v1.7.0
  * libpod.storageService.CreateContainerStorage(): retrieve ID maps
  * Fix invalid pod name and hostname during kube generate
  * e2e tests: fix racy flakes
  * Cirrus: Enable labeling of EC2 VMs
  * Cirrus: Fix aarch64 clone_script 404 errors
  * e2e: GinkgoParallelNode() -&gt; ...Process()
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
  * build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0
  * [CI:DOCS] --creds and registries
  * Copr: fix build deps for /usr/bin/envsubst
  * Don't error when removing non-existant env vars
  * e2e: healthcheck on stopped container: fix flake
  * test/apiv2/80-kube.at
  * test/apiv2/80-kube.at
  * system service: do not close Body
  * rm `hack/release.sh`
  * build(deps): bump github.com/onsi/gomega from 1.27.5 to 1.27.6
  * add `quadlet -version` flag
  * add version/rawversion package
  * quadlet: use `Flag` suffix for variables
  * quadlet: implement `Tmpfs` option
  * Bump to v4.5.0-dev
  * Bump to 4.5.0-rc1
  * Update release notes from 4.4 branch
  * rootless netns: recover from invalid netns
  * System tests: unverbosify a flake log
  * Add support for secret exists
  * Fix Win install task failures with large PR bodies
  * docs: add `starting` to `HealthCheckResults.Status`
  * Add support for cgroup_config from containers.conf
  * libpod: mount safely subpaths
  * Support Deployment generation with kube generate
  * Use secret.items to create volume mounts if present
  * [CI:DOCS] fix typo in --systemd option
  * rootless: drop preexec hook error message
  * Edit the docker wrapper to use the install prefix
  * Update podman-for-windows.md
  * Quadlet: RemapUsers documentation fixes
  * speed up image listing
  * vendor containers/common@e27c30ee9b1b
  * fix volume-plugin-test flake
  * Document building Podman remote on Windows hosts
  * test/e2e: gpg keep stdout/err attached
  * auto-update: stop+start instead of restart sytemd units
  * [CI:DOCS] Improve basic tutorial
  * Update docs/source/markdown/podman-network.1.md
  * Add debug to --wait test
  * fix slirp4netns resolv.conf ip with a userns
  * Quadlet: add support for keep-id with mapping values
  * Quadlet E2E test - run quadlet as user generator
  * sqlite: do not `Ping()` after connecting
  * Quadlet - treat paths starting with systemd specifiers as absolute
  * Update docs/source/markdown/podman-kube-play.1.md.in
  * system tests: use CONTAINERS_CONF_OVERRIDE
  * implement podman machine set for hyperv
  * [CI:DOCS] Add network subnets info to network man page
  * CI: retry the golangci install
  * system tests: fix racey sdnotify test
  * hyperv: lookup machine on local filesystem first
  * fix os.IsNotExist() CI check
  * Ensure that SQLite state handles name-ID collisions
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * build(deps): bump github.com/onsi/gomega from 1.27.4 to 1.27.5
  * Fix a race around SQLite DB config validation
  * add CONTAINERS_CONF_OVERRIDE
  * vendor containers/common@main
  * docs: minor grammar fix in `--volume` description
  * sqlite: do not use shared cache
  * test: podman checkpoint/restore the latest container
  * stats compat API: return "id" lowercase
  * Run make codespell
  * Drop SQLite max connections
  * sqlite: set connection attributes on open
  * Fix database locked errors with SQLite
  * quadlet tests: skip on RHEL8 rootless
  * Kube Play Doc: Document the support for K8S Secret
  * New ulimit test: bump up minimum nfiles
  * logformatter: hide --db-backend, and friendlyize quadlet
  * Quadlet - add support for relative path in Volume key in .container file
  * Add service ctr cleanup to PlayKubeDown
  * fix --health-on-failure=restart in transient unit
  * Quadlet Doc: Suggest the kill operation for HealthOnFailure
  * Quadlet - Add support for health checks configuration in .container files
  * Makefile: allow specifying /lib dir location
  * Fix option --opts -&gt; --opt
  * basic hypverv machine implementation
  * Fix SQLite DB schema migration code
  * Add support for oom_score_adj value from containers.conf
  * Use default_ulimits field in containers.conf
  * CI: test and confirm DESIRED_DATABASE
  * build(deps): bump github.com/openshift/imagebuilder
  * logformatter: futureproof output filename
  * Vendor in latest containers/(storage, common, image)
  * build(deps): bump google.golang.org/protobuf from 1.29.0 to 1.30.0
  * test/system/255-auto-update.bats: add debug logs
  * Revert "Revert "pasta: Use two connections instead of three in TCP range forward tests""
  * Add information for secret inspect
  * Add format to podman volume ls
  * Add format to podman volume inspect
  * Add format to podman secret ls
  * Add format to podman system df
  * Add format to podman machine info
  * Add format table to podman image inspect man page
  * Cirrus: Store podman machine benchmark data
  * Update Cirrus display names, and fix get-ci-vm script
  * Ensure SQLite places uses the runroot in transient mode
  * Fix various integration test issues with SQLite state
  * Remove test for pod/container name global uniqueness
  * Improve handling of existing container names in SQLite
  * Add SQLite job to CI
  * buildah treadmill: also run rootless tests
  * build(deps): bump github.com/vbatts/git-validation in /test/tools
  * auto update: return restart error
  * fix: Document removing anonymous volumes
  * events: no duplicates when streaming during a log rotation
  * Add search --cert-dir, --creds
  * podman-mac-helper: exit 1 on error
  * system service --log-level=trace: support hijack
  * test/system: fix wait_for_port() to wait for bind
  * cgroupns: private cgroupns on cgroupv1 breaks --systemd
  * libpod: remove error stutter
  * podman events: unhide --stream
  * test/system/255-auto-update.bats: multiple services
  * 255-auto-update.bats: turn off rollback where needed
  * Use append() to add elements to a slice
  * Revert "pasta: Use two connections instead of three in TCP range forward tests"
  * Support running nested SELinux container separation
  * bud tests: rootless remote: use correct socket path
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.2.1 to 8.3.0
  * compat: /auth: parse server address correctly
  * docs: fix cmd `set DOCKER_HOST` suggestion
  * test: reenable idmap test
  * Must use mountlabel when creating builtin volumes
  * podman.spec.rpkg: distro conditionals for modulesloaddir
  * build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.29.0
  * podman inspect list network when using --net=host or none
  * pasta: Re-enable "Local forwarder, IPv4" test, accept NXDOMAIN as response
  * build(deps): bump golang.org/x/tools from 0.6.0 to 0.7.0 in /test/tools
  * CI: Switch to c20230307t192532z-f37f36d12 images
  * Cirrus: Run system &amp; integration tests in parallel
  * Update checkpointctl v0.1.0
  * Quadlet: add support for setting --ip and --ip6
  * build(deps): bump golang.org/x/net from 0.7.0 to 0.8.0
  * build(deps): bump golang.org/x/sys from 0.5.0 to 0.6.0
  * libpod: avoid nil pointer dereference in (*Container).Cleanup
  * [CI:DOCS] Add image not found info to troubleshooting
  * cmd: do not require userns for "version"
  * cmd: drop special handling for "scp"
  * cmd: clarify meaning of ParentNSRequired
  * Fix package restore
  * [CI:DOCS] Fix docs/version-check always requesting updates
  * sqlite: add a hidden --db-backend flag
  * fix: update the default machine value when the previously set default machine is deleted
  * podman machine: Adjust Chrony makestep config
  * sqlite: add container short ID to network aliases
  * sqlite: remove dead code
  * sqlite: addContainer: add named volume only once
  * sqlite: implement RewriteVolumeConfig
  * sqlite: LookupVolume: fix partial name match
  * sqlite: LookupVolume: wrap error
  * sqlite: fix type rewriting container config
  * sqlite: return correct error on pod-name conflict
  * sqlite: RewritePodConfig: update error message
  * test/system/255-auto-update.bats: wait 10 for update to finish
  * auto-update test: wait for service to be ready
  * Vendor in latest containers/(common, storage, image)
  * play kube: Add --wait option
  * Cirrus: Fix git config permission denied
  * Quadlet: Add support for the Mount key in .container files
  * build(deps): bump github.com/onsi/gomega from 1.27.1 to 1.27.2
  * fix "podman logs --since --follow" flake
  * Clarify that replicas are ignored in kubernetes deployment
  * Revert "Skip all pasta tests"
  * CI: Switch to c20230223t153813z-f37f36d12 images
  * Fix user socket path
  * pkginstaller: bump Qemu to version 7.2.0
  * Cirrus: Fix bud tests failing to apply patches
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2
  * build(deps): bump github.com/coreos/stream-metadata-go
  * Vendor in latest containers/storage
  * buildah-bud tests: don't sudo when rootless is desired
  * Temporarily disable version-check
  * CI: new rootless buildah-bud tests (cron only)
  * sqlite: fix volume lookups with partial names
  * sqlite: fix container lookups with partial IDs
  * sqlite: fix LookupPod
  * sqlite: fix pod create/rm
  * sqlite: LookupContainer: update error message
  * sqlite: AddContainerExitCode: allow to replace
  * system: add warning when running rootless on cgroupv1
  * sqlite: fix AllContainers with state
  * sqlite: fix "UPDATE TABLE" typos
  * sqlite: SaveVolume: fix syntax error updating the volumes table
  * sqlite: exit code: allow -1
  * sqlite: fix typo when removing exec sessions
  * sqlite: AllContainers: fix inner join
  * sqlite: move migration after table creation
  * sqlite: implement pod methods
  * Quadlet - use the default runtime
  * docs: context is not optional for build
  * Fix an incorrect comment on NewSqliteState
  * Add support for containers.conf database setting
  * Add support for volume operations to SQLite state
  * Implement exec session handling in SQL database
  * Various fixes from code review
  * Remove `--namespace` flag from Podman root
  * Get E2E tests to pass
  * Implement network disconnect for SQLite state
  * Implement Network Connect/Modify for SQLite state
  * Fix various lint issues
  * Some further work on SQLite state
  * Remove concept of Namespaces from BoltDB
  * Add initial SQLite-backed state implementation
  * Cirrus: Support runc testing on debian VMs
  * Skip all pasta tests
  * Skip buildah-bud test
  * Skip buildx test with VFS podman storage driver
  * Skip 'podman kube --network' test for rootless CGv1
  * Skip tests which fail with CGv1 &amp; runc
  * Skip rootless CGv1 quadlet tests due to issue
  * Makefile: Define SHELL
  * Machine refactor for QEMU/AppleHV
  * machine refactoring preparations for hyperv
  * [CI:BUILD] spec.rpkg: trim dependency list
  * Logs follow-until tests: loosen checks
  * [CI:DOCS] Windows/Mac docs link update
  * Doc update for docker network options via CLI
  * compat API: network create return 409 for duplicate
  * Apply suggestions to man page
  * vendor c/common@852ca05a1fbb
  * Quadlet: Add support for LogDriver key in container and kube units
  * machine refactoring preparations for hyperv
  * libpod: always use direct mapping
  * netavark: only use aardvark ip as nameserver
  * build(deps): bump github.com/container-orchestrated-devices/container-device-interface
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * make docs: sanity check for broken man pages
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.6 to 8.2.0
  * build(deps): bump github.com/onsi/gomega from 1.27.0 to 1.27.1
  * kube: rm secret on down, print secret on play
  * Fix spacing typo that triggered OCD &amp; indent units in podman-systemd.unit(5)
  * Update remote_client.md
  * [CI:DOCS] Add restriction to option README
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * build(deps): bump github.com/onsi/gomega from 1.26.0 to 1.27.0
  * kube play: only enforce passthrough in Quadlet
  * journald: remove initializeJournal()
  * auto-update: support pods
  * Emergency fix for man pages: check for broken includes
  * System tests: assert(): friendlier failure messages
  * Cirrus: Fix version-check to only run on `main` job
  * CI: Temporarily disable all AWS EC2-based tasks
  * build(deps): bump github.com/containerd/containerd from 1.6.16 to 1.6.18
  * volume,container: chroot to source before exporting content
  * Support sysctl configs via podman kube play
  * [CI:BUILD] copr: podman.spec.rpkg cleanups
  * quadlet system tests: add useful defaults, logging
  * libpod: support relative positions for idmaps
  * Experimental workaround for cdn03.quay.io flake
  * system tests: prevent leading tabs
  * Introduce podman machine os apply
  * create: add support for --group-entry
  * fix != filter in volume prune
  * Allow specification of podman --remote build -f -
  * Quadlet use crun specified in containers.conf
  * build(deps): bump golang.org/x/net from 0.6.0 to 0.7.0
  * Vendor c/image after https://github.com/containers/image/pull/1847
  * Don't set hostPort when generating a service
  * man page --format xref: tighten the autocompletion check
  * add support for limiting tmpfs size for systemd-specific mnts
  * build(deps): bump golang.org/x/text from 0.6.0 to 0.7.0
  * Add ulimit annotation to kube gen &amp; play
  * man page xref: validate displayed man page names
  * quadlet: add ExecStop
  * install sigproxy before start/attach
  * build(deps): bump golang.org/x/tools from 0.5.0 to 0.6.0 in /test/tools
  * Fix typos
  * Cirrus: Make benchmarks .env file easier to load
  * Cirrus: Omit functions in env. file
  * kube play: set service container as main PID when possible
  * Fix typos. Improve language.
  * events + container inspect test: RHEL fixes
  * Add ctrName to network alias during kube play
  * Run codespell on codebase
  * podman image scp: added identity for ssh.Exec
  * [CI:DOCS] Clarify nomap constrains
  * [CI:DOCS] man-page checker: include --format (Go templates)
  * Vendor c/image after https://github.com/containers/image/pull/1816
  * [CI:DOCS] Cleanup some man pages to display options with line breaks
  * [CI:DOCS] Add tables to podman-systemd.unit man page
  * github: remove prefix from bugs/features
  * Quadlet: Add support for the Secret key in Container group
  * [CI:DOCS] OWNERS: add @ygalblum and @alexlarsson
  * build(deps): bump golang.org/x/term from 0.4.0 to 0.5.0
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.1.6
  * Sort quadlet keys to make it easier to read
  * e2e: fix some tests on remote
  * kube play: do not teardown unconditionally on error
  * Fix typos in comments
  * Resolve symlink path for qemu directory if possible
  * #17363 Fix contradicting documentation podman-commit
  * Fix a potential UID/GID collision in unit tests
  * golangci-lint: show all errors at once
  * update golangci-lint to version 1.51.1
  * [CI:DOCS] events: document journald identifiers
  * Quadlet: exit 0 when there are no files to process
  * network ls: handle removed container
  * e2e: adapt play kube test on remote rootless
  * docs/podman-systemd.unit: Explicitely mention network &amp; kube units
  * docs/podman-systemd.unit: Update example to work out of the box
  * [CI:BUILD] Cirrus: Fix GraphQL ownerRepository:null error
  * Add missing return after errors
  * Revert "Cirrus: Emergency fix to un-stuck PRs"
  * pasta: Fix ICMPv6 Echo test, skip it for the moment
  * pasta: Fix ICMP Echo Request (IPv4) test
  * pasta: Use two connections instead of three in TCP range forward tests
  * Add SELinux label types support to quadlet
  * Add quadlet support for rootfs= containers
  * Cirrus: Emergency fix to un-stuck PRs
  * Move clean-binaries before podman-remote in podman-remote-docs target
  * oci: bind mount /sys with --userns=(auto|pod:)
  * Cleanup podman-systemd.unit file
  * Install podman-systemd.unit  man page, make quadlet discoverable
  * libpod: allow userns=keep-id for root
  * system-reset: use CleanCacheMount to clear build cache
  * vendor: bump buildah to v1.29.1-0.20230201192322-e56eb25575c7
  * system tests: fix noexistent labels test in the remote
  * Expose Podman named pipe in Inspect output
  * libpod: support idmap for --rootfs
  * test: adapt test to work on cgroupv1
  * Bump to v4.5.0-dev
  * Update main to reflect v4.4.0 release
  * Update from /github.com/vbauerster/mpb/v7 to /v8
  * hack/perf: cleanup after benchmarks
  * hack/perf/bz-2162111.sh: use custom network
  * Update bug_report.yaml
  * Handle filetype field in kubernetes.yaml files
  * hack/perf/bz-2162111.sh: measure stop
  * make hack/markdown-preprocess parallel-safe
  * system tests: fix volume exec/noexec test
  * system tests: minor fix for RHEL8 incompatibility
  * Cirrus: Use versionable IMAGE_SUFFIX
  * utils: new conversion method
  * libpod: use GraphRoot for overlay upper dir
  * vendor: update containers/storage
  * Do not mount /dev/tty into rootless containers
  * build(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7
  * e2e: fix run_staticip_test about no_proxy
  * docs: specify order preference for FROM
  * Fixes port collision issue on use of --publish-all
  * Support for Windows paths in the source position of the volume mounts
  * e2e tests: fix incorrect os.User.Name
  * Log data that we failed to unmarshal
  * [CI:DOCS] hack/perf: add script for BZ 216111
  * container rm: save once for exec removal and state change
  * [DOCS:CI] podman-events: document verbose create events
  * e2e: Avoid hard-coding included in quadlet test
  * e2e: Avoid hard-coding ImageCacheDir
  * Making gvproxy.exe optional for building Windows installer
  * Add gvproxy to Windows packages
  * Add comment to clarify error handling intention
  * fix #17244: use /etc/timezone where `timedatectl` is missing on Linux
  * Fix usage of absolute windows paths with --image-path
  * Match VT device paths to be blocked from mounting exactly
  * Fix default handling of pids-limit
  * Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml)
  * journald: podman logs only show logs for current user
  * journald: podman events only show events for current user
  * e2e: Remove the cache with "podman unshare rm" when a rootless user
  * Clean up more language for inclusiveness
  * e2e: Remove some directories at SynchronizedAfterSuite
  * fix: don't output "ago" when container is currently up and running
  * fix: running check error when podman is default in wsl
  * fix CI: test fail due to merge
  * Bump Bulidah to v1.29.0
  * e2e: reduce dependency on /tmp for e2e tests
  * Bump cirrus image with easier dependency management
  * quadlet: Add device support for .volume files
  * remote,build: error if containerignore is symlink
  * DB: make loading container states optional
  * ps: do not sync container
  * Set runAsNonRoot=true in gen kube
  * WSL refactoring
  * kube-play: add support for HostIPC in pod.Spec
  * Allow --device-cgroup-rule to be passed in by docker API</changelog>
  <changelog author="danish.prakash@suse.com" date="1685361600">- Update to version 4.5.1:
  * Release v4.5.1
  * [CI:DOCS] Final release notes for v4.5.1
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * Revert "Resolve symlink path for qemu directory if possible"
  * no need for podman-next rpm test on maint branch
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * network create/update: allow dns servers comma separated
  * machine: fix default connection URL to use 127.0.0.1
  * compat: accept tag in /images/create?fromSrc
  * compat container create: match duplicate mounts correctly
  * machine: qemu only remove connection after confirmation
  * windows: podman save allow the use of stdout
  * remote: exec inspect update exec session status
  * podman-remote logs: handle server error correctly
  * libpod: stop containers with --restart=always
  * Do not include image annotations when building spec
  * [v4.5] system tests: fix race in kube-play read-only
  * api: fix parsing filters
  * Support systemd optional prefix '-' for devices.
  * *: migrate image registry to registry.k8s.io
  * Makefile: include `release-artifacts` target
  * [CI:BUILD] Packit: Initial Enablement
  * Bump to v4.5.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
</package>
<package pkgid="c159f38bcd4233b6b45c2797bc3b5aa57cad921b70280eabaf4041a6146bf0bc" name="podman" arch="aarch64">
  <version epoch="0" ver="4.8.3" rel="150500.3.6.1"/>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
</package>
<package pkgid="54cc0e705ba8c63f74346007172ce7c9820e2b24e306c85346e0e28548bb2989" name="podman" arch="ppc64le">
  <version epoch="0" ver="4.8.3" rel="150500.3.6.1"/>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
</package>
<package pkgid="b5b1e7ab9fdb9b1cedc1dd5658a3d75e4a8956b8a3115a6c97c8b636dcc27d34" name="podman" arch="s390x">
  <version epoch="0" ver="4.8.3" rel="150500.3.6.1"/>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
</package>
<package pkgid="c38f7a6c8a735591f9fdd2bd445d8979e098856bd8b990bc38be1d2f666868fa" name="podman" arch="src">
  <version epoch="0" ver="4.8.3" rel="150500.3.6.1"/>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
</package>
<package pkgid="0bfb1a043a9e6fac53b33c17458378a3168e10d75f37dd28dfd7c6115801173e" name="podman" arch="x86_64">
  <version epoch="0" ver="4.8.3" rel="150500.3.6.1"/>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
</package>
<package pkgid="302702d3512f309cbd0bca9035c0d1468287ef2fe92031762f5414032ae43470" name="podman" arch="aarch64">
  <version epoch="0" ver="4.8.3" rel="150500.3.9.1"/>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1710849600">- Add patch for CVE-2024-1753 (bsc#1221677):
  0001-CVE-2024-1753-container-escape-fix.patch</changelog>
</package>
<package pkgid="44402375f58ba10ec665a25b0dd2a5483660a59f26bc501566d2ada80fbb844f" name="podman" arch="ppc64le">
  <version epoch="0" ver="4.8.3" rel="150500.3.9.1"/>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1710849600">- Add patch for CVE-2024-1753 (bsc#1221677):
  0001-CVE-2024-1753-container-escape-fix.patch</changelog>
</package>
<package pkgid="e37a4963ed51e1e03b8fe00358972b2386ff255ea6911e50758f67a0c7c7c2c1" name="podman" arch="s390x">
  <version epoch="0" ver="4.8.3" rel="150500.3.9.1"/>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1710849600">- Add patch for CVE-2024-1753 (bsc#1221677):
  0001-CVE-2024-1753-container-escape-fix.patch</changelog>
</package>
<package pkgid="044bb9ff753d34b8fc48043364086d9376761ace0fcabbe85465fe05096173cf" name="podman" arch="src">
  <version epoch="0" ver="4.8.3" rel="150500.3.9.1"/>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1710849600">- Add patch for CVE-2024-1753 (bsc#1221677):
  0001-CVE-2024-1753-container-escape-fix.patch</changelog>
</package>
<package pkgid="930dc7d01fd5448c6c97f8fd0c42f11f94e144a3d08125ac0df900b9d9cbd7c4" name="podman" arch="x86_64">
  <version epoch="0" ver="4.8.3" rel="150500.3.9.1"/>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1710849600">- Add patch for CVE-2024-1753 (bsc#1221677):
  0001-CVE-2024-1753-container-escape-fix.patch</changelog>
</package>
<package pkgid="7807362e7604bd017544b96d56f52f01ccea7dcf4082afc49549a6cb907847e6" name="podman" arch="aarch64">
  <version epoch="0" ver="4.9.5" rel="150500.3.12.1"/>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1710849600">- Add patch for CVE-2024-1753 (bsc#1221677):
  0001-CVE-2024-1753-container-escape-fix.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1717761600">- Remove upstreamed patches:
  - 0001-CVE-2024-1753-container-escape-fix.patch
- Update to version 4.9.5:
  * Bump to v4.9.5
  * Update release notes for v4.9.5
  * fix "concurrent map writes" in network ls compat endpoint
  * [v4.9] Fix for CVE-2024-3727 (bsc#1224122)
  * Disable failing bud test
  * CI Maintenance: Disable machine tests
  * [CI:DOCS] Allow downgrade of WiX
  * [CI:DOCS] Force WiX 3.11
  * [CI:DOCS] Fix windows installer action
  * Bump to v4.9.5-dev
  * Bump to v4.9.4
  * Update release notes for v4.9.4
  * [v4.9] Bump Buildah to v1.33.7, CVE-2024-1753, CVE-2024-24786 (bsc#1226136)
  * Add farm command to commands list
  * Bump to FreeBSD 13.3 (13.2 vanished)
  * Update health-start-periods docs
  * Don't update health check status during initialDelaySeconds
  * image scp: don't require port for ssh URL
  * Ignore docker's end point config when the final network mode isn't bridge.
  * Fix running container from docker client with rootful in rootless podman.
  * [skip-ci] Packit: remove koji and bodhi tasks for v4.9
  * Bump to v4.9.4-dev
  * Bump to v4.9.3
  * Release notes for v4.9.3
  * Remove gitleaks scanning
  * [v4.9] [skip-ci] packit: update fedora downstream branches
  * @@option volume.image: be specific that -v only affects RUN
  * Accept a config blob alongside the "changes" slice when committing
  * container create: use ParseUserNamespace to parse a user namespace setting
  * Bump to v4.9.3-dev
  * Bump to v4.9.2
  * Release notes for v4.9.2
  * Cirrus: Update operating branch
  * [v4.9] Bump to c/common v0.57.4, buildkit v0.12.5, c/buidah v1.33.5
  * Fix updated runc dep breaking pod devices cgroup
  * systests: kube with policies test: fix race
  * Remove go.mod pin of runc and update to latest
  * systests: kube with policies test: fix race
  * Bump to v4.9.2-dev
  * Bump to v4.9.1
  * Release notes for v4.9.1
  * [v4.9] Bump Buildah to v1.33.4, c/common v0.57.3, c/image v5.29.2
  * pkginstaller: bump Qemu version to 8.2.1
  * Assign separate ports for each appleHV machine
  * Fix machine inspect test config
  * AppleHV: update LastUp time
  * applehv: return socket path from setupAPIForwarding
  * applehv: Remove unneeded cmd.ExtraFiles assignment
  * abi: drop check for IsRootless()
  * system: enhance check for re-exec into rootless userns
  * system: enhance check for re-exec into rootless userns
  * Fix `podman machine set --rootful` for applehv
  * applehv - fix vm lookup
  * rpm: use go-rpm-macros on RHEL 10
  * Bump to v4.9.1-dev
  * Bump to v4.9.0
  * Fix a small grammar error in RELEASE_NOTES.md
  * Fix push endpoint stream
  * Finalized release notes for v4.9.0
  * farm build: push built images to registry
  * Move the --farm flag to farm build command
  * Clean up farm-build miscommit
  * [CI:DOCS] Add podman farm build doc
  * Add release notes for v4.9.0
  * gvproxy: Update to 0.7.2 release
  * [v4.9] Bump Buildah to v1.33.3, c/common to v0.57.2, c/image to v5.29.1
  * Add a net health recovery service to Qemu machines
  * Set up podman machine remote user correctly
  * Remove Libpod special-init conditions
  * Fix `podman system reset` with external containers
  * [v4.8] podman kube play: fix broken annotation parsing
  * feat: disable pid max in the podman machine
  * systests: cp: add wait_for_ready
  * System tests: fixes for RHEL8 gating failures
  * Add API forwarding support for HyperV
  * bump to v4.8.4-dev</changelog>
</package>
<package pkgid="d140102c6fa01e98b6a891d48675b7085e71f9f21b0f7d5f29ee4119501eccbb" name="podman" arch="ppc64le">
  <version epoch="0" ver="4.9.5" rel="150500.3.12.1"/>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1710849600">- Add patch for CVE-2024-1753 (bsc#1221677):
  0001-CVE-2024-1753-container-escape-fix.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1717761600">- Remove upstreamed patches:
  - 0001-CVE-2024-1753-container-escape-fix.patch
- Update to version 4.9.5:
  * Bump to v4.9.5
  * Update release notes for v4.9.5
  * fix "concurrent map writes" in network ls compat endpoint
  * [v4.9] Fix for CVE-2024-3727 (bsc#1224122)
  * Disable failing bud test
  * CI Maintenance: Disable machine tests
  * [CI:DOCS] Allow downgrade of WiX
  * [CI:DOCS] Force WiX 3.11
  * [CI:DOCS] Fix windows installer action
  * Bump to v4.9.5-dev
  * Bump to v4.9.4
  * Update release notes for v4.9.4
  * [v4.9] Bump Buildah to v1.33.7, CVE-2024-1753, CVE-2024-24786 (bsc#1226136)
  * Add farm command to commands list
  * Bump to FreeBSD 13.3 (13.2 vanished)
  * Update health-start-periods docs
  * Don't update health check status during initialDelaySeconds
  * image scp: don't require port for ssh URL
  * Ignore docker's end point config when the final network mode isn't bridge.
  * Fix running container from docker client with rootful in rootless podman.
  * [skip-ci] Packit: remove koji and bodhi tasks for v4.9
  * Bump to v4.9.4-dev
  * Bump to v4.9.3
  * Release notes for v4.9.3
  * Remove gitleaks scanning
  * [v4.9] [skip-ci] packit: update fedora downstream branches
  * @@option volume.image: be specific that -v only affects RUN
  * Accept a config blob alongside the "changes" slice when committing
  * container create: use ParseUserNamespace to parse a user namespace setting
  * Bump to v4.9.3-dev
  * Bump to v4.9.2
  * Release notes for v4.9.2
  * Cirrus: Update operating branch
  * [v4.9] Bump to c/common v0.57.4, buildkit v0.12.5, c/buidah v1.33.5
  * Fix updated runc dep breaking pod devices cgroup
  * systests: kube with policies test: fix race
  * Remove go.mod pin of runc and update to latest
  * systests: kube with policies test: fix race
  * Bump to v4.9.2-dev
  * Bump to v4.9.1
  * Release notes for v4.9.1
  * [v4.9] Bump Buildah to v1.33.4, c/common v0.57.3, c/image v5.29.2
  * pkginstaller: bump Qemu version to 8.2.1
  * Assign separate ports for each appleHV machine
  * Fix machine inspect test config
  * AppleHV: update LastUp time
  * applehv: return socket path from setupAPIForwarding
  * applehv: Remove unneeded cmd.ExtraFiles assignment
  * abi: drop check for IsRootless()
  * system: enhance check for re-exec into rootless userns
  * system: enhance check for re-exec into rootless userns
  * Fix `podman machine set --rootful` for applehv
  * applehv - fix vm lookup
  * rpm: use go-rpm-macros on RHEL 10
  * Bump to v4.9.1-dev
  * Bump to v4.9.0
  * Fix a small grammar error in RELEASE_NOTES.md
  * Fix push endpoint stream
  * Finalized release notes for v4.9.0
  * farm build: push built images to registry
  * Move the --farm flag to farm build command
  * Clean up farm-build miscommit
  * [CI:DOCS] Add podman farm build doc
  * Add release notes for v4.9.0
  * gvproxy: Update to 0.7.2 release
  * [v4.9] Bump Buildah to v1.33.3, c/common to v0.57.2, c/image to v5.29.1
  * Add a net health recovery service to Qemu machines
  * Set up podman machine remote user correctly
  * Remove Libpod special-init conditions
  * Fix `podman system reset` with external containers
  * [v4.8] podman kube play: fix broken annotation parsing
  * feat: disable pid max in the podman machine
  * systests: cp: add wait_for_ready
  * System tests: fixes for RHEL8 gating failures
  * Add API forwarding support for HyperV
  * bump to v4.8.4-dev</changelog>
</package>
<package pkgid="b4c7b359129300eafc204476b3842412d3c1ac675db0fa66951a1f54e66528ac" name="podman" arch="s390x">
  <version epoch="0" ver="4.9.5" rel="150500.3.12.1"/>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1710849600">- Add patch for CVE-2024-1753 (bsc#1221677):
  0001-CVE-2024-1753-container-escape-fix.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1717761600">- Remove upstreamed patches:
  - 0001-CVE-2024-1753-container-escape-fix.patch
- Update to version 4.9.5:
  * Bump to v4.9.5
  * Update release notes for v4.9.5
  * fix "concurrent map writes" in network ls compat endpoint
  * [v4.9] Fix for CVE-2024-3727 (bsc#1224122)
  * Disable failing bud test
  * CI Maintenance: Disable machine tests
  * [CI:DOCS] Allow downgrade of WiX
  * [CI:DOCS] Force WiX 3.11
  * [CI:DOCS] Fix windows installer action
  * Bump to v4.9.5-dev
  * Bump to v4.9.4
  * Update release notes for v4.9.4
  * [v4.9] Bump Buildah to v1.33.7, CVE-2024-1753, CVE-2024-24786 (bsc#1226136)
  * Add farm command to commands list
  * Bump to FreeBSD 13.3 (13.2 vanished)
  * Update health-start-periods docs
  * Don't update health check status during initialDelaySeconds
  * image scp: don't require port for ssh URL
  * Ignore docker's end point config when the final network mode isn't bridge.
  * Fix running container from docker client with rootful in rootless podman.
  * [skip-ci] Packit: remove koji and bodhi tasks for v4.9
  * Bump to v4.9.4-dev
  * Bump to v4.9.3
  * Release notes for v4.9.3
  * Remove gitleaks scanning
  * [v4.9] [skip-ci] packit: update fedora downstream branches
  * @@option volume.image: be specific that -v only affects RUN
  * Accept a config blob alongside the "changes" slice when committing
  * container create: use ParseUserNamespace to parse a user namespace setting
  * Bump to v4.9.3-dev
  * Bump to v4.9.2
  * Release notes for v4.9.2
  * Cirrus: Update operating branch
  * [v4.9] Bump to c/common v0.57.4, buildkit v0.12.5, c/buidah v1.33.5
  * Fix updated runc dep breaking pod devices cgroup
  * systests: kube with policies test: fix race
  * Remove go.mod pin of runc and update to latest
  * systests: kube with policies test: fix race
  * Bump to v4.9.2-dev
  * Bump to v4.9.1
  * Release notes for v4.9.1
  * [v4.9] Bump Buildah to v1.33.4, c/common v0.57.3, c/image v5.29.2
  * pkginstaller: bump Qemu version to 8.2.1
  * Assign separate ports for each appleHV machine
  * Fix machine inspect test config
  * AppleHV: update LastUp time
  * applehv: return socket path from setupAPIForwarding
  * applehv: Remove unneeded cmd.ExtraFiles assignment
  * abi: drop check for IsRootless()
  * system: enhance check for re-exec into rootless userns
  * system: enhance check for re-exec into rootless userns
  * Fix `podman machine set --rootful` for applehv
  * applehv - fix vm lookup
  * rpm: use go-rpm-macros on RHEL 10
  * Bump to v4.9.1-dev
  * Bump to v4.9.0
  * Fix a small grammar error in RELEASE_NOTES.md
  * Fix push endpoint stream
  * Finalized release notes for v4.9.0
  * farm build: push built images to registry
  * Move the --farm flag to farm build command
  * Clean up farm-build miscommit
  * [CI:DOCS] Add podman farm build doc
  * Add release notes for v4.9.0
  * gvproxy: Update to 0.7.2 release
  * [v4.9] Bump Buildah to v1.33.3, c/common to v0.57.2, c/image to v5.29.1
  * Add a net health recovery service to Qemu machines
  * Set up podman machine remote user correctly
  * Remove Libpod special-init conditions
  * Fix `podman system reset` with external containers
  * [v4.8] podman kube play: fix broken annotation parsing
  * feat: disable pid max in the podman machine
  * systests: cp: add wait_for_ready
  * System tests: fixes for RHEL8 gating failures
  * Add API forwarding support for HyperV
  * bump to v4.8.4-dev</changelog>
</package>
<package pkgid="ecb0014e04007a77cd75bc1f33a2948a8bdd70b825afc04592b8967e0d36b2f8" name="podman" arch="src">
  <version epoch="0" ver="4.9.5" rel="150500.3.12.1"/>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1710849600">- Add patch for CVE-2024-1753 (bsc#1221677):
  0001-CVE-2024-1753-container-escape-fix.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1717761600">- Remove upstreamed patches:
  - 0001-CVE-2024-1753-container-escape-fix.patch
- Update to version 4.9.5:
  * Bump to v4.9.5
  * Update release notes for v4.9.5
  * fix "concurrent map writes" in network ls compat endpoint
  * [v4.9] Fix for CVE-2024-3727 (bsc#1224122)
  * Disable failing bud test
  * CI Maintenance: Disable machine tests
  * [CI:DOCS] Allow downgrade of WiX
  * [CI:DOCS] Force WiX 3.11
  * [CI:DOCS] Fix windows installer action
  * Bump to v4.9.5-dev
  * Bump to v4.9.4
  * Update release notes for v4.9.4
  * [v4.9] Bump Buildah to v1.33.7, CVE-2024-1753, CVE-2024-24786 (bsc#1226136)
  * Add farm command to commands list
  * Bump to FreeBSD 13.3 (13.2 vanished)
  * Update health-start-periods docs
  * Don't update health check status during initialDelaySeconds
  * image scp: don't require port for ssh URL
  * Ignore docker's end point config when the final network mode isn't bridge.
  * Fix running container from docker client with rootful in rootless podman.
  * [skip-ci] Packit: remove koji and bodhi tasks for v4.9
  * Bump to v4.9.4-dev
  * Bump to v4.9.3
  * Release notes for v4.9.3
  * Remove gitleaks scanning
  * [v4.9] [skip-ci] packit: update fedora downstream branches
  * @@option volume.image: be specific that -v only affects RUN
  * Accept a config blob alongside the "changes" slice when committing
  * container create: use ParseUserNamespace to parse a user namespace setting
  * Bump to v4.9.3-dev
  * Bump to v4.9.2
  * Release notes for v4.9.2
  * Cirrus: Update operating branch
  * [v4.9] Bump to c/common v0.57.4, buildkit v0.12.5, c/buidah v1.33.5
  * Fix updated runc dep breaking pod devices cgroup
  * systests: kube with policies test: fix race
  * Remove go.mod pin of runc and update to latest
  * systests: kube with policies test: fix race
  * Bump to v4.9.2-dev
  * Bump to v4.9.1
  * Release notes for v4.9.1
  * [v4.9] Bump Buildah to v1.33.4, c/common v0.57.3, c/image v5.29.2
  * pkginstaller: bump Qemu version to 8.2.1
  * Assign separate ports for each appleHV machine
  * Fix machine inspect test config
  * AppleHV: update LastUp time
  * applehv: return socket path from setupAPIForwarding
  * applehv: Remove unneeded cmd.ExtraFiles assignment
  * abi: drop check for IsRootless()
  * system: enhance check for re-exec into rootless userns
  * system: enhance check for re-exec into rootless userns
  * Fix `podman machine set --rootful` for applehv
  * applehv - fix vm lookup
  * rpm: use go-rpm-macros on RHEL 10
  * Bump to v4.9.1-dev
  * Bump to v4.9.0
  * Fix a small grammar error in RELEASE_NOTES.md
  * Fix push endpoint stream
  * Finalized release notes for v4.9.0
  * farm build: push built images to registry
  * Move the --farm flag to farm build command
  * Clean up farm-build miscommit
  * [CI:DOCS] Add podman farm build doc
  * Add release notes for v4.9.0
  * gvproxy: Update to 0.7.2 release
  * [v4.9] Bump Buildah to v1.33.3, c/common to v0.57.2, c/image to v5.29.1
  * Add a net health recovery service to Qemu machines
  * Set up podman machine remote user correctly
  * Remove Libpod special-init conditions
  * Fix `podman system reset` with external containers
  * [v4.8] podman kube play: fix broken annotation parsing
  * feat: disable pid max in the podman machine
  * systests: cp: add wait_for_ready
  * System tests: fixes for RHEL8 gating failures
  * Add API forwarding support for HyperV
  * bump to v4.8.4-dev</changelog>
</package>
<package pkgid="b322ec8a6cd478bc9a5543763bb3e5970d9dce2a5712c94f1c35738ed31b24d0" name="podman" arch="x86_64">
  <version epoch="0" ver="4.9.5" rel="150500.3.12.1"/>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1710849600">- Add patch for CVE-2024-1753 (bsc#1221677):
  0001-CVE-2024-1753-container-escape-fix.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1717761600">- Remove upstreamed patches:
  - 0001-CVE-2024-1753-container-escape-fix.patch
- Update to version 4.9.5:
  * Bump to v4.9.5
  * Update release notes for v4.9.5
  * fix "concurrent map writes" in network ls compat endpoint
  * [v4.9] Fix for CVE-2024-3727 (bsc#1224122)
  * Disable failing bud test
  * CI Maintenance: Disable machine tests
  * [CI:DOCS] Allow downgrade of WiX
  * [CI:DOCS] Force WiX 3.11
  * [CI:DOCS] Fix windows installer action
  * Bump to v4.9.5-dev
  * Bump to v4.9.4
  * Update release notes for v4.9.4
  * [v4.9] Bump Buildah to v1.33.7, CVE-2024-1753, CVE-2024-24786 (bsc#1226136)
  * Add farm command to commands list
  * Bump to FreeBSD 13.3 (13.2 vanished)
  * Update health-start-periods docs
  * Don't update health check status during initialDelaySeconds
  * image scp: don't require port for ssh URL
  * Ignore docker's end point config when the final network mode isn't bridge.
  * Fix running container from docker client with rootful in rootless podman.
  * [skip-ci] Packit: remove koji and bodhi tasks for v4.9
  * Bump to v4.9.4-dev
  * Bump to v4.9.3
  * Release notes for v4.9.3
  * Remove gitleaks scanning
  * [v4.9] [skip-ci] packit: update fedora downstream branches
  * @@option volume.image: be specific that -v only affects RUN
  * Accept a config blob alongside the "changes" slice when committing
  * container create: use ParseUserNamespace to parse a user namespace setting
  * Bump to v4.9.3-dev
  * Bump to v4.9.2
  * Release notes for v4.9.2
  * Cirrus: Update operating branch
  * [v4.9] Bump to c/common v0.57.4, buildkit v0.12.5, c/buidah v1.33.5
  * Fix updated runc dep breaking pod devices cgroup
  * systests: kube with policies test: fix race
  * Remove go.mod pin of runc and update to latest
  * systests: kube with policies test: fix race
  * Bump to v4.9.2-dev
  * Bump to v4.9.1
  * Release notes for v4.9.1
  * [v4.9] Bump Buildah to v1.33.4, c/common v0.57.3, c/image v5.29.2
  * pkginstaller: bump Qemu version to 8.2.1
  * Assign separate ports for each appleHV machine
  * Fix machine inspect test config
  * AppleHV: update LastUp time
  * applehv: return socket path from setupAPIForwarding
  * applehv: Remove unneeded cmd.ExtraFiles assignment
  * abi: drop check for IsRootless()
  * system: enhance check for re-exec into rootless userns
  * system: enhance check for re-exec into rootless userns
  * Fix `podman machine set --rootful` for applehv
  * applehv - fix vm lookup
  * rpm: use go-rpm-macros on RHEL 10
  * Bump to v4.9.1-dev
  * Bump to v4.9.0
  * Fix a small grammar error in RELEASE_NOTES.md
  * Fix push endpoint stream
  * Finalized release notes for v4.9.0
  * farm build: push built images to registry
  * Move the --farm flag to farm build command
  * Clean up farm-build miscommit
  * [CI:DOCS] Add podman farm build doc
  * Add release notes for v4.9.0
  * gvproxy: Update to 0.7.2 release
  * [v4.9] Bump Buildah to v1.33.3, c/common to v0.57.2, c/image to v5.29.1
  * Add a net health recovery service to Qemu machines
  * Set up podman machine remote user correctly
  * Remove Libpod special-init conditions
  * Fix `podman system reset` with external containers
  * [v4.8] podman kube play: fix broken annotation parsing
  * feat: disable pid max in the podman machine
  * systests: cp: add wait_for_ready
  * System tests: fixes for RHEL8 gating failures
  * Add API forwarding support for HyperV
  * bump to v4.8.4-dev</changelog>
</package>
<package pkgid="88f6a02dbd353d7e99731fab545244e2454595925f2519b4a9ad61a037161acb" name="podman" arch="aarch64">
  <version epoch="0" ver="4.9.5" rel="150500.3.15.1"/>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1710849600">- Add patch for CVE-2024-1753 (bsc#1221677):
  0001-CVE-2024-1753-container-escape-fix.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1717761600">- Remove upstreamed patches:
  - 0001-CVE-2024-1753-container-escape-fix.patch
- Update to version 4.9.5:
  * Bump to v4.9.5
  * Update release notes for v4.9.5
  * fix "concurrent map writes" in network ls compat endpoint
  * [v4.9] Fix for CVE-2024-3727 (bsc#1224122)
  * Disable failing bud test
  * CI Maintenance: Disable machine tests
  * [CI:DOCS] Allow downgrade of WiX
  * [CI:DOCS] Force WiX 3.11
  * [CI:DOCS] Fix windows installer action
  * Bump to v4.9.5-dev
  * Bump to v4.9.4
  * Update release notes for v4.9.4
  * [v4.9] Bump Buildah to v1.33.7, CVE-2024-1753, CVE-2024-24786 (bsc#1226136)
  * Add farm command to commands list
  * Bump to FreeBSD 13.3 (13.2 vanished)
  * Update health-start-periods docs
  * Don't update health check status during initialDelaySeconds
  * image scp: don't require port for ssh URL
  * Ignore docker's end point config when the final network mode isn't bridge.
  * Fix running container from docker client with rootful in rootless podman.
  * [skip-ci] Packit: remove koji and bodhi tasks for v4.9
  * Bump to v4.9.4-dev
  * Bump to v4.9.3
  * Release notes for v4.9.3
  * Remove gitleaks scanning
  * [v4.9] [skip-ci] packit: update fedora downstream branches
  * @@option volume.image: be specific that -v only affects RUN
  * Accept a config blob alongside the "changes" slice when committing
  * container create: use ParseUserNamespace to parse a user namespace setting
  * Bump to v4.9.3-dev
  * Bump to v4.9.2
  * Release notes for v4.9.2
  * Cirrus: Update operating branch
  * [v4.9] Bump to c/common v0.57.4, buildkit v0.12.5, c/buidah v1.33.5
  * Fix updated runc dep breaking pod devices cgroup
  * systests: kube with policies test: fix race
  * Remove go.mod pin of runc and update to latest
  * systests: kube with policies test: fix race
  * Bump to v4.9.2-dev
  * Bump to v4.9.1
  * Release notes for v4.9.1
  * [v4.9] Bump Buildah to v1.33.4, c/common v0.57.3, c/image v5.29.2
  * pkginstaller: bump Qemu version to 8.2.1
  * Assign separate ports for each appleHV machine
  * Fix machine inspect test config
  * AppleHV: update LastUp time
  * applehv: return socket path from setupAPIForwarding
  * applehv: Remove unneeded cmd.ExtraFiles assignment
  * abi: drop check for IsRootless()
  * system: enhance check for re-exec into rootless userns
  * system: enhance check for re-exec into rootless userns
  * Fix `podman machine set --rootful` for applehv
  * applehv - fix vm lookup
  * rpm: use go-rpm-macros on RHEL 10
  * Bump to v4.9.1-dev
  * Bump to v4.9.0
  * Fix a small grammar error in RELEASE_NOTES.md
  * Fix push endpoint stream
  * Finalized release notes for v4.9.0
  * farm build: push built images to registry
  * Move the --farm flag to farm build command
  * Clean up farm-build miscommit
  * [CI:DOCS] Add podman farm build doc
  * Add release notes for v4.9.0
  * gvproxy: Update to 0.7.2 release
  * [v4.9] Bump Buildah to v1.33.3, c/common to v0.57.2, c/image to v5.29.1
  * Add a net health recovery service to Qemu machines
  * Set up podman machine remote user correctly
  * Remove Libpod special-init conditions
  * Fix `podman system reset` with external containers
  * [v4.8] podman kube play: fix broken annotation parsing
  * feat: disable pid max in the podman machine
  * systests: cp: add wait_for_ready
  * System tests: fixes for RHEL8 gating failures
  * Add API forwarding support for HyperV
  * bump to v4.8.4-dev</changelog>
  <changelog author="dcermak@suse.com" date="1719835200">- Add patch to fix bsc#1227052 / CVE-2024-6104:
  * 0001-Backport-fix-for-CVE-2024-6104.patch
- Add missing BuildRequires man</changelog>
</package>
<package pkgid="d5bfc959e4783783ea6171ada0c27a9444643581cca8ac877619588452043125" name="podman" arch="ppc64le">
  <version epoch="0" ver="4.9.5" rel="150500.3.15.1"/>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1710849600">- Add patch for CVE-2024-1753 (bsc#1221677):
  0001-CVE-2024-1753-container-escape-fix.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1717761600">- Remove upstreamed patches:
  - 0001-CVE-2024-1753-container-escape-fix.patch
- Update to version 4.9.5:
  * Bump to v4.9.5
  * Update release notes for v4.9.5
  * fix "concurrent map writes" in network ls compat endpoint
  * [v4.9] Fix for CVE-2024-3727 (bsc#1224122)
  * Disable failing bud test
  * CI Maintenance: Disable machine tests
  * [CI:DOCS] Allow downgrade of WiX
  * [CI:DOCS] Force WiX 3.11
  * [CI:DOCS] Fix windows installer action
  * Bump to v4.9.5-dev
  * Bump to v4.9.4
  * Update release notes for v4.9.4
  * [v4.9] Bump Buildah to v1.33.7, CVE-2024-1753, CVE-2024-24786 (bsc#1226136)
  * Add farm command to commands list
  * Bump to FreeBSD 13.3 (13.2 vanished)
  * Update health-start-periods docs
  * Don't update health check status during initialDelaySeconds
  * image scp: don't require port for ssh URL
  * Ignore docker's end point config when the final network mode isn't bridge.
  * Fix running container from docker client with rootful in rootless podman.
  * [skip-ci] Packit: remove koji and bodhi tasks for v4.9
  * Bump to v4.9.4-dev
  * Bump to v4.9.3
  * Release notes for v4.9.3
  * Remove gitleaks scanning
  * [v4.9] [skip-ci] packit: update fedora downstream branches
  * @@option volume.image: be specific that -v only affects RUN
  * Accept a config blob alongside the "changes" slice when committing
  * container create: use ParseUserNamespace to parse a user namespace setting
  * Bump to v4.9.3-dev
  * Bump to v4.9.2
  * Release notes for v4.9.2
  * Cirrus: Update operating branch
  * [v4.9] Bump to c/common v0.57.4, buildkit v0.12.5, c/buidah v1.33.5
  * Fix updated runc dep breaking pod devices cgroup
  * systests: kube with policies test: fix race
  * Remove go.mod pin of runc and update to latest
  * systests: kube with policies test: fix race
  * Bump to v4.9.2-dev
  * Bump to v4.9.1
  * Release notes for v4.9.1
  * [v4.9] Bump Buildah to v1.33.4, c/common v0.57.3, c/image v5.29.2
  * pkginstaller: bump Qemu version to 8.2.1
  * Assign separate ports for each appleHV machine
  * Fix machine inspect test config
  * AppleHV: update LastUp time
  * applehv: return socket path from setupAPIForwarding
  * applehv: Remove unneeded cmd.ExtraFiles assignment
  * abi: drop check for IsRootless()
  * system: enhance check for re-exec into rootless userns
  * system: enhance check for re-exec into rootless userns
  * Fix `podman machine set --rootful` for applehv
  * applehv - fix vm lookup
  * rpm: use go-rpm-macros on RHEL 10
  * Bump to v4.9.1-dev
  * Bump to v4.9.0
  * Fix a small grammar error in RELEASE_NOTES.md
  * Fix push endpoint stream
  * Finalized release notes for v4.9.0
  * farm build: push built images to registry
  * Move the --farm flag to farm build command
  * Clean up farm-build miscommit
  * [CI:DOCS] Add podman farm build doc
  * Add release notes for v4.9.0
  * gvproxy: Update to 0.7.2 release
  * [v4.9] Bump Buildah to v1.33.3, c/common to v0.57.2, c/image to v5.29.1
  * Add a net health recovery service to Qemu machines
  * Set up podman machine remote user correctly
  * Remove Libpod special-init conditions
  * Fix `podman system reset` with external containers
  * [v4.8] podman kube play: fix broken annotation parsing
  * feat: disable pid max in the podman machine
  * systests: cp: add wait_for_ready
  * System tests: fixes for RHEL8 gating failures
  * Add API forwarding support for HyperV
  * bump to v4.8.4-dev</changelog>
  <changelog author="dcermak@suse.com" date="1719835200">- Add patch to fix bsc#1227052 / CVE-2024-6104:
  * 0001-Backport-fix-for-CVE-2024-6104.patch
- Add missing BuildRequires man</changelog>
</package>
<package pkgid="7cb32a07d3d1f5acf6d21ba4b77d3349735986d59800db7368148565bcb2d94e" name="podman" arch="s390x">
  <version epoch="0" ver="4.9.5" rel="150500.3.15.1"/>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1710849600">- Add patch for CVE-2024-1753 (bsc#1221677):
  0001-CVE-2024-1753-container-escape-fix.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1717761600">- Remove upstreamed patches:
  - 0001-CVE-2024-1753-container-escape-fix.patch
- Update to version 4.9.5:
  * Bump to v4.9.5
  * Update release notes for v4.9.5
  * fix "concurrent map writes" in network ls compat endpoint
  * [v4.9] Fix for CVE-2024-3727 (bsc#1224122)
  * Disable failing bud test
  * CI Maintenance: Disable machine tests
  * [CI:DOCS] Allow downgrade of WiX
  * [CI:DOCS] Force WiX 3.11
  * [CI:DOCS] Fix windows installer action
  * Bump to v4.9.5-dev
  * Bump to v4.9.4
  * Update release notes for v4.9.4
  * [v4.9] Bump Buildah to v1.33.7, CVE-2024-1753, CVE-2024-24786 (bsc#1226136)
  * Add farm command to commands list
  * Bump to FreeBSD 13.3 (13.2 vanished)
  * Update health-start-periods docs
  * Don't update health check status during initialDelaySeconds
  * image scp: don't require port for ssh URL
  * Ignore docker's end point config when the final network mode isn't bridge.
  * Fix running container from docker client with rootful in rootless podman.
  * [skip-ci] Packit: remove koji and bodhi tasks for v4.9
  * Bump to v4.9.4-dev
  * Bump to v4.9.3
  * Release notes for v4.9.3
  * Remove gitleaks scanning
  * [v4.9] [skip-ci] packit: update fedora downstream branches
  * @@option volume.image: be specific that -v only affects RUN
  * Accept a config blob alongside the "changes" slice when committing
  * container create: use ParseUserNamespace to parse a user namespace setting
  * Bump to v4.9.3-dev
  * Bump to v4.9.2
  * Release notes for v4.9.2
  * Cirrus: Update operating branch
  * [v4.9] Bump to c/common v0.57.4, buildkit v0.12.5, c/buidah v1.33.5
  * Fix updated runc dep breaking pod devices cgroup
  * systests: kube with policies test: fix race
  * Remove go.mod pin of runc and update to latest
  * systests: kube with policies test: fix race
  * Bump to v4.9.2-dev
  * Bump to v4.9.1
  * Release notes for v4.9.1
  * [v4.9] Bump Buildah to v1.33.4, c/common v0.57.3, c/image v5.29.2
  * pkginstaller: bump Qemu version to 8.2.1
  * Assign separate ports for each appleHV machine
  * Fix machine inspect test config
  * AppleHV: update LastUp time
  * applehv: return socket path from setupAPIForwarding
  * applehv: Remove unneeded cmd.ExtraFiles assignment
  * abi: drop check for IsRootless()
  * system: enhance check for re-exec into rootless userns
  * system: enhance check for re-exec into rootless userns
  * Fix `podman machine set --rootful` for applehv
  * applehv - fix vm lookup
  * rpm: use go-rpm-macros on RHEL 10
  * Bump to v4.9.1-dev
  * Bump to v4.9.0
  * Fix a small grammar error in RELEASE_NOTES.md
  * Fix push endpoint stream
  * Finalized release notes for v4.9.0
  * farm build: push built images to registry
  * Move the --farm flag to farm build command
  * Clean up farm-build miscommit
  * [CI:DOCS] Add podman farm build doc
  * Add release notes for v4.9.0
  * gvproxy: Update to 0.7.2 release
  * [v4.9] Bump Buildah to v1.33.3, c/common to v0.57.2, c/image to v5.29.1
  * Add a net health recovery service to Qemu machines
  * Set up podman machine remote user correctly
  * Remove Libpod special-init conditions
  * Fix `podman system reset` with external containers
  * [v4.8] podman kube play: fix broken annotation parsing
  * feat: disable pid max in the podman machine
  * systests: cp: add wait_for_ready
  * System tests: fixes for RHEL8 gating failures
  * Add API forwarding support for HyperV
  * bump to v4.8.4-dev</changelog>
  <changelog author="dcermak@suse.com" date="1719835200">- Add patch to fix bsc#1227052 / CVE-2024-6104:
  * 0001-Backport-fix-for-CVE-2024-6104.patch
- Add missing BuildRequires man</changelog>
</package>
<package pkgid="163ee6bdc9b8a1ac5ba85819d0e684a4d322bfe14fe67594696f42a1a4b4786f" name="podman" arch="src">
  <version epoch="0" ver="4.9.5" rel="150500.3.15.1"/>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1710849600">- Add patch for CVE-2024-1753 (bsc#1221677):
  0001-CVE-2024-1753-container-escape-fix.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1717761600">- Remove upstreamed patches:
  - 0001-CVE-2024-1753-container-escape-fix.patch
- Update to version 4.9.5:
  * Bump to v4.9.5
  * Update release notes for v4.9.5
  * fix "concurrent map writes" in network ls compat endpoint
  * [v4.9] Fix for CVE-2024-3727 (bsc#1224122)
  * Disable failing bud test
  * CI Maintenance: Disable machine tests
  * [CI:DOCS] Allow downgrade of WiX
  * [CI:DOCS] Force WiX 3.11
  * [CI:DOCS] Fix windows installer action
  * Bump to v4.9.5-dev
  * Bump to v4.9.4
  * Update release notes for v4.9.4
  * [v4.9] Bump Buildah to v1.33.7, CVE-2024-1753, CVE-2024-24786 (bsc#1226136)
  * Add farm command to commands list
  * Bump to FreeBSD 13.3 (13.2 vanished)
  * Update health-start-periods docs
  * Don't update health check status during initialDelaySeconds
  * image scp: don't require port for ssh URL
  * Ignore docker's end point config when the final network mode isn't bridge.
  * Fix running container from docker client with rootful in rootless podman.
  * [skip-ci] Packit: remove koji and bodhi tasks for v4.9
  * Bump to v4.9.4-dev
  * Bump to v4.9.3
  * Release notes for v4.9.3
  * Remove gitleaks scanning
  * [v4.9] [skip-ci] packit: update fedora downstream branches
  * @@option volume.image: be specific that -v only affects RUN
  * Accept a config blob alongside the "changes" slice when committing
  * container create: use ParseUserNamespace to parse a user namespace setting
  * Bump to v4.9.3-dev
  * Bump to v4.9.2
  * Release notes for v4.9.2
  * Cirrus: Update operating branch
  * [v4.9] Bump to c/common v0.57.4, buildkit v0.12.5, c/buidah v1.33.5
  * Fix updated runc dep breaking pod devices cgroup
  * systests: kube with policies test: fix race
  * Remove go.mod pin of runc and update to latest
  * systests: kube with policies test: fix race
  * Bump to v4.9.2-dev
  * Bump to v4.9.1
  * Release notes for v4.9.1
  * [v4.9] Bump Buildah to v1.33.4, c/common v0.57.3, c/image v5.29.2
  * pkginstaller: bump Qemu version to 8.2.1
  * Assign separate ports for each appleHV machine
  * Fix machine inspect test config
  * AppleHV: update LastUp time
  * applehv: return socket path from setupAPIForwarding
  * applehv: Remove unneeded cmd.ExtraFiles assignment
  * abi: drop check for IsRootless()
  * system: enhance check for re-exec into rootless userns
  * system: enhance check for re-exec into rootless userns
  * Fix `podman machine set --rootful` for applehv
  * applehv - fix vm lookup
  * rpm: use go-rpm-macros on RHEL 10
  * Bump to v4.9.1-dev
  * Bump to v4.9.0
  * Fix a small grammar error in RELEASE_NOTES.md
  * Fix push endpoint stream
  * Finalized release notes for v4.9.0
  * farm build: push built images to registry
  * Move the --farm flag to farm build command
  * Clean up farm-build miscommit
  * [CI:DOCS] Add podman farm build doc
  * Add release notes for v4.9.0
  * gvproxy: Update to 0.7.2 release
  * [v4.9] Bump Buildah to v1.33.3, c/common to v0.57.2, c/image to v5.29.1
  * Add a net health recovery service to Qemu machines
  * Set up podman machine remote user correctly
  * Remove Libpod special-init conditions
  * Fix `podman system reset` with external containers
  * [v4.8] podman kube play: fix broken annotation parsing
  * feat: disable pid max in the podman machine
  * systests: cp: add wait_for_ready
  * System tests: fixes for RHEL8 gating failures
  * Add API forwarding support for HyperV
  * bump to v4.8.4-dev</changelog>
  <changelog author="dcermak@suse.com" date="1719835200">- Add patch to fix bsc#1227052 / CVE-2024-6104:
  * 0001-Backport-fix-for-CVE-2024-6104.patch
- Add missing BuildRequires man</changelog>
</package>
<package pkgid="b72708569b200306127a53ce8f3f6e21f967e501f57110bff775f238f80ebd7b" name="podman" arch="x86_64">
  <version epoch="0" ver="4.9.5" rel="150500.3.15.1"/>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1710849600">- Add patch for CVE-2024-1753 (bsc#1221677):
  0001-CVE-2024-1753-container-escape-fix.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1717761600">- Remove upstreamed patches:
  - 0001-CVE-2024-1753-container-escape-fix.patch
- Update to version 4.9.5:
  * Bump to v4.9.5
  * Update release notes for v4.9.5
  * fix "concurrent map writes" in network ls compat endpoint
  * [v4.9] Fix for CVE-2024-3727 (bsc#1224122)
  * Disable failing bud test
  * CI Maintenance: Disable machine tests
  * [CI:DOCS] Allow downgrade of WiX
  * [CI:DOCS] Force WiX 3.11
  * [CI:DOCS] Fix windows installer action
  * Bump to v4.9.5-dev
  * Bump to v4.9.4
  * Update release notes for v4.9.4
  * [v4.9] Bump Buildah to v1.33.7, CVE-2024-1753, CVE-2024-24786 (bsc#1226136)
  * Add farm command to commands list
  * Bump to FreeBSD 13.3 (13.2 vanished)
  * Update health-start-periods docs
  * Don't update health check status during initialDelaySeconds
  * image scp: don't require port for ssh URL
  * Ignore docker's end point config when the final network mode isn't bridge.
  * Fix running container from docker client with rootful in rootless podman.
  * [skip-ci] Packit: remove koji and bodhi tasks for v4.9
  * Bump to v4.9.4-dev
  * Bump to v4.9.3
  * Release notes for v4.9.3
  * Remove gitleaks scanning
  * [v4.9] [skip-ci] packit: update fedora downstream branches
  * @@option volume.image: be specific that -v only affects RUN
  * Accept a config blob alongside the "changes" slice when committing
  * container create: use ParseUserNamespace to parse a user namespace setting
  * Bump to v4.9.3-dev
  * Bump to v4.9.2
  * Release notes for v4.9.2
  * Cirrus: Update operating branch
  * [v4.9] Bump to c/common v0.57.4, buildkit v0.12.5, c/buidah v1.33.5
  * Fix updated runc dep breaking pod devices cgroup
  * systests: kube with policies test: fix race
  * Remove go.mod pin of runc and update to latest
  * systests: kube with policies test: fix race
  * Bump to v4.9.2-dev
  * Bump to v4.9.1
  * Release notes for v4.9.1
  * [v4.9] Bump Buildah to v1.33.4, c/common v0.57.3, c/image v5.29.2
  * pkginstaller: bump Qemu version to 8.2.1
  * Assign separate ports for each appleHV machine
  * Fix machine inspect test config
  * AppleHV: update LastUp time
  * applehv: return socket path from setupAPIForwarding
  * applehv: Remove unneeded cmd.ExtraFiles assignment
  * abi: drop check for IsRootless()
  * system: enhance check for re-exec into rootless userns
  * system: enhance check for re-exec into rootless userns
  * Fix `podman machine set --rootful` for applehv
  * applehv - fix vm lookup
  * rpm: use go-rpm-macros on RHEL 10
  * Bump to v4.9.1-dev
  * Bump to v4.9.0
  * Fix a small grammar error in RELEASE_NOTES.md
  * Fix push endpoint stream
  * Finalized release notes for v4.9.0
  * farm build: push built images to registry
  * Move the --farm flag to farm build command
  * Clean up farm-build miscommit
  * [CI:DOCS] Add podman farm build doc
  * Add release notes for v4.9.0
  * gvproxy: Update to 0.7.2 release
  * [v4.9] Bump Buildah to v1.33.3, c/common to v0.57.2, c/image to v5.29.1
  * Add a net health recovery service to Qemu machines
  * Set up podman machine remote user correctly
  * Remove Libpod special-init conditions
  * Fix `podman system reset` with external containers
  * [v4.8] podman kube play: fix broken annotation parsing
  * feat: disable pid max in the podman machine
  * systests: cp: add wait_for_ready
  * System tests: fixes for RHEL8 gating failures
  * Add API forwarding support for HyperV
  * bump to v4.8.4-dev</changelog>
  <changelog author="dcermak@suse.com" date="1719835200">- Add patch to fix bsc#1227052 / CVE-2024-6104:
  * 0001-Backport-fix-for-CVE-2024-6104.patch
- Add missing BuildRequires man</changelog>
</package>
<package pkgid="4bc0df6c4e7df0728d8acba01e78ee95d9e753ed493ab7f41b2370267f184a09" name="podman-docker" arch="noarch">
  <version epoch="0" ver="4.7.2" rel="150500.3.3.1"/>
  <changelog author="danish.prakash@suse.com" date="1677240000">- Update to version 4.4.2:
  * Bump to v4.4.2
  * Release notes for v4.4.2
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * kube play: only enforce passthrough in Quadlet
  * Emergency fix for man pages: check for broken includes
  * CI: Temporarily disable all AWS EC2-based tasks
  * quadlet system tests: add useful defaults, logging
  * volume,container: chroot to source before exporting content
  * install sigproxy before start/attach
  * Update to c/image 5.24.1
  * events + container inspect test: RHEL fixes
  * Bump to v4.4.2-dev
- Remove patches (merged upstream):
  * volume-container-chroot-to-source-before-exporting-content.patch
- podman.spec: add `crun` requirement for quadlet
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add patch to let quadlet use the default runtime
  Added patch:
  * Quadlet-use-the-default-runtime.patch
  =&gt; Remove dependency on crun</changelog>
  <changelog author="danish.prakash@suse.com" date="1679659200">- Update to version 4.4.3:
  * Bump to v4.4.3
  * Release notes for v4.4.3
  * compat: /auth: parse server address correctly
  * vendor github.com/containers/common@v0.51.1
  * pkginstaller: bump Qemu to version 7.2.0
  * podman machine: Adjust Chrony makestep config
  * [v4.4] fix --health-on-failure=restart in transient unit
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * journald: remove initializeJournal()
  * netavark: only use aardvark ip as nameserver
  * compat API: network create return 409 for duplicate
  * fix "podman logs --since --follow" flake
  * system service --log-level=trace: support hijack
  * podman-mac-helper: exit 1 on error
  * bump golang.org/x/net to v0.8.0
  * Fix package restore
  * Quadlet - use the default runtime
  * Bump to v4.4.3-dev
- Remove patch (merged upstream):
  * Quadlet-use-the-default-runtime.patch
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="danish.prakash@suse.com" date="1680004800">- Update to version 4.4.4:
  * Bump to v4.4.4
  * Release notes for v4.4.4
  * libpod: always use direct mapping
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * Bump to v4.4.4-dev
- spec: Bump required version for libcontainers-common (bsc#1209495)</changelog>
  <changelog author="dcermak@suse.com" date="1681473600">- Don't build against EoL go versions, fixes bsc#1210299</changelog>
  <changelog author="danish.prakash@suse.com" date="1681819200">- Update to version 4.5.0:
  * Release v4.5.0
  * [CI:DOCS] Final release notes for v4.5.0
  * Quadlet - do not set log-driver by default
  * Return title fields as a list
  * Bump to v4.5.0-dev
  * Bump to v4.5.0-RC2
  * Final release notes for v4.5.0-RC2
  * test/e2e: remove unnecessary SkipIfNetavark() calls
  * test/e2e: deduplicated network test
  * docs: update podman-network-create.1
  * network create: add --interface-name
  * test/system/252-quadlet.bats: fix flake
  * Read kube_generate_type from containers.conf
  * Debian setup: workaround for runc /dev/char/10:200 bug
  * pkg/rootless: use catatonit from /usr/libexec/podman
  * rootless: make sure we only use a single pause process
  * Use atomic config writing strategy for podman machine config files
  * Add remaining release notes for v4.5.0-RC2
  * GHA: Use version instead of SHA for actions
  * chore(deps): update dependency containers/automation_images to v20230405
  * build: pass env by reference
  * test: retrofit error message
  * test/system: expect 12 char for short id
  * vendor: bump containers/(storage, common, buildah, image)
  * [skip-ci] Update actions/upload-artifact action to v3
  * [skip-ci] Update actions/stale action to v8
  * [skip-ci] Update actions/setup-go action to v4
  * [skip-ci] Update github/issue-labeler action to v2.6
  * Fix up codespell errors
  * Capitalize all uid,gid and id words that are not options in docs
  * build(deps): bump golang.org/x/tools from 0.7.0 to 0.8.0 in /test/tools
  * Properly remove the service container during kube down
  * quadlet: add `UserNS` option key
  * [CI:DOCS] Release notes for 4.5.0 Part 1
  * "podman pull by digest and list --all" test: untag instead of rmi
  * build(deps): bump golang.org/x/text from 0.8.0 to 0.9.0
  * Add renovate.json configuration
  * CI: postbuild step: skip under nightly treadmill
  * The `--ulimit` option accepts the name with an `RLIMIT_` prefix both upper and lower case
  * test/e2e: use custom network config dir where needed
  * chore: replace `github.com/ghodss/yaml` with `sigs.k8s.io/yaml`
  * update completion scripts for cobra v1.7.0
  * libpod.storageService.CreateContainerStorage(): retrieve ID maps
  * Fix invalid pod name and hostname during kube generate
  * e2e tests: fix racy flakes
  * Cirrus: Enable labeling of EC2 VMs
  * Cirrus: Fix aarch64 clone_script 404 errors
  * e2e: GinkgoParallelNode() -&gt; ...Process()
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
  * build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0
  * [CI:DOCS] --creds and registries
  * Copr: fix build deps for /usr/bin/envsubst
  * Don't error when removing non-existant env vars
  * e2e: healthcheck on stopped container: fix flake
  * test/apiv2/80-kube.at
  * test/apiv2/80-kube.at
  * system service: do not close Body
  * rm `hack/release.sh`
  * build(deps): bump github.com/onsi/gomega from 1.27.5 to 1.27.6
  * add `quadlet -version` flag
  * add version/rawversion package
  * quadlet: use `Flag` suffix for variables
  * quadlet: implement `Tmpfs` option
  * Bump to v4.5.0-dev
  * Bump to 4.5.0-rc1
  * Update release notes from 4.4 branch
  * rootless netns: recover from invalid netns
  * System tests: unverbosify a flake log
  * Add support for secret exists
  * Fix Win install task failures with large PR bodies
  * docs: add `starting` to `HealthCheckResults.Status`
  * Add support for cgroup_config from containers.conf
  * libpod: mount safely subpaths
  * Support Deployment generation with kube generate
  * Use secret.items to create volume mounts if present
  * [CI:DOCS] fix typo in --systemd option
  * rootless: drop preexec hook error message
  * Edit the docker wrapper to use the install prefix
  * Update podman-for-windows.md
  * Quadlet: RemapUsers documentation fixes
  * speed up image listing
  * vendor containers/common@e27c30ee9b1b
  * fix volume-plugin-test flake
  * Document building Podman remote on Windows hosts
  * test/e2e: gpg keep stdout/err attached
  * auto-update: stop+start instead of restart sytemd units
  * [CI:DOCS] Improve basic tutorial
  * Update docs/source/markdown/podman-network.1.md
  * Add debug to --wait test
  * fix slirp4netns resolv.conf ip with a userns
  * Quadlet: add support for keep-id with mapping values
  * Quadlet E2E test - run quadlet as user generator
  * sqlite: do not `Ping()` after connecting
  * Quadlet - treat paths starting with systemd specifiers as absolute
  * Update docs/source/markdown/podman-kube-play.1.md.in
  * system tests: use CONTAINERS_CONF_OVERRIDE
  * implement podman machine set for hyperv
  * [CI:DOCS] Add network subnets info to network man page
  * CI: retry the golangci install
  * system tests: fix racey sdnotify test
  * hyperv: lookup machine on local filesystem first
  * fix os.IsNotExist() CI check
  * Ensure that SQLite state handles name-ID collisions
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * build(deps): bump github.com/onsi/gomega from 1.27.4 to 1.27.5
  * Fix a race around SQLite DB config validation
  * add CONTAINERS_CONF_OVERRIDE
  * vendor containers/common@main
  * docs: minor grammar fix in `--volume` description
  * sqlite: do not use shared cache
  * test: podman checkpoint/restore the latest container
  * stats compat API: return "id" lowercase
  * Run make codespell
  * Drop SQLite max connections
  * sqlite: set connection attributes on open
  * Fix database locked errors with SQLite
  * quadlet tests: skip on RHEL8 rootless
  * Kube Play Doc: Document the support for K8S Secret
  * New ulimit test: bump up minimum nfiles
  * logformatter: hide --db-backend, and friendlyize quadlet
  * Quadlet - add support for relative path in Volume key in .container file
  * Add service ctr cleanup to PlayKubeDown
  * fix --health-on-failure=restart in transient unit
  * Quadlet Doc: Suggest the kill operation for HealthOnFailure
  * Quadlet - Add support for health checks configuration in .container files
  * Makefile: allow specifying /lib dir location
  * Fix option --opts -&gt; --opt
  * basic hypverv machine implementation
  * Fix SQLite DB schema migration code
  * Add support for oom_score_adj value from containers.conf
  * Use default_ulimits field in containers.conf
  * CI: test and confirm DESIRED_DATABASE
  * build(deps): bump github.com/openshift/imagebuilder
  * logformatter: futureproof output filename
  * Vendor in latest containers/(storage, common, image)
  * build(deps): bump google.golang.org/protobuf from 1.29.0 to 1.30.0
  * test/system/255-auto-update.bats: add debug logs
  * Revert "Revert "pasta: Use two connections instead of three in TCP range forward tests""
  * Add information for secret inspect
  * Add format to podman volume ls
  * Add format to podman volume inspect
  * Add format to podman secret ls
  * Add format to podman system df
  * Add format to podman machine info
  * Add format table to podman image inspect man page
  * Cirrus: Store podman machine benchmark data
  * Update Cirrus display names, and fix get-ci-vm script
  * Ensure SQLite places uses the runroot in transient mode
  * Fix various integration test issues with SQLite state
  * Remove test for pod/container name global uniqueness
  * Improve handling of existing container names in SQLite
  * Add SQLite job to CI
  * buildah treadmill: also run rootless tests
  * build(deps): bump github.com/vbatts/git-validation in /test/tools
  * auto update: return restart error
  * fix: Document removing anonymous volumes
  * events: no duplicates when streaming during a log rotation
  * Add search --cert-dir, --creds
  * podman-mac-helper: exit 1 on error
  * system service --log-level=trace: support hijack
  * test/system: fix wait_for_port() to wait for bind
  * cgroupns: private cgroupns on cgroupv1 breaks --systemd
  * libpod: remove error stutter
  * podman events: unhide --stream
  * test/system/255-auto-update.bats: multiple services
  * 255-auto-update.bats: turn off rollback where needed
  * Use append() to add elements to a slice
  * Revert "pasta: Use two connections instead of three in TCP range forward tests"
  * Support running nested SELinux container separation
  * bud tests: rootless remote: use correct socket path
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.2.1 to 8.3.0
  * compat: /auth: parse server address correctly
  * docs: fix cmd `set DOCKER_HOST` suggestion
  * test: reenable idmap test
  * Must use mountlabel when creating builtin volumes
  * podman.spec.rpkg: distro conditionals for modulesloaddir
  * build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.29.0
  * podman inspect list network when using --net=host or none
  * pasta: Re-enable "Local forwarder, IPv4" test, accept NXDOMAIN as response
  * build(deps): bump golang.org/x/tools from 0.6.0 to 0.7.0 in /test/tools
  * CI: Switch to c20230307t192532z-f37f36d12 images
  * Cirrus: Run system &amp; integration tests in parallel
  * Update checkpointctl v0.1.0
  * Quadlet: add support for setting --ip and --ip6
  * build(deps): bump golang.org/x/net from 0.7.0 to 0.8.0
  * build(deps): bump golang.org/x/sys from 0.5.0 to 0.6.0
  * libpod: avoid nil pointer dereference in (*Container).Cleanup
  * [CI:DOCS] Add image not found info to troubleshooting
  * cmd: do not require userns for "version"
  * cmd: drop special handling for "scp"
  * cmd: clarify meaning of ParentNSRequired
  * Fix package restore
  * [CI:DOCS] Fix docs/version-check always requesting updates
  * sqlite: add a hidden --db-backend flag
  * fix: update the default machine value when the previously set default machine is deleted
  * podman machine: Adjust Chrony makestep config
  * sqlite: add container short ID to network aliases
  * sqlite: remove dead code
  * sqlite: addContainer: add named volume only once
  * sqlite: implement RewriteVolumeConfig
  * sqlite: LookupVolume: fix partial name match
  * sqlite: LookupVolume: wrap error
  * sqlite: fix type rewriting container config
  * sqlite: return correct error on pod-name conflict
  * sqlite: RewritePodConfig: update error message
  * test/system/255-auto-update.bats: wait 10 for update to finish
  * auto-update test: wait for service to be ready
  * Vendor in latest containers/(common, storage, image)
  * play kube: Add --wait option
  * Cirrus: Fix git config permission denied
  * Quadlet: Add support for the Mount key in .container files
  * build(deps): bump github.com/onsi/gomega from 1.27.1 to 1.27.2
  * fix "podman logs --since --follow" flake
  * Clarify that replicas are ignored in kubernetes deployment
  * Revert "Skip all pasta tests"
  * CI: Switch to c20230223t153813z-f37f36d12 images
  * Fix user socket path
  * pkginstaller: bump Qemu to version 7.2.0
  * Cirrus: Fix bud tests failing to apply patches
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2
  * build(deps): bump github.com/coreos/stream-metadata-go
  * Vendor in latest containers/storage
  * buildah-bud tests: don't sudo when rootless is desired
  * Temporarily disable version-check
  * CI: new rootless buildah-bud tests (cron only)
  * sqlite: fix volume lookups with partial names
  * sqlite: fix container lookups with partial IDs
  * sqlite: fix LookupPod
  * sqlite: fix pod create/rm
  * sqlite: LookupContainer: update error message
  * sqlite: AddContainerExitCode: allow to replace
  * system: add warning when running rootless on cgroupv1
  * sqlite: fix AllContainers with state
  * sqlite: fix "UPDATE TABLE" typos
  * sqlite: SaveVolume: fix syntax error updating the volumes table
  * sqlite: exit code: allow -1
  * sqlite: fix typo when removing exec sessions
  * sqlite: AllContainers: fix inner join
  * sqlite: move migration after table creation
  * sqlite: implement pod methods
  * Quadlet - use the default runtime
  * docs: context is not optional for build
  * Fix an incorrect comment on NewSqliteState
  * Add support for containers.conf database setting
  * Add support for volume operations to SQLite state
  * Implement exec session handling in SQL database
  * Various fixes from code review
  * Remove `--namespace` flag from Podman root
  * Get E2E tests to pass
  * Implement network disconnect for SQLite state
  * Implement Network Connect/Modify for SQLite state
  * Fix various lint issues
  * Some further work on SQLite state
  * Remove concept of Namespaces from BoltDB
  * Add initial SQLite-backed state implementation
  * Cirrus: Support runc testing on debian VMs
  * Skip all pasta tests
  * Skip buildah-bud test
  * Skip buildx test with VFS podman storage driver
  * Skip 'podman kube --network' test for rootless CGv1
  * Skip tests which fail with CGv1 &amp; runc
  * Skip rootless CGv1 quadlet tests due to issue
  * Makefile: Define SHELL
  * Machine refactor for QEMU/AppleHV
  * machine refactoring preparations for hyperv
  * [CI:BUILD] spec.rpkg: trim dependency list
  * Logs follow-until tests: loosen checks
  * [CI:DOCS] Windows/Mac docs link update
  * Doc update for docker network options via CLI
  * compat API: network create return 409 for duplicate
  * Apply suggestions to man page
  * vendor c/common@852ca05a1fbb
  * Quadlet: Add support for LogDriver key in container and kube units
  * machine refactoring preparations for hyperv
  * libpod: always use direct mapping
  * netavark: only use aardvark ip as nameserver
  * build(deps): bump github.com/container-orchestrated-devices/container-device-interface
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * make docs: sanity check for broken man pages
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.6 to 8.2.0
  * build(deps): bump github.com/onsi/gomega from 1.27.0 to 1.27.1
  * kube: rm secret on down, print secret on play
  * Fix spacing typo that triggered OCD &amp; indent units in podman-systemd.unit(5)
  * Update remote_client.md
  * [CI:DOCS] Add restriction to option README
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * build(deps): bump github.com/onsi/gomega from 1.26.0 to 1.27.0
  * kube play: only enforce passthrough in Quadlet
  * journald: remove initializeJournal()
  * auto-update: support pods
  * Emergency fix for man pages: check for broken includes
  * System tests: assert(): friendlier failure messages
  * Cirrus: Fix version-check to only run on `main` job
  * CI: Temporarily disable all AWS EC2-based tasks
  * build(deps): bump github.com/containerd/containerd from 1.6.16 to 1.6.18
  * volume,container: chroot to source before exporting content
  * Support sysctl configs via podman kube play
  * [CI:BUILD] copr: podman.spec.rpkg cleanups
  * quadlet system tests: add useful defaults, logging
  * libpod: support relative positions for idmaps
  * Experimental workaround for cdn03.quay.io flake
  * system tests: prevent leading tabs
  * Introduce podman machine os apply
  * create: add support for --group-entry
  * fix != filter in volume prune
  * Allow specification of podman --remote build -f -
  * Quadlet use crun specified in containers.conf
  * build(deps): bump golang.org/x/net from 0.6.0 to 0.7.0
  * Vendor c/image after https://github.com/containers/image/pull/1847
  * Don't set hostPort when generating a service
  * man page --format xref: tighten the autocompletion check
  * add support for limiting tmpfs size for systemd-specific mnts
  * build(deps): bump golang.org/x/text from 0.6.0 to 0.7.0
  * Add ulimit annotation to kube gen &amp; play
  * man page xref: validate displayed man page names
  * quadlet: add ExecStop
  * install sigproxy before start/attach
  * build(deps): bump golang.org/x/tools from 0.5.0 to 0.6.0 in /test/tools
  * Fix typos
  * Cirrus: Make benchmarks .env file easier to load
  * Cirrus: Omit functions in env. file
  * kube play: set service container as main PID when possible
  * Fix typos. Improve language.
  * events + container inspect test: RHEL fixes
  * Add ctrName to network alias during kube play
  * Run codespell on codebase
  * podman image scp: added identity for ssh.Exec
  * [CI:DOCS] Clarify nomap constrains
  * [CI:DOCS] man-page checker: include --format (Go templates)
  * Vendor c/image after https://github.com/containers/image/pull/1816
  * [CI:DOCS] Cleanup some man pages to display options with line breaks
  * [CI:DOCS] Add tables to podman-systemd.unit man page
  * github: remove prefix from bugs/features
  * Quadlet: Add support for the Secret key in Container group
  * [CI:DOCS] OWNERS: add @ygalblum and @alexlarsson
  * build(deps): bump golang.org/x/term from 0.4.0 to 0.5.0
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.1.6
  * Sort quadlet keys to make it easier to read
  * e2e: fix some tests on remote
  * kube play: do not teardown unconditionally on error
  * Fix typos in comments
  * Resolve symlink path for qemu directory if possible
  * #17363 Fix contradicting documentation podman-commit
  * Fix a potential UID/GID collision in unit tests
  * golangci-lint: show all errors at once
  * update golangci-lint to version 1.51.1
  * [CI:DOCS] events: document journald identifiers
  * Quadlet: exit 0 when there are no files to process
  * network ls: handle removed container
  * e2e: adapt play kube test on remote rootless
  * docs/podman-systemd.unit: Explicitely mention network &amp; kube units
  * docs/podman-systemd.unit: Update example to work out of the box
  * [CI:BUILD] Cirrus: Fix GraphQL ownerRepository:null error
  * Add missing return after errors
  * Revert "Cirrus: Emergency fix to un-stuck PRs"
  * pasta: Fix ICMPv6 Echo test, skip it for the moment
  * pasta: Fix ICMP Echo Request (IPv4) test
  * pasta: Use two connections instead of three in TCP range forward tests
  * Add SELinux label types support to quadlet
  * Add quadlet support for rootfs= containers
  * Cirrus: Emergency fix to un-stuck PRs
  * Move clean-binaries before podman-remote in podman-remote-docs target
  * oci: bind mount /sys with --userns=(auto|pod:)
  * Cleanup podman-systemd.unit file
  * Install podman-systemd.unit  man page, make quadlet discoverable
  * libpod: allow userns=keep-id for root
  * system-reset: use CleanCacheMount to clear build cache
  * vendor: bump buildah to v1.29.1-0.20230201192322-e56eb25575c7
  * system tests: fix noexistent labels test in the remote
  * Expose Podman named pipe in Inspect output
  * libpod: support idmap for --rootfs
  * test: adapt test to work on cgroupv1
  * Bump to v4.5.0-dev
  * Update main to reflect v4.4.0 release
  * Update from /github.com/vbauerster/mpb/v7 to /v8
  * hack/perf: cleanup after benchmarks
  * hack/perf/bz-2162111.sh: use custom network
  * Update bug_report.yaml
  * Handle filetype field in kubernetes.yaml files
  * hack/perf/bz-2162111.sh: measure stop
  * make hack/markdown-preprocess parallel-safe
  * system tests: fix volume exec/noexec test
  * system tests: minor fix for RHEL8 incompatibility
  * Cirrus: Use versionable IMAGE_SUFFIX
  * utils: new conversion method
  * libpod: use GraphRoot for overlay upper dir
  * vendor: update containers/storage
  * Do not mount /dev/tty into rootless containers
  * build(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7
  * e2e: fix run_staticip_test about no_proxy
  * docs: specify order preference for FROM
  * Fixes port collision issue on use of --publish-all
  * Support for Windows paths in the source position of the volume mounts
  * e2e tests: fix incorrect os.User.Name
  * Log data that we failed to unmarshal
  * [CI:DOCS] hack/perf: add script for BZ 216111
  * container rm: save once for exec removal and state change
  * [DOCS:CI] podman-events: document verbose create events
  * e2e: Avoid hard-coding included in quadlet test
  * e2e: Avoid hard-coding ImageCacheDir
  * Making gvproxy.exe optional for building Windows installer
  * Add gvproxy to Windows packages
  * Add comment to clarify error handling intention
  * fix #17244: use /etc/timezone where `timedatectl` is missing on Linux
  * Fix usage of absolute windows paths with --image-path
  * Match VT device paths to be blocked from mounting exactly
  * Fix default handling of pids-limit
  * Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml)
  * journald: podman logs only show logs for current user
  * journald: podman events only show events for current user
  * e2e: Remove the cache with "podman unshare rm" when a rootless user
  * Clean up more language for inclusiveness
  * e2e: Remove some directories at SynchronizedAfterSuite
  * fix: don't output "ago" when container is currently up and running
  * fix: running check error when podman is default in wsl
  * fix CI: test fail due to merge
  * Bump Bulidah to v1.29.0
  * e2e: reduce dependency on /tmp for e2e tests
  * Bump cirrus image with easier dependency management
  * quadlet: Add device support for .volume files
  * remote,build: error if containerignore is symlink
  * DB: make loading container states optional
  * ps: do not sync container
  * Set runAsNonRoot=true in gen kube
  * WSL refactoring
  * kube-play: add support for HostIPC in pod.Spec
  * Allow --device-cgroup-rule to be passed in by docker API</changelog>
  <changelog author="danish.prakash@suse.com" date="1685361600">- Update to version 4.5.1:
  * Release v4.5.1
  * [CI:DOCS] Final release notes for v4.5.1
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * Revert "Resolve symlink path for qemu directory if possible"
  * no need for podman-next rpm test on maint branch
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * network create/update: allow dns servers comma separated
  * machine: fix default connection URL to use 127.0.0.1
  * compat: accept tag in /images/create?fromSrc
  * compat container create: match duplicate mounts correctly
  * machine: qemu only remove connection after confirmation
  * windows: podman save allow the use of stdout
  * remote: exec inspect update exec session status
  * podman-remote logs: handle server error correctly
  * libpod: stop containers with --restart=always
  * Do not include image annotations when building spec
  * [v4.5] system tests: fix race in kube-play read-only
  * api: fix parsing filters
  * Support systemd optional prefix '-' for devices.
  * *: migrate image registry to registry.k8s.io
  * Makefile: include `release-artifacts` target
  * [CI:BUILD] Packit: Initial Enablement
  * Bump to v4.5.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
</package>
<package pkgid="4ab94c3c3998902d4724644c5ddd9a4990a2b180cd70a9cfcdb42df159b2c0ad" name="podman-docker" arch="noarch">
  <version epoch="0" ver="4.8.3" rel="150500.3.6.1"/>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
</package>
<package pkgid="431da91e127b468cea3dece3425fdfd7bf9551508bbf9aa949fed36fd8c3f2ae" name="podman-docker" arch="noarch">
  <version epoch="0" ver="4.8.3" rel="150500.3.9.1"/>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1710849600">- Add patch for CVE-2024-1753 (bsc#1221677):
  0001-CVE-2024-1753-container-escape-fix.patch</changelog>
</package>
<package pkgid="82009c76f70efcc0d3b648f1981811b7daf8a555f6388edee8703a29ac3a27e5" name="podman-docker" arch="noarch">
  <version epoch="0" ver="4.9.5" rel="150500.3.12.1"/>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1710849600">- Add patch for CVE-2024-1753 (bsc#1221677):
  0001-CVE-2024-1753-container-escape-fix.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1717761600">- Remove upstreamed patches:
  - 0001-CVE-2024-1753-container-escape-fix.patch
- Update to version 4.9.5:
  * Bump to v4.9.5
  * Update release notes for v4.9.5
  * fix "concurrent map writes" in network ls compat endpoint
  * [v4.9] Fix for CVE-2024-3727 (bsc#1224122)
  * Disable failing bud test
  * CI Maintenance: Disable machine tests
  * [CI:DOCS] Allow downgrade of WiX
  * [CI:DOCS] Force WiX 3.11
  * [CI:DOCS] Fix windows installer action
  * Bump to v4.9.5-dev
  * Bump to v4.9.4
  * Update release notes for v4.9.4
  * [v4.9] Bump Buildah to v1.33.7, CVE-2024-1753, CVE-2024-24786 (bsc#1226136)
  * Add farm command to commands list
  * Bump to FreeBSD 13.3 (13.2 vanished)
  * Update health-start-periods docs
  * Don't update health check status during initialDelaySeconds
  * image scp: don't require port for ssh URL
  * Ignore docker's end point config when the final network mode isn't bridge.
  * Fix running container from docker client with rootful in rootless podman.
  * [skip-ci] Packit: remove koji and bodhi tasks for v4.9
  * Bump to v4.9.4-dev
  * Bump to v4.9.3
  * Release notes for v4.9.3
  * Remove gitleaks scanning
  * [v4.9] [skip-ci] packit: update fedora downstream branches
  * @@option volume.image: be specific that -v only affects RUN
  * Accept a config blob alongside the "changes" slice when committing
  * container create: use ParseUserNamespace to parse a user namespace setting
  * Bump to v4.9.3-dev
  * Bump to v4.9.2
  * Release notes for v4.9.2
  * Cirrus: Update operating branch
  * [v4.9] Bump to c/common v0.57.4, buildkit v0.12.5, c/buidah v1.33.5
  * Fix updated runc dep breaking pod devices cgroup
  * systests: kube with policies test: fix race
  * Remove go.mod pin of runc and update to latest
  * systests: kube with policies test: fix race
  * Bump to v4.9.2-dev
  * Bump to v4.9.1
  * Release notes for v4.9.1
  * [v4.9] Bump Buildah to v1.33.4, c/common v0.57.3, c/image v5.29.2
  * pkginstaller: bump Qemu version to 8.2.1
  * Assign separate ports for each appleHV machine
  * Fix machine inspect test config
  * AppleHV: update LastUp time
  * applehv: return socket path from setupAPIForwarding
  * applehv: Remove unneeded cmd.ExtraFiles assignment
  * abi: drop check for IsRootless()
  * system: enhance check for re-exec into rootless userns
  * system: enhance check for re-exec into rootless userns
  * Fix `podman machine set --rootful` for applehv
  * applehv - fix vm lookup
  * rpm: use go-rpm-macros on RHEL 10
  * Bump to v4.9.1-dev
  * Bump to v4.9.0
  * Fix a small grammar error in RELEASE_NOTES.md
  * Fix push endpoint stream
  * Finalized release notes for v4.9.0
  * farm build: push built images to registry
  * Move the --farm flag to farm build command
  * Clean up farm-build miscommit
  * [CI:DOCS] Add podman farm build doc
  * Add release notes for v4.9.0
  * gvproxy: Update to 0.7.2 release
  * [v4.9] Bump Buildah to v1.33.3, c/common to v0.57.2, c/image to v5.29.1
  * Add a net health recovery service to Qemu machines
  * Set up podman machine remote user correctly
  * Remove Libpod special-init conditions
  * Fix `podman system reset` with external containers
  * [v4.8] podman kube play: fix broken annotation parsing
  * feat: disable pid max in the podman machine
  * systests: cp: add wait_for_ready
  * System tests: fixes for RHEL8 gating failures
  * Add API forwarding support for HyperV
  * bump to v4.8.4-dev</changelog>
</package>
<package pkgid="6f6fd61585fe49c9c91acf1c143e9445f206085f785101be0b052bf3d249c7af" name="podman-docker" arch="noarch">
  <version epoch="0" ver="4.9.5" rel="150500.3.15.1"/>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1710849600">- Add patch for CVE-2024-1753 (bsc#1221677):
  0001-CVE-2024-1753-container-escape-fix.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1717761600">- Remove upstreamed patches:
  - 0001-CVE-2024-1753-container-escape-fix.patch
- Update to version 4.9.5:
  * Bump to v4.9.5
  * Update release notes for v4.9.5
  * fix "concurrent map writes" in network ls compat endpoint
  * [v4.9] Fix for CVE-2024-3727 (bsc#1224122)
  * Disable failing bud test
  * CI Maintenance: Disable machine tests
  * [CI:DOCS] Allow downgrade of WiX
  * [CI:DOCS] Force WiX 3.11
  * [CI:DOCS] Fix windows installer action
  * Bump to v4.9.5-dev
  * Bump to v4.9.4
  * Update release notes for v4.9.4
  * [v4.9] Bump Buildah to v1.33.7, CVE-2024-1753, CVE-2024-24786 (bsc#1226136)
  * Add farm command to commands list
  * Bump to FreeBSD 13.3 (13.2 vanished)
  * Update health-start-periods docs
  * Don't update health check status during initialDelaySeconds
  * image scp: don't require port for ssh URL
  * Ignore docker's end point config when the final network mode isn't bridge.
  * Fix running container from docker client with rootful in rootless podman.
  * [skip-ci] Packit: remove koji and bodhi tasks for v4.9
  * Bump to v4.9.4-dev
  * Bump to v4.9.3
  * Release notes for v4.9.3
  * Remove gitleaks scanning
  * [v4.9] [skip-ci] packit: update fedora downstream branches
  * @@option volume.image: be specific that -v only affects RUN
  * Accept a config blob alongside the "changes" slice when committing
  * container create: use ParseUserNamespace to parse a user namespace setting
  * Bump to v4.9.3-dev
  * Bump to v4.9.2
  * Release notes for v4.9.2
  * Cirrus: Update operating branch
  * [v4.9] Bump to c/common v0.57.4, buildkit v0.12.5, c/buidah v1.33.5
  * Fix updated runc dep breaking pod devices cgroup
  * systests: kube with policies test: fix race
  * Remove go.mod pin of runc and update to latest
  * systests: kube with policies test: fix race
  * Bump to v4.9.2-dev
  * Bump to v4.9.1
  * Release notes for v4.9.1
  * [v4.9] Bump Buildah to v1.33.4, c/common v0.57.3, c/image v5.29.2
  * pkginstaller: bump Qemu version to 8.2.1
  * Assign separate ports for each appleHV machine
  * Fix machine inspect test config
  * AppleHV: update LastUp time
  * applehv: return socket path from setupAPIForwarding
  * applehv: Remove unneeded cmd.ExtraFiles assignment
  * abi: drop check for IsRootless()
  * system: enhance check for re-exec into rootless userns
  * system: enhance check for re-exec into rootless userns
  * Fix `podman machine set --rootful` for applehv
  * applehv - fix vm lookup
  * rpm: use go-rpm-macros on RHEL 10
  * Bump to v4.9.1-dev
  * Bump to v4.9.0
  * Fix a small grammar error in RELEASE_NOTES.md
  * Fix push endpoint stream
  * Finalized release notes for v4.9.0
  * farm build: push built images to registry
  * Move the --farm flag to farm build command
  * Clean up farm-build miscommit
  * [CI:DOCS] Add podman farm build doc
  * Add release notes for v4.9.0
  * gvproxy: Update to 0.7.2 release
  * [v4.9] Bump Buildah to v1.33.3, c/common to v0.57.2, c/image to v5.29.1
  * Add a net health recovery service to Qemu machines
  * Set up podman machine remote user correctly
  * Remove Libpod special-init conditions
  * Fix `podman system reset` with external containers
  * [v4.8] podman kube play: fix broken annotation parsing
  * feat: disable pid max in the podman machine
  * systests: cp: add wait_for_ready
  * System tests: fixes for RHEL8 gating failures
  * Add API forwarding support for HyperV
  * bump to v4.8.4-dev</changelog>
  <changelog author="dcermak@suse.com" date="1719835200">- Add patch to fix bsc#1227052 / CVE-2024-6104:
  * 0001-Backport-fix-for-CVE-2024-6104.patch
- Add missing BuildRequires man</changelog>
</package>
<package pkgid="9c9bae1492dd1dbc4fc75cc932e941aac718f40eda00f34346e119a82da4d01c" name="podman-remote" arch="aarch64">
  <version epoch="0" ver="4.7.2" rel="150500.3.3.1"/>
  <changelog author="danish.prakash@suse.com" date="1677240000">- Update to version 4.4.2:
  * Bump to v4.4.2
  * Release notes for v4.4.2
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * kube play: only enforce passthrough in Quadlet
  * Emergency fix for man pages: check for broken includes
  * CI: Temporarily disable all AWS EC2-based tasks
  * quadlet system tests: add useful defaults, logging
  * volume,container: chroot to source before exporting content
  * install sigproxy before start/attach
  * Update to c/image 5.24.1
  * events + container inspect test: RHEL fixes
  * Bump to v4.4.2-dev
- Remove patches (merged upstream):
  * volume-container-chroot-to-source-before-exporting-content.patch
- podman.spec: add `crun` requirement for quadlet
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add patch to let quadlet use the default runtime
  Added patch:
  * Quadlet-use-the-default-runtime.patch
  =&gt; Remove dependency on crun</changelog>
  <changelog author="danish.prakash@suse.com" date="1679659200">- Update to version 4.4.3:
  * Bump to v4.4.3
  * Release notes for v4.4.3
  * compat: /auth: parse server address correctly
  * vendor github.com/containers/common@v0.51.1
  * pkginstaller: bump Qemu to version 7.2.0
  * podman machine: Adjust Chrony makestep config
  * [v4.4] fix --health-on-failure=restart in transient unit
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * journald: remove initializeJournal()
  * netavark: only use aardvark ip as nameserver
  * compat API: network create return 409 for duplicate
  * fix "podman logs --since --follow" flake
  * system service --log-level=trace: support hijack
  * podman-mac-helper: exit 1 on error
  * bump golang.org/x/net to v0.8.0
  * Fix package restore
  * Quadlet - use the default runtime
  * Bump to v4.4.3-dev
- Remove patch (merged upstream):
  * Quadlet-use-the-default-runtime.patch
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="danish.prakash@suse.com" date="1680004800">- Update to version 4.4.4:
  * Bump to v4.4.4
  * Release notes for v4.4.4
  * libpod: always use direct mapping
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * Bump to v4.4.4-dev
- spec: Bump required version for libcontainers-common (bsc#1209495)</changelog>
  <changelog author="dcermak@suse.com" date="1681473600">- Don't build against EoL go versions, fixes bsc#1210299</changelog>
  <changelog author="danish.prakash@suse.com" date="1681819200">- Update to version 4.5.0:
  * Release v4.5.0
  * [CI:DOCS] Final release notes for v4.5.0
  * Quadlet - do not set log-driver by default
  * Return title fields as a list
  * Bump to v4.5.0-dev
  * Bump to v4.5.0-RC2
  * Final release notes for v4.5.0-RC2
  * test/e2e: remove unnecessary SkipIfNetavark() calls
  * test/e2e: deduplicated network test
  * docs: update podman-network-create.1
  * network create: add --interface-name
  * test/system/252-quadlet.bats: fix flake
  * Read kube_generate_type from containers.conf
  * Debian setup: workaround for runc /dev/char/10:200 bug
  * pkg/rootless: use catatonit from /usr/libexec/podman
  * rootless: make sure we only use a single pause process
  * Use atomic config writing strategy for podman machine config files
  * Add remaining release notes for v4.5.0-RC2
  * GHA: Use version instead of SHA for actions
  * chore(deps): update dependency containers/automation_images to v20230405
  * build: pass env by reference
  * test: retrofit error message
  * test/system: expect 12 char for short id
  * vendor: bump containers/(storage, common, buildah, image)
  * [skip-ci] Update actions/upload-artifact action to v3
  * [skip-ci] Update actions/stale action to v8
  * [skip-ci] Update actions/setup-go action to v4
  * [skip-ci] Update github/issue-labeler action to v2.6
  * Fix up codespell errors
  * Capitalize all uid,gid and id words that are not options in docs
  * build(deps): bump golang.org/x/tools from 0.7.0 to 0.8.0 in /test/tools
  * Properly remove the service container during kube down
  * quadlet: add `UserNS` option key
  * [CI:DOCS] Release notes for 4.5.0 Part 1
  * "podman pull by digest and list --all" test: untag instead of rmi
  * build(deps): bump golang.org/x/text from 0.8.0 to 0.9.0
  * Add renovate.json configuration
  * CI: postbuild step: skip under nightly treadmill
  * The `--ulimit` option accepts the name with an `RLIMIT_` prefix both upper and lower case
  * test/e2e: use custom network config dir where needed
  * chore: replace `github.com/ghodss/yaml` with `sigs.k8s.io/yaml`
  * update completion scripts for cobra v1.7.0
  * libpod.storageService.CreateContainerStorage(): retrieve ID maps
  * Fix invalid pod name and hostname during kube generate
  * e2e tests: fix racy flakes
  * Cirrus: Enable labeling of EC2 VMs
  * Cirrus: Fix aarch64 clone_script 404 errors
  * e2e: GinkgoParallelNode() -&gt; ...Process()
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
  * build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0
  * [CI:DOCS] --creds and registries
  * Copr: fix build deps for /usr/bin/envsubst
  * Don't error when removing non-existant env vars
  * e2e: healthcheck on stopped container: fix flake
  * test/apiv2/80-kube.at
  * test/apiv2/80-kube.at
  * system service: do not close Body
  * rm `hack/release.sh`
  * build(deps): bump github.com/onsi/gomega from 1.27.5 to 1.27.6
  * add `quadlet -version` flag
  * add version/rawversion package
  * quadlet: use `Flag` suffix for variables
  * quadlet: implement `Tmpfs` option
  * Bump to v4.5.0-dev
  * Bump to 4.5.0-rc1
  * Update release notes from 4.4 branch
  * rootless netns: recover from invalid netns
  * System tests: unverbosify a flake log
  * Add support for secret exists
  * Fix Win install task failures with large PR bodies
  * docs: add `starting` to `HealthCheckResults.Status`
  * Add support for cgroup_config from containers.conf
  * libpod: mount safely subpaths
  * Support Deployment generation with kube generate
  * Use secret.items to create volume mounts if present
  * [CI:DOCS] fix typo in --systemd option
  * rootless: drop preexec hook error message
  * Edit the docker wrapper to use the install prefix
  * Update podman-for-windows.md
  * Quadlet: RemapUsers documentation fixes
  * speed up image listing
  * vendor containers/common@e27c30ee9b1b
  * fix volume-plugin-test flake
  * Document building Podman remote on Windows hosts
  * test/e2e: gpg keep stdout/err attached
  * auto-update: stop+start instead of restart sytemd units
  * [CI:DOCS] Improve basic tutorial
  * Update docs/source/markdown/podman-network.1.md
  * Add debug to --wait test
  * fix slirp4netns resolv.conf ip with a userns
  * Quadlet: add support for keep-id with mapping values
  * Quadlet E2E test - run quadlet as user generator
  * sqlite: do not `Ping()` after connecting
  * Quadlet - treat paths starting with systemd specifiers as absolute
  * Update docs/source/markdown/podman-kube-play.1.md.in
  * system tests: use CONTAINERS_CONF_OVERRIDE
  * implement podman machine set for hyperv
  * [CI:DOCS] Add network subnets info to network man page
  * CI: retry the golangci install
  * system tests: fix racey sdnotify test
  * hyperv: lookup machine on local filesystem first
  * fix os.IsNotExist() CI check
  * Ensure that SQLite state handles name-ID collisions
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * build(deps): bump github.com/onsi/gomega from 1.27.4 to 1.27.5
  * Fix a race around SQLite DB config validation
  * add CONTAINERS_CONF_OVERRIDE
  * vendor containers/common@main
  * docs: minor grammar fix in `--volume` description
  * sqlite: do not use shared cache
  * test: podman checkpoint/restore the latest container
  * stats compat API: return "id" lowercase
  * Run make codespell
  * Drop SQLite max connections
  * sqlite: set connection attributes on open
  * Fix database locked errors with SQLite
  * quadlet tests: skip on RHEL8 rootless
  * Kube Play Doc: Document the support for K8S Secret
  * New ulimit test: bump up minimum nfiles
  * logformatter: hide --db-backend, and friendlyize quadlet
  * Quadlet - add support for relative path in Volume key in .container file
  * Add service ctr cleanup to PlayKubeDown
  * fix --health-on-failure=restart in transient unit
  * Quadlet Doc: Suggest the kill operation for HealthOnFailure
  * Quadlet - Add support for health checks configuration in .container files
  * Makefile: allow specifying /lib dir location
  * Fix option --opts -&gt; --opt
  * basic hypverv machine implementation
  * Fix SQLite DB schema migration code
  * Add support for oom_score_adj value from containers.conf
  * Use default_ulimits field in containers.conf
  * CI: test and confirm DESIRED_DATABASE
  * build(deps): bump github.com/openshift/imagebuilder
  * logformatter: futureproof output filename
  * Vendor in latest containers/(storage, common, image)
  * build(deps): bump google.golang.org/protobuf from 1.29.0 to 1.30.0
  * test/system/255-auto-update.bats: add debug logs
  * Revert "Revert "pasta: Use two connections instead of three in TCP range forward tests""
  * Add information for secret inspect
  * Add format to podman volume ls
  * Add format to podman volume inspect
  * Add format to podman secret ls
  * Add format to podman system df
  * Add format to podman machine info
  * Add format table to podman image inspect man page
  * Cirrus: Store podman machine benchmark data
  * Update Cirrus display names, and fix get-ci-vm script
  * Ensure SQLite places uses the runroot in transient mode
  * Fix various integration test issues with SQLite state
  * Remove test for pod/container name global uniqueness
  * Improve handling of existing container names in SQLite
  * Add SQLite job to CI
  * buildah treadmill: also run rootless tests
  * build(deps): bump github.com/vbatts/git-validation in /test/tools
  * auto update: return restart error
  * fix: Document removing anonymous volumes
  * events: no duplicates when streaming during a log rotation
  * Add search --cert-dir, --creds
  * podman-mac-helper: exit 1 on error
  * system service --log-level=trace: support hijack
  * test/system: fix wait_for_port() to wait for bind
  * cgroupns: private cgroupns on cgroupv1 breaks --systemd
  * libpod: remove error stutter
  * podman events: unhide --stream
  * test/system/255-auto-update.bats: multiple services
  * 255-auto-update.bats: turn off rollback where needed
  * Use append() to add elements to a slice
  * Revert "pasta: Use two connections instead of three in TCP range forward tests"
  * Support running nested SELinux container separation
  * bud tests: rootless remote: use correct socket path
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.2.1 to 8.3.0
  * compat: /auth: parse server address correctly
  * docs: fix cmd `set DOCKER_HOST` suggestion
  * test: reenable idmap test
  * Must use mountlabel when creating builtin volumes
  * podman.spec.rpkg: distro conditionals for modulesloaddir
  * build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.29.0
  * podman inspect list network when using --net=host or none
  * pasta: Re-enable "Local forwarder, IPv4" test, accept NXDOMAIN as response
  * build(deps): bump golang.org/x/tools from 0.6.0 to 0.7.0 in /test/tools
  * CI: Switch to c20230307t192532z-f37f36d12 images
  * Cirrus: Run system &amp; integration tests in parallel
  * Update checkpointctl v0.1.0
  * Quadlet: add support for setting --ip and --ip6
  * build(deps): bump golang.org/x/net from 0.7.0 to 0.8.0
  * build(deps): bump golang.org/x/sys from 0.5.0 to 0.6.0
  * libpod: avoid nil pointer dereference in (*Container).Cleanup
  * [CI:DOCS] Add image not found info to troubleshooting
  * cmd: do not require userns for "version"
  * cmd: drop special handling for "scp"
  * cmd: clarify meaning of ParentNSRequired
  * Fix package restore
  * [CI:DOCS] Fix docs/version-check always requesting updates
  * sqlite: add a hidden --db-backend flag
  * fix: update the default machine value when the previously set default machine is deleted
  * podman machine: Adjust Chrony makestep config
  * sqlite: add container short ID to network aliases
  * sqlite: remove dead code
  * sqlite: addContainer: add named volume only once
  * sqlite: implement RewriteVolumeConfig
  * sqlite: LookupVolume: fix partial name match
  * sqlite: LookupVolume: wrap error
  * sqlite: fix type rewriting container config
  * sqlite: return correct error on pod-name conflict
  * sqlite: RewritePodConfig: update error message
  * test/system/255-auto-update.bats: wait 10 for update to finish
  * auto-update test: wait for service to be ready
  * Vendor in latest containers/(common, storage, image)
  * play kube: Add --wait option
  * Cirrus: Fix git config permission denied
  * Quadlet: Add support for the Mount key in .container files
  * build(deps): bump github.com/onsi/gomega from 1.27.1 to 1.27.2
  * fix "podman logs --since --follow" flake
  * Clarify that replicas are ignored in kubernetes deployment
  * Revert "Skip all pasta tests"
  * CI: Switch to c20230223t153813z-f37f36d12 images
  * Fix user socket path
  * pkginstaller: bump Qemu to version 7.2.0
  * Cirrus: Fix bud tests failing to apply patches
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2
  * build(deps): bump github.com/coreos/stream-metadata-go
  * Vendor in latest containers/storage
  * buildah-bud tests: don't sudo when rootless is desired
  * Temporarily disable version-check
  * CI: new rootless buildah-bud tests (cron only)
  * sqlite: fix volume lookups with partial names
  * sqlite: fix container lookups with partial IDs
  * sqlite: fix LookupPod
  * sqlite: fix pod create/rm
  * sqlite: LookupContainer: update error message
  * sqlite: AddContainerExitCode: allow to replace
  * system: add warning when running rootless on cgroupv1
  * sqlite: fix AllContainers with state
  * sqlite: fix "UPDATE TABLE" typos
  * sqlite: SaveVolume: fix syntax error updating the volumes table
  * sqlite: exit code: allow -1
  * sqlite: fix typo when removing exec sessions
  * sqlite: AllContainers: fix inner join
  * sqlite: move migration after table creation
  * sqlite: implement pod methods
  * Quadlet - use the default runtime
  * docs: context is not optional for build
  * Fix an incorrect comment on NewSqliteState
  * Add support for containers.conf database setting
  * Add support for volume operations to SQLite state
  * Implement exec session handling in SQL database
  * Various fixes from code review
  * Remove `--namespace` flag from Podman root
  * Get E2E tests to pass
  * Implement network disconnect for SQLite state
  * Implement Network Connect/Modify for SQLite state
  * Fix various lint issues
  * Some further work on SQLite state
  * Remove concept of Namespaces from BoltDB
  * Add initial SQLite-backed state implementation
  * Cirrus: Support runc testing on debian VMs
  * Skip all pasta tests
  * Skip buildah-bud test
  * Skip buildx test with VFS podman storage driver
  * Skip 'podman kube --network' test for rootless CGv1
  * Skip tests which fail with CGv1 &amp; runc
  * Skip rootless CGv1 quadlet tests due to issue
  * Makefile: Define SHELL
  * Machine refactor for QEMU/AppleHV
  * machine refactoring preparations for hyperv
  * [CI:BUILD] spec.rpkg: trim dependency list
  * Logs follow-until tests: loosen checks
  * [CI:DOCS] Windows/Mac docs link update
  * Doc update for docker network options via CLI
  * compat API: network create return 409 for duplicate
  * Apply suggestions to man page
  * vendor c/common@852ca05a1fbb
  * Quadlet: Add support for LogDriver key in container and kube units
  * machine refactoring preparations for hyperv
  * libpod: always use direct mapping
  * netavark: only use aardvark ip as nameserver
  * build(deps): bump github.com/container-orchestrated-devices/container-device-interface
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * make docs: sanity check for broken man pages
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.6 to 8.2.0
  * build(deps): bump github.com/onsi/gomega from 1.27.0 to 1.27.1
  * kube: rm secret on down, print secret on play
  * Fix spacing typo that triggered OCD &amp; indent units in podman-systemd.unit(5)
  * Update remote_client.md
  * [CI:DOCS] Add restriction to option README
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * build(deps): bump github.com/onsi/gomega from 1.26.0 to 1.27.0
  * kube play: only enforce passthrough in Quadlet
  * journald: remove initializeJournal()
  * auto-update: support pods
  * Emergency fix for man pages: check for broken includes
  * System tests: assert(): friendlier failure messages
  * Cirrus: Fix version-check to only run on `main` job
  * CI: Temporarily disable all AWS EC2-based tasks
  * build(deps): bump github.com/containerd/containerd from 1.6.16 to 1.6.18
  * volume,container: chroot to source before exporting content
  * Support sysctl configs via podman kube play
  * [CI:BUILD] copr: podman.spec.rpkg cleanups
  * quadlet system tests: add useful defaults, logging
  * libpod: support relative positions for idmaps
  * Experimental workaround for cdn03.quay.io flake
  * system tests: prevent leading tabs
  * Introduce podman machine os apply
  * create: add support for --group-entry
  * fix != filter in volume prune
  * Allow specification of podman --remote build -f -
  * Quadlet use crun specified in containers.conf
  * build(deps): bump golang.org/x/net from 0.6.0 to 0.7.0
  * Vendor c/image after https://github.com/containers/image/pull/1847
  * Don't set hostPort when generating a service
  * man page --format xref: tighten the autocompletion check
  * add support for limiting tmpfs size for systemd-specific mnts
  * build(deps): bump golang.org/x/text from 0.6.0 to 0.7.0
  * Add ulimit annotation to kube gen &amp; play
  * man page xref: validate displayed man page names
  * quadlet: add ExecStop
  * install sigproxy before start/attach
  * build(deps): bump golang.org/x/tools from 0.5.0 to 0.6.0 in /test/tools
  * Fix typos
  * Cirrus: Make benchmarks .env file easier to load
  * Cirrus: Omit functions in env. file
  * kube play: set service container as main PID when possible
  * Fix typos. Improve language.
  * events + container inspect test: RHEL fixes
  * Add ctrName to network alias during kube play
  * Run codespell on codebase
  * podman image scp: added identity for ssh.Exec
  * [CI:DOCS] Clarify nomap constrains
  * [CI:DOCS] man-page checker: include --format (Go templates)
  * Vendor c/image after https://github.com/containers/image/pull/1816
  * [CI:DOCS] Cleanup some man pages to display options with line breaks
  * [CI:DOCS] Add tables to podman-systemd.unit man page
  * github: remove prefix from bugs/features
  * Quadlet: Add support for the Secret key in Container group
  * [CI:DOCS] OWNERS: add @ygalblum and @alexlarsson
  * build(deps): bump golang.org/x/term from 0.4.0 to 0.5.0
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.1.6
  * Sort quadlet keys to make it easier to read
  * e2e: fix some tests on remote
  * kube play: do not teardown unconditionally on error
  * Fix typos in comments
  * Resolve symlink path for qemu directory if possible
  * #17363 Fix contradicting documentation podman-commit
  * Fix a potential UID/GID collision in unit tests
  * golangci-lint: show all errors at once
  * update golangci-lint to version 1.51.1
  * [CI:DOCS] events: document journald identifiers
  * Quadlet: exit 0 when there are no files to process
  * network ls: handle removed container
  * e2e: adapt play kube test on remote rootless
  * docs/podman-systemd.unit: Explicitely mention network &amp; kube units
  * docs/podman-systemd.unit: Update example to work out of the box
  * [CI:BUILD] Cirrus: Fix GraphQL ownerRepository:null error
  * Add missing return after errors
  * Revert "Cirrus: Emergency fix to un-stuck PRs"
  * pasta: Fix ICMPv6 Echo test, skip it for the moment
  * pasta: Fix ICMP Echo Request (IPv4) test
  * pasta: Use two connections instead of three in TCP range forward tests
  * Add SELinux label types support to quadlet
  * Add quadlet support for rootfs= containers
  * Cirrus: Emergency fix to un-stuck PRs
  * Move clean-binaries before podman-remote in podman-remote-docs target
  * oci: bind mount /sys with --userns=(auto|pod:)
  * Cleanup podman-systemd.unit file
  * Install podman-systemd.unit  man page, make quadlet discoverable
  * libpod: allow userns=keep-id for root
  * system-reset: use CleanCacheMount to clear build cache
  * vendor: bump buildah to v1.29.1-0.20230201192322-e56eb25575c7
  * system tests: fix noexistent labels test in the remote
  * Expose Podman named pipe in Inspect output
  * libpod: support idmap for --rootfs
  * test: adapt test to work on cgroupv1
  * Bump to v4.5.0-dev
  * Update main to reflect v4.4.0 release
  * Update from /github.com/vbauerster/mpb/v7 to /v8
  * hack/perf: cleanup after benchmarks
  * hack/perf/bz-2162111.sh: use custom network
  * Update bug_report.yaml
  * Handle filetype field in kubernetes.yaml files
  * hack/perf/bz-2162111.sh: measure stop
  * make hack/markdown-preprocess parallel-safe
  * system tests: fix volume exec/noexec test
  * system tests: minor fix for RHEL8 incompatibility
  * Cirrus: Use versionable IMAGE_SUFFIX
  * utils: new conversion method
  * libpod: use GraphRoot for overlay upper dir
  * vendor: update containers/storage
  * Do not mount /dev/tty into rootless containers
  * build(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7
  * e2e: fix run_staticip_test about no_proxy
  * docs: specify order preference for FROM
  * Fixes port collision issue on use of --publish-all
  * Support for Windows paths in the source position of the volume mounts
  * e2e tests: fix incorrect os.User.Name
  * Log data that we failed to unmarshal
  * [CI:DOCS] hack/perf: add script for BZ 216111
  * container rm: save once for exec removal and state change
  * [DOCS:CI] podman-events: document verbose create events
  * e2e: Avoid hard-coding included in quadlet test
  * e2e: Avoid hard-coding ImageCacheDir
  * Making gvproxy.exe optional for building Windows installer
  * Add gvproxy to Windows packages
  * Add comment to clarify error handling intention
  * fix #17244: use /etc/timezone where `timedatectl` is missing on Linux
  * Fix usage of absolute windows paths with --image-path
  * Match VT device paths to be blocked from mounting exactly
  * Fix default handling of pids-limit
  * Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml)
  * journald: podman logs only show logs for current user
  * journald: podman events only show events for current user
  * e2e: Remove the cache with "podman unshare rm" when a rootless user
  * Clean up more language for inclusiveness
  * e2e: Remove some directories at SynchronizedAfterSuite
  * fix: don't output "ago" when container is currently up and running
  * fix: running check error when podman is default in wsl
  * fix CI: test fail due to merge
  * Bump Bulidah to v1.29.0
  * e2e: reduce dependency on /tmp for e2e tests
  * Bump cirrus image with easier dependency management
  * quadlet: Add device support for .volume files
  * remote,build: error if containerignore is symlink
  * DB: make loading container states optional
  * ps: do not sync container
  * Set runAsNonRoot=true in gen kube
  * WSL refactoring
  * kube-play: add support for HostIPC in pod.Spec
  * Allow --device-cgroup-rule to be passed in by docker API</changelog>
  <changelog author="danish.prakash@suse.com" date="1685361600">- Update to version 4.5.1:
  * Release v4.5.1
  * [CI:DOCS] Final release notes for v4.5.1
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * Revert "Resolve symlink path for qemu directory if possible"
  * no need for podman-next rpm test on maint branch
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * network create/update: allow dns servers comma separated
  * machine: fix default connection URL to use 127.0.0.1
  * compat: accept tag in /images/create?fromSrc
  * compat container create: match duplicate mounts correctly
  * machine: qemu only remove connection after confirmation
  * windows: podman save allow the use of stdout
  * remote: exec inspect update exec session status
  * podman-remote logs: handle server error correctly
  * libpod: stop containers with --restart=always
  * Do not include image annotations when building spec
  * [v4.5] system tests: fix race in kube-play read-only
  * api: fix parsing filters
  * Support systemd optional prefix '-' for devices.
  * *: migrate image registry to registry.k8s.io
  * Makefile: include `release-artifacts` target
  * [CI:BUILD] Packit: Initial Enablement
  * Bump to v4.5.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
</package>
<package pkgid="3af5b62c5df304a3a00a87ec781b08cf98199b846479fce2494fad36fa446b35" name="podman-remote" arch="ppc64le">
  <version epoch="0" ver="4.7.2" rel="150500.3.3.1"/>
  <changelog author="danish.prakash@suse.com" date="1677240000">- Update to version 4.4.2:
  * Bump to v4.4.2
  * Release notes for v4.4.2
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * kube play: only enforce passthrough in Quadlet
  * Emergency fix for man pages: check for broken includes
  * CI: Temporarily disable all AWS EC2-based tasks
  * quadlet system tests: add useful defaults, logging
  * volume,container: chroot to source before exporting content
  * install sigproxy before start/attach
  * Update to c/image 5.24.1
  * events + container inspect test: RHEL fixes
  * Bump to v4.4.2-dev
- Remove patches (merged upstream):
  * volume-container-chroot-to-source-before-exporting-content.patch
- podman.spec: add `crun` requirement for quadlet
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add patch to let quadlet use the default runtime
  Added patch:
  * Quadlet-use-the-default-runtime.patch
  =&gt; Remove dependency on crun</changelog>
  <changelog author="danish.prakash@suse.com" date="1679659200">- Update to version 4.4.3:
  * Bump to v4.4.3
  * Release notes for v4.4.3
  * compat: /auth: parse server address correctly
  * vendor github.com/containers/common@v0.51.1
  * pkginstaller: bump Qemu to version 7.2.0
  * podman machine: Adjust Chrony makestep config
  * [v4.4] fix --health-on-failure=restart in transient unit
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * journald: remove initializeJournal()
  * netavark: only use aardvark ip as nameserver
  * compat API: network create return 409 for duplicate
  * fix "podman logs --since --follow" flake
  * system service --log-level=trace: support hijack
  * podman-mac-helper: exit 1 on error
  * bump golang.org/x/net to v0.8.0
  * Fix package restore
  * Quadlet - use the default runtime
  * Bump to v4.4.3-dev
- Remove patch (merged upstream):
  * Quadlet-use-the-default-runtime.patch
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="danish.prakash@suse.com" date="1680004800">- Update to version 4.4.4:
  * Bump to v4.4.4
  * Release notes for v4.4.4
  * libpod: always use direct mapping
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * Bump to v4.4.4-dev
- spec: Bump required version for libcontainers-common (bsc#1209495)</changelog>
  <changelog author="dcermak@suse.com" date="1681473600">- Don't build against EoL go versions, fixes bsc#1210299</changelog>
  <changelog author="danish.prakash@suse.com" date="1681819200">- Update to version 4.5.0:
  * Release v4.5.0
  * [CI:DOCS] Final release notes for v4.5.0
  * Quadlet - do not set log-driver by default
  * Return title fields as a list
  * Bump to v4.5.0-dev
  * Bump to v4.5.0-RC2
  * Final release notes for v4.5.0-RC2
  * test/e2e: remove unnecessary SkipIfNetavark() calls
  * test/e2e: deduplicated network test
  * docs: update podman-network-create.1
  * network create: add --interface-name
  * test/system/252-quadlet.bats: fix flake
  * Read kube_generate_type from containers.conf
  * Debian setup: workaround for runc /dev/char/10:200 bug
  * pkg/rootless: use catatonit from /usr/libexec/podman
  * rootless: make sure we only use a single pause process
  * Use atomic config writing strategy for podman machine config files
  * Add remaining release notes for v4.5.0-RC2
  * GHA: Use version instead of SHA for actions
  * chore(deps): update dependency containers/automation_images to v20230405
  * build: pass env by reference
  * test: retrofit error message
  * test/system: expect 12 char for short id
  * vendor: bump containers/(storage, common, buildah, image)
  * [skip-ci] Update actions/upload-artifact action to v3
  * [skip-ci] Update actions/stale action to v8
  * [skip-ci] Update actions/setup-go action to v4
  * [skip-ci] Update github/issue-labeler action to v2.6
  * Fix up codespell errors
  * Capitalize all uid,gid and id words that are not options in docs
  * build(deps): bump golang.org/x/tools from 0.7.0 to 0.8.0 in /test/tools
  * Properly remove the service container during kube down
  * quadlet: add `UserNS` option key
  * [CI:DOCS] Release notes for 4.5.0 Part 1
  * "podman pull by digest and list --all" test: untag instead of rmi
  * build(deps): bump golang.org/x/text from 0.8.0 to 0.9.0
  * Add renovate.json configuration
  * CI: postbuild step: skip under nightly treadmill
  * The `--ulimit` option accepts the name with an `RLIMIT_` prefix both upper and lower case
  * test/e2e: use custom network config dir where needed
  * chore: replace `github.com/ghodss/yaml` with `sigs.k8s.io/yaml`
  * update completion scripts for cobra v1.7.0
  * libpod.storageService.CreateContainerStorage(): retrieve ID maps
  * Fix invalid pod name and hostname during kube generate
  * e2e tests: fix racy flakes
  * Cirrus: Enable labeling of EC2 VMs
  * Cirrus: Fix aarch64 clone_script 404 errors
  * e2e: GinkgoParallelNode() -&gt; ...Process()
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
  * build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0
  * [CI:DOCS] --creds and registries
  * Copr: fix build deps for /usr/bin/envsubst
  * Don't error when removing non-existant env vars
  * e2e: healthcheck on stopped container: fix flake
  * test/apiv2/80-kube.at
  * test/apiv2/80-kube.at
  * system service: do not close Body
  * rm `hack/release.sh`
  * build(deps): bump github.com/onsi/gomega from 1.27.5 to 1.27.6
  * add `quadlet -version` flag
  * add version/rawversion package
  * quadlet: use `Flag` suffix for variables
  * quadlet: implement `Tmpfs` option
  * Bump to v4.5.0-dev
  * Bump to 4.5.0-rc1
  * Update release notes from 4.4 branch
  * rootless netns: recover from invalid netns
  * System tests: unverbosify a flake log
  * Add support for secret exists
  * Fix Win install task failures with large PR bodies
  * docs: add `starting` to `HealthCheckResults.Status`
  * Add support for cgroup_config from containers.conf
  * libpod: mount safely subpaths
  * Support Deployment generation with kube generate
  * Use secret.items to create volume mounts if present
  * [CI:DOCS] fix typo in --systemd option
  * rootless: drop preexec hook error message
  * Edit the docker wrapper to use the install prefix
  * Update podman-for-windows.md
  * Quadlet: RemapUsers documentation fixes
  * speed up image listing
  * vendor containers/common@e27c30ee9b1b
  * fix volume-plugin-test flake
  * Document building Podman remote on Windows hosts
  * test/e2e: gpg keep stdout/err attached
  * auto-update: stop+start instead of restart sytemd units
  * [CI:DOCS] Improve basic tutorial
  * Update docs/source/markdown/podman-network.1.md
  * Add debug to --wait test
  * fix slirp4netns resolv.conf ip with a userns
  * Quadlet: add support for keep-id with mapping values
  * Quadlet E2E test - run quadlet as user generator
  * sqlite: do not `Ping()` after connecting
  * Quadlet - treat paths starting with systemd specifiers as absolute
  * Update docs/source/markdown/podman-kube-play.1.md.in
  * system tests: use CONTAINERS_CONF_OVERRIDE
  * implement podman machine set for hyperv
  * [CI:DOCS] Add network subnets info to network man page
  * CI: retry the golangci install
  * system tests: fix racey sdnotify test
  * hyperv: lookup machine on local filesystem first
  * fix os.IsNotExist() CI check
  * Ensure that SQLite state handles name-ID collisions
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * build(deps): bump github.com/onsi/gomega from 1.27.4 to 1.27.5
  * Fix a race around SQLite DB config validation
  * add CONTAINERS_CONF_OVERRIDE
  * vendor containers/common@main
  * docs: minor grammar fix in `--volume` description
  * sqlite: do not use shared cache
  * test: podman checkpoint/restore the latest container
  * stats compat API: return "id" lowercase
  * Run make codespell
  * Drop SQLite max connections
  * sqlite: set connection attributes on open
  * Fix database locked errors with SQLite
  * quadlet tests: skip on RHEL8 rootless
  * Kube Play Doc: Document the support for K8S Secret
  * New ulimit test: bump up minimum nfiles
  * logformatter: hide --db-backend, and friendlyize quadlet
  * Quadlet - add support for relative path in Volume key in .container file
  * Add service ctr cleanup to PlayKubeDown
  * fix --health-on-failure=restart in transient unit
  * Quadlet Doc: Suggest the kill operation for HealthOnFailure
  * Quadlet - Add support for health checks configuration in .container files
  * Makefile: allow specifying /lib dir location
  * Fix option --opts -&gt; --opt
  * basic hypverv machine implementation
  * Fix SQLite DB schema migration code
  * Add support for oom_score_adj value from containers.conf
  * Use default_ulimits field in containers.conf
  * CI: test and confirm DESIRED_DATABASE
  * build(deps): bump github.com/openshift/imagebuilder
  * logformatter: futureproof output filename
  * Vendor in latest containers/(storage, common, image)
  * build(deps): bump google.golang.org/protobuf from 1.29.0 to 1.30.0
  * test/system/255-auto-update.bats: add debug logs
  * Revert "Revert "pasta: Use two connections instead of three in TCP range forward tests""
  * Add information for secret inspect
  * Add format to podman volume ls
  * Add format to podman volume inspect
  * Add format to podman secret ls
  * Add format to podman system df
  * Add format to podman machine info
  * Add format table to podman image inspect man page
  * Cirrus: Store podman machine benchmark data
  * Update Cirrus display names, and fix get-ci-vm script
  * Ensure SQLite places uses the runroot in transient mode
  * Fix various integration test issues with SQLite state
  * Remove test for pod/container name global uniqueness
  * Improve handling of existing container names in SQLite
  * Add SQLite job to CI
  * buildah treadmill: also run rootless tests
  * build(deps): bump github.com/vbatts/git-validation in /test/tools
  * auto update: return restart error
  * fix: Document removing anonymous volumes
  * events: no duplicates when streaming during a log rotation
  * Add search --cert-dir, --creds
  * podman-mac-helper: exit 1 on error
  * system service --log-level=trace: support hijack
  * test/system: fix wait_for_port() to wait for bind
  * cgroupns: private cgroupns on cgroupv1 breaks --systemd
  * libpod: remove error stutter
  * podman events: unhide --stream
  * test/system/255-auto-update.bats: multiple services
  * 255-auto-update.bats: turn off rollback where needed
  * Use append() to add elements to a slice
  * Revert "pasta: Use two connections instead of three in TCP range forward tests"
  * Support running nested SELinux container separation
  * bud tests: rootless remote: use correct socket path
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.2.1 to 8.3.0
  * compat: /auth: parse server address correctly
  * docs: fix cmd `set DOCKER_HOST` suggestion
  * test: reenable idmap test
  * Must use mountlabel when creating builtin volumes
  * podman.spec.rpkg: distro conditionals for modulesloaddir
  * build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.29.0
  * podman inspect list network when using --net=host or none
  * pasta: Re-enable "Local forwarder, IPv4" test, accept NXDOMAIN as response
  * build(deps): bump golang.org/x/tools from 0.6.0 to 0.7.0 in /test/tools
  * CI: Switch to c20230307t192532z-f37f36d12 images
  * Cirrus: Run system &amp; integration tests in parallel
  * Update checkpointctl v0.1.0
  * Quadlet: add support for setting --ip and --ip6
  * build(deps): bump golang.org/x/net from 0.7.0 to 0.8.0
  * build(deps): bump golang.org/x/sys from 0.5.0 to 0.6.0
  * libpod: avoid nil pointer dereference in (*Container).Cleanup
  * [CI:DOCS] Add image not found info to troubleshooting
  * cmd: do not require userns for "version"
  * cmd: drop special handling for "scp"
  * cmd: clarify meaning of ParentNSRequired
  * Fix package restore
  * [CI:DOCS] Fix docs/version-check always requesting updates
  * sqlite: add a hidden --db-backend flag
  * fix: update the default machine value when the previously set default machine is deleted
  * podman machine: Adjust Chrony makestep config
  * sqlite: add container short ID to network aliases
  * sqlite: remove dead code
  * sqlite: addContainer: add named volume only once
  * sqlite: implement RewriteVolumeConfig
  * sqlite: LookupVolume: fix partial name match
  * sqlite: LookupVolume: wrap error
  * sqlite: fix type rewriting container config
  * sqlite: return correct error on pod-name conflict
  * sqlite: RewritePodConfig: update error message
  * test/system/255-auto-update.bats: wait 10 for update to finish
  * auto-update test: wait for service to be ready
  * Vendor in latest containers/(common, storage, image)
  * play kube: Add --wait option
  * Cirrus: Fix git config permission denied
  * Quadlet: Add support for the Mount key in .container files
  * build(deps): bump github.com/onsi/gomega from 1.27.1 to 1.27.2
  * fix "podman logs --since --follow" flake
  * Clarify that replicas are ignored in kubernetes deployment
  * Revert "Skip all pasta tests"
  * CI: Switch to c20230223t153813z-f37f36d12 images
  * Fix user socket path
  * pkginstaller: bump Qemu to version 7.2.0
  * Cirrus: Fix bud tests failing to apply patches
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2
  * build(deps): bump github.com/coreos/stream-metadata-go
  * Vendor in latest containers/storage
  * buildah-bud tests: don't sudo when rootless is desired
  * Temporarily disable version-check
  * CI: new rootless buildah-bud tests (cron only)
  * sqlite: fix volume lookups with partial names
  * sqlite: fix container lookups with partial IDs
  * sqlite: fix LookupPod
  * sqlite: fix pod create/rm
  * sqlite: LookupContainer: update error message
  * sqlite: AddContainerExitCode: allow to replace
  * system: add warning when running rootless on cgroupv1
  * sqlite: fix AllContainers with state
  * sqlite: fix "UPDATE TABLE" typos
  * sqlite: SaveVolume: fix syntax error updating the volumes table
  * sqlite: exit code: allow -1
  * sqlite: fix typo when removing exec sessions
  * sqlite: AllContainers: fix inner join
  * sqlite: move migration after table creation
  * sqlite: implement pod methods
  * Quadlet - use the default runtime
  * docs: context is not optional for build
  * Fix an incorrect comment on NewSqliteState
  * Add support for containers.conf database setting
  * Add support for volume operations to SQLite state
  * Implement exec session handling in SQL database
  * Various fixes from code review
  * Remove `--namespace` flag from Podman root
  * Get E2E tests to pass
  * Implement network disconnect for SQLite state
  * Implement Network Connect/Modify for SQLite state
  * Fix various lint issues
  * Some further work on SQLite state
  * Remove concept of Namespaces from BoltDB
  * Add initial SQLite-backed state implementation
  * Cirrus: Support runc testing on debian VMs
  * Skip all pasta tests
  * Skip buildah-bud test
  * Skip buildx test with VFS podman storage driver
  * Skip 'podman kube --network' test for rootless CGv1
  * Skip tests which fail with CGv1 &amp; runc
  * Skip rootless CGv1 quadlet tests due to issue
  * Makefile: Define SHELL
  * Machine refactor for QEMU/AppleHV
  * machine refactoring preparations for hyperv
  * [CI:BUILD] spec.rpkg: trim dependency list
  * Logs follow-until tests: loosen checks
  * [CI:DOCS] Windows/Mac docs link update
  * Doc update for docker network options via CLI
  * compat API: network create return 409 for duplicate
  * Apply suggestions to man page
  * vendor c/common@852ca05a1fbb
  * Quadlet: Add support for LogDriver key in container and kube units
  * machine refactoring preparations for hyperv
  * libpod: always use direct mapping
  * netavark: only use aardvark ip as nameserver
  * build(deps): bump github.com/container-orchestrated-devices/container-device-interface
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * make docs: sanity check for broken man pages
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.6 to 8.2.0
  * build(deps): bump github.com/onsi/gomega from 1.27.0 to 1.27.1
  * kube: rm secret on down, print secret on play
  * Fix spacing typo that triggered OCD &amp; indent units in podman-systemd.unit(5)
  * Update remote_client.md
  * [CI:DOCS] Add restriction to option README
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * build(deps): bump github.com/onsi/gomega from 1.26.0 to 1.27.0
  * kube play: only enforce passthrough in Quadlet
  * journald: remove initializeJournal()
  * auto-update: support pods
  * Emergency fix for man pages: check for broken includes
  * System tests: assert(): friendlier failure messages
  * Cirrus: Fix version-check to only run on `main` job
  * CI: Temporarily disable all AWS EC2-based tasks
  * build(deps): bump github.com/containerd/containerd from 1.6.16 to 1.6.18
  * volume,container: chroot to source before exporting content
  * Support sysctl configs via podman kube play
  * [CI:BUILD] copr: podman.spec.rpkg cleanups
  * quadlet system tests: add useful defaults, logging
  * libpod: support relative positions for idmaps
  * Experimental workaround for cdn03.quay.io flake
  * system tests: prevent leading tabs
  * Introduce podman machine os apply
  * create: add support for --group-entry
  * fix != filter in volume prune
  * Allow specification of podman --remote build -f -
  * Quadlet use crun specified in containers.conf
  * build(deps): bump golang.org/x/net from 0.6.0 to 0.7.0
  * Vendor c/image after https://github.com/containers/image/pull/1847
  * Don't set hostPort when generating a service
  * man page --format xref: tighten the autocompletion check
  * add support for limiting tmpfs size for systemd-specific mnts
  * build(deps): bump golang.org/x/text from 0.6.0 to 0.7.0
  * Add ulimit annotation to kube gen &amp; play
  * man page xref: validate displayed man page names
  * quadlet: add ExecStop
  * install sigproxy before start/attach
  * build(deps): bump golang.org/x/tools from 0.5.0 to 0.6.0 in /test/tools
  * Fix typos
  * Cirrus: Make benchmarks .env file easier to load
  * Cirrus: Omit functions in env. file
  * kube play: set service container as main PID when possible
  * Fix typos. Improve language.
  * events + container inspect test: RHEL fixes
  * Add ctrName to network alias during kube play
  * Run codespell on codebase
  * podman image scp: added identity for ssh.Exec
  * [CI:DOCS] Clarify nomap constrains
  * [CI:DOCS] man-page checker: include --format (Go templates)
  * Vendor c/image after https://github.com/containers/image/pull/1816
  * [CI:DOCS] Cleanup some man pages to display options with line breaks
  * [CI:DOCS] Add tables to podman-systemd.unit man page
  * github: remove prefix from bugs/features
  * Quadlet: Add support for the Secret key in Container group
  * [CI:DOCS] OWNERS: add @ygalblum and @alexlarsson
  * build(deps): bump golang.org/x/term from 0.4.0 to 0.5.0
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.1.6
  * Sort quadlet keys to make it easier to read
  * e2e: fix some tests on remote
  * kube play: do not teardown unconditionally on error
  * Fix typos in comments
  * Resolve symlink path for qemu directory if possible
  * #17363 Fix contradicting documentation podman-commit
  * Fix a potential UID/GID collision in unit tests
  * golangci-lint: show all errors at once
  * update golangci-lint to version 1.51.1
  * [CI:DOCS] events: document journald identifiers
  * Quadlet: exit 0 when there are no files to process
  * network ls: handle removed container
  * e2e: adapt play kube test on remote rootless
  * docs/podman-systemd.unit: Explicitely mention network &amp; kube units
  * docs/podman-systemd.unit: Update example to work out of the box
  * [CI:BUILD] Cirrus: Fix GraphQL ownerRepository:null error
  * Add missing return after errors
  * Revert "Cirrus: Emergency fix to un-stuck PRs"
  * pasta: Fix ICMPv6 Echo test, skip it for the moment
  * pasta: Fix ICMP Echo Request (IPv4) test
  * pasta: Use two connections instead of three in TCP range forward tests
  * Add SELinux label types support to quadlet
  * Add quadlet support for rootfs= containers
  * Cirrus: Emergency fix to un-stuck PRs
  * Move clean-binaries before podman-remote in podman-remote-docs target
  * oci: bind mount /sys with --userns=(auto|pod:)
  * Cleanup podman-systemd.unit file
  * Install podman-systemd.unit  man page, make quadlet discoverable
  * libpod: allow userns=keep-id for root
  * system-reset: use CleanCacheMount to clear build cache
  * vendor: bump buildah to v1.29.1-0.20230201192322-e56eb25575c7
  * system tests: fix noexistent labels test in the remote
  * Expose Podman named pipe in Inspect output
  * libpod: support idmap for --rootfs
  * test: adapt test to work on cgroupv1
  * Bump to v4.5.0-dev
  * Update main to reflect v4.4.0 release
  * Update from /github.com/vbauerster/mpb/v7 to /v8
  * hack/perf: cleanup after benchmarks
  * hack/perf/bz-2162111.sh: use custom network
  * Update bug_report.yaml
  * Handle filetype field in kubernetes.yaml files
  * hack/perf/bz-2162111.sh: measure stop
  * make hack/markdown-preprocess parallel-safe
  * system tests: fix volume exec/noexec test
  * system tests: minor fix for RHEL8 incompatibility
  * Cirrus: Use versionable IMAGE_SUFFIX
  * utils: new conversion method
  * libpod: use GraphRoot for overlay upper dir
  * vendor: update containers/storage
  * Do not mount /dev/tty into rootless containers
  * build(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7
  * e2e: fix run_staticip_test about no_proxy
  * docs: specify order preference for FROM
  * Fixes port collision issue on use of --publish-all
  * Support for Windows paths in the source position of the volume mounts
  * e2e tests: fix incorrect os.User.Name
  * Log data that we failed to unmarshal
  * [CI:DOCS] hack/perf: add script for BZ 216111
  * container rm: save once for exec removal and state change
  * [DOCS:CI] podman-events: document verbose create events
  * e2e: Avoid hard-coding included in quadlet test
  * e2e: Avoid hard-coding ImageCacheDir
  * Making gvproxy.exe optional for building Windows installer
  * Add gvproxy to Windows packages
  * Add comment to clarify error handling intention
  * fix #17244: use /etc/timezone where `timedatectl` is missing on Linux
  * Fix usage of absolute windows paths with --image-path
  * Match VT device paths to be blocked from mounting exactly
  * Fix default handling of pids-limit
  * Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml)
  * journald: podman logs only show logs for current user
  * journald: podman events only show events for current user
  * e2e: Remove the cache with "podman unshare rm" when a rootless user
  * Clean up more language for inclusiveness
  * e2e: Remove some directories at SynchronizedAfterSuite
  * fix: don't output "ago" when container is currently up and running
  * fix: running check error when podman is default in wsl
  * fix CI: test fail due to merge
  * Bump Bulidah to v1.29.0
  * e2e: reduce dependency on /tmp for e2e tests
  * Bump cirrus image with easier dependency management
  * quadlet: Add device support for .volume files
  * remote,build: error if containerignore is symlink
  * DB: make loading container states optional
  * ps: do not sync container
  * Set runAsNonRoot=true in gen kube
  * WSL refactoring
  * kube-play: add support for HostIPC in pod.Spec
  * Allow --device-cgroup-rule to be passed in by docker API</changelog>
  <changelog author="danish.prakash@suse.com" date="1685361600">- Update to version 4.5.1:
  * Release v4.5.1
  * [CI:DOCS] Final release notes for v4.5.1
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * Revert "Resolve symlink path for qemu directory if possible"
  * no need for podman-next rpm test on maint branch
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * network create/update: allow dns servers comma separated
  * machine: fix default connection URL to use 127.0.0.1
  * compat: accept tag in /images/create?fromSrc
  * compat container create: match duplicate mounts correctly
  * machine: qemu only remove connection after confirmation
  * windows: podman save allow the use of stdout
  * remote: exec inspect update exec session status
  * podman-remote logs: handle server error correctly
  * libpod: stop containers with --restart=always
  * Do not include image annotations when building spec
  * [v4.5] system tests: fix race in kube-play read-only
  * api: fix parsing filters
  * Support systemd optional prefix '-' for devices.
  * *: migrate image registry to registry.k8s.io
  * Makefile: include `release-artifacts` target
  * [CI:BUILD] Packit: Initial Enablement
  * Bump to v4.5.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
</package>
<package pkgid="3383333f4219b7973733dd734389341701842d7cb0a1c8c74b82859dab393c19" name="podman-remote" arch="s390x">
  <version epoch="0" ver="4.7.2" rel="150500.3.3.1"/>
  <changelog author="danish.prakash@suse.com" date="1677240000">- Update to version 4.4.2:
  * Bump to v4.4.2
  * Release notes for v4.4.2
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * kube play: only enforce passthrough in Quadlet
  * Emergency fix for man pages: check for broken includes
  * CI: Temporarily disable all AWS EC2-based tasks
  * quadlet system tests: add useful defaults, logging
  * volume,container: chroot to source before exporting content
  * install sigproxy before start/attach
  * Update to c/image 5.24.1
  * events + container inspect test: RHEL fixes
  * Bump to v4.4.2-dev
- Remove patches (merged upstream):
  * volume-container-chroot-to-source-before-exporting-content.patch
- podman.spec: add `crun` requirement for quadlet
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add patch to let quadlet use the default runtime
  Added patch:
  * Quadlet-use-the-default-runtime.patch
  =&gt; Remove dependency on crun</changelog>
  <changelog author="danish.prakash@suse.com" date="1679659200">- Update to version 4.4.3:
  * Bump to v4.4.3
  * Release notes for v4.4.3
  * compat: /auth: parse server address correctly
  * vendor github.com/containers/common@v0.51.1
  * pkginstaller: bump Qemu to version 7.2.0
  * podman machine: Adjust Chrony makestep config
  * [v4.4] fix --health-on-failure=restart in transient unit
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * journald: remove initializeJournal()
  * netavark: only use aardvark ip as nameserver
  * compat API: network create return 409 for duplicate
  * fix "podman logs --since --follow" flake
  * system service --log-level=trace: support hijack
  * podman-mac-helper: exit 1 on error
  * bump golang.org/x/net to v0.8.0
  * Fix package restore
  * Quadlet - use the default runtime
  * Bump to v4.4.3-dev
- Remove patch (merged upstream):
  * Quadlet-use-the-default-runtime.patch
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="danish.prakash@suse.com" date="1680004800">- Update to version 4.4.4:
  * Bump to v4.4.4
  * Release notes for v4.4.4
  * libpod: always use direct mapping
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * Bump to v4.4.4-dev
- spec: Bump required version for libcontainers-common (bsc#1209495)</changelog>
  <changelog author="dcermak@suse.com" date="1681473600">- Don't build against EoL go versions, fixes bsc#1210299</changelog>
  <changelog author="danish.prakash@suse.com" date="1681819200">- Update to version 4.5.0:
  * Release v4.5.0
  * [CI:DOCS] Final release notes for v4.5.0
  * Quadlet - do not set log-driver by default
  * Return title fields as a list
  * Bump to v4.5.0-dev
  * Bump to v4.5.0-RC2
  * Final release notes for v4.5.0-RC2
  * test/e2e: remove unnecessary SkipIfNetavark() calls
  * test/e2e: deduplicated network test
  * docs: update podman-network-create.1
  * network create: add --interface-name
  * test/system/252-quadlet.bats: fix flake
  * Read kube_generate_type from containers.conf
  * Debian setup: workaround for runc /dev/char/10:200 bug
  * pkg/rootless: use catatonit from /usr/libexec/podman
  * rootless: make sure we only use a single pause process
  * Use atomic config writing strategy for podman machine config files
  * Add remaining release notes for v4.5.0-RC2
  * GHA: Use version instead of SHA for actions
  * chore(deps): update dependency containers/automation_images to v20230405
  * build: pass env by reference
  * test: retrofit error message
  * test/system: expect 12 char for short id
  * vendor: bump containers/(storage, common, buildah, image)
  * [skip-ci] Update actions/upload-artifact action to v3
  * [skip-ci] Update actions/stale action to v8
  * [skip-ci] Update actions/setup-go action to v4
  * [skip-ci] Update github/issue-labeler action to v2.6
  * Fix up codespell errors
  * Capitalize all uid,gid and id words that are not options in docs
  * build(deps): bump golang.org/x/tools from 0.7.0 to 0.8.0 in /test/tools
  * Properly remove the service container during kube down
  * quadlet: add `UserNS` option key
  * [CI:DOCS] Release notes for 4.5.0 Part 1
  * "podman pull by digest and list --all" test: untag instead of rmi
  * build(deps): bump golang.org/x/text from 0.8.0 to 0.9.0
  * Add renovate.json configuration
  * CI: postbuild step: skip under nightly treadmill
  * The `--ulimit` option accepts the name with an `RLIMIT_` prefix both upper and lower case
  * test/e2e: use custom network config dir where needed
  * chore: replace `github.com/ghodss/yaml` with `sigs.k8s.io/yaml`
  * update completion scripts for cobra v1.7.0
  * libpod.storageService.CreateContainerStorage(): retrieve ID maps
  * Fix invalid pod name and hostname during kube generate
  * e2e tests: fix racy flakes
  * Cirrus: Enable labeling of EC2 VMs
  * Cirrus: Fix aarch64 clone_script 404 errors
  * e2e: GinkgoParallelNode() -&gt; ...Process()
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
  * build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0
  * [CI:DOCS] --creds and registries
  * Copr: fix build deps for /usr/bin/envsubst
  * Don't error when removing non-existant env vars
  * e2e: healthcheck on stopped container: fix flake
  * test/apiv2/80-kube.at
  * test/apiv2/80-kube.at
  * system service: do not close Body
  * rm `hack/release.sh`
  * build(deps): bump github.com/onsi/gomega from 1.27.5 to 1.27.6
  * add `quadlet -version` flag
  * add version/rawversion package
  * quadlet: use `Flag` suffix for variables
  * quadlet: implement `Tmpfs` option
  * Bump to v4.5.0-dev
  * Bump to 4.5.0-rc1
  * Update release notes from 4.4 branch
  * rootless netns: recover from invalid netns
  * System tests: unverbosify a flake log
  * Add support for secret exists
  * Fix Win install task failures with large PR bodies
  * docs: add `starting` to `HealthCheckResults.Status`
  * Add support for cgroup_config from containers.conf
  * libpod: mount safely subpaths
  * Support Deployment generation with kube generate
  * Use secret.items to create volume mounts if present
  * [CI:DOCS] fix typo in --systemd option
  * rootless: drop preexec hook error message
  * Edit the docker wrapper to use the install prefix
  * Update podman-for-windows.md
  * Quadlet: RemapUsers documentation fixes
  * speed up image listing
  * vendor containers/common@e27c30ee9b1b
  * fix volume-plugin-test flake
  * Document building Podman remote on Windows hosts
  * test/e2e: gpg keep stdout/err attached
  * auto-update: stop+start instead of restart sytemd units
  * [CI:DOCS] Improve basic tutorial
  * Update docs/source/markdown/podman-network.1.md
  * Add debug to --wait test
  * fix slirp4netns resolv.conf ip with a userns
  * Quadlet: add support for keep-id with mapping values
  * Quadlet E2E test - run quadlet as user generator
  * sqlite: do not `Ping()` after connecting
  * Quadlet - treat paths starting with systemd specifiers as absolute
  * Update docs/source/markdown/podman-kube-play.1.md.in
  * system tests: use CONTAINERS_CONF_OVERRIDE
  * implement podman machine set for hyperv
  * [CI:DOCS] Add network subnets info to network man page
  * CI: retry the golangci install
  * system tests: fix racey sdnotify test
  * hyperv: lookup machine on local filesystem first
  * fix os.IsNotExist() CI check
  * Ensure that SQLite state handles name-ID collisions
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * build(deps): bump github.com/onsi/gomega from 1.27.4 to 1.27.5
  * Fix a race around SQLite DB config validation
  * add CONTAINERS_CONF_OVERRIDE
  * vendor containers/common@main
  * docs: minor grammar fix in `--volume` description
  * sqlite: do not use shared cache
  * test: podman checkpoint/restore the latest container
  * stats compat API: return "id" lowercase
  * Run make codespell
  * Drop SQLite max connections
  * sqlite: set connection attributes on open
  * Fix database locked errors with SQLite
  * quadlet tests: skip on RHEL8 rootless
  * Kube Play Doc: Document the support for K8S Secret
  * New ulimit test: bump up minimum nfiles
  * logformatter: hide --db-backend, and friendlyize quadlet
  * Quadlet - add support for relative path in Volume key in .container file
  * Add service ctr cleanup to PlayKubeDown
  * fix --health-on-failure=restart in transient unit
  * Quadlet Doc: Suggest the kill operation for HealthOnFailure
  * Quadlet - Add support for health checks configuration in .container files
  * Makefile: allow specifying /lib dir location
  * Fix option --opts -&gt; --opt
  * basic hypverv machine implementation
  * Fix SQLite DB schema migration code
  * Add support for oom_score_adj value from containers.conf
  * Use default_ulimits field in containers.conf
  * CI: test and confirm DESIRED_DATABASE
  * build(deps): bump github.com/openshift/imagebuilder
  * logformatter: futureproof output filename
  * Vendor in latest containers/(storage, common, image)
  * build(deps): bump google.golang.org/protobuf from 1.29.0 to 1.30.0
  * test/system/255-auto-update.bats: add debug logs
  * Revert "Revert "pasta: Use two connections instead of three in TCP range forward tests""
  * Add information for secret inspect
  * Add format to podman volume ls
  * Add format to podman volume inspect
  * Add format to podman secret ls
  * Add format to podman system df
  * Add format to podman machine info
  * Add format table to podman image inspect man page
  * Cirrus: Store podman machine benchmark data
  * Update Cirrus display names, and fix get-ci-vm script
  * Ensure SQLite places uses the runroot in transient mode
  * Fix various integration test issues with SQLite state
  * Remove test for pod/container name global uniqueness
  * Improve handling of existing container names in SQLite
  * Add SQLite job to CI
  * buildah treadmill: also run rootless tests
  * build(deps): bump github.com/vbatts/git-validation in /test/tools
  * auto update: return restart error
  * fix: Document removing anonymous volumes
  * events: no duplicates when streaming during a log rotation
  * Add search --cert-dir, --creds
  * podman-mac-helper: exit 1 on error
  * system service --log-level=trace: support hijack
  * test/system: fix wait_for_port() to wait for bind
  * cgroupns: private cgroupns on cgroupv1 breaks --systemd
  * libpod: remove error stutter
  * podman events: unhide --stream
  * test/system/255-auto-update.bats: multiple services
  * 255-auto-update.bats: turn off rollback where needed
  * Use append() to add elements to a slice
  * Revert "pasta: Use two connections instead of three in TCP range forward tests"
  * Support running nested SELinux container separation
  * bud tests: rootless remote: use correct socket path
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.2.1 to 8.3.0
  * compat: /auth: parse server address correctly
  * docs: fix cmd `set DOCKER_HOST` suggestion
  * test: reenable idmap test
  * Must use mountlabel when creating builtin volumes
  * podman.spec.rpkg: distro conditionals for modulesloaddir
  * build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.29.0
  * podman inspect list network when using --net=host or none
  * pasta: Re-enable "Local forwarder, IPv4" test, accept NXDOMAIN as response
  * build(deps): bump golang.org/x/tools from 0.6.0 to 0.7.0 in /test/tools
  * CI: Switch to c20230307t192532z-f37f36d12 images
  * Cirrus: Run system &amp; integration tests in parallel
  * Update checkpointctl v0.1.0
  * Quadlet: add support for setting --ip and --ip6
  * build(deps): bump golang.org/x/net from 0.7.0 to 0.8.0
  * build(deps): bump golang.org/x/sys from 0.5.0 to 0.6.0
  * libpod: avoid nil pointer dereference in (*Container).Cleanup
  * [CI:DOCS] Add image not found info to troubleshooting
  * cmd: do not require userns for "version"
  * cmd: drop special handling for "scp"
  * cmd: clarify meaning of ParentNSRequired
  * Fix package restore
  * [CI:DOCS] Fix docs/version-check always requesting updates
  * sqlite: add a hidden --db-backend flag
  * fix: update the default machine value when the previously set default machine is deleted
  * podman machine: Adjust Chrony makestep config
  * sqlite: add container short ID to network aliases
  * sqlite: remove dead code
  * sqlite: addContainer: add named volume only once
  * sqlite: implement RewriteVolumeConfig
  * sqlite: LookupVolume: fix partial name match
  * sqlite: LookupVolume: wrap error
  * sqlite: fix type rewriting container config
  * sqlite: return correct error on pod-name conflict
  * sqlite: RewritePodConfig: update error message
  * test/system/255-auto-update.bats: wait 10 for update to finish
  * auto-update test: wait for service to be ready
  * Vendor in latest containers/(common, storage, image)
  * play kube: Add --wait option
  * Cirrus: Fix git config permission denied
  * Quadlet: Add support for the Mount key in .container files
  * build(deps): bump github.com/onsi/gomega from 1.27.1 to 1.27.2
  * fix "podman logs --since --follow" flake
  * Clarify that replicas are ignored in kubernetes deployment
  * Revert "Skip all pasta tests"
  * CI: Switch to c20230223t153813z-f37f36d12 images
  * Fix user socket path
  * pkginstaller: bump Qemu to version 7.2.0
  * Cirrus: Fix bud tests failing to apply patches
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2
  * build(deps): bump github.com/coreos/stream-metadata-go
  * Vendor in latest containers/storage
  * buildah-bud tests: don't sudo when rootless is desired
  * Temporarily disable version-check
  * CI: new rootless buildah-bud tests (cron only)
  * sqlite: fix volume lookups with partial names
  * sqlite: fix container lookups with partial IDs
  * sqlite: fix LookupPod
  * sqlite: fix pod create/rm
  * sqlite: LookupContainer: update error message
  * sqlite: AddContainerExitCode: allow to replace
  * system: add warning when running rootless on cgroupv1
  * sqlite: fix AllContainers with state
  * sqlite: fix "UPDATE TABLE" typos
  * sqlite: SaveVolume: fix syntax error updating the volumes table
  * sqlite: exit code: allow -1
  * sqlite: fix typo when removing exec sessions
  * sqlite: AllContainers: fix inner join
  * sqlite: move migration after table creation
  * sqlite: implement pod methods
  * Quadlet - use the default runtime
  * docs: context is not optional for build
  * Fix an incorrect comment on NewSqliteState
  * Add support for containers.conf database setting
  * Add support for volume operations to SQLite state
  * Implement exec session handling in SQL database
  * Various fixes from code review
  * Remove `--namespace` flag from Podman root
  * Get E2E tests to pass
  * Implement network disconnect for SQLite state
  * Implement Network Connect/Modify for SQLite state
  * Fix various lint issues
  * Some further work on SQLite state
  * Remove concept of Namespaces from BoltDB
  * Add initial SQLite-backed state implementation
  * Cirrus: Support runc testing on debian VMs
  * Skip all pasta tests
  * Skip buildah-bud test
  * Skip buildx test with VFS podman storage driver
  * Skip 'podman kube --network' test for rootless CGv1
  * Skip tests which fail with CGv1 &amp; runc
  * Skip rootless CGv1 quadlet tests due to issue
  * Makefile: Define SHELL
  * Machine refactor for QEMU/AppleHV
  * machine refactoring preparations for hyperv
  * [CI:BUILD] spec.rpkg: trim dependency list
  * Logs follow-until tests: loosen checks
  * [CI:DOCS] Windows/Mac docs link update
  * Doc update for docker network options via CLI
  * compat API: network create return 409 for duplicate
  * Apply suggestions to man page
  * vendor c/common@852ca05a1fbb
  * Quadlet: Add support for LogDriver key in container and kube units
  * machine refactoring preparations for hyperv
  * libpod: always use direct mapping
  * netavark: only use aardvark ip as nameserver
  * build(deps): bump github.com/container-orchestrated-devices/container-device-interface
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * make docs: sanity check for broken man pages
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.6 to 8.2.0
  * build(deps): bump github.com/onsi/gomega from 1.27.0 to 1.27.1
  * kube: rm secret on down, print secret on play
  * Fix spacing typo that triggered OCD &amp; indent units in podman-systemd.unit(5)
  * Update remote_client.md
  * [CI:DOCS] Add restriction to option README
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * build(deps): bump github.com/onsi/gomega from 1.26.0 to 1.27.0
  * kube play: only enforce passthrough in Quadlet
  * journald: remove initializeJournal()
  * auto-update: support pods
  * Emergency fix for man pages: check for broken includes
  * System tests: assert(): friendlier failure messages
  * Cirrus: Fix version-check to only run on `main` job
  * CI: Temporarily disable all AWS EC2-based tasks
  * build(deps): bump github.com/containerd/containerd from 1.6.16 to 1.6.18
  * volume,container: chroot to source before exporting content
  * Support sysctl configs via podman kube play
  * [CI:BUILD] copr: podman.spec.rpkg cleanups
  * quadlet system tests: add useful defaults, logging
  * libpod: support relative positions for idmaps
  * Experimental workaround for cdn03.quay.io flake
  * system tests: prevent leading tabs
  * Introduce podman machine os apply
  * create: add support for --group-entry
  * fix != filter in volume prune
  * Allow specification of podman --remote build -f -
  * Quadlet use crun specified in containers.conf
  * build(deps): bump golang.org/x/net from 0.6.0 to 0.7.0
  * Vendor c/image after https://github.com/containers/image/pull/1847
  * Don't set hostPort when generating a service
  * man page --format xref: tighten the autocompletion check
  * add support for limiting tmpfs size for systemd-specific mnts
  * build(deps): bump golang.org/x/text from 0.6.0 to 0.7.0
  * Add ulimit annotation to kube gen &amp; play
  * man page xref: validate displayed man page names
  * quadlet: add ExecStop
  * install sigproxy before start/attach
  * build(deps): bump golang.org/x/tools from 0.5.0 to 0.6.0 in /test/tools
  * Fix typos
  * Cirrus: Make benchmarks .env file easier to load
  * Cirrus: Omit functions in env. file
  * kube play: set service container as main PID when possible
  * Fix typos. Improve language.
  * events + container inspect test: RHEL fixes
  * Add ctrName to network alias during kube play
  * Run codespell on codebase
  * podman image scp: added identity for ssh.Exec
  * [CI:DOCS] Clarify nomap constrains
  * [CI:DOCS] man-page checker: include --format (Go templates)
  * Vendor c/image after https://github.com/containers/image/pull/1816
  * [CI:DOCS] Cleanup some man pages to display options with line breaks
  * [CI:DOCS] Add tables to podman-systemd.unit man page
  * github: remove prefix from bugs/features
  * Quadlet: Add support for the Secret key in Container group
  * [CI:DOCS] OWNERS: add @ygalblum and @alexlarsson
  * build(deps): bump golang.org/x/term from 0.4.0 to 0.5.0
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.1.6
  * Sort quadlet keys to make it easier to read
  * e2e: fix some tests on remote
  * kube play: do not teardown unconditionally on error
  * Fix typos in comments
  * Resolve symlink path for qemu directory if possible
  * #17363 Fix contradicting documentation podman-commit
  * Fix a potential UID/GID collision in unit tests
  * golangci-lint: show all errors at once
  * update golangci-lint to version 1.51.1
  * [CI:DOCS] events: document journald identifiers
  * Quadlet: exit 0 when there are no files to process
  * network ls: handle removed container
  * e2e: adapt play kube test on remote rootless
  * docs/podman-systemd.unit: Explicitely mention network &amp; kube units
  * docs/podman-systemd.unit: Update example to work out of the box
  * [CI:BUILD] Cirrus: Fix GraphQL ownerRepository:null error
  * Add missing return after errors
  * Revert "Cirrus: Emergency fix to un-stuck PRs"
  * pasta: Fix ICMPv6 Echo test, skip it for the moment
  * pasta: Fix ICMP Echo Request (IPv4) test
  * pasta: Use two connections instead of three in TCP range forward tests
  * Add SELinux label types support to quadlet
  * Add quadlet support for rootfs= containers
  * Cirrus: Emergency fix to un-stuck PRs
  * Move clean-binaries before podman-remote in podman-remote-docs target
  * oci: bind mount /sys with --userns=(auto|pod:)
  * Cleanup podman-systemd.unit file
  * Install podman-systemd.unit  man page, make quadlet discoverable
  * libpod: allow userns=keep-id for root
  * system-reset: use CleanCacheMount to clear build cache
  * vendor: bump buildah to v1.29.1-0.20230201192322-e56eb25575c7
  * system tests: fix noexistent labels test in the remote
  * Expose Podman named pipe in Inspect output
  * libpod: support idmap for --rootfs
  * test: adapt test to work on cgroupv1
  * Bump to v4.5.0-dev
  * Update main to reflect v4.4.0 release
  * Update from /github.com/vbauerster/mpb/v7 to /v8
  * hack/perf: cleanup after benchmarks
  * hack/perf/bz-2162111.sh: use custom network
  * Update bug_report.yaml
  * Handle filetype field in kubernetes.yaml files
  * hack/perf/bz-2162111.sh: measure stop
  * make hack/markdown-preprocess parallel-safe
  * system tests: fix volume exec/noexec test
  * system tests: minor fix for RHEL8 incompatibility
  * Cirrus: Use versionable IMAGE_SUFFIX
  * utils: new conversion method
  * libpod: use GraphRoot for overlay upper dir
  * vendor: update containers/storage
  * Do not mount /dev/tty into rootless containers
  * build(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7
  * e2e: fix run_staticip_test about no_proxy
  * docs: specify order preference for FROM
  * Fixes port collision issue on use of --publish-all
  * Support for Windows paths in the source position of the volume mounts
  * e2e tests: fix incorrect os.User.Name
  * Log data that we failed to unmarshal
  * [CI:DOCS] hack/perf: add script for BZ 216111
  * container rm: save once for exec removal and state change
  * [DOCS:CI] podman-events: document verbose create events
  * e2e: Avoid hard-coding included in quadlet test
  * e2e: Avoid hard-coding ImageCacheDir
  * Making gvproxy.exe optional for building Windows installer
  * Add gvproxy to Windows packages
  * Add comment to clarify error handling intention
  * fix #17244: use /etc/timezone where `timedatectl` is missing on Linux
  * Fix usage of absolute windows paths with --image-path
  * Match VT device paths to be blocked from mounting exactly
  * Fix default handling of pids-limit
  * Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml)
  * journald: podman logs only show logs for current user
  * journald: podman events only show events for current user
  * e2e: Remove the cache with "podman unshare rm" when a rootless user
  * Clean up more language for inclusiveness
  * e2e: Remove some directories at SynchronizedAfterSuite
  * fix: don't output "ago" when container is currently up and running
  * fix: running check error when podman is default in wsl
  * fix CI: test fail due to merge
  * Bump Bulidah to v1.29.0
  * e2e: reduce dependency on /tmp for e2e tests
  * Bump cirrus image with easier dependency management
  * quadlet: Add device support for .volume files
  * remote,build: error if containerignore is symlink
  * DB: make loading container states optional
  * ps: do not sync container
  * Set runAsNonRoot=true in gen kube
  * WSL refactoring
  * kube-play: add support for HostIPC in pod.Spec
  * Allow --device-cgroup-rule to be passed in by docker API</changelog>
  <changelog author="danish.prakash@suse.com" date="1685361600">- Update to version 4.5.1:
  * Release v4.5.1
  * [CI:DOCS] Final release notes for v4.5.1
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * Revert "Resolve symlink path for qemu directory if possible"
  * no need for podman-next rpm test on maint branch
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * network create/update: allow dns servers comma separated
  * machine: fix default connection URL to use 127.0.0.1
  * compat: accept tag in /images/create?fromSrc
  * compat container create: match duplicate mounts correctly
  * machine: qemu only remove connection after confirmation
  * windows: podman save allow the use of stdout
  * remote: exec inspect update exec session status
  * podman-remote logs: handle server error correctly
  * libpod: stop containers with --restart=always
  * Do not include image annotations when building spec
  * [v4.5] system tests: fix race in kube-play read-only
  * api: fix parsing filters
  * Support systemd optional prefix '-' for devices.
  * *: migrate image registry to registry.k8s.io
  * Makefile: include `release-artifacts` target
  * [CI:BUILD] Packit: Initial Enablement
  * Bump to v4.5.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
</package>
<package pkgid="16009cb693401a096ce0e1e3af966cecbcd689992b8d02074b7f974466a33dc5" name="podman-remote" arch="x86_64">
  <version epoch="0" ver="4.7.2" rel="150500.3.3.1"/>
  <changelog author="danish.prakash@suse.com" date="1677240000">- Update to version 4.4.2:
  * Bump to v4.4.2
  * Release notes for v4.4.2
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * kube play: only enforce passthrough in Quadlet
  * Emergency fix for man pages: check for broken includes
  * CI: Temporarily disable all AWS EC2-based tasks
  * quadlet system tests: add useful defaults, logging
  * volume,container: chroot to source before exporting content
  * install sigproxy before start/attach
  * Update to c/image 5.24.1
  * events + container inspect test: RHEL fixes
  * Bump to v4.4.2-dev
- Remove patches (merged upstream):
  * volume-container-chroot-to-source-before-exporting-content.patch
- podman.spec: add `crun` requirement for quadlet
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add patch to let quadlet use the default runtime
  Added patch:
  * Quadlet-use-the-default-runtime.patch
  =&gt; Remove dependency on crun</changelog>
  <changelog author="danish.prakash@suse.com" date="1679659200">- Update to version 4.4.3:
  * Bump to v4.4.3
  * Release notes for v4.4.3
  * compat: /auth: parse server address correctly
  * vendor github.com/containers/common@v0.51.1
  * pkginstaller: bump Qemu to version 7.2.0
  * podman machine: Adjust Chrony makestep config
  * [v4.4] fix --health-on-failure=restart in transient unit
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * journald: remove initializeJournal()
  * netavark: only use aardvark ip as nameserver
  * compat API: network create return 409 for duplicate
  * fix "podman logs --since --follow" flake
  * system service --log-level=trace: support hijack
  * podman-mac-helper: exit 1 on error
  * bump golang.org/x/net to v0.8.0
  * Fix package restore
  * Quadlet - use the default runtime
  * Bump to v4.4.3-dev
- Remove patch (merged upstream):
  * Quadlet-use-the-default-runtime.patch
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="danish.prakash@suse.com" date="1680004800">- Update to version 4.4.4:
  * Bump to v4.4.4
  * Release notes for v4.4.4
  * libpod: always use direct mapping
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * Bump to v4.4.4-dev
- spec: Bump required version for libcontainers-common (bsc#1209495)</changelog>
  <changelog author="dcermak@suse.com" date="1681473600">- Don't build against EoL go versions, fixes bsc#1210299</changelog>
  <changelog author="danish.prakash@suse.com" date="1681819200">- Update to version 4.5.0:
  * Release v4.5.0
  * [CI:DOCS] Final release notes for v4.5.0
  * Quadlet - do not set log-driver by default
  * Return title fields as a list
  * Bump to v4.5.0-dev
  * Bump to v4.5.0-RC2
  * Final release notes for v4.5.0-RC2
  * test/e2e: remove unnecessary SkipIfNetavark() calls
  * test/e2e: deduplicated network test
  * docs: update podman-network-create.1
  * network create: add --interface-name
  * test/system/252-quadlet.bats: fix flake
  * Read kube_generate_type from containers.conf
  * Debian setup: workaround for runc /dev/char/10:200 bug
  * pkg/rootless: use catatonit from /usr/libexec/podman
  * rootless: make sure we only use a single pause process
  * Use atomic config writing strategy for podman machine config files
  * Add remaining release notes for v4.5.0-RC2
  * GHA: Use version instead of SHA for actions
  * chore(deps): update dependency containers/automation_images to v20230405
  * build: pass env by reference
  * test: retrofit error message
  * test/system: expect 12 char for short id
  * vendor: bump containers/(storage, common, buildah, image)
  * [skip-ci] Update actions/upload-artifact action to v3
  * [skip-ci] Update actions/stale action to v8
  * [skip-ci] Update actions/setup-go action to v4
  * [skip-ci] Update github/issue-labeler action to v2.6
  * Fix up codespell errors
  * Capitalize all uid,gid and id words that are not options in docs
  * build(deps): bump golang.org/x/tools from 0.7.0 to 0.8.0 in /test/tools
  * Properly remove the service container during kube down
  * quadlet: add `UserNS` option key
  * [CI:DOCS] Release notes for 4.5.0 Part 1
  * "podman pull by digest and list --all" test: untag instead of rmi
  * build(deps): bump golang.org/x/text from 0.8.0 to 0.9.0
  * Add renovate.json configuration
  * CI: postbuild step: skip under nightly treadmill
  * The `--ulimit` option accepts the name with an `RLIMIT_` prefix both upper and lower case
  * test/e2e: use custom network config dir where needed
  * chore: replace `github.com/ghodss/yaml` with `sigs.k8s.io/yaml`
  * update completion scripts for cobra v1.7.0
  * libpod.storageService.CreateContainerStorage(): retrieve ID maps
  * Fix invalid pod name and hostname during kube generate
  * e2e tests: fix racy flakes
  * Cirrus: Enable labeling of EC2 VMs
  * Cirrus: Fix aarch64 clone_script 404 errors
  * e2e: GinkgoParallelNode() -&gt; ...Process()
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
  * build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0
  * [CI:DOCS] --creds and registries
  * Copr: fix build deps for /usr/bin/envsubst
  * Don't error when removing non-existant env vars
  * e2e: healthcheck on stopped container: fix flake
  * test/apiv2/80-kube.at
  * test/apiv2/80-kube.at
  * system service: do not close Body
  * rm `hack/release.sh`
  * build(deps): bump github.com/onsi/gomega from 1.27.5 to 1.27.6
  * add `quadlet -version` flag
  * add version/rawversion package
  * quadlet: use `Flag` suffix for variables
  * quadlet: implement `Tmpfs` option
  * Bump to v4.5.0-dev
  * Bump to 4.5.0-rc1
  * Update release notes from 4.4 branch
  * rootless netns: recover from invalid netns
  * System tests: unverbosify a flake log
  * Add support for secret exists
  * Fix Win install task failures with large PR bodies
  * docs: add `starting` to `HealthCheckResults.Status`
  * Add support for cgroup_config from containers.conf
  * libpod: mount safely subpaths
  * Support Deployment generation with kube generate
  * Use secret.items to create volume mounts if present
  * [CI:DOCS] fix typo in --systemd option
  * rootless: drop preexec hook error message
  * Edit the docker wrapper to use the install prefix
  * Update podman-for-windows.md
  * Quadlet: RemapUsers documentation fixes
  * speed up image listing
  * vendor containers/common@e27c30ee9b1b
  * fix volume-plugin-test flake
  * Document building Podman remote on Windows hosts
  * test/e2e: gpg keep stdout/err attached
  * auto-update: stop+start instead of restart sytemd units
  * [CI:DOCS] Improve basic tutorial
  * Update docs/source/markdown/podman-network.1.md
  * Add debug to --wait test
  * fix slirp4netns resolv.conf ip with a userns
  * Quadlet: add support for keep-id with mapping values
  * Quadlet E2E test - run quadlet as user generator
  * sqlite: do not `Ping()` after connecting
  * Quadlet - treat paths starting with systemd specifiers as absolute
  * Update docs/source/markdown/podman-kube-play.1.md.in
  * system tests: use CONTAINERS_CONF_OVERRIDE
  * implement podman machine set for hyperv
  * [CI:DOCS] Add network subnets info to network man page
  * CI: retry the golangci install
  * system tests: fix racey sdnotify test
  * hyperv: lookup machine on local filesystem first
  * fix os.IsNotExist() CI check
  * Ensure that SQLite state handles name-ID collisions
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * build(deps): bump github.com/onsi/gomega from 1.27.4 to 1.27.5
  * Fix a race around SQLite DB config validation
  * add CONTAINERS_CONF_OVERRIDE
  * vendor containers/common@main
  * docs: minor grammar fix in `--volume` description
  * sqlite: do not use shared cache
  * test: podman checkpoint/restore the latest container
  * stats compat API: return "id" lowercase
  * Run make codespell
  * Drop SQLite max connections
  * sqlite: set connection attributes on open
  * Fix database locked errors with SQLite
  * quadlet tests: skip on RHEL8 rootless
  * Kube Play Doc: Document the support for K8S Secret
  * New ulimit test: bump up minimum nfiles
  * logformatter: hide --db-backend, and friendlyize quadlet
  * Quadlet - add support for relative path in Volume key in .container file
  * Add service ctr cleanup to PlayKubeDown
  * fix --health-on-failure=restart in transient unit
  * Quadlet Doc: Suggest the kill operation for HealthOnFailure
  * Quadlet - Add support for health checks configuration in .container files
  * Makefile: allow specifying /lib dir location
  * Fix option --opts -&gt; --opt
  * basic hypverv machine implementation
  * Fix SQLite DB schema migration code
  * Add support for oom_score_adj value from containers.conf
  * Use default_ulimits field in containers.conf
  * CI: test and confirm DESIRED_DATABASE
  * build(deps): bump github.com/openshift/imagebuilder
  * logformatter: futureproof output filename
  * Vendor in latest containers/(storage, common, image)
  * build(deps): bump google.golang.org/protobuf from 1.29.0 to 1.30.0
  * test/system/255-auto-update.bats: add debug logs
  * Revert "Revert "pasta: Use two connections instead of three in TCP range forward tests""
  * Add information for secret inspect
  * Add format to podman volume ls
  * Add format to podman volume inspect
  * Add format to podman secret ls
  * Add format to podman system df
  * Add format to podman machine info
  * Add format table to podman image inspect man page
  * Cirrus: Store podman machine benchmark data
  * Update Cirrus display names, and fix get-ci-vm script
  * Ensure SQLite places uses the runroot in transient mode
  * Fix various integration test issues with SQLite state
  * Remove test for pod/container name global uniqueness
  * Improve handling of existing container names in SQLite
  * Add SQLite job to CI
  * buildah treadmill: also run rootless tests
  * build(deps): bump github.com/vbatts/git-validation in /test/tools
  * auto update: return restart error
  * fix: Document removing anonymous volumes
  * events: no duplicates when streaming during a log rotation
  * Add search --cert-dir, --creds
  * podman-mac-helper: exit 1 on error
  * system service --log-level=trace: support hijack
  * test/system: fix wait_for_port() to wait for bind
  * cgroupns: private cgroupns on cgroupv1 breaks --systemd
  * libpod: remove error stutter
  * podman events: unhide --stream
  * test/system/255-auto-update.bats: multiple services
  * 255-auto-update.bats: turn off rollback where needed
  * Use append() to add elements to a slice
  * Revert "pasta: Use two connections instead of three in TCP range forward tests"
  * Support running nested SELinux container separation
  * bud tests: rootless remote: use correct socket path
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.2.1 to 8.3.0
  * compat: /auth: parse server address correctly
  * docs: fix cmd `set DOCKER_HOST` suggestion
  * test: reenable idmap test
  * Must use mountlabel when creating builtin volumes
  * podman.spec.rpkg: distro conditionals for modulesloaddir
  * build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.29.0
  * podman inspect list network when using --net=host or none
  * pasta: Re-enable "Local forwarder, IPv4" test, accept NXDOMAIN as response
  * build(deps): bump golang.org/x/tools from 0.6.0 to 0.7.0 in /test/tools
  * CI: Switch to c20230307t192532z-f37f36d12 images
  * Cirrus: Run system &amp; integration tests in parallel
  * Update checkpointctl v0.1.0
  * Quadlet: add support for setting --ip and --ip6
  * build(deps): bump golang.org/x/net from 0.7.0 to 0.8.0
  * build(deps): bump golang.org/x/sys from 0.5.0 to 0.6.0
  * libpod: avoid nil pointer dereference in (*Container).Cleanup
  * [CI:DOCS] Add image not found info to troubleshooting
  * cmd: do not require userns for "version"
  * cmd: drop special handling for "scp"
  * cmd: clarify meaning of ParentNSRequired
  * Fix package restore
  * [CI:DOCS] Fix docs/version-check always requesting updates
  * sqlite: add a hidden --db-backend flag
  * fix: update the default machine value when the previously set default machine is deleted
  * podman machine: Adjust Chrony makestep config
  * sqlite: add container short ID to network aliases
  * sqlite: remove dead code
  * sqlite: addContainer: add named volume only once
  * sqlite: implement RewriteVolumeConfig
  * sqlite: LookupVolume: fix partial name match
  * sqlite: LookupVolume: wrap error
  * sqlite: fix type rewriting container config
  * sqlite: return correct error on pod-name conflict
  * sqlite: RewritePodConfig: update error message
  * test/system/255-auto-update.bats: wait 10 for update to finish
  * auto-update test: wait for service to be ready
  * Vendor in latest containers/(common, storage, image)
  * play kube: Add --wait option
  * Cirrus: Fix git config permission denied
  * Quadlet: Add support for the Mount key in .container files
  * build(deps): bump github.com/onsi/gomega from 1.27.1 to 1.27.2
  * fix "podman logs --since --follow" flake
  * Clarify that replicas are ignored in kubernetes deployment
  * Revert "Skip all pasta tests"
  * CI: Switch to c20230223t153813z-f37f36d12 images
  * Fix user socket path
  * pkginstaller: bump Qemu to version 7.2.0
  * Cirrus: Fix bud tests failing to apply patches
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2
  * build(deps): bump github.com/coreos/stream-metadata-go
  * Vendor in latest containers/storage
  * buildah-bud tests: don't sudo when rootless is desired
  * Temporarily disable version-check
  * CI: new rootless buildah-bud tests (cron only)
  * sqlite: fix volume lookups with partial names
  * sqlite: fix container lookups with partial IDs
  * sqlite: fix LookupPod
  * sqlite: fix pod create/rm
  * sqlite: LookupContainer: update error message
  * sqlite: AddContainerExitCode: allow to replace
  * system: add warning when running rootless on cgroupv1
  * sqlite: fix AllContainers with state
  * sqlite: fix "UPDATE TABLE" typos
  * sqlite: SaveVolume: fix syntax error updating the volumes table
  * sqlite: exit code: allow -1
  * sqlite: fix typo when removing exec sessions
  * sqlite: AllContainers: fix inner join
  * sqlite: move migration after table creation
  * sqlite: implement pod methods
  * Quadlet - use the default runtime
  * docs: context is not optional for build
  * Fix an incorrect comment on NewSqliteState
  * Add support for containers.conf database setting
  * Add support for volume operations to SQLite state
  * Implement exec session handling in SQL database
  * Various fixes from code review
  * Remove `--namespace` flag from Podman root
  * Get E2E tests to pass
  * Implement network disconnect for SQLite state
  * Implement Network Connect/Modify for SQLite state
  * Fix various lint issues
  * Some further work on SQLite state
  * Remove concept of Namespaces from BoltDB
  * Add initial SQLite-backed state implementation
  * Cirrus: Support runc testing on debian VMs
  * Skip all pasta tests
  * Skip buildah-bud test
  * Skip buildx test with VFS podman storage driver
  * Skip 'podman kube --network' test for rootless CGv1
  * Skip tests which fail with CGv1 &amp; runc
  * Skip rootless CGv1 quadlet tests due to issue
  * Makefile: Define SHELL
  * Machine refactor for QEMU/AppleHV
  * machine refactoring preparations for hyperv
  * [CI:BUILD] spec.rpkg: trim dependency list
  * Logs follow-until tests: loosen checks
  * [CI:DOCS] Windows/Mac docs link update
  * Doc update for docker network options via CLI
  * compat API: network create return 409 for duplicate
  * Apply suggestions to man page
  * vendor c/common@852ca05a1fbb
  * Quadlet: Add support for LogDriver key in container and kube units
  * machine refactoring preparations for hyperv
  * libpod: always use direct mapping
  * netavark: only use aardvark ip as nameserver
  * build(deps): bump github.com/container-orchestrated-devices/container-device-interface
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * make docs: sanity check for broken man pages
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.6 to 8.2.0
  * build(deps): bump github.com/onsi/gomega from 1.27.0 to 1.27.1
  * kube: rm secret on down, print secret on play
  * Fix spacing typo that triggered OCD &amp; indent units in podman-systemd.unit(5)
  * Update remote_client.md
  * [CI:DOCS] Add restriction to option README
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * build(deps): bump github.com/onsi/gomega from 1.26.0 to 1.27.0
  * kube play: only enforce passthrough in Quadlet
  * journald: remove initializeJournal()
  * auto-update: support pods
  * Emergency fix for man pages: check for broken includes
  * System tests: assert(): friendlier failure messages
  * Cirrus: Fix version-check to only run on `main` job
  * CI: Temporarily disable all AWS EC2-based tasks
  * build(deps): bump github.com/containerd/containerd from 1.6.16 to 1.6.18
  * volume,container: chroot to source before exporting content
  * Support sysctl configs via podman kube play
  * [CI:BUILD] copr: podman.spec.rpkg cleanups
  * quadlet system tests: add useful defaults, logging
  * libpod: support relative positions for idmaps
  * Experimental workaround for cdn03.quay.io flake
  * system tests: prevent leading tabs
  * Introduce podman machine os apply
  * create: add support for --group-entry
  * fix != filter in volume prune
  * Allow specification of podman --remote build -f -
  * Quadlet use crun specified in containers.conf
  * build(deps): bump golang.org/x/net from 0.6.0 to 0.7.0
  * Vendor c/image after https://github.com/containers/image/pull/1847
  * Don't set hostPort when generating a service
  * man page --format xref: tighten the autocompletion check
  * add support for limiting tmpfs size for systemd-specific mnts
  * build(deps): bump golang.org/x/text from 0.6.0 to 0.7.0
  * Add ulimit annotation to kube gen &amp; play
  * man page xref: validate displayed man page names
  * quadlet: add ExecStop
  * install sigproxy before start/attach
  * build(deps): bump golang.org/x/tools from 0.5.0 to 0.6.0 in /test/tools
  * Fix typos
  * Cirrus: Make benchmarks .env file easier to load
  * Cirrus: Omit functions in env. file
  * kube play: set service container as main PID when possible
  * Fix typos. Improve language.
  * events + container inspect test: RHEL fixes
  * Add ctrName to network alias during kube play
  * Run codespell on codebase
  * podman image scp: added identity for ssh.Exec
  * [CI:DOCS] Clarify nomap constrains
  * [CI:DOCS] man-page checker: include --format (Go templates)
  * Vendor c/image after https://github.com/containers/image/pull/1816
  * [CI:DOCS] Cleanup some man pages to display options with line breaks
  * [CI:DOCS] Add tables to podman-systemd.unit man page
  * github: remove prefix from bugs/features
  * Quadlet: Add support for the Secret key in Container group
  * [CI:DOCS] OWNERS: add @ygalblum and @alexlarsson
  * build(deps): bump golang.org/x/term from 0.4.0 to 0.5.0
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.1.6
  * Sort quadlet keys to make it easier to read
  * e2e: fix some tests on remote
  * kube play: do not teardown unconditionally on error
  * Fix typos in comments
  * Resolve symlink path for qemu directory if possible
  * #17363 Fix contradicting documentation podman-commit
  * Fix a potential UID/GID collision in unit tests
  * golangci-lint: show all errors at once
  * update golangci-lint to version 1.51.1
  * [CI:DOCS] events: document journald identifiers
  * Quadlet: exit 0 when there are no files to process
  * network ls: handle removed container
  * e2e: adapt play kube test on remote rootless
  * docs/podman-systemd.unit: Explicitely mention network &amp; kube units
  * docs/podman-systemd.unit: Update example to work out of the box
  * [CI:BUILD] Cirrus: Fix GraphQL ownerRepository:null error
  * Add missing return after errors
  * Revert "Cirrus: Emergency fix to un-stuck PRs"
  * pasta: Fix ICMPv6 Echo test, skip it for the moment
  * pasta: Fix ICMP Echo Request (IPv4) test
  * pasta: Use two connections instead of three in TCP range forward tests
  * Add SELinux label types support to quadlet
  * Add quadlet support for rootfs= containers
  * Cirrus: Emergency fix to un-stuck PRs
  * Move clean-binaries before podman-remote in podman-remote-docs target
  * oci: bind mount /sys with --userns=(auto|pod:)
  * Cleanup podman-systemd.unit file
  * Install podman-systemd.unit  man page, make quadlet discoverable
  * libpod: allow userns=keep-id for root
  * system-reset: use CleanCacheMount to clear build cache
  * vendor: bump buildah to v1.29.1-0.20230201192322-e56eb25575c7
  * system tests: fix noexistent labels test in the remote
  * Expose Podman named pipe in Inspect output
  * libpod: support idmap for --rootfs
  * test: adapt test to work on cgroupv1
  * Bump to v4.5.0-dev
  * Update main to reflect v4.4.0 release
  * Update from /github.com/vbauerster/mpb/v7 to /v8
  * hack/perf: cleanup after benchmarks
  * hack/perf/bz-2162111.sh: use custom network
  * Update bug_report.yaml
  * Handle filetype field in kubernetes.yaml files
  * hack/perf/bz-2162111.sh: measure stop
  * make hack/markdown-preprocess parallel-safe
  * system tests: fix volume exec/noexec test
  * system tests: minor fix for RHEL8 incompatibility
  * Cirrus: Use versionable IMAGE_SUFFIX
  * utils: new conversion method
  * libpod: use GraphRoot for overlay upper dir
  * vendor: update containers/storage
  * Do not mount /dev/tty into rootless containers
  * build(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7
  * e2e: fix run_staticip_test about no_proxy
  * docs: specify order preference for FROM
  * Fixes port collision issue on use of --publish-all
  * Support for Windows paths in the source position of the volume mounts
  * e2e tests: fix incorrect os.User.Name
  * Log data that we failed to unmarshal
  * [CI:DOCS] hack/perf: add script for BZ 216111
  * container rm: save once for exec removal and state change
  * [DOCS:CI] podman-events: document verbose create events
  * e2e: Avoid hard-coding included in quadlet test
  * e2e: Avoid hard-coding ImageCacheDir
  * Making gvproxy.exe optional for building Windows installer
  * Add gvproxy to Windows packages
  * Add comment to clarify error handling intention
  * fix #17244: use /etc/timezone where `timedatectl` is missing on Linux
  * Fix usage of absolute windows paths with --image-path
  * Match VT device paths to be blocked from mounting exactly
  * Fix default handling of pids-limit
  * Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml)
  * journald: podman logs only show logs for current user
  * journald: podman events only show events for current user
  * e2e: Remove the cache with "podman unshare rm" when a rootless user
  * Clean up more language for inclusiveness
  * e2e: Remove some directories at SynchronizedAfterSuite
  * fix: don't output "ago" when container is currently up and running
  * fix: running check error when podman is default in wsl
  * fix CI: test fail due to merge
  * Bump Bulidah to v1.29.0
  * e2e: reduce dependency on /tmp for e2e tests
  * Bump cirrus image with easier dependency management
  * quadlet: Add device support for .volume files
  * remote,build: error if containerignore is symlink
  * DB: make loading container states optional
  * ps: do not sync container
  * Set runAsNonRoot=true in gen kube
  * WSL refactoring
  * kube-play: add support for HostIPC in pod.Spec
  * Allow --device-cgroup-rule to be passed in by docker API</changelog>
  <changelog author="danish.prakash@suse.com" date="1685361600">- Update to version 4.5.1:
  * Release v4.5.1
  * [CI:DOCS] Final release notes for v4.5.1
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * Revert "Resolve symlink path for qemu directory if possible"
  * no need for podman-next rpm test on maint branch
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * network create/update: allow dns servers comma separated
  * machine: fix default connection URL to use 127.0.0.1
  * compat: accept tag in /images/create?fromSrc
  * compat container create: match duplicate mounts correctly
  * machine: qemu only remove connection after confirmation
  * windows: podman save allow the use of stdout
  * remote: exec inspect update exec session status
  * podman-remote logs: handle server error correctly
  * libpod: stop containers with --restart=always
  * Do not include image annotations when building spec
  * [v4.5] system tests: fix race in kube-play read-only
  * api: fix parsing filters
  * Support systemd optional prefix '-' for devices.
  * *: migrate image registry to registry.k8s.io
  * Makefile: include `release-artifacts` target
  * [CI:BUILD] Packit: Initial Enablement
  * Bump to v4.5.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
</package>
<package pkgid="9d32061aed29f241b310e9d602b997d6a85d742ab7d894810dbdef3fe1e26ad7" name="podman-remote" arch="aarch64">
  <version epoch="0" ver="4.8.3" rel="150500.3.6.1"/>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
</package>
<package pkgid="fca068c6ba1fd62a4039f7da90e8c9edce728457a314c62b80b8897d101d0cd4" name="podman-remote" arch="ppc64le">
  <version epoch="0" ver="4.8.3" rel="150500.3.6.1"/>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
</package>
<package pkgid="4785afb62ddc52f50a8580b935ec02b000a77096e7670e013b6eb78ec74287e2" name="podman-remote" arch="s390x">
  <version epoch="0" ver="4.8.3" rel="150500.3.6.1"/>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
</package>
<package pkgid="cad7f44ddd7d897177de8ab5689e4a725134e6563069ef2e87e963299fe3460f" name="podman-remote" arch="x86_64">
  <version epoch="0" ver="4.8.3" rel="150500.3.6.1"/>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
</package>
<package pkgid="5d9ef81c675ad05d48f83abb46a554cf1debd7ecc174999025b75cfc2dba76f0" name="podman-remote" arch="aarch64">
  <version epoch="0" ver="4.8.3" rel="150500.3.9.1"/>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1710849600">- Add patch for CVE-2024-1753 (bsc#1221677):
  0001-CVE-2024-1753-container-escape-fix.patch</changelog>
</package>
<package pkgid="dc5c420e7cbbe5db17c69848594dbf201296dd0f5175095b4b1a6c3d65764241" name="podman-remote" arch="ppc64le">
  <version epoch="0" ver="4.8.3" rel="150500.3.9.1"/>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1710849600">- Add patch for CVE-2024-1753 (bsc#1221677):
  0001-CVE-2024-1753-container-escape-fix.patch</changelog>
</package>
<package pkgid="3a40c34626f5e2d38108469711cbc6819b93e3f54650c45bc736c429f7977465" name="podman-remote" arch="s390x">
  <version epoch="0" ver="4.8.3" rel="150500.3.9.1"/>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1710849600">- Add patch for CVE-2024-1753 (bsc#1221677):
  0001-CVE-2024-1753-container-escape-fix.patch</changelog>
</package>
<package pkgid="9e82e6e8ad426da4fb0f56202a706008dcdc9309a4ab2c938b4c3fa3cb63315d" name="podman-remote" arch="x86_64">
  <version epoch="0" ver="4.8.3" rel="150500.3.9.1"/>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1710849600">- Add patch for CVE-2024-1753 (bsc#1221677):
  0001-CVE-2024-1753-container-escape-fix.patch</changelog>
</package>
<package pkgid="27bb484546c7d753b3b493899925f32435c0f445cd77c1b0f935b55ecaadd465" name="podman-remote" arch="aarch64">
  <version epoch="0" ver="4.9.5" rel="150500.3.12.1"/>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1710849600">- Add patch for CVE-2024-1753 (bsc#1221677):
  0001-CVE-2024-1753-container-escape-fix.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1717761600">- Remove upstreamed patches:
  - 0001-CVE-2024-1753-container-escape-fix.patch
- Update to version 4.9.5:
  * Bump to v4.9.5
  * Update release notes for v4.9.5
  * fix "concurrent map writes" in network ls compat endpoint
  * [v4.9] Fix for CVE-2024-3727 (bsc#1224122)
  * Disable failing bud test
  * CI Maintenance: Disable machine tests
  * [CI:DOCS] Allow downgrade of WiX
  * [CI:DOCS] Force WiX 3.11
  * [CI:DOCS] Fix windows installer action
  * Bump to v4.9.5-dev
  * Bump to v4.9.4
  * Update release notes for v4.9.4
  * [v4.9] Bump Buildah to v1.33.7, CVE-2024-1753, CVE-2024-24786 (bsc#1226136)
  * Add farm command to commands list
  * Bump to FreeBSD 13.3 (13.2 vanished)
  * Update health-start-periods docs
  * Don't update health check status during initialDelaySeconds
  * image scp: don't require port for ssh URL
  * Ignore docker's end point config when the final network mode isn't bridge.
  * Fix running container from docker client with rootful in rootless podman.
  * [skip-ci] Packit: remove koji and bodhi tasks for v4.9
  * Bump to v4.9.4-dev
  * Bump to v4.9.3
  * Release notes for v4.9.3
  * Remove gitleaks scanning
  * [v4.9] [skip-ci] packit: update fedora downstream branches
  * @@option volume.image: be specific that -v only affects RUN
  * Accept a config blob alongside the "changes" slice when committing
  * container create: use ParseUserNamespace to parse a user namespace setting
  * Bump to v4.9.3-dev
  * Bump to v4.9.2
  * Release notes for v4.9.2
  * Cirrus: Update operating branch
  * [v4.9] Bump to c/common v0.57.4, buildkit v0.12.5, c/buidah v1.33.5
  * Fix updated runc dep breaking pod devices cgroup
  * systests: kube with policies test: fix race
  * Remove go.mod pin of runc and update to latest
  * systests: kube with policies test: fix race
  * Bump to v4.9.2-dev
  * Bump to v4.9.1
  * Release notes for v4.9.1
  * [v4.9] Bump Buildah to v1.33.4, c/common v0.57.3, c/image v5.29.2
  * pkginstaller: bump Qemu version to 8.2.1
  * Assign separate ports for each appleHV machine
  * Fix machine inspect test config
  * AppleHV: update LastUp time
  * applehv: return socket path from setupAPIForwarding
  * applehv: Remove unneeded cmd.ExtraFiles assignment
  * abi: drop check for IsRootless()
  * system: enhance check for re-exec into rootless userns
  * system: enhance check for re-exec into rootless userns
  * Fix `podman machine set --rootful` for applehv
  * applehv - fix vm lookup
  * rpm: use go-rpm-macros on RHEL 10
  * Bump to v4.9.1-dev
  * Bump to v4.9.0
  * Fix a small grammar error in RELEASE_NOTES.md
  * Fix push endpoint stream
  * Finalized release notes for v4.9.0
  * farm build: push built images to registry
  * Move the --farm flag to farm build command
  * Clean up farm-build miscommit
  * [CI:DOCS] Add podman farm build doc
  * Add release notes for v4.9.0
  * gvproxy: Update to 0.7.2 release
  * [v4.9] Bump Buildah to v1.33.3, c/common to v0.57.2, c/image to v5.29.1
  * Add a net health recovery service to Qemu machines
  * Set up podman machine remote user correctly
  * Remove Libpod special-init conditions
  * Fix `podman system reset` with external containers
  * [v4.8] podman kube play: fix broken annotation parsing
  * feat: disable pid max in the podman machine
  * systests: cp: add wait_for_ready
  * System tests: fixes for RHEL8 gating failures
  * Add API forwarding support for HyperV
  * bump to v4.8.4-dev</changelog>
</package>
<package pkgid="61e4b8cc49f96c11aa3e8058586f4d7dcdd004114b2e457b76cc45f094de4509" name="podman-remote" arch="ppc64le">
  <version epoch="0" ver="4.9.5" rel="150500.3.12.1"/>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1710849600">- Add patch for CVE-2024-1753 (bsc#1221677):
  0001-CVE-2024-1753-container-escape-fix.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1717761600">- Remove upstreamed patches:
  - 0001-CVE-2024-1753-container-escape-fix.patch
- Update to version 4.9.5:
  * Bump to v4.9.5
  * Update release notes for v4.9.5
  * fix "concurrent map writes" in network ls compat endpoint
  * [v4.9] Fix for CVE-2024-3727 (bsc#1224122)
  * Disable failing bud test
  * CI Maintenance: Disable machine tests
  * [CI:DOCS] Allow downgrade of WiX
  * [CI:DOCS] Force WiX 3.11
  * [CI:DOCS] Fix windows installer action
  * Bump to v4.9.5-dev
  * Bump to v4.9.4
  * Update release notes for v4.9.4
  * [v4.9] Bump Buildah to v1.33.7, CVE-2024-1753, CVE-2024-24786 (bsc#1226136)
  * Add farm command to commands list
  * Bump to FreeBSD 13.3 (13.2 vanished)
  * Update health-start-periods docs
  * Don't update health check status during initialDelaySeconds
  * image scp: don't require port for ssh URL
  * Ignore docker's end point config when the final network mode isn't bridge.
  * Fix running container from docker client with rootful in rootless podman.
  * [skip-ci] Packit: remove koji and bodhi tasks for v4.9
  * Bump to v4.9.4-dev
  * Bump to v4.9.3
  * Release notes for v4.9.3
  * Remove gitleaks scanning
  * [v4.9] [skip-ci] packit: update fedora downstream branches
  * @@option volume.image: be specific that -v only affects RUN
  * Accept a config blob alongside the "changes" slice when committing
  * container create: use ParseUserNamespace to parse a user namespace setting
  * Bump to v4.9.3-dev
  * Bump to v4.9.2
  * Release notes for v4.9.2
  * Cirrus: Update operating branch
  * [v4.9] Bump to c/common v0.57.4, buildkit v0.12.5, c/buidah v1.33.5
  * Fix updated runc dep breaking pod devices cgroup
  * systests: kube with policies test: fix race
  * Remove go.mod pin of runc and update to latest
  * systests: kube with policies test: fix race
  * Bump to v4.9.2-dev
  * Bump to v4.9.1
  * Release notes for v4.9.1
  * [v4.9] Bump Buildah to v1.33.4, c/common v0.57.3, c/image v5.29.2
  * pkginstaller: bump Qemu version to 8.2.1
  * Assign separate ports for each appleHV machine
  * Fix machine inspect test config
  * AppleHV: update LastUp time
  * applehv: return socket path from setupAPIForwarding
  * applehv: Remove unneeded cmd.ExtraFiles assignment
  * abi: drop check for IsRootless()
  * system: enhance check for re-exec into rootless userns
  * system: enhance check for re-exec into rootless userns
  * Fix `podman machine set --rootful` for applehv
  * applehv - fix vm lookup
  * rpm: use go-rpm-macros on RHEL 10
  * Bump to v4.9.1-dev
  * Bump to v4.9.0
  * Fix a small grammar error in RELEASE_NOTES.md
  * Fix push endpoint stream
  * Finalized release notes for v4.9.0
  * farm build: push built images to registry
  * Move the --farm flag to farm build command
  * Clean up farm-build miscommit
  * [CI:DOCS] Add podman farm build doc
  * Add release notes for v4.9.0
  * gvproxy: Update to 0.7.2 release
  * [v4.9] Bump Buildah to v1.33.3, c/common to v0.57.2, c/image to v5.29.1
  * Add a net health recovery service to Qemu machines
  * Set up podman machine remote user correctly
  * Remove Libpod special-init conditions
  * Fix `podman system reset` with external containers
  * [v4.8] podman kube play: fix broken annotation parsing
  * feat: disable pid max in the podman machine
  * systests: cp: add wait_for_ready
  * System tests: fixes for RHEL8 gating failures
  * Add API forwarding support for HyperV
  * bump to v4.8.4-dev</changelog>
</package>
<package pkgid="75d4ed9cf43f4e7d79b0886ea476ce290ed3f72e4ebc1fbba098024df25007bc" name="podman-remote" arch="s390x">
  <version epoch="0" ver="4.9.5" rel="150500.3.12.1"/>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1710849600">- Add patch for CVE-2024-1753 (bsc#1221677):
  0001-CVE-2024-1753-container-escape-fix.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1717761600">- Remove upstreamed patches:
  - 0001-CVE-2024-1753-container-escape-fix.patch
- Update to version 4.9.5:
  * Bump to v4.9.5
  * Update release notes for v4.9.5
  * fix "concurrent map writes" in network ls compat endpoint
  * [v4.9] Fix for CVE-2024-3727 (bsc#1224122)
  * Disable failing bud test
  * CI Maintenance: Disable machine tests
  * [CI:DOCS] Allow downgrade of WiX
  * [CI:DOCS] Force WiX 3.11
  * [CI:DOCS] Fix windows installer action
  * Bump to v4.9.5-dev
  * Bump to v4.9.4
  * Update release notes for v4.9.4
  * [v4.9] Bump Buildah to v1.33.7, CVE-2024-1753, CVE-2024-24786 (bsc#1226136)
  * Add farm command to commands list
  * Bump to FreeBSD 13.3 (13.2 vanished)
  * Update health-start-periods docs
  * Don't update health check status during initialDelaySeconds
  * image scp: don't require port for ssh URL
  * Ignore docker's end point config when the final network mode isn't bridge.
  * Fix running container from docker client with rootful in rootless podman.
  * [skip-ci] Packit: remove koji and bodhi tasks for v4.9
  * Bump to v4.9.4-dev
  * Bump to v4.9.3
  * Release notes for v4.9.3
  * Remove gitleaks scanning
  * [v4.9] [skip-ci] packit: update fedora downstream branches
  * @@option volume.image: be specific that -v only affects RUN
  * Accept a config blob alongside the "changes" slice when committing
  * container create: use ParseUserNamespace to parse a user namespace setting
  * Bump to v4.9.3-dev
  * Bump to v4.9.2
  * Release notes for v4.9.2
  * Cirrus: Update operating branch
  * [v4.9] Bump to c/common v0.57.4, buildkit v0.12.5, c/buidah v1.33.5
  * Fix updated runc dep breaking pod devices cgroup
  * systests: kube with policies test: fix race
  * Remove go.mod pin of runc and update to latest
  * systests: kube with policies test: fix race
  * Bump to v4.9.2-dev
  * Bump to v4.9.1
  * Release notes for v4.9.1
  * [v4.9] Bump Buildah to v1.33.4, c/common v0.57.3, c/image v5.29.2
  * pkginstaller: bump Qemu version to 8.2.1
  * Assign separate ports for each appleHV machine
  * Fix machine inspect test config
  * AppleHV: update LastUp time
  * applehv: return socket path from setupAPIForwarding
  * applehv: Remove unneeded cmd.ExtraFiles assignment
  * abi: drop check for IsRootless()
  * system: enhance check for re-exec into rootless userns
  * system: enhance check for re-exec into rootless userns
  * Fix `podman machine set --rootful` for applehv
  * applehv - fix vm lookup
  * rpm: use go-rpm-macros on RHEL 10
  * Bump to v4.9.1-dev
  * Bump to v4.9.0
  * Fix a small grammar error in RELEASE_NOTES.md
  * Fix push endpoint stream
  * Finalized release notes for v4.9.0
  * farm build: push built images to registry
  * Move the --farm flag to farm build command
  * Clean up farm-build miscommit
  * [CI:DOCS] Add podman farm build doc
  * Add release notes for v4.9.0
  * gvproxy: Update to 0.7.2 release
  * [v4.9] Bump Buildah to v1.33.3, c/common to v0.57.2, c/image to v5.29.1
  * Add a net health recovery service to Qemu machines
  * Set up podman machine remote user correctly
  * Remove Libpod special-init conditions
  * Fix `podman system reset` with external containers
  * [v4.8] podman kube play: fix broken annotation parsing
  * feat: disable pid max in the podman machine
  * systests: cp: add wait_for_ready
  * System tests: fixes for RHEL8 gating failures
  * Add API forwarding support for HyperV
  * bump to v4.8.4-dev</changelog>
</package>
<package pkgid="8a98e5da6094fa8ff8572079fd2ee90b2812b7fa6d340f14a8a9facbe5c307e1" name="podman-remote" arch="x86_64">
  <version epoch="0" ver="4.9.5" rel="150500.3.12.1"/>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1710849600">- Add patch for CVE-2024-1753 (bsc#1221677):
  0001-CVE-2024-1753-container-escape-fix.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1717761600">- Remove upstreamed patches:
  - 0001-CVE-2024-1753-container-escape-fix.patch
- Update to version 4.9.5:
  * Bump to v4.9.5
  * Update release notes for v4.9.5
  * fix "concurrent map writes" in network ls compat endpoint
  * [v4.9] Fix for CVE-2024-3727 (bsc#1224122)
  * Disable failing bud test
  * CI Maintenance: Disable machine tests
  * [CI:DOCS] Allow downgrade of WiX
  * [CI:DOCS] Force WiX 3.11
  * [CI:DOCS] Fix windows installer action
  * Bump to v4.9.5-dev
  * Bump to v4.9.4
  * Update release notes for v4.9.4
  * [v4.9] Bump Buildah to v1.33.7, CVE-2024-1753, CVE-2024-24786 (bsc#1226136)
  * Add farm command to commands list
  * Bump to FreeBSD 13.3 (13.2 vanished)
  * Update health-start-periods docs
  * Don't update health check status during initialDelaySeconds
  * image scp: don't require port for ssh URL
  * Ignore docker's end point config when the final network mode isn't bridge.
  * Fix running container from docker client with rootful in rootless podman.
  * [skip-ci] Packit: remove koji and bodhi tasks for v4.9
  * Bump to v4.9.4-dev
  * Bump to v4.9.3
  * Release notes for v4.9.3
  * Remove gitleaks scanning
  * [v4.9] [skip-ci] packit: update fedora downstream branches
  * @@option volume.image: be specific that -v only affects RUN
  * Accept a config blob alongside the "changes" slice when committing
  * container create: use ParseUserNamespace to parse a user namespace setting
  * Bump to v4.9.3-dev
  * Bump to v4.9.2
  * Release notes for v4.9.2
  * Cirrus: Update operating branch
  * [v4.9] Bump to c/common v0.57.4, buildkit v0.12.5, c/buidah v1.33.5
  * Fix updated runc dep breaking pod devices cgroup
  * systests: kube with policies test: fix race
  * Remove go.mod pin of runc and update to latest
  * systests: kube with policies test: fix race
  * Bump to v4.9.2-dev
  * Bump to v4.9.1
  * Release notes for v4.9.1
  * [v4.9] Bump Buildah to v1.33.4, c/common v0.57.3, c/image v5.29.2
  * pkginstaller: bump Qemu version to 8.2.1
  * Assign separate ports for each appleHV machine
  * Fix machine inspect test config
  * AppleHV: update LastUp time
  * applehv: return socket path from setupAPIForwarding
  * applehv: Remove unneeded cmd.ExtraFiles assignment
  * abi: drop check for IsRootless()
  * system: enhance check for re-exec into rootless userns
  * system: enhance check for re-exec into rootless userns
  * Fix `podman machine set --rootful` for applehv
  * applehv - fix vm lookup
  * rpm: use go-rpm-macros on RHEL 10
  * Bump to v4.9.1-dev
  * Bump to v4.9.0
  * Fix a small grammar error in RELEASE_NOTES.md
  * Fix push endpoint stream
  * Finalized release notes for v4.9.0
  * farm build: push built images to registry
  * Move the --farm flag to farm build command
  * Clean up farm-build miscommit
  * [CI:DOCS] Add podman farm build doc
  * Add release notes for v4.9.0
  * gvproxy: Update to 0.7.2 release
  * [v4.9] Bump Buildah to v1.33.3, c/common to v0.57.2, c/image to v5.29.1
  * Add a net health recovery service to Qemu machines
  * Set up podman machine remote user correctly
  * Remove Libpod special-init conditions
  * Fix `podman system reset` with external containers
  * [v4.8] podman kube play: fix broken annotation parsing
  * feat: disable pid max in the podman machine
  * systests: cp: add wait_for_ready
  * System tests: fixes for RHEL8 gating failures
  * Add API forwarding support for HyperV
  * bump to v4.8.4-dev</changelog>
</package>
<package pkgid="416e9fe504212971f60a9b4b552272093a2252a407907e4b51e86280cdd5bc4f" name="podman-remote" arch="aarch64">
  <version epoch="0" ver="4.9.5" rel="150500.3.15.1"/>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1710849600">- Add patch for CVE-2024-1753 (bsc#1221677):
  0001-CVE-2024-1753-container-escape-fix.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1717761600">- Remove upstreamed patches:
  - 0001-CVE-2024-1753-container-escape-fix.patch
- Update to version 4.9.5:
  * Bump to v4.9.5
  * Update release notes for v4.9.5
  * fix "concurrent map writes" in network ls compat endpoint
  * [v4.9] Fix for CVE-2024-3727 (bsc#1224122)
  * Disable failing bud test
  * CI Maintenance: Disable machine tests
  * [CI:DOCS] Allow downgrade of WiX
  * [CI:DOCS] Force WiX 3.11
  * [CI:DOCS] Fix windows installer action
  * Bump to v4.9.5-dev
  * Bump to v4.9.4
  * Update release notes for v4.9.4
  * [v4.9] Bump Buildah to v1.33.7, CVE-2024-1753, CVE-2024-24786 (bsc#1226136)
  * Add farm command to commands list
  * Bump to FreeBSD 13.3 (13.2 vanished)
  * Update health-start-periods docs
  * Don't update health check status during initialDelaySeconds
  * image scp: don't require port for ssh URL
  * Ignore docker's end point config when the final network mode isn't bridge.
  * Fix running container from docker client with rootful in rootless podman.
  * [skip-ci] Packit: remove koji and bodhi tasks for v4.9
  * Bump to v4.9.4-dev
  * Bump to v4.9.3
  * Release notes for v4.9.3
  * Remove gitleaks scanning
  * [v4.9] [skip-ci] packit: update fedora downstream branches
  * @@option volume.image: be specific that -v only affects RUN
  * Accept a config blob alongside the "changes" slice when committing
  * container create: use ParseUserNamespace to parse a user namespace setting
  * Bump to v4.9.3-dev
  * Bump to v4.9.2
  * Release notes for v4.9.2
  * Cirrus: Update operating branch
  * [v4.9] Bump to c/common v0.57.4, buildkit v0.12.5, c/buidah v1.33.5
  * Fix updated runc dep breaking pod devices cgroup
  * systests: kube with policies test: fix race
  * Remove go.mod pin of runc and update to latest
  * systests: kube with policies test: fix race
  * Bump to v4.9.2-dev
  * Bump to v4.9.1
  * Release notes for v4.9.1
  * [v4.9] Bump Buildah to v1.33.4, c/common v0.57.3, c/image v5.29.2
  * pkginstaller: bump Qemu version to 8.2.1
  * Assign separate ports for each appleHV machine
  * Fix machine inspect test config
  * AppleHV: update LastUp time
  * applehv: return socket path from setupAPIForwarding
  * applehv: Remove unneeded cmd.ExtraFiles assignment
  * abi: drop check for IsRootless()
  * system: enhance check for re-exec into rootless userns
  * system: enhance check for re-exec into rootless userns
  * Fix `podman machine set --rootful` for applehv
  * applehv - fix vm lookup
  * rpm: use go-rpm-macros on RHEL 10
  * Bump to v4.9.1-dev
  * Bump to v4.9.0
  * Fix a small grammar error in RELEASE_NOTES.md
  * Fix push endpoint stream
  * Finalized release notes for v4.9.0
  * farm build: push built images to registry
  * Move the --farm flag to farm build command
  * Clean up farm-build miscommit
  * [CI:DOCS] Add podman farm build doc
  * Add release notes for v4.9.0
  * gvproxy: Update to 0.7.2 release
  * [v4.9] Bump Buildah to v1.33.3, c/common to v0.57.2, c/image to v5.29.1
  * Add a net health recovery service to Qemu machines
  * Set up podman machine remote user correctly
  * Remove Libpod special-init conditions
  * Fix `podman system reset` with external containers
  * [v4.8] podman kube play: fix broken annotation parsing
  * feat: disable pid max in the podman machine
  * systests: cp: add wait_for_ready
  * System tests: fixes for RHEL8 gating failures
  * Add API forwarding support for HyperV
  * bump to v4.8.4-dev</changelog>
  <changelog author="dcermak@suse.com" date="1719835200">- Add patch to fix bsc#1227052 / CVE-2024-6104:
  * 0001-Backport-fix-for-CVE-2024-6104.patch
- Add missing BuildRequires man</changelog>
</package>
<package pkgid="6b5ae14913fe162a835185785160201c5501a9ae28f2f534f0e713af36beabc5" name="podman-remote" arch="ppc64le">
  <version epoch="0" ver="4.9.5" rel="150500.3.15.1"/>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1710849600">- Add patch for CVE-2024-1753 (bsc#1221677):
  0001-CVE-2024-1753-container-escape-fix.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1717761600">- Remove upstreamed patches:
  - 0001-CVE-2024-1753-container-escape-fix.patch
- Update to version 4.9.5:
  * Bump to v4.9.5
  * Update release notes for v4.9.5
  * fix "concurrent map writes" in network ls compat endpoint
  * [v4.9] Fix for CVE-2024-3727 (bsc#1224122)
  * Disable failing bud test
  * CI Maintenance: Disable machine tests
  * [CI:DOCS] Allow downgrade of WiX
  * [CI:DOCS] Force WiX 3.11
  * [CI:DOCS] Fix windows installer action
  * Bump to v4.9.5-dev
  * Bump to v4.9.4
  * Update release notes for v4.9.4
  * [v4.9] Bump Buildah to v1.33.7, CVE-2024-1753, CVE-2024-24786 (bsc#1226136)
  * Add farm command to commands list
  * Bump to FreeBSD 13.3 (13.2 vanished)
  * Update health-start-periods docs
  * Don't update health check status during initialDelaySeconds
  * image scp: don't require port for ssh URL
  * Ignore docker's end point config when the final network mode isn't bridge.
  * Fix running container from docker client with rootful in rootless podman.
  * [skip-ci] Packit: remove koji and bodhi tasks for v4.9
  * Bump to v4.9.4-dev
  * Bump to v4.9.3
  * Release notes for v4.9.3
  * Remove gitleaks scanning
  * [v4.9] [skip-ci] packit: update fedora downstream branches
  * @@option volume.image: be specific that -v only affects RUN
  * Accept a config blob alongside the "changes" slice when committing
  * container create: use ParseUserNamespace to parse a user namespace setting
  * Bump to v4.9.3-dev
  * Bump to v4.9.2
  * Release notes for v4.9.2
  * Cirrus: Update operating branch
  * [v4.9] Bump to c/common v0.57.4, buildkit v0.12.5, c/buidah v1.33.5
  * Fix updated runc dep breaking pod devices cgroup
  * systests: kube with policies test: fix race
  * Remove go.mod pin of runc and update to latest
  * systests: kube with policies test: fix race
  * Bump to v4.9.2-dev
  * Bump to v4.9.1
  * Release notes for v4.9.1
  * [v4.9] Bump Buildah to v1.33.4, c/common v0.57.3, c/image v5.29.2
  * pkginstaller: bump Qemu version to 8.2.1
  * Assign separate ports for each appleHV machine
  * Fix machine inspect test config
  * AppleHV: update LastUp time
  * applehv: return socket path from setupAPIForwarding
  * applehv: Remove unneeded cmd.ExtraFiles assignment
  * abi: drop check for IsRootless()
  * system: enhance check for re-exec into rootless userns
  * system: enhance check for re-exec into rootless userns
  * Fix `podman machine set --rootful` for applehv
  * applehv - fix vm lookup
  * rpm: use go-rpm-macros on RHEL 10
  * Bump to v4.9.1-dev
  * Bump to v4.9.0
  * Fix a small grammar error in RELEASE_NOTES.md
  * Fix push endpoint stream
  * Finalized release notes for v4.9.0
  * farm build: push built images to registry
  * Move the --farm flag to farm build command
  * Clean up farm-build miscommit
  * [CI:DOCS] Add podman farm build doc
  * Add release notes for v4.9.0
  * gvproxy: Update to 0.7.2 release
  * [v4.9] Bump Buildah to v1.33.3, c/common to v0.57.2, c/image to v5.29.1
  * Add a net health recovery service to Qemu machines
  * Set up podman machine remote user correctly
  * Remove Libpod special-init conditions
  * Fix `podman system reset` with external containers
  * [v4.8] podman kube play: fix broken annotation parsing
  * feat: disable pid max in the podman machine
  * systests: cp: add wait_for_ready
  * System tests: fixes for RHEL8 gating failures
  * Add API forwarding support for HyperV
  * bump to v4.8.4-dev</changelog>
  <changelog author="dcermak@suse.com" date="1719835200">- Add patch to fix bsc#1227052 / CVE-2024-6104:
  * 0001-Backport-fix-for-CVE-2024-6104.patch
- Add missing BuildRequires man</changelog>
</package>
<package pkgid="15fbe1f7556aced81e57414395131a6a8d973edaa86c20014ce3eef66607612e" name="podman-remote" arch="s390x">
  <version epoch="0" ver="4.9.5" rel="150500.3.15.1"/>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1710849600">- Add patch for CVE-2024-1753 (bsc#1221677):
  0001-CVE-2024-1753-container-escape-fix.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1717761600">- Remove upstreamed patches:
  - 0001-CVE-2024-1753-container-escape-fix.patch
- Update to version 4.9.5:
  * Bump to v4.9.5
  * Update release notes for v4.9.5
  * fix "concurrent map writes" in network ls compat endpoint
  * [v4.9] Fix for CVE-2024-3727 (bsc#1224122)
  * Disable failing bud test
  * CI Maintenance: Disable machine tests
  * [CI:DOCS] Allow downgrade of WiX
  * [CI:DOCS] Force WiX 3.11
  * [CI:DOCS] Fix windows installer action
  * Bump to v4.9.5-dev
  * Bump to v4.9.4
  * Update release notes for v4.9.4
  * [v4.9] Bump Buildah to v1.33.7, CVE-2024-1753, CVE-2024-24786 (bsc#1226136)
  * Add farm command to commands list
  * Bump to FreeBSD 13.3 (13.2 vanished)
  * Update health-start-periods docs
  * Don't update health check status during initialDelaySeconds
  * image scp: don't require port for ssh URL
  * Ignore docker's end point config when the final network mode isn't bridge.
  * Fix running container from docker client with rootful in rootless podman.
  * [skip-ci] Packit: remove koji and bodhi tasks for v4.9
  * Bump to v4.9.4-dev
  * Bump to v4.9.3
  * Release notes for v4.9.3
  * Remove gitleaks scanning
  * [v4.9] [skip-ci] packit: update fedora downstream branches
  * @@option volume.image: be specific that -v only affects RUN
  * Accept a config blob alongside the "changes" slice when committing
  * container create: use ParseUserNamespace to parse a user namespace setting
  * Bump to v4.9.3-dev
  * Bump to v4.9.2
  * Release notes for v4.9.2
  * Cirrus: Update operating branch
  * [v4.9] Bump to c/common v0.57.4, buildkit v0.12.5, c/buidah v1.33.5
  * Fix updated runc dep breaking pod devices cgroup
  * systests: kube with policies test: fix race
  * Remove go.mod pin of runc and update to latest
  * systests: kube with policies test: fix race
  * Bump to v4.9.2-dev
  * Bump to v4.9.1
  * Release notes for v4.9.1
  * [v4.9] Bump Buildah to v1.33.4, c/common v0.57.3, c/image v5.29.2
  * pkginstaller: bump Qemu version to 8.2.1
  * Assign separate ports for each appleHV machine
  * Fix machine inspect test config
  * AppleHV: update LastUp time
  * applehv: return socket path from setupAPIForwarding
  * applehv: Remove unneeded cmd.ExtraFiles assignment
  * abi: drop check for IsRootless()
  * system: enhance check for re-exec into rootless userns
  * system: enhance check for re-exec into rootless userns
  * Fix `podman machine set --rootful` for applehv
  * applehv - fix vm lookup
  * rpm: use go-rpm-macros on RHEL 10
  * Bump to v4.9.1-dev
  * Bump to v4.9.0
  * Fix a small grammar error in RELEASE_NOTES.md
  * Fix push endpoint stream
  * Finalized release notes for v4.9.0
  * farm build: push built images to registry
  * Move the --farm flag to farm build command
  * Clean up farm-build miscommit
  * [CI:DOCS] Add podman farm build doc
  * Add release notes for v4.9.0
  * gvproxy: Update to 0.7.2 release
  * [v4.9] Bump Buildah to v1.33.3, c/common to v0.57.2, c/image to v5.29.1
  * Add a net health recovery service to Qemu machines
  * Set up podman machine remote user correctly
  * Remove Libpod special-init conditions
  * Fix `podman system reset` with external containers
  * [v4.8] podman kube play: fix broken annotation parsing
  * feat: disable pid max in the podman machine
  * systests: cp: add wait_for_ready
  * System tests: fixes for RHEL8 gating failures
  * Add API forwarding support for HyperV
  * bump to v4.8.4-dev</changelog>
  <changelog author="dcermak@suse.com" date="1719835200">- Add patch to fix bsc#1227052 / CVE-2024-6104:
  * 0001-Backport-fix-for-CVE-2024-6104.patch
- Add missing BuildRequires man</changelog>
</package>
<package pkgid="b782b3809484d3b244594faf34c6696eed514afe955242e1590a0c134ef012d2" name="podman-remote" arch="x86_64">
  <version epoch="0" ver="4.9.5" rel="150500.3.15.1"/>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1710849600">- Add patch for CVE-2024-1753 (bsc#1221677):
  0001-CVE-2024-1753-container-escape-fix.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1717761600">- Remove upstreamed patches:
  - 0001-CVE-2024-1753-container-escape-fix.patch
- Update to version 4.9.5:
  * Bump to v4.9.5
  * Update release notes for v4.9.5
  * fix "concurrent map writes" in network ls compat endpoint
  * [v4.9] Fix for CVE-2024-3727 (bsc#1224122)
  * Disable failing bud test
  * CI Maintenance: Disable machine tests
  * [CI:DOCS] Allow downgrade of WiX
  * [CI:DOCS] Force WiX 3.11
  * [CI:DOCS] Fix windows installer action
  * Bump to v4.9.5-dev
  * Bump to v4.9.4
  * Update release notes for v4.9.4
  * [v4.9] Bump Buildah to v1.33.7, CVE-2024-1753, CVE-2024-24786 (bsc#1226136)
  * Add farm command to commands list
  * Bump to FreeBSD 13.3 (13.2 vanished)
  * Update health-start-periods docs
  * Don't update health check status during initialDelaySeconds
  * image scp: don't require port for ssh URL
  * Ignore docker's end point config when the final network mode isn't bridge.
  * Fix running container from docker client with rootful in rootless podman.
  * [skip-ci] Packit: remove koji and bodhi tasks for v4.9
  * Bump to v4.9.4-dev
  * Bump to v4.9.3
  * Release notes for v4.9.3
  * Remove gitleaks scanning
  * [v4.9] [skip-ci] packit: update fedora downstream branches
  * @@option volume.image: be specific that -v only affects RUN
  * Accept a config blob alongside the "changes" slice when committing
  * container create: use ParseUserNamespace to parse a user namespace setting
  * Bump to v4.9.3-dev
  * Bump to v4.9.2
  * Release notes for v4.9.2
  * Cirrus: Update operating branch
  * [v4.9] Bump to c/common v0.57.4, buildkit v0.12.5, c/buidah v1.33.5
  * Fix updated runc dep breaking pod devices cgroup
  * systests: kube with policies test: fix race
  * Remove go.mod pin of runc and update to latest
  * systests: kube with policies test: fix race
  * Bump to v4.9.2-dev
  * Bump to v4.9.1
  * Release notes for v4.9.1
  * [v4.9] Bump Buildah to v1.33.4, c/common v0.57.3, c/image v5.29.2
  * pkginstaller: bump Qemu version to 8.2.1
  * Assign separate ports for each appleHV machine
  * Fix machine inspect test config
  * AppleHV: update LastUp time
  * applehv: return socket path from setupAPIForwarding
  * applehv: Remove unneeded cmd.ExtraFiles assignment
  * abi: drop check for IsRootless()
  * system: enhance check for re-exec into rootless userns
  * system: enhance check for re-exec into rootless userns
  * Fix `podman machine set --rootful` for applehv
  * applehv - fix vm lookup
  * rpm: use go-rpm-macros on RHEL 10
  * Bump to v4.9.1-dev
  * Bump to v4.9.0
  * Fix a small grammar error in RELEASE_NOTES.md
  * Fix push endpoint stream
  * Finalized release notes for v4.9.0
  * farm build: push built images to registry
  * Move the --farm flag to farm build command
  * Clean up farm-build miscommit
  * [CI:DOCS] Add podman farm build doc
  * Add release notes for v4.9.0
  * gvproxy: Update to 0.7.2 release
  * [v4.9] Bump Buildah to v1.33.3, c/common to v0.57.2, c/image to v5.29.1
  * Add a net health recovery service to Qemu machines
  * Set up podman machine remote user correctly
  * Remove Libpod special-init conditions
  * Fix `podman system reset` with external containers
  * [v4.8] podman kube play: fix broken annotation parsing
  * feat: disable pid max in the podman machine
  * systests: cp: add wait_for_ready
  * System tests: fixes for RHEL8 gating failures
  * Add API forwarding support for HyperV
  * bump to v4.8.4-dev</changelog>
  <changelog author="dcermak@suse.com" date="1719835200">- Add patch to fix bsc#1227052 / CVE-2024-6104:
  * 0001-Backport-fix-for-CVE-2024-6104.patch
- Add missing BuildRequires man</changelog>
</package>
<package pkgid="90d7599145a7f1ead36044b115f2ca7f2d4b08f73ba648f8d16a396f3d2378bd" name="podmansh" arch="aarch64">
  <version epoch="0" ver="4.7.2" rel="150500.3.3.1"/>
  <changelog author="danish.prakash@suse.com" date="1677240000">- Update to version 4.4.2:
  * Bump to v4.4.2
  * Release notes for v4.4.2
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * kube play: only enforce passthrough in Quadlet
  * Emergency fix for man pages: check for broken includes
  * CI: Temporarily disable all AWS EC2-based tasks
  * quadlet system tests: add useful defaults, logging
  * volume,container: chroot to source before exporting content
  * install sigproxy before start/attach
  * Update to c/image 5.24.1
  * events + container inspect test: RHEL fixes
  * Bump to v4.4.2-dev
- Remove patches (merged upstream):
  * volume-container-chroot-to-source-before-exporting-content.patch
- podman.spec: add `crun` requirement for quadlet
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add patch to let quadlet use the default runtime
  Added patch:
  * Quadlet-use-the-default-runtime.patch
  =&gt; Remove dependency on crun</changelog>
  <changelog author="danish.prakash@suse.com" date="1679659200">- Update to version 4.4.3:
  * Bump to v4.4.3
  * Release notes for v4.4.3
  * compat: /auth: parse server address correctly
  * vendor github.com/containers/common@v0.51.1
  * pkginstaller: bump Qemu to version 7.2.0
  * podman machine: Adjust Chrony makestep config
  * [v4.4] fix --health-on-failure=restart in transient unit
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * journald: remove initializeJournal()
  * netavark: only use aardvark ip as nameserver
  * compat API: network create return 409 for duplicate
  * fix "podman logs --since --follow" flake
  * system service --log-level=trace: support hijack
  * podman-mac-helper: exit 1 on error
  * bump golang.org/x/net to v0.8.0
  * Fix package restore
  * Quadlet - use the default runtime
  * Bump to v4.4.3-dev
- Remove patch (merged upstream):
  * Quadlet-use-the-default-runtime.patch
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="danish.prakash@suse.com" date="1680004800">- Update to version 4.4.4:
  * Bump to v4.4.4
  * Release notes for v4.4.4
  * libpod: always use direct mapping
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * Bump to v4.4.4-dev
- spec: Bump required version for libcontainers-common (bsc#1209495)</changelog>
  <changelog author="dcermak@suse.com" date="1681473600">- Don't build against EoL go versions, fixes bsc#1210299</changelog>
  <changelog author="danish.prakash@suse.com" date="1681819200">- Update to version 4.5.0:
  * Release v4.5.0
  * [CI:DOCS] Final release notes for v4.5.0
  * Quadlet - do not set log-driver by default
  * Return title fields as a list
  * Bump to v4.5.0-dev
  * Bump to v4.5.0-RC2
  * Final release notes for v4.5.0-RC2
  * test/e2e: remove unnecessary SkipIfNetavark() calls
  * test/e2e: deduplicated network test
  * docs: update podman-network-create.1
  * network create: add --interface-name
  * test/system/252-quadlet.bats: fix flake
  * Read kube_generate_type from containers.conf
  * Debian setup: workaround for runc /dev/char/10:200 bug
  * pkg/rootless: use catatonit from /usr/libexec/podman
  * rootless: make sure we only use a single pause process
  * Use atomic config writing strategy for podman machine config files
  * Add remaining release notes for v4.5.0-RC2
  * GHA: Use version instead of SHA for actions
  * chore(deps): update dependency containers/automation_images to v20230405
  * build: pass env by reference
  * test: retrofit error message
  * test/system: expect 12 char for short id
  * vendor: bump containers/(storage, common, buildah, image)
  * [skip-ci] Update actions/upload-artifact action to v3
  * [skip-ci] Update actions/stale action to v8
  * [skip-ci] Update actions/setup-go action to v4
  * [skip-ci] Update github/issue-labeler action to v2.6
  * Fix up codespell errors
  * Capitalize all uid,gid and id words that are not options in docs
  * build(deps): bump golang.org/x/tools from 0.7.0 to 0.8.0 in /test/tools
  * Properly remove the service container during kube down
  * quadlet: add `UserNS` option key
  * [CI:DOCS] Release notes for 4.5.0 Part 1
  * "podman pull by digest and list --all" test: untag instead of rmi
  * build(deps): bump golang.org/x/text from 0.8.0 to 0.9.0
  * Add renovate.json configuration
  * CI: postbuild step: skip under nightly treadmill
  * The `--ulimit` option accepts the name with an `RLIMIT_` prefix both upper and lower case
  * test/e2e: use custom network config dir where needed
  * chore: replace `github.com/ghodss/yaml` with `sigs.k8s.io/yaml`
  * update completion scripts for cobra v1.7.0
  * libpod.storageService.CreateContainerStorage(): retrieve ID maps
  * Fix invalid pod name and hostname during kube generate
  * e2e tests: fix racy flakes
  * Cirrus: Enable labeling of EC2 VMs
  * Cirrus: Fix aarch64 clone_script 404 errors
  * e2e: GinkgoParallelNode() -&gt; ...Process()
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
  * build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0
  * [CI:DOCS] --creds and registries
  * Copr: fix build deps for /usr/bin/envsubst
  * Don't error when removing non-existant env vars
  * e2e: healthcheck on stopped container: fix flake
  * test/apiv2/80-kube.at
  * test/apiv2/80-kube.at
  * system service: do not close Body
  * rm `hack/release.sh`
  * build(deps): bump github.com/onsi/gomega from 1.27.5 to 1.27.6
  * add `quadlet -version` flag
  * add version/rawversion package
  * quadlet: use `Flag` suffix for variables
  * quadlet: implement `Tmpfs` option
  * Bump to v4.5.0-dev
  * Bump to 4.5.0-rc1
  * Update release notes from 4.4 branch
  * rootless netns: recover from invalid netns
  * System tests: unverbosify a flake log
  * Add support for secret exists
  * Fix Win install task failures with large PR bodies
  * docs: add `starting` to `HealthCheckResults.Status`
  * Add support for cgroup_config from containers.conf
  * libpod: mount safely subpaths
  * Support Deployment generation with kube generate
  * Use secret.items to create volume mounts if present
  * [CI:DOCS] fix typo in --systemd option
  * rootless: drop preexec hook error message
  * Edit the docker wrapper to use the install prefix
  * Update podman-for-windows.md
  * Quadlet: RemapUsers documentation fixes
  * speed up image listing
  * vendor containers/common@e27c30ee9b1b
  * fix volume-plugin-test flake
  * Document building Podman remote on Windows hosts
  * test/e2e: gpg keep stdout/err attached
  * auto-update: stop+start instead of restart sytemd units
  * [CI:DOCS] Improve basic tutorial
  * Update docs/source/markdown/podman-network.1.md
  * Add debug to --wait test
  * fix slirp4netns resolv.conf ip with a userns
  * Quadlet: add support for keep-id with mapping values
  * Quadlet E2E test - run quadlet as user generator
  * sqlite: do not `Ping()` after connecting
  * Quadlet - treat paths starting with systemd specifiers as absolute
  * Update docs/source/markdown/podman-kube-play.1.md.in
  * system tests: use CONTAINERS_CONF_OVERRIDE
  * implement podman machine set for hyperv
  * [CI:DOCS] Add network subnets info to network man page
  * CI: retry the golangci install
  * system tests: fix racey sdnotify test
  * hyperv: lookup machine on local filesystem first
  * fix os.IsNotExist() CI check
  * Ensure that SQLite state handles name-ID collisions
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * build(deps): bump github.com/onsi/gomega from 1.27.4 to 1.27.5
  * Fix a race around SQLite DB config validation
  * add CONTAINERS_CONF_OVERRIDE
  * vendor containers/common@main
  * docs: minor grammar fix in `--volume` description
  * sqlite: do not use shared cache
  * test: podman checkpoint/restore the latest container
  * stats compat API: return "id" lowercase
  * Run make codespell
  * Drop SQLite max connections
  * sqlite: set connection attributes on open
  * Fix database locked errors with SQLite
  * quadlet tests: skip on RHEL8 rootless
  * Kube Play Doc: Document the support for K8S Secret
  * New ulimit test: bump up minimum nfiles
  * logformatter: hide --db-backend, and friendlyize quadlet
  * Quadlet - add support for relative path in Volume key in .container file
  * Add service ctr cleanup to PlayKubeDown
  * fix --health-on-failure=restart in transient unit
  * Quadlet Doc: Suggest the kill operation for HealthOnFailure
  * Quadlet - Add support for health checks configuration in .container files
  * Makefile: allow specifying /lib dir location
  * Fix option --opts -&gt; --opt
  * basic hypverv machine implementation
  * Fix SQLite DB schema migration code
  * Add support for oom_score_adj value from containers.conf
  * Use default_ulimits field in containers.conf
  * CI: test and confirm DESIRED_DATABASE
  * build(deps): bump github.com/openshift/imagebuilder
  * logformatter: futureproof output filename
  * Vendor in latest containers/(storage, common, image)
  * build(deps): bump google.golang.org/protobuf from 1.29.0 to 1.30.0
  * test/system/255-auto-update.bats: add debug logs
  * Revert "Revert "pasta: Use two connections instead of three in TCP range forward tests""
  * Add information for secret inspect
  * Add format to podman volume ls
  * Add format to podman volume inspect
  * Add format to podman secret ls
  * Add format to podman system df
  * Add format to podman machine info
  * Add format table to podman image inspect man page
  * Cirrus: Store podman machine benchmark data
  * Update Cirrus display names, and fix get-ci-vm script
  * Ensure SQLite places uses the runroot in transient mode
  * Fix various integration test issues with SQLite state
  * Remove test for pod/container name global uniqueness
  * Improve handling of existing container names in SQLite
  * Add SQLite job to CI
  * buildah treadmill: also run rootless tests
  * build(deps): bump github.com/vbatts/git-validation in /test/tools
  * auto update: return restart error
  * fix: Document removing anonymous volumes
  * events: no duplicates when streaming during a log rotation
  * Add search --cert-dir, --creds
  * podman-mac-helper: exit 1 on error
  * system service --log-level=trace: support hijack
  * test/system: fix wait_for_port() to wait for bind
  * cgroupns: private cgroupns on cgroupv1 breaks --systemd
  * libpod: remove error stutter
  * podman events: unhide --stream
  * test/system/255-auto-update.bats: multiple services
  * 255-auto-update.bats: turn off rollback where needed
  * Use append() to add elements to a slice
  * Revert "pasta: Use two connections instead of three in TCP range forward tests"
  * Support running nested SELinux container separation
  * bud tests: rootless remote: use correct socket path
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.2.1 to 8.3.0
  * compat: /auth: parse server address correctly
  * docs: fix cmd `set DOCKER_HOST` suggestion
  * test: reenable idmap test
  * Must use mountlabel when creating builtin volumes
  * podman.spec.rpkg: distro conditionals for modulesloaddir
  * build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.29.0
  * podman inspect list network when using --net=host or none
  * pasta: Re-enable "Local forwarder, IPv4" test, accept NXDOMAIN as response
  * build(deps): bump golang.org/x/tools from 0.6.0 to 0.7.0 in /test/tools
  * CI: Switch to c20230307t192532z-f37f36d12 images
  * Cirrus: Run system &amp; integration tests in parallel
  * Update checkpointctl v0.1.0
  * Quadlet: add support for setting --ip and --ip6
  * build(deps): bump golang.org/x/net from 0.7.0 to 0.8.0
  * build(deps): bump golang.org/x/sys from 0.5.0 to 0.6.0
  * libpod: avoid nil pointer dereference in (*Container).Cleanup
  * [CI:DOCS] Add image not found info to troubleshooting
  * cmd: do not require userns for "version"
  * cmd: drop special handling for "scp"
  * cmd: clarify meaning of ParentNSRequired
  * Fix package restore
  * [CI:DOCS] Fix docs/version-check always requesting updates
  * sqlite: add a hidden --db-backend flag
  * fix: update the default machine value when the previously set default machine is deleted
  * podman machine: Adjust Chrony makestep config
  * sqlite: add container short ID to network aliases
  * sqlite: remove dead code
  * sqlite: addContainer: add named volume only once
  * sqlite: implement RewriteVolumeConfig
  * sqlite: LookupVolume: fix partial name match
  * sqlite: LookupVolume: wrap error
  * sqlite: fix type rewriting container config
  * sqlite: return correct error on pod-name conflict
  * sqlite: RewritePodConfig: update error message
  * test/system/255-auto-update.bats: wait 10 for update to finish
  * auto-update test: wait for service to be ready
  * Vendor in latest containers/(common, storage, image)
  * play kube: Add --wait option
  * Cirrus: Fix git config permission denied
  * Quadlet: Add support for the Mount key in .container files
  * build(deps): bump github.com/onsi/gomega from 1.27.1 to 1.27.2
  * fix "podman logs --since --follow" flake
  * Clarify that replicas are ignored in kubernetes deployment
  * Revert "Skip all pasta tests"
  * CI: Switch to c20230223t153813z-f37f36d12 images
  * Fix user socket path
  * pkginstaller: bump Qemu to version 7.2.0
  * Cirrus: Fix bud tests failing to apply patches
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2
  * build(deps): bump github.com/coreos/stream-metadata-go
  * Vendor in latest containers/storage
  * buildah-bud tests: don't sudo when rootless is desired
  * Temporarily disable version-check
  * CI: new rootless buildah-bud tests (cron only)
  * sqlite: fix volume lookups with partial names
  * sqlite: fix container lookups with partial IDs
  * sqlite: fix LookupPod
  * sqlite: fix pod create/rm
  * sqlite: LookupContainer: update error message
  * sqlite: AddContainerExitCode: allow to replace
  * system: add warning when running rootless on cgroupv1
  * sqlite: fix AllContainers with state
  * sqlite: fix "UPDATE TABLE" typos
  * sqlite: SaveVolume: fix syntax error updating the volumes table
  * sqlite: exit code: allow -1
  * sqlite: fix typo when removing exec sessions
  * sqlite: AllContainers: fix inner join
  * sqlite: move migration after table creation
  * sqlite: implement pod methods
  * Quadlet - use the default runtime
  * docs: context is not optional for build
  * Fix an incorrect comment on NewSqliteState
  * Add support for containers.conf database setting
  * Add support for volume operations to SQLite state
  * Implement exec session handling in SQL database
  * Various fixes from code review
  * Remove `--namespace` flag from Podman root
  * Get E2E tests to pass
  * Implement network disconnect for SQLite state
  * Implement Network Connect/Modify for SQLite state
  * Fix various lint issues
  * Some further work on SQLite state
  * Remove concept of Namespaces from BoltDB
  * Add initial SQLite-backed state implementation
  * Cirrus: Support runc testing on debian VMs
  * Skip all pasta tests
  * Skip buildah-bud test
  * Skip buildx test with VFS podman storage driver
  * Skip 'podman kube --network' test for rootless CGv1
  * Skip tests which fail with CGv1 &amp; runc
  * Skip rootless CGv1 quadlet tests due to issue
  * Makefile: Define SHELL
  * Machine refactor for QEMU/AppleHV
  * machine refactoring preparations for hyperv
  * [CI:BUILD] spec.rpkg: trim dependency list
  * Logs follow-until tests: loosen checks
  * [CI:DOCS] Windows/Mac docs link update
  * Doc update for docker network options via CLI
  * compat API: network create return 409 for duplicate
  * Apply suggestions to man page
  * vendor c/common@852ca05a1fbb
  * Quadlet: Add support for LogDriver key in container and kube units
  * machine refactoring preparations for hyperv
  * libpod: always use direct mapping
  * netavark: only use aardvark ip as nameserver
  * build(deps): bump github.com/container-orchestrated-devices/container-device-interface
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * make docs: sanity check for broken man pages
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.6 to 8.2.0
  * build(deps): bump github.com/onsi/gomega from 1.27.0 to 1.27.1
  * kube: rm secret on down, print secret on play
  * Fix spacing typo that triggered OCD &amp; indent units in podman-systemd.unit(5)
  * Update remote_client.md
  * [CI:DOCS] Add restriction to option README
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * build(deps): bump github.com/onsi/gomega from 1.26.0 to 1.27.0
  * kube play: only enforce passthrough in Quadlet
  * journald: remove initializeJournal()
  * auto-update: support pods
  * Emergency fix for man pages: check for broken includes
  * System tests: assert(): friendlier failure messages
  * Cirrus: Fix version-check to only run on `main` job
  * CI: Temporarily disable all AWS EC2-based tasks
  * build(deps): bump github.com/containerd/containerd from 1.6.16 to 1.6.18
  * volume,container: chroot to source before exporting content
  * Support sysctl configs via podman kube play
  * [CI:BUILD] copr: podman.spec.rpkg cleanups
  * quadlet system tests: add useful defaults, logging
  * libpod: support relative positions for idmaps
  * Experimental workaround for cdn03.quay.io flake
  * system tests: prevent leading tabs
  * Introduce podman machine os apply
  * create: add support for --group-entry
  * fix != filter in volume prune
  * Allow specification of podman --remote build -f -
  * Quadlet use crun specified in containers.conf
  * build(deps): bump golang.org/x/net from 0.6.0 to 0.7.0
  * Vendor c/image after https://github.com/containers/image/pull/1847
  * Don't set hostPort when generating a service
  * man page --format xref: tighten the autocompletion check
  * add support for limiting tmpfs size for systemd-specific mnts
  * build(deps): bump golang.org/x/text from 0.6.0 to 0.7.0
  * Add ulimit annotation to kube gen &amp; play
  * man page xref: validate displayed man page names
  * quadlet: add ExecStop
  * install sigproxy before start/attach
  * build(deps): bump golang.org/x/tools from 0.5.0 to 0.6.0 in /test/tools
  * Fix typos
  * Cirrus: Make benchmarks .env file easier to load
  * Cirrus: Omit functions in env. file
  * kube play: set service container as main PID when possible
  * Fix typos. Improve language.
  * events + container inspect test: RHEL fixes
  * Add ctrName to network alias during kube play
  * Run codespell on codebase
  * podman image scp: added identity for ssh.Exec
  * [CI:DOCS] Clarify nomap constrains
  * [CI:DOCS] man-page checker: include --format (Go templates)
  * Vendor c/image after https://github.com/containers/image/pull/1816
  * [CI:DOCS] Cleanup some man pages to display options with line breaks
  * [CI:DOCS] Add tables to podman-systemd.unit man page
  * github: remove prefix from bugs/features
  * Quadlet: Add support for the Secret key in Container group
  * [CI:DOCS] OWNERS: add @ygalblum and @alexlarsson
  * build(deps): bump golang.org/x/term from 0.4.0 to 0.5.0
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.1.6
  * Sort quadlet keys to make it easier to read
  * e2e: fix some tests on remote
  * kube play: do not teardown unconditionally on error
  * Fix typos in comments
  * Resolve symlink path for qemu directory if possible
  * #17363 Fix contradicting documentation podman-commit
  * Fix a potential UID/GID collision in unit tests
  * golangci-lint: show all errors at once
  * update golangci-lint to version 1.51.1
  * [CI:DOCS] events: document journald identifiers
  * Quadlet: exit 0 when there are no files to process
  * network ls: handle removed container
  * e2e: adapt play kube test on remote rootless
  * docs/podman-systemd.unit: Explicitely mention network &amp; kube units
  * docs/podman-systemd.unit: Update example to work out of the box
  * [CI:BUILD] Cirrus: Fix GraphQL ownerRepository:null error
  * Add missing return after errors
  * Revert "Cirrus: Emergency fix to un-stuck PRs"
  * pasta: Fix ICMPv6 Echo test, skip it for the moment
  * pasta: Fix ICMP Echo Request (IPv4) test
  * pasta: Use two connections instead of three in TCP range forward tests
  * Add SELinux label types support to quadlet
  * Add quadlet support for rootfs= containers
  * Cirrus: Emergency fix to un-stuck PRs
  * Move clean-binaries before podman-remote in podman-remote-docs target
  * oci: bind mount /sys with --userns=(auto|pod:)
  * Cleanup podman-systemd.unit file
  * Install podman-systemd.unit  man page, make quadlet discoverable
  * libpod: allow userns=keep-id for root
  * system-reset: use CleanCacheMount to clear build cache
  * vendor: bump buildah to v1.29.1-0.20230201192322-e56eb25575c7
  * system tests: fix noexistent labels test in the remote
  * Expose Podman named pipe in Inspect output
  * libpod: support idmap for --rootfs
  * test: adapt test to work on cgroupv1
  * Bump to v4.5.0-dev
  * Update main to reflect v4.4.0 release
  * Update from /github.com/vbauerster/mpb/v7 to /v8
  * hack/perf: cleanup after benchmarks
  * hack/perf/bz-2162111.sh: use custom network
  * Update bug_report.yaml
  * Handle filetype field in kubernetes.yaml files
  * hack/perf/bz-2162111.sh: measure stop
  * make hack/markdown-preprocess parallel-safe
  * system tests: fix volume exec/noexec test
  * system tests: minor fix for RHEL8 incompatibility
  * Cirrus: Use versionable IMAGE_SUFFIX
  * utils: new conversion method
  * libpod: use GraphRoot for overlay upper dir
  * vendor: update containers/storage
  * Do not mount /dev/tty into rootless containers
  * build(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7
  * e2e: fix run_staticip_test about no_proxy
  * docs: specify order preference for FROM
  * Fixes port collision issue on use of --publish-all
  * Support for Windows paths in the source position of the volume mounts
  * e2e tests: fix incorrect os.User.Name
  * Log data that we failed to unmarshal
  * [CI:DOCS] hack/perf: add script for BZ 216111
  * container rm: save once for exec removal and state change
  * [DOCS:CI] podman-events: document verbose create events
  * e2e: Avoid hard-coding included in quadlet test
  * e2e: Avoid hard-coding ImageCacheDir
  * Making gvproxy.exe optional for building Windows installer
  * Add gvproxy to Windows packages
  * Add comment to clarify error handling intention
  * fix #17244: use /etc/timezone where `timedatectl` is missing on Linux
  * Fix usage of absolute windows paths with --image-path
  * Match VT device paths to be blocked from mounting exactly
  * Fix default handling of pids-limit
  * Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml)
  * journald: podman logs only show logs for current user
  * journald: podman events only show events for current user
  * e2e: Remove the cache with "podman unshare rm" when a rootless user
  * Clean up more language for inclusiveness
  * e2e: Remove some directories at SynchronizedAfterSuite
  * fix: don't output "ago" when container is currently up and running
  * fix: running check error when podman is default in wsl
  * fix CI: test fail due to merge
  * Bump Bulidah to v1.29.0
  * e2e: reduce dependency on /tmp for e2e tests
  * Bump cirrus image with easier dependency management
  * quadlet: Add device support for .volume files
  * remote,build: error if containerignore is symlink
  * DB: make loading container states optional
  * ps: do not sync container
  * Set runAsNonRoot=true in gen kube
  * WSL refactoring
  * kube-play: add support for HostIPC in pod.Spec
  * Allow --device-cgroup-rule to be passed in by docker API</changelog>
  <changelog author="danish.prakash@suse.com" date="1685361600">- Update to version 4.5.1:
  * Release v4.5.1
  * [CI:DOCS] Final release notes for v4.5.1
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * Revert "Resolve symlink path for qemu directory if possible"
  * no need for podman-next rpm test on maint branch
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * network create/update: allow dns servers comma separated
  * machine: fix default connection URL to use 127.0.0.1
  * compat: accept tag in /images/create?fromSrc
  * compat container create: match duplicate mounts correctly
  * machine: qemu only remove connection after confirmation
  * windows: podman save allow the use of stdout
  * remote: exec inspect update exec session status
  * podman-remote logs: handle server error correctly
  * libpod: stop containers with --restart=always
  * Do not include image annotations when building spec
  * [v4.5] system tests: fix race in kube-play read-only
  * api: fix parsing filters
  * Support systemd optional prefix '-' for devices.
  * *: migrate image registry to registry.k8s.io
  * Makefile: include `release-artifacts` target
  * [CI:BUILD] Packit: Initial Enablement
  * Bump to v4.5.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
</package>
<package pkgid="d0acc092a55faa505825906b5b29902280fe6b0c0a30edcc4f262f0f01d6aa63" name="podmansh" arch="ppc64le">
  <version epoch="0" ver="4.7.2" rel="150500.3.3.1"/>
  <changelog author="danish.prakash@suse.com" date="1677240000">- Update to version 4.4.2:
  * Bump to v4.4.2
  * Release notes for v4.4.2
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * kube play: only enforce passthrough in Quadlet
  * Emergency fix for man pages: check for broken includes
  * CI: Temporarily disable all AWS EC2-based tasks
  * quadlet system tests: add useful defaults, logging
  * volume,container: chroot to source before exporting content
  * install sigproxy before start/attach
  * Update to c/image 5.24.1
  * events + container inspect test: RHEL fixes
  * Bump to v4.4.2-dev
- Remove patches (merged upstream):
  * volume-container-chroot-to-source-before-exporting-content.patch
- podman.spec: add `crun` requirement for quadlet
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add patch to let quadlet use the default runtime
  Added patch:
  * Quadlet-use-the-default-runtime.patch
  =&gt; Remove dependency on crun</changelog>
  <changelog author="danish.prakash@suse.com" date="1679659200">- Update to version 4.4.3:
  * Bump to v4.4.3
  * Release notes for v4.4.3
  * compat: /auth: parse server address correctly
  * vendor github.com/containers/common@v0.51.1
  * pkginstaller: bump Qemu to version 7.2.0
  * podman machine: Adjust Chrony makestep config
  * [v4.4] fix --health-on-failure=restart in transient unit
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * journald: remove initializeJournal()
  * netavark: only use aardvark ip as nameserver
  * compat API: network create return 409 for duplicate
  * fix "podman logs --since --follow" flake
  * system service --log-level=trace: support hijack
  * podman-mac-helper: exit 1 on error
  * bump golang.org/x/net to v0.8.0
  * Fix package restore
  * Quadlet - use the default runtime
  * Bump to v4.4.3-dev
- Remove patch (merged upstream):
  * Quadlet-use-the-default-runtime.patch
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="danish.prakash@suse.com" date="1680004800">- Update to version 4.4.4:
  * Bump to v4.4.4
  * Release notes for v4.4.4
  * libpod: always use direct mapping
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * Bump to v4.4.4-dev
- spec: Bump required version for libcontainers-common (bsc#1209495)</changelog>
  <changelog author="dcermak@suse.com" date="1681473600">- Don't build against EoL go versions, fixes bsc#1210299</changelog>
  <changelog author="danish.prakash@suse.com" date="1681819200">- Update to version 4.5.0:
  * Release v4.5.0
  * [CI:DOCS] Final release notes for v4.5.0
  * Quadlet - do not set log-driver by default
  * Return title fields as a list
  * Bump to v4.5.0-dev
  * Bump to v4.5.0-RC2
  * Final release notes for v4.5.0-RC2
  * test/e2e: remove unnecessary SkipIfNetavark() calls
  * test/e2e: deduplicated network test
  * docs: update podman-network-create.1
  * network create: add --interface-name
  * test/system/252-quadlet.bats: fix flake
  * Read kube_generate_type from containers.conf
  * Debian setup: workaround for runc /dev/char/10:200 bug
  * pkg/rootless: use catatonit from /usr/libexec/podman
  * rootless: make sure we only use a single pause process
  * Use atomic config writing strategy for podman machine config files
  * Add remaining release notes for v4.5.0-RC2
  * GHA: Use version instead of SHA for actions
  * chore(deps): update dependency containers/automation_images to v20230405
  * build: pass env by reference
  * test: retrofit error message
  * test/system: expect 12 char for short id
  * vendor: bump containers/(storage, common, buildah, image)
  * [skip-ci] Update actions/upload-artifact action to v3
  * [skip-ci] Update actions/stale action to v8
  * [skip-ci] Update actions/setup-go action to v4
  * [skip-ci] Update github/issue-labeler action to v2.6
  * Fix up codespell errors
  * Capitalize all uid,gid and id words that are not options in docs
  * build(deps): bump golang.org/x/tools from 0.7.0 to 0.8.0 in /test/tools
  * Properly remove the service container during kube down
  * quadlet: add `UserNS` option key
  * [CI:DOCS] Release notes for 4.5.0 Part 1
  * "podman pull by digest and list --all" test: untag instead of rmi
  * build(deps): bump golang.org/x/text from 0.8.0 to 0.9.0
  * Add renovate.json configuration
  * CI: postbuild step: skip under nightly treadmill
  * The `--ulimit` option accepts the name with an `RLIMIT_` prefix both upper and lower case
  * test/e2e: use custom network config dir where needed
  * chore: replace `github.com/ghodss/yaml` with `sigs.k8s.io/yaml`
  * update completion scripts for cobra v1.7.0
  * libpod.storageService.CreateContainerStorage(): retrieve ID maps
  * Fix invalid pod name and hostname during kube generate
  * e2e tests: fix racy flakes
  * Cirrus: Enable labeling of EC2 VMs
  * Cirrus: Fix aarch64 clone_script 404 errors
  * e2e: GinkgoParallelNode() -&gt; ...Process()
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
  * build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0
  * [CI:DOCS] --creds and registries
  * Copr: fix build deps for /usr/bin/envsubst
  * Don't error when removing non-existant env vars
  * e2e: healthcheck on stopped container: fix flake
  * test/apiv2/80-kube.at
  * test/apiv2/80-kube.at
  * system service: do not close Body
  * rm `hack/release.sh`
  * build(deps): bump github.com/onsi/gomega from 1.27.5 to 1.27.6
  * add `quadlet -version` flag
  * add version/rawversion package
  * quadlet: use `Flag` suffix for variables
  * quadlet: implement `Tmpfs` option
  * Bump to v4.5.0-dev
  * Bump to 4.5.0-rc1
  * Update release notes from 4.4 branch
  * rootless netns: recover from invalid netns
  * System tests: unverbosify a flake log
  * Add support for secret exists
  * Fix Win install task failures with large PR bodies
  * docs: add `starting` to `HealthCheckResults.Status`
  * Add support for cgroup_config from containers.conf
  * libpod: mount safely subpaths
  * Support Deployment generation with kube generate
  * Use secret.items to create volume mounts if present
  * [CI:DOCS] fix typo in --systemd option
  * rootless: drop preexec hook error message
  * Edit the docker wrapper to use the install prefix
  * Update podman-for-windows.md
  * Quadlet: RemapUsers documentation fixes
  * speed up image listing
  * vendor containers/common@e27c30ee9b1b
  * fix volume-plugin-test flake
  * Document building Podman remote on Windows hosts
  * test/e2e: gpg keep stdout/err attached
  * auto-update: stop+start instead of restart sytemd units
  * [CI:DOCS] Improve basic tutorial
  * Update docs/source/markdown/podman-network.1.md
  * Add debug to --wait test
  * fix slirp4netns resolv.conf ip with a userns
  * Quadlet: add support for keep-id with mapping values
  * Quadlet E2E test - run quadlet as user generator
  * sqlite: do not `Ping()` after connecting
  * Quadlet - treat paths starting with systemd specifiers as absolute
  * Update docs/source/markdown/podman-kube-play.1.md.in
  * system tests: use CONTAINERS_CONF_OVERRIDE
  * implement podman machine set for hyperv
  * [CI:DOCS] Add network subnets info to network man page
  * CI: retry the golangci install
  * system tests: fix racey sdnotify test
  * hyperv: lookup machine on local filesystem first
  * fix os.IsNotExist() CI check
  * Ensure that SQLite state handles name-ID collisions
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * build(deps): bump github.com/onsi/gomega from 1.27.4 to 1.27.5
  * Fix a race around SQLite DB config validation
  * add CONTAINERS_CONF_OVERRIDE
  * vendor containers/common@main
  * docs: minor grammar fix in `--volume` description
  * sqlite: do not use shared cache
  * test: podman checkpoint/restore the latest container
  * stats compat API: return "id" lowercase
  * Run make codespell
  * Drop SQLite max connections
  * sqlite: set connection attributes on open
  * Fix database locked errors with SQLite
  * quadlet tests: skip on RHEL8 rootless
  * Kube Play Doc: Document the support for K8S Secret
  * New ulimit test: bump up minimum nfiles
  * logformatter: hide --db-backend, and friendlyize quadlet
  * Quadlet - add support for relative path in Volume key in .container file
  * Add service ctr cleanup to PlayKubeDown
  * fix --health-on-failure=restart in transient unit
  * Quadlet Doc: Suggest the kill operation for HealthOnFailure
  * Quadlet - Add support for health checks configuration in .container files
  * Makefile: allow specifying /lib dir location
  * Fix option --opts -&gt; --opt
  * basic hypverv machine implementation
  * Fix SQLite DB schema migration code
  * Add support for oom_score_adj value from containers.conf
  * Use default_ulimits field in containers.conf
  * CI: test and confirm DESIRED_DATABASE
  * build(deps): bump github.com/openshift/imagebuilder
  * logformatter: futureproof output filename
  * Vendor in latest containers/(storage, common, image)
  * build(deps): bump google.golang.org/protobuf from 1.29.0 to 1.30.0
  * test/system/255-auto-update.bats: add debug logs
  * Revert "Revert "pasta: Use two connections instead of three in TCP range forward tests""
  * Add information for secret inspect
  * Add format to podman volume ls
  * Add format to podman volume inspect
  * Add format to podman secret ls
  * Add format to podman system df
  * Add format to podman machine info
  * Add format table to podman image inspect man page
  * Cirrus: Store podman machine benchmark data
  * Update Cirrus display names, and fix get-ci-vm script
  * Ensure SQLite places uses the runroot in transient mode
  * Fix various integration test issues with SQLite state
  * Remove test for pod/container name global uniqueness
  * Improve handling of existing container names in SQLite
  * Add SQLite job to CI
  * buildah treadmill: also run rootless tests
  * build(deps): bump github.com/vbatts/git-validation in /test/tools
  * auto update: return restart error
  * fix: Document removing anonymous volumes
  * events: no duplicates when streaming during a log rotation
  * Add search --cert-dir, --creds
  * podman-mac-helper: exit 1 on error
  * system service --log-level=trace: support hijack
  * test/system: fix wait_for_port() to wait for bind
  * cgroupns: private cgroupns on cgroupv1 breaks --systemd
  * libpod: remove error stutter
  * podman events: unhide --stream
  * test/system/255-auto-update.bats: multiple services
  * 255-auto-update.bats: turn off rollback where needed
  * Use append() to add elements to a slice
  * Revert "pasta: Use two connections instead of three in TCP range forward tests"
  * Support running nested SELinux container separation
  * bud tests: rootless remote: use correct socket path
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.2.1 to 8.3.0
  * compat: /auth: parse server address correctly
  * docs: fix cmd `set DOCKER_HOST` suggestion
  * test: reenable idmap test
  * Must use mountlabel when creating builtin volumes
  * podman.spec.rpkg: distro conditionals for modulesloaddir
  * build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.29.0
  * podman inspect list network when using --net=host or none
  * pasta: Re-enable "Local forwarder, IPv4" test, accept NXDOMAIN as response
  * build(deps): bump golang.org/x/tools from 0.6.0 to 0.7.0 in /test/tools
  * CI: Switch to c20230307t192532z-f37f36d12 images
  * Cirrus: Run system &amp; integration tests in parallel
  * Update checkpointctl v0.1.0
  * Quadlet: add support for setting --ip and --ip6
  * build(deps): bump golang.org/x/net from 0.7.0 to 0.8.0
  * build(deps): bump golang.org/x/sys from 0.5.0 to 0.6.0
  * libpod: avoid nil pointer dereference in (*Container).Cleanup
  * [CI:DOCS] Add image not found info to troubleshooting
  * cmd: do not require userns for "version"
  * cmd: drop special handling for "scp"
  * cmd: clarify meaning of ParentNSRequired
  * Fix package restore
  * [CI:DOCS] Fix docs/version-check always requesting updates
  * sqlite: add a hidden --db-backend flag
  * fix: update the default machine value when the previously set default machine is deleted
  * podman machine: Adjust Chrony makestep config
  * sqlite: add container short ID to network aliases
  * sqlite: remove dead code
  * sqlite: addContainer: add named volume only once
  * sqlite: implement RewriteVolumeConfig
  * sqlite: LookupVolume: fix partial name match
  * sqlite: LookupVolume: wrap error
  * sqlite: fix type rewriting container config
  * sqlite: return correct error on pod-name conflict
  * sqlite: RewritePodConfig: update error message
  * test/system/255-auto-update.bats: wait 10 for update to finish
  * auto-update test: wait for service to be ready
  * Vendor in latest containers/(common, storage, image)
  * play kube: Add --wait option
  * Cirrus: Fix git config permission denied
  * Quadlet: Add support for the Mount key in .container files
  * build(deps): bump github.com/onsi/gomega from 1.27.1 to 1.27.2
  * fix "podman logs --since --follow" flake
  * Clarify that replicas are ignored in kubernetes deployment
  * Revert "Skip all pasta tests"
  * CI: Switch to c20230223t153813z-f37f36d12 images
  * Fix user socket path
  * pkginstaller: bump Qemu to version 7.2.0
  * Cirrus: Fix bud tests failing to apply patches
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2
  * build(deps): bump github.com/coreos/stream-metadata-go
  * Vendor in latest containers/storage
  * buildah-bud tests: don't sudo when rootless is desired
  * Temporarily disable version-check
  * CI: new rootless buildah-bud tests (cron only)
  * sqlite: fix volume lookups with partial names
  * sqlite: fix container lookups with partial IDs
  * sqlite: fix LookupPod
  * sqlite: fix pod create/rm
  * sqlite: LookupContainer: update error message
  * sqlite: AddContainerExitCode: allow to replace
  * system: add warning when running rootless on cgroupv1
  * sqlite: fix AllContainers with state
  * sqlite: fix "UPDATE TABLE" typos
  * sqlite: SaveVolume: fix syntax error updating the volumes table
  * sqlite: exit code: allow -1
  * sqlite: fix typo when removing exec sessions
  * sqlite: AllContainers: fix inner join
  * sqlite: move migration after table creation
  * sqlite: implement pod methods
  * Quadlet - use the default runtime
  * docs: context is not optional for build
  * Fix an incorrect comment on NewSqliteState
  * Add support for containers.conf database setting
  * Add support for volume operations to SQLite state
  * Implement exec session handling in SQL database
  * Various fixes from code review
  * Remove `--namespace` flag from Podman root
  * Get E2E tests to pass
  * Implement network disconnect for SQLite state
  * Implement Network Connect/Modify for SQLite state
  * Fix various lint issues
  * Some further work on SQLite state
  * Remove concept of Namespaces from BoltDB
  * Add initial SQLite-backed state implementation
  * Cirrus: Support runc testing on debian VMs
  * Skip all pasta tests
  * Skip buildah-bud test
  * Skip buildx test with VFS podman storage driver
  * Skip 'podman kube --network' test for rootless CGv1
  * Skip tests which fail with CGv1 &amp; runc
  * Skip rootless CGv1 quadlet tests due to issue
  * Makefile: Define SHELL
  * Machine refactor for QEMU/AppleHV
  * machine refactoring preparations for hyperv
  * [CI:BUILD] spec.rpkg: trim dependency list
  * Logs follow-until tests: loosen checks
  * [CI:DOCS] Windows/Mac docs link update
  * Doc update for docker network options via CLI
  * compat API: network create return 409 for duplicate
  * Apply suggestions to man page
  * vendor c/common@852ca05a1fbb
  * Quadlet: Add support for LogDriver key in container and kube units
  * machine refactoring preparations for hyperv
  * libpod: always use direct mapping
  * netavark: only use aardvark ip as nameserver
  * build(deps): bump github.com/container-orchestrated-devices/container-device-interface
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * make docs: sanity check for broken man pages
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.6 to 8.2.0
  * build(deps): bump github.com/onsi/gomega from 1.27.0 to 1.27.1
  * kube: rm secret on down, print secret on play
  * Fix spacing typo that triggered OCD &amp; indent units in podman-systemd.unit(5)
  * Update remote_client.md
  * [CI:DOCS] Add restriction to option README
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * build(deps): bump github.com/onsi/gomega from 1.26.0 to 1.27.0
  * kube play: only enforce passthrough in Quadlet
  * journald: remove initializeJournal()
  * auto-update: support pods
  * Emergency fix for man pages: check for broken includes
  * System tests: assert(): friendlier failure messages
  * Cirrus: Fix version-check to only run on `main` job
  * CI: Temporarily disable all AWS EC2-based tasks
  * build(deps): bump github.com/containerd/containerd from 1.6.16 to 1.6.18
  * volume,container: chroot to source before exporting content
  * Support sysctl configs via podman kube play
  * [CI:BUILD] copr: podman.spec.rpkg cleanups
  * quadlet system tests: add useful defaults, logging
  * libpod: support relative positions for idmaps
  * Experimental workaround for cdn03.quay.io flake
  * system tests: prevent leading tabs
  * Introduce podman machine os apply
  * create: add support for --group-entry
  * fix != filter in volume prune
  * Allow specification of podman --remote build -f -
  * Quadlet use crun specified in containers.conf
  * build(deps): bump golang.org/x/net from 0.6.0 to 0.7.0
  * Vendor c/image after https://github.com/containers/image/pull/1847
  * Don't set hostPort when generating a service
  * man page --format xref: tighten the autocompletion check
  * add support for limiting tmpfs size for systemd-specific mnts
  * build(deps): bump golang.org/x/text from 0.6.0 to 0.7.0
  * Add ulimit annotation to kube gen &amp; play
  * man page xref: validate displayed man page names
  * quadlet: add ExecStop
  * install sigproxy before start/attach
  * build(deps): bump golang.org/x/tools from 0.5.0 to 0.6.0 in /test/tools
  * Fix typos
  * Cirrus: Make benchmarks .env file easier to load
  * Cirrus: Omit functions in env. file
  * kube play: set service container as main PID when possible
  * Fix typos. Improve language.
  * events + container inspect test: RHEL fixes
  * Add ctrName to network alias during kube play
  * Run codespell on codebase
  * podman image scp: added identity for ssh.Exec
  * [CI:DOCS] Clarify nomap constrains
  * [CI:DOCS] man-page checker: include --format (Go templates)
  * Vendor c/image after https://github.com/containers/image/pull/1816
  * [CI:DOCS] Cleanup some man pages to display options with line breaks
  * [CI:DOCS] Add tables to podman-systemd.unit man page
  * github: remove prefix from bugs/features
  * Quadlet: Add support for the Secret key in Container group
  * [CI:DOCS] OWNERS: add @ygalblum and @alexlarsson
  * build(deps): bump golang.org/x/term from 0.4.0 to 0.5.0
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.1.6
  * Sort quadlet keys to make it easier to read
  * e2e: fix some tests on remote
  * kube play: do not teardown unconditionally on error
  * Fix typos in comments
  * Resolve symlink path for qemu directory if possible
  * #17363 Fix contradicting documentation podman-commit
  * Fix a potential UID/GID collision in unit tests
  * golangci-lint: show all errors at once
  * update golangci-lint to version 1.51.1
  * [CI:DOCS] events: document journald identifiers
  * Quadlet: exit 0 when there are no files to process
  * network ls: handle removed container
  * e2e: adapt play kube test on remote rootless
  * docs/podman-systemd.unit: Explicitely mention network &amp; kube units
  * docs/podman-systemd.unit: Update example to work out of the box
  * [CI:BUILD] Cirrus: Fix GraphQL ownerRepository:null error
  * Add missing return after errors
  * Revert "Cirrus: Emergency fix to un-stuck PRs"
  * pasta: Fix ICMPv6 Echo test, skip it for the moment
  * pasta: Fix ICMP Echo Request (IPv4) test
  * pasta: Use two connections instead of three in TCP range forward tests
  * Add SELinux label types support to quadlet
  * Add quadlet support for rootfs= containers
  * Cirrus: Emergency fix to un-stuck PRs
  * Move clean-binaries before podman-remote in podman-remote-docs target
  * oci: bind mount /sys with --userns=(auto|pod:)
  * Cleanup podman-systemd.unit file
  * Install podman-systemd.unit  man page, make quadlet discoverable
  * libpod: allow userns=keep-id for root
  * system-reset: use CleanCacheMount to clear build cache
  * vendor: bump buildah to v1.29.1-0.20230201192322-e56eb25575c7
  * system tests: fix noexistent labels test in the remote
  * Expose Podman named pipe in Inspect output
  * libpod: support idmap for --rootfs
  * test: adapt test to work on cgroupv1
  * Bump to v4.5.0-dev
  * Update main to reflect v4.4.0 release
  * Update from /github.com/vbauerster/mpb/v7 to /v8
  * hack/perf: cleanup after benchmarks
  * hack/perf/bz-2162111.sh: use custom network
  * Update bug_report.yaml
  * Handle filetype field in kubernetes.yaml files
  * hack/perf/bz-2162111.sh: measure stop
  * make hack/markdown-preprocess parallel-safe
  * system tests: fix volume exec/noexec test
  * system tests: minor fix for RHEL8 incompatibility
  * Cirrus: Use versionable IMAGE_SUFFIX
  * utils: new conversion method
  * libpod: use GraphRoot for overlay upper dir
  * vendor: update containers/storage
  * Do not mount /dev/tty into rootless containers
  * build(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7
  * e2e: fix run_staticip_test about no_proxy
  * docs: specify order preference for FROM
  * Fixes port collision issue on use of --publish-all
  * Support for Windows paths in the source position of the volume mounts
  * e2e tests: fix incorrect os.User.Name
  * Log data that we failed to unmarshal
  * [CI:DOCS] hack/perf: add script for BZ 216111
  * container rm: save once for exec removal and state change
  * [DOCS:CI] podman-events: document verbose create events
  * e2e: Avoid hard-coding included in quadlet test
  * e2e: Avoid hard-coding ImageCacheDir
  * Making gvproxy.exe optional for building Windows installer
  * Add gvproxy to Windows packages
  * Add comment to clarify error handling intention
  * fix #17244: use /etc/timezone where `timedatectl` is missing on Linux
  * Fix usage of absolute windows paths with --image-path
  * Match VT device paths to be blocked from mounting exactly
  * Fix default handling of pids-limit
  * Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml)
  * journald: podman logs only show logs for current user
  * journald: podman events only show events for current user
  * e2e: Remove the cache with "podman unshare rm" when a rootless user
  * Clean up more language for inclusiveness
  * e2e: Remove some directories at SynchronizedAfterSuite
  * fix: don't output "ago" when container is currently up and running
  * fix: running check error when podman is default in wsl
  * fix CI: test fail due to merge
  * Bump Bulidah to v1.29.0
  * e2e: reduce dependency on /tmp for e2e tests
  * Bump cirrus image with easier dependency management
  * quadlet: Add device support for .volume files
  * remote,build: error if containerignore is symlink
  * DB: make loading container states optional
  * ps: do not sync container
  * Set runAsNonRoot=true in gen kube
  * WSL refactoring
  * kube-play: add support for HostIPC in pod.Spec
  * Allow --device-cgroup-rule to be passed in by docker API</changelog>
  <changelog author="danish.prakash@suse.com" date="1685361600">- Update to version 4.5.1:
  * Release v4.5.1
  * [CI:DOCS] Final release notes for v4.5.1
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * Revert "Resolve symlink path for qemu directory if possible"
  * no need for podman-next rpm test on maint branch
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * network create/update: allow dns servers comma separated
  * machine: fix default connection URL to use 127.0.0.1
  * compat: accept tag in /images/create?fromSrc
  * compat container create: match duplicate mounts correctly
  * machine: qemu only remove connection after confirmation
  * windows: podman save allow the use of stdout
  * remote: exec inspect update exec session status
  * podman-remote logs: handle server error correctly
  * libpod: stop containers with --restart=always
  * Do not include image annotations when building spec
  * [v4.5] system tests: fix race in kube-play read-only
  * api: fix parsing filters
  * Support systemd optional prefix '-' for devices.
  * *: migrate image registry to registry.k8s.io
  * Makefile: include `release-artifacts` target
  * [CI:BUILD] Packit: Initial Enablement
  * Bump to v4.5.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
</package>
<package pkgid="01426f963c26eff3a35da47d1c59eefb0ce7b4365d5b8239bb8a6c22bbb0f5e9" name="podmansh" arch="s390x">
  <version epoch="0" ver="4.7.2" rel="150500.3.3.1"/>
  <changelog author="danish.prakash@suse.com" date="1677240000">- Update to version 4.4.2:
  * Bump to v4.4.2
  * Release notes for v4.4.2
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * kube play: only enforce passthrough in Quadlet
  * Emergency fix for man pages: check for broken includes
  * CI: Temporarily disable all AWS EC2-based tasks
  * quadlet system tests: add useful defaults, logging
  * volume,container: chroot to source before exporting content
  * install sigproxy before start/attach
  * Update to c/image 5.24.1
  * events + container inspect test: RHEL fixes
  * Bump to v4.4.2-dev
- Remove patches (merged upstream):
  * volume-container-chroot-to-source-before-exporting-content.patch
- podman.spec: add `crun` requirement for quadlet
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add patch to let quadlet use the default runtime
  Added patch:
  * Quadlet-use-the-default-runtime.patch
  =&gt; Remove dependency on crun</changelog>
  <changelog author="danish.prakash@suse.com" date="1679659200">- Update to version 4.4.3:
  * Bump to v4.4.3
  * Release notes for v4.4.3
  * compat: /auth: parse server address correctly
  * vendor github.com/containers/common@v0.51.1
  * pkginstaller: bump Qemu to version 7.2.0
  * podman machine: Adjust Chrony makestep config
  * [v4.4] fix --health-on-failure=restart in transient unit
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * journald: remove initializeJournal()
  * netavark: only use aardvark ip as nameserver
  * compat API: network create return 409 for duplicate
  * fix "podman logs --since --follow" flake
  * system service --log-level=trace: support hijack
  * podman-mac-helper: exit 1 on error
  * bump golang.org/x/net to v0.8.0
  * Fix package restore
  * Quadlet - use the default runtime
  * Bump to v4.4.3-dev
- Remove patch (merged upstream):
  * Quadlet-use-the-default-runtime.patch
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="danish.prakash@suse.com" date="1680004800">- Update to version 4.4.4:
  * Bump to v4.4.4
  * Release notes for v4.4.4
  * libpod: always use direct mapping
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * Bump to v4.4.4-dev
- spec: Bump required version for libcontainers-common (bsc#1209495)</changelog>
  <changelog author="dcermak@suse.com" date="1681473600">- Don't build against EoL go versions, fixes bsc#1210299</changelog>
  <changelog author="danish.prakash@suse.com" date="1681819200">- Update to version 4.5.0:
  * Release v4.5.0
  * [CI:DOCS] Final release notes for v4.5.0
  * Quadlet - do not set log-driver by default
  * Return title fields as a list
  * Bump to v4.5.0-dev
  * Bump to v4.5.0-RC2
  * Final release notes for v4.5.0-RC2
  * test/e2e: remove unnecessary SkipIfNetavark() calls
  * test/e2e: deduplicated network test
  * docs: update podman-network-create.1
  * network create: add --interface-name
  * test/system/252-quadlet.bats: fix flake
  * Read kube_generate_type from containers.conf
  * Debian setup: workaround for runc /dev/char/10:200 bug
  * pkg/rootless: use catatonit from /usr/libexec/podman
  * rootless: make sure we only use a single pause process
  * Use atomic config writing strategy for podman machine config files
  * Add remaining release notes for v4.5.0-RC2
  * GHA: Use version instead of SHA for actions
  * chore(deps): update dependency containers/automation_images to v20230405
  * build: pass env by reference
  * test: retrofit error message
  * test/system: expect 12 char for short id
  * vendor: bump containers/(storage, common, buildah, image)
  * [skip-ci] Update actions/upload-artifact action to v3
  * [skip-ci] Update actions/stale action to v8
  * [skip-ci] Update actions/setup-go action to v4
  * [skip-ci] Update github/issue-labeler action to v2.6
  * Fix up codespell errors
  * Capitalize all uid,gid and id words that are not options in docs
  * build(deps): bump golang.org/x/tools from 0.7.0 to 0.8.0 in /test/tools
  * Properly remove the service container during kube down
  * quadlet: add `UserNS` option key
  * [CI:DOCS] Release notes for 4.5.0 Part 1
  * "podman pull by digest and list --all" test: untag instead of rmi
  * build(deps): bump golang.org/x/text from 0.8.0 to 0.9.0
  * Add renovate.json configuration
  * CI: postbuild step: skip under nightly treadmill
  * The `--ulimit` option accepts the name with an `RLIMIT_` prefix both upper and lower case
  * test/e2e: use custom network config dir where needed
  * chore: replace `github.com/ghodss/yaml` with `sigs.k8s.io/yaml`
  * update completion scripts for cobra v1.7.0
  * libpod.storageService.CreateContainerStorage(): retrieve ID maps
  * Fix invalid pod name and hostname during kube generate
  * e2e tests: fix racy flakes
  * Cirrus: Enable labeling of EC2 VMs
  * Cirrus: Fix aarch64 clone_script 404 errors
  * e2e: GinkgoParallelNode() -&gt; ...Process()
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
  * build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0
  * [CI:DOCS] --creds and registries
  * Copr: fix build deps for /usr/bin/envsubst
  * Don't error when removing non-existant env vars
  * e2e: healthcheck on stopped container: fix flake
  * test/apiv2/80-kube.at
  * test/apiv2/80-kube.at
  * system service: do not close Body
  * rm `hack/release.sh`
  * build(deps): bump github.com/onsi/gomega from 1.27.5 to 1.27.6
  * add `quadlet -version` flag
  * add version/rawversion package
  * quadlet: use `Flag` suffix for variables
  * quadlet: implement `Tmpfs` option
  * Bump to v4.5.0-dev
  * Bump to 4.5.0-rc1
  * Update release notes from 4.4 branch
  * rootless netns: recover from invalid netns
  * System tests: unverbosify a flake log
  * Add support for secret exists
  * Fix Win install task failures with large PR bodies
  * docs: add `starting` to `HealthCheckResults.Status`
  * Add support for cgroup_config from containers.conf
  * libpod: mount safely subpaths
  * Support Deployment generation with kube generate
  * Use secret.items to create volume mounts if present
  * [CI:DOCS] fix typo in --systemd option
  * rootless: drop preexec hook error message
  * Edit the docker wrapper to use the install prefix
  * Update podman-for-windows.md
  * Quadlet: RemapUsers documentation fixes
  * speed up image listing
  * vendor containers/common@e27c30ee9b1b
  * fix volume-plugin-test flake
  * Document building Podman remote on Windows hosts
  * test/e2e: gpg keep stdout/err attached
  * auto-update: stop+start instead of restart sytemd units
  * [CI:DOCS] Improve basic tutorial
  * Update docs/source/markdown/podman-network.1.md
  * Add debug to --wait test
  * fix slirp4netns resolv.conf ip with a userns
  * Quadlet: add support for keep-id with mapping values
  * Quadlet E2E test - run quadlet as user generator
  * sqlite: do not `Ping()` after connecting
  * Quadlet - treat paths starting with systemd specifiers as absolute
  * Update docs/source/markdown/podman-kube-play.1.md.in
  * system tests: use CONTAINERS_CONF_OVERRIDE
  * implement podman machine set for hyperv
  * [CI:DOCS] Add network subnets info to network man page
  * CI: retry the golangci install
  * system tests: fix racey sdnotify test
  * hyperv: lookup machine on local filesystem first
  * fix os.IsNotExist() CI check
  * Ensure that SQLite state handles name-ID collisions
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * build(deps): bump github.com/onsi/gomega from 1.27.4 to 1.27.5
  * Fix a race around SQLite DB config validation
  * add CONTAINERS_CONF_OVERRIDE
  * vendor containers/common@main
  * docs: minor grammar fix in `--volume` description
  * sqlite: do not use shared cache
  * test: podman checkpoint/restore the latest container
  * stats compat API: return "id" lowercase
  * Run make codespell
  * Drop SQLite max connections
  * sqlite: set connection attributes on open
  * Fix database locked errors with SQLite
  * quadlet tests: skip on RHEL8 rootless
  * Kube Play Doc: Document the support for K8S Secret
  * New ulimit test: bump up minimum nfiles
  * logformatter: hide --db-backend, and friendlyize quadlet
  * Quadlet - add support for relative path in Volume key in .container file
  * Add service ctr cleanup to PlayKubeDown
  * fix --health-on-failure=restart in transient unit
  * Quadlet Doc: Suggest the kill operation for HealthOnFailure
  * Quadlet - Add support for health checks configuration in .container files
  * Makefile: allow specifying /lib dir location
  * Fix option --opts -&gt; --opt
  * basic hypverv machine implementation
  * Fix SQLite DB schema migration code
  * Add support for oom_score_adj value from containers.conf
  * Use default_ulimits field in containers.conf
  * CI: test and confirm DESIRED_DATABASE
  * build(deps): bump github.com/openshift/imagebuilder
  * logformatter: futureproof output filename
  * Vendor in latest containers/(storage, common, image)
  * build(deps): bump google.golang.org/protobuf from 1.29.0 to 1.30.0
  * test/system/255-auto-update.bats: add debug logs
  * Revert "Revert "pasta: Use two connections instead of three in TCP range forward tests""
  * Add information for secret inspect
  * Add format to podman volume ls
  * Add format to podman volume inspect
  * Add format to podman secret ls
  * Add format to podman system df
  * Add format to podman machine info
  * Add format table to podman image inspect man page
  * Cirrus: Store podman machine benchmark data
  * Update Cirrus display names, and fix get-ci-vm script
  * Ensure SQLite places uses the runroot in transient mode
  * Fix various integration test issues with SQLite state
  * Remove test for pod/container name global uniqueness
  * Improve handling of existing container names in SQLite
  * Add SQLite job to CI
  * buildah treadmill: also run rootless tests
  * build(deps): bump github.com/vbatts/git-validation in /test/tools
  * auto update: return restart error
  * fix: Document removing anonymous volumes
  * events: no duplicates when streaming during a log rotation
  * Add search --cert-dir, --creds
  * podman-mac-helper: exit 1 on error
  * system service --log-level=trace: support hijack
  * test/system: fix wait_for_port() to wait for bind
  * cgroupns: private cgroupns on cgroupv1 breaks --systemd
  * libpod: remove error stutter
  * podman events: unhide --stream
  * test/system/255-auto-update.bats: multiple services
  * 255-auto-update.bats: turn off rollback where needed
  * Use append() to add elements to a slice
  * Revert "pasta: Use two connections instead of three in TCP range forward tests"
  * Support running nested SELinux container separation
  * bud tests: rootless remote: use correct socket path
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.2.1 to 8.3.0
  * compat: /auth: parse server address correctly
  * docs: fix cmd `set DOCKER_HOST` suggestion
  * test: reenable idmap test
  * Must use mountlabel when creating builtin volumes
  * podman.spec.rpkg: distro conditionals for modulesloaddir
  * build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.29.0
  * podman inspect list network when using --net=host or none
  * pasta: Re-enable "Local forwarder, IPv4" test, accept NXDOMAIN as response
  * build(deps): bump golang.org/x/tools from 0.6.0 to 0.7.0 in /test/tools
  * CI: Switch to c20230307t192532z-f37f36d12 images
  * Cirrus: Run system &amp; integration tests in parallel
  * Update checkpointctl v0.1.0
  * Quadlet: add support for setting --ip and --ip6
  * build(deps): bump golang.org/x/net from 0.7.0 to 0.8.0
  * build(deps): bump golang.org/x/sys from 0.5.0 to 0.6.0
  * libpod: avoid nil pointer dereference in (*Container).Cleanup
  * [CI:DOCS] Add image not found info to troubleshooting
  * cmd: do not require userns for "version"
  * cmd: drop special handling for "scp"
  * cmd: clarify meaning of ParentNSRequired
  * Fix package restore
  * [CI:DOCS] Fix docs/version-check always requesting updates
  * sqlite: add a hidden --db-backend flag
  * fix: update the default machine value when the previously set default machine is deleted
  * podman machine: Adjust Chrony makestep config
  * sqlite: add container short ID to network aliases
  * sqlite: remove dead code
  * sqlite: addContainer: add named volume only once
  * sqlite: implement RewriteVolumeConfig
  * sqlite: LookupVolume: fix partial name match
  * sqlite: LookupVolume: wrap error
  * sqlite: fix type rewriting container config
  * sqlite: return correct error on pod-name conflict
  * sqlite: RewritePodConfig: update error message
  * test/system/255-auto-update.bats: wait 10 for update to finish
  * auto-update test: wait for service to be ready
  * Vendor in latest containers/(common, storage, image)
  * play kube: Add --wait option
  * Cirrus: Fix git config permission denied
  * Quadlet: Add support for the Mount key in .container files
  * build(deps): bump github.com/onsi/gomega from 1.27.1 to 1.27.2
  * fix "podman logs --since --follow" flake
  * Clarify that replicas are ignored in kubernetes deployment
  * Revert "Skip all pasta tests"
  * CI: Switch to c20230223t153813z-f37f36d12 images
  * Fix user socket path
  * pkginstaller: bump Qemu to version 7.2.0
  * Cirrus: Fix bud tests failing to apply patches
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2
  * build(deps): bump github.com/coreos/stream-metadata-go
  * Vendor in latest containers/storage
  * buildah-bud tests: don't sudo when rootless is desired
  * Temporarily disable version-check
  * CI: new rootless buildah-bud tests (cron only)
  * sqlite: fix volume lookups with partial names
  * sqlite: fix container lookups with partial IDs
  * sqlite: fix LookupPod
  * sqlite: fix pod create/rm
  * sqlite: LookupContainer: update error message
  * sqlite: AddContainerExitCode: allow to replace
  * system: add warning when running rootless on cgroupv1
  * sqlite: fix AllContainers with state
  * sqlite: fix "UPDATE TABLE" typos
  * sqlite: SaveVolume: fix syntax error updating the volumes table
  * sqlite: exit code: allow -1
  * sqlite: fix typo when removing exec sessions
  * sqlite: AllContainers: fix inner join
  * sqlite: move migration after table creation
  * sqlite: implement pod methods
  * Quadlet - use the default runtime
  * docs: context is not optional for build
  * Fix an incorrect comment on NewSqliteState
  * Add support for containers.conf database setting
  * Add support for volume operations to SQLite state
  * Implement exec session handling in SQL database
  * Various fixes from code review
  * Remove `--namespace` flag from Podman root
  * Get E2E tests to pass
  * Implement network disconnect for SQLite state
  * Implement Network Connect/Modify for SQLite state
  * Fix various lint issues
  * Some further work on SQLite state
  * Remove concept of Namespaces from BoltDB
  * Add initial SQLite-backed state implementation
  * Cirrus: Support runc testing on debian VMs
  * Skip all pasta tests
  * Skip buildah-bud test
  * Skip buildx test with VFS podman storage driver
  * Skip 'podman kube --network' test for rootless CGv1
  * Skip tests which fail with CGv1 &amp; runc
  * Skip rootless CGv1 quadlet tests due to issue
  * Makefile: Define SHELL
  * Machine refactor for QEMU/AppleHV
  * machine refactoring preparations for hyperv
  * [CI:BUILD] spec.rpkg: trim dependency list
  * Logs follow-until tests: loosen checks
  * [CI:DOCS] Windows/Mac docs link update
  * Doc update for docker network options via CLI
  * compat API: network create return 409 for duplicate
  * Apply suggestions to man page
  * vendor c/common@852ca05a1fbb
  * Quadlet: Add support for LogDriver key in container and kube units
  * machine refactoring preparations for hyperv
  * libpod: always use direct mapping
  * netavark: only use aardvark ip as nameserver
  * build(deps): bump github.com/container-orchestrated-devices/container-device-interface
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * make docs: sanity check for broken man pages
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.6 to 8.2.0
  * build(deps): bump github.com/onsi/gomega from 1.27.0 to 1.27.1
  * kube: rm secret on down, print secret on play
  * Fix spacing typo that triggered OCD &amp; indent units in podman-systemd.unit(5)
  * Update remote_client.md
  * [CI:DOCS] Add restriction to option README
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * build(deps): bump github.com/onsi/gomega from 1.26.0 to 1.27.0
  * kube play: only enforce passthrough in Quadlet
  * journald: remove initializeJournal()
  * auto-update: support pods
  * Emergency fix for man pages: check for broken includes
  * System tests: assert(): friendlier failure messages
  * Cirrus: Fix version-check to only run on `main` job
  * CI: Temporarily disable all AWS EC2-based tasks
  * build(deps): bump github.com/containerd/containerd from 1.6.16 to 1.6.18
  * volume,container: chroot to source before exporting content
  * Support sysctl configs via podman kube play
  * [CI:BUILD] copr: podman.spec.rpkg cleanups
  * quadlet system tests: add useful defaults, logging
  * libpod: support relative positions for idmaps
  * Experimental workaround for cdn03.quay.io flake
  * system tests: prevent leading tabs
  * Introduce podman machine os apply
  * create: add support for --group-entry
  * fix != filter in volume prune
  * Allow specification of podman --remote build -f -
  * Quadlet use crun specified in containers.conf
  * build(deps): bump golang.org/x/net from 0.6.0 to 0.7.0
  * Vendor c/image after https://github.com/containers/image/pull/1847
  * Don't set hostPort when generating a service
  * man page --format xref: tighten the autocompletion check
  * add support for limiting tmpfs size for systemd-specific mnts
  * build(deps): bump golang.org/x/text from 0.6.0 to 0.7.0
  * Add ulimit annotation to kube gen &amp; play
  * man page xref: validate displayed man page names
  * quadlet: add ExecStop
  * install sigproxy before start/attach
  * build(deps): bump golang.org/x/tools from 0.5.0 to 0.6.0 in /test/tools
  * Fix typos
  * Cirrus: Make benchmarks .env file easier to load
  * Cirrus: Omit functions in env. file
  * kube play: set service container as main PID when possible
  * Fix typos. Improve language.
  * events + container inspect test: RHEL fixes
  * Add ctrName to network alias during kube play
  * Run codespell on codebase
  * podman image scp: added identity for ssh.Exec
  * [CI:DOCS] Clarify nomap constrains
  * [CI:DOCS] man-page checker: include --format (Go templates)
  * Vendor c/image after https://github.com/containers/image/pull/1816
  * [CI:DOCS] Cleanup some man pages to display options with line breaks
  * [CI:DOCS] Add tables to podman-systemd.unit man page
  * github: remove prefix from bugs/features
  * Quadlet: Add support for the Secret key in Container group
  * [CI:DOCS] OWNERS: add @ygalblum and @alexlarsson
  * build(deps): bump golang.org/x/term from 0.4.0 to 0.5.0
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.1.6
  * Sort quadlet keys to make it easier to read
  * e2e: fix some tests on remote
  * kube play: do not teardown unconditionally on error
  * Fix typos in comments
  * Resolve symlink path for qemu directory if possible
  * #17363 Fix contradicting documentation podman-commit
  * Fix a potential UID/GID collision in unit tests
  * golangci-lint: show all errors at once
  * update golangci-lint to version 1.51.1
  * [CI:DOCS] events: document journald identifiers
  * Quadlet: exit 0 when there are no files to process
  * network ls: handle removed container
  * e2e: adapt play kube test on remote rootless
  * docs/podman-systemd.unit: Explicitely mention network &amp; kube units
  * docs/podman-systemd.unit: Update example to work out of the box
  * [CI:BUILD] Cirrus: Fix GraphQL ownerRepository:null error
  * Add missing return after errors
  * Revert "Cirrus: Emergency fix to un-stuck PRs"
  * pasta: Fix ICMPv6 Echo test, skip it for the moment
  * pasta: Fix ICMP Echo Request (IPv4) test
  * pasta: Use two connections instead of three in TCP range forward tests
  * Add SELinux label types support to quadlet
  * Add quadlet support for rootfs= containers
  * Cirrus: Emergency fix to un-stuck PRs
  * Move clean-binaries before podman-remote in podman-remote-docs target
  * oci: bind mount /sys with --userns=(auto|pod:)
  * Cleanup podman-systemd.unit file
  * Install podman-systemd.unit  man page, make quadlet discoverable
  * libpod: allow userns=keep-id for root
  * system-reset: use CleanCacheMount to clear build cache
  * vendor: bump buildah to v1.29.1-0.20230201192322-e56eb25575c7
  * system tests: fix noexistent labels test in the remote
  * Expose Podman named pipe in Inspect output
  * libpod: support idmap for --rootfs
  * test: adapt test to work on cgroupv1
  * Bump to v4.5.0-dev
  * Update main to reflect v4.4.0 release
  * Update from /github.com/vbauerster/mpb/v7 to /v8
  * hack/perf: cleanup after benchmarks
  * hack/perf/bz-2162111.sh: use custom network
  * Update bug_report.yaml
  * Handle filetype field in kubernetes.yaml files
  * hack/perf/bz-2162111.sh: measure stop
  * make hack/markdown-preprocess parallel-safe
  * system tests: fix volume exec/noexec test
  * system tests: minor fix for RHEL8 incompatibility
  * Cirrus: Use versionable IMAGE_SUFFIX
  * utils: new conversion method
  * libpod: use GraphRoot for overlay upper dir
  * vendor: update containers/storage
  * Do not mount /dev/tty into rootless containers
  * build(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7
  * e2e: fix run_staticip_test about no_proxy
  * docs: specify order preference for FROM
  * Fixes port collision issue on use of --publish-all
  * Support for Windows paths in the source position of the volume mounts
  * e2e tests: fix incorrect os.User.Name
  * Log data that we failed to unmarshal
  * [CI:DOCS] hack/perf: add script for BZ 216111
  * container rm: save once for exec removal and state change
  * [DOCS:CI] podman-events: document verbose create events
  * e2e: Avoid hard-coding included in quadlet test
  * e2e: Avoid hard-coding ImageCacheDir
  * Making gvproxy.exe optional for building Windows installer
  * Add gvproxy to Windows packages
  * Add comment to clarify error handling intention
  * fix #17244: use /etc/timezone where `timedatectl` is missing on Linux
  * Fix usage of absolute windows paths with --image-path
  * Match VT device paths to be blocked from mounting exactly
  * Fix default handling of pids-limit
  * Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml)
  * journald: podman logs only show logs for current user
  * journald: podman events only show events for current user
  * e2e: Remove the cache with "podman unshare rm" when a rootless user
  * Clean up more language for inclusiveness
  * e2e: Remove some directories at SynchronizedAfterSuite
  * fix: don't output "ago" when container is currently up and running
  * fix: running check error when podman is default in wsl
  * fix CI: test fail due to merge
  * Bump Bulidah to v1.29.0
  * e2e: reduce dependency on /tmp for e2e tests
  * Bump cirrus image with easier dependency management
  * quadlet: Add device support for .volume files
  * remote,build: error if containerignore is symlink
  * DB: make loading container states optional
  * ps: do not sync container
  * Set runAsNonRoot=true in gen kube
  * WSL refactoring
  * kube-play: add support for HostIPC in pod.Spec
  * Allow --device-cgroup-rule to be passed in by docker API</changelog>
  <changelog author="danish.prakash@suse.com" date="1685361600">- Update to version 4.5.1:
  * Release v4.5.1
  * [CI:DOCS] Final release notes for v4.5.1
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * Revert "Resolve symlink path for qemu directory if possible"
  * no need for podman-next rpm test on maint branch
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * network create/update: allow dns servers comma separated
  * machine: fix default connection URL to use 127.0.0.1
  * compat: accept tag in /images/create?fromSrc
  * compat container create: match duplicate mounts correctly
  * machine: qemu only remove connection after confirmation
  * windows: podman save allow the use of stdout
  * remote: exec inspect update exec session status
  * podman-remote logs: handle server error correctly
  * libpod: stop containers with --restart=always
  * Do not include image annotations when building spec
  * [v4.5] system tests: fix race in kube-play read-only
  * api: fix parsing filters
  * Support systemd optional prefix '-' for devices.
  * *: migrate image registry to registry.k8s.io
  * Makefile: include `release-artifacts` target
  * [CI:BUILD] Packit: Initial Enablement
  * Bump to v4.5.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
</package>
<package pkgid="d7854ba07cb1432481ce58225bf5dff70fdc0175f42f1b79a0089c13df32e5dc" name="podmansh" arch="x86_64">
  <version epoch="0" ver="4.7.2" rel="150500.3.3.1"/>
  <changelog author="danish.prakash@suse.com" date="1677240000">- Update to version 4.4.2:
  * Bump to v4.4.2
  * Release notes for v4.4.2
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * kube play: only enforce passthrough in Quadlet
  * Emergency fix for man pages: check for broken includes
  * CI: Temporarily disable all AWS EC2-based tasks
  * quadlet system tests: add useful defaults, logging
  * volume,container: chroot to source before exporting content
  * install sigproxy before start/attach
  * Update to c/image 5.24.1
  * events + container inspect test: RHEL fixes
  * Bump to v4.4.2-dev
- Remove patches (merged upstream):
  * volume-container-chroot-to-source-before-exporting-content.patch
- podman.spec: add `crun` requirement for quadlet
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add patch to let quadlet use the default runtime
  Added patch:
  * Quadlet-use-the-default-runtime.patch
  =&gt; Remove dependency on crun</changelog>
  <changelog author="danish.prakash@suse.com" date="1679659200">- Update to version 4.4.3:
  * Bump to v4.4.3
  * Release notes for v4.4.3
  * compat: /auth: parse server address correctly
  * vendor github.com/containers/common@v0.51.1
  * pkginstaller: bump Qemu to version 7.2.0
  * podman machine: Adjust Chrony makestep config
  * [v4.4] fix --health-on-failure=restart in transient unit
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * journald: remove initializeJournal()
  * netavark: only use aardvark ip as nameserver
  * compat API: network create return 409 for duplicate
  * fix "podman logs --since --follow" flake
  * system service --log-level=trace: support hijack
  * podman-mac-helper: exit 1 on error
  * bump golang.org/x/net to v0.8.0
  * Fix package restore
  * Quadlet - use the default runtime
  * Bump to v4.4.3-dev
- Remove patch (merged upstream):
  * Quadlet-use-the-default-runtime.patch
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="danish.prakash@suse.com" date="1680004800">- Update to version 4.4.4:
  * Bump to v4.4.4
  * Release notes for v4.4.4
  * libpod: always use direct mapping
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * Bump to v4.4.4-dev
- spec: Bump required version for libcontainers-common (bsc#1209495)</changelog>
  <changelog author="dcermak@suse.com" date="1681473600">- Don't build against EoL go versions, fixes bsc#1210299</changelog>
  <changelog author="danish.prakash@suse.com" date="1681819200">- Update to version 4.5.0:
  * Release v4.5.0
  * [CI:DOCS] Final release notes for v4.5.0
  * Quadlet - do not set log-driver by default
  * Return title fields as a list
  * Bump to v4.5.0-dev
  * Bump to v4.5.0-RC2
  * Final release notes for v4.5.0-RC2
  * test/e2e: remove unnecessary SkipIfNetavark() calls
  * test/e2e: deduplicated network test
  * docs: update podman-network-create.1
  * network create: add --interface-name
  * test/system/252-quadlet.bats: fix flake
  * Read kube_generate_type from containers.conf
  * Debian setup: workaround for runc /dev/char/10:200 bug
  * pkg/rootless: use catatonit from /usr/libexec/podman
  * rootless: make sure we only use a single pause process
  * Use atomic config writing strategy for podman machine config files
  * Add remaining release notes for v4.5.0-RC2
  * GHA: Use version instead of SHA for actions
  * chore(deps): update dependency containers/automation_images to v20230405
  * build: pass env by reference
  * test: retrofit error message
  * test/system: expect 12 char for short id
  * vendor: bump containers/(storage, common, buildah, image)
  * [skip-ci] Update actions/upload-artifact action to v3
  * [skip-ci] Update actions/stale action to v8
  * [skip-ci] Update actions/setup-go action to v4
  * [skip-ci] Update github/issue-labeler action to v2.6
  * Fix up codespell errors
  * Capitalize all uid,gid and id words that are not options in docs
  * build(deps): bump golang.org/x/tools from 0.7.0 to 0.8.0 in /test/tools
  * Properly remove the service container during kube down
  * quadlet: add `UserNS` option key
  * [CI:DOCS] Release notes for 4.5.0 Part 1
  * "podman pull by digest and list --all" test: untag instead of rmi
  * build(deps): bump golang.org/x/text from 0.8.0 to 0.9.0
  * Add renovate.json configuration
  * CI: postbuild step: skip under nightly treadmill
  * The `--ulimit` option accepts the name with an `RLIMIT_` prefix both upper and lower case
  * test/e2e: use custom network config dir where needed
  * chore: replace `github.com/ghodss/yaml` with `sigs.k8s.io/yaml`
  * update completion scripts for cobra v1.7.0
  * libpod.storageService.CreateContainerStorage(): retrieve ID maps
  * Fix invalid pod name and hostname during kube generate
  * e2e tests: fix racy flakes
  * Cirrus: Enable labeling of EC2 VMs
  * Cirrus: Fix aarch64 clone_script 404 errors
  * e2e: GinkgoParallelNode() -&gt; ...Process()
  * build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
  * build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0
  * [CI:DOCS] --creds and registries
  * Copr: fix build deps for /usr/bin/envsubst
  * Don't error when removing non-existant env vars
  * e2e: healthcheck on stopped container: fix flake
  * test/apiv2/80-kube.at
  * test/apiv2/80-kube.at
  * system service: do not close Body
  * rm `hack/release.sh`
  * build(deps): bump github.com/onsi/gomega from 1.27.5 to 1.27.6
  * add `quadlet -version` flag
  * add version/rawversion package
  * quadlet: use `Flag` suffix for variables
  * quadlet: implement `Tmpfs` option
  * Bump to v4.5.0-dev
  * Bump to 4.5.0-rc1
  * Update release notes from 4.4 branch
  * rootless netns: recover from invalid netns
  * System tests: unverbosify a flake log
  * Add support for secret exists
  * Fix Win install task failures with large PR bodies
  * docs: add `starting` to `HealthCheckResults.Status`
  * Add support for cgroup_config from containers.conf
  * libpod: mount safely subpaths
  * Support Deployment generation with kube generate
  * Use secret.items to create volume mounts if present
  * [CI:DOCS] fix typo in --systemd option
  * rootless: drop preexec hook error message
  * Edit the docker wrapper to use the install prefix
  * Update podman-for-windows.md
  * Quadlet: RemapUsers documentation fixes
  * speed up image listing
  * vendor containers/common@e27c30ee9b1b
  * fix volume-plugin-test flake
  * Document building Podman remote on Windows hosts
  * test/e2e: gpg keep stdout/err attached
  * auto-update: stop+start instead of restart sytemd units
  * [CI:DOCS] Improve basic tutorial
  * Update docs/source/markdown/podman-network.1.md
  * Add debug to --wait test
  * fix slirp4netns resolv.conf ip with a userns
  * Quadlet: add support for keep-id with mapping values
  * Quadlet E2E test - run quadlet as user generator
  * sqlite: do not `Ping()` after connecting
  * Quadlet - treat paths starting with systemd specifiers as absolute
  * Update docs/source/markdown/podman-kube-play.1.md.in
  * system tests: use CONTAINERS_CONF_OVERRIDE
  * implement podman machine set for hyperv
  * [CI:DOCS] Add network subnets info to network man page
  * CI: retry the golangci install
  * system tests: fix racey sdnotify test
  * hyperv: lookup machine on local filesystem first
  * fix os.IsNotExist() CI check
  * Ensure that SQLite state handles name-ID collisions
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * build(deps): bump github.com/onsi/gomega from 1.27.4 to 1.27.5
  * Fix a race around SQLite DB config validation
  * add CONTAINERS_CONF_OVERRIDE
  * vendor containers/common@main
  * docs: minor grammar fix in `--volume` description
  * sqlite: do not use shared cache
  * test: podman checkpoint/restore the latest container
  * stats compat API: return "id" lowercase
  * Run make codespell
  * Drop SQLite max connections
  * sqlite: set connection attributes on open
  * Fix database locked errors with SQLite
  * quadlet tests: skip on RHEL8 rootless
  * Kube Play Doc: Document the support for K8S Secret
  * New ulimit test: bump up minimum nfiles
  * logformatter: hide --db-backend, and friendlyize quadlet
  * Quadlet - add support for relative path in Volume key in .container file
  * Add service ctr cleanup to PlayKubeDown
  * fix --health-on-failure=restart in transient unit
  * Quadlet Doc: Suggest the kill operation for HealthOnFailure
  * Quadlet - Add support for health checks configuration in .container files
  * Makefile: allow specifying /lib dir location
  * Fix option --opts -&gt; --opt
  * basic hypverv machine implementation
  * Fix SQLite DB schema migration code
  * Add support for oom_score_adj value from containers.conf
  * Use default_ulimits field in containers.conf
  * CI: test and confirm DESIRED_DATABASE
  * build(deps): bump github.com/openshift/imagebuilder
  * logformatter: futureproof output filename
  * Vendor in latest containers/(storage, common, image)
  * build(deps): bump google.golang.org/protobuf from 1.29.0 to 1.30.0
  * test/system/255-auto-update.bats: add debug logs
  * Revert "Revert "pasta: Use two connections instead of three in TCP range forward tests""
  * Add information for secret inspect
  * Add format to podman volume ls
  * Add format to podman volume inspect
  * Add format to podman secret ls
  * Add format to podman system df
  * Add format to podman machine info
  * Add format table to podman image inspect man page
  * Cirrus: Store podman machine benchmark data
  * Update Cirrus display names, and fix get-ci-vm script
  * Ensure SQLite places uses the runroot in transient mode
  * Fix various integration test issues with SQLite state
  * Remove test for pod/container name global uniqueness
  * Improve handling of existing container names in SQLite
  * Add SQLite job to CI
  * buildah treadmill: also run rootless tests
  * build(deps): bump github.com/vbatts/git-validation in /test/tools
  * auto update: return restart error
  * fix: Document removing anonymous volumes
  * events: no duplicates when streaming during a log rotation
  * Add search --cert-dir, --creds
  * podman-mac-helper: exit 1 on error
  * system service --log-level=trace: support hijack
  * test/system: fix wait_for_port() to wait for bind
  * cgroupns: private cgroupns on cgroupv1 breaks --systemd
  * libpod: remove error stutter
  * podman events: unhide --stream
  * test/system/255-auto-update.bats: multiple services
  * 255-auto-update.bats: turn off rollback where needed
  * Use append() to add elements to a slice
  * Revert "pasta: Use two connections instead of three in TCP range forward tests"
  * Support running nested SELinux container separation
  * bud tests: rootless remote: use correct socket path
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.2.1 to 8.3.0
  * compat: /auth: parse server address correctly
  * docs: fix cmd `set DOCKER_HOST` suggestion
  * test: reenable idmap test
  * Must use mountlabel when creating builtin volumes
  * podman.spec.rpkg: distro conditionals for modulesloaddir
  * build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.29.0
  * podman inspect list network when using --net=host or none
  * pasta: Re-enable "Local forwarder, IPv4" test, accept NXDOMAIN as response
  * build(deps): bump golang.org/x/tools from 0.6.0 to 0.7.0 in /test/tools
  * CI: Switch to c20230307t192532z-f37f36d12 images
  * Cirrus: Run system &amp; integration tests in parallel
  * Update checkpointctl v0.1.0
  * Quadlet: add support for setting --ip and --ip6
  * build(deps): bump golang.org/x/net from 0.7.0 to 0.8.0
  * build(deps): bump golang.org/x/sys from 0.5.0 to 0.6.0
  * libpod: avoid nil pointer dereference in (*Container).Cleanup
  * [CI:DOCS] Add image not found info to troubleshooting
  * cmd: do not require userns for "version"
  * cmd: drop special handling for "scp"
  * cmd: clarify meaning of ParentNSRequired
  * Fix package restore
  * [CI:DOCS] Fix docs/version-check always requesting updates
  * sqlite: add a hidden --db-backend flag
  * fix: update the default machine value when the previously set default machine is deleted
  * podman machine: Adjust Chrony makestep config
  * sqlite: add container short ID to network aliases
  * sqlite: remove dead code
  * sqlite: addContainer: add named volume only once
  * sqlite: implement RewriteVolumeConfig
  * sqlite: LookupVolume: fix partial name match
  * sqlite: LookupVolume: wrap error
  * sqlite: fix type rewriting container config
  * sqlite: return correct error on pod-name conflict
  * sqlite: RewritePodConfig: update error message
  * test/system/255-auto-update.bats: wait 10 for update to finish
  * auto-update test: wait for service to be ready
  * Vendor in latest containers/(common, storage, image)
  * play kube: Add --wait option
  * Cirrus: Fix git config permission denied
  * Quadlet: Add support for the Mount key in .container files
  * build(deps): bump github.com/onsi/gomega from 1.27.1 to 1.27.2
  * fix "podman logs --since --follow" flake
  * Clarify that replicas are ignored in kubernetes deployment
  * Revert "Skip all pasta tests"
  * CI: Switch to c20230223t153813z-f37f36d12 images
  * Fix user socket path
  * pkginstaller: bump Qemu to version 7.2.0
  * Cirrus: Fix bud tests failing to apply patches
  * build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2
  * build(deps): bump github.com/coreos/stream-metadata-go
  * Vendor in latest containers/storage
  * buildah-bud tests: don't sudo when rootless is desired
  * Temporarily disable version-check
  * CI: new rootless buildah-bud tests (cron only)
  * sqlite: fix volume lookups with partial names
  * sqlite: fix container lookups with partial IDs
  * sqlite: fix LookupPod
  * sqlite: fix pod create/rm
  * sqlite: LookupContainer: update error message
  * sqlite: AddContainerExitCode: allow to replace
  * system: add warning when running rootless on cgroupv1
  * sqlite: fix AllContainers with state
  * sqlite: fix "UPDATE TABLE" typos
  * sqlite: SaveVolume: fix syntax error updating the volumes table
  * sqlite: exit code: allow -1
  * sqlite: fix typo when removing exec sessions
  * sqlite: AllContainers: fix inner join
  * sqlite: move migration after table creation
  * sqlite: implement pod methods
  * Quadlet - use the default runtime
  * docs: context is not optional for build
  * Fix an incorrect comment on NewSqliteState
  * Add support for containers.conf database setting
  * Add support for volume operations to SQLite state
  * Implement exec session handling in SQL database
  * Various fixes from code review
  * Remove `--namespace` flag from Podman root
  * Get E2E tests to pass
  * Implement network disconnect for SQLite state
  * Implement Network Connect/Modify for SQLite state
  * Fix various lint issues
  * Some further work on SQLite state
  * Remove concept of Namespaces from BoltDB
  * Add initial SQLite-backed state implementation
  * Cirrus: Support runc testing on debian VMs
  * Skip all pasta tests
  * Skip buildah-bud test
  * Skip buildx test with VFS podman storage driver
  * Skip 'podman kube --network' test for rootless CGv1
  * Skip tests which fail with CGv1 &amp; runc
  * Skip rootless CGv1 quadlet tests due to issue
  * Makefile: Define SHELL
  * Machine refactor for QEMU/AppleHV
  * machine refactoring preparations for hyperv
  * [CI:BUILD] spec.rpkg: trim dependency list
  * Logs follow-until tests: loosen checks
  * [CI:DOCS] Windows/Mac docs link update
  * Doc update for docker network options via CLI
  * compat API: network create return 409 for duplicate
  * Apply suggestions to man page
  * vendor c/common@852ca05a1fbb
  * Quadlet: Add support for LogDriver key in container and kube units
  * machine refactoring preparations for hyperv
  * libpod: always use direct mapping
  * netavark: only use aardvark ip as nameserver
  * build(deps): bump github.com/container-orchestrated-devices/container-device-interface
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * make docs: sanity check for broken man pages
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.6 to 8.2.0
  * build(deps): bump github.com/onsi/gomega from 1.27.0 to 1.27.1
  * kube: rm secret on down, print secret on play
  * Fix spacing typo that triggered OCD &amp; indent units in podman-systemd.unit(5)
  * Update remote_client.md
  * [CI:DOCS] Add restriction to option README
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * build(deps): bump github.com/onsi/gomega from 1.26.0 to 1.27.0
  * kube play: only enforce passthrough in Quadlet
  * journald: remove initializeJournal()
  * auto-update: support pods
  * Emergency fix for man pages: check for broken includes
  * System tests: assert(): friendlier failure messages
  * Cirrus: Fix version-check to only run on `main` job
  * CI: Temporarily disable all AWS EC2-based tasks
  * build(deps): bump github.com/containerd/containerd from 1.6.16 to 1.6.18
  * volume,container: chroot to source before exporting content
  * Support sysctl configs via podman kube play
  * [CI:BUILD] copr: podman.spec.rpkg cleanups
  * quadlet system tests: add useful defaults, logging
  * libpod: support relative positions for idmaps
  * Experimental workaround for cdn03.quay.io flake
  * system tests: prevent leading tabs
  * Introduce podman machine os apply
  * create: add support for --group-entry
  * fix != filter in volume prune
  * Allow specification of podman --remote build -f -
  * Quadlet use crun specified in containers.conf
  * build(deps): bump golang.org/x/net from 0.6.0 to 0.7.0
  * Vendor c/image after https://github.com/containers/image/pull/1847
  * Don't set hostPort when generating a service
  * man page --format xref: tighten the autocompletion check
  * add support for limiting tmpfs size for systemd-specific mnts
  * build(deps): bump golang.org/x/text from 0.6.0 to 0.7.0
  * Add ulimit annotation to kube gen &amp; play
  * man page xref: validate displayed man page names
  * quadlet: add ExecStop
  * install sigproxy before start/attach
  * build(deps): bump golang.org/x/tools from 0.5.0 to 0.6.0 in /test/tools
  * Fix typos
  * Cirrus: Make benchmarks .env file easier to load
  * Cirrus: Omit functions in env. file
  * kube play: set service container as main PID when possible
  * Fix typos. Improve language.
  * events + container inspect test: RHEL fixes
  * Add ctrName to network alias during kube play
  * Run codespell on codebase
  * podman image scp: added identity for ssh.Exec
  * [CI:DOCS] Clarify nomap constrains
  * [CI:DOCS] man-page checker: include --format (Go templates)
  * Vendor c/image after https://github.com/containers/image/pull/1816
  * [CI:DOCS] Cleanup some man pages to display options with line breaks
  * [CI:DOCS] Add tables to podman-systemd.unit man page
  * github: remove prefix from bugs/features
  * Quadlet: Add support for the Secret key in Container group
  * [CI:DOCS] OWNERS: add @ygalblum and @alexlarsson
  * build(deps): bump golang.org/x/term from 0.4.0 to 0.5.0
  * build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.1.6
  * Sort quadlet keys to make it easier to read
  * e2e: fix some tests on remote
  * kube play: do not teardown unconditionally on error
  * Fix typos in comments
  * Resolve symlink path for qemu directory if possible
  * #17363 Fix contradicting documentation podman-commit
  * Fix a potential UID/GID collision in unit tests
  * golangci-lint: show all errors at once
  * update golangci-lint to version 1.51.1
  * [CI:DOCS] events: document journald identifiers
  * Quadlet: exit 0 when there are no files to process
  * network ls: handle removed container
  * e2e: adapt play kube test on remote rootless
  * docs/podman-systemd.unit: Explicitely mention network &amp; kube units
  * docs/podman-systemd.unit: Update example to work out of the box
  * [CI:BUILD] Cirrus: Fix GraphQL ownerRepository:null error
  * Add missing return after errors
  * Revert "Cirrus: Emergency fix to un-stuck PRs"
  * pasta: Fix ICMPv6 Echo test, skip it for the moment
  * pasta: Fix ICMP Echo Request (IPv4) test
  * pasta: Use two connections instead of three in TCP range forward tests
  * Add SELinux label types support to quadlet
  * Add quadlet support for rootfs= containers
  * Cirrus: Emergency fix to un-stuck PRs
  * Move clean-binaries before podman-remote in podman-remote-docs target
  * oci: bind mount /sys with --userns=(auto|pod:)
  * Cleanup podman-systemd.unit file
  * Install podman-systemd.unit  man page, make quadlet discoverable
  * libpod: allow userns=keep-id for root
  * system-reset: use CleanCacheMount to clear build cache
  * vendor: bump buildah to v1.29.1-0.20230201192322-e56eb25575c7
  * system tests: fix noexistent labels test in the remote
  * Expose Podman named pipe in Inspect output
  * libpod: support idmap for --rootfs
  * test: adapt test to work on cgroupv1
  * Bump to v4.5.0-dev
  * Update main to reflect v4.4.0 release
  * Update from /github.com/vbauerster/mpb/v7 to /v8
  * hack/perf: cleanup after benchmarks
  * hack/perf/bz-2162111.sh: use custom network
  * Update bug_report.yaml
  * Handle filetype field in kubernetes.yaml files
  * hack/perf/bz-2162111.sh: measure stop
  * make hack/markdown-preprocess parallel-safe
  * system tests: fix volume exec/noexec test
  * system tests: minor fix for RHEL8 incompatibility
  * Cirrus: Use versionable IMAGE_SUFFIX
  * utils: new conversion method
  * libpod: use GraphRoot for overlay upper dir
  * vendor: update containers/storage
  * Do not mount /dev/tty into rootless containers
  * build(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7
  * e2e: fix run_staticip_test about no_proxy
  * docs: specify order preference for FROM
  * Fixes port collision issue on use of --publish-all
  * Support for Windows paths in the source position of the volume mounts
  * e2e tests: fix incorrect os.User.Name
  * Log data that we failed to unmarshal
  * [CI:DOCS] hack/perf: add script for BZ 216111
  * container rm: save once for exec removal and state change
  * [DOCS:CI] podman-events: document verbose create events
  * e2e: Avoid hard-coding included in quadlet test
  * e2e: Avoid hard-coding ImageCacheDir
  * Making gvproxy.exe optional for building Windows installer
  * Add gvproxy to Windows packages
  * Add comment to clarify error handling intention
  * fix #17244: use /etc/timezone where `timedatectl` is missing on Linux
  * Fix usage of absolute windows paths with --image-path
  * Match VT device paths to be blocked from mounting exactly
  * Fix default handling of pids-limit
  * Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml)
  * journald: podman logs only show logs for current user
  * journald: podman events only show events for current user
  * e2e: Remove the cache with "podman unshare rm" when a rootless user
  * Clean up more language for inclusiveness
  * e2e: Remove some directories at SynchronizedAfterSuite
  * fix: don't output "ago" when container is currently up and running
  * fix: running check error when podman is default in wsl
  * fix CI: test fail due to merge
  * Bump Bulidah to v1.29.0
  * e2e: reduce dependency on /tmp for e2e tests
  * Bump cirrus image with easier dependency management
  * quadlet: Add device support for .volume files
  * remote,build: error if containerignore is symlink
  * DB: make loading container states optional
  * ps: do not sync container
  * Set runAsNonRoot=true in gen kube
  * WSL refactoring
  * kube-play: add support for HostIPC in pod.Spec
  * Allow --device-cgroup-rule to be passed in by docker API</changelog>
  <changelog author="danish.prakash@suse.com" date="1685361600">- Update to version 4.5.1:
  * Release v4.5.1
  * [CI:DOCS] Final release notes for v4.5.1
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * Revert "Resolve symlink path for qemu directory if possible"
  * no need for podman-next rpm test on maint branch
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * network create/update: allow dns servers comma separated
  * machine: fix default connection URL to use 127.0.0.1
  * compat: accept tag in /images/create?fromSrc
  * compat container create: match duplicate mounts correctly
  * machine: qemu only remove connection after confirmation
  * windows: podman save allow the use of stdout
  * remote: exec inspect update exec session status
  * podman-remote logs: handle server error correctly
  * libpod: stop containers with --restart=always
  * Do not include image annotations when building spec
  * [v4.5] system tests: fix race in kube-play read-only
  * api: fix parsing filters
  * Support systemd optional prefix '-' for devices.
  * *: migrate image registry to registry.k8s.io
  * Makefile: include `release-artifacts` target
  * [CI:BUILD] Packit: Initial Enablement
  * Bump to v4.5.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
</package>
<package pkgid="ec5c93eb620aa0ed35e77f84af592fefeb7dcc1a0f163e2be72beec502b2e8fc" name="podmansh" arch="aarch64">
  <version epoch="0" ver="4.8.3" rel="150500.3.6.1"/>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
</package>
<package pkgid="068f7d5088d54126300e6571b4fb2e7a1bca681bb21511e2f223ffc064a644ca" name="podmansh" arch="ppc64le">
  <version epoch="0" ver="4.8.3" rel="150500.3.6.1"/>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
</package>
<package pkgid="753c4e2254b2b71d95a7486fad8e31e6cee57aaa26d09491c00f06c240266bb3" name="podmansh" arch="s390x">
  <version epoch="0" ver="4.8.3" rel="150500.3.6.1"/>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
</package>
<package pkgid="d7f9fcb4ba21f379c4a48b6ca1eb14ebfecf807864517f9875d1ff757442b2dc" name="podmansh" arch="x86_64">
  <version epoch="0" ver="4.8.3" rel="150500.3.6.1"/>
  <changelog author="danish.prakash@suse.com" date="1687867200">- Prefer Podman's new network stack (netavark) exclusively on ALP
- Remove unused podman-cni-config subpackage, add systemd</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
</package>
<package pkgid="4c2510bc17185fdfcd917ab29cc006183be00913f0b2e1177db0745989a40eb7" name="podmansh" arch="aarch64">
  <version epoch="0" ver="4.8.3" rel="150500.3.9.1"/>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1710849600">- Add patch for CVE-2024-1753 (bsc#1221677):
  0001-CVE-2024-1753-container-escape-fix.patch</changelog>
</package>
<package pkgid="1cbb80ed0bd1f1906134a79ee7ef54de782fb6902a3514c2eaf5d78a08f1b41c" name="podmansh" arch="ppc64le">
  <version epoch="0" ver="4.8.3" rel="150500.3.9.1"/>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1710849600">- Add patch for CVE-2024-1753 (bsc#1221677):
  0001-CVE-2024-1753-container-escape-fix.patch</changelog>
</package>
<package pkgid="c9df4d2ff4b4471e4a297cb355189ad5838de9e1d8f4097cac0ff9812433e34d" name="podmansh" arch="s390x">
  <version epoch="0" ver="4.8.3" rel="150500.3.9.1"/>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1710849600">- Add patch for CVE-2024-1753 (bsc#1221677):
  0001-CVE-2024-1753-container-escape-fix.patch</changelog>
</package>
<package pkgid="892e2e9b37836949a9685bda5f8e7d3daf143e615d6d10f4ab4fad453731a613" name="podmansh" arch="x86_64">
  <version epoch="0" ver="4.8.3" rel="150500.3.9.1"/>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Don't unconditionally Obsolete podman-cni-config, ensure clean upgrade path.</changelog>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1710849600">- Add patch for CVE-2024-1753 (bsc#1221677):
  0001-CVE-2024-1753-container-escape-fix.patch</changelog>
</package>
<package pkgid="0d88992b8d1e9dc5cbc5dd1fc0a50f32a5d175cfea5cdcbb9d2af3cebc4198ab" name="podmansh" arch="aarch64">
  <version epoch="0" ver="4.9.5" rel="150500.3.12.1"/>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1710849600">- Add patch for CVE-2024-1753 (bsc#1221677):
  0001-CVE-2024-1753-container-escape-fix.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1717761600">- Remove upstreamed patches:
  - 0001-CVE-2024-1753-container-escape-fix.patch
- Update to version 4.9.5:
  * Bump to v4.9.5
  * Update release notes for v4.9.5
  * fix "concurrent map writes" in network ls compat endpoint
  * [v4.9] Fix for CVE-2024-3727 (bsc#1224122)
  * Disable failing bud test
  * CI Maintenance: Disable machine tests
  * [CI:DOCS] Allow downgrade of WiX
  * [CI:DOCS] Force WiX 3.11
  * [CI:DOCS] Fix windows installer action
  * Bump to v4.9.5-dev
  * Bump to v4.9.4
  * Update release notes for v4.9.4
  * [v4.9] Bump Buildah to v1.33.7, CVE-2024-1753, CVE-2024-24786 (bsc#1226136)
  * Add farm command to commands list
  * Bump to FreeBSD 13.3 (13.2 vanished)
  * Update health-start-periods docs
  * Don't update health check status during initialDelaySeconds
  * image scp: don't require port for ssh URL
  * Ignore docker's end point config when the final network mode isn't bridge.
  * Fix running container from docker client with rootful in rootless podman.
  * [skip-ci] Packit: remove koji and bodhi tasks for v4.9
  * Bump to v4.9.4-dev
  * Bump to v4.9.3
  * Release notes for v4.9.3
  * Remove gitleaks scanning
  * [v4.9] [skip-ci] packit: update fedora downstream branches
  * @@option volume.image: be specific that -v only affects RUN
  * Accept a config blob alongside the "changes" slice when committing
  * container create: use ParseUserNamespace to parse a user namespace setting
  * Bump to v4.9.3-dev
  * Bump to v4.9.2
  * Release notes for v4.9.2
  * Cirrus: Update operating branch
  * [v4.9] Bump to c/common v0.57.4, buildkit v0.12.5, c/buidah v1.33.5
  * Fix updated runc dep breaking pod devices cgroup
  * systests: kube with policies test: fix race
  * Remove go.mod pin of runc and update to latest
  * systests: kube with policies test: fix race
  * Bump to v4.9.2-dev
  * Bump to v4.9.1
  * Release notes for v4.9.1
  * [v4.9] Bump Buildah to v1.33.4, c/common v0.57.3, c/image v5.29.2
  * pkginstaller: bump Qemu version to 8.2.1
  * Assign separate ports for each appleHV machine
  * Fix machine inspect test config
  * AppleHV: update LastUp time
  * applehv: return socket path from setupAPIForwarding
  * applehv: Remove unneeded cmd.ExtraFiles assignment
  * abi: drop check for IsRootless()
  * system: enhance check for re-exec into rootless userns
  * system: enhance check for re-exec into rootless userns
  * Fix `podman machine set --rootful` for applehv
  * applehv - fix vm lookup
  * rpm: use go-rpm-macros on RHEL 10
  * Bump to v4.9.1-dev
  * Bump to v4.9.0
  * Fix a small grammar error in RELEASE_NOTES.md
  * Fix push endpoint stream
  * Finalized release notes for v4.9.0
  * farm build: push built images to registry
  * Move the --farm flag to farm build command
  * Clean up farm-build miscommit
  * [CI:DOCS] Add podman farm build doc
  * Add release notes for v4.9.0
  * gvproxy: Update to 0.7.2 release
  * [v4.9] Bump Buildah to v1.33.3, c/common to v0.57.2, c/image to v5.29.1
  * Add a net health recovery service to Qemu machines
  * Set up podman machine remote user correctly
  * Remove Libpod special-init conditions
  * Fix `podman system reset` with external containers
  * [v4.8] podman kube play: fix broken annotation parsing
  * feat: disable pid max in the podman machine
  * systests: cp: add wait_for_ready
  * System tests: fixes for RHEL8 gating failures
  * Add API forwarding support for HyperV
  * bump to v4.8.4-dev</changelog>
</package>
<package pkgid="74de3dfb0508a6e87f3da9b7a521ffb9a5b59ca35435ed8bd3b2015643286131" name="podmansh" arch="ppc64le">
  <version epoch="0" ver="4.9.5" rel="150500.3.12.1"/>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1710849600">- Add patch for CVE-2024-1753 (bsc#1221677):
  0001-CVE-2024-1753-container-escape-fix.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1717761600">- Remove upstreamed patches:
  - 0001-CVE-2024-1753-container-escape-fix.patch
- Update to version 4.9.5:
  * Bump to v4.9.5
  * Update release notes for v4.9.5
  * fix "concurrent map writes" in network ls compat endpoint
  * [v4.9] Fix for CVE-2024-3727 (bsc#1224122)
  * Disable failing bud test
  * CI Maintenance: Disable machine tests
  * [CI:DOCS] Allow downgrade of WiX
  * [CI:DOCS] Force WiX 3.11
  * [CI:DOCS] Fix windows installer action
  * Bump to v4.9.5-dev
  * Bump to v4.9.4
  * Update release notes for v4.9.4
  * [v4.9] Bump Buildah to v1.33.7, CVE-2024-1753, CVE-2024-24786 (bsc#1226136)
  * Add farm command to commands list
  * Bump to FreeBSD 13.3 (13.2 vanished)
  * Update health-start-periods docs
  * Don't update health check status during initialDelaySeconds
  * image scp: don't require port for ssh URL
  * Ignore docker's end point config when the final network mode isn't bridge.
  * Fix running container from docker client with rootful in rootless podman.
  * [skip-ci] Packit: remove koji and bodhi tasks for v4.9
  * Bump to v4.9.4-dev
  * Bump to v4.9.3
  * Release notes for v4.9.3
  * Remove gitleaks scanning
  * [v4.9] [skip-ci] packit: update fedora downstream branches
  * @@option volume.image: be specific that -v only affects RUN
  * Accept a config blob alongside the "changes" slice when committing
  * container create: use ParseUserNamespace to parse a user namespace setting
  * Bump to v4.9.3-dev
  * Bump to v4.9.2
  * Release notes for v4.9.2
  * Cirrus: Update operating branch
  * [v4.9] Bump to c/common v0.57.4, buildkit v0.12.5, c/buidah v1.33.5
  * Fix updated runc dep breaking pod devices cgroup
  * systests: kube with policies test: fix race
  * Remove go.mod pin of runc and update to latest
  * systests: kube with policies test: fix race
  * Bump to v4.9.2-dev
  * Bump to v4.9.1
  * Release notes for v4.9.1
  * [v4.9] Bump Buildah to v1.33.4, c/common v0.57.3, c/image v5.29.2
  * pkginstaller: bump Qemu version to 8.2.1
  * Assign separate ports for each appleHV machine
  * Fix machine inspect test config
  * AppleHV: update LastUp time
  * applehv: return socket path from setupAPIForwarding
  * applehv: Remove unneeded cmd.ExtraFiles assignment
  * abi: drop check for IsRootless()
  * system: enhance check for re-exec into rootless userns
  * system: enhance check for re-exec into rootless userns
  * Fix `podman machine set --rootful` for applehv
  * applehv - fix vm lookup
  * rpm: use go-rpm-macros on RHEL 10
  * Bump to v4.9.1-dev
  * Bump to v4.9.0
  * Fix a small grammar error in RELEASE_NOTES.md
  * Fix push endpoint stream
  * Finalized release notes for v4.9.0
  * farm build: push built images to registry
  * Move the --farm flag to farm build command
  * Clean up farm-build miscommit
  * [CI:DOCS] Add podman farm build doc
  * Add release notes for v4.9.0
  * gvproxy: Update to 0.7.2 release
  * [v4.9] Bump Buildah to v1.33.3, c/common to v0.57.2, c/image to v5.29.1
  * Add a net health recovery service to Qemu machines
  * Set up podman machine remote user correctly
  * Remove Libpod special-init conditions
  * Fix `podman system reset` with external containers
  * [v4.8] podman kube play: fix broken annotation parsing
  * feat: disable pid max in the podman machine
  * systests: cp: add wait_for_ready
  * System tests: fixes for RHEL8 gating failures
  * Add API forwarding support for HyperV
  * bump to v4.8.4-dev</changelog>
</package>
<package pkgid="4e4b5e6f18c8bd5b4472089b573a97d363dec307b23c64c7644f7f2b3135ef14" name="podmansh" arch="s390x">
  <version epoch="0" ver="4.9.5" rel="150500.3.12.1"/>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1710849600">- Add patch for CVE-2024-1753 (bsc#1221677):
  0001-CVE-2024-1753-container-escape-fix.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1717761600">- Remove upstreamed patches:
  - 0001-CVE-2024-1753-container-escape-fix.patch
- Update to version 4.9.5:
  * Bump to v4.9.5
  * Update release notes for v4.9.5
  * fix "concurrent map writes" in network ls compat endpoint
  * [v4.9] Fix for CVE-2024-3727 (bsc#1224122)
  * Disable failing bud test
  * CI Maintenance: Disable machine tests
  * [CI:DOCS] Allow downgrade of WiX
  * [CI:DOCS] Force WiX 3.11
  * [CI:DOCS] Fix windows installer action
  * Bump to v4.9.5-dev
  * Bump to v4.9.4
  * Update release notes for v4.9.4
  * [v4.9] Bump Buildah to v1.33.7, CVE-2024-1753, CVE-2024-24786 (bsc#1226136)
  * Add farm command to commands list
  * Bump to FreeBSD 13.3 (13.2 vanished)
  * Update health-start-periods docs
  * Don't update health check status during initialDelaySeconds
  * image scp: don't require port for ssh URL
  * Ignore docker's end point config when the final network mode isn't bridge.
  * Fix running container from docker client with rootful in rootless podman.
  * [skip-ci] Packit: remove koji and bodhi tasks for v4.9
  * Bump to v4.9.4-dev
  * Bump to v4.9.3
  * Release notes for v4.9.3
  * Remove gitleaks scanning
  * [v4.9] [skip-ci] packit: update fedora downstream branches
  * @@option volume.image: be specific that -v only affects RUN
  * Accept a config blob alongside the "changes" slice when committing
  * container create: use ParseUserNamespace to parse a user namespace setting
  * Bump to v4.9.3-dev
  * Bump to v4.9.2
  * Release notes for v4.9.2
  * Cirrus: Update operating branch
  * [v4.9] Bump to c/common v0.57.4, buildkit v0.12.5, c/buidah v1.33.5
  * Fix updated runc dep breaking pod devices cgroup
  * systests: kube with policies test: fix race
  * Remove go.mod pin of runc and update to latest
  * systests: kube with policies test: fix race
  * Bump to v4.9.2-dev
  * Bump to v4.9.1
  * Release notes for v4.9.1
  * [v4.9] Bump Buildah to v1.33.4, c/common v0.57.3, c/image v5.29.2
  * pkginstaller: bump Qemu version to 8.2.1
  * Assign separate ports for each appleHV machine
  * Fix machine inspect test config
  * AppleHV: update LastUp time
  * applehv: return socket path from setupAPIForwarding
  * applehv: Remove unneeded cmd.ExtraFiles assignment
  * abi: drop check for IsRootless()
  * system: enhance check for re-exec into rootless userns
  * system: enhance check for re-exec into rootless userns
  * Fix `podman machine set --rootful` for applehv
  * applehv - fix vm lookup
  * rpm: use go-rpm-macros on RHEL 10
  * Bump to v4.9.1-dev
  * Bump to v4.9.0
  * Fix a small grammar error in RELEASE_NOTES.md
  * Fix push endpoint stream
  * Finalized release notes for v4.9.0
  * farm build: push built images to registry
  * Move the --farm flag to farm build command
  * Clean up farm-build miscommit
  * [CI:DOCS] Add podman farm build doc
  * Add release notes for v4.9.0
  * gvproxy: Update to 0.7.2 release
  * [v4.9] Bump Buildah to v1.33.3, c/common to v0.57.2, c/image to v5.29.1
  * Add a net health recovery service to Qemu machines
  * Set up podman machine remote user correctly
  * Remove Libpod special-init conditions
  * Fix `podman system reset` with external containers
  * [v4.8] podman kube play: fix broken annotation parsing
  * feat: disable pid max in the podman machine
  * systests: cp: add wait_for_ready
  * System tests: fixes for RHEL8 gating failures
  * Add API forwarding support for HyperV
  * bump to v4.8.4-dev</changelog>
</package>
<package pkgid="8afddd67edd0e2be46239be7fcadea9baf10e47cc7cb6125cd789f508679ef34" name="podmansh" arch="x86_64">
  <version epoch="0" ver="4.9.5" rel="150500.3.12.1"/>
  <changelog author="danish.prakash@suse.com" date="1689940800">- Update to version 4.6.0:
  * Bump to v4.6.0
  * Update release notes for v4.6.0
  * Ensure that we appropriately warn that TCP is insecure
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * api: fix doc for default ps_args
  * Add more tests for liveness probes with default hostname &amp; named ports
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * [CI:DOCS] fix command incorrect in windows
  * [CI:DOCS] Reformat and reorder table with --userns options
  * [CI:DOCS] Better document the default value of --userns
  * Add missing return after utils.InternalServerError()
  * Fix markdown in docs for podman-network-create
  * Fix multiple filter options logic for `podman volume ls `
  * Should be checking tmpfs versus type not source
  * Use constants for mount types
  * Fix `podman container prune` docs for `--filter`
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * systests: quadlet: fixes for RHEL8
  * Fix windows installer
  * Podmansh: Better error, increase timeout to 30s
  * Emergency gating-test fixes for RHEL8
  * Packit: remove pre-sync action
  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc2
  * Makefile: `package` -&gt; `rpm`
  * Update release notes
  * system tests: refactor registry code
  * machine start: qemu: wait for SSH readiness
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * netavark: macvlan networks keep custom nameservers
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * Fix: cgroup is not set: internal libpod error after os reboot
  * test/e2e: wait for socket
  * api: fix slow version endpoint
  * manifest inspect: support authentication
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * make --syslog errors non fatal
  * Fixes typo in the path where quadlet looks for files
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * pkg/specgen: properly identify image OS on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Remove 'inspecting object' from inspect errors
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Trim whitespace from unit files while parsing
  * play.go: remove volumes on down -f
  * Vendor c/common v0.55.2
  * system service: unset listen fds on tcp
  * [CI:DOCS] [Release Notes]: add static routes
  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * libpod: use new libcontainer BlockIO constructors
  * Bump to v4.6.0-dev
  * Bump to v4.6.0-rc1
  * Bump to v4.6.1-dev
  * Bump to v4.6.0
  * Release notes for v4.6.0
  * Update Release Notes for v4.5.1
  * rootless: use default_rootless_network_cmd config
  * tests: fix "Storing signatures" check
  * Fixes for vendoring Buildah
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Do not use deprecated hook functions from c/common
  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
  * pasta: Remove some leftover code from pasta bats tests
  * pasta: Fix pasta tests to work on hosts with multiple interfaces
  * fix(command): ignore `--format` in `podman search --list-tags`
  * Use /proc/self/gid_map as intended, not uid_map
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * pasta: Create /etc/hosts entries for pods using pasta networking
  * RPM: Fix koji and ELN issues
  * Cirrus: Update operating branch
  * system tests: add and use _prefetch
  * pkg/api: BufferedResponseWriter flush correctly
  * pkg/api: top return error to client
  * container wait: support health states
  * [CI:DOCS] Fix example on PublishPort
  * container wait API: use string slice instead of state slice
  * podman wait: update man page
  * StopContainer(): ignore one more conmon warning
  * run,create: modify `--env-merge` behavior for non-existent vars
  * use libnetwork/slirp4netns from c/common
  * update c/common to latest
  * e2e: use parallel-safe /dev subdirectories
  * [CI:BUILD] Help Renovate manage the golangci-lint version
  * systests: test instrumentation
  * compat API create/pull: fix error handling
  * compat API push: fix error handling
  * GetSafeIPAddress(): discourage its use
  * libpod: write /etc/{hosts,resolv.conf} once
  * e2e: fix one of the many log flakes
  * cmd, push: expose --compression-level
  * vendor: bump containers/common
  * compat API container create: handle platform parameter
  * refactor(machine): remove hard code
  * vendor in latests containers/common
  * fix(machine): throw `connect: connection refused` after set proxy
  * [CI:BUILD] Packit: cleanups
  * Add console mode to podman machine
  * e2e: kube test: specify expected exit code
  * e2e --authfile test: fix test condition
  * chore(deps): update dependency setuptools to v68
  * make lint: re-enable revive
  * make lint: re-enable ginkgolinter
  * make lint: enable rowserrcheck
  * make lint: enable wastedassign
  * make lint: enable mirror
  * bump golangci-lint to v1.53.3
  * auto update: restart instead of stop+start
  * cmd/podman/root.go: fix help document issue of the image store
  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
  * podman: add support for splitting imagestore
  * network create --ip-range allow for custom range
  * fix(ssh): start machine failed to start with exit status 255
  * remote wait: fix "removed" condition
  * [CI:DOCS] Fix service_destinations description in podman man page
  * quadlet should exit non zero on failures
  * fix(deps): update module golang.org/x/tools to v0.10.0
  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress
  * pasta: use code from c/common
  * Add support for setting autoupdate in quadlet
  * New command: podmansh
  * vendor: update c/common to latest
  * Add quadlet container support for Mask,Umask options
  * libpod: make conmon always log to syslog
  * Document how to get secret mounts working on RHEL8
  * Verify podman pull dup image only prints id once
  * Vendor in latests containers/common
  * Apply suggestions from code review
  * Revert "rootlessport: exclude storage drivers via build tags"
  * filters: use new FilterID function from c/common
  * logformatter: ignore 'TOP-LEVEL' headings
  * test/e2e: fix network ID test
  * update c/{common,image,storage} to latest
  * [CI:DOCS] clarify supported transports in manifest push
  * [CI:DOCS] podman-push: rm confusion on supported transports
  * container wait: indicate timeout in error
  * network-create: document new bclim option
  * fix(deps): update module golang.org/x/text to v0.10.0
  * libpod: Podman info output more network information
  * fix(deps): update module golang.org/x/term to v0.9.0
  * quadlet: adjust container unit documentation
  * e2e: GetRandomIPAddress(): parallelize
  * Makefile: add support for 'make help' on FreeBSD
  * criu: return error when checking for min version
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * 250-systemd.bats: remove outdated comment
  * github: add issue type as link to podman-desktop
  * Add WorkingDir support to quadlet
  * rootlessport: exclude storage drivers via build tags
  * Add ability to set static routes
  * test/upgrade: correctly share mounts between host and container
  * Update common, image, and storage deps
  * Fix system service manpage name in API Documentation
  * style(specgen): omit nil check
  * fix(specgen): index out of range when unmask=[]
  * Makefile to force a shell when running command
  * cirrus,ci: default to overlay for debian env
  * Quadlet: Add support for --sysctl flag
  * chore(deps): update dependency requests-mock to ~=1.11.0
  * Ignore spurious warnings when killing containers
  * Makefile: don't hard-code the path for bash
  * fix(deps): update module github.com/burntsushi/toml to v1.3.2
  * GHA: Fix bad job-names &amp; links in monitoring emails
  * podman-registry: simpler, safer invocations
  * Ensure our mutexes handle recursive locking properly
  * Fix an expected error message from pod removal
  * Fix a race removing multiple containers in the same pod
  * Discard errors when a pod is already removed
  * Change Inherit to use a pointer to a container
  * e2e: add ginkgo decorators to address flakes
  * filters: better handling of id=
  * fix(deps): update module github.com/onsi/gomega to v1.27.8
  * refactor: improve get ssh path duplicate code
  * logformatter: better recognition of ginkgo test names
  * Address review feedback and add manpage notes
  * Add support for SecurityLabelNested flag in quadlet
  * fix(deps): update module github.com/burntsushi/toml to v1.3.1
  * `system locks` now reports held locks
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
  * Add a new hidden command, podman system locks
  * Add number of free locks to `podman info`
  * Include lock number in pod/container/volume inspect
  * fix ignition config creation
  * Makefile binaries target adopted for Mac and Win
  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
  * logformatter: proper status color for failed tests
  * pasta: Test handling of unknown protocols
  * pasta: Correct handling of unknown protocols
  * Quadlet - add support for Pull key in .container
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3
  * Add default ulimit test for gen kube
  * feat: add insecure registry troubleshooting solution
  * fix(deps): update module golang.org/x/tools to v0.9.3
  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
  * e2e: GetPort(): safer allocation of random ports
  * The removeContainer function now accepts a struct
  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""
  * Add a test for removing dependencies with rm -fa
  * Revert "ginkgo-v2 cleanup workaround for #18180"
  * Fix a deadlock when removing pods
  * Pods now return what containers were removed with them
  * Make RemoveContainer return containers and pods removed
  * Add an API for removing a container and dependencies
  * systests: fixes for coping with extra systemd image
  * libpod: fix timezone handling
  * fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
  * fix(deps): update module golang.org/x/tools to v0.9.2
  * test/system: quadlet use correct systemd restart policy
  * systests: minimize race-condition window
  * systests: fix improper backgrounding of run_podman
  * set max ulimits for rootless on each start
  * Fix: display online_cpus in compat REST API
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
  * systests: fix race in quadlet tests
  * fix(deps): update module github.com/burntsushi/toml to v1.3.0
  * e2e: make BuildImage parallel-safe
  * completion: fix panic in simplePathJoinUnix()
  * Update module github.com/stretchr/testify to v1.8.4
  * authfile.md: add default path of file for Windows/macOS.
  * Update module github.com/rootless-containers/rootlesskit to v1.1.1
  * hack: fix typo in hack/podman-registry
  * man pages and command help: clean up descriptions
  * RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
  * Man pages: fix broken tables
  * test/e2e: add regression testing for comma-containing labels
  * fix: volume create filters
  * fix: move filter flags from StringSliceVar to StringArrayVar
  * pkg/rootless: correctly handle proxy signals on reexec
  * [CI:BUILD] Packit: set propose-downstream action type to pre-sync
  * [CI:DOCS] fix Quadlet man page rendering
  * Quadlet: kube: use ExecStopPost
  * Quadlet: kube: add ExitCodePropagation field
  * kube play: exit-code propagation
  * prune exit codes only when container doesn't exist
  * podman: Add pasta to podman info
  * Revert "test/system/255-auto-update.bats: add debug logs"
  * Quadlet - add support for PodmanArgs to all groups
  * [CI:BUILD] Packit: add jobs for downstream Fedora package builds
  * In a concurrent removal test, don't remove concurrently with builds
  * Consolidate error handling in Runtime.removeContainer
  * Consolidate error handling in Container.cleanupStorage
  * Fix reporting errors on container unmount
  * TEMPORARY(?) instrumentation for unlinkat-ebusy
  * pkginstaller: bump Qemu to version 8.0.0
  * Support podman --remote when Containerfile is not in context directory
  * chore(deps): update dependency requests to ~=2.31.0
  * fix: podman event --filter volume=vol-name should compare the event name with volume name
  * fix(deps): update module github.com/docker/docker to v24
  * wait: look for exit code in stopped state
  * network create/update: allow dns servers comma separated
  * source code comments and docs: fix typos, language, Markdown layout
  * Increase download progress to 80ch
  * chore(deps): update dependency setuptools to ~=67.8.0
  * podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
  * fix(deps): update module github.com/sirupsen/logrus to v1.9.2
  * stats: get mem limit from the cgroup
  * quadlet tests: enable device.volume test
  * quadlet tests: remove unused socketactivated.container
  * fix(deps): update module github.com/stretchr/testify to v1.8.3
  * Correct markdown in docs
  * fix(deps): update module github.com/onsi/gomega to v1.27.7
  * [CI:DOCS] Improve security in mysql examples
  * Cirrus: Record the buildah version for reference
  * test/e2e: do not call setenforce
  * Fix discombobulated kubernetes support table
  * run: ignore PODMAN_USERNS with --pod
  * Add --configmap to podman-remote kube play
  * compat: accept tag in /images/create?fromSrc
  * fix HTMLSpan warnings
  * generate systemd: error on init containers
  * Remove future tense from man pages
  * compat,build: pull must accept string
  * Cirrus: Add support for `[CI:NEXT]`
  * Cirrus: Remove support for `[CI:COPR]` magic
  * system tests: add precision timestamps
  * Makefile: add ginkgo FOCUS/FOCUS_FILE options
  * e2e: refactor and document serialization
  * machine: fix default connection URL to use 127.0.0.1
  * e2e: serialize gpg tests
  * Document podman-machine-default behavior
  * e2e: fix more test races (missing "wait")
  * fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
  * Fix documentation of `--network-cmd-path` CLI option
  * Skip rhel-release branch unnecessary CI tasks
  * test/e2e: dedup Before/AfterEach nodes
  * remote-save: fix permissions and dir formats
  * Set machine docker.sock according to rootful flag
  * Fix handling of .containenv on tmpfs
  * Do not include image annotations when building spec
  * build(deps): bump github.com/docker/distribution
  * Kube Play - Support multi-doc YAML files for configmap argument
  * system tests: instrument, to try to catch unlinkat-ebusy
  * test: check restart policy of init containers
  * Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
  * issue template: mention `su`
  * e2e: logs test: fix flakes
  * fix(deps): update module github.com/containernetworking/plugins to v1.3.0
  * e2e: stop podman.service test: wait for server
  * logformatter: handle podman-machine test logs
  * fix(deps): update module golang.org/x/tools to v0.9.1
  * [CI:DOCS] Disable Dependabot in favor of Renovate
  * Ensure the consistent setting of the HOME env variable on container start
  * Quadlet system tests - fix socket notification
  * sqlite: disable WAL mode
  * system tests: timeoutize quadlet, systemd
  * test: update README for integration tests
  * libpod/Container.rootFsSize(): use recorded image sizes
  * quadlet: support `HostName`
  * e2e: fix race in a play-kube test
  * Fix preference of user quadlets directories
  * fix(deps): update module golang.org/x/tools to v0.9.0
  * fix(deps): update module golang.org/x/net to v0.10.0
  * Check on client side for Containerfile, if none specified
  * build(deps): bump github.com/docker/docker
  * Buildah treadmill: several fixes
  * fix(deps): update github.com/containers/common digest to 3e93a76
  * chore(deps): update dependency docker to ~=6.1.0
  * Update docs/source/markdown/podman-systemd.unit.5.md
  * fix(deps): update github.com/containers/common digest to bc15b04
  * fix: initContainer restart policy overridden by pod
  * fix(deps): update module golang.org/x/sync to v0.2.0
  * chore(deps): update dependency requests to ~=2.30.0
  * ginkgo json output: only in CI, not on laptop runs
  * Allow user quadlets to be stored under /etc
  * fix(deps): update github.com/containers/common digest to ea87b34
  * libpod: do not Cleanup() more than once
  * compat container create: match duplicate mounts correctly
  * Update podman-completion.1.md
  * fix(deps): update github.com/containers/buildah digest to e925b58
  * Run generate.CompleteSpec() for initContainers as well
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
  * remote: return better connect error
  * Add missing man page links for Docker man pages
  * Replace egrep/fgrep with grep -E/-F
  * remote: exec inspect update exec session status
  * fix(deps): update github.com/digitalocean/go-qemu digest to f035778
  * fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
  * fix(deps): update github.com/containers/buildah digest to f353690
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
  * MVP for Podman Machine with AppleHV
  * e2e tests: try writing &amp; preserving ginkgo json artifacts
  * vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
  * bindings, build: don't pass invalid platform in case of none
  * Revert "logformatter: anchors: link to test summary, not name"
  * More cleanup: volumes: do not export to stdout
  * e2e test cleanup
  * Update kube gen &amp; play to use pod restart policy
  * Add {{.Restarts}} to podman pod ps
  * Add {{.Restarts}} to podman ps
  * Add --restart flag to pod create
  * history: correctly set tags
  * fix(deps): update module github.com/moby/term to v0.5.0
  * Makefile: do not run machine test in parallel
  * pkg/machine/e2e: switch to GinkgoWriter
  * api: fix parsing filters
  * ginkgo-v2 cleanup workaround for #18180
  * test/e2e: fix custom timing reporting
  * logformatter: anchors: link to test summary, not name
  * WIP: logformatter: handle ginkgo v2 logs
  * test/e2e: unshare --rootless-netns cleanup slirp4netns
  * test/e2e: run system reset test serial
  * test/e2e: fix CleanupVolume/Secrets()
  * ginkgo v2: fix new Skip() behavior
  * test/e2e: fix pause tests to unpause before cleanup()
  * ginkgo v2: drop localbenchmarks
  * test/e2e: switch to GinkgoWriter
  * test/e2e: unset CONTAINERS_CONF before Cleanup()
  * ginkgo: run on all cores
  * test/e2e: fix Cleanup()
  * test/e2e: fix "podman run ipcns ipcmk container test"
  * test/e2e: actually check for cleanup errors
  * Lower e2e timeout to not waste time when it hangs
  * test/e2e: containers.conf tests add missing Wait()
  * ginkgo v2: remove CurrentGinkgoTestDescription()
  * ginkgo v2: remove deprecated flags
  * update to ginkgo v2
  * test/e2e: do not remove CNI directory
  * e2e: login_logout: use unique authfile for each test
  * Fix clashing subuid
  * [CI:DOCS] troubleshooting: fix subuid example
  * manifest, push: use source as destination if not specified
  * Update github.com/moby/term digest to 0564e01
  * Add name-generation test
  * Implement machine provider selection
  * libpod: improve errors management in cleanupStorage
  * libpod: report unmount idmapped rootfs errors
  * test: do not wait 10 seconds before killing myyaml
  * podman: simplify code with a switch
  * test: fix typo
  * build(deps): bump github.com/docker/docker
  * swagger: fix Info name conflict
  * Nightly dependency treadmill: remove
  * Update short description for disconnect cmd
  * windows: podman save allow the use of stdout
  * Update c/common and avoid setting umask
  * Cirrus: Update CI VM Image to F38/37
  * Cirrus: Run code validation on rawhide
  * Fix rand.Seed() deprecation in golang 1.20
  * Add sha256: to images history id for docker compatibility
  * Support systemd optional prefix '-' for devices.
  * Fix a copy/paste error in an error message
  * chore(deps): update dependency requests to ~=2.29.0
  * Fix simple typo in podman-network-create.md
  * e2e cleanup: push with auth: add error checks
  * e2e: remove "-it" from podman run &amp; exec
  * pkg/machine: rework RemoveConnection()
  * machine: qemu only remove connection after confirmation
  * Add file swith for pre-exec
  * system reset: show graphRoot/runRoot before removal
  * fix manifest annotate help
  * Netavark userns test: give aardvark time to come up
  * sqlite: move first read into a transaction
  * Recover from failed podman machine start
  * rootless: support joining contianers that use host ns
  * auto-update: return errors when checking for updates
  * [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
  * fix(deps): update github.com/containers/common digest to 46c4463
  * Add user mode networking feature to Windows
  * system/reset.go: help: fix typo
  * e2e create same-IP: try to fix flake
  * system tests: safer container-stop signaling
  * Revert "Resolve symlink path for qemu directory if possible"
  * ps: --format {{.State}} match docker output
  * test/system/260-sdnotify.bats: fix test flake
  * [CI:DOCS] Quadlet: clarify overriding user/system services
  * Eliminate transient container deps from wslkerninst
  * Wording
  * fix(deps): update github.com/containers/common digest to 5547996
  * cmd/podman/pods: omit superfluous runtime.NumCPU call
  * support `--digestfile` for remote push
  * e2e: skip journald test if journald is unavailable
  * Cirrus: Enable testing on Fedora rawhide
  * [CI:BUILD] Cirrus: remove copr rpm build task
  * chore(deps): update dependency setuptools to ~=67.7.0
  * Cirrus: Drop benchmarks artifacts
  * test/e2e: correctly reap service process
  * test/e2e: add missing options to remote service
  * test/e2e: fix incorrect usage of CreateTempDirInTempDir()
  * test/e2e: "podman-remote send correct path to copier" do not leak file
  * test/e2e: fix network create flake due same subnet
  * test/e2e: fix SkipIfNotActive()
  * test/e2e: do not try to use docker as rootless
  * test/e2e: do not leak "hello" file
  * podman-remote logs: handle server error correctly
  * test/e2e: use custom network config v2
  * rename ImagePushReport to ImagePushStream
  * Specify format to buildah before commit
  * Add eBPF snooper that traces the entire fork/exec graph of podman
  * libpod: stop containers with --restart=always
  * test: fix race when listing cgroups
  * compat: Translate `noprune` into ImageRemoveOptions.NoPrune
  * [CI:DOCS] Update RELEASE_PROCESS.md
  * hyperv: add podman socket mapping
  * e2e networking test: better way to get host IP
  * Updated system test to be easier to read
  * bindings tests: bail out early on image errors
  * libpod: fix TestPostDeleteHooks do not depend on version
  * chore(deps): update dependency setuptools to v67
  * fix(deps): update module github.com/containers/libhvee to v0.0.5
  * e2e: quadlet uses PODMAN env for podman binary path
  * Fixes format inconsistencies with docker for certain history fields
  * Makefile: do not prefix /etc
  * libpod: configureNetNS() tear down on errors
  * libpod: rootlessNetNs.Cleanup() fix error message
  * HyperV: wait on stop
  * build(deps): bump github.com/docker/docker
  * Makefile: include `release-artifacts` target
  * Enabled network over vsock
  * fix(deps): update module github.com/microsoft/go-winio to v0.6.1
  * fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
  * fix remote start --filter
  * Update API reference to include v4.5
  * Add missing security options to /info response
  * Add mention of redir to doc `rootless.md`
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
  * docs(readme): add status badges and remove hardcoded release info
  * Don't use bytes.NewBuffer to read data
  * Add support for HVSOCK on hyperv
  * docs: update network tutorial with netavark DHCP support
  * bump main to v4.6.0-dev
  * Remove disused test/install
  * Return title fields as a list
  * [CI:BUILD] Packit: Initial Enablement
  * Quadlet - do not set log-driver by default
  * system tests: address COPY-hardlink flake
  * chore(deps): update registry.centos.org/centos/centos docker tag to v8
  * system tests: fix race in kube-play read-only
  * chore(deps): update dependency docker to v6
  * CI: enable sqlite system tests
  * test: enable test_wait_next_exit
  * Update dependency PyYAML to v6
  * test/e2e/systemd_activate_test.go: simplify test
  * Update docker.io/library/golang Docker tag to v1.20
  * api: auth: fix nil deref
  * Update dependency requests-mock to ~=1.10.0
  * Update dependency requests to ~=2.28.2
  * fix: Document removing anonymous volumes at create
  * Use a sane polling interval in WaitContainerDocker
  * podman: added the --out option for capturing formatted output emitted by various commands
  * Renovate: Ensure release-note-none label is added
  * Renovate: Update ignore paths
  * *: migrate image registry to registry.k8s.io
  * Do not display the resource limits warning message</changelog>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1710849600">- Add patch for CVE-2024-1753 (bsc#1221677):
  0001-CVE-2024-1753-container-escape-fix.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1717761600">- Remove upstreamed patches:
  - 0001-CVE-2024-1753-container-escape-fix.patch
- Update to version 4.9.5:
  * Bump to v4.9.5
  * Update release notes for v4.9.5
  * fix "concurrent map writes" in network ls compat endpoint
  * [v4.9] Fix for CVE-2024-3727 (bsc#1224122)
  * Disable failing bud test
  * CI Maintenance: Disable machine tests
  * [CI:DOCS] Allow downgrade of WiX
  * [CI:DOCS] Force WiX 3.11
  * [CI:DOCS] Fix windows installer action
  * Bump to v4.9.5-dev
  * Bump to v4.9.4
  * Update release notes for v4.9.4
  * [v4.9] Bump Buildah to v1.33.7, CVE-2024-1753, CVE-2024-24786 (bsc#1226136)
  * Add farm command to commands list
  * Bump to FreeBSD 13.3 (13.2 vanished)
  * Update health-start-periods docs
  * Don't update health check status during initialDelaySeconds
  * image scp: don't require port for ssh URL
  * Ignore docker's end point config when the final network mode isn't bridge.
  * Fix running container from docker client with rootful in rootless podman.
  * [skip-ci] Packit: remove koji and bodhi tasks for v4.9
  * Bump to v4.9.4-dev
  * Bump to v4.9.3
  * Release notes for v4.9.3
  * Remove gitleaks scanning
  * [v4.9] [skip-ci] packit: update fedora downstream branches
  * @@option volume.image: be specific that -v only affects RUN
  * Accept a config blob alongside the "changes" slice when committing
  * container create: use ParseUserNamespace to parse a user namespace setting
  * Bump to v4.9.3-dev
  * Bump to v4.9.2
  * Release notes for v4.9.2
  * Cirrus: Update operating branch
  * [v4.9] Bump to c/common v0.57.4, buildkit v0.12.5, c/buidah v1.33.5
  * Fix updated runc dep breaking pod devices cgroup
  * systests: kube with policies test: fix race
  * Remove go.mod pin of runc and update to latest
  * systests: kube with policies test: fix race
  * Bump to v4.9.2-dev
  * Bump to v4.9.1
  * Release notes for v4.9.1
  * [v4.9] Bump Buildah to v1.33.4, c/common v0.57.3, c/image v5.29.2
  * pkginstaller: bump Qemu version to 8.2.1
  * Assign separate ports for each appleHV machine
  * Fix machine inspect test config
  * AppleHV: update LastUp time
  * applehv: return socket path from setupAPIForwarding
  * applehv: Remove unneeded cmd.ExtraFiles assignment
  * abi: drop check for IsRootless()
  * system: enhance check for re-exec into rootless userns
  * system: enhance check for re-exec into rootless userns
  * Fix `podman machine set --rootful` for applehv
  * applehv - fix vm lookup
  * rpm: use go-rpm-macros on RHEL 10
  * Bump to v4.9.1-dev
  * Bump to v4.9.0
  * Fix a small grammar error in RELEASE_NOTES.md
  * Fix push endpoint stream
  * Finalized release notes for v4.9.0
  * farm build: push built images to registry
  * Move the --farm flag to farm build command
  * Clean up farm-build miscommit
  * [CI:DOCS] Add podman farm build doc
  * Add release notes for v4.9.0
  * gvproxy: Update to 0.7.2 release
  * [v4.9] Bump Buildah to v1.33.3, c/common to v0.57.2, c/image to v5.29.1
  * Add a net health recovery service to Qemu machines
  * Set up podman machine remote user correctly
  * Remove Libpod special-init conditions
  * Fix `podman system reset` with external containers
  * [v4.8] podman kube play: fix broken annotation parsing
  * feat: disable pid max in the podman machine
  * systests: cp: add wait_for_ready
  * System tests: fixes for RHEL8 gating failures
  * Add API forwarding support for HyperV
  * bump to v4.8.4-dev</changelog>
</package>
<package pkgid="77b001579fa94bce9e4dae2d9e47c35c79badde7e937d8b0c9baaf2e13cdc65e" name="podmansh" arch="aarch64">
  <version epoch="0" ver="4.9.5" rel="150500.3.15.1"/>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1710849600">- Add patch for CVE-2024-1753 (bsc#1221677):
  0001-CVE-2024-1753-container-escape-fix.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1717761600">- Remove upstreamed patches:
  - 0001-CVE-2024-1753-container-escape-fix.patch
- Update to version 4.9.5:
  * Bump to v4.9.5
  * Update release notes for v4.9.5
  * fix "concurrent map writes" in network ls compat endpoint
  * [v4.9] Fix for CVE-2024-3727 (bsc#1224122)
  * Disable failing bud test
  * CI Maintenance: Disable machine tests
  * [CI:DOCS] Allow downgrade of WiX
  * [CI:DOCS] Force WiX 3.11
  * [CI:DOCS] Fix windows installer action
  * Bump to v4.9.5-dev
  * Bump to v4.9.4
  * Update release notes for v4.9.4
  * [v4.9] Bump Buildah to v1.33.7, CVE-2024-1753, CVE-2024-24786 (bsc#1226136)
  * Add farm command to commands list
  * Bump to FreeBSD 13.3 (13.2 vanished)
  * Update health-start-periods docs
  * Don't update health check status during initialDelaySeconds
  * image scp: don't require port for ssh URL
  * Ignore docker's end point config when the final network mode isn't bridge.
  * Fix running container from docker client with rootful in rootless podman.
  * [skip-ci] Packit: remove koji and bodhi tasks for v4.9
  * Bump to v4.9.4-dev
  * Bump to v4.9.3
  * Release notes for v4.9.3
  * Remove gitleaks scanning
  * [v4.9] [skip-ci] packit: update fedora downstream branches
  * @@option volume.image: be specific that -v only affects RUN
  * Accept a config blob alongside the "changes" slice when committing
  * container create: use ParseUserNamespace to parse a user namespace setting
  * Bump to v4.9.3-dev
  * Bump to v4.9.2
  * Release notes for v4.9.2
  * Cirrus: Update operating branch
  * [v4.9] Bump to c/common v0.57.4, buildkit v0.12.5, c/buidah v1.33.5
  * Fix updated runc dep breaking pod devices cgroup
  * systests: kube with policies test: fix race
  * Remove go.mod pin of runc and update to latest
  * systests: kube with policies test: fix race
  * Bump to v4.9.2-dev
  * Bump to v4.9.1
  * Release notes for v4.9.1
  * [v4.9] Bump Buildah to v1.33.4, c/common v0.57.3, c/image v5.29.2
  * pkginstaller: bump Qemu version to 8.2.1
  * Assign separate ports for each appleHV machine
  * Fix machine inspect test config
  * AppleHV: update LastUp time
  * applehv: return socket path from setupAPIForwarding
  * applehv: Remove unneeded cmd.ExtraFiles assignment
  * abi: drop check for IsRootless()
  * system: enhance check for re-exec into rootless userns
  * system: enhance check for re-exec into rootless userns
  * Fix `podman machine set --rootful` for applehv
  * applehv - fix vm lookup
  * rpm: use go-rpm-macros on RHEL 10
  * Bump to v4.9.1-dev
  * Bump to v4.9.0
  * Fix a small grammar error in RELEASE_NOTES.md
  * Fix push endpoint stream
  * Finalized release notes for v4.9.0
  * farm build: push built images to registry
  * Move the --farm flag to farm build command
  * Clean up farm-build miscommit
  * [CI:DOCS] Add podman farm build doc
  * Add release notes for v4.9.0
  * gvproxy: Update to 0.7.2 release
  * [v4.9] Bump Buildah to v1.33.3, c/common to v0.57.2, c/image to v5.29.1
  * Add a net health recovery service to Qemu machines
  * Set up podman machine remote user correctly
  * Remove Libpod special-init conditions
  * Fix `podman system reset` with external containers
  * [v4.8] podman kube play: fix broken annotation parsing
  * feat: disable pid max in the podman machine
  * systests: cp: add wait_for_ready
  * System tests: fixes for RHEL8 gating failures
  * Add API forwarding support for HyperV
  * bump to v4.8.4-dev</changelog>
  <changelog author="dcermak@suse.com" date="1719835200">- Add patch to fix bsc#1227052 / CVE-2024-6104:
  * 0001-Backport-fix-for-CVE-2024-6104.patch
- Add missing BuildRequires man</changelog>
</package>
<package pkgid="21a28e958922bfdeaa3cde42dc49332a9d64b91ae85beb57b4b31377e7ba8528" name="podmansh" arch="ppc64le">
  <version epoch="0" ver="4.9.5" rel="150500.3.15.1"/>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1710849600">- Add patch for CVE-2024-1753 (bsc#1221677):
  0001-CVE-2024-1753-container-escape-fix.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1717761600">- Remove upstreamed patches:
  - 0001-CVE-2024-1753-container-escape-fix.patch
- Update to version 4.9.5:
  * Bump to v4.9.5
  * Update release notes for v4.9.5
  * fix "concurrent map writes" in network ls compat endpoint
  * [v4.9] Fix for CVE-2024-3727 (bsc#1224122)
  * Disable failing bud test
  * CI Maintenance: Disable machine tests
  * [CI:DOCS] Allow downgrade of WiX
  * [CI:DOCS] Force WiX 3.11
  * [CI:DOCS] Fix windows installer action
  * Bump to v4.9.5-dev
  * Bump to v4.9.4
  * Update release notes for v4.9.4
  * [v4.9] Bump Buildah to v1.33.7, CVE-2024-1753, CVE-2024-24786 (bsc#1226136)
  * Add farm command to commands list
  * Bump to FreeBSD 13.3 (13.2 vanished)
  * Update health-start-periods docs
  * Don't update health check status during initialDelaySeconds
  * image scp: don't require port for ssh URL
  * Ignore docker's end point config when the final network mode isn't bridge.
  * Fix running container from docker client with rootful in rootless podman.
  * [skip-ci] Packit: remove koji and bodhi tasks for v4.9
  * Bump to v4.9.4-dev
  * Bump to v4.9.3
  * Release notes for v4.9.3
  * Remove gitleaks scanning
  * [v4.9] [skip-ci] packit: update fedora downstream branches
  * @@option volume.image: be specific that -v only affects RUN
  * Accept a config blob alongside the "changes" slice when committing
  * container create: use ParseUserNamespace to parse a user namespace setting
  * Bump to v4.9.3-dev
  * Bump to v4.9.2
  * Release notes for v4.9.2
  * Cirrus: Update operating branch
  * [v4.9] Bump to c/common v0.57.4, buildkit v0.12.5, c/buidah v1.33.5
  * Fix updated runc dep breaking pod devices cgroup
  * systests: kube with policies test: fix race
  * Remove go.mod pin of runc and update to latest
  * systests: kube with policies test: fix race
  * Bump to v4.9.2-dev
  * Bump to v4.9.1
  * Release notes for v4.9.1
  * [v4.9] Bump Buildah to v1.33.4, c/common v0.57.3, c/image v5.29.2
  * pkginstaller: bump Qemu version to 8.2.1
  * Assign separate ports for each appleHV machine
  * Fix machine inspect test config
  * AppleHV: update LastUp time
  * applehv: return socket path from setupAPIForwarding
  * applehv: Remove unneeded cmd.ExtraFiles assignment
  * abi: drop check for IsRootless()
  * system: enhance check for re-exec into rootless userns
  * system: enhance check for re-exec into rootless userns
  * Fix `podman machine set --rootful` for applehv
  * applehv - fix vm lookup
  * rpm: use go-rpm-macros on RHEL 10
  * Bump to v4.9.1-dev
  * Bump to v4.9.0
  * Fix a small grammar error in RELEASE_NOTES.md
  * Fix push endpoint stream
  * Finalized release notes for v4.9.0
  * farm build: push built images to registry
  * Move the --farm flag to farm build command
  * Clean up farm-build miscommit
  * [CI:DOCS] Add podman farm build doc
  * Add release notes for v4.9.0
  * gvproxy: Update to 0.7.2 release
  * [v4.9] Bump Buildah to v1.33.3, c/common to v0.57.2, c/image to v5.29.1
  * Add a net health recovery service to Qemu machines
  * Set up podman machine remote user correctly
  * Remove Libpod special-init conditions
  * Fix `podman system reset` with external containers
  * [v4.8] podman kube play: fix broken annotation parsing
  * feat: disable pid max in the podman machine
  * systests: cp: add wait_for_ready
  * System tests: fixes for RHEL8 gating failures
  * Add API forwarding support for HyperV
  * bump to v4.8.4-dev</changelog>
  <changelog author="dcermak@suse.com" date="1719835200">- Add patch to fix bsc#1227052 / CVE-2024-6104:
  * 0001-Backport-fix-for-CVE-2024-6104.patch
- Add missing BuildRequires man</changelog>
</package>
<package pkgid="0a960ae060b06e7b0c614ea78399119f6ce17aff95b3c7cc6a6e5fd4dab34121" name="podmansh" arch="s390x">
  <version epoch="0" ver="4.9.5" rel="150500.3.15.1"/>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1710849600">- Add patch for CVE-2024-1753 (bsc#1221677):
  0001-CVE-2024-1753-container-escape-fix.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1717761600">- Remove upstreamed patches:
  - 0001-CVE-2024-1753-container-escape-fix.patch
- Update to version 4.9.5:
  * Bump to v4.9.5
  * Update release notes for v4.9.5
  * fix "concurrent map writes" in network ls compat endpoint
  * [v4.9] Fix for CVE-2024-3727 (bsc#1224122)
  * Disable failing bud test
  * CI Maintenance: Disable machine tests
  * [CI:DOCS] Allow downgrade of WiX
  * [CI:DOCS] Force WiX 3.11
  * [CI:DOCS] Fix windows installer action
  * Bump to v4.9.5-dev
  * Bump to v4.9.4
  * Update release notes for v4.9.4
  * [v4.9] Bump Buildah to v1.33.7, CVE-2024-1753, CVE-2024-24786 (bsc#1226136)
  * Add farm command to commands list
  * Bump to FreeBSD 13.3 (13.2 vanished)
  * Update health-start-periods docs
  * Don't update health check status during initialDelaySeconds
  * image scp: don't require port for ssh URL
  * Ignore docker's end point config when the final network mode isn't bridge.
  * Fix running container from docker client with rootful in rootless podman.
  * [skip-ci] Packit: remove koji and bodhi tasks for v4.9
  * Bump to v4.9.4-dev
  * Bump to v4.9.3
  * Release notes for v4.9.3
  * Remove gitleaks scanning
  * [v4.9] [skip-ci] packit: update fedora downstream branches
  * @@option volume.image: be specific that -v only affects RUN
  * Accept a config blob alongside the "changes" slice when committing
  * container create: use ParseUserNamespace to parse a user namespace setting
  * Bump to v4.9.3-dev
  * Bump to v4.9.2
  * Release notes for v4.9.2
  * Cirrus: Update operating branch
  * [v4.9] Bump to c/common v0.57.4, buildkit v0.12.5, c/buidah v1.33.5
  * Fix updated runc dep breaking pod devices cgroup
  * systests: kube with policies test: fix race
  * Remove go.mod pin of runc and update to latest
  * systests: kube with policies test: fix race
  * Bump to v4.9.2-dev
  * Bump to v4.9.1
  * Release notes for v4.9.1
  * [v4.9] Bump Buildah to v1.33.4, c/common v0.57.3, c/image v5.29.2
  * pkginstaller: bump Qemu version to 8.2.1
  * Assign separate ports for each appleHV machine
  * Fix machine inspect test config
  * AppleHV: update LastUp time
  * applehv: return socket path from setupAPIForwarding
  * applehv: Remove unneeded cmd.ExtraFiles assignment
  * abi: drop check for IsRootless()
  * system: enhance check for re-exec into rootless userns
  * system: enhance check for re-exec into rootless userns
  * Fix `podman machine set --rootful` for applehv
  * applehv - fix vm lookup
  * rpm: use go-rpm-macros on RHEL 10
  * Bump to v4.9.1-dev
  * Bump to v4.9.0
  * Fix a small grammar error in RELEASE_NOTES.md
  * Fix push endpoint stream
  * Finalized release notes for v4.9.0
  * farm build: push built images to registry
  * Move the --farm flag to farm build command
  * Clean up farm-build miscommit
  * [CI:DOCS] Add podman farm build doc
  * Add release notes for v4.9.0
  * gvproxy: Update to 0.7.2 release
  * [v4.9] Bump Buildah to v1.33.3, c/common to v0.57.2, c/image to v5.29.1
  * Add a net health recovery service to Qemu machines
  * Set up podman machine remote user correctly
  * Remove Libpod special-init conditions
  * Fix `podman system reset` with external containers
  * [v4.8] podman kube play: fix broken annotation parsing
  * feat: disable pid max in the podman machine
  * systests: cp: add wait_for_ready
  * System tests: fixes for RHEL8 gating failures
  * Add API forwarding support for HyperV
  * bump to v4.8.4-dev</changelog>
  <changelog author="dcermak@suse.com" date="1719835200">- Add patch to fix bsc#1227052 / CVE-2024-6104:
  * 0001-Backport-fix-for-CVE-2024-6104.patch
- Add missing BuildRequires man</changelog>
</package>
<package pkgid="3b704fb0846a04a8588721ee2333592285a2f82ede531deeba53901e5d5896f2" name="podmansh" arch="x86_64">
  <version epoch="0" ver="4.9.5" rel="150500.3.15.1"/>
  <changelog author="danish.prakash@suse.com" date="1691064000">- Discard outdated README.SUSE.SLES
- Recommend gvisor-tap-vsock, required for `podmand machine`</changelog>
  <changelog author="danish.prakash@suse.com" date="1691755200">- Update to version 4.6.1:
  * Bump to v4.6.1
  * Release notes for v4.6.1
  * Vendor buildah v1.31.2
  * [4.6] vendor c/common v0.55.3
  * [v4.6] Remove zstd:chunked reference
  * [v4.6] bump golang.org/x/net to v0.13.0
  * do not redefine gobuild for eln
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora &gt;= 38
  * System tests: add test tags
  * API: kill: return 409 on invalid state
  * Mention TimeoutStartSec in quadlet man page
  * If quadlets have same name, only use first
  * Bump to v4.6.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1692187200">- Fix build error on SLE due to dangling files clause
  on a discarded file, README.SLE.SUSE
- Fix unexpanded RPM macro error</changelog>
  <changelog author="danish.prakash@suse.com" date="1693310400">- Update to version 4.6.2:
  * Bump to v4.6.2
  * Release notes for v4.6.2
  * Packit: Disable unexpected journal message check for cockpit-podman
  * Packit: Restrict cockpit tests to recent Fedoras
  * Packit: run cockpit-podman tests in PRs
  * rpm: spdx compatible license field
  * vendor c/storage@v1.48.1
  * rpm: depend on man-db
  * use container restart policy if user specifies one
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * packit: Build PRs into default packit COPRs
  * Skip tests that fail in gating
  * fix: pull parma parsing for the /build compat ep
  * [CI:DOCS] Update Release Notes
  * Bumpt to v4.6.2-dev</changelog>
  <changelog author="kastl@b1-systems.de" date="1695902400">- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach &amp; build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
  * linux, rootless: clamp oom_score_adj if it is too low
  * machine: increase max number of inotify instances
  * fix(deps): update module golang.org/x/term to v0.12.0
  * Remove redundant nil checks in system connection remove
  * fix(deps): update module golang.org/x/text to v0.13.0
  * fix(deps): update module golang.org/x/sys to v0.12.0
  * fix(deps): update github.com/containers/libhvee digest to 2bf7930
  * docs(readme): fix a broken link
  * [CI:BUILD] Podman FCOS image from main
  * Update golang.org/x/exp digest to d852ddb
  * Add port forwarding and gvproxy machine test
  * libpod: do not parse --hostuser in base 8
  * fix: default typo
  * Add Japanese locale and translation of index
  * remove rh.container.bot@gmail.com
  * Tweaks and cleanups to prepare hyperv for CI
  * system tests: housekeeping: various small fixes
  * CI: e2e: first use of new ExitCleanly() matcher
  * CI: e2e: new ginkgo matcher, ExitCleanly()
  * CI: e2e: fetch the standard system-test image
  * kube play: fix pull policy
  * Fix gidmap command in example
  * vendor containers/common@12405381ff45
  * manifest,push: support add_compression from containers.conf
  * hyperv ignition: use gvforwarder instead of vm
  * Set remote username earlier for hyperv
  * Added an additional troubleshooting problem and solution
  * Remove a dependency on libimage from pkg/bindings
  * Rename parameter in pkg/bindings
  * Remove a dependency on libimage from pkg/api/handlers
  * Don't re-inspect an image
  * Cirrus: Remove multi-arch podman image builds
  * uid/gid mapping flags
  * [DOC] Clarify default behaviour on uidmap
  * Update containers/common to latest
  * update libhvee
  * /_ping handler: return OSType http header
  * e2e: fix race condition (kube play + logs)
  * Update module github.com/vbauerster/mpb/v8 to v8.6.0
  * Kube - support List documents
  * kube down/play --replace: handle absent objects
  * push, manifest-push: --force-compression must be true with
  - -compression-format
  * oci: print stderr only after checking state
  * Updated docs to reflect pod spec sysctls support added in v4.6
  * [CI:BUILD] Packit: Disable unexpected journal message check for
    cockpit-podman
  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
  * Update machine init/set tests
  * Add rootful status to machine inspect
  * Dedup and refactor image acquisition
  * Share podman sock bindings with other WSL distros
  * Fix user-mode validation check
  * system tests: try to fix sdnotify flakes
  * Cirrus: Disable only hello multiarch build
  * Set StopTimeout for service-container started under podman kube
    play
  * Set StopTimeout for compat API if not set by client
  * podman exec should set umask to match container
  * [CI:BUILD] Packit: run cockpit-podman tests in PRs
  * Add infra-name annotations to kube gen/play
  * kube: notifyproxy: close once
  * system service: unset NOTIFY_SOCKET
  * Update module k8s.io/kubernetes to v1.28.1
  * API attach: return vnd.docker.multiplexed-stream header
  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`
  * e2e tests: use registry:2.8.2 (was 2.8)
  * create apiutils package
  * api docs: document stream format
  * Revert "Remove `hello` multi-arch image build"
  * manifest-push: add support for --force-compression
  * push: add support for --force-compression
  * Update module github.com/onsi/ginkgo/v2 to v2.12.0
  * Remove `hello` multi-arch image build
  * hack/perf/system-df.sh: add `df` benchmarks
  * Expand env variables for cmds/entrypoint with format $(ENV)
  * vendor c/storage@6902c2d
  * Ignore the resource limits on cgroups V1 rootless systems
  * Fixups for stopping gvproxy
  * Revert "GHA: Closed issue/PR comment-lock test"
  * GHA: Closed issue/PR comment-lock test
  * GHA: Add workflow to lock closed issues/PRs
  * [CI:DOCS] update auto-update docs
  * chore(deps): update dependency containers/automation_images to
    v20230816
  * fix(deps): update module github.com/google/uuid to v1.3.1
  * libpod: sum per-interface network stats for FreeBSD
  * Set default Umask for `podman kube play`
  * [CI:BUILD] rpm: spdx compatible license field
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.2
  * Implement automatic port reassignment on Windows
  * Add support for ramfs as well as tmpfs in volume mounts
  * Validate current generation of WSL2 with user-mode-networking
  * use container restart policy if user specifies one
  * Stop gvproxy on hyperv machine stop
  * [CI:BUILD] rpm: depend on man-db
  * Update machine list test
  * Update machine start tests
  * Update machine rm tests
  * libpod: improve conmon error handling
  * cirrus setup: install en_US.UTF-8 locale
  * fixup "podman logs with non ASCII log tag" tests
  * libpod: use /var/run instead of /run on FreeBSD
  * cirrus/lib.sh: extend env to passthrough at start for locale
    work
  * libpod: correctly pass env so alternative locales work
  * cgroups_linux: use SessionBusPrivateNoAutoStartup
  * podmansh man page UID=$(id -u lockedu) is not allowed
  * CI: systests: remove pasta ICMP tests
  * podman.1.md: Fix formatting of exit code 127, clarify wording
    of `exit code` example.
  * document available secret drivers
  * pkg/specgen: add support for read-only root on FreeBSD
  * add --module flag
  * Update dependency setuptools to ~=68.1.0
  * Add riscv64 architecture to the cross build target
  * GetFcosArch add `riscv64` arch
  * Update WSL backend to be compat with FCOS defaults
  * enabled hyperv image downloads
  * fix(deps): update module github.com/containers/ocicrypt to
    v1.1.8
  * [CI:DOCS] Fix git build example in build page
  * CI: e2e manifest_test: use image from quay
  * Cirrus: Remove EC2 experimental flag
  * sphinx: skip options include dir
  * Update rootfs.md: Fix formatting and wording of idmap option
  * fix: Docker API compatible bool deserialization
  * Revert "compat,build: pull must accept string"
  * Add missing verb in machinectl example
  * [CI:DOCS] Update Release Notes and Release Process
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.1
  * fix podman top missing output flake
  * New partial-line test is flaking
  * [CI:BUILD] Packit: add back fedora-eln targets
  * Cirrus: Prune defunct job + fix noop alias
  * Bump bundled gvproxy to 0.7.0
  * systests: tests for --env and --env-file
  * Update system connection add &amp; remove
  * Add tests for podman farm
  * Add podman farm update command
  * Add podman farm remove command
  * Add podman farm list command
  * Add podman farm create command
  * Add podman farm subcommand
  * CI: e2e: add delay before podman logs or journalctl
  * Add completion for Farms
  * Vendor c/common changes
  * chore(deps): update dependency golangci/golangci-lint to
    v1.54.0
  * file logger: fix podman logs --tail with partial lines
  * fix(env): parsing --env incorrect in cli
  * Update docker.io/library/golang Docker tag to v1.21
  * podman stop --cidfile missing --ignore
  * Skip podman exec cannot be invoked on Debian
  * Re-enable checkpoint test on Debian SID
  * Require a non-generic reason for non-Fedora skip
  * CI FIXME removal/update.
  * Update dependency containers/automation_images to v20230807
  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
  * [CI:DOCS] fixed couple typos in build docs
  * Stop timer in function waitPidStop
  * packit: Build PRs into default packit COPRs
  * Add support for host-gateway
  * Ensure volumes-from mounts override image volumes
  * Minor: Include shasums in GHA workflow artifacts
  * Minor: Add important comment to windows GHA workflow
  * Minor: Update/fix dry-run input descriptions
  * [CI:DOCS] Quadlet - provide more information about network
    files
  * man-page xref: check for duplicate entries
  * cp: close temporary file on error path
  * Makefile: work around the lack of 'man -l' on FreeBSD
  * Update module golang.org/x/net to v0.14.0
  * libpod: fix a crash in 'kube generate' on FreeBSD
  * remove temporary files when copy [NO NEW TESTS NEEDED]
  * Update module golang.org/x/sys to v0.11.0
  * [ci] Remove the podman socket in remove_packaged_podman_files()
  * [ci] Correct the podman systemd file names
  * Always show RemoteSocket.Exists in json
  * Fail if ssh key exists
  * Fix regression for hyperv
  * [CI:BUILD] Makefile: rpm target generates correct version
  * Fix nits in #19480
  * Add support for passing container stop timeout as -1 (infinite)
  * pkg/specgen: Add device support for FreeBSD
  * [CI:DOCS] man: remove duplicate entry .LastUp
  * CI: e2e: remove useless test
  * Check tty flag to set default terminal in Env
  * Run codespell on code
  * Deprecate podman generate systemd
  * manifest/push: add support for --add-compression
  * [CI:DOCS]Update Release Notes
  * CI: sys: quadlet %T test: do not rely on journal
  * GHA: Support testing build/sign workflows
  * Remove unnecessary backslashes
  * [docs] Use code blocks for commands in podman-completion
  * Make podman run --rmi automatically set --rm
  * machine: QEMU: recover from failed start
  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
  * secret: add support for `--ignore` with rm
  * Move `writeConfig` logic to shared function
  * Move some logic of `setRootful` to a common file
  * move `removeFilesAndConnections` to a common file
  * Move `waitAPIAndPrintInfo` to common file
  * Move `addSSHConnectionsToPodmanSocket` code to shared file
  * Update module golang.org/x/net to v0.13.0
  * chore(deps): update dependency containers/automation_images to
    v20230726
  * Skip pasta local forwarder test on debian SID
  * Skip broken/flaky blkio-weight test
  * Skip tarball re-inport test in rawhide for CI
  * Cleanup CIDFile on podman-remote run --rm command
  * CI: e2e: remove workaround for missing login file
  * vendor: bump c/image and c/common
  * Add support for confined users
  * Cirrus: Temp. disable rawhide validation task
  * Limit git-validation to 'short-subject'
  * Fix up man page and add test on globs
  * Move alternate image acquisition to separate function
  * Move `getDevNullFiles` into a common file
  * Update github.com/digitalocean/go-qemu digest to 2e3d018
  * Convert QEMU functions to methods with documentation
  * Update docs/source/markdown/podman-build.1.md.in
  * do not redefine gobuild for eln
  * Set default userns from containers.conf file
  * Mention TimeoutStartSec in quadlet man page
  * inspect with network=none show SandboxKey netns path
  * [CI:DOCS] GHA: Use stable go for Mac/Win builds
  * Breakup AppleHV machine funcs
  * Codespell fixups
  * Update docs/source/markdown/podman-stats.1.md.in
  * CI: e2e: reenable containerized checkpoint tests
  * docs(env-file): improve document description
  * Don't log EOF error when using podman --remote build with an
    empty context directory.
  * API: kill: return 409 on invalid state
  * feat(env): support multiline in env-file
  * Adds documentation to new functions that were added
  * `startHostNetworking`: get DevNull files
  * `Remove`: remove network and ready sockets from registry
  * `Remove`: remove files and connections
  * `Remove`: collect files to destroy
  * `Init`: read and split ign file
  * `Init`: write ign config
  * `Init`: add network and registry socks to registry
  * `Init`: add SSH conns to podman sock
  * Improve the description of fields in podman-stats man page
  * make /dev &amp; /dev/shm read/only when --read-only
  - -read-only-tmpfs=false
  * Mention no comment lines in Containerfile.in podman-build man
    page
  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
  * Fix HyperV loadMachineFromJSON function name
  * machine: QEMU: lock VM on stop/rm/set
  * libpod: add 'pod top' support on FreeBSD
  * [CI:DOCS] Build and Sign Mac Pkginstaller
  * Make sure users changes --authfile before checking
  * github: add issue type as link to podman github discussions
  * Break QEMU `config.go` code into its own functions
  * machine: QEMU: lock VM on start
  * libpod: fix 'podman kube generate' on FreeBSD
  * Add glob support to podman run/create --mount
  * kube: add DaemonSet support
  * Fix artifacts script after removal of msitools msi build
  * System tests: quadlet: fix race in %T test
  * If quadlets have same name, only use first
  * Add support for mounts listed in containers.conf
  * Update vendor of containers/common
  * System tests: add test tags
  * [CI:DOCS] socket_activation.md: increase socat timeout
  * go-md2man: use vendored-in version, not system
  * CI: use different TMPDIR on prior-fedora
  * system tests: authfile-exists: minor cleanup
  * start(): don't defer event
  * Fix: use --all in podman stats to get all containers stats
  * Verify authfile exists if user specifies it
  * libpod: don't generate errors for createTimer etc.
  * add "healthy" sdnotify policy
  * Remove LICENSE and general doc files that are installed by the
    main package
  * Add missing `
  * Remove legacy msitools based msi installer
  * Remove any quotes around distribution id
  * add a podman-compose command
  * pkg/specgen: Don't crash for device spec with...
  * fix(deps): update module github.com/docker/docker to
    v24.0.5+incompatible
  * Update vendor of containers/(storage,image)
  * Clean up /var/tmp/ when using oci-archives when creating
    containers
  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
  * Reduce qemu machine function sizes
  * [CI:DOCS] migrate socket_activation.md to quadlet
  * [CI:DOCS] Update kube play volume support
  * Fix language, typos and markdown layout
  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet
    debug
  * Add note on debugging quadlet unit files
  * Remove unnecessary use of the word "please".
  * libpod: fix FreeBSD 'podman-remote top' default behaviour
  * fix(deps): update module github.com/onsi/gomega to v1.27.9
  * Add support for ShmSize to quadlet
  * Quadlet system test - force journald log driver for short lived
    containers
  * fix(deps): update module github.com/containers/libhvee to
    v0.4.0
  * quadlet recursively scan for unit files
  * Ensure that we appropriately warn that TCP is insecure
  * systests: quadlet: fixes for RHEL8
  * Quadlet - Allow setting Service WorkingDirectory for Kube units
  * Quadlet system test - do not rely on journalctl in kube file
    tests
  * Fix markdown in docs for podman-network-create
  * Man pages: check for corrupt tables
  * quadlet systest: fix broken tmpdir references
  * Add `since` as valid filter option for `volume` subcommands
  * Podmansh: Better error, increase timeout to 30s
  * Fix multiple filter options logic for `podman volume ls `
  * Add bash-completion for podman inspect
  * Fix windows installer
  * Add missing reserved annotation support to `play`
  * Avoid progress hang with empty files
  * Revert the usage of `home.GetConfigHome()`
  * Fix bug report issue template README link
  * Replace error check for non-existent file
  * Emergency gating-test fixes for RHEL8
  * Add progress bar for decompress image
  * refactor: move progressbar to a function
  * Use pkg/homedir to get the home config directory
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
  * Should be checking tmpfs versus type not source
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
  * Enabled arm64 arch for podman applehv provider
  * [CI:BUILD] Packit: remove pre-sync action
  * Add `--podman-only` flag to `podman generate kube`
  * Update vendor containers/(common, buildah, image, storage)
  * Use constants for mount types
  * libpod: use define.TypeBind when resolving container paths
  * Tests: remove/update obsolete skips
  * Fix trust not using local policy file
  * Fix `podman container prune` docs for `--filter`
  * Add more tests for liveness probes with default hostname &amp;
    named ports
  * docs: podman-build --network add slirp and pasta
  * docs: podman run --network mention comma separted names
  * Podman machine AppleHV pass number 3
  * Makefile: `package` -&gt; `rpm`
  * network create: document --internal better
  * pkg/specgen: fix support for --rootfs on FreeBSD
  * machine start: qemu: wait for SSH readiness
  * [CI:BUILD] Packit: downstream task action fix
  * Fix container errors not being sent via pod removal API
  * Add missing return after utils.InternalServerError()
  * Update cmd/podman/login.go
  * [CI:DOCS] Reformat and reorder table with --userns options
  * Add secret support to podman login
  * netavark: macvlan networks keep custom nameservers
  * remote: fix podman-remote play kube --userns
  * fix(deps): update container-device-interface to v0.6.0
  * go mod: no longer use 1.18
  * fix(deps): update module github.com/containers/libhvee to
    v0.3.0
  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1
    [security]
  * Run codespell on code
  * system service: unset listen fds on tcp
  * add hostname to network alias
  * libpod: set cid network alias in setupContainer()
  * AppleHV enablement pass #2
  * e2e: Fetch the correct user name
  * Add `--no-trunc` flag to maintain original annotation length
  * Fix TCP probes when the optional host field is not given
  * Add support for using port names in Kubernetes health probes
  * Fix: cgroup is not set: internal libpod error after os reboot
  * Allow setting volume and network names in Quadlet
  * pasta tests: automatically determine test parameters
  * test/e2e: wait for socket
  * manifest inspect: support authentication
  * api: fix slow version endpoint
  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD
  * CI: remove build without cgo task
  * libpod: use io.Writer vs io.WriteCloser for attach streams
  * top: do not depend on ps(1) in container
  * make --syslog errors non fatal
  * api: fix doc for default ps_args
  * Fixes typo in the path where quadlet looks for files
  * Add --replace flag to podman secret create
  * [CI:DOCS] uidmap man pages: fix corrupt italics
  * [skip-ci] Update github/issue-labeler action to v3.2
  * [CI:DOCS] podman-system-service.1.md: document systemd usage
  * fix(deps): update module github.com/docker/docker to
    v24.0.4+incompatible
  * fix(deps): update module github.com/docker/docker to
    v24.0.3+incompatible
  * Use bytes size consistently instead of human size
  * bugfix: do not try to parse empty ranges
  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks
  * fix(deps): update module golang.org/x/tools to v0.11.0
  * fix(deps): update module golang.org/x/net to v0.12.0
  * fix(deps): update module golang.org/x/term to v0.10.0
  * e2e: fix two toolbox flakes
  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()
  * test/e2e: use random ImageCacheDir
  * test/e2e: remove RHEL7 workaround
  * test/e2e: remove unnecessary code in SynchronizedAfterSuite
  * test/e2e: do not use /tmp for podman commands
  * test/tools: vendor ginkgo v2.11
  * test/e2e: write timings directly to file
  * machine start: qemu: adjust backoffs
  * auto update: fix usage of --authfile
  * system tests: refactor registry code
  * fix(deps): update module golang.org/x/text to v0.11.0
  * pkg/specgen: properly identify image OS on FreeBSD
  * libpod: use new libcontainer BlockIO constructors
  * [CI:BUILD] Minor: Don't confuse osx-debugging
  * [CI:DOCS] Better document the default value of --userns
  * Cirrus: build FreeBSD binaries in a VM
  * Makefile: add support for building freebsd release tarballs
  * [CI:DOCS] uidmap man pages: fix corrupt tables
  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
  * fix(deps): update module github.com/containers/buildah to
    v1.31.0
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc4
  * Use /proc/self/gid_map as intended, not uid_map
  * fix(command): ignore `--format` in `podman search --list-tags`
  * podman machine start: fix ready service
  * Makefile: don't rely on the non-standard -r flag for ln
  * pasta: Create /etc/hosts entries for pods using pasta
    networking
  * fix(deps): update module github.com/containers/libhvee to
    v0.2.0
  * pasta tests: add sanity check for test name vs function
  * pasta tests: cleanup + 1 new test
  * cmd/podman, pkg/domain/infra: sockets should live in /var/run
    on FreeBSD
  * cmd/podman/system: add API server support on FreeBSD
  * [CI:DOCS] Document support of pod security context IDs
  * rootless: use default_rootless_network_cmd config
  * Revert^3 "pasta: Use two connections instead of three in TCP
    range forward tests"
  * pasta: Workaround occasional socat failures in CI
  * pasta: Remove some leftover code from pasta bats tests
  * Bump c/image to v5.26.0, c/common 0.54.0
  * fix(deps): update module github.com/coreos/stream-metadata-go
    to v0.4.3
  * Display secret to user in inpspect
  * [CI:BUILD] RPM: Fix koji and ELN issues
  * e2e: systemd test: major fixes
  * pkg/specgen: add support for 'podman run --init' on FreeBSD
  * Bump version after v4.6 branch cut
  * Remove 'inspecting object' from inspect errors
  * pasta: Fix pasta tests to work on hosts with multiple
    interfaces
  * [CI:DOCS] fix command incorrect in windows
  * Fix readonly=false failure
  * pkg/specgen: Add support for Linux emulation on FreeBSD
  * Fix up podmansh man page
  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
  * Fixes for vendoring Buildah
  * vendor in latest buildah
  * tests: fix "Storing signatures" check
  * update c/image and c/storage to latest
  * Kube quadlets can support autoupdate as well as containers
  * debug tail 800 lines flake
  * Pass in correct cwd value for hooks exe
  * specgen: honor --device-cgroup-rule with a new user namespace
  * specgen, rootless: raise error with --device-cgroup-rule
  * make image listing more resilient
  * Update module google.golang.org/protobuf to v1.31.0
  * Trim whitespace from unit files while parsing
  * Re-organize hypervisor implementations
  * play.go: remove volumes on down -f</changelog>
  <changelog author="danish.prakash@suse.com" date="1695988800">- Build against latest stable Go version (bsc#1215807)</changelog>
  <changelog author="danish.prakash@suse.com" date="1696593600">- podman-docker: Provides docker to avoid conflicts
  when using podman with docker-compose (bsc#1215926)
- Update to version 4.7.1:
  * New version: v4.7.1
  * Update RELEASE_NOTES.md for v4.7.1
  * compat API: speed up network list
  * inspect: ignore ENOENT during device lookup
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * [CI:DOCS] update swagger version on docs.podman.io
  * Fix locale issues with WSL version detection
  * switch version to 4.7.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1697112000">- Use crun on Tumbleweed &amp; ALP for WASM support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1698753600">- crun is not available for armv6 (because of criu), so use runc
  on armv6</changelog>
  <changelog author="dcermak@suse.com" date="1698840000">- Update to version 4.7.2:
  * v4.7.2
  * Update RELEASE_NOTES.md for v4.7.2
  * compose: try all possible providers before throwing an error
  * Mask /sys/devices/virtual/powercap
  * fix: check wsl npipe when executing podman compose
  * rtd: implement v2 build file
  * Adjust to path name change for resolved unit
  * Switch version to 4.7.2-dev</changelog>
  <changelog author="schwab@suse.de" date="1699444800">- Use crun only on selected archs</changelog>
  <changelog author="danish.prakash@suse.com" date="1701172800">- Update to version 4.8.0:
  * Bump to v4.8.0
  * Update release notes for 4.8.0
  * Add notes on upcoming deprecations to release notes
  * [v4.8] Bump to Buildah v1.33.2
  * [CI:DOCS] Update release notes
  * machine applehv: create better error on start failure
  * Bump to v4.8.0-dev
  * Bump to v4.8.0-rc1
  * Create release notes for v4.8.0
  * Update release notes from v4.7 branch
  * Cirrus: Update operating branch
  * rootless_tutorial: modernize
  * Bump Buildah to v1.33.1
  * Bump Buildah to v1.33.0
  * Update to libhvee 0.5.0
  * vmtypes names cannot be used as machine names
  * Add support for --compat-auth-file in login/logout
  * Update tests for a c/common error message change
  * Update c/image and c/common to latest, c/buildah to main
  * CI: test overlay and vfs
  * [CI:DOCS] Add link to podman py docs
  * Test fixes for debian
  * pasta tests: remove some skips
  * VM images: bump to 2023-11-16
  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
  * [CI:DOCS] Machine test timeout env var
  * Quadlet - add support for UID and GID Mapping
  * Quadlet - Allow using symlink on the base search paths
  * [skip-ci] Update dessant/lock-threads action to v5
  * Avoid empty SSH keys on applehv
  * qemu,parseUSB: minor refactor
  * fix(deps): update module github.com/gorilla/handlers to v1.5.2
  * docs: fix relabeling command
  * Pass secrets from the host down to internal podman containers
  * (Temporary) Emergency CI fix: quay search is broken
  * Update podman-stats.1.md.in
  * [CI:BUILD] packit: handle builds for RC releases
  * Quadlet test - add case for multi = sign in mount
  * set RLIMIT_NOFILE soft limit to match the hard limit on mac
  * rootless: use functionalities from c/storage
  * CI: e2e: fix a smattering of test bugs that slipped in
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
  * vendor: update c/storage
  * Improve the documentation of quadlet
  * Fix socket mapping socket mapping nits
  * fix(deps): update module golang.org/x/tools to v0.15.0
  * fix(deps): update github.com/containers/libhvee digest to 9651e31
  * [skip-ci] Update github/issue-labeler action to v3.3
  * Document --userns=auto behaviour for rootless users
  * machine: qemu: add usb host passthrough
  * fix(deps): update module golang.org/x/net to v0.18.0
  * fix(deps): update module github.com/onsi/gomega to v1.30.0
  * Refactor Ignition configuration for virt providers
  * [CI:BUILD] rpm: disable GOPROXY
  * Automatic code cleanups - JetBrains
  * Refactor key machine objects
  * systests: add [NNN] prefix in logs, NNN = filename
  * systests: add a last-minute check for db backend
  * applehv: allow virtiofs to mount to /
  * Run codespell on podman
  * update completion scripts for cobra v1.8.0
  * Fix man page display of podman-kube-generate
  * Try to fix the broken formatting of man podman‐kube‐apply(1).
  * fix(deps): update module golang.org/x/text to v0.14.0
  * docs: make CNI removal explicit
  * fix(deps): update module github.com/gorilla/mux to v1.8.1
  * fix(deps): update module github.com/spf13/cobra to v1.8.0
  * fix(deps): update module golang.org/x/sync to v0.5.0
  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
  * Podman push --help should reveal default compression
  * Update container-device-interface (CDI) to v0.6.2
  * fix: adjust helper string in machine_common
  * fix: adjust helper string in machine_common
  * remote,test: remove .dockerignore which is a symlink
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
  * fix: adjust helper string in machine_common
  * vendor: update github.com/coreos/go-systemd/v22 to latest main
  * CI: default to sqlite
  * vendor: update c/common
  * check system connections before machine init
  * Consume OCI images for machine image
  * freebsd: drop dead code
  * libpod: make removePodCgroup linux specific
  * containers: drop special handling for ErrCgroupV1Rootless
  * compose: fix compose provider debug message
  * image: replace GetStoreImage with ResolveReference
  * vendor: bump c/image to 373c52a9466f
  * Refactor machine socket mapping
  * AppleHV: Fix machine rm error message
  * Add status messages to podman --remote commit
  * End-of-Life policy for github issues
  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
  * Support passing of Ulimits as -1 to mean max
  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d
  * Log gvproxy and server9 to file on log-level=debug
  * Change to using gopsutil for cross-OS process ops
  * Initial addition of 9p code to Podman
  * libpod: fix /etc/hostname with --uts=host
  * systests: stty test: retry once on flake
  * systests: pasta: avoid hangs
  * Fix secrets scanning GHA Workflow
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * docs: clarify systemd cgroup mount
  * podman build --remote URI Dockerfile shoud not be treated as file
  * Small fixes for wacko CI environments
  * Do not add powercap mask if no paths are masked
  * compose: try all possible providers before throwing an error
  * podman kube play --replace should force removal of pods and containers
  * Sort kube options alphabetically
  * container.conf: support attributed string slices
  * CI: podman farm tests cleanup
  * Mask /sys/devices/virtual/powercap
  * Update module github.com/google/uuid to v1.4.0
  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
  * fix(deps): update module go.etcd.io/bbolt to v1.3.8
  * CI: systest: safer random_rfc1918_subnet
  * CI: e2e: safer GetPort()
  * Fix broken code block markup in Introduction.rst
  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
  * chore: remove npipe const and use vmtype const for checking
  * Update module github.com/onsi/gomega to v1.29.0
  * CI: try to fix more networking flakes
  * fix: check wsl npipe when executing podman compose
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
  * Quadlet - explicit support for read-only-tmpfs
  * compat API: fix image-prune --all
  * Makefile - allow more control over Ginkgo parameters
  * Add e2e tests for farm build
  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1
  * Add podman farm build command
  * Add emulation package
  * Use buildah default isolation when working with podman play kube
  * docs(API): Fix compat network (dis-)connect
  * test/e2e: do not import buildah
  * pkg/specgen: remove config_unsupported.go
  * pkg/parallel/ctr: add !remote tag
  * pkg/domain/filters: add !remote tag
  * pkg/ps: add !remote tag
  * pkg/systemd/generate: add !remote tag
  * libpod: add !remote tag
  * pkg/autoupdate: add !remote tag
  * vendor latest c/common
  * libpod: remove build support non linux/freebsd
  * Fix typo
  * test/apiv2: adapt apiv2 test on cgroups v1 environment
  * ginkgo setup: retry cache pulls
  * Support size option when creating tmpfs volumes
  * not mounted layers should be reported as info not error
  * CI: stop using registry.k8s.io
  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1
  * test fixes for c/common tag chnages
  * vendor latest c/common
  * hyperV: Update lastUp time
  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
  * lint: disable testifylint
  * lint: fix warnings found by perfsprint
  * lint: fix warnings found by inamedparam
  * lint: fix warnings found by protogetter
  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
  * Use node hostname in kube play when hostNetwork=true
  * cirrus setup: special-case perl unicode
  * network: document ports and macvlan interaction
  * quadlet: document cgroupv2 requirement
  * [skip-ci] Update actions/checkout digest to b4ffde6
  * Revert "Emergency workaround for CI breakage"
  * remote: exec: do not leak session IDs on errors
  * fix(deps): update github.com/containers/storage digest to 79aa304
  * fix(deps): update module k8s.io/kubernetes to v1.28.3
  * System tests: fix broken silence127
  * Add TERM iff TERM not defined in container when podman exec -t
  * Emergency workaround for CI breakage
  * Kill gvproxy when machine rm -f
  * Fix path for omvf vars on Darwin/arm64
  * Allow systemd specifiers in User and Group Quadlet keys
  * libpod: rename confusing import name
  * use FindInitBinary() for init binary
  * vendor latest c/common
  * exec: do not leak session IDs on errors
  * systests: cp test: lots of cleanup
  * Define better error message for container name conflicts with external storage.
  * Quadlet - support ImageName for .image files
  * test/system: ignore 127 if it is the expected rc
  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
  * image history: fix walking layers
  * fix(api): Ensure compatibality for network connect
  * [CI:DOCS] Add cross-build target info.
  * machine set: document --rootful better
  * libpod: restart+userns cleanup netns correctly
  * Minor log and doc fixes
  * Quadlet man page - discuss volume removal explicitly
  * Quadlet - add support for KubeDownForce
  * System Test - Quadlet kube oneshot
  * Fix output of podman --remote top
  * buildah-bud: test relative TMPDIR
  * Fix handling of --read-only-tmpfs flag
  * Vendor common and buildah main
  * remote,build: wire unsetlabels
  * test: build with TMPDIR as relative
  * docs: add unsetlabel
  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
  * fix: pull error response docker rest api compatibility
  * Show client info even if remote connection fails
  * fix(deps): update github.com/containers/libhvee digest to e51be96
  * Run codespell
  * SetLock for all virt providers
  * Machine: Teardown on init failure
  * healthcheck: make sure to always show health_status events
  * Apply suggestions from code review
  * [CI:DOCS]rtd: implement v2 build file
  * Quadlet - support oneshot .kube files
  * libpod: fix deadlock while parallel container create
  * fix(deps): update module golang.org/x/net to v0.17.0
  * api: add `compatMode` paramenter to libpod's pull endpoint
  * api: break out compat image pull
  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
  * use sqlite as default database
  * vendor latest c/common
  * fix(deps): update module github.com/nxadm/tail to v1.4.11
  * Check for image with /libpod/containers/create
  * container: always check if mountpoint is mounted
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
  * vendor: update c/storage
  * api: drop debug statement
  * Quadlet - add support for global arguments
  * Add system test
  * fix(deps): update module golang.org/x/tools to v0.14.0
  * Don't ignore containerfiles outside of build context
  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2
  * fix(deps): update module golang.org/x/term to v0.13.0
  * Update module golang.org/x/sys to v0.13.0
  * [CI:DOCS] Add updating version on podman.io to release process
  * containers.conf: add `privileged` field to containers table
  * Implement secrets/credential scanning
  * Cirrus: Execute Windows podman-machine e2e tests
  * vendor: bump c/storage
  * Update module golang.org/x/sync to v0.4.0
  * [CI:DOCS] update swagger version on docs.podman.io
  * Create Qemu command wrapper
  * Adjust to path name change for resolved unit
  * Revert "Fix WSL systemd detection"
  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
  * [CI:DOCS] update kube play delete endpoint docs
  * [CI:DOCS] Remove dead link from README
  * test/system: --env-file test fixes
  * Revert "feat(env): support multiline in env-file"
  * Revert "docs(env-file): improve document description"
  * Revert "fix(env): parsing --env incorrect in cli"
  * Filter health_check and exec events for logging in console
  * inspect: ignore ENOENT during device lookup
  * test, manifest: test push retry
  * Fix locale issues with WSL version detection
  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible
  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
  * Update github.com/containers/libhvee digest to e9b1811
  * windows: Use prebuilt gvproxy/win-sshproxy binaries
  * Volume create - fast exit when ignore is set and volume exists
  * Update golang.org/x/exp digest to 9212866
  * Update github.com/opencontainers/runtime-spec digest to c0e9043
  * remove selinux tag as not needed anymore
  * [skip-ci] Improve podmansh(1)
  * Build applehv for Intel Macs
  * Revert "GHA Workflow: Faster discussion-locking"
  * update vfkit vendored code
  * Add DefaultMode to kube play
  * Fix broken podman images filters
  * Remove `c.ExtraFiles` line in machine
  * podman: run --replace prints only the new container id
  * New machines should show Never as LastUp
  * podman machine: disable zincati update service
  * Revert "cirrus setup: install en_US.UTF-8 locale"
  * Cirrus: CI VM images w/ newer automation-library
  * CI VMs: bump to f39 + f38
  * [CI:DOCS] Update podman load doc
  * Update mac installer to latest gvproxy release
  * Fix WSL systemd detection
  * Add documentation for the vrf option on netavark
  * fix(deps): update github.com/containers/common digest to 9342cdd
  * fix: typos in links, path and code example
  * e2e: ExitCleanly(): manual special cases
  * e2e: ExitCleanly(): the final fron^Wcommit
  * [CI:DOCS] Add win-sshproxy target to winmake
  * wsl: enable machine init tests
  * Update docs/source/markdown/options/rdt-class.md
  * move IntelRdtClosID to HostConfig
  * use default when user does not provide rdt-class
  * Add documentation for Intel RDT support
  * Add test for Intel RDT support
  * Add Intel RDT support
  * [CI:DOCS] Fix podman form update --help examples
  * Quadlet container mount - support non key=val options
  * test/e2e: default to netavark
  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
  * fix(deps): update github.com/containers/common digest to 4619314
  * applehv: enable machine tests for start
  * applehv: machine tests for stop and rm
  * Update machine tests README
  * Add podman socket info to machine inspect
  * Fix podman machine info test for hyperV
  * libpod: pass entire environment to conmon
  * e2e: ExitCleanly(): manual fixes to get tests working
  * e2e: ExitCleanly(): a few more
  * FCOS+podman-next: correct GHA conditional syntax
  * pkg/machine/e2e: wsl stop
  * wsl: machine tests for inspect
  * wsl: machine tests for ssh
  * fix(deps): update github.com/containers/common digest to e18cda8
  * wsl: machine start test
  * wsl machine tests: set
  * wsl: machine tests
  * Skip proxy test for hyperV
  * Enable machine e2e test for applehv
  * hyperV: Respect rootful option on machine init
  * [CI:BUILD] FCOS image: enable nightly build
  * e2e: use safe fedora-minimal image
  * hyperv: machine e2e tests for set command
  * podman build: correct default pull policy
  * fix handling of static/volume dir
  * unbreak CI: useradd not found
  * hyperv: set more realistic starting state
  * hyperv: use StopWithForce with remove
  * Fix all ports exposed by kube play
  * Fix setting timezone on HyperV
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
  * Fix farm update to check for connections
  * Adjust machine CPU tests
  * Bump version on main
  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
  * Vendor c/common
  * pod rm: do not log error if anonymous volume is still used
  * e2e: ExitCleanly(): manual fixes to get tests passing
  * e2e: ExitCleanly(): a few more
  * fixes for pkg/machine/e2e on hyperv
  * test: fix rootless propagation test
  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
  * Enable disk resizing for applehv
  * Various updates for hyperv and machine e2e tests
  * test: update fedoraMinimal version
  * specgen, rootless: fix mount of cgroup without a netns
  * Automatically remove anonymous volumes when removing a container
  * Use ActiveServiceDestination in ssh remoteConnectionUsername
  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
  * e2e: ExitCleanly(): generate_kube_test.go
  * e2e: generate kube -&gt; kube generate
  * e2e: ExitCleanly(): generate_kube_test.go
  * windows cannot "do" extra files
  * e2e: ExitCleanly(): Fixes for breaking tests
  * play kube -&gt; kube play
  * e2e: ExitCleanly(): play_kube_test.go
  * introduce pkg/strongunits
  * Makefile equiv Powershell script
  * pass --syslog to the cleanup process
  * vendor of containers/common
  * fix --authfile auto-update test
  * compat API: speed up network list
  * Change priority for cli-flags for remotely operating Podman
  * libpod: remove unused ContainerState() fucntion
  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests
  * e2e: ExitCleanly(): more low-hanging fruit
  * e2e: ExitCleanly(): more low-hanging fruit
  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
  * Enable machine e2e tests for WSL
  * systests: tighter checks for unwanted warnings
  * GHA Workflow: Faster discussion-locking
  * [CI:BUILD] FCOS + podman-next image: pull in wasm
  * [CI:BUILD] rpm: remove gvproxy subpackage
  * [CI:DOCS] Tweak podman to Podman in a few farm man pages
  * Docs on sig-proxy are wrong, we support TTY
  * e2e: ExitCleanly(): low-hanging fruit, part 2
  * e2e: ExitCleanly(): low-hanging fruit, part 1
  * Buildtag out unix commands for common OS files
  * systests: clean up after tests; fix missing path in logs
  * [CI:BUILD] followup PR for fcos with podman-next
  * Implement gvproxy networking using cmdline wrapper
  * fix, test: rmi should work with images w/o layers
  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
  * Quadlet Image test - rearrange test function
  * e2e: continuing ExitCleanly() work: manual tweaks
  * e2e: continuing ExitCleanly() work
  * [CI:DOCS] Improve podman-tag man page
  * [CI:DOCS] Improve podman-build man page
  * [CI:DOCS] Include precheck to release process
  * [CI:DOCS] consistentize filter options in man pages
  * Quadlet - add support for .image units
  * --env-host: use default from containers.conf
  * error when --module is specified on the command level
  * man page crossrefs: add --filter autocompletes
  * Fix specification of unix:///run
  * Add label! filter and tests to containers and pods
  * Add test for legacy address without two slashes
  * Use url with scheme and path for the unix address</changelog>
  <changelog author="danish.prakash@suse.com" date="1701864000">- Update to version 4.8.1:
  * v4.8.1
  * Update RELEASE_NOTES.md for v4.8.1
  * Handle symlinks when checking DB vs runtime configs
  * libpod: Detect whether we have a private UTS namespace on FreeBSD
  * pkg/bindings: add new APIVersionError error type
  * fix podman-remote exec regression with v4.8
  * sqlite: fix issue in ValidateDBConfig()
  * sqlite: fix missing Commit() in RemovePodContainers()
  * sqlite: set busy timeout to 100s
  * Fix locking error in WSL machine rm -f
  * Gating test fixes
  * If API calls for kube play --replace, then replace pod
  * Fix wsl.conf generation when user-mode-networking is disabled
  * Bump to v4.8.1-dev</changelog>
  <changelog author="danish.prakash@suse.com" date="1701950400">- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)</changelog>
  <changelog author="kastl@b1-systems.de" date="1702296000">- Update to version 4.8.2:
  * v4.8.2
  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
  * Kube Play - set ReportWriter when building an image
  * Fix user-mode net init flag on first time install
  * bump c/common to v0.57.1
  * bump version to v4.8.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Refactor network backend dependencies:
  * podman requires either netavark or cni-plugins. On ALP, require
    netavark, otherwise prefer netavark but don't force it.
  * This fixes missing cni-plugins in some scenarios
  * Default to netavark everywhere where it's available</changelog>
  <changelog author="danish.prakash@suse.com" date="1704369600">- Update to version 4.8.3:
  * Release v4.8.3
  * Update RELEASE_NOTES.md for v4.8.3
  * update module golang.org/x/crypto to v0.17.0 [security]
  * Error on HyperV VM start when gvproxy has failed to start
  * bump release to v4.8.3-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1710849600">- Add patch for CVE-2024-1753 (bsc#1221677):
  0001-CVE-2024-1753-container-escape-fix.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1717761600">- Remove upstreamed patches:
  - 0001-CVE-2024-1753-container-escape-fix.patch
- Update to version 4.9.5:
  * Bump to v4.9.5
  * Update release notes for v4.9.5
  * fix "concurrent map writes" in network ls compat endpoint
  * [v4.9] Fix for CVE-2024-3727 (bsc#1224122)
  * Disable failing bud test
  * CI Maintenance: Disable machine tests
  * [CI:DOCS] Allow downgrade of WiX
  * [CI:DOCS] Force WiX 3.11
  * [CI:DOCS] Fix windows installer action
  * Bump to v4.9.5-dev
  * Bump to v4.9.4
  * Update release notes for v4.9.4
  * [v4.9] Bump Buildah to v1.33.7, CVE-2024-1753, CVE-2024-24786 (bsc#1226136)
  * Add farm command to commands list
  * Bump to FreeBSD 13.3 (13.2 vanished)
  * Update health-start-periods docs
  * Don't update health check status during initialDelaySeconds
  * image scp: don't require port for ssh URL
  * Ignore docker's end point config when the final network mode isn't bridge.
  * Fix running container from docker client with rootful in rootless podman.
  * [skip-ci] Packit: remove koji and bodhi tasks for v4.9
  * Bump to v4.9.4-dev
  * Bump to v4.9.3
  * Release notes for v4.9.3
  * Remove gitleaks scanning
  * [v4.9] [skip-ci] packit: update fedora downstream branches
  * @@option volume.image: be specific that -v only affects RUN
  * Accept a config blob alongside the "changes" slice when committing
  * container create: use ParseUserNamespace to parse a user namespace setting
  * Bump to v4.9.3-dev
  * Bump to v4.9.2
  * Release notes for v4.9.2
  * Cirrus: Update operating branch
  * [v4.9] Bump to c/common v0.57.4, buildkit v0.12.5, c/buidah v1.33.5
  * Fix updated runc dep breaking pod devices cgroup
  * systests: kube with policies test: fix race
  * Remove go.mod pin of runc and update to latest
  * systests: kube with policies test: fix race
  * Bump to v4.9.2-dev
  * Bump to v4.9.1
  * Release notes for v4.9.1
  * [v4.9] Bump Buildah to v1.33.4, c/common v0.57.3, c/image v5.29.2
  * pkginstaller: bump Qemu version to 8.2.1
  * Assign separate ports for each appleHV machine
  * Fix machine inspect test config
  * AppleHV: update LastUp time
  * applehv: return socket path from setupAPIForwarding
  * applehv: Remove unneeded cmd.ExtraFiles assignment
  * abi: drop check for IsRootless()
  * system: enhance check for re-exec into rootless userns
  * system: enhance check for re-exec into rootless userns
  * Fix `podman machine set --rootful` for applehv
  * applehv - fix vm lookup
  * rpm: use go-rpm-macros on RHEL 10
  * Bump to v4.9.1-dev
  * Bump to v4.9.0
  * Fix a small grammar error in RELEASE_NOTES.md
  * Fix push endpoint stream
  * Finalized release notes for v4.9.0
  * farm build: push built images to registry
  * Move the --farm flag to farm build command
  * Clean up farm-build miscommit
  * [CI:DOCS] Add podman farm build doc
  * Add release notes for v4.9.0
  * gvproxy: Update to 0.7.2 release
  * [v4.9] Bump Buildah to v1.33.3, c/common to v0.57.2, c/image to v5.29.1
  * Add a net health recovery service to Qemu machines
  * Set up podman machine remote user correctly
  * Remove Libpod special-init conditions
  * Fix `podman system reset` with external containers
  * [v4.8] podman kube play: fix broken annotation parsing
  * feat: disable pid max in the podman machine
  * systests: cp: add wait_for_ready
  * System tests: fixes for RHEL8 gating failures
  * Add API forwarding support for HyperV
  * bump to v4.8.4-dev</changelog>
  <changelog author="dcermak@suse.com" date="1719835200">- Add patch to fix bsc#1227052 / CVE-2024-6104:
  * 0001-Backport-fix-for-CVE-2024-6104.patch
- Add missing BuildRequires man</changelog>
</package>
<package pkgid="8262a29efc3f264f167b151ede5ada882c63713968d29763b20e909b42fbca16" name="polkit" arch="aarch64">
  <version epoch="0" ver="121" rel="150500.3.3.1"/>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1596196800">- Update to version 0.117:
  + Activated Gitlab CI.
  + Updated dependency to mozjs68.
  + Memory management fixes.
  + Updated translations.
- Replace pkgconfig(mozjs-60) for pkgconfig(mozjs-68)
  BuildRequires following upstreams port.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1603454400">- Update to version 0.118:
  + Updated dependency to mozjs78.
  + Tarball fixes.
- Replace pkgconfig(mozjs-68) for pkgconfig(mozjs-78)
  BuildRequires following upstreams port.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1609243200">- also set libprivdir during build, otherwhise systemd and D-Bus service files
  contain the wrong path and we'll get runtime errors.</changelog>
  <changelog author="kukuk@suse.com" date="1615464000">- Move /etc/dbus-1/system.d to /usr/share/dbus-1/system.d, the
  first location is only for admin changes
- Move pam configuration to /usr/etc/pam.d</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com" date="1625659200">- Move /etc/polkit-1/rules.d/50-default.rules to
  /usr/share/polkit-1/rules.d/50-default.rules. The first location
  is only for admin changes.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626609600">- Change to using systemd-sysusers
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Fix 50-default.rules file-parent-ownership-mismatch warning
- Remove --with-pic, no effect with --disable-static</changelog>
  <changelog author="meissner@suse.com" date="1634731200">- fork libpolkit0 package into libpolkit-agent-1-0 and libpolkit-gobject-1-0
  as mandated. bsc#1191781</changelog>
  <changelog author="dmueller@suse.com" date="1638792000">- update to 0.120:
  * transition from Intltool to gettext
  * several tarball, meson and pipeline fixups
  * Portuguese translation
  * Romanian translation
  * meson build system added
  * CVE-2021-3560 mitigation
  * properties in text listener
  * typos fixups
  * Update Hungarian translation
- drop CVE-2021-3560.patch  (upstream)</changelog>
  <changelog author="meissner@suse.com" date="1643112000">- Fixed pkexec Local Privilege Escalation aka pwnkit (CVE-2021-4034 bsc#1194568)
  CVE-2021-4034-pkexec-fix.patch</changelog>
  <changelog author="fvogt@suse.com" date="1643198400">- Switch from mozjs to duktape:
  * Add duktape-support.patch</changelog>
  <changelog author="meissner@suse.com" date="1645531200">- Fixed denial of service via file descriptor leak (bsc#1195542 CVE-2021-4115)
  0001-CVE-2021-4115-GHSL-2021-077-fix.patch</changelog>
  <changelog author="meissner@suse.com" date="1658145600">- split out pkexec into seperate package to make system hardening
  easier (to avoid installing it jsc#PED-132 jsc#PED-148).</changelog>
  <changelog author="meissner@suse.com" date="1659528000">- add split-provides for polkit:/usr/bin/pkexec. (bsc#1202070)</changelog>
  <changelog author="kukuk@suse.com" date="1659960000">- Use %_pam_vendordir</changelog>
  <changelog author="luc14n0@opensuse.org" date="1660046400">- Update to version 121:
  + Addition of duktape as a JS engine backend.
  + Other small fixes and improvements. For more details, visit:
    gitlab.freedesktop.org/polkit/polkit/-/blob/121/NEWS.md
  + Updated translations.
- Drop merged-upstream patches:
  + CVE-2021-4034-pkexec-fix.patch;
  + 0001-CVE-2021-4115-GHSL-2021-077-fix.patch;
  + duktape-support.patch;
  + pkexec.patch.
- Replace Intltool with Gettext as a build requirement following
  the migration from last release (0.120).
- Add Meson as a build requirement while dropping Libtool and
  replace all Autotools macros with Meson ones. And pass the
  following options to Meson: session_tracking=libsystemd-login;
  systemdsystemunitdir=%{_unitdir}; os_type=suse;
  pam_module_dir=%{_pam_moduledir}; pam_prefix=%{_pam_vendordir};
  examples=true; tests=true; gtk_doc=true; man=true and
  js_engine=duktape.
- Drop no longer needed Libtool as a build requirement, following
  Autotools replacement.
- Add explicit pkgconfig module build requirements for glib-2.0 and
  gobject-2.0 that are searched by the build scripts. They were
  already being pulled by their siblings [pkgconfig(gio-2.0) and
  pkgconfig(gio-unix-2.0)].
- Drop conditional macro, which was wrapping "BuildArch: noarch"
  for the doc subpackage, based on long gone EOLed (open)SUSE
  release (11.2).
- Add missing 'Requires(post): permissions' for the pkexec
  subpackage.
- Add python3-dbus-python and python3-python-dbusmock as build
  requirements in order to run test in the check section.
- Add polkit-fix-pam-prefix.patch to use the value of pam_prefix
  Meson option, like it was designed to, rather than hard-coded
  path for pam configuration files.
- Remove unneeded executable bit from 50-default.rules file.</changelog>
  <changelog author="meissner@suse.com" date="1663243200">- obsolete libpolkit0 also from baselibs.</changelog>
  <changelog author="jsegitz@suse.com" date="1680091200">- Change permissions for rules folders (bsc#1209282)</changelog>
</package>
<package pkgid="7f55f1502270e21fe05fc4356ae8286ec8c3b1b9278f26cb3c65daed0004747d" name="polkit" arch="s390x">
  <version epoch="0" ver="121" rel="150500.3.3.1"/>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1596196800">- Update to version 0.117:
  + Activated Gitlab CI.
  + Updated dependency to mozjs68.
  + Memory management fixes.
  + Updated translations.
- Replace pkgconfig(mozjs-60) for pkgconfig(mozjs-68)
  BuildRequires following upstreams port.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1603454400">- Update to version 0.118:
  + Updated dependency to mozjs78.
  + Tarball fixes.
- Replace pkgconfig(mozjs-68) for pkgconfig(mozjs-78)
  BuildRequires following upstreams port.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1609243200">- also set libprivdir during build, otherwhise systemd and D-Bus service files
  contain the wrong path and we'll get runtime errors.</changelog>
  <changelog author="kukuk@suse.com" date="1615464000">- Move /etc/dbus-1/system.d to /usr/share/dbus-1/system.d, the
  first location is only for admin changes
- Move pam configuration to /usr/etc/pam.d</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com" date="1625659200">- Move /etc/polkit-1/rules.d/50-default.rules to
  /usr/share/polkit-1/rules.d/50-default.rules. The first location
  is only for admin changes.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626609600">- Change to using systemd-sysusers
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Fix 50-default.rules file-parent-ownership-mismatch warning
- Remove --with-pic, no effect with --disable-static</changelog>
  <changelog author="meissner@suse.com" date="1634731200">- fork libpolkit0 package into libpolkit-agent-1-0 and libpolkit-gobject-1-0
  as mandated. bsc#1191781</changelog>
  <changelog author="dmueller@suse.com" date="1638792000">- update to 0.120:
  * transition from Intltool to gettext
  * several tarball, meson and pipeline fixups
  * Portuguese translation
  * Romanian translation
  * meson build system added
  * CVE-2021-3560 mitigation
  * properties in text listener
  * typos fixups
  * Update Hungarian translation
- drop CVE-2021-3560.patch  (upstream)</changelog>
  <changelog author="meissner@suse.com" date="1643112000">- Fixed pkexec Local Privilege Escalation aka pwnkit (CVE-2021-4034 bsc#1194568)
  CVE-2021-4034-pkexec-fix.patch</changelog>
  <changelog author="fvogt@suse.com" date="1643198400">- Switch from mozjs to duktape:
  * Add duktape-support.patch</changelog>
  <changelog author="meissner@suse.com" date="1645531200">- Fixed denial of service via file descriptor leak (bsc#1195542 CVE-2021-4115)
  0001-CVE-2021-4115-GHSL-2021-077-fix.patch</changelog>
  <changelog author="meissner@suse.com" date="1658145600">- split out pkexec into seperate package to make system hardening
  easier (to avoid installing it jsc#PED-132 jsc#PED-148).</changelog>
  <changelog author="meissner@suse.com" date="1659528000">- add split-provides for polkit:/usr/bin/pkexec. (bsc#1202070)</changelog>
  <changelog author="kukuk@suse.com" date="1659960000">- Use %_pam_vendordir</changelog>
  <changelog author="luc14n0@opensuse.org" date="1660046400">- Update to version 121:
  + Addition of duktape as a JS engine backend.
  + Other small fixes and improvements. For more details, visit:
    gitlab.freedesktop.org/polkit/polkit/-/blob/121/NEWS.md
  + Updated translations.
- Drop merged-upstream patches:
  + CVE-2021-4034-pkexec-fix.patch;
  + 0001-CVE-2021-4115-GHSL-2021-077-fix.patch;
  + duktape-support.patch;
  + pkexec.patch.
- Replace Intltool with Gettext as a build requirement following
  the migration from last release (0.120).
- Add Meson as a build requirement while dropping Libtool and
  replace all Autotools macros with Meson ones. And pass the
  following options to Meson: session_tracking=libsystemd-login;
  systemdsystemunitdir=%{_unitdir}; os_type=suse;
  pam_module_dir=%{_pam_moduledir}; pam_prefix=%{_pam_vendordir};
  examples=true; tests=true; gtk_doc=true; man=true and
  js_engine=duktape.
- Drop no longer needed Libtool as a build requirement, following
  Autotools replacement.
- Add explicit pkgconfig module build requirements for glib-2.0 and
  gobject-2.0 that are searched by the build scripts. They were
  already being pulled by their siblings [pkgconfig(gio-2.0) and
  pkgconfig(gio-unix-2.0)].
- Drop conditional macro, which was wrapping "BuildArch: noarch"
  for the doc subpackage, based on long gone EOLed (open)SUSE
  release (11.2).
- Add missing 'Requires(post): permissions' for the pkexec
  subpackage.
- Add python3-dbus-python and python3-python-dbusmock as build
  requirements in order to run test in the check section.
- Add polkit-fix-pam-prefix.patch to use the value of pam_prefix
  Meson option, like it was designed to, rather than hard-coded
  path for pam configuration files.
- Remove unneeded executable bit from 50-default.rules file.</changelog>
  <changelog author="meissner@suse.com" date="1663243200">- obsolete libpolkit0 also from baselibs.</changelog>
  <changelog author="jsegitz@suse.com" date="1680091200">- Change permissions for rules folders (bsc#1209282)</changelog>
</package>
<package pkgid="bba1c852921d327fc021a2de83b842698e184875a0c99527609300caaa7a56db" name="polkit" arch="src">
  <version epoch="0" ver="121" rel="150500.3.3.1"/>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1596196800">- Update to version 0.117:
  + Activated Gitlab CI.
  + Updated dependency to mozjs68.
  + Memory management fixes.
  + Updated translations.
- Replace pkgconfig(mozjs-60) for pkgconfig(mozjs-68)
  BuildRequires following upstreams port.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1603454400">- Update to version 0.118:
  + Updated dependency to mozjs78.
  + Tarball fixes.
- Replace pkgconfig(mozjs-68) for pkgconfig(mozjs-78)
  BuildRequires following upstreams port.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1609243200">- also set libprivdir during build, otherwhise systemd and D-Bus service files
  contain the wrong path and we'll get runtime errors.</changelog>
  <changelog author="kukuk@suse.com" date="1615464000">- Move /etc/dbus-1/system.d to /usr/share/dbus-1/system.d, the
  first location is only for admin changes
- Move pam configuration to /usr/etc/pam.d</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com" date="1625659200">- Move /etc/polkit-1/rules.d/50-default.rules to
  /usr/share/polkit-1/rules.d/50-default.rules. The first location
  is only for admin changes.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626609600">- Change to using systemd-sysusers
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Fix 50-default.rules file-parent-ownership-mismatch warning
- Remove --with-pic, no effect with --disable-static</changelog>
  <changelog author="meissner@suse.com" date="1634731200">- fork libpolkit0 package into libpolkit-agent-1-0 and libpolkit-gobject-1-0
  as mandated. bsc#1191781</changelog>
  <changelog author="dmueller@suse.com" date="1638792000">- update to 0.120:
  * transition from Intltool to gettext
  * several tarball, meson and pipeline fixups
  * Portuguese translation
  * Romanian translation
  * meson build system added
  * CVE-2021-3560 mitigation
  * properties in text listener
  * typos fixups
  * Update Hungarian translation
- drop CVE-2021-3560.patch  (upstream)</changelog>
  <changelog author="meissner@suse.com" date="1643112000">- Fixed pkexec Local Privilege Escalation aka pwnkit (CVE-2021-4034 bsc#1194568)
  CVE-2021-4034-pkexec-fix.patch</changelog>
  <changelog author="fvogt@suse.com" date="1643198400">- Switch from mozjs to duktape:
  * Add duktape-support.patch</changelog>
  <changelog author="meissner@suse.com" date="1645531200">- Fixed denial of service via file descriptor leak (bsc#1195542 CVE-2021-4115)
  0001-CVE-2021-4115-GHSL-2021-077-fix.patch</changelog>
  <changelog author="meissner@suse.com" date="1658145600">- split out pkexec into seperate package to make system hardening
  easier (to avoid installing it jsc#PED-132 jsc#PED-148).</changelog>
  <changelog author="meissner@suse.com" date="1659528000">- add split-provides for polkit:/usr/bin/pkexec. (bsc#1202070)</changelog>
  <changelog author="kukuk@suse.com" date="1659960000">- Use %_pam_vendordir</changelog>
  <changelog author="luc14n0@opensuse.org" date="1660046400">- Update to version 121:
  + Addition of duktape as a JS engine backend.
  + Other small fixes and improvements. For more details, visit:
    gitlab.freedesktop.org/polkit/polkit/-/blob/121/NEWS.md
  + Updated translations.
- Drop merged-upstream patches:
  + CVE-2021-4034-pkexec-fix.patch;
  + 0001-CVE-2021-4115-GHSL-2021-077-fix.patch;
  + duktape-support.patch;
  + pkexec.patch.
- Replace Intltool with Gettext as a build requirement following
  the migration from last release (0.120).
- Add Meson as a build requirement while dropping Libtool and
  replace all Autotools macros with Meson ones. And pass the
  following options to Meson: session_tracking=libsystemd-login;
  systemdsystemunitdir=%{_unitdir}; os_type=suse;
  pam_module_dir=%{_pam_moduledir}; pam_prefix=%{_pam_vendordir};
  examples=true; tests=true; gtk_doc=true; man=true and
  js_engine=duktape.
- Drop no longer needed Libtool as a build requirement, following
  Autotools replacement.
- Add explicit pkgconfig module build requirements for glib-2.0 and
  gobject-2.0 that are searched by the build scripts. They were
  already being pulled by their siblings [pkgconfig(gio-2.0) and
  pkgconfig(gio-unix-2.0)].
- Drop conditional macro, which was wrapping "BuildArch: noarch"
  for the doc subpackage, based on long gone EOLed (open)SUSE
  release (11.2).
- Add missing 'Requires(post): permissions' for the pkexec
  subpackage.
- Add python3-dbus-python and python3-python-dbusmock as build
  requirements in order to run test in the check section.
- Add polkit-fix-pam-prefix.patch to use the value of pam_prefix
  Meson option, like it was designed to, rather than hard-coded
  path for pam configuration files.
- Remove unneeded executable bit from 50-default.rules file.</changelog>
  <changelog author="meissner@suse.com" date="1663243200">- obsolete libpolkit0 also from baselibs.</changelog>
  <changelog author="jsegitz@suse.com" date="1680091200">- Change permissions for rules folders (bsc#1209282)</changelog>
</package>
<package pkgid="25f7b3e07fa36c65c22cca25a7541a6a6188395cc9974206027c0bf8fa6ce5ab" name="polkit" arch="x86_64">
  <version epoch="0" ver="121" rel="150500.3.3.1"/>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1596196800">- Update to version 0.117:
  + Activated Gitlab CI.
  + Updated dependency to mozjs68.
  + Memory management fixes.
  + Updated translations.
- Replace pkgconfig(mozjs-60) for pkgconfig(mozjs-68)
  BuildRequires following upstreams port.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1603454400">- Update to version 0.118:
  + Updated dependency to mozjs78.
  + Tarball fixes.
- Replace pkgconfig(mozjs-68) for pkgconfig(mozjs-78)
  BuildRequires following upstreams port.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1609243200">- also set libprivdir during build, otherwhise systemd and D-Bus service files
  contain the wrong path and we'll get runtime errors.</changelog>
  <changelog author="kukuk@suse.com" date="1615464000">- Move /etc/dbus-1/system.d to /usr/share/dbus-1/system.d, the
  first location is only for admin changes
- Move pam configuration to /usr/etc/pam.d</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com" date="1625659200">- Move /etc/polkit-1/rules.d/50-default.rules to
  /usr/share/polkit-1/rules.d/50-default.rules. The first location
  is only for admin changes.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626609600">- Change to using systemd-sysusers
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Fix 50-default.rules file-parent-ownership-mismatch warning
- Remove --with-pic, no effect with --disable-static</changelog>
  <changelog author="meissner@suse.com" date="1634731200">- fork libpolkit0 package into libpolkit-agent-1-0 and libpolkit-gobject-1-0
  as mandated. bsc#1191781</changelog>
  <changelog author="dmueller@suse.com" date="1638792000">- update to 0.120:
  * transition from Intltool to gettext
  * several tarball, meson and pipeline fixups
  * Portuguese translation
  * Romanian translation
  * meson build system added
  * CVE-2021-3560 mitigation
  * properties in text listener
  * typos fixups
  * Update Hungarian translation
- drop CVE-2021-3560.patch  (upstream)</changelog>
  <changelog author="meissner@suse.com" date="1643112000">- Fixed pkexec Local Privilege Escalation aka pwnkit (CVE-2021-4034 bsc#1194568)
  CVE-2021-4034-pkexec-fix.patch</changelog>
  <changelog author="fvogt@suse.com" date="1643198400">- Switch from mozjs to duktape:
  * Add duktape-support.patch</changelog>
  <changelog author="meissner@suse.com" date="1645531200">- Fixed denial of service via file descriptor leak (bsc#1195542 CVE-2021-4115)
  0001-CVE-2021-4115-GHSL-2021-077-fix.patch</changelog>
  <changelog author="meissner@suse.com" date="1658145600">- split out pkexec into seperate package to make system hardening
  easier (to avoid installing it jsc#PED-132 jsc#PED-148).</changelog>
  <changelog author="meissner@suse.com" date="1659528000">- add split-provides for polkit:/usr/bin/pkexec. (bsc#1202070)</changelog>
  <changelog author="kukuk@suse.com" date="1659960000">- Use %_pam_vendordir</changelog>
  <changelog author="luc14n0@opensuse.org" date="1660046400">- Update to version 121:
  + Addition of duktape as a JS engine backend.
  + Other small fixes and improvements. For more details, visit:
    gitlab.freedesktop.org/polkit/polkit/-/blob/121/NEWS.md
  + Updated translations.
- Drop merged-upstream patches:
  + CVE-2021-4034-pkexec-fix.patch;
  + 0001-CVE-2021-4115-GHSL-2021-077-fix.patch;
  + duktape-support.patch;
  + pkexec.patch.
- Replace Intltool with Gettext as a build requirement following
  the migration from last release (0.120).
- Add Meson as a build requirement while dropping Libtool and
  replace all Autotools macros with Meson ones. And pass the
  following options to Meson: session_tracking=libsystemd-login;
  systemdsystemunitdir=%{_unitdir}; os_type=suse;
  pam_module_dir=%{_pam_moduledir}; pam_prefix=%{_pam_vendordir};
  examples=true; tests=true; gtk_doc=true; man=true and
  js_engine=duktape.
- Drop no longer needed Libtool as a build requirement, following
  Autotools replacement.
- Add explicit pkgconfig module build requirements for glib-2.0 and
  gobject-2.0 that are searched by the build scripts. They were
  already being pulled by their siblings [pkgconfig(gio-2.0) and
  pkgconfig(gio-unix-2.0)].
- Drop conditional macro, which was wrapping "BuildArch: noarch"
  for the doc subpackage, based on long gone EOLed (open)SUSE
  release (11.2).
- Add missing 'Requires(post): permissions' for the pkexec
  subpackage.
- Add python3-dbus-python and python3-python-dbusmock as build
  requirements in order to run test in the check section.
- Add polkit-fix-pam-prefix.patch to use the value of pam_prefix
  Meson option, like it was designed to, rather than hard-coded
  path for pam configuration files.
- Remove unneeded executable bit from 50-default.rules file.</changelog>
  <changelog author="meissner@suse.com" date="1663243200">- obsolete libpolkit0 also from baselibs.</changelog>
  <changelog author="jsegitz@suse.com" date="1680091200">- Change permissions for rules folders (bsc#1209282)</changelog>
</package>
<package pkgid="5fd478f6f1f5b0b8792c5cb07e1bdd820179ddaf88116adba1fa3909b81e98c1" name="ppp" arch="aarch64">
  <version epoch="0" ver="2.4.7" rel="150000.5.13.1"/>
  <changelog author="ledest@gmail.com" date="1416398400">- fix bashisms in redialer script
- add patches:
  * ppp-2.4.7-fix-bashisms.patch</changelog>
  <changelog author="max@suse.com" date="1447416000">- Added ppp-CVE-2015-3310.patch:
  Fix for bnc#927841, CVE-2015-3310: Fix buffer overflow in radius
  plug-in's rc_mksid().</changelog>
  <changelog author="schwab@suse.de" date="1476705600">- fix-header-conflict.patch: avoid conflict with kernel headers</changelog>
  <changelog author="max@suse.com" date="1481284800">- Use system-wide libatm instead of local copy (boo#1013567).</changelog>
  <changelog author="meissner@suse.com" date="1497096000">- ppp-2.4.2-pie.patch: also enable PIE for /usr/sbin/pppstats</changelog>
  <changelog author="kukuk@suse.com" date="1497355200">- Add /etc/ppp, this directory is no longer part of filesystem.
  Most likely requiring sysconfig would be necessary.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1511438400">- Add Requires group(dialout) (boo#1067511).</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1511524800">- Refresh spec-file via spec-cleaner.
- Add ppp-modem package for automatic redial to mobile provider.</changelog>
  <changelog author="max@suse.com" date="1581076800">- CVE-2020-8597, bsc#1162610, ppp-CVE-2020-8597.patch: rhostname
  buffer overflow in the eap_request and eap_response functions.</changelog>
  <changelog author="max@suse.com" date="1648728000">- bsc#1197799: Add ppp-2.4.7-DES-openssl.patch to fix build on
  SLE-15-SP3 and SP4.</changelog>
  <changelog author="max@suse.com" date="1703073600">- bsc#1218251, CVE-2022-4603, ppp-CVE-2022-4603.patch: improper
  validation of array index of the component pppdump.</changelog>
</package>
<package pkgid="1e0b97e9a9985569ff581d12b29c1e4fb102d12092c7fc42a9983397f31be8c0" name="ppp" arch="s390x">
  <version epoch="0" ver="2.4.7" rel="150000.5.13.1"/>
  <changelog author="ledest@gmail.com" date="1416398400">- fix bashisms in redialer script
- add patches:
  * ppp-2.4.7-fix-bashisms.patch</changelog>
  <changelog author="max@suse.com" date="1447416000">- Added ppp-CVE-2015-3310.patch:
  Fix for bnc#927841, CVE-2015-3310: Fix buffer overflow in radius
  plug-in's rc_mksid().</changelog>
  <changelog author="schwab@suse.de" date="1476705600">- fix-header-conflict.patch: avoid conflict with kernel headers</changelog>
  <changelog author="max@suse.com" date="1481284800">- Use system-wide libatm instead of local copy (boo#1013567).</changelog>
  <changelog author="meissner@suse.com" date="1497096000">- ppp-2.4.2-pie.patch: also enable PIE for /usr/sbin/pppstats</changelog>
  <changelog author="kukuk@suse.com" date="1497355200">- Add /etc/ppp, this directory is no longer part of filesystem.
  Most likely requiring sysconfig would be necessary.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1511438400">- Add Requires group(dialout) (boo#1067511).</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1511524800">- Refresh spec-file via spec-cleaner.
- Add ppp-modem package for automatic redial to mobile provider.</changelog>
  <changelog author="max@suse.com" date="1581076800">- CVE-2020-8597, bsc#1162610, ppp-CVE-2020-8597.patch: rhostname
  buffer overflow in the eap_request and eap_response functions.</changelog>
  <changelog author="max@suse.com" date="1648728000">- bsc#1197799: Add ppp-2.4.7-DES-openssl.patch to fix build on
  SLE-15-SP3 and SP4.</changelog>
  <changelog author="max@suse.com" date="1703073600">- bsc#1218251, CVE-2022-4603, ppp-CVE-2022-4603.patch: improper
  validation of array index of the component pppdump.</changelog>
</package>
<package pkgid="fbd40727e45265d28b3557057b8269c3a4f6202f245c074afefc34355c33f63a" name="ppp" arch="src">
  <version epoch="0" ver="2.4.7" rel="150000.5.13.1"/>
  <changelog author="aj@suse.de" date="1294228800">- Fix build of pppol2tp - remove local copy of if_pppol2tp.h
  that is out of sync with kernel definition.
- Remove ppp-makedevice.patch, it is obsolete.</changelog>
  <changelog author="coolo@novell.com" date="1294228801">- refresh patch</changelog>
  <changelog author="coolo@novell.com" date="1313150400">- remove extra dependencies from doc files</changelog>
  <changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
  <changelog author="cfarrell@suse.com" date="1362139200">- license update: BSD-3-Clause and LGPL-2.1+ and GPL-2.0+
  GPL-2.0 matches found in ppp-2.4.5/include/linux/if_pppol2tp.h</changelog>
  <changelog author="max@suse.com" date="1374667200">- ppp-send-padt.patch: Send PADT at the end of a PPPoE session.</changelog>
  <changelog author="max@suse.com" date="1378123200">- Add ppp-terminate-correct.patch, fix the pppd's hang after exit
  (bnc#693469).</changelog>
  <changelog author="aj@ajaissle.de" date="1395316800">- Update to 2.4.6
  + Man page updates.
  + Several bug fixes.
  + Options files can now set and unset environment variables for
    scripts.
  + The timeout for chat scripts can now be taken from an environment
    variable.
  + There is a new option, master_detach, which allows pppd to detach
    from the controlling terminal when it is the multilink bundle master
    but its own link has terminated, even if the nodetach option has
    been given.
- Removed the following patches;
  - ppp-2.4.2-logwtmp.diff -- now checks for HAVE_LOGWTMP
  - ppp-2.4.3-demand-fix.diff -- using 'status'
  - ppp-terminate-correct.patch -- upstream inclusion
- Rebased the following patches:
  * ppp-2.4.3-make.diff as ppp-2.4.6-make.diff
  * ppp-2.4.2-misc.diff as ppp-2.4.6-misc.diff
  * ppp-2.4.2-ifname.diff as ppp-2.4.6-ifname.diff
  * ppp-2.4.4-lib64.patch as ppp-2.4.6-lib64.patch
- Url changed to ppp.samba.org
- Use macros in spec file
- We dont need to cleanup the buildroot</changelog>
  <changelog author="max@suse.com" date="1408622400">- Update to 2.4.7:
  * Fixed a potential security issue in parsing option files
    (CVE-2014-3158, bnc#891489).
  * There is a new "stop-bits" option, which takes an argument of
    1 or 2, indicating the number of stop bits to use for async serial
    ports.
  * Various bug fixes.</changelog>
  <changelog author="ledest@gmail.com" date="1416398400">- fix bashisms in redialer script
- add patches:
  * ppp-2.4.7-fix-bashisms.patch</changelog>
  <changelog author="max@suse.com" date="1447416000">- Added ppp-CVE-2015-3310.patch:
  Fix for bnc#927841, CVE-2015-3310: Fix buffer overflow in radius
  plug-in's rc_mksid().</changelog>
  <changelog author="schwab@suse.de" date="1476705600">- fix-header-conflict.patch: avoid conflict with kernel headers</changelog>
  <changelog author="max@suse.com" date="1481284800">- Use system-wide libatm instead of local copy (boo#1013567).</changelog>
  <changelog author="meissner@suse.com" date="1497096000">- ppp-2.4.2-pie.patch: also enable PIE for /usr/sbin/pppstats</changelog>
  <changelog author="kukuk@suse.com" date="1497355200">- Add /etc/ppp, this directory is no longer part of filesystem.
  Most likely requiring sysconfig would be necessary.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1511438400">- Add Requires group(dialout) (boo#1067511).</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1511524800">- Refresh spec-file via spec-cleaner.
- Add ppp-modem package for automatic redial to mobile provider.</changelog>
  <changelog author="max@suse.com" date="1581076800">- CVE-2020-8597, bsc#1162610, ppp-CVE-2020-8597.patch: rhostname
  buffer overflow in the eap_request and eap_response functions.</changelog>
  <changelog author="max@suse.com" date="1648728000">- bsc#1197799: Add ppp-2.4.7-DES-openssl.patch to fix build on
  SLE-15-SP3 and SP4.</changelog>
  <changelog author="max@suse.com" date="1703073600">- bsc#1218251, CVE-2022-4603, ppp-CVE-2022-4603.patch: improper
  validation of array index of the component pppdump.</changelog>
</package>
<package pkgid="adc806b7ba73104dece500e155e383e6ee57756389c6ceded5fb814505a8416d" name="ppp" arch="x86_64">
  <version epoch="0" ver="2.4.7" rel="150000.5.13.1"/>
  <changelog author="ledest@gmail.com" date="1416398400">- fix bashisms in redialer script
- add patches:
  * ppp-2.4.7-fix-bashisms.patch</changelog>
  <changelog author="max@suse.com" date="1447416000">- Added ppp-CVE-2015-3310.patch:
  Fix for bnc#927841, CVE-2015-3310: Fix buffer overflow in radius
  plug-in's rc_mksid().</changelog>
  <changelog author="schwab@suse.de" date="1476705600">- fix-header-conflict.patch: avoid conflict with kernel headers</changelog>
  <changelog author="max@suse.com" date="1481284800">- Use system-wide libatm instead of local copy (boo#1013567).</changelog>
  <changelog author="meissner@suse.com" date="1497096000">- ppp-2.4.2-pie.patch: also enable PIE for /usr/sbin/pppstats</changelog>
  <changelog author="kukuk@suse.com" date="1497355200">- Add /etc/ppp, this directory is no longer part of filesystem.
  Most likely requiring sysconfig would be necessary.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1511438400">- Add Requires group(dialout) (boo#1067511).</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1511524800">- Refresh spec-file via spec-cleaner.
- Add ppp-modem package for automatic redial to mobile provider.</changelog>
  <changelog author="max@suse.com" date="1581076800">- CVE-2020-8597, bsc#1162610, ppp-CVE-2020-8597.patch: rhostname
  buffer overflow in the eap_request and eap_response functions.</changelog>
  <changelog author="max@suse.com" date="1648728000">- bsc#1197799: Add ppp-2.4.7-DES-openssl.patch to fix build on
  SLE-15-SP3 and SP4.</changelog>
  <changelog author="max@suse.com" date="1703073600">- bsc#1218251, CVE-2022-4603, ppp-CVE-2022-4603.patch: improper
  validation of array index of the component pppdump.</changelog>
</package>
<package pkgid="2abfdd2efbe0404dbbef5aeedc82097b65d683cca64ac7c2196fa0c7b56b9e26" name="procps" arch="aarch64">
  <version epoch="0" ver="3.3.17" rel="150000.7.37.1"/>
  <changelog author="mliska@suse.cz" date="1602072000">- Add upstream procps-check-sanity-of-SC_ARG_MAX.patch in order to fix
  pgrep: cannot allocate 4611686018427387903 bytes when ulimit -s is unlimited.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612267200">- Package translations in procps-lang.</changelog>
  <changelog author="werner@suse.de" date="1612958400">- Update to procps-ng-3.3.17
  * library: Incremented to 8:3:0
    (no removals or additions, internal changes only)
  * all: properly handle utf8 cmdline translations         issue #176
  * kill: Pass int to signalled process                    merge #32
  * pgrep: Pass int to signalled process                   merge #32
  * pgrep: Check sanity of SG_ARG_MAX                      issue #152
  * pgrep: Add older than selection                        merge #79
  * pidof: Quiet mode                                      merge #83
  * pidof: show worker threads                             Redhat #1803640
  * ps.1: Mention stime alias                              issue #164
  * ps: check also match on truncated 16 char comm names
  * ps: Add exe output option                              Redhat #1399206
  * ps: A lot more sorting available                       merge #99
  * pwait: New command waits for a process                 merge #97
  * sysctl: Match systemd directory order                  Debian #950788
  * sysctl: Document directory order                       Debian #951550
  * top: ensure config file backward compatibility         Debian #951335
  * top: add command line 'e' for symmetry with 'E'        issue #165
  * top: add '4' toggle for two abreast cpu display        issue #172
  * top: add '!' toggle for combining multiple cpus
  * top: fix potential SEGV involving -p switch            merge #114
  * vmstat: Wide mode gives wider proc columns             merge #48
  * watch: Add environment variable for interval           merge #62
  * watch: Add no linewrap option                          issue #182
  * watch: Support more colors                             merge #106,#109
  * free,uptime,slabtop: complain about extra ops          issue #181
- Remove now obsolete upstream patches
  * procps-check-sanity-of-SC_ARG_MAX.patch
  * procps-ng-3e1c00d0.patch
- Port patches
  * procps-ng-3.3.10-integer-overflow.patch
  * procps-ng-3.3.10-large_pcpu.patch
  * procps-ng-3.3.8-accuracy.dif
  * procps-ng-3.3.8-bnc634840.patch
  * procps-ng-3.3.8-petabytes.patch
  * procps-ng-3.3.8-tinfo.dif
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612958401">- Fix directory for Ukrainian man pages translations.
- Move localized man pages to lang package.
- Remove obsolete conditionals.
- Remove obsolete --enable-oomem option.
- Run spec-cleaner.</changelog>
  <changelog author="werner@suse.de" date="1613044800">- Add /usr/share/man/uk dir to file list for lang sub package</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1613995200">- Remove /usr/share/man/uk dir to file list for lang sub package:
  It's now provided by filesystem.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1615377600">- Don't install translated man pages for non-installed binaries
  (uptime, kill).</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1625227200">- Skip test suite on emulated riscv64 systems as the qemu process
  is unexpected on the command lines of processes</changelog>
  <changelog author="werner@suse.de" date="1642680000">- Correct used URLs</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Some older products do not know about /usr/share/man/uk</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="werner@suse.de" date="1692100800">- Add patch CVE-2023-4016.patch
  * CVE-2023-4016: ps buffer overflow (bsc#1214290)</changelog>
  <changelog author="kukuk@suse.com" date="1692187200">- procps-ng-3.3.17-logind.patch: Backport from 4.x git, prefer
  logind over utmp (jsc#PED-3144)</changelog>
  <changelog author="werner@suse.de" date="1692360000">- Modify patches
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-ng-3.3.17-logind.patch
  to real to not truncate output of w with option -n</changelog>
  <changelog author="werner@suse.de" date="1695211200">- Submit latest procps 3.3.17 to SLE-15 tree for jira#PED-3244
  and jira#PED-6369
- The patches now upstream had been dropped meanwhile
  * procps-vmstat-1b9ea611.patch (bsc#1185417)
  - For support up to 2048 CPU as well
  * bsc1209122-a6c0795d.patch (bnc#1209122)
  - allow `-´ as leading character to ignore possible errors
    on systctl entries
  * patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753)
  - was a backport of an upstream fix to get the first CPU
    summary correct
- Enable pidof for SLE-15 as this is provided by sysvinit-tools
- Use a check on syscall __NR_pidfd_open to decide if
  the pwait tool and its manual page will be build</changelog>
</package>
<package pkgid="1635fb05c9843f06e08d1d9cca2bd45d8b9775ba32ff75a79d45d95d2d81ee18" name="procps" arch="s390x">
  <version epoch="0" ver="3.3.17" rel="150000.7.37.1"/>
  <changelog author="mliska@suse.cz" date="1602072000">- Add upstream procps-check-sanity-of-SC_ARG_MAX.patch in order to fix
  pgrep: cannot allocate 4611686018427387903 bytes when ulimit -s is unlimited.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612267200">- Package translations in procps-lang.</changelog>
  <changelog author="werner@suse.de" date="1612958400">- Update to procps-ng-3.3.17
  * library: Incremented to 8:3:0
    (no removals or additions, internal changes only)
  * all: properly handle utf8 cmdline translations         issue #176
  * kill: Pass int to signalled process                    merge #32
  * pgrep: Pass int to signalled process                   merge #32
  * pgrep: Check sanity of SG_ARG_MAX                      issue #152
  * pgrep: Add older than selection                        merge #79
  * pidof: Quiet mode                                      merge #83
  * pidof: show worker threads                             Redhat #1803640
  * ps.1: Mention stime alias                              issue #164
  * ps: check also match on truncated 16 char comm names
  * ps: Add exe output option                              Redhat #1399206
  * ps: A lot more sorting available                       merge #99
  * pwait: New command waits for a process                 merge #97
  * sysctl: Match systemd directory order                  Debian #950788
  * sysctl: Document directory order                       Debian #951550
  * top: ensure config file backward compatibility         Debian #951335
  * top: add command line 'e' for symmetry with 'E'        issue #165
  * top: add '4' toggle for two abreast cpu display        issue #172
  * top: add '!' toggle for combining multiple cpus
  * top: fix potential SEGV involving -p switch            merge #114
  * vmstat: Wide mode gives wider proc columns             merge #48
  * watch: Add environment variable for interval           merge #62
  * watch: Add no linewrap option                          issue #182
  * watch: Support more colors                             merge #106,#109
  * free,uptime,slabtop: complain about extra ops          issue #181
- Remove now obsolete upstream patches
  * procps-check-sanity-of-SC_ARG_MAX.patch
  * procps-ng-3e1c00d0.patch
- Port patches
  * procps-ng-3.3.10-integer-overflow.patch
  * procps-ng-3.3.10-large_pcpu.patch
  * procps-ng-3.3.8-accuracy.dif
  * procps-ng-3.3.8-bnc634840.patch
  * procps-ng-3.3.8-petabytes.patch
  * procps-ng-3.3.8-tinfo.dif
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612958401">- Fix directory for Ukrainian man pages translations.
- Move localized man pages to lang package.
- Remove obsolete conditionals.
- Remove obsolete --enable-oomem option.
- Run spec-cleaner.</changelog>
  <changelog author="werner@suse.de" date="1613044800">- Add /usr/share/man/uk dir to file list for lang sub package</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1613995200">- Remove /usr/share/man/uk dir to file list for lang sub package:
  It's now provided by filesystem.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1615377600">- Don't install translated man pages for non-installed binaries
  (uptime, kill).</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1625227200">- Skip test suite on emulated riscv64 systems as the qemu process
  is unexpected on the command lines of processes</changelog>
  <changelog author="werner@suse.de" date="1642680000">- Correct used URLs</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Some older products do not know about /usr/share/man/uk</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="werner@suse.de" date="1692100800">- Add patch CVE-2023-4016.patch
  * CVE-2023-4016: ps buffer overflow (bsc#1214290)</changelog>
  <changelog author="kukuk@suse.com" date="1692187200">- procps-ng-3.3.17-logind.patch: Backport from 4.x git, prefer
  logind over utmp (jsc#PED-3144)</changelog>
  <changelog author="werner@suse.de" date="1692360000">- Modify patches
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-ng-3.3.17-logind.patch
  to real to not truncate output of w with option -n</changelog>
  <changelog author="werner@suse.de" date="1695211200">- Submit latest procps 3.3.17 to SLE-15 tree for jira#PED-3244
  and jira#PED-6369
- The patches now upstream had been dropped meanwhile
  * procps-vmstat-1b9ea611.patch (bsc#1185417)
  - For support up to 2048 CPU as well
  * bsc1209122-a6c0795d.patch (bnc#1209122)
  - allow `-´ as leading character to ignore possible errors
    on systctl entries
  * patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753)
  - was a backport of an upstream fix to get the first CPU
    summary correct
- Enable pidof for SLE-15 as this is provided by sysvinit-tools
- Use a check on syscall __NR_pidfd_open to decide if
  the pwait tool and its manual page will be build</changelog>
</package>
<package pkgid="e2189f2198af7034ccdd2076095e87e3818ec279c084b1aae6104e90022f8ba3" name="procps" arch="src">
  <version epoch="0" ver="3.3.17" rel="150000.7.37.1"/>
  <changelog author="mliska@suse.cz" date="1602072000">- Add upstream procps-check-sanity-of-SC_ARG_MAX.patch in order to fix
  pgrep: cannot allocate 4611686018427387903 bytes when ulimit -s is unlimited.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612267200">- Package translations in procps-lang.</changelog>
  <changelog author="werner@suse.de" date="1612958400">- Update to procps-ng-3.3.17
  * library: Incremented to 8:3:0
    (no removals or additions, internal changes only)
  * all: properly handle utf8 cmdline translations         issue #176
  * kill: Pass int to signalled process                    merge #32
  * pgrep: Pass int to signalled process                   merge #32
  * pgrep: Check sanity of SG_ARG_MAX                      issue #152
  * pgrep: Add older than selection                        merge #79
  * pidof: Quiet mode                                      merge #83
  * pidof: show worker threads                             Redhat #1803640
  * ps.1: Mention stime alias                              issue #164
  * ps: check also match on truncated 16 char comm names
  * ps: Add exe output option                              Redhat #1399206
  * ps: A lot more sorting available                       merge #99
  * pwait: New command waits for a process                 merge #97
  * sysctl: Match systemd directory order                  Debian #950788
  * sysctl: Document directory order                       Debian #951550
  * top: ensure config file backward compatibility         Debian #951335
  * top: add command line 'e' for symmetry with 'E'        issue #165
  * top: add '4' toggle for two abreast cpu display        issue #172
  * top: add '!' toggle for combining multiple cpus
  * top: fix potential SEGV involving -p switch            merge #114
  * vmstat: Wide mode gives wider proc columns             merge #48
  * watch: Add environment variable for interval           merge #62
  * watch: Add no linewrap option                          issue #182
  * watch: Support more colors                             merge #106,#109
  * free,uptime,slabtop: complain about extra ops          issue #181
- Remove now obsolete upstream patches
  * procps-check-sanity-of-SC_ARG_MAX.patch
  * procps-ng-3e1c00d0.patch
- Port patches
  * procps-ng-3.3.10-integer-overflow.patch
  * procps-ng-3.3.10-large_pcpu.patch
  * procps-ng-3.3.8-accuracy.dif
  * procps-ng-3.3.8-bnc634840.patch
  * procps-ng-3.3.8-petabytes.patch
  * procps-ng-3.3.8-tinfo.dif
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612958401">- Fix directory for Ukrainian man pages translations.
- Move localized man pages to lang package.
- Remove obsolete conditionals.
- Remove obsolete --enable-oomem option.
- Run spec-cleaner.</changelog>
  <changelog author="werner@suse.de" date="1613044800">- Add /usr/share/man/uk dir to file list for lang sub package</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1613995200">- Remove /usr/share/man/uk dir to file list for lang sub package:
  It's now provided by filesystem.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1615377600">- Don't install translated man pages for non-installed binaries
  (uptime, kill).</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1625227200">- Skip test suite on emulated riscv64 systems as the qemu process
  is unexpected on the command lines of processes</changelog>
  <changelog author="werner@suse.de" date="1642680000">- Correct used URLs</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Some older products do not know about /usr/share/man/uk</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="werner@suse.de" date="1692100800">- Add patch CVE-2023-4016.patch
  * CVE-2023-4016: ps buffer overflow (bsc#1214290)</changelog>
  <changelog author="kukuk@suse.com" date="1692187200">- procps-ng-3.3.17-logind.patch: Backport from 4.x git, prefer
  logind over utmp (jsc#PED-3144)</changelog>
  <changelog author="werner@suse.de" date="1692360000">- Modify patches
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-ng-3.3.17-logind.patch
  to real to not truncate output of w with option -n</changelog>
  <changelog author="werner@suse.de" date="1695211200">- Submit latest procps 3.3.17 to SLE-15 tree for jira#PED-3244
  and jira#PED-6369
- The patches now upstream had been dropped meanwhile
  * procps-vmstat-1b9ea611.patch (bsc#1185417)
  - For support up to 2048 CPU as well
  * bsc1209122-a6c0795d.patch (bnc#1209122)
  - allow `-´ as leading character to ignore possible errors
    on systctl entries
  * patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753)
  - was a backport of an upstream fix to get the first CPU
    summary correct
- Enable pidof for SLE-15 as this is provided by sysvinit-tools
- Use a check on syscall __NR_pidfd_open to decide if
  the pwait tool and its manual page will be build</changelog>
</package>
<package pkgid="ec3b00c5c38b8dcc8e6d48cf96f7a2e74deddb1091548ea77e14bfd9e79c1936" name="procps" arch="x86_64">
  <version epoch="0" ver="3.3.17" rel="150000.7.37.1"/>
  <changelog author="mliska@suse.cz" date="1602072000">- Add upstream procps-check-sanity-of-SC_ARG_MAX.patch in order to fix
  pgrep: cannot allocate 4611686018427387903 bytes when ulimit -s is unlimited.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612267200">- Package translations in procps-lang.</changelog>
  <changelog author="werner@suse.de" date="1612958400">- Update to procps-ng-3.3.17
  * library: Incremented to 8:3:0
    (no removals or additions, internal changes only)
  * all: properly handle utf8 cmdline translations         issue #176
  * kill: Pass int to signalled process                    merge #32
  * pgrep: Pass int to signalled process                   merge #32
  * pgrep: Check sanity of SG_ARG_MAX                      issue #152
  * pgrep: Add older than selection                        merge #79
  * pidof: Quiet mode                                      merge #83
  * pidof: show worker threads                             Redhat #1803640
  * ps.1: Mention stime alias                              issue #164
  * ps: check also match on truncated 16 char comm names
  * ps: Add exe output option                              Redhat #1399206
  * ps: A lot more sorting available                       merge #99
  * pwait: New command waits for a process                 merge #97
  * sysctl: Match systemd directory order                  Debian #950788
  * sysctl: Document directory order                       Debian #951550
  * top: ensure config file backward compatibility         Debian #951335
  * top: add command line 'e' for symmetry with 'E'        issue #165
  * top: add '4' toggle for two abreast cpu display        issue #172
  * top: add '!' toggle for combining multiple cpus
  * top: fix potential SEGV involving -p switch            merge #114
  * vmstat: Wide mode gives wider proc columns             merge #48
  * watch: Add environment variable for interval           merge #62
  * watch: Add no linewrap option                          issue #182
  * watch: Support more colors                             merge #106,#109
  * free,uptime,slabtop: complain about extra ops          issue #181
- Remove now obsolete upstream patches
  * procps-check-sanity-of-SC_ARG_MAX.patch
  * procps-ng-3e1c00d0.patch
- Port patches
  * procps-ng-3.3.10-integer-overflow.patch
  * procps-ng-3.3.10-large_pcpu.patch
  * procps-ng-3.3.8-accuracy.dif
  * procps-ng-3.3.8-bnc634840.patch
  * procps-ng-3.3.8-petabytes.patch
  * procps-ng-3.3.8-tinfo.dif
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612958401">- Fix directory for Ukrainian man pages translations.
- Move localized man pages to lang package.
- Remove obsolete conditionals.
- Remove obsolete --enable-oomem option.
- Run spec-cleaner.</changelog>
  <changelog author="werner@suse.de" date="1613044800">- Add /usr/share/man/uk dir to file list for lang sub package</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1613995200">- Remove /usr/share/man/uk dir to file list for lang sub package:
  It's now provided by filesystem.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1615377600">- Don't install translated man pages for non-installed binaries
  (uptime, kill).</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1625227200">- Skip test suite on emulated riscv64 systems as the qemu process
  is unexpected on the command lines of processes</changelog>
  <changelog author="werner@suse.de" date="1642680000">- Correct used URLs</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Some older products do not know about /usr/share/man/uk</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="werner@suse.de" date="1692100800">- Add patch CVE-2023-4016.patch
  * CVE-2023-4016: ps buffer overflow (bsc#1214290)</changelog>
  <changelog author="kukuk@suse.com" date="1692187200">- procps-ng-3.3.17-logind.patch: Backport from 4.x git, prefer
  logind over utmp (jsc#PED-3144)</changelog>
  <changelog author="werner@suse.de" date="1692360000">- Modify patches
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-ng-3.3.17-logind.patch
  to real to not truncate output of w with option -n</changelog>
  <changelog author="werner@suse.de" date="1695211200">- Submit latest procps 3.3.17 to SLE-15 tree for jira#PED-3244
  and jira#PED-6369
- The patches now upstream had been dropped meanwhile
  * procps-vmstat-1b9ea611.patch (bsc#1185417)
  - For support up to 2048 CPU as well
  * bsc1209122-a6c0795d.patch (bnc#1209122)
  - allow `-´ as leading character to ignore possible errors
    on systctl entries
  * patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753)
  - was a backport of an upstream fix to get the first CPU
    summary correct
- Enable pidof for SLE-15 as this is provided by sysvinit-tools
- Use a check on syscall __NR_pidfd_open to decide if
  the pwait tool and its manual page will be build</changelog>
</package>
<package pkgid="49469b5ce33232da1fe274ebbd8ce45202630285ebedb9cf5db74fc324b632c7" name="procps" arch="aarch64">
  <version epoch="0" ver="3.3.17" rel="150000.7.39.1"/>
  <changelog author="mliska@suse.cz" date="1602072000">- Add upstream procps-check-sanity-of-SC_ARG_MAX.patch in order to fix
  pgrep: cannot allocate 4611686018427387903 bytes when ulimit -s is unlimited.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612267200">- Package translations in procps-lang.</changelog>
  <changelog author="werner@suse.de" date="1612958400">- Update to procps-ng-3.3.17
  * library: Incremented to 8:3:0
    (no removals or additions, internal changes only)
  * all: properly handle utf8 cmdline translations         issue #176
  * kill: Pass int to signalled process                    merge #32
  * pgrep: Pass int to signalled process                   merge #32
  * pgrep: Check sanity of SG_ARG_MAX                      issue #152
  * pgrep: Add older than selection                        merge #79
  * pidof: Quiet mode                                      merge #83
  * pidof: show worker threads                             Redhat #1803640
  * ps.1: Mention stime alias                              issue #164
  * ps: check also match on truncated 16 char comm names
  * ps: Add exe output option                              Redhat #1399206
  * ps: A lot more sorting available                       merge #99
  * pwait: New command waits for a process                 merge #97
  * sysctl: Match systemd directory order                  Debian #950788
  * sysctl: Document directory order                       Debian #951550
  * top: ensure config file backward compatibility         Debian #951335
  * top: add command line 'e' for symmetry with 'E'        issue #165
  * top: add '4' toggle for two abreast cpu display        issue #172
  * top: add '!' toggle for combining multiple cpus
  * top: fix potential SEGV involving -p switch            merge #114
  * vmstat: Wide mode gives wider proc columns             merge #48
  * watch: Add environment variable for interval           merge #62
  * watch: Add no linewrap option                          issue #182
  * watch: Support more colors                             merge #106,#109
  * free,uptime,slabtop: complain about extra ops          issue #181
- Remove now obsolete upstream patches
  * procps-check-sanity-of-SC_ARG_MAX.patch
  * procps-ng-3e1c00d0.patch
- Port patches
  * procps-ng-3.3.10-integer-overflow.patch
  * procps-ng-3.3.10-large_pcpu.patch
  * procps-ng-3.3.8-accuracy.dif
  * procps-ng-3.3.8-bnc634840.patch
  * procps-ng-3.3.8-petabytes.patch
  * procps-ng-3.3.8-tinfo.dif
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612958401">- Fix directory for Ukrainian man pages translations.
- Move localized man pages to lang package.
- Remove obsolete conditionals.
- Remove obsolete --enable-oomem option.
- Run spec-cleaner.</changelog>
  <changelog author="werner@suse.de" date="1613044800">- Add /usr/share/man/uk dir to file list for lang sub package</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1613995200">- Remove /usr/share/man/uk dir to file list for lang sub package:
  It's now provided by filesystem.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1615377600">- Don't install translated man pages for non-installed binaries
  (uptime, kill).</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1625227200">- Skip test suite on emulated riscv64 systems as the qemu process
  is unexpected on the command lines of processes</changelog>
  <changelog author="werner@suse.de" date="1642680000">- Correct used URLs</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Some older products do not know about /usr/share/man/uk</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="werner@suse.de" date="1692100800">- Add patch CVE-2023-4016.patch
  * CVE-2023-4016: ps buffer overflow (bsc#1214290)</changelog>
  <changelog author="kukuk@suse.com" date="1692187200">- procps-ng-3.3.17-logind.patch: Backport from 4.x git, prefer
  logind over utmp (jsc#PED-3144)</changelog>
  <changelog author="werner@suse.de" date="1692360000">- Modify patches
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-ng-3.3.17-logind.patch
  to real to not truncate output of w with option -n</changelog>
  <changelog author="werner@suse.de" date="1695211200">- Submit latest procps 3.3.17 to SLE-15 tree for jira#PED-3244
  and jira#PED-6369
- The patches now upstream had been dropped meanwhile
  * procps-vmstat-1b9ea611.patch (bsc#1185417)
  - For support up to 2048 CPU as well
  * bsc1209122-a6c0795d.patch (bnc#1209122)
  - allow `-´ as leading character to ignore possible errors
    on systctl entries
  * patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753)
  - was a backport of an upstream fix to get the first CPU
    summary correct
- Enable pidof for SLE-15 as this is provided by sysvinit-tools
- Use a check on syscall __NR_pidfd_open to decide if
  the pwait tool and its manual page will be build</changelog>
</package>
<package pkgid="59ab7214625ebc1c7a904c6fe62ec4101e21595353258178baeedd3fbe8659e0" name="procps" arch="s390x">
  <version epoch="0" ver="3.3.17" rel="150000.7.39.1"/>
  <changelog author="mliska@suse.cz" date="1602072000">- Add upstream procps-check-sanity-of-SC_ARG_MAX.patch in order to fix
  pgrep: cannot allocate 4611686018427387903 bytes when ulimit -s is unlimited.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612267200">- Package translations in procps-lang.</changelog>
  <changelog author="werner@suse.de" date="1612958400">- Update to procps-ng-3.3.17
  * library: Incremented to 8:3:0
    (no removals or additions, internal changes only)
  * all: properly handle utf8 cmdline translations         issue #176
  * kill: Pass int to signalled process                    merge #32
  * pgrep: Pass int to signalled process                   merge #32
  * pgrep: Check sanity of SG_ARG_MAX                      issue #152
  * pgrep: Add older than selection                        merge #79
  * pidof: Quiet mode                                      merge #83
  * pidof: show worker threads                             Redhat #1803640
  * ps.1: Mention stime alias                              issue #164
  * ps: check also match on truncated 16 char comm names
  * ps: Add exe output option                              Redhat #1399206
  * ps: A lot more sorting available                       merge #99
  * pwait: New command waits for a process                 merge #97
  * sysctl: Match systemd directory order                  Debian #950788
  * sysctl: Document directory order                       Debian #951550
  * top: ensure config file backward compatibility         Debian #951335
  * top: add command line 'e' for symmetry with 'E'        issue #165
  * top: add '4' toggle for two abreast cpu display        issue #172
  * top: add '!' toggle for combining multiple cpus
  * top: fix potential SEGV involving -p switch            merge #114
  * vmstat: Wide mode gives wider proc columns             merge #48
  * watch: Add environment variable for interval           merge #62
  * watch: Add no linewrap option                          issue #182
  * watch: Support more colors                             merge #106,#109
  * free,uptime,slabtop: complain about extra ops          issue #181
- Remove now obsolete upstream patches
  * procps-check-sanity-of-SC_ARG_MAX.patch
  * procps-ng-3e1c00d0.patch
- Port patches
  * procps-ng-3.3.10-integer-overflow.patch
  * procps-ng-3.3.10-large_pcpu.patch
  * procps-ng-3.3.8-accuracy.dif
  * procps-ng-3.3.8-bnc634840.patch
  * procps-ng-3.3.8-petabytes.patch
  * procps-ng-3.3.8-tinfo.dif
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612958401">- Fix directory for Ukrainian man pages translations.
- Move localized man pages to lang package.
- Remove obsolete conditionals.
- Remove obsolete --enable-oomem option.
- Run spec-cleaner.</changelog>
  <changelog author="werner@suse.de" date="1613044800">- Add /usr/share/man/uk dir to file list for lang sub package</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1613995200">- Remove /usr/share/man/uk dir to file list for lang sub package:
  It's now provided by filesystem.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1615377600">- Don't install translated man pages for non-installed binaries
  (uptime, kill).</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1625227200">- Skip test suite on emulated riscv64 systems as the qemu process
  is unexpected on the command lines of processes</changelog>
  <changelog author="werner@suse.de" date="1642680000">- Correct used URLs</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Some older products do not know about /usr/share/man/uk</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="werner@suse.de" date="1692100800">- Add patch CVE-2023-4016.patch
  * CVE-2023-4016: ps buffer overflow (bsc#1214290)</changelog>
  <changelog author="kukuk@suse.com" date="1692187200">- procps-ng-3.3.17-logind.patch: Backport from 4.x git, prefer
  logind over utmp (jsc#PED-3144)</changelog>
  <changelog author="werner@suse.de" date="1692360000">- Modify patches
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-ng-3.3.17-logind.patch
  to real to not truncate output of w with option -n</changelog>
  <changelog author="werner@suse.de" date="1695211200">- Submit latest procps 3.3.17 to SLE-15 tree for jira#PED-3244
  and jira#PED-6369
- The patches now upstream had been dropped meanwhile
  * procps-vmstat-1b9ea611.patch (bsc#1185417)
  - For support up to 2048 CPU as well
  * bsc1209122-a6c0795d.patch (bnc#1209122)
  - allow `-´ as leading character to ignore possible errors
    on systctl entries
  * patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753)
  - was a backport of an upstream fix to get the first CPU
    summary correct
- Enable pidof for SLE-15 as this is provided by sysvinit-tools
- Use a check on syscall __NR_pidfd_open to decide if
  the pwait tool and its manual page will be build</changelog>
</package>
<package pkgid="5be325a4e0f31d7d877a1da96eaa02aa8e41aac5e36e1bc4ab546f4fd1948540" name="procps" arch="src">
  <version epoch="0" ver="3.3.17" rel="150000.7.39.1"/>
  <changelog author="mliska@suse.cz" date="1602072000">- Add upstream procps-check-sanity-of-SC_ARG_MAX.patch in order to fix
  pgrep: cannot allocate 4611686018427387903 bytes when ulimit -s is unlimited.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612267200">- Package translations in procps-lang.</changelog>
  <changelog author="werner@suse.de" date="1612958400">- Update to procps-ng-3.3.17
  * library: Incremented to 8:3:0
    (no removals or additions, internal changes only)
  * all: properly handle utf8 cmdline translations         issue #176
  * kill: Pass int to signalled process                    merge #32
  * pgrep: Pass int to signalled process                   merge #32
  * pgrep: Check sanity of SG_ARG_MAX                      issue #152
  * pgrep: Add older than selection                        merge #79
  * pidof: Quiet mode                                      merge #83
  * pidof: show worker threads                             Redhat #1803640
  * ps.1: Mention stime alias                              issue #164
  * ps: check also match on truncated 16 char comm names
  * ps: Add exe output option                              Redhat #1399206
  * ps: A lot more sorting available                       merge #99
  * pwait: New command waits for a process                 merge #97
  * sysctl: Match systemd directory order                  Debian #950788
  * sysctl: Document directory order                       Debian #951550
  * top: ensure config file backward compatibility         Debian #951335
  * top: add command line 'e' for symmetry with 'E'        issue #165
  * top: add '4' toggle for two abreast cpu display        issue #172
  * top: add '!' toggle for combining multiple cpus
  * top: fix potential SEGV involving -p switch            merge #114
  * vmstat: Wide mode gives wider proc columns             merge #48
  * watch: Add environment variable for interval           merge #62
  * watch: Add no linewrap option                          issue #182
  * watch: Support more colors                             merge #106,#109
  * free,uptime,slabtop: complain about extra ops          issue #181
- Remove now obsolete upstream patches
  * procps-check-sanity-of-SC_ARG_MAX.patch
  * procps-ng-3e1c00d0.patch
- Port patches
  * procps-ng-3.3.10-integer-overflow.patch
  * procps-ng-3.3.10-large_pcpu.patch
  * procps-ng-3.3.8-accuracy.dif
  * procps-ng-3.3.8-bnc634840.patch
  * procps-ng-3.3.8-petabytes.patch
  * procps-ng-3.3.8-tinfo.dif
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612958401">- Fix directory for Ukrainian man pages translations.
- Move localized man pages to lang package.
- Remove obsolete conditionals.
- Remove obsolete --enable-oomem option.
- Run spec-cleaner.</changelog>
  <changelog author="werner@suse.de" date="1613044800">- Add /usr/share/man/uk dir to file list for lang sub package</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1613995200">- Remove /usr/share/man/uk dir to file list for lang sub package:
  It's now provided by filesystem.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1615377600">- Don't install translated man pages for non-installed binaries
  (uptime, kill).</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1625227200">- Skip test suite on emulated riscv64 systems as the qemu process
  is unexpected on the command lines of processes</changelog>
  <changelog author="werner@suse.de" date="1642680000">- Correct used URLs</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Some older products do not know about /usr/share/man/uk</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="werner@suse.de" date="1692100800">- Add patch CVE-2023-4016.patch
  * CVE-2023-4016: ps buffer overflow (bsc#1214290)</changelog>
  <changelog author="kukuk@suse.com" date="1692187200">- procps-ng-3.3.17-logind.patch: Backport from 4.x git, prefer
  logind over utmp (jsc#PED-3144)</changelog>
  <changelog author="werner@suse.de" date="1692360000">- Modify patches
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-ng-3.3.17-logind.patch
  to real to not truncate output of w with option -n</changelog>
  <changelog author="werner@suse.de" date="1695211200">- Submit latest procps 3.3.17 to SLE-15 tree for jira#PED-3244
  and jira#PED-6369
- The patches now upstream had been dropped meanwhile
  * procps-vmstat-1b9ea611.patch (bsc#1185417)
  - For support up to 2048 CPU as well
  * bsc1209122-a6c0795d.patch (bnc#1209122)
  - allow `-´ as leading character to ignore possible errors
    on systctl entries
  * patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753)
  - was a backport of an upstream fix to get the first CPU
    summary correct
- Enable pidof for SLE-15 as this is provided by sysvinit-tools
- Use a check on syscall __NR_pidfd_open to decide if
  the pwait tool and its manual page will be build</changelog>
</package>
<package pkgid="f46abab4899f4177d608363d838121ec65b6f6fc1b94aab88cf2f969cce933a2" name="procps" arch="x86_64">
  <version epoch="0" ver="3.3.17" rel="150000.7.39.1"/>
  <changelog author="mliska@suse.cz" date="1602072000">- Add upstream procps-check-sanity-of-SC_ARG_MAX.patch in order to fix
  pgrep: cannot allocate 4611686018427387903 bytes when ulimit -s is unlimited.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612267200">- Package translations in procps-lang.</changelog>
  <changelog author="werner@suse.de" date="1612958400">- Update to procps-ng-3.3.17
  * library: Incremented to 8:3:0
    (no removals or additions, internal changes only)
  * all: properly handle utf8 cmdline translations         issue #176
  * kill: Pass int to signalled process                    merge #32
  * pgrep: Pass int to signalled process                   merge #32
  * pgrep: Check sanity of SG_ARG_MAX                      issue #152
  * pgrep: Add older than selection                        merge #79
  * pidof: Quiet mode                                      merge #83
  * pidof: show worker threads                             Redhat #1803640
  * ps.1: Mention stime alias                              issue #164
  * ps: check also match on truncated 16 char comm names
  * ps: Add exe output option                              Redhat #1399206
  * ps: A lot more sorting available                       merge #99
  * pwait: New command waits for a process                 merge #97
  * sysctl: Match systemd directory order                  Debian #950788
  * sysctl: Document directory order                       Debian #951550
  * top: ensure config file backward compatibility         Debian #951335
  * top: add command line 'e' for symmetry with 'E'        issue #165
  * top: add '4' toggle for two abreast cpu display        issue #172
  * top: add '!' toggle for combining multiple cpus
  * top: fix potential SEGV involving -p switch            merge #114
  * vmstat: Wide mode gives wider proc columns             merge #48
  * watch: Add environment variable for interval           merge #62
  * watch: Add no linewrap option                          issue #182
  * watch: Support more colors                             merge #106,#109
  * free,uptime,slabtop: complain about extra ops          issue #181
- Remove now obsolete upstream patches
  * procps-check-sanity-of-SC_ARG_MAX.patch
  * procps-ng-3e1c00d0.patch
- Port patches
  * procps-ng-3.3.10-integer-overflow.patch
  * procps-ng-3.3.10-large_pcpu.patch
  * procps-ng-3.3.8-accuracy.dif
  * procps-ng-3.3.8-bnc634840.patch
  * procps-ng-3.3.8-petabytes.patch
  * procps-ng-3.3.8-tinfo.dif
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612958401">- Fix directory for Ukrainian man pages translations.
- Move localized man pages to lang package.
- Remove obsolete conditionals.
- Remove obsolete --enable-oomem option.
- Run spec-cleaner.</changelog>
  <changelog author="werner@suse.de" date="1613044800">- Add /usr/share/man/uk dir to file list for lang sub package</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1613995200">- Remove /usr/share/man/uk dir to file list for lang sub package:
  It's now provided by filesystem.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1615377600">- Don't install translated man pages for non-installed binaries
  (uptime, kill).</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1625227200">- Skip test suite on emulated riscv64 systems as the qemu process
  is unexpected on the command lines of processes</changelog>
  <changelog author="werner@suse.de" date="1642680000">- Correct used URLs</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Some older products do not know about /usr/share/man/uk</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="werner@suse.de" date="1692100800">- Add patch CVE-2023-4016.patch
  * CVE-2023-4016: ps buffer overflow (bsc#1214290)</changelog>
  <changelog author="kukuk@suse.com" date="1692187200">- procps-ng-3.3.17-logind.patch: Backport from 4.x git, prefer
  logind over utmp (jsc#PED-3144)</changelog>
  <changelog author="werner@suse.de" date="1692360000">- Modify patches
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-ng-3.3.17-logind.patch
  to real to not truncate output of w with option -n</changelog>
  <changelog author="werner@suse.de" date="1695211200">- Submit latest procps 3.3.17 to SLE-15 tree for jira#PED-3244
  and jira#PED-6369
- The patches now upstream had been dropped meanwhile
  * procps-vmstat-1b9ea611.patch (bsc#1185417)
  - For support up to 2048 CPU as well
  * bsc1209122-a6c0795d.patch (bnc#1209122)
  - allow `-´ as leading character to ignore possible errors
    on systctl entries
  * patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753)
  - was a backport of an upstream fix to get the first CPU
    summary correct
- Enable pidof for SLE-15 as this is provided by sysvinit-tools
- Use a check on syscall __NR_pidfd_open to decide if
  the pwait tool and its manual page will be build</changelog>
</package>
<package pkgid="c19420815f2ae5f1abcd2169722b913aa683dce8ea7a09d2656137182658d57a" name="protobuf" arch="src">
  <version epoch="0" ver="25.1" rel="150400.9.3.1"/>
  <changelog author="dmueller@suse.com" date="1659614400">- add 10355.patch to fix soversioning</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 21.5:
  PHP
  * Added getContainingOneof and getRealContainingOneof to descriptor.
  * fix PHP readonly legacy files for nested messages
  Python
  * Fixed comparison of maps in Python.</changelog>
  <changelog author="dmueller@suse.com" date="1663588800">- update to 21.6:
  C++:
  * Reduce memory consumption of MessageSet parsing</changelog>
  <changelog author="dmueller@suse.com" date="1667044800">- update to 21.9:
  * Ruby
  * Replace libc strdup usage with internal impl to restore musl compat (#10818)
  * Auto capitalize enums name in Ruby (#10454) (#10763)
  * Other
  * Fix for grpc.tools #17995 &amp; protobuf #7474 (handle UTF-8 paths in argumentfile) (#10721)
  * C++
  * 21.x No longer define no_threadlocal on OpenBSD (#10743)
  * Java
  * Mark default instance as immutable first to avoid race during static initialization of default instances (#10771)
  * Refactoring java full runtime to reuse sub-message builders and prepare to
    migrate parsing logic from parse constructor to builder.
  * Move proto wireformat parsing functionality from the private "parsing
    constructor" to the Builder class.
  * Change the Lite runtime to prefer merging from the wireformat into mutable
    messages rather than building up a new immutable object before merging. This
    way results in fewer allocations and copy operations.
  * Make message-type extensions merge from wire-format instead of building up
    instances and merging afterwards. This has much better performance.
  * Fix TextFormat parser to build up recurring (but supposedly not repeated)
    sub-messages directly from text rather than building a new sub-message and
    merging the fully formed message into the existing field.</changelog>
  <changelog author="dmueller@suse.com" date="1670241600">- update to 21.10:
  * Java
  * Use bit-field int values in buildPartial to skip work on unset groups of
    fields. (#10960)
  * Mark nested builder as clean after clear is called (#10984)</changelog>
  <changelog author="dmueller@suse.com" date="1670500800">- update to 21.11:
  * Python
  * Add license file to pypi wheels (#10936)
  * Fix round-trip bug (#10158)</changelog>
  <changelog author="dmueller@suse.com" date="1671105600">- update to v21.12:
  * Python
  * Fix broken enum ranges (#11171)
  * Stop requiring extension fields to have a sythetic oneof (#11091)
  * Python runtime 4.21.10 not works generated code can not load valid
    proto.</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO (boo#1133277).</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to v22.3
  UPB (Python/PHP/Ruby C-Extension)
  * Remove src prefix from proto import
  * Fix .gitmodules to use the correct absl branch
  * Remove erroneous dependency on googletest
- update to 22.2:
  Java
  * Add version to intra proto dependencies and add kotlin stdlib
    dependency
  * Add $ back for osgi header
  * Remove $ in pom files
- update to 22.1:
  * Add visibility of plugin.proto to python directory
  * Strip "src" from file name of plugin.proto
  * Add OSGi headers to pom files.
  * Remove errorprone dependency from kotlin protos.
  * Version protoc according to the compiler version number.
- update to 22.0:
  * This version includes breaking changes to: Cpp.
    Please refer to the migration guide for information:
    https://protobuf.dev/support/migration/#compiler-22
  * [Cpp] Migrate to Abseil's logging library.
  * [Cpp] `proto2::Map::value_type` changes to `std::pair`.
  * [Cpp] Mark final ZeroCopyInputStream, ZeroCopyOutputStream,
    and DefaultFieldComparator classes.
  * [Cpp] Add a dependency on Abseil (#10416)
  * [Cpp] Remove all autotools usage (#10132)
  * [Cpp] Add C++20 reserved keywords
  * [Cpp] Dropped C++11 Support
  * [Cpp] Delete Arena::Init
  * [Cpp] Replace JSON parser with new implementation
  * [Cpp] Make RepeatedField::GetArena non-const in order to
    support split RepeatedFields.
  * long list of bindings specific fixes see
    https://github.com/protocolbuffers/protobuf/releases/tag/v22.0
- python sub packages version is set 4.22.3 as defined in
  python/google/protobuf/__init__.py to stay compatible
- skip python2 builds by default
- drop patches:
  * 10355.patch,
  * gcc12-disable-__constinit-with-c++-11.patch (merged upstream)
- added patches:
  * add-missing-stdint-header.patch   added for compile fixes</changelog>
  <changelog author="fstrba@suse.com" date="1682596800">- Make possible to build on older systems, like SLE12 that miss
  some of the used macros.</changelog>
  <changelog author="fstrba@suse.com" date="1682683200">- Mention the rpmlintrc file in the spec.</changelog>
  <changelog author="mpluskal@suse.com" date="1683633600">- Fix confusion in versions</changelog>
  <changelog author="dmueller@suse.com" date="1686484800">- drop python2 handling
- fix version handling and package the private libs again</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 22.5:
  C++
  * Add missing cstdint header
  * Fix: missing -DPROTOBUF_USE_DLLS in pkg-config (#12700)
  * Avoid using string(JOIN..., which requires cmake 3.12
  * Explicitly include GTest package in examples
  * Bump Abseil submodule to 20230125.3 (#12660)
- update to 22.4:
  C++
  * Fix libprotoc: export useful symbols from .so
  * Fix btree issue in map tests.
  Python
  * Fix bug in _internal_copy_files where the rule would fail in
    downstream repositories.
  Other
  * Bump utf8_range to version with working pkg-config (#12584)
  * Fix declared dependencies for pkg-config
  * Update abseil dependency and reorder dependencies to ensure
    we use the version specified in protobuf_deps.
  * Turn off clang::musttail on i386</changelog>
  <changelog author="fvogt@suse.com" date="1686744000">- Add patch to fix linking ThreadSafeArena:
  * 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch
- Drop the protobuf-source package, no longer used</changelog>
  <changelog author="dmueller@suse.com" date="1688385600">- update to 23.3:
  C++
  * Regenerate stale files
  * Use the same ABI for static and shared libraries on non-
    Windows platforms
  * Add a workaround for GCC constexpr bug
  Objective-C
  * Regenerate stale files
  UPB (Python/PHP/Ruby C-Extension)
  * Fixed a bug in `upb_Map_Delete()` that caused crashes in
    map.delete(k) for Ruby when string-keyed maps were in use.
  Compiler
  * Add missing header to Objective-c generator
  * Add a workaround for GCC constexpr bug
  Java
  * Rollback of: Simplify protobuf Java message builder by
    removing methods that calls the super class only.
  Csharp
  * [C#] Replace regex that validates descriptor names
- drop 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1688731200">- update to 23.4:
  * Add dllexport_decl for generated default instance.
  * Deps: Update Guava to 32.0.1</changelog>
  <changelog author="fstrba@suse.com" date="1698667200">- Build with source and target levels 8
  * fixes build with JDK21
- Install the pom file with the new %%mvn_install_pom macro
- Do not install the pom-only artifacts, since the %%mvn_install_pom
  macro resolves the variables at the install time</changelog>
  <changelog author="dmueller@suse.com" date="1703160000">- build against modern python on sle15</changelog>
  <changelog author="dmueller@suse.com" date="1704196800">- update to 25.1:
  * Raise warnings for deprecated python syntax usages
  * Add support for extensions in CRuby, JRuby, and FFI Ruby
  * Add support for options in CRuby, JRuby and FFI (#14594)
- update to 25.0:
  * Implement proto2/proto3 with editions
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Editions: Introduce functionality to protoc for generating
    edition feature set defaults.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Publish extension declarations with declaration
    verifications.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Protoc: parser rejects explicit use of map_entry option
  * Protoc: validate that reserved range start is before end
  * Protoc: support identifiers as reserved names in addition to
    string literals (only in editions)
  * Drop support for Bazel 5.
  * Allow code generators to specify whether or not they support
    editions.
  [#] C++
  * Set `PROTOBUF_EXPORT` on
    `InternalOutOfLineDeleteMessageLite()`
  * Update stale checked-in files
  * Apply PROTOBUF_NOINLINE to declarations of some functions
    that want it.
  * Implement proto2/proto3 with editions
  * Make JSON UTF-8 boundary check inclusive of the largest
    possible UTF-8 character.
  * Reduce `Map::size_type` to 32-bits. Protobuf containers can't
    have more than that
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Fix bug in reflection based Swap of map fields.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Add prefetching to arena allocations.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    repeated and map field accessors.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    string field accessors.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Fixes for 32-bit MSVC.
  * Publish extension declarations with declaration
    verifications.
  * Export the constants in protobuf's any.h to support DLL
    builds.
  * Implement AbslStringify for the Descriptor family of types.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    message field accessors.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Introduce C++ feature for UTF8 validation.
  * Protoc: validate that reserved range start is before end
  * Remove option to disable the table-driven parser in protoc.
  * Lock down ctype=CORD in proto file.
  * Support split repeated fields.
  * In OSS mode omit some extern template specializations.
  * Allow code generators to specify whether or not they support
    editions.
  [#] Java
  * Implement proto2/proto3 with editions
  * Remove synthetic oneofs from Java gencode field accessor
    tables.
  * Timestamps.parse: Add error handling for invalid
    hours/minutes in the timezone offset.
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Add missing debugging version info to Protobuf Java gencode
    when multiple files are generated.
  * Fix a bad cast in putBuilderIfAbsent when already present due
    to using the result of put() directly (which is null if it
    currently has no value)
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Fix a NPE in putBuilderIfAbsent due to using the result of
    put() directly (which is null if it currently has no value)
  * Update Kotlin compiler to escape package names
  * Add MapFieldBuilder and change codegen to generate it and the
    put{field}BuilderIfAbsent method.
  * Introduce recursion limit in Java text format parsing
  * Consider the protobuf.Any invalid if typeUrl.split("/")
    returns an empty array.
  * Mark `FieldDescriptor.hasOptionalKeyword()` as deprecated.
  * Fixed Python memory leak in map lookup.
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Ensure Timestamp.ToDatetime(tz) has correct offset
  * Do not check required field for upb python MergeFrom
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Emit __slots__ in pyi output as a tuple rather than a list
    for --pyi_out.
  * Fix a bug that strips options from descriptor.proto in
    Python.
  * Raise warings for message.UnknownFields() usages and navigate
    to the new add
  * Add protobuf python keyword support in path for stub
    generator.
  * Add tuple support to set Struct
  * ### Python C-Extension (Default)
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Check that ffi-compiler loads before using it to define
    tasks.
  [#] UPB (Python/PHP/Ruby C-Extension)
  * Include .inc files directly instead of through a filegroup
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Add utf8_validation feature back to the global feature set.
  * Do not check required field for upb python MergeFrom
  * Merge the protobuf and upb Bazel repos
  * Added malloc_trim() calls to Python allocator so RSS will
    decrease when memory is freed
  * Upb: fix a Python memory leak in ByteSize()
  * Support ASAN detection on clang
  * Upb: bugfix for importing a proto3 enum from within a proto2
    file
  * Expose methods needed by Ruby FFI using UPB_API
  * Fix `PyUpb_Message_MergeInternal` segfault</changelog>
</package>
<package pkgid="4c71cd85a7073b85100a5af0c59c2c2aed49dca93b4bf20685033abe63f35b82" name="protobuf" arch="src">
  <version epoch="0" ver="25.1" rel="150400.9.6.1"/>
  <changelog author="dmueller@suse.com" date="1659614400">- add 10355.patch to fix soversioning</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 21.5:
  PHP
  * Added getContainingOneof and getRealContainingOneof to descriptor.
  * fix PHP readonly legacy files for nested messages
  Python
  * Fixed comparison of maps in Python.</changelog>
  <changelog author="dmueller@suse.com" date="1663588800">- update to 21.6:
  C++:
  * Reduce memory consumption of MessageSet parsing</changelog>
  <changelog author="dmueller@suse.com" date="1667044800">- update to 21.9:
  * Ruby
  * Replace libc strdup usage with internal impl to restore musl compat (#10818)
  * Auto capitalize enums name in Ruby (#10454) (#10763)
  * Other
  * Fix for grpc.tools #17995 &amp; protobuf #7474 (handle UTF-8 paths in argumentfile) (#10721)
  * C++
  * 21.x No longer define no_threadlocal on OpenBSD (#10743)
  * Java
  * Mark default instance as immutable first to avoid race during static initialization of default instances (#10771)
  * Refactoring java full runtime to reuse sub-message builders and prepare to
    migrate parsing logic from parse constructor to builder.
  * Move proto wireformat parsing functionality from the private "parsing
    constructor" to the Builder class.
  * Change the Lite runtime to prefer merging from the wireformat into mutable
    messages rather than building up a new immutable object before merging. This
    way results in fewer allocations and copy operations.
  * Make message-type extensions merge from wire-format instead of building up
    instances and merging afterwards. This has much better performance.
  * Fix TextFormat parser to build up recurring (but supposedly not repeated)
    sub-messages directly from text rather than building a new sub-message and
    merging the fully formed message into the existing field.</changelog>
  <changelog author="dmueller@suse.com" date="1670241600">- update to 21.10:
  * Java
  * Use bit-field int values in buildPartial to skip work on unset groups of
    fields. (#10960)
  * Mark nested builder as clean after clear is called (#10984)</changelog>
  <changelog author="dmueller@suse.com" date="1670500800">- update to 21.11:
  * Python
  * Add license file to pypi wheels (#10936)
  * Fix round-trip bug (#10158)</changelog>
  <changelog author="dmueller@suse.com" date="1671105600">- update to v21.12:
  * Python
  * Fix broken enum ranges (#11171)
  * Stop requiring extension fields to have a sythetic oneof (#11091)
  * Python runtime 4.21.10 not works generated code can not load valid
    proto.</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO (boo#1133277).</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to v22.3
  UPB (Python/PHP/Ruby C-Extension)
  * Remove src prefix from proto import
  * Fix .gitmodules to use the correct absl branch
  * Remove erroneous dependency on googletest
- update to 22.2:
  Java
  * Add version to intra proto dependencies and add kotlin stdlib
    dependency
  * Add $ back for osgi header
  * Remove $ in pom files
- update to 22.1:
  * Add visibility of plugin.proto to python directory
  * Strip "src" from file name of plugin.proto
  * Add OSGi headers to pom files.
  * Remove errorprone dependency from kotlin protos.
  * Version protoc according to the compiler version number.
- update to 22.0:
  * This version includes breaking changes to: Cpp.
    Please refer to the migration guide for information:
    https://protobuf.dev/support/migration/#compiler-22
  * [Cpp] Migrate to Abseil's logging library.
  * [Cpp] `proto2::Map::value_type` changes to `std::pair`.
  * [Cpp] Mark final ZeroCopyInputStream, ZeroCopyOutputStream,
    and DefaultFieldComparator classes.
  * [Cpp] Add a dependency on Abseil (#10416)
  * [Cpp] Remove all autotools usage (#10132)
  * [Cpp] Add C++20 reserved keywords
  * [Cpp] Dropped C++11 Support
  * [Cpp] Delete Arena::Init
  * [Cpp] Replace JSON parser with new implementation
  * [Cpp] Make RepeatedField::GetArena non-const in order to
    support split RepeatedFields.
  * long list of bindings specific fixes see
    https://github.com/protocolbuffers/protobuf/releases/tag/v22.0
- python sub packages version is set 4.22.3 as defined in
  python/google/protobuf/__init__.py to stay compatible
- skip python2 builds by default
- drop patches:
  * 10355.patch,
  * gcc12-disable-__constinit-with-c++-11.patch (merged upstream)
- added patches:
  * add-missing-stdint-header.patch   added for compile fixes</changelog>
  <changelog author="fstrba@suse.com" date="1682596800">- Make possible to build on older systems, like SLE12 that miss
  some of the used macros.</changelog>
  <changelog author="fstrba@suse.com" date="1682683200">- Mention the rpmlintrc file in the spec.</changelog>
  <changelog author="mpluskal@suse.com" date="1683633600">- Fix confusion in versions</changelog>
  <changelog author="dmueller@suse.com" date="1686484800">- drop python2 handling
- fix version handling and package the private libs again</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 22.5:
  C++
  * Add missing cstdint header
  * Fix: missing -DPROTOBUF_USE_DLLS in pkg-config (#12700)
  * Avoid using string(JOIN..., which requires cmake 3.12
  * Explicitly include GTest package in examples
  * Bump Abseil submodule to 20230125.3 (#12660)
- update to 22.4:
  C++
  * Fix libprotoc: export useful symbols from .so
  * Fix btree issue in map tests.
  Python
  * Fix bug in _internal_copy_files where the rule would fail in
    downstream repositories.
  Other
  * Bump utf8_range to version with working pkg-config (#12584)
  * Fix declared dependencies for pkg-config
  * Update abseil dependency and reorder dependencies to ensure
    we use the version specified in protobuf_deps.
  * Turn off clang::musttail on i386</changelog>
  <changelog author="fvogt@suse.com" date="1686744000">- Add patch to fix linking ThreadSafeArena:
  * 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch
- Drop the protobuf-source package, no longer used</changelog>
  <changelog author="dmueller@suse.com" date="1688385600">- update to 23.3:
  C++
  * Regenerate stale files
  * Use the same ABI for static and shared libraries on non-
    Windows platforms
  * Add a workaround for GCC constexpr bug
  Objective-C
  * Regenerate stale files
  UPB (Python/PHP/Ruby C-Extension)
  * Fixed a bug in `upb_Map_Delete()` that caused crashes in
    map.delete(k) for Ruby when string-keyed maps were in use.
  Compiler
  * Add missing header to Objective-c generator
  * Add a workaround for GCC constexpr bug
  Java
  * Rollback of: Simplify protobuf Java message builder by
    removing methods that calls the super class only.
  Csharp
  * [C#] Replace regex that validates descriptor names
- drop 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1688731200">- update to 23.4:
  * Add dllexport_decl for generated default instance.
  * Deps: Update Guava to 32.0.1</changelog>
  <changelog author="fstrba@suse.com" date="1698667200">- Build with source and target levels 8
  * fixes build with JDK21
- Install the pom file with the new %%mvn_install_pom macro
- Do not install the pom-only artifacts, since the %%mvn_install_pom
  macro resolves the variables at the install time</changelog>
  <changelog author="dmueller@suse.com" date="1703160000">- build against modern python on sle15</changelog>
  <changelog author="dmueller@suse.com" date="1704196800">- update to 25.1:
  * Raise warnings for deprecated python syntax usages
  * Add support for extensions in CRuby, JRuby, and FFI Ruby
  * Add support for options in CRuby, JRuby and FFI (#14594)
- update to 25.0:
  * Implement proto2/proto3 with editions
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Editions: Introduce functionality to protoc for generating
    edition feature set defaults.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Publish extension declarations with declaration
    verifications.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Protoc: parser rejects explicit use of map_entry option
  * Protoc: validate that reserved range start is before end
  * Protoc: support identifiers as reserved names in addition to
    string literals (only in editions)
  * Drop support for Bazel 5.
  * Allow code generators to specify whether or not they support
    editions.
  [#] C++
  * Set `PROTOBUF_EXPORT` on
    `InternalOutOfLineDeleteMessageLite()`
  * Update stale checked-in files
  * Apply PROTOBUF_NOINLINE to declarations of some functions
    that want it.
  * Implement proto2/proto3 with editions
  * Make JSON UTF-8 boundary check inclusive of the largest
    possible UTF-8 character.
  * Reduce `Map::size_type` to 32-bits. Protobuf containers can't
    have more than that
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Fix bug in reflection based Swap of map fields.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Add prefetching to arena allocations.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    repeated and map field accessors.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    string field accessors.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Fixes for 32-bit MSVC.
  * Publish extension declarations with declaration
    verifications.
  * Export the constants in protobuf's any.h to support DLL
    builds.
  * Implement AbslStringify for the Descriptor family of types.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    message field accessors.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Introduce C++ feature for UTF8 validation.
  * Protoc: validate that reserved range start is before end
  * Remove option to disable the table-driven parser in protoc.
  * Lock down ctype=CORD in proto file.
  * Support split repeated fields.
  * In OSS mode omit some extern template specializations.
  * Allow code generators to specify whether or not they support
    editions.
  [#] Java
  * Implement proto2/proto3 with editions
  * Remove synthetic oneofs from Java gencode field accessor
    tables.
  * Timestamps.parse: Add error handling for invalid
    hours/minutes in the timezone offset.
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Add missing debugging version info to Protobuf Java gencode
    when multiple files are generated.
  * Fix a bad cast in putBuilderIfAbsent when already present due
    to using the result of put() directly (which is null if it
    currently has no value)
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Fix a NPE in putBuilderIfAbsent due to using the result of
    put() directly (which is null if it currently has no value)
  * Update Kotlin compiler to escape package names
  * Add MapFieldBuilder and change codegen to generate it and the
    put{field}BuilderIfAbsent method.
  * Introduce recursion limit in Java text format parsing
  * Consider the protobuf.Any invalid if typeUrl.split("/")
    returns an empty array.
  * Mark `FieldDescriptor.hasOptionalKeyword()` as deprecated.
  * Fixed Python memory leak in map lookup.
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Ensure Timestamp.ToDatetime(tz) has correct offset
  * Do not check required field for upb python MergeFrom
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Emit __slots__ in pyi output as a tuple rather than a list
    for --pyi_out.
  * Fix a bug that strips options from descriptor.proto in
    Python.
  * Raise warings for message.UnknownFields() usages and navigate
    to the new add
  * Add protobuf python keyword support in path for stub
    generator.
  * Add tuple support to set Struct
  * ### Python C-Extension (Default)
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Check that ffi-compiler loads before using it to define
    tasks.
  [#] UPB (Python/PHP/Ruby C-Extension)
  * Include .inc files directly instead of through a filegroup
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Add utf8_validation feature back to the global feature set.
  * Do not check required field for upb python MergeFrom
  * Merge the protobuf and upb Bazel repos
  * Added malloc_trim() calls to Python allocator so RSS will
    decrease when memory is freed
  * Upb: fix a Python memory leak in ByteSize()
  * Support ASAN detection on clang
  * Upb: bugfix for importing a proto3 enum from within a proto2
    file
  * Expose methods needed by Ruby FFI using UPB_API
  * Fix `PyUpb_Message_MergeInternal` segfault</changelog>
</package>
<package pkgid="815beeeb1cbd45589bf9044e95f2d3ee2f22c1e1bf15cc8af8f33df319d46f33" name="protobuf" arch="src">
  <version epoch="0" ver="25.1" rel="150500.12.2.2"/>
  <changelog author="dmueller@suse.com" date="1659614400">- add 10355.patch to fix soversioning</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 21.5:
  PHP
  * Added getContainingOneof and getRealContainingOneof to descriptor.
  * fix PHP readonly legacy files for nested messages
  Python
  * Fixed comparison of maps in Python.</changelog>
  <changelog author="dmueller@suse.com" date="1663588800">- update to 21.6:
  C++:
  * Reduce memory consumption of MessageSet parsing</changelog>
  <changelog author="dmueller@suse.com" date="1667044800">- update to 21.9:
  * Ruby
  * Replace libc strdup usage with internal impl to restore musl compat (#10818)
  * Auto capitalize enums name in Ruby (#10454) (#10763)
  * Other
  * Fix for grpc.tools #17995 &amp; protobuf #7474 (handle UTF-8 paths in argumentfile) (#10721)
  * C++
  * 21.x No longer define no_threadlocal on OpenBSD (#10743)
  * Java
  * Mark default instance as immutable first to avoid race during static initialization of default instances (#10771)
  * Refactoring java full runtime to reuse sub-message builders and prepare to
    migrate parsing logic from parse constructor to builder.
  * Move proto wireformat parsing functionality from the private "parsing
    constructor" to the Builder class.
  * Change the Lite runtime to prefer merging from the wireformat into mutable
    messages rather than building up a new immutable object before merging. This
    way results in fewer allocations and copy operations.
  * Make message-type extensions merge from wire-format instead of building up
    instances and merging afterwards. This has much better performance.
  * Fix TextFormat parser to build up recurring (but supposedly not repeated)
    sub-messages directly from text rather than building a new sub-message and
    merging the fully formed message into the existing field.</changelog>
  <changelog author="dmueller@suse.com" date="1670241600">- update to 21.10:
  * Java
  * Use bit-field int values in buildPartial to skip work on unset groups of
    fields. (#10960)
  * Mark nested builder as clean after clear is called (#10984)</changelog>
  <changelog author="dmueller@suse.com" date="1670500800">- update to 21.11:
  * Python
  * Add license file to pypi wheels (#10936)
  * Fix round-trip bug (#10158)</changelog>
  <changelog author="dmueller@suse.com" date="1671105600">- update to v21.12:
  * Python
  * Fix broken enum ranges (#11171)
  * Stop requiring extension fields to have a sythetic oneof (#11091)
  * Python runtime 4.21.10 not works generated code can not load valid
    proto.</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO (boo#1133277).</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to v22.3
  UPB (Python/PHP/Ruby C-Extension)
  * Remove src prefix from proto import
  * Fix .gitmodules to use the correct absl branch
  * Remove erroneous dependency on googletest
- update to 22.2:
  Java
  * Add version to intra proto dependencies and add kotlin stdlib
    dependency
  * Add $ back for osgi header
  * Remove $ in pom files
- update to 22.1:
  * Add visibility of plugin.proto to python directory
  * Strip "src" from file name of plugin.proto
  * Add OSGi headers to pom files.
  * Remove errorprone dependency from kotlin protos.
  * Version protoc according to the compiler version number.
- update to 22.0:
  * This version includes breaking changes to: Cpp.
    Please refer to the migration guide for information:
    https://protobuf.dev/support/migration/#compiler-22
  * [Cpp] Migrate to Abseil's logging library.
  * [Cpp] `proto2::Map::value_type` changes to `std::pair`.
  * [Cpp] Mark final ZeroCopyInputStream, ZeroCopyOutputStream,
    and DefaultFieldComparator classes.
  * [Cpp] Add a dependency on Abseil (#10416)
  * [Cpp] Remove all autotools usage (#10132)
  * [Cpp] Add C++20 reserved keywords
  * [Cpp] Dropped C++11 Support
  * [Cpp] Delete Arena::Init
  * [Cpp] Replace JSON parser with new implementation
  * [Cpp] Make RepeatedField::GetArena non-const in order to
    support split RepeatedFields.
  * long list of bindings specific fixes see
    https://github.com/protocolbuffers/protobuf/releases/tag/v22.0
- python sub packages version is set 4.22.3 as defined in
  python/google/protobuf/__init__.py to stay compatible
- skip python2 builds by default
- drop patches:
  * 10355.patch,
  * gcc12-disable-__constinit-with-c++-11.patch (merged upstream)
- added patches:
  * add-missing-stdint-header.patch   added for compile fixes</changelog>
  <changelog author="fstrba@suse.com" date="1682596800">- Make possible to build on older systems, like SLE12 that miss
  some of the used macros.</changelog>
  <changelog author="fstrba@suse.com" date="1682683200">- Mention the rpmlintrc file in the spec.</changelog>
  <changelog author="mpluskal@suse.com" date="1683633600">- Fix confusion in versions</changelog>
  <changelog author="dmueller@suse.com" date="1686484800">- drop python2 handling
- fix version handling and package the private libs again</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 22.5:
  C++
  * Add missing cstdint header
  * Fix: missing -DPROTOBUF_USE_DLLS in pkg-config (#12700)
  * Avoid using string(JOIN..., which requires cmake 3.12
  * Explicitly include GTest package in examples
  * Bump Abseil submodule to 20230125.3 (#12660)
- update to 22.4:
  C++
  * Fix libprotoc: export useful symbols from .so
  * Fix btree issue in map tests.
  Python
  * Fix bug in _internal_copy_files where the rule would fail in
    downstream repositories.
  Other
  * Bump utf8_range to version with working pkg-config (#12584)
  * Fix declared dependencies for pkg-config
  * Update abseil dependency and reorder dependencies to ensure
    we use the version specified in protobuf_deps.
  * Turn off clang::musttail on i386</changelog>
  <changelog author="fvogt@suse.com" date="1686744000">- Add patch to fix linking ThreadSafeArena:
  * 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch
- Drop the protobuf-source package, no longer used</changelog>
  <changelog author="dmueller@suse.com" date="1688385600">- update to 23.3:
  C++
  * Regenerate stale files
  * Use the same ABI for static and shared libraries on non-
    Windows platforms
  * Add a workaround for GCC constexpr bug
  Objective-C
  * Regenerate stale files
  UPB (Python/PHP/Ruby C-Extension)
  * Fixed a bug in `upb_Map_Delete()` that caused crashes in
    map.delete(k) for Ruby when string-keyed maps were in use.
  Compiler
  * Add missing header to Objective-c generator
  * Add a workaround for GCC constexpr bug
  Java
  * Rollback of: Simplify protobuf Java message builder by
    removing methods that calls the super class only.
  Csharp
  * [C#] Replace regex that validates descriptor names
- drop 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1688731200">- update to 23.4:
  * Add dllexport_decl for generated default instance.
  * Deps: Update Guava to 32.0.1</changelog>
  <changelog author="fstrba@suse.com" date="1698667200">- Build with source and target levels 8
  * fixes build with JDK21
- Install the pom file with the new %%mvn_install_pom macro
- Do not install the pom-only artifacts, since the %%mvn_install_pom
  macro resolves the variables at the install time</changelog>
  <changelog author="dmueller@suse.com" date="1703160000">- build against modern python on sle15</changelog>
  <changelog author="dmueller@suse.com" date="1704196800">- update to 25.1:
  * Raise warnings for deprecated python syntax usages
  * Add support for extensions in CRuby, JRuby, and FFI Ruby
  * Add support for options in CRuby, JRuby and FFI (#14594)
- update to 25.0:
  * Implement proto2/proto3 with editions
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Editions: Introduce functionality to protoc for generating
    edition feature set defaults.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Publish extension declarations with declaration
    verifications.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Protoc: parser rejects explicit use of map_entry option
  * Protoc: validate that reserved range start is before end
  * Protoc: support identifiers as reserved names in addition to
    string literals (only in editions)
  * Drop support for Bazel 5.
  * Allow code generators to specify whether or not they support
    editions.
  [#] C++
  * Set `PROTOBUF_EXPORT` on
    `InternalOutOfLineDeleteMessageLite()`
  * Update stale checked-in files
  * Apply PROTOBUF_NOINLINE to declarations of some functions
    that want it.
  * Implement proto2/proto3 with editions
  * Make JSON UTF-8 boundary check inclusive of the largest
    possible UTF-8 character.
  * Reduce `Map::size_type` to 32-bits. Protobuf containers can't
    have more than that
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Fix bug in reflection based Swap of map fields.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Add prefetching to arena allocations.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    repeated and map field accessors.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    string field accessors.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Fixes for 32-bit MSVC.
  * Publish extension declarations with declaration
    verifications.
  * Export the constants in protobuf's any.h to support DLL
    builds.
  * Implement AbslStringify for the Descriptor family of types.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    message field accessors.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Introduce C++ feature for UTF8 validation.
  * Protoc: validate that reserved range start is before end
  * Remove option to disable the table-driven parser in protoc.
  * Lock down ctype=CORD in proto file.
  * Support split repeated fields.
  * In OSS mode omit some extern template specializations.
  * Allow code generators to specify whether or not they support
    editions.
  [#] Java
  * Implement proto2/proto3 with editions
  * Remove synthetic oneofs from Java gencode field accessor
    tables.
  * Timestamps.parse: Add error handling for invalid
    hours/minutes in the timezone offset.
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Add missing debugging version info to Protobuf Java gencode
    when multiple files are generated.
  * Fix a bad cast in putBuilderIfAbsent when already present due
    to using the result of put() directly (which is null if it
    currently has no value)
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Fix a NPE in putBuilderIfAbsent due to using the result of
    put() directly (which is null if it currently has no value)
  * Update Kotlin compiler to escape package names
  * Add MapFieldBuilder and change codegen to generate it and the
    put{field}BuilderIfAbsent method.
  * Introduce recursion limit in Java text format parsing
  * Consider the protobuf.Any invalid if typeUrl.split("/")
    returns an empty array.
  * Mark `FieldDescriptor.hasOptionalKeyword()` as deprecated.
  * Fixed Python memory leak in map lookup.
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Ensure Timestamp.ToDatetime(tz) has correct offset
  * Do not check required field for upb python MergeFrom
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Emit __slots__ in pyi output as a tuple rather than a list
    for --pyi_out.
  * Fix a bug that strips options from descriptor.proto in
    Python.
  * Raise warings for message.UnknownFields() usages and navigate
    to the new add
  * Add protobuf python keyword support in path for stub
    generator.
  * Add tuple support to set Struct
  * ### Python C-Extension (Default)
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Check that ffi-compiler loads before using it to define
    tasks.
  [#] UPB (Python/PHP/Ruby C-Extension)
  * Include .inc files directly instead of through a filegroup
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Add utf8_validation feature back to the global feature set.
  * Do not check required field for upb python MergeFrom
  * Merge the protobuf and upb Bazel repos
  * Added malloc_trim() calls to Python allocator so RSS will
    decrease when memory is freed
  * Upb: fix a Python memory leak in ByteSize()
  * Support ASAN detection on clang
  * Upb: bugfix for importing a proto3 enum from within a proto2
    file
  * Expose methods needed by Ruby FFI using UPB_API
  * Fix `PyUpb_Message_MergeInternal` segfault</changelog>
</package>
<package pkgid="87b1e4bb8be7090e984b90e935adc06e6fd13ed8a62a1a2ce24340e1fe3307dc" name="psmisc" arch="aarch64">
  <version epoch="0" ver="23.0" rel="150000.6.25.1"/>
  <changelog author="schwab@suse.de" date="1432209600">- Replace negative list %nopeek with positive list %have_peekfd</changelog>
  <changelog author="werner@suse.de" date="1497960000">- Modify psmisc-22.21.dif to enforce the usage of `m' flag in
  sscanf() instead of `a' for allocation. Also avoid to small
  buffers and include sys/sysmacros.h for makedev macro.
- Add the patch psmisc-22.21-lessnfs.patch to support device
  files of mount points as well (boo#1044638)
- Add the patch psmisc-22.21-mntpt.patch to do strinfg comparision
  only for NFS shares</changelog>
  <changelog author="werner@suse.de" date="1497960001">- Update to version 23.0
  * killall: Fix process age race condition !11 Debian #822861
  * killall: only use scope of current namespace by default
  * killall: better parsing of command names
  * pstree: add cgroup namespaces !10
  * peekfd: Help give long options too !5
  * killall: correctly report when 32+ procs match !8
  * prtat: Remove duplicate options in man page !3 Debian #846387
  * pslog: New program to check what logs are open merge !1
  * fuser: increase path length for octal escaping SF [#37]
  * Make usage of linked lists of devices found in
    /proc/self/mountinfo optional
  * Make timeout() in timeout.c work with shared mmap to
    reduce the load due write/read the stat buffers
  * Add list_sort() to lists.h to be able to sort lists
  * fuser: Fixed typo for  -M flag. Debian #740275
  * pstree: by default doesn't show threadnames, use -t to show
    as it disables compaction. SF [#33] Debian #815902
  * pstree: Removed need for PATH_MAX Debian #750405
  * pstree: ignores disappeared processes. SF [#34]
  * killall: -o and -y work with -r flags. SF [#64]
  * m4/gettext.m4: Upgrade to gettext-0.19.4.
  * m4/iconv.m4: Upgrade to gettext-0.19.4.
  * m4/lib-ld.m4: Upgrade to gettext-0.19.4.
  * m4/lib-link.m4: Upgrade to gettext-0.19.4.
  * m4/lib-prefix.m4: Upgrade to gettext-0.19.4.
  * m4/nls.m4: Upgrade to gettext-0.19.4.
  * m4/po.m4: Upgrade to gettext-0.19.4.
  * m4/progtest.m4: Upgrade to gettext-0.19.4.
  * configure.ac (AM_GNU_GETTEXT_VERSION): Bump to 0.19.4.
- Make it build, that is create a po/POTFILES.in
- Remove obsolete patches
  * psmisc-22.21-boo908063.patch
  * psmisc-22.12-tigetstr.patch
  * psmisc-22.21-upstream.patch
  * psmisc-git-3638cc55b4d08851faba46635d737b24d016665b.patch
- Rename patch psmisc-22.21.dif which becomes psmisc-23.0.dif
- Make /bin/fuser a symblic link of /usr/bin/fuser (boo#1029973)
- Last revision was 78</changelog>
  <changelog author="werner@suse.de" date="1498651200">- Add patch psmisc-23.0-killall.patch to remove left over debug
  output in killall utility (boo#1046237)</changelog>
  <changelog author="werner@suse.de" date="1498651201">- Add patch psmisc-23.0-net.patch to reenable network support
  broken to my own upstream commit</changelog>
  <changelog author="werner@suse.de" date="1499256000">- Remove patches
  * psmisc-22.21-lessnfs.patch
  * psmisc-22.21-mntpt.patch
  * psmisc-23.0-net.patch
- Add patch
  0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  from https://gitlab.com/bitstreamout/psmisc/tree/mountinfo
  which is a heavily rework fuser used on NFS
  * Use mountinfo to be able to use the mount identity
    which allows to distinguish different mounts with the
    same device number as it happens with NFS shares.
  * Smaller cleanup as support of chroot environments
    and older systems.
  * Add support for name_to_handle_at() system call to
    get the real mount ID for each file
- Use test suite of psmisc in %check rpm section</changelog>
  <changelog author="werner@suse.de" date="1499342400">- Update patch
  0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch</changelog>
  <changelog author="werner@suse.de" date="1505736000">- Add patch psmisc-23.0-killall-signals.patch to fix boo#1058990
  by prior scanning for signal names in the arguments of killall</changelog>
  <changelog author="werner@suse.de" date="1507896000">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to run even on older kernels missing mnt_id tag in fdinfo</changelog>
  <changelog author="werner@suse.de" date="1526558400">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to let fuser -m also work for private mounts as well (boo#1093665)</changelog>
  <changelog author="werner@suse.de" date="1529668800">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to make fuser option -m &lt;block_device&gt; work even with mountinfo
  (bsc#1098697)</changelog>
  <changelog author="werner@suse.de" date="1540296000">- Support also btrFS entries in mountinfo, that is use stat(2) to
  determine the device of the mounted subvolume (bsc#1098697, bsc#1112780)
  this modifies patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch</changelog>
  <changelog author="werner@suse.de" date="1542196800">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to handle sub volumes of the btrFS (bsc#1112780)</changelog>
  <changelog author="werner@suse.de" date="1543579200">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Always initialize head of simple linked list (bsc#1098697)
  * stat(2) on binary does not see subvol dev</changelog>
  <changelog author="werner@suse.de" date="1587988800">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Allow not unique mounts as well as not unique mountpoint (bsc#1170247)</changelog>
  <changelog author="werner@suse.de" date="1614945600">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Fix bsc#1178407: fuser does not show open kvm storage image files
    such as qcow2 files. Patch from Ali Abdallah &lt;ali.abdallah@suse.com&gt;</changelog>
  <changelog author="werner@suse.de" date="1621339200">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Fix bsc#1185208 to make private mount namespaces work as well
    as to distinguish NFS mounts from same remote device share.</changelog>
  <changelog author="werner@suse.de" date="1644840000">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Determine the namespace of a process only once to speed
    up the parsing of fdinfo (bsc#1194172).</changelog>
  <changelog author="werner@suse.de" date="1646222400">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Add a fallback if the system call name_to_handle_at() is
    not supported by the used file system.
- Add patch psmisc-22.21-semaphores.patch
  * Replace the synchronizing over pipes of the sub process for the
    stat(2) system call with mutex and conditions from pthreads(7)
    (bsc#1194172)
- Add patch psmisc-22.21-statx.patch
  * Use statx(2) or SYS_statx system call to replace the stat(2)
    system call and avoid the sub process at all (bsc#1194172)</changelog>
  <changelog author="werner@suse.de" date="1698062400">- Fix version at configure time as there was no .tarball-version</changelog>
</package>
<package pkgid="b0f86ff0194d03fcbe3d2381af283cb10b1dabd1d3fe54edff28b8c626adec76" name="psmisc" arch="s390x">
  <version epoch="0" ver="23.0" rel="150000.6.25.1"/>
  <changelog author="schwab@suse.de" date="1432209600">- Replace negative list %nopeek with positive list %have_peekfd</changelog>
  <changelog author="werner@suse.de" date="1497960000">- Modify psmisc-22.21.dif to enforce the usage of `m' flag in
  sscanf() instead of `a' for allocation. Also avoid to small
  buffers and include sys/sysmacros.h for makedev macro.
- Add the patch psmisc-22.21-lessnfs.patch to support device
  files of mount points as well (boo#1044638)
- Add the patch psmisc-22.21-mntpt.patch to do strinfg comparision
  only for NFS shares</changelog>
  <changelog author="werner@suse.de" date="1497960001">- Update to version 23.0
  * killall: Fix process age race condition !11 Debian #822861
  * killall: only use scope of current namespace by default
  * killall: better parsing of command names
  * pstree: add cgroup namespaces !10
  * peekfd: Help give long options too !5
  * killall: correctly report when 32+ procs match !8
  * prtat: Remove duplicate options in man page !3 Debian #846387
  * pslog: New program to check what logs are open merge !1
  * fuser: increase path length for octal escaping SF [#37]
  * Make usage of linked lists of devices found in
    /proc/self/mountinfo optional
  * Make timeout() in timeout.c work with shared mmap to
    reduce the load due write/read the stat buffers
  * Add list_sort() to lists.h to be able to sort lists
  * fuser: Fixed typo for  -M flag. Debian #740275
  * pstree: by default doesn't show threadnames, use -t to show
    as it disables compaction. SF [#33] Debian #815902
  * pstree: Removed need for PATH_MAX Debian #750405
  * pstree: ignores disappeared processes. SF [#34]
  * killall: -o and -y work with -r flags. SF [#64]
  * m4/gettext.m4: Upgrade to gettext-0.19.4.
  * m4/iconv.m4: Upgrade to gettext-0.19.4.
  * m4/lib-ld.m4: Upgrade to gettext-0.19.4.
  * m4/lib-link.m4: Upgrade to gettext-0.19.4.
  * m4/lib-prefix.m4: Upgrade to gettext-0.19.4.
  * m4/nls.m4: Upgrade to gettext-0.19.4.
  * m4/po.m4: Upgrade to gettext-0.19.4.
  * m4/progtest.m4: Upgrade to gettext-0.19.4.
  * configure.ac (AM_GNU_GETTEXT_VERSION): Bump to 0.19.4.
- Make it build, that is create a po/POTFILES.in
- Remove obsolete patches
  * psmisc-22.21-boo908063.patch
  * psmisc-22.12-tigetstr.patch
  * psmisc-22.21-upstream.patch
  * psmisc-git-3638cc55b4d08851faba46635d737b24d016665b.patch
- Rename patch psmisc-22.21.dif which becomes psmisc-23.0.dif
- Make /bin/fuser a symblic link of /usr/bin/fuser (boo#1029973)
- Last revision was 78</changelog>
  <changelog author="werner@suse.de" date="1498651200">- Add patch psmisc-23.0-killall.patch to remove left over debug
  output in killall utility (boo#1046237)</changelog>
  <changelog author="werner@suse.de" date="1498651201">- Add patch psmisc-23.0-net.patch to reenable network support
  broken to my own upstream commit</changelog>
  <changelog author="werner@suse.de" date="1499256000">- Remove patches
  * psmisc-22.21-lessnfs.patch
  * psmisc-22.21-mntpt.patch
  * psmisc-23.0-net.patch
- Add patch
  0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  from https://gitlab.com/bitstreamout/psmisc/tree/mountinfo
  which is a heavily rework fuser used on NFS
  * Use mountinfo to be able to use the mount identity
    which allows to distinguish different mounts with the
    same device number as it happens with NFS shares.
  * Smaller cleanup as support of chroot environments
    and older systems.
  * Add support for name_to_handle_at() system call to
    get the real mount ID for each file
- Use test suite of psmisc in %check rpm section</changelog>
  <changelog author="werner@suse.de" date="1499342400">- Update patch
  0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch</changelog>
  <changelog author="werner@suse.de" date="1505736000">- Add patch psmisc-23.0-killall-signals.patch to fix boo#1058990
  by prior scanning for signal names in the arguments of killall</changelog>
  <changelog author="werner@suse.de" date="1507896000">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to run even on older kernels missing mnt_id tag in fdinfo</changelog>
  <changelog author="werner@suse.de" date="1526558400">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to let fuser -m also work for private mounts as well (boo#1093665)</changelog>
  <changelog author="werner@suse.de" date="1529668800">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to make fuser option -m &lt;block_device&gt; work even with mountinfo
  (bsc#1098697)</changelog>
  <changelog author="werner@suse.de" date="1540296000">- Support also btrFS entries in mountinfo, that is use stat(2) to
  determine the device of the mounted subvolume (bsc#1098697, bsc#1112780)
  this modifies patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch</changelog>
  <changelog author="werner@suse.de" date="1542196800">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to handle sub volumes of the btrFS (bsc#1112780)</changelog>
  <changelog author="werner@suse.de" date="1543579200">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Always initialize head of simple linked list (bsc#1098697)
  * stat(2) on binary does not see subvol dev</changelog>
  <changelog author="werner@suse.de" date="1587988800">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Allow not unique mounts as well as not unique mountpoint (bsc#1170247)</changelog>
  <changelog author="werner@suse.de" date="1614945600">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Fix bsc#1178407: fuser does not show open kvm storage image files
    such as qcow2 files. Patch from Ali Abdallah &lt;ali.abdallah@suse.com&gt;</changelog>
  <changelog author="werner@suse.de" date="1621339200">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Fix bsc#1185208 to make private mount namespaces work as well
    as to distinguish NFS mounts from same remote device share.</changelog>
  <changelog author="werner@suse.de" date="1644840000">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Determine the namespace of a process only once to speed
    up the parsing of fdinfo (bsc#1194172).</changelog>
  <changelog author="werner@suse.de" date="1646222400">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Add a fallback if the system call name_to_handle_at() is
    not supported by the used file system.
- Add patch psmisc-22.21-semaphores.patch
  * Replace the synchronizing over pipes of the sub process for the
    stat(2) system call with mutex and conditions from pthreads(7)
    (bsc#1194172)
- Add patch psmisc-22.21-statx.patch
  * Use statx(2) or SYS_statx system call to replace the stat(2)
    system call and avoid the sub process at all (bsc#1194172)</changelog>
  <changelog author="werner@suse.de" date="1698062400">- Fix version at configure time as there was no .tarball-version</changelog>
</package>
<package pkgid="923635f6a3370a2941eeb76981310a7b4b42dcbd5b300bdfd0135f681601edbf" name="psmisc" arch="src">
  <version epoch="0" ver="23.0" rel="150000.6.25.1"/>
  <changelog author="schwab@suse.de" date="1432209600">- Replace negative list %nopeek with positive list %have_peekfd</changelog>
  <changelog author="werner@suse.de" date="1497960000">- Modify psmisc-22.21.dif to enforce the usage of `m' flag in
  sscanf() instead of `a' for allocation. Also avoid to small
  buffers and include sys/sysmacros.h for makedev macro.
- Add the patch psmisc-22.21-lessnfs.patch to support device
  files of mount points as well (boo#1044638)
- Add the patch psmisc-22.21-mntpt.patch to do strinfg comparision
  only for NFS shares</changelog>
  <changelog author="werner@suse.de" date="1497960001">- Update to version 23.0
  * killall: Fix process age race condition !11 Debian #822861
  * killall: only use scope of current namespace by default
  * killall: better parsing of command names
  * pstree: add cgroup namespaces !10
  * peekfd: Help give long options too !5
  * killall: correctly report when 32+ procs match !8
  * prtat: Remove duplicate options in man page !3 Debian #846387
  * pslog: New program to check what logs are open merge !1
  * fuser: increase path length for octal escaping SF [#37]
  * Make usage of linked lists of devices found in
    /proc/self/mountinfo optional
  * Make timeout() in timeout.c work with shared mmap to
    reduce the load due write/read the stat buffers
  * Add list_sort() to lists.h to be able to sort lists
  * fuser: Fixed typo for  -M flag. Debian #740275
  * pstree: by default doesn't show threadnames, use -t to show
    as it disables compaction. SF [#33] Debian #815902
  * pstree: Removed need for PATH_MAX Debian #750405
  * pstree: ignores disappeared processes. SF [#34]
  * killall: -o and -y work with -r flags. SF [#64]
  * m4/gettext.m4: Upgrade to gettext-0.19.4.
  * m4/iconv.m4: Upgrade to gettext-0.19.4.
  * m4/lib-ld.m4: Upgrade to gettext-0.19.4.
  * m4/lib-link.m4: Upgrade to gettext-0.19.4.
  * m4/lib-prefix.m4: Upgrade to gettext-0.19.4.
  * m4/nls.m4: Upgrade to gettext-0.19.4.
  * m4/po.m4: Upgrade to gettext-0.19.4.
  * m4/progtest.m4: Upgrade to gettext-0.19.4.
  * configure.ac (AM_GNU_GETTEXT_VERSION): Bump to 0.19.4.
- Make it build, that is create a po/POTFILES.in
- Remove obsolete patches
  * psmisc-22.21-boo908063.patch
  * psmisc-22.12-tigetstr.patch
  * psmisc-22.21-upstream.patch
  * psmisc-git-3638cc55b4d08851faba46635d737b24d016665b.patch
- Rename patch psmisc-22.21.dif which becomes psmisc-23.0.dif
- Make /bin/fuser a symblic link of /usr/bin/fuser (boo#1029973)
- Last revision was 78</changelog>
  <changelog author="werner@suse.de" date="1498651200">- Add patch psmisc-23.0-killall.patch to remove left over debug
  output in killall utility (boo#1046237)</changelog>
  <changelog author="werner@suse.de" date="1498651201">- Add patch psmisc-23.0-net.patch to reenable network support
  broken to my own upstream commit</changelog>
  <changelog author="werner@suse.de" date="1499256000">- Remove patches
  * psmisc-22.21-lessnfs.patch
  * psmisc-22.21-mntpt.patch
  * psmisc-23.0-net.patch
- Add patch
  0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  from https://gitlab.com/bitstreamout/psmisc/tree/mountinfo
  which is a heavily rework fuser used on NFS
  * Use mountinfo to be able to use the mount identity
    which allows to distinguish different mounts with the
    same device number as it happens with NFS shares.
  * Smaller cleanup as support of chroot environments
    and older systems.
  * Add support for name_to_handle_at() system call to
    get the real mount ID for each file
- Use test suite of psmisc in %check rpm section</changelog>
  <changelog author="werner@suse.de" date="1499342400">- Update patch
  0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch</changelog>
  <changelog author="werner@suse.de" date="1505736000">- Add patch psmisc-23.0-killall-signals.patch to fix boo#1058990
  by prior scanning for signal names in the arguments of killall</changelog>
  <changelog author="werner@suse.de" date="1507896000">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to run even on older kernels missing mnt_id tag in fdinfo</changelog>
  <changelog author="werner@suse.de" date="1526558400">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to let fuser -m also work for private mounts as well (boo#1093665)</changelog>
  <changelog author="werner@suse.de" date="1529668800">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to make fuser option -m &lt;block_device&gt; work even with mountinfo
  (bsc#1098697)</changelog>
  <changelog author="werner@suse.de" date="1540296000">- Support also btrFS entries in mountinfo, that is use stat(2) to
  determine the device of the mounted subvolume (bsc#1098697, bsc#1112780)
  this modifies patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch</changelog>
  <changelog author="werner@suse.de" date="1542196800">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to handle sub volumes of the btrFS (bsc#1112780)</changelog>
  <changelog author="werner@suse.de" date="1543579200">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Always initialize head of simple linked list (bsc#1098697)
  * stat(2) on binary does not see subvol dev</changelog>
  <changelog author="werner@suse.de" date="1587988800">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Allow not unique mounts as well as not unique mountpoint (bsc#1170247)</changelog>
  <changelog author="werner@suse.de" date="1614945600">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Fix bsc#1178407: fuser does not show open kvm storage image files
    such as qcow2 files. Patch from Ali Abdallah &lt;ali.abdallah@suse.com&gt;</changelog>
  <changelog author="werner@suse.de" date="1621339200">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Fix bsc#1185208 to make private mount namespaces work as well
    as to distinguish NFS mounts from same remote device share.</changelog>
  <changelog author="werner@suse.de" date="1644840000">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Determine the namespace of a process only once to speed
    up the parsing of fdinfo (bsc#1194172).</changelog>
  <changelog author="werner@suse.de" date="1646222400">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Add a fallback if the system call name_to_handle_at() is
    not supported by the used file system.
- Add patch psmisc-22.21-semaphores.patch
  * Replace the synchronizing over pipes of the sub process for the
    stat(2) system call with mutex and conditions from pthreads(7)
    (bsc#1194172)
- Add patch psmisc-22.21-statx.patch
  * Use statx(2) or SYS_statx system call to replace the stat(2)
    system call and avoid the sub process at all (bsc#1194172)</changelog>
  <changelog author="werner@suse.de" date="1698062400">- Fix version at configure time as there was no .tarball-version</changelog>
</package>
<package pkgid="7ddc64d7d38eb5278472270a1e7c1503bc9da3833579c425ab19cb404f381856" name="psmisc" arch="x86_64">
  <version epoch="0" ver="23.0" rel="150000.6.25.1"/>
  <changelog author="schwab@suse.de" date="1432209600">- Replace negative list %nopeek with positive list %have_peekfd</changelog>
  <changelog author="werner@suse.de" date="1497960000">- Modify psmisc-22.21.dif to enforce the usage of `m' flag in
  sscanf() instead of `a' for allocation. Also avoid to small
  buffers and include sys/sysmacros.h for makedev macro.
- Add the patch psmisc-22.21-lessnfs.patch to support device
  files of mount points as well (boo#1044638)
- Add the patch psmisc-22.21-mntpt.patch to do strinfg comparision
  only for NFS shares</changelog>
  <changelog author="werner@suse.de" date="1497960001">- Update to version 23.0
  * killall: Fix process age race condition !11 Debian #822861
  * killall: only use scope of current namespace by default
  * killall: better parsing of command names
  * pstree: add cgroup namespaces !10
  * peekfd: Help give long options too !5
  * killall: correctly report when 32+ procs match !8
  * prtat: Remove duplicate options in man page !3 Debian #846387
  * pslog: New program to check what logs are open merge !1
  * fuser: increase path length for octal escaping SF [#37]
  * Make usage of linked lists of devices found in
    /proc/self/mountinfo optional
  * Make timeout() in timeout.c work with shared mmap to
    reduce the load due write/read the stat buffers
  * Add list_sort() to lists.h to be able to sort lists
  * fuser: Fixed typo for  -M flag. Debian #740275
  * pstree: by default doesn't show threadnames, use -t to show
    as it disables compaction. SF [#33] Debian #815902
  * pstree: Removed need for PATH_MAX Debian #750405
  * pstree: ignores disappeared processes. SF [#34]
  * killall: -o and -y work with -r flags. SF [#64]
  * m4/gettext.m4: Upgrade to gettext-0.19.4.
  * m4/iconv.m4: Upgrade to gettext-0.19.4.
  * m4/lib-ld.m4: Upgrade to gettext-0.19.4.
  * m4/lib-link.m4: Upgrade to gettext-0.19.4.
  * m4/lib-prefix.m4: Upgrade to gettext-0.19.4.
  * m4/nls.m4: Upgrade to gettext-0.19.4.
  * m4/po.m4: Upgrade to gettext-0.19.4.
  * m4/progtest.m4: Upgrade to gettext-0.19.4.
  * configure.ac (AM_GNU_GETTEXT_VERSION): Bump to 0.19.4.
- Make it build, that is create a po/POTFILES.in
- Remove obsolete patches
  * psmisc-22.21-boo908063.patch
  * psmisc-22.12-tigetstr.patch
  * psmisc-22.21-upstream.patch
  * psmisc-git-3638cc55b4d08851faba46635d737b24d016665b.patch
- Rename patch psmisc-22.21.dif which becomes psmisc-23.0.dif
- Make /bin/fuser a symblic link of /usr/bin/fuser (boo#1029973)
- Last revision was 78</changelog>
  <changelog author="werner@suse.de" date="1498651200">- Add patch psmisc-23.0-killall.patch to remove left over debug
  output in killall utility (boo#1046237)</changelog>
  <changelog author="werner@suse.de" date="1498651201">- Add patch psmisc-23.0-net.patch to reenable network support
  broken to my own upstream commit</changelog>
  <changelog author="werner@suse.de" date="1499256000">- Remove patches
  * psmisc-22.21-lessnfs.patch
  * psmisc-22.21-mntpt.patch
  * psmisc-23.0-net.patch
- Add patch
  0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  from https://gitlab.com/bitstreamout/psmisc/tree/mountinfo
  which is a heavily rework fuser used on NFS
  * Use mountinfo to be able to use the mount identity
    which allows to distinguish different mounts with the
    same device number as it happens with NFS shares.
  * Smaller cleanup as support of chroot environments
    and older systems.
  * Add support for name_to_handle_at() system call to
    get the real mount ID for each file
- Use test suite of psmisc in %check rpm section</changelog>
  <changelog author="werner@suse.de" date="1499342400">- Update patch
  0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch</changelog>
  <changelog author="werner@suse.de" date="1505736000">- Add patch psmisc-23.0-killall-signals.patch to fix boo#1058990
  by prior scanning for signal names in the arguments of killall</changelog>
  <changelog author="werner@suse.de" date="1507896000">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to run even on older kernels missing mnt_id tag in fdinfo</changelog>
  <changelog author="werner@suse.de" date="1526558400">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to let fuser -m also work for private mounts as well (boo#1093665)</changelog>
  <changelog author="werner@suse.de" date="1529668800">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to make fuser option -m &lt;block_device&gt; work even with mountinfo
  (bsc#1098697)</changelog>
  <changelog author="werner@suse.de" date="1540296000">- Support also btrFS entries in mountinfo, that is use stat(2) to
  determine the device of the mounted subvolume (bsc#1098697, bsc#1112780)
  this modifies patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch</changelog>
  <changelog author="werner@suse.de" date="1542196800">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to handle sub volumes of the btrFS (bsc#1112780)</changelog>
  <changelog author="werner@suse.de" date="1543579200">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Always initialize head of simple linked list (bsc#1098697)
  * stat(2) on binary does not see subvol dev</changelog>
  <changelog author="werner@suse.de" date="1587988800">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Allow not unique mounts as well as not unique mountpoint (bsc#1170247)</changelog>
  <changelog author="werner@suse.de" date="1614945600">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Fix bsc#1178407: fuser does not show open kvm storage image files
    such as qcow2 files. Patch from Ali Abdallah &lt;ali.abdallah@suse.com&gt;</changelog>
  <changelog author="werner@suse.de" date="1621339200">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Fix bsc#1185208 to make private mount namespaces work as well
    as to distinguish NFS mounts from same remote device share.</changelog>
  <changelog author="werner@suse.de" date="1644840000">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Determine the namespace of a process only once to speed
    up the parsing of fdinfo (bsc#1194172).</changelog>
  <changelog author="werner@suse.de" date="1646222400">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Add a fallback if the system call name_to_handle_at() is
    not supported by the used file system.
- Add patch psmisc-22.21-semaphores.patch
  * Replace the synchronizing over pipes of the sub process for the
    stat(2) system call with mutex and conditions from pthreads(7)
    (bsc#1194172)
- Add patch psmisc-22.21-statx.patch
  * Use statx(2) or SYS_statx system call to replace the stat(2)
    system call and avoid the sub process at all (bsc#1194172)</changelog>
  <changelog author="werner@suse.de" date="1698062400">- Fix version at configure time as there was no .tarball-version</changelog>
</package>
<package pkgid="619a7c965c928f4765006d367d81b32df363fcb0c6497725907ea321ce744749" name="python-Jinja2" arch="src">
  <version epoch="0" ver="2.10.1" rel="150000.3.13.1"/>
  <changelog author="dmueller@suse.com" date="1373544000">- update to 2.7:
  - Choice and prefix loaders now dispatch source and template lookup
    separately in order to work in combination with module loaders as
    advertised.
  - Fixed filesizeformat.
  - Added a non-silent option for babel extraction.
  - Added `urlencode` filter that automatically quotes values for
    URL safe usage with utf-8 as only supported encoding.  If applications
    want to change this encoding they can override the filter.
  - Added `keep-trailing-newline` configuration to environments and
    templates to optionally preserve the final trailing newline.
  - Accessing `last` on the loop context no longer causes the iterator
    to be consumed into a list.
  - Python requirement changed: 2.6, 2.7 or &gt;= 3.3 are required now,
    supported by same source code, using the "six" compatibility library.
  - Allow `contextfunction` and other decorators to be applied to `__call__`.
  - Added support for changing from newline to different signs in the `wordwrap`
    filter.
  - Added support for ignoring memcache errors silently.
  - Added support for keeping the trailing newline in templates.
  - Added finer grained support for stripping whitespace on the left side
    of blocks.
  - Added `map`, `select`, `reject`, `selectattr` and `rejectattr`
    filters.
  - Added support for `loop.depth` to figure out how deep inside a recursive
    loop the code is.
  - Disabled py_compile for pypy and python 3.</changelog>
  <changelog author="dmueller@suse.com" date="1376395200">- update to 2.7.1:
  - Fixed a bug with ``call_filter`` not working properly on environment
  and context filters.
  - Fixed lack of Python 3 support for bytecode caches.
  - Reverted support for defining blocks in included templates as this
  broke existing templates for users.
  - Fixed some warnings with hashing of undefineds and nodes if Python
  is run with warnings for Python 3.
  - Added support for properly hashing undefined objects.
  - Fixed a bug with the title filter not working on already uppercase
  strings.</changelog>
  <changelog author="speilicke@suse.com" date="1378123200">- Avoid "Recommends:" on old rpm distros</changelog>
  <changelog author="speilicke@suse.com" date="1382616000">- Require python-setuptools instead of distribute (upstreams merged)</changelog>
  <changelog author="dmueller@suse.com" date="1389614400">- update to 2.7.2:
  - Prefix loader was not forwarding the locals properly to
    inner loaders.  This is now fixed.
  - Security issue: Changed the default folder for the filesystem cache to be
    user specific and read and write protected on UNIX systems.  See `Debian bug
    734747`_ for more information.</changelog>
  <changelog author="dmueller@suse.com" date="1398513600">- avoid rebuildcycle with vim</changelog>
  <changelog author="hpj@urpla.net" date="1399550400">- fix package build (file selection missing)</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405425600">- Update to 2.7.3 (bnc#858239, CVE-2014-0012)
  - Security issue: Corrected the security fix for the cache folder.
    This fix was provided by RedHat.</changelog>
  <changelog author="mcihar@suse.cz" date="1408104000">- adjust dependency to use up to date package name for python-MarkupSafe</changelog>
  <changelog author="mcihar@suse.cz" date="1408104001">- run testsuite during build</changelog>
  <changelog author="jengelh@inai.de" date="1437566400">- Use %python_version over %py_ver: better portability to RHEL</changelog>
  <changelog author="aplanas@suse.com" date="1447934400">- Update to 2.8
  - Added `target` parameter to urlize function.
  - Added support for `followsymlinks` to the file system loader.
  - The truncate filter now counts the length.
  - Added equalto filter that helps with select filters.
  - Changed cache keys to use absolute file names if available
    instead of load names.
  - Fixed loop length calculation for some iterators.
  - Changed how Jinja2 enforces strings to be native strings in
    Python 2 to work when people break their default encoding.
  - Added :func:`make_logging_undefined` which returns an undefined
    object that logs failures into a logger.
  - If unmarshalling of cached data fails the template will be
    reloaded now.
  - Implemented a block ``set`` tag.
  - Default cache size was incrased to 400 from a low 50.
  - Fixed ``is number`` test to accept long integers in all Python versions.
  - Changed ``is number`` to accept Decimal as a number.
  - Added a check for default arguments followed by non-default arguments. This
    change makes ``{% macro m(x, y=1, z) %}...{% endmacro %}`` a syntax error. The
    previous behavior for this code was broken anyway (resulting in the default
    value being applied to `y`).
  - Add ability to use custom subclasses of ``jinja2.compiler.CodeGenerator`` and
    ``jinja2.runtime.Context`` by adding two new attributes to the environment
    (`code_generator_class` and `context_class`) (pull request ``#404``).
  - added support for context/environment/evalctx decorator functions on
    the finalize callback of the environment.
  - escape query strings for urlencode properly.  Previously slashes were not
    escaped in that place.
  - Add 'base' parameter to 'int' filter.
- Tests are removed from the package (not distributed in the tar.gz)</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to 2.9.5  (bsc#1132174, CVE-2016-10745)
  (see the changes in /usr/share/doc/packages/python-Jinja2/CHANGES)
- updated source URL</changelog>
  <changelog author="dmueller@suse.com" date="1490184000">- fix requires</changelog>
  <changelog author="jmatejek@suse.com" date="1491307200">- update for singlespec
- update to 2.9.6
  * fixed custom context behavior in fast resolve mode</changelog>
  <changelog author="arun@gmx.de" date="1510228800">- specfile:
  * CHANGES -&gt; CHANGES.rst
  * added README.rst to %doc section
- update to version 2.10:
  * Added a new extension node called "OverlayScope" which can be used
    to create an unoptimized scope that will look up all variables
    from a derived context.
  * Added an "in" test that works like the in operator.  This can be
    used in combination with "reject" and "select".
  * Added "previtem" and "nextitem" to loop contexts, providing access
    to the previous/next item in the loop. If such an item does not
    exist, the value is undefined.
  * Added "changed(*values)" to loop contexts, providing an easy way
    of checking whether a value has changed since the last iteration
    (or rather since the last call of the method)
  * Added a "namespace" function that creates a special object which
    allows attribute assignment using the "set" tag.  This can be used
    to carry data across scopes, e.g. from a loop body to code that
    comes after the loop.
  * Added a "trimmed" modifier to "{% trans %}" to strip linebreaks
    and surrounding whitespace. Also added a new policy to enable this
    for all "trans" blocks.
  * The "random" filter is no longer incorrectly constant folded and
    will produce a new random choice each time the template is
    rendered. (`#478`_)
  * Added a "unique" filter. (`#469`_)
  * Added "min" and "max" filters. (`#475`_)
  * Added tests for all comparison operators: "eq", "ne", "lt", "le",
    "gt", "ge". (`#665`_)
  * "import" statement cannot end with a trailing comma. (`#617`_,
    `#618`_)
  * "indent" filter will not indent blank lines by default. (`#685`_)
  * Add "reverse" argument for "dictsort" filter. (`#692`_)
  * Add a "NativeEnvironment" that renders templates to native Python
    types instead of strings. (`#708`_)
  * Added filter support to the block "set" tag. (`#489`_)
  * "tojson" filter marks output as safe to match documented behavior.
    (`#718`_)
  * Resolved a bug where getting debug locals for tracebacks could
    modify template context.
  * Fixed a bug where having many "{% elif ... %}" blocks resulted in
    a "too many levels of indentation" error.  These blocks now
    compile to native "elif ..:" instead of "else: if ..:" (`#759`_)</changelog>
  <changelog author="arun@gmx.de" date="1555156800">- update to version 2.10.1 (bsc#1132323, CVE-2019-10906, bsc#1125815, CVE-2019-8341):
  * "SandboxedEnvironment" securely handles "str.format_map" in order
    to prevent code execution through untrusted format strings.  The
    sandbox already handled "str.format".</changelog>
  <changelog author="atoptsoglou@suse.com" date="1612872000">- CVE-2020-28493: Fixed a ReDOS vulnerability where urlize could have
  been called with untrusted user data (bsc#1181944).
  Added CVE-2020-28493.patch</changelog>
  <changelog author="atoptsoglou@suse.com" date="1613649600">- Fixed IndentationError in CVE-2020-28493.patch (bsc#1182244)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1715083200">- Add CVE-2024-34064.patch upstream patch
  (CVE-2024-34064, bsc#1223980, gh#pallets/jinja@0668239dc6b4)
  Also fixes (CVE-2024-22195, bsc#1218722)</changelog>
</package>
<package pkgid="b99f7e739848f566044a216eb93457bdf1e1eaa29e4e7dfdc5835e0a2651b038" name="python-PyYAML" arch="src">
  <version epoch="0" ver="5.4.1" rel="150300.3.3.1"/>
  <changelog author="saschpe@suse.de" date="1328011200">- Initial version</changelog>
  <changelog author="saschpe@suse.de" date="1355918400">- Build against libyaml to get the faster module</changelog>
  <changelog author="p.drouand@gmail.com" date="1357819200">- Initial python3 support</changelog>
  <changelog author="dvaleev@suse.com" date="1362484800">- increase file-descriptor-count for ppc to make tests happy</changelog>
  <changelog author="ro@suse.de" date="1391601600">- increase file-descriptor-count for s390 to make tests happy</changelog>
  <changelog author="toddrme2178@gmail.com" date="1406721600">- Update to 3.11
  - Source and binary distributions are rebuilt against the latest
    versions of Cython and LibYAML.</changelog>
  <changelog author="mardnh@gmx.de" date="1472904000">- Update to 3.12
  - Adding an implicit resolver to a derived loader should not
    affect the base loader (fixes issue #57).
  - Uniform representation for OrderedDict? across different
    versions of Python (fixes issue #61).
  - Fixed comparison to None warning (closes issue #64).
- fix Source URL</changelog>
  <changelog author="jmatejek@suse.com" date="1487592000">- update for multipython build</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1488542400">- Use pythonhosted.org for the reference link.
- Provide python-yaml instead of python2-yaml again.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1531656000">- update to 3.13
  * fix compactibility with python 3.7</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tchvatal@suse.com" date="1552564800">- Update to 5.1:
  * many changes, see CHANGES
  * bsc#1099308 CVE-2017-18342 PyYAML: yaml.load() API could execute arbitrary code</changelog>
  <changelog author="mimi.vx@gmail.com" date="1559908800">- update to 5.1.1
  * Re-release of 5.1 with regenerated Cython sources to build properly for Python 3.8</changelog>
  <changelog author="mcalabkova@suse.com" date="1564660800">- update to 5.1.2
  * Re-release of 5.1 with regenerated Cython sources to build properly for Python 3.8b2+</changelog>
  <changelog author="mimi.vx@gmail.com" date="1575374400">- update to 5.2
  * A more flexible fix for custom tag constructors
  * Change default loader for yaml.add_constructor
  * Change default loader for add_implicit_resolver, add_path_resolver
  * Move constructor for object/apply to UnsafeConstructor
  * Fix logic for quoting special characters</changelog>
  <changelog author="mimi.vx@gmail.com" date="1578398400">- update to 5.3
  * Use `is` instead of equality for comparing with `None`
  * fix typos and stylistic nit
  * Fix up small typo
  * Fix handling of __slots__
  * Allow calling add_multi_constructor with None
  * Add use of safe_load() function in README
  * Fix reader for Unicode code points over 0xFFFF
  * Enable certain unicode tests when maxunicode not &gt; 0xffff
  * Use full_load in yaml-highlight example
  * Document that PyYAML is implemented with Cython
  * Fix for Python 3.10
  * increase size of index, line, and column fields
  * remove some unused imports
  * Create timezone-aware datetimes when parsed as such
  * Add tests for timezone</changelog>
  <changelog author="mimi.vx@gmail.com" date="1584619200">- update to 5.3.1
  * fixes boo#1165439 (cve-2020-1747) Prevents arbitrary code execution
  during python/object/new constructor</changelog>
  <changelog author="dmueller@suse.com" date="1611489600">- update to 5.4.1 (bsc#1174514, CVE-2020-14343):
  * Fix stub compat with older pyyaml versions that may unwittingly load it
  * Build modernization, remove distutils, fix metadata, build wheels, CI to GHA
  * Fix for CVE-2020-14343, moves arbitrary python tags to UnsafeLoader
  * Fix memory leak in implicit resolver setup
  * Fix py2 copy support for timezone objects
  * Fix compatibility with Jython</changelog>
  <changelog author="dmueller@suse.com" date="1718107200">- reenable the cython yaml loader (bsc#1225641)</changelog>
</package>
<package pkgid="ba5ac5c40f8f246de9231cbc79b3c8bec9c302f03ad421a6f2948548108e8704" name="python-chardet" arch="src">
  <version epoch="0" ver="3.0.4" rel="150000.5.3.1"/>
  <changelog author="alexandre@exatati.com.br" date="1264420800">- Initial package (2.0.1) for openSUSE.</changelog>
  <changelog author="alexandre@exatati.com.br" date="1301140800">- Regenerate spec file with py2pack;
- Bzip2 source file.</changelog>
  <changelog author="coolo@suse.com" date="1323345600">- the license seems to be LGPL-2.1+</changelog>
  <changelog author="alexandre@exatati.com.br" date="1325073600">- Standard in spec file;
- Remove CFLAGS and %clean section from spec file.</changelog>
  <changelog author="alexandre@exatati.com.br" date="1343390400">- Update to 1.1:
  - Sorry, no changelog.</changelog>
  <changelog author="alexandre@exatati.com.br" date="1349179200">- Update to 2.1.1:
  - Sorry, no changelog.</changelog>
  <changelog author="speilicke@suse.com" date="1382616000">- Require python-setuptools instead of distribute (upstreams merged)</changelog>
  <changelog author="aloisio@gmx.com" date="1423569600">- Update to version 2.3.0
  * Added support for CP932 detection (thanks to @hashy)
  * Fixed an issue where UTF-8 with a BOM would not be detected
    as UTF-8-SIG (#8)
  * Modified chardetect to use argparse for argument parsing
  * Moved docs to a gh-pages branch. You can now access them
    at http://chardet.github.io
- Changelog on https://github.com/chardet/chardet/commits/2.3.0
- Other minor changes</changelog>
  <changelog author="arun@gmx.de" date="1431345600">- specfile:
  * added update alternative to prevent conflicts with python3 version
  * add tests</changelog>
  <changelog author="rjschwei@suse.com" date="1485777600">- Include in SLE 12 (bsc#1002895, FATE#321630)</changelog>
  <changelog author="aloisio@gmx.com" date="1489924800">- Converted to single spec.</changelog>
  <changelog author="jmatejek@suse.com" date="1490097600">- do not use %py_ver, replace with %python_version</changelog>
  <changelog author="dmueller@suse.com" date="1497096000">- update to 3.0.4</changelog>
  <changelog author="ecsos@opensuse.org" date="1498737600">- fix source link</changelog>
  <changelog author="dmueller@suse.com" date="1502798400">- add update-alternative support for py2/py3 coinstallability</changelog>
  <changelog author="tbechtold@suse.com" date="1503662400">- Fix build for Leap-42.3</changelog>
  <changelog author="dmueller@suse.com" date="1505908800">- add update-alternatives post-requires</changelog>
  <changelog author="daniel.garcia@suse.com" date="1705406400">- Fix update-alternative in %postun, bsc#1218765</changelog>
</package>
<package pkgid="8615c8b43f152a6335e69d7eb7a4620a7a14cf64bf6bb40117d66fcc7839c719" name="python-cssselect" arch="src">
  <version epoch="0" ver="1.0.3" rel="150000.3.5.1"/>
  <changelog author="iacobcatalin@gmail.com" date="1357646400">- Initial package 0.7.1</changelog>
  <changelog author="saschpe@suse.de" date="1358164800">- Minimal cleanup</changelog>
  <changelog author="arun@gmx.de" date="1364472000">- updated to 0.8
  Changelog (http://pythonhosted.org/cssselect/#changelog):
    Released on 2013-03-15.
    Improvements:
    [#22] Let extended translators override what XPathExpr class is used
    [#19] Use the built-in lang() XPath function for implementing the :lang() pseudo-class with XML documents. This is probably faster than ancestor-or-self::.
    Bug fixes:
    [#14] Fix non-ASCII pseudo-classes. (Invalid selector instead of crash.)
    [#20] As per the spec, elements containing only whitespace are not considered empty for the :empty pseudo-class.</changelog>
  <changelog author="arun@gmx.de" date="1373371200">- Packaged LICENSE file
  fixes bnc#828513
  Bug 828513 - LICENSE not packaged in python3-cssselect 0.8</changelog>
  <changelog author="p.drouand@gmail.com" date="1385208000">- Update to version 0.9.1
  + **Backward incompatible change from 0.9**:
    :meth:`~GenericTranslator.selector_to_xpath` defaults to ignoring
    pseudo-elements, as it did in 0.8 and previous versions.
    (:meth:`~GenericTranslator.css_to_xpath` doesn’t change.)
  + Drop official support for Python 2.4 and 3.1,
    as testing was becoming difficult. Nothing will break overnight,
    but future releases may on may not work on these versions.
    Older releases will remain available on PyPI.
- Changes from 0.9
  + Add parser support for :attr:`functional pseudo-elements
    &lt;Selector.pseudo_element&gt;`.
  + This version accidentally introduced a backward incompatible change:
    :meth:`~GenericTranslator.selector_to_xpath` defaults to rejecting
    pseudo-elements instead of ignoring them.
- Remove useless CFLAGS definition
- Add README.rst, CHANGES and AUTHORS in package documentation</changelog>
  <changelog author="tbechtold@suse.com" date="1490788800">- update to 1.0.1:
  * Add support for Python 3.6.
  * Documentation hosted `on Read the Docs &lt;https://cssselect.readthedocs.io/&gt;`_
  * Add code coverage reports.
  * Fix ``:nth-*(an+b)`` pseudo-classes selectors.
    (except ``*:nth-child()`` which looks untranslatable to XPath 1.0.)
  * Distribute as universal wheel.
  * Add support for Python 3.3, 3.4 and 3.5.
  * Drop support for Python 2.5 as testing is getting difficult.
  * Improve tests on pseudo-elements.
- Switch to singlespec approach</changelog>
  <changelog author="arun@gmx.de" date="1515240000">- specfile:
  * update copyright year
- update to version 1.0.3:
  * Fix artifact uploads to pypi
- changes from version 1.0.2:
  * Drop support for Python 2.6 and Python 3.3.
  * Fix deprecation warning in Python 3.6.
  * Minor cleanups.</changelog>
</package>
<package pkgid="d332320ba530f2d5928c765d661cb75d78b4fe27abcfc9222f8145686d0fb0cc" name="python-cssselect" arch="src">
  <version epoch="0" ver="1.0.3" rel="150400.3.7.4"/>
  <changelog author="iacobcatalin@gmail.com" date="1357646400">- Initial package 0.7.1</changelog>
  <changelog author="saschpe@suse.de" date="1358164800">- Minimal cleanup</changelog>
  <changelog author="arun@gmx.de" date="1364472000">- updated to 0.8
  Changelog (http://pythonhosted.org/cssselect/#changelog):
    Released on 2013-03-15.
    Improvements:
    [#22] Let extended translators override what XPathExpr class is used
    [#19] Use the built-in lang() XPath function for implementing the :lang() pseudo-class with XML documents. This is probably faster than ancestor-or-self::.
    Bug fixes:
    [#14] Fix non-ASCII pseudo-classes. (Invalid selector instead of crash.)
    [#20] As per the spec, elements containing only whitespace are not considered empty for the :empty pseudo-class.</changelog>
  <changelog author="arun@gmx.de" date="1373371200">- Packaged LICENSE file
  fixes bnc#828513
  Bug 828513 - LICENSE not packaged in python3-cssselect 0.8</changelog>
  <changelog author="p.drouand@gmail.com" date="1385208000">- Update to version 0.9.1
  + **Backward incompatible change from 0.9**:
    :meth:`~GenericTranslator.selector_to_xpath` defaults to ignoring
    pseudo-elements, as it did in 0.8 and previous versions.
    (:meth:`~GenericTranslator.css_to_xpath` doesn’t change.)
  + Drop official support for Python 2.4 and 3.1,
    as testing was becoming difficult. Nothing will break overnight,
    but future releases may on may not work on these versions.
    Older releases will remain available on PyPI.
- Changes from 0.9
  + Add parser support for :attr:`functional pseudo-elements
    &lt;Selector.pseudo_element&gt;`.
  + This version accidentally introduced a backward incompatible change:
    :meth:`~GenericTranslator.selector_to_xpath` defaults to rejecting
    pseudo-elements instead of ignoring them.
- Remove useless CFLAGS definition
- Add README.rst, CHANGES and AUTHORS in package documentation</changelog>
  <changelog author="tbechtold@suse.com" date="1490788800">- update to 1.0.1:
  * Add support for Python 3.6.
  * Documentation hosted `on Read the Docs &lt;https://cssselect.readthedocs.io/&gt;`_
  * Add code coverage reports.
  * Fix ``:nth-*(an+b)`` pseudo-classes selectors.
    (except ``*:nth-child()`` which looks untranslatable to XPath 1.0.)
  * Distribute as universal wheel.
  * Add support for Python 3.3, 3.4 and 3.5.
  * Drop support for Python 2.5 as testing is getting difficult.
  * Improve tests on pseudo-elements.
- Switch to singlespec approach</changelog>
  <changelog author="arun@gmx.de" date="1515240000">- specfile:
  * update copyright year
- update to version 1.0.3:
  * Fix artifact uploads to pypi
- changes from version 1.0.2:
  * Drop support for Python 2.6 and Python 3.3.
  * Fix deprecation warning in Python 3.6.
  * Minor cleanups.</changelog>
</package>
<package pkgid="50be6114fd5b1f9d3f740bc58cd2486f1a385dc01291b83b98606a3288af0ee4" name="python-dnspython" arch="src">
  <version epoch="0" ver="1.15.0" rel="150000.3.10.2"/>
  <changelog author="alexandre@exatati.com.br" date="1290427200">- Update to 1.9.0:
  New since 1.8.0:
  - dnspython now uses poll() instead of select() when available.
  - Basic DNSSEC validation can be done using dns.dnsec.validate()
    and dns.dnssec.validate_rrsig() if you have PyCrypto 2.3 or
    later installed. Complete secure resolution is not yet
    available.
  - Added key_id() to the DNSSEC module, which computes the DNSSEC
    key id of a DNSKEY rdata.
  - Added make_ds() to the DNSSEC module, which returns the DS RR
    for a given DNSKEY rdata.
  - dnspython now raises an exception if HMAC-SHA284 or
    HMAC-SHA512 are used with a Python older than 2.5.2. (Older
    Pythons do not compute the correct value.)
  - Symbolic constants are now available for TSIG algorithm names.
  Bugs fixed since 1.8.0:
  - dns.resolver.zone_for_name() didn't handle a query response
    with a CNAME or DNAME correctly in some cases.
  - When specifying rdata types and classes as text, Unicode
    strings may now be used.
  - Hashlib compatibility issues have been fixed.
  - dns.message now imports dns.edns.
  - The TSIG algorithm value was passed incorrectly to use_tsig()
    in some cases.</changelog>
  <changelog author="alexandre@exatati.com.br" date="1290427201">- Update to 1.9.1:
  Bugs fixed since 1.9.0:
  - The dns.dnssec module didn't work with DSA due to namespace
    contamination from a "from"-style import.</changelog>
  <changelog author="alexandre@exatati.com.br" date="1290513600">- Update to 1.9.2:
  - The fix for the import problems was actually bad, but didn't
    show up in testing because the test suite's conditional
    importing code hid the problem.</changelog>
  <changelog author="alexandre@exatati.com.br" date="1300968000">- Update to 1.9.3:
  Bugs fixed since 1.9.2:
  - Dnspython was erroneously doing case-insensitive comparisons
    of the names in NSEC and RRSIG RRs.
  - We now use "is" and not "==" when testing what section an RR
    is in.
  - The resolver now disallows metaqueries.
  New since 1.9.2:
  - A boolean parameter, 'raise_on_no_answer', has been added to
    the query() methods.  In no-error, no-data situations, this
    parameter determines whether NoAnswer should be raised or not.
    If True, NoAnswer is raised.  If False, then an Answer()
    object with a None rrset will be returned.
  - Resolver Answer() objects now have a canonical_name field.
  - Rdata now have a __hash__ method.
- Regenerated spec file with py2pack;
- Removed LICENSE PKG-INFO and TODO files from documentation.</changelog>
  <changelog author="alexandre@exatati.com.br" date="1300968001">- Fix SLE_10 build.</changelog>
  <changelog author="alexandre@exatati.com.br" date="1301313600">- Update to 1.9.4:
  - There is no new functionality in this release;
    just a few bug fixes in RRSIG and SIG code.
  - Legacy code will be eliminated for earlier versions of
    DNSSEC in a future release of dnspython.</changelog>
  <changelog author="jengelh@inai.de" date="1338465600">- Update to new upstream release 1.10.0
  * Added dns.resolver.LRUCache.
  * dns.resolver.query() will try TCP if a UDP response is truncated.
  * The python socket module's DNS methods can be now be overriden
  with implementations that use dnspython's resolver.
- Remove redundant tags/sections from specfile
- Correct license field</changelog>
  <changelog author="cfarrell@suse.com" date="1338465601">- license update: ISC
  See LICENSE (and compare http://www.spdx.org/licenses/MIT with
  http://www.spdx.org/licenses/ISC)</changelog>
  <changelog author="dmueller@suse.com" date="1373544000">- update to 1.11.0:
  * TLSA RR support
  * Added set_flags() method to dns.resolver.Resolver
  * Names with offsets &gt;= 2^14 are no longer added to the compression
    table.
  * The "::" syntax is not used to shorten a single 16-bit section of
  the text form an IPv6 address.
  * Empty rdatasets are not printed.
  * DNSKEY key tags are no longer assumed to be unique.</changelog>
  <changelog author="speilicke@suse.com" date="1373889600">- Package LICENSE, use proper upstream URL
- Run testsuite
- Cleanup macro usage</changelog>
  <changelog author="dmueller@suse.com" date="1378900800">- update to 1.11.1:
  * fix syntax error exception on dns server failure
  * various fixlets for DNSSEC support</changelog>
  <changelog author="lars@linux-schulserver.de" date="1413547200">- update to 1.12.0:
  * The test system can now run the tests without requiring dnspython
    to be installed.
  * When reading from a masterfile, if the first content line
    started with leading whitespace, we raised an ugly exception
    instead of doing the right thing, namely using the zone origin as
    the name. [#73]  Thanks to Tassatux for reporting the issue.
  * Added dns.zone.to_text() convenience method.  Thanks to Brandon
    Whaley &lt;redkrieg@gmail.com&gt; for the patch.
  * The /etc/resolv.conf setting "options rotate" is now understood
    by the resolver.  If present, the resolver will shuffle the
    nameserver list each time dns.resolver.query() is called.  Thanks
    to underrun for the patch.  Note that you don't want to add
    "options rotate" to your /etc/resolv.conf if your system's
    resolver library does not understand it.  In this case, just set
    resolver.rotate = True by hand.
  * Escaping of Unicode has been corrected.  Previously we escaped
    and then converted to Unicode, but the right thing to do is
    convert to Unicode, then escape.  Also, characters &gt; 0x7f should
    NOT be escaped in Unicode mode.  Thanks to Martin Basti for the
    patch.
  * dns.rdtypes.ANY.DNSKEY now has helpers functions to convert
    between the numeric form of the flags and a set of human-friendly
    strings.  Thanks to Petr Spacek for the patch.
  * RRSIGs did not respect relativization settings in to_text().
    Thanks to Brian Smith for reporting the bug and submitting a
    (slightly different) patch.
  * dns/rdtypes/IN/APL.py: The APL from_wire() method did not accept an
    rdata length of 0 as valid.  Thanks to salzmdan for reporting the
    problem.
  * dns/ipv6.py: Add is_mapped()
  * dns/reversename.py: Lookup IPv6 mapped IPv4 addresses in the v4
    reverse namespace.  Thanks to Devin Bayer.  Yes, I finally fixed
    this one :)
  * dns/zone.py: Do not put back an unescaped token.  This was
    causing escape processing for domain names to break.  Thanks to
    connormclaud for reporting the problem.
  * dns/message.py: Making a response didn't work correctly if the
    query was signed with TSIG and we knew the key.  Thanks to Jeffrey
    Stiles for reporting the problem.
  * dns/query.py: Fix problems with the IXFR state machine which caused
    long diffs to fail.  Thanks to James Raftery for the fix and the
    repeated prodding to get it applied :)
- enable some tests
- add python-dnspython-rpmlintrc file
- add python-ecdsa and python-pycrypto to BuildRequires for the
  DNSSec tests
- use /usr/bin/python instead of /usr/bin/env python for the example
  scripts to avoid additional dependencies</changelog>
  <changelog author="dmueller@suse.com" date="1416916800">- fix build on SLE11</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1463400000">- New upstream release 1.13.0</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1465905600">- New upstream release 1.14.0</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1475928000">- New upstream release 1.15.0
  * IDNA 2008 support is now available if the "idna" module has been
    installed and IDNA 2008 is requested.  The default IDNA behavior
    is still IDNA 2003.  The new IDNA codec mechanism is currently
    only useful for direct calls to dns.name.from_text() or
    dns.name.from_unicode(), but in future releases it will be
    deployed throughout dnspython, e.g. so that you can read a
    masterfile with an IDNA 2008 codec in force.
  * By default, dns.name.to_unicode() is not strict about which
    version of IDNA the input complies with.  Strictness can be
    requested by using one of the strict IDNA codecs.
  * Add AVC RR support.
  * Some problems with newlines in various output modes have been
    addressed.
  * dns.name.to_text() now returns text and not bytes on Python 3.x
  * More miscellaneous fixes for the Python 2/3 codeline merge.
- Include readme with readme.patch as not included in upstream tarball
- Fix a bug in the tests code with 210.patch with upstream pull request #210</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1476014400">- use and recommend python-ecdsa and python-pycrypto for dnssec support</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1493726400">- Update for the multipython build.
- Rename python-dnspython.asc to python-dnspython.keyring.
- Spec cleanup.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1720699200">- Add new patches to solve DoS:
  - CVE-2023-29483-pre1.patch
  - CVE-2023-29483.patch
  (bsc#1222693, CVE-2023-29483, gh#rthalley/dnspython#1044)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1725969600">- Fix CVE-2023-29483-pre1.patch
  (bsc#1230353, gh#rthalley/dnspython@6d590f0a2e1b, gh#nrhall/dnspython@55d6a9d81930)</changelog>
</package>
<package pkgid="5e93bdcf1b68213f1c86235a8a760dcc5e621ed7d0315f046ac8c21fd38fa811" name="python-dnspython" arch="src">
  <version epoch="0" ver="1.15.0" rel="150000.3.5.1"/>
  <changelog author="alexandre@exatati.com.br" date="1264593600">- Update to 1.8.0;
- Building as noarch for openSUSE &gt;= 11.2.</changelog>
  <changelog author="alexandre@exatati.com.br" date="1290427200">- Update to 1.9.0:
  New since 1.8.0:
  - dnspython now uses poll() instead of select() when available.
  - Basic DNSSEC validation can be done using dns.dnsec.validate()
    and dns.dnssec.validate_rrsig() if you have PyCrypto 2.3 or
    later installed. Complete secure resolution is not yet
    available.
  - Added key_id() to the DNSSEC module, which computes the DNSSEC
    key id of a DNSKEY rdata.
  - Added make_ds() to the DNSSEC module, which returns the DS RR
    for a given DNSKEY rdata.
  - dnspython now raises an exception if HMAC-SHA284 or
    HMAC-SHA512 are used with a Python older than 2.5.2. (Older
    Pythons do not compute the correct value.)
  - Symbolic constants are now available for TSIG algorithm names.
  Bugs fixed since 1.8.0:
  - dns.resolver.zone_for_name() didn't handle a query response
    with a CNAME or DNAME correctly in some cases.
  - When specifying rdata types and classes as text, Unicode
    strings may now be used.
  - Hashlib compatibility issues have been fixed.
  - dns.message now imports dns.edns.
  - The TSIG algorithm value was passed incorrectly to use_tsig()
    in some cases.</changelog>
  <changelog author="alexandre@exatati.com.br" date="1290427201">- Update to 1.9.1:
  Bugs fixed since 1.9.0:
  - The dns.dnssec module didn't work with DSA due to namespace
    contamination from a "from"-style import.</changelog>
  <changelog author="alexandre@exatati.com.br" date="1290513600">- Update to 1.9.2:
  - The fix for the import problems was actually bad, but didn't
    show up in testing because the test suite's conditional
    importing code hid the problem.</changelog>
  <changelog author="alexandre@exatati.com.br" date="1300968000">- Update to 1.9.3:
  Bugs fixed since 1.9.2:
  - Dnspython was erroneously doing case-insensitive comparisons
    of the names in NSEC and RRSIG RRs.
  - We now use "is" and not "==" when testing what section an RR
    is in.
  - The resolver now disallows metaqueries.
  New since 1.9.2:
  - A boolean parameter, 'raise_on_no_answer', has been added to
    the query() methods.  In no-error, no-data situations, this
    parameter determines whether NoAnswer should be raised or not.
    If True, NoAnswer is raised.  If False, then an Answer()
    object with a None rrset will be returned.
  - Resolver Answer() objects now have a canonical_name field.
  - Rdata now have a __hash__ method.
- Regenerated spec file with py2pack;
- Removed LICENSE PKG-INFO and TODO files from documentation.</changelog>
  <changelog author="alexandre@exatati.com.br" date="1300968001">- Fix SLE_10 build.</changelog>
  <changelog author="alexandre@exatati.com.br" date="1301313600">- Update to 1.9.4:
  - There is no new functionality in this release;
    just a few bug fixes in RRSIG and SIG code.
  - Legacy code will be eliminated for earlier versions of
    DNSSEC in a future release of dnspython.</changelog>
  <changelog author="jengelh@inai.de" date="1338465600">- Update to new upstream release 1.10.0
  * Added dns.resolver.LRUCache.
  * dns.resolver.query() will try TCP if a UDP response is truncated.
  * The python socket module's DNS methods can be now be overriden
  with implementations that use dnspython's resolver.
- Remove redundant tags/sections from specfile
- Correct license field</changelog>
  <changelog author="cfarrell@suse.com" date="1338465601">- license update: ISC
  See LICENSE (and compare http://www.spdx.org/licenses/MIT with
  http://www.spdx.org/licenses/ISC)</changelog>
  <changelog author="dmueller@suse.com" date="1373544000">- update to 1.11.0:
  * TLSA RR support
  * Added set_flags() method to dns.resolver.Resolver
  * Names with offsets &gt;= 2^14 are no longer added to the compression
    table.
  * The "::" syntax is not used to shorten a single 16-bit section of
  the text form an IPv6 address.
  * Empty rdatasets are not printed.
  * DNSKEY key tags are no longer assumed to be unique.</changelog>
  <changelog author="speilicke@suse.com" date="1373889600">- Package LICENSE, use proper upstream URL
- Run testsuite
- Cleanup macro usage</changelog>
  <changelog author="dmueller@suse.com" date="1378900800">- update to 1.11.1:
  * fix syntax error exception on dns server failure
  * various fixlets for DNSSEC support</changelog>
  <changelog author="lars@linux-schulserver.de" date="1413547200">- update to 1.12.0:
  * The test system can now run the tests without requiring dnspython
    to be installed.
  * When reading from a masterfile, if the first content line
    started with leading whitespace, we raised an ugly exception
    instead of doing the right thing, namely using the zone origin as
    the name. [#73]  Thanks to Tassatux for reporting the issue.
  * Added dns.zone.to_text() convenience method.  Thanks to Brandon
    Whaley &lt;redkrieg@gmail.com&gt; for the patch.
  * The /etc/resolv.conf setting "options rotate" is now understood
    by the resolver.  If present, the resolver will shuffle the
    nameserver list each time dns.resolver.query() is called.  Thanks
    to underrun for the patch.  Note that you don't want to add
    "options rotate" to your /etc/resolv.conf if your system's
    resolver library does not understand it.  In this case, just set
    resolver.rotate = True by hand.
  * Escaping of Unicode has been corrected.  Previously we escaped
    and then converted to Unicode, but the right thing to do is
    convert to Unicode, then escape.  Also, characters &gt; 0x7f should
    NOT be escaped in Unicode mode.  Thanks to Martin Basti for the
    patch.
  * dns.rdtypes.ANY.DNSKEY now has helpers functions to convert
    between the numeric form of the flags and a set of human-friendly
    strings.  Thanks to Petr Spacek for the patch.
  * RRSIGs did not respect relativization settings in to_text().
    Thanks to Brian Smith for reporting the bug and submitting a
    (slightly different) patch.
  * dns/rdtypes/IN/APL.py: The APL from_wire() method did not accept an
    rdata length of 0 as valid.  Thanks to salzmdan for reporting the
    problem.
  * dns/ipv6.py: Add is_mapped()
  * dns/reversename.py: Lookup IPv6 mapped IPv4 addresses in the v4
    reverse namespace.  Thanks to Devin Bayer.  Yes, I finally fixed
    this one :)
  * dns/zone.py: Do not put back an unescaped token.  This was
    causing escape processing for domain names to break.  Thanks to
    connormclaud for reporting the problem.
  * dns/message.py: Making a response didn't work correctly if the
    query was signed with TSIG and we knew the key.  Thanks to Jeffrey
    Stiles for reporting the problem.
  * dns/query.py: Fix problems with the IXFR state machine which caused
    long diffs to fail.  Thanks to James Raftery for the fix and the
    repeated prodding to get it applied :)
- enable some tests
- add python-dnspython-rpmlintrc file
- add python-ecdsa and python-pycrypto to BuildRequires for the
  DNSSec tests
- use /usr/bin/python instead of /usr/bin/env python for the example
  scripts to avoid additional dependencies</changelog>
  <changelog author="dmueller@suse.com" date="1416916800">- fix build on SLE11</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1463400000">- New upstream release 1.13.0</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1465905600">- New upstream release 1.14.0</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1475928000">- New upstream release 1.15.0
  * IDNA 2008 support is now available if the "idna" module has been
    installed and IDNA 2008 is requested.  The default IDNA behavior
    is still IDNA 2003.  The new IDNA codec mechanism is currently
    only useful for direct calls to dns.name.from_text() or
    dns.name.from_unicode(), but in future releases it will be
    deployed throughout dnspython, e.g. so that you can read a
    masterfile with an IDNA 2008 codec in force.
  * By default, dns.name.to_unicode() is not strict about which
    version of IDNA the input complies with.  Strictness can be
    requested by using one of the strict IDNA codecs.
  * Add AVC RR support.
  * Some problems with newlines in various output modes have been
    addressed.
  * dns.name.to_text() now returns text and not bytes on Python 3.x
  * More miscellaneous fixes for the Python 2/3 codeline merge.
- Include readme with readme.patch as not included in upstream tarball
- Fix a bug in the tests code with 210.patch with upstream pull request #210</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1476014400">- use and recommend python-ecdsa and python-pycrypto for dnssec support</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1493726400">- Update for the multipython build.
- Rename python-dnspython.asc to python-dnspython.keyring.
- Spec cleanup.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1720699200">- Add new patches to solve DoS:
  - CVE-2023-29483-pre1.patch
  - CVE-2023-29483.patch
  (bsc#1222693, CVE-2023-29483, gh#rthalley/dnspython#1044)</changelog>
</package>
<package pkgid="f5011a156c511177bec78a30dc2b82f3dca5b136db194600cf84aa94eded389d" name="python-dnspython" arch="src">
  <version epoch="0" ver="1.15.0" rel="150000.3.7.1"/>
  <changelog author="alexandre@exatati.com.br" date="1264593600">- Update to 1.8.0;
- Building as noarch for openSUSE &gt;= 11.2.</changelog>
  <changelog author="alexandre@exatati.com.br" date="1290427200">- Update to 1.9.0:
  New since 1.8.0:
  - dnspython now uses poll() instead of select() when available.
  - Basic DNSSEC validation can be done using dns.dnsec.validate()
    and dns.dnssec.validate_rrsig() if you have PyCrypto 2.3 or
    later installed. Complete secure resolution is not yet
    available.
  - Added key_id() to the DNSSEC module, which computes the DNSSEC
    key id of a DNSKEY rdata.
  - Added make_ds() to the DNSSEC module, which returns the DS RR
    for a given DNSKEY rdata.
  - dnspython now raises an exception if HMAC-SHA284 or
    HMAC-SHA512 are used with a Python older than 2.5.2. (Older
    Pythons do not compute the correct value.)
  - Symbolic constants are now available for TSIG algorithm names.
  Bugs fixed since 1.8.0:
  - dns.resolver.zone_for_name() didn't handle a query response
    with a CNAME or DNAME correctly in some cases.
  - When specifying rdata types and classes as text, Unicode
    strings may now be used.
  - Hashlib compatibility issues have been fixed.
  - dns.message now imports dns.edns.
  - The TSIG algorithm value was passed incorrectly to use_tsig()
    in some cases.</changelog>
  <changelog author="alexandre@exatati.com.br" date="1290427201">- Update to 1.9.1:
  Bugs fixed since 1.9.0:
  - The dns.dnssec module didn't work with DSA due to namespace
    contamination from a "from"-style import.</changelog>
  <changelog author="alexandre@exatati.com.br" date="1290513600">- Update to 1.9.2:
  - The fix for the import problems was actually bad, but didn't
    show up in testing because the test suite's conditional
    importing code hid the problem.</changelog>
  <changelog author="alexandre@exatati.com.br" date="1300968000">- Update to 1.9.3:
  Bugs fixed since 1.9.2:
  - Dnspython was erroneously doing case-insensitive comparisons
    of the names in NSEC and RRSIG RRs.
  - We now use "is" and not "==" when testing what section an RR
    is in.
  - The resolver now disallows metaqueries.
  New since 1.9.2:
  - A boolean parameter, 'raise_on_no_answer', has been added to
    the query() methods.  In no-error, no-data situations, this
    parameter determines whether NoAnswer should be raised or not.
    If True, NoAnswer is raised.  If False, then an Answer()
    object with a None rrset will be returned.
  - Resolver Answer() objects now have a canonical_name field.
  - Rdata now have a __hash__ method.
- Regenerated spec file with py2pack;
- Removed LICENSE PKG-INFO and TODO files from documentation.</changelog>
  <changelog author="alexandre@exatati.com.br" date="1300968001">- Fix SLE_10 build.</changelog>
  <changelog author="alexandre@exatati.com.br" date="1301313600">- Update to 1.9.4:
  - There is no new functionality in this release;
    just a few bug fixes in RRSIG and SIG code.
  - Legacy code will be eliminated for earlier versions of
    DNSSEC in a future release of dnspython.</changelog>
  <changelog author="jengelh@inai.de" date="1338465600">- Update to new upstream release 1.10.0
  * Added dns.resolver.LRUCache.
  * dns.resolver.query() will try TCP if a UDP response is truncated.
  * The python socket module's DNS methods can be now be overriden
  with implementations that use dnspython's resolver.
- Remove redundant tags/sections from specfile
- Correct license field</changelog>
  <changelog author="cfarrell@suse.com" date="1338465601">- license update: ISC
  See LICENSE (and compare http://www.spdx.org/licenses/MIT with
  http://www.spdx.org/licenses/ISC)</changelog>
  <changelog author="dmueller@suse.com" date="1373544000">- update to 1.11.0:
  * TLSA RR support
  * Added set_flags() method to dns.resolver.Resolver
  * Names with offsets &gt;= 2^14 are no longer added to the compression
    table.
  * The "::" syntax is not used to shorten a single 16-bit section of
  the text form an IPv6 address.
  * Empty rdatasets are not printed.
  * DNSKEY key tags are no longer assumed to be unique.</changelog>
  <changelog author="speilicke@suse.com" date="1373889600">- Package LICENSE, use proper upstream URL
- Run testsuite
- Cleanup macro usage</changelog>
  <changelog author="dmueller@suse.com" date="1378900800">- update to 1.11.1:
  * fix syntax error exception on dns server failure
  * various fixlets for DNSSEC support</changelog>
  <changelog author="lars@linux-schulserver.de" date="1413547200">- update to 1.12.0:
  * The test system can now run the tests without requiring dnspython
    to be installed.
  * When reading from a masterfile, if the first content line
    started with leading whitespace, we raised an ugly exception
    instead of doing the right thing, namely using the zone origin as
    the name. [#73]  Thanks to Tassatux for reporting the issue.
  * Added dns.zone.to_text() convenience method.  Thanks to Brandon
    Whaley &lt;redkrieg@gmail.com&gt; for the patch.
  * The /etc/resolv.conf setting "options rotate" is now understood
    by the resolver.  If present, the resolver will shuffle the
    nameserver list each time dns.resolver.query() is called.  Thanks
    to underrun for the patch.  Note that you don't want to add
    "options rotate" to your /etc/resolv.conf if your system's
    resolver library does not understand it.  In this case, just set
    resolver.rotate = True by hand.
  * Escaping of Unicode has been corrected.  Previously we escaped
    and then converted to Unicode, but the right thing to do is
    convert to Unicode, then escape.  Also, characters &gt; 0x7f should
    NOT be escaped in Unicode mode.  Thanks to Martin Basti for the
    patch.
  * dns.rdtypes.ANY.DNSKEY now has helpers functions to convert
    between the numeric form of the flags and a set of human-friendly
    strings.  Thanks to Petr Spacek for the patch.
  * RRSIGs did not respect relativization settings in to_text().
    Thanks to Brian Smith for reporting the bug and submitting a
    (slightly different) patch.
  * dns/rdtypes/IN/APL.py: The APL from_wire() method did not accept an
    rdata length of 0 as valid.  Thanks to salzmdan for reporting the
    problem.
  * dns/ipv6.py: Add is_mapped()
  * dns/reversename.py: Lookup IPv6 mapped IPv4 addresses in the v4
    reverse namespace.  Thanks to Devin Bayer.  Yes, I finally fixed
    this one :)
  * dns/zone.py: Do not put back an unescaped token.  This was
    causing escape processing for domain names to break.  Thanks to
    connormclaud for reporting the problem.
  * dns/message.py: Making a response didn't work correctly if the
    query was signed with TSIG and we knew the key.  Thanks to Jeffrey
    Stiles for reporting the problem.
  * dns/query.py: Fix problems with the IXFR state machine which caused
    long diffs to fail.  Thanks to James Raftery for the fix and the
    repeated prodding to get it applied :)
- enable some tests
- add python-dnspython-rpmlintrc file
- add python-ecdsa and python-pycrypto to BuildRequires for the
  DNSSec tests
- use /usr/bin/python instead of /usr/bin/env python for the example
  scripts to avoid additional dependencies</changelog>
  <changelog author="dmueller@suse.com" date="1416916800">- fix build on SLE11</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1463400000">- New upstream release 1.13.0</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1465905600">- New upstream release 1.14.0</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1475928000">- New upstream release 1.15.0
  * IDNA 2008 support is now available if the "idna" module has been
    installed and IDNA 2008 is requested.  The default IDNA behavior
    is still IDNA 2003.  The new IDNA codec mechanism is currently
    only useful for direct calls to dns.name.from_text() or
    dns.name.from_unicode(), but in future releases it will be
    deployed throughout dnspython, e.g. so that you can read a
    masterfile with an IDNA 2008 codec in force.
  * By default, dns.name.to_unicode() is not strict about which
    version of IDNA the input complies with.  Strictness can be
    requested by using one of the strict IDNA codecs.
  * Add AVC RR support.
  * Some problems with newlines in various output modes have been
    addressed.
  * dns.name.to_text() now returns text and not bytes on Python 3.x
  * More miscellaneous fixes for the Python 2/3 codeline merge.
- Include readme with readme.patch as not included in upstream tarball
- Fix a bug in the tests code with 210.patch with upstream pull request #210</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1476014400">- use and recommend python-ecdsa and python-pycrypto for dnssec support</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1493726400">- Update for the multipython build.
- Rename python-dnspython.asc to python-dnspython.keyring.
- Spec cleanup.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1720699200">- Add new patches to solve DoS:
  - CVE-2023-29483-pre1.patch
  - CVE-2023-29483.patch
  (bsc#1222693, CVE-2023-29483, gh#rthalley/dnspython#1044)</changelog>
</package>
<package pkgid="13aeb3164200b36ac67ae6f387d0995b3979082010005e51e12a34088ee8f991" name="python-docutils" arch="src">
  <version epoch="0" ver="0.14" rel="150000.3.4.1"/>
  <changelog author="toddrme2178@gmail.com" date="1335528000">- Fix building python 3 package on openSUSE 11.4 x86_64</changelog>
  <changelog author="cfarrell@suse.com" date="1335787200">- license update: Python-2.0 and BSD-2-Clause and GPL-2.0+ and GPL-3.0+ and
  SUSE-Public-Domain
  tools/editors/emacs/rst.el is GPL-3.0+ - see also COPYING file</changelog>
  <changelog author="toddrme2178@gmail.com" date="1336046400">- Update to version 0.9:
  * reStructuredText "code" role and directive with syntax
    highlighting by Pygments_.
  * "code" option of the "include" directive.
  * Fix [ 3402314 ] allow non-ASCII whitespace, punctuation
    characters and "international" quotes around inline markup.
  * Fix handling of missing stylesheets.
  * Fix [ 2971827 ] and [ 3442827 ] extras/roman.py moved to
    docutils/utils/roman.py
  * docutils.utils is now a package (providing a place for
    sub-modules)
  * change default for `math-output` setting to MathJax
  * Support the `abbreviation` and `acronym` standard roles.
  * Record only files required to generate the LaTeX source as
    dependencies.
  * Use ``\setcounter{secnumdepth}{0}`` instead of ``*``-versions
    when suppressing LaTeX section numbering.
- Cleaned up spec files
- Fix rpmlint warnings</changelog>
  <changelog author="highwaystar.ru@gmail.com" date="1351252800">- patch from upstream for python3.3 support
  * Fix [3541369] Relative __import__ also with Python 3.3</changelog>
  <changelog author="saschpe@suse.de" date="1353412800">- Run testsuite
- Correctly fix non-excutable script warning
- Remove outdated macros
- Also remove "*.py" ending in egg-info files</changelog>
  <changelog author="dmueller@suse.com" date="1372852800">- update to 0.10:
  - add rpmlint-non-executable-scripts.diff
  * SmartQuotes transform for typographic quotes and dashes.
  * FileInput/FileOutput: no system-exit on IOError. The handle_io_errors option is ignored.
  * &lt;code&gt; tag for inline "code", do not drop nested inline nodes (syntax highlight tokens).
  * Customizable MathJax URL (based on patch by Dmitry Shachnev).
  * No line break after opening inline math tag.</changelog>
  <changelog author="tchvatal@suse.com" date="1379332800">- Use update-alternatives to allow switching between py2 and py3
  version of doctool binaries.</changelog>
  <changelog author="tchvatal@suse.com" date="1379332801">- Drop r7486-python33-compat.patch as it is not needed.</changelog>
  <changelog author="tchvatal@suse.com" date="1379332802">- Fix the symlink creation.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1380024000">- Update to 0.11
  * Fix for the overwritting of document attributes.
  * Support embedded aliases within hyperlink references.
  * try local import of docutils components (reader, writer, parser,
    language module) before global search.
  * Python 3.3 checks CVS syntax only if "strict" is True.
  * Now, it is easy to add a custom stylesheet to Docutils' default
    stylesheet with, e.g.,
  - -stylesheet_path='html4css1.css, mystyle.css'
  * If there is a file html4css1.css in the working directory of the
    process at launch, it is used instead of the one provided by
    Docutils in the writer source directory.
  * New default for math-output: HTML math.css.
  * Avoid repeated class declarations in html4css1 writer
  * Drop the simple algorithm replacing straight double quotes with
    English typographic ones. Activate the SmartQuotes transform if
    you want this feature.
  * New setting stylesheet_dirs: Comma-separated list of directories
    where stylesheets are found. Used by stylesheet_path when
    expanding relative path arguments.
  * handle lines starting with a period.
  * Fix option separating comma was bold (thanks to Bill Morris).
- Use pypi url and download
- Replace rpmlint-non-executable-scripts.diff with sed in the spec
  file</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405425600">- Update to 0.12
  * docs/ref/rst/directives.txt
  - Update "math" and "csv-table" descriptions.
  * docutils/parsers/rst/directives/images.py
  - Fix [258] figwidth="image" generates unitless width value.
  * docutils/parsers/rst/states.py
  - Improve error report when a non-ASCII character is specified as
    delimiter, quote or escape character under Python 2.
    Fixes [ 249 ] and [ 250 ].
  * docutils/writers/html4css1/__init__.py
  - Don't add newline after inline math.
    Thanks to Yury G. Kudryashov for the patch.
  * docutils/writers/latex2e/__init__.py
  - Fix [ 239 ] Latex writer glues paragraphs with figure floats.
  - Apply [ 116 ] by Kirill Smelkov. Don't hardcode \large for subtitle.
  * docutils/writers/odf_odt/__init__.py
  - Apply patch by Jakub Wilk to fix bug [ 100 ].
  * test/test_error_reporting.py
  - Fix [ 223 ] by removing redundant tests we do not have control over.
  * test/test_nodes.py
  - Apply [ 115 ] respect fixed 2to3 string literal conversion behavior.</changelog>
  <changelog author="ledest@gmail.com" date="1414584000">- fix bashisms in pre script</changelog>
  <changelog author="toddrme2178@gmail.com" date="1471262400">- Fix update-alternatives implementation.</changelog>
  <changelog author="dmueller@suse.com" date="1489060800">- update to 0.13.1:
  * New HTML writer generating HTML 5.
  * languages: persian/farsi (fa) and latvian (la) mappings.
  * change default base url for :rfc: to http://tools.ietf.org/html/
  latex2e: Fix admonition width, remove deprecated options,
  better tablewidth auto, ...</changelog>
  <changelog author="aloisio@gmx.com" date="1490356800">- Converted to single-spec
- Added python-docutils-rpmlintrc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492689600">- Fix url
- Executables are python-independent so only have the python3
  version provide them.
- Implement update-alternatives to avoid conflict with rst2html5</changelog>
  <changelog author="toddrme2178@gmail.com" date="1493640000">- Make only the python2 package provide the "docutils" package.</changelog>
  <changelog author="jmatejek@suse.com" date="1496750400">- only emit rst2html5 alternatives for python 3
- switch the "docutils" provides to the python 3 package (all the comands live there)
  (this fixes bsc#1039394)</changelog>
  <changelog author="arun@gmx.de" date="1510315200">- specfile:
  * add binary rst2html4
- update to version 0.14:
  * Enable validation of Docutils XML documents against the DTD:
    Use attribute type NMTOKEN instead of REFID for the `refid` attribute
    and NMTOKENS for `backrefs`: REFID refers to an ID type instance,
    however, the `ids` attribute cannot use the ID type because `XML only
    allows one ID per Element Type`__ and doesn't support a multiple-ID
    "IDS" attribute type.
  * Added documentation for escaped whitespace in URI contexts.
  * Clarify use of Unicode character categories.
  * Added functionality: escaped whitespace in URI contexts.
  * Consistent handling of all whitespace characters in inline markup
    recognition. Fixes [ 307 ] and [ 3402314 ] (now [ 173 ]).
  * Added support for escaped whitespace in URI contexts.
  * Rework patch [ 120 ] (revert change to "Table.get_column_widths()"
    that led to problems in an application with a custom table
    directive).
  * Fix [ 320 ] Russian docinfo fields not recognized.
  * Don't add a second ID to problematic references.
  * Fix SmartQuotes: warn only once if language is unsupported, keep
    "rawsource" when "educating" quotes.
  * Added "split_escaped_whitespace" function, support for escaped
    whitespace in URI contexts.
  * Fix [ 321 ] Import block might cause name error.
  * Update quote definitions for languages et, fi, fr, ro, sv, tr, uk.
  * New quote definitions for hr, hsb, hu, lv, sh, sl, sr.
  * Fix [ 313 ] Differentiate apostrophe from closing single quote (if
    possible).
  * Fix [ 317 ] Extra space inserted with French smartquotes.
  * Add command line interface for stand-alone use (requires 2.7).
  * Provide default title in metadata (required by HTML5).
  * Fix [ 312 ] HTML writer generates invalid HTML if the table has
    two tags.
  * Fix [ 319 ] The MathJax CDN shut down on April 30, 2017. For
    security reasons, we don't use a third party public installation as default but
    warn if math-output_ is set to MathJax without specifying a URL.
  * Apply [ 125 ] HTML writer: respect automatic table column sizing.
  * Handle class arguments for block-level elements by wrapping them
    in a "DUclass" environment. This replaces the special handling for
    "epigraph" and "topic" elements.
  * Apply [ 141 ] Handling inline in manpage writer.
  * Command setting "language" now sets the default language of the
    generated ODF document.
  * The use of image directive options :width: (%), :scale:, etc now
    set the width/height/size of images in the generated ODF
    documents.
  * The heading/title of admonitions now reflects the language
    specified by the "language" setting.
  * Fixed [ 306 ] only first of multiple "image" directives with the
    same URL shown in output.
  * Fixed [ 282 ] python3: AttributeError.
  * tools/rst2html4.py: New front-end.
  * tools/dev/generate_punctuation_chars.py: New skript to test and
    update utils.punctuation_chars.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707134400">- Use update-alternatives for all binary scripts and provide
  /usr/bin/docutils to avoid conflict with python311-docutils
  bsc#1219501</changelog>
</package>
<package pkgid="58aa13f73ef94c060f8f1edc23ae0e69f45b7ee47cf3c490a83899d537aa008a" name="python-idna" arch="src">
  <version epoch="0" ver="2.6" rel="150000.3.3.1"/>
  <changelog author="nemysis@gmx.ch" date="1437134400">- Initial package creation</changelog>
  <changelog author="tbechtold@suse.com" date="1489665600">- update to version v2.5
  * only store scripts that are specifically referenced in logic
  * Fix validation for U+30FB KATAKANA MIDDLE DOT code point (#47)
  * range-based integer containment code
  * Documentation Updates
  * Make test runners Python 2.6 compatible (issue #20)
  * remove DISALLOWED codepoints from datafile, since they're unread
  * Avoid using bare 'except' (#39)
  * Add Python 3.5 support
  * Mark Python Wheels as universal (supports Python 2 and 3)
  * Skip tests that won't work on Python 2.6 (fixes #20)
  * Update Travis configuration to test against Python 2.6 and 3.6
  * Use relative imports (fixes #26)
  * Documentation tidy up
  * Revert to basing IDNAError on UnicodeError (issue #43) (#45)
  * rebuild idnadata
  * Update history with Java-related change
  * ignore vim swapfiles
  * Update Travis CI coverage to 3.6 and 3.7-dev
  * Reduce memory usage even further. (#41)
  * Update trove classifier for Python 3.6
  * Properly report label length exceptions (issue #36)
  * Segment uts46data to avoid Jython limits (#28)
- Switch to singlespec approach</changelog>
  <changelog author="jmatejek@suse.com" date="1490097600">- point download url to PyPI
- drop %oname</changelog>
  <changelog author="arun@gmx.de" date="1510228800">- update to version 2.6:
  * Allows generation of IDNA and UTS 46 table data for different
    versions of Unicode, by deriving properties directly from Unicode
    data.
  * Ability to generate RFC 5892/IANA-style table data
  * Diagnostic output of IDNA-related Unicode properties and derived
    calculations for a given codepoint
  * Support for idna.__version__ to report version
  * Support for idna.idnadata.__version__ and
    idna.uts46data.__version__ to report Unicode version of underlying
    IDNA and UTS 46 data respectively.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1713441600">- Add CVE-2024-3651.patch, backported from upstream commit
  gh#kjd/idna#172/commits/5beb28b9dd77912c0dd656d8b0fdba3eb80222e7
  (bsc#1222842, CVE-2024-3651)</changelog>
</package>
<package pkgid="a6bcff0fe835d8dc7db56371c2ce3400ad915c48d725f630068ca3e3f3c49fb7" name="python-jmespath" arch="src">
  <version epoch="0" ver="0.9.3" rel="150000.3.5.1"/>
  <changelog author="rschweikert@suse.com" date="1390046400">- Initial build</changelog>
  <changelog author="rschweikert@suse.com" date="1414065600">- Update to version 0.4.1
  + No upstream changelog</changelog>
  <changelog author="rschweikert@suse.com" date="1421582400">- Update to version 0.5.0
  + No upstream changelog
  + Update in support for fix of bnc#905354</changelog>
  <changelog author="aboe76@gmail.com" date="1427371200">- Updated to version 0.6.1
  + No Upstream Changelog</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1430049600">- update to version 0.7.0:
  * Add support for JEP-12, raw string literals
  * Support .whl files
- additional changes from version 0.6.2:
  * Implement JEP-10, slice projections
  * Fix bug with filter projection parsing
  * Add to_array function
  * Add merge function
  * Fix error messages for function argument type errors
- point source URL to pypi</changelog>
  <changelog author="rjschwei@suse.com" date="1432728000">- Update to version 0.7.1:
  * Rename ``bin/jp`` to ``bin/jp.py``
  * Fix issue with precedence when parsing wildcard
    projections
  * Remove ordereddict and simplejson as py2.6 dependencies.
    These were never actually used in the jmespath code base,
    only in the unit tests.  Unittests requirements are handled
    via requirements26.txt.</changelog>
  <changelog author="rjschwei@suse.com" date="1453291200">- Manage the jp executable with update-alternatives now that
  python3-jmespath exists
- spec file improvements</changelog>
  <changelog author="rjschwei@suse.com" date="1453291201">- Fix build issues for SLE 11
  + More test dependencies required</changelog>
  <changelog author="toddrme2178@gmail.com" date="1454328000">- Update to version 0.9.0
  * Add support for new lines with tokens in an expression
  * Add support for JEP 9 which introduces "and" expressions, "unary"
    expressions, "not" expressions, and "paren" expressions
  * Fix issue with hardcoded path in ``jp.py`` executable
    (issue 90, issue 88, issue 82)
- Update to version 0.8.0
  * Improve lexing performance (issue 84)
  * Fix parsing error for multiselect lists (issue 86)
  * Fix issue with escaping single quotes in literal strings (issue 85)
  * Add support for providing your own dict cls to support
    ordered dictionaries (issue 94)
  * Add map() function (issue 95)</changelog>
  <changelog author="toddrme2178@gmail.com" date="1471262400">- Fix update-alternatives implementation.</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to version 0.9.2
  + Fix regression when using ordering comparators on strings (issue 124)
- From 0.9.1
  + Raise LexerError on invalid numbers (issue 98)
  + Add support for custom functions (#100) (issue 100)
  + Fix ZeroDivisionError for built-in function avg() on empty lists (#115)
    (issue 115)
  + Properly handle non numerical ordering operators (#117) (issue 117)</changelog>
  <changelog author="tbechtold@suse.com" date="1490788800">- Only BuildRequire unittest2 for python2</changelog>
  <changelog author="jmatejek@suse.com" date="1490788801">- properly Requires(postun) for %postun section</changelog>
  <changelog author="rjschwei@suse.com" date="1510228800">- Update to 0.9.3:
  + Fix issue where long types in py2 and Decimal types were not
    being evaluated as numbers (issue 125)
  + Handle numbers in scientific notation in to_number() function (issue 120)
  + Fix issue where custom functions would override the function
    table of the builtin function class (issue 133)</changelog>
</package>
<package pkgid="34da21f73d3da063b0fa692437800c2da2331237cff6d75e4f46abd9463e8dcb" name="python-kiwi" arch="src">
  <version epoch="0" ver="9.24.43" rel="150100.3.62.1"/>
  <changelog author="ms@suse.de" date="1635163200">- Bump version: 9.23.20 → 9.24.2
  This version upgrade includes several fixes:
  * Fixed secure boot fallback setup
    Make sure MokManager gets copied. The name and location of
    the mok manager is distribution specific in the same way as
    the shim loader. Thus we need to apply a similar concept
    for looking it up. This Fixes bsc#1187515
  * Allow creation of LUKS system with empty key
    To support cloud platforms better we should allow the
    creation of an initial(insecure) LUKS encrypted image
    with an empty passphrase/keyfile. This Fixes
    bsc#1187461 and bsc#1187460
  * Delete obsolete ddb.adapterType patching
    When building a vmdk image with pvscsi as adapter type, kiwi
    implicitly changed the adapter_type from pvscsi to lsilogic
    because qemu only knows lsilogic. At the end kiwi patched
    the adapter type in the descriptor of the vmdk header back
    to pvscsi. That patching seems to be wrong according to
    information from users and VMware support. This commit
    deletes the descriptor patching and only leaves the pvscsi
    setting in the guest configuration(vmx).
    This Fixes bsc#1180539 and Fixes #1847
  * Make dracut version check more robust
    The check_dracut_module_versions_compatible_to_kiwi() runtime
    check calls the package manager from the host and reads the
    package database from the image root. Doing this requires
    the package database in the image to be compatible with the
    package manager on the host. However this cannot be guarenteed
    and it is more robust to chroot into the image root and call
    the package manager from there. However, this change also comes
    with the cost that it's required to have a package manager
    available in the image root tree. Therefore along with the
    chroot based call, eventual exceptions from the call are now
    catched and leads to a debug message in the log file but will
    not lead the runtime check to fail. I consider the cases
    without a package database inside of the image to be less
    critical than the incompatibility issue between the host
    tooling and the package database in the image.
    This Fixes bsc#1185937
  * Fixed setup of repository architecture
    Unfortunately the architecture reported by uname is not
    necessarily the same name as used in the repository metadata.
    Therefore it was not a good idea to set the architecture
    and manage the name via a mapping table. It also has turned
    out that repo arch names are distro specific which causes
    more complexity on an eventual mapping table. In the end
    this commit changes the way how the repository architecture
    is setup in a way that we only set the architecture if
    a name was explicitly specified such that the user keeps
    full control over it without any mapping magic included
    This Fixes bsc#1185287
  * Do not apply default subcommand for derivate containers
    This commit does not apply the default subcommand for derivate
    containers. Fixes bsc#1184823
  * Added openssl to the core requires
    openssl is used in kiwi to construct a password hash
    if the plaintext password feature for user settings
    is used. This Fixes bsc#1184128</changelog>
  <changelog author="dcassany@suse.com" date="1643630400">- Bump version: 9.24.15 → 9.24.16
  This version upgrade includes several fixes:
  * Fixed regression in compression detection
    The change from 282529de8f612dee32d54ee868c2365dcd829220
    Introduced a bad regression. The assumption was made that the
    xz tool could be used to detect if a file is compressed or not.
    However, this requires the file to be locally present. In the
    scope of the method call is_compressed() and within a remote
    deployment e.g PXE this is not the case. Therefore the former
    way to "detect" the compression according to the .xz postfix
    of the source filename was restored. In addition the function
    name was changed to is_xz_compressed() because that's what the
    method can do and not more. This Fixes #2015
    Fixes a regression in the scope of bsc#1192975 (#c16)
  * index.rst: Change title (bsc#1189294#c2)
  * 'KIWI NG 9: KIWI NG Documentation' -&gt; 'Building Linux System Appliances with KIWI Next Generation (KIWI NG &lt;VERSION&gt;)
  * suggested in bsc#1189294#c2 for more clarity
  * change has been discussed with and approved by main author (Marcus S.)
  * Care for different snapper template locations
    snapper recently changed their config template location
    from etc/ to usr/. This commit handles the two locations
    and Fixes bsc#1192940
  * Do not force dracut into a compression setting
    So far we called dracut with --xz which forces the initrd
    to be xz compressed. There are other compression formats
    used by the distributions and they might differe from xz.
    The selection for a compression tool is done by a dist
    configuration in dracut.conf.d which is provided by the
    distributions as they see fit. For us this means not
    forcing dracut into a specific compression setting allows
    to make use of the distro provided setting and also
    allows to change/override this setting by an overlay
    file. This Fixes bsc#1192975</changelog>
  <changelog author="dcassany@suse.com" date="1643630401">- Ensure backward compatibility on deprecated methods
  This commit ensures backward compatibility for deprecated
  config bash script utilities.
  Fixes bsc#1195229
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="fvogt@suse.de" date="1646222400">- Don't exit the script on deprecated function use (bsc#1196644)
  The "exit 0" there stops processing of the calling script with a success exit
  code, which leads to incomplete and broken images.</changelog>
  <changelog author="dcassany@suse.com" date="1646222401">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
</package>
<package pkgid="3ec196f3fecc1cc54d082045a61b25e464b884f73f774d49186a1432f25eaef9" name="python-kiwi" arch="src">
  <version epoch="0" ver="9.24.43" rel="150100.3.65.1"/>
  <changelog author="dcassany@suse.com" date="1646222400">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
</package>
<package pkgid="27b938948a4dab88cf439f795eeb593a06944936fe3c374efc69c986f12f7512" name="python-kiwi" arch="src">
  <version epoch="0" ver="9.24.43" rel="150100.3.68.1"/>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
</package>
<package pkgid="2e32bfe3cb2cd232bdfb18eb0edfd4bf9d74168776979e7731edd077e927b35a" name="python-kiwi" arch="src">
  <version epoch="0" ver="9.24.43" rel="150100.3.71.1"/>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
</package>
<package pkgid="5571b73d20e40927472fb31062476432be492512e3c058fd12dc6899eb90ce60" name="python-kiwi" arch="src">
  <version epoch="0" ver="9.24.43" rel="150100.3.76.1"/>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1711368000">- Live ISO Wait for udev events after repart
  Make sure to wait for the event queue to become empty after
  the creation of the write partition. When kiwi calls the
  code to create the write partition this emits new udev events.
  It's important to wait for the event queue to become empty
  to avoid a potential regression on the use of the device nodes.
  In the processing of the events it can happen that a device
  gets removed and re-added. If we don't want for udev
  to process the entire queue it can happen that the
  wrong block device is used. This wrong selection is only
  possible because the way how hybrid ISOs are designed exposes
  both, the disk and the partition for the root device with
  the same label. This Fixes bsc#1213595</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1712232000">- Set default output console to gfxterm for grub
  If no console setting is done in the image description for grub
  the default output console is set to: gfxterm and the default
  input console is set to: console. This Fixes bsc#1219074</changelog>
</package>
<package pkgid="8d9eb5521097d66bbc6b4d0f0aa478bbab5d535af22772a3ec9a7beac8900cda" name="python-kiwi" arch="src">
  <version epoch="0" ver="9.24.43" rel="150100.3.81.1"/>
  <changelog author="dcassany@suse.com" date="1681300800">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1711368000">- Live ISO Wait for udev events after repart
  Make sure to wait for the event queue to become empty after
  the creation of the write partition. When kiwi calls the
  code to create the write partition this emits new udev events.
  It's important to wait for the event queue to become empty
  to avoid a potential regression on the use of the device nodes.
  In the processing of the events it can happen that a device
  gets removed and re-added. If we don't want for udev
  to process the entire queue it can happen that the
  wrong block device is used. This wrong selection is only
  possible because the way how hybrid ISOs are designed exposes
  both, the disk and the partition for the root device with
  the same label. This Fixes bsc#1213595</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1712232000">- Set default output console to gfxterm for grub
  If no console setting is done in the image description for grub
  the default output console is set to: gfxterm and the default
  input console is set to: console. This Fixes bsc#1219074</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1722427200">- Add rd.kiwi.oem.force_resize boot option
  Forces the disk resize process on an OEM disk image.
  If set, no sanity check for unpartitioned/free space
  is performed and also an eventually configured
  &lt;oem-resize-once&gt; configuration from the image description
  will not be taken into account. This Fixes bsc#1224389</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1722427201">- Do not exclude the .profile env file by default
  kiwi's initrd modules read a .profile file which gets included
  into the initrd produced at build time. To allow rebuild of a
  host-only initrd from the booted system this information should
  be present such that it is possible to re-use kiwi initrd code.
  This is related to bsc#1228118</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1722427202">- Fix kiwi-repart restrictions
  The kiwi repart dracut module reads a profile file and if it
  does not exists it dies in the initrd. However, that profile
  file is not mandatory for the main resize functionality. Thus
  this commit turns this into a warning message. In addition
  the module-setup for 90kiwi-repart makes sure to include
  the required and optional profile files.
  This Fixes bsc#1228118</changelog>
</package>
<package pkgid="a9eb3411dc0a36c66f1cf54c4c4ca7adaafec4bd08268461eab382af7b9b0cab" name="python-kiwi" arch="src">
  <version epoch="0" ver="9.24.43" rel="150100.3.84.1"/>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704801600">- Fixed regression in GRUB_SERIAL_COMMAND setup
  The condition to write the serial line setup was broken.
  This commit fixes it. Related to Issue #2419 and
  Fixes bsc#1228808</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1711368000">- Live ISO Wait for udev events after repart
  Make sure to wait for the event queue to become empty after
  the creation of the write partition. When kiwi calls the
  code to create the write partition this emits new udev events.
  It's important to wait for the event queue to become empty
  to avoid a potential regression on the use of the device nodes.
  In the processing of the events it can happen that a device
  gets removed and re-added. If we don't want for udev
  to process the entire queue it can happen that the
  wrong block device is used. This wrong selection is only
  possible because the way how hybrid ISOs are designed exposes
  both, the disk and the partition for the root device with
  the same label. This Fixes bsc#1213595</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1712232000">- Set default output console to gfxterm for grub
  If no console setting is done in the image description for grub
  the default output console is set to: gfxterm and the default
  input console is set to: console. This Fixes bsc#1219074</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1722427200">- Add rd.kiwi.oem.force_resize boot option
  Forces the disk resize process on an OEM disk image.
  If set, no sanity check for unpartitioned/free space
  is performed and also an eventually configured
  &lt;oem-resize-once&gt; configuration from the image description
  will not be taken into account. This Fixes bsc#1224389</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1722427201">- Do not exclude the .profile env file by default
  kiwi's initrd modules read a .profile file which gets included
  into the initrd produced at build time. To allow rebuild of a
  host-only initrd from the booted system this information should
  be present such that it is possible to re-use kiwi initrd code.
  This is related to bsc#1228118</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1722427202">- Fix kiwi-repart restrictions
  The kiwi repart dracut module reads a profile file and if it
  does not exists it dies in the initrd. However, that profile
  file is not mandatory for the main resize functionality. Thus
  this commit turns this into a warning message. In addition
  the module-setup for 90kiwi-repart makes sure to include
  the required and optional profile files.
  This Fixes bsc#1228118</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1723118400">- Update virtualenv setup
  types-pkg_resources got dropped from PyPI</changelog>
</package>
<package pkgid="636fa49828f21383bce26be738b1d26168ac35b80cd0fb94dfd89212f8e230d8" name="python-ply" arch="src">
  <version epoch="0" ver="3.10" rel="150000.3.5.1"/>
  <changelog author="maw@suse.de" date="1176465600">- Initial import into the build service
- Rename ply.spec to python-ply.spec as that is what the resultant
  package is called.</changelog>
  <changelog author="maw@suse.de" date="1193140800">- Don't build as noarch.</changelog>
  <changelog author="maw@suse.de" date="1205755200">- Import into autobuild
- Add a -doc subpackage
- Add python-ply-shebangs.patch</changelog>
  <changelog author="maw@suse.de" date="1217246400">- Update to version 2.5:
  + Various bug fixes
  + Some performance improvements
  + For a blow-by-blow account of changes, see the file CHANGES
    in the package python-ply-doc.</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- Use new python macros</changelog>
  <changelog author="coolo@novell.com" date="1284465600">- Update to 3.3:
  + PLY-3.3 is a minor bug fix release, it supports both Python 2
    and Python 3.
- License changed to BSD</changelog>
  <changelog author="saschpe@suse.de" date="1301400000">- Update to 3.4:
  + Minor patch to make cpp.py compatible with Python 3.
  + Fixed setup.py trove classifiers to properly list PLY as Python
    3 compatible.
- License changed to BSD3c
- Packaged more doc files
- Moved important docs (README, ..) to base package
- Fixed build for non-SUSE distros</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="highwaystar.ru@gmail.com" date="1337947200">- python3 package added</changelog>
  <changelog author="toddrme2178@gmail.com" date="1337947201">- spec file cleanups</changelog>
  <changelog author="toddrme2178@gmail.com" date="1357128000">- Fix building on SLES</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1431345600">- update to version 3.6:
  * If PLY is unable to create the 'parser.out' or 'parsetab.py'
    files due to permission issues, it now just issues a warning
    message and continues to operate
  * Fixed some issues related to use of packages and table file
    modules
- additional changes from version 3.5:
  * Added support for defaulted_states in the parser
  * Fixed debug logging in the parser
  * Added actions to be defined to character literals (Issue #32)
  * Import of the 'parsetab.py' file is now constrained to only
    consider the directory specified by the outputdir argument to
    yacc()
  * Changed default output directory to be the same as that in
    which the yacc grammar is defined
  * Changed the parsetab.py file signature slightly so that the
    parsetab won't regenerate if created on a different major
    version of Python
  * Fixed Issue #44 call_errorfunc() should return the result of
    errorfunc()
  * Support for versions of Python &lt;2.7 is officially dropped
  * Fixed bug related to calling yacc(start=...)
  * Added skipped tests for PyPy and Java
  * Added filter to make unit tests pass under 'python -3'
  * Fixed CPP_INTEGER regex in ply/cpp.py (Issue 21)
  * Fixed yacc validation bugs when from __future__ import
    unicode_literals is being used
  * Added support for Travis-CI
  * Added a .gitignore file
  * Fixed validation problems for source files that include a
    different source code encoding specifier
  * Fixed unit tests for yacc to eliminate random failures due to
    dict hash value randomization in Python 3.3
  * Fixed comment whitespace processing bugs in ply/cpp.py
  * Fixed token names in ply/ctokens.py to match rule names
  * Changes to functions available in panic mode error recover
  * Fixed some problems with line and position tracking and the use
    of error symbols
  * Change to doc string handling in lex module
  * Fixed issue #1: Fixed _tabversion. It should use __tabversion__
    instead of __version__
  * Fixed issue #8: Literals empty list causes IndexError
  * Fixed issue #12: Typo in code snippet in documentation
  * Fixed issue #10: Correctly escape t_XOREQUAL pattern.
- clean the test and example directories
- remove stray backup files in doc
- remove unneeded executable bit of testlex.py
- remove CFLAGS export: unneeded
- do not drop executable bit of everything in test since
  it contains subdirectories
- remove useless clean section
- remove README from package: not provided anymore</changelog>
  <changelog author="hpj@urpla.net" date="1444219200">- update to version 3.8:
  * Fixed issues related to Python 3.5. Patch contributed by Barry Warsaw.
- update to version 3.7
  * Fixed problems when reading table files from pickled data.
  * Fixed regression in handling of table modules if specified as module
    objects.   See https://github.com/dabeaz/ply/issues/63
- clean up spec
- add testing rig</changelog>
  <changelog author="tbechtold@suse.com" date="1472817600">- update to 3.9:
  * Exposed the parser state number as the parser.state attribute
    in productions and error functions.
  * Fixed Issue #88. Python3 compatibility with ply/cpp.
  * Fixed Issue #93. Ply can crash if SyntaxError is raised inside
    a production.   Not actually sure if the original implementation
    worked as documented at all.  Yacc has been modified to follow
    the spec as outlined in the CHANGES noted for 11/27/07 below.
  * Fixed Issue #97. Failure with code validation when the original
    source files aren't present.   Validation step now ignores
    the missing file.
  * Minor fixes to version numbers.</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to 3.10
  * Changed grammar signature computation to not involve hashing
    functions. Parts are just combined into a big string.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1499688000">- Fix wrong-script-interpreter rpmlint error.</changelog>
</package>
<package pkgid="42676d7b01f01add47a4dd44e3e1b55eba11abb73784ae4117e1f65729e2ad30" name="python-psutil" arch="src">
  <version epoch="0" ver="5.9.1" rel="150300.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Add pr_1665.patch: Future-proof disk_io_counters on Linux. Fixes
  tests with Linux 5.5.</changelog>
  <changelog author="tchvatal@suse.com" date="1584187200">- Update to 5.7.0:
  * Various fixes to build with updated kernel/etc.
- Remove merged patch pr_1665.patch and pr_1364.patch
- Update patch skip-obs.patch
- Remove skip-test-missing-warnings.patch as it can be fixed by
  properly calling the tests</changelog>
  <changelog author="mcepl@suse.com" date="1598011200">- Add skip_failing_tests.patch to skip tests failing because of
  incomplete emulation of the environment in osc build
  environment (gh#giampaolo/psutil#1635).</changelog>
  <changelog author="dmueller@suse.com" date="1600257600">- update to 5.7.2:
  * parallel tests on UNIX (make test-parallel). They're twice as fast!
  * 1741: "make build/install" is now run in parallel and it's about 15% faster on UNIX.
  * 1747: Process.wait() on POSIX returns an enum, showing the negative signal which was used to terminate the process
  * 1747: Process.wait() return value is cached so that the exit code can be retrieved on then next call.
  * 1747: Process provides more info about the process on str() and repr() (status and exit code):
  * 1757: memory leak tests are now stable.
  * 1768: [Windows] added support for Windows Nano Server. (contributed by Julien Lebot)
  * 1726: [Linux] cpu_freq() parsing should use spaces instead of tabs on ia64. (patch by Michał Górny)
  * 1760: [Linux] Process.rlimit() does not handle long long type properly.
  * 1766: [macOS] NoSuchProcess may be raised instead of ZombieProcess.
  * 1781: fix signature of callback function for getloadavg(). (patch by Ammar Askar)
  - remove skip-flaky-i586.patch (obsolete)</changelog>
  <changelog author="code@bnavigator.de" date="1604404800">- Fix shebang replacement for multiple python flavors</changelog>
  <changelog author="dmueller@suse.com" date="1606824000">- update to 5.7.3:
  - 809_: [FreeBSD] add support for `Process.rlimit()`.
  - 893_: [BSD] add support for `Process.environ()` (patch by Armin Gruner)
  - 1830_: [UNIX] `net_if_stats()`'s `isup` also checks whether the NIC is
    running (meaning Wi-Fi or ethernet cable is connected).
  - 1837_: [Linux] improved battery detection and charge "secsleft" calculation
  - 1620_: [Linux] physical cpu_count() result is incorrect on systems with more
    than one CPU socket.
  - 1738_: [macOS] Process.exe() may raise FileNotFoundError if process is still
    alive but the exe file which launched it got deleted.
  - 1791_: [macOS] fix missing include for getpagesize().
  - 1823_: [Windows] Process.open_files() may cause a segfault due to a NULL
    pointer.
  - 1838_: [Linux] sensors_battery(): if `percent` can be determined but not
    the remaining values, still return a result instead of None.
- skip-obs.patch, skip_failing_tests.patch: rediff</changelog>
  <changelog author="asn@cryptomilk.org" date="1607688000">- Add missing BR for unittest2</changelog>
  <changelog author="code@bnavigator.de" date="1607688001">- Only require unittest2 for Leap.</changelog>
  <changelog author="alarrosa@suse.com" date="1611576000">- update to 5.8.0:
  * Enhancements:
  - 1863: disk_partitions() exposes 2 extra fields: maxfile and
    maxpath, which are the maximum file name and path name
    length.
  - 1872: [Windows] added support for PyPy 2.7.
  - 1879: provide pre-compiled wheels for Linux and macOS.
  - 1880: get rid of Travis and Cirrus CI services (they are no
    longer free). CI testing is now done by GitHub Actions on
    Linux, macOS and FreeBSD (yes). AppVeyor is still being used
    for Windows CI.
  * Bug fixes:
  - 1708: [Linux] get rid of sensors_temperatures() duplicates.
    (patch by Tim Schlueter).
  - 1839: [Windows] always raise AccessDenied when failing to
    query 64 processes from 32 bit ones (NtWoW64 APIs).
  - 1866: [Windows] process exe(), cmdline(), environ() may raise
    "invalid access to memory location" on Python 3.9.
  - 1874: [Solaris] wrong swap output given when encrypted column
    is present.
  - 1875: [Windows] process username() may raise
    ERROR_NONE_MAPPED if the SID has no corresponding account
    name. In this case AccessDenied is now raised.
  - 1877: [Windows] OpenProcess may fail with ERROR_SUCCESS.
    Turn it into AccessDenied or NoSuchProcess depending on
    whether the PID is alive.
  - 1886: [macOS] EIO error may be raised on cmdline() and
    environment(). Now it gets translated into AccessDenied.
  - 1891: [macOS] get rid of deprecated getpagesize().
- Rebase patch and skip three other tests that fail on obs
  * skip-obs.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1611835200">- Add patch to skip tests related to rlimit and zombie processes
  that fail when building for python2 on i586:
  * skip_rlimit_tests_on_python2.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1611921600">- Do not install tests (and change the way they're run since they
  were run from %{buildroot})</changelog>
  <changelog author="idesmi@protonmail.com" date="1620820800">- remove the dependency on net-tools, since it conflicts with
  busybox-hostnmame which is default on MicroOS. boo#1184753</changelog>
  <changelog author="steven.kowalik@suse.com" date="1637841600">- Update skip-obs.patch to also skip TestProcess.test_ionice_linux</changelog>
  <changelog author="dmueller@suse.com" date="1641816000">- update to 5.9.0:
  * [Linux]: `cpu_freq()`_ is slow on systems with many CPUs. Read current
    frequency values for all CPUs from ``/proc/cpuinfo`` instead of opening many
    files in ``/sys`` fs.  (patch by marxin)
  * `NoSuchProcess`_ message now specifies if the PID has been reused.
  * error classes (`NoSuchProcess`_, `AccessDenied`_, etc.) now have a better
    formatted and separated ``__repr__`` and ``__str__`` implementations.
  * [Linux]: `disk_partitions()`_: convert ``/dev/root`` device (an alias
    used on some Linux distros) to real root device path.
  * ``PSUTIL_DEBUG`` mode now prints file name and line number of the debug
    messages coming from C extension modules.
  * rewrite HISTORY.rst to use hyperlinks pointing to psutil API doc.
  * [Linux]: `wait_procs()`_ should catch ``subprocess.TimeoutExpired``
  exception.
  * [Linux]: `sensors_battery()`_ can raise ``TypeError`` on PureOS.
  * [Linux]: psutil does not handle ``ENAMETOOLONG`` when accessing process
  file descriptors in procfs.  (patch by Nikita Radchenko)
  * **[critical]**: ``memoize_when_activated`` decorator is not thread-safe.
  * **[critical]**: `process_iter()`_ is not thread safe and can raise
  ``TypeError`` if invoked from multiple threads.
  * [Linux]: `cpu_freq()`_ return order is wrong on systems with more than
  9 CPUs.</changelog>
  <changelog author="mcepl@suse.com" date="1643544000">- Add skip-partitions-erros.patch skipping tests failing on Linux
  (gh#giampaolo/psutil#2043).</changelog>
  <changelog author="mcepl@suse.com" date="1643803200">- Fix name of Patch4, it is skip-partitions-erros.patch</changelog>
  <changelog author="michael@stroeder.com" date="1653393600">- removed obsolete skip-partitions-erros.patch
- update to 5.9.1
  * Enhancements
  - 1053: drop Python 2.6 support. (patches by Matthieu Darbois and Hugo van Kemenade)
  - 2050, [Linux]: increase read(2) buffer size from 1k to 32k when reading /proc
    pseudo files line by line. This should help having more consistent results.
  - 2057, [OpenBSD]: add support for cpu_freq().
  - 2107, [Linux]: Process.memory_full_info() (reporting process USS/PSS/Swap memory)
    now reads /proc/pid/smaps_rollup instead of /proc/pids/smaps, which makes it 5 times faster.
  * Bug fixes
  - 2048: AttributeError is raised if psutil.Error class is raised manually and passed through str.
  - 2049, [Linux]: cpu_freq() erroneously returns curr value in GHz while min and max are in MHz.
  - 2050, [Linux]: virtual_memory() may raise ValueError if running in a LCX container.</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Add patch mem-used-bsc1181475.patch (bsc#1181475)
  * Adopt change of used memory calculation from upstream of procps</changelog>
  <changelog author="code@bnavigator.de" date="1657886400">- Fix tests: setuptools changed the builddir library path and does
  not find the module from it. Use the installed platlib instead
  and exclude psutil.tests only later.
- Refresh skip-obs.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1669032000">- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)</changelog>
</package>
<package pkgid="32d4d5c332ebd1418fe9721b8ea7c90bb262184928d7b7ad62ee35f09e22a145" name="python-requests" arch="src">
  <version epoch="0" ver="2.25.1" rel="150300.3.12.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1549368000">- update to version 2.21.0:
  * Requests now supports idna v2.8.</changelog>
  <changelog author="tchvatal@suse.com" date="1550232000">- Do not depend on python-py
- Update few of the requirements</changelog>
  <changelog author="tchvatal@suse.com" date="1551096000">- Skip one more test that is flaky</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Do not hardcode version requirements in setup.py allowing us to
  update and verify functionality on our own:
  * requests-no-hardcoded-version.patch</changelog>
  <changelog author="bstephenson@suse.com" date="1558008000">- Update to version 2.20.1 (bsc#1111622)
  * Fixed bug with unintended Authorization header stripping for
    redirects using default ports (http/80, https/443).</changelog>
  <changelog author="tchvatal@suse.com" date="1558785600">- Update to 2.22.0:
  * Requests now supports urllib3 v1.25.2. (note: 1.25.0 and 1.25.1 are incompatible)
- Rebase requests-no-hardcoded-version.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1563796800">- Hardcode pytest 3.x series as upstream even in git does not work
  with newer versions (they pinned the release)</changelog>
  <changelog author="jayvdb@gmail.com" date="1572609600">- Add two patches only updating test logic to remove pytest 3 pin
  - merged_pr_5049.patch
  - pr_5251-pytest5.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1576324800">- Remove python-urllib3, python-certifi and ca-certificates from
  main package BuildRequires, not required for building.
- Do not require full python, (implicit) python-base is sufficient.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582545600">- update to 2.23.0
- dropped merged_pr_5049.patch
- refreshed requests-no-hardcoded-version.patch
  * Remove defunct reference to prefetch in Session __attrs__
  * Requests no longer outputs password in basic auth usage warning</changelog>
  <changelog author="mcepl@suse.com" date="1587988800">- Switch off test_https_warnings test (bsc#1170175)</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1595505600">- remove patch pr_5251-pytest5.patch, not needed anymore.
- update to version 2.24.0:
  - pyOpenSSL TLS implementation is now only used if Python
  either doesn't have an `ssl` module or doesn't support
  SNI. Previously pyOpenSSL was unconditionally used if available.
  This applies even if pyOpenSSL is installed via the
  `requests[security]` extra (#5443)
  - Redirect resolution should now only occur when
  `allow_redirects` is True. (#5492)
  - No longer perform unnecessary Content-Length calculation for
  requests that won't use it. (#5496)</changelog>
  <changelog author="dmueller@suse.com" date="1606392000">- update to 2.25.0:
  * Added support for NETRC environment variable. (#5643)
  * Requests now supports urllib3 v1.26.
  * Requests v2.25.x will be the last release series with support for Python 3.5.
- refreshed requests-no-hardcoded-version.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1607947200">- Update in SLE-15 (bsc#1176785, jsc#ECO-3105, jsc#PM-2352)</changelog>
  <changelog author="dmueller@suse.com" date="1608379200">- update to 2.25.1:
  - Requests now treats `application/json` as `utf8` by default. Resolving
  inconsistencies between `r.text` and `r.json` output. (#5673)</changelog>
  <changelog author="code@bnavigator.de" date="1612353600">- Don't pin idna&lt;3 in the egg-info so that depending packages
  can install the new idna dropping python2</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1658404800">- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1686657600">- Add CVE-2023-32681.patch to fix unintended leak of
  Proxy-Authorization header (CVE-2023-32681, bsc#1211674)
  Upstream commit: gh#psf/requests@74ea7cf7a6a2</changelog>
  <changelog author="mmachova@suse.com" date="1716292800">- Add CVE-2024-35195.patch (CVE-2024-35195, bsc#1224788)
- Add httpbin.patch to fix a test failure caused by the previous patch.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1717502400">- Update CVE-2024-35195.patch to allow the usage of "verify" parameter
  as a directory, bsc#1225912</changelog>
</package>
<package pkgid="29967b4694c6e33845d7e729c440cc59d74176bc30439138d653aeb3694ee364" name="python-requests" arch="src">
  <version epoch="0" ver="2.25.1" rel="150300.3.6.1"/>
  <changelog author="mcepl@suse.com" date="1546257600">- Move name ahead of version in spec file to resolve build issues
  on older distributions
- fdupe more thoroughly.</changelog>
  <changelog author="jbrownell@suse.com" date="1547035200">- Support older Red Hat platforms that don't offer "Recommends:"</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1549368000">- update to version 2.21.0:
  * Requests now supports idna v2.8.</changelog>
  <changelog author="tchvatal@suse.com" date="1550232000">- Do not depend on python-py
- Update few of the requirements</changelog>
  <changelog author="tchvatal@suse.com" date="1551096000">- Skip one more test that is flaky</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Do not hardcode version requirements in setup.py allowing us to
  update and verify functionality on our own:
  * requests-no-hardcoded-version.patch</changelog>
  <changelog author="bstephenson@suse.com" date="1558008000">- Update to version 2.20.1 (bsc#1111622)
  * Fixed bug with unintended Authorization header stripping for
    redirects using default ports (http/80, https/443).</changelog>
  <changelog author="tchvatal@suse.com" date="1558785600">- Update to 2.22.0:
  * Requests now supports urllib3 v1.25.2. (note: 1.25.0 and 1.25.1 are incompatible)
- Rebase requests-no-hardcoded-version.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1563796800">- Hardcode pytest 3.x series as upstream even in git does not work
  with newer versions (they pinned the release)</changelog>
  <changelog author="jayvdb@gmail.com" date="1572609600">- Add two patches only updating test logic to remove pytest 3 pin
  - merged_pr_5049.patch
  - pr_5251-pytest5.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1576324800">- Remove python-urllib3, python-certifi and ca-certificates from
  main package BuildRequires, not required for building.
- Do not require full python, (implicit) python-base is sufficient.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582545600">- update to 2.23.0
- dropped merged_pr_5049.patch
- refreshed requests-no-hardcoded-version.patch
  * Remove defunct reference to prefetch in Session __attrs__
  * Requests no longer outputs password in basic auth usage warning</changelog>
  <changelog author="mcepl@suse.com" date="1587988800">- Switch off test_https_warnings test (bsc#1170175)</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1595505600">- remove patch pr_5251-pytest5.patch, not needed anymore.
- update to version 2.24.0:
  - pyOpenSSL TLS implementation is now only used if Python
  either doesn't have an `ssl` module or doesn't support
  SNI. Previously pyOpenSSL was unconditionally used if available.
  This applies even if pyOpenSSL is installed via the
  `requests[security]` extra (#5443)
  - Redirect resolution should now only occur when
  `allow_redirects` is True. (#5492)
  - No longer perform unnecessary Content-Length calculation for
  requests that won't use it. (#5496)</changelog>
  <changelog author="dmueller@suse.com" date="1606392000">- update to 2.25.0:
  * Added support for NETRC environment variable. (#5643)
  * Requests now supports urllib3 v1.26.
  * Requests v2.25.x will be the last release series with support for Python 3.5.
- refreshed requests-no-hardcoded-version.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1607947200">- Update in SLE-15 (bsc#1176785, jsc#ECO-3105, jsc#PM-2352)</changelog>
  <changelog author="dmueller@suse.com" date="1608379200">- update to 2.25.1:
  - Requests now treats `application/json` as `utf8` by default. Resolving
  inconsistencies between `r.text` and `r.json` output. (#5673)</changelog>
  <changelog author="code@bnavigator.de" date="1612353600">- Don't pin idna&lt;3 in the egg-info so that depending packages
  can install the new idna dropping python2</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1658404800">- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1686657600">- Add CVE-2023-32681.patch to fix unintended leak of
  Proxy-Authorization header (CVE-2023-32681, bsc#1211674)
  Upstream commit: gh#psf/requests@74ea7cf7a6a2</changelog>
</package>
<package pkgid="aefa20c7e63e3c91b20eaf8396a46e1a2a5fd4c0ee4fb83f40afa9b1fba4fd27" name="python-requests" arch="src">
  <version epoch="0" ver="2.25.1" rel="150300.3.9.1"/>
  <changelog author="jbrownell@suse.com" date="1547035200">- Support older Red Hat platforms that don't offer "Recommends:"</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1549368000">- update to version 2.21.0:
  * Requests now supports idna v2.8.</changelog>
  <changelog author="tchvatal@suse.com" date="1550232000">- Do not depend on python-py
- Update few of the requirements</changelog>
  <changelog author="tchvatal@suse.com" date="1551096000">- Skip one more test that is flaky</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Do not hardcode version requirements in setup.py allowing us to
  update and verify functionality on our own:
  * requests-no-hardcoded-version.patch</changelog>
  <changelog author="bstephenson@suse.com" date="1558008000">- Update to version 2.20.1 (bsc#1111622)
  * Fixed bug with unintended Authorization header stripping for
    redirects using default ports (http/80, https/443).</changelog>
  <changelog author="tchvatal@suse.com" date="1558785600">- Update to 2.22.0:
  * Requests now supports urllib3 v1.25.2. (note: 1.25.0 and 1.25.1 are incompatible)
- Rebase requests-no-hardcoded-version.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1563796800">- Hardcode pytest 3.x series as upstream even in git does not work
  with newer versions (they pinned the release)</changelog>
  <changelog author="jayvdb@gmail.com" date="1572609600">- Add two patches only updating test logic to remove pytest 3 pin
  - merged_pr_5049.patch
  - pr_5251-pytest5.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1576324800">- Remove python-urllib3, python-certifi and ca-certificates from
  main package BuildRequires, not required for building.
- Do not require full python, (implicit) python-base is sufficient.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582545600">- update to 2.23.0
- dropped merged_pr_5049.patch
- refreshed requests-no-hardcoded-version.patch
  * Remove defunct reference to prefetch in Session __attrs__
  * Requests no longer outputs password in basic auth usage warning</changelog>
  <changelog author="mcepl@suse.com" date="1587988800">- Switch off test_https_warnings test (bsc#1170175)</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1595505600">- remove patch pr_5251-pytest5.patch, not needed anymore.
- update to version 2.24.0:
  - pyOpenSSL TLS implementation is now only used if Python
  either doesn't have an `ssl` module or doesn't support
  SNI. Previously pyOpenSSL was unconditionally used if available.
  This applies even if pyOpenSSL is installed via the
  `requests[security]` extra (#5443)
  - Redirect resolution should now only occur when
  `allow_redirects` is True. (#5492)
  - No longer perform unnecessary Content-Length calculation for
  requests that won't use it. (#5496)</changelog>
  <changelog author="dmueller@suse.com" date="1606392000">- update to 2.25.0:
  * Added support for NETRC environment variable. (#5643)
  * Requests now supports urllib3 v1.26.
  * Requests v2.25.x will be the last release series with support for Python 3.5.
- refreshed requests-no-hardcoded-version.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1607947200">- Update in SLE-15 (bsc#1176785, jsc#ECO-3105, jsc#PM-2352)</changelog>
  <changelog author="dmueller@suse.com" date="1608379200">- update to 2.25.1:
  - Requests now treats `application/json` as `utf8` by default. Resolving
  inconsistencies between `r.text` and `r.json` output. (#5673)</changelog>
  <changelog author="code@bnavigator.de" date="1612353600">- Don't pin idna&lt;3 in the egg-info so that depending packages
  can install the new idna dropping python2</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1658404800">- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1686657600">- Add CVE-2023-32681.patch to fix unintended leak of
  Proxy-Authorization header (CVE-2023-32681, bsc#1211674)
  Upstream commit: gh#psf/requests@74ea7cf7a6a2</changelog>
  <changelog author="mmachova@suse.com" date="1716292800">- Add CVE-2024-35195.patch (CVE-2024-35195, bsc#1224788)
- Add httpbin.patch to fix a test failure caused by the previous patch.</changelog>
</package>
<package pkgid="f3ae829f53f77c36f47dc0bdf7902180b62589bfa4a7dc83e4f01e1b90b0d6bc" name="python-rpm" arch="src">
  <version epoch="0" ver="4.14.3" rel="150400.59.10.1"/>
  <changelog author="ro@suse.de" date="1234440000">- adapt buildrequires</changelog>
  <changelog author="dmueller@suse.de" date="1287403200">- adapt buildrequires</changelog>
  <changelog author="coolo@novell.com" date="1287748800">- adapt second spec file to changes done to rpm.spec</changelog>
  <changelog author="mls@suse.de" date="1298462400">- drop standard python directories from filelist [bnc#229189]</changelog>
  <changelog author="coolo@suse.com" date="1323604800">- add libtool as explicit buildrequire</changelog>
  <changelog author="saschpe@suse.de" date="1326801600">- Spec file cleanup:
  * Don't rm -rf %{buildroot}
  * Removed %clean section
  * Removed authors from description</changelog>
  <changelog author="klaussfreire@gmail.com" date="1334145600">- Fix usage of deprecated AsVoidPtr Python/C API,
  replaced by Capsule API</changelog>
  <changelog author="mls@suse.de" date="1335182400">- modified capsule api diff to match rpm upstream</changelog>
  <changelog author="dmueller@suse.com" date="1357128000">- Update to 4.10.2</changelog>
  <changelog author="mls@suse.de" date="1373630400">- update to rpm-4.11.1</changelog>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
  <changelog author="dmueller@suse.com" date="1691755200">- build for all python modules (jsc#PED-68, jsc#PED-1988)</changelog>
</package>
<package pkgid="dc0f349fb8076ccf4d9824c8b9f75441ef55206774c4e8f05cf1ae0b55e17cf1" name="python-rpm" arch="src">
  <version epoch="0" ver="4.14.3" rel="150400.59.13.1"/>
  <changelog author="ro@suse.de" date="1234440000">- adapt buildrequires</changelog>
  <changelog author="dmueller@suse.de" date="1287403200">- adapt buildrequires</changelog>
  <changelog author="coolo@novell.com" date="1287748800">- adapt second spec file to changes done to rpm.spec</changelog>
  <changelog author="mls@suse.de" date="1298462400">- drop standard python directories from filelist [bnc#229189]</changelog>
  <changelog author="coolo@suse.com" date="1323604800">- add libtool as explicit buildrequire</changelog>
  <changelog author="saschpe@suse.de" date="1326801600">- Spec file cleanup:
  * Don't rm -rf %{buildroot}
  * Removed %clean section
  * Removed authors from description</changelog>
  <changelog author="klaussfreire@gmail.com" date="1334145600">- Fix usage of deprecated AsVoidPtr Python/C API,
  replaced by Capsule API</changelog>
  <changelog author="mls@suse.de" date="1335182400">- modified capsule api diff to match rpm upstream</changelog>
  <changelog author="dmueller@suse.com" date="1357128000">- Update to 4.10.2</changelog>
  <changelog author="mls@suse.de" date="1373630400">- update to rpm-4.11.1</changelog>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
  <changelog author="dmueller@suse.com" date="1691755200">- build for all python modules (jsc#PED-68, jsc#PED-1988)</changelog>
</package>
<package pkgid="f54c2e85398a78d4b01a455b41f935627d6f45f84088bb3ba23956e8e99311e1" name="python-rpm" arch="src">
  <version epoch="0" ver="4.14.3" rel="150400.59.16.1"/>
  <changelog author="ro@suse.de" date="1234440000">- adapt buildrequires</changelog>
  <changelog author="dmueller@suse.de" date="1287403200">- adapt buildrequires</changelog>
  <changelog author="coolo@novell.com" date="1287748800">- adapt second spec file to changes done to rpm.spec</changelog>
  <changelog author="mls@suse.de" date="1298462400">- drop standard python directories from filelist [bnc#229189]</changelog>
  <changelog author="coolo@suse.com" date="1323604800">- add libtool as explicit buildrequire</changelog>
  <changelog author="saschpe@suse.de" date="1326801600">- Spec file cleanup:
  * Don't rm -rf %{buildroot}
  * Removed %clean section
  * Removed authors from description</changelog>
  <changelog author="klaussfreire@gmail.com" date="1334145600">- Fix usage of deprecated AsVoidPtr Python/C API,
  replaced by Capsule API</changelog>
  <changelog author="mls@suse.de" date="1335182400">- modified capsule api diff to match rpm upstream</changelog>
  <changelog author="dmueller@suse.com" date="1357128000">- Update to 4.10.2</changelog>
  <changelog author="mls@suse.de" date="1373630400">- update to rpm-4.11.1</changelog>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
  <changelog author="dmueller@suse.com" date="1691755200">- build for all python modules (jsc#PED-68, jsc#PED-1988)</changelog>
</package>
<package pkgid="64e40f4a9374f5a5d998b1ab2ba67e970f2a132a030cecda0f343563f4cedc39" name="python-rpm" arch="src">
  <version epoch="0" ver="4.14.3" rel="150400.59.7.1"/>
  <changelog author="ro@suse.de" date="1234440000">- adapt buildrequires</changelog>
  <changelog author="dmueller@suse.de" date="1287403200">- adapt buildrequires</changelog>
  <changelog author="coolo@novell.com" date="1287748800">- adapt second spec file to changes done to rpm.spec</changelog>
  <changelog author="mls@suse.de" date="1298462400">- drop standard python directories from filelist [bnc#229189]</changelog>
  <changelog author="coolo@suse.com" date="1323604800">- add libtool as explicit buildrequire</changelog>
  <changelog author="saschpe@suse.de" date="1326801600">- Spec file cleanup:
  * Don't rm -rf %{buildroot}
  * Removed %clean section
  * Removed authors from description</changelog>
  <changelog author="klaussfreire@gmail.com" date="1334145600">- Fix usage of deprecated AsVoidPtr Python/C API,
  replaced by Capsule API</changelog>
  <changelog author="mls@suse.de" date="1335182400">- modified capsule api diff to match rpm upstream</changelog>
  <changelog author="dmueller@suse.com" date="1357128000">- Update to 4.10.2</changelog>
  <changelog author="mls@suse.de" date="1373630400">- update to rpm-4.11.1</changelog>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
  <changelog author="dmueller@suse.com" date="1691755200">- build for all python modules (jsc#PED-68, jsc#PED-1988)</changelog>
</package>
<package pkgid="f36b59375e5cb94b56d5b5548f58d6f0d9c81d4ddd06474c5f1609ba84c21051" name="python-simplejson" arch="src">
  <version epoch="0" ver="3.17.2" rel="150300.3.4.1"/>
  <changelog author="benny.gaechter@gmail.com" date="1368014400">- Update to version 3.3.0
  * Unpaired surrogates once again pass through the decoder, to match older
    behavior and the RFC-4627 spec.
    https://github.com/simplejson/simplejson/issues/62</changelog>
  <changelog author="dmueller@suse.com" date="1382356800">- update to 3.3.1:
  * JSONDecodeError exceptions can now be pickled</changelog>
  <changelog author="speilicke@suse.com" date="1382616000">- Require python-setuptools instead of distribute (upstreams merged)</changelog>
  <changelog author="toddrme2178@gmail.com" date="1400587200">- Update to 3.4.1
  * Fixed tests to run on Python 3.4
- Update to 3.4.0
  * Native setuptools support re-introduced
    https://github.com/simplejson/simplejson/pull/92
- Update to 3.3.3
  * Improve test suite's Python 3.4 compatibility
    https://github.com/simplejson/simplejson/issues/87
- Update to 3.3.2
  * Docstring fix for decoded string types
    https://github.com/simplejson/simplejson/pull/82</changelog>
  <changelog author="dmueller@suse.com" date="1401537600">- update to 3.5.2:
  * Fix Windows build with VS2008
  Version 3.5.1 released 2014-05-21
  * Consistently reject int_as_string_bitcount settings that are not
    positive integers
  Version 3.5.0 released 2014-05-20
  * Added int_as_string_bitcount encoder option
  * Fixed potential crash when encoder created with incorrect options</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1431432000">- update to version 3.6.5:
  * Importing bug fix for reference leak when an error occurs
    during dict encoding
    https://github.com/simplejson/simplejson/issues/109
- additional changes from version 3.6.4:
  * Important bug fix for dump when only sort_keys is set
    https://github.com/simplejson/simplejson/issues/106
- additional changes from version 3.6.3:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/103
- additional changes from version 3.6.2:
  * Documentation updates
    http://bugs.python.org/issue21514
- additional changes from version 3.6.1:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/102
- additional changes from version 3.6.0:
  * Automatically strip any UTF-8 BOM from input to more closely
    follow the latest specs
    https://github.com/simplejson/simplejson/pull/101
- additional changes from version 3.5.3:
  * Fix lower bound checking in scan_once / raw_decode API
    https://github.com/simplejson/simplejson/issues/98</changelog>
  <changelog author="dmueller@suse.com" date="1479470400">- update to 3.8.2:
  * Fix implicit cast compiler warning in _speedups.c
  * simplejson is now available as wheels for OS X and Windows thanks to Travis-CI
  and AppVeyor respectively! Many thanks to @aebrahim for getting this party
  started.
  * Fix issue with iterable_as_array and indent option
  * Fix typo in keyword argument name introduced in 3.8.0
  * New iterable_as_array encoder option to perform lazy serialization of
  any iterable objects, without having to convert to tuple or list.
  * Fix typo introduced in 3.7.0 (behavior should be indistinguishable)
  https://github.com/simplejson/simplejson/commit/e18cc09b688ea1f3305c27616fd3cadd2adc6d31#commitcomment-11443842
  * Do not cache Decimal class in encoder, only reference the decimal module.
  This may make reload work in more common scenarios.
  * Fix compilation with MSVC
  https://github.com/simplejson/simplejson/pull/119
  * simplejson no longer trusts custom str/repr methods for int, long, float
  subclasses. These instances are now formatted as if they were exact
  instances of those types.
  https://github.com/simplejson/simplejson/issues/118</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to 3.10.0
  * Add RawJSON class to allow a faster path for already encoded JSON.
- From 3.9.0
  * Workaround for bad behavior in string subclasses
  * Fix warnings flagged by -3
  * Update readthedocs documentation links
  * Add build status badge to README</changelog>
  <changelog author="jmatejek@suse.com" date="1490097600">- fix pypi url</changelog>
  <changelog author="tbechtold@suse.com" date="1502193600">- update to 3.11.1:
  * Fix issue with item_sort_key when speedups are available, and add
    auto-discovery to test suites to prevent similar regressions
  * docstring fix in JSONEncoder
  * Call PyObject_IsTrue() only once for the strict argument of scann  er
  * Fix a crash with unencodable encoding in the encoder
  * Remove unused imports
  * Remove remnants of Python 2.4 support
  * Fix argument checking errors in _speedups.c
  * Remove the `__init__` methods in extension classes
  * Fix typo in the doc for loads
  * Add Python 3.6 to testing matrix and PyPI metadata</changelog>
  <changelog author="arun@gmx.de" date="1509969600">- update to version 3.12.0:
  * Fix threaded import race condition
    https://github.com/simplejson/simplejson/issues/184
  * Move RawJSON implementation to simplejson.raw_json module
  * Move JSONDecodeError implementation to simplejson.errors module</changelog>
  <changelog author="arun@gmx.de" date="1511697600">- update to version 3.13.2:
  * Fix additional Python 2.x compilation issue on Windows
- changes from version 3.13.1 :
  * Improve CI to catch speedups build regressions
  * Fix speedups build regression in Python 2.x
    https://github.com/simplejson/simplejson/issues/193
- changes from version 3.13.0:
  * Workarounds for NamedTemporaryFile issues with Windows for tool
    tests
  * Make TypeError messages contain type name instead of a repr.
    https://github.com/simplejson/simplejson/pull/191
  * Ensure that encoding of text subtypes is consistent with or
    without speedups
    https://github.com/simplejson/simplejson/issues/185
- changes from version 3.12.1:
  * Misc updates to build infrastructure
  * Fix an assertion failure when make_encoder receives a bad encoder
    argument https://github.com/simplejson/simplejson/pull/188
  * Fix potential crash during GC
    https://github.com/simplejson/simplejson/pull/187
  * Fix a reference leak when sorting keys
    https://github.com/simplejson/simplejson/pull/186</changelog>
  <changelog author="jengelh@inai.de" date="1511784000">- Remove bias from description.</changelog>
  <changelog author="arun@gmx.de" date="1525608000">- specfile:
  * update copyright year
- update to version 3.14.0:
  * Defer is_raw_json test (performance improvement)
    https://github.com/simplejson/simplejson/pull/212
  * Avoid escaping U+2028 and U+2029 without ensure_ascii
    https://github.com/simplejson/simplejson/pull/211
  * Fix an incorrect type test in Python 2, avoiding an unnecessary
    unicode copy.  https://github.com/simplejson/simplejson/pull/210</changelog>
  <changelog author="arun@gmx.de" date="1526904000">- update to version 3.15.0:
  * Clean up the C code
  * Bypass the decode() method in bytes subclasses
  * Support builds without cStringIO
  * Allow to disable serializing bytes by default in Python 3
  * Simplify the compatibility code
  * Fix tests in Python 2.5</changelog>
  <changelog author="arun@gmx.de" date="1530532800">- specfile:
  * be more specific in %files:
    %{python_sitearch}/* -&gt; %{python_sitearch}/simplejson*
- update to version 3.16.0:
  * Restore old behavior with regard to the type of decoded empty
    strings with speedups enabled on Python 2.x
    https://github.com/simplejson/simplejson/pull/225
  * Add python_requires to setup.py to help pip
    https://github.com/simplejson/simplejson/pull/224
  * Fix CSS in docs when built locally
    https://github.com/simplejson/simplejson/pull/222</changelog>
  <changelog author="tchvatal@suse.com" date="1530532801">- Do not package tests</changelog>
  <changelog author="arun@gmx.de" date="1536408000">- update to version 3.16.1:
  * Added examples for JSON lines use cases
  * Add wheels for more Python versions and platforms</changelog>
  <changelog author="arun@gmx.de" date="1574596800">- specfile:
  * update copyright year
- update to version 3.17.0:
  * Updated documentation to be Python 3 first, and
    have removed documentation notes about version changes
    that occurred more than five years ago.
    https://github.com/simplejson/simplejson/pull/257
    https://github.com/simplejson/simplejson/pull/254
  * Update build matrix for Python 3.8
    https://github.com/simplejson/simplejson/pull/255
    https://github.com/simplejson/simplejson/pull/256</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596024000">- update to 3.17.2
- use pytest as testrunner</changelog>
</package>
<package pkgid="921811a562dac8bc50aef2823ab267da6359b78823cb23b657d988d92126c312" name="python-urllib3" arch="src">
  <version epoch="0" ver="1.25.10" rel="150300.4.12.1"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1560945600">- Fix Upgrade from Leap 42.1/42.2 by adding Obsoletes/Provides:
  python-urllib3, fixes boo#1138746</changelog>
  <changelog author="dimstar@opensuse.org" date="1561032000">- Provides/Obsoletes does not fix the issue: we have a
  directory-to-symlink switch, which cannot be handled by RPM
  internally. Assist using pre script (boo#1138715).</changelog>
  <changelog author="dimstar@opensuse.org" date="1561118400">- Fixup pre script: the migration issue happens when changing from
  python-urllib3 to python2-urllib3: the number of installed
  instances of python2-urlliib3 is at this moment 1, unlike in
  regular updates. This is due to a name change, which consists not
  of a pure package update.</changelog>
  <changelog author="tchvatal@suse.com" date="1563796800">- Use old pytest 3.x as newer do not work with this release
  * this will be fixed with next release, just spread among
    numerous fixes in the git for quick backporting</changelog>
  <changelog author="jayvdb@gmail.com" date="1568462400">- Use have/skip_python2/3 macros to allow building only one flavour</changelog>
  <changelog author="tchvatal@suse.com" date="1568980800">- Update to 1.25.5:
  * Add mitigation for BPO-37428 affecting Python &lt;3.7.4 and OpenSSL 1.1.1+ which caused certificate verification to be enabled when using cert_reqs=CERT_NONE. (Issue #1682)
  * Propagate Retry-After header settings to subsequent retries. (Pull #1607)
  * Fix edge case where Retry-After header was still respected even when explicitly opted out of. (Pull #1607)
  * Remove dependency on rfc3986 for URL parsing.
  * Fix issue where URLs containing invalid characters within Url.auth would raise an exception instead of percent-encoding those characters.
  * Add support for HTTPResponse.auto_close = False which makes HTTP responses work well with BufferedReaders and other io module features. (Pull #1652)
  * Percent-encode invalid characters in URL for HTTPConnectionPool.request() (Pull #1673)
- Drop patch urllib3-ssl-default-context.patch
- Drop patch python-urllib3-recent-date.patch the date is recent
  enough on its own</changelog>
  <changelog author="tchvatal@suse.com" date="1569585600">- Restrict the tornado dep from tom to 5 or older release as the
  6.x changed the API</changelog>
  <changelog author="tchvatal@suse.com" date="1570017600">- Updae to 1.25.6:
  * Fix issue where tilde (~) characters were incorrectly percent-encoded in the path. (Pull #1692)</changelog>
  <changelog author="rhafer@suse.de" date="1571140800">- Require a new enough release of python-six. 1.25.6 needs at least
  1.12.0 for ensure_text() and friends.</changelog>
  <changelog author="mcalabkova@suse.com" date="1581076800">- update to 1.25.8
  * Drop support for EOL Python 3.4
  * Optimize _encode_invalid_chars
  * Preserve chunked parameter on retries
  * Allow unset SERVER_SOFTWARE in App Engine
  * Fix issue where URL fragment was sent within the request target.
  * Fix issue where an empty query section in a URL would fail to parse.
  * Remove TLS 1.3 support in SecureTransport due to Apple removing support.</changelog>
  <changelog author="mcepl@suse.com" date="1587470400">- Explicitly switch off building python 2 version.</changelog>
  <changelog author="dmueller@suse.com" date="1591099200">- update to 1.25.9 (bsc#1177120, CVE-2020-26137):
  * Added ``InvalidProxyConfigurationWarning`` which is raised when
    erroneously specifying an HTTPS proxy URL. urllib3 doesn't currently
    support connecting to HTTPS proxies but will soon be able to
    and we would like users to migrate properly without much breakage.
  * Drain connection after ``PoolManager`` redirect (Pull #1817)
  * Ensure ``load_verify_locations`` raises ``SSLError`` for all backends (Pull #1812)
  * Rename ``VerifiedHTTPSConnection`` to ``HTTPSConnection`` (Pull #1805)
  * Allow the CA certificate data to be passed as a string (Pull #1804)
  * Raise ``ValueError`` if method contains control characters (Pull #1800)
  * Add ``__repr__`` to ``Timeout`` (Pull #1795)</changelog>
  <changelog author="dmueller@suse.com" date="1596542400">- update to 1.25.10:
  * Added support for ``SSLKEYLOGFILE`` environment variable for
    logging TLS session keys with use with programs like
    Wireshark for decrypting captured web traffic (Pull #1867)
  * Fixed loading of SecureTransport libraries on macOS Big Sur
    due to the new dynamic linker cache (Pull #1905)
  * Collapse chunked request bodies data and framing into one
  call to ``send()`` to reduce the number of TCP packets by 2-4x (Pull #1906)
  * Don't insert ``None`` into ``ConnectionPool`` if the pool
    was empty when requesting a connection (Pull #1866)
  * Avoid ``hasattr`` call in ``BrotliDecoder.decompress()`` (Pull #1858)</changelog>
  <changelog author="aplanas@suse.com" date="1599652800">- Generate pyc for ssl_match_hostname too</changelog>
  <changelog author="mcepl@suse.com" date="1608206400">- Add CI variable, which makes timeouts in the test suite longer
  (gh#urllib3/urllib3#2109, bsc#1176389) and
  test_timeout_errors_cause_retries should not fail.</changelog>
  <changelog author="code@bnavigator.de" date="1609502400">- Skip test for RECENT_DATE. It is a test purely for developers.
  To maintain reproducibility, keep upstreams possibly outdated
  RECENT_DATE in the source code.</changelog>
  <changelog author="johannes.grassler@suse.com" date="1623412800">- Add CVE-2021-33503.patch (bsc#1187045, CVE-2021-33503)
  * Improve performance of sub-authority splitting in URL</changelog>
  <changelog author="daniel.garcia@suse.com" date="1696852800">- Add CVE-2023-43804.patch (bsc#1215968, CVE-2023-43804)
  gh#urllib3/urllib3#3139
  * Added the Cookie header to the list of headers to strip from
    requests when redirecting to a different host. As before,
    different headers can be set via Retry.remove_headers_on_redirect.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1698235200">- Add CVE-2023-45803.patch (bsc#1216377, CVE-2023-45803)
  gh#urllib3/urllib3@4e98d57809da</changelog>
  <changelog author="mmachova@suse.com" date="1721995200">- Add CVE-2024-37891.patch (bsc#1226469, CVE-2024-37891)</changelog>
</package>
<package pkgid="882401f0d532f0d6a3ceee3d563820d4c42b8385903228426ddfa9232946e2be" name="python-urllib3" arch="src">
  <version epoch="0" ver="1.25.10" rel="150300.4.6.1"/>
  <changelog author="tchvatal@suse.com" date="1559131200">- Add more test to skip as with new openssl some behaviour changed
  and we can't rely on them anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1559908800">- Skip test_source_address_error as we raise different error with
  fixes that we provide in new python2/3</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1560945600">- Fix Upgrade from Leap 42.1/42.2 by adding Obsoletes/Provides:
  python-urllib3, fixes boo#1138746</changelog>
  <changelog author="dimstar@opensuse.org" date="1561032000">- Provides/Obsoletes does not fix the issue: we have a
  directory-to-symlink switch, which cannot be handled by RPM
  internally. Assist using pre script (boo#1138715).</changelog>
  <changelog author="dimstar@opensuse.org" date="1561118400">- Fixup pre script: the migration issue happens when changing from
  python-urllib3 to python2-urllib3: the number of installed
  instances of python2-urlliib3 is at this moment 1, unlike in
  regular updates. This is due to a name change, which consists not
  of a pure package update.</changelog>
  <changelog author="tchvatal@suse.com" date="1563796800">- Use old pytest 3.x as newer do not work with this release
  * this will be fixed with next release, just spread among
    numerous fixes in the git for quick backporting</changelog>
  <changelog author="jayvdb@gmail.com" date="1568462400">- Use have/skip_python2/3 macros to allow building only one flavour</changelog>
  <changelog author="tchvatal@suse.com" date="1568980800">- Update to 1.25.5:
  * Add mitigation for BPO-37428 affecting Python &lt;3.7.4 and OpenSSL 1.1.1+ which caused certificate verification to be enabled when using cert_reqs=CERT_NONE. (Issue #1682)
  * Propagate Retry-After header settings to subsequent retries. (Pull #1607)
  * Fix edge case where Retry-After header was still respected even when explicitly opted out of. (Pull #1607)
  * Remove dependency on rfc3986 for URL parsing.
  * Fix issue where URLs containing invalid characters within Url.auth would raise an exception instead of percent-encoding those characters.
  * Add support for HTTPResponse.auto_close = False which makes HTTP responses work well with BufferedReaders and other io module features. (Pull #1652)
  * Percent-encode invalid characters in URL for HTTPConnectionPool.request() (Pull #1673)
- Drop patch urllib3-ssl-default-context.patch
- Drop patch python-urllib3-recent-date.patch the date is recent
  enough on its own</changelog>
  <changelog author="tchvatal@suse.com" date="1569585600">- Restrict the tornado dep from tom to 5 or older release as the
  6.x changed the API</changelog>
  <changelog author="tchvatal@suse.com" date="1570017600">- Updae to 1.25.6:
  * Fix issue where tilde (~) characters were incorrectly percent-encoded in the path. (Pull #1692)</changelog>
  <changelog author="rhafer@suse.de" date="1571140800">- Require a new enough release of python-six. 1.25.6 needs at least
  1.12.0 for ensure_text() and friends.</changelog>
  <changelog author="mcalabkova@suse.com" date="1581076800">- update to 1.25.8
  * Drop support for EOL Python 3.4
  * Optimize _encode_invalid_chars
  * Preserve chunked parameter on retries
  * Allow unset SERVER_SOFTWARE in App Engine
  * Fix issue where URL fragment was sent within the request target.
  * Fix issue where an empty query section in a URL would fail to parse.
  * Remove TLS 1.3 support in SecureTransport due to Apple removing support.</changelog>
  <changelog author="mcepl@suse.com" date="1587470400">- Explicitly switch off building python 2 version.</changelog>
  <changelog author="dmueller@suse.com" date="1591099200">- update to 1.25.9 (bsc#1177120, CVE-2020-26137):
  * Added ``InvalidProxyConfigurationWarning`` which is raised when
    erroneously specifying an HTTPS proxy URL. urllib3 doesn't currently
    support connecting to HTTPS proxies but will soon be able to
    and we would like users to migrate properly without much breakage.
  * Drain connection after ``PoolManager`` redirect (Pull #1817)
  * Ensure ``load_verify_locations`` raises ``SSLError`` for all backends (Pull #1812)
  * Rename ``VerifiedHTTPSConnection`` to ``HTTPSConnection`` (Pull #1805)
  * Allow the CA certificate data to be passed as a string (Pull #1804)
  * Raise ``ValueError`` if method contains control characters (Pull #1800)
  * Add ``__repr__`` to ``Timeout`` (Pull #1795)</changelog>
  <changelog author="dmueller@suse.com" date="1596542400">- update to 1.25.10:
  * Added support for ``SSLKEYLOGFILE`` environment variable for
    logging TLS session keys with use with programs like
    Wireshark for decrypting captured web traffic (Pull #1867)
  * Fixed loading of SecureTransport libraries on macOS Big Sur
    due to the new dynamic linker cache (Pull #1905)
  * Collapse chunked request bodies data and framing into one
  call to ``send()`` to reduce the number of TCP packets by 2-4x (Pull #1906)
  * Don't insert ``None`` into ``ConnectionPool`` if the pool
    was empty when requesting a connection (Pull #1866)
  * Avoid ``hasattr`` call in ``BrotliDecoder.decompress()`` (Pull #1858)</changelog>
  <changelog author="aplanas@suse.com" date="1599652800">- Generate pyc for ssl_match_hostname too</changelog>
  <changelog author="mcepl@suse.com" date="1608206400">- Add CI variable, which makes timeouts in the test suite longer
  (gh#urllib3/urllib3#2109, bsc#1176389) and
  test_timeout_errors_cause_retries should not fail.</changelog>
  <changelog author="code@bnavigator.de" date="1609502400">- Skip test for RECENT_DATE. It is a test purely for developers.
  To maintain reproducibility, keep upstreams possibly outdated
  RECENT_DATE in the source code.</changelog>
  <changelog author="johannes.grassler@suse.com" date="1623412800">- Add CVE-2021-33503.patch (bsc#1187045, CVE-2021-33503)
  * Improve performance of sub-authority splitting in URL</changelog>
  <changelog author="daniel.garcia@suse.com" date="1696852800">- Add CVE-2023-43804.patch (bsc#1215968, CVE-2023-43804)
  gh#urllib3/urllib3#3139
  * Added the Cookie header to the list of headers to strip from
    requests when redirecting to a different host. As before,
    different headers can be set via Retry.remove_headers_on_redirect.</changelog>
</package>
<package pkgid="7c3dfd62f4b79457933aeea8c579bb32899439bfbc9483ecdd712d942d107ce3" name="python-urllib3" arch="src">
  <version epoch="0" ver="1.25.10" rel="150300.4.9.1"/>
  <changelog author="tchvatal@suse.com" date="1559908800">- Skip test_source_address_error as we raise different error with
  fixes that we provide in new python2/3</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1560945600">- Fix Upgrade from Leap 42.1/42.2 by adding Obsoletes/Provides:
  python-urllib3, fixes boo#1138746</changelog>
  <changelog author="dimstar@opensuse.org" date="1561032000">- Provides/Obsoletes does not fix the issue: we have a
  directory-to-symlink switch, which cannot be handled by RPM
  internally. Assist using pre script (boo#1138715).</changelog>
  <changelog author="dimstar@opensuse.org" date="1561118400">- Fixup pre script: the migration issue happens when changing from
  python-urllib3 to python2-urllib3: the number of installed
  instances of python2-urlliib3 is at this moment 1, unlike in
  regular updates. This is due to a name change, which consists not
  of a pure package update.</changelog>
  <changelog author="tchvatal@suse.com" date="1563796800">- Use old pytest 3.x as newer do not work with this release
  * this will be fixed with next release, just spread among
    numerous fixes in the git for quick backporting</changelog>
  <changelog author="jayvdb@gmail.com" date="1568462400">- Use have/skip_python2/3 macros to allow building only one flavour</changelog>
  <changelog author="tchvatal@suse.com" date="1568980800">- Update to 1.25.5:
  * Add mitigation for BPO-37428 affecting Python &lt;3.7.4 and OpenSSL 1.1.1+ which caused certificate verification to be enabled when using cert_reqs=CERT_NONE. (Issue #1682)
  * Propagate Retry-After header settings to subsequent retries. (Pull #1607)
  * Fix edge case where Retry-After header was still respected even when explicitly opted out of. (Pull #1607)
  * Remove dependency on rfc3986 for URL parsing.
  * Fix issue where URLs containing invalid characters within Url.auth would raise an exception instead of percent-encoding those characters.
  * Add support for HTTPResponse.auto_close = False which makes HTTP responses work well with BufferedReaders and other io module features. (Pull #1652)
  * Percent-encode invalid characters in URL for HTTPConnectionPool.request() (Pull #1673)
- Drop patch urllib3-ssl-default-context.patch
- Drop patch python-urllib3-recent-date.patch the date is recent
  enough on its own</changelog>
  <changelog author="tchvatal@suse.com" date="1569585600">- Restrict the tornado dep from tom to 5 or older release as the
  6.x changed the API</changelog>
  <changelog author="tchvatal@suse.com" date="1570017600">- Updae to 1.25.6:
  * Fix issue where tilde (~) characters were incorrectly percent-encoded in the path. (Pull #1692)</changelog>
  <changelog author="rhafer@suse.de" date="1571140800">- Require a new enough release of python-six. 1.25.6 needs at least
  1.12.0 for ensure_text() and friends.</changelog>
  <changelog author="mcalabkova@suse.com" date="1581076800">- update to 1.25.8
  * Drop support for EOL Python 3.4
  * Optimize _encode_invalid_chars
  * Preserve chunked parameter on retries
  * Allow unset SERVER_SOFTWARE in App Engine
  * Fix issue where URL fragment was sent within the request target.
  * Fix issue where an empty query section in a URL would fail to parse.
  * Remove TLS 1.3 support in SecureTransport due to Apple removing support.</changelog>
  <changelog author="mcepl@suse.com" date="1587470400">- Explicitly switch off building python 2 version.</changelog>
  <changelog author="dmueller@suse.com" date="1591099200">- update to 1.25.9 (bsc#1177120, CVE-2020-26137):
  * Added ``InvalidProxyConfigurationWarning`` which is raised when
    erroneously specifying an HTTPS proxy URL. urllib3 doesn't currently
    support connecting to HTTPS proxies but will soon be able to
    and we would like users to migrate properly without much breakage.
  * Drain connection after ``PoolManager`` redirect (Pull #1817)
  * Ensure ``load_verify_locations`` raises ``SSLError`` for all backends (Pull #1812)
  * Rename ``VerifiedHTTPSConnection`` to ``HTTPSConnection`` (Pull #1805)
  * Allow the CA certificate data to be passed as a string (Pull #1804)
  * Raise ``ValueError`` if method contains control characters (Pull #1800)
  * Add ``__repr__`` to ``Timeout`` (Pull #1795)</changelog>
  <changelog author="dmueller@suse.com" date="1596542400">- update to 1.25.10:
  * Added support for ``SSLKEYLOGFILE`` environment variable for
    logging TLS session keys with use with programs like
    Wireshark for decrypting captured web traffic (Pull #1867)
  * Fixed loading of SecureTransport libraries on macOS Big Sur
    due to the new dynamic linker cache (Pull #1905)
  * Collapse chunked request bodies data and framing into one
  call to ``send()`` to reduce the number of TCP packets by 2-4x (Pull #1906)
  * Don't insert ``None`` into ``ConnectionPool`` if the pool
    was empty when requesting a connection (Pull #1866)
  * Avoid ``hasattr`` call in ``BrotliDecoder.decompress()`` (Pull #1858)</changelog>
  <changelog author="aplanas@suse.com" date="1599652800">- Generate pyc for ssl_match_hostname too</changelog>
  <changelog author="mcepl@suse.com" date="1608206400">- Add CI variable, which makes timeouts in the test suite longer
  (gh#urllib3/urllib3#2109, bsc#1176389) and
  test_timeout_errors_cause_retries should not fail.</changelog>
  <changelog author="code@bnavigator.de" date="1609502400">- Skip test for RECENT_DATE. It is a test purely for developers.
  To maintain reproducibility, keep upstreams possibly outdated
  RECENT_DATE in the source code.</changelog>
  <changelog author="johannes.grassler@suse.com" date="1623412800">- Add CVE-2021-33503.patch (bsc#1187045, CVE-2021-33503)
  * Improve performance of sub-authority splitting in URL</changelog>
  <changelog author="daniel.garcia@suse.com" date="1696852800">- Add CVE-2023-43804.patch (bsc#1215968, CVE-2023-43804)
  gh#urllib3/urllib3#3139
  * Added the Cookie header to the list of headers to strip from
    requests when redirecting to a different host. As before,
    different headers can be set via Retry.remove_headers_on_redirect.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1698235200">- Add CVE-2023-45803.patch (bsc#1216377, CVE-2023-45803)
  gh#urllib3/urllib3@4e98d57809da</changelog>
</package>
<package pkgid="1b45d0a2452d94cef9988e2731258d04b8deee2d00576e3c5c8ebd9f24640a21" name="python3" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.51.1"/>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
</package>
<package pkgid="eb60d20012544afa451688d95122c4098dbd2e1663f4e4a02aca5c3721315eeb" name="python3" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.51.1"/>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
</package>
<package pkgid="2689c2d8d0cb475d07666f9e19132b6f71deac378afcc5a56d99e9618860b177" name="python3" arch="src">
  <version epoch="0" ver="3.6.15" rel="150300.10.51.1"/>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
</package>
<package pkgid="b5450f23f7948307558bd46c936a063e4b89fd79b1d2d5115dc197aec133d286" name="python3" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.51.1"/>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
</package>
<package pkgid="16b7766f0341cd5f25bb86618ca361be7bf88fb5aff20e9bc555fb36e6614e4f" name="python3" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.54.1"/>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
</package>
<package pkgid="f75cbbaa6e5f18dd9a2032fe9c9e5ed6bde5eac116868de0f3eccbfe5b98ace2" name="python3" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.54.1"/>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
</package>
<package pkgid="688abb4b4ade249dc8c5503d4d084db2ed4d62c2989ca7789d294550d601bb3c" name="python3" arch="src">
  <version epoch="0" ver="3.6.15" rel="150300.10.54.1"/>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
</package>
<package pkgid="fba48a211368c614b7021cecc667fc1628b7b977f20d2fe668f4e3fb98fbfd02" name="python3" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.54.1"/>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
</package>
<package pkgid="3f0655932c019b04a8816d77fc90eb338fd4a859d30303929e440d6ffc2475c8" name="python3" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.57.1"/>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
</package>
<package pkgid="38815f3342e37de6d81d51133de7fe799752fe62109840337d900c2ad99bf999" name="python3" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.57.1"/>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
</package>
<package pkgid="88e508636ffb3c3d46adbb8919f1decfef577f2042ba156ecaeaf019f6e38583" name="python3" arch="src">
  <version epoch="0" ver="3.6.15" rel="150300.10.57.1"/>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
</package>
<package pkgid="022c38ba86d074c2cfd4e1ce03eed60ce7acfdf4ca89351dece9f84f143d2c89" name="python3" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.57.1"/>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
</package>
<package pkgid="0c5450f4190f92ac92f393b7ef6bcc7a83ff118dc3cb4b325975e4b0033ef905" name="python3" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.60.1"/>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
  <changelog author="mcepl@suse.com" date="1712059200">- Add bpo38361-syslog-no-slash-ident.patch (bsc#1222109,
  gh#python/cpython!16557) fixes syslog making default "ident"
  from sys.argv[0].</changelog>
</package>
<package pkgid="969cb043f516d5d6ed9ce7985fde244078d434f13e757c3ba75d5a81145b7b47" name="python3" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.60.1"/>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
  <changelog author="mcepl@suse.com" date="1712059200">- Add bpo38361-syslog-no-slash-ident.patch (bsc#1222109,
  gh#python/cpython!16557) fixes syslog making default "ident"
  from sys.argv[0].</changelog>
</package>
<package pkgid="75d192c77bcf59f06c68681e715aad16f3f7bebd6a0ba46eeccc9fce224fd3ef" name="python3" arch="src">
  <version epoch="0" ver="3.6.15" rel="150300.10.60.1"/>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
  <changelog author="mcepl@suse.com" date="1712059200">- Add bpo38361-syslog-no-slash-ident.patch (bsc#1222109,
  gh#python/cpython!16557) fixes syslog making default "ident"
  from sys.argv[0].</changelog>
</package>
<package pkgid="c04bd7360a027ffeb3956ba9ca1a0c92160ce159ece15dbdd8437e6952d588de" name="python3" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.60.1"/>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
  <changelog author="mcepl@suse.com" date="1712059200">- Add bpo38361-syslog-no-slash-ident.patch (bsc#1222109,
  gh#python/cpython!16557) fixes syslog making default "ident"
  from sys.argv[0].</changelog>
</package>
<package pkgid="ee9f5230c322bd695ffa855c95b731b69ee215b1352afa4c44228c0d1cb6c585" name="python3" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.65.2"/>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
  <changelog author="mcepl@cepl.eu" date="1714046400">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).
- Add bh42369-thread-safety-zipfile-SharedFile.patch (from
  gh#python/cpython!26974) required by the previous patch.
- Add expat-260-test_xml_etree-reparse-deferral.patch to make the
  interpreter work with patched libexpat in our distros.
- Move all patches from locally sourced to the branch
  opensuse-3.6 branch at GitHub repo, and move all metadata to
  commits themselves (readable in the headers of each patch).
- Add bpo-41675-modernize-siginterrupt.patch to make Python build
  cleanly even on more recent SPs of SLE-15
  (gh#python/cpython#85841).
- Remove patches:
  - bpo36263-Fix_hashlib_scrypt.patch - fix against bug in
    OpenSSL fixed in 1.1.1c (gh#openssl/openssl!8483), so this
    patch is redundant on all SUSE-supported distros
  - python-3.3.0b1-test-posix_fadvise.patch - protection
    against the kernel issues which has been fixed in
    gh#torvalds/linux@3d3727cdb07f, which has been included in
    all our kernels more recent than SLE-11.
  - python-3.3.3-skip-distutils-test_sysconfig_module.patch -
    skips a test, which should be relevant only for testing on
    Mac OS X systems with universal builds. I have no valid
    record, that this test would be ever problematic on Linux.
  - bpo-36576-skip_tests_for_OpenSSL-111.patch, which was
    included already in Python 3.5.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715083200">- Add bpo38361-syslog-no-slash-ident.patch (bsc#1222109,
  gh#python/cpython!16557) fixes syslog making default "ident"
  from sys.argv[0].
- Update CVE-2023-52425-libexpat-2.6.0-backport.patch so that
  it uses features sniffing, not just comparing version number
  (bsc#1220664, bsc#1219559, bsc#1221563, bsc#1222075).
- Remove support-expat-CVE-2022-25236-patched.patch, which was
  the previous name of this patch.
- Add CVE-2023-52425-remove-reparse_deferral-tests.patch skipping
  failing tests.
- Refresh patches:
  - CVE-2023-27043-email-parsing-errors.patch
  - fix_configure_rst.patch
  - skip_if_buildbot-extend.patch</changelog>
  <changelog author="mcepl@cepl.eu" date="1718971200">- Add CVE-2024-0397-memrace_ssl.SSLContext_cert_store.patch
  fixing bsc#1226447 (CVE-2024-0397) by removing memory race
  condition in ssl.SSLContext certificate store methods.</changelog>
  <changelog author="mcepl@cepl.eu" date="1719316800">- Add CVE-2024-4032-private-IP-addrs.patch to fix bsc#1226448
  (CVE-2024-4032) rearranging definition of private v global IP
  addresses.</changelog>
</package>
<package pkgid="975da9677c0ba1234869371aef00dd81ad83dd30607b502008b2cf99ff500773" name="python3" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.65.2"/>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
  <changelog author="mcepl@cepl.eu" date="1714046400">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).
- Add bh42369-thread-safety-zipfile-SharedFile.patch (from
  gh#python/cpython!26974) required by the previous patch.
- Add expat-260-test_xml_etree-reparse-deferral.patch to make the
  interpreter work with patched libexpat in our distros.
- Move all patches from locally sourced to the branch
  opensuse-3.6 branch at GitHub repo, and move all metadata to
  commits themselves (readable in the headers of each patch).
- Add bpo-41675-modernize-siginterrupt.patch to make Python build
  cleanly even on more recent SPs of SLE-15
  (gh#python/cpython#85841).
- Remove patches:
  - bpo36263-Fix_hashlib_scrypt.patch - fix against bug in
    OpenSSL fixed in 1.1.1c (gh#openssl/openssl!8483), so this
    patch is redundant on all SUSE-supported distros
  - python-3.3.0b1-test-posix_fadvise.patch - protection
    against the kernel issues which has been fixed in
    gh#torvalds/linux@3d3727cdb07f, which has been included in
    all our kernels more recent than SLE-11.
  - python-3.3.3-skip-distutils-test_sysconfig_module.patch -
    skips a test, which should be relevant only for testing on
    Mac OS X systems with universal builds. I have no valid
    record, that this test would be ever problematic on Linux.
  - bpo-36576-skip_tests_for_OpenSSL-111.patch, which was
    included already in Python 3.5.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715083200">- Add bpo38361-syslog-no-slash-ident.patch (bsc#1222109,
  gh#python/cpython!16557) fixes syslog making default "ident"
  from sys.argv[0].
- Update CVE-2023-52425-libexpat-2.6.0-backport.patch so that
  it uses features sniffing, not just comparing version number
  (bsc#1220664, bsc#1219559, bsc#1221563, bsc#1222075).
- Remove support-expat-CVE-2022-25236-patched.patch, which was
  the previous name of this patch.
- Add CVE-2023-52425-remove-reparse_deferral-tests.patch skipping
  failing tests.
- Refresh patches:
  - CVE-2023-27043-email-parsing-errors.patch
  - fix_configure_rst.patch
  - skip_if_buildbot-extend.patch</changelog>
  <changelog author="mcepl@cepl.eu" date="1718971200">- Add CVE-2024-0397-memrace_ssl.SSLContext_cert_store.patch
  fixing bsc#1226447 (CVE-2024-0397) by removing memory race
  condition in ssl.SSLContext certificate store methods.</changelog>
  <changelog author="mcepl@cepl.eu" date="1719316800">- Add CVE-2024-4032-private-IP-addrs.patch to fix bsc#1226448
  (CVE-2024-4032) rearranging definition of private v global IP
  addresses.</changelog>
</package>
<package pkgid="39d69f731642a5045aa090d6207547f39e9f346124cfa23a028241fed817e4c5" name="python3" arch="src">
  <version epoch="0" ver="3.6.15" rel="150300.10.65.2"/>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
  <changelog author="mcepl@cepl.eu" date="1714046400">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).
- Add bh42369-thread-safety-zipfile-SharedFile.patch (from
  gh#python/cpython!26974) required by the previous patch.
- Add expat-260-test_xml_etree-reparse-deferral.patch to make the
  interpreter work with patched libexpat in our distros.
- Move all patches from locally sourced to the branch
  opensuse-3.6 branch at GitHub repo, and move all metadata to
  commits themselves (readable in the headers of each patch).
- Add bpo-41675-modernize-siginterrupt.patch to make Python build
  cleanly even on more recent SPs of SLE-15
  (gh#python/cpython#85841).
- Remove patches:
  - bpo36263-Fix_hashlib_scrypt.patch - fix against bug in
    OpenSSL fixed in 1.1.1c (gh#openssl/openssl!8483), so this
    patch is redundant on all SUSE-supported distros
  - python-3.3.0b1-test-posix_fadvise.patch - protection
    against the kernel issues which has been fixed in
    gh#torvalds/linux@3d3727cdb07f, which has been included in
    all our kernels more recent than SLE-11.
  - python-3.3.3-skip-distutils-test_sysconfig_module.patch -
    skips a test, which should be relevant only for testing on
    Mac OS X systems with universal builds. I have no valid
    record, that this test would be ever problematic on Linux.
  - bpo-36576-skip_tests_for_OpenSSL-111.patch, which was
    included already in Python 3.5.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715083200">- Add bpo38361-syslog-no-slash-ident.patch (bsc#1222109,
  gh#python/cpython!16557) fixes syslog making default "ident"
  from sys.argv[0].
- Update CVE-2023-52425-libexpat-2.6.0-backport.patch so that
  it uses features sniffing, not just comparing version number
  (bsc#1220664, bsc#1219559, bsc#1221563, bsc#1222075).
- Remove support-expat-CVE-2022-25236-patched.patch, which was
  the previous name of this patch.
- Add CVE-2023-52425-remove-reparse_deferral-tests.patch skipping
  failing tests.
- Refresh patches:
  - CVE-2023-27043-email-parsing-errors.patch
  - fix_configure_rst.patch
  - skip_if_buildbot-extend.patch</changelog>
  <changelog author="mcepl@cepl.eu" date="1718971200">- Add CVE-2024-0397-memrace_ssl.SSLContext_cert_store.patch
  fixing bsc#1226447 (CVE-2024-0397) by removing memory race
  condition in ssl.SSLContext certificate store methods.</changelog>
  <changelog author="mcepl@cepl.eu" date="1719316800">- Add CVE-2024-4032-private-IP-addrs.patch to fix bsc#1226448
  (CVE-2024-4032) rearranging definition of private v global IP
  addresses.</changelog>
</package>
<package pkgid="6d3d678ab02619d2981894d1986dea2a9352e6b5a61242e680a307a1017ff501" name="python3" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.65.2"/>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
  <changelog author="mcepl@cepl.eu" date="1714046400">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).
- Add bh42369-thread-safety-zipfile-SharedFile.patch (from
  gh#python/cpython!26974) required by the previous patch.
- Add expat-260-test_xml_etree-reparse-deferral.patch to make the
  interpreter work with patched libexpat in our distros.
- Move all patches from locally sourced to the branch
  opensuse-3.6 branch at GitHub repo, and move all metadata to
  commits themselves (readable in the headers of each patch).
- Add bpo-41675-modernize-siginterrupt.patch to make Python build
  cleanly even on more recent SPs of SLE-15
  (gh#python/cpython#85841).
- Remove patches:
  - bpo36263-Fix_hashlib_scrypt.patch - fix against bug in
    OpenSSL fixed in 1.1.1c (gh#openssl/openssl!8483), so this
    patch is redundant on all SUSE-supported distros
  - python-3.3.0b1-test-posix_fadvise.patch - protection
    against the kernel issues which has been fixed in
    gh#torvalds/linux@3d3727cdb07f, which has been included in
    all our kernels more recent than SLE-11.
  - python-3.3.3-skip-distutils-test_sysconfig_module.patch -
    skips a test, which should be relevant only for testing on
    Mac OS X systems with universal builds. I have no valid
    record, that this test would be ever problematic on Linux.
  - bpo-36576-skip_tests_for_OpenSSL-111.patch, which was
    included already in Python 3.5.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715083200">- Add bpo38361-syslog-no-slash-ident.patch (bsc#1222109,
  gh#python/cpython!16557) fixes syslog making default "ident"
  from sys.argv[0].
- Update CVE-2023-52425-libexpat-2.6.0-backport.patch so that
  it uses features sniffing, not just comparing version number
  (bsc#1220664, bsc#1219559, bsc#1221563, bsc#1222075).
- Remove support-expat-CVE-2022-25236-patched.patch, which was
  the previous name of this patch.
- Add CVE-2023-52425-remove-reparse_deferral-tests.patch skipping
  failing tests.
- Refresh patches:
  - CVE-2023-27043-email-parsing-errors.patch
  - fix_configure_rst.patch
  - skip_if_buildbot-extend.patch</changelog>
  <changelog author="mcepl@cepl.eu" date="1718971200">- Add CVE-2024-0397-memrace_ssl.SSLContext_cert_store.patch
  fixing bsc#1226447 (CVE-2024-0397) by removing memory race
  condition in ssl.SSLContext certificate store methods.</changelog>
  <changelog author="mcepl@cepl.eu" date="1719316800">- Add CVE-2024-4032-private-IP-addrs.patch to fix bsc#1226448
  (CVE-2024-4032) rearranging definition of private v global IP
  addresses.</changelog>
</package>
<package pkgid="affc3829e86cae5713ba714fdb438564e17f84a9943ca6a7281b76102e8ee87b" name="python3-Jinja2" arch="noarch">
  <version epoch="0" ver="2.10.1" rel="150000.3.13.1"/>
  <changelog author="jengelh@inai.de" date="1437566400">- Use %python_version over %py_ver: better portability to RHEL</changelog>
  <changelog author="aplanas@suse.com" date="1447934400">- Update to 2.8
  - Added `target` parameter to urlize function.
  - Added support for `followsymlinks` to the file system loader.
  - The truncate filter now counts the length.
  - Added equalto filter that helps with select filters.
  - Changed cache keys to use absolute file names if available
    instead of load names.
  - Fixed loop length calculation for some iterators.
  - Changed how Jinja2 enforces strings to be native strings in
    Python 2 to work when people break their default encoding.
  - Added :func:`make_logging_undefined` which returns an undefined
    object that logs failures into a logger.
  - If unmarshalling of cached data fails the template will be
    reloaded now.
  - Implemented a block ``set`` tag.
  - Default cache size was incrased to 400 from a low 50.
  - Fixed ``is number`` test to accept long integers in all Python versions.
  - Changed ``is number`` to accept Decimal as a number.
  - Added a check for default arguments followed by non-default arguments. This
    change makes ``{% macro m(x, y=1, z) %}...{% endmacro %}`` a syntax error. The
    previous behavior for this code was broken anyway (resulting in the default
    value being applied to `y`).
  - Add ability to use custom subclasses of ``jinja2.compiler.CodeGenerator`` and
    ``jinja2.runtime.Context`` by adding two new attributes to the environment
    (`code_generator_class` and `context_class`) (pull request ``#404``).
  - added support for context/environment/evalctx decorator functions on
    the finalize callback of the environment.
  - escape query strings for urlencode properly.  Previously slashes were not
    escaped in that place.
  - Add 'base' parameter to 'int' filter.
- Tests are removed from the package (not distributed in the tar.gz)</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to 2.9.5  (bsc#1132174, CVE-2016-10745)
  (see the changes in /usr/share/doc/packages/python-Jinja2/CHANGES)
- updated source URL</changelog>
  <changelog author="dmueller@suse.com" date="1490184000">- fix requires</changelog>
  <changelog author="jmatejek@suse.com" date="1491307200">- update for singlespec
- update to 2.9.6
  * fixed custom context behavior in fast resolve mode</changelog>
  <changelog author="arun@gmx.de" date="1510228800">- specfile:
  * CHANGES -&gt; CHANGES.rst
  * added README.rst to %doc section
- update to version 2.10:
  * Added a new extension node called "OverlayScope" which can be used
    to create an unoptimized scope that will look up all variables
    from a derived context.
  * Added an "in" test that works like the in operator.  This can be
    used in combination with "reject" and "select".
  * Added "previtem" and "nextitem" to loop contexts, providing access
    to the previous/next item in the loop. If such an item does not
    exist, the value is undefined.
  * Added "changed(*values)" to loop contexts, providing an easy way
    of checking whether a value has changed since the last iteration
    (or rather since the last call of the method)
  * Added a "namespace" function that creates a special object which
    allows attribute assignment using the "set" tag.  This can be used
    to carry data across scopes, e.g. from a loop body to code that
    comes after the loop.
  * Added a "trimmed" modifier to "{% trans %}" to strip linebreaks
    and surrounding whitespace. Also added a new policy to enable this
    for all "trans" blocks.
  * The "random" filter is no longer incorrectly constant folded and
    will produce a new random choice each time the template is
    rendered. (`#478`_)
  * Added a "unique" filter. (`#469`_)
  * Added "min" and "max" filters. (`#475`_)
  * Added tests for all comparison operators: "eq", "ne", "lt", "le",
    "gt", "ge". (`#665`_)
  * "import" statement cannot end with a trailing comma. (`#617`_,
    `#618`_)
  * "indent" filter will not indent blank lines by default. (`#685`_)
  * Add "reverse" argument for "dictsort" filter. (`#692`_)
  * Add a "NativeEnvironment" that renders templates to native Python
    types instead of strings. (`#708`_)
  * Added filter support to the block "set" tag. (`#489`_)
  * "tojson" filter marks output as safe to match documented behavior.
    (`#718`_)
  * Resolved a bug where getting debug locals for tracebacks could
    modify template context.
  * Fixed a bug where having many "{% elif ... %}" blocks resulted in
    a "too many levels of indentation" error.  These blocks now
    compile to native "elif ..:" instead of "else: if ..:" (`#759`_)</changelog>
  <changelog author="arun@gmx.de" date="1555156800">- update to version 2.10.1 (bsc#1132323, CVE-2019-10906, bsc#1125815, CVE-2019-8341):
  * "SandboxedEnvironment" securely handles "str.format_map" in order
    to prevent code execution through untrusted format strings.  The
    sandbox already handled "str.format".</changelog>
  <changelog author="atoptsoglou@suse.com" date="1612872000">- CVE-2020-28493: Fixed a ReDOS vulnerability where urlize could have
  been called with untrusted user data (bsc#1181944).
  Added CVE-2020-28493.patch</changelog>
  <changelog author="atoptsoglou@suse.com" date="1613649600">- Fixed IndentationError in CVE-2020-28493.patch (bsc#1182244)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1715083200">- Add CVE-2024-34064.patch upstream patch
  (CVE-2024-34064, bsc#1223980, gh#pallets/jinja@0668239dc6b4)
  Also fixes (CVE-2024-22195, bsc#1218722)</changelog>
</package>
<package pkgid="9a2ee31be2f2c39dadd865b9d96b927a66dbde53e615968985a34bc11e1e9170" name="python3-M2Crypto" arch="aarch64">
  <version epoch="0" ver="0.38.0" rel="150400.10.1"/>
  <changelog author="mcepl@suse.com" date="1559908800">- Add fix_OpenSSL111c.patch patch to ensure compatibility with
  OpenSSL 1.1.1c. gl#m2crypto/m2crypto#258 and jsc#SLE-9135.</changelog>
  <changelog author="mcepl@suse.com" date="1559995200">- Replace fix_OpenSSL111c.patch with proper new release 0.35.1
  (there is really not much more in it; bsc#1149792).</changelog>
  <changelog author="mcepl@suse.com" date="1560168000">- Update to fix release 0.35.2 ... just fixing the test suite
  (bsc#1172226).</changelog>
  <changelog author="marco.strigl@suse.com" date="1583755200">- in python3.8 the fp is wrapped in a Buffer. SSL.Connection.makefile
  returns a socketIO which is no buffer.
  Added: 001-fix-buffering-for-python38.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1586347200">- Do not pull in py2 pkg on doc subpkg</changelog>
  <changelog author="mcepl@suse.com" date="1594641600">Update to 0.36.0:
  - wrap SocketIO in io.Buffered* for makefile &lt;lethliel&gt;
  - SSL.Connection.close accepts an argument to force the socket closing
    &lt;Christophe Haen&gt;
  - SSL.Connection: make the clientPostConnectionCheck an instance
    attribute &lt;Christophe Haen&gt;
  - Fixed bug with usage of unexisting method getreply at SSL_Transport
    &lt;roman-nagaev&gt;
  - Add appveyor builds for python 3.7 and 3.8 &lt;Daniel A. Wozniak&gt;
  - Fixed syntax warning on line 44. &lt;randomfox&gt;
  - Update M2Crypto.six to 1.13.0 &lt;Matěj Cepl&gt;
  - base64.decodestring() was finally removed in Python 3.8. &lt;Matěj Cepl&gt;
  - wrap SocketIO in io.Buffered* for makefile &lt;lethliel&gt;
  - NULL is legal argument for key and iv paramters of EVP_CipherInit(3)
    &lt;Matěj Cepl&gt;
  - Expose X509_V_FLAG_ALLOW_PROXY_CERTS verification flag and
    X509_STORE_SET_FLAGS function &lt;Christophe Haen&gt;
  - Stop testing for 2.6 and 3.4 on Travis. Start testing 3.8 &lt;Matěj Cepl&gt;
  - Extend test cert validity to 2049 &lt;Bernhard M. Wiedemann&gt;
  - Revert using typing module in 2.6. It is just not worthy. &lt;Matěj Cepl&gt;
  - Update Debian/stable SSL as well &lt;Matěj Cepl&gt;
  - Make tests pass again. &lt;Matěj Cepl&gt;
  - Stop using string module, which has been deprecated. &lt;Matěj Cepl&gt;
  - Tiny fixes to make pyls more happy &lt;Matěj Cepl&gt;
  - CI: Rework Fedora CI configuration &lt;Neal Gompa&gt;
- Remove upstream merged patch 001-fix-buffering-for-python38.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1607428800">- Update to 0.37.1:
  - Remove support for CentOS 6 and Python 2.6 (remove
    tests.vendor module). Python 2.7 is still fully supported.
  - Remodel CI:
  - on GitHub switched from Travis-CI to GH Actions
  - on GitLab-CI: stop testing 2.7 on Fedora, add centos7
  - update appveyor.yml
  - Stop playing with swig in setup.py, we don't support swig 1.*
    anymore.
  - Fix dereferencing of pointers (gl#m2crypto/m2crypto#281)
  - Replace deprecated PyObject_AsReadBuffer with our own shim
    (thanks to Casey Deccio for saving my bacon there).
  - Use parametrized to create parametrized tests (new external
    dependency).
  - Only use DigestSign() and DigestUpdate() with OpenSSL &gt;= 1.1.1
  - Expose all the X509_V_FLAG
  - Add support for DigestSign* and DigestVerify*</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Dr. Strangelove or: How I Learned to Stop Worrying and Love pytest</changelog>
  <changelog author="pmonreal@suse.com" date="1613563200">- Add source signature file</changelog>
  <changelog author="pmonreal@suse.com" date="1613563201">- OpenSSL allows the verificaton to continue on
  UNABLE_TO_VERIFY_LEAF_SIGNATURE
  * This unifies the behaviour of a single certificate with an
    unknown CA certificate with a self-signed certificate.
- Add python-M2Crypto-Allow-on-UNABLE_TO_VERIFY_LEAF_SIGNATURE.patch
  (Thanks for Debian,
  https://salsa.debian.org/python-team/packages/m2crypto/-/commit/e0e9ad5cfff8)</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">- Add 293_sslv23_padding.patch to avoid using RSA_SSLV23_PADDING
  (gl#m2crypto/m2crypto#293, gh#openssl/openssl#14216).</changelog>
  <changelog author="mcepl@suse.com" date="1619092800">- Add no-need-parameterized.patch ... we don't need run-time requirement
  of parameterized package (bsc#1185150).</changelog>
  <changelog author="mcepl@suse.com" date="1623672000">- Update to 0.38.0:
  - Remove the last use of setup.py test idiom.
  - Use m2_PyObject_AsReadBuffer instead of PyObject_AsReadBuffer.
  - Add support for arm64 big endian &lt;Steev Klimaszewski&gt;
  - Make support of RSA_SSLV23_PADDING optional (it has been deprecated).
  - Move project to src/ layout
  - Allow verify_cb_* to be called with ok=True  &lt;Casey Deccio&gt;
  - Be prepared if any of constants in x509_vfy.h is not available.
  - But we do support 3.8
  - We DO NOT support Python 2.6.
- All patches were upstreamed:
  - 293_sslv23_padding.patch
  - no-need-parameterized.patch
  - python-M2Crypto-Allow-on-UNABLE_TO_VERIFY_LEAF_SIGNATURE.patch</changelog>
  <changelog author="mcepl@suse.com" date="1649332800">- Add missing bug references to this changelog.</changelog>
  <changelog author="mcepl@suse.com" date="1657627200">- Add CVE-2020-25657-Bleichenbacher-attack.patch (CVE-2020-25657,
  bsc#1178829), which mitigates the Bleichenbacher timing attacks
  in the RSA decryption API.
- Add python-M2Crypto.keyring to verify GPG signature of tarball.</changelog>
  <changelog author="dmueller@suse.com" date="1659528000">- update CVE-2020-25657-Bleichenbacher-attack.patch to actually
  contain the fix rather than just being empty (CVE-2020-25657,
  bsc#1178829)</changelog>
  <changelog author="dmueller@suse.com" date="1667822400">- add openssl-stop-parsing-header.patch (bsc#1205042)
- add m2crypto-0.38-ossl3-tests.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678968000">- Adapt tests for OpenSSL v3.1.0
  * Add openssl-adapt-tests-for-3.1.0.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- add timeout_300hz.patch to accept a small deviation from time
  in the testsuite (bsc#1212757)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1706097600">- Disable broken tests with openssl 3.2, bsc#1217782</changelog>
</package>
<package pkgid="83de0b3d553a4d6b232f7f593d1826bf50cfd0a8eec3bcd31669744c74e55b4c" name="python3-M2Crypto" arch="s390x">
  <version epoch="0" ver="0.38.0" rel="150400.10.1"/>
  <changelog author="mcepl@suse.com" date="1559908800">- Add fix_OpenSSL111c.patch patch to ensure compatibility with
  OpenSSL 1.1.1c. gl#m2crypto/m2crypto#258 and jsc#SLE-9135.</changelog>
  <changelog author="mcepl@suse.com" date="1559995200">- Replace fix_OpenSSL111c.patch with proper new release 0.35.1
  (there is really not much more in it; bsc#1149792).</changelog>
  <changelog author="mcepl@suse.com" date="1560168000">- Update to fix release 0.35.2 ... just fixing the test suite
  (bsc#1172226).</changelog>
  <changelog author="marco.strigl@suse.com" date="1583755200">- in python3.8 the fp is wrapped in a Buffer. SSL.Connection.makefile
  returns a socketIO which is no buffer.
  Added: 001-fix-buffering-for-python38.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1586347200">- Do not pull in py2 pkg on doc subpkg</changelog>
  <changelog author="mcepl@suse.com" date="1594641600">Update to 0.36.0:
  - wrap SocketIO in io.Buffered* for makefile &lt;lethliel&gt;
  - SSL.Connection.close accepts an argument to force the socket closing
    &lt;Christophe Haen&gt;
  - SSL.Connection: make the clientPostConnectionCheck an instance
    attribute &lt;Christophe Haen&gt;
  - Fixed bug with usage of unexisting method getreply at SSL_Transport
    &lt;roman-nagaev&gt;
  - Add appveyor builds for python 3.7 and 3.8 &lt;Daniel A. Wozniak&gt;
  - Fixed syntax warning on line 44. &lt;randomfox&gt;
  - Update M2Crypto.six to 1.13.0 &lt;Matěj Cepl&gt;
  - base64.decodestring() was finally removed in Python 3.8. &lt;Matěj Cepl&gt;
  - wrap SocketIO in io.Buffered* for makefile &lt;lethliel&gt;
  - NULL is legal argument for key and iv paramters of EVP_CipherInit(3)
    &lt;Matěj Cepl&gt;
  - Expose X509_V_FLAG_ALLOW_PROXY_CERTS verification flag and
    X509_STORE_SET_FLAGS function &lt;Christophe Haen&gt;
  - Stop testing for 2.6 and 3.4 on Travis. Start testing 3.8 &lt;Matěj Cepl&gt;
  - Extend test cert validity to 2049 &lt;Bernhard M. Wiedemann&gt;
  - Revert using typing module in 2.6. It is just not worthy. &lt;Matěj Cepl&gt;
  - Update Debian/stable SSL as well &lt;Matěj Cepl&gt;
  - Make tests pass again. &lt;Matěj Cepl&gt;
  - Stop using string module, which has been deprecated. &lt;Matěj Cepl&gt;
  - Tiny fixes to make pyls more happy &lt;Matěj Cepl&gt;
  - CI: Rework Fedora CI configuration &lt;Neal Gompa&gt;
- Remove upstream merged patch 001-fix-buffering-for-python38.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1607428800">- Update to 0.37.1:
  - Remove support for CentOS 6 and Python 2.6 (remove
    tests.vendor module). Python 2.7 is still fully supported.
  - Remodel CI:
  - on GitHub switched from Travis-CI to GH Actions
  - on GitLab-CI: stop testing 2.7 on Fedora, add centos7
  - update appveyor.yml
  - Stop playing with swig in setup.py, we don't support swig 1.*
    anymore.
  - Fix dereferencing of pointers (gl#m2crypto/m2crypto#281)
  - Replace deprecated PyObject_AsReadBuffer with our own shim
    (thanks to Casey Deccio for saving my bacon there).
  - Use parametrized to create parametrized tests (new external
    dependency).
  - Only use DigestSign() and DigestUpdate() with OpenSSL &gt;= 1.1.1
  - Expose all the X509_V_FLAG
  - Add support for DigestSign* and DigestVerify*</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Dr. Strangelove or: How I Learned to Stop Worrying and Love pytest</changelog>
  <changelog author="pmonreal@suse.com" date="1613563200">- Add source signature file</changelog>
  <changelog author="pmonreal@suse.com" date="1613563201">- OpenSSL allows the verificaton to continue on
  UNABLE_TO_VERIFY_LEAF_SIGNATURE
  * This unifies the behaviour of a single certificate with an
    unknown CA certificate with a self-signed certificate.
- Add python-M2Crypto-Allow-on-UNABLE_TO_VERIFY_LEAF_SIGNATURE.patch
  (Thanks for Debian,
  https://salsa.debian.org/python-team/packages/m2crypto/-/commit/e0e9ad5cfff8)</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">- Add 293_sslv23_padding.patch to avoid using RSA_SSLV23_PADDING
  (gl#m2crypto/m2crypto#293, gh#openssl/openssl#14216).</changelog>
  <changelog author="mcepl@suse.com" date="1619092800">- Add no-need-parameterized.patch ... we don't need run-time requirement
  of parameterized package (bsc#1185150).</changelog>
  <changelog author="mcepl@suse.com" date="1623672000">- Update to 0.38.0:
  - Remove the last use of setup.py test idiom.
  - Use m2_PyObject_AsReadBuffer instead of PyObject_AsReadBuffer.
  - Add support for arm64 big endian &lt;Steev Klimaszewski&gt;
  - Make support of RSA_SSLV23_PADDING optional (it has been deprecated).
  - Move project to src/ layout
  - Allow verify_cb_* to be called with ok=True  &lt;Casey Deccio&gt;
  - Be prepared if any of constants in x509_vfy.h is not available.
  - But we do support 3.8
  - We DO NOT support Python 2.6.
- All patches were upstreamed:
  - 293_sslv23_padding.patch
  - no-need-parameterized.patch
  - python-M2Crypto-Allow-on-UNABLE_TO_VERIFY_LEAF_SIGNATURE.patch</changelog>
  <changelog author="mcepl@suse.com" date="1649332800">- Add missing bug references to this changelog.</changelog>
  <changelog author="mcepl@suse.com" date="1657627200">- Add CVE-2020-25657-Bleichenbacher-attack.patch (CVE-2020-25657,
  bsc#1178829), which mitigates the Bleichenbacher timing attacks
  in the RSA decryption API.
- Add python-M2Crypto.keyring to verify GPG signature of tarball.</changelog>
  <changelog author="dmueller@suse.com" date="1659528000">- update CVE-2020-25657-Bleichenbacher-attack.patch to actually
  contain the fix rather than just being empty (CVE-2020-25657,
  bsc#1178829)</changelog>
  <changelog author="dmueller@suse.com" date="1667822400">- add openssl-stop-parsing-header.patch (bsc#1205042)
- add m2crypto-0.38-ossl3-tests.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678968000">- Adapt tests for OpenSSL v3.1.0
  * Add openssl-adapt-tests-for-3.1.0.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- add timeout_300hz.patch to accept a small deviation from time
  in the testsuite (bsc#1212757)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1706097600">- Disable broken tests with openssl 3.2, bsc#1217782</changelog>
</package>
<package pkgid="52fb4d0f1e48e509332e8ab2ec7dbc5465127320fc3cc8832baf2dcc9f386c46" name="python3-M2Crypto" arch="src">
  <version epoch="0" ver="0.38.0" rel="150400.10.1"/>
  <changelog author="mcepl@suse.com" date="1559908800">- Add fix_OpenSSL111c.patch patch to ensure compatibility with
  OpenSSL 1.1.1c. gl#m2crypto/m2crypto#258 and jsc#SLE-9135.</changelog>
  <changelog author="mcepl@suse.com" date="1559995200">- Replace fix_OpenSSL111c.patch with proper new release 0.35.1
  (there is really not much more in it; bsc#1149792).</changelog>
  <changelog author="mcepl@suse.com" date="1560168000">- Update to fix release 0.35.2 ... just fixing the test suite
  (bsc#1172226).</changelog>
  <changelog author="marco.strigl@suse.com" date="1583755200">- in python3.8 the fp is wrapped in a Buffer. SSL.Connection.makefile
  returns a socketIO which is no buffer.
  Added: 001-fix-buffering-for-python38.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1586347200">- Do not pull in py2 pkg on doc subpkg</changelog>
  <changelog author="mcepl@suse.com" date="1594641600">Update to 0.36.0:
  - wrap SocketIO in io.Buffered* for makefile &lt;lethliel&gt;
  - SSL.Connection.close accepts an argument to force the socket closing
    &lt;Christophe Haen&gt;
  - SSL.Connection: make the clientPostConnectionCheck an instance
    attribute &lt;Christophe Haen&gt;
  - Fixed bug with usage of unexisting method getreply at SSL_Transport
    &lt;roman-nagaev&gt;
  - Add appveyor builds for python 3.7 and 3.8 &lt;Daniel A. Wozniak&gt;
  - Fixed syntax warning on line 44. &lt;randomfox&gt;
  - Update M2Crypto.six to 1.13.0 &lt;Matěj Cepl&gt;
  - base64.decodestring() was finally removed in Python 3.8. &lt;Matěj Cepl&gt;
  - wrap SocketIO in io.Buffered* for makefile &lt;lethliel&gt;
  - NULL is legal argument for key and iv paramters of EVP_CipherInit(3)
    &lt;Matěj Cepl&gt;
  - Expose X509_V_FLAG_ALLOW_PROXY_CERTS verification flag and
    X509_STORE_SET_FLAGS function &lt;Christophe Haen&gt;
  - Stop testing for 2.6 and 3.4 on Travis. Start testing 3.8 &lt;Matěj Cepl&gt;
  - Extend test cert validity to 2049 &lt;Bernhard M. Wiedemann&gt;
  - Revert using typing module in 2.6. It is just not worthy. &lt;Matěj Cepl&gt;
  - Update Debian/stable SSL as well &lt;Matěj Cepl&gt;
  - Make tests pass again. &lt;Matěj Cepl&gt;
  - Stop using string module, which has been deprecated. &lt;Matěj Cepl&gt;
  - Tiny fixes to make pyls more happy &lt;Matěj Cepl&gt;
  - CI: Rework Fedora CI configuration &lt;Neal Gompa&gt;
- Remove upstream merged patch 001-fix-buffering-for-python38.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1607428800">- Update to 0.37.1:
  - Remove support for CentOS 6 and Python 2.6 (remove
    tests.vendor module). Python 2.7 is still fully supported.
  - Remodel CI:
  - on GitHub switched from Travis-CI to GH Actions
  - on GitLab-CI: stop testing 2.7 on Fedora, add centos7
  - update appveyor.yml
  - Stop playing with swig in setup.py, we don't support swig 1.*
    anymore.
  - Fix dereferencing of pointers (gl#m2crypto/m2crypto#281)
  - Replace deprecated PyObject_AsReadBuffer with our own shim
    (thanks to Casey Deccio for saving my bacon there).
  - Use parametrized to create parametrized tests (new external
    dependency).
  - Only use DigestSign() and DigestUpdate() with OpenSSL &gt;= 1.1.1
  - Expose all the X509_V_FLAG
  - Add support for DigestSign* and DigestVerify*</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Dr. Strangelove or: How I Learned to Stop Worrying and Love pytest</changelog>
  <changelog author="pmonreal@suse.com" date="1613563200">- Add source signature file</changelog>
  <changelog author="pmonreal@suse.com" date="1613563201">- OpenSSL allows the verificaton to continue on
  UNABLE_TO_VERIFY_LEAF_SIGNATURE
  * This unifies the behaviour of a single certificate with an
    unknown CA certificate with a self-signed certificate.
- Add python-M2Crypto-Allow-on-UNABLE_TO_VERIFY_LEAF_SIGNATURE.patch
  (Thanks for Debian,
  https://salsa.debian.org/python-team/packages/m2crypto/-/commit/e0e9ad5cfff8)</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">- Add 293_sslv23_padding.patch to avoid using RSA_SSLV23_PADDING
  (gl#m2crypto/m2crypto#293, gh#openssl/openssl#14216).</changelog>
  <changelog author="mcepl@suse.com" date="1619092800">- Add no-need-parameterized.patch ... we don't need run-time requirement
  of parameterized package (bsc#1185150).</changelog>
  <changelog author="mcepl@suse.com" date="1623672000">- Update to 0.38.0:
  - Remove the last use of setup.py test idiom.
  - Use m2_PyObject_AsReadBuffer instead of PyObject_AsReadBuffer.
  - Add support for arm64 big endian &lt;Steev Klimaszewski&gt;
  - Make support of RSA_SSLV23_PADDING optional (it has been deprecated).
  - Move project to src/ layout
  - Allow verify_cb_* to be called with ok=True  &lt;Casey Deccio&gt;
  - Be prepared if any of constants in x509_vfy.h is not available.
  - But we do support 3.8
  - We DO NOT support Python 2.6.
- All patches were upstreamed:
  - 293_sslv23_padding.patch
  - no-need-parameterized.patch
  - python-M2Crypto-Allow-on-UNABLE_TO_VERIFY_LEAF_SIGNATURE.patch</changelog>
  <changelog author="mcepl@suse.com" date="1649332800">- Add missing bug references to this changelog.</changelog>
  <changelog author="mcepl@suse.com" date="1657627200">- Add CVE-2020-25657-Bleichenbacher-attack.patch (CVE-2020-25657,
  bsc#1178829), which mitigates the Bleichenbacher timing attacks
  in the RSA decryption API.
- Add python-M2Crypto.keyring to verify GPG signature of tarball.</changelog>
  <changelog author="dmueller@suse.com" date="1659528000">- update CVE-2020-25657-Bleichenbacher-attack.patch to actually
  contain the fix rather than just being empty (CVE-2020-25657,
  bsc#1178829)</changelog>
  <changelog author="dmueller@suse.com" date="1667822400">- add openssl-stop-parsing-header.patch (bsc#1205042)
- add m2crypto-0.38-ossl3-tests.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678968000">- Adapt tests for OpenSSL v3.1.0
  * Add openssl-adapt-tests-for-3.1.0.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- add timeout_300hz.patch to accept a small deviation from time
  in the testsuite (bsc#1212757)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1706097600">- Disable broken tests with openssl 3.2, bsc#1217782</changelog>
</package>
<package pkgid="b3ffd4d562ccca88efed68aca4db609263684060b8233c18c532a476efec1545" name="python3-M2Crypto" arch="x86_64">
  <version epoch="0" ver="0.38.0" rel="150400.10.1"/>
  <changelog author="mcepl@suse.com" date="1559908800">- Add fix_OpenSSL111c.patch patch to ensure compatibility with
  OpenSSL 1.1.1c. gl#m2crypto/m2crypto#258 and jsc#SLE-9135.</changelog>
  <changelog author="mcepl@suse.com" date="1559995200">- Replace fix_OpenSSL111c.patch with proper new release 0.35.1
  (there is really not much more in it; bsc#1149792).</changelog>
  <changelog author="mcepl@suse.com" date="1560168000">- Update to fix release 0.35.2 ... just fixing the test suite
  (bsc#1172226).</changelog>
  <changelog author="marco.strigl@suse.com" date="1583755200">- in python3.8 the fp is wrapped in a Buffer. SSL.Connection.makefile
  returns a socketIO which is no buffer.
  Added: 001-fix-buffering-for-python38.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1586347200">- Do not pull in py2 pkg on doc subpkg</changelog>
  <changelog author="mcepl@suse.com" date="1594641600">Update to 0.36.0:
  - wrap SocketIO in io.Buffered* for makefile &lt;lethliel&gt;
  - SSL.Connection.close accepts an argument to force the socket closing
    &lt;Christophe Haen&gt;
  - SSL.Connection: make the clientPostConnectionCheck an instance
    attribute &lt;Christophe Haen&gt;
  - Fixed bug with usage of unexisting method getreply at SSL_Transport
    &lt;roman-nagaev&gt;
  - Add appveyor builds for python 3.7 and 3.8 &lt;Daniel A. Wozniak&gt;
  - Fixed syntax warning on line 44. &lt;randomfox&gt;
  - Update M2Crypto.six to 1.13.0 &lt;Matěj Cepl&gt;
  - base64.decodestring() was finally removed in Python 3.8. &lt;Matěj Cepl&gt;
  - wrap SocketIO in io.Buffered* for makefile &lt;lethliel&gt;
  - NULL is legal argument for key and iv paramters of EVP_CipherInit(3)
    &lt;Matěj Cepl&gt;
  - Expose X509_V_FLAG_ALLOW_PROXY_CERTS verification flag and
    X509_STORE_SET_FLAGS function &lt;Christophe Haen&gt;
  - Stop testing for 2.6 and 3.4 on Travis. Start testing 3.8 &lt;Matěj Cepl&gt;
  - Extend test cert validity to 2049 &lt;Bernhard M. Wiedemann&gt;
  - Revert using typing module in 2.6. It is just not worthy. &lt;Matěj Cepl&gt;
  - Update Debian/stable SSL as well &lt;Matěj Cepl&gt;
  - Make tests pass again. &lt;Matěj Cepl&gt;
  - Stop using string module, which has been deprecated. &lt;Matěj Cepl&gt;
  - Tiny fixes to make pyls more happy &lt;Matěj Cepl&gt;
  - CI: Rework Fedora CI configuration &lt;Neal Gompa&gt;
- Remove upstream merged patch 001-fix-buffering-for-python38.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1607428800">- Update to 0.37.1:
  - Remove support for CentOS 6 and Python 2.6 (remove
    tests.vendor module). Python 2.7 is still fully supported.
  - Remodel CI:
  - on GitHub switched from Travis-CI to GH Actions
  - on GitLab-CI: stop testing 2.7 on Fedora, add centos7
  - update appveyor.yml
  - Stop playing with swig in setup.py, we don't support swig 1.*
    anymore.
  - Fix dereferencing of pointers (gl#m2crypto/m2crypto#281)
  - Replace deprecated PyObject_AsReadBuffer with our own shim
    (thanks to Casey Deccio for saving my bacon there).
  - Use parametrized to create parametrized tests (new external
    dependency).
  - Only use DigestSign() and DigestUpdate() with OpenSSL &gt;= 1.1.1
  - Expose all the X509_V_FLAG
  - Add support for DigestSign* and DigestVerify*</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Dr. Strangelove or: How I Learned to Stop Worrying and Love pytest</changelog>
  <changelog author="pmonreal@suse.com" date="1613563200">- Add source signature file</changelog>
  <changelog author="pmonreal@suse.com" date="1613563201">- OpenSSL allows the verificaton to continue on
  UNABLE_TO_VERIFY_LEAF_SIGNATURE
  * This unifies the behaviour of a single certificate with an
    unknown CA certificate with a self-signed certificate.
- Add python-M2Crypto-Allow-on-UNABLE_TO_VERIFY_LEAF_SIGNATURE.patch
  (Thanks for Debian,
  https://salsa.debian.org/python-team/packages/m2crypto/-/commit/e0e9ad5cfff8)</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">- Add 293_sslv23_padding.patch to avoid using RSA_SSLV23_PADDING
  (gl#m2crypto/m2crypto#293, gh#openssl/openssl#14216).</changelog>
  <changelog author="mcepl@suse.com" date="1619092800">- Add no-need-parameterized.patch ... we don't need run-time requirement
  of parameterized package (bsc#1185150).</changelog>
  <changelog author="mcepl@suse.com" date="1623672000">- Update to 0.38.0:
  - Remove the last use of setup.py test idiom.
  - Use m2_PyObject_AsReadBuffer instead of PyObject_AsReadBuffer.
  - Add support for arm64 big endian &lt;Steev Klimaszewski&gt;
  - Make support of RSA_SSLV23_PADDING optional (it has been deprecated).
  - Move project to src/ layout
  - Allow verify_cb_* to be called with ok=True  &lt;Casey Deccio&gt;
  - Be prepared if any of constants in x509_vfy.h is not available.
  - But we do support 3.8
  - We DO NOT support Python 2.6.
- All patches were upstreamed:
  - 293_sslv23_padding.patch
  - no-need-parameterized.patch
  - python-M2Crypto-Allow-on-UNABLE_TO_VERIFY_LEAF_SIGNATURE.patch</changelog>
  <changelog author="mcepl@suse.com" date="1649332800">- Add missing bug references to this changelog.</changelog>
  <changelog author="mcepl@suse.com" date="1657627200">- Add CVE-2020-25657-Bleichenbacher-attack.patch (CVE-2020-25657,
  bsc#1178829), which mitigates the Bleichenbacher timing attacks
  in the RSA decryption API.
- Add python-M2Crypto.keyring to verify GPG signature of tarball.</changelog>
  <changelog author="dmueller@suse.com" date="1659528000">- update CVE-2020-25657-Bleichenbacher-attack.patch to actually
  contain the fix rather than just being empty (CVE-2020-25657,
  bsc#1178829)</changelog>
  <changelog author="dmueller@suse.com" date="1667822400">- add openssl-stop-parsing-header.patch (bsc#1205042)
- add m2crypto-0.38-ossl3-tests.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678968000">- Adapt tests for OpenSSL v3.1.0
  * Add openssl-adapt-tests-for-3.1.0.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- add timeout_300hz.patch to accept a small deviation from time
  in the testsuite (bsc#1212757)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1706097600">- Disable broken tests with openssl 3.2, bsc#1217782</changelog>
</package>
<package pkgid="cb4b93b160b036a3b2b70d7a5e878a7292c183b12f1489026d4f1e397de045ea" name="python3-PyYAML" arch="aarch64">
  <version epoch="0" ver="5.4.1" rel="150300.3.3.1"/>
  <changelog author="mardnh@gmx.de" date="1472904000">- Update to 3.12
  - Adding an implicit resolver to a derived loader should not
    affect the base loader (fixes issue #57).
  - Uniform representation for OrderedDict? across different
    versions of Python (fixes issue #61).
  - Fixed comparison to None warning (closes issue #64).
- fix Source URL</changelog>
  <changelog author="jmatejek@suse.com" date="1487592000">- update for multipython build</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1488542400">- Use pythonhosted.org for the reference link.
- Provide python-yaml instead of python2-yaml again.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1531656000">- update to 3.13
  * fix compactibility with python 3.7</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tchvatal@suse.com" date="1552564800">- Update to 5.1:
  * many changes, see CHANGES
  * bsc#1099308 CVE-2017-18342 PyYAML: yaml.load() API could execute arbitrary code</changelog>
  <changelog author="mimi.vx@gmail.com" date="1559908800">- update to 5.1.1
  * Re-release of 5.1 with regenerated Cython sources to build properly for Python 3.8</changelog>
  <changelog author="mcalabkova@suse.com" date="1564660800">- update to 5.1.2
  * Re-release of 5.1 with regenerated Cython sources to build properly for Python 3.8b2+</changelog>
  <changelog author="mimi.vx@gmail.com" date="1575374400">- update to 5.2
  * A more flexible fix for custom tag constructors
  * Change default loader for yaml.add_constructor
  * Change default loader for add_implicit_resolver, add_path_resolver
  * Move constructor for object/apply to UnsafeConstructor
  * Fix logic for quoting special characters</changelog>
  <changelog author="mimi.vx@gmail.com" date="1578398400">- update to 5.3
  * Use `is` instead of equality for comparing with `None`
  * fix typos and stylistic nit
  * Fix up small typo
  * Fix handling of __slots__
  * Allow calling add_multi_constructor with None
  * Add use of safe_load() function in README
  * Fix reader for Unicode code points over 0xFFFF
  * Enable certain unicode tests when maxunicode not &gt; 0xffff
  * Use full_load in yaml-highlight example
  * Document that PyYAML is implemented with Cython
  * Fix for Python 3.10
  * increase size of index, line, and column fields
  * remove some unused imports
  * Create timezone-aware datetimes when parsed as such
  * Add tests for timezone</changelog>
  <changelog author="mimi.vx@gmail.com" date="1584619200">- update to 5.3.1
  * fixes boo#1165439 (cve-2020-1747) Prevents arbitrary code execution
  during python/object/new constructor</changelog>
  <changelog author="dmueller@suse.com" date="1611489600">- update to 5.4.1 (bsc#1174514, CVE-2020-14343):
  * Fix stub compat with older pyyaml versions that may unwittingly load it
  * Build modernization, remove distutils, fix metadata, build wheels, CI to GHA
  * Fix for CVE-2020-14343, moves arbitrary python tags to UnsafeLoader
  * Fix memory leak in implicit resolver setup
  * Fix py2 copy support for timezone objects
  * Fix compatibility with Jython</changelog>
  <changelog author="dmueller@suse.com" date="1718107200">- reenable the cython yaml loader (bsc#1225641)</changelog>
</package>
<package pkgid="e3d275a91706d4e74c5b9038d682c01ec898530455c48c856e89719a60af9268" name="python3-PyYAML" arch="s390x">
  <version epoch="0" ver="5.4.1" rel="150300.3.3.1"/>
  <changelog author="mardnh@gmx.de" date="1472904000">- Update to 3.12
  - Adding an implicit resolver to a derived loader should not
    affect the base loader (fixes issue #57).
  - Uniform representation for OrderedDict? across different
    versions of Python (fixes issue #61).
  - Fixed comparison to None warning (closes issue #64).
- fix Source URL</changelog>
  <changelog author="jmatejek@suse.com" date="1487592000">- update for multipython build</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1488542400">- Use pythonhosted.org for the reference link.
- Provide python-yaml instead of python2-yaml again.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1531656000">- update to 3.13
  * fix compactibility with python 3.7</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tchvatal@suse.com" date="1552564800">- Update to 5.1:
  * many changes, see CHANGES
  * bsc#1099308 CVE-2017-18342 PyYAML: yaml.load() API could execute arbitrary code</changelog>
  <changelog author="mimi.vx@gmail.com" date="1559908800">- update to 5.1.1
  * Re-release of 5.1 with regenerated Cython sources to build properly for Python 3.8</changelog>
  <changelog author="mcalabkova@suse.com" date="1564660800">- update to 5.1.2
  * Re-release of 5.1 with regenerated Cython sources to build properly for Python 3.8b2+</changelog>
  <changelog author="mimi.vx@gmail.com" date="1575374400">- update to 5.2
  * A more flexible fix for custom tag constructors
  * Change default loader for yaml.add_constructor
  * Change default loader for add_implicit_resolver, add_path_resolver
  * Move constructor for object/apply to UnsafeConstructor
  * Fix logic for quoting special characters</changelog>
  <changelog author="mimi.vx@gmail.com" date="1578398400">- update to 5.3
  * Use `is` instead of equality for comparing with `None`
  * fix typos and stylistic nit
  * Fix up small typo
  * Fix handling of __slots__
  * Allow calling add_multi_constructor with None
  * Add use of safe_load() function in README
  * Fix reader for Unicode code points over 0xFFFF
  * Enable certain unicode tests when maxunicode not &gt; 0xffff
  * Use full_load in yaml-highlight example
  * Document that PyYAML is implemented with Cython
  * Fix for Python 3.10
  * increase size of index, line, and column fields
  * remove some unused imports
  * Create timezone-aware datetimes when parsed as such
  * Add tests for timezone</changelog>
  <changelog author="mimi.vx@gmail.com" date="1584619200">- update to 5.3.1
  * fixes boo#1165439 (cve-2020-1747) Prevents arbitrary code execution
  during python/object/new constructor</changelog>
  <changelog author="dmueller@suse.com" date="1611489600">- update to 5.4.1 (bsc#1174514, CVE-2020-14343):
  * Fix stub compat with older pyyaml versions that may unwittingly load it
  * Build modernization, remove distutils, fix metadata, build wheels, CI to GHA
  * Fix for CVE-2020-14343, moves arbitrary python tags to UnsafeLoader
  * Fix memory leak in implicit resolver setup
  * Fix py2 copy support for timezone objects
  * Fix compatibility with Jython</changelog>
  <changelog author="dmueller@suse.com" date="1718107200">- reenable the cython yaml loader (bsc#1225641)</changelog>
</package>
<package pkgid="aba369baa9b75792e85c2a97d3fcb539b392f44054039eeca8dd8a67e03374e5" name="python3-PyYAML" arch="x86_64">
  <version epoch="0" ver="5.4.1" rel="150300.3.3.1"/>
  <changelog author="mardnh@gmx.de" date="1472904000">- Update to 3.12
  - Adding an implicit resolver to a derived loader should not
    affect the base loader (fixes issue #57).
  - Uniform representation for OrderedDict? across different
    versions of Python (fixes issue #61).
  - Fixed comparison to None warning (closes issue #64).
- fix Source URL</changelog>
  <changelog author="jmatejek@suse.com" date="1487592000">- update for multipython build</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1488542400">- Use pythonhosted.org for the reference link.
- Provide python-yaml instead of python2-yaml again.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1531656000">- update to 3.13
  * fix compactibility with python 3.7</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tchvatal@suse.com" date="1552564800">- Update to 5.1:
  * many changes, see CHANGES
  * bsc#1099308 CVE-2017-18342 PyYAML: yaml.load() API could execute arbitrary code</changelog>
  <changelog author="mimi.vx@gmail.com" date="1559908800">- update to 5.1.1
  * Re-release of 5.1 with regenerated Cython sources to build properly for Python 3.8</changelog>
  <changelog author="mcalabkova@suse.com" date="1564660800">- update to 5.1.2
  * Re-release of 5.1 with regenerated Cython sources to build properly for Python 3.8b2+</changelog>
  <changelog author="mimi.vx@gmail.com" date="1575374400">- update to 5.2
  * A more flexible fix for custom tag constructors
  * Change default loader for yaml.add_constructor
  * Change default loader for add_implicit_resolver, add_path_resolver
  * Move constructor for object/apply to UnsafeConstructor
  * Fix logic for quoting special characters</changelog>
  <changelog author="mimi.vx@gmail.com" date="1578398400">- update to 5.3
  * Use `is` instead of equality for comparing with `None`
  * fix typos and stylistic nit
  * Fix up small typo
  * Fix handling of __slots__
  * Allow calling add_multi_constructor with None
  * Add use of safe_load() function in README
  * Fix reader for Unicode code points over 0xFFFF
  * Enable certain unicode tests when maxunicode not &gt; 0xffff
  * Use full_load in yaml-highlight example
  * Document that PyYAML is implemented with Cython
  * Fix for Python 3.10
  * increase size of index, line, and column fields
  * remove some unused imports
  * Create timezone-aware datetimes when parsed as such
  * Add tests for timezone</changelog>
  <changelog author="mimi.vx@gmail.com" date="1584619200">- update to 5.3.1
  * fixes boo#1165439 (cve-2020-1747) Prevents arbitrary code execution
  during python/object/new constructor</changelog>
  <changelog author="dmueller@suse.com" date="1611489600">- update to 5.4.1 (bsc#1174514, CVE-2020-14343):
  * Fix stub compat with older pyyaml versions that may unwittingly load it
  * Build modernization, remove distutils, fix metadata, build wheels, CI to GHA
  * Fix for CVE-2020-14343, moves arbitrary python tags to UnsafeLoader
  * Fix memory leak in implicit resolver setup
  * Fix py2 copy support for timezone objects
  * Fix compatibility with Jython</changelog>
  <changelog author="dmueller@suse.com" date="1718107200">- reenable the cython yaml loader (bsc#1225641)</changelog>
</package>
<package pkgid="3682edc67ed33d2c6362fe19ad7e1a341b64323878f29c73c69b4283d4f5c772" name="python3-audit" arch="aarch64">
  <version epoch="0" ver="3.0.6" rel="150400.4.16.1"/>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100800">- Fix rules not loaded when restarting auditd.service(bsc#1204844)</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100801">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
  <changelog author="ematsumiya@suse.de" date="1706788800">- Fix plugin termination when using systemd service units (bsc#1215377)
  * add auditd.service-fix-plugin-termination.patch</changelog>
</package>
<package pkgid="e1c9f0742b0db3efd81ef569c9d7abc1380534ebd1966c5147ba4993dff08797" name="python3-audit" arch="s390x">
  <version epoch="0" ver="3.0.6" rel="150400.4.16.1"/>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100800">- Fix rules not loaded when restarting auditd.service(bsc#1204844)</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100801">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
  <changelog author="ematsumiya@suse.de" date="1706788800">- Fix plugin termination when using systemd service units (bsc#1215377)
  * add auditd.service-fix-plugin-termination.patch</changelog>
</package>
<package pkgid="7719b4409cf32b069148e1a632d9080ab4385574564c33ae69dce749f5dcb169" name="python3-audit" arch="x86_64">
  <version epoch="0" ver="3.0.6" rel="150400.4.16.1"/>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100800">- Fix rules not loaded when restarting auditd.service(bsc#1204844)</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100801">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
  <changelog author="ematsumiya@suse.de" date="1706788800">- Fix plugin termination when using systemd service units (bsc#1215377)
  * add auditd.service-fix-plugin-termination.patch</changelog>
</package>
<package pkgid="37465856a6b844fe2d6d6a1e0fbcc78f51ca38b93ebcbf36b37b97c59682b6c4" name="python3-azuremetadata" arch="noarch">
  <version epoch="0" ver="5.1.6" rel="150000.1.26.1"/>
  <changelog author="ikapelyukhin@suse.com" date="1585656000">- Version 5.0.0
- Support new Azure metadata API (bsc#1164818, bsc#1164819)
- Automatically detect root device (bsc#1158698, bsc#1158707)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1587470400">- Version 5.0.1
- Use lsblk for root device detection (bsc#1169921)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1587988800">- Version 5.1.0
- Produce well-formed JSON and XML output when multiple filters
  are specified (bsc#1170598, bsc#1170599)</changelog>
  <changelog author="rjschwei@suse.com" date="1596456000">- Update to version 5.1.2 (bsc#1173357, bsc#1174847)
  + Detect when the VM is running in ASM (Azure Classic) and handle the
    condition to generate the data we are interested in without requiring
    access to the full IMDS available only in ARM instances.
- From version 5.1.1 (bsc#1173238, bsc#1173240)
  + Add --listapis and --api latest support</changelog>
  <changelog author="rjschwei@suse.com" date="1598011200">- Fix provides directive (bsc#1175609, bsc#1175610)
  + The provides directive must set a version or update does not work
    as expected</changelog>
  <changelog author="rjschwei@suse.com" date="1598011201">- Fix provides directive (bsc#1175609, bsc#1175610)
  + The provides directive must set a version or update does not work
    as expected</changelog>
  <changelog author="jesusbv@suse.com" date="1619006400">- Version 5.1.4 (bsc#1184720, bsc#1172581)
  + Use versions endpoint to list the available versions
  + Add bypass proxy
  + Update way to check classic vms</changelog>
  <changelog author="rjschwei@suse.com" date="1642075200">- Version 5.1.5 (bsc#1194663)
  + Handle lsblk output format change. The json data now contains
    "mountpoints" instead of "mountpoint"</changelog>
  <changelog author="jesus.bv@suse.com" date="1705060800">- Version 5.1.6
  Fix empty list attributes (bsc#1218760)</changelog>
</package>
<package pkgid="30c7b88768824e3ed25070e1931bbc4c239d2f02a8af6a6dda4c4d27eb040d0d" name="python3-azuremetadata" arch="src">
  <version epoch="0" ver="5.1.6" rel="150000.1.26.1"/>
  <changelog author="ikapelyukhin@suse.com" date="1585656000">- Version 5.0.0
- Support new Azure metadata API (bsc#1164818, bsc#1164819)
- Automatically detect root device (bsc#1158698, bsc#1158707)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1587470400">- Version 5.0.1
- Use lsblk for root device detection (bsc#1169921)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1587988800">- Version 5.1.0
- Produce well-formed JSON and XML output when multiple filters
  are specified (bsc#1170598, bsc#1170599)</changelog>
  <changelog author="rjschwei@suse.com" date="1596456000">- Update to version 5.1.2 (bsc#1173357, bsc#1174847)
  + Detect when the VM is running in ASM (Azure Classic) and handle the
    condition to generate the data we are interested in without requiring
    access to the full IMDS available only in ARM instances.
- From version 5.1.1 (bsc#1173238, bsc#1173240)
  + Add --listapis and --api latest support</changelog>
  <changelog author="rjschwei@suse.com" date="1598011200">- Fix provides directive (bsc#1175609, bsc#1175610)
  + The provides directive must set a version or update does not work
    as expected</changelog>
  <changelog author="rjschwei@suse.com" date="1598011201">- Fix provides directive (bsc#1175609, bsc#1175610)
  + The provides directive must set a version or update does not work
    as expected</changelog>
  <changelog author="jesusbv@suse.com" date="1619006400">- Version 5.1.4 (bsc#1184720, bsc#1172581)
  + Use versions endpoint to list the available versions
  + Add bypass proxy
  + Update way to check classic vms</changelog>
  <changelog author="rjschwei@suse.com" date="1642075200">- Version 5.1.5 (bsc#1194663)
  + Handle lsblk output format change. The json data now contains
    "mountpoints" instead of "mountpoint"</changelog>
  <changelog author="jesus.bv@suse.com" date="1705060800">- Version 5.1.6
  Fix empty list attributes (bsc#1218760)</changelog>
</package>
<package pkgid="d77abe50f055b5701c4be560ffaa4435ebfd51512b1dead2ca94d27653c93c8f" name="python3-base" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.51.1"/>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
</package>
<package pkgid="478338586276c18b6971660fb18c82c61397cc40432412bc397277bf5bccef7c" name="python3-base" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.51.1"/>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
</package>
<package pkgid="fd1cb2e11e3e99460e422980179a7a3963002bca65976ba6e7c1cc60657287c1" name="python3-base" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.51.1"/>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
</package>
<package pkgid="a3a18afaa9586db7b466ebefd2ee59d195a3ab531dd1a56c86de4fc51697df5a" name="python3-base" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.54.1"/>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
</package>
<package pkgid="55fcba6d466c2c33c568e63e8508eb995ca383715d11c9e9d77c36a65785c3c3" name="python3-base" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.54.1"/>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
</package>
<package pkgid="72989513a8d1719213e3f54e813d81c27e9477f9ff5cefe40b5a6936de71ac4f" name="python3-base" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.54.1"/>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
</package>
<package pkgid="911bb81a0ce4b3791417679bab5bec3fce1e39613da998bd08f93f4515459815" name="python3-base" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.57.1"/>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
</package>
<package pkgid="66808074f2521133e06e1c3c461129bf7a6b44cd38d8cdb221a9e4bb372b6895" name="python3-base" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.57.1"/>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
</package>
<package pkgid="72d31e7e18156c013cd12bbae8141ee520d5ab44089ee5510c1ed55528ccea34" name="python3-base" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.57.1"/>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
</package>
<package pkgid="64bfea3381e3dbcce3f6e12064d47cf905a452b31e9f8f663f55bef8395583cb" name="python3-base" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.60.1"/>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
  <changelog author="mcepl@suse.com" date="1712059200">- Add bpo38361-syslog-no-slash-ident.patch (bsc#1222109,
  gh#python/cpython!16557) fixes syslog making default "ident"
  from sys.argv[0].</changelog>
</package>
<package pkgid="0668d701c3451716164070f166a61b0ec9bd876f8fd45ca5271ba5d1370f85df" name="python3-base" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.60.1"/>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
  <changelog author="mcepl@suse.com" date="1712059200">- Add bpo38361-syslog-no-slash-ident.patch (bsc#1222109,
  gh#python/cpython!16557) fixes syslog making default "ident"
  from sys.argv[0].</changelog>
</package>
<package pkgid="a5771a7b48a7dd45a9732a401fa4c2bfac8a1612aff546fc810b580fc4d971c8" name="python3-base" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.60.1"/>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
  <changelog author="mcepl@suse.com" date="1712059200">- Add bpo38361-syslog-no-slash-ident.patch (bsc#1222109,
  gh#python/cpython!16557) fixes syslog making default "ident"
  from sys.argv[0].</changelog>
</package>
<package pkgid="7a99323a3d1ae119df4b9cedda7651fec6e4d1992ab901f4d5db4cfa33b75b62" name="python3-base" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.65.1"/>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
  <changelog author="mcepl@cepl.eu" date="1714046400">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).
- Add bh42369-thread-safety-zipfile-SharedFile.patch (from
  gh#python/cpython!26974) required by the previous patch.
- Add expat-260-test_xml_etree-reparse-deferral.patch to make the
  interpreter work with patched libexpat in our distros.
- Move all patches from locally sourced to the branch
  opensuse-3.6 branch at GitHub repo, and move all metadata to
  commits themselves (readable in the headers of each patch).
- Add bpo-41675-modernize-siginterrupt.patch to make Python build
  cleanly even on more recent SPs of SLE-15
  (gh#python/cpython#85841).
- Remove patches:
  - bpo36263-Fix_hashlib_scrypt.patch - fix against bug in
    OpenSSL fixed in 1.1.1c (gh#openssl/openssl!8483), so this
    patch is redundant on all SUSE-supported distros
  - python-3.3.0b1-test-posix_fadvise.patch - protection
    against the kernel issues which has been fixed in
    gh#torvalds/linux@3d3727cdb07f, which has been included in
    all our kernels more recent than SLE-11.
  - python-3.3.3-skip-distutils-test_sysconfig_module.patch -
    skips a test, which should be relevant only for testing on
    Mac OS X systems with universal builds. I have no valid
    record, that this test would be ever problematic on Linux.
  - bpo-36576-skip_tests_for_OpenSSL-111.patch, which was
    included already in Python 3.5.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715083200">- Add bpo38361-syslog-no-slash-ident.patch (bsc#1222109,
  gh#python/cpython!16557) fixes syslog making default "ident"
  from sys.argv[0].
- Update CVE-2023-52425-libexpat-2.6.0-backport.patch so that
  it uses features sniffing, not just comparing version number
  (bsc#1220664, bsc#1219559, bsc#1221563, bsc#1222075).
- Remove support-expat-CVE-2022-25236-patched.patch, which was
  the previous name of this patch.
- Add CVE-2023-52425-remove-reparse_deferral-tests.patch skipping
  failing tests.
- Refresh patches:
  - CVE-2023-27043-email-parsing-errors.patch
  - fix_configure_rst.patch
  - skip_if_buildbot-extend.patch</changelog>
  <changelog author="mcepl@cepl.eu" date="1718971200">- Add CVE-2024-0397-memrace_ssl.SSLContext_cert_store.patch
  fixing bsc#1226447 (CVE-2024-0397) by removing memory race
  condition in ssl.SSLContext certificate store methods.</changelog>
  <changelog author="mcepl@cepl.eu" date="1719316800">- Add CVE-2024-4032-private-IP-addrs.patch to fix bsc#1226448
  (CVE-2024-4032) rearranging definition of private v global IP
  addresses.</changelog>
</package>
<package pkgid="38ac93c8e2b31a5be605b11f1f7a8ec949cae91ea74e28f058e52521b8e16c64" name="python3-base" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.65.1"/>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
  <changelog author="mcepl@cepl.eu" date="1714046400">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).
- Add bh42369-thread-safety-zipfile-SharedFile.patch (from
  gh#python/cpython!26974) required by the previous patch.
- Add expat-260-test_xml_etree-reparse-deferral.patch to make the
  interpreter work with patched libexpat in our distros.
- Move all patches from locally sourced to the branch
  opensuse-3.6 branch at GitHub repo, and move all metadata to
  commits themselves (readable in the headers of each patch).
- Add bpo-41675-modernize-siginterrupt.patch to make Python build
  cleanly even on more recent SPs of SLE-15
  (gh#python/cpython#85841).
- Remove patches:
  - bpo36263-Fix_hashlib_scrypt.patch - fix against bug in
    OpenSSL fixed in 1.1.1c (gh#openssl/openssl!8483), so this
    patch is redundant on all SUSE-supported distros
  - python-3.3.0b1-test-posix_fadvise.patch - protection
    against the kernel issues which has been fixed in
    gh#torvalds/linux@3d3727cdb07f, which has been included in
    all our kernels more recent than SLE-11.
  - python-3.3.3-skip-distutils-test_sysconfig_module.patch -
    skips a test, which should be relevant only for testing on
    Mac OS X systems with universal builds. I have no valid
    record, that this test would be ever problematic on Linux.
  - bpo-36576-skip_tests_for_OpenSSL-111.patch, which was
    included already in Python 3.5.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715083200">- Add bpo38361-syslog-no-slash-ident.patch (bsc#1222109,
  gh#python/cpython!16557) fixes syslog making default "ident"
  from sys.argv[0].
- Update CVE-2023-52425-libexpat-2.6.0-backport.patch so that
  it uses features sniffing, not just comparing version number
  (bsc#1220664, bsc#1219559, bsc#1221563, bsc#1222075).
- Remove support-expat-CVE-2022-25236-patched.patch, which was
  the previous name of this patch.
- Add CVE-2023-52425-remove-reparse_deferral-tests.patch skipping
  failing tests.
- Refresh patches:
  - CVE-2023-27043-email-parsing-errors.patch
  - fix_configure_rst.patch
  - skip_if_buildbot-extend.patch</changelog>
  <changelog author="mcepl@cepl.eu" date="1718971200">- Add CVE-2024-0397-memrace_ssl.SSLContext_cert_store.patch
  fixing bsc#1226447 (CVE-2024-0397) by removing memory race
  condition in ssl.SSLContext certificate store methods.</changelog>
  <changelog author="mcepl@cepl.eu" date="1719316800">- Add CVE-2024-4032-private-IP-addrs.patch to fix bsc#1226448
  (CVE-2024-4032) rearranging definition of private v global IP
  addresses.</changelog>
</package>
<package pkgid="2090d9791c8ba0d34357ca3161a8150b4aa5df457ea1144f00463789f190a41c" name="python3-base" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.65.1"/>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
  <changelog author="mcepl@cepl.eu" date="1714046400">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).
- Add bh42369-thread-safety-zipfile-SharedFile.patch (from
  gh#python/cpython!26974) required by the previous patch.
- Add expat-260-test_xml_etree-reparse-deferral.patch to make the
  interpreter work with patched libexpat in our distros.
- Move all patches from locally sourced to the branch
  opensuse-3.6 branch at GitHub repo, and move all metadata to
  commits themselves (readable in the headers of each patch).
- Add bpo-41675-modernize-siginterrupt.patch to make Python build
  cleanly even on more recent SPs of SLE-15
  (gh#python/cpython#85841).
- Remove patches:
  - bpo36263-Fix_hashlib_scrypt.patch - fix against bug in
    OpenSSL fixed in 1.1.1c (gh#openssl/openssl!8483), so this
    patch is redundant on all SUSE-supported distros
  - python-3.3.0b1-test-posix_fadvise.patch - protection
    against the kernel issues which has been fixed in
    gh#torvalds/linux@3d3727cdb07f, which has been included in
    all our kernels more recent than SLE-11.
  - python-3.3.3-skip-distutils-test_sysconfig_module.patch -
    skips a test, which should be relevant only for testing on
    Mac OS X systems with universal builds. I have no valid
    record, that this test would be ever problematic on Linux.
  - bpo-36576-skip_tests_for_OpenSSL-111.patch, which was
    included already in Python 3.5.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715083200">- Add bpo38361-syslog-no-slash-ident.patch (bsc#1222109,
  gh#python/cpython!16557) fixes syslog making default "ident"
  from sys.argv[0].
- Update CVE-2023-52425-libexpat-2.6.0-backport.patch so that
  it uses features sniffing, not just comparing version number
  (bsc#1220664, bsc#1219559, bsc#1221563, bsc#1222075).
- Remove support-expat-CVE-2022-25236-patched.patch, which was
  the previous name of this patch.
- Add CVE-2023-52425-remove-reparse_deferral-tests.patch skipping
  failing tests.
- Refresh patches:
  - CVE-2023-27043-email-parsing-errors.patch
  - fix_configure_rst.patch
  - skip_if_buildbot-extend.patch</changelog>
  <changelog author="mcepl@cepl.eu" date="1718971200">- Add CVE-2024-0397-memrace_ssl.SSLContext_cert_store.patch
  fixing bsc#1226447 (CVE-2024-0397) by removing memory race
  condition in ssl.SSLContext certificate store methods.</changelog>
  <changelog author="mcepl@cepl.eu" date="1719316800">- Add CVE-2024-4032-private-IP-addrs.patch to fix bsc#1226448
  (CVE-2024-4032) rearranging definition of private v global IP
  addresses.</changelog>
</package>
<package pkgid="bd760ec2d0f05abfad9f6672e6616ce1ac28b557c2a2beb2d58efb96cc3553c6" name="python3-chardet" arch="noarch">
  <version epoch="0" ver="3.0.4" rel="150000.5.3.1"/>
  <changelog author="aloisio@gmx.com" date="1423569600">- Update to version 2.3.0
  * Added support for CP932 detection (thanks to @hashy)
  * Fixed an issue where UTF-8 with a BOM would not be detected
    as UTF-8-SIG (#8)
  * Modified chardetect to use argparse for argument parsing
  * Moved docs to a gh-pages branch. You can now access them
    at http://chardet.github.io
- Changelog on https://github.com/chardet/chardet/commits/2.3.0
- Other minor changes</changelog>
  <changelog author="arun@gmx.de" date="1431345600">- specfile:
  * added update alternative to prevent conflicts with python3 version
  * add tests</changelog>
  <changelog author="rjschwei@suse.com" date="1485777600">- Include in SLE 12 (bsc#1002895, FATE#321630)</changelog>
  <changelog author="aloisio@gmx.com" date="1489924800">- Converted to single spec.</changelog>
  <changelog author="jmatejek@suse.com" date="1490097600">- do not use %py_ver, replace with %python_version</changelog>
  <changelog author="dmueller@suse.com" date="1497096000">- update to 3.0.4</changelog>
  <changelog author="ecsos@opensuse.org" date="1498737600">- fix source link</changelog>
  <changelog author="dmueller@suse.com" date="1502798400">- add update-alternative support for py2/py3 coinstallability</changelog>
  <changelog author="tbechtold@suse.com" date="1503662400">- Fix build for Leap-42.3</changelog>
  <changelog author="dmueller@suse.com" date="1505908800">- add update-alternatives post-requires</changelog>
  <changelog author="daniel.garcia@suse.com" date="1705406400">- Fix update-alternative in %postun, bsc#1218765</changelog>
</package>
<package pkgid="dcf0de52680345e5537a143d421651f237fc4f124422bbee12fb46157d0d0c58" name="python3-core" arch="src">
  <version epoch="0" ver="3.6.15" rel="150300.10.51.1"/>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
</package>
<package pkgid="f906d3b42a81a5c1c3e9450a3c08a65be557e29ad23306564a4d856da8b21d46" name="python3-core" arch="src">
  <version epoch="0" ver="3.6.15" rel="150300.10.54.1"/>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
</package>
<package pkgid="9ddcdb8f15bf56b2a3d9bbd6934096ca858f561b745c7527a79c3942496eca2d" name="python3-core" arch="src">
  <version epoch="0" ver="3.6.15" rel="150300.10.57.1"/>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
</package>
<package pkgid="326da39e3a8c4b666f277e3a5fe02928c3d5637037d39648b94bd3fb3612569e" name="python3-core" arch="src">
  <version epoch="0" ver="3.6.15" rel="150300.10.60.1"/>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
  <changelog author="mcepl@suse.com" date="1712059200">- Add bpo38361-syslog-no-slash-ident.patch (bsc#1222109,
  gh#python/cpython!16557) fixes syslog making default "ident"
  from sys.argv[0].</changelog>
</package>
<package pkgid="3c41bda76465c92cb4d0ee212031cbffda1724af2478bd9ea125325df027dab4" name="python3-core" arch="src">
  <version epoch="0" ver="3.6.15" rel="150300.10.65.1"/>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
  <changelog author="mcepl@cepl.eu" date="1714046400">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).
- Add bh42369-thread-safety-zipfile-SharedFile.patch (from
  gh#python/cpython!26974) required by the previous patch.
- Add expat-260-test_xml_etree-reparse-deferral.patch to make the
  interpreter work with patched libexpat in our distros.
- Move all patches from locally sourced to the branch
  opensuse-3.6 branch at GitHub repo, and move all metadata to
  commits themselves (readable in the headers of each patch).
- Add bpo-41675-modernize-siginterrupt.patch to make Python build
  cleanly even on more recent SPs of SLE-15
  (gh#python/cpython#85841).
- Remove patches:
  - bpo36263-Fix_hashlib_scrypt.patch - fix against bug in
    OpenSSL fixed in 1.1.1c (gh#openssl/openssl!8483), so this
    patch is redundant on all SUSE-supported distros
  - python-3.3.0b1-test-posix_fadvise.patch - protection
    against the kernel issues which has been fixed in
    gh#torvalds/linux@3d3727cdb07f, which has been included in
    all our kernels more recent than SLE-11.
  - python-3.3.3-skip-distutils-test_sysconfig_module.patch -
    skips a test, which should be relevant only for testing on
    Mac OS X systems with universal builds. I have no valid
    record, that this test would be ever problematic on Linux.
  - bpo-36576-skip_tests_for_OpenSSL-111.patch, which was
    included already in Python 3.5.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715083200">- Add bpo38361-syslog-no-slash-ident.patch (bsc#1222109,
  gh#python/cpython!16557) fixes syslog making default "ident"
  from sys.argv[0].
- Update CVE-2023-52425-libexpat-2.6.0-backport.patch so that
  it uses features sniffing, not just comparing version number
  (bsc#1220664, bsc#1219559, bsc#1221563, bsc#1222075).
- Remove support-expat-CVE-2022-25236-patched.patch, which was
  the previous name of this patch.
- Add CVE-2023-52425-remove-reparse_deferral-tests.patch skipping
  failing tests.
- Refresh patches:
  - CVE-2023-27043-email-parsing-errors.patch
  - fix_configure_rst.patch
  - skip_if_buildbot-extend.patch</changelog>
  <changelog author="mcepl@cepl.eu" date="1718971200">- Add CVE-2024-0397-memrace_ssl.SSLContext_cert_store.patch
  fixing bsc#1226447 (CVE-2024-0397) by removing memory race
  condition in ssl.SSLContext certificate store methods.</changelog>
  <changelog author="mcepl@cepl.eu" date="1719316800">- Add CVE-2024-4032-private-IP-addrs.patch to fix bsc#1226448
  (CVE-2024-4032) rearranging definition of private v global IP
  addresses.</changelog>
</package>
<package pkgid="aa91871a5ac77428fe8ef71773e2f17a39762ffc9ef7b78668dc936d8dfa8a54" name="python3-cryptography" arch="aarch64">
  <version epoch="0" ver="3.3.2" rel="150400.20.3"/>
  <changelog author="tchvatal@suse.com" date="1534852800">- Update to 2.3.1:
  * updated tests for upstream wycheproof changes
  * many other tiny test tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1544097600">- Fix fdupes call</changelog>
  <changelog author="mcepl@suse.com" date="1544097601">- Update to 2.4.1:
  * Dropped support for LibreSSL 2.4.x.
  * Deprecated OpenSSL 1.0.1 support. OpenSSL 1.0.1 is no
    longer supported by the OpenSSL project. At this time there
    is no time table for dropping support, however we strongly
    encourage all users to upgrade or install cryptography from
    a wheel.
  * Added initial :doc:`OCSP &lt;/x509/ocsp&gt;` support.
  * Added support for cryptography.x509.PrecertPoison.</changelog>
  <changelog author="mpluskal@suse.com" date="1546516800">- Update to version 2.4.2:
  * Updated Windows, macOS, and manylinux1 wheels to be compiled
    with OpenSSL 1.1.0j.</changelog>
  <changelog author="michael@stroeder.com" date="1548417600">- Dependency on python-idna changed to "Recommends" aligned with
  change in upstream source (see below)
- update to 2.5:
  * BACKWARDS INCOMPATIBLE: U-label strings were deprecated in version 2.1,
    but this version removes the default idna dependency as well. If you still
    need this deprecated path please install cryptography with the idna extra:
    pip install cryptography[idna].
  * BACKWARDS INCOMPATIBLE: The minimum supported PyPy version is now 5.4.
  * Numerous classes and functions have been updated to allow bytes-like
    types for keying material and passwords, including symmetric algorithms,
    AEAD ciphers, KDFs, loading asymmetric keys, and one time password classes.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with OpenSSL 1.1.1a.
  * Added support for SHA512_224 and SHA512_256 when using OpenSSL 1.1.1.
  * Added support for SHA3_224, SHA3_256, SHA3_384, and SHA3_512 when using OpenSSL 1.1.1.
  * Added support for X448 key exchange when using OpenSSL 1.1.1.
  * Added support for SHAKE128 and SHAKE256 when using OpenSSL 1.1.1.
  * Added initial support for parsing PKCS12 files with load_key_and_certificates().
  * Added support for IssuingDistributionPoint.
  * Added rfc4514_string() method to x509.Name,
    x509.RelativeDistinguishedName, and x509.NameAttribute to format the name
    or component an RFC 4514 Distinguished Name string.
  * Added from_encoded_point(), which immediately checks if the point is on
    the curve and supports compressed points. Deprecated the previous method
    from_encoded_point().
  * Added signature_hash_algorithm to OCSPResponse.
  * Updated X25519 key exchange support to allow additional serialization
    methods. Calling public_bytes() with no arguments has been deprecated.
  * Added support for encoding compressed and uncompressed points via
    public_bytes(). Deprecated the previous method encode_point().</changelog>
  <changelog author="michael@stroeder.com" date="1551355200">- update to 2.6.1:
  * BACKWARDS INCOMPATIBLE:
    Removedcryptography.hazmat.primitives.asymmetric.utils.encode_rfc6979_signature
    andcryptography.hazmat.primitives.asymmetric.utils.decode_rfc6979_signature,
    which had been deprecated for nearly 4 years. Use encode_dss_signature()
    and decode_dss_signature()instead.
  * BACKWARDS INCOMPATIBLE: Removed cryptography.x509.Certificate.serial, which
    had been deprecated for nearly 3 years. Use serial_number instead.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with
    OpenSSL 1.1.1b.
  * Added support for Ed448 signing when using OpenSSL 1.1.1b or newer.
  * Added support for Ed25519 signing when using OpenSSL 1.1.1b or newer.
  * load_ssh_public_key() can now load ed25519 public keys.
  * Add support for easily mapping an object identifier to its elliptic curve
    class viaget_curve_for_oid().
  * Add support for OpenSSL when compiled with the no-engine
    (OPENSSL_NO_ENGINE) flag.</changelog>
  <changelog author="tchvatal@suse.com" date="1559131200">- Simplify the test execution to be more understandable</changelog>
  <changelog author="mimi.vx@gmail.com" date="1559563200">- update to 2.7
  * BACKWARDS INCOMPATIBLE: Removed the cryptography.hazmat.primitives.mac.MACContext interface.
  The CMAC and HMAC APIs have not changed, but they are no longer registered
  as MACContext instances.
  * Removed support for running our tests with setup.py test.
  * Add support for :class:`~cryptography.hazmat.primitives.poly1305.Poly1305`
  when using OpenSSL 1.1.1 or newer.
  * Support serialization with Encoding.OpenSSH and PublicFormat.OpenSSH
  in :meth:`Ed25519PublicKey.public_bytes &lt;cryptography.hazmat.primitives.asymmetric.ed25519.Ed25519PublicKey.public_bytes&gt;` .
  * Correctly allow passing a SubjectKeyIdentifier to :meth:`~cryptography.x509.AuthorityKeyIdentifier.from_issuer_subject_key_identifier`
  and deprecate passing an Extension object.</changelog>
  <changelog author="michael@stroeder.com" date="1571313600">- update to 2.8
  * Added support for Python 3.8.
  * Added class methods Poly1305.generate_tag and Poly1305.verify_tag for Poly1305 sign and verify operations.
  * Deprecated support for OpenSSL 1.0.1. Support will be removed in cryptography 2.9.
  * We now ship manylinux2010 wheels in addition to our manylinux1 wheels.
  * Added support for ed25519 and ed448 keys in the CertificateBuilder, CertificateSigningRequestBuilder, CertificateRevocationListBuilder and OCSPResponseBuilder.
  * cryptography no longer depends on asn1crypto.
  * FreshestCRL is now allowed as a CertificateRevocationList extension.</changelog>
  <changelog author="michael@stroeder.com" date="1589544000">- update to 2.9.2
  * 2.9.2 - 2020-04-22
  - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15.
  * 2.9.1 - 2020-04-21
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g.
  * 2.9 - 2020-04-02
  - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to
    low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed.
    Users on older version of OpenSSL will need to upgrade.
  - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed.
  - Removed support for calling public_bytes() with no arguments, as per
    our deprecation policy. You must now pass encoding and format.
  - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string()
    returns the RDNs as required by RFC 4514.
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f.
  - Added support for parsing single_extensions in an OCSP response.
  - NameAttribute values can now be empty strings.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1595937600">- update to 3.0
- refreshed disable-uneven-sizes-tests.patch and  skip_openssl_memleak_test.patch
  * Removed support for passing an Extension instance
    to from_issuer_subject_key_identifier(), as per our deprecation policy.
  * Support for LibreSSL 2.7.x, 2.8.x, and 2.9.0 has been removed
  * Dropped support for macOS 10.9, macOS users must upgrade to 10.10 or newer.
  * RSA generate_private_key() no longer accepts public_exponent values except
    65537 and 3 (the latter for legacy purposes).
  * X.509 certificate parsing now enforces that the version field contains
    a valid value, rather than deferring this check until version is accessed.
  * Deprecated support for Python 2
  * Added support for OpenSSH serialization format for ec, ed25519, rsa and dsa
    private keys: load_ssh_private_key() for loading and OpenSSH for writing.
  * Added support for OpenSSH certificates to load_ssh_public_key().
  * Added encrypt_at_time() and decrypt_at_time() to Fernet.
  * Added support for the SubjectInformationAccess X.509 extension.
  * Added support for parsing SignedCertificateTimestamps in OCSP responses.
  * Added support for parsing attributes in certificate signing requests via get_attribute_for_oid().
  * Added support for encoding attributes in certificate signing requests via add_attribute().
  * On OpenSSL 1.1.1d and higher cryptography now uses OpenSSL’s built-in CSPRNG
    instead of its own OS random engine because these versions of OpenSSL properly reseed on fork.
  * Added initial support for creating PKCS12 files with serialize_key_and_certificates().</changelog>
  <changelog author="dmueller@suse.com" date="1600430400">- update to 3.1:
  * **BACKWARDS INCOMPATIBLE:** Removed support for ``idna`` based
    :term:`U-label` parsing in various X.509 classes. This support was originally
    deprecated in version 2.1 and moved to an extra in 2.5.
  * Deprecated OpenSSL 1.0.2 support. OpenSSL 1.0.2 is no longer supported by
    the OpenSSL project. The next version of ``cryptography`` will drop support
    for it.
  * Deprecated support for Python 3.5. This version sees very little use and will
    be removed in the next release.
  * ``backend`` arguments to functions are no longer required and the
    default backend will automatically be selected if no ``backend`` is provided.
  * Added initial support for parsing certificates from PKCS7 files with
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_pem_pkcs7_certificates`
    and
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_der_pkcs7_certificates`
    .
  * Calling ``update`` or ``update_into`` on
    :class:`~cryptography.hazmat.primitives.ciphers.CipherContext` with ``data``
    longer than 2\ :sup:`31` bytes no longer raises an ``OverflowError``. This
    also resolves the same issue in :doc:`/fernet`.</changelog>
  <changelog author="dmueller@suse.com" date="1601294400">- update to 3.1.1:
  * wheels compiled with OpenSSL 1.1.1h.</changelog>
  <changelog author="michael@stroeder.com" date="1603713600">- update to 3.2 (bsc#1178168, CVE-2020-25659):
  * CVE-2020-25659: Attempted to make RSA PKCS#1v1.5 decryption more constant time,
    to protect against Bleichenbacher vulnerabilities. Due to limitations imposed
    by our API, we cannot completely mitigate this vulnerability.
  * Support for OpenSSL 1.0.2 has been removed.
  * Added basic support for PKCS7 signing (including SMIME) via PKCS7SignatureBuilder.
- drops 5507-mitigate-Bleichenbacher-attacks.patch on older dists</changelog>
  <changelog author="michael@stroeder.com" date="1603886400">- update to 3.2.1:
  Disable blinding on RSA public keys to address an error with
  some versions of OpenSSL.</changelog>
  <changelog author="mcepl@suse.com" date="1607256000">- Remove unnecessary dependency virtualenv.</changelog>
  <changelog author="mrueckert@suse.de" date="1607515200">- update to 3.3.0
  - BACKWARDS INCOMPATIBLE: Support for Python 3.5 has been removed
    due to low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: The GCM and AESGCM now require 64-bit
    to 1024-bit (8 byte to 128 byte) initialization vectors. This
    change is to conform with an upcoming OpenSSL release that will
    no longer support sizes outside this window.
  - BACKWARDS INCOMPATIBLE: When deserializing asymmetric keys we
    now raise ValueError rather than UnsupportedAlgorithm when an
    unsupported cipher is used. This change is to conform with an
    upcoming OpenSSL release that will no longer distinguish
    between error types.
  - BACKWARDS INCOMPATIBLE: We no longer allow loading of finite
    field Diffie-Hellman parameters of less than 512 bits in
    length. This change is to conform with an upcoming OpenSSL
    release that no longer supports smaller sizes. These keys were
    already wildly insecure and should not have been used in any
    application outside of testing.
  - Updated Windows, macOS, and manylinux wheels to be compiled
    with OpenSSL 1.1.1i.
  - Python 2 support is deprecated in cryptography. This is the
    last release that will support Python 2.
  - Added the recover_data_from_signature() function to
    RSAPublicKey for recovering the signed data from an RSA
    signature.</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 3.3.1:
  * Re-added a legacy symbol causing problems for older ``pyOpenSSL`` use</changelog>
  <changelog author="michael@stroeder.com" date="1612699200">- update to 3.3.2 (bsc#1182066, CVE-2020-36242, bsc#1198331):
  * SECURITY ISSUE: Fixed a bug where certain sequences of update()
    calls when symmetrically encrypting very large payloads (&gt;2GB) could
    result in an integer overflow, leading to buffer overflows.
    CVE-2020-36242
  - drops CVE-2020-36242-buffer-overflow.patch on older dists</changelog>
  <changelog author="daniel.garcia@suse.com" date="1676289600">- Add patch CVE-2023-23931-dont-allow-update-into.patch (bsc#1208036, CVE-2023-23931)
  * Don't allow update_into to mutate immutable objects</changelog>
</package>
<package pkgid="82f56ba73171512dfa7b78c6f4bbd4eb740e2baf69e0a25e1703110fc62d7cda" name="python3-cryptography" arch="ppc64le">
  <version epoch="0" ver="3.3.2" rel="150400.20.3"/>
  <changelog author="tchvatal@suse.com" date="1534852800">- Update to 2.3.1:
  * updated tests for upstream wycheproof changes
  * many other tiny test tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1544097600">- Fix fdupes call</changelog>
  <changelog author="mcepl@suse.com" date="1544097601">- Update to 2.4.1:
  * Dropped support for LibreSSL 2.4.x.
  * Deprecated OpenSSL 1.0.1 support. OpenSSL 1.0.1 is no
    longer supported by the OpenSSL project. At this time there
    is no time table for dropping support, however we strongly
    encourage all users to upgrade or install cryptography from
    a wheel.
  * Added initial :doc:`OCSP &lt;/x509/ocsp&gt;` support.
  * Added support for cryptography.x509.PrecertPoison.</changelog>
  <changelog author="mpluskal@suse.com" date="1546516800">- Update to version 2.4.2:
  * Updated Windows, macOS, and manylinux1 wheels to be compiled
    with OpenSSL 1.1.0j.</changelog>
  <changelog author="michael@stroeder.com" date="1548417600">- Dependency on python-idna changed to "Recommends" aligned with
  change in upstream source (see below)
- update to 2.5:
  * BACKWARDS INCOMPATIBLE: U-label strings were deprecated in version 2.1,
    but this version removes the default idna dependency as well. If you still
    need this deprecated path please install cryptography with the idna extra:
    pip install cryptography[idna].
  * BACKWARDS INCOMPATIBLE: The minimum supported PyPy version is now 5.4.
  * Numerous classes and functions have been updated to allow bytes-like
    types for keying material and passwords, including symmetric algorithms,
    AEAD ciphers, KDFs, loading asymmetric keys, and one time password classes.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with OpenSSL 1.1.1a.
  * Added support for SHA512_224 and SHA512_256 when using OpenSSL 1.1.1.
  * Added support for SHA3_224, SHA3_256, SHA3_384, and SHA3_512 when using OpenSSL 1.1.1.
  * Added support for X448 key exchange when using OpenSSL 1.1.1.
  * Added support for SHAKE128 and SHAKE256 when using OpenSSL 1.1.1.
  * Added initial support for parsing PKCS12 files with load_key_and_certificates().
  * Added support for IssuingDistributionPoint.
  * Added rfc4514_string() method to x509.Name,
    x509.RelativeDistinguishedName, and x509.NameAttribute to format the name
    or component an RFC 4514 Distinguished Name string.
  * Added from_encoded_point(), which immediately checks if the point is on
    the curve and supports compressed points. Deprecated the previous method
    from_encoded_point().
  * Added signature_hash_algorithm to OCSPResponse.
  * Updated X25519 key exchange support to allow additional serialization
    methods. Calling public_bytes() with no arguments has been deprecated.
  * Added support for encoding compressed and uncompressed points via
    public_bytes(). Deprecated the previous method encode_point().</changelog>
  <changelog author="michael@stroeder.com" date="1551355200">- update to 2.6.1:
  * BACKWARDS INCOMPATIBLE:
    Removedcryptography.hazmat.primitives.asymmetric.utils.encode_rfc6979_signature
    andcryptography.hazmat.primitives.asymmetric.utils.decode_rfc6979_signature,
    which had been deprecated for nearly 4 years. Use encode_dss_signature()
    and decode_dss_signature()instead.
  * BACKWARDS INCOMPATIBLE: Removed cryptography.x509.Certificate.serial, which
    had been deprecated for nearly 3 years. Use serial_number instead.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with
    OpenSSL 1.1.1b.
  * Added support for Ed448 signing when using OpenSSL 1.1.1b or newer.
  * Added support for Ed25519 signing when using OpenSSL 1.1.1b or newer.
  * load_ssh_public_key() can now load ed25519 public keys.
  * Add support for easily mapping an object identifier to its elliptic curve
    class viaget_curve_for_oid().
  * Add support for OpenSSL when compiled with the no-engine
    (OPENSSL_NO_ENGINE) flag.</changelog>
  <changelog author="tchvatal@suse.com" date="1559131200">- Simplify the test execution to be more understandable</changelog>
  <changelog author="mimi.vx@gmail.com" date="1559563200">- update to 2.7
  * BACKWARDS INCOMPATIBLE: Removed the cryptography.hazmat.primitives.mac.MACContext interface.
  The CMAC and HMAC APIs have not changed, but they are no longer registered
  as MACContext instances.
  * Removed support for running our tests with setup.py test.
  * Add support for :class:`~cryptography.hazmat.primitives.poly1305.Poly1305`
  when using OpenSSL 1.1.1 or newer.
  * Support serialization with Encoding.OpenSSH and PublicFormat.OpenSSH
  in :meth:`Ed25519PublicKey.public_bytes &lt;cryptography.hazmat.primitives.asymmetric.ed25519.Ed25519PublicKey.public_bytes&gt;` .
  * Correctly allow passing a SubjectKeyIdentifier to :meth:`~cryptography.x509.AuthorityKeyIdentifier.from_issuer_subject_key_identifier`
  and deprecate passing an Extension object.</changelog>
  <changelog author="michael@stroeder.com" date="1571313600">- update to 2.8
  * Added support for Python 3.8.
  * Added class methods Poly1305.generate_tag and Poly1305.verify_tag for Poly1305 sign and verify operations.
  * Deprecated support for OpenSSL 1.0.1. Support will be removed in cryptography 2.9.
  * We now ship manylinux2010 wheels in addition to our manylinux1 wheels.
  * Added support for ed25519 and ed448 keys in the CertificateBuilder, CertificateSigningRequestBuilder, CertificateRevocationListBuilder and OCSPResponseBuilder.
  * cryptography no longer depends on asn1crypto.
  * FreshestCRL is now allowed as a CertificateRevocationList extension.</changelog>
  <changelog author="michael@stroeder.com" date="1589544000">- update to 2.9.2
  * 2.9.2 - 2020-04-22
  - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15.
  * 2.9.1 - 2020-04-21
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g.
  * 2.9 - 2020-04-02
  - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to
    low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed.
    Users on older version of OpenSSL will need to upgrade.
  - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed.
  - Removed support for calling public_bytes() with no arguments, as per
    our deprecation policy. You must now pass encoding and format.
  - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string()
    returns the RDNs as required by RFC 4514.
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f.
  - Added support for parsing single_extensions in an OCSP response.
  - NameAttribute values can now be empty strings.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1595937600">- update to 3.0
- refreshed disable-uneven-sizes-tests.patch and  skip_openssl_memleak_test.patch
  * Removed support for passing an Extension instance
    to from_issuer_subject_key_identifier(), as per our deprecation policy.
  * Support for LibreSSL 2.7.x, 2.8.x, and 2.9.0 has been removed
  * Dropped support for macOS 10.9, macOS users must upgrade to 10.10 or newer.
  * RSA generate_private_key() no longer accepts public_exponent values except
    65537 and 3 (the latter for legacy purposes).
  * X.509 certificate parsing now enforces that the version field contains
    a valid value, rather than deferring this check until version is accessed.
  * Deprecated support for Python 2
  * Added support for OpenSSH serialization format for ec, ed25519, rsa and dsa
    private keys: load_ssh_private_key() for loading and OpenSSH for writing.
  * Added support for OpenSSH certificates to load_ssh_public_key().
  * Added encrypt_at_time() and decrypt_at_time() to Fernet.
  * Added support for the SubjectInformationAccess X.509 extension.
  * Added support for parsing SignedCertificateTimestamps in OCSP responses.
  * Added support for parsing attributes in certificate signing requests via get_attribute_for_oid().
  * Added support for encoding attributes in certificate signing requests via add_attribute().
  * On OpenSSL 1.1.1d and higher cryptography now uses OpenSSL’s built-in CSPRNG
    instead of its own OS random engine because these versions of OpenSSL properly reseed on fork.
  * Added initial support for creating PKCS12 files with serialize_key_and_certificates().</changelog>
  <changelog author="dmueller@suse.com" date="1600430400">- update to 3.1:
  * **BACKWARDS INCOMPATIBLE:** Removed support for ``idna`` based
    :term:`U-label` parsing in various X.509 classes. This support was originally
    deprecated in version 2.1 and moved to an extra in 2.5.
  * Deprecated OpenSSL 1.0.2 support. OpenSSL 1.0.2 is no longer supported by
    the OpenSSL project. The next version of ``cryptography`` will drop support
    for it.
  * Deprecated support for Python 3.5. This version sees very little use and will
    be removed in the next release.
  * ``backend`` arguments to functions are no longer required and the
    default backend will automatically be selected if no ``backend`` is provided.
  * Added initial support for parsing certificates from PKCS7 files with
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_pem_pkcs7_certificates`
    and
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_der_pkcs7_certificates`
    .
  * Calling ``update`` or ``update_into`` on
    :class:`~cryptography.hazmat.primitives.ciphers.CipherContext` with ``data``
    longer than 2\ :sup:`31` bytes no longer raises an ``OverflowError``. This
    also resolves the same issue in :doc:`/fernet`.</changelog>
  <changelog author="dmueller@suse.com" date="1601294400">- update to 3.1.1:
  * wheels compiled with OpenSSL 1.1.1h.</changelog>
  <changelog author="michael@stroeder.com" date="1603713600">- update to 3.2 (bsc#1178168, CVE-2020-25659):
  * CVE-2020-25659: Attempted to make RSA PKCS#1v1.5 decryption more constant time,
    to protect against Bleichenbacher vulnerabilities. Due to limitations imposed
    by our API, we cannot completely mitigate this vulnerability.
  * Support for OpenSSL 1.0.2 has been removed.
  * Added basic support for PKCS7 signing (including SMIME) via PKCS7SignatureBuilder.
- drops 5507-mitigate-Bleichenbacher-attacks.patch on older dists</changelog>
  <changelog author="michael@stroeder.com" date="1603886400">- update to 3.2.1:
  Disable blinding on RSA public keys to address an error with
  some versions of OpenSSL.</changelog>
  <changelog author="mcepl@suse.com" date="1607256000">- Remove unnecessary dependency virtualenv.</changelog>
  <changelog author="mrueckert@suse.de" date="1607515200">- update to 3.3.0
  - BACKWARDS INCOMPATIBLE: Support for Python 3.5 has been removed
    due to low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: The GCM and AESGCM now require 64-bit
    to 1024-bit (8 byte to 128 byte) initialization vectors. This
    change is to conform with an upcoming OpenSSL release that will
    no longer support sizes outside this window.
  - BACKWARDS INCOMPATIBLE: When deserializing asymmetric keys we
    now raise ValueError rather than UnsupportedAlgorithm when an
    unsupported cipher is used. This change is to conform with an
    upcoming OpenSSL release that will no longer distinguish
    between error types.
  - BACKWARDS INCOMPATIBLE: We no longer allow loading of finite
    field Diffie-Hellman parameters of less than 512 bits in
    length. This change is to conform with an upcoming OpenSSL
    release that no longer supports smaller sizes. These keys were
    already wildly insecure and should not have been used in any
    application outside of testing.
  - Updated Windows, macOS, and manylinux wheels to be compiled
    with OpenSSL 1.1.1i.
  - Python 2 support is deprecated in cryptography. This is the
    last release that will support Python 2.
  - Added the recover_data_from_signature() function to
    RSAPublicKey for recovering the signed data from an RSA
    signature.</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 3.3.1:
  * Re-added a legacy symbol causing problems for older ``pyOpenSSL`` use</changelog>
  <changelog author="michael@stroeder.com" date="1612699200">- update to 3.3.2 (bsc#1182066, CVE-2020-36242, bsc#1198331):
  * SECURITY ISSUE: Fixed a bug where certain sequences of update()
    calls when symmetrically encrypting very large payloads (&gt;2GB) could
    result in an integer overflow, leading to buffer overflows.
    CVE-2020-36242
  - drops CVE-2020-36242-buffer-overflow.patch on older dists</changelog>
  <changelog author="daniel.garcia@suse.com" date="1676289600">- Add patch CVE-2023-23931-dont-allow-update-into.patch (bsc#1208036, CVE-2023-23931)
  * Don't allow update_into to mutate immutable objects</changelog>
</package>
<package pkgid="958f253ca0f9a3b9604cb9922194323afdedd8c5e93bd6d2ce00aadcb3811e46" name="python3-cryptography" arch="s390x">
  <version epoch="0" ver="3.3.2" rel="150400.20.3"/>
  <changelog author="tchvatal@suse.com" date="1534852800">- Update to 2.3.1:
  * updated tests for upstream wycheproof changes
  * many other tiny test tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1544097600">- Fix fdupes call</changelog>
  <changelog author="mcepl@suse.com" date="1544097601">- Update to 2.4.1:
  * Dropped support for LibreSSL 2.4.x.
  * Deprecated OpenSSL 1.0.1 support. OpenSSL 1.0.1 is no
    longer supported by the OpenSSL project. At this time there
    is no time table for dropping support, however we strongly
    encourage all users to upgrade or install cryptography from
    a wheel.
  * Added initial :doc:`OCSP &lt;/x509/ocsp&gt;` support.
  * Added support for cryptography.x509.PrecertPoison.</changelog>
  <changelog author="mpluskal@suse.com" date="1546516800">- Update to version 2.4.2:
  * Updated Windows, macOS, and manylinux1 wheels to be compiled
    with OpenSSL 1.1.0j.</changelog>
  <changelog author="michael@stroeder.com" date="1548417600">- Dependency on python-idna changed to "Recommends" aligned with
  change in upstream source (see below)
- update to 2.5:
  * BACKWARDS INCOMPATIBLE: U-label strings were deprecated in version 2.1,
    but this version removes the default idna dependency as well. If you still
    need this deprecated path please install cryptography with the idna extra:
    pip install cryptography[idna].
  * BACKWARDS INCOMPATIBLE: The minimum supported PyPy version is now 5.4.
  * Numerous classes and functions have been updated to allow bytes-like
    types for keying material and passwords, including symmetric algorithms,
    AEAD ciphers, KDFs, loading asymmetric keys, and one time password classes.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with OpenSSL 1.1.1a.
  * Added support for SHA512_224 and SHA512_256 when using OpenSSL 1.1.1.
  * Added support for SHA3_224, SHA3_256, SHA3_384, and SHA3_512 when using OpenSSL 1.1.1.
  * Added support for X448 key exchange when using OpenSSL 1.1.1.
  * Added support for SHAKE128 and SHAKE256 when using OpenSSL 1.1.1.
  * Added initial support for parsing PKCS12 files with load_key_and_certificates().
  * Added support for IssuingDistributionPoint.
  * Added rfc4514_string() method to x509.Name,
    x509.RelativeDistinguishedName, and x509.NameAttribute to format the name
    or component an RFC 4514 Distinguished Name string.
  * Added from_encoded_point(), which immediately checks if the point is on
    the curve and supports compressed points. Deprecated the previous method
    from_encoded_point().
  * Added signature_hash_algorithm to OCSPResponse.
  * Updated X25519 key exchange support to allow additional serialization
    methods. Calling public_bytes() with no arguments has been deprecated.
  * Added support for encoding compressed and uncompressed points via
    public_bytes(). Deprecated the previous method encode_point().</changelog>
  <changelog author="michael@stroeder.com" date="1551355200">- update to 2.6.1:
  * BACKWARDS INCOMPATIBLE:
    Removedcryptography.hazmat.primitives.asymmetric.utils.encode_rfc6979_signature
    andcryptography.hazmat.primitives.asymmetric.utils.decode_rfc6979_signature,
    which had been deprecated for nearly 4 years. Use encode_dss_signature()
    and decode_dss_signature()instead.
  * BACKWARDS INCOMPATIBLE: Removed cryptography.x509.Certificate.serial, which
    had been deprecated for nearly 3 years. Use serial_number instead.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with
    OpenSSL 1.1.1b.
  * Added support for Ed448 signing when using OpenSSL 1.1.1b or newer.
  * Added support for Ed25519 signing when using OpenSSL 1.1.1b or newer.
  * load_ssh_public_key() can now load ed25519 public keys.
  * Add support for easily mapping an object identifier to its elliptic curve
    class viaget_curve_for_oid().
  * Add support for OpenSSL when compiled with the no-engine
    (OPENSSL_NO_ENGINE) flag.</changelog>
  <changelog author="tchvatal@suse.com" date="1559131200">- Simplify the test execution to be more understandable</changelog>
  <changelog author="mimi.vx@gmail.com" date="1559563200">- update to 2.7
  * BACKWARDS INCOMPATIBLE: Removed the cryptography.hazmat.primitives.mac.MACContext interface.
  The CMAC and HMAC APIs have not changed, but they are no longer registered
  as MACContext instances.
  * Removed support for running our tests with setup.py test.
  * Add support for :class:`~cryptography.hazmat.primitives.poly1305.Poly1305`
  when using OpenSSL 1.1.1 or newer.
  * Support serialization with Encoding.OpenSSH and PublicFormat.OpenSSH
  in :meth:`Ed25519PublicKey.public_bytes &lt;cryptography.hazmat.primitives.asymmetric.ed25519.Ed25519PublicKey.public_bytes&gt;` .
  * Correctly allow passing a SubjectKeyIdentifier to :meth:`~cryptography.x509.AuthorityKeyIdentifier.from_issuer_subject_key_identifier`
  and deprecate passing an Extension object.</changelog>
  <changelog author="michael@stroeder.com" date="1571313600">- update to 2.8
  * Added support for Python 3.8.
  * Added class methods Poly1305.generate_tag and Poly1305.verify_tag for Poly1305 sign and verify operations.
  * Deprecated support for OpenSSL 1.0.1. Support will be removed in cryptography 2.9.
  * We now ship manylinux2010 wheels in addition to our manylinux1 wheels.
  * Added support for ed25519 and ed448 keys in the CertificateBuilder, CertificateSigningRequestBuilder, CertificateRevocationListBuilder and OCSPResponseBuilder.
  * cryptography no longer depends on asn1crypto.
  * FreshestCRL is now allowed as a CertificateRevocationList extension.</changelog>
  <changelog author="michael@stroeder.com" date="1589544000">- update to 2.9.2
  * 2.9.2 - 2020-04-22
  - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15.
  * 2.9.1 - 2020-04-21
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g.
  * 2.9 - 2020-04-02
  - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to
    low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed.
    Users on older version of OpenSSL will need to upgrade.
  - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed.
  - Removed support for calling public_bytes() with no arguments, as per
    our deprecation policy. You must now pass encoding and format.
  - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string()
    returns the RDNs as required by RFC 4514.
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f.
  - Added support for parsing single_extensions in an OCSP response.
  - NameAttribute values can now be empty strings.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1595937600">- update to 3.0
- refreshed disable-uneven-sizes-tests.patch and  skip_openssl_memleak_test.patch
  * Removed support for passing an Extension instance
    to from_issuer_subject_key_identifier(), as per our deprecation policy.
  * Support for LibreSSL 2.7.x, 2.8.x, and 2.9.0 has been removed
  * Dropped support for macOS 10.9, macOS users must upgrade to 10.10 or newer.
  * RSA generate_private_key() no longer accepts public_exponent values except
    65537 and 3 (the latter for legacy purposes).
  * X.509 certificate parsing now enforces that the version field contains
    a valid value, rather than deferring this check until version is accessed.
  * Deprecated support for Python 2
  * Added support for OpenSSH serialization format for ec, ed25519, rsa and dsa
    private keys: load_ssh_private_key() for loading and OpenSSH for writing.
  * Added support for OpenSSH certificates to load_ssh_public_key().
  * Added encrypt_at_time() and decrypt_at_time() to Fernet.
  * Added support for the SubjectInformationAccess X.509 extension.
  * Added support for parsing SignedCertificateTimestamps in OCSP responses.
  * Added support for parsing attributes in certificate signing requests via get_attribute_for_oid().
  * Added support for encoding attributes in certificate signing requests via add_attribute().
  * On OpenSSL 1.1.1d and higher cryptography now uses OpenSSL’s built-in CSPRNG
    instead of its own OS random engine because these versions of OpenSSL properly reseed on fork.
  * Added initial support for creating PKCS12 files with serialize_key_and_certificates().</changelog>
  <changelog author="dmueller@suse.com" date="1600430400">- update to 3.1:
  * **BACKWARDS INCOMPATIBLE:** Removed support for ``idna`` based
    :term:`U-label` parsing in various X.509 classes. This support was originally
    deprecated in version 2.1 and moved to an extra in 2.5.
  * Deprecated OpenSSL 1.0.2 support. OpenSSL 1.0.2 is no longer supported by
    the OpenSSL project. The next version of ``cryptography`` will drop support
    for it.
  * Deprecated support for Python 3.5. This version sees very little use and will
    be removed in the next release.
  * ``backend`` arguments to functions are no longer required and the
    default backend will automatically be selected if no ``backend`` is provided.
  * Added initial support for parsing certificates from PKCS7 files with
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_pem_pkcs7_certificates`
    and
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_der_pkcs7_certificates`
    .
  * Calling ``update`` or ``update_into`` on
    :class:`~cryptography.hazmat.primitives.ciphers.CipherContext` with ``data``
    longer than 2\ :sup:`31` bytes no longer raises an ``OverflowError``. This
    also resolves the same issue in :doc:`/fernet`.</changelog>
  <changelog author="dmueller@suse.com" date="1601294400">- update to 3.1.1:
  * wheels compiled with OpenSSL 1.1.1h.</changelog>
  <changelog author="michael@stroeder.com" date="1603713600">- update to 3.2 (bsc#1178168, CVE-2020-25659):
  * CVE-2020-25659: Attempted to make RSA PKCS#1v1.5 decryption more constant time,
    to protect against Bleichenbacher vulnerabilities. Due to limitations imposed
    by our API, we cannot completely mitigate this vulnerability.
  * Support for OpenSSL 1.0.2 has been removed.
  * Added basic support for PKCS7 signing (including SMIME) via PKCS7SignatureBuilder.
- drops 5507-mitigate-Bleichenbacher-attacks.patch on older dists</changelog>
  <changelog author="michael@stroeder.com" date="1603886400">- update to 3.2.1:
  Disable blinding on RSA public keys to address an error with
  some versions of OpenSSL.</changelog>
  <changelog author="mcepl@suse.com" date="1607256000">- Remove unnecessary dependency virtualenv.</changelog>
  <changelog author="mrueckert@suse.de" date="1607515200">- update to 3.3.0
  - BACKWARDS INCOMPATIBLE: Support for Python 3.5 has been removed
    due to low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: The GCM and AESGCM now require 64-bit
    to 1024-bit (8 byte to 128 byte) initialization vectors. This
    change is to conform with an upcoming OpenSSL release that will
    no longer support sizes outside this window.
  - BACKWARDS INCOMPATIBLE: When deserializing asymmetric keys we
    now raise ValueError rather than UnsupportedAlgorithm when an
    unsupported cipher is used. This change is to conform with an
    upcoming OpenSSL release that will no longer distinguish
    between error types.
  - BACKWARDS INCOMPATIBLE: We no longer allow loading of finite
    field Diffie-Hellman parameters of less than 512 bits in
    length. This change is to conform with an upcoming OpenSSL
    release that no longer supports smaller sizes. These keys were
    already wildly insecure and should not have been used in any
    application outside of testing.
  - Updated Windows, macOS, and manylinux wheels to be compiled
    with OpenSSL 1.1.1i.
  - Python 2 support is deprecated in cryptography. This is the
    last release that will support Python 2.
  - Added the recover_data_from_signature() function to
    RSAPublicKey for recovering the signed data from an RSA
    signature.</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 3.3.1:
  * Re-added a legacy symbol causing problems for older ``pyOpenSSL`` use</changelog>
  <changelog author="michael@stroeder.com" date="1612699200">- update to 3.3.2 (bsc#1182066, CVE-2020-36242, bsc#1198331):
  * SECURITY ISSUE: Fixed a bug where certain sequences of update()
    calls when symmetrically encrypting very large payloads (&gt;2GB) could
    result in an integer overflow, leading to buffer overflows.
    CVE-2020-36242
  - drops CVE-2020-36242-buffer-overflow.patch on older dists</changelog>
  <changelog author="daniel.garcia@suse.com" date="1676289600">- Add patch CVE-2023-23931-dont-allow-update-into.patch (bsc#1208036, CVE-2023-23931)
  * Don't allow update_into to mutate immutable objects</changelog>
</package>
<package pkgid="1163cf320b2838ea9802aa8f08ddf00ee15013045cd79bb7ffd66784b20c7947" name="python3-cryptography" arch="src">
  <version epoch="0" ver="3.3.2" rel="150400.20.3"/>
  <changelog author="tchvatal@suse.com" date="1534852800">- Update to 2.3.1:
  * updated tests for upstream wycheproof changes
  * many other tiny test tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1544097600">- Fix fdupes call</changelog>
  <changelog author="mcepl@suse.com" date="1544097601">- Update to 2.4.1:
  * Dropped support for LibreSSL 2.4.x.
  * Deprecated OpenSSL 1.0.1 support. OpenSSL 1.0.1 is no
    longer supported by the OpenSSL project. At this time there
    is no time table for dropping support, however we strongly
    encourage all users to upgrade or install cryptography from
    a wheel.
  * Added initial :doc:`OCSP &lt;/x509/ocsp&gt;` support.
  * Added support for cryptography.x509.PrecertPoison.</changelog>
  <changelog author="mpluskal@suse.com" date="1546516800">- Update to version 2.4.2:
  * Updated Windows, macOS, and manylinux1 wheels to be compiled
    with OpenSSL 1.1.0j.</changelog>
  <changelog author="michael@stroeder.com" date="1548417600">- Dependency on python-idna changed to "Recommends" aligned with
  change in upstream source (see below)
- update to 2.5:
  * BACKWARDS INCOMPATIBLE: U-label strings were deprecated in version 2.1,
    but this version removes the default idna dependency as well. If you still
    need this deprecated path please install cryptography with the idna extra:
    pip install cryptography[idna].
  * BACKWARDS INCOMPATIBLE: The minimum supported PyPy version is now 5.4.
  * Numerous classes and functions have been updated to allow bytes-like
    types for keying material and passwords, including symmetric algorithms,
    AEAD ciphers, KDFs, loading asymmetric keys, and one time password classes.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with OpenSSL 1.1.1a.
  * Added support for SHA512_224 and SHA512_256 when using OpenSSL 1.1.1.
  * Added support for SHA3_224, SHA3_256, SHA3_384, and SHA3_512 when using OpenSSL 1.1.1.
  * Added support for X448 key exchange when using OpenSSL 1.1.1.
  * Added support for SHAKE128 and SHAKE256 when using OpenSSL 1.1.1.
  * Added initial support for parsing PKCS12 files with load_key_and_certificates().
  * Added support for IssuingDistributionPoint.
  * Added rfc4514_string() method to x509.Name,
    x509.RelativeDistinguishedName, and x509.NameAttribute to format the name
    or component an RFC 4514 Distinguished Name string.
  * Added from_encoded_point(), which immediately checks if the point is on
    the curve and supports compressed points. Deprecated the previous method
    from_encoded_point().
  * Added signature_hash_algorithm to OCSPResponse.
  * Updated X25519 key exchange support to allow additional serialization
    methods. Calling public_bytes() with no arguments has been deprecated.
  * Added support for encoding compressed and uncompressed points via
    public_bytes(). Deprecated the previous method encode_point().</changelog>
  <changelog author="michael@stroeder.com" date="1551355200">- update to 2.6.1:
  * BACKWARDS INCOMPATIBLE:
    Removedcryptography.hazmat.primitives.asymmetric.utils.encode_rfc6979_signature
    andcryptography.hazmat.primitives.asymmetric.utils.decode_rfc6979_signature,
    which had been deprecated for nearly 4 years. Use encode_dss_signature()
    and decode_dss_signature()instead.
  * BACKWARDS INCOMPATIBLE: Removed cryptography.x509.Certificate.serial, which
    had been deprecated for nearly 3 years. Use serial_number instead.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with
    OpenSSL 1.1.1b.
  * Added support for Ed448 signing when using OpenSSL 1.1.1b or newer.
  * Added support for Ed25519 signing when using OpenSSL 1.1.1b or newer.
  * load_ssh_public_key() can now load ed25519 public keys.
  * Add support for easily mapping an object identifier to its elliptic curve
    class viaget_curve_for_oid().
  * Add support for OpenSSL when compiled with the no-engine
    (OPENSSL_NO_ENGINE) flag.</changelog>
  <changelog author="tchvatal@suse.com" date="1559131200">- Simplify the test execution to be more understandable</changelog>
  <changelog author="mimi.vx@gmail.com" date="1559563200">- update to 2.7
  * BACKWARDS INCOMPATIBLE: Removed the cryptography.hazmat.primitives.mac.MACContext interface.
  The CMAC and HMAC APIs have not changed, but they are no longer registered
  as MACContext instances.
  * Removed support for running our tests with setup.py test.
  * Add support for :class:`~cryptography.hazmat.primitives.poly1305.Poly1305`
  when using OpenSSL 1.1.1 or newer.
  * Support serialization with Encoding.OpenSSH and PublicFormat.OpenSSH
  in :meth:`Ed25519PublicKey.public_bytes &lt;cryptography.hazmat.primitives.asymmetric.ed25519.Ed25519PublicKey.public_bytes&gt;` .
  * Correctly allow passing a SubjectKeyIdentifier to :meth:`~cryptography.x509.AuthorityKeyIdentifier.from_issuer_subject_key_identifier`
  and deprecate passing an Extension object.</changelog>
  <changelog author="michael@stroeder.com" date="1571313600">- update to 2.8
  * Added support for Python 3.8.
  * Added class methods Poly1305.generate_tag and Poly1305.verify_tag for Poly1305 sign and verify operations.
  * Deprecated support for OpenSSL 1.0.1. Support will be removed in cryptography 2.9.
  * We now ship manylinux2010 wheels in addition to our manylinux1 wheels.
  * Added support for ed25519 and ed448 keys in the CertificateBuilder, CertificateSigningRequestBuilder, CertificateRevocationListBuilder and OCSPResponseBuilder.
  * cryptography no longer depends on asn1crypto.
  * FreshestCRL is now allowed as a CertificateRevocationList extension.</changelog>
  <changelog author="michael@stroeder.com" date="1589544000">- update to 2.9.2
  * 2.9.2 - 2020-04-22
  - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15.
  * 2.9.1 - 2020-04-21
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g.
  * 2.9 - 2020-04-02
  - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to
    low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed.
    Users on older version of OpenSSL will need to upgrade.
  - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed.
  - Removed support for calling public_bytes() with no arguments, as per
    our deprecation policy. You must now pass encoding and format.
  - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string()
    returns the RDNs as required by RFC 4514.
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f.
  - Added support for parsing single_extensions in an OCSP response.
  - NameAttribute values can now be empty strings.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1595937600">- update to 3.0
- refreshed disable-uneven-sizes-tests.patch and  skip_openssl_memleak_test.patch
  * Removed support for passing an Extension instance
    to from_issuer_subject_key_identifier(), as per our deprecation policy.
  * Support for LibreSSL 2.7.x, 2.8.x, and 2.9.0 has been removed
  * Dropped support for macOS 10.9, macOS users must upgrade to 10.10 or newer.
  * RSA generate_private_key() no longer accepts public_exponent values except
    65537 and 3 (the latter for legacy purposes).
  * X.509 certificate parsing now enforces that the version field contains
    a valid value, rather than deferring this check until version is accessed.
  * Deprecated support for Python 2
  * Added support for OpenSSH serialization format for ec, ed25519, rsa and dsa
    private keys: load_ssh_private_key() for loading and OpenSSH for writing.
  * Added support for OpenSSH certificates to load_ssh_public_key().
  * Added encrypt_at_time() and decrypt_at_time() to Fernet.
  * Added support for the SubjectInformationAccess X.509 extension.
  * Added support for parsing SignedCertificateTimestamps in OCSP responses.
  * Added support for parsing attributes in certificate signing requests via get_attribute_for_oid().
  * Added support for encoding attributes in certificate signing requests via add_attribute().
  * On OpenSSL 1.1.1d and higher cryptography now uses OpenSSL’s built-in CSPRNG
    instead of its own OS random engine because these versions of OpenSSL properly reseed on fork.
  * Added initial support for creating PKCS12 files with serialize_key_and_certificates().</changelog>
  <changelog author="dmueller@suse.com" date="1600430400">- update to 3.1:
  * **BACKWARDS INCOMPATIBLE:** Removed support for ``idna`` based
    :term:`U-label` parsing in various X.509 classes. This support was originally
    deprecated in version 2.1 and moved to an extra in 2.5.
  * Deprecated OpenSSL 1.0.2 support. OpenSSL 1.0.2 is no longer supported by
    the OpenSSL project. The next version of ``cryptography`` will drop support
    for it.
  * Deprecated support for Python 3.5. This version sees very little use and will
    be removed in the next release.
  * ``backend`` arguments to functions are no longer required and the
    default backend will automatically be selected if no ``backend`` is provided.
  * Added initial support for parsing certificates from PKCS7 files with
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_pem_pkcs7_certificates`
    and
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_der_pkcs7_certificates`
    .
  * Calling ``update`` or ``update_into`` on
    :class:`~cryptography.hazmat.primitives.ciphers.CipherContext` with ``data``
    longer than 2\ :sup:`31` bytes no longer raises an ``OverflowError``. This
    also resolves the same issue in :doc:`/fernet`.</changelog>
  <changelog author="dmueller@suse.com" date="1601294400">- update to 3.1.1:
  * wheels compiled with OpenSSL 1.1.1h.</changelog>
  <changelog author="michael@stroeder.com" date="1603713600">- update to 3.2 (bsc#1178168, CVE-2020-25659):
  * CVE-2020-25659: Attempted to make RSA PKCS#1v1.5 decryption more constant time,
    to protect against Bleichenbacher vulnerabilities. Due to limitations imposed
    by our API, we cannot completely mitigate this vulnerability.
  * Support for OpenSSL 1.0.2 has been removed.
  * Added basic support for PKCS7 signing (including SMIME) via PKCS7SignatureBuilder.
- drops 5507-mitigate-Bleichenbacher-attacks.patch on older dists</changelog>
  <changelog author="michael@stroeder.com" date="1603886400">- update to 3.2.1:
  Disable blinding on RSA public keys to address an error with
  some versions of OpenSSL.</changelog>
  <changelog author="mcepl@suse.com" date="1607256000">- Remove unnecessary dependency virtualenv.</changelog>
  <changelog author="mrueckert@suse.de" date="1607515200">- update to 3.3.0
  - BACKWARDS INCOMPATIBLE: Support for Python 3.5 has been removed
    due to low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: The GCM and AESGCM now require 64-bit
    to 1024-bit (8 byte to 128 byte) initialization vectors. This
    change is to conform with an upcoming OpenSSL release that will
    no longer support sizes outside this window.
  - BACKWARDS INCOMPATIBLE: When deserializing asymmetric keys we
    now raise ValueError rather than UnsupportedAlgorithm when an
    unsupported cipher is used. This change is to conform with an
    upcoming OpenSSL release that will no longer distinguish
    between error types.
  - BACKWARDS INCOMPATIBLE: We no longer allow loading of finite
    field Diffie-Hellman parameters of less than 512 bits in
    length. This change is to conform with an upcoming OpenSSL
    release that no longer supports smaller sizes. These keys were
    already wildly insecure and should not have been used in any
    application outside of testing.
  - Updated Windows, macOS, and manylinux wheels to be compiled
    with OpenSSL 1.1.1i.
  - Python 2 support is deprecated in cryptography. This is the
    last release that will support Python 2.
  - Added the recover_data_from_signature() function to
    RSAPublicKey for recovering the signed data from an RSA
    signature.</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 3.3.1:
  * Re-added a legacy symbol causing problems for older ``pyOpenSSL`` use</changelog>
  <changelog author="michael@stroeder.com" date="1612699200">- update to 3.3.2 (bsc#1182066, CVE-2020-36242, bsc#1198331):
  * SECURITY ISSUE: Fixed a bug where certain sequences of update()
    calls when symmetrically encrypting very large payloads (&gt;2GB) could
    result in an integer overflow, leading to buffer overflows.
    CVE-2020-36242
  - drops CVE-2020-36242-buffer-overflow.patch on older dists</changelog>
  <changelog author="daniel.garcia@suse.com" date="1676289600">- Add patch CVE-2023-23931-dont-allow-update-into.patch (bsc#1208036, CVE-2023-23931)
  * Don't allow update_into to mutate immutable objects</changelog>
</package>
<package pkgid="8d01db80914ea5adb8bfa4e7bd3ad7f8976aab6cc76859f1da5871870d8ca797" name="python3-cryptography" arch="x86_64">
  <version epoch="0" ver="3.3.2" rel="150400.20.3"/>
  <changelog author="tchvatal@suse.com" date="1534852800">- Update to 2.3.1:
  * updated tests for upstream wycheproof changes
  * many other tiny test tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1544097600">- Fix fdupes call</changelog>
  <changelog author="mcepl@suse.com" date="1544097601">- Update to 2.4.1:
  * Dropped support for LibreSSL 2.4.x.
  * Deprecated OpenSSL 1.0.1 support. OpenSSL 1.0.1 is no
    longer supported by the OpenSSL project. At this time there
    is no time table for dropping support, however we strongly
    encourage all users to upgrade or install cryptography from
    a wheel.
  * Added initial :doc:`OCSP &lt;/x509/ocsp&gt;` support.
  * Added support for cryptography.x509.PrecertPoison.</changelog>
  <changelog author="mpluskal@suse.com" date="1546516800">- Update to version 2.4.2:
  * Updated Windows, macOS, and manylinux1 wheels to be compiled
    with OpenSSL 1.1.0j.</changelog>
  <changelog author="michael@stroeder.com" date="1548417600">- Dependency on python-idna changed to "Recommends" aligned with
  change in upstream source (see below)
- update to 2.5:
  * BACKWARDS INCOMPATIBLE: U-label strings were deprecated in version 2.1,
    but this version removes the default idna dependency as well. If you still
    need this deprecated path please install cryptography with the idna extra:
    pip install cryptography[idna].
  * BACKWARDS INCOMPATIBLE: The minimum supported PyPy version is now 5.4.
  * Numerous classes and functions have been updated to allow bytes-like
    types for keying material and passwords, including symmetric algorithms,
    AEAD ciphers, KDFs, loading asymmetric keys, and one time password classes.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with OpenSSL 1.1.1a.
  * Added support for SHA512_224 and SHA512_256 when using OpenSSL 1.1.1.
  * Added support for SHA3_224, SHA3_256, SHA3_384, and SHA3_512 when using OpenSSL 1.1.1.
  * Added support for X448 key exchange when using OpenSSL 1.1.1.
  * Added support for SHAKE128 and SHAKE256 when using OpenSSL 1.1.1.
  * Added initial support for parsing PKCS12 files with load_key_and_certificates().
  * Added support for IssuingDistributionPoint.
  * Added rfc4514_string() method to x509.Name,
    x509.RelativeDistinguishedName, and x509.NameAttribute to format the name
    or component an RFC 4514 Distinguished Name string.
  * Added from_encoded_point(), which immediately checks if the point is on
    the curve and supports compressed points. Deprecated the previous method
    from_encoded_point().
  * Added signature_hash_algorithm to OCSPResponse.
  * Updated X25519 key exchange support to allow additional serialization
    methods. Calling public_bytes() with no arguments has been deprecated.
  * Added support for encoding compressed and uncompressed points via
    public_bytes(). Deprecated the previous method encode_point().</changelog>
  <changelog author="michael@stroeder.com" date="1551355200">- update to 2.6.1:
  * BACKWARDS INCOMPATIBLE:
    Removedcryptography.hazmat.primitives.asymmetric.utils.encode_rfc6979_signature
    andcryptography.hazmat.primitives.asymmetric.utils.decode_rfc6979_signature,
    which had been deprecated for nearly 4 years. Use encode_dss_signature()
    and decode_dss_signature()instead.
  * BACKWARDS INCOMPATIBLE: Removed cryptography.x509.Certificate.serial, which
    had been deprecated for nearly 3 years. Use serial_number instead.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with
    OpenSSL 1.1.1b.
  * Added support for Ed448 signing when using OpenSSL 1.1.1b or newer.
  * Added support for Ed25519 signing when using OpenSSL 1.1.1b or newer.
  * load_ssh_public_key() can now load ed25519 public keys.
  * Add support for easily mapping an object identifier to its elliptic curve
    class viaget_curve_for_oid().
  * Add support for OpenSSL when compiled with the no-engine
    (OPENSSL_NO_ENGINE) flag.</changelog>
  <changelog author="tchvatal@suse.com" date="1559131200">- Simplify the test execution to be more understandable</changelog>
  <changelog author="mimi.vx@gmail.com" date="1559563200">- update to 2.7
  * BACKWARDS INCOMPATIBLE: Removed the cryptography.hazmat.primitives.mac.MACContext interface.
  The CMAC and HMAC APIs have not changed, but they are no longer registered
  as MACContext instances.
  * Removed support for running our tests with setup.py test.
  * Add support for :class:`~cryptography.hazmat.primitives.poly1305.Poly1305`
  when using OpenSSL 1.1.1 or newer.
  * Support serialization with Encoding.OpenSSH and PublicFormat.OpenSSH
  in :meth:`Ed25519PublicKey.public_bytes &lt;cryptography.hazmat.primitives.asymmetric.ed25519.Ed25519PublicKey.public_bytes&gt;` .
  * Correctly allow passing a SubjectKeyIdentifier to :meth:`~cryptography.x509.AuthorityKeyIdentifier.from_issuer_subject_key_identifier`
  and deprecate passing an Extension object.</changelog>
  <changelog author="michael@stroeder.com" date="1571313600">- update to 2.8
  * Added support for Python 3.8.
  * Added class methods Poly1305.generate_tag and Poly1305.verify_tag for Poly1305 sign and verify operations.
  * Deprecated support for OpenSSL 1.0.1. Support will be removed in cryptography 2.9.
  * We now ship manylinux2010 wheels in addition to our manylinux1 wheels.
  * Added support for ed25519 and ed448 keys in the CertificateBuilder, CertificateSigningRequestBuilder, CertificateRevocationListBuilder and OCSPResponseBuilder.
  * cryptography no longer depends on asn1crypto.
  * FreshestCRL is now allowed as a CertificateRevocationList extension.</changelog>
  <changelog author="michael@stroeder.com" date="1589544000">- update to 2.9.2
  * 2.9.2 - 2020-04-22
  - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15.
  * 2.9.1 - 2020-04-21
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g.
  * 2.9 - 2020-04-02
  - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to
    low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed.
    Users on older version of OpenSSL will need to upgrade.
  - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed.
  - Removed support for calling public_bytes() with no arguments, as per
    our deprecation policy. You must now pass encoding and format.
  - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string()
    returns the RDNs as required by RFC 4514.
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f.
  - Added support for parsing single_extensions in an OCSP response.
  - NameAttribute values can now be empty strings.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1595937600">- update to 3.0
- refreshed disable-uneven-sizes-tests.patch and  skip_openssl_memleak_test.patch
  * Removed support for passing an Extension instance
    to from_issuer_subject_key_identifier(), as per our deprecation policy.
  * Support for LibreSSL 2.7.x, 2.8.x, and 2.9.0 has been removed
  * Dropped support for macOS 10.9, macOS users must upgrade to 10.10 or newer.
  * RSA generate_private_key() no longer accepts public_exponent values except
    65537 and 3 (the latter for legacy purposes).
  * X.509 certificate parsing now enforces that the version field contains
    a valid value, rather than deferring this check until version is accessed.
  * Deprecated support for Python 2
  * Added support for OpenSSH serialization format for ec, ed25519, rsa and dsa
    private keys: load_ssh_private_key() for loading and OpenSSH for writing.
  * Added support for OpenSSH certificates to load_ssh_public_key().
  * Added encrypt_at_time() and decrypt_at_time() to Fernet.
  * Added support for the SubjectInformationAccess X.509 extension.
  * Added support for parsing SignedCertificateTimestamps in OCSP responses.
  * Added support for parsing attributes in certificate signing requests via get_attribute_for_oid().
  * Added support for encoding attributes in certificate signing requests via add_attribute().
  * On OpenSSL 1.1.1d and higher cryptography now uses OpenSSL’s built-in CSPRNG
    instead of its own OS random engine because these versions of OpenSSL properly reseed on fork.
  * Added initial support for creating PKCS12 files with serialize_key_and_certificates().</changelog>
  <changelog author="dmueller@suse.com" date="1600430400">- update to 3.1:
  * **BACKWARDS INCOMPATIBLE:** Removed support for ``idna`` based
    :term:`U-label` parsing in various X.509 classes. This support was originally
    deprecated in version 2.1 and moved to an extra in 2.5.
  * Deprecated OpenSSL 1.0.2 support. OpenSSL 1.0.2 is no longer supported by
    the OpenSSL project. The next version of ``cryptography`` will drop support
    for it.
  * Deprecated support for Python 3.5. This version sees very little use and will
    be removed in the next release.
  * ``backend`` arguments to functions are no longer required and the
    default backend will automatically be selected if no ``backend`` is provided.
  * Added initial support for parsing certificates from PKCS7 files with
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_pem_pkcs7_certificates`
    and
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_der_pkcs7_certificates`
    .
  * Calling ``update`` or ``update_into`` on
    :class:`~cryptography.hazmat.primitives.ciphers.CipherContext` with ``data``
    longer than 2\ :sup:`31` bytes no longer raises an ``OverflowError``. This
    also resolves the same issue in :doc:`/fernet`.</changelog>
  <changelog author="dmueller@suse.com" date="1601294400">- update to 3.1.1:
  * wheels compiled with OpenSSL 1.1.1h.</changelog>
  <changelog author="michael@stroeder.com" date="1603713600">- update to 3.2 (bsc#1178168, CVE-2020-25659):
  * CVE-2020-25659: Attempted to make RSA PKCS#1v1.5 decryption more constant time,
    to protect against Bleichenbacher vulnerabilities. Due to limitations imposed
    by our API, we cannot completely mitigate this vulnerability.
  * Support for OpenSSL 1.0.2 has been removed.
  * Added basic support for PKCS7 signing (including SMIME) via PKCS7SignatureBuilder.
- drops 5507-mitigate-Bleichenbacher-attacks.patch on older dists</changelog>
  <changelog author="michael@stroeder.com" date="1603886400">- update to 3.2.1:
  Disable blinding on RSA public keys to address an error with
  some versions of OpenSSL.</changelog>
  <changelog author="mcepl@suse.com" date="1607256000">- Remove unnecessary dependency virtualenv.</changelog>
  <changelog author="mrueckert@suse.de" date="1607515200">- update to 3.3.0
  - BACKWARDS INCOMPATIBLE: Support for Python 3.5 has been removed
    due to low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: The GCM and AESGCM now require 64-bit
    to 1024-bit (8 byte to 128 byte) initialization vectors. This
    change is to conform with an upcoming OpenSSL release that will
    no longer support sizes outside this window.
  - BACKWARDS INCOMPATIBLE: When deserializing asymmetric keys we
    now raise ValueError rather than UnsupportedAlgorithm when an
    unsupported cipher is used. This change is to conform with an
    upcoming OpenSSL release that will no longer distinguish
    between error types.
  - BACKWARDS INCOMPATIBLE: We no longer allow loading of finite
    field Diffie-Hellman parameters of less than 512 bits in
    length. This change is to conform with an upcoming OpenSSL
    release that no longer supports smaller sizes. These keys were
    already wildly insecure and should not have been used in any
    application outside of testing.
  - Updated Windows, macOS, and manylinux wheels to be compiled
    with OpenSSL 1.1.1i.
  - Python 2 support is deprecated in cryptography. This is the
    last release that will support Python 2.
  - Added the recover_data_from_signature() function to
    RSAPublicKey for recovering the signed data from an RSA
    signature.</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 3.3.1:
  * Re-added a legacy symbol causing problems for older ``pyOpenSSL`` use</changelog>
  <changelog author="michael@stroeder.com" date="1612699200">- update to 3.3.2 (bsc#1182066, CVE-2020-36242, bsc#1198331):
  * SECURITY ISSUE: Fixed a bug where certain sequences of update()
    calls when symmetrically encrypting very large payloads (&gt;2GB) could
    result in an integer overflow, leading to buffer overflows.
    CVE-2020-36242
  - drops CVE-2020-36242-buffer-overflow.patch on older dists</changelog>
  <changelog author="daniel.garcia@suse.com" date="1676289600">- Add patch CVE-2023-23931-dont-allow-update-into.patch (bsc#1208036, CVE-2023-23931)
  * Don't allow update_into to mutate immutable objects</changelog>
</package>
<package pkgid="d06ef5d371590a853f397809bb32b29d80ebe610838a1f2ee3bc50b81b4aa76d" name="python3-cryptography" arch="aarch64">
  <version epoch="0" ver="3.3.2" rel="150400.23.1"/>
  <changelog author="tchvatal@suse.com" date="1544097600">- Fix fdupes call</changelog>
  <changelog author="mcepl@suse.com" date="1544097601">- Update to 2.4.1:
  * Dropped support for LibreSSL 2.4.x.
  * Deprecated OpenSSL 1.0.1 support. OpenSSL 1.0.1 is no
    longer supported by the OpenSSL project. At this time there
    is no time table for dropping support, however we strongly
    encourage all users to upgrade or install cryptography from
    a wheel.
  * Added initial :doc:`OCSP &lt;/x509/ocsp&gt;` support.
  * Added support for cryptography.x509.PrecertPoison.</changelog>
  <changelog author="mpluskal@suse.com" date="1546516800">- Update to version 2.4.2:
  * Updated Windows, macOS, and manylinux1 wheels to be compiled
    with OpenSSL 1.1.0j.</changelog>
  <changelog author="michael@stroeder.com" date="1548417600">- Dependency on python-idna changed to "Recommends" aligned with
  change in upstream source (see below)
- update to 2.5:
  * BACKWARDS INCOMPATIBLE: U-label strings were deprecated in version 2.1,
    but this version removes the default idna dependency as well. If you still
    need this deprecated path please install cryptography with the idna extra:
    pip install cryptography[idna].
  * BACKWARDS INCOMPATIBLE: The minimum supported PyPy version is now 5.4.
  * Numerous classes and functions have been updated to allow bytes-like
    types for keying material and passwords, including symmetric algorithms,
    AEAD ciphers, KDFs, loading asymmetric keys, and one time password classes.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with OpenSSL 1.1.1a.
  * Added support for SHA512_224 and SHA512_256 when using OpenSSL 1.1.1.
  * Added support for SHA3_224, SHA3_256, SHA3_384, and SHA3_512 when using OpenSSL 1.1.1.
  * Added support for X448 key exchange when using OpenSSL 1.1.1.
  * Added support for SHAKE128 and SHAKE256 when using OpenSSL 1.1.1.
  * Added initial support for parsing PKCS12 files with load_key_and_certificates().
  * Added support for IssuingDistributionPoint.
  * Added rfc4514_string() method to x509.Name,
    x509.RelativeDistinguishedName, and x509.NameAttribute to format the name
    or component an RFC 4514 Distinguished Name string.
  * Added from_encoded_point(), which immediately checks if the point is on
    the curve and supports compressed points. Deprecated the previous method
    from_encoded_point().
  * Added signature_hash_algorithm to OCSPResponse.
  * Updated X25519 key exchange support to allow additional serialization
    methods. Calling public_bytes() with no arguments has been deprecated.
  * Added support for encoding compressed and uncompressed points via
    public_bytes(). Deprecated the previous method encode_point().</changelog>
  <changelog author="michael@stroeder.com" date="1551355200">- update to 2.6.1:
  * BACKWARDS INCOMPATIBLE:
    Removedcryptography.hazmat.primitives.asymmetric.utils.encode_rfc6979_signature
    andcryptography.hazmat.primitives.asymmetric.utils.decode_rfc6979_signature,
    which had been deprecated for nearly 4 years. Use encode_dss_signature()
    and decode_dss_signature()instead.
  * BACKWARDS INCOMPATIBLE: Removed cryptography.x509.Certificate.serial, which
    had been deprecated for nearly 3 years. Use serial_number instead.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with
    OpenSSL 1.1.1b.
  * Added support for Ed448 signing when using OpenSSL 1.1.1b or newer.
  * Added support for Ed25519 signing when using OpenSSL 1.1.1b or newer.
  * load_ssh_public_key() can now load ed25519 public keys.
  * Add support for easily mapping an object identifier to its elliptic curve
    class viaget_curve_for_oid().
  * Add support for OpenSSL when compiled with the no-engine
    (OPENSSL_NO_ENGINE) flag.</changelog>
  <changelog author="tchvatal@suse.com" date="1559131200">- Simplify the test execution to be more understandable</changelog>
  <changelog author="mimi.vx@gmail.com" date="1559563200">- update to 2.7
  * BACKWARDS INCOMPATIBLE: Removed the cryptography.hazmat.primitives.mac.MACContext interface.
  The CMAC and HMAC APIs have not changed, but they are no longer registered
  as MACContext instances.
  * Removed support for running our tests with setup.py test.
  * Add support for :class:`~cryptography.hazmat.primitives.poly1305.Poly1305`
  when using OpenSSL 1.1.1 or newer.
  * Support serialization with Encoding.OpenSSH and PublicFormat.OpenSSH
  in :meth:`Ed25519PublicKey.public_bytes &lt;cryptography.hazmat.primitives.asymmetric.ed25519.Ed25519PublicKey.public_bytes&gt;` .
  * Correctly allow passing a SubjectKeyIdentifier to :meth:`~cryptography.x509.AuthorityKeyIdentifier.from_issuer_subject_key_identifier`
  and deprecate passing an Extension object.</changelog>
  <changelog author="michael@stroeder.com" date="1571313600">- update to 2.8
  * Added support for Python 3.8.
  * Added class methods Poly1305.generate_tag and Poly1305.verify_tag for Poly1305 sign and verify operations.
  * Deprecated support for OpenSSL 1.0.1. Support will be removed in cryptography 2.9.
  * We now ship manylinux2010 wheels in addition to our manylinux1 wheels.
  * Added support for ed25519 and ed448 keys in the CertificateBuilder, CertificateSigningRequestBuilder, CertificateRevocationListBuilder and OCSPResponseBuilder.
  * cryptography no longer depends on asn1crypto.
  * FreshestCRL is now allowed as a CertificateRevocationList extension.</changelog>
  <changelog author="michael@stroeder.com" date="1589544000">- update to 2.9.2
  * 2.9.2 - 2020-04-22
  - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15.
  * 2.9.1 - 2020-04-21
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g.
  * 2.9 - 2020-04-02
  - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to
    low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed.
    Users on older version of OpenSSL will need to upgrade.
  - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed.
  - Removed support for calling public_bytes() with no arguments, as per
    our deprecation policy. You must now pass encoding and format.
  - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string()
    returns the RDNs as required by RFC 4514.
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f.
  - Added support for parsing single_extensions in an OCSP response.
  - NameAttribute values can now be empty strings.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1595937600">- update to 3.0
- refreshed disable-uneven-sizes-tests.patch and  skip_openssl_memleak_test.patch
  * Removed support for passing an Extension instance
    to from_issuer_subject_key_identifier(), as per our deprecation policy.
  * Support for LibreSSL 2.7.x, 2.8.x, and 2.9.0 has been removed
  * Dropped support for macOS 10.9, macOS users must upgrade to 10.10 or newer.
  * RSA generate_private_key() no longer accepts public_exponent values except
    65537 and 3 (the latter for legacy purposes).
  * X.509 certificate parsing now enforces that the version field contains
    a valid value, rather than deferring this check until version is accessed.
  * Deprecated support for Python 2
  * Added support for OpenSSH serialization format for ec, ed25519, rsa and dsa
    private keys: load_ssh_private_key() for loading and OpenSSH for writing.
  * Added support for OpenSSH certificates to load_ssh_public_key().
  * Added encrypt_at_time() and decrypt_at_time() to Fernet.
  * Added support for the SubjectInformationAccess X.509 extension.
  * Added support for parsing SignedCertificateTimestamps in OCSP responses.
  * Added support for parsing attributes in certificate signing requests via get_attribute_for_oid().
  * Added support for encoding attributes in certificate signing requests via add_attribute().
  * On OpenSSL 1.1.1d and higher cryptography now uses OpenSSL’s built-in CSPRNG
    instead of its own OS random engine because these versions of OpenSSL properly reseed on fork.
  * Added initial support for creating PKCS12 files with serialize_key_and_certificates().</changelog>
  <changelog author="dmueller@suse.com" date="1600430400">- update to 3.1:
  * **BACKWARDS INCOMPATIBLE:** Removed support for ``idna`` based
    :term:`U-label` parsing in various X.509 classes. This support was originally
    deprecated in version 2.1 and moved to an extra in 2.5.
  * Deprecated OpenSSL 1.0.2 support. OpenSSL 1.0.2 is no longer supported by
    the OpenSSL project. The next version of ``cryptography`` will drop support
    for it.
  * Deprecated support for Python 3.5. This version sees very little use and will
    be removed in the next release.
  * ``backend`` arguments to functions are no longer required and the
    default backend will automatically be selected if no ``backend`` is provided.
  * Added initial support for parsing certificates from PKCS7 files with
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_pem_pkcs7_certificates`
    and
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_der_pkcs7_certificates`
    .
  * Calling ``update`` or ``update_into`` on
    :class:`~cryptography.hazmat.primitives.ciphers.CipherContext` with ``data``
    longer than 2\ :sup:`31` bytes no longer raises an ``OverflowError``. This
    also resolves the same issue in :doc:`/fernet`.</changelog>
  <changelog author="dmueller@suse.com" date="1601294400">- update to 3.1.1:
  * wheels compiled with OpenSSL 1.1.1h.</changelog>
  <changelog author="michael@stroeder.com" date="1603713600">- update to 3.2 (bsc#1178168, CVE-2020-25659):
  * CVE-2020-25659: Attempted to make RSA PKCS#1v1.5 decryption more constant time,
    to protect against Bleichenbacher vulnerabilities. Due to limitations imposed
    by our API, we cannot completely mitigate this vulnerability.
  * Support for OpenSSL 1.0.2 has been removed.
  * Added basic support for PKCS7 signing (including SMIME) via PKCS7SignatureBuilder.
- drops 5507-mitigate-Bleichenbacher-attacks.patch on older dists</changelog>
  <changelog author="michael@stroeder.com" date="1603886400">- update to 3.2.1:
  Disable blinding on RSA public keys to address an error with
  some versions of OpenSSL.</changelog>
  <changelog author="mcepl@suse.com" date="1607256000">- Remove unnecessary dependency virtualenv.</changelog>
  <changelog author="mrueckert@suse.de" date="1607515200">- update to 3.3.0
  - BACKWARDS INCOMPATIBLE: Support for Python 3.5 has been removed
    due to low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: The GCM and AESGCM now require 64-bit
    to 1024-bit (8 byte to 128 byte) initialization vectors. This
    change is to conform with an upcoming OpenSSL release that will
    no longer support sizes outside this window.
  - BACKWARDS INCOMPATIBLE: When deserializing asymmetric keys we
    now raise ValueError rather than UnsupportedAlgorithm when an
    unsupported cipher is used. This change is to conform with an
    upcoming OpenSSL release that will no longer distinguish
    between error types.
  - BACKWARDS INCOMPATIBLE: We no longer allow loading of finite
    field Diffie-Hellman parameters of less than 512 bits in
    length. This change is to conform with an upcoming OpenSSL
    release that no longer supports smaller sizes. These keys were
    already wildly insecure and should not have been used in any
    application outside of testing.
  - Updated Windows, macOS, and manylinux wheels to be compiled
    with OpenSSL 1.1.1i.
  - Python 2 support is deprecated in cryptography. This is the
    last release that will support Python 2.
  - Added the recover_data_from_signature() function to
    RSAPublicKey for recovering the signed data from an RSA
    signature.</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 3.3.1:
  * Re-added a legacy symbol causing problems for older ``pyOpenSSL`` use</changelog>
  <changelog author="michael@stroeder.com" date="1612699200">- update to 3.3.2 (bsc#1182066, CVE-2020-36242, bsc#1198331):
  * SECURITY ISSUE: Fixed a bug where certain sequences of update()
    calls when symmetrically encrypting very large payloads (&gt;2GB) could
    result in an integer overflow, leading to buffer overflows.
    CVE-2020-36242
  - drops CVE-2020-36242-buffer-overflow.patch on older dists</changelog>
  <changelog author="daniel.garcia@suse.com" date="1676289600">- Add patch CVE-2023-23931-dont-allow-update-into.patch (bsc#1208036, CVE-2023-23931)
  * Don't allow update_into to mutate immutable objects</changelog>
  <changelog author="daniel.garcia@suse.com" date="1701259200">- Add CVE-2023-49083.patch to fix A null-pointer-dereference and
  segfault could occur when loading certificates from a PKCS#7 bundle.
  bsc#1217592</changelog>
</package>
<package pkgid="3bfc8cfae91d3de265e3b39f3076abf7b18213fd6bc502c18051ccf5c2644ddc" name="python3-cryptography" arch="ppc64le">
  <version epoch="0" ver="3.3.2" rel="150400.23.1"/>
  <changelog author="tchvatal@suse.com" date="1544097600">- Fix fdupes call</changelog>
  <changelog author="mcepl@suse.com" date="1544097601">- Update to 2.4.1:
  * Dropped support for LibreSSL 2.4.x.
  * Deprecated OpenSSL 1.0.1 support. OpenSSL 1.0.1 is no
    longer supported by the OpenSSL project. At this time there
    is no time table for dropping support, however we strongly
    encourage all users to upgrade or install cryptography from
    a wheel.
  * Added initial :doc:`OCSP &lt;/x509/ocsp&gt;` support.
  * Added support for cryptography.x509.PrecertPoison.</changelog>
  <changelog author="mpluskal@suse.com" date="1546516800">- Update to version 2.4.2:
  * Updated Windows, macOS, and manylinux1 wheels to be compiled
    with OpenSSL 1.1.0j.</changelog>
  <changelog author="michael@stroeder.com" date="1548417600">- Dependency on python-idna changed to "Recommends" aligned with
  change in upstream source (see below)
- update to 2.5:
  * BACKWARDS INCOMPATIBLE: U-label strings were deprecated in version 2.1,
    but this version removes the default idna dependency as well. If you still
    need this deprecated path please install cryptography with the idna extra:
    pip install cryptography[idna].
  * BACKWARDS INCOMPATIBLE: The minimum supported PyPy version is now 5.4.
  * Numerous classes and functions have been updated to allow bytes-like
    types for keying material and passwords, including symmetric algorithms,
    AEAD ciphers, KDFs, loading asymmetric keys, and one time password classes.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with OpenSSL 1.1.1a.
  * Added support for SHA512_224 and SHA512_256 when using OpenSSL 1.1.1.
  * Added support for SHA3_224, SHA3_256, SHA3_384, and SHA3_512 when using OpenSSL 1.1.1.
  * Added support for X448 key exchange when using OpenSSL 1.1.1.
  * Added support for SHAKE128 and SHAKE256 when using OpenSSL 1.1.1.
  * Added initial support for parsing PKCS12 files with load_key_and_certificates().
  * Added support for IssuingDistributionPoint.
  * Added rfc4514_string() method to x509.Name,
    x509.RelativeDistinguishedName, and x509.NameAttribute to format the name
    or component an RFC 4514 Distinguished Name string.
  * Added from_encoded_point(), which immediately checks if the point is on
    the curve and supports compressed points. Deprecated the previous method
    from_encoded_point().
  * Added signature_hash_algorithm to OCSPResponse.
  * Updated X25519 key exchange support to allow additional serialization
    methods. Calling public_bytes() with no arguments has been deprecated.
  * Added support for encoding compressed and uncompressed points via
    public_bytes(). Deprecated the previous method encode_point().</changelog>
  <changelog author="michael@stroeder.com" date="1551355200">- update to 2.6.1:
  * BACKWARDS INCOMPATIBLE:
    Removedcryptography.hazmat.primitives.asymmetric.utils.encode_rfc6979_signature
    andcryptography.hazmat.primitives.asymmetric.utils.decode_rfc6979_signature,
    which had been deprecated for nearly 4 years. Use encode_dss_signature()
    and decode_dss_signature()instead.
  * BACKWARDS INCOMPATIBLE: Removed cryptography.x509.Certificate.serial, which
    had been deprecated for nearly 3 years. Use serial_number instead.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with
    OpenSSL 1.1.1b.
  * Added support for Ed448 signing when using OpenSSL 1.1.1b or newer.
  * Added support for Ed25519 signing when using OpenSSL 1.1.1b or newer.
  * load_ssh_public_key() can now load ed25519 public keys.
  * Add support for easily mapping an object identifier to its elliptic curve
    class viaget_curve_for_oid().
  * Add support for OpenSSL when compiled with the no-engine
    (OPENSSL_NO_ENGINE) flag.</changelog>
  <changelog author="tchvatal@suse.com" date="1559131200">- Simplify the test execution to be more understandable</changelog>
  <changelog author="mimi.vx@gmail.com" date="1559563200">- update to 2.7
  * BACKWARDS INCOMPATIBLE: Removed the cryptography.hazmat.primitives.mac.MACContext interface.
  The CMAC and HMAC APIs have not changed, but they are no longer registered
  as MACContext instances.
  * Removed support for running our tests with setup.py test.
  * Add support for :class:`~cryptography.hazmat.primitives.poly1305.Poly1305`
  when using OpenSSL 1.1.1 or newer.
  * Support serialization with Encoding.OpenSSH and PublicFormat.OpenSSH
  in :meth:`Ed25519PublicKey.public_bytes &lt;cryptography.hazmat.primitives.asymmetric.ed25519.Ed25519PublicKey.public_bytes&gt;` .
  * Correctly allow passing a SubjectKeyIdentifier to :meth:`~cryptography.x509.AuthorityKeyIdentifier.from_issuer_subject_key_identifier`
  and deprecate passing an Extension object.</changelog>
  <changelog author="michael@stroeder.com" date="1571313600">- update to 2.8
  * Added support for Python 3.8.
  * Added class methods Poly1305.generate_tag and Poly1305.verify_tag for Poly1305 sign and verify operations.
  * Deprecated support for OpenSSL 1.0.1. Support will be removed in cryptography 2.9.
  * We now ship manylinux2010 wheels in addition to our manylinux1 wheels.
  * Added support for ed25519 and ed448 keys in the CertificateBuilder, CertificateSigningRequestBuilder, CertificateRevocationListBuilder and OCSPResponseBuilder.
  * cryptography no longer depends on asn1crypto.
  * FreshestCRL is now allowed as a CertificateRevocationList extension.</changelog>
  <changelog author="michael@stroeder.com" date="1589544000">- update to 2.9.2
  * 2.9.2 - 2020-04-22
  - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15.
  * 2.9.1 - 2020-04-21
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g.
  * 2.9 - 2020-04-02
  - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to
    low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed.
    Users on older version of OpenSSL will need to upgrade.
  - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed.
  - Removed support for calling public_bytes() with no arguments, as per
    our deprecation policy. You must now pass encoding and format.
  - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string()
    returns the RDNs as required by RFC 4514.
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f.
  - Added support for parsing single_extensions in an OCSP response.
  - NameAttribute values can now be empty strings.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1595937600">- update to 3.0
- refreshed disable-uneven-sizes-tests.patch and  skip_openssl_memleak_test.patch
  * Removed support for passing an Extension instance
    to from_issuer_subject_key_identifier(), as per our deprecation policy.
  * Support for LibreSSL 2.7.x, 2.8.x, and 2.9.0 has been removed
  * Dropped support for macOS 10.9, macOS users must upgrade to 10.10 or newer.
  * RSA generate_private_key() no longer accepts public_exponent values except
    65537 and 3 (the latter for legacy purposes).
  * X.509 certificate parsing now enforces that the version field contains
    a valid value, rather than deferring this check until version is accessed.
  * Deprecated support for Python 2
  * Added support for OpenSSH serialization format for ec, ed25519, rsa and dsa
    private keys: load_ssh_private_key() for loading and OpenSSH for writing.
  * Added support for OpenSSH certificates to load_ssh_public_key().
  * Added encrypt_at_time() and decrypt_at_time() to Fernet.
  * Added support for the SubjectInformationAccess X.509 extension.
  * Added support for parsing SignedCertificateTimestamps in OCSP responses.
  * Added support for parsing attributes in certificate signing requests via get_attribute_for_oid().
  * Added support for encoding attributes in certificate signing requests via add_attribute().
  * On OpenSSL 1.1.1d and higher cryptography now uses OpenSSL’s built-in CSPRNG
    instead of its own OS random engine because these versions of OpenSSL properly reseed on fork.
  * Added initial support for creating PKCS12 files with serialize_key_and_certificates().</changelog>
  <changelog author="dmueller@suse.com" date="1600430400">- update to 3.1:
  * **BACKWARDS INCOMPATIBLE:** Removed support for ``idna`` based
    :term:`U-label` parsing in various X.509 classes. This support was originally
    deprecated in version 2.1 and moved to an extra in 2.5.
  * Deprecated OpenSSL 1.0.2 support. OpenSSL 1.0.2 is no longer supported by
    the OpenSSL project. The next version of ``cryptography`` will drop support
    for it.
  * Deprecated support for Python 3.5. This version sees very little use and will
    be removed in the next release.
  * ``backend`` arguments to functions are no longer required and the
    default backend will automatically be selected if no ``backend`` is provided.
  * Added initial support for parsing certificates from PKCS7 files with
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_pem_pkcs7_certificates`
    and
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_der_pkcs7_certificates`
    .
  * Calling ``update`` or ``update_into`` on
    :class:`~cryptography.hazmat.primitives.ciphers.CipherContext` with ``data``
    longer than 2\ :sup:`31` bytes no longer raises an ``OverflowError``. This
    also resolves the same issue in :doc:`/fernet`.</changelog>
  <changelog author="dmueller@suse.com" date="1601294400">- update to 3.1.1:
  * wheels compiled with OpenSSL 1.1.1h.</changelog>
  <changelog author="michael@stroeder.com" date="1603713600">- update to 3.2 (bsc#1178168, CVE-2020-25659):
  * CVE-2020-25659: Attempted to make RSA PKCS#1v1.5 decryption more constant time,
    to protect against Bleichenbacher vulnerabilities. Due to limitations imposed
    by our API, we cannot completely mitigate this vulnerability.
  * Support for OpenSSL 1.0.2 has been removed.
  * Added basic support for PKCS7 signing (including SMIME) via PKCS7SignatureBuilder.
- drops 5507-mitigate-Bleichenbacher-attacks.patch on older dists</changelog>
  <changelog author="michael@stroeder.com" date="1603886400">- update to 3.2.1:
  Disable blinding on RSA public keys to address an error with
  some versions of OpenSSL.</changelog>
  <changelog author="mcepl@suse.com" date="1607256000">- Remove unnecessary dependency virtualenv.</changelog>
  <changelog author="mrueckert@suse.de" date="1607515200">- update to 3.3.0
  - BACKWARDS INCOMPATIBLE: Support for Python 3.5 has been removed
    due to low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: The GCM and AESGCM now require 64-bit
    to 1024-bit (8 byte to 128 byte) initialization vectors. This
    change is to conform with an upcoming OpenSSL release that will
    no longer support sizes outside this window.
  - BACKWARDS INCOMPATIBLE: When deserializing asymmetric keys we
    now raise ValueError rather than UnsupportedAlgorithm when an
    unsupported cipher is used. This change is to conform with an
    upcoming OpenSSL release that will no longer distinguish
    between error types.
  - BACKWARDS INCOMPATIBLE: We no longer allow loading of finite
    field Diffie-Hellman parameters of less than 512 bits in
    length. This change is to conform with an upcoming OpenSSL
    release that no longer supports smaller sizes. These keys were
    already wildly insecure and should not have been used in any
    application outside of testing.
  - Updated Windows, macOS, and manylinux wheels to be compiled
    with OpenSSL 1.1.1i.
  - Python 2 support is deprecated in cryptography. This is the
    last release that will support Python 2.
  - Added the recover_data_from_signature() function to
    RSAPublicKey for recovering the signed data from an RSA
    signature.</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 3.3.1:
  * Re-added a legacy symbol causing problems for older ``pyOpenSSL`` use</changelog>
  <changelog author="michael@stroeder.com" date="1612699200">- update to 3.3.2 (bsc#1182066, CVE-2020-36242, bsc#1198331):
  * SECURITY ISSUE: Fixed a bug where certain sequences of update()
    calls when symmetrically encrypting very large payloads (&gt;2GB) could
    result in an integer overflow, leading to buffer overflows.
    CVE-2020-36242
  - drops CVE-2020-36242-buffer-overflow.patch on older dists</changelog>
  <changelog author="daniel.garcia@suse.com" date="1676289600">- Add patch CVE-2023-23931-dont-allow-update-into.patch (bsc#1208036, CVE-2023-23931)
  * Don't allow update_into to mutate immutable objects</changelog>
  <changelog author="daniel.garcia@suse.com" date="1701259200">- Add CVE-2023-49083.patch to fix A null-pointer-dereference and
  segfault could occur when loading certificates from a PKCS#7 bundle.
  bsc#1217592</changelog>
</package>
<package pkgid="306dce7600fd5f5c5a8e0975e959a21477edb06250e4a31fdd83e692d377708f" name="python3-cryptography" arch="s390x">
  <version epoch="0" ver="3.3.2" rel="150400.23.1"/>
  <changelog author="tchvatal@suse.com" date="1544097600">- Fix fdupes call</changelog>
  <changelog author="mcepl@suse.com" date="1544097601">- Update to 2.4.1:
  * Dropped support for LibreSSL 2.4.x.
  * Deprecated OpenSSL 1.0.1 support. OpenSSL 1.0.1 is no
    longer supported by the OpenSSL project. At this time there
    is no time table for dropping support, however we strongly
    encourage all users to upgrade or install cryptography from
    a wheel.
  * Added initial :doc:`OCSP &lt;/x509/ocsp&gt;` support.
  * Added support for cryptography.x509.PrecertPoison.</changelog>
  <changelog author="mpluskal@suse.com" date="1546516800">- Update to version 2.4.2:
  * Updated Windows, macOS, and manylinux1 wheels to be compiled
    with OpenSSL 1.1.0j.</changelog>
  <changelog author="michael@stroeder.com" date="1548417600">- Dependency on python-idna changed to "Recommends" aligned with
  change in upstream source (see below)
- update to 2.5:
  * BACKWARDS INCOMPATIBLE: U-label strings were deprecated in version 2.1,
    but this version removes the default idna dependency as well. If you still
    need this deprecated path please install cryptography with the idna extra:
    pip install cryptography[idna].
  * BACKWARDS INCOMPATIBLE: The minimum supported PyPy version is now 5.4.
  * Numerous classes and functions have been updated to allow bytes-like
    types for keying material and passwords, including symmetric algorithms,
    AEAD ciphers, KDFs, loading asymmetric keys, and one time password classes.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with OpenSSL 1.1.1a.
  * Added support for SHA512_224 and SHA512_256 when using OpenSSL 1.1.1.
  * Added support for SHA3_224, SHA3_256, SHA3_384, and SHA3_512 when using OpenSSL 1.1.1.
  * Added support for X448 key exchange when using OpenSSL 1.1.1.
  * Added support for SHAKE128 and SHAKE256 when using OpenSSL 1.1.1.
  * Added initial support for parsing PKCS12 files with load_key_and_certificates().
  * Added support for IssuingDistributionPoint.
  * Added rfc4514_string() method to x509.Name,
    x509.RelativeDistinguishedName, and x509.NameAttribute to format the name
    or component an RFC 4514 Distinguished Name string.
  * Added from_encoded_point(), which immediately checks if the point is on
    the curve and supports compressed points. Deprecated the previous method
    from_encoded_point().
  * Added signature_hash_algorithm to OCSPResponse.
  * Updated X25519 key exchange support to allow additional serialization
    methods. Calling public_bytes() with no arguments has been deprecated.
  * Added support for encoding compressed and uncompressed points via
    public_bytes(). Deprecated the previous method encode_point().</changelog>
  <changelog author="michael@stroeder.com" date="1551355200">- update to 2.6.1:
  * BACKWARDS INCOMPATIBLE:
    Removedcryptography.hazmat.primitives.asymmetric.utils.encode_rfc6979_signature
    andcryptography.hazmat.primitives.asymmetric.utils.decode_rfc6979_signature,
    which had been deprecated for nearly 4 years. Use encode_dss_signature()
    and decode_dss_signature()instead.
  * BACKWARDS INCOMPATIBLE: Removed cryptography.x509.Certificate.serial, which
    had been deprecated for nearly 3 years. Use serial_number instead.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with
    OpenSSL 1.1.1b.
  * Added support for Ed448 signing when using OpenSSL 1.1.1b or newer.
  * Added support for Ed25519 signing when using OpenSSL 1.1.1b or newer.
  * load_ssh_public_key() can now load ed25519 public keys.
  * Add support for easily mapping an object identifier to its elliptic curve
    class viaget_curve_for_oid().
  * Add support for OpenSSL when compiled with the no-engine
    (OPENSSL_NO_ENGINE) flag.</changelog>
  <changelog author="tchvatal@suse.com" date="1559131200">- Simplify the test execution to be more understandable</changelog>
  <changelog author="mimi.vx@gmail.com" date="1559563200">- update to 2.7
  * BACKWARDS INCOMPATIBLE: Removed the cryptography.hazmat.primitives.mac.MACContext interface.
  The CMAC and HMAC APIs have not changed, but they are no longer registered
  as MACContext instances.
  * Removed support for running our tests with setup.py test.
  * Add support for :class:`~cryptography.hazmat.primitives.poly1305.Poly1305`
  when using OpenSSL 1.1.1 or newer.
  * Support serialization with Encoding.OpenSSH and PublicFormat.OpenSSH
  in :meth:`Ed25519PublicKey.public_bytes &lt;cryptography.hazmat.primitives.asymmetric.ed25519.Ed25519PublicKey.public_bytes&gt;` .
  * Correctly allow passing a SubjectKeyIdentifier to :meth:`~cryptography.x509.AuthorityKeyIdentifier.from_issuer_subject_key_identifier`
  and deprecate passing an Extension object.</changelog>
  <changelog author="michael@stroeder.com" date="1571313600">- update to 2.8
  * Added support for Python 3.8.
  * Added class methods Poly1305.generate_tag and Poly1305.verify_tag for Poly1305 sign and verify operations.
  * Deprecated support for OpenSSL 1.0.1. Support will be removed in cryptography 2.9.
  * We now ship manylinux2010 wheels in addition to our manylinux1 wheels.
  * Added support for ed25519 and ed448 keys in the CertificateBuilder, CertificateSigningRequestBuilder, CertificateRevocationListBuilder and OCSPResponseBuilder.
  * cryptography no longer depends on asn1crypto.
  * FreshestCRL is now allowed as a CertificateRevocationList extension.</changelog>
  <changelog author="michael@stroeder.com" date="1589544000">- update to 2.9.2
  * 2.9.2 - 2020-04-22
  - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15.
  * 2.9.1 - 2020-04-21
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g.
  * 2.9 - 2020-04-02
  - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to
    low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed.
    Users on older version of OpenSSL will need to upgrade.
  - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed.
  - Removed support for calling public_bytes() with no arguments, as per
    our deprecation policy. You must now pass encoding and format.
  - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string()
    returns the RDNs as required by RFC 4514.
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f.
  - Added support for parsing single_extensions in an OCSP response.
  - NameAttribute values can now be empty strings.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1595937600">- update to 3.0
- refreshed disable-uneven-sizes-tests.patch and  skip_openssl_memleak_test.patch
  * Removed support for passing an Extension instance
    to from_issuer_subject_key_identifier(), as per our deprecation policy.
  * Support for LibreSSL 2.7.x, 2.8.x, and 2.9.0 has been removed
  * Dropped support for macOS 10.9, macOS users must upgrade to 10.10 or newer.
  * RSA generate_private_key() no longer accepts public_exponent values except
    65537 and 3 (the latter for legacy purposes).
  * X.509 certificate parsing now enforces that the version field contains
    a valid value, rather than deferring this check until version is accessed.
  * Deprecated support for Python 2
  * Added support for OpenSSH serialization format for ec, ed25519, rsa and dsa
    private keys: load_ssh_private_key() for loading and OpenSSH for writing.
  * Added support for OpenSSH certificates to load_ssh_public_key().
  * Added encrypt_at_time() and decrypt_at_time() to Fernet.
  * Added support for the SubjectInformationAccess X.509 extension.
  * Added support for parsing SignedCertificateTimestamps in OCSP responses.
  * Added support for parsing attributes in certificate signing requests via get_attribute_for_oid().
  * Added support for encoding attributes in certificate signing requests via add_attribute().
  * On OpenSSL 1.1.1d and higher cryptography now uses OpenSSL’s built-in CSPRNG
    instead of its own OS random engine because these versions of OpenSSL properly reseed on fork.
  * Added initial support for creating PKCS12 files with serialize_key_and_certificates().</changelog>
  <changelog author="dmueller@suse.com" date="1600430400">- update to 3.1:
  * **BACKWARDS INCOMPATIBLE:** Removed support for ``idna`` based
    :term:`U-label` parsing in various X.509 classes. This support was originally
    deprecated in version 2.1 and moved to an extra in 2.5.
  * Deprecated OpenSSL 1.0.2 support. OpenSSL 1.0.2 is no longer supported by
    the OpenSSL project. The next version of ``cryptography`` will drop support
    for it.
  * Deprecated support for Python 3.5. This version sees very little use and will
    be removed in the next release.
  * ``backend`` arguments to functions are no longer required and the
    default backend will automatically be selected if no ``backend`` is provided.
  * Added initial support for parsing certificates from PKCS7 files with
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_pem_pkcs7_certificates`
    and
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_der_pkcs7_certificates`
    .
  * Calling ``update`` or ``update_into`` on
    :class:`~cryptography.hazmat.primitives.ciphers.CipherContext` with ``data``
    longer than 2\ :sup:`31` bytes no longer raises an ``OverflowError``. This
    also resolves the same issue in :doc:`/fernet`.</changelog>
  <changelog author="dmueller@suse.com" date="1601294400">- update to 3.1.1:
  * wheels compiled with OpenSSL 1.1.1h.</changelog>
  <changelog author="michael@stroeder.com" date="1603713600">- update to 3.2 (bsc#1178168, CVE-2020-25659):
  * CVE-2020-25659: Attempted to make RSA PKCS#1v1.5 decryption more constant time,
    to protect against Bleichenbacher vulnerabilities. Due to limitations imposed
    by our API, we cannot completely mitigate this vulnerability.
  * Support for OpenSSL 1.0.2 has been removed.
  * Added basic support for PKCS7 signing (including SMIME) via PKCS7SignatureBuilder.
- drops 5507-mitigate-Bleichenbacher-attacks.patch on older dists</changelog>
  <changelog author="michael@stroeder.com" date="1603886400">- update to 3.2.1:
  Disable blinding on RSA public keys to address an error with
  some versions of OpenSSL.</changelog>
  <changelog author="mcepl@suse.com" date="1607256000">- Remove unnecessary dependency virtualenv.</changelog>
  <changelog author="mrueckert@suse.de" date="1607515200">- update to 3.3.0
  - BACKWARDS INCOMPATIBLE: Support for Python 3.5 has been removed
    due to low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: The GCM and AESGCM now require 64-bit
    to 1024-bit (8 byte to 128 byte) initialization vectors. This
    change is to conform with an upcoming OpenSSL release that will
    no longer support sizes outside this window.
  - BACKWARDS INCOMPATIBLE: When deserializing asymmetric keys we
    now raise ValueError rather than UnsupportedAlgorithm when an
    unsupported cipher is used. This change is to conform with an
    upcoming OpenSSL release that will no longer distinguish
    between error types.
  - BACKWARDS INCOMPATIBLE: We no longer allow loading of finite
    field Diffie-Hellman parameters of less than 512 bits in
    length. This change is to conform with an upcoming OpenSSL
    release that no longer supports smaller sizes. These keys were
    already wildly insecure and should not have been used in any
    application outside of testing.
  - Updated Windows, macOS, and manylinux wheels to be compiled
    with OpenSSL 1.1.1i.
  - Python 2 support is deprecated in cryptography. This is the
    last release that will support Python 2.
  - Added the recover_data_from_signature() function to
    RSAPublicKey for recovering the signed data from an RSA
    signature.</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 3.3.1:
  * Re-added a legacy symbol causing problems for older ``pyOpenSSL`` use</changelog>
  <changelog author="michael@stroeder.com" date="1612699200">- update to 3.3.2 (bsc#1182066, CVE-2020-36242, bsc#1198331):
  * SECURITY ISSUE: Fixed a bug where certain sequences of update()
    calls when symmetrically encrypting very large payloads (&gt;2GB) could
    result in an integer overflow, leading to buffer overflows.
    CVE-2020-36242
  - drops CVE-2020-36242-buffer-overflow.patch on older dists</changelog>
  <changelog author="daniel.garcia@suse.com" date="1676289600">- Add patch CVE-2023-23931-dont-allow-update-into.patch (bsc#1208036, CVE-2023-23931)
  * Don't allow update_into to mutate immutable objects</changelog>
  <changelog author="daniel.garcia@suse.com" date="1701259200">- Add CVE-2023-49083.patch to fix A null-pointer-dereference and
  segfault could occur when loading certificates from a PKCS#7 bundle.
  bsc#1217592</changelog>
</package>
<package pkgid="a4a0f0507d32123f80bd729e395cffc893d718a8a2cbb7a43f3f1a6c49eb1eb6" name="python3-cryptography" arch="src">
  <version epoch="0" ver="3.3.2" rel="150400.23.1"/>
  <changelog author="tchvatal@suse.com" date="1544097600">- Fix fdupes call</changelog>
  <changelog author="mcepl@suse.com" date="1544097601">- Update to 2.4.1:
  * Dropped support for LibreSSL 2.4.x.
  * Deprecated OpenSSL 1.0.1 support. OpenSSL 1.0.1 is no
    longer supported by the OpenSSL project. At this time there
    is no time table for dropping support, however we strongly
    encourage all users to upgrade or install cryptography from
    a wheel.
  * Added initial :doc:`OCSP &lt;/x509/ocsp&gt;` support.
  * Added support for cryptography.x509.PrecertPoison.</changelog>
  <changelog author="mpluskal@suse.com" date="1546516800">- Update to version 2.4.2:
  * Updated Windows, macOS, and manylinux1 wheels to be compiled
    with OpenSSL 1.1.0j.</changelog>
  <changelog author="michael@stroeder.com" date="1548417600">- Dependency on python-idna changed to "Recommends" aligned with
  change in upstream source (see below)
- update to 2.5:
  * BACKWARDS INCOMPATIBLE: U-label strings were deprecated in version 2.1,
    but this version removes the default idna dependency as well. If you still
    need this deprecated path please install cryptography with the idna extra:
    pip install cryptography[idna].
  * BACKWARDS INCOMPATIBLE: The minimum supported PyPy version is now 5.4.
  * Numerous classes and functions have been updated to allow bytes-like
    types for keying material and passwords, including symmetric algorithms,
    AEAD ciphers, KDFs, loading asymmetric keys, and one time password classes.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with OpenSSL 1.1.1a.
  * Added support for SHA512_224 and SHA512_256 when using OpenSSL 1.1.1.
  * Added support for SHA3_224, SHA3_256, SHA3_384, and SHA3_512 when using OpenSSL 1.1.1.
  * Added support for X448 key exchange when using OpenSSL 1.1.1.
  * Added support for SHAKE128 and SHAKE256 when using OpenSSL 1.1.1.
  * Added initial support for parsing PKCS12 files with load_key_and_certificates().
  * Added support for IssuingDistributionPoint.
  * Added rfc4514_string() method to x509.Name,
    x509.RelativeDistinguishedName, and x509.NameAttribute to format the name
    or component an RFC 4514 Distinguished Name string.
  * Added from_encoded_point(), which immediately checks if the point is on
    the curve and supports compressed points. Deprecated the previous method
    from_encoded_point().
  * Added signature_hash_algorithm to OCSPResponse.
  * Updated X25519 key exchange support to allow additional serialization
    methods. Calling public_bytes() with no arguments has been deprecated.
  * Added support for encoding compressed and uncompressed points via
    public_bytes(). Deprecated the previous method encode_point().</changelog>
  <changelog author="michael@stroeder.com" date="1551355200">- update to 2.6.1:
  * BACKWARDS INCOMPATIBLE:
    Removedcryptography.hazmat.primitives.asymmetric.utils.encode_rfc6979_signature
    andcryptography.hazmat.primitives.asymmetric.utils.decode_rfc6979_signature,
    which had been deprecated for nearly 4 years. Use encode_dss_signature()
    and decode_dss_signature()instead.
  * BACKWARDS INCOMPATIBLE: Removed cryptography.x509.Certificate.serial, which
    had been deprecated for nearly 3 years. Use serial_number instead.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with
    OpenSSL 1.1.1b.
  * Added support for Ed448 signing when using OpenSSL 1.1.1b or newer.
  * Added support for Ed25519 signing when using OpenSSL 1.1.1b or newer.
  * load_ssh_public_key() can now load ed25519 public keys.
  * Add support for easily mapping an object identifier to its elliptic curve
    class viaget_curve_for_oid().
  * Add support for OpenSSL when compiled with the no-engine
    (OPENSSL_NO_ENGINE) flag.</changelog>
  <changelog author="tchvatal@suse.com" date="1559131200">- Simplify the test execution to be more understandable</changelog>
  <changelog author="mimi.vx@gmail.com" date="1559563200">- update to 2.7
  * BACKWARDS INCOMPATIBLE: Removed the cryptography.hazmat.primitives.mac.MACContext interface.
  The CMAC and HMAC APIs have not changed, but they are no longer registered
  as MACContext instances.
  * Removed support for running our tests with setup.py test.
  * Add support for :class:`~cryptography.hazmat.primitives.poly1305.Poly1305`
  when using OpenSSL 1.1.1 or newer.
  * Support serialization with Encoding.OpenSSH and PublicFormat.OpenSSH
  in :meth:`Ed25519PublicKey.public_bytes &lt;cryptography.hazmat.primitives.asymmetric.ed25519.Ed25519PublicKey.public_bytes&gt;` .
  * Correctly allow passing a SubjectKeyIdentifier to :meth:`~cryptography.x509.AuthorityKeyIdentifier.from_issuer_subject_key_identifier`
  and deprecate passing an Extension object.</changelog>
  <changelog author="michael@stroeder.com" date="1571313600">- update to 2.8
  * Added support for Python 3.8.
  * Added class methods Poly1305.generate_tag and Poly1305.verify_tag for Poly1305 sign and verify operations.
  * Deprecated support for OpenSSL 1.0.1. Support will be removed in cryptography 2.9.
  * We now ship manylinux2010 wheels in addition to our manylinux1 wheels.
  * Added support for ed25519 and ed448 keys in the CertificateBuilder, CertificateSigningRequestBuilder, CertificateRevocationListBuilder and OCSPResponseBuilder.
  * cryptography no longer depends on asn1crypto.
  * FreshestCRL is now allowed as a CertificateRevocationList extension.</changelog>
  <changelog author="michael@stroeder.com" date="1589544000">- update to 2.9.2
  * 2.9.2 - 2020-04-22
  - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15.
  * 2.9.1 - 2020-04-21
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g.
  * 2.9 - 2020-04-02
  - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to
    low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed.
    Users on older version of OpenSSL will need to upgrade.
  - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed.
  - Removed support for calling public_bytes() with no arguments, as per
    our deprecation policy. You must now pass encoding and format.
  - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string()
    returns the RDNs as required by RFC 4514.
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f.
  - Added support for parsing single_extensions in an OCSP response.
  - NameAttribute values can now be empty strings.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1595937600">- update to 3.0
- refreshed disable-uneven-sizes-tests.patch and  skip_openssl_memleak_test.patch
  * Removed support for passing an Extension instance
    to from_issuer_subject_key_identifier(), as per our deprecation policy.
  * Support for LibreSSL 2.7.x, 2.8.x, and 2.9.0 has been removed
  * Dropped support for macOS 10.9, macOS users must upgrade to 10.10 or newer.
  * RSA generate_private_key() no longer accepts public_exponent values except
    65537 and 3 (the latter for legacy purposes).
  * X.509 certificate parsing now enforces that the version field contains
    a valid value, rather than deferring this check until version is accessed.
  * Deprecated support for Python 2
  * Added support for OpenSSH serialization format for ec, ed25519, rsa and dsa
    private keys: load_ssh_private_key() for loading and OpenSSH for writing.
  * Added support for OpenSSH certificates to load_ssh_public_key().
  * Added encrypt_at_time() and decrypt_at_time() to Fernet.
  * Added support for the SubjectInformationAccess X.509 extension.
  * Added support for parsing SignedCertificateTimestamps in OCSP responses.
  * Added support for parsing attributes in certificate signing requests via get_attribute_for_oid().
  * Added support for encoding attributes in certificate signing requests via add_attribute().
  * On OpenSSL 1.1.1d and higher cryptography now uses OpenSSL’s built-in CSPRNG
    instead of its own OS random engine because these versions of OpenSSL properly reseed on fork.
  * Added initial support for creating PKCS12 files with serialize_key_and_certificates().</changelog>
  <changelog author="dmueller@suse.com" date="1600430400">- update to 3.1:
  * **BACKWARDS INCOMPATIBLE:** Removed support for ``idna`` based
    :term:`U-label` parsing in various X.509 classes. This support was originally
    deprecated in version 2.1 and moved to an extra in 2.5.
  * Deprecated OpenSSL 1.0.2 support. OpenSSL 1.0.2 is no longer supported by
    the OpenSSL project. The next version of ``cryptography`` will drop support
    for it.
  * Deprecated support for Python 3.5. This version sees very little use and will
    be removed in the next release.
  * ``backend`` arguments to functions are no longer required and the
    default backend will automatically be selected if no ``backend`` is provided.
  * Added initial support for parsing certificates from PKCS7 files with
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_pem_pkcs7_certificates`
    and
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_der_pkcs7_certificates`
    .
  * Calling ``update`` or ``update_into`` on
    :class:`~cryptography.hazmat.primitives.ciphers.CipherContext` with ``data``
    longer than 2\ :sup:`31` bytes no longer raises an ``OverflowError``. This
    also resolves the same issue in :doc:`/fernet`.</changelog>
  <changelog author="dmueller@suse.com" date="1601294400">- update to 3.1.1:
  * wheels compiled with OpenSSL 1.1.1h.</changelog>
  <changelog author="michael@stroeder.com" date="1603713600">- update to 3.2 (bsc#1178168, CVE-2020-25659):
  * CVE-2020-25659: Attempted to make RSA PKCS#1v1.5 decryption more constant time,
    to protect against Bleichenbacher vulnerabilities. Due to limitations imposed
    by our API, we cannot completely mitigate this vulnerability.
  * Support for OpenSSL 1.0.2 has been removed.
  * Added basic support for PKCS7 signing (including SMIME) via PKCS7SignatureBuilder.
- drops 5507-mitigate-Bleichenbacher-attacks.patch on older dists</changelog>
  <changelog author="michael@stroeder.com" date="1603886400">- update to 3.2.1:
  Disable blinding on RSA public keys to address an error with
  some versions of OpenSSL.</changelog>
  <changelog author="mcepl@suse.com" date="1607256000">- Remove unnecessary dependency virtualenv.</changelog>
  <changelog author="mrueckert@suse.de" date="1607515200">- update to 3.3.0
  - BACKWARDS INCOMPATIBLE: Support for Python 3.5 has been removed
    due to low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: The GCM and AESGCM now require 64-bit
    to 1024-bit (8 byte to 128 byte) initialization vectors. This
    change is to conform with an upcoming OpenSSL release that will
    no longer support sizes outside this window.
  - BACKWARDS INCOMPATIBLE: When deserializing asymmetric keys we
    now raise ValueError rather than UnsupportedAlgorithm when an
    unsupported cipher is used. This change is to conform with an
    upcoming OpenSSL release that will no longer distinguish
    between error types.
  - BACKWARDS INCOMPATIBLE: We no longer allow loading of finite
    field Diffie-Hellman parameters of less than 512 bits in
    length. This change is to conform with an upcoming OpenSSL
    release that no longer supports smaller sizes. These keys were
    already wildly insecure and should not have been used in any
    application outside of testing.
  - Updated Windows, macOS, and manylinux wheels to be compiled
    with OpenSSL 1.1.1i.
  - Python 2 support is deprecated in cryptography. This is the
    last release that will support Python 2.
  - Added the recover_data_from_signature() function to
    RSAPublicKey for recovering the signed data from an RSA
    signature.</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 3.3.1:
  * Re-added a legacy symbol causing problems for older ``pyOpenSSL`` use</changelog>
  <changelog author="michael@stroeder.com" date="1612699200">- update to 3.3.2 (bsc#1182066, CVE-2020-36242, bsc#1198331):
  * SECURITY ISSUE: Fixed a bug where certain sequences of update()
    calls when symmetrically encrypting very large payloads (&gt;2GB) could
    result in an integer overflow, leading to buffer overflows.
    CVE-2020-36242
  - drops CVE-2020-36242-buffer-overflow.patch on older dists</changelog>
  <changelog author="daniel.garcia@suse.com" date="1676289600">- Add patch CVE-2023-23931-dont-allow-update-into.patch (bsc#1208036, CVE-2023-23931)
  * Don't allow update_into to mutate immutable objects</changelog>
  <changelog author="daniel.garcia@suse.com" date="1701259200">- Add CVE-2023-49083.patch to fix A null-pointer-dereference and
  segfault could occur when loading certificates from a PKCS#7 bundle.
  bsc#1217592</changelog>
</package>
<package pkgid="a8b84b422a2c07f88d36f016fc559a51da7e2fa80c087e33c1e1f939cb5a8e3c" name="python3-cryptography" arch="x86_64">
  <version epoch="0" ver="3.3.2" rel="150400.23.1"/>
  <changelog author="tchvatal@suse.com" date="1544097600">- Fix fdupes call</changelog>
  <changelog author="mcepl@suse.com" date="1544097601">- Update to 2.4.1:
  * Dropped support for LibreSSL 2.4.x.
  * Deprecated OpenSSL 1.0.1 support. OpenSSL 1.0.1 is no
    longer supported by the OpenSSL project. At this time there
    is no time table for dropping support, however we strongly
    encourage all users to upgrade or install cryptography from
    a wheel.
  * Added initial :doc:`OCSP &lt;/x509/ocsp&gt;` support.
  * Added support for cryptography.x509.PrecertPoison.</changelog>
  <changelog author="mpluskal@suse.com" date="1546516800">- Update to version 2.4.2:
  * Updated Windows, macOS, and manylinux1 wheels to be compiled
    with OpenSSL 1.1.0j.</changelog>
  <changelog author="michael@stroeder.com" date="1548417600">- Dependency on python-idna changed to "Recommends" aligned with
  change in upstream source (see below)
- update to 2.5:
  * BACKWARDS INCOMPATIBLE: U-label strings were deprecated in version 2.1,
    but this version removes the default idna dependency as well. If you still
    need this deprecated path please install cryptography with the idna extra:
    pip install cryptography[idna].
  * BACKWARDS INCOMPATIBLE: The minimum supported PyPy version is now 5.4.
  * Numerous classes and functions have been updated to allow bytes-like
    types for keying material and passwords, including symmetric algorithms,
    AEAD ciphers, KDFs, loading asymmetric keys, and one time password classes.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with OpenSSL 1.1.1a.
  * Added support for SHA512_224 and SHA512_256 when using OpenSSL 1.1.1.
  * Added support for SHA3_224, SHA3_256, SHA3_384, and SHA3_512 when using OpenSSL 1.1.1.
  * Added support for X448 key exchange when using OpenSSL 1.1.1.
  * Added support for SHAKE128 and SHAKE256 when using OpenSSL 1.1.1.
  * Added initial support for parsing PKCS12 files with load_key_and_certificates().
  * Added support for IssuingDistributionPoint.
  * Added rfc4514_string() method to x509.Name,
    x509.RelativeDistinguishedName, and x509.NameAttribute to format the name
    or component an RFC 4514 Distinguished Name string.
  * Added from_encoded_point(), which immediately checks if the point is on
    the curve and supports compressed points. Deprecated the previous method
    from_encoded_point().
  * Added signature_hash_algorithm to OCSPResponse.
  * Updated X25519 key exchange support to allow additional serialization
    methods. Calling public_bytes() with no arguments has been deprecated.
  * Added support for encoding compressed and uncompressed points via
    public_bytes(). Deprecated the previous method encode_point().</changelog>
  <changelog author="michael@stroeder.com" date="1551355200">- update to 2.6.1:
  * BACKWARDS INCOMPATIBLE:
    Removedcryptography.hazmat.primitives.asymmetric.utils.encode_rfc6979_signature
    andcryptography.hazmat.primitives.asymmetric.utils.decode_rfc6979_signature,
    which had been deprecated for nearly 4 years. Use encode_dss_signature()
    and decode_dss_signature()instead.
  * BACKWARDS INCOMPATIBLE: Removed cryptography.x509.Certificate.serial, which
    had been deprecated for nearly 3 years. Use serial_number instead.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with
    OpenSSL 1.1.1b.
  * Added support for Ed448 signing when using OpenSSL 1.1.1b or newer.
  * Added support for Ed25519 signing when using OpenSSL 1.1.1b or newer.
  * load_ssh_public_key() can now load ed25519 public keys.
  * Add support for easily mapping an object identifier to its elliptic curve
    class viaget_curve_for_oid().
  * Add support for OpenSSL when compiled with the no-engine
    (OPENSSL_NO_ENGINE) flag.</changelog>
  <changelog author="tchvatal@suse.com" date="1559131200">- Simplify the test execution to be more understandable</changelog>
  <changelog author="mimi.vx@gmail.com" date="1559563200">- update to 2.7
  * BACKWARDS INCOMPATIBLE: Removed the cryptography.hazmat.primitives.mac.MACContext interface.
  The CMAC and HMAC APIs have not changed, but they are no longer registered
  as MACContext instances.
  * Removed support for running our tests with setup.py test.
  * Add support for :class:`~cryptography.hazmat.primitives.poly1305.Poly1305`
  when using OpenSSL 1.1.1 or newer.
  * Support serialization with Encoding.OpenSSH and PublicFormat.OpenSSH
  in :meth:`Ed25519PublicKey.public_bytes &lt;cryptography.hazmat.primitives.asymmetric.ed25519.Ed25519PublicKey.public_bytes&gt;` .
  * Correctly allow passing a SubjectKeyIdentifier to :meth:`~cryptography.x509.AuthorityKeyIdentifier.from_issuer_subject_key_identifier`
  and deprecate passing an Extension object.</changelog>
  <changelog author="michael@stroeder.com" date="1571313600">- update to 2.8
  * Added support for Python 3.8.
  * Added class methods Poly1305.generate_tag and Poly1305.verify_tag for Poly1305 sign and verify operations.
  * Deprecated support for OpenSSL 1.0.1. Support will be removed in cryptography 2.9.
  * We now ship manylinux2010 wheels in addition to our manylinux1 wheels.
  * Added support for ed25519 and ed448 keys in the CertificateBuilder, CertificateSigningRequestBuilder, CertificateRevocationListBuilder and OCSPResponseBuilder.
  * cryptography no longer depends on asn1crypto.
  * FreshestCRL is now allowed as a CertificateRevocationList extension.</changelog>
  <changelog author="michael@stroeder.com" date="1589544000">- update to 2.9.2
  * 2.9.2 - 2020-04-22
  - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15.
  * 2.9.1 - 2020-04-21
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g.
  * 2.9 - 2020-04-02
  - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to
    low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed.
    Users on older version of OpenSSL will need to upgrade.
  - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed.
  - Removed support for calling public_bytes() with no arguments, as per
    our deprecation policy. You must now pass encoding and format.
  - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string()
    returns the RDNs as required by RFC 4514.
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f.
  - Added support for parsing single_extensions in an OCSP response.
  - NameAttribute values can now be empty strings.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1595937600">- update to 3.0
- refreshed disable-uneven-sizes-tests.patch and  skip_openssl_memleak_test.patch
  * Removed support for passing an Extension instance
    to from_issuer_subject_key_identifier(), as per our deprecation policy.
  * Support for LibreSSL 2.7.x, 2.8.x, and 2.9.0 has been removed
  * Dropped support for macOS 10.9, macOS users must upgrade to 10.10 or newer.
  * RSA generate_private_key() no longer accepts public_exponent values except
    65537 and 3 (the latter for legacy purposes).
  * X.509 certificate parsing now enforces that the version field contains
    a valid value, rather than deferring this check until version is accessed.
  * Deprecated support for Python 2
  * Added support for OpenSSH serialization format for ec, ed25519, rsa and dsa
    private keys: load_ssh_private_key() for loading and OpenSSH for writing.
  * Added support for OpenSSH certificates to load_ssh_public_key().
  * Added encrypt_at_time() and decrypt_at_time() to Fernet.
  * Added support for the SubjectInformationAccess X.509 extension.
  * Added support for parsing SignedCertificateTimestamps in OCSP responses.
  * Added support for parsing attributes in certificate signing requests via get_attribute_for_oid().
  * Added support for encoding attributes in certificate signing requests via add_attribute().
  * On OpenSSL 1.1.1d and higher cryptography now uses OpenSSL’s built-in CSPRNG
    instead of its own OS random engine because these versions of OpenSSL properly reseed on fork.
  * Added initial support for creating PKCS12 files with serialize_key_and_certificates().</changelog>
  <changelog author="dmueller@suse.com" date="1600430400">- update to 3.1:
  * **BACKWARDS INCOMPATIBLE:** Removed support for ``idna`` based
    :term:`U-label` parsing in various X.509 classes. This support was originally
    deprecated in version 2.1 and moved to an extra in 2.5.
  * Deprecated OpenSSL 1.0.2 support. OpenSSL 1.0.2 is no longer supported by
    the OpenSSL project. The next version of ``cryptography`` will drop support
    for it.
  * Deprecated support for Python 3.5. This version sees very little use and will
    be removed in the next release.
  * ``backend`` arguments to functions are no longer required and the
    default backend will automatically be selected if no ``backend`` is provided.
  * Added initial support for parsing certificates from PKCS7 files with
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_pem_pkcs7_certificates`
    and
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_der_pkcs7_certificates`
    .
  * Calling ``update`` or ``update_into`` on
    :class:`~cryptography.hazmat.primitives.ciphers.CipherContext` with ``data``
    longer than 2\ :sup:`31` bytes no longer raises an ``OverflowError``. This
    also resolves the same issue in :doc:`/fernet`.</changelog>
  <changelog author="dmueller@suse.com" date="1601294400">- update to 3.1.1:
  * wheels compiled with OpenSSL 1.1.1h.</changelog>
  <changelog author="michael@stroeder.com" date="1603713600">- update to 3.2 (bsc#1178168, CVE-2020-25659):
  * CVE-2020-25659: Attempted to make RSA PKCS#1v1.5 decryption more constant time,
    to protect against Bleichenbacher vulnerabilities. Due to limitations imposed
    by our API, we cannot completely mitigate this vulnerability.
  * Support for OpenSSL 1.0.2 has been removed.
  * Added basic support for PKCS7 signing (including SMIME) via PKCS7SignatureBuilder.
- drops 5507-mitigate-Bleichenbacher-attacks.patch on older dists</changelog>
  <changelog author="michael@stroeder.com" date="1603886400">- update to 3.2.1:
  Disable blinding on RSA public keys to address an error with
  some versions of OpenSSL.</changelog>
  <changelog author="mcepl@suse.com" date="1607256000">- Remove unnecessary dependency virtualenv.</changelog>
  <changelog author="mrueckert@suse.de" date="1607515200">- update to 3.3.0
  - BACKWARDS INCOMPATIBLE: Support for Python 3.5 has been removed
    due to low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: The GCM and AESGCM now require 64-bit
    to 1024-bit (8 byte to 128 byte) initialization vectors. This
    change is to conform with an upcoming OpenSSL release that will
    no longer support sizes outside this window.
  - BACKWARDS INCOMPATIBLE: When deserializing asymmetric keys we
    now raise ValueError rather than UnsupportedAlgorithm when an
    unsupported cipher is used. This change is to conform with an
    upcoming OpenSSL release that will no longer distinguish
    between error types.
  - BACKWARDS INCOMPATIBLE: We no longer allow loading of finite
    field Diffie-Hellman parameters of less than 512 bits in
    length. This change is to conform with an upcoming OpenSSL
    release that no longer supports smaller sizes. These keys were
    already wildly insecure and should not have been used in any
    application outside of testing.
  - Updated Windows, macOS, and manylinux wheels to be compiled
    with OpenSSL 1.1.1i.
  - Python 2 support is deprecated in cryptography. This is the
    last release that will support Python 2.
  - Added the recover_data_from_signature() function to
    RSAPublicKey for recovering the signed data from an RSA
    signature.</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 3.3.1:
  * Re-added a legacy symbol causing problems for older ``pyOpenSSL`` use</changelog>
  <changelog author="michael@stroeder.com" date="1612699200">- update to 3.3.2 (bsc#1182066, CVE-2020-36242, bsc#1198331):
  * SECURITY ISSUE: Fixed a bug where certain sequences of update()
    calls when symmetrically encrypting very large payloads (&gt;2GB) could
    result in an integer overflow, leading to buffer overflows.
    CVE-2020-36242
  - drops CVE-2020-36242-buffer-overflow.patch on older dists</changelog>
  <changelog author="daniel.garcia@suse.com" date="1676289600">- Add patch CVE-2023-23931-dont-allow-update-into.patch (bsc#1208036, CVE-2023-23931)
  * Don't allow update_into to mutate immutable objects</changelog>
  <changelog author="daniel.garcia@suse.com" date="1701259200">- Add CVE-2023-49083.patch to fix A null-pointer-dereference and
  segfault could occur when loading certificates from a PKCS#7 bundle.
  bsc#1217592</changelog>
</package>
<package pkgid="6ce38c4b81cdac05941c5e9a23ca00dcdfd5f6c769db6730521e062f848e7483" name="python3-cssselect" arch="noarch">
  <version epoch="0" ver="1.0.3" rel="150000.3.5.1"/>
  <changelog author="iacobcatalin@gmail.com" date="1357646400">- Initial package 0.7.1</changelog>
  <changelog author="saschpe@suse.de" date="1358164800">- Minimal cleanup</changelog>
  <changelog author="arun@gmx.de" date="1364472000">- updated to 0.8
  Changelog (http://pythonhosted.org/cssselect/#changelog):
    Released on 2013-03-15.
    Improvements:
    [#22] Let extended translators override what XPathExpr class is used
    [#19] Use the built-in lang() XPath function for implementing the :lang() pseudo-class with XML documents. This is probably faster than ancestor-or-self::.
    Bug fixes:
    [#14] Fix non-ASCII pseudo-classes. (Invalid selector instead of crash.)
    [#20] As per the spec, elements containing only whitespace are not considered empty for the :empty pseudo-class.</changelog>
  <changelog author="arun@gmx.de" date="1373371200">- Packaged LICENSE file
  fixes bnc#828513
  Bug 828513 - LICENSE not packaged in python3-cssselect 0.8</changelog>
  <changelog author="p.drouand@gmail.com" date="1385208000">- Update to version 0.9.1
  + **Backward incompatible change from 0.9**:
    :meth:`~GenericTranslator.selector_to_xpath` defaults to ignoring
    pseudo-elements, as it did in 0.8 and previous versions.
    (:meth:`~GenericTranslator.css_to_xpath` doesn’t change.)
  + Drop official support for Python 2.4 and 3.1,
    as testing was becoming difficult. Nothing will break overnight,
    but future releases may on may not work on these versions.
    Older releases will remain available on PyPI.
- Changes from 0.9
  + Add parser support for :attr:`functional pseudo-elements
    &lt;Selector.pseudo_element&gt;`.
  + This version accidentally introduced a backward incompatible change:
    :meth:`~GenericTranslator.selector_to_xpath` defaults to rejecting
    pseudo-elements instead of ignoring them.
- Remove useless CFLAGS definition
- Add README.rst, CHANGES and AUTHORS in package documentation</changelog>
  <changelog author="tbechtold@suse.com" date="1490788800">- update to 1.0.1:
  * Add support for Python 3.6.
  * Documentation hosted `on Read the Docs &lt;https://cssselect.readthedocs.io/&gt;`_
  * Add code coverage reports.
  * Fix ``:nth-*(an+b)`` pseudo-classes selectors.
    (except ``*:nth-child()`` which looks untranslatable to XPath 1.0.)
  * Distribute as universal wheel.
  * Add support for Python 3.3, 3.4 and 3.5.
  * Drop support for Python 2.5 as testing is getting difficult.
  * Improve tests on pseudo-elements.
- Switch to singlespec approach</changelog>
  <changelog author="arun@gmx.de" date="1515240000">- specfile:
  * update copyright year
- update to version 1.0.3:
  * Fix artifact uploads to pypi
- changes from version 1.0.2:
  * Drop support for Python 2.6 and Python 3.3.
  * Fix deprecation warning in Python 3.6.
  * Minor cleanups.</changelog>
</package>
<package pkgid="4943adcbdbf535f94dce985bd39b577233015e2233630de8a5980f25c2b94b36" name="python3-cssselect" arch="noarch">
  <version epoch="0" ver="1.0.3" rel="150400.3.7.4"/>
  <changelog author="iacobcatalin@gmail.com" date="1357646400">- Initial package 0.7.1</changelog>
  <changelog author="saschpe@suse.de" date="1358164800">- Minimal cleanup</changelog>
  <changelog author="arun@gmx.de" date="1364472000">- updated to 0.8
  Changelog (http://pythonhosted.org/cssselect/#changelog):
    Released on 2013-03-15.
    Improvements:
    [#22] Let extended translators override what XPathExpr class is used
    [#19] Use the built-in lang() XPath function for implementing the :lang() pseudo-class with XML documents. This is probably faster than ancestor-or-self::.
    Bug fixes:
    [#14] Fix non-ASCII pseudo-classes. (Invalid selector instead of crash.)
    [#20] As per the spec, elements containing only whitespace are not considered empty for the :empty pseudo-class.</changelog>
  <changelog author="arun@gmx.de" date="1373371200">- Packaged LICENSE file
  fixes bnc#828513
  Bug 828513 - LICENSE not packaged in python3-cssselect 0.8</changelog>
  <changelog author="p.drouand@gmail.com" date="1385208000">- Update to version 0.9.1
  + **Backward incompatible change from 0.9**:
    :meth:`~GenericTranslator.selector_to_xpath` defaults to ignoring
    pseudo-elements, as it did in 0.8 and previous versions.
    (:meth:`~GenericTranslator.css_to_xpath` doesn’t change.)
  + Drop official support for Python 2.4 and 3.1,
    as testing was becoming difficult. Nothing will break overnight,
    but future releases may on may not work on these versions.
    Older releases will remain available on PyPI.
- Changes from 0.9
  + Add parser support for :attr:`functional pseudo-elements
    &lt;Selector.pseudo_element&gt;`.
  + This version accidentally introduced a backward incompatible change:
    :meth:`~GenericTranslator.selector_to_xpath` defaults to rejecting
    pseudo-elements instead of ignoring them.
- Remove useless CFLAGS definition
- Add README.rst, CHANGES and AUTHORS in package documentation</changelog>
  <changelog author="tbechtold@suse.com" date="1490788800">- update to 1.0.1:
  * Add support for Python 3.6.
  * Documentation hosted `on Read the Docs &lt;https://cssselect.readthedocs.io/&gt;`_
  * Add code coverage reports.
  * Fix ``:nth-*(an+b)`` pseudo-classes selectors.
    (except ``*:nth-child()`` which looks untranslatable to XPath 1.0.)
  * Distribute as universal wheel.
  * Add support for Python 3.3, 3.4 and 3.5.
  * Drop support for Python 2.5 as testing is getting difficult.
  * Improve tests on pseudo-elements.
- Switch to singlespec approach</changelog>
  <changelog author="arun@gmx.de" date="1515240000">- specfile:
  * update copyright year
- update to version 1.0.3:
  * Fix artifact uploads to pypi
- changes from version 1.0.2:
  * Drop support for Python 2.6 and Python 3.3.
  * Fix deprecation warning in Python 3.6.
  * Minor cleanups.</changelog>
</package>
<package pkgid="1949e0ec11fed7702896ac2d9fbaee82373214dfffd4d91f334a7df0c87de57e" name="python3-dnspython" arch="noarch">
  <version epoch="0" ver="1.15.0" rel="150000.3.10.2"/>
  <changelog author="dmueller@suse.com" date="1378900800">- update to 1.11.1:
  * fix syntax error exception on dns server failure
  * various fixlets for DNSSEC support</changelog>
  <changelog author="lars@linux-schulserver.de" date="1413547200">- update to 1.12.0:
  * The test system can now run the tests without requiring dnspython
    to be installed.
  * When reading from a masterfile, if the first content line
    started with leading whitespace, we raised an ugly exception
    instead of doing the right thing, namely using the zone origin as
    the name. [#73]  Thanks to Tassatux for reporting the issue.
  * Added dns.zone.to_text() convenience method.  Thanks to Brandon
    Whaley &lt;redkrieg@gmail.com&gt; for the patch.
  * The /etc/resolv.conf setting "options rotate" is now understood
    by the resolver.  If present, the resolver will shuffle the
    nameserver list each time dns.resolver.query() is called.  Thanks
    to underrun for the patch.  Note that you don't want to add
    "options rotate" to your /etc/resolv.conf if your system's
    resolver library does not understand it.  In this case, just set
    resolver.rotate = True by hand.
  * Escaping of Unicode has been corrected.  Previously we escaped
    and then converted to Unicode, but the right thing to do is
    convert to Unicode, then escape.  Also, characters &gt; 0x7f should
    NOT be escaped in Unicode mode.  Thanks to Martin Basti for the
    patch.
  * dns.rdtypes.ANY.DNSKEY now has helpers functions to convert
    between the numeric form of the flags and a set of human-friendly
    strings.  Thanks to Petr Spacek for the patch.
  * RRSIGs did not respect relativization settings in to_text().
    Thanks to Brian Smith for reporting the bug and submitting a
    (slightly different) patch.
  * dns/rdtypes/IN/APL.py: The APL from_wire() method did not accept an
    rdata length of 0 as valid.  Thanks to salzmdan for reporting the
    problem.
  * dns/ipv6.py: Add is_mapped()
  * dns/reversename.py: Lookup IPv6 mapped IPv4 addresses in the v4
    reverse namespace.  Thanks to Devin Bayer.  Yes, I finally fixed
    this one :)
  * dns/zone.py: Do not put back an unescaped token.  This was
    causing escape processing for domain names to break.  Thanks to
    connormclaud for reporting the problem.
  * dns/message.py: Making a response didn't work correctly if the
    query was signed with TSIG and we knew the key.  Thanks to Jeffrey
    Stiles for reporting the problem.
  * dns/query.py: Fix problems with the IXFR state machine which caused
    long diffs to fail.  Thanks to James Raftery for the fix and the
    repeated prodding to get it applied :)
- enable some tests
- add python-dnspython-rpmlintrc file
- add python-ecdsa and python-pycrypto to BuildRequires for the
  DNSSec tests
- use /usr/bin/python instead of /usr/bin/env python for the example
  scripts to avoid additional dependencies</changelog>
  <changelog author="dmueller@suse.com" date="1416916800">- fix build on SLE11</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1463400000">- New upstream release 1.13.0</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1465905600">- New upstream release 1.14.0</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1475928000">- New upstream release 1.15.0
  * IDNA 2008 support is now available if the "idna" module has been
    installed and IDNA 2008 is requested.  The default IDNA behavior
    is still IDNA 2003.  The new IDNA codec mechanism is currently
    only useful for direct calls to dns.name.from_text() or
    dns.name.from_unicode(), but in future releases it will be
    deployed throughout dnspython, e.g. so that you can read a
    masterfile with an IDNA 2008 codec in force.
  * By default, dns.name.to_unicode() is not strict about which
    version of IDNA the input complies with.  Strictness can be
    requested by using one of the strict IDNA codecs.
  * Add AVC RR support.
  * Some problems with newlines in various output modes have been
    addressed.
  * dns.name.to_text() now returns text and not bytes on Python 3.x
  * More miscellaneous fixes for the Python 2/3 codeline merge.
- Include readme with readme.patch as not included in upstream tarball
- Fix a bug in the tests code with 210.patch with upstream pull request #210</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1476014400">- use and recommend python-ecdsa and python-pycrypto for dnssec support</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1493726400">- Update for the multipython build.
- Rename python-dnspython.asc to python-dnspython.keyring.
- Spec cleanup.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1720699200">- Add new patches to solve DoS:
  - CVE-2023-29483-pre1.patch
  - CVE-2023-29483.patch
  (bsc#1222693, CVE-2023-29483, gh#rthalley/dnspython#1044)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1725969600">- Fix CVE-2023-29483-pre1.patch
  (bsc#1230353, gh#rthalley/dnspython@6d590f0a2e1b, gh#nrhall/dnspython@55d6a9d81930)</changelog>
</package>
<package pkgid="e005cf5354813c454cc50a575ca96971a33f5c8d3997945e9075d8a9e8d2bbe1" name="python3-dnspython" arch="noarch">
  <version epoch="0" ver="1.15.0" rel="150000.3.5.1"/>
  <changelog author="speilicke@suse.com" date="1373889600">- Package LICENSE, use proper upstream URL
- Run testsuite
- Cleanup macro usage</changelog>
  <changelog author="dmueller@suse.com" date="1378900800">- update to 1.11.1:
  * fix syntax error exception on dns server failure
  * various fixlets for DNSSEC support</changelog>
  <changelog author="lars@linux-schulserver.de" date="1413547200">- update to 1.12.0:
  * The test system can now run the tests without requiring dnspython
    to be installed.
  * When reading from a masterfile, if the first content line
    started with leading whitespace, we raised an ugly exception
    instead of doing the right thing, namely using the zone origin as
    the name. [#73]  Thanks to Tassatux for reporting the issue.
  * Added dns.zone.to_text() convenience method.  Thanks to Brandon
    Whaley &lt;redkrieg@gmail.com&gt; for the patch.
  * The /etc/resolv.conf setting "options rotate" is now understood
    by the resolver.  If present, the resolver will shuffle the
    nameserver list each time dns.resolver.query() is called.  Thanks
    to underrun for the patch.  Note that you don't want to add
    "options rotate" to your /etc/resolv.conf if your system's
    resolver library does not understand it.  In this case, just set
    resolver.rotate = True by hand.
  * Escaping of Unicode has been corrected.  Previously we escaped
    and then converted to Unicode, but the right thing to do is
    convert to Unicode, then escape.  Also, characters &gt; 0x7f should
    NOT be escaped in Unicode mode.  Thanks to Martin Basti for the
    patch.
  * dns.rdtypes.ANY.DNSKEY now has helpers functions to convert
    between the numeric form of the flags and a set of human-friendly
    strings.  Thanks to Petr Spacek for the patch.
  * RRSIGs did not respect relativization settings in to_text().
    Thanks to Brian Smith for reporting the bug and submitting a
    (slightly different) patch.
  * dns/rdtypes/IN/APL.py: The APL from_wire() method did not accept an
    rdata length of 0 as valid.  Thanks to salzmdan for reporting the
    problem.
  * dns/ipv6.py: Add is_mapped()
  * dns/reversename.py: Lookup IPv6 mapped IPv4 addresses in the v4
    reverse namespace.  Thanks to Devin Bayer.  Yes, I finally fixed
    this one :)
  * dns/zone.py: Do not put back an unescaped token.  This was
    causing escape processing for domain names to break.  Thanks to
    connormclaud for reporting the problem.
  * dns/message.py: Making a response didn't work correctly if the
    query was signed with TSIG and we knew the key.  Thanks to Jeffrey
    Stiles for reporting the problem.
  * dns/query.py: Fix problems with the IXFR state machine which caused
    long diffs to fail.  Thanks to James Raftery for the fix and the
    repeated prodding to get it applied :)
- enable some tests
- add python-dnspython-rpmlintrc file
- add python-ecdsa and python-pycrypto to BuildRequires for the
  DNSSec tests
- use /usr/bin/python instead of /usr/bin/env python for the example
  scripts to avoid additional dependencies</changelog>
  <changelog author="dmueller@suse.com" date="1416916800">- fix build on SLE11</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1463400000">- New upstream release 1.13.0</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1465905600">- New upstream release 1.14.0</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1475928000">- New upstream release 1.15.0
  * IDNA 2008 support is now available if the "idna" module has been
    installed and IDNA 2008 is requested.  The default IDNA behavior
    is still IDNA 2003.  The new IDNA codec mechanism is currently
    only useful for direct calls to dns.name.from_text() or
    dns.name.from_unicode(), but in future releases it will be
    deployed throughout dnspython, e.g. so that you can read a
    masterfile with an IDNA 2008 codec in force.
  * By default, dns.name.to_unicode() is not strict about which
    version of IDNA the input complies with.  Strictness can be
    requested by using one of the strict IDNA codecs.
  * Add AVC RR support.
  * Some problems with newlines in various output modes have been
    addressed.
  * dns.name.to_text() now returns text and not bytes on Python 3.x
  * More miscellaneous fixes for the Python 2/3 codeline merge.
- Include readme with readme.patch as not included in upstream tarball
- Fix a bug in the tests code with 210.patch with upstream pull request #210</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1476014400">- use and recommend python-ecdsa and python-pycrypto for dnssec support</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1493726400">- Update for the multipython build.
- Rename python-dnspython.asc to python-dnspython.keyring.
- Spec cleanup.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1720699200">- Add new patches to solve DoS:
  - CVE-2023-29483-pre1.patch
  - CVE-2023-29483.patch
  (bsc#1222693, CVE-2023-29483, gh#rthalley/dnspython#1044)</changelog>
</package>
<package pkgid="0538de60e6c8fa5a07c078b180e5c5ae44097f6be7437cf391524cddccf17663" name="python3-dnspython" arch="noarch">
  <version epoch="0" ver="1.15.0" rel="150000.3.7.1"/>
  <changelog author="speilicke@suse.com" date="1373889600">- Package LICENSE, use proper upstream URL
- Run testsuite
- Cleanup macro usage</changelog>
  <changelog author="dmueller@suse.com" date="1378900800">- update to 1.11.1:
  * fix syntax error exception on dns server failure
  * various fixlets for DNSSEC support</changelog>
  <changelog author="lars@linux-schulserver.de" date="1413547200">- update to 1.12.0:
  * The test system can now run the tests without requiring dnspython
    to be installed.
  * When reading from a masterfile, if the first content line
    started with leading whitespace, we raised an ugly exception
    instead of doing the right thing, namely using the zone origin as
    the name. [#73]  Thanks to Tassatux for reporting the issue.
  * Added dns.zone.to_text() convenience method.  Thanks to Brandon
    Whaley &lt;redkrieg@gmail.com&gt; for the patch.
  * The /etc/resolv.conf setting "options rotate" is now understood
    by the resolver.  If present, the resolver will shuffle the
    nameserver list each time dns.resolver.query() is called.  Thanks
    to underrun for the patch.  Note that you don't want to add
    "options rotate" to your /etc/resolv.conf if your system's
    resolver library does not understand it.  In this case, just set
    resolver.rotate = True by hand.
  * Escaping of Unicode has been corrected.  Previously we escaped
    and then converted to Unicode, but the right thing to do is
    convert to Unicode, then escape.  Also, characters &gt; 0x7f should
    NOT be escaped in Unicode mode.  Thanks to Martin Basti for the
    patch.
  * dns.rdtypes.ANY.DNSKEY now has helpers functions to convert
    between the numeric form of the flags and a set of human-friendly
    strings.  Thanks to Petr Spacek for the patch.
  * RRSIGs did not respect relativization settings in to_text().
    Thanks to Brian Smith for reporting the bug and submitting a
    (slightly different) patch.
  * dns/rdtypes/IN/APL.py: The APL from_wire() method did not accept an
    rdata length of 0 as valid.  Thanks to salzmdan for reporting the
    problem.
  * dns/ipv6.py: Add is_mapped()
  * dns/reversename.py: Lookup IPv6 mapped IPv4 addresses in the v4
    reverse namespace.  Thanks to Devin Bayer.  Yes, I finally fixed
    this one :)
  * dns/zone.py: Do not put back an unescaped token.  This was
    causing escape processing for domain names to break.  Thanks to
    connormclaud for reporting the problem.
  * dns/message.py: Making a response didn't work correctly if the
    query was signed with TSIG and we knew the key.  Thanks to Jeffrey
    Stiles for reporting the problem.
  * dns/query.py: Fix problems with the IXFR state machine which caused
    long diffs to fail.  Thanks to James Raftery for the fix and the
    repeated prodding to get it applied :)
- enable some tests
- add python-dnspython-rpmlintrc file
- add python-ecdsa and python-pycrypto to BuildRequires for the
  DNSSec tests
- use /usr/bin/python instead of /usr/bin/env python for the example
  scripts to avoid additional dependencies</changelog>
  <changelog author="dmueller@suse.com" date="1416916800">- fix build on SLE11</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1463400000">- New upstream release 1.13.0</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1465905600">- New upstream release 1.14.0</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1475928000">- New upstream release 1.15.0
  * IDNA 2008 support is now available if the "idna" module has been
    installed and IDNA 2008 is requested.  The default IDNA behavior
    is still IDNA 2003.  The new IDNA codec mechanism is currently
    only useful for direct calls to dns.name.from_text() or
    dns.name.from_unicode(), but in future releases it will be
    deployed throughout dnspython, e.g. so that you can read a
    masterfile with an IDNA 2008 codec in force.
  * By default, dns.name.to_unicode() is not strict about which
    version of IDNA the input complies with.  Strictness can be
    requested by using one of the strict IDNA codecs.
  * Add AVC RR support.
  * Some problems with newlines in various output modes have been
    addressed.
  * dns.name.to_text() now returns text and not bytes on Python 3.x
  * More miscellaneous fixes for the Python 2/3 codeline merge.
- Include readme with readme.patch as not included in upstream tarball
- Fix a bug in the tests code with 210.patch with upstream pull request #210</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1476014400">- use and recommend python-ecdsa and python-pycrypto for dnssec support</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1493726400">- Update for the multipython build.
- Rename python-dnspython.asc to python-dnspython.keyring.
- Spec cleanup.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1720699200">- Add new patches to solve DoS:
  - CVE-2023-29483-pre1.patch
  - CVE-2023-29483.patch
  (bsc#1222693, CVE-2023-29483, gh#rthalley/dnspython#1044)</changelog>
</package>
<package pkgid="2e495409359fa5f41abcb39533738396b6c76758ad6ca5238e7977607d234594" name="python3-docutils" arch="noarch">
  <version epoch="0" ver="0.14" rel="150000.3.4.1"/>
  <changelog author="toddrme2178@gmail.com" date="1405425600">- Update to 0.12
  * docs/ref/rst/directives.txt
  - Update "math" and "csv-table" descriptions.
  * docutils/parsers/rst/directives/images.py
  - Fix [258] figwidth="image" generates unitless width value.
  * docutils/parsers/rst/states.py
  - Improve error report when a non-ASCII character is specified as
    delimiter, quote or escape character under Python 2.
    Fixes [ 249 ] and [ 250 ].
  * docutils/writers/html4css1/__init__.py
  - Don't add newline after inline math.
    Thanks to Yury G. Kudryashov for the patch.
  * docutils/writers/latex2e/__init__.py
  - Fix [ 239 ] Latex writer glues paragraphs with figure floats.
  - Apply [ 116 ] by Kirill Smelkov. Don't hardcode \large for subtitle.
  * docutils/writers/odf_odt/__init__.py
  - Apply patch by Jakub Wilk to fix bug [ 100 ].
  * test/test_error_reporting.py
  - Fix [ 223 ] by removing redundant tests we do not have control over.
  * test/test_nodes.py
  - Apply [ 115 ] respect fixed 2to3 string literal conversion behavior.</changelog>
  <changelog author="ledest@gmail.com" date="1414584000">- fix bashisms in pre script</changelog>
  <changelog author="toddrme2178@gmail.com" date="1471262400">- Fix update-alternatives implementation.</changelog>
  <changelog author="dmueller@suse.com" date="1489060800">- update to 0.13.1:
  * New HTML writer generating HTML 5.
  * languages: persian/farsi (fa) and latvian (la) mappings.
  * change default base url for :rfc: to http://tools.ietf.org/html/
  latex2e: Fix admonition width, remove deprecated options,
  better tablewidth auto, ...</changelog>
  <changelog author="aloisio@gmx.com" date="1490356800">- Converted to single-spec
- Added python-docutils-rpmlintrc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492689600">- Fix url
- Executables are python-independent so only have the python3
  version provide them.
- Implement update-alternatives to avoid conflict with rst2html5</changelog>
  <changelog author="toddrme2178@gmail.com" date="1493640000">- Make only the python2 package provide the "docutils" package.</changelog>
  <changelog author="jmatejek@suse.com" date="1496750400">- only emit rst2html5 alternatives for python 3
- switch the "docutils" provides to the python 3 package (all the comands live there)
  (this fixes bsc#1039394)</changelog>
  <changelog author="arun@gmx.de" date="1510315200">- specfile:
  * add binary rst2html4
- update to version 0.14:
  * Enable validation of Docutils XML documents against the DTD:
    Use attribute type NMTOKEN instead of REFID for the `refid` attribute
    and NMTOKENS for `backrefs`: REFID refers to an ID type instance,
    however, the `ids` attribute cannot use the ID type because `XML only
    allows one ID per Element Type`__ and doesn't support a multiple-ID
    "IDS" attribute type.
  * Added documentation for escaped whitespace in URI contexts.
  * Clarify use of Unicode character categories.
  * Added functionality: escaped whitespace in URI contexts.
  * Consistent handling of all whitespace characters in inline markup
    recognition. Fixes [ 307 ] and [ 3402314 ] (now [ 173 ]).
  * Added support for escaped whitespace in URI contexts.
  * Rework patch [ 120 ] (revert change to "Table.get_column_widths()"
    that led to problems in an application with a custom table
    directive).
  * Fix [ 320 ] Russian docinfo fields not recognized.
  * Don't add a second ID to problematic references.
  * Fix SmartQuotes: warn only once if language is unsupported, keep
    "rawsource" when "educating" quotes.
  * Added "split_escaped_whitespace" function, support for escaped
    whitespace in URI contexts.
  * Fix [ 321 ] Import block might cause name error.
  * Update quote definitions for languages et, fi, fr, ro, sv, tr, uk.
  * New quote definitions for hr, hsb, hu, lv, sh, sl, sr.
  * Fix [ 313 ] Differentiate apostrophe from closing single quote (if
    possible).
  * Fix [ 317 ] Extra space inserted with French smartquotes.
  * Add command line interface for stand-alone use (requires 2.7).
  * Provide default title in metadata (required by HTML5).
  * Fix [ 312 ] HTML writer generates invalid HTML if the table has
    two tags.
  * Fix [ 319 ] The MathJax CDN shut down on April 30, 2017. For
    security reasons, we don't use a third party public installation as default but
    warn if math-output_ is set to MathJax without specifying a URL.
  * Apply [ 125 ] HTML writer: respect automatic table column sizing.
  * Handle class arguments for block-level elements by wrapping them
    in a "DUclass" environment. This replaces the special handling for
    "epigraph" and "topic" elements.
  * Apply [ 141 ] Handling inline in manpage writer.
  * Command setting "language" now sets the default language of the
    generated ODF document.
  * The use of image directive options :width: (%), :scale:, etc now
    set the width/height/size of images in the generated ODF
    documents.
  * The heading/title of admonitions now reflects the language
    specified by the "language" setting.
  * Fixed [ 306 ] only first of multiple "image" directives with the
    same URL shown in output.
  * Fixed [ 282 ] python3: AttributeError.
  * tools/rst2html4.py: New front-end.
  * tools/dev/generate_punctuation_chars.py: New skript to test and
    update utils.punctuation_chars.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707134400">- Use update-alternatives for all binary scripts and provide
  /usr/bin/docutils to avoid conflict with python311-docutils
  bsc#1219501</changelog>
</package>
<package pkgid="27c036a6f736d9f7660ba52c4f60b92dd922152cd2a50e7b1ffe4a5222df09ff" name="python3-idna" arch="noarch">
  <version epoch="0" ver="2.6" rel="150000.3.3.1"/>
  <changelog author="nemysis@gmx.ch" date="1437134400">- Initial package creation</changelog>
  <changelog author="tbechtold@suse.com" date="1489665600">- update to version v2.5
  * only store scripts that are specifically referenced in logic
  * Fix validation for U+30FB KATAKANA MIDDLE DOT code point (#47)
  * range-based integer containment code
  * Documentation Updates
  * Make test runners Python 2.6 compatible (issue #20)
  * remove DISALLOWED codepoints from datafile, since they're unread
  * Avoid using bare 'except' (#39)
  * Add Python 3.5 support
  * Mark Python Wheels as universal (supports Python 2 and 3)
  * Skip tests that won't work on Python 2.6 (fixes #20)
  * Update Travis configuration to test against Python 2.6 and 3.6
  * Use relative imports (fixes #26)
  * Documentation tidy up
  * Revert to basing IDNAError on UnicodeError (issue #43) (#45)
  * rebuild idnadata
  * Update history with Java-related change
  * ignore vim swapfiles
  * Update Travis CI coverage to 3.6 and 3.7-dev
  * Reduce memory usage even further. (#41)
  * Update trove classifier for Python 3.6
  * Properly report label length exceptions (issue #36)
  * Segment uts46data to avoid Jython limits (#28)
- Switch to singlespec approach</changelog>
  <changelog author="jmatejek@suse.com" date="1490097600">- point download url to PyPI
- drop %oname</changelog>
  <changelog author="arun@gmx.de" date="1510228800">- update to version 2.6:
  * Allows generation of IDNA and UTS 46 table data for different
    versions of Unicode, by deriving properties directly from Unicode
    data.
  * Ability to generate RFC 5892/IANA-style table data
  * Diagnostic output of IDNA-related Unicode properties and derived
    calculations for a given codepoint
  * Support for idna.__version__ to report version
  * Support for idna.idnadata.__version__ and
    idna.uts46data.__version__ to report Unicode version of underlying
    IDNA and UTS 46 data respectively.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1713441600">- Add CVE-2024-3651.patch, backported from upstream commit
  gh#kjd/idna#172/commits/5beb28b9dd77912c0dd656d8b0fdba3eb80222e7
  (bsc#1222842, CVE-2024-3651)</changelog>
</package>
<package pkgid="7fd05de42c8e1af36866bc3c57ef4ed4ff341923cbca8d94d20bc3c3684aee71" name="python3-jmespath" arch="noarch">
  <version epoch="0" ver="0.9.3" rel="150000.3.5.1"/>
  <changelog author="rschweikert@suse.com" date="1414065600">- Update to version 0.4.1
  + No upstream changelog</changelog>
  <changelog author="rschweikert@suse.com" date="1421582400">- Update to version 0.5.0
  + No upstream changelog
  + Update in support for fix of bnc#905354</changelog>
  <changelog author="aboe76@gmail.com" date="1427371200">- Updated to version 0.6.1
  + No Upstream Changelog</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1430049600">- update to version 0.7.0:
  * Add support for JEP-12, raw string literals
  * Support .whl files
- additional changes from version 0.6.2:
  * Implement JEP-10, slice projections
  * Fix bug with filter projection parsing
  * Add to_array function
  * Add merge function
  * Fix error messages for function argument type errors
- point source URL to pypi</changelog>
  <changelog author="rjschwei@suse.com" date="1432728000">- Update to version 0.7.1:
  * Rename ``bin/jp`` to ``bin/jp.py``
  * Fix issue with precedence when parsing wildcard
    projections
  * Remove ordereddict and simplejson as py2.6 dependencies.
    These were never actually used in the jmespath code base,
    only in the unit tests.  Unittests requirements are handled
    via requirements26.txt.</changelog>
  <changelog author="rjschwei@suse.com" date="1453291200">- Manage the jp executable with update-alternatives now that
  python3-jmespath exists
- spec file improvements</changelog>
  <changelog author="rjschwei@suse.com" date="1453291201">- Fix build issues for SLE 11
  + More test dependencies required</changelog>
  <changelog author="toddrme2178@gmail.com" date="1454328000">- Update to version 0.9.0
  * Add support for new lines with tokens in an expression
  * Add support for JEP 9 which introduces "and" expressions, "unary"
    expressions, "not" expressions, and "paren" expressions
  * Fix issue with hardcoded path in ``jp.py`` executable
    (issue 90, issue 88, issue 82)
- Update to version 0.8.0
  * Improve lexing performance (issue 84)
  * Fix parsing error for multiselect lists (issue 86)
  * Fix issue with escaping single quotes in literal strings (issue 85)
  * Add support for providing your own dict cls to support
    ordered dictionaries (issue 94)
  * Add map() function (issue 95)</changelog>
  <changelog author="toddrme2178@gmail.com" date="1471262400">- Fix update-alternatives implementation.</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to version 0.9.2
  + Fix regression when using ordering comparators on strings (issue 124)
- From 0.9.1
  + Raise LexerError on invalid numbers (issue 98)
  + Add support for custom functions (#100) (issue 100)
  + Fix ZeroDivisionError for built-in function avg() on empty lists (#115)
    (issue 115)
  + Properly handle non numerical ordering operators (#117) (issue 117)</changelog>
  <changelog author="tbechtold@suse.com" date="1490788800">- Only BuildRequire unittest2 for python2</changelog>
  <changelog author="jmatejek@suse.com" date="1490788801">- properly Requires(postun) for %postun section</changelog>
  <changelog author="rjschwei@suse.com" date="1510228800">- Update to 0.9.3:
  + Fix issue where long types in py2 and Decimal types were not
    being evaluated as numbers (issue 125)
  + Handle numbers in scientific notation in to_number() function (issue 120)
  + Fix issue where custom functions would override the function
    table of the builtin function class (issue 133)</changelog>
</package>
<package pkgid="1fdfb504beed7db8b606741dcbd14961c3717ab917398051adc2f077ab0de498" name="python3-libxml2" arch="aarch64">
  <version epoch="0" ver="2.10.3" rel="150500.5.11.1"/>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
</package>
<package pkgid="1c660c12dd1fe607375b311174fc6e10591c2699dbdb9eb88a105e5610144f21" name="python3-libxml2" arch="s390x">
  <version epoch="0" ver="2.10.3" rel="150500.5.11.1"/>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
</package>
<package pkgid="dc468231bc57f502b658a9804b63c21bf93f7325714904bcdb33011716e1e81f" name="python3-libxml2" arch="x86_64">
  <version epoch="0" ver="2.10.3" rel="150500.5.11.1"/>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
</package>
<package pkgid="2642ae902bcfdfc54cbff84cc0ca10f99c91894e2821a2a156208ad0fd9282d7" name="python3-libxml2" arch="aarch64">
  <version epoch="0" ver="2.10.3" rel="150500.5.14.1"/>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
</package>
<package pkgid="6caff5567371dfd99d181318d588ed1d3a2c83490de897144f4f0db239f52d27" name="python3-libxml2" arch="s390x">
  <version epoch="0" ver="2.10.3" rel="150500.5.14.1"/>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
</package>
<package pkgid="16ba98ad64cf069667e855c950675cc50a592afb094a4179bfd99f75e36043dd" name="python3-libxml2" arch="x86_64">
  <version epoch="0" ver="2.10.3" rel="150500.5.14.1"/>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
</package>
<package pkgid="becedf76a027a3dae6e900a67b8e17b66e9d6bda7509bc5f8151e51479648da9" name="python3-libxml2" arch="aarch64">
  <version epoch="0" ver="2.10.3" rel="150500.5.17.1"/>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
  <changelog author="david.anes@suse.com" date="1719403200">- Security fix (CVE-2024-34459, bsc#1224282) buffer over-read in
  xmlHTMLPrintFileContext in xmllint.c
  * Added libxml2-CVE-2024-34459.patch</changelog>
</package>
<package pkgid="49d702e70b3f8c70a698b897701a714bf6532400267e444f6d3ac31e5a440dec" name="python3-libxml2" arch="s390x">
  <version epoch="0" ver="2.10.3" rel="150500.5.17.1"/>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
  <changelog author="david.anes@suse.com" date="1719403200">- Security fix (CVE-2024-34459, bsc#1224282) buffer over-read in
  xmlHTMLPrintFileContext in xmllint.c
  * Added libxml2-CVE-2024-34459.patch</changelog>
</package>
<package pkgid="8a377580cae6ef31b3bafd3d4a14d2cde22bd81a73f09bbd875cee28be833f38" name="python3-libxml2" arch="x86_64">
  <version epoch="0" ver="2.10.3" rel="150500.5.17.1"/>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
  <changelog author="david.anes@suse.com" date="1719403200">- Security fix (CVE-2024-34459, bsc#1224282) buffer over-read in
  xmlHTMLPrintFileContext in xmllint.c
  * Added libxml2-CVE-2024-34459.patch</changelog>
</package>
<package pkgid="345a036ba2025bef02dadae21684b651865dd137b9eb505a1813c5572ad157cf" name="python3-libxml2" arch="aarch64">
  <version epoch="0" ver="2.10.3" rel="150500.5.8.1"/>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
</package>
<package pkgid="2b4f170cb81f8bcd601ef93e03d42bbc751f3d915622c0ff3277731b2b308a23" name="python3-libxml2" arch="s390x">
  <version epoch="0" ver="2.10.3" rel="150500.5.8.1"/>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
</package>
<package pkgid="84a246cd0f063ed51e4df8317fc286311419666e83f82b739a8d722ecdd5799f" name="python3-libxml2" arch="x86_64">
  <version epoch="0" ver="2.10.3" rel="150500.5.8.1"/>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1660824000">- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
    xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
    terminator
    + Fix ownership of xmlNodePtr &amp; xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
    xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default
    + Deprecate all functions in nanoftp.h
    + Disable FTP support by default
    + Add XML_DEPRECATED macro
    + Remove elfgcchack.h
  * Regressions
    + Skip incorrectly opened HTML comments
    + Restore behavior of htmlDocContentDumpFormatOutput()
  * Bug fixes
    + Fix memory leak with invalid XSD
    + Make XPath depth check work with recursive invocations
    + Fix memory leak in xmlLoadEntityContent error path
    + Avoid double-free if malloc fails in inputPush
    + Properly fold whitespace around the QName value when validating an XSD
    schema.
    + Add whitespace folding for some atomic data types that it's missing on.
    + Don't add IDs containing unexpanded entity references
  * Improvements
    + Avoid calling xmlSetTreeDoc
    + Simplify xmlFreeNode
    + Don't reset nsDef when changing node content
    + Fix unintended fall-through in xmlNodeAddContentLen
    + Remove unused xmlBuf functions
    + Implement xpath1() XPointer scheme
    + Add configuration flag for XPointer locations support
    + Fix compiler warnings in Python code
    + Mark more static data as `const`
    + Make xmlStaticCopyNode non-recursive
    + Clean up encoding switching code
    + Simplify recursive pthread mutex
    + Use non-recursive mutex in dict.c
    + Fix parser progress checks
    + Avoid arithmetic on freed pointers
    + Improve buffer allocation scheme
    + Remove unneeded #includes
    + Add support for some non-standard escapes in regular expressions.
    + htmlParseComment: handle abruptly-closed comments
    + Add let variable tag support
    + Add value-of tag support
    + Remove useless call to xmlRelaxNGCleanupTypes
    + Don't include ICU headers in public headers
    + Update `xmlStrlen()` to use POSIX / ISO C `strlen()`
    + Fix unused variable warnings with disabled features
    + Only warn on invalid redeclarations of predefined entities
    + Remove unneeded code in xmlreader.c
    + Rework validation context flags
  * Portability
    + Use NAN/INFINITY if available to init XPath NaN/Inf
    + Fix Python tests on macOS
    + Fix xmlCleanupThreads on Windows
    + Fix reinitialization of library on Windows
    + Don't mix declarations and code in runtest.c
    + Use portable python shebangs
    + Use critical sections as mutex on Windows
    + Don't set HAVE_WIN32_THREADS in win32config.h
    + Use stdint.h with newer MSVC
    + Remove cruft from win32config.h
    + Remove isinf/isnan emulation in win32config.h
    + Always fopen files with "rb"
    + Remove __DJGPP__ checks
    + Remove useless __CYGWIN__ checks
  * Build system
    + Don't autogenerate doc/examples/Makefile.am
    + cmake: Install libxml.m4 on UNIX-like platforms
    + cmake: Use symbol versioning on UNIX-like platforms
    + Port genUnicode.py to Python 3
    + Port gentest.py to Python 3
    + cmake: Fix build without thread support
    + cmake: Install documentation in CMAKE_INSTALL_DOCDIR
    + cmake: Remove non needed files in docs dir
    + configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
    + Move local Autoconf macros into m4 directory
    + Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
    + Update libxml-2.0-uninstalled.pc.in
    + Remove LIBS from XML_PRIVATE_LIBS
    + Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
    + Don't overlink executables
    + cmake: Adjust paths for UNIX or UNIX-like target systems
    + build: Make use of variables in libxml's pkg-config file
    + Avoid obsolescent `test -a` constructs
    + Move AM_MAINTAINER_MODE to AM section
    + configure.ac: make AM_SILENT_RULES([yes]) unconditional
    + Streamline documentation installation
    + Don't try to recreate COPYING symlink
    + Detect libm using libtool's macros
    + configure.ac: disable static libraries by default
    + python/Makefile.am: nest python docs in $(docdir)
    + python/Makefile.am: rely on global AM_INIT_AUTOMAKE
    + Makefile.am: install examples more idiomatically
    + configure.ac: remove useless AC_SUBST
    + Respect `--sysconfdir` in source files
    + Ignore configure backup file created by recent autoreconf too
    + Only install *.html and *.c example files
    + Remove --with-html-dir option
    + Rework documentation build system
    + Remove old website
    + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings
    + Update genChRanges.py
    + Update build_glob.py
    + Remove ICONV_CONST test
    + Remove obsolete AC_HEADER checks
    + Don't check for standard C89 library functions
    + Don't check for standard C89 headers
    + Remove special configuration for certain maintainers
  * Test suite, CI
    + Disable network in API tests
    + testapi: remove leading slash from "/missing.xml"
    + Build Autotools CI tests out of source tree (VPATH)
    + Add --with-minimum build to CI tests
    + Fix warnings when testing --with-minimum build
    + cmake: Run all tests when threads are disabled
    + Also build CI tests with -Werror
    + Move doc/examples tests to new test suite
    + Simplify 'make check' targets
    + Fix schemas and relaxng tests
    + Remove unused result files
    + Allow missing result files in runtest
    + Move regexp tests to runtest
    + Move SVG tests to runtest.c
    + Move testModule to new test suite
    + Move testThreads to new test suite
    + Remove major parts of old test suite
    + Make testchar return an error on failure
    + Add CI job for static build
    + python/tests: open() relative to test scripts
    + Port some test scripts to Python 3
  * Documentation
    + Improve documentation of tree manipulation API
    + Update xml2-config man page
    + Consolidate man pages
    + Rename xmlcatalog_man.xml
    + Make examples a standalone HTML page
    + Fix documentation in entities.c
    + Add note about optimization flags</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661428800">- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661860800">- Update to version 2.10.2:
  * Improvements:
    + Remove set-but-unused variable in xmlXPathScanName
    + Silence -Warray-bounds warning
  * Build system
    + build: require automake-1.16.3 or later
    + Remove generated files from distribution
  * Test suite: Don't create missing.xml when running testapi
- Add configure --with-python=%{__python3} inbefore python build,
  as upstream no longer ships pre-grenerated files.
- Use sed to fix env-script-interpreter in documentation example.
- Pass with-ftp to configure, build ftp support.</changelog>
  <changelog author="pmonreal@suse.com" date="1662033600">- Build for now with --with-legacy to enable APIs that have been
  deprecated recently. (bsc#1202965)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665748800">- Update to version 2.10.3 (bsc#1204366, CVE-2022-40303, bsc#1204367, CVE-2022-40304):
  + Security:
  - [CVE-2022-40304] Fix dict corruption caused by entity
    reference cycles
  - [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
  - Fix overflow check in SAX2.c
  + Build system: cmake: Set SOVERSION
- Rebase patches with quilt.</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
</package>
<package pkgid="d5775254e060a2cc43cb44173ac79d80ac5409871d594913f8e9475522033bc8" name="python3-lxml" arch="aarch64">
  <version epoch="0" ver="4.9.1" rel="150500.3.4.3"/>
  <changelog author="tchvatal@suse.com" date="1568203200">- Update to 4.4.1:
  * LP#1838252: The order of an OrderedDict was lost in 4.4.0 when passing it as attrib mapping during element creation.
  * LP#1838521: The package metadata now lists the supported Python versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1573992000">- Add lxml-libxml-2.9.10.patch: Fix build against libxml 2.9.10.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1579694400">- Update to 4.4.2:
  * LP#1835708: ElementInclude incorrectly rejected repeated
    non-recursive includes as recursive.
  * Remove patch lxml-libxml-2.9.10.patch which is now upstream</changelog>
  <changelog author="mimi.vx@gmail.com" date="1583409600">- update to 4.5.0
  * A new function indent() was added to insert tail whitespace
    for pretty-printing an XML tree.
  * LP#1857794 Tail text of nodes that get removed from a document
    using item deletion disappeared silently instead of sticking with the node
    that was removed.
  * LP#1840234: The package version number is now available as lxml.__version__</changelog>
  <changelog author="mcepl@suse.com" date="1589284800">- Remove explicit Provides of python-doc, which is just wrong.</changelog>
  <changelog author="alarrosa@suse.com" date="1591099200">- Update to 4.5.1
  * LP#1570388: Fix failures when serialising documents larger
    than 2GB in some cases.
  * LP#1865141, GH#298: QName values were not accepted by the
    el.iter() method. Patch by xmo-odoo.
  * LP#1863413, GH#297: The build failed to detect libraries on
    Linux that are only configured via pkg-config.</changelog>
  <changelog author="dmueller@suse.com" date="1594987200">- update to 4.5.2:
  * ``Cleaner()`` now validates that only known configuration options can be set.
  * LP#1882606: ``Cleaner.clean_html()`` discarded comments and PIs regardless of the
    corresponding configuration option, if ``remove_unknown_tags`` was set.
  * LP#1880251: Instead of globally overwriting the document loader in libxml2, lxml now
    sets it per parser run, which improves the interoperability with other users of libxml2
    such as libxmlsec.
  * LP#1881960: Fix build in CPython 3.10 by using Cython 0.29.21.
  * The setup options "--with-xml2-config" and "--with-xslt-config" were accidentally renamed
    to "--xml2-config" and "--xslt-config" in 4.5.1 and are now available again.</changelog>
  <changelog author="dmueller@suse.com" date="1611489600">- update to 4.6.2:
  * A vulnerability (CVE-2020-27783) was discovered in the HTML Cleaner by Yaniv Nizry,
  which allowed JavaScript to pass through.  The cleaner now removes more sneaky
  "style" content. (bsc#1179534)
  * A vulnerability was discovered in the HTML Cleaner by Yaniv Nizry, which allowed
  JavaScript to pass through.  The cleaner now removes more sneaky "style" content.
  * GH#310: ``lxml.html.InputGetter`` supports ``__len__()`` to count the number of input fields.
  Patch by Aidan Woolley.
  * ``lxml.html.InputGetter`` has a new ``.items()`` method to ease processing all input fields.
  * ``lxml.html.InputGetter.keys()`` now returns the field names in document order.
  * GH-309: The API documentation is now generated using ``sphinx-apidoc``.
  * LP#1869455: C14N 2.0 serialisation failed for unprefixed attributes
  when a default namespace was defined.
  * ``TreeBuilder.close()`` raised ``AssertionError`` in some error cases where it
  should have raised ``XMLSyntaxError``.  It now raises a combined exception to
  keep up backwards compatibility, while switching to ``XMLSyntaxError`` as an
  interface.</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- update to 4.6.3:
  * A vulnerability (CVE-2021-28957) was discovered in the HTML Cleaner by Kevin Chung,
    which allowed JavaScript to pass through.  The cleaner now removes the HTML5
    ``formaction`` attribute. (bsc#1184177)</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Adapt test_etree.py to a behavioural change in libxml2 2.9.11+
  * Add python-lxml-test_etree.patch</changelog>
  <changelog author="mcepl@suse.com" date="1622548801">- Add missing dependency on python-base for the devel subpackage.</changelog>
  <changelog author="dmueller@suse.com" date="1637755200">- update to 4.6.4:
  * A new property ``system_url`` was added to DTD entities.
  * The ``STATIC_*`` variables in ``setup.py`` can now be passed via env vars.
- remove python-lxml-test_etree.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 4.6.5 (bsc#1193752, CVE-2021-43818):
  * A vulnerability (GHSL-2021-1038) in the HTML cleaner allowed sneaking script
    content through SVG images.
  * A vulnerability (GHSL-2021-1037) in the HTML cleaner allowed sneaking script
    content through CSS imports and other crafted constructs.</changelog>
  <changelog author="dmueller@suse.com" date="1641816000">- update to 4.7.1:
  * Chunked Unicode string parsing via ``parser.feed()`` now encodes the input data
    to the native UTF-8 encoding directly, instead of going through ``Py_UNICODE`` /
    ``wchar_t`` encoding first, which previously required duplicate recoding in most cases.
  * The standard namespace prefixes were mishandled during "C14N2" serialisation on Python 3.
  * ``lxml.objectify`` previously accepted non-XML numbers with underscores (like "1_000")
    as integers or float values in Python 3.6 and later. It now adheres to the number
    format of the XML spec again.
  * LP#1939031: Static wheels of lxml now contain the header files of zlib and libiconv
    (in addition to the already provided headers of libxml2/libxslt/libexslt).
  * Wheels include libxml2 2.9.12+ and libxslt 1.1.34 (also on Windows).</changelog>
  <changelog author="dmueller@suse.com" date="1645185600">- update to 4.8.0:
  * GH#337: Path-like objects are now supported throughout the API instead of
    just strings.
  * The ``ElementMaker`` now supports ``QName`` values as tags, which always
    override the default namespace of the factory.
  * GH#338: In lxml.objectify, the XSI float annotation "nan" and "inf" were spelled in
    lower case, whereas XML Schema datatypes define them as "NaN" and "INF" respectively.
  * Built with Cython 0.29.28.</changelog>
  <changelog author="dmueller@suse.com" date="1654603200">- update to 4.9.0:
  * The mixin inheritance order in ``lxml.html`` was corrected.
  * Built with Cython 0.29.30 to adapt to changes in Python 3.11 and 3.12.</changelog>
  <changelog author="arun@gmx.de" date="1657368000">- update to version 4.9.1 (bsc#1201253, CVE-2022-2309):
  * Bugs fixed
    + A crash was resolved when using iterwalk() (or canonicalize())
    after parsing certain incorrect input. Note that iterwalk() can
    crash on valid input parsed with the same parser after failing
    to parse the incorrect input.</changelog>
  <changelog author="mcepl@suse.com" date="1663588800">- Update BR for libxml2-devel to the current version.
- Add missing BR for python-base.</changelog>
  <changelog author="dmueller@suse.com" date="1682337600">- Rename package to avoid conflicts with the new Python Stack Proposal (jsc#PED-68)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1720612800">- Add libexpat-2.6.0-backport.patch to fix compatibility with system
  libexpat in tests (bsc#1222075, CVE-2023-52425).</changelog>
</package>
<package pkgid="354d20e92bd0f4b214f14c8ded9e15e2aeedf5d99821b9a340f78eb4e366a6e1" name="python3-lxml" arch="src">
  <version epoch="0" ver="4.9.1" rel="150500.3.4.3"/>
  <changelog author="tchvatal@suse.com" date="1568203200">- Update to 4.4.1:
  * LP#1838252: The order of an OrderedDict was lost in 4.4.0 when passing it as attrib mapping during element creation.
  * LP#1838521: The package metadata now lists the supported Python versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1573992000">- Add lxml-libxml-2.9.10.patch: Fix build against libxml 2.9.10.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1579694400">- Update to 4.4.2:
  * LP#1835708: ElementInclude incorrectly rejected repeated
    non-recursive includes as recursive.
  * Remove patch lxml-libxml-2.9.10.patch which is now upstream</changelog>
  <changelog author="mimi.vx@gmail.com" date="1583409600">- update to 4.5.0
  * A new function indent() was added to insert tail whitespace
    for pretty-printing an XML tree.
  * LP#1857794 Tail text of nodes that get removed from a document
    using item deletion disappeared silently instead of sticking with the node
    that was removed.
  * LP#1840234: The package version number is now available as lxml.__version__</changelog>
  <changelog author="mcepl@suse.com" date="1589284800">- Remove explicit Provides of python-doc, which is just wrong.</changelog>
  <changelog author="alarrosa@suse.com" date="1591099200">- Update to 4.5.1
  * LP#1570388: Fix failures when serialising documents larger
    than 2GB in some cases.
  * LP#1865141, GH#298: QName values were not accepted by the
    el.iter() method. Patch by xmo-odoo.
  * LP#1863413, GH#297: The build failed to detect libraries on
    Linux that are only configured via pkg-config.</changelog>
  <changelog author="dmueller@suse.com" date="1594987200">- update to 4.5.2:
  * ``Cleaner()`` now validates that only known configuration options can be set.
  * LP#1882606: ``Cleaner.clean_html()`` discarded comments and PIs regardless of the
    corresponding configuration option, if ``remove_unknown_tags`` was set.
  * LP#1880251: Instead of globally overwriting the document loader in libxml2, lxml now
    sets it per parser run, which improves the interoperability with other users of libxml2
    such as libxmlsec.
  * LP#1881960: Fix build in CPython 3.10 by using Cython 0.29.21.
  * The setup options "--with-xml2-config" and "--with-xslt-config" were accidentally renamed
    to "--xml2-config" and "--xslt-config" in 4.5.1 and are now available again.</changelog>
  <changelog author="dmueller@suse.com" date="1611489600">- update to 4.6.2:
  * A vulnerability (CVE-2020-27783) was discovered in the HTML Cleaner by Yaniv Nizry,
  which allowed JavaScript to pass through.  The cleaner now removes more sneaky
  "style" content. (bsc#1179534)
  * A vulnerability was discovered in the HTML Cleaner by Yaniv Nizry, which allowed
  JavaScript to pass through.  The cleaner now removes more sneaky "style" content.
  * GH#310: ``lxml.html.InputGetter`` supports ``__len__()`` to count the number of input fields.
  Patch by Aidan Woolley.
  * ``lxml.html.InputGetter`` has a new ``.items()`` method to ease processing all input fields.
  * ``lxml.html.InputGetter.keys()`` now returns the field names in document order.
  * GH-309: The API documentation is now generated using ``sphinx-apidoc``.
  * LP#1869455: C14N 2.0 serialisation failed for unprefixed attributes
  when a default namespace was defined.
  * ``TreeBuilder.close()`` raised ``AssertionError`` in some error cases where it
  should have raised ``XMLSyntaxError``.  It now raises a combined exception to
  keep up backwards compatibility, while switching to ``XMLSyntaxError`` as an
  interface.</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- update to 4.6.3:
  * A vulnerability (CVE-2021-28957) was discovered in the HTML Cleaner by Kevin Chung,
    which allowed JavaScript to pass through.  The cleaner now removes the HTML5
    ``formaction`` attribute. (bsc#1184177)</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Adapt test_etree.py to a behavioural change in libxml2 2.9.11+
  * Add python-lxml-test_etree.patch</changelog>
  <changelog author="mcepl@suse.com" date="1622548801">- Add missing dependency on python-base for the devel subpackage.</changelog>
  <changelog author="dmueller@suse.com" date="1637755200">- update to 4.6.4:
  * A new property ``system_url`` was added to DTD entities.
  * The ``STATIC_*`` variables in ``setup.py`` can now be passed via env vars.
- remove python-lxml-test_etree.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 4.6.5 (bsc#1193752, CVE-2021-43818):
  * A vulnerability (GHSL-2021-1038) in the HTML cleaner allowed sneaking script
    content through SVG images.
  * A vulnerability (GHSL-2021-1037) in the HTML cleaner allowed sneaking script
    content through CSS imports and other crafted constructs.</changelog>
  <changelog author="dmueller@suse.com" date="1641816000">- update to 4.7.1:
  * Chunked Unicode string parsing via ``parser.feed()`` now encodes the input data
    to the native UTF-8 encoding directly, instead of going through ``Py_UNICODE`` /
    ``wchar_t`` encoding first, which previously required duplicate recoding in most cases.
  * The standard namespace prefixes were mishandled during "C14N2" serialisation on Python 3.
  * ``lxml.objectify`` previously accepted non-XML numbers with underscores (like "1_000")
    as integers or float values in Python 3.6 and later. It now adheres to the number
    format of the XML spec again.
  * LP#1939031: Static wheels of lxml now contain the header files of zlib and libiconv
    (in addition to the already provided headers of libxml2/libxslt/libexslt).
  * Wheels include libxml2 2.9.12+ and libxslt 1.1.34 (also on Windows).</changelog>
  <changelog author="dmueller@suse.com" date="1645185600">- update to 4.8.0:
  * GH#337: Path-like objects are now supported throughout the API instead of
    just strings.
  * The ``ElementMaker`` now supports ``QName`` values as tags, which always
    override the default namespace of the factory.
  * GH#338: In lxml.objectify, the XSI float annotation "nan" and "inf" were spelled in
    lower case, whereas XML Schema datatypes define them as "NaN" and "INF" respectively.
  * Built with Cython 0.29.28.</changelog>
  <changelog author="dmueller@suse.com" date="1654603200">- update to 4.9.0:
  * The mixin inheritance order in ``lxml.html`` was corrected.
  * Built with Cython 0.29.30 to adapt to changes in Python 3.11 and 3.12.</changelog>
  <changelog author="arun@gmx.de" date="1657368000">- update to version 4.9.1 (bsc#1201253, CVE-2022-2309):
  * Bugs fixed
    + A crash was resolved when using iterwalk() (or canonicalize())
    after parsing certain incorrect input. Note that iterwalk() can
    crash on valid input parsed with the same parser after failing
    to parse the incorrect input.</changelog>
  <changelog author="mcepl@suse.com" date="1663588800">- Update BR for libxml2-devel to the current version.
- Add missing BR for python-base.</changelog>
  <changelog author="dmueller@suse.com" date="1682337600">- Rename package to avoid conflicts with the new Python Stack Proposal (jsc#PED-68)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1720612800">- Add libexpat-2.6.0-backport.patch to fix compatibility with system
  libexpat in tests (bsc#1222075, CVE-2023-52425).</changelog>
</package>
<package pkgid="4927810b3bcf28f4c7a9dfb604fe58f69b9cc53287a979fa747f59ea99fe858a" name="python3-lxml" arch="x86_64">
  <version epoch="0" ver="4.9.1" rel="150500.3.4.3"/>
  <changelog author="tchvatal@suse.com" date="1568203200">- Update to 4.4.1:
  * LP#1838252: The order of an OrderedDict was lost in 4.4.0 when passing it as attrib mapping during element creation.
  * LP#1838521: The package metadata now lists the supported Python versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1573992000">- Add lxml-libxml-2.9.10.patch: Fix build against libxml 2.9.10.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1579694400">- Update to 4.4.2:
  * LP#1835708: ElementInclude incorrectly rejected repeated
    non-recursive includes as recursive.
  * Remove patch lxml-libxml-2.9.10.patch which is now upstream</changelog>
  <changelog author="mimi.vx@gmail.com" date="1583409600">- update to 4.5.0
  * A new function indent() was added to insert tail whitespace
    for pretty-printing an XML tree.
  * LP#1857794 Tail text of nodes that get removed from a document
    using item deletion disappeared silently instead of sticking with the node
    that was removed.
  * LP#1840234: The package version number is now available as lxml.__version__</changelog>
  <changelog author="mcepl@suse.com" date="1589284800">- Remove explicit Provides of python-doc, which is just wrong.</changelog>
  <changelog author="alarrosa@suse.com" date="1591099200">- Update to 4.5.1
  * LP#1570388: Fix failures when serialising documents larger
    than 2GB in some cases.
  * LP#1865141, GH#298: QName values were not accepted by the
    el.iter() method. Patch by xmo-odoo.
  * LP#1863413, GH#297: The build failed to detect libraries on
    Linux that are only configured via pkg-config.</changelog>
  <changelog author="dmueller@suse.com" date="1594987200">- update to 4.5.2:
  * ``Cleaner()`` now validates that only known configuration options can be set.
  * LP#1882606: ``Cleaner.clean_html()`` discarded comments and PIs regardless of the
    corresponding configuration option, if ``remove_unknown_tags`` was set.
  * LP#1880251: Instead of globally overwriting the document loader in libxml2, lxml now
    sets it per parser run, which improves the interoperability with other users of libxml2
    such as libxmlsec.
  * LP#1881960: Fix build in CPython 3.10 by using Cython 0.29.21.
  * The setup options "--with-xml2-config" and "--with-xslt-config" were accidentally renamed
    to "--xml2-config" and "--xslt-config" in 4.5.1 and are now available again.</changelog>
  <changelog author="dmueller@suse.com" date="1611489600">- update to 4.6.2:
  * A vulnerability (CVE-2020-27783) was discovered in the HTML Cleaner by Yaniv Nizry,
  which allowed JavaScript to pass through.  The cleaner now removes more sneaky
  "style" content. (bsc#1179534)
  * A vulnerability was discovered in the HTML Cleaner by Yaniv Nizry, which allowed
  JavaScript to pass through.  The cleaner now removes more sneaky "style" content.
  * GH#310: ``lxml.html.InputGetter`` supports ``__len__()`` to count the number of input fields.
  Patch by Aidan Woolley.
  * ``lxml.html.InputGetter`` has a new ``.items()`` method to ease processing all input fields.
  * ``lxml.html.InputGetter.keys()`` now returns the field names in document order.
  * GH-309: The API documentation is now generated using ``sphinx-apidoc``.
  * LP#1869455: C14N 2.0 serialisation failed for unprefixed attributes
  when a default namespace was defined.
  * ``TreeBuilder.close()`` raised ``AssertionError`` in some error cases where it
  should have raised ``XMLSyntaxError``.  It now raises a combined exception to
  keep up backwards compatibility, while switching to ``XMLSyntaxError`` as an
  interface.</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- update to 4.6.3:
  * A vulnerability (CVE-2021-28957) was discovered in the HTML Cleaner by Kevin Chung,
    which allowed JavaScript to pass through.  The cleaner now removes the HTML5
    ``formaction`` attribute. (bsc#1184177)</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Adapt test_etree.py to a behavioural change in libxml2 2.9.11+
  * Add python-lxml-test_etree.patch</changelog>
  <changelog author="mcepl@suse.com" date="1622548801">- Add missing dependency on python-base for the devel subpackage.</changelog>
  <changelog author="dmueller@suse.com" date="1637755200">- update to 4.6.4:
  * A new property ``system_url`` was added to DTD entities.
  * The ``STATIC_*`` variables in ``setup.py`` can now be passed via env vars.
- remove python-lxml-test_etree.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 4.6.5 (bsc#1193752, CVE-2021-43818):
  * A vulnerability (GHSL-2021-1038) in the HTML cleaner allowed sneaking script
    content through SVG images.
  * A vulnerability (GHSL-2021-1037) in the HTML cleaner allowed sneaking script
    content through CSS imports and other crafted constructs.</changelog>
  <changelog author="dmueller@suse.com" date="1641816000">- update to 4.7.1:
  * Chunked Unicode string parsing via ``parser.feed()`` now encodes the input data
    to the native UTF-8 encoding directly, instead of going through ``Py_UNICODE`` /
    ``wchar_t`` encoding first, which previously required duplicate recoding in most cases.
  * The standard namespace prefixes were mishandled during "C14N2" serialisation on Python 3.
  * ``lxml.objectify`` previously accepted non-XML numbers with underscores (like "1_000")
    as integers or float values in Python 3.6 and later. It now adheres to the number
    format of the XML spec again.
  * LP#1939031: Static wheels of lxml now contain the header files of zlib and libiconv
    (in addition to the already provided headers of libxml2/libxslt/libexslt).
  * Wheels include libxml2 2.9.12+ and libxslt 1.1.34 (also on Windows).</changelog>
  <changelog author="dmueller@suse.com" date="1645185600">- update to 4.8.0:
  * GH#337: Path-like objects are now supported throughout the API instead of
    just strings.
  * The ``ElementMaker`` now supports ``QName`` values as tags, which always
    override the default namespace of the factory.
  * GH#338: In lxml.objectify, the XSI float annotation "nan" and "inf" were spelled in
    lower case, whereas XML Schema datatypes define them as "NaN" and "INF" respectively.
  * Built with Cython 0.29.28.</changelog>
  <changelog author="dmueller@suse.com" date="1654603200">- update to 4.9.0:
  * The mixin inheritance order in ``lxml.html`` was corrected.
  * Built with Cython 0.29.30 to adapt to changes in Python 3.11 and 3.12.</changelog>
  <changelog author="arun@gmx.de" date="1657368000">- update to version 4.9.1 (bsc#1201253, CVE-2022-2309):
  * Bugs fixed
    + A crash was resolved when using iterwalk() (or canonicalize())
    after parsing certain incorrect input. Note that iterwalk() can
    crash on valid input parsed with the same parser after failing
    to parse the incorrect input.</changelog>
  <changelog author="mcepl@suse.com" date="1663588800">- Update BR for libxml2-devel to the current version.
- Add missing BR for python-base.</changelog>
  <changelog author="dmueller@suse.com" date="1682337600">- Rename package to avoid conflicts with the new Python Stack Proposal (jsc#PED-68)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1720612800">- Add libexpat-2.6.0-backport.patch to fix compatibility with system
  libexpat in tests (bsc#1222075, CVE-2023-52425).</changelog>
</package>
<package pkgid="c0be2edb30b4e88c736829fcb582e8aa5189d24063bebaae2ecc2c861b4aec51" name="python3-nftables" arch="noarch">
  <version epoch="0" ver="0.9.8" rel="150400.6.3.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 0.8
  * This release contains new features available up to the
    (upcoming) Linux 4.14 kernel release:
  * Support for stateful objects, these objects are uniquely
    identified by a user-defined name, you can refer to them from
    rules, and there is a well established interface to operate
    with them.
  * Sort set elements when listing them, from lower to largest.
  * TCP option matching and mangling support. This includes TCP
    maximum segment size mangling.
  * Add new "-s" option for listings without stateful information.
  * Add new -c/--check option for nft, to tests if your ruleset
    loads fine, into the kernel, this is a dry run mode.
  * Connection tracking helper support.
  * Add --echo option, to print the handle that the kernel
    allocates to uniquely identify rules.
  * Conntrack zone support
  * Symmetric hash support
  * Add support to include directories from nft natives scripts,
    files are loaded in alphanumerical order.
  * Allow to check if IPv6 extension header or TCP option exists
    or is missing.
  * Extend quota support to display used bytes.
  * Add ct average matching, to match average bytes per packet a
    connection has transferred so far, to map the existing
    feature available in the iptables connbytes match.
  * Allow to flush maps and flow tables.
  * Allow to embed set definition into an existing set.
  * Conntrack event filtering support via rule.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- Update to new upstream release 0.8.1
  * This release deprecates the "flow table" syntax in favor
    of "meter".</changelog>
  <changelog author="jengelh@inai.de" date="1517659200">- Update to new upstream release 0.8.2
  * add secpath support</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 0.8.3
  * raw payload support to match headers that do not yet have
    received a mnemonic.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 0.8.4
  * Support to match IPv6 segment routing headers.
  * New "meta ibrname" and "meta obrname" arguments to match the
    name of the logical bridge a packet is passing through.
    These new names replace the old (misnamed) "ibriport"/"obriport".
  * `nft -a` will now show handle identifier for all objects,
    including tables and chains.
  * nft can now delete objects by their handle number.
  * Support to update maps from the ruleset (packet path).
  * the "--echo" option now prints handle id for tables and
    object too.
  * `nft -f -` will now read from standard input
  * Support for flow tables, cf. man page or
    https://lwn.net/Articles/738214/ .</changelog>
  <changelog author="jengelh@inai.de" date="1526040000">- Update to new upstream release 0.8.5
  * support to add/insert a rule at a given index position
  * meter statement now supports a configureable upper max size
  * timeouts for sets can now be specified in milliseconds
  * re-add iptables-like empty skeleton rulesets</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 0.9.0
  * Support to check if packet matches an existing socket.
  * Support to limit number of active connections by arbitrary
    criteria, such as ip addresses, networks, conntrack zones or
    any combination thereof.
  * Added support for "audit" logging.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1651492800">- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
  crashes that could occur e.g. in firewalld (bsc#1197606).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1682424000">- add 0001-evaluate-reject-support-ethernet-as-L2-protocol-for-.patch: this
  fixes a crash in nftables if layer2 reject rules are processed (e.g.
  Ethernet MAC address based reject rich rule in firewalld, bsc#1210773).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1706616000">- port python-single-spec logic from Factory package to allow shipment of
  python311 modules as well (bsc#1219253).</changelog>
</package>
<package pkgid="5bb903a404fadb4739becce664930c214f1e11ac2df67777feec922f213fe929" name="python3-ply" arch="noarch">
  <version epoch="0" ver="3.10" rel="150000.3.5.1"/>
  <changelog author="saschpe@suse.de" date="1301400000">- Update to 3.4:
  + Minor patch to make cpp.py compatible with Python 3.
  + Fixed setup.py trove classifiers to properly list PLY as Python
    3 compatible.
- License changed to BSD3c
- Packaged more doc files
- Moved important docs (README, ..) to base package
- Fixed build for non-SUSE distros</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="highwaystar.ru@gmail.com" date="1337947200">- python3 package added</changelog>
  <changelog author="toddrme2178@gmail.com" date="1337947201">- spec file cleanups</changelog>
  <changelog author="toddrme2178@gmail.com" date="1357128000">- Fix building on SLES</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1431345600">- update to version 3.6:
  * If PLY is unable to create the 'parser.out' or 'parsetab.py'
    files due to permission issues, it now just issues a warning
    message and continues to operate
  * Fixed some issues related to use of packages and table file
    modules
- additional changes from version 3.5:
  * Added support for defaulted_states in the parser
  * Fixed debug logging in the parser
  * Added actions to be defined to character literals (Issue #32)
  * Import of the 'parsetab.py' file is now constrained to only
    consider the directory specified by the outputdir argument to
    yacc()
  * Changed default output directory to be the same as that in
    which the yacc grammar is defined
  * Changed the parsetab.py file signature slightly so that the
    parsetab won't regenerate if created on a different major
    version of Python
  * Fixed Issue #44 call_errorfunc() should return the result of
    errorfunc()
  * Support for versions of Python &lt;2.7 is officially dropped
  * Fixed bug related to calling yacc(start=...)
  * Added skipped tests for PyPy and Java
  * Added filter to make unit tests pass under 'python -3'
  * Fixed CPP_INTEGER regex in ply/cpp.py (Issue 21)
  * Fixed yacc validation bugs when from __future__ import
    unicode_literals is being used
  * Added support for Travis-CI
  * Added a .gitignore file
  * Fixed validation problems for source files that include a
    different source code encoding specifier
  * Fixed unit tests for yacc to eliminate random failures due to
    dict hash value randomization in Python 3.3
  * Fixed comment whitespace processing bugs in ply/cpp.py
  * Fixed token names in ply/ctokens.py to match rule names
  * Changes to functions available in panic mode error recover
  * Fixed some problems with line and position tracking and the use
    of error symbols
  * Change to doc string handling in lex module
  * Fixed issue #1: Fixed _tabversion. It should use __tabversion__
    instead of __version__
  * Fixed issue #8: Literals empty list causes IndexError
  * Fixed issue #12: Typo in code snippet in documentation
  * Fixed issue #10: Correctly escape t_XOREQUAL pattern.
- clean the test and example directories
- remove stray backup files in doc
- remove unneeded executable bit of testlex.py
- remove CFLAGS export: unneeded
- do not drop executable bit of everything in test since
  it contains subdirectories
- remove useless clean section
- remove README from package: not provided anymore</changelog>
  <changelog author="hpj@urpla.net" date="1444219200">- update to version 3.8:
  * Fixed issues related to Python 3.5. Patch contributed by Barry Warsaw.
- update to version 3.7
  * Fixed problems when reading table files from pickled data.
  * Fixed regression in handling of table modules if specified as module
    objects.   See https://github.com/dabeaz/ply/issues/63
- clean up spec
- add testing rig</changelog>
  <changelog author="tbechtold@suse.com" date="1472817600">- update to 3.9:
  * Exposed the parser state number as the parser.state attribute
    in productions and error functions.
  * Fixed Issue #88. Python3 compatibility with ply/cpp.
  * Fixed Issue #93. Ply can crash if SyntaxError is raised inside
    a production.   Not actually sure if the original implementation
    worked as documented at all.  Yacc has been modified to follow
    the spec as outlined in the CHANGES noted for 11/27/07 below.
  * Fixed Issue #97. Failure with code validation when the original
    source files aren't present.   Validation step now ignores
    the missing file.
  * Minor fixes to version numbers.</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to 3.10
  * Changed grammar signature computation to not involve hashing
    functions. Parts are just combined into a big string.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1499688000">- Fix wrong-script-interpreter rpmlint error.</changelog>
</package>
<package pkgid="54aa5a5b41bdeb853d8a0e7dfb2c23960da8518a5b58e8df93cfc2354feda702" name="python3-psutil" arch="aarch64">
  <version epoch="0" ver="5.9.1" rel="150300.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Add pr_1665.patch: Future-proof disk_io_counters on Linux. Fixes
  tests with Linux 5.5.</changelog>
  <changelog author="tchvatal@suse.com" date="1584187200">- Update to 5.7.0:
  * Various fixes to build with updated kernel/etc.
- Remove merged patch pr_1665.patch and pr_1364.patch
- Update patch skip-obs.patch
- Remove skip-test-missing-warnings.patch as it can be fixed by
  properly calling the tests</changelog>
  <changelog author="mcepl@suse.com" date="1598011200">- Add skip_failing_tests.patch to skip tests failing because of
  incomplete emulation of the environment in osc build
  environment (gh#giampaolo/psutil#1635).</changelog>
  <changelog author="dmueller@suse.com" date="1600257600">- update to 5.7.2:
  * parallel tests on UNIX (make test-parallel). They're twice as fast!
  * 1741: "make build/install" is now run in parallel and it's about 15% faster on UNIX.
  * 1747: Process.wait() on POSIX returns an enum, showing the negative signal which was used to terminate the process
  * 1747: Process.wait() return value is cached so that the exit code can be retrieved on then next call.
  * 1747: Process provides more info about the process on str() and repr() (status and exit code):
  * 1757: memory leak tests are now stable.
  * 1768: [Windows] added support for Windows Nano Server. (contributed by Julien Lebot)
  * 1726: [Linux] cpu_freq() parsing should use spaces instead of tabs on ia64. (patch by Michał Górny)
  * 1760: [Linux] Process.rlimit() does not handle long long type properly.
  * 1766: [macOS] NoSuchProcess may be raised instead of ZombieProcess.
  * 1781: fix signature of callback function for getloadavg(). (patch by Ammar Askar)
  - remove skip-flaky-i586.patch (obsolete)</changelog>
  <changelog author="code@bnavigator.de" date="1604404800">- Fix shebang replacement for multiple python flavors</changelog>
  <changelog author="dmueller@suse.com" date="1606824000">- update to 5.7.3:
  - 809_: [FreeBSD] add support for `Process.rlimit()`.
  - 893_: [BSD] add support for `Process.environ()` (patch by Armin Gruner)
  - 1830_: [UNIX] `net_if_stats()`'s `isup` also checks whether the NIC is
    running (meaning Wi-Fi or ethernet cable is connected).
  - 1837_: [Linux] improved battery detection and charge "secsleft" calculation
  - 1620_: [Linux] physical cpu_count() result is incorrect on systems with more
    than one CPU socket.
  - 1738_: [macOS] Process.exe() may raise FileNotFoundError if process is still
    alive but the exe file which launched it got deleted.
  - 1791_: [macOS] fix missing include for getpagesize().
  - 1823_: [Windows] Process.open_files() may cause a segfault due to a NULL
    pointer.
  - 1838_: [Linux] sensors_battery(): if `percent` can be determined but not
    the remaining values, still return a result instead of None.
- skip-obs.patch, skip_failing_tests.patch: rediff</changelog>
  <changelog author="asn@cryptomilk.org" date="1607688000">- Add missing BR for unittest2</changelog>
  <changelog author="code@bnavigator.de" date="1607688001">- Only require unittest2 for Leap.</changelog>
  <changelog author="alarrosa@suse.com" date="1611576000">- update to 5.8.0:
  * Enhancements:
  - 1863: disk_partitions() exposes 2 extra fields: maxfile and
    maxpath, which are the maximum file name and path name
    length.
  - 1872: [Windows] added support for PyPy 2.7.
  - 1879: provide pre-compiled wheels for Linux and macOS.
  - 1880: get rid of Travis and Cirrus CI services (they are no
    longer free). CI testing is now done by GitHub Actions on
    Linux, macOS and FreeBSD (yes). AppVeyor is still being used
    for Windows CI.
  * Bug fixes:
  - 1708: [Linux] get rid of sensors_temperatures() duplicates.
    (patch by Tim Schlueter).
  - 1839: [Windows] always raise AccessDenied when failing to
    query 64 processes from 32 bit ones (NtWoW64 APIs).
  - 1866: [Windows] process exe(), cmdline(), environ() may raise
    "invalid access to memory location" on Python 3.9.
  - 1874: [Solaris] wrong swap output given when encrypted column
    is present.
  - 1875: [Windows] process username() may raise
    ERROR_NONE_MAPPED if the SID has no corresponding account
    name. In this case AccessDenied is now raised.
  - 1877: [Windows] OpenProcess may fail with ERROR_SUCCESS.
    Turn it into AccessDenied or NoSuchProcess depending on
    whether the PID is alive.
  - 1886: [macOS] EIO error may be raised on cmdline() and
    environment(). Now it gets translated into AccessDenied.
  - 1891: [macOS] get rid of deprecated getpagesize().
- Rebase patch and skip three other tests that fail on obs
  * skip-obs.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1611835200">- Add patch to skip tests related to rlimit and zombie processes
  that fail when building for python2 on i586:
  * skip_rlimit_tests_on_python2.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1611921600">- Do not install tests (and change the way they're run since they
  were run from %{buildroot})</changelog>
  <changelog author="idesmi@protonmail.com" date="1620820800">- remove the dependency on net-tools, since it conflicts with
  busybox-hostnmame which is default on MicroOS. boo#1184753</changelog>
  <changelog author="steven.kowalik@suse.com" date="1637841600">- Update skip-obs.patch to also skip TestProcess.test_ionice_linux</changelog>
  <changelog author="dmueller@suse.com" date="1641816000">- update to 5.9.0:
  * [Linux]: `cpu_freq()`_ is slow on systems with many CPUs. Read current
    frequency values for all CPUs from ``/proc/cpuinfo`` instead of opening many
    files in ``/sys`` fs.  (patch by marxin)
  * `NoSuchProcess`_ message now specifies if the PID has been reused.
  * error classes (`NoSuchProcess`_, `AccessDenied`_, etc.) now have a better
    formatted and separated ``__repr__`` and ``__str__`` implementations.
  * [Linux]: `disk_partitions()`_: convert ``/dev/root`` device (an alias
    used on some Linux distros) to real root device path.
  * ``PSUTIL_DEBUG`` mode now prints file name and line number of the debug
    messages coming from C extension modules.
  * rewrite HISTORY.rst to use hyperlinks pointing to psutil API doc.
  * [Linux]: `wait_procs()`_ should catch ``subprocess.TimeoutExpired``
  exception.
  * [Linux]: `sensors_battery()`_ can raise ``TypeError`` on PureOS.
  * [Linux]: psutil does not handle ``ENAMETOOLONG`` when accessing process
  file descriptors in procfs.  (patch by Nikita Radchenko)
  * **[critical]**: ``memoize_when_activated`` decorator is not thread-safe.
  * **[critical]**: `process_iter()`_ is not thread safe and can raise
  ``TypeError`` if invoked from multiple threads.
  * [Linux]: `cpu_freq()`_ return order is wrong on systems with more than
  9 CPUs.</changelog>
  <changelog author="mcepl@suse.com" date="1643544000">- Add skip-partitions-erros.patch skipping tests failing on Linux
  (gh#giampaolo/psutil#2043).</changelog>
  <changelog author="mcepl@suse.com" date="1643803200">- Fix name of Patch4, it is skip-partitions-erros.patch</changelog>
  <changelog author="michael@stroeder.com" date="1653393600">- removed obsolete skip-partitions-erros.patch
- update to 5.9.1
  * Enhancements
  - 1053: drop Python 2.6 support. (patches by Matthieu Darbois and Hugo van Kemenade)
  - 2050, [Linux]: increase read(2) buffer size from 1k to 32k when reading /proc
    pseudo files line by line. This should help having more consistent results.
  - 2057, [OpenBSD]: add support for cpu_freq().
  - 2107, [Linux]: Process.memory_full_info() (reporting process USS/PSS/Swap memory)
    now reads /proc/pid/smaps_rollup instead of /proc/pids/smaps, which makes it 5 times faster.
  * Bug fixes
  - 2048: AttributeError is raised if psutil.Error class is raised manually and passed through str.
  - 2049, [Linux]: cpu_freq() erroneously returns curr value in GHz while min and max are in MHz.
  - 2050, [Linux]: virtual_memory() may raise ValueError if running in a LCX container.</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Add patch mem-used-bsc1181475.patch (bsc#1181475)
  * Adopt change of used memory calculation from upstream of procps</changelog>
  <changelog author="code@bnavigator.de" date="1657886400">- Fix tests: setuptools changed the builddir library path and does
  not find the module from it. Use the installed platlib instead
  and exclude psutil.tests only later.
- Refresh skip-obs.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1669032000">- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)</changelog>
</package>
<package pkgid="6ff304d04fa47707b86f909ee822ba66d52b426b547e6463faf40b90242d9991" name="python3-psutil" arch="s390x">
  <version epoch="0" ver="5.9.1" rel="150300.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Add pr_1665.patch: Future-proof disk_io_counters on Linux. Fixes
  tests with Linux 5.5.</changelog>
  <changelog author="tchvatal@suse.com" date="1584187200">- Update to 5.7.0:
  * Various fixes to build with updated kernel/etc.
- Remove merged patch pr_1665.patch and pr_1364.patch
- Update patch skip-obs.patch
- Remove skip-test-missing-warnings.patch as it can be fixed by
  properly calling the tests</changelog>
  <changelog author="mcepl@suse.com" date="1598011200">- Add skip_failing_tests.patch to skip tests failing because of
  incomplete emulation of the environment in osc build
  environment (gh#giampaolo/psutil#1635).</changelog>
  <changelog author="dmueller@suse.com" date="1600257600">- update to 5.7.2:
  * parallel tests on UNIX (make test-parallel). They're twice as fast!
  * 1741: "make build/install" is now run in parallel and it's about 15% faster on UNIX.
  * 1747: Process.wait() on POSIX returns an enum, showing the negative signal which was used to terminate the process
  * 1747: Process.wait() return value is cached so that the exit code can be retrieved on then next call.
  * 1747: Process provides more info about the process on str() and repr() (status and exit code):
  * 1757: memory leak tests are now stable.
  * 1768: [Windows] added support for Windows Nano Server. (contributed by Julien Lebot)
  * 1726: [Linux] cpu_freq() parsing should use spaces instead of tabs on ia64. (patch by Michał Górny)
  * 1760: [Linux] Process.rlimit() does not handle long long type properly.
  * 1766: [macOS] NoSuchProcess may be raised instead of ZombieProcess.
  * 1781: fix signature of callback function for getloadavg(). (patch by Ammar Askar)
  - remove skip-flaky-i586.patch (obsolete)</changelog>
  <changelog author="code@bnavigator.de" date="1604404800">- Fix shebang replacement for multiple python flavors</changelog>
  <changelog author="dmueller@suse.com" date="1606824000">- update to 5.7.3:
  - 809_: [FreeBSD] add support for `Process.rlimit()`.
  - 893_: [BSD] add support for `Process.environ()` (patch by Armin Gruner)
  - 1830_: [UNIX] `net_if_stats()`'s `isup` also checks whether the NIC is
    running (meaning Wi-Fi or ethernet cable is connected).
  - 1837_: [Linux] improved battery detection and charge "secsleft" calculation
  - 1620_: [Linux] physical cpu_count() result is incorrect on systems with more
    than one CPU socket.
  - 1738_: [macOS] Process.exe() may raise FileNotFoundError if process is still
    alive but the exe file which launched it got deleted.
  - 1791_: [macOS] fix missing include for getpagesize().
  - 1823_: [Windows] Process.open_files() may cause a segfault due to a NULL
    pointer.
  - 1838_: [Linux] sensors_battery(): if `percent` can be determined but not
    the remaining values, still return a result instead of None.
- skip-obs.patch, skip_failing_tests.patch: rediff</changelog>
  <changelog author="asn@cryptomilk.org" date="1607688000">- Add missing BR for unittest2</changelog>
  <changelog author="code@bnavigator.de" date="1607688001">- Only require unittest2 for Leap.</changelog>
  <changelog author="alarrosa@suse.com" date="1611576000">- update to 5.8.0:
  * Enhancements:
  - 1863: disk_partitions() exposes 2 extra fields: maxfile and
    maxpath, which are the maximum file name and path name
    length.
  - 1872: [Windows] added support for PyPy 2.7.
  - 1879: provide pre-compiled wheels for Linux and macOS.
  - 1880: get rid of Travis and Cirrus CI services (they are no
    longer free). CI testing is now done by GitHub Actions on
    Linux, macOS and FreeBSD (yes). AppVeyor is still being used
    for Windows CI.
  * Bug fixes:
  - 1708: [Linux] get rid of sensors_temperatures() duplicates.
    (patch by Tim Schlueter).
  - 1839: [Windows] always raise AccessDenied when failing to
    query 64 processes from 32 bit ones (NtWoW64 APIs).
  - 1866: [Windows] process exe(), cmdline(), environ() may raise
    "invalid access to memory location" on Python 3.9.
  - 1874: [Solaris] wrong swap output given when encrypted column
    is present.
  - 1875: [Windows] process username() may raise
    ERROR_NONE_MAPPED if the SID has no corresponding account
    name. In this case AccessDenied is now raised.
  - 1877: [Windows] OpenProcess may fail with ERROR_SUCCESS.
    Turn it into AccessDenied or NoSuchProcess depending on
    whether the PID is alive.
  - 1886: [macOS] EIO error may be raised on cmdline() and
    environment(). Now it gets translated into AccessDenied.
  - 1891: [macOS] get rid of deprecated getpagesize().
- Rebase patch and skip three other tests that fail on obs
  * skip-obs.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1611835200">- Add patch to skip tests related to rlimit and zombie processes
  that fail when building for python2 on i586:
  * skip_rlimit_tests_on_python2.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1611921600">- Do not install tests (and change the way they're run since they
  were run from %{buildroot})</changelog>
  <changelog author="idesmi@protonmail.com" date="1620820800">- remove the dependency on net-tools, since it conflicts with
  busybox-hostnmame which is default on MicroOS. boo#1184753</changelog>
  <changelog author="steven.kowalik@suse.com" date="1637841600">- Update skip-obs.patch to also skip TestProcess.test_ionice_linux</changelog>
  <changelog author="dmueller@suse.com" date="1641816000">- update to 5.9.0:
  * [Linux]: `cpu_freq()`_ is slow on systems with many CPUs. Read current
    frequency values for all CPUs from ``/proc/cpuinfo`` instead of opening many
    files in ``/sys`` fs.  (patch by marxin)
  * `NoSuchProcess`_ message now specifies if the PID has been reused.
  * error classes (`NoSuchProcess`_, `AccessDenied`_, etc.) now have a better
    formatted and separated ``__repr__`` and ``__str__`` implementations.
  * [Linux]: `disk_partitions()`_: convert ``/dev/root`` device (an alias
    used on some Linux distros) to real root device path.
  * ``PSUTIL_DEBUG`` mode now prints file name and line number of the debug
    messages coming from C extension modules.
  * rewrite HISTORY.rst to use hyperlinks pointing to psutil API doc.
  * [Linux]: `wait_procs()`_ should catch ``subprocess.TimeoutExpired``
  exception.
  * [Linux]: `sensors_battery()`_ can raise ``TypeError`` on PureOS.
  * [Linux]: psutil does not handle ``ENAMETOOLONG`` when accessing process
  file descriptors in procfs.  (patch by Nikita Radchenko)
  * **[critical]**: ``memoize_when_activated`` decorator is not thread-safe.
  * **[critical]**: `process_iter()`_ is not thread safe and can raise
  ``TypeError`` if invoked from multiple threads.
  * [Linux]: `cpu_freq()`_ return order is wrong on systems with more than
  9 CPUs.</changelog>
  <changelog author="mcepl@suse.com" date="1643544000">- Add skip-partitions-erros.patch skipping tests failing on Linux
  (gh#giampaolo/psutil#2043).</changelog>
  <changelog author="mcepl@suse.com" date="1643803200">- Fix name of Patch4, it is skip-partitions-erros.patch</changelog>
  <changelog author="michael@stroeder.com" date="1653393600">- removed obsolete skip-partitions-erros.patch
- update to 5.9.1
  * Enhancements
  - 1053: drop Python 2.6 support. (patches by Matthieu Darbois and Hugo van Kemenade)
  - 2050, [Linux]: increase read(2) buffer size from 1k to 32k when reading /proc
    pseudo files line by line. This should help having more consistent results.
  - 2057, [OpenBSD]: add support for cpu_freq().
  - 2107, [Linux]: Process.memory_full_info() (reporting process USS/PSS/Swap memory)
    now reads /proc/pid/smaps_rollup instead of /proc/pids/smaps, which makes it 5 times faster.
  * Bug fixes
  - 2048: AttributeError is raised if psutil.Error class is raised manually and passed through str.
  - 2049, [Linux]: cpu_freq() erroneously returns curr value in GHz while min and max are in MHz.
  - 2050, [Linux]: virtual_memory() may raise ValueError if running in a LCX container.</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Add patch mem-used-bsc1181475.patch (bsc#1181475)
  * Adopt change of used memory calculation from upstream of procps</changelog>
  <changelog author="code@bnavigator.de" date="1657886400">- Fix tests: setuptools changed the builddir library path and does
  not find the module from it. Use the installed platlib instead
  and exclude psutil.tests only later.
- Refresh skip-obs.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1669032000">- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)</changelog>
</package>
<package pkgid="2d5e07eb0ca53a8775b10e20f79c4ff5743c300095248f8bf27259fa87738ecb" name="python3-psutil" arch="x86_64">
  <version epoch="0" ver="5.9.1" rel="150300.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Add pr_1665.patch: Future-proof disk_io_counters on Linux. Fixes
  tests with Linux 5.5.</changelog>
  <changelog author="tchvatal@suse.com" date="1584187200">- Update to 5.7.0:
  * Various fixes to build with updated kernel/etc.
- Remove merged patch pr_1665.patch and pr_1364.patch
- Update patch skip-obs.patch
- Remove skip-test-missing-warnings.patch as it can be fixed by
  properly calling the tests</changelog>
  <changelog author="mcepl@suse.com" date="1598011200">- Add skip_failing_tests.patch to skip tests failing because of
  incomplete emulation of the environment in osc build
  environment (gh#giampaolo/psutil#1635).</changelog>
  <changelog author="dmueller@suse.com" date="1600257600">- update to 5.7.2:
  * parallel tests on UNIX (make test-parallel). They're twice as fast!
  * 1741: "make build/install" is now run in parallel and it's about 15% faster on UNIX.
  * 1747: Process.wait() on POSIX returns an enum, showing the negative signal which was used to terminate the process
  * 1747: Process.wait() return value is cached so that the exit code can be retrieved on then next call.
  * 1747: Process provides more info about the process on str() and repr() (status and exit code):
  * 1757: memory leak tests are now stable.
  * 1768: [Windows] added support for Windows Nano Server. (contributed by Julien Lebot)
  * 1726: [Linux] cpu_freq() parsing should use spaces instead of tabs on ia64. (patch by Michał Górny)
  * 1760: [Linux] Process.rlimit() does not handle long long type properly.
  * 1766: [macOS] NoSuchProcess may be raised instead of ZombieProcess.
  * 1781: fix signature of callback function for getloadavg(). (patch by Ammar Askar)
  - remove skip-flaky-i586.patch (obsolete)</changelog>
  <changelog author="code@bnavigator.de" date="1604404800">- Fix shebang replacement for multiple python flavors</changelog>
  <changelog author="dmueller@suse.com" date="1606824000">- update to 5.7.3:
  - 809_: [FreeBSD] add support for `Process.rlimit()`.
  - 893_: [BSD] add support for `Process.environ()` (patch by Armin Gruner)
  - 1830_: [UNIX] `net_if_stats()`'s `isup` also checks whether the NIC is
    running (meaning Wi-Fi or ethernet cable is connected).
  - 1837_: [Linux] improved battery detection and charge "secsleft" calculation
  - 1620_: [Linux] physical cpu_count() result is incorrect on systems with more
    than one CPU socket.
  - 1738_: [macOS] Process.exe() may raise FileNotFoundError if process is still
    alive but the exe file which launched it got deleted.
  - 1791_: [macOS] fix missing include for getpagesize().
  - 1823_: [Windows] Process.open_files() may cause a segfault due to a NULL
    pointer.
  - 1838_: [Linux] sensors_battery(): if `percent` can be determined but not
    the remaining values, still return a result instead of None.
- skip-obs.patch, skip_failing_tests.patch: rediff</changelog>
  <changelog author="asn@cryptomilk.org" date="1607688000">- Add missing BR for unittest2</changelog>
  <changelog author="code@bnavigator.de" date="1607688001">- Only require unittest2 for Leap.</changelog>
  <changelog author="alarrosa@suse.com" date="1611576000">- update to 5.8.0:
  * Enhancements:
  - 1863: disk_partitions() exposes 2 extra fields: maxfile and
    maxpath, which are the maximum file name and path name
    length.
  - 1872: [Windows] added support for PyPy 2.7.
  - 1879: provide pre-compiled wheels for Linux and macOS.
  - 1880: get rid of Travis and Cirrus CI services (they are no
    longer free). CI testing is now done by GitHub Actions on
    Linux, macOS and FreeBSD (yes). AppVeyor is still being used
    for Windows CI.
  * Bug fixes:
  - 1708: [Linux] get rid of sensors_temperatures() duplicates.
    (patch by Tim Schlueter).
  - 1839: [Windows] always raise AccessDenied when failing to
    query 64 processes from 32 bit ones (NtWoW64 APIs).
  - 1866: [Windows] process exe(), cmdline(), environ() may raise
    "invalid access to memory location" on Python 3.9.
  - 1874: [Solaris] wrong swap output given when encrypted column
    is present.
  - 1875: [Windows] process username() may raise
    ERROR_NONE_MAPPED if the SID has no corresponding account
    name. In this case AccessDenied is now raised.
  - 1877: [Windows] OpenProcess may fail with ERROR_SUCCESS.
    Turn it into AccessDenied or NoSuchProcess depending on
    whether the PID is alive.
  - 1886: [macOS] EIO error may be raised on cmdline() and
    environment(). Now it gets translated into AccessDenied.
  - 1891: [macOS] get rid of deprecated getpagesize().
- Rebase patch and skip three other tests that fail on obs
  * skip-obs.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1611835200">- Add patch to skip tests related to rlimit and zombie processes
  that fail when building for python2 on i586:
  * skip_rlimit_tests_on_python2.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1611921600">- Do not install tests (and change the way they're run since they
  were run from %{buildroot})</changelog>
  <changelog author="idesmi@protonmail.com" date="1620820800">- remove the dependency on net-tools, since it conflicts with
  busybox-hostnmame which is default on MicroOS. boo#1184753</changelog>
  <changelog author="steven.kowalik@suse.com" date="1637841600">- Update skip-obs.patch to also skip TestProcess.test_ionice_linux</changelog>
  <changelog author="dmueller@suse.com" date="1641816000">- update to 5.9.0:
  * [Linux]: `cpu_freq()`_ is slow on systems with many CPUs. Read current
    frequency values for all CPUs from ``/proc/cpuinfo`` instead of opening many
    files in ``/sys`` fs.  (patch by marxin)
  * `NoSuchProcess`_ message now specifies if the PID has been reused.
  * error classes (`NoSuchProcess`_, `AccessDenied`_, etc.) now have a better
    formatted and separated ``__repr__`` and ``__str__`` implementations.
  * [Linux]: `disk_partitions()`_: convert ``/dev/root`` device (an alias
    used on some Linux distros) to real root device path.
  * ``PSUTIL_DEBUG`` mode now prints file name and line number of the debug
    messages coming from C extension modules.
  * rewrite HISTORY.rst to use hyperlinks pointing to psutil API doc.
  * [Linux]: `wait_procs()`_ should catch ``subprocess.TimeoutExpired``
  exception.
  * [Linux]: `sensors_battery()`_ can raise ``TypeError`` on PureOS.
  * [Linux]: psutil does not handle ``ENAMETOOLONG`` when accessing process
  file descriptors in procfs.  (patch by Nikita Radchenko)
  * **[critical]**: ``memoize_when_activated`` decorator is not thread-safe.
  * **[critical]**: `process_iter()`_ is not thread safe and can raise
  ``TypeError`` if invoked from multiple threads.
  * [Linux]: `cpu_freq()`_ return order is wrong on systems with more than
  9 CPUs.</changelog>
  <changelog author="mcepl@suse.com" date="1643544000">- Add skip-partitions-erros.patch skipping tests failing on Linux
  (gh#giampaolo/psutil#2043).</changelog>
  <changelog author="mcepl@suse.com" date="1643803200">- Fix name of Patch4, it is skip-partitions-erros.patch</changelog>
  <changelog author="michael@stroeder.com" date="1653393600">- removed obsolete skip-partitions-erros.patch
- update to 5.9.1
  * Enhancements
  - 1053: drop Python 2.6 support. (patches by Matthieu Darbois and Hugo van Kemenade)
  - 2050, [Linux]: increase read(2) buffer size from 1k to 32k when reading /proc
    pseudo files line by line. This should help having more consistent results.
  - 2057, [OpenBSD]: add support for cpu_freq().
  - 2107, [Linux]: Process.memory_full_info() (reporting process USS/PSS/Swap memory)
    now reads /proc/pid/smaps_rollup instead of /proc/pids/smaps, which makes it 5 times faster.
  * Bug fixes
  - 2048: AttributeError is raised if psutil.Error class is raised manually and passed through str.
  - 2049, [Linux]: cpu_freq() erroneously returns curr value in GHz while min and max are in MHz.
  - 2050, [Linux]: virtual_memory() may raise ValueError if running in a LCX container.</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Add patch mem-used-bsc1181475.patch (bsc#1181475)
  * Adopt change of used memory calculation from upstream of procps</changelog>
  <changelog author="code@bnavigator.de" date="1657886400">- Fix tests: setuptools changed the builddir library path and does
  not find the module from it. Use the installed platlib instead
  and exclude psutil.tests only later.
- Refresh skip-obs.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1669032000">- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)</changelog>
</package>
<package pkgid="60bf4c1e09ce1599eba0d0af84b18d4cef441f2a1f7376a9ac24f313faffab7c" name="python3-requests" arch="noarch">
  <version epoch="0" ver="2.25.1" rel="150300.3.12.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1549368000">- update to version 2.21.0:
  * Requests now supports idna v2.8.</changelog>
  <changelog author="tchvatal@suse.com" date="1550232000">- Do not depend on python-py
- Update few of the requirements</changelog>
  <changelog author="tchvatal@suse.com" date="1551096000">- Skip one more test that is flaky</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Do not hardcode version requirements in setup.py allowing us to
  update and verify functionality on our own:
  * requests-no-hardcoded-version.patch</changelog>
  <changelog author="bstephenson@suse.com" date="1558008000">- Update to version 2.20.1 (bsc#1111622)
  * Fixed bug with unintended Authorization header stripping for
    redirects using default ports (http/80, https/443).</changelog>
  <changelog author="tchvatal@suse.com" date="1558785600">- Update to 2.22.0:
  * Requests now supports urllib3 v1.25.2. (note: 1.25.0 and 1.25.1 are incompatible)
- Rebase requests-no-hardcoded-version.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1563796800">- Hardcode pytest 3.x series as upstream even in git does not work
  with newer versions (they pinned the release)</changelog>
  <changelog author="jayvdb@gmail.com" date="1572609600">- Add two patches only updating test logic to remove pytest 3 pin
  - merged_pr_5049.patch
  - pr_5251-pytest5.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1576324800">- Remove python-urllib3, python-certifi and ca-certificates from
  main package BuildRequires, not required for building.
- Do not require full python, (implicit) python-base is sufficient.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582545600">- update to 2.23.0
- dropped merged_pr_5049.patch
- refreshed requests-no-hardcoded-version.patch
  * Remove defunct reference to prefetch in Session __attrs__
  * Requests no longer outputs password in basic auth usage warning</changelog>
  <changelog author="mcepl@suse.com" date="1587988800">- Switch off test_https_warnings test (bsc#1170175)</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1595505600">- remove patch pr_5251-pytest5.patch, not needed anymore.
- update to version 2.24.0:
  - pyOpenSSL TLS implementation is now only used if Python
  either doesn't have an `ssl` module or doesn't support
  SNI. Previously pyOpenSSL was unconditionally used if available.
  This applies even if pyOpenSSL is installed via the
  `requests[security]` extra (#5443)
  - Redirect resolution should now only occur when
  `allow_redirects` is True. (#5492)
  - No longer perform unnecessary Content-Length calculation for
  requests that won't use it. (#5496)</changelog>
  <changelog author="dmueller@suse.com" date="1606392000">- update to 2.25.0:
  * Added support for NETRC environment variable. (#5643)
  * Requests now supports urllib3 v1.26.
  * Requests v2.25.x will be the last release series with support for Python 3.5.
- refreshed requests-no-hardcoded-version.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1607947200">- Update in SLE-15 (bsc#1176785, jsc#ECO-3105, jsc#PM-2352)</changelog>
  <changelog author="dmueller@suse.com" date="1608379200">- update to 2.25.1:
  - Requests now treats `application/json` as `utf8` by default. Resolving
  inconsistencies between `r.text` and `r.json` output. (#5673)</changelog>
  <changelog author="code@bnavigator.de" date="1612353600">- Don't pin idna&lt;3 in the egg-info so that depending packages
  can install the new idna dropping python2</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1658404800">- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1686657600">- Add CVE-2023-32681.patch to fix unintended leak of
  Proxy-Authorization header (CVE-2023-32681, bsc#1211674)
  Upstream commit: gh#psf/requests@74ea7cf7a6a2</changelog>
  <changelog author="mmachova@suse.com" date="1716292800">- Add CVE-2024-35195.patch (CVE-2024-35195, bsc#1224788)
- Add httpbin.patch to fix a test failure caused by the previous patch.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1717502400">- Update CVE-2024-35195.patch to allow the usage of "verify" parameter
  as a directory, bsc#1225912</changelog>
</package>
<package pkgid="da6a9ce1fd8b6d9af3a458b88537b49404af60078fd10e5be3ca33cdcbf5e87b" name="python3-requests" arch="noarch">
  <version epoch="0" ver="2.25.1" rel="150300.3.6.1"/>
  <changelog author="mcepl@suse.com" date="1546257600">- Move name ahead of version in spec file to resolve build issues
  on older distributions
- fdupe more thoroughly.</changelog>
  <changelog author="jbrownell@suse.com" date="1547035200">- Support older Red Hat platforms that don't offer "Recommends:"</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1549368000">- update to version 2.21.0:
  * Requests now supports idna v2.8.</changelog>
  <changelog author="tchvatal@suse.com" date="1550232000">- Do not depend on python-py
- Update few of the requirements</changelog>
  <changelog author="tchvatal@suse.com" date="1551096000">- Skip one more test that is flaky</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Do not hardcode version requirements in setup.py allowing us to
  update and verify functionality on our own:
  * requests-no-hardcoded-version.patch</changelog>
  <changelog author="bstephenson@suse.com" date="1558008000">- Update to version 2.20.1 (bsc#1111622)
  * Fixed bug with unintended Authorization header stripping for
    redirects using default ports (http/80, https/443).</changelog>
  <changelog author="tchvatal@suse.com" date="1558785600">- Update to 2.22.0:
  * Requests now supports urllib3 v1.25.2. (note: 1.25.0 and 1.25.1 are incompatible)
- Rebase requests-no-hardcoded-version.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1563796800">- Hardcode pytest 3.x series as upstream even in git does not work
  with newer versions (they pinned the release)</changelog>
  <changelog author="jayvdb@gmail.com" date="1572609600">- Add two patches only updating test logic to remove pytest 3 pin
  - merged_pr_5049.patch
  - pr_5251-pytest5.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1576324800">- Remove python-urllib3, python-certifi and ca-certificates from
  main package BuildRequires, not required for building.
- Do not require full python, (implicit) python-base is sufficient.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582545600">- update to 2.23.0
- dropped merged_pr_5049.patch
- refreshed requests-no-hardcoded-version.patch
  * Remove defunct reference to prefetch in Session __attrs__
  * Requests no longer outputs password in basic auth usage warning</changelog>
  <changelog author="mcepl@suse.com" date="1587988800">- Switch off test_https_warnings test (bsc#1170175)</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1595505600">- remove patch pr_5251-pytest5.patch, not needed anymore.
- update to version 2.24.0:
  - pyOpenSSL TLS implementation is now only used if Python
  either doesn't have an `ssl` module or doesn't support
  SNI. Previously pyOpenSSL was unconditionally used if available.
  This applies even if pyOpenSSL is installed via the
  `requests[security]` extra (#5443)
  - Redirect resolution should now only occur when
  `allow_redirects` is True. (#5492)
  - No longer perform unnecessary Content-Length calculation for
  requests that won't use it. (#5496)</changelog>
  <changelog author="dmueller@suse.com" date="1606392000">- update to 2.25.0:
  * Added support for NETRC environment variable. (#5643)
  * Requests now supports urllib3 v1.26.
  * Requests v2.25.x will be the last release series with support for Python 3.5.
- refreshed requests-no-hardcoded-version.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1607947200">- Update in SLE-15 (bsc#1176785, jsc#ECO-3105, jsc#PM-2352)</changelog>
  <changelog author="dmueller@suse.com" date="1608379200">- update to 2.25.1:
  - Requests now treats `application/json` as `utf8` by default. Resolving
  inconsistencies between `r.text` and `r.json` output. (#5673)</changelog>
  <changelog author="code@bnavigator.de" date="1612353600">- Don't pin idna&lt;3 in the egg-info so that depending packages
  can install the new idna dropping python2</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1658404800">- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1686657600">- Add CVE-2023-32681.patch to fix unintended leak of
  Proxy-Authorization header (CVE-2023-32681, bsc#1211674)
  Upstream commit: gh#psf/requests@74ea7cf7a6a2</changelog>
</package>
<package pkgid="4e25b9752ca934d7e2c265b89ba020bfc8efb6fa881a6ede7224fb8e79422ad3" name="python3-requests" arch="noarch">
  <version epoch="0" ver="2.25.1" rel="150300.3.9.1"/>
  <changelog author="jbrownell@suse.com" date="1547035200">- Support older Red Hat platforms that don't offer "Recommends:"</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1549368000">- update to version 2.21.0:
  * Requests now supports idna v2.8.</changelog>
  <changelog author="tchvatal@suse.com" date="1550232000">- Do not depend on python-py
- Update few of the requirements</changelog>
  <changelog author="tchvatal@suse.com" date="1551096000">- Skip one more test that is flaky</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Do not hardcode version requirements in setup.py allowing us to
  update and verify functionality on our own:
  * requests-no-hardcoded-version.patch</changelog>
  <changelog author="bstephenson@suse.com" date="1558008000">- Update to version 2.20.1 (bsc#1111622)
  * Fixed bug with unintended Authorization header stripping for
    redirects using default ports (http/80, https/443).</changelog>
  <changelog author="tchvatal@suse.com" date="1558785600">- Update to 2.22.0:
  * Requests now supports urllib3 v1.25.2. (note: 1.25.0 and 1.25.1 are incompatible)
- Rebase requests-no-hardcoded-version.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1563796800">- Hardcode pytest 3.x series as upstream even in git does not work
  with newer versions (they pinned the release)</changelog>
  <changelog author="jayvdb@gmail.com" date="1572609600">- Add two patches only updating test logic to remove pytest 3 pin
  - merged_pr_5049.patch
  - pr_5251-pytest5.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1576324800">- Remove python-urllib3, python-certifi and ca-certificates from
  main package BuildRequires, not required for building.
- Do not require full python, (implicit) python-base is sufficient.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582545600">- update to 2.23.0
- dropped merged_pr_5049.patch
- refreshed requests-no-hardcoded-version.patch
  * Remove defunct reference to prefetch in Session __attrs__
  * Requests no longer outputs password in basic auth usage warning</changelog>
  <changelog author="mcepl@suse.com" date="1587988800">- Switch off test_https_warnings test (bsc#1170175)</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1595505600">- remove patch pr_5251-pytest5.patch, not needed anymore.
- update to version 2.24.0:
  - pyOpenSSL TLS implementation is now only used if Python
  either doesn't have an `ssl` module or doesn't support
  SNI. Previously pyOpenSSL was unconditionally used if available.
  This applies even if pyOpenSSL is installed via the
  `requests[security]` extra (#5443)
  - Redirect resolution should now only occur when
  `allow_redirects` is True. (#5492)
  - No longer perform unnecessary Content-Length calculation for
  requests that won't use it. (#5496)</changelog>
  <changelog author="dmueller@suse.com" date="1606392000">- update to 2.25.0:
  * Added support for NETRC environment variable. (#5643)
  * Requests now supports urllib3 v1.26.
  * Requests v2.25.x will be the last release series with support for Python 3.5.
- refreshed requests-no-hardcoded-version.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1607947200">- Update in SLE-15 (bsc#1176785, jsc#ECO-3105, jsc#PM-2352)</changelog>
  <changelog author="dmueller@suse.com" date="1608379200">- update to 2.25.1:
  - Requests now treats `application/json` as `utf8` by default. Resolving
  inconsistencies between `r.text` and `r.json` output. (#5673)</changelog>
  <changelog author="code@bnavigator.de" date="1612353600">- Don't pin idna&lt;3 in the egg-info so that depending packages
  can install the new idna dropping python2</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1658404800">- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1686657600">- Add CVE-2023-32681.patch to fix unintended leak of
  Proxy-Authorization header (CVE-2023-32681, bsc#1211674)
  Upstream commit: gh#psf/requests@74ea7cf7a6a2</changelog>
  <changelog author="mmachova@suse.com" date="1716292800">- Add CVE-2024-35195.patch (CVE-2024-35195, bsc#1224788)
- Add httpbin.patch to fix a test failure caused by the previous patch.</changelog>
</package>
<package pkgid="020a9aa0415c3540734276f06ab00e72ccb638e93d64823e27254aad17f76edd" name="python3-rpm" arch="aarch64">
  <version epoch="0" ver="4.14.3" rel="150400.59.10.1"/>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
  <changelog author="dmueller@suse.com" date="1691755200">- build for all python modules (jsc#PED-68, jsc#PED-1988)</changelog>
</package>
<package pkgid="e8d205b263844e3bec648fe8435e504aee600298e7fe82e66d8fb2fd51d80852" name="python3-rpm" arch="s390x">
  <version epoch="0" ver="4.14.3" rel="150400.59.10.1"/>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
  <changelog author="dmueller@suse.com" date="1691755200">- build for all python modules (jsc#PED-68, jsc#PED-1988)</changelog>
</package>
<package pkgid="410e0913308b5825019058da9d6993eb42bed3b665fc2be01cdb3156af198779" name="python3-rpm" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="150400.59.10.1"/>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
  <changelog author="dmueller@suse.com" date="1691755200">- build for all python modules (jsc#PED-68, jsc#PED-1988)</changelog>
</package>
<package pkgid="bdfbe9f3ee220eca83bdb73af850bad98df778542153098eec022171e53c9c62" name="python3-rpm" arch="aarch64">
  <version epoch="0" ver="4.14.3" rel="150400.59.13.1"/>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
  <changelog author="dmueller@suse.com" date="1691755200">- build for all python modules (jsc#PED-68, jsc#PED-1988)</changelog>
</package>
<package pkgid="3899bf568cd114da6ba941297cd3d83e2cfc66fad4da28e6193c40434086a74c" name="python3-rpm" arch="s390x">
  <version epoch="0" ver="4.14.3" rel="150400.59.13.1"/>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
  <changelog author="dmueller@suse.com" date="1691755200">- build for all python modules (jsc#PED-68, jsc#PED-1988)</changelog>
</package>
<package pkgid="ef97c21db11ca79639b32b00e577a383bb20b7b5421427f666fcc8f3caa7163b" name="python3-rpm" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="150400.59.13.1"/>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
  <changelog author="dmueller@suse.com" date="1691755200">- build for all python modules (jsc#PED-68, jsc#PED-1988)</changelog>
</package>
<package pkgid="bbe10865c030919d8adf570b7b1384488c231ce9cffa693cc129e32562e920fc" name="python3-rpm" arch="aarch64">
  <version epoch="0" ver="4.14.3" rel="150400.59.16.1"/>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
  <changelog author="dmueller@suse.com" date="1691755200">- build for all python modules (jsc#PED-68, jsc#PED-1988)</changelog>
</package>
<package pkgid="812ec6105d2a7a97147c197b5ff816b5ab35509b7f8ed8192fbf454026eb75a8" name="python3-rpm" arch="s390x">
  <version epoch="0" ver="4.14.3" rel="150400.59.16.1"/>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
  <changelog author="dmueller@suse.com" date="1691755200">- build for all python modules (jsc#PED-68, jsc#PED-1988)</changelog>
</package>
<package pkgid="909fb9f987f3cedc24996f0acfbe77ab681cc3565022edaa34010c6cab79bbe5" name="python3-rpm" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="150400.59.16.1"/>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
  <changelog author="dmueller@suse.com" date="1691755200">- build for all python modules (jsc#PED-68, jsc#PED-1988)</changelog>
</package>
<package pkgid="6205d05b175650cd2ecdb8bf5cfaae17e598ad38b039ca74d2d2f307af445b7c" name="python3-rpm" arch="aarch64">
  <version epoch="0" ver="4.14.3" rel="150400.59.7.1"/>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
  <changelog author="dmueller@suse.com" date="1691755200">- build for all python modules (jsc#PED-68, jsc#PED-1988)</changelog>
</package>
<package pkgid="138ae441ce8d0ed95c31c4990c17d2ef9df9a6d790eb0e62cc5f0c0b9087fa2a" name="python3-rpm" arch="s390x">
  <version epoch="0" ver="4.14.3" rel="150400.59.7.1"/>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
  <changelog author="dmueller@suse.com" date="1691755200">- build for all python modules (jsc#PED-68, jsc#PED-1988)</changelog>
</package>
<package pkgid="cda960bbb7f0b833bf5149bb393bbb76a18e2674d7226259415916d75c8fcb37" name="python3-rpm" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="150400.59.7.1"/>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
  <changelog author="dmueller@suse.com" date="1691755200">- build for all python modules (jsc#PED-68, jsc#PED-1988)</changelog>
</package>
<package pkgid="60c902a15845be8ef1883aa0c2329e35a162996d75a4069f6c0b81def6ad2f45" name="python3-salt" arch="aarch64">
  <version epoch="0" ver="3006.0" rel="150500.4.24.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
</package>
<package pkgid="f815307c7c5d2ece060cdee97388e56f490ff266fba3e709c6c7804d408240f8" name="python3-salt" arch="s390x">
  <version epoch="0" ver="3006.0" rel="150500.4.24.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
</package>
<package pkgid="5b492b55fa111fa2a71384f2ae867ec503fd4b1ed913200f2f41782dda634413" name="python3-salt" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="150500.4.24.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
</package>
<package pkgid="02fa7f2a2abc014e122b4ee218c62f9fd0bdcce46aac8a03fb2e78cbdbdbe5d3" name="python3-salt" arch="aarch64">
  <version epoch="0" ver="3006.0" rel="150500.4.29.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
</package>
<package pkgid="5e7fd9db6c66c56b41ca7dc0e6de640495e38d054bb1fadb4937d0032f6281da" name="python3-salt" arch="s390x">
  <version epoch="0" ver="3006.0" rel="150500.4.29.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
</package>
<package pkgid="6797fdca56322f581801fe7d6bcaf0b47577b1b93ed95087405248acdf1359ab" name="python3-salt" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="150500.4.29.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
</package>
<package pkgid="b22e34810eae318c0aa16533dfc843cc8608b3e9d23f575df92d71885f7aff92" name="python3-salt" arch="aarch64">
  <version epoch="0" ver="3006.0" rel="150500.4.32.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
</package>
<package pkgid="6fefbd75ceb55df0edaeeb522b4db3202d2d8cf922d4ecc07f63bfdf828450c6" name="python3-salt" arch="s390x">
  <version epoch="0" ver="3006.0" rel="150500.4.32.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
</package>
<package pkgid="33abba0f0d65a77e370684beb442a3b68263422890a2d0f3dbdfd32c31d62fa5" name="python3-salt" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="150500.4.32.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
</package>
<package pkgid="8cde09bc03c5b422dd1590edf3cee84d7c3fd0ad75529df5c7d28cebaf4055e0" name="python3-salt" arch="aarch64">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="ef4dde233e88f18f4ff39e200033d866c2ee373b0b9c2895ada8805205bf482d" name="python3-salt" arch="s390x">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="a3765070443de300e4460ea4673ae22e8ce3752bc7dfa56c679cba5413136566" name="python3-salt" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="150500.4.35.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="e361a71d3c2a0febe851744871468066fa0125ad277f69bced2b9ede86dc3b9c" name="python3-salt" arch="aarch64">
  <version epoch="0" ver="3006.0" rel="150500.4.38.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1717761600">- Speed up salt.matcher.confirm_top by using __context__
- Do not call the async wrapper calls with the separate thread
- Prevent OOM with high amount of batch async calls (bsc#1216063)
- Add missing contextvars dependency in salt.version
- Skip tests for unsupported algorithm on old OpenSSL version
- Remove redundant `_file_find` call to the master
- Prevent possible exception in tornado.concurrent.Future._set_done
- Make reactor engine less blocking the EventPublisher
- Make salt-master self recoverable on killing EventPublisher
- Improve broken events catching and reporting
- Make logging calls lighter
- Remove unused import causing delays on starting salt-master
- Mark python3-CherryPy as recommended package for the testsuite
- Added:
  * skip-tests-for-unsupported-algorithm-on-old-openssl-.patch
  * make-reactor-engine-less-blocking-the-eventpublisher.patch
  * remove-unused-import-causing-delays-on-starting-salt.patch
  * make-logging-calls-lighter.patch
  * remove-redundant-_file_find-call-to-the-master.patch
  * prevent-possible-exception-in-tornado.concurrent.fut.patch
  * do-not-call-the-async-wrapper-calls-with-the-separat.patch
  * add-missing-contextvars-dependency-in-salt.version.patch
  * prevent-oom-with-high-amount-of-batch-async-calls-bs.patch
  * speed-up-salt.matcher.confirm_top-by-using-__context.patch
  * improve-broken-events-catching-and-reporting.patch
  * make-salt-master-self-recoverable-on-killing-eventpu.patch</changelog>
</package>
<package pkgid="640b701c52ed110fc247192b512aa05c43125ee2605c9aeb91a68ac0df15026c" name="python3-salt" arch="s390x">
  <version epoch="0" ver="3006.0" rel="150500.4.38.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1717761600">- Speed up salt.matcher.confirm_top by using __context__
- Do not call the async wrapper calls with the separate thread
- Prevent OOM with high amount of batch async calls (bsc#1216063)
- Add missing contextvars dependency in salt.version
- Skip tests for unsupported algorithm on old OpenSSL version
- Remove redundant `_file_find` call to the master
- Prevent possible exception in tornado.concurrent.Future._set_done
- Make reactor engine less blocking the EventPublisher
- Make salt-master self recoverable on killing EventPublisher
- Improve broken events catching and reporting
- Make logging calls lighter
- Remove unused import causing delays on starting salt-master
- Mark python3-CherryPy as recommended package for the testsuite
- Added:
  * skip-tests-for-unsupported-algorithm-on-old-openssl-.patch
  * make-reactor-engine-less-blocking-the-eventpublisher.patch
  * remove-unused-import-causing-delays-on-starting-salt.patch
  * make-logging-calls-lighter.patch
  * remove-redundant-_file_find-call-to-the-master.patch
  * prevent-possible-exception-in-tornado.concurrent.fut.patch
  * do-not-call-the-async-wrapper-calls-with-the-separat.patch
  * add-missing-contextvars-dependency-in-salt.version.patch
  * prevent-oom-with-high-amount-of-batch-async-calls-bs.patch
  * speed-up-salt.matcher.confirm_top-by-using-__context.patch
  * improve-broken-events-catching-and-reporting.patch
  * make-salt-master-self-recoverable-on-killing-eventpu.patch</changelog>
</package>
<package pkgid="5e096daf54ec8519833dca420ede771fde92cc7ebf6559ac47a15ed3f59ae549" name="python3-salt" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="150500.4.38.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1717761600">- Speed up salt.matcher.confirm_top by using __context__
- Do not call the async wrapper calls with the separate thread
- Prevent OOM with high amount of batch async calls (bsc#1216063)
- Add missing contextvars dependency in salt.version
- Skip tests for unsupported algorithm on old OpenSSL version
- Remove redundant `_file_find` call to the master
- Prevent possible exception in tornado.concurrent.Future._set_done
- Make reactor engine less blocking the EventPublisher
- Make salt-master self recoverable on killing EventPublisher
- Improve broken events catching and reporting
- Make logging calls lighter
- Remove unused import causing delays on starting salt-master
- Mark python3-CherryPy as recommended package for the testsuite
- Added:
  * skip-tests-for-unsupported-algorithm-on-old-openssl-.patch
  * make-reactor-engine-less-blocking-the-eventpublisher.patch
  * remove-unused-import-causing-delays-on-starting-salt.patch
  * make-logging-calls-lighter.patch
  * remove-redundant-_file_find-call-to-the-master.patch
  * prevent-possible-exception-in-tornado.concurrent.fut.patch
  * do-not-call-the-async-wrapper-calls-with-the-separat.patch
  * add-missing-contextvars-dependency-in-salt.version.patch
  * prevent-oom-with-high-amount-of-batch-async-calls-bs.patch
  * speed-up-salt.matcher.confirm_top-by-using-__context.patch
  * improve-broken-events-catching-and-reporting.patch
  * make-salt-master-self-recoverable-on-killing-eventpu.patch</changelog>
</package>
<package pkgid="6b2c519185fb86077ad01fd833ec41e2e2e0c41d2f8f33336b89a1900032c02a" name="python3-salt" arch="aarch64">
  <version epoch="0" ver="3006.0" rel="150500.4.41.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1717761600">- Speed up salt.matcher.confirm_top by using __context__
- Do not call the async wrapper calls with the separate thread
- Prevent OOM with high amount of batch async calls (bsc#1216063)
- Add missing contextvars dependency in salt.version
- Skip tests for unsupported algorithm on old OpenSSL version
- Remove redundant `_file_find` call to the master
- Prevent possible exception in tornado.concurrent.Future._set_done
- Make reactor engine less blocking the EventPublisher
- Make salt-master self recoverable on killing EventPublisher
- Improve broken events catching and reporting
- Make logging calls lighter
- Remove unused import causing delays on starting salt-master
- Mark python3-CherryPy as recommended package for the testsuite
- Added:
  * skip-tests-for-unsupported-algorithm-on-old-openssl-.patch
  * make-reactor-engine-less-blocking-the-eventpublisher.patch
  * remove-unused-import-causing-delays-on-starting-salt.patch
  * make-logging-calls-lighter.patch
  * remove-redundant-_file_find-call-to-the-master.patch
  * prevent-possible-exception-in-tornado.concurrent.fut.patch
  * do-not-call-the-async-wrapper-calls-with-the-separat.patch
  * add-missing-contextvars-dependency-in-salt.version.patch
  * prevent-oom-with-high-amount-of-batch-async-calls-bs.patch
  * speed-up-salt.matcher.confirm_top-by-using-__context.patch
  * improve-broken-events-catching-and-reporting.patch
  * make-salt-master-self-recoverable-on-killing-eventpu.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1722513600">- Fix rich rule comparison in firewalld module (bsc#1222684)
- test_vultrpy: adjust test expectation to prevent failure after Debian 10 EOL
- Make auth.pam more robust with Salt Bundle and fix tests
- Fix performance of user.list_groups with many remote groups
- Fix "status.diskusage" function and exclude some tests for Salt Bundle
- Skip certain tests if necessary for some OSes and set flaky ones
- Add a timer to delete old env post update for venv-minion
- Several fixes for tests to avoid errors and failures in some OSes
- Added:
  * firewalld-normalize-new-rich-rules-before-comparing-.patch
  * several-fixes-for-tests-to-avoid-errors-and-failures.patch
  * test_vultrpy-adjust-test-expectation-to-prevent-fail.patch
  * fix-status.diskusage-and-exclude-some-tests-to-run-w.patch
  * skip-certain-tests-if-necessary-and-mark-some-flaky-.patch
  * some-more-small-tests-fixes-enhancements-661.patch
  * provide-systemd-timer-unit.patch
  * fix-user.list_groups-omits-remote-groups.patch</changelog>
</package>
<package pkgid="7df7b23f76c7b7e55561de74164e8ab23990faa985e8fe21adadb5fdc469f154" name="python3-salt" arch="s390x">
  <version epoch="0" ver="3006.0" rel="150500.4.41.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1717761600">- Speed up salt.matcher.confirm_top by using __context__
- Do not call the async wrapper calls with the separate thread
- Prevent OOM with high amount of batch async calls (bsc#1216063)
- Add missing contextvars dependency in salt.version
- Skip tests for unsupported algorithm on old OpenSSL version
- Remove redundant `_file_find` call to the master
- Prevent possible exception in tornado.concurrent.Future._set_done
- Make reactor engine less blocking the EventPublisher
- Make salt-master self recoverable on killing EventPublisher
- Improve broken events catching and reporting
- Make logging calls lighter
- Remove unused import causing delays on starting salt-master
- Mark python3-CherryPy as recommended package for the testsuite
- Added:
  * skip-tests-for-unsupported-algorithm-on-old-openssl-.patch
  * make-reactor-engine-less-blocking-the-eventpublisher.patch
  * remove-unused-import-causing-delays-on-starting-salt.patch
  * make-logging-calls-lighter.patch
  * remove-redundant-_file_find-call-to-the-master.patch
  * prevent-possible-exception-in-tornado.concurrent.fut.patch
  * do-not-call-the-async-wrapper-calls-with-the-separat.patch
  * add-missing-contextvars-dependency-in-salt.version.patch
  * prevent-oom-with-high-amount-of-batch-async-calls-bs.patch
  * speed-up-salt.matcher.confirm_top-by-using-__context.patch
  * improve-broken-events-catching-and-reporting.patch
  * make-salt-master-self-recoverable-on-killing-eventpu.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1722513600">- Fix rich rule comparison in firewalld module (bsc#1222684)
- test_vultrpy: adjust test expectation to prevent failure after Debian 10 EOL
- Make auth.pam more robust with Salt Bundle and fix tests
- Fix performance of user.list_groups with many remote groups
- Fix "status.diskusage" function and exclude some tests for Salt Bundle
- Skip certain tests if necessary for some OSes and set flaky ones
- Add a timer to delete old env post update for venv-minion
- Several fixes for tests to avoid errors and failures in some OSes
- Added:
  * firewalld-normalize-new-rich-rules-before-comparing-.patch
  * several-fixes-for-tests-to-avoid-errors-and-failures.patch
  * test_vultrpy-adjust-test-expectation-to-prevent-fail.patch
  * fix-status.diskusage-and-exclude-some-tests-to-run-w.patch
  * skip-certain-tests-if-necessary-and-mark-some-flaky-.patch
  * some-more-small-tests-fixes-enhancements-661.patch
  * provide-systemd-timer-unit.patch
  * fix-user.list_groups-omits-remote-groups.patch</changelog>
</package>
<package pkgid="7743f6e589904dab57619f558a64a1e06128b597834797128d031da5b1da417c" name="python3-salt" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="150500.4.41.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * mark-salt-3006-as-released-586.patch
  * fix-the-regression-of-user.present-state-when-group-.patch
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * fix-cve-2023-34049-bsc-1215157.patch
  * allow-all-primitive-grain-types-for-autosign_grains-.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * update-__pillar__-during-pillar_refresh.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * fix-the-aptpkg.py-unit-test-failure.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * switch-oscap-encoding-to-utf-8-639.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1717761600">- Speed up salt.matcher.confirm_top by using __context__
- Do not call the async wrapper calls with the separate thread
- Prevent OOM with high amount of batch async calls (bsc#1216063)
- Add missing contextvars dependency in salt.version
- Skip tests for unsupported algorithm on old OpenSSL version
- Remove redundant `_file_find` call to the master
- Prevent possible exception in tornado.concurrent.Future._set_done
- Make reactor engine less blocking the EventPublisher
- Make salt-master self recoverable on killing EventPublisher
- Improve broken events catching and reporting
- Make logging calls lighter
- Remove unused import causing delays on starting salt-master
- Mark python3-CherryPy as recommended package for the testsuite
- Added:
  * skip-tests-for-unsupported-algorithm-on-old-openssl-.patch
  * make-reactor-engine-less-blocking-the-eventpublisher.patch
  * remove-unused-import-causing-delays-on-starting-salt.patch
  * make-logging-calls-lighter.patch
  * remove-redundant-_file_find-call-to-the-master.patch
  * prevent-possible-exception-in-tornado.concurrent.fut.patch
  * do-not-call-the-async-wrapper-calls-with-the-separat.patch
  * add-missing-contextvars-dependency-in-salt.version.patch
  * prevent-oom-with-high-amount-of-batch-async-calls-bs.patch
  * speed-up-salt.matcher.confirm_top-by-using-__context.patch
  * improve-broken-events-catching-and-reporting.patch
  * make-salt-master-self-recoverable-on-killing-eventpu.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1722513600">- Fix rich rule comparison in firewalld module (bsc#1222684)
- test_vultrpy: adjust test expectation to prevent failure after Debian 10 EOL
- Make auth.pam more robust with Salt Bundle and fix tests
- Fix performance of user.list_groups with many remote groups
- Fix "status.diskusage" function and exclude some tests for Salt Bundle
- Skip certain tests if necessary for some OSes and set flaky ones
- Add a timer to delete old env post update for venv-minion
- Several fixes for tests to avoid errors and failures in some OSes
- Added:
  * firewalld-normalize-new-rich-rules-before-comparing-.patch
  * several-fixes-for-tests-to-avoid-errors-and-failures.patch
  * test_vultrpy-adjust-test-expectation-to-prevent-fail.patch
  * fix-status.diskusage-and-exclude-some-tests-to-run-w.patch
  * skip-certain-tests-if-necessary-and-mark-some-flaky-.patch
  * some-more-small-tests-fixes-enhancements-661.patch
  * provide-systemd-timer-unit.patch
  * fix-user.list_groups-omits-remote-groups.patch</changelog>
</package>
<package pkgid="199b78380dfec5c94897397baa63132afc7dc86c7f8ab49704dc89cb7df000d4" name="python3-setuptools" arch="noarch">
  <version epoch="0" ver="44.1.1" rel="150400.9.6.1"/>
  <changelog author="tchvatal@suse.com" date="1566388800">- Update to 41.2.0:
  * #479: Remove some usage of the deprecated imp module.
  * #1565: Changed html_sidebars from string to list of string as per https://www.sphinx-doc.org/en/master/changes.html#id58
  * #1697: Moved most of the constants from setup.py to setup.cfg
  * #1756: Forse metadata-version &gt;= 1.2. when project urls are present.</changelog>
  <changelog author="tchvatal@suse.com" date="1566388801">- Switch to multibuild to enable testsuite</changelog>
  <changelog author="jayvdb@gmail.com" date="1568462400">- Define LANG in %check to fix openSUSE/SLE 15 testsuite</changelog>
  <changelog author="mcalabkova@suse.com" date="1570795200">- Update to 41.4.0
  * In declarative config, now traps errors when invalid python_requires
    values are supplied.
  * When storing extras, rely on OrderedSet to retain order of extras
    as indicated by the packager, which will also be deterministic
    on Python 2.7 (with PYTHONHASHSEED unset) and Python 3.6+.
  * Fixed failing integration test triggered by 'long_description_content_type' in packaging.</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Add patch to sort outputs for better reproducability:
  * sort-for-reproducibility.patch
- Add missing dep on ordered-set as it is now in the vendored
  dir too</changelog>
  <changelog author="tchvatal@suse.com" date="1571227201">- Try to use system packages rather than the vendored variants</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1571313600">- Remove runtime dependency for the full python3 package, as the
  actually required SSL module is in python3-base. For python(2),
  SSL is in the "full" python package. Avoids build loops and
  shortens the dependency chain for e.g. rust.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1573473600">- update to 41.6.0
- add importlib.patch
  * Replace usage of deprecated imp module with local
    re-implementation in setuptools._imp
  * Fix pkg_resources.Requirement hash/equality implementation
  * Fix tests when running under python3.10.
  * drop 'deprecated' documentation (test command, ez_setup, EasyInstall)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1580817600">- update to 44.0.0
- last version with python2 support
- add testdata.tar.gz -&gt; missing data for testsuite
  * Drop support for Python 3.4.
  * include pyproject.toml in source distribution by default.
    Projects relying on the previous behavior where pyproject.toml
  * Setuptools once again declares 'setuptools' in the build-system.requires
    and adds PEP 517 build support by declaring itself as the build-backend
  * Fix support for easy_install's find-links option in setup.cfg
  * Build dependencies (setup_requires and tests_require) now install transitive
    dependencies indicated by extras.
  * Mark the easy_install script and setuptools command as deprecated, and use
    pip when available to fetch/build wheels for missing setup_requires/tests_require
    requirements, with the following differences in behavior:
    + support for python_requires
    + better support for wheels (proper handling of priority with respect to PEP 425 tags)
    + PEP 517/518 support
    + eggs are not supported
    + no support for the allow_hosts easy_install option (index_url/find_links are still honored)
    + pip environment variables are honored (and take precedence over easy_install options)
  * Removed the "upload" and "register" commands in favor of twine.
  * Add support for the license_files option in setup.cfg to automatically
    include multiple license files in a source distribution.
  * Update handling of wheels compatibility tags: * add support for manylinux2010
  * fix use of removed 'm' ABI flag in Python 3.8 on Windows
  * Fix empty namespace package installation from wheel.
  * Setuptools now exposes a new entry point hook "setuptools.finalize_distribution_options",
    enabling plugins like setuptools_scm to configure options on the distribution
    at finalization time.</changelog>
  <changelog author="tchvatal@suse.com" date="1584100800">- Fix build without python2</changelog>
  <changelog author="mcepl@suse.com" date="1586174400">- Fix License to the correct MIT</changelog>
  <changelog author="code@bnavigator.de" date="1592913600">- use local source dir for pytest imports
  gh#openSUSE/python-rpm-macros#48</changelog>
  <changelog author="mimi.vx@gmail.com" date="1597320000">- update to 44.1.0
  * Set sys.argv[0] in setup script run by build_meta.__legacy__
  * Fix for Python 4: replace unsafe six.PY3 with six.PY2
  * Fixed a bug in the “setuptools.finalize_distribution_options” hook
    that lead to ignoring the order attribute of entry points managed
    by this hook.
  * Avoid loading working set during Distribution.finalize_options prior
    to invoking _install_setup_requires, broken since v42.0.0.</changelog>
  <changelog author="mcepl@suse.com" date="1605009600">- Add wheel subpackage with the generated wheel for this package
  (bsc#1176262, CVE-2019-20916).</changelog>
  <changelog author="mcepl@suse.com" date="1605182400">- Make wheel a separate build run to avoid the setuptools/wheel build
  cycle.</changelog>
  <changelog author="mcepl@suse.com" date="1605528000">- Avoid duplicite wheel name in the generated package, and we actually
  don't need a subpackage at all.</changelog>
  <changelog author="mcepl@suse.com" date="1607428800">- Add remove_mock.patch to remove dependency on the external mock
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1611316800">- We cannot remove vendored packages when generating setuptools
  wheel (bsc#1177127).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1673265600">- Add CVE-2022-40897-ReDos.patch to fix Regular Expression Denial of Service
  (ReDoS) in package_index.py.
  bsc#1206667</changelog>
  <changelog author="dmueller@suse.com" date="1683201600">- Rename package sources from python- to python3 for PSP (jsc#PED-68, jsc#PED-2217)</changelog>
</package>
<package pkgid="da174c68801c720a8856e4c913a55ca2316746d1ffe3b63c7ce19d2ff8733e71" name="python3-setuptools" arch="src">
  <version epoch="0" ver="44.1.1" rel="150400.9.6.1"/>
  <changelog author="tchvatal@suse.com" date="1566388800">- Update to 41.2.0:
  * #479: Remove some usage of the deprecated imp module.
  * #1565: Changed html_sidebars from string to list of string as per https://www.sphinx-doc.org/en/master/changes.html#id58
  * #1697: Moved most of the constants from setup.py to setup.cfg
  * #1756: Forse metadata-version &gt;= 1.2. when project urls are present.</changelog>
  <changelog author="tchvatal@suse.com" date="1566388801">- Switch to multibuild to enable testsuite</changelog>
  <changelog author="jayvdb@gmail.com" date="1568462400">- Define LANG in %check to fix openSUSE/SLE 15 testsuite</changelog>
  <changelog author="mcalabkova@suse.com" date="1570795200">- Update to 41.4.0
  * In declarative config, now traps errors when invalid python_requires
    values are supplied.
  * When storing extras, rely on OrderedSet to retain order of extras
    as indicated by the packager, which will also be deterministic
    on Python 2.7 (with PYTHONHASHSEED unset) and Python 3.6+.
  * Fixed failing integration test triggered by 'long_description_content_type' in packaging.</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Add patch to sort outputs for better reproducability:
  * sort-for-reproducibility.patch
- Add missing dep on ordered-set as it is now in the vendored
  dir too</changelog>
  <changelog author="tchvatal@suse.com" date="1571227201">- Try to use system packages rather than the vendored variants</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1571313600">- Remove runtime dependency for the full python3 package, as the
  actually required SSL module is in python3-base. For python(2),
  SSL is in the "full" python package. Avoids build loops and
  shortens the dependency chain for e.g. rust.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1573473600">- update to 41.6.0
- add importlib.patch
  * Replace usage of deprecated imp module with local
    re-implementation in setuptools._imp
  * Fix pkg_resources.Requirement hash/equality implementation
  * Fix tests when running under python3.10.
  * drop 'deprecated' documentation (test command, ez_setup, EasyInstall)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1580817600">- update to 44.0.0
- last version with python2 support
- add testdata.tar.gz -&gt; missing data for testsuite
  * Drop support for Python 3.4.
  * include pyproject.toml in source distribution by default.
    Projects relying on the previous behavior where pyproject.toml
  * Setuptools once again declares 'setuptools' in the build-system.requires
    and adds PEP 517 build support by declaring itself as the build-backend
  * Fix support for easy_install's find-links option in setup.cfg
  * Build dependencies (setup_requires and tests_require) now install transitive
    dependencies indicated by extras.
  * Mark the easy_install script and setuptools command as deprecated, and use
    pip when available to fetch/build wheels for missing setup_requires/tests_require
    requirements, with the following differences in behavior:
    + support for python_requires
    + better support for wheels (proper handling of priority with respect to PEP 425 tags)
    + PEP 517/518 support
    + eggs are not supported
    + no support for the allow_hosts easy_install option (index_url/find_links are still honored)
    + pip environment variables are honored (and take precedence over easy_install options)
  * Removed the "upload" and "register" commands in favor of twine.
  * Add support for the license_files option in setup.cfg to automatically
    include multiple license files in a source distribution.
  * Update handling of wheels compatibility tags: * add support for manylinux2010
  * fix use of removed 'm' ABI flag in Python 3.8 on Windows
  * Fix empty namespace package installation from wheel.
  * Setuptools now exposes a new entry point hook "setuptools.finalize_distribution_options",
    enabling plugins like setuptools_scm to configure options on the distribution
    at finalization time.</changelog>
  <changelog author="tchvatal@suse.com" date="1584100800">- Fix build without python2</changelog>
  <changelog author="mcepl@suse.com" date="1586174400">- Fix License to the correct MIT</changelog>
  <changelog author="code@bnavigator.de" date="1592913600">- use local source dir for pytest imports
  gh#openSUSE/python-rpm-macros#48</changelog>
  <changelog author="mimi.vx@gmail.com" date="1597320000">- update to 44.1.0
  * Set sys.argv[0] in setup script run by build_meta.__legacy__
  * Fix for Python 4: replace unsafe six.PY3 with six.PY2
  * Fixed a bug in the “setuptools.finalize_distribution_options” hook
    that lead to ignoring the order attribute of entry points managed
    by this hook.
  * Avoid loading working set during Distribution.finalize_options prior
    to invoking _install_setup_requires, broken since v42.0.0.</changelog>
  <changelog author="mcepl@suse.com" date="1605009600">- Add wheel subpackage with the generated wheel for this package
  (bsc#1176262, CVE-2019-20916).</changelog>
  <changelog author="mcepl@suse.com" date="1605182400">- Make wheel a separate build run to avoid the setuptools/wheel build
  cycle.</changelog>
  <changelog author="mcepl@suse.com" date="1605528000">- Avoid duplicite wheel name in the generated package, and we actually
  don't need a subpackage at all.</changelog>
  <changelog author="mcepl@suse.com" date="1607428800">- Add remove_mock.patch to remove dependency on the external mock
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1611316800">- We cannot remove vendored packages when generating setuptools
  wheel (bsc#1177127).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1673265600">- Add CVE-2022-40897-ReDos.patch to fix Regular Expression Denial of Service
  (ReDoS) in package_index.py.
  bsc#1206667</changelog>
  <changelog author="dmueller@suse.com" date="1683201600">- Rename package sources from python- to python3 for PSP (jsc#PED-68, jsc#PED-2217)</changelog>
</package>
<package pkgid="3d3f30267c872dd3b0b50e59dea48e9863699c09ef71c437aac07c5f1578b629" name="python3-setuptools" arch="noarch">
  <version epoch="0" ver="44.1.1" rel="150400.9.9.1"/>
  <changelog author="tchvatal@suse.com" date="1566388800">- Switch to multibuild to enable testsuite</changelog>
  <changelog author="jayvdb@gmail.com" date="1568462400">- Define LANG in %check to fix openSUSE/SLE 15 testsuite</changelog>
  <changelog author="mcalabkova@suse.com" date="1570795200">- Update to 41.4.0
  * In declarative config, now traps errors when invalid python_requires
    values are supplied.
  * When storing extras, rely on OrderedSet to retain order of extras
    as indicated by the packager, which will also be deterministic
    on Python 2.7 (with PYTHONHASHSEED unset) and Python 3.6+.
  * Fixed failing integration test triggered by 'long_description_content_type' in packaging.</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Add patch to sort outputs for better reproducability:
  * sort-for-reproducibility.patch
- Add missing dep on ordered-set as it is now in the vendored
  dir too</changelog>
  <changelog author="tchvatal@suse.com" date="1571227201">- Try to use system packages rather than the vendored variants</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1571313600">- Remove runtime dependency for the full python3 package, as the
  actually required SSL module is in python3-base. For python(2),
  SSL is in the "full" python package. Avoids build loops and
  shortens the dependency chain for e.g. rust.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1573473600">- update to 41.6.0
- add importlib.patch
  * Replace usage of deprecated imp module with local
    re-implementation in setuptools._imp
  * Fix pkg_resources.Requirement hash/equality implementation
  * Fix tests when running under python3.10.
  * drop 'deprecated' documentation (test command, ez_setup, EasyInstall)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1580817600">- update to 44.0.0
- last version with python2 support
- add testdata.tar.gz -&gt; missing data for testsuite
  * Drop support for Python 3.4.
  * include pyproject.toml in source distribution by default.
    Projects relying on the previous behavior where pyproject.toml
  * Setuptools once again declares 'setuptools' in the build-system.requires
    and adds PEP 517 build support by declaring itself as the build-backend
  * Fix support for easy_install's find-links option in setup.cfg
  * Build dependencies (setup_requires and tests_require) now install transitive
    dependencies indicated by extras.
  * Mark the easy_install script and setuptools command as deprecated, and use
    pip when available to fetch/build wheels for missing setup_requires/tests_require
    requirements, with the following differences in behavior:
    + support for python_requires
    + better support for wheels (proper handling of priority with respect to PEP 425 tags)
    + PEP 517/518 support
    + eggs are not supported
    + no support for the allow_hosts easy_install option (index_url/find_links are still honored)
    + pip environment variables are honored (and take precedence over easy_install options)
  * Removed the "upload" and "register" commands in favor of twine.
  * Add support for the license_files option in setup.cfg to automatically
    include multiple license files in a source distribution.
  * Update handling of wheels compatibility tags: * add support for manylinux2010
  * fix use of removed 'm' ABI flag in Python 3.8 on Windows
  * Fix empty namespace package installation from wheel.
  * Setuptools now exposes a new entry point hook "setuptools.finalize_distribution_options",
    enabling plugins like setuptools_scm to configure options on the distribution
    at finalization time.</changelog>
  <changelog author="tchvatal@suse.com" date="1584100800">- Fix build without python2</changelog>
  <changelog author="mcepl@suse.com" date="1586174400">- Fix License to the correct MIT</changelog>
  <changelog author="code@bnavigator.de" date="1592913600">- use local source dir for pytest imports
  gh#openSUSE/python-rpm-macros#48</changelog>
  <changelog author="mimi.vx@gmail.com" date="1597320000">- update to 44.1.0
  * Set sys.argv[0] in setup script run by build_meta.__legacy__
  * Fix for Python 4: replace unsafe six.PY3 with six.PY2
  * Fixed a bug in the “setuptools.finalize_distribution_options” hook
    that lead to ignoring the order attribute of entry points managed
    by this hook.
  * Avoid loading working set during Distribution.finalize_options prior
    to invoking _install_setup_requires, broken since v42.0.0.</changelog>
  <changelog author="mcepl@suse.com" date="1605009600">- Add wheel subpackage with the generated wheel for this package
  (bsc#1176262, CVE-2019-20916).</changelog>
  <changelog author="mcepl@suse.com" date="1605182400">- Make wheel a separate build run to avoid the setuptools/wheel build
  cycle.</changelog>
  <changelog author="mcepl@suse.com" date="1605528000">- Avoid duplicite wheel name in the generated package, and we actually
  don't need a subpackage at all.</changelog>
  <changelog author="mcepl@suse.com" date="1607428800">- Add remove_mock.patch to remove dependency on the external mock
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1611316800">- We cannot remove vendored packages when generating setuptools
  wheel (bsc#1177127).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1673265600">- Add CVE-2022-40897-ReDos.patch to fix Regular Expression Denial of Service
  (ReDoS) in package_index.py.
  bsc#1206667</changelog>
  <changelog author="dmueller@suse.com" date="1683201600">- Rename package sources from python- to python3 for PSP (jsc#PED-68, jsc#PED-2217)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1723464000">- Add patch CVE-2024-6345-code-execution-via-download-funcs.patch:
  * Sanitize any VCS URL we download. (CVE-2024-6345, bsc#1228105)</changelog>
</package>
<package pkgid="9b4b35c4cd9a267c59ee05ae2dc975be75bd46b6ff735ab61ad90e15feda1ef8" name="python3-setuptools" arch="src">
  <version epoch="0" ver="44.1.1" rel="150400.9.9.1"/>
  <changelog author="tchvatal@suse.com" date="1566388800">- Switch to multibuild to enable testsuite</changelog>
  <changelog author="jayvdb@gmail.com" date="1568462400">- Define LANG in %check to fix openSUSE/SLE 15 testsuite</changelog>
  <changelog author="mcalabkova@suse.com" date="1570795200">- Update to 41.4.0
  * In declarative config, now traps errors when invalid python_requires
    values are supplied.
  * When storing extras, rely on OrderedSet to retain order of extras
    as indicated by the packager, which will also be deterministic
    on Python 2.7 (with PYTHONHASHSEED unset) and Python 3.6+.
  * Fixed failing integration test triggered by 'long_description_content_type' in packaging.</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Add patch to sort outputs for better reproducability:
  * sort-for-reproducibility.patch
- Add missing dep on ordered-set as it is now in the vendored
  dir too</changelog>
  <changelog author="tchvatal@suse.com" date="1571227201">- Try to use system packages rather than the vendored variants</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1571313600">- Remove runtime dependency for the full python3 package, as the
  actually required SSL module is in python3-base. For python(2),
  SSL is in the "full" python package. Avoids build loops and
  shortens the dependency chain for e.g. rust.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1573473600">- update to 41.6.0
- add importlib.patch
  * Replace usage of deprecated imp module with local
    re-implementation in setuptools._imp
  * Fix pkg_resources.Requirement hash/equality implementation
  * Fix tests when running under python3.10.
  * drop 'deprecated' documentation (test command, ez_setup, EasyInstall)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1580817600">- update to 44.0.0
- last version with python2 support
- add testdata.tar.gz -&gt; missing data for testsuite
  * Drop support for Python 3.4.
  * include pyproject.toml in source distribution by default.
    Projects relying on the previous behavior where pyproject.toml
  * Setuptools once again declares 'setuptools' in the build-system.requires
    and adds PEP 517 build support by declaring itself as the build-backend
  * Fix support for easy_install's find-links option in setup.cfg
  * Build dependencies (setup_requires and tests_require) now install transitive
    dependencies indicated by extras.
  * Mark the easy_install script and setuptools command as deprecated, and use
    pip when available to fetch/build wheels for missing setup_requires/tests_require
    requirements, with the following differences in behavior:
    + support for python_requires
    + better support for wheels (proper handling of priority with respect to PEP 425 tags)
    + PEP 517/518 support
    + eggs are not supported
    + no support for the allow_hosts easy_install option (index_url/find_links are still honored)
    + pip environment variables are honored (and take precedence over easy_install options)
  * Removed the "upload" and "register" commands in favor of twine.
  * Add support for the license_files option in setup.cfg to automatically
    include multiple license files in a source distribution.
  * Update handling of wheels compatibility tags: * add support for manylinux2010
  * fix use of removed 'm' ABI flag in Python 3.8 on Windows
  * Fix empty namespace package installation from wheel.
  * Setuptools now exposes a new entry point hook "setuptools.finalize_distribution_options",
    enabling plugins like setuptools_scm to configure options on the distribution
    at finalization time.</changelog>
  <changelog author="tchvatal@suse.com" date="1584100800">- Fix build without python2</changelog>
  <changelog author="mcepl@suse.com" date="1586174400">- Fix License to the correct MIT</changelog>
  <changelog author="code@bnavigator.de" date="1592913600">- use local source dir for pytest imports
  gh#openSUSE/python-rpm-macros#48</changelog>
  <changelog author="mimi.vx@gmail.com" date="1597320000">- update to 44.1.0
  * Set sys.argv[0] in setup script run by build_meta.__legacy__
  * Fix for Python 4: replace unsafe six.PY3 with six.PY2
  * Fixed a bug in the “setuptools.finalize_distribution_options” hook
    that lead to ignoring the order attribute of entry points managed
    by this hook.
  * Avoid loading working set during Distribution.finalize_options prior
    to invoking _install_setup_requires, broken since v42.0.0.</changelog>
  <changelog author="mcepl@suse.com" date="1605009600">- Add wheel subpackage with the generated wheel for this package
  (bsc#1176262, CVE-2019-20916).</changelog>
  <changelog author="mcepl@suse.com" date="1605182400">- Make wheel a separate build run to avoid the setuptools/wheel build
  cycle.</changelog>
  <changelog author="mcepl@suse.com" date="1605528000">- Avoid duplicite wheel name in the generated package, and we actually
  don't need a subpackage at all.</changelog>
  <changelog author="mcepl@suse.com" date="1607428800">- Add remove_mock.patch to remove dependency on the external mock
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1611316800">- We cannot remove vendored packages when generating setuptools
  wheel (bsc#1177127).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1673265600">- Add CVE-2022-40897-ReDos.patch to fix Regular Expression Denial of Service
  (ReDoS) in package_index.py.
  bsc#1206667</changelog>
  <changelog author="dmueller@suse.com" date="1683201600">- Rename package sources from python- to python3 for PSP (jsc#PED-68, jsc#PED-2217)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1723464000">- Add patch CVE-2024-6345-code-execution-via-download-funcs.patch:
  * Sanitize any VCS URL we download. (CVE-2024-6345, bsc#1228105)</changelog>
</package>
<package pkgid="97c2fb28f3a62d70d5d5e4e1019a566a8ddf39122a38328abf07b6eaa3f81d80" name="python3-simplejson" arch="aarch64">
  <version epoch="0" ver="3.17.2" rel="150300.3.4.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1431432000">- update to version 3.6.5:
  * Importing bug fix for reference leak when an error occurs
    during dict encoding
    https://github.com/simplejson/simplejson/issues/109
- additional changes from version 3.6.4:
  * Important bug fix for dump when only sort_keys is set
    https://github.com/simplejson/simplejson/issues/106
- additional changes from version 3.6.3:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/103
- additional changes from version 3.6.2:
  * Documentation updates
    http://bugs.python.org/issue21514
- additional changes from version 3.6.1:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/102
- additional changes from version 3.6.0:
  * Automatically strip any UTF-8 BOM from input to more closely
    follow the latest specs
    https://github.com/simplejson/simplejson/pull/101
- additional changes from version 3.5.3:
  * Fix lower bound checking in scan_once / raw_decode API
    https://github.com/simplejson/simplejson/issues/98</changelog>
  <changelog author="dmueller@suse.com" date="1479470400">- update to 3.8.2:
  * Fix implicit cast compiler warning in _speedups.c
  * simplejson is now available as wheels for OS X and Windows thanks to Travis-CI
  and AppVeyor respectively! Many thanks to @aebrahim for getting this party
  started.
  * Fix issue with iterable_as_array and indent option
  * Fix typo in keyword argument name introduced in 3.8.0
  * New iterable_as_array encoder option to perform lazy serialization of
  any iterable objects, without having to convert to tuple or list.
  * Fix typo introduced in 3.7.0 (behavior should be indistinguishable)
  https://github.com/simplejson/simplejson/commit/e18cc09b688ea1f3305c27616fd3cadd2adc6d31#commitcomment-11443842
  * Do not cache Decimal class in encoder, only reference the decimal module.
  This may make reload work in more common scenarios.
  * Fix compilation with MSVC
  https://github.com/simplejson/simplejson/pull/119
  * simplejson no longer trusts custom str/repr methods for int, long, float
  subclasses. These instances are now formatted as if they were exact
  instances of those types.
  https://github.com/simplejson/simplejson/issues/118</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to 3.10.0
  * Add RawJSON class to allow a faster path for already encoded JSON.
- From 3.9.0
  * Workaround for bad behavior in string subclasses
  * Fix warnings flagged by -3
  * Update readthedocs documentation links
  * Add build status badge to README</changelog>
  <changelog author="jmatejek@suse.com" date="1490097600">- fix pypi url</changelog>
  <changelog author="tbechtold@suse.com" date="1502193600">- update to 3.11.1:
  * Fix issue with item_sort_key when speedups are available, and add
    auto-discovery to test suites to prevent similar regressions
  * docstring fix in JSONEncoder
  * Call PyObject_IsTrue() only once for the strict argument of scann  er
  * Fix a crash with unencodable encoding in the encoder
  * Remove unused imports
  * Remove remnants of Python 2.4 support
  * Fix argument checking errors in _speedups.c
  * Remove the `__init__` methods in extension classes
  * Fix typo in the doc for loads
  * Add Python 3.6 to testing matrix and PyPI metadata</changelog>
  <changelog author="arun@gmx.de" date="1509969600">- update to version 3.12.0:
  * Fix threaded import race condition
    https://github.com/simplejson/simplejson/issues/184
  * Move RawJSON implementation to simplejson.raw_json module
  * Move JSONDecodeError implementation to simplejson.errors module</changelog>
  <changelog author="arun@gmx.de" date="1511697600">- update to version 3.13.2:
  * Fix additional Python 2.x compilation issue on Windows
- changes from version 3.13.1 :
  * Improve CI to catch speedups build regressions
  * Fix speedups build regression in Python 2.x
    https://github.com/simplejson/simplejson/issues/193
- changes from version 3.13.0:
  * Workarounds for NamedTemporaryFile issues with Windows for tool
    tests
  * Make TypeError messages contain type name instead of a repr.
    https://github.com/simplejson/simplejson/pull/191
  * Ensure that encoding of text subtypes is consistent with or
    without speedups
    https://github.com/simplejson/simplejson/issues/185
- changes from version 3.12.1:
  * Misc updates to build infrastructure
  * Fix an assertion failure when make_encoder receives a bad encoder
    argument https://github.com/simplejson/simplejson/pull/188
  * Fix potential crash during GC
    https://github.com/simplejson/simplejson/pull/187
  * Fix a reference leak when sorting keys
    https://github.com/simplejson/simplejson/pull/186</changelog>
  <changelog author="jengelh@inai.de" date="1511784000">- Remove bias from description.</changelog>
  <changelog author="arun@gmx.de" date="1525608000">- specfile:
  * update copyright year
- update to version 3.14.0:
  * Defer is_raw_json test (performance improvement)
    https://github.com/simplejson/simplejson/pull/212
  * Avoid escaping U+2028 and U+2029 without ensure_ascii
    https://github.com/simplejson/simplejson/pull/211
  * Fix an incorrect type test in Python 2, avoiding an unnecessary
    unicode copy.  https://github.com/simplejson/simplejson/pull/210</changelog>
  <changelog author="arun@gmx.de" date="1526904000">- update to version 3.15.0:
  * Clean up the C code
  * Bypass the decode() method in bytes subclasses
  * Support builds without cStringIO
  * Allow to disable serializing bytes by default in Python 3
  * Simplify the compatibility code
  * Fix tests in Python 2.5</changelog>
  <changelog author="arun@gmx.de" date="1530532800">- specfile:
  * be more specific in %files:
    %{python_sitearch}/* -&gt; %{python_sitearch}/simplejson*
- update to version 3.16.0:
  * Restore old behavior with regard to the type of decoded empty
    strings with speedups enabled on Python 2.x
    https://github.com/simplejson/simplejson/pull/225
  * Add python_requires to setup.py to help pip
    https://github.com/simplejson/simplejson/pull/224
  * Fix CSS in docs when built locally
    https://github.com/simplejson/simplejson/pull/222</changelog>
  <changelog author="tchvatal@suse.com" date="1530532801">- Do not package tests</changelog>
  <changelog author="arun@gmx.de" date="1536408000">- update to version 3.16.1:
  * Added examples for JSON lines use cases
  * Add wheels for more Python versions and platforms</changelog>
  <changelog author="arun@gmx.de" date="1574596800">- specfile:
  * update copyright year
- update to version 3.17.0:
  * Updated documentation to be Python 3 first, and
    have removed documentation notes about version changes
    that occurred more than five years ago.
    https://github.com/simplejson/simplejson/pull/257
    https://github.com/simplejson/simplejson/pull/254
  * Update build matrix for Python 3.8
    https://github.com/simplejson/simplejson/pull/255
    https://github.com/simplejson/simplejson/pull/256</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596024000">- update to 3.17.2
- use pytest as testrunner</changelog>
</package>
<package pkgid="e1a19715b0ce4b6b32bdffac3462c72752573fb02653e3595fa1849fbc03426d" name="python3-simplejson" arch="s390x">
  <version epoch="0" ver="3.17.2" rel="150300.3.4.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1431432000">- update to version 3.6.5:
  * Importing bug fix for reference leak when an error occurs
    during dict encoding
    https://github.com/simplejson/simplejson/issues/109
- additional changes from version 3.6.4:
  * Important bug fix for dump when only sort_keys is set
    https://github.com/simplejson/simplejson/issues/106
- additional changes from version 3.6.3:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/103
- additional changes from version 3.6.2:
  * Documentation updates
    http://bugs.python.org/issue21514
- additional changes from version 3.6.1:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/102
- additional changes from version 3.6.0:
  * Automatically strip any UTF-8 BOM from input to more closely
    follow the latest specs
    https://github.com/simplejson/simplejson/pull/101
- additional changes from version 3.5.3:
  * Fix lower bound checking in scan_once / raw_decode API
    https://github.com/simplejson/simplejson/issues/98</changelog>
  <changelog author="dmueller@suse.com" date="1479470400">- update to 3.8.2:
  * Fix implicit cast compiler warning in _speedups.c
  * simplejson is now available as wheels for OS X and Windows thanks to Travis-CI
  and AppVeyor respectively! Many thanks to @aebrahim for getting this party
  started.
  * Fix issue with iterable_as_array and indent option
  * Fix typo in keyword argument name introduced in 3.8.0
  * New iterable_as_array encoder option to perform lazy serialization of
  any iterable objects, without having to convert to tuple or list.
  * Fix typo introduced in 3.7.0 (behavior should be indistinguishable)
  https://github.com/simplejson/simplejson/commit/e18cc09b688ea1f3305c27616fd3cadd2adc6d31#commitcomment-11443842
  * Do not cache Decimal class in encoder, only reference the decimal module.
  This may make reload work in more common scenarios.
  * Fix compilation with MSVC
  https://github.com/simplejson/simplejson/pull/119
  * simplejson no longer trusts custom str/repr methods for int, long, float
  subclasses. These instances are now formatted as if they were exact
  instances of those types.
  https://github.com/simplejson/simplejson/issues/118</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to 3.10.0
  * Add RawJSON class to allow a faster path for already encoded JSON.
- From 3.9.0
  * Workaround for bad behavior in string subclasses
  * Fix warnings flagged by -3
  * Update readthedocs documentation links
  * Add build status badge to README</changelog>
  <changelog author="jmatejek@suse.com" date="1490097600">- fix pypi url</changelog>
  <changelog author="tbechtold@suse.com" date="1502193600">- update to 3.11.1:
  * Fix issue with item_sort_key when speedups are available, and add
    auto-discovery to test suites to prevent similar regressions
  * docstring fix in JSONEncoder
  * Call PyObject_IsTrue() only once for the strict argument of scann  er
  * Fix a crash with unencodable encoding in the encoder
  * Remove unused imports
  * Remove remnants of Python 2.4 support
  * Fix argument checking errors in _speedups.c
  * Remove the `__init__` methods in extension classes
  * Fix typo in the doc for loads
  * Add Python 3.6 to testing matrix and PyPI metadata</changelog>
  <changelog author="arun@gmx.de" date="1509969600">- update to version 3.12.0:
  * Fix threaded import race condition
    https://github.com/simplejson/simplejson/issues/184
  * Move RawJSON implementation to simplejson.raw_json module
  * Move JSONDecodeError implementation to simplejson.errors module</changelog>
  <changelog author="arun@gmx.de" date="1511697600">- update to version 3.13.2:
  * Fix additional Python 2.x compilation issue on Windows
- changes from version 3.13.1 :
  * Improve CI to catch speedups build regressions
  * Fix speedups build regression in Python 2.x
    https://github.com/simplejson/simplejson/issues/193
- changes from version 3.13.0:
  * Workarounds for NamedTemporaryFile issues with Windows for tool
    tests
  * Make TypeError messages contain type name instead of a repr.
    https://github.com/simplejson/simplejson/pull/191
  * Ensure that encoding of text subtypes is consistent with or
    without speedups
    https://github.com/simplejson/simplejson/issues/185
- changes from version 3.12.1:
  * Misc updates to build infrastructure
  * Fix an assertion failure when make_encoder receives a bad encoder
    argument https://github.com/simplejson/simplejson/pull/188
  * Fix potential crash during GC
    https://github.com/simplejson/simplejson/pull/187
  * Fix a reference leak when sorting keys
    https://github.com/simplejson/simplejson/pull/186</changelog>
  <changelog author="jengelh@inai.de" date="1511784000">- Remove bias from description.</changelog>
  <changelog author="arun@gmx.de" date="1525608000">- specfile:
  * update copyright year
- update to version 3.14.0:
  * Defer is_raw_json test (performance improvement)
    https://github.com/simplejson/simplejson/pull/212
  * Avoid escaping U+2028 and U+2029 without ensure_ascii
    https://github.com/simplejson/simplejson/pull/211
  * Fix an incorrect type test in Python 2, avoiding an unnecessary
    unicode copy.  https://github.com/simplejson/simplejson/pull/210</changelog>
  <changelog author="arun@gmx.de" date="1526904000">- update to version 3.15.0:
  * Clean up the C code
  * Bypass the decode() method in bytes subclasses
  * Support builds without cStringIO
  * Allow to disable serializing bytes by default in Python 3
  * Simplify the compatibility code
  * Fix tests in Python 2.5</changelog>
  <changelog author="arun@gmx.de" date="1530532800">- specfile:
  * be more specific in %files:
    %{python_sitearch}/* -&gt; %{python_sitearch}/simplejson*
- update to version 3.16.0:
  * Restore old behavior with regard to the type of decoded empty
    strings with speedups enabled on Python 2.x
    https://github.com/simplejson/simplejson/pull/225
  * Add python_requires to setup.py to help pip
    https://github.com/simplejson/simplejson/pull/224
  * Fix CSS in docs when built locally
    https://github.com/simplejson/simplejson/pull/222</changelog>
  <changelog author="tchvatal@suse.com" date="1530532801">- Do not package tests</changelog>
  <changelog author="arun@gmx.de" date="1536408000">- update to version 3.16.1:
  * Added examples for JSON lines use cases
  * Add wheels for more Python versions and platforms</changelog>
  <changelog author="arun@gmx.de" date="1574596800">- specfile:
  * update copyright year
- update to version 3.17.0:
  * Updated documentation to be Python 3 first, and
    have removed documentation notes about version changes
    that occurred more than five years ago.
    https://github.com/simplejson/simplejson/pull/257
    https://github.com/simplejson/simplejson/pull/254
  * Update build matrix for Python 3.8
    https://github.com/simplejson/simplejson/pull/255
    https://github.com/simplejson/simplejson/pull/256</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596024000">- update to 3.17.2
- use pytest as testrunner</changelog>
</package>
<package pkgid="5df5e3e4068c3d314794ae168bba86395b982a06c7c6ba6049de9b5beb0f4ad6" name="python3-simplejson" arch="x86_64">
  <version epoch="0" ver="3.17.2" rel="150300.3.4.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1431432000">- update to version 3.6.5:
  * Importing bug fix for reference leak when an error occurs
    during dict encoding
    https://github.com/simplejson/simplejson/issues/109
- additional changes from version 3.6.4:
  * Important bug fix for dump when only sort_keys is set
    https://github.com/simplejson/simplejson/issues/106
- additional changes from version 3.6.3:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/103
- additional changes from version 3.6.2:
  * Documentation updates
    http://bugs.python.org/issue21514
- additional changes from version 3.6.1:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/102
- additional changes from version 3.6.0:
  * Automatically strip any UTF-8 BOM from input to more closely
    follow the latest specs
    https://github.com/simplejson/simplejson/pull/101
- additional changes from version 3.5.3:
  * Fix lower bound checking in scan_once / raw_decode API
    https://github.com/simplejson/simplejson/issues/98</changelog>
  <changelog author="dmueller@suse.com" date="1479470400">- update to 3.8.2:
  * Fix implicit cast compiler warning in _speedups.c
  * simplejson is now available as wheels for OS X and Windows thanks to Travis-CI
  and AppVeyor respectively! Many thanks to @aebrahim for getting this party
  started.
  * Fix issue with iterable_as_array and indent option
  * Fix typo in keyword argument name introduced in 3.8.0
  * New iterable_as_array encoder option to perform lazy serialization of
  any iterable objects, without having to convert to tuple or list.
  * Fix typo introduced in 3.7.0 (behavior should be indistinguishable)
  https://github.com/simplejson/simplejson/commit/e18cc09b688ea1f3305c27616fd3cadd2adc6d31#commitcomment-11443842
  * Do not cache Decimal class in encoder, only reference the decimal module.
  This may make reload work in more common scenarios.
  * Fix compilation with MSVC
  https://github.com/simplejson/simplejson/pull/119
  * simplejson no longer trusts custom str/repr methods for int, long, float
  subclasses. These instances are now formatted as if they were exact
  instances of those types.
  https://github.com/simplejson/simplejson/issues/118</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to 3.10.0
  * Add RawJSON class to allow a faster path for already encoded JSON.
- From 3.9.0
  * Workaround for bad behavior in string subclasses
  * Fix warnings flagged by -3
  * Update readthedocs documentation links
  * Add build status badge to README</changelog>
  <changelog author="jmatejek@suse.com" date="1490097600">- fix pypi url</changelog>
  <changelog author="tbechtold@suse.com" date="1502193600">- update to 3.11.1:
  * Fix issue with item_sort_key when speedups are available, and add
    auto-discovery to test suites to prevent similar regressions
  * docstring fix in JSONEncoder
  * Call PyObject_IsTrue() only once for the strict argument of scann  er
  * Fix a crash with unencodable encoding in the encoder
  * Remove unused imports
  * Remove remnants of Python 2.4 support
  * Fix argument checking errors in _speedups.c
  * Remove the `__init__` methods in extension classes
  * Fix typo in the doc for loads
  * Add Python 3.6 to testing matrix and PyPI metadata</changelog>
  <changelog author="arun@gmx.de" date="1509969600">- update to version 3.12.0:
  * Fix threaded import race condition
    https://github.com/simplejson/simplejson/issues/184
  * Move RawJSON implementation to simplejson.raw_json module
  * Move JSONDecodeError implementation to simplejson.errors module</changelog>
  <changelog author="arun@gmx.de" date="1511697600">- update to version 3.13.2:
  * Fix additional Python 2.x compilation issue on Windows
- changes from version 3.13.1 :
  * Improve CI to catch speedups build regressions
  * Fix speedups build regression in Python 2.x
    https://github.com/simplejson/simplejson/issues/193
- changes from version 3.13.0:
  * Workarounds for NamedTemporaryFile issues with Windows for tool
    tests
  * Make TypeError messages contain type name instead of a repr.
    https://github.com/simplejson/simplejson/pull/191
  * Ensure that encoding of text subtypes is consistent with or
    without speedups
    https://github.com/simplejson/simplejson/issues/185
- changes from version 3.12.1:
  * Misc updates to build infrastructure
  * Fix an assertion failure when make_encoder receives a bad encoder
    argument https://github.com/simplejson/simplejson/pull/188
  * Fix potential crash during GC
    https://github.com/simplejson/simplejson/pull/187
  * Fix a reference leak when sorting keys
    https://github.com/simplejson/simplejson/pull/186</changelog>
  <changelog author="jengelh@inai.de" date="1511784000">- Remove bias from description.</changelog>
  <changelog author="arun@gmx.de" date="1525608000">- specfile:
  * update copyright year
- update to version 3.14.0:
  * Defer is_raw_json test (performance improvement)
    https://github.com/simplejson/simplejson/pull/212
  * Avoid escaping U+2028 and U+2029 without ensure_ascii
    https://github.com/simplejson/simplejson/pull/211
  * Fix an incorrect type test in Python 2, avoiding an unnecessary
    unicode copy.  https://github.com/simplejson/simplejson/pull/210</changelog>
  <changelog author="arun@gmx.de" date="1526904000">- update to version 3.15.0:
  * Clean up the C code
  * Bypass the decode() method in bytes subclasses
  * Support builds without cStringIO
  * Allow to disable serializing bytes by default in Python 3
  * Simplify the compatibility code
  * Fix tests in Python 2.5</changelog>
  <changelog author="arun@gmx.de" date="1530532800">- specfile:
  * be more specific in %files:
    %{python_sitearch}/* -&gt; %{python_sitearch}/simplejson*
- update to version 3.16.0:
  * Restore old behavior with regard to the type of decoded empty
    strings with speedups enabled on Python 2.x
    https://github.com/simplejson/simplejson/pull/225
  * Add python_requires to setup.py to help pip
    https://github.com/simplejson/simplejson/pull/224
  * Fix CSS in docs when built locally
    https://github.com/simplejson/simplejson/pull/222</changelog>
  <changelog author="tchvatal@suse.com" date="1530532801">- Do not package tests</changelog>
  <changelog author="arun@gmx.de" date="1536408000">- update to version 3.16.1:
  * Added examples for JSON lines use cases
  * Add wheels for more Python versions and platforms</changelog>
  <changelog author="arun@gmx.de" date="1574596800">- specfile:
  * update copyright year
- update to version 3.17.0:
  * Updated documentation to be Python 3 first, and
    have removed documentation notes about version changes
    that occurred more than five years ago.
    https://github.com/simplejson/simplejson/pull/257
    https://github.com/simplejson/simplejson/pull/254
  * Update build matrix for Python 3.8
    https://github.com/simplejson/simplejson/pull/255
    https://github.com/simplejson/simplejson/pull/256</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596024000">- update to 3.17.2
- use pytest as testrunner</changelog>
</package>
<package pkgid="486d061906b4d52bed738cf8d508330f7479e674e942ea075a712a420b32cd88" name="python3-urllib3" arch="noarch">
  <version epoch="0" ver="1.25.10" rel="150300.4.12.1"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1560945600">- Fix Upgrade from Leap 42.1/42.2 by adding Obsoletes/Provides:
  python-urllib3, fixes boo#1138746</changelog>
  <changelog author="dimstar@opensuse.org" date="1561032000">- Provides/Obsoletes does not fix the issue: we have a
  directory-to-symlink switch, which cannot be handled by RPM
  internally. Assist using pre script (boo#1138715).</changelog>
  <changelog author="dimstar@opensuse.org" date="1561118400">- Fixup pre script: the migration issue happens when changing from
  python-urllib3 to python2-urllib3: the number of installed
  instances of python2-urlliib3 is at this moment 1, unlike in
  regular updates. This is due to a name change, which consists not
  of a pure package update.</changelog>
  <changelog author="tchvatal@suse.com" date="1563796800">- Use old pytest 3.x as newer do not work with this release
  * this will be fixed with next release, just spread among
    numerous fixes in the git for quick backporting</changelog>
  <changelog author="jayvdb@gmail.com" date="1568462400">- Use have/skip_python2/3 macros to allow building only one flavour</changelog>
  <changelog author="tchvatal@suse.com" date="1568980800">- Update to 1.25.5:
  * Add mitigation for BPO-37428 affecting Python &lt;3.7.4 and OpenSSL 1.1.1+ which caused certificate verification to be enabled when using cert_reqs=CERT_NONE. (Issue #1682)
  * Propagate Retry-After header settings to subsequent retries. (Pull #1607)
  * Fix edge case where Retry-After header was still respected even when explicitly opted out of. (Pull #1607)
  * Remove dependency on rfc3986 for URL parsing.
  * Fix issue where URLs containing invalid characters within Url.auth would raise an exception instead of percent-encoding those characters.
  * Add support for HTTPResponse.auto_close = False which makes HTTP responses work well with BufferedReaders and other io module features. (Pull #1652)
  * Percent-encode invalid characters in URL for HTTPConnectionPool.request() (Pull #1673)
- Drop patch urllib3-ssl-default-context.patch
- Drop patch python-urllib3-recent-date.patch the date is recent
  enough on its own</changelog>
  <changelog author="tchvatal@suse.com" date="1569585600">- Restrict the tornado dep from tom to 5 or older release as the
  6.x changed the API</changelog>
  <changelog author="tchvatal@suse.com" date="1570017600">- Updae to 1.25.6:
  * Fix issue where tilde (~) characters were incorrectly percent-encoded in the path. (Pull #1692)</changelog>
  <changelog author="rhafer@suse.de" date="1571140800">- Require a new enough release of python-six. 1.25.6 needs at least
  1.12.0 for ensure_text() and friends.</changelog>
  <changelog author="mcalabkova@suse.com" date="1581076800">- update to 1.25.8
  * Drop support for EOL Python 3.4
  * Optimize _encode_invalid_chars
  * Preserve chunked parameter on retries
  * Allow unset SERVER_SOFTWARE in App Engine
  * Fix issue where URL fragment was sent within the request target.
  * Fix issue where an empty query section in a URL would fail to parse.
  * Remove TLS 1.3 support in SecureTransport due to Apple removing support.</changelog>
  <changelog author="mcepl@suse.com" date="1587470400">- Explicitly switch off building python 2 version.</changelog>
  <changelog author="dmueller@suse.com" date="1591099200">- update to 1.25.9 (bsc#1177120, CVE-2020-26137):
  * Added ``InvalidProxyConfigurationWarning`` which is raised when
    erroneously specifying an HTTPS proxy URL. urllib3 doesn't currently
    support connecting to HTTPS proxies but will soon be able to
    and we would like users to migrate properly without much breakage.
  * Drain connection after ``PoolManager`` redirect (Pull #1817)
  * Ensure ``load_verify_locations`` raises ``SSLError`` for all backends (Pull #1812)
  * Rename ``VerifiedHTTPSConnection`` to ``HTTPSConnection`` (Pull #1805)
  * Allow the CA certificate data to be passed as a string (Pull #1804)
  * Raise ``ValueError`` if method contains control characters (Pull #1800)
  * Add ``__repr__`` to ``Timeout`` (Pull #1795)</changelog>
  <changelog author="dmueller@suse.com" date="1596542400">- update to 1.25.10:
  * Added support for ``SSLKEYLOGFILE`` environment variable for
    logging TLS session keys with use with programs like
    Wireshark for decrypting captured web traffic (Pull #1867)
  * Fixed loading of SecureTransport libraries on macOS Big Sur
    due to the new dynamic linker cache (Pull #1905)
  * Collapse chunked request bodies data and framing into one
  call to ``send()`` to reduce the number of TCP packets by 2-4x (Pull #1906)
  * Don't insert ``None`` into ``ConnectionPool`` if the pool
    was empty when requesting a connection (Pull #1866)
  * Avoid ``hasattr`` call in ``BrotliDecoder.decompress()`` (Pull #1858)</changelog>
  <changelog author="aplanas@suse.com" date="1599652800">- Generate pyc for ssl_match_hostname too</changelog>
  <changelog author="mcepl@suse.com" date="1608206400">- Add CI variable, which makes timeouts in the test suite longer
  (gh#urllib3/urllib3#2109, bsc#1176389) and
  test_timeout_errors_cause_retries should not fail.</changelog>
  <changelog author="code@bnavigator.de" date="1609502400">- Skip test for RECENT_DATE. It is a test purely for developers.
  To maintain reproducibility, keep upstreams possibly outdated
  RECENT_DATE in the source code.</changelog>
  <changelog author="johannes.grassler@suse.com" date="1623412800">- Add CVE-2021-33503.patch (bsc#1187045, CVE-2021-33503)
  * Improve performance of sub-authority splitting in URL</changelog>
  <changelog author="daniel.garcia@suse.com" date="1696852800">- Add CVE-2023-43804.patch (bsc#1215968, CVE-2023-43804)
  gh#urllib3/urllib3#3139
  * Added the Cookie header to the list of headers to strip from
    requests when redirecting to a different host. As before,
    different headers can be set via Retry.remove_headers_on_redirect.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1698235200">- Add CVE-2023-45803.patch (bsc#1216377, CVE-2023-45803)
  gh#urllib3/urllib3@4e98d57809da</changelog>
  <changelog author="mmachova@suse.com" date="1721995200">- Add CVE-2024-37891.patch (bsc#1226469, CVE-2024-37891)</changelog>
</package>
<package pkgid="098ac33ff219f06a9fb739bdca84cb488a058cd3aef04697156fcd36856d8560" name="python3-urllib3" arch="noarch">
  <version epoch="0" ver="1.25.10" rel="150300.4.6.1"/>
  <changelog author="tchvatal@suse.com" date="1559131200">- Add more test to skip as with new openssl some behaviour changed
  and we can't rely on them anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1559908800">- Skip test_source_address_error as we raise different error with
  fixes that we provide in new python2/3</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1560945600">- Fix Upgrade from Leap 42.1/42.2 by adding Obsoletes/Provides:
  python-urllib3, fixes boo#1138746</changelog>
  <changelog author="dimstar@opensuse.org" date="1561032000">- Provides/Obsoletes does not fix the issue: we have a
  directory-to-symlink switch, which cannot be handled by RPM
  internally. Assist using pre script (boo#1138715).</changelog>
  <changelog author="dimstar@opensuse.org" date="1561118400">- Fixup pre script: the migration issue happens when changing from
  python-urllib3 to python2-urllib3: the number of installed
  instances of python2-urlliib3 is at this moment 1, unlike in
  regular updates. This is due to a name change, which consists not
  of a pure package update.</changelog>
  <changelog author="tchvatal@suse.com" date="1563796800">- Use old pytest 3.x as newer do not work with this release
  * this will be fixed with next release, just spread among
    numerous fixes in the git for quick backporting</changelog>
  <changelog author="jayvdb@gmail.com" date="1568462400">- Use have/skip_python2/3 macros to allow building only one flavour</changelog>
  <changelog author="tchvatal@suse.com" date="1568980800">- Update to 1.25.5:
  * Add mitigation for BPO-37428 affecting Python &lt;3.7.4 and OpenSSL 1.1.1+ which caused certificate verification to be enabled when using cert_reqs=CERT_NONE. (Issue #1682)
  * Propagate Retry-After header settings to subsequent retries. (Pull #1607)
  * Fix edge case where Retry-After header was still respected even when explicitly opted out of. (Pull #1607)
  * Remove dependency on rfc3986 for URL parsing.
  * Fix issue where URLs containing invalid characters within Url.auth would raise an exception instead of percent-encoding those characters.
  * Add support for HTTPResponse.auto_close = False which makes HTTP responses work well with BufferedReaders and other io module features. (Pull #1652)
  * Percent-encode invalid characters in URL for HTTPConnectionPool.request() (Pull #1673)
- Drop patch urllib3-ssl-default-context.patch
- Drop patch python-urllib3-recent-date.patch the date is recent
  enough on its own</changelog>
  <changelog author="tchvatal@suse.com" date="1569585600">- Restrict the tornado dep from tom to 5 or older release as the
  6.x changed the API</changelog>
  <changelog author="tchvatal@suse.com" date="1570017600">- Updae to 1.25.6:
  * Fix issue where tilde (~) characters were incorrectly percent-encoded in the path. (Pull #1692)</changelog>
  <changelog author="rhafer@suse.de" date="1571140800">- Require a new enough release of python-six. 1.25.6 needs at least
  1.12.0 for ensure_text() and friends.</changelog>
  <changelog author="mcalabkova@suse.com" date="1581076800">- update to 1.25.8
  * Drop support for EOL Python 3.4
  * Optimize _encode_invalid_chars
  * Preserve chunked parameter on retries
  * Allow unset SERVER_SOFTWARE in App Engine
  * Fix issue where URL fragment was sent within the request target.
  * Fix issue where an empty query section in a URL would fail to parse.
  * Remove TLS 1.3 support in SecureTransport due to Apple removing support.</changelog>
  <changelog author="mcepl@suse.com" date="1587470400">- Explicitly switch off building python 2 version.</changelog>
  <changelog author="dmueller@suse.com" date="1591099200">- update to 1.25.9 (bsc#1177120, CVE-2020-26137):
  * Added ``InvalidProxyConfigurationWarning`` which is raised when
    erroneously specifying an HTTPS proxy URL. urllib3 doesn't currently
    support connecting to HTTPS proxies but will soon be able to
    and we would like users to migrate properly without much breakage.
  * Drain connection after ``PoolManager`` redirect (Pull #1817)
  * Ensure ``load_verify_locations`` raises ``SSLError`` for all backends (Pull #1812)
  * Rename ``VerifiedHTTPSConnection`` to ``HTTPSConnection`` (Pull #1805)
  * Allow the CA certificate data to be passed as a string (Pull #1804)
  * Raise ``ValueError`` if method contains control characters (Pull #1800)
  * Add ``__repr__`` to ``Timeout`` (Pull #1795)</changelog>
  <changelog author="dmueller@suse.com" date="1596542400">- update to 1.25.10:
  * Added support for ``SSLKEYLOGFILE`` environment variable for
    logging TLS session keys with use with programs like
    Wireshark for decrypting captured web traffic (Pull #1867)
  * Fixed loading of SecureTransport libraries on macOS Big Sur
    due to the new dynamic linker cache (Pull #1905)
  * Collapse chunked request bodies data and framing into one
  call to ``send()`` to reduce the number of TCP packets by 2-4x (Pull #1906)
  * Don't insert ``None`` into ``ConnectionPool`` if the pool
    was empty when requesting a connection (Pull #1866)
  * Avoid ``hasattr`` call in ``BrotliDecoder.decompress()`` (Pull #1858)</changelog>
  <changelog author="aplanas@suse.com" date="1599652800">- Generate pyc for ssl_match_hostname too</changelog>
  <changelog author="mcepl@suse.com" date="1608206400">- Add CI variable, which makes timeouts in the test suite longer
  (gh#urllib3/urllib3#2109, bsc#1176389) and
  test_timeout_errors_cause_retries should not fail.</changelog>
  <changelog author="code@bnavigator.de" date="1609502400">- Skip test for RECENT_DATE. It is a test purely for developers.
  To maintain reproducibility, keep upstreams possibly outdated
  RECENT_DATE in the source code.</changelog>
  <changelog author="johannes.grassler@suse.com" date="1623412800">- Add CVE-2021-33503.patch (bsc#1187045, CVE-2021-33503)
  * Improve performance of sub-authority splitting in URL</changelog>
  <changelog author="daniel.garcia@suse.com" date="1696852800">- Add CVE-2023-43804.patch (bsc#1215968, CVE-2023-43804)
  gh#urllib3/urllib3#3139
  * Added the Cookie header to the list of headers to strip from
    requests when redirecting to a different host. As before,
    different headers can be set via Retry.remove_headers_on_redirect.</changelog>
</package>
<package pkgid="a9f1c027a66e6d078c11044aa427269aad7a612e5848d79d3161778c82a68ba5" name="python3-urllib3" arch="noarch">
  <version epoch="0" ver="1.25.10" rel="150300.4.9.1"/>
  <changelog author="tchvatal@suse.com" date="1559908800">- Skip test_source_address_error as we raise different error with
  fixes that we provide in new python2/3</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1560945600">- Fix Upgrade from Leap 42.1/42.2 by adding Obsoletes/Provides:
  python-urllib3, fixes boo#1138746</changelog>
  <changelog author="dimstar@opensuse.org" date="1561032000">- Provides/Obsoletes does not fix the issue: we have a
  directory-to-symlink switch, which cannot be handled by RPM
  internally. Assist using pre script (boo#1138715).</changelog>
  <changelog author="dimstar@opensuse.org" date="1561118400">- Fixup pre script: the migration issue happens when changing from
  python-urllib3 to python2-urllib3: the number of installed
  instances of python2-urlliib3 is at this moment 1, unlike in
  regular updates. This is due to a name change, which consists not
  of a pure package update.</changelog>
  <changelog author="tchvatal@suse.com" date="1563796800">- Use old pytest 3.x as newer do not work with this release
  * this will be fixed with next release, just spread among
    numerous fixes in the git for quick backporting</changelog>
  <changelog author="jayvdb@gmail.com" date="1568462400">- Use have/skip_python2/3 macros to allow building only one flavour</changelog>
  <changelog author="tchvatal@suse.com" date="1568980800">- Update to 1.25.5:
  * Add mitigation for BPO-37428 affecting Python &lt;3.7.4 and OpenSSL 1.1.1+ which caused certificate verification to be enabled when using cert_reqs=CERT_NONE. (Issue #1682)
  * Propagate Retry-After header settings to subsequent retries. (Pull #1607)
  * Fix edge case where Retry-After header was still respected even when explicitly opted out of. (Pull #1607)
  * Remove dependency on rfc3986 for URL parsing.
  * Fix issue where URLs containing invalid characters within Url.auth would raise an exception instead of percent-encoding those characters.
  * Add support for HTTPResponse.auto_close = False which makes HTTP responses work well with BufferedReaders and other io module features. (Pull #1652)
  * Percent-encode invalid characters in URL for HTTPConnectionPool.request() (Pull #1673)
- Drop patch urllib3-ssl-default-context.patch
- Drop patch python-urllib3-recent-date.patch the date is recent
  enough on its own</changelog>
  <changelog author="tchvatal@suse.com" date="1569585600">- Restrict the tornado dep from tom to 5 or older release as the
  6.x changed the API</changelog>
  <changelog author="tchvatal@suse.com" date="1570017600">- Updae to 1.25.6:
  * Fix issue where tilde (~) characters were incorrectly percent-encoded in the path. (Pull #1692)</changelog>
  <changelog author="rhafer@suse.de" date="1571140800">- Require a new enough release of python-six. 1.25.6 needs at least
  1.12.0 for ensure_text() and friends.</changelog>
  <changelog author="mcalabkova@suse.com" date="1581076800">- update to 1.25.8
  * Drop support for EOL Python 3.4
  * Optimize _encode_invalid_chars
  * Preserve chunked parameter on retries
  * Allow unset SERVER_SOFTWARE in App Engine
  * Fix issue where URL fragment was sent within the request target.
  * Fix issue where an empty query section in a URL would fail to parse.
  * Remove TLS 1.3 support in SecureTransport due to Apple removing support.</changelog>
  <changelog author="mcepl@suse.com" date="1587470400">- Explicitly switch off building python 2 version.</changelog>
  <changelog author="dmueller@suse.com" date="1591099200">- update to 1.25.9 (bsc#1177120, CVE-2020-26137):
  * Added ``InvalidProxyConfigurationWarning`` which is raised when
    erroneously specifying an HTTPS proxy URL. urllib3 doesn't currently
    support connecting to HTTPS proxies but will soon be able to
    and we would like users to migrate properly without much breakage.
  * Drain connection after ``PoolManager`` redirect (Pull #1817)
  * Ensure ``load_verify_locations`` raises ``SSLError`` for all backends (Pull #1812)
  * Rename ``VerifiedHTTPSConnection`` to ``HTTPSConnection`` (Pull #1805)
  * Allow the CA certificate data to be passed as a string (Pull #1804)
  * Raise ``ValueError`` if method contains control characters (Pull #1800)
  * Add ``__repr__`` to ``Timeout`` (Pull #1795)</changelog>
  <changelog author="dmueller@suse.com" date="1596542400">- update to 1.25.10:
  * Added support for ``SSLKEYLOGFILE`` environment variable for
    logging TLS session keys with use with programs like
    Wireshark for decrypting captured web traffic (Pull #1867)
  * Fixed loading of SecureTransport libraries on macOS Big Sur
    due to the new dynamic linker cache (Pull #1905)
  * Collapse chunked request bodies data and framing into one
  call to ``send()`` to reduce the number of TCP packets by 2-4x (Pull #1906)
  * Don't insert ``None`` into ``ConnectionPool`` if the pool
    was empty when requesting a connection (Pull #1866)
  * Avoid ``hasattr`` call in ``BrotliDecoder.decompress()`` (Pull #1858)</changelog>
  <changelog author="aplanas@suse.com" date="1599652800">- Generate pyc for ssl_match_hostname too</changelog>
  <changelog author="mcepl@suse.com" date="1608206400">- Add CI variable, which makes timeouts in the test suite longer
  (gh#urllib3/urllib3#2109, bsc#1176389) and
  test_timeout_errors_cause_retries should not fail.</changelog>
  <changelog author="code@bnavigator.de" date="1609502400">- Skip test for RECENT_DATE. It is a test purely for developers.
  To maintain reproducibility, keep upstreams possibly outdated
  RECENT_DATE in the source code.</changelog>
  <changelog author="johannes.grassler@suse.com" date="1623412800">- Add CVE-2021-33503.patch (bsc#1187045, CVE-2021-33503)
  * Improve performance of sub-authority splitting in URL</changelog>
  <changelog author="daniel.garcia@suse.com" date="1696852800">- Add CVE-2023-43804.patch (bsc#1215968, CVE-2023-43804)
  gh#urllib3/urllib3#3139
  * Added the Cookie header to the list of headers to strip from
    requests when redirecting to a different host. As before,
    different headers can be set via Retry.remove_headers_on_redirect.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1698235200">- Add CVE-2023-45803.patch (bsc#1216377, CVE-2023-45803)
  gh#urllib3/urllib3@4e98d57809da</changelog>
</package>
<package pkgid="87c9bf242f1cf6f6c0e31d9434068d90c980faa323827e0e79f7aec196366a08" name="python3-zypp-plugin" arch="noarch">
  <version epoch="0" ver="0.6.4" rel="150400.13.4.1"/>
  <changelog author="lchiquitto@suse.de" date="1425988800">- Add COPYING file</changelog>
  <changelog author="ma@suse.de" date="1509019200">- Fix specfile to be able to build for python3
- version 0.6</changelog>
  <changelog author="ma@suse.de" date="1509019201">- Let zypp-plugin-python provide python2-zypp-plugin to be
  consistent with python3-zypp-plugin.
- version 0.6.1</changelog>
  <changelog author="ma@suse.de" date="1510228800">- Don't use a shebang in the module
- version 0.6.2</changelog>
  <changelog author="tchvatal@suse.com" date="1512993600">- Switch to singlespec packaging to make it easy to disable either
  python3 or python2 plugin and make sure all is buildable
- version 0.6.3</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Fix a bit the obsoletes/provides to allow migration, previously
  was overwritten by macros
- BR python-rpm-macros to build on older distributions
- Fix bit python detection conditions on install phase to be better
  readable and uniform</changelog>
  <changelog author="ma@suse.de" date="1516363200">- Disable singlespec packaging in SLE12* and older distros while it's
  not working there. They provide python2 packages only.</changelog>
  <changelog author="ma@suse.com" date="1519041600">- Provide python3-zypp-plugin in SLE12-SP3 (bsc#1081596)</changelog>
  <changelog author="ma@suse.com" date="1520942400">- Provide python3-zypp-plugin down to SLE12 (bsc#1081596)</changelog>
  <changelog author="code@bnavigator.de" date="1603454400">- singlespec in Tumbleweed must support multiple python3 flavors
  in the future gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="ma@suse.com" date="1721044800">- Fix stomp header regex to include '-' (bsc#1227793)
- version 0.6.4</changelog>
</package>
<package pkgid="bb08bcad17ab3ad009cb5fbb23c1cb027006c8837244f2a66cfed56c54600ccf" name="qemu" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.12.1"/>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
</package>
<package pkgid="9f0d7c878041d265487aa9f1b4cde49ed67cae513f2e03225dfd359d760fac1f" name="qemu" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.12.1"/>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
</package>
<package pkgid="e0a13a5cddf4ce09ef2784a735a2a0f1348eb8cd56cc26fbd4b525fdc8e05501" name="qemu" arch="src">
  <version epoch="0" ver="7.1.0" rel="150500.49.12.1"/>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
</package>
<package pkgid="bfc980aae5edbf4dbdd27322d045e354de8a941215fddbd388d06f50b1a6ed75" name="qemu" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.12.1"/>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
</package>
<package pkgid="c208ef4a1fc4c16983414f1f98a6edba8ca34698364ffec9f47690b2954faa30" name="qemu" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.15.1"/>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
</package>
<package pkgid="5d665b9444c56be568576230b90f1bad22406d7af064e0bb01f4de4b34045749" name="qemu" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.15.1"/>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
</package>
<package pkgid="cf4a19dabef1ba6119bbefe7331de13616157fa385c2979489d7dc473a6822ea" name="qemu" arch="src">
  <version epoch="0" ver="7.1.0" rel="150500.49.15.1"/>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
</package>
<package pkgid="15e101b1f1565c1518875a913e7f4088044bc52cd066e0228f2ec21037d5ef3b" name="qemu" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.15.1"/>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
</package>
<package pkgid="483a2ed44eaa8679ee836e74fe6ea1a5109e2e6236cc5554a1a4028cfa5c1042" name="qemu" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.18.1"/>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
  <changelog author="dfaggioli@suse.com" date="1723550400">- Fix bsc#1227322, CVE-2024-4467:
  * qcow2: Don't open data_file with BDRV_O_NO_IO</changelog>
</package>
<package pkgid="89c0212f69565e3587c4523ef4bfbb7ad1b7f6e0578af4d10d3008cd1d0765b2" name="qemu" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.18.1"/>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
  <changelog author="dfaggioli@suse.com" date="1723550400">- Fix bsc#1227322, CVE-2024-4467:
  * qcow2: Don't open data_file with BDRV_O_NO_IO</changelog>
</package>
<package pkgid="5f07e209e66c37277ede6fd6c43935116968e73359a6802502f46f64b6653f1c" name="qemu" arch="src">
  <version epoch="0" ver="7.1.0" rel="150500.49.18.1"/>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
  <changelog author="dfaggioli@suse.com" date="1723550400">- Fix bsc#1227322, CVE-2024-4467:
  * qcow2: Don't open data_file with BDRV_O_NO_IO</changelog>
</package>
<package pkgid="a5b1e9cd58c8a791d05a2a2d9fb8bf503e5b1a6eeff9e907586d6c14f835b560" name="qemu" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.18.1"/>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
  <changelog author="dfaggioli@suse.com" date="1723550400">- Fix bsc#1227322, CVE-2024-4467:
  * qcow2: Don't open data_file with BDRV_O_NO_IO</changelog>
</package>
<package pkgid="188c03db297dc4885ab9fb615c3d78ddacaa97a09f71233a3486c79d0132a921" name="qemu" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="7b96253209e79e3ab95332346b99c689d82affaa535abbc96ea2e4d497b1c69f" name="qemu" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="2a2a9f7c3b5168239e3ae73dd313f77ac56fdfdcb2d1ff2a83231e7a1e7b028c" name="qemu" arch="src">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="46e1cb18c4ac1e631f09231e4bba3e39fc18a047932b14e4c8dd4c5387120804" name="qemu" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="21415ae99bab2eb2c9897d75482a32f51a1d3121bf84c9e7ef9bfac0107d475c" name="qemu" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="f79847bee30f7b2e74a578b334736a09c464d306212161586cd11fc1acd77338" name="qemu" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="6b16e3acda80d8e7261d84ea4acd910015a1f8742fc5dd6f6e3cbb57d63f6465" name="qemu" arch="src">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="6cf4a0caee0bab89ca317440f258b2e3a88e8892879c5d0b7ef8cd15a26f8880" name="qemu" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="6040755eb978a3388ce4b7140828363219f0a16e77ad162f025a43efd9374577" name="qemu-accel-tcg-x86" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.12.1"/>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
</package>
<package pkgid="195cb329cf8c92a713d17739f7d4d61339f7d86fe11b6d16af00ae473da8113d" name="qemu-accel-tcg-x86" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.15.1"/>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
</package>
<package pkgid="6f01dbc7053fe3a5c718d11cac2109134c6ecc6c54ac0c344496b511eb6ad331" name="qemu-accel-tcg-x86" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.18.1"/>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
  <changelog author="dfaggioli@suse.com" date="1723550400">- Fix bsc#1227322, CVE-2024-4467:
  * qcow2: Don't open data_file with BDRV_O_NO_IO</changelog>
</package>
<package pkgid="e2f5aa9f5532d845c77600930ee9731b07410a1ba721e4e48b3d3a9fa6e77100" name="qemu-accel-tcg-x86" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="e2d8378b0a690ced00b7b0b708ebc79f466adef58d5aec51caea771a92629664" name="qemu-accel-tcg-x86" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="df67a86c3fb146ac6dc895260090450d63fd1c0dba9a2fa0a710278a5b59ce26" name="qemu-arm" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.12.1"/>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
</package>
<package pkgid="e4b85f594e165f3fff2ff2aee4ea47e8ba174e686f85d275aee16ea4244a0b56" name="qemu-arm" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.15.1"/>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
</package>
<package pkgid="c144d0d66faff9d909c28e73d109474803f899d3e62733d17ec64d8225f64bc0" name="qemu-arm" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.18.1"/>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
  <changelog author="dfaggioli@suse.com" date="1723550400">- Fix bsc#1227322, CVE-2024-4467:
  * qcow2: Don't open data_file with BDRV_O_NO_IO</changelog>
</package>
<package pkgid="d75dba9f713e851dea3a44bd541ef366ac9c88a810568a8661989395e9fa7ddb" name="qemu-arm" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="6adb5f0a82a1bbaa438250adbbdd491893b302c87cc4ede9e52771f93180df68" name="qemu-arm" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="9ecfa511298da50cbfd58f90cfd323a20c9bc073d0db9b8739c7e5eec7b61cef" name="qemu-audio-spice" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.12.1"/>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
</package>
<package pkgid="eeedd15a98b257de379e78eccaaf6a6d27dc7b67e2b3c10f5cc8cc0db4298498" name="qemu-audio-spice" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.12.1"/>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
</package>
<package pkgid="897f9eafd35c3616319aa67a6c282efca59db3c0468ca66e29ca0d1515d91ce3" name="qemu-audio-spice" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.12.1"/>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
</package>
<package pkgid="6437957eb0c1435ae630d22c8cf6d1eae55ebe65ee050ff79e4411df4f5f672f" name="qemu-audio-spice" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.15.1"/>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
</package>
<package pkgid="1848eb0aa125fb14daea025f87a296cb221ce51229df63498cb1f0ab98f98c8e" name="qemu-audio-spice" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.15.1"/>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
</package>
<package pkgid="e8f8325214368ab883176ba471796776e2e743b286f68eae762027d2180050a6" name="qemu-audio-spice" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.15.1"/>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
</package>
<package pkgid="c8158aeb7660a4d64059d1d6f8839062ddcd0c05c1506d92c80711ed58609ad4" name="qemu-audio-spice" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.18.1"/>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
  <changelog author="dfaggioli@suse.com" date="1723550400">- Fix bsc#1227322, CVE-2024-4467:
  * qcow2: Don't open data_file with BDRV_O_NO_IO</changelog>
</package>
<package pkgid="e9392d1ffffe04b69c0cfb4ca776b851b0b6c56143702f937b3e600209edeedd" name="qemu-audio-spice" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.18.1"/>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
  <changelog author="dfaggioli@suse.com" date="1723550400">- Fix bsc#1227322, CVE-2024-4467:
  * qcow2: Don't open data_file with BDRV_O_NO_IO</changelog>
</package>
<package pkgid="83ceb29158aa242c4dd2d7ebcdfa3859a813d2f00edd684b6b73f37d6deaaa4e" name="qemu-audio-spice" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.18.1"/>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
  <changelog author="dfaggioli@suse.com" date="1723550400">- Fix bsc#1227322, CVE-2024-4467:
  * qcow2: Don't open data_file with BDRV_O_NO_IO</changelog>
</package>
<package pkgid="e3069547385534d0a257ecff6cdded030b94e08d74a98f95754043443b84f811" name="qemu-audio-spice" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="aa46d4a643ba9526c3270a1b5374160917d883406c8f435da6b30d2d8c36a9af" name="qemu-audio-spice" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="47ba929a096db95476e5848e685be3f16aa94dcbeb209e76fd8b13535c556afe" name="qemu-audio-spice" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="919ca0d11abe6c71a0662fb87df6eae70160f99ab2e1c834a06623f1814729c1" name="qemu-audio-spice" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="4855ea11887bb20beb242e03b0c727ea995038ad6bd79d43b75769f3707df9b2" name="qemu-audio-spice" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="a3db00ffd761bbcf3c4a674664508516bc40fecf6f053f8529279a226c36fa9e" name="qemu-audio-spice" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="0befb1d26e4f05e784339ee5eb95073d7c3df434d3c4bbad5f17cd623f801d39" name="qemu-block-curl" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.12.1"/>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
</package>
<package pkgid="0c44297212d4066080e824560d64c8a3962f535f1379e60ae08d1c9c411afe39" name="qemu-block-curl" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.12.1"/>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
</package>
<package pkgid="04bd61bdb80f5e0d2094f0cb8a020bc6b03b239be8ae7dae717ecc40fa0a86fa" name="qemu-block-curl" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.12.1"/>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
</package>
<package pkgid="99334fa63ad3ecdf1ba4f5e607ab866b40135c7c42bdf38cabceeee3c5d3c967" name="qemu-block-curl" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.15.1"/>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
</package>
<package pkgid="b79c5ddf47a376bd643b02348d267cd3c59c4a4e79ee320d9eb492157da5a577" name="qemu-block-curl" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.15.1"/>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
</package>
<package pkgid="a0ecae280899da965dd7d40a5a8564d4597b39ddbb32eb85d0559aa7e1118c22" name="qemu-block-curl" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.15.1"/>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
</package>
<package pkgid="9663e539762ea3611d622fbeba291fc2ff2187307cd9cd395bd70752aea25ba8" name="qemu-block-curl" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.18.1"/>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
  <changelog author="dfaggioli@suse.com" date="1723550400">- Fix bsc#1227322, CVE-2024-4467:
  * qcow2: Don't open data_file with BDRV_O_NO_IO</changelog>
</package>
<package pkgid="e0232a2ea797455eecfd452fc7358a4295a42e05391bcfa8400bc25ce1b9a4bd" name="qemu-block-curl" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.18.1"/>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
  <changelog author="dfaggioli@suse.com" date="1723550400">- Fix bsc#1227322, CVE-2024-4467:
  * qcow2: Don't open data_file with BDRV_O_NO_IO</changelog>
</package>
<package pkgid="d098304f24b8ec05ad4e97c36827c96d968163a73e1dfc7c6a8a6ea090c223e3" name="qemu-block-curl" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.18.1"/>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
  <changelog author="dfaggioli@suse.com" date="1723550400">- Fix bsc#1227322, CVE-2024-4467:
  * qcow2: Don't open data_file with BDRV_O_NO_IO</changelog>
</package>
<package pkgid="20c9aee320c3bc133bc4592648e80832d2fae5839885e733e8ac5d57e391199f" name="qemu-block-curl" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="f022c5f0f914f4aeb63bc66bdbfaf243aa3416e6c96e10c4cc7ce8f9b87fc983" name="qemu-block-curl" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="19b186c26203d2a3790f82639fe909f6af0d9bd0cfbefe8a1ea1e6fdc8b18214" name="qemu-block-curl" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="ae4ea72945ea5b124d900d1b48dd69a710779d359ea7c5f4827115e1d180ad0b" name="qemu-block-curl" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="60d82021c90d4548419d17c8fb9f6dc8fb510a4593fbb91f915e63aed295bbcd" name="qemu-block-curl" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="52ffab8b8ce02039a08d58db2992f2bb23bd86cc2b42af0ca21f12bbdd94c7f9" name="qemu-block-curl" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="b9b67b3c8be70568d55d42eaa4b4873455d38fcf23a7c7e1443567615a968ead" name="qemu-chardev-spice" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.12.1"/>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
</package>
<package pkgid="70b7f6ede66cb7ddcad3f40f2f761c27f92f5d280527cb8b8b5176294dd4a877" name="qemu-chardev-spice" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.12.1"/>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
</package>
<package pkgid="5f8938bc11c375f1f2b98b8eaaf3f77d856f20b319606743950c5fd803c23fa6" name="qemu-chardev-spice" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.12.1"/>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
</package>
<package pkgid="4a1c462da83aba69f570ff3dadbe74e4a4373f25091d96b0ebf12a26dae729cd" name="qemu-chardev-spice" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.15.1"/>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
</package>
<package pkgid="b4f11a2b32281bea7ed01224aed7b459f1c4a957b0eee5bb06696521468b1559" name="qemu-chardev-spice" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.15.1"/>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
</package>
<package pkgid="a13bbea2aecb2008bebedf01ff04f4c22e3b719422c8246cf8eaa08bc54cf2f2" name="qemu-chardev-spice" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.15.1"/>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
</package>
<package pkgid="0e9f692253a63f9fee5b551df32eebe650c915dbaeb9dd9acd7095e46ef9a1dd" name="qemu-chardev-spice" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.18.1"/>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
  <changelog author="dfaggioli@suse.com" date="1723550400">- Fix bsc#1227322, CVE-2024-4467:
  * qcow2: Don't open data_file with BDRV_O_NO_IO</changelog>
</package>
<package pkgid="691ea3684d8d72e15fdad8045fa5a24cc64df0cc50d9cdf608b7d6a3cf99e8d0" name="qemu-chardev-spice" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.18.1"/>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
  <changelog author="dfaggioli@suse.com" date="1723550400">- Fix bsc#1227322, CVE-2024-4467:
  * qcow2: Don't open data_file with BDRV_O_NO_IO</changelog>
</package>
<package pkgid="ddde555f5a4600ef865d1f6bd1766dcf9db1d23421a1ddc79c682f4a4826034a" name="qemu-chardev-spice" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.18.1"/>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
  <changelog author="dfaggioli@suse.com" date="1723550400">- Fix bsc#1227322, CVE-2024-4467:
  * qcow2: Don't open data_file with BDRV_O_NO_IO</changelog>
</package>
<package pkgid="a693c8a2df4fbd4d073723da6941da9a5fb0d98ce978a4bbd0e305366ed846f3" name="qemu-chardev-spice" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="40efba64d1cf2fa57f87f03fa224e57b5fc71c9306b6b77ccacf84215736d63c" name="qemu-chardev-spice" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="9f077b7660f6740f49544ef3b01ee5fc6fb3d088b989d78f8f25f8ce006b8f82" name="qemu-chardev-spice" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="785671532852a12f77d4923979102cf172f0daaf0da49a3c0f53207f0eb429b3" name="qemu-chardev-spice" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="a041ed5796ddf8ce7906ce86132ac6b6abb8f11bc9f693d7dafb244cd633a5d2" name="qemu-chardev-spice" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="1f8d18192f58b75d52e8651722094fe0372f3a86be6cd2657f680db6b81f528e" name="qemu-chardev-spice" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="087dcd3bf650e51f8967f60160c56d46218ac96e88321c4ace60837eb6ca69c6" name="qemu-guest-agent" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.12.1"/>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
</package>
<package pkgid="f509f924b8d65474a9a67b0e8dbc9fcca19eb169a057541e0671486e620769de" name="qemu-guest-agent" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.12.1"/>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
</package>
<package pkgid="c8a91cfaaed6c009c18b8fd453c76804e8e0f68c40ebe083a648044064a16320" name="qemu-guest-agent" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.12.1"/>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
</package>
<package pkgid="a4fab8994d4ca91ac90b62c2b1b7bce869a1a0e3fb73a7e9bc62fed8f4deea37" name="qemu-guest-agent" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.15.1"/>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
</package>
<package pkgid="5ad01335404a84569f2fb165bdf6ccdfd6e0eb03d6bd7afbbd12609510ffee48" name="qemu-guest-agent" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.15.1"/>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
</package>
<package pkgid="ac84f3d58fefe4251980e3dd41527cf89e85cfa590be1a67e17181058478b23f" name="qemu-guest-agent" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.15.1"/>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
</package>
<package pkgid="d5b01b3d5f7c21ee8f37f8d6b77018683650737eea91d322e24aa060a2478f1e" name="qemu-guest-agent" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.18.1"/>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
  <changelog author="dfaggioli@suse.com" date="1723550400">- Fix bsc#1227322, CVE-2024-4467:
  * qcow2: Don't open data_file with BDRV_O_NO_IO</changelog>
</package>
<package pkgid="f17243281d2521d3fbf3d56eeb051b119c96e7b3d2348039e3da0d5894445e44" name="qemu-guest-agent" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.18.1"/>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
  <changelog author="dfaggioli@suse.com" date="1723550400">- Fix bsc#1227322, CVE-2024-4467:
  * qcow2: Don't open data_file with BDRV_O_NO_IO</changelog>
</package>
<package pkgid="0de9ce44ad3a42db6c09f0af2fc04e3585203e4582c6a16f941fb5891b3cbb45" name="qemu-guest-agent" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.18.1"/>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
  <changelog author="dfaggioli@suse.com" date="1723550400">- Fix bsc#1227322, CVE-2024-4467:
  * qcow2: Don't open data_file with BDRV_O_NO_IO</changelog>
</package>
<package pkgid="ed65cd22cbfa3ea3908161d8b7784d3b378069378acca68da71f67abc1ee397f" name="qemu-guest-agent" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="dd5e2d04b82d297f9efe5ea778422adb66188714c465b5cca723516dcf72a0e0" name="qemu-guest-agent" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="368b0329363bd37f3f1d31a428f681b63579d2ad9382c2aff0c8dc0333c66110" name="qemu-guest-agent" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="6a256913cbe094ccd360b414c975f0fa740375d1a39af3d4da04942da8962635" name="qemu-guest-agent" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="f0eb71aa11d76408b84479181117d20ef86e5554fa755bca128187a0094b331c" name="qemu-guest-agent" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="e1374c0adb2a553a887d77bca7df389656bc1d30a44b7c986a2d4176a91ed9e6" name="qemu-guest-agent" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="94c6f4d01f9583f02b61b9cb8c0eb01a339d191ef90240406072136c46599199" name="qemu-hw-display-qxl" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.12.1"/>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
</package>
<package pkgid="3589d5929c3076e13269c27b706bc5f032f180cfe935de2c17a0421ed04ea718" name="qemu-hw-display-qxl" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.12.1"/>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
</package>
<package pkgid="13173d5ff8259f4fd683e60e63e0e13a7c6e43c86cde17ced50933217a362b35" name="qemu-hw-display-qxl" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.12.1"/>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
</package>
<package pkgid="7c89bb4a6884f90214504b8913d6db2f6c7c70f2ba332bc1e9559918fa7aa5e5" name="qemu-hw-display-qxl" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.15.1"/>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
</package>
<package pkgid="fca4d8cb6924b6074469bf968b1b75fc9a172689de9a46f3b34ac6043be8e798" name="qemu-hw-display-qxl" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.15.1"/>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
</package>
<package pkgid="ac7c42c3a1cf48090d92591bd172914ad785c4cd8466f6d1d8963727651b8250" name="qemu-hw-display-qxl" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.15.1"/>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
</package>
<package pkgid="9c8089ea24a26a7a1819b4e354f134ef2e14e021cd0bd04563deefb3603e98e6" name="qemu-hw-display-qxl" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.18.1"/>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
  <changelog author="dfaggioli@suse.com" date="1723550400">- Fix bsc#1227322, CVE-2024-4467:
  * qcow2: Don't open data_file with BDRV_O_NO_IO</changelog>
</package>
<package pkgid="99656bc42f00931c39d3b227884e2d8c3b1d04f38d45479d9b1733da853e17ba" name="qemu-hw-display-qxl" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.18.1"/>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
  <changelog author="dfaggioli@suse.com" date="1723550400">- Fix bsc#1227322, CVE-2024-4467:
  * qcow2: Don't open data_file with BDRV_O_NO_IO</changelog>
</package>
<package pkgid="cbe5de1a245db84df0b9b9e70c60eadf2ea43ff7b3f561d3dc0efa4179e72ad7" name="qemu-hw-display-qxl" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.18.1"/>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
  <changelog author="dfaggioli@suse.com" date="1723550400">- Fix bsc#1227322, CVE-2024-4467:
  * qcow2: Don't open data_file with BDRV_O_NO_IO</changelog>
</package>
<package pkgid="fc8bd75a3ac138865bc8cd8abe1ced9b3d1f503c526e0ac2312424ae4eaff212" name="qemu-hw-display-qxl" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="92f622c996e8f89173673161e47a08ee5e17b9a51b2e370790eaa2564eec47d9" name="qemu-hw-display-qxl" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="ce7a1b6d4511299f4e434ba4e228eec70d5aebd6078512a76156405f87cd9277" name="qemu-hw-display-qxl" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="768a97ae60e79e40efe5b6054c0c3d7285314827b7e4da46ac8112b17de66aaa" name="qemu-hw-display-qxl" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="6fdd49d36b408c75c04d49409e8dfc3547fdd19d86d64fd3d59b0b4e9d12b9b1" name="qemu-hw-display-qxl" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="421aa65ff6cbd27b73ab29316b89f63880483ed830147ba96c78341b69642cf1" name="qemu-hw-display-qxl" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="725307e084a0eb42bc43e555fb4d73efdfeb113efc0be00c370ff97dbf01d4fe" name="qemu-hw-display-virtio-gpu" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.12.1"/>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
</package>
<package pkgid="8755b4ef413bb771ccf2b468ea1ed3bb9a3e781da4618cdfc8a8e9086b5c3c72" name="qemu-hw-display-virtio-gpu" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.12.1"/>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
</package>
<package pkgid="6657d27f5ca062c2a5f9dc18f3fb5cd5a717c798638ee8a93cae95edd97fb7cb" name="qemu-hw-display-virtio-gpu" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.12.1"/>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
</package>
<package pkgid="ee75050629177eec019ec82265257de2521689b9f1b937daf676736da3b80003" name="qemu-hw-display-virtio-gpu" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.15.1"/>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
</package>
<package pkgid="0fee6e56c5ddc8921966b21a6e5c180b7a8f72d9421f34a901aaf37f59bd356a" name="qemu-hw-display-virtio-gpu" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.15.1"/>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
</package>
<package pkgid="787616aa8838df641238738fbbd817cc07aef60a1a3511940f4c0c0373ef9540" name="qemu-hw-display-virtio-gpu" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.15.1"/>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
</package>
<package pkgid="4c8cbaab8d898136661c0589fa550bf227079eb02c013a33b5f1f2c8e615c11e" name="qemu-hw-display-virtio-gpu" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.18.1"/>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
  <changelog author="dfaggioli@suse.com" date="1723550400">- Fix bsc#1227322, CVE-2024-4467:
  * qcow2: Don't open data_file with BDRV_O_NO_IO</changelog>
</package>
<package pkgid="226f123b0f8bbc65c206e808d3adee7926c29d0d51d9425faaee4f181a66fe70" name="qemu-hw-display-virtio-gpu" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.18.1"/>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
  <changelog author="dfaggioli@suse.com" date="1723550400">- Fix bsc#1227322, CVE-2024-4467:
  * qcow2: Don't open data_file with BDRV_O_NO_IO</changelog>
</package>
<package pkgid="8992bf101444699b2668a75cb0328c5867f603d9e05219485308919417caa5ff" name="qemu-hw-display-virtio-gpu" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.18.1"/>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
  <changelog author="dfaggioli@suse.com" date="1723550400">- Fix bsc#1227322, CVE-2024-4467:
  * qcow2: Don't open data_file with BDRV_O_NO_IO</changelog>
</package>
<package pkgid="93d8fbce14956bde71cafad57bc51146ca763420d44ea9525a37c85ef98be1ed" name="qemu-hw-display-virtio-gpu" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="9bbed6f8dc977c6bf5981fc05e3a7ab6dd1d41478d4fe9b28fb60af62a9305e7" name="qemu-hw-display-virtio-gpu" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="b593ded4a51fd48a8275abe1a67bc47f729cb7b9b73d3b1dee468c88f4ae397f" name="qemu-hw-display-virtio-gpu" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="a9cd0ad1a37c205a7327670e46a4a16bf0c87354bae6c59730e6b4aafa093d1d" name="qemu-hw-display-virtio-gpu" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="b8478f743374802818d2ee8941cdd8e8bd1607e5e84be6120379c3fdcc641a80" name="qemu-hw-display-virtio-gpu" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="07e5f22a69ff501ed5e513e621dae6325543806c813446b75dd5b45a2671b53e" name="qemu-hw-display-virtio-gpu" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="5e43c5d6e1809dbbac50ff71a75b061a2751fbb75524f04a46a77acce18d5142" name="qemu-hw-display-virtio-vga" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.12.1"/>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
</package>
<package pkgid="e9dca108ebe1e67505d90091bca2c527af49dd99ad75f1e2e6dcecb8aadae772" name="qemu-hw-display-virtio-vga" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.12.1"/>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
</package>
<package pkgid="82f9721e3e894ef1df9b98f1afe9c8b99c3590a6523567dcab6faa16eeafbd0c" name="qemu-hw-display-virtio-vga" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.12.1"/>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
</package>
<package pkgid="584ede306f6e732f9ed82ac7dbeb4e63ca8e6ff24a97c7cf20a3b55824b0402b" name="qemu-hw-display-virtio-vga" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.15.1"/>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
</package>
<package pkgid="67e254df61e44c24302b4551bcfb9e40e3b009d7e39c1aa194975b0715170122" name="qemu-hw-display-virtio-vga" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.15.1"/>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
</package>
<package pkgid="5b2f69ce96fb977d08567927b946109bc50bfac0300cee5a54ae08ba4836e5a5" name="qemu-hw-display-virtio-vga" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.15.1"/>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
</package>
<package pkgid="90082f2da76b5b525d3402b1a328a118861e0112ef575a61f51335d167d8ffa6" name="qemu-hw-display-virtio-vga" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.18.1"/>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
  <changelog author="dfaggioli@suse.com" date="1723550400">- Fix bsc#1227322, CVE-2024-4467:
  * qcow2: Don't open data_file with BDRV_O_NO_IO</changelog>
</package>
<package pkgid="a6de7160fc99d0d08b1687d90573555fab8c493f3ce7e40283d087d41da59ed6" name="qemu-hw-display-virtio-vga" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.18.1"/>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
  <changelog author="dfaggioli@suse.com" date="1723550400">- Fix bsc#1227322, CVE-2024-4467:
  * qcow2: Don't open data_file with BDRV_O_NO_IO</changelog>
</package>
<package pkgid="8039a4c31d156476c1abe758e5be08ae3c257fc0d6db911aabc65acfeafaf087" name="qemu-hw-display-virtio-vga" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.18.1"/>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
  <changelog author="dfaggioli@suse.com" date="1723550400">- Fix bsc#1227322, CVE-2024-4467:
  * qcow2: Don't open data_file with BDRV_O_NO_IO</changelog>
</package>
<package pkgid="0208508433c639c0b97042f7b138a4719997dd0023523baad647186ccfad8155" name="qemu-hw-display-virtio-vga" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="66567372078fc1db2294132bb58010a690b6e07378bc6b2b727690d6e18aab4a" name="qemu-hw-display-virtio-vga" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="5d7167a40a756d9f86029670efca7d1239ca8b1e00261b4a4f0a4cf841939483" name="qemu-hw-display-virtio-vga" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="33a95690de54fb1d58dd0cbbd9eb4a9cbda87e3cbceb5eb47b8b6fca541301ad" name="qemu-hw-display-virtio-vga" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="99d1af1be0735122c5283a1e4263b9102d4da3c816b9c1f0f0bcffb26e9346af" name="qemu-hw-display-virtio-vga" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="ba786a07f28367d4550414ae4510434c036bf20e6a51eaa0fa6abb9606d6cff1" name="qemu-hw-display-virtio-vga" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="4fe0d48d44e72ab44e0c6647824ae125b7b9d8bf035a3cf72b0d35d6a13c481e" name="qemu-hw-usb-redirect" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.12.1"/>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
</package>
<package pkgid="d9b3cd4f09374d717363e60b51087b1b642a7238dd99ae3d8fdf75369f0fa76a" name="qemu-hw-usb-redirect" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.12.1"/>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
</package>
<package pkgid="4995e4d7a329d1aaa979d0a94b3dd858d44001556a03c7323f68cbfea8672a0a" name="qemu-hw-usb-redirect" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.12.1"/>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
</package>
<package pkgid="77cbd862acddc55c1878e0d285e71435e00e88865f33345d394fdb66ab93540a" name="qemu-hw-usb-redirect" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.15.1"/>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
</package>
<package pkgid="81b3e20640cd9a071141618174c59b57fbbdd3c326ec6d382afd1a706f03f9f2" name="qemu-hw-usb-redirect" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.15.1"/>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
</package>
<package pkgid="565251c5420357b6ecda6430d999e799fdf43d75c5a252885d9876b0a3b16a59" name="qemu-hw-usb-redirect" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.15.1"/>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
</package>
<package pkgid="902c53466c63f96ca67cc59d5cd7422b88d0bd9ae380bb25f0499680e8566d7b" name="qemu-hw-usb-redirect" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.18.1"/>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
  <changelog author="dfaggioli@suse.com" date="1723550400">- Fix bsc#1227322, CVE-2024-4467:
  * qcow2: Don't open data_file with BDRV_O_NO_IO</changelog>
</package>
<package pkgid="881c8ffdd0a6cb9183ffc484bcc2f89f1ccac97df7e3a832a5b6bf057d3ca063" name="qemu-hw-usb-redirect" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.18.1"/>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
  <changelog author="dfaggioli@suse.com" date="1723550400">- Fix bsc#1227322, CVE-2024-4467:
  * qcow2: Don't open data_file with BDRV_O_NO_IO</changelog>
</package>
<package pkgid="fda40b17c67845f5a6415c2b2368f3ebdab2eca4eb27dcb6dcb332766cbc6a5d" name="qemu-hw-usb-redirect" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.18.1"/>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
  <changelog author="dfaggioli@suse.com" date="1723550400">- Fix bsc#1227322, CVE-2024-4467:
  * qcow2: Don't open data_file with BDRV_O_NO_IO</changelog>
</package>
<package pkgid="9578559eb9b1540da86774cf8ebf27a6cfcc792af74a89a2138070720e50058a" name="qemu-hw-usb-redirect" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="a11bbf011674e85168716053a25e1787252b24d99109ddc35b0bac9e28c0e697" name="qemu-hw-usb-redirect" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="8ea3a65271ca19be7e54030b7dcdcbd42f51a070a8a77e374ddccd9179cfe9dd" name="qemu-hw-usb-redirect" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="4cf61fdeea8c5f54c059c163676752691c44e00c4b1229e2e2eda2af5ecf840b" name="qemu-hw-usb-redirect" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="a59d60ed9a4b248b6567268b34108fb197f13366387728f2d185d5344bf923e1" name="qemu-hw-usb-redirect" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="76e187b8240a45ac7c7e4d5ccf662d0a99bec4ea281416d23c7f6c9248b6b44a" name="qemu-hw-usb-redirect" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="8f2b24f9fcbc00755d283a3f113694320e6f22fe2523e910436975f95f6dfc98" name="qemu-ipxe" arch="noarch">
  <version epoch="0" ver="1.0.0+" rel="150500.49.12.1"/>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
</package>
<package pkgid="47e5bca1ade5d945929e5a82b805e8236e0f42c5b6ce1ca6e23f00401e7856f5" name="qemu-ipxe" arch="noarch">
  <version epoch="0" ver="1.0.0+" rel="150500.49.15.1"/>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
</package>
<package pkgid="4454f79eedc1ddf9a3ad8f3c9573daf3aa7f12f0024dd06fa70666d03913f5a7" name="qemu-ipxe" arch="noarch">
  <version epoch="0" ver="1.0.0+" rel="150500.49.18.1"/>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
  <changelog author="dfaggioli@suse.com" date="1723550400">- Fix bsc#1227322, CVE-2024-4467:
  * qcow2: Don't open data_file with BDRV_O_NO_IO</changelog>
</package>
<package pkgid="bb0d3cb553d4fa720469eb117f2a3405fdac5845c7f5e0c53790e14f8771d668" name="qemu-ipxe" arch="noarch">
  <version epoch="0" ver="1.0.0+" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="688282d8af1cd0fc90104489159ef4ce80382a98b0d2833b7b07416b09ea92b9" name="qemu-ipxe" arch="noarch">
  <version epoch="0" ver="1.0.0+" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="1c5e99dfe2c8ed95711400d2f1b813d1e60508a3d89e37db621054e8e4e760bf" name="qemu-s390x" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.12.1"/>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
</package>
<package pkgid="55d4f37cadef43f4e69b887fe2a735d725bd82f33e702cd4b14c4de577ec2327" name="qemu-s390x" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.15.1"/>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
</package>
<package pkgid="45ae938f6c50949d80681975bd6ff91f55430ce834712fd4fc7ebf430ce00ab8" name="qemu-s390x" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.18.1"/>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
  <changelog author="dfaggioli@suse.com" date="1723550400">- Fix bsc#1227322, CVE-2024-4467:
  * qcow2: Don't open data_file with BDRV_O_NO_IO</changelog>
</package>
<package pkgid="b9975641277df6d6d58c48397132336e58accbf9872bbd3bd0f937808c145e4c" name="qemu-s390x" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="02dd0ecaa35a564861553b61dae574268a02552d88b0b95212693c88a80b398f" name="qemu-s390x" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="39881cff0906742a9ff027d98160317d3a51ebff087f6b2fee0735297ccb55e3" name="qemu-seabios" arch="noarch">
  <version epoch="0" ver="1.16.0_0_gd239552" rel="150500.49.12.1"/>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
</package>
<package pkgid="9d22b3f865fdb12589886d33f025d03f47782d74caf881215bb255555497dc65" name="qemu-seabios" arch="noarch">
  <version epoch="0" ver="1.16.0_0_gd239552" rel="150500.49.15.1"/>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
</package>
<package pkgid="f86ce8c956253370f555b4fccdf74fdcb61787229eeb0da227a2f83be482f678" name="qemu-seabios" arch="noarch">
  <version epoch="0" ver="1.16.0_0_gd239552" rel="150500.49.18.1"/>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
  <changelog author="dfaggioli@suse.com" date="1723550400">- Fix bsc#1227322, CVE-2024-4467:
  * qcow2: Don't open data_file with BDRV_O_NO_IO</changelog>
</package>
<package pkgid="036276a00f609fda952675ad8e8d85fb8e11992e8d895a9e817a375de43c037f" name="qemu-seabios" arch="noarch">
  <version epoch="0" ver="1.16.0_0_gd239552" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="3ed4ce455e14273b6c5a2db2aef7e4c195cccb7b9782b701ec22468b182f7cd0" name="qemu-seabios" arch="noarch">
  <version epoch="0" ver="1.16.0_0_gd239552" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="1052a35b935ad9c6e30820628fb4ec10cd60ec2616c31895e91288c8e8405b2b" name="qemu-sgabios" arch="noarch">
  <version epoch="0" ver="8" rel="150500.49.12.1"/>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
</package>
<package pkgid="d5979d15c8387b581a7165d1374c8a898cd87eae417758ad7ffcb09649261979" name="qemu-sgabios" arch="noarch">
  <version epoch="0" ver="8" rel="150500.49.15.1"/>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
</package>
<package pkgid="f37e66e7a2b6f880e78d4d35a3f43174e4bbb3b3e6cfbaa2ff7ad665e0aafc6e" name="qemu-sgabios" arch="noarch">
  <version epoch="0" ver="8" rel="150500.49.18.1"/>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
  <changelog author="dfaggioli@suse.com" date="1723550400">- Fix bsc#1227322, CVE-2024-4467:
  * qcow2: Don't open data_file with BDRV_O_NO_IO</changelog>
</package>
<package pkgid="e840913f1330a790a9c28efc498ec1ecd1faafa9fd119f6f14e0a888627f21ab" name="qemu-sgabios" arch="noarch">
  <version epoch="0" ver="8" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="72847c5937777279ae7ca3b6aadc3dce3a0042fdb761a16024bf0ea2cab37fcc" name="qemu-sgabios" arch="noarch">
  <version epoch="0" ver="8" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="25b82cfe08f8369ccd1419a4b76842e467e32eacc3f5096a9a8ee79c9ebf377f" name="qemu-tools" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.12.1"/>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
</package>
<package pkgid="64c19731492f24db392dec116036c0ab7cf2092ca93a38b08077ddf1d30eb678" name="qemu-tools" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.12.1"/>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
</package>
<package pkgid="c34d661d7bf45b8d586d66b18d127f409bf0aa52b79c3aad9e71fde073aa5ba7" name="qemu-tools" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.12.1"/>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
</package>
<package pkgid="cc7f48fa4d03d3ec4b3e3902a8bd75846cd3603a75a2ef5e10a0d4b12a7dd4d8" name="qemu-tools" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.15.1"/>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
</package>
<package pkgid="e1f61dd6b34e446eb1d9c828d13962b9b336803189976fa4d32c27481d55feb5" name="qemu-tools" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.15.1"/>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
</package>
<package pkgid="969e106034b8f0113d350a0d44b172421dd39487b0099c0f2cccb526286bf9cf" name="qemu-tools" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.15.1"/>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
</package>
<package pkgid="55a53ce78cbc63d72b90c45f2ca7e20f5153637d91b95b5d874cd84c2638c071" name="qemu-tools" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.18.1"/>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
  <changelog author="dfaggioli@suse.com" date="1723550400">- Fix bsc#1227322, CVE-2024-4467:
  * qcow2: Don't open data_file with BDRV_O_NO_IO</changelog>
</package>
<package pkgid="4ef513083daa59cda38d108aa195bf2652bc1e1e823faf28d18924bb47bfb4fd" name="qemu-tools" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.18.1"/>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
  <changelog author="dfaggioli@suse.com" date="1723550400">- Fix bsc#1227322, CVE-2024-4467:
  * qcow2: Don't open data_file with BDRV_O_NO_IO</changelog>
</package>
<package pkgid="4edffc704ac2be9d30a4d3a4948a2313bd0edbdbfa6b5d5d816d8982c2805b78" name="qemu-tools" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.18.1"/>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
  <changelog author="dfaggioli@suse.com" date="1723550400">- Fix bsc#1227322, CVE-2024-4467:
  * qcow2: Don't open data_file with BDRV_O_NO_IO</changelog>
</package>
<package pkgid="1179ac0520b77802bdbb0622803ec70240a0ef09ff5b20e3f39c71741888de75" name="qemu-tools" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="a3e7ab7af2b0595c845cd65b699e3f1ca0fdbe78a7977fb08543d0d3191149e0" name="qemu-tools" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="127283823fc8dc12f7403c9ddb7ed84d1fa98a72ba820aa795ac937552bff45b" name="qemu-tools" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="f0a2235f503ecc98a17789c3801baa69e811b9e1c9fa830096f3ab9997730e0f" name="qemu-tools" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="9a4e5d2df748421cb59af4967eb2a931836e29a96841b0250d5570e2031aa56f" name="qemu-tools" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="fdb2e5070558ffeceb62c47a7fae6effaf6c9dd1f2068ae97bf6f5ffe83a1032" name="qemu-tools" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="f9257891eed0575317f1d24b62869804ec0386be89a9e0cbc10e02b52a467fa0" name="qemu-ui-opengl" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.12.1"/>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
</package>
<package pkgid="22bd85b6834bd8aa9eae0d5c96f1e460e8d4d5b7e8ecf4fdfa50c0a05979f071" name="qemu-ui-opengl" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.12.1"/>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
</package>
<package pkgid="01c92711a09e82259611b9f9ebc1e2834f07b2b14104142cd881fbdec4bb16a8" name="qemu-ui-opengl" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.12.1"/>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
</package>
<package pkgid="f1c27dfad8755f2ac8f4e62fb0ce4782d415be0a10bd1c2ad1e0ce0bc485bd7d" name="qemu-ui-opengl" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.15.1"/>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
</package>
<package pkgid="9e70d9d6b1e2b59bbc7c33dcce799325664bbc89311f9f47aeae43ab40722778" name="qemu-ui-opengl" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.15.1"/>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
</package>
<package pkgid="d7fbe5ac78d39651c1e5d5b8bcefc73ea78ea5da5b1e6e4eb1e56a2d57fc0789" name="qemu-ui-opengl" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.15.1"/>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
</package>
<package pkgid="204fcd3634208a4f0752db22cb58a01c58835bdef02b2af585c5dd7038688488" name="qemu-ui-opengl" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.18.1"/>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
  <changelog author="dfaggioli@suse.com" date="1723550400">- Fix bsc#1227322, CVE-2024-4467:
  * qcow2: Don't open data_file with BDRV_O_NO_IO</changelog>
</package>
<package pkgid="8f453aa710a26b80b1212a36d95d6c11494df2db8be5b5a80d114784726ed120" name="qemu-ui-opengl" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.18.1"/>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
  <changelog author="dfaggioli@suse.com" date="1723550400">- Fix bsc#1227322, CVE-2024-4467:
  * qcow2: Don't open data_file with BDRV_O_NO_IO</changelog>
</package>
<package pkgid="90d5dee2d9a8de3596b6bce4df76c4dbdd4d7ce6f244288d68736af32834826c" name="qemu-ui-opengl" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.18.1"/>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
  <changelog author="dfaggioli@suse.com" date="1723550400">- Fix bsc#1227322, CVE-2024-4467:
  * qcow2: Don't open data_file with BDRV_O_NO_IO</changelog>
</package>
<package pkgid="ba1f2f93c249f1761cac999ed66b2b977364defcae4dfbdb314beea2152f2f46" name="qemu-ui-opengl" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="e2c38fa709f1e93d12e2306c85d1d9f991337fe39ed921606520628243413dfb" name="qemu-ui-opengl" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="74d980c4afab5277dc9d8b4496bc2606b08c2d91abaaf34ab09e3a87cf98cb02" name="qemu-ui-opengl" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="bdf8859e916560c931ba501ad423f042e4cb1ff0f120c78b5219fec25be01e68" name="qemu-ui-opengl" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="f07bf3c4095d1d391b42a9fe757fb5b39e57f72b28a50862608c2493bb18b9e5" name="qemu-ui-opengl" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="5649582e63ed5542895c39c676d10039fdc7745d7d09d84dc59f6c7d21142127" name="qemu-ui-opengl" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.9.2"/>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
</package>
<package pkgid="917690dea8885e0cfff98eda2b23d9b1f2a8cea368b4ff811e9b416cc85cf156" name="qemu-ui-spice-core" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.12.1"/>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
</package>
<package pkgid="e8b2342183a627d681e3edda8387ec78f33f2116dd7c70409f258c84a4998d75" name="qemu-ui-spice-core" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.12.1"/>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
</package>
<package pkgid="08c2248b77bcb5135700c1ad33286c14222dd7332524d105cdae925441766fec" name="qemu-ui-spice-core" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.12.1"/>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
</package>
<package pkgid="958342fe16c187169717fef3cdfbc6cbe40a4b25317fe77e8365cd8645eca6c6" name="qemu-ui-spice-core" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.15.1"/>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
</package>
<package pkgid="aa0c7702841866d4771e9ded26059f9695aec6eafdfbc073d419276451d73328" name="qemu-ui-spice-core" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.15.1"/>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
</package>
<package pkgid="0a5b6d1355beeb37c2434629795072c5ba674cd573985fa97605132839ff793c" name="qemu-ui-spice-core" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.15.1"/>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
</package>
<package pkgid="4aa4744a8a2ec6c3c9e300ee101c335e86be4585670fd14d9d0a4cfdee8ae5ed" name="qemu-ui-spice-core" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.18.1"/>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
  <changelog author="dfaggioli@suse.com" date="1723550400">- Fix bsc#1227322, CVE-2024-4467:
  * qcow2: Don't open data_file with BDRV_O_NO_IO</changelog>
</package>
<package pkgid="78fa772fea64c1d2b048a93c3dcd0bb26d9e01de40f683f48c960c337a4f01cc" name="qemu-ui-spice-core" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.18.1"/>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
  <changelog author="dfaggioli@suse.com" date="1723550400">- Fix bsc#1227322, CVE-2024-4467:
  * qcow2: Don't open data_file with BDRV_O_NO_IO</changelog>
</package>
<package pkgid="1988f38d2519e4592eabe876a97458405b177d7e6b576af5fd1f5f37bf4bf006" name="qemu-ui-spice-core" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150500.49.18.1"/>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
  <changelog author="dfaggioli@suse.com" date="1701259200">- Fix bsc#1188609, bsc#1213925, bsc#1212850, bsc#1215311, bsc#1213210:
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638)
  * virtio-crypto: verify src&amp;dst buffer length for sym request (CVE-2023-3180)
  * io: remove io watch if TLS channel is closed during handshake (CVE-2023-3354)
  * [openSUSE] roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec
  * target/s390x: Fix the "ignored match" case in VSTRS
  * linux-user/elfload: Enable vxe2 on s390x</changelog>
  <changelog author="dfaggioli@suse.com" date="1710763200">- Bugs and CVEs fixes:
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)
  * pcie: Introduce pcie_sriov_num_vfs (bsc#1220065, CVE-2024-26328)
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * hw/pvrdma: Protect against buggy or malicious guest driver (bsc#1209554, CVE-2023-1544)
  * pcie_sriov: Validate NumVFs (bsc#1220062, CVE-2024-26327)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)
  * s390x/ap: Wire up the device request notifier interface (bsc#1205316)
  * linux-headers: update to v6.5-rc1 (bsc#1205316)
  * Update linux headers to v6.3rc5 (bsc#1205316)
  * linux-headers: Update to v6.2-rc8 (bsc#1205316)
  * linux-headers: Update to v6.1 (bsc#1205316)
- Backport of SapphireRapids CPU Models (jsc#PED-8113):
  * target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  * target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  * docs: re-generate x86_64 ABI compatibility CSV
  * target/i386: Add new CPU model GraniteRapids
  * target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  * target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  * target/i386: Allow MCDT_NO if host supports
  * target/i386: Add support for MCDT_NO in CPUID enumeration
  * target/i386: Adjust feature level according to FEAT_7_1_EDX
  * target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  * target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  * target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  * target/i386: Add support for AVX-IFMA in CPUID enumeration
  * target/i386: Add support for AMX-FP16 in CPUID enumeration
  * target/i386: Add support for CMPCCXADD in CPUID enumeration
  * target/i386: add support for FB_CLEAR feature
  * target/i386: add support for FLUSH_L1D feature
  * i386: Add new CPU model SapphireRapids
  * target/i386: KVM: allow fast string operations if host supports them
  * target/i386: add FZRM, FSRS, FSRC
  * target/i386: add FSRM to TCG
- Backport of EPYC-Genoa CPU Model (jsc#PED-7366):
  * target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  * target/i386: Add VNMI and automatic IBRS feature bits
  * target/i386: Add missing feature bits in EPYC-Milan model
  * target/i386: Add feature bits for CPUID_Fn80000021_EAX
  * target/i386: Add a couple of feature bits in 8000_0008_EBX
  * target/i386: Add new EPYC CPU versions with updated cache_info
  * target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: add asserts for update and request (bsc#1218889, CVE-2023-6683)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * memory: prevent dma-reentracy issues (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)</changelog>
  <changelog author="dfaggioli@suse.com" date="1723550400">- Fix bsc#1227322, CVE-2024-4467:
  * qcow2: Don't open data_file with BDRV_O_NO_IO</changelog>
</package>
<package pkgid="50c76f4230fe91167c9804ac6eb2c87941a5aeaa05bcb0ca6b0a4ef15e93a54b" name="qemu-ui-spice-core" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
  linux-user: fill out task state in /proc/self/stat
  test-vmstate: fix bad GTree usage, use-after-free
  qemu/osdep: Switch position of "extern" and "G_NORETURN"</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
- Patches added:
  * Run fstat asynchronously inside coroutines (bsc#1211000)
  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
  * Convert query-named-block-nodes to coroutine (bsc#1211000)
  * Convert query-block/info_block to coroutine (bsc#1211000)
  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
  * [openSUSE][RPM] Backport some spec-file improvements from Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1690459200">- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
  bsc#1181740, bsc#1213001
  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  * 9pfs: prevent opening special files (CVE-2023-2861)
  * hw/ide/piix: properly initialize the BMIBA register
  * ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5</changelog>
</package>
<package pkgid="d23f2975c6414ac21473e92aefecf4ecd2d78b7e350f004c325caf6f4dda7551" name="qemu-ui-spice-core" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150500.49.6.1"/>
  <changelog author="dfaggioli@suse.com" date="1665144000">- Fixes bsc#1204082
  * Patches added:
  block-io_uring-revert-Use-io_uring_regis.patch</changelog>
  <changelog author="hpj@urpla.net" date="1665403200">- Build fails due to exceeding 10 GB disk limit (10430 MB):
  raise disk space contraint to 12 GB</changelog>
  <changelog author="dfaggioli@suse.com" date="1666612800">- Improve dependency handling (e.g., what's recommended vs. what's
  required.
- Add a subpackage (qemu-headless) that brings in all the packages
  that are needed for creating VMs with tools like virt-install
  or VirtManager, run either locally or from a remote host.
  (bsc#1202166)</changelog>
  <changelog author="dfaggioli@suse.com" date="1666785600">- qtests test are not realiable when run inside OBS builders, so
  let's disable that part of the testsuite for now. There is work
  ongoing to run it somewhere else (on dedicated hosts) to avoid
  loosing coverage. (bsc#1204566)</changelog>
  <changelog author="schwab@suse.de" date="1667476800">- Enable KVM support on riscv64</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1667995200">- install SeaBIOS documentation</changelog>
  <changelog author="dfaggioli@suse.com" date="1668600000">- Raise the maximum number of vCPUs a VM can have to 1024 (jsc#PED-2592)
  * Patches added:
  pc-q35-Bump-max_cpus-to-1024.patch</changelog>
  <changelog author="dmueller@suse.com" date="1672920000">- install binfmt-misc handlers for systemd (bsc#1206838)</changelog>
  <changelog author="li.zhang@suse.com" date="1673438400">- Fixes jsc#PED-1716
  * Patches added:
  configure-Add-Wno-gnu-variable-sized-typ.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  Update-linux-headers-to-v6.0-rc4.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820800">- Rename submodule patches so that it's clear which ones
  are backports and which ones are downstream only fixes;
- No functional change intended.
  * Patches dropped:
  Ignore-spurious-GCC-12-warning.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  Makefile-define-endianess-for-cross-buil.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  Silence-GCC-12-spurious-warnings.patch
  build-be-explicit-about-mx86-used-note-n.patch
  enable-cross-compilation-on-ARM.patch
  stub-out-the-SAN-req-s-in-int13.patch
  help-compiler-out-by-initializing-array.patch
  seabios-switch-to-python3-as-needed.patch
  * Patches added:
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1674820801">- Refactor building and installing SeaBIOS docs</changelog>
  <changelog author="dfaggioli@suse.com" date="1676030400">- Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165),
  bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139
- Improved handling of: bsc#1202282 (jsc#PED-2592)
  * Patches dropped:
  pc-q35-Bump-max_cpus-to-1024.patch
  * Patches added:
  accel-abort-if-we-fail-to-load-the-accel.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-support-for-type-8-port-connec.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1676289600">- Fixes: jsc#PED-1716  Add S390 features from IBM requirements
  * Patches added:
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  include-elf.h-add-s390x-note-types.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pv-Add-dump-support.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677153600">- Fixes bsc#1197653, CVE-2022-1050
  * Patches added:
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677240000">- Fix build issue with Linux 6.2's headers (bsc#1208657) by dropping
  linux-user-add-more-compat-ioctl-definit.patch and adding
  Revert-linux-user-fix-compat-with-glibc-.patch
- Patches meson-enforce-a-minimum-Linux-kernel-hea.patch and
  linux-user-drop-conditionals-for-obsolet.patch were added
  as downstream patches as they were part of a series, but
  they never made it upstream, so we don't want them here
  either
  * Patches dropped:
  linux-user-add-more-compat-ioctl-definit.patch
  linux-user-drop-conditionals-for-obsolet.patch
  meson-enforce-a-minimum-Linux-kernel-hea.patch
  * Patches added:
  Revert-linux-user-fix-compat-with-glibc-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678363200">- Fix bsc#1209064
  * Patches added:
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1684929600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory.
  * Patches no longer present as patch files, but applied as commits:
  Disable-some-tests-that-have-problems-in.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-linux-user-fix-compat-with-glibc-.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Revert-tests-qtest-enable-more-vhost-use.patch
  Update-linux-headers-to-v6.0-rc4.patch
  accel-abort-if-we-fail-to-load-the-accel.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  bios-tables-test-add-test-for-number-of-.patch
  bios-tables-test-teach-test-to-use-smbio.patch
  block-Handle-curl-7.55.0-7.85.0-version-.patch
  block-io_uring-revert-Use-io_uring_regis.patch
  configure-Add-Wno-gnu-variable-sized-typ.patch
  dmg-warn-when-opening-dmg-images-contain.patch
  dump-Add-architecture-section-and-sectio.patch
  dump-Refactor-dump_iterate-and-introduce.patch
  dump-Reintroduce-memory_offset-and-secti.patch
  dump-Rename-write_elf-_phdr_note-to-prep.patch
  dump-Rename-write_elf_loads-to-write_elf.patch
  dump-Reorder-struct-DumpState.patch
  dump-Replace-opaque-DumpState-pointer-wi.patch
  dump-Rework-dump_calculate_size-function.patch
  dump-Rework-filter-area-variables.patch
  dump-Rework-get_start_block.patch
  dump-Split-elf-header-functions-into-pre.patch
  dump-Use-a-buffer-for-ELF-section-data-a.patch
  dump-Write-ELF-section-headers-right-aft.patch
  hw-acpi-erst.c-Fix-memory-handling-issue.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-smbios-add-core_count2-to-smbios-tabl.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-smbios-support-for-type-8-port-connec.patch
  include-elf.h-add-s390x-note-types.patch
  increase-x86_64-physical-bits-to-42.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-remove-conditionals-for-many-.patch
  linux-user-use-max-as-default-CPU-model-.patch
  linux-user-use-target_ulong.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  meson-remove-pkgversion-from-CONFIG_STAM.patch
  module-add-Error-arguments-to-module_loa.patch
  module-removed-unused-function-argument-.patch
  module-rename-module_load_one-to-module_.patch
  net-tulip-Restrict-DMA-engine-to-memorie.patch
  openSUSE-Basetools-Ignore-spurious-GCC-1.patch
  openSUSE-Makefile-Fix-csum8-to-be-built-.patch
  openSUSE-Makefile-define-endianess-for-c.patch
  openSUSE-Makefile-fix-issues-of-build-re.patch
  openSUSE-add-cross.ini-file-to-handle-aa.patch
  openSUSE-build-Makefile-fix-issues-of-bu.patch
  openSUSE-build-Silence-GCC-12-spurious-w.patch
  openSUSE-build-be-explicit-about-mx86-us.patch
  openSUSE-build-enable-cross-compilation-.patch
  openSUSE-pc-q35-Bump-max_cpus-to-1024.patch
  openSUSE-pcbios-stub-out-the-SAN-req-s-i.patch
  openSUSE-switch-to-python3-as-needed.patch
  openSUSE-test-help-compiler-out-by-initi.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-bridge-helper-reduce-security-profi.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  s390x-Add-KVM-PV-dump-interface.patch
  s390x-Add-protected-dump-cap.patch
  s390x-Introduce-PV-query-interface.patch
  s390x-pci-add-routine-to-get-host-functi.patch
  s390x-pci-don-t-fence-interpreted-device.patch
  s390x-pci-enable-adapter-event-notificat.patch
  s390x-pci-enable-for-load-store-interpre.patch
  s390x-pci-let-intercept-devices-have-sep.patch
  s390x-pci-reflect-proper-maxstbl-for-gro.patch
  s390x-pci-reset-ISM-passthrough-devices-.patch
  s390x-pci-shrink-DMA-aperture-to-be-boun.patch
  s390x-pv-Add-dump-support.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  tests-acpi-allow-changes-for-core_count2.patch
  tests-acpi-update-tables-for-new-core-co.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685016000">- Fix bsc#bsc#1211697
  * Patches added:
  smbios: sanitize type from external type befor